@stratusagent/channels 0.11.6 → 0.11.7

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import type { AgentDefinition, ApprovalAnswer, EventBus, ImageAttachment, JsonObject, Session } from '@stratusagent/core';
+import type { AgentDefinition, ApprovalAnswer, CredentialScope, EventBus, ImageAttachment, JsonObject, Session, TrustLevel } from '@stratusagent/core';
 /**
  * One message arriving from a chat platform, normalized. Adapters translate
  * their platform's event shape into this before anything else happens.
@@ -33,15 +33,31 @@ export interface OutboundMessageRef {
     ts: string;
 }
 /**
- * The write side of one conversation. Streaming replies are the
- * placeholder-then-edit pattern: post once, edit as fragments arrive,
- * finalize with the full text.
+ * The write side of one conversation. `post` is the whole of what every
+ * caller needs: the gateway's `message.send` and schedule delivery only ever
+ * post. Everything else is a capability a platform may not have, so it is
+ * optional, and a caller that wants it checks for the method rather than
+ * assuming it — the way `ChannelAdapter.resolveOutbound` works.
+ *
+ * Streaming by placeholder-then-edit (post once, edit as fragments arrive,
+ * finalize with the full text) is how a platform with editable messages
+ * shows a reply forming. A text-message channel has no such thing — an
+ * iMessage edit is visibly marked and capped — so it posts the finished
+ * reply instead.
  */
 export interface OutboundConnection {
     post(text: string): Promise<OutboundMessageRef>;
-    edit(ref: OutboundMessageRef, text: string): Promise<void>;
-    /** Uploads a local file into the conversation (tool outputs, screenshots). */
-    upload(filePath: string, title?: string): Promise<void>;
+    /**
+     * Rewrites a message this connection posted. A channel without it gives
+     * up streaming a reply in place: it posts the final text once.
+     */
+    edit?(ref: OutboundMessageRef, text: string): Promise<void>;
+    /**
+     * Uploads a local file into the conversation (tool outputs, screenshots).
+     * A channel without it cannot deliver files over an addressable
+     * destination; a caller says so instead of dropping the file silently.
+     */
+    upload?(filePath: string, title?: string): Promise<void>;
     /**
      * Optional typing affordance. Platforms without a real bot typing API
      * (Slack among them) no-op here and rely on the placeholder-edit pattern
@@ -151,6 +167,33 @@ export interface GatewayLike {
          * events from another caller's on the same session — see `activeTurnId`.
          */
         turnId?: string;
+        /**
+         * The platform's own id for the message, unique within the session, so
+         * a redelivery never starts a second turn — across a restart too, which
+         * in-memory dedupe cannot survive. A repeat resolves with the original
+         * turn: the live one, the finished session, or one the gateway continued
+         * after a crash. A finished session may have moved on since, so the
+         * reply to post is `turnReplyFor(session, key)` from
+         * `@stratusagent/core`, never the latest one. See `DispatchInput.idempotencyKey` in
+         * `@stratusagent/gateway`.
+         *
+         * A host without it ignores the field, and the adapter's own dedupe is
+         * all there is.
+         */
+        idempotencyKey?: string;
+        /**
+         * Called before the dispatch resolves when it repeats a turn. `live`:
+         * another dispatch of the same key in this process is still waiting on
+         * it and posts its outcome, so this caller takes down anything of its
+         * own and posts nothing. `finished`: nothing ran and no event will
+         * come, and the outcome may never have been posted, so this caller
+         * posts it from the session — `turnReplyFor`, `turnFilesFor`,
+         * `turnFailureFor` in `@stratusagent/core`. Not called for a repeat
+         * that continues a turn a crash left unfinished, which this caller
+         * renders as its own. See `DispatchInput.onRepeat` in
+         * `@stratusagent/gateway`.
+         */
+        onRepeat?: (repeat: 'live' | 'finished') => void;
     }): Promise<Session>;
     readonly bus: EventBus;
     agents(): AgentDefinition[];
@@ -174,6 +217,17 @@ export interface GatewayLike {
      * whose process is gone — nothing else.
