@xenosystem/agent-interface-host 0.1.3

package/dist/observation/XenoUseRunObserver.js

@@ -0,0 +1,256 @@
+/**
+ * Binds a RUN to a real sandbox, so tier-1 observation reaches the running app.
+ *
+ * `RunObservationService` folds a stream it is given; `XenoUseObservationSource`
+ * carries that stream over HTTP. Neither of them starts anything. Something has
+ * to spawn the sandbox, mount the run's directory into it, tell `xeno-use` to
+ * watch it, work out what was already there, and register all of that against a
+ * run id — and then take it down again. That is this.
+ *
+ * Without it the service is mounted and permanently empty, which is the exact
+ * "built, tested, unreachable" shape this ecosystem has shipped four times.
+ *
+ * 🔒 **HTTP only** (locked decision 17). `xeno-use` is AGPL-3.0 and this package
+ * is proprietary, so nothing here imports from it — the request bodies and JSON
+ * shapes are written out by hand for the same reason `RunObservationSource`
+ * redeclares its event type. That is the boundary, not duplication.
+ *
+ * ## 🔴 A failed start must NOT register the run
+ *
+ * This is the rule the whole module is organised around. If a sandbox cannot be
+ * created and the run is registered anyway, everything downstream reports
+ * success: `capabilityFor` answers tier 1 because the service has the run,
+ * `snapshot` answers `changes: [], complete: true` because nothing arrived, and
+ * a reviewer is shown a clean diff of a run that was never watched. An
+ * unobserved run must therefore be *absent*, and absent is what every consumer
+ * already handles honestly — `capabilityFor` drops below tier 1 and `mayLand`
+ * refuses for want of a diff.
+ *
+ * Degrading loudly is right when observation started and then broke. Refusing
+ * to start is right when it never began. They are different facts and this
+ * distinction is what keeps them apart.
+ */
+import { XenoUseObservationSource } from './XenoUseObservationSource.js';
+const DEFAULT_CONTAINER_DIRECTORY = '/mnt/xeno/work';
+const DEFAULT_TIMEOUT_MS = 60_000;
+export class XenoUseRunObserver {
+    #baseUrl;
+    #token;
+    #service;
+    #image;
+    #baselineScanner;
+    #createContentReader;
+    #fetch;
+    #timeoutMs;
+    #onProblem;
+    #active = new Map();
+    /** In-flight starts, so a second turn in the same run does not spawn a second
+     *  sandbox for it. Turns are frequent; runs are not. */
+    #starting = new Map();
+    constructor(options) {
+        this.#baseUrl = options.baseUrl.replace(/\/+$/, '');
+        this.#token = options.token;
+        this.#service = options.service;
+        this.#image = options.image;
+        this.#baselineScanner = options.baselineScanner;
+        this.#createContentReader = options.createContentReader;
+        this.#fetch = options.fetch ?? globalThis.fetch;
+        this.#timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        this.#onProblem = options.onProblem ?? (() => { });
+    }
+    /**
+     * The sandbox bound to a run, for a composition routing EXECUTION into it.
+     *
+     * Returns `undefined` when the run has none — which every caller must treat
+     * as "not confined", never as "probably fine". Deliberately a plain lookup
+     * with no side effects: asking where a run executes must not start anything.
+     */
+    sandboxFor(runId) {
+        const active = this.#active.get(runId);
+        if (!active)
+            return undefined;
+        return {
+            sandboxId: active.sandboxId,
+            hostDirectory: active.hostDirectory,
+            containerDirectory: active.containerDirectory,
+        };
+    }
+    /** Runs this observer currently holds a sandbox for. */
+    observedRuns() {
+        return [...this.#active.keys()].sort();
+    }
+    /**
+     * Starts observing `runId` against a fresh sandbox mounting `hostDirectory`.
+     *
+     * Resolves `true` when the run is registered and genuinely being watched, and
+     * `false` when it is not — including every failure. It never throws: a broken
+     * observation service must not take a turn down with it, because observation
+     * is a review capability and the run itself is the user's actual work.
+     *
+     * Idempotent per run: a second call while the first is in flight, or after it
+     * succeeded, returns the first answer rather than spawning another container.
