@jungjaehoon/mama-os 0.53.1 → 0.58.0

package/dist/runtime/action-mcp-server.js

@@ -0,0 +1,178 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleRequest = handleRequest;
+exports.runStdioMcpServer = runStdioMcpServer;
+const untrusted_content_js_1 = require("../utils/untrusted-content.js");
+/**
+ * The owner agent's door into the daemon's action catalog, spoken as stdio MCP
+ * because that is how the CLI backends take tools.
+ *
+ * tools/list is the catalog's own describe over the runtime socket; tools/call
+ * is one client.call on the same socket. No database, no second execution path.
+ * The session credential is re-read per request, so rotation takes effect on
+ * the next call instead of pinning a stale one; it never appears in tool output.
+ *
+ * MCP servers log to stderr (stdout is JSON-RPC).
+ */
+const node_path_1 = require("node:path");
+const node_readline_1 = __importDefault(require("node:readline"));
+const client_1 = require("@jungjaehoon/mama-core/client/client");
+const session_credential_js_1 = require("./session-credential.js");
+const claude_caller_hook_js_1 = require("./claude-caller-hook.js");
+const help_actions_js_1 = require("../api/help-actions.js");
+const PROTOCOL_VERSION = '2025-06-18';
+const SERVER_INFO = { name: 'mama', version: '0.1.0' };
+function log(message) {
+    process.stderr.write(`[mama-action-mcp] ${message}\n`);
+}
+function mamaHome() {
+    const home = process.env.MAMA_HOME?.trim();
+    if (!home) {
+        throw new Error('MAMA_HOME is not set — the action server cannot locate the runtime socket');
+    }
+    return home;
+}
+function runtimeClient(home) {
+    return (0, client_1.createClient)({
+        socketPath: (0, node_path_1.join)(home, 'runtime.sock'),
+        journalPath: (0, node_path_1.join)(home, 'runtime', 'client-journal.jsonl'),
+        credential: (0, session_credential_js_1.readSessionCredential)(home),
+    });
+}
+/** One line per action, as for the Codex session; `help` returns the full contract. */
+function describeTool(contract) {
+    return {
+        name: contract.name,
+        description: (0, help_actions_js_1.actionCatalogLine)(contract.summary),
+        inputSchema: { type: 'object' },
+    };
+}
+function textResult(value, isError) {
+    return {
+        content: [{ type: 'text', text: JSON.stringify(value) }],
+        ...(isError ? { isError: true } : {}),
+    };
+}
+function resultContent(name, result) {
+    if (result.status === 'completed') {
+        return textResult({ success: true, data: (0, untrusted_content_js_1.untrustedToolData)(name, result.data ?? null) }, false);
+    }
+    return textResult({
+        success: false,
+        status: result.status,
+        error: (0, untrusted_content_js_1.untrustedToolData)(name, result.error ?? null),
+        ...(result.operationId !== undefined ? { operationId: result.operationId } : {}),
+    }, true);
+}
+async function callTool(client, params) {
+    const name = params.name;
+    if (typeof name !== 'string' || name.length === 0) {
+        return textResult({ success: false, error: 'missing tool name' }, true);
+    }
+    try {
+        const input = params.arguments ?? {};
+        if (input &&
+            typeof input === 'object' &&
+            !Array.isArray(input) &&
+            Object.hasOwn(input, claude_caller_hook_js_1.CLAUDE_CALLER_FIELD)) {
+            const { [claude_caller_hook_js_1.CLAUDE_CALLER_FIELD]: caller, ...argumentsWithoutCaller } = input;
+            return resultContent(name, await client.call({
+                action: name,
+                input: argumentsWithoutCaller,
+                session: { nativeCaller: caller },
+            }));
+        }
+        throw new Error('Claude MCP call is missing hook caller metadata');
+    }
+    catch (error) {
+        return textResult({
+            success: false,
+            error: (0, untrusted_content_js_1.untrustedToolData)(name, error instanceof Error ? error.message : String(error)),
+        }, true);
+    }
+}
+/**
+ * One JSON-RPC request → one MCP response (null for notifications). The client
+ * dependency is the only socket handle; the handler never opens its own.
+ */
+async function handleRequest(request, deps) {
+    const id = request.id ?? 0;
+    const reply = (result) => ({ jsonrpc: '2.0', id, result });
+    switch (request.method) {
+        case 'initialize':
+            return reply({
+                protocolVersion: PROTOCOL_VERSION,
+                capabilities: { tools: {} },
+                serverInfo: SERVER_INFO,
+            });
+        case 'notifications/initialized':
+        case 'notifications/cancelled':
+            return null;
+        case 'ping':
+            return reply({});
+        case 'tools/list':
+            return reply({ tools: (await deps.client.describe()).map(describeTool) });
+        case 'tools/call':
+            return reply(await callTool(deps.client, request.params ?? {}));
+        case 'resources/list':
+            return reply({ resources: [] });
+        case 'prompts/list':
+            return reply({ prompts: [] });
+        default:
+            if (request.id === undefined)
+                return null;
+            return {
+                jsonrpc: '2.0',
+                id,
+                error: { code: -32601, message: `Method not found: ${request.method}` },
+            };
+    }
+}
+function runStdioMcpServer(streams = {}) {
+    const home = mamaHome();
+    const output = streams.output ?? process.stdout;
+    const write = (response) => {
+        output.write(`${JSON.stringify(response)}\n`);
+    };
+    log(`starting — MAMA_HOME=${home}`);
+    const lines = node_readline_1.default.createInterface({ input: streams.input ?? process.stdin });
+    lines.on('line', (line) => {
+        const trimmed = line.trim();
+        if (!trimmed)
+            return;
+        let request;
+        try {
+            request = JSON.parse(trimmed);
+        }
+        catch {
+            write({ jsonrpc: '2.0', id: 0, error: { code: -32700, message: 'Parse error' } });
+            return;
+        }
+        void handleRequest(request, { client: runtimeClient(home) })
+            .then((response) => {
+            if (response !== null)
+                write(response);
+        })
+            .catch((error) => {
+            write({
+                jsonrpc: '2.0',
+                id: request.id ?? 0,
+                error: { code: -32603, message: error instanceof Error ? error.message : String(error) },
+            });
+        });
+    });
+    return lines;
+}
+if (require.main === module) {
+    try {
+        runStdioMcpServer();
+    }
+    catch (error) {
+        log(`fatal: ${error instanceof Error ? error.message : String(error)}`);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=action-mcp-server.js.map

