@agentconnect.md/daemon 1.0.0-rc.259 → 1.0.0-rc.260

package/dist/{run-foreground-FYqgRmz9.js → run-foreground-BqNCGDXc.js}

@@ -3,9 +3,9 @@ import { n as require_ms, t as require_src$3 } from "./src-DDtlVutj.js";
 import { n as init_esm_shims, t as __dirname } from "./esm-shims-DxGcm4Hw.js";
 import { t as DAEMON_VERSION } from "./version-DGaRXjBK.js";
 import { C as _coercedNumber, T as NEVER, a as array, d as literal, f as looseObject, i as any, m as object, o as boolean, p as number$1, t as ZodNumber, v as string, x as url$4 } from "./schemas-CQkO9hC5.js";
-import { _ as decodeEnvelope, a as agentChildEnv, c as persistRelays, d as normalizeGitUrl, f as RELAY_DAEMON_SUBPROTOCOL, g as buildEnvelope, h as decodeRelayDaemonFrame, i as selectAgent, m as buildRelayDaemonFrame, n as findAgentFiles, o as loadConfig, p as RELAY_DAEMON_WS_PATH, r as loadAgents, s as persistDaemonId, v as encode, x as RESERVED_MCP_SERVER_NAME, y as MAX_FRAME_BYTES } from "./load-agents-DspcHKeP.js";
+import { C as ZodIssueCode, S as RESERVED_MCP_SERVER_NAME, _ as buildEnvelope, a as agentChildEnv, b as MAX_FRAME_BYTES, c as persistRelays, d as normalizeGitUrl, f as RELAY_DAEMON_SUBPROTOCOL, g as SHARED_CONFIG_ACTION_ID, h as decodeRelayDaemonFrame, i as selectAgent, m as buildRelayDaemonFrame, n as findAgentFiles, o as loadConfig, p as RELAY_DAEMON_WS_PATH, r as loadAgents, s as persistDaemonId, v as decodeEnvelope, y as encode } from "./load-agents-CW9Q6eYo.js";
 import { l as resolveRoot, o as mcpSocketPath, u as statePath } from "./paths-DEcUO8lC.js";
-import { S as resolveRuntimes, _ as writeMemoryFile, a as initGitInjection, b as cachedRuntimeNames, c as simpleGit, d as memoryProviderFor, f as MemoryConflictError, g as resolveInMemoryDir, h as listMemory, i as prepareWorkspace, l as createMemoryProvider, m as MemoryTooLargeError, n as installedRuntimes, o as probeGitVersion, p as MemoryPathError, r as prefetchWorkspace, s as sessionGitEnv, t as AcpHost, u as memoryKindOf, v as MEMORY_TOOL_NAMES, x as cachedRuntimeVersions, y as toolsForIntegrations } from "./acp-host-hnOn2UR9.js";
+import { S as resolveRuntimes, _ as writeMemoryFile, a as initGitInjection, b as cachedRuntimeNames, c as simpleGit, d as memoryProviderFor, f as MemoryConflictError, g as resolveInMemoryDir, h as listMemory, i as prepareWorkspace, l as createMemoryProvider, m as MemoryTooLargeError, n as installedRuntimes, o as probeGitVersion, p as MemoryPathError, r as prefetchWorkspace, s as sessionGitEnv, t as AcpHost, u as memoryKindOf, v as MEMORY_TOOL_NAMES, x as cachedRuntimeVersions, y as toolsForIntegrations } from "./acp-host-DRbb-vvg.js";
 import { i as GitCredentialCache, n as gitcredSocketPath, r as writeGitcredShim, t as GitCredServer } from "./gitcred-server-Dcsq6QJe.js";
 import { B as ToolListChangedNotificationSchema, D as ListPromptsResultSchema, E as ListChangedOptionsBaseSchema, F as PromptListChangedNotificationSchema, G as isZ4Schema, H as isJSONRPCRequest, I as ReadResourceResultSchema, J as encodeFrame, K as safeParse, L as ResourceListChangedNotificationSchema, M as ListToolsResultSchema, O as ListResourceTemplatesResultSchema, P as McpError, R as SUPPORTED_PROTOCOL_VERSIONS, S as InitializeResultSchema, T as LATEST_PROTOCOL_VERSION, U as isJSONRPCResultResponse, V as isInitializedNotification, W as getObjectShape, _ as ElicitResultSchema, a as AjvJsonSchemaValidator, b as