@arbium/enterprise-agent-connect 0.0.0-stage → 0.1.1

package/dist/packages/server/src/teams/runner.js

@@ -0,0 +1,143 @@
+import { createHmac } from "node:crypto";
+import { z } from "zod";
+import { brand } from "../../../connector-kit/src/branding.js";
+import { credentialAad } from "../secrets.js";
+import { InvalidInput } from "../service.js";
+import { ConnectError } from "../../../connector-kit/src/types.js";
+import { agentMcpUrl, claudeClient, verifyTrigger, } from "./claude.js";
+// What answers a Teams message once the core decided it should be answered (who may ask, reply
+// mode, the hourly, daily and concurrent caps, the reply token and teams_reply stay in
+// runtime.ts whatever the runner).
+export const CLAUDE_RUNNER = "claude-managed-agents";
+export const triggerAad = (org, agentId) => credentialAad(org, `teams-trigger:${agentId}`);
+/** The trigger's signing secret, opened, or null when it has none. */
+export function openTriggerSecret(key, org, trigger) {
+    if (!trigger.secret || !trigger.secretKeyId)
+        return null;
+    return String(key.open({ ciphertext: trigger.secret, keyId: trigger.secretKeyId }, triggerAad(org, trigger.agentId)).secret);
+}
+/** Claude Managed Agents with the organization's own Claude key (providers row anthropic). Its
+ *  settings are the trigger's managedAgentId, environmentId and vaultIds. */
+export const claudeManagedAgents = (claude = claudeClient) => (ctx) => {
+    async function claudeFor(org) {
+        const row = await ctx.teams.claudeKey(org);
+        if (!row)
+            return null;
+        const { api_key } = ctx.key.open({ ciphertext: row.credential, keyId: row.credentialKeyId }, credentialAad(org, "provider:anthropic"));
+        return claude(api_key);
+    }
+    async function need(org) {
+        const c = await claudeFor(org);
+        if (!c)
+            throw new ConnectError("Set your organization's Claude API key first");
+        return c;
+    }
+    return {
+        id: CLAUDE_RUNNER,
+        settings: z.strictObject({}),
+        async unready(org) {
+            return (await ctx.teams.claudeKey(org)) ? null : "organization has no Claude API key";
+        },
+        async verify(trigger, org, _secret, when) {
+            if (!trigger.managedAgentId || !trigger.environmentId)
+                throw new InvalidInput("Choose the Claude agent and environment");
+            if (!ctx.publicUrl)
+                throw new ConnectError("This deployment has no public address");
+            const c = await need(org);
+            await verifyTrigger(c, ctx.publicUrl, trigger.agentId, {
+                managedAgentId: trigger.managedAgentId,
+                vaultIds: trigger.vaultIds,
+            });
+            if (when === "save" && !(await c.environmentExists(trigger.environmentId)))
+                throw new ConnectError("Claude has no environment with that id under your organization's key");
+        },
+        async start(input) {
+            return (await need(input.org)).createSession({
+                agentId: input.trigger.managedAgentId,
+                environmentId: input.trigger.environmentId,
+                vaultIds: input.trigger.vaultIds,
+                budgetCents: input.budgetCents,
+                metadata: {
+                    source: `${brand().resourcePrefix}-teams`,
+                    agent: input.agentId,
+                    bot: input.botId,
+                    run: input.runId,
+                    requested_by: input.requestedBy,
+                },
+                text: input.text,
+            });
+        },
+        async continue(sessionId, input) {
+            await (await need(input.org)).sendMessage(sessionId, input.text, input.budgetCents);
+        },
+        async state(run, org) {
+            const c = await claudeFor(org);
+            if (!c)
+                return { gone: "Claude API key removed" };
+            return (await c.session(run.sessionId)) ?? { gone: "The Claude session is gone" };
+        },
+        // Without the key there is nothing left to stop it with.
+        async stop(sessionId, org) {
+            await (await claudeFor(org))?.interrupt(sessionId);
+        },
+    };
+};
+export const SIGNATURE_HEADER = "x-agent-connect-signature";
+/** `t=<unix seconds>,v1=<hex HMAC-SHA256 of "<t>.<body>">`; receivers reject an old `t`. */
+export function signature(secret, body, t = Math.floor(Date.now() / 1000)) {
+    return `t=${t},v1=${createHmac("sha256", secret).update(`${t}.${body}`).digest("hex")}`;
+}
+/** A signed POST of the message and its context to the trigger's `url`, for any agent
+ *  framework. The receiver answers through MCP teams_reply with the reply token and this
+ *  agent's own key, as a Claude agent does. It reports no cost; the trigger's caps still
+ *  apply. A run is answered once a reply arrives, and stopped after the turn timeout. */
+export const signedWebhook = (fetchImpl = fetch) => (ctx) => {
+    async function post(trigger, secret, payload) {
+        if (!secret)
+            throw new InvalidInput("Give the webhook a signing secret");
+        const body = JSON.stringify(payload);
+        const res = await fetchImpl(String(trigger.settings.url), {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                [SIGNATURE_HEADER]: signature(secret, body),
+            },
+            body,
+            redirect: "error",
+            signal: AbortSignal.timeout(10_000),
+        });
+        if (!res.ok)
+            throw new ConnectError(`The webhook answered ${res.status}`);
+    }
+    const message = (input) => ({
+        type: "message",
+        run: input.runId,
+        agent: input.agentId,
+        bot: input.botId,
+        requestedBy: input.requestedBy,
+        text: input.text,
+        replyToken: input.replyToken,
+        mcpUrl: ctx.publicUrl ? agentMcpUrl(ctx.publicUrl, input.agentId) : null,
+    });
+    return {
+        id: "webhook",
+        settings: z.strictObject({ url: z.url({ protocol: /^https$/ }) }),
+        unready: async () => null,
+        async verify(trigger, _org, secret, when) {
+            if (when === "save")
+                await post(trigger, secret, { type: "ping", agent: trigger.agentId });
+        },
+        async start(input) {
+            await post(input.trigger, input.secret, message(input));
+            return `webhook:${input.runId}`;
+        },
+        async continue(_sessionId, input) {
+            await post(input.trigger, input.secret, message(input));
+        },
+        async state(run) {
+            return { status: run.replyCount > 0 ? "idle" : "running", costCents: 0, atBudget: false };
+        },
+        async stop() { },
+    };
+};
+//# sourceMappingURL=runner.js.map

