@runeya/runeya 2.0.140 → 2.0.142

package/{chunk-G4TOLDZB.js → chunk-P73PTVII.js}

@@ -1,6 +1,6 @@
 import {
   settingsManager
-} from "./chunk-6HSZPK2W.js";
+} from "./chunk-UR3HL373.js";
 import {
   COMPANION_SIGNATURE,
   activeSessionRegistry,
@@ -31,10 +31,11 @@ import {
   resolveConversationCwd,
   resolveWorkspaceCwd,
   runCompanionNow,
+  signJwt,
   stopCompanion,
   syncConversationFromClaudeTranscript,
   verifyJwt
-} from "./chunk-QWX6R6AW.js";
+} from "./chunk-NSS47H26.js";
 import {
   StoreDiskCoordinator,
   agentManager,
@@ -53,7 +54,7 @@ import {
   recordLocalRemoval,
   refsOfProjectId,
   serviceStore
-} from "./chunk-SYCUQDA4.js";
+} from "./chunk-GXE5TLLJ.js";
 import {
   atomicWriteJsonSecure,
   atomicWriteSecure,
@@ -64,7 +65,7 @@ import {
   renameWithRetry,
   resolveConversationRunDir,
   wasRead
-} from "./chunk-GOMF7NWS.js";
+} from "./chunk-7L6AQUBR.js";
 import {
   AGENT_STOP_FETCH_TIMEOUT,
   ApiKeysFileSchema,
@@ -105,7 +106,7 @@ import {
   machineRoot,
   orgVaultRoot,
   vaultIdOfRoot
-} from "./chunk-EV3TBM7E.js";
+} from "./chunk-IXO5KIO5.js";
 import {
   isCliAvailable,
   resolveCliInvocation
@@ -2355,16 +2356,19 @@ async function runCapability(cap, baseUrl, params, authToken, fetchImpl = fetch)
 
 // ../../packages/ai-capabilities/src/project-anchor.ts
 function applyProjectAnchor(cap, params, anchor) {
-  if (!anchor.projectId) return params;
   const accepts = (name) => cap.params.some((p) => p.name === name);
-  if (!accepts("projectId") || params["projectId"]) return params;
-  return {
-    ...params,
-    projectId: anchor.projectId,
-    // L'organisation n'accompagne le projet que si la capability la comprend :
-    // ailleurs, ce serait un champ de trop, refusé par le schéma de la route.
-    ...anchor.orgId && accepts("orgId") && !params["orgId"] ? { orgId: anchor.orgId } : {}
-  };
+  const anchored = { ...params };
+  const mayAnchorOrg = !params["projectId"] || params["projectId"] === anchor.projectId;
+  if (anchor.projectId && accepts("projectId") && !anchored["projectId"]) {
+    anchored["projectId"] = anchor.projectId;
+  }
+  if (mayAnchorOrg && anchor.orgId && !anchored["orgId"] && accepts("orgId")) {
+    anchored["orgId"] = anchor.orgId;
+  }
+  if (mayAnchorOrg && anchor.orgId && !anchored["organizationId"] && accepts("organizationId")) {
+    anchored["organizationId"] = anchor.orgId;
+  }
+  return anchored;
 }
 
 // ../server/src/services/llms-txt-generator.ts
@@ -4253,12 +4257,12 @@ function getCloudApiUrl() {
   return (env.CLOUD_URL ?? DEFAULT_CLOUD_API_URL).replace(/\/+$/, "");
 }
 async function orgCloudUrl(orgId) {
-  const { readOrgClouds } = await import("./vault-resolver-B5P2OUI5.js");
+  const { readOrgClouds } = await import("./vault-resolver-VK6W5J6W.js");
   const clouds = await readOrgClouds();
   return (clouds[orgId] ?? getCloudApiUrl()).replace(/\/+$/, "");
 }
 async function accountForOrg(orgId) {
-  const { readOrgAccounts, readOrgClouds } = await import("./vault-resolver-B5P2OUI5.js");
+  const { readOrgAccounts, readOrgClouds } = await import("./vault-resolver-VK6W5J6W.js");
   const [stampedAccounts, stampedClouds, accounts] = await Promise.all([
     readOrgAccounts(),
     readOrgClouds(),
@@ -4475,7 +4479,7 @@ var cloudAuthRouter = router({
    * du projet ouvert, sous quel compte il se synchronise.
