@nocobase/app-plugin-agents 0.0.0-stage → 0.1.0-beta.1

package/dist/server/online/routes.js

@@ -0,0 +1,197 @@
+/**
+ * The online agents' model endpoints under `/api/agents` (`shared/models.ts` lists them): the catalog and a model check
+ * for whoever picks a model for an agent, and the model services as an administrator manages them, behind
+ * `agents.services` (read lists them; manage writes, reaches a provider or uses a key). Keys are never answered.
+ */
+import { apiErrorResponse, apiErrorResponses, apiValidator, cliRoute, dataResponse, describeRoute, emptyResponse, listResponse, } from '@nocobase/app-server/router';
+import { forbidden } from '../kernel/errors.js';
+import { domainRouter } from '../kernel/http.js';
+import { tags } from '../routes/openapi.js';
+import { DefaultModelsSchema, ModelCatalogQuery, ModelCatalogServiceSchema, ModelCheckSchema, ModelServiceViewSchema, ProviderModelsSchema, ServiceParams, } from '../routes/schemas.js';
+import { ConnectionCheckSchema, ConnectionSchema, CreateServiceSchema, ModelRefSchema, UpdateServiceSchema, } from './services.js';
+/**
+ * `guard` authenticates the request and sets `caller`; `scoped` does too, and lets a scoped API key through (the
+ * services, whose every operation is a settings check).
+ */
+export function createModelRoutes(agents, guard, scoped = guard) {
+    const router = domainRouter();
+    const { online } = agents;
+    const allow = (item, action) => async (context, next) => {
+        if (!(await context.get('caller').can(item, action)))
+            throw forbidden(`This needs ${item} ${action} permission.`);
+        await next();
+    };
+    const serviceParam = apiValidator('param', ServiceParams);
+    const invalidConnection = apiErrorResponse(400, 'The connection is incomplete: no provider, or a base URL the provider needs is missing or not a URL (`INVALID_ARGUMENT`).');
+    const noService = apiErrorResponse(404, 'No such model service (`MODEL_SERVICE_NOT_FOUND`).');
+    // The services and models of one kind (chat, which online agents use, by default); names only, never keys.
+    router.get('/models', guard, describeRoute({
+        tags,
+        summary: 'List the models of the model services',
+        operationId: 'agentsListModels',
+        ...cliRoute({
+            command: 'model list',
+            columns: ['name', 'title', 'provider', 'models'],
+        }),
+        description: 'The enabled model services and their models of one kind (`chat` by default), for whoever picks a model; names only, never keys.',
+        responses: {
+            200: listResponse(ModelCatalogServiceSchema),
+            ...apiErrorResponses,
+        },
+    }), apiValidator('query', ModelCatalogQuery), async (context) => {
+        const { services } = await online.gateway.catalog(context.req.valid('query').kind);
+        return context.json({ data: services, meta: { total: services.length } });
+    });
+    router.post('/checkModel', guard, allow('agents.agents', 'read'), describeRoute({
+        tags,
+        summary: 'Check that a model answers',
+        operationId: 'agentsCheckModel',
+        ...cliRoute({
+            command: 'model check',
+            flags: { modelService: { name: 'service' } },
+            examples: ['model check --service openai --model gpt-5'],
+        }),
+        description: 'Asks a model of a saved model service for a short answer. Needs `agents.agents` read. A model that does not answer is `ok: false` with the reason, not an error.',
+        responses: { 200: dataResponse(ModelCheckSchema), ...apiErrorResponses },
+    }), apiValidator('json', ModelRefSchema), async (context) => context.json({
+        data: await online.gateway.check(context.req.valid('json')),
+    }));
+    // The system default chat model: what online agents with no models of their own answer with.
