agentschat-mcp 0.35.0 → 0.36.4

package/codex/owner.ts

@@ -0,0 +1,35 @@
+/** Resolve only this authenticated bot's owner; callers must compare sender IDs. */
+export async function getBotOwner(
+  base: string,
+  agentId: string,
+  token: string,
+  request: typeof fetch = fetch,
+): Promise<string | null> {
+  try {
+    const origin = base.replace(/\/+$/, "");
+    const options: RequestInit = {
+      method: "GET",
+      headers: { Authorization: `Bearer ${token}` },
+      cache: "no-store",
+      redirect: "error",
+      signal: AbortSignal.timeout(8_000),
+    };
+    const [statusResponse, entitlementResponse] = await Promise.all([
+      request(`${origin}/api/account/onboarding`, options),
+      request(`${origin}/api/me/entitlements`, options),
+    ]);
+    if (!statusResponse.ok || !entitlementResponse.ok) return null;
+    const [status, entitlement] = await Promise.all([
+      statusResponse.json(),
+      entitlementResponse.json(),
+    ]);
+    if (!status || Array.isArray(status) || status.agent_id !== agentId || status.claimed !== true) return null;
+    if (!entitlement || Array.isArray(entitlement)) return null;
+    const owner = entitlement.owner_account_id;
+    return typeof owner === "string" && owner.trim().length > 0 && owner !== agentId ? owner : null;
+  } catch {
+    // Missing endpoints, failed authentication and unavailable ownership all fail closed.
+    // Never retain a previous owner or expose response bodies / credentials in diagnostics.
+    return null;
+  }
+}

package/codex/run.ts

@@ -1,3 +1,9 @@
+import { getBotOwner } from "./owner.ts";
+import { getOnboardingStatus } from "../src/onboarding-status.ts";
+import { GuiChannel } from "./gui-channel.ts";
+import { readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
 import { loadBots } from "./bots-config.ts";
 import type { BridgeConfig } from "./config.ts";
 import { parseArgs } from "node:util";
@@ -17,20 +23,30 @@ CWD/.agentschat/profile.json > CWD/.codex/config.toml MCP profile > AGENTSCHAT_P
 Only the exact CWD is searched. Named profiles live in ~/.agentschat (legacy ~/.agentchat).
 An optional project agent_id must match the selected profile; it cannot replace it.
 Credentials: private profile JSON {agent_id, token}, chmod 600; never put keys in argv.
-Project config fields: profile, agent_id, channels, senders, api_url, ws_url.
+Project config fields: profile, agent_id, channels, senders, api_url, ws_url, permissions.
+--onboarding-status checks authentication/ownership and prints safe claim/chat links; it does not send messages.
 --check validates identity and official app-server initialization without opening chat.
 Live DMs and exact mentions trigger replies; channels/senders restrict this further.
-Read-only Codex turns; inherited MCP servers disabled. No offline message replay.
+Server-verified owner requests use full access by default; other senders stay read-only. Set permissions: "read-only" to disable writes and inherited MCP. No offline message replay.
 State: ~/.agentschat/codex-bridge/<project-server-identity hash>/ (private).
+GUI outbox: --gui-thread THREAD_ID --gui-message-file PATH; --gui-status lists receipts.
+Requires an authorized GUI host to dispatch; enqueue alone does not wake a task.
 See codex/README.md for setup, verification, limitations and recovery.
 `;
 
 let codex: AppServer | undefined, bridge: Bridge | undefined, transport: AgentsChatTransport | undefined;
 async function main() {
   const { values } = parseArgs({ options: { "codex-bridge": { type: "boolean" }, cwd: { type: "string" },
-    "managed-worker": { type: "boolean" }, registry: { type: "string" }, bot: { type: "string" }, profile: { type: "string" }, "codex-bin": { type: "string" }, check: { type: "boolean" },
+    "gui-thread": { type: "string" }, "gui-message-file": { type: "string" }, "gui-status": { type: "boolean" }, "managed-worker": { type: "boolean" }, registry: { type: "string" }, bot: { type: "string" }, profile: { type: "string" }, "codex-bin": { type: "string" }, check: { type: "boolean" }, "onboarding-status": { type: "boolean" },
     help: { type: "boolean", short: "h" } }, strict: true });
   if (values.help) { console.log(HELP); return; }
+  if (values["gui-thread"] || values["gui-message-file"] || values["gui-status"]) {
+    const channel = new GuiChannel(join(homedir(), ".agentschat/codex-gui-outbox"), values["gui-thread"] ? [values["gui-thread"]] : []);
+    if (values["gui-status"]) { console.log(JSON.stringify(channel.list().map(({prompt, ...receipt}) => receipt))); return; }
+    if (!values["gui-thread"] || !values["gui-message-file"]) throw new Error("GUI submission requires --gui-thread and --gui-message-file");
+    const {prompt, ...receipt} = channel.enqueue(values["gui-thread"], readFileSync(values["gui-message-file"], "utf8"));
+    console.log(JSON.stringify(receipt)); return;
+  }
   const snapshot = values["managed-worker"] ? await new Promise<BridgeConfig>((resolve, reject) => {
     if (!process.connected) { reject(new Error("Managed worker needs parent IPC")); return; }
     const timer = setTimeout(() => reject(new Error("Parent configuration missing")), 10000);
@@ -38,11 +54,17 @@ async function main() {
   }) : undefined;
   const c = snapshot ?? (values.bot ? loadBots(values.registry).find(b => b.name === values.bot) : resolveConfig({ cwd: values.cwd, profile: values.profile, codexBin: values["codex-bin"] }));
   if (!c) throw new Error("Bot is absent or disabled");
+  if (values["onboarding-status"]) {
+    const status = await getOnboardingStatus(c.apiUrl, c.agentId, c.token);
+    console.log(JSON.stringify({...status, workdir: c.cwd, profile_file: c.profileFile, permissions: c.permissions,
+      startup_service: "check manager --status separately", reply_verified: false}));
+    return;
+  }
   console.log(JSON.stringify({ cwd: c.cwd, agent_id: c.agentId, profile: c.profileFile, source: c.source, stateDir: c.stateDir }));
-  codex = new AppServer(c.codexBin);
+  codex = new AppServer(c.codexBin, undefined, undefined, c.permissions);
   if (values.check) { await codex.start(); console.log("Official app-server initialization: OK (no chat connection or generation)"); codex.close(); return; }
   transport = new AgentsChatTransport(c, m => { bridge!.accept(m); });
-  bridge = new Bridge(c, codex, (chat, text) => transport!.send(chat, text), console.error, (chat, active) => transport!.setTyping(chat, active));
+  bridge = new Bridge(c, codex, (chat, text) => transport!.send(chat, text), console.error, (chat, active) => transport!.setTyping(chat, active), () => getBotOwner(c.apiUrl, c.agentId, c.token));
   let stopping = false;
   const stop = async () => { if (stopping) return; stopping = true; if (values["managed-worker"]) { const deadline = setTimeout(() => { try { process.kill(-process.pid, "SIGKILL"); } catch {} }, 20000); deadline.unref(); } bridge?.pause(); transport?.stop(); codex?.close(); await bridge?.stop(); if (process.connected) process.disconnect?.(); };
   codex.onFatal = () => { console.error("Codex backend stopped; pending inbox preserved. Restart the bridge after checking failed entries."); process.exitCode = 1; void stop(); };

