openwork-server 0.18.58 → 0.18.59

package/dist/opencode-plugins/drive-file-tools.js

@@ -0,0 +1,62 @@
+import { z } from "zod";
+// The host performs these actions for its signed-in caller, as with drive_upload_file. Agents use these tools, which ask before writes.
+export const DRIVE_FILE_ACTIONS = ["drive_pull_file", "drive_file_status", "drive_push_file"];
+const connectionId = z.string().regex(/^(google-workspace|emc_[A-Za-z0-9]+)$/).optional()
+    .describe("Selected Google Workspace connection; omit for the default. Unavailable selections never fall back to another account.");
+const workspacePath = z.string().min(1).max(4096);
+export const drivePullFileArgs = z.object({
+    fileId: z.string().min(1).max(2048).describe("Drive file ID or link."),
+    path: workspacePath.optional().describe("Workspace path to save to. Defaults to drive/<file name>."),
+    format: z.string().regex(/^[a-z]{2,5}$/).optional().describe("Docs, Sheets, Slides and Drawings only: xlsx, csv (first tab only), docx, md, txt, pptx, pdf, png or svg."),
+    connectionId,
+    overwrite: z.boolean().optional().describe("Replace a local copy even if it has edits not in Drive. Asks the person first."),
+}).strict();
+export const driveFileStatusArgs = z.object({
+    path: workspacePath.optional().describe("One pulled file; omit for all of them."),
+}).strict();
+export const drivePushFileArgs = z.object({
+    path: workspacePath.describe("Workspace path of a pulled file."),
+    mode: z.enum(["replace", "copy"]).optional().describe("replace (default for stored files) updates the same Drive file; copy saves a new file next to it."),
+    name: z.string().min(1).max(255).optional().describe("Name for a copy."),
+}).strict();
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** Engine permissions check writes; Desktop separately confirms every transfer at the host boundary. */
+async function askPermission(context, permission, patterns, metadata) {
+    const ask = isRecord(context) && typeof context.ask === "function" ? context.ask : null;
+    if (!ask)
+        throw new Error("This OpenWork engine cannot ask for approval, so nothing was changed. Update OpenWork to save files to Drive.");
+    // "Always" covers only these patterns, so one approval never extends to other files.
+    await ask.call(context, { permission, patterns, always: patterns, metadata });
+}
+export function createDriveFileTools(call) {
+    return {
+        drive_pull_file: {
+            description: "Save a Google Drive file into the workspace and return its path and revision, never its content. Use it to analyze or edit Office, PDF, CSV or any large file with shell tools. Docs, Sheets and Slides arrive as docx, xlsx and pptx unless format says otherwise.",
+            args: drivePullFileArgs.shape,
+            async execute(rawArgs, context) {
+                const args = drivePullFileArgs.parse(rawArgs ?? {});
+                if (args.overwrite)
+                    await askPermission(context, "drive_pull_file", [args.path ?? args.fileId], { fileId: args.fileId, path: args.path ?? null, overwrite: true });
+                return JSON.stringify(await call("drive_pull_file", args, context), null, 2);
+            },
+        },
+        drive_file_status: {
+            description: "For files pulled with drive_pull_file, report whether the local copy has edits not saved to Drive and whether the file changed in Drive since the pull.",
+            args: driveFileStatusArgs.shape,
+            async execute(rawArgs, context) {
+                return JSON.stringify(await call("drive_file_status", driveFileStatusArgs.parse(rawArgs ?? {}), context), null, 2);
+            },
+        },
+        drive_push_file: {
+            description: "Save a pulled file back to Google Drive when the person asks. Asks the person first. Stored files are replaced in place as a new Drive version; Docs, Sheets and Slides are saved as a new Google file next to the original. Returns drive_conflict, and changes nothing, when someone changed the file in Drive since the pull: pull it again and reapply the edits, or save a copy.",
+            args: drivePushFileArgs.shape,
+            async execute(rawArgs, context) {
+                const args = drivePushFileArgs.parse(rawArgs ?? {});
+                await askPermission(context, "drive_push_file", [args.path], { path: args.path, mode: args.mode ?? "default", ...(args.name ? { name: args.name } : {}) });
+                return JSON.stringify(await call("drive_push_file", args, context), null, 2);
+            },
+        },
+    };
+}

package/dist/opencode-plugins/managed-policy-next.js

@@ -13785,6 +13785,20 @@ var brandAccentColorValues = [
   "violet",
   "yellow"
 ];
+var desktopAgentPermissionsSchema = exports_external.object({
+  rules: exports_external.array(exports_external.object({
+    action: exports_external.string().min(1).max(64),
+    resource: exports_external.string().min(1).max(500),
+    effect: exports_external.enum(["allow", "ask", "deny"]),
+    source: exports_external.string().min(1).max(255)
+  })).max(2000)
+}).meta({ ref: "DenDesktopAgentPermissions" });
+var desktopConfigDefaultModelSchema = exports_external.object({
+  providerID: exports_external.string().min(1).max(128),
+  modelID: exports_external.string().min(1).max(255),
+  source: exports_external.enum(["team", "organization"]),
+  teamName: exports_external.string().max(255).optional()
+}).meta({ ref: "DenDesktopConfigDefaultModel" });
 var desktopConfigSchema = desktopPolicyValueSchema.extend({
   execution: effectiveDesktopExecutionPolicySchema.optional(),
   allowedDesktopVersions: exports_external.array(exports_external.string().trim().min(1).max(32)).optional(),
@@ -13795,8 +13809,11 @@ var desktopConfigSchema = desktopPolicyValueSchema.extend({
   automationsEnabled: exports_external.boolean().optional(),
   dashboardEnabled: exports_external.boolean().optional(),
   connectEnabled: exports_external.boolean().optional(),
+  liveProviderSync: exports_external.boolean().optional(),
   onboardingPrompts: onboardingPromptsSchema.optional(),
-  onboardingPromptDescriptions: onboardingPromptDescriptionsSchema.optional()
+  onboardingPromptDescriptions: onboardingPromptDescriptionsSchema.optional(),
+  agentPermissions: desktopAgentPermissionsSchema.optional(),
+  defaultModel: desktopConfigDefaultModelSchema.optional()
 }).meta({ ref: "DenDesktopConfig" });
 
 // src/managed-policy-rules.ts