ankka 0.11.0 → 0.13.0

package/dist/_proto/ankka/protocol/v1/mcp_pb.d.ts

@@ -0,0 +1,120 @@
+import type { GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
+import type { Failure, Metadata } from "./payload_pb.ts";
+import type { Caller, Principal } from "./endpoint_pb.ts";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file ankka/protocol/v1/mcp.proto.
+ */
+export declare const file_ankka_protocol_v1_mcp: GenFile;
+/**
+ * @generated from message ankka.protocol.v1.McpToolRequest
+ */
+export type McpToolRequest = Message<"ankka.protocol.v1.McpToolRequest"> & {
+    /**
+     * @generated from field: string endpoint_id = 1;
+     */
+    endpointId: string;
+    /**
+     * @generated from field: string tool = 2;
+     */
+    tool: string;
+    /**
+     * a JSON object, already checked against the tool's schema's types
+     *
+     * @generated from field: string arguments_json = 3;
+     */
+    argumentsJson: string;
+    /**
+     * when the ACL authenticated: a token's or a client key's, never the credential
+     *
+     * @generated from field: optional ankka.protocol.v1.Principal principal = 4;
+     */
+    principal?: Principal | undefined;
+    /**
+     * @generated from field: optional ankka.protocol.v1.Caller caller = 5;
+     */
+    caller?: Caller | undefined;
+    /**
+     * the trace, and the tool as the caller of what it calls
+     *
+     * @generated from field: ankka.protocol.v1.Metadata metadata = 6;
+     */
+    metadata?: Metadata | undefined;
+};
+/**
+ * Describes the message ankka.protocol.v1.McpToolRequest.
+ * Use `create(McpToolRequestSchema)` to create a new message.
+ */
+export declare const McpToolRequestSchema: GenMessage<McpToolRequest>;
+/**
+ * @generated from message ankka.protocol.v1.McpToolReply
+ */
+export type McpToolReply = Message<"ankka.protocol.v1.McpToolReply"> & {
+    /**
+     * @generated from oneof ankka.protocol.v1.McpToolReply.reply
+     */
+    reply: {
+        /**
+         * @generated from field: ankka.protocol.v1.McpToolAnswer ok = 1;
+         */
+        value: McpToolAnswer;
+        case: "ok";
+    } | {
+        /**
+         * a tool error: the message the model reads
+         *
+         * @generated from field: string error = 2;
+         */
+        value: string;
+        case: "error";
+    } | {
+        /**
+         * the process could not run it
+         *
+         * @generated from field: ankka.protocol.v1.Failure failure = 3;
+         */
+        value: Failure;
+        case: "failure";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message ankka.protocol.v1.McpToolReply.
+ * Use `create(McpToolReplySchema)` to create a new message.
+ */
+export declare const McpToolReplySchema: GenMessage<McpToolReply>;
+/**
+ * @generated from message ankka.protocol.v1.McpToolAnswer
+ */
+export type McpToolAnswer = Message<"ankka.protocol.v1.McpToolAnswer"> & {
+    /**
+     * @generated from field: string text = 1;
+     */
+    text: string;
+    /**
+     * when the result is a record or a map
+     *
+     * @generated from field: optional string structured_json = 2;
+     */
+    structuredJson?: string | undefined;
+};
+/**
+ * Describes the message ankka.protocol.v1.McpToolAnswer.
+ * Use `create(McpToolAnswerSchema)` to create a new message.
+ */
+export declare const McpToolAnswerSchema: GenMessage<McpToolAnswer>;
+/**
+ * @generated from service ankka.protocol.v1.Mcp
+ */
+export declare const Mcp: GenService<{
+    /**
+     * @generated from rpc ankka.protocol.v1.Mcp.InvokeTool
+     */
+    invokeTool: {
+        methodKind: "unary";
+        input: typeof McpToolRequestSchema;
+        output: typeof McpToolReplySchema;
+    };
+}>;

