broods 0.25.0 → 0.26.0

package/dist/index.d.ts

@@ -1,5 +1,12 @@
 import { SystemModelMessage, LanguageModelCallOptions, RequestOptions, streamText, JSONSchema7, ModelMessage, TextStreamPart, ToolSet } from 'ai';
 
+/**
+ * Account-owned code hook upload validation for Convex config-plane sync.
+ * Mirrors core's account hook upload contract without requiring the Node runtime.
+ */
+declare const AGENT_HOOK_EVENT_NAMES: readonly ["agent.started", "agent.step.finished", "agent.finished", "agent.failed", "agent.approval.required", "tool.call.started", "tool.call.finished", "tool.result", "subagent.task.started", "subagent.task.finished", "channel.message.received", "channel.message.sending"];
+type AgentHookEventName = (typeof AGENT_HOOK_EVENT_NAMES)[number];
+
 /**
  * Every Vercel AI SDK provider that ships language models, plus `custom`
  * (any OpenAI-compatible endpoint) and `minimax`. Image-, speech- and
@@ -269,8 +276,7 @@ interface AgentWebhookHookConfig {
     [key: string]: unknown;
 }
 type AgentLifecycleEventName = "agent.started" | "agent.step.finished" | "agent.finished" | "agent.failed" | "agent.approval.required" | "tool.call.started" | "tool.call.finished" | "tool.result" | "subagent.task.started" | "subagent.task.finished";
-type AgentChannelHookEventName = "channel.message.received" | "channel.message.sending";
-type AgentHookEventName = AgentLifecycleEventName | AgentChannelHookEventName;
+
 type AgentToolsConfig = Record<string, AgentToolConfig>;
 interface AgentToolConfig {
     enabled?: boolean;
@@ -385,7 +391,9 @@ interface AgentZaloChannelConfig {
 }
 
 /**
- * Cron-job records, input normalization, and patch-merge helpers.
+ * Cron-job records and patch-merge helpers for the runtime. Input
+ * normalization lives in the config plane (packages/convex/model/cronRules.ts,
+ * the single home of those rules).
  */
 
 type CronStatus = "active" | "paused";
@@ -427,48 +435,45 @@ type UpdateCronInput = {
 });
 
 /**
- * Predefined sandbox sizes — the canonical (vcpu, memoryMb, storageGb) catalog
- * shared by sandbox config validation, the workdir resource mapping, and the
- * Convex `sandboxInstances` mirror. Sizes are the user-facing knob (`config.size`)
- * that reconciles issue #78's tiers with each backend's real limits.
- *
- * The specs are canonical/advisory: workdir applies them as create-time resources
- * (clamping vcpu to its allowed set); MicroVM bakes size into the image so the
- * specs are display-only there; daytona/e2b/vercel size natively. The control-plane
- * mirror type lives here too so the Convex writer and the executors share one shape
- * without importing across the _shared/harness boundary.
+ * Sandbox-config validation for the Convex config plane. Ports core's former
+ * storage/sandbox-config.ts normalizer so the public /v1/sandboxes contract
+ * is unchanged. The public projection lives in ./responses.ts.
  */
-
-type SandboxSize = "tiny" | "xsmall" | "small" | "medium" | "large";
-
+declare const SANDBOX_PROVIDERS: readonly ["sandbox", "lambda", "e2b", "daytona", "vercel"];
+declare const SANDBOX_RUNTIMES: readonly ["bash", "python", "node"];
+declare const SANDBOX_PERMISSION_MODES: readonly ["edit", "ask", "bypass"];
+declare const SANDBOX_NETWORK_MODES: readonly ["allow-all", "deny-all", "restricted"];
+declare const SANDBOX_SIZE_NAMES: readonly ["tiny", "xsmall", "small", "medium", "large"];
+type SandboxProvider = (typeof SANDBOX_PROVIDERS)[number];
+type RuntimeName = (typeof SANDBOX_RUNTIMES)[number];
+type PermissionMode = (typeof SANDBOX_PERMISSION_MODES)[number];
+type NetworkMode = (typeof SANDBOX_NETWORK_MODES)[number];
+type SandboxSize = (typeof SANDBOX_SIZE_NAMES)[number];
 /**
- * Sandbox config: account-scoped, reusable sandbox definitions referenced by
- * agents via `config.sandbox`. A sandbox is a collection of Claude-Code-style
- * tools (bash/read/write/edit/glob/grep) backed by a provider. Validation and
- * the public projection live here.
- * Stored encrypted at rest because `envVars`/`options` may hold secrets.
+ * Idle and maximum lifetime controls for a persistent sandbox.
  */
-
-type SandboxProvider = "sandbox" | "lambda" | "e2b" | "daytona" | "vercel";
-type SandboxRuntimeName = "bash" | "python" | "node";
-type SandboxPermissionMode = "edit" | "ask" | "bypass";
-type SandboxNetworkMode = "allow-all" | "deny-all" | "restricted";
 interface SandboxLifecycleConfig {
     idleTimeoutSeconds?: number;
     maxLifetimeSeconds?: number;
 }
+/**
+ * Provider-normalized sandbox network policy.
+ */
 interface SandboxNetworkConfig {
-    mode: SandboxNetworkMode;
+    mode: NetworkMode;
     allowDomains?: string[];
     allowCidrs?: string[];
 }
+/**
+ * Account-scoped reusable sandbox configuration referenced by agents.
+ */
 interface SandboxConfig {
     provider: SandboxProvider;
     size?: SandboxSize;
     snapshot?: string;
-    runtimes?: SandboxRuntimeName[];
+    runtimes?: RuntimeName[];
     network?: SandboxNetworkConfig;
-    permissionMode?: SandboxPermissionMode;
+    permissionMode?: PermissionMode;
     persistent?: boolean;
     lifecycle?: SandboxLifecycleConfig;
     onCreate?: string[];
@@ -481,12 +486,12 @@ interface SandboxConfig {
 }
 
 /**
- * Workspace config: account-scoped, reusable workspace definitions referenced by
- * agents via `config.workspaces[].workspaceId`. A workspace is the persistent
- * S3-backed filesystem mounted into a sandbox; agents referencing the same
- * workspaceId share the same files. Holds no secrets, so it is stored in
- * plaintext (unlike sandbox config). Validation and the public projection live
- * here.
+ * Workspace-config validation for the Convex config plane. Ports core's
+ * former storage/workspace-config.ts normalizer so the public /v1/workspaces
+ * contract is unchanged. Workspace config holds no secrets (a roleArn is not
+ * a secret), so it is stored and returned in plaintext. Pure module — safe
+ * for the default Convex runtime. The public projection lives in
+ * ./responses.ts.
  */
 declare const WORKSPACE_STORAGE_PROVIDERS: readonly ["s3"];
 type WorkspaceStorageProvider = (typeof WORKSPACE_STORAGE_PROVIDERS)[number];
@@ -505,34 +510,56 @@ interface WorkspaceStorageConfig {
     prefix?: string;
     auth?: WorkspaceStorageAuth;
 }
-interface WorkspaceHarnessConfig {
-    workspace?: {
-        enabled?: boolean;
-    };
-    memory?: {
-        enabled?: boolean;
-    };
-}
 interface WorkspaceConfig {
     storage: WorkspaceStorageConfig;
     isolation?: boolean;
-    harness?: WorkspaceHarnessConfig;
+    harness?: {
+        workspace?: {
+            enabled?: boolean;
+        };
+        memory?: {
+            enabled?: boolean;
+        };
+    };
 }
 
