@nocobase/app-plugin-agents 0.0.0-stage → 0.1.0-beta.1

package/dist/server/core/agents/agent.store.js

@@ -0,0 +1,152 @@
+import { AGENT_TOOLS } from '@nocobase/agent-protocol';
+import { jsonObject, stringArray } from '../../kernel/values.js';
+import { attachedSkillIdsOf } from '../skills/skill.store.js';
+const AGENTS = 'agAgents';
+const AGENT_USERS = 'agAgentUsers';
+export function agentsRepo(conn) {
+    return conn.repository(AGENTS);
+}
+function agentUsers(conn) {
+    return conn.repository(AGENT_USERS);
+}
+const text = (value) => typeof value === 'string' && value.trim() !== '' ? value : null;
+/** The stored entries of an agent of `type`, dropping what does not fit it. */
+export function entriesOf(type, value) {
+    let list = value;
+    if (typeof list === 'string') {
+        try {
+            list = JSON.parse(list);
+        }
+        catch {
+            list = [];
+        }
+    }
+    const entries = [];
+    for (const item of Array.isArray(list) ? list : []) {
+        if (item === null || typeof item !== 'object')
+            continue;
+        const raw = item;
+        const model = text(raw.model);
+        const effort = text(raw.effort);
+        if (type === 'runner') {
+            const tool = raw.tool;
+            if (typeof tool === 'string' && AGENT_TOOLS.includes(tool))
+                entries.push({ tool: tool, model, effort });
+            continue;
+        }
+        const modelService = text(raw.modelService);
+        if (modelService && model)
+            entries.push({ modelService, model, effort });
+    }
+    return entries;
+}
+/** A stored `{ key, ns }` i18n reference, or null. */
+function i18nTextOf(value) {
+    const object = jsonObject(value);
+    return typeof object.key === 'string' && typeof object.ns === 'string'
+        ? { key: object.key, ns: object.ns }
+        : null;
+}
+export function toAgent(record, userIds, skillIds) {
+    const toolPolicy = record.toolPolicy === null ? null : jsonObject(record.toolPolicy);
+    return {
+        id: record.id,
+        name: record.name,
+        description: record.description,
+        nameText: i18nTextOf(record.nameText),
+        descriptionText: i18nTextOf(record.descriptionText),
+        avatar: record.avatar,
+        type: record.type,
+        modelEntries: entriesOf(record.type, record.modelEntries),
+        instructions: record.instructions,
+        actions: stringArray(record.actions),
+        confirmChanges: record.confirmChanges === 'always' ? 'always' : 'larger',
+        access: record.access,
+        userIds,
+        ownerUserId: record.ownerUserId,
+        runnerIds: stringArray(record.runnerIds),
+        skillIds,
+        maxConcurrentRuns: Number(record.maxConcurrentRuns),
+        maxAttempts: Number(record.maxAttempts),
+        toolPolicy,
+        archivedAt: record.archivedAt,
+        revision: Number(record.revision),
+        createdAt: record.createdAt,
+        updatedAt: record.updatedAt,
+    };
+}
+export async function usersOf(conn, agentIds) {
+    const result = new Map();
+    if (agentIds.length === 0)
+        return result;
+    const rows = await agentUsers(conn).findMany({
+        filter: (f) => f.or(agentIds.map((id) => f.string('agentId').eq(id))),
+        sort: (sort) => sort.field('createdAt').asc(),
+    });
+    for (const row of rows) {
+        const list = result.get(row.agentId) ?? [];
+        list.push(row.userId);
+        result.set(row.agentId, list);
+    }
+    return result;
+}
+export async function findAgent(conn, id) {
+    const record = await agentsRepo(conn).findOne({ filter: { id } });
+    if (!record)
+        return null;
+    return toAgent(record, (await usersOf(conn, [id])).get(id) ?? [], (await attachedSkillIdsOf(conn, 'agent', [id])).get(id) ?? []);
+}
+export async function listAgents(conn, includeArchived) {
+    const records = await agentsRepo(conn).findMany({
+        ...(includeArchived ? {} : { filter: (f) => f.date('archivedAt').empty() }),
+        sort: (sort) => [sort.field('name').asc(), sort.field('id').asc()],
+    });
+    const ids = records.map((record) => record.id);
+    const users = await usersOf(conn, ids);
+    const skills = await attachedSkillIdsOf(conn, 'agent', ids);
+    return records.map((record) => toAgent(record, users.get(record.id) ?? [], skills.get(record.id) ?? []));
+}
+export async function insertAgent(conn, values) {
+    await agentsRepo(conn).createOne({
+        values: { ...values, lastClaimAt: null, archivedAt: null, revision: 1 },
+    });
+}
+export async function updateAgent(conn, id, values) {
+    await agentsRepo(conn).updateMany({ filter: { id }, values });
+}
+/**
+ * Writes a change to the agent's configuration made against `revision`, raising it by one. False, writing nothing,
+ * when the agent is no longer at that revision.
+ */
+export async function reviseAgent(conn, id, revision, values) {
+    const { updatedCount } = await agentsRepo(conn).updateMany({
+        filter: { id, revision },
+        values: { ...values, revision: revision + 1 },
+    });
+    return updatedCount > 0;
+}
+export async function deleteAgent(conn, id) {
+    await agentUsers(conn).deleteMany({ filter: { agentId: id } });
+    await conn
+        .repository('agAgentChanges')
+        .deleteMany({ filter: { agentId: id } });
+    await agentsRepo(conn).deleteMany({ filter: { id } });
+}
+export async function replaceUsers(conn, agentId, userIds, ids, now) {
+    await agentUsers(conn).deleteMany({ filter: { agentId } });
+    for (const userId of userIds)
+        await agentUsers(conn).createOne({
+            values: { id: ids(), agentId, userId, createdAt: now },
+        });
+}
+/**
+ * Takes the agent's claim lock: an update of its row, which on databases with row locks makes concurrent claims for
+ * the same agent wait for each other until the claiming transaction ends.
+ */
+export async function lockAgentForClaim(conn, id, now) {
+    await agentsRepo(conn).updateMany({
+        filter: { id },
+        values: { lastClaimAt: now },
+    });
+}
+//# sourceMappingURL=agent.store.js.map

