@tianshu-ai/tianshu 0.3.0 → 0.3.2

package/README.md

@@ -119,17 +119,37 @@ Use it whenever something doesn't feel right — it's read-only.
 
 ### Installing globally
 
-When 0.x stabilises this will be on npm:
+Published to npm under `@tianshu-ai/tianshu`:
 
 ```bash
 npm install -g @tianshu-ai/tianshu
-tianshu setup --wizard
-tianshu doctor
-tianshu start
+tianshu setup --wizard       # interactive: pick provider, key, ports
+tianshu doctor               # verify config + reachability
+tianshu start                # bootstrap the launchd service (macOS)
 ```
 
-For now, run from a checkout. Commands are the same, you just invoke
-them via `npm run` or `node bin/tianshu.mjs`.
+Day-2 control:
+
+```bash
+tianshu status               # what's loaded? port? health?
+tianshu logs --follow        # tail server stdout + stderr
+tianshu restart              # bounce the dev server
+tianshu stop                 # bootout from launchd
+tianshu tenant list          # tenants + users + open-in-browser URLs
+```
+
+Updating:
+
+```bash
+tianshu update --check       # peek at what `latest` is on npm
+tianshu update               # npm install -g the latest, prints next steps
+tianshu update --tag next    # install pre-release channel (if available)
+```
+
+Developing from a checkout: clone the repo, `npm install`, then
+`npm run dev` to get the live server + UI. `bin/tianshu.mjs` works
+the same from the checkout, but `tianshu update` will detect the
+checkout and refuse — use `git pull` instead.
 
 ### Useful flags
 
@@ -241,7 +261,7 @@ giants.
 
 ### Next (0.3.x)
 
-- [ ] `npm install -g @tianshu-ai/tianshu` published to npm
+- [x] `npm install -g @tianshu-ai/tianshu` published to npm
 - [ ] `tianshu start` single-port server (web + API together for prod)
 - [ ] Docker image with sandbox layer baked in
 - [ ] Hosted demo at `demo.tianshu-ai.com`

package/node_modules/@tianshu-ai/plugin-sdk/dist/agent-loop.d.ts

@@ -0,0 +1,96 @@
+export interface AgentLoopRunnerRequest {
+    /** Owner of the worker session. Tasks are owner-scoped, so this
+     *  must match the task's owner_user_id when called by a worker
+     *  pool. */
+    userId: string;
+    /** Initial user prompt. The headline + a Description block work
+     *  fine; any well-formed prompt does. */
+    initialUserMessage: string;
+    /** System-prompt override; falls through to the host default. */
+    systemPrompt?: string;
+    /** Model id from tenant config; falls through to default. */
+    modelId?: string;
+    /** Allow-list of tool names. `null` / undefined = all available. */
+    toolsAllow?: string[] | null;
+    /** Deny-list applied AFTER `toolsAllow`. Used by worker pools to
+     *  scrub tools that are unsafe in worker context (e.g. workboard's
+     *  task_create) regardless of what the agent's allow-list says. */
+    toolsDeny?: string[] | null;
+    /** Allow-list of skill names; same semantics. */
+    skillsAllow?: string[] | null;
+    /** Friendly title for the worker session row. */
+    sessionTitle?: string | null;
+    /** Worker role. Use the kind id (e.g. \"llm\") when called from a
+     *  worker pool. */
+    workerRole?: string | null;
+    /** Worker filesystem slug — the directory name under
+     *  `_tenant/config/workers/<slug>/`. Drives the
+     *  `tenant_config_write` boundary so a worker can author skills
+     *  inside its own bundle. When omitted, the tools fall back to
+     *  scoping by `workerRole`. */
+    workerSlug?: string | null;
+    /** Task id when this run is driven by a workboard task. Plumbed
+     *  through to `AgentToolContext.taskId` so per-task tools (most
+     *  importantly the microsandbox `exec` route) can scope their
+     *  resources to a single task lifecycle: the task pool boots one
+     *  sandbox per `taskId` and stops it once the task terminates.
+     *  Absent for chat sessions and ad-hoc agent loops. */
+    taskId?: string | null;
+    /** Parent session id (the user's main session that requested
+     *  the worker). Lets the UI render worker sessions as children. */
+    parentSessionId?: string | null;
+    /** Three layered timeouts. 0 disables the layer. */
+    timeouts?: {
+        firstResponseMs?: number;
+        idleMs?: number;
+        maxRunMs?: number;
+    };
+    /** External abort signal. */
+    signal?: AbortSignal;
+    /**
+     * Fires once, immediately after the worker session row has been
+     * inserted into the host DB and before the first LLM call.
+     *
+     * Plugins use this to link a long-running task row to its
+     * session id ASAP — without it, the workboard plugin would have
+     * to wait until the run terminated to write back
+     * `tasks.session_id`, which means the kanban Execution tab
+     * couldn't tail an in-progress conversation.
+     *
+     * Errors thrown by the callback are caught + logged and do not
+     * abort the run.
+     */
+    onSessionStart?: (sessionId: string) => void;
+    /**
+     * Resume a previous worker session instead of creating a fresh
+     * one. The host opens the existing session row and the LLM sees
+     * its prior transcript as context.
+     *
+     * Workboard uses this to retry a stalled task without losing the
+     * transcript that explains *why* it stalled — the new run
+     * picks up where the old one left off and (typically) just
+     * needs to call task_complete to finish.
+     *
+     * If the id doesn't exist, the host falls back to creating a new
+     * session and logs a warning rather than throwing.
+     */
+    resumeSessionId?: string;
+    /**
+     * Prompt to send when `resumeSessionId` is set. Defaults to a
+     * generic nudge reminding the agent it didn't call task_complete
+     * last time. Ignored when starting a fresh session.
+     */
+    resumePrompt?: string;
+}
+export interface AgentLoopRunnerResult {
+    status: "done" | "stalled" | "aborted" | "error";
+    summary: string;
+    files: string[];
+    sessionId: string;
+    turns: number;
+    reason: "task_complete" | "no_completion" | "first_response_timeout" | "idle_timeout" | "max_run_timeout" | "aborted" | "stream_error" | "exception";
+}
+export interface AgentLoopRunner {
+    run(req: AgentLoopRunnerRequest): Promise<AgentLoopRunnerResult>;
+}
+//# sourceMappingURL=agent-loop.d.ts.map

