@zhin.js/agent 1.1.13 → 1.1.14

package/lib/plugin-runtime/workroom-assignment-authority-provider.d.ts

@@ -0,0 +1,159 @@
+import { type RuntimeSnapshot } from '@zhin.js/plugin-runtime';
+import type { ResolvedAgentBinding } from '../config/types.js';
+import type { GovernedDisclosureManifestSnapshot } from '../data-governance/disclosure-manifest.js';
+import type { WorkroomCatalog } from '../workroom/catalog.js';
+import type { WorkroomDefinition } from '../workroom/catalog-definition.js';
+import type { AssignmentExecutionSnapshotReference, AssignmentExecutionWorkspaceReference, AssignmentExecutorRole } from '../workroom/assignment-executor.js';
+import type { ProjectProfileRegistry } from '../workroom/profile-registry.js';
+import { type WorkroomRoleCapabilityReferenceInput, type WorkroomRoleSkillDescriptor, type WorkroomRoleToolDescriptor } from '../workroom/role-capability-snapshot.js';
+import type { WorkroomRemoteAssignmentAuthorityInput, WorkroomRemoteAssignmentAuthorityPort, WorkroomRemoteAssignmentResolvedAuthority } from '../workroom/remote-assignment-issuance.js';
+import { type WorkroomGithubWorkspaceReference, type WorkroomRemoteEndpointSnapshot } from '../workroom/remote-dispatch.js';
+export interface WorkroomGenerationToolAuthority extends WorkroomRoleToolDescriptor {
+}
+export interface WorkroomGenerationSkillAuthority {
+    readonly name: string;
+    readonly digest: string;
+}
+export interface WorkroomGenerationAgentAuthority {
+    readonly id: string;
+    readonly digest: string;
+}
+export interface WorkroomGenerationAuthoritySnapshotInput {
+    readonly generation: number;
+    readonly tools: readonly WorkroomGenerationToolAuthority[];
+    readonly skills: readonly WorkroomGenerationSkillAuthority[];
+    readonly agents: readonly WorkroomGenerationAgentAuthority[];
+}
+/** Exact Tool/Skill/Agent supply of one committed Plugin Runtime generation. */
+export interface WorkroomGenerationAuthoritySnapshot extends WorkroomGenerationAuthoritySnapshotInput {
+    readonly version: 1;
+    readonly digest: string;
+}
+export interface WorkroomCapabilityCeilingInput {
+    readonly id: string;
+    readonly revision: number;
+    readonly tools: readonly WorkroomRoleToolDescriptor[];
+    readonly skills: readonly WorkroomRoleSkillDescriptor[];
+}
+export interface WorkroomCapabilityCeiling extends WorkroomCapabilityCeilingInput {
+    readonly digest: string;
+}
+export interface WorkroomAssignmentAuthorityGrantInput {
+    readonly generation: number;
+    readonly projectId: string;
+    readonly runId: string;
+    readonly taskKey: string;
+    readonly taskRevision: number;
+    readonly assignmentId: string;
+    readonly assignmentRevision: number;
+    readonly attempt: number;
+    readonly fence: number;
+    readonly agentDefinitionId: string;
+    /** Absent only for a local-only grant. Remote issuance always requires it. */
+    readonly endpointId?: string;
+    /** Exact Card/auth/transport/capability join authorized by this grant. */
+    readonly endpointAuthorityDigest?: string;
+    readonly catalogRevision: string;
+    readonly catalogBindingDigest: string;
+    readonly profileRevisionId: string;
+    readonly profileDigest: string;
+    readonly principalId: string;
+    readonly role: AssignmentExecutorRole;
+    readonly capabilitySnapshotRef: string;
+    readonly capabilitySnapshotRevision: number;
+    readonly roleCapabilities: WorkroomCapabilityCeilingInput;
+    readonly taskCapabilities: WorkroomCapabilityCeilingInput;
+    readonly policyCapabilities: WorkroomCapabilityCeilingInput;
+    readonly plan: AssignmentExecutionSnapshotReference;
+    readonly contextPolicy: AssignmentExecutionSnapshotReference;
+    readonly policySnapshot: AssignmentExecutionSnapshotReference;
+    /** Optional in the untrusted/persisted shape; every issuance path rejects absence. */
+    readonly workspace?: AssignmentExecutionWorkspaceReference;
+    readonly contextView: Readonly<{
+        ref: string;
+        hash: string;
