npm - @assemblyline-agents/mirror - Versions diffs - 0.1.0 → 1.0.0 - Mend

@assemblyline-agents/mirror 0.1.0 → 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (11) hide show

package/README.md CHANGED Viewed

@@ -16,13 +16,9 @@ Mirror accepts Assembly Line's OAuth Authorization Code flow with mandatory PKCE
 S256. The normal callback is:
 ```text
-https://YOUR-AGENT-HOST/openeve/connections/callback
+https://YOUR-AGENT-HOST/assembly-line/connections/callback
 ```
-The runtime also serves `/assembly-line/connections/callback`; callback-URL
-construction still emits the legacy `/openeve/...` path during the rename
-compatibility window, so register the URI shown above until it flips.
 The hosted service and MCP endpoint are used by default. Self-hosted
 deployments can set `MIRROR_MCP_URL` and, when OAuth is on a different origin,
 `MIRROR_OAUTH_ISSUER`. `MIRROR_OAUTH_REDIRECT_URI` overrides Assembly Line's normal
@@ -32,6 +28,21 @@ callback only when necessary.
 assembly-line add mirror agent
 ```
+## Scoped binding packets
+For least-privilege setup, create an agent binding in Mirror's Agents UI,
+choose the exact provider accounts it may reach, and paste the generated
+binding packet into the agent's chat. Assembly Line advertises a host-side
+`mirror__pair` connection tool while Mirror is unauthorized. The tool sends
+the packet's one-time claim secret only to the configured Mirror deployment,
+stores the returned access and refresh tokens in the connection grant store,
+and keeps the durable credentials out of the model and sandbox.
+The packet's API origin must match `MIRROR_OAUTH_ISSUER`, `MIRROR_MCP_URL`, or
+the connection's configured URL. Credential exchange requires HTTPS, except
+for loopback development. OAuth remains available as an alternative account
+authorization path.
 The generated connection exposes Mirror reads and hides all write-like tools.
 To permit approval creation, syncs, connection links, registration, or other
 mutations, opt in with an Assembly Line approval policy:

package/dist/index.d.ts CHANGED Viewed

@@ -15,7 +15,7 @@ export interface MirrorConnectionOptions extends Omit<McpPluginConnectionOptions
     clientId?: string;
     /** Mirror authorization-server origin. Defaults to the MCP endpoint's origin. */
     issuer?: string;
-    /** Override OpenEve's normal /openeve/connections/callback URI. */
+    /** Override the runtime's normal /assembly-line/connections/callback URI. */
     redirectUri?: string;
     /**
      * Project the short-lived access token into a Mirror CLI profile.
@@ -25,5 +25,5 @@ export interface MirrorConnectionOptions extends Omit<McpPluginConnectionOptions
     materializeCli?: boolean | MirrorCliMaterializationOptions;
 }
 export declare function defineMirrorConnection(options: MirrorConnectionOptions): import("@assemblyline-agents/core").McpHttpClientConnectionDefinition;
-export declare const openevePlugin: import("@assemblyline-agents/core").PluginModule;
+export declare const assemblyLinePlugin: import("@assemblyline-agents/core").PluginModule;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAChC,MAAM,2BAA2B,CAAC;~~AAInC~~,MAAM,WAAW,+BAA+B;IAC9C,yFAAyF;IACzF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAwB,SAAQ,IAAI,CAAC,0BAA0B,EAAE,MAAM,CAAC;IACvF,IAAI,CAAC,EAAE,wBAAwB,GAAG,KAAK,CAAC;IACxC,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,~~mEAAmE~~;~~IACnE~~,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,GAAG,+BAA+B,CAAC;CAC5D;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,~~yEAiDtE~~;AAED,eAAO,MAAM,~~aAAa~~,kDAA0C,CAAC"}