    */
   accounts: protectedProcedure.query(async () => {
-    const { readOrgAccounts } = await import("./vault-resolver-B5P2OUI5.js");
+    const { readOrgAccounts } = await import("./vault-resolver-VK6W5J6W.js");
     return { accounts: await cloudSessionStore.list(), orgAccounts: await readOrgAccounts() };
   }),
   /** The cloud session (user + org), fetched with the stored token. */
@@ -4493,7 +4497,7 @@ var cloudAuthRouter = router({
       const identity = await readCloudIdentity(account.cloudUrl, await cloudSessionStore.getToken(accountId) ?? "");
       if (identity) {
         const settled = await cloudSessionStore.describe(accountId, identity);
-        const { renameOrgAccount } = await import("./vault-resolver-B5P2OUI5.js");
+        const { renameOrgAccount } = await import("./vault-resolver-VK6W5J6W.js");
         await renameOrgAccount(accountId, settled);
       }
     }
@@ -5059,7 +5063,14 @@ function formatSize(bytes) {
   if (bytes < 1024 * 1024) return `${Math.round(bytes / 1024)} Ko`;
   return `${(bytes / (1024 * 1024)).toFixed(1).replace(".", ",")} Mo`;
 }
-function generateKanbanSystemPrompt(board, cardId, history, links) {
+function appendMcpScope(lines, boardId, scope, cardId) {
+  if (scope?.projectId) lines.push(`- **projectId** : \`${scope.projectId}\``);
+  if (scope?.orgId) lines.push(`- **organizationId** : \`${scope.orgId}\``);
+  lines.push(`- **boardId** (tableau concern\xE9, pour les outils qui l\u2019acceptent) : \`${boardId}\``);
+  if (cardId) lines.push(`- **cardId** (carte actuelle) : \`${cardId}\``);
+  lines.push("");
+}
+function generateKanbanSystemPrompt(board, cardId, history, links, scope) {
   let currentColTitle = "";
   let card = null;
   for (const col of board.columns) {
@@ -5151,8 +5162,8 @@ function generateKanbanSystemPrompt(board, cardId, history, links) {
   }
   lines.push("### Outils Kanban disponibles");
   lines.push("");
-  lines.push(`- **boardId** (\xE0 passer dans tous les outils) : \`${board.id}\``);
-  if (card) lines.push(`- **cardId** (carte actuelle) : \`${card.id}\``);
+  appendMcpScope(lines, board.id, scope, cardId);
+  lines.push("R\xE9utilise directement les identifiants ci-dessus dans les outils Kanban qui les acceptent. Pour relire cette carte, appelle `kanban_get_card` avec son `boardId` et son `cardId` ; pour `kanban_list_boards` et `kanban_search_cards`, le param\xE8tre d\u2019organisation s\u2019appelle `organizationId`.");
   lines.push("");
   lines.push("Tu disposes des outils suivants pour interagir avec le board :");
   lines.push("- `kanban_move_card(boardId, cardId, targetColumn)` \u2014 D\xE9placer la carte vers une autre colonne");
@@ -5182,18 +5193,21 @@ function generateKanbanSystemPrompt(board, cardId, history, links) {
   lines.push("");
   return lines.join("\n");
 }
-async function buildKanbanCardPrompt(board, cardId) {
+async function buildKanbanCardPrompt(board, cardId, scope) {
   const [history, links] = await Promise.all([
     kanbanStore.cardHistory(board.id, cardId),
     kanbanStore.cardLinks(board.id).then((r) => r.links)
   ]);
-  return generateKanbanSystemPrompt(board, cardId, history, links);
+  return generateKanbanSystemPrompt(board, cardId, history, links, scope);
 }
-function generateKanbanPopulatePrompt(board) {
+function generateKanbanPopulatePrompt(board, scope) {
   const lines = [];
   lines.push("## Kanban Board \u2014 Mode Populate");
