@agent-native/core 0.98.5 → 0.98.7

package/dist/integrations/types.d.ts

@@ -95,6 +95,13 @@ export interface IncomingMessage {
         targetAgent?: string;
         instruction: string;
     };
+    /**
+     * Trusted app-side note about the caller's identity/visibility tier, set
+     * after execution-context resolution (e.g. an anonymous org-scoped Slack
+     * member). Surfaced to the agent as integration context. Adapters must not
+     * copy this from user-controlled webhook payload fields.
+     */
+    identityNote?: string;
     /** Provider-native message/activity reference for contextual replies. */
     replyRef?: string;
     /** Message timestamp (epoch ms) */
@@ -245,6 +252,12 @@ export interface PlatformAdapter {
      * metadata, and text only — never persist file bodies or credentials.
      */
     hydrateIncomingMessage?(incoming: IncomingMessage): Promise<IncomingMessage>;
+    /**
+     * Hydrate only verified sender identity before execution-context selection.
+     * This runs on the provider acknowledgement path and must avoid fetching
+     * conversation history or file bodies.
+     */
+    hydrateIncomingIdentity?(incoming: IncomingMessage): Promise<IncomingMessage>;
     /**
      * Provider-specific response returned only after a message is verified and
      * durably enqueued. Discord uses this to return a type-5 deferred response
@@ -268,6 +281,18 @@ export interface PlatformAdapter {
     sendResponse(message: OutgoingMessage, context: IncomingMessage, opts?: {
         placeholderRef?: string;
     }): Promise<void>;
+    /**
+     * Send a short best-effort system notice to the conversation the incoming
+     * message arrived on (polite identity declines, one-time access guidance).
+     * Bypasses agent formatting. When `dedupeKey` is provided, the adapter may
+     * drop the notice if the same key was sent recently. Callers must treat
+     * failures as non-fatal.
+     */
+    sendSystemNotice?(incoming: IncomingMessage, text: string, opts?: {
+        dedupeKey?: string;
+        /** Dedupe window for `dedupeKey`. Adapters pick a default when omitted. */
+        dedupeTtlMs?: number;
+    }): Promise<void>;
     /**
      * Optionally post a "working on it…" placeholder message immediately when a
      * webhook arrives, before the agent loop runs. Adapters that support
@@ -360,5 +385,11 @@ export interface IntegrationExecutionContext {
     principalType: "user" | "service";
     installationId?: string;
     scopeId?: string;
+    /**
+     * True when a hydrated full workspace member could not be matched to an
+     * organization member and runs with the anonymous org-scoped service
+     * principal (org-wide visibility only, nothing user-private).
+     */
+    anonymousMember?: boolean;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/integrations/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/integrations/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAElC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE/D,MAAM,MAAM,2BAA2B,GACnC,SAAS,GACT,iBAAiB,GACjB,IAAI,GACJ,UAAU,GACV,SAAS,CAAC;AAEd,MAAM,MAAM,sBAAsB,GAAG,SAAS,GAAG,IAAI,GAAG,cAAc,CAAC;AAEvE,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;IAC5E,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD,KAAK,CAAC,EAAE,wBAAwB,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,gBAAgB,EAAE,MAAM,CAAC;IACzB,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,2BAA2B,CAAC;IAC/C,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sEAAsE;IACtE,UAAU,CAAC,EAAE,qBAAqB,CAAC;IACnC,yEAAyE;IACzE,eAAe,CAAC,EAAE,yBAAyB,EAAE,CAAC;IAC9C,wEAAwE;IACxE,KAAK,CAAC,EAAE,wBAAwB,EAAE,CAAC;IACnC,8EAA8E;IAC9E,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,iEAAiE;IACjE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,WAAW,CAAC,EAAE;QACZ,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC1C;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,+EAA+E;IAC/E,WAAW,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,sCAAsC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,OAAO,EAAE,OAAO,CAAC;IACjB,sDAAsD;IACtD,UAAU,EAAE,OAAO,CAAC;IACpB,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;4EAEwE;IACxE,eAAe,CAAC,EAAE,OAAO,4BAA4B,EAAE,YAAY,EAAE,CAAC;CACvE;AAED,MAAM,WAAW,2BAA2B;IAC1C,uEAAuE;IACvE,SAAS,EAAE,OAAO,CAAC;IACnB,4DAA4D;IAC5D,iBAAiB,EAAE,OAAO,CAAC;IAC3B,yEAAyE;IACzE,aAAa,EAAE,OAAO,CAAC;IACvB,iEAAiE;IACjE,iBAAiB,EAAE,OAAO,CAAC;IAC3B,2EAA2E;IAC3E,uBAAuB,EAAE,OAAO,CAAC;IACjC,8EAA8E;IAC9E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,2EAA2E;IAC3E,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,sEAAsE;IACtE,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,GAAG,CAAC,EAAE,sBAAsB,CAAC;IAC7B,+EAA+E;IAC/E,OAAO,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACrD,qEAAqE;IACrE,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,iFAAiF;IACjF,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;CACf;AAED,qBAAa,kCAAmC,SAAQ,KAAK;IAIzD,QAAQ,CAAC,QAAQ,EAAE,MAAM;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,2BAA2B;IAJxD,QAAQ,CAAC,IAAI,qCAAqC;IAElD,YACW,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,2BAA2B,EAIvD;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC9B,iCAAiC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,2BAA2B;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,4EAA4E;IAC5E,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAE7D,0DAA0D;IAC1D,kBAAkB,IAAI,YAAY,EAAE,CAAC;IAErC;;;;OAIG;IACH,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;QAC1C,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC,CAAC;IAEH;;;OAGG;IACH,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEhD;;;OAGG;IACH,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAEtE;;;;OAIG;IACH,sBAAsB,CAAC,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAE7E;;;;OAIG;IACH,2BAA2B,CAAC,CAC1B,QAAQ,EAAE,eAAe,GACxB,wBAAwB,GAAG,IAAI,CAAC;IAEnC;;;;OAIG;IACH,0BAA0B,CAAC,CAAC,QAAQ,EAAE,eAAe,GAAG,MAAM,EAAE,CAAC;IAEjE;;;;;;;OAOG;IACH,YAAY,CACV,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,eAAe,EACxB,IAAI,