@astralyn/pi 1.0.4 → 1.1.0

package/dist/extensions/search/code-search.js

@@ -0,0 +1,120 @@
+/**
+ * code_search: Devin's SWE-grep model plans, this process executes.
+ *
+ * Each round sends the transcript to Devin, which replies with one tool call: `restricted_exec`
+ * (up to eight rg/readfile/tree commands, run locally by `Workspace`) or `answer` (an `<ANSWER>`
+ * document of files and line ranges). After `MAX_TURNS` rounds the answer is demanded.
+ */
+import { randomUUID } from "node:crypto";
+import { relative } from "node:path";
+import { chat } from "./devin.js";
+import { FORCE_ANSWER, MAX_COMMANDS, MAX_RESULTS, MAX_TURNS, RETRY_TOOL_CALL, SYSTEM_PROMPT, TOOL_DEFINITIONS, } from "./prompt.js";
+import { VIRTUAL_ROOT, Workspace } from "./workspace.js";
+export async function codeSearch(options) {
+    const { apiKey, query, signal } = options;
+    const progress = options.onProgress ?? (() => { });
+    const workspace = options.workspace ?? new Workspace(options.root);
+    const map = workspace.repoMap();
+    const messages = [
+        { role: "system", content: SYSTEM_PROMPT },
+        {
+            role: "user",
+            content: `Problem Statement: ${query}\n\nRepo Map (tree -L ${map.depth} ${VIRTUAL_ROOT}):\n\`\`\`text\n${map.tree}\n\`\`\``,
+        },
+    ];
+    for (let turn = 1; turn <= MAX_TURNS + 1; turn++) {
+        if (turn === MAX_TURNS + 1)
+            messages.push({ role: "user", content: FORCE_ANSWER });
+        progress(turn > MAX_TURNS ? "Collecting the answer…" : `Planning (round ${turn}/${MAX_TURNS})…`);
+        const reply = await chat(apiKey, messages, TOOL_DEFINITIONS, signal);
+        const call = parseToolCall(reply);
+        if (call?.name === "answer") {
+            return parseAnswer(String(call.args.answer ?? ""), workspace, options.cwd);
+        }
+        if (call?.name !== "restricted_exec") {
+            messages.push({ role: "assistant", content: reply }, { role: "user", content: RETRY_TOOL_CALL });
+            continue;
+        }
+        const keys = Object.keys(call.args)
+            .filter((k) => /^command\d+$/.test(k))
+            .sort((a, b) => Number(a.slice(7)) - Number(b.slice(7)))
+            .slice(0, MAX_COMMANDS);
+        progress(`Running ${keys.length} ${keys.length === 1 ? "command" : "commands"} (round ${turn}/${MAX_TURNS})…`);
+        const results = await Promise.all(keys.map(async (k) => `<${k}_result>\n${await workspace.run(call.args[k], signal)}\n</${k}_result>`));
+        const id = randomUUID();
+        messages.push({
+            role: "assistant",
+            content: call.thinking,
+            call: { id, name: call.name, arguments: JSON.stringify(call.args) },
+        }, { role: "tool", content: results.join(""), callId: id });
+    }
+    return [];
+}
+/** `thinking[TOOL_CALLS]name[ARGS]{json}`. The JSON is the first balanced object, repaired if needed. */
+export function parseToolCall(text) {
+    const m = text.match(/\[TOOL_CALLS\]\s*(\w+)\s*\[ARGS\]\s*(\{[\s\S]*)/);
+    if (!m)
+        return null;
+    // Repair before scanning: a stray key quote would otherwise end the scan inside a "string".
+    for (const candidate of [firstObject(m[2]), firstObject(repairKeys(m[2]))]) {
+        try {
+            const args = JSON.parse(candidate);
+            if (args && typeof args === "object" && !Array.isArray(args)) {
+                return { thinking: text.slice(0, m.index).trim(), name: m[1], args: args };
+            }
+        }
+        catch { }
+    }
+    return null;
+}
+function firstObject(text) {
+    let depth = 0;
+    let inString = false;
+    for (let i = 0; i < text.length; i++) {
+        const c = text[i];
+        if (inString) {
+            if (c === "\\")
+                i++;
+            else if (c === '"')
+                inString = false;
+        }
+        else if (c === '"')
+            inString = true;
+        else if (c === "{")
+            depth++;
+        else if (c === "}" && --depth === 0)
+            return text.slice(0, i + 1);
+    }
+    return text;
+}
+/** The planner sometimes drops a key's quotes, as in `,exclude":[]` or `{path:"…"}`. */
+function repairKeys(json) {
+    return json.replace(/([{,]\s*)"?([A-Za-z_]\w*)"?\s*:/g, '$1"$2":');
+}
+const FILE_RE = /<file\s+path=(["'])(.+?)\1\s*>([\s\S]*?)<\/file>/g;
+const RANGE_RE = /<range>\s*(\d+)\s*-\s*(\d+)\s*<\/range>/g;
+/** The files of an `<ANSWER>`, each re-checked against the workspace; anything outside it is dropped. */
+export function parseAnswer(xml, workspace, cwd) {
+    const locations = [];
+    for (const [, , path, body] of xml.matchAll(FILE_RE)) {
+        const real = workspace.toReal(path);
+        if (!real)
+            continue;
+        locations.push({
+            path: relative(cwd, real).replace(/\\/g, "/") || ".",
+            ranges: [...body.matchAll(RANGE_RE)]
+                .map(([, start, end]) => [Number(start), Number(end)])
+                .sort((a, b) => a[0] - b[0]),
+        });
+        if (locations.length === MAX_RESULTS)
+            break;
+    }
+    return locations;
+}
+export function formatLocations(locations) {
+    if (!locations.length)
+        return "No relevant code found. Try a narrower behavioral query, or grep for a known identifier.";
+    const lines = locations.map(({ path, ranges }) => `${path}${ranges.length ? ` (${ranges.map(([s, e]) => `L${s}-${e}`).join(", ")})` : ""}`);
+    return `${locations.length} candidate ${locations.length === 1 ? "location" : "locations"}; read them before relying on them:\n${lines.join("\n")}`;
+}
+//# sourceMappingURL=code-search.js.map