package/dist/_proto/ankka/protocol/v1/mcp_pb.js

@@ -0,0 +1,29 @@
+// A tool of an MCP endpoint the process declared in discovery (protocol 1.20). The sidecar serves
+// the endpoint: it answers the MCP protocol, applies the ACL and checks the arguments against the
+// tool's schema, then asks the process to run the tool. The process never sees the credential.
+import { fileDesc, messageDesc, serviceDesc } from "@bufbuild/protobuf/codegenv2";
+import { file_ankka_protocol_v1_payload } from "./payload_pb.js";
+import { file_ankka_protocol_v1_endpoint } from "./endpoint_pb.js";
+/**
+ * Describes the file ankka/protocol/v1/mcp.proto.
+ */
+export const file_ankka_protocol_v1_mcp = /*@__PURE__*/ fileDesc("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", [file_ankka_protocol_v1_payload, file_ankka_protocol_v1_endpoint]);
+/**
+ * Describes the message ankka.protocol.v1.McpToolRequest.
+ * Use `create(McpToolRequestSchema)` to create a new message.
+ */
+export const McpToolRequestSchema = /*@__PURE__*/ messageDesc(file_ankka_protocol_v1_mcp, 0);
+/**
+ * Describes the message ankka.protocol.v1.McpToolReply.
+ * Use `create(McpToolReplySchema)` to create a new message.
+ */
+export const McpToolReplySchema = /*@__PURE__*/ messageDesc(file_ankka_protocol_v1_mcp, 1);
+/**
+ * Describes the message ankka.protocol.v1.McpToolAnswer.
+ * Use `create(McpToolAnswerSchema)` to create a new message.
+ */
+export const McpToolAnswerSchema = /*@__PURE__*/ messageDesc(file_ankka_protocol_v1_mcp, 2);
+/**
+ * @generated from service ankka.protocol.v1.Mcp
+ */
+export const Mcp = /*@__PURE__*/ serviceDesc(file_ankka_protocol_v1_mcp, 0);

package/dist/_proto/ankka/protocol/v1/payload_pb.d.ts

@@ -76,6 +76,16 @@ export type Error = Message<"ankka.protocol.v1.Error"> & {
      * @generated from field: ankka.protocol.v1.ErrorCode code = 2;
      */
     code: ErrorCode;
+    /**
+     * 1.18: what a caller reads without parsing the message. A WORKFLOW_FAILED carries `step` (when
+     * one failed), `reason`, and `deleted` = "true" for a deleted workflow. Set only by the 1.18
+     * rpcs; a reader from before ignores it.
+     *
+     * @generated from field: map<string, string> details = 3;
+     */
+    details: {
+        [key: string]: string;
+    };
 };
 /**
  * Describes the message ankka.protocol.v1.Error.
@@ -229,6 +239,45 @@ export type Empty = Message<"ankka.protocol.v1.Empty"> & {};
  * Use `create(EmptySchema)` to create a new message.
  */
 export declare const EmptySchema: GenMessage<Empty>;
+/**
+ * 1.16: where a workflow stood once the effect that recorded a state was applied. Carried on a
+ * view's or a consumer's request for a change from a workflow source, and on nothing else.
+ *
+ * @generated from message ankka.protocol.v1.WorkflowStanding
+ */
+export type WorkflowStanding = Message<"ankka.protocol.v1.WorkflowStanding"> & {
+    /**
+     * NotStarted, Running, Paused, Completed, Failed, or Unknown for a state recorded before 1.16
+     *
+     * @generated from field: string status = 1;
+     */
+    status: string;
+    /**
+     * the step the workflow is on, or the step a pause names or follows
+     *
+     * @generated from field: optional string step = 2;
+     */
+    step?: string | undefined;
+    /**
+     * retries so far, per step
+     *
+     * @generated from field: map<string, int32> retries = 3;
+     */
+    retries: {
+        [key: string]: number;
+    };
+    /**
+     * why it failed, when it did
+     *
+     * @generated from field: optional string failure = 4;
+     */
+    failure?: string | undefined;
+};
+/**
+ * Describes the message ankka.protocol.v1.WorkflowStanding.
+ * Use `create(WorkflowStandingSchema)` to create a new message.
+ */
+export declare const WorkflowStandingSchema: GenMessage<WorkflowStanding>;
 /**
  * @generated from enum ankka.protocol.v1.ErrorCode
  */
@@ -265,6 +314,18 @@ export declare const ErrorCode: {
      * @generated from enum value: UNAVAILABLE = 7;
      */
     readonly UNAVAILABLE: 7;
+    /**
+     * 1.18: a workflow a caller waited for failed or was deleted
+     *
+     * @generated from enum value: WORKFLOW_FAILED = 8;
+     */
+    readonly WORKFLOW_FAILED: 8;
+    /**
+     * 1.19: a replicated entity's copy here cannot answer; the message names its home
+     *
+     * @generated from enum value: NOT_HOME = 9;
+     */
+    readonly NOT_HOME: 9;
 };
 /**
  * @generated from enum ankka.protocol.v1.ErrorCode

