@geminixiang/mikan 1.0.0-beta.46 → 1.0.0-beta.47

package/dist/mcp/open-connector.js

@@ -0,0 +1,203 @@
+import { Type } from "@sinclair/typebox";
+import { join } from "node:path";
+import { readEnv } from "../env-manifest.js";
+import * as log from "../log.js";
+import { atomicWritePrivateFile, ensureDirExists, isRecord, readJsonSchemaFileIfExists, } from "../utils/file-guards.js";
+const OPEN_CONNECTOR_SERVER = "open-connector";
+const TOKEN_STATE_FILE = "open-connector-runtime-token.json";
+const REQUEST_TIMEOUT_MS = 10_000;
+const pendingTokens = new Map();
+const CONNECTION_AWARE_TOOLS = new Set(["get_action_guide", "execute_action"]);
+const RuntimeTokenStateSchema = Type.Object({
+    version: Type.Literal(1),
+    origin: Type.String(),
+    name: Type.String(),
+    id: Type.String(),
+    token: Type.String(),
+}, { additionalProperties: false });
+function readRuntimeTokenState(path) {
+    return readJsonSchemaFileIfExists(path, RuntimeTokenStateSchema, (detail) => `Malformed OpenConnector runtime token state at ${path}: ${detail}`);
+}
+function readUniqueConnectionName(result, service) {
+    if (!isRecord(result) || !Array.isArray(result.content))
+        return undefined;
+    const text = result.content.find((part) => isRecord(part) && part.type === "text" && typeof part.text === "string")?.text;
+    if (!text)
+        return undefined;
+    try {
+        const payload = JSON.parse(text);
+        if (!isRecord(payload))
+            return undefined;
+        const connections = Array.isArray(payload.data)
+            ? payload.data
+            : Array.isArray(payload.connections)
+                ? payload.connections
+                : undefined;
+        if (!connections)
+            return undefined;
+        const names = new Set(connections.flatMap((connection) => isRecord(connection) &&
+            connection.service === service &&
+            typeof connection.connectionName === "string"
+            ? [connection.connectionName]
+            : []));
+        return names.size === 1 ? names.values().next().value : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Fill an omitted connection only when OpenConnector reports exactly one
+ * candidate for the action's service. Multiple-account selection remains an
+ * explicit agent decision. */
+export async function prepareOpenConnectorToolArguments(client, serverName, toolName, params, signal) {
+    if (serverName !== OPEN_CONNECTOR_SERVER ||
+        !CONNECTION_AWARE_TOOLS.has(toolName) ||
+        typeof params.connectionName === "string" ||
+        typeof params.actionId !== "string") {
+        return params;
+    }
+    const service = params.actionId.split(".", 1)[0];
+    if (!service)
+        return params;
+    const result = await client.callTool({ name: "list_connections", arguments: { service } }, undefined, { timeout: REQUEST_TIMEOUT_MS, ...(signal ? { signal } : {}) });
+    const connectionName = readUniqueConnectionName(result, service);
+    return connectionName ? { ...params, connectionName } : params;
+}
+function stringArray(value, field) {
+    if (!Array.isArray(value) || !value.every((item) => typeof item === "string")) {
+        throw new Error(`OpenConnector returned an invalid ${field}`);
+    }
+    return value;
+}
+async function readJson(response, operation) {
+    if (!response.ok) {
+        throw new Error(`OpenConnector ${operation} failed with HTTP ${response.status}`);
+    }
+    try {
+        return await response.json();
+    }
+    catch (error) {
+        throw new Error(`OpenConnector ${operation} returned invalid JSON`, { cause: error });
+    }
+}
+function requestSignal(signal) {
+    const timeout = AbortSignal.timeout(REQUEST_TIMEOUT_MS);
+    return signal ? AbortSignal.any([signal, timeout]) : timeout;
+}
+async function createRuntimeToken(origin, adminToken, name, signal) {
+    const headers = { Authorization: `Bearer ${adminToken}` };
+    const policyValue = await readJson(await fetch(new URL("/api/runtime-policy", origin), {
+        headers,
+        signal: requestSignal(signal),
+    }), "runtime policy request");
+    if (!isRecord(policyValue) || !isRecord(policyValue.deployment)) {
+        throw new Error("OpenConnector returned an invalid runtime policy");
+    }
+    const deployment = policyValue.deployment;
+    const responseValue = await readJson(await fetch(new URL("/api/runtime-tokens", origin), {
+        method: "POST",
+        headers: { ...headers, "Content-Type": "application/json" },
+        body: JSON.stringify({
+            name,
+            allowedActions: stringArray(deployment.allowedActions, "allowedActions policy"),
+            blockedActions: stringArray(deployment.blockedActions, "blockedActions policy"),
+            allowedProxies: stringArray(deployment.allowedProxies, "allowedProxies policy"),
+        }),
+        signal: requestSignal(signal),
+    }), "runtime token creation");
+    if (!isRecord(responseValue) ||
+        typeof responseValue.token !== "string" ||
+        !responseValue.token.startsWith("oct_") ||
+        !isRecord(responseValue.record) ||
+        typeof responseValue.record.id !== "string" ||
+        responseValue.record.name !== name) {
+        throw new Error("OpenConnector returned an invalid runtime token");
+    }
+    return {
+        version: 1,
+        origin,
