@nocobase/app-plugin-agents 0.0.0-stage → 0.1.0-beta.10

package/dist/server/runners/workspaces.js

@@ -0,0 +1,248 @@
+/**
+ * A runner's working directories (`RUNNER_ROUTES.workspaces`): the runner reports each one with the last run that
+ * worked in it, and is told which may go. A run tells its subject, and the subject's binding tells whether the work on
+ * it is over (`SubjectBinding.workspaces.settled`); a kind without that member never counts as over. A directory
+ * whose run is unknown, or that names no run, is named by its subject's key (`SubjectBinding.workspaces.resolveKeys`).
+ * Which runner worked in it is not checked: the work on a subject is over for every runner at once, and a directory
+ * of it goes wherever it is, so old directories nobody recorded a run for do not pile up. A subject a run has not
+ * finished on, on any runner, is never over.
+ *
+ * The report is kept on the runner (`agRunners.workspaceUsage`) for the runtimes pages, with what was decided for each
+ * directory and the free space on the disk holding them. Whether a branch was merged or pushed is never judged here:
+ * a directory of a subject whose work is over goes on that alone.
+ */
+import { TERMINAL_RUN_STATUSES, WORKSPACE_REPORT_INTERVAL_MS, } from '@nocobase/agent-protocol';
+import { runsRepo } from '../core/runs/run.store.js';
+import { runnersRepo, storedWorkspaceUsage } from './runner.store.js';
+/** How many runs one query reads. */
+const CHUNK = 200;
+/** Of `runIds`, the ones Studio knows, with their subjects, whichever runner worked on them. */
+async function knownRuns(conn, runIds) {
+    const found = new Map();
+    for (let start = 0; start < runIds.length; start += CHUNK) {
+        const chunk = runIds.slice(start, start + CHUNK);
+        const records = await runsRepo(conn).findMany({
+            filter: (f) => f.and([f.or(chunk.map((id) => f.string('id').eq(id)))]),
+        });
+        for (const record of records) {
+            found.set(record.id, {
+                subjectKind: record.subjectKind,
+                subjectId: record.subjectId,
+            });
+        }
+    }
+    return found;
+}
+/** Of `subjectIds` of `kind`, the ones a run has not finished on (queued, dispatched or running, on any runner). */
+async function busySubjects(conn, kind, subjectIds) {
+    const busy = new Set();
+    for (let start = 0; start < subjectIds.length; start += CHUNK) {
+        const chunk = subjectIds.slice(start, start + CHUNK);
+        const records = await runsRepo(conn).findMany({
+            filter: (f) => f.and([
+                f.string('subjectKind').eq(kind),
+                f.or(chunk.map((id) => f.string('subjectId').eq(id))),
+                ...TERMINAL_RUN_STATUSES.map((status) => f.string('status').ne(status)),
+            ]),
+        });
+        for (const record of records)
+            busy.add(record.subjectId);
+    }
+    return busy;
+}
+/**
+ * For each subject kind, the subjects whose work is over; a kind whose binding cannot say is absent. A subject a run
+ * has not finished on is never over, whatever its binding says: work on it goes on somewhere.
+ */
+async function settledSubjects(conn, subjects, runs) {
+    const byKind = new Map();
+    for (const run of runs.values()) {
+        const ids = byKind.get(run.subjectKind) ?? new Set();
+        ids.add(run.subjectId);
+        byKind.set(run.subjectKind, ids);
+    }
+    const settled = new Map();
+    for (const [kind, ids] of byKind) {
+        const binding = subjects.get(kind)?.workspaces;
+        if (binding === undefined)
+            continue;
+        const over = [...(await binding.settled(conn, [...ids]))].filter((id) => ids.has(id));
+        const busy = await busySubjects(conn, kind, over);
+        settled.set(kind, new Set(over.filter((id) => !busy.has(id))));
+    }
+    return settled;
+}
+export function createRunnerWorkspaces(deps) {
+    const { tx, clock, subjects } = deps;
+    return {
+        reporting: {
+            intervalMs: deps.intervalMs ?? WORKSPACE_REPORT_INTERVAL_MS,
+            decisions: true,
+        },
+        async report(runner, request) {
+            if (request.diagnostics === true && request.directories === undefined)
+                return {
+                    remove: [],
+                    keep: [],
+                    reporting: {
+                        intervalMs: deps.intervalMs ?? WORKSPACE_REPORT_INTERVAL_MS,
+                        decisions: true,
+                    },
+                };
+            const conn = tx.read();
+            const reports = request.directories ??
+                request.workspaces.map((workspace) => ({
+                    ...workspace,
+                    subjectKey: '',
+                }));
+            const runs = await knownRuns(conn, reports.flatMap((workspace) => workspace.runId === undefined ? [] : [workspace.runId]));
+            // A directory without a known run, recorded before runs were, or whose run is gone, goes by its subject's key.
+            const byKey = new Map();
+            const failures = new Map();
+            const resolving = subjects
+                .list()
+                .some((binding) => binding.workspaces?.resolveKeys !== undefined);
+            for (const workspace of reports) {
+                if (workspace.runId !== undefined && runs.has(workspace.runId))
+                    continue;
+                if (workspace.subjectKey === '')
+                    continue;
+                if (!resolving) {
+                    if (workspace.runId === undefined)
+                        failures.set(workspace.workDir, 'bindingUnavailable');
+                    continue;
+                }
+                const candidates = [];
+                for (const binding of subjects.list()) {
+                    const ids = (await binding.workspaces?.resolveKeys?.(conn, [
+                        workspace.subjectKey,
+                    ]))?.get(workspace.subjectKey) ?? [];
+                    for (const subjectId of ids)
+                        candidates.push({ subjectKind: binding.kind, subjectId });
+                }
