crewly 1.20.192 → 1.20.193

package/dist/cli/backend/src/services/people/acting-for.service.d.ts

@@ -0,0 +1,151 @@
+/**
+ * Acting-for — the person each agent session is working for right now
+ * (issue #968).
+ *
+ * Every human message delivered to an agent records its sender as the person
+ * that agent acts for until the next human message: a Slack message records
+ * the sender's Slack user id, a dashboard message records the owner. A
+ * message one agent sends another passes the sender's person on, so work
+ * delegated for Info stays Info's. Scheduled and system turns change nothing.
+ *
+ * The record is set only by the backend from what it delivered — never from
+ * anything an agent sends — and connector credential requests carry it to
+ * Cloud, which decides whether that person may use the grant.
+ *
+ * Kept in `<CREWLY_HOME>/acting-for.json` so a restart does not turn a
+ * member's in-flight turn into the owner's.
+ *
+ * specs/per-person-access.md
+ *
+ * @module services/people/acting-for.service
+ */
+import { type PeopleDirectoryService, type PersonRole } from './people-directory.service.js';
+/** Where an acting-for record came from. */
+export type ActingForSource = 'slack' | 'dashboard' | 'agent';
+/** One session's record. */
+export interface ActingForEntry {
+    /** Person id (Slack user id, or `owner`) */
+    personId: string;
+    source: ActingForSource;
+    /** ISO time it was recorded */
+    at: string;
+}
+/** The person a request acts for, as Cloud is told. */
+export interface Actor {
+    id: string;
+    role: PersonRole;
+    /** Display name, for messages */
+    name: string;
+}
+/** Injectable dependencies. */
+export interface ActingForDeps {
+    filePath?: string;
+    people?: () => PeopleDirectoryService;
+    now?: () => number;
+}
+/** The acting-for record. */
+export declare class ActingForService {
+    private readonly filePathOverride?;
+    private readonly people;
+    private readonly now;
+    private cache;
+    /**
+     * @param deps - Store path, people directory, clock
+     */
+    constructor(deps?: ActingForDeps);
+    /**
+     * Record that a session now acts for a person.
+     *
+     * @param session - Agent session name
+     * @param personId - Slack user id, or `owner`
+     * @param source - What delivered the message
+     */
+    record(session: string, personId: string, source: ActingForSource): void;
+    /**
+     * Record a human message delivered to a session: a Slack sender, or the
+     * owner when it carries no Slack sender (dashboard / terminal).
+     *
+     * @param session - Agent session name
+     * @param slackUserId - Sender's Slack user id, when the message came from Slack
+     */
+    recordHumanMessage(session: string, slackUserId: string | null | undefined): void;
+    /**
+     * A message from one agent to another: the target acts for whoever the
+     * sender acts for (the owner when the sender has no record).
+     *
+     * @param target - Receiving session
+     * @param fromSession - Sending session
+     */
+    inherit(target: string, fromSession: string): void;
+    /**
+     * A session's record.
+     *
+     * @param session - Agent session name
+     * @returns Entry, or null when the session never got a human message
+     */
+    get(session: string): ActingForEntry | null;
+    /**
+     * The person a request acts for: the owner for a request with no agent
+     * session (the owner's dashboard), else the session's record (the owner
+     * when it has none).
+     *
+     * @param session - Calling agent session, if any
+     * @returns Actor
+     */
+    actorFor(session?: string | null): Actor;
+    /** Forget everything (tests). */
+    clear(): void;
+    /** @returns Store path */
+    private filePath;
+    /** @returns All records (read once, then cached) */
+    private load;
+    /**
+     * Save atomically (best effort: the in-memory record still applies).
+     *
+     * @param all - Records
+     */
+    private save;
+}
+/**
+ * The backend's acting-for record.
+ *
+ * @returns Singleton
+ */
+export declare function getActingFor(): ActingForService;
+/**
+ * Replace the singleton (tests).
+ *
+ * @param service - Instance, or null to reset
+ */
+export declare function setActingForForTesting(service: ActingForService | null): void;
+/**
+ * Run work as a person: connector token requests made inside carry that
+ * person to Cloud.