package/dist/server/core/agents/agent.store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.store.js","sourceRoot":"","sources":["../../../../server/core/agents/agent.store.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,WAAW,EAAkB,MAAM,0BAA0B,CAAC;AASvE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,MAAM,MAAM,GAAG,UAAU,CAAC;AAC1B,MAAM,WAAW,GAAG,cAAc,CAAC;AAkCnC,MAAM,UAAU,UAAU,CAAC,IAAwB;IACjD,OAAO,IAAI,CAAC,UAAU,CAAc,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,UAAU,CAAC,IAAwB;IAC1C,OAAO,IAAI,CAAC,UAAU,CAAkB,WAAW,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,KAAc,EAAiB,EAAE,CAC7C,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAElE,+EAA+E;AAC/E,MAAM,UAAU,SAAS,CAAC,IAAe,EAAE,KAAc;IACvD,IAAI,IAAI,GAAY,KAAK,CAAC;IAC1B,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAClE,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QACxD,MAAM,GAAG,GAAG,IAA+B,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YACtB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAiB,CAAC;gBACrE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAiB,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3D,SAAS;QACX,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC5C,IAAI,YAAY,IAAI,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,sDAAsD;AACtD,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;QACpE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE;QACpC,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,UAAU,OAAO,CACrB,MAAmB,EACnB,OAA0B,EAC1B,QAA2B;IAE3B,MAAM,UAAU,GACd,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACpE,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC;QACrC,eAAe,EAAE,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC;QACnD,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC,IAAiB;QAC9B,YAAY,EAAE,SAAS,CAAC,MAAM,CAAC,IAAiB,EAAE,MAAM,CAAC,YAAY,CAAC;QACtE,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC;QACpC,cAAc,EAAE,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;QACxE,MAAM,EAAE,MAAM,CAAC,MAAqB;QACpC,OAAO;QACP,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC;QACxC,QAAQ;QACR,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACnD,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;QACvC,UAAU;QACV,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,IAAwB,EACxB,QAA2B;IAE3B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;QAC3C,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACrE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE;KAC9C,CAAC,CAAC;IACH,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAwB,EACxB,EAAU;IAEV,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,OAAO,CACZ,MAAM,EACN,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EACzC,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAC9D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAwB,EACxB,eAAwB;IAExB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;QAC9C,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC3E,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;KACnE,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC5D,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC5B,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CACzE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAwB,EACxB,MAAoE;IAEpE,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC;QAC/B,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE;KACxE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAwB,EACxB,EAAU,EACV,MAAsD;IAEtD,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAChE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAwB,EACxB,EAAU,EACV,QAAgB,EAChB,MAAmE;IAEnE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC;QACzD,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;QACxB,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,CAAC,EAAE;KAC9C,CAAC,CAAC;IACH,OAAO,YAAY,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAwB,EACxB,EAAU;IAEV,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/D,MAAM,IAAI;SACP,UAAU,CAAC,gBAAgB,CAAC;SAC5B,UAAU,CAAC,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAwB,EACxB,OAAe,EACf,OAA0B,EAC1B,GAAiB,EACjB,GAAW;IAEX,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAC3D,KAAK,MAAM,MAAM,IAAI,OAAO;QAC1B,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC;YAC/B,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE;SACvD,CAAC,CAAC;AACP,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAwB,EACxB,EAAU,EACV,GAAW;IAEX,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC;QAChC,MAAM,EAAE,EAAE,EAAE,EAAE;QACd,MAAM,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE;KAC7B,CAAC,CAAC;AACL,CAAC"}

package/dist/server/core/agents/index.d.ts

@@ -0,0 +1,4 @@
+export { AgentInputSchema, AgentPatchSchema, createAgentService, type AgentService, type AgentServiceDeps, } from './agent.service.js';
+export { findAgent, listAgents, lockAgentForClaim } from './agent.store.js';
+export { createAgentActionCatalog, type AgentActionCatalog, } from './actions.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/core/agents/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/core/agents/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,YAAY,EACjB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EACL,wBAAwB,EACxB,KAAK,kBAAkB,GACxB,MAAM,cAAc,CAAC"}

package/dist/server/core/agents/index.js

@@ -0,0 +1,4 @@
+export { AgentInputSchema, AgentPatchSchema, createAgentService, } from './agent.service.js';
+export { findAgent, listAgents, lockAgentForClaim } from './agent.store.js';
+export { createAgentActionCatalog, } from './actions.js';
+//# sourceMappingURL=index.js.map

package/dist/server/core/agents/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../server/core/agents/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,GAGnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EACL,wBAAwB,GAEzB,MAAM,cAAc,CAAC"}