      */
     sessionRouting?(sessionId: string): Promise<SessionRouting | undefined>;
+    /**
+     * Whether a session already accepted the message an idempotency key names,
+     * as addressed to it — a turn was started for it, finished or not; a turn
+     * nobody asked for (`addressed: false`) does not count. Asked before routing a message
+     * that more than one agent could answer: one an agent already accepted is
+     * that agent's, whoever the routing rule would pick now. Optional: a host
+     * without it leaves the choice to the rule alone, which after a restart can
+     * hand a redelivered message to an agent that has spoken since — and that
+     * agent, holding no key for it, runs it again.
+     */
+    holdsMessage?(sessionId: string, idempotencyKey: string): Promise<boolean>;
     /**
      * A message that reaches a session without running a turn: something
      * said in a conversation the agent is in, to somebody else. The next
@@ -217,6 +271,33 @@ export interface GatewayLike {
          */
         reason?: 'decided' | 'undeliverable';
     }): boolean;
+    /**
+     * Answers a `credential.requested` with the value a person entered.
+     * `ok: false` carries a sentence to show them. `retired` on it means no
+     * answer to this request can ever land (the name was stored since, or
+     * the request is gone), so the adapter should take the form down rather
+     * than leave a button that can only be refused.
+     *
+     * As with approvals, who may answer is the adapter's question: the
+     * approver set is written in the channel's own user ids. The value is
+     * handed over here and nowhere else — an adapter never logs it, posts it,
+     * or passes it to `dispatch`.
+     *
+     * Optional: a host that omits it gives up taking credentials from a
+     * channel, and an adapter says so to whoever tried instead of offering a
+     * form that cannot land.
+     */
+    provideCredential?(input: {
+        requestId: string;
+        value: string;
+        actor?: string;
+    }): Promise<{
+        ok: true;
+    } | {
+        ok: false;
+        message: string;
+        retired?: boolean;
+    }>;
 }
 /**
  * A destination this adapter is being asked to speak to, outside any
@@ -238,6 +319,23 @@ export interface OutboundAddress {
      */
     to: string;
 }
+/**
+ * A credential an agent asked for, handed to the channel its conversation
+ * is in so a person there can be shown a form. Everything the answer needs
+ * stays with the gateway under `requestId`; the channel only has to show
+ * the question and quote the id back through `GatewayLike.provideCredential`.
+ */
+export interface ChannelCredentialRequest {
+    sessionId: string;
+    agentId: string;
+    requestId: string;
+    name: string;
+    scope: CredentialScope;
+    /** The agent's own words for why; show them as the agent's. */
+    reason?: string;
+    /** The session's routing metadata: where the conversation is. */
+    metadata: JsonObject;
+}
 export interface ChannelAdapter {
     name: string;
     start(gateway: GatewayLike): Promise<void>;
@@ -258,6 +356,20 @@ export interface ChannelAdapter {
      * also how a destination is checked without sending anything.
      */
     resolveOutbound?(address: OutboundAddress): Promise<OutboundConnection>;
+    /**
+     * Shows a person in the conversation a form for a credential the agent
+     * asked for. Optional, like `resolveOutbound`: a channel without it
+     * cannot take credentials, and the gateway refuses a request made in its
+     * conversations rather than telling the agent someone was asked.
+     *
+     * Resolves once the form is in front of someone who can answer it, and
+     * MUST reject otherwise (the post failed, nobody here may answer, the
+     * agent has no app connected), with a sentence for the agent: the
+     * gateway drops the request and hands the agent that sentence, because
+     * a request nobody can see would otherwise wait forever while the agent
+     * tells its user the operator was asked.
+     */
+    requestCredential?(request: ChannelCredentialRequest): Promise<void>;
 }
 export interface ChannelSessionKeyParts {
     /** Channel kind, e.g. 'slack'. */
@@ -280,4 +392,49 @@ export interface ChannelSessionKeyParts {
  * roots its own reply-thread conversation) and no thread for DMs.
  */
 export declare const channelSessionKey: (parts: ChannelSessionKeyParts) => string;
+/**
+ * Whether a sender outside the principals list gets a turn at all.
+ * `anyone` admits them, labelled `unknown`; `principals` refuses them
+ * before a turn starts, and an adapter that overhears must not let the
+ * agent overhear them either — the text would be in the transcript, which
+ * is what this mode exists to keep out.
+ */
+export type AdmitPolicy = 'anyone' | 'principals';
+/**
+ * Who a channel treats as the operator, and whether anyone else is let in.
