@agentconnect.md/daemon 1.0.0-rc.343 → 1.0.0-rc.345

package/dist/{run-foreground-BqC40mtd.js → run-foreground-BmZ1_4vI.js}

@@ -3,10 +3,10 @@ import { n as require_ms, t as require_src$3 } from "./src-DDtlVutj.js";
 import { n as init_esm_shims, t as __dirname } from "./esm-shims-DxGcm4Hw.js";
 import { t as DAEMON_VERSION } from "./version-DGaRXjBK.js";
 import { C as _coercedNumber, T as NEVER, a as array, d as literal, f as looseObject, i as any, m as object, o as boolean, p as number$1, t as ZodNumber, v as string, x as url$4 } from "./schemas-CQkO9hC5.js";
-import { _ as RESERVED_MCP_SERVER_NAME, a as RELAY_DAEMON_WS_PATH, c as SHARED_CONFIG_ACTION_ID, d as encode, f as MAX_FRAME_BYTES, h as HookReport, i as RELAY_DAEMON_SUBPROTOCOL, l as buildEnvelope, n as gitRepoLabel, o as buildRelayDaemonFrame, r as normalizeGitUrl, s as decodeRelayDaemonFrame, u as decodeEnvelope, v as ZodIssueCode } from "./dist-MrCr7fl1.js";
-import { a as agentChildEnv, c as persistRelays, i as selectAgent, n as findAgentFiles, o as loadConfig, r as loadAgents, s as persistDaemonId } from "./load-agents-BAQcjcVh.js";
+import { _ as HookReport, a as RELAY_DAEMON_WS_PATH, b as ZodIssueCode, c as SHARED_CONFIG_ACTION_ID, d as buildEnvelope, f as decodeEnvelope, i as RELAY_DAEMON_SUBPROTOCOL, l as SLACK_STATUS_ACTION, m as MAX_FRAME_BYTES, n as gitRepoLabel, o as buildRelayDaemonFrame, p as encode, r as normalizeGitUrl, s as decodeRelayDaemonFrame, u as encodeSharedSlackStatusTarget, y as RESERVED_MCP_SERVER_NAME } from "./dist-CUolJeCB.js";
+import { a as agentChildEnv, c as persistRelays, i as selectAgent, n as findAgentFiles, o as loadConfig, r as loadAgents, s as persistDaemonId } from "./load-agents-DnGX_xbK.js";
 import { l as resolveRoot, o as mcpSocketPath, u as statePath } from "./paths-DEcUO8lC.js";
-import { C as toolsForIntegrations, E as resolveRuntimes, S as MEMORY_TOOL_NAMES, T as cachedRuntimeVersions, _ as listMemory, a as prefetchWorkspace, b as ALL_TOOL_NAMES, c as probeGitVersion, d as createMemoryProvider, f as memoryKindOf, g as MemoryTooLargeError, h as MemoryPathError, i as installedRuntimes, l as sessionGitEnv, m as MemoryConflictError, n as turnFailureCode, o as prepareWorkspace, p as memoryProviderFor, r as turnFailureReason, s as initGitInjection, t as AcpHost, u as simpleGit, v as resolveInMemoryDir, w as cachedRuntimeNames, x as GITHUB_REVIEW_TOOLS, y as writeMemoryFile } from "./acp-host-rssqAAfr.js";
+import { C as toolsForIntegrations, E as resolveRuntimes, S as MEMORY_TOOL_NAMES, T as cachedRuntimeVersions, _ as listMemory, a as prefetchWorkspace, b as ALL_TOOL_NAMES, c as probeGitVersion, d as createMemoryProvider, f as memoryKindOf, g as MemoryTooLargeError, h as MemoryPathError, i as installedRuntimes, l as sessionGitEnv, m as MemoryConflictError, n as turnFailureCode, o as prepareWorkspace, p as memoryProviderFor, r as turnFailureReason, s as initGitInjection, t as AcpHost, u as simpleGit, v as resolveInMemoryDir, w as cachedRuntimeNames, x as GITHUB_REVIEW_TOOLS, y as writeMemoryFile } from "./acp-host-DRUQVPb2.js";
