@rudderhq/server 0.7.1 → 0.7.2

package/dist/bundled-plugins/plugin-linear/dist/worker.js

@@ -520,8 +520,8 @@ function startWorkerRpcHost(options) {
         async list(input) {
           return callHost("goals.list", {
             orgId: input.orgId,
-            level: input.level,
-            status: input.status,
+            lifecycle: input.lifecycle,
+            objectiveMode: input.objectiveMode,
             limit: input.limit,
             offset: input.offset
           });
@@ -533,11 +533,7 @@ function startWorkerRpcHost(options) {
           return callHost("goals.create", {
             orgId: input.orgId,
             title: input.title,
-            description: input.description,
-            level: input.level,
-            status: input.status,
-            parentId: input.parentId,
-            ownerAgentId: input.ownerAgentId
+            description: input.description
           });
         },
         async update(goalId, patch, orgId) {
@@ -4964,6 +4960,7 @@ var AGENT_RUNTIME_TYPES = [
   "pi_local",
   "cursor",
   "openclaw_gateway",
+  "hermes_gateway",
   "hermes_local"
 ];
 var AGENT_ROLES = [
@@ -5213,7 +5210,7 @@ var CUSTOM_INTEGRATION_STATUSES = ["active", "disabled", "error", "revoked"];
 var CUSTOM_INTEGRATION_TOOL_STATUSES = ["active", "disabled", "error", "removed"];
 var CUSTOM_INTEGRATION_BINDING_STATUSES = ["active", "revoked"];
 var CUSTOM_INTEGRATION_TOOL_CALL_STATUSES = ["success", "error", "blocked"];
-var MCP_CONNECTION_PROVIDERS = ["supabase", "linear", "notion", "custom"];
+var MCP_CONNECTION_PROVIDERS = ["supabase", "linear", "notion", "github", "custom"];
 var MCP_CONNECTION_TRANSPORTS = ["stdio", "streamable_http", "legacy_manual"];
 var MCP_CONNECTION_SCOPES = ["organization", "agent"];
 var MCP_CONNECTION_ACCESS_MODES = ["provider_default", "read_only", "read_write"];
@@ -5226,6 +5223,7 @@ var MCP_AGENT_ACCESS_MODES = [
 ];
 var MCP_CONNECTION_CANONICAL_STATES = ["canonical", "superseded"];
 var MCP_PROVIDER_SCOPE_MODES = ["account", "workspace", "legacy_project"];
+var MCP_PROVIDER_CREDENTIAL_MODES = ["oauth", "pat", "custom"];
 var MCP_PROVIDER_ORGANIZATION_STATES = [
   "not_connected",
   "connecting",
@@ -5259,6 +5257,7 @@ var MCP_PROVIDER_CATALOG = [
     label: "Supabase",
     curated: true,
     requiresOAuth: true,
+    credentialMode: "oauth",
     requiresScopeSelection: false,
     scopeLabel: "Account",
     transports: ["streamable_http"],
@@ -5270,6 +5269,7 @@ var MCP_PROVIDER_CATALOG = [
     label: "Linear",
     curated: true,
     requiresOAuth: true,
+    credentialMode: "oauth",
     requiresScopeSelection: false,
     scopeLabel: "Workspace",
     transports: ["streamable_http"],
@@ -5281,17 +5281,31 @@ var MCP_PROVIDER_CATALOG = [
     label: "Notion",
     curated: true,
     requiresOAuth: true,
+    credentialMode: "oauth",
     requiresScopeSelection: false,
     scopeLabel: "Workspace",
     transports: ["streamable_http"],
     accessModes: ["provider_default"],
     defaultAccessMode: "provider_default"
   },
+  {
+    id: "github",
+    label: "GitHub",
+    curated: true,
+    requiresOAuth: false,
+    credentialMode: "pat",
+    requiresScopeSelection: false,
+    scopeLabel: "Account",
+    transports: ["streamable_http"],
+    accessModes: ["read_only", "read_write"],
+    defaultAccessMode: "read_only"
+  },
   {
     id: "custom",
     label: "Custom MCP",
     curated: false,
     requiresOAuth: false,
+    credentialMode: "custom",
     requiresScopeSelection: false,
     scopeLabel: "Server",
     transports: ["stdio", "streamable_http"],
@@ -5318,8 +5332,18 @@ var CHAT_MESSAGE_KINDS = [
 ];
 var CHAT_MESSAGE_STATUSES = ["streaming", "completed", "stopped", "failed", "interrupted"];
 var CHAT_CONTEXT_ENTITY_TYPES = ["issue", "project", "agent"];