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GACjC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;;;;;;OASG;IACH,yBAAyB,CAAC,CACxB,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAE9C,2EAA2E;IAC3E,gBAAgB,CAAC,CACf,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IAEvC;;;;;OAKG;IACH,iBAAiB,CAAC,CAChB,QAAQ,EAAE,eAAe,EACzB,GAAG,EAAE,sBAAsB,GAC1B,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IAEvC;;;OAGG;IACH,mBAAmB,CAAC,CAClB,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;;;;;OAQG;IACH,mBAAmB,CACjB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,GACpC,eAAe,CAAC;IAEnB,0EAA0E;IAC1E,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACzD;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,eAAe,EACxB,UAAU,EAAE,MAAM,2BAA2B,GAC5C,IAAI,CAIN;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4FAA4F;IAC5F,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC;IAC7B,qGAAqG;IACrG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,8BAA8B,EAAE,WAAW,CAAC,CAAC;IAC7E,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,MAAM,CAAC,EACH,OAAO,0BAA0B,EAAE,WAAW,GAC9C,MAAM,GACN;QACE,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACjC,CAAC;IACN;;;OAGG;IACH,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,CACxB,QAAQ,EAAE,eAAe,KACtB,2BAA2B,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACxE;;;OAGG;IACH,aAAa,CAAC,EAAE,CACd,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE,eAAe,KACrB,OAAO,CACR;QACE,OAAO,EAAE,IAAI,CAAC;QACd,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GACD;QAAE,OAAO,EAAE,KAAK,CAAA;KAAE,CACrB,CAAC;CACH;AAED,MAAM,WAAW,2BAA2B;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/integrations/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAElC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE/D,MAAM,MAAM,2BAA2B,GACnC,SAAS,GACT,iBAAiB,GACjB,IAAI,GACJ,UAAU,GACV,SAAS,CAAC;AAEd,MAAM,MAAM,sBAAsB,GAAG,SAAS,GAAG,IAAI,GAAG,cAAc,CAAC;AAEvE,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;IAC5E,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD,KAAK,CAAC,EAAE,wBAAwB,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,gBAAgB,EAAE,MAAM,CAAC;IACzB,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,2BAA2B,CAAC;IAC/C,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sEAAsE;IACtE,UAAU,CAAC,EAAE,qBAAqB,CAAC;IACnC,yEAAyE;IACzE,eAAe,CAAC,EAAE,yBAAyB,EAAE,CAAC;IAC9C,wEAAwE;IACxE,KAAK,CAAC,EAAE,wBAAwB,EAAE,CAAC;IACnC,8EAA8E;IAC9E,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,iEAAiE;IACjE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,WAAW,CAAC,EAAE;QACZ,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC1C;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,+EAA+E;IAC/E,WAAW,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,sCAAsC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,OAAO,EAAE,OAAO,CAAC;IACjB,sDAAsD;IACtD,UAAU,EAAE,OAAO,CAAC;IACpB,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;4EAEwE;IACxE,eAAe,CAAC,EAAE,OAAO,4BAA4B,EAAE,YAAY,EAAE,CAAC;CACvE;AAED,MAAM,WAAW,2BAA2B;IAC1C,uEAAuE;IACvE,SAAS,EAAE,OAAO,CAAC;IACnB,4DAA4D;IAC5D,iBAAiB,EAAE,OAAO,CAAC;IAC3B,yEAAyE;IACzE,aAAa,EAAE,OAAO,CAAC;IACvB,iEAAiE;IACjE,iBAAiB,EAAE,OAAO,CAAC;IAC3B,2EAA2E;IAC3E,uBAAuB,EAAE,OAAO,CAAC;IACjC,8EAA8E;IAC9E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,2EAA2E;IAC3E,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,sEAAsE;IACtE,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,GAAG,CAAC,EAAE,sBAAsB,CAAC;IAC7B,+EAA+E;IAC/E,OAAO,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACrD,qEAAqE;IACrE,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,iFAAiF;IACjF,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;CACf;AAED,qBAAa,kCAAmC,SAAQ,KAAK;IAIzD,QAAQ,CAAC,QAAQ,EAAE,MAAM;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,2BAA2B;IAJxD,QAAQ,CAAC,IAAI,qCAAqC;IAElD,YACW,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,2BAA2B,EAIvD;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC9B,iCAAiC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,2BAA2B;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,4EAA4E;IAC5E,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAE7D,0DAA0D;IAC1D,kBAAkB,IAAI,YAAY,EAAE,CAAC;IAErC;;;;OAIG;IACH,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;QAC1C,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC,CAAC;IAEH;;;OAGG;IACH,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEhD;;;OAGG;IACH,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAEtE;;;;OAIG;IACH,sBAAsB,CAAC,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAE7E;;;;OAIG;IACH,uBAAuB,CAAC,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAE9E;;;;OAIG;IACH,2BAA2B,CAAC,CAC1B,QAAQ,EAAE,eAAe,GACxB,wBAAwB,GAAG,IAAI,CAAC;IAEnC;;;;OAIG;IACH,0BAA0B,CAAC,CAAC,QAAQ,EAAE,eAAe,GAAG,MAAM,EAAE,CAAC;IAEjE;;;;;;;OAOG;IACH,YAAY,CACV,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,eAAe,EACxB,IAAI,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GACjC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;;;OAMG;IACH,gBAAgB,CAAC,CACf,QAAQ,EAAE,eAAe,EACzB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QACL,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,2EAA2E;QAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GACA,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;;;;;;OASG;IACH,yBAAyB,CAAC,CACxB,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAE9C,2EAA2E;IAC3E,gBAAgB,CAAC,CACf,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IAEvC;;;;;OAKG;IACH,iBAAiB,CAAC,CAChB,QAAQ,EAAE,eAAe,EACzB,GAAG,EAAE,sBAAsB,GAC1B,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IAEvC;;;OAGG;IACH,mBAAmB,CAAC,CAClB,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;;;;;OAQG;IACH,mBAAmB,CACjB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,GACpC,eAAe,CAAC;IAEnB,0EAA0E;IAC1E,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACzD;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,eAAe,EACxB,UAAU,EAAE,MAAM,2BAA2B,GAC5C,IAAI,CAIN;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4FAA4F;IAC5F,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC;IAC7B,qGAAqG;IACrG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,8BAA8B,EAAE,WAAW,CAAC,CAAC;IAC7E,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,MAAM,CAAC,EACH,OAAO,0BAA0B,EAAE,WAAW,GAC9C,MAAM,GACN;QACE,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACjC,CAAC;IACN;;;OAGG;IACH,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,CACxB,QAAQ,EAAE,eAAe,KACtB,2BAA2B,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACxE;;;OAGG;IACH,aAAa,CAAC,EAAE,CACd,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE,eAAe,KACrB,OAAO,CACR;QACE,OAAO,EAAE,IAAI,CAAC;QACd,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GACD;QAAE,OAAO,EAAE,KAAK,CAAA;KAAE,CACrB,CAAC;CACH;AAED,MAAM,WAAW,2BAA2B;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B"}