package/dist/server/core/brief/brief.d.ts

@@ -0,0 +1,114 @@
+/**
+ * The brief an agent runs with: four fixed layers, joined in order into the run's system prompt
+ * (`RunPayload.prompt.system`; see `joinBrief`).
+ *
+ * 1. `system`: the platform's rules, the same for every agent: how to talk to the platform (the application's CLI),
+ *    what never to touch, how to finish; the workspace layout; the environment check every working directory gets
+ *    before work starts; and the index of the agent's skills.
+ * 2. `task`: what this run is for, written by the domain the run works on (why it was given the subject, say).
+ * 3. `context`: a summary of the subject as it is now, written by that domain.
+ * 4. `agent`: the agent's own instructions, prefixed with a fixed note that they are preferences and never override
+ *    the layers before them.
+ *
+ * The system layer holds two placeholders the runner fills with what only it knows: its notes on the working
+ * directories (`{{runner.workspaceNotes}}`: absolute paths, the skills folder) and the initialization prompts of the
+ * directories it prepared fresh for this run (`{{runner.workspaceInit}}`).
+ *
+ * The subject's domain adds its own lines to the rules (`BriefGuidance`): how the agent reports progress and which
+ * moves it may make. Without them, the agent reports in its last message.
+ *
+ * An online agent (`dialect: 'tools'`) gets another system layer (`onlineSystemLayer`): it reaches the platform through
+ * the application's CLI in a sandboxed shell (its `bash` tool), has no working directory, reads its skills through its
+ * `skill` tool (the claim adds `onlineSkillsSection`), and links the pages of what its commands return when it relies
+ * on them.
+ *
+ * The turn prompt is the run's input (comments, status changes, retries), oldest first. Everything is rendered on the
+ * server, in English; product content (a subject's title, a comment) is quoted as written.
+ */
+import { type RunInput, type WorkspaceDir } from '@nocobase/agent-protocol';
+/** The four layers, kept apart on the server (`agRunBriefs`) and joined only for the runner. */
+export interface Brief {
+    readonly system: string;
+    readonly task: string;
+    readonly context: string;
+    readonly agent: string;
+}
+/** The system prompt a runner gets: the layers in order. */
+export declare function joinBrief(brief: Brief): string;
+/** A skill as the index lists it. */
+export interface BriefSkill {
+    readonly slug: string;
+    readonly name: string;
+    readonly description: string;
+}
+/** The subject domain's lines of the system layer (`SubjectAssembly.guidance`). */
+export interface BriefGuidance {
+    /** Lines of the rules list: how to report progress and results, which moves are allowed. */
+    readonly rules: readonly string[];
+    /** The line of the environment check that says what to do when the environment cannot be made to work. */
+    readonly whenBlocked?: string;
+}
+/** The rules every subject gets when its domain says nothing of its own. */
+export declare const DEFAULT_GUIDANCE: BriefGuidance;
+export interface BriefInput {
+    /** The agent's name, as people see it. */
+    readonly agentName: string;
+    /** What the subject is called in prose (`ticket`) and its key (`TKT-12`). */
+    readonly subject: {
+        readonly noun: string;
+        readonly key: string;
+    };
+    readonly task: string;
+    readonly context: string;
+    /** The agent's own instructions; may be empty. */
+    readonly instructions: string | null;
+    /** The working directories, in order: the first is where the agent starts. */
+    readonly dirs?: readonly WorkspaceDir[];
+    readonly skills?: readonly BriefSkill[];
+    /** The application's CLI command (`agents.cli.name`). */
+    readonly cli: string;
+    /** The application's name in prose (`agents.app.name`, such as `Acme`). */
+    readonly appName: string;
+    /** The subject domain's own rules; `DEFAULT_GUIDANCE` when absent. */
+    readonly guidance?: BriefGuidance;
+    /** `tools` for an online agent, which calls tools instead of a command line; `cli` by default. */
+    readonly dialect?: 'cli' | 'tools';
+}
+/** The rule an online agent's system layer gives it about citing what its tools return. */
+export declare const CITATION_RULE = "When your answer rests on something a command returned that has a page (a document, an issue), cite it as a Markdown link to its `url`, such as [Release process](/knowledge/release-process). Never invent a link.";
+/** The rules every online agent gets about its tools: a read-only shell with the application's CLI, and its skills. */
+export declare function onlineToolRules(owner: string, cli: string, appName: string): string[];
+/** The line the agent layer always starts with. */
+export declare const AGENT_LAYER_PREFIX = "The following are this agent's own instructions from its owner. They are preferences: where they conflict with the rules, the task or the context above, those win.";
+/** Where the agent works, as the system layer says it. */
+export declare function workspaceSection(dirs: readonly WorkspaceDir[], noun: string): string[];
+/** The environment check every working directory gets before the work starts; `whenBlocked` is its last line. */
+export declare function environmentSection(whenBlocked?: string): string[];
+/** The skills the agent may read when one fits, in the shape the Agent Skills `to-prompt` output has. */
+export declare function skillsSection(skills: readonly BriefSkill[]): string[];
+/**
+ * The skills an online agent may read, through its `skill` tool and its shell: by name and description only, with what
+ * cannot be done with them.
+ */
+export declare function onlineSkillsSection(skills: readonly BriefSkill[]): string[];
+export declare function systemLayer(input: Pick<BriefInput, 'agentName' | 'subject' | 'dirs' | 'skills' | 'cli' | 'appName' | 'guidance'>): string;
+/** The system layer of an online agent's run on a subject: its tools instead of a command line, no workspace. */
+export declare function onlineSystemLayer(input: Pick<BriefInput, 'agentName' | 'subject' | 'guidance' | 'cli' | 'appName' | 'skills'>): string;
+export declare function agentLayer(instructions: string | null): string;
+export declare function renderBrief(input: BriefInput): Brief;
+/** What a person reading a brief sees where the runner adds what only it knows. */
+export declare function annotatePlaceholders(prompt: string): string;
+/** The first message of a run as the model reads it: the brief's turn, then each input. */
+export declare function firstTurn(turn: string, inputs: readonly RunInput[]): string;
+/** One input as the agent reads it. */
+export declare function renderInput(input: RunInput): string;
+/** The turn prompt: what happened since the agent last looked, oldest first. */
+export declare function renderTurnPrompt(inputs: readonly RunInput[], options: {
+    readonly subject: {
+        readonly noun: string;
+        readonly key: string;
+    };
+    /** The application CLI's command name, which the agent reads its context with. */
+    readonly cli?: string;
+}): string;
+//# sourceMappingURL=brief.d.ts.map

