crewly 1.20.192 → 1.20.193

package/dist/backend/backend/src/services/people/acting-for.service.js

@@ -0,0 +1,224 @@
+/**
+ * Acting-for — the person each agent session is working for right now
+ * (issue #968).
+ *
+ * Every human message delivered to an agent records its sender as the person
+ * that agent acts for until the next human message: a Slack message records
+ * the sender's Slack user id, a dashboard message records the owner. A
+ * message one agent sends another passes the sender's person on, so work
+ * delegated for Info stays Info's. Scheduled and system turns change nothing.
+ *
+ * The record is set only by the backend from what it delivered — never from
+ * anything an agent sends — and connector credential requests carry it to
+ * Cloud, which decides whether that person may use the grant.
+ *
+ * Kept in `<CREWLY_HOME>/acting-for.json` so a restart does not turn a
+ * member's in-flight turn into the owner's.
+ *
+ * specs/per-person-access.md
+ *
+ * @module services/people/acting-for.service
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import { AsyncLocalStorage } from 'async_hooks';
+import { PEOPLE_CONSTANTS } from '../../constants.js';
+import { getCrewlyHomePath } from '../core/crewly-home.utils.js';
+import { getPeopleDirectory } from './people-directory.service.js';
+/** The acting-for record. */
+export class ActingForService {
+    filePathOverride;
+    people;
+    now;
+    cache = null;
+    /**
+     * @param deps - Store path, people directory, clock
+     */
+    constructor(deps = {}) {
+        this.filePathOverride = deps.filePath;
+        this.people = deps.people ?? getPeopleDirectory;
+        this.now = deps.now ?? (() => Date.now());
+    }
+    /**
+     * Record that a session now acts for a person.
+     *
+     * @param session - Agent session name
+     * @param personId - Slack user id, or `owner`
+     * @param source - What delivered the message
+     */
+    record(session, personId, source) {
+        if (!session || !personId)
+            return;
+        const all = this.load();
+        const current = all[session];
+        if (current && current.personId === personId && current.source === source)
+            return;
+        all[session] = { personId, source, at: new Date(this.now()).toISOString() };
+        this.save(all);
+    }
+    /**
+     * Record a human message delivered to a session: a Slack sender, or the
+     * owner when it carries no Slack sender (dashboard / terminal).
+     *
+     * @param session - Agent session name
+     * @param slackUserId - Sender's Slack user id, when the message came from Slack
+     */
+    recordHumanMessage(session, slackUserId) {
+        if (slackUserId && PEOPLE_CONSTANTS.SLACK_USER_ID_PATTERN.test(slackUserId)) {
+            this.record(session, slackUserId, 'slack');
+            try {
+                this.people().noteSeen(slackUserId);
+            }
+            catch {
+                // the directory is best effort here
+            }
+            return;
+        }
+        this.record(session, PEOPLE_CONSTANTS.OWNER_ID, 'dashboard');
+    }
+    /**
+     * A message from one agent to another: the target acts for whoever the
+     * sender acts for (the owner when the sender has no record).
+     *
+     * @param target - Receiving session
+     * @param fromSession - Sending session
+     */
+    inherit(target, fromSession) {
+        if (!target || !fromSession || target === fromSession)
+            return;
+        const from = this.load()[fromSession];
+        this.record(target, from?.personId ?? PEOPLE_CONSTANTS.OWNER_ID, 'agent');
+    }
+    /**
+     * A session's record.
+     *
+     * @param session - Agent session name
+     * @returns Entry, or null when the session never got a human message
+     */
+    get(session) {
+        const entry = this.load()[session];
+        return entry ? { ...entry } : null;
+    }
+    /**
+     * The person a request acts for: the owner for a request with no agent
+     * session (the owner's dashboard), else the session's record (the owner
+     * when it has none).
