@adonis-agora/agent 0.76.3 → 0.77.1

package/dist/src/poppy-connections/http.js

@@ -0,0 +1,217 @@
+const escapeHtml = (value) => value.replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' })[c]);
+function fill(template, values) {
+    return escapeHtml(template).replace(/\{(\w+)\}/g, (_, k) => values[k] !== undefined ? escapeHtml(values[k]) : `{${k}}`);
+}
+/** The built-in pages: plain, accessible HTML; an app gives its own look with `render`. */
+export const defaultConnectRenderer = (view, t) => {
+    const org = 'organization' in view && view.organization ? view.organization : '';
+    const button = (label) => `<button type="submit" style="width:100%;padding:.75rem;border:0;border-radius:.75rem;background:#111;color:#fff;font-weight:600;font-size:1rem">${label}</button>`;
+    let body = '';
+    switch (view.view) {
+        case 'expired':
+            body = `<h1>${fill(t.expiredTitle, {})}</h1><p>${fill(t.expiredBody, {})}</p>`;
+            break;
+        case 'connected':
+            body = `<h1>${fill(t.connectedTitle, { company: org })}</h1><p>${fill(t.connectedBody, {})}</p>`;
+            break;
+        case 'failed':
+            body = `<h1>${fill(t.failedTitle, {})}</h1><p>${fill(t.failedBody, {})}</p>${view.retryUrl
+                ? `<p><a href="${escapeHtml(view.retryUrl)}">${fill(t.connectTitle, { company: org })}</a></p>`
+                : ''}`;
+            break;
+        case 'choose': {
+            body = `<h1>${fill(t.connectTitle, { company: org })}</h1><p>${fill(t.connectBody, { company: org })}</p>`;
+            if (view.directUrl) {
+                body += `<form method="POST" action="${escapeHtml(view.directUrl)}">${button(fill(t.direct, { company: org }))}</form>`;
+            }
+            if (view.mediated) {
+                body += `<h2>${fill(t.mediatedTitle, {})}</h2><form method="POST" action="${escapeHtml(view.mediated.action)}">`;
+                for (const f of view.mediated.fields) {
+                    body += `<label style="display:block;margin:.5rem 0">${escapeHtml(f.label)}<input name="${escapeHtml(f.name)}" type="${f.secret ? 'password' : 'text'}" autocomplete="${f.secret ? 'current-password' : 'off'}" required style="display:block;width:100%;padding:.6rem;margin-top:.25rem;border:1px solid #ccc;border-radius:.5rem"></label>`;
+                }
+                body += `${button(fill(t.mediatedSubmit, {}))}</form>`;
+            }
+            if (view.deviceUrl) {
+                body += `<form method="POST" action="${escapeHtml(view.deviceUrl)}" style="margin-top:1rem"><button type="submit" style="background:none;border:0;text-decoration:underline;cursor:pointer">${fill(t.device, {})}</button></form>`;
+            }
+            break;
+        }
+        case 'code':
+            body = `<h1>${fill(t.codeTitle, {})}</h1><form method="POST" action="${escapeHtml(view.action)}"><label style="display:block;margin:.5rem 0">${fill(t.codeLabel, { sentTo: view.sentTo })}<input name="code" inputmode="numeric" autocomplete="one-time-code" required style="display:block;width:100%;padding:.6rem;margin-top:.25rem;border:1px solid #ccc;border-radius:.5rem"></label>${button(fill(t.codeSubmit, {}))}</form>`;
+            break;
+        case 'device':
+            body = `<h1>${fill(t.connectTitle, { company: org })}</h1><p>${fill(t.deviceBody, { link: view.verificationUri, code: view.userCode })}</p><p><a href="${escapeHtml(view.verificationUri)}">${escapeHtml(view.verificationUri)}</a></p>${view.pending ? `<p>${fill(t.pendingBody, {})}</p>` : ''}<form method="POST" action="${escapeHtml(view.checkUrl)}">${button(fill(t.deviceCheck, {}))}</form>`;
+            break;
+    }
+    return `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="referrer" content="no-referrer"><title>${fill(t.pageTitle, {})}</title></head><body style="font-family:system-ui,sans-serif;max-width:28rem;margin:3rem auto;padding:0 1rem;line-height:1.5">${body}</body></html>`;
+};
+const SECURITY_HEADERS = {
+    'content-type': 'text/html; charset=utf-8',
+    'cache-control': 'no-store',
+    'x-frame-options': 'DENY',
+    'content-security-policy': "default-src 'none'; style-src 'unsafe-inline'; img-src * data:; form-action *; frame-ancestors 'none'",
+    'referrer-policy': 'no-referrer',
+};
+/** The default identity logo: the name's initial on a rounded square. */
+export function defaultLogoSvg(name) {
+    const initial = escapeHtml(([...name.trim()][0] ?? 'A').toUpperCase());
+    return `<svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64"><rect width="64" height="64" rx="14" fill="#334155"/><text x="32" y="42" font-family="sans-serif" font-size="30" text-anchor="middle" fill="#fff">${initial}</text></svg>`;
+}
+/**
+ * The routes under `/{path}`: the agent identity (`agent.json`, `jwks.json`), the connect pages and
+ * the Direct Sign-In callback. Returns `false` for anything else. Mounted ahead of the router: no
+ * session, no CSRF token — the connect id in the URL is the capability (128 bits, single-purpose,
+ * expiring), and the forms only ever post back to the same id.
+ */
+export function createPoppyConnectionsHandler(connections, options = {}) {
+    const render = options.render ?? defaultConnectRenderer;
+    const base = `/${connections.path}`;
+    const page = (ex, status, view) => ex.send(status, SECURITY_HEADERS, render(view, connections.texts));
+    const url = (suffix) => `${connections.baseUrl}${base}${suffix}`;
+    const choose = async (ex, id) => {
+        const data = await connections.page(id);
+        if (data.kind === 'expired')
+            return page(ex, 410, { view: 'expired' });
+        if (data.kind === 'connected')
+            return page(ex, 200, { view: 'connected', organization: data.organization });
+        return page(ex, 200, {
+            view: 'choose',
+            organization: data.organization,
+            directUrl: data.direct ? url(`/connect/${id}/direct`) : null,
+            deviceUrl: data.device ? url(`/connect/${id}/device`) : null,
+            mediated: data.mediated
+                ? { action: url(`/connect/${id}/mediated`), fields: data.mediated }
+                : null,
+        });
+    };
+    return async (ex) => {
