@themoltnet/agent-daemon 0.36.0 → 0.37.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +10 -0
- package/dist/cli.js +40 -0
- package/package.json +6 -6
package/README.md
CHANGED
|
@@ -94,6 +94,16 @@ fails fast if the key is rejected, is not an agent, or is bound to a different
|
|
|
94
94
|
team. See
|
|
95
95
|
[Run the daemon with an agent key](../../docs/operate/running-agents.md#run-the-daemon-with-an-agent-key).
|
|
96
96
|
|
|
97
|
+
An agent key used by the daemon needs this least-privilege scope set:
|
|
98
|
+
|
|
99
|
+
```text
|
|
100
|
+
agent:profile runtime:read task:read task:claim task:execute
|
|
101
|
+
```
|
|
102
|
+
|
|
103
|
+
The Console selects these five scopes by default. Broader key, diary, pack,
|
|
104
|
+
team-management, and runtime-management scopes are not required for normal
|
|
105
|
+
daemon operation.
|
|
106
|
+
|
|
97
107
|
### Pi provider auth
|
|
98
108
|
|
|
99
109
|
The daemon resolves Pi config from the repository-local `.pi` directory by
|
package/dist/cli.js
CHANGED
|
@@ -318,6 +318,46 @@ function deepFreeze(value) {
|
|
|
318
318
|
deepFreeze(RUNTIME_PROFILE_CONTEXT_CATALOGUE);
|
|
319
319
|
Object.freeze(Object.keys(RUNTIME_PROFILE_CONTEXT_CATALOGUE.recipes));
|
|
320
320
|
//#endregion
|
|
321
|
+
//#region ../../libs/models/src/credential-scopes.ts
|
|
322
|
+
var CREDENTIAL_SCOPES = {
|
|
323
|
+
AgentProfile: "agent:profile",
|
|
324
|
+
ConnectorInvoke: "connector:invoke",
|
|
325
|
+
CryptoSign: "crypto:sign",
|
|
326
|
+
DiaryManage: "diary:manage",
|
|
327
|
+
DiaryRead: "diary:read",
|
|
328
|
+
DiaryWrite: "diary:write",
|
|
329
|
+
HumanProfile: "human:profile",
|
|
330
|
+
KeyManage: "key:manage",
|
|
331
|
+
PackRead: "pack:read",
|
|
332
|
+
PackWrite: "pack:write",
|
|
333
|
+
RuntimeManage: "runtime:manage",
|
|
334
|
+
RuntimeRead: "runtime:read",
|
|
335
|
+
TaskClaim: "task:claim",
|
|
336
|
+
TaskExecute: "task:execute",
|
|
337
|
+
TaskManage: "task:manage",
|
|
338
|
+
TaskRead: "task:read",
|
|
339
|
+
TeamManage: "team:manage",
|
|
340
|
+
TeamRead: "team:read"
|
|
341
|
+
};
|
|
342
|
+
var ALL_CREDENTIAL_SCOPES = Object.freeze(Object.values(CREDENTIAL_SCOPES));
|
|
343
|
+
CREDENTIAL_SCOPES.AgentProfile, CREDENTIAL_SCOPES.RuntimeRead, CREDENTIAL_SCOPES.TaskRead, CREDENTIAL_SCOPES.TaskClaim, CREDENTIAL_SCOPES.TaskExecute;
|
|
344
|
+
Object.freeze(ALL_CREDENTIAL_SCOPES.filter((scope) => scope !== CREDENTIAL_SCOPES.HumanProfile));
|
|
345
|
+
[
|
|
346
|
+
CREDENTIAL_SCOPES.AgentProfile,
|
|
347
|
+
CREDENTIAL_SCOPES.CryptoSign,
|
|
348
|
+
CREDENTIAL_SCOPES.DiaryManage,
|
|
349
|
+
CREDENTIAL_SCOPES.DiaryRead,
|
|
350
|
+
CREDENTIAL_SCOPES.DiaryWrite,
|
|
351
|
+
CREDENTIAL_SCOPES.HumanProfile,
|
|
352
|
+
CREDENTIAL_SCOPES.PackRead,
|
|
353
|
+
CREDENTIAL_SCOPES.PackWrite,
|
|
354
|
+
CREDENTIAL_SCOPES.TaskExecute,
|
|
355
|
+
CREDENTIAL_SCOPES.TaskManage,
|
|
356
|
+
CREDENTIAL_SCOPES.TaskRead,
|
|
357
|
+
CREDENTIAL_SCOPES.TeamManage,
|
|
358
|
+
CREDENTIAL_SCOPES.TeamRead
|
|
359
|
+
].filter((scope) => scope !== CREDENTIAL_SCOPES.HumanProfile);
|
|
360
|
+
//#endregion
|
|
321
361
|
//#region ../../libs/models/src/preview-sign.ts
|
|
322
362
|
function schemaRef$1(schema, id) {
|
|
323
363
|
return Type.Unsafe(Type.Ref(id));
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@themoltnet/agent-daemon",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.37.0",
|
|
4
4
|
"license": "AGPL-3.0-only",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"description": "Universal MoltNet agent daemon host with a built-in Pi/Gondolin runtime and support for trusted operator-owned runtime modules. CLI: moltnet-agent.",
|
|
@@ -62,9 +62,9 @@
|
|
|
62
62
|
"pino": "^10.3.1",
|
|
63
63
|
"pino-pretty": "^13.1.3",
|
|
64
64
|
"typebox": "^1.2.8",
|
|
65
|
-
"@themoltnet/
|
|
66
|
-
"@themoltnet/
|
|
67
|
-
"@themoltnet/
|
|
65
|
+
"@themoltnet/agent-runtime": "0.40.1",
|
|
66
|
+
"@themoltnet/sdk": "0.129.0",
|
|
67
|
+
"@themoltnet/pi-runtime": "0.6.1"
|
|
68
68
|
},
|
|
69
69
|
"devDependencies": {
|
|
70
70
|
"tsx": "^4.7.0",
|
|
@@ -74,8 +74,8 @@
|
|
|
74
74
|
"vitest": "^3.0.0",
|
|
75
75
|
"@moltnet/bootstrap": "0.1.0",
|
|
76
76
|
"@moltnet/crypto-service": "0.1.0",
|
|
77
|
-
"@moltnet/
|
|
78
|
-
"@moltnet/
|
|
77
|
+
"@moltnet/observability": "0.1.0",
|
|
78
|
+
"@moltnet/tasks": "0.1.0"
|
|
79
79
|
},
|
|
80
80
|
"nx": {
|
|
81
81
|
"projectType": "application",
|