@jungjaehoon/mama-os 0.53.1 → 0.58.0

package/db/migrations/001-connector-event-index.sql

@@ -0,0 +1,251 @@
+-- The connector event index, declared by the package that has connectors.
+--
+-- It was declared by the core, across seven core migrations, because a migration's
+-- identity was a bare version number and no other author could pick one. So every
+-- consumer of the core created these tables: the Claude plugin's live database
+-- holds eighteen of them and zero rows, and so does the MCP server's.
+--
+-- Three of the four consumers have no connectors. This is the one that does.
+--
+-- Declared whole rather than as a chain of seven, because it is being declared
+-- for the first time under this source. The statements are the schema those seven
+-- produced, read back from a built database rather than transcribed.
+
+CREATE TABLE connector_event_index (
+  event_index_id TEXT PRIMARY KEY,
+  source_connector TEXT NOT NULL,
+  source_type TEXT NOT NULL,
+  source_id TEXT NOT NULL,
+  source_locator TEXT,
+  channel TEXT,
+  author TEXT,
+  title TEXT,
+  content TEXT NOT NULL,
+  event_datetime INTEGER,
+  event_date TEXT,
+  source_timestamp_ms INTEGER NOT NULL,
+  metadata_json TEXT,
+  artifact_locator TEXT,
+  artifact_title TEXT,
+  content_hash BLOB NOT NULL CHECK(length(content_hash) = 32),
+  indexed_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  expires_at TEXT
+, source_cursor TEXT, tenant_id TEXT, project_id TEXT, memory_scope_kind TEXT, memory_scope_id TEXT, operator_ingest_seq INTEGER CHECK (
+    operator_ingest_seq IS NULL OR operator_ingest_seq >= 1
+  ), operator_observation_seq INTEGER CHECK (
+    operator_observation_seq IS NULL OR operator_observation_seq >= 1
+  ), source_entity_id TEXT, current_observation_id TEXT REFERENCES observation_versions(observation_id));
+
+CREATE TABLE connector_event_index_cursors (
+  connector_name TEXT PRIMARY KEY,
+  last_seen_timestamp_ms INTEGER NOT NULL DEFAULT 0,
+  last_seen_source_id TEXT NOT NULL DEFAULT '',
+  last_sweep_at TEXT,
+  last_success_at TEXT,
+  last_error TEXT,
+  last_error_at TEXT,
+  indexed_count INTEGER NOT NULL DEFAULT 0
+);
+
+CREATE TABLE connector_event_index_observation_cursors (
+  source_connector TEXT PRIMARY KEY,
+  next_seq INTEGER NOT NULL CHECK (next_seq >= 1)
+);
+
+CREATE TABLE connector_event_index_operator_seq_cursors (
+  source_connector TEXT NOT NULL,
+  channel TEXT NOT NULL DEFAULT '',
+  next_seq INTEGER NOT NULL CHECK (next_seq >= 1),
+  PRIMARY KEY (source_connector, channel)
+);
+
+CREATE INDEX idx_connector_event_index_artifact_locator
+  ON connector_event_index(artifact_locator)
+  WHERE artifact_locator IS NOT NULL;
+
+CREATE INDEX idx_connector_event_index_cursor_order
+  ON connector_event_index(source_connector, source_timestamp_ms, source_id);
+
+CREATE INDEX idx_connector_event_index_event_date
+  ON connector_event_index(event_date, event_datetime, event_index_id);
+
+CREATE INDEX idx_connector_event_index_event_datetime
+  ON connector_event_index(event_datetime, event_index_id);
+
+CREATE INDEX idx_connector_event_index_expires_at
+  ON connector_event_index(expires_at)
+  WHERE expires_at IS NOT NULL;
+
+CREATE UNIQUE INDEX idx_connector_event_index_observation_seq
+  ON connector_event_index(source_connector, operator_observation_seq)
+  WHERE operator_observation_seq IS NOT NULL;
+
+CREATE INDEX idx_connector_event_index_operator_cursor_order