package/dist/_proto/ankka/protocol/v1/payload_pb.js

@@ -6,7 +6,7 @@ import { enumDesc, fileDesc, messageDesc } from "@bufbuild/protobuf/codegenv2";
 /**
  * Describes the file ankka/protocol/v1/payload.proto.
  */
-export const file_ankka_protocol_v1_payload = /*@__PURE__*/ fileDesc("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");
+export const file_ankka_protocol_v1_payload = /*@__PURE__*/ fileDesc("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");
 /**
  * Describes the message ankka.protocol.v1.Payload.
  * Use `create(PayloadSchema)` to create a new message.
@@ -67,6 +67,11 @@ export const Retention_ExpireAfterSchema = /*@__PURE__*/ messageDesc(file_ankka_
  * Use `create(EmptySchema)` to create a new message.
  */
 export const EmptySchema = /*@__PURE__*/ messageDesc(file_ankka_protocol_v1_payload, 6);
+/**
+ * Describes the message ankka.protocol.v1.WorkflowStanding.
+ * Use `create(WorkflowStandingSchema)` to create a new message.
+ */
+export const WorkflowStandingSchema = /*@__PURE__*/ messageDesc(file_ankka_protocol_v1_payload, 7);
 /**
  * @generated from enum ankka.protocol.v1.ErrorCode
  */
@@ -103,6 +108,18 @@ export const ErrorCode = {
      * @generated from enum value: UNAVAILABLE = 7;
      */
     UNAVAILABLE: 7,
+    /**
+     * 1.18: a workflow a caller waited for failed or was deleted
+     *
+     * @generated from enum value: WORKFLOW_FAILED = 8;
+     */
+    WORKFLOW_FAILED: 8,
+    /**
+     * 1.19: a replicated entity's copy here cannot answer; the message names its home
+     *
+     * @generated from enum value: NOT_HOME = 9;
+     */
+    NOT_HOME: 9,
 };
 /**
  * Describes the enum ankka.protocol.v1.ErrorCode.

package/dist/_proto/ankka/protocol/v1/view_pb.d.ts

@@ -1,5 +1,5 @@
 import type { GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
-import type { Empty, Metadata, Payload } from "./payload_pb.ts";
+import type { Empty, Metadata, Payload, WorkflowStanding } from "./payload_pb.ts";
 import type { Message } from "@bufbuild/protobuf";
 /**
  * Describes the file ankka/protocol/v1/view.proto.
@@ -43,6 +43,12 @@ export type ViewRequest = Message<"ankka.protocol.v1.ViewRequest"> & {
      * @generated from field: optional string source_id = 6;
      */
     sourceId?: string | undefined;
+    /**
+     * 1.16: a change from a workflow source: where it stood once the effect was applied
+     *
+     * @generated from field: optional ankka.protocol.v1.WorkflowStanding standing = 7;
+     */
+    standing?: WorkflowStanding | undefined;
 };
 /**
  * Describes the message ankka.protocol.v1.ViewRequest.