 import { i as GitCredentialCache, n as gitcredSocketPath, r as writeGitcredShim, t as GitCredServer } from "./gitcred-server-Bu-Svl7L.js";
 import { B as ToolListChangedNotificationSchema, D as ListPromptsResultSchema, E as ListChangedOptionsBaseSchema, F as PromptListChangedNotificationSchema, G as isZ4Schema, H as isJSONRPCRequest, I as ReadResourceResultSchema, J as encodeFrame, K as safeParse, L as ResourceListChangedNotificationSchema, M as ListToolsResultSchema, O as ListResourceTemplatesResultSchema, P as McpError, R as SUPPORTED_PROTOCOL_VERSIONS, S as InitializeResultSchema, T as LATEST_PROTOCOL_VERSION, U as isJSONRPCResultResponse, V as isInitializedNotification, W as getObjectShape, _ as ElicitResultSchema, a as AjvJsonSchemaValidator, b as GetPromptResultSchema, c as mergeCapabilities, d as CompleteResultSchema, f as CreateMessageRequestSchema, g as ElicitRequestSchema, h as CreateTaskResultSchema, i as assertToolsCallTaskCapability, k as ListResourcesResultSchema, m as CreateMessageResultWithToolsSchema, n as serializeMessage, o as require_fast_deep_equal, p as CreateMessageResultSchema, q as decodeFrames, r as assertClientRequestTaskCapability, s as Protocol, t as ReadBuffer, u as CallToolResultSchema, v as EmptyResultSchema, w as JSONRPCMessageSchema, y as ErrorCode } from "./stdio-DnS8WcXi.js";
 import { createRequire } from "node:module";
@@ -68195,7 +68195,7 @@ function attributionMrkdwn(info) {
 	const model = escapeMrkdwnLabel(info.model);
 	return `sent by <${info.botUrl}|${botName}> (${runtime} · ${model}) · <${info.sessionUrl}|open in session>`;
 }
-/** The classic per-turn footer is a compact secondary/gray Slack `context` block. */
+/** The per-turn footer is a compact secondary/gray Slack `context` block. */
 function attributionBlocks(info) {
 	return {
 		text: attributionText(info),
@@ -68208,29 +68208,6 @@ function attributionBlocks(info) {
 		}]
 	};
 }
-/** The shared-bot variant uses the same text but a `section`, because only sections take
-*  the config button accessory. The click lands on the relay (it owns Socket Mode). */
-function sharedFooterBlocks(info) {
-	return {
-		text: attributionText(info),
-		blocks: [{
-			type: "section",
-			text: {
-				type: "mrkdwn",
-				text: attributionMrkdwn(info)
-			},
-			accessory: {
-				type: "button",
-				text: {
-					type: "plain_text",
-					text: "👤",
-					emoji: true
-				},
-				action_id: SHARED_CONFIG_ACTION_ID
-			}
-		}]
-	};
-}
 /** Pull human-readable output text out of an ACP tool_call/_update. Prefers the `content[]`
 *  text blocks (the tool's reported output); falls back to a string `rawOutput`. diff /
 *  terminal blocks and non-string rawOutput are skipped — they have no compact inline text. */
@@ -68288,18 +68265,9 @@ function renderStatusBar(info) {
 	if (info.totalTokens !== void 0) parts.push(`${compactCount$2(info.totalTokens)} tok`);
 	return `:bar_chart: ${parts.length ? parts.join(" · ") : "—"}`;
 }
-/** Slack action_ids for the interactive status bar + modal (matched by the connection's
-*  handlers). Kept here so the builders and the handlers can't drift apart. */
-const STATUS_ACTION = {
-	manage: "ac_manage",