package/dist/runtime/action-mcp-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-mcp-server.js","sourceRoot":"","sources":["../../src/runtime/action-mcp-server.ts"],"names":[],"mappings":";;;;;AAyIA,sCAkCC;AAED,8CAiCC;AA9MD,wEAAkE;AAClE;;;;;;;;;;GAUG;AACH,yCAAiC;AACjC,kEAAqC;AAGrC,iEAAiF;AACjF,mEAAgE;AAChE,mEAA8D;AAE9D,4DAA2D;AAqB3D,MAAM,gBAAgB,GAAG,YAAY,CAAC;AACtC,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAEvD,SAAS,GAAG,CAAC,OAAe;IAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,OAAO,IAAI,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,QAAQ;IACf,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAA,qBAAY,EAAC;QAClB,UAAU,EAAE,IAAA,gBAAI,EAAC,IAAI,EAAE,cAAc,CAAC;QACtC,WAAW,EAAE,IAAA,gBAAI,EAAC,IAAI,EAAE,SAAS,EAAE,sBAAsB,CAAC;QAC1D,UAAU,EAAE,IAAA,6CAAqB,EAAC,IAAI,CAAC;KACxC,CAAC,CAAC;AACL,CAAC;AAED,uFAAuF;AACvF,SAAS,YAAY,CAAC,QAAwB;IAC5C,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,WAAW,EAAE,IAAA,mCAAiB,EAAC,QAAQ,CAAC,OAAO,CAAC;QAChD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,OAAgB;IAClD,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,MAAoB;IACvD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAA,wCAAiB,EAAC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,UAAU,CACf;QACE,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,IAAA,wCAAiB,EAAC,IAAI,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC;QACpD,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjF,EACD,IAAI,CACL,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,MAAc,EAAE,MAA+B;IACrE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;QACrC,IACE,KAAK;YACL,OAAO,KAAK,KAAK,QAAQ;YACzB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACrB,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,2CAAmB,CAAC,EACzC,CAAC;YACD,MAAM,EAAE,CAAC,2CAAmB,CAAC,EAAE,MAAM,EAAE,GAAG,sBAAsB,EAAE,GAAG,KAGpE,CAAC;YACF,OAAO,aAAa,CAClB,IAAI,EACJ,MAAM,MAAM,CAAC,IAAI,CAAC;gBAChB,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,sBAAsB;gBAC7B,OAAO,EAAE,EAAE,YAAY,EAAE,MAA0B,EAAE;aACtD,CAAC,CACH,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,UAAU,CACf;YACE,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,IAAA,wCAAiB,EAAC,IAAI,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;SACvF,EACD,IAAI,CACL,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,aAAa,CACjC,OAAuB,EACvB,IAAwB;IAExB,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,CAAC,MAAe,EAAmB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACrF,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,YAAY;YACf,OAAO,KAAK,CAAC;gBACX,eAAe,EAAE,gBAAgB;gBACjC,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC3B,UAAU,EAAE,WAAW;aACxB,CAAC,CAAC;QACL,KAAK,2BAA2B,CAAC;QACjC,KAAK,yBAAyB;YAC5B,OAAO,IAAI,CAAC;QACd,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC;QACnB,KAAK,YAAY;YACf,OAAO,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC5E,KAAK,YAAY;YACf,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;QAClE,KAAK,gBAAgB;YACnB,OAAO,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QAClC,KAAK,cAAc;YACjB,OAAO,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAChC;YACE,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YAC1C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,EAAE;gBACF,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,qBAAqB,OAAO,CAAC,MAAM,EAAE,EAAE;aACxE,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAgB,iBAAiB,CAC/B,UAAmD,EAAE;IAErD,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,MAAM,KAAK,GAAG,CAAC,QAAyB,EAAQ,EAAE;QAChD,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC;IACF,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,uBAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAClF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,OAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QACD,KAAK,aAAa,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;aACzD,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;YACjB,IAAI,QAAQ,KAAK,IAAI;gBAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,KAAK,CAAC;gBACJ,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC;gBACnB,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;aACzF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,IAAI,CAAC;QACH,iBAAiB,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,UAAU,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/runtime/action-surface.d.ts