package/dist/integrations/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/integrations/types.ts"],"names":[],"mappings":"AAuNA,MAAM,OAAO,kCAAmC,SAAQ,KAAK;IAIhD,QAAQ;IACR,UAAU;IAJZ,IAAI,GAAG,iCAAiC,CAAC;IAElD,YACW,QAAgB,EAChB,UAA6C;QAEtD,KAAK,CAAC,YAAY,QAAQ,qBAAqB,UAAU,EAAE,CAAC,CAAC;wBAHpD,QAAQ;0BACR,UAAU;QAGnB,IAAI,CAAC,IAAI,GAAG,oCAAoC,CAAC;IACnD,CAAC;CACF;AA0ID,MAAM,UAAU,wBAAwB,CACtC,OAAwB,EACxB,UAA6C;IAE7C,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,IAAI,kCAAkC,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC","sourcesContent":["import type { H3Event } from \"h3\";\n\nimport type { AgentChatEvent } from \"../agent/types.js\";\nimport type { EnvKeyConfig } from \"../server/create-server.js\";\n\nexport type IntegrationConversationType =\n  | \"channel\"\n  | \"private_channel\"\n  | \"dm\"\n  | \"group_dm\"\n  | \"unknown\";\n\nexport type IntegrationTriggerKind = \"mention\" | \"dm\" | \"thread_reply\";\n\nexport interface IntegrationActorTrust {\n  memberType: \"owner\" | \"admin\" | \"member\" | \"guest\" | \"external\" | \"unknown\";\n  verified: boolean;\n}\n\nexport interface IntegrationContextMessage {\n  senderId?: string;\n  senderName?: string;\n  text: string;\n  timestamp: number;\n  sourceUrl?: string;\n  reactions?: Array<{ name: string; count: number }>;\n  files?: IntegrationFileReference[];\n}\n\nexport interface IntegrationFileReference {\n  id: string;\n  name?: string;\n  mimetype?: string;\n  size?: number;\n  permalink?: string;\n  downloadUrl?: string;\n}\n\n/**\n * Normalized incoming message from any messaging platform.\n */\nexport interface IncomingMessage {\n  /** Platform identifier (e.g., \"slack\", \"telegram\", \"whatsapp\") */\n  platform: string;\n  /** Platform-specific thread/conversation identifier */\n  externalThreadId: string;\n  /** Message text content */\n  text: string;\n  /** Display name of the sender */\n  senderName?: string;\n  /** Verified sender email, when the platform can provide one */\n  senderEmail?: string;\n  /** Platform-specific sender ID */\n  senderId?: string;\n  /** How this message intentionally invoked an agent. */\n  triggerKind?: IntegrationTriggerKind;\n  /** Normalized provider conversation type for policy evaluation. */\n  conversationType?: IntegrationConversationType;\n  /** Provider tenant/workspace identifier. */\n  tenantId?: string;\n  /** Authorized integration scope resolved before execution. */\n  integrationScopeId?: string;\n  /** Normalized actor trust; unknown/unverified callers fail closed. */\n  actorTrust?: IntegrationActorTrust;\n  /** Bounded provider-native conversation context hydrated at run time. */\n  contextMessages?: IntegrationContextMessage[];\n  /** Provider file references only. Raw file bodies never belong here. */\n  files?: IntegrationFileReference[];\n  /** Server-verified approval grants carried by an interaction continuation. */\n  approvedToolCalls?: string[];\n  /**\n   * Whether the platform cryptographically authenticated that the message\n   * genuinely came from the claimed sender (e.g. inbound email that passed\n   * DKIM, or an aligned SPF pass, for the From domain). Defaults to\n   * undefined/false for platforms that don't provide sender authentication.\n   *\n   * Owner-resolution paths that grant a real user's identity/credentials\n   * MUST treat a missing/false value as \"unverified\" and fail closed —\n   * never derive a privileged acting identity from an unverified sender.\n   */\n  senderVerified?: boolean;\n  /** Raw platform-specific context needed for routing responses */\n  platformContext: Record<string, unknown>;\n  /**\n   * Short-lived delivery context needed only while the queued task is active.\n   * Secrets such as Discord interaction tokens belong here, never in\n   * `platformContext`, thread mappings, logs, or agent-visible context.\n   */\n  responseContext?: Record<string, unknown>;\n  /** Provider-native thread/topic reference, when one exists. */\n  threadRef?: string;\n  /**\n   * Canonical provider URL for the originating message thread, when the\n   * provider can resolve one. This is safe agent-visible provenance (not a\n   * credential) and should be preserved across A2A delegation so created\n   * artifacts can link back to their request source.\n   */\n  sourceUrl?: string;\n  /**\n   * Trusted app-side routing guidance added after provider parsing. Adapters\n   * should not copy this from user-controlled webhook payload fields.\n   */\n  routingHint?: {\n    targetAgent?: string;\n    instruction: string;\n  };\n  /** Provider-native message/activity reference for contextual replies. */\n  replyRef?: string;\n  /** Message timestamp (epoch ms) */\n  timestamp: number;\n}\n\n/**\n * Outgoing message to send back to a messaging platform.\n */\nexport interface OutgoingMessage {\n  /** Text content of the response */\n  text: string;\n  /** Platform-specific payload (e.g., Slack blocks, Telegram parse_mode) */\n  platformContext: Record<string, unknown>;\n}\n\n/**\n * Proactive outbound message target for a platform.\n * Used when the agent needs to send to a saved destination instead of replying\n * to the current inbound thread.