managed-deepagents 0.4.0-dev.68 → 0.4.0-dev.69

package/README.md

@@ -71,7 +71,7 @@ export const agent = defineDeepAgent({
 
 `defineDeepAgent` accepts the [`createDeepAgent`](https://reference.langchain.com/javascript/deepagents/agent/createDeepAgent) configuration surface minus the managed keys: `backend`, `store`, `checkpointer`, `memory`, `skills`, and `systemPrompt`. Those are provided by the managed runtime when your agent is deployed. Write the system prompt in `instructions.md` next to `agent.ts`; the CLI embeds it at deploy time.
 
-On deploy, Context Hub stores durable agent memory under `memories/**`. When managed memory is enabled, hot memory (`memories/AGENTS.md`) is injected into the prompt; other files under `memories/**` are cold artefacts the agent can create and read on demand. Deploy never overwrites Hub memories.
+On deploy, Context Hub stores harness files (`instructions.md`, `skills/**`) plus a shared agent memory template and optional `org-memory/**` in the deployment Hub repo. When identity scopes memory to an actor or tenant, the runtime opens a **dedicated Hub repo per caller** (lazy-created) and mounts it at `/memories/user/`; shared `agent` memory still remounts a path in the deployment repo. Hot memory (`/memories/user/AGENTS.md`) is injected every turn. Optional org facts mount read-only at `/memories/org/`. Deploy never overwrites existing memories.
 
 ## Project Shape
 

package/dist/channels/assistant-text.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Extract the last assistant/AI message text from a run or agent state.
+ */
+export declare function extractAssistantText(input: {
+    messages?: unknown;
+}): string;
+//# sourceMappingURL=assistant-text.d.ts.map

package/dist/channels/assistant-text.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assistant-text.d.ts","sourceRoot":"","sources":["../../src/channels/assistant-text.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,CAS1E"}

package/dist/channels/assistant-text.js

@@ -0,0 +1,28 @@
+/**
+ * Extract the last assistant/AI message text from a run or agent state.
+ */
+import { coerceMessageLikeToMessage } from "@langchain/core/messages";
+import { BaseMessage } from "langchain";
+export function extractAssistantText(input) {
+    const messages = Array.isArray(input.messages) ? input.messages : [];
+    for (let i = messages.length - 1; i >= 0; i -= 1) {
+        const message = asBaseMessage(messages[i]);
+        if (!message || message.type !== "ai")
+            continue;
+        const text = message.text.trim();
+        if (text)
+            return text;
+    }
+    return "";
+}
+function asBaseMessage(message) {
+    if (message instanceof BaseMessage)
+        return message;
+    try {
+        return coerceMessageLikeToMessage(message);
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=assistant-text.js.map

package/dist/channels/assistant-text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assistant-text.js","sourceRoot":"","sources":["../../src/channels/assistant-text.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,MAAM,UAAU,oBAAoB,CAAC,KAA6B;IAChE,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;YAAE,SAAS;QAChD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,aAAa,CAAC,OAAgB;IACrC,IAAI,OAAO,YAAY,WAAW;QAAE,OAAO,OAAO,CAAC;IACnD,IAAI,CAAC;QACH,OAAO,0BAA0B,CAC/B,OAA2D,CAC5D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/channels/binding.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Channel binding carried on channel-originated runs.
+ *
+ * The Events handler stamps a serializable binding into run `configurable`.
+ * The runtime seam rebuilds `runtime.channel` only when the trusted auth user
+ * source provider matches — clients cannot invent a channel surface.
+ */
+import { wasFinalPosted } from "./runtime.js";
+import type { ChannelTransport } from "./runtime.js";
+import type { ChannelAddress, ChannelEvent, ChannelProvider, RuntimeChannel } from "./types.js";
+/** Env var holding the Slack bot token for Phase 1 single-workspace installs. */
+export declare const SLACK_BOT_TOKEN_ENV = "SLACK_BOT_TOKEN";
+/** Configurable key stamped by the managed channel runner (never client-trusted alone). */
+export declare const CHANNEL_BINDING_KEY = "mda_channel_binding";
+export interface ChannelBinding {
+    name: string;
+    provider: ChannelProvider;
+    event: ChannelEvent;
+    address: ChannelAddress;
+    autoReply: boolean;
+    deliveryId: string;
+}
+export declare function markFinalPosted(deliveryId: string): void;
+export declare function clearFinalPosted(deliveryId: string): void;
+export declare function wasDeliveryFinalPosted(deliveryId: string): boolean;
+/**
+ * Rebuild `runtime.channel` from a trusted configurable bag.
+ *
+ * Returns `undefined` unless the auth user source provider matches the binding
+ * and a transport can be constructed.
+ */
+export declare function resolveRuntimeChannel(configurable: Record<string, unknown> | undefined, transportFactory?: (provider: ChannelProvider) => ChannelTransport | undefined): RuntimeChannel | undefined;
+export { wasFinalPosted };
+//# sourceMappingURL=binding.d.ts.map

