@onkeiki/agents 0.1.2 → 0.1.4

package/src/services/Sandbox.ts

@@ -34,6 +34,13 @@ export interface SandboxHandle {
    * credentials) use it as a backup/restore target across sandbox recreation.
    */
   readonly getPersistentExecutorDataDir?: () => Promise<string | null>
+
+  /**
+   * Whether the sandbox is running right now. A provider whose sandboxes
+   * auto-stop reports `false` once stopped, so background work (e.g. a
+   * periodic backup) can skip it instead of failing against it.
+   */
+  readonly isStarted?: () => Promise<boolean>
 }
 
 /**

package/src/types/config.ts

@@ -15,7 +15,7 @@ export type HarnessConfig = {
   readonly type: 'flue' | 'hermes' | 'external'
   readonly dispatchUrl?: string
   readonly timeoutMs?: DurationInput
-  readonly connectivity?: 'push' | 'relay'
+  readonly connectivity?: 'push' | 'relay' | 'inbox'
 }
 
 export type PromptContext = {
@@ -149,7 +149,7 @@ export type McpConfig = {
   readonly userCanAdd?: boolean
   /**
    * Developer-declared per-user connections. Each entry names an OpenAPI
-   * provider (e.g. Gmail) that every conversation user authorizes
+   * provider (e.g. Gmail) or MCP server that every conversation user authorizes
    * individually: the agent texts them a fresh connect link, they complete
    * OAuth in the browser, and the resulting credential lives in that user's
    * own Executor daemon — never shared across users or exposed to the model.
@@ -186,7 +186,7 @@ export type UserConnectionHealthCheck = {
   readonly identityField?: string
 }
 
-export type UserConnectionDefinition = {
+type UserConnectionDetails = {
   /** Stable connection name, also the Executor source slug (e.g. "gmail"). */
   readonly name: string
   /** Shown to the model so it knows when to offer connecting this provider. */
@@ -205,6 +205,10 @@ export type UserConnectionDefinition = {
    * plus what it needs ("google", "calendar") resolve without being asked.
    */
   readonly capabilities?: ReadonlyArray<string>
+}
+
+export type OpenApiUserConnectionDefinition = UserConnectionDetails & {
+  readonly kind?: 'openapi'
   /** OpenAPI spec URL registered as the Executor source. */
   readonly spec: string
   /** Override for the API base URL when the spec's `servers` entry is wrong. */
@@ -213,6 +217,19 @@ export type UserConnectionDefinition = {
   readonly healthCheck?: UserConnectionHealthCheck
 }
 
+export type McpUserConnectionDefinition = UserConnectionDetails & {
+  /** MCP connection names must match `^[a-z][a-z0-9_]*$` (hyphens are not allowed). */
+  readonly kind: 'mcp'
+  /** Remote MCP server URL. */
+  readonly endpoint: string
+  /** RFC 7009 revocation endpoint, for servers whose metadata doesn't advertise one. */
+  readonly revocationUrl?: string
+  /** Pre-registered OAuth app, for servers that only grant some scopes to approved clients. Omit to use dynamic client registration. Values are developer-secret names. */
+  readonly oauth?: { readonly clientIdSecret: string; readonly clientSecretSecret?: string }
+}
+
+export type UserConnectionDefinition = OpenApiUserConnectionDefinition | McpUserConnectionDefinition
+
 export type SteeringConfig = {
   readonly debounceWindow: DurationInput
   readonly midTurnStrategy: 'interrupt' | 'append' | 'queue'
@@ -408,8 +425,15 @@ export type CapabilityManifest = {
     /** Hosts the `http` namespace may reach, `host` (port 443) or `host:port` (required with `uses: ["http"]`). */
     readonly http?: { readonly allow: ReadonlyArray<string> }
   } & (R extends 'render-template' ? { readonly templates?: ReadonlyArray<CapabilityTemplate> } : { readonly templates?: never })
+    & (R extends 'mcp' ? { readonly mcp: CapabilityMcpConfig } : { readonly mcp?: never })
 }[CapabilityRuntime]
 
+export type CapabilityMcpConfig = {
+  readonly url: string
+  readonly auth?: 'none' | 'headers' | 'oauth'
+  readonly headers?: Readonly<Record<string, string>>
+}
+
 export type CapabilityInput = CapabilityRef | CapabilityManifest
 
 export type AgentConfig = {
@@ -418,6 +442,14 @@ export type AgentConfig = {
   readonly historyLimit: number
   readonly systemPrompt: (ctx: PromptContext) => string
   readonly tools: ReadonlyArray<ToolDefinition<any, any>>
+  /** Thinking budget per model call. Omit to leave the agent's current setting alone (new agents get 'low'). */
+  readonly reasoningEffort?: 'none' | 'low' | 'medium' | 'high'
+  /** Web search + page scraping tools. */
+  readonly scrape?: boolean
+  /** Reply guards: outbound sanitizer, send guards, repeated-failure stop. */
+  readonly guards?: boolean
+  /** ZeroLeaks Shield screens inbound text for prompt injection. */
+  readonly promptGuard?: boolean
   readonly alerts?: ReadonlyArray<AlertDefinition>
   readonly hooks?: TurnHooks