@okrlinkhub/agent-factory 0.1.0 → 0.2.0

package/README.md

@@ -56,7 +56,12 @@ Verify status:
 
 ```sh
 npx convex run example:secretStatus '{
-  "secretRefs": ["convex.url", "fly.apiToken", "telegram.botToken"]
+  "secretRefs": [
+    "convex.url",
+    "fly.apiToken",
+    "telegram.botToken",
+    "agent-bridge.serviceKey.default"
+  ]
 }'
 ```
 
@@ -124,7 +129,6 @@ This cron is a safety net. The primary path remains enqueue-triggered reconcile.
 
 ### LLM configuration (Fly env)
 
-LLM selection is intentionally **not stored in `agentProfiles`** anymore.
 The model/provider is controlled by Fly worker environment variables (for example `OPENCLAW_AGENT_MODEL`, `MOONSHOT_API_KEY`, `OPENAI_API_KEY`) and applied at runtime by the worker image bootstrap.
 
 Why:
@@ -144,6 +148,83 @@ If you use `exposeApi(...)`, the worker contract is available directly on the co
 - `workerComplete`
 - `workerFail`
 
+### Native integration with `agent-bridge` (no consumer glue code)
+
+`agent-factory` now exposes a native contract for bridge execution. You only configure profile + secrets in the component.
+
+1) Configure an agent profile with bridge settings:
+
+```ts
+await ctx.runMutation(components.agentFactory.lib.configureAgent, {
+  agentKey: "default",
+  version: "1.0.0",
+  soulMd: "# Soul",
+  clientMd: "# Client",
+  skills: ["agent-bridge"],
+  secretsRef: [],
+  bridgeConfig: {
+    enabled: true,
+    baseUrl: "https://<your-consumer>.convex.site",
+    serviceId: "openclaw-prod",
+    appKey: "crm",
+  },
+  enabled: true,
+});
+```
+
+2) Import bridge service key in component secrets:
+
+```sh
+npx convex run example:importSecret '{
+  "secretRef": "agent-bridge.serviceKey.default",
+  "plaintextValue": "abs_live_XXXXXXXXXXXXXXXX"
+}'
+```
+
+Naming convention supported by hydration resolver:
+- per-agent service key: `agent-bridge.serviceKey.<agentKey>` (recommended)
+- global service key fallback: `agent-bridge.serviceKey`
+- optional profile override: `bridgeConfig.serviceKeySecretRef`
+- optional per-agent/global overrides for `baseUrl`, `serviceId`, `appKey` via:
+  - `agent-bridge.baseUrl.<agentKey>` / `agent-bridge.baseUrl`
+  - `agent-bridge.serviceId.<agentKey>` / `agent-bridge.serviceId`
+  - `agent-bridge.appKey.<agentKey>` / `agent-bridge.appKey`
+
+Hydration includes `bridgeRuntimeConfig` for the worker loop.
+
+3) In worker runtime use built-in helpers from this package:
+
+```ts
+import {
+  maybeExecuteBridgeToolCall,
+  resolveBridgeRuntimeConfig,
+} from "@okrlinkhub/agent-factory";
+
+const resolved = resolveBridgeRuntimeConfig(hydration.bridgeRuntimeConfig);
+if (resolved.ok) {
+  // Optional proactive resolution check
+}
+
+const toolResult = await maybeExecuteBridgeToolCall({
+  toolName: pendingToolCall.toolName,
+  toolArgs,
+  hydratedConfig: hydration.bridgeRuntimeConfig,
+  userToken: maybeUserJwtOrNull,
+});
+```
+
+`maybeExecuteBridgeToolCall` handles:
+- `bridge.<functionKey>` mapping to `POST /agent/execute`
+- strict headers (`X-Agent-Service-Id`, `X-Agent-Service-Key`, `X-Agent-App`)
+- retry for `429` and `5xx`
+- deterministic response object to map back into conversation/tool messages
+
+Fallback env (worker-side only, used when hydration misses values):
+- `OPENCLAW_AGENT_BRIDGE_BASE_URL` or `AGENT_BRIDGE_BASE_URL`
+- `OPENCLAW_SERVICE_ID` or `AGENT_BRIDGE_SERVICE_ID`
+- `OPENCLAW_SERVICE_KEY` or `AGENT_BRIDGE_SERVICE_KEY`
+- `OPENCLAW_AGENT_APP` / `OPENCLAW_APP_KEY` / `AGENT_BRIDGE_APP_KEY`
+
 ### HTTP Routes
 
