@jungjaehoon/mama-os 0.32.1 → 0.32.2

package/dist/setup/setup-actions.js

@@ -0,0 +1,371 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SETUP_ACTION_PROTOCOL = void 0;
+exports.parseSetupActions = parseSetupActions;
+exports.createSetupActionExecutor = createSetupActionExecutor;
+const node_fs_1 = require("node:fs");
+const node_crypto_1 = require("node:crypto");
+const node_path_1 = require("node:path");
+const config_manager_js_1 = require("../cli/config/config-manager.js");
+const ACTION_PATTERN_SOURCE = '<mama_setup_action>([\\s\\S]*?)</mama_setup_action>';
+const LEGACY_ACTION_PATTERN = /\b(?:save_integration_token|update_config|validate_discord_token|mark_setup_complete)\s*\(|\[(?:validate token|save channel|mark_setup_complete)\]/i;
+const MAX_ACTIONS_PER_RESPONSE = 8;
+const MAX_ACTION_BYTES = 100_000;
+const CONFIG_KEYS = new Set([
+    'discord.token',
+    'discord.enabled',
+    'discord.default_channel_id',
+    'slack.bot_token',
+    'slack.app_token',
+    'slack.enabled',
+    'telegram.token',
+    'telegram.allowed_chats',
+    'telegram.enabled',
+    'multi_agent.dangerouslySkipPermissions',
+    'multi_agent.enabled',
+]);
+const GENERIC_UPDATE_CONFIG_KEYS = new Set([...CONFIG_KEYS].filter((key) => !['discord.token', 'slack.bot_token', 'slack.app_token', 'telegram.token'].includes(key)));
+exports.SETUP_ACTION_PROTOCOL = `## MAMA Setup Host Actions
+
+You do not have native setup/file tools. To perform a setup mutation, emit exactly one or more
+JSON actions wrapped in <mama_setup_action> tags. The host validates and executes them, then sends
+trusted results back in the same session. Never claim success before receiving a successful result.
+
+Examples:
+<mama_setup_action>{"type":"update_config","key":"discord.enabled","value":true}</mama_setup_action>
+<mama_setup_action>{"type":"validate_discord_token","token":"..."}</mama_setup_action>
+<mama_setup_action>{"type":"write_file","name":"USER.md","content":"# USER.md..."}</mama_setup_action>
+<mama_setup_action>{"type":"mark_setup_complete"}</mama_setup_action>
+
+Supported action schemas:
+- update_config: {"type":"update_config","key":<allowed key>,"value":<value>}
+- validate_discord_token: {"type":"validate_discord_token","token":"..."}
+- write_file: {"type":"write_file","name":"IDENTITY.md|USER.md|SOUL.md|personas/<name>.md","content":"..."}
+- save_integration_token:
+  - Discord: {"type":"save_integration_token","platform":"discord","token":"..."}
+  - Slack: {"type":"save_integration_token","platform":"slack","bot_token":"xoxb-...","app_token":"xapp-..."}
+  - Telegram: {"type":"save_integration_token","platform":"telegram","token":"...","allowed_chats":["123"]}
+  - Agent team: {"type":"save_integration_token","platform":"multi_agent","enabled":true}
+- present_discovery_summary, present_security_warning, demonstrate_capability: {"type":"<name>", ...}
+- complete_onboarding: {"type":"complete_onboarding","confirmed":true}
+- mark_setup_complete: {"type":"mark_setup_complete"}
+
+Allowed update_config keys: discord.enabled, discord.default_channel_id,
+slack.enabled, telegram.allowed_chats,
+telegram.enabled, multi_agent.dangerouslySkipPermissions,
+multi_agent.enabled. Emit related updates in one response; the host saves the batch atomically.
+
+write_file accepts IDENTITY.md, USER.md, SOUL.md, or personas/<name>.md. Every path is resolved by
+the host under ~/.mama; never use the process working directory. Tokens inside action tags are
+removed from browser-visible output.`;
+function requiredString(action, key) {
+    const value = action[key];
+    if (typeof value !== 'string' || value.length === 0) {
+        throw new Error(`${key} must be a non-empty string`);
+    }
+    return value;
+}
+function setConfigValue(config, key, value) {
+    if (!CONFIG_KEYS.has(key))
+        throw new Error(`Unsupported setup config key: ${key}`);
+    const [section, field] = key.split('.');
+    const root = config;
+    const current = root[section];
+    const target = typeof current === 'object' && current !== null
+        ? current
+        : {};
+    target[field] = value;
+    root[section] = target;
+}
+function replaceConfigContents(target, source) {
+    const targetRecord = target;
+    for (const key of Object.keys(targetRecord))
+        delete targetRecord[key];
+    Object.assign(targetRecord, structuredClone(source));
+}
+function validateConfigValue(key, value) {
+    if (key.endsWith('.enabled') || key === 'multi_agent.dangerouslySkipPermissions') {
+        if (typeof value !== 'boolean')
+            throw new Error(`${key} must be boolean`);
+        return;
+    }
+    if (key === 'telegram.allowed_chats') {
+        if (!Array.isArray(value) || value.some((item) => typeof item !== 'string')) {
+            throw new Error(`${key} must be a string array`);
+        }
+        return;
+    }
+    if (typeof value !== 'string' || value.length === 0) {
+        throw new Error(`${key} must be a non-empty string`);
+    }
+}
+function resolveSetupFile(mamaHome, name) {
+    const normalized = name.replaceAll('\\', '/');
+    const allowedRootFile = ['IDENTITY.md', 'USER.md', 'SOUL.md'].includes(normalized);
+    const allowedPersona = /^personas\/[A-Za-z0-9_.-]+\.md$/.test(normalized);
+    if (!allowedRootFile && !allowedPersona)
+        throw new Error('Unsupported setup file name');
+    const target = (0, node_path_1.resolve)(mamaHome, normalized);
+    const rel = (0, node_path_1.relative)(mamaHome, target);
+    if (rel.startsWith('..'))
+        throw new Error('Setup file escaped ~/.mama');
+    return target;
+}
+function writeSetupFile(mamaHome, name, content) {
+    if (Buffer.byteLength(content) > MAX_ACTION_BYTES)
+        throw new Error('Setup file exceeds size limit');
+    const target = resolveSetupFile(mamaHome, name);
+    writeAtomicSetupFile(mamaHome, target, content);
+    return target;
+}
+function writeAtomicSetupFile(mamaHome, target, content) {
+    (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(target), { recursive: true });
+    const canonicalParent = (0, node_fs_1.realpathSync)((0, node_path_1.dirname)(target));
+    if ((0, node_path_1.relative)(mamaHome, canonicalParent).startsWith('..')) {
+        throw new Error('Setup file parent escaped ~/.mama');
+    }
+    if ((0, node_fs_1.existsSync)(target) && (0, node_fs_1.lstatSync)(target).isSymbolicLink()) {
+        throw new Error('Setup file target cannot be a symlink');
+    }
+    const temporary = (0, node_path_1.join)(canonicalParent, `.${(0, node_path_1.basename)(target)}.${(0, node_crypto_1.randomUUID)()}.tmp`);
+    try {
+        (0, node_fs_1.writeFileSync)(temporary, content, { encoding: 'utf8', mode: 0o600, flag: 'wx' });
+        (0, node_fs_1.renameSync)(temporary, target);
+    }
+    catch (error) {
+        if ((0, node_fs_1.existsSync)(temporary))
+            (0, node_fs_1.unlinkSync)(temporary);
+        throw error;
+    }
+}
+function assertCompletedPersonaFile(mamaHome, file) {
+    const path = (0, node_path_1.join)(mamaHome, file);
+    if (!(0, node_fs_1.existsSync)(path) || (0, node_fs_1.lstatSync)(path).isSymbolicLink() || !(0, node_fs_1.lstatSync)(path).isFile()) {
+        throw new Error(`Cannot complete onboarding before ${file} is written safely`);
+    }
+    if ((0, node_path_1.relative)(mamaHome, (0, node_fs_1.realpathSync)(path)).startsWith('..')) {
+        throw new Error(`Cannot complete onboarding with ${file} outside ~/.mama`);
+    }
+}
+function parseSetupActions(text) {
+    const actionPattern = new RegExp(ACTION_PATTERN_SOURCE, 'g');
+    const actions = [];
+    let match;
+    while ((match = actionPattern.exec(text)) !== null) {
+        if (actions.length >= MAX_ACTIONS_PER_RESPONSE) {
+            throw new Error('Setup response exceeded its action limit');
+        }
+        if (Buffer.byteLength(match[1]) > MAX_ACTION_BYTES) {
+            throw new Error('Setup action exceeded its size limit');
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(match[1]);
+        }
+        catch {
+            throw new Error('Setup action must contain valid JSON');
+        }
+        if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+            throw new Error('Setup action must be a JSON object');
+        }
+        actions.push(parsed);
+    }
+    const visibleText = text.replace(new RegExp(ACTION_PATTERN_SOURCE, 'g'), '').trim();
+    if (LEGACY_ACTION_PATTERN.test(visibleText)) {
+        throw new Error('Setup response used unsupported legacy action syntax');
+    }
+    return {
+        visibleText,
+        actions,
+    };
+}
+function createSetupActionExecutor(options = {}) {
+    const loadConfig = options.loadConfig ?? config_manager_js_1.getConfig;
+    const persistConfig = options.persistConfig ?? config_manager_js_1.saveConfig;
+    const mamaHome = (0, node_path_1.resolve)(options.mamaHome ?? (0, config_manager_js_1.expandPath)('~/.mama'));
+    const fetchImpl = options.fetchImpl ?? globalThis.fetch;