+                if (candidates.length !== 1) {
+                    failures.set(workspace.workDir, candidates.length > 1 ? 'ambiguousSubject' : 'subjectUnknown');
+                    continue;
+                }
+                byKey.set(workspace.workDir, candidates[0]);
+            }
+            const settled = await settledSubjects(conn, subjects, new Map([...runs, ...byKey]));
+            const remove = [];
+            const keep = [];
+            const decisions = [];
+            const workspaces = [];
+            for (const workspace of reports) {
+                const run = (workspace.runId === undefined
+                    ? undefined
+                    : runs.get(workspace.runId)) ?? byKey.get(workspace.workDir);
+                const kind = run === undefined ? undefined : settled.get(run.subjectKind);
+                const ended = run === undefined || kind === undefined
+                    ? null
+                    : kind.has(run.subjectId);
+                const reason = run === undefined
+                    ? (failures.get(workspace.workDir) ?? 'runNotFound')
+                    : ended === true
+                        ? 'settled'
+                        : ended === false
+                            ? 'active'
+                            : 'bindingUnavailable';
+                // Ended work is removed on the subject's status alone: runners are no longer told commits to prove pushes by.
+                const commits = [];
+                if (workspace.runId !== undefined) {
+                    if (ended === true)
+                        remove.push(workspace.runId);
+                    else if (ended === false)
+                        keep.push(workspace.runId);
+                }
+                const decision = {
+                    reportId: request.reportId ?? '',
+                    workDir: workspace.workDir,
+                    ...(workspace.runId === undefined ? {} : { runId: workspace.runId }),
+                    lastUsedAt: workspace.lastUsedAt,
+                    settled: ended,
+                    reason,
+                    commits,
+                };
+                if (request.reportId !== undefined)
+                    decisions.push(decision);
+                const previous = runner.workspaceUsage?.workspaces.find((item) => item.workDir === workspace.workDir);
+                const cleanup = ended === true &&
+                    workspace.cleanup !== undefined &&
+                    previous?.decision !== undefined &&
+                    previous.subjectKind === run?.subjectKind &&
+                    previous.subjectId === run?.subjectId &&
+                    workspace.cleanup.reportId === previous.decision.reportId &&
+                    previous.runId === workspace.runId &&
+                    previous.lastUsedAt === workspace.lastUsedAt &&
+                    previous.settled === ended &&
+                    JSON.stringify(previous.decision.commits) === JSON.stringify(commits)
+                    ? workspace.cleanup
+                    : undefined;
+                workspaces.push({
+                    ...(workspace.runId === undefined ? {} : { runId: workspace.runId }),
+                    workDir: workspace.workDir,
+                    ...(workspace.subjectKey ? { subjectKey: workspace.subjectKey } : {}),
+                    ...(workspace.sizeBytes === undefined
+                        ? {}
+                        : { sizeBytes: workspace.sizeBytes }),
+                    unpushed: workspace.unpushed,
+                    lastUsedAt: workspace.lastUsedAt,
+                    subjectKind: run?.subjectKind ?? null,
+                    subjectId: run?.subjectId ?? null,
+                    settled: ended,
+                    ...(request.reportId === undefined ? {} : { decision }),
+                    ...(cleanup === undefined ? {} : { cleanup }),
+                });
+            }
+            workspaces.sort((a, b) => Date.parse(b.lastUsedAt) - Date.parse(a.lastUsedAt));
+            const usage = {
+                intervalMs: deps.intervalMs ?? WORKSPACE_REPORT_INTERVAL_MS,
+                disk: request.disk === undefined
+                    ? null
+                    : {
+                        freeBytes: request.disk.freeBytes,
+                        totalBytes: request.disk.totalBytes,
+                        minFreeBytes: request.disk.minFreeBytes ?? null,
+                    },
+                count: workspaces.length,
+                unpushedCount: workspaces.filter((workspace) => workspace.unpushed)
+                    .length,
+                measuredAt: clock.now().toISOString(),
+                workspaces,
+            };
+            await tx.run(async ({ conn: write, emit }) => {
+                const current = await runnersRepo(write).findOne({
+                    filter: { id: runner.id },
+                });
+                const latest = storedWorkspaceUsage(current?.workspaceUsage);
+                // Directory collection can take minutes; never replace the heartbeat's newer disk sample.
+                const merged = latest?.diskMeasuredAt
+                    ? {
+                        ...usage,
+                        disk: latest.disk,
+                        diskMeasuredAt: latest.diskMeasuredAt,
+                    }
+                    : usage;
+                await runnersRepo(write).updateMany({
+                    filter: { id: runner.id },
+                    values: { workspaceUsage: merged },
+                });
+                emit({ type: 'runner.changed', runnerId: runner.id });
+            });
+            return {
+                remove,
+                keep,
+                ...(request.diagnostics === true
+                    ? {
+                        reporting: {
+                            intervalMs: deps.intervalMs ?? WORKSPACE_REPORT_INTERVAL_MS,
+                            decisions: true,
+                        },
+                    }
+                    : {}),
+                ...(request.reportId === undefined ? {} : { decisions }),
+            };
+        },
+    };
+}
+//# sourceMappingURL=workspaces.js.map

