@okrlinkhub/agent-bridge 0.1.0 → 2.0.0

package/dist/component/gateway.js

@@ -1,151 +1,120 @@
 import { v } from "convex/values";
 import { mutation, query } from "./_generated/server.js";
-// --- Token hashing utility (same as provisioning.ts) ---
-async function hashToken(token) {
-    const encoder = new TextEncoder();
-    const data = encoder.encode(token);
-    const hash = await crypto.subtle.digest("SHA-256", data);
-    return Array.from(new Uint8Array(hash))
-        .map((b) => b.toString(16).padStart(2, "0"))
-        .join("");
-}
-// --- Pattern matching (same logic as permissions.ts) ---
-function patternSpecificity(pattern) {
-    const wildcardIndex = pattern.indexOf("*");
-    if (wildcardIndex === -1)
-        return pattern.length;
-    return wildcardIndex;
-}
-function matchesPattern(functionName, pattern) {
-    if (pattern === "*")
-        return true;
-    const escaped = pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&");
-    const regexStr = "^" + escaped.replace(/\*/g, ".*") + "$";
-    return new RegExp(regexStr).test(functionName);
-}
-// --- Authorize request result validator ---
+import { findBestPermissionMatch, hashApiKey, } from "./agentBridgeUtils.js";
 const authorizeResultValidator = v.union(v.object({
     authorized: v.literal(true),
-    agentId: v.string(),
-    appName: v.string(),
-    functionHandle: v.string(),
-    functionType: v.union(v.literal("query"), v.literal("mutation"), v.literal("action")),
+    agentId: v.id("agents"),
 }), v.object({
     authorized: v.literal(false),
     error: v.string(),
     statusCode: v.number(),
-    agentId: v.optional(v.string()),
-    matchedPattern: v.optional(v.string()),
-    matchedPermission: v.optional(v.union(v.literal("allow"), v.literal("deny"), v.literal("rate_limited"))),
+    agentId: v.optional(v.id("agents")),
+    retryAfterSeconds: v.optional(v.number()),
 }));
 /**
  * Authorize an agent request.
  * This is a mutation (not a query) because it updates counters and last activity.
  *
  * Steps:
- * 1. Validate instance token
+ * 1. Validate API key
  * 2. Check agent is active
  * 3. Check function permissions
- * 4. Look up function handle in registry
- * 5. Update activity counters
+ * 4. Check function global override
+ * 5. Check rate limits
  *
- * Returns the function handle info if authorized, or an error.
+ * Returns the agent id if authorized, or an error.
  */
 export const authorizeRequest = mutation({
     args: {
-        instanceToken: v.string(),
-        functionName: v.string(),
-        appName: v.string(),
+        apiKey: v.string(),
+        functionKey: v.string(),
+        estimatedCost: v.optional(v.number()),
     },
     returns: authorizeResultValidator,
     handler: async (ctx, args) => {
-        // 1. Validate instance token
-        const tokenHash = await hashToken(args.instanceToken);
-        const instance = await ctx.db
-            .query("agentAppInstances")
-            .withIndex("by_instance_token_hash", (q) => q.eq("instanceTokenHash", tokenHash))
+        const apiKeyHash = await hashApiKey(args.apiKey);
+        const agent = await ctx.db
+            .query("agents")
+            .withIndex("by_apiKeyHash", (q) => q.eq("apiKeyHash", apiKeyHash))
             .unique();
-        if (!instance) {
+        if (!agent) {
             return {
                 authorized: false,
-                error: "Invalid instance token",
+                error: "Invalid API key",
                 statusCode: 401,
             };
         }
-        if (instance.expiresAt < Date.now()) {
+        if (!agent.enabled) {
             return {
                 authorized: false,
-                error: "Instance token has expired",
-                statusCode: 401,
+                error: "Agent disabled",
+                statusCode: 403,
+                agentId: agent._id,
             };
         }
-        if (instance.appName !== args.appName) {
+        const permissions = await ctx.db
+            .query("agentPermissions")
+            .withIndex("by_agentId", (q) => q.eq("agentId", agent._id))
+            .collect();
+        const matchedRule = findBestPermissionMatch(args.functionKey, permissions);
+        if (!matchedRule || matchedRule.permission === "deny") {