@@ -0,0 +1,47 @@
+import { createNativeToolTraceObserver } from '@jungjaehoon/mama-core/runtime/native-tool-trace-observer';
+import { createCatalog, type ActionContext, type ActionContract, type ActionDispatcher } from '@jungjaehoon/mama-core';
+import type { ServerResponse } from 'node:http';
+import type { DatabaseInstance } from '@jungjaehoon/mama-core/db-manager';
+import type { JudgmentAccess, Knowledge } from '@jungjaehoon/mama-core/knowledge';
+import type { MemoryScopeRef } from '@jungjaehoon/mama-core/memory/types';
+import { type ReportStore } from '../api/report-handler.js';
+import { type AttachmentActionPorts } from '../api/attachment-actions.js';
+import type { TimeZoneSetting } from './timezone.js';
+import type { StoredSourceReader } from '../api/stored-source-reader.js';
+import { type WikiPorts } from '../api/wiki-actions.js';
+import { LOADABLE_CONNECTORS as OWNER_CONNECTORS } from '../connectors/index.js';
+declare const OWNER_ACTIONS: readonly ["graph.query", "source.search", "source.recent", "schedule.upcoming", "source.read", "owner.timezone.set", "memory.checkpoint.list", "work.create", "work.revise", "work.list", "work.show", "work.no_update", "help", "memory.save", "memory.search", "memory.read:provenance", "memory.read:record", "memory.retire", "report.read", "report.publish", "manage.wiki.publish", "manage.wiki.read", "manage.wiki.update", "source.attachment.list", "source.attachment.download", "deliver.telegram.file", "deliver.discord.file", "deliver.slack.file"];
+export interface HostToolDefinition {
+    name: string;
+    description: string;
+    inputSchema: ActionContract['inputSchema'];
+}
+export interface ActionSurfaceOptions {
+    adapter: DatabaseInstance;
+    knowledge: Knowledge;
+    ownerPrincipalId: string;
+    agentId: string;
+    scopes?: readonly MemoryScopeRef[];
+    connectors?: readonly string[];
+    storedSourceReader?: StoredSourceReader | null;
+    reportStore?: ReportStore | null;
+    reportSseClients?: Set<ServerResponse>;
+    wikiPorts?: WikiPorts;
+    attachmentPorts?: AttachmentActionPorts;
+    timeZone: TimeZoneSetting;
+    configPath: string;
+    isOwnerMessageTurn: (sourceMessageRef: string) => boolean;
+}
+export interface ActionSurface {
+    createNativeEffectObserver(modelRunId: string): ReturnType<typeof createNativeToolTraceObserver>;
+    catalog: ReturnType<typeof createCatalog>;
+    dispatch: ActionDispatcher;
+    ownerAccess: JudgmentAccess;
+    hostToolDefinitions(): HostToolDefinition[];
+    hostToolCall(name: string, input: unknown, operationId: string, context?: Omit<ActionContext, 'access' | 'operationId'>): Promise<Awaited<ReturnType<ActionDispatcher>>>;
+}
+/** The owner grant spans the durable global/user records and connector roots. */
+export declare function ownerMemoryScopes(ownerPrincipalId: string, connectors?: readonly string[]): MemoryScopeRef[];
+export declare function createActionSurface(options: ActionSurfaceOptions): ActionSurface;
+export { OWNER_ACTIONS, OWNER_CONNECTORS };
+//# sourceMappingURL=action-surface.d.ts.map

package/dist/runtime/action-surface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-surface.d.ts","sourceRoot":"","sources":["../../src/runtime/action-surface.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,MAAM,2DAA2D,CAAC;AAC1G,OAAO,EAIL,aAAa,EAEb,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAClF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAE1E,OAAO,EAAyB,KAAK,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACnF,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,8BAA8B,CAAC;AAKtC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAMrD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAA2B,KAAK,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEjF,OAAO,EAAE,mBAAmB,IAAI,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAEjF,QAAA,MAAM,aAAa,oiBA6BT,CAAC;AAEX,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,cAAc,CAAC,aAAa,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,gBAAgB,CAAC;IAC1B,SAAS,EAAE,SAAS,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IACnC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,kBAAkB,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC/C,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IACjC,gBAAgB,CAAC,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC;IACvC,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,QAAQ,EAAE,eAAe,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,CAAC,gBAAgB,EAAE,MAAM,KAAK,OAAO,CAAC;CAC3D;AAED,MAAM,WAAW,aAAa;IAC5B,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,CAAC,OAAO,6BAA6B,CAAC,CAAC;IACjG,OAAO,EAAE,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC;IAC1C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,WAAW,EAAE,cAAc,CAAC;IAC5B,mBAAmB,IAAI,kBAAkB,EAAE,CAAC;IAC5C,YAAY,CACV,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,OAAO,EACd,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,GAAG,aAAa,CAAC,GACtD,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;CACnD;AAED,iFAAiF;AACjF,wBAAgB,iBAAiB,CAC/B,gBAAgB,EAAE,MAAM,EACxB,UAAU,GAAE,SAAS,MAAM,EAAqB,GAC/C,cAAc,EAAE,CASlB;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,aAAa,CA6IhF;AAED,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/runtime/action-surface.js