package/dist/extensions/search/code-search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-search.js","sourceRoot":"","sources":["../../../src/extensions/search/code-search.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAoB,IAAI,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EACN,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,SAAS,EACT,eAAe,EACf,aAAa,EACb,gBAAgB,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAgB,YAAY,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAoBvE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAA0B;IAC1D,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAkB;QAC/B,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE;QAC1C;YACC,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,sBAAsB,KAAK,yBAAyB,GAAG,CAAC,KAAK,IAAI,YAAY,mBAAmB,GAAG,CAAC,IAAI,UAAU;SAC3H;KACD,CAAC;IAEF,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,SAAS,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;QAClD,IAAI,IAAI,KAAK,SAAS,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;QACnF,QAAQ,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,mBAAmB,IAAI,IAAI,SAAS,IAAI,CAAC,CAAC;QACjG,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAElC,IAAI,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,IAAI,EAAE,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;YACjG,SAAS;QACV,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;aACjC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aACrC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;aACvD,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;QACzB,QAAQ,CAAC,WAAW,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,WAAW,IAAI,IAAI,SAAS,IAAI,CAAC,CAAC;QAC/G,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,IAAI,CAAC,GAAG,CACP,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,MAAM,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAY,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CACrG,CACD,CAAC;QACF,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,QAAQ,CAAC,IAAI,CACZ;YACC,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SACnE,EACD,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CACvD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACX,CAAC;AAQD,yGAAyG;AACzG,MAAM,UAAU,aAAa,CAAC,IAAY;IACzC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACxE,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,4FAA4F;IAC5F,KAAK,MAAM,SAAS,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAY,CAAC;YAC9C,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9D,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,IAA+B,EAAE,CAAC;YACxG,CAAC;QACF,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACX,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;iBACf,IAAI,CAAC,KAAK,GAAG;gBAAE,QAAQ,GAAG,KAAK,CAAC;QACtC,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG;YAAE,QAAQ,GAAG,IAAI,CAAC;aACjC,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aACvB,IAAI,CAAC,KAAK,GAAG,IAAI,EAAE,KAAK,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,wFAAwF;AACxF,SAAS,UAAU,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,kCAAkC,EAAE,SAAS,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,OAAO,GAAG,mDAAmD,CAAC;AACpE,MAAM,QAAQ,GAAG,0CAA0C,CAAC;AAE5D,yGAAyG;AACzG,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,SAAoB,EAAE,GAAW;IACzE,MAAM,SAAS,GAAmB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,EAAE,AAAD,EAAG,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,SAAS,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,GAAG;YACpD,MAAM,EAAE,CAAC,GAAG,IAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;iBACnC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,EAAoB,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;iBACvE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;SAC7B,CAAC,CAAC;QACH,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW;YAAE,MAAM;IAC7C,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,SAAyB;IACxD,IAAI,CAAC,SAAS,CAAC,MAAM;QACpB,OAAO,0FAA0F,CAAC;IACnG,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAC1B,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9G,CAAC;IACF,OAAO,GAAG,SAAS,CAAC,MAAM,cAAc,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,wCAAwC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACrJ,CAAC","sourcesContent":["/**\n * code_search: Devin's SWE-grep model plans, this process executes.\n *\n * Each round sends the transcript to Devin, which replies with one tool call: `restricted_exec`\n * (up to eight rg/readfile/tree commands, run locally by `Workspace`) or `answer` (an `<ANSWER>`\n * document of files and line ranges). After `MAX_TURNS` rounds the answer is demanded.