             return {
                 authorized: false,
-                error: "Token does not match this app",
+                error: `Function ${args.functionKey} not allowed`,
                 statusCode: 403,
+                agentId: agent._id,
             };
         }
-        const agentId = instance.agentId;
-        // 2. Check agent is active
-        const agent = await ctx.db
-            .query("registeredAgents")
-            .withIndex("by_agent_id", (q) => q.eq("agentId", agentId))
+        const functionOverride = await ctx.db
+            .query("agentFunctions")
+            .withIndex("by_key", (q) => q.eq("key", args.functionKey))
             .unique();
-        if (!agent || !agent.isActive) {
+        if (functionOverride && !functionOverride.enabled) {
             return {
                 authorized: false,
-                error: "Agent has been revoked",
+                error: `Function ${args.functionKey} disabled`,
                 statusCode: 403,
-                agentId,
+                agentId: agent._id,
             };
         }
-        // 3. Check permissions
-        const permissions = await ctx.db
-            .query("functionPermissions")
-            .withIndex("by_agent_and_app", (q) => q.eq("agentId", agentId).eq("appName", args.appName))
+        const effectiveHourlyLimit = resolveEffectiveHourlyLimit(agent.rateLimit, matchedRule.permission, matchedRule.rateLimitConfig?.requestsPerHour, functionOverride?.globalRateLimit);
+        const oneHourAgo = Date.now() - 60 * 60 * 1000;
+        const recentLogs = await ctx.db
+            .query("agentLogs")
+            .withIndex("by_agentId_and_timestamp", (q) => q.eq("agentId", agent._id))
             .collect();
-        const matches = permissions
-            .filter((p) => matchesPattern(args.functionName, p.functionPattern))
-            .sort((a, b) => patternSpecificity(b.functionPattern) -
-            patternSpecificity(a.functionPattern));
-        if (matches.length === 0 || matches[0].permission === "deny") {
-            const bestMatch = matches[0];
+        const recentCallCount = recentLogs.filter((log) => log.timestamp >= oneHourAgo).length;
+        if (recentCallCount >= effectiveHourlyLimit) {
             return {
                 authorized: false,
-                error: "Function not authorized for this agent",
-                statusCode: 403,
-                agentId,
-                matchedPattern: bestMatch?.functionPattern,
-                matchedPermission: bestMatch?.permission,
+                error: "Rate limit exceeded",
+                statusCode: 429,
+                retryAfterSeconds: 3600,
+                agentId: agent._id,
             };
         }
-        // TODO: For rate_limited permissions, check rate counters here
-        // (circuit breaker - deferred to post-MVP)
-        // 4. Look up function handle
-        const fnEntry = await ctx.db
-            .query("functionRegistry")
-            .withIndex("by_app_and_function", (q) => q.eq("appName", args.appName).eq("functionName", args.functionName))
-            .unique();
-        if (!fnEntry) {
-            return {
-                authorized: false,
-                error: `Function "${args.functionName}" is not registered`,
-                statusCode: 404,
-                agentId,
-            };
+        if (matchedRule.permission === "rate_limited" &&
+            matchedRule.rateLimitConfig?.tokenBudget !== undefined) {
+            const estimatedCost = args.estimatedCost ?? 0;
+            const tokenEstimate = recentLogs
+                .filter((log) => log.timestamp >= oneHourAgo)
+                .reduce((sum, log) => sum + estimateCostFromLog(log.args), 0);
+            if (tokenEstimate + estimatedCost > matchedRule.rateLimitConfig.tokenBudget) {
+                return {
+                    authorized: false,
+                    error: "Token budget exceeded",
+                    statusCode: 429,
+                    retryAfterSeconds: 3600,
+                    agentId: agent._id,
+                };
+            }
         }
-        // 5. Update activity counters
-        await ctx.db.patch(instance._id, {
-            lastActivityAt: Date.now(),
