@agentdeploymentco/bishop 0.2.0 → 0.3.1

package/README.md

@@ -2,7 +2,7 @@
 
 Bishop puts an agent where your team already works.
 
-Point it at a directory an agent already works in, and the agent becomes something your team can talk to: a Slack thread, an email thread, or both at once. Bishop handles the connection and the mapping between threads and agent sessions.
+Point it at a directory an agent already works in, and the agent becomes something your team can talk to: a Slack thread, an email thread, a Teams conversation, or all of them at once. Bishop handles the connection and the mapping between threads and agent sessions.
 
 ```
 $ cd path/to/agent
@@ -10,7 +10,7 @@ $ bishop slack setup
 $ bishop
 ```
 
-Bishop is an agent gateway: it sits between the places people work and the agents they work with. Today that is Slack and Gmail, one agent, in a single process.
+Bishop is an agent gateway: it sits between the places people work and the agents they work with. Today that is Slack, Gmail and Microsoft Teams, one agent, in a single process.
 
 [design/glossary.md](design/glossary.md) is what Bishop's own words mean, if a term below is unfamiliar.
 
@@ -18,7 +18,7 @@ Bishop is an agent gateway: it sits between the places people work and the agent
 
 - Node 24 or newer
 - A directory the agent works in, meaning `claude` or `codex` runs there and does something useful
-- At least one interface. For Slack: the [`slack` CLI](https://docs.slack.dev/tools/slack-cli/), logged in with `slack auth login`, unless you set the app up by hand (see [Without the Slack CLI](#without-the-slack-cli)), plus permission to install an app in your workspace. For email: a Google Workspace account, a Google Cloud project, and a Workspace user for the agent.
+- At least one interface. For Slack: the [`slack` CLI](https://docs.slack.dev/tools/slack-cli/), logged in with `slack auth login`, unless you set the app up by hand (see [Without the Slack CLI](#without-the-slack-cli)), plus permission to install an app in your workspace. For email: a Google Workspace account, a Google Cloud project, and a Workspace user for the agent. For Teams: the [Teams Developer CLI](https://microsoft.github.io/teams-sdk/), logged in with `teams login`, unless an administrator creates the app for you, plus a way for Teams to reach this host over HTTPS (see [Microsoft Teams](#microsoft-teams)). Reading a file attached in a Teams channel also wants the [Azure CLI](https://learn.microsoft.com/cli/azure/install-azure-cli), which setup uses for the one grant that is not in the Teams manifest.
 
 ## Install
 
@@ -147,7 +147,82 @@ Google revokes Gmail refresh tokens when the mailbox's password is reset. The ag
 
 If that isn't acceptable, use domain-wide delegation instead. Nothing about it expires and no person is ever needed again, but it costs more to set up: a service account key, which most organizations now block by default, plus a Workspace super admin to grant the delegation. Set `BISHOP_GMAIL_USER` and `BISHOP_GMAIL_SERVICE_ACCOUNT` instead of the three OAuth variables, and run `bishop gmail setup` to check it. It prints the exact client ID and scope to paste into the admin console when the grant is missing.
 
-Bishop runs whichever interfaces have credentials. Set up both and one process answers Slack and email at once, with separate threads and separate sessions.
+Bishop runs whichever interfaces have credentials. Set up more than one and a single process answers all of them at once, with separate threads and separate sessions.
+
+### Microsoft Teams
+
+Teams needs a Teams app, and the app needs a URL to deliver to. Slack holds a socket open; Teams POSTs every message to an HTTPS endpoint Bishop serves. Nothing binds a port unless the Teams credentials are set.
+
+```
+$ bishop teams setup --endpoint https://your-host.example/api/messages
+```
+
+It creates the app through the [Teams Developer CLI](https://microsoft.github.io/teams-sdk/), writes the three `BISHOP_TEAMS_*` credentials to `.env`, and records the app in `.bishop/config.json`. It prints a link to install the app in Teams. You can leave `--endpoint` off and set it later.
+
+It also asks the app for `ChannelMessage.Read.Group` and `ChatMessage.Read.Chat`, which are what let the agent hear a reply that does not @-mention it, and turns on `supportsFiles`, which is what lets anyone attach a file in a chat with it. `teams app create` takes no flags for any of them, so each is a further write, and a Developer Portal that refuses one costs that setting rather than the setup: it says what is missing and what to run. Run setup again on a configured agent and it reports whatever is still missing.
+
+One grant is not in the Teams manifest, so setup makes it with the [Azure CLI](https://learn.microsoft.com/cli/azure/install-azure-cli) instead. `Files.Read.All` on the app registration is what lets the agent read a file attached in a channel, and consenting it takes an administrator, so setup tries and prints the commands when it cannot: `az` missing, `az` logged out, signed in to another tenant, and a refusal all say which one happened. Install `az` and run `az login --allow-no-subscriptions` before setup if you can make the grant yourself. Nothing else needs `az`, and an agent that only works in direct chats never needs the grant.
+
+**Adding or changing those permissions on an app that is already installed means removing it and installing it again.** Teams asks for them at install time and at no other time, so an app updated in place keeps the consent it was installed with, whatever its manifest now says. Remove it from every team and chat it is in, then add it back. A new app is unaffected, since installing it is the first thing that happens to it.
+
+Install the CLI with the flags, then log in:
+
+```
+$ npm install -g --allow-scripts=@azure/msal-node-extensions,keytar @microsoft/teams.cli
+$ teams login
+```
+
+The CLI keeps its login in a native module that npm refuses to build by default, and falls back to holding the token in memory rather than reporting it. Installed without the flags it logs in, says it worked, and starts every later command logged out. Bishop says so when it sees that happen.
+
+**Run this on a workstation.** Over SSH the CLI has no browser to open and falls back to the device code flow, which Microsoft blocks by default in every tenant, so no login can succeed there. Set up on a laptop and copy the `BISHOP_TEAMS_*` lines to the server, or use the administrator path below, which needs no CLI at all. `bishop teams setup` and `bishop teams endpoint` both say this rather than let a login fail with an Entra error code.
+
+Run it again and it reports what's configured, including where the app currently points, and changes nothing. If only half of setup is on disk, an app with no credentials or credentials with no app, it says which half and stops rather than create a second app: a client secret is shown once, and an orphaned app is left behind in your tenant.
+
+#### The endpoint
+
+Bishop serves `/api/messages` on port 3978 by default, on loopback, so something has to carry the public HTTPS to it. A tunnel does that without opening a port on the host:
+
+```
+$ cloudflared tunnel --url http://localhost:3978
+```
+
+That gives you the URL to hand `bishop teams setup --endpoint`. An ephemeral tunnel hostname changes on every restart, and a Teams app pointed at the old one goes quiet with nothing in the log to say why, so use a stable hostname for anything but a trial.
+
+To terminate TLS in Bishop itself instead, give it a certificate:
+
+```json
+{
+  "teams": {
+    "port": 443,
+    "host": "0.0.0.0",
+    "tls": { "cert": "/etc/bishop/fullchain.pem", "key": "/etc/bishop/privkey.pem" }
+  }
+}
+```
+
+**When the URL changes**, which is every time an ephemeral tunnel restarts:
+
+```
+$ bishop teams endpoint https://new-host.example/api/messages
+```
+
+That touches the app and nothing else. When the change rewrites the app's manifest, which moving to a different domain does, it says so: the app has to be reinstalled in Teams before it receives anything again.
+
+#### When somebody else owns the app
+
+In many tenants only an administrator can create it, and installing custom apps can be turned off tenant-wide. `bishop teams instructions` prints what to send them. When they send back a client ID, a client secret, and a tenant ID:
+
+```
+$ bishop teams setup --manual
+```
+
+It checks the three against Microsoft before saving them, using the same request Bishop makes on every turn, so a bad secret fails here instead of silently on the first message.
+
+#### Installing the app
+
+Last, install the app in Teams by opening the link setup printed. When this is blocked the link does nothing at all: no activity is delivered, so Bishop's log stays silent and a working endpoint looks broken.
+
+Sideloading has to be allowed twice over, and either setting blocks it alone. `bishop teams setup` names whichever one is in the way. Both live in the Teams admin center at `admin.teams.microsoft.com`, which is its own portal rather than a page of the Microsoft 365 admin center or Entra: "Let users interact with custom apps" under Teams apps, Manage apps, Org-wide app settings, and "Upload custom apps" in the app setup policy assigned to the account, under Teams apps, Setup policies. An administrator can skip the per-user policy by uploading the app package under Teams apps, Manage apps, which publishes it to the whole org and takes a few hours to appear.
 
 ### GitHub
 
@@ -292,6 +367,31 @@ Two rules are worth stating plainly, because both are about mail the agent must
 
 **Bishop never answers mail that arrived before you pointed it at the mailbox.** It records that moment the first time it connects and refuses anything older, whatever else happens to its polling state. Startup logs the cutoff as `answeringMailAfter`. Restarts still catch up on whatever arrived while it was down, because the cutoff is when it first attached, not when the process started. There is no setting that moves it earlier.
 
+## Using it in Teams
+
+Install the app in Teams and message it directly, or @-mention it in a channel. A channel reply starts a thread and the agent follows that thread; a chat has no threads, so the whole chat is one session.
+
+Teams behaves much the way Slack does:
+
+- **A turn shows itself while it runs.** What the agent writes lands as it writes it, and a run of tool calls shares one message that is rewritten as the work moves and replaced by a count of them when the agent speaks again. A turn ends with a line saying what it cost, edited onto the last message. Set `teams.verbosity` in `.bishop/config.json` to `medium` to drop the tool calls, or `low` to leave the answer alone with no closing line, which is how Teams behaved before. There is still no typing indicator: Teams hides it while a stream is open and outside one it lapses in seconds.
+- **Tables do not render.** Teams supports a narrower markdown than Slack. Bold, italics, links, code and lists work, and the agent is told to write a list where it would otherwise reach for a table.
+- **@-mention it once per thread, not once per message.** Teams delivers a channel or group-chat message to an app only when the app is @-mentioned. `bishop teams setup` asks for two resource-specific consent permissions that lift that, so once the agent has answered in a thread it hears the replies without being tagged again. Without them the agent still works and still has to be tagged every time.
+- **Changing those permissions means removing the app and installing it again.** Teams asks for them when an app is installed and at no other time. Updating an app that is already in a team or a chat does not ask, however the manifest changed, so it goes on hearing nothing but mentions until somebody removes it from every team and chat it is in and adds it back. This catches out anyone upgrading an agent that was already running in Teams.
+- **It can stay out of a conversation.** In a thread with several people talking, a message that did not name the agent is one it may leave alone, and it says nothing at all rather than answering. A message that names it is always answered, as is anything in a one-to-one chat.
+- **There is no catch-up.** The permissions change what arrives from now on, not what was said before the agent was pulled in.
+- **Files come through in a direct chat, and images anywhere.** Attach a file in a chat with the agent and it gets the path, the same as in Slack; an image pasted into a message reaches it in any scope. Teams shows no attach button at all until the app's manifest asks for files, so `bishop teams setup` turns that on when it creates the app, and reports it when re-run against an app that predates this.
+- **A file attached in a channel needs one more grant.** Teams keeps that file off the message it delivers, so Bishop reads it back through Microsoft Graph, which takes `Files.Read.All` on the app registration. `bishop teams setup` makes that grant with `az` when it can, and prints the commands for an administrator when it cannot. Re-run it and it says whether the grant is there, which it reads from the app's own token rather than from `az`. No Azure subscription is involved and the bot stays Teams-managed. Without the grant the agent is still told a file was attached and says it could not read it, rather than answering as though the message were empty.
+- **A file attached in a group chat may still not come through.** The channel path covers it if Teams describes it the same way, which is untested. A direct chat and a channel are the two that are known to work.
+- **There is no stop button.**
+
+The allow list takes user principal names (`hayes@example.com`), `@example.com` for everyone at a domain, or an Entra object ID:
+
+```json
+{ "teams": { "allow": ["hayes@example.com", "@example.com"] } }
+```
+
+Leave it out and anyone in the tenant who can reach the app can use the agent. Somebody not on the list is told so, rather than left with silence that looks like the agent being broken.
+
 ## Using it in Slack
 
 **DM the bot** and every message reaches the agent.
@@ -305,6 +405,8 @@ Each thread is its own agent session with its own history. Two threads are two i
 
 **Turn it down.** A thread showing every tool call is a thread that's hard to read when you already trust the agent. Send `` `! verbosity medium` `` to drop the tool card, or `` `! verbosity low` `` to leave only the answer. Send `` `! verbosity` `` to see where a thread stands, and `` `! verbosity default` `` to put it back. It applies to the turn that's running, so you can quiet one mid-flight. `slack.verbosity` in the config sets where every thread starts, and Slack always marks the thread as working whatever the level.
 
+**Run one thread on another model.** Send `` `! model opus` `` to move a thread onto a different model, `` `! model terra high` `` to set the model and the effort together, or `` `! model --effort high` `` to change how hard it thinks and leave the model alone. Send `` `! model` `` to see where a thread stands, and `default` in either position to put it back: `` `! model default default` ``. Names go to the harness as you type them, in its own naming, so `opus` or `gpt-5.1-codex-max` means whatever it means there; Bishop only checks that it looks like a model name. A name the harness doesn't know does what a bad `--model` does, which differs by harness and is described under `agent.model` below: Codex fails the turn, Claude says so in prose about a model and silently ignores an effort it doesn't recognize. `` `! model` `` is how you see what a thread is being run with, which is the only sign of a typo in the silent case. Unlike verbosity this takes effect on the thread's next turn, not the one running, and it lasts for the life of the thread.
+
 **Commands go to Bishop, not the agent.** Anything whose whole message is code opening with `! ` is a command: Bishop runs it, answers in the thread, and the agent is never told about either. `` `! help` `` lists them, and any of them takes `--help`. What follows the `!` has to look like a command name, so code and pasted output reach the agent as they always did.
 