+        name,
+        id: responseValue.record.id,
+        token: responseValue.token,
+    };
+}
+function disabledServer(servers, config) {
+    return { ...servers, [OPEN_CONNECTOR_SERVER]: { ...config, disabled: true } };
+}
+async function loadOrCreateRuntimeToken(office, origin, adminToken, name, signal) {
+    const statePath = join(office.stateDir, TOKEN_STATE_FILE);
+    const state = readRuntimeTokenState(statePath);
+    if (state) {
+        if (state.origin !== origin || state.name !== name) {
+            throw new Error(`OpenConnector runtime token state does not match ${name}`);
+        }
+        return state;
+    }
+    const key = `${origin}:${office.key}`;
+    const pending = pendingTokens.get(key);
+    if (pending)
+        return pending;
+    const creation = (async () => {
+        const current = readRuntimeTokenState(statePath);
+        if (current)
+            return current;
+        const created = await createRuntimeToken(origin, adminToken, name, signal);
+        ensureDirExists(office.stateDir);
+        atomicWritePrivateFile(statePath, `${JSON.stringify(created, null, 2)}\n`);
+        log.logInfo(`[${office.address.conversationId}] Created OpenConnector runtime token ${created.id}`);
+        return created;
+    })();
+    pendingTokens.set(key, creation);
+    try {
+        return await creation;
+    }
+    finally {
+        pendingTokens.delete(key);
+    }
+}
+/**
+ * Replace the deployment-wide OpenConnector bearer token with one scoped to
+ * this Slack Conversation office. The privileged admin token is read only at
+ * this host boundary and is never written into settings, Vault, or a sandbox.
+ */
+export async function provisionOfficeOpenConnectorToken(office, platformWorkspaceId, servers, signal) {
+    const config = servers?.[OPEN_CONNECTOR_SERVER];
+    const adminToken = readEnv("OPENCONNECTOR_ADMIN_TOKEN");
+    if (!config || config.disabled || !adminToken || office.address.platform !== "slack") {
+        return servers;
+    }
+    const configuredOrigin = readEnv("OPENCONNECTOR_ORIGIN");
+    if (!configuredOrigin || !URL.canParse(configuredOrigin)) {
+        log.logWarning(`[${office.address.conversationId}] OpenConnector token provisioning skipped`, "OPENCONNECTOR_ORIGIN is missing or invalid");
+        return disabledServer(servers, config);
+    }
+    if (!platformWorkspaceId) {
+        log.logWarning(`[${office.address.conversationId}] OpenConnector token provisioning skipped`, "Slack workspace ID is unavailable");
+        return disabledServer(servers, config);
+    }
+    if (!config.url) {
+        log.logWarning(`[${office.address.conversationId}] OpenConnector token provisioning skipped`, "the open-connector server is not configured for HTTP");
+        return disabledServer(servers, config);
+    }
+    try {
+        const endpoint = new URL(config.url);
+        const origin = new URL(configuredOrigin).origin;
+        if (endpoint.origin !== origin) {
+            throw new Error("the MCP endpoint does not match the deployment-owned OpenConnector origin");
+        }
+        const name = `mikan:slack:${platformWorkspaceId}:${office.address.conversationId}`;
+        const state = await loadOrCreateRuntimeToken(office, origin, adminToken, name, signal);
+        return {
+            ...servers,
+            [OPEN_CONNECTOR_SERVER]: {
+                ...config,
+                headers: { ...config.headers, Authorization: `Bearer ${state.token}` },
+            },
+        };
+    }
+    catch (error) {
+        log.logWarning(`[${office.address.conversationId}] OpenConnector token provisioning failed`, error instanceof Error ? error.message : String(error));
+        return disabledServer(servers, config);
+    }
+}
+//# sourceMappingURL=open-connector.js.map

package/dist/mcp/open-connector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-connector.js","sourceRoot":"","sources":["../../src/mcp/open-connector.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAe,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,KAAK,GAAG,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,QAAQ,EACR,0BAA0B,GAC3B,MAAM,yBAAyB,CAAC;AAGjC,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AAC/C,MAAM,gBAAgB,GAAG,mCAAmC,CAAC;AAC7D,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAsC,CAAC;AACpE,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAE/E,MAAM,uBAAuB,GAAG,IAAI,CAAC,MAAM,CACzC;IACE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACxB,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;IACrB,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;IACnB,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE;CACrB,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC;AAIF,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAO,0BAA0B,CAC/B,IAAI,EACJ,uBAAuB,EACvB,CAAC,MAAM,EAAE,EAAE,CAAC,kDAAkD,IAAI,KAAK,MAAM,EAAE,CAChF,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAe,EAAE,OAAe;IAChE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAC9B,CAAC,IAAI,EAA0C,EAAE,CAC/C,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAC1E,EAAE,IAAI,CAAC;IACR,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QACzC,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;YAC7C,CAAC,CAAC,OAAO,CAAC,IAAI;YACd,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;gBAClC,CAAC,CAAC,OAAO,CAAC,WAAW;gBACrB,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CACjC,QAAQ,CAAC,UAAU,CAAC;YACpB,UAAU,CAAC,OAAO,KAAK,OAAO;YAC9B,OAAO,UAAU,CAAC,cAAc,KAAK,QAAQ;YAC3C,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC;YAC7B,CAAC,CAAC,EAAE,CACP,CACF,CAAC;QACF,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;8BAE8B;AAC9B,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,MAAgC,EAChC,UAAkB,EAClB,QAAgB,EAChB,MAA+B,EAC/B,MAAoB;IAEpB,IACE,UAAU,KAAK,qBAAqB;QACpC,CAAC,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC;QACrC,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ;QACzC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,EACnC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAClC,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,EACpD,SAAS,EACT,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAC/D,CAAC;IACF,MAAM,cAAc,GAAG,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjE,OAAO,cAAc,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AACjE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,qCAAqC,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB,EAAE,SAAiB;IAC3D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,iBAAiB,SAAS,qBAAqB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,iBAAiB,SAAS,wBAAwB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAAoB;IACzC,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC/D,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,MAAc,EACd,UAAkB,EAClB,IAAY,EACZ,MAAoB;IAEpB,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,UAAU,UAAU,EAAE,EAAE,CAAC;IAC1D,MAAM,WAAW,GAAG,MAAM,QAAQ,CAChC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,qBAAqB,EAAE,MAAM,CAAC,EAAE;QAClD,OAAO;QACP,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC;KAC9B,CAAC,EACF,wBAAwB,CACzB,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC;IAC1C,MAAM,aAAa,GAAG,MAAM,QAAQ,CAClC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,qBAAqB,EAAE,MAAM,CAAC,EAAE;QAClD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC3D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,IAAI;YACJ,cAAc,EAAE,WAAW,CAAC,UAAU,CAAC,cAAc,EAAE,uBAAuB,CAAC;YAC/E,cAAc,EAAE,WAAW,CAAC,UAAU,CAAC,cAAc,EAAE,uBAAuB,CAAC;YAC/E,cAAc,EAAE,WAAW,CAAC,UAAU,CAAC,cAAc,EAAE,uBAAuB,CAAC;SAChF,CAAC;QACF,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC;KAC9B,CAAC,EACF,wBAAwB,CACzB,CAAC;IACF,IACE,CAAC,QAAQ,CAAC,aAAa,CAAC;QACxB,OAAO,aAAa,CAAC,KAAK,KAAK,QAAQ;QACvC,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QACvC,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC;QAC/B,OAAO,aAAa,CAAC,MAAM,CAAC,EAAE,KAAK,QAAQ;QAC3C,aAAa,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,EAClC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO;QACL,OAAO,EAAE,CAAC;QACV,MAAM;QACN,IAAI;QACJ,EAAE,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE;QAC3B,KAAK,EAAE,aAAa,CAAC,KAAK;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,OAAwC,EACxC,MAAuB;IAEvB,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC,qBAAqB,CAAC,EAAE,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;AAChF,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,MAAc,EACd,MAAc,EACd,UAAkB,EAClB,IAAY,EACZ,MAAoB;IAEpB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,oDAAoD,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAE5B,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;QAC3B,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3E,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjC,sBAAsB,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3E,GAAG,CAAC,OAAO,CACT,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,yCAAyC,OAAO,CAAC,EAAE,EAAE,CACvF,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,EAAE,CAAC;IACL,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC;IACxB,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,MAAc,EACd,mBAAuC,EACvC,OAAoD,EACpD,MAAoB;IAEpB,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC,qBAAqB,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACrF,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,gBAAgB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACzD,IAAI,CAAC,gBAAgB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,UAAU,CACZ,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,4CAA4C,EAC7E,4CAA4C,CAC7C,CAAC;QACF,OAAO,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,GAAG,CAAC,UAAU,CACZ,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,4CAA4C,EAC7E,mCAAmC,CACpC,CAAC;QACF,OAAO,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAChB,GAAG,CAAC,UAAU,CACZ,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,4CAA4C,EAC7E,sDAAsD,CACvD,CAAC;QACF,OAAO,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC;QAChD,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,IAAI,GAAG,eAAe,mBAAmB,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QACnF,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACvF,OAAO;YACL,GAAG,OAAO;YACV,CAAC,qBAAqB,CAAC,EAAE;gBACvB,GAAG,MAAM;gBACT,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,KAAK,EAAE,EAAE;aACvE;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,UAAU,CACZ,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,2CAA2C,EAC5E,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QACF,OAAO,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;AACH,CAAC","sourcesContent":["import type { Client } from \"@modelcontextprotocol/sdk/client/index.js\";\nimport { Type, type