+     *
+     * @param session - Calling agent session, if any
+     * @returns Actor
+     */
+    actorFor(session) {
+        const people = this.people();
+        const raw = session ? this.load()[session]?.personId : undefined;
+        const id = !raw || people.isOwner(raw) ? people.ownerId() : raw;
+        return { id, role: people.roleOf(id), name: people.displayName(id) };
+    }
+    /** Forget everything (tests). */
+    clear() {
+        this.save({});
+    }
+    /** @returns Store path */
+    filePath() {
+        return this.filePathOverride ?? path.join(getCrewlyHomePath(), PEOPLE_CONSTANTS.ACTING_FOR_FILE);
+    }
+    /** @returns All records (read once, then cached) */
+    load() {
+        if (this.cache)
+            return this.cache;
+        try {
+            const raw = JSON.parse(fs.readFileSync(this.filePath(), 'utf-8'));
+            const sessions = raw && typeof raw === 'object' ? raw.sessions : undefined;
+            const out = {};
+            if (sessions && typeof sessions === 'object') {
+                for (const [name, e] of Object.entries(sessions)) {
+                    if (e && typeof e.personId === 'string' && typeof e.at === 'string') {
+                        out[name] = { personId: e.personId, at: e.at, source: e.source === 'slack' || e.source === 'agent' ? e.source : 'dashboard' };
+                    }
+                }
+            }
+            this.cache = out;
+        }
+        catch {
+            this.cache = {};
+        }
+        return this.cache;
+    }
+    /**
+     * Save atomically (best effort: the in-memory record still applies).
+     *
+     * @param all - Records
+     */
+    save(all) {
+        this.cache = all;
+        try {
+            const target = this.filePath();
+            fs.mkdirSync(path.dirname(target), { recursive: true });
+            const tmp = `${target}.${process.pid}.tmp`;
+            fs.writeFileSync(tmp, `${JSON.stringify({ version: 1, sessions: all }, null, 2)}\n`, 'utf-8');
+            fs.renameSync(tmp, target);
+        }
+        catch {
+            // kept in memory
+        }
+    }
+}
+let instance = null;
+/**
+ * The backend's acting-for record.
+ *
+ * @returns Singleton
+ */
+export function getActingFor() {
+    instance ??= new ActingForService();
+    return instance;
+}
+/**
+ * Replace the singleton (tests).
+ *
+ * @param service - Instance, or null to reset
+ */
+export function setActingForForTesting(service) {
+    instance = service;
+}
+const actorStore = new AsyncLocalStorage();
+/**
+ * Run work as a person: connector token requests made inside carry that
+ * person to Cloud.
+ *
+ * @param actor - Person
+ * @param fn - Work
+ * @returns What `fn` returns
+ */
+export function runAsActor(actor, fn) {
+    return actorStore.run(actor, fn);
+}
+/**
+ * The person the current request acts for.
+ *
+ * @returns Actor, or null outside a connector request (backend-internal calls)
+ */
+export function currentActor() {
+    return actorStore.getStore() ?? null;
+}
+/**
+ * Headers that tell Cloud who a credential request is for.
+ *
+ * @param actor - Person (default: the current request's)
+ * @returns Headers (empty outside a connector request)
+ */
+export function actingForHeaders(actor = currentActor()) {
+    if (!actor)
+        return {};
+    return { [PEOPLE_CONSTANTS.ACTING_FOR_HEADER]: actor.id, [PEOPLE_CONSTANTS.ACTING_FOR_ROLE_HEADER]: actor.role };
+}
+/**
+ * Cache-key suffix for a token fetched for the current person, so one
+ * person's cached token is never handed to another.
