@valon-technologies/gestalt 0.0.1-alpha.12 → 0.0.1-alpha.14

package/src/authorization.ts

@@ -1,7 +1,11 @@
 import { connect } from "node:net";
 
 import type { MessageInitShape } from "@bufbuild/protobuf";
-import { createClient, type Client } from "@connectrpc/connect";
+import {
+  createClient,
+  type Client,
+  type Interceptor,
+} from "@connectrpc/connect";
 import { createGrpcTransport } from "@connectrpc/connect-node";
 
 import {
@@ -20,10 +24,14 @@ import {
 } from "../gen/v1/authorization_pb.ts";
 
 /**
- * Environment variable containing the Unix socket path for the read-only host
- * authorization client exposed to plugins.
+ * Environment variable containing the Unix socket path or relay target for the
+ * read-only host authorization client exposed to plugins.
  */
 export const ENV_AUTHORIZATION_SOCKET = "GESTALT_AUTHORIZATION_SOCKET";
+export const ENV_AUTHORIZATION_SOCKET_TOKEN =
+  `${ENV_AUTHORIZATION_SOCKET}_TOKEN`;
+const AUTHORIZATION_RELAY_TOKEN_HEADER =
+  "x-gestalt-host-service-relay-token";
 
 export type AuthorizationEvaluateInput = MessageInitShape<
   typeof AccessEvaluationRequestSchema
@@ -49,10 +57,12 @@ export type AuthorizationActionSearchMessage = ActionSearchResponse;
 export type AuthorizationReadRelationshipsMessage = ReadRelationshipsResponse;
 
 const sharedAuthorizationTransport: {
-  socketPath: string;
+  target: string;
+  token: string;
   client: AuthorizationClient | undefined;
 } = {
-  socketPath: "",
+  target: "",
+  token: "",
   client: undefined,
 };
 
@@ -62,13 +72,21 @@ const sharedAuthorizationTransport: {
 export class AuthorizationClient {
   private readonly client: Client<typeof AuthorizationProviderService>;
 
-  constructor(socketPath?: string) {
-    const resolvedSocketPath = resolveAuthorizationSocketPath(socketPath);
+  constructor(socketTarget?: string, relayToken = process.env[ENV_AUTHORIZATION_SOCKET_TOKEN]?.trim() ?? "") {
+    const resolvedTarget = resolveAuthorizationSocketTarget(socketTarget);
+    const transportOptions = authorizationTransportOptions(resolvedTarget);
     const transport = createGrpcTransport({
-      baseUrl: "http://localhost",
-      nodeOptions: {
-        createConnection: () => connect(resolvedSocketPath),
-      },
+      ...transportOptions,
+      ...(transportOptions.nodeOptions
+        ? {
+            nodeOptions: {
+              createConnection: () => connect(transportOptions.nodeOptions!.path),
+            },
+          }
+        : {}),
+      interceptors: relayToken
+        ? [authorizationRelayTokenInterceptor(relayToken)]
+        : [],
     });
     this.client = createClient(AuthorizationProviderService, transport);
   }
@@ -113,26 +131,78 @@ export class AuthorizationClient {
  * client inside authored providers.
  */
 export function Authorization(): AuthorizationClient {
-  const socketPath = resolveAuthorizationSocketPath();
+  const target = resolveAuthorizationSocketTarget();
+  const token = process.env[ENV_AUTHORIZATION_SOCKET_TOKEN]?.trim() ?? "";
   if (
     sharedAuthorizationTransport.client &&
-    sharedAuthorizationTransport.socketPath === socketPath
+    sharedAuthorizationTransport.target === target &&
+    sharedAuthorizationTransport.token === token
   ) {
     return sharedAuthorizationTransport.client;
   }
 
-  const client = new AuthorizationClient(socketPath);
-  sharedAuthorizationTransport.socketPath = socketPath;
+  const client = new AuthorizationClient(target, token);
+  sharedAuthorizationTransport.target = target;
+  sharedAuthorizationTransport.token = token;
   sharedAuthorizationTransport.client = client;
   return client;
 }
 
