robotrock 1.0.0 → 1.3.0

package/dist/eve/tools/identity/whoami.js

@@ -0,0 +1,117 @@
+// src/eve/tools/identity/whoami.ts
+import { defineTool } from "eve/tools";
+import { z } from "zod";
+
+// src/eve/agent/attributes.ts
+function readStringAttribute(attributes, key) {
+  const value = attributes?.[key];
+  if (typeof value === "string" && value.length > 0) {
+    return value;
+  }
+  if (Array.isArray(value) && typeof value[0] === "string" && value[0].length > 0) {
+    return value[0];
+  }
+  return void 0;
+}
+function readStringArrayAttribute(attributes, key) {
+  const value = attributes?.[key];
+  if (typeof value === "string" && value.length > 0) {
+    return [value];
+  }
+  if (Array.isArray(value)) {
+    return value.filter(
+      (entry) => typeof entry === "string" && entry.length > 0
+    );
+  }
+  return [];
+}
+function parseTenantRole(value) {
+  if (value === "admin" || value === "member") {
+    return value;
+  }
+  return null;
+}
+
+// src/eve/agent/tenant.ts
+function tryResolveTenantCaller(ctx) {
+  const caller = ctx.session.auth.initiator ?? ctx.session.auth.current;
+  if (caller?.principalType !== "user") {
+    return null;
+  }
+  const email = readStringAttribute(caller.attributes, "email");
+  const name = readStringAttribute(caller.attributes, "name");
+  const tenantSlug = readStringAttribute(caller.attributes, "tenantSlug") ?? readStringAttribute(caller.attributes, "tenantId");
+  const role = parseTenantRole(readStringAttribute(caller.attributes, "role"));
+  if (!email || !tenantSlug || !caller.principalId || !role) {
+    return null;
+  }
+  const workosUserId = readStringAttribute(caller.attributes, "workosUserId");
+  const connectionId = readStringAttribute(caller.attributes, "connectionId");
+  const groups = readStringArrayAttribute(caller.attributes, "groups");
+  return {
+    userId: caller.principalId,
+    email,
+    name: name ?? email.split("@")[0] ?? email,
+    tenantSlug,
+    ...connectionId ? { connectionId } : {},
+    role,
+    isAdmin: role === "admin",
+    groups,
+    ...workosUserId ? { workosUserId } : {}
+  };
+}
+
+// src/eve/tool-reply-guidance.ts
+var TOOL_REPLY_GUIDANCE_FIELD = "replyGuidance";
+var WHOAMI_REPLY_GUIDANCE = "The dashboard shows a profile card with name, email, workspace, role, and groups. Do not restate those in your reply. Only add context not in the card (e.g. permissions, refund approval rules, missing group membership).";
+function withReplyGuidance(result, guidance) {
+  return {
+    ...result,
+    [TOOL_REPLY_GUIDANCE_FIELD]: guidance
+  };
+}
+
+// src/eve/tools/identity/whoami.ts
+var WHOAMI_TOOL_NAME = "whoami";
+var whoamiInputSchema = z.object({});
+function defineWhoamiTool() {
+  return defineTool({
+    description: "Return the authenticated RobotRock user, tenant, role, and group memberships for the current chat session. The dashboard renders a profile card \u2014 do not repeat name, email, workspace, role, or groups in your reply; only add context not shown in the card.",
+    inputSchema: whoamiInputSchema,
+    async execute(_input, ctx) {
+      const caller = tryResolveTenantCaller(ctx);
+      if (!caller) {
+        return withReplyGuidance(
+          {
+            authenticated: false,
+            message: "No RobotRock user is attached to this session. Dashboard chat supplies user context via the Eve proxy."
+          },
+          "Explain that no user is attached to this session. Do not invent identity details."