+     */
+    async start(runId, mount) {
+        if (this.#active.has(runId))
+            return true;
+        const inFlight = this.#starting.get(runId);
+        if (inFlight)
+            return inFlight;
+        const attempt = this.#start(runId, mount).finally(() => {
+            this.#starting.delete(runId);
+        });
+        this.#starting.set(runId, attempt);
+        return attempt;
+    }
+    async #start(runId, mount) {
+        const containerDirectory = normaliseContainerDirectory(mount.containerDirectory ?? DEFAULT_CONTAINER_DIRECTORY);
+        let sandboxId;
+        try {
+            sandboxId = await this.#createSandbox(mount, containerDirectory);
+        }
+        catch (error) {
+            // 🔴 The run is NOT registered. See the header: registering here would
+            // turn "we could not watch this" into "this run changed nothing".
+            this.#onProblem({ runId, reason: `could not create an observation sandbox: ${reason(error)}` });
+            return false;
+        }
+        try {
+            await this.#post(`/v1/use/sandbox/${encodeURIComponent(sandboxId)}/observation`);
+        }
+        catch (error) {
+            // The sandbox exists but nothing is watching it, so this is the same
+            // situation as a failed create — with a container to clean up.
+            this.#onProblem({ runId, reason: `could not start observation: ${reason(error)}` });
+            await this.#destroy(sandboxId);
+            return false;
+        }
+        const baseline = await this.#scanBaseline(runId, mount.hostDirectory, containerDirectory);
+        const source = new XenoUseObservationSource({
+            baseUrl: this.#baseUrl,
+            sandboxId,
+            token: this.#token,
+            fetch: this.#fetch,
+        });
+        const content = this.#createContentReader?.({
+            hostDirectory: mount.hostDirectory,
+            containerDirectory,
+        });
+        this.#service.observe(runId, source, {
+            baseline: baseline.paths,
+            ...(content ? { content } : {}),
+            // An incomplete baseline is carried as a degradation rather than
+            // swallowed: without it, files that existed before the run report as
+            // `added`, and a reviewer reads that as work the agent did.
+            ...(baseline.complete ? {} : { degraded: true }),
+            ...(baseline.problem ? { problems: [baseline.problem] } : {}),
+        });
+        this.#active.set(runId, {
+            sandboxId,
+            hostDirectory: mount.hostDirectory,
+            containerDirectory,
+        });
+        return true;
+    }
+    /**
+     * Stops observing and removes the sandbox.
+     *
+     * The service entry is dropped FIRST and unconditionally. If the remote
+     * teardown fails, the alternative — leaving the run registered against a dead
+     * sandbox — means every later poll degrades against a container that no longer
+     * exists, which reads as "the agent's changes were lost" rather than "we
+     * stopped looking".
+     */
+    async stop(runId) {
+        const active = this.#active.get(runId);
+        this.#active.delete(runId);
+        this.#service.stopObserving(runId);
+        if (active)
+            await this.#destroy(active.sandboxId);
+    }
+    /** Tears every observation down. For app shutdown: a leaked container outlives
+     *  the process that spawned it, which is how six were once found running. */
+    async stopAll() {
+        await Promise.all([...this.#active.keys()].map((runId) => this.stop(runId)));
+    }
+    async #createSandbox(mount, containerDirectory) {
+        const response = await this.#post('/v1/use/sandbox', {
+            ...(this.#image ? { image: this.#image } : {}),
+            mounts: [
+                {
+                    source: mount.hostDirectory,
+                    target: containerDirectory,
+                    read_only: mount.readOnly === true,
+                },
+            ],
+        });
+        const body = (await response.json());
+        const id = body.data?.id;
+        if (!id)
+            throw new Error('the sandbox response carried no id');
+        return id;
+    }
+    async #scanBaseline(runId, hostDirectory, containerDirectory) {
+        if (!this.#baselineScanner) {
+            // No scanner is a DELIBERATE absence, not a failure: the service documents
+            // that a baseline-free diff is honest — `added` then means "a path we have
+            // no prior record of". It is not a hole in the observation, so it is not
+            // a degradation.
+            return { paths: [], complete: true };
+        }
+        try {
+            return await this.#baselineScanner.scan({ hostDirectory, containerDirectory });
+        }
+        catch (error) {
+            const problem = `the run's starting state could not be read (${reason(error)}), so unchanged files may report as added`;
+            this.#onProblem({ runId, reason: problem });
+            return { paths: [], complete: false, problem };
+        }
+    }
+    async #destroy(sandboxId) {
+        try {
+            await this.#request('DELETE', `/v1/use/sandbox/${encodeURIComponent(sandboxId)}`);
+        }
+        catch (error) {
+            // Reported, never swallowed. A teardown that never worked once looked
+            // exactly like one that did.
