broods 0.44.1 → 0.45.0

package/dist/index.d.ts

@@ -178,10 +178,11 @@ interface McpOauth {
 }
 
 /**
- * Agent configuration: types for the per-agent settings object, the runtime
- * projection of a stored config, and encryption helpers. The validation rules
- * are the config plane's (`@broods/convex/model/agentRules`), so a config is
- * judged the same on write and on every run.
+ * Agent configuration: types for the per-agent settings object and the
+ * runtime projection of a stored config. The validation rules are the config
+ * plane's (`@broods/convex/model/agentRules`), so a config is judged the same
+ * on write and on every run. Decrypting the stored blob is
+ * `../convex/account-keys.ts`.
  * Account types and auth live in `./accounts.ts` and `../auth.ts`.
  */
 
@@ -733,17 +734,24 @@ type UpdateCronInput = {
     input?: never;
 });
 
+/**
+ * The sandbox provider list: the one list the schema validator, the config
+ * rules, core's executor registry and the SDK derive from. A leaf on purpose,
+ * so `schema.ts` can read it without pulling the rules' import graph.
+ */
+declare const SANDBOX_PROVIDERS: readonly ["sandbox", "lambda", "e2b", "daytona", "vercel", "machine", "custom"];
+type SandboxProvider = (typeof SANDBOX_PROVIDERS)[number];
+
 /**
  * Sandbox-config validation for the Convex config plane. Ports core's former
  * storage/sandbox-config.ts normalizer so the public /v1/sandboxes contract
  * is unchanged. The public projection lives in ./responses.ts.
  */
-declare const SANDBOX_PROVIDERS: readonly ["sandbox", "lambda", "e2b", "daytona", "vercel", "machine"];
+
 declare const SANDBOX_RUNTIMES: readonly ["bash", "python", "node"];
 declare const SANDBOX_PERMISSION_MODES: readonly ["edit", "ask", "bypass"];
 declare const SANDBOX_NETWORK_MODES: readonly ["allow-all", "deny-all", "restricted"];
 declare const SANDBOX_SIZE_NAMES: readonly ["tiny", "xsmall", "small", "medium", "large"];
-type SandboxProvider = (typeof SANDBOX_PROVIDERS)[number];
 type RuntimeName = (typeof SANDBOX_RUNTIMES)[number];
 type PermissionMode = (typeof SANDBOX_PERMISSION_MODES)[number];
 type NetworkMode = (typeof SANDBOX_NETWORK_MODES)[number];
@@ -782,6 +790,81 @@ interface SandboxConfig {
     options?: Record<string, unknown>;
 }
 
+/**
+ * Sandbox config: account-scoped, reusable sandbox definitions referenced by
+ * agents via `config.sandboxes`. A sandbox is a collection of Claude-Code-style
+ * tools (bash/read/write/edit/glob/grep) backed by a provider. Stored encrypted
+ * at rest because `envVars`/`options` may hold secrets. Validation and the
+ * public projection live in packages/convex/model/sandboxRules.ts. The exec
+ * wire contract a sandbox server speaks is here too, since the SDK publishes it.
+ */
+
+/**
+ * One exec, POSTed as JSON to `<endpoint>/exec`. The `lambda` MicroVM image
+ * speaks it and the `custom` provider lets an account point core at its own
+ * server that does. snake_case on purpose: the image shipped it first.
+ */
+interface SandboxExecRequest {
+    /** Which interpreter runs `code`. Core sends `bash`. */
+    runtime: RuntimeName;
+    code: string;
+    /** Workspace namespace; selects the working directory. Absent for a stateless run. */
+    namespace?: string;
+    /** Root the namespace sits under; the server picks its default when absent. */
+    workspace_root?: string;
+    /** The server kills the process and answers `timed_out: true` once this passes. */
+    timeout_ms: number;
+    /** Positional arguments for `code`. */
+    args?: string[];
+    /** The process environment, set over an empty one or the server's start-up defaults (HOME, TMPDIR, PATH). */
+    env: Record<string, string>;
+}
+/** The JSON answer to one exec; HTTP 200 even when the code failed. */
+interface SandboxExecResponse {
+    /** False when the process failed, timed out, or the request was invalid. */
+    ok: boolean;
+    runtime?: string;
+    /** Null when the process was killed by the timeout. */
+    exit_code?: number | null;
+    timed_out: boolean;
+    /** Wall-clock time of the exec. */
+    duration_ms: number;
+    stdout: string;
+    stderr: string;
+    /** True when the server already cut stdout or stderr. */
+    truncated?: boolean;
+    /** CPU time of the exec in microseconds, for usage metering. */
+    cpu_usec?: number;
+    /** The machine's vCPU-s and GB-s above its baseline since boot. MicroVM only. */
+    burst?: {
+        vcpu_seconds: number;
+        gb_seconds: number;
+    };
+}
+
+/**
+ * Workspace isolation levels, the one list the config plane, core, the
+ * dashboard and the CLI read. No imports on purpose: the CLI bundles this file
+ * without the Convex runtime behind workspaceRules (like modelProviders.ts).