1	+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAChC,MAAM,2BAA2B,CAAC;AAKnC,MAAM,WAAW,+BAA+B;IAC9C,yFAAyF;IACzF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAwB,SAAQ,IAAI,CAAC,0BAA0B,EAAE,MAAM,CAAC;IACvF,IAAI,CAAC,EAAE,wBAAwB,GAAG,KAAK,CAAC;IACxC,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,GAAG,+BAA+B,CAAC;CAC5D;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,yEAwDtE;AAED,eAAO,MAAM,kBAAkB,kDAA0C,CAAC"}

package/dist/index.js CHANGED Viewed

@@ -1,4 +1,5 @@
 import { connectionPluginMetadata, defineMcpPluginConnection, defineOAuthAuthorization, definePlugin } from "@assemblyline-agents/core";
+import { createMirrorPairingRedeemer } from "./pairing.js";
 const PLUGIN = connectionPluginMetadata("mirror");
 export function defineMirrorConnection(options) {
     const { auth, clientId, issuer, redirectUri, materializeCli, ...connection } = options;
@@ -13,6 +14,11 @@ export function defineMirrorConnection(options) {
                 ...(connection.url ? { mcpUrl: connection.url } : {})
             })
     });
+    definition.redeemPairingCode = createMirrorPairingRedeemer(({ env }) => normalizeIssuer(issuer
+        ?? env.MIRROR_OAUTH_ISSUER
+        ?? connection.url
+        ?? env.MIRROR_MCP_URL
+        ?? definition.url));
     if (materializeCli) {
         const settings = materializeCli === true ? {} : materializeCli;
         const profile = settings.profile?.trim() || "openeve";
@@ -41,7 +47,7 @@ export function defineMirrorConnection(options) {
     }
     return definition;
 }
-export const openevePlugin = definePlugin({ connections: [PLUGIN] });
+export const assemblyLinePlugin = definePlugin({ connections: [PLUGIN] });
 function mirrorOAuth(input) {
     return ({ env }) => {
         const resolvedClientId = input.clientId?.trim() || env.MIRROR_OAUTH_CLIENT_ID?.trim();

package/dist/index.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EACxB,YAAY,EAGb,MAAM,2BAA2B,CAAC;~~AAEnC~~,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,CAAE,CAAC;AA6BnD,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACrE,MAAM,EACJ,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,WAAW,EACX,cAAc,EACd,GAAG,UAAU,EACd,GAAG,OAAO,CAAC;IACZ,MAAM,UAAU,GAAG,yBAAyB,CAAC,MAAM,EAAE;QACnD,GAAG,UAAU;QACb,IAAI,EAAE,IAAI,KAAK,KAAK;YAClB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,IAAI,WAAW,CAAC;gBAClB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7B,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtD,CAAC;KACP,CAAC,CAAC;IAEH,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;QAC/D,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QACtD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QACtD,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,MAAM,IAAI,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;QAC5E,UAAU,CAAC,WAAW,GAAG;YACvB,KAAK,EAAE,CAAC;oBACN,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,2BAA2B;oBAC1D,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;wBACzB,OAAO,EAAE,CAAC;wBACV,cAAc,EAAE,OAAO;wBACvB,QAAQ,EAAE;4BACR,CAAC,OAAO,CAAC,EAAE;gCACT,MAAM;gCACN,MAAM,EAAE,+BAA+B;gCACvC,QAAQ,EAAE,iCAAiC;gCAC3C,SAAS,EAAE,kCAAkC;gCAC7C,YAAY,EAAE,WAAW;gCACzB,OAAO;6BACR;yBACF;qBACF,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;oBACf,IAAI,EAAE,KAAK;iBACZ,CAAC;SACH,CAAC;IACJ,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,MAAM,~~aAAa~~,GAAG,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;~~AAErE~~,SAAS,WAAW,CAAC,KAKpB;IACC,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;QACjB,MAAM,gBAAgB,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;QACtF,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,cAAc,GAAG,eAAe,CACpC,KAAK,CAAC,MAAM;eACT,GAAG,CAAC,mBAAmB;eACvB,KAAK,CAAC,MAAM;eACZ,GAAG,CAAC,cAAc;eAClB,MAAM,CAAC,UAAW,CACtB,CAAC;QACF,MAAM,mBAAmB,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE,CAAC;QAC/F,OAAO,wBAAwB,CAAC;YAC9B,WAAW,EAAE,QAAQ;YACrB,YAAY,EAAE,IAAI,GAAG,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC,QAAQ,EAAE;YACpE,QAAQ,EAAE,IAAI,GAAG,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,QAAQ,EAAE;YAC5D,QAAQ,EAAE,gBAAgB;YAC1B,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC"}