+            this.#onProblem({ runId: '', reason: `could not remove observation sandbox: ${reason(error)}` });
+        }
+    }
+    async #post(path, body) {
+        return this.#request('POST', path, body);
+    }
+    async #request(method, path, body) {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this.#timeoutMs);
+        try {
+            const response = await this.#fetch(`${this.#baseUrl}${path}`, {
+                method,
+                headers: {
+                    authorization: `Bearer ${this.#token}`,
+                    'content-type': 'application/json',
+                    // Every mutating `/v1/use` route requires one. Keyed by the request
+                    // itself so a retry is a replay rather than a second container.
+                    'idempotency-key': `xeno-agent-${method}-${path}`,
+                },
+                // `{}` rather than nothing: fastify refuses an empty payload when the
+                // content-type says JSON, and the bodyless routes accept `{}` by schema.
+                body: JSON.stringify(body ?? {}),
+                signal: controller.signal,
+            });
+            if (!response.ok)
+                throw new Error(`the service answered ${response.status}`);
+            return response;
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+}
+function normaliseContainerDirectory(value) {
+    const trimmed = value.replace(/\/+$/, '');
+    return trimmed.length > 0 ? trimmed : DEFAULT_CONTAINER_DIRECTORY;
+}
+function reason(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=XenoUseRunObserver.js.map

package/dist/observation/XenoUseRunObserver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"XenoUseRunObserver.js","sourceRoot":"","sources":["../../src/observation/XenoUseRunObserver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAMH,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AAkDxE,MAAM,2BAA2B,GAAG,gBAAgB,CAAA;AACpD,MAAM,kBAAkB,GAAG,MAAM,CAAA;AAwBjC,MAAM,OAAO,kBAAkB;IACpB,QAAQ,CAAQ;IAChB,MAAM,CAAQ;IACd,QAAQ,CAAuB;IAC/B,MAAM,CAAoB;IAC1B,gBAAgB,CAAgC;IAChD,oBAAoB,CAAkD;IACtE,MAAM,CAAyB;IAC/B,UAAU,CAAQ;IAClB,UAAU,CAAsD;IAChE,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAA;IACvD;4DACwD;IAC/C,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAA;IAExD,YAAY,OAAkC;QAC5C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACnD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAA;QAC3B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAA;QAC/B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAA;QAC3B,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAA;QAC/C,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAA;QACvD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAA;QAC/C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAA;QACzD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACnD,CAAC;IAED;;;;;;OAMG;IACH,UAAU,CAAC,KAAa;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAA;QAC7B,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;SAC9C,CAAA;IACH,CAAC;IAED,wDAAwD;IACxD,YAAY;QACV,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACxC,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,KAAsB;QAC/C,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC1C,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAA;QAE7B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACrD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAClC,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,KAAsB;QAChD,MAAM,kBAAkB,GAAG,2BAA2B,CACpD,KAAK,CAAC,kBAAkB,IAAI,2BAA2B,CACxD,CAAA;QAED,IAAI,SAAiB,CAAA;QACrB,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAA;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,uEAAuE;YACvE,kEAAkE;YAClE,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAA;YAC/F,OAAO,KAAK,CAAA;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,kBAAkB,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;QAClF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qEAAqE;YACrE,+DAA+D;YAC/D,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAA;YACnF,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;YAC9B,OAAO,KAAK,CAAA;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAA;QAEzF,MAAM,MAAM,GAAG,IAAI,wBAAwB,CAAC;YAC1C,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,SAAS;YACT,KAAK,EAAE,IAAI,CAAC,MAAM;YAClB,KAAK,EAAE,IAAI,CAAC,MAAM;SACnB,