package/node_modules/@tianshu-ai/plugin-sdk/dist/agent-loop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-loop.d.ts","sourceRoot":"","sources":["../src/agent-loop.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,sBAAsB;IACrC;;gBAEY;IACZ,MAAM,EAAE,MAAM,CAAC;IACf;6CACyC;IACzC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iEAAiE;IACjE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC7B;;uEAEmE;IACnE,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC5B,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC9B,iDAAiD;IACjD,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;uBACmB;IACnB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;mCAI+B;IAC/B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;;2DAKuD;IACvD,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB;uEACmE;IACnE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,oDAAoD;IACpD,QAAQ,CAAC,EAAE;QACT,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,6BAA6B;IAC7B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;;;;;;;;;OAYG;IACH,cAAc,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7C;;;;;;;;;;;;OAYG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EACF,eAAe,GACf,eAAe,GACf,wBAAwB,GACxB,cAAc,GACd,iBAAiB,GACjB,SAAS,GACT,cAAc,GACd,WAAW,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,GAAG,EAAE,sBAAsB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CAClE"}

package/node_modules/@tianshu-ai/plugin-sdk/dist/agent-loop.js

@@ -0,0 +1,11 @@
+// Capability-side type for `host.agentLoop`.
+//
+// The host registers a runner satisfying this interface; plugins
+// look it up via `ctx.capabilities.get<AgentLoopRunner>(\"host.agentLoop\")`.
+//
+// We deliberately re-declare the request/result shapes in the SDK
+// instead of re-exporting from `@tianshu/server` so plugin builds
+// don't have to depend on the server bundle. The host's actual
+// implementation must remain shape-compatible with this contract.
+export {};
+//# sourceMappingURL=agent-loop.js.map

package/node_modules/@tianshu-ai/plugin-sdk/dist/agent-loop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-loop.js","sourceRoot":"","sources":["../src/agent-loop.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,EAAE;AACF,iEAAiE;AACjE,8EAA8E;AAC9E,EAAE;AACF,kEAAkE;AAClE,kEAAkE;AAClE,+DAA+D;AAC/D,kEAAkE"}