1	+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EACxB,YAAY,EAGb,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAE3D,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,CAAE,CAAC;AA6BnD,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACrE,MAAM,EACJ,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,WAAW,EACX,cAAc,EACd,GAAG,UAAU,EACd,GAAG,OAAO,CAAC;IACZ,MAAM,UAAU,GAAG,yBAAyB,CAAC,MAAM,EAAE;QACnD,GAAG,UAAU;QACb,IAAI,EAAE,IAAI,KAAK,KAAK;YAClB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,IAAI,WAAW,CAAC;gBAClB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7B,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtD,CAAC;KACP,CAAC,CAAC;IACH,UAAU,CAAC,iBAAiB,GAAG,2BAA2B,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,eAAe,CACrF,MAAM;WACH,GAAG,CAAC,mBAAmB;WACvB,UAAU,CAAC,GAAG;WACd,GAAG,CAAC,cAAc;WAClB,UAAU,CAAC,GAAG,CAClB,CAAC,CAAC;IAEH,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;QAC/D,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QACtD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QACtD,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,MAAM,IAAI,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;QAC5E,UAAU,CAAC,WAAW,GAAG;YACvB,KAAK,EAAE,CAAC;oBACN,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,2BAA2B;oBAC1D,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;wBACzB,OAAO,EAAE,CAAC;wBACV,cAAc,EAAE,OAAO;wBACvB,QAAQ,EAAE;4BACR,CAAC,OAAO,CAAC,EAAE;gCACT,MAAM;gCACN,MAAM,EAAE,+BAA+B;gCACvC,QAAQ,EAAE,iCAAiC;gCAC3C,SAAS,EAAE,kCAAkC;gCAC7C,YAAY,EAAE,WAAW;gCACzB,OAAO;6BACR;yBACF;qBACF,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;oBACf,IAAI,EAAE,KAAK;iBACZ,CAAC;SACH,CAAC;IACJ,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE1E,SAAS,WAAW,CAAC,KAKpB;IACC,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;QACjB,MAAM,gBAAgB,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;QACtF,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,cAAc,GAAG,eAAe,CACpC,KAAK,CAAC,MAAM;eACT,GAAG,CAAC,mBAAmB;eACvB,KAAK,CAAC,MAAM;eACZ,GAAG,CAAC,cAAc;eAClB,MAAM,CAAC,UAAW,CACtB,CAAC;QACF,MAAM,mBAAmB,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE,CAAC;QAC/F,OAAO,wBAAwB,CAAC;YAC9B,WAAW,EAAE,QAAQ;YACrB,YAAY,EAAE,IAAI,GAAG,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC,QAAQ,EAAE;YACpE,QAAQ,EAAE,IAAI,GAAG,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,QAAQ,EAAE;YAC5D,QAAQ,EAAE,gBAAgB;YAC1B,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC"}

package/dist/pairing.d.ts ADDED Viewed

@@ -0,0 +1,18 @@
+import type { ConnectionPairingRedeemer, ConnectionResolverContext } from "@assemblyline-agents/core";
+interface MirrorBindingClaim {
+    origin: string;
+    userId: string;
+    bindingId: string;
+    claimToken: string;
+    runtime?: string;
+}
+type MirrorOriginResolver = (context: ConnectionResolverContext) => string;
+/**
+ * Builds the host-side redeemer for a Mirror UI binding packet. The packet
+ * carries only a one-time claim secret. Mirror releases the durable access and
+ * refresh tokens directly to the OpenEve host after the claim is consumed.