package/dist/packages/server/src/teams/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../../../../packages/server/src/teams/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,KAAK,EAAE,MAAM,wCAAwC,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAsB,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAc,MAAM,qCAAqC,CAAC;AAC/E,OAAO,EACL,WAAW,EACX,YAAY,EACZ,aAAa,GAGd,MAAM,aAAa,CAAC;AAGrB,+FAA+F;AAC/F,uFAAuF;AACvF,mCAAmC;AAEnC,MAAM,CAAC,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAiDrD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,OAAe,EAAE,EAAE,CACzD,aAAa,CAAC,GAAG,EAAE,iBAAiB,OAAO,EAAE,CAAC,CAAC;AAEjD,sEAAsE;AACtE,MAAM,UAAU,iBAAiB,CAAC,GAAkB,EAAE,GAAW,EAAE,OAAmB;IACpF,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,MAAM,CACX,GAAG,CAAC,IAAI,CACN,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,EAC1D,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CACjC,CAAC,MAAM,CACT,CAAC;AACJ,CAAC;AAED;6EAC6E;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAC9B,CAAC,SAAwB,YAAY,EAAiB,EAAE,CACxD,CAAC,GAAG,EAAE,EAAE;IACN,KAAK,UAAU,SAAS,CAAC,GAAW;QAClC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAC9B,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,eAAe,EAAE,EAC1D,aAAa,CAAC,GAAG,EAAE,oBAAoB,CAAC,CACzC,CAAC;QACF,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,UAAU,IAAI,CAAC,GAAW;QAC7B,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,8CAA8C,CAAC,CAAC;QAC/E,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO;QACL,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,OAAO,CAAC,GAAG;YACf,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oCAAoC,CAAC;QACxF,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI;YACtC,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,aAAa;gBACnD,MAAM,IAAI,YAAY,CAAC,yCAAyC,CAAC,CAAC;YACpE,IAAI,CAAC,GAAG,CAAC,SAAS;gBAAE,MAAM,IAAI,YAAY,CAAC,uCAAuC,CAAC,CAAC;YACpF,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1B,MAAM,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE;gBACrD,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC,CAAC;YACH,IAAI,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;gBACxE,MAAM,IAAI,YAAY,CACpB,sEAAsE,CACvE,CAAC;QACN,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,KAAK;YACf,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC;gBAC3C,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,cAAe;gBACtC,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,aAAc;gBAC3C,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;gBAChC,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,QAAQ,EAAE;oBACR,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,cAAc,QAAQ;oBACzC,KAAK,EAAE,KAAK,CAAC,OAAO;oBACpB,GAAG,EAAE,KAAK,CAAC,KAAK;oBAChB,GAAG,EAAE,KAAK,CAAC,KAAK;oBAChB,YAAY,EAAE,KAAK,CAAC,WAAW;iBAChC;gBACD,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK;YAC7B,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACtF,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG;YAClB,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,CAAC,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;YAClD,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,SAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC;QACrF,CAAC;QACD,yDAAyD;QACzD,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG;YACvB,MAAM,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;QACrD,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEJ,MAAM,CAAC,MAAM,gBAAgB,GAAG,2BAA2B,CAAC;AAE5D,4FAA4F;AAC5F,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,IAAY,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACvF,OAAO,KAAK,CAAC,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED;;;yFAGyF;AACzF,MAAM,CAAC,MAAM,aAAa,GACxB,CAAC,YAAmB,KAAK,EAAiB,EAAE,CAC5C,CAAC,GAAG,EAAE,EAAE;IACN,KAAK,UAAU,IAAI,CAAC,OAAmB,EAAE,MAAqB,EAAE,OAAgB;QAC9E,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,YAAY,CAAC,mCAAmC,CAAC,CAAC;QACzE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;YACxD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC;aAC5C;YACD,IAAI;YACJ,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,YAAY,CAAC,wBAAwB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,KAAe,EAAE,EAAE,CAAC,CAAC;QACpC,IAAI,EAAE,SAAS;QACf,GAAG,EAAE,KAAK,CAAC,KAAK;QAChB,KAAK,EAAE,KAAK,CAAC,OAAO;QACpB,GAAG,EAAE,KAAK,CAAC,KAAK;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;KACzE,CAAC,CAAC;IACH,OAAO;QACL,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACjE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;QACzB,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI;YACtC,IAAI,IAAI,KAAK,MAAM;gBAAE,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,KAAK;YACf,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACxD,OAAO,WAAW,KAAK,CAAC,KAAK,EAAE,CAAC;QAClC,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK;YAC9B,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,GAAG;YACb,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC5F,CAAC;QACD,KAAK,CAAC,IAAI,KAAI,CAAC;KAChB,CAAC;AACJ,CAAC,CAAC"}