@valon-technologies/gestalt 0.0.1-alpha.36 → 0.0.1-alpha.38

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@valon-technologies/gestalt",
-  "version": "0.0.1-alpha.36",
+  "version": "0.0.1-alpha.38",
   "description": "TypeScript SDK for Gestalt executable providers",
   "type": "module",
   "repository": {

package/src/agent-access.ts

@@ -37,7 +37,6 @@ import {
   dateFromTimestamp,
   type JsonObjectInput,
 } from "./protocol.ts";
-import { hostInvocationContext } from "./invocation-context.ts";
 import {
   optionalObjectFromStruct,
   optionalStruct,
@@ -165,18 +164,14 @@ export interface Agent {
 
 /**
  * Client for managing agent sessions, turns, events, and interactions.
- *
- * The constructor accepts either a Gestalt request or an invocation token. Each
- * agent call forwards that token to the agent-provider facade.
  */
 class AgentImpl implements Agent {
   private readonly client: Client<typeof AgentProviderService>;
-  private readonly invocationContext: ReturnType<typeof hostInvocationContext>;
+  private readonly context: Request["__requestContext"];
 
   constructor(request: Request);
-  constructor(invocationToken: string);
-  constructor(requestOrToken: Request | string) {
-    this.invocationContext = hostInvocationContext(requestOrToken);
+  constructor(request: Request) {
+    this.context = request.__requestContext;
 
     const target = process.env[ENV_HOST_SERVICE_SOCKET]?.trim();
     if (!target) {
@@ -203,7 +198,7 @@ class AgentImpl implements Agent {
         clientRef: request.clientRef ?? "",
         metadata: optionalStruct(request.metadata),
         idempotencyKey: request.idempotencyKey ?? "",
-        ...this.invocationContext,
+        context: this.context,
         workspace: workspaceToProto(request.workspace),
       }),
     );
@@ -214,18 +209,18 @@ class AgentImpl implements Agent {
     return agentSessionFromProto(
       await this.client.getSession({
         sessionId: request.sessionId,
-        ...this.invocationContext,
+        context: this.context,
       }),
     );
   }
 
-  /** Lists agent sessions visible to the invocation token. */
+  /** Lists agent sessions visible to the request context. */
   async listSessions(
     request: AgentListSessions = {},
   ): Promise<AgentSession[]> {
     const response = await this.client.listSessions({
       providerName: request.providerName ?? "",
-      ...this.invocationContext,
+      context: this.context,
       state: request.state ?? AgentSessionState.UNSPECIFIED,
       limit: request.limit ?? 0,
       summaryOnly: request.summaryOnly ?? false,
@@ -243,7 +238,7 @@ class AgentImpl implements Agent {
         clientRef: request.clientRef ?? "",
         state: request.state ?? AgentSessionState.UNSPECIFIED,
         metadata: optionalStruct(request.metadata),
-        ...this.invocationContext,
+        context: this.context,
       }),
     );
   }
@@ -264,7 +259,7 @@ class AgentImpl implements Agent {
         output: agentOutputToProto(request.output),
         metadata: optionalStruct(request.metadata),
         idempotencyKey: request.idempotencyKey ?? "",
-        ...this.invocationContext,
+        context: this.context,
         modelOptions: optionalStruct(request.modelOptions),
         timeoutSeconds,
       }),
@@ -276,7 +271,7 @@ class AgentImpl implements Agent {
     return agentTurnFromProto(
       await this.client.getTurn({
         turnId: request.turnId,
-        ...this.invocationContext,
+        context: this.context,
       }),
     );
   }
@@ -285,7 +280,7 @@ class AgentImpl implements Agent {
   async listTurns(request: AgentListTurns): Promise<AgentTurn[]> {
     const response = await this.client.listTurns({
       sessionId: request.sessionId,
-      ...this.invocationContext,
+      context: this.context,
       status: request.status ?? AgentExecutionStatus.UNSPECIFIED,
       limit: request.limit ?? 0,
       summaryOnly: request.summaryOnly ?? false,
@@ -299,7 +294,7 @@ class AgentImpl implements Agent {
       await this.client.cancelTurn({
         turnId: request.turnId,
         reason: request.reason ?? "",
-        ...this.invocationContext,
+        context: this.context,
       }),
     );
   }
@@ -312,7 +307,7 @@ class AgentImpl implements Agent {
       turnId: request.turnId,
       afterSeq: BigInt(request.afterSeq ?? 0),
       limit: request.limit ?? 0,
-      ...this.invocationContext,
+      context: this.context,
     });
     return response.events.map(agentTurnEventFromProto);
   }
@@ -323,7 +318,7 @@ class AgentImpl implements Agent {
   ): Promise<AgentInteraction[]> {
     const response = await this.client.listInteractions({
       turnId: request.turnId,
-      ...this.invocationContext,
+      context: this.context,
     });
     return response.interactions.map(agentInteractionFromProto);
   }
@@ -337,7 +332,7 @@ class AgentImpl implements Agent {
         turnId: request.turnId,
         interactionId: request.interactionId,
         resolution: optionalStruct(request.resolution),
-        ...this.invocationContext,
+        context: this.context,
       }),
     );
   }