+        );
+      }
+      return withReplyGuidance(
+        {
+          authenticated: true,
+          userId: caller.userId,
+          name: caller.name,
+          email: caller.email,
+          tenantSlug: caller.tenantSlug,
+          role: caller.role,
+          isAdmin: caller.isAdmin,
+          groups: caller.groups.map((slug) => ({ slug })),
+          ...caller.workosUserId ? { workosUserId: caller.workosUserId } : {},
+          sessionId: ctx.session.id
+        },
+        WHOAMI_REPLY_GUIDANCE
+      );
+    }
+  });
+}
+var whoamiTool = defineWhoamiTool();
+export {
+  WHOAMI_TOOL_NAME,
+  defineWhoamiTool,
+  whoamiInputSchema,
+  whoamiTool
+};
+//# sourceMappingURL=whoami.js.map

package/dist/eve/tools/identity/whoami.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/eve/tools/identity/whoami.ts","../../../../src/eve/agent/attributes.ts","../../../../src/eve/agent/tenant.ts","../../../../src/eve/tool-reply-guidance.ts"],"sourcesContent":["import { defineTool } from \"eve/tools\";\nimport { z } from \"zod\";\nimport { tryResolveTenantCaller } from \"../../agent/tenant.js\";\nimport {\n  WHOAMI_REPLY_GUIDANCE,\n  withReplyGuidance,\n} from \"../../tool-reply-guidance.js\";\n\nexport const WHOAMI_TOOL_NAME = \"whoami\";\n\nexport const whoamiInputSchema = z.object({});\n\nexport function defineWhoamiTool() {\n  return defineTool({\n    description:\n      \"Return the authenticated RobotRock user, tenant, role, and group memberships for the current chat session. \" +\n      \"The dashboard renders a profile card — do not repeat name, email, workspace, role, or groups in your reply; only add context not shown in the card.\",\n    inputSchema: whoamiInputSchema,\n    async execute(_input, ctx) {\n      const caller = tryResolveTenantCaller(ctx);\n      if (!caller) {\n        return withReplyGuidance(\n          {\n            authenticated: false as const,\n            message:\n              \"No RobotRock user is attached to this session. Dashboard chat supplies user context via the Eve proxy.\",\n          },\n          \"Explain that no user is attached to this session. Do not invent identity details.\"\n        );\n      }\n\n      return withReplyGuidance(\n        {\n          authenticated: true as const,\n          userId: caller.userId,\n          name: caller.name,\n          email: caller.email,\n          tenantSlug: caller.tenantSlug,\n          role: caller.role,\n          isAdmin: caller.isAdmin,\n          groups: caller.groups.map((slug) => ({ slug })),\n          ...(caller.workosUserId ? { workosUserId: caller.workosUserId } : {}),\n          sessionId: ctx.session.id,\n        },\n        WHOAMI_REPLY_GUIDANCE\n      );\n    },\n  });\n}\n\nexport const whoamiTool = defineWhoamiTool();\n","export function readStringAttribute(\n  attributes: Readonly<Record<string, string | readonly string[]>> | undefined,\n  key: string\n): string | undefined {\n  const value = attributes?.[key];\n  if (typeof value === \"string\" && value.length > 0) {\n    return value;\n  }\n  if (Array.isArray(value) && typeof value[0] === \"string\" && value[0].length > 0) {\n    return value[0];\n  }\n  return undefined;\n}\n\nexport function readStringArrayAttribute(\n  attributes: Readonly<Record<string, string | readonly string[]>> | undefined,\n  key: string\n): string[] {\n  const value = attributes?.