   lines.push("");
   lines.push(`Tu es en mode **populate** sur le tableau Kanban **"${board.name}"**.`);
+  lines.push("");
+  lines.push("### Identifiants MCP \xE0 r\xE9utiliser");
+  appendMcpScope(lines, board.id, scope);
   lines.push(`Tu es un outil de gestion de projet. Quand l'utilisateur dit "cr\xE9er une card", "ajouter une t\xE2che", "cr\xE9er une carte", ou toute demande similaire, il parle EXCLUSIVEMENT d'une carte Kanban \xE0 ajouter au tableau \u2014 PAS d'un composant UI, PAS de code HTML ou CSS, PAS d'un composant React/Vue/Angular.`);
   lines.push("");
   lines.push("Ton UNIQUE r\xF4le est de cr\xE9er des cartes Kanban pertinentes en r\xE9ponse \xE0 la demande de l'utilisateur.");
@@ -5224,8 +5238,6 @@ function generateKanbanPopulatePrompt(board) {
   lines.push("");
   lines.push("### Outil disponible");
   lines.push("");
-  lines.push(`- **boardId** (\xE0 passer dans tous les outils) : \`${board.id}\``);
-  lines.push("");
   lines.push("Pour chaque carte \xE0 cr\xE9er, appelle l'outil `kanban_add_card(boardId, column, title, content)` :");
   lines.push("- `column` : nom exact de la colonne cible");
   lines.push("- `title` : titre concis de la carte");
@@ -5415,7 +5427,7 @@ function tailTranscript(opts) {
 
 // ../server/src/services/ai-runners/claude-pty-runner.ts
 async function getAgentManager() {
-  const { agentManager: agentManager2 } = await import("./agent-manager-RZI65MSV.js");
+  const { agentManager: agentManager2 } = await import("./agent-manager-M4NA5YFD.js");
   return agentManager2;
 }
 function buildPtyArgs(params, sessionId, opts) {
@@ -6109,7 +6121,7 @@ async function shutdownCodexAppServer() {
   }
 }
 async function getAgentManager2() {
-  const { agentManager: agentManager2 } = await import("./agent-manager-RZI65MSV.js");
+  const { agentManager: agentManager2 } = await import("./agent-manager-M4NA5YFD.js");
   return agentManager2;
 }
 function parseRuneyaCurlCommand(command) {
@@ -6178,6 +6190,7 @@ var CodexRunner = class {
   // ── Run via agent (app-server JSON-RPC via agent tRPC routes) ───────────
   async runViaAgent(params) {
     const { agentId, prompt, systemContext, signal, model, effort, isResume, images, skipTokenInstructions, apiBaseUrl, apiToken, injectedEnv } = params;
+    const fullDeveloperInstructions = [systemContext, ...skipTokenInstructions ? [] : [TOKEN_INSTRUCTIONS]].filter(Boolean).join("\n\n");
     const agentMgr = await getAgentManager2();
     if (isResume && params.sessionId && !this.lastThreadId) {
       this.lastThreadId = params.sessionId;
@@ -6193,7 +6206,10 @@ var CodexRunner = class {
     if (isResume && this.lastThreadId) {
       const res = await agentMgr.agentMutation(agentId, "ai.codexRequest", {
         method: "thread/resume",
-        params: { threadId: this.lastThreadId },
+        params: {
+          threadId: this.lastThreadId,
+          developerInstructions: fullDeveloperInstructions
+        },
         env: codexEnv
       });
       threadId = res.result.thread.id;
@@ -6204,7 +6220,8 @@ var CodexRunner = class {
           model: model || void 0,
           cwd: params.cwd ?? process.cwd(),
           approvalPolicy: "never",
-          sandbox: "danger-full-access"
+          sandbox: "danger-full-access",
+          developerInstructions: fullDeveloperInstructions
         },
         env: codexEnv
       });