package/node_modules/@tianshu-ai/plugin-sdk/dist/capabilities.d.ts

@@ -0,0 +1,48 @@
+export interface CapabilitySpec {
+    readonly exclusive: boolean;
+    readonly description: string;
+}
+export declare const KNOWN_CAPABILITIES: {
+    readonly "sandbox.shell": {
+        readonly exclusive: true;
+        readonly description: "Run shell commands and read/write files in an isolated per-tenant workspace.";
+    };
+    readonly "sandbox.taskPool": {
+        readonly exclusive: true;
+        readonly description: "Manage per-task sandbox lifecycle: acquire a dedicated sandbox at worker pickup time, release it (stop without removing) when the task terminates, and destroy it on task delete. Workboard binds task ids to agent sessions through this capability so per-task `exec` calls land in the right sandbox.";
+    };
+    readonly "browser.cdp": {
+        readonly exclusive: true;
+        readonly description: "Provide a headless chromium reachable via Chrome DevTools Protocol + Playwright MCP, with a noVNC viewport for the user.";
+    };
+    readonly "host.agentLoop": {
+        readonly exclusive: true;
+        readonly description: "Run a headless agent loop on behalf of a worker: spin up a kind='worker' session, call the LLM with the tenant's tool/skill set, persist messages, enforce first-response/idle/max-run timeouts, and return a structured terminal result. Provided by the host (not by a plugin); workboard's LLM worker requires it.";
+    };
+    readonly "host.sessionInbox": {
+        readonly exclusive: true;
+        readonly description: "Deliver a system-level message to a chat session's inbox. If the session has an active turn running, the message is queued via harness.followUp(); otherwise it persists in the DB and is flushed as a system note the next time the session takes a user turn. Provided by the host; workboard uses this to notify the parent agent when a delegated task finishes.";
+    };
+    readonly "host.toolCatalog": {
+        readonly exclusive: true;
+        readonly description: "Read the tool catalog the host can offer to the current tenant: every tool name registered by the host plus every active plugin's contributions. Plugins use this to seed allow-list defaults (e.g. workboard's Default LLM agent grants every tool by default rather than 'unlimited' meaning silent fallthrough).";
+    };
+    readonly "host.skillCatalog": {
+        readonly exclusive: true;
+        readonly description: "Read the skill catalog the host can offer to the current tenant: every skill name registered host-side plus every active plugin's contributions. Same role as host.toolCatalog but for the skill allow-list field.";
+    };
+    readonly "host.modelCatalog": {
+        readonly exclusive: true;
+        readonly description: "Read the LLM model catalog the host can offer to the current tenant: every provider/model registered in the host's `models.providers` config, plus the default modelId. Used by the main agent and worker-creator to pick a model for new worker bundles instead of hard-coding ids.";
+    };
+    readonly "host.lsp": {
+        readonly exclusive: true;
+        readonly description: "Diagnose a file via the host's LSP manager after a write/edit. Plugins (notably `files`) call `diagnoseAfterEdit({ filePath, contents })` and append the formatted diagnostic block to their tool result so the model sees compile errors in the same turn that introduced them. Tenant-scoped: the manager refuses files outside the calling tenant's workspace. See ADR-0005.";
+    };
+};
+export type CapabilityName = keyof typeof KNOWN_CAPABILITIES;
+/** True iff the given string is a registered capability name. */
+export declare function isCapabilityName(s: string): s is CapabilityName;
+/** Returns the capability spec or undefined if unknown. */
+export declare function capabilitySpec(name: string): CapabilitySpec | undefined;
+//# sourceMappingURL=capabilities.d.ts.map

package/node_modules/@tianshu-ai/plugin-sdk/dist/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8CoB,CAAC;AAEpD,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,kBAAkB,CAAC;AAE7D,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,IAAI,cAAc,CAE/D;AAED,2DAA2D;AAC3D,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAEvE"}