package/dist/channels/binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding.d.ts","sourceRoot":"","sources":["../../src/channels/binding.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAwB,cAAc,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,EACV,cAAc,EACd,YAAY,EACZ,eAAe,EACf,cAAc,EACf,MAAM,YAAY,CAAC;AAGpB,iFAAiF;AACjF,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AAErD,2FAA2F;AAC3F,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AAKzD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,eAAe,CAAC;IAC1B,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAExD;AAED,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAEzD;AAED,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAElE;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EACjD,gBAAgB,GAAE,CAChB,QAAQ,EAAE,eAAe,KACtB,gBAAgB,GAAG,SAA4B,GACnD,cAAc,GAAG,SAAS,CA+B5B;AAWD,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/dist/channels/binding.js

@@ -0,0 +1,67 @@
+/**
+ * Channel binding carried on channel-originated runs.
+ *
+ * The Events handler stamps a serializable binding into run `configurable`.
+ * The runtime seam rebuilds `runtime.channel` only when the trusted auth user
+ * source provider matches — clients cannot invent a channel surface.
+ */
+import { createRuntimeChannel, wasFinalPosted } from "./runtime.js";
+import { createSlackWebApiTransport } from "./slack/transport.js";
+/** Env var holding the Slack bot token for Phase 1 single-workspace installs. */
+export const SLACK_BOT_TOKEN_ENV = "SLACK_BOT_TOKEN";
+/** Configurable key stamped by the managed channel runner (never client-trusted alone). */
+export const CHANNEL_BINDING_KEY = "mda_channel_binding";
+/** Process-local final-post flags keyed by delivery id (survives binding rebuild). */
+const finalPostedByDelivery = new Map();
+export function markFinalPosted(deliveryId) {
+    finalPostedByDelivery.set(deliveryId, true);
+}
+export function clearFinalPosted(deliveryId) {
+    finalPostedByDelivery.delete(deliveryId);
+}
+export function wasDeliveryFinalPosted(deliveryId) {
+    return finalPostedByDelivery.get(deliveryId) === true;
+}
+/**
+ * Rebuild `runtime.channel` from a trusted configurable bag.
+ *
+ * Returns `undefined` unless the auth user source provider matches the binding
+ * and a transport can be constructed.
+ */
+export function resolveRuntimeChannel(configurable, transportFactory = defaultTransport) {
+    if (!configurable)
+        return undefined;
+    const user = configurable.langgraph_auth_user;
+    const sourceProvider = user?.mda_source_provider;
+    const binding = configurable[CHANNEL_BINDING_KEY];
+    if (!binding ||
+        typeof binding !== "object" ||
+        typeof binding.name !== "string" ||
+        typeof binding.provider !== "string" ||
+        typeof binding.deliveryId !== "string" ||
+        sourceProvider !== binding.provider) {
+        return undefined;
+    }
+    const transport = transportFactory(binding.provider);
+    if (!transport)
+        return undefined;
+    const deliveryId = binding.deliveryId;
+    return createRuntimeChannel({
+        name: binding.name,
+        provider: binding.provider,
+        event: binding.event,
+        address: binding.address,
+        transport,
+        onFinalPosted: () => markFinalPosted(deliveryId),
+    });
+}
+function defaultTransport(provider) {
+    if (provider !== "slack")
+        return undefined;
+    const token = process.env[SLACK_BOT_TOKEN_ENV];
+    if (!token)
+        return undefined;
+    return createSlackWebApiTransport({ botToken: token });
+}
+export { wasFinalPosted };
+//# sourceMappingURL=binding.js.map