Static } from \"@sinclair/typebox\";\nimport { join } from \"node:path\";\nimport { readEnv } from \"../env-manifest.js\";\nimport * as log from \"../log.js\";\nimport type { Office } from \"../office/index.js\";\nimport {\n  atomicWritePrivateFile,\n  ensureDirExists,\n  isRecord,\n  readJsonSchemaFileIfExists,\n} from \"../utils/file-guards.js\";\nimport type { McpServerConfig } from \"./types.js\";\n\nconst OPEN_CONNECTOR_SERVER = \"open-connector\";\nconst TOKEN_STATE_FILE = \"open-connector-runtime-token.json\";\nconst REQUEST_TIMEOUT_MS = 10_000;\nconst pendingTokens = new Map<string, Promise<RuntimeTokenState>>();\nconst CONNECTION_AWARE_TOOLS = new Set([\"get_action_guide\", \"execute_action\"]);\n\nconst RuntimeTokenStateSchema = Type.Object(\n  {\n    version: Type.Literal(1),\n    origin: Type.String(),\n    name: Type.String(),\n    id: Type.String(),\n    token: Type.String(),\n  },\n  { additionalProperties: false },\n);\n\ntype RuntimeTokenState = Static<typeof RuntimeTokenStateSchema>;\n\nfunction readRuntimeTokenState(path: string) {\n  return readJsonSchemaFileIfExists(\n    path,\n    RuntimeTokenStateSchema,\n    (detail) => `Malformed OpenConnector runtime token state at ${path}: ${detail}`,\n  );\n}\n\nfunction readUniqueConnectionName(result: unknown, service: string) {\n  if (!isRecord(result) || !Array.isArray(result.content)) return undefined;\n  const text = result.content.find(\n    (part): part is { type: \"text\"; text: string } =>\n      isRecord(part) && part.type === \"text\" && typeof part.text === \"string\",\n  )?.text;\n  if (!text) return undefined;\n  try {\n    const payload: unknown = JSON.parse(text);\n    if (!isRecord(payload)) return undefined;\n    const connections = Array.isArray(payload.data)\n      ? payload.data\n      : Array.isArray(payload.connections)\n        ? payload.connections\n        : undefined;\n    if (!connections) return undefined;\n    const names = new Set(\n      connections.flatMap((connection) =>\n        isRecord(connection) &&\n        connection.service === service &&\n        typeof connection.connectionName === \"string\"\n          ? [connection.connectionName]\n          : [],\n      ),\n    );\n    return names.size === 1 ? names.values().next().value : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\n/** Fill an omitted connection only when OpenConnector reports exactly one\n * candidate for the action's service. Multiple-account selection remains an\n * explicit agent decision. */\nexport async function prepareOpenConnectorToolArguments(\n  client: Pick<Client, \"callTool\">,\n  serverName: string,\n  toolName: string,\n  params: Record<string, unknown>,\n  signal?: AbortSignal,\n): Promise<Record<string, unknown>> {\n  if (\n    serverName !== OPEN_CONNECTOR_SERVER ||\n    !CONNECTION_AWARE_TOOLS.has(toolName) ||\n    typeof params.connectionName === \"string\" ||\n    typeof params.actionId !== \"string\"\n  ) {\n    return params;\n  }\n  const service = params.actionId.split(\".\", 1)[0];\n  if (!service) return params;\n  const result = await client.callTool(\n    { name: \"list_connections\", arguments: { service } },\n    undefined,\n    { timeout: REQUEST_TIMEOUT_MS, ...(signal ? { signal } : {}) },\n  );\n  const connectionName = readUniqueConnectionName(result, service);\n  return connectionName ? { ...params, connectionName } : params;\n}\n\nfunction stringArray(value: unknown, field: string): string[] {\n  if (!Array.isArray(value) || !value.every((item) => typeof item === \"string\")) {\n    throw new Error(`OpenConnector returned an invalid ${field}`);\n  }\n  return value;\n}\n\nasync function readJson(response: Response, operation: string): Promise<unknown> {\n  if (!response.ok) {\n    throw new Error(`OpenConnector ${operation} failed with HTTP ${response.status}`);\n  }\n  try {\n    return await response.json();\n  } catch (error) {\n    throw new Error(`OpenConnector ${operation} returned invalid JSON`, { cause: error });\n  }\n}\n\nfunction requestSignal(signal?: AbortSignal): AbortSignal {\n  const timeout = AbortSignal.timeout(REQUEST_TIMEOUT_MS);\n  return signal ? AbortSignal.any([signal, timeout]) : timeout;\n}\n\nasync function createRuntimeToken(\n  origin: string,\n  adminToken: string,\n  name: string,\n  signal?: AbortSignal,\n): Promise<RuntimeTokenState> {\n  const headers = { Authorization: `Bearer ${adminToken}` };\n  const policyValue = await readJson(\n    await fetch(new URL(\"/api/runtime-policy\", origin), {\n      headers,\n      signal: requestSignal(signal),\n    }),\n    \"runtime policy request\",\n  );\n  if (!isRecord(policyValue) || !isRecord(policyValue.deployment)) {\n    throw new Error(\"OpenConnector returned an invalid runtime policy\");\n  }\n  const deployment = policyValue.deployment;\n  const responseValue = await readJson(\n    await fetch(new URL(\"/api/runtime-tokens\", origin), {\n      method: \"POST\",\n      headers: { ...headers, \"Content-Type\": \"application/json\" },\n      body: JSON.stringify({\n        name,\n        allowedActions: stringArray(deployment.allowedActions, \"allowedActions policy\"),\n        blockedActions: stringArray(deployment.blockedActions, \"blockedActions policy\"),\n        allowedProxies: stringArray(deployment.allowedProxies, \"allowedProxies policy\"),\n      }),\n      signal: requestSignal(signal),\n    }),\n    \"runtime token creation\",\n  );\n  if (\n    !isRecord(responseValue) ||\n    typeof responseValue.token !