+    router.get('/defaultModels', guard, describeRoute({
+        tags,
+        summary: 'Show the default models',
+        operationId: 'agentsGetDefaultModels',
+        ...cliRoute({ command: 'model default get' }),
+        description: 'The system default chat model online agents with no models of their own answer with: as set (`chat`), and as used now (`effectiveChat`), which is the first chat model an enabled service offers when none is set or the one set is no longer offered. Adding the first chat model sets it.',
+        responses: {
+            200: dataResponse(DefaultModelsSchema),
+            ...apiErrorResponses,
+        },
+    }), async (context) => context.json({ data: await online.services.defaults() }));
+    router.put('/defaultModels/chat', scoped, allow('agents.services', 'manage'), describeRoute({
+        tags,
+        summary: 'Set the default chat model',
+        operationId: 'agentsSetDefaultChatModel',
+        ...cliRoute({
+            command: 'model default set',
+            flags: { modelService: { name: 'service' } },
+            examples: ['model default set --service openai --model gpt-5'],
+        }),
+        description: 'Sets the chat model online agents with no models of their own answer with. It must be a chat model an enabled service offers. Needs `agents.services` manage.',
+        responses: {
+            200: dataResponse(DefaultModelsSchema),
+            400: apiErrorResponse(400, 'No enabled model service offers that chat model (`INVALID_REQUEST`).'),
+            ...apiErrorResponses,
+        },
+    }), apiValidator('json', ModelRefSchema), async (context) => context.json({
+        data: await online.services.setDefaultChat(context.req.valid('json'), context.get('caller').userId),
+    }));
+    router.get('/services', scoped, allow('agents.services', 'read'), describeRoute({
+        tags,
+        summary: 'List model services',
+        operationId: 'agentsListModelServices',
+        ...cliRoute({
+            command: 'service list',
+            columns: ['name', 'title', 'provider', 'enabled', 'apiKeySet'],
+        }),
+        description: 'Needs `agents.services` read. Keys are never answered, only whether one is set.',
+        responses: {
+            200: listResponse(ModelServiceViewSchema),
+            ...apiErrorResponses,
+        },
+    }), async (context) => {
+        const data = await online.services.list();
+        return context.json({ data, meta: { total: data.length } });
+    });
+    router.post('/services', scoped, allow('agents.services', 'manage'), describeRoute({
+        tags,
+        summary: 'Create a model service',
+        operationId: 'agentsCreateModelService',
+        ...cliRoute({
+            command: 'service create',
+            bodyFile: 'file',
+            flags: { apiKey: { prompt: true } },
+            examples: ['service create --title OpenAI --provider openai'],
+        }),
+        description: 'Needs `agents.services` manage. The key is stored encrypted and never answered.',
+        responses: {
+            201: dataResponse(ModelServiceViewSchema, 'Created.'),
+            400: invalidConnection,
+            ...apiErrorResponses,
+        },
+    }), apiValidator('json', CreateServiceSchema), async (context) => context.json({ data: await online.services.create(context.req.valid('json')) }, 201));
+    // The models a provider lists over a connection being edited or saved.
+    router.post('/discoverModels', scoped, allow('agents.services', 'manage'), describeRoute({
+        tags,
+        summary: 'Discover the models a provider lists',
+        operationId: 'agentsDiscoverModels',
+        ...cliRoute({ command: 'service discover' }),
+        description: "Asks the provider for its models over a connection being edited, or a saved service's (`service`), whose stored key is used when none is given. Needs `agents.services` manage. A provider that cannot be reached is `ok: false` with the reason, not an error.",
+        responses: {
+            200: dataResponse(ProviderModelsSchema),
+            400: invalidConnection,
+            404: noService,
+            ...apiErrorResponses,
+        },
+    }), apiValidator('json', ConnectionSchema), async (context) => context.json({
+        data: await online.services.models(context.req.valid('json')),
+    }));
+    // Whether a model answers over a connection being edited or saved.
+    router.post('/checkConnection', scoped, allow('agents.services', 'manage'), describeRoute({
+        tags,
+        summary: 'Check a model over a connection',
+        operationId: 'agentsCheckConnection',
+        ...cliRoute({ command: 'service check' }),
+        description: "Asks a model for a short answer (an embedding, a ranking) over a connection being edited, or a saved service's. Needs `agents.services` manage. A model that does not answer is `ok: false` with the reason, not an error.",
+        responses: {
+            200: dataResponse(ModelCheckSchema),
+            400: invalidConnection,
