levain-cli 0.1.12__tar.gz → 0.1.15__tar.gz

{levain_cli-0.1.12 → levain_cli-0.1.15}/.gitignore

@@ -18,6 +18,10 @@ build/
 !**/platform_agents/build/
 !**/src/build/
 
+# Maven build output
+services/flink/target/
+services/flink/dependency-reduced-pom.xml
+
 # Binaries
 bin/
 
@@ -136,3 +140,6 @@ assets/video/*/renders/
 # www/public/videos/, the composition that made them does not.
 assets/video/updates-*/
 assets/video/*/snapshots/
+
+# Maven build output (Flink job); the image build compiles from source.
+services/flink/target/

{levain_cli-0.1.12 → levain_cli-0.1.15}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: levain-cli
-Version: 0.1.12
+Version: 0.1.15
 Summary: Levain recipe toolchain: PlusCal validator, TLC model checking, and GraphState codegen for agent recipes
 License-Expression: Apache-2.0
 License-File: LICENSE

{levain_cli-0.1.12 → levain_cli-0.1.15}/levain_recipe/cli.py

@@ -337,14 +337,28 @@ def git_credential_cmd(
         raise typer.Exit(1)
     scope, slug = repo
 
+    # A ``workspace-<slug>`` repo in a workspace org is an agent's
+    # durable workspace, minted on a dedicated route. An agent whose
+    # own slug carries the prefix shadows it, so the recipe route is
+    # tried first and the workspace route is the 404 fallback.
+    mint_paths = [f"{api_base()}/api/v1/{scope}/{slug}/git-credential"]
+    if scope == "agents" and slug.startswith("workspace-"):
+        mint_paths.append(
+            f"{api_base()}/api/v1/agents/"
+            f"{slug.removeprefix('workspace-')}/workspace/git-credential"
+        )
+
     api = api_base()
     try:
         with _client() as client:
             token = access_token(api, client)
-            resp = client.post(
-                f"{api}/api/v1/{scope}/{slug}/git-credential",
-                headers={"Authorization": f"Bearer {token}"},
-            )
+            for mint_path in mint_paths:
+                resp = client.post(
+                    mint_path,
+                    headers={"Authorization": f"Bearer {token}"},
+                )
+                if resp.status_code != 404:
+                    break
     except AuthError as exc:
         print(f"levain git-credential: {exc}", file=sys.stderr)
         raise typer.Exit(1) from None
@@ -378,3 +392,70 @@ def _repo_from_git_path(path: str) -> tuple[str, str] | None:
     else:
         return None
     return scope, repo.removesuffix(".git")
+
+
+# ── Inbound webhooks ──────────────────────────────────────
+
+
+webhook_app = typer.Typer(
+    name="webhook",
+    help="Manage an agent's inbound webhook.",
+    add_completion=False,
+)
+app.add_typer(webhook_app)
+
+
+def _webhook_request(method: str, path: str) -> None:
+    from .auth import AuthError, access_token, api_base
+
+    api = api_base()
+    try:
+        with _client() as client:
+            token = access_token(api, client)
+            resp = client.request(
+                method,
+                f"{api}{path}",
+                headers={"Authorization": f"Bearer {token}"},
+            )
+    except AuthError as exc:
+        print(f"Error: {exc}", file=sys.stderr)
+        raise typer.Exit(1) from None
+    if resp.status_code >= 400:
+        try:
+            detail = resp.json().get("detail")
+        except ValueError:
+            detail = None
+        suffix = f" — {detail}" if detail else ""
+        print(f"Error: HTTP {resp.status_code}{suffix}", file=sys.stderr)
+        raise typer.Exit(1)
+    print(json.dumps(resp.json(), indent=2))
+
+
+@webhook_app.command("create")
+def webhook_create_cmd(
+    agent: Annotated[str, typer.Argument(help="Agent id or slug.")],
+) -> None:
+    """Create the agent's inbound webhook.
+
+    Prints the webhook once, including the URL with its embedded
+    secret — store it; it cannot be retrieved later. POST a JSON body
+    to the URL to dispatch a run of the agent, or include a top-level
+    ``session_id`` to take a turn on an existing session.
+    """
+    _webhook_request("POST", f"/api/v1/agents/{agent}/webhooks")
+
+
+@webhook_app.command("rotate")
+def webhook_rotate_cmd(
+    agent: Annotated[str, typer.Argument(help="Agent id or slug.")],
+) -> None:
+    """Rotate the webhook secret and print the fresh URL (shown once)."""
+    _webhook_request("POST", f"/api/v1/agents/{agent}/webhooks/rotate")
+
+
+@webhook_app.command("delete")
+def webhook_delete_cmd(
+    agent: Annotated[str, typer.Argument(help="Agent id or slug.")],
+) -> None:
+    """Delete the agent's inbound webhook."""
+    _webhook_request("DELETE", f"/api/v1/agents/{agent}/webhooks")