@@ -0,0 +1,192 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OWNER_CONNECTORS = exports.OWNER_ACTIONS = void 0;
+exports.ownerMemoryScopes = ownerMemoryScopes;
+exports.createActionSurface = createActionSurface;
+const trace_summary_1 = require("@jungjaehoon/mama-core/runtime/trace-summary");
+const native_tool_trace_observer_1 = require("@jungjaehoon/mama-core/runtime/native-tool-trace-observer");
+const mama_core_1 = require("@jungjaehoon/mama-core");
+const report_actions_js_1 = require("../api/report-actions.js");
+const report_handler_js_1 = require("../api/report-handler.js");
+const attachment_actions_js_1 = require("../api/attachment-actions.js");
+const source_actions_js_1 = require("../api/source-actions.js");
+const owner_timezone_actions_js_1 = require("../api/owner-timezone-actions.js");
+const help_actions_js_1 = require("../api/help-actions.js");
+const record_actions_js_1 = require("../api/record-actions.js");
+const report_source_actions_js_1 = require("../api/report-source-actions.js");
+const work_actions_js_1 = require("../api/work-actions.js");
+const wiki_actions_js_1 = require("../api/wiki-actions.js");
+const index_js_1 = require("../connectors/index.js");
+Object.defineProperty(exports, "OWNER_CONNECTORS", { enumerable: true, get: function () { return index_js_1.LOADABLE_CONNECTORS; } });
+const OWNER_ACTIONS = [
+    'graph.query',
+    'source.search',
+    'source.recent',
+    'schedule.upcoming',
+    'source.read',
+    'owner.timezone.set',
+    'memory.checkpoint.list',
+    'work.create',
+    'work.revise',
+    'work.list',
+    'work.show',
+    'work.no_update',
+    'help',
+    'memory.save',
+    'memory.search',
+    'memory.read:provenance',
+    'memory.read:record',
+    'memory.retire',
+    'report.read',
+    'report.publish',
+    'manage.wiki.publish',
+    'manage.wiki.read',
+    'manage.wiki.update',
+    'source.attachment.list',
+    'source.attachment.download',
+    'deliver.telegram.file',
+    'deliver.discord.file',
+    'deliver.slack.file',
+];
+exports.OWNER_ACTIONS = OWNER_ACTIONS;
+/** The owner grant spans the durable global/user records and connector roots. */
+function ownerMemoryScopes(ownerPrincipalId, connectors = index_js_1.LOADABLE_CONNECTORS) {
+    const scopes = [
+        { kind: 'global', id: 'system' },
+        { kind: 'user', id: ownerPrincipalId },
+    ];
+    for (const connector of connectors) {
+        scopes.push({ kind: 'channel', id: connector }, { kind: 'project', id: connector });
+    }
+    return [...new Map(scopes.map((scope) => [`${scope.kind}\0${scope.id}`, scope])).values()];
+}
+function createActionSurface(options) {
+    const core = (0, mama_core_1.coreActionRegistrations)(options.knowledge, options.adapter).filter(({ contract }) => [
+        'graph.query',
+        'memory.save',
+        'memory.search',
+        // The cited source messages behind a memory, checked against the caller's source-read
+        // authority: a fact found by memory.search is traced to its evidence in one call.
+        'memory.read:provenance',
+        'memory.read:record',
+        'memory.retire',
+        'memory.checkpoint.list',
+        'work.show',
+    ].includes(contract.name));
+    const reportSseClients = options.reportSseClients ?? new Set();
+    const reportPorts = {
+        ...(options.reportStore === undefined || options.reportStore === null
+            ? {}
+            : {
+                publisher: (0, report_handler_js_1.createReportPublisher)(options.reportStore, reportSseClients),
+                reader: () => {
+                    const slots = {};
+                    for (const [name, slot] of Object.entries(options.reportStore.getAll())) {
+                        slots[name] = {
+                            html: slot.html,
+                            publishable: options.reportStore.isPublishable(name),
+                            updatedAt: Number.isFinite(slot.updatedAt)
+                                ? new Date(slot.updatedAt).toISOString()
+                                : null,
+                        };
+                    }
+                    return slots;
+                },
+            }),
+    };
+    const registrations = [
+        ...core,
+        ...(0, source_actions_js_1.sourceActionRegistrations)({
+            stored: options.storedSourceReader,
+            timeZone: options.timeZone,
+        }),
+        ...(0, report_source_actions_js_1.reportSourceActionRegistrations)({
+            adapter: options.adapter,
+            ownerPrincipalId: options.ownerPrincipalId,
