Changeset 0.29.2 (#197)
Co-authored-by: Jeffrey Smith <jasafpro@gmail.com> Co-committed-by: Jeffrey Smith <jasafpro@gmail.com>
This commit is contained in:
@@ -110,7 +110,7 @@ All enum values used across the API. Definitive source of truth.
|
||||
|
||||
## Extension Tiers
|
||||
|
||||
`browser` (implemented), `starlark` (future), `sidecar` (future)
|
||||
`browser` (implemented), `starlark` (implemented, v0.29.0), `sidecar` (future)
|
||||
|
||||
## Grant Types
|
||||
|
||||
@@ -266,8 +266,8 @@ Declared in package manifests, granted by admin review.
|
||||
| `filters.pre_completion` | — | v0.29.0 |
|
||||
| `api.http` | `http` | v0.29.0 |
|
||||
| `provider.complete` | `provider` | v0.29.1 |
|
||||
| `db.read` | `db` | future |
|
||||
| `db.write` | `db` | future |
|
||||
| `db.read` | `db` | v0.29.2 |
|
||||
| `db.write` | `db` | v0.29.2 |
|
||||
|
||||
## Policies
|
||||
|
||||
|
||||
@@ -143,8 +143,8 @@ Admin must grant each before the package activates.
|
||||
| `filters.pre_completion` | — | Register pre-completion filter |
|
||||
| `api.http` | `http` | Outbound HTTP requests (v0.29.0: module, v0.29.1: also required for API routes) |
|
||||
| `provider.complete` | `provider` | LLM completion calls via BYOK chain (v0.29.1) |
|
||||
| `db.read` | `db` | Read extension tables (future) |
|
||||
| `db.write` | `db` | Write extension tables (future) |
|
||||
| `db.read` | `db` | Read extension tables and platform views (v0.29.2) |
|
||||
| `db.write` | `db` | Write extension tables (v0.29.2) |
|
||||
|
||||
### Starlark Modules (v0.29.0+)
|
||||
|
||||
@@ -171,6 +171,110 @@ Modules injected into the script namespace based on granted permissions:
|
||||
- Response: `{"content", "model", "finish_reason", "input_tokens", "output_tokens"}`
|
||||
- Provider resolved via BYOK chain; pinnable via `requires_provider.provider_config_id`
|
||||
|
||||
**`db`** (requires `db.read` or `db.write`, v0.29.2):
|
||||
- `db.query(table, filters=None, order=None, limit=100)` → list of dicts
|
||||
- `table`: logical name (physical: `ext_{pkg_slug}_{table}`)
|
||||
- `filters`: dict of `{column: value}` equality filters (optional)
|
||||
- `order`: `"col"` or `"-col"` for descending (optional)
|
||||
- `limit`: max rows (default 100)
|
||||
- `db.insert(table, row_dict)` → inserted row dict with auto-generated `id` (`db.write`)
|
||||
- `db.update(table, id, partial_dict)` → True (`db.write`)
|
||||
- `db.delete(table, id)` → True (`db.write`)
|
||||
- `db.list_tables()` → list of logical table names for this package
|
||||
- `db.view(view_name, filters=None, limit=100)` → list of dicts
|
||||
- Allowed view names: `"users"` → `ext_view_users`, `"channels"` → `ext_view_channels`
|
||||
- `ext_view_users`: `id`, `display_name`, `email`
|
||||
- `ext_view_channels`: `id`, `title`, `type`, `team_id`
|
||||
|
||||
### Extension Database Tables (v0.29.2)
|
||||
|
||||
Starlark packages declare owned tables in `manifest.db_tables`. Tables
|
||||
are created on install and dropped on uninstall.
|
||||
|
||||
**Manifest `db_tables` field:**
|
||||
|
||||
```json
|
||||
{
|
||||
"db_tables": {
|
||||
"logs": {
|
||||
"columns": {
|
||||
"message": "text",
|
||||
"user_id": "text",
|
||||
"count": "int",
|
||||
"score": "real",
|
||||
"active": "bool",
|
||||
"created_at": "timestamp"
|
||||
},
|
||||
"indexes": [
|
||||
["user_id"],
|
||||
["user_id", "created_at"]
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
- **Physical name**: `ext_{pkg_slug}_{logical_name}` (hyphens → underscores)
|
||||
- **Auto-columns**: `id TEXT PRIMARY KEY` (UUID generated on insert),
|
||||
`created_at` (dialect-correct timestamp default)
|
||||
- **Column types**: `text`, `int`/`integer`, `real`/`float`,
|
||||
`bool`/`boolean`, `timestamp` — mapped to dialect-correct SQL
|
||||
- **Indexes**: each entry is a list of columns for a composite index
|
||||
- **Dialect**: PG uses `TIMESTAMPTZ`/`BOOLEAN`; SQLite uses `TEXT`/`INTEGER`
|
||||
- **Catalog**: tracked in `ext_data_tables` per package for lifecycle management
|
||||
|
||||
### Extension Tools (v0.29.2)
|
||||
|
||||
Starlark packages declare server-side tools in `manifest.tools`. These
|
||||
are included in `BuildToolDefs` alongside server tools. The completion
|
||||
tool loop dispatches matched calls to the `on_tool_call` entry point.