 **It doesn't answer every message in a busy thread.** In a thread where more than one other person is talking, the agent can leave a message alone when it wasn't for the agent, the way anyone else in the thread would. Slack still shows it thinking for a moment, the way somebody starts typing and then doesn't send. It always answers a message that @-mentions it, and always answers in a thread where you're the only other person talking, so a DM and a thread between you and the agent are unchanged.
@@ -409,6 +511,8 @@ Every block is optional, and an interface runs when its credentials are set rath
 
 `slack` takes `allow`, `maxBotTurns`, and `verbosity`, plus the `workspace` and `app` fields setup writes.
 
+`teams` takes `allow`, `verbosity`, `port`, `host`, and `tls`, plus the `app` fields setup writes. Its `verbosity` is Slack's three levels and works almost the same way, except that `low` also drops the line saying what a turn cost. It is also the only place the level is set: Teams has no command messages, so there is no way to turn one conversation down without turning them all down.
+
 `agent` takes `harness`, `model`, `effort`, `worktrees`, `options`, and `harnesses`. The last two are alternatives: `options` for a config that runs one harness, `harnesses` for one that switches.
 
 Every key is checked at startup, so a typo fails with the path to it rather than being ignored. The one exception is `agent.options`, which is passed through to the harness unvalidated.
@@ -627,7 +731,9 @@ Under Claude, Bishop refuses `Edit`, `Write`, and `NotebookEdit` in the shared d
 
 **When the agent directory isn't a git repository**, there's nothing to isolate. Bishop warns at startup and says so once in each thread, then edits the directory directly.
 
-### Shared files
+### Files people share
+
+Files go both ways: people attach them for the agent, and the agent sends them back. This half is the first.
 
 Bishop downloads what people attach and saves it under `.bishop/files`, one directory per thread, collected with everything else that thread left behind. The agent reads it from disk, so any file type works.
 
@@ -643,15 +749,26 @@ A file shared earlier in the conversation is named to the agent rather than down
 
 The default is 100. A file over the limit isn't refused: the agent is told its name and that it was too large, so it can say so. There is no restriction on type and won't be.
 
-**Slack needs the `files:read` scope**, which is new. An app set up before this has to be reinstalled to grant it, and until then Bishop warns at startup and the agent sees a note in place of each file. Run `bishop slack manifest` for the current manifest, or reinstall from App Settings. Gmail needs nothing new.
+**Slack needs the `files:read` and `files:write` scopes**, which are new. An app set up before these has to be reinstalled to grant them, and until then Bishop warns at startup about each one it is missing, the agent sees a note in place of each file, and a file it sends fails to upload. Run `bishop slack manifest` for the current manifest, or reinstall from App Settings. Gmail needs nothing new. **Teams needs `supportsFiles`** on the app's bot, without which it offers no attach button in a chat with the agent and only pasted images arrive. `bishop teams setup` sets it on a new app and tells you when an existing one is missing it, which needs the Teams CLI logged in.
+
+### Files the agent sends
+
+The other half. The agent can send a file back: an upload in the Slack thread, an attachment on the mail in email. It registers the file with a tool, which checks it and hands back a reference, and writes that reference into its reply where the file should appear. In Slack the file arrives on the message carrying the words around it, the way a person sends one. A file it registers and never places is still sent, after the answer, so nothing is silently dropped.
+
+Teams cannot carry one yet. An agent that tries in a Teams conversation is told so and can say what it made instead, and a scheduled report bound for Teams arrives with a line naming the file it could not attach.
+
+The limit is 25MB per answer in Slack and 4MB by email, across everything one answer sends. Neither is configurable, and the email one is lower because of how Bishop talks to Gmail rather than what Gmail accepts. Anything past it is dropped with a line in the log and the message still goes. A scheduled report can carry files too, and an agent that reports nothing sends nothing, attachment included.
 
 ### Credentials
 
-`.env` holds the Slack tokens, written by setup:
+`.env` holds each interface's credentials, written by its setup command:
 
 ```
 BISHOP_SLACK_BOT_TOKEN=xoxb-...
 BISHOP_SLACK_APP_TOKEN=xapp-...
+BISHOP_TEAMS_CLIENT_ID=...
+BISHOP_TEAMS_CLIENT_SECRET=...
+BISHOP_TEAMS_TENANT_ID=...
 ```
 
 Add `ANTHROPIC_API_KEY` if the agent should use a specific key. Without one, the agent authenticates however `claude` does on that machine, usually an existing login. Bishop logs which of the two it used at startup.
@@ -660,13 +777,13 @@ Anything else in `.env` reaches the agent's environment too, which is how `GH_TO
 
 ## Running it for real
 
-Bishop is one process that logs JSON to stdout and errors to stderr, so any process supervisor works. It needs only outbound access to Slack, since it uses Socket Mode. No public URL, no inbound firewall rule.
+Bishop is one process that logs JSON to stdout and errors to stderr, so any process supervisor works. Slack and Gmail need outbound access only, since one holds a socket open and the other polls. Teams is the exception: it POSTs activities to an endpoint rather than holding a socket open, so Bishop serves one when Teams credentials are present. That endpoint binds loopback like every other port Bishop opens, and a tunnel gives it a public hostname and a certificate without an inbound firewall rule.
 
 ```
 $ BISHOP_LOG_LEVEL=info bishop
 ```
 
-`BISHOP_LOG_LEVEL=debug` adds tool activity and every routing decision. Pipe through `npx pino-pretty` to read it by eye.
+`BISHOP_LOG_LEVEL=debug` adds tool activity and every routing decision. Pipe through `npx pino-pretty` to read it by eye. It works in `.env` as well as exported, and an exported one wins. It is the only setting of Bishop's own that `.env` carries; everything else lives in `config.json`. A value that isn't a level (`trace`, `debug`, `info`, `warn`, `error`, `fatal`, `silent`) logs a warning and leaves the level at `info`.
 
 At startup Bishop checks that the agent can launch, resolves the allow list, and connects to Slack, failing with a specific message if any of those doesn't work.
 
@@ -816,6 +933,8 @@ Worth knowing if you're wondering why the `slack` CLI is a requirement.
 
 Socket Mode needs an app-level (`xapp-`) token, and no Slack API will mint one. The `slack` CLI does, and hands it to a project it runs. So setup writes a throwaway Slack project, runs it once to collect both tokens, and stops it. The CLI creates that app as a dev app and appends ` (local)` to its name, so setup pushes the intended manifest over it afterward. That changes no permissions and needs no reinstall.
 
+Teams needs none of that. `teams app create` talks to the Developer Portal directly and reports the app and its credentials as JSON, which setup reads and writes to `.env` under its own variable names.
+
 ## License
 
 Not yet chosen, and the published package says so: `license` is `UNLICENSED`, which grants nothing. Nobody outside the company should build on it until there are real terms.

package/dist/cli.js

@@ -1,17 +1,20 @@
 #!/usr/bin/env node
-import{stat as te}from"node:fs/promises";import{join as oe,resolve as ne}from"node:path";import{Command as se}from"commander";import{agentSnapshots as re,fixedAgentDir as ae}from"./agent-dir.js";import{looksRemote as B,parseRepoSpec as M}from"./agent-source.js";import{everyStore as P,storePath as U}from"./agent-store.js";import{attachmentStore as ie}from"./attachments.js";import{HARNESSES as ce,loadConfig as O,nonEmptyFlag as K,parseHarnessName as de,positiveIntFlag as pe,resolveAgent as me}from"./config.js";import{dbPath as F,openDb as z}from"./db.js";import{describeMissing as he,loadEnv as G,readCredentials as le}from"./env.js";import{BishopError as b}from"./errors.js";import{fileStore as ue}from"./files.js";import{DEFAULT_MAX_AGE_DAYS as fe,makeCollector as we,sweep as ge}from"./gc.js";import{ghAuthLogin as ye,ghCliIn as ke,gitAuthenticatesToGithub as Se,withTemporaryGhConfig as ve}from"./github/gh.js";import{AGENT_SCOPES as be,checkGithubSetup as Ee}from"./github/setup.js";import{createGmail as _e}from"./gmail/create.js";import{checkGmailSetup as Ie}from"./gmail/setup.js";import{createHarness as Ae}from"./harness/create.js";import{sharedFileFetcher as Te}from"./interface/attachments.js";import{principalCheck as q}from"./interface/authorize.js";import{deliveryRouter as Ge}from"./interface/delivery.js";import{conversationMatch as Oe,destinationResolver as Ne}from"./interface/destination.js";import{log as p}from"./log.js";import{addSchedule as Re,listSchedules as xe,removeSchedule as $e,setScheduleEnabled as j}from"./schedule/cli.js";import{authorizedToRun as He,makeScheduler as Le}from"./schedule/runner.js";import{scheduleStore as Ce}from"./schedule/store.js";import{threadQueue as De}from"./sessions/queue.js";import{interfaceState as Be,retentionStore as Y,sessionStore as Me,threadHandover as Pe,threadMeta as Ue}from"./sessions/store.js";import{ensureGitignore as Ke,openBrowser as Fe,resolveAppDetails as ze,setupSlack as qe,setupSlackManually as je,withPrompt as W,writeEnv as J}from"./setup.js";import{createSlackInterface as Ye}from"./slack/interface.js";import{buildManifest as We}from"./slack/manifest.js";import{fileTools as Je}from"./tools/files.js";import{scheduleTools as Ve}from"./tools/schedules.js";import{startToolServer as Qe}from"./tools/server.js";import{makeTurnRunner as Xe}from"./turn.js";import{version as Ze}from"./version.js";import{hasGitIdentity as et,isGitRepo as tt,sharedDirNotice as ot,WORKTREE_DIR as nt}from"./worktrees.js";function w(e){process.stderr.write(`${e}
-`),process.exit(1)}async function st(e){const t=ne(e??".");let o;try{o=(await te(t)).isDirectory()}catch{throw new b(`--agent directory doesn't exist: ${t}`)}if(!o)throw new b(`--agent is not a directory: ${t}`);return t}async function rt(e){const t=await tt(e),o={enabled:!0,isRepo:t};return t?(p.info({agentDir:e,worktrees:oe(e,nt)},"worktree mode is on"),await et(e)||p.warn({agentDir:e},"git has no user.name or user.email here, so the agent cannot commit what it does in a worktree"),o):(p.warn({agentDir:e},"worktree mode is on but the agent directory is not a git repository; threads share it"),o)}function at(e){if(e.kind==="options-replaced"){p.warn({harness:e.harness},`agent.harnesses.${e.harness} replaces agent.options, which is ignored for this run`);return}p.warn({harness:e.harness,configured:e.configured},`--harness overrides the configured harness, but agent.options is still written for that one; move it to agent.harnesses.${e.configured} and give ${e.harness} its own block`)}async function it(e=[],t={}){e.length>0&&w(`bishop: unknown command "${e[0]}"
+import{stat as ie}from"node:fs/promises";import{join as ce,resolve as de}from"node:path";import{Command as pe}from"commander";import{agentSnapshots as me,fixedAgentDir as he}from"./agent-dir.js";import{looksRemote as K,parseRepoSpec as F}from"./agent-source.js";import{everyStore as z,storePath as q}from"./agent-store.js";import{attachmentStore as le}from"./attachments.js";import{HARNESSES as ue,loadConfig as O,nonEmptyFlag as j,parseHarnessName as fe,positiveIntFlag as we,resolveAgent as ge}from"./config.js";import{dbPath as Y,openDb as W}from"./db.js";import{describeMissing as ye,loadEnv as S,readCredentials as ke}from"./env.js";import{BishopError as v}from"./errors.js";import{fileStore as Se}from"./files.js";import{DEFAULT_MAX_AGE_DAYS as ve,makeCollector as be,sweep as Te}from"./gc.js";import{ghAuthLogin as Ie,ghCliIn as Ee,gitAuthenticatesToGithub as Ae,withTemporaryGhConfig as _e}from"./github/gh.js";import{AGENT_SCOPES as Re,checkGithubSetup as Ne}from"./github/setup.js";import{createGmail as Oe}from"./gmail/create.js";import{checkGmailSetup as Ge}from"./gmail/setup.js";import{createHarness as $e}from"./harness/create.js";import{sharedFileFetcher as xe}from"./interface/attachments.js";import{principalCheck as J}from"./interface/authorize.js";import{deliveryRouter as Le}from"./interface/delivery.js";import{conversationMatch as Ce,destinationResolver as He}from"./interface/destination.js";import{log as p,requestedLevel as Me}from"./log.js";import{addSchedule as Pe,listSchedules as De,removeSchedule as Be,setScheduleEnabled as Q}from"./schedule/cli.js";import{authorizedToRun as Ue,makeScheduler as Ke}from"./schedule/runner.js";import{scheduleStore as Fe}from"./schedule/store.js";import{threadQueue as ze}from"./sessions/queue.js";import{interfaceState as qe,retentionStore as V,sessionStore as je,threadHandover as Ye,threadMeta as We}from"./sessions/store.js";import{ensureGitignore as Je,openBrowser as Qe,resolveAppDetails as Ve,SetupError as X,setupSlack as Xe,setupSlackManually as Ze,withPrompt as Z,writeEnv as ee}from"./setup.js";import{createSlackInterface as et}from"./slack/interface.js";import{buildManifest as tt}from"./slack/manifest.js";import{createTeams as ot}from"./teams/create.js";import{administratorInstructions as nt,repointTeamsEndpoint as st,setupTeams as rt,setupTeamsManually as at}from"./teams/setup.js";import{threadModel as it}from"./thread-model.js";import{fileTools as ct}from"./tools/files.js";import{scheduleTools as dt}from"./tools/schedules.js";import{startToolServer as pt}from"./tools/server.js";import{makeTurnRunner as mt}from"./turn.js";import{version as ht}from"./version.js";import{hasGitIdentity as lt,isGitRepo as ut,sharedDirNotice as ft,WORKTREE_DIR as wt}from"./worktrees.js";function u(e){process.stderr.write(`${e}
+`),process.exit(1)}async function gt(e){const t=de(e??".");let n;try{n=(await ie(t)).isDirectory()}catch{throw new v(`--agent directory doesn't exist: ${t}`)}if(!n)throw new v(`--agent is not a directory: ${t}`);return t}async function yt(e){const t=await ut(e),n={enabled:!0,isRepo:t};return t?(p.info({agentDir:e,worktrees:ce(e,wt)},"worktree mode is on"),await lt(e)||p.warn({agentDir:e},"git has no user.name or user.email here, so the agent cannot commit what it does in a worktree"),n):(p.warn({agentDir:e},"worktree mode is on but the agent directory is not a git repository; threads share it"),n)}function kt(e){if(e.kind==="options-replaced"){p.warn({harness:e.harness},`agent.harnesses.${e.harness} replaces agent.options, which is ignored for this run`);return}p.warn({harness:e.harness,configured:e.configured},`--harness overrides the configured harness, but agent.options is still written for that one; move it to agent.harnesses.${e.configured} and give ${e.harness} its own block`)}async function St(e=[],t={}){e.length>0&&u(`bishop: unknown command "${e[0]}"
 
