amalgm 0.1.246 → 0.1.247

package/runtime/scripts/amalgm-mcp/events/processor.js

@@ -0,0 +1,189 @@
+'use strict';
+
+/**
+ * Pure delivery-to-run transition for a durable event inbox row.
+ *
+ * The HTTP route never calls this directly before persistence. A thrown error
+ * means the delivery is retryable; returned terminalStatus values mean the
+ * immutable input has reached a terminal disposition.
+ */
+
+const {
+  extractSignature,
+  matchAllBySignature,
+  matchBySignature,
+  matchesEventRef,
+  pickSourceLabel,
+  collectPassthroughHeaders,
+} = require('./matcher');
+const {
+  listEventTriggersForIngress,
+  markTriggerFired,
+  recordAutomationRun,
+} = require('../automations/store');
+const { executeAutomationForTrigger } = require('../automations/runner');
+const ring = require('./ring-buffer');
+
+function cleanRefPart(value) {
+  if (typeof value !== 'string') return '';
+  const trimmed = value.trim();
+  if (!trimmed || trimmed.length > 128) return '';
+  return trimmed;
+}
+
+function dayStamp(date = new Date()) {
+  return date.toISOString().slice(0, 10).replace(/-/g, '');
+}
+
+function recordUnmatchedEventRuns(authenticated, eventSource, eventName, timestamp) {
+  const refSlug = `${eventSource}.${eventName}`.toLowerCase().replace(/[^a-z0-9._-]+/g, '_').slice(0, 80);
+  const seenAutomations = new Set();
+  for (const trigger of authenticated) {
+    if (!trigger.automationId || seenAutomations.has(trigger.automationId)) continue;
+    seenAutomations.add(trigger.automationId);
+    try {
+      recordAutomationRun(trigger.automationId, {
+        runId: `unmatched-${trigger.automationId}-${refSlug}-${dayStamp()}`,
+        automationId: trigger.automationId,
+        triggerId: trigger.id,
+        triggerName: trigger.name,
+        status: 'unmatched',
+        startedAt: timestamp,
+        finishedAt: timestamp,
+        output: { received: { source: eventSource, event: eventName, receivedAt: timestamp } },
+        error: `Received ${eventSource}.${eventName} — authenticated, but no trigger selector matched (trigger "${trigger.name}" wants ${trigger.source || '*'}.${trigger.event || '*'}).`,
+      }, { source: 'automation_runs:event-unmatched' });
+    } catch (error) {
+      console.warn('[AmalgmMCP:Events] Failed to record unmatched event run:', error.message || error);
+    }
+  }
+}
+
+function eventReference(headers, parsedBody) {
+  const githubEvent = headers['x-github-event'];
+  const vendorSource = pickSourceLabel(headers);
+  const vendorEvent = githubEvent
+    || headers['x-linear-event']
+    || headers['x-gitlab-event']
+    || null;
+  let source = vendorSource;
+  let event = vendorEvent || 'webhook';
+  let fallback = null;
+
+  if (vendorSource === 'external' && !vendorEvent) {
+    const headerSource = cleanRefPart(headers['x-amalgm-source']);
+    const headerEvent = cleanRefPart(headers['x-amalgm-event']);
+    const bodySource = cleanRefPart(typeof parsedBody === 'object' ? parsedBody?.source : null);
+    const bodyEvent = cleanRefPart(typeof parsedBody === 'object' ? parsedBody?.event : null);
+    if (headerSource || headerEvent) {
+      source = headerSource || 'external';
+      event = headerEvent || 'webhook';
+    } else if (bodySource || bodyEvent) {
+      source = bodySource || 'external';
+      event = bodyEvent || 'webhook';
+      fallback = { source: 'external', event: 'webhook' };