\n */\nimport { randomUUID } from \"node:crypto\";\nimport { relative } from \"node:path\";\nimport { type ChatMessage, chat } from \"./devin.ts\";\nimport {\n\tFORCE_ANSWER,\n\tMAX_COMMANDS,\n\tMAX_RESULTS,\n\tMAX_TURNS,\n\tRETRY_TOOL_CALL,\n\tSYSTEM_PROMPT,\n\tTOOL_DEFINITIONS,\n} from \"./prompt.ts\";\nimport { type Command, VIRTUAL_ROOT, Workspace } from \"./workspace.ts\";\n\nexport interface CodeLocation {\n\t/** Relative to the session's working directory. */\n\tpath: string;\n\tranges: Array<[number, number]>;\n}\n\nexport interface CodeSearchOptions {\n\tapiKey: string;\n\tquery: string;\n\t/** Directory to search; already confined to the working directory by the caller. */\n\troot: string;\n\tcwd: string;\n\tsignal?: AbortSignal;\n\tonProgress?: (message: string) => void;\n\t/** Test seam for the local `rg` backend. */\n\tworkspace?: Workspace;\n}\n\nexport async function codeSearch(options: CodeSearchOptions): Promise<CodeLocation[]> {\n\tconst { apiKey, query, signal } = options;\n\tconst progress = options.onProgress ?? (() => {});\n\tconst workspace = options.workspace ?? new Workspace(options.root);\n\tconst map = workspace.repoMap();\n\tconst messages: ChatMessage[] = [\n\t\t{ role: \"system\", content: SYSTEM_PROMPT },\n\t\t{\n\t\t\trole: \"user\",\n\t\t\tcontent: `Problem Statement: ${query}\\n\\nRepo Map (tree -L ${map.depth} ${VIRTUAL_ROOT}):\\n\\`\\`\\`text\\n${map.tree}\\n\\`\\`\\``,\n\t\t},\n\t];\n\n\tfor (let turn = 1; turn <= MAX_TURNS + 1; turn++) {\n\t\tif (turn === MAX_TURNS + 1) messages.push({ role: \"user\", content: FORCE_ANSWER });\n\t\tprogress(turn > MAX_TURNS ? \"Collecting the answer…\" : `Planning (round ${turn}/${MAX_TURNS})…`);\n\t\tconst reply = await chat(apiKey, messages, TOOL_DEFINITIONS, signal);\n\t\tconst call = parseToolCall(reply);\n\n\t\tif (call?.name === \"answer\") {\n\t\t\treturn parseAnswer(String(call.args.answer ?? \"\"), workspace, options.cwd);\n\t\t}\n\t\tif (call?.name !== \"restricted_exec\") {\n\t\t\tmessages.push({ role: \"assistant\", content: reply }, { role: \"user\", content: RETRY_TOOL_CALL });\n\t\t\tcontinue;\n\t\t}\n\n\t\tconst keys = Object.keys(call.args)\n\t\t\t.filter((k) => /^command\\d+$/.test(k))\n\t\t\t.sort((a, b) => Number(a.slice(7)) - Number(b.slice(7)))\n\t\t\t.slice(0, MAX_COMMANDS);\n\t\tprogress(`Running ${keys.length} ${keys.length === 1 ? \"command\" : \"commands\"} (round ${turn}/${MAX_TURNS})…`);\n\t\tconst results = await Promise.all(\n\t\t\tkeys.map(\n\t\t\t\tasync (k) => `<${k}_result>\\n${await workspace.run(call.args[k] as Command, signal)}\\n</${k}_result>`,\n\t\t\t),\n\t\t);\n\t\tconst id = randomUUID();\n\t\tmessages.push(\n\t\t\t{\n\t\t\t\trole: \"assistant\",\n\t\t\t\tcontent: call.thinking,\n\t\t\t\tcall: { id, name: call.name, arguments: JSON.stringify(call.args) },\n\t\t\t},\n\t\t\t{ role: \"tool\", content: results.join(\"\"), callId: id },\n\t\t);\n\t}\n\treturn [];\n}\n\nexport interface ToolCall {\n\tthinking: string;\n\tname: string;\n\targs: Record<string, unknown>;\n}\n\n/** `thinking[TOOL_CALLS]name[ARGS]{json}`. The JSON is the first balanced object, repaired if needed. */\nexport function parseToolCall(text: string): ToolCall | null {\n\tconst m = text.match(/\\[TOOL_CALLS\\]\\s*(\\w+)\\s*\\[ARGS\\]\\s*(\\{[\\s\\S]*)/);\n\tif (!m) return null;\n\t// Repair before scanning: a stray key quote would otherwise end the scan inside a \"string\".\n\tfor (const candidate of [firstObject(m[2]!), firstObject(repairKeys(m[2]!))]) {\n\t\ttry {\n\t\t\tconst args = JSON.parse(candidate) as unknown;\n\t\t\tif (args && typeof args === \"object\" && !Array.isArray(args)) {\n\t\t\t\treturn { thinking: text.slice(0, m.index).trim(), name: m[1]!, args: args as Record<string, unknown> };\n\t\t\t}\n\t\t} catch {}\n\t}\n\treturn null;\n}\n\nfunction firstObject(text: string): string {\n\tlet depth = 0;\n\tlet inString = false;\n\tfor (let i = 0; i < text.length; i++) {\n\t\tconst c = text[i];\n\t\tif (inString) {\n\t\t\tif (c === \"\\\\\") i++;\n\t\t\telse if (c === '\"') inString = false;\n\t\t} else if (c === '\"') inString = true;\n\t\telse if (c === \"{\") depth++;\n\t\telse if (c === \"}\" && --depth === 0) return text.slice(0, i + 1);\n\t}\n\treturn text;\n}\n\n/** The planner sometimes drops a key's quotes, as in `,exclude\":[]` or `{path:\"…\"}`. */\nfunction repairKeys(json: string): string {\n\treturn json.replace(/([{,]\\s*)\"?([A-Za-z_]\\w*)\"?\\s*:/g, '$1\"$2\":');\n}\n\nconst FILE_RE = /<file\\s+path=([\"'])(.+?)\\1\\s*>([\\s\\S]*?)<\\/file>/g;\nconst RANGE_RE = /<range>\\s*(\\d+)\\s*-\\s*(\\d+)\\s*<\\/range>/g;\n\n/** The files of an `<ANSWER>`, each re-checked against the workspace; anything outside it is dropped. */\nexport function parseAnswer(xml: string, workspace: Workspace, cwd: string): CodeLocation[] {\n\tconst locations: CodeLocation[] = [];\n\tfor (const [, , path, body] of xml.matchAll(FILE_RE)) {\n\t\tconst real = workspace.toReal(path);\n\t\tif (!real) continue;\n\t\tlocations.push({\n\t\t\tpath: relative(cwd, real).replace(/\\\\/g, \"/\") || \".\",\n\t\t\tranges: [...body!.matchAll(RANGE_RE)]\n\t\t\t\t.map(([, start, end]): [number, number] => [Number(start), Number(end)])\n\t\t\t\t.sort((a, b) => a[0] - b[0]),\n\t\t});\n\t\tif (locations.length === MAX_RESULTS) break;\n\t}\n\treturn locations;\n}\n\nexport function formatLocations(locations: CodeLocation[]): string {\n\tif (!locations.length)\n\t\treturn \"No relevant code found. Try a narrower behavioral query, or grep for a known identifier.\";\n\tconst lines = locations.map(\n\t\t({ path, ranges }) => `${path}${ranges.length ? ` (${ranges.map(([s, e]) => `L${s}-${e}`).join(\", \")})` : \"\"}`,\n\t);\n\treturn `${locations.length} candidate ${locations.length === 1 ? \"location\" : \"locations\"}; read them before relying on them:\\n${lines.join(\"\\n\")}`;\n}\n"]}