-Run \`bishop --help\` to see what's available.`);const o=process.cwd(),a=t.agent&&B(t.agent)?M(t.agent):void 0;t.autoUpdate&&!a&&w("--auto-update needs --agent to be a git URL. Bishop never updates a directory it was pointed at; that state is yours to manage."),G(o);const s=await O(o),i=le();i.ok||w(he(i));const r=me(s,t);for(const n of r.warnings)at(n);const m=z(F(o)),c=Me(m,r.harness);let d;const l=async n=>await d?.check(n)??{ok:!0},u=a?re({spec:a,store:U(o,a.slug),dirs:c,autoUpdate:!!t.autoUpdate,recheck:l}):void 0,f=u?await u.start():await st(t.agent),Q=u?u.forTurn:ae(f,c);p.info({bishopDir:o,agentDir:f,...f===o?{}:{separate:!0},...a?{source:a.cloneUrl,autoUpdate:!!t.autoUpdate}:{},app:s.slack?.app?.name},"bishop starting");const _=s.agent?.worktrees?await rt(f):void 0,S=Ae(r.harness,{...r.options?{options:r.options}:{},...r.model?{model:r.model}:{},...r.effort?{effort:r.effort}:{},..._?{worktrees:_}:{},credentials:i.credentials}),I=await S.check(f);I.ok||w(S.describeStartupFailure(f,I.error)),p.info({harness:S.name,credentials:I.credentialSource??"unreported",model:I.model??r.model,...r.effort?{effort:r.effort}:{},...r.options?{agentOptions:Object.keys(r.options)}:{}},"harness ready"),d=S,p.info({sessions:c.count()},"opened session store");const N=we({retention:Y(m),stores:()=>P(o),home:o,...s.gc?.maxAgeDays===void 0?{}:{maxAgeDays:s.gc.maxAgeDays}});N.start();let g;const X=n=>g?q(g)(n):He(n),Z=async(n,h)=>{if(!g)throw new b("no interface is running, so there is nowhere to send");return Ne(g,{optedInOnly:!0})(n,h)},ee=(n,h)=>g?Oe(g)(n,h):!1,R=ue({home:o,...s.files?.maxMb===void 0?{}:{maxMb:s.files.maxMb}}),x=ie(m),$=Ce(m),H=await Qe({tools:[...Ve({schedules:$,authorized:X,resolve:Z,sameConversation:ee}),...Je({fetch:Te({interfaces:()=>g??[],store:x,files:R})})]}),L=Xe({harness:S,cwd:Q,sessions:c,tools:H,..._&&!_.isRepo?{sharedDirNotice:ot(f)}:{}}),C=De(),A={threads:c,events:c,files:R,attachments:x,run:n=>C.run(n.thread.threadKey,()=>L.run(n)),stop:n=>L.stop(n)},y=[];if(i.credentials.slack&&y.push(await Ye({...A,credentials:i.credentials.slack,meta:Ue(m),...s.slack?.verbosity?{verbosity:s.slack.verbosity}:{},...s.slack?.allow?{allow:s.slack.allow}:{},...s.slack?.maxBotTurns===void 0?{}:{maxBotTurns:s.slack.maxBotTurns}})),i.credentials.gmail)try{y.push(await _e({...A,credentials:i.credentials.gmail,...s.gmail?{config:s.gmail}:{},state:Be(m)}))}catch(n){n instanceof b&&w(n.message);const h=i.credentials.gmail,T=h.kind==="oauth"?"the authorized Gmail account":`${h.user}`;w(`Couldn't reach the mailbox for ${T}:
-  ${n instanceof Error?n.message:String(n)}
+Run \`bishop --help\` to see what's available.`);const n=process.cwd(),i=t.agent&&K(t.agent)?F(t.agent):void 0;t.autoUpdate&&!i&&u("--auto-update needs --agent to be a git URL. Bishop never updates a directory it was pointed at; that state is yours to manage."),S(n);const s=await O(n),a=ke();a.ok||u(ye(a));const r=ge(s,t);for(const o of r.warnings)kt(o);const m=W(Y(n)),c=je(m,r.harness);let d;const l=async o=>await d?.check(o)??{ok:!0},f=i?me({spec:i,store:q(n,i.slug),dirs:c,autoUpdate:!!t.autoUpdate,recheck:l}):void 0,w=f?await f.start():await gt(t.agent),oe=f?f.forTurn:he(w,c);p.info({bishopDir:n,agentDir:w,...w===n?{}:{separate:!0},...i?{source:i.cloneUrl,autoUpdate:!!t.autoUpdate}:{},app:s.slack?.app?.name},"bishop starting");const A=s.agent?.worktrees?await yt(w):void 0,b=$e(r.harness,{...r.options?{options:r.options}:{},...r.model?{model:r.model}:{},...r.effort?{effort:r.effort}:{},...A?{worktrees:A}:{},credentials:a.credentials}),_=await b.check(w);_.ok||u(b.describeStartupFailure(w,_.error));const N=_.model??r.model;p.info({harness:b.name,credentials:_.credentialSource??"unreported",model:N,...r.effort?{effort:r.effort}:{},...r.options?{agentOptions:Object.keys(r.options)}:{}},"harness ready"),d=b,p.info({sessions:c.count()},"opened session store");const $=be({retention:V(m),stores:()=>z(n),home:n,...s.gc?.maxAgeDays===void 0?{}:{maxAgeDays:s.gc.maxAgeDays}});$.start();let y;const ne=o=>y?J(y)(o):Ue(o),se=async(o,h)=>{if(!y)throw new v("no interface is running, so there is nowhere to send");return He(y,{optedInOnly:!0})(o,h)},re=(o,h)=>y?Ce(y)(o,h):!1,x=Se({home:n,...s.files?.maxMb===void 0?{}:{maxMb:s.files.maxMb}}),L=le(m),C=Fe(m),H=await pt({tools:[...dt({schedules:C,authorized:ne,resolve:se,sameConversation:re}),...ct({fetch:xe({interfaces:()=>y??[],store:L,files:x})})]}),M=We(m),P=it(M),ae={...N?{model:N}:{},...r.effort?{effort:r.effort}:{}},D=mt({harness:b,cwd:oe,sessions:c,model:P,tools:H,...A&&!A.isRepo?{sharedDirNotice:ft(w)}:{}}),B=ze(),T={threads:c,events:c,files:x,attachments:L,run:o=>B.run(o.thread.threadKey,()=>D.run(o)),stop:o=>D.stop(o)},g=[];if(a.credentials.slack&&g.push(await et({...T,credentials:a.credentials.slack,meta:M,model:P,configuredModel:ae,...s.slack?.verbosity?{verbosity:s.slack.verbosity}:{},...s.slack?.allow?{allow:s.slack.allow}:{},...s.slack?.maxBotTurns===void 0?{}:{maxBotTurns:s.slack.maxBotTurns}})),a.credentials.gmail)try{g.push(await Oe({...T,credentials:a.credentials.gmail,...s.gmail?{config:s.gmail}:{},state:qe(m)}))}catch(o){o instanceof v&&u(o.message);const h=a.credentials.gmail,R=h.kind==="oauth"?"the authorized Gmail account":`${h.user}`;u(`Couldn't reach the mailbox for ${R}:
+  ${o instanceof Error?o.message:String(o)}
 
-Run \`bishop gmail setup\` to check the credentials.`)}g=y;for(const n of y)await n.start();p.info({interfaces:y.map(n=>n.name)},"bishop is listening");const D=Le({schedules:$,run:A.run,threads:c,cancel:A.stop,deliver:Ge(y),authorized:q(y),attach:Pe(c)});D.start();for(const n of["SIGINT","SIGTERM"])process.once(n,()=>{p.info({signal:n,inFlight:C.size},"shutting down"),D.stop().catch(h=>p.error({err:h},"the scheduler failed to stop cleanly")).then(()=>Promise.allSettled(y.map(h=>h.stop()))).then(async h=>{const T=h.filter(v=>v.status==="rejected");for(const v of T)p.error({err:v.reason},"an interface failed to stop cleanly");await H.stop().catch(v=>{p.error({err:v},"the tool endpoint failed to stop cleanly")}),await N.stop(),m.close(),process.exit(T.length>0?1:0)})})}function ct(e){for(const t of e.snapshots)process.stdout.write(`removed snapshot ${t.commit} (unused for ${t.ageDays} days)
-`);for(const t of e.worktrees){const o=t.branch?`, branch ${t.branch}`:"";process.stdout.write(`released ${t.path}${o}
+Run \`bishop gmail setup\` to check the credentials.`)}if(a.credentials.teams)try{g.push(await ot({...T,credentials:a.credentials.teams,...s.teams?{config:s.teams}:{}}))}catch(o){o instanceof v&&u(o.message),u(`Couldn't start the Teams app for client ${a.credentials.teams.clientId}:
+  ${o instanceof Error?o.message:String(o)}
+
+Check the credentials in .env and the \`teams\` block in .bishop/config.json.`)}y=g;for(const o of g)await o.start();p.info({interfaces:g.map(o=>o.name)},"bishop is listening");const U=Ke({schedules:C,run:T.run,threads:c,cancel:T.stop,deliver:Le(g),authorized:J(g),attach:Ye(c)});U.start();for(const o of["SIGINT","SIGTERM"])process.once(o,()=>{p.info({signal:o,inFlight:B.size},"shutting down"),U.stop().catch(h=>p.error({err:h},"the scheduler failed to stop cleanly")).then(()=>Promise.allSettled(g.map(h=>h.stop()))).then(async h=>{const R=h.filter(I=>I.status==="rejected");for(const I of R)p.error({err:I.reason},"an interface failed to stop cleanly");await H.stop().catch(I=>{p.error({err:I},"the tool endpoint failed to stop cleanly")}),await $.stop(),m.close(),process.exit(R.length>0?1:0)})})}function vt(e){for(const t of e.snapshots)process.stdout.write(`removed snapshot ${t.commit} (unused for ${t.ageDays} days)
+`);for(const t of e.worktrees){const n=t.branch?`, branch ${t.branch}`:"";process.stdout.write(`released ${t.path}${n}
 `)}process.stdout.write(`snapshots: removed ${e.snapshots.length}, kept ${e.keptSnapshots}
 worktrees: released ${e.worktrees.length}
 files: removed ${e.files} download directories
 rows: forgot ${e.threads} threads, ${e.events} events
-`)}async function dt(e){const t=process.cwd();e.agent&&!B(e.agent)&&w("gc --agent takes the git URL Bishop cloned, not a path. It narrows the pass to the files Bishop owns for one agent, and it owns none for a directory agent. Run `bishop gc` with no --agent to collect what its threads left behind.");const o=e.agent?[U(t,M(e.agent).slug)]:await P(t),a=await O(t),s=e.maxAgeDays??a.gc?.maxAgeDays;process.env.BISHOP_LOG_LEVEL||(p.level="error");const i=z(F(t));try{ct(await ge({retention:Y(i),stores:o,home:t,...e.agent?{only:o}:{},...s===void 0?{}:{maxAgeDays:s}}))}finally{i.close()}}function pt(){return!(process.env.SSH_CONNECTION||process.env.SSH_TTY||process.env.SSH_CLIENT||process.platform==="linux"&&!process.env.DISPLAY&&!process.env.WAYLAND_DISPLAY)}async function mt(e={}){const t=process.cwd();G(t);const o=process.env.BISHOP_GMAIL_CLIENT_ID?.trim(),a=process.env.BISHOP_GMAIL_CLIENT_SECRET?.trim(),s=process.env.BISHOP_GMAIL_REFRESH_TOKEN?.trim(),i=process.env.BISHOP_GMAIL_USER?.trim(),r=process.env.BISHOP_GMAIL_SERVICE_ACCOUNT?.trim();o&&!a&&w("BISHOP_GMAIL_CLIENT_ID is set but BISHOP_GMAIL_CLIENT_SECRET is not.");const m=e.browser===!1||!pt()?"paste":"browser",c=await W(!0,async d=>Ie({...o&&a?{client:{clientId:o,clientSecret:a}}:{},...s?{refreshToken:s}:{},...i?{user:i}:{},...r?{serviceAccount:r}:{},mode:m,openBrowser:Fe,readPaste:async l=>(process.stdout.write(`Open this in a browser and approve it:
+`)}async function bt(e){const t=process.cwd();S(t),e.agent&&!K(e.agent)&&u("gc --agent takes the git URL Bishop cloned, not a path. It narrows the pass to the files Bishop owns for one agent, and it owns none for a directory agent. Run `bishop gc` with no --agent to collect what its threads left behind.");const n=e.agent?[q(t,F(e.agent).slug)]:await z(t),i=await O(t),s=e.maxAgeDays??i.gc?.maxAgeDays;Me()||(p.level="error");const a=W(Y(t));try{vt(await Te({retention:V(a),stores:n,home:t,...e.agent?{only:n}:{},...s===void 0?{}:{maxAgeDays:s}}))}finally{a.close()}}function Tt(){return!(process.env.SSH_CONNECTION||process.env.SSH_TTY||process.env.SSH_CLIENT||process.platform==="linux"&&!process.env.DISPLAY&&!process.env.WAYLAND_DISPLAY)}async function It(e={}){const t=process.cwd();S(t);const n=process.env.BISHOP_GMAIL_CLIENT_ID?.trim(),i=process.env.BISHOP_GMAIL_CLIENT_SECRET?.trim(),s=process.env.BISHOP_GMAIL_REFRESH_TOKEN?.trim(),a=process.env.BISHOP_GMAIL_USER?.trim(),r=process.env.BISHOP_GMAIL_SERVICE_ACCOUNT?.trim();n&&!i&&u("BISHOP_GMAIL_CLIENT_ID is set but BISHOP_GMAIL_CLIENT_SECRET is not.");const m=e.browser===!1||!Tt()?"paste":"browser",c=await Z(!0,async d=>Ge({...n&&i?{client:{clientId:n,clientSecret:i}}:{},...s?{refreshToken:s}:{},...a?{user:a}:{},...r?{serviceAccount:r}:{},mode:m,openBrowser:Qe,readPaste:async l=>(process.stdout.write(`Open this in a browser and approve it:
 
   ${l}
 
@@ -19,12 +22,12 @@ It will finish on a http://127.0.0.1 address that fails to load. That is expecte
 Copy the whole address out of the browser and paste it here.
 