+            timeZone: options.timeZone,
+        }),
+        ...(0, owner_timezone_actions_js_1.ownerTimeZoneActionRegistrations)({
+            configPath: options.configPath,
+            ownerPrincipalId: options.ownerPrincipalId,
+            setting: options.timeZone,
+            isOwnerMessageTurn: options.isOwnerMessageTurn,
+        }),
+        ...(0, attachment_actions_js_1.createAttachmentActionRegistrations)({
+            ...(options.attachmentPorts ?? {}),
+            stored: options.storedSourceReader,
+        }),
+        ...(0, work_actions_js_1.workListActionRegistrations)({ knowledge: options.knowledge, timeZone: options.timeZone }),
+        ...(0, work_actions_js_1.minimalWorkActionRegistrations)({
+            knowledge: options.knowledge,
+            observationExists: (observationId) => options.adapter
+                .prepare('SELECT 1 FROM observation_versions WHERE observation_id = ? LIMIT 1')
+                .get(observationId) !== undefined,
+        }),
+        ...(0, report_actions_js_1.reportActionRegistrations)(reportPorts),
+        ...(0, wiki_actions_js_1.wikiActionRegistrations)(options.wikiPorts ?? {}),
+        ...(0, record_actions_js_1.workNoUpdateActionRegistrations)(),
+        ...(0, help_actions_js_1.helpActionRegistrations)({
+            contracts: () => catalog.list().filter((contract) => ownerAccess.actions.includes(contract.name)),
+        }),
+    ];
+    const catalog = (0, mama_core_1.createCatalog)(registrations);
+    const dispatch = (0, mama_core_1.createDispatcher)(catalog, {
+        observeCall: async ({ action, operationId, input, result, durationMs, context }) => {
+            const session = context.session;
+            const common = {
+                tool_name: action,
+                gateway_call_id: session?.gatewayCallId ?? null,
+                input_summary: (0, trace_summary_1.traceSummary)(input),
+                output_summary: (0, trace_summary_1.traceSummary)(result),
+                execution_status: result.status,
+                duration_ms: durationMs,
+                ...(result.status === 'failed' ? { failure_code: result.error.code } : {}),
+            };
+            if (session?.modelRunId) {
+                const trace = await (0, mama_core_1.appendToolTrace)(options.adapter, {
+                    ...common,
+                    model_run_id: session.modelRunId,
+                });
+                return trace.trace_id;
+            }
+            if (!operationId)
+                return undefined;
+            const trace = (0, mama_core_1.appendOperationToolTrace)(options.adapter, {
+                ...common,
+                operation_id: operationId,
+                actor_principal_id: context.access.principalId,
+            });
+            return trace.trace_id;
+        },
+    });
+    const ownerAccess = {
+        principalId: options.ownerPrincipalId,
+        agentId: options.agentId,
+        scopes: [
+            ...ownerMemoryScopes(options.ownerPrincipalId, options.connectors ?? index_js_1.LOADABLE_CONNECTORS),
+            ...(options.scopes ?? []),
+        ].filter((scope, index, all) => all.findIndex((candidate) => candidate.kind === scope.kind && candidate.id === scope.id) ===
+            index),
+        connectors: options.connectors ?? index_js_1.LOADABLE_CONNECTORS,
+        // The owner reads every channel of its own connectors; imported originals carry no
+        // memory-scope tag, so without this their observations are invisible in the graph.
+        connectorWideRead: options.connectors ?? index_js_1.LOADABLE_CONNECTORS,
+        actions: [...OWNER_ACTIONS],
+    };
+    return {
+        createNativeEffectObserver: (modelRunId) => (0, native_tool_trace_observer_1.createNativeToolTraceObserver)(options.adapter, modelRunId),
+        catalog,
+        dispatch,
+        ownerAccess,
+        // Progressive, as Kagemusha's one-line catalog: every turn carries one line per action; the
+        // full contract comes from `help`. The dispatcher still validates each call against the
+        // action's own schema.
+        hostToolDefinitions: () => catalog.list().map((contract) => ({
+            name: contract.name,
+            description: (0, help_actions_js_1.actionCatalogLine)(contract.summary),
+            inputSchema: { type: 'object' },
+        })),
+        hostToolCall: (name, input, operationId, context = {}) => dispatch({ action: name, input, operationId }, { ...context, access: ownerAccess, operationId }),
+    };
+}
+//# sourceMappingURL=action-surface.js.map