package/dist/server/runners/workspaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.js","sourceRoot":"","sources":["../../../server/runners/workspaces.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EACL,qBAAqB,EACrB,4BAA4B,GAO7B,MAAM,0BAA0B,CAAC;AASlC,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAGrD,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAoBtE,qCAAqC;AACrC,MAAM,KAAK,GAAG,GAAG,CAAC;AAOlB,gGAAgG;AAChG,KAAK,UAAU,SAAS,CACtB,IAAwB,EACxB,MAAyB;IAEzB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;YAC5C,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;SACvE,CAAC,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE;gBACnB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oHAAoH;AACpH,KAAK,UAAU,YAAY,CACzB,IAAwB,EACxB,IAAY,EACZ,UAA6B;IAE7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,KAAK,IAAI,KAAK,EAAE,CAAC;QAC9D,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;YAC5C,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CACZ,CAAC,CAAC,GAAG,CAAC;gBACJ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC;gBAChC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBACrD,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACtC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAC9B;aACF,CAAC;SACL,CAAC,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,eAAe,CAC5B,IAAwB,EACxB,QAAyB,EACzB,IAAqC;IAErC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAC7D,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+B,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC;QAC/C,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QACpC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CACtE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CACZ,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,IAA0B;IAE1B,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IACrC,OAAO;QACL,SAAS,EAAE;YACT,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,4BAA4B;YAC3D,SAAS,EAAE,IAAI;SAChB;QAED,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO;YAC1B,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;gBACnE,OAAO;oBACL,MAAM,EAAE,EAAE;oBACV,IAAI,EAAE,EAAE;oBACR,SAAS,EAAE;wBACT,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,4BAA4B;wBAC3D,SAAS,EAAE,IAAI;qBAChB;iBACF,CAAC;YACJ,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;YACvB,MAAM,OAAO,GACX,OAAO,CAAC,WAAW;gBACnB,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;oBACrC,GAAG,SAAS;oBACZ,UAAU,EAAE,EAAE;iBACf,CAAC,CAAC,CAAC;YACN,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,IAAI,EACJ,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAC5B,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CACvD,CACF,CAAC;YACF,+GAA+G;YAC/G,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;YAC5C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuC,CAAC;YAChE,MAAM,SAAS,GAAG,QAAQ;iBACvB,IAAI,EAAE;iBACN,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC;YACpE,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;gBAChC,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC;oBAC5D,SAAS;gBACX,IAAI,SAAS,CAAC,UAAU,KAAK,EAAE;oBAAE,SAAS;gBAC1C,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS;wBAC/B,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;oBACxD,SAAS;gBACX,CAAC;gBACD,MAAM,UAAU,GAAiB,EAAE,CAAC;gBACpC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;oBACtC,MAAM,GAAG,GACP,CACE,MAAM,OAAO,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE;wBAC5C,SAAS,CAAC,UAAU;qBACrB,CAAC,CACH,EAAE,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;oBACrC,KAAK,MAAM,SAAS,IAAI,GAAG;wBACzB,UAAU,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC9D,CAAC;gBACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC5B,QAAQ,CAAC,GAAG,CACV,SAAS,CAAC,OAAO,EACjB,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,gBAAgB,CAC9D,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,eAAe,CACnC,IAAI,EACJ,QAAQ,EACR,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAC7B,CAAC;YACF,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,MAAM,SAAS,GAAwB,EAAE,CAAC;YAC1C,MAAM,UAAU,GAAsB,EAAE,CAAC;YACzC,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;gBAChC,MAAM,GAAG,GACP,CAAC,SAAS,CAAC,KAAK,KAAK,SAAS;oBAC5B,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBACjE,MAAM,IAAI,GACR,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAC/D,MAAM,KAAK,GACT,GAAG,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;oBACrC,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC9B,MAAM,MAAM,GACV,GAAG,KAAK,SAAS;oBACf,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC;oBACpD,CAAC,CAAC,KAAK,KAAK,IAAI;wBACd,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,KAAK,KAAK,KAAK;4BACf,CAAC,CAAC,QAAQ;4BACV,CAAC,CAAC,oBAAoB,CAAC;gBAC/B,8GAA8G;gBAC9G,MAAM,OAAO,GAA8B,EAAE,CAAC;gBAC9C,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBAClC,IAAI,KAAK,KAAK,IAAI;wBAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;yBAC5C,IAAI,KAAK,KAAK,KAAK;wBAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBACvD,CAAC;gBACD,MAAM,QAAQ,GAAsB;oBAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;oBAChC,OAAO,EAAE,SAAS,CAAC,OAAO;oBAC1B,GAAG,CAAC,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC;oBACpE,UAAU,EAAE,SAAS,CAAC,UAAU;oBAChC,OAAO,EAAE,KAAK;oBACd,MAAM;oBACN,OAAO;iBACR,CAAC;gBACF,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;oBAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,IAAI,CACrD,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO,CAC7C,CAAC;gBACF,MAAM,OAAO,GACX,KAAK,KAAK,IAAI;oBACd,SAAS,CAAC,OAAO,KAAK,SAAS;oBAC/B,QAAQ,EAAE,QAAQ,KAAK,SAAS;oBAChC,QAAQ,CAAC,WAAW,KAAK,GAAG,EAAE,WAAW;oBACzC,QAAQ,CAAC,SAAS,KAAK,GAAG,EAAE,SAAS;oBACrC,SAAS,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CAAC,QAAQ;oBACzD,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK;oBAClC,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU;oBAC5C,QAAQ,CAAC,OAAO,KAAK,KAAK;oBAC1B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;oBACnE,CAAC,CAAC,SAAS,CAAC,OAAO;oBACnB,CAAC,CAAC,SAAS,CAAC;gBAChB,UAAU,CAAC,IAAI,CAAC;oBACd,GAAG,CAAC,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC;oBACpE,OAAO,EAAE,SAAS,CAAC,OAAO;oBAC1B,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrE,GAAG,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS;wBACnC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC;oBACvC,QAAQ,EAAE,SAAS,CAAC,QAAQ;oBAC5B,UAAU,EAAE,SAAS,CAAC,UAAU;oBAChC,WAAW,EAAE,GAAG,EAAE,WAAW,IAAI,IAAI;oBACrC,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;oBACjC,OAAO,EAAE,KAAK;oBACd,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;oBACvD,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;iBAC9C,CAAC,CAAC;YACL,CAAC;YACD,UAAU,CAAC,IAAI,CACb,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAC9D,CAAC;YACF,MAAM,KAAK,GAAyB;gBAClC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,4BAA4B;gBAC3D,IAAI,EACF,OAAO,CAAC,IAAI,KAAK,SAAS;oBACxB,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC;wBACE,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS;wBACjC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU;wBACnC,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI;qBAChD;gBACP,KAAK,EAAE,UAAU,CAAC,MAAM;gBACxB,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC;qBAChE,MAAM;gBACT,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;gBACrC,UAAU;aACX,CAAC;YACF,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;gBAC3C,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;oBAC/C,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE;iBAC1B,CAAC,CAAC;gBACH,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;gBAC7D,0FAA0F;gBAC1F,MAAM,MAAM,GAAG,MAAM,EAAE,cAAc;oBACnC,CAAC,CAAC;wBACE,GAAG,KAAK;wBACR,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,cAAc,EAAE,MAAM,CAAC,cAAc;qBACtC;oBACH,CAAC,CAAC,KAAK,CAAC;gBACV,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC;oBAClC,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE;oBACzB,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE;iBACnC,CAAC,CAAC;gBACH,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YACxD,CAAC,CAAC,CAAC;YACH,OAAO;gBACL,MAAM;gBACN,IAAI;gBACJ,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,IAAI;oBAC9B,CAAC,CAAC;wBACE,SAAS,EAAE;4BACT,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,4BAA4B;4BAC3D,SAAS,EAAE,IAAI;yBAChB;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;aACzD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/secrets-stores.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Where the plugin keeps sealed values: variables (`agSecrets`) and model service keys (`agModelServices`), for
+ * `nocobase secrets status` and `secrets rotate`.
+ */
+import { type SecretsStore } from '@nocobase/app-server/secrets';
+import type { DatabaseConnection } from '@nocobase/db';
+export declare function createAgentsSecretsStores(connection: () => DatabaseConnection): SecretsStore[];
+//# sourceMappingURL=secrets-stores.d.ts.map