GetPromptResultSchema, c as mergeCapabilities, d as CompleteResultSchema, f as CreateMessageRequestSchema, g as ElicitRequestSchema, h as CreateTaskResultSchema, i as assertToolsCallTaskCapability, k as ListResourcesResultSchema, m as CreateMessageResultWithToolsSchema, n as serializeMessage, o as require_fast_deep_equal, p as CreateMessageResultSchema, q as decodeFrames, r as assertClientRequestTaskCapability, s as Protocol, t as ReadBuffer, u as CallToolResultSchema, v as EmptyResultSchema, w as JSONRPCMessageSchema, y as ErrorCode } from "./stdio-DnS8WcXi.js";
 import { URL as URL$1 } from "url";
@@ -25,25 +25,6 @@ import net from "node:net";
 import { lstat, open, readdir, realpath, stat as stat$1 } from "node:fs/promises";
 import { DatabaseSync } from "node:sqlite";
 import assert from "assert";
-//#region ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/compat.js
-/** @deprecated Use the raw string literal codes instead, e.g. "invalid_type". */
-const ZodIssueCode = {
-	invalid_type: "invalid_type",
-	too_big: "too_big",
-	too_small: "too_small",
-	invalid_format: "invalid_format",
-	not_multiple_of: "not_multiple_of",
-	unrecognized_keys: "unrecognized_keys",
-	invalid_union: "invalid_union",
-	invalid_key: "invalid_key",
-	invalid_element: "invalid_element",
-	invalid_value: "invalid_value",
-	custom: "custom"
-};
-/** @deprecated Do not use. Stub definition, only included for zod-to-json-schema compatibility. */
-var ZodFirstPartyTypeKind;
-ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
-//#endregion
 //#region ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/coerce.js
 function number(params) {
 	return _coercedNumber(ZodNumber, params);
@@ -67116,6 +67097,7 @@ var require_dist$9 = /* @__PURE__ */ __commonJSMin(((exports) => {
 }));
 //#endregion
 //#region src/slack/normalize.ts
+var import_dist$1 = require_dist$13();
 var import_dist = /* @__PURE__ */ __toESM(require_dist$9(), 1);
 const MENTION_RE$1 = /<@([A-Z0-9]+)>/g;
 /** Map a Slack file element to a NormalizedMessage Attachment, dropping any
@@ -67311,6 +67293,32 @@ function attributionBlocks(webAppUrl) {
 		}]
 	};
 }
+/** The shared-bot footer (§10.1): "sent by <agent_name>" (linking to the agent in the
+*  console) with a right-aligned ⚙ Config button that opens the per-channel
+*  default-agent modal. A `section` (not `context`) because only sections take a
+*  button accessory — the click lands on the RELAY (it owns Socket Mode), which reads
+*  {@link SHARED_CONFIG_ACTION_ID}. */
+function sharedFooterBlocks(agentName, agentUrl) {
+	return {
+		text: `sent by ${agentName}`,
+		blocks: [{
+			type: "section",
+			text: {
+				type: "mrkdwn",
+				text: `sent by <${agentUrl}|${agentName}>`
+			},
+			accessory: {
+				type: "button",
+				text: {
+					type: "plain_text",
+					text: "👤",
+					emoji: true
+				},
+				action_id: SHARED_CONFIG_ACTION_ID
+			}
+		}]
+	};
+}
 /** Pull human-readable output text out of an ACP tool_call/_update. Prefers the `content[]`
 *  text blocks (the tool's reported output); falls back to a string `rawOutput`. diff /
 *  terminal blocks and non-string rawOutput are skipped — they have no compact inline text. */
@@ -67779,12 +67787,15 @@ var OutputConverger = class {
 	* — in medium/high — append a footer linking to the Web App session detail. The
 	* link is omitted entirely when none is configured (no `local://` placeholder).