-function resolveAuthorizationSocketPath(socketPath = process.env[ENV_AUTHORIZATION_SOCKET]): string {
+function resolveAuthorizationSocketTarget(socketPath = process.env[ENV_AUTHORIZATION_SOCKET]): string {
   const trimmed = socketPath?.trim() ?? "";
   if (!trimmed) {
+    throw new Error(`authorization: ${ENV_AUTHORIZATION_SOCKET} is not set`);
+  }
+  return trimmed;
+}
+
+function authorizationTransportOptions(rawTarget: string): {
+  baseUrl: string;
+  nodeOptions?: { path: string };
+} {
+  const target = rawTarget.trim();
+  if (!target) {
+    throw new Error("authorization: transport target is required");
+  }
+  if (target.startsWith("tcp://")) {
+    const address = target.slice("tcp://".length).trim();
+    if (!address) {
+      throw new Error(
+        `authorization: tcp target ${JSON.stringify(rawTarget)} is missing host:port`,
+      );
+    }
+    return { baseUrl: `http://${address}` };
+  }
+  if (target.startsWith("tls://")) {
+    const address = target.slice("tls://".length).trim();
+    if (!address) {
+      throw new Error(
+        `authorization: tls target ${JSON.stringify(rawTarget)} is missing host:port`,
+      );
+    }
+    return { baseUrl: `https://${address}` };
+  }
+  if (target.startsWith("unix://")) {
+    const socketPath = target.slice("unix://".length).trim();
+    if (!socketPath) {
+      throw new Error(
+        `authorization: unix target ${JSON.stringify(rawTarget)} is missing a socket path`,
+      );
+    }
+    return { baseUrl: "http://localhost", nodeOptions: { path: socketPath } };
+  }
+  if (target.includes("://")) {
+    const parsed = new URL(target);
     throw new Error(
-      `authorization: ${ENV_AUTHORIZATION_SOCKET} is not set`,
+      `authorization: unsupported target scheme ${JSON.stringify(parsed.protocol.replace(/:$/, ""))}`,
     );
   }
-  return trimmed;
+  return { baseUrl: "http://localhost", nodeOptions: { path: target } };
+}
+
+function authorizationRelayTokenInterceptor(token: string): Interceptor {
+  return (next) => async (req) => {
+    req.header.set(AUTHORIZATION_RELAY_TOKEN_HEADER, token);
+    return next(req);
+  };
 }

