overlane 0.1.126 → 0.1.127

package/dist/overlane.mjs

@@ -23358,6 +23358,151 @@ var init_code_map = __esm({
   }
 });
 
+// ../contracts/src/agent.ts
+function classifyMethod(method) {
+  const m = method.toUpperCase();
+  return m === "GET" || m === "HEAD" || m === "OPTIONS" ? "read" : "write";
+}
+function blockedClassFor(op) {
+  const words = op.operationId.replace(/([a-z0-9])([A-Z])/g, "$1-$2").toLowerCase();
+  const text = `${op.path.toLowerCase()} ${words}`;
+  if (op.method.toUpperCase() === "DELETE" || DESTRUCTIVE.test(text)) return "destructive";
+  if (BILLING.test(text)) return "billing";
+  if (SECRETS.test(text)) return "secrets";
+  return null;
+}
+var AGENT_PLANS, AgentPlan, AGENT_PROVIDERS, AgentProvider, TOOL_CLASSES, AgentToolClass, BLOCKED_CLASSES, BlockedClass, BILLING, SECRETS, DESTRUCTIVE, AgentOperation, AgentToolDefinition, AGENT_REFUSAL_CODES, AgentRefusalCode, AgentRefusal, AgentDiffEntry, APPROVAL_STATES, AgentApprovalState, AgentInverseChange, AgentApproval, AgentWriteToolResult, AgentReadToolResult, AgentToolResult, AgentCitation, MESSAGE_ORIGINS, AgentMessageOrigin, AgentMessage, AgentChatRequest, AgentFeedback, AGENT_AUDIT_RESULTS, AgentAuditResult, AgentAuditEvent, AgentReadOnlyMode, RouteIndexEntry, RouteIndex, AgentRouteHit;
+var init_agent = __esm({
+  "../contracts/src/agent.ts"() {
+    "use strict";
+    init_zod();
+    init_common();
+    init_identity();
+    AGENT_PLANS = ["free", "pro", "team", "business", "enterprise"];
+    AgentPlan = external_exports.enum(AGENT_PLANS);
+    AGENT_PROVIDERS = ["overlane", "github", "gitlab", "linear", "jira"];
+    AgentProvider = external_exports.enum(AGENT_PROVIDERS);
+    TOOL_CLASSES = ["read", "write"];
+    AgentToolClass = external_exports.enum(TOOL_CLASSES);
+    BLOCKED_CLASSES = ["billing", "secrets", "destructive"];
+    BlockedClass = external_exports.enum(BLOCKED_CLASSES);
+    BILLING = /(^|[\s\/_.-])(billing|invoices?|payments?|subscriptions?|checkout|seats|plan-change)([\s\/_.-]|$)/i;
+    SECRETS = /(^|[\s\/_.-])(secrets?|tokens?|api-?keys?|credentials?|keys|signing|sso|scim)([\s\/_.-]|$)/i;
+    DESTRUCTIVE = /(^|[\s\/_.-])(purge|delete|destroy|erase|wipe|drop|revoke|remove|truncate|reset)([\s\/_.-]|$)/i;
+    AgentOperation = external_exports.object({
+      operationId: external_exports.string().min(1).max(100),
+      method: external_exports.enum(["GET", "HEAD", "OPTIONS", "POST", "PUT", "PATCH", "DELETE"]),
+      path: external_exports.string().min(1).max(300).startsWith("/"),
+      /** Where the operation is defined: the OpenAPI document, a contract fixture until the API route exists (REQ-WEB-11), or local code that makes no API call (docs search, navigation). */
+      source: external_exports.enum(["openapi", "contract-fixture", "local"])
+    }).strict();
+    AgentToolDefinition = external_exports.object({
+      tenantId: TenantId,
+      name: external_exports.string().regex(/^[a-z][A-Za-z0-9]{1,48}$/),
+      description: external_exports.string().min(1).max(300),
+      class: AgentToolClass,
+      operation: AgentOperation,
+      /** Lowest role that may call the tool (REQ-AGT-05). The role table in identity.ts still decides per action. */
+      minRole: Role,
+      /** JSON-schema-like description of the arguments, property name to a short hint. */
+      arguments: external_exports.record(external_exports.string().min(1).max(64), external_exports.string().max(200))
+    }).strict().refine((t) => t.class === classifyMethod(t.operation.method), { message: "class must match the HTTP method (REQ-AGT-09)", path: ["class"] }).refine((t) => blockedClassFor(t.operation) === null, { message: "billing, secrets and destructive operations are never tools (REQ-AGT-08)", path: ["operation"] });