 	*/
-	onFinal(link, webAppUrl) {
+	onFinal(link, webAppUrl, shared) {
 		const clear = {
 			kind: "set-status",
 			text: ""
 		};
-		const attribution = webAppUrl ? [{
+		const attribution = shared ? [{
+			kind: "attribution",
+			...sharedFooterBlocks(shared.agentName, shared.agentUrl)
+		}] : webAppUrl ? [{
 			kind: "attribution",
 			...attributionBlocks(webAppUrl)
 		}] : [];
@@ -67793,16 +67804,10 @@ var OutputConverger = class {
 			clear,
 			...attribution
 		];
-		const reasoning = this.drainReasoning();
-		const footer = link ? [{
-			kind: "notice",
-			text: `:white_check_mark: done — [details](${link})`
-		}] : [];
 		return [
-			...reasoning,
+			...this.drainReasoning(),
 			...this.flush(),
 			clear,
-			...footer,
 			...attribution
 		];
 	}
@@ -67810,11 +67815,16 @@ var OutputConverger = class {
 //#endregion
 //#region src/slack/connection.ts
 const { App, LogLevel } = import_dist.default;
-/** §6.1: one Slack Socket Mode connection per unique appToken. */
+/** §6.1: one Slack Socket Mode connection per unique appToken.
+*  Shared-mode integrations are SKIPPED here — their inbound lives on a relay, so
+*  the daemon opens no socket for them (it reaches them send-only via RelayClient;
+*  see shared-bot-relay.md §11). They carry no appToken, so there is nothing to
+*  consolidate on. */
 function consolidate(agents) {
 	const groups = /* @__PURE__ */ new Map();
 	for (const a of agents) for (const int of a.integrations) {
 		if (int.platform !== "slack") continue;
+		if (int.slack.mode === "shared" || !int.slack.appToken) continue;
 		const k = int.slack.appToken;
 		const g = groups.get(k) ?? {
 			appToken: k,
@@ -67829,6 +67839,27 @@ function consolidate(agents) {
 	}
 	return groups;
 }
+/** Group SHARED-mode Slack integrations by xoxb (one send-only client per bot
+*  token). These have no appToken (the relay owns inbound), so they can't be keyed
+*  by appToken like {@link consolidate} — the bot token is the identity. */
+function consolidateShared(agents) {
+	const groups = /* @__PURE__ */ new Map();
+	for (const a of agents) for (const int of a.integrations) {
+		if (int.platform !== "slack" || int.slack.mode !== "shared") continue;
+		const k = int.slack.botToken;
+		const g = groups.get(k) ?? {
+			appToken: "",
+			botToken: k,
+			integrations: []
+		};
+		g.integrations.push({
+			agentId: a.id,
+			integrationId: int.id
+		});
+		groups.set(k, g);
+	}
+	return groups;
+}
 /** Cap on members enriched per `listChannelMembers` call (bounds users.info fan-out). */
 const MEMBER_ENRICH_CAP = 50;
 /**
@@ -67846,6 +67877,25 @@ function markdownBlock(text) {
 		}]
 	};
 }
+/** Build the send-only {@link AppLike}: a real Slack `WebClient` (xoxb) for the send
+*  surface + inert event/start/stop members (shared-bot-relay.md §11). Same proxy +
+*  timeout/retry tuning as the socket-mode factory. */
+function sendOnlyApp(botToken) {
+	const proxyUrl = process.env.HTTPS_PROXY ?? process.env.HTTP_PROXY;
+	const agent = proxyUrl ? new HttpsProxyAgent(proxyUrl) : void 0;
+	return {
+		message: () => {},
+		event: () => {},
+		action: () => {},
+		client: new import_dist$1.WebClient(botToken, {
+			...agent ? { agent } : {},
+			timeout: 3e4,
+			retryConfig: { retries: 2 }
+		}),
+		start: async () => {},
+		stop: async () => {}
+	};
+}
 var SlackConnection = class {
 	deps;
 	app;
@@ -67876,7 +67926,7 @@ var SlackConnection = class {
 		this.deps = deps;
 		this.appToken = deps.group.appToken;
 		this.botToken = deps.group.botToken;
-		this.app = factory({
+		this.app = deps.sendOnly ? sendOnlyApp(deps.group.botToken) : factory({
 			token: deps.group.botToken,
 			appToken: deps.group.appToken
 		});
