@nocobase/app-plugin-agents 0.0.0-stage → 0.1.0-beta.10

package/dist/server/providers/agents.js

@@ -0,0 +1,236 @@
+import { serverFileRepositoryManagerToken } from '@nocobase/app-plugin-file/server';
+import { driveManagerToken } from '@nocobase/app-server/drive';
+import { idGeneratorToken } from '@nocobase/app-server/id-generator';
+import { realtimeServiceToken } from '@nocobase/app-server/realtime';
+import { authenticationToken } from '@nocobase/app-plugin-authentication';
+import { authorizationToken } from '@nocobase/app-plugin-authorization';
+import { apiDocsToken, cliToken } from '@nocobase/app-server/router';
+import { every } from 'hono/combine';
+import { secretsServiceToken } from '@nocobase/app-server/secrets';
+import { databaseManagerToken } from '@nocobase/db';
+import { ServiceProvider } from '@nocobase/service-provider';
+import { ACCESS_NAMESPACE } from '../../shared/access.js';
+import { CONVERSATIONS_TOPIC, } from '../../shared/conversations.js';
+import { runTopic } from '../../shared/realtime.js';
+import { createAgents } from '../composition.js';
+import { createChatFileStorage } from '../core/conversations/index.js';
+import { directoryDisk } from '../core/skills/index.js';
+import { createAgentsSecretsStores } from '../secrets-stores.js';
+import { runCredentialResolver } from '../cli/run-credential.js';
+import { bindCliSurface } from '../cli/surface.js';
+import { agentsSecurityFragment } from '../routes/openapi.js';
+import { agentsToken } from '../tokens.js';
+/** The first purge of chat files never sent waits this long after boot, then runs every `PURGE_INTERVAL_MS`. */
+const PURGE_DELAY_MS = 60_000;
+const PURGE_INTERVAL_MS = 60 * 60_000;
+export class AgentsProvider extends ServiceProvider {
+    name = ACCESS_NAMESPACE;
+    releases = [];
+    stoppingVectors;
+    register() {
+        this.app.container.singleton(agentsToken, (resolver) => {
+            const config = this.app.config.get('agents');
+            return createAgents({
+                database: resolver.resolve(databaseManagerToken),
+                idGenerator: resolver.resolve(idGeneratorToken),
+                app: this.runApp(config),
+                dist: {
+                    ...config?.dist,
+                    dir: config?.dist?.dir
+                        ? this.app.paths.root(config.dist.dir)
+                        : this.app.paths.storage('runners/dist'),
+                },
+                ...(resolver.has(secretsServiceToken)
+                    ? { secrets: resolver.resolve(secretsServiceToken) }
+                    : {}),
+                ...(config?.cli ? { cli: config.cli } : {}),
+                manifestUrl: `${this.app.publicBasePath}/api/cli/manifest`,
+                ...(config?.vectors ? { vectors: config.vectors } : {}),
+                paths: {
+                    root: this.app.paths.root(),
+                    storage: this.app.paths.storage(),
+                },
+                // The contents of skills' files: on the Drive disk `agents.skills.disk` names (Drive's default), else under the
+                // application's storage. Asked on each use, so a configuration reload applies.
+                skillDisk: resolver.has(driveManagerToken)
+                    ? () => resolver
+                        .resolve(driveManagerToken)
+                        .use(this.app.config.get('agents')?.skills?.disk)
+                    : (() => {
+                        const disk = directoryDisk(this.app.paths.storage('agents'));
+                        return () => disk;
+                    })(),
+                // Files sent in chat: the application's default Drive disk, through the file plugin when it is registered, as
+                // the projects plugin stores issue files. Asked on each use.
+                chatFiles: createChatFileStorage({
+                    uploader: () => resolver.has(serverFileRepositoryManagerToken)
+                        ? resolver.resolve(serverFileRepositoryManagerToken)
+                        : null,
+                    disks: () => resolver.has(driveManagerToken)
+                        ? resolver.resolve(driveManagerToken)
+                        : null,
+                    disk: () => this.app.config.get('drive')
+                        ?.default ?? 'local',
+                    onError: (error) => console.error('Agents could not delete a stored chat file.', error),
+                }),
+                basePath: () => this.app.publicBasePath,
+            });
+        });
+        this.registerSecretsStores();
+    }
+    /** How runners name this application: `agents.app`, else the CLI's name, else the application's. */
+    runApp(config) {
+        if (config?.app)
+            return config.app;
+        const id = config?.cli?.name ?? this.app.appName;
+        return { id, name: id };
+    }
+    /** Where the plugin keeps sealed values, for `nocobase secrets status` and `secrets rotate`. */
+    registerSecretsStores() {
+        const { container } = this.app;
+        if (!container.has(secretsServiceToken))
+            return;
+        const secrets = container.resolve(secretsServiceToken);
+        for (const store of createAgentsSecretsStores(() => container.resolve(databaseManagerToken).connection()))
+            secrets.registerStore(store);
+    }
+    boot() {
+        if (this.releases.length > 0)
+            return Promise.resolve();
+        const { container } = this.app;
+        const services = container.resolve(agentsToken);
+        this.announce(services);
