agent-relay 1.6.0 → 2.0.0

package/dist/cloud/api/policy.js

@@ -1,229 +0,0 @@
-/**
- * Agent Policy API Routes
- *
- * Provides endpoints for managing workspace-level agent policies.
- * These policies serve as fallbacks when repos don't have .claude/policies/ files.
- */
-import { Router } from 'express';
-import { db } from '../db/index.js';
-export const policyRouter = Router();
-/**
- * GET /api/policy/:workspaceId
- * Get the agent policy for a workspace
- */
-policyRouter.get('/:workspaceId', async (req, res) => {
-    const { workspaceId } = req.params;
-    const userId = req.userId;
-    if (!userId) {
-        return res.status(401).json({ error: 'Unauthorized' });
-    }
-    try {
-        const workspace = await db.workspaces.findById(workspaceId);
-        if (!workspace) {
-            return res.status(404).json({ error: 'Workspace not found' });
-        }
-        // Check user has access to this workspace
-        if (workspace.userId !== userId) {
-            const members = await db.workspaceMembers.findByWorkspaceId(workspaceId);
-            const member = members.find(m => m.userId === userId);
-            if (!member) {
-                return res.status(403).json({ error: 'Access denied' });
-            }
-        }
-        // Return the policy (or default if not set)
-        const policy = workspace.config?.agentPolicy ?? getDefaultPolicy();
-        res.json({
-            workspaceId,
-            policy,
-            source: workspace.config?.agentPolicy ? 'workspace' : 'default',
-        });
-    }
-    catch (error) {
-        console.error('[policy] Error getting policy:', error);
-        res.status(500).json({ error: 'Failed to get policy' });
-    }
-});
-/**
- * PUT /api/policy/:workspaceId
- * Update the agent policy for a workspace
- */
-policyRouter.put('/:workspaceId', async (req, res) => {
-    const { workspaceId } = req.params;
-    const userId = req.userId;
-    const policy = req.body.policy;
-    if (!userId) {
-        return res.status(401).json({ error: 'Unauthorized' });
-    }
-    if (!policy || typeof policy !== 'object') {
-        return res.status(400).json({ error: 'Policy object is required' });
-    }
-    try {
-        const workspace = await db.workspaces.findById(workspaceId);
-        if (!workspace) {
-            return res.status(404).json({ error: 'Workspace not found' });
-        }
-        // Only owner can update policy
-        if (workspace.userId !== userId) {
-            const members = await db.workspaceMembers.findByWorkspaceId(workspaceId);
-            const member = members.find(m => m.userId === userId);
-            if (!member || !['owner', 'admin'].includes(member.role)) {
-                return res.status(403).json({ error: 'Only owners and admins can update policy' });
-            }
-        }
-        // Validate policy structure
-        const validationError = validatePolicy(policy);
-        if (validationError) {
-            return res.status(400).json({ error: validationError });
-        }
-        // Update workspace config with new policy
-        const newConfig = {
-            ...workspace.config,
-            agentPolicy: policy,
-        };
-        await db.workspaces.updateConfig(workspaceId, newConfig);
-        res.json({
-            success: true,
-            workspaceId,
-            policy,
-        });
-    }
-    catch (error) {
-        console.error('[policy] Error updating policy:', error);
-        res.status(500).json({ error: 'Failed to update policy' });
-    }
-});
-/**
- * DELETE /api/policy/:workspaceId
- * Reset workspace policy to defaults
- */
-policyRouter.delete('/:workspaceId', async (req, res) => {
-    const { workspaceId } = req.params;
-    const userId = req.userId;
-    if (!userId) {
-        return res.status(401).json({ error: 'Unauthorized' });
-    }
-    try {
-        const workspace = await db.workspaces.findById(workspaceId);
-        if (!workspace) {
-            return res.status(404).json({ error: 'Workspace not found' });
-        }
-        // Only owner can reset policy
-        if (workspace.userId !== userId) {
-            const members = await db.workspaceMembers.findByWorkspaceId(workspaceId);
-            const member = members.find(m => m.userId === userId);
-            if (!member || member.role !== 'owner') {
-                return res.status(403).json({ error: 'Only owners can reset policy' });
-            }
-        }
-        // Remove policy from config
-        const { agentPolicy: _agentPolicy, ...restConfig } = workspace.config ?? {};
-        await db.workspaces.updateConfig(workspaceId, restConfig);
-        res.json({
-            success: true,
-            workspaceId,
-            policy: getDefaultPolicy(),
-            source: 'default',
-        });
-    }
-    catch (error) {
-        console.error('[policy] Error resetting policy:', error);
-        res.status(500).json({ error: 'Failed to reset policy' });
-    }
-});
-/**
- * GET /api/policy/:workspaceId/internal
- * Internal endpoint for workspace containers to fetch policy
- * Uses workspace token authentication (not user auth)
- */
-policyRouter.get('/:workspaceId/internal', async (req, res) => {
-    const { workspaceId } = req.params;
-    // This endpoint should be called with the workspace token
-    // The git.ts file has the token verification logic we can reuse
-    // For now, we'll trust the workspace ID from container requests
-    try {
-        const workspace = await db.workspaces.findById(workspaceId);
-        if (!workspace) {
-            return res.status(404).json({ error: 'Workspace not found' });
-        }
-        const policy = workspace.config?.agentPolicy ?? getDefaultPolicy();
-        res.json({
-            defaultPolicy: policy.defaultPolicy,
-            agents: policy.agents ?? [],
-            settings: policy.settings ?? {
-                requireExplicitAgents: false,
-                auditEnabled: true,
-                maxTotalAgents: 50,
-            },
-        });
-    }
-    catch (error) {
-        console.error('[policy] Error getting internal policy:', error);
-        res.status(500).json({ error: 'Failed to get policy' });
-    }
-});
-/**
- * Get default policy
- */
-function getDefaultPolicy() {
-    return {
-        defaultPolicy: {
-            name: '*',
-            allowedTools: undefined, // All tools allowed
-            canSpawn: undefined, // Can spawn any
-            canMessage: undefined, // Can message any
-            maxSpawns: 10,
-            rateLimit: 60,
-            canBeSpawned: true,
-        },
-        agents: [],
-        settings: {
-            requireExplicitAgents: false,
-            auditEnabled: true,
-            maxTotalAgents: 50,
-        },
-    };
-}
-/**
- * Validate policy structure
- */
-function validatePolicy(policy) {
-    // Validate defaultPolicy
-    if (policy.defaultPolicy && typeof policy.defaultPolicy !== 'object') {
-        return 'defaultPolicy must be an object';
-    }
-    // Validate agents array
-    if (policy.agents) {
-        if (!Array.isArray(policy.agents)) {
-            return 'agents must be an array';
-        }
-        for (let i = 0; i < policy.agents.length; i++) {
-            const agent = policy.agents[i];
-            if (!agent.name || typeof agent.name !== 'string') {
-                return `agents[${i}].name is required and must be a string`;
-            }
-            // Validate arrays
-            if (agent.allowedTools && !Array.isArray(agent.allowedTools)) {
-                return `agents[${i}].allowedTools must be an array`;
-            }
-            if (agent.canSpawn && !Array.isArray(agent.canSpawn)) {
-                return `agents[${i}].canSpawn must be an array`;
-            }
-            if (agent.canMessage && !Array.isArray(agent.canMessage)) {
-                return `agents[${i}].canMessage must be an array`;
-            }
-            // Validate numbers
-            if (agent.maxSpawns !== undefined && typeof agent.maxSpawns !== 'number') {
-                return `agents[${i}].maxSpawns must be a number`;
-            }
-            if (agent.rateLimit !== undefined && typeof agent.rateLimit !== 'number') {
-                return `agents[${i}].rateLimit must be a number`;
-            }
-        }
-    }
-    // Validate settings
-    if (policy.settings && typeof policy.settings !== 'object') {
-        return 'settings must be an object';
-    }
-    return null;
-}
-//# sourceMappingURL=policy.js.map