\n */\nexport interface OutboundTarget {\n  /** Canonical platform-specific destination id (channel, chat, thread, etc.) */\n  destination: string;\n  /** Optional thread reference when the destination supports threading */\n  threadRef?: string | null;\n  /** Optional fallback display label */\n  label?: string;\n  /** Provider tenant/workspace used to select an installation credential. */\n  tenantId?: string;\n  /** Managed installation id when the caller already resolved it. */\n  installationId?: string;\n}\n\n/**\n * Connection status for a platform integration.\n */\nexport interface IntegrationStatus {\n  platform: string;\n  /** Human-readable label (e.g., \"Slack\", \"Telegram\") */\n  label: string;\n  /** Whether the integration is explicitly enabled */\n  enabled: boolean;\n  /** Whether all required credentials are configured */\n  configured: boolean;\n  /** Platform-specific details (workspace name, bot username, etc.) */\n  details?: Record<string, unknown>;\n  /** Error message if something is wrong */\n  error?: string;\n  /** The webhook URL that should be configured in the platform */\n  webhookUrl?: string;\n  /** The full list of env keys (required + optional) the adapter recognizes,\n   *  including UI hints. Surfaced on the integrations status endpoint so the\n   *  frontend can render fields without hard-coding them per platform. */\n  requiredEnvKeys?: import(\"../server/create-server.js\").EnvKeyConfig[];\n}\n\nexport interface PlatformAdapterCapabilities {\n  /** The adapter can deliver a response to the current inbound event. */\n  replyText: boolean;\n  /** The adapter can send without an active inbound event. */\n  proactiveMessages: boolean;\n  /** The adapter preserves a provider-native thread or topic reference. */\n  nativeThreads: boolean;\n  /** The adapter can quote/reply to a specific inbound message. */\n  contextualReplies: boolean;\n  /** The provider requires an immediate deferred webhook acknowledgement. */\n  deferredWebhookResponse: boolean;\n  /** The adapter only receives explicit interactions, not ordinary messages. */\n  interactionOnly?: boolean;\n  /** The adapter can hydrate bounded native thread/file/reaction context. */\n  nativeContextHydration?: boolean;\n  /** The adapter can surface live agent progress in the provider UI. */\n  liveRunProgress?: boolean;\n}\n\nexport interface PlatformRunProgress {\n  /**\n   * Opaque, provider-owned reference for resuming this progress surface from a\n   * durable continuation. It deliberately contains no user content,\n   * credentials, or provider payload.\n   */\n  ref?: PlatformRunProgressRef;\n  /** Receive normalized agent events. Implementations should throttle writes. */\n  onEvent(event: AgentChatEvent): Promise<void> | void;\n  /** Finalize the provider-native progress surface with the answer. */\n  complete(message: OutgoingMessage): Promise<void>;\n  /** Mark the provider-native surface failed and leave a retryable explanation. */\n  fail?(message: string): Promise<void>;\n}\n\n/**\n * Safe, minimal reference to a provider-native run-progress surface.\n *\n * The field values are opaque to the framework. Adapters may use `kind` to\n * distinguish their own resume strategy and `streamTs` to identify the\n * provider-side stream. No incoming message text, platform payload, or\n * credential belongs here.\n */\nexport interface PlatformRunProgressRef {\n  kind: string;\n  streamTs: string;\n}\n\nexport interface ImmediateWebhookResponse {\n  status: number;\n  body: unknown;\n}\n\nexport class UnsupportedPlatformCapabilityError extends Error {\n  readonly code = \"UNSUPPORTED_PLATFORM_CAPABILITY\";\n\n  constructor(\n    readonly platform: string,\n    readonly capability: keyof PlatformAdapterCapabilities,\n  ) {\n    super(`Platform ${platform} does not support ${capability}`);\n    this.name = \"UnsupportedPlatformCapabilityError\";\n  }\n}\n\n/**\n * Platform adapter interface — implement this for each messaging platform.\n *\n * Each adapter handles the platform-specific concerns:\n * - Webhook verification (HMAC signatures, challenge responses)\n * - Message parsing (platform events → normalized IncomingMessage)\n * - Response formatting (agent text → platform-specific format)\n * - Response delivery (POST back to platform API)\n */\nexport interface PlatformAdapter {\n  /** Unique platform identifier */\n  readonly platform: string;\n  /** Human-readable label */\n  readonly label: string;\n  /** Explicit runtime behavior. Missing fields are treated as unsupported. */\n  readonly capabilities?: Partial<PlatformAdapterCapabilities>;\n\n  /** Env keys this adapter needs (tokens, secrets, etc.) */\n  getRequiredEnvKeys(): EnvKeyConfig[];\n\n  /**\n   * Handle platform-specific verification challenges.\n   * For example, Slack sends a `url_verification` event when setting up.\n   * Return `{ handled: true, response }` to short-circuit the webhook handler.\n   */\n  handleVerification(event: H3Event): Promise<{\n    handled: boolean;\n    response?: unknown;\n  }>;\n\n  /**\n   * Validate the webhook request signature.\n   * Returns true if the request is authentic.\n   */\n  verifyWebhook(event: H3Event): Promise<boolean>;\n\n  /**\n   * Parse the webhook payload into a normalized IncomingMessage.\n   * Return null to silently ignore the event (bot messages, edits, etc.).\n   */\n  parseIncomingMessage(event: H3Event): Promise<IncomingMessage | null>;\n\n  /**\n   * Hydrate bounded provider-native context after durable enqueue, outside the\n   * provider acknowledgement budget. Implementations must return references,\n   * metadata, and text only — never persist file bodies or credentials.\n   */\n  hydrateIncomingMessage?(incoming: IncomingMessage): Promise<IncomingMessage>;\n\n  /**\n   * Provider-specific response returned only after a message is verified and\n   * durably enqueued. Discord uses this to return a type-5 deferred response\n   * within its three-second interaction deadline.\n   */\n  getImmediateWebhookResponse?