== \"string\" ||\n    !responseValue.token.startsWith(\"oct_\") ||\n    !isRecord(responseValue.record) ||\n    typeof responseValue.record.id !== \"string\" ||\n    responseValue.record.name !== name\n  ) {\n    throw new Error(\"OpenConnector returned an invalid runtime token\");\n  }\n  return {\n    version: 1,\n    origin,\n    name,\n    id: responseValue.record.id,\n    token: responseValue.token,\n  };\n}\n\nfunction disabledServer(\n  servers: Record<string, McpServerConfig>,\n  config: McpServerConfig,\n): Record<string, McpServerConfig> {\n  return { ...servers, [OPEN_CONNECTOR_SERVER]: { ...config, disabled: true } };\n}\n\nasync function loadOrCreateRuntimeToken(\n  office: Office,\n  origin: string,\n  adminToken: string,\n  name: string,\n  signal?: AbortSignal,\n): Promise<RuntimeTokenState> {\n  const statePath = join(office.stateDir, TOKEN_STATE_FILE);\n  const state = readRuntimeTokenState(statePath);\n  if (state) {\n    if (state.origin !== origin || state.name !== name) {\n      throw new Error(`OpenConnector runtime token state does not match ${name}`);\n    }\n    return state;\n  }\n\n  const key = `${origin}:${office.key}`;\n  const pending = pendingTokens.get(key);\n  if (pending) return pending;\n\n  const creation = (async () => {\n    const current = readRuntimeTokenState(statePath);\n    if (current) return current;\n    const created = await createRuntimeToken(origin, adminToken, name, signal);\n    ensureDirExists(office.stateDir);\n    atomicWritePrivateFile(statePath, `${JSON.stringify(created, null, 2)}\\n`);\n    log.logInfo(\n      `[${office.address.conversationId}] Created OpenConnector runtime token ${created.id}`,\n    );\n    return created;\n  })();\n  pendingTokens.set(key, creation);\n  try {\n    return await creation;\n  } finally {\n    pendingTokens.delete(key);\n  }\n}\n\n/**\n * Replace the deployment-wide OpenConnector bearer token with one scoped to\n * this Slack Conversation office. The privileged admin token is read only at\n * this host boundary and is never written into settings, Vault, or a sandbox.\n */\nexport async function provisionOfficeOpenConnectorToken(\n  office: Office,\n  platformWorkspaceId: string | undefined,\n  servers: Record<string, McpServerConfig> | undefined,\n  signal?: AbortSignal,\n): Promise<Record<string, McpServerConfig> | undefined> {\n  const config = servers?.[OPEN_CONNECTOR_SERVER];\n  const adminToken = readEnv(\"OPENCONNECTOR_ADMIN_TOKEN\");\n  if (!config || config.disabled || !adminToken || office.address.platform !== \"slack\") {\n    return servers;\n  }\n  const configuredOrigin = readEnv(\"OPENCONNECTOR_ORIGIN\");\n  if (!configuredOrigin || !URL.canParse(configuredOrigin)) {\n    log.logWarning(\n      `[${office.address.conversationId}] OpenConnector token provisioning skipped`,\n      \"OPENCONNECTOR_ORIGIN is missing or invalid\",\n    );\n    return disabledServer(servers, config);\n  }\n  if (!platformWorkspaceId) {\n    log.logWarning(\n      `[${office.address.conversationId}] OpenConnector token provisioning skipped`,\n      \"Slack workspace ID is unavailable\",\n    );\n    return disabledServer(servers, config);\n  }\n  if (!config.url) {\n    log.logWarning(\n      `[${office.address.conversationId}] OpenConnector token provisioning skipped`,\n      \"the open-connector server is not configured for HTTP\",\n    );\n    return disabledServer(servers, config);\n  }\n\n  try {\n    const endpoint = new URL(config.url);\n    const origin = new URL(configuredOrigin).origin;\n    if (endpoint.origin !== origin) {\n      throw new Error(\"the MCP endpoint does not match the deployment-owned OpenConnector origin\");\n    }\n    const name = `mikan:slack:${platformWorkspaceId}:${office.address.conversationId}`;\n    const state = await loadOrCreateRuntimeToken(office, origin, adminToken, name, signal);\n    return {\n      ...servers,\n      [OPEN_CONNECTOR_SERVER]: {\n        ...config,\n        headers: { ...config.headers, Authorization: `Bearer ${state.token}` },\n      },\n    };\n  } catch (error) {\n    log.logWarning(\n      `[${office.address.conversationId}] OpenConnector token provisioning failed`,\n      error instanceof Error ? error.message : String(error),\n    );\n    return disabledServer(servers, config);\n  }\n}\n"]}

package/dist/mcp/types.d.ts

@@ -49,10 +49,16 @@ export interface McpLoadError {
     server: string;
     error: string;
 }
+export interface McpServerInstruction {
+    server: string;
+    text: string;
+}
 export interface McpToolsResult {
     /** Tools namespaced `mcp__<server>__<tool>`, ready for the agent tool list. */
     tools: AgentTool<TSchema>[];
     errors: McpLoadError[];
+    /** Admin-approved server guidance for operating its tools. */
+    instructions: McpServerInstruction[];
     /** Close all server connections (and kill stdio child processes). */
     dispose: () => Promise<void>;
 }