[key];\n  if (typeof value === \"string\" && value.length > 0) {\n    return [value];\n  }\n  if (Array.isArray(value)) {\n    return value.filter(\n      (entry): entry is string => typeof entry === \"string\" && entry.length > 0\n    );\n  }\n  return [];\n}\n\nexport function parseTenantRole(\n  value: string | undefined\n): \"admin\" | \"member\" | null {\n  if (value === \"admin\" || value === \"member\") {\n    return value;\n  }\n  return null;\n}\n","import type { SessionContext } from \"eve/context\";\nimport {\n  parseTenantRole,\n  readStringArrayAttribute,\n  readStringAttribute,\n} from \"./attributes.js\";\n\nexport type TenantRole = \"admin\" | \"member\";\n\nexport type TenantCaller = {\n  userId: string;\n  email: string;\n  name: string;\n  tenantSlug: string;\n  connectionId?: string;\n  role: TenantRole;\n  isAdmin: boolean;\n  groups: string[];\n  workosUserId?: string;\n};\n\n/** Resolve the authenticated RobotRock dashboard user for the current session. */\nexport function tryResolveTenantCaller(ctx: SessionContext): TenantCaller | null {\n  const caller = ctx.session.auth.initiator ?? ctx.session.auth.current;\n  if (caller?.principalType !== \"user\") {\n    return null;\n  }\n\n  const email = readStringAttribute(caller.attributes, \"email\");\n  const name = readStringAttribute(caller.attributes, \"name\");\n  const tenantSlug =\n    readStringAttribute(caller.attributes, \"tenantSlug\") ??\n    readStringAttribute(caller.attributes, \"tenantId\");\n  const role = parseTenantRole(readStringAttribute(caller.attributes, \"role\"));\n  if (!email || !tenantSlug || !caller.principalId || !role) {\n    return null;\n  }\n\n  const workosUserId = readStringAttribute(caller.attributes, \"workosUserId\");\n  const connectionId = readStringAttribute(caller.attributes, \"connectionId\");\n  const groups = readStringArrayAttribute(caller.attributes, \"groups\");\n\n  return {\n    userId: caller.principalId,\n    email,\n    name: name ?? email.split(\"@\")[0] ?? email,\n    tenantSlug,\n    ...(connectionId ? { connectionId } : {}),\n    role,\n    isAdmin: role === \"admin\",\n    groups,\n    ...(workosUserId ? { workosUserId } : {}),\n  };\n}\n\n/** Like {@link tryResolveTenantCaller} but throws when the session has no user. */\nexport function requireTenantCaller(ctx: SessionContext): TenantCaller {\n  const caller = tryResolveTenantCaller(ctx);\n  if (!caller) {\n    throw new Error(\"An authenticated RobotRock tenant user is required.\");\n  }\n  return caller;\n}\n\nexport function isAdminCaller(ctx: SessionContext): boolean {\n  return tryResolveTenantCaller(ctx)?.isAdmin === true;\n}\n\n/** Require an authenticated tenant admin for the current session. */\nexport function requireAdminCaller(ctx: SessionContext): TenantCaller {\n  const caller = requireTenantCaller(ctx);\n  if (!caller.isAdmin) {\n    throw new Error(\"Tenant admin access is required.\");\n  }\n  return caller;\n}\n","/** Field name agents read; dashboard widgets must ignore when rendering. */\nexport const TOOL_REPLY_GUIDANCE_FIELD = \"replyGuidance\" as const;\n\nexport const WHOAMI_REPLY_GUIDANCE =\n  \"The dashboard shows a profile card with name, email, workspace, role, and groups. Do not restate those in your reply. Only add context not in the card (e.g. permissions, refund approval rules, missing group membership).