@@ -67890,6 +67940,10 @@ var SlackConnection = class {
 		this.botId = auth.bot_id ?? "";
 		this.workspaceUrl = auth.url ?? "";
 		log?.debug(`slack: auth.test ok → bot user ${this.botUserId} (bot_id ${this.botId || "n/a"})`);
+		if (this.deps.sendOnly) {
+			log?.info("slack: send-only connection ready (shared bot — inbound via relay)");
+			return;
+		}
 		const deliver = (ev, kind) => {
 			const msg = normalizeSlackEvent(this.withAssistantThread(ev), { traceId: this.deps.newTraceId() });
 			log?.debug(`slack: inbound ${kind} ch=${msg.channel} thread=${msg.thread ?? "none"} user=${msg.sender.id} isBot=${msg.sender.isBot} isDm=${msg.isDm} mentions=[${msg.mentionedBots.join(",")}] text=${JSON.stringify(msg.text.slice(0, 80))}`);
@@ -196923,8 +196977,9 @@ var RelayClient = class {
 		}
 		this.deps.log.debug(`relay(${this.relayId}): ignoring ${frame.type}`);
 	}
-	/** An inbound rd/msg: dispatch it, reply `rd/ack`; a webchat op additionally
-	*  streams `rd/chat` back over this socket (hooks have no reply stream). */
+	/** An inbound rd/msg: dispatch it, reply `rd/ack`; only a webchat op streams
+	*  `rd/chat` back over this socket. A shared-bot `im` replies out-of-band via the
+	*  daemon's own Slack send, and a hook fire has no reply stream — both get a noop. */
 	handleMsg(reqId, msg) {
 		const chat = msg.source === "webchat" ? (event) => this.sendChat(msg.chatId, event) : () => void 0;
 		const ack = this.deps.onRelayMsg(msg, chat);
@@ -197741,8 +197796,10 @@ function toIntegration(spec) {
 		id: spec.integrationId,
 		platform: "slack",
 		slack: {
+			mode: spec.slack.mode,
 			botToken: spec.slack.botToken,
-			appToken: spec.slack.appToken,
+			...spec.slack.appToken ? { appToken: spec.slack.appToken } : {},
+			...spec.slack.botUserId ? { botUserId: spec.slack.botUserId } : {},
 			allowedUserIds: spec.slack.allowedUserIds,
 			bindRules: spec.slack.bindRules
 		}
@@ -213586,6 +213643,7 @@ var Daemon = class Daemon {
 	agents = /* @__PURE__ */ new Map();
 	fileAgents = /* @__PURE__ */ new Map();
 	hosts = /* @__PURE__ */ new Map();
+	hostStartedAt = /* @__PURE__ */ new Map();
 	connections = [];
 	telegramConns = [];
 	discordConns = [];
@@ -213594,6 +213652,7 @@ var Daemon = class Daemon {
 	scheduler;
 	sessions;
 	connByIntegration = /* @__PURE__ */ new Map();
+	sharedSlackConns = /* @__PURE__ */ new Map();
 	tgConnByIntegration = /* @__PURE__ */ new Map();
 	dcConnByIntegration = /* @__PURE__ */ new Map();
 	hostStarts = /* @__PURE__ */ new Map();
@@ -213819,6 +213878,7 @@ var Daemon = class Daemon {
 				this.slackRetryTimers.set(group.appToken, timer);
 			}
 		}
+		await this.openSharedSlackConnections(agents);
 		await this.reconcileTelegramConnections();
 		await this.reconcileDiscordConnections();
 		for (const a of agents) this.scheduler.sync(a.id, a.crons);
@@ -214014,6 +214074,52 @@ var Daemon = class Daemon {
 				this.log.error(`slack: failed to open runtime socket for appToken — leaving existing sockets intact: ${formatErr(err)}`);
 			}
 		}
+		await this.openSharedSlackConnections([...this.agents.values()]);
+	}
+	/**
+	* Open (or reuse) a SEND-ONLY Slack Web-API client per shared bot token and bind
+	* it into `connByIntegration`, so replies / attachment fetches / MCP platform
+	* tools / cron anchors resolve a connection for a `mode:'shared'` integration
+	* (shared-bot-relay.md §11). No Socket Mode socket is opened — the bot's inbound
+	* arrives from the relay as `rd/msg(im)`. Idempotent: an already-open client for
+	* the same xoxb is reused; when a bot flips direct→shared its old direct socket
+	* (same botToken) is stopped so it stops competing with the relay for the single
+	* Socket Mode consumer.