package/dist/channels/binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding.js","sourceRoot":"","sources":["../../src/channels/binding.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAQpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAElE,iFAAiF;AACjF,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAErD,2FAA2F;AAC3F,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AAEzD,sFAAsF;AACtF,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAmB,CAAC;AAWzD,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,qBAAqB,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,UAAkB;IACjD,qBAAqB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,UAAkB;IACvD,OAAO,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,YAAiD,EACjD,mBAEoC,gBAAgB;IAEpD,IAAI,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,IAAI,GAAG,YAAY,CAAC,mBAEb,CAAC;IACd,MAAM,cAAc,GAAG,IAAI,EAAE,mBAAmB,CAAC;IACjD,MAAM,OAAO,GAAG,YAAY,CAAC,mBAAmB,CAEnC,CAAC;IACd,IACE,CAAC,OAAO;QACR,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;QAChC,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ;QACpC,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ;QACtC,cAAc,KAAK,OAAO,CAAC,QAAQ,EACnC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IAEjC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACtC,OAAO,oBAAoB,CAAC;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS;QACT,aAAa,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC;KACjD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CACvB,QAAyB;IAEzB,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO,0BAA0B,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/dist/channels/errors.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Shared channel error codes and a typed error class.
+ */
+import type { ChannelErrorCode } from "./types.js";
+export declare const CHANNEL_ERROR_CODES: readonly ChannelErrorCode[];
+/** Typed channel failure with a stable machine-readable code. */
+export declare class ChannelError extends Error {
+    readonly code: ChannelErrorCode;
+    constructor(code: ChannelErrorCode, message: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/channels/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/channels/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,eAAO,MAAM,mBAAmB,EAAE,SAAS,gBAAgB,EAWjD,CAAC;AAEX,iEAAiE;AACjE,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;gBAEpB,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM;CAKpD"}

package/dist/channels/errors.js

@@ -0,0 +1,25 @@
+/**
+ * Shared channel error codes and a typed error class.
+ */
+export const CHANNEL_ERROR_CODES = [
+    "channel_invalid_signature",
+    "channel_replay_rejected",
+    "channel_installation_not_found",
+    "channel_event_filtered",
+    "channel_identity_unresolvable",
+    "channel_destination_forbidden",
+    "channel_invocation_rate_limited",
+    "channel_run_failed",
+    "channel_provider_rate_limited",
+    "channel_provider_rejected",
+];
+/** Typed channel failure with a stable machine-readable code. */
+export class ChannelError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.name = "ChannelError";
+        this.code = code;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/channels/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/channels/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,MAAM,CAAC,MAAM,mBAAmB,GAAgC;IAC9D,2BAA2B;IAC3B,yBAAyB;IACzB,gCAAgC;IAChC,wBAAwB;IACxB,+BAA+B;IAC/B,+BAA+B;IAC/B,iCAAiC;IACjC,oBAAoB;IACpB,+BAA+B;IAC/B,2BAA2B;CACnB,CAAC;AAEX,iEAAiE;AACjE,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAmB;IAEhC,YAAY,IAAsB,EAAE,OAAe;QACjD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF"}

package/dist/channels/index.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Channel-neutral contracts shared by every provider adapter.
+ *
+ * Import provider integrations from their own entrypoints, e.g.
+ * `managed-deepagents/channels/slack`.
+ */
+export type { ChannelAddress, ChannelAttachmentRef, ChannelCapabilities, ChannelDestination, ChannelErrorCode, ChannelEvent, ChannelInboundMessage, ChannelMessage, ChannelMessageUpdate, ChannelNativePayload, ChannelProvider, JsonValue, PostedChannelMessage, RuntimeChannel, } from "./types.js";
+export { normalizeChannelDestination } from "./types.js";
+export { CHANNEL_ERROR_CODES, ChannelError } from "./errors.js";
+export { createRuntimeChannel, wasFinalPosted } from "./runtime.js";
+export type { ChannelTransport, CreateRuntimeChannelOptions, } from "./runtime.js";
+export { CHANNEL_BINDING_KEY, SLACK_BOT_TOKEN_ENV, clearFinalPosted, markFinalPosted, resolveRuntimeChannel, wasDeliveryFinalPosted, } from "./binding.js";
+export type { ChannelBinding } from "./binding.js";
+export { InMemoryChannelStore } from "./store.js";
+export type { DeliveryRecord, DeliveryStatus } from "./store.js";
+export { extractAssistantText } from "./assistant-text.js";
+export { addressFromDeliverTo, createScheduleDeliveryMiddleware, deliverScheduleResult, isTrustedScheduleDeliveryRun, readScheduleDeliverTo, setScheduleMetadataForTests, } from "./schedule-delivery.js";
+export type { DeliverScheduleResultInput, NormalizedScheduleDeliverTo, } from "./schedule-delivery.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/channels/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/channels/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,YAAY,EACV,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,YAAY,EACZ,qBAAqB,EACrB,cAAc,EACd,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,EACf,SAAS,EACT,oBAAoB,EACpB,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AAEzD,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhE,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACpE,YAAY,EACV,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,qBAAqB,EACrB,4BAA4B,EAC5B,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC"}

