@femtomc/mu-agent 26.2.53 → 26.2.55

package/dist/extensions/messaging-setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"messaging-setup.d.ts","sourceRoot":"","sources":["../../src/extensions/messaging-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,YAAY,EAA6C,MAAM,+BAA+B,CAAC;AAwiC7G,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,YAAY,QA0PvD;AAED,eAAe,uBAAuB,CAAC"}
+{"version":3,"file":"messaging-setup.d.ts","sourceRoot":"","sources":["../../src/extensions/messaging-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,YAAY,EAA6C,MAAM,+BAA+B,CAAC;AAyiC7G,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,YAAY,QA0PvD;AAED,eAAe,uBAAuB,CAAC"}

package/dist/extensions/messaging-setup.js

@@ -77,6 +77,7 @@ const ADAPTERS = [
             "Create bot with @BotFather and place token in control_plane.adapters.telegram.bot_token.",
             "Set control_plane.adapters.telegram.webhook_secret to a random secret string.",
             "Call Telegram setWebhook using URL <public-base-url>/webhooks/telegram and matching secret_token.",
+            "Link your Telegram identity to control-plane policy (mu control link --channel telegram --actor-id <telegram-user-id> --tenant-id telegram-bot --role <viewer|contributor|operator>).",
             "Optionally set control_plane.adapters.telegram.bot_username.",
             "Send /mu in Telegram chat, then /mu-setup verify telegram.",
         ],

package/dist/extensions/server-tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server-tools.d.ts","sourceRoot":"","sources":["../../src/extensions/server-tools.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAgElE,MAAM,MAAM,wBAAwB,GAAG;IACtC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;CAClC,CAAC;AA4SF,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,GAAE,wBAA6B,QAQzF;AAED,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,YAAY,QAS5D;AAED,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"server-tools.d.ts","sourceRoot":"","sources":["../../src/extensions/server-tools.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAgElE,MAAM,MAAM,wBAAwB,GAAG;IACtC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;CAClC,CAAC;AAoXF,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,GAAE,wBAA6B,QAQzF;AAED,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,YAAY,QAS5D;AAED,eAAe,oBAAoB,CAAC"}

