@repogo/plugins 0.1.43 → 0.1.45

package/dist/workflow-executor.js

@@ -18,6 +18,7 @@ __export(exports_src, {
   upload: () => upload,
   toCallError: () => toCallError,
   stream: () => stream,
+  remotePlugin: () => remotePlugin,
   method: () => method,
   definePlugin: () => definePlugin,
   cached: () => cached,
@@ -43,20 +44,32 @@ function parseDuration(duration) {
 }
 
 // src/define.ts
+var permissionModes = ["approval-required", "auto-accept-edits", "full-access"];
+function httpAddresses(option) {
+  return option === true ? { public: "key" } : option;
+}
 function definePlugin(plugin) {
   return plugin;
 }
 function method(input, run, options = {}) {
   if ("kind" in options)
     throw new Error('method: kind is now effect: "read", "write" or "destructive"');
+  if ("confirm" in options)
+    throw new Error('method: confirm is now approve: "Delete {{id}}?"');
+  if (options.approveUpTo !== undefined && !permissionModes.includes(options.approveUpTo)) {
+    throw new Error(`method: approveUpTo is one of ${permissionModes.join(", ")}`);
+  }
+  if (options.approveUpTo !== undefined && !options.approve)
+    throw new Error("method: approveUpTo needs an approve question to ask");
   return {
     input,
     run,
     effect: options.effect ?? "write",
     output: options.output,
     description: options.description,
-    confirm: options.confirm,
-    http: options.http === true ? "key" : options.http?.auth
+    approve: options.approve,
+    approveUpTo: options.approveUpTo,
+    http: httpAddresses(options.http)
   };
 }
 function cached(input, run, options) {
@@ -66,15 +79,13 @@ function cached(input, run, options) {
     effect: "read",
     output: options.output,
     description: options.description,
+    http: httpAddresses(options.http),
     cache: { fresh: parseDuration(options.fresh), shared: options.shared ?? false, timeout: parseDuration(options.timeout ?? "1m") }
   };
 }
 function stream(input, run, options = {}) {
   return { input, run, effect: "read", stream: true, description: options.description };
 }
-// src/uploads.ts
-import { AsyncLocalStorage } from "async_hooks";
-
 // node_modules/zod/v4/classic/external.js
 var exports_external = {};
 __export(exports_external, {
@@ -19494,13 +19505,6 @@ function bigint3(params) {
 function date4(params) {
   return _coercedDate(ZodDate, params);
 }
-// src/uploads.ts
-var callFiles = new AsyncLocalStorage;
-function upload() {
-  return exports_external.object({ id: exports_external.string(), name: exports_external.string(), type: exports_external.string(), size: exports_external.number(), path: exports_external.string() }).refine((file2) => (callFiles.getStore() ?? []).some((held) => held.id === file2.id && held.path === file2.path), {
-    message: "Not a file uploaded for this call."
-  });
-}
 // src/errors.ts
 class MethodError extends Error {
   code;
@@ -19525,6 +19529,40 @@ function toCallError(error62) {
   }
   return { code: "INTERNAL", message: error62 instanceof Error ? error62.message : String(error62) };
 }
+
+// src/remote.ts
+var codes = { 400: "VALIDATION", 403: "FORBIDDEN", 404: "NOT_FOUND" };
+async function remotePlugin(url2, name) {
+  const base = `${url2.replace(/\/$/, "")}/${name}`;
+  const response = await fetch(base);
+  if (!response.ok)
+    throw new Error(`remotePlugin: ${base} answered ${response.status}`);
+  const listing = await response.json();
+  const methods = {};
+  for (const m of listing.methods) {
+    methods[m.name] = method(exports_external.fromJSONSchema(m.input), (input2) => call(`${base}/${m.name}`, input2), {
+      effect: m.effect,
+      description: m.description ?? undefined,
+      output: m.output ? exports_external.fromJSONSchema(m.output) : undefined
+    });
+  }
+  return { description: listing.description ?? undefined, methods };
+}
+async function call(url2, input2) {
+  const response = await fetch(url2, { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify(input2) });
+  const answer = await response.json().catch(() => null);
+  if (response.ok)
+    return answer;
+  throw new MethodError(codes[response.status] ?? "INTERNAL", answer?.error ?? `${url2} answered ${response.status}`, answer?.fields ?? undefined);
+}
+// src/uploads.ts
+import { AsyncLocalStorage } from "async_hooks";
+var callFiles = new AsyncLocalStorage;
+function upload() {
+  return exports_external.object({ id: exports_external.string(), name: exports_external.string(), type: exports_external.string(), size: exports_external.number(), path: exports_external.string() }).refine((file2) => (callFiles.getStore() ?? []).some((held) => held.id === file2.id && held.path === file2.path), {
+    message: "Not a file uploaded for this call."