 /**
- * Agent policy contracts and validation.
- * Runtime decisions are made by OPA using the same document/input shape.
+ * Agent-policy validation for the Convex config plane. Ports core's public
+ * CRUD normalizer so policy documents keep the account-management API
+ * contract. The public projection lives in ./responses.ts.
+ */
+declare const AGENT_POLICY_ACTIONS: readonly ["agent.invoke", "tool.call", "workspace.read", "workspace.write", "workspace.exec", "subagent.run", "skill.load"];
+/**
+ * API action namespace for account roles: one read/write pair per config-plane
+ * resource route. Roles carry the same PolicyDocument shape as agent policies;
+ * each caller passes its action set to `normalizePolicyDocument`.
+ */
+declare const API_POLICY_ACTIONS: readonly ["account:read", "account:write", "agents:read", "agents:write", "channels:read", "channels:write", "crons:read", "crons:write", "env:read", "env:write", "hooks:read", "hooks:write", "mcp:read", "mcp:write", "policies:read", "policies:write", "sandboxes:read", "sandboxes:write", "skills:read", "skills:write", "tools:read", "tools:write", "workspaces:read", "workspaces:write"];
+type AgentPolicyAction = (typeof AGENT_POLICY_ACTIONS)[number];
+type ApiPolicyAction = (typeof API_POLICY_ACTIONS)[number];
+type PolicyAction = AgentPolicyAction | ApiPolicyAction;
+/**
+ * One optional predicate on a policy rule.
  */
-declare const POLICY_ACTIONS: readonly ["agent.invoke", "tool.call", "workspace.read", "workspace.write", "workspace.exec", "subagent.run", "skill.load"];
-type PolicyAction = (typeof POLICY_ACTIONS)[number];
-type PolicyEffect = "allow" | "deny";
-type PolicyMode = "enforce" | "audit";
-type PolicyConditionOperator = "equals" | "notEquals" | "in" | "notIn" | "prefix" | "contains";
 interface PolicyCondition {
     attribute: string;
     operator: PolicyConditionOperator;
     value: string | number | boolean | string[] | number[] | boolean[];
 }
+type PolicyConditionOperator = "equals" | "notEquals" | "in" | "notIn" | "prefix" | "contains";
+/**
+ * Versioned policy document accepted by account-management CRUD.
+ */
+interface PolicyDocument {
+    version: 1;
+    /** How hard this policy bites where it is attached. Omitted reads as `audit`. */
+    mode?: "enforce" | "audit";
+    rules: PolicyRule[];
+}
+type PolicyEffect = "allow" | "deny";
+/**
+ * Resource selector fields supported by policy rules.
+ */
 interface PolicyResourceSelector {
     toolNames?: string[];
     toolIds?: string[];
@@ -541,7 +568,12 @@ interface PolicyResourceSelector {
     filePaths?: string[];
     subagentIds?: string[];
     skillPaths?: string[];
+    /** Config-plane resource ids for API-action rules; "*" matches every id. */
+    resourceIds?: string[];
 }
+/**
+ * One allow/deny rule inside a policy document.
+ */
 interface PolicyRule {
     id: string;
     effect: PolicyEffect;
@@ -549,26 +581,13 @@ interface PolicyRule {
     resources?: PolicyResourceSelector;
     conditions?: PolicyCondition[];
 }
-interface PolicyDocument {
-    version: 1;
-    /**
-     * How hard this policy bites. `audit` records what it would have done and
-     * blocks nothing; `enforce` lets its deny rules refuse, and switches the
-     * places it is attached to over to default-deny. Omitted reads as `audit`,
-     * so a freshly written policy can never break a running agent.
-     */
-    mode?: PolicyMode;
-    rules: PolicyRule[];
-}
 
 /**
- * Channel records: an account-scoped row per real place a team talks — one Slack
- * channel, one Discord channel, one repository. It binds that place to an agent
- * and adds instructions, workspaces, policies and roles scoped to it.
- * Distinct from `config.channels`, which holds one adapter's credentials.
- * A record narrows and adds; it never grants capability the agent lacks.
+ * Channel record validation for the config plane — the single home of the
+ * normalizers core's `shared/domain/channel-record.ts` re-exports. Kept free
+ * of Convex imports so the rules stay unit-testable; the public projection
+ * lives in ./responses.ts.
  */
-
 /** Where a reply lands: its own thread, or wherever the message came from. */
 declare const CHANNEL_REPLY_TARGETS: readonly ["thread", "source"];
 type ChannelReplyIn = (typeof CHANNEL_REPLY_TARGETS)[number];
@@ -1205,8 +1224,10 @@ declare function normalizeHttpServiceUrl(value: string): string;
  * server runtimes, as well as Node and Bun.
  *
  * Auth: every call sends `Authorization: Bearer {accountSecret}` to
- * `{baseUrl}/v1/...`. Secrets inside agent configs are encrypted at rest by
- * the platform and come back redacted (`********`) on reads.
+ * `{baseUrl}/v1/...` — or a short-lived `fp_sts_` role session token from
+ * `assumeRole()`, limited to what the role's policy allows. Secrets inside
+ * agent configs are encrypted at rest by the platform and come back redacted
+ * (`********`) on reads.
  */
 
 interface BroodsAccountClientOptions {
@@ -1214,6 +1235,12 @@ interface BroodsAccountClientOptions {
     baseUrl?: string;
     /** Account secret used as the Bearer token. Falls back to `BROODS_ACCOUNT_SECRET`. */
     accountSecret?: string;
+    /**
+     * Short-lived `fp_sts_` role session token (from {@link BroodsAccountClient.assumeRole})
+     * used as the Bearer instead of the account secret. The session can only do
+     * what its role's policy allows. Falls back to `BROODS_SESSION_TOKEN`.
+     */
+    sessionToken?: string;
     fetch?: typeof fetch;
 }
 /** Public account record returned by `GET /v1/account`. */
@@ -1293,6 +1320,29 @@ interface AccountPolicy {
     createdAt: string;
     updatedAt: string;
 }
+/**
+ * Public account-role record returned by the roles routes. The policy uses the
+ * API action namespace (`"agents:read"`, `"crons:write"`, ...); `projectId` and
+ * `stageId` bound which stage runtime keys may assume the role.
+ */
+interface AccountRole {
+    accountId: string;
+    roleId: string;
+    name: string;
+    projectId?: string;
+    stageId?: string;
+    status: "active" | "disabled";
+    policy: PolicyDocument;
+    createdAt: string;
+    updatedAt: string;
+}
+/** Short-lived role session minted by `POST /v1/account/assume-role`. */
+interface AssumeRoleResult {
+    /** `fp_sts_` bearer token; pass it as `sessionToken` to a new client. */
+    token: string;
+    /** ISO timestamp when the session stops working. */
+    expiresAt: string;
+}
 /**
  * One real place a team talks — a Slack channel, a Discord channel, a repo —
  * bound to an agent. The runtime reads it on the inbound webhook to decide who
@@ -1443,7 +1493,7 @@ declare class BroodsAccountApiError extends Error {
  */
 declare class BroodsAccountClient {
     private readonly baseUrl;
-    private readonly accountSecret;
+    private readonly bearerToken;
     private readonly fetchImpl;
     constructor(options?: BroodsAccountClientOptions);
     /** The account this secret belongs to. Its `accountId` is the first segment of channel webhook URLs. */
@@ -1453,6 +1503,15 @@ declare class BroodsAccountClient {
         username?: string;
         description?: string | null;
     }): Promise<BroodsAccount | null>;
+    /**
+     * Exchange a role for a short-lived `fp_sts_` session token. Callable with
+     * the account secret, a CLI login token, or a stage runtime key (the latter
+     * only into roles scoped to the key's own project/stage). Construct a new
+     * client with `{ sessionToken: result.token }` to act as the role.
+     */
+    assumeRole(roleId: string, options?: {
+        ttlSeconds?: number;
+    }): Promise<AssumeRoleResult>;
     /** Rotate the account secret. The returned `secret` is shown once and the current secret stops working immediately, so persist it before the process exits. */
     rotateSecret(): Promise<RotateSecretResult>;
     /** Delete this account and cascade-clean every account-scoped resource. `cleanup` reports per-resource deletion counts. */
@@ -1563,6 +1622,23 @@ declare class BroodsAccountClient {
         status?: string;
     }): Promise<AccountPolicy | null>;
     deletePolicy(policyId: string): Promise<boolean>;
+    /** Roles are account-secret only: a session cannot list, mint, or edit roles. */
+    listRoles(): Promise<AccountRole[]>;
+    /** Create a role whose policy uses the API action namespace. `projectId`/`stageId` must be provided together. */
+    createRole(input: {
+        name: string;
+        policy: PolicyDocument;
+        projectId?: string;
+        stageId?: string;
+    }): Promise<AccountRole>;
+    getRole(roleId: string): Promise<AccountRole | null>;
+    /** PATCH a role. `status: "disabled"` kills every live session of the role. Returns null when the role is gone. */
+    updateRole(roleId: string, patch: {
+        name?: string;
+        policy?: PolicyDocument;
+        status?: "active" | "disabled";
+    }): Promise<AccountRole | null>;
+    deleteRole(roleId: string): Promise<boolean>;
     listChannels(): Promise<AccountChannel[]>;
     /** Bind one real chat channel to an agent. One active record per place. */
     createChannel(input: {
@@ -1738,14 +1814,24 @@ type ResourceInput<Name extends string, Config> = {
     name: Name;
     description?: string;
 } & Config;
+/**
+ * Provider-specific sandbox knobs. `reservationKey` names the reserved machine a
+ * `persistent` sandbox reconnects to when no workspace is mounted; unset, each
+ * agent gets its own, and pinning one string on two sandboxes shares a machine.
+ * Keys are scoped to the account, so they cannot reach another account's machine.
+ */
+type SandboxDefinitionOptions = Record<string, unknown> & {
+    reservationKey?: string;
+};
 /**
  * Code-first sandbox config surface. Mirrors core's `SandboxConfig` but lets
  * `envVars` values be `env("NAME")` references (compiled to `${NAME}` placeholders
  * at sync time, exactly like provider `apiKey`). Add overrides here if more
  * sandbox fields should accept env refs.
  */
-type SandboxDefinitionConfig = Omit<SandboxConfig, "envVars"> & {
+type SandboxDefinitionConfig = Omit<SandboxConfig, "envVars" | "options"> & {
     envVars?: Record<string, string | EnvRef | undefined>;
+    options?: SandboxDefinitionOptions;
 };
 type HarnessType = NonNullable<AgentConfig["harness"]>["type"];
 type HarnessDefinition = Omit<NonNullable<AgentConfig["harness"]>, "type"> & {
@@ -2195,4 +2281,4 @@ declare function isConnectionDefinition(value: unknown): value is AnyConnectionD
 declare function isBroodsConfig(value: unknown): value is BroodsConfigDefinition;
 