package/dist/extensions/search/command.d.ts

@@ -0,0 +1,5 @@
+import type { ExtensionAPI } from "../../core/extensions/types.ts";
+/** Deactivate both tools when no credential exists; `activate` re-enables them after a sign-in. */
+export declare function syncTools(pi: ExtensionAPI, activate?: boolean): void;
+export declare function registerSearchCommand(pi: ExtensionAPI): void;
+//# sourceMappingURL=command.d.ts.map

package/dist/extensions/search/command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../src/extensions/search/command.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAwBnE,mGAAmG;AACnG,wBAAgB,SAAS,CAAC,EAAE,EAAE,YAAY,EAAE,QAAQ,UAAQ,GAAG,IAAI,CASlE;AA+BD,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CAoB5D"}

package/dist/extensions/search/command.js

@@ -0,0 +1,69 @@
+/** `/search` and the tool activation that follows the account state. */
+import { homedir } from "node:os";
+import { openBrowser } from "../../utils/open-browser.js";
+import { createSignIn, credentialPath, deleteCredential, ENV_KEY, exchangeCode, getCredential, looksLikeToken, saveCredential, toApiKey, } from "./credential.js";
+import { webSearch } from "./devin.js";
+import { SearchPanel } from "./panel.js";
+/** `~/.pi/agent/search-auth.json` rather than the full home path, so panel rows stay short. */
+function displayPath(path) {
+    const home = homedir();
+    return path.startsWith(home) ? `~${path.slice(home.length).replace(/\\/g, "/")}` : path;
+}
+const TOOL_NAMES = ["code_search", "web_search"];
+/** Deactivate both tools when no credential exists; `activate` re-enables them after a sign-in. */
+export function syncTools(pi, activate = false) {
+    const active = pi.getActiveTools();
+    if (!getCredential()) {
+        const next = active.filter((name) => !TOOL_NAMES.includes(name));
+        if (next.length !== active.length)
+            pi.setActiveTools(next);
+    }
+    else if (activate) {
+        const missing = TOOL_NAMES.filter((name) => !active.includes(name));
+        if (missing.length)
+            pi.setActiveTools([...active, ...missing]);
+    }
+}
+function accountActions(pi) {
+    /** One cheap authenticated call, so a bad token fails here rather than at the model's first search. */
+    const verifyAndSave = async (token) => {
+        await webSearch(toApiKey(token), "Devin", 1);
+        saveCredential(token);
+        syncTools(pi, true);
+    };
+    return {
+        state() {
+            const source = getCredential()?.source;
+            return { source, location: source === "env" ? ENV_KEY : displayPath(credentialPath()) };
+        },
+        startSignIn() {
+            const attempt = createSignIn();
+            openBrowser(attempt.url);
+            return {
+                url: attempt.url,
+                complete: async (input) => verifyAndSave(looksLikeToken(input) ? input : await exchangeCode(attempt, input)),
+            };
+        },
+        saveToken: verifyAndSave,
+        signOut() {
+            deleteCredential();
+            syncTools(pi);
+        },
+    };
+}
+export function registerSearchCommand(pi) {
+    pi.registerCommand("search", {
+        description: "Sign in to Devin for code_search and web_search",
+        handler: async (_args, ctx) => {
+            if (!ctx.hasUI) {
+                const credential = getCredential();
+                ctx.ui.notify(credential
+                    ? `Devin Search: signed in ($credential.source === "env" ? ENV_KEY : credentialPath()).`
+                    : `Devin Search: not signed in. Run /search interactively, or set $ENV_KEY.`, credential ? "info" : "warning");
+                return;
+            }
+            await ctx.ui.custom((tui, theme, keybindings, done) => new SearchPanel(tui, theme, keybindings, accountActions(pi), () => done()));
+        },
+    });
+}
+//# sourceMappingURL=command.js.map