-var GOAL_LEVELS = ["organization", "team", "agent", "task"];
-var GOAL_STATUSES = ["planned", "active", "achieved", "cancelled"];
+var GOAL_OBJECTIVE_MODES = ["target", "maximize", "maintain", "decide"];
+var GOAL_EVALUATOR_KINDS = ["artifact", "metric", "policy", "human"];
+var GOAL_CONTINUATION_KINDS = ["commitment", "wait", "decision", "verification"];
+var GOAL_ACTIVITY_KINDS = [
+  "progress",
+  "closeout",
+  "evidence",
+  "decision_requested",
+  "bottleneck",
+  "checkpoint"
+];
+var GOAL_FEEDBACK_KINDS = ["ordinary", "consequential"];
 var PROJECT_STATUSES = [
   "backlog",
   "planned",
@@ -5416,7 +5440,9 @@ var APPROVAL_TYPES = [
   "approve_ceo_strategy",
   "budget_override_required",
   "chat_issue_creation",
-  "chat_operation"
+  "chat_operation",
+  "agent_runtime",
+  "goal_change"
 ];
 var SECRET_PROVIDERS = [
   "local_encrypted",
@@ -5470,6 +5496,14 @@ var BUDGET_INCIDENT_RESOLUTION_ACTIONS = [
   "keep_paused",
   "raise_budget_and_resume"
 ];
+var AGENT_ISSUE_CREATION_REQUEST_STATUSES = [
+  "queued",
+  "running",
+  "deferred",
+  "succeeded",
+  "failed",
+  "cancelled"
+];
 var INVITE_JOIN_TYPES = ["human", "agent", "both"];
 var JOIN_REQUEST_TYPES = ["human", "agent"];
 var JOIN_REQUEST_STATUSES = ["pending_approval", "approved", "rejected"];
@@ -5793,6 +5827,7 @@ var mcpConnectionAccessModeSchema = external_exports.enum(MCP_CONNECTION_ACCESS_
 var mcpAgentAccessModeSchema = external_exports.enum(MCP_AGENT_ACCESS_MODES);
 var mcpConnectionCanonicalStateSchema = external_exports.enum(MCP_CONNECTION_CANONICAL_STATES);
 var mcpProviderScopeModeSchema = external_exports.enum(MCP_PROVIDER_SCOPE_MODES);
+var mcpProviderCredentialModeSchema = external_exports.enum(MCP_PROVIDER_CREDENTIAL_MODES);
 var mcpProviderOrganizationStateSchema = external_exports.enum(MCP_PROVIDER_ORGANIZATION_STATES);
 var mcpToolCapabilityClassSchema = external_exports.enum(MCP_TOOL_CAPABILITY_CLASSES);
 var mcpProviderMaxAccessSchema = external_exports.enum(["read_only", "read_write", "provider_granted"]);
@@ -5891,10 +5926,19 @@ var mcpCuratedSafeConfigSchema = external_exports.object({
     excluded: external_exports.array(external_exports.string().min(1).max(120)).max(100)
   }).strict()
 }).strict();
+var mcpGitHubSafeConfigSchema = external_exports.object({
+  endpoint: external_exports.literal("https://api.githubcopilot.com/mcp/"),
+  scopeMode: external_exports.literal("account")
+}).strict();
+var mcpGitHubPatSchema = external_exports.string().trim().min(20).max(255).regex(/^(?:github_pat_|ghp_)[A-Za-z0-9_]+$/, "Use a GitHub fine-grained or legacy PAT");
+var mcpGitHubSecretsMutationSchema = external_exports.object({
+  bearerToken: mcpGitHubPatSchema
+}).strict();
 var mcpConnectionSafeConfigSchema = external_exports.union([
   mcpStdioSafeConfigSchema,
   mcpStreamableHttpSafeConfigSchema,
   mcpLegacyManualSafeConfigSchema,
+  mcpGitHubSafeConfigSchema,
   mcpCuratedSafeConfigSchema
 ]);
 var mcpConnectionInputFields = {
@@ -5917,11 +5961,13 @@ var providerAccessModes = {
   supabase: ["read_only", "read_write"],
   linear: ["read_only", "read_write"],
   notion: ["provider_default"],
+  github: ["read_only", "read_write"],
   custom: ["provider_default", "read_only", "read_write"]
 };
 function defaultAccessMode(provider) {
   if (provider === "supabase") return "read_write";
   if (provider === "linear") return "read_write";
+  if (provider === "github") return "read_only";
   return "provider_default";
 }
 function sameNames(left, right, caseInsensitive = false) {
@@ -5940,6 +5986,23 @@ function validateSafeConnectionConfig(value, ctx, options = {}) {
       message: `${value.provider ?? "Unknown"} does not support ${accessMode}`
     });
   }
+  if (value.provider === "github") {