{levain_cli-0.1.12 → levain_cli-0.1.15}/levain_recipe/models.py

@@ -134,6 +134,10 @@ class ValidatedSpec:
     routing: list[RoutingTable]
     invariants: list[str] = field(default_factory=list)
     constants: dict[str, Any] = field(default_factory=dict)
+    # Lanes the recipe splits its turns into (``\* @lanes [...]``):
+    # runs in different lanes may share the agent's workspace at the
+    # same time.  Empty when the recipe runs one turn at a time.
+    lanes: list[str] = field(default_factory=list)
 
 
 @dataclass(frozen=True)

{levain_cli-0.1.12 → levain_cli-0.1.15}/levain_recipe/validate.py

@@ -6,11 +6,12 @@ validation (PlusCal + Python source + pyproject.toml).
 
 from __future__ import annotations
 
+import json
 import logging
 import os
 import re
 import shutil
-from typing import cast
+from typing import Any, cast
 
 from ._java import resolve_jar
 from .graph import check_graph
@@ -52,6 +53,53 @@ _RE_COMMENT_PREFIX = re.compile(r"^\\[*]\s?")
 # excluded from the free-form description so the help text never
 # accidentally includes machine-readable metadata.
 _RE_ANNOTATION = re.compile(r"^\\[*]\s*@\w+")
+# Module-level ``\* @lanes ["people"]``: the lanes whose turns may run
+# at once on the agent's persistent workspace.  ``people`` is the
+# only lane a recipe can split out today; a trigger delivery or a
+# scheduled fire stays in the default lane.
+_RE_LANES = re.compile(r"^\s*\\[*]\s*@lanes\s+(\[.*\])\s*$")
+KNOWN_LANES = frozenset({"people"})
+
+
+def extract_lanes(source: str) -> list[str] | ValidationError:
+    r"""The lanes a ``\* @lanes`` line declares; ``[]`` without one."""
+    found = [
+        (n, m.group(1))
+        for n, line in enumerate(source.splitlines(), start=1)
+        if (m := _RE_LANES.match(line))
+    ]
+    if not found:
+        return []
+    line_no, raw = found[0]
+    lanes: Any = None
+    message: str | None
+    if len(found) > 1:
+        line_no, message = found[1][0], "@lanes may be declared once"
+    else:
+        try:
+            lanes = json.loads(raw)
+        except json.JSONDecodeError as e:
+            message = f"Invalid @lanes JSON: {e}"
+        else:
+            message = _lanes_problem(lanes)
+    if message:
+        return ValidationError(stage="profile", message=message, line=line_no)
+    return cast(list[str], lanes)
+
+
+def _lanes_problem(lanes: Any) -> str | None:
+    if (
+        not isinstance(lanes, list)
+        or not lanes
+        or not all(isinstance(s, str) for s in lanes)
+    ):
+        return "@lanes must be a non-empty JSON list of strings"
+    unknown = sorted(set(lanes) - KNOWN_LANES)
+    if unknown:
+        return f"Unknown lane(s) {unknown}; known: {sorted(KNOWN_LANES)}"
+    if len(set(lanes)) != len(lanes):
+        return "@lanes repeats a lane"
+    return None
 
 
 def validate(
@@ -130,6 +178,9 @@ def validate_fast(  # noqa: PLR0911
 
     constants = extract_constants(algo)
     invariants = [d for d in extract_defines(algo) if d not in constants]
+    lanes = extract_lanes(source)
+    if isinstance(lanes, ValidationError):
+        return [lanes]
 
     # Stage 3: Graph check.  Tell the reachability check that
     # ``interrupt`` nodes count as termination — a chat-shape
@@ -177,6 +228,7 @@ def validate_fast(  # noqa: PLR0911
         routing=routing,
         invariants=invariants,
         constants=constants,
+        lanes=lanes,
     )
 
 

{levain_cli-0.1.12 → levain_cli-0.1.15}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "levain-cli"
-version = "0.1.12"
+version = "0.1.15"
 description = "Levain recipe toolchain: PlusCal validator, TLC model checking, and GraphState codegen for agent recipes"
 readme = "README.md"
 license = "Apache-2.0"