+	*/
+	async openSharedSlackConnections(agents) {
+		const groups = consolidateShared(agents);
+		for (const group of groups.values()) {
+			const staleDirect = this.connections.find((c) => c.botToken === group.botToken && c.appToken !== "");
+			if (staleDirect) {
+				this.log.info(`slack: bot flipped to shared — stopping its direct socket (bot ${staleDirect.botUserId})`);
+				await staleDirect.stop().catch(() => {});
+				this.connections = this.connections.filter((c) => c !== staleDirect);
+			}
+			let conn = this.sharedSlackConns.get(group.botToken);
+			if (!conn) {
+				conn = new SlackConnection({
+					group,
+					sendOnly: true,
+					newTraceId: () => randomUUID(),
+					onMessage: () => {},
+					onStatusAction: (a) => this.handleStatusAction(a),
+					onStatusInfo: (key) => this.statusInfoForKey(key),
+					log: this.log
+				});
+				try {
+					await conn.start();
+					this.sharedSlackConns.set(group.botToken, conn);
+					this.log.info(`slack: send-only (shared) client ready as bot user ${conn.botUserId}`);
+				} catch (err) {
+					this.log.warn(`slack: shared send-only client failed — retry on next reconcile: ${formatErr(err)}`);
+					continue;
+				}
+			}
+			for (const { integrationId } of group.integrations) {
+				this.botUserIds[integrationId] = conn.botUserId;
+				this.connByIntegration.set(integrationId, conn);
+			}
+		}
 	}
 	/**
 	* Reconcile the connection-derived Telegram state (`botUserIds`,
@@ -214238,6 +214344,7 @@ var Daemon = class Daemon {
 			});
 		}
 		this.hosts.set(agentId, host);
+		this.hostStartedAt.set(agentId, this.clock.now());
 		return host;
 	}
 	/** The bare Telegram message id from a normalized `telegram:<chatId>:<messageId>`
@@ -214554,12 +214661,35 @@ var Daemon = class Daemon {
 			this.log.debug(`relay: duplicate rd/msg ${dedupKey} — replaying ack (no re-dispatch)`);
 			return prior;
 		}
-		const ack = msg.source === "hook" ? this.dispatchRelayHook(msg) : this.dispatchRelayOp(msg, chat);
+		const ack = msg.source === "webchat" ? this.dispatchRelayOp(msg, chat) : msg.source === "im" ? this.handleRelayIm(msg) : this.dispatchRelayHook(msg);
 		if (this.relayMsgAcks.size >= 2e3) this.relayMsgAcks.clear();
 		this.relayMsgAcks.set(dedupKey, ack);
 		return ack;
 	}
 	/**
+	* A shared-bot inbound (`rd/msg` `im`): the relay already arbitrated the target
+	* agent + integration, so this is the explicit-agent path — no local routing. The
+	* reply flows out-of-band through the agent's send-only Slack connection
+	* (`replyConnFor`), NOT `rd/chat` (that is webchat-only). The `rd/ack` is a plain
+	* receipt; the turn runs async.
