@opengeni/worker-bundle 3.1.3-canary.38890816741001 → 3.2.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (30) hide show
  1. package/dist/activities/agent-turn/secret-resolver.d.ts +4 -2
  2. package/dist/activities/types.d.ts +2 -1
  3. package/dist/{activities-control-ROJJNNTJ.js → activities-control-LC7WXEIX.js} +4 -3
  4. package/dist/{activities-control-ROJJNNTJ.js.map → activities-control-LC7WXEIX.js.map} +1 -1
  5. package/dist/{activities-turn-4SWYWKI5.js → activities-turn-PEDPUZI4.js} +13 -4
  6. package/dist/activities-turn-PEDPUZI4.js.map +1 -0
  7. package/dist/artifact-materializer-entry.js +0 -0
  8. package/dist/artifact-outbox-entry.js +0 -0
  9. package/dist/{chunk-6SHXF4SU.js → chunk-436TOEBL.js} +10 -3
  10. package/dist/chunk-436TOEBL.js.map +1 -0
  11. package/dist/chunk-K225DMA7.js +85 -0
  12. package/dist/chunk-K225DMA7.js.map +1 -0
  13. package/dist/{chunk-MVESOYFC.js → chunk-O7HT4LHX.js} +4 -1
  14. package/dist/{chunk-MVESOYFC.js.map → chunk-O7HT4LHX.js.map} +1 -1
  15. package/dist/external-vault-providers.d.ts +29 -0
  16. package/dist/index.js +11 -3
  17. package/dist/index.js.map +1 -1
  18. package/dist/{sandbox-lease-BJYU72N3.js → sandbox-lease-F47EDHHY.js} +2 -2
  19. package/dist/workflow-bundle.js +1 -1
  20. package/package.json +27 -24
  21. package/src/activities/agent-turn/run.ts +6 -0
  22. package/src/activities/agent-turn/secret-resolver.ts +6 -0
  23. package/src/activities/sandbox-lease.ts +3 -0
  24. package/src/activities/types.ts +5 -1
  25. package/src/activity-services.ts +9 -1
  26. package/src/external-vault-providers.ts +136 -0
  27. package/src/index.ts +7 -1
  28. package/dist/activities-turn-4SWYWKI5.js.map +0 -1
  29. package/dist/chunk-6SHXF4SU.js.map +0 -1
  30. /package/dist/{sandbox-lease-BJYU72N3.js.map → sandbox-lease-F47EDHHY.js.map} +0 -0
package/dist/activities/agent-turn/secret-resolver.d.ts CHANGED
@@ -6,9 +6,9 @@
6
6
  */
7
7
  import { type Settings } from "@opengeni/config";
8
8
  import { type ResolvedAgentConfig, type SecretResolver } from "@opengeni/contracts";
9
- import { type OnePasswordVaultProviderFactory } from "@opengeni/core";
9
+ import { type OnePasswordVaultProviderFactory, type ExternalVaultProviderFactories } from "@opengeni/core";
10
10
  import { type Database } from "@opengeni/db";
11
- import { type ProviderCallBudget, type VaultProvider, type VaultProviderRegistry } from "@opengeni/vaults";
11
+ import { type ProviderCallBudget, type VaultProvider, type VaultProviderRegistry, type VaultProviderAuthority } from "@opengeni/vaults";
12
12
  /**
13
13
  * Q-17: a frozen configuration without the key reads `from === "all"` (the
14
14
  * contracts parse fills it); legacy null-config sessions get secrets on.
@@ -30,6 +30,8 @@ export declare function createAttemptVaultAccess(input: {
30
30
  subjectId: string | null;
31
31
  hostVaultProvider: VaultProvider | null | undefined;
32
32
  onePasswordVaultProvider: OnePasswordVaultProviderFactory | null | undefined;
33
+ externalVaultProviders?: ExternalVaultProviderFactories | null;
34
+ executionContext?: Pick<VaultProviderAuthority, "sessionId" | "turnId" | "attemptId" | "siteId">;
33
35
  }): AttemptVaultAccess;
34
36
  type AttemptSecretInput = {
35
37
  db: Database;
package/dist/activities/types.d.ts CHANGED
@@ -7,7 +7,7 @@ import type { Observability } from "@opengeni/observability";
7
7
  import type { OpenGeniRuntime } from "@opengeni/runtime";
8
8
  import type { ObjectStorage } from "@opengeni/storage";
9
9
  import type { VaultConnectionCredentialsPort } from "@opengeni/vaults";
10
- import type { OnePasswordVaultProviderFactory } from "@opengeni/core";
10
+ import type { ExternalVaultProviderFactories, OnePasswordVaultProviderFactory } from "@opengeni/core";
11
11
  export type WakeSessionWorkflowSignal = (input: {
12
12
  accountId: string;
13
13
  workspaceId: string;
@@ -86,6 +86,7 @@ export type SharedActivityServices = {
86
86
  * `@opengeni/vaults-onepassword`); null leaves 1Password vaults unavailable.
87
87
  */
88
88
  onePasswordVaultProvider?: OnePasswordVaultProviderFactory | null;
89
+ externalVaultProviders?: ExternalVaultProviderFactories | null;
89
90
  /** Standalone, default-off personal GitHub smart-HTTP broker consumer. */
90
91
  personalGitHubCredentials?: ConnectionCredentialsPort["gitCredentials"] | null;
91
92
  };
package/dist/{activities-control-ROJJNNTJ.js → activities-control-LC7WXEIX.js} RENAMED
@@ -22,7 +22,8 @@ import {
22
22
  withFirstPartyTools,
23
23
  workflowIdForSession,
24
24
  writeSessionUsageReceipts
25
- } from "./chunk-6SHXF4SU.js";
25
+ } from "./chunk-436TOEBL.js";
26
+ import "./chunk-K225DMA7.js";
26
27
  import {
27
28
  agentRunAdmissionDenial,
28
29
  createSiteAuthMaintenanceActivities
@@ -30,7 +31,7 @@ import {
30
31
  import {
31
32
  createBrowserDeadlineCheckpointActivities,
32
33
  createSandboxLeaseActivities
33
- } from "./chunk-MVESOYFC.js";
34
+ } from "./chunk-O7HT4LHX.js";
34
35
  import "./chunk-NQDVJ6RI.js";
35
36
  import "./chunk-24GP3BX5.js";
36
37
  import {
@@ -6142,4 +6143,4 @@ export {
6142
6143
  createControlActivities,
6143
6144
  createControlActivitiesFromServices
6144
6145
  };
6145
- //# sourceMappingURL=activities-control-ROJJNNTJ.js.map
6146
+ //# sourceMappingURL=activities-control-LC7WXEIX.js.map