 You can mount an ingress webhook route in your app:
@@ -233,11 +314,7 @@ Core tables:
 - `workers`
 - `secrets`
 
-Hydration-optimized tables:
-- `workspaceDocuments`
-- `agentSkills`
-- `skillAssets`
-- `hydrationSnapshots`
+Hydration/runtime tables:
 - `conversationHydrationCache`
 - `dataSnapshots`
 
@@ -247,18 +324,16 @@ Hydration-optimized tables:
 - Pre-stop drain protocol added: worker snapshots `/data` before termination and uploads archive metadata into `dataSnapshots`.
 - Restore on boot added: new workers can rehydrate from latest snapshot archive.
 - Hydration improved with `conversationHydrationCache` delta usage.
-- `skillAssets` now contributes to hydration snapshot and fingerprint rebuilds.
+- `agentSkills` and `skillAssets` removed from schema: skills must be baked into the OpenClaw worker image.
 - Worker control/snapshot APIs exposed for runtime loop (`workerControlState`, snapshot upload/finalize/fail, restore lookup).
 
-## OpenClaw workspace mapping
+## OpenClaw workspace persistence
 
-| OpenClaw source | Convex table |
+| OpenClaw source | Persistence layer |
 |---|---|
-| `AGENTS.md`, `SOUL.md`, `USER.md`, `IDENTITY.md`, `HEARTBEAT.md`, `TOOLS.md` | `workspaceDocuments` |
-| `memory/YYYY-MM-DD.md`, `MEMORY.md` | `workspaceDocuments` + `hydrationSnapshots.memoryWindow` |
-| `skills/*/SKILL.md` | `agentSkills` |
-| `skills/*/scripts/*`, `skills/*/config/*` metadata | `skillAssets` |
-| Compiled hydration payload | `hydrationSnapshots` |
+| `AGENTS.md`, `SOUL.md`, `USER.md`, `IDENTITY.md`, `HEARTBEAT.md`, `TOOLS.md` | worker filesystem backup (`/data/workspace`) |
+| `memory/YYYY-MM-DD.md`, `MEMORY.md` | worker filesystem backup (`/data/workspace`) |
+| Skills and related assets | bundled directly in worker image (`openclaw-okr-image`) |
 | Conversation-specific deltas | `conversationHydrationCache` |
 
 ## Failure model
@@ -275,7 +350,6 @@ Hydration-optimized tables:
 - retry policy
 - lease policy
 - scaling policy
-- hydration policy
 - provider config
 
 ## Fly.io provider notes
@@ -286,15 +360,31 @@ The current provider implementation uses Fly Machines API endpoints for:
 - cordon machine
 - terminate machine
 
-### Worker image update procedure (local builder, no Depot)
+### Worker image setup (required first step for custom skills)
+
+Any new skill you want inside OpenClaw agents must be added to the worker image source repo:
+- https://github.com/okrlinkhub/openclaw-okr-image
+
+Fork this repository to maintain your own image with your custom skills/assets.
+
+First required flow:
+1) Take the image repo (fork/clone your own `openclaw-okr-image`).
+2) Build and deploy it on your own Fly app.
+   - Recommended build mode: remote Fly builder, `depot` disabled, `--remote-only`.
+3) Use the published image as reference in `src/component/config.ts` (`DEFAULT_WORKER_IMAGE` is the source of truth).
+4) Repeat the same process for every runtime/skills update.
+
+**Enterprise security model**: The worker image enforces a security policy where only skills explicitly included by the image maintainer are installed by default. Any other skills that may be present in the workspace are automatically removed on each worker startup. This ensures that only approved, vetted skills from the image source can execute within your OpenClaw agents.
+
+### Worker image update procedure
 
 When you update the worker runtime (for example in `openclaw-okr-image/worker.mjs`), use this flow to publish and roll out safely.
 