 export { BroodsAccountApiError, BroodsAccountClient, BroodsClient, BroodsWebSocketClient, DEFAULT_CORE_BASE_URL, IngressAcceptedError, MAX_OBSERVABILITY_BACKFILL, BroodsWebSocketClient as WebSocketClient, BroodsWebSocketClient as WebsocketClient, defineAgent, defineBroods, defineCron, defineDiscordChannel, defineDiscordConnection, defineGitHubChannel, defineGitHubConnection, defineHarness, definePancakeChannel, definePancakeConnection, definePolicy, defineSandbox, defineSkill, defineSlackChannel, defineSlackConnection, defineTelegramChannel, defineTelegramConnection, defineTool, defineWorkspace, defineZaloChannel, defineZaloConnection, env, envPlaceholder, isBroodsConfig, isConnectionDefinition, isLogLevel, isObservabilityClientMessage, isResource, isRootSpanKind, normalizeHttpServiceUrl, readSseStream, resolveRunEvents, toWebSocketBaseUrl };
-export type { Account, AccountAgent, AccountChannel, AccountEnvVar, AccountPolicy, AccountSandbox, AccountTool, AccountWorkspace, Agent, AgentChannelsConfig, AgentCodeHookConfig, AgentConfig, AgentConfigDoc, AgentDefinitionConfig, AgentDiscordChannelConfig, AgentGitHubChannelConfig, AgentHandle, AgentHookEventName, AgentHooks, AgentHooksConfig, AgentPancakeChannelConfig, AgentProviderSettings, AgentReference, AgentResource, AgentRunEventInput, AgentRunInput, AgentRunModelOverrides, AgentRunOverrides, AgentRunResult, AgentSkillsDefinitionConfig, AgentSlackChannelConfig, AgentStreamPart, AgentSubagentDefinitionConfig, AgentTelegramChannelConfig, AgentWebhookHookConfig, AgentWorkspaceInput, AgentWorkspaceRef, AgentWorkspaceRefInput, AgentZaloChannelConfig, AnyConnectionDefinition, AnyResource, AsyncAgentRun, AsyncPollOptions, AsyncRequestAccepted, AsyncStatus, BroodsAccount, BroodsAccountClientOptions, BroodsClientOptions, BroodsConfigDefinition, BroodsProjectConfig, BroodsWebSocketClientOptions, ChannelAgentInput, ChannelDefinitionConfig, ChannelMessageReceived, ChannelPartition, ChannelRecordConfig, ChannelReference, ChannelReplyIn, ChannelResource, ChannelType, CliManifest, CliManifestResource, CliResourceKind, ConnectionDefinition, CreateAgentResult, CreateClientCronInput, CreateCronInput, CreateToolInput, Cron, CronDefinitionConfig, CronDoc, CronLastStatus, CronResource, CronRun, CronStatus, CustomTool, DeleteAccountResult, DiscordChannelInput, DiscordConnectionDefinition, DiscordConnectionInput, DiscordMessageSource, DiscordSource, Doc, EnvAccessor, EnvRef, EnvRefString, GeneratedIds, GitHubChannelInput, GitHubConnectionDefinition, GitHubConnectionInput, GitHubMessageSource, GitHubSource, HarnessDefinition, HarnessType, HookContext, Id, IngressMode, IngressStatus, LogLevel, ObservabilityBackfillMessage, ObservabilityClientMessage, ObservabilityErrorMessage, ObservabilityLogEntry, ObservabilityLogMessage, ObservabilityReadyMessage, ObservabilityServerMessage, ObservabilitySpanMessage, ObservabilitySpanRow, ObservabilitySubscribeMessage, ObservabilityUnsubscribeMessage, PancakeChannelInput, PancakeConnectionDefinition, PancakeConnectionInput, PancakeMessageSource, PancakeSource, PolicyDefinitionConfig, PolicyDocument, PolicyResource, ProjectDoc, ProviderConfigInput, ProviderSettingsInput, ResourceApi, ResourceDefinition, ResourceInput, ResourceKind, RotateSecretResult, Sandbox, SandboxConfig, SandboxConfigDoc, SandboxDefinitionConfig, SandboxLifecycleResult, SandboxResource, SandboxSnapshotResult, SandboxTerminalTicket, Skill, SkillDefinitionConfig, SkillResource, SkillUploadInput, SlackChannelInput, SlackConnectionDefinition, SlackConnectionInput, SlackMessageSource, SlackSource, StageDoc, TelegramChannelInput, TelegramConnectionDefinition, TelegramConnectionInput, TelegramMessageSource, TelegramSource, ToolApprovalSummary, ToolDefinitionConfig, ToolExecuteContext, ToolExecuteOptions, ToolResource, ToolScope, UpdateAgentInput, UpdateCronInput, UpdateToolInput, WebSocketAttachInput, WebSocketClientAttachMessage, WebSocketClientCancelMessage, WebSocketClientControlMessage, WebSocketClientExecuteMessage, WebSocketClientMessage, WebSocketConstructorLike, WebSocketHandlers, WebSocketLike, WebSocketOutputMessage, WebSocketRunInput, WebSocketServerMessage, WebSocketStreamMessage, WebSocketSubscription, Workspace, WorkspaceConfig, WorkspaceConfigDoc, WorkspaceDefinitionConfig, WorkspaceFileEntry, WorkspaceResource, ZaloChannelInput, ZaloConnectionDefinition, ZaloConnectionInput, ZaloMessageSource, ZaloSource };
+export type { Account, AccountAgent, AccountChannel, AccountEnvVar, AccountPolicy, AccountRole, AccountSandbox, AccountTool, AccountWorkspace, Agent, AgentChannelsConfig, AgentCodeHookConfig, AgentConfig, AgentConfigDoc, AgentDefinitionConfig, AgentDiscordChannelConfig, AgentGitHubChannelConfig, AgentHandle, AgentHookEventName, AgentHooks, AgentHooksConfig, AgentPancakeChannelConfig, AgentProviderSettings, AgentReference, AgentResource, AgentRunEventInput, AgentRunInput, AgentRunModelOverrides, AgentRunOverrides, AgentRunResult, AgentSkillsDefinitionConfig, AgentSlackChannelConfig, AgentStreamPart, AgentSubagentDefinitionConfig, AgentTelegramChannelConfig, AgentWebhookHookConfig, AgentWorkspaceInput, AgentWorkspaceRef, AgentWorkspaceRefInput, AgentZaloChannelConfig, AnyConnectionDefinition, AnyResource, AssumeRoleResult, AsyncAgentRun, AsyncPollOptions, AsyncRequestAccepted, AsyncStatus, BroodsAccount, BroodsAccountClientOptions, BroodsClientOptions, BroodsConfigDefinition, BroodsProjectConfig, BroodsWebSocketClientOptions, ChannelAgentInput, ChannelDefinitionConfig, ChannelMessageReceived, ChannelPartition, ChannelRecordConfig, ChannelReference, ChannelReplyIn, ChannelResource, ChannelType, CliManifest, CliManifestResource, CliResourceKind, ConnectionDefinition, CreateAgentResult, CreateClientCronInput, CreateCronInput, CreateToolInput, Cron, CronDefinitionConfig, CronDoc, CronLastStatus, CronResource, CronRun, CronStatus, CustomTool, DeleteAccountResult, DiscordChannelInput, DiscordConnectionDefinition, DiscordConnectionInput, DiscordMessageSource, DiscordSource, Doc, EnvAccessor, EnvRef, EnvRefString, GeneratedIds, GitHubChannelInput, GitHubConnectionDefinition, GitHubConnectionInput, GitHubMessageSource, GitHubSource, HarnessDefinition, HarnessType, HookContext, Id, IngressMode, IngressStatus, LogLevel, ObservabilityBackfillMessage, ObservabilityClientMessage, ObservabilityErrorMessage, ObservabilityLogEntry, ObservabilityLogMessage, ObservabilityReadyMessage, ObservabilityServerMessage, ObservabilitySpanMessage, ObservabilitySpanRow, ObservabilitySubscribeMessage, ObservabilityUnsubscribeMessage, PancakeChannelInput, PancakeConnectionDefinition, PancakeConnectionInput, PancakeMessageSource, PancakeSource, PolicyDefinitionConfig, PolicyDocument, PolicyResource, ProjectDoc, ProviderConfigInput, ProviderSettingsInput, ResourceApi, ResourceDefinition, ResourceInput, ResourceKind, RotateSecretResult, Sandbox, SandboxConfig, SandboxConfigDoc, SandboxDefinitionConfig, SandboxDefinitionOptions, SandboxLifecycleResult, SandboxResource, SandboxSnapshotResult, SandboxTerminalTicket, Skill, SkillDefinitionConfig, SkillResource, SkillUploadInput, SlackChannelInput, SlackConnectionDefinition, SlackConnectionInput, SlackMessageSource, SlackSource, StageDoc, TelegramChannelInput, TelegramConnectionDefinition, TelegramConnectionInput, TelegramMessageSource, TelegramSource, ToolApprovalSummary, ToolDefinitionConfig, ToolExecuteContext, ToolExecuteOptions, ToolResource, ToolScope, UpdateAgentInput, UpdateCronInput, UpdateToolInput, WebSocketAttachInput, WebSocketClientAttachMessage, WebSocketClientCancelMessage, WebSocketClientControlMessage, WebSocketClientExecuteMessage, WebSocketClientMessage, WebSocketConstructorLike, WebSocketHandlers, WebSocketLike, WebSocketOutputMessage, WebSocketRunInput, WebSocketServerMessage, WebSocketStreamMessage, WebSocketSubscription, Workspace, WorkspaceConfig, WorkspaceConfigDoc, WorkspaceDefinitionConfig, WorkspaceFileEntry, WorkspaceResource, ZaloChannelInput, ZaloConnectionDefinition, ZaloConnectionInput, ZaloMessageSource, ZaloSource };