package/src/index.ts

@@ -32,6 +32,7 @@ export {
   Authorization,
   AuthorizationClient,
   ENV_AUTHORIZATION_SOCKET,
+  ENV_AUTHORIZATION_SOCKET_TOKEN,
   type AuthorizationActionSearchMessage,
   type AuthorizationDecisionMessage,
   type AuthorizationEvaluateInput,
@@ -76,21 +77,6 @@ export {
   type CatalogParameter,
   type CatalogSchema,
 } from "./catalog.ts";
-export {
-  hasPluginManifestMetadata,
-  manifestMetadataToYaml,
-  writeManifestMetadataYaml,
-  type HTTPAck,
-  type HTTPAuthScheme,
-  type HTTPBinding,
-  type HTTPIn,
-  type HTTPMediaType,
-  type HTTPRequestBody,
-  type HTTPSecretRef,
-  type HTTPSecurityScheme,
-  type HTTPSecuritySchemeType,
-  type PluginManifestMetadata,
-} from "./manifest-metadata.ts";
 export {
   buildProviderBinary,
   bunBuildCommand,
@@ -105,8 +91,25 @@ export {
   type PluginInvocationGrant,
   type PluginInvokeOptions,
 } from "./invoker.ts";
+export {
+  ENV_AGENT_MANAGER_SOCKET,
+  ENV_AGENT_MANAGER_SOCKET_TOKEN,
+  AgentManager,
+  type AgentManagerCancelTurnInput,
+  type AgentManagerCreateSessionInput,
+  type AgentManagerCreateTurnInput,
+  type AgentManagerGetSessionInput,
+  type AgentManagerGetTurnInput,
+  type AgentManagerListInteractionsInput,
+  type AgentManagerListSessionsInput,
+  type AgentManagerListTurnEventsInput,
+  type AgentManagerListTurnsInput,
+  type AgentManagerResolveInteractionInput,
+  type AgentManagerUpdateSessionInput,
+} from "./agent-manager.ts";
 export {
   ENV_WORKFLOW_MANAGER_SOCKET,
+  ENV_WORKFLOW_MANAGER_SOCKET_TOKEN,
   WorkflowManager,
   type ManagedWorkflowEventTriggerMessage,
   type ManagedWorkflowScheduleMessage,
@@ -125,6 +128,18 @@ export {
   type WorkflowManagerUpdateTriggerInput,
   type WorkflowManagerUpdateScheduleInput,
 } from "./workflow-manager.ts";
+export {
+  ENV_RUNTIME_LOG_HOST_SOCKET,
+  ENV_RUNTIME_LOG_HOST_SOCKET_TOKEN,
+  ENV_RUNTIME_SESSION_ID,
+  RuntimeLogHost,
+  type RuntimeLogAppendInput,
+  type RuntimeLogAppendLogsInput,
+  type RuntimeLogAppendResponseMessage,
+  type RuntimeLogStreamInput,
+  type RuntimeLogStreamName,
+  type RuntimeLogWriterOptions,
+} from "./runtime-log-host.ts";
 export {
   AuthenticationProvider,
   defineAuthenticationProvider,
@@ -155,6 +170,7 @@ export {
   type SecretsProviderOptions,
 } from "./secrets.ts";
 export {
+  type ConnectedToken,
   PluginProvider,
   connectionModeToProtoValue,
   connectionParamToProto,
@@ -165,6 +181,7 @@ export {
   type ConnectionParamDefinition,
   type OperationDefinition,
   type OperationOptions,
+  type PostConnectHandler,
   type PluginDefinitionOptions,
   type SessionCatalog,
   type SessionCatalogHandler,
@@ -179,8 +196,28 @@ export {
   type ProviderKind,
   type ProviderMetadata,
   type RuntimeProviderOptions,
+  type StartHandler,
   type WarningsHandler,
 } from "./provider.ts";
+export {
+  PluginRuntimeEgressMode,
+  PluginRuntimeHostServiceAccess,
+  PluginRuntimeProvider,
+  createPluginRuntimeProviderService,
+  definePluginRuntimeProvider,
+  isPluginRuntimeProvider,
+  type BindPluginRuntimeHostServiceRequest,
+  type GetPluginRuntimeSessionRequest,
+  type HostedPlugin,
+  type ListPluginRuntimeSessionsRequest,
+  type PluginRuntimeHostServiceBinding,
+  type PluginRuntimeProviderOptions,
+  type PluginRuntimeSession,
+  type PluginRuntimeSupport,
+  type StartHostedPluginRequest,
+  type StartPluginRuntimeSessionRequest,
+  type StopPluginRuntimeSessionRequest,