package/dist/server/secrets-stores.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-stores.d.ts","sourceRoot":"","sources":["../../server/secrets-stores.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAEL,KAAK,YAAY,EAClB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AASvD,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,kBAAkB,GACnC,YAAY,EAAE,CAkChB"}

package/dist/server/secrets-stores.js

@@ -0,0 +1,43 @@
+/**
+ * Where the plugin keeps sealed values: variables (`agSecrets`) and model service keys (`agModelServices`), for
+ * `nocobase secrets status` and `secrets rotate`.
+ */
+import { createSecretsTableStore, } from '@nocobase/app-server/secrets';
+import { ACCESS_NAMESPACE } from '../shared/access.js';
+import { variableAad } from './core/variables/index.js';
+import { MODEL_SERVICE_KEY_SECRET_PURPOSE, VARIABLES_SECRET_PURPOSE, } from './kernel/secrets.js';
+export function createAgentsSecretsStores(connection) {
+    return [
+        createSecretsTableStore({
+            name: `${ACCESS_NAMESPACE}/variables`,
+            table: 'agSecrets',
+            select: ['scope', 'scopeId', 'name'],
+            columns: [
+                {
+                    column: 'valueEncrypted',
+                    purpose: VARIABLES_SECRET_PURPOSE,
+                    aad: (row) => variableAad({
+                        scope: String(row.scope),
+                        scopeId: String(row.scopeId),
+                        name: String(row.name),
+                    }),
+                },
+            ],
+            connection,
+        }),
+        createSecretsTableStore({
+            name: `${ACCESS_NAMESPACE}/model-services`,
+            table: 'agModelServices',
+            key: 'name',
+            columns: [
+                {
+                    column: 'apiKeyEncrypted',
+                    purpose: MODEL_SERVICE_KEY_SECRET_PURPOSE,
+                    aad: (row) => [String(row.name)],
+                },
+            ],
+            connection,
+        }),
+    ];
+}
+//# sourceMappingURL=secrets-stores.js.map

package/dist/server/secrets-stores.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-stores.js","sourceRoot":"","sources":["../../server/secrets-stores.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,uBAAuB,GAExB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EACL,gCAAgC,EAChC,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,UAAU,yBAAyB,CACvC,UAAoC;IAEpC,OAAO;QACL,uBAAuB,CAAC;YACtB,IAAI,EAAE,GAAG,gBAAgB,YAAY;YACrC,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC;YACpC,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE,gBAAgB;oBACxB,OAAO,EAAE,wBAAwB;oBACjC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,WAAW,CAAC;wBACV,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;wBACxB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;wBAC5B,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;qBACvB,CAAC;iBACL;aACF;YACD,UAAU;SACX,CAAC;QACF,uBAAuB,CAAC;YACtB,IAAI,EAAE,GAAG,gBAAgB,iBAAiB;YAC1C,KAAK,EAAE,iBAAiB;YACxB,GAAG,EAAE,MAAM;YACX,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE,iBAAiB;oBACzB,OAAO,EAAE,gCAAgC;oBACzC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;iBACjC;aACF;YACD,UAAU;SACX,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/server/testing.d.ts