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC1C,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,kBAAkB;SACnB,CAAC,CAAA;QAEF,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE;YACnC,QAAQ,EAAE,QAAQ,CAAC,KAAK;YACxB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/B,iEAAiE;YACjE,qEAAqE;YACrE,4DAA4D;YAC5D,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YAChD,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAA;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE;YACtB,SAAS;YACT,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,kBAAkB;SACnB,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,IAAI,CAAC,KAAa;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACtC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC1B,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;QAClC,IAAI,MAAM;YAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACnD,CAAC;IAED;iFAC6E;IAC7E,KAAK,CAAC,OAAO;QACX,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC9E,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAsB,EAAE,kBAA0B;QACrE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE;YACnD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,MAAM,EAAE;gBACN;oBACE,MAAM,EAAE,KAAK,CAAC,aAAa;oBAC3B,MAAM,EAAE,kBAAkB;oBAC1B,SAAS,EAAE,KAAK,CAAC,QAAQ,KAAK,IAAI;iBACnC;aACF;SACF,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA+B,CAAA;QAClE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAA;QACxB,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;QAC9D,OAAO,EAAE,CAAA;IACX,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,KAAa,EACb,aAAqB,EACrB,kBAA0B;QAE1B,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,2EAA2E;YAC3E,2EAA2E;YAC3E,yEAAyE;YACzE,iBAAiB;YACjB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;QACtC,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAChF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,+CAA+C,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAA;YACvH,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;YAC3C,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;QAChD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAiB;QAC9B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;QACnF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,sEAAsE;YACtE,6BAA6B;YAC7B,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,yCAAyC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAA;QAClG,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,IAAc;QACtC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;IAC1C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAyB,EAAE,IAAY,EAAE,IAAc;QACpE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QACnE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,EAAE,EAAE;gBAC5D,MAAM;gBACN,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;oBACtC,cAAc,EAAE,kBAAkB;oBAClC,oEAAoE;oBACpE,gEAAgE;oBAChE,iBAAiB,EAAE,cAAc,MAAM,IAAI,IAAI,EAAE;iBAClD;gBACD,sEAAsE;gBACtE,yEAAyE;gBACzE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;gBAChC,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAA;YACF,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;YAC5E,OAAO,QAAQ,CAAA;QACjB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC;IACH,CAAC;CACF;AAED,SAAS,2BAA2B,CAAC,KAAa;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACzC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAA;AACnE,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC/D,CAAC"}

package/dist/pluginMcp/PluginMcpManagerService.d.ts

@@ -0,0 +1,141 @@
+import type { HubSearchDocument } from '../agentSearch/searchTypes.js';
+import type { CallMcpToolRequest, CallMcpToolResponse, DeletePluginMcpScopedPolicyRequest, GetMcpPromptRequest, GetMcpPromptResponse, HubPluginMcpScopedPolicy, HubMcpResultPreview, HubMcpResultPreviewMetadata, HubMcpServerRecord, HubPluginMcpSnapshot, HubPluginSummary, HubPluginTrustDecisionRequest, InstallLocalPluginRequest, InstallPluginRequest, PreflightPluginMcpTrustRequest, PreflightPluginMcpTrustResponse, PluginMcpSnapshotRequest, PluginNameRequest, ReadMcpResourceRequest, ReadMcpResourceResponse, ReloadMcpRequest, RemoveMcpServerRequest, SearchPluginMarketplaceRequest, SearchPluginMarketplaceResponse, SetMcpApprovalRequest, SetMcpRegistryPolicyRequest, SetPluginMcpScopedPolicyRequest, SyncProjectMcpRequest, SyncProjectMcpResponse, UninstallPluginRequest, UpdatePluginRequest, UpsertMcpServerRequest } from './pluginMcpTypes.js';