package/dist/server/core/brief/brief.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"brief.d.ts","sourceRoot":"","sources":["../../../../server/core/brief/brief.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAGL,KAAK,QAAQ,EACb,KAAK,YAAY,EAClB,MAAM,0BAA0B,CAAC;AAElC,gGAAgG;AAChG,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,4DAA4D;AAC5D,wBAAgB,SAAS,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAI9C;AAED,qCAAqC;AACrC,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,mFAAmF;AACnF,MAAM,WAAW,aAAa;IAC5B,4FAA4F;IAC5F,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,0GAA0G;IAC1G,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,4EAA4E;AAC5E,eAAO,MAAM,gBAAgB,EAAE,aAO9B,CAAC;AAEF,MAAM,WAAW,UAAU;IACzB,0CAA0C;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,kDAAkD;IAClD,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IACxC,yDAAyD;IACzD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;IAClC,kGAAkG;IAClG,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC;CACpC;AAED,2FAA2F;AAC3F,eAAO,MAAM,aAAa,wNAC6L,CAAC;AAExN,uHAAuH;AACvH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,GACd,MAAM,EAAE,CAOV;AAED,mDAAmD;AACnD,eAAO,MAAM,kBAAkB,wKACwI,CAAC;AASxK,0DAA0D;AAC1D,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,SAAS,YAAY,EAAE,EAC7B,IAAI,EAAE,MAAM,GACX,MAAM,EAAE,CAWV;AAED,iHAAiH;AACjH,wBAAgB,kBAAkB,CAChC,WAAW,GAAE,MAAsC,GAClD,MAAM,EAAE,CAOV;AAED,yGAAyG;AACzG,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,GAAG,MAAM,EAAE,CAarE;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,GAAG,MAAM,EAAE,CAa3E;AAED,wBAAgB,WAAW,CACzB,KAAK,EAAE,IAAI,CACT,UAAU,EACV,WAAW,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,GAAG,UAAU,CAC7E,GACA,MAAM,CAsBR;AAED,iHAAiH;AACjH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,IAAI,CACT,UAAU,EACV,WAAW,GAAG,SAAS,GAAG,UAAU,GAAG,KAAK,GAAG,SAAS,GAAG,QAAQ,CACpE,GACA,MAAM,CAiBR;AAED,wBAAgB,UAAU,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAG9D;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK,CAQpD;AAED,mFAAmF;AACnF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAU3D;AAWD,2FAA2F;AAC3F,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,QAAQ,EAAE,GAAG,MAAM,CAI3E;AAED,uCAAuC;AACvC,wBAAgB,WAAW,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CAMnD;AAED,gFAAgF;AAChF,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,SAAS,QAAQ,EAAE,EAC3B,OAAO,EAAE;IACP,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,kFAAkF;IAClF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB,GACA,MAAM,CAgBR"}

