@workerkit/core 0.3.8 → 0.3.10

package/dist/descriptors/onboarding.js

@@ -11,7 +11,7 @@ export const onboardingDescriptors = [
             provider: z.string().max(40).optional().describe("Optional model provider to check."),
         },
         annotations: READ_ONLY,
-        description: "Read this credential’s scopes/expiry, account model-funding requirements and human-approved spendPolicy with remaining reserved allowance. No additional scope required. Agents cannot raise the account ceiling; it applies to scheduled and manual runs. If humanActionRequired is true, show the returned setup URL. The user enters provider keys on WorkerKit, never in chat. BYOK can still require wallet credits for platform fees and metered apps. After funding, check worker readiness, deploy and run; runtime guards remain authoritative.",
+        description: "Read this credential’s scopes/expiry, account model-funding requirements and human-approved spendPolicy. The policy counts settled model cost plus BYOK fees and outstanding reservations: headroom is maxUsdPerDay minus spentTodayUsd minus reservedTodayUsd (monthly: maxUsdPerMonth minus spentThisMonthUsd minus reservedMonthUsd). Completion replaces the hold with receipt cost. Active holds cross UTC boundaries; interrupted runs with unknown cost retain their original-window hold. Use dayResetsAtUtc, monthResetsAtUtc and serverTimeUtc. Older responses without spent/reset fields counted cumulative reservations. No additional scope required. Agents cannot raise this ceiling; it applies to scheduled and manual runs. A refusal carries skipReason FleetSpendCap and errorCode human_spend_ceiling; fleet_spend_cap identifies the separately editable fleet budget. If humanActionRequired is true, show the returned setup URL. The user enters provider keys on WorkerKit, never in chat. BYOK can still require wallet credits for platform fees and metered apps. After funding, check worker readiness, deploy and run; runtime guards remain authoritative.",
     },
     {
         name: "wallet_get",

package/dist/descriptors/onboarding.js.map

@@ -1 +1 @@
-{"version":3,"file":"onboarding.js","sourceRoot":"","sources":["../../src/descriptors/onboarding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAuB,MAAM,YAAY,CAAC;AAE5D,MAAM,CAAC,MAAM,qBAAqB,GAA8B;IAC9D;QACE,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,+BAA+B;QACtC,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE;YACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;SACtF;QACD,WAAW,EAAE,SAAS;QACtB,WAAW,EAAE,0hBAA0hB;KACxiB;IACD;QACE,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,aAAa;QACpB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,EAAE;QACV,WAAW,EAAE,SAAS;QACtB,WAAW,EAAE,gMAAgM;KAC9M;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,KAAK,EAAE,wBAAwB;QAC/B,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,8BAA8B;QACpC,MAAM,EAAE;YACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;iBAC5D,QAAQ,CAAC,8GAA8G,CAAC;YAC3H,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;iBAC/D,QAAQ,CAAC,wFAAwF,CAAC;SACtG;QACD,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QAC1D,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QACjF,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;QACvG,WAAW,EAAE,iYAAiY;KAC/Y;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,sBAAsB;QAC7B,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,gCAAgC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE;QAChG,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;QACvB,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;QACjD,WAAW,EAAE,SAAS;QACtB,WAAW,EAAE,uUAAuU;KACrV;CACF,CAAC","sourcesContent":["import { z } from \"../zod.js\";\nimport { READ_ONLY, type ToolDescriptor } from \"./types.js\";\n\nexport const onboardingDescriptors: readonly ToolDescriptor[] = [\n  {\n    name: \"onboarding_get\",\n    title: \"Check onboarding requirements\",\n    auth: \"manager\",\n    method: \"get\",\n    path: \"/api/manage/onboarding\",\n    schema: {\n      provider: z.string().max(40).optional().describe(\"Optional model provider to check.