package/dist/index.js

@@ -1 +1 @@
-import{S,r,y}from"./chunk-vyvy543y.js";import{p,b,c,x,d,m,_,g,T,k,E,C,R,A,M,P,O,N,D,j,z,U,L,Z,F,B,W,q,K,V,t,i,v}from"./chunk-t6xktzr3.js";var u=500;function f(e){if(typeof e!=="object"||e===null)return!1;let n=e;if(n.type==="subscribe"){let s=n.stream;if(s!=="logs"&&s!=="traces")return!1;let o=n.backfill;if(o!==void 0&&(typeof o!=="number"||!Number.isSafeInteger(o)||o<0||o>500))return!1;if(n.liveOnly!==void 0&&typeof n.liveOnly!=="boolean")return!1;let a=n.minLevel;if(a!==void 0&&!l(a))return!1;return!0}if(n.type==="unsubscribe"){let s=n.stream;return s==="logs"||s==="traces"}return!1}function l(e){return e==="DEBUG"||e==="INFO"||e==="WARN"||e==="ERROR"}function I(e){return e==="task"||e==="cron"||e==="subtask"}export{r as BroodsAccountApiError,y as BroodsAccountClient,d as BroodsClient,_ as BroodsWebSocketClient,c as DEFAULT_CORE_BASE_URL,x as IngressAcceptedError,u as MAX_OBSERVABILITY_BACKFILL,_ as WebSocketClient,_ as WebsocketClient,L as defineAgent,U as defineBroods,V as defineCron,P as defineDiscordChannel,k as defineDiscordConnection,O as defineGitHubChannel,E as defineGitHubConnection,Z as defineHarness,N as definePancakeChannel,C as definePancakeConnection,K as definePolicy,B as defineSandbox,W as defineSkill,D as defineSlackChannel,R as defineSlackConnection,j as defineTelegramChannel,A as defineTelegramConnection,q as defineTool,F as defineWorkspace,z as defineZaloChannel,M as defineZaloConnection,T as env,S as envPlaceholder,v as isBroodsConfig,i as isConnectionDefinition,l as isLogLevel,f as isObservabilityClientMessage,t as isResource,I as isRootSpanKind,m as normalizeHttpServiceUrl,b as readSseStream,p as resolveRunEvents,g as toWebSocketBaseUrl};
+import{S,t,y}from"./chunk-a6p0aaky.js";import{p,b,c,x,d,m,_,g,T,k,E,C,R,A,M,P,O,N,D,j,z,U,L,Z,F,B,W,q,K,V,r,i,v}from"./chunk-hkywabw6.js";var u=500;function f(e){if(typeof e!=="object"||e===null)return!1;let n=e;if(n.type==="subscribe"){let s=n.stream;if(s!=="logs"&&s!=="traces")return!1;let o=n.backfill;if(o!==void 0&&(typeof o!=="number"||!Number.isSafeInteger(o)||o<0||o>500))return!1;if(n.liveOnly!==void 0&&typeof n.liveOnly!=="boolean")return!1;let a=n.minLevel;if(a!==void 0&&!l(a))return!1;return!0}if(n.type==="unsubscribe"){let s=n.stream;return s==="logs"||s==="traces"}return!1}function l(e){return e==="DEBUG"||e==="INFO"||e==="WARN"||e==="ERROR"}function I(e){return e==="task"||e==="cron"||e==="subtask"}export{t as BroodsAccountApiError,y as BroodsAccountClient,d as BroodsClient,_ as BroodsWebSocketClient,c as DEFAULT_CORE_BASE_URL,x as IngressAcceptedError,u as MAX_OBSERVABILITY_BACKFILL,_ as WebSocketClient,_ as WebsocketClient,L as defineAgent,U as defineBroods,V as defineCron,P as defineDiscordChannel,k as defineDiscordConnection,O as defineGitHubChannel,E as defineGitHubConnection,Z as defineHarness,N as definePancakeChannel,C as definePancakeConnection,K as definePolicy,B as defineSandbox,W as defineSkill,D as defineSlackChannel,R as defineSlackConnection,j as defineTelegramChannel,A as defineTelegramConnection,q as defineTool,F as defineWorkspace,z as defineZaloChannel,M as defineZaloConnection,T as env,S as envPlaceholder,v as isBroodsConfig,i as isConnectionDefinition,l as isLogLevel,f as isObservabilityClientMessage,r as isResource,I as isRootSpanKind,m as normalizeHttpServiceUrl,b as readSseStream,p as resolveRunEvents,g as toWebSocketBaseUrl};

package/package.json

@@ -1,28 +1,42 @@
 {
   "name": "broods",
-  "version": "0.25.0",
+  "version": "0.26.0",
   "description": "CLI + TypeScript SDK for the broods agent platform.",
-  "type": "module",
-  "license": "MIT",
+  "keywords": [
+    "agents",
+    "ai",
+    "broods",
+    "cli",
+    "sdk"
+  ],
   "homepage": "https://github.com/beeblastco/broods#readme",
+  "bugs": {
+    "url": "https://github.com/beeblastco/broods/issues"
+  },
+  "license": "MIT",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/beeblastco/broods.git",
     "directory": "packages/broods"
   },
-  "bugs": {
-    "url": "https://github.com/beeblastco/broods/issues"
-  },
-  "keywords": [
-    "agents",
-    "ai",
-    "sdk",
-    "cli",
-    "broods"
-  ],
   "bin": {
     "broods": "dist/cli/index.js"
   },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE.md"
+  ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "typesVersions": {
+    "*": {
+      "account": [
+        "./dist/account.d.ts"
+      ]
+    }
+  },
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
@@ -33,35 +47,15 @@
       "import": "./dist/account.js"
     }
   },
-  "typesVersions": {
-    "*": {
-      "account": [
-        "./dist/account.d.ts"
-      ]
-    }
-  },
-  "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "files": [
-    "dist",
-    "README.md",
-    "LICENSE.md"
-  ],
   "scripts": {
     "build": "bun scripts/build.ts && rollup -c rollup.dts.config.mjs && rm -rf .dts-temp",
     "check": "tsc --noEmit",
     "pack:check": "bun run build && publint && attw --pack .",
     "test": "bun test"
   },
-  "engines": {
-    "node": ">=22.15"
-  },
   "dependencies": {
     "esbuild": "^0.28.2"
   },
-  "peerDependencies": {
-    "ai": "^7.0.77"
-  },
   "devDependencies": {
     "@ai-sdk/tui": "1.0.78",
     "@arethetypeswrong/cli": "^0.18.5",
@@ -76,5 +70,11 @@
     "rollup": "^4.62.4",
     "rollup-plugin-dts": "^6.5.1",
     "typescript": "^7.0.2"
+  },
+  "peerDependencies": {
+    "ai": "^7.0.77"
+  },
+  "engines": {
+    "node": ">=22.15"
   }
 }