@@ -0,0 +1,14 @@
+export { createAgents, type AgentsDeps } from './composition.js';
+export { runCredentialResolver } from './cli/run-credential.js';
+export { bindCliSurface, type CliSurface, type CliSurfaceOptions, } from './cli/surface.js';
+export { createRunRoutes, type RunEnv } from './routes/run.js';
+export { createRosterRoutes } from './routes/roster.js';
+export { createAdminRoutes as createRunnersAdminRoutes, type AdminCaller as RunnersAdminCaller, type AdminEnv as RunnersAdminEnv, } from './routes/runners/admin.js';
+export { createDistRoutes, type DistRoutesOptions, } from './routes/runners/dist.js';
+export { createInstallRoutes } from './routes/runners/install.js';
+export { createRunnerRoutes, type RunnerRoutesOptions, } from './routes/runners/runner.js';
+/** This plugin's migrations, for `createMigrator({ directory, packageName: AGENTS_PACKAGE })`. */
+export declare const AGENTS_MIGRATIONS: string;
+/** The package name the migrations are recorded under. */
+export declare const AGENTS_PACKAGE = "@nocobase/app-plugin-agents";
+//# sourceMappingURL=testing.d.ts.map

package/dist/server/testing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../../server/testing.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,YAAY,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EACL,cAAc,EACd,KAAK,UAAU,EACf,KAAK,iBAAiB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,KAAK,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EACL,iBAAiB,IAAI,wBAAwB,EAC7C,KAAK,WAAW,IAAI,kBAAkB,EACtC,KAAK,QAAQ,IAAI,eAAe,GACjC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,gBAAgB,EAChB,KAAK,iBAAiB,GACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,GACzB,MAAM,4BAA4B,CAAC;AAEpC,kGAAkG;AAClG,eAAO,MAAM,iBAAiB,EAAE,MAG/B,CAAC;AAEF,0DAA0D;AAC1D,eAAO,MAAM,cAAc,gCAAgC,CAAC"}

package/dist/server/testing.js

@@ -0,0 +1,21 @@
+/**
+ * For an application's tests of what it builds on this plugin: the services assembled against a database the test
+ * opens, this plugin's migrations, the run and runner routes to mount on a test server with the test's own
+ * authentication, the run token as a credential of the application's authentication and the plugin's part of the
+ * command manifest. Not for production code: the plugin's providers and routes assemble and mount these there.
+ */
+import path from 'node:path';
+export { createAgents } from './composition.js';
+export { runCredentialResolver } from './cli/run-credential.js';
+export { bindCliSurface, } from './cli/surface.js';
+export { createRunRoutes } from './routes/run.js';
+export { createRosterRoutes } from './routes/roster.js';
+export { createAdminRoutes as createRunnersAdminRoutes, } from './routes/runners/admin.js';
+export { createDistRoutes, } from './routes/runners/dist.js';
+export { createInstallRoutes } from './routes/runners/install.js';
+export { createRunnerRoutes, } from './routes/runners/runner.js';
+/** This plugin's migrations, for `createMigrator({ directory, packageName: AGENTS_PACKAGE })`. */
+export const AGENTS_MIGRATIONS = path.resolve(import.meta.dirname, '../database/migrations');
+/** The package name the migrations are recorded under. */
+export const AGENTS_PACKAGE = '@nocobase/app-plugin-agents';
+//# sourceMappingURL=testing.js.map

package/dist/server/testing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.js","sourceRoot":"","sources":["../../server/testing.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAmB,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EACL,cAAc,GAGf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAe,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EACL,iBAAiB,IAAI,wBAAwB,GAG9C,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,gBAAgB,GAEjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EACL,kBAAkB,GAEnB,MAAM,4BAA4B,CAAC;AAEpC,kGAAkG;AAClG,MAAM,CAAC,MAAM,iBAAiB,GAAW,IAAI,CAAC,OAAO,CACnD,MAAM,CAAC,IAAI,CAAC,OAAO,EACnB,wBAAwB,CACzB,CAAC;AAEF,0DAA0D;AAC1D,MAAM,CAAC,MAAM,cAAc,GAAG,6BAA6B,CAAC"}

