@ultrst-armada/kloks 1.6.0 → 1.7.0

package/packages/backend/dist/index.js

@@ -19,12 +19,17 @@ import {
   SrklVaultAccessClient,
   createSrklClient,
   decryptVaultBufferInBrowser,
+  getPrimarySrklDeploymentUrl as getPrimarySrklDeploymentUrl2,
+  getSrklAccounts as getSrklAccounts2,
+  getSrklStatus,
   globalCredentialRegistry,
   hexToBytes,
+  listBackblazeBuckets,
+  srklListBackblazeBuckets as srklListBackblazeBuckets2,
   srklService,
   syncSrklAccounts,
   useSrklServices
-} from "./chunk-OZDYAEH4.js";
+} from "./chunk-BI5RDDB4.js";
 import "./chunk-LS3HWJBX.js";
 import {
   RemoteWorkspaceService,
@@ -41,7 +46,7 @@ import {
   setWorkingWorkspaceConfig,
   syncWorkspace,
   workingWorkspaceService
-} from "./chunk-GPXV4GBD.js";
+} from "./chunk-6QTNNZSE.js";
 import {
   AuthServiceDefinition,
   AuthServiceFacade,
@@ -75,15 +80,15 @@ import {
   krnlWorkspaceGraphServiceFacade,
   krnlWorkspaceServiceDefinition,
   krnlWorkspaceServiceFacade
-} from "./chunk-GQUNN7SA.js";
+} from "./chunk-Y3X3H2XX.js";
 import {
   workspaceGraphService
-} from "./chunk-DBZVGMJ7.js";
+} from "./chunk-KSZ67VZJ.js";
 import {
   getPrimarySrklDeploymentUrl,
   getSrklAccounts,
   srklListBackblazeBuckets
-} from "./chunk-VDROUXFT.js";
+} from "./chunk-N4Z57FVR.js";
 import {
   BackblazeB2Adapter,
   BaseStorageAdapter,
@@ -111,24 +116,17 @@ import {
   sanitizeWorkspaceName
 } from "./chunk-FZKBTF34.js";
 import {
-  b2DeleteFileVersion,
-  b2DeleteFolder,
-  b2ListBuckets as b2ListBuckets2,
-  cleanDbUrl,
   createWorkspace,
   deleteWorkspace,
   deleteWorkspaceFile,
   deleteWorkspaceFolder,
   findUserWorkspace,
-  getB2BucketId,
-  getUnifiedDbUrl,
   getWorkspaceFolderPrefix,
   getWorkspaceStorageDetails,
   getWorkspaces,
   isB2Workspace,
   listWorkspaceFiles,
   loadWorkspaceData,
-  queryUnifiedDb,
   readWorkspaceFile,
   renameAppInWorkspaceData,
   resolveWorkspaceConnection,
@@ -138,13 +136,26 @@ import {
   syncWorkspaceDeleteToBucket,
   updateWorkspace,
   writeWorkspaceFile
-} from "./chunk-E72GXBXF.js";
+} from "./chunk-6K75XXFD.js";
+import {
+  b2DeleteFileVersion,
+  b2DeleteFolder,
+  cleanDbUrl,
+  getB2BucketId,
+  getUnifiedDbUrl,
+  queryUnifiedDb
+} from "./chunk-VAFCR2MS.js";
 import {
   BaseApiRoute,
   createSSEResponse,
   withAuth,
   withCors
 } from "./chunk-TWCEVES2.js";
+import {
+  BackendProvider,
+  useBackend,
+  useBackendClient
+} from "./chunk-G3ZOSXUR.js";
 import {
   AdminGuard,
   BaseAccountProvider,
@@ -157,11 +168,6 @@ import {
   loginSystemUser,
   resolveUserFromToken
 } from "./chunk-ZDH4XI7W.js";
-import {
-  BackendProvider,
-  useBackend,
-  useBackendClient
-} from "./chunk-G3ZOSXUR.js";
 import {
   BackendRegistry,
   ConcurrencyConflictError,
@@ -195,6 +201,9 @@ import {
   resolveSystemDatabaseClusterNodes
 } from "./chunk-RCCQ7IRM.js";
 import {
+  AgentHarnessRuntime,
+  AgentHarnessServiceDefinition,
+  AgentHarnessServiceFacade,
   CodeDiagnosticsService,
   CodeValidationRuntime,
   CodeValidationServiceDefinition,
@@ -214,7 +223,7 @@ import {
   WebContainerServiceFacade,
   codeDiagnosticsService,
   resolveDevelopmentCommand
-} from "./chunk-3HZYAZF4.js";
+} from "./chunk-SQGBAWZN.js";
 import "./chunk-TY32TUNI.js";
 