\"),\n    },\n    annotations: READ_ONLY,\n    description: \"Read this credential’s scopes/expiry, account model-funding requirements and human-approved spendPolicy with remaining reserved allowance. No additional scope required. Agents cannot raise the account ceiling; it applies to scheduled and manual runs. If humanActionRequired is true, show the returned setup URL. The user enters provider keys on WorkerKit, never in chat. BYOK can still require wallet credits for platform fees and metered apps. After funding, check worker readiness, deploy and run; runtime guards remain authoritative.\",\n  },\n  {\n    name: \"wallet_get\",\n    title: \"Read wallet\",\n    auth: \"manager\",\n    method: \"get\",\n    path: \"/api/manage/wallet\",\n    schema: {},\n    annotations: READ_ONLY,\n    description: \"Read spendable wallet balance and checkout fee/amount limits. Requires readWallet. A wallet balance is not evidence that a particular checkout was credited; use wallet_checkout_get for that.\",\n  },\n  {\n    name: \"wallet_checkout_create\",\n    title: \"Request wallet funding\",\n    auth: \"manager\",\n    method: \"post\",\n    path: \"/api/manage/wallet/checkouts\",\n    schema: {\n      amountUsd: z.number().min(0.01).max(999999.99).multipleOf(0.01)\n        .describe(\"Credit amount in whole cents, before the returned platform fee. Read wallet_get for current purchase limits.\"),\n      idempotencyKey: z.string().min(1).max(200).regex(/^[\\x21-\\x7E]+$/)\n        .describe(\"Unique printable-ASCII purchase request ID. Reuse only for retries of the same amount.\"),\n    },\n    bodyBuilder: (params) => ({ amountUsd: params.amountUsd }),\n    headerBuilder: (params) => ({ \"Idempotency-Key\": String(params.idempotencyKey) }),\n    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: true },\n    description: \"Create a Stripe Checkout link for a specific wallet credit purchase. Requires requestWalletTopUp. Show the credit, fee and total and ask the user to open checkout and confirm payment. Never ask for card details or charge a saved card. Poll wallet_checkout_get after payment; only credited confirms funds reached the ledger. Reuse idempotencyKey for retries, never a different amount.\",\n  },\n  {\n    name: \"wallet_checkout_get\",\n    title: \"Check wallet payment\",\n    auth: \"manager\",\n    method: \"get\",\n    path: (params) => `/api/manage/wallet/checkouts/${encodeURIComponent(String(params.sessionId))}`,\n    paramFilter: () => ({}),\n    schema: { sessionId: z.string().min(1).max(255) },\n    annotations: READ_ONLY,\n    description: \"Check pending, paid_pending_credit, credited or expired checkout status. Requires readWallet, or requestWalletTopUp for a checkout created by this credential. Only credited means the wallet ledger has committed. Wait at least five seconds between checks; stop on credited or expired and use bounded waits for delayed payment.\",\n  },\n];\n"]}
+{"version":3,"file":"onboarding.js","sourceRoot":"","sources":["../../src/descriptors/onboarding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAuB,MAAM,YAAY,CAAC;AAE5D,MAAM,CAAC,MAAM,qBAAqB,GAA8B;IAC9D;QACE,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,+BAA+B;QACtC,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE;YACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;SACtF;QACD,WAAW,EAAE,SAAS;QACtB,WAAW,EAAE,6nCAA6nC;KAC3oC;IACD;QACE,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,aAAa;QACpB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,EAAE;QACV,WAAW,EAAE,SAAS;QACtB,WAAW,EAAE,gMAAgM;KAC9M;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,KAAK,EAAE,wBAAwB;QAC/B,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,8BAA8B;QACpC,MAAM,EAAE;YACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;iBAC5D,QAAQ,CAAC,8GAA8G,CAAC;YAC3H,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;iBAC/D,QAAQ,CAAC,wFAAwF,CAAC;SACtG;QACD,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QAC1D,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QACjF,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;QACvG,WAAW,EAAE,iYAAiY;KAC/Y;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,sBAAsB;QAC7B,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,gCAAgC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE;QAChG,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;QACvB,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;QACjD,WAAW,EAAE,SAAS;QACtB,WAAW,EAAE,uUAAuU;KACrV;CACF,CAAC","sourcesContent":["import { z } from \"../zod.js\";\nimport { READ_ONLY, type ToolDescriptor } from \"./types.js\";\n\nexport const onboardingDescriptors: readonly ToolDescriptor[] = [\n  {\n    name: \"onboarding_get\",\n    title: \"Check onboarding requirements\",\n    auth: \"manager\",\n    method: \"get\",\n    path: \"/api/manage/onboarding\",\n    schema: {\n      provider: z.string().max(40).optional().describe(\"Optional model provider to check.