package/dist/extensions/search/command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.js","sourceRoot":"","sources":["../../../src/extensions/search/command.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EACN,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,OAAO,EACP,YAAY,EACZ,aAAa,EACb,cAAc,EACd,cAAc,EACd,QAAQ,GACR,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAqB,WAAW,EAAE,MAAM,YAAY,CAAC;AAE5D,+FAA+F;AAC/F,SAAS,WAAW,CAAC,IAAY;IAChC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;AAEjD,mGAAmG;AACnG,MAAM,UAAU,SAAS,CAAC,EAAgB,EAAE,QAAQ,GAAG,KAAK;IAC3D,MAAM,MAAM,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC;IACnC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;YAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC;SAAM,IAAI,QAAQ,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,IAAI,OAAO,CAAC,MAAM;YAAE,EAAE,CAAC,cAAc,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;IAChE,CAAC;AACF,CAAC;AAED,SAAS,cAAc,CAAC,EAAgB;IACvC,uGAAuG;IACvG,MAAM,aAAa,GAAG,KAAK,EAAE,KAAa,EAAE,EAAE;QAC7C,MAAM,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC7C,cAAc,CAAC,KAAK,CAAC,CAAC;QACtB,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC;IACF,OAAO;QACN,KAAK;YACJ,MAAM,MAAM,GAAG,aAAa,EAAE,EAAE,MAAM,CAAC;YACvC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC,EAAE,CAAC;QACzF,CAAC;QACD,WAAW;YACV,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;YAC/B,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACzB,OAAO;gBACN,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CACzB,aAAa,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;aAClF,CAAC;QACH,CAAC;QACD,SAAS,EAAE,aAAa;QACxB,OAAO;YACN,gBAAgB,EAAE,CAAC;YACnB,SAAS,CAAC,EAAE,CAAC,CAAC;QACf,CAAC;KACD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,EAAgB;IACrD,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE;QAC5B,WAAW,EAAE,iDAAiD;QAC9D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC7B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;gBAChB,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;gBACnC,GAAG,CAAC,EAAE,CAAC,MAAM,CACZ,UAAU;oBACT,CAAC,CAAC,sFAAsF;oBACxF,CAAC,CAAC,0EAA0E,EAC7E,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAC/B,CAAC;gBACF,OAAO;YACR,CAAC;YACD,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAClB,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CACjC,IAAI,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,cAAc,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAC3E,CAAC;QACH,CAAC;KACD,CAAC,CAAC;AACJ,CAAC","sourcesContent":["/** `/search` and the tool activation that follows the account state. */\nimport { homedir } from \"node:os\";\nimport type { ExtensionAPI } from \"../../core/extensions/types.ts\";\nimport { openBrowser } from \"../../utils/open-browser.ts\";\nimport {\n\tcreateSignIn,\n\tcredentialPath,\n\tdeleteCredential,\n\tENV_KEY,\n\texchangeCode,\n\tgetCredential,\n\tlooksLikeToken,\n\tsaveCredential,\n\ttoApiKey,\n} from \"./credential.ts\";\nimport { webSearch } from \"./devin.ts\";\nimport { type PanelActions, SearchPanel } from \"./panel.ts\";\n\n/** `~/.pi/agent/search-auth.json` rather than the full home path, so panel rows stay short. */\nfunction displayPath(path: string): string {\n\tconst home = homedir();\n\treturn path.startsWith(home) ? `~${path.slice(home.length).replace(/\\\\/g, \"/\")}` : path;\n}\n\nconst TOOL_NAMES = [\"code_search\", \"web_search\"];\n\n/** Deactivate both tools when no credential exists; `activate` re-enables them after a sign-in. */\nexport function syncTools(pi: ExtensionAPI, activate = false): void {\n\tconst active = pi.getActiveTools();\n\tif (!getCredential()) {\n\t\tconst next = active.filter((name) => !TOOL_NAMES.includes(name));\n\t\tif (next.length !== active.length) pi.setActiveTools(next);\n\t} else if (activate) {\n\t\tconst missing = TOOL_NAMES.filter((name) => !active.includes(name));\n\t\tif (missing.length) pi.setActiveTools([...active, ...missing]);\n\t}\n}\n\nfunction accountActions(pi: ExtensionAPI): PanelActions {\n\t/** One cheap authenticated call, so a bad token fails here rather than at the model's first search. */\n\tconst verifyAndSave = async (token: string) => {\n\t\tawait webSearch(toApiKey(token), \"Devin\", 1);\n\t\tsaveCredential(token);\n\t\tsyncTools(pi, true);\n\t};\n\treturn {\n\t\tstate() {\n\t\t\tconst source = getCredential()?.source;\n\t\t\treturn { source, location: source === \"env\" ? ENV_KEY : displayPath(credentialPath()) };\n\t\t},\n\t\tstartSignIn() {\n\t\t\tconst attempt = createSignIn();\n\t\t\topenBrowser(attempt.url);\n\t\t\treturn {\n\t\t\t\turl: attempt.url,\n\t\t\t\tcomplete: async (input) =>\n\t\t\t\t\tverifyAndSave(looksLikeToken(input) ? input : await exchangeCode(attempt, input)),\n\t\t\t};\n\t\t},\n\t\tsaveToken: verifyAndSave,\n\t\tsignOut() {\n\t\t\tdeleteCredential();\n\t\t\tsyncTools(pi);\n\t\t},\n\t};\n}\n\nexport function registerSearchCommand(pi: ExtensionAPI): void {\n\tpi.registerCommand(\"search\", {\n\t\tdescription: \"Sign in to Devin for code_search and web_search\",\n\t\thandler: async (_args, ctx) => {\n\t\t\tif (!ctx.hasUI) {\n\t\t\t\tconst credential = getCredential();\n\t\t\t\tctx.ui.notify(\n\t\t\t\t\tcredential\n\t\t\t\t\t\t? `Devin Search: signed in ($credential.source === \"env\" ? ENV_KEY : credentialPath()).`\n\t\t\t\t\t\t: `Devin Search: not signed in. Run /search interactively, or set $ENV_KEY.`,\n\t\t\t\t\tcredential ? \"info\" : \"warning\",\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tawait ctx.ui.custom<void>(\n\t\t\t\t(tui, theme, keybindings, done) =>\n\t\t\t\t\tnew SearchPanel(tui, theme, keybindings, accountActions(pi), () => done()),\n\t\t\t);\n\t\t},\n\t});\n}\n"]}