package/dist/mcp/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/mcp/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAEjD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,eAAe;IAC9B,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,4EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,sDAAsD;IACtD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,KAAK,yBAAyB,GAAG,KAAK,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE1D,UAAU,mBAAmB;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,yBAAyB,CAAC;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,eAAe,CAAC;IACxB,WAAW,EAAE,mBAAmB,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,+EAA+E;IAC/E,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5B,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,qEAAqE;IACrE,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/mcp/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAEjD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,eAAe;IAC9B,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,4EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,sDAAsD;IACtD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,KAAK,yBAAyB,GAAG,KAAK,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE1D,UAAU,mBAAmB;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,yBAAyB,CAAC;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,eAAe,CAAC;IACxB,WAAW,EAAE,mBAAmB,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,+EAA+E;IAC/E,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5B,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,8DAA8D;IAC9D,YAAY,EAAE,oBAAoB,EAAE,CAAC;IACrC,qEAAqE;IACrE,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B"}

package/dist/mcp/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/mcp/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { AgentTool } from \"@earendil-works/pi-agent-core\";\nimport type { TSchema } from \"@sinclair/typebox\";\n\n/**\n * MCP (Model Context Protocol) server configuration and load results.\n *\n * A server entry is either stdio (`command` + optional `args`/`env`) or\n * streamable HTTP (`url` + optional `headers`). Exactly one of `command`\n * or `url` must be set — the settings schema keeps both optional so the\n * file stays object-rooted and forgiving; `loadMcpTools` enforces the\n * exclusivity at runtime.\n *\n * Credentials (API keys in `env`/`headers`) stay in host-side settings and\n * the MCP server process; the model sees only tool names and schemas.\n */\nexport interface McpServerConfig {\n  /** stdio transport: executable to spawn on the host. */\n  command?: string;\n  args?: string[];\n  /** Extra environment for the spawned server, merged over a safe default. */\n  env?: Record<string, string>;\n  /** streamable-HTTP transport: server endpoint URL. */\n  url?: string;\n  headers?: Record<string, string>;\n  /** Disable without deleting — lets a conversation turn off a global server. */\n  disabled?: boolean;\n}\n\ntype McpPresetCredentialTarget = \"env\" | \"header\" | \"url\";\n\ninterface McpPresetCredential {\n  key: string;\n  label: string;\n  description: string;\n  target: McpPresetCredentialTarget;\n  required: boolean;\n  secret: boolean;\n  valuePrefix?: string;\n}\n\nexport interface McpPreset {\n  id: string;\n  name: string;\n  description: string;\n  category: string;\n  serverName: string;\n  sourceUrl: string;\n  setupUrl: string;\n  server: McpServerConfig;\n  credentials: McpPresetCredential[];\n}\n\nexport interface McpLoadError {\n  server: string;\n  error: string;\n}\n\nexport interface McpToolsResult {\n  /** Tools namespaced `mcp__<server>__<tool>`, ready for the agent tool list. */\n  tools: AgentTool<TSchema>[];\n  errors: McpLoadError[];\n  /** Close all server connections (and kill stdio child processes). */\n  dispose: () => Promise<void>;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/mcp/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { AgentTool } from \"@earendil-works/pi-agent-core\";\nimport type { TSchema } from \"@sinclair/typebox\";\n\n/**\n * MCP (Model Context Protocol) server configuration and load results.\n *\n * A server entry is either stdio (`command` + optional `args`/`env`) or\n * streamable HTTP (`url` + optional `headers`). Exactly one of `command`\n * or `url` must be set — the settings schema keeps both optional so the\n * file stays object-rooted and forgiving; `loadMcpTools` enforces the\n * exclusivity at runtime.\n *\n * Credentials (API keys in `env`/`headers`) stay in host-side settings and\n * the MCP server process; the model sees only tool names and schemas.\n */\nexport interface McpServerConfig {\n  /** stdio transport: executable to spawn on the host. */\n  command?: string;\n  args?: string[];\n  /** Extra environment for the spawned server, merged over a safe default. */\n  env?: Record<string, string>;\n  /** streamable-HTTP transport: server endpoint URL. */\n  url?: string;\n  headers?: Record<string, string>;\n  /** Disable without deleting — lets a conversation turn off a global server. */\n  disabled?: boolean;\n}\n\ntype McpPresetCredentialTarget = \"env\" | \"header\" | \"url\";\n\ninterface McpPresetCredential {\n  key: string;\n  label: string;\n  description: string;\n  target: McpPresetCredentialTarget;\n  required: boolean;\n  secret: boolean;\n  valuePrefix?: string;\n}\n\nexport interface McpPreset {\n  id: string;\n  name: string;\n  description: string;\n  category: string;\n  serverName: string;\n  sourceUrl: string;\n  setupUrl: string;\n  server: McpServerConfig;\n  credentials: McpPresetCredential[];\n}\n\nexport interface McpLoadError {\n  server: string;\n  error: string;\n}\n\nexport interface McpServerInstruction {\n  server: string;\n  text: string;\n}\n\nexport interface McpToolsResult {\n  /** Tools namespaced `mcp__<server>__<tool>`, ready for the agent tool list. */\n  tools: AgentTool<TSchema>[];\n  errors: McpLoadError[];\n  /** Admin-approved server guidance for operating its tools. */\n  instructions: McpServerInstruction[];\n  /** Close all server connections (and kill stdio child processes). */\n  dispose: () => Promise<void>;\n}\n"]}