package/dist/_proto/ankka/protocol/v1/view_pb.js

@@ -6,7 +6,7 @@ import { file_ankka_protocol_v1_payload } from "./payload_pb.js";
 /**
  * Describes the file ankka/protocol/v1/view.proto.
  */
-export const file_ankka_protocol_v1_view = /*@__PURE__*/ fileDesc("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", [file_ankka_protocol_v1_payload]);
+export const file_ankka_protocol_v1_view = /*@__PURE__*/ fileDesc("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", [file_ankka_protocol_v1_payload]);
 /**
  * Describes the message ankka.protocol.v1.ViewRequest.
  * Use `create(ViewRequestSchema)` to create a new message.

package/dist/_proto/ankka/protocol/v1/wasm_pb.d.ts

@@ -167,6 +167,18 @@ export type FoldRequest = Message<"ankka.protocol.v1.FoldRequest"> & {
      * @generated from field: int64 sequence = 5;
      */
     sequence: bigint;
+    /**
+     * 1.19: where the event was written; empty when none is named
+     *
+     * @generated from field: string installation = 6;
+     */
+    installation: string;
+    /**
+     * 1.19: written at another installation than this one
+     *
+     * @generated from field: bool mirrored = 7;
+     */
+    mirrored: boolean;
 };
 /**
  * Describes the message ankka.protocol.v1.FoldRequest.

package/dist/_proto/ankka/protocol/v1/wasm_pb.js

@@ -14,7 +14,7 @@ import { file_ankka_protocol_v1_client } from "./client_pb.js";
 /**
  * Describes the file ankka/protocol/v1/wasm.proto.
  */
-export const file_ankka_protocol_v1_wasm = /*@__PURE__*/ fileDesc("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", [file_ankka_protocol_v1_payload, file_ankka_protocol_v1_discovery, file_ankka_protocol_v1_event_sourced, file_ankka_protocol_v1_key_value, file_ankka_protocol_v1_workflow, file_ankka_protocol_v1_client]);
+export const file_ankka_protocol_v1_wasm = /*@__PURE__*/ fileDesc("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", [file_ankka_protocol_v1_payload, file_ankka_protocol_v1_discovery, file_ankka_protocol_v1_event_sourced, file_ankka_protocol_v1_key_value, file_ankka_protocol_v1_workflow, file_ankka_protocol_v1_client]);
 /**
  * Describes the message ankka.protocol.v1.WasmSpec.
  * Use `create(WasmSpecSchema)` to create a new message.

package/dist/agent.d.ts

@@ -1,5 +1,7 @@
 import type { Metadata } from "./effects/common.ts";
+import { type ClientKeys } from "./client-keys.ts";
 import { type ComponentClient, type Secrets } from "./client.ts";
+import { type Buckets } from "./storage.ts";
 import type { GuardrailRef, HandlerTable, ToolRef } from "./handlers.ts";
 import { AgentEffects } from "./effects/agent.ts";
 import { type Services } from "./services.ts";
@@ -15,6 +17,14 @@ export declare abstract class Agent {
     get secrets(): Secrets;
     /** A unit test's store in place of the runtime's: `component.secrets = new InMemorySecrets()`. */
     set secrets(store: Secrets);
+    /** The service's client keys (1.20): issued for its MCP endpoint, kept by the runtime, each shown once. */
+    get clientKeys(): ClientKeys;
+    /** A unit test's in place of the runtime's: `component.clientKeys = new InMemoryClientKeys()`. */
+    set clientKeys(keys: ClientKeys);
+    /** The service's buckets: `this.storage.default`, or `this.storage.bucket("photos")`. */
+    get storage(): Buckets;
+    /** A unit test's store in place of the runtime's: `component.storage = new InMemoryBuckets()`. */
+    set storage(buckets: Buckets);
     /** Other services, called as this one, through the runtime: `this.services.service("orders")`. */
     get services(): Services;
     /** A unit test's in place of the runtime's: `component.services = new ScriptedServices()`. */