+    }
+  }
+
+  return { source, event, fallback, githubPing: githubEvent === 'ping' };
+}
+
+async function processEventEnvelope(input = {}) {
+  const rawBody = typeof input.rawBody === 'string' ? input.rawBody : '';
+  const headers = input.headers && typeof input.headers === 'object' ? input.headers : {};
+  const signature = extractSignature(headers);
+  if (!signature) {
+    return {
+      terminalStatus: 'rejected',
+      disposition: 'unsigned',
+      reason: 'Webhook signature required',
+    };
+  }
+
+  const triggers = listEventTriggersForIngress();
+  let parsedBody;
+  try {
+    parsedBody = JSON.parse(rawBody);
+  } catch {
+    parsedBody = rawBody;
+  }
+  const ref = eventReference(headers, parsedBody);
+
+  if (ref.githubPing) {
+    const pingTrigger = matchBySignature(triggers, signature, rawBody);
+    return pingTrigger
+      ? { terminalStatus: 'completed', disposition: 'ping', triggerIds: [] }
+      : { terminalStatus: 'rejected', disposition: 'invalid-signature', reason: 'Invalid webhook signature' };
+  }
+
+  const authenticated = matchAllBySignature(triggers, signature, rawBody);
+  if (!authenticated?.length) {
+    return {
+      terminalStatus: 'rejected',
+      disposition: 'invalid-signature',
+      reason: 'Invalid webhook signature',
+    };
+  }
+
+  let source = ref.source;
+  let event = ref.event;
+  let matched = authenticated.filter((trigger) => matchesEventRef(trigger, { source, event }));
+  if (!matched.length && ref.fallback) {
+    const fallbackMatches = authenticated.filter((trigger) => matchesEventRef(trigger, ref.fallback));
+    if (fallbackMatches.length > 0) {
+      source = ref.fallback.source;
+      event = ref.fallback.event;
+      matched = fallbackMatches;
+    }
+  }
+
+  const timestamp = input.receivedAt || new Date().toISOString();
+  const eventObj = {
+    id: input.deliveryId || null,
+    source,
+    event,
+    payload: parsedBody,
+    headers: collectPassthroughHeaders(headers),
+    timestamp,
+    receivedAt: timestamp,
+  };
+
+  if (!matched.length) {
+    ring.push({ ...eventObj, disposition: 'unmatched' });
+    recordUnmatchedEventRuns(authenticated, source, event, timestamp);
+    return {
+      terminalStatus: 'completed',
+      disposition: 'unmatched',
+      event: eventObj,
+      triggerIds: [],
+      authenticatedTriggerIds: authenticated.map((trigger) => trigger.id),
+    };
+  }
+
+  ring.push(eventObj);
+  const completed = new Set(Array.isArray(input.completedTriggerIds) ? input.completedTriggerIds : []);
+  for (const trigger of matched) {
+    if (completed.has(trigger.id)) continue;
+    const runs = await executeAutomationForTrigger(trigger.id, eventObj);
+    const failed = runs.find((run) => run && ['failed', 'rejected', 'interrupted'].includes(run.status));
+    if (failed) {
+      throw new Error(failed.error || `Automation run ${failed.id || trigger.id} failed`);
+    }
+    markTriggerFired(trigger.id, { source: 'events:delivery-completed', firedAt: timestamp });
+    input.onTriggerComplete?.(trigger.id);
+    completed.add(trigger.id);
+  }
+
+  return {
+    terminalStatus: 'completed',
+    disposition: 'triggered',
+    event: eventObj,
+    triggerIds: matched.map((trigger) => trigger.id),
+    completedTriggerIds: [...completed],
+  };
+}
+
+module.exports = {
+  eventReference,
+  processEventEnvelope,
+};