+  ON connector_event_index(source_connector, channel, operator_ingest_seq);
+
+CREATE UNIQUE INDEX idx_connector_event_index_operator_scope_seq
+  ON connector_event_index(source_connector, COALESCE(channel, ''), operator_ingest_seq)
+  WHERE operator_ingest_seq IS NOT NULL;
+
+CREATE UNIQUE INDEX idx_connector_event_index_source_identity
+  ON connector_event_index(source_connector, source_id);
+
+CREATE INDEX idx_connector_event_scope
+  ON connector_event_index(tenant_id, project_id, memory_scope_kind, memory_scope_id);
+
+CREATE INDEX idx_connector_event_source_cursor
+  ON connector_event_index(source_connector, source_cursor);
+
+CREATE INDEX idx_connector_event_source_entity
+  ON connector_event_index(source_connector, source_entity_id);
+
+CREATE TRIGGER trg_connector_event_index_legacy_content_refresh_au
+AFTER UPDATE OF content_hash, metadata_json, source_timestamp_ms, source_type, channel
+ON connector_event_index
+WHEN (
+  OLD.content_hash IS NOT NEW.content_hash
+  OR OLD.metadata_json IS NOT NEW.metadata_json
+  OR OLD.source_timestamp_ms IS NOT NEW.source_timestamp_ms
+  OR OLD.source_type IS NOT NEW.source_type
+  OR OLD.channel IS NOT NEW.channel
+) AND (
+  NEW.operator_ingest_seq IS OLD.operator_ingest_seq
+  OR NEW.operator_observation_seq IS OLD.operator_observation_seq
+)
+BEGIN
+  UPDATE connector_event_index
+  SET operator_ingest_seq = CASE
+        WHEN NEW.operator_ingest_seq IS OLD.operator_ingest_seq THEN NULL
+        ELSE NEW.operator_ingest_seq
+      END,
+      operator_observation_seq = CASE
+        WHEN NEW.operator_observation_seq IS OLD.operator_observation_seq THEN NULL
+        ELSE NEW.operator_observation_seq
+      END
+  WHERE event_index_id = NEW.event_index_id;
+END;
+
+CREATE TRIGGER trg_connector_event_index_observation_seq_ai
+AFTER INSERT ON connector_event_index
+WHEN NEW.operator_observation_seq IS NULL
+BEGIN
+  INSERT INTO connector_event_index_observation_cursors
+    (source_connector, next_seq)
+  VALUES (NEW.source_connector, 1)
+  ON CONFLICT(source_connector) DO NOTHING;
+  UPDATE connector_event_index
+  SET operator_observation_seq = (
+    SELECT next_seq FROM connector_event_index_observation_cursors
+    WHERE source_connector = NEW.source_connector
+  )
+  WHERE event_index_id = NEW.event_index_id;
+  UPDATE connector_event_index_observation_cursors
+  SET next_seq = next_seq + 1
+  WHERE source_connector = NEW.source_connector;
+END;
+
+CREATE TRIGGER trg_connector_event_index_observation_seq_au
+AFTER UPDATE OF operator_observation_seq ON connector_event_index
+WHEN NEW.operator_observation_seq IS NULL AND OLD.operator_observation_seq IS NOT NULL
+BEGIN
+  INSERT INTO connector_event_index_observation_cursors
+    (source_connector, next_seq)
+  VALUES (NEW.source_connector, 1)
+  ON CONFLICT(source_connector) DO NOTHING;
+  UPDATE connector_event_index
+  SET operator_observation_seq = (
+    SELECT next_seq FROM connector_event_index_observation_cursors
+    WHERE source_connector = NEW.source_connector
+  )
+  WHERE event_index_id = NEW.event_index_id;
+  UPDATE connector_event_index_observation_cursors
+  SET next_seq = next_seq + 1
+  WHERE source_connector = NEW.source_connector;
+END;
+
+CREATE TRIGGER trg_connector_event_index_observation_seq_explicit_ai
+AFTER INSERT ON connector_event_index
+WHEN NEW.operator_observation_seq IS NOT NULL
+BEGIN
+  INSERT INTO connector_event_index_observation_cursors
+    (source_connector, next_seq)