package/dist/server/tokens.d.ts

@@ -0,0 +1,42 @@
+import type { AuthorizationIdentity } from '@nocobase/authorization/core';
+import { type ServiceToken } from '@nocobase/service-provider';
+import type { BusinessKey, Scope } from '../shared/access.js';
+import type { Agents } from './composition.js';
+export type { Agents } from './composition.js';
+export type { ModelSelectionPolicies, ModelSelectionPolicy, } from './core/runs/selection.js';
+export type { AgentDefaults, AgentService } from './core/agents/index.js';
+export { runnerAgentId } from './core/agents/index.js';
+export type { ActionGate, CallerGate, CallerIdentity, CallerKind, } from './core/callers/index.js';
+export { AGENTS_VIEW_ACTION, isReadingAction, RUN_SELF_ACTION, } from './core/callers/index.js';
+export type { ConversationNews, ConversationRef, ConversationRuleLines, ConversationRules, ConversationRulesContext, ConversationService, ConversationSourceKind, PageContextResolver, ResolvedRef, } from './core/conversations/index.js';
+export type { ModelUsageEntry, ModelUsageRecorder, ReportCaller, ReportRange, ReportService, } from './core/reports/index.js';
+export type { EmbedRequest, EmbedResult, GenerateRequest, ModelEndpoint, RerankRequest, RerankResult, ModelMessage, ModelErrorCode, ModelEvent, ModelRequest, ModelToolCall, ModelToolSpec, ModelUsage, ModelGateway, ModelServices, } from './online/index.js';
+export { commandRef } from './core/runs/ports.js';
+export { RepoAccessError } from './core/runs/extensions.js';
+export { executionForViewer, runForViewer, type RunMachineViewer, } from './core/runs/execution-view.js';
+export { RUN_CREDENTIAL, runIdentityOf, type RunCredentialData, } from './cli/run-credential.js';
+export type { ScopeAccess, ScopeKind, ScopeKindRegistry, } from './kernel/scopes.js';
+export type { BriefPreviewer, BriefSectionProvider, BriefSectionRegistry, ClaimContext, ExtensionPrepare, ContextProvider, EnqueueRequest, EnqueueResult, RunEnqueued, RunRequestPending, RunRequestFilter, RunRequestReassignment, RunRequestService, RequestedRun, MountContext, MountOffer, NewInput, RepoAccessContext, RepoAccessProvider, RepoAccessRegistry, RepoCredentialGrant, RepoCredentialRequest, RepoPrepareOptions, RunMountProvider, RunMountRegistry, RunService, SubjectAssembly, SubjectSample, SubjectBinding, SubjectDir, SubjectFacts, SubjectRegistry, SubjectReports, SubjectWorkspaces, SubjectScope, WorkSink, } from './core/runs/index.js';
+export type { AgentAvailability, Availability } from './core/runs/index.js';
+export type { Tx } from './kernel/tx.js';
+export type { AgentsEvent, AgentsEventBus, AgentsNotice, } from './kernel/events.js';
+export type { DistConfig, DistNpmSource, DistService, } from './distribution/index.js';
+export { JobSecretsNotAllowed } from './jobs/index.js';
+export type { BuildJobSpecInput, EnqueueJobInput, JobChange, JobEnvInput, JobKindRegistration, JobPrepareContext, JobRepoInput, JobSecretSource, JobService, JobSpecInput, JobSpecInputs, RegisteredJobKind, SecretRef, } from './jobs/index.js';
+export type { RunnerEnv, RunnerService, RunnerSweeper, Slots, SweepReport, WorkSignal, } from './runners/index.js';
+export type { PeopleSource } from './kernel/people.js';
+export type { Embedder, VectorAvailability, VectorCollection, VectorCollectionSpec, VectorCollectionStatus, VectorFilter, VectorIndexInfo, VectorItem, VectorItemState, VectorMatch, VectorMetadata, VectorMetric, VectorProblem, Vectors, VectorsConfig, VectorsStatus, VectorSourceItem, VectorStore, VectorStoreContext, VectorStoreInfo, VectorStoreRegistry, VectorStoreType, VectorUnavailableCode, } from './vectors/index.js';
+export type { AgentsConfig } from './providers/agents.js';
+/** The plugin's services, bound by `AgentsProvider`. */
+export declare const agentsToken: ServiceToken<Agents>;
+/**
+ * How far a caller's business actions reach (`BUSINESS_ACTIONS` in `shared/access.ts`), from the roles the application
+ * keeps. Resolved on each request, so it may be bound after this plugin registers. Unbound, every level is `none` and
+ * only managing agents (the `agents.agents` settings item) lets anyone change agents and skills.
+ */
+export interface AgentsAccess {
+    /** The level of `key` for the caller, decided before any transaction opens. */
+    scopeOf(identity: AuthorizationIdentity, key: BusinessKey): Promise<Scope>;
+}
+export declare const agentsAccessToken: ServiceToken<AgentsAccess>;
+//# sourceMappingURL=tokens.d.ts.map

package/dist/server/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../server/tokens.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAEL,KAAK,YAAY,EAClB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE/C,YAAY,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,YAAY,EACV,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,YAAY,EACV,UAAU,EACV,UAAU,EACV,cAAc,EACd,UAAU,GACX,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,eAAe,GAChB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,iBAAiB,EACjB,wBAAwB,EACxB,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,EACnB,WAAW,GACZ,MAAM,+BAA+B,CAAC;AACvC,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,YAAY,EACZ,WAAW,EACX,aAAa,GACd,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,YAAY,EACZ,WAAW,EACX,eAAe,EACf,aAAa,EACb,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,UAAU,EACV,YAAY,EACZ,aAAa,EACb,aAAa,EACb,UAAU,EACV,YAAY,EACZ,aAAa,GACd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,KAAK,gBAAgB,GACtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,cAAc,EACd,aAAa,EACb,KAAK,iBAAiB,GACvB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,WAAW,EACX,SAAS,EACT,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,cAAc,EACd,oBAAoB,EACpB,oBAAoB,EACpB,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,aAAa,EACb,cAAc,EACd,UAAU,EACV,YAAY,EACZ,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,QAAQ,GACT,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAC5E,YAAY,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACzC,YAAY,EACV,WAAW,EACX,cAAc,EACd,YAAY,GACb,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,UAAU,EACV,aAAa,EACb,WAAW,GACZ,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,YAAY,EACV,iBAAiB,EACjB,eAAe,EACf,SAAS,EACT,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,UAAU,EACV,YAAY,EACZ,aAAa,EACb,iBAAiB,EACjB,SAAS,GACV,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,SAAS,EACT,aAAa,EACb,aAAa,EACb,KAAK,EACL,WAAW,EACX,UAAU,GACX,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,YAAY,EACV,QAAQ,EACR,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,YAAY,EACZ,eAAe,EACf,UAAU,EACV,eAAe,EACf,WAAW,EACX,cAAc,EACd,YAAY,EACZ,aAAa,EACb,OAAO,EACP,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,WAAW,EACX,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAE1D,wDAAwD;AACxD,eAAO,MAAM,WAAW,EAAE,YAAY,CAAC,MAAM,CAE5C,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,+EAA+E;IAC/E,OAAO,CAAC,QAAQ,EAAE,qBAAqB,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;CAC5E;AAED,eAAO,MAAM,iBAAiB,EAAE,YAAY,CAAC,YAAY,CACe,CAAC"}