+    const now = options.now ?? (() => new Date());
+    (0, node_fs_1.mkdirSync)(mamaHome, { recursive: true });
+    const canonicalMamaHome = (0, node_fs_1.realpathSync)(mamaHome);
+    const validateDiscordToken = async (token) => {
+        const response = await fetchImpl('https://discord.com/api/v10/users/@me', {
+            headers: { Authorization: `Bot ${token}` },
+            signal: AbortSignal.timeout(10_000),
+        });
+        if (!response.ok)
+            return { valid: false };
+        const body = (await response.json());
+        return { valid: true, clientId: typeof body.id === 'string' ? body.id : undefined };
+    };
+    const validateSlackTokens = async (botToken, appToken) => {
+        const botResponse = await fetchImpl('https://slack.com/api/auth.test', {
+            method: 'POST',
+            headers: { Authorization: `Bearer ${botToken}` },
+            signal: AbortSignal.timeout(10_000),
+        });
+        if (!botResponse.ok || (await botResponse.json()).ok !== true) {
+            return false;
+        }
+        const appResponse = await fetchImpl('https://slack.com/api/apps.connections.open', {
+            method: 'POST',
+            headers: { Authorization: `Bearer ${appToken}` },
+            signal: AbortSignal.timeout(10_000),
+        });
+        return appResponse.ok && (await appResponse.json()).ok === true;
+    };
+    const validateTelegramToken = async (token) => {
+        const response = await fetchImpl(`https://api.telegram.org/bot${token}/getMe`, {
+            signal: AbortSignal.timeout(10_000),
+        });
+        return response.ok && (await response.json()).ok === true;
+    };
+    const executeOne = async (action, workingConfig, markConfigDirty) => {
+        let type = 'unknown';
+        try {
+            type = requiredString(action, 'type');
+            if (type === 'update_config') {
+                const key = requiredString(action, 'key');
+                if (!GENERIC_UPDATE_CONFIG_KEYS.has(key)) {
+                    throw new Error(`Unsupported setup config key: ${key}`);
+                }
+                validateConfigValue(key, action.value);
+                setConfigValue(workingConfig, key, action.value);
+                markConfigDirty();
+                return { type, ok: true, data: { key } };
+            }
+            if (type === 'validate_discord_token') {
+                const token = requiredString(action, 'token');
+                const validation = await validateDiscordToken(token);
+                return {
+                    type,
+                    ok: true,
+                    data: { valid: validation.valid, client_id: validation.clientId },
+                };
+            }
+            if (type === 'write_file') {
+                const name = requiredString(action, 'name');
+                const content = requiredString(action, 'content');
+                const path = writeSetupFile(canonicalMamaHome, name, content);
+                return { type, ok: true, data: { file: (0, node_path_1.basename)(path) } };
+            }
+            if (type === 'save_integration_token') {
+                const platform = requiredString(action, 'platform');
+                if (platform === 'discord') {
+                    const token = requiredString(action, 'token');
+                    const validation = await validateDiscordToken(token);
+                    if (!validation.valid)
+                        throw new Error('Discord token validation failed');
+                    setConfigValue(workingConfig, 'discord.token', token);
+                    setConfigValue(workingConfig, 'discord.enabled', true);
+                }
+                else if (platform === 'slack') {
+                    const botToken = requiredString(action, 'bot_token');
+                    const appToken = requiredString(action, 'app_token');
+                    if (!(await validateSlackTokens(botToken, appToken))) {
+                        throw new Error('Slack token validation failed');
+                    }
+                    setConfigValue(workingConfig, 'slack.bot_token', botToken);
+                    setConfigValue(workingConfig, 'slack.app_token', appToken);
+                    setConfigValue(workingConfig, 'slack.enabled', true);
+                }
+                else if (platform === 'telegram') {
+                    const token = requiredString(action, 'token');
+                    if (!(await validateTelegramToken(token))) {
+                        throw new Error('Telegram token validation failed');
+                    }
+                    setConfigValue(workingConfig, 'telegram.token', token);
+                    const allowedChats = action.allowed_chats;
+                    if (allowedChats !== undefined &&
+                        (!Array.isArray(allowedChats) || allowedChats.some((item) => typeof item !== 'string'))) {
+                        throw new Error('allowed_chats must be a string array');
+                    }
+                    if (allowedChats)
+                        setConfigValue(workingConfig, 'telegram.allowed_chats', allowedChats);
+                    setConfigValue(workingConfig, 'telegram.enabled', true);
+                }
+                else if (platform === 'multi_agent') {
+                    if (typeof action.enabled !== 'boolean')
+                        throw new Error('enabled must be boolean');
+                    setConfigValue(workingConfig, 'multi_agent.enabled', action.enabled);
+                }
+                else {
+                    throw new Error(`Unsupported integration platform: ${platform}`);
+                }
+                markConfigDirty();
+                return { type, ok: true, data: { platform } };
+            }
+            if (type === 'present_discovery_summary' ||
+                type === 'present_security_warning' ||
+                type === 'demonstrate_capability') {
+                return { type, ok: true };
+            }
+            if (type === 'complete_onboarding') {
+                if (action.confirmed !== true)
+                    throw new Error('Onboarding must be confirmed');
+                for (const file of ['IDENTITY.md', 'USER.md', 'SOUL.md']) {
+                    assertCompletedPersonaFile(canonicalMamaHome, file);
+                }
+            }
+            else if (type !== 'mark_setup_complete') {
+                throw new Error(`Unsupported setup action: ${type}`);
+            }
+            writeAtomicSetupFile(canonicalMamaHome, (0, node_path_1.join)(canonicalMamaHome, 'setup-complete.json'), `${JSON.stringify({ completed_at: now().toISOString() })}\n`);
+            return { type, ok: true, data: { completed: true } };
+        }
+        catch (error) {
+            return {
+                type,
+                ok: false,
+                error: error instanceof Error ? error.message : String(error),
+            };
+        }
+    };
+    const executor = {
+        async execute(action) {
+            return (await executor.executeBatch([action]))[0];
+        },
+        async executeBatch(actions) {
+            const sharedConfig = loadConfig();
+            const workingConfig = structuredClone(sharedConfig);
+            let configDirty = false;
+            const results = [];
+            for (const action of actions) {
+                const result = await executeOne(action, workingConfig, () => {
+                    configDirty = true;
+                });
+                results.push(result);
+                if (!result.ok) {
+                    return results.map((prior) => configDirty &&
+                        prior.ok &&
+                        (prior.type === 'update_config' || prior.type === 'save_integration_token')
+                        ? {
+                            ...prior,
+                            ok: false,
+                            data: { ...prior.data, rolled_back: true },
+                            error: 'Config batch was rolled back because a later action failed',
+                        }
+                        : prior);
+                }
+            }
+            if (configDirty) {
+                try {
+                    await persistConfig(workingConfig);
+                    replaceConfigContents(sharedConfig, workingConfig);
+                }
+                catch (error) {
+                    return results.map((result) => result.ok &&
+                        (result.type === 'update_config' || result.type === 'save_integration_token')
+                        ? {
+                            ...result,
+                            ok: false,
+                            error: error instanceof Error ? error.message : String(error),
+                        }
+                        : result);
+                }
+            }
+            return results;
+        },
+    };
+    return executor;
+}
+//# sourceMappingURL=setup-actions.js.map