 `),d("Redirect URL",""))}));if(process.stdout.write(`${c.report}
-`),c.refreshToken){const d=await J(t,{BISHOP_GMAIL_REFRESH_TOKEN:c.refreshToken});process.stdout.write(`
+`),c.refreshToken){const d=await ee(t,{BISHOP_GMAIL_REFRESH_TOKEN:c.refreshToken});process.stdout.write(`
 Saved BISHOP_GMAIL_REFRESH_TOKEN to ${d}
-`)}c.ok||process.exit(1)}async function ht(e){const t=process.cwd(),o=process.env.GH_TOKEN?.trim();process.env.GH_TOKEN!==void 0&&!o&&delete process.env.GH_TOKEN,G(t);const a=process.env.GH_TOKEN?.trim(),s=!!a&&!o,i=e.prompt&&process.stdin.isTTY===!0,r=e.print?process.stderr:process.stdout,m=l=>r.write(l),c=l=>Ee({...a?{token:a,tokenIsSaved:s}:{},...i?{login:()=>ye(be.map(u=>u.scope),l),confirm:async u=>/^y/i.test(await W(!0,f=>f(u,"y"),r))}:{},gitConfigured:Se,gh:ke(l),...e.temporary?{temporary:!0}:{}}),d=e.temporary&&!a?await ve(c):await c();if(m(`${d.report}
+`)}c.ok||process.exit(1)}async function Et(e){const t=process.cwd(),n=process.env.GH_TOKEN?.trim();process.env.GH_TOKEN!==void 0&&!n&&delete process.env.GH_TOKEN,S(t);const i=process.env.GH_TOKEN?.trim(),s=!!i&&!n,a=e.prompt&&process.stdin.isTTY===!0,r=e.print?process.stderr:process.stdout,m=l=>r.write(l),c=l=>Ne({...i?{token:i,tokenIsSaved:s}:{},...a?{login:()=>Ie(Re.map(f=>f.scope),l),confirm:async f=>/^y/i.test(await Z(!0,w=>w(f,"y"),r))}:{},gitConfigured:Ae,gh:Ee(l),...e.temporary?{temporary:!0}:{}}),d=e.temporary&&!i?await _e(c):await c();if(m(`${d.report}
 `),e.print)d.token&&process.stdout.write(`${JSON.stringify({GH_TOKEN:d.token})}
-`);else if(d.token){if(d.source==="gh"){const u=await J(t,{GH_TOKEN:d.token});m(`
-Saved GH_TOKEN to ${u}
-`)}const l=await Ke(t,[".env"]);l.length>0&&m(`Added ${l.join(", ")} to .gitignore
-`)}d.ok||process.exit(1)}async function lt(e){G(process.cwd());const t={...e.name===void 0?{}:{name:e.name},...e.displayName===void 0?{}:{displayName:e.displayName},...e.description===void 0?{}:{description:e.description},prompt:e.prompt};e.manual?await je(t):await qe(t)}async function ut(e){const t=process.cwd(),o=await O(t),a=await ze({name:e.name??o.slack?.app?.name,displayName:e.displayName??o.slack?.app?.displayName,description:e.description??o.slack?.app?.description,prompt:!1},t,async(s,i)=>i);process.stdout.write(`${JSON.stringify(We(a),null,2)}
-`)}const k=new se().name("bishop").description("An agent gateway. Runs an agent and connects it to Slack and email.").version(Ze,"-v, --version").enablePositionalOptions().option("--agent <path-or-url>","the agent's directory, or a git URL to clone; defaults to the current directory").option(`--harness <${ce.join("|")}>`,"which SDK runs the agent",de).option("--model <model>","the model to run, in the harness's own naming",K("--model")).option("--effort <effort>","how hard the model should think, in the harness's own naming",K("--effort")).option("--auto-update","for a git-URL --agent, check for a new commit at the start of every new thread").allowExcessArguments(!0).action((e,t)=>it(t.args,e));k.command("gc").description("Collect the snapshots, worktrees, and rows old conversations left behind").option("--max-age-days <days>",`how long a quiet thread's remains are kept; defaults to gc.maxAgeDays, then ${fe}`,pe("--max-age-days")).option("--agent <url>","only this agent's snapshots; defaults to every agent Bishop has cloned here").action(dt);const E=k.command("schedules").description("Prompts the agent runs on a clock, and where their answers go");E.command("list").description("Everything scheduled here, in your own time zone").action(()=>xe(process.cwd())),E.command("add").description("Add a schedule").requiredOption("--name <name>","what a person sees in a list, and the subject of an email").requiredOption("--cron <expression>","five-field cron, or @daily and friends").requiredOption("--prompt <text>","what the agent is asked, including when to stay quiet").requiredOption("--to <destination>","#channel or @person for Slack, an address for Gmail").option("--tz <zone>","IANA zone the expression is read in; defaults to this machine").option("--interface <name>","which interface delivers, when --to is ambiguous").action(e=>Re(process.cwd(),e)),E.command("rm <id>").description("Remove a schedule").action(e=>$e(process.cwd(),e)),E.command("disable <id>").description("Stop a schedule firing, keeping it").action(e=>j(process.cwd(),e,!1)),E.command("enable <id>").description("Start a disabled schedule firing again, from now").action(e=>j(process.cwd(),e,!0));const ft=k.command("gmail").description("Gmail interface commands");ft.command("setup").description("Authorize a Gmail mailbox, or check the one already configured").option("--no-browser","print a URL to open elsewhere instead of opening one here").action(mt);const wt=k.command("github").description("GitHub credentials for the agent");wt.command("setup").description("Give the agent a GitHub token, or check the one it's using").option("--no-prompt","don't offer to run `gh auth login`").option("--print","write the credential to stdout as JSON instead of to .env").option("--temporary","log in without touching this machine's own gh login").action(ht);const V=k.command("slack").description("Slack interface commands");V.command("setup").description("Create and install a Slack app, and save its credentials here").option("--name <name>","app name; defaults to the current directory name").option("--display-name <name>","bot display name in Slack; defaults to --name").option("--description <text>","short description shown in Slack").option("--no-prompt","don't prompt for anything left off").option("--manual","adopt an app you created in Slack yourself, using its tokens").action(lt),V.command("manifest").description("Print the app manifest, for creating an app in Slack by hand").option("--name <name>","app name; defaults to config or the directory name").option("--display-name <name>","bot display name; defaults to --name").option("--description <text>","short description shown in Slack").action(ut);try{await k.parseAsync()}catch(e){throw e instanceof b&&w(e.message),e}
+`);else if(d.token){if(d.source==="gh"){const f=await ee(t,{GH_TOKEN:d.token});m(`
+Saved GH_TOKEN to ${f}
+`)}const l=await Je(t,[".env"]);l.length>0&&m(`Added ${l.join(", ")} to .gitignore
+`)}d.ok||process.exit(1)}async function At(e){S(process.cwd());const t={...e.name===void 0?{}:{name:e.name},...e.displayName===void 0?{}:{displayName:e.displayName},...e.description===void 0?{}:{description:e.description},prompt:e.prompt};e.manual?await Ze(t):await Xe(t)}async function _t(e){if(e.appId!==void 0&&!e.manual)throw new X("--app-id adopts an app somebody else created, so it needs --manual too.");if(e.endpoint!==void 0&&e.manual)throw new X("--endpoint sets the URL on an app Bishop is creating, so it cannot be used\nwith --manual. Point an adopted app with `bishop teams endpoint <url>`,\nor ask whoever created it to.");S(process.cwd());const t={...e.name===void 0?{}:{name:e.name},...e.displayName===void 0?{}:{displayName:e.displayName},...e.description===void 0?{}:{description:e.description},...e.endpoint===void 0?{}:{endpoint:e.endpoint},...e.appId===void 0?{}:{appId:e.appId},prompt:e.prompt};e.manual?await at(t):await rt(t)}async function Rt(e){const t=process.cwd(),n=await O(t),i=await Ve({name:e.name??n.slack?.app?.name,displayName:e.displayName??n.slack?.app?.displayName,description:e.description??n.slack?.app?.description,prompt:!1},t,async(s,a)=>a);process.stdout.write(`${JSON.stringify(tt(i),null,2)}
+`)}const k=new pe().name("bishop").description("An agent gateway. Runs an agent and connects it to Slack and email.").version(ht,"-v, --version").enablePositionalOptions().option("--agent <path-or-url>","the agent's directory, or a git URL to clone; defaults to the current directory").option(`--harness <${ue.join("|")}>`,"which SDK runs the agent",fe).option("--model <model>","the model to run, in the harness's own naming",j("--model")).option("--effort <effort>","how hard the model should think, in the harness's own naming",j("--effort")).option("--auto-update","for a git-URL --agent, check for a new commit at the start of every new thread").allowExcessArguments(!0).action((e,t)=>St(t.args,e));k.command("gc").description("Collect the snapshots, worktrees, and rows old conversations left behind").option("--max-age-days <days>",`how long a quiet thread's remains are kept; defaults to gc.maxAgeDays, then ${ve}`,we("--max-age-days")).option("--agent <url>","only this agent's snapshots; defaults to every agent Bishop has cloned here").action(bt);const E=k.command("schedules").description("Prompts the agent runs on a clock, and where their answers go");E.command("list").description("Everything scheduled here, in your own time zone").action(()=>De(process.cwd())),E.command("add").description("Add a schedule").requiredOption("--name <name>","what a person sees in a list, and the subject of an email").requiredOption("--cron <expression>","five-field cron, or @daily and friends").requiredOption("--prompt <text>","what the agent is asked, including when to stay quiet").requiredOption("--to <destination>","#channel or @person for Slack, an address for Gmail").option("--tz <zone>","IANA zone the expression is read in; defaults to this machine").option("--interface <name>","which interface delivers, when --to is ambiguous").action(e=>Pe(process.cwd(),e)),E.command("rm <id>").description("Remove a schedule").action(e=>Be(process.cwd(),e)),E.command("disable <id>").description("Stop a schedule firing, keeping it").action(e=>Q(process.cwd(),e,!1)),E.command("enable <id>").description("Start a disabled schedule firing again, from now").action(e=>Q(process.cwd(),e,!0));const Nt=k.command("gmail").description("Gmail interface commands");Nt.command("setup").description("Authorize a Gmail mailbox, or check the one already configured").option("--no-browser","print a URL to open elsewhere instead of opening one here").action(It);const Ot=k.command("github").description("GitHub credentials for the agent");Ot.command("setup").description("Give the agent a GitHub token, or check the one it's using").option("--no-prompt","don't offer to run `gh auth login`").option("--print","write the credential to stdout as JSON instead of to .env").option("--temporary","log in without touching this machine's own gh login").action(Et);const te=k.command("slack").description("Slack interface commands");te.command("setup").description("Create and install a Slack app, and save its credentials here").option("--name <name>","app name; defaults to the current directory name").option("--display-name <name>","bot display name in Slack; defaults to --name").option("--description <text>","short description shown in Slack").option("--no-prompt","don't prompt for anything left off").option("--manual","adopt an app you created in Slack yourself, using its tokens").action(At),te.command("manifest").description("Print the app manifest, for creating an app in Slack by hand").option("--name <name>","app name; defaults to config or the directory name").option("--display-name <name>","bot display name; defaults to --name").option("--description <text>","short description shown in Slack").action(Rt);const G=k.command("teams").description("Microsoft Teams interface commands");G.command("setup").description("Create a Teams app and save its credentials here, or check the one configured").option("--name <name>","app name; defaults to the current directory name").option("--display-name <name>","app name shown in Teams; defaults to --name").option("--description <text>","short description shown in Teams").option("--endpoint <url>","the URL Teams POSTs to; can be set later").option("--app-id <id>","with --manual, the Teams app ID you were given").option("--no-prompt","don't prompt for anything left off").option("--manual","adopt an app somebody else created, using its credentials").action(_t),G.command("endpoint <url>").description("Point the Teams app at a different URL, changing nothing else").option("--app-id <id>","the Teams app to point; defaults to the one in config").action((e,t)=>st(e,t.appId===void 0?{}:{appId:t.appId})),G.command("instructions").description("Print what to send whoever creates the Teams app, when that is an administrator").option("--endpoint <url>","the URL Teams should POST to, if you already know it").action(e=>{process.stdout.write(nt(e.endpoint))});try{await k.parseAsync()}catch(e){throw e instanceof v&&u(e.message),e}