-	setModel: "ac_set_model",
-	setEffort: "ac_set_effort",
-	setPermissionMode: "ac_set_permission_mode",
-	setFast: "ac_set_fast",
-	setOutput: "ac_set_output",
-	cancel: "ac_cancel",
-	view: "ac_view"
-};
+/** Slack action_ids for the interactive status bar + modal. The protocol owns the
+*  values because a shared bot receives the same actions on the relay first. */
+const STATUS_ACTION = SLACK_STATUS_ACTION;
 /** The modal view's callback_id — used if we ever handle a submit (controls apply on
 *  interaction today, so there's no submit). */
 const STATUS_MODAL_CALLBACK = "ac_status_modal";
@@ -68486,16 +68454,47 @@ function buildElicitationResolvedCard(params, decision) {
 		}
 	}];
 }
-/** Build the compact in-thread status message as one Slack row: status text with an
-*  inline View Session URL, plus one Configure accessory button. Slack sections allow
-*  only one accessory, and mrkdwn links cannot dispatch block_actions, so Cancel stays in
-*  the Configure modal rather than becoming a non-functional inline link. */
-function buildStatusBlocks(info, sessionKey, link) {
+/** Build the compact in-thread status message. Dedicated bots retain the single
+*  Configure accessory. A shared bot needs two independent controls, so its status
+*  message uses one `actions` block: 👤 opens the relay's channel-agent picker and ⚙️
+*  opens the daemon's existing session controls. Both buttons stay on the same row. */
+function buildStatusBlocks(info, sessionKey, link, shared) {
+	const text = link ? `${renderStatusBar(info)}  ·  <${link}|View Session>` : renderStatusBar(info);
+	if (shared) return [{
+		type: "section",
+		text: {
+			type: "mrkdwn",
+			text
+		}
+	}, {
+		type: "actions",
+		elements: [{
+			type: "button",
+			action_id: SHARED_CONFIG_ACTION_ID,
+			text: {
+				type: "plain_text",
+				text: "👤",
+				emoji: true
+			},
+			accessibility_label: "Switch agent",
+			value: sessionKey
+		}, {
+			type: "button",
+			action_id: STATUS_ACTION.manage,
+			text: {
+				type: "plain_text",
+				text: "⚙️",
+				emoji: true
+			},
+			accessibility_label: "Configure agent session",
+			value: shared.sessionTarget
+		}]
+	}];
 	return [{
 		type: "section",
 		text: {
 			type: "mrkdwn",
-			text: link ? `${renderStatusBar(info)}  ·  <${link}|View Session>` : renderStatusBar(info)
+			text
 		},
 		accessory: {
 			type: "button",
@@ -68514,13 +68513,13 @@ function fmtCount(n) {
 }
 /**
 * Build the controls modal opened from Configure (a snapshot — Slack modals don't
-* stream). `private_metadata` carries the session key so the modal's `block_actions`
-* (model/effort/fast/output selects, Cancel) resolve the session. Blocks: the model /
+* stream). `private_metadata` carries either the direct session key or a shared-bot
+* routing target so the modal's `block_actions` resolve the session. Blocks: the model /
 * effort / fast / output selectors (each omitted when not applicable), a labeled usage
 * grid (context · tokens · cost · per-type breakdown), and Cancel + View-session (URL,
 * when `link`). The modal has room, so each metric gets its own labeled cell. Pure.