+ *
+ * @param actor - Person (default: the current request's)
+ * @returns `''` outside a connector request, else `\0<person id>`
+ */
+export function actorCacheSuffix(actor = currentActor()) {
+    return actor ? `\0${actor.id}` : '';
+}
+//# sourceMappingURL=acting-for.service.js.map

package/dist/backend/backend/src/services/people/acting-for.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acting-for.service.js","sourceRoot":"","sources":["../../../../../../backend/src/services/people/acting-for.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAgD,MAAM,+BAA+B,CAAC;AA6BjH,6BAA6B;AAC7B,MAAM,OAAO,gBAAgB;IACX,gBAAgB,CAAU;IAC1B,MAAM,CAA+B;IACrC,GAAG,CAAe;IAC3B,KAAK,GAA0C,IAAI,CAAC;IAE5D;;OAEG;IACH,YAAY,OAAsB,EAAE;QACnC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,kBAAkB,CAAC;QAChD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,OAAe,EAAE,QAAgB,EAAE,MAAuB;QAChE,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;YAAE,OAAO;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO;QAClF,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5E,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IAED;;;;;;OAMG;IACH,kBAAkB,CAAC,OAAe,EAAE,WAAsC;QACzE,IAAI,WAAW,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YAC3C,IAAI,CAAC;gBACJ,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACR,oCAAoC;YACrC,CAAC;YACD,OAAO;QACR,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,MAAc,EAAE,WAAmB;QAC1C,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,IAAI,MAAM,KAAK,WAAW;YAAE,OAAO;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,IAAI,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;IAED;;;;;OAKG;IACH,GAAG,CAAC,OAAe;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACpC,CAAC;IAED;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAuB;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACjE,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;IACtE,CAAC;IAED,iCAAiC;IACjC,KAAK;QACJ,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IAED,0BAA0B;IAClB,QAAQ;QACf,OAAO,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,gBAAgB,CAAC,eAAe,CAAC,CAAC;IAClG,CAAC;IAED,oDAAoD;IAC5C,IAAI;QACX,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC;YACJ,MAAM,GAAG,GAAY,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;YAC3E,MAAM,QAAQ,GAAG,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAE,GAA8B,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACvG,MAAM,GAAG,GAAmC,EAAE,CAAC;YAC/C,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC9C,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAmD,CAAC,EAAE,CAAC;oBAC7F,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;wBACrE,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;oBAC/H,CAAC;gBACF,CAAC;YACF,CAAC;YACD,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QACjB,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACK,IAAI,CAAC,GAAmC;QAC/C,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;QACjB,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;YAC3C,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC9F,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACR,iBAAiB;QAClB,CAAC;IACF,CAAC;CACD;AAED,IAAI,QAAQ,GAA4B,IAAI,CAAC;AAE7C;;;;GAIG;AACH,MAAM,UAAU,YAAY;IAC3B,QAAQ,KAAK,IAAI,gBAAgB,EAAE,CAAC;IACpC,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACtE,QAAQ,GAAG,OAAO,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,iBAAiB,EAAS,CAAC;AAElD;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAI,KAAY,EAAE,EAAW;IACtD,OAAO,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY;IAC3B,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAsB,YAAY,EAAE;IACpE,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,OAAO,EAAE,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;AAClH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAsB,YAAY,EAAE;IACpE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACrC,CAAC"}

package/dist/backend/backend/src/services/people/dedicated-agent.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Dedicated agents (issue #968): an agent bound to one person works only for
+ * them. When anyone else DMs it or @'s it, it does no work and is not woken —
+ * it answers once with a polite decline that points to the team lead.
+ *
+ * The decision is made where a Slack message enters (the agent-DM and team
+ * channel routers), before anything is recorded, dispatched or woken.
+ * Messages from other agents are never declined: delegation still works.
+ *
+ * specs/per-person-access.md
+ *
+ * @module services/people/dedicated-agent
+ */
+import type { Team, TeamMember } from '../../types/index.js';
+import { type PeopleDirectoryService } from './people-directory.service.js';
+/** A message's sender, as far as the decision needs it. */
+export interface DedicatedSender {
+    /** Slack user id of the human who wrote it */
+    slackUserId?: string | null;
+    /** Set when another agent wrote it */
+    authorAgentSession?: string | null;
+}
+/** The decision for one message to one agent. */
+export type DedicatedDecision = {
+    decline: false;
+} | {
+    decline: true;
+    text: string;
+};
+/**
+ * Whether a person id is the one an agent is dedicated to.