+	*/
+	handleRelayIm(msg) {
+		if (!this.agents.get(msg.agentId)) {
+			this.log.warn(`relay: rd/msg(im) for unknown agent ${msg.agentId} — dropping`);
+			return {
+				msgId: msg.msgId,
+				accepted: false,
+				reason: "no_agent"
+			};
+		}
+		const normalized = msg.payload;
+		this.dispatch(msg.agentId, normalized, msg.integrationId).catch((err) => this.log.error(`relay im dispatch failed for agent "${msg.agentId}": ${formatErr(err)}`));
+		return {
+			msgId: msg.msgId,
+			accepted: true
+		};
+	}
+	/**
 	* Ack-verdict gate for one hook fire (`rd/msg` hook member) — the mirror of
 	* {@link dispatchWebchatTurn}'s synchronous gates: the relay's rc/run-report
 	* needs a REASONED rejection now, not a silently dropped fire-and-forget
@@ -215241,7 +215371,7 @@ var Daemon = class Daemon {
 				});
 			} else {
 				const link = this.sessionLink(sessionId);
-				const finals = conv instanceof TelegramConverger || conv instanceof DiscordConverger ? conv.onFinal(link) : conv.onFinal(link, this.webAppBase());
+				const finals = conv instanceof TelegramConverger || conv instanceof DiscordConverger ? conv.onFinal(link) : conv.onFinal(link, this.webAppBase(), this.sharedFooterFor(agentId, integrationId));
 				for (const action of finals) this.enqueueApply(p, action);
 			}
 			for (const ev of rec.onFinal()) this.recordEvent(agentId, msg.channel, statusThread, ev);
@@ -215540,6 +215670,27 @@ var Daemon = class Daemon {
 		const orgSeg = this.cpOrgSlug ? `/${encodeURIComponent(this.cpOrgSlug)}` : "";
 		return `${this.webAppBase()}${orgSeg}/sessions/${acpSessionId}`;
 	}
+	/** The console deep link to an agent: `<base>/<orgSlug>/agents/<agentId>` — the
+	*  shared-bot footer's "sent by <agent_name>" link (§10.1). Same org-seg rule as
+	*  {@link sessionLink}. */
+	agentLink(agentId) {
+		const orgSeg = this.cpOrgSlug ? `/${encodeURIComponent(this.cpOrgSlug)}` : "";
+		return `${this.webAppBase()}${orgSeg}/agents/${agentId}`;
+	}
+	/** The shared-bot footer context for a turn, or undefined when this isn't a shared
+	*  Slack channel (then the classic "sent by agentconnect.md" footer is used). A
+	*  shared integration (`slack.mode==='shared'`) means the bot's inbound rode the
+	*  relay, so the footer attributes the specific agent + offers the config button. */
+	sharedFooterFor(agentId, integrationId) {
+		if (!integrationId) return void 0;
+		const agent = this.agents.get(agentId);
+		const int = agent?.integrations.find((i) => i.id === integrationId);
+		if (!int || int.platform !== "slack" || int.slack.mode !== "shared") return void 0;
+		return {
+			agentName: agent?.name ?? agentId,
+			agentUrl: this.agentLink(agentId)
+		};
+	}
 	/** The Web App console origin (trailing slash stripped): the explicit local `webAppUrl`,
 	*  else the CP-provided origin, else the public default. Backs both the session deep link
 	*  and the per-turn "sent by agentconnect.md" attribution footer. Always resolves. */
@@ -215901,6 +216052,7 @@ var Daemon = class Daemon {
 		const host = this.hosts.get(agentId);
 		this.hosts.delete(agentId);
 		this.hostStarts.delete(agentId);
+		this.hostStartedAt.delete(agentId);
 		if (!host) return;
 		const stop = host.stop(deadlineMs).finally(() => {
 			if (this.hostStopping.get(agentId) === stop) this.hostStopping.delete(agentId);
@@ -215942,7 +216094,7 @@ var Daemon = class Daemon {
 		for (const [agentId] of [...this.hosts]) {
 			if (this.drainingAgents.has(agentId)) continue;
 			if ([...this.pending.values()].some((p) => p.agentId === agentId)) continue;
-			const last = this.store.agentLastActivityTs(agentId) ?? 0;
+			const last = Math.max(this.store.agentLastActivityTs(agentId) ?? 0, this.hostStartedAt.get(agentId) ?? 0);
 			if (now - last <= ttl) continue;
 			this.log.info(`idle: reclaiming host "${agentId}" (idle ${Math.round((now - last) / 1e3)}s) → provisioned`);
 			this.stopHost(agentId).catch((err) => this.log.error(`idle: stop host "${agentId}" failed: ${formatErr(err)}`));
@@ -216447,4 +216599,4 @@ async function runForeground(opts, deps = {}) {
 //#endregion
 export { ClientTransport as i, CP_SUBPROTOCOL as n, CP_WS_PATH as r, runForeground as t };
 
-//# sourceMappingURL=run-foreground-FYqgRmz9.js.map
+//# sourceMappingURL=run-foreground-BqNCGDXc.js.map