+    AGENT_REFUSAL_CODES = [
+      "role_forbidden",
+      "read_only_mode",
+      "blocked_class",
+      "unknown_tool",
+      "invalid_arguments",
+      "approval_required",
+      "approval_expired",
+      "approval_not_pending",
+      "rate_limited",
+      "unavailable"
+    ];
+    AgentRefusalCode = external_exports.enum(AGENT_REFUSAL_CODES);
+    AgentRefusal = external_exports.object({ kind: external_exports.literal("refusal"), tenantId: TenantId, code: AgentRefusalCode, tool: external_exports.string().max(100).optional(), reason: external_exports.string().min(1).max(300) }).strict();
+    AgentDiffEntry = external_exports.object({ field: external_exports.string().min(1).max(200), before: external_exports.string().max(2e3).nullable(), after: external_exports.string().max(2e3).nullable() }).strict();
+    APPROVAL_STATES = ["pending", "approved", "executed", "rejected", "expired", "failed"];
+    AgentApprovalState = external_exports.enum(APPROVAL_STATES);
+    AgentInverseChange = external_exports.object({
+      tenantId: TenantId,
+      approvalId: external_exports.string().min(1).max(128),
+      tool: external_exports.string().min(1).max(100),
+      arguments: external_exports.record(external_exports.string(), external_exports.unknown()),
+      summary: external_exports.string().min(1).max(500)
+    }).strict();
+    AgentApproval = external_exports.object({
+      tenantId: TenantId,
+      id: external_exports.string().min(1).max(128),
+      conversationId: external_exports.string().min(1).max(128),
+      requestedBy: UserId,
+      tool: external_exports.string().min(1).max(100),
+      summary: external_exports.string().min(1).max(500),
+      diff: external_exports.array(AgentDiffEntry).max(50),
+      argumentsDigest: Sha256Digest,
+      state: AgentApprovalState,
+      createdAt: Timestamp,
+      expiresAt: Timestamp,
+      decidedAt: Timestamp.optional(),
+      /** Present once executed, when the tool has an inverse. */
+      inverse: AgentInverseChange.optional(),
+      /** Set when this approval is itself the undo of another. */
+      undoOf: external_exports.string().min(1).max(128).optional()
+    }).strict();
+    AgentWriteToolResult = external_exports.object({ kind: external_exports.literal("approval"), tenantId: TenantId, approval: AgentApproval }).strict();
+    AgentReadToolResult = external_exports.object({ kind: external_exports.literal("result"), tenantId: TenantId, tool: external_exports.string().min(1).max(100), data: external_exports.unknown() }).strict();
+    AgentToolResult = external_exports.discriminatedUnion("kind", [AgentWriteToolResult, AgentReadToolResult, AgentRefusal]);
+    AgentCitation = external_exports.object({
+      tenantId: TenantId,
+      sourceId: external_exports.string().min(1).max(200),
+      title: external_exports.string().min(1).max(200),
+      /** Docs page or app route. Always a path on an Overlane host; checked by the route index. */
+      url: external_exports.string().min(1).max(500),
+      snippet: external_exports.string().max(600).optional()
+    }).strict();
+    MESSAGE_ORIGINS = ["user", "assistant", "retrieved", "tool"];
+    AgentMessageOrigin = external_exports.enum(MESSAGE_ORIGINS);
+    AgentMessage = external_exports.object({
+      tenantId: TenantId,
+      id: external_exports.string().min(1).max(128),
+      conversationId: external_exports.string().min(1).max(128),
+      origin: AgentMessageOrigin,
+      content: external_exports.string().max(8e3),
+      citations: external_exports.array(AgentCitation).max(10).default([]),
+      /** "not_found" when the answer is the deterministic below-threshold reply. */