+ */
+declare const WORKSPACE_ISOLATION_LEVELS: readonly ["conversation", "agent"];
+/**
+ * How a workspace splits its files. "conversation" mounts a folder per channel
+ * partition, "agent" gives every attached agent its own folder. Unset shares
+ * one root between every agent and conversation.
+ */
+type WorkspaceIsolation = (typeof WORKSPACE_ISOLATION_LEVELS)[number];
+
+/**
+ * Workspace-config validation for the Convex config plane. Ports core's
+ * former storage/workspace-config.ts normalizer so the public /v1/workspaces
+ * contract is unchanged. Workspace config holds no secrets (a roleArn is not
+ * a secret), so it is stored and returned in plaintext. Pure module, safe
+ * for the default Convex runtime. The public projection lives in
+ * ./responses.ts. Core runs the storage access rule too, so it reads the env
+ * names of both sides.
+ */
+
 declare const WORKSPACE_STORAGE_PROVIDERS: readonly ["s3"];
 type WorkspaceStorageProvider = (typeof WORKSPACE_STORAGE_PROVIDERS)[number];
 type WorkspaceStorageAuth = {
@@ -799,9 +882,13 @@ interface WorkspaceStorageConfig {
     prefix?: string;
     auth?: WorkspaceStorageAuth;
 }
+/** What the API accepts: the boolean spelling of isolation is stored as its level. */
+type WorkspaceConfigInput = Omit<WorkspaceConfig, "isolation"> & {
+    isolation?: WorkspaceIsolation | boolean;
+};
 interface WorkspaceConfig {
     storage: WorkspaceStorageConfig;
-    isolation?: boolean;
+    isolation?: WorkspaceIsolation;
     harness?: {
         workspace?: {
             enabled?: boolean;
@@ -823,7 +910,7 @@ declare const AGENT_POLICY_ACTIONS: readonly ["agent.invoke", "tool.call", "work
  * resource route. Roles carry the same PolicyDocument shape as agent policies;
  * each caller passes its action set to `normalizePolicyDocument`.
  */
-declare const API_POLICY_ACTIONS: readonly ["account:read", "account:write", "agents:read", "agents:write", "channels:read", "channels:write", "crons:read", "crons:write", "env:read", "env:write", "hooks:read", "hooks:write", "mcp:read", "mcp:write", "policies:read", "policies:write", "sandboxes:read", "sandboxes:write", "skills:read", "skills:write", "workspaces:read", "workspaces:write"];
+declare const API_POLICY_ACTIONS: readonly ["account:read", "account:write", "agents:read", "agents:write", "audit:read", "audit:write", "channels:read", "channels:write", "crons:read", "crons:write", "env:read", "env:write", "hooks:read", "hooks:write", "mcp:read", "mcp:write", "policies:read", "policies:write", "sandboxes:read", "sandboxes:write", "skills:read", "skills:write", "workspaces:read", "workspaces:write"];
 type AgentPolicyAction = (typeof AGENT_POLICY_ACTIONS)[number];
 type ApiPolicyAction = (typeof API_POLICY_ACTIONS)[number];
 type PolicyAction = AgentPolicyAction | ApiPolicyAction;
@@ -1222,7 +1309,6 @@ interface PendingQuestion {
             label: string;
             description?: string;
         }[];
-        allowFreeText?: boolean;
     }[];
 }
 /** Answers one open prompt: option labels or free text, keyed by question id. */
@@ -1754,7 +1840,7 @@ interface Connection {
  * server runtimes, as well as Node and Bun.
  *
  * Auth: every call sends `Authorization: Bearer {accountSecret}` to
- * `{baseUrl}/v1/...`, or a short-lived `fp_sts_` role session token from
+ * `{baseUrl}/v1/...`, or a short-lived `bsts_` role session token from
  * `assumeRole()`, limited to what the role's policy allows. Secrets inside
  * agent configs are encrypted at rest by the platform and come back redacted
  * (`********`) on reads.