package/dist/extensions/search/credential.d.ts

@@ -0,0 +1,25 @@
+export declare const ENV_KEY = "SEARCH_KEY";
+/** `{ "devin": { "token": "<as Devin issued it>" } }`, beside auth.json and mcp-auth.json. */
+export declare function credentialPath(): string;
+/** A Devin session JWT gains its prefix; anything else (an already prefixed key) passes through. */
+export declare function toApiKey(token: string): string;
+export type CredentialSource = "saved" | "env";
+/** Read on every call, so a sign-in elsewhere or an edited file applies without a restart. */
+export declare function getCredential(): {
+    apiKey: string;
+    source: CredentialSource;
+} | undefined;
+/** Saves the token exactly as Devin issued it; the request prefix is added at use. */
+export declare function saveCredential(token: string): void;
+export declare function deleteCredential(): void;
+/** Whether pasted text is a token rather than a one-time authorization code. */
+export declare function looksLikeToken(value: string): boolean;
+export interface SignInAttempt {
+    url: string;
+    /** Never leaves this process. */
+    verifier: string;
+}
+/** PKCE S256 without a redirect: Devin shows the code in the browser and the user pastes it back. */
+export declare function createSignIn(): SignInAttempt;
+export declare function exchangeCode(attempt: SignInAttempt, input: string, fetcher?: typeof fetch): Promise<string>;
+//# sourceMappingURL=credential.d.ts.map

package/dist/extensions/search/credential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.d.ts","sourceRoot":"","sources":["../../../src/extensions/search/credential.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,OAAO,eAAe,CAAC;AAOpC,8FAA8F;AAC9F,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAID,oGAAoG;AACpG,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAG9C;AA+BD,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,KAAK,CAAC;AAE/C,8FAA8F;AAC9F,wBAAgB,aAAa,IAAI;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,GAAG,SAAS,CAKxF;AAED,sFAAsF;AACtF,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAIlD;AAED,wBAAgB,gBAAgB,IAAI,IAAI,CAKvC;AAED,gFAAgF;AAChF,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAErD;AAED,MAAM,WAAW,aAAa;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,qGAAqG;AACrG,wBAAgB,YAAY,IAAI,aAAa,CAU5C;AAED,wBAAsB,YAAY,CACjC,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,OAAO,KAAa,GAC3B,OAAO,CAAC,MAAM,CAAC,CAyBjB"}