package/src/agent-conversions.ts

@@ -21,8 +21,10 @@ import {
 } from "./internal/gen/v1/agent_pb.ts";
 import {
   SubjectContextSchema,
+  SubjectPermissionContextSchema,
   AgentToolRefSchema,
   type SubjectContext as ProtoSubjectContext,
+  type SubjectPermissionContext as ProtoSubjectPermissionContext,
   type AgentToolRef as ProtoAgentToolRef,
 } from "./internal/gen/v1/app_pb.ts";
 import {
@@ -43,7 +45,7 @@ import type {
   AgentTurnOutput,
   AgentTurnDisplay,
 } from "./agent.ts";
-import type { Subject, SubjectInput } from "./api.ts";
+import type { Subject, SubjectInput, SubjectPermission } from "./api.ts";
 
 export function agentTurnDisplayFromProto(
   display?: ProtoAgentTurnDisplay | undefined,
@@ -271,6 +273,7 @@ export function agentToolRefFromProto(ref: ProtoAgentToolRef): AgentToolRef {
     instance: ref.instance,
     title: ref.title,
     description: ref.description,
+    credentialMode: ref.credentialMode,
     system: ref.system,
     runAs: agentRunAsSubjectFromProto(ref.runAs),
   };
@@ -284,6 +287,7 @@ export function agentToolRefToProto(ref: AgentToolRef): ProtoAgentToolRef {
     instance: ref.instance ?? "",
     title: ref.title ?? "",
     description: ref.description ?? "",
+    credentialMode: ref.credentialMode ?? "",
     system: ref.system ?? "",
     runAs: agentRunAsSubjectToProto(ref.runAs),
   });
@@ -299,11 +303,14 @@ function agentRunAsSubjectFromProto(
     id: subject.id,
     credentialSubjectId: subject.credentialSubjectId,
     email: subject.email,
+    displayName: subject.displayName,
+    scopes: [...subject.scopes],
+    permissions: subjectPermissionsFromProto(subject.permissions),
   };
 }
 
 function agentRunAsSubjectToProto(
-  subject?: SubjectInput | undefined,
+  subject?: SubjectInput | Subject | undefined,
 ): ProtoSubjectContext | undefined {
   if (subject === undefined) {
     return undefined;
@@ -312,5 +319,27 @@ function agentRunAsSubjectToProto(
     id: subject.id ?? "",
     credentialSubjectId: subject.credentialSubjectId ?? "",
     email: subject.email ?? "",
+    displayName: subject.displayName ?? "",
+    scopes: [...(subject.scopes ?? [])],
+    permissions: subjectPermissionsToProto(subject.permissions),
   });
 }
+
+function subjectPermissionsFromProto(
+  permissions: readonly ProtoSubjectPermissionContext[],
+): SubjectPermission[] {
+  return permissions.map((permission) => ({
+    app: permission.app,
+    operations: permission.allOperations ? [] : [...permission.operations],
+  }));
+}
+
+function subjectPermissionsToProto(
+  permissions?: readonly SubjectPermission[] | undefined,
+): ProtoSubjectPermissionContext[] {
+  return permissions?.map((permission) => create(SubjectPermissionContextSchema, {
+    app: permission.app,
+    operations: [...permission.operations],
+    allOperations: permission.operations.length === 0,
+  })) ?? [];
+}