package/runtime/scripts/amalgm-mcp/lib/email-embeds.js

@@ -482,6 +482,46 @@ function renderEntityTile(label, type, id, renderContext = {}) {
   );
 }
 
+/**
+ * Full-width share-invite tile — the approved email CTA form of ChatRow.
+ * The whole row is one link, with the canonical entity/file icon on the left
+ * and the canonical ExternalLink icon on the right. Tables keep the three
+ * cells aligned in Gmail and Outlook.
+ */
+function renderShareEntityTile(label, type, href) {
+  const safeLabel = escapeText(label || entityTypeLabel(type));
+  const normalizedType = type === 'symlink' ? 'file' : type;
+  const iconDescriptor = normalizedType === 'file'
+    ? resolveFileIconDescriptor(label)
+    : normalizedType === 'folder'
+      ? resolveFileIconDescriptor('', { isDirectory: true })
+      : resolveEntityIconDescriptor(normalizedType);
+  const openDescriptor = {
+    kind: 'lucide',
+    name: 'ExternalLink',
+    colorClass: 'text-white',
+    color: COLOR.text,
+  };
+  const size = CHROME.entityTileIconSize;
+  const iconContentIdValue = iconContentId(iconDescriptor);
+  const openContentId = iconContentId(openDescriptor);
+  const iconStyle = `display:inline-block;width:${size}px;height:${size}px;border:0`;
+  return (
+    `<a href="${escapeAttr(href)}" target="_blank" ` +
+    `style="text-decoration:none;display:block;background:${CHROME.entityTileBg};` +
+    `border:1px solid ${CHROME.entityTileBorder};border-radius:${CHROME.entityTileRadius}px;` +
+    `padding:0;margin:${CHROME.entityTileMarginY}px 0">` +
+    `<table role="presentation" width="100%" cellpadding="0" cellspacing="0" style="border-collapse:collapse"><tr>` +
+    `<td style="padding:${CHROME.entityTilePaddingY}px 0 ${CHROME.entityTilePaddingY}px ${CHROME.entityTilePaddingX}px;vertical-align:middle;line-height:0;width:${size}px">` +
+    `<img src="cid:${iconContentIdValue}" alt="" width="${size}" height="${size}" style="${iconStyle}"></td>` +
+    `<td style="padding:${CHROME.entityTilePaddingY}px ${CHROME.entityTilePaddingX}px ${CHROME.entityTilePaddingY}px ${CHROME.entityTileGap}px;vertical-align:middle">` +
+    `<span style="font-size:${CHROME.entityTileFontSize}px;line-height:${CHROME.entityTileLineHeight}px;color:${CHROME.entityTileText};font-weight:${CHROME.entityTileFontWeight};white-space:nowrap">${safeLabel}</span></td>` +
+    `<td align="right" style="padding:${CHROME.entityTilePaddingY}px ${CHROME.entityTilePaddingX}px ${CHROME.entityTilePaddingY}px 0;vertical-align:middle;line-height:0;width:${size}px">` +
+    `<img src="cid:${openContentId}" alt="" width="${size}" height="${size}" style="${iconStyle}"></td>` +
+    `</tr></table></a>`
+  );
+}
+
 /**
  * Expanded entity — the email form of the full: render. Email can't iframe
  * the live app, so it's the EmbedChrome card with the entity identity and a
@@ -527,4 +567,5 @@ module.exports = {
   renderFileCardEmbed,
   renderMediaEmbed,
   renderEntityEmbed,
+  renderShareEntityTile,
 };

package/runtime/scripts/amalgm-mcp/lib/email-md.js

@@ -26,6 +26,7 @@ const { buildEmailRenderContext, normalizeEmailLink } = require('./email-deeplin
 // (or Citation.tsx for the templates below) and regenerate.
 const RENDER_ASSETS = require('./generated/email-render.json');
 const EMAIL_TOKENS = RENDER_ASSETS.tokens;
+const CHROME = RENDER_ASSETS.chrome;
 const TEMPLATES = RENDER_ASSETS.templates;
 // Markdown block metrics — the same values app/generated/markdown-surface.css
 // is generated from, so blocks land at identical positions in both surfaces.
@@ -418,4 +419,109 @@ function formatNotificationEmail(message, link, renderContextInput = {}) {
 </body></html>`;
 }
 