+        if (ex.path !== base && !ex.path.startsWith(`${base}/`))
+            return false;
+        const rest = ex.path.slice(base.length);
+        try {
+            if (ex.method === 'GET' && rest === '/agent.json') {
+                const identity = await connections.identity();
+                ex.send(200, { 'content-type': 'application/json', 'cache-control': 'public, max-age=300' }, JSON.stringify(identity.metadata()));
+                return true;
+            }
+            if (ex.method === 'GET' && rest === '/logo.svg') {
+                // The default `logo_uri` (when `identity.logoUri` is not set) — a Company's consent screen
+                // shows it, so it must not 404: a mark with the name's initial.
+                ex.send(200, { 'content-type': 'image/svg+xml', 'cache-control': 'public, max-age=86400' }, defaultLogoSvg(connections.identityName));
+                return true;
+            }
+            if (ex.method === 'GET' && rest === '/jwks.json') {
+                const identity = await connections.identity();
+                ex.send(200, { 'content-type': 'application/json', 'cache-control': 'public, max-age=300' }, JSON.stringify(identity.jwks()));
+                return true;
+            }
+            if (ex.method === 'GET' && rest === '/oauth/callback') {
+                const result = await connections.directCallback(ex.query);
+                if (result.ok)
+                    page(ex, 200, { view: 'connected', organization: result.organization ?? '' });
+                else {
+                    const id = (ex.query.get('state') ?? '').split('.')[0] ?? '';
+                    page(ex, 400, {
+                        view: 'failed',
+                        organization: result.organization,
+                        retryUrl: id ? url(`/connect/${id}`) : null,
+                    });
+                }
+                return true;
+            }
+            const match = /^\/connect\/([A-Za-z0-9_-]{16,64})(\/[a-z/]+)?$/.exec(rest);
+            if (!match)
+                return false;
+            const id = match[1];
+            const action = match[2] ?? '';
+            if (ex.method === 'GET' && action === '') {
+                await choose(ex, id);
+                return true;
+            }
+            if (ex.method !== 'POST') {
+                ex.send(405, { allow: 'GET, POST' }, '');
+                return true;
+            }
+            const form = new URLSearchParams(await ex.readBody(16 * 1024));
+            if (action === '/direct') {
+                const to = await connections.directUrl(id);
+                if (to === null)
+                    page(ex, 410, { view: 'expired' });
+                else
+                    ex.send(303, { location: to, 'cache-control': 'no-store' }, '');
+                return true;
+            }
+            if (action === '/mediated' || action === '/code') {
+                const outcome = action === '/mediated'
+                    ? await connections.mediated(id, Object.fromEntries(form))
+                    : await connections.mediatedCode(id, form.get('code') ?? '');
+                const data = await connections.page(id);
+                const organization = data.kind === 'open' || data.kind === 'connected' ? data.organization : '';
+                if (outcome.status === 'connected')
+                    page(ex, 200, { view: 'connected', organization });
+                else if (outcome.status === 'code_required') {
+                    page(ex, 200, {
+                        view: 'code',
+                        organization,
+                        action: url(`/connect/${id}/code`),
+                        sentTo: outcome.sentTo ?? '',
+                    });
+                }
+                else if (outcome.status === 'expired')
+                    page(ex, 410, { view: 'expired' });
+                else
+                    page(ex, 400, { view: 'failed', organization, retryUrl: url(`/connect/${id}`) });
+                return true;
+            }
+            if (action === '/device' || action === '/device/check') {
+                const data = await connections.page(id);
+                if (data.kind === 'expired') {
+                    page(ex, 410, { view: 'expired' });
+                    return true;
+                }
+                const organization = data.organization;
+                if (action === '/device') {
+                    const started = await connections.deviceStart(id);
+                    if (started === null)
+                        page(ex, 410, { view: 'expired' });
+                    else
+                        page(ex, 200, {
+                            view: 'device',
+                            organization,
+                            ...started,
+                            checkUrl: url(`/connect/${id}/device/check`),
+                            pending: false,
+                        });
+                    return true;
+                }
+                const status = await connections.deviceCheck(id);
+                if (status === 'connected')
+                    page(ex, 200, { view: 'connected', organization });
+                else if (status === 'pending') {
+                    const again = await connections.deviceInfo(id);
+                    page(ex, 200, again === null
+                        ? { view: 'expired' }
+                        : {
+                            view: 'device',
+                            organization,
+                            ...again,
+                            checkUrl: url(`/connect/${id}/device/check`),
+                            pending: true,
+                        });
+                }
+                else if (status === 'expired')
+                    page(ex, 410, { view: 'expired' });
+                else
+                    page(ex, 400, { view: 'failed', organization, retryUrl: url(`/connect/${id}`) });
+                return true;
+            }
+            return false;
+        }
+        catch (error) {
+            options.onError?.(error);
+            page(ex, 500, { view: 'failed', organization: null, retryUrl: null });
+            return true;
+        }
+    };
+}
+//# sourceMappingURL=http.js.map