package/dist/setup/setup-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-actions.js","sourceRoot":"","sources":["../../src/setup/setup-actions.ts"],"names":[],"mappings":";;;AA8LA,8CA8BC;AAED,8DA0MC;AAxaD,qCAQiB;AACjB,6CAAyC;AACzC,yCAAuE;AAGvE,uEAAoF;AAEpF,MAAM,qBAAqB,GAAG,qDAAqD,CAAC;AACpF,MAAM,qBAAqB,GACzB,qJAAqJ,CAAC;AACxJ,MAAM,wBAAwB,GAAG,CAAC,CAAC;AACnC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACjC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,eAAe;IACf,iBAAiB;IACjB,4BAA4B;IAC5B,iBAAiB;IACjB,iBAAiB;IACjB,eAAe;IACf,gBAAgB;IAChB,wBAAwB;IACxB,kBAAkB;IAClB,wCAAwC;IACxC,qBAAqB;CACtB,CAAC,CAAC;AACH,MAAM,0BAA0B,GAAG,IAAI,GAAG,CACxC,CAAC,GAAG,WAAW,CAAC,CAAC,MAAM,CACrB,CAAC,GAAG,EAAE,EAAE,CACN,CAAC,CAAC,eAAe,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAC3F,CACF,CAAC;AAEW,QAAA,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qCAgCA,CAAC;AA2BtC,SAAS,cAAc,CAAC,MAA+B,EAAE,GAAW;IAClE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,6BAA6B,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,MAAkB,EAAE,GAAW,EAAE,KAAc;IACrE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;IACnF,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,MAA4C,CAAC;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,MAAM,GACV,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAC7C,CAAC,CAAE,OAAmC;QACtC,CAAC,CAAE,EAA8B,CAAC;IACtC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC;AACzB,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAkB,EAAE,MAAkB;IACnE,MAAM,YAAY,GAAG,MAA4C,CAAC;IAClE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;QAAE,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;IACtE,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,MAAM,CAAuC,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW,EAAE,KAAc;IACtD,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,KAAK,wCAAwC,EAAE,CAAC;QACjF,IAAI,OAAO,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,kBAAkB,CAAC,CAAC;QAC1E,OAAO;IACT,CAAC;IACD,IAAI,GAAG,KAAK,wBAAwB,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,yBAAyB,CAAC,CAAC;QACnD,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,6BAA6B,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB,EAAE,IAAY;IACtD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC9C,MAAM,eAAe,GAAG,CAAC,aAAa,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACnF,MAAM,cAAc,GAAG,iCAAiC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1E,IAAI,CAAC,eAAe,IAAI,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACxF,MAAM,MAAM,GAAG,IAAA,mBAAO,EAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAA,oBAAQ,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,IAAY,EAAE,OAAe;IACrE,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,gBAAgB;QAC/C,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAChD,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB,EAAE,MAAc,EAAE,OAAe;IAC7E,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,eAAe,GAAG,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,MAAM,CAAC,CAAC,CAAC;IACtD,IAAI,IAAA,oBAAQ,EAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,IAAA,oBAAU,EAAC,MAAM,CAAC,IAAI,IAAA,mBAAS,EAAC,MAAM,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,eAAe,EAAE,IAAI,IAAA,oBAAQ,EAAC,MAAM,CAAC,IAAI,IAAA,wBAAU,GAAE,MAAM,CAAC,CAAC;IACpF,IAAI,CAAC;QACH,IAAA,uBAAa,EAAC,SAAS,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjF,IAAA,oBAAU,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,IAAA,oBAAU,EAAC,SAAS,CAAC;YAAE,IAAA,oBAAU,EAAC,SAAS,CAAC,CAAC;QACjD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,QAAgB,EAAE,IAAY;IAChE,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC,IAAI,IAAA,mBAAS,EAAC,IAAI,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,IAAA,mBAAS,EAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,oBAAoB,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,IAAA,oBAAQ,EAAC,QAAQ,EAAE,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,kBAAkB,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,SAAgB,iBAAiB,CAAC,IAAY;IAC5C,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAmC,EAAE,CAAC;IACnD,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACnD,IAAI,OAAO,CAAC,MAAM,IAAI,wBAAwB,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,gBAAgB,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,MAAiC,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,qBAAqB,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpF,IAAI,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO;QACL,WAAW;QACX,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAgB,yBAAyB,CACvC,UAAsC,EAAE;IAExC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,6BAAS,CAAC;IACnD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,8BAAU,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAA,mBAAO,EAAC,OAAO,CAAC,QAAQ,IAAI,IAAA,8BAAU,EAAC,SAAS,CAAC,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,IAAA,mBAAS,EAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,iBAAiB,GAAG,IAAA,sBAAY,EAAC,QAAQ,CAAC,CAAC;IAEjD,MAAM,oBAAoB,GAAG,KAAK,EAChC,KAAa,EACmC,EAAE;QAClD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,uCAAuC,EAAE;YACxE,OAAO,EAAE,EAAE,aAAa,EAAE,OAAO,KAAK,EAAE,EAAE;YAC1C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqB,CAAC;QACzD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACtF,CAAC,CAAC;IAEF,MAAM,mBAAmB,GAAG,KAAK,EAAE,QAAgB,EAAE,QAAgB,EAAoB,EAAE;QACzF,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,iCAAiC,EAAE;YACrE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,QAAQ,EAAE,EAAE;YAChD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,EAAE,IAAK,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,CAAsB,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YACpF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,6CAA6C,EAAE;YACjF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,QAAQ,EAAE,EAAE;YAChD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QACH,OAAO,WAAW,CAAC,EAAE,IAAK,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