package/dist/runtime/action-surface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-surface.js","sourceRoot":"","sources":["../../src/runtime/action-surface.ts"],"names":[],"mappings":";;;AA0GA,8CAYC;AAED,kDA6IC;AArQD,gFAA4E;AAC5E,0GAA0G;AAC1G,sDASgC;AAKhC,gEAAqE;AACrE,gEAAmF;AACnF,wEAGsC;AACtC,gEAAqE;AACrE,gFAAoF;AACpF,4DAAoF;AACpF,gEAA2E;AAE3E,8EAAkF;AAClF,4DAGgC;AAEhC,4DAAiF;AAEjF,qDAAiF;AAoOzD,iGApOQ,8BAAgB,OAoOR;AAlOxC,MAAM,aAAa,GAAG;IACpB,aAAa;IACb,eAAe;IACf,eAAe;IACf,mBAAmB;IACnB,aAAa;IACb,oBAAoB;IACpB,wBAAwB;IACxB,aAAa;IACb,aAAa;IACb,WAAW;IACX,WAAW;IACX,gBAAgB;IAChB,MAAM;IACN,aAAa;IACb,eAAe;IACf,wBAAwB;IACxB,oBAAoB;IACpB,eAAe;IACf,aAAa;IACb,gBAAgB;IAChB,qBAAqB;IACrB,kBAAkB;IAClB,oBAAoB;IACpB,wBAAwB;IACxB,4BAA4B;IAC5B,uBAAuB;IACvB,sBAAsB;IACtB,oBAAoB;CACZ,CAAC;AAqMF,sCAAa;AA9JtB,iFAAiF;AACjF,SAAgB,iBAAiB,CAC/B,gBAAwB,EACxB,aAAgC,8BAAgB;IAEhD,MAAM,MAAM,GAAqB;QAC/B,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE;QAChC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,gBAAgB,EAAE;KACvC,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7F,CAAC;AAED,SAAgB,mBAAmB,CAAC,OAA6B;IAC/D,MAAM,IAAI,GAAG,IAAA,mCAAuB,EAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAC/F;QACE,aAAa;QACb,aAAa;QACb,eAAe;QACf,sFAAsF;QACtF,kFAAkF;QAClF,wBAAwB;QACxB,oBAAoB;QACpB,eAAe;QACf,wBAAwB;QACxB,WAAW;KACZ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC1B,CAAC;IACF,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,IAAI,GAAG,EAAkB,CAAC;IAC/E,MAAM,WAAW,GAAG;QAClB,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI;YACnE,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,SAAS,EAAE,IAAA,yCAAqB,EAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC;gBACvE,MAAM,EAAE,GAAe,EAAE;oBACvB,MAAM,KAAK,GAAe,EAAE,CAAC;oBAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAY,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;wBACzE,KAAK,CAAC,IAAI,CAAC,GAAG;4BACZ,IAAI,EAAE,IAAI,CAAC,IAAI;4BACf,WAAW,EAAE,OAAO,CAAC,WAAY,CAAC,aAAa,CAAC,IAAI,CAAC;4BACrD,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;gCACxC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;gCACxC,CAAC,CAAC,IAAI;yBACT,CAAC;oBACJ,CAAC;oBACD,OAAO,KAAK,CAAC;gBACf,CAAC;aACF,CAAC;KACP,CAAC;IACF,MAAM,aAAa,GAAG;QACpB,GAAG,IAAI;QACP,GAAG,IAAA,6CAAyB,EAAC;YAC3B,MAAM,EAAE,OAAO,CAAC,kBAAkB;YAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC;QACF,GAAG,IAAA,0DAA+B,EAAC;YACjC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC;QACF,GAAG,IAAA,4DAAgC,EAAC;YAClC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,OAAO,EAAE,OAAO,CAAC,QAAQ;YACzB,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;SAC/C,CAAC;QACF,GAAG,IAAA,2DAAmC,EAAC;YACrC,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC;YAClC,MAAM,EAAE,OAAO,CAAC,kBAAkB;SACnC,CAAC;QACF,GAAG,IAAA,6CAA2B,EAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC5F,GAAG,IAAA,gDAA8B,EAAC;YAChC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,iBAAiB,EAAE,CAAC,aAAa,EAAE,EAAE,CACnC,OAAO,CAAC,OAAO;iBACZ,OAAO,CAAC,qEAAqE,CAAC;iBAC9E,GAAG,CAAC,aAAa,CAAC,KAAK,SAAS;SACtC,CAAC;QACF,GAAG,IAAA,6CAAyB,EAAC,WAAW,CAAC;QACzC,GAAG,IAAA,yCAAuB,EAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QACnD,GAAG,IAAA,mDAA+B,GAAE;QACpC,GAAG,IAAA,yCAAuB,EAAC;YACzB,SAAS,EAAE,GAAG,EAAE,CACd,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,WAAW,CAAC,OAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;SACpF,CAAC;KACH,CAAC;IACF,MAAM,OAAO,GAAG,IAAA,yBAAa,EAAC,aAAa,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAA,4BAAgB,EAAC,OAAO,EAAE;QACzC,WAAW,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE;YACjF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;YAChC,MAAM,MAAM,GAAG;gBACb,SAAS,EAAE,MAAM;gBACjB,eAAe,EAAE,OAAO,EAAE,aAAa,IAAI,IAAI;gBAC/C,aAAa,EAAE,IAAA,4BAAY,EAAC,KAAK,CAAC;gBAClC,cAAc,EAAE,IAAA,4BAAY,EAAC,MAAM,CAAC;gBACpC,gBAAgB,EAAE,MAAM,CAAC,MAAM;gBAC/B,WAAW,EAAE,UAAU;gBACvB,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3E,CAAC;YACF,IAAI,OAAO,EAAE,UAAU,EAAE,CAAC;gBACxB,MAAM,KAAK,GAAG,MAAM,IAAA,2BAAe,EAAC,OAAO,CAAC,OAAO,EAAE;oBACnD,GAAG,MAAM;oBACT,YAAY,EAAE,OAAO,CAAC,UAAU;iBACjC,CAAC,CAAC;gBACH,OAAO,KAAK,CAAC,QAAQ,CAAC;YACxB,CAAC;YACD,IAAI,CAAC,WAAW;gBAAE,OAAO,SAAS,CAAC;YACnC,MAAM,KAAK,GAAG,IAAA,oCAAwB,EAAC,OAAO,CAAC,OAAO,EAAE;gBACtD,GAAG,MAAM;gBACT,YAAY,EAAE,WAAW;gBACzB,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW;aAC/C,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,QAAQ,CAAC;QACxB,CAAC;KACF,CAAC,CAAC;IACH,MAAM,WAAW,GAAmB;QAClC,WAAW,EAAE,OAAO,CAAC,gBAAgB;QACrC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE;YACN,GAAG,iBAAiB,CAAC,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,UAAU,IAAI,8BAAgB,CAAC;YACtF,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;SAC1B,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CACpB,GAAG,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,SAAS,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC;YACxF,KAAK,CACR;QACD,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,8BAAgB;QAClD,mFAAmF;QACnF,mFAAmF;QACnF,iBAAiB,EAAE,OAAO,CAAC,UAAU,IAAI,8BAAgB;QACzD,OAAO,EAAE,CAAC,GAAG,aAAa,CAAC;KAC5B,CAAC;IAEF,OAAO;QACL,0BAA0B,EAAE,CAAC,UAAU,EAAE,EAAE,CACzC,IAAA,0DAA6B,EAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC;QAC5D,OAAO;QACP,QAAQ;QACR,WAAW;QACX,4FAA4F;QAC5F,wFAAwF;QACxF,uBAAuB;QACvB,mBAAmB,EAAE,GAAG,EAAE,CACxB,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAChC,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,WAAW,EAAE,IAAA,mCAAiB,EAAC,QAAQ,CAAC,OAAO,CAAC;YAChD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAChC,CAAC,CAAC;QACL,YAAY,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE,CACvD,QAAQ,CACN,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,EACpC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,CACjD;KACJ,CAAC;AACJ,CAAC"}