-1) Deploy with Fly local builder (explicitly disabling Depot):
+1) Deploy with remote Fly builder (explicitly disabling Depot):
 
 ```sh
 cd /path/to/openclaw-okr-image
-fly deploy --local-only --depot=false --yes
+fly deploy --remote-only --depot=false --yes
 ```
 
 2) If deployment fails with `CONVEX_URL not set`, set the secret and retry:

package/dist/client/bridge.d.ts

@@ -0,0 +1,64 @@
+export type HydratedBridgeRuntimeConfig = {
+    baseUrl: string | null;
+    serviceId: string | null;
+    appKey: string | null;
+    serviceKey: string | null;
+    serviceKeySecretRef: string | null;
+};
+export type ResolvedBridgeRuntimeConfig = {
+    baseUrl: string;
+    serviceId: string;
+    appKey: string;
+    serviceKey: string;
+};
+export type BridgeExecutionResult = {
+    success: boolean;
+    status: number;
+    functionKey: string;
+    result?: unknown;
+    error?: string;
+};
+type ExecuteBridgeFunctionArgs = {
+    config: ResolvedBridgeRuntimeConfig;
+    functionKey: string;
+    args: Record<string, unknown>;
+    userToken?: string | null;
+    auditHeaders?: Record<string, string | undefined>;
+    fetchImpl?: typeof fetch;
+    retry?: {
+        maxAttempts?: number;
+        baseDelayMs?: number;
+    };
+};
+type MaybeExecuteBridgeToolCallArgs = {
+    toolName: string;
+    toolArgs: Record<string, unknown>;
+    hydratedConfig: HydratedBridgeRuntimeConfig | null;
+    userToken?: string | null;
+    fetchImpl?: typeof fetch;
+    retry?: {
+        maxAttempts?: number;
+        baseDelayMs?: number;
+    };
+    env?: Record<string, string | undefined>;
+};
+type MaybeExecuteBridgeToolCallResult = {
+    handled: false;
+} | {
+    handled: true;
+    functionKey: string;
+    response: BridgeExecutionResult;
+};
+export declare function resolveBridgeRuntimeConfig(hydratedConfig: HydratedBridgeRuntimeConfig | null | undefined, env?: Record<string, string | undefined>): {
+    ok: true;
+    config: ResolvedBridgeRuntimeConfig;
+} | {
+    ok: false;
+    error: string;
+};
+export declare function isBridgeToolName(toolName: string): boolean;
+export declare function bridgeFunctionKeyFromToolName(toolName: string): string | null;
+export declare function executeBridgeFunction(input: ExecuteBridgeFunctionArgs): Promise<BridgeExecutionResult>;
+export declare function maybeExecuteBridgeToolCall(input: MaybeExecuteBridgeToolCallArgs): Promise<MaybeExecuteBridgeToolCallResult>;
+export {};
+//# sourceMappingURL=bridge.d.ts.map

package/dist/client/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../src/client/bridge.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,2BAA2B,GAAG;IACxC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,KAAK,yBAAyB,GAAG;IAC/B,MAAM,EAAE,2BAA2B,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAClD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,KAAK,CAAC,EAAE;QACN,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH,CAAC;AAEF,KAAK,8BAA8B,GAAG;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,cAAc,EAAE,2BAA2B,GAAG,IAAI,CAAC;IACnD,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,KAAK,CAAC,EAAE;QACN,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAC1C,CAAC;AAEF,KAAK,gCAAgC,GACjC;IACE,OAAO,EAAE,KAAK,CAAC;CAChB,GACD;IACE,OAAO,EAAE,IAAI,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,qBAAqB,CAAC;CACjC,CAAC;AASN,wBAAgB,0BAA0B,CACxC,cAAc,EAAE,2BAA2B,GAAG,IAAI,GAAG,SAAS,EAC9D,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAqD,GAEzF;IACE,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,2BAA2B,CAAC;CACrC,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;CACf,CAkCJ;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK7E;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,qBAAqB,CAAC,CA2ChC;AAED,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,gCAAgC,CAAC,CAiC3C"}