package/dist/server/tokens.js

@@ -0,0 +1,12 @@
+import { createServiceToken, } from '@nocobase/service-provider';
+export { runnerAgentId } from './core/agents/index.js';
+export { AGENTS_VIEW_ACTION, isReadingAction, RUN_SELF_ACTION, } from './core/callers/index.js';
+export { commandRef } from './core/runs/ports.js';
+export { RepoAccessError } from './core/runs/extensions.js';
+export { executionForViewer, runForViewer, } from './core/runs/execution-view.js';
+export { RUN_CREDENTIAL, runIdentityOf, } from './cli/run-credential.js';
+export { JobSecretsNotAllowed } from './jobs/index.js';
+/** The plugin's services, bound by `AgentsProvider`. */
+export const agentsToken = createServiceToken('@nocobase/app-plugin-agents/agents');
+export const agentsAccessToken = createServiceToken('@nocobase/app-plugin-agents/access');
+//# sourceMappingURL=tokens.js.map

package/dist/server/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../server/tokens.ts"],"names":[],"mappings":"AACA,OAAO,EACL,kBAAkB,GAEnB,MAAM,4BAA4B,CAAC;AAWpC,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAOvD,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,eAAe,GAChB,MAAM,yBAAyB,CAAC;AAoCjC,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EACL,kBAAkB,EAClB,YAAY,GAEb,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,cAAc,EACd,aAAa,GAEd,MAAM,yBAAyB,CAAC;AAwDjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAqDvD,wDAAwD;AACxD,MAAM,CAAC,MAAM,WAAW,GAAyB,kBAAkB,CACjE,oCAAoC,CACrC,CAAC;AAYF,MAAM,CAAC,MAAM,iBAAiB,GAC5B,kBAAkB,CAAe,oCAAoC,CAAC,CAAC"}

package/dist/server/vectors/index.d.ts

@@ -0,0 +1,7 @@
+/** Vector collections over a pluggable vector store (`vectors.ts`), and the `sqlite-vec` and `pgvector` stores. */
+export { BACKOFF_MS, BATCH, createVectors, createVectorStoreRegistry, hashOf, matches, MAX_ATTEMPTS, type VectorsDeps, } from './vectors.js';
+export { keyOf, tableOf } from './naming.js';
+export { createPgvectorStore, PGVECTOR, pgvectorConnectionOf, pgvectorStoreType, pgvectorTargetOf, whereOf, } from './pgvector.js';
+export { createSqliteVecStore, SQLITE_VEC, SQLITE_VEC_FILE, sqliteVecFileOf, sqliteVecStoreType, sqliteWhereOf, } from './sqlite-vec.js';
+export type { Embedder, VectorAvailability, VectorCollection, VectorCollectionSpec, VectorCollectionStatus, VectorFilter, VectorIndexInfo, VectorIndexSpec, VectorItem, VectorItemState, VectorMatch, VectorMetadata, VectorMetric, VectorProblem, Vectors, VectorsConfig, VectorsStatus, VectorSourceItem, VectorStore, VectorStoreContext, VectorStoreInfo, VectorStoreRegistry, VectorStoreType, VectorUnavailableCode, VectorValue, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/vectors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../server/vectors/index.ts"],"names":[],"mappings":"AAAA,mHAAmH;AACnH,OAAO,EACL,UAAU,EACV,KAAK,EACL,aAAa,EACb,yBAAyB,EACzB,MAAM,EACN,OAAO,EACP,YAAY,EACZ,KAAK,WAAW,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EACL,mBAAmB,EACnB,QAAQ,EACR,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,OAAO,GACR,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,oBAAoB,EACpB,UAAU,EACV,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,aAAa,GACd,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,QAAQ,EACR,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,YAAY,EACZ,eAAe,EACf,eAAe,EACf,UAAU,EACV,eAAe,EACf,WAAW,EACX,cAAc,EACd,YAAY,EACZ,aAAa,EACb,OAAO,EACP,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,WAAW,EACX,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,WAAW,GACZ,MAAM,YAAY,CAAC"}

package/dist/server/vectors/index.js

@@ -0,0 +1,6 @@
+/** Vector collections over a pluggable vector store (`vectors.ts`), and the `sqlite-vec` and `pgvector` stores. */
+export { BACKOFF_MS, BATCH, createVectors, createVectorStoreRegistry, hashOf, matches, MAX_ATTEMPTS, } from './vectors.js';
+export { keyOf, tableOf } from './naming.js';
+export { createPgvectorStore, PGVECTOR, pgvectorConnectionOf, pgvectorStoreType, pgvectorTargetOf, whereOf, } from './pgvector.js';
+export { createSqliteVecStore, SQLITE_VEC, SQLITE_VEC_FILE, sqliteVecFileOf, sqliteVecStoreType, sqliteWhereOf, } from './sqlite-vec.js';
+//# sourceMappingURL=index.js.map

