@integrity-labs/cloud-broker 0.4.3 → 0.4.5

package/dist/index.js

@@ -20996,6 +20996,7 @@ var BrokerClient = class {
   host;
   agentId;
   runId;
+  defaultSourceContext;
   apiKey;
   fetchImpl;
   token;
@@ -21005,6 +21006,7 @@ var BrokerClient = class {
     this.host = config2.host.replace(/\/+$/, "");
     this.agentId = config2.agentId;
     this.runId = config2.runId;
+    this.defaultSourceContext = config2.defaultSourceContext;
     this.apiKey = config2.apiKey;
     this.fetchImpl = config2.fetchImpl ?? fetch;
     this.token = config2.initialToken ?? "";
@@ -21120,7 +21122,13 @@ var BrokerClient = class {
     if (!runId) {
       throw makeBrokerError(400, "BrokerClient.requestAccess requires run_id (pass it in args, or set runId on BrokerClientConfig)");
     }
-    const body = { ...args, agent_id: agentId, run_id: runId };
+    const sourceContext = args.source_context ?? this.defaultSourceContext;
+    const body = {
+      ...args,
+      agent_id: agentId,
+      run_id: runId,
+      source_context: sourceContext
+    };
     return this.request("POST", "/aws/grants", { body });
   }
   pollGrant(args) {
@@ -21150,6 +21158,17 @@ var previewRequestSchema = external_exports.object({
   regions: regionListSchema,
   ttl_seconds: ttlSecondsSchema
 });
+var sourceContextSchema = external_exports.object({
+  channel_type: external_exports.string().min(1).max(64).describe(
+    'Inbound channel type (e.g. "slack", "telegram", "direct-chat"). Defaults from AGT_INBOUND_CHANNEL_TYPE if set.'
+  ),
+  channel_id: external_exports.string().min(1).max(256).describe(
+    "Inbound channel/conversation id (Slack channel id, Telegram chat id, etc). Defaults from AGT_INBOUND_CHANNEL_ID."
+  ),
+  thread_ts: external_exports.string().min(1).max(256).optional().describe(
+    "Optional thread/parent identifier within channel_id (e.g. Slack thread_ts). Defaults from AGT_INBOUND_CHANNEL_THREAD_TS."
+  )
+});
 var requestAccessSchema = external_exports.object({
   // ENG-4746: agent_id and run_id are optional. The MCP server fills them
   // from AGT_AGENT_ID / AGT_RUN_ID env at provision time, so the agent
@@ -21169,6 +21188,9 @@ var requestAccessSchema = external_exports.object({
   task_id: external_exports.string().min(1).optional().describe("Optional Augmented task identifier (e.g. kanban:task-7842)."),
   reason: external_exports.string().min(1).max(500).optional().describe(
     "One-sentence rationale shown to a human approver. Must be safe to render \u2014 never contains credentials."
+  ),
+  source_context: sourceContextSchema.optional().describe(
+    "Optional. Inbound conversation that triggered this request. The MCP server fills it from AGT_INBOUND_CHANNEL_* env vars when present. Persisted on the grant so the resolution notification can tell the agent to thread the answer back to the original conversation."
   )
 });
 var pollGrantSchema = external_exports.object({
@@ -21200,6 +21222,14 @@ if (process.env.AGT_TEAM_SLUG) {
     "cloud-broker: AGT_TEAM_SLUG is set but no longer required (the API derives team from agent_id). Safe to remove from .mcp.json env block."
   );
 }
+var AGT_INBOUND_CHANNEL_TYPE = process.env.AGT_INBOUND_CHANNEL_TYPE ?? "";
+var AGT_INBOUND_CHANNEL_ID = process.env.AGT_INBOUND_CHANNEL_ID ?? "";
+var AGT_INBOUND_CHANNEL_THREAD_TS = process.env.AGT_INBOUND_CHANNEL_THREAD_TS ?? "";
+var defaultSourceContext = AGT_INBOUND_CHANNEL_TYPE && AGT_INBOUND_CHANNEL_ID ? {
+  channel_type: AGT_INBOUND_CHANNEL_TYPE,
+  channel_id: AGT_INBOUND_CHANNEL_ID,
+  thread_ts: AGT_INBOUND_CHANNEL_THREAD_TS || void 0
+} : void 0;
 var broker = new BrokerClient({
   host: AGT_HOST,
   agentId: AGT_AGENT_ID,
@@ -21207,6 +21237,7 @@ var broker = new BrokerClient({
   // Empty string is treated as absent — the broker client only fills runId
   // on requestAccess if a non-empty value is provided.