+ *
+ * @param dedicatedTo - The member's `dedicatedTo`
+ * @param sender - Sender's Slack user id
+ * @param people - Directory (owner matching)
+ * @returns True when they are the same person
+ */
+export declare function isDedicatedPerson(dedicatedTo: string, sender: string, people: Pick<PeopleDirectoryService, 'isOwner'>): boolean;
+/**
+ * The polite decline: who the agent works for, and where to go instead.
+ *
+ * @param member - The dedicated agent
+ * @param team - Its team (for the lead), when known
+ * @param senderSlackUserId - The person to answer
+ * @param people - Directory (names)
+ * @returns Slack mrkdwn text
+ *
+ * @example
+ * ```ts
+ * declineText(member, team, 'U0STEVE');
+ * // "Hi <@U0STEVE>, I'm Info's personal assistant, so I can't take this on. For this, please ask Ella (team lead)."
+ * ```
+ */
+export declare function declineText(member: Pick<TeamMember, 'id' | 'name' | 'dedicatedTo'>, team: Pick<Team, 'members' | 'leaderId' | 'leaderIds'> | null, senderSlackUserId: string, people?: Pick<PeopleDirectoryService, 'displayName'>): string;
+/**
+ * Decide whether an agent declines a message.
+ *
+ * @param member - The receiving agent (with its `dedicatedTo`)
+ * @param team - Its team, when known
+ * @param sender - Who wrote the message
+ * @param people - Directory (default: the backend's)
+ * @returns `{ decline: true, text }` for a human other than the agent's person
+ */
+export declare function dedicatedDecision(member: Pick<TeamMember, 'id' | 'name' | 'dedicatedTo'> | null | undefined, team: Pick<Team, 'members' | 'leaderId' | 'leaderIds'> | null, sender: DedicatedSender, people?: Pick<PeopleDirectoryService, 'isOwner' | 'displayName'>): DedicatedDecision;
+/** Where an agent's member record and team come from. */
+export interface DedicatedLookup {
+    getTeams(): Promise<Team[]>;
+}
+/**
+ * The member record and team of an agent session.
+ *
+ * @param storage - Team storage
+ * @param sessionName - Agent session
+ * @returns Both, or null when the session is not a team member (the orchestrator, a smoke test)
+ */
+export declare function findMemberWithTeam(storage: DedicatedLookup, sessionName: string): Promise<{
+    member: TeamMember;
+    team: Team;
+} | null>;
+/**
+ * Decide for an agent session (looks the member up).
+ *
+ * @param storage - Team storage
+ * @param sessionName - Receiving agent session
+ * @param sender - Who wrote the message
+ * @returns The decision (no decline when the agent is unknown or shared)
+ */
+export declare function dedicatedDecisionFor(storage: DedicatedLookup, sessionName: string, sender: DedicatedSender): Promise<DedicatedDecision>;
+//# sourceMappingURL=dedicated-agent.d.ts.map

package/dist/backend/backend/src/services/people/dedicated-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dedicated-agent.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/people/dedicated-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAE7D,OAAO,EAAsB,KAAK,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAEhG,2DAA2D;AAC3D,MAAM,WAAW,eAAe;IAC/B,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,sCAAsC;IACtC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,iDAAiD;AACjD,MAAM,MAAM,iBAAiB,GAAG;IAAE,OAAO,EAAE,KAAK,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErF;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,sBAAsB,EAAE,SAAS,CAAC,GAAG,OAAO,CAG/H;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,WAAW,CAC1B,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,MAAM,GAAG,aAAa,CAAC,EACvD,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,CAAC,GAAG,IAAI,EAC7D,iBAAiB,EAAE,MAAM,EACzB,MAAM,GAAE,IAAI,CAAC,sBAAsB,EAAE,aAAa,CAAwB,GACxE,MAAM,CAMR;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAChC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,MAAM,GAAG,aAAa,CAAC,GAAG,IAAI,GAAG,SAAS,EAC1E,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,CAAC,GAAG,IAAI,EAC7D,MAAM,EAAE,eAAe,EACvB,MAAM,GAAE,IAAI,CAAC,sBAAsB,EAAE,SAAS,GAAG,aAAa,CAAwB,GACpF,iBAAiB,CAOnB;AAED,yDAAyD;AACzD,MAAM,WAAW,eAAe;IAC/B,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,IAAI,CAAA;CAAE,GAAG,IAAI,CAAC,CAU1I;AAED;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAS7I"}

package/dist/backend/backend/src/services/people/dedicated-agent.js

@@ -0,0 +1,113 @@
+/**
+ * Dedicated agents (issue #968): an agent bound to one person works only for
+ * them. When anyone else DMs it or @'s it, it does no work and is not woken —
+ * it answers once with a polite decline that points to the team lead.