+            404: noService,
+            ...apiErrorResponses,
+        },
+    }), apiValidator('json', ConnectionCheckSchema), async (context) => context.json({
+        data: await online.services.check(context.req.valid('json')),
+    }));
+    router.patch('/services/:serviceName', scoped, allow('agents.services', 'manage'), describeRoute({
+        tags,
+        summary: 'Update a model service',
+        operationId: 'agentsUpdateModelService',
+        ...cliRoute({
+            command: 'service update',
+            args: ['serviceName'],
+            bodyFile: 'file',
+            flags: { serviceName: { name: 'service' } },
+        }),
+        description: 'Needs `agents.services` manage. An omitted key keeps the stored one; `null` removes it.',
+        responses: {
+            200: dataResponse(ModelServiceViewSchema),
+            400: invalidConnection,
+            404: noService,
+            ...apiErrorResponses,
+        },
+    }), serviceParam, apiValidator('json', UpdateServiceSchema), async (context) => context.json({
+        data: await online.services.update(context.req.valid('param').serviceName, context.req.valid('json')),
+    }));
+    router.delete('/services/:serviceName', scoped, allow('agents.services', 'manage'), describeRoute({
+        tags,
+        summary: 'Delete a model service',
+        operationId: 'agentsDeleteModelService',
+        ...cliRoute({
+            command: 'service delete',
+            args: ['serviceName'],
+            flags: { serviceName: { name: 'service' } },
+            confirm: 'Delete this model service? Agents using it stop answering.',
+        }),
+        description: 'Needs `agents.services` manage.',
+        responses: {
+            204: emptyResponse(),
+            404: noService,
+            ...apiErrorResponses,
+        },
+    }), serviceParam, async (context) => {
+        await online.services.remove(context.req.valid('param').serviceName);
+        return context.body(null, 204);
+    });
+    return router;
+}
+//# sourceMappingURL=routes.js.map

package/dist/server/online/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../server/online/routes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,aAAa,EACb,aAAa,EACb,YAAY,GACb,MAAM,6BAA6B,CAAC;AAKrC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC5C,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,aAAa,GACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,EACd,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAEvB;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,KAAkC,EAClC,SAAsC,KAAK;IAE3C,MAAM,MAAM,GAAG,YAAY,EAAY,CAAC;IACxC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAE1B,MAAM,KAAK,GACT,CACE,IAAyC,EACzC,MAAsB,EACO,EAAE,CACjC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QACtB,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAClD,MAAM,SAAS,CAAC,cAAc,IAAI,IAAI,MAAM,cAAc,CAAC,CAAC;QAC9D,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;IACJ,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC1D,MAAM,iBAAiB,GAAG,gBAAgB,CACxC,GAAG,EACH,2HAA2H,CAC5H,CAAC;IACF,MAAM,SAAS,GAAG,gBAAgB,CAChC,GAAG,EACH,oDAAoD,CACrD,CAAC;IAEF,2GAA2G;IAC3G,MAAM,CAAC,GAAG,CACR,SAAS,EACT,KAAK,EACL,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,uCAAuC;QAChD,WAAW,EAAE,kBAAkB;QAC/B,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,YAAY;YACrB,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC;SACjD,CAAC;QACF,WAAW,EACT,iIAAiI;QACnI,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,yBAAyB,CAAC;YAC5C,GAAG,iBAAiB;SACrB;KACF,CAAC,EACF,YAAY,CAAC,OAAO,EAAE,iBAAiB,CAAC,EACxC,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAC/C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAChC,CAAC;QACF,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5E,CAAC,CACF,CAAC;IACF,MAAM,CAAC,IAAI,CACT,aAAa,EACb,KAAK,EACL,KAAK,CAAC,eAAe,EAAE,MAAM,CAAC,EAC9B,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,4BAA4B;QACrC,WAAW,EAAE,kBAAkB;QAC/B,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,aAAa;YACtB,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;YAC5C,QAAQ,EAAE,CAAC,4CAA4C,CAAC;SACzD,CAAC;QACF,WAAW,EACT,kKAAkK;QACpK,SAAS,EAAE,EAAE,GAAG,EAAE,YAAY,CAAC,gBAAgB,CAAC,EAAE,GAAG,iBAAiB,EAAE;KACzE,CAAC,EACF,YAAY,CAAC,MAAM,EAAE,cAAc,CAAC,EACpC,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;KAC5D,CAAC,CACL,CAAC;IAEF,6FAA6F;IAC7F,MAAM,CAAC,GAAG,CACR,gBAAgB,EAChB,KAAK,EACL,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,yBAAyB;QAClC,WAAW,EAAE,wBAAwB;QACrC,GAAG,QAAQ,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;QAC7C,WAAW,EACT,6RAA6R;QAC/R,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,mBAAmB,CAAC;YACtC,GAAG,iBAAiB;SACrB;KACF,CAAC,EACF,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAC5E,CAAC;IACF,MAAM,CAAC,GAAG,CACR,qBAAqB,EACrB,MAAM,EACN,KAAK,CAAC,iBAAiB,EAAE,QAAQ,CAAC,EAClC,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,4BAA4B;QACrC,WAAW,EAAE,2BAA2B;QACxC,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,mBAAmB;YAC5B,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