@geminixiang/mikan 1.0.0-beta.8 → 1.0.0-beta.80

package/dist/harness/open-connector.d.ts

@@ -0,0 +1,12 @@
+import type { OfficeKey } from "../types.js";
+import type { EnsureDefaultOpenConnectorOptions } from "./types.js";
+export declare function ensureDefaultOpenConnector({ office, platformWorkspaceId, defaultServer, signal, fetch: fetchFn, }: EnsureDefaultOpenConnectorOptions): Promise<void>;
+export interface LegacyTokenMigrationReport {
+    migrated: OfficeKey[];
+    skipped: {
+        key: OfficeKey;
+        reason: string;
+    }[];
+}
+export declare function migrateLegacyOpenConnectorTokens(stateDir: string, defaultUrl: string, workspaceRoot?: string): LegacyTokenMigrationReport;
+//# sourceMappingURL=open-connector.d.ts.map

package/dist/harness/open-connector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-connector.d.ts","sourceRoot":"","sources":["../../src/harness/open-connector.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,KAAK,EAAE,iCAAiC,EAAmB,MAAM,YAAY,CAAC;AAkGrF,wBAAsB,0BAA0B,CAAC,EAC/C,MAAM,EACN,mBAAmB,EACnB,aAAa,EACb,MAAM,EACN,KAAK,EAAE,OAA0B,GAClC,EAAE,iCAAiC,GAAG,OAAO,CAAC,IAAI,CAAC,CA+BnD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtB,OAAO,EAAE;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC/C;AAED,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,aAAa,SAA8B,GAC1C,0BAA0B,CAgD5B"}

package/dist/harness/open-connector.js

@@ -0,0 +1,160 @@
+import { Type } from "typebox";
+import { existsSync, readdirSync, rmSync } from "node:fs";
+import { join } from "node:path";
+import { readEnv } from "../env-manifest.js";
+import * as log from "../log.js";
+import { loadScopeMcpServers, updateConversationSettings } from "../settings/index.js";
+import { readJsonSchemaFileIfExists } from "../file-guards.js";
+import { createWorkspace, isOfficeKey, listRegisteredOffices, officeKey } from "../office/index.js";
+import { errorMessage, isRecord } from "../unknown-values.js";
+const OPEN_CONNECTOR_SERVER = "open-connector";
+const LEGACY_TOKEN_FILE = "open-connector-runtime-token.json";
+const REQUEST_TIMEOUT_MS = 10_000;
+const pending = new Map();
+const LegacyTokenSchema = Type.Object({
+    version: Type.Literal(1),
+    origin: Type.String(),
+    name: Type.String(),
+    id: Type.String(),
+    token: Type.String(),
+}, { additionalProperties: false });
+function stringArray(value, field) {
+    if (!Array.isArray(value) || !value.every((item) => typeof item === "string")) {
+        throw new Error(`OpenConnector returned an invalid ${field}`);
+    }
+    return value;
+}
+async function readJson(response, operation) {
+    if (!response.ok) {
+        throw new Error(`OpenConnector ${operation} failed with HTTP ${response.status}`);
+    }
+    try {
+        return await response.json();
+    }
+    catch (error) {
+        throw new Error(`OpenConnector ${operation} returned invalid JSON`, { cause: error });
+    }
+}
+function requestSignal(signal) {
+    const timeout = AbortSignal.timeout(REQUEST_TIMEOUT_MS);
+    return signal ? AbortSignal.any([signal, timeout]) : timeout;
+}
+async function createRuntimeToken(origin, adminToken, name, fetchFn, signal) {
+    const headers = { Authorization: `Bearer ${adminToken}` };
+    const policyValue = await readJson(await fetchFn(new URL("/api/runtime-policy", origin), {
+        headers,
+        signal: requestSignal(signal),
+    }), "runtime policy request");
+    if (!isRecord(policyValue) || !isRecord(policyValue.deployment)) {
+        throw new Error("OpenConnector returned an invalid runtime policy");
+    }
+    const deployment = policyValue.deployment;
+    const responseValue = await readJson(await fetchFn(new URL("/api/runtime-tokens", origin), {
+        method: "POST",
+        headers: { ...headers, "Content-Type": "application/json" },
+        body: JSON.stringify({
+            name,
+            allowedActions: stringArray(deployment.allowedActions, "allowedActions policy"),