 */
-function buildStatusModal(info, sessionKey, link) {
+function buildStatusModal(info, sessionKey, link, privateMetadata = sessionKey) {
 	const blocks = [];
 	const models = info.models ?? [];
 	if (models.length > 0) {
@@ -68720,7 +68719,7 @@ function buildStatusModal(info, sessionKey, link) {
 	return {
 		type: "modal",
 		callback_id: STATUS_MODAL_CALLBACK,
-		private_metadata: sessionKey,
+		private_metadata: privateMetadata,
 		title: {
 			type: "plain_text",
 			text: "Session"
@@ -68881,7 +68880,7 @@ var OutputConverger = class {
 		};
 		const attribution = info ? [{
 			kind: "attribution",
-			...info.shared ? sharedFooterBlocks(info) : attributionBlocks(info)
+			...attributionBlocks(info)
 		}] : [];
 		if (this.mode === "low") return [
 			...this.flush(),
@@ -69092,16 +69091,7 @@ var SlackConnection = class {
 			const sessionKey = action.value;
 			const triggerId = body?.trigger_id;
 			if (!sessionKey || !triggerId) return;
-			const data = this.deps.onStatusInfo?.(sessionKey);
-			if (!data) return;
-			try {
-				await this.app.client.views.open({
-					trigger_id: triggerId,
-					view: buildStatusModal(data.info, sessionKey, data.link)
-				});
-			} catch (err) {
-				this.deps.log?.debug(`slack: views.open failed: ${err.message}`);
-			}
+			await this.openStatusModal(triggerId, sessionKey);
 		});
 		this.app.action(STATUS_ACTION.setModel, async ({ ack, action, body }) => {
 			await ack();
@@ -69188,6 +69178,22 @@ var SlackConnection = class {
 		await this.app.start();
 		log?.debug("slack: app.start resolved → socket established");
 	}
+	/** Open the existing per-session controls modal. Direct bots call this from their
+	*  local Socket Mode action handler; shared bots call it after the relay forwards the
+	*  click over `rd/msg(slack_action)`. `privateMetadata` stays opaque to Slack and lets the
+	*  relay route subsequent select/cancel interactions back to this daemon. */
+	async openStatusModal(triggerId, sessionKey, privateMetadata = sessionKey) {
+		const data = this.deps.onStatusInfo?.(sessionKey);
+		if (!data) return;
+		try {
+			await this.app.client.views.open({
+				trigger_id: triggerId,
+				view: buildStatusModal(data.info, sessionKey, data.link, privateMetadata)
+			});
+		} catch (err) {
+			this.deps.log?.debug(`slack: views.open failed: ${err.message}`);
+		}
+	}
 	rememberAssistantThread(ev) {
 		const channel = ev.assistant_thread?.channel_id;
 		const threadTs = ev.assistant_thread?.thread_ts;
@@ -217352,11 +217358,11 @@ var Daemon = class Daemon {
 	agentCallDeliveries = /* @__PURE__ */ new Map();
 	orchestrationDeadlines = /* @__PURE__ */ new Map();
 	/**
-	* Dispatch one inbound relay item (`rd/msg` — a webchat op or a hook fire) and
+	* Dispatch one inbound relay item (`rd/msg` — webchat, shared IM/action, or hook) and
 	* return the `rd/ack` verdict — the relay-path entry, reusing the SAME turn
 	* engine + by-key cores as the (retiring) CP path. The `chat` callback streams
 	* a webchat reply back as `rd/chat` over the relay socket the op arrived on
-	* (no-op for hooks — their outcome goes to the CP as `hook/report`).
+	* (no-op outside webchat; hook outcomes go to the CP as `hook/report`).