;YAC5C,QAAQ,EAAE,CAAC,kDAAkD,CAAC;SAC/D,CAAC;QACF,WAAW,EACT,+JAA+J;QACjK,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,mBAAmB,CAAC;YACtC,GAAG,EAAE,gBAAgB,CACnB,GAAG,EACH,sEAAsE,CACvE;YACD,GAAG,iBAAiB;SACrB;KACF,CAAC,EACF,YAAY,CAAC,MAAM,EAAE,cAAc,CAAC,EACpC,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,MAAM,MAAM,CAAC,QAAQ,CAAC,cAAc,CACxC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EACzB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAC7B;KACF,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,GAAG,CACR,WAAW,EACX,MAAM,EACN,KAAK,CAAC,iBAAiB,EAAE,MAAM,CAAC,EAChC,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,qBAAqB;QAC9B,WAAW,EAAE,yBAAyB;QACtC,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,cAAc;YACvB,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC;SAC/D,CAAC;QACF,WAAW,EACT,iFAAiF;QACnF,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,sBAAsB,CAAC;YACzC,GAAG,iBAAiB;SACrB;KACF,CAAC,EACF,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC1C,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC,CACF,CAAC;IACF,MAAM,CAAC,IAAI,CACT,WAAW,EACX,MAAM,EACN,KAAK,CAAC,iBAAiB,EAAE,QAAQ,CAAC,EAClC,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,wBAAwB;QACjC,WAAW,EAAE,0BAA0B;QACvC,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,gBAAgB;YACzB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YACnC,QAAQ,EAAE,CAAC,iDAAiD,CAAC;SAC9D,CAAC;QACF,WAAW,EACT,iFAAiF;QACnF,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,sBAAsB,EAAE,UAAU,CAAC;YACrD,GAAG,EAAE,iBAAiB;YACtB,GAAG,iBAAiB;SACrB;KACF,CAAC,EACF,YAAY,CAAC,MAAM,EAAE,mBAAmB,CAAC,EACzC,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,IAAI,CACV,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EACjE,GAAG,CACJ,CACJ,CAAC;IACF,uEAAuE;IACvE,MAAM,CAAC,IAAI,CACT,iBAAiB,EACjB,MAAM,EACN,KAAK,CAAC,iBAAiB,EAAE,QAAQ,CAAC,EAClC,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,sCAAsC;QAC/C,WAAW,EAAE,sBAAsB;QACnC,GAAG,QAAQ,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;QAC5C,WAAW,EACT,iQAAiQ;QACnQ,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,oBAAoB,CAAC;YACvC,GAAG,EAAE,iBAAiB;YACtB,GAAG,EAAE,SAAS;YACd,GAAG,iBAAiB;SACrB;KACF,CAAC,EACF,YAAY,CAAC,MAAM,EAAE,gBAAgB,CAAC,EACtC,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;KAC9D,CAAC,CACL,CAAC;IACF,mEAAmE;IACnE,MAAM,CAAC,IAAI,CACT,kBAAkB,EAClB,MAAM,EACN,KAAK,CAAC,iBAAiB,EAAE,QAAQ,CAAC,EAClC,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,iCAAiC;QAC1C,WAAW,EAAE,uBAAuB;QACpC,GAAG,QAAQ,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;QACzC,WAAW,EACT,4NAA4N;QAC9N,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,gBAAgB,CAAC;YACnC,GAAG,EAAE,iBAAiB;YACtB,GAAG,EAAE,SAAS;YACd,GAAG,iBAAiB;SACrB;KACF,CAAC,EACF,YAAY,CAAC,MAAM,EAAE,qBAAqB,CAAC,EAC3C,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;KAC7D,CAAC,CACL,CAAC;IACF,MAAM,CAAC,KAAK,CACV,wBAAwB,EACxB,MAAM,EACN,KAAK,CAAC,iBAAiB,EAAE,QAAQ,CAAC,EAClC,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,wBAAwB;QACjC,WAAW,EAAE,0BAA0B;QACvC,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,CAAC,aAAa,CAAC;YACrB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;SAC5C,CAAC;QACF,WAAW,EACT,yFAAyF;QAC3F,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,sBAAsB,CAAC;YACzC,GAAG,EAAE,iBAAiB;YACtB,GAAG,EAAE,SAAS;YACd,GAAG,iBAAiB;SACrB;KACF,CAAC,EACF,YAAY,EACZ,YAAY,CAAC,MAAM,EAAE,mBAAmB,CAAC,EACzC,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAChC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,WAAW,EACtC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAC1B;KACF,CAAC,CACL,CAAC;IACF,MAAM,CAAC,MAAM,CACX,wBAAwB,EACxB,MAAM,EACN,KAAK,CAAC,iBAAiB,EAAE,QAAQ,CAAC,EAClC,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,wBAAwB;QACjC,WAAW,EAAE,0BAA0B;QACvC,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,CAAC,aAAa,CAAC;YACrB,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;YAC3C,OAAO,EAAE,4DAA4D;SACtE,CAAC;QACF,WAAW,EAAE,iCAAiC;QAC9C,SAAS,EAAE;YACT,GAAG,EAAE,aAAa,EAAE;YACpB,GAAG,EAAE,SAAS;YACd,GAAG,iBAAiB;SACrB;KACF,CAAC,EACF,YAAY,EACZ,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC;QACrE,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC,CACF,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/server/online/sandbox.d.ts

@@ -0,0 +1,32 @@
+/**
+ * An online run's two tools: `skill`, which reads one of the run's skills (its SKILL.md and its file tree), and `bash`,
+ * a shell (`just-bash`, in process, no real processes) over a filesystem of the run's skills at `/skills/<slug>/`, the
+ * layout runners use. The skills are read-only; `/tmp` takes a little scratch (for a body file to pass to the CLI). The
+ * application's CLI is a command there (`cli-command.ts`): the run reaches the application through it, nothing else.
+ *
+ * Bounded: no network, a deadline per command, the output cut to what the model reads, at most `MOUNT_MAX_BYTES` of
+ * skill text mounted per run. Binary files are listed but not readable, and so is text past the mount's cap; a script
+ * is read, never run for real.