package/dist/server/core/brief/brief.js

@@ -0,0 +1,216 @@
+/**
+ * The brief an agent runs with: four fixed layers, joined in order into the run's system prompt
+ * (`RunPayload.prompt.system`; see `joinBrief`).
+ *
+ * 1. `system`: the platform's rules, the same for every agent: how to talk to the platform (the application's CLI),
+ *    what never to touch, how to finish; the workspace layout; the environment check every working directory gets
+ *    before work starts; and the index of the agent's skills.
+ * 2. `task`: what this run is for, written by the domain the run works on (why it was given the subject, say).
+ * 3. `context`: a summary of the subject as it is now, written by that domain.
+ * 4. `agent`: the agent's own instructions, prefixed with a fixed note that they are preferences and never override
+ *    the layers before them.
+ *
+ * The system layer holds two placeholders the runner fills with what only it knows: its notes on the working
+ * directories (`{{runner.workspaceNotes}}`: absolute paths, the skills folder) and the initialization prompts of the
+ * directories it prepared fresh for this run (`{{runner.workspaceInit}}`).
+ *
+ * The subject's domain adds its own lines to the rules (`BriefGuidance`): how the agent reports progress and which
+ * moves it may make. Without them, the agent reports in its last message.
+ *
+ * An online agent (`dialect: 'tools'`) gets another system layer (`onlineSystemLayer`): it reaches the platform through
+ * the application's CLI in a sandboxed shell (its `bash` tool), has no working directory, reads its skills through its
+ * `skill` tool (the claim adds `onlineSkillsSection`), and links the pages of what its commands return when it relies
+ * on them.
+ *
+ * The turn prompt is the run's input (comments, status changes, retries), oldest first. Everything is rendered on the
+ * server, in English; product content (a subject's title, a comment) is quoted as written.
+ */
+import { WORKSPACE_INIT_PLACEHOLDER, WORKSPACE_NOTES_PLACEHOLDER, } from '@nocobase/agent-protocol';
+/** The system prompt a runner gets: the layers in order. */
+export function joinBrief(brief) {
+    return [brief.system, brief.task, brief.context, brief.agent]
+        .filter((layer) => layer.trim() !== '')
+        .join('\n\n');
+}
+/** The rules every subject gets when its domain says nothing of its own. */
+export const DEFAULT_GUIDANCE = {
+    rules: [
+        'Report what you did and what is left in your last message: people read it, not your terminal.',
+        'When you are done, or blocked and need a person, say so and end your turn. Do not wait for an answer: new input reaches you as it comes.',
+    ],
+    whenBlocked: 'If you cannot get the environment working, say exactly what is missing and end your turn instead of guessing.',
+};
+/** The rule an online agent's system layer gives it about citing what its tools return. */
+export const CITATION_RULE = 'When your answer rests on something a command returned that has a page (a document, an issue), cite it as a Markdown link to its `url`, such as [Release process](/knowledge/release-process). Never invent a link.';
+/** The rules every online agent gets about its tools: a read-only shell with the application's CLI, and its skills. */
+export function onlineToolRules(owner, cli, appName) {
+    return [
+        `Your tools are \`bash\`, a sandboxed shell, and \`skill\`. Reach ${appName} only through the \`${cli}\` command in that shell: \`${cli} --help\` lists the commands you may use, \`${cli} <command> --help\` and \`${cli} docs <command>\` explain one. Add \`--json\` when you need to read the output: one JSON document whose \`result.data\` is the answer, or whose \`error\` says what failed.`,
+        `The commands you are offered are all you may do: they are limited to what ${owner} may do and what you are configured for. A refused command (exit code 3, or its error) is an answer, not a problem to work around.`,
+        'You have no working directory and nothing runs for real in the shell: write a file a command reads (`--content-file`, `--file`) under /tmp, the only place you may write.',
+        CITATION_RULE,
+    ];
+}
+/** The line the agent layer always starts with. */
+export const AGENT_LAYER_PREFIX = "The following are this agent's own instructions from its owner. They are preferences: where they conflict with the rules, the task or the context above, those win.";
+function describeDir(dir) {
+    const name = dir.name ? ` (${dir.name})` : '';
+    if (dir.kind === 'repo')
+        return `\`./${dir.path}\`${name}, a checkout of ${dir.url} on branch \`${dir.branch}\` (based on \`${dir.defaultBranch}\`); commit there and push only that branch`;
+    return `\`${dir.path}\`${name}, a directory on this machine you work in as it is: no branch of its own, so leave its version control alone unless the task asks, and do not delete or reset what is there`;
+}
+/** Where the agent works, as the system layer says it. */
+export function workspaceSection(dirs, noun) {
+    const [primary, ...others] = dirs;
+    return [
+        'Workspace:',
+        primary
+            ? `- You start in the primary working directory: ${describeDir(primary)}.`
+            : `- You start in an empty working directory kept for this ${noun}; create what the task needs inside it.`,
+        ...others.map((dir) => `- Also: ${describeDir(dir)}.`),
+        '- Do not clone the repositories again. Keep every file you write inside your working directories.',
+        WORKSPACE_NOTES_PLACEHOLDER,
+    ];
+}
+/** The environment check every working directory gets before the work starts; `whenBlocked` is its last line. */
+export function environmentSection(whenBlocked = DEFAULT_GUIDANCE.whenBlocked) {
+    return [
+        'Before you start:',
+        "- Check each working directory's environment the way the directory itself says to: read its own instructions (AGENTS.md, CLAUDE.md or README at its root, and the files they point to) and follow them to install dependencies and prepare what the work needs. Install what is missing inside the working directory only, never system-wide and never with sudo.",
+        `- ${whenBlocked}`,
+        WORKSPACE_INIT_PLACEHOLDER,
+    ];
+}
+/** The skills the agent may read when one fits, in the shape the Agent Skills `to-prompt` output has. */
+export function skillsSection(skills) {
+    if (skills.length === 0)
+        return [];
+    return [