+        // The run token, runner key and registration token as security schemes of the API document.
+        if (container.has(apiDocsToken))
+            this.releases.push(container.resolve(apiDocsToken).addFragment(agentsSecurityFragment));
+        this.bindAuthentication(services);
+        this.purgeChatFiles(services);
+        services.vectors.start();
+        this.releases.push(() => {
+            this.stoppingVectors = services.vectors.stop();
+        });
+        return Promise.resolve();
+    }
+    /** Deletes the chat files never sent with a message, a minute after boot and then every hour. */
+    purgeChatFiles(services) {
+        const purge = () => {
+            services.chatAttachments.purge().catch((error) => {
+                console.error('Agents could not purge unsent chat files.', error);
+            });
+        };
+        const first = setTimeout(purge, PURGE_DELAY_MS);
+        const every = setInterval(purge, PURGE_INTERVAL_MS);
+        first.unref();
+        every.unref();
+        this.releases.push(() => {
+            clearTimeout(first);
+            clearInterval(every);
+        });
+    }
+    /**
+     * Teaches the application's authentication the run token (a scoped session for the person who woke the agent), and
+     * its command line who calls and which commands are custom.
+     */
+    bindAuthentication(services) {
+        const { container } = this.app;
+        if (!container.has(authenticationToken))
+            return;
+        const auth = container.resolve(authenticationToken);
+        this.releases.push(auth.addCredentialResolver(runCredentialResolver(services)));
+        if (!container.has(cliToken) || !container.has(authorizationToken))
+            return;
+        const authorization = container.resolve(authorizationToken);
+        const surface = bindCliSurface({
+            cli: container.resolve(cliToken),
+            auth: () => container.resolve(authenticationToken),
+            authenticatePerson: every(auth.required({ scopedKeys: true }), authorization.middleware()),
+            gate: services.gate,
+        });
+        this.releases.push(() => surface.release());
+    }
+    async shutdown() {
+        for (const release of this.releases.splice(0))
+            release();
+        await this.stoppingVectors;
+        this.stoppingVectors = undefined;
+    }
+    /** Tells open pages what changed; they fetch the details through the API, which checks access. */
+    announce(services) {
+        const { container } = this.app;
+        if (!container.has(realtimeServiceToken))
+            return;
+        const realtime = container.resolve(realtimeServiceToken);
+        const publish = (topic, payload) => {
+            try {
+                realtime.publish(topic, payload);
+            }
+            catch (error) {
+                console.error('Agents realtime announcement failed.', error);
+            }
+        };
+        let conversationsTopic = false;
+        try {
+            this.releases.push(realtime.registerTopic(CONVERSATIONS_TOPIC, { audience: 'user' }));
+            conversationsTopic = true;
+        }
+        catch (error) {
+            console.error('Agents could not register the conversations topic.', error);
+        }
+        const announceConversation = (userId, payload) => {
+            if (!conversationsTopic)
+                return;
+            try {
+                realtime.publish(CONVERSATIONS_TOPIC, payload, { userId });
+            }
+            catch (error) {
+                console.error('Agents realtime announcement failed.', error);
+            }
+        };
+        this.releases.push(services.events.onAny((event) => {
+            switch (event.type) {
+                case 'conversation.changed':
+                    announceConversation(event.userId, event.lastSeq === undefined
+                        ? {
+                            kind: 'conversation.changed',
+                            conversationId: event.conversationId,
+                        }
+                        : {
+                            kind: 'conversation.messages',
+                            conversationId: event.conversationId,
+                            lastSeq: event.lastSeq,
+                        });
+                    return;
+                case 'run.changed':
+                    publish(runTopic(event.runId), {
+                        kind: 'run.status',
+                        runId: event.runId,
+                        status: event.status,
+                    });
+                    return;
+                case 'run.retried':
+                    publish(runTopic(event.retryOfRunId), {
+                        kind: 'run.status',
+                        runId: event.retryOfRunId,
+                        status: event.previousStatus,
+                    });
+                    return;
+                case 'run.events':
+                    publish(runTopic(event.runId), {
+                        kind: 'run.events',
+                        runId: event.runId,
+                        lastSeq: event.lastSeq,
+                    });
+                    return;
+                case 'run.input':
+                    publish(runTopic(event.runId), {
+                        kind: 'run.input',
+                        runId: event.runId,
+                    });
+                    return;
+                default:
+                    return;
+            }
+        }));
+    }
+}
+//# sourceMappingURL=agents.js.map