+  });
+}
 // src/workflow/scope.ts
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "async_hooks";
 var attemptScope = new AsyncLocalStorage2;
@@ -20111,14 +20149,14 @@ class AnswerCache {
         checked_at integer not null
       )`);
   }
-  async read(key, options, fetch) {
+  async read(key, options, fetch2) {
     const tag = `${this.namespace}.cached.${Bun.hash(key).toString(36)}`;
     recordRead(tag);
     const [row] = await this.database.sql.unsafe(`select value, checked_at from cached_answers where key = $1`, [key]);
     if (!row)
-      return this.refresh(key, tag, options, fetch);
+      return this.refresh(key, tag, options, fetch2);
     if (Date.now() - row.checked_at >= options.fresh) {
-      this.refresh(key, tag, options, fetch).catch((error62) => record2("error", [error62]));
+      this.refresh(key, tag, options, fetch2).catch((error62) => record2("error", [error62]));
     }
     return JSON.parse(row.value);
   }
@@ -20126,12 +20164,12 @@ class AnswerCache {
     while (this.inflight.size)
       await Promise.allSettled([...this.inflight.values()]);
   }
-  refresh(key, tag, options, fetch) {
+  refresh(key, tag, options, fetch2) {
     const running = this.inflight.get(key);
     if (running)
       return running;
     const started = Date.now();
-    const work = isolated(async () => withTimeout(Promise.resolve(fetch()), options.timeout)).then(async (value) => {
+    const work = isolated(async () => withTimeout(Promise.resolve(fetch2()), options.timeout)).then(async (value) => {
       await this.save(key, tag, value ?? null, started);
       return value ?? null;
     }, async (error62) => {
@@ -20557,7 +20595,7 @@ function kvMethods(name, kv, schema) {
       description: `Delete a ${name} key`,
       input: exports_external.object({ key }),
       output: exports_external.null(),
-      confirm: "Delete this key?",
+      approve: "Delete this key?",
       run: async ({ key: key2 }) => (await kv.delete(key2), null)
     }
   };
@@ -20606,7 +20644,7 @@ function streamMethods(name, stream2, schema) {
       description: `Delete a ${name} key and its lines`,
       input: exports_external.object({ key }),
       output: exports_external.null(),
-      confirm: "Delete this stream and its lines?",
+      approve: "Delete this stream and its lines?",
       run: async ({ key: key2 }) => (await stream2.delete(key2), null)
     }
   };
@@ -20687,7 +20725,7 @@ function bucketMethods(name, bucket, schema) {
       description: `Delete a ${name} file and its meta`,
       input: exports_external.object({ id }),
       output: exports_external.null(),
-      confirm: "Delete this file?",
+      approve: "Delete this file?",
       run: async ({ id: id2 }) => (await bucket.delete(id2), null)
     }
   };
@@ -21096,7 +21134,7 @@ var RunMetadataSchema = exports_external.object({
   root: exports_external.string().refine(isAbsolute2),
   namespace: exports_external.string().regex(/^[a-z0-9][a-z0-9.-]*$/),
   plugin: exports_external.string().regex(/^[a-z0-9][a-z0-9-]*$/),
-  caller: exports_external.enum(["card", "agent", "cron", "code", "http"]),
+  caller: exports_external.enum(["card", "agent", "cron", "code", "http", "device"]),
   workflow: exports_external.string().regex(/^[a-z][a-zA-Z0-9_-]*$/),
   input: exports_external.json(),
   key: exports_external.string().nullable(),
@@ -21119,13 +21157,13 @@ function workflowMethods(plugin, namespace, name, definition, ctx, bridge, direc
     return bridge({ operation, dir, plugin, namespace, workflow: name, root: ctx.root, caller: ctx.caller, input: input2, settings: workflowSettings(definition) });
   };
   const id = exports_external.object({ id: exports_external.string().uuid() }).strict();
-  const spec = (method2, effect, input2, description, confirm, output2) => ({
+  const spec = (method2, effect, input2, description, approve, output2) => ({