+} from "./pluginruntime.ts";
 export {
   array,
   boolean,
@@ -199,7 +236,6 @@ export {
   ENV_PROVIDER_PARENT_PID,
   ENV_PROVIDER_SOCKET,
   ENV_WRITE_CATALOG,
-  ENV_WRITE_MANIFEST_METADATA,
   createAuthenticationService,
   createCacheService,
   createSecretsService,
@@ -230,15 +266,22 @@ export {
   IndexedDB,
   ObjectStore,
   Index,
+  Transaction,
+  TransactionObjectStore,
+  TransactionIndex,
   Cursor,
   CursorDirection,
   NotFoundError,
   AlreadyExistsError,
+  TransactionError,
   ColumnType,
   indexedDBSocketEnv,
   indexedDBSocketTokenEnv,
   type Record,
   type KeyRange,
+  type TransactionMode,
+  type TransactionDurabilityHint,
+  type TransactionOptions,
   type ColumnSchema,
   type IndexSchema,
   type ObjectStoreSchema,
@@ -255,11 +298,16 @@ export {
   createS3Service,
   defineS3Provider,
   isS3Provider,
+  ENV_S3_SOCKET,
+  ENV_S3_SOCKET_TOKEN,
   s3SocketEnv,
+  s3SocketTokenEnv,
   type ByteRange,
   type CopyOptions,
   type ListOptions,
   type ListPage,
+  type ObjectAccessURL,
+  type ObjectAccessURLOptions,
   type ObjectMeta,
   type ObjectRef,
   type PresignOptions,
@@ -271,6 +319,59 @@ export {
   type S3ProviderOptions,
   type WriteOptions,
 } from "./s3.ts";
+export {
+  ENV_AGENT_HOST_SOCKET,
+  ENV_AGENT_HOST_SOCKET_TOKEN,
+  AgentHost,
+  AgentExecutionStatus,
+  AgentInteractionState,
+  AgentInteractionType,
+  AgentMessagePartType,
+  AgentProvider,
+  AgentSessionState,
+  AgentToolSourceMode,
+  createAgentProviderService,
+  defineAgentProvider,
+  isAgentProvider,
+  type AgentActor,
+  type AgentInteraction,
+  type AgentMessage,
+  type AgentMessagePart,
+  type AgentMessagePartImageRef,
+  type AgentMessagePartToolCall,
+  type AgentMessagePartToolResult,
+  type AgentProviderCapabilities,
+  type AgentProviderOptions,
+  type AgentSession,
+  type AgentToolRef,
+  type AgentTurn,
+  type AgentTurnDisplay,
+  type AgentTurnDisplayInit,
+  type AgentTurnDisplayValue,
+  type AgentTurnEvent,
+  type AgentTurnEventInit,
+  type CancelAgentProviderTurnRequest,
+  type CreateAgentProviderSessionRequest,
+  type CreateAgentProviderTurnRequest,
+  type ExecuteAgentToolRequest,
+  type ExecuteAgentToolResponse,
+  type GetAgentProviderCapabilitiesRequest,
+  type GetAgentProviderInteractionRequest,
+  type GetAgentProviderSessionRequest,
+  type GetAgentProviderTurnRequest,
+  type ListAgentToolsRequest,
+  type ListAgentToolsResponse,
+  type ListAgentProviderInteractionsRequest,
+  type ListAgentProviderSessionsRequest,
+  type ListAgentProviderTurnEventsRequest,
+  type ListAgentProviderTurnsRequest,
+  type ListedAgentTool,
+  type ResolveAgentProviderInteractionRequest,
+  type ResolvedAgentTool,
+  type SearchAgentToolsRequest,
+  type SearchAgentToolsResponse,
+  type UpdateAgentProviderSessionRequest,
+} from "./agent.ts";
 export {
   ENV_WORKFLOW_HOST_SOCKET,
   WorkflowHost,
@@ -304,3 +405,20 @@ export {
   type WorkflowEvent,
   type WorkflowProviderOptions,
 } from "./workflow.ts";
+export {
+  GENAI_OPERATION_CHAT,
+  GENAI_OPERATION_EXECUTE_TOOL,
+  GENAI_OPERATION_INVOKE_AGENT,
+  GENAI_PROVIDER_NAME,
+  GENAI_TOOL_TYPE_DATASTORE,
+  GENAI_TOOL_TYPE_EXTENSION,
+  GenAIOperation,
+  TELEMETRY_INSTRUMENTATION_NAME,
+  withAgentInvocation,
+  withModelOperation,
+  withToolExecution,
+  type AgentInvocationOptions,
+  type ModelOperationOptions,
+  type TokenUsage,
+  type ToolExecutionOptions,
+} from "./telemetry.ts";