@kin-tio/cli 0.6.2 → 0.7.0

package/dist/src/ilink/sqlite-store.js

@@ -50,6 +50,14 @@ function providerIdentity(value, label) {
     }
     return value;
 }
+function agentAccess(value) {
+    if (value === undefined)
+        return 'restricted';
+    if (value !== 'restricted' && value !== 'host') {
+        fail('invalid_input', 'agentAccess is invalid');
+    }
+    return value;
+}
 function sealedSecret(row) {
     const result = {
         nonce: row.nonce,
@@ -114,6 +122,8 @@ function mapAccount(row) {
         baseUrl: row.base_url,
         generation: Number(row.generation),
         status: row.status,
+        agentAccess: row.agent_access,
+        runtimeEnabled: row.runtime_enabled === 1,
         pauseUntil: Number(row.pause_until),
         createdAt: Number(row.created_at),
         updatedAt: Number(row.updated_at),
@@ -334,6 +344,7 @@ export class IlinkSqliteStore {
         const accountKey = createIlinkAccountKey(input.providerAccountId);
         const ownerPeerId = providerIdentity(input.ownerPeerId, 'ownerPeerId');
         const baseUrl = normalizeIlinkBaseUrl(input.baseUrl);
+        const requestedAccess = agentAccess(input.agentAccess);
         const now = this.#now(input.now);
         return this.#transaction(() => {
             if (this.#accountRow(accountKey)) {
@@ -349,10 +360,11 @@ export class IlinkSqliteStore {
             this.#database.prepare(`
         INSERT INTO ilink_accounts (
           account_key, provider_account_id, owner_peer_id, base_url,
-          generation, status, pause_until, cursor, cursor_updated_at,
+          generation, status, agent_access, runtime_enabled,
+          pause_until, cursor, cursor_updated_at,
           created_at, updated_at
-        ) VALUES (?, ?, ?, ?, 1, 'active', 0, '', 0, ?, ?)
-      `).run(accountKey, input.providerAccountId, ownerPeerId, baseUrl, now, now);
+        ) VALUES (?, ?, ?, ?, 1, 'active', ?, ?, 0, '', 0, ?, ?)
+      `).run(accountKey, input.providerAccountId, ownerPeerId, baseUrl, requestedAccess, 0, now, now);
             this.#database.prepare(`
         INSERT INTO ilink_account_secrets (
           account_key, account_generation, nonce, ciphertext, auth_tag,
@@ -371,6 +383,7 @@ export class IlinkSqliteStore {
             fail('pair_mismatch', 'iLink provider account does not match account key');
         }
         const baseUrl = normalizeIlinkBaseUrl(input.baseUrl);
+        const requestedAccess = agentAccess(input.agentAccess);
         const now = this.#now(input.now);
         return this.#transaction(() => {
             const current = this.#accountRow(input.accountKey);
@@ -384,14 +397,21 @@ export class IlinkSqliteStore {
                 fail('pair_mismatch', 'iLink account binding cannot change during rotation');
             }
             const nextGeneration = current.generation + 1;
+            const runtimeEnabled = current.status === 'active'
+                ? current.runtime_enabled
+                : 0;
+            const agentAccess = current.agent_access === 'host' || requestedAccess === 'host'
+                ? 'host'
+                : 'restricted';
             positiveInteger(nextGeneration, 'nextGeneration');
             this.#cancelOpenWindows(input.accountKey, now, 'account_generation_changed');
             const updated = this.#database.prepare(`
         UPDATE ilink_accounts
-        SET base_url = ?, generation = ?, status = 'active', pause_until = 0,
+        SET base_url = ?, generation = ?, status = 'active', agent_access = ?,
+            runtime_enabled = ?, pause_until = 0,
             updated_at = ?
         WHERE account_key = ? AND generation = ?