+type RuntimeToolRegistry = {
+    register: (tool: unknown) => void;
+};
+export declare function createResultPreview(result: unknown, title: string, source?: HubMcpResultPreviewMetadata['source']): HubMcpResultPreview;
+export declare class PluginMcpManagerService {
+    private readonly baseDir;
+    private readonly pluginDir;
+    private readonly pluginEventLogPath;
+    private readonly pluginTrustPath;
+    private readonly mcpDir;
+    private readonly mcpServersPath;
+    private readonly mcpApprovalsPath;
+    private pluginHost;
+    private mcpManager;
+    private mcpUnsubscribe;
+    private pluginEvents;
+    private activePluginsHydrated;
+    constructor(baseDir?: string);
+    snapshot(request?: PluginMcpSnapshotRequest): Promise<HubPluginMcpSnapshot>;
+    installPlugin(request: InstallPluginRequest): Promise<{
+        success: boolean;
+        plugin?: HubPluginSummary | undefined;
+        error?: string | undefined;
+    }>;
+    installLocalPlugin(request: InstallLocalPluginRequest): Promise<{
+        success: boolean;
+        plugin?: HubPluginSummary | undefined;
+        error?: string | undefined;
+    }>;
+    activatePlugin(request: PluginNameRequest): Promise<{
+        success: boolean;
+        plugin?: HubPluginSummary | undefined;
+        error?: string | undefined;
+    }>;
+    deactivatePlugin(request: PluginNameRequest): Promise<{
+        success: boolean;
+        plugin?: HubPluginSummary | undefined;
+        error?: string | undefined;
+    }>;
+    uninstallPlugin(request: UninstallPluginRequest): Promise<{
+        success: boolean;
+        error?: string;
+    }>;
+    updatePlugin(request: UpdatePluginRequest): Promise<{
+        success: boolean;
+        plugin?: HubPluginSummary | undefined;
+        error?: string | undefined;
+    }>;
+    setPluginTrust(request: HubPluginTrustDecisionRequest): Promise<{
+        success: boolean;
+        plugin?: HubPluginSummary | undefined;
+        error?: string | undefined;
+    }>;
+    upsertMcpServer(request: UpsertMcpServerRequest): Promise<{
+        success: boolean;
+        server?: HubMcpServerRecord;
+        error?: string;
+    }>;
+    removeMcpServer(request: RemoveMcpServerRequest): Promise<{
+        success: boolean;
+        error?: string;
+    }>;
+    setMcpApproval(request: SetMcpApprovalRequest): Promise<{
+        success: boolean;
+        server?: HubMcpServerRecord;
+        error?: string;
+    }>;
+    reloadMcp(request?: ReloadMcpRequest): Promise<{
+        success: boolean;
+        snapshot?: HubPluginMcpSnapshot;
+        connected: string[];
+        skipped: string[];
+        errors: Array<{
+            name: string;
+            error: string;
+        }>;
+        error?: string;
+    }>;
+    setMcpRegistryPolicy(request: SetMcpRegistryPolicyRequest): Promise<{
+        success: boolean;
+        snapshot?: HubPluginMcpSnapshot;
+        error?: string;
+    }>;
+    setScopedPolicy(request: SetPluginMcpScopedPolicyRequest): Promise<{
+        success: boolean;
+        policy?: HubPluginMcpScopedPolicy;
+        snapshot?: HubPluginMcpSnapshot;
+        error?: string;
+    }>;
+    deleteScopedPolicy(request: DeletePluginMcpScopedPolicyRequest): Promise<{
+        success: boolean;
+        snapshot?: HubPluginMcpSnapshot;
+        error?: string;
+    }>;
+    searchMarketplace(request?: SearchPluginMarketplaceRequest): Promise<SearchPluginMarketplaceResponse>;
+    syncProjectMcp(request: SyncProjectMcpRequest): Promise<SyncProjectMcpResponse>;
+    callMcpTool(request: CallMcpToolRequest): Promise<CallMcpToolResponse>;
+    getMcpPrompt(request: GetMcpPromptRequest): Promise<GetMcpPromptResponse>;
+    readMcpResource(request: ReadMcpResourceRequest): Promise<ReadMcpResourceResponse>;
+    preflightTrust(request?: PreflightPluginMcpTrustRequest): Promise<PreflightPluginMcpTrustResponse>;
+    registerRuntimeTools(toolRegistry: RuntimeToolRegistry, options?: {
+        cwd?: string;
+        includePlugins?: boolean;
+        includeMcp?: boolean;
+        workspaceId?: string;
+        teamId?: string;
+        agentId?: string;
+    }): Promise<{
+        pluginTools: string[];
+        mcpTools: string[];
+        errors: string[];
+    }>;
+    toSearchDocuments(): HubSearchDocument[];
+    private resolveEffectivePolicy;