-            monthlyRequests: instance.monthlyRequests + 1,
+        await ctx.db.patch(agent._id, {
+            lastUsed: Date.now(),
         });
         return {
             authorized: true,
-            agentId,
-            appName: args.appName,
-            functionHandle: fnEntry.functionHandle,
-            functionType: fnEntry.functionType,
+            agentId: agent._id,
         };
     },
 });
@@ -155,23 +124,24 @@ export const authorizeRequest = mutation({
  */
 export const logAccess = mutation({
     args: {
-        agentId: v.string(),
-        appName: v.string(),
-        functionCalled: v.string(),
-        permission: v.string(),
-        errorMessage: v.optional(v.string()),
-        durationMs: v.optional(v.number()),
+        agentId: v.id("agents"),
+        functionKey: v.string(),
+        args: v.any(),
+        result: v.optional(v.any()),
+        error: v.optional(v.string()),
+        duration: v.number(),
+        timestamp: v.number(),
     },
     returns: v.null(),
     handler: async (ctx, args) => {
-        await ctx.db.insert("accessLog", {
-            timestamp: Date.now(),
+        await ctx.db.insert("agentLogs", {
+            timestamp: args.timestamp,
             agentId: args.agentId,
-            appName: args.appName,
-            functionCalled: args.functionCalled,
-            permission: args.permission,
-            errorMessage: args.errorMessage,
-            durationMs: args.durationMs,
+            functionKey: args.functionKey,
+            args: args.args,
+            result: args.result,
+            error: args.error,
+            duration: args.duration,
         });
         return null;
     },
@@ -181,51 +151,76 @@ export const logAccess = mutation({
  */
 export const queryAccessLog = query({
     args: {
-        agentId: v.optional(v.string()),
-        appName: v.optional(v.string()),
+        agentId: v.optional(v.id("agents")),
+        functionKey: v.optional(v.string()),
         limit: v.optional(v.number()),
     },
     returns: v.array(v.object({
+        _id: v.id("agentLogs"),
         timestamp: v.number(),
-        agentId: v.string(),
-        appName: v.string(),
-        functionCalled: v.string(),
-        permission: v.string(),
-        errorMessage: v.optional(v.string()),
-        durationMs: v.optional(v.number()),
+        agentId: v.id("agents"),
+        functionKey: v.string(),
+        args: v.any(),
+        result: v.optional(v.any()),
+        error: v.optional(v.string()),
+        duration: v.number(),
     })),
     handler: async (ctx, args) => {
         const limit = args.limit ?? 50;
-        if (args.agentId) {
+        const agentId = args.agentId;
+        if (agentId !== undefined) {
             const logs = await ctx.db
-                .query("accessLog")
-                .withIndex("by_agent_and_timestamp", (q) => q.eq("agentId", args.agentId))
+                .query("agentLogs")
+                .withIndex("by_agentId_and_timestamp", (q) => q.eq("agentId", agentId))
                 .order("desc")
                 .take(limit);
             return logs.map((l) => ({
+                _id: l._id,
                 timestamp: l.timestamp,
                 agentId: l.agentId,
-                appName: l.appName,
-                functionCalled: l.functionCalled,
-                permission: l.permission,
-                errorMessage: l.errorMessage,
-                durationMs: l.durationMs,
+                functionKey: l.functionKey,
+                args: l.args,
+                result: l.result,
+                error: l.error,
+                duration: l.duration,
             }));
         }
-        // No filter: get recent logs
         const logs = await ctx.db
-            .query("accessLog")
+            .query("agentLogs")
             .order("desc")
             .take(limit);
-        return logs.map((l) => ({
+        const filteredLogs = args.functionKey !== undefined
+            ? logs.filter((log) => log.functionKey === args.functionKey)
+            : logs;
+        return filteredLogs.map((l) => ({
+            _id: l._id,
             timestamp: l.timestamp,
             agentId: l.agentId,
-            appName: l.appName,
-            functionCalled: l.functionCalled,