+ *
+ * @param actor - Person
+ * @param fn - Work
+ * @returns What `fn` returns
+ */
+export declare function runAsActor<T>(actor: Actor, fn: () => T): T;
+/**
+ * The person the current request acts for.
+ *
+ * @returns Actor, or null outside a connector request (backend-internal calls)
+ */
+export declare function currentActor(): Actor | null;
+/**
+ * Headers that tell Cloud who a credential request is for.
+ *
+ * @param actor - Person (default: the current request's)
+ * @returns Headers (empty outside a connector request)
+ */
+export declare function actingForHeaders(actor?: Actor | null): Record<string, string>;
+/**
+ * Cache-key suffix for a token fetched for the current person, so one
+ * person's cached token is never handed to another.
+ *
+ * @param actor - Person (default: the current request's)
+ * @returns `''` outside a connector request, else `\0<person id>`
+ */
+export declare function actorCacheSuffix(actor?: Actor | null): string;
+//# sourceMappingURL=acting-for.service.d.ts.map

package/dist/cli/backend/src/services/people/acting-for.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"acting-for.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/people/acting-for.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAOH,OAAO,EAAsB,KAAK,sBAAsB,EAAE,KAAK,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAEjH,4CAA4C;AAC5C,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,WAAW,GAAG,OAAO,CAAC;AAE9D,4BAA4B;AAC5B,MAAM,WAAW,cAAc;IAC9B,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,eAAe,CAAC;IACxB,+BAA+B;IAC/B,EAAE,EAAE,MAAM,CAAC;CACX;AAED,uDAAuD;AACvD,MAAM,WAAW,KAAK;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,UAAU,CAAC;IACjB,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;CACb;AAED,+BAA+B;AAC/B,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,sBAAsB,CAAC;IACtC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACnB;AAED,6BAA6B;AAC7B,qBAAa,gBAAgB;IAC5B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;IACtD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,KAAK,CAA+C;IAE5D;;OAEG;gBACS,IAAI,GAAE,aAAkB;IAMpC;;;;;;OAMG;IACH,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI;IASxE;;;;;;OAMG;IACH,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI;IAajF;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI;IAMlD;;;;;OAKG;IACH,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAK3C;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,KAAK;IAOxC,iCAAiC;IACjC,KAAK,IAAI,IAAI;IAIb,0BAA0B;IAC1B,OAAO,CAAC,QAAQ;IAIhB,oDAAoD;IACpD,OAAO,CAAC,IAAI;IAoBZ;;;;OAIG;IACH,OAAO,CAAC,IAAI;CAYZ;AAID;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,gBAAgB,CAG/C;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAE7E;AAID;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAE1D;AAED;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,KAAK,GAAG,IAAI,CAE3C;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,GAAE,KAAK,GAAG,IAAqB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAG7F;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,GAAE,KAAK,GAAG,IAAqB,GAAG,MAAM,CAE7E"}

package/dist/cli/backend/src/services/people/acting-for.service.js

@@ -0,0 +1,224 @@
+/**
+ * Acting-for — the person each agent session is working for right now
+ * (issue #968).
+ *
+ * Every human message delivered to an agent records its sender as the person
+ * that agent acts for until the next human message: a Slack message records
+ * the sender's Slack user id, a dashboard message records the owner. A
+ * message one agent sends another passes the sender's person on, so work
+ * delegated for Info stays Info's. Scheduled and system turns change nothing.
+ *
+ * The record is set only by the backend from what it delivered — never from
+ * anything an agent sends — and connector credential requests carry it to
+ * Cloud, which decides whether that person may use the grant.
+ *
+ * Kept in `<CREWLY_HOME>/acting-for.json` so a restart does not turn a
+ * member's in-flight turn into the owner's.
+ *
+ * specs/per-person-access.md
+ *
+ * @module services/people/acting-for.service
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import { AsyncLocalStorage } from 'async_hooks';
+import { PEOPLE_CONSTANTS } from '../../constants.js';
+import { getCrewlyHomePath } from '../core/crewly-home.utils.js';
+import { getPeopleDirectory } from './people-directory.service.js';
+/** The acting-for record. */
+export class ActingForService {
+    filePathOverride;
+    people;
+    now;
+    cache = null;
+    /**
+     * @param deps - Store path, people directory, clock
+     */
+    constructor(deps = {}) {
+        this.filePathOverride = deps.filePath;
+        this.people = deps.people ?? getPeopleDirectory;
+        this.now = deps.now ?? (() => Date.now());
+    }
+    /**
+     * Record that a session now acts for a person.