 	*
 	* Deduped by the relay-minted (sessionKey, msgId): the wire is at-least-once, so a
 	* retransmitted rd/msg (identical msgId) must NOT run the user's turn a second time —
@@ -217389,7 +217395,7 @@ var Daemon = class Daemon {
 			this.pendingRelayMsgAcks.set(dedupKey, task);
 			return task;
 		}
-		const ack = msg.source === "webchat" ? this.dispatchRelayOp(msg, chat) : this.handleRelayIm(msg);
+		const ack = msg.source === "webchat" ? this.dispatchRelayOp(msg, chat) : msg.source === "slack_action" ? this.handleRelaySlackAction(msg) : this.handleRelayIm(msg);
 		if (this.relayMsgAcks.size >= 2e3) this.relayMsgAcks.clear();
 		this.relayMsgAcks.set(dedupKey, ack);
 		return ack;
@@ -217442,6 +217448,97 @@ var Daemon = class Daemon {
 			accepted: true
 		};
 	}
+	/** Apply one shared-bot status interaction after the relay has validated the opaque
+	*  target against its live bot assignment. Re-check every daemon-owned boundary before
+	*  opening or mutating anything: the agent, shared Slack integration, local connection,
+	*  session owner, and (when retained) exact delivery binding must all still agree. */
+	handleRelaySlackAction(msg) {
+		const agent = this.agents.get(msg.agentId);
+		if (!agent) {
+			this.log.warn(`relay: Slack action for unknown agent ${msg.agentId} — dropping`);
+			return {
+				msgId: msg.msgId,
+				accepted: false,
+				reason: "no_agent"
+			};
+		}
+		if (!agent.integrations.find((candidate) => candidate.id === msg.integrationId && candidate.platform === "slack" && candidate.slack.mode === "shared")) {
+			this.log.warn(`relay: Slack action for non-shared integration ${msg.integrationId} on agent ${msg.agentId} — dropping`);
+			return {
+				msgId: msg.msgId,
+				accepted: false,
+				reason: "not_found"
+			};
+		}
+		const conn = this.connByIntegration.get(msg.integrationId);
+		if (!conn) {
+			this.log.warn(`relay: Slack action for unavailable integration ${msg.integrationId} — dropping`);
+			return {
+				msgId: msg.msgId,
+				accepted: false,
+				reason: "unavailable"
+			};
+		}
+		const rec = this.store.getSession(msg.sessionKey);
+		if (!rec || rec.agentId !== msg.agentId || rec.platform !== "slack") {
+			this.log.warn(`relay: Slack action for stale or foreign session ${msg.sessionKey} — dropping`);
+			return {
+				msgId: msg.msgId,
+				accepted: false,
+				reason: "not_found"
+			};
+		}
+		const binding = this.sessionDeliveryBindings.get(msg.sessionKey);
+		if (binding && (binding.agentId !== msg.agentId || binding.platform !== "slack" || binding.integrationId !== msg.integrationId)) {
+			this.log.warn(`relay: Slack action delivery binding mismatch for session ${msg.sessionKey} — dropping`);
+			return {
+				msgId: msg.msgId,
+				accepted: false,
+				reason: "stale"
+			};
+		}
+		const payload = msg.payload;
+		if (payload.kind === "open-config") {
+			const privateMetadata = encodeSharedSlackStatusTarget({
+				agentId: msg.agentId,
+				integrationId: msg.integrationId,
+				sessionKey: msg.sessionKey
+			});
+			conn.openStatusModal(payload.triggerId, msg.sessionKey, privateMetadata);
+		} else if (payload.kind === "set-model") this.handleStatusAction({
+			kind: payload.kind,
+			sessionKey: msg.sessionKey,
+			model: payload.model
+		});
+		else if (payload.kind === "set-effort") this.handleStatusAction({
+			kind: payload.kind,
+			sessionKey: msg.sessionKey,
+			effort: payload.effort
+		});
+		else if (payload.kind === "set-permission-mode") this.handleStatusAction({
+			kind: payload.kind,
+			sessionKey: msg.sessionKey,
+			permissionMode: payload.permissionMode
+		});
+		else if (payload.kind === "set-fast") this.handleStatusAction({
+			kind: payload.kind,
+			sessionKey: msg.sessionKey,
+			fastMode: payload.fastMode
+		});
+		else if (payload.kind === "set-output") this.handleStatusAction({
+			kind: payload.kind,