package/dist/server/providers/agents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../../server/providers/agents.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,gCAAgC,EAAE,MAAM,kCAAkC,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAErE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EACL,mBAAmB,GAEpB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAmB,MAAM,0BAA0B,CAAC;AAErE,OAAO,EAAE,YAAY,EAAe,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAIjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAiC3C,gHAAgH;AAChH,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,iBAAiB,GAAG,EAAE,GAAG,MAAM,CAAC;AAEtC,MAAM,OAAO,cAAe,SAAQ,eAAqC;IACvD,IAAI,GAAW,gBAAgB,CAAC;IAC/B,QAAQ,GAAmB,EAAE,CAAC;IACvC,eAAe,CAA4B;IAEnC,QAAQ;QACtB,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,EAAE;YACrD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAe,QAAQ,CAAC,CAAC;YAC3D,OAAO,YAAY,CAAC;gBAClB,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,oBAAoB,CAAC;gBAChD,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC;gBAC/C,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBACxB,IAAI,EAAE;oBACJ,GAAG,MAAM,EAAE,IAAI;oBACf,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG;wBACpB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;wBACtC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;iBAC3C;gBACD,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,mBAAmB,CAAC;oBACnC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE;oBACpD,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,WAAW,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,mBAAmB;gBAC1D,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,KAAK,EAAE;oBACL,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE;oBAC3B,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE;iBAClC;gBACD,gHAAgH;gBAChH,+EAA+E;gBAC/E,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC;oBACxC,CAAC,CAAC,GAAG,EAAE,CACH,QAAQ;yBACL,OAAO,CAAC,iBAAiB,CAAC;yBAC1B,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAe,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC;oBACrE,CAAC,CAAC,CAAC,GAAG,EAAE;wBACJ,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;wBAC7D,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC;oBACpB,CAAC,CAAC,EAAE;gBACR,8GAA8G;gBAC9G,6DAA6D;gBAC7D,SAAS,EAAE,qBAAqB,CAAC;oBAC/B,QAAQ,EAAE,GAAG,EAAE,CACb,QAAQ,CAAC,GAAG,CAAC,gCAAgC,CAAC;wBAC5C,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,gCAAgC,CAAC;wBACpD,CAAC,CAAC,IAAI;oBACV,KAAK,EAAE,GAAG,EAAE,CACV,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC;wBAC7B,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC;wBACrC,CAAC,CAAC,IAAI;oBACV,IAAI,EAAE,GAAG,EAAE,CACT,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAgC,OAAO,CAAC;wBACzD,EAAE,OAAO,IAAI,OAAO;oBACxB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,KAAK,CAAC;iBACtE,CAAC;gBACF,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc;aACxC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,qBAAqB,EAAE,CAAC;IAC/B,CAAC;IAED,oGAAoG;IAC5F,MAAM,CAAC,MAAgC;QAC7C,IAAI,MAAM,EAAE,GAAG;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC;QACnC,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;QACjD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC1B,CAAC;IAED,gGAAgG;IACxF,qBAAqB;QAC3B,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC;QAC/B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAAE,OAAO;QAChD,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACvD,KAAK,MAAM,KAAK,IAAI,yBAAyB,CAAC,GAAG,EAAE,CACjD,SAAS,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,UAAU,EAAE,CACrD;YACC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAEe,IAAI;QAClB,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QACvD,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC;QAC/B,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxB,4FAA4F;QAC5F,IAAI,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC;YAC7B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAChB,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,CAAC,sBAAsB,CAAC,CACpE,CAAC;QACJ,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC9B,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE;YACtB,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACjD,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,iGAAiG;IACzF,cAAc,CAAC,QAAgB;QACrC,MAAM,KAAK,GAAG,GAAG,EAAE;YACjB,QAAQ,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACxD,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;YACpE,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;QACpD,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE;YACtB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,aAAa,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,kBAAkB,CAAC,QAAgB;QACzC,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC;QAC/B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAAE,OAAO;QAChD,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAChB,IAAI,CAAC,qBAAqB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAC5D,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC;YAAE,OAAO;QAC3E,MAAM,aAAa,GAAG,SAAS,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,cAAc,CAAC;YAC7B,GAAG,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;YAChC,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,mBAAmB,CAAC;YAClD,kBAAkB,EAAE,KAAK,CACvB,IAAI,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EACnC,aAAa,CAAC,UAAU,EAAE,CAC3B;YACD,IAAI,EAAE,QAAQ,CAAC,IAAI;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC;IAEe,KAAK,CAAC,QAAQ;QAC5B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QACzD,MAAM,IAAI,CAAC,eAAe,CAAC;QAC3B,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;IACnC,CAAC;IAED,kGAAkG;IAC1F,QAAQ,CAAC,QAAgB;QAC/B,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC;QAC/B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC;YAAE,OAAO;QACjD,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,OAAmB,EAAE,EAAE;YACrD,IAAI,CAAC;gBACH,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC,CAAC;QACF,IAAI,kBAAkB,GAAG,KAAK,CAAC;QAC/B,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAChB,QAAQ,CAAC,aAAa,CAAC,mBAAmB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAClE,CAAC;YACF,kBAAkB,GAAG,IAAI,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,oDAAoD,EACpD,KAAK,CACN,CAAC;QACJ,CAAC;QACD,MAAM,oBAAoB,GAAG,CAC3B,MAAc,EACd,OAA4B,EAC5B,EAAE;YACF,IAAI,CAAC,kBAAkB;gBAAE,OAAO;YAChC,IAAI,CAAC;gBACH,QAAQ,CAAC,OAAO,CAAC,mBAAmB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC7D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAChB,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YAC9B,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;gBACnB,KAAK,sBAAsB;oBACzB,oBAAoB,CAClB,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,OAAO,KAAK,SAAS;wBACzB,CAAC,CAAC;4BACE,IAAI,EAAE,sBAAsB;4BAC5B,cAAc,EAAE,KAAK,CAAC,cAAc;yBACrC;wBACH,CAAC,CAAC;4BACE,IAAI,EAAE,uBAAuB;4BAC7B,cAAc,EAAE,KAAK,CAAC,cAAc;4BACpC,OAAO,EAAE,KAAK,CAAC,OAAO;yBACvB,CACN,CAAC;oBACF,OAAO;gBACT,KAAK,aAAa;oBAChB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;wBAC7B,IAAI,EAAE,YAAY;wBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;qBACrB,CAAC,CAAC;oBACH,OAAO;gBACT,KAAK,aAAa;oBAChB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE;wBACpC,IAAI,EAAE,YAAY;wBAClB,KAAK,EAAE,KAAK,CAAC,YAAY;wBACzB,MAAM,EAAE,KAAK,CAAC,cAAc;qBAC7B,CAAC,CAAC;oBACH,OAAO;gBACT,KAAK,YAAY;oBACf,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;wBAC7B,IAAI,EAAE,YAAY;wBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;qBACvB,CAAC,CAAC;oBACH,OAAO;gBACT,KAAK,WAAW;oBACd,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;wBAC7B,IAAI,EAAE,WAAW;wBACjB,KAAK,EAAE,KAAK,CAAC,KAAK;qBACnB,CAAC,CAAC;oBACH,OAAO;gBACT;oBACE,OAAO;YACX,CAAC;QACH,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;CACF"}