package/dist/src/poppy-connections/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/poppy-connections/http.ts"],"names":[],"mappings":"AAwCA,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,EAAE,CACnC,KAAK,CAAC,OAAO,CACX,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAE,CACrF,CAAC;AAEJ,SAAS,IAAI,CAAC,QAAgB,EAAE,MAA8B;IAC5D,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CACjE,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAC3D,CAAC;AACJ,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,MAAM,sBAAsB,GAAyB,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;IACtE,MAAM,GAAG,GAAG,cAAc,IAAI,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAC/B,mJAAmJ,KAAK,WAAW,CAAC;IACtK,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,SAAS;YACZ,IAAI,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC;YAC/E,MAAM;QACR,KAAK,WAAW;YACd,IAAI,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,MAAM,CAAC;YACjG,MAAM;QACR,KAAK,QAAQ;YACX,IAAI,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,OACpE,IAAI,CAAC,QAAQ;gBACX,CAAC,CAAC,eAAe,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU;gBAC/F,CAAC,CAAC,EACN,EAAE,CAAC;YACH,MAAM;QACR,KAAK,QAAQ,EAAE,CAAC;YACd,IAAI,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC;YAC3G,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,IAAI,IAAI,+BAA+B,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC;YAC1H,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,IAAI,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,oCAAoC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;gBACjH,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;oBACrC,IAAI,IAAI,+CAA+C,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,gIAAgI,CAAC;gBAChV,CAAC;gBACD,IAAI,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC;YACzD,CAAC;YACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,IAAI,IAAI,+BAA+B,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,6HAA6H,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC;YACrO,CAAC;YACD,MAAM;QACR,CAAC;QACD,KAAK,MAAM;YACT,IAAI,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,oCAAoC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,iDAAiD,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,mMAAmM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC;YACpa,MAAM;QACR,KAAK,QAAQ;YACX,IAAI,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,mBAAmB,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,WAC5N,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EACvD,+BAA+B,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC;YACtG,MAAM;IACV,CAAC;IACD,OAAO,0KAA0K,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,iIAAiI,IAAI,gBAAgB,CAAC;AAC9V,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG;IACvB,cAAc,EAAE,0BAA0B;IAC1C,eAAe,EAAE,UAAU;IAC3B,iBAAiB,EAAE,MAAM;IACzB,yBAAyB,EACvB,uGAAuG;IACzG,iBAAiB,EAAE,aAAa;CACjC,CAAC;AAEF,yEAAyE;AACzE,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACvE,OAAO,wOAAwO,OAAO,eAAe,CAAC;AACxQ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,WAA6B,EAC7B,OAAO,GAA0E,EAAE;IAEnF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,sBAAsB,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC;IACpC,MAAM,IAAI,GAAG,CAAC,EAA4B,EAAE,MAAc,EAAE,IAAsB,EAAE,EAAE,CACpF,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,GAAG,WAAW,CAAC,OAAO,GAAG,IAAI,GAAG,MAAM,EAAE,CAAC;IAEzE,MAAM,MAAM,GAAG,KAAK,EAAE,EAA4B,EAAE,EAAU,EAAE,EAAE;QAChE,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACvE,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;YAC3B,OAAO,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAC/E,OAAO,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE;YACnB,IAAI,EAAE,QAAQ;YACd,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;YAC5D,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;YAC5D,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACrB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE;gBACnE,CAAC,CAAC,IAAI;SACT,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO,KAAK,EAAE,EAAE,EAAE,EAAE;QAClB,IAAI,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACtE,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;gBAClD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,CAAC;gBAC9C,EAAE,CAAC,IAAI,CACL,GAAG,EACH,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,qBAAqB,EAAE,EAC9E,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CACpC,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,EAAE,CAAC,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBAChD,2FAA2F;gBAC3F,gEAAgE;gBAChE,EAAE,CAAC,IAAI,CACL,GAAG,EACH,EAAE,cAAc,EAAE,eAAe,EAAE,eAAe,EAAE,uBAAuB,EAAE,EAC7E,cAAc,CAAC,WAAW,CAAC,YAAY,CAAC,CACzC,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,EAAE,CAAC,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;gBACjD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,CAAC;gBAC9C,EAAE,CAAC,IAAI,CACL,GAAG,EACH,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,qBAAqB,EAAE,EAC9E,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAChC,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,EAAE,CAAC,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACtD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;gBAC1D,IAAI,MAAM,CAAC,EAAE;oBACX,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC,CAAC;qBAC3E,CAAC;oBACJ,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC7D,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE;wBACZ,IAAI,EAAE,QAAQ;wBACd,YAAY,EAAE,MAAM,CAAC,YAAY;wBACjC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;qBAC5C,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,KAAK,GAAG,iDAAiD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3E,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YACzB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YACrB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,EAAE,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;gBACzC,MAAM,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBACrB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,EAAE,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACzB,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;gBACzC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;YAC/D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAC3C,IAAI,EAAE,KAAK,IAAI;oBAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;;oBAC/C,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;gBACrE,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACjD,MAAM,OAAO,GACX,MAAM,KAAK,WAAW;oBACpB,CAAC,CAAC,MAAM,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;oBAC1D,CAAC,CAAC,MAAM,WAAW,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBACjE,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACxC,MAAM,YAAY,GAChB,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7E,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW;oBAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;qBAClF,IAAI,OAAO,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;oBAC5C,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE;wBACZ,IAAI,EAAE,MAAM;wBACZ,YAAY;wBACZ,MAAM,EAAE,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC;wBAClC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;qBAC7B,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;oBAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;;oBACvE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;gBACtF,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;gBACvD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACxC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC5B,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;oBACnC,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;gBACvC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;oBAClD,IAAI,OAAO,KAAK,IAAI;wBAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;;wBAEvD,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE;4BACZ,IAAI,EAAE,QAAQ;4BACd,YAAY;4BACZ,GAAG,OAAO;4BACV,QAAQ,EAAE,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC;4BAC5C,OAAO,EAAE,KAAK;yBACf,CAAC,CAAC;oBACL,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;gBACjD,IAAI,MAAM,KAAK,WAAW;oBAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;qBAC1E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC9B,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;oBAC/C,IAAI,CACF,EAAE,EACF,GAAG,EACH,KAAK,KAAK,IAAI;wBACZ,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE;wBACrB,CAAC,CAAC;4BACE,IAAI,EAAE,QAAQ;4BACd,YAAY;4BACZ,GAAG,KAAK;4BACR,QAAQ,EAAE,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC;4BAC5C,OAAO,EAAE,IAAI;yBACd,CACN,CAAC;gBACJ,CAAC;qBAAM,IAAI,MAAM,KAAK,SAAS;oBAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;;oBAC/D,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;gBACtF,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACtE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/src/poppy-connections/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @experimental Personal Agent Protocol ("Poppy") Draft 0.1 — this app's agent acting on OTHER
+ * Poppy Companies for its users. Tracks the spec; WILL change, possibly in breaking ways.
+ */
+export { DEFAULT_POPPY_CONNECTIONS_TEXTS, definePoppyConnectionsConfig, normalizeDomain, type PoppyAgentKey, type PoppyCompanyPolicy, type PoppyConnectionsConfig, type PoppyConnectionsTexts, type TwoStepConvention, } from './config.js';
+export { Sealer } from './crypto.js';
+export { createPoppyConnectionsHandler, defaultConnectRenderer, type PoppyConnectionsExchange, type PoppyConnectRenderer, type PoppyConnectView, } from './http.js';
+export { continueAfterConnect, resumeAfterConnect } from './resume.js';
+export { normalizeKeys, PoppyCompanyNotAllowedError, type PoppyCompanyReply, PoppyConnections, type PoppyConnectionsOptions, type PoppyConnectionView, type PoppyConnectPageData, } from './service.js';
+export { ensurePoppyConnectionTables, InMemoryPoppyConnectionStore, LucidPoppyConnectionStore, POPPY_CONNECTION_TABLES, type PoppyConnectionRecord, type PoppyConnectionRedisClient, type PoppyConnectionStore, type PoppyPendingConnect, poppyConnectionTableStatements, redisPoppyConnectionStore, } from './store.js';
+export { type CallCompanyToolOptions, callCompanyTool, previewCompanyWrite, registerPoppyConnectionTools, talkToCompany, } from './tools.js';
+/** A fresh signing key for `identity.keys` (store the JSON in an env var). */
+export declare function generatePoppyAgentKey(): Promise<Record<string, unknown>>;
+//# sourceMappingURL=index.d.ts.map