+  VALUES (NEW.source_connector, 1)
+  ON CONFLICT(source_connector) DO NOTHING;
+  UPDATE connector_event_index_observation_cursors
+  SET next_seq = CASE
+    WHEN next_seq <= NEW.operator_observation_seq THEN NEW.operator_observation_seq + 1
+    ELSE next_seq
+  END
+  WHERE source_connector = NEW.source_connector;
+END;
+
+CREATE TRIGGER trg_connector_event_index_operator_ingest_seq_ai
+AFTER INSERT ON connector_event_index
+WHEN NEW.operator_ingest_seq IS NULL
+BEGIN
+  INSERT OR IGNORE INTO connector_event_index_operator_seq_cursors (
+    source_connector,
+    channel,
+    next_seq
+  )
+  VALUES (NEW.source_connector, COALESCE(NEW.channel, ''), 1);
+
+UPDATE connector_event_index
+  SET operator_ingest_seq = (
+    SELECT next_seq
+    FROM connector_event_index_operator_seq_cursors
+    WHERE source_connector = NEW.source_connector
+      AND channel = COALESCE(NEW.channel, '')
+  )
+  WHERE event_index_id = NEW.event_index_id;
+
+UPDATE connector_event_index_operator_seq_cursors
+  SET next_seq = next_seq + 1
+  WHERE source_connector = NEW.source_connector
+    AND channel = COALESCE(NEW.channel, '');
+END;
+
+CREATE TRIGGER trg_connector_event_index_operator_ingest_seq_au
+AFTER UPDATE OF operator_ingest_seq ON connector_event_index
+WHEN NEW.operator_ingest_seq IS NULL AND OLD.operator_ingest_seq IS NOT NULL
+BEGIN
+  INSERT INTO connector_event_index_operator_seq_cursors
+    (source_connector, channel, next_seq)
+  VALUES (NEW.source_connector, COALESCE(NEW.channel, ''), 1)
+  ON CONFLICT(source_connector, channel) DO NOTHING;
+  UPDATE connector_event_index
+  SET operator_ingest_seq = (
+    SELECT next_seq FROM connector_event_index_operator_seq_cursors
+    WHERE source_connector = NEW.source_connector
+      AND channel = COALESCE(NEW.channel, '')
+  )
+  WHERE event_index_id = NEW.event_index_id;
+  UPDATE connector_event_index_operator_seq_cursors
+  SET next_seq = next_seq + 1
+  WHERE source_connector = NEW.source_connector
+    AND channel = COALESCE(NEW.channel, '');
+END;
+
+CREATE TRIGGER trg_connector_event_index_operator_ingest_seq_explicit_ai
+AFTER INSERT ON connector_event_index
+WHEN NEW.operator_ingest_seq IS NOT NULL
+BEGIN
+  INSERT OR IGNORE INTO connector_event_index_operator_seq_cursors (
+    source_connector,
+    channel,
+    next_seq
+  )
+  VALUES (NEW.source_connector, COALESCE(NEW.channel, ''), 1);
+
+UPDATE connector_event_index_operator_seq_cursors
+  SET next_seq = CASE
+    WHEN next_seq <= NEW.operator_ingest_seq THEN NEW.operator_ingest_seq + 1
+    ELSE next_seq
+  END
+  WHERE source_connector = NEW.source_connector
+    AND channel = COALESCE(NEW.channel, '');
+END;
+
+INSERT OR IGNORE INTO schema_version (source, version, description)
+VALUES ('standalone', 1, 'The connector event index belongs to the package with connectors');

package/dist/agent/claude-native-tool-policy.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Owner decision 2026-09-26: the Claude owner runtime writes only inside its workspace and has
+ * web access. The rules go on the CLI (--allowedTools): measured with Claude Code 2.1.282, project
+ * settings permissions were not applied to non-interactive runs while their sandbox was. An Edit
+ * path rule also governs Write and NotebookEdit; "//" anchors it at an absolute path. Under dontAsk
+ * an unmatched call is denied. Bash is confined by the sandbox in the workspace project settings.