+ */
+export declare function createMirrorPairingRedeemer(resolveExpectedOrigin: MirrorOriginResolver): ConnectionPairingRedeemer;
+export declare function parseMirrorBindingPacket(packet: string): MirrorBindingClaim;
+export {};
+//# sourceMappingURL=pairing.d.ts.map

package/dist/pairing.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"pairing.d.ts","sourceRoot":"","sources":["../src/pairing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,yBAAyB,EACzB,yBAAyB,EAG1B,MAAM,2BAA2B,CAAC;AAQnC,UAAU,kBAAkB;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,KAAK,oBAAoB,GAAG,CAAC,OAAO,EAAE,yBAAyB,KAAK,MAAM,CAAC;AAE3E;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,qBAAqB,EAAE,oBAAoB,GAAG,yBAAyB,CAqElH;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,kBAAkB,CAa3E"}

package/dist/pairing.js ADDED Viewed

@@ -0,0 +1,280 @@
+const MAX_PACKET_CHARS = 64 * 1024;
+const MAX_PACKET_FIELD_CHARS = 4 * 1024;
+const REQUEST_TIMEOUT_MS = 10_000;
+const PAIRING_WAIT_MS = 15_000;
+const POLL_INTERVAL_MS = 250;
+/**
+ * Builds the host-side redeemer for a Mirror UI binding packet. The packet
+ * carries only a one-time claim secret. Mirror releases the durable access and
+ * refresh tokens directly to the OpenEve host after the claim is consumed.
+ */
+export function createMirrorPairingRedeemer(resolveExpectedOrigin) {
+    return async ({ code }, context) => {
+        const claim = parseMirrorBindingPacket(code);
+        const expectedOrigin = normalizedSecureOrigin(resolveExpectedOrigin(context));
+        if (claim.origin !== expectedOrigin) {
+            throw new Error("The Mirror binding packet belongs to a different Mirror deployment.");
+        }
+        const createUrl = new URL(`/api/users/${encodeURIComponent(claim.userId)}/agent-binding-pairing-requests`, `${expectedOrigin}/`);
+        const created = await requestJson(createUrl, {
+            method: "POST",
+            headers: {
+                accept: "application/json",
+                "content-type": "application/json"
+            },
+            body: JSON.stringify({
+                bindingId: claim.bindingId,
+                runtime: claim.runtime ?? "openeve",
+                harness: "openeve",
+                claimToken: claim.claimToken
+            })
+        }, "Mirror rejected the binding packet");
+        const requestId = boundedString(created.requestId);
+        const pollToken = boundedString(created.pollToken);
+        if (!requestId || !pollToken) {
+            throw new Error("Mirror accepted the binding packet without returning a pairing request.");
+        }
+        if (created.autoApproved !== true && created.status !== "approved") {
+            throw new Error("This Mirror binding packet requires separate approval. Create a fresh one-time packet in Mirror.");
+        }
+        const tokenUrl = new URL(`/api/users/${encodeURIComponent(claim.userId)}/agent-binding-pairing-requests/${encodeURIComponent(requestId)}/token`, `${expectedOrigin}/`);
+        const deadline = Math.min(parseDate(created.expiresAt) ?? Date.now() + PAIRING_WAIT_MS, Date.now() + PAIRING_WAIT_MS);
+        while (Date.now() < deadline) {
+            const response = await fetchWithTimeout(tokenUrl, {
+                method: "GET",
+                headers: {
+                    accept: "application/json",
+                    authorization: `Bearer ${pollToken}`
+                },
+                redirect: "error"
+            });
+            const payload = await responseJson(response);
+            if (response.status === 202) {
+                await wait(POLL_INTERVAL_MS);
+                continue;
+            }
+            if (!response.ok) {
+                throw new Error(`Mirror could not activate the binding packet (HTTP ${response.status}).`);
+            }
+            if (payload.status !== "approved") {
+                throw new Error("Mirror did not activate the binding packet.");
+            }
+            return tokenResultForBinding(payload, claim);
+        }
+        throw new Error("Timed out while Mirror activated the binding packet. Create a fresh packet and try again.");
+    };
+}
+export function parseMirrorBindingPacket(packet) {
+    const input = packet.trim();
+    if (!input || input.length > MAX_PACKET_CHARS) {
+        throw new Error("A valid Mirror binding packet is required.");