package/node_modules/@tianshu-ai/plugin-sdk/dist/capabilities.js

@@ -0,0 +1,61 @@
+// Capability vocabulary (ADR-0004 §3).
+//
+// A capability is a maintainer-defined tag that names a concrete
+// platform-level capability a plugin can provide or require. The
+// vocabulary is closed: extending it is a maintainer PR to this file,
+// which forces explicit thought about new platform surface area and
+// keeps capability strings from drifting between plugins.
+//
+// Every entry has:
+// - exclusive: when true, only one plugin in a tenant may provide
+//   this capability. The registry rejects a second provider at
+//   activation time (ADR-0004 §7).
+// - description: human-readable surface description, shown in the
+//   Plugin Manager UI (Catalog tab) and in error messages.
+export const KNOWN_CAPABILITIES = {
+    "sandbox.shell": {
+        exclusive: true,
+        description: "Run shell commands and read/write files in an isolated per-tenant workspace.",
+    },
+    "sandbox.taskPool": {
+        exclusive: true,
+        description: "Manage per-task sandbox lifecycle: acquire a dedicated sandbox at worker pickup time, release it (stop without removing) when the task terminates, and destroy it on task delete. Workboard binds task ids to agent sessions through this capability so per-task `exec` calls land in the right sandbox.",
+    },
+    "browser.cdp": {
+        exclusive: true,
+        description: "Provide a headless chromium reachable via Chrome DevTools Protocol + Playwright MCP, with a noVNC viewport for the user.",
+    },
+    "host.agentLoop": {
+        exclusive: true,
+        description: "Run a headless agent loop on behalf of a worker: spin up a kind='worker' session, call the LLM with the tenant's tool/skill set, persist messages, enforce first-response/idle/max-run timeouts, and return a structured terminal result. Provided by the host (not by a plugin); workboard's LLM worker requires it.",
+    },
+    "host.sessionInbox": {
+        exclusive: true,
+        description: "Deliver a system-level message to a chat session's inbox. If the session has an active turn running, the message is queued via harness.followUp(); otherwise it persists in the DB and is flushed as a system note the next time the session takes a user turn. Provided by the host; workboard uses this to notify the parent agent when a delegated task finishes.",
+    },
+    "host.toolCatalog": {
+        exclusive: true,
+        description: "Read the tool catalog the host can offer to the current tenant: every tool name registered by the host plus every active plugin's contributions. Plugins use this to seed allow-list defaults (e.g. workboard's Default LLM agent grants every tool by default rather than 'unlimited' meaning silent fallthrough).",
+    },
+    "host.skillCatalog": {
+        exclusive: true,
+        description: "Read the skill catalog the host can offer to the current tenant: every skill name registered host-side plus every active plugin's contributions. Same role as host.toolCatalog but for the skill allow-list field.",
+    },
+    "host.modelCatalog": {
+        exclusive: true,
+        description: "Read the LLM model catalog the host can offer to the current tenant: every provider/model registered in the host's `models.providers` config, plus the default modelId. Used by the main agent and worker-creator to pick a model for new worker bundles instead of hard-coding ids.",
+    },
+    "host.lsp": {
+        exclusive: true,
+        description: "Diagnose a file via the host's LSP manager after a write/edit. Plugins (notably `files`) call `diagnoseAfterEdit({ filePath, contents })` and append the formatted diagnostic block to their tool result so the model sees compile errors in the same turn that introduced them. Tenant-scoped: the manager refuses files outside the calling tenant's workspace. See ADR-0005.",
+    },
+};
+/** True iff the given string is a registered capability name. */
+export function isCapabilityName(s) {
+    return Object.prototype.hasOwnProperty.call(KNOWN_CAPABILITIES, s);
+}
+/** Returns the capability spec or undefined if unknown. */
+export function capabilitySpec(name) {
+    return isCapabilityName(name) ? KNOWN_CAPABILITIES[name] : undefined;
+}
+//# sourceMappingURL=capabilities.js.map

package/node_modules/@tianshu-ai/plugin-sdk/dist/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,EAAE;AACF,iEAAiE;AACjE,iEAAiE;AACjE,sEAAsE;AACtE,oEAAoE;AACpE,0DAA0D;AAC1D,EAAE;AACF,mBAAmB;AACnB,kEAAkE;AAClE,+DAA+D;AAC/D,mCAAmC;AACnC,kEAAkE;AAClE,2DAA2D;AAO3D,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,eAAe,EAAE;QACf,SAAS,EAAE,IAAI;QACf,WAAW,EACT,8EAA8E;KACjF;IACD,kBAAkB,EAAE;QAClB,SAAS,EAAE,IAAI;QACf,WAAW,EACT,0SAA0S;KAC7S;IACD,aAAa,EAAE;QACb,SAAS,EAAE,IAAI;QACf,WAAW,EACT,0HAA0H;KAC7H;IACD,gBAAgB,EAAE;QAChB,SAAS,EAAE,IAAI;QACf,WAAW,EACT,uTAAuT;KAC1T;IACD,mBAAmB,EAAE;QACnB,SAAS,EAAE,IAAI;QACf,WAAW,EACT,sWAAsW;KACzW;IACD,kBAAkB,EAAE;QAClB,SAAS,EAAE,IAAI;QACf,WAAW,EACT,qTAAqT;KACxT;IACD,mBAAmB,EAAE;QACnB,SAAS,EAAE,IAAI;QACf,WAAW,EACT,oNAAoN;KACvN;IACD,mBAAmB,EAAE;QACnB,SAAS,EAAE,IAAI;QACf,WAAW,EACT,sRAAsR;KACzR;IACD,UAAU,EAAE;QACV,SAAS,EAAE,IAAI;QACf,WAAW,EACT,iXAAiX;KACpX;CACgD,CAAC;AAIpD,iEAAiE;AACjE,MAAM,UAAU,gBAAgB,CAAC,CAAS;IACxC,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC"}