package/dist/agent.js

@@ -5,7 +5,9 @@
 //   static readonly tools = { lookup: tool("lookup", "Looks up a cart by id.", CartLookup, (a: Assistant, input) => a.lookup(input.cartId)) }
 //   static readonly guardrails = { noSecrets: guardrail("no-secrets", (stage, text) => text.includes("sk-") ? "a key leaked" : null) }
 //   static readonly handlers = { ask: command("ask", s.string, s.string, (a: Assistant, q) => a.ask(q)), chat: stream("chat", s.string, (a: Assistant, q) => a.ask(q)) }
+import { clientKeysFor } from "./client-keys.js";
 import { secretsFor } from "./client.js";
+import { processStorage } from "./storage.js";
 import { AgentEffects } from "./effects/agent.js";
 import { servicesFor } from "./services.js";
 export class Agent {
@@ -34,6 +36,24 @@ export class Agent {
     set secrets(store) {
         this.#secrets = store;
     }
+    #clientKeys;
+    /** The service's client keys (1.20): issued for its MCP endpoint, kept by the runtime, each shown once. */
+    get clientKeys() {
+        return this.#clientKeys ?? clientKeysFor(this.client);
+    }
+    /** A unit test's in place of the runtime's: `component.clientKeys = new InMemoryClientKeys()`. */
+    set clientKeys(keys) {
+        this.#clientKeys = keys;
+    }
+    #storage;
+    /** The service's buckets: `this.storage.default`, or `this.storage.bucket("photos")`. */
+    get storage() {
+        return this.#storage ?? processStorage();
+    }
+    /** A unit test's store in place of the runtime's: `component.storage = new InMemoryBuckets()`. */
+    set storage(buckets) {
+        this.#storage = buckets;
+    }
     #services;
     /** Other services, called as this one, through the runtime: `this.services.service("orders")`. */
     get services() {

package/dist/autonomous.d.ts

@@ -1,6 +1,7 @@
 import { type ApprovalRequest, type DecisionInput } from "./approvals.ts";
 import type { McpServerRef, ResultGuardrailRef } from "./mcp.ts";
 import { type ComponentClient, type Secrets } from "./client.ts";
+import { type Buckets } from "./storage.ts";
 import type { GuardrailRef, ToolRef } from "./handlers.ts";
 import type { Schema } from "./schema.ts";
 import { type Services } from "./services.ts";
@@ -58,6 +59,10 @@ export declare abstract class AutonomousAgent {
     get secrets(): Secrets;
     /** A unit test's store in place of the runtime's: `component.secrets = new InMemorySecrets()`. */
     set secrets(store: Secrets);
+    /** The service's buckets: `this.storage.default`, or `this.storage.bucket("photos")`. */
+    get storage(): Buckets;
+    /** A unit test's store in place of the runtime's: `component.storage = new InMemoryBuckets()`. */
+    set storage(buckets: Buckets);
     /** Other services, called as this one, through the runtime: `this.services.service("orders")`. */
     get services(): Services;
     /** A unit test's in place of the runtime's: `component.services = new ScriptedServices()`. */

package/dist/autonomous.js

@@ -16,6 +16,7 @@
 // request's tools run again — so a tool with a side effect should tolerate a repeat.
 import { requestFromJson } from "./approvals.js";
 import { secretsFor } from "./client.js";
+import { processStorage } from "./storage.js";
 import { decodeJsonValue, reviver } from "./json.js";
 import { toJsonSchema } from "./schema.js";
 import { servicesFor } from "./services.js";
@@ -68,6 +69,15 @@ export class AutonomousAgent {
     set secrets(store) {
         this.#secrets = store;
     }
+    #storage;
+    /** The service's buckets: `this.storage.default`, or `this.storage.bucket("photos")`. */
+    get storage() {
+        return this.#storage ?? processStorage();
+    }
+    /** A unit test's store in place of the runtime's: `component.storage = new InMemoryBuckets()`. */
+    set storage(buckets) {
+        this.#storage = buckets;
+    }
     #services;
     /** Other services, called as this one, through the runtime: `this.services.service("orders")`. */
     get services() {