+    }
+    const httpClaim = parseHttpClaim(input);
+    if (httpClaim)
+        return httpClaim;
+    const cliClaim = parseCliClaim(input);
+    if (cliClaim)
+        return cliClaim;
+    throw new Error("The Mirror binding packet is missing its binding id, one-time claim token, API URL, or user id.");
+}
+function parseHttpClaim(packet) {
+    for (const line of packet.split(/\r?\n/u)) {
+        const match = /^\s*POST\s+(\S+)\s+(\{.*\})\s*$/u.exec(line);
+        if (!match?.[1] || !match[2])
+            continue;
+        const endpoint = parsePairingEndpoint(match[1]);
+        if (!endpoint)
+            continue;
+        const body = parseJsonObject(match[2]);
+        if (!body)
+            continue;
+        const bindingId = boundedString(body.bindingId);
+        const claimToken = boundedString(body.claimToken ?? body.claim);
+        const runtime = boundedString(body.runtime);
+        if (!bindingId || !claimToken)
+            continue;
+        return {
+            origin: endpoint.origin,
+            userId: endpoint.userId,
+            bindingId,
+            claimToken,
+            ...(runtime ? { runtime } : {})
+        };
+    }
+    return null;
+}
+function parseCliClaim(packet) {
+    for (const line of packet.split(/\r?\n/u)) {
+        const words = commandWords(line);
+        const bindIndex = words.indexOf("bind");
+        if (bindIndex < 0)
+            continue;
+        const args = words.slice(bindIndex + 1);
+        const bindingId = boundedString(flagValue(args, "binding"));
+        const claimToken = boundedString(flagValue(args, "claim") ?? flagValue(args, "claim-token"));
+        const apiUrl = boundedString(flagValue(args, "api") ?? flagValue(args, "api-url"));
+        const userId = boundedString(flagValue(args, "user"));
+        const runtime = boundedString(flagValue(args, "runtime"));
+        if (!bindingId || !claimToken || !apiUrl || !userId)
+            continue;
+        return {
+            origin: normalizedSecureOrigin(apiUrl),
+            userId,
+            bindingId,
+            claimToken,
+            ...(runtime ? { runtime } : {})
+        };
+    }
+    return null;
+}
+function parsePairingEndpoint(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return null;
+    }
+    if (url.username || url.password || url.search || url.hash)
+        return null;
+    const match = /^\/api\/users\/([^/]+)\/agent-binding-pairing-requests\/?$/u.exec(url.pathname);
+    if (!match?.[1])
+        return null;
+    let userId;
+    try {
+        userId = decodeURIComponent(match[1]);
+    }
+    catch {
+        return null;
+    }
+    if (!boundedString(userId))
+        return null;
+    return { origin: normalizedSecureOrigin(url.origin), userId };
+}
+function tokenResultForBinding(payload, claim) {
+    const binding = jsonObject(payload.binding);
+    const bindingId = boundedString(binding?.bindingId);
+    const token = boundedString(binding?.token);
+    const refreshToken = boundedString(binding?.refreshToken);
+    const branchId = boundedString(binding?.branchId) ?? "default";
+    if (!binding || !bindingId || bindingId !== claim.bindingId || !token) {
+        throw new Error("Mirror activated a different or incomplete agent binding.");
+    }
+    const result = {
+        token,
+        tokenType: "Bearer",
+        credential: {
+            mirror_user_id: claim.userId,
+            mirror_binding_id: bindingId,
+            mirror_branch_id: branchId
+        }
+    };
+    if (refreshToken)
+        result.refreshToken = refreshToken;
+    const expiresAt = parseDate(binding.expiresAt);
+    if (expiresAt)
+        result.expiresAt = expiresAt;
+    return result;
+}
+async function requestJson(url, init, failureMessage) {
+    const response = await fetchWithTimeout(url, { ...init, redirect: "error" });
+    const payload = await responseJson(response);
+    if (!response.ok) {
+        throw new Error(`${failureMessage} (HTTP ${response.status}).`);
+    }
+    return payload;
+}
+async function fetchWithTimeout(url, init) {
+    try {
+        return await fetch(url, {
+            ...init,
+            signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
+        });
+    }
+    catch {
+        throw new Error("Could not reach the configured Mirror deployment.");
+    }
+}
+async function responseJson(response) {