,CAAsB,CAAC,EAAE,KAAK,IAAI,CAAC;IACxF,CAAC,CAAC;IAEF,MAAM,qBAAqB,GAAG,KAAK,EAAE,KAAa,EAAoB,EAAE;QACtE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,+BAA+B,KAAK,QAAQ,EAAE;YAC7E,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,EAAE,IAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAsB,CAAC,EAAE,KAAK,IAAI,CAAC;IAClF,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,EACtB,MAA+B,EAC/B,aAAyB,EACzB,eAA2B,EACC,EAAE;QAC9B,IAAI,IAAI,GAAG,SAAS,CAAC;QACrB,IAAI,CAAC;YACH,IAAI,GAAG,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACtC,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;gBAC7B,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBAC1C,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzC,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;gBAC1D,CAAC;gBACD,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBACjD,eAAe,EAAE,CAAC;gBAClB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC;YAC3C,CAAC;YACD,IAAI,IAAI,KAAK,wBAAwB,EAAE,CAAC;gBACtC,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC9C,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC;gBACrD,OAAO;oBACL,IAAI;oBACJ,EAAE,EAAE,IAAI;oBACR,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,QAAQ,EAAE;iBAClE,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC5C,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBAClD,MAAM,IAAI,GAAG,cAAc,CAAC,iBAAiB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC9D,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAA,oBAAQ,EAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAC5D,CAAC;YACD,IAAI,IAAI,KAAK,wBAAwB,EAAE,CAAC;gBACtC,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;gBACpD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC3B,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBAC9C,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC;oBACrD,IAAI,CAAC,UAAU,CAAC,KAAK;wBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;oBAC1E,cAAc,CAAC,aAAa,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;oBACtD,cAAc,CAAC,aAAa,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;gBACzD,CAAC;qBAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;oBAChC,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;oBACrD,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;oBACrD,IAAI,CAAC,CAAC,MAAM,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;wBACrD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;oBACnD,CAAC;oBACD,cAAc,CAAC,aAAa,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;oBAC3D,cAAc,CAAC,aAAa,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;oBAC3D,cAAc,CAAC,aAAa,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;gBACvD,CAAC;qBAAM,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;oBACnC,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBAC9C,IAAI,CAAC,CAAC,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;wBAC1C,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;oBACtD,CAAC;oBACD,cAAc,CAAC,aAAa,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;oBACvD,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,CAAC;oBAC1C,IACE,YAAY,KAAK,SAAS;wBAC1B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,EACvF,CAAC;wBACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;oBAC1D,CAAC;oBACD,IAAI,YAAY;wBAAE,cAAc,CAAC,aAAa,EAAE,wBAAwB,EAAE,YAAY,CAAC,CAAC;oBACxF,cAAc,CAAC,aAAa,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAC;gBAC1D,CAAC;qBAAM,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;oBACtC,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS;wBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;oBACpF,cAAc,CAAC,aAAa,EAAE,qBAAqB,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBACvE,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,EAAE,CAAC,CAAC;gBACnE,CAAC;gBACD,eAAe,EAAE,CAAC;gBAClB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC;YAChD,CAAC;YACD,IACE,IAAI,KAAK,2BAA2B;gBACpC,IAAI,KAAK,0BAA0B;gBACnC,IAAI,KAAK,wBAAwB,EACjC,CAAC;gBACD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC5B,CAAC;YACD,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBACnC,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;gBAC/E,KAAK,MAAM,IAAI,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;oBACzD,0BAA0B,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,oBAAoB,CAClB,iBAAiB,EACjB,IAAA,gBAAI,EAAC,iBAAiB,EAAE,qBAAqB,CAAC,EAC9C,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,CAC7D,CAAC;YACF,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,IAAI;gBACJ,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAwB;QACpC,KAAK,CAAC,OAAO,CAAC,MAAM;YAClB,OAAO,CAAC,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,OAAO;YACxB,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;YAClC,MAAM,aAAa,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;YACpD,IAAI,WAAW,GAAG,KAAK,CAAC;YACxB,MAAM,OAAO,GAAwB,EAAE,CAAC;YACxC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE;oBAC1D,WAAW,GAAG,IAAI,CAAC;gBACrB,CAAC,CAAC,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACrB,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;oBACf,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC3B,WAAW;wBACX,KAAK,CAAC,EAAE;wBACR,CAAC,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB,CAAC;wBACzE,CAAC,CAAC;4BACE,GAAG,KAAK;4BACR,EAAE,EAAE,KAAK;4BACT,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;4BAC1C,KAAK,EAAE,4DAA4D;yBACpE;wBACH,CAAC,CAAC,KAAK,CACV,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,IAAI,WAAW,EAAE,CAAC;gBAChB,IAAI,CAAC;oBACH,MAAM,aAAa,CAAC,aAAa,CAAC,CAAC;oBACnC,qBAAqB,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;gBACrD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC5B,MAAM,CAAC,EAAE;wBACT,CAAC,MAAM,CAAC,IAAI,KAAK,eAAe,IAAI,MAAM,CAAC,IAAI,KAAK,wBAAwB,CAAC;wBAC3E,CAAC,CAAC;4BACE,GAAG,MAAM;4BACT,EAAE,EAAE,KAAK;4BACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;yBAC9D;wBACH,CAAC,CAAC,MAAM,CACX,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/setup/setup-prompt.d.ts