+ *
+ * The decision is made where a Slack message enters (the agent-DM and team
+ * channel routers), before anything is recorded, dispatched or woken.
+ * Messages from other agents are never declined: delegation still works.
+ *
+ * specs/per-person-access.md
+ *
+ * @module services/people/dedicated-agent
+ */
+import { getTeamLeads } from '../../utils/team.utils.js';
+import { getPeopleDirectory } from './people-directory.service.js';
+/**
+ * Whether a person id is the one an agent is dedicated to.
+ *
+ * @param dedicatedTo - The member's `dedicatedTo`
+ * @param sender - Sender's Slack user id
+ * @param people - Directory (owner matching)
+ * @returns True when they are the same person
+ */
+export function isDedicatedPerson(dedicatedTo, sender, people) {
+    if (dedicatedTo === sender)
+        return true;
+    return people.isOwner(dedicatedTo) && people.isOwner(sender);
+}
+/**
+ * The polite decline: who the agent works for, and where to go instead.
+ *
+ * @param member - The dedicated agent
+ * @param team - Its team (for the lead), when known
+ * @param senderSlackUserId - The person to answer
+ * @param people - Directory (names)
+ * @returns Slack mrkdwn text
+ *
+ * @example
+ * ```ts
+ * declineText(member, team, 'U0STEVE');
+ * // "Hi <@U0STEVE>, I'm Info's personal assistant, so I can't take this on. For this, please ask Ella (team lead)."
+ * ```
+ */
+export function declineText(member, team, senderSlackUserId, people = getPeopleDirectory()) {
+    const owner = member.dedicatedTo ? people.displayName(member.dedicatedTo) : 'someone else';
+    const whose = owner === 'the owner' ? "the owner's" : `${owner}'s`;
+    const lead = team ? getTeamLeads(team).find((m) => m.id !== member.id) : undefined;
+    const pointer = lead ? `${lead.name} (team lead)` : 'the Orc (the orchestrator)';
+    return `Hi <@${senderSlackUserId}>, I'm ${whose} personal assistant, so I can't take this on. For this, please ask ${pointer}.`;
+}
+/**
+ * Decide whether an agent declines a message.
+ *
+ * @param member - The receiving agent (with its `dedicatedTo`)
+ * @param team - Its team, when known
+ * @param sender - Who wrote the message
+ * @param people - Directory (default: the backend's)
+ * @returns `{ decline: true, text }` for a human other than the agent's person
+ */
+export function dedicatedDecision(member, team, sender, people = getPeopleDirectory()) {
+    if (!member?.dedicatedTo)
+        return { decline: false };
+    if (sender.authorAgentSession)
+        return { decline: false };
+    const slackUserId = sender.slackUserId;
+    if (!slackUserId)
+        return { decline: false };
+    if (isDedicatedPerson(member.dedicatedTo, slackUserId, people))
+        return { decline: false };
+    return { decline: true, text: declineText(member, team, slackUserId, people) };
+}
+/**
+ * The member record and team of an agent session.
+ *
+ * @param storage - Team storage
+ * @param sessionName - Agent session
+ * @returns Both, or null when the session is not a team member (the orchestrator, a smoke test)
+ */
+export async function findMemberWithTeam(storage, sessionName) {
+    try {
+        for (const team of await storage.getTeams()) {
+            const member = team.members?.find((m) => m.sessionName === sessionName);
+            if (member)
+                return { member, team };
+        }
+    }
+    catch {
+        // storage unavailable: no decision
+    }
+    return null;
+}
+/**
+ * Decide for an agent session (looks the member up).