-            permission: l.permission,
-            errorMessage: l.errorMessage,
-            durationMs: l.durationMs,
+            functionKey: l.functionKey,
+            args: l.args,
+            result: l.result,
+            error: l.error,
+            duration: l.duration,
         }));
     },
 });
+function resolveEffectiveHourlyLimit(baseAgentLimit, permissionType, permissionLimit, globalLimit) {
+    let effective = baseAgentLimit;
+    if (permissionType === "rate_limited" && permissionLimit !== undefined) {
+        effective = Math.min(effective, permissionLimit);
+    }
+    if (globalLimit !== undefined) {
+        effective = Math.min(effective, globalLimit);
+    }
+    return effective;
+}
+function estimateCostFromLog(args) {
+    if (!args || typeof args !== "object") {
+        return 0;
+    }
+    if ("estimatedCost" in args && typeof args.estimatedCost === "number") {
+        return args.estimatedCost;
+    }
+    return 0;
+}
 //# sourceMappingURL=gateway.js.map

package/dist/component/gateway.js.map

@@ -1 +1 @@
-{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../../src/component/gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAEzD,0DAA0D;AAE1D,KAAK,UAAU,SAAS,CAAC,KAAa;IACpC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;SACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,0DAA0D;AAE1D,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,aAAa,KAAK,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC;IAChD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,cAAc,CAAC,YAAoB,EAAE,OAAe;IAC3D,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC;IAC1D,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AACjD,CAAC;AAED,6CAA6C;AAE7C,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CACtC,CAAC,CAAC,MAAM,CAAC;IACP,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,YAAY,EAAE,CAAC,CAAC,KAAK,CACnB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAClB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EACrB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CACpB;CACF,CAAC,EACF,CAAC,CAAC,MAAM,CAAC;IACP,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/B,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACtC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,CAC3B,CAAC,CAAC,KAAK,CACL,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAClB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EACjB,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAC1B,CACF;CACF,CAAC,CACH,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,QAAQ,CAAC;IACvC,IAAI,EAAE;QACJ,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;QACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;QACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACpB;IACD,OAAO,EAAE,wBAAwB;IACjC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,6BAA6B;QAC7B,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,EAAE;aAC1B,KAAK,CAAC,mBAAmB,CAAC;aAC1B,SAAS,CAAC,wBAAwB,EAAE,CAAC,CAAC,EAAE,EAAE,CACzC,CAAC,CAAC,EAAE,CAAC,mBAAmB,EAAE,SAAS,CAAC,CACrC;aACA,MAAM,EAAE,CAAC;QAEZ,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;gBACL,UAAU,EAAE,KAAc;gBAC1B,KAAK,EAAE,wBAAwB;gBAC/B,UAAU,EAAE,GAAG;aAChB,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACpC,OAAO;gBACL,UAAU,EAAE,KAAc;gBAC1B,KAAK,EAAE,4BAA4B;gBACnC,UAAU,EAAE,GAAG;aAChB,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACtC,OAAO;gBACL,UAAU,EAAE,KAAc;gBAC1B,KAAK,EAAE,+BAA+B;gBACtC,UAAU,EAAE,GAAG;aAChB,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QAEjC,2BAA2B;QAC3B,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,EAAE;aACvB,KAAK,CAAC,kBAAkB,CAAC;aACzB,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;aACzD,MAAM,EAAE,CAAC;QAEZ,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC9B,OAAO;gBACL,UAAU,EAAE,KAAc;gBAC1B,KAAK,EAAE,wBAAwB;gBAC/B,UAAU,EAAE,GAAG;gBACf,OAAO;aACR,CAAC;QACJ,CAAC;QAED,uBAAuB;QACvB,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,EAAE;aAC7B,KAAK,CAAC,qBAAqB,CAAC;aAC5B,SAAS,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,CACnC,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CACrD;aACA,OAAO,EAAE,CAAC;QAEb,MAAM,OAAO,GAAG,WAAW;aACxB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC;aACnE,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,kBAAkB,CAAC,CAAC,CAAC,eAAe,CAAC;YACrC,kBAAkB,CAAC,CAAC,CAAC,eAAe,CAAC,CACxC,CAAC;QAEJ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;YAC7D,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAC7B,OAAO;gBACL,UAAU,EAAE,KAAc;gBAC1B,KAAK,EAAE,wCAAwC;gBAC/C,UAAU,EAAE,GAAG;gBACf,OAAO;gBACP,cAAc,EAAE,SAAS,EAAE,eAAe;gBAC1C,iBAAiB,EAAE,SAAS,EAAE,UAAU;aACzC,CAAC;QACJ,CAAC;QAED,+DAA+D;QAC/D,2CAA2C;QAE3C,6BAA6B;QAC7B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,EAAE;aACzB,KAAK,CAAC,kBAAkB,CAAC;aACzB,SAAS,CAAC,qBAAqB,EAAE,CAAC,CAAC,EAAE,EAAE,CACtC,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,CACpE;aACA,MAAM,EAAE,CAAC;QAEZ,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,UAAU,EAAE,KAAc;gBAC1B,KAAK,EAAE,aAAa,IAAI,CAAC,YAAY,qBAAqB;gBAC1D,UAAU,EAAE,GAAG;gBACf,OAAO;aACR,CAAC;QACJ,CAAC;QAED,8BAA8B;QAC9B,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE;YAC/B,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE;YAC1B,eAAe,EAAE,QAAQ,CAAC,eAAe,GAAG,CAAC;SAC9C,CAAC,CAAC;QAEH,OAAO;YACL,UAAU,EAAE,IAAa;YACzB,OAAO;YACP,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,QAAQ,CAAC;IAChC,IAAI,EAAE;QACJ,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;QAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACpC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACnC;IACD,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE;IACjB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE;YAC/B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC;IAClC,IAAI,EAAE;QACJ,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC9B;IACD,OAAO,EAAE,CAAC,CAAC,KAAK,CACd,CAAC,CAAC,MAAM,CAAC;QACP,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;QAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACpC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACnC,CAAC,CACH;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAE/B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE;iBACtB,KAAK,CAAC,WAAW,CAAC;iBAClB,SAAS,CAAC,wBAAwB,EAAE,CAAC,CAAC,EAAE,EAAE,CACzC,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,OAAQ,CAAC,CAC/B;iBACA,KAAK,CAAC,MAAM,CAAC;iBACb,IAAI,CAAC,KAAK,CAAC,CAAC;YAEf,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,cAAc,EAAE,CAAC,CAAC,cAAc;gBAChC,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,UAAU,EAAE,CAAC,CAAC,UAAU;aACzB,CAAC,CAAC,CAAC;QACN,CAAC;QAED,6BAA6B;QAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE;aACtB,KAAK,CAAC,WAAW,CAAC;aAClB,KAAK,CAAC,MAAM,CAAC;aACb,IAAI,CAAC,KAAK,CAAC,CAAC;QAEf,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,UAAU,EAAE,CAAC,CAAC,UAAU;SACzB,CAAC,CAAC,CAAC;IACN,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../../src/component/gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EACL,uBAAuB,EACvB,UAAU,GAEX,MAAM,uBAAuB,CAAC;AAE/B,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CACtC,CAAC,CAAC,MAAM,CAAC;IACP,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC;CACxB,CAAC,EACF,CAAC,CAAC,MAAM,CAAC;IACP,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IACnC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC1C,CAAC,CACH,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,QAAQ,CAAC;IACvC,IAAI,EAAE;QACJ,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;QACvB,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACtC;IACD,OAAO,EAAE,wBAAwB;IACjC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,EAAE;aACvB,KAAK,CAAC,QAAQ,CAAC;aACf,SAAS,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;aACjE,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;gBACL,UAAU,EAAE,KAAc;gBAC1B,KAAK,EAAE,iBAAiB;gBACxB,UAAU,EAAE,GAAG;aAChB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO;gBACL,UAAU,EAAE,KAAc;gBAC1B,KAAK,EAAE,gBAAgB;gBACvB,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,KAAK,CAAC,GAAG;aACnB,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,EAAE;aAC7B,KAAK,CAAC,kBAAkB,CAAC;aACzB,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;aAC1D,OAAO,EAAE,CAAC;QACb,MAAM,WAAW,GAAG,uBAAuB,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAC3E,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;YACtD,OAAO;gBACL,UAAU,EAAE,KAAc;gBAC1B,KAAK,EAAE,YAAY,IAAI,CAAC,WAAW,cAAc;gBACjD,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,KAAK,CAAC,GAAG;aACnB,CAAC;QACJ,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