package/dist/server/providers/authorization.d.ts

@@ -0,0 +1,17 @@
+/**
+ * This plugin on the authorization plugin, from `shared/access.ts`: its settings items, listed in the permission
+ * workspace under an Agent team subsection of administration, and its businesses as the `agents` resource type, each
+ * level of a business action its own action, under an Agent team subsection of business. Its pages are client routes;
+ * the authorization plugin lists them from the route tree.
+ */
+import { type AppAuthorization } from '@nocobase/app-plugin-authorization';
+import type { AppPluginApplication } from '@nocobase/app-server/plugins';
+import { ServiceProvider } from '@nocobase/service-provider';
+export declare function registerSettings(authz: AppAuthorization): void;
+/** Registers the businesses as the `agents` resource type, each with the actions of its levels, in their subsection. */
+export declare function registerBusinesses(authz: AppAuthorization): void;
+export declare class AgentsAuthorizationProvider extends ServiceProvider<AppPluginApplication> {
+    readonly name: string;
+    boot(): Promise<void>;
+}
+//# sourceMappingURL=authorization.d.ts.map

package/dist/server/providers/authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../../../server/providers/authorization.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEzE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAiB7D,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAiB9D;AAED,wHAAwH;AACxH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI,CA2BhE;AAED,qBAAa,2BAA4B,SAAQ,eAAe,CAAC,oBAAoB,CAAC;IACpF,SAAgB,IAAI,EAAE,MAAM,CAAuC;IAEnD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAMtC"}