-      `).run(baseUrl, nextGeneration, now, input.accountKey, input.expectedGeneration);
+      `).run(baseUrl, nextGeneration, agentAccess, runtimeEnabled, now, input.accountKey, input.expectedGeneration);
             if (updated.changes !== 1) {
                 fail('generation_conflict', 'iLink account generation changed');
             }
@@ -418,8 +438,8 @@ export class IlinkSqliteStore {
         positiveInteger(input.maxAccounts, 'maxAccounts');
         return this.#transaction(() => {
             const offer = rowAs(this.#database.prepare(`
-        SELECT source_message_key, source_open_kfid,
-               source_external_userid, created_at
+        SELECT initiator_kind, source_channel, source_message_key,
+               source_account_id, source_peer_id, created_at
         FROM ilink_login_offers
         WHERE offer_id = ? AND status IN ('waiting', 'scanned')
           AND expires_at > ?
@@ -439,7 +459,7 @@ export class IlinkSqliteStore {
             if (input.accountGeneration !== (existing?.generation || 0) + 1) {
                 fail('generation_conflict', 'iLink enrollment generation changed');
             }
-            const account = existing
+            let account = existing
                 ? this.rotateAccount({
                     accountKey,
                     expectedGeneration: existing.generation,
@@ -447,15 +467,23 @@ export class IlinkSqliteStore {
                     ownerPeerId: input.ownerPeerId,
                     baseUrl: input.baseUrl,
                     encryptedBotToken: input.encryptedBotToken,
+                    agentAccess: offer.initiator_kind === 'local_operator' ? 'host' : 'restricted',
                     now: input.now,
                 })
-                : this.registerAccount(input);
+                : this.registerAccount({
+                    ...input,
+                    agentAccess: offer.initiator_kind === 'local_operator' ? 'host' : 'restricted',
+                });
+            if (offer.initiator_kind === 'remote_adapter' && !account.runtimeEnabled) {
+                account = this.setRuntimeEnabled(account.accountKey, true, input.now);
+            }
             this.#database.prepare(`
         INSERT INTO ilink_enrollment_audit (
-          offer_id, source_message_key, source_open_kfid,
-          source_external_userid, account_key, result, offered_at, completed_at
-        ) VALUES (?, ?, ?, ?, ?, 'confirmed', ?, ?)
-      `).run(offerId, offer.source_message_key, offer.source_open_kfid, offer.source_external_userid, account.accountKey, offer.created_at, this.#now(input.now));
+          offer_id, initiator_kind, source_channel, source_message_key,
+          source_account_id, source_peer_id,
+          account_key, result, offered_at, completed_at
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, 'confirmed', ?, ?)
+      `).run(offerId, offer.initiator_kind, offer.source_channel, offer.source_message_key, offer.source_account_id, offer.source_peer_id, account.accountKey, offer.created_at, this.#now(input.now));
             const removed = this.#database.prepare(`
         DELETE FROM ilink_login_offers
         WHERE offer_id = ? AND status IN ('waiting', 'scanned')
@@ -478,6 +506,50 @@ export class IlinkSqliteStore {
         const row = this.#accountRow(accountKey);
         return row ? mapAccount(row) : undefined;
     }
+    confirmExistingEnrollment(input) {
+        if (!/^qo_[A-Za-z0-9_-]{1,128}$/u.test(input.offerId)) {
+            fail('invalid_input', 'iLink login offer ID is invalid');
+        }
+        assertIlinkAccountKey(input.accountKey);
+        const now = this.#now(input.now);
+        return this.#transaction(() => {
+            const offer = rowAs(this.#database.prepare(`
+        SELECT initiator_kind, source_channel, source_message_key,
+               source_account_id, source_peer_id, created_at
+        FROM ilink_login_offers
+        WHERE offer_id = ? AND initiator_kind = 'local_operator'
+          AND status IN ('waiting', 'scanned') AND expires_at > ?
+          AND EXISTS (
+            SELECT 1 FROM json_each(candidate_account_keys_json)
+            WHERE value = ?
+          )
+      `).get(input.offerId, now, input.accountKey));
+            if (!offer)
+                fail('invalid_input', 'Unknown or invalid local iLink login offer');
+            const account = this.#accountRow(input.accountKey);
+            if (!account || account.status !== 'active') {
+                fail('account_not_active', 'iLink account is not active');
+            }
+            this.#database.prepare(`
+        UPDATE ilink_accounts SET agent_access = 'host', updated_at = ?
