@usenaive-sdk/runtime 0.1.0

package/dist/index.cjs

@@ -0,0 +1,52 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  agentProfile: () => agentProfile
+});
+module.exports = __toCommonJS(index_exports);
+var import_server = require("@usenaive-sdk/server");
+function env(name) {
+  return typeof process !== "undefined" ? process.env?.[name] : void 0;
+}
+function client() {
+  const apiKey = env("NAIVE_AGENT_PROFILE_TOKEN") ?? env("NAIVE_SECRET_KEY") ?? env("NAIVE_API_KEY");
+  if (!apiKey) {
+    throw new Error(
+      "@usenaive-sdk/runtime: no agent profile credential found. Expected NAIVE_AGENT_PROFILE_TOKEN (injected by the Na\xEFve runtime) or NAIVE_SECRET_KEY in the environment."
+    );
+  }
+  return new import_server.Naive({ apiKey, baseUrl: env("NAIVE_API_URL") });
+}
+var agentProfile = {
+  get id() {
+    return env("NAIVE_AGENT_PROFILE_ID");
+  },
+  tools() {
+    const userScope = env("NAIVE_AGENT_PROFILE_USER") ?? "default";
+    return client().forUser(userScope).tools();
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  agentProfile
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * @usenaive-sdk/runtime — for code running *inside* a Naïve-hosted agent (microVM).\n *\n * The agent boots with its agent profile credentials injected as environment\n * variables (never baked into the image, never on the agent's filesystem). This\n * module reads them and hands back the current agent profile's governed toolset, so\n * the agent loop can call tools without ever holding a raw card/identity secret\n * — every call still routes through the governance gateway.\n *\n *   import { agent profile } from \"@usenaive-sdk/runtime\";\n *   const tools = agentProfile.tools();\n *   await runAgentLoop({ tools, goal: \"Resolve tickets.\" });\n *\n * For BYO runtimes (Eve / AgentCore / LangGraph / your own harness), use\n * `@usenaive-sdk/server` and pull `op.tools()` there instead.\n */\nimport { Naive, type NaiveAgentToolset } from \"@usenaive-sdk/server\";\n\nexport interface AgentProfileRuntimeContext {\n  /** The agent profile id this agent is running as (from NAIVE_AGENT_PROFILE_ID). */\n  readonly id: string | undefined;\n  /** The governed toolset scoped to the current agentProfile. */\n  tools(): NaiveAgentToolset;\n}\n\nfunction env(name: string): string | undefined {\n  return typeof process !== \"undefined\" ? process.env?.[name] : undefined;\n}\n\nfunction client(): Naive {\n  const apiKey = env(\"NAIVE_AGENT_PROFILE_TOKEN\") ?? env(\"NAIVE_SECRET_KEY\") ?? env(\"NAIVE_API_KEY\");\n  if (!apiKey) {\n    throw new Error(\n      \"@usenaive-sdk/runtime: no agent profile credential found. Expected NAIVE_AGENT_PROFILE_TOKEN \" +\n        \"(injected by the Naïve runtime) or NAIVE_SECRET_KEY in the environment.\",\n    );\n  }\n  return new Naive({ apiKey, baseUrl: env(\"NAIVE_API_URL\") });\n}\n\n/** The current agent profile context, resolved from the injected runtime environment. */\nexport const agentProfile: AgentProfileRuntimeContext = {\n  get id() {\n    return env(\"NAIVE_AGENT_PROFILE_ID\");\n  },\n  tools(): NaiveAgentToolset {\n    const userScope = env(\"NAIVE_AGENT_PROFILE_USER\") ?? \"default\";\n    return client().forUser(userScope).tools();\n  },\n};\n\nexport type { NaiveAgentToolset } from \"@usenaive-sdk/server\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAgBA,oBAA8C;AAS9C,SAAS,IAAI,MAAkC;AAC7C,SAAO,OAAO,YAAY,cAAc,QAAQ,MAAM,IAAI,IAAI;AAChE;AAEA,SAAS,SAAgB;AACvB,QAAM,SAAS,IAAI,2BAA2B,KAAK,IAAI,kBAAkB,KAAK,IAAI,eAAe;AACjG,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AACA,SAAO,IAAI,oBAAM,EAAE,QAAQ,SAAS,IAAI,eAAe,EAAE,CAAC;AAC5D;AAGO,IAAM,eAA2C;AAAA,EACtD,IAAI,KAAK;AACP,WAAO,IAAI,wBAAwB;AAAA,EACrC;AAAA,EACA,QAA2B;AACzB,UAAM,YAAY,IAAI,0BAA0B,KAAK;AACrD,WAAO,OAAO,EAAE,QAAQ,SAAS,EAAE,MAAM;AAAA,EAC3C;AACF;","names":[]}