|
||||
|
||||
**Manifest `tools` field (starlark tier only):**
|
||||
|
||||
```json
|
||||
{
|
||||
"tier": "starlark",
|
||||
"permissions": ["db.read"],
|
||||
"tools": [
|
||||
{
|
||||
"name": "search_logs",
|
||||
"description": "Search extension log entries",
|
||||
"parameters": {
|
||||
"type": "object",
|
||||
"properties": {
|
||||
"query": {"type": "string"},
|
||||
"user_id": {"type": "string"}
|
||||
},
|
||||
"required": ["query"]
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
```
|
||||
|
||||
**`on_tool_call(call)` entry point:**
|
||||
|
||||
Called by the completion tool loop when a tool declared in `tools` is
|
||||
invoked by the LLM.
|
||||
|
||||
```python
|
||||
def on_tool_call(call):
|
||||
# call dict:
|
||||
# {
|
||||
# "tool_name": "search_logs",
|
||||
# "tool_call_id": "call_abc123",
|
||||
# "arguments": {"query": "hello", "user_id": "u1"}
|
||||
# }
|
||||
if call["tool_name"] == "search_logs":
|
||||
rows = db.query("logs", filters={"user_id": call["arguments"]["user_id"]})
|
||||
return {"results": rows}
|
||||
return {"error": "unknown tool"}
|
||||
```
|
||||
|
||||
- Return value is serialized to JSON and returned as the tool result
|
||||
- All sandbox modules (including `db`) are available per granted permissions
|
||||
- No additional permission is required beyond package being `active`
|
||||
|
||||
### Builtin Seeding
|
||||
|
||||
On startup, `SeedBuiltinExtensions()` scans `extensions/builtin/`
|
||||
|
||||
@@ -32,7 +32,7 @@ v0.9.x–v0.28.7 Foundation through Platform Polish ✅
|
||||
│ │
|
||||
v0.29.0 Starlark Sandbox ✅ v0.32.0 Multi-Replica HA
|
||||
v0.29.1 API Extensions ✅ v0.33.0 Observability
|
||||
v0.29.2 DB Extensions v0.34.0 Data Portability
|
||||
v0.29.2 DB Extensions ✅ v0.34.0 Data Portability
|
||||
v0.29.3 Workflow Forms │
|
||||
v0.30.0 Package Lifecycle │
|
||||
v0.30.1 SDK Adoption │
|
||||
@@ -188,17 +188,19 @@ Depends on: v0.29.0.
|
||||
- Server-side tool execution in completion handler (requires tool
|
||||
registry integration with sandbox; aligns with DB extensions scope)
|
||||
|
||||
### v0.29.2 — DB Extensions
|
||||
### v0.29.2 — DB Extensions ✅
|
||||
|
||||
Namespaced tables for extension data. Create-only (no migrations yet).
|
||||
Namespaced tables for extension data. Structured API, not raw SQL.
|
||||
Server-side tool execution (deferred from v0.29.1) included.
|
||||
|
||||
Depends on: v0.29.1.
|
||||
|
||||
- [ ] `ext_{id}_*` tables, dialect-correct DDL (PG + SQLite)
|
||||
- [ ] `db` Starlark module: `query()`, `exec()` scoped to extension tables
|
||||
- [ ] Views as read contract over platform tables (column allowlist)
|
||||
- [ ] Schema creation on install, drop on uninstall
|
||||
- [ ] Server-side tool execution in completion handler (deferred from v0.29.1)
|
||||
- [x] `ext_{id}_*` tables, dialect-correct DDL (PG + SQLite)
|
||||
- [x] `db` Starlark module: structured `query/insert/update/delete/list_tables/view`
|
||||
(structured API instead of raw `exec()` — prevents SQL injection)
|
||||
- [x] Views as read contract over platform tables (`ext_view_users`, `ext_view_channels`)
|
||||
- [x] Schema creation on install, drop on uninstall
|
||||
- [x] Server-side tool execution in completion handler (deferred from v0.29.1)
|
||||
|
||||
### v0.29.3 — Workflow Forms
|
||||
|
||||
|
||||
Reference in New Issue
Block a user