+ *
+ * @param storage - Team storage
+ * @param sessionName - Receiving agent session
+ * @param sender - Who wrote the message
+ * @returns The decision (no decline when the agent is unknown or shared)
+ */
+export async function dedicatedDecisionFor(storage, sessionName, sender) {
+    if (!sender.slackUserId || sender.authorAgentSession)
+        return { decline: false };
+    const found = await findMemberWithTeam(storage, sessionName);
+    if (!found?.member.dedicatedTo)
+        return { decline: false };
+    try {
+        return dedicatedDecision(found.member, found.team, sender);
+    }
+    catch {
+        return { decline: false };
+    }
+}
+//# sourceMappingURL=dedicated-agent.js.map

package/dist/backend/backend/src/services/people/dedicated-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dedicated-agent.js","sourceRoot":"","sources":["../../../../../../backend/src/services/people/dedicated-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAA+B,MAAM,+BAA+B,CAAC;AAahG;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAmB,EAAE,MAAc,EAAE,MAA+C;IACrH,IAAI,WAAW,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,WAAW,CAC1B,MAAuD,EACvD,IAA6D,EAC7D,iBAAyB,EACzB,SAAsD,kBAAkB,EAAE;IAE1E,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;IAC3F,MAAM,KAAK,GAAG,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC;IACnE,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,4BAA4B,CAAC;IACjF,OAAO,QAAQ,iBAAiB,UAAU,KAAK,sEAAsE,OAAO,GAAG,CAAC;AACjI,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAChC,MAA0E,EAC1E,IAA6D,EAC7D,MAAuB,EACvB,SAAkE,kBAAkB,EAAE;IAEtF,IAAI,CAAC,MAAM,EAAE,WAAW;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACpD,IAAI,MAAM,CAAC,kBAAkB;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACzD,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACvC,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5C,IAAI,iBAAiB,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC1F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC;AAChF,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAwB,EAAE,WAAmB;IACrF,IAAI,CAAC;QACJ,KAAK,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;YACxE,IAAI,MAAM;gBAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACrC,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,mCAAmC;IACpC,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAwB,EAAE,WAAmB,EAAE,MAAuB;IAChH,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,kBAAkB;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAChF,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC1D,IAAI,CAAC;QACJ,OAAO,iBAAiB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;AACF,CAAC"}

package/dist/backend/backend/src/services/people/grant-sharing.d.ts

@@ -0,0 +1,79 @@
+/**
+ * Connector grant ownership and sharing (issue #968) — the shapes the
+ * backend exchanges with Cloud, their validation, and the message an agent
+ * gets when the person it acts for may not use a grant.
+ *
+ * Cloud holds each grant's `authorizedBy` (the person who connected it) and
+ * `sharing`, and decides on every credential request. A grant with neither is
+ * the owner's alone.
+ *
+ * specs/per-person-access.md
+ *
+ * @module services/people/grant-sharing
+ */
+import type { Actor } from './acting-for.service.js';
+/** Who may use a grant besides the person who authorized it. */
+export interface GrantSharing {
+    /** `owner`: only the person who authorized it; `people`: also the named people; `members`: every member (not guests) */
+    mode: 'owner' | 'people' | 'members';
+    /** For `people`: person ids (Slack user ids) */
+    people?: string[];
+}
+/** A grant's ownership, as Cloud reports it. */
+export interface GrantOwnership {
+    /** Person who authorized it (Slack user id, or `owner`); absent = the owner */
+    authorizedBy?: string;
+    /** Absent = owner only */
+    sharing?: GrantSharing;
+}
+/** A sharing/ownership edit is invalid. */
+export declare class GrantSharingError extends Error {
+}
+/**
+ * Validate a sharing setting from the dashboard.
+ *
+ * @param raw - Candidate (untrusted)
+ * @returns Clean sharing
+ * @throws GrantSharingError when invalid
+ */
+export declare function validateSharing(raw: unknown): GrantSharing;
+/**
+ * Validate an owner change (a person id).