 // src/data/BaseDataProvider.ts
@@ -564,200 +573,6 @@ var SrklStorageService = class {
   }
 };
 
-// src/core/srklCore.ts
-var cachedSrklUrl = null;
-async function getPrimarySrklDeploymentUrl2(env) {
-  if (cachedSrklUrl && Date.now() < cachedSrklUrl.expiresAt) return cachedSrklUrl.url;
-  try {
-    const res = await queryUnifiedDb(
-      `SELECT url FROM "ultrst-srkl-deployments" WHERE is_active = true ORDER BY is_primary DESC, priority DESC, created_at ASC LIMIT 1`,
-      [],
-      env
-    );
-    if (res.rows.length > 0 && res.rows[0].url) {
-      const url = res.rows[0].url.trim().replace(/\/+$/, "");
-      cachedSrklUrl = { url, expiresAt: Date.now() + 10 * 60 * 1e3 };
-      return url;
-    }
-  } catch (err) {
-    console.warn("[SrklCore] Deployment DB lookup fallback:", err.message);
-  }
-  const fallback = "https://srkl-engine.vercel.app";
-  cachedSrklUrl = { url: fallback, expiresAt: Date.now() + 10 * 60 * 1e3 };
-  return fallback;
-}
-function deduplicateAccounts(items) {
-  const seen = /* @__PURE__ */ new Set();
-  const out = [];
-  for (const a of items) {
-    if (!a) continue;
-    const creds = a.credentials || a.metadata?.credentials || a;
-    const keyId = (creds.keyId || creds.b2KeyId || creds.accessKeyId || "").trim();
-    const token = (creds.token || creds.apiToken || creds.applicationKey || creds.b2ApplicationKey || "").trim();
-    const sId = (a.serviceId || a.provider || "").toLowerCase().trim();
-    const sig = keyId ? `key:${keyId}` : token ? `tok:${sId}:${token.slice(-12)}` : a.id ? `id:${a.id}` : `nam:${sId}:${a.name || a.label}`;
-    if (!seen.has(sig)) {
-      seen.add(sig);
-      if (a.id) seen.add(`id:${a.id}`);
-      out.push(a);
-    }
-  }
-  return out;
-}
-async function getSrklAccounts2(userId, service, env) {
-  const rawAccounts = [];
-  const srklUrl = await getPrimarySrklDeploymentUrl2(env);
-  if (userId) {
-    try {
-      const uRes = await queryUnifiedDb(
-        `SELECT app_profiles FROM "ultrst-users" WHERE id = $1 OR email = $1 LIMIT 1`,
-        [userId],
-        env
-      );
-      if (uRes.rows.length > 0) {
-        const p = typeof uRes.rows[0].app_profiles === "string" ? JSON.parse(uRes.rows[0].app_profiles) : uRes.rows[0].app_profiles || {};
-        const conns = [
-          ...p.srkl?.storage_connections || [],
-          ...p.depm?.storage_connections || [],
-          ...p.qwnsr?.storage_connections || [],
-          ...p.loky?.storage_connections || []
-        ];
-        for (const c of conns) {
-          if (!service || (c.provider || "").toLowerCase().includes(service.toLowerCase())) {
-            rawAccounts.push({
-              id: c.id,
-              name: c.label || c.name || "Backblaze B2 Account",
-              provider: c.provider === "backblaze_b2" ? "backblaze" : c.provider,
-              serviceId: "backblaze",
-              category: "storage",
-              groupIds: c.groupIds || (c.groupId ? [c.groupId] : []),
-              credentials: {
-                keyId: c.b2KeyId || c.keyId || c.accessKeyId || "",
-                applicationKey: c.b2ApplicationKey || c.applicationKey || c.secretAccessKey || "",
-                bucketName: c.b2BucketName || c.bucketName || "",
-                bucketId: c.b2BucketId || c.bucketId || "",
-                endpoint: c.b2Endpoint || c.endpoint || "s3.eu-central-003.backblazeb2.com",
-                region: c.b2Region || c.region || "eu-central-003"
-              }
-            });
-          }
-        }
-      }
-    } catch (err) {
-      console.warn("[SrklCore] Storage connection DB lookup fallback:", err.message);
-    }
-  }
-  try {
-    const fs9 = await import("fs/promises");
-    const path9 = await import("path");
-    const accPath = path9.resolve(".skipo/accounts.json");
-    const raw = await fs9.readFile(accPath, "utf-8");
-    const localUsers = JSON.parse(raw);
-    for (const u of Object.values(localUsers)) {
-      const conns = Array.isArray(u.storage_connections) ? u.storage_connections : [];
-      for (const c of conns) {
-        if (!service || (c.provider || "").toLowerCase().includes(service.toLowerCase())) {
-          rawAccounts.push({
-            id: c.id,
-            name: c.label || c.name || "Local B2 Account",
-            provider: "backblaze",
-            serviceId: "backblaze",
-            credentials: {
-              keyId: c.b2KeyId || c.keyId || "",
-              applicationKey: c.b2ApplicationKey || c.applicationKey || "",
-              bucketName: c.b2BucketName || c.bucketName || "",
-              bucketId: c.b2BucketId || "",
-              endpoint: c.b2Endpoint || "s3.eu-central-003.backblazeb2.com",