package/dist/client/bridge.js

@@ -0,0 +1,174 @@
+const BRIDGE_ENV_KEYS = {
+    baseUrl: ["OPENCLAW_AGENT_BRIDGE_BASE_URL", "AGENT_BRIDGE_BASE_URL"],
+    serviceId: ["OPENCLAW_SERVICE_ID", "AGENT_BRIDGE_SERVICE_ID"],
+    serviceKey: ["OPENCLAW_SERVICE_KEY", "AGENT_BRIDGE_SERVICE_KEY"],
+    appKey: ["OPENCLAW_AGENT_APP", "OPENCLAW_APP_KEY", "AGENT_BRIDGE_APP_KEY"],
+};
+export function resolveBridgeRuntimeConfig(hydratedConfig, env = process.env) {
+    const baseUrl = pickValue(hydratedConfig?.baseUrl, readEnv(env, BRIDGE_ENV_KEYS.baseUrl));
+    const serviceId = pickValue(hydratedConfig?.serviceId, readEnv(env, BRIDGE_ENV_KEYS.serviceId));
+    const serviceKey = pickValue(hydratedConfig?.serviceKey, readEnv(env, BRIDGE_ENV_KEYS.serviceKey));
+    const appKey = pickValue(hydratedConfig?.appKey, readEnv(env, BRIDGE_ENV_KEYS.appKey));
+    const missing = [];
+    if (!baseUrl)
+        missing.push("baseUrl");
+    if (!serviceId)
+        missing.push("serviceId");
+    if (!serviceKey)
+        missing.push("serviceKey");
+    if (!appKey)
+        missing.push("appKey");
+    if (missing.length > 0) {
+        return {
+            ok: false,
+            error: `Agent Bridge config incompleta: ${missing.join(", ")}`,
+        };
+    }
+    const resolvedBaseUrl = baseUrl;
+    const resolvedServiceId = serviceId;
+    const resolvedServiceKey = serviceKey;
+    const resolvedAppKey = appKey;
+    return {
+        ok: true,
+        config: {
+            baseUrl: normalizeBaseUrl(resolvedBaseUrl),
+            serviceId: resolvedServiceId,
+            serviceKey: resolvedServiceKey,
+            appKey: resolvedAppKey,
+        },
+    };
+}
+export function isBridgeToolName(toolName) {
+    return /^bridge\.[A-Za-z0-9._-]+$/.test(toolName);
+}
+export function bridgeFunctionKeyFromToolName(toolName) {
+    if (!isBridgeToolName(toolName)) {
+        return null;
+    }
+    return toolName.slice("bridge.".length);
+}
+export async function executeBridgeFunction(input) {
+    const fetchImpl = input.fetchImpl ?? fetch;
+    const maxAttempts = Math.max(1, input.retry?.maxAttempts ?? 3);
+    const baseDelayMs = Math.max(50, input.retry?.baseDelayMs ?? 250);
+    for (let attempt = 1; attempt <= maxAttempts; attempt += 1) {
+        const response = await fetchImpl(`${input.config.baseUrl}/agent/execute`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                "X-Agent-Service-Id": input.config.serviceId,
+                "X-Agent-Service-Key": input.config.serviceKey,
+                "X-Agent-App": input.config.appKey,
+                ...(input.userToken ? { Authorization: `Bearer ${input.userToken}` } : {}),
+                ...sanitizeHeaderValues(input.auditHeaders),
+            },
+            body: JSON.stringify({
+                functionKey: input.functionKey,
+                args: input.args,
+            }),
+        });
+        const body = await safeParseJson(response);
+        const executionResult = {
+            success: response.ok && body?.success === true,
+            status: response.status,
+            functionKey: input.functionKey,
+            result: body?.result,
+            error: body?.error ?? (response.ok ? undefined : `HTTP ${response.status}`),
+        };
+        if (!shouldRetry(response.status) || attempt >= maxAttempts) {
+            return executionResult;
+        }
+        const backoff = baseDelayMs * 2 ** (attempt - 1);
+        await sleep(backoff);
+    }
+    return {
+        success: false,
+        status: 500,
+        functionKey: input.functionKey,
+        error: "Bridge execution failed without response",
+    };
+}
+export async function maybeExecuteBridgeToolCall(input) {
+    const functionKey = bridgeFunctionKeyFromToolName(input.toolName);
+    if (!functionKey) {
+        return { handled: false };
+    }
+    const resolved = resolveBridgeRuntimeConfig(input.hydratedConfig, input.env);
+    if (!resolved.ok) {
+        return {
+            handled: true,
+            functionKey,
+            response: {
+                success: false,
+                status: 400,
+                functionKey,
+                error: resolved.error,
+            },
+        };
+    }
+    const response = await executeBridgeFunction({
+        config: resolved.config,
+        functionKey,
+        args: input.toolArgs,
+        userToken: input.userToken,
+        fetchImpl: input.fetchImpl,
+        retry: input.retry,
+    });
+    return {
+        handled: true,
+        functionKey,
+        response,
+    };
+}
+function readEnv(env, keys) {
+    for (const key of keys) {
+        const value = env[key];
+        if (value && value.trim().length > 0) {
+            return value.trim();
+        }
+    }
+    return null;
+}
+function pickValue(primary, fallback) {
+    if (primary && primary.trim().length > 0) {
+        return primary.trim();
+    }
+    return fallback;
+}
+function normalizeBaseUrl(baseUrl) {
+    return baseUrl.endsWith("/") ? baseUrl.slice(0, -1) : baseUrl;
+}
+function shouldRetry(status) {
+    return status === 429 || status >= 500;
+}
+function sleep(ms) {
+    return new Promise((resolve) => {
+        setTimeout(resolve, ms);
+    });
+}
+async function safeParseJson(response) {
+    const contentType = response.headers.get("content-type");
+    if (!contentType?.toLowerCase().includes("application/json")) {
+        return null;
+    }
+    try {
+        return (await response.json());
+    }
+    catch {
+        return null;
+    }
+}
+function sanitizeHeaderValues(headers) {
+    if (!headers) {
+        return {};
+    }
+    const output = {};
+    for (const [key, value] of Object.entries(headers)) {
+        if (!value || value.trim().length === 0) {
+            continue;
+        }
+        output[key] = value;
+    }
+    return output;
+}
+//# sourceMappingURL=bridge.js.map