package/dist/packages/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/packages/index.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAEV,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EAEnB,eAAe,EACf,gBAAgB,EAChB,YAAY,EAEZ,mBAAmB,EAEnB,kBAAkB,EAClB,YAAY,EACZ,sBAAsB,EACtB,gBAAgB,EACjB,MAAM,YAAY,CAAC;AAOpB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAuCjD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAsCxD;AA+CD;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,GAAG,eAAe,CAIpE;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAc/C;AAgBD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAKzD;AAID;;;;;;;;;;;;GAYG;AAEH,YAAY,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAOrD;;;;;;;;;;;;;;GAcG;AACH;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,aAAa,GAAG,SAAS,EAClC,QAAQ,EAAE,MAAM,GACf,MAAM,CAIR;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAS/E;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,mBAAmB,EAC3B,OAAO,EAAE,kBAAkB,GAC1B,mBAAmB,CAerB;AAgOD;;;;;;;;;GASG;AAEH,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD;;;;GAIG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,gBAAgB,CAAC,CAiB3B;AAgED;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,YAAY,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAuB3E,+DAA+D;AAC/D,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,gBAAgB,GACzB,KAAK,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC,CAM3D;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,sBAAsB,GAAG,gBAAgB,CA+B7F;AAiFD;;;;;;;;;GASG;AAEH,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAE1E;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,KAAK,EAAE,YAAY,EACnB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,mBAAmB,GAC3B,kBAAkB,CAepB;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,YAAY,EACnB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAMT;AAED,uFAAuF;AACvF,wBAAgB,cAAc,CAC5B,KAAK,EAAE,YAAY,EACnB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,mBAAmB,GAC3B,kBAAkB,CAWpB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/packages/index.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAEV,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EAEnB,eAAe,EACf,gBAAgB,EAChB,YAAY,EAEZ,mBAAmB,EAEnB,kBAAkB,EAClB,YAAY,EACZ,sBAAsB,EACtB,gBAAgB,EACjB,MAAM,YAAY,CAAC;AAepB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAuCjD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAsCxD;AA+CD;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,GAAG,eAAe,CAIpE;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAc/C;AAgBD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAKzD;AAID;;;;;;;;;;;;GAYG;AAEH,YAAY,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAMrD;;;;;;;;;;;;;;GAcG;AACH;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,aAAa,GAAG,SAAS,EAClC,QAAQ,EAAE,MAAM,GACf,MAAM,CAIR;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAS/E;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,mBAAmB,EAC3B,OAAO,EAAE,kBAAkB,GAC1B,mBAAmB,CAerB;AA8LD;;;;;;;;;GASG;AAEH,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD;;;;GAIG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,gBAAgB,CAAC,CAiB3B;AAkED;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,YAAY,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAuB3E,+DAA+D;AAC/D,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,gBAAgB,GACzB,KAAK,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC,CAM3D;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,sBAAsB,GAAG,gBAAgB,CA+B7F;AA2FD;;;;;;;;;GASG;AAEH,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAE1E;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,KAAK,EAAE,YAAY,EACnB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,mBAAmB,GAC3B,kBAAkB,CAepB;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,YAAY,EACnB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAMT;AAED,uFAAuF;AACvF,wBAAgB,cAAc,CAC5B,KAAK,EAAE,YAAY,EACnB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,mBAAmB,GAC3B,kBAAkB,CAWpB"}

package/dist/packages/index.js

@@ -7,7 +7,7 @@
 import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { execFileSync } from "node:child_process";
 import { createHash } from "node:crypto";
-import { cpSync, existsSync, realpathSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { cpSync, existsSync, lstatSync, realpathSync, rmSync, statSync, writeFileSync, } from "node:fs";
 import { ensureDirExists, readTextFileIfExists } from "../utils/file-guards.js";
 import * as log from "../log.js";
 import { officeStateDir } from "../office/index.js";
@@ -192,7 +192,6 @@ export function formatSource(parsed) {
 }
 /** Git operations get a bounded wall clock so a hung remote cannot wedge a save. */
 const GIT_TIMEOUT_MS = 120_000;
-const NPM_TIMEOUT_MS = 300_000;
 const MATERIALIZED_REF_FILE = "mikan-ref";
 /**
  * How far materialization may go to produce the package's files.