     name: `${plugin}.${name}.${method2}`,
     plugin,
     effect,
     input: input2,
     description,
-    confirm,
+    approve,
     output: output2,
     run: async (input3, raw) => {
       if (effect === "read")
@@ -21137,7 +21175,7 @@ function workflowMethods(plugin, namespace, name, definition, ctx, bridge, direc
   return [
     spec("list", "read", exports_external.object({ limit: exports_external.number().int().min(1).max(100).default(20), status: exports_external.string().optional(), cursor: exports_external.string().optional() }).strict(), "List workflow runs", undefined, exports_external.object({ items: exports_external.array(RunSummarySchema), cursor: exports_external.string().nullable() })),
     spec("get", "read", id, "Get one workflow run"),
-    spec("start", "write", exports_external.object({ input: definition.input, key: exports_external.string().min(1).max(200).optional() }).strict(), definition.description ?? "Start a durable workflow", definition.confirm, RunSummarySchema),
+    spec("start", "write", exports_external.object({ input: definition.input, key: exports_external.string().min(1).max(200).optional() }).strict(), definition.description ?? "Start a durable workflow", definition.approve, RunSummarySchema),
     spec("retry", "write", id, "Retry a safely failed query step", undefined, RunSummarySchema),
     spec("restart", "write", id, "Start a run that needs attention over from the beginning, on the current code", undefined, RunSummarySchema),
     spec("cancel", "write", id, "Request cancellation of a workflow", undefined, RunSummarySchema),
@@ -21331,7 +21369,8 @@ class Runtime {
         effect: method2.effect,
         stream: method2.stream,
         description: method2.description,
-        confirm: method2.confirm,
+        approve: method2.approve,
+        approveUpTo: method2.approveUpTo,
         http: method2.http,
         input: method2.input,
         output: method2.output,
@@ -21362,6 +21401,10 @@ class Runtime {
     })))));
   }
   async call(name, input2 = {}, options = {}) {
+    if (options.signal) {
+      const { signal, ...rest } = options;
+      return this.callSignal.run(signal, () => this.call(name, input2, rest));
+    }
     if (options.files) {
       const { files, ...rest } = options;
       const fields = input2 ?? {};
@@ -21390,12 +21433,12 @@ class Runtime {
     }
     const raw = input2 ?? {};
     const parsed = method2.input.parse(raw);
-    if (method2.confirm && (options.confirmed === false || workflowScope.getStore()))
-      throw new MethodError("CONFIRM", fillConfirm(method2.confirm, parsed));
+    if (method2.approve && (options.confirmed === false || workflowScope.getStore()))
+      throw new MethodError("CONFIRM", fillQuestion(method2.approve, parsed));
     if (method2.stream)
       return { result: await this.sample(name, input2), reads: [], invalidates: [] };
     const confirmed = this.callConfirmed.getStore() ?? false;
-    const run = await tracked(method2.effect === "read", (tags) => this.notifyInvalidated(tags), () => this.callConfirmed.run(confirmed || method2.confirm !== undefined, async () => {
+    const run = await tracked(method2.effect === "read", (tags) => this.notifyInvalidated(tags), () => this.callConfirmed.run(confirmed || method2.approve !== undefined, async () => {
       const result = await method2.run(parsed, raw);
       await this.events.emit(name, { input: parsed, result });
       return result;
@@ -21504,7 +21547,7 @@ class Runtime {
       throw new Error(`${entry.method} isn't one of ${entry.plugin}'s methods`);
     if (method2.stream)
       throw new Error(`${name} is a stream; a cron runs a read or a write`);
-    if (method2.confirm)
+    if (method2.approve)
       throw new Error(`${name} asks before it runs, so nothing may run it on a schedule`);
     if (!method2.input.safeParse({}).success)
