@primusclaw/personal-agent-runtime 0.1.1 → 0.2.0

package/dist/index.js

@@ -529,6 +529,12 @@ var Watchdog = class {
 };
 
 // packages/runtime/src/claw/remote-agents.ts
+function enabledOf(answer2) {
+  const data = anyDataOf(answer2, "the approvals setting");
+  const enabled = data !== null && typeof data === "object" ? data["enabled"] : void 0;
+  if (typeof enabled !== "boolean") throw new ClawAnswerInvalid4("the approvals setting has no enabled");
+  return enabled;
+}
 var HttpRemoteAgents = class {
   constructor(http, clientLabel) {
     this.http = http;
@@ -543,6 +549,12 @@ var HttpRemoteAgents = class {
     const path = options.includeHidden === true ? `/connectors?hidden=${REMOTE_HIDDEN_INCLUDE}` : "/connectors";
     return read(remoteConnectorsSchema, anyDataOf(await this.#call("GET", path, key2), "connectors"), "connectors");
   }
+  async approvals(key2) {
+    return enabledOf(await this.#call("GET", "/approvals", key2));
+  }
+  async setApprovals(key2, enabled) {
+    return enabledOf(await this.#call("PUT", "/approvals", key2, { enabled }));
+  }
   async pair(key2) {
     return read(
       remotePairingSchema,
@@ -1233,6 +1245,7 @@ function createClawClient(options) {
 // packages/runtime/src/claw/identity-lookup.ts
 import {
   ClawUnreachable as ClawUnreachable3,
+  isApiKey as isApiKey3,
   pyLower,
   pyStrip as pyStrip3,
   pyStrOf as pyStrOf3,
@@ -1240,19 +1253,33 @@ import {
 } from "@primusclaw/personal-agent";
 var HttpIdentityLookup = class {
   /** `safeApiUrl` is the platform API without a trailing slash (Settings.safeApiUrl). */
-  constructor(safeApiUrl, fetchImpl = fetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+  constructor(safeApiUrl, fetchImpl = fetch, timeoutMs = DEFAULT_TIMEOUT_MS, options = {}) {
     this.timeoutMs = timeoutMs;
-    this.http = new ClawHttp(safeApiUrl, fetchImpl);
+    this.safe = new ClawHttp(safeApiUrl, fetchImpl);
+    this.claw = options.clawApiUrl ? new ClawHttp(options.clawApiUrl, fetchImpl) : void 0;
+    this.logger = options.logger;
   }
   timeoutMs;
-  http;
+  safe;
+  claw;
+  logger;
   async ownerOfKey(key2) {
-    const what = "/users/self";
+    if (isApiKey3(key2)) {
+      const body2 = await this.ask(this.safe, "/users/self", key2, "api_key");
+      return body2 === void 0 ? void 0 : ownerIn(body2);
+    }
+    if (this.claw === void 0) return void 0;
+    const body = await this.ask(this.claw, "/v1/me", key2, "identity_token");
+    return body === void 0 ? void 0 : ownerInMe(body);
+  }
+  /** The JSON answer of `GET what` asked with `key`; undefined on any failure. */
+  async ask(http, what, key2, kind) {
     let text3;
     try {
-      const response = await this.http.send({ method: "GET", path: what, key: key2, timeoutMs: this.timeoutMs });
+      const response = await http.send({ method: "GET", path: what, key: key2, timeoutMs: this.timeoutMs });
       if (response.status !== 200) {
         await response.body?.cancel();
+        this.logger?.info("identity lookup: no owner", { route: what, status: response.status, credential: kind });
         return void 0;
       }
       text3 = await readText(response, what);
@@ -1260,13 +1287,11 @@ var HttpIdentityLookup = class {
       if (err5 instanceof ClawUnreachable3) return void 0;
       throw err5;
     }
-    let body;
     try {
-      body = JSON.parse(text3);
+      return JSON.parse(text3);
     } catch {
       return void 0;
     }
-    return ownerIn(body);
   }
 };
 function field(user, name) {
@@ -1285,6 +1310,10 @@ function ownerIn(body) {
     accountType: pyLower(field(user, "type"))
   };
 }
+function ownerInMe(body) {
+  if (!isObject5(body)) return void 0;
+  return { id: field(body, "userId"), name: field(body, "name"), email: field(body, "email"), accountType: "" };
+}
 