@@ -285,7 +284,7 @@ function materializeGit(parsed, scopeDir, mode) {
         throw new Error(`Not fetched on this host yet: ${describeRef(parsed)}`);
     }
     // An incomplete checkout must not retain a marker from an earlier attempt:
-    // otherwise a retry could mistake a failed dependency install for success.
+    // otherwise a retry could mistake an interrupted fetch or checkout for success.
     if (alreadyCloned)
         rmSync(markerPath, { force: true });
     if (!alreadyCloned) {
@@ -315,9 +314,8 @@ function materializeGit(parsed, scopeDir, mode) {
     }
     git(cloneDir, ["checkout", "-q", "--detach", "FETCH_HEAD"]);
     const dir = resolveSubpath(cloneDir, parsed);
-    installDependencies(dir);
     // This is the completion marker, not merely a fetched-ref marker. Write it
-    // last so a failed npm install is retried by the next materialization.
+    // only after checkout and subpath validation have both succeeded.
     writeFileSync(markerPath, `${requestedRef}\n`);
     return dir;
 }
@@ -402,41 +400,6 @@ function resolveSubpath(cloneDir, parsed) {
     }
     return dir;
 }
-/**
- * Install runtime dependencies when the package declares any. This runs npm
- * on the host against code that was just fetched from a remote, which is the
- * same trust level as importing the package itself — but it is worth being
- * explicit that it happens, because it also runs the dependencies' install
- * scripts.
- */
-function installDependencies(dir) {
-    if (!hasDependencies(dir))
-        return;
-    log.logInfo(`Installing package dependencies in ${dir}`);
-    try {
-        execFileSync("npm", ["install", "--omit=dev", "--no-audit", "--no-fund"], {
-            cwd: dir,
-            timeout: NPM_TIMEOUT_MS,
-            encoding: "utf-8",
-            stdio: ["ignore", "pipe", "pipe"],
-        });
-    }
-    catch (err) {
-        throw new Error(`npm install failed for the package: ${gitErrorText(err)}`, { cause: err });
-    }
-}
-function hasDependencies(dir) {
-    const raw = readTextFileIfExists(join(dir, "package.json"));
-    if (raw === undefined)
-        return false;
-    try {
-        const pkg = JSON.parse(raw);
-        return Boolean(pkg.dependencies && Object.keys(pkg.dependencies).length > 0);
-    }
-    catch {
-        return false;
-    }
-}
 function git(cwd, args) {
     return execFileSync("git", args, {
         cwd,
@@ -525,7 +488,7 @@ async function describe(source, scope, options, shadowedBy) {
 }
 function contributedSkills(dir) {
     const skillsDir = join(dir, "skills");
-    return loadSkillsFromDir({ dir: skillsDir, source: "package" }).skills.map((skill) => skill.name);
+    return loadSkillsFromDir({ dir: skillsDir, source: "package", rejectSymlinks: true }).skills.map((skill) => skill.name);
 }
 /** Conventional resource directory inside a package, mirroring pi's layout. */
 const SKILLS_SUBDIR = "skills";
@@ -561,11 +524,9 @@ export function packageSkillRuntimeDir(slug) {
  * This pure step consumes an already resolved package set and never reaches the network.
  */
 export function conversationPackageSkillMounts(packages) {
-    return packages.skillDirs.map(({ slug, dir }) => ({
-        source: dir,
-        target: packageSkillRuntimeDir(slug),
-        readOnly: true,
-    }));
+    return packages.skillDirs.flatMap(({ slug, dir }) => isNonSymlinkDirectory(dir)
+        ? [{ source: dir, target: packageSkillRuntimeDir(slug), readOnly: true }]
+        : []);
 }
 /**
  * Resolve the package set for one conversation. Reads both scopes' settings,
@@ -633,9 +594,19 @@ function materialize(declaration, options, errors) {
 }
 function packageSkillDir(pkg) {
     const dir = join(pkg.dir, SKILLS_SUBDIR);
-    if (!existsSync(dir) || !statSync(dir).isDirectory())
-        return [];
-    return [{ slug: packageSlug(pkg), dir }];
+    return isNonSymlinkDirectory(dir) ? [{ slug: packageSlug(pkg), dir }] : [];
+}
+function isNonSymlinkDirectory(path) {
+    if (!existsSync(path))
+        return false;
+    try {
+        const stats = lstatSync(path);
+        return !stats.isSymbolicLink() && stats.isDirectory();
+    }
+    catch (err) {
+        log.logWarning(`Could not inspect package skills directory ${path}`, messageOf(err));
+        return false;
+    }
 }
 /**
  * Filesystem-safe, collision-resistant name for a package, used as the mount