+    if (value.transport !== "streamable_http") {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["transport"],
+        message: "GitHub MCP uses Rudder-managed Streamable HTTP"
+      });
+    }
+    if (!mcpGitHubSafeConfigSchema.safeParse(value.safeConfig).success) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["safeConfig"],
+        message: "GitHub connections require the managed GitHub account configuration"
+      });
+    }
+    return;
+  }
   if (value.provider !== "custom") {
     if (value.transport !== "streamable_http") {
       ctx.addIssue({
@@ -6028,6 +6091,16 @@ function validateSafeConnectionConfig(value, ctx, options = {}) {
   }
 }
 function validateConnectionSecretMutation(value, ctx) {
+  if (value.provider === "github") {
+    if (value.secrets && !mcpGitHubSecretsMutationSchema.safeParse(value.secrets).success) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["secrets"],
+        message: "GitHub connections accept only a fine-grained or legacy PAT"
+      });
+    }
+    return;
+  }
   if (value.provider !== "custom") return;
   if (value.transport === "stdio") {
     const parsed = mcpStdioSafeConfigSchema.safeParse(value.safeConfig);
@@ -6068,7 +6141,10 @@ function validateConnectionSecretMutation(value, ctx) {
     }
   }
 }
-var createMcpConnectionSchema = external_exports.object(mcpConnectionInputFields).strict().superRefine((value, ctx) => {
+var createMcpConnectionSchema = external_exports.object({
+  ...mcpConnectionInputFields,
+  provider: external_exports.literal("custom")
+}).strict().superRefine((value, ctx) => {
   if (value.scope === "organization" && value.ownerAgentId) {
     ctx.addIssue({
       code: external_exports.ZodIssueCode.custom,
@@ -6156,6 +6232,7 @@ var mcpProviderCatalogEntrySchema = external_exports.object({
   label: external_exports.string().min(1),
   curated: external_exports.boolean(),
   requiresOAuth: external_exports.boolean(),
+  credentialMode: mcpProviderCredentialModeSchema,
   requiresScopeSelection: external_exports.boolean(),
   scopeLabel: external_exports.string().min(1),
   transports: external_exports.array(mcpConnectionTransportSchema).min(1),
@@ -6273,7 +6350,7 @@ var managedExternalMcpBindingSchema = external_exports.object({
 }).strict();
 var managedExternalMcpBindingsSchema = external_exports.array(managedExternalMcpBindingSchema).max(100);
 var mcpProviderAvailabilitySchema = external_exports.object({
-  provider: external_exports.enum(["supabase", "linear", "notion"]),
+  provider: external_exports.enum(["supabase", "linear", "notion", "github"]),
   organization: external_exports.object({
     state: mcpProviderOrganizationStateSchema,
     connectionId: uuidSchema.nullable(),
@@ -6322,7 +6399,7 @@ var mcpProviderAvailabilitySchema = external_exports.object({
     });
   }
   const scopeMode = value.organization.scopeMode;
-  const validScope = scopeMode === null || (value.provider === "supabase" ? scopeMode === "account" || scopeMode === "legacy_project" : scopeMode === "workspace");
+  const validScope = scopeMode === null || (value.provider === "supabase" ? scopeMode === "account" || scopeMode === "legacy_project" : value.provider === "github" ? scopeMode === "account" : scopeMode === "workspace");
   if (!validScope) {
     ctx.addIssue({
       code: external_exports.ZodIssueCode.custom,
@@ -7198,6 +7275,18 @@ var localOfflineGrantSchema = external_exports.object({
   }).strict()
 }).strict();
 
+// ../../../shared/src/validators/agent-issue-creation.ts
+var agentIssueCreationRequestStatusSchema = external_exports.enum(AGENT_ISSUE_CREATION_REQUEST_STATUSES);
+var createAgentIssueCreationRequestSchema = external_exports.object({
+  agentId: external_exports.string().uuid(),
+  instruction: external_exports.string().trim().min(1).max(2e4),