package/dist/index.d.cts

@@ -0,0 +1,30 @@
+import { NaiveAgentToolset } from '@usenaive-sdk/server';
+export { NaiveAgentToolset } from '@usenaive-sdk/server';
+
+/**
+ * @usenaive-sdk/runtime — for code running *inside* a Naïve-hosted agent (microVM).
+ *
+ * The agent boots with its agent profile credentials injected as environment
+ * variables (never baked into the image, never on the agent's filesystem). This
+ * module reads them and hands back the current agent profile's governed toolset, so
+ * the agent loop can call tools without ever holding a raw card/identity secret
+ * — every call still routes through the governance gateway.
+ *
+ *   import { agent profile } from "@usenaive-sdk/runtime";
+ *   const tools = agentProfile.tools();
+ *   await runAgentLoop({ tools, goal: "Resolve tickets." });
+ *
+ * For BYO runtimes (Eve / AgentCore / LangGraph / your own harness), use
+ * `@usenaive-sdk/server` and pull `op.tools()` there instead.
+ */
+
+interface AgentProfileRuntimeContext {
+    /** The agent profile id this agent is running as (from NAIVE_AGENT_PROFILE_ID). */
+    readonly id: string | undefined;
+    /** The governed toolset scoped to the current agentProfile. */
+    tools(): NaiveAgentToolset;
+}
+/** The current agent profile context, resolved from the injected runtime environment. */
+declare const agentProfile: AgentProfileRuntimeContext;
+
+export { type AgentProfileRuntimeContext, agentProfile };

package/dist/index.d.ts

@@ -0,0 +1,30 @@
+import { NaiveAgentToolset } from '@usenaive-sdk/server';
+export { NaiveAgentToolset } from '@usenaive-sdk/server';
+
+/**
+ * @usenaive-sdk/runtime — for code running *inside* a Naïve-hosted agent (microVM).
+ *
+ * The agent boots with its agent profile credentials injected as environment
+ * variables (never baked into the image, never on the agent's filesystem). This
+ * module reads them and hands back the current agent profile's governed toolset, so
+ * the agent loop can call tools without ever holding a raw card/identity secret
+ * — every call still routes through the governance gateway.
+ *
+ *   import { agent profile } from "@usenaive-sdk/runtime";
+ *   const tools = agentProfile.tools();
+ *   await runAgentLoop({ tools, goal: "Resolve tickets." });
+ *
+ * For BYO runtimes (Eve / AgentCore / LangGraph / your own harness), use
+ * `@usenaive-sdk/server` and pull `op.tools()` there instead.
+ */
+
+interface AgentProfileRuntimeContext {
+    /** The agent profile id this agent is running as (from NAIVE_AGENT_PROFILE_ID). */
+    readonly id: string | undefined;
+    /** The governed toolset scoped to the current agentProfile. */
+    tools(): NaiveAgentToolset;
+}
+/** The current agent profile context, resolved from the injected runtime environment. */
+declare const agentProfile: AgentProfileRuntimeContext;
+
+export { type AgentProfileRuntimeContext, agentProfile };