@@ -1770,7 +1856,7 @@ interface BroodsAccountClientOptions {
     /** Account key used as the Bearer token. Falls back to `BROODS_ACCOUNT_SECRET`. */
     accountSecret?: string;
     /**
-     * Short-lived `fp_sts_` role session token (from {@link BroodsAccountClient.assumeRole})
+     * Short-lived `bsts_` role session token (from {@link BroodsAccountClient.assumeRole})
      * used as the Bearer instead of the account key. The session can only do
      * what its role's policy allows. Falls back to `BROODS_SESSION_TOKEN`.
      */
@@ -1782,6 +1868,8 @@ interface BroodsAccount {
     accountId: string;
     username: string;
     status: string;
+    /** Days an audit row is kept; absent means the 90 day default. */
+    auditRetentionDays?: number;
     [key: string]: unknown;
 }
 /** Public agent record; `config` comes back with secret values redacted. */
@@ -1870,9 +1958,82 @@ interface AccountRole {
     createdAt: string;
     updatedAt: string;
 }
+/** One link of an agent actor's delegation chain: who asked, or an agent that delegated. */
+type AuditPrincipalLink = {
+    kind: "user";
+    id: string;
+    name?: string;
+    channel?: string;
+} | {
+    kind: "api";
+    keyKind: "account" | "deployment" | "cron";
+} | {
+    kind: "agent";
+    agentId: string;
+};
+/**
+ * One row of the account's hash-chained audit ledger, as `GET /v1/audit`
+ * serves it. `hash` is sha256 over the canonical JSON of every field but
+ * `hash` itself (an absent optional field is left out, not null), with
+ * `prevHash` linking it to the row before.
+ */
+interface AuditEvent {
+    accountId: string;
+    seq: number;
+    prevHash: string;
+    hash: string;
+    /** Unix ms. */
+    at: number;
+    actor: {
+        kind: string;
+        id?: string;
+        email?: string;
+        name?: string;
+        agentId?: string;
+        /** On an agent actor: who asked, then each agent that delegated, oldest first. */
+        chain?: AuditPrincipalLink[];
+    };
+    action: string;
+    resource: {
+        kind: string;
+        id?: string;
+        name?: string;
+    };
+    summary: string;
+    detailsJson?: string;
+    projectId?: string;
+    stageId?: string;
+    traceId?: string;
+}
+/** A page of ledger rows plus the chain head to compare the last row against. */
+interface AuditPage {
+    events: AuditEvent[];
+    /** Pass as `since` to read the rows after this page. */
+    nextSince: number;
+    head: {
+        seq: number;
+        hash: string;
+    } | null;
+}
+/** Result of `GET /v1/audit/verify`: the chain recomputed over the checked range. */
+interface AuditVerification {
+    ok: boolean;
+    brokenAtSeq?: number;
+    checkedFrom?: number;
+    checkedTo?: number;
+}
+/** The account's audit export target. The signing secret never comes back. */
+interface AuditSink {
+    kind: "webhook";
+    url: string;
+    /** Highest seq the receiver acknowledged. */
+    exportedSeq: number;
+    lastError?: string;
+    updatedAt: string;
+}
 /** Short-lived role session minted by `POST /v1/account/assume-role`. */
 interface AssumeRoleResult {
-    /** `fp_sts_` bearer token; pass it as `sessionToken` to a new client. */
+    /** `bsts_` bearer token; pass it as `sessionToken` to a new client. */
     token: string;
     /** ISO timestamp when the session stops working. */
     expiresAt: string;
@@ -2077,9 +2238,11 @@ declare class BroodsAccountClient {
     updateAccount(patch: {
         username?: string;
         description?: string | null;
+        /** 1 to 3650 days, or null to return to the 90 day default. */
+        auditRetentionDays?: number | null;
     }): Promise<BroodsAccount | null>;
     /**
-     * Exchange a role for a short-lived `fp_sts_` session token. Callable with
+     * Exchange a role for a short-lived `bsts_` session token. Callable with
      * the account key, a CLI login token, or a runtime key (the latter
      * only into roles scoped to the key's own project/stage). Construct a new
      * client with `{ sessionToken: result.token }` to act as the role.