+ *
+ * @param raw - Candidate
+ * @returns The person id
+ * @throws GrantSharingError when invalid
+ */
+export declare function validateAuthorizedBy(raw: unknown): string;
+/**
+ * Whether a person may use a grant — the same rule Cloud applies (used for
+ * the dashboard's preview and tests).
+ *
+ * @param grant - Ownership (missing fields = the owner's alone)
+ * @param actor - The person
+ * @param isOwner - Whether a person id is the instance owner
+ * @returns True when allowed
+ */
+export declare function mayUseGrant(grant: GrantOwnership, actor: Pick<Actor, 'id' | 'role'>, isOwner: (id: string) => boolean): boolean;
+/**
+ * The message an agent gets when the person it acts for may not use a grant,
+ * e.g. "Info's Google Calendar isn't shared with you. Ask Info for what you
+ * need, or ask the Crewly owner to share it in Connections."
+ *
+ * @param what - What was asked for ("Google Calendar", "Canva")
+ * @param authorizedBy - Person who owns the grant, when Cloud said
+ * @returns English message
+ */
+export declare function notPermittedMessage(what: string, authorizedBy?: string | null): string;
+/** Display names of Google products, for refusals. */
+export declare const GOOGLE_PRODUCT_LABELS: Readonly<Record<string, string>>;
+/**
+ * Read Cloud's refusal from a failed response body.
+ *
+ * @param body - Parsed body (untrusted)
+ * @returns `{ authorizedBy }` when it is a `not_permitted` refusal, else null
+ */
+export declare function readNotPermitted(body: unknown): {
+    authorizedBy?: string;
+} | null;
+//# sourceMappingURL=grant-sharing.d.ts.map

package/dist/backend/backend/src/services/people/grant-sharing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-sharing.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/people/grant-sharing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAGrD,gEAAgE;AAChE,MAAM,WAAW,YAAY;IAC5B,wHAAwH;IACxH,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;IACrC,gDAAgD;IAChD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,gDAAgD;AAChD,MAAM,WAAW,cAAc;IAC9B,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0BAA0B;IAC1B,OAAO,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,2CAA2C;AAC3C,qBAAa,iBAAkB,SAAQ,KAAK;CAAG;AAE/C;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,CAc1D;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAGzD;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,GAAG,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAQ/H;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAmBtF;AAED,sDAAsD;AACtD,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOlE,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG;IAAE,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAMhF"}

package/dist/backend/backend/src/services/people/grant-sharing.js

@@ -0,0 +1,135 @@
+/**
+ * Connector grant ownership and sharing (issue #968) — the shapes the
+ * backend exchanges with Cloud, their validation, and the message an agent
+ * gets when the person it acts for may not use a grant.
+ *
+ * Cloud holds each grant's `authorizedBy` (the person who connected it) and
+ * `sharing`, and decides on every credential request. A grant with neither is
+ * the owner's alone.
+ *
+ * specs/per-person-access.md
+ *
+ * @module services/people/grant-sharing
+ */
+import { PEOPLE_CONSTANTS } from '../../constants.js';
+import { getPeopleDirectory, isPersonId } from './people-directory.service.js';
+/** A sharing/ownership edit is invalid. */
+export class GrantSharingError extends Error {
+}
+/**
+ * Validate a sharing setting from the dashboard.
+ *
+ * @param raw - Candidate (untrusted)
+ * @returns Clean sharing
+ * @throws GrantSharingError when invalid
+ */
+export function validateSharing(raw) {
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+        throw new GrantSharingError('sharing must be an object');
+    const r = raw;
+    if (typeof r.mode !== 'string' || !PEOPLE_CONSTANTS.SHARING_MODES.includes(r.mode)) {
+        throw new GrantSharingError('sharing.mode must be owner, people or members');
+    }
+    if (r.mode !== 'people')
+        return { mode: r.mode };
+    if (!Array.isArray(r.people))
+        throw new GrantSharingError('sharing.people must be a list of people');
+    const people = [];
+    for (const id of r.people) {
+        if (!isPersonId(id))
+            throw new GrantSharingError(`Not a person: ${String(id)}`);
+        if (!people.includes(id))
+            people.push(id);
+    }
+    return { mode: 'people', people };
+}
+/**
+ * Validate an owner change (a person id).