package/dist/client/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../src/client/bridge.ts"],"names":[],"mappings":"AA2DA,MAAM,eAAe,GAAG;IACtB,OAAO,EAAE,CAAC,gCAAgC,EAAE,uBAAuB,CAAC;IACpE,SAAS,EAAE,CAAC,qBAAqB,EAAE,yBAAyB,CAAC;IAC7D,UAAU,EAAE,CAAC,sBAAsB,EAAE,0BAA0B,CAAC;IAChE,MAAM,EAAE,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,sBAAsB,CAAC;CAClE,CAAC;AAEX,MAAM,UAAU,0BAA0B,CACxC,cAA8D,EAC9D,MAA0C,OAAO,CAAC,GAAyC;IAU3F,MAAM,OAAO,GAAG,SAAS,CAAC,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAG,SAAS,CAAC,cAAc,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;IAChG,MAAM,UAAU,GAAG,SAAS,CAC1B,cAAc,EAAE,UAAU,EAC1B,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,UAAU,CAAC,CACzC,CAAC;IACF,MAAM,MAAM,GAAG,SAAS,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IAEvF,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,CAAC,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU;QAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,mCAAmC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC/D,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GAAG,OAAiB,CAAC;IAC1C,MAAM,iBAAiB,GAAG,SAAmB,CAAC;IAC9C,MAAM,kBAAkB,GAAG,UAAoB,CAAC;IAChD,MAAM,cAAc,GAAG,MAAgB,CAAC;IAExC,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE;YACN,OAAO,EAAE,gBAAgB,CAAC,eAAe,CAAC;YAC1C,SAAS,EAAE,iBAAiB;YAC5B,UAAU,EAAE,kBAAkB;YAC9B,MAAM,EAAE,cAAc;SACvB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,2BAA2B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,QAAgB;IAC5D,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAgC;IAEhC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,IAAI,CAAC,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,IAAI,GAAG,CAAC,CAAC;IAElE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,gBAAgB,EAAE;YACxE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,oBAAoB,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;gBAC5C,qBAAqB,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU;gBAC9C,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;gBAClC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,GAAG,oBAAoB,CAAC,KAAK,CAAC,YAAY,CAAC;aAC5C;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,eAAe,GAA0B;YAC7C,OAAO,EAAE,QAAQ,CAAC,EAAE,IAAI,IAAI,EAAE,OAAO,KAAK,IAAI;YAC9C,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,IAAI,EAAE,MAAM;YACpB,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;SAC5E,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,IAAI,WAAW,EAAE,CAAC;YAC5D,OAAO,eAAe,CAAC;QACzB,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QACjD,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IAED,OAAO;QACL,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,KAAK,EAAE,0CAA0C;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAqC;IAErC,MAAM,WAAW,GAAG,6BAA6B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAClE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,QAAQ,GAAG,0BAA0B,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7E,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,WAAW;YACX,QAAQ,EAAE;gBACR,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,GAAG;gBACX,WAAW;gBACX,KAAK,EAAE,QAAQ,CAAC,KAAK;aACtB;SACF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC;QAC3C,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,WAAW;QACX,IAAI,EAAE,KAAK,CAAC,QAAQ;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IACH,OAAO;QACL,OAAO,EAAE,IAAI;QACb,WAAW;QACX,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CACd,GAAuC,EACvC,IAA2B;IAE3B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,OAAkC,EAAE,QAAuB;IAC5E,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAChE,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,IAAI,GAAG,CAAC;AACzC,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,QAAkB;IAC7C,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACzD,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAAuD;IAEvD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxC,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/client/index.d.ts

