broods 0.33.2 → 0.33.4

package/dist/index.d.ts

@@ -140,7 +140,7 @@ interface AgentConfig {
     /**
      * Tool names withheld for this run, applied after the tool set is built.
      * Set by a channel record; a channel can take a tool away, never add one.
-     * Names that are not present are simply ignored.
+     * Names that are not present are ignored.
      */
     denyTools?: string[];
     skills?: AgentSkillsConfig;
@@ -492,9 +492,6 @@ interface SandboxLifecycleConfig {
     idleTimeoutSeconds?: number;
     maxLifetimeSeconds?: number;
 }
-/**
- * Provider-normalized sandbox network policy.
- */
 interface SandboxNetworkConfig {
     mode: NetworkMode;
     allowDomains?: string[];
@@ -505,6 +502,7 @@ interface SandboxNetworkConfig {
  */
 interface SandboxConfig {
     provider: SandboxProvider;
+    fallbackProvider?: SandboxProvider;
     size?: SandboxSize;
     snapshot?: string;
     runtimes?: RuntimeName[];
@@ -566,9 +564,6 @@ declare const API_POLICY_ACTIONS: readonly ["account:read", "account:write", "ag
 type AgentPolicyAction = (typeof AGENT_POLICY_ACTIONS)[number];
 type ApiPolicyAction = (typeof API_POLICY_ACTIONS)[number];
 type PolicyAction = AgentPolicyAction | ApiPolicyAction;
-/**
- * One optional predicate on a policy rule.
- */
 interface PolicyCondition {
     attribute: string;
     operator: PolicyConditionOperator;
@@ -585,9 +580,6 @@ interface PolicyDocument {
     rules: PolicyRule[];
 }
 type PolicyEffect = "allow" | "deny";
-/**
- * Resource selector fields supported by policy rules.
- */
 interface PolicyResourceSelector {
     toolNames?: string[];
     /** MCP registration ids, for scoping tool.call rules per server (#331). */
@@ -600,9 +592,6 @@ interface PolicyResourceSelector {
     /** Config-plane resource ids for API-action rules; "*" matches every id. */
     resourceIds?: string[];
 }
-/**
- * One allow/deny rule inside a policy document.
- */
 interface PolicyRule {
     id: string;
     effect: PolicyEffect;
@@ -612,7 +601,7 @@ interface PolicyRule {
 }
 
 /**
- * Channel record validation for the config plane — the single home of the
+ * Channel record validation for the config plane, the single home of the
  * normalizers core's `shared/domain/channel-record.ts` re-exports. Kept free
  * of Convex imports so the rules stay unit-testable; the public projection
  * lives in ./responses.ts.
@@ -621,10 +610,7 @@ interface PolicyRule {
 declare const CHANNEL_REPLY_TARGETS: readonly ["thread", "source"];
 type ChannelReplyIn = (typeof CHANNEL_REPLY_TARGETS)[number];
 
-/**
- * Telegram channel adapter implementated as a ChannelAdapter.
- * Implements Telegram auth, message normalization, and reply actions through the Chat SDK Telegram adapter.
- */
+/** Telegram channel adapter. */
 
 interface TelegramSource {
     chatId: number;
@@ -637,8 +623,8 @@ interface TelegramSource {
 }
 
 /**
- * GitHub channel adapter.
- * Keep Broods-specific event filtering/source mapping here; delegate GitHub auth and API calls to Chat SDK.
+ * GitHub channel adapter. Event filtering and source mapping live here; auth and
+ * API calls go through the Chat SDK.
  */
 
 interface GitHubSource {
@@ -653,10 +639,7 @@ interface GitHubSource {
     target: "issue" | "issue_comment" | "pull_request" | "pull_request_review_comment";
 }
 
-/**
- * Slack channel adapter.
- * Handle request verification, inbound normalization, and Slack Web API reply actions here.
- */
+/** Slack channel adapter. */
 
 interface SlackSource {
     teamId: string;
@@ -671,10 +654,7 @@ interface SlackSource {
     userId?: string;
 }
 
-/**
- * Discord channel adapter.
- * Verify interaction signatures, normalize slash commands, and send replies through Chat SDK's Discord adapter.
- */
+/** Discord channel adapter. */
 
 interface DiscordSource {
     applicationId: string;
@@ -690,7 +670,6 @@ interface DiscordSource {
 
 /**
  * Pancake channel adapter.
- * Keep Pancake webhook normalization and outbound message API calls here.
  *
  * Per-conversation policy (e.g. skipping human-owned conversations by tag) is
  * not baked in: the parsed source carries `tagIds` so a user `onMessageReceived`
@@ -709,10 +688,7 @@ interface PancakeSource {
     tagIds?: string[];
 }
 
-/**
- * Zalo channel adapter.
- * Keep official Zalo Bot API webhook normalization and outbound API calls here.
- */
+/** Zalo channel adapter, on the official Zalo Bot API. */
 
 declare const ZALO_CHAT_TYPES: readonly ["PRIVATE", "GROUP"];
 type ZaloChatType = (typeof ZALO_CHAT_TYPES)[number];
@@ -727,7 +703,7 @@ interface ZaloSource {
 }
 
 /**
- * Canonical CLI manifest wire types — the single source of truth shared by the
+ * Canonical CLI manifest wire types, the single source of truth shared by the
  * backend (cliSync.ts, cliHttp.ts) and the SDK/CLI (packages/broods).
  *
  * This file is intentionally type-only with no runtime imports so the SDK can
@@ -935,20 +911,13 @@ interface Agent {
     agentId: string;
     name: string;
 }
-interface Sandbox {
-    sandboxId: string;
-    name: string;
-}
-interface Workspace {
-    workspaceId: string;
-    name: string;
-}
-/** A tool call held for user approval by an `ask`-mode sandbox. */
-interface ToolApprovalSummary {
-    approvalId: string;
-    toolCallId: string;
-    toolName: string;
-    input: unknown;
+interface AsyncRequestAccepted {
+    statusUrl: string;
+    statusId: string;
+    eventId: string;
+    agentId: string;
+    status?: "accepted" | "queued" | "applied" | "processing";
+    requestedMode?: "reject" | "followup" | "collect" | "steer";
 }
 interface AsyncStatus {
     status: "accepted" | "queued" | "applied" | "processing" | "awaiting_approval" | "awaiting_input" | "completed" | "failed" | "expired" | "not_found";
@@ -963,14 +932,6 @@ interface AsyncStatus {
     approvals?: ToolApprovalSummary[];
     questions?: PendingQuestion[];
 }
-interface AsyncRequestAccepted {
-    statusUrl: string;
-    statusId: string;
-    eventId: string;
-    agentId: string;
-    status?: "accepted" | "queued" | "applied" | "processing";
-    requestedMode?: "reject" | "followup" | "collect" | "steer";
-}
 interface Cron {
     accountId: string;
     cronId: string;
@@ -1000,6 +961,10 @@ interface CronRun {
     startedAt: string;
     completedAt?: string;
 }
+interface Sandbox {
+    sandboxId: string;
+    name: string;
+}
 interface Skill {
     path: string;
     name: string;
@@ -1009,14 +974,25 @@ interface Skill {
         size?: number;
     }>;
 }
+/** A tool call held for user approval by an `ask`-mode sandbox. */
+interface ToolApprovalSummary {
+    approvalId: string;
+    toolCallId: string;
+    toolName: string;
+    input: unknown;
+}
+interface Workspace {
+    workspaceId: string;
+    name: string;
+}
 