+    private isPluginAllowed;
+    private isMcpServerAllowed;
+    private isMcpServerTrusted;
+    private assertMcpServerUsable;
+    private recordMcpCallAudit;
+    private getPluginHost;
+    private hydratePersistedActivePlugins;
+    private getMcpManager;
+    private disposeMcpManager;
+    private withPlugin;
+    private normalizeHubMcpServer;
+    private readPluginTrustFile;
+    private writePluginTrustFile;
+    private readMcpFile;
+    private writeMcpFile;
+    private listConfiguredMcpRecords;
+    private mergeMcpServerSummaries;
+    private mcpServerSummary;
+    private loadPluginEvents;
+    private recordPluginEvent;
+    private appendMcpApproval;
+}
+export declare function getPluginMcpManagerService(): PluginMcpManagerService;
+export {};
+//# sourceMappingURL=PluginMcpManagerService.d.ts.map

package/dist/pluginMcp/PluginMcpManagerService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PluginMcpManagerService.d.ts","sourceRoot":"","sources":["../../src/pluginMcp/PluginMcpManagerService.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAA;AAEtE,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EACnB,kCAAkC,EAClC,mBAAmB,EACnB,oBAAoB,EAMpB,wBAAwB,EAGxB,mBAAmB,EACnB,2BAA2B,EAE3B,kBAAkB,EAIlB,oBAAoB,EACpB,gBAAgB,EAChB,6BAA6B,EAC7B,yBAAyB,EACzB,oBAAoB,EACpB,8BAA8B,EAC9B,+BAA+B,EAC/B,wBAAwB,EACxB,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,EACvB,gBAAgB,EAChB,sBAAsB,EACtB,8BAA8B,EAC9B,+BAA+B,EAC/B,qBAAqB,EACrB,2BAA2B,EAC3B,+BAA+B,EAC/B,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,sBAAsB,EACvB,MAAM,qBAAqB,CAAA;AAG5B,KAAK,mBAAmB,GAAG;IACzB,QAAQ,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAA;CAClC,CAAA;AAsfD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,GAAE,2BAA2B,CAAC,QAAQ,CAAc,GAAG,mBAAmB,CAgCnJ;AAuKD,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAQ;IAC3C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAQ;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAQ;IACvC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAQ;IACzC,OAAO,CAAC,UAAU,CAA0B;IAC5C,OAAO,CAAC,UAAU,CAA0B;IAC5C,OAAO,CAAC,cAAc,CAA4B;IAClD,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,qBAAqB,CAAQ;gBAEzB,OAAO,SAA2B;IAaxC,QAAQ,CAAC,OAAO,GAAE,wBAA6B,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAkD/E,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;IAc9I,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;IAgBxJ,cAAc,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;IAc5I,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;IAQ9I,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAY/F,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;IAO5I,cAAc,CAAC,OAAO,EAAE,6BAA6B,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;IAqCxJ,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAgC5H,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAe/F,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA+C1H,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAwCjN,oBAAoB,CAAC,OAAO,EAAE,2BAA2B,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAW1I,eAAe,CAAC,OAAO,EAAE,+BAA+B,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,wBAAwB,CAAC;QAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAmB5K,kBAAkB,CAAC,OAAO,EAAE,kCAAkC,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAgB/I,iBAAiB,CAAC,OAAO,GAAE,8BAAmC,GAAG,OAAO,CAAC,+BAA+B,CAAC;IAyBzG,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAqF/E,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IActE,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAczE,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAclF,cAAc,CAAC,OAAO,GAAE,8BAAmC,GAAG,OAAO,CAAC,+BAA+B,CAAC;IAwHtG,oBAAoB,CACxB,YAAY,EAAE,mBAAmB,EACjC,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GACtI,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAwD3E,iBAAiB,IAAI,iBAAiB,EAAE;IA2DxC,OAAO,CAAC,sBAAsB;IA2B9B,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,kBAAkB;IAK1B,OAAO,CAAC,qBAAqB;IAoC7B,OAAO,CAAC,kBAAkB;YAeZ,aAAa;YAuBb,6BAA6B;YAqC7B,aAAa;IAiB3B,OAAO,CAAC,iBAAiB;YAOX,UAAU;IAexB,OAAO,CAAC,qBAAqB;IA+B7B,OAAO,CAAC,mBAAmB;IAkB3B,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,WAAW;IAmCnB,OAAO,CAAC,YAAY;YAWN,wBAAwB;IAiBtC,OAAO,CAAC,uBAAuB;IAkB/B,OAAO,CAAC,gBAAgB;IAgBxB,OAAO,CAAC,gBAAgB;IAaxB,OAAO,CAAC,iBAAiB;IAkBzB,OAAO,CAAC,iBAAiB;CAQ1B;AAID,wBAAgB,0BAA0B,IAAI,uBAAuB,CAGpE"}