package/node_modules/@tianshu-ai/plugin-sdk/dist/catalog.d.ts

@@ -0,0 +1,60 @@
+export interface ToolCatalogEntry {
+    name: string;
+    /** Single-line description from the tool's schema. */
+    description: string;
+    /** Source plugin id, or "host" for tools registered by the
+     *  server itself. Useful for UI grouping. */
+    pluginId: string;
+}
+export interface ToolCatalogCapability {
+    /** Read the full tool catalog for the current tenant. Synchronous;
+     *  the host already has this loaded in memory. */
+    list(): ToolCatalogEntry[];
+}
+export interface SkillCatalogEntry {
+    name: string;
+    description: string;
+    pluginId: string;
+    /** Frontmatter `scope:` field, if any. "main" hides the skill
+     *  from worker runs; "worker" hides it from the main chat
+     *  agent. Undefined means visible to both — the legacy
+     *  default. Plugins / UIs that surface skills per-agent
+     *  honour this filter themselves; the host doesn't strip
+     *  scoped skills from the catalog. */
+    scope?: "main" | "worker";
+}
+export interface SkillCatalogCapability {
+    list(): SkillCatalogEntry[];
+}
+export interface ModelCatalogEntry {
+    /** Provider-prefixed id passed to `modelId` fields, e.g.
+     *  `sap-proxy/claude-sonnet-4-6`, `anthropic/claude-opus-4-7`,
+     *  `sap-perplexity/sonar-pro`. This is the value an agent.json
+     *  or task overrides should set. */
+    id: string;
+    /** Display name from the host config (`models[].name`). */
+    name: string;
+    /** Provider id (`anthropic`, `sap-proxy`, etc.). Already in the
+     *  prefix of `id`; surfaced separately for UI grouping. */
+    provider: string;
+    /** Optional grouping label (`Cloud`, `Local`, ...). */
+    group?: string;
+    /** Context window in tokens, from host config. */
+    contextWindow: number;
+    /** True iff the model emits chain-of-thought / reasoning
+     *  tokens we shouldn't show to the user verbatim. */
+    reasoning: boolean;
+}
+export interface ModelCatalogCapability {
+    /** Read the model catalog visible to the current tenant.
+     *  Driven by `tenant.config.models.providers` resolved via
+     *  `listModels()` in @tianshu/server. The default model id
+     *  (used when `agent.json.modelId === null`) is exposed
+     *  separately so worker-creator and other tools don't have
+     *  to hard-code which entry is the fallback. */
+    list(): {
+        models: ModelCatalogEntry[];
+        defaultModelId: string | null;
+    };
+}
+//# sourceMappingURL=catalog.d.ts.map

package/node_modules/@tianshu-ai/plugin-sdk/dist/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../src/catalog.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,WAAW,EAAE,MAAM,CAAC;IACpB;iDAC6C;IAC7C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC;sDACkD;IAClD,IAAI,IAAI,gBAAgB,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;0CAKsC;IACtC,KAAK,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,IAAI,iBAAiB,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC;;;wCAGoC;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb;+DAC2D;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,aAAa,EAAE,MAAM,CAAC;IACtB;yDACqD;IACrD,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC;;;;;oDAKgD;IAChD,IAAI,IAAI;QAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACxE"}

package/node_modules/@tianshu-ai/plugin-sdk/dist/catalog.js

@@ -0,0 +1,11 @@
+// Capability shapes for the host's tool / skill catalogs.
+//
+// Plugins use these to populate allow-list defaults for built-in
+// agents (workboard's Default LLM picks up every tool / skill the
+// host knows about, instead of relying on the magic "null = no
+// restriction" sentinel that's invisible in the UI).
+//
+// Both registered as exclusive host capabilities; see
+// capabilities.ts.
+export {};
+//# sourceMappingURL=catalog.js.map

package/node_modules/@tianshu-ai/plugin-sdk/dist/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../src/catalog.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,EAAE;AACF,iEAAiE;AACjE,kEAAkE;AAClE,+DAA+D;AAC/D,qDAAqD;AACrD,EAAE;AACF,sDAAsD;AACtD,mBAAmB"}