+     *
+     * @param session - Agent session name
+     * @param personId - Slack user id, or `owner`
+     * @param source - What delivered the message
+     */
+    record(session, personId, source) {
+        if (!session || !personId)
+            return;
+        const all = this.load();
+        const current = all[session];
+        if (current && current.personId === personId && current.source === source)
+            return;
+        all[session] = { personId, source, at: new Date(this.now()).toISOString() };
+        this.save(all);
+    }
+    /**
+     * Record a human message delivered to a session: a Slack sender, or the
+     * owner when it carries no Slack sender (dashboard / terminal).
+     *
+     * @param session - Agent session name
+     * @param slackUserId - Sender's Slack user id, when the message came from Slack
+     */
+    recordHumanMessage(session, slackUserId) {
+        if (slackUserId && PEOPLE_CONSTANTS.SLACK_USER_ID_PATTERN.test(slackUserId)) {
+            this.record(session, slackUserId, 'slack');
+            try {
+                this.people().noteSeen(slackUserId);
+            }
+            catch {
+                // the directory is best effort here
+            }
+            return;
+        }
+        this.record(session, PEOPLE_CONSTANTS.OWNER_ID, 'dashboard');
+    }
+    /**
+     * A message from one agent to another: the target acts for whoever the
+     * sender acts for (the owner when the sender has no record).
+     *
+     * @param target - Receiving session
+     * @param fromSession - Sending session
+     */
+    inherit(target, fromSession) {
+        if (!target || !fromSession || target === fromSession)
+            return;
+        const from = this.load()[fromSession];
+        this.record(target, from?.personId ?? PEOPLE_CONSTANTS.OWNER_ID, 'agent');
+    }
+    /**
+     * A session's record.
+     *
+     * @param session - Agent session name
+     * @returns Entry, or null when the session never got a human message
+     */
+    get(session) {
+        const entry = this.load()[session];
+        return entry ? { ...entry } : null;
+    }
+    /**
+     * The person a request acts for: the owner for a request with no agent
+     * session (the owner's dashboard), else the session's record (the owner
+     * when it has none).
+     *
+     * @param session - Calling agent session, if any
+     * @returns Actor
+     */
+    actorFor(session) {
+        const people = this.people();
+        const raw = session ? this.load()[session]?.personId : undefined;
+        const id = !raw || people.isOwner(raw) ? people.ownerId() : raw;
+        return { id, role: people.roleOf(id), name: people.displayName(id) };
+    }
+    /** Forget everything (tests). */
+    clear() {
+        this.save({});
+    }
+    /** @returns Store path */
+    filePath() {
+        return this.filePathOverride ?? path.join(getCrewlyHomePath(), PEOPLE_CONSTANTS.ACTING_FOR_FILE);
+    }
+    /** @returns All records (read once, then cached) */
+    load() {
+        if (this.cache)
+            return this.cache;
+        try {
+            const raw = JSON.parse(fs.readFileSync(this.filePath(), 'utf-8'));
+            const sessions = raw && typeof raw === 'object' ? raw.sessions : undefined;
+            const out = {};
+            if (sessions && typeof sessions === 'object') {
+                for (const [name, e] of Object.entries(sessions)) {
+                    if (e && typeof e.personId === 'string' && typeof e.at === 'string') {
+                        out[name] = { personId: e.personId, at: e.at, source: e.source === 'slack' || e.source === 'agent' ? e.source : 'dashboard' };
+                    }
+                }
+            }
+            this.cache = out;
+        }
+        catch {
+            this.cache = {};
+        }
+        return this.cache;
+    }
+    /**
+     * Save atomically (best effort: the in-memory record still applies).
+     *
+     * @param all - Records
+     */
+    save(all) {
+        this.cache = all;
+        try {
+            const target = this.filePath();
+            fs.mkdirSync(path.dirname(target), { recursive: true });
+            const tmp = `${target}.${process.pid}.tmp`;
+            fs.writeFileSync(tmp, `${JSON.stringify({ version: 1, sessions: all }, null, 2)}\n`, 'utf-8');
+            fs.renameSync(tmp, target);
+        }
+        catch {
+            // kept in memory
+        }
+    }
+}
+let instance = null;
+/**
+ * The backend's acting-for record.