+ */
+export declare function claudeOwnerAllowedTools(workspaceDir: string): string[];
+/** CLI deny rules also govern native children; project permission rules are ignored in -p. */
+export declare function claudeOwnerDisallowedTools(paths: readonly string[], workspaceDir: string): string[];
+export interface ClaudeToolRole {
+    allowedTools?: readonly string[];
+    blockedTools?: readonly string[];
+}
+/** Project the turn's native builtin grant onto Claude's --tools value. */
+export declare function projectClaudeNativeTools(role: ClaudeToolRole | undefined): string | undefined;
+//# sourceMappingURL=claude-native-tool-policy.d.ts.map

package/dist/agent/claude-native-tool-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-native-tool-policy.d.ts","sourceRoot":"","sources":["../../src/agent/claude-native-tool-policy.ts"],"names":[],"mappings":"AA+BA;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAYtE;AAED,8FAA8F;AAC9F,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,YAAY,EAAE,MAAM,GACnB,MAAM,EAAE,CAQV;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AASD,2EAA2E;AAC3E,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,cAAc,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAe7F"}

package/dist/agent/claude-native-tool-policy.js

@@ -0,0 +1,88 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.claudeOwnerAllowedTools = claudeOwnerAllowedTools;
+exports.claudeOwnerDisallowedTools = claudeOwnerDisallowedTools;
+exports.projectClaudeNativeTools = projectClaudeNativeTools;
+/**
+ * Role tool names that resolve to Claude CLI builtin tools. Catalog/MCP actions
+ * are granted through a different surface; this map covers only the CLI's own
+ * builtins.
+ */
+const CLAUDE_NATIVE_TOOL_MAP = {
+    native_subagent: 'Agent',
+    Read: 'Read',
+    Write: 'Write',
+    Edit: 'Edit',
+    NotebookEdit: 'NotebookEdit',
+    Bash: 'Bash',
+    Glob: 'Glob',
+    Grep: 'Grep',
+    WebFetch: 'WebFetch',
+    WebSearch: 'WebSearch',
+};
+const CLAUDE_BUILTIN_TOOLS = [
+    'Agent',
+    'Read',
+    'Write',
+    'Edit',
+    'NotebookEdit',
+    'Bash',
+    'Glob',
+    'Grep',
+    'WebFetch',
+    'WebSearch',
+];
+/**
+ * Owner decision 2026-09-26: the Claude owner runtime writes only inside its workspace and has
+ * web access. The rules go on the CLI (--allowedTools): measured with Claude Code 2.1.282, project
+ * settings permissions were not applied to non-interactive runs while their sandbox was. An Edit
+ * path rule also governs Write and NotebookEdit; "//" anchors it at an absolute path. Under dontAsk
+ * an unmatched call is denied. Bash is confined by the sandbox in the workspace project settings.