(\n    incoming: IncomingMessage,\n  ): ImmediateWebhookResponse | null;\n\n  /**\n   * Return pre-canonical thread ids used by older adapter versions. The\n   * integration handler checks these only when the canonical mapping is\n   * missing, then aliases a match to the canonical id without forking history.\n   */\n  getLegacyExternalThreadIds?(incoming: IncomingMessage): string[];\n\n  /**\n   * Send the agent's response back to the messaging platform.\n   *\n   * If `opts.placeholderRef` is provided (returned earlier by\n   * `postProcessingPlaceholder`), adapters that support in-place edits should\n   * update that placeholder message rather than posting a new one. Adapters\n   * without an \"update message\" API can ignore the ref and post fresh.\n   */\n  sendResponse(\n    message: OutgoingMessage,\n    context: IncomingMessage,\n    opts?: { placeholderRef?: string },\n  ): Promise<void>;\n\n  /**\n   * Optionally post a \"working on it…\" placeholder message immediately when a\n   * webhook arrives, before the agent loop runs. Adapters that support\n   * in-place message edits (Slack via `chat.update`, etc.) return an opaque\n   * `placeholderRef` that the webhook flow threads through to `sendResponse`\n   * so the same message is updated with the final answer once ready.\n   *\n   * Adapters without edit support should leave this undefined; the webhook\n   * handler will skip the placeholder step entirely.\n   */\n  postProcessingPlaceholder?(\n    incoming: IncomingMessage,\n  ): Promise<{ placeholderRef: string } | null>;\n\n  /** Start a provider-native progress/streaming surface for an agent run. */\n  startRunProgress?(\n    incoming: IncomingMessage,\n  ): Promise<PlatformRunProgress | null>;\n\n  /**\n   * Reattach a durable continuation to a provider-native progress surface\n   * previously started by this adapter. Adapters that cannot resume a native\n   * surface should omit this and the continuation will use its normal reply\n   * path instead.\n   */\n  resumeRunProgress?(\n    incoming: IncomingMessage,\n    ref: PlatformRunProgressRef,\n  ): Promise<PlatformRunProgress | null>;\n\n  /**\n   * Send a proactive outbound message to a platform destination. Adapters that\n   * only support direct replies can omit this.\n   */\n  sendMessageToTarget?(\n    message: OutgoingMessage,\n    target: OutboundTarget,\n  ): Promise<void>;\n\n  /**\n   * Format plain agent response text into a platform-appropriate message.\n   * Handles markdown conversion, message splitting for length limits, etc.\n   *\n   * `opts.threadDeepLinkUrl`, when present, is a URL back to the originating\n   * thread in the dispatch UI. Adapters that support rich blocks should\n   * render this as a button (Slack); adapters that don't may inline it as a\n   * link or simply omit it.\n   */\n  formatAgentResponse(\n    text: string,\n    opts?: { threadDeepLinkUrl?: string },\n  ): OutgoingMessage;\n\n  /** Return current connection/configuration status for the settings UI. */\n  getStatus(baseUrl?: string): Promise<IntegrationStatus>;\n}\n\nexport function assertPlatformCapability(\n  adapter: PlatformAdapter,\n  capability: keyof PlatformAdapterCapabilities,\n): void {\n  if (adapter.capabilities?.[capability] !== true) {\n    throw new UnsupportedPlatformCapabilityError(adapter.platform, capability);\n  }\n}\n\n/**\n * Options for the integrations plugin.\n */\nexport interface IntegrationsPluginOptions {\n  /** App identifier used by call-agent to prevent self-calls (e.g. \"dispatch\"). */\n  appId?: string;\n  /** Platform adapters to enable. Default: all built-in adapters with configured env keys. */\n  adapters?: PlatformAdapter[];\n  /** System prompt for the agent (same as agent-chat). Inherited from agent-chat plugin if not set. */\n  systemPrompt?: string;\n  /** Actions registry (same as agent-chat). */\n  actions?: Record<string, import(\"../agent/production-agent.js\").ActionEntry>;\n  /** Model to use. Defaults to the resolved engine's default model. */\n  model?: string;\n  /** Anthropic API key. Falls back to ANTHROPIC_API_KEY env var. */\n  apiKey?: string;\n  /** Agent engine to use. Defaults to the same engine resolver as web chat. */\n  engine?:\n    | import(\"../agent/engine/types.js\").AgentEngine\n    | string\n    | {\n        name: string;\n        config: Record<string, unknown>;\n      };\n  /**\n   * Resolve which owner should receive personal resource context and own the\n   * created chat thread for an incoming platform message.\n   */\n  resolveOwner?: (incoming: IncomingMessage) => string | Promise<string>;\n  /**\n   * Resolve the durable execution principal for an inbound provider message.\n   * Shared channels should use a service principal; DMs may use a verified\n   * linked user. When present this supersedes `resolveOwner`.\n   */\n  resolveExecutionContext?: (\n    incoming: IncomingMessage,\n  ) => IntegrationExecutionContext | Promise<IntegrationExecutionContext>;\n  /**\n   * Optional preprocessor for inbound platform messages. Can intercept special\n   * commands (such as `/link`) before the agent loop runs.\n   */\n  beforeProcess?: (\n    incoming: IncomingMessage,\n    adapter: PlatformAdapter,\n  ) => Promise<\n    | {\n        handled: true;\n        responseText?: string;\n      }\n    | { handled: false }\n  >;\n}\n\nexport interface IntegrationExecutionContext {\n  ownerEmail: string;\n  orgId: string | null;\n  principalType: \"user\" | \"service\";\n  installationId?: string;\n  scopeId?: string;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/integrations/types.ts"],"names":[],"mappings":"AA8NA,MAAM,OAAO,kCAAmC,SAAQ,KAAK;IAIhD,QAAQ;IACR,UAAU;IAJZ,IAAI,GAAG,iCAAiC,CAAC;IAElD,YACW,QAAgB,EAChB,UAA6C;QAEtD,KAAK,CAAC,YAAY,QAAQ,qBAAqB,UAAU,EAAE,CAAC,CAAC;wBAHpD,QAAQ;0BACR,UAAU;QAGnB,IAAI,CAAC,IAAI,GAAG,oCAAoC,CAAC;IACnD,CAAC;CACF;AAkKD,MAAM,UAAU,wBAAwB,CACtC,OAAwB,EACxB,UAA6C;IAE7C,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,IAAI,kCAAkC,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC","sourcesContent":["import type { H3Event } from \"h3\";\n\nimport type { AgentChatEvent } from \"../agent/types.js\";\nimport type { EnvKeyConfig } from \"../server/create-server.js\";\n\nexport type IntegrationConversationType =\n  | \"channel\"\n  | \"private_channel\"\n  | \"dm\"\n  | \"group_dm\"\n  | \"unknown\";\n\nexport type IntegrationTriggerKind = \"mention\" | \"dm\" | \"thread_reply\";\n\nexport interface IntegrationActorTrust {\n  memberType: \"owner\" | \"admin\" | \"member\" | \"guest\" | \"external\" | \"unknown\";\n  verified: boolean;\n}\n\nexport interface IntegrationContextMessage {\n  senderId?: string;\n  senderName?: string;\n  text: string;\n  timestamp: number;\n  sourceUrl?: string;\n  reactions?: Array<{ name: string; count: number }>;\n  files?: IntegrationFileReference[];\n}\n\nexport interface IntegrationFileReference {\n  id: string;\n  name?: string;\n  mimetype?: string;\n  size?: number;\n  permalink?: string;\n  downloadUrl?: string;\n}\n\n/**\n * Normalized incoming message from any messaging platform.