\"),\n    },\n    annotations: READ_ONLY,\n    description: \"Read this credential’s scopes/expiry, account model-funding requirements and human-approved spendPolicy. The policy counts settled model cost plus BYOK fees and outstanding reservations: headroom is maxUsdPerDay minus spentTodayUsd minus reservedTodayUsd (monthly: maxUsdPerMonth minus spentThisMonthUsd minus reservedMonthUsd). Completion replaces the hold with receipt cost. Active holds cross UTC boundaries; interrupted runs with unknown cost retain their original-window hold. Use dayResetsAtUtc, monthResetsAtUtc and serverTimeUtc. Older responses without spent/reset fields counted cumulative reservations. No additional scope required. Agents cannot raise this ceiling; it applies to scheduled and manual runs. A refusal carries skipReason FleetSpendCap and errorCode human_spend_ceiling; fleet_spend_cap identifies the separately editable fleet budget. If humanActionRequired is true, show the returned setup URL. The user enters provider keys on WorkerKit, never in chat. BYOK can still require wallet credits for platform fees and metered apps. After funding, check worker readiness, deploy and run; runtime guards remain authoritative.\",\n  },\n  {\n    name: \"wallet_get\",\n    title: \"Read wallet\",\n    auth: \"manager\",\n    method: \"get\",\n    path: \"/api/manage/wallet\",\n    schema: {},\n    annotations: READ_ONLY,\n    description: \"Read spendable wallet balance and checkout fee/amount limits. Requires readWallet. A wallet balance is not evidence that a particular checkout was credited; use wallet_checkout_get for that.\",\n  },\n  {\n    name: \"wallet_checkout_create\",\n    title: \"Request wallet funding\",\n    auth: \"manager\",\n    method: \"post\",\n    path: \"/api/manage/wallet/checkouts\",\n    schema: {\n      amountUsd: z.number().min(0.01).max(999999.99).multipleOf(0.01)\n        .describe(\"Credit amount in whole cents, before the returned platform fee. Read wallet_get for current purchase limits.\"),\n      idempotencyKey: z.string().min(1).max(200).regex(/^[\\x21-\\x7E]+$/)\n        .describe(\"Unique printable-ASCII purchase request ID. Reuse only for retries of the same amount.\"),\n    },\n    bodyBuilder: (params) => ({ amountUsd: params.amountUsd }),\n    headerBuilder: (params) => ({ \"Idempotency-Key\": String(params.idempotencyKey) }),\n    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: true },\n    description: \"Create a Stripe Checkout link for a specific wallet credit purchase. Requires requestWalletTopUp. Show the credit, fee and total and ask the user to open checkout and confirm payment. Never ask for card details or charge a saved card. Poll wallet_checkout_get after payment; only credited confirms funds reached the ledger. Reuse idempotencyKey for retries, never a different amount.\",\n  },\n  {\n    name: \"wallet_checkout_get\",\n    title: \"Check wallet payment\",\n    auth: \"manager\",\n    method: \"get\",\n    path: (params) => `/api/manage/wallet/checkouts/${encodeURIComponent(String(params.sessionId))}`,\n    paramFilter: () => ({}),\n    schema: { sessionId: z.string().min(1).max(255) },\n    annotations: READ_ONLY,\n    description: \"Check pending, paid_pending_credit, credited or expired checkout status. Requires readWallet, or requestWalletTopUp for a checkout created by this credential. Only credited means the wallet ledger has committed. Wait at least five seconds between checks; stop on credited or expired and use bounded waits for delayed payment.\",\n  },\n];\n"]}

package/dist/index.js

@@ -1,5 +1,5 @@
 // @workerkit/core — the shareable WorkerKit surface: the HTTP client, the
-// tool-descriptor registry (84 manager + 9 anonymous directory tools), the
+// tool-descriptor registry (88 manager + 9 anonymous directory tools), the
 // single wire-execution path, and the pure formatting/redaction helpers.