@@ -2138,13 +2301,13 @@ declare class BroodsAccountClient {
     createWorkspace(input: {
         name: string;
         description?: string;
-        config?: WorkspaceConfig;
+        config?: WorkspaceConfigInput;
     }): Promise<AccountWorkspace>;
     getWorkspace(workspaceId: string): Promise<AccountWorkspace | null>;
     updateWorkspace(workspaceId: string, patch: {
         name?: string;
         description?: string | null;
-        config?: ConfigPatch<WorkspaceConfig>;
+        config?: ConfigPatch<WorkspaceConfigInput>;
     }): Promise<AccountWorkspace | null>;
     deleteWorkspace(workspaceId: string): Promise<boolean>;
     /** Flat listing of every file in the workspace's S3-backed filesystem. Returns [] when the workspace is gone. */
@@ -2231,6 +2394,32 @@ declare class BroodsAccountClient {
         status?: "active" | "disabled";
     }): Promise<AccountRole | null>;
     deleteRole(roleId: string): Promise<boolean>;
+    /** The audit ledger: rows since a seq, chain verification, and the webhook sink. */
+    readonly audit: {
+        /** Rows with `seq > since`, oldest first, at most `limit` (default 100, max 500). */
+        list: (options?: {
+            since?: number;
+            limit?: number;
+        }) => Promise<AuditPage>;
+        /**
+         * Recompute the chain over `[fromSeq, toSeq]`, from the oldest kept row by
+         * default, at most 1000 rows per call. `ok` covers only `checkedFrom` to
+         * `checkedTo`; on a longer ledger call again with `fromSeq: checkedTo + 1`.
+         */
+        verify: (options?: {
+            fromSeq?: number;
+            toSeq?: number;
+        }) => Promise<AuditVerification>;
+        /** The account's sink, or null when none is set. */
+        getSink: () => Promise<AuditSink | null>;
+        /** Set the one webhook sink. `url` must be public https; `secret` signs each batch. */
+        setSink: (input: {
+            url: string;
+            secret: string;
+        }) => Promise<AuditSink>;
+        /** Remove the sink; exports stop and rows age out on retention alone. Returns whether one existed. */
+        deleteSink: () => Promise<boolean>;
+    };
     listChannels(): Promise<AccountChannel[]>;
     /** Bind one real chat channel to an agent. One active record per place. */
     createChannel(input: {
@@ -2414,9 +2603,15 @@ type ResourceInput<Name extends string, Config> = {
  * `persistent` sandbox reconnects to when no workspace is mounted; unset, each
  * agent gets its own, and pinning one string on two sandboxes shares a machine.
  * Keys are scoped to the account, so they cannot reach another account's machine.
+ * A `custom` sandbox names its server with `endpoint` (https, required), an
+ * optional bearer `token` and extra static `headers`; a credential header's
+ * value is an `env("NAME")` ref.
  */
 type SandboxDefinitionOptions = Record<string, unknown> & {
     reservationKey?: string;
+    endpoint?: string;
+    token?: string | EnvRef;
+    headers?: Record<string, string | EnvRef>;
 };
 /**
  * Code-first sandbox config input. Mirrors core's `SandboxConfig` but lets
@@ -2934,12 +3129,13 @@ type CronDefinitionConfig = Omit<CreateCronInput, "agentId" | "name"> & {
 type AgentResource<Name extends string = string> = ResourceDefinition<"agent", Name, AgentDefinitionConfig>;
 /**
  * Code-first workspace config. Says `partitioned` where storage says
- * `isolation`: the flag permits a split, it does not perform one. A channel's
- * `partition` decides which folder a run mounts.
+ * `isolation`. `true` or "conversation" permits a per-conversation split that
+ * a channel's `partition` performs; "agent" splits the workspace per attached
+ * agent on its own, with no partition needed.
  */
 type WorkspaceDefinitionConfig = Omit<WorkspaceConfig, "isolation"> & {
-    /** Allow this workspace to be split into per-conversation folders. */