 // packages/runtime/src/claw/key-revoker.ts
 import { ClawUnreachable as ClawUnreachable4, pyTruthy as pyTruthy5 } from "@primusclaw/personal-agent";
@@ -1935,11 +1964,13 @@ import {
   DEFAULT_MAX_CONCURRENT_TASKS,
   DEFAULT_MESSAGE_LIMIT,
   DEFAULT_MESSAGE_WINDOW_SECONDS,
+  DEFAULT_GROUP_CONTEXT,
   decimalBigInt as decimalBigInt2,
   parseLimits
 } from "@primusclaw/personal-agent";
 var GITHUB_CLI_CLIENT_ID = "178c6fc778ccc68e1d6a";
 var ASSISTANT_REPLY_WINDOW_SECONDS = 30 * 60;
+var MAX_GROUP_CONTEXT_MESSAGES = 200;
 function readSettings(env, secrets = /* @__PURE__ */ new Map()) {
   const read2 = new EnvReader(env);
   const store = { values: secrets, source: secretsSourceOf(env) };
@@ -1975,6 +2006,7 @@ function readSettings(env, secrets = /* @__PURE__ */ new Map()) {
     directChat: directChat(read2),
     onBehalfUsers: new Set(read2.list("TEAMS_ON_BEHALF_USERS")),
     observeUsers: new Set(read2.list("TEAMS_OBSERVE_USERS", true)),
+    groupContext: groupContextSettings(read2),
     sensitiveLimits: limitsOf(read2),
     linkLimits: {
       perUser: read2.positiveInt("TEAMS_LINK_MAX_FAILURES_PER_USER", 5),
@@ -1989,6 +2021,19 @@ function readSettings(env, secrets = /* @__PURE__ */ new Map()) {
     secretsSource: store.source
   };
 }
+function groupContextSettings(read2) {
+  const messages = read2.int("TEAMS_GROUP_CONTEXT_MESSAGES", String(DEFAULT_GROUP_CONTEXT.messages));
+  if (messages < 0 || messages > MAX_GROUP_CONTEXT_MESSAGES) {
+    throw new ConfigError2(
+      `TEAMS_GROUP_CONTEXT_MESSAGES must be between 0 and ${String(MAX_GROUP_CONTEXT_MESSAGES)}, not ${String(messages)}`
+    );
+  }
+  return {
+    messages,
+    maxAgeSeconds: read2.positiveInt("TEAMS_GROUP_CONTEXT_HOURS", DEFAULT_GROUP_CONTEXT.maxAgeSeconds / 3600) * 3600,
+    messageChars: read2.positiveInt("TEAMS_GROUP_CONTEXT_CHARS", DEFAULT_GROUP_CONTEXT.messageChars)
+  };
+}
 function secret(read2, store, name) {
   const loaded = store.values.get(name);
   if (loaded !== void 0) return loaded;
@@ -3608,6 +3653,15 @@ var ADDED_COLUMNS = [
     ]
   ],
   ["notify_subs", [["types_version", "INTEGER NOT NULL DEFAULT 0"]]],
+  [
+    "remote_permissions",
+    [
+      ["message_id", "TEXT NOT NULL DEFAULT ''"],
+      // '' = the channel never said the card's id
+      ["ask_json", "TEXT NOT NULL DEFAULT ''"]
+      // '' = not a question a terminal asks
+    ]
+  ],
   [
     "turn_answers",
     [
@@ -3841,6 +3895,26 @@ var SqliteObserveRepository = class {
   }
 };
 