       throw new Error(`${name} needs input; a cron calls it with {}`);
@@ -21609,7 +21652,8 @@ class Runtime {
         effect: method2.effect,
         stream: method2.stream ?? false,
         description: method2.description ?? null,
-        confirm: method2.confirm ?? null,
+        approve: method2.approve ?? null,
+        approveUpTo: method2.approve ? method2.approveUpTo ?? "full-access" : null,
         http: method2.http ?? null,
         input: exports_external.toJSONSchema(method2.input, { io: "input", unrepresentable: "any" }),
         output: method2.output ? exports_external.toJSONSchema(method2.output, { io: "output", unrepresentable: "any" }) : null
@@ -21683,8 +21727,8 @@ class Runtime {
   register(method2) {
     if (this.methods.has(method2.name))
       throw new Error(`${method2.name} is defined twice; rename the method or the data`);
-    if (method2.effect === "destructive" && !method2.confirm) {
-      throw new Error(`${method2.name} is destructive, so it needs a confirm question, such as { confirm: "Delete {{id}}?" }`);
+    if (method2.effect === "destructive" && !method2.approve) {
+      throw new Error(`${method2.name} is destructive, so it needs an approve question, such as { approve: "Delete {{id}}?" }`);
     }
     this.methods.set(method2.name, method2);
   }
@@ -21702,12 +21746,12 @@ class Runtime {
     const prefix = `${plugin}.${name}`;
     const id = exports_external.object({ id: exports_external.string() });
     const record3 = schema.extend({ id: exports_external.string(), createdAt: exports_external.string(), updatedAt: exports_external.string() });
-    const crud = (method2, effect, input2, output2, description, run, confirm) => this.register({
+    const crud = (method2, effect, input2, output2, description, run, approve) => this.register({
       name: `${prefix}.${method2}`,
       plugin,
       effect,
       description,
-      confirm,
+      approve,
       input: input2,
       output: output2,
       run: async (value, raw) => run(value, raw)
@@ -21727,7 +21771,7 @@ class Runtime {
     }, "Delete this record?");
   }
 }
-function fillConfirm(question, input2) {
+function fillQuestion(question, input2) {
   const fields = input2 ?? {};
   return question.replace(/\{\{\s*([A-Za-z0-9_]+)\s*\}\}/g, (_, field2) => {
     const value = Object.hasOwn(fields, field2) ? fields[field2] : undefined;
@@ -21752,7 +21796,7 @@ function mcpFailure(server, tool, error62) {
     case "NOT_READ_ONLY":
       return new MethodError("FORBIDDEN", `${server}.${tool} changes data, so it runs from a write, not a read.`);
     case "CONFIRM":
-      return new MethodError("FORBIDDEN", `${server}.${tool} may destroy data, so it runs only from a method with a confirm.`);
+      return new MethodError("FORBIDDEN", `${server}.${tool} may destroy data, so it runs only from a method with an approve.`);
   }
   return new MethodError("INTERNAL", error62.message);
 }
@@ -22860,12 +22904,12 @@ function runExecutor() {
       return;
     }
     if (message.type === "hosted") {
-      const call = waiting.get(message.id);
+      const call2 = waiting.get(message.id);
       waiting.delete(message.id);
       if (message.error)
-        call?.reject(new MethodError(message.error.code, message.error.message));
+        call2?.reject(new MethodError(message.error.code, message.error.message));
       else
-        call?.resolve(message.result);
+        call2?.resolve(message.result);
       return;
     }
     if (launched)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@repogo/plugins",
-  "version": "0.1.43",
+  "version": "0.1.45",
   "description": "Write RepoGo plugins: collections and methods over SQLite that agents and cards call",
   "type": "module",
   "exports": {
@@ -27,7 +27,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "zod": "^4.1.0"
+    "zod": "^4.6.0"
   },
   "devDependencies": {
     "@types/bun": "latest",