package/dist/runtime/backend-security.d.ts

@@ -0,0 +1,7 @@
+/** CLI authentication lives in the backend homes. No secret-shaped daemon variable is needed.
+ * Non-secret CLAUDE_CODE_* messaging/settings variables remain available to native children.
+ */
+export declare function backendEnvironment(env?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+/** Paths are supplied by the product, never discovered by the shared engine. */
+export declare function credentialReadPaths(runtimeRoot: string, codexHome?: string, replayKeyFile?: string): string[];
+//# sourceMappingURL=backend-security.d.ts.map

package/dist/runtime/backend-security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-security.d.ts","sourceRoot":"","sources":["../../src/runtime/backend-security.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAS1F;AAED,gFAAgF;AAChF,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,EACnB,SAAS,CAAC,EAAE,MAAM,EAClB,aAAa,CAAC,EAAE,MAAM,GACrB,MAAM,EAAE,CAWV"}

package/dist/runtime/backend-security.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.backendEnvironment = backendEnvironment;
+exports.credentialReadPaths = credentialReadPaths;
+const node_path_1 = require("node:path");
+/** CLI authentication lives in the backend homes. No secret-shaped daemon variable is needed.
+ * Non-secret CLAUDE_CODE_* messaging/settings variables remain available to native children.
+ */
+function backendEnvironment(env = process.env) {
+    return Object.fromEntries(Object.entries(env).filter(
+    // MAX_THINKING_TOKENS is a budget count the Claude CLI reads, not a credential.
+    ([name]) => name === 'MAX_THINKING_TOKENS' ||
+        !/(TOKEN|KEY|SECRET|PASSWORD|CREDENTIAL|^MAMA_ICAL_URL_)/i.test(name)));
+}
+/** Paths are supplied by the product, never discovered by the shared engine. */
+function credentialReadPaths(runtimeRoot, codexHome, replayKeyFile) {
+    return [
+        ...new Set([
+            (0, node_path_1.resolve)(runtimeRoot, 'auth.env'),
+            (0, node_path_1.resolve)(runtimeRoot, 'config.yaml'),
+            (0, node_path_1.resolve)(runtimeRoot, 'runtime'),
+            (0, node_path_1.resolve)(runtimeRoot, '.codex'),
+            (0, node_path_1.resolve)(replayKeyFile ?? (0, node_path_1.resolve)(runtimeRoot, 'jev-key')),
+            ...(codexHome ? [(0, node_path_1.resolve)(codexHome)] : []),
+        ]),
+    ];
+}
+//# sourceMappingURL=backend-security.js.map

package/dist/runtime/backend-security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-security.js","sourceRoot":"","sources":["../../src/runtime/backend-security.ts"],"names":[],"mappings":";;AAKA,gDASC;AAGD,kDAeC;AAhCD,yCAAoC;AAEpC;;GAEG;AACH,SAAgB,kBAAkB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACrE,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM;IACxB,gFAAgF;IAChF,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CACT,IAAI,KAAK,qBAAqB;QAC9B,CAAC,yDAAyD,CAAC,IAAI,CAAC,IAAI,CAAC,CACxE,CACF,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,SAAgB,mBAAmB,CACjC,WAAmB,EACnB,SAAkB,EAClB,aAAsB;IAEtB,OAAO;QACL,GAAG,IAAI,GAAG,CAAC;YACT,IAAA,mBAAO,EAAC,WAAW,EAAE,UAAU,CAAC;YAChC,IAAA,mBAAO,EAAC,WAAW,EAAE,aAAa,CAAC;YACnC,IAAA,mBAAO,EAAC,WAAW,EAAE,SAAS,CAAC;YAC/B,IAAA,mBAAO,EAAC,WAAW,EAAE,QAAQ,CAAC;YAC9B,IAAA,mBAAO,EAAC,aAAa,IAAI,IAAA,mBAAO,EAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YACzD,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAA,mBAAO,EAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3C,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/runtime/claude-caller-hook.d.ts

@@ -0,0 +1,20 @@
+import type { NativeToolCaller } from '@jungjaehoon/mama-core/action-contracts';
+export declare const CLAUDE_CALLER_FIELD = "__mama_caller";
+/** Claude 2.1.x PreToolUse: updatedInput replaces the entire input object. */
+export declare function callerHookOutput(input: NativeToolCaller & {
+    tool_input: unknown;
+    [key: string]: unknown;
+}): {
+    hookSpecificOutput: {
+        hookEventName: string;
+        updatedInput: {
+            __mama_caller: {
+                agent_type?: string | undefined;
+                agent_id?: string | undefined;
+                session_id: string;
+                tool_use_id: string;
+            };
+        };
+    };
+};
+//# sourceMappingURL=claude-caller-hook.d.ts.map

package/dist/runtime/claude-caller-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-caller-hook.d.ts","sourceRoot":"","sources":["../../src/runtime/claude-caller-hook.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAEhF,eAAO,MAAM,mBAAmB,kBAAkB,CAAC;AAEnD,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,gBAAgB,GAAG;IAAE,UAAU,EAAE,OAAO,CAAC;IAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE;;;;;;;;;;;;EA0B1E"}