+// packages/runtime/src/sqlite/group-context-repository.ts
+var SqliteGroupContextRepository = class {
+  constructor(ctx) {
+    this.ctx = ctx;
+  }
+  ctx;
+  contextOff(conversationId) {
+    return this.ctx.db.get("SELECT 1 AS off FROM group_context_off WHERE conversation_id = ?", conversationId) !== void 0;
+  }
+  setContextOff(conversationId, off) {
+    if (off) {
+      this.ctx.db.run(
+        "INSERT INTO group_context_off (conversation_id, updated_at) VALUES (?, ?) ON CONFLICT (conversation_id) DO UPDATE SET updated_at = excluded.updated_at",
+        conversationId,
+        this.ctx.now()
+      );
+    } else this.ctx.db.run("DELETE FROM group_context_off WHERE conversation_id = ?", conversationId);
+  }
+};
+
 // packages/runtime/src/sqlite/people-repository.ts
 import {
   DEFAULT_QUIET,
@@ -4044,7 +4118,7 @@ var SqliteRemoteSessionNameRepository = class {
     );
   }
 };
-var PERMISSION_COLUMNS = "session_id, action_id, aad_id, tool, options_json, expires_at, state";
+var PERMISSION_COLUMNS = "session_id, action_id, aad_id, tool, options_json, expires_at, state, message_id, ask_json";
 function permission(row) {
   return {
     sessionId: col.str(row, "session_id"),
@@ -4053,9 +4127,20 @@ function permission(row) {
     tool: col.str(row, "tool"),
     options: jsonList(col.str(row, "options_json")),
     expiresAt: col.num(row, "expires_at"),
-    state: col.str(row, "state")
+    state: col.str(row, "state"),
+    messageId: col.str(row, "message_id"),
+    ask: askOf(col.str(row, "ask_json"))
   };
 }
+function askOf(text3) {
+  if (!text3) return null;
+  try {
+    const value = JSON.parse(text3);
+    return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+  } catch {
+    return null;
+  }
+}
 var SqliteRemotePermissionRepository = class {
   constructor(ctx) {
     this.ctx = ctx;
@@ -4065,14 +4150,15 @@ var SqliteRemotePermissionRepository = class {
     const now = this.ctx.now();
     this.ctx.db.run("DELETE FROM remote_permissions WHERE expires_at < ?", now - REMOTE_PERMISSION_KEEP_SECONDS);
     return this.ctx.db.run(
-      "INSERT OR IGNORE INTO remote_permissions (session_id, action_id, aad_id, tool, options_json, expires_at, created_at) VALUES (?, ?, ?, ?, ?, ?, ?)",
+      "INSERT OR IGNORE INTO remote_permissions (session_id, action_id, aad_id, tool, options_json, expires_at, created_at, ask_json) VALUES (?, ?, ?, ?, ?, ?, ?, ?)",
       p.sessionId,
       p.actionId,
       p.userId,
       p.tool,
       pyJsonDumps(p.options),
       p.expiresAt,
-      now
+      now,
+      p.ask ? JSON.stringify(p.ask) : ""
     ) === 1;
   }
   getRemotePermission(sessionId, actionId) {
@@ -4099,17 +4185,21 @@ var SqliteRemotePermissionRepository = class {
     );
     return new Set(rows.map((r) => col.str(r, "session_id")));
   }
+  setRemotePermissionMessage(sessionId, actionId, messageId) {
+    this.ctx.db.run(
+      "UPDATE remote_permissions SET message_id = ? WHERE session_id = ? AND action_id = ?",
+      messageId,
+      sessionId,
+      actionId
+    );
+  }
   forgetRemotePermission(sessionId, actionId) {
     this.ctx.db.run("DELETE FROM remote_permissions WHERE session_id = ? AND action_id = ?", sessionId, actionId);
   }
   closeRemotePermission(sessionId, actionId, state, options = {}) {
-    const onlyIfPending = options.onlyIfPending ?? true;
-    return this.ctx.db.run(
-      `UPDATE remote_permissions SET state = ? WHERE session_id = ? AND action_id = ?${onlyIfPending ? " AND state = 'pending'" : ""}`,
-      state,
-      sessionId,
-      actionId
-    ) === 1;
+    const from = options.onlyIfState ?? (options.onlyIfPending ?? true ? "pending" : null);
+    const sql = "UPDATE remote_permissions SET state = ? WHERE session_id = ? AND action_id = ?";
+    return from === null ? this.ctx.db.run(sql, state, sessionId, actionId) === 1 : this.ctx.db.run(`${sql} AND state = ?`, state, sessionId, actionId, from) === 1;
   }
 };
 