+ *
+ * @returns Singleton
+ */
+export function getActingFor() {
+    instance ??= new ActingForService();
+    return instance;
+}
+/**
+ * Replace the singleton (tests).
+ *
+ * @param service - Instance, or null to reset
+ */
+export function setActingForForTesting(service) {
+    instance = service;
+}
+const actorStore = new AsyncLocalStorage();
+/**
+ * Run work as a person: connector token requests made inside carry that
+ * person to Cloud.
+ *
+ * @param actor - Person
+ * @param fn - Work
+ * @returns What `fn` returns
+ */
+export function runAsActor(actor, fn) {
+    return actorStore.run(actor, fn);
+}
+/**
+ * The person the current request acts for.
+ *
+ * @returns Actor, or null outside a connector request (backend-internal calls)
+ */
+export function currentActor() {
+    return actorStore.getStore() ?? null;
+}
+/**
+ * Headers that tell Cloud who a credential request is for.
+ *
+ * @param actor - Person (default: the current request's)
+ * @returns Headers (empty outside a connector request)
+ */
+export function actingForHeaders(actor = currentActor()) {
+    if (!actor)
+        return {};
+    return { [PEOPLE_CONSTANTS.ACTING_FOR_HEADER]: actor.id, [PEOPLE_CONSTANTS.ACTING_FOR_ROLE_HEADER]: actor.role };
+}
+/**
+ * Cache-key suffix for a token fetched for the current person, so one
+ * person's cached token is never handed to another.
+ *
+ * @param actor - Person (default: the current request's)
+ * @returns `''` outside a connector request, else `\0<person id>`
+ */
+export function actorCacheSuffix(actor = currentActor()) {
+    return actor ? `\0${actor.id}` : '';
+}
+//# sourceMappingURL=acting-for.service.js.map

package/dist/cli/backend/src/services/people/acting-for.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acting-for.service.js","sourceRoot":"","sources":["../../../../../../backend/src/services/people/acting-for.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAgD,MAAM,+BAA+B,CAAC;AA6BjH,6BAA6B;AAC7B,MAAM,OAAO,gBAAgB;IACX,gBAAgB,CAAU;IAC1B,MAAM,CAA+B;IACrC,GAAG,CAAe;IAC3B,KAAK,GAA0C,IAAI,CAAC;IAE5D;;OAEG;IACH,YAAY,OAAsB,EAAE;QACnC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,kBAAkB,CAAC;QAChD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,OAAe,EAAE,QAAgB,EAAE,MAAuB;QAChE,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;YAAE,OAAO;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO;QAClF,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5E,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IAED;;;;;;OAMG;IACH,kBAAkB,CAAC,OAAe,EAAE,WAAsC;QACzE,IAAI,WAAW,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YAC3C,IAAI,CAAC;gBACJ,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACR,oCAAoC;YACrC,CAAC;YACD,OAAO;QACR,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,MAAc,EAAE,WAAmB;QAC1C,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,IAAI,MAAM,KAAK,WAAW;YAAE,OAAO;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,IAAI,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;IAED;;;;;OAKG;IACH,GAAG,CAAC,OAAe;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACpC,CAAC;IAED;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAuB;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACjE,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;IACtE,CAAC;IAED,iCAAiC;IACjC,KAAK;QACJ,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IAED,0BAA0B;IAClB,QAAQ;QACf,OAAO,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,gBAAgB,CAAC,eAAe,CAAC,CAAC;IAClG,CAAC;IAED,oDAAoD;IAC5C,IAAI;QACX,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC;YACJ,MAAM,GAAG,GAAY,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;YAC3E,MAAM,QAAQ,GAAG,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAE,GAA8B,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACvG,MAAM,GAAG,GAAmC,EAAE,CAAC;YAC/C,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC9C,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAmD,CAAC,EAAE,CAAC;oBAC7F,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;wBACrE,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;oBAC/H,CAAC;gBACF,CAAC;YACF,CAAC;YACD,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QACjB,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACK,IAAI,CAAC,GAAmC;QAC/C,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;QACjB,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;YAC3C,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC9F,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACR,iBAAiB;QAClB,CAAC;IACF,CAAC;CACD;AAED,IAAI,QAAQ,GAA4B,IAAI,CAAC;AAE7C;;;;GAIG;AACH,MAAM,UAAU,YAAY;IAC3B,QAAQ,KAAK,IAAI,gBAAgB,EAAE,CAAC;IACpC,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACtE,QAAQ,GAAG,OAAO,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,iBAAiB,EAAS,CAAC;AAElD;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAI,KAAY,EAAE,EAAW;IACtD,OAAO,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY;IAC3B,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAsB,YAAY,EAAE;IACpE,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,OAAO,EAAE,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;AAClH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAsB,YAAY,EAAE;IACpE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACrC,CAAC"}

package/dist/cli/backend/src/services/people/dedicated-agent.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Dedicated agents (issue #968): an agent bound to one person works only for
+ * them. When anyone else DMs it or @'s it, it does no work and is not woken —
+ * it answers once with a polite decline that points to the team lead.