@@ -1,2 +1,2 @@
-export declare const SETUP_SYSTEM_PROMPT = "You are MAMA Setup Assistant. Help users configure MAMA Standalone step by step.\n\n## Your Role\n\nGuide users through setting up MAMA Standalone by:\n1. Understanding what platform they want to use (Discord, Slack, etc.)\n2. Walking them through creating bots on those platforms\n3. Collecting tokens/credentials\n4. Validating and saving configuration\n5. Confirming setup is complete\n\n## Available Tools\n\nYou have these tools to configure MAMA:\n\n**update_config**: Update config.yaml settings\n- Use this when you have validated a token or credential\n- Parameters: key (string), value (any)\n\n**validate_discord_token**: Check if a Discord bot token is valid\n- Use this before saving a Discord token\n- Parameters: token (string)\n- Returns: { valid: boolean, client_id?: string }\n\n**mark_setup_complete**: Signal that setup is finished\n- Use this only when all required configuration is done\n- No parameters\n\n## Setup Flow\n\n### Discord Setup\n\n1. Ask if they want to set up Discord bot\n2. Guide them:\n   - Go to https://discord.com/developers/applications\n   - Click \"New Application\"\n   - Give it a name (e.g., \"MAMA Bot\")\n   - Go to \"Bot\" tab\n   - Click \"Reset Token\" and copy it\n3. Ask them to paste the token\n4. Validate the token using validate_discord_token\n5. If valid, save it:\n   ```\n   update_config(\"discord.token\", \"MTQ2NDg4...\")\n   update_config(\"discord.enabled\", true)\n   ```\n6. Generate invite link: https://discord.com/oauth2/authorize?client_id=CLIENT_ID&permissions=8&scope=bot\n7. Ask them to invite the bot to their server\n8. Ask for the channel ID where they want MAMA to respond\n9. Save channel ID:\n   ```\n   update_config(\"discord.default_channel\", \"CHANNEL_ID_HERE\")\n   ```\n\n### Slack Setup\n\n1. Ask if they want to set up Slack bot\n2. Guide them:\n   - Go to https://api.slack.com/apps\n   - Click \"Create New App\" \u2192 \"From scratch\"\n   - Give it a name and select workspace\n   - Go to \"OAuth & Permissions\"\n   - Add scopes: chat:write, channels:history, groups:history\n   - Install to workspace\n   - Copy Bot User OAuth Token\n   - Copy App-Level Token\n3. Save tokens:\n   ```\n   update_config(\"slack.bot_token\", \"xoxb-...\")\n   update_config(\"slack.app_token\", \"xapp-...\")\n   update_config(\"slack.enabled\", true)\n   ```\n\n### Agent Backend Setup\n\nAsk users which AI backend they want to use:\n\n**Options:**\n- **claude** (default): Uses Claude CLI. Requires Claude Code subscription.\n- **codex**: Uses OpenAI Codex app-server. Requires a Codex subscription and codex login.\n\nTo configure:\n```\nupdate_config(\"agent.backend\", \"claude\")        // or \"codex\"\nupdate_config(\"agent.model\", \"claude-sonnet-4-6\")  // for claude\nupdate_config(\"agent.model\", \"gpt-5.4\")         // for codex\n```\n\n**Important:**\n- If using `codex`, authenticate first with `codex login`; MAMA manages its isolated runtime home.\n\n### Security & Permission Settings\n\nAsk users about agent permission settings:\n\n**Agent Autonomy (dangerouslySkipPermissions)**\n\nThis controls whether agents can execute tools (file writes, bash commands, git operations) without asking for permission.\n\n**Options:**\n- **true** (default): Agents run autonomously without approval prompts. Required for headless/daemon operation.\n- **false**: Agents ask for permission before executing each tool.\n\n\u26A0\uFE0F **Warning**: Setting this to `true` gives agents full system access. Only enable in trusted environments.\n\nTo configure:\n```\nupdate_config(\"multi_agent.dangerouslySkipPermissions\", true)\n```\n\n**IMPORTANT**: This setting also requires `MAMA_TRUSTED_ENV=true` environment variable.\n- For systemd service: Add `Environment=MAMA_TRUSTED_ENV=true` to the service file\n- For manual start: Run with `MAMA_TRUSTED_ENV=true mama start`\n\nIf they want autonomous agents, save the config and remind them about the environment variable.\n\n### Completion\n\nAfter setup is done:\n1. Summarize what was configured\n2. Tell them to run: mama start\n3. Explain how to use MAMA (mention bot in Discord/Slack)\n4. Call mark_setup_complete\n\n## Important Rules\n\n- Be friendly and encouraging\n- Provide clickable links\n- Ask for one thing at a time\n- Validate inputs before saving\n- Explain each step clearly\n- If they make a mistake, help them fix it\n- If token is invalid, ask them to double-check and try again\n- Never save invalid credentials\n\n## Example Interaction\n\nUser: \"I want to set up Discord\"\n\nYou: \"Great! Let's set up a Discord bot for MAMA. \n\nFirst, you'll need to create a Discord application:\n1. Go to https://discord.com/developers/applications\n2. Click 'New Application'\n3. Give it a name like 'MAMA Bot'\n4. Go to the 'Bot' tab\n5. Click 'Reset Token' and copy the token\n\nOnce you have the token, paste it here.\"\n\nUser: \"MTIzNDU2Nzg5MDEyMzQ1Njc4OQ...\"\n\nYou: [validate token] \"\u2713 Token is valid! I've saved it to your configuration.\n\nNow let's invite the bot to your server:\nhttps://discord.com/oauth2/authorize?client_id=YOUR_BOT_CLIENT_ID&permissions=8&scope=bot\n\nClick that link and select your server. After that, tell me the channel ID where you want MAMA to respond.\"\n\nUser: \"1234567890123456789\"\n\nYou: [save channel] \"Perfect! Your Discord bot is now configured.\n\nTo start MAMA, run:\n`mama start`\n\nThen go to Discord and mention @MAMA to start chatting!\n\n[mark_setup_complete]\"\n\n## Tone\n\n- Friendly but professional\n- Match the user's language (will be specified in system prompt)\n- Use emojis sparingly (\u2713, \uD83C\uDF89 for success moments)\n- Keep responses concise but complete\n";