+ */
+import { Bash, type CustomCommand } from '../vendor/just-bash.js';
+import type { SkillSnapshot } from '../core/skills/index.js';
+import { type ServerTool } from './tools.js';
+/** Skill text mounted in one run's shell. */
+export declare const MOUNT_MAX_BYTES: number;
+/** Scratch space under `/tmp`. */
+export declare const SCRATCH_MAX_BYTES: number;
+/** How long one `bash` call may run. */
+export declare const COMMAND_TIMEOUT_MS: number;
+/** One of the run's skills, as its shell mounts it. */
+export interface OnlineSkill extends SkillSnapshot {
+    readonly name: string;
+    readonly description: string;
+}
+/** The run's shell: its skills mounted at `/skills/<slug>/`, its CLI among the commands. */
+export declare function createSandbox(skills: readonly OnlineSkill[], commands?: readonly CustomCommand[]): {
+    readonly bash: Bash;
+    readonly unreadable: ReadonlyMap<string, string>;
+};
+/** The `skill` and `bash` tools of an online run. */
+export declare function onlineTools(skills: readonly OnlineSkill[], commands?: readonly CustomCommand[]): ServerTool[];
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/server/online/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../server/online/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,IAAI,EAGJ,KAAK,aAAa,EAEnB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAQ,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAEnD,6CAA6C;AAC7C,eAAO,MAAM,eAAe,EAAE,MAAwB,CAAC;AACvD,kCAAkC;AAClC,eAAO,MAAM,iBAAiB,EAAE,MAAoB,CAAC;AACrD,wCAAwC;AACxC,eAAO,MAAM,kBAAkB,EAAE,MAAe,CAAC;AAEjD,uDAAuD;AACvD,MAAM,WAAW,WAAY,SAAQ,aAAa;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAgFD,4FAA4F;AAC5F,wBAAgB,aAAa,CAC3B,MAAM,EAAE,SAAS,WAAW,EAAE,EAC9B,QAAQ,GAAE,SAAS,aAAa,EAAO,GACtC;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAmD3E;AAoBD,qDAAqD;AACrD,wBAAgB,WAAW,CACzB,MAAM,EAAE,SAAS,WAAW,EAAE,EAC9B,QAAQ,GAAE,SAAS,aAAa,EAAO,GACtC,UAAU,EAAE,CAoGd"}

package/dist/server/online/sandbox.js

@@ -0,0 +1,246 @@
+/**
+ * An online run's two tools: `skill`, which reads one of the run's skills (its SKILL.md and its file tree), and `bash`,
+ * a shell (`just-bash`, in process, no real processes) over a filesystem of the run's skills at `/skills/<slug>/`, the
+ * layout runners use. The skills are read-only; `/tmp` takes a little scratch (for a body file to pass to the CLI). The
+ * application's CLI is a command there (`cli-command.ts`): the run reaches the application through it, nothing else.
+ *
+ * Bounded: no network, a deadline per command, the output cut to what the model reads, at most `MOUNT_MAX_BYTES` of
+ * skill text mounted per run. Binary files are listed but not readable, and so is text past the mount's cap; a script
+ * is read, never run for real.
+ */
+import { Bash, getCommandNames, InMemoryFs, } from '../vendor/just-bash.js';
+import { clip } from './tools.js';
+/** Skill text mounted in one run's shell. */
+export const MOUNT_MAX_BYTES = 5 * 1024 * 1024;
+/** Scratch space under `/tmp`. */
+export const SCRATCH_MAX_BYTES = 1024 * 1024;
+/** How long one `bash` call may run. */
+export const COMMAND_TIMEOUT_MS = 10_000;
+const MUTATORS = new Set([
+    'writeFile',
+    'appendFile',
+    'mkdir',
+    'rm',
+    'cp',
+    'mv',
+    'chmod',
+    'symlink',
+    'link',
+    'utimes',
+    'createExclusive',
+    'writeFileSync',
+    'writeFileLazy',
+]);
+class FsError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+    }
+}
+const inScratch = (path) => typeof path === 'string' && (path === '/tmp' || path.startsWith('/tmp/'));
+/**
+ * `inner`, writable only under `/tmp` once `lock()` is called; the paths in `unreadable` refuse to be read, with the
+ * reason the bash tool reports.
+ */
+function guardedFs(inner, unreadable) {
+    let locked = false;
+    const fs = new Proxy(inner, {
+        get(target, property, receiver) {
+            const value = Reflect.get(target, property, receiver);
+            if (typeof value !== 'function')
+                return value;
+            const name = String(property);
+            if (MUTATORS.has(name))
+                return (...args) => {
+                    // `cp` and `mv` write their second argument.
+                    const written = name === 'cp' || name === 'mv' ? args[1] : args[0];
+                    const touched = name === 'mv' ? [args[0], args[1]] : [written];
+                    if (locked && !touched.every(inScratch))
+                        throw new FsError('EROFS', `EROFS: read-only file system, ${name} '${String(written)}'`);
+                    return value.apply(target, args);
+                };
+            if (name === 'readFile' ||
+                name === 'readFileBuffer' ||
+                name === 'readFileBytes')
+                return (path, ...rest) => {
+                    const reason = unreadable.get(path);
+                    if (reason)
+                        throw new FsError('EACCES', reason);
+                    return value.apply(target, [
+                        path,
+                        ...rest,
+                    ]);
+                };
+            return value.bind(target);
+        },
+    });
+    return {
+        fs,
+        lock: () => {
+            locked = true;
+        },
+    };
+}
+/** The run's shell: its skills mounted at `/skills/<slug>/`, its CLI among the commands. */
+export function createSandbox(skills, commands = []) {
+    const inner = new InMemoryFs({}, { maxTotalBytes: MOUNT_MAX_BYTES + SCRATCH_MAX_BYTES + 1024 * 1024 });
+    const unreadable = new Map();
+    let mounted = 0;
+    for (const skill of skills) {
+        const root = `/skills/${skill.slug}`;
+        mounted += Buffer.byteLength(skill.markdown, 'utf8');
+        inner.writeFileSync(`${root}/SKILL.md`, skill.markdown);
+        for (const file of skill.files) {
+            const path = `${root}/${file.path}`;
+            const mode = file.executable ? 0o755 : 0o644;
+            if (file.text === null) {
+                inner.writeFileSync(path, '', undefined, { mode });
+                unreadable.set(path, `${path} is a binary file (${file.size} bytes): it is listed but cannot be read here.`);
+                continue;
+            }
+            if (mounted + file.size > MOUNT_MAX_BYTES) {
+                inner.writeFileSync(path, '', undefined, { mode });
+                unreadable.set(path, `${path} is past the ${MOUNT_MAX_BYTES / 1024 / 1024} MB of skill text a run mounts: it cannot be read here.`);
+                continue;
+            }
+            mounted += file.size;
+            inner.writeFileSync(path, file.text, undefined, { mode });
+        }
+    }
+    inner.writeFileSync('/tmp/.keep', '');
+    const { fs, lock } = guardedFs(inner, unreadable);
+    const bash = new Bash({
+        fs,
+        cwd: '/tmp',
+        env: { HOME: '/tmp' },
+        executionLimitProfile: 'hardened',
+        executionLimits: {
+            maxExecutionTimeMs: COMMAND_TIMEOUT_MS,
+            maxOutputSize: 1024 * 1024,
+        },
+        // No SQLite worker in a read-only shell; no network, Python or JavaScript (all off unless asked for).