 /**
  * Shared WebSocket wire-protocol types for the observability gateway, used by
  * the gateway, the SDK/CLI, and the dashboard. Pure types + tiny pure helpers,
  * zero runtime deps. Kept separate from the agent-test websocket-contracts.
  */
-type LogLevel = "DEBUG" | "INFO" | "WARN" | "ERROR";
 declare const MAX_OBSERVABILITY_BACKFILL = 500;
+type LogLevel = "DEBUG" | "INFO" | "WARN" | "ERROR";
 type ObservabilityLogEntry = {
     ts: number;
     level: LogLevel;
@@ -1058,7 +1034,11 @@ type ObservabilityUnsubscribeMessage = {
     type: "unsubscribe";
     stream: "logs" | "traces";
 };
-type ObservabilityClientMessage = ObservabilitySubscribeMessage | ObservabilityUnsubscribeMessage;
+type ObservabilityFetchTraceMessage = {
+    type: "fetchTrace";
+    traceId: string;
+};
+type ObservabilityClientMessage = ObservabilitySubscribeMessage | ObservabilityUnsubscribeMessage | ObservabilityFetchTraceMessage;
 type ObservabilityReadyMessage = {
     type: "ready";
 };
@@ -1066,6 +1046,8 @@ type ObservabilityBackfillMessage = {
     type: "backfill";
     stream: "logs" | "traces";
     entries: ObservabilityLogEntry[] | ObservabilitySpanRow[];
+    more?: boolean;
+    error?: string;
 };
 type ObservabilityLogMessage = {
     type: "log";
@@ -1080,9 +1062,9 @@ type ObservabilityErrorMessage = {
     error: string;
 };
 type ObservabilityServerMessage = ObservabilityReadyMessage | ObservabilityBackfillMessage | ObservabilityLogMessage | ObservabilitySpanMessage | ObservabilityErrorMessage;
-declare function isObservabilityClientMessage(v: unknown): v is ObservabilityClientMessage;
 /** Narrow an unknown wire value to a LogLevel. */
 declare function isLogLevel(value: unknown): value is LogLevel;
+declare function isObservabilityClientMessage(v: unknown): v is ObservabilityClientMessage;
 /** Whether a span is a top-level run, each of which owns its own trace. */
 declare function isRootSpanKind(kind: ObservabilitySpanRow["kind"]): boolean;
 /**
@@ -1090,6 +1072,8 @@ declare function isRootSpanKind(kind: ObservabilitySpanRow["kind"]): boolean;
  * interpolates it into LogQL, so only the UUID shape core mints may pass.
  */
 declare function isSandboxLogId(value: unknown): value is string;
+/** Whether a value is a real trace id a log line can be followed to. */
+declare function isTraceId(value: unknown): value is string;
 
 /**
  * Configurable client for running deployed agents over direct core SSE.
@@ -1099,7 +1083,7 @@ declare function isSandboxLogId(value: unknown): value is string;
 declare const DEFAULT_CORE_BASE_URL = "https://gateway.broods.app";
 /**
  * Input for a single agent run. The core direct API is event-based (a list of
- * Vercel AI SDK model messages), so `events` is the full-fidelity form — use it
+ * Vercel AI SDK model messages), so `events` is the full-fidelity form. Use it
  * for multimodal content (images/files), ephemeral system messages, or
  * tool-approval responses. `input` is a shorthand for a single user text message
  * and is wrapped into one user event. Provide exactly one of the two.
@@ -1194,8 +1178,8 @@ declare class BroodsClient {
     channelWebhookUrl(ref: ChannelReference): string;
     /**
      * Return the provider webhook URL for an account's channel. The URL names no
-     * agent — every channel of one type in an account shares it — so this is what
-     * to paste into the provider when several agents sit behind the same app.
+     * agent, since every channel of one type in an account shares it, so this is
+     * what to paste into the provider when several agents sit behind the same app.
      */
     accountWebhookUrl(accountId: string, channelType: ChannelReference["type"]): string;
     /**
@@ -1260,18 +1244,18 @@ declare function normalizeHttpServiceUrl(value: string): string;
  * This is the DYNAMIC counterpart to the config-first `broods dev` / `broods
  * deploy` flow: `broods dev` syncs the predefined resources declared in your
  * `broods/` folder, while `BroodsAccountClient` creates and mutates the full
- * account config plane at runtime — agents, sandboxes (config + lifecycle),
+ * account config plane at runtime: agents, sandboxes (config + lifecycle),
  * workspaces (config + files), tools, policies, skills, crons, and the account
- * itself — e.g. a multi-tenant app provisioning one agent per customer from its
- * own backend.
+ * itself. One caller is a multi-tenant app provisioning one agent per customer
+ * from its own backend.
  *
  * Kept intentionally standalone (import from `broods/account`): pure fetch,
- * no Node built-ins, no `.env` file loading — so it runs in edge/worker
+ * no Node built-ins, no `.env` file loading, so it runs in edge/worker
  * runtimes such as Convex actions, Cloudflare Workers, and the browser-less
  * server runtimes, as well as Node and Bun.
  *
  * Auth: every call sends `Authorization: Bearer {accountSecret}` to
- * `{baseUrl}/v1/...` — or a short-lived `fp_sts_` role session token from
+ * `{baseUrl}/v1/...`, or a short-lived `fp_sts_` role session token from
  * `assumeRole()`, limited to what the role's policy allows. Secrets inside
  * agent configs are encrypted at rest by the platform and come back redacted
  * (`********`) on reads.
@@ -1319,8 +1303,6 @@ interface AccountEnvVar {
     name: string;
     updatedAt: number;
 }
-/** Build a validated account env-var reference for use in an agent config. */
-declare function envPlaceholder(name: string): string;
 /** Fields accepted by `PATCH /v1/agents/{id}`. `config` is deep-merged; `null` values delete keys. */
 interface UpdateAgentInput {
     name?: string;
@@ -1391,8 +1373,8 @@ interface AssumeRoleResult {
     expiresAt: string;
 }
 /**
- * One real place a team talks — a Slack channel, a Discord channel, a repo —
- * bound to an agent. The runtime reads it on the inbound webhook to decide who
+ * One real place a team talks, bound to an agent: a Slack channel, a Discord
+ * channel, a repo. The runtime reads it on the inbound webhook to decide who
  * answers there and with what instructions, workspaces and policies.
  */
 interface AccountChannel {
@@ -1423,14 +1405,14 @@ interface ChannelRecordConfig {
     /** Added to whatever the agent already carries. Each policy holds its own mode. */
     policies?: string[];
     /**
-     * Tool names withheld in this channel, applied after the tool set is built —
+     * Tool names withheld in this channel, applied after the tool set is built,
      * so it also covers sandbox tools (`bash`, `read`, …) that `config.tools`
      * cannot name. Narrowing only; unknown names are ignored.
      */
     denyTools?: string[];
     /**
      * Where the reply lands. `source` answers wherever the message came from, and
-     * threads only when the message already did. Slack only — no other provider
+     * threads only when the message already did. Slack only. No other provider
      * gives the runtime a second place to reply.
      */
     replyIn?: ChannelReplyIn;
@@ -1559,6 +1541,8 @@ declare class BroodsAccountApiError extends Error {
     readonly body: string;
     constructor(method: string, path: string, status: number, body: string);
 }
+/** Build a validated account env-var reference for use in an agent config. */
+declare function envPlaceholder(name: string): string;
 /**
  * The credential the environment supplies, with a role session winning over
  * the account secret. The constructor throws through this same resolution, so
@@ -1845,6 +1829,7 @@ declare class BroodsWebSocketClient {
     buildUrl(input: Pick<WebSocketRunInput, "agent" | "endpointId" | "projectSlug" | "stageSlug">): string;
     private resolveWebSocket;
 }
+declare function toWebSocketBaseUrl(url: string): string;
 /**
  * The credential travels as a `Sec-WebSocket-Protocol` entry rather than in
  * the URL, so it never lands in proxy or access logs. The gateway answers
@@ -1853,15 +1838,10 @@ declare class BroodsWebSocketClient {
  */
 declare function webSocketSubprotocols(apiKey: string): string[];
 