-    partitioned?: boolean;
+    /** How to split this workspace: per conversation (`true`) or per agent. */
+    partitioned?: boolean | WorkspaceIsolation;
 };
 type WorkspaceResource<Name extends string = string> = ResourceDefinition<"workspace", Name, WorkspaceDefinitionConfig>;
 type SandboxResource<Name extends string = string> = ResourceDefinition<"sandbox", Name, SandboxDefinitionConfig>;
@@ -3015,4 +3211,4 @@ declare function isConnectionDefinition(value: unknown): value is AnyConnectionD
 declare function isResource(value: unknown): value is AnyResource;
 
 export { BroodsAccountApiError, BroodsAccountClient, BroodsClient, BroodsWebSocketClient, DEFAULT_CORE_BASE_URL, IngressAcceptedError, MAX_OBSERVABILITY_BACKFILL, BroodsWebSocketClient as WebSocketClient, BroodsWebSocketClient as WebsocketClient, defineAgent, defineBroods, defineCron, defineDiscordChannel, defineDiscordConnection, defineGitHubChannel, defineGitHubConnection, defineGoogleChatChannel, defineGoogleChatConnection, defineHarness, defineInstagramChannel, defineInstagramConnection, defineLinearChannel, defineLinearConnection, defineMatrixChannel, defineMatrixConnection, defineMcp, defineMessengerChannel, defineMessengerConnection, definePancakeChannel, definePancakeConnection, definePolicy, defineSandbox, defineSkill, defineSlackChannel, defineSlackConnection, defineTeamsChannel, defineTeamsConnection, defineTelegramChannel, defineTelegramConnection, defineTwilioChannel, defineTwilioConnection, defineWhatsAppChannel, defineWhatsAppConnection, defineWorkspace, defineZaloChannel, defineZaloConnection, env, envPlaceholder, isBroodsConfig, isConnectionDefinition, isLogLevel, isObservabilityClientMessage, isResource, isRootSpanKind, isSandboxLogId, isTraceId, normalizeHttpServiceUrl, readSseStream, resolveEnvCredential, resolveRunEvents, toWebSocketBaseUrl, webSocketSubprotocols };
-export type { Account, AccountAgent, AccountChannel, AccountEnvVar, AccountMcp, AccountPolicy, AccountRole, AccountSandbox, AccountWorkspace, Agent, AgentChannelsConfig, AgentCodeHookConfig, AgentConfig, AgentConfigDoc, AgentContinueInput, AgentDefinitionConfig, AgentDiscordChannelConfig, AgentGitHubChannelConfig, AgentGoogleChatChannelConfig, AgentHandle, AgentHookEventName, AgentHooks, AgentHooksConfig, AgentInstagramChannelConfig, AgentLinearChannelConfig, AgentMatrixChannelConfig, AgentMessengerChannelConfig, AgentPancakeChannelConfig, AgentProviderSettings, AgentReference, AgentResource, AgentRunAnswerInput, AgentRunEventInput, AgentRunInput, AgentRunModelOverrides, AgentRunOverrides, AgentRunResult, AgentSkillsDefinitionConfig, AgentSlackChannelConfig, AgentStreamPart, AgentSubagentDefinitionConfig, AgentTeamsChannelConfig, AgentTelegramChannelConfig, AgentTwilioChannelConfig, AgentWebhookHookConfig, AgentWhatsAppChannelConfig, AgentWorkspaceInput, AgentWorkspaceRef, AgentWorkspaceRefInput, AgentZaloChannelConfig, AnyConnectionDefinition, AnyResource, AssumeRoleResult, AsyncAgentRun, AsyncPollOptions, AsyncRequestAccepted, AsyncStatus, BroodsAccount, BroodsAccountClientOptions, BroodsClientOptions, BroodsConfigDefinition, BroodsProjectConfig, BroodsWebSocketClientOptions, ChannelAgentInput, ChannelDefinitionConfig, ChannelMessageReceived, ChannelPartition, ChannelRecordConfig, ChannelReference, ChannelReplyIn, ChannelResource, ChannelType, CliManifest, CliManifestResource, ConfigPatch, Connection, ConnectionCode, ConnectionDefinition, ConnectionStart, ConnectionStartResult, ConnectionType, CreateAgentResult, CreateCronInput, CreateMcpInput, Cron, CronDefinitionConfig, CronDoc, CronLastStatus, CronResource, CronRun, CronStatus, DeleteAccountResult, DiscordChannelInput, DiscordConnectionDefinition, DiscordConnectionInput, DiscordMessageSource, DiscordSource, Doc, EnvAccessor, EnvRef, EnvRefString, GeneratedIds, GitHubChannelInput, GitHubConnectionDefinition, GitHubConnectionInput, GitHubMessageSource, GitHubSource