package/src/agent.ts

@@ -70,13 +70,16 @@ import {
 } from "./internal/gen/v1/agent_pb.ts";
 import {
   type SubjectContext as ProtoSubjectContext,
+  type SubjectPermissionContext as ProtoSubjectPermissionContext,
   type AgentToolRef as ProtoAgentToolRef,
+  type RequestContext as ProtoRequestContext,
 } from "./internal/gen/v1/app_pb.ts";
 import {
   errorMessage,
   type MaybePromise,
   type Subject,
   type SubjectInput,
+  type SubjectPermission,
 } from "./api.ts";
 import {
   agentOutputFromProto,
@@ -205,6 +208,7 @@ export interface AgentToolRef {
   instance?: string | undefined;
   title?: string | undefined;
   description?: string | undefined;
+  credentialMode?: string | undefined;
   system?: string | undefined;
   runAs?: SubjectInput | undefined;
 }
@@ -274,24 +278,25 @@ export interface CreateAgentProviderSessionRequest {
   metadata?: JsonObjectInput | undefined;
   createdBySubjectId?: string | undefined;
   subject?: Subject | undefined;
+  context?: ProtoRequestContext | undefined;
   sessionStart?: AgentSessionStartConfig | undefined;
   preparedWorkspace?: AgentPreparedWorkspace | undefined;
-  invocationToken: string;
 }
 
 export interface GetAgentProviderSessionRequest {
   sessionId: string;
   subject?: Subject | undefined;
-  invocationToken: string;
+  context?: ProtoRequestContext | undefined;
 }
 
 export interface ListAgentProviderSessionsRequest {
+  providerName?: string | undefined;
   subject?: Subject | undefined;
+  context?: ProtoRequestContext | undefined;
   sessionIds: readonly string[];
   state: AgentSessionState;
   limit: number;
   summaryOnly: boolean;
-  invocationToken: string;
 }
 
 export interface ListAgentProviderSessionsResponse {
@@ -304,7 +309,7 @@ export interface UpdateAgentProviderSessionRequest {
   state: AgentSessionState;
   metadata?: JsonObjectInput | undefined;
   subject?: Subject | undefined;
-  invocationToken: string;
+  context?: ProtoRequestContext | undefined;
 }
 
 export interface AgentTurn {
@@ -362,9 +367,8 @@ export interface CreateAgentProviderTurnRequest {
   toolSource: AgentToolSourceMode;
   subject?: Subject | undefined;
   modelOptions?: JsonObjectInput | undefined;
-  runGrant: string;
+  context?: ProtoRequestContext | undefined;
   timeoutSeconds: number;
-  invocationToken: string;
 }
 
 export interface AgentTextOutput {
@@ -381,17 +385,17 @@ export type AgentOutput =
 export interface GetAgentProviderTurnRequest {
   turnId: string;
   subject?: Subject | undefined;
-  invocationToken: string;
+  context?: ProtoRequestContext | undefined;
 }
 
 export interface ListAgentProviderTurnsRequest {
   sessionId: string;
   subject?: Subject | undefined;
+  context?: ProtoRequestContext | undefined;
   turnIds: readonly string[];
   status: AgentExecutionStatus;
   limit: number;
   summaryOnly: boolean;
-  invocationToken: string;
 }
 
 export interface ListAgentProviderTurnsResponse {
@@ -402,7 +406,7 @@ export interface CancelAgentProviderTurnRequest {
   turnId: string;
   reason: string;
   subject?: Subject | undefined;
-  invocationToken: string;
+  context?: ProtoRequestContext | undefined;
 }
 
 export interface AgentTurnEvent {
@@ -422,7 +426,7 @@ export interface ListAgentProviderTurnEventsRequest {
   afterSeq: bigint;
   limit: number;
   subject?: Subject | undefined;
-  invocationToken: string;
+  context?: ProtoRequestContext | undefined;
 }
 
