broods 0.36.2 → 0.37.0

package/dist/index.d.ts

@@ -101,6 +101,30 @@ declare const MODEL_PROVIDERS: {
 };
 type AccountModelProviderName = keyof typeof MODEL_PROVIDERS;
 
+/**
+ * Agent config validation, the only copy of it: Convex config HTTP checks a
+ * config on write and core re-checks the stored config on every run. Pure
+ * module: safe for the default Convex runtime. The public projection lives in
+ * ./responses.ts.
+ */
+
+declare const AGENT_HARNESS_TYPES: readonly ["claude-code", "codex", "deepagents", "opencode", "pi"];
+declare const AGENT_HARNESS_DEBUG_LEVELS: readonly ["error", "warn", "info", "debug", "trace"];
+declare const AGENT_HARNESS_PERMISSION_MODES: readonly ["allow-reads", "allow-edits", "allow-all"];
+declare const AGENT_LIFECYCLE_EVENT_NAMES: readonly ["agent.started", "agent.step.finished", "agent.finished", "agent.failed", "agent.approval.required", "tool.call.started", "tool.call.finished", "tool.result", "subagent.task.started", "subagent.task.finished"];
+
+/**
+ * Shared validation for MCP server registrations (#331). One normalizer
+ * serves every write path (CLI sync, direct API, dashboard). A `url` makes an "http" row
+ * core connects to over the stateless 2026-07-28 transport; a `bundle` makes
+ * a "hosted" row served by the tool-runner Lambda, hashed here so sha256
+ * always travels with the bundle. Auth header values may carry ${NAME}
+ * account env refs; they resolve into the encrypted agent config at sync
+ * time, never on this row, and credential-bearing headers must use one
+ * instead of an inline secret. `oauth` follows the same rule: clientSecret
+ * and refreshToken must be ${NAME} refs, so the row never holds a secret.
+ */
+
 /**
  * OAuth 2.0 refresh-token grant for an external row. Core mints access tokens
  * at connect time and sends `Authorization: Bearer <token>`, so a server
@@ -116,20 +140,18 @@ interface McpOauth {
 }
 
 /**
- * Agent configuration: types for the per-agent settings object, input
- * normalization, encryption helpers, patch-merge, and redaction.
+ * Agent configuration: types for the per-agent settings object, the runtime
+ * projection of a stored config, and encryption helpers. The validation rules
+ * are the config plane's (`@broods/convex/model/agentRules`), so a config is
+ * judged the same on write and on every run.
  * Account types and auth live in `./accounts.ts` and `../auth.ts`.
  */
 
-declare const AGENT_HARNESS_TYPES: readonly ["claude-code", "codex", "deepagents", "opencode", "pi"];
-declare const AGENT_HARNESS_DEBUG_LEVELS: readonly ["error", "warn", "info", "debug", "trace"];
-declare const AGENT_HARNESS_PERMISSION_MODES: readonly ["allow-reads", "allow-edits", "allow-all"];
 interface AgentConfig {
     agent?: AgentBehaviorConfig;
     harness?: AgentHarnessConfig;
     model?: AgentModelConfig;
     provider?: AgentProviderConfig;
-    sandbox?: string;
     sandboxes?: string[];
     workspaces?: AgentWorkspaceRef[];
     session?: AgentSessionConfig;
@@ -297,7 +319,7 @@ interface AgentWebhookHookConfig {
     events?: AgentLifecycleEventName[];
     [key: string]: unknown;
 }
-type AgentLifecycleEventName = "agent.started" | "agent.step.finished" | "agent.finished" | "agent.failed" | "agent.approval.required" | "tool.call.started" | "tool.call.finished" | "tool.result" | "subagent.task.started" | "subagent.task.finished";
+type AgentLifecycleEventName = (typeof AGENT_LIFECYCLE_EVENT_NAMES)[number];
 
 type AgentToolsConfig = Record<string, AgentToolConfig>;
 interface AgentToolConfig {
@@ -1944,10 +1966,8 @@ type SandboxDefinitionConfig = Omit<SandboxConfig, "envVars" | "options"> & {
     options?: SandboxDefinitionOptions;
 };
 type HarnessType = NonNullable<AgentConfig["harness"]>["type"];
-type HarnessDefinition = Omit<NonNullable<AgentConfig["harness"]>, "type"> & {
-    type: HarnessType;
-    sandbox: SandboxResource | string;
-};
+/** Harness settings. The harness runs on the agent's first sandbox. */
+type HarnessDefinition = NonNullable<AgentConfig["harness"]>;
 interface SkillDefinitionConfig {
     /**
      * Folder containing SKILL.md plus optional scripts/assets. Relative paths are
@@ -1991,8 +2011,9 @@ interface McpDefinitionConfig {
     handler?: McpHandler;
     /**
      * Extra request headers. Credential-bearing headers (Authorization,
-     * X-Api-Key, ...) must reference an account env var, e.g.
-     * `Bearer ${env("TOKEN")}`. Never carry an inline secret.
+     * X-Api-Key, ...) must reference an account env var by name inside a plain
+     * string, e.g. `"Bearer ${TOKEN}"`. `env()` returns an object, so a template
+     * literal around it sends `[object Object]`. Never carry an inline secret.
      */
     headers?: Record<string, string>;
     /**
@@ -2144,7 +2165,7 @@ type PancakeChannelInput = ChannelRulesInput & {
 };
 /**
  * Per-agent workspace mount with an optional sandbox override. A bare
- * `defineWorkspace(...)` inherits the agent-level sandbox; the object form lets
+ * `defineWorkspace(...)` inherits the agent's first sandbox; the object form lets
  * a single workspace pin its own sandbox, or set `sandbox: null` to force the
  * workspace read-only (no compute attached).
  */
@@ -2321,10 +2342,10 @@ type AgentDefinitionConfig = EnvRefString<Pick<AgentConfig, "agent" | "model" |
         webhooks?: readonly EnvRefString<AgentWebhookHookConfig>[];
     };
     connections?: readonly AnyConnectionDefinition[];
-    sandbox?: SandboxResource | string;
     /**
-     * Extra sandboxes bash picks by name with no workspace mounted, each with its
-     * own image, size, network and permissionMode. Never repeat `sandbox` here.
+     * Sandboxes this agent runs on. The first is the default: bash with no
+     * workspace runs there, workspaces without their own sandbox mount it, and a
+     * harness runs on it. The model reaches the others by name.
      */
     sandboxes?: readonly (SandboxResource | string)[];
     workspaces?: readonly AgentWorkspaceInput[];