package/dist/server/vectors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../server/vectors/index.ts"],"names":[],"mappings":"AAAA,mHAAmH;AACnH,OAAO,EACL,UAAU,EACV,KAAK,EACL,aAAa,EACb,yBAAyB,EACzB,MAAM,EACN,OAAO,EACP,YAAY,GAEb,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EACL,mBAAmB,EACnB,QAAQ,EACR,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,OAAO,GACR,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,oBAAoB,EACpB,UAAU,EACV,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,aAAa,GACd,MAAM,iBAAiB,CAAC"}

package/dist/server/vectors/naming.d.ts

@@ -0,0 +1,6 @@
+/** Names the SQL stores share: an index's table, and the metadata keys a filter may name. */
+/** The table of an index. */
+export declare function tableOf(index: string): string;
+/** A metadata key a filter may name, as it is: only plain keys are taken, so it can be written into SQL. */
+export declare function keyOf(key: string): string;
+//# sourceMappingURL=naming.d.ts.map

package/dist/server/vectors/naming.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"naming.d.ts","sourceRoot":"","sources":["../../../server/vectors/naming.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAE7F,6BAA6B;AAC7B,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAK7C;AAED,4GAA4G;AAC5G,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAIzC"}

package/dist/server/vectors/naming.js

@@ -0,0 +1,15 @@
+/** Names the SQL stores share: an index's table, and the metadata keys a filter may name. */
+/** The table of an index. */
+export function tableOf(index) {
+    const name = index.toLowerCase().replace(/[^a-z0-9_]/gu, '_');
+    if (!name || name.length > 59)
+        throw new Error(`The vector index name ${index} is not usable.`);
+    return `agv_${name}`;
+}
+/** A metadata key a filter may name, as it is: only plain keys are taken, so it can be written into SQL. */
+export function keyOf(key) {
+    if (!/^[A-Za-z0-9_.-]{1,64}$/u.test(key))
+        throw new Error(`The metadata key ${key} cannot be filtered on.`);
+    return key;
+}
+//# sourceMappingURL=naming.js.map

package/dist/server/vectors/naming.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"naming.js","sourceRoot":"","sources":["../../../server/vectors/naming.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAE7F,6BAA6B;AAC7B,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IAC9D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;QAC3B,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,iBAAiB,CAAC,CAAC;IACnE,OAAO,OAAO,IAAI,EAAE,CAAC;AACvB,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,KAAK,CAAC,GAAW;IAC/B,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,yBAAyB,CAAC,CAAC;IACpE,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/server/vectors/pgvector.d.ts

@@ -0,0 +1,26 @@
+import type { VectorFilter, VectorStore, VectorStoreContext, VectorStoreType } from './types.js';
+/** What this store needs of its client (knex). */
+interface SqlClient {
+    raw(sql: string, bindings?: readonly unknown[]): Promise<unknown>;
+    transaction<T>(fn: (trx: SqlClient) => Promise<T>): Promise<T>;
+}
+interface KnexClient extends SqlClient {
+    destroy(): Promise<void>;
+}
+type KnexFactory = (config: Record<string, unknown>) => KnexClient;
+export declare const PGVECTOR = "pgvector";
+/** The WHERE condition of a filter, with its bindings. */
+export declare function whereOf(filter: VectorFilter | undefined): {
+    sql: string;
+    bindings: unknown[];
+};
+/** The `pg` connection settings of `agents.vectors`; null when it names no database server. */
+export declare function pgvectorConnectionOf(config: Readonly<Record<string, unknown>>): Record<string, unknown> | null;
+/** Where the store points, with no password and no query: `postgres://user@host:port/database`. */
+export declare function pgvectorTargetOf(config: Readonly<Record<string, unknown>>): string;
+export declare function createPgvectorStore(context: VectorStoreContext, 
+/** Makes the client; knex by default (for tests). */
+connect?: KnexFactory): VectorStore;
+export declare const pgvectorStoreType: VectorStoreType;
+export {};
+//# sourceMappingURL=pgvector.d.ts.map

package/dist/server/vectors/pgvector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pgvector.d.ts","sourceRoot":"","sources":["../../../server/vectors/pgvector.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAEV,YAAY,EAKZ,WAAW,EACX,kBAAkB,EAClB,eAAe,EAChB,MAAM,YAAY,CAAC;AAEpB,kDAAkD;AAClD,UAAU,SAAS;IACjB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClE,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAChE;AAED,UAAU,UAAW,SAAQ,SAAS;IACpC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,KAAK,WAAW,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,UAAU,CAAC;AAEnE,eAAO,MAAM,QAAQ,aAAa,CAAC;AAsCnC,0DAA0D;AAC1D,wBAAgB,OAAO,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,GAAG;IACzD,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB,CAkBA;AAoBD,+FAA+F;AAC/F,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACxC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAoBhC;AAED,mGAAmG;AACnG,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACxC,MAAM,CAiBR;AAKD,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,kBAAkB;AAC3B,qDAAqD;AACrD,OAAO,CAAC,EAAE,WAAW,GACpB,WAAW,CA2Qb;AAED,eAAO,MAAM,iBAAiB,EAAE,eAG/B,CAAC"}