 // Deliberately MCP-free: MCP (or CLI) presentation lives with the consumer.
 export { PortEdenClient, WorkerKitClient, ResponseTooLargeError, } from "./client.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,2EAA2E;AAC3E,yEAAyE;AACzE,4EAA4E;AAE5E,OAAO,EACL,cAAc,EACd,eAAe,EACf,qBAAqB,GACtB,MAAM,aAAa,CAAC;AASrB,cAAc,wBAAwB,CAAC;AAEvC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAG3C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE5D,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC","sourcesContent":["// @workerkit/core — the shareable WorkerKit surface: the HTTP client, the\n// tool-descriptor registry (84 manager + 9 anonymous directory tools), the\n// single wire-execution path, and the pure formatting/redaction helpers.\n// Deliberately MCP-free: MCP (or CLI) presentation lives with the consumer.\n\nexport {\n  PortEdenClient,\n  WorkerKitClient,\n  ResponseTooLargeError,\n} from \"./client.js\";\nexport type {\n  ApiResult,\n  ClientLogger,\n  ClientOptions,\n  QuotaInfo,\n  RequestOpts,\n} from \"./client.js\";\n\nexport * from \"./descriptors/index.js\";\n\nexport { executeTool } from \"./execute.js\";\nexport type { ExecuteToolOpts } from \"./execute.js\";\n\nexport { isSuccess, quotaSuffix, retryAfterSuffix } from \"./errors.js\";\n\nexport { SECRET_PATTERNS, scrubSecrets } from \"./redact.js\";\n\nexport { z } from \"./zod.js\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,2EAA2E;AAC3E,yEAAyE;AACzE,4EAA4E;AAE5E,OAAO,EACL,cAAc,EACd,eAAe,EACf,qBAAqB,GACtB,MAAM,aAAa,CAAC;AASrB,cAAc,wBAAwB,CAAC;AAEvC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAG3C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE5D,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC","sourcesContent":["// @workerkit/core — the shareable WorkerKit surface: the HTTP client, the\n// tool-descriptor registry (88 manager + 9 anonymous directory tools), the\n// single wire-execution path, and the pure formatting/redaction helpers.\n// Deliberately MCP-free: MCP (or CLI) presentation lives with the consumer.\n\nexport {\n  PortEdenClient,\n  WorkerKitClient,\n  ResponseTooLargeError,\n} from \"./client.js\";\nexport type {\n  ApiResult,\n  ClientLogger,\n  ClientOptions,\n  QuotaInfo,\n  RequestOpts,\n} from \"./client.js\";\n\nexport * from \"./descriptors/index.js\";\n\nexport { executeTool } from \"./execute.js\";\nexport type { ExecuteToolOpts } from \"./execute.js\";\n\nexport { isSuccess, quotaSuffix, retryAfterSuffix } from \"./errors.js\";\n\nexport { SECRET_PATTERNS, scrubSecrets } from \"./redact.js\";\n\nexport { z } from \"./zod.js\";\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@workerkit/core",
-  "version": "0.3.8",
+  "version": "0.3.10",
   "description": "API client and tool descriptors for WorkerKit: manage AI workers and browse the public kits directory",
   "type": "module",
   "license": "MIT",