-declare function toWebSocketBaseUrl(url: string): string;
-
 /**
  * Resource definition helpers for the code-first `broods/` project folder.
  *
- * Layout: markers, then types (env refs, project config, resource primitives,
- * per-kind config surfaces, per-kind resource aliases), then the env runtime
- * value, the resource constructors, and the type guards. Every runtime function
- * here is synchronous.
+ * Every runtime function here is synchronous.
  */
 
 declare const RESOURCE_MARKER: unique symbol;
@@ -1919,7 +1899,7 @@ type SandboxDefinitionOptions = Record<string, unknown> & {
     reservationKey?: string;
 };
 /**
- * Code-first sandbox config surface. Mirrors core's `SandboxConfig` but lets
+ * Code-first sandbox config input. Mirrors core's `SandboxConfig` but lets
  * `envVars` values be `env("NAME")` references (compiled to `${NAME}` placeholders
  * at sync time, exactly like provider `apiKey`). Add overrides here if more
  * sandbox fields should accept env refs.
@@ -1945,14 +1925,14 @@ type PolicyDefinitionConfig = Omit<PolicyDocument, "version"> & {
 };
 /**
  * Fetch-style MCP handler for a hosted server: what
- * `createMcpHandler(...)` from @modelcontextprotocol/server returns —
- * either the request function itself or an object exposing it as `fetch`.
+ * `createMcpHandler(...)` from @modelcontextprotocol/server returns: either
+ * the request function itself or an object exposing it as `fetch`.
  */
 type McpHandler = ((request: Request) => Response | Promise<Response>) | {
     fetch(request: Request): Response | Promise<Response>;
 };
 /**
- * MCP server registration (#331) — external (`url`) or hosted (`handler`).
+ * MCP server registration (#331), either external (`url`) or hosted (`handler`).
  * Either way the server's tools are offered as `<name>__<tool>`; an external
  * row is dialed over the stateless HTTP transport (spec 2026-07-28) at agent
  * registration time. The name namespaces those tools, so it must be 1-32
@@ -1962,7 +1942,7 @@ interface McpDefinitionConfig {
     /** External server's MCP endpoint; http(s), no embedded credentials. */
     url?: string;
     /**
-     * Hosted alternative to `url`: declare the server inline —
+     * Hosted alternative to `url`: declare the server inline as
      * `handler: createMcpHandler(...)` from @modelcontextprotocol/server,
      * right next to the `defineMcp` call. The CLI bundles the defining module
      * and the tool-runner Lambda hosts it, one invoke per batch of requests.
@@ -1970,8 +1950,8 @@ interface McpDefinitionConfig {
     handler?: McpHandler;
     /**
      * Extra request headers. Credential-bearing headers (Authorization,
-     * X-Api-Key, ...) must reference an account env var — e.g.
-     * `Bearer ${env("TOKEN")}` — never carry an inline secret.
+     * X-Api-Key, ...) must reference an account env var, e.g.
+     * `Bearer ${env("TOKEN")}`. Never carry an inline secret.
      */
     headers?: Record<string, string>;
     /**
@@ -2052,8 +2032,8 @@ type ZaloConnectionDefinition = ConnectionDefinition<"zalo", ZaloConnectionInput
 type AnyConnectionDefinition = TelegramConnectionDefinition | GitHubConnectionDefinition | SlackConnectionDefinition | DiscordConnectionDefinition | PancakeConnectionDefinition | ZaloConnectionDefinition;
 /**
  * One real place a team talks: a Slack channel, a Discord channel, a repo. It
- * narrows and adds — instructions append, policies union, tools and workspaces
- * only narrow — and never grants what a bound agent lacks. It names the
+ * narrows and adds, and never grants what a bound agent lacks: instructions
+ * append, policies union, tools and workspaces only narrow. It names the
  * connection it belongs to, so `platform` is never written by hand.
  */
 type ChannelDefinitionConfig = {
@@ -2148,8 +2128,8 @@ interface HookContext {
     config: Record<string, unknown>;
     /**
      * Mutable per-request scratchpad shared across this agent request's hooks.
-     * Seed it in an early hook (e.g. `onStart`) and read or modify it later —
-     * every loop hook, `onSubagentFinish`, and the reply's `onMessageSending`
+     * Seed it in an early hook (e.g. `onStart`) and read or modify it later.
+     * Every loop hook, `onSubagentFinish`, and the reply's `onMessageSending`
      * see the same state. Keep it JSON-serializable. `onMessageReceived`,
      * delayed background replies, and each subagent's own run get fresh state.
      */
@@ -2205,7 +2185,7 @@ type ChannelMessageReceived = {
  * preferred so the serialized source is valid as an object-literal value.
  *
  * Subagent runs fire hooks too: a registered subagent runs its own hooks, a
- * prompt-only (virtual) subagent inherits this bundle — always with fresh
+ * prompt-only (virtual) subagent inherits this bundle, always with fresh
  * `ctx.state`. `onSubagentFinish` fires on the parent with the parent's state.
  */
 interface AgentHooks {
@@ -2269,9 +2249,9 @@ interface AgentHooks {
     }>;
 }
 /**
- * Code-first agent config surface. Built from an explicit `Pick` of `AgentConfig`
+ * Code-first agent config input. Built from an explicit `Pick` of `AgentConfig`
  * (not `Omit`) so the SDK input type does NOT inherit `AgentConfig`'s
- * `[key: string]: unknown` index signature — which would otherwise disable
+ * `[key: string]: unknown` index signature, which would otherwise disable
  * TypeScript's excess-property checks and silently accept typos like
  * `workspace:` instead of `workspaces:`. Add a key here when core's `AgentConfig`
  * gains a new top-level field that should be code-definable.
@@ -2308,8 +2288,8 @@ type AgentDefinitionConfig = EnvRefString<Pick<AgentConfig, "agent" | "model" |
     policies?: readonly (PolicyResource | string)[];
     /**
      * Opt the agent into the public runtime endpoint (SSE/WebSocket via the
-     * stage runtime key). Off by default — secured: when unset the public
-     * endpoint refuses requests for this agent. Reach a private agent through an
+     * stage runtime key). Off by default: when unset the public endpoint
+     * refuses requests for this agent. Reach a private agent through an
      * internal endpoint or a channel webhook. See issue #65.
      */
     publicAccess?: boolean;
@@ -2320,8 +2300,8 @@ type CronDefinitionConfig = Omit<CreateCronInput, "agentId" | "name"> & {
 type AgentResource<Name extends string = string> = ResourceDefinition<"agent", Name, AgentDefinitionConfig>;
 /**
  * Code-first workspace config. Says `partitioned` where storage says
- * `isolation`: the flag permits a split, it does not perform one — a channel's
- * `partition` decides which folder a run actually mounts.
+ * `isolation`: the flag permits a split, it does not perform one. A channel's
+ * `partition` decides which folder a run mounts.
  */
 type WorkspaceDefinitionConfig = Omit<WorkspaceConfig, "isolation"> & {
     /** Allow this workspace to be split into per-conversation folders. */
@@ -2336,8 +2316,8 @@ type CronResource<Name extends string = string> = ResourceDefinition<"cron", Nam
 type ChannelResource<Name extends string = string> = ResourceDefinition<"channelRecord", Name, ChannelDefinitionConfig>;
 type AnyResource = AgentResource | WorkspaceResource | SandboxResource | CronResource | SkillResource | McpResource | PolicyResource | ChannelResource;
 /**
- * References an account/environment variable resolved on the SERVER at runtime —
- * set it with `broods env set <NAME>` or in the dashboard (the Convex-style
+ * References an account/environment variable resolved on the SERVER at runtime.
+ * Set it with `broods env set <NAME>` or in the dashboard (the Convex-style
  * `convex env set` model). It is a deferred reference, never read from your local
  * environment and never baked into the deployed config:
  *
@@ -2353,6 +2333,21 @@ type AnyResource = AgentResource | WorkspaceResource | SandboxResource | CronRes
  * pushes matching `.env.local` values first, so a local value is enough there.
  */
 declare const env: EnvAccessor;
+/**
+ * Shared builder behind every `define*` helper below. The public helpers are
+ * thin, per-kind typed front doors: each pins its `kind` (the discriminant the
+ * sync/codegen pipeline switches on) and splits the flat authoring input back
+ * into the `{ name, description?, config }` shape the manifest wire format uses.
+ */
+declare function defineAgent<const Name extends string>(input: ResourceInput<Name, AgentDefinitionConfig>): AgentResource<Name>;
+declare function defineBroods(config: BroodsProjectConfig): BroodsConfigDefinition;
+declare function defineCron<const Name extends string>(input: ResourceInput<Name, CronDefinitionConfig>): CronResource<Name>;
+declare function defineHarness<const Definition extends HarnessDefinition>(definition: Definition): Definition;
+declare function defineMcp<const Name extends string>(input: ResourceInput<Name, McpDefinitionConfig>): McpResource<Name>;
+declare function definePolicy<const Name extends string>(input: ResourceInput<Name, PolicyDefinitionConfig>): PolicyResource<Name>;
+declare function defineSandbox<const Name extends string>(input: ResourceInput<Name, SandboxDefinitionConfig>): SandboxResource<Name>;
+declare function defineSkill<const Name extends string>(input: ResourceInput<Name, SkillDefinitionConfig>): SkillResource<Name>;
+declare function defineWorkspace<const Name extends string>(input: ResourceInput<Name, WorkspaceDefinitionConfig>): WorkspaceResource<Name>;
 declare function defineDiscordConnection(config: DiscordConnectionInput): DiscordConnectionDefinition;
 declare function defineGitHubConnection(config: GitHubConnectionInput): GitHubConnectionDefinition;
 declare function definePancakeConnection(config: PancakeConnectionInput): PancakeConnectionDefinition;
@@ -2365,18 +2360,9 @@ declare function definePancakeChannel<const Name extends string>(input: Resource
 declare function defineSlackChannel<const Name extends string>(input: ResourceInput<Name, SlackChannelInput>): ChannelResource<Name>;
 declare function defineTelegramChannel<const Name extends string>(input: ResourceInput<Name, TelegramChannelInput>): ChannelResource<Name>;
 declare function defineZaloChannel<const Name extends string>(input: ResourceInput<Name, ZaloChannelInput>): ChannelResource<Name>;
-declare function defineBroods(config: BroodsProjectConfig): BroodsConfigDefinition;
-declare function defineAgent<const Name extends string>(input: ResourceInput<Name, AgentDefinitionConfig>): AgentResource<Name>;
-declare function defineHarness<const Definition extends HarnessDefinition>(definition: Definition): Definition;
-declare function defineWorkspace<const Name extends string>(input: ResourceInput<Name, WorkspaceDefinitionConfig>): WorkspaceResource<Name>;
-declare function defineSandbox<const Name extends string>(input: ResourceInput<Name, SandboxDefinitionConfig>): SandboxResource<Name>;
-declare function defineSkill<const Name extends string>(input: ResourceInput<Name, SkillDefinitionConfig>): SkillResource<Name>;
-declare function defineMcp<const Name extends string>(input: ResourceInput<Name, McpDefinitionConfig>): McpResource<Name>;
-declare function definePolicy<const Name extends string>(input: ResourceInput<Name, PolicyDefinitionConfig>): PolicyResource<Name>;
-declare function defineCron<const Name extends string>(input: ResourceInput<Name, CronDefinitionConfig>): CronResource<Name>;
-declare function isResource(value: unknown): value is AnyResource;
-declare function isConnectionDefinition(value: unknown): value is AnyConnectionDefinition;
 declare function isBroodsConfig(value: unknown): value is BroodsConfigDefinition;
+declare function isConnectionDefinition(value: unknown): value is AnyConnectionDefinition;
+declare function isResource(value: unknown): value is AnyResource;
 