-              region: c.b2Region || "eu-central-003"
-            }
-          });
-        }
-      }
-    }
-  } catch {
-  }
-  let fetchError;
-  try {
-    const srklRes = await fetch(`${srklUrl}/api/srkl/accounts?service=${service || "backblaze"}`, {
-      signal: AbortSignal.timeout(5e3)
-    });
-    if (srklRes.ok) {
-      const sData = await srklRes.json();
-      if (Array.isArray(sData.accounts)) {
-        for (const sa of sData.accounts) {
-          rawAccounts.push(sa);
-        }
-      }
-    }
-  } catch (err) {
-    fetchError = err.message;
-  }
-  const accounts = deduplicateAccounts(rawAccounts);
-  return {
-    success: true,
-    deploymentUrl: srklUrl,
-    userId,
-    count: accounts.length,
-    accounts,
-    error: accounts.length > 0 ? void 0 : fetchError
-  };
-}
-async function listBackblazeBuckets(payload, rawUserId, env) {
-  try {
-    const userId = rawUserId || payload?.userId || payload?.credentials?.userId || "";
-    const creds = payload?.credentials || {};
-    let keyId = (payload?.keyId || payload?.b2KeyId || payload?.accessKeyId || creds.keyId || creds.b2KeyId || creds.accessKeyId || "").trim();
-    let appKey = (payload?.applicationKey || payload?.b2ApplicationKey || payload?.appKey || payload?.secretAccessKey || creds.applicationKey || creds.b2ApplicationKey || creds.appKey || creds.secretAccessKey || "").trim();
-    const bucketId = (payload?.bucketId || creds.bucketId || "").trim();
-    const bucketName = (payload?.bucketName || payload?.b2BucketName || creds.bucketName || creds.b2BucketName || "").trim();
-    if ((!keyId || !appKey) && (payload?.accountId || payload?.id)) {
-      const srkl = await getSrklAccounts2(userId, "backblaze", env);
-      const matched = srkl.accounts?.find((a) => a.id === (payload.accountId || payload.id));
-      if (matched?.credentials) {
-        keyId = (matched.credentials.keyId || matched.credentials.b2KeyId || matched.credentials.accessKeyId || keyId).trim();
-        appKey = (matched.credentials.applicationKey || matched.credentials.b2ApplicationKey || matched.credentials.appKey || matched.credentials.secretAccessKey || appKey).trim();
-      }
-    }
-    if (!keyId || !appKey) return { success: false, error: "Backblaze credentials (Key ID and Application Key) required." };
-    try {
-      const buckets = await b2ListBuckets2(keyId, appKey, bucketId || void 0, bucketName || void 0);
-      if (Array.isArray(buckets) && buckets.length > 0) return { success: true, buckets };
-    } catch (err) {
-      console.warn("[SrklCore] Direct B2 bucket query failed, trying SRKL fallback:", err.message);
-    }
-    const srklUrl = await getPrimarySrklDeploymentUrl2(env);
-    const srklRes = await fetch(`${srklUrl}/api/backblaze/buckets`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json", "x-user-id": userId || "" },
-      body: JSON.stringify({ keyId, applicationKey: appKey, bucketId: bucketId || void 0 }),
-      signal: AbortSignal.timeout(6e3)
-    });
-    if (srklRes.ok) {
-      const data = await srklRes.json();
-      if (data.success && Array.isArray(data.buckets)) return { success: true, buckets: data.buckets };
-    }
-    return { success: true, buckets: [] };
-  } catch (err) {
-    return { success: false, error: err.message || "Failed to list Backblaze buckets" };
-  }
-}
-var srklListBackblazeBuckets2 = (keyId, applicationKey, bucketId, bucketName, userId) => listBackblazeBuckets({ keyId, applicationKey, bucketId, bucketName }, userId);
-async function getSrklStatus(env) {
-  const srklUrl = await getPrimarySrklDeploymentUrl2(env);
-  const start = Date.now();
-  try {
-    const resp = await fetch(`${srklUrl}/api/ecosystem/health`, { signal: AbortSignal.timeout(5e3) });
-    const latencyMs = Date.now() - start;
-    if (resp.ok) {
-      const data = await resp.json().catch(() => ({}));
-      return { success: true, deploymentUrl: srklUrl, online: true, latencyMs, details: data };
-    }
-    return { success: false, deploymentUrl: srklUrl, online: false, status: resp.status, latencyMs };
-  } catch (err) {
-    return { success: false, deploymentUrl: srklUrl, online: false, error: err.message, latencyMs: Date.now() - start };
-  }
-}
-
 // src/core/credentialVaultCore.ts
 var MANIFEST_PATH = "credentials/manifest.json";
 var SECRET_PREFIX = "credentials/secrets";
@@ -4372,6 +4187,9 @@ function tryResolveSystemDatabaseUrl(env = typeof process !== "undefined" ? proc
 }
 export {
   AdminGuard,
+  AgentHarnessRuntime,
+  AgentHarnessServiceDefinition,
+  AgentHarnessServiceFacade,
   AuditLogger,
   AuthServiceDefinition,
   AuthServiceFacade,

