theway-daemon 0.1.27

theway daemon — the single agent-runtime kernel (bin `thewayd`): harness assembly, local/sandbox tool policy, triggers/cron/session/DAG runtime, skills, MCP/LSP wiring, serving the gRPC/HTTP/MCP transports from theway-transport. Terminal UI lives in the theway-tui crate.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81

//! `native.call`: the v2 native whitelist — `httpRequest` (mirrors
//! `network.fetch`), `notify`, and `log` (audit-only sinks). Any other name is
//! an explicit capability-denied error, never a silent no-op.

use serde_json::Value;
use theway_contract::extension::{ExtensionAuditOperation, ExtensionAuditOutcome};

use super::BrokerError;
use super::BrokerRuntime;
use super::arguments::{NativeArguments, NetworkArguments};

impl BrokerRuntime {
    pub(super) fn native_call(&self, arguments: &NativeArguments) -> Result<Value, BrokerError> {
        match arguments.name.as_str() {
            // httpRequest mirrors the network.fetch broker op.
            "httpRequest" => {
                let active = self.active.lock().clone().ok_or_else(|| {
                    BrokerError::new("broker_unavailable", "capability broker is not active")
                })?;
                self.network_fetch(
                    NetworkArguments {
                        url: arguments
                            .args
                            .get("url")
                            .and_then(Value::as_str)
                            .unwrap_or_default()
                            .to_string(),
                        method: arguments
                            .args
                            .get("method")
                            .and_then(Value::as_str)
                            .map(String::from),
                        headers: arguments
                            .args
                            .get("headers")
                            .and_then(Value::as_object)
                            .map(|object| {
                                object
                                    .iter()
                                    .filter_map(|(key, value)| {
                                        Some((key.clone(), value.as_str()?.to_string()))
                                    })
                                    .collect()
                            })
                            .unwrap_or_default(),
                        body: arguments
                            .args
                            .get("body")
                            .and_then(Value::as_str)
                            .map(String::from),
                    },
                    active,
                )
            }
            // notify and log are audit-only sinks in v1.
            "notify" | "log" => {
                self.services.audit.record(
                    self.extension_id.clone(),
                    Some(self.session_id.clone()),
                    if arguments.name == "notify" {
                        ExtensionAuditOperation::NativeNotify
                    } else {
                        ExtensionAuditOperation::NativeLog
                    },
                    ExtensionAuditOutcome::Allowed,
                    None,
                    None,
                    arguments
                        .args
                        .iter()
                        .map(|(key, value)| format!("{key}={value}")),
                );
                Ok(Value::Null)
            }
            _ => Err(BrokerError::new(
                "capability_denied",
                "native capability is not in the whitelist",
            )),
        }
    }
}