-export { BroodsAccountApiError, BroodsAccountClient, BroodsClient, BroodsWebSocketClient, DEFAULT_CORE_BASE_URL, IngressAcceptedError, MAX_OBSERVABILITY_BACKFILL, BroodsWebSocketClient as WebSocketClient, BroodsWebSocketClient as WebsocketClient, defineAgent, defineBroods, defineCron, defineDiscordChannel, defineDiscordConnection, defineGitHubChannel, defineGitHubConnection, defineHarness, defineMcp, definePancakeChannel, definePancakeConnection, definePolicy, defineSandbox, defineSkill, defineSlackChannel, defineSlackConnection, defineTelegramChannel, defineTelegramConnection, defineWorkspace, defineZaloChannel, defineZaloConnection, env, envPlaceholder, isBroodsConfig, isConnectionDefinition, isLogLevel, isObservabilityClientMessage, isResource, isRootSpanKind, isSandboxLogId, normalizeHttpServiceUrl, readSseStream, resolveEnvCredential, resolveRunEvents, toWebSocketBaseUrl, webSocketSubprotocols };
-export type { Account, AccountAgent, AccountChannel, AccountEnvVar, AccountMcp, AccountPolicy, AccountRole, AccountSandbox, AccountWorkspace, Agent, AgentChannelsConfig, AgentCodeHookConfig, AgentConfig, AgentConfigDoc, AgentDefinitionConfig, AgentDiscordChannelConfig, AgentGitHubChannelConfig, AgentHandle, AgentHookEventName, AgentHooks, AgentHooksConfig, AgentPancakeChannelConfig, AgentProviderSettings, AgentReference, AgentResource, AgentRunEventInput, AgentRunInput, AgentRunModelOverrides, AgentRunOverrides, AgentRunResult, AgentSkillsDefinitionConfig, AgentSlackChannelConfig, AgentStreamPart, AgentSubagentDefinitionConfig, AgentTelegramChannelConfig, AgentWebhookHookConfig, AgentWorkspaceInput, AgentWorkspaceRef, AgentWorkspaceRefInput, AgentZaloChannelConfig, AnyConnectionDefinition, AnyResource, AssumeRoleResult, AsyncAgentRun, AsyncPollOptions, AsyncRequestAccepted, AsyncStatus, BroodsAccount, BroodsAccountClientOptions, BroodsClientOptions, BroodsConfigDefinition, BroodsProjectConfig, BroodsWebSocketClientOptions, ChannelAgentInput, ChannelDefinitionConfig, ChannelMessageReceived, ChannelPartition, ChannelRecordConfig, ChannelReference, ChannelReplyIn, ChannelResource, ChannelType, CliManifest, CliManifestResource, ConnectionDefinition, CreateAgentResult, CreateClientCronInput, CreateCronInput, CreateMcpInput, Cron, CronDefinitionConfig, CronDoc, CronLastStatus, CronResource, CronRun, CronStatus, DeleteAccountResult, DiscordChannelInput, DiscordConnectionDefinition, DiscordConnectionInput, DiscordMessageSource, DiscordSource, Doc, EnvAccessor, EnvRef, EnvRefString, GeneratedIds, GitHubChannelInput, GitHubConnectionDefinition, GitHubConnectionInput, GitHubMessageSource, GitHubSource, HarnessDefinition, HarnessType, HookContext, Id, IngressMode, IngressStatus, LogLevel, McpDefinitionConfig, McpHandler, McpOauthInput, McpResource, ObservabilityBackfillMessage, ObservabilityClientMessage, ObservabilityErrorMessage, ObservabilityLogEntry, ObservabilityLogMessage, ObservabilityReadyMessage, ObservabilityServerMessage, ObservabilitySpanMessage, ObservabilitySpanRow, ObservabilitySubscribeMessage, ObservabilityUnsubscribeMessage, PancakeChannelInput, PancakeConnectionDefinition, PancakeConnectionInput, PancakeMessageSource, PancakeSource, PendingQuestion, PolicyDefinitionConfig, PolicyDocument, PolicyResource, ProjectDoc, ProviderConfigInput, ProviderSettingsInput, ResourceApi, ResourceDefinition, ResourceInput, ResourceKind, RotateSecretResult, Sandbox, SandboxConfig, SandboxConfigDoc, SandboxDefinitionConfig, SandboxDefinitionOptions, SandboxLifecycleResult, SandboxResource, SandboxSnapshotResult, SandboxTerminalTicket, Skill, SkillDefinitionConfig, SkillResource, SkillUploadInput, SlackChannelInput, SlackConnectionDefinition, SlackConnectionInput, SlackMessageSource, SlackSource, StageDoc, StageScope, TelegramChannelInput, TelegramConnectionDefinition, TelegramConnectionInput, TelegramMessageSource, TelegramSource, ToolApprovalSummary, UpdateAgentInput, UpdateCronInput, UpdateMcpInput, WebSocketAttachInput, WebSocketClientAttachMessage, WebSocketClientCancelMessage, WebSocketClientControlMessage, WebSocketClientExecuteMessage, WebSocketClientMessage, WebSocketConstructorLike, WebSocketHandlers, WebSocketLike, WebSocketOutputMessage, WebSocketRunInput, WebSocketServerMessage, WebSocketStreamMessage, WebSocketSubscription, Workspace, WorkspaceConfig, WorkspaceConfigDoc, WorkspaceDefinitionConfig, WorkspaceFileEntry, WorkspaceResource, ZaloChannelInput, ZaloConnectionDefinition, ZaloConnectionInput, ZaloMessageSource, ZaloSource };
+export { BroodsAccountApiError, BroodsAccountClient, BroodsClient, BroodsWebSocketClient, DEFAULT_CORE_BASE_URL, IngressAcceptedError, MAX_OBSERVABILITY_BACKFILL, BroodsWebSocketClient as WebSocketClient, BroodsWebSocketClient as WebsocketClient, defineAgent, defineBroods, defineCron, defineDiscordChannel, defineDiscordConnection, defineGitHubChannel, defineGitHubConnection, defineHarness, defineMcp, definePancakeChannel, definePancakeConnection, definePolicy, defineSandbox, defineSkill, defineSlackChannel, defineSlackConnection, defineTelegramChannel, defineTelegramConnection, defineWorkspace, defineZaloChannel, defineZaloConnection, env, envPlaceholder, isBroodsConfig, isConnectionDefinition, isLogLevel, isObservabilityClientMessage, isResource, isRootSpanKind, isSandboxLogId, isTraceId, normalizeHttpServiceUrl, readSseStream, resolveEnvCredential, resolveRunEvents, toWebSocketBaseUrl, webSocketSubprotocols };
+export type { Account, AccountAgent, AccountChannel, AccountEnvVar, AccountMcp, AccountPolicy, AccountRole, AccountSandbox, AccountWorkspace, Agent, AgentChannelsConfig, AgentCodeHookConfig, AgentConfig, AgentConfigDoc, AgentDefinitionConfig, AgentDiscordChannelConfig, AgentGitHubChannelConfig, AgentHandle, AgentHookEventName, AgentHooks, AgentHooksConfig, AgentPancakeChannelConfig, AgentProviderSettings, AgentReference, AgentResource, AgentRunEventInput, AgentRunInput, AgentRunModelOverrides, AgentRunOverrides, AgentRunResult, AgentSkillsDefinitionConfig, AgentSlackChannelConfig, AgentStreamPart, AgentSubagentDefinitionConfig, AgentTelegramChannelConfig, AgentWebhookHookConfig, AgentWorkspaceInput, AgentWorkspaceRef, AgentWorkspaceRefInput, AgentZaloChannelConfig, AnyConnectionDefinition, AnyResource, AssumeRoleResult, AsyncAgentRun, AsyncPollOptions, AsyncRequestAccepted, AsyncStatus, BroodsAccount, BroodsAccountClientOptions, BroodsClientOptions, BroodsConfigDefinition, BroodsProjectConfig, BroodsWebSocketClientOptions, ChannelAgentInput, ChannelDefinitionConfig, ChannelMessageReceived, ChannelPartition, ChannelRecordConfig, ChannelReference, ChannelReplyIn, ChannelResource, ChannelType, CliManifest, CliManifestResource, ConnectionDefinition, CreateAgentResult, CreateClientCronInput, CreateCronInput, CreateMcpInput, Cron, CronDefinitionConfig, CronDoc, CronLastStatus, CronResource, CronRun, CronStatus, DeleteAccountResult, DiscordChannelInput, DiscordConnectionDefinition, DiscordConnectionInput, DiscordMessageSource, DiscordSource, Doc, EnvAccessor, EnvRef, EnvRefString, GeneratedIds, GitHubChannelInput, GitHubConnectionDefinition, GitHubConnectionInput, GitHubMessageSource, GitHubSource, HarnessDefinition, HarnessType, HookContext, Id, IngressMode, IngressStatus, LogLevel, McpDefinitionConfig, McpHandler, McpOauthInput, McpResource, ObservabilityBackfillMessage, ObservabilityClientMessage, ObservabilityErrorMessage, ObservabilityFetchTraceMessage, ObservabilityLogEntry, ObservabilityLogMessage, ObservabilityReadyMessage, ObservabilityServerMessage, ObservabilitySpanMessage, ObservabilitySpanRow, ObservabilitySubscribeMessage, ObservabilityUnsubscribeMessage, PancakeChannelInput, PancakeConnectionDefinition, PancakeConnectionInput, PancakeMessageSource, PancakeSource, PendingQuestion, PolicyDefinitionConfig, PolicyDocument, PolicyResource, ProjectDoc, ProviderConfigInput, ProviderSettingsInput, ResourceApi, ResourceDefinition, ResourceInput, ResourceKind, RotateSecretResult, Sandbox, SandboxConfig, SandboxConfigDoc, SandboxDefinitionConfig, SandboxDefinitionOptions, SandboxLifecycleResult, SandboxResource, SandboxSnapshotResult, SandboxTerminalTicket, Skill, SkillDefinitionConfig, SkillResource, SkillUploadInput, SlackChannelInput, SlackConnectionDefinition, SlackConnectionInput, SlackMessageSource, SlackSource, StageDoc, StageScope, TelegramChannelInput, TelegramConnectionDefinition, TelegramConnectionInput, TelegramMessageSource, TelegramSource, ToolApprovalSummary, UpdateAgentInput, UpdateCronInput, UpdateMcpInput, WebSocketAttachInput, WebSocketClientAttachMessage, WebSocketClientCancelMessage, WebSocketClientControlMessage, WebSocketClientExecuteMessage, WebSocketClientMessage, WebSocketConstructorLike, WebSocketHandlers, WebSocketLike, WebSocketOutputMessage, WebSocketRunInput, WebSocketServerMessage, WebSocketStreamMessage, WebSocketSubscription, Workspace, WorkspaceConfig, WorkspaceConfigDoc, WorkspaceDefinitionConfig, WorkspaceFileEntry, WorkspaceResource, ZaloChannelInput, ZaloConnectionDefinition, ZaloConnectionInput, ZaloMessageSource, ZaloSource };