+            blockedActions: stringArray(deployment.blockedActions, "blockedActions policy"),
+            allowedProxies: stringArray(deployment.allowedProxies, "allowedProxies policy"),
+        }),
+        signal: requestSignal(signal),
+    }), "runtime token creation");
+    if (!isRecord(responseValue) ||
+        typeof responseValue.token !== "string" ||
+        !isRecord(responseValue.record) ||
+        responseValue.record.name !== name) {
+        throw new Error("OpenConnector returned an invalid runtime token");
+    }
+    return responseValue.token;
+}
+function defaultEntry(url, token) {
+    return { url, headers: { Authorization: `Bearer ${token}` } };
+}
+function isDeclared(office) {
+    const scopes = loadScopeMcpServers(office);
+    return (Object.hasOwn(scopes.global, OPEN_CONNECTOR_SERVER) ||
+        Object.hasOwn(scopes.conversation, OPEN_CONNECTOR_SERVER));
+}
+export async function ensureDefaultOpenConnector({ office, platformWorkspaceId, defaultServer, signal, fetch: fetchFn = globalThis.fetch, }) {
+    const adminToken = readEnv("OPENCONNECTOR_ADMIN_TOKEN");
+    if (!defaultServer?.url || !adminToken || office.address.platform !== "slack")
+        return;
+    if (!platformWorkspaceId) {
+        log.logWarning(`[${office.address.conversationId}] OpenConnector default skipped`, "Slack workspace ID is unavailable");
+        return;
+    }
+    if (isDeclared(office))
+        return;
+    const inflight = pending.get(office.stateDir);
+    if (inflight)
+        return inflight;
+    const url = defaultServer.url;
+    const task = (async () => {
+        const name = `mikan:slack:${platformWorkspaceId}:${office.address.conversationId}`;
+        const token = await createRuntimeToken(new URL(url).origin, adminToken, name, fetchFn, signal);
+        if (isDeclared(office))
+            return;
+        const current = loadScopeMcpServers(office).conversation;
+        updateConversationSettings(office, {
+            mcpServers: { ...current, [OPEN_CONNECTOR_SERVER]: defaultEntry(url, token) },
+        });
+        log.logInfo(`[${office.address.conversationId}] Provisioned default OpenConnector token`);
+    })();
+    pending.set(office.stateDir, task);
+    try {
+        await task;
+    }
+    finally {
+        pending.delete(office.stateDir);
+    }
+}
+export function migrateLegacyOpenConnectorTokens(stateDir, defaultUrl, workspaceRoot = join(stateDir, "workspace")) {
+    const origin = new URL(defaultUrl).origin;
+    const report = { migrated: [], skipped: [] };
+    const conversationsDir = join(stateDir, "conversations");
+    if (!existsSync(conversationsDir))
+        return report;
+    const workspace = createWorkspace({ root: workspaceRoot, stateDir });
+    const registered = new Map(listRegisteredOffices(stateDir).map((record) => [officeKey(record), record]));
+    for (const entry of readdirSync(conversationsDir, { withFileTypes: true })) {
+        if (!entry.isDirectory() || !isOfficeKey(entry.name))
+            continue;
+        const key = entry.name;
+        const legacyPath = join(conversationsDir, key, LEGACY_TOKEN_FILE);
+        if (!existsSync(legacyPath))
+            continue;
+        const record = registered.get(key);
+        if (!record) {
+            report.skipped.push({ key, reason: "office is not registered" });
+            continue;
+        }
+        const office = workspace.office(record);
+        if (isDeclared(office)) {
+            report.skipped.push({ key, reason: `${OPEN_CONNECTOR_SERVER} is already declared` });
+            continue;
+        }
+        let state;
+        try {
+            state = readJsonSchemaFileIfExists(legacyPath, LegacyTokenSchema, (detail) => `Malformed legacy token file: ${detail}`);
+        }
+        catch (error) {
+            report.skipped.push({ key, reason: errorMessage(error) });