+        commands: getCommandNames().filter((name) => name !== 'sqlite3'),
+        customCommands: [...commands],
+    });
+    lock();
+    return { bash, unreadable };
+}
+function describeTree(skill) {
+    const lines = skill.files.map((file) => {
+        const notes = [
+            `${file.size} bytes`,
+            file.text === null ? 'binary, not readable here' : '',
+            file.executable || file.path.startsWith('scripts/')
+                ? 'script, cannot be run here'
+                : '',
+        ].filter(Boolean);
+        return `- /skills/${skill.slug}/${file.path} (${notes.join(', ')})`;
+    });
+    return [
+        `Files of ${skill.slug} (read them with \`cat\` in the bash tool):`,
+        `- /skills/${skill.slug}/SKILL.md`,
+        ...lines,
+    ].join('\n');
+}
+/** The `skill` and `bash` tools of an online run. */
+export function onlineTools(skills, commands = []) {
+    let sandbox;
+    const shell = () => (sandbox ??= createSandbox(skills, commands));
+    const names = skills.map((skill) => skill.slug);
+    const tools = [];
+    if (skills.length > 0)
+        tools.push({
+            spec: {
+                name: 'skill',
+                description: 'Read one of your skills: its SKILL.md and the list of its files, which you read with the bash tool. Read a skill when its description matches what you are doing, and follow it.',
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        name: {
+                            type: 'string',
+                            enum: names,
+                            description: "The skill's name.",
+                        },
+                    },
+                    required: ['name'],
+                    additionalProperties: false,
+                },
+            },
+            invoke(args) {
+                const name = args && typeof args === 'object'
+                    ? args.name
+                    : undefined;
+                const skill = skills.find((item) => item.slug === name);
+                if (!skill)
+                    return Promise.resolve({
+                        ok: false,
+                        output: `There is no skill ${String(name)}. Your skills: ${names.join(', ')}.`,
+                    });
+                return Promise.resolve({
+                    ok: true,
+                    output: clip(`${skill.markdown}\n\n${describeTree(skill)}`),
+                });
+            },
+        });
+    tools.push({
+        spec: {
+            name: 'bash',
+            description: [
+                'Run a shell command in your sandbox (bash syntax; ls, cat, grep, find, sed, awk, jq and the like).',
+                commands.length > 0
+                    ? `Reach the application with its command line: \`${commands.map((command) => command.name).join('`, `')} --help\`.`
+                    : '',
+                skills.length > 0
+                    ? 'Your skills are at /skills/<name>/, read-only.'
+                    : '',
+                `Write scratch files under /tmp only (at most ${SCRATCH_MAX_BYTES / 1024 / 1024} MB). No network; nothing is installed or run for real, so a skill's scripts cannot be executed. Each command stops after ${COMMAND_TIMEOUT_MS / 1000} seconds.`,
+            ]
+                .filter(Boolean)
+                .join(' '),
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    command: { type: 'string', description: 'The command line.' },
+                },
+                required: ['command'],
+                additionalProperties: false,
+            },
+        },
+        async invoke(args) {
+            const command = args && typeof args === 'object'
+                ? args.command
+                : undefined;
+            if (typeof command !== 'string' || !command.trim())
+                return { ok: false, output: 'Give the command to run as `command`.' };
+            const { bash, unreadable } = shell();
+            let stdout = '';
+            let stderr = '';
+            let exitCode;
+            try {
+                const result = await bash.exec(command);
+                ({ stdout, stderr, exitCode } = result);
+            }
+            catch (error) {
+                stderr = error instanceof Error ? error.message : String(error);
+                exitCode = 1;
+            }
+            // just-bash reports any unreadable file as missing: say why.