\n */\nexport interface IncomingMessage {\n  /** Platform identifier (e.g., \"slack\", \"telegram\", \"whatsapp\") */\n  platform: string;\n  /** Platform-specific thread/conversation identifier */\n  externalThreadId: string;\n  /** Message text content */\n  text: string;\n  /** Display name of the sender */\n  senderName?: string;\n  /** Verified sender email, when the platform can provide one */\n  senderEmail?: string;\n  /** Platform-specific sender ID */\n  senderId?: string;\n  /** How this message intentionally invoked an agent. */\n  triggerKind?: IntegrationTriggerKind;\n  /** Normalized provider conversation type for policy evaluation. */\n  conversationType?: IntegrationConversationType;\n  /** Provider tenant/workspace identifier. */\n  tenantId?: string;\n  /** Authorized integration scope resolved before execution. */\n  integrationScopeId?: string;\n  /** Normalized actor trust; unknown/unverified callers fail closed. */\n  actorTrust?: IntegrationActorTrust;\n  /** Bounded provider-native conversation context hydrated at run time. */\n  contextMessages?: IntegrationContextMessage[];\n  /** Provider file references only. Raw file bodies never belong here. */\n  files?: IntegrationFileReference[];\n  /** Server-verified approval grants carried by an interaction continuation. */\n  approvedToolCalls?: string[];\n  /**\n   * Whether the platform cryptographically authenticated that the message\n   * genuinely came from the claimed sender (e.g. inbound email that passed\n   * DKIM, or an aligned SPF pass, for the From domain). Defaults to\n   * undefined/false for platforms that don't provide sender authentication.\n   *\n   * Owner-resolution paths that grant a real user's identity/credentials\n   * MUST treat a missing/false value as \"unverified\" and fail closed —\n   * never derive a privileged acting identity from an unverified sender.\n   */\n  senderVerified?: boolean;\n  /** Raw platform-specific context needed for routing responses */\n  platformContext: Record<string, unknown>;\n  /**\n   * Short-lived delivery context needed only while the queued task is active.\n   * Secrets such as Discord interaction tokens belong here, never in\n   * `platformContext`, thread mappings, logs, or agent-visible context.\n   */\n  responseContext?: Record<string, unknown>;\n  /** Provider-native thread/topic reference, when one exists. */\n  threadRef?: string;\n  /**\n   * Canonical provider URL for the originating message thread, when the\n   * provider can resolve one. This is safe agent-visible provenance (not a\n   * credential) and should be preserved across A2A delegation so created\n   * artifacts can link back to their request source.\n   */\n  sourceUrl?: string;\n  /**\n   * Trusted app-side routing guidance added after provider parsing. Adapters\n   * should not copy this from user-controlled webhook payload fields.\n   */\n  routingHint?: {\n    targetAgent?: string;\n    instruction: string;\n  };\n  /**\n   * Trusted app-side note about the caller's identity/visibility tier, set\n   * after execution-context resolution (e.g. an anonymous org-scoped Slack\n   * member). Surfaced to the agent as integration context. Adapters must not\n   * copy this from user-controlled webhook payload fields.\n   */\n  identityNote?: string;\n  /** Provider-native message/activity reference for contextual replies. */\n  replyRef?: string;\n  /** Message timestamp (epoch ms) */\n  timestamp: number;\n}\n\n/**\n * Outgoing message to send back to a messaging platform.\n */\nexport interface OutgoingMessage {\n  /** Text content of the response */\n  text: string;\n  /** Platform-specific payload (e.g., Slack blocks, Telegram parse_mode) */\n  platformContext: Record<string, unknown>;\n}\n\n/**\n * Proactive outbound message target for a platform.\n * Used when the agent needs to send to a saved destination instead of replying\n * to the current inbound thread.\n */\nexport interface OutboundTarget {\n  /** Canonical platform-specific destination id (channel, chat, thread, etc.) */\n  destination: string;\n  /** Optional thread reference when the destination supports threading */\n  threadRef?: string | null;\n  /** Optional fallback display label */\n  label?: string;\n  /** Provider tenant/workspace used to select an installation credential. */\n  tenantId?: string;\n  /** Managed installation id when the caller already resolved it. */\n  installationId?: string;\n}\n\n/**\n * Connection status for a platform integration.