 export interface ListAgentProviderTurnEventsResponse {
@@ -446,13 +450,13 @@ export interface AgentInteraction {
 export interface GetAgentProviderInteractionRequest {
   interactionId: string;
   subject?: Subject | undefined;
-  invocationToken: string;
+  context?: ProtoRequestContext | undefined;
 }
 
 export interface ListAgentProviderInteractionsRequest {
   turnId: string;
   subject?: Subject | undefined;
-  invocationToken: string;
+  context?: ProtoRequestContext | undefined;
 }
 
 export interface ListAgentProviderInteractionsResponse {
@@ -460,10 +464,11 @@ export interface ListAgentProviderInteractionsResponse {
 }
 
 export interface ResolveAgentProviderInteractionRequest {
+  turnId?: string | undefined;
   interactionId: string;
   resolution?: JsonObjectInput | undefined;
   subject?: Subject | undefined;
-  invocationToken: string;
+  context?: ProtoRequestContext | undefined;
 }
 
 export interface GetAgentProviderCapabilitiesRequest {}
@@ -475,7 +480,7 @@ export interface ExecuteAgentToolRequest {
   toolId: string;
   arguments?: JsonObjectInput | undefined;
   idempotencyKey?: string | undefined;
-  runGrant?: string | undefined;
+  context?: ProtoRequestContext | undefined;
 }
 
 export interface ExecuteAgentToolResponse {
@@ -508,8 +513,8 @@ export interface ListAgentToolsRequest {
   turnId: string;
   pageSize?: number | undefined;
   pageToken?: string | undefined;
-  runGrant?: string | undefined;
   query?: string | undefined;
+  context?: ProtoRequestContext | undefined;
 }
 
 export interface ListAgentToolsResponse {
@@ -522,7 +527,7 @@ export interface ResolveAgentConnectionRequest {
   turnId: string;
   connection: string;
   instance?: string | undefined;
-  runGrant?: string | undefined;
+  context?: ProtoRequestContext | undefined;
 }
 
 export interface ResolvedAgentConnection {
@@ -538,10 +543,10 @@ export interface ResolvedAgentConnection {
 export interface AgentHostListToolsInput {
   sessionId: string;
   turnId: string;
-  runGrant?: string | undefined;
   pageSize?: number | undefined;
   pageToken?: string | undefined;
   query?: string | undefined;
+  context?: ProtoRequestContext | undefined;
 }
 
 /** Plain-object input for executing a tool during one agent turn. */
@@ -551,8 +556,8 @@ export interface AgentHostExecuteToolInput {
   toolCallId: string;
   toolId: string;
   arguments?: JsonObjectInput | undefined;
-  runGrant?: string | undefined;
   idempotencyKey?: string | undefined;
+  context?: ProtoRequestContext | undefined;
 }
 
 /** Plain-object input for resolving a configured connection during one turn. */
@@ -561,7 +566,7 @@ export interface AgentHostResolveConnectionInput {
   turnId: string;
   connection: string;
   instance?: string | undefined;
-  runGrant?: string | undefined;
+  context?: ProtoRequestContext | undefined;
 }
 
 /** Fakeable client contract for agent host calls. */
@@ -808,7 +813,8 @@ function createAgentProviderSessionRequestFromProto(
     clientRef: request.clientRef,
     metadata: optionalObjectFromStruct(request.metadata),
     createdBySubjectId: request.createdBySubjectId ?? "",
-    subject: agentSubjectFromProto(request.subject),
+    subject: agentRequestSubjectFromProto(request),
+    context: request.context,
     sessionStart: request.sessionStart === undefined ? undefined : {
       hooks: request.sessionStart.hooks.map((hook) => ({
         id: hook.id,
@@ -827,7 +833,6 @@ function createAgentProviderSessionRequestFromProto(
       root: request.preparedWorkspace.root,
       cwd: request.preparedWorkspace.cwd,
     },
-    invocationToken: request.invocationToken,
   };
 }
 