package/dist/index.js

@@ -1 +1 @@
-import{B,pe,Ce,xe,Te,ke,V,C,me,q,W,Ie,D,K,Pe,Me,Ae,ze,Oe,Ne,je,qe,De,Le,Ue,Fe,Be,Ve,Ze,He,We,Ke,Ge,Je,Ye,Xe,h,_,ne}from"./chunk-pvpa68ca.js";import{$e,m,L,U}from"./chunk-0622rd68.js";export{m as BroodsAccountApiError,U as BroodsAccountClient,q as BroodsClient,Ie as BroodsWebSocketClient,C as DEFAULT_CORE_BASE_URL,me as IngressAcceptedError,Ce as MAX_OBSERVABILITY_BACKFILL,Ie as WebSocketClient,Ie as WebsocketClient,Ze as defineAgent,Ve as defineBroods,Xe as defineCron,qe as defineDiscordChannel,Me as defineDiscordConnection,De as defineGitHubChannel,Ae as defineGitHubConnection,He as defineHarness,Je as defineMcp,Le as definePancakeChannel,ze as definePancakeConnection,Ye as definePolicy,Ke as defineSandbox,Ge as defineSkill,Ue as defineSlackChannel,Oe as defineSlackConnection,Fe as defineTelegramChannel,Ne as defineTelegramConnection,We as defineWorkspace,Be as defineZaloChannel,je as defineZaloConnection,Pe as env,$e as envPlaceholder,ne as isBroodsConfig,_ as isConnectionDefinition,Te as isLogLevel,xe as isObservabilityClientMessage,h as isResource,ke as isRootSpanKind,V as isSandboxLogId,W as normalizeHttpServiceUrl,pe as readSseStream,L as resolveEnvCredential,B as resolveRunEvents,K as toWebSocketBaseUrl,D as webSocketSubprotocols};
+import{B,pe,xe,Te,ke,Pe,V,Ie,C,me,q,W,$e,K,D,Me,Ae,ze,Oe,Ne,je,qe,De,Le,Ue,Fe,Be,Ve,Ze,He,We,Ke,Ge,Je,Ye,Xe,Qe,ne,_,h}from"./chunk-7xc63gnm.js";import{m,Ce,L,U}from"./chunk-mqwt5n8x.js";export{m as BroodsAccountApiError,U as BroodsAccountClient,q as BroodsClient,$e as BroodsWebSocketClient,C as DEFAULT_CORE_BASE_URL,me as IngressAcceptedError,xe as MAX_OBSERVABILITY_BACKFILL,$e as WebSocketClient,$e as WebsocketClient,Ae as defineAgent,ze as defineBroods,Oe as defineCron,Ke as defineDiscordChannel,Fe as defineDiscordConnection,Ge as defineGitHubChannel,Be as defineGitHubConnection,Ne as defineHarness,je as defineMcp,Je as definePancakeChannel,Ve as definePancakeConnection,qe as definePolicy,De as defineSandbox,Le as defineSkill,Ye as defineSlackChannel,Ze as defineSlackConnection,Xe as defineTelegramChannel,He as defineTelegramConnection,Ue as defineWorkspace,Qe as defineZaloChannel,We as defineZaloConnection,Me as env,Ce as envPlaceholder,ne as isBroodsConfig,_ as isConnectionDefinition,Te as isLogLevel,ke as isObservabilityClientMessage,h as isResource,Pe as isRootSpanKind,V as isSandboxLogId,Ie as isTraceId,W as normalizeHttpServiceUrl,pe as readSseStream,L as resolveEnvCredential,B as resolveRunEvents,K as toWebSocketBaseUrl,D as webSocketSubprotocols};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "broods",
-  "version": "0.33.2",
+  "version": "0.33.4",
   "description": "CLI + TypeScript SDK for the broods agent platform.",
   "keywords": [
     "agents",