package/node_modules/@tianshu-ai/plugin-sdk/dist/client.d.ts

@@ -0,0 +1,171 @@
+import type { ComponentType } from "react";
+export interface PluginRuntimeInfo {
+    id: string;
+    version: string;
+    displayName: string;
+}
+export interface PanelProps {
+    tenantId: string;
+    userId: string;
+    plugin: PluginRuntimeInfo;
+}
+export interface SidebarSectionProps extends PanelProps {
+    isCollapsed: boolean;
+    onToggleCollapse: () => void;
+}
+/**
+ * Props handed to a plugin's admin-page component
+ * (manifest.contributes.adminPages[].component). The host renders
+ * these inside the chat shell's `/admin` shell, full-width.
+ */
+export interface AdminPageProps extends PanelProps {
+    /** The page id from the manifest contribution
+     *  (e.g. "main", "settings"). */
+    pageId: string;
+}
+/**
+ * One file (or, in the future, any other inline payload) the user
+ * has staged in the composer. The chat shell renders these as chips
+ * above the textarea and disables Send until everything is `ready`.
+ *
+ * Plugins create attachments via `composer.addAttachment(...)` and
+ * track upload progress by calling `updateAttachment(id, patch)`.
+ */
+export interface Attachment {
+    /** Stable id assigned by the host on `addAttachment`. */
+    id: string;
+    name: string;
+    size: number;
+    status: "uploading" | "ready" | "error";
+    /**
+     * Path relative to the user's home (e.g. `/uploads/data.csv`).
+     * Populated by the plugin once the file is on disk.
+     */
+    path?: string;
+    /**
+     * RFC 6838 mime type. The host forwards this on the wire so the
+     * server can decide whether to treat the attachment as a vision
+     * input or a plain workspace file. Plugins should pass
+     * `File.type` here when available; default to
+     * `"application/octet-stream"`.
+     */
+    mimeType?: string;
+    /** 0..1, optional progress for the chip. */
+    progress?: number;
+    /** Set when status === "error". */
+    error?: string;
+    /** Plugin-defined metadata (dimensions, hashes, anything). */
+    meta?: Record<string, unknown>;
+}
+export type DraftTransform = (
+/** The text the user typed (already trimmed of trailing whitespace). */
+text: string, 
+/** All attachments at the moment of send, all with status === "ready". */
+attachments: Attachment[]) => string | Promise<string>;
+/**
+ * Composer API surface exposed to plugin client components.
+ *
+ * Implementation note: the host wires this into a React context. Use
+ * `useComposer()` from `@tianshu-ai/plugin-sdk/client` from inside a
+ * plugin component to get the live instance.
+ */
+export interface ComposerApi {
+    /** Live attachments list. Mutations should go through the methods. */
+    attachments: Attachment[];
+    /** Append a new attachment, host assigns the id. */
+    addAttachment(a: Omit<Attachment, "id">): string;
+    /** Patch fields on an existing attachment. No-op if id unknown. */
+    updateAttachment(id: string, patch: Partial<Omit<Attachment, "id">>): void;
+    /** Remove an attachment from the staged list. */
+    removeAttachment(id: string): void;
+    /**
+     * Register a transform that runs (in order of registration) on the
+     * draft text right before it's sent to the server. Returns an
+     * unregister function. Idempotent when called repeatedly with the
+     * same fn.
+     */
+    registerDraftTransform(fn: DraftTransform): () => void;
+}
+export interface ComposerActionProps extends PanelProps {
+    composer: ComposerApi;
+}
+/**
+ * One attachment as it lands in a user message. Mirrors the wire
+ * shape; the host re-exports it here so plugin authors only depend
+ * on the SDK.
+ */
+export interface AttachmentDescriptor {
+    /** User-home-relative path (always starts with "/"). */
+    path: string;
+    /** RFC 6838 mime type. */
+    mimeType: string;
+    /** Original filename for display. */
+    name?: string;
+    /** Byte size on disk, when known. */
+    size?: number;
+}
+export interface AttachmentRendererProps extends PanelProps {
+    attachment: AttachmentDescriptor;
+    /** "start" for assistant-side, "end" for user-side. The renderer
+     *  doesn't need to align itself — the host wraps a flex
+     *  container — but it can use this for asymmetrical decoration. */
+    align: "start" | "end";
+    /**
+     * Resolve a workspace path to an absolute URL the browser can
+     * fetch. The host owns this so renderer plugins don't hard-code
+     * `/api/p/files/raw` (which would couple them to the files
+     * plugin). Today the host implementation routes through the
+     * files plugin; tomorrow it might route through a CDN cache.
+     */
+    rawUrl: (path: string) => string;
+}
+export interface PluginClientExports {
+    components: Record<string, ComponentType<PanelProps | SidebarSectionProps | ComposerActionProps | AttachmentRendererProps | AdminPageProps>>;
+}
+/** Host-only: install the live `useComposer` accessor. The web bundle
+ *  calls this once on bootstrap with a function that reads from its
+ *  React context. */
+export declare function __installUseComposer(fn: () => ComposerApi): void;
+/** Host-only: clear the installed accessor. Used by tests so each
+ *  test starts with a clean slate; production code should never
+ *  call this. */
+export declare function __resetUseComposerForTest(): void;
+export declare function useComposer(): ComposerApi;
+export interface OpenFileApi {
+    /** Open a file living inside the user workspace. `path` accepts
+     *  the same shapes the file tools accept: a `workspace:///foo`
+     *  URI, a leading-slash absolute path, or a bare relative path.
+     *  Implementations may render an in-page modal, switch to the
+     *  files panel, open a new tab — anything UX-appropriate. */
+    open(path: string): void;
+}
+/** Host or files-plugin only: register an OpenFileApi. The host
+ *  installs a fallback at bootstrap; the Files plugin overrides
+ *  it on mount with its dialog-based implementation. Last writer
+ *  wins. */
+export declare function __installOpenFileApi(api: OpenFileApi): void;
+/** Test helper. */
+export declare function __resetOpenFileApiForTest(): void;
+/** Hook returning the live `open(path)` callable. Stable across
+ *  re-renders — always reads from the slot, so a late
+ *  __installOpenFileApi() takes effect on the next call without
+ *  forcing a re-mount. Throws only if absolutely no implementation
+ *  has ever been installed (which means the host bootstrap was
+ *  skipped). */
+import * as React from "react";
+export interface PluginConfigFormProps {
+    /** Plugin id (matches manifest.id). Form pulls schema + values
+     *  from the host's live plugin store on every render, so a
+     *  config save in another tab updates this in place. */
+    pluginId: string;
+    /** Optional className applied to the root form container. */
+    className?: string;
+}
+export declare function __installPluginConfigForm(C: React.ComponentType<PluginConfigFormProps>): void;
+export declare function __resetPluginConfigFormForTest(): void;
+/** Renders the auto-generated config form for `pluginId`. If the
+ *  plugin has no `configSchema` or no fields, renders nothing
+ *  (so the calling component can drop it in unconditionally). */
+export declare const PluginConfigForm: React.ComponentType<PluginConfigFormProps>;
+export declare function useOpenFile(): OpenFileApi["open"];
+//# sourceMappingURL=client.d.ts.map