+  projectId: external_exports.string().uuid().optional().nullable(),
+  goalId: external_exports.string().uuid().optional().nullable(),
+  parentId: external_exports.string().uuid().optional().nullable(),
+  contextSnapshot: external_exports.record(external_exports.unknown()).optional().nullable(),
+  idempotencyKey: external_exports.string().trim().min(1).max(255)
+});
+
 // ../../../shared/src/validators/instance.ts
 var DEFAULT_INSTANCE_BROWSER_SETTINGS = {
   enabled: true,
@@ -7216,6 +7305,7 @@ var instanceGeneralSettingsSchema = external_exports.object({
   censorUsernameInLogs: external_exports.boolean().default(false),
   showDeveloperDiagnostics: external_exports.boolean().default(false),
   experimentalSitesEnabled: external_exports.boolean().default(false),
+  experimentalGoalsEnabled: external_exports.boolean().default(false),
   locale: instanceLocaleSchema.default("en"),
   productAnalyticsMode: external_exports.enum(["off", "anonymous", "account_linked"]).default("off"),
   productAnalyticsConsentEpoch: external_exports.number().int().min(1).default(1)
@@ -8531,15 +8621,194 @@ var restoreWorkspaceBackupSchema = external_exports.object({
 }).strict();
 
 // ../../../shared/src/validators/goal.ts
+var jsonRecord = external_exports.record(external_exports.string(), external_exports.unknown());
+var evidenceRefSchema = external_exports.string().trim().min(1).regex(
+  /^[a-z][a-z0-9+.-]*:[^\s]+$/i,
+  "Evidence references must use a URI-like scheme"
+);
+var sha256HexSchema = external_exports.string().regex(/^[a-f0-9]{64}$/, "Expected a SHA-256 hex digest");
+var criterionSchema = external_exports.object({
+  id: external_exports.string().trim().min(1),
+  label: external_exports.string().trim().min(1),
+  evaluator: external_exports.enum(GOAL_EVALUATOR_KINDS),
+  evidenceRequirements: external_exports.array(evidenceRefSchema).optional()
+});
+var continuationSchema = external_exports.object({
+  kind: external_exports.enum(GOAL_CONTINUATION_KINDS),
+  summary: external_exports.string().trim().min(1),
+  wakeCondition: external_exports.string().trim().min(1).optional().nullable()
+});
+var planPayloadSchema = external_exports.object({
+  summary: external_exports.string().trim().min(1),
+  hypotheses: external_exports.array(external_exports.unknown()).optional().default([]),
+  selectedPaths: external_exports.array(external_exports.unknown()).optional().default([]),
+  rejectedPaths: external_exports.array(external_exports.unknown()).optional().default([]),
+  sequencing: external_exports.array(external_exports.unknown()).optional().default([]),
+  budgetAllocations: jsonRecord.optional().default({}),
+  invalidationConditions: external_exports.array(external_exports.unknown()).optional().default([])
+});
 var createGoalSchema = external_exports.object({
-  title: external_exports.string().min(1),
+  title: external_exports.string().trim().min(1),
   description: external_exports.string().optional().nullable(),
-  level: external_exports.enum(GOAL_LEVELS).optional().default("task"),
-  status: external_exports.enum(GOAL_STATUSES).optional().default("planned"),
+  alignmentQuestion: external_exports.string().trim().min(1).optional().nullable(),
+  /** Accepted for legacy clients but intentionally ignored by the canonical create command. */
+  level: external_exports.string().optional(),
+  status: external_exports.string().optional(),
   parentId: external_exports.string().uuid().optional().nullable(),
   ownerAgentId: external_exports.string().uuid().optional().nullable()
 });
-var updateGoalSchema = createGoalSchema.partial();
+var updateGoalSchema = external_exports.object({
+  title: external_exports.string().trim().min(1).optional(),
+  description: external_exports.string().optional().nullable(),
+  alignmentQuestion: external_exports.string().trim().min(1).optional().nullable()