+ */
+function claudeOwnerAllowedTools(workspaceDir) {
+    return [
+        'Read',
+        'Glob',
+        'Grep',
+        `Edit(/${workspaceDir}/**)`,
+        'Bash',
+        'WebFetch',
+        'WebSearch',
+        'mcp__mama__*',
+        'Agent',
+    ];
+}
+/** CLI deny rules also govern native children; project permission rules are ignored in -p. */
+function claudeOwnerDisallowedTools(paths, workspaceDir) {
+    return [
+        ...paths.flatMap((path) => [`Read(/${path})`, `Read(/${path}/**)`]),
+        ...['Edit', 'Write', 'NotebookEdit'].flatMap((tool) => [
+            `${tool}(/${workspaceDir}/.claude)`,
+            `${tool}(/${workspaceDir}/.claude/**)`,
+        ]),
+    ];
+}
+function isBlocked(cliName, blocked) {
+    if (blocked.has(cliName))
+        return true;
+    return Object.entries(CLAUDE_NATIVE_TOOL_MAP).some(([roleName, mapped]) => mapped === cliName && blocked.has(roleName));
+}
+/** Project the turn's native builtin grant onto Claude's --tools value. */
+function projectClaudeNativeTools(role) {
+    const allowed = role?.allowedTools ?? [];
+    const blocked = new Set(role?.blockedTools ?? []);
+    if (blocked.has('*'))
+        return '';
+    if (allowed.includes('*')) {
+        const granted = CLAUDE_BUILTIN_TOOLS.filter((tool) => !isBlocked(tool, blocked));
+        return granted.join(',');
+    }
+    const granted = new Set();
+    for (const [roleName, cliName] of Object.entries(CLAUDE_NATIVE_TOOL_MAP)) {
+        if (allowed.includes(roleName) && !blocked.has(roleName) && !blocked.has(cliName)) {
+            granted.add(cliName);
+        }
+    }
+    return [...granted].join(',');
+}
+//# sourceMappingURL=claude-native-tool-policy.js.map

package/dist/agent/claude-native-tool-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-native-tool-policy.js","sourceRoot":"","sources":["../../src/agent/claude-native-tool-policy.ts"],"names":[],"mappings":";;AAsCA,0DAYC;AAGD,gEAWC;AAeD,4DAeC;AA9FD;;;;GAIG;AACH,MAAM,sBAAsB,GAAqC;IAC/D,eAAe,EAAE,OAAO;IACxB,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,YAAY,EAAE,cAAc;IAC5B,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,WAAW;CACvB,CAAC;AAEF,MAAM,oBAAoB,GAAsB;IAC9C,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,cAAc;IACd,MAAM;IACN,MAAM;IACN,MAAM;IACN,UAAU;IACV,WAAW;CACZ,CAAC;AAEF;;;;;;GAMG;AACH,SAAgB,uBAAuB,CAAC,YAAoB;IAC1D,OAAO;QACL,MAAM;QACN,MAAM;QACN,MAAM;QACN,SAAS,YAAY,MAAM;QAC3B,MAAM;QACN,UAAU;QACV,WAAW;QACX,cAAc;QACd,OAAO;KACR,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,SAAgB,0BAA0B,CACxC,KAAwB,EACxB,YAAoB;IAEpB,OAAO;QACL,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,IAAI,GAAG,EAAE,SAAS,IAAI,MAAM,CAAC,CAAC;QACnE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACrD,GAAG,IAAI,KAAK,YAAY,WAAW;YACnC,GAAG,IAAI,KAAK,YAAY,cAAc;SACvC,CAAC;KACH,CAAC;AACJ,CAAC;AAOD,SAAS,SAAS,CAAC,OAAe,EAAE,OAA4B;IAC9D,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAChD,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,KAAK,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CACpE,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,SAAgB,wBAAwB,CAAC,IAAgC;IACvE,MAAM,OAAO,GAAG,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACjF,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACzE,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAClF,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChC,CAAC"}

package/dist/api/attachment-actions.d.ts

@@ -0,0 +1,16 @@
+import type { ActionRegistration } from '@jungjaehoon/mama-core';
+import type { ConnectorRegistry } from '../connectors/framework/connector-registry.js';
+import type { StoredSourceReader } from './stored-source-reader.js';
+import { type OwnerFileSender } from './file-delivery.js';
+export interface AttachmentActionPorts {
+    stored?: StoredSourceReader | null;
+    connectors?: () => ConnectorRegistry | null;
+    workspaceDir?: string;
+    downloadsDir?: string;
+    telegram?: () => OwnerFileSender | null;
+    discord?: () => OwnerFileSender | null;
+    slack?: () => OwnerFileSender | null;
+}
+export declare function safeFileName(name: string): string;
+export declare function createAttachmentActionRegistrations(ports?: AttachmentActionPorts): ActionRegistration[];
+//# sourceMappingURL=attachment-actions.d.ts.map