+ * Ids are the channel's own (a Slack user id, a phone number) — never a
+ * Stratus identity, for the same reason `OutboundAddress.to` is not.
+ *
+ * The two fields answer different questions. `principals` is provenance:
+ * an adapter's own admission checks (a DM, a mention) establish nothing
+ * about who is typing, and this list is what makes the `user` label mean
+ * something. `admit` is authorization. Absent `principals` and `[]` both
+ * mean nobody is a principal; an adapter may still tell them apart for
+ * presentation (Slack shows everyone's name when there is no list).
+ *
+ * Which `admit` applies when config gives none is the adapter's call, not
+ * this module's: Slack defaults to `anyone`, because only workspace members
+ * can reach it, while a channel anyone in the world can message should
+ * default to `principals`. Pass the policy with that default already
+ * applied.
+ */
+export interface SenderPolicy {
+    principals?: readonly string[];
+    admit?: AdmitPolicy;
+}
+/** Whether `senderId` is on the policy's principals list. */
+export declare const isPrincipal: (policy: SenderPolicy | undefined, senderId: string) => boolean;
+/**
+ * Whether a message from `senderId` may start a turn. No policy admits:
+ * there is nobody's list to refuse against, which is the answer from
+ * before admission existed.
+ */
+export declare const admitsSender: (policy: SenderPolicy | undefined, senderId: string) => boolean;
+/**
+ * The trust label a turn from `senderId` carries (`SENDER_TRUST_METADATA_KEY`
+ * in `@stratusagent/core`): `user` for a principal, `unknown` for anyone else.
+ * Evaluated per message, never per session: a group conversation keys one
+ * session for everyone in it.
+ */
+export declare const senderTrustFor: (policy: SenderPolicy | undefined, senderId: string) => Extract<TrustLevel, "user" | "unknown">;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,cAAc,EACd,QAAQ,EACR,eAAe,EACf,UAAU,EACV,OAAO,EACR,MAAM,oBAAoB,CAAC;AAE5B;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,YAAY,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,aAAa,EAAE,OAAO,CAAC;IACvB,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,+DAA+D;AAC/D,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,8EAA8E;IAC9E,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD;;;;OAIG;IACH,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED;;;;;GAKG;AACH;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAc;IAC7B,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,QAAQ,EAAE,UAAU,CAAC;IACrB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;;OAQG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,mFAAmF;QACnF,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;QAC3B;;;;;WAKG;QACH,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,QAAQ,CAAC,EAAE,UAAU,CAAC;QACtB,MAAM,CAAC,EAAE,WAAW,CAAC;QACrB;;;WAGG;QACH,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;IACvB,MAAM,IAAI,eAAe,EAAE,CAAC;IAC5B;;;;;;;OAOG;IACH,YAAY,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACrD;;;;;;;;;OASG;IACH,cAAc,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IACxE;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,CAAC,KAAK,EAAE;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,UAAU,CAAC;KACvB,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACjC;;;;;;;;;OASG;IACH,eAAe,CAAC,KAAK,EAAE;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,cAAc,CAAC;QACvB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf;;;;WAIG;QACH,MAAM,CAAC,EAAE,SAAS,GAAG,eAAe,CAAC;KACtC,GAAG,OAAO,CAAC;CACb;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC9B,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB;;;;;;;;;;;;;;OAcG;IACH,eAAe,CAAC,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACzE;AAED,MAAM,WAAW,sBAAsB;IACrC,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,GAAI,OAAO,sBAAsB,KAAG,MAMjE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,cAAc,EACd,eAAe,EACf,QAAQ,EACR,eAAe,EACf,UAAU,EACV,OAAO,EACP,UAAU,EACX,MAAM,oBAAoB,CAAC;AAE5B;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,YAAY,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,aAAa,EAAE,OAAO,CAAC;IACvB,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,+DAA+D;AAC/D,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAChD;;;OAGG;IACH,IAAI,CAAC,CAAC,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D;;;;OAIG;IACH,MAAM,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD;;;;OAIG;IACH,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED;;;;;GAKG;AACH;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAc;IAC7B,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,