\";\n\nexport const MY_ACCESS_REPLY_GUIDANCE =\n  \"Access details may render in chat UI. Do not restate role, groups, or admin capabilities if already visible. Only explain what the user can or cannot do for their question (e.g. finance group required for refunds ≥ $10,000). When access.tenantAdmin is false and the user needs manageTeam, manageGroups, or query-tasks capabilities, explain briefly then call ask_question to offer sending an admin request to tenant admins — do not tell them to find an admin manually without offering delegation first.\";\n\nexport const CREATE_INBOX_TASK_REPLY_GUIDANCE =\n  \"A task card shows title, assignee, and inbox status in chat. Do not restate task ID, assignee, or delegation details from the card. Only mention next steps or answer the user's question.\";\n\nexport const SEARCH_PRODUCTS_REPLY_GUIDANCE =\n  \"Product results render as a list card in chat. Do not restate product names, prices, or SKUs. Only add context not in the list (e.g. no matches, recommendations).\";\n\nexport const MANAGE_TEAM_MEMBERS_LIST_REPLY_GUIDANCE =\n  \"Team members render as a list card in chat. Do not restate names, emails, or roles from the list. Only add context not shown (e.g. duplicates, next admin actions).\";\n\nexport const MANAGE_TEAM_MEMBERS_DETAIL_REPLY_GUIDANCE =\n  \"Team member details render in chat UI. Do not restate name, email, or role from the card. Only add next steps or policy context.\";\n\nexport const MANAGE_GROUPS_LIST_REPLY_GUIDANCE =\n  \"Groups render as a list card in chat. Do not restate group names, slugs, or descriptions from the list. Use slug (not internal id) for get, update, delete, and membership actions. Only add context not shown.\";\n\nexport const MANAGE_GROUPS_DETAIL_REPLY_GUIDANCE =\n  \"Group details render in chat UI. Do not restate fields already visible in the card. Only add next steps.\";\n\nexport const QUERY_TASKS_LIST_REPLY_GUIDANCE =\n  \"Tasks render as a list card in chat. Do not restate task names, ids, or statuses from the list. Only add context not shown (e.g. filters applied, recommended next action).\";\n\nexport const QUERY_TASKS_DETAIL_REPLY_GUIDANCE =\n  \"Task details render in chat UI. Do not restate fields already visible in the card. Only add analysis or next steps.\";\n\nexport const ASSIGN_TASKS_REPLY_GUIDANCE =\n  \"Reassignment results render in chat UI. Do not restate task ids or assignee emails from the card. Only mention failures, partial success, or next steps.\";\n\nexport const REFUND_CHARGE_REPLY_GUIDANCE =\n  \"Refund details render in chat UI. Do not restate charge id, amount, or status from the card. Only add policy context or next steps.\";\n\nexport const DEPLOY_RELEASE_REPLY_GUIDANCE =\n  \"Deploy details render in chat UI. Do not restate service, version, or environment from the card. Only add rollout context or next steps.\";\n\nexport const GET_WEATHER_REPLY_GUIDANCE =\n  \"Weather details render in chat UI. Do not restate city, condition, or temperature from the card. Only add conversational context if needed.\";\n\nexport const ADMIN_MUTATION_REPLY_GUIDANCE =\n  \"The action result renders in chat UI. Do not restate fields already visible in the card. Confirm outcome briefly or add next steps only.\";\n\nexport type ToolResultWithReplyGuidance<T extends Record<string, unknown>> = T & {\n  replyGuidance: string;\n};\n\n/** Attach model-facing narration hints to a tool execute result. */\nexport function withReplyGuidance<T extends Record<string, unknown>>(\n  result: T,\n  guidance: string\n): ToolResultWithReplyGuidance<T> {\n  return {\n    ...result,\n    [TOOL_REPLY_GUIDANCE_FIELD]: guidance,\n  };\n}\n\n/** Remove agent-only fields before showing raw JSON in the dashboard. */\nexport function stripAgentOnlyToolFields(output: unknown): unknown {\n  if (typeof output !