, GoogleChatChannelInput, GoogleChatConnectionDefinition, GoogleChatConnectionInput, GoogleChatMessageSource, GoogleChatSource, HarnessDefinition, HarnessType, HookAgentConfig, HookContext, Id, IngressMode, IngressStatus, InstagramChannelInput, InstagramConnectionDefinition, InstagramConnectionInput, InstagramMessageSource, InstagramSource, LinearChannelInput, LinearConnectionDefinition, LinearConnectionInput, LinearMessageSource, LinearSource, LogLevel, MatrixChannelInput, MatrixConnectionDefinition, MatrixConnectionInput, MatrixMessageSource, MatrixSource, McpDefinitionConfig, McpHandler, McpOauthInput, McpResource, MessengerChannelInput, MessengerConnectionDefinition, MessengerConnectionInput, MessengerMessageSource, MessengerSource, ObservabilityBackfillMessage, ObservabilityClientMessage, ObservabilityErrorMessage, ObservabilityFetchTraceMessage, ObservabilityLogEntry, ObservabilityLogMessage, ObservabilityReadyMessage, ObservabilityServerMessage, ObservabilitySpanMessage, ObservabilitySpanRow, ObservabilitySubscribeMessage, ObservabilityUnsubscribeMessage, PancakeChannelInput, PancakeConnectionDefinition, PancakeConnectionInput, PancakeMessageSource, PancakeSource, PendingQuestion, PolicyDefinitionConfig, PolicyDocument, PolicyResource, ProjectDoc, ProviderConfigInput, ProviderSettingsInput, QuestionAnswer, ResourceApi, ResourceDefinition, ResourceInput, ResourceKind, RotateSecretResult, Sandbox, SandboxConfig, SandboxConfigDoc, SandboxDefinitionConfig, SandboxDefinitionOptions, SandboxLifecycleResult, SandboxResource, SandboxSnapshotResult, SandboxTerminalTicket, Skill, SkillDefinitionConfig, SkillResource, SkillUploadInput, SlackChannelInput, SlackConnectionDefinition, SlackConnectionInput, SlackMessageSource, SlackSource, StageDoc, StageScope, TaskWaitingOn, TeamsChannelInput, TeamsConnectionDefinition, TeamsConnectionInput, TeamsMessageSource, TeamsSource, TelegramChannelInput, TelegramConnectionDefinition, TelegramConnectionInput, TelegramMessageSource, TelegramSource, ToolApprovalSummary, TwilioChannelInput, TwilioConnectionDefinition, TwilioConnectionInput, TwilioMessageSource, TwilioSource, UpdateAgentInput, UpdateCronInput, UpdateMcpInput, WebSocketAttachInput, WebSocketClientAttachMessage, WebSocketClientCancelMessage, WebSocketClientControlMessage, WebSocketClientExecuteMessage, WebSocketClientMessage, WebSocketConstructorLike, WebSocketHandlers, WebSocketLike, WebSocketOutputMessage, WebSocketRunInput, WebSocketServerMessage, WebSocketStreamMessage, WebSocketSubscription, WhatsAppChannelInput, WhatsAppConnectionDefinition, WhatsAppConnectionInput, WhatsAppMessageSource, WhatsAppSource, Workspace, WorkspaceConfig, WorkspaceConfigDoc, WorkspaceDefinitionConfig, WorkspaceFileEntry, WorkspaceResource, ZaloChannelInput, ZaloConnectionDefinition, ZaloConnectionInput, ZaloMessageSource, ZaloSource };
+export type { Account, AccountAgent, AccountChannel, AccountEnvVar, AccountMcp, AccountPolicy, AccountRole, AccountSandbox, AccountWorkspace, Agent, AgentChannelsConfig, AgentCodeHookConfig, AgentConfig, AgentConfigDoc, AgentContinueInput, AgentDefinitionConfig, AgentDiscordChannelConfig, AgentGitHubChannelConfig, AgentGoogleChatChannelConfig, AgentHandle, AgentHookEventName, AgentHooks, AgentHooksConfig, AgentInstagramChannelConfig, AgentLinearChannelConfig, AgentMatrixChannelConfig, AgentMessengerChannelConfig, AgentPancakeChannelConfig, AgentProviderSettings, AgentReference, AgentResource, AgentRunAnswerInput, AgentRunEventInput, AgentRunInput, AgentRunModelOverrides, AgentRunOverrides, AgentRunResult, AgentSkillsDefinitionConfig, AgentSlackChannelConfig, AgentStreamPart, AgentSubagentDefinitionConfig, AgentTeamsChannelConfig, AgentTelegramChannelConfig, AgentTwilioChannelConfig, AgentWebhookHookConfig, AgentWhatsAppChannelConfig, AgentWorkspaceInput, AgentWorkspaceRef, AgentWorkspaceRefInput, AgentZaloChannelConfig, AnyConnectionDefinition, AnyResource, AssumeRoleResult, AsyncAgentRun, AsyncPollOptions, AsyncRequestAccepted, AsyncStatus, AuditEvent, AuditPage, AuditPrincipalLink, AuditSink, AuditVerification, BroodsAccount, BroodsAccountClientOptions, BroodsClientOptions, BroodsConfigDefinition, BroodsProjectConfig, BroodsWebSocketClientOptions, ChannelAgentInput, ChannelDefinitionConfig, ChannelMessageReceived, ChannelPartition, ChannelRecordConfig, ChannelReference, ChannelReplyIn, ChannelResource, ChannelType, CliManifest, CliManifestResource, ConfigPatch, Connection, ConnectionCode, ConnectionDefinition, ConnectionStart, ConnectionStartResult, ConnectionType, CreateAgentResult, CreateCronInput, CreateMcpInput, Cron, CronDefinitionConfig, CronDoc, CronLastStatus, CronResource, CronRun, CronStatus, DeleteAccountResult, DiscordChannelInput, DiscordConnectionDefinition, DiscordConnectionInput, DiscordMessageSource, DiscordSource, Doc, EnvAccessor, EnvRef, EnvRefString, GeneratedIds, GitHubChannelInput, GitHubConnectionDefinition, GitHubConnectionInput, GitHubMessageSource, GitHubSource, GoogleChatChannelInput, GoogleChatConnectionDefinition, GoogleChatConnectionInput, GoogleChatMessageSource, GoogleChatSource, HarnessDefinition, HarnessType, HookAgentConfig, HookContext, Id, IngressMode, IngressStatus, InstagramChannelInput, InstagramConnectionDefinition, InstagramConnectionInput, InstagramMessageSource, InstagramSource, LinearChannelInput, LinearConnectionDefinition, LinearConnectionInput, LinearMessageSource, LinearSource, LogLevel, MatrixChannelInput, MatrixConnectionDefinition, MatrixConnectionInput, MatrixMessageSource, MatrixSource, McpDefinitionConfig, McpHandler, McpOauthInput, McpResource, MessengerChannelInput, MessengerConnectionDefinition, MessengerConnectionInput, MessengerMessageSource, MessengerSource, ObservabilityBackfillMessage, ObservabilityClientMessage, ObservabilityErrorMessage, ObservabilityFetchTraceMessage, ObservabilityLogEntry, ObservabilityLogMessage, ObservabilityReadyMessage, ObservabilityServerMessage, ObservabilitySpanMessage, ObservabilitySpanRow, ObservabilitySubscribeMessage, ObservabilityUnsubscribeMessage, PancakeChannelInput, PancakeConnectionDefinition, PancakeConnectionInput, PancakeMessageSource, PancakeSource, PendingQuestion, PolicyDefinitionConfig, PolicyDocument, PolicyResource, ProjectDoc, ProviderConfigInput, ProviderSettingsInput, QuestionAnswer, ResourceApi, ResourceDefinition, ResourceInput, ResourceKind, RotateSecretResult, Sandbox, SandboxConfig, SandboxConfigDoc, SandboxDefinitionConfig, SandboxDefinitionOptions, SandboxExecRequest, SandboxExecResponse, SandboxLifecycleResult, SandboxProvider, SandboxResource, SandboxSnapshotResult, SandboxTerminalTicket, Skill, SkillDefinitionConfig, SkillResource, SkillUploadInput, SlackChannelInput, SlackConnectionDefinition, SlackConnectionInput, SlackMessageSource, SlackSource, StageDoc, StageScope, TaskWaitingOn, TeamsChannelInput, TeamsConnectionDefinition, TeamsConnectionInput, TeamsMessageSource, TeamsSource, TelegramChannelInput, TelegramConnectionDefinition, TelegramConnectionInput, TelegramMessageSource, TelegramSource, ToolApprovalSummary, TwilioChannelInput, TwilioConnectionDefinition, TwilioConnectionInput, TwilioMessageSource, TwilioSource, UpdateAgentInput, UpdateCronInput, UpdateMcpInput, WebSocketAttachInput, WebSocketClientAttachMessage, WebSocketClientCancelMessage, WebSocketClientControlMessage, WebSocketClientExecuteMessage, WebSocketClientMessage, WebSocketConstructorLike, WebSocketHandlers, WebSocketLike, WebSocketOutputMessage, WebSocketRunInput, WebSocketServerMessage, WebSocketStreamMessage, WebSocketSubscription, WhatsAppChannelInput, WhatsAppConnectionDefinition, WhatsAppConnectionInput, WhatsAppMessageSource, WhatsAppSource, Workspace, WorkspaceConfig, WorkspaceConfigDoc, WorkspaceConfigInput, WorkspaceDefinitionConfig, WorkspaceFileEntry, WorkspaceIsolation, WorkspaceResource, ZaloChannelInput, ZaloConnectionDefinition, ZaloConnectionInput, ZaloMessageSource, ZaloSource };