package/dist/extensions/search/credential.js

@@ -0,0 +1,117 @@
+/**
+ * The one Devin credential both tools share, and the browser sign-in that obtains it.
+ *
+ * Devin's CLI sign-in returns a bare session JWT; the Windsurf backends accept it only as
+ * `devin-session-token$<JWT>`. `toApiKey` is the single place that rule lives.
+ */
+import { createHash, randomBytes } from "node:crypto";
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+import { getAgentDir } from "../../config.js";
+import { FileAuthStorageBackend } from "../../core/auth-storage.js";
+export const ENV_KEY = "SEARCH_KEY";
+const SESSION_PREFIX = "devin-session-token$";
+const AUTHORIZE_URL = "https://app.devin.ai/auth/cli/continue";
+const TOKEN_URL = "https://api.devin.ai/auth/cli/token";
+const MAX_INPUT_CHARS = 16_384;
+/** `{ "devin": { "token": "<as Devin issued it>" } }`, beside auth.json and mcp-auth.json. */
+export function credentialPath() {
+    return join(getAgentDir(), "search-auth.json");
+}
+const PROVIDER = "devin";
+/** A Devin session JWT gains its prefix; anything else (an already prefixed key) passes through. */
+export function toApiKey(token) {
+    const value = token.trim();
+    return /^eyJ[\w-]*\.[\w-]*\.[\w-]*$/.test(value) ? `${SESSION_PREFIX}${value}` : value;
+}
+function parseStored(current) {
+    try {
+        const data = JSON.parse(current ?? "{}");
+        return data && typeof data === "object" && !Array.isArray(data) ? data : {};
+    }
+    catch {
+        return {};
+    }
+}
+/** Read-modify-write under the file lock that auth.json and mcp-auth.json also use. */
+function updateStored(change) {
+    new FileAuthStorageBackend(credentialPath()).withLock((current) => {
+        const stored = parseStored(current);
+        change(stored);
+        return { result: undefined, next: `${JSON.stringify(stored, null, 2)}\n` };
+    });
+}
+function readSaved() {
+    // Checked first so a session that never signs in does not create the file.
+    if (!existsSync(credentialPath()))
+        return undefined;
+    const token = new FileAuthStorageBackend(credentialPath()).withLock((current) => ({
+        result: parseStored(current)[PROVIDER]?.token,
+    }));
+    return typeof token === "string" && token.trim() ? token.trim() : undefined;
+}
+/** Read on every call, so a sign-in elsewhere or an edited file applies without a restart. */
+export function getCredential() {
+    const saved = readSaved();
+    if (saved)
+        return { apiKey: toApiKey(saved), source: "saved" };
+    const env = process.env[ENV_KEY]?.trim();
+    return env ? { apiKey: toApiKey(env), source: "env" } : undefined;
+}
+/** Saves the token exactly as Devin issued it; the request prefix is added at use. */
+export function saveCredential(token) {
+    updateStored((stored) => {
+        stored[PROVIDER] = { token: token.trim() };
+    });
+}
+export function deleteCredential() {
+    if (!existsSync(credentialPath()))
+        return;
+    updateStored((stored) => {
+        delete stored[PROVIDER];
+    });
+}
+/** Whether pasted text is a token rather than a one-time authorization code. */
+export function looksLikeToken(value) {
+    return value.startsWith(SESSION_PREFIX) || toApiKey(value) !== value;
+}
+/** PKCE S256 without a redirect: Devin shows the code in the browser and the user pastes it back. */
+export function createSignIn() {
+    const verifier = randomBytes(64).toString("base64url");
+    const url = new URL(AUTHORIZE_URL);
+    url.search = new URLSearchParams({
+        state: randomBytes(32).toString("base64url"),
+        prompt: "select_account",
+        code_challenge: createHash("sha256").update(verifier).digest("base64url"),
+        code_challenge_method: "S256",
+    }).toString();
+    return { url: url.toString(), verifier };
+}
+export async function exchangeCode(attempt, input, fetcher = fetch) {
+    const code = input.trim();
+    if (!code || code.length > MAX_INPUT_CHARS || /\s|[\x00-\x1f\x7f]/.test(code)) {
+        throw new Error("That does not look like a Devin authorization code.");
+    }
+    let response;
+    try {
+        response = await fetcher(TOKEN_URL, {
+            method: "POST",
+            headers: { "content-type": "application/json", accept: "application/json" },
+            body: JSON.stringify({ code, code_verifier: attempt.verifier }),
+            redirect: "error",
+            signal: AbortSignal.timeout(60_000),
+        });
+    }
+    catch {
+        throw new Error("Could not reach Devin. Check your network and run /search again.");
+    }
+    if (!response.ok) {
+        throw new Error(`Devin rejected the code (HTTP ${response.status}). Codes are one-time; run /search again.`);
+    }
+    const token = (await response.json().catch(() => undefined))?.token;
+    if (typeof token !== "string" || !token || token.length > MAX_INPUT_CHARS) {
+        throw new Error("Devin returned no usable session token.");
+    }
+    return token;
+}
+//# sourceMappingURL=credential.js.map