,GAAG,CAAC,EAAE;aAClC,KAAK,CAAC,gBAAgB,CAAC;aACvB,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;aACzD,MAAM,EAAE,CAAC;QACZ,IAAI,gBAAgB,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;YAClD,OAAO;gBACL,UAAU,EAAE,KAAc;gBAC1B,KAAK,EAAE,YAAY,IAAI,CAAC,WAAW,WAAW;gBAC9C,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,KAAK,CAAC,GAAG;aACnB,CAAC;QACJ,CAAC;QAED,MAAM,oBAAoB,GAAG,2BAA2B,CACtD,KAAK,CAAC,SAAS,EACf,WAAW,CAAC,UAAU,EACtB,WAAW,CAAC,eAAe,EAAE,eAAe,EAC5C,gBAAgB,EAAE,eAAe,CAClC,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAC/C,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,EAAE;aAC5B,KAAK,CAAC,WAAW,CAAC;aAClB,SAAS,CAAC,0BAA0B,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;aACxE,OAAO,EAAE,CAAC;QACb,MAAM,eAAe,GAAG,UAAU,CAAC,MAAM,CACvC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,IAAI,UAAU,CACrC,CAAC,MAAM,CAAC;QACT,IAAI,eAAe,IAAI,oBAAoB,EAAE,CAAC;YAC5C,OAAO;gBACL,UAAU,EAAE,KAAc;gBAC1B,KAAK,EAAE,qBAAqB;gBAC5B,UAAU,EAAE,GAAG;gBACf,iBAAiB,EAAE,IAAI;gBACvB,OAAO,EAAE,KAAK,CAAC,GAAG;aACnB,CAAC;QACJ,CAAC;QAED,IACE,WAAW,CAAC,UAAU,KAAK,cAAc;YACzC,WAAW,CAAC,eAAe,EAAE,WAAW,KAAK,SAAS,EACtD,CAAC;YACD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;YAC9C,MAAM,aAAa,GAAG,UAAU;iBAC7B,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,IAAI,UAAU,CAAC;iBAC5C,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAChE,IAAI,aAAa,GAAG,aAAa,GAAG,WAAW,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;gBAC5E,OAAO;oBACL,UAAU,EAAE,KAAc;oBAC1B,KAAK,EAAE,uBAAuB;oBAC9B,UAAU,EAAE,GAAG;oBACf,iBAAiB,EAAE,IAAI;oBACvB,OAAO,EAAE,KAAK,CAAC,GAAG;iBACnB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE;YAC5B,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB,CAAC,CAAC;QAEH,OAAO;YACL,UAAU,EAAE,IAAa;YACzB,OAAO,EAAE,KAAK,CAAC,GAAG;SACnB,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,QAAQ,CAAC;IAChC,IAAI,EAAE;QACJ,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC;QACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;QACvB,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE;QACb,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC3B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;KACtB;IACD,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE;IACjB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC;IAClC,IAAI,EAAE;QACJ,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;QACnC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACnC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC9B;IACD,OAAO,EAAE,CAAC,CAAC,KAAK,CACd,CAAC,CAAC,MAAM,CAAC;QACP,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC;QACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC;QACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;QACvB,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE;QACb,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC3B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;KACrB,CAAC,CACH;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAE/B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE;iBACtB,KAAK,CAAC,WAAW,CAAC;iBAClB,SAAS,CAAC,0BAA0B,EAAE,CAAC,CAAC,EAAE,EAAE,CAC3C,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CACzB;iBACA,KAAK,CAAC,MAAM,CAAC;iBACb,IAAI,CAAC,KAAK,CAAC,CAAC;YAEf,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACrB,CAAC,CAAC,CAAC;QACN,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE;aACtB,KAAK,CAAC,WAAW,CAAC;aAClB,KAAK,CAAC,MAAM,CAAC;aACb,IAAI,CAAC,KAAK,CAAC,CAAC;QACf,MAAM,YAAY,GAChB,IAAI,CAAC,WAAW,KAAK,SAAS;YAC5B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,CAAC;YAC5D,CAAC,CAAC,IAAI,CAAC;QAEX,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9B,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACrB,CAAC,CAAC,CAAC;IACN,CAAC;CACF,CAAC,CAAC;AAEH,SAAS,2BAA2B,CAClC,cAAsB,EACtB,cAA8B,EAC9B,eAAwB,EACxB,WAAoB;IAEpB,IAAI,SAAS,GAAG,cAAc,CAAC;IAC/B,IAAI,cAAc,KAAK,cAAc,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QACvE,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAa;IACxC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,eAAe,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/component/permissions.d.ts

@@ -1,93 +1,39 @@
-/**
- * Set a permission for an agent on a specific app.
- * If a permission with the same agentId + appName + functionPattern exists, it is updated.