+        "Skills: instructions for particular kinds of work, each a directory with a SKILL.md. Read a skill's SKILL.md (in the skills folder the workspace notes name) when its description matches what you are doing, and follow it.",
+        '<available_skills>',
+        ...skills.flatMap((skill) => [
+            '<skill>',
+            `<name>${skill.slug}</name>`,
+            `<description>${skill.description.replace(/\s+/gu, ' ').trim()}</description>`,
+            '</skill>',
+        ]),
+        '</available_skills>',
+    ];
+}
+/**
+ * The skills an online agent may read, through its `skill` tool and its shell: by name and description only, with what
+ * cannot be done with them.
+ */
+export function onlineSkillsSection(skills) {
+    if (skills.length === 0)
+        return [];
+    return [
+        "Skills: instructions for particular kinds of work. When a skill's description matches what you are doing, call the `skill` tool with its name to read its SKILL.md and see its files, then follow it; read its other files with `cat /skills/<name>/<path>` in the `bash` tool. A skill's scripts cannot be executed here: read them to learn what they do, and do it with your tools. Binary files are listed but cannot be read.",
+        '<available_skills>',
+        ...skills.flatMap((skill) => [
+            '<skill>',
+            `<name>${skill.slug}</name>`,
+            `<description>${skill.description.replace(/\s+/gu, ' ').trim()}</description>`,
+            '</skill>',
+        ]),
+        '</available_skills>',
+    ];
+}
+export function systemLayer(input) {
+    const { noun, key } = input.subject;
+    const { cli, appName } = input;
+    const guidance = input.guidance ?? DEFAULT_GUIDANCE;
+    return [
+        `You are ${input.agentName}, an agent working on ${noun} ${key} for a team that uses ${appName}.`,
+        '',
+        'Rules:',
+        `- Talk to ${appName} only through the \`${cli}\` command line. Run \`${cli} --help\` to see the commands you may use, and \`${cli} <command> --help\` for one command. Add \`--json\` when you need to read the output: one JSON document whose \`result.data\` is the answer, or whose \`error\` says what failed.`,
+        '- The commands you are offered are all you may do: they are limited to what the person who asked you may do. A refused command (exit code 3) is not a problem to work around.',
+        `- Never read, print or copy the run's credentials file of \`${cli}\` or any other credential file, and never pass credentials on the command line.`,
+        `- Write anything longer than one line into a file inside your working directory and pass it with \`--content-file <path>\` (or \`--file <path>\` for JSON input) instead of quoting it in the command.`,
+        '- Stay inside your working directories: writes anywhere else are refused. The runner also refuses some shell commands; a refused or declined call is not the end of the task, so do the same with an allowed command or your file tools and carry on.',
+        ...guidance.rules.map((rule) => `- ${rule}`),
+        '',
+        ...workspaceSection(input.dirs ?? [], noun),
+        '',
+        ...environmentSection(guidance.whenBlocked ?? DEFAULT_GUIDANCE.whenBlocked),
+        ...(input.skills && input.skills.length > 0
+            ? ['', ...skillsSection(input.skills)]
+            : []),
+    ].join('\n');
+}
+/** The system layer of an online agent's run on a subject: its tools instead of a command line, no workspace. */
+export function onlineSystemLayer(input) {
+    const { noun, key } = input.subject;
+    const guidance = input.guidance ?? DEFAULT_GUIDANCE;
+    return [
+        `You are ${input.agentName}, an agent working on ${noun} ${key} for a team that uses ${input.appName}.`,
+        '',
+        'Rules:',
+        ...onlineToolRules('the person who asked you', input.cli, input.appName).map((rule) => `- ${rule}`),
+        ...guidance.rules.map((rule) => `- ${rule}`),
+        ...(input.skills && input.skills.length > 0
+            ? ['', ...onlineSkillsSection(input.skills)]
+            : []),
+    ].join('\n');
+}
+export function agentLayer(instructions) {
+    const text = instructions?.trim() ?? '';
+    return text ? `${AGENT_LAYER_PREFIX}\n\n${text}` : '';
+}
+export function renderBrief(input) {
+    return {
+        system: input.dialect === 'tools' ? onlineSystemLayer(input) : systemLayer(input),
+        task: input.task.trim(),
+        context: input.context.trim(),
+        agent: agentLayer(input.instructions),
+    };
+}
+/** What a person reading a brief sees where the runner adds what only it knows. */
+export function annotatePlaceholders(prompt) {
+    return prompt
+        .split(WORKSPACE_NOTES_PLACEHOLDER)
+        .join('[The runner adds the absolute paths of the working directories and the skills folder here.]')
+        .split(WORKSPACE_INIT_PLACEHOLDER)
+        .join('[The runner adds the initialization prompts of the working directories it prepared fresh for this run here, if any.]');
+}
+const INPUT_TITLES = {
+    comment: 'Comment',
+    statusChange: 'Status change',
+    retry: 'Retry',
+    planDecided: 'Plan decided',
+    signal: 'Signal',
+    custom: 'Input',
+};
+/** The first message of a run as the model reads it: the brief's turn, then each input. */
+export function firstTurn(turn, inputs) {
+    return [turn.trim(), ...inputs.map(renderInput)]
+        .filter((part) => part !== '')
+        .join('\n\n');
+}
+/** One input as the agent reads it. */
+export function renderInput(input) {
+    const who = input.actor.kind === 'user'
+        ? input.actor.name
+        : `${input.actor.name} (${input.actor.kind})`;
+    return `### ${INPUT_TITLES[input.type]} from ${who} at ${input.at}\n\n${input.text.trim()}`;
+}
+/** The turn prompt: what happened since the agent last looked, oldest first. */
+export function renderTurnPrompt(inputs, options) {
+    const { noun, key } = options.subject;
+    if (inputs.length === 0)
+        return `Continue the work on ${noun} ${key}. Read the context first (\`${options.cli ?? 'cli'} run context\`).`;
+    return [
+        `New input for ${noun} ${key}, oldest first. Each id is listed so you can tell them apart.`,
+        '',
+        ...inputs.flatMap((input) => [
+            renderInput(input),
+            `(input ${input.id})`,
+            '',
+        ]),
+        'Act on all of it, then end your turn.',
+    ]
+        .join('\n')
+        .trim();
+}
+//# sourceMappingURL=brief.js.map