@@ -4499,6 +4589,7 @@ var SqliteStore = class {
   notifySubs;
   approvals;
   observe;
+  groupContext;
   assistantCards;
   assistantButtons;
   assistantMessages;
@@ -4530,6 +4621,7 @@ var SqliteStore = class {
     this.notifySubs = new SqliteNotifySubscriptionRepository(ctx);
     this.approvals = new SqliteApprovalRepository(ctx);
     this.observe = new SqliteObserveRepository(ctx);
+    this.groupContext = new SqliteGroupContextRepository(ctx);
     this.assistantCards = new SqliteAssistantCardRepository(ctx);
     this.assistantButtons = new SqliteAssistantButtonRepository(ctx);
     this.assistantMessages = new SqliteAssistantMessageRepository(ctx);

package/dist/sqlite/schema.sql

@@ -120,3 +120,5 @@ CREATE TABLE IF NOT EXISTS observe_cards (
   tool TEXT NOT NULL, args TEXT NOT NULL, message TEXT NOT NULL DEFAULT '', state TEXT NOT NULL DEFAULT 'open',
   created_at REAL NOT NULL);
 CREATE INDEX IF NOT EXISTS observe_cards_by_suggestion ON observe_cards (aad_id, run_id, seq);
+CREATE TABLE IF NOT EXISTS group_context_off (
+  conversation_id TEXT PRIMARY KEY, updated_at REAL NOT NULL);

package/dist/types/claw/identity-lookup.d.ts

@@ -1,15 +1,33 @@
-import { type IdentityLookup, type KeyOwner } from "@primusclaw/personal-agent";
+import { type IdentityLookup, type KeyOwner, type Logger } from "@primusclaw/personal-agent";
 import { type Fetch } from "./http.js";
+/** Where a lookup asks besides the platform, and where it says that an answer was not 200. */
+export interface IdentityLookupOptions {
+    /**
+     * Claw's API without a trailing slash (Settings.clawApiUrl). An exchanged identity token is asked about here, at
+     * `GET /v1/me`: it is a token for Claw's audience, which the platform's `/users/self` refuses (401). Without it a
+     * token has no owner.
+     */
+    readonly clawApiUrl?: string;
+    /** Where an answer other than 200 is noted: its status, the route and the kind of credential, never the credential. */
+    readonly logger?: Logger;
+}
 /**
- * Who a key belongs to, from the platform's `/users/self` asked with the key itself (the Python worker's `safe.whoami`,
- * `safe.safe_user` and `safe.user_id_of`, which read the same answer). Any failure is no owner: an answer other than
- * 200, a timeout or a broken connection, a body that is not JSON or not an object. The caller says so, or tries again
- * later (the subscriptions' timer that fills in Claw user ids).
+ * Who a credential belongs to. A person's own key (`ak-...`) is asked of the platform's `/users/self` with the key itself
+ * (the Python worker's `safe.whoami`, `safe.safe_user` and `safe.user_id_of`, which read the same answer). An identity
+ * token exchanged for them (TEAMS_EXCHANGE_FOR_CHAT) is asked of Claw's `/v1/me` with the token, when Claw's URL is
+ * given: the platform does not take such a token on its data routes, and Claw answers with the platform's id, name and
+ * email of the token's subject (it has no account type: ""). Any failure is no owner: an answer other than 200, a timeout
+ * or a broken connection, a body that is not JSON or not an object. The caller says so, or tries again later (the
+ * subscriptions' timer that fills in Claw user ids).
  */
 export declare class HttpIdentityLookup implements IdentityLookup {
     private readonly timeoutMs;
-    private readonly http;
+    private readonly safe;
+    private readonly claw;
+    private readonly logger;
     /** `safeApiUrl` is the platform API without a trailing slash (Settings.safeApiUrl). */
-    constructor(safeApiUrl: string, fetchImpl?: Fetch, timeoutMs?: number);
+    constructor(safeApiUrl: string, fetchImpl?: Fetch, timeoutMs?: number, options?: IdentityLookupOptions);
     ownerOfKey(key: string): Promise<KeyOwner | undefined>;
+    /** The JSON answer of `GET what` asked with `key`; undefined on any failure. */
+    private ask;
 }

package/dist/types/claw/index.d.ts

@@ -1,5 +1,5 @@
 export { createClawClient, DEFAULT_CLIENT_LABEL, type ClawClientOptions } from "./client.js";
 export type { Fetch } from "./http.js";
-export { HttpIdentityLookup } from "./identity-lookup.js";
+export { HttpIdentityLookup, type IdentityLookupOptions } from "./identity-lookup.js";
 export { HttpKeyRevoker } from "./key-revoker.js";
 export { ruleText } from "./rule.js";