package/dist/runtime/claude-caller-hook.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CLAUDE_CALLER_FIELD = void 0;
+exports.callerHookOutput = callerHookOutput;
+const node_fs_1 = require("node:fs");
+exports.CLAUDE_CALLER_FIELD = '__mama_caller';
+/** Claude 2.1.x PreToolUse: updatedInput replaces the entire input object. */
+function callerHookOutput(input) {
+    const { session_id, tool_use_id, agent_id, agent_type } = input;
+    if (!session_id ||
+        !tool_use_id ||
+        !input.tool_input ||
+        typeof input.tool_input !== 'object' ||
+        Array.isArray(input.tool_input)) {
+        throw new Error('Claude caller hook requires session_id, tool_use_id and object tool_input');
+    }
+    return {
+        hookSpecificOutput: {
+            hookEventName: 'PreToolUse',
+            updatedInput: {
+                ...input.tool_input,
+                [exports.CLAUDE_CALLER_FIELD]: {
+                    session_id,
+                    tool_use_id,
+                    ...(agent_id === undefined ? {} : { agent_id }),
+                    ...(agent_type === undefined ? {} : { agent_type }),
+                },
+            },
+        },
+    };
+}
+if (require.main === module) {
+    try {
+        process.stdout.write(`${JSON.stringify(callerHookOutput(JSON.parse((0, node_fs_1.readFileSync)(0, 'utf8'))))}\n`);
+    }
+    catch (error) {
+        process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+        process.exitCode = 2;
+    }
+}
+//# sourceMappingURL=claude-caller-hook.js.map

package/dist/runtime/claude-caller-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-caller-hook.js","sourceRoot":"","sources":["../../src/runtime/claude-caller-hook.ts"],"names":[],"mappings":";;;AAMA,4CA2BC;AAjCD,qCAAuC;AAG1B,QAAA,mBAAmB,GAAG,eAAe,CAAC;AAEnD,8EAA8E;AAC9E,SAAgB,gBAAgB,CAC9B,KAAyE;IAEzE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAChE,IACE,CAAC,UAAU;QACX,CAAC,WAAW;QACZ,CAAC,KAAK,CAAC,UAAU;QACjB,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAC/B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO;QACL,kBAAkB,EAAE;YAClB,aAAa,EAAE,YAAY;YAC3B,YAAY,EAAE;gBACZ,GAAG,KAAK,CAAC,UAAU;gBACnB,CAAC,2BAAmB,CAAC,EAAE;oBACrB,UAAU;oBACV,WAAW;oBACX,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;oBAC/C,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;iBACpD;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAC7E,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/runtime/config.d.ts

@@ -0,0 +1,84 @@
+export type RuntimeBackend = 'claude' | 'codex';
+export type RuntimeEffort = 'low' | 'medium' | 'high' | 'max' | 'xhigh';
+export type RuntimeSandbox = 'read-only' | 'workspace-write' | 'danger-full-access';
+export interface W1AgentConfig {
+    backend: RuntimeBackend;
+    model: string;
+    effort: RuntimeEffort;
+    max_turns: number;
+    timeout: number;
+    run_token_budget: number;
+    codex_home?: string;
+    codex_cwd?: string;
+    codex_sandbox?: RuntimeSandbox;
+    tools?: {
+        mcp_config?: string;
+    };
+}
+export interface W1TelegramConfig {
+    enabled: boolean;
+    owner_chat_id?: string;
+    allowed_chats: string[];
+    owner_user_ids: string[];
+    polling: boolean;
+}
+export interface W1MessengerConfig {
+    enabled: boolean;
+    owner_channel_id?: string;
+    allowed_channels: string[];
+    owner_user_ids: string[];
+}
+export type MessengerName = 'telegram' | 'discord' | 'slack';
+export interface W1DeliveryConfig {
+    reports: MessengerName;
+    notifications: MessengerName;
+    security_alerts: MessengerName;
+}
+export interface W1WikiConfig {
+    enabled: boolean;
+    vaultPath?: string;
+    wikiDir?: string;
+}
+export interface W1JevConfig {
+    keyFile: string;
+    vocabFile: string;
+}
+export interface W1ReportsConfig {
+    full_report_hours: number[];
+    reminder_start_hour: number;
+    reminder_end_hour: number;
+}
+export interface W1Config {
+    version: 1;
+    timezone: string;
+    agent: W1AgentConfig;
+    database: {
+        path: string;
+    };
+    logging: {
+        level: 'debug' | 'info' | 'warn' | 'error';
+        file: string;
+    };
+    telegram: W1TelegramConfig;
+    discord?: W1MessengerConfig;
+    slack?: W1MessengerConfig;
+    delivery?: W1DeliveryConfig;
+    jev: W1JevConfig;
+    reports: W1ReportsConfig;
+    wiki?: W1WikiConfig;
+}
+export interface LoadConfigOptions {
+    path?: string;
+    configPath?: string;
+    home?: string;
+}
+export interface ParseConfigOptions {
+    home?: string;
+}
+export declare class ConfigError extends Error {
+    constructor(message: string);
+}
+export declare function parseConfig(value: unknown, options?: ParseConfigOptions): W1Config;
+export declare function defaultConfigPath(home?: string): string;
+export declare function loadConfig(options?: LoadConfigOptions): W1Config;
+//# sourceMappingURL=config.d.ts.map