package/connector/README.md

@@ -67,7 +67,7 @@ For the bundled Hermes adaptation skill and profile-specific setup commands, rea
 [`skills/onboarding.md` §4](../skills/onboarding.md). Upgrades from older connectors
 must follow the [0.34.0 migration notes](../CHANGELOG.md).
 
-**0.35.0 is unpublished:** use the [local build procedure](../skills/onboarding.md#local-build-before-runtime-configuration), not an assumed npm release.
+**0.36.4 is unpublished:** use the [local build procedure](../skills/onboarding.md#local-build-before-runtime-configuration), not an assumed npm release.
 Requires Node ≥22, Bun ≥1.0 for installing/building, and a configured Hermes
 v0.21.1 profile. In a reviewed `AgentsChatProtocol/mcp-plugin` checkout:
 

package/dist/codex-bots.js

@@ -904,6 +904,13 @@ function parse(toml, { maxDepth = 1000, integersAsBigInt } = {}) {
  */
 
 // codex/config.ts
+function permissionMode(value) {
+  if (value === undefined)
+    return "full-access";
+  if (value !== "full-access" && value !== "read-only")
+    throw new Error("permissions must be full-access or read-only");
+  return value;
+}
 function readJson(file) {
   try {
     return JSON.parse(readFileSync(file, "utf8"));
@@ -924,7 +931,7 @@ function resolveConfig(opts, env = process.env, home = homedir()) {
   const project = opts.settings ?? (existsSync(configFile) ? readJson(configFile) : {});
   if (!project || typeof project !== "object" || Array.isArray(project))
     throw new Error("Invalid project config");
-  const allowed = new Set(["profile", "agent_id", "channels", "senders", "api_url", "ws_url"]);
+  const allowed = new Set(["profile", "agent_id", "channels", "senders", "api_url", "ws_url", "permissions"]);
   if (Object.keys(project).some((k) => !allowed.has(k)))
     throw new Error("Unknown project config field (credentials belong in a private profile)");
   for (const k of ["profile", "agent_id", "api_url", "ws_url"])
@@ -993,6 +1000,7 @@ function resolveConfig(opts, env = process.env, home = homedir()) {
     cwd,
     profileFile,
     source,
+    permissions: permissionMode(project.permissions),
     agentId: profile.agent_id,
     token: profile.token,
     apiUrl: canonicalApi,
@@ -1032,7 +1040,7 @@ function loadBots(file = defaultRegistry(), home = homedir2()) {
   const names = new Set, identities = new Set;
   const bots = [];
   for (const bot of doc.bots) {
-    fields(bot, ["name", "profile", "workdir", "enabled", "agent_id", "channels", "senders", "api_url", "ws_url"]);
+    fields(bot, ["name", "profile", "workdir", "enabled", "agent_id", "channels", "senders", "api_url", "ws_url", "permissions"]);
     if (!text(bot.name) || !/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/.test(bot.name) || names.has(bot.name))
       throw new Error("Bot names must be unique simple labels");
     names.add(bot.name);
@@ -1048,7 +1056,7 @@ function loadBots(file = defaultRegistry(), home = homedir2()) {
       mkdirSync(defaultDir, { recursive: true, mode: 448 });
     const cwd = realpathSync2(bot.workdir ? path(bot.workdir) : defaultDir);
     const settings = {};
-    for (const k of ["agent_id", "channels", "senders", "api_url", "ws_url"])
+    for (const k of ["agent_id", "channels", "senders", "api_url", "ws_url", "permissions"])
       if (bot[k] !== undefined)
         settings[k] = bot[k];
     const config = resolveConfig({ cwd, profile: bot.profile, settings, codexBin: doc.codex_bin }, {}, home);