+    }>;
+    readonly capabilityGrantRef: string;
+    /** Required for remote disclosure. Local sandbox execution may not disclose externally. */
+    readonly disclosureManifest?: GovernedDisclosureManifestSnapshot;
+    readonly remoteWorkspace?: WorkroomGithubWorkspaceReference;
+}
+export interface WorkroomAssignmentAuthorityGrant extends Omit<WorkroomAssignmentAuthorityGrantInput, 'roleCapabilities' | 'taskCapabilities' | 'policyCapabilities'> {
+    readonly version: 1;
+    readonly roleCapabilities: WorkroomCapabilityCeiling;
+    readonly taskCapabilities: WorkroomCapabilityCeiling;
+    readonly policyCapabilities: WorkroomCapabilityCeiling;
+    readonly digest: string;
+}
+export interface WorkroomAssignmentAuthorityGrantRequest {
+    readonly projectId: string;
+    readonly runId: string;
+    readonly taskKey: string;
+    readonly taskRevision: number;
+    readonly assignmentId: string;
+    readonly assignmentRevision: number;
+    readonly attempt: number;
+    readonly fence: number;
+    readonly requestedAgentDefinitionId: string;
+    readonly requestedEndpointId?: string;
+}
+/** Persistent authority grant reader. It never derives grants from request metadata. */
+export interface WorkroomAssignmentAuthorityGrantPort {
+    resolve(input: WorkroomAssignmentAuthorityGrantRequest): WorkroomAssignmentAuthorityGrant | undefined | Promise<WorkroomAssignmentAuthorityGrant | undefined>;
+}
+export interface WorkroomRemoteEndpointAuthority {
+    readonly generation: number;
+    readonly transportBindingDigest: string;
+    readonly endpoint: WorkroomRemoteEndpointSnapshot;
+}
+/** Exact Card/auth/transport join for one committed protocol generation. */
+export interface WorkroomRemoteEndpointAuthorityPort {
+    resolve(endpointId: string): WorkroomRemoteEndpointAuthority | undefined | Promise<WorkroomRemoteEndpointAuthority | undefined>;
+}
+export type WorkroomLocalAssignmentAuthorityInput = Omit<WorkroomRemoteAssignmentAuthorityInput, 'requestedEndpointId'>;
+export type WorkroomLocalAssignmentResolvedAuthority = Omit<WorkroomRemoteAssignmentResolvedAuthority, 'endpoint' | 'disclosureManifest' | 'remoteWorkspace'> & Readonly<{
+    capabilitySupplies: WorkroomRoleCapabilityReferenceInput;
+}>;
+export interface WorkroomLocalAssignmentAuthorityPort {
+    resolveLocal(input: WorkroomLocalAssignmentAuthorityInput): Promise<WorkroomLocalAssignmentResolvedAuthority>;
+}
+export interface GenerationOwnedWorkroomAssignmentAuthorityProviderOptions {
+    readonly generation: WorkroomGenerationAuthoritySnapshot;
+    readonly profiles: Pick<ProjectProfileRegistry, 'read'>;
+    readonly catalog: Pick<WorkroomCatalog, 'read'>;
+    readonly grants: WorkroomAssignmentAuthorityGrantPort;
+    readonly endpoints: WorkroomRemoteEndpointAuthorityPort;
+}
+/** Persistent Project Profile Registry reader for the current Root. */
+export declare const workroomProjectProfileRegistryToken: import("@zhin.js/plugin-runtime").Token<Pick<ProjectProfileRegistry, "read">>;
+/** Trusted, durable per-Assignment grants; intentionally has no default provider. */
+export declare const workroomAssignmentAuthorityGrantToken: import("@zhin.js/plugin-runtime").Token<WorkroomAssignmentAuthorityGrantPort>;
+/** Exact committed Tool/Skill/Agent supply; intentionally cannot be inferred from config. */
+export declare const workroomGenerationAuthoritySnapshotToken: import("@zhin.js/plugin-runtime").Token<WorkroomGenerationAuthoritySnapshot>;
+/** Card/auth/transport join, normally provided by the optional A2A Host. */
+export declare const workroomRemoteEndpointAuthorityToken: import("@zhin.js/plugin-runtime").Token<WorkroomRemoteEndpointAuthorityPort>;
+/**
+ * Generation-owned authority compositor shared by local and remote issuers.
+ *
+ * It accepts names only as lookup keys. Every authority-bearing fact comes
+ * from a persistent Project registry or an immutable generation registry and
+ * is rejoined by exact identity/digest before an Assignment Envelope exists.