package/node_modules/@tianshu-ai/plugin-sdk/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAE3C,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,iBAAiB,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAoB,SAAQ,UAAU;IACrD,WAAW,EAAE,OAAO,CAAC;IACrB,gBAAgB,EAAE,MAAM,IAAI,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAe,SAAQ,UAAU;IAChD;qCACiC;IACjC,MAAM,EAAE,MAAM,CAAC;CAChB;AAID;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACzB,yDAAyD;IACzD,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,GAAG,OAAO,GAAG,OAAO,CAAC;IACxC;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,MAAM,cAAc,GAAG;AAC3B,wEAAwE;AACxE,IAAI,EAAE,MAAM;AACZ,0EAA0E;AAC1E,WAAW,EAAE,UAAU,EAAE,KACtB,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AAE9B;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,sEAAsE;IACtE,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,oDAAoD;IACpD,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,MAAM,CAAC;IACjD,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IAC3E,iDAAiD;IACjD,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,EAAE,cAAc,GAAG,MAAM,IAAI,CAAC;CACxD;AAED,MAAM,WAAW,mBAAoB,SAAQ,UAAU;IACrD,QAAQ,EAAE,WAAW,CAAC;CACvB;AAID;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,0BAA0B;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,qCAAqC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qCAAqC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,uBAAwB,SAAQ,UAAU;IACzD,UAAU,EAAE,oBAAoB,CAAC;IACjC;;uEAEmE;IACnE,KAAK,EAAE,OAAO,GAAG,KAAK,CAAC;IACvB;;;;;;OAMG;IACH,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAChB,MAAM,EACN,aAAa,CACT,UAAU,GACV,mBAAmB,GACnB,mBAAmB,GACnB,uBAAuB,GACvB,cAAc,CACjB,CACF,CAAC;CACH;AA2BD;;qBAEqB;AACrB,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,WAAW,GAAG,IAAI,CAEhE;AAED;;iBAEiB;AACjB,wBAAgB,yBAAyB,IAAI,IAAI,CAEhD;AAED,wBAAgB,WAAW,IAAI,WAAW,CASzC;AAcD,MAAM,WAAW,WAAW;IAC1B;;;;iEAI6D;IAC7D,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAUD;;;YAGY;AACZ,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAE3D;AAED,mBAAmB;AACnB,wBAAgB,yBAAyB,IAAI,IAAI,CAEhD;AAED;;;;;gBAKgB;AAYhB,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAE/B,MAAM,WAAW,qBAAqB;IACpC;;4DAEwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAUD,wBAAgB,yBAAyB,CACvC,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,qBAAqB,CAAC,GAC5C,IAAI,CAEN;AAED,wBAAgB,8BAA8B,IAAI,IAAI,CAErD;AAED;;iEAEiE;AACjE,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,aAAa,CAAC,qBAAqB,CAKrE,CAAC;AAEJ,wBAAgB,WAAW,IAAI,WAAW,CAAC,MAAM,CAAC,CAejD"}