package/dist/chunk-t6xktzr3.js

@@ -1,5 +0,0 @@
-function p(r){if(r.events&&r.input!==void 0)throw Error("Run input accepts either `input` or `events`, not both");if(r.events&&r.events.length>0)return r.events;if(typeof r.input==="string")return[{role:"user",content:[{type:"text",text:r.input}]}];throw Error("Run input requires `input` (string) or a non-empty `events` array")}async function*b(r){let y=r.getReader(),S=new TextDecoder,I="";try{while(!0){let{done:H,value:G}=await y.read();if(H)break;I+=S.decode(G,{stream:!0});let J=I.split(`
-`);I=J.pop()??"";for(let Y of J)if(Y.startsWith("data: "))yield Y.slice(6)}}finally{y.releaseLock()}}import{mkdir as Pe,readFile as Ue,writeFile as We}from"node:fs/promises";import{homedir as Me}from"node:os";import{dirname as $e,join as _e}from"node:path";var o="broods",s="_generated",l=_e(Me(),".broods","config.json"),pe="broods.app",fe="dashboard",Ke="gateway";async function w(){let r=process.env.BROODS_TOKEN,y=process.env.BROODS_BASE_URL;if(r&&y)return{baseUrl:n(y),token:r,createdAt:new Date().toISOString()};try{let S=JSON.parse(await Ue(l,"utf8"));if(typeof S.baseUrl!=="string"||!S.baseUrl)return null;return S}catch{return null}}async function f(r){await Pe($e(l),{recursive:!0}),await We(l,`${JSON.stringify(r,null,2)}
-`,"utf8")}function a(){return process.env.BROODS_STAGE}function n(r){let y=r.length;while(y>0&&r.charCodeAt(y-1)===47)y-=1;return r.slice(0,y)}function h(r){try{let y=new URL(r);if(!y.hostname.startsWith(`${fe}.`))return;let S=y.hostname.slice(fe.length+1);if(S!==pe&&!S.endsWith(`.${pe}`))return;return y.hostname=`${Ke}.${S}`,n(y.origin)}catch{return}}import{existsSync as ye,readFileSync as ge,statSync as He}from"node:fs";import{join as he,resolve as Ce}from"node:path";var le=new Map,Be=new Set(Object.keys(process.env)),me=new Set;function e(r=process.cwd()){je(r);let y=Ge();return{dashboardUrl:process.env.BROODS_DASHBOARD_URL??y?.dashboardUrl,baseUrl:process.env.BROODS_BASE_URL??y?.baseUrl,token:process.env.BROODS_TOKEN??y?.token,project:process.env.BROODS_PROJECT,stage:a()}}function u(r,y=process.cwd()){let S=process.env[r];if(S===void 0)return!1;let I=Ce(y);for(let H of[".env.local",".env"]){let G=he(I,H);if(!ye(G))continue;let J=Se(ge(G,"utf8"));if(J[r]!==void 0)return J[r]!==S}return!0}function je(r){let y=Ce(r),S=process.env.BROODS_RELOAD_ENV==="1";for(let I of[".env",".env.local"]){let H=he(y,I);if(!ye(H)){le.delete(H);continue}let G=He(H).mtimeMs,J=le.get(H);if(J&&J.mtimeMs===G)continue;le.set(H,{mtimeMs:G});for(let[Y,Q]of Object.entries(Se(ge(H,"utf8"))))if(S||!Be.has(Y)||me.has(Y))process.env[Y]=Q,me.add(Y)}}function Se(r){let y={};for(let S of r.split(/\r?\n/)){let I=S.trim();if(!I||I.startsWith("#"))continue;let H=I.startsWith("export ")?I.slice(7).trim():I,G=H.indexOf("=");if(G<=0)continue;let J=H.slice(0,G).trim();if(!/^[A-Za-z_][A-Za-z0-9_]*$/.test(J))continue;y[J]=Le(H.slice(G+1).trim())}return y}function Le(r){if(r.startsWith('"')&&r.endsWith('"'))return r.slice(1,-1).replace(/\\n/g,`
-`).replace(/\\"/g,'"');if(r.startsWith("'")&&r.endsWith("'"))return r.slice(1,-1);let y=r.indexOf(" #");return y>=0?r.slice(0,y).trimEnd():r}function Ge(){try{let r=JSON.parse(ge(l,"utf8"));if(typeof r.baseUrl!=="string"||typeof r.token!=="string")return null;return{baseUrl:n(r.baseUrl),...typeof r.dashboardUrl==="string"?{dashboardUrl:n(r.dashboardUrl)}:{},token:r.token}}catch{return null}}var c="https://gateway.broods.app";class x extends Error{accepted;constructor(r){super(`Ingress ${r.eventId} was accepted asynchronously with status ${r.status??"queued"}`);this.accepted=r;this.name="IngressAcceptedError"}}class d{baseUrl;apiKey;fetchImpl;constructor(r={}){e(),this.baseUrl=m(r.baseUrl||r.host||process.env.BROODS_BASE_URL||process.env.BROODS_HOST||c),this.apiKey=r.apiKey||process.env.BROODS_API_KEY||void 0,this.fetchImpl=r.fetch??fetch}channelWebhookUrl(r){return`${this.baseUrl}${r.webhookPath.startsWith("/")?"":"/"}${r.webhookPath}`}accountWebhookUrl(r,y){let S=[r,y].map(encodeURIComponent);return`${this.baseUrl}/webhooks/${S.join("/")}`}stageWebhookUrl(r,y,S){let I=[r,"dev",y,S].map(encodeURIComponent);return`${this.baseUrl}/webhooks/${I.join("/")}`}agent(r,y){if(typeof r==="string"){let I=r,H=y??"";if(!H)throw Error(`Agent ${I} is missing a generated id. Run broods dev --once or broods deploy to sync it first.`);return{id:H,run:(G)=>this.run({...G,agentName:I,agentId:H}),runAsync:(G)=>this.runAsync({...G,agentName:I,agentId:H}),stream:(G)=>this.stream({...G,agentName:I,agentId:H})}}let S=r;if(!S.id)throw Error(`Agent ${S.name} is missing a generated id. Run broods dev --once or broods deploy to sync it first.`);return{id:S.id,run:(I)=>this.run(S,I),runAsync:(I)=>this.runAsync(S,I),stream:(I)=>this.stream(S,I)}}async run(r,y){let S=[],I="",H=y?this.stream(r,y):this.stream(r);for await(let G of H)if(S.push(G),G.type==="text-delta")I+=G.text;return{text:I,events:S}}async*stream(r,y){let S=y?{...y,agentId:r.id,agentName:r.name}:r,I=Re(S,"cli"),H=y?this.scopedUrl(r):this.baseUrl,G=await this.openStream(I,H);if(!G.ok)throw Error(`Run failed: ${G.status} ${await G.text()}`);if(G.status===202)throw new x(be(await G.json(),I));if(!G.body)throw Error("Run response has no body");for await(let J of b(G.body)){let Y;try{Y=JSON.parse(J)}catch{continue}if(Y.type==="error")throw Error(`Agent run failed: ${Ve(Y.error)}`);yield Y}}async runAsync(r,y){let S=y?{...y,agentId:r.id,agentName:r.name}:r,I=Re(S,"async"),H=y?this.scopedUrl(r,"/async"):`${this.baseUrl}/async`,G=await this.fetchJson(H,{method:"POST",headers:this.apiKeyHeaders(),body:JSON.stringify(I)});if(G.status!==202)throw Error(`Async run failed: ${G.status} ${await Fe(G,"202 JSON")}`);let J=be(await G.json(),I);return{...J,conversationKey:I.conversationKey,poll:()=>this.getAsyncStatus(J),wait:(Y)=>this.waitForAsyncStatus(J,Y)}}async getAsyncStatus(r,y={}){let S=this.resolveStatusUrl(r,y),I=await this.fetchJson(S,{method:"GET",headers:this.apiKeyHeaders()});if(I.status===404)return{status:"not_found"};if(!I.ok)throw Error(`Status check failed: ${I.status} ${await I.text()}`);return await I.json()}async waitForAsyncStatus(r,y={}){let S=Date.now()+(y.timeoutMs??180000),I=y.intervalMs??2000;while(Date.now()<S){if(y.signal?.aborted)throw Error("Async status polling aborted.");let H=await this.getAsyncStatus(r,y);if(H.status==="awaiting_approval"||H.status==="completed"||H.status==="failed"||H.status==="expired"||H.status==="not_found")return H;await ze(I,y.signal)}throw Error("Polling timeout")}async createCron(r){let y=await this.fetchJson(`${this.baseUrl}/v1/crons`,{method:"POST",headers:this.apiKeyHeaders(),body:JSON.stringify(Ze(r))});if(y.status!