+ */
+export declare class GenerationOwnedWorkroomAssignmentAuthorityProvider implements WorkroomRemoteAssignmentAuthorityPort, WorkroomLocalAssignmentAuthorityPort {
+    #private;
+    readonly options: GenerationOwnedWorkroomAssignmentAuthorityProviderOptions;
+    constructor(options: GenerationOwnedWorkroomAssignmentAuthorityProviderOptions);
+    resolve(input: WorkroomRemoteAssignmentAuthorityInput): Promise<WorkroomRemoteAssignmentResolvedAuthority>;
+    resolveLocal(input: WorkroomLocalAssignmentAuthorityInput): Promise<WorkroomLocalAssignmentResolvedAuthority>;
+}
+export declare function createWorkroomGenerationAuthoritySnapshot(input: WorkroomGenerationAuthoritySnapshotInput): WorkroomGenerationAuthoritySnapshot;
+/**
+ * Builds supply from an exact operation-held RuntimeSnapshot. Callers must
+ * retain the Snapshot lease for the complete authority resolution.
+ */
+export declare function createWorkroomGenerationAuthoritySnapshotFromRuntime(snapshot: RuntimeSnapshot, bindings: readonly ResolvedAgentBinding[]): WorkroomGenerationAuthoritySnapshot;
+export declare function digestWorkroomGenerationDescriptor(kind: 'tool' | 'skill' | 'agent', value: Readonly<Record<string, unknown>>): string;
+export declare function createWorkroomAssignmentAuthorityGrant(input: WorkroomAssignmentAuthorityGrantInput): WorkroomAssignmentAuthorityGrant;
+export declare function digestWorkroomCatalogProjectBinding(definition: WorkroomDefinition): string;
+export declare function digestWorkroomRemoteEndpointAuthority(authority: WorkroomRemoteEndpointAuthority): string;
+//# sourceMappingURL=workroom-assignment-authority-provider.d.ts.map

package/lib/plugin-runtime/workroom-assignment-authority-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workroom-assignment-authority-provider.d.ts","sourceRoot":"","sources":["../../src/plugin-runtime/workroom-assignment-authority-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAA+B,KAAK,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAG5F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,2CAA2C,CAAC;AACpG,OAAO,KAAK,EAAE,eAAe,EAA2B,MAAM,wBAAwB,CAAC;AACvF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAO5E,OAAO,KAAK,EACV,oCAAoC,EACpC,qCAAqC,EACrC,sBAAsB,EACvB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAGL,KAAK,oCAAoC,EACzC,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAChC,MAAM,yCAAyC,CAAC;AACjD,OAAO,KAAK,EACV,sCAAsC,EACtC,qCAAqC,EACrC,yCAAyC,EAC1C,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAEL,KAAK,gCAAgC,EACrC,KAAK,8BAA8B,EACpC,MAAM,gCAAgC,CAAC;AAExC,MAAM,WAAW,+BAAgC,SAAQ,0BAA0B;CAAG;AAEtF,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,+BAA+B,EAAE,CAAC;IAC3D,QAAQ,CAAC,MAAM,EAAE,SAAS,gCAAgC,EAAE,CAAC;IAC7D,QAAQ,CAAC,MAAM,EAAE,SAAS,gCAAgC,EAAE,CAAC;CAC9D;AAED,gFAAgF;AAChF,MAAM,WAAW,mCACjB,SAAQ,wCAAwC;IAC9C,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACtD,QAAQ,CAAC,MAAM,EAAE,SAAS,2BAA2B,EAAE,CAAC;CACzD;AAED,MAAM,WAAW,yBAA0B,SAAQ,8BAA8B;IAC/E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,0EAA0E;IAC1E,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;IAC5C,QAAQ,CAAC,gBAAgB,EAAE,8BAA8B,CAAC;IAC1D,QAAQ,CAAC,gBAAgB,EAAE,8BAA8B,CAAC;IAC1D,QAAQ,CAAC,kBAAkB,EAAE,8BAA8B,CAAC;IAC5D,QAAQ,CAAC,IAAI,EAAE,oCAAoC,CAAC;IACpD,QAAQ,CAAC,aAAa,EAAE,oCAAoC,CAAC;IAC7D,QAAQ,CAAC,cAAc,EAAE,oCAAoC,CAAC;IAC9D,sFAAsF;IACtF,QAAQ,CAAC,SAAS,CAAC,EAAE,qCAAqC,CAAC;IAC3D,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9D,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,2FAA2F;IAC3F,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kCAAkC,CAAC;IACjE,QAAQ,CAAC,eAAe,CAAC,EAAE,gCAAgC,CAAC;CAC7D;AAED,MAAM,WAAW,gCACjB,SAAQ,IAAI,CAAC,qCAAqC,EAChD,kBAAkB,GAAG,kBAAkB,GAAG,oBAAoB,CAAC;IAC/D,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,gBAAgB,EAAE,yBAAyB,CAAC;IACrD,QAAQ,CAAC,gBAAgB,EAAE,yBAAyB,CAAC;IACrD,QAAQ,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;IACvD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;IAC5C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CACvC;AAED,wFAAwF;AACxF,MAAM,WAAW,oCAAoC;IACnD,OAAO,CACL,KAAK,EAAE,uCAAuC,GAC7C,gCAAgC,GAAG,SAAS,GAAG,OAAO,CAAC,gCAAgC,GAAG,SAAS,CAAC,CAAC;CACzG;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,8BAA8B,CAAC;CACnD;AAED,4EAA4E;AAC5E,MAAM,WAAW,mCAAmC;IAClD,OAAO,CACL,UAAU,EAAE,MAAM,GACjB,+BAA+B,GAAG,SAAS,GAAG,OAAO,CAAC,+BAA+B,GAAG,SAAS,CAAC,CAAC;CACvG;AAED,MAAM,MAAM,qCAAqC,GAAG,IAAI,CACxD,sCAAsC,EACtC,qBAAqB,CACpB,CAAC;AAEF,MAAM,MAAM,wCAAwC,GAAG,IAAI,CAC3D,yCAAyC,EACzC,UAAU,GAAG,oBAAoB,GAAG,iBAAiB,CACpD,GAAG,QAAQ,CAAC;IACX,kBAAkB,EAAE,oCAAoC,CAAC;CAC1D,CAAC,CAAC;AAEH,MAAM,WAAW,oCAAoC;IACnD,YAAY,CACV,KAAK,EAAE,qCAAqC,GAC3C,OAAO,CAAC,wCAAwC,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,yDAAyD;IACxE,QAAQ,CAAC,UAAU,EAAE,mCAAmC,CAAC;IACzD,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;IACxD,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,oCAAoC,CAAC;IACtD,QAAQ,CAAC,SAAS,EAAE,mCAAmC,CAAC;CACzD;AAED,uEAAuE;AACvE,eAAO,MAAM,mCAAmC,+EAG/C,CAAC;AAEF,qFAAqF;AACrF,eAAO,MAAM,qCAAqC,+EAGjD,CAAC;AAEF,6FAA6F;AAC7F,eAAO,MAAM,wCAAwC,8EAGpD,CAAC;AAEF,4EAA4E;AAC5E,eAAO,MAAM,oCAAoC,8EAGhD,CAAC;AAEF;;;;;;GAMG;AACH,qBAAa,kDACb,YAAW,qCAAqC,EAAE,oCAAoC;;IAGxE,QAAQ,CAAC,OAAO,EAAE,yDAAyD;gBAAlE,OAAO,EAAE,yDAAyD;IAIjF,OAAO,CACX,KAAK,EAAE,sCAAsC,GAC5C,OAAO,CAAC,yCAAyC,CAAC;IAiC/C,YAAY,CAChB,KAAK,EAAE,qCAAqC,GAC3C,OAAO,CAAC,wCAAwC,CAAC;CA2IrD;AAED,wBAAgB,yCAAyC,CACvD,KAAK,EAAE,wCAAwC,GAC9C,mCAAmC,CAUrC;AAED;;;GAGG;AACH,wBAAgB,oDAAoD,CAClE,QAAQ,EAAE,eAAe,EACzB,QAAQ,EAAE,SAAS,oBAAoB,EAAE,GACxC,mCAAmC,CAyBrC;AAED,wBAAgB,kCAAkC,CAChD,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,EAChC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACvC,MAAM,CAER;AAED,wBAAgB,sCAAsC,CACpD,KAAK,EAAE,qCAAqC,GAC3C,gCAAgC,CAoBlC;AAED,wBAAgB,mCAAmC,CAAC,UAAU,EAAE,kBAAkB,GAAG,MAAM,CAE1F;AAED,wBAAgB,qCAAqC,CACnD,SAAS,EAAE,+BAA+B,GACzC,MAAM,CAER"}