== \"object\" || output === null || Array.isArray(output)) {\n    return output;\n  }\n\n  const record = { ...(output as Record<string, unknown>) };\n  delete record[TOOL_REPLY_GUIDANCE_FIELD];\n  return record;\n}\n"],"mappings":";AAAA,SAAS,kBAAkB;AAC3B,SAAS,SAAS;;;ACDX,SAAS,oBACd,YACA,KACoB;AACpB,QAAM,QAAQ,aAAa,GAAG;AAC9B,MAAI,OAAO,UAAU,YAAY,MAAM,SAAS,GAAG;AACjD,WAAO;AAAA,EACT;AACA,MAAI,MAAM,QAAQ,KAAK,KAAK,OAAO,MAAM,CAAC,MAAM,YAAY,MAAM,CAAC,EAAE,SAAS,GAAG;AAC/E,WAAO,MAAM,CAAC;AAAA,EAChB;AACA,SAAO;AACT;AAEO,SAAS,yBACd,YACA,KACU;AACV,QAAM,QAAQ,aAAa,GAAG;AAC9B,MAAI,OAAO,UAAU,YAAY,MAAM,SAAS,GAAG;AACjD,WAAO,CAAC,KAAK;AAAA,EACf;AACA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MAAM;AAAA,MACX,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS;AAAA,IAC1E;AAAA,EACF;AACA,SAAO,CAAC;AACV;AAEO,SAAS,gBACd,OAC2B;AAC3B,MAAI,UAAU,WAAW,UAAU,UAAU;AAC3C,WAAO;AAAA,EACT;AACA,SAAO;AACT;;;ACfO,SAAS,uBAAuB,KAA0C;AAC/E,QAAM,SAAS,IAAI,QAAQ,KAAK,aAAa,IAAI,QAAQ,KAAK;AAC9D,MAAI,QAAQ,kBAAkB,QAAQ;AACpC,WAAO;AAAA,EACT;AAEA,QAAM,QAAQ,oBAAoB,OAAO,YAAY,OAAO;AAC5D,QAAM,OAAO,oBAAoB,OAAO,YAAY,MAAM;AAC1D,QAAM,aACJ,oBAAoB,OAAO,YAAY,YAAY,KACnD,oBAAoB,OAAO,YAAY,UAAU;AACnD,QAAM,OAAO,gBAAgB,oBAAoB,OAAO,YAAY,MAAM,CAAC;AAC3E,MAAI,CAAC,SAAS,CAAC,cAAc,CAAC,OAAO,eAAe,CAAC,MAAM;AACzD,WAAO;AAAA,EACT;AAEA,QAAM,eAAe,oBAAoB,OAAO,YAAY,cAAc;AAC1E,QAAM,eAAe,oBAAoB,OAAO,YAAY,cAAc;AAC1E,QAAM,SAAS,yBAAyB,OAAO,YAAY,QAAQ;AAEnE,SAAO;AAAA,IACL,QAAQ,OAAO;AAAA,IACf;AAAA,IACA,MAAM,QAAQ,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK;AAAA,IACrC;AAAA,IACA,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;AAAA,IACvC;AAAA,IACA,SAAS,SAAS;AAAA,IAClB;AAAA,IACA,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;AAAA,EACzC;AACF;;;ACpDO,IAAM,4BAA4B;AAElC,IAAM,wBACX;AAiDK,SAAS,kBACd,QACA,UACgC;AAChC,SAAO;AAAA,IACL,GAAG;AAAA,IACH,CAAC,yBAAyB,GAAG;AAAA,EAC/B;AACF;;;AHrDO,IAAM,mBAAmB;AAEzB,IAAM,oBAAoB,EAAE,OAAO,CAAC,CAAC;AAErC,SAAS,mBAAmB;AACjC,SAAO,WAAW;AAAA,IAChB,aACE;AAAA,IAEF,aAAa;AAAA,IACb,MAAM,QAAQ,QAAQ,KAAK;AACzB,YAAM,SAAS,uBAAuB,GAAG;AACzC,UAAI,CAAC,QAAQ;AACX,eAAO;AAAA,UACL;AAAA,YACE,eAAe;AAAA,YACf,SACE;AAAA,UACJ;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,aAAO;AAAA,QACL;AAAA,UACE,eAAe;AAAA,UACf,QAAQ,OAAO;AAAA,UACf,MAAM,OAAO;AAAA,UACb,OAAO,OAAO;AAAA,UACd,YAAY,OAAO;AAAA,UACnB,MAAM,OAAO;AAAA,UACb,SAAS,OAAO;AAAA,UAChB,QAAQ,OAAO,OAAO,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE;AAAA,UAC9C,GAAI,OAAO,eAAe,EAAE,cAAc,OAAO,aAAa,IAAI,CAAC;AAAA,UACnE,WAAW,IAAI,QAAQ;AAAA,QACzB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEO,IAAM,aAAa,iBAAiB;","names":[]}

package/dist/eve/tools/inbox/create-task.d.ts

@@ -0,0 +1,114 @@
+import * as eve_tools from 'eve/tools';
+import { T as ToolResultWithReplyGuidance } from '../../../tool-reply-guidance-C3qrT1In.js';
+import { z } from 'zod';
+import { a as TenantCaller } from '../../../tenant-5YKDrdC-.js';
+import 'eve/context';
+
+/** Eve tool slug — must match the agent tool filename `create_robotrock_task.ts`. */
+declare const CREATE_INBOX_TASK_TOOL_NAME = "create_robotrock_task";
+declare const createInboxTaskInputSchema: z.ZodObject<{