+export declare const SETUP_SYSTEM_PROMPT = "You are MAMA Setup Assistant. Help users configure MAMA Standalone step by step.\n\n## Your Role\n\nGuide users through setting up MAMA Standalone by:\n1. Understanding what platform they want to use (Discord, Slack, etc.)\n2. Walking them through creating bots on those platforms\n3. Collecting tokens/credentials\n4. Validating and saving configuration\n5. Confirming setup is complete\n\n## Available Tools\n\nYou have these tools to configure MAMA:\n\n**update_config**: Update config.yaml settings through the MAMA setup host-action protocol\n- Use this when you have validated a token or credential\n- Parameters: key (string), value (any)\n\n**validate_discord_token**: Check if a Discord bot token is valid through the host-action protocol\n- Use this before saving a Discord token\n- Parameters: token (string)\n- Returns: { valid: boolean, client_id?: string }\n\n**mark_setup_complete**: Signal that setup is finished through the host-action protocol\n- Use this only when all required configuration is done\n- No parameters\n\n## Setup Flow\n\n### Discord Setup\n\n1. Ask if they want to set up Discord bot\n2. Guide them:\n   - Go to https://discord.com/developers/applications\n   - Click \"New Application\"\n   - Give it a name (e.g., \"MAMA Bot\")\n   - Go to \"Bot\" tab\n   - Click \"Reset Token\" and copy it\n3. Ask them to paste the token\n4. Validate the token using a tagged `validate_discord_token` host action and wait for its trusted result\n5. If valid, save it:\n   ```\n   <mama_setup_action>{\"type\":\"save_integration_token\",\"platform\":\"discord\",\"token\":\"DISCORD_BOT_TOKEN\"}</mama_setup_action>\n   ```\n6. Generate invite link: https://discord.com/oauth2/authorize?client_id=CLIENT_ID&permissions=8&scope=bot\n7. Ask them to invite the bot to their server\n8. Ask for the channel ID where they want MAMA to respond\n9. Save channel ID:\n   ```\n   <mama_setup_action>{\"type\":\"update_config\",\"key\":\"discord.default_channel_id\",\"value\":\"CHANNEL_ID_HERE\"}</mama_setup_action>\n   ```\n\n### Slack Setup\n\n1. Ask if they want to set up Slack bot\n2. Guide them:\n   - Go to https://api.slack.com/apps\n   - Click \"Create New App\" \u2192 \"From scratch\"\n   - Give it a name and select workspace\n   - Go to \"OAuth & Permissions\"\n   - Add scopes: chat:write, channels:history, groups:history\n   - Install to workspace\n   - Copy Bot User OAuth Token\n   - Copy App-Level Token\n3. Save tokens:\n   ```\n   <mama_setup_action>{\"type\":\"save_integration_token\",\"platform\":\"slack\",\"bot_token\":\"xoxb-...\",\"app_token\":\"xapp-...\"}</mama_setup_action>\n   ```\n\n### Agent Backend Setup\n\nThe wizard runs on the backend that was already authenticated and selected before it started.\nDo not mutate `agent.backend` or `agent.model` here. To change providers, tell the user to finish\nthis setup, authenticate the target CLI, and run `mama init --force --backend claude|codex|cline`.\n\n### Security & Permission Settings\n\nAsk users about agent permission settings:\n\n**Agent Autonomy (dangerouslySkipPermissions)**\n\nThis controls whether agents can execute tools (file writes, bash commands, git operations) without asking for permission.\n\n**Options:**\n- **true** (default): Agents run autonomously without approval prompts. Required for headless/daemon operation.\n- **false**: Agents ask for permission before executing each tool.\n\n\u26A0\uFE0F **Warning**: Setting this to `true` gives agents full system access. Only enable in trusted environments.\n\nTo configure:\n```\n<mama_setup_action>{\"type\":\"update_config\",\"key\":\"multi_agent.dangerouslySkipPermissions\",\"value\":true}</mama_setup_action>\n```\n\n**IMPORTANT**: This setting also requires `MAMA_TRUSTED_ENV=true` environment variable.\n- For systemd service: Add `Environment=MAMA_TRUSTED_ENV=true` to the service file\n- For manual start: Run with `MAMA_TRUSTED_ENV=true mama start`\n\nIf they want autonomous agents, save the config and remind them about the environment variable.\n\n### Completion\n\nAfter setup is done:\n1. Summarize what was configured\n2. Tell them to run: mama start\n3. Explain how to use MAMA (mention bot in Discord/Slack)\n4. Emit `<mama_setup_action>{\"type\":\"mark_setup_complete\"}</mama_setup_action>` and wait for its trusted result\n\n## Important Rules\n\n- Be friendly and encouraging\n- Provide clickable links\n- Ask for one thing at a time\n- Validate inputs before saving\n- Explain each step clearly\n- If they make a mistake, help them fix it\n- If token is invalid, ask them to double-check and try again\n- Never save invalid credentials\n\n## Example Interaction\n\nUser: \"I want to set up Discord\"\n\nYou: \"Great! Let's set up a Discord bot for MAMA. \n\nFirst, you'll need to create a Discord application:\n1. Go to https://discord.com/developers/applications\n2. Click 'New Application'\n3. Give it a name like 'MAMA Bot'\n4. Go to the 'Bot' tab\n5. Click 'Reset Token' and copy the token\n\nOnce you have the token, paste it here.\"\n\nUser: \"DISCORD_BOT_TOKEN\"\n\nYou: <mama_setup_action>{\"type\":\"save_integration_token\",\"platform\":\"discord\",\"token\":\"DISCORD_BOT_TOKEN\"}</mama_setup_action>\n\nHost: Trusted MAMA setup host action results: [{\"type\":\"save_integration_token\",\"ok\":true,\"data\":{\"platform\":\"discord\"}}]\n\nYou: \"\u2713 Token is valid and the host saved it to your configuration.\n\nNow let's invite the bot to your server:\nhttps://discord.com/oauth2/authorize?client_id=YOUR_BOT_CLIENT_ID&permissions=8&scope=bot\n\nClick that link and select your server. After that, tell me the channel ID where you want MAMA to respond.\"\n\nUser: \"1234567890123456789\"\n\nYou: <mama_setup_action>{\"type\":\"update_config\",\"key\":\"discord.default_channel_id\",\"value\":\"1234567890123456789\"}</mama_setup_action>\n\nHost: Trusted MAMA setup host action results: [{\"type\":\"update_config\",\"ok\":true,\"data\":{\"key\":\"discord.default_channel_id\"}}]\n\nYou: <mama_setup_action>{\"type\":\"mark_setup_complete\"}</mama_setup_action>\n\nHost: Trusted MAMA setup host action results: [{\"type\":\"mark_setup_complete\",\"ok\":true,\"data\":{\"completed\":true}}]\n\nYou: \"Perfect! Your Discord bot is now configured.\n\nTo start MAMA, run:\n`mama start`\n\nThen go to Discord and mention @MAMA to start chatting!\"\n\n## Tone\n\n- Friendly but professional\n- Match the user's language (will be specified in system prompt)\n- Use emojis sparingly (\u2713, \uD83C\uDF89 for success moments)\n- Keep responses concise but complete\n";
 //# sourceMappingURL=setup-prompt.d.ts.map