package/dist/channels/index.js

@@ -0,0 +1,14 @@
+/**
+ * Channel-neutral contracts shared by every provider adapter.
+ *
+ * Import provider integrations from their own entrypoints, e.g.
+ * `managed-deepagents/channels/slack`.
+ */
+export { normalizeChannelDestination } from "./types.js";
+export { CHANNEL_ERROR_CODES, ChannelError } from "./errors.js";
+export { createRuntimeChannel, wasFinalPosted } from "./runtime.js";
+export { CHANNEL_BINDING_KEY, SLACK_BOT_TOKEN_ENV, clearFinalPosted, markFinalPosted, resolveRuntimeChannel, wasDeliveryFinalPosted, } from "./binding.js";
+export { InMemoryChannelStore } from "./store.js";
+export { extractAssistantText } from "./assistant-text.js";
+export { addressFromDeliverTo, createScheduleDeliveryMiddleware, deliverScheduleResult, isTrustedScheduleDeliveryRun, readScheduleDeliverTo, setScheduleMetadataForTests, } from "./schedule-delivery.js";
+//# sourceMappingURL=index.js.map

package/dist/channels/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/channels/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAkBH,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AAEzD,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhE,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAMpE,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAGlD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,qBAAqB,EACrB,4BAA4B,EAC5B,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC"}

package/dist/channels/runtime.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Construct the optional `runtime.channel` surface for channel-originated runs.
+ */
+import type { ChannelAddress, ChannelCapabilities, ChannelEvent, ChannelMessage, ChannelMessageUpdate, ChannelProvider, PostedChannelMessage, RuntimeChannel } from "./types.js";
+export interface ChannelTransport {
+    post(input: {
+        text: string;
+        conversationId: string;
+        threadId?: string;
+        native?: ChannelMessage["native"];
+    }): Promise<PostedChannelMessage>;
+    update?(input: {
+        id: string;
+        text?: string;
+        native?: ChannelMessageUpdate["native"];
+    }): Promise<PostedChannelMessage>;
+}
+export interface CreateRuntimeChannelOptions {
+    name: string;
+    provider: ChannelProvider;
+    event: ChannelEvent;
+    address: ChannelAddress;
+    capabilities?: Partial<ChannelCapabilities>;
+    transport: ChannelTransport;
+    /**
+     * When `post(..., { final: true })` is called, auto-reply should be suppressed.
+     * The managed runner reads this flag after the agent completes.
+     */
+    onFinalPosted?: () => void;
+}
+/**
+ * Build a `RuntimeChannel` bound to a managed transport.
+ *
+ * Credentials never appear on the returned object.
+ * Phase 1 only permits `current_thread` destinations.
+ */
+export declare function createRuntimeChannel(options: CreateRuntimeChannelOptions): RuntimeChannel;
+/** True when an explicit `post(..., { final: true })` already delivered the reply. */
+export declare function wasFinalPosted(channel: RuntimeChannel): boolean;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/channels/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/channels/runtime.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EACV,cAAc,EACd,mBAAmB,EACnB,YAAY,EACZ,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,cAAc,EACf,MAAM,YAAY,CAAC;AAGpB,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,KAAK,EAAE;QACV,IAAI,EAAE,MAAM,CAAC;QACb,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC;KACnC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClC,MAAM,CAAC,CAAC,KAAK,EAAE;QACb,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;KACzC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,eAAe,CAAC;IAC1B,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,cAAc,CAAC;IACxB,YAAY,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC5C,SAAS,EAAE,gBAAgB,CAAC;IAC5B;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;CAC5B;AAMD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,2BAA2B,GACnC,cAAc,CA4DhB;AAiBD,sFAAsF;AACtF,wBAAgB,cAAc,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAI/D"}