package/packages/backend/dist/krnl-services.js

@@ -31,13 +31,14 @@ import {
   krnlWorkspaceGraphServiceFacade,
   krnlWorkspaceServiceDefinition,
   krnlWorkspaceServiceFacade
-} from "./chunk-GQUNN7SA.js";
-import "./chunk-DBZVGMJ7.js";
-import "./chunk-VDROUXFT.js";
+} from "./chunk-Y3X3H2XX.js";
+import "./chunk-KSZ67VZJ.js";
+import "./chunk-N4Z57FVR.js";
 import "./chunk-J2J24JVC.js";
 import "./chunk-4QEMALXF.js";
 import "./chunk-FZKBTF34.js";
-import "./chunk-E72GXBXF.js";
+import "./chunk-6K75XXFD.js";
+import "./chunk-VAFCR2MS.js";
 import "./chunk-ZDH4XI7W.js";
 import "./chunk-TY32TUNI.js";
 export {

package/packages/backend/dist/services/index.js

@@ -14,9 +14,10 @@ import {
 } from "../chunk-RBF2OGMC.js";
 import {
   workspaceGraphService
-} from "../chunk-DBZVGMJ7.js";
+} from "../chunk-KSZ67VZJ.js";
 import "../chunk-J2J24JVC.js";
-import "../chunk-E72GXBXF.js";
+import "../chunk-6K75XXFD.js";
+import "../chunk-VAFCR2MS.js";
 import "../chunk-TY32TUNI.js";
 export {
   CompositeBackend,

