mercury-agent 0.4.28 → 0.5.1

package/src/extensions/api.ts

@@ -11,6 +11,7 @@ import type { ModelCapabilityKey } from "../agent/model-capabilities.js";
 import { registerPermission } from "../core/permissions.js";
 import type { Db } from "../storage/db.js";
 import type {
+  CapabilityHandler,
   CliDef,
   ConfigDef,
   ConnectionCategory,
@@ -63,6 +64,7 @@ export class MercuryExtensionAPIImpl implements MercuryExtensionAPI {
       jobs: new Map(),
       configs: new Map(),
       widgets: [],
+      capabilities: new Map(),
       envVars: [],
     };
   }
@@ -235,6 +237,25 @@ export class MercuryExtensionAPIImpl implements MercuryExtensionAPI {
     this.meta.connection = def;
   }
 
+  capability(name: string, handler: CapabilityHandler): void {
+    if (!name || !/^[a-z0-9][a-z0-9-]*$/.test(name)) {
+      throw new Error(
+        `Extension "${this.name}": capability() requires a lowercase alphanumeric name`,
+      );
+    }
+    if (typeof handler !== "function") {
+      throw new Error(
+        `Extension "${this.name}": capability("${name}") requires a handler function`,
+      );
+    }
+    if (this.meta.capabilities.has(name)) {
+      throw new Error(
+        `Extension "${this.name}": capability "${name}" already registered`,
+      );
+    }
+    this.meta.capabilities.set(name, handler);
+  }
+
   get store(): ExtensionStore {
     return {
       get: (key: string) => this.db.getExtState(this.name, key),

package/src/extensions/loader.ts

@@ -14,6 +14,7 @@ import { MercuryExtensionAPIImpl } from "./api.js";
 import type { ConfigRegistry } from "./config-registry.js";
 import { RESERVED_EXTENSION_NAMES } from "./reserved.js";
 import type {
+  CapabilityHandler,
   EventHandler,
   ExtensionMeta,
   JobDef,
@@ -182,6 +183,20 @@ export class ExtensionRegistry {
     return this.list().filter((ext) => ext.clis.length > 0);
   }
 
+  /**
+   * Find a registered host-side capability handler by name, with its owning
+   * extension. Returns undefined when no extension registered it.
+   */
+  getCapability(
+    name: string,
+  ): { ext: ExtensionMeta; handler: CapabilityHandler } | undefined {
+    for (const ext of this.extensions.values()) {
+      const handler = ext.capabilities.get(name);
+      if (handler) return { ext, handler };
+    }
+    return undefined;
+  }
+
   /** Get all env var source names claimed by extensions (for passthrough filtering). */
   getClaimedEnvSources(): Set<string> {
     const sources = new Set<string>();

package/src/extensions/types.ts

@@ -187,6 +187,45 @@ export interface WidgetDef {
   render: (ctx: MercuryExtensionContext) => string;
 }
 
+// ---------------------------------------------------------------------------
+// Capabilities — host-side broker actions invoked from the container
+// ---------------------------------------------------------------------------
+
+/** A single broker request, dispatched from `POST /api/capability/:name/:action`. */
+export interface CapabilityRequest {
+  /** Capability name (matches the required permission). */
+  name: string;
+  /** Sub-action within the capability (e.g. "book", "cancel"). */
+  action: string;
+  /**
+   * The authoritative, token-derived caller id. Trustworthy for ownership
+   * checks — NOT a container-supplied argument.
+   */
+  callerId: string;
+  /** The space the call was made from. */
+  spaceId: string;
+  /** Parsed JSON request body (or null). */
+  body: unknown;
+}
+
+/** Result returned by a capability handler. */
+export interface CapabilityResult {
+  /** HTTP status to return (default 200). */
+  status?: number;
+  /** JSON-serializable response payload. */
+  data: unknown;
+}
+
+/**
+ * Host-side handler for a capability. Runs in the Mercury host process with the
+ * full extension context (credentials in host storage stay on the host). The
+ * container never sees secrets — only the returned `data`.
+ */
+export type CapabilityHandler = (
+  req: CapabilityRequest,
+  ctx: MercuryExtensionContext,
+) => Promise<CapabilityResult>;
+
 // ---------------------------------------------------------------------------
 // Store
 // ---------------------------------------------------------------------------
@@ -310,6 +349,20 @@ export interface MercuryExtensionAPI {
    */
   connection(def: ConnectionDef): void;
 
+  /**
+   * Register a host-side capability handler, invoked from the container via
+   * `mrctl capability <name> <action> <json>` → `POST /api/capability/:name/:action`.
+   * The caller must hold the `<name>` permission. Credentials used by the
+   * handler stay on the host and never enter the agent container.
+   *
+   * @example
+   * mercury.capability("barber", async (req, ctx) => {
+   *   if (req.action === "book") return { data: await book(req.callerId, req.body) };
+   *   return { status: 400, data: { error: "unknown action" } };
+   * });
+   */
+  capability(name: string, handler: CapabilityHandler): void;
+
   /** Scoped key-value store for persistent extension state. */
   readonly store: ExtensionStore;
 }
@@ -448,6 +501,8 @@ export interface ExtensionMeta {
   configs: Map<string, ConfigDef>;
   /** Dashboard widgets. */
   widgets: WidgetDef[];
+  /** Host-side capability handlers, keyed by capability name. */
+  capabilities: Map<string, CapabilityHandler>;
   /** Declared environment variables. */
   envVars: EnvDef[];
   /** Personal service connection metadata, if declared via `mercury.connection()`. */

package/src/main.ts

@@ -34,6 +34,11 @@ import { WhatsAppBridge } from "./bridges/whatsapp.js";
 import { createChatShim } from "./chat-shim.js";
 import { loadConfig, resolveProjectPath } from "./config.js";
 import { createMessageHandler } from "./core/handler.js";
+import { setActiveProfileMemberPermissions } from "./core/permissions.js";
+import {
+  loadActiveProfile,
+  setActiveProfileSystemPrompt,
+} from "./core/profiles.js";
 import { MercuryCoreRuntime } from "./core/runtime.js";
 import { runStorageCleanup } from "./core/storage-cleanup.js";
 import { isOverQuota } from "./core/storage-guard.js";
@@ -214,6 +219,20 @@ async function main() {
   ]);
   logger.info("Extensions loaded", { count: registry.size });
 
+  // Activate the applicative profile (project-wide member permission scoping).
+  // Done after extensions load so extension-registered permissions (e.g. a
+  // profile's own CLI permission) are recognized as valid.
+  const activeProfile = loadActiveProfile(resolveProjectPath(config.dataDir));
+  if (activeProfile) {
+    setActiveProfileMemberPermissions(activeProfile.memberPermissions ?? null);
+    setActiveProfileSystemPrompt(activeProfile.systemPrompt ?? null);
+    logger.info("Applicative profile active", {
+      profile: activeProfile.name,
+      memberPermissions:
+        activeProfile.memberPermissions?.join(",") ?? "(unscoped)",
+    });
+  }
+
   logExtensionCapabilityMismatches(
     registry.list(),
     config.resolvedModelChainCapabilities,

package/docs/pending-updates/dm-auto-space.md

@@ -1,15 +0,0 @@
----
-slug: dm-auto-space
-shipped: 2026-07-01
----
-
-## ROADMAP changes
-
-**Remove from:** Next (table row where Item = dm-auto-space)
-
-**Also pull:** none
-
-**Add to Shipped table** (insert at top, after header row):
-| **dm-auto-space** | 2026-07-01 | Auto-create space per customer DM with rate limits and dashboard controls |
-
-**Milestone Map:** none