@@ -6212,20 +6229,13 @@ var CodexRunner = class {
       this.lastThreadId = threadId;
       params.onThreadId?.(threadId);
     }
-    const systemParts = [systemContext, ...skipTokenInstructions ? [] : [TOKEN_INSTRUCTIONS]].filter(Boolean);
-    const fullSystemContext = systemParts.join("\n\n");
-    const fullPrompt = isResume && this.lastThreadId ? prompt : `${fullSystemContext}
-
----
-
-${prompt}`;
     const input = [];
     if (images && images.length > 0) {
       for (const img of images) {
         input.push({ type: "image", url: `data:${img.mimeType};base64,${img.base64}` });
       }
     }
-    input.push({ type: "text", text: fullPrompt });
+    input.push({ type: "text", text: prompt });
     const turnRef = { id: null };
     return new Promise((resolve2, reject) => {
       let settled = false;
@@ -6380,6 +6390,7 @@ ${prompt}`;
   // ── Run locally via app-server client ────────────────────────────────────
   async runLocal(params) {
     const { prompt, systemContext, signal, model, effort, isResume, images, skipTokenInstructions, apiBaseUrl, apiToken } = params;
+    const fullDeveloperInstructions = [systemContext, ...skipTokenInstructions ? [] : [TOKEN_INSTRUCTIONS]].filter(Boolean).join("\n\n");
     if (isResume && params.sessionId && !this.lastThreadId) {
       this.lastThreadId = params.sessionId;
     }
@@ -6391,33 +6402,30 @@ ${prompt}`;
     });
     let threadId;
     if (isResume && this.lastThreadId) {
-      const res = await client.sendRequest("thread/resume", { threadId: this.lastThreadId });
+      const res = await client.sendRequest("thread/resume", {
+        threadId: this.lastThreadId,
+        developerInstructions: fullDeveloperInstructions
+      });
       threadId = res.thread.id;
     } else {
       const res = await client.sendRequest("thread/start", {
         model: model || void 0,
         cwd: params.cwd ?? process.cwd(),
         approvalPolicy: "never",
-        sandbox: "danger-full-access"
+        sandbox: "danger-full-access",
+        developerInstructions: fullDeveloperInstructions
       });
       threadId = res.thread.id;
       this.lastThreadId = threadId;
       params.onThreadId?.(threadId);
     }
-    const systemParts = [systemContext, ...skipTokenInstructions ? [] : [TOKEN_INSTRUCTIONS]].filter(Boolean);
-    const fullSystemContext = systemParts.join("\n\n");
-    const fullPrompt = isResume && this.lastThreadId ? prompt : `${fullSystemContext}
-
----
-
-${prompt}`;
     const input = [];
     if (images && images.length > 0) {
       for (const img of images) {
         input.push({ type: "image", url: `data:${img.mimeType};base64,${img.base64}` });
       }
     }
-    input.push({ type: "text", text: fullPrompt });
+    input.push({ type: "text", text: prompt });
     const turnRes = await client.sendRequest("turn/start", {
       threadId,
       input,
@@ -6547,6 +6555,10 @@ ${prompt}`;
 };
 
 // ../server/src/trpc/routers/chat.ts
+function toConversationSummary(conv) {
+  const { messages, ...rest } = conv;
+  return { ...rest, messages: [], messagesOmitted: true, messageCount: messages.length };
+}
 var MessageSchema = z9.object({
   role: z9.enum(["user", "assistant"]),
   content: z9.string().max(1e5)
@@ -6791,11 +6803,16 @@ async function* drainSession(session, signal, isReconnect) {
     if (signal?.aborted) return;
   }
 }
-async function kanbanContextFor(conv) {