package/dist/server/core/brief/brief.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brief.js","sourceRoot":"","sources":["../../../../server/core/brief/brief.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,GAG5B,MAAM,0BAA0B,CAAC;AAUlC,4DAA4D;AAC5D,MAAM,UAAU,SAAS,CAAC,KAAY;IACpC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;SAC1D,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;SACtC,IAAI,CAAC,MAAM,CAAC,CAAC;AAClB,CAAC;AAiBD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,gBAAgB,GAAkB;IAC7C,KAAK,EAAE;QACL,+FAA+F;QAC/F,0IAA0I;KAC3I;IACD,WAAW,EACT,+GAA+G;CAClH,CAAC;AAwBF,2FAA2F;AAC3F,MAAM,CAAC,MAAM,aAAa,GACxB,qNAAqN,CAAC;AAExN,uHAAuH;AACvH,MAAM,UAAU,eAAe,CAC7B,KAAa,EACb,GAAW,EACX,OAAe;IAEf,OAAO;QACL,oEAAoE,OAAO,uBAAuB,GAAG,+BAA+B,GAAG,+CAA+C,GAAG,6BAA6B,GAAG,6KAA6K;QACtY,6EAA6E,KAAK,oIAAoI;QACtN,2KAA2K;QAC3K,aAAa;KACd,CAAC;AACJ,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,MAAM,kBAAkB,GAC7B,qKAAqK,CAAC;AAExK,SAAS,WAAW,CAAC,GAAiB;IACpC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM;QACrB,OAAO,OAAO,GAAG,CAAC,IAAI,KAAK,IAAI,mBAAmB,GAAG,CAAC,GAAG,gBAAgB,GAAG,CAAC,MAAM,kBAAkB,GAAG,CAAC,aAAa,6CAA6C,CAAC;IACtK,OAAO,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,6KAA6K,CAAC;AAC7M,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,gBAAgB,CAC9B,IAA6B,EAC7B,IAAY;IAEZ,MAAM,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC;IAClC,OAAO;QACL,YAAY;QACZ,OAAO;YACL,CAAC,CAAC,iDAAiD,WAAW,CAAC,OAAO,CAAC,GAAG;YAC1E,CAAC,CAAC,2DAA2D,IAAI,yCAAyC;QAC5G,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;QACtD,mGAAmG;QACnG,2BAA2B;KAC5B,CAAC;AACJ,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,kBAAkB,CAChC,cAAsB,gBAAgB,CAAC,WAAY;IAEnD,OAAO;QACL,mBAAmB;QACnB,mWAAmW;QACnW,KAAK,WAAW,EAAE;QAClB,0BAA0B;KAC3B,CAAC;AACJ,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,aAAa,CAAC,MAA6B;IACzD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO;QACL,8NAA8N;QAC9N,oBAAoB;QACpB,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC3B,SAAS;YACT,SAAS,KAAK,CAAC,IAAI,SAAS;YAC5B,gBAAgB,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,gBAAgB;YAC9E,UAAU;SACX,CAAC;QACF,qBAAqB;KACtB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA6B;IAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO;QACL,oaAAoa;QACpa,oBAAoB;QACpB,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC3B,SAAS;YACT,SAAS,KAAK,CAAC,IAAI,SAAS;YAC5B,gBAAgB,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,gBAAgB;YAC9E,UAAU;SACX,CAAC;QACF,qBAAqB;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,KAGC;IAED,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;IACpC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,gBAAgB,CAAC;IACpD,OAAO;QACL,WAAW,KAAK,CAAC,SAAS,yBAAyB,IAAI,IAAI,GAAG,yBAAyB,OAAO,GAAG;QACjG,EAAE;QACF,QAAQ;QACR,aAAa,OAAO,uBAAuB,GAAG,0BAA0B,GAAG,oDAAoD,GAAG,mLAAmL;QACrT,+KAA+K;QAC/K,+DAA+D,GAAG,kFAAkF;QACpJ,wMAAwM;QACxM,uPAAuP;QACvP,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5C,EAAE;QACF,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,CAAC;QAC3C,EAAE;QACF,GAAG,kBAAkB,CAAC,QAAQ,CAAC,WAAW,IAAI,gBAAgB,CAAC,WAAW,CAAC;QAC3E,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YACzC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACtC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,iBAAiB,CAC/B,KAGC;IAED,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;IACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,gBAAgB,CAAC;IACpD,OAAO;QACL,WAAW,KAAK,CAAC,SAAS,yBAAyB,IAAI,IAAI,GAAG,yBAAyB,KAAK,CAAC,OAAO,GAAG;QACvG,EAAE;QACF,QAAQ;QACR,GAAG,eAAe,CAChB,0BAA0B,EAC1B,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,OAAO,CACd,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5B,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5C,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YACzC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5C,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,YAA2B;IACpD,MAAM,IAAI,GAAG,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxC,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,kBAAkB,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAiB;IAC3C,OAAO;QACL,MAAM,EACJ,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC;QAC3E,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;QACvB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;QAC7B,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,OAAO,MAAM;SACV,KAAK,CAAC,2BAA2B,CAAC;SAClC,IAAI,CACH,6FAA6F,CAC9F;SACA,KAAK,CAAC,0BAA0B,CAAC;SACjC,IAAI,CACH,sHAAsH,CACvH,CAAC;AACN,CAAC;AAED,MAAM,YAAY,GAA+C;IAC/D,OAAO,EAAE,SAAS;IAClB,YAAY,EAAE,eAAe;IAC7B,KAAK,EAAE,OAAO;IACd,WAAW,EAAE,cAAc;IAC3B,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,OAAO;CAChB,CAAC;AAEF,2FAA2F;AAC3F,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,MAA2B;IACjE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;SAC7C,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;SAC7B,IAAI,CAAC,MAAM,CAAC,CAAC;AAClB,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,WAAW,CAAC,KAAe;IACzC,MAAM,GAAG,GACP,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM;QACzB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;QAClB,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC;IAClD,OAAO,OAAO,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,OAAO,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;AAC9F,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,gBAAgB,CAC9B,MAA2B,EAC3B,OAIC;IAED,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IACtC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QACrB,OAAO,wBAAwB,IAAI,IAAI,GAAG,+BAA+B,OAAO,CAAC,GAAG,IAAI,KAAK,kBAAkB,CAAC;IAClH,OAAO;QACL,iBAAiB,IAAI,IAAI,GAAG,+DAA+D;QAC3F,EAAE;QACF,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC3B,WAAW,CAAC,KAAK,CAAC;YAClB,UAAU,KAAK,CAAC,EAAE,GAAG;YACrB,EAAE;SACH,CAAC;QACF,uCAAuC;KACxC;SACE,IAAI,CAAC,IAAI,CAAC;SACV,IAAI,EAAE,CAAC;AACZ,CAAC"}