-module.exports = { markdownToEmailHtml, formatNotificationEmail };
+const SHARE_ENTITY_COPY = {
+  file: { phrase: 'a file', noun: 'file' },
+  symlink: { phrase: 'a file', noun: 'file' },
+  folder: { phrase: 'a folder', noun: 'folder' },
+  agent: { phrase: 'an agent', noun: 'agent' },
+  automation: { phrase: 'an automation', noun: 'automation' },
+  event: { phrase: 'an automation', noun: 'automation' },
+  trigger: { phrase: 'an automation', noun: 'automation' },
+  chat: { phrase: 'a chat', noun: 'chat' },
+  conversation: { phrase: 'a chat', noun: 'chat' },
+  app: { phrase: 'an app', noun: 'app' },
+  artifact: { phrase: 'an app', noun: 'app' },
+  service: { phrase: 'an app', noun: 'app' },
+  task: { phrase: 'a task', noun: 'task' },
+  preview: { phrase: 'a preview', noun: 'preview' },
+};
+
+function shareEntityCopy(entityType) {
+  return SHARE_ENTITY_COPY[entityType] || { phrase: 'something', noun: 'item' };
+}
+
+function shareInviteContextHtml({ entityType, access, context }) {
+  const paragraph = (content) =>
+    `<p style="margin:0;line-height:${BLOCKS.paragraph.lineHeight};color:${EMAIL_TOKENS.color.text}">${content}</p>`;
+  if (context && typeof context === 'object') {
+    const before = escapeHtmlText(context.before || '');
+    const emphasis = escapeHtmlText(context.emphasis || '');
+    const after = escapeHtmlText(context.after || '');
+    return paragraph(
+      before +
+      (emphasis
+        ? `<strong style="color:${EMAIL_TOKENS.color.text};font-weight:600">${emphasis}</strong>`
+        : '') +
+      after,
+    );
+  }
+  if (typeof context === 'string' && context.trim()) {
+    return paragraph(escapeHtmlText(context.trim()));
+  }
+  if (access === 'edit' || access === 'view') {
+    const strong = `<strong style="color:${EMAIL_TOKENS.color.text};font-weight:600">${access}</strong>`;
+    return entityType === 'folder'
+      ? paragraph(`You can ${strong} everything inside.`)
+      : paragraph(`You can ${strong} this ${shareEntityCopy(entityType).noun}.`);
+  }
+  if (entityType === 'agent') {
+    return paragraph('Its tools and skills come with it &mdash; everything installs when you accept.');
+  }
+  return '';
+}
+
+/**
+ * Approved share/invite email shell. It uses the same generated tokens,
+ * Markdown block metrics, entity tile, and CID icon pipeline as notify_user,
+ * while keeping the tile as the only CTA.
+ */
+function formatShareInviteEmail({
+  sharerName,
+  recipientEmail,
+  entityName,
+  entityType,
+  inviteUrl,
+  access,
+  context,
+}) {
+  const normalizedType = String(entityType || 'entity').toLowerCase();
+  const copy = shareEntityCopy(normalizedType);
+  const headline =
+    `<h2 style="margin:0;font-size:${EMAIL_TOKENS.type.headings['2']}px;font-weight:400;` +
+    `color:${EMAIL_TOKENS.color.text};line-height:${BLOCKS.heading.lineHeight}">` +
+    `<strong style="font-weight:${CHROME.entityTileFontWeight}">${escapeHtmlText(sharerName)}</strong> ` +
+    `shared ${copy.phrase} with you</h2>`;
+  const tile = embeds.renderShareEntityTile(entityName, normalizedType, inviteUrl);
+  const contextHtml = shareInviteContextHtml({ entityType: normalizedType, access, context });
+  const finePrint =
+    `<blockquote style="margin:0;line-height:${BLOCKS.blockquote.lineHeight};` +
+    `${BLOCKS.blockquote.italic ? 'font-style:italic;' : ''}` +
+    `padding:0 0 0 ${BLOCKS.blockquote.paddingLeft}px;` +
+    `border-left:${BLOCKS.blockquote.borderWidth}px solid ${BLOCKS.blockquote.borderColor};` +
+    `color:${BLOCKS.blockquote.color}">${escapeHtmlText(recipientEmail)} &mdash; ` +
+    `sign in with this address to accept.</blockquote>`;
+  const bodyBlocks = [headline, tile, contextHtml, finePrint].filter(Boolean);
+  const bodyHtml = bodyBlocks
+    .map((block, index) =>
+      index === 0 ? block : `<div style="margin:${BLOCKS.blockGap}px 0 0">${block}</div>`,
+    )
+    .join('\n');
+  const textFont = EMAIL_TOKENS.font.text.replace(/"/g, "'");
+
+  return `<!DOCTYPE html>
+<html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"></head>
+<body style="margin:0;padding:0;background:${EMAIL_TOKENS.color.bg};font-family:${textFont}">
+<table role="presentation" width="100%" cellpadding="0" cellspacing="0" style="background:${EMAIL_TOKENS.color.bg}"><tr><td align="center" style="padding:0">
+  <table role="presentation" width="520" cellpadding="0" cellspacing="0" style="max-width:520px;width:100%;background:${EMAIL_TOKENS.color.bg};border:1px solid ${EMAIL_TOKENS.color.tableBorder};border-radius:8px;border-collapse:separate;overflow:hidden"><tr><td style="padding:40px 28px 48px">
+    <div style="font-size:${EMAIL_TOKENS.type.body}px;color:${EMAIL_TOKENS.color.text}">${bodyHtml}</div>
+    <p style="margin:48px 0 0;font-size:12px;color:${EMAIL_TOKENS.color.text}">amalgm.ai</p>
+  </td></tr></table>
+</td></tr></table>
+</body></html>`;
+}
+
+module.exports = {
+  markdownToEmailHtml,
+  formatNotificationEmail,
+  formatShareInviteEmail,
+};