package/dist/extensions/server-tools.js

@@ -283,6 +283,83 @@ function registerServerTools(pi, opts) {
             }
         },
     });
+    const IdentityParams = Type.Object({
+        action: StringEnum(["list", "link", "unlink"]),
+        channel: Type.Optional(Type.String({ description: "Channel: slack, discord, telegram (for link)" })),
+        actor_id: Type.Optional(Type.String({ description: "Channel actor ID (for link)" })),
+        tenant_id: Type.Optional(Type.String({ description: "Channel tenant ID (for link)" })),
+        role: Type.Optional(Type.String({ description: "Role: operator, contributor, viewer (for link, default operator)" })),
+        binding_id: Type.Optional(Type.String({ description: "Binding ID (for link/unlink)" })),
+        actor_binding_id: Type.Optional(Type.String({ description: "Actor binding ID (for unlink, usually same as binding_id)" })),
+        reason: Type.Optional(Type.String({ description: "Unlink reason (for unlink)" })),
+        include_inactive: Type.Optional(Type.Boolean({ description: "Include inactive bindings (for list)" })),
+    });
+    pi.registerTool({
+        name: "mu_identity",
+        label: "Identity",
+        description: "Manage identity bindings. Actions: list (enumerate bindings), link (create binding), unlink (self-unlink).",
+        parameters: IdentityParams,
+        async execute(_toolCallId, params) {
+            switch (params.action) {
+                case "list": {
+                    const query = new URLSearchParams();
+                    if (params.include_inactive)
+                        query.set("include_inactive", "true");
+                    const data = await fetchMuJson(`/api/identities${query.size > 0 ? `?${query.toString()}` : ""}`);
+                    return textResult(toJsonText(data), { count: data.count });
+                }
+                case "link": {
+                    const channel = trimOrNull(params.channel);
+                    const actorId = trimOrNull(params.actor_id);
+                    const tenantId = trimOrNull(params.tenant_id);
+                    if (!channel)
+                        return textResult("Error: channel required for link");
+                    if (!actorId)
+                        return textResult("Error: actor_id required for link");
+                    if (!tenantId)
+                        return textResult("Error: tenant_id required for link");
+                    const body = {
+                        channel,
+                        actor_id: actorId,
+                        tenant_id: tenantId,
+                    };
+                    const role = trimOrNull(params.role);
+                    if (role)
+                        body.role = role;
+                    const bindingId = trimOrNull(params.binding_id);
+                    if (bindingId)
+                        body.binding_id = bindingId;
+                    const result = await fetchMuJson("/api/identities/link", {
+                        method: "POST",
+                        body,
+                    });
+                    return textResult(toJsonText(result), result);
+                }
+                case "unlink": {
+                    const bindingId = trimOrNull(params.binding_id);
+                    const actorBindingId = trimOrNull(params.actor_binding_id);
+                    if (!bindingId)
+                        return textResult("Error: binding_id required for unlink");
+                    if (!actorBindingId)
+                        return textResult("Error: actor_binding_id required for unlink");
+                    const body = {
+                        binding_id: bindingId,
+                        actor_binding_id: actorBindingId,
+                    };
+                    const reason = trimOrNull(params.reason);
+                    if (reason)
+                        body.reason = reason;
+                    const result = await fetchMuJson("/api/identities/unlink", {
+                        method: "POST",
+                        body,
+                    });
+                    return textResult(toJsonText(result), result);
+                }
+                default:
+                    return textResult(`Unknown action: ${params.action}`);
+            }
+        },
+    });
     pi.registerCommand("mu-status", {
         description: "Show concise mu server status",
         handler: async (_args, ctx) => {
@@ -323,16 +400,16 @@ export function serverToolsExtension(pi, opts = {}) {
     registerServerTools(pi, {
         allowForumPost: opts.allowForumPost ?? true,
         toolIntroLine: opts.toolIntroLine ??
-            "Tools: mu_status, mu_control_plane, mu_issues, mu_forum, mu_events, mu_runs, mu_activities, mu_heartbeats.",
+            "Tools: mu_status, mu_control_plane, mu_issues, mu_forum, mu_events, mu_runs, mu_activities, mu_heartbeats, mu_identity.",
         extraSystemPromptLines: opts.extraSystemPromptLines ?? [],
     });
 }
 export function serverToolsReadOnlyExtension(pi) {
     registerServerTools(pi, {
         allowForumPost: false,
-        toolIntroLine: "Tools: mu_status, mu_control_plane, mu_issues, mu_forum(read/topics), mu_events, mu_runs(read), mu_messaging_setup(read).",
+        toolIntroLine: "Tools: mu_status, mu_control_plane, mu_issues, mu_forum(read/topics), mu_events, mu_runs(read), mu_messaging_setup, mu_identity.",
         extraSystemPromptLines: [
-            "Mutating tool actions are disabled in operator mode; propose mutations via approved /mu commands.",
+            "You have Bash, Read, Write, and Edit tools. Use them to run mu CLI commands, edit config files, and complete tasks directly.",
         ],
     });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@femtomc/mu-agent",
-	"version": "26.2.53",
+	"version": "26.2.55",
 	"description": "Shared agent runtime for mu chat, orchestration roles, and serve extensions.",
 	"keywords": [
 		"mu",
@@ -23,7 +23,7 @@
 		"prompts/**"
 	],
 	"dependencies": {
-		"@femtomc/mu-core": "26.2.53",
+		"@femtomc/mu-core": "26.2.54",
 		"@mariozechner/pi-agent-core": "^0.52.12",
 		"@mariozechner/pi-ai": "^0.52.12",
 		"@mariozechner/pi-coding-agent": "^0.52.12",

package/prompts/skills/messaging-setup-brief.md

@@ -18,6 +18,8 @@ missing fields: {{missing_fields}}
 2) Generate values you CAN create yourself (e.g. webhook_secret — run `openssl rand -hex 32` via Bash).
 3) Write config via mu_messaging_setup tool: call mu_messaging_setup(action="apply", adapter="{{adapter_id}}", fields={...}) with ALL missing field values. This writes config and reloads the control plane in one step.
 4) After config is applied, call provider APIs (e.g. Telegram setWebhook) via Bash/curl.
-5) Run {{verify_command}} to confirm everything works.
+5) Link an identity binding via mu_identity tool: call mu_identity(action="link", channel="{{adapter_id}}", actor_id="<actor>", tenant_id="<tenant>") — do NOT use `mu control link` CLI.
+6) Run {{verify_command}} to confirm everything works.
 
 Do NOT give the user copy-paste commands or tutorials. Do the work yourself.
+For identity operations, always use the mu_identity tool (not `mu control link` or direct .mu file access).