package/dist/chunk-0622rd68.js

@@ -1,2 +0,0 @@
-var u=/^[A-Z][A-Z0-9_]*$/;function $e(e){if(!u.test(e)||e.length>64)throw Error("envPlaceholder name must match /^[A-Z][A-Z0-9_]*$/ and be at most 64 characters.");return`\${${e}}`}class m extends Error{status;body;constructor(e,t,n,s){super(`${e} ${t} failed with ${n}: ${s}`);this.name="BroodsAccountApiError",this.status=n,this.body=s}}function L(){return o("BROODS_SESSION_TOKEN")??o("BROODS_ACCOUNT_SECRET")}function o(e){return typeof process<"u"?process?.env?.[e]:void 0}function i(e){return`?${new URLSearchParams({project:e.project,stage:e.stage}).toString()}`}class U{baseUrl;bearerToken;fetchImpl;constructor(e={}){let t=e.baseUrl??o("BROODS_BASE_URL")??"https://gateway.broods.app",n=e.sessionToken??e.accountSecret??L();if(!n)throw Error("BroodsAccountClient requires an accountSecret or sessionToken (or BROODS_ACCOUNT_SECRET / BROODS_SESSION_TOKEN).");let s=t.length;while(s>0&&t.charCodeAt(s-1)===47)s-=1;this.baseUrl=t.slice(0,s),this.bearerToken=n,this.fetchImpl=e.fetch??fetch}async getAccount(){let e=await this.request("GET","/v1/account");if(!e)throw new m("GET","/v1/account",404,"Account not found");return e.account}async updateAccount(e){return(await this.request("PATCH","/v1/account",e))?.account??null}async assumeRole(e,t={}){let n=await this.request("POST","/v1/account/assume-role",{roleId:e,...t.ttlSeconds!==void 0?{ttlSeconds:t.ttlSeconds}:{}});if(!n)throw new m("POST","/v1/account/assume-role",404,"Role not found");return n}async rotateSecret(){let e=await this.request("POST","/v1/account/rotate-secret");if(!e)throw new m("POST","/v1/account/rotate-secret",404,"Account not found");return e}async deleteAccount(){return await this.request("DELETE","/v1/account")??{deleted:!1}}webhookUrl(e,t){let n=[e,t].map(encodeURIComponent);return`${this.baseUrl}/webhooks/${n.join("/")}`}async listAgents(){return(await this.request("GET","/v1/agents"))?.agents??[]}async createAgent(e){let t=await this.request("POST","/v1/agents",e);if(!t)throw new m("POST","/v1/agents",404,"Not found");return t}async getAgent(e){return await this.request("GET",`/v1/agents/${encodeURIComponent(e)}`)}async updateAgent(e,t){return await this.request("PATCH",`/v1/agents/${encodeURIComponent(e)}`,t)}async deleteAgent(e){return(await this.request("DELETE",`/v1/agents/${encodeURIComponent(e)}`))?.deleted??!1}async listEnvVars(){return(await this.request("GET","/v1/env"))?.env??[]}async setEnvVar(e,t){await this.request("PUT",`/v1/env/${encodeURIComponent(e)}`,{value:t})}async deleteEnvVar(e){return(await this.request("DELETE",`/v1/env/${encodeURIComponent(e)}`))?.deleted??!1}async listCrons(){return(await this.request("GET","/v1/crons"))?.crons??[]}async createCron(e){let t=await this.request("POST","/v1/crons",e);if(!t)throw new m("POST","/v1/crons",404,"Not found");return t}async getCron(e){return await this.request("GET",`/v1/crons/${encodeURIComponent(e)}`)}async updateCron(e,t){return await this.request("PATCH",`/v1/crons/${encodeURIComponent(e)}`,t)}async deleteCron(e){return(await this.request("DELETE",`/v1/crons/${encodeURIComponent(e)}`))?.deleted??!1}async listCronRuns(e,t={}){let n=t.limit!==void 0?`?limit=${t.limit}`:"";return(await this.request("GET",`/v1/crons/${encodeURIComponent(e)}/runs${n}`))?.runs??[]}async listWorkspaces(){return(await this.request("GET","/v1/workspaces"))?.workspaces??[]}async createWorkspace(e){let t=await this.request("POST","/v1/workspaces",e);if(!t)throw new m("POST","/v1/workspaces",404,"Not found");return t}async getWorkspace(e){return await this.request("GET",`/v1/workspaces/${encodeURIComponent(e)}`)}async updateWorkspace(e,t){return await this.request("PATCH",`/v1/workspaces/${encodeURIComponent(e)}`,t)}async deleteWorkspace(e){return(await this.request("DELETE",`/v1/workspaces/${encodeURIComponent(e)}`))?.deleted??!1}async listWorkspaceFiles(e){return(await this.request("GET",`/v1/workspaces/${encodeURIComponent(e)}/files`))?.files??[]}async getWorkspaceFileUrl(e,t){let n=`?path=${encodeURIComponent(t)}`;return(await this.request("GET",`/v1/workspaces/${encodeURIComponent(e)}/files${n}`))?.url??null}async uploadWorkspaceFile(e,t){let n=`/v1/workspaces/${encodeURIComponent(e)}/files`,s=await this.request("POST",n,t);if(!s)throw new m("POST",n,404,"Workspace not found");return s.file}async renameWorkspaceFile(e,t,n){return(await this.request("PATCH",`/v1/workspaces/${encodeURIComponent(e)}/files`,{path:t,newPath:n}))?.renamed??!1}async deleteWorkspaceFile(e,t){return(await this.request("DELETE",`/v1/workspaces/${encodeURIComponent(e)}/files`,{path:t}))?.deleted??!1}async listSandboxes(){return(await this.request("GET","/v1/sandboxes"))?.sandboxes??[]}async createSandbox(e){let t=await this.request("POST","/v1/sandboxes",e);if(!t)throw new m("POST","/v1/sandboxes",404,"Not found");return t}async getSandbox(e){return await this.request("GET",`/v1/sandboxes/${encodeURIComponent(e)}`)}async updateSandbox(e,t){return await this.request("PATCH",`/v1/sandboxes/${encodeURIComponent(e)}`,t)}async deleteSandbox(e){return(await this.request("DELETE",`/v1/sandboxes/${encodeURIComponent(e)}`))?.deleted??!1}async suspendSandbox(e,t){return await this.sandboxAction(e,"suspend",{reservationKey:t})}async resumeSandbox(e,t){return await this.sandboxAction(e,"resume",{reservationKey:t})}async terminateSandbox(e,t){return await this.sandboxAction(e,"terminate",{reservationKey:t})}async snapshotSandbox(e,t,n){return await this.sandboxAction(e,"snapshot",{reservationKey:t,name:n})}async openSandboxTerminal(e,t){return await this.sandboxAction(e,"terminal",{reservationKey:t})}async listMcp(e){let t=`/v1/mcp${i(e)}`,n=await this.request("GET",t);if(!n)throw new m("GET",t,404,"Not found");return n.servers??[]}async createMcp(e,t){let n=`/v1/mcp${i(e)}`,s=await this.request("POST",n,t);if(!s)throw new m("POST",n,404,"Not found");return s}async uploadMcpBundle(e){let n=await this.request("POST","/v1/mcp/uploads");if(!n?.uploadUrl)throw new m("POST","/v1/mcp/uploads",502,"response omitted uploadUrl");let s=await this.fetchImpl(n.uploadUrl,{method:"POST",headers:{"Content-Type":"application/javascript"},body:e});if(!s.ok)throw new m("POST","/v1/mcp/uploads",s.status,await s.text());let{storageId:r}=await s.json();if(!r)throw new m("POST","/v1/mcp/uploads",502,"upload response omitted storageId");let a=await crypto.subtle.digest("SHA-256",new TextEncoder().encode(e)),c=Array.from(new Uint8Array(a)).map((l)=>l.toString(16).padStart(2,"0")).join("");return{bundleStorageId:r,sha256:c}}async getMcp(e){return await this.request("GET",`/v1/mcp/${encodeURIComponent(e)}`)}async updateMcp(e,t){return await this.request("PATCH",`/v1/mcp/${encodeURIComponent(e)}`,t)}async deleteMcp(e){return(await this.request("DELETE",`/v1/mcp/${encodeURIComponent(e)}`))?.deleted??!1}async listPolicies(){return(await this.request("GET","/v1/policies"))?.policies??[]}async createPolicy(e){let t=await this.request("POST","/v1/policies",e);if(!t)throw new m("POST","/v1/policies",404,"Not found");return t}async getPolicy(e){return await this.request("GET",`/v1/policies/${encodeURIComponent(e)}`)}async updatePolicy(e,t){return await this.request("PATCH",`/v1/policies/${encodeURIComponent(e)}`,t)}async deletePolicy(e){return(await this.request("DELETE",`/v1/policies/${encodeURIComponent(e)}`))?.deleted??!1}async listRoles(){return(await this.request("GET","/v1/roles"))?.roles??[]}async createRole(e){let t=await this.request("POST","/v1/roles",e);if(!t)throw new m("POST","/v1/roles",404,"Not found");return t}async getRole(e){return await this.request("GET",`/v1/roles/${encodeURIComponent(e)}`)}async updateRole(e,t){return await this.request("PATCH",`/v1/roles/${encodeURIComponent(e)}`,t)}async deleteRole(e){return(await this.request("DELETE",`/v1/roles/${encodeURIComponent(e)}`))?.deleted??!1}async listChannels(){return(await this.request("GET","/v1/channels"))?.channels??[]}async createChannel(e){let t=await this.request("POST","/v1/channels",e);if(!t)throw new m("POST","/v1/channels",404,"Not found");return t}async getChannel(e){return await this.request("GET",`/v1/channels/${encodeURIComponent(e)}`)}async updateChannel(e,t){return await this.request("PATCH",`/v1/channels/${encodeURIComponent(e)}`,t)}async deleteChannel(e){return(await this.request("DELETE",`/v1/channels/${encodeURIComponent(e)}`))?.deleted??!1}async listSkills(){return(await this.request("GET","/v1/skills"))?.skills??[]}async createSkill(e){let t=await this.request("POST","/v1/skills",e);if(!t)throw new m("POST","/v1/skills",404,"Not found");return t}async getSkill(e){return await this.request("GET",`/v1/skills/${encodeURIComponent(e)}`)}async uploadSkill(e,t){let n=`/v1/skills/${encodeURIComponent(e)}`,s=await this.request("PUT",n,t);if(!s)throw new m("PUT",n,404,"Skill not found");return s}async deleteSkill(e){return(await this.request("DELETE",`/v1/skills/${encodeURIComponent(e)}`))?.deleted??!1}async sandboxAction(e,t,n){let s=`/v1/sandboxes/${encodeURIComponent(e)}/${t}`,r=await this.request("POST",s,n);if(!r)throw new m("POST",s,404,"Sandbox not found");return r}async request(e,t,n){let s=await this.fetchImpl(`${this.baseUrl}${t}`,{method:e,headers:{Authorization:`Bearer ${this.bearerToken}`,...n!==void 0?{"Content-Type":"application/json"}:{}},...n!==void 0?{body:JSON.stringify(n)}:{}});if(s.status===404)return null;if(!s.ok)throw new m(e,t,s.status,await s.text());return await s.json()}}
-export{$e,m,L,U};

package/dist/chunk-2mmzrp1w.js

@@ -1 +0,0 @@
-import{N}from"./chunk-ttrs3r94.js";import{L,U}from"./chunk-0622rd68.js";import{e,o,i,l,s}from"./cli/index.js";var R={project:e().optional(),stage:e().optional()},M={sandboxId:e().min(1),reservationKey:e().min(1)},v=i().describe("Must be true, after the owner has agreed to this delete."),E="'********' keeps a stored secret and null deletes a field: never send a placeholder you did not read from a get.",A=[{singular:"agent",plural:"agents",key:"agentId",createHint:"Needs name and config; a 409 returns the existing agentId.",deleteHint:"Deleting an agent also drops its runtime rows.",updateHint:E,list:(t)=>t.listAgents(),get:(t,r)=>t.getAgent(r),create:(t,r)=>t.createAgent(r),update:(t,r,n)=>t.updateAgent(r,n),remove:(t,r)=>t.deleteAgent(r)},{singular:"cron",plural:"crons",key:"cronId",createHint:"Needs name, agentId, scheduleExpression (rate/cron/at) and input or events.",list:(t)=>t.listCrons(),get:(t,r)=>t.getCron(r),create:(t,r)=>t.createCron(r),update:(t,r,n)=>t.updateCron(r,n),remove:(t,r)=>t.deleteCron(r)},{singular:"sandbox",plural:"sandboxes",key:"sandboxId",updateHint:E,list:(t)=>t.listSandboxes(),get:(t,r)=>t.getSandbox(r),create:(t,r)=>t.createSandbox(r),update:(t,r,n)=>t.updateSandbox(r,n),remove:(t,r)=>t.deleteSandbox(r)},{singular:"workspace",plural:"workspaces",key:"workspaceId",list:(t)=>t.listWorkspaces(),get:(t,r)=>t.getWorkspace(r),create:(t,r)=>t.createWorkspace(r),update:(t,r,n)=>t.updateWorkspace(r,n),remove:(t,r)=>t.deleteWorkspace(r)},{singular:"policy",plural:"policies",key:"policyId",createHint:"Agent-runtime policy document (tool.call, skill.load), not API credential scoping.",list:(t)=>t.listPolicies(),get:(t,r)=>t.getPolicy(r),create:(t,r)=>t.createPolicy(r),update:(t,r,n)=>t.updatePolicy(r,n),remove:(t,r)=>t.deletePolicy(r)},{singular:"role",plural:"roles",key:"roleId",createHint:"Needs name and a version-1 policy over the API namespace, e.g. agents:read. Account secret only.",list:(t)=>t.listRoles(),get:(t,r)=>t.getRole(r),create:(t,r)=>t.createRole(r),update:(t,r,n)=>t.updateRole(r,n),remove:(t,r)=>t.deleteRole(r)},{singular:"channel",plural:"channels",key:"channelId",list:(t)=>t.listChannels(),get:(t,r)=>t.getChannel(r),create:(t,r)=>t.createChannel(r),update:(t,r,n)=>t.updateChannel(r,n),remove:(t,r)=>t.deleteChannel(r)},{singular:"skill",plural:"skills",key:"skillName",createHint:'source is "files" (base64), "json" or "github". The stored name comes from the SKILL.md frontmatter.',list:(t)=>t.listSkills(),get:(t,r)=>t.getSkill(r),create:(t,r)=>t.createSkill(r),remove:(t,r)=>t.deleteSkill(r)},{singular:"mcp",plural:"mcp",key:"serverId",scoped:!0,list:(t,r)=>t.listMcp(r),get:(t,r)=>t.getMcp(r),create:(t,r,n)=>t.createMcp(n,r),update:(t,r,n)=>t.updateMcp(r,n),remove:(t,r)=>t.deleteMcp(r)}];function qt(t={}){let r=L()?new U({}):null;if(!r&&!t.cli)throw Error("broods mcp needs a credential: set BROODS_SESSION_TOKEN or BROODS_ACCOUNT_SECRET, or run `broods login`.");let n=new N({name:"broods",version:"1"},{capabilities:{tools:{}}});if(r){for(let a of A)O(n,r,a,t.scope??{});q(n,r)}if(t.cli)j(n,t.cli);if(t.allowDestructive)x(n,r,t.cli??null);return n}function k(t){return{content:[{type:"text",text:JSON.stringify(t??null,null,2)}]}}function P(t){return{content:[{type:"text",text:t instanceof Error?t.message:String(t)}],isError:!0}}function w(t,r){if(!t)throw Error(`Refusing without confirm:true. ${r}`)}async function d(t){try{return k(await t())}catch(r){return P(r)}}function b(t,r,n,a){if(!t.scoped)return;let c=n??r.project,p=a??r.stage;if(!c||!p)throw Error(`${t.plural} live in one stage, so this call needs both 'project' and 'stage'`);return{project:c,stage:p}}function O(t,r,n,a){let c=e().min(1).describe(`The ${n.key}.`),p=n.scoped?` ${n.plural} live in one stage, so this also takes 'project' and 'stage'.`:"",{list:f,get:g,create:y,update:S,remove:_}=n;if(f){let u=`List every ${n.singular} on the account.${p}`;if(n.scoped)t.registerTool(`list-${n.plural}`,{description:u,inputSchema:R},async({project:h,stage:m})=>await d(async()=>await f(r,b(n,a,h,m))));else t.registerTool(`list-${n.plural}`,{description:u,inputSchema:{}},async()=>await d(async()=>await f(r)))}if(g)t.registerTool(`get-${n.singular}`,{description:`Read one ${n.singular} by ${n.key}.`,inputSchema:{id:c}},async({id:u})=>await d(async()=>await g(r,u)));if(y){let u=`Create one ${n.singular}. 'body' is the request body the config plane documents.`+(n.createHint?` ${n.createHint}`:"")+p+" Prefer changing the broods/ manifest and deploying for anything the project already declares.",h=s(e(),l());if(n.scoped)t.registerTool(`create-${n.singular}`,{description:u,inputSchema:{body:h,...R}},async({body:m,project:T,stage:I})=>await d(async()=>await y(r,m,b(n,a,T,I))));else t.registerTool(`create-${n.singular}`,{description:u,inputSchema:{body:h}},async({body:m})=>await d(async()=>await y(r,m)))}if(S)t.registerTool(`update-${n.singular}`,{description:`Deep-merge a patch into one ${n.singular} and return the updated record, so there is no need to read it back.`+(n.updateHint?` ${n.updateHint}`:""),inputSchema:{id:c,body:s(e(),l())}},async({id:u,body:h})=>await d(async()=>await S(r,u,h)));if(_)t.registerTool(`delete-${n.singular}`,{description:`Delete one ${n.singular}. Requires confirm:true, and takes one ${n.key} per call: never loop this over a list.`+(n.deleteHint?` ${n.deleteHint}`:""),inputSchema:{id:c,confirm:v}},async({id:u,confirm:h})=>await d(async()=>(w(h,`Deleting ${n.singular} '${u}' goes away for good: name it, get the owner's agreement, then retry.`),{deleted:await _(r,u),id:u})))}function q(t,r){t.registerTool("list-cron-runs",{description:"Run history for one cron, newest first. Check this before telling anyone a cron fired.",inputSchema:{cronId:e().min(1),limit:o().int().positive().max(100).optional()}},async({cronId:a,limit:c})=>await d(async()=>await r.listCronRuns(a,c===void 0?