+ *
+ * The decision is made where a Slack message enters (the agent-DM and team
+ * channel routers), before anything is recorded, dispatched or woken.
+ * Messages from other agents are never declined: delegation still works.
+ *
+ * specs/per-person-access.md
+ *
+ * @module services/people/dedicated-agent
+ */
+import type { Team, TeamMember } from '../../types/index.js';
+import { type PeopleDirectoryService } from './people-directory.service.js';
+/** A message's sender, as far as the decision needs it. */
+export interface DedicatedSender {
+    /** Slack user id of the human who wrote it */
+    slackUserId?: string | null;
+    /** Set when another agent wrote it */
+    authorAgentSession?: string | null;
+}
+/** The decision for one message to one agent. */
+export type DedicatedDecision = {
+    decline: false;
+} | {
+    decline: true;
+    text: string;
+};
+/**
+ * Whether a person id is the one an agent is dedicated to.
+ *
+ * @param dedicatedTo - The member's `dedicatedTo`
+ * @param sender - Sender's Slack user id
+ * @param people - Directory (owner matching)
+ * @returns True when they are the same person
+ */
+export declare function isDedicatedPerson(dedicatedTo: string, sender: string, people: Pick<PeopleDirectoryService, 'isOwner'>): boolean;
+/**
+ * The polite decline: who the agent works for, and where to go instead.
+ *
+ * @param member - The dedicated agent
+ * @param team - Its team (for the lead), when known
+ * @param senderSlackUserId - The person to answer
+ * @param people - Directory (names)
+ * @returns Slack mrkdwn text
+ *
+ * @example
+ * ```ts
+ * declineText(member, team, 'U0STEVE');
+ * // "Hi <@U0STEVE>, I'm Info's personal assistant, so I can't take this on. For this, please ask Ella (team lead)."
+ * ```
+ */
+export declare function declineText(member: Pick<TeamMember, 'id' | 'name' | 'dedicatedTo'>, team: Pick<Team, 'members' | 'leaderId' | 'leaderIds'> | null, senderSlackUserId: string, people?: Pick<PeopleDirectoryService, 'displayName'>): string;
+/**
+ * Decide whether an agent declines a message.
+ *
+ * @param member - The receiving agent (with its `dedicatedTo`)
+ * @param team - Its team, when known
+ * @param sender - Who wrote the message
+ * @param people - Directory (default: the backend's)
+ * @returns `{ decline: true, text }` for a human other than the agent's person
+ */
+export declare function dedicatedDecision(member: Pick<TeamMember, 'id' | 'name' | 'dedicatedTo'> | null | undefined, team: Pick<Team, 'members' | 'leaderId' | 'leaderIds'> | null, sender: DedicatedSender, people?: Pick<PeopleDirectoryService, 'isOwner' | 'displayName'>): DedicatedDecision;
+/** Where an agent's member record and team come from. */
+export interface DedicatedLookup {
+    getTeams(): Promise<Team[]>;
+}
+/**
+ * The member record and team of an agent session.