\n */\nexport interface IntegrationStatus {\n  platform: string;\n  /** Human-readable label (e.g., \"Slack\", \"Telegram\") */\n  label: string;\n  /** Whether the integration is explicitly enabled */\n  enabled: boolean;\n  /** Whether all required credentials are configured */\n  configured: boolean;\n  /** Platform-specific details (workspace name, bot username, etc.) */\n  details?: Record<string, unknown>;\n  /** Error message if something is wrong */\n  error?: string;\n  /** The webhook URL that should be configured in the platform */\n  webhookUrl?: string;\n  /** The full list of env keys (required + optional) the adapter recognizes,\n   *  including UI hints. Surfaced on the integrations status endpoint so the\n   *  frontend can render fields without hard-coding them per platform. */\n  requiredEnvKeys?: import(\"../server/create-server.js\").EnvKeyConfig[];\n}\n\nexport interface PlatformAdapterCapabilities {\n  /** The adapter can deliver a response to the current inbound event. */\n  replyText: boolean;\n  /** The adapter can send without an active inbound event. */\n  proactiveMessages: boolean;\n  /** The adapter preserves a provider-native thread or topic reference. */\n  nativeThreads: boolean;\n  /** The adapter can quote/reply to a specific inbound message. */\n  contextualReplies: boolean;\n  /** The provider requires an immediate deferred webhook acknowledgement. */\n  deferredWebhookResponse: boolean;\n  /** The adapter only receives explicit interactions, not ordinary messages. */\n  interactionOnly?: boolean;\n  /** The adapter can hydrate bounded native thread/file/reaction context. */\n  nativeContextHydration?: boolean;\n  /** The adapter can surface live agent progress in the provider UI. */\n  liveRunProgress?: boolean;\n}\n\nexport interface PlatformRunProgress {\n  /**\n   * Opaque, provider-owned reference for resuming this progress surface from a\n   * durable continuation. It deliberately contains no user content,\n   * credentials, or provider payload.\n   */\n  ref?: PlatformRunProgressRef;\n  /** Receive normalized agent events. Implementations should throttle writes. */\n  onEvent(event: AgentChatEvent): Promise<void> | void;\n  /** Finalize the provider-native progress surface with the answer. */\n  complete(message: OutgoingMessage): Promise<void>;\n  /** Mark the provider-native surface failed and leave a retryable explanation. */\n  fail?(message: string): Promise<void>;\n}\n\n/**\n * Safe, minimal reference to a provider-native run-progress surface.\n *\n * The field values are opaque to the framework. Adapters may use `kind` to\n * distinguish their own resume strategy and `streamTs` to identify the\n * provider-side stream. No incoming message text, platform payload, or\n * credential belongs here.\n */\nexport interface PlatformRunProgressRef {\n  kind: string;\n  streamTs: string;\n}\n\nexport interface ImmediateWebhookResponse {\n  status: number;\n  body: unknown;\n}\n\nexport class UnsupportedPlatformCapabilityError extends Error {\n  readonly code = \"UNSUPPORTED_PLATFORM_CAPABILITY\";\n\n  constructor(\n    readonly platform: string,\n    readonly capability: keyof PlatformAdapterCapabilities,\n  ) {\n    super(`Platform ${platform} does not support ${capability}`);\n    this.name = \"UnsupportedPlatformCapabilityError\";\n  }\n}\n\n/**\n * Platform adapter interface — implement this for each messaging platform.\n *\n * Each adapter handles the platform-specific concerns:\n * - Webhook verification (HMAC signatures, challenge responses)\n * - Message parsing (platform events → normalized IncomingMessage)\n * - Response formatting (agent text → platform-specific format)\n * - Response delivery (POST back to platform API)\n */\nexport interface PlatformAdapter {\n  /** Unique platform identifier */\n  readonly platform: string;\n  /** Human-readable label */\n  readonly label: string;\n  /** Explicit runtime behavior. Missing fields are treated as unsupported. */\n  readonly capabilities?: Partial<PlatformAdapterCapabilities>;\n\n  /** Env keys this adapter needs (tokens, secrets, etc.) */\n  getRequiredEnvKeys(): EnvKeyConfig[];\n\n  /**\n   * Handle platform-specific verification challenges.\n   * For example, Slack sends a `url_verification` event when setting up.\n   * Return `{ handled: true, response }` to short-circuit the webhook handler.\n   */\n  handleVerification(event: H3Event): Promise<{\n    handled: boolean;\n    response?: unknown;\n  }>;\n\n  /**\n   * Validate the webhook request signature.\n   * Returns true if the request is authentic.\n   */\n  verifyWebhook(event: H3Event): Promise<boolean>;\n\n  /**\n   * Parse the webhook payload into a normalized IncomingMessage.\n   * Return null to silently ignore the event (bot messages, edits, etc.).\n   */\n  parseIncomingMessage(event: H3Event): Promise<IncomingMessage | null>;\n\n  /**\n   * Hydrate bounded provider-native context after durable enqueue, outside the\n   * provider acknowledgement budget. Implementations must return references,\n   * metadata, and text only — never persist file bodies or credentials.\n   */\n  hydrateIncomingMessage?(incoming: IncomingMessage): Promise<IncomingMessage>;\n\n  /**\n   * Hydrate only verified sender identity before execution-context selection.\n   * This runs on the provider acknowledgement path and must avoid fetching\n   * conversation history or file bodies.\n   */\n  hydrateIncomingIdentity?(incoming: IncomingMessage): Promise<IncomingMessage>;\n\n  /**\n   * Provider-specific response returned only after a message is verified and\n   * durably enqueued. Discord uses this to return a type-5 deferred response\n   * within its three-second interaction deadline.\n   */\n  getImmediateWebhookResponse?(\n    incoming: IncomingMessage,\n  ): ImmediateWebhookResponse | null;\n\n  /**\n   * Return pre-canonical thread ids used by older adapter versions. The\n   * integration handler checks these only when the canonical mapping is\n   * missing, then aliases a match to the canonical id without forking history.\n   */\n  getLegacyExternalThreadIds?(incoming: IncomingMessage): string[];\n\n  /**\n   * Send the agent's response back to the messaging platform.\n   *\n   * If `opts.placeholderRef` is provided (returned earlier by\n   * `postProcessingPlaceholder`), adapters that support in-place edits should\n   * update that placeholder message rather than posting a new one. Adapters\n   * without an \"update message\" API can ignore the ref and post fresh.\n   */\n  sendResponse(\n    message: OutgoingMessage,\n    context: IncomingMessage,\n    opts?: { placeholderRef?: string },\n  ): Promise<void>;\n\n  /**\n   * Send a short best-effort system notice to the conversation the incoming\n   * message arrived on (polite identity declines, one-time access guidance).