package/dist/server/core/brief/index.d.ts

@@ -0,0 +1,2 @@
+export { AGENT_LAYER_PREFIX, agentLayer, annotatePlaceholders, onlineSkillsSection, onlineSystemLayer, onlineToolRules, CITATION_RULE, DEFAULT_GUIDANCE, environmentSection, firstTurn, joinBrief, renderBrief, renderInput, renderTurnPrompt, skillsSection, systemLayer, workspaceSection, type Brief, type BriefGuidance, type BriefInput, type BriefSkill, } from './brief.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/core/brief/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/core/brief/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,SAAS,EACT,SAAS,EACT,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,KAAK,KAAK,EACV,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,UAAU,GAChB,MAAM,YAAY,CAAC"}

package/dist/server/core/brief/index.js

@@ -0,0 +1,2 @@
+export { AGENT_LAYER_PREFIX, agentLayer, annotatePlaceholders, onlineSkillsSection, onlineSystemLayer, onlineToolRules, CITATION_RULE, DEFAULT_GUIDANCE, environmentSection, firstTurn, joinBrief, renderBrief, renderInput, renderTurnPrompt, skillsSection, systemLayer, workspaceSection, } from './brief.js';
+//# sourceMappingURL=index.js.map

package/dist/server/core/brief/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../server/core/brief/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,SAAS,EACT,SAAS,EACT,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,gBAAgB,GAKjB,MAAM,YAAY,CAAC"}

package/dist/server/core/callers/index.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Who calls the application's API from outside its pages — a person on the CLI (a session or an API key) or an
+ * agent's run (its run token) — and the business actions each holds now. The application that assembles the plugin
+ * sets the gate (`CallerGate.set`); the command manifest offers a caller only the commands whose action it holds, and
+ * the application bounds a run's requests by the same answer.
+ *
+ * A run holds the actions of the person who woke the agent that the agent is configured with; a person holds their
+ * own, kept to the scope of the API key they call with. Without a gate, a caller holds only the plugin's own
+ * universal actions: `AGENTS_VIEW_ACTION`, and `RUN_SELF_ACTION` for a run.
+ *
+ * A consultation's run (`Run.parentRunId`, an agent another one asked a question) only reads: of what its gate allows,
+ * it keeps the reading actions (`isReadingAction`) and those the gate marks as safe for it (`ActionGate.consultable`,
+ * such as proposing a plan the person confirms).
+ */
+import type { KeyScope } from '@nocobase/authorization/core';
+import type { Agent } from '../../../shared/agents.js';
+import type { RunTokenIdentity } from '../runs/index.js';
+export type CallerKind = 'run' | 'user';
+/** Held by every run: the routes about the run itself (`run self`, `run context`, naming its conversation). */
+export declare const RUN_SELF_ACTION = "agents.runs/self";
+/** Held by every caller: seeing which agents one may give work to (`agent list`). */
+export declare const AGENTS_VIEW_ACTION = "agents.agents/view";
+/** Who calls. */
+export interface CallerIdentity {
+    readonly kind: CallerKind;
+    /** The person whose permissions bound the caller: the caller, or for a run the person who woke the agent. */
+    readonly userId: string;
+    readonly displayName: string;
+    /** For a run. */
+    readonly run?: RunTokenIdentity;
+    readonly agent?: Agent;
+    /**
+     * The scope of the API key a person called with, when it has one (or the key is a service account's). The gate
+     * must narrow what it allows by it; a run never carries one.
+     */
+    readonly keyScope?: KeyScope;
+}
+export interface ActionGate {
+    /** The business actions `identity` may perform now. */
+    allowed(identity: CallerIdentity): Promise<ReadonlySet<string>>;
+    /**
+     * Whether a consultation's run, which only reads, keeps an action that is not a reading one (`isReadingAction`):
+     * proposing something the person confirms, say. None when absent.
+     */
+    consultable?(action: string): boolean;
+}
+/** Whether an action only reads: its verb is `view`, `read` or `read-…` (`pm.issues/view`, `rel.apps/read-logs`). */
+export declare function isReadingAction(action: string): boolean;
+/** Whether the caller is a consultation's run, which only reads. */
+export declare function isConsultation(identity: CallerIdentity): boolean;
+export interface CallerGate {
+    /** Sets who may do what; returns what removes it. */
+    set(gate: ActionGate): () => void;
+    /** The business actions `identity` holds now: the gate's, and the plugin's universal ones. */
+    allowed(identity: CallerIdentity): Promise<ReadonlySet<string>>;
+    /**
+     * What `identity` could do were it not a consultation kept to reading: the reach of a plan a consulted agent proposes,
+     * which the person confirms. The same as `allowed` for every other caller.
+     */
+    reach(identity: CallerIdentity): Promise<ReadonlySet<string>>;
+}
+export declare function createCallerGate(): CallerGate;
+//# sourceMappingURL=index.d.ts.map

package/dist/server/core/callers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/core/callers/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAE7D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,CAAC;AAExC,+GAA+G;AAC/G,eAAO,MAAM,eAAe,qBAAqB,CAAC;AAElD,qFAAqF;AACrF,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAEvD,iBAAiB;AACjB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,6GAA6G;IAC7G,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,iBAAiB;IACjB,QAAQ,CAAC,GAAG,CAAC,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;CAC9B;AAED,MAAM,WAAW,UAAU;IACzB,uDAAuD;IACvD,OAAO,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE;;;OAGG;IACH,WAAW,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;CACvC;AAED,qHAAqH;AACrH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAGvD;AAED,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAEhE;AAED,MAAM,WAAW,UAAU;IACzB,qDAAqD;IACrD,GAAG,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,IAAI,CAAC;IAClC,8FAA8F;IAC9F,OAAO,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE;;;OAGG;IACH,KAAK,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;CAC/D;AAED,wBAAgB,gBAAgB,IAAI,UAAU,CAiC7C"}