package/packages/backend/dist/srkl/index.d.ts

@@ -187,7 +187,7 @@ declare function getSrklAccounts(userId: string, service?: string, queryDb?: (sq
 }>;
 declare function srklListBackblazeBuckets(keyId?: string, applicationKey?: string, _bucketId?: string, _bucketName?: string, userId?: string, queryDb?: (sql: string, params?: unknown[]) => Promise<{
     rows: any[];
-}>): Promise<{
+}>, accountId?: string): Promise<{
     success: boolean;
     buckets: any[];
     error?: string;
@@ -293,6 +293,53 @@ declare const srklService: {
         supportedEngines: string[];
         version: string;
     };
+    getSrklAccounts: (userId?: string, serviceName?: string, env?: any) => Promise<{
+        success: boolean;
+        deploymentUrl: string;
+        userId?: string;
+        count: number;
+        accounts: any[];
+        error?: string;
+    }>;
+    getAccounts: (userId?: string, serviceName?: string, env?: any) => Promise<{
+        success: boolean;
+        deploymentUrl: string;
+        userId?: string;
+        count: number;
+        accounts: any[];
+        error?: string;
+    }>;
+    listBackblazeBuckets: (payload: any, userId?: string, env?: any) => Promise<{
+        success: boolean;
+        buckets?: any[];
+        error?: string;
+    }>;
+    getSrklStatus: (env?: any) => Promise<{
+        success: boolean;
+        deploymentUrl: string;
+        online: boolean;
+        latencyMs: number;
+        details: any;
+        status?: undefined;
+        error?: undefined;
+    } | {
+        success: boolean;
+        deploymentUrl: string;
+        online: boolean;
+        status: number;
+        latencyMs: number;
+        details?: undefined;
+        error?: undefined;
+    } | {
+        success: boolean;
+        deploymentUrl: string;
+        online: boolean;
+        error: any;
+        latencyMs: number;
+        details?: undefined;
+        status?: undefined;
+    }>;
+    getDeploymentUrl: (env?: any) => Promise<string>;
 };
 
 export { type AdaptedStorageConnection, type AppAccountManifest, type AppServiceDeclaration, CANONICAL_SRKL_URL, type CredentialRegistryMap, type EcosystemAccount, type EcosystemAccountsRequest, type EcosystemAccountsResponse, type EcosystemServiceCategory, type KeyMaterial, type ServiceAccountEntry, SrklClient, type SrklClientOptions, SrklCredentialRegistry, type SrklEcosystemQueryOptions, type SrklEcosystemResponse, type SrklServiceAccount, SrklVaultAccessClient, type SrklVaultAccessResponse, type UseSrklServicesOptions, type UseSrklServicesResult, type VaultAccessClientOptions, createSrklClient, decryptVaultBufferInBrowser, getPrimarySrklDeploymentUrl, getSrklAccounts, globalCredentialRegistry, hexToBytes, srklListBackblazeBuckets, srklService, syncSrklAccounts, useSrklServices };

package/packages/backend/dist/srkl/index.js

@@ -10,13 +10,14 @@ import {
   srklService,
   syncSrklAccounts,
   useSrklServices
-} from "../chunk-OZDYAEH4.js";
+} from "../chunk-BI5RDDB4.js";
 import {
   getPrimarySrklDeploymentUrl,
   getSrklAccounts,
   srklListBackblazeBuckets
-} from "../chunk-VDROUXFT.js";
+} from "../chunk-N4Z57FVR.js";
 import "../chunk-4QEMALXF.js";
+import "../chunk-VAFCR2MS.js";
 export {
   CANONICAL_SRKL_URL,
   SrklClient,

package/packages/backend/dist/workspace/index.js

@@ -6,12 +6,13 @@ import {
   WorkspaceFS,
   remoteWorkspaceService,
   workingWorkspaceService
-} from "../chunk-GPXV4GBD.js";
+} from "../chunk-6QTNNZSE.js";
 import {
   formatCanonicalWorkspaceFolderName,
   sanitizeWorkspaceName
 } from "../chunk-FZKBTF34.js";
-import "../chunk-E72GXBXF.js";
+import "../chunk-6K75XXFD.js";
+import "../chunk-VAFCR2MS.js";
 export {
   RemoteWorkspaceService,
   SyncEngine,

package/packages/backend/kloks.manifest.json

@@ -339,6 +339,31 @@
       "dependencies": [
         "web-container"
       ]
+    },
+    {
+      "id": "agent-harness",
+      "name": "Agent Harness",
+      "version": "1.0.0",
+      "description": "Provider-neutral agent harness service with DeepSeek Harness execution and pluggable OpenAI Agents SDK and Google ADK providers.",
+      "backend": {
+        "package": "@ultrst-armada/kloks",
+        "subpath": "development",
+        "export": "AgentHarnessServiceFacade",
+        "facade": "AgentHarnessServiceFacade"
+      },
+      "modes": [
+        "backend",
+        "fullstack"
+      ],
+      "targets": {
+        "backend": [
+          "BackendFacade.services"
+        ],
+        "frontend": [
+          "App.main-content"
+        ]
+      },
+      "dependencies": []
     }
   ]
 }