package/dist/cloud/api/provider-env.d.ts

@@ -1,5 +0,0 @@
-export declare function setProviderApiKeyEnv(userId: string, provider: string, apiKey: string): Promise<{
-    updated: number;
-    skipped: number;
-}>;
-//# sourceMappingURL=provider-env.d.ts.map

package/dist/cloud/api/provider-env.js

@@ -1,27 +0,0 @@
-import { db } from '../db/index.js';
-import { getProvisioner } from '../provisioner/index.js';
-const PROVIDER_ENV_VARS = {
-    google: 'GEMINI_API_KEY',
-    gemini: 'GEMINI_API_KEY',
-};
-export async function setProviderApiKeyEnv(userId, provider, apiKey) {
-    const envVarName = PROVIDER_ENV_VARS[provider];
-    if (!envVarName) {
-        return { updated: 0, skipped: 0 };
-    }
-    const workspaces = await db.workspaces.findByUserId(userId);
-    if (workspaces.length === 0) {
-        return { updated: 0, skipped: 0 };
-    }
-    const provisioner = getProvisioner();
-    const results = await Promise.all(workspaces.map(async (workspace) => {
-        if (!workspace.computeId) {
-            return 'skipped';
-        }
-        await provisioner.setWorkspaceEnvVars(workspace, { [envVarName]: apiKey });
-        return 'updated';
-    }));
-    const updated = results.filter((result) => result === 'updated').length;
-    return { updated, skipped: results.length - updated };
-}
-//# sourceMappingURL=provider-env.js.map