package/dist/api/attachment-actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-actions.d.ts","sourceRoot":"","sources":["../../src/api/attachment-actions.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,kBAAkB,EAGnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+CAA+C,CAAC;AAQvF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAEjF,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACnC,UAAU,CAAC,EAAE,MAAM,iBAAiB,GAAG,IAAI,CAAC;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,eAAe,GAAG,IAAI,CAAC;IACxC,OAAO,CAAC,EAAE,MAAM,eAAe,GAAG,IAAI,CAAC;IACvC,KAAK,CAAC,EAAE,MAAM,eAAe,GAAG,IAAI,CAAC;CACtC;AAqKD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAYjD;AAyBD,wBAAgB,mCAAmC,CACjD,KAAK,GAAE,qBAA0B,GAChC,kBAAkB,EAAE,CA2GtB"}

package/dist/api/attachment-actions.js

@@ -0,0 +1,280 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.safeFileName = safeFileName;
+exports.createAttachmentActionRegistrations = createAttachmentActionRegistrations;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const attachments_js_1 = require("../connectors/framework/attachments.js");
+const index_js_1 = require("../connectors/chatwork/index.js");
+const index_js_2 = require("../connectors/slack/index.js");
+const file_delivery_js_1 = require("./file-delivery.js");
+const attachmentRefSchema = {
+    type: 'object',
+    required: ['observationRef'],
+    additionalProperties: false,
+    properties: {
+        observationRef: {
+            type: 'string',
+            pattern: '\\S',
+            description: 'Exact stored observation handle returned by source.search, e.g. "obs_test".',
+        },
+    },
+};
+const attachmentDownloadSchema = {
+    type: 'object',
+    required: ['observationRef', 'fileId'],
+    additionalProperties: false,
+    properties: {
+        observationRef: {
+            type: 'string',
+            pattern: '\\S',
+            description: 'Exact stored observation handle carrying the message attachment.',
+        },
+        fileId: {
+            type: 'string',
+            pattern: '\\S',
+            description: 'Provider file id returned by source.attachment.list.',
+        },
+    },
+};
+const ownerFileSchema = {
+    type: 'object',
+    required: ['path'],
+    additionalProperties: false,
+    properties: {
+        path: {
+            type: 'string',
+            pattern: '\\S',
+            description: 'Absolute path under the workspace files directory.',
+        },
+        caption: {
+            type: 'string',
+            maxLength: 1_024,
+            description: 'Optional file caption.',
+        },
+    },
+};
+function requiredStoredReader(ports) {
+    if (!ports.stored) {
+        const error = new Error('Stored source reader is not configured for attachment actions');
+        error.name = 'attachment_source_unavailable';
+        throw error;
+    }
+    return ports.stored;
+}
+function sourceAllowance(context) {
+    return context.readAllowance?.maxSourceMs === undefined
+        ? undefined
+        : { maxSourceMs: context.readAllowance.maxSourceMs };
+}
+async function readObservation(ports, input, context) {
+    const observationRef = input.observationRef;
+    if (typeof observationRef !== 'string' || observationRef.trim() === '') {
+        throw new Error('attachment action requires observationRef');
+    }
+    const result = await requiredStoredReader(ports).readObservation(observationRef, context.access, sourceAllowance(context));
+    if (!result || typeof result !== 'object' || Array.isArray(result)) {
+        throw new Error(`Stored observation ${observationRef} is malformed`);
+    }
+    const observation = result;
+    if (typeof observation.source !== 'string' || observation.source.trim() === '') {
+        throw new Error(`Stored observation ${observationRef} has no connector source`);
+    }
+    return observation;
+}
+function providerFor(ports, source) {
+    if (source !== 'chatwork' && source !== 'slack') {
+        const error = new Error(`Connector ${source} does not support source attachments. Supported connectors: chatwork, slack.`);
+        error.name = 'invalid_input';
+        throw error;
+    }
+    const registry = ports.connectors?.();
+    if (!registry)
+        throw new Error(`Connector registry is not available for ${source} attachments`);
+    const connector = registry.get(source);
+    if (!connector)
+        throw new Error(`Connector ${source} is not active for attachments`);
+    return (0, attachments_js_1.attachmentConnector)(connector);
+}
+function record(metadata, key) {
+    const value = metadata?.[key];
+    if (!Array.isArray(value))
+        return [];
+    return value
+        .map((item) => (typeof item === 'string' || typeof item === 'number' ? String(item) : ''))