package/node_modules/@tianshu-ai/plugin-sdk/dist/client.js

@@ -0,0 +1,96 @@
+// Client-side plugin authoring types. Imported as
+// `@tianshu-ai/plugin-sdk/client`.
+//
+// The chat shell's PluginRegistry expects a plugin's client module to
+// export a `components` map keyed by the strings used in the manifest's
+// `contributes.{rightPanels|sidebarSections|composerActions}.component`.
+function globalSlot() {
+    // `globalThis` is the same in node, browser, and worker runtimes.
+    return globalThis;
+}
+/** Host-only: install the live `useComposer` accessor. The web bundle
+ *  calls this once on bootstrap with a function that reads from its
+ *  React context. */
+export function __installUseComposer(fn) {
+    globalSlot().__tianshuPluginSdkComposer__ = fn;
+}
+/** Host-only: clear the installed accessor. Used by tests so each
+ *  test starts with a clean slate; production code should never
+ *  call this. */
+export function __resetUseComposerForTest() {
+    delete globalSlot().__tianshuPluginSdkComposer__;
+}
+export function useComposer() {
+    const fn = globalSlot().__tianshuPluginSdkComposer__;
+    if (!fn) {
+        throw new Error("useComposer() called without a host: plugin SDK has no live ComposerApi. " +
+            "If you are seeing this in a test, install one with __installUseComposer().");
+    }
+    return fn();
+}
+function openFileSlot() {
+    return globalThis;
+}
+/** Host or files-plugin only: register an OpenFileApi. The host
+ *  installs a fallback at bootstrap; the Files plugin overrides
+ *  it on mount with its dialog-based implementation. Last writer
+ *  wins. */
+export function __installOpenFileApi(api) {
+    openFileSlot().__tianshuPluginSdkOpenFile__ = api;
+}
+/** Test helper. */
+export function __resetOpenFileApiForTest() {
+    delete openFileSlot().__tianshuPluginSdkOpenFile__;
+}
+/** Hook returning the live `open(path)` callable. Stable across
+ *  re-renders — always reads from the slot, so a late
+ *  __installOpenFileApi() takes effect on the next call without
+ *  forcing a re-mount. Throws only if absolutely no implementation
+ *  has ever been installed (which means the host bootstrap was
+ *  skipped). */
+// ─── PluginConfigForm — re-export of the host's auto-generated
+// config form, exposed so a plugin's own admin page can fold it
+// in alongside its richer UI (Sandbox status / build history /
+// etc.) instead of getting a duplicated "Settings" sidebar entry.
+//
+// Same install-once + globalSlot trick. Host installs the
+// component on bootstrap; plugin imports `PluginConfigForm` and
+// renders <PluginConfigForm pluginId="microsandbox" /> wherever
+// makes sense. The form looks up its own data from the live
+// plugin store, so the plugin only needs to pass the id.
+import * as React from "react";
+function pluginConfigFormSlot() {
+    return globalThis;
+}
+export function __installPluginConfigForm(C) {
+    pluginConfigFormSlot().__tianshuPluginSdkPluginConfigForm__ = C;
+}
+export function __resetPluginConfigFormForTest() {
+    delete pluginConfigFormSlot().__tianshuPluginSdkPluginConfigForm__;
+}
+/** Renders the auto-generated config form for `pluginId`. If the
+ *  plugin has no `configSchema` or no fields, renders nothing
+ *  (so the calling component can drop it in unconditionally). */
+export const PluginConfigForm = (props) => {
+    const C = pluginConfigFormSlot().__tianshuPluginSdkPluginConfigForm__;
+    if (!C)
+        return null;
+    return React.createElement(C, props);
+};
+export function useOpenFile() {
+    return (path) => {
+        const api = openFileSlot().__tianshuPluginSdkOpenFile__;
+        if (!api) {
+            // Last-resort UX so the click does *something* useful even
+            // before any registrar has installed: stick the path in the
+            // URL bar of a new tab. Never reachable in production where
+            // the host installs a fallback at bootstrap.
+            const cleaned = path.replace(/^workspace:\/\/+/, "/");
+            const url = `/api/p/files/raw?path=${encodeURIComponent(cleaned)}`;
+            window.open(url, "_blank", "noopener");
+            return;
+        }
+        api.open(path);
+    };
+}
+//# sourceMappingURL=client.js.map