package/dist/config.js

@@ -1,4 +1,4 @@
-import{mkdir as g,readFile as h,writeFile as w}from"node:fs/promises";import{dirname as b,join as x}from"node:path";import{z as t}from"zod";import{BishopError as p}from"./errors.js";const O=".bishop",$="config.json",j=t.strictObject({id:t.string().optional(),name:t.string().min(1),displayName:t.string().optional(),description:t.string().optional()}),k=["low","medium","high"],L="high",y=t.string().transform(n=>n.trim().toLowerCase()).pipe(t.enum(k)),N=t.strictObject({workspace:t.string().optional(),app:j.optional(),verbosity:y.optional(),allow:t.array(t.string().min(1)).optional(),maxBotTurns:t.number().int().nonnegative().optional()}),v=t.strictObject({allow:t.array(t.string().min(1)).optional(),pollSeconds:t.number().int().positive().optional(),labelPrefix:t.string().trim().min(1).optional(),markRead:t.boolean().optional()}),a=["claude","codex"],E=t.strictObject({model:t.string().trim().min(1).optional(),effort:t.string().trim().min(1).optional(),options:t.record(t.string(),t.unknown()).optional()}),S=t.strictObject({harness:t.enum(a).optional(),model:t.string().trim().min(1).optional(),effort:t.string().trim().min(1).optional(),harnesses:t.partialRecord(t.enum(a),E,{error:()=>`not a harness Bishop runs; supported: ${a.join(", ")}`}).optional(),worktrees:t.boolean().optional(),options:t.record(t.string(),t.unknown()).optional()}),C=t.strictObject({maxAgeDays:t.number().int().positive().optional()}),F=t.strictObject({maxMb:t.number().positive().optional()}),I=t.strictObject({slack:N.optional(),gmail:v.optional(),agent:S.optional(),files:F.optional(),gc:C.optional()});class l extends p{path;constructor(o,r){super(o,"ConfigError"),this.path=r}}function D(n,o={}){const r=n.agent,s=r?.harness??"claude",i=o.harness??s,e=r?.harnesses?.[i],c=[];r?.options&&(e&&i===s?c.push({kind:"options-replaced",harness:i}):!e&&i!==s&&c.push({kind:"options-foreign",harness:i,configured:s}));const m=o.model??e?.model??r?.model,u=o.effort??e?.effort??r?.effort,f=e?e.options:r?.options;return{harness:i,...m?{model:m}:{},...u?{effort:u}:{},...f?{options:f}:{},warnings:c}}function H(n){return o=>{const r=o.trim();if(!r)throw new p(`${n} needs a value`);return r}}function J(n){return o=>{const r=Number(o.trim());if(!Number.isInteger(r)||r<=0)throw new p(`${n} needs a positive whole number, got "${o}"`);return r}}function P(n){const o=n.trim();if(a.includes(o))return o;throw new p(`unknown harness "${n}"; supported: ${a.join(", ")}`)}function d(n=process.cwd()){return x(n,O,$)}function A(n){return n.issues.map(o=>`${o.path.length>0?o.path.join("."):"(root)"}: ${o.message}`).join(`
-  `)}async function V(n=process.cwd()){const o=d(n);let r;try{r=await h(o,"utf8")}catch(e){if(e.code==="ENOENT")return{};throw new l(`Couldn't read ${o}: ${e.message}`,o)}let s;try{s=JSON.parse(r)}catch(e){throw new l(`${o} isn't valid JSON: ${e.message}`,o)}const i=I.safeParse(s);if(!i.success)throw new l(`${o} has invalid values:
-  ${A(i.error)}`,o);return i.data}async function _(n,o=process.cwd()){const r=d(o);return await g(b(r),{recursive:!0}),await w(r,`${JSON.stringify(n,null,2)}
-`,"utf8"),r}function Y(n){return n.displayName?.trim()||n.name}export{O as CONFIG_DIR,$ as CONFIG_FILE,l as ConfigError,I as ConfigSchema,L as DEFAULT_VERBOSITY,a as HARNESSES,k as VERBOSITY,d as configPath,Y as displayNameOf,V as loadConfig,H as nonEmptyFlag,P as parseHarnessName,J as positiveIntFlag,D as resolveAgent,_ as writeConfig};
+import{mkdir as h,readFile as w,writeFile as b}from"node:fs/promises";import{dirname as x,join as O}from"node:path";import{z as t}from"zod";import{BishopError as p}from"./errors.js";const y=".bishop",j="config.json",k=t.strictObject({id:t.string().optional(),name:t.string().min(1),displayName:t.string().optional(),description:t.string().optional()}),N=["low","medium","high"],J="high",d=t.string().transform(n=>n.trim().toLowerCase()).pipe(t.enum(N)),$=t.strictObject({workspace:t.string().optional(),app:k.optional(),verbosity:d.optional(),allow:t.array(t.string().min(1)).optional(),maxBotTurns:t.number().int().nonnegative().optional()}),v=t.strictObject({allow:t.array(t.string().min(1)).optional(),pollSeconds:t.number().int().positive().optional(),labelPrefix:t.string().trim().min(1).optional(),markRead:t.boolean().optional()}),E=t.strictObject({cert:t.string().trim().min(1),key:t.string().trim().min(1)}),S=t.strictObject({id:t.string().optional(),name:t.string().min(1),displayName:t.string().optional(),description:t.string().optional()}),C=t.strictObject({app:S.optional(),allow:t.array(t.string().min(1)).optional(),verbosity:d.optional(),port:t.number().int().min(1).max(65535).optional(),host:t.string().trim().min(1).optional(),tls:E.optional()}),a=["claude","codex"],F=t.strictObject({model:t.string().trim().min(1).optional(),effort:t.string().trim().min(1).optional(),options:t.record(t.string(),t.unknown()).optional()}),T=t.strictObject({harness:t.enum(a).optional(),model:t.string().trim().min(1).optional(),effort:t.string().trim().min(1).optional(),harnesses:t.partialRecord(t.enum(a),F,{error:()=>`not a harness Bishop runs; supported: ${a.join(", ")}`}).optional(),worktrees:t.boolean().optional(),options:t.record(t.string(),t.unknown()).optional()}),I=t.strictObject({maxAgeDays:t.number().int().positive().optional()}),A=t.strictObject({maxMb:t.number().positive().optional()}),B=t.strictObject({slack:$.optional(),gmail:v.optional(),teams:C.optional(),agent:T.optional(),files:A.optional(),gc:I.optional()});class l extends p{path;constructor(o,r){super(o,"ConfigError"),this.path=r}}function P(n,o={}){const r=n.agent,s=r?.harness??"claude",e=o.harness??s,i=r?.harnesses?.[e],c=[];r?.options&&(i&&e===s?c.push({kind:"options-replaced",harness:e}):!i&&e!==s&&c.push({kind:"options-foreign",harness:e,configured:s}));const m=o.model??i?.model??r?.model,u=o.effort??i?.effort??r?.effort,g=i?i.options:r?.options;return{harness:e,...m?{model:m}:{},...u?{effort:u}:{},...g?{options:g}:{},warnings:c}}function V(n){return o=>{const r=o.trim();if(!r)throw new p(`${n} needs a value`);return r}}function _(n){return o=>{const r=Number(o.trim());if(!Number.isInteger(r)||r<=0)throw new p(`${n} needs a positive whole number, got "${o}"`);return r}}function Y(n){const o=n.trim();if(a.includes(o))return o;throw new p(`unknown harness "${n}"; supported: ${a.join(", ")}`)}function f(n=process.cwd()){return O(n,y,j)}function R(n){return n.issues.map(o=>`${o.path.length>0?o.path.join("."):"(root)"}: ${o.message}`).join(`
+  `)}async function z(n=process.cwd()){const o=f(n);let r;try{r=await w(o,"utf8")}catch(i){if(i.code==="ENOENT")return{};throw new l(`Couldn't read ${o}: ${i.message}`,o)}let s;try{s=JSON.parse(r)}catch(i){throw new l(`${o} isn't valid JSON: ${i.message}`,o)}const e=B.safeParse(s);if(!e.success)throw new l(`${o} has invalid values:
+  ${R(e.error)}`,o);return e.data}async function M(n,o=process.cwd()){const r=f(o);return await h(x(r),{recursive:!0}),await b(r,`${JSON.stringify(n,null,2)}
+`,"utf8"),r}function U(n){return n.displayName?.trim()||n.name}export{y as CONFIG_DIR,j as CONFIG_FILE,l as ConfigError,B as ConfigSchema,J as DEFAULT_VERBOSITY,a as HARNESSES,N as VERBOSITY,f as configPath,U as displayNameOf,z as loadConfig,V as nonEmptyFlag,Y as parseHarnessName,_ as positiveIntFlag,P as resolveAgent,M as writeConfig};

package/dist/env.js

@@ -1,12 +1,12 @@
-import{config as I}from"dotenv";const u=[{name:"BISHOP_GMAIL_CLIENT_ID",hint:"OAuth client ID for a Desktop app"},{name:"BISHOP_GMAIL_CLIENT_SECRET",hint:"the matching OAuth client secret"},{name:"BISHOP_GMAIL_REFRESH_TOKEN",hint:"issued by `bishop gmail setup`; copy it from the laptop you authorized on"}],f=[{name:"BISHOP_GMAIL_USER",hint:"the Workspace address the agent sends and receives as"},{name:"BISHOP_GMAIL_SERVICE_ACCOUNT",hint:"path to the service account JSON key, or the JSON itself"}],m=[{name:"slack",sets:[{label:"Slack",vars:[{name:"BISHOP_SLACK_BOT_TOKEN",hint:"the xoxb- token issued when the Slack app was installed"},{name:"BISHOP_SLACK_APP_TOKEN",hint:"the xapp- app-level token from the app\u2019s Basic Information page"}]}],setup:"run `bishop slack setup` for Slack"},{name:"gmail",sets:[{label:"Gmail over OAuth",vars:u},{label:"Gmail over domain-wide delegation",vars:f}],setup:"run `bishop gmail setup` for Gmail"}];function A(e=process.cwd()){I({path:`${e}/.env`,override:!1,quiet:!0})}function t(e,s){return e[s]?.trim()||void 0}function S(e,s){return s.sets.find(a=>a.vars.some(o=>t(e,o.name)))}function O(e=process.env){const s=new Map,a=[];let o;for(const p of m){const c=S(e,p);if(!c)continue;s.set(p.name,c);const _=c.vars.filter(h=>!t(e,h.name));_.length!==0&&(o??=c.label,a.push(..._.map(h=>({name:h.name,hint:h.hint,set:c.label}))))}if(a.length>0)return{ok:!1,missing:a,...o?{attempting:o}:{}};if(s.size===0)return{ok:!1,noInterface:!0,missing:m.flatMap(p=>p.sets[0]?.vars??[])};const n=t(e,"ANTHROPIC_API_KEY"),i=t(e,"CODEX_API_KEY"),l=s.get("gmail"),r=l?l.vars===u?{kind:"oauth",clientId:t(e,"BISHOP_GMAIL_CLIENT_ID"),clientSecret:t(e,"BISHOP_GMAIL_CLIENT_SECRET"),refreshToken:t(e,"BISHOP_GMAIL_REFRESH_TOKEN")}:{kind:"service-account",user:t(e,"BISHOP_GMAIL_USER"),serviceAccount:t(e,"BISHOP_GMAIL_SERVICE_ACCOUNT")}:void 0;return{ok:!0,credentials:{...s.has("slack")?{slack:{botToken:t(e,"BISHOP_SLACK_BOT_TOKEN"),appToken:t(e,"BISHOP_SLACK_APP_TOKEN")}}:{},...r?{gmail:r}:{},...n?{anthropicApiKey:n}:{},...i?{codexApiKey:i}:{}}}}function E(e){const s=e.missing.map(n=>`  ${n.name}: ${n.hint}`).join(`
+import{config as S}from"dotenv";import{applyLogLevel as E}from"./log.js";const I=[{name:"BISHOP_GMAIL_CLIENT_ID",hint:"OAuth client ID for a Desktop app"},{name:"BISHOP_GMAIL_CLIENT_SECRET",hint:"the matching OAuth client secret"},{name:"BISHOP_GMAIL_REFRESH_TOKEN",hint:"issued by `bishop gmail setup`; copy it from the laptop you authorized on"}],u=[{name:"BISHOP_GMAIL_USER",hint:"the Workspace address the agent sends and receives as"},{name:"BISHOP_GMAIL_SERVICE_ACCOUNT",hint:"path to the service account JSON key, or the JSON itself"}],m=[{name:"slack",sets:[{label:"Slack",vars:[{name:"BISHOP_SLACK_BOT_TOKEN",hint:"the xoxb- token issued when the Slack app was installed"},{name:"BISHOP_SLACK_APP_TOKEN",hint:"the xapp- app-level token from the app\u2019s Basic Information page"}]}],setup:"run `bishop slack setup` for Slack"},{name:"gmail",sets:[{label:"Gmail over OAuth",vars:I},{label:"Gmail over domain-wide delegation",vars:u}],setup:"run `bishop gmail setup` for Gmail"},{name:"teams",sets:[{label:"Microsoft Teams",vars:[{name:"BISHOP_TEAMS_CLIENT_ID",hint:"the Teams app\u2019s client ID"},{name:"BISHOP_TEAMS_CLIENT_SECRET",hint:"the matching client secret"},{name:"BISHOP_TEAMS_TENANT_ID",hint:"the Entra tenant the app is registered in"}]}],setup:"run `bishop teams setup` for Teams"}];function d(e=process.cwd()){S({path:`${e}/.env`,override:!1,quiet:!0}),E()}function t(e,s){return e[s]?.trim()||void 0}function f(e,s){return s.sets.find(a=>a.vars.some(o=>t(e,o.name)))}function O(e=process.env){const s=new Map,a=[];let o;for(const p of m){const c=f(e,p);if(!c)continue;s.set(p.name,c);const h=c.vars.filter(l=>!t(e,l.name));h.length!==0&&(o??=c.label,a.push(...h.map(l=>({name:l.name,hint:l.hint,set:c.label}))))}if(a.length>0)return{ok:!1,missing:a,...o?{attempting:o}:{}};if(s.size===0)return{ok:!1,noInterface:!0,missing:m.flatMap(p=>p.sets[0]?.vars??[])};const n=t(e,"ANTHROPIC_API_KEY"),i=t(e,"CODEX_API_KEY"),_=s.get("gmail"),r=_?_.vars===I?{kind:"oauth",clientId:t(e,"BISHOP_GMAIL_CLIENT_ID"),clientSecret:t(e,"BISHOP_GMAIL_CLIENT_SECRET"),refreshToken:t(e,"BISHOP_GMAIL_REFRESH_TOKEN")}:{kind:"service-account",user:t(e,"BISHOP_GMAIL_USER"),serviceAccount:t(e,"BISHOP_GMAIL_SERVICE_ACCOUNT")}:void 0;return{ok:!0,credentials:{...s.has("slack")?{slack:{botToken:t(e,"BISHOP_SLACK_BOT_TOKEN"),appToken:t(e,"BISHOP_SLACK_APP_TOKEN")}}:{},...r?{gmail:r}:{},...s.has("teams")?{teams:{clientId:t(e,"BISHOP_TEAMS_CLIENT_ID"),clientSecret:t(e,"BISHOP_TEAMS_CLIENT_SECRET"),tenantId:t(e,"BISHOP_TEAMS_TENANT_ID")}}:{},...n?{anthropicApiKey:n}:{},...i?{codexApiKey:i}:{}}}}function g(e){const s=e.missing.map(n=>`  ${n.name}: ${n.hint}`).join(`
 `);if(e.noInterface)return`Bishop has no interface configured, so nothing could reach the agent.
 