package/dist/src/poppy-connections/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/poppy-connections/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,+BAA+B,EAC/B,4BAA4B,EAC5B,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EACL,6BAA6B,EAC7B,sBAAsB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,GACtB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EACL,aAAa,EACb,2BAA2B,EAC3B,KAAK,iBAAiB,EACtB,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,EAC5B,yBAAyB,EACzB,uBAAuB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,KAAK,sBAAsB,EAC3B,eAAe,EACf,mBAAmB,EACnB,4BAA4B,EAC5B,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,8EAA8E;AAC9E,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAG9E"}

package/dist/src/poppy-connections/index.js

@@ -0,0 +1,17 @@
+/**
+ * @experimental Personal Agent Protocol ("Poppy") Draft 0.1 — this app's agent acting on OTHER
+ * Poppy Companies for its users. Tracks the spec; WILL change, possibly in breaking ways.
+ */
+export { DEFAULT_POPPY_CONNECTIONS_TEXTS, definePoppyConnectionsConfig, normalizeDomain, } from './config.js';
+export { Sealer } from './crypto.js';
+export { createPoppyConnectionsHandler, defaultConnectRenderer, } from './http.js';
+export { continueAfterConnect, resumeAfterConnect } from './resume.js';
+export { normalizeKeys, PoppyCompanyNotAllowedError, PoppyConnections, } from './service.js';
+export { ensurePoppyConnectionTables, InMemoryPoppyConnectionStore, LucidPoppyConnectionStore, POPPY_CONNECTION_TABLES, poppyConnectionTableStatements, redisPoppyConnectionStore, } from './store.js';
+export { callCompanyTool, previewCompanyWrite, registerPoppyConnectionTools, talkToCompany, } from './tools.js';
+/** A fresh signing key for `identity.keys` (store the JSON in an env var). */
+export async function generatePoppyAgentKey() {
+    const { generateEs256Key } = await import('../poppy-client/keys.js');
+    return (await generateEs256Key()).privateJwk;
+}
+//# sourceMappingURL=index.js.map

package/dist/src/poppy-connections/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/poppy-connections/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,+BAA+B,EAC/B,4BAA4B,EAC5B,eAAe,GAMhB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EACL,6BAA6B,EAC7B,sBAAsB,GAIvB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EACL,aAAa,EACb,2BAA2B,EAE3B,gBAAgB,GAIjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,EAC5B,yBAAyB,EACzB,uBAAuB,EAKvB,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EAEL,eAAe,EACf,mBAAmB,EACnB,4BAA4B,EAC5B,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACrE,OAAO,CAAC,MAAM,gBAAgB,EAAE,CAAC,CAAC,UAAqC,CAAC;AAC1E,CAAC"}

package/dist/src/poppy-connections/resume.d.ts

@@ -0,0 +1,46 @@
+import type { AgentService } from '../agent-service.js';
+import type { ActionProposalOutcome } from '../spi/action-proposal-outcome-store.js';
+import type { Actor } from '../types.js';
+import type { PoppyConnections } from './service.js';
+import type { PoppyPendingConnect } from './store.js';
+/**
+ * A connect finished: decide the `connect` call the turn parked on, so the conversation resumes
+ * with the account connected — a scoped proposal decision under `actionApprovalMode: 'independent'`,
+ * an approval of the parked call otherwise. A call already decided (the person tapped first) is left.
+ */
+export declare function resumeAfterConnect(service: Pick<AgentService, 'actionApprovalMode' | 'listActionProposals' | 'decideActionProposal' | 'approve' | 'toolCallApproval'> & Partial<Pick<AgentService, 'send'>>, pending: PoppyPendingConnect, 
+/**
+ * For a sign-in that finished after its card expired: the connection is stored all the same, and
+ * the conversation is continued with a new turn ({@link PoppyConnectionsTexts.continueAfterConnect})
+ * instead of nothing happening. Without it, an expired card is left alone.
+ */
+late?: {
+    connections: Pick<PoppyConnections, 'texts'>;
+    follow?: (address: unknown, run: {
+        runId: string;
+        threadId: string;
+        actor: Actor;
+    }) => Promise<unknown>;
+}): Promise<void>;
+/**
+ * Independent approvals: deciding the `connect` proposal runs it, and its outcome is written to the
+ * thread — but nothing asks the model to go on. Once that outcome is admitted (the
+ * action-proposal worker's `onAdmitted`), this starts the next turn on the thread, in the person's
+ * voice ({@link PoppyConnectionsTexts.continueAfterConnect}), so the model proceeds with what was
+ * asked before the sign-in. A text channel's conversation gets that turn too (`follow`).
+ *
+ * Only for a connect this app's connect page completed (its pending connect is `connected`), and
+ * only once: the outcome is admitted once.
+ */
+export declare function continueAfterConnect(service: Pick<AgentService, 'listActionProposals' | 'send'>, connections: Pick<PoppyConnections, 'pendingFor' | 'texts'>, outcome: ActionProposalOutcome, options?: {
+    prefix?: string;
+    /** Deliver the new run to a text channel (`channels.follow`). */
+    follow?: (address: unknown, run: {
+        runId: string;
+        threadId: string;
+        actor: Actor;
+    }) => Promise<unknown>;
+}): Promise<{
+    runId: string;
+} | null>;
+//# sourceMappingURL=resume.d.ts.map