==201)throw Error(`Create cron job failed: ${y.status} ${await te(y)}`);return await y.json()}async listCrons(){let r=await this.fetchJson(`${this.baseUrl}/v1/crons`,{method:"GET",headers:this.apiKeyHeaders()});if(!r.ok)throw Error(`List cron jobs failed: ${r.status} ${await te(r)}`);return(await r.json()).crons}async getCron(r){let y=await this.fetchJson(`${this.baseUrl}/v1/crons/${encodeURIComponent(r)}`,{method:"GET",headers:this.apiKeyHeaders()});if(y.status===404)return null;if(!y.ok)throw Error(`Get cron job failed: ${y.status} ${await te(y)}`);return await y.json()}async listCronRuns(r,y={}){let S=new URLSearchParams;if(y.limit!==void 0)S.set("limit",String(y.limit));let I=S.size>0?`?${S}`:"",H=await this.fetchJson(`${this.baseUrl}/v1/crons/${encodeURIComponent(r)}/runs${I}`,{method:"GET",headers:this.apiKeyHeaders()});if(!H.ok)throw Error(`List cron job runs failed: ${H.status} ${await te(H)}`);return(await H.json()).runs}async updateCron(r,y){let S=await this.fetchJson(`${this.baseUrl}/v1/crons/${encodeURIComponent(r)}`,{method:"PATCH",headers:this.apiKeyHeaders(),body:JSON.stringify(y)});if(!S.ok)throw Error(`Update cron job failed: ${S.status} ${await te(S)}`);return await S.json()}async deleteCron(r){let y=await this.fetchJson(`${this.baseUrl}/v1/crons/${encodeURIComponent(r)}`,{method:"DELETE",headers:this.apiKeyHeaders()});if(y.status===404)return!1;if(!y.ok)throw Error(`Delete cron job failed: ${y.status} ${await te(y)}`);return(await y.json()).deleted}scopedUrl(r,y=""){if(r.projectSlug&&r.stageSlug&&r.endpointId)return`${this.baseUrl}/v1/${encodeURIComponent(r.projectSlug)}/agents/${encodeURIComponent(r.stageSlug)}/${encodeURIComponent(r.endpointId)}${y}`;return`${this.baseUrl}${y}`}async openStream(r,y){if(this.apiKey)return await this.fetchCore(r,y,{Authorization:`Bearer ${this.apiKey}`});throw Error(`BroodsClient streams directly from the core service at ${this.baseUrl}. Provide apiKey. For a self-hosted core service, set host/baseUrl or BROODS_HOST/BROODS_BASE_URL.`)}async fetchCore(r,y,S){try{return await this.fetchImpl(y,{method:"POST",headers:{"Content-Type":"application/json",Accept:"text/event-stream",...S},body:JSON.stringify(r)})}catch(I){throw Error(`Cannot access the broods core service at ${y}. The SDK uses ${c} by default; set host/baseUrl or BROODS_HOST/BROODS_BASE_URL to your own core service URL if your account uses a custom deployment. Cause: ${I instanceof Error?I.message:String(I)}`)}}apiKeyHeaders(){if(!this.apiKey)throw Error("BroodsClient requires apiKey or BROODS_API_KEY.");return{"Content-Type":"application/json",Authorization:`Bearer ${this.apiKey}`}}async fetchJson(r,y){try{return await this.fetchImpl(r,{...y,headers:{"Content-Type":"application/json",...y.headers}})}catch(S){throw Error(`Cannot access the broods core service at ${r}. Cause: ${S instanceof Error?S.message:String(S)}`)}}resolveStatusUrl(r,y){if(typeof r!=="string")return r.statusUrl;if(/^https?:\/\//.test(r))return r;if(!y.agentId)throw Error("Polling by status id requires agentId.");return Je(this.baseUrl,r,y.agentId)}}function m(r){let y=r.trim(),S=/^[A-Za-z][A-Za-z0-9+.-]*:\/\//.test(y)?y:`https://${y}`;return n(S)}function Re(r,y){let S=r.eventId??`${y}-${Date.now()}`;return{agentId:r.agentId,eventId:S,conversationKey:r.conversationKey??S,events:p(r),...r.mode!==void 0?{mode:r.mode}:{},...r.idempotencyKey!==void 0?{idempotencyKey:r.idempotencyKey}:{},...r.system!==void 0?{system:r.system}:{},...r.model!==void 0?{model:r.model}:{}}}function be(r,y){if(!r||typeof r!=="object")throw Error("Async response must be an object");let S=r.statusUrl;if(typeof S!=="string"||S.length===0)throw Error("Async response missing statusUrl");let I=qe(S);if(!I.statusId)throw Error("Async response statusUrl missing status id");let H=typeof r.eventId==="string"?r.eventId:I.statusId,G=r.status,J=r.requestedMode;return{statusUrl:S,statusId:I.statusId,eventId:H,agentId:I.agentId??y.agentId,...G==="accepted"||G==="queued"||G==="applied"||G==="processing"?{status:G}:{},...J==="reject"||J==="followup"||J==="collect"||J==="steer"?{requestedMode:J}:{}}}function qe(r){let y=new URL(r),S=y.pathname.match(/\/status\/([^/]+)$/);return{statusId:S?.[1]?decodeURIComponent(S[1]):void 0,agentId:y.searchParams.get("agentId")??void 0}}function Je(r,y,S){return`${m(r)}/status/${encodeURIComponent(y)}?agentId=${encodeURIComponent(S)}`}async function Fe(r,y){if((r.headers.get("content-type")??"").toLowerCase().includes("text/event-stream"))return await r.body?.cancel().catch(()=>{}),`expected ${y}, but the server returned an SSE stream. This usually means the core deployment routed /async to the direct streaming runner instead of the async handler.`;let I=await r.text();if(I.length<=2000)return I;return`${I.slice(0,2000)}... [truncated ${I.length-2000} chars]`}async function te(r){let y=await r.text();if(y.includes("Request body must include eventId and conversationKey"))return`${y}. Cron job APIs must be served by the configured baseUrl. Prefer defining stable cron jobs with defineCron(...) in broods/ and syncing with \`broods dev\` or \`broods deploy\`.`;return y}function Ze(r){if("agentId"in r)return r;let y=r.agent,S=typeof y==="string"?y:y.id,{agent:I,...H}=r;return{...H,agentId:S}}function ze(r,y){return new Promise((S,I)=>{if(y?.aborted){I(Error("Async status polling aborted."));return}let H=setTimeout(S,r);y?.addEventListener("abort",()=>{clearTimeout(H),I(Error("Async status polling aborted."))},{once:!0})})}function Ve(r){if(typeof r==="string")return r;if(!r||typeof r!=="object")return String(r);let y=r,S=y.data?.error?.message??y.message??y.responseBody??JSON.stringify(r),I=y.name?`${y.name}: `:"",H=y.statusCode?` (HTTP ${y.statusCode})`:"";return`${I}${S}${H}`}var Ye=2000,ke=0,ie=1;class _{baseUrl;apiKey;WebSocketImpl;connectTimeoutMs;constructor(r={}){if(e(),this.baseUrl=ve(r.baseUrl||r.host||process.env.BROODS_BASE_URL||process.env.BROODS_HOST||c),this.apiKey=r.apiKey||process.env.BROODS_API_KEY||"",!this.apiKey)throw Error("BroodsWebSocketClient requires apiKey or BROODS_API_KEY.");this.WebSocketImpl=r.WebSocket,this.connectTimeoutMs=r.connectTimeoutMs??Ye}subscribe(r,y={}){let S=this.resolveWebSocket(),I=this.buildUrl(r),H=Xe(r),G=Ie(this.baseUrl),J=new S(I),Y=!1,Q=!1,ee=setTimeout(()=>{if(!Y)se(G)},this.connectTimeoutMs),de=(X=1000,ce="client closed")=>{if(Q)return;if(Q=!0,clearTimeout(ee),r.signal?.removeEventListener("abort",ae),J.readyState===ie||J.readyState===ke)J.close(X,ce)},se=(X)=>{y.onError?.