QAAQ,EAAE,UAAU,CAAC;IACrB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;;OAQG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,mFAAmF;QACnF,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;QAC3B;;;;;WAKG;QACH,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,QAAQ,CAAC,EAAE,UAAU,CAAC;QACtB,MAAM,CAAC,EAAE,WAAW,CAAC;QACrB;;;WAGG;QACH,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB;;;;;;;;;;;;WAYG;QACH,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB;;;;;;;;;;;WAWG;QACH,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,KAAK,IAAI,CAAC;KAClD,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;IACvB,MAAM,IAAI,eAAe,EAAE,CAAC;IAC5B;;;;;;;OAOG;IACH,YAAY,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACrD;;;;;;;;;OASG;IACH,cAAc,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IACxE;;;;;;;;;OASG;IACH,YAAY,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,CAAC,KAAK,EAAE;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,UAAU,CAAC;KACvB,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACjC;;;;;;;;;OASG;IACH,eAAe,CAAC,KAAK,EAAE;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,cAAc,CAAC;QACvB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf;;;;WAIG;QACH,MAAM,CAAC,EAAE,SAAS,GAAG,eAAe,CAAC;KACtC,GAAG,OAAO,CAAC;IACZ;;;;;;;;;;;;;;;OAeG;IACH,iBAAiB,CAAC,CAAC,KAAK,EAAE;QACxB,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC/E;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC9B,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,eAAe,CAAC;IACvB,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,QAAQ,EAAE,UAAU,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB;;;;;;;;;;;;;;OAcG;IACH,eAAe,CAAC,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACxE;;;;;;;;;;;;OAYG;IACH,iBAAiB,CAAC,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtE;AAED,MAAM,WAAW,sBAAsB;IACrC,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,GAAI,OAAO,sBAAsB,KAAG,MAMjE,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,YAAY,CAAC;AAElD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB;AAED,6DAA6D;AAC7D,eAAO,MAAM,WAAW,GAAI,QAAQ,YAAY,GAAG,SAAS,EAAE,UAAU,MAAM,KAAG,OAClC,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,YAAY,GAAI,QAAQ,YAAY,GAAG,SAAS,EAAE,UAAU,MAAM,KAAG,OACM,CAAC;AAEzF;;;;;GAKG;AACH,eAAO,MAAM,cAAc,GAAI,QAAQ,YAAY,GAAG,SAAS,EAAE,UAAU,MAAM,KAAG,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CACtE,CAAC"}

package/dist/index.js

@@ -12,4 +12,19 @@ export const channelSessionKey = (parts) => {
     }
     return segments.join(':');
 };
+/** Whether `senderId` is on the policy's principals list. */
+export const isPrincipal = (policy, senderId) => (policy?.principals ?? []).includes(senderId);
+/**
+ * Whether a message from `senderId` may start a turn. No policy admits:
+ * there is nobody's list to refuse against, which is the answer from
+ * before admission existed.
+ */
+export const admitsSender = (policy, senderId) => policy === undefined || policy.admit !== 'principals' || isPrincipal(policy, senderId);
+/**
+ * The trust label a turn from `senderId` carries (`SENDER_TRUST_METADATA_KEY`
+ * in `@stratusagent/core`): `user` for a principal, `unknown` for anyone else.
+ * Evaluated per message, never per session: a group conversation keys one
+ * session for everyone in it.
+ */
+export const senderTrustFor = (policy, senderId) => isPrincipal(policy, senderId) ? 'user' : 'unknown';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AA+RA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAA6B,EAAU,EAAE;IACzE,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAChF,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AA4YA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAA6B,EAAU,EAAE;IACzE,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAChF,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC,CAAC;AAkCF,6DAA6D;AAC7D,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAAgC,EAAE,QAAgB,EAAW,EAAE,CACzF,CAAC,MAAM,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAgC,EAAE,QAAgB,EAAW,EAAE,CAC1F,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,YAAY,IAAI,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAEzF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAgC,EAAE,QAAgB,EAA2C,EAAE,CAC5H,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stratusagent/channels",
-  "version": "0.11.6",
+  "version": "0.11.7",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -17,7 +17,7 @@
     "node": ">=22.13 <23 || >=23.4"
   },
   "dependencies": {
-    "@stratusagent/core": "0.11.6"
+    "@stratusagent/core": "0.11.7"
   },
   "devDependencies": {
     "@types/node": "^24.6.0",