package/dist/server/providers/authorization.js

@@ -0,0 +1,60 @@
+/**
+ * This plugin on the authorization plugin, from `shared/access.ts`: its settings items, listed in the permission
+ * workspace under an Agent team subsection of administration, and its businesses as the `agents` resource type, each
+ * level of a business action its own action, under an Agent team subsection of business. Its pages are client routes;
+ * the authorization plugin lists them from the route tree.
+ */
+import { authorizationToken, } from '@nocobase/app-plugin-authorization';
+import { ResourceItems } from '@nocobase/authorization/core';
+import { ServiceProvider } from '@nocobase/service-provider';
+import { ACCESS_NAMESPACE, ACCESS_SECTION, BUSINESS_ACTIONS, BUSINESS_KEYS, BUSINESS_SECTION, RESOURCE_TYPE, SETTINGS_ACTIONS, accessText, actionText, businessText, levelActionsOf, } from '../../shared/access.js';
+export function registerSettings(authz) {
+    authz.ui.sections.add({
+        name: ACCESS_SECTION,
+        title: accessText('section'),
+        parent: 'administration',
+    });
+    for (const [id, actions] of Object.entries(SETTINGS_ACTIONS)) {
+        authz.settings.add({
+            id,
+            title: accessText(`settings.${id}`),
+            actions: actions.map((name) => ({
+                name,
+                title: accessText(`actions.${name}`),
+            })),
+        });
+        authz.ui.place({ type: 'settings', id }, { section: ACCESS_SECTION });
+    }
+}
+/** Registers the businesses as the `agents` resource type, each with the actions of its levels, in their subsection. */
+export function registerBusinesses(authz) {
+    authz.ui.sections.add({
+        name: BUSINESS_SECTION,
+        title: accessText('businessSection'),
+        parent: 'business',
+    });
+    const items = new ResourceItems();
+    for (const business of Object.keys(BUSINESS_ACTIONS))
+        items.add({
+            id: business,
+            title: businessText(business, 'title'),
+            description: businessText(business, 'description'),
+            actions: BUSINESS_KEYS.filter((entry) => entry.business === business).flatMap(({ key }) => levelActionsOf(key).map(({ level, name }) => ({
+                name,
+                title: actionText(key, level),
+            }))),
+        });
+    authz.resourceTypes.add({ type: RESOURCE_TYPE, items });
+    for (const business of Object.keys(BUSINESS_ACTIONS))
+        authz.ui.place({ type: RESOURCE_TYPE, id: business }, { section: BUSINESS_SECTION });
+}
+export class AgentsAuthorizationProvider extends ServiceProvider {
+    name = `${ACCESS_NAMESPACE}/authorization`;
+    boot() {
+        const authz = this.app.container.resolve(authorizationToken);
+        registerSettings(authz);
+        registerBusinesses(authz);
+        return Promise.resolve();
+    }
+}
+//# sourceMappingURL=authorization.js.map

package/dist/server/providers/authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../../../server/providers/authorization.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,kBAAkB,GAEnB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,UAAU,EACV,UAAU,EACV,YAAY,EACZ,cAAc,GAEf,MAAM,wBAAwB,CAAC;AAEhC,MAAM,UAAU,gBAAgB,CAAC,KAAuB;IACtD,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC;QACpB,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,UAAU,CAAC,SAAS,CAAC;QAC5B,MAAM,EAAE,gBAAgB;KACzB,CAAC,CAAC;IACH,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC7D,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YACjB,EAAE;YACF,KAAK,EAAE,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC;YACnC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC;gBACtC,IAAI;gBACJ,KAAK,EAAE,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC;aACrC,CAAC,CAAC;SACJ,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,wHAAwH;AACxH,MAAM,UAAU,kBAAkB,CAAC,KAAuB;IACxD,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC;QACpB,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,UAAU,CAAC,iBAAiB,CAAC;QACpC,MAAM,EAAE,UAAU;KACnB,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,IAAI,aAAa,EAAE,CAAC;IAClC,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAe;QAChE,KAAK,CAAC,GAAG,CAAC;YACR,EAAE,EAAE,QAAQ;YACZ,KAAK,EAAE,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC;YACtC,WAAW,EAAE,YAAY,CAAC,QAAQ,EAAE,aAAa,CAAC;YAClD,OAAO,EAAE,aAAa,CAAC,MAAM,CAC3B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CACvC,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CACpB,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC5C,IAAI;gBACJ,KAAK,EAAE,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC;aAC9B,CAAC,CAAC,CACJ;SACF,CAAC,CAAC;IACL,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC;QAClD,KAAK,CAAC,EAAE,CAAC,KAAK,CACZ,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,QAAQ,EAAE,EACrC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAC9B,CAAC;AACN,CAAC;AAED,MAAM,OAAO,2BAA4B,SAAQ,eAAqC;IACpE,IAAI,GAAW,GAAG,gBAAgB,gBAAgB,CAAC;IAEnD,IAAI;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC7D,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxB,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC1B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/server/providers/index.d.ts