(X),de(1011,"websocket error")},Oe=()=>{y.onDone?.(),de(1000,"done")},ae=()=>{if(J.readyState===ie)J.send(JSON.stringify({type:"cancel"}));se(Error("WebSocket run aborted."))};return r.signal?.addEventListener("abort",ae,{once:!0}),J.onopen=()=>{if(Y=!0,clearTimeout(ee),r.signal?.aborted){ae();return}J.send(JSON.stringify({type:"execute",agentId:H,events:p(r),sessionId:r.sessionId,...r.eventId!==void 0?{eventId:r.eventId}:{},...r.mode!==void 0?{mode:r.mode}:{},...r.idempotencyKey!==void 0?{idempotencyKey:r.idempotencyKey}:{},...r.system!==void 0?{system:r.system}:{},...r.model!==void 0?{model:r.model}:{}}))},J.onmessage=(X)=>{if(typeof X.data!=="string")return;let ce=Ae(X.data);if(!ce)return;let ue=xe(ce,y);switch(y.onMessage?.(ue),ue.type){case"meta":y.onMeta?.(ue);break;case"done":Oe();break;case"error":se(Error(we(ue.error)));break}},J.onerror=()=>{se(G)},J.onclose=(X)=>{if(clearTimeout(ee),r.signal?.removeEventListener("abort",ae),Q||X.code===1000)return;se(Error(X.reason||"WebSocket connection closed."))},{url:I,sendControl:function(X){if(J.readyState!==ie)throw Error("WebSocket is not open");J.send(JSON.stringify({type:"control",...X}))},close:de}}attach(r,y={}){let S=this.resolveWebSocket(),I=this.buildUrl(r),H=new S(I),G=!1,J=(Y=1000,Q="client closed")=>{if(G)return;if(G=!0,H.readyState===ie||H.readyState===ke)H.close(Y,Q)};return H.onopen=()=>H.send(JSON.stringify({type:"attach",...r,signal:void 0,agent:void 0})),H.onmessage=(Y)=>{if(typeof Y.data!=="string")return;let Q=Ae(Y.data);if(!Q)return;let ee=xe(Q,y);if(y.onMessage?.(ee),ee.type==="done")y.onDone?.();if(ee.type==="error")y.onError?.(Error(we(ee.error)))},H.onerror=()=>y.onError?.(Ie(this.baseUrl)),H.onclose=(Y)=>{if(!G&&Y.code!==1000)y.onError?.(Error(Y.reason||"WebSocket connection closed."))},{url:I,sendControl:function(Y){if(H.readyState!==ie)throw Error("WebSocket is not open");H.send(JSON.stringify({type:"control",...Y}))},close:J}}async*stream(r){let y=[],S=!1,I=null,H=null,G=()=>{H?.(),H=null},J=this.subscribe(r,{onMessage:function(Y){y.push(Y),G()},onDone:function(){S=!0,G()},onError:function(Y){I=Y,G()}});try{while(!0){if(y.length>0){yield y.shift();continue}if(I)throw I;if(S)return;await new Promise((Y)=>{H=Y})}}finally{J.close()}}buildUrl(r){let y=Qe(r),S=r.projectSlug??r.agent?.projectSlug,I=r.stageSlug??r.agent?.stageSlug,H=S?`/${S}`:"",G=I?`/${I}`:"";return`${g(this.baseUrl)}/v1${H}/agents${G}/${encodeURIComponent(y)}/ws?token=${encodeURIComponent(this.apiKey)}`}resolveWebSocket(){let r=this.WebSocketImpl??globalThis.WebSocket;if(!r)throw Error("WebSocket is not available. Pass a WebSocket implementation in BroodsWebSocketClient options.");return r}}function Xe(r){let y=r.agentId??r.agent?.id??r.endpointId;if(!y)throw Error("WebSocket run requires agent, agentId, or endpointId.");return y}function Qe(r){let y=r.endpointId??r.agent?.endpointId??r.agent?.id;if(!y)throw Error("WebSocket run requires agent or endpointId.");return y}function g(r){let y=new URL(ve(r));if(y.protocol==="https:")y.protocol="wss:";if(y.protocol==="http:")y.protocol="ws:";return n(y.toString())}function ve(r){let y=r.trim();if(/^wss?:\/\//.test(y))return n(y);return m(y)}function Ie(r){return Error(`Cannot access the WebSocket service at ${r}.`)}function xe(r,y){if(r.type!=="output")return r;let S=r;return y.onOutput?.(S),S.data}function Ae(r){try{let y=JSON.parse(r);return typeof y==="object"&&y!==null&&typeof y.type==="string"?y:null}catch{return null}}function we(r){if(typeof r==="string")return r;if(r&&typeof r==="object"&&typeof r.message==="string")return r.message;return r===void 0?"WebSocket stream error.":JSON.stringify(r)}var De=Symbol.for("broods.resource"),Ne=Symbol.for("broods.config"),Te=Symbol.for("broods.connection"),Ee=/^[A-Z][A-Z0-9_]{0,63}$/,T=new Proxy((r)=>{if(!Ee.test(r))throw Error("env name must match /^[A-Z][A-Z0-9_]*$/ and be at most 64 characters.");return{__beeblastEnv:!0,name:r}},{get:function(r,y,S){if(typeof y==="string"&&Ee.test(y))throw Error(`env.${y} is not supported; use env("${y}")`);return Reflect.get(r,y,S)}});function ne(r,y,S,I){return{[De]:!0,kind:r,name:y,...S?{description:S}:{},config:I}}function oe(r,y){let{partition:S,...I}=y;return{[Te]:!0,kind:"connection",type:r,...S?{partition:S}:{},config:I}}function re(r,y,S,I,H){return ne("channelRecord",r,y,{...H,externalId:S,...I?{workspaceRef:I}:{}})}function k(r){return oe("discord",r)}function E(r){return oe("github",r)}function C(r){return oe("pancake",r)}function R(r){return oe("slack",r)}function A(r){return oe("telegram",r)}function M(r){return oe("zalo",r)}function P(r){let{name:y,description:S,channelId:I,guildId:H,...G}=r;return re(y,S,I,H,G)}function O(r){let{name:y,description:S,repo:I,...H}=r,[G,...J]=I.split("/");if(!G||J.length!==1||!J[0])throw Error(`Channel "${y}" repo must be "owner/name", not "${I}"`);return re(y,S,I,G,H)}function N(r){let{name:y,description:S,conversationId:I,...H}=r;return re(y,S,I,void 0,H)}function D(r){let{name:y,description:S,channelId:I,teamId:H,...G}=r;return re(y,S,I,H,G)}function j(r){let{name:y,description:S,chatId:I,...H}=r;return re(y,S,I,void 0,H)}function z(r){let{name:y,description:S,chatId:I,...H}=r;return re(y,S,I,void 0,H)}function U(r){return{[Ne]:!0,config:r}}function L(r){let{name:y,description:S,...I}=r;return ne("agent",y,S,I)}function Z(r){return r}function F(r){let{name:y,description:S,...I}=r;return ne("workspace",y,S,I)}function B(r){let{name:y,description:S,...I}=r;return ne("sandbox",y,S,I)}function W(r){let{name:y,description:S,...I}=r;return ne("skill",y,S,I)}function q(r){let{name:y,...S}=r;return ne("tool",y,void 0,S)}function K(r){let{name:y,description:S,...I}=r;return ne("policy",y,S,I)}function V(r){let{name:y,description:S,...I}=r;return ne("cron",y,S,I)}function t(r){return Boolean(r&&typeof r==="object"&&r[De])}function i(r){return Boolean(r&&typeof r==="object"&&r[Te])}function v(r){return Boolean(r&&typeof r==="object"&&r[Ne])}
-export{p,b,o,s,l,w,f,a,n,h,e,u,c,x,d,m,_,g,T,k,E,C,R,A,M,P,O,N,D,j,z,U,L,Z,F,B,W,q,K,V,t,i,v};

