@rizom/brain 0.2.0-alpha.285 → 0.2.0-alpha.286

package/dist/plugins.js

@@ -1,5 +1,5 @@
 // @bun
-import{je as x,ke as y,le as z,mc as j,me as A,nc as k,ne as B,oc as q,oe as C,pc as v,qc as w,qe as D,re as E}from"./chunks/index-w1bmyak8.js";import"./chunks/index-pnb8xy1h.js";import"./chunks/index-q891w5f4.js";import{Mf as d,Qf as f,Rf as h}from"./chunks/index-smm9eana.js";import"./chunks/index-xtvsz1xr.js";import"./chunks/index-skqzsjg5.js";export{f as ToolResultDataSchema,B as RuntimeResourceSignalsSchema,C as RuntimeReadinessSchema,A as RuntimeQueueSignalsSchema,z as RuntimeHealthCheckSchema,d as PendingConfirmationSchema,q as MessageSchema,D as MessageResponseSchema,j as ExtensionMetadataSchema,k as ConversationSchema,x as ChatContextSchema,v as BrainCharacterSchema,E as BaseMessageSchema,y as AppInfoSchema,w as AnchorProfileSchema,h as AgentResponseSchema};
+import{je as x,ke as y,le as z,mc as j,me as A,nc as k,ne as B,oc as q,oe as C,pc as v,qc as w,qe as D,re as E}from"./chunks/index-0fysje0n.js";import"./chunks/index-pnb8xy1h.js";import"./chunks/index-q891w5f4.js";import{Mf as d,Qf as f,Rf as h}from"./chunks/index-smm9eana.js";import"./chunks/index-xtvsz1xr.js";import"./chunks/index-skqzsjg5.js";export{f as ToolResultDataSchema,B as RuntimeResourceSignalsSchema,C as RuntimeReadinessSchema,A as RuntimeQueueSignalsSchema,z as RuntimeHealthCheckSchema,d as PendingConfirmationSchema,q as MessageSchema,D as MessageResponseSchema,j as ExtensionMetadataSchema,k as ConversationSchema,x as ChatContextSchema,v as BrainCharacterSchema,E as BaseMessageSchema,y as AppInfoSchema,w as AnchorProfileSchema,h as AgentResponseSchema};
 
 //# debugId=C34753579868760F64756E2164756E21
 //# sourceMappingURL=plugins.js.map

package/dist/services.d.ts

@@ -61,7 +61,12 @@ interface AccountSettingsFieldDefinition {
   readonly control?: AccountSettingsControl | undefined;
   readonly secret?: boolean | undefined;
 }
-type AccountSettingsFieldMap<TSchema extends AccountSettingsSchema> = { readonly [K in Extract<keyof z.input<TSchema>, string>]?: AccountSettingsFieldDefinition; };
+/**
+ * Every schema field must be declared. Totality is what makes `secret` a
+ * decision rather than an omission: a missing entry would otherwise render a
+ * credential as an ordinary echoing text input.
+ */
+type AccountSettingsFieldMap<TSchema extends AccountSettingsSchema> = { readonly [K in Extract<keyof z.input<TSchema>, string>]: AccountSettingsFieldDefinition; };
 interface AccountSettingsDefinition<TSchema extends AccountSettingsSchema = AccountSettingsSchema, TFields extends AccountSettingsFieldMap<TSchema> = AccountSettingsFieldMap<TSchema>> {
   readonly kind: "rizom-account-settings";
   readonly title: string;
@@ -71,6 +76,17 @@ interface AccountSettingsDefinition<TSchema extends AccountSettingsSchema = Acco
 }
 type AnyAccountSettingsDefinition = AccountSettingsDefinition<AccountSettingsSchema, AccountSettingsFieldMap<AccountSettingsSchema>>;
 type AccountSettingsValue<TDefinition extends AnyAccountSettingsDefinition> = z.output<TDefinition["schema"]>;
+/** Field names the author declared `secret: true`. */
+type SecretSettingsKeys<TDefinition extends AnyAccountSettingsDefinition> = { [K in keyof TDefinition["fields"]]: NonNullable<TDefinition["fields"][K]> extends {
+  readonly secret: true;
+} ? K : never; }[keyof TDefinition["fields"]];
+/**
+ * Settings as an operator callback sees them. Widget, workspace, and action
+ * data is serialized to the browser, so secret fields are removed from the type
+ * itself: reading one is a compile error rather than a review question. Full
+ * values stay available to server-only paths such as account-bound daemons.
+ */
+type RedactedAccountSettingsValue<TDefinition extends AnyAccountSettingsDefinition> = Omit<AccountSettingsValue<TDefinition>, Extract<SecretSettingsKeys<TDefinition>, string>>;
 declare function defineAccountSettings<TSchema extends AccountSettingsSchema, const TFields extends AccountSettingsFieldMap<TSchema>>(definition: {
   readonly title: string;
   readonly description?: string | undefined;
@@ -130,7 +146,12 @@ interface OperatorBaseContext<TConfig, TState extends object, TAccountSettings e
   readonly config: TConfig;
   readonly state: TState;
   readonly caller: OperatorCaller | null;
-  readonly settings: TAccountSettings extends AnyAccountSettingsDefinition ? AccountSettingsValue<TAccountSettings> | null : null;
+  /**
+   * The current caller's settings, minus every field declared `secret`.
+   * Operator data reaches the browser, so secrets are excluded from the type
+   * rather than left to author discipline.
+   */
+  readonly settings: TAccountSettings extends AnyAccountSettingsDefinition ? RedactedAccountSettingsValue<TAccountSettings> | null : null;
   readonly entities: OperatorEntityReader;
   readonly jobs: OperatorJobs;
   readonly permissions: OperatorPermissions;

package/dist/services.js

@@ -1,5 +1,5 @@
 // @bun
-import{Id as i,Jd as t,Kd as o,Ld as n,Md as r,Nd as c,Od as a}from"./chunks/index-w1bmyak8.js";import"./chunks/index-pnb8xy1h.js";import"./chunks/index-q891w5f4.js";import"./chunks/index-smm9eana.js";import{Mh as e}from"./chunks/index-xtvsz1xr.js";import"./chunks/index-skqzsjg5.js";export{e as z,c as defineWorkspaceAction,t as defineTool,a as defineServicePlugin,i as defineJob,n as defineDashboardWidget,r as defineCmsWorkspace,o as defineAccountSettings};
+import{Id as i,Jd as t,Kd as o,Ld as n,Md as r,Nd as c,Od as a}from"./chunks/index-0fysje0n.js";import"./chunks/index-pnb8xy1h.js";import"./chunks/index-q891w5f4.js";import"./chunks/index-smm9eana.js";import{Mh as e}from"./chunks/index-xtvsz1xr.js";import"./chunks/index-skqzsjg5.js";export{e as z,c as defineWorkspaceAction,t as defineTool,a as defineServicePlugin,i as defineJob,n as defineDashboardWidget,r as defineCmsWorkspace,o as defineAccountSettings};
 
 //# debugId=6051FBB54651D43C64756E2164756E21
 //# sourceMappingURL=services.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rizom/brain",
-  "version": "0.2.0-alpha.285",
+  "version": "0.2.0-alpha.286",
   "description": "Brain runtime + CLI — scaffold, run, and manage AI brain instances",
   "keywords": [
     "brain",