+      outcome: external_exports.enum(["answer", "not_found", "navigation", "tool_result", "approval", "refusal", "info"]).optional(),
+      createdAt: Timestamp
+    }).strict();
+    AgentChatRequest = external_exports.object({ tenantId: TenantId, conversationId: external_exports.string().min(1).max(128), text: external_exports.string().min(1).max(4e3), currentPath: external_exports.string().max(300).optional(), escalate: external_exports.boolean().optional() }).strict();
+    AgentFeedback = external_exports.object({ tenantId: TenantId, messageId: external_exports.string().min(1).max(128), rating: external_exports.enum(["up", "down"]), note: external_exports.string().max(500).optional(), at: Timestamp }).strict();
+    AGENT_AUDIT_RESULTS = ["ok", "refused", "error", "approval_proposed", "approval_decided"];
+    AgentAuditResult = external_exports.enum(AGENT_AUDIT_RESULTS);
+    AgentAuditEvent = external_exports.object({
+      tenantId: TenantId,
+      id: external_exports.string().min(1).max(128),
+      at: Timestamp,
+      actor: external_exports.object({ userId: UserId, role: Role }).strict(),
+      conversationId: external_exports.string().min(1).max(128),
+      tool: external_exports.string().min(1).max(100),
+      argumentsDigest: Sha256Digest,
+      result: AgentAuditResult,
+      detail: external_exports.string().max(300).optional(),
+      approvalId: external_exports.string().min(1).max(128).optional()
+    }).strict();
+    AgentReadOnlyMode = external_exports.object({ tenantId: TenantId, enabled: external_exports.boolean(), setBy: UserId, setAt: Timestamp }).strict();
+    RouteIndexEntry = external_exports.object({
+      path: external_exports.string().regex(/^\/[A-Za-z0-9\/_.-]*$/),
+      title: external_exports.string().min(1).max(120),
+      description: external_exports.string().min(1).max(300),
+      keywords: external_exports.array(external_exports.string().min(1).max(40)).max(20).default([]),
+      roles: external_exports.array(Role).min(1),
+      plan: AgentPlan
+    }).strict();
+    RouteIndex = external_exports.object({ version: external_exports.literal("1"), routes: external_exports.array(RouteIndexEntry).min(1) }).strict();
+    AgentRouteHit = external_exports.object({ tenantId: TenantId, path: external_exports.string().startsWith("/"), title: external_exports.string().min(1).max(120), score: external_exports.number().nonnegative() }).strict();
+  }
+});
+
 // ../contracts/src/plans.ts
 var PLAN_IDS, BillingPlanId, CHECKOUT_PLANS, CheckoutPlanId, METERS, Meter, AllowanceValue, PlanAllowances, PlanData, OverageRates, FreeTierControls, PlanCatalog, TenantPlanLimits;
 var init_plans = __esm({
@@ -23758,6 +23903,7 @@ var init_src = __esm({
     init_review();
     init_guardrails();
     init_code_map();
+    init_agent();
     init_plans();
     init_billing();
   }
@@ -31112,7 +31258,7 @@ var VERSION;
 var init_assets = __esm({
   "src/assets.ts"() {
     "use strict";
-    VERSION = true ? "0.1.126" : "0.0.0-dev";
+    VERSION = true ? "0.1.127" : "0.0.0-dev";
   }
 });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "overlane",
-  "version": "0.1.126",
+  "version": "0.1.127",
   "description": "Overlane: connect a GitHub project to your coding agents. One portable CLI with project memory, tasks, a code index, guardrails and the Claude Code and Codex plugin.",
   "keywords": [
     "overlane",

package/plugins/claude/plugins/mvrx-harness/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mvrx-harness",
-  "version": "0.1.126",
+  "version": "0.1.127",
   "description": "Overlane context at session start and the shared Overlane skills.",
   "author": {
     "name": "owenob1"