+}).strict();
+var activateGoalSchema = external_exports.object({
+  confirmed: external_exports.literal(true),
+  ownerAgentId: external_exports.string().uuid(),
+  outcomeStatement: external_exports.string().trim().min(1),
+  objectiveMode: external_exports.enum(GOAL_OBJECTIVE_MODES),
+  criteria: external_exports.array(criterionSchema).min(1),
+  autonomyEnvelope: jsonRecord.optional().default({}),
+  humanAuthorities: jsonRecord.optional().default({}),
+  evaluationPolicy: jsonRecord.optional().default({}),
+  actionDeadline: external_exports.coerce.date().optional().nullable(),
+  evaluationDeadline: external_exports.coerce.date().optional().nullable(),
+  initialContinuation: continuationSchema,
+  initialPlan: planPayloadSchema
+}).superRefine((value, ctx) => {
+  if (value.evaluationDeadline && value.actionDeadline && value.evaluationDeadline < value.actionDeadline) {
+    ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["evaluationDeadline"], message: "Evaluation deadline must not precede action deadline" });
+  }
+  const criterionIds = /* @__PURE__ */ new Set();
+  for (const [index, criterion] of value.criteria.entries()) {
+    if (criterionIds.has(criterion.id)) {
+      ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["criteria", index, "id"], message: "Criterion IDs must be unique" });
+    }
+    criterionIds.add(criterion.id);
+  }
+});
+var goalStartPacketSchema = external_exports.object({
+  version: external_exports.literal(1),
+  title: external_exports.string().trim().min(1),
+  description: external_exports.string().nullable(),
+  ownerAgentId: external_exports.string().uuid(),
+  activation: activateGoalSchema
+}).strict().superRefine((value, ctx) => {
+  if (value.ownerAgentId !== value.activation.ownerAgentId) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["activation", "ownerAgentId"],
+      message: "Activation owner must match the packet owner"
+    });
+  }
+});
+var previewGoalStartSchema = external_exports.object({
+  title: external_exports.string().trim().min(1),
+  context: external_exports.string().nullable(),
+  ownerAgentId: external_exports.string().uuid().nullable(),
+  targetTime: external_exports.coerce.date().nullable()
+}).strict();
+var startGoalSchema = external_exports.object({
+  requestKey: external_exports.string().trim().min(1),
+  packetHash: sha256HexSchema,
+  packet: goalStartPacketSchema,
+  draftGoalId: external_exports.string().uuid().optional()
+}).strict();
+var createGoalActivitySchema = external_exports.object({
+  summary: external_exports.string().trim().min(1),
+  activityKind: external_exports.enum(GOAL_ACTIVITY_KINDS).optional().nullable(),
+  commitmentRef: external_exports.string().trim().min(1).optional().nullable(),
+  runRef: external_exports.string().uuid().optional().nullable(),
+  evidenceRefs: external_exports.array(evidenceRefSchema).optional().default([]),
+  idempotencyKey: external_exports.string().trim().min(1).optional().nullable(),
+  occurredAt: external_exports.coerce.date().optional()
+}).strict().superRefine((value, ctx) => {
+  if (value.activityKind === "closeout" && !value.runRef) {
+    ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["runRef"], message: "Closeout Activity requires a Run reference" });
+  }
+});
+var assignGoalOwnerSchema = external_exports.object({
+  agentId: external_exports.string().uuid(),
+  authorityRef: external_exports.string().trim().min(1).optional().nullable()
+}).strict();
+var goalFeedbackAttachmentSchema = external_exports.object({
+  name: external_exports.string().trim().min(1),
+  uri: evidenceRefSchema,
+  mimeType: external_exports.string().trim().min(1).optional(),
+  size: external_exports.number().int().nonnegative().optional()
+}).strict();