+        WHERE account_key = ?
+      `).run(now, input.accountKey);
+            this.#database.prepare(`
+        INSERT INTO ilink_enrollment_audit (
+          offer_id, initiator_kind, source_channel, source_message_key,
+          source_account_id, source_peer_id, account_key,
+          result, offered_at, completed_at
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, 'already_connected', ?, ?)
+      `).run(input.offerId, offer.initiator_kind, offer.source_channel, offer.source_message_key, offer.source_account_id, offer.source_peer_id, input.accountKey, offer.created_at, now);
+            const removed = this.#database.prepare(`
+        DELETE FROM ilink_login_offers
+        WHERE offer_id = ? AND status IN ('waiting', 'scanned')
+      `).run(input.offerId);
+            if (removed.changes !== 1)
+                fail('attempt_conflict', 'iLink login offer changed');
+            return mapAccount(this.#accountRow(input.accountKey));
+        });
+    }
     getAccountSecret(accountKey) {
         const row = this.#accountSecretRow(accountKey);
         return row ? mapAccountSecret(row) : undefined;
@@ -495,6 +567,16 @@ export class IlinkSqliteStore {
       ORDER BY created_at, account_key
     `).all()).map(mapAccount);
     }
+    hasEncryptedState() {
+        return Boolean(this.#database.prepare(`
+      SELECT 1
+      FROM ilink_account_secrets
+      UNION ALL
+      SELECT 1
+      FROM ilink_login_offers
+      LIMIT 1
+    `).get());
+    }
     listActiveAccountsWithSecrets() {
         return rowsAs(this.#database.prepare(`
       SELECT account.*, secret.account_generation,
@@ -509,6 +591,122 @@ export class IlinkSqliteStore {
             secret: mapAccountSecret(row),
         }));
     }
+    listRuntimeAccountsWithSecrets() {
+        return rowsAs(this.#database.prepare(`
+      SELECT account.*, secret.account_generation,
+             secret.nonce, secret.ciphertext, secret.auth_tag,
+             secret.updated_at AS secret_updated_at
+      FROM ilink_accounts AS account
+      JOIN ilink_account_secrets AS secret USING (account_key)
+      WHERE account.status = 'active' AND account.runtime_enabled = 1
+      ORDER BY account.created_at, account.account_key
+    `).all()).map((row) => ({
+            account: mapAccount(row),
+            secret: mapAccountSecret(row),
+        }));
+    }
+    setRuntimeEnabled(accountKey, enabled, now = this.#now()) {
+        assertIlinkAccountKey(accountKey);
+        return this.#transaction(() => {
+            const updated = this.#database.prepare(`
+        UPDATE ilink_accounts
+        SET runtime_enabled = ?, updated_at = ?
+        WHERE account_key = ? AND status = 'active'
+      `).run(enabled ? 1 : 0, this.#now(now), accountKey);
+            if (updated.changes !== 1) {
+                const account = this.#accountRow(accountKey);
+                if (!account)
+                    fail('account_not_found', 'Unknown iLink account');
+                fail('account_not_active', 'iLink account is not active');
+            }
+            return mapAccount(this.#accountRow(accountKey));
+        });
+    }
+    selectRuntimeAccount(accountKey, now = this.#now()) {
+        assertIlinkAccountKey(accountKey);
+        return this.#transaction(() => {
+            const account = this.#accountRow(accountKey);
+            if (!account)
+                fail('account_not_found', 'Unknown iLink account');
+            if (account.status !== 'active') {
+                fail('account_not_active', 'iLink account is not active');
+            }
+            const timestamp = this.#now(now);
+            this.#database.prepare(`
+        UPDATE ilink_accounts
+        SET runtime_enabled = CASE WHEN account_key = ? THEN 1 ELSE 0 END,
+            updated_at = CASE
+              WHEN runtime_enabled <> CASE WHEN account_key = ? THEN 1 ELSE 0 END
+              THEN ? ELSE updated_at END
+        WHERE status = 'active'
+      `).run(accountKey, accountKey, timestamp);
+            return mapAccount(this.#accountRow(accountKey));
+        });
+    }
+    deleteAccountCompletely(accountKey, now = this.#now()) {
+        assertIlinkAccountKey(accountKey);
+        return this.#transaction(() => {
+            const account = this.#accountRow(accountKey);
+            if (!account)
+                fail('account_not_found', 'Unknown iLink account');
+            const deletedAccount = mapAccount(account);
+            const timestamp = this.#now(now);
+            this.#cancelOpenWindows(accountKey, timestamp, 'account_deleted');
+            this.#database.prepare(`
+        UPDATE ilink_login_offers
+        SET candidate_account_keys_json = (
+          SELECT COALESCE(json_group_array(value), '[]')
+          FROM json_each(candidate_account_keys_json)
+          WHERE value <> ?