package/dist/src/poppy-connections/resume.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume.d.ts","sourceRoot":"","sources":["../../../src/poppy-connections/resume.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAc,MAAM,qBAAqB,CAAC;AACpE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEtD;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,IAAI,CACX,YAAY,EACV,oBAAoB,GACpB,qBAAqB,GACrB,sBAAsB,GACtB,SAAS,GACT,kBAAkB,CACrB,GACC,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,EACrC,OAAO,EAAE,mBAAmB;AAC5B;;;;GAIG;AACH,IAAI,CAAC,EAAE;IACL,WAAW,EAAE,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,CAAC,EAAE,CACP,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAA;KAAE,KACnD,OAAO,CAAC,OAAO,CAAC,CAAC;CACvB,GACA,OAAO,CAAC,IAAI,CAAC,CAsCf;AAiCD;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,qBAAqB,GAAG,MAAM,CAAC,EAC3D,WAAW,EAAE,IAAI,CAAC,gBAAgB,EAAE,YAAY,GAAG,OAAO,CAAC,EAC3D,OAAO,EAAE,qBAAqB,EAC9B,OAAO,GAAE;IACP,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,MAAM,CAAC,EAAE,CACP,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAA;KAAE,KACnD,OAAO,CAAC,OAAO,CAAC,CAAC;CAClB,GACL,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAoCnC"}

package/dist/src/poppy-connections/resume.js

@@ -0,0 +1,109 @@
+/**
+ * A connect finished: decide the `connect` call the turn parked on, so the conversation resumes
+ * with the account connected — a scoped proposal decision under `actionApprovalMode: 'independent'`,
+ * an approval of the parked call otherwise. A call already decided (the person tapped first) is left.
+ */
+export async function resumeAfterConnect(service, pending, 
+/**
+ * For a sign-in that finished after its card expired: the connection is stored all the same, and
+ * the conversation is continued with a new turn ({@link PoppyConnectionsTexts.continueAfterConnect})
+ * instead of nothing happening. Without it, an expired card is left alone.
+ */
+late) {
+    if (!pending.actor || !pending.threadId || !pending.toolCallId)
+        return;
+    const actor = pending.actor;
+    const threadId = pending.threadId;
+    if (service.actionApprovalMode() === 'independent') {
+        const proposals = (await service.listActionProposals(actor, threadId));
+        const mine = proposals.filter((p) => p.originToolCallId === pending.toolCallId);
+        const open = mine.find((p) => p.decision === 'pending');
+        if (open) {
+            const decided = await service
+                .decideActionProposal(actor, threadId, open.id, 'approved', {}, 'poppy-connect')
+                .then((r) => r.status !== 'expired', () => false);
+            if (decided)
+                return;
+        }
+        // Approved already (the person tapped first) or turned down: nothing to add.
+        if (mine.some((p) => p.decision === 'approved' || p.decision === 'rejected'))
+            return;
+        // Expired (or gone) before the sign-in finished: the account is connected anyway — go on.
+        await continueLate(service, late, actor, threadId, pending, mine[0]?.executionContext);
+        return;
+    }
+    if (!pending.runId)
+        return;
+    const state = await service.toolCallApproval(pending.toolCallId);
+    if (state === null || state.status === 'pending_approval') {
+        await service.approve(pending.runId, pending.toolCallId, {
+            executedByRef: actor.id,
+            via: 'poppy-connect',
+        });
+        return;
+    }
+    if (state.status === 'expired')
+        await continueLate(service, late, actor, threadId, pending);
+}
+async function continueLate(service, late, actor, threadId, pending, context) {
+    if (!late || !service.send)
+        return;
+    const sent = await service.send({
+        actor,
+        threadId,
+        message: late.connections.texts.continueAfterConnect.replace(/\{company\}/g, pending.organization),
+        ...(context?.agentName !== undefined ? { agentName: context.agentName } : {}),
+        ...(context?.pageContext !== undefined
+            ? { pageContext: context.pageContext }
+            : {}),
+    }, { textDecisions: false });
+    const runId = sent.runId;
+    const address = context?.pageContext?.channel;
+    if (runId !== undefined && late.follow && address !== null && typeof address === 'object') {
+        await late.follow(address, { runId, threadId, actor });
+    }
+}
+/**
+ * Independent approvals: deciding the `connect` proposal runs it, and its outcome is written to the
+ * thread — but nothing asks the model to go on. Once that outcome is admitted (the
+ * action-proposal worker's `onAdmitted`), this starts the next turn on the thread, in the person's
+ * voice ({@link PoppyConnectionsTexts.continueAfterConnect}), so the model proceeds with what was
+ * asked before the sign-in. A text channel's conversation gets that turn too (`follow`).
+ *
+ * Only for a connect this app's connect page completed (its pending connect is `connected`), and
+ * only once: the outcome is admitted once.
+ */
+export async function continueAfterConnect(service, connections, outcome, options = {}) {
+    if (outcome.toolName !== `${options.prefix ?? 'poppy_'}connect`)
+        return null;
+    if (outcome.executionStatus !== 'succeeded' || outcome.decision !== 'approved')
+        return null;
+    const result = outcome.result;
+    if (result?.connected !== true)
+        return null;
+    const pending = await connections.pendingFor(outcome.originRunId, outcome.originToolCallId);
+    if (pending === null || pending.status !== 'connected' || pending.actor === null)
+        return null;
+    const actor = pending.actor;
+    const proposal = (await service.listActionProposals(actor, outcome.threadId)).find((p) => p.id === outcome.proposalId);
+    const context = proposal?.executionContext;
+    const company = typeof result.organization === 'string' ? result.organization : pending.organization;
+    const sent = await service.send({
+        actor,
+        threadId: outcome.threadId,
+        message: connections.texts.continueAfterConnect.replace(/\{company\}/g, company),
+        ...(context?.agentName !== undefined ? { agentName: context.agentName } : {}),
+        ...(context?.pageContext !== undefined
+            ? { pageContext: context.pageContext }
+            : {}),
+    }, { textDecisions: false });
+    const runId = sent.runId;
+    if (runId === undefined)
+        return null;
+    const address = context?.pageContext?.channel;
+    if (options.follow && address !== null && typeof address === 'object') {
+        await options.follow(address, { runId, threadId: outcome.threadId, actor });
+    }
+    return { runId };
+}
+//# sourceMappingURL=resume.js.map