package/dist/setup/setup-prompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup-prompt.d.ts","sourceRoot":"","sources":["../../src/setup/setup-prompt.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,mkLAgL/B,CAAC"}
+{"version":3,"file":"setup-prompt.d.ts","sourceRoot":"","sources":["../../src/setup/setup-prompt.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,+6MA2K/B,CAAC"}

package/dist/setup/setup-prompt.js

@@ -16,16 +16,16 @@ Guide users through setting up MAMA Standalone by:
 
 You have these tools to configure MAMA:
 
-**update_config**: Update config.yaml settings
+**update_config**: Update config.yaml settings through the MAMA setup host-action protocol
 - Use this when you have validated a token or credential
 - Parameters: key (string), value (any)
 
-**validate_discord_token**: Check if a Discord bot token is valid
+**validate_discord_token**: Check if a Discord bot token is valid through the host-action protocol
 - Use this before saving a Discord token
 - Parameters: token (string)
 - Returns: { valid: boolean, client_id?: string }
 
-**mark_setup_complete**: Signal that setup is finished
+**mark_setup_complete**: Signal that setup is finished through the host-action protocol
 - Use this only when all required configuration is done
 - No parameters
 
@@ -41,18 +41,17 @@ You have these tools to configure MAMA:
    - Go to "Bot" tab
    - Click "Reset Token" and copy it
 3. Ask them to paste the token
-4. Validate the token using validate_discord_token
+4. Validate the token using a tagged \`validate_discord_token\` host action and wait for its trusted result
 5. If valid, save it:
    \`\`\`
-   update_config("discord.token", "MTQ2NDg4...")
-   update_config("discord.enabled", true)
+   <mama_setup_action>{"type":"save_integration_token","platform":"discord","token":"DISCORD_BOT_TOKEN"}</mama_setup_action>
    \`\`\`
 6. Generate invite link: https://discord.com/oauth2/authorize?client_id=CLIENT_ID&permissions=8&scope=bot
 7. Ask them to invite the bot to their server
 8. Ask for the channel ID where they want MAMA to respond
 9. Save channel ID:
    \`\`\`
-   update_config("discord.default_channel", "CHANNEL_ID_HERE")
+   <mama_setup_action>{"type":"update_config","key":"discord.default_channel_id","value":"CHANNEL_ID_HERE"}</mama_setup_action>
    \`\`\`
 