+    try {
+        const value = await response.json();
+        return jsonObject(value) ?? {};
+    }
+    catch {
+        return {};
+    }
+}
+function normalizedSecureOrigin(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new Error("Mirror pairing requires a valid API URL.");
+    }
+    if (url.username || url.password || url.origin === "null") {
+        throw new Error("Mirror pairing requires a valid API origin.");
+    }
+    const host = url.hostname.toLowerCase();
+    const loopback = host === "localhost"
+        || host === "127.0.0.1"
+        || host === "::1"
+        || host === "[::1]"
+        || host.endsWith(".localhost");
+    if (url.protocol !== "https:" && !loopback) {
+        throw new Error("Mirror binding credentials may only be exchanged over HTTPS or loopback.");
+    }
+    return url.origin;
+}
+function commandWords(line) {
+    const words = [];
+    const expression = /"((?:\\.|[^"])*)"|'([^']*)'|([^\s]+)/gu;
+    for (const match of line.matchAll(expression)) {
+        const value = match[1] ?? match[2] ?? match[3];
+        if (value !== undefined)
+            words.push(value.replace(/\\(["\\])/gu, "$1"));
+    }
+    return words;
+}
+function flagValue(args, name) {
+    const flag = `--${name}`;
+    for (let index = 0; index < args.length; index += 1) {
+        const value = args[index];
+        if (value === flag)
+            return args[index + 1];
+        if (value?.startsWith(`${flag}=`))
+            return value.slice(flag.length + 1);
+    }
+    return undefined;
+}
+function parseJsonObject(value) {
+    try {
+        return jsonObject(JSON.parse(value));
+    }
+    catch {
+        return null;
+    }
+}
+function jsonObject(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : null;
+}
+function boundedString(value) {
+    if (typeof value !== "string")
+        return undefined;
+    const clean = value.trim();
+    return clean && clean.length <= MAX_PACKET_FIELD_CHARS ? clean : undefined;
+}
+function parseDate(value) {
+    if (typeof value === "number" && Number.isFinite(value) && value > 0)
+        return value;
+    if (typeof value !== "string")
+        return undefined;
+    const parsed = Date.parse(value);
+    return Number.isFinite(parsed) && parsed > 0 ? parsed : undefined;
+}
+function wait(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=pairing.js.map

package/dist/pairing.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"pairing.js","sourceRoot":"","sources":["../src/pairing.ts"],"names":[],"mappings":"AAOA,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,CAAC;AACxC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAY7B;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,qBAA2C;IACrF,OAAO,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE;QACjC,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,cAAc,GAAG,sBAAsB,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9E,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,cAAc,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,iCAAiC,EAC/E,GAAG,cAAc,GAAG,CACrB,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,SAAS,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,SAAS;gBACnC,OAAO,EAAE,SAAS;gBAClB,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC;SACH,EAAE,oCAAoC,CAAC,CAAC;QAEzC,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,kGAAkG,CAAC,CAAC;QACtH,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,cAAc,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,mCAAmC,kBAAkB,CAAC,SAAS,CAAC,QAAQ,EACtH,GAAG,cAAc,GAAG,CACrB,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CACvB,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,EAC5D,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAC7B,CAAC;QAEF,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE;gBAChD,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;oBAC1B,aAAa,EAAE,UAAU,SAAS,EAAE;iBACrC;gBACD,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBAC7B,SAAS;YACX,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,sDAAsD,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;YAC7F,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,CAAC;YACD,OAAO,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAC;IAC/G,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAEhC,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,IAAI,KAAK,CAAC,iGAAiG,CAAC,CAAC;AACrH,