@@ -1,5 +1,6 @@
 import type { Auth, HttpRouter } from "convex/server";
 import type { ComponentApi } from "../component/_generated/component.js";
+export { bridgeFunctionKeyFromToolName, executeBridgeFunction, isBridgeToolName, maybeExecuteBridgeToolCall, resolveBridgeRuntimeConfig, type BridgeExecutionResult, type HydratedBridgeRuntimeConfig, type ResolvedBridgeRuntimeConfig, } from "./bridge.js";
 export declare function exposeApi(component: ComponentApi, options: {
     auth: (ctx: {
         auth: Auth;
@@ -17,12 +18,12 @@ export declare function exposeApi(component: ComponentApi, options: {
         queuedReady: number;
     }>>;
     enqueue: import("convex/server").RegisteredMutation<"public", {
-        metadata?: Record<string, string> | undefined;
-        priority?: number | undefined;
         externalMessageId?: string | undefined;
         rawUpdateJson?: string | undefined;
-        agentKey: string;
+        metadata?: Record<string, string> | undefined;
+        priority?: number | undefined;
         conversationId: string;
+        agentKey: string;
         provider: string;
         providerUserId: string;
         messageText: string;
@@ -58,18 +59,18 @@ export declare function exposeApi(component: ComponentApi, options: {
         };
     } | null>>;
     workerHeartbeat: import("convex/server").RegisteredMutation<"public", {
-        messageId: string;
         workerId: string;
+        messageId: string;
         leaseId: string;
     }, Promise<boolean>>;
     workerComplete: import("convex/server").RegisteredMutation<"public", {
-        messageId: string;
         workerId: string;
+        messageId: string;
         leaseId: string;
     }, Promise<boolean>>;
     workerFail: import("convex/server").RegisteredMutation<"public", {
-        messageId: string;
         workerId: string;
+        messageId: string;
         leaseId: string;
         errorMessage: string;
     }, Promise<{
@@ -78,10 +79,17 @@ export declare function exposeApi(component: ComponentApi, options: {
         requeued: boolean;
     }>>;
     workerHydrationBundle: import("convex/server").RegisteredQuery<"public", {
-        workspaceId: string;
         messageId: string;
+        workspaceId: string;
     }, Promise<{
         agentKey: string;
+        bridgeRuntimeConfig: null | {
+            appKey: null | string;
+            baseUrl: null | string;
+            serviceId: null | string;
+            serviceKey: null | string;
+            serviceKeySecretRef: null | string;
+        };
         conversationId: string;
         conversationState: {
             contextHistory: Array<{
@@ -104,28 +112,6 @@ export declare function exposeApi(component: ComponentApi, options: {
             providerUserId: string;
             rawUpdateJson?: string;
         };
-        snapshot: null | {
-            compiledPromptStack: Array<{
-                content: string;
-                section: string;
-            }>;
-            memoryWindow: Array<{
-                excerpt: string;
-                path: string;
-            }>;
-            skillsBundle: Array<{
-                assets?: Array<{
-                    assetPath: string;
-                    assetType: "script" | "config" | "venv" | "other";
-                    contentHash: string;
-                    sizeBytes: number;
-                }>;
-                manifestMd: string;
-                skillKey: string;
-            }>;
-            snapshotId: string;
-            snapshotKey: string;
-        };
         telegramBotToken: null | string;
     } | null>>;
     workerConversationHasQueued: import("convex/server").RegisteredQuery<"public", {
@@ -149,21 +135,21 @@ export declare function exposeApi(component: ComponentApi, options: {
     workerPrepareSnapshotUpload: import("convex/server").RegisteredMutation<"public", {
         conversationId?: string | undefined;
         agentKey: string;
-        workspaceId: string;
         workerId: string;
-        reason: "manual" | "drain" | "signal";
+        workspaceId: string;
+        reason: "drain" | "signal" | "manual";
     }, Promise<any>>;