   runId: AGT_RUN_ID || void 0,
+  defaultSourceContext,
   initialToken: AGT_TOKEN || void 0,
   apiKey: AGT_API_KEY || void 0
 });
@@ -21249,7 +21280,7 @@ server.tool(
 );
 server.tool(
   "request_access",
-  'Request scoped, TTL-bounded AWS credentials for the current task. agent_id and run_id are optional \u2014 the broker fills them from the host MCP env (AGT_AGENT_ID / AGT_RUN_ID). Only pass them explicitly to attribute the grant to a different agent or run. Returns { grant_id, status, secret_ref?, expires_at?, denial_reason?, notification_status?, notification_failure_reason? }. status="active" means credentials are ready; status="denied" means the request was rejected (denial_reason explains). status="pending" means approval is still outstanding \u2014 always check notification_status before deciding what to do next: "sent" means the Slack approval message reached the configured channel and poll_grant is appropriate; "failed" means the notification did NOT reach a human (typically channel_not_found because the bot is not a member of the approval channel) \u2014 quote grant_id + notification_failure_reason and recommend manual escalation instead of silently polling.',
+  `Request scoped, TTL-bounded AWS credentials for the current task. agent_id and run_id are optional \u2014 the broker fills them from the host MCP env (AGT_AGENT_ID / AGT_RUN_ID). source_context is also optional \u2014 the broker fills channel_type/channel_id/thread_ts from AGT_INBOUND_CHANNEL_* env when the host runtime exposes them, so the resolution notification can tell you to thread the answer back to the original conversation. Pass source_context explicitly only when you know it differs from the inbound message you are currently handling (rare). Returns { grant_id, status, secret_ref?, expires_at?, denial_reason?, notification_status?, notification_failure_reason? }. status="active" means credentials are ready, use them now. status="denied" means the request was rejected (denial_reason explains). status="pending" means approval is still outstanding \u2014 DO NOT poll. The broker pushes the resolution to you via direct-chat the moment a human approves or denies, so save the grant_id, return control, and resume when the inbound message arrives. The notification body will include the source channel/thread to reply in \u2014 complete the user's task there, not in direct-chat. Only check notification_status if you need to flag a setup issue to the user: "sent" means a human was paged; "failed" or "not_attempted" means no human was paged (typically channel_not_found because the approval-bot is not a member of the configured channel) \u2014 quote grant_id + notification_failure_reason and recommend manual escalation. poll_grant exists as an escape hatch for explicit re-checks but the autonomous flow does not need it.`,
   requestAccessShape,
   async (args) => {
     try {
@@ -21263,7 +21294,7 @@ server.tool(
 );
 server.tool(
   "poll_grant",
-  'Single-shot status check for a grant. Use this when request_access returned status="pending"; back-off ~10s between polls. Returns { grant_id, status, secret_ref?, expires_at?, denial_reason? }.',
+  "Single-shot status check for a grant. The broker pushes resolution updates to you via direct-chat automatically \u2014 you do NOT need to poll in the normal flow. Use this only as an escape hatch: explicit re-check after a notification, or if you suspect a notification was lost (e.g. you got `request_access` returning pending more than ~5 minutes ago and have heard nothing). Returns { grant_id, status, secret_ref?, expires_at?, denial_reason? }.",
   pollGrantShape,
   async (args) => {
     try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/cloud-broker",
-  "version": "0.4.3",
+  "version": "0.4.5",
   "description": "Cloud Access Broker — MCP server that mints scoped, TTL-bounded cloud credentials per agent task. v1 ships AWS support (request_access, poll_grant, release_access, describe_scope, preview_request — STS AssumeRole under the hood); GCP, Azure, and Cloudflare land alongside in the same package as the broker grows.",
   "type": "module",
   "bin": {