+        ), updated_at = ?
+        WHERE EXISTS (
+          SELECT 1 FROM json_each(candidate_account_keys_json) WHERE value = ?
+        )
+      `).run(accountKey, timestamp, accountKey);
+            this.#database.prepare(`
+        DELETE FROM ilink_enrollment_audit WHERE account_key = ?
+      `).run(accountKey);
+            this.#database.prepare(`
+        DELETE FROM delivery_failures
+        WHERE matched_attempt_key IN (
+          SELECT attempt_key FROM send_attempts
+          WHERE channel = 'weixin_ilink' AND open_kfid = ?
+        )
+      `).run(accountKey);
+            this.#database.prepare(`
+        DELETE FROM agent_sessions
+        WHERE channel = 'weixin_ilink' AND open_kfid = ?
+      `).run(accountKey);
+            this.#database.prepare(`
+        DELETE FROM send_attempts
+        WHERE channel = 'weixin_ilink' AND open_kfid = ?
+      `).run(accountKey);
+            this.#database.prepare(`
+        DELETE FROM ilink_reply_windows WHERE account_key = ?
+      `).run(accountKey);
+            this.#database.prepare(`
+        DELETE FROM inbound_messages
+        WHERE channel = 'weixin_ilink' AND open_kfid = ?
+      `).run(accountKey);
+            this.#database.prepare(`
+        DELETE FROM conversations
+        WHERE channel = 'weixin_ilink' AND open_kfid = ?
+      `).run(accountKey);
+            const deleted = this.#database.prepare(`
+        DELETE FROM ilink_accounts WHERE account_key = ?
+      `).run(accountKey);
+            if (deleted.changes !== 1) {
+                fail('attempt_conflict', 'iLink account changed during deletion');
+            }
+            return {
+                ...deletedAccount,
+                status: 'revoked',
+                runtimeEnabled: false,
+                pauseUntil: 0,
+                updatedAt: timestamp,
+            };
+        });
+    }
     getCursor(accountKey) {
         const row = this.#accountRow(accountKey);
         if (!row)

package/dist/src/mcp/ilink-login-server.js

@@ -0,0 +1,160 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { z } from 'zod';
+import { KINTIO_VERSION } from '../version.js';
+const OFFER_ID = z.string().regex(/^qo_[A-Za-z0-9_-]{1,128}$/u);
+const ACCOUNT_KEY = z.string().regex(/^ia_[0-9a-f]{40}$/u);
+const OPERATOR_ACCOUNT = z.object({
+    accountKey: ACCOUNT_KEY,
+    providerAccountId: z.string().min(1).max(512),
+    runtimeEnabled: z.boolean(),
+});
+const LOGIN_STATUS = z.enum([
+    'waiting',
+    'scanned',
+    'confirmed',
+    'expired',
+    'failed',
+    'cancelled',
+    'already_connected',
+    'verification_required',
+    'unknown',
+]);
+function textResult(text, structuredContent) {
+    return {
+        content: [{ type: 'text', text }],
+        structuredContent,
+    };
+}
+function failure(error, operation = 'login') {
+    const message = error instanceof Error ? error.message : '';
+    const code = /account limit reached/iu.test(message)
+        ? 'account_limit_reached'
+        : /already pending/iu.test(message)
+            ? 'login_pending'
+            : operation === 'account'
+                ? 'account_operation_unavailable'
+                : 'login_unavailable';
+    const publicMessage = code === 'account_limit_reached'
+        ? 'The iLink account limit has been reached.'