package/dist/src/poppy-connections/resume.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume.js","sourceRoot":"","sources":["../../../src/poppy-connections/resume.ts"],"names":[],"mappings":"AAMA;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAQqC,EACrC,OAA4B;AAC5B;;;;GAIG;AACH,IAMC;IAED,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,UAAU;QAAE,OAAO;IACvE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAc,CAAC;IACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IAAI,OAAO,CAAC,kBAAkB,EAAE,KAAK,aAAa,EAAE,CAAC;QACnD,MAAM,SAAS,GAAG,CAAC,MAAM,OAAO,CAAC,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAKlE,CAAC;QACJ,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;QAChF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;QACxD,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,OAAO,GAAG,MAAM,OAAO;iBAC1B,oBAAoB,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,eAAe,CAAC;iBAC/E,IAAI,CACH,CAAC,CAAC,EAAE,EAAE,CAAE,CAAyB,CAAC,MAAM,KAAK,SAAS,EACtD,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC;YACJ,IAAI,OAAO;gBAAE,OAAO;QACtB,CAAC;QACD,6EAA6E;QAC7E,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC;YAAE,OAAO;QACrF,0FAA0F;QAC1F,MAAM,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACvF,OAAO;IACT,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,KAAK;QAAE,OAAO;IAC3B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACjE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAC1D,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,EAAE;YACvD,aAAa,EAAE,KAAK,CAAC,EAAE;YACvB,GAAG,EAAE,eAAe;SACrB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC9F,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,OAA4C,EAC5C,IAA8C,EAC9C,KAAY,EACZ,QAAgB,EAChB,OAA4B,EAC5B,OAAuE;IAEvE,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI;QAAE,OAAO;IACnC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAC7B;QACE,KAAK;QACL,QAAQ;QACR,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAC1D,cAAc,EACd,OAAO,CAAC,YAAY,CACrB;QACD,GAAG,CAAC,OAAO,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,OAAO,EAAE,WAAW,KAAK,SAAS;YACpC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAqD,EAAE;YAChF,CAAC,CAAC,EAAE,CAAC;KACR,EACD,EAAE,aAAa,EAAE,KAAK,EAAE,CACzB,CAAC;IACF,MAAM,KAAK,GAAI,IAA2B,CAAC,KAAK,CAAC;IACjD,MAAM,OAAO,GAAG,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC;IAC9C,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC1F,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAA2D,EAC3D,WAA2D,EAC3D,OAA8B,EAC9B,OAAO,GAOH,EAAE;IAEN,IAAI,OAAO,CAAC,QAAQ,KAAK,GAAG,OAAO,CAAC,MAAM,IAAI,QAAQ,SAAS;QAAE,OAAO,IAAI,CAAC;IAC7E,IAAI,OAAO,CAAC,eAAe,KAAK,WAAW,IAAI,OAAO,CAAC,QAAQ,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC5F,MAAM,MAAM,GAAG,OAAO,CAAC,MAAqE,CAAC;IAC7F,IAAI,MAAM,EAAE,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5F,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9F,MAAM,KAAK,GAAG,OAAO,CAAC,KAAc,CAAC;IACrC,MAAM,QAAQ,GACZ,CAAC,MAAM,OAAO,CAAC,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAI5D,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,QAAQ,EAAE,gBAAgB,CAAC;IAC3C,MAAM,OAAO,GACX,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IACvF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAC7B;QACE,KAAK;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC;QAChF,GAAG,CAAC,OAAO,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,OAAO,EAAE,WAAW,KAAK,SAAS;YACpC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAqD,EAAE;YAChF,CAAC,CAAC,EAAE,CAAC;KACR,EACD,EAAE,aAAa,EAAE,KAAK,EAAE,CACzB,CAAC;IACF,MAAM,KAAK,GAAI,IAA2B,CAAC,KAAK,CAAC;IACjD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,OAAO,GAAG,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC;IAC9C,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QACtE,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC"}