+            const notes = [...unreadable]
+                .filter(([path]) => {
+                const base = path.split('/').pop() ?? path;
+                return stderr.includes(base) && !stdout.includes(path);
+            })
+                .map(([, reason]) => reason);
+            const parts = [
+                `exit code ${exitCode}`,
+                stdout ? stdout.replace(/\n$/u, '') : '',
+                stderr ? `[stderr]\n${stderr.replace(/\n$/u, '')}` : '',
+                ...notes.map((note) => `[note] ${note}`),
+            ].filter(Boolean);
+            return { ok: exitCode === 0, output: clip(parts.join('\n')) };
+        },
+    });
+    return tools;
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/server/online/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../../server/online/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,IAAI,EACJ,eAAe,EACf,UAAU,GAGX,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAE,IAAI,EAAmB,MAAM,YAAY,CAAC;AAEnD,6CAA6C;AAC7C,MAAM,CAAC,MAAM,eAAe,GAAW,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACvD,kCAAkC;AAClC,MAAM,CAAC,MAAM,iBAAiB,GAAW,IAAI,GAAG,IAAI,CAAC;AACrD,wCAAwC;AACxC,MAAM,CAAC,MAAM,kBAAkB,GAAW,MAAM,CAAC;AAQjD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,WAAW;IACX,YAAY;IACZ,OAAO;IACP,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,OAAO;IACP,SAAS;IACT,MAAM;IACN,QAAQ;IACR,iBAAiB;IACjB,eAAe;IACf,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,OAAQ,SAAQ,KAAK;IAEP;IADlB,YACkB,IAAY,EAC5B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAQ;IAI9B,CAAC;CACF;AAED,MAAM,SAAS,GAAG,CAAC,IAAa,EAAW,EAAE,CAC3C,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;AAE5E;;;GAGG;AACH,SAAS,SAAS,CAChB,KAAiB,EACjB,UAAuC;IAEvC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,EAAE,GAAG,IAAI,KAAK,CAAC,KAAK,EAAE;QAC1B,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;YAC5B,MAAM,KAAK,GAAY,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC/D,IAAI,OAAO,KAAK,KAAK,UAAU;gBAAE,OAAO,KAAK,CAAC;YAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9B,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;gBACpB,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE;oBAC5B,6CAA6C;oBAC7C,MAAM,OAAO,GAAG,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACnE,MAAM,OAAO,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;oBAC/D,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;wBACrC,MAAM,IAAI,OAAO,CACf,OAAO,EACP,iCAAiC,IAAI,KAAK,MAAM,CAAC,OAAO,CAAC,GAAG,CAC7D,CAAC;oBACJ,OAAQ,KAAsC,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACrE,CAAC,CAAC;YACJ,IACE,IAAI,KAAK,UAAU;gBACnB,IAAI,KAAK,gBAAgB;gBACzB,IAAI,KAAK,eAAe;gBAExB,OAAO,CAAC,IAAY,EAAE,GAAG,IAAe,EAAE,EAAE;oBAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACpC,IAAI,MAAM;wBAAE,MAAM,IAAI,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;oBAChD,OAAQ,KAAsC,CAAC,KAAK,CAAC,MAAM,EAAE;wBAC3D,IAAI;wBACJ,GAAG,IAAI;qBACR,CAAC,CAAC;gBACL,CAAC,CAAC;YACJ,OAAQ,KAAsC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9D,CAAC;KACF,CAA2B,CAAC;IAC7B,OAAO;QACL,EAAE;QACF,IAAI,EAAE,GAAG,EAAE;YACT,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,aAAa,CAC3B,MAA8B,EAC9B,WAAqC,EAAE;IAEvC,MAAM,KAAK,GAAG,IAAI,UAAU,CAC1B,EAAE,EACF,EAAE,aAAa,EAAE,eAAe,GAAG,iBAAiB,GAAG,IAAI,GAAG,IAAI,EAAE,CACrE,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,WAAW,KAAK,CAAC,IAAI,EAAE,CAAC;QACrC,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrD,KAAK,CAAC,aAAa,CAAC,GAAG,IAAI,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;YAC7C,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBACvB,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnD,UAAU,CAAC,GAAG,CACZ,IAAI,EACJ,GAAG,IAAI,sBAAsB,IAAI,CAAC,IAAI,gDAAgD,CACvF,CAAC;gBACF,SAAS;YACX,CAAC;YACD,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,GAAG,eAAe,EAAE,CAAC;gBAC1C,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnD,UAAU,CAAC,GAAG,CACZ,IAAI,EACJ,GAAG,IAAI,gBAAgB,eAAe,GAAG,IAAI,GAAG,IAAI,yDAAyD,CAC9G,CAAC;gBACF,SAAS;YACX,CAAC;YACD,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC;YACrB,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,KAAK,CAAC,aAAa,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACtC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC;QACpB,EAAE;QACF,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACrB,qBAAqB,EAAE,UAAU;QACjC,eAAe,EAAE;YACf,kBAAkB,EAAE,kBAAkB;YACtC,aAAa,EAAE,IAAI,GAAG,IAAI;SAC3B;QACD,sGAAsG;QACtG,QAAQ,EAAE,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;QAChE,cAAc,EAAE,CAAC,GAAG,QAAQ,CAAC;KAC9B,CAAC,CAAC;IACH,IAAI,EAAE,CAAC;IACP,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,KAAkB;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG;YACZ,GAAG,IAAI,CAAC,IAAI,QAAQ;YACpB,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE;YACrD,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;gBACjD,CAAC,CAAC,4BAA4B;gBAC9B,CAAC,CAAC,EAAE;SACP,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClB,OAAO,aAAa,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IACtE,CAAC,CAAC,CAAC;IACH,OAAO;QACL,YAAY,KAAK,CAAC,IAAI,6CAA6C;QACnE,aAAa,KAAK,CAAC,IAAI,WAAW;QAClC,GAAG,KAAK;KACT,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,WAAW,CACzB,MAA8B,EAC9B,WAAqC,EAAE;IAEvC,IAAI,OAAqD,CAAC;IAC1D,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,CAAC,OAAO,KAAK,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE;gBACJ,IAAI,EAAE,OAAO;gBACb,WAAW,EACT,kLAAkL;gBACpL,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,IAAI,EAAE,KAAK;4BACX,WAAW,EAAE,mBAAmB;yBACjC;qBACF;oBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;oBAClB,oBAAoB,EAAE,KAAK;iBAC5B;aACF;YACD,MAAM,CAAC,IAAI;gBACT,MAAM,IAAI,GACR,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAC9B,CAAC,CAAE,IAAgC,CAAC,IAAI;oBACxC,CAAC,CAAC,SAAS,CAAC;gBAChB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;gBACxD,IAAI,CAAC,KAAK;oBACR,OAAO,OAAO,CAAC,OAAO,CAAC;wBACrB,EAAE,EAAE,KAAK;wBACT,MAAM,EAAE,qBAAqB,MAAM,CAAC,IAAI,CAAC,kBAAkB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;qBAC/E,CAAC,CAAC;gBACL,OAAO,OAAO,CAAC,OAAO,CAAC;oBACrB,EAAE,EAAE,IAAI;oBACR,MAAM,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,OAAO,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;iBAC5D,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CAAC;IACL,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE;gBACX,oGAAoG;gBACpG,QAAQ,CAAC,MAAM,GAAG,CAAC;oBACjB,CAAC,CAAC,kDAAkD,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY;oBACpH,CAAC,CAAC,EAAE;gBACN,MAAM,CAAC,MAAM,GAAG,CAAC;oBACf,CAAC,CAAC,gDAAgD;oBAClD,CAAC,CAAC,EAAE;gBACN,gDAAgD,iBAAiB,GAAG,IAAI,GAAG,IAAI,6HAA6H,kBAAkB,GAAG,IAAI,WAAW;aACjP;iBACE,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,GAAG,CAAC;YACZ,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;iBAC9D;gBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;gBACrB,oBAAoB,EAAE,KAAK;aAC5B;SACF;QACD,KAAK,CAAC,MAAM,CAAC,IAAI;YACf,MAAM,OAAO,GACX,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAC9B,CAAC,CAAE,IAAgC,CAAC,OAAO;gBAC3C,CAAC,CAAC,SAAS,CAAC;YAChB,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;gBAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;YACxE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,KAAK,EAAE,CAAC;YACrC,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,QAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACxC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,CAAC;YAC1C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChE,QAAQ,GAAG,CAAC,CAAC;YACf,CAAC;YACD,6DAA6D;YAC7D,MAAM,KAAK,GAAG,CAAC,GAAG,UAAU,CAAC;iBAC1B,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE;gBACjB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC;gBAC3C,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACzD,CAAC,CAAC;iBACD,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;YAC/B,MAAM,KAAK,GAAG;gBACZ,aAAa,QAAQ,EAAE;gBACvB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;gBACxC,MAAM,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;gBACvD,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC;aACzC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAClB,OAAO,EAAE,EAAE,EAAE,QAAQ,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAChE,CAAC;KACF,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/server/online/scripted.d.ts

@@ -0,0 +1,12 @@
+import type { ModelEvent, ModelGateway, ModelRequest } from './gateway.js';
+/** One scripted model call: what it streams, given the request. */
+export type Step = (request: ModelRequest) => AsyncIterable<ModelEvent>;
+export interface ScriptedModels extends Pick<ModelGateway, 'languageModel'> {
+    /** Every model call, as the old gateway would have been asked it. */
+    readonly requests: ModelRequest[];
+}
+/** A gateway answering each model call with `next(request)`. */
+export declare function scriptedModels(next: Step): ScriptedModels;
+/** A gateway answering `steps` in order, one per model call, the last one again after them. */
+export declare function scriptedSteps(steps: readonly Step[]): ScriptedModels;
+//# sourceMappingURL=scripted.d.ts.map

package/dist/server/online/scripted.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scripted.d.ts","sourceRoot":"","sources":["../../../server/online/scripted.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EAEZ,YAAY,EAEb,MAAM,cAAc,CAAC;AAatB,mEAAmE;AACnE,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,YAAY,KAAK,aAAa,CAAC,UAAU,CAAC,CAAC;AA+JxE,MAAM,WAAW,cAAe,SAAQ,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC;IACzE,qEAAqE;IACrE,QAAQ,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC;CACnC;AAED,gEAAgE;AAChE,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI,GAAG,cAAc,CAgBzD;AAED,+FAA+F;AAC/F,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,GAAG,cAAc,CAOpE"}