+ *
+ * @param storage - Team storage
+ * @param sessionName - Agent session
+ * @returns Both, or null when the session is not a team member (the orchestrator, a smoke test)
+ */
+export declare function findMemberWithTeam(storage: DedicatedLookup, sessionName: string): Promise<{
+    member: TeamMember;
+    team: Team;
+} | null>;
+/**
+ * Decide for an agent session (looks the member up).
+ *
+ * @param storage - Team storage
+ * @param sessionName - Receiving agent session
+ * @param sender - Who wrote the message
+ * @returns The decision (no decline when the agent is unknown or shared)
+ */
+export declare function dedicatedDecisionFor(storage: DedicatedLookup, sessionName: string, sender: DedicatedSender): Promise<DedicatedDecision>;
+//# sourceMappingURL=dedicated-agent.d.ts.map

package/dist/cli/backend/src/services/people/dedicated-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dedicated-agent.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/people/dedicated-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAE7D,OAAO,EAAsB,KAAK,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAEhG,2DAA2D;AAC3D,MAAM,WAAW,eAAe;IAC/B,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,sCAAsC;IACtC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,iDAAiD;AACjD,MAAM,MAAM,iBAAiB,GAAG;IAAE,OAAO,EAAE,KAAK,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErF;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,sBAAsB,EAAE,SAAS,CAAC,GAAG,OAAO,CAG/H;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,WAAW,CAC1B,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,MAAM,GAAG,aAAa,CAAC,EACvD,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,CAAC,GAAG,IAAI,EAC7D,iBAAiB,EAAE,MAAM,EACzB,MAAM,GAAE,IAAI,CAAC,sBAAsB,EAAE,aAAa,CAAwB,GACxE,MAAM,CAMR;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAChC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,MAAM,GAAG,aAAa,CAAC,GAAG,IAAI,GAAG,SAAS,EAC1E,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,CAAC,GAAG,IAAI,EAC7D,MAAM,EAAE,eAAe,EACvB,MAAM,GAAE,IAAI,CAAC,sBAAsB,EAAE,SAAS,GAAG,aAAa,CAAwB,GACpF,iBAAiB,CAOnB;AAED,yDAAyD;AACzD,MAAM,WAAW,eAAe;IAC/B,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,IAAI,CAAA;CAAE,GAAG,IAAI,CAAC,CAU1I;AAED;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAS7I"}

package/dist/cli/backend/src/services/people/dedicated-agent.js

@@ -0,0 +1,113 @@
+/**
+ * Dedicated agents (issue #968): an agent bound to one person works only for
+ * them. When anyone else DMs it or @'s it, it does no work and is not woken —
+ * it answers once with a polite decline that points to the team lead.
+ *
+ * The decision is made where a Slack message enters (the agent-DM and team
+ * channel routers), before anything is recorded, dispatched or woken.
+ * Messages from other agents are never declined: delegation still works.
+ *
+ * specs/per-person-access.md
+ *
+ * @module services/people/dedicated-agent
+ */
+import { getTeamLeads } from '../../utils/team.utils.js';
+import { getPeopleDirectory } from './people-directory.service.js';
+/**
+ * Whether a person id is the one an agent is dedicated to.
+ *
+ * @param dedicatedTo - The member's `dedicatedTo`
+ * @param sender - Sender's Slack user id
+ * @param people - Directory (owner matching)
+ * @returns True when they are the same person
+ */
+export function isDedicatedPerson(dedicatedTo, sender, people) {
+    if (dedicatedTo === sender)
+        return true;
+    return people.isOwner(dedicatedTo) && people.isOwner(sender);
+}
+/**
+ * The polite decline: who the agent works for, and where to go instead.
+ *
+ * @param member - The dedicated agent
+ * @param team - Its team (for the lead), when known
+ * @param senderSlackUserId - The person to answer
+ * @param people - Directory (names)
+ * @returns Slack mrkdwn text
+ *
+ * @example
+ * ```ts
+ * declineText(member, team, 'U0STEVE');
+ * // "Hi <@U0STEVE>, I'm Info's personal assistant, so I can't take this on. For this, please ask Ella (team lead)."