\n   * Bypasses agent formatting. When `dedupeKey` is provided, the adapter may\n   * drop the notice if the same key was sent recently. Callers must treat\n   * failures as non-fatal.\n   */\n  sendSystemNotice?(\n    incoming: IncomingMessage,\n    text: string,\n    opts?: {\n      dedupeKey?: string;\n      /** Dedupe window for `dedupeKey`. Adapters pick a default when omitted. */\n      dedupeTtlMs?: number;\n    },\n  ): Promise<void>;\n\n  /**\n   * Optionally post a \"working on it…\" placeholder message immediately when a\n   * webhook arrives, before the agent loop runs. Adapters that support\n   * in-place message edits (Slack via `chat.update`, etc.) return an opaque\n   * `placeholderRef` that the webhook flow threads through to `sendResponse`\n   * so the same message is updated with the final answer once ready.\n   *\n   * Adapters without edit support should leave this undefined; the webhook\n   * handler will skip the placeholder step entirely.\n   */\n  postProcessingPlaceholder?(\n    incoming: IncomingMessage,\n  ): Promise<{ placeholderRef: string } | null>;\n\n  /** Start a provider-native progress/streaming surface for an agent run. */\n  startRunProgress?(\n    incoming: IncomingMessage,\n  ): Promise<PlatformRunProgress | null>;\n\n  /**\n   * Reattach a durable continuation to a provider-native progress surface\n   * previously started by this adapter. Adapters that cannot resume a native\n   * surface should omit this and the continuation will use its normal reply\n   * path instead.\n   */\n  resumeRunProgress?(\n    incoming: IncomingMessage,\n    ref: PlatformRunProgressRef,\n  ): Promise<PlatformRunProgress | null>;\n\n  /**\n   * Send a proactive outbound message to a platform destination. Adapters that\n   * only support direct replies can omit this.\n   */\n  sendMessageToTarget?(\n    message: OutgoingMessage,\n    target: OutboundTarget,\n  ): Promise<void>;\n\n  /**\n   * Format plain agent response text into a platform-appropriate message.\n   * Handles markdown conversion, message splitting for length limits, etc.\n   *\n   * `opts.threadDeepLinkUrl`, when present, is a URL back to the originating\n   * thread in the dispatch UI. Adapters that support rich blocks should\n   * render this as a button (Slack); adapters that don't may inline it as a\n   * link or simply omit it.\n   */\n  formatAgentResponse(\n    text: string,\n    opts?: { threadDeepLinkUrl?: string },\n  ): OutgoingMessage;\n\n  /** Return current connection/configuration status for the settings UI. */\n  getStatus(baseUrl?: string): Promise<IntegrationStatus>;\n}\n\nexport function assertPlatformCapability(\n  adapter: PlatformAdapter,\n  capability: keyof PlatformAdapterCapabilities,\n): void {\n  if (adapter.capabilities?.[capability] !== true) {\n    throw new UnsupportedPlatformCapabilityError(adapter.platform, capability);\n  }\n}\n\n/**\n * Options for the integrations plugin.\n */\nexport interface IntegrationsPluginOptions {\n  /** App identifier used by call-agent to prevent self-calls (e.g. \"dispatch\"). */\n  appId?: string;\n  /** Platform adapters to enable. Default: all built-in adapters with configured env keys. */\n  adapters?: PlatformAdapter[];\n  /** System prompt for the agent (same as agent-chat). Inherited from agent-chat plugin if not set. */\n  systemPrompt?: string;\n  /** Actions registry (same as agent-chat). */\n  actions?: Record<string, import(\"../agent/production-agent.js\").ActionEntry>;\n  /** Model to use. Defaults to the resolved engine's default model. */\n  model?: string;\n  /** Anthropic API key. Falls back to ANTHROPIC_API_KEY env var. */\n  apiKey?: string;\n  /** Agent engine to use. Defaults to the same engine resolver as web chat. */\n  engine?:\n    | import(\"../agent/engine/types.js\").AgentEngine\n    | string\n    | {\n        name: string;\n        config: Record<string, unknown>;\n      };\n  /**\n   * Resolve which owner should receive personal resource context and own the\n   * created chat thread for an incoming platform message.\n   */\n  resolveOwner?: (incoming: IncomingMessage) => string | Promise<string>;\n  /**\n   * Resolve the durable execution principal for an inbound provider message.\n   * Shared channels should use a service principal; DMs may use a verified\n   * linked user. When present this supersedes `resolveOwner`.\n   */\n  resolveExecutionContext?: (\n    incoming: IncomingMessage,\n  ) => IntegrationExecutionContext | Promise<IntegrationExecutionContext>;\n  /**\n   * Optional preprocessor for inbound platform messages. Can intercept special\n   * commands (such as `/link`) before the agent loop runs.\n   */\n  beforeProcess?: (\n    incoming: IncomingMessage,\n    adapter: PlatformAdapter,\n  ) => Promise<\n    | {\n        handled: true;\n        responseText?: string;\n      }\n    | { handled: false }\n  >;\n}\n\nexport interface IntegrationExecutionContext {\n  ownerEmail: string;\n  orgId: string | null;\n  principalType: \"user\" | \"service\";\n  installationId?: string;\n  scopeId?: string;\n  /**\n   * True when a hydrated full workspace member could not be matched to an\n   * organization member and runs with the anonymous org-scoped service\n   * principal (org-wide visibility only, nothing user-private).\n   */\n  anonymousMember?: boolean;\n}\n"]}

package/dist/integrations/webhook-handler.js

@@ -514,6 +514,7 @@ async function processIncomingMessage(incoming, options, opts = {}) {
         incoming.senderName ? `Sender name: ${incoming.senderName}` : null,
         incoming.senderEmail ? `Sender email: ${incoming.senderEmail}` : null,
         incoming.senderId ? `Sender ID: ${incoming.senderId}` : null,
+        incoming.identityNote ? `Caller identity: ${incoming.identityNote}` : null,
         incoming.sourceUrl ? `Source thread: ${incoming.sourceUrl}` : null,
         incoming.routingHint?.targetAgent
             ? `Required target agent: ${incoming.routingHint.targetAgent}`