{}:{limit:c})));let n=[["suspend-sandbox","Suspend a persistent sandbox reservation.",(a,c)=>r.suspendSandbox(a,c)],["resume-sandbox","Resume a suspended sandbox reservation.",(a,c)=>r.resumeSandbox(a,c)],["terminate-sandbox","Terminate a sandbox reservation and drop its live-instance row. Terminate only a sandbox you created, and never one holding state you did not put there.",(a,c)=>r.terminateSandbox(a,c)],["open-sandbox-terminal","Mint a short-lived sealed ticket for an interactive PTY session on a persistent sandbox.",(a,c)=>r.openSandboxTerminal(a,c)]];for(let[a,c,p]of n)t.registerTool(a,{description:c,inputSchema:M},async({sandboxId:f,reservationKey:g})=>await d(async()=>await p(f,g)));t.registerTool("snapshot-sandbox",{description:"Snapshot a sandbox reservation into a reusable image (self-hosted provider).",inputSchema:{sandboxId:e().min(1),reservationKey:e().min(1),name:e().min(1)}},async({sandboxId:a,reservationKey:c,name:p})=>await d(async()=>await r.snapshotSandbox(a,c,p))),t.registerTool("upload-skill",{description:"Replace one skill's bundle wholesale (PUT, not a merge) by skillName. 'body' is the same source shape create-skill takes.",inputSchema:{id:e().min(1).describe("The skillName."),body:s(e(),l())}},async({id:a,body:c})=>await d(async()=>await r.uploadSkill(a,c))),t.registerTool("list-env-vars",{description:"List environment variable names. Values are write-only: the plane never returns them, so there is no read.",inputSchema:{}},async()=>await d(async()=>await r.listEnvVars())),t.registerTool("set-env-var",{description:"Create or replace one write-only environment variable. Reference it from a config as ${NAME} rather than inlining the value.",inputSchema:{name:e().min(1),value:e()}},async({name:a,value:c})=>await d(async()=>(await r.setEnvVar(a,c),{name:a,stored:!0}))),t.registerTool("delete-env-var",{description:"Delete one environment variable.",inputSchema:{name:e().min(1),confirm:v}},async({name:a,confirm:c})=>await d(async()=>(w(c,`Anything referencing \${${a}} breaks the moment this env var goes.`),{deleted:await r.deleteEnvVar(a),name:a}))),t.registerTool("assume-role",{description:"Exchange a role for a short-lived session token (default 1h, max 12h). Hand the returned token to whatever tool needs narrow access, as BROODS_SESSION_TOKEN. It is shown once and is not stored here.",inputSchema:{roleId:e().min(1),ttlSeconds:o().int().positive().max(43200).optional()}},async({roleId:a,ttlSeconds:c})=>await d(async()=>await r.assumeRole(a,c===void 0?{}:{ttlSeconds:c}))),t.registerTool("update-account",{description:"Rename this account or change its description. Everything else about an account is derived, not settable.",inputSchema:{username:e().optional(),description:e().nullable().optional()}},async({username:a,description:c})=>await d(async()=>await r.updateAccount({...a===void 0?{}:{username:a},...c===void 0?{}:{description:c}}))),t.registerTool("get-account",{description:"The account this server's credential resolves to. Run it first to confirm which tenant you are about to change.",inputSchema:{}},async()=>await d(async()=>await r.getAccount()))}function j(t,r){t.registerTool("list-orgs",{description:"Every organization this login can reach, with the current one marked.",inputSchema:{}},async()=>await d(async()=>{let n=await r.getOnboarding();return{currentOrgId:n.currentOrgId,orgs:n.orgs}})),t.registerTool("create-org",{description:"Create an organization and switch this login to it. Later calls act in the new org.",inputSchema:{name:e().min(1)}},async({name:n})=>await d(async()=>await r.createOnboardingOrg(n))),t.registerTool("select-org",{description:"Switch this login to another organization, by an orgId from list-orgs.",inputSchema:{orgId:e().min(1)}},async({orgId:n})=>await d(async()=>await r.selectOnboardingOrg(n))),t.registerTool("list-projects",{description:"Every project in the current org, empty ones last. Project names are not unique, so take the id from here.",inputSchema:{}},async()=>await d(async()=>await r.listProjects())),t.registerTool("list-stages",{description:"Every stage of one project, by project name.",inputSchema:{project:e().min(1)}},async({project:n})=>await d(async()=>await r.listStages(n))),t.registerTool("create-stage",{description:"Create a stage in a project, optionally cloning another stage's architecture and env vars. A project name that does not exist yet is created with it, which is the only way to make a project without deploying a manifest.",inputSchema:{project:e().min(1),name:e().min(1),from:e().optional().describe("Stage to clone architecture and env vars from.")}},async({project:n,name:a,from:c})=>await d(async()=>await r.createStage(n,a,c)))}function x(t,r,n){if(r)t.registerTool("rotate-secret",{description:"Rotate the account secret. The current secret stops working immediately and the new one is shown once, so this breaks every deployment and CI job still holding the old one. Requires confirm:true.",inputSchema:{confirm:v}},async({confirm:a})=>await d(async()=>(w(a,"Everything holding the current secret breaks the moment this runs."),await r.rotateSecret())));if(n)t.registerTool("delete-project",{description:"Delete a project and everything under it: stages, agents, canvas, env vars, crons and workspace files. Takes a projectId from list-projects and requires confirm:true.",inputSchema:{projectId:e().min(1),confirm:v}},async({projectId:a,confirm:c})=>await d(async()=>(w(c,`Project '${a}' and everything under it goes away: name it, get the owner's agreement, then retry.`),await n.deleteProject(a))))}export{qt as createBroodsMcpServer};