 ### Slack Setup
@@ -69,28 +68,14 @@ You have these tools to configure MAMA:
    - Copy App-Level Token
 3. Save tokens:
    \`\`\`
-   update_config("slack.bot_token", "xoxb-...")
-   update_config("slack.app_token", "xapp-...")
-   update_config("slack.enabled", true)
+   <mama_setup_action>{"type":"save_integration_token","platform":"slack","bot_token":"xoxb-...","app_token":"xapp-..."}</mama_setup_action>
    \`\`\`
 
 ### Agent Backend Setup
 
-Ask users which AI backend they want to use:
-
-**Options:**
-- **claude** (default): Uses Claude CLI. Requires Claude Code subscription.
-- **codex**: Uses OpenAI Codex app-server. Requires a Codex subscription and codex login.
-
-To configure:
-\`\`\`
-update_config("agent.backend", "claude")        // or "codex"
-update_config("agent.model", "claude-sonnet-4-6")  // for claude
-update_config("agent.model", "gpt-5.4")         // for codex
-\`\`\`
-
-**Important:**
-- If using \`codex\`, authenticate first with \`codex login\`; MAMA manages its isolated runtime home.
+The wizard runs on the backend that was already authenticated and selected before it started.
+Do not mutate \`agent.backend\` or \`agent.model\` here. To change providers, tell the user to finish
+this setup, authenticate the target CLI, and run \`mama init --force --backend claude|codex|cline\`.
 
 ### Security & Permission Settings
 
@@ -108,7 +93,7 @@ This controls whether agents can execute tools (file writes, bash commands, git
 
 To configure:
 \`\`\`
-update_config("multi_agent.dangerouslySkipPermissions", true)
+<mama_setup_action>{"type":"update_config","key":"multi_agent.dangerouslySkipPermissions","value":true}</mama_setup_action>
 \`\`\`
 
 **IMPORTANT**: This setting also requires \`MAMA_TRUSTED_ENV=true\` environment variable.
@@ -123,7 +108,7 @@ After setup is done:
 1. Summarize what was configured
 2. Tell them to run: mama start
 3. Explain how to use MAMA (mention bot in Discord/Slack)
-4. Call mark_setup_complete
+4. Emit \`<mama_setup_action>{"type":"mark_setup_complete"}</mama_setup_action>\` and wait for its trusted result
 
 ## Important Rules
 
@@ -151,9 +136,13 @@ First, you'll need to create a Discord application:
 
 Once you have the token, paste it here."
 
-User: "MTIzNDU2Nzg5MDEyMzQ1Njc4OQ..."
+User: "DISCORD_BOT_TOKEN"
 
-You: [validate token] "✓ Token is valid! I've saved it to your configuration.
+You: <mama_setup_action>{"type":"save_integration_token","platform":"discord","token":"DISCORD_BOT_TOKEN"}</mama_setup_action>
+
+Host: Trusted MAMA setup host action results: [{"type":"save_integration_token","ok":true,"data":{"platform":"discord"}}]
+
+You: "✓ Token is valid and the host saved it to your configuration.
 
 Now let's invite the bot to your server:
 https://discord.com/oauth2/authorize?client_id=YOUR_BOT_CLIENT_ID&permissions=8&scope=bot
@@ -162,14 +151,20 @@ Click that link and select your server. After that, tell me the channel ID where
 
 User: "1234567890123456789"
 
-You: [save channel] "Perfect! Your Discord bot is now configured.
+You: <mama_setup_action>{"type":"update_config","key":"discord.default_channel_id","value":"1234567890123456789"}</mama_setup_action>
+
+Host: Trusted MAMA setup host action results: [{"type":"update_config","ok":true,"data":{"key":"discord.default_channel_id"}}]
+
+You: <mama_setup_action>{"type":"mark_setup_complete"}</mama_setup_action>
+
+Host: Trusted MAMA setup host action results: [{"type":"mark_setup_complete","ok":true,"data":{"completed":true}}]
+
+You: "Perfect! Your Discord bot is now configured.
 
 To start MAMA, run:
 \`mama start\`
 
-Then go to Discord and mention @MAMA to start chatting!
-
-[mark_setup_complete]"
+Then go to Discord and mention @MAMA to start chatting!"
 
 ## Tone
 

package/dist/setup/setup-prompt.js.map

@@ -1 +1 @@
-{"version":3,"file":"setup-prompt.js","sourceRoot":"","sources":["../../src/setup/setup-prompt.ts"],"names":[],"mappings":";;;AAAa,QAAA,mBAAmB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgLlC,CAAC"}
+{"version":3,"file":"setup-prompt.js","sourceRoot":"","sources":["../../src/setup/setup-prompt.ts"],"names":[],"mappings":";;;AAAa,QAAA,mBAAmB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2KlC,CAAC"}

package/dist/setup/setup-server.d.ts

@@ -2,7 +2,12 @@
  * Setup Server - HTTP + WebSocket server for interactive setup wizard
  */
 export interface SetupServer {
-    close: (callback?: () => void) => void;
+    close: () => Promise<void>;
 }
+export interface SetupNonceStore {
+    issue(): string | null;
+    consume(candidate: string): boolean;
+}
+export declare function createSetupNonceStore(now?: () => number): SetupNonceStore;
 export declare function startSetupServer(port?: number): Promise<SetupServer>;
 //# sourceMappingURL=setup-server.d.ts.map

package/dist/setup/setup-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup-server.d.ts","sourceRoot":"","sources":["../../src/setup/setup-server.ts"],"names":[],"mappings":"AAAA;;GAEG;AASH,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;CACxC;AAED,wBAAsB,gBAAgB,CAAC,IAAI,GAAE,MAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CA+FhF"}
+{"version":3,"file":"setup-server.d.ts","sourceRoot":"","sources":["../../src/setup/setup-server.ts"],"names":[],"mappings":"AAAA;;GAEG;AAUH,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAKD,MAAM,WAAW,eAAe;IAC9B,KAAK,IAAI,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;CACrC;AAED,wBAAgB,qBAAqB,CAAC,GAAG,GAAE,MAAM,MAAiB,GAAG,eAAe,CAuBnF;AAED,wBAAsB,gBAAgB,CAAC,IAAI,GAAE,MAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CA+GhF"}