+ *
+ * @param raw - Candidate
+ * @returns The person id
+ * @throws GrantSharingError when invalid
+ */
+export function validateAuthorizedBy(raw) {
+    if (!isPersonId(raw))
+        throw new GrantSharingError('authorizedBy must be a person (a Slack user id, or owner)');
+    return raw;
+}
+/**
+ * Whether a person may use a grant — the same rule Cloud applies (used for
+ * the dashboard's preview and tests).
+ *
+ * @param grant - Ownership (missing fields = the owner's alone)
+ * @param actor - The person
+ * @param isOwner - Whether a person id is the instance owner
+ * @returns True when allowed
+ */
+export function mayUseGrant(grant, actor, isOwner) {
+    const authorizedBy = grant.authorizedBy ?? PEOPLE_CONSTANTS.OWNER_ID;
+    if (actor.id === authorizedBy)
+        return true;
+    if (isOwner(authorizedBy) && (actor.role === 'owner' || isOwner(actor.id)))
+        return true;
+    const sharing = grant.sharing ?? { mode: 'owner' };
+    if (sharing.mode === 'members')
+        return actor.role === 'owner' || actor.role === 'member';
+    if (sharing.mode === 'people')
+        return (sharing.people ?? []).includes(actor.id);
+    return false;
+}
+/**
+ * The message an agent gets when the person it acts for may not use a grant,
+ * e.g. "Info's Google Calendar isn't shared with you. Ask Info for what you
+ * need, or ask the Crewly owner to share it in Connections."
+ *
+ * @param what - What was asked for ("Google Calendar", "Canva")
+ * @param authorizedBy - Person who owns the grant, when Cloud said
+ * @returns English message
+ */
+export function notPermittedMessage(what, authorizedBy) {
+    let name = null;
+    let ownerGrant = false;
+    if (authorizedBy) {
+        try {
+            const people = getPeopleDirectory();
+            ownerGrant = people.isOwner(authorizedBy);
+            const display = people.displayName(authorizedBy);
+            name = display === 'the owner' ? null : display;
+        }
+        catch {
+            name = null;
+        }
+    }
+    if (ownerGrant) {
+        const who = name ?? 'the owner';
+        return `${name ? `${name}'s` : "The owner's"} ${what} isn't shared with you. Ask ${who} to share it in Connections.`;
+    }
+    if (name)
+        return `${name}'s ${what} isn't shared with you. Ask ${name} for what you need, or ask the Crewly owner to share it in Connections.`;
+    return `This ${what} isn't shared with you. Ask the Crewly owner to share it in Connections.`;
+}
+/** Display names of Google products, for refusals. */
+export const GOOGLE_PRODUCT_LABELS = {
+    gmail: 'Gmail',
+    calendar: 'Google Calendar',
+    drive: 'Google Drive',
+    docs: 'Google Docs',
+    sheets: 'Google Sheets',
+    slides: 'Google Slides',
+};
+/**
+ * Read Cloud's refusal from a failed response body.
+ *
+ * @param body - Parsed body (untrusted)
+ * @returns `{ authorizedBy }` when it is a `not_permitted` refusal, else null
+ */
+export function readNotPermitted(body) {
+    if (!body || typeof body !== 'object')
+        return null;
+    const b = body;
+    if (b.code !== PEOPLE_CONSTANTS.NOT_PERMITTED_CODE && b.error !== PEOPLE_CONSTANTS.NOT_PERMITTED_CODE)
+        return null;
+    const details = b.details && typeof b.details === 'object' ? b.details : {};
+    return typeof details.authorizedBy === 'string' ? { authorizedBy: details.authorizedBy } : {};
+}
+//# sourceMappingURL=grant-sharing.js.map