@@ -0,0 +1,4 @@
+import type { AppPluginProviderConstructor } from '@nocobase/app-server/plugins';
+declare const serviceProviders: readonly AppPluginProviderConstructor[];
+export default serviceProviders;
+//# sourceMappingURL=index.d.ts.map

package/dist/server/providers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../server/providers/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAMjF,QAAA,MAAM,gBAAgB,EAAE,SAAS,4BAA4B,EAI5D,CAAC;AAEF,eAAe,gBAAgB,CAAC"}

package/dist/server/providers/index.js

@@ -0,0 +1,10 @@
+import { AgentsProvider } from './agents.js';
+import { AgentsAuthorizationProvider } from './authorization.js';
+import { RunnersProvider } from './runners.js';
+const serviceProviders = [
+    AgentsProvider,
+    RunnersProvider,
+    AgentsAuthorizationProvider,
+];
+export default serviceProviders;
+//# sourceMappingURL=index.js.map

package/dist/server/providers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../server/providers/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,MAAM,gBAAgB,GAA4C;IAChE,cAAc;IACd,eAAe;IACf,2BAA2B;CAC5B,CAAC;AAEF,eAAe,gBAAgB,CAAC"}

package/dist/server/providers/runners.d.ts

@@ -0,0 +1,19 @@
+import type { AppPluginApplication } from '@nocobase/app-server/plugins';
+import { ServiceProvider } from '@nocobase/service-provider';
+/** How often the sweeper runs. */
+export declare const SWEEP_INTERVAL_MS = 30000;
+/** How often unnamed skill contents are collected, and how long one is spared after it was last used. */
+export declare const SKILL_BLOBS_COLLECT_MS: number;
+export declare class RunnersProvider extends ServiceProvider<AppPluginApplication> {
+    readonly name: string;
+    private readonly releases;
+    private executor;
+    boot(): Promise<void>;
+    shutdown(): Promise<void>;
+    /** Tells open pages what changed; they fetch the details through the API, which checks access. */
+    private announce;
+    private schedule;
+    /** `fn`, skipped while a previous call is still running, its errors logged. */
+    private guarded;
+}
+//# sourceMappingURL=runners.d.ts.map

package/dist/server/providers/runners.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runners.d.ts","sourceRoot":"","sources":["../../../server/providers/runners.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAGzE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAO7D,kCAAkC;AAClC,eAAO,MAAM,iBAAiB,QAAS,CAAC;AAKxC,yGAAyG;AACzG,eAAO,MAAM,sBAAsB,EAAE,MAAoB,CAAC;AAG1D,qBAAa,eAAgB,SAAQ,eAAe,CAAC,oBAAoB,CAAC;IACxE,SAAgB,IAAI,EAAE,MAAM,CAAiC;IAC7D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsB;IAC/C,OAAO,CAAC,QAAQ,CAA+B;IAEzB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAOrB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ/C,kGAAkG;IAClG,OAAO,CAAC,QAAQ;YA2BF,QAAQ;IA8DtB,+EAA+E;IAC/E,OAAO,CAAC,OAAO;CAiBhB"}