- */
-export declare const setPermission: import("convex/server").RegisteredMutation<"public", {
-    rateLimitConfig?: {
-        requestsPerHour: number;
-        tokenBudget: number;
-    } | undefined;
-    appName: string;
-    agentId: string;
-    permission: "allow" | "deny" | "rate_limited";
-    functionPattern: string;
-    createdBy: string;
-}, Promise<import("convex/values").GenericId<"functionPermissions">>>;
-/**
- * Remove a specific permission.
- */
-export declare const removePermission: import("convex/server").RegisteredMutation<"public", {
-    appName: string;
-    agentId: string;
-    functionPattern: string;
-}, Promise<boolean>>;
-/**
- * Check permission for a specific function call.
- * Applies pattern matching with specificity ordering (most specific pattern wins).
- * Default: deny if no matching pattern is found.
- */
-export declare const checkPermission: import("convex/server").RegisteredQuery<"public", {
-    appName: string;
-    functionName: string;
-    agentId: string;
-}, Promise<{
-    permission: "deny";
-    rateLimitConfig?: undefined;
-    matchedPattern?: undefined;
-} | {
-    permission: "allow" | "deny" | "rate_limited";
-    rateLimitConfig: {
-        requestsPerHour: number;
-        tokenBudget: number;
-    } | undefined;
-    matchedPattern: string;
-}>>;
-/**
- * List all permissions for an agent on a specific app.
- */
-export declare const listPermissions: import("convex/server").RegisteredQuery<"public", {
-    appName: string;
-    agentId: string;
+export declare const setAgentPermissions: import("convex/server").RegisteredMutation<"public", {
+    agentId: import("convex/values").GenericId<"agents">;
+    availableFunctionKeys: string[];
+    rules: {
+        rateLimitConfig?: {
+            tokenBudget?: number | undefined;
+            requestsPerHour: number;
+        } | undefined;
+        permission: "allow" | "deny" | "rate_limited";
+        pattern: string;
+    }[];
+}, Promise<number>>;
+export declare const listAgentPermissions: import("convex/server").RegisteredQuery<"public", {
+    agentId: import("convex/values").GenericId<"agents">;
 }, Promise<{
     functionPattern: string;
     permission: "allow" | "deny" | "rate_limited";
     rateLimitConfig: {
+        tokenBudget?: number | undefined;
         requestsPerHour: number;
-        tokenBudget: number;
     } | undefined;
-    createdAt: number;
-    createdBy: string;
+    updatedAt: number;
 }[]>>;
-/**
- * Remove all permissions for a specific agent on a specific app.
- */
-export declare const clearPermissions: import("convex/server").RegisteredMutation<"public", {
-    appName: string;
-    agentId: string;
-}, Promise<number>>;
-/**
- * Debug helper: show permission matching for a specific function call.
- */
-export declare const debugMatchPermission: import("convex/server").RegisteredQuery<"public", {
-    appName: string;
-    functionName: string;
-    agentId: string;
-}, Promise<{
-    functionName: string;
-    permissions: {
-        functionPattern: string;
-        permission: "allow" | "deny" | "rate_limited";
-        specificity: number;
+export declare const setFunctionOverrides: import("convex/server").RegisteredMutation<"public", {
+    availableFunctionKeys: string[];
+    overrides: {
+        globalRateLimit?: number | undefined;
+        enabled: boolean;
+        key: string;
     }[];
-    matches: {
-        functionPattern: string;
-        permission: "allow" | "deny" | "rate_limited";
-        specificity: number;
-    }[];
-    bestMatch: {
-        functionPattern: string;
-        permission: "allow" | "deny" | "rate_limited";
-        specificity: number;
-    };
-}>>;
+}, Promise<number>>;
+export declare const listFunctionOverrides: import("convex/server").RegisteredQuery<"public", {}, Promise<{
+    _id: import("convex/values").GenericId<"agentFunctions">;
+    _creationTime: number;
+    globalRateLimit?: number | undefined;
+    enabled: boolean;
+    key: string;
+}[]>>;
 //# sourceMappingURL=permissions.d.ts.map

package/dist/component/permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/component/permissions.ts"],"names":[],"mappings":"AAiDA;;;GAGG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;qEAqDxB,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;oBAwB3B,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;GAqC1B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;KAuC1B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;mBAoB3B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;GAmE/B,CAAC"}
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/component/permissions.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,mBAAmB;;;;;;;;;;;mBAyC9B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;KAkC/B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;mBAsC/B,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;KAYhC,CAAC"}