+    type: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    actions: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        title: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    assignTo: z.ZodOptional<z.ZodObject<{
+        users: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        groups: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+    context: z.ZodOptional<z.ZodObject<{
+        data: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        ui: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+    validUntilHours: z.ZodOptional<z.ZodNumber>;
+    priority: z.ZodOptional<z.ZodEnum<{
+        low: "low";
+        normal: "normal";
+        high: "high";
+        urgent: "urgent";
+    }>>;
+    updateMessage: z.ZodOptional<z.ZodString>;
+    delegationReason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type CreateInboxTaskToolInput = z.infer<typeof createInboxTaskInputSchema>;
+type DefineCreateInboxTaskToolOptions = {
+    defaultApp?: string;
+    resolveDelegationReason?: (input: CreateInboxTaskToolInput, caller: TenantCaller) => string | undefined;
+};
+declare function defineCreateInboxTaskTool(options?: DefineCreateInboxTaskToolOptions): eve_tools.ToolDefinition<{
+    type: string;
+    name: string;
+    actions: {
+        id: string;
+        title: string;
+        description?: string | undefined;
+    }[];
+    description?: string | undefined;
+    assignTo?: {
+        users?: string[] | undefined;
+        groups?: string[] | undefined;
+    } | undefined;
+    context?: {
+        data?: Record<string, unknown> | undefined;
+        ui?: Record<string, unknown> | undefined;
+    } | undefined;
+    validUntilHours?: number | undefined;
+    priority?: "low" | "normal" | "high" | "urgent" | undefined;
+    updateMessage?: string | undefined;
+    delegationReason?: string | undefined;
+}, ToolResultWithReplyGuidance<{
+    name: string;
+    assignedTo: {
+        users?: string[] | undefined;
+        groups?: string[] | undefined;
+    } | null;
+    requestedBy: string;
+    delegationReason: string | null;
+    message: string;
+    taskId: string;
+    threadId: string;
+    status: "pending" | "open";
+    validUntil: string;
+    submittedAt: string;
+}>>;
+declare const createInboxTaskTool: eve_tools.ToolDefinition<{
+    type: string;
+    name: string;
+    actions: {
+        id: string;
+        title: string;
+        description?: string | undefined;
+    }[];
+    description?: string | undefined;
+    assignTo?: {
+        users?: string[] | undefined;
+        groups?: string[] | undefined;
+    } | undefined;
+    context?: {
+        data?: Record<string, unknown> | undefined;
+        ui?: Record<string, unknown> | undefined;
+    } | undefined;
+    validUntilHours?: number | undefined;
+    priority?: "low" | "normal" | "high" | "urgent" | undefined;
+    updateMessage?: string | undefined;
+    delegationReason?: string | undefined;
+}, ToolResultWithReplyGuidance<{
+    name: string;
+    assignedTo: {
+        users?: string[] | undefined;
+        groups?: string[] | undefined;
+    } | null;
+    requestedBy: string;
+    delegationReason: string | null;
+    message: string;
+    taskId: string;
+    threadId: string;
+    status: "pending" | "open";
+    validUntil: string;
+    submittedAt: string;
+}>>;
+
+export { CREATE_INBOX_TASK_TOOL_NAME, type CreateInboxTaskToolInput, type DefineCreateInboxTaskToolOptions, createInboxTaskInputSchema, createInboxTaskTool, defineCreateInboxTaskTool };