package/dist/server/providers/runners.js

@@ -0,0 +1,143 @@
+/**
+ * The runners on the platform, at boot: realtime announcements of runners, the sweeper, and wake-ups for work sent
+ * back with a back-off.
+ *
+ * The sweeper runs as the `RunnersSweep` schedule every 30 seconds on the application's jobs service, which fires it
+ * on one instance at a time. Without a jobs service an in-process timer runs it instead; with several instances each
+ * then sweeps, which is safe. Wake-ups are in-process timers: a missed one only waits for the next sweep.
+ *
+ * Beside it, `SkillBlobsCollect` deletes the stored contents of skills' files no version names, hourly, sparing what
+ * was stored or named in the last hour (an upload for a save still to come).
+ */
+import { jobExecutorServiceToken } from '@nocobase/app-server/jobs';
+import { realtimeServiceToken } from '@nocobase/app-server/realtime';
+import { ServiceProvider } from '@nocobase/service-provider';
+import { ACCESS_NAMESPACE } from '../../shared/access.js';
+import { RUNNERS_TOPIC } from '../../shared/realtime.js';
+import { agentsToken } from '../tokens.js';
+/** How often the sweeper runs. */
+export const SWEEP_INTERVAL_MS = 30_000;
+/** The schedule's stable identity in this plugin's scope. */
+const SWEEP_SCHEDULE = 'RunnersSweep';
+/** How often unnamed skill contents are collected, and how long one is spared after it was last used. */
+export const SKILL_BLOBS_COLLECT_MS = 60 * 60_000;
+const COLLECT_SCHEDULE = 'SkillBlobsCollect';
+export class RunnersProvider extends ServiceProvider {
+    name = `${ACCESS_NAMESPACE}/runners`;
+    releases = [];
+    executor;
+    async boot() {
+        if (this.releases.length > 0)
+            return;
+        const services = this.app.container.resolve(agentsToken);
+        this.announce(services);
+        await this.schedule(services);
+    }
+    async shutdown() {
+        for (const release of this.releases.splice(0))
+            release();
+        // Waits for a running sweep to finish; the rule stays in the backend for the other instances.
+        const executor = this.executor;
+        this.executor = undefined;
+        await executor?.shutdown();
+    }
+    /** Tells open pages what changed; they fetch the details through the API, which checks access. */
+    announce(services) {
+        const { container } = this.app;
+        if (!container.has(realtimeServiceToken))
+            return;
+        const realtime = container.resolve(realtimeServiceToken);
+        const publish = (topic, payload) => {
+            try {
+                realtime.publish(topic, payload);
+            }
+            catch (error) {
+                console.error('Runners realtime announcement failed.', error);
+            }
+        };
+        this.releases.push(services.events.onAny((event) => {
+            switch (event.type) {
+                case 'runner.changed':
+                    publish(RUNNERS_TOPIC, {
+                        kind: 'runners.changed',
+                        runnerId: event.runnerId,
+                    });
+                    return;
+                default:
+                    return;
+            }
+        }));
+    }
+    async schedule(services) {
+        const { container } = this.app;
+        const sweep = this.guarded(() => services.sweeper.sweep());
+        const collect = this.guarded(() => services.skills.collectGarbage(SKILL_BLOBS_COLLECT_MS), 'Skill contents collection');
+        const wake = () => services.signal.notify();
+        if (container.has(jobExecutorServiceToken)) {
+            const executor = container
+                .resolve(jobExecutorServiceToken)
+                .getScheduleExecutor(ACCESS_NAMESPACE);
+            await executor.addJob({
+                name: SWEEP_SCHEDULE,
+                options: { every: SWEEP_INTERVAL_MS },
+                payload: {},
+                execute: sweep,
+            });
+            await executor.addJob({
+                name: COLLECT_SCHEDULE,
+                options: { every: SKILL_BLOBS_COLLECT_MS },
+                payload: {},
+                execute: collect,
+            });
+            await executor.setup();
+            this.executor = executor;
+        }
+        else {
+            const timer = setInterval(() => void sweep(), SWEEP_INTERVAL_MS);
+            timer.unref();
+            const collector = setInterval(() => void collect(), SKILL_BLOBS_COLLECT_MS);
+            collector.unref();
+            this.releases.push(() => {
+                clearInterval(timer);
+                clearInterval(collector);
+            });
+        }
+        const timers = new Set();
+        // Work that went back to the queue with a back-off: wake the runners when it may be claimed.
+        const wakeAt = (availableAt) => {
+            if (!availableAt)
+                return;
+            const delay = Math.max(0, Date.parse(availableAt) - Date.now());
+            const timer = setTimeout(() => {
+                timers.delete(timer);
+                wake();
+            }, delay + 1000);
+            timer.unref();
+            timers.add(timer);
+        };
+        this.releases.push(services.events.on('run.requeued', (event) => wakeAt(event.availableAt)), services.events.on('job.queued', (event) => wakeAt(event.availableAt)), () => {
+            for (const timer of timers)
+                clearTimeout(timer);
+            timers.clear();
+        });
+    }
+    /** `fn`, skipped while a previous call is still running, its errors logged. */
+    guarded(fn, what = 'Runners sweep') {
+        let running = false;
+        return async () => {
+            if (running)
+                return;
+            running = true;
+            try {
+                await fn();
+            }
+            catch (error) {
+                console.error(`${what} failed.`, error);
+            }
+            finally {
+                running = false;
+            }
+        };
+    }
+}
+//# sourceMappingURL=runners.js.map