 ${s}
 
-Set one interface's variables: ${m.map(n=>n.setup).join(", ")}.`;const a=new Map;for(const n of e.missing){const i=n.set??e.attempting??"Missing credentials";a.set(i,[...a.get(i)??[],n])}return`${[...a].map(([n,i])=>{const l=i.map(r=>`  ${r.name}: ${r.hint}`).join(`
+Set one interface's variables: ${m.map(n=>n.setup).join(", ")}.`;const a=new Map;for(const n of e.missing){const i=n.set??e.attempting??"Missing credentials";a.set(i,[...a.get(i)??[],n])}return`${[...a].map(([n,i])=>{const _=i.map(r=>`  ${r.name}: ${r.hint}`).join(`
 `);return`${n} is missing:
-${l}`}).join(`
+${_}`}).join(`
 
 `)}
 
-Add them to .env, or re-run the setup for that interface.`}export{E as describeMissing,A as loadEnv,O as readCredentials};
+Add them to .env, or re-run the setup for that interface.`}export{g as describeMissing,d as loadEnv,O as readCredentials};

package/dist/gmail/api.js

@@ -1 +1 @@
-import{log as u}from"../log.js";const h="https://gmail.googleapis.com/gmail/v1/users/me",f=300*1e3,y="INBOX",w="UNREAD",p="SPAM",b="TRASH",I="DRAFT";class i extends Error{status;constructor(c,s){super(c),this.status=s,this.name="GmailApiError"}}function A(d){return d instanceof i?d.status===429?!0:d.status===403&&/ratelimitexceeded/i.test(d.message):!1}function S(d){const c=d.fetch??globalThis.fetch;async function s(e,t={}){const a=new URL(`${h}${e}`);for(const[l,m]of Object.entries(t.query??{}))m!==void 0&&a.searchParams.set(l,m);const o=await d.tokens.get(),r=await c(a.toString(),{method:t.method??"GET",headers:{authorization:`Bearer ${o}`,...t.body===void 0?{}:{"content-type":"application/json"}},...t.body===void 0?{}:{body:JSON.stringify(t.body)},signal:AbortSignal.timeout(f)}),n=await r.text();if(!r.ok)throw new i(`${t.method??"GET"} ${e} failed (${r.status}): ${n}`,r.status);return n?JSON.parse(n):{}}return{async profile(){const e=await s("/profile");if(!e.emailAddress||!e.historyId)throw new i("users.getProfile returned no address or history id",200);return{emailAddress:e.emailAddress,historyId:e.historyId}},async history(e){const t=new Set;let a,o;do{let r;try{r=await s("/history",{query:{startHistoryId:e,historyTypes:"messageAdded",labelId:y,...a?{pageToken:a}:{}}})}catch(n){if(n instanceof i&&n.status===404)return{messageIds:[],expired:!0};throw n}for(const n of r.history??[])for(const l of n.messagesAdded??[])l.message?.id&&t.add(l.message.id);o=r.historyId??o,a=r.nextPageToken}while(a);return{messageIds:[...t],...o?{historyId:o}:{},expired:!1}},async search(e,t){return((await s("/messages",{query:{q:e,maxResults:String(t)}})).messages??[]).map(o=>o.id).filter(o=>!!o)},async message(e){return await s(`/messages/${encodeURIComponent(e)}`,{query:{format:"full"}})},async thread(e){return(await s(`/threads/${encodeURIComponent(e)}`,{query:{format:"full"}})).messages??[]},async attachment(e,t){const a=await s(`/messages/${encodeURIComponent(e)}/attachments/${encodeURIComponent(t)}`);if(a.data===void 0)throw new i("the attachment came back with no data",200);return Buffer.from(a.data,"base64url")},async send(e){const t=await s("/messages/send",{method:"POST",body:{raw:e.raw,...e.threadId?{threadId:e.threadId}:{}}});return{id:t.id??"",threadId:t.threadId??e.threadId??""}},async modifyMessage(e,t){await s(`/messages/${encodeURIComponent(e)}/modify`,{method:"POST",body:t})},async modifyThread(e,t){await s(`/threads/${encodeURIComponent(e)}/modify`,{method:"POST",body:t})},async labels(){return((await s("/labels")).labels??[]).filter(t=>!!(t.id&&t.name)).map(t=>({id:t.id,name:t.name}))},async createLabel(e){const t=await s("/labels",{method:"POST",body:{name:e,labelListVisibility:"labelShow",messageListVisibility:"show"}});if(!t.id)throw new i(`could not create the label ${e}`,200);return u.info({label:e,id:t.id},"created a Gmail label"),{id:t.id,name:t.name??e}}}}export{I as DRAFT,i as GmailApiError,y as INBOX,p as SPAM,b as TRASH,w as UNREAD,S as gmailApi,A as gmailSendRetryable};
+import{log as u}from"../log.js";const h="https://gmail.googleapis.com/gmail/v1/users/me",y=300*1e3,f="INBOX",p="UNREAD",w="SPAM",b="TRASH",A="DRAFT";class d extends Error{status;constructor(c,s){super(c),this.status=s,this.name="GmailApiError"}}function I(i){return i instanceof d?i.status===429?!0:i.status===403&&/ratelimitexceeded/i.test(i.message):!1}function S(i){const c=i.fetch??globalThis.fetch;async function s(t,e={}){const a=new URL(`${h}${t}`);for(const[l,m]of Object.entries(e.query??{}))m!==void 0&&a.searchParams.set(l,m);const r=await i.tokens.get(),o=await c(a.toString(),{method:e.method??"GET",headers:{authorization:`Bearer ${r}`,...e.body===void 0?{}:{"content-type":"application/json"}},...e.body===void 0?{}:{body:JSON.stringify(e.body)},signal:AbortSignal.timeout(y)}),n=await o.text();if(!o.ok)throw new d(`${e.method??"GET"} ${t} failed (${o.status}): ${n}`,o.status);return n?JSON.parse(n):{}}return{async profile(){const t=await s("/profile");if(!t.emailAddress||!t.historyId)throw new d("users.getProfile returned no address or history id",200);return{emailAddress:t.emailAddress,historyId:t.historyId}},async sendAs(){return((await s("/settings/sendAs")).sendAs??[]).flatMap(e=>{const a=e.sendAsEmail?.trim().toLowerCase();if(!a)return[];const r=e.displayName?.trim();return[{email:a,...r?{displayName:r}:{},...e.isPrimary?{isPrimary:!0}:{}}]})},async history(t){const e=new Set;let a,r;do{let o;try{o=await s("/history",{query:{startHistoryId:t,historyTypes:"messageAdded",labelId:f,...a?{pageToken:a}:{}}})}catch(n){if(n instanceof d&&n.status===404)return{messageIds:[],expired:!0};throw n}for(const n of o.history??[])for(const l of n.messagesAdded??[])l.message?.id&&e.add(l.message.id);r=o.historyId??r,a=o.nextPageToken}while(a);return{messageIds:[...e],...r?{historyId:r}:{},expired:!1}},async search(t,e){return((await s("/messages",{query:{q:t,maxResults:String(e)}})).messages??[]).map(r=>r.id).filter(r=>!!r)},async message(t){return await s(`/messages/${encodeURIComponent(t)}`,{query:{format:"full"}})},async thread(t){return(await s(`/threads/${encodeURIComponent(t)}`,{query:{format:"full"}})).messages??[]},async attachment(t,e){const a=await s(`/messages/${encodeURIComponent(t)}/attachments/${encodeURIComponent(e)}`);if(a.data===void 0)throw new d("the attachment came back with no data",200);return Buffer.from(a.data,"base64url")},async send(t){const e=await s("/messages/send",{method:"POST",body:{raw:t.raw,...t.threadId?{threadId:t.threadId}:{}}});return{id:e.id??"",threadId:e.threadId??t.threadId??""}},async modifyMessage(t,e){await s(`/messages/${encodeURIComponent(t)}/modify`,{method:"POST",body:e})},async modifyThread(t,e){await s(`/threads/${encodeURIComponent(t)}/modify`,{method:"POST",body:e})},async labels(){return((await s("/labels")).labels??[]).filter(e=>!!(e.id&&e.name)).map(e=>({id:e.id,name:e.name}))},async createLabel(t){const e=await s("/labels",{method:"POST",body:{name:t,labelListVisibility:"labelShow",messageListVisibility:"show"}});if(!e.id)throw new d(`could not create the label ${t}`,200);return u.info({label:t,id:e.id},"created a Gmail label"),{id:e.id,name:e.name??t}}}}export{A as DRAFT,d as GmailApiError,f as INBOX,w as SPAM,b as TRASH,p as UNREAD,S as gmailApi,I as gmailSendRetryable};

package/dist/gmail/etiquette.js

@@ -0,0 +1 @@
+import{renderTag as i}from"../harness/principal.js";import{isSelf as r}from"./identity.js";function a(n,t){const o=n.to.map(e=>e.email),f=n.cc.map(e=>e.email),c=o.length===1?o[0]:void 0;if(c&&r(t,c)||[...o,...f].filter(e=>e&&e!==n.from.email&&!r(t,e)).length===0)return;const d=[...o,...f].some(e=>r(t,e));return i("thread",{reply:"optional",...d?{}:{addressed:"no"}})}export{a as mailEtiquetteNote};