     workerFinalizeSnapshotUpload: import("convex/server").RegisteredMutation<"public", {
         workerId: string;
-        storageId: string;
         snapshotId: string;
+        storageId: string;
         sha256: string;
         sizeBytes: number;
     }, Promise<any>>;
     workerFailSnapshotUpload: import("convex/server").RegisteredMutation<"public", {
         workerId: string;
-        error: string;
         snapshotId: string;
+        error: string;
     }, Promise<any>>;
     workerLatestSnapshotForRestore: import("convex/server").RegisteredQuery<"public", {
         conversationId?: string | undefined;
@@ -181,8 +167,8 @@ export declare function exposeApi(component: ComponentApi, options: {
     seedDefaultAgent: import("convex/server").RegisteredMutation<"public", {}, Promise<string>>;
     importSecret: import("convex/server").RegisteredMutation<"public", {
         metadata?: Record<string, string> | undefined;
-        plaintextValue: string;
         secretRef: string;
+        plaintextValue: string;
     }, Promise<{
         secretId: string;
         secretRef: string;
@@ -197,10 +183,9 @@ export declare function exposeApi(component: ComponentApi, options: {
     }[]>>;
     startWorkers: import("convex/server").RegisteredAction<"public", {
         workspaceId?: string | undefined;
-        convexUrl?: string | undefined;
         flyApiToken?: string | undefined;
+        convexUrl?: string | undefined;
         scalingPolicy?: {
-            minWorkers: number;
             maxWorkers: number;
             queuePerWorkerTarget: number;
             spawnStep: number;
@@ -209,15 +194,44 @@ export declare function exposeApi(component: ComponentApi, options: {
         } | undefined;
     }, Promise<{
         activeWorkers: number;
-        desiredWorkers: number;
         spawned: number;
         terminated: number;
     }>>;
+    checkIdleShutdowns: import("convex/server").RegisteredAction<"public", {
+        flyApiToken?: string | undefined;
+    }, Promise<any>>;
+    deleteFlyVolume: import("convex/server").RegisteredAction<"public", {
+        flyApiToken?: string | undefined;
+        appName: string;
+        volumeId: string;
+    }, Promise<any>>;
+    recoverQueue: import("convex/server").RegisteredAction<"public", {
+        nowMs?: number | undefined;
+        workspaceId?: string | undefined;
+        scalingPolicy?: {
+            maxWorkers: number;
+            queuePerWorkerTarget: number;
+            spawnStep: number;
+            idleTimeoutMs: number;
+            reconcileIntervalMs: number;
+        } | undefined;
+        releaseLimit?: number | undefined;
+    }, Promise<{
+        released: {
+            requeued: number;
+            unlocked: number;
+        };
+        reconcile: {
+            activeWorkers: number;
+            spawned: number;
+            terminated: number;
+        };
+    }>>;
     bindUserAgent: import("convex/server").RegisteredMutation<"public", {
         metadata?: Record<string, string> | undefined;
         source?: "manual" | "telegram_pairing" | "api" | undefined;
-        telegramChatId?: string | undefined;
         telegramUserId?: string | undefined;
+        telegramChatId?: string | undefined;
         agentKey: string;
         consumerUserId: string;
     }, Promise<{
@@ -256,8 +270,8 @@ export declare function exposeApi(component: ComponentApi, options: {
         telegramUserId: null | string;
     } | null>>;
     resolveAgentForTelegram: import("convex/server").RegisteredQuery<"public", {
-        telegramChatId?: string | undefined;
         telegramUserId?: string | undefined;
+        telegramChatId?: string | undefined;
     }, Promise<{
         agentKey: null | string;
         consumerUserId: null | string;
@@ -278,8 +292,8 @@ export declare function exposeApi(component: ComponentApi, options: {
         usedAt: null | number;
     }>>;
     consumePairingCode: import("convex/server").RegisteredMutation<"public", {
-        telegramChatId: string;
         telegramUserId: string;
+        telegramChatId: string;
         code: string;
     }, Promise<{
         agentKey: string;