package/dist/chunk-vyvy543y.js

@@ -1,2 +0,0 @@
-var c=/^[A-Z][A-Z0-9_]*$/;function S(e){if(!c.test(e)||e.length>64)throw Error("envPlaceholder name must match /^[A-Z][A-Z0-9_]*$/ and be at most 64 characters.");return`\${${e}}`}class r extends Error{status;body;constructor(e,t,n,s){super(`${e} ${t} failed with ${n}: ${s}`);this.name="BroodsAccountApiError",this.status=n,this.body=s}}function i(e){return typeof process<"u"?process?.env?.[e]:void 0}function a(e){return`?${new URLSearchParams({project:e.project,stage:e.stage}).toString()}`}class y{baseUrl;accountSecret;fetchImpl;constructor(e={}){let t=e.baseUrl??i("BROODS_BASE_URL")??"https://gateway.broods.app",n=e.accountSecret??i("BROODS_ACCOUNT_SECRET");if(!n)throw Error("BroodsAccountClient requires an accountSecret (or BROODS_ACCOUNT_SECRET).");let s=t.length;while(s>0&&t.charCodeAt(s-1)===47)s-=1;this.baseUrl=t.slice(0,s),this.accountSecret=n,this.fetchImpl=e.fetch??fetch}async getAccount(){let e=await this.request("GET","/v1/account");if(!e)throw new r("GET","/v1/account",404,"Account not found");return e.account}async updateAccount(e){return(await this.request("PATCH","/v1/account",e))?.account??null}async rotateSecret(){let e=await this.request("POST","/v1/account/rotate-secret");if(!e)throw new r("POST","/v1/account/rotate-secret",404,"Account not found");return e}async deleteAccount(){return await this.request("DELETE","/v1/account")??{deleted:!1}}webhookUrl(e,t){let n=[e,t].map(encodeURIComponent);return`${this.baseUrl}/webhooks/${n.join("/")}`}async listAgents(){return(await this.request("GET","/v1/agents"))?.agents??[]}async createAgent(e){let t=await this.request("POST","/v1/agents",e);if(!t)throw new r("POST","/v1/agents",404,"Not found");return t}async getAgent(e){return await this.request("GET",`/v1/agents/${encodeURIComponent(e)}`)}async updateAgent(e,t){return await this.request("PATCH",`/v1/agents/${encodeURIComponent(e)}`,t)}async deleteAgent(e){return(await this.request("DELETE",`/v1/agents/${encodeURIComponent(e)}`))?.deleted??!1}async listEnvVars(){return(await this.request("GET","/v1/env"))?.env??[]}async setEnvVar(e,t){await this.request("PUT",`/v1/env/${encodeURIComponent(e)}`,{value:t})}async deleteEnvVar(e){return(await this.request("DELETE",`/v1/env/${encodeURIComponent(e)}`))?.deleted??!1}async listCrons(){return(await this.request("GET","/v1/crons"))?.crons??[]}async createCron(e){let t=await this.request("POST","/v1/crons",e);if(!t)throw new r("POST","/v1/crons",404,"Not found");return t}async getCron(e){return await this.request("GET",`/v1/crons/${encodeURIComponent(e)}`)}async updateCron(e,t){return await this.request("PATCH",`/v1/crons/${encodeURIComponent(e)}`,t)}async deleteCron(e){return(await this.request("DELETE",`/v1/crons/${encodeURIComponent(e)}`))?.deleted??!1}async listCronRuns(e,t={}){let n=t.limit!==void 0?`?limit=${t.limit}`:"";return(await this.request("GET",`/v1/crons/${encodeURIComponent(e)}/runs${n}`))?.runs??[]}async listWorkspaces(){return(await this.request("GET","/v1/workspaces"))?.workspaces??[]}async createWorkspace(e){let t=await this.request("POST","/v1/workspaces",e);if(!t)throw new r("POST","/v1/workspaces",404,"Not found");return t}async getWorkspace(e){return await this.request("GET",`/v1/workspaces/${encodeURIComponent(e)}`)}async updateWorkspace(e,t){return await this.request("PATCH",`/v1/workspaces/${encodeURIComponent(e)}`,t)}async deleteWorkspace(e){return(await this.request("DELETE",`/v1/workspaces/${encodeURIComponent(e)}`))?.deleted??!1}async listWorkspaceFiles(e){return(await this.request("GET",`/v1/workspaces/${encodeURIComponent(e)}/files`))?.files??[]}async getWorkspaceFileUrl(e,t){let n=`?path=${encodeURIComponent(t)}`;return(await this.request("GET",`/v1/workspaces/${encodeURIComponent(e)}/files${n}`))?.url??null}async uploadWorkspaceFile(e,t){let n=`/v1/workspaces/${encodeURIComponent(e)}/files`,s=await this.request("POST",n,t);if(!s)throw new r("POST",n,404,"Workspace not found");return s.file}async renameWorkspaceFile(e,t,n){return(await this.request("PATCH",`/v1/workspaces/${encodeURIComponent(e)}/files`,{path:t,newPath:n}))?.renamed??!1}async deleteWorkspaceFile(e,t){return(await this.request("DELETE",`/v1/workspaces/${encodeURIComponent(e)}/files`,{path:t}))?.deleted??!1}async listSandboxes(){return(await this.request("GET","/v1/sandboxes"))?.sandboxes??[]}async createSandbox(e){let t=await this.request("POST","/v1/sandboxes",e);if(!t)throw new r("POST","/v1/sandboxes",404,"Not found");return t}async getSandbox(e){return await this.request("GET",`/v1/sandboxes/${encodeURIComponent(e)}`)}async updateSandbox(e,t){return await this.request("PATCH",`/v1/sandboxes/${encodeURIComponent(e)}`,t)}async deleteSandbox(e){return(await this.request("DELETE",`/v1/sandboxes/${encodeURIComponent(e)}`))?.deleted??!1}async suspendSandbox(e,t){return await this.sandboxAction(e,"suspend",{reservationKey:t})}async resumeSandbox(e,t){return await this.sandboxAction(e,"resume",{reservationKey:t})}async terminateSandbox(e,t){return await this.sandboxAction(e,"terminate",{reservationKey:t})}async snapshotSandbox(e,t,n){return await this.sandboxAction(e,"snapshot",{reservationKey:t,name:n})}async openSandboxTerminal(e,t){return await this.sandboxAction(e,"terminal",{reservationKey:t})}async listTools(e){let t=`/v1/tools${a(e)}`,n=await this.request("GET",t);if(!n)throw new r("GET",t,404,"Not found");return n.tools??[]}async createTool(e,t){let n=`/v1/tools${a(e)}`,s=await this.request("POST",n,t);if(!s)throw new r("POST",n,404,"Not found");return s}async getTool(e){return await this.request("GET",`/v1/tools/${encodeURIComponent(e)}`)}async updateTool(e,t){return await this.request("PATCH",`/v1/tools/${encodeURIComponent(e)}`,t)}async deleteTool(e){return(await this.request("DELETE",`/v1/tools/${encodeURIComponent(e)}`))?.deleted??!1}async listPolicies(){return(await this.request("GET","/v1/policies"))?.policies??[]}async createPolicy(e){let t=await this.request("POST","/v1/policies",e);if(!t)throw new r("POST","/v1/policies",404,"Not found");return t}async getPolicy(e){return await this.request("GET",`/v1/policies/${encodeURIComponent(e)}`)}async updatePolicy(e,t){return await this.request("PATCH",`/v1/policies/${encodeURIComponent(e)}`,t)}async deletePolicy(e){return(await this.request("DELETE",`/v1/policies/${encodeURIComponent(e)}`))?.deleted??!1}async listChannels(){return(await this.request("GET","/v1/channels"))?.channels??[]}async createChannel(e){let t=await this.request("POST","/v1/channels",e);if(!t)throw new r("POST","/v1/channels",404,"Not found");return t}async getChannel(e){return await this.request("GET",`/v1/channels/${encodeURIComponent(e)}`)}async updateChannel(e,t){return await this.request("PATCH",`/v1/channels/${encodeURIComponent(e)}`,t)}async deleteChannel(e){return(await this.request("DELETE",`/v1/channels/${encodeURIComponent(e)}`))?.deleted??!1}async listSkills(){return(await this.request("GET","/v1/skills"))?.skills??[]}async createSkill(e){let t=await this.request("POST","/v1/skills",e);if(!t)throw new r("POST","/v1/skills",404,"Not found");return t}async getSkill(e){return await this.request("GET",`/v1/skills/${encodeURIComponent(e)}`)}async uploadSkill(e,t){let n=`/v1/skills/${encodeURIComponent(e)}`,s=await this.request("PUT",n,t);if(!s)throw new r("PUT",n,404,"Skill not found");return s}async deleteSkill(e){return(await this.request("DELETE",`/v1/skills/${encodeURIComponent(e)}`))?.deleted??!1}async sandboxAction(e,t,n){let s=`/v1/sandboxes/${encodeURIComponent(e)}/${t}`,o=await this.request("POST",s,n);if(!o)throw new r("POST",s,404,"Sandbox not found");return o}async request(e,t,n){let s=await this.fetchImpl(`${this.baseUrl}${t}`,{method:e,headers:{Authorization:`Bearer ${this.accountSecret}`,...n!==void 0?{"Content-Type":"application/json"}:{}},...n!==void 0?{body:JSON.stringify(n)}:{}});if(s.status===404)return null;if(!s.ok)throw new r(e,t,s.status,await s.text());return await s.json()}}
-export{S,r,y};