+        .map((item) => item.trim())
+        .filter(Boolean);
+}
+function roomIdFor(observation) {
+    const metadata = observation.metadata ?? {};
+    const direct = metadata.roomId ?? metadata.chatworkRoomId ?? metadata.channelId;
+    if (typeof direct === 'string' && direct.trim() !== '')
+        return direct.trim();
+    if (typeof direct === 'number' && Number.isSafeInteger(direct))
+        return String(direct);
+    const originalChannel = metadata.originalChannel;
+    if (typeof originalChannel === 'string') {
+        if (observation.source === 'chatwork' && /^\d+$/.test(originalChannel.trim())) {
+            return originalChannel.trim();
+        }
+        const separator = originalChannel.indexOf(':');
+        if (separator > 0 && originalChannel.slice(0, separator) === observation.source) {
+            const suffix = originalChannel.slice(separator + 1).trim();
+            if (suffix !== '')
+                return suffix;
+        }
+    }
+    throw new Error(`Observation ${observation.observationRef} has no ${observation.source} room id`);
+}
+function idsFor(observation) {
+    const metadata = observation.metadata;
+    if (observation.source === 'chatwork') {
+        const ids = record(metadata, 'chatworkFileIds');
+        if (ids.length > 0)
+            return { ids, fileIdRule: 'metadata_file_id' };
+        const contentIds = (0, index_js_1.extractChatworkFileIds)(observation.content ?? '');
+        return { ids: contentIds, fileIdRule: contentIds.length > 0 ? 'text_marker' : undefined };
+    }
+    const ids = record(metadata, 'slackFileIds');
+    if (ids.length > 0)
+        return { ids, fileIdRule: 'metadata_file_id' };
+    const contentIds = (0, index_js_2.extractSlackFileIds)(observation.content ?? '');
+    return { ids: contentIds, fileIdRule: contentIds.length > 0 ? 'text_marker' : undefined };
+}
+function safeFileName(name) {
+    // Keep the provider's name readable (the owner receives this file); drop only what could
+    // leave the directory or break a path.
+    const safe = [...name]
+        .map((char) => char === '/' || char === '\\' || char < ' ' || (char >= '\u007f' && char <= '\u009f')
+        ? '_'
+        : char)
+        .join('');
+    if (safe === '' || safe === '.' || safe === '..')
+        throw new Error('Attachment filename is empty');
+    return safe;
+}
+function attachmentRequest(observation) {
+    const { ids, fileIdRule } = idsFor(observation);
+    return {
+        roomId: roomIdFor(observation),
+        sourceAtMs: observation.sourceAt ?? null,
+        ...(observation.metadata?.accountId === undefined
+            ? {}
+            : { accountId: String(observation.metadata.accountId) }),
+        ...(typeof observation.author === 'string' ? { author: observation.author } : {}),
+        ...(observation.metadata?.messageId === undefined
+            ? {}
+            : { messageId: String(observation.metadata.messageId) }),
+        ...(ids.length === 0 ? {} : { fileIds: ids }),
+        ...(fileIdRule === undefined ? {} : { fileIdRule }),
+    };
+}
+function workspaceFilesRoot(ports) {
+    if (!ports.workspaceDir?.trim())
+        throw new Error('Attachment workspace directory is not configured');
+    return (0, node_path_1.join)(ports.workspaceDir, 'files');
+}
+function createAttachmentActionRegistrations(ports = {}) {
+    return [
+        {
+            contract: {
+                name: 'source.attachment.list',
+                summary: 'List files attached to one preserved Chatwork or Slack observation, including the matching rule, provider file id, name, size, and upload time. Other sources have no attachment support and fail as invalid input. Download a listed file with source.attachment.download and its fileId.',
+                inputSchema: attachmentRefSchema,
+                examples: [{ title: 'List message attachments', input: { observationRef: 'obs_test' } }],
+            },
+            exec: async (input, context) => {
+                const observation = await readObservation(ports, input, context);
+                const provider = providerFor(ports, observation.source);
+                const files = await provider.listAttachments(attachmentRequest(observation));
+                return {
+                    observationRef: observation.observationRef,
+                    connector: observation.source,
+                    files,
+                };
+            },
+        },
+        {
+            contract: {
+                name: 'source.attachment.download',