package/dist/client/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AAGzE,wBAAgB,SAAS,CACvB,SAAS,EAAE,YAAY,EACvB,OAAO,EAAE;IACP,IAAI,EAAE,CACJ,GAAG,EAAE;QAAE,IAAI,EAAE,IAAI,CAAA;KAAE,EACnB,SAAS,EACL;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAChB;QACE,IAAI,EAAE,OAAO,CAAC;QACd,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,KACF,OAAO,CAAC,MAAM,CAAC,CAAC;CACtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BA6cS,CAAD;;oBAEkB,CAAC;;;yBAKlB,CAAX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAoEmB,CAAC;;oBAEP,CAAC;;;yBAGP,CAAA;;;;;;;;;;;;sBAMI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA1LZ;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,UAAU,EAChB,SAAS,EAAE,YAAY,EACvB,EACE,UAA6B,EAC7B,eAAe,EACf,0BAAiC,EACjC,gBAA4B,EAC5B,yBAAiC,GAClC,GAAE;IACD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,MAAM,CAAC;IAC9C,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yBAAyB,CAAC,EAAE,OAAO,CAAC;CAChC,QA8KP"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AAEzE,OAAO,EACL,6BAA6B,EAC7B,qBAAqB,EACrB,gBAAgB,EAChB,0BAA0B,EAC1B,0BAA0B,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,2BAA2B,GACjC,MAAM,aAAa,CAAC;AAErB,wBAAgB,SAAS,CACvB,SAAS,EAAE,YAAY,EACvB,OAAO,EAAE;IACP,IAAI,EAAE,CACJ,GAAG,EAAE;QAAE,IAAI,EAAE,IAAI,CAAA;KAAE,EACnB,SAAS,EACL;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAChB;QACE,IAAI,EAAE,OAAO,CAAC;QACd,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,KACF,OAAO,CAAC,MAAM,CAAC,CAAC;CACtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAmeoB,CAAC;;oBACoC,CAAC;;;yBAM/C,CAAZ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAmFgC,CAAC;;oBAEP,CAAC;;;yBAEnB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA3KV;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,UAAU,EAChB,SAAS,EAAE,YAAY,EACvB,EACE,UAA6B,EAC7B,eAAe,EACf,0BAAiC,EACjC,gBAA4B,EAC5B,yBAAiC,GAClC,GAAE;IACD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,MAAM,CAAC;IAC9C,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yBAAyB,CAAC,EAAE,OAAO,CAAC;CAChC,QA8KP"}