+async function kanbanContextFor(conv, scope) {
   if (!conv?.kanbanBoardId) return "";
   const kanbanBoard = await kanbanStore.get(conv.kanbanBoardId);
   if (!kanbanBoard) return "";
-  return "\n\n" + (conv.kanbanCardId ? await buildKanbanCardPrompt(kanbanBoard, conv.kanbanCardId) : generateKanbanPopulatePrompt(kanbanBoard));
+  return "\n\n" + (conv.kanbanCardId ? await buildKanbanCardPrompt(kanbanBoard, conv.kanbanCardId, scope) : generateKanbanPopulatePrompt(kanbanBoard, scope));
+}
+async function cliToken(ctx) {
+  const bearer = ctx.authorization?.startsWith("Bearer ") ? ctx.authorization.slice(7) : void 0;
+  if (!bearer || ctx.callerType !== "app") return bearer;
+  return signJwt();
 }
 async function buildCliSystemContext(conv, jwt) {
   const allServices = await serviceStore.list();
@@ -6805,7 +6822,10 @@ async function buildCliSystemContext(conv, jwt) {
   const resolvedServices = await Promise.all(ownServices.map((s) => resolveServiceVariables(s)));
   let systemContext = generateAdminLlmsTxt(resolvedServices, jwt, project);
   if (!conv?.isCompanion) systemContext += "\n\n" + companionSystemNote();
-  systemContext += await kanbanContextFor(conv);
+  systemContext += await kanbanContextFor(conv, {
+    ...ref?.id ? { projectId: ref.id } : {},
+    ...ref?.orgId ? { orgId: ref.orgId } : {}
+  });
   return systemContext;
 }
 async function resolveInjectedEnv(environmentId) {
@@ -6986,7 +7006,7 @@ var chatRouter = router({
       orgId: Id128Schema.nullable().optional()
     }).optional()).subscription(async function* ({ input }) {
       const belongs = input?.projectId ? await conversationStore.matcherForProject({ id: input.projectId, orgId: input.orgId }) : () => true;
-      const initial = (await conversationStore.list()).filter(belongs);
+      const initial = (await conversationStore.list()).filter(belongs).map(toConversationSummary);
       yield { type: "initial", conversations: initial };
       const queue = [];
       let resolve2 = null;
@@ -7005,7 +7025,11 @@ var chatRouter = router({
           if (queue.length > 0) {
             const event = queue.shift();
             if (event.type === "reloaded") {
-              yield { type: "initial", conversations: (await conversationStore.list()).filter(belongs) };
+              yield { type: "initial", conversations: (await conversationStore.list()).filter(belongs).map(toConversationSummary) };
+              continue;
+            }
+            if (event.type === "updated" && !event.messagesChanged) {
+              yield { type: "updated", conversation: toConversationSummary(event.conversation) };
               continue;
             }
             yield event;
@@ -7034,8 +7058,8 @@ var chatRouter = router({
       orgId: Id128Schema.nullable().optional()
     }).optional()).query(async ({ input }) => {
       const projectId = input?.projectId;
-      if (!projectId) return conversationStore.list();
-      return conversationStore.listForProject({ id: projectId, orgId: input?.orgId });
+      const convs = projectId ? await conversationStore.listForProject({ id: projectId, orgId: input?.orgId }) : await conversationStore.list();
+      return convs.map(toConversationSummary);
     }),
     get: protectedProcedure.input(z9.object({ id: Id128Schema })).query(async ({ input }) => {
       const conv = await conversationStore.get(input.id);