+                summary: 'Download a file belonging to the cited Chatwork or Slack observation into the daemon downloads directory (read-only for the agent) and return its saved path and size.',
+                inputSchema: attachmentDownloadSchema,
+                examples: [
+                    {
+                        title: 'Fetch one listed attachment',
+                        input: { observationRef: 'obs_test', fileId: 'file_test' },
+                    },
+                ],
+            },
+            exec: async (input, context) => {
+                const values = input;
+                const fileId = values.fileId;
+                if (typeof fileId !== 'string' || fileId.trim() === '')
+                    throw new Error('fileId is required');
+                const observation = await readObservation(ports, values, context);
+                const provider = providerFor(ports, observation.source);
+                const roomId = roomIdFor(observation);
+                const request = attachmentRequest(observation);
+                const unrelated = request.fileIds !== undefined && !request.fileIds.includes(fileId);
+                const listed = unrelated
+                    ? []
+                    : await provider.listAttachments({
+                        ...request,
+                        ...(request.fileIds === undefined ? {} : { fileIds: [fileId] }),
+                    });
+                const descriptor = listed.find((file) => file.fileId === fileId);
+                if (!descriptor) {
+                    throw new Error(`File ${fileId} does not belong to observation ${observation.observationRef} room ${roomId}`);
+                }
+                if (!ports.downloadsDir?.trim())
+                    throw new Error('Attachment downloads directory is not configured');
+                const targetDir = (0, node_path_1.join)(ports.downloadsDir, observation.source, safeFileName(roomId));
+                (0, node_fs_1.mkdirSync)(targetDir, { recursive: true, mode: 0o700 });
+                const targetPath = (0, node_path_1.join)(targetDir, `${safeFileName(fileId)}_${safeFileName(descriptor.name)}`);
+                const downloaded = await provider.downloadAttachment({
+                    roomId,
+                    fileId,
+                    targetPath,
+                });
+                const size = (0, node_fs_1.statSync)(targetPath).size;
+                if (size !== downloaded.size) {
+                    throw new Error(`Downloaded file ${fileId} size changed while saving`);
+                }
+                return {
+                    observationRef: observation.observationRef,
+                    connector: observation.source,
+                    fileId,
+                    path: targetPath,
+                    size,
+                };
+            },
+        },
+        ...['telegram', 'discord', 'slack'].map((messenger) => ({
+            contract: {
+                name: `deliver.${messenger}.file`,
+                summary: `Send one regular file under the owner workspace files directory through ${messenger}; images and documents use the messenger upload API.`,
+                inputSchema: ownerFileSchema,
+                examples: [
+                    { title: 'Send a workspace result', input: { path: '/workspace/files/result.xlsx' } },
+                ],
+            },
+            exec: async (input, context) => {
+                const values = input;
+                const path = values.path;
+                if (typeof path !== 'string' || path.trim() === '')
+                    throw new Error('path is required');
+                if (typeof context.operationId !== 'string' || context.operationId.trim() === '') {
+                    throw new Error(`deliver.${messenger}.file requires an operation id`);
+                }
+                const sender = ports[messenger]?.();
+                if (!sender)
+                    throw new Error(`${messenger} file delivery port is not configured`);
+                const validated = (0, file_delivery_js_1.validateWorkspaceFile)(workspaceFilesRoot(ports), path);
+                const caption = values.caption === undefined ? undefined : String(values.caption);
+                const result = await sender.sendFile(validated.path, caption, context.operationId);
+                return { path: validated.path, ...result };
+            },
+        })),
+    ];
+}
+//# sourceMappingURL=attachment-actions.js.map