package/dist/channels/runtime.js

@@ -0,0 +1,76 @@
+/**
+ * Construct the optional `runtime.channel` surface for channel-originated runs.
+ */
+import { ChannelError } from "./errors.js";
+import { normalizeChannelDestination } from "./types.js";
+const DEFAULT_CAPABILITIES = {
+    update: true,
+};
+/**
+ * Build a `RuntimeChannel` bound to a managed transport.
+ *
+ * Credentials never appear on the returned object.
+ * Phase 1 only permits `current_thread` destinations.
+ */
+export function createRuntimeChannel(options) {
+    const capabilities = {
+        ...DEFAULT_CAPABILITIES,
+        ...options.capabilities,
+    };
+    let finalPosted = false;
+    const channel = {
+        name: options.name,
+        provider: options.provider,
+        event: options.event,
+        address: options.address,
+        capabilities,
+        async post(message, postOptions) {
+            validateMessage(message, options.provider);
+            const destination = normalizeChannelDestination(message.to ?? { type: "current_thread" });
+            if (destination.type !== "current_thread") {
+                throw new ChannelError("channel_destination_forbidden", "explicit channel destinations require a deploy-time outbound grant");
+            }
+            const posted = await options.transport.post({
+                text: message.text,
+                conversationId: options.address.conversationId,
+                threadId: options.address.threadId,
+                native: message.native,
+            });
+            if (postOptions?.final) {
+                finalPosted = true;
+                options.onFinalPosted?.();
+            }
+            return posted;
+        },
+    };
+    if (capabilities.update && options.transport.update) {
+        channel.update = async (id, message) => {
+            if (message.native && message.native.provider !== options.provider) {
+                throw new ChannelError("channel_provider_rejected", `native payload provider "${message.native.provider}" does not match channel provider "${options.provider}"`);
+            }
+            return options.transport.update({
+                id,
+                text: message.text,
+                native: message.native,
+            });
+        };
+    }
+    Object.defineProperty(channel, "finalPosted", {
+        get: () => finalPosted,
+        enumerable: false,
+    });
+    return channel;
+}
+function validateMessage(message, provider) {
+    if (typeof message.text !== "string" || message.text.trim().length === 0) {
+        throw new Error("channel.post requires non-empty text");
+    }
+    if (message.native && message.native.provider !== provider) {
+        throw new ChannelError("channel_provider_rejected", `native payload provider "${message.native.provider}" does not match channel provider "${provider}"`);
+    }
+}
+/** True when an explicit `post(..., { final: true })` already delivered the reply. */
+export function wasFinalPosted(channel) {
+    return Boolean(channel.finalPosted);
+}
+//# sourceMappingURL=runtime.js.map

package/dist/channels/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/channels/runtime.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAW3C,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AA8BzD,MAAM,oBAAoB,GAAwB;IAChD,MAAM,EAAE,IAAI;CACb,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAoC;IAEpC,MAAM,YAAY,GAAwB;QACxC,GAAG,oBAAoB;QACvB,GAAG,OAAO,CAAC,YAAY;KACxB,CAAC;IACF,IAAI,WAAW,GAAG,KAAK,CAAC;IAExB,MAAM,OAAO,GAAmB;QAC9B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,YAAY;QACZ,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW;YAC7B,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC3C,MAAM,WAAW,GAAG,2BAA2B,CAC7C,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,CACzC,CAAC;YACF,IAAI,WAAW,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBAC1C,MAAM,IAAI,YAAY,CACpB,+BAA+B,EAC/B,oEAAoE,CACrE,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1C,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,cAAc;gBAC9C,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ;gBAClC,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,IAAI,WAAW,EAAE,KAAK,EAAE,CAAC;gBACvB,WAAW,GAAG,IAAI,CAAC;gBACnB,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;YAC5B,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;IAEF,IAAI,YAAY,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QACpD,OAAO,CAAC,MAAM,GAAG,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;YACrC,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACnE,MAAM,IAAI,YAAY,CACpB,2BAA2B,EAC3B,4BAA4B,OAAO,CAAC,MAAM,CAAC,QAAQ,sCAAsC,OAAO,CAAC,QAAQ,GAAG,CAC7G,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,CAAC,SAAS,CAAC,MAAO,CAAC;gBAC/B,EAAE;gBACF,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,EAAE;QAC5C,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW;QACtB,UAAU,EAAE,KAAK;KAClB,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CACtB,OAAuB,EACvB,QAAyB;IAEzB,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC3D,MAAM,IAAI,YAAY,CACpB,2BAA2B,EAC3B,4BAA4B,OAAO,CAAC,MAAM,CAAC,QAAQ,sCAAsC,QAAQ,GAAG,CACrG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,cAAc,CAAC,OAAuB;IACpD,OAAO,OAAO,CACX,OAAsD,CAAC,WAAW,CACpE,CAAC;AACJ,CAAC"}