+var createGoalFeedbackSchema = external_exports.object({
+  body: external_exports.string().trim().min(1),
+  attachments: external_exports.array(goalFeedbackAttachmentSchema).optional().default([]),
+  feedbackKind: external_exports.enum(GOAL_FEEDBACK_KINDS).optional().default("ordinary"),
+  idempotencyKey: external_exports.string().trim().min(1)
+}).strict();
+var goalContractPatchSchema = external_exports.object({
+  outcomeStatement: external_exports.string().trim().min(1).optional(),
+  objectiveMode: external_exports.enum(GOAL_OBJECTIVE_MODES).optional(),
+  criteria: external_exports.array(criterionSchema).min(1).optional(),
+  autonomyEnvelope: jsonRecord.optional(),
+  humanAuthorities: jsonRecord.optional(),
+  evaluationPolicy: jsonRecord.optional(),
+  actionDeadline: external_exports.coerce.date().nullable().optional(),
+  evaluationDeadline: external_exports.coerce.date().nullable().optional()
+}).strict().superRefine((value, ctx) => {
+  if (Object.keys(value).length === 0) {
+    ctx.addIssue({ code: external_exports.ZodIssueCode.custom, message: "At least one Contract field must change" });
+  }
+  if (value.evaluationDeadline && value.actionDeadline && value.evaluationDeadline < value.actionDeadline) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["evaluationDeadline"],
+      message: "Evaluation deadline must not precede action deadline"
+    });
+  }
+});
+var createGoalChangeProposalSchema = external_exports.object({
+  expectedContractRevision: external_exports.number().int().positive(),
+  afterContract: goalContractPatchSchema,
+  rationale: external_exports.string().trim().min(1),
+  evidenceRefs: external_exports.array(evidenceRefSchema).optional().default([]),
+  approvalId: external_exports.string().uuid().optional().nullable(),
+  idempotencyKey: external_exports.string().trim().min(1)
+}).strict();
+var decideGoalChangeProposalSchema = external_exports.object({
+  decision: external_exports.enum(["approve", "reject"]),
+  note: external_exports.string().trim().min(1).optional().nullable()
+}).strict();
+var goalEvaluationCandidateFields = {
+  criteria: external_exports.array(external_exports.object({
+    id: external_exports.string().min(1),
+    status: external_exports.enum(["met", "unmet", "breached", "unknown"])
+  })).optional().default([]),
+  resultValue: external_exports.union([external_exports.string().trim().min(1), external_exports.number().finite(), external_exports.boolean()]).optional(),
+  decision: external_exports.string().trim().min(1).optional(),
+  resultPayload: jsonRecord.optional().default({})
+};
+var goalEvaluationCandidateSchema = external_exports.object({
+  evidenceRefs: external_exports.array(evidenceRefSchema).min(1),
+  ...goalEvaluationCandidateFields
+}).strict();
+var createGoalResultProposalSchema = external_exports.object({
+  evidenceRefs: external_exports.array(evidenceRefSchema),
+  ...goalEvaluationCandidateFields,
+  contractRevision: external_exports.number().int().positive(),
+  riskSummary: external_exports.string().trim().min(1),
+  idempotencyKey: external_exports.string().trim().min(1)
+}).strict();
+var acceptGoalResultProposalSchema = external_exports.object({
+  idempotencyKey: external_exports.string().trim().min(1)
+}).strict();
+var rejectGoalResultProposalSchema = external_exports.object({
+  idempotencyKey: external_exports.string().trim().min(1),
+  feedback: external_exports.string().trim().min(1)
+}).strict();
+var evaluateGoalSchema = goalEvaluationCandidateSchema.extend({
+  resultProposalId: external_exports.string().uuid().optional()
+});
+var setGoalFocusSchema = external_exports.object({
+  focus: external_exports.boolean()
+}).strict();
 
 // ../../../shared/src/validators/approval.ts
 var createApprovalSchema = external_exports.object({