@@ -7433,7 +7457,7 @@ Return ONLY the improved text, no explanation, no preamble.`;
     const cliPrompt = input.contextNote ? `${input.contextNote}
 
 ${input.prompt}` : input.prompt;
-    const jwt = ctx.authorization?.startsWith("Bearer ") ? ctx.authorization.slice(7) : void 0;
+    const jwt = await cliToken(ctx);
     const systemContext = await buildCliSystemContext(conv, jwt);
     const mcpRef = await conversationStore.projectRefOf(conv);
     const mcpConfig = runeyaMcpConfig({
@@ -7540,7 +7564,7 @@ ${imagePaths.map((p) => `Image: ${p}`).join("\n")}` : cliPrompt;
     const cliPrompt = input.contextNote ? `${input.contextNote}
 
 ${input.prompt}` : input.prompt;
-    const jwt = ctx.authorization?.startsWith("Bearer ") ? ctx.authorization.slice(7) : void 0;
+    const jwt = await cliToken(ctx);
     const systemContext = await buildCliSystemContext(conv, jwt);
     const resolvedImages = input.imageIds && input.imageIds.length > 0 ? await resolveImagesToBase64(input.imageIds.map((id) => ({ imageId: id, mimeType: "" })), input.conversationId) : [];
     const convId = input.conversationId;
@@ -7632,7 +7656,10 @@ ${input.prompt}` : input.prompt;
     const authToken = ctx.authorization?.replace(/^Bearer\s+/i, "") ?? "";
     let system = await buildSystemPrompt(apiKey);
     system += "\n\n" + TOOL_SAFETY_INSTRUCTION;
-    system += await kanbanContextFor(conv);
+    system += await kanbanContextFor(conv, {
+      ...convRef?.id ? { projectId: convRef.id } : {},
+      ...convRef?.orgId ? { orgId: convRef.orgId } : {}
+    });
     const resolvedImages = input.imageIds && input.imageIds.length > 0 ? await resolveImagesToBase64(input.imageIds.map((id) => ({ imageId: id, mimeType: "" })), input.conversationId) : [];
     let session;
     try {
@@ -7783,12 +7810,16 @@ ${input.prompt}` : input.prompt;
         args.push("--dangerously-skip-permissions");
       }
       const ptyRef = (ptyConv ? await conversationStore.projectRefOf(ptyConv) : null) ?? (input.projectId ? { id: input.projectId, orgId: input.orgId ?? null } : null);
-      const jwt = ctx.authorization?.startsWith("Bearer ") ? ctx.authorization.slice(7) : void 0;
-      if (!isCodex && ptyConv) {
+      const jwt = await cliToken(ctx);
+      if (ptyConv) {
         try {
           const systemContext = await buildCliSystemContext(ptyConv, jwt);
           if (systemContext.trim().length > 0) {
-            args.push("--append-system-prompt", systemContext);
+            if (isCodex) {
+              args.unshift("-c", `developer_instructions=${JSON.stringify(systemContext)}`);
+            } else {
+              args.push("--append-system-prompt", systemContext);
+            }
           }
         } catch (err) {
           console.warn("[chat.pty.start] buildCliSystemContext failed:", err.message);
@@ -7826,7 +7857,7 @@ ${input.prompt}` : input.prompt;
         }
       );
       lap("agent ai.spawnPty");
-      const contexts = input.attachedContexts ?? [];
+      const contexts = [...input.attachedContexts ?? []];
       if (contexts.length > 0) {
         const body = contexts.map((c) => `### ${c.label}
 ${c.text}`).join("\n\n");
@@ -8178,9 +8209,10 @@ export {
   ClaudeCodeRunner,
   shutdownCodexAppServer,
   CodexRunner,
+  cliToken,
   startClaudeCodeSession,
   startCodexSession,
   startCliSession,
   chatRouter
 };
-//# sourceMappingURL=chunk-G4TOLDZB.js.map
+//# sourceMappingURL=chunk-P73PTVII.js.map