+        : code === 'login_pending'
+            ? 'An iLink terminal login is already pending.'
+            : code === 'account_operation_unavailable'
+                ? 'The iLink account operation is unavailable.'
+                : 'The iLink login operation is unavailable.';
+    return {
+        content: [{ type: 'text', text: publicMessage }],
+        isError: true,
+    };
+}
+export function createIlinkLoginMcpServer(operator) {
+    const server = new McpServer({ name: 'kintio-ilink-login', version: KINTIO_VERSION }, {
+        instructions: 'Private local operator tools for iLink enrollment and account lifecycle. Never expose this server to an Agent.',
+    });
+    server.registerTool('begin_login', {
+        description: 'Create one terminal iLink login offer.',
+        inputSchema: {},
+        outputSchema: {
+            offerId: OFFER_ID,
+            qrContent: z.string().min(1).max(2_048),
+            expiresAt: z.number().int().positive(),
+        },
+        annotations: { readOnlyHint: false, idempotentHint: false },
+    }, async (_input, { signal }) => {
+        let offered;
+        try {
+            offered = await operator.begin(signal);
+            if (signal.aborted) {
+                throw signal.reason;
+            }
+            return textResult('iLink login started.', offered);
+        }
+        catch (error) {
+            if (offered && signal.aborted)
+                operator.cancel(offered.offerId);
+            return failure(error);
+        }
+    });
+    server.registerTool('login_status', {
+        description: 'Read one terminal iLink login status.',
+        inputSchema: { offerId: OFFER_ID },
+        outputSchema: {
+            status: LOGIN_STATUS,
+        },
+        annotations: { readOnlyHint: true, idempotentHint: true },
+    }, ({ offerId }) => {
+        try {
+            return textResult('iLink login status.', operator.status(offerId));
+        }
+        catch (error) {
+            return failure(error);
+        }
+    });
+    server.registerTool('cancel_login', {
+        description: 'Cancel one terminal iLink login offer.',
+        inputSchema: { offerId: OFFER_ID },
+        outputSchema: { cancelled: z.boolean() },
+        annotations: { readOnlyHint: false, idempotentHint: true },
+    }, ({ offerId }) => {
+        try {
+            return textResult('iLink login cancelled.', {
+                cancelled: operator.cancel(offerId),
+            });
+        }
+        catch (error) {
+            return failure(error);
+        }
+    });
+    server.registerTool('list_accounts', {
+        description: 'List enrolled iLink accounts without credentials.',
+        inputSchema: {},
+        outputSchema: { accounts: z.array(OPERATOR_ACCOUNT).max(1_000) },
+        annotations: { readOnlyHint: true, idempotentHint: true },
+    }, () => {
+        try {
+            return textResult('iLink accounts.', { accounts: operator.listAccounts() });
+        }
+        catch (error) {
+            return failure(error, 'account');
+        }
+    });
+    for (const [name, enabled] of [
+        ['start_account', true],
+        ['stop_account', false],
+    ]) {
+        server.registerTool(name, {
+            description: `${enabled ? 'Start' : 'Stop'} one enrolled iLink account.`,
+            inputSchema: { accountKey: ACCOUNT_KEY },
+            outputSchema: {
+                account: OPERATOR_ACCOUNT,
+                runningCount: z.number().int().nonnegative(),
+            },
+            annotations: { readOnlyHint: false, idempotentHint: true },
+        }, async ({ accountKey }) => {
+            try {
+                const result = await operator.setAccountRuntime(accountKey, enabled);
+                return textResult(`iLink account ${enabled ? 'started' : 'stopped'}.`, result);