+            continue;
+        }
+        if (!state)
+            continue;
+        if (state.origin !== origin) {
+            report.skipped.push({ key, reason: `token origin ${state.origin} differs` });
+            continue;
+        }
+        const current = loadScopeMcpServers(office).conversation;
+        updateConversationSettings(office, {
+            mcpServers: { ...current, [OPEN_CONNECTOR_SERVER]: defaultEntry(defaultUrl, state.token) },
+        });
+        rmSync(legacyPath);
+        report.migrated.push(key);
+    }
+    return report;
+}
+//# sourceMappingURL=open-connector.js.map

package/dist/harness/open-connector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-connector.js","sourceRoot":"","sources":["../../src/harness/open-connector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,KAAK,GAAG,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAIpG,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAE9D,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AAC/C,MAAM,iBAAiB,GAAG,mCAAmC,CAAC;AAC9D,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;AAEjD,MAAM,iBAAiB,GAAG,IAAI,CAAC,MAAM,CACnC;IACE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACxB,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;IACrB,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;IACnB,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE;CACrB,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC;AAEF,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,qCAAqC,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB,EAAE,SAAiB;IAC3D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,iBAAiB,SAAS,qBAAqB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,iBAAiB,SAAS,wBAAwB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAAoB;IACzC,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC/D,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,MAAc,EACd,UAAkB,EAClB,IAAY,EACZ,OAAgC,EAChC,MAAoB;IAEpB,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,UAAU,UAAU,EAAE,EAAE,CAAC;IAC1D,MAAM,WAAW,GAAG,MAAM,QAAQ,CAChC,MAAM,OAAO,CAAC,IAAI,GAAG,CAAC,qBAAqB,EAAE,MAAM,CAAC,EAAE;QACpD,OAAO;QACP,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC;KAC9B,CAAC,EACF,wBAAwB,CACzB,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC;IAC1C,MAAM,aAAa,GAAG,MAAM,QAAQ,CAClC,MAAM,OAAO,CAAC,IAAI,GAAG,CAAC,qBAAqB,EAAE,MAAM,CAAC,EAAE;QACpD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC3D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,IAAI;YACJ,cAAc,EAAE,WAAW,CAAC,UAAU,CAAC,cAAc,EAAE,uBAAuB,CAAC;YAC/E,cAAc,EAAE,WAAW,CAAC,UAAU,CAAC,cAAc,EAAE,uBAAuB,CAAC;YAC/E,cAAc,EAAE,WAAW,CAAC,UAAU,CAAC,cAAc,EAAE,uBAAuB,CAAC;SAChF,CAAC;QACF,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC;KAC9B,CAAC,EACF,wBAAwB,CACzB,CAAC;IACF,IACE,CAAC,QAAQ,CAAC,aAAa,CAAC;QACxB,OAAO,aAAa,CAAC,KAAK,KAAK,QAAQ;QACvC,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC;QAC/B,aAAa,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,EAClC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,aAAa,CAAC,KAAK,CAAC;AAC7B,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,KAAa;IAC9C,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,UAAU,CAAC,MAAc;IAChC,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC3C,OAAO,CACL,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,EAC/C,MAAM,EACN,mBAAmB,EACnB,aAAa,EACb,MAAM,EACN,KAAK,EAAE,OAAO,GAAG,UAAU,CAAC,KAAK,GACC;IAClC,MAAM,UAAU,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACxD,IAAI,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACtF,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,GAAG,CAAC,UAAU,CACZ,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,iCAAiC,EAClE,mCAAmC,CACpC,CAAC;QACF,OAAO;IACT,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO;IAE/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC;IAC9B,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE;QACvB,MAAM,IAAI,GAAG,eAAe,mBAAmB,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QACnF,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC/F,IAAI,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO;QAC/B,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC;QACzD,0BAA0B,CAAC,MAAM,EAAE;YACjC,UAAU,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,qBAAqB,CAAC,EAAE,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE;SAC9E,CAAC,CAAC;QACH,GAAG,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,2CAA2C,CAAC,CAAC;IAC5F,CAAC,CAAC,EAAE,CAAC;IACL,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC;IACb,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAOD,MAAM,UAAU,gCAAgC,CAC9C,QAAgB,EAChB,UAAkB,EAClB,aAAa,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC;IAE3C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,MAAM,GAA+B,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACzE,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC;QAAE,OAAO,MAAM,CAAC;IACjD,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,qBAAqB,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAU,CAAC,CACtF,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,gBAAgB,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3E,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QAC/D,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,SAAS;QACtC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACjE,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,qBAAqB,sBAAsB,EAAE,CAAC,CAAC;YACrF,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,0BAA0B,CAChC,UAAU,EACV,iBAAiB,EACjB,CAAC,MAAM,EAAE,EAAE,CAAC,gCAAgC,MAAM,EAAE,CACrD,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC1D,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC5B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,gBAAgB,KAAK,CAAC,MAAM,UAAU,EAAE,CAAC,CAAC;YAC7E,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC;QACzD,0BAA0B,CAAC,MAAM,EAAE;YACjC,UAAU,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,qBAAqB,CAAC,EAAE,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;SAC3F,CAAC,CAAC;QACH,MAAM,CAAC,UAAU,CAAC,CAAC;QACnB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { Type } from \"typebox\";\nimport { existsSync, readdirSync, rmSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { readEnv } from \"../env-manifest.js\";\nimport * as log from \"../log.js\";\nimport { loadScopeMcpServers, updateConversationSettings } from \"../settings/index.js\";\nimport { readJsonSchemaFileIfExists } from \"../file-guards.js\";\nimport { createWorkspace, isOfficeKey, listRegisteredOffices, officeKey } from \"../office/index.js\";\nimport type { Office } from \"../office/types.js\";\nimport type { OfficeKey } from \"../types.js\";\nimport type { EnsureDefaultOpenConnectorOptions, McpServerConfig } from \"./types.js\";\nimport { errorMessage, isRecord } from \"../unknown-values.js\";\n\nconst OPEN_CONNECTOR_SERVER = \"open-connector\";\nconst LEGACY_TOKEN_FILE = \"open-connector-runtime-token.json\";\nconst REQUEST_TIMEOUT_MS = 10_000;\nconst pending = new Map<string, Promise<void>>();\n\nconst LegacyTokenSchema = Type.Object(\n  {\n    version: Type.Literal(1),\n    origin: Type.String(),\n    name: Type.String(),\n    id: Type.String(),\n    token: Type.String(),\n  },\n  { additionalProperties: false },\n);\n\nfunction stringArray(value: unknown, field: string): string[] {\n  if (!Array.isArray(value) || !value.every((item) => typeof item === \"string\")) {\n    throw new Error(`OpenConnector returned an invalid ${field}`);\n  }\n  return value;\n}\n\nasync function readJson(response: Response, operation: string): Promise<unknown> {\n  if (!response.ok) {\n    throw new Error(`OpenConnector ${operation} failed with HTTP ${response.status}`);\n  }\n  try {\n    return await response.json();\n  } catch (error) {\n    throw new Error(`OpenConnector ${operation} returned invalid JSON`, { cause: error });\n  }\n}\n\nfunction requestSignal(signal?: AbortSignal): AbortSignal {\n  const timeout = AbortSignal.timeout(REQUEST_TIMEOUT_MS);\n  return signal ? AbortSignal.any([signal, timeout]) : timeout;\n}\n\nasync function createRuntimeToken(\n  origin: string,\n  adminToken: string,\n  name: string,\n  fetchFn: typeof globalThis.fetch,\n  signal?: AbortSignal,\n): Promise<string> {\n  const headers = { Authorization: `Bearer ${adminToken}` };\n  const policyValue = await readJson(\n    await fetchFn(new URL(\"/api/runtime-policy\", origin), {\n      headers,\n      signal: requestSignal(signal),\n    }),\n    \"runtime policy request\",\n  );\n  if (!isRecord(policyValue) || !isRecord(policyValue.deployment)) {\n    throw new Error(\"OpenConnector returned an invalid runtime policy\");\n  }\n  const deployment = policyValue.deployment;\n  const responseValue = await readJson(\n    await fetchFn(new URL(\"/api/runtime-tokens\", origin), {\n      method: \"POST\",\n      headers: { ...headers, \"Content-Type\": \"application/json\" },\n      body: JSON.stringify({\n        name,\n        allowedActions: stringArray(deployment.allowedActions, \"allowedActions policy\"),\n        blockedActions: stringArray(deployment.blockedActions, \"blockedActions policy\"),\n        allowedProxies: stringArray(deployment.allowedProxies, \"allowedProxies policy\"),\n      }),\n      signal: requestSignal(signal),\n    }),\n    \"runtime token creation\",\n  );\n  if (\n    !isRecord(responseValue) ||\n    typeof responseValue.token !== \"string\" ||\n    !isRecord(responseValue.record) ||\n    responseValue.record.name !== name\n  ) {\n    throw new Error(\"OpenConnector returned an invalid runtime token\");\n  }\n  return responseValue.token;\n}\n\nfunction defaultEntry(url: string, token: string): McpServerConfig {\n  return { url, headers: { Authorization: `Bearer ${token}` } };\n}\n\nfunction isDeclared(office: Office): boolean {\n  const scopes = loadScopeMcpServers(office);\n  return (\n    Object.hasOwn(scopes.global, OPEN_CONNECTOR_SERVER) ||\n    Object.hasOwn(scopes.conversation, OPEN_CONNECTOR_SERVER)\n  );\n}\n\nexport async function ensureDefaultOpenConnector({\n  office,\n  platformWorkspaceId,\n  defaultServer,\n  signal,\n  fetch: fetchFn = globalThis.fetch,\n}: EnsureDefaultOpenConnectorOptions): Promise<void> {\n  const adminToken = readEnv(\"OPENCONNECTOR_ADMIN_TOKEN\");\n  if (!defaultServer?.url || !adminToken || office.address.platform !== \"slack\") return;\n  if (!platformWorkspaceId) {\n    log.logWarning(\n      `[${office.address.conversationId}] OpenConnector default skipped`,\n      \"Slack workspace ID is unavailable\",\n    );\n    return;\n  }\n  if (isDeclared(office)) return;\n\n  const inflight = pending.get(office.stateDir);\n  if (inflight) return inflight;\n  const url = defaultServer.url;\n  const task = (async () => {\n    const name = `mikan:slack:${platformWorkspaceId}:${office.address.conversationId}`;\n    const token = await createRuntimeToken(new URL(url).origin, adminToken, name, fetchFn, signal);\n    if (isDeclared(office)) return;\n    const current = loadScopeMcpServers(office).conversation;\n    updateConversationSettings(office, {\n      mcpServers: { ...current, [OPEN_CONNECTOR_SERVER]: defaultEntry(url, token) },\n    });\n    log.logInfo(`[${office.address.conversationId}] Provisioned default OpenConnector token`);\n  })();\n  pending.set(office.stateDir, task);\n  try {\n    await task;\n  } finally {\n    pending.delete(office.stateDir);\n  }\n}\n\nexport interface LegacyTokenMigrationReport {\n  migrated: OfficeKey[];\n  skipped: { key: OfficeKey; reason: string }[];\n}\n\nexport function migrateLegacyOpenConnectorTokens(\n  stateDir: string,\n  defaultUrl: string,\n  workspaceRoot = join(stateDir, \"workspace\"),\n): LegacyTokenMigrationReport {\n  const origin = new URL(defaultUrl).origin;\n  const report: LegacyTokenMigrationReport = { migrated: [], skipped: [] };\n  const conversationsDir = join(stateDir, \"conversations\");\n  if (!existsSync(conversationsDir)) return report;\n  const workspace = createWorkspace({ root: workspaceRoot, stateDir });\n  const registered = new Map(\n    listRegisteredOffices(stateDir).map((record) => [officeKey(record), record] as const),\n  );\n  for (const entry of readdirSync(conversationsDir, { withFileTypes: true })) {\n    if (!entry.isDirectory() || !isOfficeKey(entry.name)) continue;\n    const key = entry.name;\n    const legacyPath = join(conversationsDir, key, LEGACY_TOKEN_FILE);\n    if (!existsSync(legacyPath)) continue;\n    const record = registered.get(key);\n    if (!record) {\n      report.skipped.push({ key, reason: \"office is not registered\" });\n      continue;\n    }\n    const office = workspace.office(record);\n    if (isDeclared(office)) {\n      report.skipped.push({ key, reason: `${OPEN_CONNECTOR_SERVER} is already declared` });\n      continue;\n    }\n    let state;\n    try {\n      state = readJsonSchemaFileIfExists(\n        legacyPath,\n        LegacyTokenSchema,\n        (detail) => `Malformed legacy token file: ${detail}`,\n      );\n    } catch (error) {\n      report.skipped.push({ key, reason: errorMessage(error) });\n      continue;\n    }\n    if (!state) continue;\n    if (state.origin !== origin) {\n      report.skipped.push({ key, reason: `token origin ${state.origin} differs` });\n      continue;\n    }\n    const current = loadScopeMcpServers(office).conversation;\n    updateConversationSettings(office, {\n      mcpServers: { ...current, [OPEN_CONNECTOR_SERVER]: defaultEntry(defaultUrl, state.token) },\n    });\n    rmSync(legacyPath);\n    report.migrated.push(key);\n  }\n  return report;\n}\n"]}

package/dist/harness/presenter.d.ts

@@ -0,0 +1,11 @@
+import type { FinalizeRunResponseOptions, RunPresentation, RunPresentationContext, RunnerSessionState, SessionEventHandlerParams, UsageReportContext } from "./types.js";
+import type { MikanAgentSession } from "./session.js";
+import type { ConversationResponder } from "../types.js";
+export declare function createRunState(): RunnerSessionState;
+export declare function activateRunPresentation(runState: RunnerSessionState, context: RunPresentationContext): RunPresentation;
+export declare function getFinalAssistantText(session: MikanAgentSession): string;
+export declare function isEventTriggerAttribution(triggerAttribution: string | undefined): boolean;
+export declare function finalizeRunResponse(responder: ConversationResponder, session: MikanAgentSession, runState: RunnerSessionState, options?: FinalizeRunResponseOptions): Promise<void>;
+export declare function reportUsageSummary(ctx: UsageReportContext): Promise<void>;
+export declare function attachSessionEventHandlers(params: SessionEventHandlerParams): void;
+//# sourceMappingURL=presenter.d.ts.map

package/dist/harness/presenter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presenter.d.ts","sourceRoot":"","sources":["../../src/harness/presenter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,0BAA0B,EAG1B,eAAe,EACf,sBAAsB,EACtB,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,EACnB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAOtD,OAAO,KAAK,EAAE,qBAAqB,EAA4B,MAAM,aAAa,CAAC;AAwGnF,wBAAgB,cAAc,IAAI,kBAAkB,CAEnD;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,EAAE,sBAAsB,GAC9B,eAAe,CA2CjB;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAGxE;AAED,wBAAgB,yBAAyB,CAAC,kBAAkB,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEzF;AAwJD,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,qBAAqB,EAChC,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,CAAC,EAAE,0BAA0B,GACnC,OAAO,CAAC,IAAI,CAAC,CAsBf;AA4ED,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkG/E;AAqcD,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,yBAAyB,GAAG,IAAI,CAkBlF"}