package/dist/server/providers/runners.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runners.js","sourceRoot":"","sources":["../../../server/providers/runners.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAGpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAuB,MAAM,0BAA0B,CAAC;AAE9E,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,kCAAkC;AAClC,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAExC,6DAA6D;AAC7D,MAAM,cAAc,GAAG,cAAc,CAAC;AAEtC,yGAAyG;AACzG,MAAM,CAAC,MAAM,sBAAsB,GAAW,EAAE,GAAG,MAAM,CAAC;AAC1D,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAE7C,MAAM,OAAO,eAAgB,SAAQ,eAAqC;IACxD,IAAI,GAAW,GAAG,gBAAgB,UAAU,CAAC;IAC5C,QAAQ,GAAmB,EAAE,CAAC;IACvC,QAAQ,CAA+B;IAE/B,KAAK,CAAC,IAAI;QACxB,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAEe,KAAK,CAAC,QAAQ;QAC5B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QACzD,8FAA8F;QAC9F,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC1B,MAAM,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAC7B,CAAC;IAED,kGAAkG;IAC1F,QAAQ,CAAC,QAAgB;QAC/B,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC;QAC/B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC;YAAE,OAAO;QACjD,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,OAAuB,EAAE,EAAE;YACzD,IAAI,CAAC;gBACH,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;YAChE,CAAC;QACH,CAAC,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAChB,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YAC9B,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;gBACnB,KAAK,gBAAgB;oBACnB,OAAO,CAAC,aAAa,EAAE;wBACrB,IAAI,EAAE,iBAAiB;wBACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ;qBACzB,CAAC,CAAC;oBACH,OAAO;gBACT;oBACE,OAAO;YACX,CAAC;QACH,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,QAAgB;QACrC,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAC1B,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,sBAAsB,CAAC,EAC5D,2BAA2B,CAC5B,CAAC;QACF,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,SAAS,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,SAAS;iBACvB,OAAO,CAAC,uBAAuB,CAAC;iBAChC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;YACzC,MAAM,QAAQ,CAAC,MAAM,CAAC;gBACpB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE;gBACrC,OAAO,EAAE,EAAE;gBACX,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YACH,MAAM,QAAQ,CAAC,MAAM,CAAC;gBACpB,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE;gBAC1C,OAAO,EAAE,EAAE;gBACX,OAAO,EAAE,OAAO;aACjB,CAAC,CAAC;YACH,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;YACvB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,KAAK,EAAE,EAAE,iBAAiB,CAAC,CAAC;YACjE,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,SAAS,GAAG,WAAW,CAC3B,GAAG,EAAE,CAAC,KAAK,OAAO,EAAE,EACpB,sBAAsB,CACvB,CAAC;YACF,SAAS,CAAC,KAAK,EAAE,CAAC;YAClB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtB,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,aAAa,CAAC,SAAS,CAAC,CAAC;YAC3B,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiC,CAAC;QACxD,6FAA6F;QAC7F,MAAM,MAAM,GAAG,CAAC,WAA0B,EAAE,EAAE;YAC5C,IAAI,CAAC,WAAW;gBAAE,OAAO;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAChE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACrB,IAAI,EAAE,CAAC;YACT,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC;YACjB,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAChB,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,EACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,EACtE,GAAG,EAAE;YACH,KAAK,MAAM,KAAK,IAAI,MAAM;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAChD,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC,CACF,CAAC;IACJ,CAAC;IAED,+EAA+E;IACvE,OAAO,CACb,EAA0B,EAC1B,IAAI,GAAG,eAAe;QAEtB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,OAAO,KAAK,IAAI,EAAE;YAChB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,EAAE,EAAE,CAAC;YACb,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,UAAU,EAAE,KAAK,CAAC,CAAC;YAC1C,CAAC;oBAAS,CAAC;gBACT,OAAO,GAAG,KAAK,CAAC;YAClB,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;CACF"}

package/dist/server/routes/admin.d.ts

@@ -0,0 +1,27 @@
+import type { Hono, MiddlewareHandler } from 'hono';
+import { type BusinessKey, type Page, type Scope, type SettingsAction, type SettingsItem } from '../../shared/access.js';
+import type { Agents } from '../composition.js';
+/** Who is asking, what the settings items allow them, and how far their business actions reach. */
+export interface AdminCaller {
+    readonly userId: string;
+    can(item: SettingsItem, action: SettingsAction): Promise<boolean>;
+    /** Whether a page grant (`PAGES`) opens the page for the caller. */
+    opens(page: Page): Promise<boolean>;
+    scope(key: BusinessKey): Promise<Scope>;
+    /** Set when a run's token authenticated the request: the subject the run works on. */
+    readonly run?: {
+        readonly subjectKind: string;
+        readonly subjectId: string;
+    } | null;
+}
+export interface AdminEnv {
+    Variables: {
+        caller: AdminCaller;
+    };
+}
+/**
+ * `guard` authenticates the request and sets `caller`; `scoped` does too, and lets a scoped API key through. The route
+ * contribution passes the real ones, tests a fake.
+ */
+export declare function createAdminRoutes(services: Agents, guard: MiddlewareHandler<AdminEnv>, scoped?: MiddlewareHandler<AdminEnv>): Hono<AdminEnv>;
+//# sourceMappingURL=admin.d.ts.map

package/dist/server/routes/admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../../server/routes/admin.ts"],"names":[],"mappings":"AAwCA,OAAO,KAAK,EAAW,IAAI,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAI7D,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,IAAI,EACT,KAAK,KAAK,EACV,KAAK,cAAc,EACnB,KAAK,YAAY,EAClB,MAAM,wBAAwB,CAAC;AAMhC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AA8GhD,mGAAmG;AACnG,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClE,oEAAoE;IACpE,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpC,KAAK,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACxC,sFAAsF;IACtF,QAAQ,CAAC,GAAG,CAAC,EAAE;QACb,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,GAAG,IAAI,CAAC;CACV;AAED,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE;QAAE,MAAM,EAAE,WAAW,CAAA;KAAE,CAAC;CACpC;AAyCD;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,iBAAiB,CAAC,QAAQ,CAAC,EAClC,MAAM,GAAE,iBAAiB,CAAC,QAAQ,CAAS,GAC1C,IAAI,CAAC,QAAQ,CAAC,CAmwDhB"}