package/dist/index.js

@@ -1 +1 @@
-import{W,Se,Me,xe,Ae,ze,G,$e,P,we,F,Y,ke,X,I,Oe,Ne,je,qe,De,Le,Ue,Fe,Be,Ve,Ze,He,We,Ge,Ke,Je,Ye,Xe,Qe,et,tt,rt,ie,R,h}from"./chunk-q2n2mxeg.js";import{m,Ce,L,U}from"./chunk-mqsvqhkj.js";export{m as BroodsAccountApiError,U as BroodsAccountClient,F as BroodsClient,ke as BroodsWebSocketClient,P as DEFAULT_CORE_BASE_URL,we as IngressAcceptedError,Me as MAX_OBSERVABILITY_BACKFILL,ke as WebSocketClient,ke as WebsocketClient,Ne as defineAgent,je as defineBroods,qe as defineCron,Ye as defineDiscordChannel,Ze as defineDiscordConnection,Xe as defineGitHubChannel,He as defineGitHubConnection,De as defineHarness,Le as defineMcp,Qe as definePancakeChannel,We as definePancakeConnection,Ue as definePolicy,Fe as defineSandbox,Be as defineSkill,et as defineSlackChannel,Ge as defineSlackConnection,tt as defineTelegramChannel,Ke as defineTelegramConnection,Ve as defineWorkspace,rt as defineZaloChannel,Je as defineZaloConnection,Oe as env,Ce as envPlaceholder,ie as isBroodsConfig,R as isConnectionDefinition,xe as isLogLevel,Ae as isObservabilityClientMessage,h as isResource,ze as isRootSpanKind,G as isSandboxLogId,$e as isTraceId,Y as normalizeHttpServiceUrl,Se as readSseStream,L as resolveEnvCredential,W as resolveRunEvents,X as toWebSocketBaseUrl,I as webSocketSubprotocols};
+import{W,Se,Me,xe,Ae,ze,K,$e,P,we,F,Y,ke,X,I,Oe,Ne,je,qe,De,Le,Ue,Fe,Be,Ve,Ze,He,We,Ke,Ge,Je,Ye,Xe,Qe,et,tt,rt,ie,R,g}from"./chunk-pxzdwb6g.js";import{m,Ce,L,U}from"./chunk-mqsvqhkj.js";export{m as BroodsAccountApiError,U as BroodsAccountClient,F as BroodsClient,ke as BroodsWebSocketClient,P as DEFAULT_CORE_BASE_URL,we as IngressAcceptedError,Me as MAX_OBSERVABILITY_BACKFILL,ke as WebSocketClient,ke as WebsocketClient,Ne as defineAgent,je as defineBroods,qe as defineCron,Ye as defineDiscordChannel,Ze as defineDiscordConnection,Xe as defineGitHubChannel,He as defineGitHubConnection,De as defineHarness,Le as defineMcp,Qe as definePancakeChannel,We as definePancakeConnection,Ue as definePolicy,Fe as defineSandbox,Be as defineSkill,et as defineSlackChannel,Ke as defineSlackConnection,tt as defineTelegramChannel,Ge as defineTelegramConnection,Ve as defineWorkspace,rt as defineZaloChannel,Je as defineZaloConnection,Oe as env,Ce as envPlaceholder,ie as isBroodsConfig,R as isConnectionDefinition,xe as isLogLevel,Ae as isObservabilityClientMessage,g as isResource,ze as isRootSpanKind,K as isSandboxLogId,$e as isTraceId,Y as normalizeHttpServiceUrl,Se as readSseStream,L as resolveEnvCredential,W as resolveRunEvents,X as toWebSocketBaseUrl,I as webSocketSubprotocols};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "broods",
-  "version": "0.36.2",
+  "version": "0.37.0",
   "description": "CLI + TypeScript SDK for the broods agent platform.",
   "keywords": [
     "agents",