package/dist/client-keys.d.ts

@@ -0,0 +1,89 @@
+import { type ComponentClient } from "./client.ts";
+import { Duration, Instant } from "./time.ts";
+/** The first protocol whose runtime keeps client keys; an older one answers `UNIMPLEMENTED`. */
+export declare const CLIENT_KEYS_SINCE = "1.20";
+/** When a client key stops being admitted. There is no default: the issuer says, every time. */
+export type Expiry = {
+    readonly kind: "after";
+    readonly millis: number;
+} | {
+    readonly kind: "at";
+    readonly epochMillis: number;
+} | {
+    readonly kind: "never";
+};
+export declare const Expiry: Readonly<{
+    /** After a while from now: `Expiry.after({ days: 365 })`, or a `Duration`. */
+    after(by: Duration | {
+        readonly days?: number;
+        readonly hours?: number;
+        readonly minutes?: number;
+        readonly seconds?: number;
+        readonly millis?: number;
+    }): Expiry;
+    /** At an instant. */
+    at(when: Instant | Date): Expiry;
+    /** Never: admitted until it is revoked. */
+    never: Expiry;
+}>;
+/** What to issue: the subject a tool is told, how long, and what for. */
+export interface IssueClientKey {
+    readonly subject: string;
+    readonly expiry: Expiry;
+    /** The MCP endpoint's path; needed only when the service has several. */
+    readonly endpoint?: string;
+    /** The tools the key may call; every tool when empty. */
+    readonly scope?: Iterable<string>;
+    /** What a tool reads as the principal's claims: at most 16, each name and value at most 256 characters. */
+    readonly attributes?: Readonly<Record<string, string>>;
+    readonly label?: string;
+}
+/** An issued key: its id, which lists and revokes it, and the key, shown here once. */
+export interface IssuedClientKey {
+    readonly id: string;
+    readonly clientKey: string;
+}
+/** One client key as a listing shows it: never the key, nor anything it could be derived from. */
+export interface ClientKeySummary {
+    readonly id: string;
+    readonly subject: string;
+    readonly attributes: Readonly<Record<string, string>>;
+    readonly label: string | null;
+    readonly endpoint: string;
+    readonly scope: readonly string[];
+    readonly issuedAt: Instant;
+    readonly expiresAt: Instant | null;
+    readonly lastUsed: Instant | null;
+    readonly revokedAt: Instant | null;
+}
+/**
+ * The service's client keys, kept by the runtime. A refusal is a `CommandError` with the runtime's
+ * code: `BAD_REQUEST` for a request that breaks a rule, `UNAVAILABLE` when the service's MCP
+ * endpoints admit no client key (there is then nothing to keep them), `NOT_FOUND` for an unknown id.
+ */
+export declare class ClientKeys {
+    #private;
+    /** The keys reached through `client`'s sidecar; with none, every call throws. */
+    constructor(client?: ComponentClient);
+    /** Issues a key; the answer is the one place the key is ever shown. */
+    issue(request: IssueClientKey): Promise<IssuedClientKey>;
+    /** Every client key of the service, revoked ones included; never a key itself. */
+    list(): Promise<ClientKeySummary[]>;
+    /** Revokes a key: refused on its next request on every instance. Revoking twice is not an error. */
+    revoke(id: string): Promise<void>;
+}
+/** Client keys for unit tests: a map, issuing keys that look like the runtime's and applying its rules. */
+export declare class InMemoryClientKeys extends ClientKeys {
+    #private;
+    constructor();
+    /** The key issued under `id`, which a test may present; the runtime shows it only once. */
+    keyOf(id: string): string | undefined;
+    issue(request: IssueClientKey): Promise<IssuedClientKey>;
+    list(): Promise<ClientKeySummary[]>;
+    revoke(id: string): Promise<void>;
+}
+/**
+ * @internal The client keys reached through `client`'s sidecar. Not a member of the client, which an
+ * entity holds too: only the component kinds that may issue keys call this.
+ */
+export declare function clientKeysFor(client: ComponentClient): ClientKeys;