package/dist/index.js

@@ -1 +1 @@
-import{V,ge,Me,Pe,Ne,je,G,Ie,E,ye,F,J,xe,Y,z,qe,De,Le,Ue,Fe,Be,Ze,He,Ve,Ge,We,Ke,Je,Ye,Xe,Qe,et,tt,nt,rt,ot,st,it,at,ct,lt,ut,dt,pt,mt,ht,ft,gt,yt,St,bt,vt,_t,ie,w,g}from"./chunk-hdcy74kj.js";import{m,Ae,Z,R}from"./chunk-a3f2xzbr.js";export{m as BroodsAccountApiError,R as BroodsAccountClient,F as BroodsClient,xe as BroodsWebSocketClient,E as DEFAULT_CORE_BASE_URL,ye as IngressAcceptedError,Me as MAX_OBSERVABILITY_BACKFILL,xe as WebSocketClient,xe as WebsocketClient,De as defineAgent,Le as defineBroods,Ue as defineCron,ct as defineDiscordChannel,We as defineDiscordConnection,lt as defineGitHubChannel,Ke as defineGitHubConnection,ut as defineGoogleChatChannel,Je as defineGoogleChatConnection,Fe as defineHarness,dt as defineInstagramChannel,Ye as defineInstagramConnection,pt as defineLinearChannel,Xe as defineLinearConnection,mt as defineMatrixChannel,Qe as defineMatrixConnection,Be as defineMcp,ht as defineMessengerChannel,et as defineMessengerConnection,ft as definePancakeChannel,tt as definePancakeConnection,Ze as definePolicy,He as defineSandbox,Ve as defineSkill,gt as defineSlackChannel,nt as defineSlackConnection,yt as defineTeamsChannel,rt as defineTeamsConnection,St as defineTelegramChannel,ot as defineTelegramConnection,bt as defineTwilioChannel,st as defineTwilioConnection,vt as defineWhatsAppChannel,it as defineWhatsAppConnection,Ge as defineWorkspace,_t as defineZaloChannel,at as defineZaloConnection,qe as env,Ae as envPlaceholder,ie as isBroodsConfig,w as isConnectionDefinition,Pe as isLogLevel,Ne as isObservabilityClientMessage,g as isResource,je as isRootSpanKind,G as isSandboxLogId,Ie as isTraceId,J as normalizeHttpServiceUrl,ge as readSseStream,Z as resolveEnvCredential,V as resolveRunEvents,Y as toWebSocketBaseUrl,z as webSocketSubprotocols};
+import{V,ge,Me,Pe,Ne,je,G,Ie,E,ye,F,J,xe,Y,z,qe,De,Le,Ue,Fe,Be,Ze,He,Ve,Ge,We,Ke,Je,Ye,Xe,Qe,et,tt,nt,rt,ot,st,it,at,ct,lt,ut,dt,pt,mt,ht,ft,gt,yt,St,bt,vt,_t,ie,w,g}from"./chunk-hdcy74kj.js";import{m,Ae,Z,R}from"./chunk-bb3jfhv3.js";export{m as BroodsAccountApiError,R as BroodsAccountClient,F as BroodsClient,xe as BroodsWebSocketClient,E as DEFAULT_CORE_BASE_URL,ye as IngressAcceptedError,Me as MAX_OBSERVABILITY_BACKFILL,xe as WebSocketClient,xe as WebsocketClient,De as defineAgent,Le as defineBroods,Ue as defineCron,ct as defineDiscordChannel,We as defineDiscordConnection,lt as defineGitHubChannel,Ke as defineGitHubConnection,ut as defineGoogleChatChannel,Je as defineGoogleChatConnection,Fe as defineHarness,dt as defineInstagramChannel,Ye as defineInstagramConnection,pt as defineLinearChannel,Xe as defineLinearConnection,mt as defineMatrixChannel,Qe as defineMatrixConnection,Be as defineMcp,ht as defineMessengerChannel,et as defineMessengerConnection,ft as definePancakeChannel,tt as definePancakeConnection,Ze as definePolicy,He as defineSandbox,Ve as defineSkill,gt as defineSlackChannel,nt as defineSlackConnection,yt as defineTeamsChannel,rt as defineTeamsConnection,St as defineTelegramChannel,ot as defineTelegramConnection,bt as defineTwilioChannel,st as defineTwilioConnection,vt as defineWhatsAppChannel,it as defineWhatsAppConnection,Ge as defineWorkspace,_t as defineZaloChannel,at as defineZaloConnection,qe as env,Ae as envPlaceholder,ie as isBroodsConfig,w as isConnectionDefinition,Pe as isLogLevel,Ne as isObservabilityClientMessage,g as isResource,je as isRootSpanKind,G as isSandboxLogId,Ie as isTraceId,J as normalizeHttpServiceUrl,ge as readSseStream,Z as resolveEnvCredential,V as resolveRunEvents,Y as toWebSocketBaseUrl,z as webSocketSubprotocols};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "broods",
-  "version": "0.44.1",
+  "version": "0.45.0",
   "description": "CLI + TypeScript SDK for the broods agent platform.",
   "keywords": [
     "agents",