package/dist/types/claw/remote-agents.d.ts

@@ -10,6 +10,8 @@ export declare class HttpRemoteAgents implements ClawRemoteAgentsPort {
     connectors(key: ClawCredential, options?: {
         includeHidden?: boolean;
     }): Promise<RemoteConnector[]>;
+    approvals(key: ClawCredential): Promise<boolean>;
+    setApprovals(key: ClawCredential, enabled: boolean): Promise<boolean>;
     pair(key: ClawCredential): Promise<RemotePairing>;
     hide(key: ClawCredential, connectorId: string, refs: readonly string[], hidden: boolean): Promise<RemoteHidden>;
     revoke(key: ClawCredential, connectorId: string): Promise<void>;

package/dist/types/config/settings.d.ts

@@ -4,6 +4,8 @@ import { type Env } from "./env.js";
 export declare const GITHUB_CLI_CLIENT_ID = "178c6fc778ccc68e1d6a";
 /** The default of ASSISTANT_REPLY_WINDOW_SECONDS. */
 export declare const ASSISTANT_REPLY_WINDOW_SECONDS: number;
+/** The most messages TEAMS_GROUP_CONTEXT_MESSAGES may keep per group chat. */
+export declare const MAX_GROUP_CONTEXT_MESSAGES = 200;
 /**
  * The worker's channel-neutral settings from the environment (the Python worker's `Settings.from_env`, without the
  * Teams fields). `secrets` are what the deployment's SecretSource loaded; a name it holds is taken from there and never

package/dist/types/sqlite/group-context-repository.d.ts

@@ -0,0 +1,9 @@
+/** GroupContextRepository on SQLite (table `group_context_off`: one row per chat that turned the context off). */
+import type { GroupContextRepository } from "@primusclaw/personal-agent";
+import type { StoreContext } from "./context.js";
+export declare class SqliteGroupContextRepository implements GroupContextRepository {
+    private readonly ctx;
+    constructor(ctx: StoreContext);
+    contextOff(conversationId: string): boolean;
+    setContextOff(conversationId: string, off: boolean): void;
+}

package/dist/types/sqlite/remote-repository.d.ts

@@ -17,8 +17,10 @@ export declare class SqliteRemotePermissionRepository implements RemotePermissio
     getRemotePermission(sessionId: string, actionId: string): RemotePermission | null;
     pendingRemotePermissions(userId: string, sessionId: string): RemotePermission[];
     waitingRemoteSessions(userId: string): Set<string>;
+    setRemotePermissionMessage(sessionId: string, actionId: string, messageId: string): void;
     forgetRemotePermission(sessionId: string, actionId: string): void;
     closeRemotePermission(sessionId: string, actionId: string, state: RemotePermissionState, options?: {
         readonly onlyIfPending?: boolean;
+        readonly onlyIfState?: RemotePermissionState;
     }): boolean;
 }

package/dist/types/sqlite/store.d.ts

@@ -13,6 +13,7 @@ import { SqliteLinkRepository } from "./link-repository.js";
 import { SqliteMemberDirectoryRepository } from "./member-repository.js";
 import { SqliteNotifySubscriptionRepository } from "./notify-repository.js";
 import { SqliteObserveRepository } from "./observe-repository.js";
+import { SqliteGroupContextRepository } from "./group-context-repository.js";
 import { SqliteOnboardingRepository } from "./onboarding-repository.js";
 import { SqliteConversationRefRepository, SqliteHeldEventRepository, SqlitePrefsRepository } from "./people-repository.js";
 import { type ReencryptCounts } from "./reencrypt.js";
@@ -45,6 +46,7 @@ export declare class SqliteStore implements StorePort {
     readonly notifySubs: SqliteNotifySubscriptionRepository;
     readonly approvals: SqliteApprovalRepository;
     readonly observe: SqliteObserveRepository;
+    readonly groupContext: SqliteGroupContextRepository;
     readonly assistantCards: SqliteAssistantCardRepository;
     readonly assistantButtons: SqliteAssistantButtonRepository;
     readonly assistantMessages: SqliteAssistantMessageRepository;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@primusclaw/personal-agent-runtime",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "Node adapters for the personal agent's ports: clock, randomness, logging (and, as the port lands, storage, Claw, metrics, HTTP).",
   "license": "MIT",
   "repository": {
@@ -29,7 +29,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@primusclaw/personal-agent": "0.1.1",
+    "@primusclaw/personal-agent": "0.2.0",
     "fastify": "^5.12.8",
     "zod": "^4.6.7"
   }