package/dist/channels/schedule-delivery.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Schedule `deliverTo` auto-post after a cron-triggered agent run.
+ *
+ * Reads `configurable.mda_schedule.deliver_to` (compiled from defineSchedule)
+ * and posts the final assistant text to Slack when configured.
+ *
+ * Delivery only runs for managed cron invocations: compiled crons stamp both
+ * `metadata.mda_managed` / `metadata.mda_schedule` and
+ * `configurable.mda_schedule.name`. Ordinary HTTP invokes cannot forge that
+ * pair (and `mda_schedule` is a reserved configurable key).
+ */
+import type { ManagedMiddleware } from "../runtime/managed-middleware.js";
+import type { ChannelAddress } from "./types.js";
+/** Override LangGraph run metadata resolution. Test-only. */
+export declare function setScheduleMetadataForTests(loader?: () => {
+    mda_managed?: unknown;
+    mda_schedule?: unknown;
+} | undefined): void;
+/** Normalized schedule delivery target (camelCase). */
+export interface NormalizedScheduleDeliverTo {
+    channel: string;
+    to: {
+        type: "provider_conversation";
+        conversationId: string;
+    } | {
+        type: "provider_thread";
+        conversationId: string;
+        threadId: string;
+    };
+    autoPost: boolean;
+}
+/**
+ * Read and normalize `configurable.mda_schedule.deliver_to` from a cron run.
+ * Accepts camelCase (TS compile) and snake_case (Python compile) shapes.
+ */
+export declare function readScheduleDeliverTo(configurable: Record<string, unknown> | undefined): NormalizedScheduleDeliverTo | undefined;
+/** Map a deliverTo destination onto a runtime channel address. */
+export declare function addressFromDeliverTo(to: NormalizedScheduleDeliverTo["to"]): ChannelAddress;
+export interface DeliverScheduleResultInput {
+    deliverTo: NormalizedScheduleDeliverTo;
+    replyText: string;
+    /** Override bot token (tests). */
+    botToken?: string;
+    /** Override post implementation (tests). */
+    post?: (input: {
+        text: string;
+        conversationId: string;
+        threadId?: string;
+    }) => Promise<unknown>;
+}
+/**
+ * Post schedule result text to the configured channel. Soft-fails (logs) on
+ * missing token / provider errors so cron runs are not marked failed.
+ */
+export declare function deliverScheduleResult(input: DeliverScheduleResultInput): Promise<"posted" | "skipped" | "failed">;
+/**
+ * True when this run is a managed cron fire (not a caller-forged HTTP invoke).
+ */
+export declare function isTrustedScheduleDeliveryRun(configurable: Record<string, unknown> | undefined): boolean;
+/**
+ * Always-on middleware that auto-posts schedule results when `deliver_to` is set
+ * on a trusted managed cron run.
+ */
+export declare function createScheduleDeliveryMiddleware(options?: {
+    deliver?: typeof deliverScheduleResult;
+}): ManagedMiddleware;
+//# sourceMappingURL=schedule-delivery.d.ts.map

package/dist/channels/schedule-delivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule-delivery.d.ts","sourceRoot":"","sources":["../../src/channels/schedule-delivery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAK1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAMjD,6DAA6D;AAC7D,wBAAgB,2BAA2B,CACzC,MAAM,CAAC,EAAE,MAAM;IAAE,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,GAC3E,IAAI,CAEN;AAED,uDAAuD;AACvD,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EACE;QAAE,IAAI,EAAE,uBAAuB,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,GACzD;QAAE,IAAI,EAAE,iBAAiB,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1E,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAChD,2BAA2B,GAAG,SAAS,CAoDzC;AAED,kEAAkE;AAClE,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,2BAA2B,CAAC,IAAI,CAAC,GACpC,cAAc,CAKhB;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,2BAA2B,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE;QACb,IAAI,EAAE,MAAM,CAAC;QACb,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC,CAgD1C;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAChD,OAAO,CAcT;AAmBD;;;GAGG;AACH,wBAAgB,gCAAgC,CAAC,OAAO,CAAC,EAAE;IACzD,OAAO,CAAC,EAAE,OAAO,qBAAqB,CAAC;CACxC,GAAG,iBAAiB,CA6BpB"}