package/dist/index.js

@@ -0,0 +1,27 @@
+// src/index.ts
+import { Naive } from "@usenaive-sdk/server";
+function env(name) {
+  return typeof process !== "undefined" ? process.env?.[name] : void 0;
+}
+function client() {
+  const apiKey = env("NAIVE_AGENT_PROFILE_TOKEN") ?? env("NAIVE_SECRET_KEY") ?? env("NAIVE_API_KEY");
+  if (!apiKey) {
+    throw new Error(
+      "@usenaive-sdk/runtime: no agent profile credential found. Expected NAIVE_AGENT_PROFILE_TOKEN (injected by the Na\xEFve runtime) or NAIVE_SECRET_KEY in the environment."
+    );
+  }
+  return new Naive({ apiKey, baseUrl: env("NAIVE_API_URL") });
+}
+var agentProfile = {
+  get id() {
+    return env("NAIVE_AGENT_PROFILE_ID");
+  },
+  tools() {
+    const userScope = env("NAIVE_AGENT_PROFILE_USER") ?? "default";
+    return client().forUser(userScope).tools();
+  }
+};
+export {
+  agentProfile
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * @usenaive-sdk/runtime — for code running *inside* a Naïve-hosted agent (microVM).\n *\n * The agent boots with its agent profile credentials injected as environment\n * variables (never baked into the image, never on the agent's filesystem). This\n * module reads them and hands back the current agent profile's governed toolset, so\n * the agent loop can call tools without ever holding a raw card/identity secret\n * — every call still routes through the governance gateway.\n *\n *   import { agent profile } from \"@usenaive-sdk/runtime\";\n *   const tools = agentProfile.tools();\n *   await runAgentLoop({ tools, goal: \"Resolve tickets.\" });\n *\n * For BYO runtimes (Eve / AgentCore / LangGraph / your own harness), use\n * `@usenaive-sdk/server` and pull `op.tools()` there instead.\n */\nimport { Naive, type NaiveAgentToolset } from \"@usenaive-sdk/server\";\n\nexport interface AgentProfileRuntimeContext {\n  /** The agent profile id this agent is running as (from NAIVE_AGENT_PROFILE_ID). */\n  readonly id: string | undefined;\n  /** The governed toolset scoped to the current agentProfile. */\n  tools(): NaiveAgentToolset;\n}\n\nfunction env(name: string): string | undefined {\n  return typeof process !== \"undefined\" ? process.env?.[name] : undefined;\n}\n\nfunction client(): Naive {\n  const apiKey = env(\"NAIVE_AGENT_PROFILE_TOKEN\") ?? env(\"NAIVE_SECRET_KEY\") ?? env(\"NAIVE_API_KEY\");\n  if (!apiKey) {\n    throw new Error(\n      \"@usenaive-sdk/runtime: no agent profile credential found. Expected NAIVE_AGENT_PROFILE_TOKEN \" +\n        \"(injected by the Naïve runtime) or NAIVE_SECRET_KEY in the environment.\",\n    );\n  }\n  return new Naive({ apiKey, baseUrl: env(\"NAIVE_API_URL\") });\n}\n\n/** The current agent profile context, resolved from the injected runtime environment. */\nexport const agentProfile: AgentProfileRuntimeContext = {\n  get id() {\n    return env(\"NAIVE_AGENT_PROFILE_ID\");\n  },\n  tools(): NaiveAgentToolset {\n    const userScope = env(\"NAIVE_AGENT_PROFILE_USER\") ?? \"default\";\n    return client().forUser(userScope).tools();\n  },\n};\n\nexport type { NaiveAgentToolset } from \"@usenaive-sdk/server\";\n"],"mappings":";AAgBA,SAAS,aAAqC;AAS9C,SAAS,IAAI,MAAkC;AAC7C,SAAO,OAAO,YAAY,cAAc,QAAQ,MAAM,IAAI,IAAI;AAChE;AAEA,SAAS,SAAgB;AACvB,QAAM,SAAS,IAAI,2BAA2B,KAAK,IAAI,kBAAkB,KAAK,IAAI,eAAe;AACjG,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AACA,SAAO,IAAI,MAAM,EAAE,QAAQ,SAAS,IAAI,eAAe,EAAE,CAAC;AAC5D;AAGO,IAAM,eAA2C;AAAA,EACtD,IAAI,KAAK;AACP,WAAO,IAAI,wBAAwB;AAAA,EACrC;AAAA,EACA,QAA2B;AACzB,UAAM,YAAY,IAAI,0BAA0B,KAAK;AACrD,WAAO,OAAO,EAAE,QAAQ,SAAS,EAAE,MAAM;AAAA,EAC3C;AACF;","names":[]}

package/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "@usenaive-sdk/runtime",
+  "version": "0.1.0",
+  "description": "Naïve runtime SDK — used inside a hosted agent to access the current agent profile's governed toolset.",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@usenaive-sdk/server": "0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.15.3",
+    "tsup": "^8.0.0",
+    "typescript": "^5.7.3"
+  },
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit"
+  }
+}