@@ -836,8 +841,8 @@ function getAgentProviderSessionRequestFromProto(
 ): GetAgentProviderSessionRequest {
   return {
     sessionId: request.sessionId,
-    subject: agentSubjectFromProto(request.subject),
-    invocationToken: request.invocationToken,
+    subject: agentRequestSubjectFromProto(request),
+    context: request.context,
   };
 }
 
@@ -845,12 +850,13 @@ function listAgentProviderSessionsRequestFromProto(
   request: ProtoListAgentProviderSessionsRequest,
 ): ListAgentProviderSessionsRequest {
   return {
-    subject: agentSubjectFromProto(request.subject),
+    providerName: request.providerName,
+    subject: agentRequestSubjectFromProto(request),
+    context: request.context,
     sessionIds: [...request.sessionIds],
     state: request.state as AgentSessionState,
     limit: request.limit,
     summaryOnly: request.summaryOnly,
-    invocationToken: request.invocationToken,
   };
 }
 
@@ -862,8 +868,8 @@ function updateAgentProviderSessionRequestFromProto(
     clientRef: request.clientRef,
     state: request.state as AgentSessionState,
     metadata: optionalObjectFromStruct(request.metadata),
-    subject: agentSubjectFromProto(request.subject),
-    invocationToken: request.invocationToken,
+    subject: agentRequestSubjectFromProto(request),
+    context: request.context,
   };
 }
 
@@ -898,11 +904,10 @@ function createAgentProviderTurnRequestFromProto(
     executionRef: request.executionRef,
     toolRefs: request.toolRefs.map(agentToolRefFromProto),
     toolSource: request.toolSource as AgentToolSourceMode,
-    subject: agentSubjectFromProto(request.subject),
+    subject: agentRequestSubjectFromProto(request),
     modelOptions: optionalObjectFromStruct(request.modelOptions),
-    runGrant: request.runGrant,
+    context: request.context,
     timeoutSeconds: request.timeoutSeconds,
-    invocationToken: request.invocationToken,
   };
 }
 
@@ -911,8 +916,8 @@ function getAgentProviderTurnRequestFromProto(
 ): GetAgentProviderTurnRequest {
   return {
     turnId: request.turnId,
-    subject: agentSubjectFromProto(request.subject),
-    invocationToken: request.invocationToken,
+    subject: agentRequestSubjectFromProto(request),
+    context: request.context,
   };
 }
 
@@ -921,12 +926,12 @@ function listAgentProviderTurnsRequestFromProto(
 ): ListAgentProviderTurnsRequest {
   return {
     sessionId: request.sessionId,
-    subject: agentSubjectFromProto(request.subject),
+    subject: agentRequestSubjectFromProto(request),
+    context: request.context,
     turnIds: [...request.turnIds],
     status: request.status as AgentExecutionStatus,
     limit: request.limit,
     summaryOnly: request.summaryOnly,
-    invocationToken: request.invocationToken,
   };
 }
 
@@ -936,8 +941,8 @@ function cancelAgentProviderTurnRequestFromProto(
   return {
     turnId: request.turnId,
     reason: request.reason,
-    subject: agentSubjectFromProto(request.subject),
-    invocationToken: request.invocationToken,
+    subject: agentRequestSubjectFromProto(request),
+    context: request.context,
   };
 }
 
@@ -948,8 +953,8 @@ function listAgentProviderTurnEventsRequestFromProto(
     turnId: request.turnId,
     afterSeq: request.afterSeq,
     limit: request.limit,
-    subject: agentSubjectFromProto(request.subject),
-    invocationToken: request.invocationToken,
+    subject: agentRequestSubjectFromProto(request),
+    context: request.context,
   };
 }
 
@@ -958,8 +963,8 @@ function getAgentProviderInteractionRequestFromProto(
 ): GetAgentProviderInteractionRequest {
   return {
     interactionId: request.interactionId,
-    subject: agentSubjectFromProto(request.subject),
-    invocationToken: request.invocationToken,
+    subject: agentRequestSubjectFromProto(request),
+    context: request.context,
   };
 }
 