package/runtime/scripts/amalgm-mcp/lib/generated/email-render.json

@@ -51,8 +51,16 @@
     "frameBg": "#000000",
     "entityTileCss": "text-decoration:none;display:inline-block;background:#000000;border:1px solid #1c1917;border-radius:12px;padding:8px 12px;margin:2px 0;vertical-align:middle",
     "entityTileFontSize": 14,
+    "entityTileLineHeight": 18,
     "entityTileFontWeight": 650,
     "entityTileIconSize": 14,
+    "entityTilePaddingX": 12,
+    "entityTilePaddingY": 8,
+    "entityTileGap": 10,
+    "entityTileMarginY": 2,
+    "entityTileRadius": 12,
+    "entityTileBorder": "#1c1917",
+    "entityTileBg": "#000000",
     "entityTileText": "#ffffff",
     "citationIconSize": 12
   },
@@ -146,8 +154,8 @@
   },
   "templates": {
     "citationLink": "<a href=\"__HREF__\" target=\"_blank\" rel=\"noreferrer\" title=\"__TITLE__\" class=\"render-citation\" style=\"display:inline;vertical-align:baseline;font:inherit;font-size:inherit;line-height:inherit;color:#60a5fa;text-decoration:none;white-space:nowrap;padding:0;background:transparent;border:none;\">__LABEL__</a>",
-    "citationLinkWithIcon": "<a href=\"__HREF__\" target=\"_blank\" rel=\"noreferrer\" title=\"__TITLE__\" class=\"render-citation\" style=\"display:inline;vertical-align:baseline;font:inherit;font-size:inherit;line-height:inherit;color:#60a5fa;text-decoration:none;white-space:nowrap;padding:0;background:transparent;border:none;\"><span style=\"display:inline-block;width:12px;height:12px;font-size:12px;line-height:12px;margin-right:0.3em;vertical-align:middle\">__ICON__</span>__LABEL__</a>",
+    "citationLinkWithIcon": "<a href=\"__HREF__\" target=\"_blank\" rel=\"noreferrer\" title=\"__TITLE__\" class=\"render-citation\" style=\"display:inline;vertical-align:baseline;font:inherit;font-size:inherit;line-height:inherit;color:#60a5fa;text-decoration:none;white-space:nowrap;padding:0;background:transparent;border:none;\"><span style=\"display:inline-block;width:12px;height:12px;font-size:12px;line-height:12px;margin-right:0.3em;vertical-align:-0.1em\">__ICON__</span>__LABEL__</a>",
     "citationText": "<span title=\"__TITLE__\" class=\"render-citation\" style=\"display:inline;vertical-align:baseline;font:inherit;font-size:inherit;line-height:inherit;color:#60a5fa;text-decoration:none;white-space:nowrap;padding:0;background:transparent;border:none;\">__LABEL__</span>",
-    "citationTextWithIcon": "<span title=\"__TITLE__\" class=\"render-citation\" style=\"display:inline;vertical-align:baseline;font:inherit;font-size:inherit;line-height:inherit;color:#60a5fa;text-decoration:none;white-space:nowrap;padding:0;background:transparent;border:none;\"><span style=\"display:inline-block;width:12px;height:12px;font-size:12px;line-height:12px;margin-right:0.3em;vertical-align:middle\">__ICON__</span>__LABEL__</span>"
+    "citationTextWithIcon": "<span title=\"__TITLE__\" class=\"render-citation\" style=\"display:inline;vertical-align:baseline;font:inherit;font-size:inherit;line-height:inherit;color:#60a5fa;text-decoration:none;white-space:nowrap;padding:0;background:transparent;border:none;\"><span style=\"display:inline-block;width:12px;height:12px;font-size:12px;line-height:12px;margin-right:0.3em;vertical-align:-0.1em\">__ICON__</span>__LABEL__</span>"
   }
 }