package/dist/gmail/fake.js

@@ -1,5 +1,7 @@
-import{INBOX as y}from"./api.js";function g(u){const n=Buffer.from(u,"base64url").toString("utf8"),c=n.indexOf(`\r
+import{INBOX as $}from"./api.js";function y(c){const r={};for(const o of c.replaceAll(/\r\n[ \t]+/g," ").split(`\r
+`)){const n=o.indexOf(":");n>0&&(r[o.slice(0,n).toLowerCase()]=o.slice(n+1).trim())}return r}function b(c,r){return c["content-transfer-encoding"]==="base64"?Buffer.from(r.replaceAll(`\r
+`,""),"base64").toString("utf8"):r}const x=/filename="([^"]*)"/;function w(c){const r=Buffer.from(c,"base64url").toString("utf8"),o=r.indexOf(`\r
 \r
-`),i=n.slice(0,c),o=n.slice(c+4),t={};for(const f of i.split(`\r
-`)){const l=f.indexOf(":");l>0&&(t[f.slice(0,l).toLowerCase()]=f.slice(l+1).trim())}return{text:t["content-transfer-encoding"]==="base64"?Buffer.from(o.replaceAll(`\r
-`,""),"base64").toString("utf8"):o,headers:t}}function w(u="agent@acme.com"){const n=new Map,c=new Map,i=new Map,o=[],t=[],d=[],f=new Map;let l=!1,m=1;function b(e,s){const r=c.get(e)??new Set;for(const a of s.removeLabelIds??[])r.delete(a);for(const a of s.addLabelIds??[])r.add(a);c.set(e,r)}return{calls:t,sent:o,deliver(e){const s=e.id??`m${m++}`,r=e.threadId??s,a=Object.entries(e.headers??{}).map(([h,p])=>({name:h,value:p}));return n.set(s,{id:s,threadId:r,internalDate:e.internalDate??String(Date.now()),labelIds:e.labelIds??[y],payload:e.payload??{mimeType:"text/plain",headers:a,body:{data:Buffer.from(e.body??"","utf8").toString("base64url")}}}),d.push(s),s},attach(e,s){f.set(e,s)},labelsOn(e){return[...c.get(e)??[]]},expireHistory(){l=!0},async profile(){return t.push("profile"),{emailAddress:u,historyId:String(d.length)}},async history(e){if(t.push(`history:${e}`),l)return l=!1,{messageIds:[],expired:!0};const s=Number(e);return{messageIds:d.slice(s),historyId:String(d.length),expired:!1}},async search(e,s){return t.push(`search:${e}`),d.slice(-s).reverse()},async message(e){t.push(`message:${e}`);const s=n.get(e);if(!s)throw new Error(`no such message ${e}`);return s},async thread(e){return t.push(`thread:${e}`),d.map(s=>n.get(s)).filter(s=>s?.threadId===e)},async attachment(e,s){t.push(`attachment:${s}`);const r=f.get(s);if(r===void 0)throw new Error(`no such attachment ${s} on ${e}`);return Buffer.from(r)},async send(e){return t.push("send"),o.push({raw:e.raw,...e.threadId?{threadId:e.threadId}:{},...g(e.raw)}),{id:`sent-${o.length}`,threadId:e.threadId??`sent-thread-${o.length}`}},async modifyMessage(e,s){t.push(`modifyMessage:${e}`);const r=n.get(e);if(!r)return;const a=new Set(r.labelIds??[]);for(const h of s.removeLabelIds??[])a.delete(h);for(const h of s.addLabelIds??[])a.add(h);r.labelIds=[...a]},async modifyThread(e,s){t.push(`modifyThread:${e}`),b(e,s)},async labels(){return t.push("labels"),[...i.values()]},async createLabel(e){t.push(`createLabel:${e}`);const s={id:`label-${i.size+1}`,name:e};return i.set(s.id,s),s}}}export{w as fakeMailbox};
+`),n=y(r.slice(0,o)),u=r.slice(o+4),f=/boundary="([^"]+)"/.exec(n["content-type"]??"")?.[1];if(!f)return{text:b(n,u),headers:n,files:[]};const[t,...i]=u.split(`--${f}`).slice(1,-1).map(l=>{const h=l.indexOf(`\r
+\r
+`),p=y(l.slice(0,h).replace(/^\r\n/,""));return{headers:p,body:b(p,l.slice(h+4))}});return{text:(t?.body??"").replace(/\r\n$/,""),headers:n,files:i.map(l=>({name:x.exec(l.headers["content-disposition"]??"")?.[1]??"",mimeType:(l.headers["content-type"]??"").split(";")[0]?.trim()??"",contents:l.body.replace(/\r\n$/,"")}))}}function S(c="agent@acme.com",r={}){const o=new Map,n=new Map,u=new Map,f=[],t=[],i=[],l=new Map;let h=!1,p=1;function g(e,s){const a=n.get(e)??new Set;for(const d of s.removeLabelIds??[])a.delete(d);for(const d of s.addLabelIds??[])a.add(d);n.set(e,a)}return{calls:t,sent:f,deliver(e){const s=e.id??`m${p++}`,a=e.threadId??s,d=Object.entries(e.headers??{}).map(([m,I])=>({name:m,value:I}));return o.set(s,{id:s,threadId:a,internalDate:e.internalDate??String(Date.now()),labelIds:e.labelIds??[$],payload:e.payload??{mimeType:"text/plain",headers:d,body:{data:Buffer.from(e.body??"","utf8").toString("base64url")}}}),i.push(s),s},attach(e,s){l.set(e,s)},labelsOn(e){return[...n.get(e)??[]]},expireHistory(){h=!0},async profile(){return t.push("profile"),{emailAddress:c,historyId:String(i.length)}},async sendAs(){return t.push("sendAs"),[{email:c,...r.displayName?{displayName:r.displayName}:{},isPrimary:!0},...(r.alsoSendsAs??[]).map(e=>({email:e}))]},async history(e){if(t.push(`history:${e}`),h)return h=!1,{messageIds:[],expired:!0};const s=Number(e);return{messageIds:i.slice(s),historyId:String(i.length),expired:!1}},async search(e,s){return t.push(`search:${e}`),i.slice(-s).reverse()},async message(e){t.push(`message:${e}`);const s=o.get(e);if(!s)throw new Error(`no such message ${e}`);return s},async thread(e){return t.push(`thread:${e}`),i.map(s=>o.get(s)).filter(s=>s?.threadId===e)},async attachment(e,s){t.push(`attachment:${s}`);const a=l.get(s);if(a===void 0)throw new Error(`no such attachment ${s} on ${e}`);return Buffer.from(a)},async send(e){return t.push("send"),f.push({raw:e.raw,...e.threadId?{threadId:e.threadId}:{},...w(e.raw)}),{id:`sent-${f.length}`,threadId:e.threadId??`sent-thread-${f.length}`}},async modifyMessage(e,s){t.push(`modifyMessage:${e}`);const a=o.get(e);if(!a)return;const d=new Set(a.labelIds??[]);for(const m of s.removeLabelIds??[])d.delete(m);for(const m of s.addLabelIds??[])d.add(m);a.labelIds=[...d]},async modifyThread(e,s){t.push(`modifyThread:${e}`),g(e,s)},async labels(){return t.push("labels"),[...u.values()]},async createLabel(e){t.push(`createLabel:${e}`);const s={id:`label-${u.size+1}`,name:e};return u.set(s.id,s),s}}}export{S as fakeMailbox};

package/dist/gmail/history.js

@@ -1 +1 @@
-import{describedFile as g}from"../files.js";import{trimHistory as b,withinFileBudget as w}from"../interface/history.js";import{log as k}from"../log.js";import{DRAFT as y,SPAM as A,TRASH as F}from"./api.js";import{mailAttachment as I,mailFile as v,mailFileId as x,mailFilePayload as B}from"./files.js";import{header as H,parseMessage as u}from"./message.js";import{senderVerified as P}from"./route.js";function f(e){return e.references.length>0||!!H(e.headers,"in-reply-to")}function N(e){return f(e)||e.id!==e.threadId}function T(e,o){return e.map(t=>{const n=g(I(o.api,t));if(!t.fetchable)return n;const m=o.remember({id:x(t),name:t.name,payload:B(t)});return m?{...n,ref:m}:{...n,unavailable:"Bishop could not record a reference for it"}})}async function O(e){let o;try{o=await e.api.thread(e.message.threadId)}catch(i){return k.warn({threadId:e.message.threadId,err:i},"could not read the thread to catch the agent up"),[{kind:"omitted",reason:"unavailable"}]}const t=[];let n=0;const m=()=>{n&&(t.push({kind:"omitted",reason:"unauthorized",count:n}),n=0)};for(const i of o){if(i.id===e.message.id)break;const r=u(i);if(r.labelIds.some(d=>d===y||d===A||d===F))continue;const a=r.from.email.toLowerCase();if(!a||!P(r)){n+=1;continue}const s=a===e.self;if(!s&&!e.allow.allows(a)){n+=1;continue}const c=r.attachments.map((d,p)=>v(r.id,p,d));!r.body.trim()&&c.length===0||(m(),t.push({kind:"message",principal:{id:a,email:a,...r.from.name?{realName:r.from.name}:{}},text:r.body,...s?{self:!0}:{},...c.length>0?{shared:c}:{}}))}m();const l=w(b(t)).map(i=>{if(i.kind!=="message"||!i.shared)return i;const{shared:r,...a}=i,s=T(r,e);return s.length>0?{...a,files:s}:a}),h=o[0]?u(o[0]):e.message;return f(h)&&l.unshift({kind:"omitted",reason:"unavailable"}),l}export{N as continuesAThread,O as mailHistory};
+import{describedFile as g}from"../files.js";import{trimHistory as b,withinFileBudget as w}from"../interface/history.js";import{log as k}from"../log.js";import{DRAFT as y,SPAM as A,TRASH as F}from"./api.js";import{mailAttachment as I,mailFile as H,mailFileId as v,mailFilePayload as x}from"./files.js";import{isSelf as B}from"./identity.js";import{header as P,mailHeaders as S,parseMessage as f}from"./message.js";import{senderVerified as T}from"./route.js";function u(e){return e.references.length>0||!!P(e.headers,"in-reply-to")}function j(e){return u(e)||e.id!==e.threadId}function z(e,o){return e.map(t=>{const i=g(I(o.api,t));if(!t.fetchable)return i;const m=o.remember({id:v(t),name:t.name,payload:x(t)});return m?{...i,ref:m}:{...i,unavailable:"Bishop could not record a reference for it"}})}async function q(e){let o;try{o=await e.api.thread(e.message.threadId)}catch(a){return k.warn({threadId:e.message.threadId,err:a},"could not read the thread to catch the agent up"),[{kind:"omitted",reason:"unavailable"}]}const t=[];let i=0;const m=()=>{i&&(t.push({kind:"omitted",reason:"unauthorized",count:i}),i=0)};for(const a of o){if(a.id===e.message.id)break;const r=f(a);if(r.labelIds.some(d=>d===y||d===A||d===F))continue;const n=r.from.email.toLowerCase();if(!n||!T(r)){i+=1;continue}const s=B(e.self,n);if(!s&&!e.allow.allows(n)){i+=1;continue}const l=r.attachments.map((d,p)=>H(r.id,p,d));!r.body.trim()&&l.length===0||(m(),t.push({kind:"message",principal:{id:n,email:n,...r.from.name?{realName:r.from.name}:{}},text:r.body,headers:S(r),...s?{self:!0}:{},...l.length>0?{shared:l}:{}}))}m();const c=w(b(t)).map(a=>{if(a.kind!=="message"||!a.shared)return a;const{shared:r,...n}=a,s=z(r,e);return s.length>0?{...n,files:s}:n}),h=o[0]?f(o[0]):e.message;return u(h)&&c.unshift({kind:"omitted",reason:"unavailable"}),c}export{j as continuesAThread,q as mailHistory};

package/dist/gmail/identity.js

@@ -0,0 +1 @@
+function m(e,r){const i=e.trim().toLowerCase(),n=(r.find(t=>t.email===i)??r.find(t=>t.isPrimary))?.displayName?.trim();return{address:i,...n?{name:n}:{}}}function o(e,r){return r.trim().toLowerCase()===e.address}export{o as isSelf,m as mailIdentity};