@@ -968,8 +973,8 @@ function listAgentProviderInteractionsRequestFromProto(
 ): ListAgentProviderInteractionsRequest {
   return {
     turnId: request.turnId,
-    subject: agentSubjectFromProto(request.subject),
-    invocationToken: request.invocationToken,
+    subject: agentRequestSubjectFromProto(request),
+    context: request.context,
   };
 }
 
@@ -977,10 +982,11 @@ function resolveAgentProviderInteractionRequestFromProto(
   request: ProtoResolveAgentProviderInteractionRequest,
 ): ResolveAgentProviderInteractionRequest {
   return {
+    turnId: request.turnId,
     interactionId: request.interactionId,
     resolution: optionalObjectFromStruct(request.resolution),
-    subject: agentSubjectFromProto(request.subject),
-    invocationToken: request.invocationToken,
+    subject: agentRequestSubjectFromProto(request),
+    context: request.context,
   };
 }
 
@@ -1079,6 +1085,15 @@ function resolvedAgentToolFromProto(tool: ProtoResolvedAgentTool): ResolvedAgent
   };
 }
 
+function agentRequestSubjectFromProto(
+  request: {
+    context?: { subject?: ProtoSubjectContext | undefined } | undefined;
+    subject?: ProtoSubjectContext | undefined;
+  },
+): Subject | undefined {
+  return agentSubjectFromProto(request.context?.subject ?? request.subject);
+}
+
 function agentSubjectFromProto(
   subject?: ProtoSubjectContext | undefined,
 ): Subject | undefined {
@@ -1089,9 +1104,21 @@ function agentSubjectFromProto(
     id: subject.id,
     credentialSubjectId: subject.credentialSubjectId,
     email: subject.email,
+    displayName: subject.displayName,
+    scopes: [...subject.scopes],
+    permissions: agentSubjectPermissionsFromProto(subject.permissions),
   };
 }
 
+function agentSubjectPermissionsFromProto(
+  permissions: readonly ProtoSubjectPermissionContext[],
+): SubjectPermission[] {
+  return permissions.map((permission) => ({
+    app: permission.app,
+    operations: permission.allOperations ? [] : [...permission.operations],
+  }));
+}
+
 function optionalTimestamp(value?: Date | undefined) {
   return value === undefined ? undefined : timestampFromDate(value);
 }
@@ -1106,7 +1133,7 @@ function executeToolRequestToProto(
     toolId: request.toolId,
     arguments: optionalStruct(request.arguments),
     idempotencyKey: request.idempotencyKey ?? "",
-    runGrant: request.runGrant ?? "",
+    context: request.context,
   });
 }
 
@@ -1125,8 +1152,8 @@ function listToolsRequestToProto(request: ListAgentToolsRequest): ProtoListAgent
     turnId: request.turnId,
     pageSize: request.pageSize ?? 0,
     pageToken: request.pageToken ?? "",
-    runGrant: request.runGrant ?? "",
     query: request.query ?? "",
+    context: request.context,
   });
 }
 
@@ -1167,7 +1194,7 @@ function resolveConnectionRequestToProto(
     turnId: request.turnId,
     connection: request.connection,
     instance: request.instance ?? "",
-    runGrant: request.runGrant ?? "",
+    context: request.context,
   });
 }
 
@@ -1237,8 +1264,8 @@ class AgentHostImpl implements AgentHost {
         toolCallId: input.toolCallId,
         toolId: input.toolId,
         arguments: input.arguments,
-        runGrant: input.runGrant ?? "",
         idempotencyKey: input.idempotencyKey ?? "",
+        context: input.context,
       },
     );
   }
@@ -1260,10 +1287,10 @@ class AgentHostImpl implements AgentHost {
       {
         sessionId: input.sessionId,
         turnId: input.turnId,
-        runGrant: input.runGrant ?? "",
         pageSize: input.pageSize ?? 0,
         pageToken: input.pageToken ?? "",
         query: input.query ?? "",
+        context: input.context,
       },
     );
   }
@@ -1287,7 +1314,7 @@ class AgentHostImpl implements AgentHost {
         turnId: input.turnId,
         connection: input.connection,
         instance: input.instance ?? "",
-        runGrant: input.runGrant ?? "",
+        context: input.context,
       },
     );
   }