package/dist/src/poppy-connections/runtime.d.ts

@@ -0,0 +1,4 @@
+import type { HttpContext } from '@adonisjs/core/http';
+export declare function setPoppyConnectionsHandler(handler: ((ctx: HttpContext) => Promise<boolean>) | null): void;
+export declare function getPoppyConnectionsHandler(): ((ctx: HttpContext) => Promise<boolean>) | null;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/src/poppy-connections/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../src/poppy-connections/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAKvD,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,QAGzD;AAED,wBAAgB,0BAA0B,WARtB,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,SAUnD"}

package/dist/src/poppy-connections/runtime.js

@@ -0,0 +1,9 @@
+/** Set by the provider at boot; read by the server middleware per request (`false` = not ours). */
+let current = null;
+export function setPoppyConnectionsHandler(handler) {
+    current = handler;
+}
+export function getPoppyConnectionsHandler() {
+    return current;
+}
+//# sourceMappingURL=runtime.js.map

package/dist/src/poppy-connections/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../src/poppy-connections/runtime.ts"],"names":[],"mappings":"AAEA,mGAAmG;AACnG,IAAI,OAAO,GAAoD,IAAI,CAAC;AAEpE,MAAM,UAAU,0BAA0B,CACxC,OAAwD;IAExD,OAAO,GAAG,OAAO,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/src/poppy-connections/server_middleware.d.ts

@@ -0,0 +1,10 @@
+import type { HttpContext } from '@adonisjs/core/http';
+import type { NextFn } from '@adonisjs/core/types/http';
+/**
+ * Serves the agent identity, the connect pages and the sign-in callback ahead of the router — no
+ * session, CSRF or bodyparser: the connect id in the URL is the capability.
+ */
+export default class PoppyConnectionsServerMiddleware {
+    handle(ctx: HttpContext, next: NextFn): Promise<any>;
+}
+//# sourceMappingURL=server_middleware.d.ts.map

package/dist/src/poppy-connections/server_middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server_middleware.d.ts","sourceRoot":"","sources":["../../../src/poppy-connections/server_middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AAGxD;;;GAGG;AACH,MAAM,CAAC,OAAO,OAAO,gCAAgC;IAC7C,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,gBAI1C;CACF"}

package/dist/src/poppy-connections/server_middleware.js

@@ -0,0 +1,14 @@
+import { getPoppyConnectionsHandler } from './runtime.js';
+/**
+ * Serves the agent identity, the connect pages and the sign-in callback ahead of the router — no
+ * session, CSRF or bodyparser: the connect id in the URL is the capability.
+ */
+export default class PoppyConnectionsServerMiddleware {
+    async handle(ctx, next) {
+        const handler = getPoppyConnectionsHandler();
+        if (handler !== null && (await handler(ctx)))
+            return;
+        return next();
+    }
+}
+//# sourceMappingURL=server_middleware.js.map

package/dist/src/poppy-connections/server_middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server_middleware.js","sourceRoot":"","sources":["../../../src/poppy-connections/server_middleware.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAE1D;;;GAGG;AACH,MAAM,CAAC,OAAO,OAAO,gCAAgC;IACnD,KAAK,CAAC,MAAM,CAAC,GAAgB,EAAE,IAAY;QACzC,MAAM,OAAO,GAAG,0BAA0B,EAAE,CAAC;QAC7C,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO;QACrD,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;CACF"}