package/dist/gmail/interface.js

@@ -1,2 +1,2 @@
-import{BishopError as S}from"../errors.js";import{log as n}from"../log.js";import{retry as Y}from"../retry.js";import{GmailApiError as j,gmailSendRetryable as P,UNREAD as $}from"./api.js";import{looksLikeAddress as z}from"./authorize.js";import{resolveGmailDestination as U}from"./destination.js";import{mailAttachment as M,mailFile as H,mailFileId as q,mailFilePayload as B,parseMailFile as Q}from"./files.js";import{continuesAThread as J,mailHistory as V}from"./history.js";import{buildMessage as W,buildReply as X,parseMessage as Z,promptFrom as tt}from"./message.js";import{gmailPresence as et}from"./presence.js";import{participants as rt,routeMessage as at}from"./route.js";const nt={name:"gmail",guidance:["This conversation is an email thread. Everything you write during a turn is collected and","sent as one plain-text reply to everyone on the thread, so give the whole answer in a","single message and never say you will follow up separately: there is no way for you to","send anything until someone writes to you again.","","Nobody is watching while you work. None of your tool calls are visible and nothing you say","arrives until the turn is over, so a turn that takes minutes costs nothing. Markdown is not","rendered; write plain prose, and use blank lines rather than formatting for structure."].join(`
-`)},b="gmail:historyId",R="gmail:attachedAt",C="in:inbox newer_than:2d",v=50;function E(r){return`gmail:${r}`}async function gt(r){const c=(await r.api.profile()).emailAddress.toLowerCase(),u={email:c},w={...nt,self:{address:c}},G=r.now??Date.now,y=r.state.get(R),h=y?Number(y):G();y||r.state.set(R,String(h));const k=new Set;let g,m,p=!1;const d=new Set;async function D(t,e){if(await r.labels.mark(t.threadId,"refused"),!(!e||k.has(t.threadId)))try{await r.api.send({raw:X({from:u,to:[t.from],subject:t.subject,inReplyTo:t.messageId,references:t.references,body:e}),threadId:t.threadId}),k.add(t.threadId)}catch(l){n.warn({threadId:t.threadId,err:l},"could not send the refusal")}}function K(t,e){if(e.fetchable)return r.attachments.remember(t,w.name,{id:q(e),name:e.name,payload:B(e)})}async function L(t,e){return e.attachments.length===0?[]:Promise.all(e.attachments.map(async(l,a)=>{const s=H(e.id,a,l),i=K(t.id,s),o=await r.files.save(t.dirKey,M(r.api,s,l.data));return i?{...o,ref:i}:o}))}function N(t,e,l,a){const s=[],i=rt(e,c).map(o=>({email:o}));return{thread:t,isNewThread:a,origin:w,...J(e)?{history:()=>V({api:r.api,message:e,self:c,allow:r.allow,remember:o=>r.attachments.remember(t.id,w.name,o)})}:{},async messages(){const o=await L(t,e);return[{principal:{id:e.from.email,email:e.from.email,...e.from.name?{realName:e.from.name}:{}},text:tt({...e,body:l},c),...o.length>0?{files:o}:{}}]},presence:()=>et({api:r.api,labels:r.labels,self:u,message:e,to:i,threadKey:t.threadKey,notices:s}),async notify(o){s.push(o)},async destination(){return{interface:"gmail",handle:e.from.email,label:e.from.email}}}}async function O(t){const e=`gmail:${t}`;if(await r.events.seen(e,{record:!1}))return;let l;try{l=await r.api.message(t)}catch(f){if(f instanceof j&&f.status===404){await r.events.seen(e),n.warn({messageId:t},"a message vanished before it could be read; skipping it");return}throw f}await r.events.seen(e);const a=Z(l);if(a.receivedAt<h){n.warn({messageId:t,threadId:a.threadId,receivedAt:new Date(a.receivedAt).toISOString(),floor:new Date(h).toISOString()},"ignoring an email that predates this agent");return}const s=at(a,{self:c,allow:r.allow});if(s.action==="ignore"){n.debug({messageId:t,threadId:a.threadId,reason:s.reason},"ignoring an email");return}if(s.action==="refuse"){n.warn({messageId:t,threadId:a.threadId,from:a.from.email,reason:s.reason},"refusing an unauthorized email"),await D(a,s.note);return}const i=E(a.threadId),o=await r.threads.has(i),_=await r.threads.remember(i);r.markRead&&await r.api.modifyMessage(t,{removeLabelIds:[$]}).catch(f=>{n.debug({messageId:t,err:f},"could not mark the message read")}),n.info({thread:i,from:a.from.email,newThread:!o},"running a turn from email");const x=r.run(N(_,a,s.text,!o)).catch(f=>{n.error({thread:i,err:f},"a turn from email failed")}).finally(()=>{d.delete(x)});d.add(x)}async function F(){const t=r.state.get(b);if(!t){const i=await r.api.profile();r.state.set(b,i.historyId),n.info({historyId:i.historyId},"starting from the current state of the mailbox");return}const e=await r.api.history(t);let l=e.messageIds,a=e.historyId;if(e.expired){n.warn({cursor:t},"the Gmail history cursor is too old; falling back to a search of recent mail");const i=await r.api.profile();l=(await r.api.search(C,v)).reverse(),l.length===v&&n.warn({limit:v,query:C},"the resync search filled its limit, so older mail in the window was not looked at"),a=i.historyId}let s=!0;for(const i of l){if(p)return;try{await O(i)}catch(o){s=!1,n.error({messageId:i,err:o},"could not handle an email")}}if(!s){n.warn({cursor:t},"holding the Gmail cursor so unhandled mail is offered again");return}a&&r.state.set(b,a)}async function I(){if(!(m||p)){m=(async()=>{await F()})();try{await m}catch(t){n.error({err:t},"a Gmail poll failed; retrying on the next interval")}finally{m=void 0}}}async function A(){await Promise.allSettled([...d])}async function T(t){const e=t.handle.trim().toLowerCase();if(!z(e))throw new S(`"${t.handle}" is not an email address, so nothing was sent`);if(!r.allow.allows(e))throw new S(`${e} is not on this agent's allow list, so nothing was sent to it`);const l=t.title?.trim()||"A message from your agent",a=await Y(()=>r.api.send({raw:W({from:u,to:[{email:e}],subject:l,body:t.text})}),{what:"gmail messages.send",retryable:P});return n.info({to:e,chars:t.text.length},"delivered by email"),a.threadId?{threadKey:E(a.threadId)}:(n.warn({to:e},"Gmail named no thread for a sent message, so a reply to it starts fresh"),{})}return{name:"gmail",poll:I,settle:A,deliver:T,allows:t=>r.allow.allows(t),async resolveDestination(t,e){return U(r.allow,t,{...e?.optedInOnly?{optedInOnly:!0}:{}})},sameConversation:(t,e)=>t.trim().toLowerCase()===e.trim().toLowerCase(),attachment:t=>{const e=Q(t);return e?M(r.api,e):void 0},async start(){n.info({address:c,everyMs:r.pollIntervalMs,allow:r.allow.open?"anyone":"a list",answeringMailAfter:new Date(h).toISOString()},"watching the Gmail inbox"),await I(),g=setInterval(()=>{I()},r.pollIntervalMs)},async stop(){p=!0,g&&clearInterval(g),await m?.catch(()=>{}),d.size>0&&(n.info({turns:d.size},"waiting for email turns still running"),await A())}}}export{nt as GMAIL_ORIGIN,gt as createGmailInterface,E as threadKeyFor};
+import{BishopError as C}from"../errors.js";import{log as n}from"../log.js";import{retry as B}from"../retry.js";import{GmailApiError as P,gmailSendRetryable as $,UNREAD as q}from"./api.js";import{looksLikeAddress as z}from"./authorize.js";import{resolveGmailDestination as H}from"./destination.js";import{mailEtiquetteNote as U}from"./etiquette.js";import{mailAttachment as R,mailFile as W,mailFileId as J,mailFilePayload as Q,parseMailFile as V}from"./files.js";import{continuesAThread as X,mailHistory as Z}from"./history.js";import{mailIdentity as ee}from"./identity.js";import{buildMessage as te,buildReply as ae,mailHeaders as re,parseMessage as ne,readAttachments as oe}from"./message.js";import{gmailPresence as ie}from"./presence.js";import{participants as se,routeMessage as le}from"./route.js";const de={name:"gmail",guidance:["This conversation is an email thread. Everything you write during a turn is collected and","sent as one plain-text reply to everyone on the thread, so give the whole answer in a","single message and never say you will follow up separately: there is no way for you to","send anything until someone writes to you again.","","Nobody is watching while you work. None of your tool calls are visible and nothing you say","arrives until the turn is over, so a turn that takes minutes costs nothing. Markdown is not","rendered; write plain prose, and use blank lines rather than formatting for structure.","","A <headers> tag above each message says who it was addressed to. Everyone on the To and Cc","lines receives your reply and there is no way to answer one of them privately. Being on Cc","usually means you are being kept informed rather than asked for something.","","A thread can be a conversation between other people that you were only copied on. Bishop",'marks a message you may leave alone with a <thread> tag carrying reply="optional": you were',"not the only person it was written to. Stay out of those unless you are sure somebody is","asking you to do something. To stay out, say <no-output> and nothing else, and Bishop sends","no mail at all. Every message without that tag is yours to answer.","","Sure means the sender named you, or asked for something you can act on. Work of yours coming","up in conversation is not, and neither is a question somebody else is better placed to","answer, and neither is having something you think worth adding. When you are sure, answer,","however many people are on the thread. A message replying to something you said is a","conversation you are already part of, so lean towards answering that one.","",'When the tag also carries addressed="no", your address is on neither line. You reached this',"through a group, a forwarding alias, or a blind copy, so nobody wrote to you and a single","address can stand for a thousand people. Answer only if the message asks you for something","by name.","","One address can be a thousand people wherever it appears. Judge how many you would be","interrupting by who an address reaches rather than by how many you can count, and treat one","you cannot place as a crowd."].join(`
+`)},A="gmail:historyId",G="gmail:attachedAt",D="in:inbox newer_than:2d",S=50;function N(a){return`gmail:${a}`}async function he(a){try{return await a.sendAs()}catch(y){return n.warn({err:y},"the mailbox would not say who it is; the agent will not know its own name or any alias"),[]}}async function Se(a){const y=await a.api.profile(),h=ee(y.emailAddress,await he(a.api)),w=h.address,g={email:w,...h.name?{name:h.name}:{}},p={...de,self:{address:w,...h.name?{aka:[h.name]}:{}}},O=a.now??Date.now,b=a.state.get(G),f=b?Number(b):O();b||a.state.set(G,String(f));const x=new Set;let v,m,I=!1;const u=new Set;async function T(e,t){if(await a.labels.mark(e.threadId,"refused"),!(!t||x.has(e.threadId)))try{await a.api.send({raw:ae({from:g,to:[e.from],subject:e.subject,inReplyTo:e.messageId,references:e.references,body:t}),threadId:e.threadId}),x.add(e.threadId)}catch(s){n.warn({threadId:e.threadId,err:s},"could not send the refusal")}}function K(e,t){if(t.fetchable)return a.attachments.remember(e,p.name,{id:J(t),name:t.name,payload:Q(t)})}async function L(e,t){return t.attachments.length===0?[]:Promise.all(t.attachments.map(async(s,r)=>{const i=W(t.id,r,s),o=K(e.id,i),l=await a.files.save(e.dirKey,R(a.api,i,s.data));return o?{...l,ref:o}:l}))}function F(e,t,s,r){const i=[],o=se(t,h).map(d=>({email:d})),l=U(t,h);return{thread:e,isNewThread:r,origin:p,...l?{note:l}:{},...X(t)?{history:()=>Z({api:a.api,message:t,self:h,allow:a.allow,remember:d=>a.attachments.remember(e.id,p.name,d)})}:{},async messages(){const d=await L(e,t);return[{principal:{id:t.from.email,email:t.from.email,...t.from.name?{realName:t.from.name}:{}},text:s,headers:re(t),...d.length>0?{files:d}:{}}]},presence:()=>ie({api:a.api,labels:a.labels,self:g,message:t,to:o,threadKey:e.threadKey,notices:i,...l?{mayDecline:!0}:{}}),async notify(d){i.push(d)},async destination(){return{interface:"gmail",handle:t.from.email,label:t.from.email}}}}async function Y(e){const t=`gmail:${e}`;if(await a.events.seen(t,{record:!1}))return;let s;try{s=await a.api.message(e)}catch(c){if(c instanceof P&&c.status===404){await a.events.seen(t),n.warn({messageId:e},"a message vanished before it could be read; skipping it");return}throw c}await a.events.seen(t);const r=ne(s);if(r.receivedAt<f){n.warn({messageId:e,threadId:r.threadId,receivedAt:new Date(r.receivedAt).toISOString(),floor:new Date(f).toISOString()},"ignoring an email that predates this agent");return}const i=le(r,{self:h,allow:a.allow});if(i.action==="ignore"){n.debug({messageId:e,threadId:r.threadId,reason:i.reason},"ignoring an email");return}if(i.action==="refuse"){n.warn({messageId:e,threadId:r.threadId,from:r.from.email,reason:i.reason},"refusing an unauthorized email"),await T(r,i.note);return}const o=N(r.threadId),l=await a.threads.has(o),d=await a.threads.remember(o);a.markRead&&await a.api.modifyMessage(e,{removeLabelIds:[q]}).catch(c=>{n.debug({messageId:e,err:c},"could not mark the message read")}),n.info({thread:o,from:r.from.email,newThread:!l},"running a turn from email");const M=a.run(F(d,r,i.text,!l)).catch(c=>{n.error({thread:o,err:c},"a turn from email failed")}).finally(()=>{u.delete(M)});u.add(M)}async function _(){const e=a.state.get(A);if(!e){const o=await a.api.profile();a.state.set(A,o.historyId),n.info({historyId:o.historyId},"starting from the current state of the mailbox");return}const t=await a.api.history(e);let s=t.messageIds,r=t.historyId;if(t.expired){n.warn({cursor:e},"the Gmail history cursor is too old; falling back to a search of recent mail");const o=await a.api.profile();s=(await a.api.search(D,S)).reverse(),s.length===S&&n.warn({limit:S,query:D},"the resync search filled its limit, so older mail in the window was not looked at"),r=o.historyId}let i=!0;for(const o of s){if(I)return;try{await Y(o)}catch(l){i=!1,n.error({messageId:o,err:l},"could not handle an email")}}if(!i){n.warn({cursor:e},"holding the Gmail cursor so unhandled mail is offered again");return}r&&a.state.set(A,r)}async function k(){if(!(m||I)){m=(async()=>{await _()})();try{await m}catch(e){n.error({err:e},"a Gmail poll failed; retrying on the next interval")}finally{m=void 0}}}async function E(){await Promise.allSettled([...u])}async function j(e){const t=e.handle.trim().toLowerCase();if(!z(t))throw new C(`"${e.handle}" is not an email address, so nothing was sent`);if(!a.allow.allows(t))throw new C(`${t} is not on this agent's allow list, so nothing was sent to it`);const s=e.title?.trim()||"A message from your agent",r=await oe(e.files??[],(o,l)=>{n.error({to:t,file:o.name,err:l},"could not read a file to send with a report")}),i=await B(()=>a.api.send({raw:te({from:g,to:[{email:t}],subject:s,body:e.text,...r.length>0?{files:r}:{}})}),{what:"gmail messages.send",retryable:$});return n.info({to:t,chars:e.text.length,...r.length>0?{files:r.length}:{}},"delivered by email"),i.threadId?{threadKey:N(i.threadId)}:(n.warn({to:t},"Gmail named no thread for a sent message, so a reply to it starts fresh"),{})}return{name:"gmail",poll:k,settle:E,deliver:j,allows:e=>a.allow.allows(e),async resolveDestination(e,t){return H(a.allow,e,{...t?.optedInOnly?{optedInOnly:!0}:{}})},sameConversation:(e,t)=>e.trim().toLowerCase()===t.trim().toLowerCase(),attachment:e=>{const t=V(e);return t?R(a.api,t):void 0},async start(){n.info({address:w,everyMs:a.pollIntervalMs,allow:a.allow.open?"anyone":"a list",answeringMailAfter:new Date(f).toISOString()},"watching the Gmail inbox"),await k(),v=setInterval(()=>{k()},a.pollIntervalMs)},async stop(){I=!0,v&&clearInterval(v),await m?.catch(()=>{}),u.size>0&&(n.info({turns:u.size},"waiting for email turns still running"),await E())}}}export{de as GMAIL_ORIGIN,Se as createGmailInterface,N as threadKeyFor};

package/dist/gmail/labels.js

@@ -1 +1 @@
-import{log as i}from"../log.js";const m="Bishop",l={working:"Working",done:"Done",failed:"Failed",refused:"Refused"};async function f(a,d){const o=new Map;try{const r=new Map(a?(await a.labels()).map(e=>[e.name,e.id]):[]);for(const[e,n]of Object.entries(l)){const s=`${d}/${n}`,t=r.get(s)??(await a.createLabel(s)).id;o.set(e,t)}i.info({prefix:d,labels:o.size},"Gmail labels ready")}catch(r){i.warn({prefix:d,err:r},"could not set up Gmail labels; threads will not be marked")}return{async mark(r,e){const n=o.get(e);if(!n)return;const s=[...o.entries()].filter(([t])=>t!==e).map(([,t])=>t);try{await a.modifyThread(r,{addLabelIds:[n],removeLabelIds:s})}catch(t){i.debug({threadId:r,label:e,err:t},"could not label the thread")}}}}export{m as DEFAULT_LABEL_PREFIX,f as ensureLabels};
+import{log as d}from"../log.js";const u="Bishop",l={working:"Working",done:"Done",failed:"Failed",refused:"Refused",quiet:"Quiet"};async function m(a,i){const o=new Map;try{const r=new Map(a?(await a.labels()).map(e=>[e.name,e.id]):[]);for(const[e,n]of Object.entries(l)){const s=`${i}/${n}`,t=r.get(s)??(await a.createLabel(s)).id;o.set(e,t)}d.info({prefix:i,labels:o.size},"Gmail labels ready")}catch(r){d.warn({prefix:i,err:r},"could not set up Gmail labels; threads will not be marked")}return{async mark(r,e){const n=o.get(e);if(!n)return;const s=[...o.entries()].filter(([t])=>t!==e).map(([,t])=>t);try{await a.modifyThread(r,{addLabelIds:[n],removeLabelIds:s})}catch(t){d.debug({threadId:r,label:e,err:t},"could not label the thread")}}}}export{u as DEFAULT_LABEL_PREFIX,m as ensureLabels};