+            }
+            catch (error) {
+                return failure(error, 'account');
+            }
+        });
+    }
+    server.registerTool('delete_account', {
+        description: 'Permanently delete one iLink account and all Kintio data scoped to it.',
+        inputSchema: { accountKey: ACCOUNT_KEY },
+        outputSchema: {
+            account: OPERATOR_ACCOUNT,
+            runningCount: z.number().int().nonnegative(),
+        },
+        annotations: { readOnlyHint: false, idempotentHint: false, destructiveHint: true },
+    }, async ({ accountKey }) => {
+        try {
+            const result = await operator.deleteAccount(accountKey);
+            return textResult('iLink account and its Kintio data were deleted.', result);
+        }
+        catch (error) {
+            return failure(error, 'account');
+        }
+    });
+    return server;
+}

package/dist/src/mcp/ipc-host.js

@@ -16,6 +16,7 @@ export class McpIpcHost {
     #wechatKf;
     #memory;
     #ilink;
+    #operator;
     #logger;
     #connections = new Set();
     #server;
@@ -25,13 +26,14 @@ export class McpIpcHost {
     #closing;
     #force = false;
     #closed = false;
-    constructor({ instanceKey, stateDirectory, relayFile, wechatKf, memory, ilink, logger = console, }) {
+    constructor({ instanceKey, stateDirectory, relayFile, wechatKf, memory, ilink, operator, logger = console, }) {
         this.#instanceKey = path.resolve(instanceKey);
         this.#stateDirectory = path.join(path.resolve(stateDirectory), '.kintio-mcp', mcpInstanceId(this.#instanceKey));
         this.#relayFile = path.resolve(relayFile);
         this.#wechatKf = wechatKf;
         this.#memory = memory;
         this.#ilink = ilink;
+        this.#operator = operator;
         this.#logger = logger;
     }
     start() {
@@ -114,6 +116,7 @@ export class McpIpcHost {
             case 'wechat_kf': return this.#wechatKf;
             case 'weixin_ilink': return this.#ilink;
             case 'conversation_memory': return this.#memory;
+            case 'operator': return this.#operator;
         }
     }
     #accept(socket) {

package/dist/src/mcp/ipc-protocol.js

@@ -7,6 +7,7 @@ const MCP_ROUTES = [
     'wechat_kf',
     'weixin_ilink',
     'conversation_memory',
+    'operator',
 ];
 export const MCP_FRAME_MAX_BYTES = 256 * 1024;
 export const MCP_HANDSHAKE_OK = 'KINTIO-MCP/1 OK';
@@ -37,6 +38,9 @@ export function mcpIpcAddress(instanceKey, generation, platform = process.platfo
 export function mcpInstanceId(instanceKey) {
     return createHash('sha256').update(canonicalPath(instanceKey)).digest('hex').slice(0, 16);
 }
+export function operatorMcpInstanceKey(instanceKey) {
+    return `${path.resolve(instanceKey)}.operator`;
+}
 export function ensureMcpStateDirectory(directory) {
     const target = ensurePrivateDirectory(directory);
     assertPrivateDirectory(target);
@@ -105,6 +109,24 @@ export function readMcpDescriptor(filePath) {
         fs.closeSync(descriptor);
     }
 }
+export function findMcpDescriptorFile(stateDirectory, instanceKey) {
+    const directory = path.join(path.resolve(stateDirectory), '.kintio-mcp', mcpInstanceId(instanceKey));
+    let names;
+    try {
+        names = fs.readdirSync(directory).filter((name) => /^mcp-runtime-[A-Za-z0-9_-]{24}\.json$/u.test(name));
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            throw new Error('Kintio runtime is not running');
+        }
+        throw error;
+    }
+    if (names.length !== 1)
+        throw new Error('Kintio runtime is not running');
+    const descriptorFile = path.join(directory, names[0]);
+    readMcpDescriptor(descriptorFile);
+    return descriptorFile;
+}
 export function mcpHandshake(descriptor, route) {
     return `${JSON.stringify({
         version: descriptor.version,