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAAE,SAAS;QAEvC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU;YAAE,SAAS;QACxC,OAAO;YACL,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,SAAS;YACT,UAAU;YACV,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,SAAS,GAAG,CAAC;YAAE,SAAS;QAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;YAAE,SAAS;QAC9D,OAAO;YACL,MAAM,EAAE,sBAAsB,CAAC,MAAM,CAAC;YACtC,MAAM;YACN,SAAS;YACT,UAAU;YACV,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACxE,MAAM,KAAK,GAAG,6DAA6D,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/F,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,EAAE,MAAM,EAAE,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAmB,EAAE,KAAyB;IAC3E,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,SAAS,CAAC;IAC/D,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,MAAM,GAAgB;QAC1B,KAAK;QACL,SAAS,EAAE,QAAQ;QACnB,UAAU,EAAE;YACV,cAAc,EAAE,KAAK,CAAC,MAAM;YAC5B,iBAAiB,EAAE,SAAS;YAC5B,gBAAgB,EAAE,QAAQ;SAC3B;KACF,CAAC;IACF,IAAI,YAAY;QAAE,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;IACrD,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,SAAS;QAAE,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;IAC5C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAQ,EAAE,IAAiB,EAAE,cAAsB;IAC5E,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,GAAG,cAAc,UAAU,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAQ,EAAE,IAAiB;IACzD,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE;YACtB,GAAG,IAAI;YACP,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAChD,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAkB;IAC5C,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC7C,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,KAAK,WAAW;WAChC,IAAI,KAAK,WAAW;WACpB,IAAI,KAAK,KAAK;WACd,IAAI,KAAK,OAAO;WAChB,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACjC,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,UAAU,GAAG,wCAAwC,CAAC;IAC5D,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,IAAc,EAAE,IAAY;IAC7C,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;IACzB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC3C,IAAI,KAAK,EAAE,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAC,KAAmB;QACrB,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,sBAAsB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7E,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED,SAAS,IAAI,CAAC,EAAU;IACtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@assemblyline-agents/mirror",
-  "version": "0.1.0",
+  "version": "1.0.0",
   "type": "module",
   "exports": {
     ".": {
@@ -9,9 +9,9 @@
     }
   },
   "dependencies": {
-    "@assemblyline-agents/core": "0.1.0"
+    "@assemblyline-agents/core": "1.0.0"
   },
-  "description": "Official OpenEve connection plugin for user-scoped Mirror accounts.",
+  "description": "Official Assembly Line connection plugin for user-scoped Mirror accounts.",
   "files": [
     "dist",
     "skills"
@@ -22,16 +22,16 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/jasonbadeaux/openeve.git",
+    "url": "git+https://github.com/jasonbadeaux/assembly-line.git",
     "directory": "packages/mirror"
   },
   "bugs": {
-    "url": "https://github.com/jasonbadeaux/openeve/issues"
+    "url": "https://github.com/jasonbadeaux/assembly-line/issues"
   },
-  "homepage": "https://github.com/jasonbadeaux/openeve#readme",
-  "author": "OpenEve contributors",
+  "homepage": "https://github.com/jasonbadeaux/assembly-line#readme",
+  "author": "Assembly Line contributors",
   "keywords": [
-    "openeve",
+    "assembly-line",
     "ai",
     "agents",
     "mirror",

package/skills/mirror/SKILL.md CHANGED Viewed

@@ -9,6 +9,12 @@ Mirror is the user's connected-context layer. It holds downstream provider
 credentials and exposes only the providers and accounts granted to this agent.
 Never ask for, print, or store raw provider credentials.
+If the user pastes a Mirror binding packet, use connection discovery to find
+`mirror__pair` and pass the full packet through its `secret` field. Do not run
+the packet's shell command inside the model sandbox and do not repeat its
+one-time claim token. After pairing succeeds, call `mirror.whoami` to verify
+the binding's resolved scope.
 Start with `mirror.whoami`, then `mirror.connected_providers`. Inspect each
 lane's access and mirror policy before choosing a tool: