broods 0.44.0 → 0.45.0

package/dist/index.d.ts

@@ -178,10 +178,11 @@ interface McpOauth {
 }
 
 /**
- * Agent configuration: types for the per-agent settings object, the runtime
- * projection of a stored config, and encryption helpers. The validation rules
- * are the config plane's (`@broods/convex/model/agentRules`), so a config is
- * judged the same on write and on every run.
+ * Agent configuration: types for the per-agent settings object and the
+ * runtime projection of a stored config. The validation rules are the config
+ * plane's (`@broods/convex/model/agentRules`), so a config is judged the same
+ * on write and on every run. Decrypting the stored blob is
+ * `../convex/account-keys.ts`.
  * Account types and auth live in `./accounts.ts` and `../auth.ts`.
  */
 
@@ -733,17 +734,24 @@ type UpdateCronInput = {
     input?: never;
 });
 
+/**
+ * The sandbox provider list: the one list the schema validator, the config
+ * rules, core's executor registry and the SDK derive from. A leaf on purpose,
+ * so `schema.ts` can read it without pulling the rules' import graph.
+ */
+declare const SANDBOX_PROVIDERS: readonly ["sandbox", "lambda", "e2b", "daytona", "vercel", "machine", "custom"];
+type SandboxProvider = (typeof SANDBOX_PROVIDERS)[number];
+
 /**
  * Sandbox-config validation for the Convex config plane. Ports core's former
  * storage/sandbox-config.ts normalizer so the public /v1/sandboxes contract
  * is unchanged. The public projection lives in ./responses.ts.
  */
-declare const SANDBOX_PROVIDERS: readonly ["sandbox", "lambda", "e2b", "daytona", "vercel", "machine"];
+
 declare const SANDBOX_RUNTIMES: readonly ["bash", "python", "node"];
 declare const SANDBOX_PERMISSION_MODES: readonly ["edit", "ask", "bypass"];
 declare const SANDBOX_NETWORK_MODES: readonly ["allow-all", "deny-all", "restricted"];
 declare const SANDBOX_SIZE_NAMES: readonly ["tiny", "xsmall", "small", "medium", "large"];
-type SandboxProvider = (typeof SANDBOX_PROVIDERS)[number];
 type RuntimeName = (typeof SANDBOX_RUNTIMES)[number];
 type PermissionMode = (typeof SANDBOX_PERMISSION_MODES)[number];
 type NetworkMode = (typeof SANDBOX_NETWORK_MODES)[number];
@@ -782,6 +790,81 @@ interface SandboxConfig {
     options?: Record<string, unknown>;
 }
 
+/**
+ * Sandbox config: account-scoped, reusable sandbox definitions referenced by
+ * agents via `config.sandboxes`. A sandbox is a collection of Claude-Code-style
+ * tools (bash/read/write/edit/glob/grep) backed by a provider. Stored encrypted
+ * at rest because `envVars`/`options` may hold secrets. Validation and the
+ * public projection live in packages/convex/model/sandboxRules.ts. The exec
+ * wire contract a sandbox server speaks is here too, since the SDK publishes it.
+ */
+
+/**
+ * One exec, POSTed as JSON to `<endpoint>/exec`. The `lambda` MicroVM image
+ * speaks it and the `custom` provider lets an account point core at its own
+ * server that does. snake_case on purpose: the image shipped it first.
+ */
+interface SandboxExecRequest {
+    /** Which interpreter runs `code`. Core sends `bash`. */
+    runtime: RuntimeName;
+    code: string;
+    /** Workspace namespace; selects the working directory. Absent for a stateless run. */
+    namespace?: string;
+    /** Root the namespace sits under; the server picks its default when absent. */
+    workspace_root?: string;
+    /** The server kills the process and answers `timed_out: true` once this passes. */
+    timeout_ms: number;
+    /** Positional arguments for `code`. */
+    args?: string[];
+    /** The process environment, set over an empty one or the server's start-up defaults (HOME, TMPDIR, PATH). */
+    env: Record<string, string>;
+}
+/** The JSON answer to one exec; HTTP 200 even when the code failed. */
+interface SandboxExecResponse {
+    /** False when the process failed, timed out, or the request was invalid. */
+    ok: boolean;
+    runtime?: string;
+    /** Null when the process was killed by the timeout. */
+    exit_code?: number | null;
+    timed_out: boolean;
+    /** Wall-clock time of the exec. */
+    duration_ms: number;
+    stdout: string;
+    stderr: string;
+    /** True when the server already cut stdout or stderr. */
+    truncated?: boolean;
+    /** CPU time of the exec in microseconds, for usage metering. */
+    cpu_usec?: number;
+    /** The machine's vCPU-s and GB-s above its baseline since boot. MicroVM only. */
+    burst?: {
+        vcpu_seconds: number;
+        gb_seconds: number;
+    };
+}
+
+/**
+ * Workspace isolation levels, the one list the config plane, core, the
+ * dashboard and the CLI read. No imports on purpose: the CLI bundles this file
+ * without the Convex runtime behind workspaceRules (like modelProviders.ts).
+ */
+declare const WORKSPACE_ISOLATION_LEVELS: readonly ["conversation", "agent"];
+/**
+ * How a workspace splits its files. "conversation" mounts a folder per channel
+ * partition, "agent" gives every attached agent its own folder. Unset shares
+ * one root between every agent and conversation.
+ */
+type WorkspaceIsolation = (typeof WORKSPACE_ISOLATION_LEVELS)[number];
+
+/**
+ * Workspace-config validation for the Convex config plane. Ports core's
+ * former storage/workspace-config.ts normalizer so the public /v1/workspaces
+ * contract is unchanged. Workspace config holds no secrets (a roleArn is not
+ * a secret), so it is stored and returned in plaintext. Pure module, safe
+ * for the default Convex runtime. The public projection lives in
+ * ./responses.ts. Core runs the storage access rule too, so it reads the env
+ * names of both sides.
+ */
+
 declare const WORKSPACE_STORAGE_PROVIDERS: readonly ["s3"];
 type WorkspaceStorageProvider = (typeof WORKSPACE_STORAGE_PROVIDERS)[number];
 type WorkspaceStorageAuth = {
@@ -799,9 +882,13 @@ interface WorkspaceStorageConfig {
     prefix?: string;
     auth?: WorkspaceStorageAuth;
 }
+/** What the API accepts: the boolean spelling of isolation is stored as its level. */
+type WorkspaceConfigInput = Omit<WorkspaceConfig, "isolation"> & {
+    isolation?: WorkspaceIsolation | boolean;
+};
 interface WorkspaceConfig {
     storage: WorkspaceStorageConfig;
-    isolation?: boolean;
+    isolation?: WorkspaceIsolation;
     harness?: {
         workspace?: {
             enabled?: boolean;
@@ -823,7 +910,7 @@ declare const AGENT_POLICY_ACTIONS: readonly ["agent.invoke", "tool.call", "work
  * resource route. Roles carry the same PolicyDocument shape as agent policies;
  * each caller passes its action set to `normalizePolicyDocument`.
  */
-declare const API_POLICY_ACTIONS: readonly ["account:read", "account:write", "agents:read", "agents:write", "channels:read", "channels:write", "crons:read", "crons:write", "env:read", "env:write", "hooks:read", "hooks:write", "mcp:read", "mcp:write", "policies:read", "policies:write", "sandboxes:read", "sandboxes:write", "skills:read", "skills:write", "workspaces:read", "workspaces:write"];
+declare const API_POLICY_ACTIONS: readonly ["account:read", "account:write", "agents:read", "agents:write", "audit:read", "audit:write", "channels:read", "channels:write", "crons:read", "crons:write", "env:read", "env:write", "hooks:read", "hooks:write", "mcp:read", "mcp:write", "policies:read", "policies:write", "sandboxes:read", "sandboxes:write", "skills:read", "skills:write", "workspaces:read", "workspaces:write"];
 type AgentPolicyAction = (typeof AGENT_POLICY_ACTIONS)[number];
 type ApiPolicyAction = (typeof API_POLICY_ACTIONS)[number];
 type PolicyAction = AgentPolicyAction | ApiPolicyAction;
@@ -1222,7 +1309,6 @@ interface PendingQuestion {
             label: string;
             description?: string;
         }[];
-        allowFreeText?: boolean;
     }[];
 }
 /** Answers one open prompt: option labels or free text, keyed by question id. */
@@ -1606,7 +1692,7 @@ interface BroodsClientOptions {
     baseUrl?: string;
     /** Hostname or URL of the core service. `gateway.broods.app` becomes `https://gateway.broods.app`. */
     host?: string;
-    /** API key used as the Bearer token for direct runtime calls. */
+    /** Runtime key used as the Bearer token for direct runtime calls. */
     apiKey?: string;
     fetch?: typeof fetch;
 }
@@ -1754,7 +1840,7 @@ interface Connection {
  * server runtimes, as well as Node and Bun.
  *
  * Auth: every call sends `Authorization: Bearer {accountSecret}` to
- * `{baseUrl}/v1/...`, or a short-lived `fp_sts_` role session token from
+ * `{baseUrl}/v1/...`, or a short-lived `bsts_` role session token from
  * `assumeRole()`, limited to what the role's policy allows. Secrets inside
  * agent configs are encrypted at rest by the platform and come back redacted
  * (`********`) on reads.
@@ -1767,11 +1853,11 @@ type ConfigPatch<T> = T extends readonly unknown[] ? T : T extends object ? {
 interface BroodsAccountClientOptions {
     /** Base URL of the broods gateway. Falls back to `BROODS_BASE_URL`, then `https://gateway.broods.app`. */
     baseUrl?: string;
-    /** Account secret used as the Bearer token. Falls back to `BROODS_ACCOUNT_SECRET`. */
+    /** Account key used as the Bearer token. Falls back to `BROODS_ACCOUNT_SECRET`. */
     accountSecret?: string;
     /**
-     * Short-lived `fp_sts_` role session token (from {@link BroodsAccountClient.assumeRole})
-     * used as the Bearer instead of the account secret. The session can only do
+     * Short-lived `bsts_` role session token (from {@link BroodsAccountClient.assumeRole})
+     * used as the Bearer instead of the account key. The session can only do
      * what its role's policy allows. Falls back to `BROODS_SESSION_TOKEN`.
      */
     sessionToken?: string;
@@ -1782,6 +1868,8 @@ interface BroodsAccount {
     accountId: string;
     username: string;
     status: string;
+    /** Days an audit row is kept; absent means the 90 day default. */
+    auditRetentionDays?: number;
     [key: string]: unknown;
 }
 /** Public agent record; `config` comes back with secret values redacted. */
@@ -1857,7 +1945,7 @@ interface AccountPolicy {
 /**
  * Public account-role record returned by the roles routes. The policy uses the
  * API action namespace (`"agents:read"`, `"crons:write"`, ...); `projectId` and
- * `stageId` bound which stage runtime keys may assume the role.
+ * `stageId` bound which runtime keys may assume the role.
  */
 interface AccountRole {
     accountId: string;
@@ -1870,9 +1958,82 @@ interface AccountRole {
     createdAt: string;
     updatedAt: string;
 }
+/** One link of an agent actor's delegation chain: who asked, or an agent that delegated. */
+type AuditPrincipalLink = {
+    kind: "user";
+    id: string;
+    name?: string;
+    channel?: string;
+} | {
+    kind: "api";
+    keyKind: "account" | "deployment" | "cron";
+} | {
+    kind: "agent";
+    agentId: string;
+};
+/**
+ * One row of the account's hash-chained audit ledger, as `GET /v1/audit`
+ * serves it. `hash` is sha256 over the canonical JSON of every field but
+ * `hash` itself (an absent optional field is left out, not null), with
+ * `prevHash` linking it to the row before.
+ */
+interface AuditEvent {
+    accountId: string;
+    seq: number;
+    prevHash: string;
+    hash: string;
+    /** Unix ms. */
+    at: number;
+    actor: {
+        kind: string;
+        id?: string;
+        email?: string;
+        name?: string;
+        agentId?: string;
+        /** On an agent actor: who asked, then each agent that delegated, oldest first. */
+        chain?: AuditPrincipalLink[];
+    };
+    action: string;
+    resource: {
+        kind: string;
+        id?: string;
+        name?: string;
+    };
+    summary: string;
+    detailsJson?: string;
+    projectId?: string;
+    stageId?: string;
+    traceId?: string;
+}
+/** A page of ledger rows plus the chain head to compare the last row against. */
+interface AuditPage {
+    events: AuditEvent[];
+    /** Pass as `since` to read the rows after this page. */
+    nextSince: number;
+    head: {
+        seq: number;
+        hash: string;
+    } | null;
+}
+/** Result of `GET /v1/audit/verify`: the chain recomputed over the checked range. */
+interface AuditVerification {
+    ok: boolean;
+    brokenAtSeq?: number;
+    checkedFrom?: number;
+    checkedTo?: number;
+}
+/** The account's audit export target. The signing secret never comes back. */
+interface AuditSink {
+    kind: "webhook";
+    url: string;
+    /** Highest seq the receiver acknowledged. */
+    exportedSeq: number;
+    lastError?: string;
+    updatedAt: string;
+}
 /** Short-lived role session minted by `POST /v1/account/assume-role`. */
 interface AssumeRoleResult {
-    /** `fp_sts_` bearer token; pass it as `sessionToken` to a new client. */
+    /** `bsts_` bearer token; pass it as `sessionToken` to a new client. */
     token: string;
     /** ISO timestamp when the session stops working. */
     expiresAt: string;
@@ -2019,7 +2180,7 @@ interface SkillUploadInput {
     }>;
     url?: string;
 }
-/** Result of `POST /v1/account/rotate-secret`. The returned `secret` is shown once; the old secret stops working immediately. */
+/** Result of `POST /v1/account/rotate-secret`. The returned `secret` is the new account key, shown once; the old key stops working immediately. */
 interface RotateSecretResult {
     account: BroodsAccount;
     secret: string;
@@ -2055,7 +2216,7 @@ declare class BroodsAccountApiError extends Error {
 declare function envPlaceholder(name: string): string;
 /**
  * The credential the environment supplies, with a role session winning over
- * the account secret. The constructor throws through this same resolution, so
+ * the account key. The constructor throws through this same resolution, so
  * callers that can run without an account credential (`broods mcp` with only a
  * stored login) probe here instead of catching the constructor.
  */
@@ -2077,17 +2238,19 @@ declare class BroodsAccountClient {
     updateAccount(patch: {
         username?: string;
         description?: string | null;
+        /** 1 to 3650 days, or null to return to the 90 day default. */
+        auditRetentionDays?: number | null;
     }): Promise<BroodsAccount | null>;
     /**
-     * Exchange a role for a short-lived `fp_sts_` session token. Callable with
-     * the account secret, a CLI login token, or a stage runtime key (the latter
+     * Exchange a role for a short-lived `bsts_` session token. Callable with
+     * the account key, a CLI login token, or a runtime key (the latter
      * only into roles scoped to the key's own project/stage). Construct a new
      * client with `{ sessionToken: result.token }` to act as the role.
      */
     assumeRole(roleId: string, options?: {
         ttlSeconds?: number;
     }): Promise<AssumeRoleResult>;
-    /** Rotate the account secret. The returned `secret` is shown once and the current secret stops working immediately, so persist it before the process exits. */
+    /** Rotate the account key. The returned `secret` is the new key, shown once, and the current key stops working immediately, so persist it before the process exits. */
     rotateSecret(): Promise<RotateSecretResult>;
     /** Delete this account and cascade-clean every account-scoped resource. `cleanup` reports per-resource deletion counts. */
     deleteAccount(): Promise<DeleteAccountResult>;
@@ -2138,13 +2301,13 @@ declare class BroodsAccountClient {
     createWorkspace(input: {
         name: string;
         description?: string;
-        config?: WorkspaceConfig;
+        config?: WorkspaceConfigInput;
     }): Promise<AccountWorkspace>;
     getWorkspace(workspaceId: string): Promise<AccountWorkspace | null>;
     updateWorkspace(workspaceId: string, patch: {
         name?: string;
         description?: string | null;
-        config?: ConfigPatch<WorkspaceConfig>;
+        config?: ConfigPatch<WorkspaceConfigInput>;
     }): Promise<AccountWorkspace | null>;
     deleteWorkspace(workspaceId: string): Promise<boolean>;
     /** Flat listing of every file in the workspace's S3-backed filesystem. Returns [] when the workspace is gone. */
@@ -2231,6 +2394,32 @@ declare class BroodsAccountClient {
         status?: "active" | "disabled";
     }): Promise<AccountRole | null>;
     deleteRole(roleId: string): Promise<boolean>;
+    /** The audit ledger: rows since a seq, chain verification, and the webhook sink. */
+    readonly audit: {
+        /** Rows with `seq > since`, oldest first, at most `limit` (default 100, max 500). */
+        list: (options?: {
+            since?: number;
+            limit?: number;
+        }) => Promise<AuditPage>;
+        /**
+         * Recompute the chain over `[fromSeq, toSeq]`, from the oldest kept row by
+         * default, at most 1000 rows per call. `ok` covers only `checkedFrom` to
+         * `checkedTo`; on a longer ledger call again with `fromSeq: checkedTo + 1`.
+         */
+        verify: (options?: {
+            fromSeq?: number;
+            toSeq?: number;
+        }) => Promise<AuditVerification>;
+        /** The account's sink, or null when none is set. */
+        getSink: () => Promise<AuditSink | null>;
+        /** Set the one webhook sink. `url` must be public https; `secret` signs each batch. */
+        setSink: (input: {
+            url: string;
+            secret: string;
+        }) => Promise<AuditSink>;
+        /** Remove the sink; exports stop and rows age out on retention alone. Returns whether one existed. */
+        deleteSink: () => Promise<boolean>;
+    };
     listChannels(): Promise<AccountChannel[]>;
     /** Bind one real chat channel to an agent. One active record per place. */
     createChannel(input: {
@@ -2314,7 +2503,7 @@ interface BroodsWebSocketClientOptions {
     baseUrl?: string;
     /** Hostname or URL of the core service. `gateway.broods.app` becomes `https://gateway.broods.app`. */
     host?: string;
-    /** API key used as the WebSocket token. Defaults to BROODS_API_KEY from the environment or local .env files. */
+    /** Runtime key used as the WebSocket token. Defaults to BROODS_API_KEY from the environment or local .env files. */
     apiKey?: string;
     WebSocket?: WebSocketConstructorLike;
     connectTimeoutMs?: number;
@@ -2414,9 +2603,15 @@ type ResourceInput<Name extends string, Config> = {
  * `persistent` sandbox reconnects to when no workspace is mounted; unset, each
  * agent gets its own, and pinning one string on two sandboxes shares a machine.
  * Keys are scoped to the account, so they cannot reach another account's machine.
+ * A `custom` sandbox names its server with `endpoint` (https, required), an
+ * optional bearer `token` and extra static `headers`; a credential header's
+ * value is an `env("NAME")` ref.
  */
 type SandboxDefinitionOptions = Record<string, unknown> & {
     reservationKey?: string;
+    endpoint?: string;
+    token?: string | EnvRef;
+    headers?: Record<string, string | EnvRef>;
 };
 /**
  * Code-first sandbox config input. Mirrors core's `SandboxConfig` but lets
@@ -2917,7 +3112,7 @@ type AgentDefinitionConfig = EnvRefString<Pick<AgentConfig, "agent" | "model" |
     policies?: readonly (PolicyResource | string)[];
     /**
      * Opt the agent into the public runtime endpoint (SSE/WebSocket via the
-     * stage runtime key). Off by default: when unset the public endpoint
+     * runtime key). Off by default: when unset the public endpoint
      * refuses requests for this agent. Reach a private agent through an
      * internal endpoint or a channel webhook. See issue #65.
      */
@@ -2934,12 +3129,13 @@ type CronDefinitionConfig = Omit<CreateCronInput, "agentId" | "name"> & {
 type AgentResource<Name extends string = string> = ResourceDefinition<"agent", Name, AgentDefinitionConfig>;
 /**
  * Code-first workspace config. Says `partitioned` where storage says
- * `isolation`: the flag permits a split, it does not perform one. A channel's
- * `partition` decides which folder a run mounts.
+ * `isolation`. `true` or "conversation" permits a per-conversation split that
+ * a channel's `partition` performs; "agent" splits the workspace per attached
+ * agent on its own, with no partition needed.
  */
 type WorkspaceDefinitionConfig = Omit<WorkspaceConfig, "isolation"> & {
-    /** Allow this workspace to be split into per-conversation folders. */
-    partitioned?: boolean;
+    /** How to split this workspace: per conversation (`true`) or per agent. */
+    partitioned?: boolean | WorkspaceIsolation;
 };
 type WorkspaceResource<Name extends string = string> = ResourceDefinition<"workspace", Name, WorkspaceDefinitionConfig>;
 type SandboxResource<Name extends string = string> = ResourceDefinition<"sandbox", Name, SandboxDefinitionConfig>;
@@ -3015,4 +3211,4 @@ declare function isConnectionDefinition(value: unknown): value is AnyConnectionD
 declare function isResource(value: unknown): value is AnyResource;
 
 export { BroodsAccountApiError, BroodsAccountClient, BroodsClient, BroodsWebSocketClient, DEFAULT_CORE_BASE_URL, IngressAcceptedError, MAX_OBSERVABILITY_BACKFILL, BroodsWebSocketClient as WebSocketClient, BroodsWebSocketClient as WebsocketClient, defineAgent, defineBroods, defineCron, defineDiscordChannel, defineDiscordConnection, defineGitHubChannel, defineGitHubConnection, defineGoogleChatChannel, defineGoogleChatConnection, defineHarness, defineInstagramChannel, defineInstagramConnection, defineLinearChannel, defineLinearConnection, defineMatrixChannel, defineMatrixConnection, defineMcp, defineMessengerChannel, defineMessengerConnection, definePancakeChannel, definePancakeConnection, definePolicy, defineSandbox, defineSkill, defineSlackChannel, defineSlackConnection, defineTeamsChannel, defineTeamsConnection, defineTelegramChannel, defineTelegramConnection, defineTwilioChannel, defineTwilioConnection, defineWhatsAppChannel, defineWhatsAppConnection, defineWorkspace, defineZaloChannel, defineZaloConnection, env, envPlaceholder, isBroodsConfig, isConnectionDefinition, isLogLevel, isObservabilityClientMessage, isResource, isRootSpanKind, isSandboxLogId, isTraceId, normalizeHttpServiceUrl, readSseStream, resolveEnvCredential, resolveRunEvents, toWebSocketBaseUrl, webSocketSubprotocols };
-export type { Account, AccountAgent, AccountChannel, AccountEnvVar, AccountMcp, AccountPolicy, AccountRole, AccountSandbox, AccountWorkspace, Agent, AgentChannelsConfig, AgentCodeHookConfig, AgentConfig, AgentConfigDoc, AgentContinueInput, AgentDefinitionConfig, AgentDiscordChannelConfig, AgentGitHubChannelConfig, AgentGoogleChatChannelConfig, AgentHandle, AgentHookEventName, AgentHooks, AgentHooksConfig, AgentInstagramChannelConfig, AgentLinearChannelConfig, AgentMatrixChannelConfig, AgentMessengerChannelConfig, AgentPancakeChannelConfig, AgentProviderSettings, AgentReference, AgentResource, AgentRunAnswerInput, AgentRunEventInput, AgentRunInput, AgentRunModelOverrides, AgentRunOverrides, AgentRunResult, AgentSkillsDefinitionConfig, AgentSlackChannelConfig, AgentStreamPart, AgentSubagentDefinitionConfig, AgentTeamsChannelConfig, AgentTelegramChannelConfig, AgentTwilioChannelConfig, AgentWebhookHookConfig, AgentWhatsAppChannelConfig, AgentWorkspaceInput, AgentWorkspaceRef, AgentWorkspaceRefInput, AgentZaloChannelConfig, AnyConnectionDefinition, AnyResource, AssumeRoleResult, AsyncAgentRun, AsyncPollOptions, AsyncRequestAccepted, AsyncStatus, BroodsAccount, BroodsAccountClientOptions, BroodsClientOptions, BroodsConfigDefinition, BroodsProjectConfig, BroodsWebSocketClientOptions, ChannelAgentInput, ChannelDefinitionConfig, ChannelMessageReceived, ChannelPartition, ChannelRecordConfig, ChannelReference, ChannelReplyIn, ChannelResource, ChannelType, CliManifest, CliManifestResource, ConfigPatch, Connection, ConnectionCode, ConnectionDefinition, ConnectionStart, ConnectionStartResult, ConnectionType, CreateAgentResult, CreateCronInput, CreateMcpInput, Cron, CronDefinitionConfig, CronDoc, CronLastStatus, CronResource, CronRun, CronStatus, DeleteAccountResult, DiscordChannelInput, DiscordConnectionDefinition, DiscordConnectionInput, DiscordMessageSource, DiscordSource, Doc, EnvAccessor, EnvRef, EnvRefString, GeneratedIds, GitHubChannelInput, GitHubConnectionDefinition, GitHubConnectionInput, GitHubMessageSource, GitHubSource, GoogleChatChannelInput, GoogleChatConnectionDefinition, GoogleChatConnectionInput, GoogleChatMessageSource, GoogleChatSource, HarnessDefinition, HarnessType, HookAgentConfig, HookContext, Id, IngressMode, IngressStatus, InstagramChannelInput, InstagramConnectionDefinition, InstagramConnectionInput, InstagramMessageSource, InstagramSource, LinearChannelInput, LinearConnectionDefinition, LinearConnectionInput, LinearMessageSource, LinearSource, LogLevel, MatrixChannelInput, MatrixConnectionDefinition, MatrixConnectionInput, MatrixMessageSource, MatrixSource, McpDefinitionConfig, McpHandler, McpOauthInput, McpResource, MessengerChannelInput, MessengerConnectionDefinition, MessengerConnectionInput, MessengerMessageSource, MessengerSource, ObservabilityBackfillMessage, ObservabilityClientMessage, ObservabilityErrorMessage, ObservabilityFetchTraceMessage, ObservabilityLogEntry, ObservabilityLogMessage, ObservabilityReadyMessage, ObservabilityServerMessage, ObservabilitySpanMessage, ObservabilitySpanRow, ObservabilitySubscribeMessage, ObservabilityUnsubscribeMessage, PancakeChannelInput, PancakeConnectionDefinition, PancakeConnectionInput, PancakeMessageSource, PancakeSource, PendingQuestion, PolicyDefinitionConfig, PolicyDocument, PolicyResource, ProjectDoc, ProviderConfigInput, ProviderSettingsInput, QuestionAnswer, ResourceApi, ResourceDefinition, ResourceInput, ResourceKind, RotateSecretResult, Sandbox, SandboxConfig, SandboxConfigDoc, SandboxDefinitionConfig, SandboxDefinitionOptions, SandboxLifecycleResult, SandboxResource, SandboxSnapshotResult, SandboxTerminalTicket, Skill, SkillDefinitionConfig, SkillResource, SkillUploadInput, SlackChannelInput, SlackConnectionDefinition, SlackConnectionInput, SlackMessageSource, SlackSource, StageDoc, StageScope, TaskWaitingOn, TeamsChannelInput, TeamsConnectionDefinition, TeamsConnectionInput, TeamsMessageSource, TeamsSource, TelegramChannelInput, TelegramConnectionDefinition, TelegramConnectionInput, TelegramMessageSource, TelegramSource, ToolApprovalSummary, TwilioChannelInput, TwilioConnectionDefinition, TwilioConnectionInput, TwilioMessageSource, TwilioSource, UpdateAgentInput, UpdateCronInput, UpdateMcpInput, WebSocketAttachInput, WebSocketClientAttachMessage, WebSocketClientCancelMessage, WebSocketClientControlMessage, WebSocketClientExecuteMessage, WebSocketClientMessage, WebSocketConstructorLike, WebSocketHandlers, WebSocketLike, WebSocketOutputMessage, WebSocketRunInput, WebSocketServerMessage, WebSocketStreamMessage, WebSocketSubscription, WhatsAppChannelInput, WhatsAppConnectionDefinition, WhatsAppConnectionInput, WhatsAppMessageSource, WhatsAppSource, Workspace, WorkspaceConfig, WorkspaceConfigDoc, WorkspaceDefinitionConfig, WorkspaceFileEntry, WorkspaceResource, ZaloChannelInput, ZaloConnectionDefinition, ZaloConnectionInput, ZaloMessageSource, ZaloSource };
+export type { Account, AccountAgent, AccountChannel, AccountEnvVar, AccountMcp, AccountPolicy, AccountRole, AccountSandbox, AccountWorkspace, Agent, AgentChannelsConfig, AgentCodeHookConfig, AgentConfig, AgentConfigDoc, AgentContinueInput, AgentDefinitionConfig, AgentDiscordChannelConfig, AgentGitHubChannelConfig, AgentGoogleChatChannelConfig, AgentHandle, AgentHookEventName, AgentHooks, AgentHooksConfig, AgentInstagramChannelConfig, AgentLinearChannelConfig, AgentMatrixChannelConfig, AgentMessengerChannelConfig, AgentPancakeChannelConfig, AgentProviderSettings, AgentReference, AgentResource, AgentRunAnswerInput, AgentRunEventInput, AgentRunInput, AgentRunModelOverrides, AgentRunOverrides, AgentRunResult, AgentSkillsDefinitionConfig, AgentSlackChannelConfig, AgentStreamPart, AgentSubagentDefinitionConfig, AgentTeamsChannelConfig, AgentTelegramChannelConfig, AgentTwilioChannelConfig, AgentWebhookHookConfig, AgentWhatsAppChannelConfig, AgentWorkspaceInput, AgentWorkspaceRef, AgentWorkspaceRefInput, AgentZaloChannelConfig, AnyConnectionDefinition, AnyResource, AssumeRoleResult, AsyncAgentRun, AsyncPollOptions, AsyncRequestAccepted, AsyncStatus, AuditEvent, AuditPage, AuditPrincipalLink, AuditSink, AuditVerification, BroodsAccount, BroodsAccountClientOptions, BroodsClientOptions, BroodsConfigDefinition, BroodsProjectConfig, BroodsWebSocketClientOptions, ChannelAgentInput, ChannelDefinitionConfig, ChannelMessageReceived, ChannelPartition, ChannelRecordConfig, ChannelReference, ChannelReplyIn, ChannelResource, ChannelType, CliManifest, CliManifestResource, ConfigPatch, Connection, ConnectionCode, ConnectionDefinition, ConnectionStart, ConnectionStartResult, ConnectionType, CreateAgentResult, CreateCronInput, CreateMcpInput, Cron, CronDefinitionConfig, CronDoc, CronLastStatus, CronResource, CronRun, CronStatus, DeleteAccountResult, DiscordChannelInput, DiscordConnectionDefinition, DiscordConnectionInput, DiscordMessageSource, DiscordSource, Doc, EnvAccessor, EnvRef, EnvRefString, GeneratedIds, GitHubChannelInput, GitHubConnectionDefinition, GitHubConnectionInput, GitHubMessageSource, GitHubSource, GoogleChatChannelInput, GoogleChatConnectionDefinition, GoogleChatConnectionInput, GoogleChatMessageSource, GoogleChatSource, HarnessDefinition, HarnessType, HookAgentConfig, HookContext, Id, IngressMode, IngressStatus, InstagramChannelInput, InstagramConnectionDefinition, InstagramConnectionInput, InstagramMessageSource, InstagramSource, LinearChannelInput, LinearConnectionDefinition, LinearConnectionInput, LinearMessageSource, LinearSource, LogLevel, MatrixChannelInput, MatrixConnectionDefinition, MatrixConnectionInput, MatrixMessageSource, MatrixSource, McpDefinitionConfig, McpHandler, McpOauthInput, McpResource, MessengerChannelInput, MessengerConnectionDefinition, MessengerConnectionInput, MessengerMessageSource, MessengerSource, ObservabilityBackfillMessage, ObservabilityClientMessage, ObservabilityErrorMessage, ObservabilityFetchTraceMessage, ObservabilityLogEntry, ObservabilityLogMessage, ObservabilityReadyMessage, ObservabilityServerMessage, ObservabilitySpanMessage, ObservabilitySpanRow, ObservabilitySubscribeMessage, ObservabilityUnsubscribeMessage, PancakeChannelInput, PancakeConnectionDefinition, PancakeConnectionInput, PancakeMessageSource, PancakeSource, PendingQuestion, PolicyDefinitionConfig, PolicyDocument, PolicyResource, ProjectDoc, ProviderConfigInput, ProviderSettingsInput, QuestionAnswer, ResourceApi, ResourceDefinition, ResourceInput, ResourceKind, RotateSecretResult, Sandbox, SandboxConfig, SandboxConfigDoc, SandboxDefinitionConfig, SandboxDefinitionOptions, SandboxExecRequest, SandboxExecResponse, SandboxLifecycleResult, SandboxProvider, SandboxResource, SandboxSnapshotResult, SandboxTerminalTicket, Skill, SkillDefinitionConfig, SkillResource, SkillUploadInput, SlackChannelInput, SlackConnectionDefinition, SlackConnectionInput, SlackMessageSource, SlackSource, StageDoc, StageScope, TaskWaitingOn, TeamsChannelInput, TeamsConnectionDefinition, TeamsConnectionInput, TeamsMessageSource, TeamsSource, TelegramChannelInput, TelegramConnectionDefinition, TelegramConnectionInput, TelegramMessageSource, TelegramSource, ToolApprovalSummary, TwilioChannelInput, TwilioConnectionDefinition, TwilioConnectionInput, TwilioMessageSource, TwilioSource, UpdateAgentInput, UpdateCronInput, UpdateMcpInput, WebSocketAttachInput, WebSocketClientAttachMessage, WebSocketClientCancelMessage, WebSocketClientControlMessage, WebSocketClientExecuteMessage, WebSocketClientMessage, WebSocketConstructorLike, WebSocketHandlers, WebSocketLike, WebSocketOutputMessage, WebSocketRunInput, WebSocketServerMessage, WebSocketStreamMessage, WebSocketSubscription, WhatsAppChannelInput, WhatsAppConnectionDefinition, WhatsAppConnectionInput, WhatsAppMessageSource, WhatsAppSource, Workspace, WorkspaceConfig, WorkspaceConfigDoc, WorkspaceConfigInput, WorkspaceDefinitionConfig, WorkspaceFileEntry, WorkspaceIsolation, WorkspaceResource, ZaloChannelInput, ZaloConnectionDefinition, ZaloConnectionInput, ZaloMessageSource, ZaloSource };

package/dist/index.js

@@ -1 +1 @@
-import{V,ge,Me,Pe,Ne,je,G,Ie,E,ye,F,J,xe,Y,z,qe,De,Le,Ue,Fe,Be,Ze,He,Ve,Ge,We,Ke,Je,Ye,Xe,Qe,et,tt,nt,rt,ot,st,it,at,ct,lt,ut,dt,pt,mt,ht,ft,gt,yt,St,bt,vt,_t,ie,w,g}from"./chunk-t0fvmbkd.js";import{m,Ae,Z,R}from"./chunk-a3f2xzbr.js";export{m as BroodsAccountApiError,R as BroodsAccountClient,F as BroodsClient,xe as BroodsWebSocketClient,E as DEFAULT_CORE_BASE_URL,ye as IngressAcceptedError,Me as MAX_OBSERVABILITY_BACKFILL,xe as WebSocketClient,xe as WebsocketClient,De as defineAgent,Le as defineBroods,Ue as defineCron,ct as defineDiscordChannel,We as defineDiscordConnection,lt as defineGitHubChannel,Ke as defineGitHubConnection,ut as defineGoogleChatChannel,Je as defineGoogleChatConnection,Fe as defineHarness,dt as defineInstagramChannel,Ye as defineInstagramConnection,pt as defineLinearChannel,Xe as defineLinearConnection,mt as defineMatrixChannel,Qe as defineMatrixConnection,Be as defineMcp,ht as defineMessengerChannel,et as defineMessengerConnection,ft as definePancakeChannel,tt as definePancakeConnection,Ze as definePolicy,He as defineSandbox,Ve as defineSkill,gt as defineSlackChannel,nt as defineSlackConnection,yt as defineTeamsChannel,rt as defineTeamsConnection,St as defineTelegramChannel,ot as defineTelegramConnection,bt as defineTwilioChannel,st as defineTwilioConnection,vt as defineWhatsAppChannel,it as defineWhatsAppConnection,Ge as defineWorkspace,_t as defineZaloChannel,at as defineZaloConnection,qe as env,Ae as envPlaceholder,ie as isBroodsConfig,w as isConnectionDefinition,Pe as isLogLevel,Ne as isObservabilityClientMessage,g as isResource,je as isRootSpanKind,G as isSandboxLogId,Ie as isTraceId,J as normalizeHttpServiceUrl,ge as readSseStream,Z as resolveEnvCredential,V as resolveRunEvents,Y as toWebSocketBaseUrl,z as webSocketSubprotocols};
+import{V,ge,Me,Pe,Ne,je,G,Ie,E,ye,F,J,xe,Y,z,qe,De,Le,Ue,Fe,Be,Ze,He,Ve,Ge,We,Ke,Je,Ye,Xe,Qe,et,tt,nt,rt,ot,st,it,at,ct,lt,ut,dt,pt,mt,ht,ft,gt,yt,St,bt,vt,_t,ie,w,g}from"./chunk-hdcy74kj.js";import{m,Ae,Z,R}from"./chunk-bb3jfhv3.js";export{m as BroodsAccountApiError,R as BroodsAccountClient,F as BroodsClient,xe as BroodsWebSocketClient,E as DEFAULT_CORE_BASE_URL,ye as IngressAcceptedError,Me as MAX_OBSERVABILITY_BACKFILL,xe as WebSocketClient,xe as WebsocketClient,De as defineAgent,Le as defineBroods,Ue as defineCron,ct as defineDiscordChannel,We as defineDiscordConnection,lt as defineGitHubChannel,Ke as defineGitHubConnection,ut as defineGoogleChatChannel,Je as defineGoogleChatConnection,Fe as defineHarness,dt as defineInstagramChannel,Ye as defineInstagramConnection,pt as defineLinearChannel,Xe as defineLinearConnection,mt as defineMatrixChannel,Qe as defineMatrixConnection,Be as defineMcp,ht as defineMessengerChannel,et as defineMessengerConnection,ft as definePancakeChannel,tt as definePancakeConnection,Ze as definePolicy,He as defineSandbox,Ve as defineSkill,gt as defineSlackChannel,nt as defineSlackConnection,yt as defineTeamsChannel,rt as defineTeamsConnection,St as defineTelegramChannel,ot as defineTelegramConnection,bt as defineTwilioChannel,st as defineTwilioConnection,vt as defineWhatsAppChannel,it as defineWhatsAppConnection,Ge as defineWorkspace,_t as defineZaloChannel,at as defineZaloConnection,qe as env,Ae as envPlaceholder,ie as isBroodsConfig,w as isConnectionDefinition,Pe as isLogLevel,Ne as isObservabilityClientMessage,g as isResource,je as isRootSpanKind,G as isSandboxLogId,Ie as isTraceId,J as normalizeHttpServiceUrl,ge as readSseStream,Z as resolveEnvCredential,V as resolveRunEvents,Y as toWebSocketBaseUrl,z as webSocketSubprotocols};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "broods",
-  "version": "0.44.0",
+  "version": "0.45.0",
   "description": "CLI + TypeScript SDK for the broods agent platform.",
   "keywords": [
     "agents",

package/dist/chunk-7ddy2nyy.js

@@ -1 +0,0 @@
-import{j}from"./chunk-dcjq5a2g.js";import{Z,R}from"./chunk-a3f2xzbr.js";import{e,o,a,l,s}from"./chunk-naxtmb6t.js";var E={project:e().optional(),stage:e().optional()},M={sandboxId:e().min(1),reservationKey:e().min(1)},v=a().describe("Must be true, after the owner has agreed to this delete."),b="'********' keeps a stored secret and null deletes a field: never send a placeholder you did not read from a get.",A=[{singular:"agent",plural:"agents",key:"agentId",createHint:"Needs name and config; a 409 returns the existing agentId.",deleteHint:"Deleting an agent also drops its runtime rows.",updateHint:b,list:(t)=>t.listAgents(),get:(t,r)=>t.getAgent(r),create:(t,r)=>t.createAgent(r),update:(t,r,n)=>t.updateAgent(r,n),remove:(t,r)=>t.deleteAgent(r)},{singular:"cron",plural:"crons",key:"cronId",createHint:"Needs name, agentId, scheduleExpression (rate/cron/at) and input or events.",list:(t)=>t.listCrons(),get:(t,r)=>t.getCron(r),create:(t,r)=>t.createCron(r),update:(t,r,n)=>t.updateCron(r,n),remove:(t,r)=>t.deleteCron(r)},{singular:"sandbox",plural:"sandboxes",key:"sandboxId",updateHint:b,list:(t)=>t.listSandboxes(),get:(t,r)=>t.getSandbox(r),create:(t,r)=>t.createSandbox(r),update:(t,r,n)=>t.updateSandbox(r,n),remove:(t,r)=>t.deleteSandbox(r)},{singular:"workspace",plural:"workspaces",key:"workspaceId",list:(t)=>t.listWorkspaces(),get:(t,r)=>t.getWorkspace(r),create:(t,r)=>t.createWorkspace(r),update:(t,r,n)=>t.updateWorkspace(r,n),remove:(t,r)=>t.deleteWorkspace(r)},{singular:"policy",plural:"policies",key:"policyId",createHint:"Agent-runtime policy document (tool.call, skill.load), not API credential scoping.",list:(t)=>t.listPolicies(),get:(t,r)=>t.getPolicy(r),create:(t,r)=>t.createPolicy(r),update:(t,r,n)=>t.updatePolicy(r,n),remove:(t,r)=>t.deletePolicy(r)},{singular:"role",plural:"roles",key:"roleId",createHint:"Needs name and a version-1 policy over the API namespace, e.g. agents:read. Account secret only.",list:(t)=>t.listRoles(),get:(t,r)=>t.getRole(r),create:(t,r)=>t.createRole(r),update:(t,r,n)=>t.updateRole(r,n),remove:(t,r)=>t.deleteRole(r)},{singular:"channel",plural:"channels",key:"channelId",list:(t)=>t.listChannels(),get:(t,r)=>t.getChannel(r),create:(t,r)=>t.createChannel(r),update:(t,r,n)=>t.updateChannel(r,n),remove:(t,r)=>t.deleteChannel(r)},{singular:"skill",plural:"skills",key:"skillName",createHint:'source is "files" (base64), "json" or "github". The stored name comes from the SKILL.md frontmatter.',list:(t)=>t.listSkills(),get:(t,r)=>t.getSkill(r),create:(t,r)=>t.createSkill(r),remove:(t,r)=>t.deleteSkill(r)},{singular:"mcp",plural:"mcp",key:"serverId",scoped:!0,list:(t,r)=>t.listMcp(r),get:(t,r)=>t.getMcp(r),create:(t,r,n)=>t.createMcp(n,r),update:(t,r,n)=>t.updateMcp(r,n),remove:(t,r)=>t.deleteMcp(r)}];function Pt(t={}){let r=Z()?new R({}):null;if(!r&&!t.cli)throw Error("broods mcp needs a credential: set BROODS_SESSION_TOKEN or BROODS_ACCOUNT_SECRET, or run `broods login`.");let n=new j({name:"broods",version:"1"},{capabilities:{tools:{}}});if(r){for(let i of A)x(n,r,i,t.scope??{});N(n,r)}if(t.cli)O(n,t.cli);if(t.allowDestructive)q(n,r,t.cli??null);return n}function w(t,r){if(!t)throw Error(`Refusing without confirm:true. ${r}`)}async function d(t){try{return P(await t())}catch(r){return k(r)}}function k(t){return{content:[{type:"text",text:t instanceof Error?t.message:String(t)}],isError:!0}}function P(t){return{content:[{type:"text",text:JSON.stringify(t??null,null,2)}]}}function T(t,r,n,i){if(!t.scoped)return;let c=n??r.project,p=i??r.stage;if(!c||!p)throw Error(`${t.plural} live in one stage, so this call needs both 'project' and 'stage'`);return{project:c,stage:p}}function O(t,r){t.registerTool("list-orgs",{description:"Every organization this login can reach, with the current one marked.",inputSchema:{}},async()=>await d(async()=>{let n=await r.getOnboarding();return{currentOrgId:n.currentOrgId,orgs:n.orgs}})),t.registerTool("create-org",{description:"Create an organization and switch this login to it. Later calls act in the new org.",inputSchema:{name:e().min(1)}},async({name:n})=>await d(async()=>await r.createOnboardingOrg(n))),t.registerTool("select-org",{description:"Switch this login to another organization, by an orgId from list-orgs.",inputSchema:{orgId:e().min(1)}},async({orgId:n})=>await d(async()=>await r.selectOnboardingOrg(n))),t.registerTool("list-projects",{description:"Every project in the current org, empty ones last. Project names are not unique, so take the id from here.",inputSchema:{}},async()=>await d(async()=>await r.listProjects())),t.registerTool("list-stages",{description:"Every stage of one project, by project name.",inputSchema:{project:e().min(1)}},async({project:n})=>await d(async()=>await r.listStages(n))),t.registerTool("create-stage",{description:"Create a stage in a project, optionally cloning another stage's architecture and env vars. A project name that does not exist yet is created with it, which is the only way to make a project without deploying a manifest.",inputSchema:{project:e().min(1),name:e().min(1),from:e().optional().describe("Stage to clone architecture and env vars from.")}},async({project:n,name:i,from:c})=>await d(async()=>await r.createStage(n,i,c)))}function q(t,r,n){if(r)t.registerTool("rotate-secret",{description:"Rotate the account secret. The current secret stops working immediately and the new one is shown once, so this breaks every deployment and CI job still holding the old one. Requires confirm:true.",inputSchema:{confirm:v}},async({confirm:i})=>await d(async()=>(w(i,"Everything holding the current secret breaks the moment this runs."),await r.rotateSecret())));if(n)t.registerTool("delete-project",{description:"Delete a project and everything under it: stages, agents, canvas, env vars, crons and workspace files. Takes a projectId from list-projects and requires confirm:true.",inputSchema:{projectId:e().min(1),confirm:v}},async({projectId:i,confirm:c})=>await d(async()=>(w(c,`Project '${i}' and everything under it goes away: name it, get the owner's agreement, then retry.`),await n.deleteProject(i))))}function N(t,r){t.registerTool("list-cron-runs",{description:"Run history for one cron, newest first. Check this before telling anyone a cron fired.",inputSchema:{cronId:e().min(1),limit:o().int().positive().max(100).optional()}},async({cronId:i,limit:c})=>await d(async()=>await r.listCronRuns(i,c===void 0?{}:{limit:c})));let n=[["suspend-sandbox","Suspend a persistent sandbox reservation.",(i,c)=>r.suspendSandbox(i,c)],["resume-sandbox","Resume a suspended sandbox reservation.",(i,c)=>r.resumeSandbox(i,c)],["terminate-sandbox","Terminate a sandbox reservation and drop its live-instance row. Terminate only a sandbox you created, and never one holding state you did not put there.",(i,c)=>r.terminateSandbox(i,c)],["open-sandbox-terminal","Mint a short-lived sealed ticket for an interactive PTY session on a persistent sandbox.",(i,c)=>r.openSandboxTerminal(i,c)]];for(let[i,c,p]of n)t.registerTool(i,{description:c,inputSchema:M},async({sandboxId:f,reservationKey:g})=>await d(async()=>await p(f,g)));t.registerTool("snapshot-sandbox",{description:"Snapshot a sandbox reservation into a reusable image (self-hosted provider).",inputSchema:{sandboxId:e().min(1),reservationKey:e().min(1),name:e().min(1)}},async({sandboxId:i,reservationKey:c,name:p})=>await d(async()=>await r.snapshotSandbox(i,c,p))),t.registerTool("upload-skill",{description:"Replace one skill's bundle wholesale (PUT, not a merge) by skillName. 'body' is the same source shape create-skill takes.",inputSchema:{id:e().min(1).describe("The skillName."),body:s(e(),l())}},async({id:i,body:c})=>await d(async()=>await r.uploadSkill(i,c))),t.registerTool("list-env-vars",{description:"List environment variable names. Values are write-only: the plane never returns them, so there is no read.",inputSchema:{}},async()=>await d(async()=>await r.listEnvVars())),t.registerTool("set-env-var",{description:"Create or replace one write-only environment variable. Reference it from a config as ${NAME} rather than inlining the value.",inputSchema:{name:e().min(1),value:e()}},async({name:i,value:c})=>await d(async()=>(await r.setEnvVar(i,c),{name:i,stored:!0}))),t.registerTool("delete-env-var",{description:"Delete one environment variable.",inputSchema:{name:e().min(1),confirm:v}},async({name:i,confirm:c})=>await d(async()=>(w(c,`Anything referencing \${${i}} breaks the moment this env var goes.`),{deleted:await r.deleteEnvVar(i),name:i}))),t.registerTool("assume-role",{description:"Exchange a role for a short-lived session token (default 1h, max 12h). Hand the returned token to whatever tool needs narrow access, as BROODS_SESSION_TOKEN. It is shown once and is not stored here.",inputSchema:{roleId:e().min(1),ttlSeconds:o().int().positive().max(43200).optional()}},async({roleId:i,ttlSeconds:c})=>await d(async()=>await r.assumeRole(i,c===void 0?{}:{ttlSeconds:c}))),t.registerTool("update-account",{description:"Rename this account or change its description. Everything else about an account is derived, not settable.",inputSchema:{username:e().optional(),description:e().nullable().optional()}},async({username:i,description:c})=>await d(async()=>await r.updateAccount({...i===void 0?{}:{username:i},...c===void 0?{}:{description:c}}))),t.registerTool("get-account",{description:"The account this server's credential resolves to. Run it first to confirm which tenant you are about to change.",inputSchema:{}},async()=>await d(async()=>await r.getAccount()))}function x(t,r,n,i){let c=e().min(1).describe(`The ${n.key}.`),p=n.scoped?` ${n.plural} live in one stage, so this also takes 'project' and 'stage'.`:"",{list:f,get:g,create:y,update:S,remove:_}=n;if(f){let u=`List every ${n.singular} on the account.${p}`;if(n.scoped)t.registerTool(`list-${n.plural}`,{description:u,inputSchema:E},async({project:h,stage:m})=>await d(async()=>await f(r,T(n,i,h,m))));else t.registerTool(`list-${n.plural}`,{description:u,inputSchema:{}},async()=>await d(async()=>await f(r)))}if(g)t.registerTool(`get-${n.singular}`,{description:`Read one ${n.singular} by ${n.key}.`,inputSchema:{id:c}},async({id:u})=>await d(async()=>await g(r,u)));if(y){let u=`Create one ${n.singular}. 'body' is the request body the config plane documents.`+(n.createHint?` ${n.createHint}`:"")+p+" Prefer changing the broods/ manifest and deploying for anything the project already declares.",h=s(e(),l());if(n.scoped)t.registerTool(`create-${n.singular}`,{description:u,inputSchema:{body:h,...E}},async({body:m,project:I,stage:C})=>await d(async()=>await y(r,m,T(n,i,I,C))));else t.registerTool(`create-${n.singular}`,{description:u,inputSchema:{body:h}},async({body:m})=>await d(async()=>await y(r,m)))}if(S)t.registerTool(`update-${n.singular}`,{description:`Deep-merge a patch into one ${n.singular} and return the updated record, so there is no need to read it back.`+(n.updateHint?` ${n.updateHint}`:""),inputSchema:{id:c,body:s(e(),l())}},async({id:u,body:h})=>await d(async()=>await S(r,u,h)));if(_)t.registerTool(`delete-${n.singular}`,{description:`Delete one ${n.singular}. Requires confirm:true, and takes one ${n.key} per call: never loop this over a list.`+(n.deleteHint?` ${n.deleteHint}`:""),inputSchema:{id:c,confirm:v}},async({id:u,confirm:h})=>await d(async()=>(w(h,`Deleting ${n.singular} '${u}' goes away for good: name it, get the owner's agreement, then retry.`),{deleted:await _(r,u),id:u})))}export{Pt as createBroodsMcpServer};