+			sessionKey: msg.sessionKey,
+			outputMode: payload.outputMode
+		});
+		else this.handleStatusAction({
+			kind: "cancel",
+			sessionKey: msg.sessionKey
+		});
+		return {
+			msgId: msg.msgId,
+			accepted: true
+		};
+	}
 	relayAgentMsgAcks = /* @__PURE__ */ new Map();
 	/**
 	* TARGET side of a cross-daemon `messageAgent` (agent-collaboration §2.3/§6.2, P2) —
@@ -219517,6 +219614,7 @@ var Daemon = class Daemon {
 			rec,
 			agentId,
 			agentName,
+			...integrationId !== void 0 ? { integrationId } : {},
 			...iconUrl ? { iconUrl } : {},
 			platform: msg.platform,
 			isDm: msg.isDm,
@@ -219631,8 +219729,7 @@ var Daemon = class Daemon {
 					botUrl: this.agentLink(agentId),
 					runtime: this.runtimeNames[agent.runtime] ?? agent.runtime,
 					model: this.buildStatusInfo(p).model ?? turnModel ?? "default",
-					sessionUrl: link,
-					shared: this.isSharedSlackIntegration(agentId, integrationId)
+					sessionUrl: link
 				});
 				for (const action of finals) this.enqueueApply(p, action);
 			}
@@ -219970,7 +220067,8 @@ var Daemon = class Daemon {
 					await conn.updateBlocks(p.channel, ts, action.blocks, action.text);
 				} else if (!p.statusBarAttempted) {
 					p.statusBarAttempted = true;
-					const posted = await conn.postBlocks(p.channel, action.blocks, action.text, p.thread, postOptions);
+					const statusPostOptions = this.isSharedSlackIntegration(p.agentId, p.integrationId) ? void 0 : postOptions;
+					const posted = await conn.postBlocks(p.channel, action.blocks, action.text, p.thread, statusPostOptions);
 					if (posted) {
 						p.statusBarTs = posted;
 						this.store.setStatusBarTs(p.sessionKey, posted);
@@ -220144,15 +220242,14 @@ var Daemon = class Daemon {
 		const orgSeg = this.cpOrgSlug ? `/${encodeURIComponent(this.cpOrgSlug)}` : "";
 		return `${this.webAppBase()}${orgSeg}/sessions/${encodeURIComponent(acpSessionId)}`;
 	}
-	/** The console deep link to an agent: `<base>/<orgSlug>/agents/<agentId>` — the
-	*  shared-bot footer's "sent by <agent_name>" link (§10.1). Same org-seg rule as
-	*  {@link sessionLink}. */
+	/** The console deep link to an agent: `<base>/<orgSlug>/agents/<agentId>`. Same
+	*  org-segment rule as {@link sessionLink}. */
 	agentLink(agentId) {
 		const orgSeg = this.cpOrgSlug ? `/${encodeURIComponent(this.cpOrgSlug)}` : "";
 		return `${this.webAppBase()}${orgSeg}/agents/${encodeURIComponent(agentId)}`;
 	}
-	/** Whether this turn used a shared Slack integration. Shared mode renders the same
-	*  dynamic footer text in a section so it can retain the config-button accessory. */
+	/** Whether this turn's reply rides a shared Slack integration. The relay owns that
+	*  app's Socket Mode connection, so interactive actions must use relay-recognized ids. */
 	isSharedSlackIntegration(agentId, integrationId) {
 		if (!integrationId) return false;
 		const int = this.agents.get(agentId)?.integrations.find((i) => i.id === integrationId);
@@ -220311,10 +220408,15 @@ var Daemon = class Daemon {
 		else {
 			p.lastStatusBar = key;
 			const link = this.sessionLink(p.acpSessionId);
+			const shared = p.integrationId && this.isSharedSlackIntegration(p.agentId, p.integrationId) ? { sessionTarget: encodeSharedSlackStatusTarget({
+				agentId: p.agentId,
+				integrationId: p.integrationId,
+				sessionKey: p.sessionKey
+			}) } : void 0;
 			this.enqueueApply(p, {
 				kind: "status-bar",
 				text: renderStatusBar(info),
-				blocks: buildStatusBlocks(info, p.sessionKey, link)
+				blocks: buildStatusBlocks(info, p.sessionKey, link, shared)
 			});
 		}
 	}
@@ -221846,4 +221948,4 @@ async function runForeground(opts, deps = {}) {
 //#endregion
 export { ClientTransport as i, CP_SUBPROTOCOL as n, CP_WS_PATH as r, runForeground as t };
 
-//# sourceMappingURL=run-foreground-BqC40mtd.js.map
+//# sourceMappingURL=run-foreground-BmZ1_4vI.js.map