+ * ```
+ */
+export function declineText(member, team, senderSlackUserId, people = getPeopleDirectory()) {
+    const owner = member.dedicatedTo ? people.displayName(member.dedicatedTo) : 'someone else';
+    const whose = owner === 'the owner' ? "the owner's" : `${owner}'s`;
+    const lead = team ? getTeamLeads(team).find((m) => m.id !== member.id) : undefined;
+    const pointer = lead ? `${lead.name} (team lead)` : 'the Orc (the orchestrator)';
+    return `Hi <@${senderSlackUserId}>, I'm ${whose} personal assistant, so I can't take this on. For this, please ask ${pointer}.`;
+}
+/**
+ * Decide whether an agent declines a message.
+ *
+ * @param member - The receiving agent (with its `dedicatedTo`)
+ * @param team - Its team, when known
+ * @param sender - Who wrote the message
+ * @param people - Directory (default: the backend's)
+ * @returns `{ decline: true, text }` for a human other than the agent's person
+ */
+export function dedicatedDecision(member, team, sender, people = getPeopleDirectory()) {
+    if (!member?.dedicatedTo)
+        return { decline: false };
+    if (sender.authorAgentSession)
+        return { decline: false };
+    const slackUserId = sender.slackUserId;
+    if (!slackUserId)
+        return { decline: false };
+    if (isDedicatedPerson(member.dedicatedTo, slackUserId, people))
+        return { decline: false };
+    return { decline: true, text: declineText(member, team, slackUserId, people) };
+}
+/**
+ * The member record and team of an agent session.
+ *
+ * @param storage - Team storage
+ * @param sessionName - Agent session
+ * @returns Both, or null when the session is not a team member (the orchestrator, a smoke test)
+ */
+export async function findMemberWithTeam(storage, sessionName) {
+    try {
+        for (const team of await storage.getTeams()) {
+            const member = team.members?.find((m) => m.sessionName === sessionName);
+            if (member)
+                return { member, team };
+        }
+    }
+    catch {
+        // storage unavailable: no decision
+    }
+    return null;
+}
+/**
+ * Decide for an agent session (looks the member up).
+ *
+ * @param storage - Team storage
+ * @param sessionName - Receiving agent session
+ * @param sender - Who wrote the message
+ * @returns The decision (no decline when the agent is unknown or shared)
+ */
+export async function dedicatedDecisionFor(storage, sessionName, sender) {
+    if (!sender.slackUserId || sender.authorAgentSession)
+        return { decline: false };
+    const found = await findMemberWithTeam(storage, sessionName);
+    if (!found?.member.dedicatedTo)
+        return { decline: false };
+    try {
+        return dedicatedDecision(found.member, found.team, sender);
+    }
+    catch {
+        return { decline: false };
+    }
+}
+//# sourceMappingURL=dedicated-agent.js.map

package/dist/cli/backend/src/services/people/dedicated-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dedicated-agent.js","sourceRoot":"","sources":["../../../../../../backend/src/services/people/dedicated-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAA+B,MAAM,+BAA+B,CAAC;AAahG;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAmB,EAAE,MAAc,EAAE,MAA+C;IACrH,IAAI,WAAW,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,WAAW,CAC1B,MAAuD,EACvD,IAA6D,EAC7D,iBAAyB,EACzB,SAAsD,kBAAkB,EAAE;IAE1E,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;IAC3F,MAAM,KAAK,GAAG,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC;IACnE,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,4BAA4B,CAAC;IACjF,OAAO,QAAQ,iBAAiB,UAAU,KAAK,sEAAsE,OAAO,GAAG,CAAC;AACjI,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAChC,MAA0E,EAC1E,IAA6D,EAC7D,MAAuB,EACvB,SAAkE,kBAAkB,EAAE;IAEtF,IAAI,CAAC,MAAM,EAAE,WAAW;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACpD,IAAI,MAAM,CAAC,kBAAkB;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACzD,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACvC,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5C,IAAI,iBAAiB,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC1F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC;AAChF,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAwB,EAAE,WAAmB;IACrF,IAAI,CAAC;QACJ,KAAK,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;YACxE,IAAI,MAAM;gBAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACrC,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,mCAAmC;IACpC,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAwB,EAAE,WAAmB,EAAE,MAAuB;IAChH,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,kBAAkB;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAChF,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC1D,IAAI,CAAC;QACJ,OAAO,iBAAiB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;AACF,CAAC"}