package/runtime/scripts/amalgm-mcp/observer/README.md

@@ -72,8 +72,10 @@ never merges, never decides truth — it emits facts for the layers above.
    enrolls as repo territory; a `.git` appearing inside a live files root
    closes the file channels under it and births a repo root
    (`repo.discovered`); a `.git` vanishing returns the ground to files
-   (`repo.removed`) and the channels are reborn. A repo's changes travel as
-   one card, never as thousands of file events. Enrollment names ground
+   (`repo.removed`) and the channels are reborn. A repo's raw changes travel
+   as one Card + Checkpoint state, never as thousands of realtime file
+   events; its registered child channels reconcile only after that state
+   settles. Enrollment names ground
    by ADDRESS: the parent chain resolves, the last segment is inspected,
    never traversed — an explicitly enrolled symlink enrolls as the
    pointer itself.
@@ -114,8 +116,8 @@ never merges, never decides truth — it emits facts for the layers above.
    and the edge-following enrollment operation (`edges.js`), not any
    walk, is what turns unclaimed targets into ground. Every root kind
    exposes its edges (`linkEdges`): files ground from detected truth,
-   repo ground from a fresh worktree census — a repo's changes travel
-   as one card, but its edges are enrollment-policy inputs like any
+   repo ground from a fresh worktree census — a repo's raw changes travel
+   as one Card + Checkpoint state, but its edges are enrollment-policy inputs like any
    other root's.
 
 ## Shape
@@ -179,8 +181,8 @@ never merges, never decides truth — it emits facts for the layers above.
   The registration boundary above (`registration/`) is what makes
   watched ground REGISTERED ground — a tree per top-level root, keyed
   by permanent rootId — and owns derived link resolution across trees
-  (answering with the OWNING entity: repo territory resolves to its
-  boundary's record).
+  (answering with the OWNING entity: a repo boundary changes realtime
+  semantics, but an address in it resolves to its registered child).
 
 The observer imports nothing from the rest of the runtime. Enrollment policy
 (`shouldEnroll`) is injected; the default is the workspace inclusion rules.