package/dist/extensions/search/credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.js","sourceRoot":"","sources":["../../../src/extensions/search/credential.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAEpE,MAAM,CAAC,MAAM,OAAO,GAAG,YAAY,CAAC;AAEpC,MAAM,cAAc,GAAG,sBAAsB,CAAC;AAC9C,MAAM,aAAa,GAAG,wCAAwC,CAAC;AAC/D,MAAM,SAAS,GAAG,qCAAqC,CAAC;AACxD,MAAM,eAAe,GAAG,MAAM,CAAC;AAE/B,8FAA8F;AAC9F,MAAM,UAAU,cAAc;IAC7B,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,kBAAkB,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,QAAQ,GAAG,OAAO,CAAC;AAEzB,oGAAoG;AACpG,MAAM,UAAU,QAAQ,CAAC,KAAa;IACrC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,cAAc,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AACxF,CAAC;AAID,SAAS,WAAW,CAAC,OAA2B;IAC/C,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAY,CAAC;QACpD,OAAO,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAqB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAC;IACX,CAAC;AACF,CAAC;AAED,uFAAuF;AACvF,SAAS,YAAY,CAAC,MAAsC;IAC3D,IAAI,sBAAsB,CAAC,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE;QACjE,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5E,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS;IACjB,2EAA2E;IAC3E,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,sBAAsB,CAAC,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACjF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;KAC7C,CAAC,CAAC,CAAC;IACJ,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7E,CAAC;AAID,8FAA8F;AAC9F,MAAM,UAAU,aAAa;IAC5B,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC/D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;IACzC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,cAAc,CAAC,KAAa;IAC3C,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE;QACvB,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC/B,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;QAAE,OAAO;IAC1C,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE;QACvB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,cAAc,CAAC,KAAa;IAC3C,OAAO,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC;AACtE,CAAC;AAQD,qGAAqG;AACrG,MAAM,UAAU,YAAY;IAC3B,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IACnC,GAAG,CAAC,MAAM,GAAG,IAAI,eAAe,CAAC;QAChC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC5C,MAAM,EAAE,gBAAgB;QACxB,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;QACzE,qBAAqB,EAAE,MAAM;KAC7B,CAAC,CAAC,QAAQ,EAAE,CAAC;IACd,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,OAAsB,EACtB,KAAa,EACb,UAAwB,KAAK;IAE7B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE;YAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC/D,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACnC,CAAC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,CAAC,MAAM,2CAA2C,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,KAAK,GAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAqC,EAAE,KAAK,CAAC;IACzG,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC","sourcesContent":["/**\n * The one Devin credential both tools share, and the browser sign-in that obtains it.\n *\n * Devin's CLI sign-in returns a bare session JWT; the Windsurf backends accept it only as\n * `devin-session-token$<JWT>`. `toApiKey` is the single place that rule lives.\n */\nimport { createHash, randomBytes } from \"node:crypto\";\nimport { existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { getAgentDir } from \"../../config.ts\";\nimport { FileAuthStorageBackend } from \"../../core/auth-storage.ts\";\n\nexport const ENV_KEY = \"SEARCH_KEY\";\n\nconst SESSION_PREFIX = \"devin-session-token$\";\nconst AUTHORIZE_URL = \"https://app.devin.ai/auth/cli/continue\";\nconst TOKEN_URL = \"https://api.devin.ai/auth/cli/token\";\nconst MAX_INPUT_CHARS = 16_384;\n\n/** `{ \"devin\": { \"token\": \"<as Devin issued it>\" } }`, beside auth.json and mcp-auth.json. */\nexport function credentialPath(): string {\n\treturn join(getAgentDir(), \"search-auth.json\");\n}\n\nconst PROVIDER = \"devin\";\n\n/** A Devin session JWT gains its prefix; anything else (an already prefixed key) passes through. */\nexport function toApiKey(token: string): string {\n\tconst value = token.trim();\n\treturn /^eyJ[\\w-]*\\.[\\w-]*\\.[\\w-]*$/.test(value) ? `${SESSION_PREFIX}${value}` : value;\n}\n\ntype StoredTokens = Record<string, { token?: unknown } | undefined>;\n\nfunction parseStored(current: string | undefined): StoredTokens {\n\ttry {\n\t\tconst data = JSON.parse(current ?? \"{}\") as unknown;\n\t\treturn data && typeof data === \"object\" && !Array.isArray(data) ? (data as StoredTokens) : {};\n\t} catch {\n\t\treturn {};\n\t}\n}\n\n/** Read-modify-write under the file lock that auth.json and mcp-auth.json also use. */\nfunction updateStored(change: (stored: StoredTokens) => void): void {\n\tnew FileAuthStorageBackend(credentialPath()).withLock((current) => {\n\t\tconst stored = parseStored(current);\n\t\tchange(stored);\n\t\treturn { result: undefined, next: `${JSON.stringify(stored, null, 2)}\\n` };\n\t});\n}\n\nfunction readSaved(): string | undefined {\n\t// Checked first so a session that never signs in does not create the file.\n\tif (!existsSync(credentialPath())) return undefined;\n\tconst token = new FileAuthStorageBackend(credentialPath()).withLock((current) => ({\n\t\tresult: parseStored(current)[PROVIDER]?.token,\n\t}));\n\treturn typeof token === \"string\" && token.trim() ? token.trim() : undefined;\n}\n\nexport type CredentialSource = \"saved\" | \"env\";\n\n/** Read on every call, so a sign-in elsewhere or an edited file applies without a restart. */\nexport function getCredential(): { apiKey: string; source: CredentialSource } | undefined {\n\tconst saved = readSaved();\n\tif (saved) return { apiKey: toApiKey(saved), source: \"saved\" };\n\tconst env = process.env[ENV_KEY]?.trim();\n\treturn env ? { apiKey: toApiKey(env), source: \"env\" } : undefined;\n}\n\n/** Saves the token exactly as Devin issued it; the request prefix is added at use. */\nexport function saveCredential(token: string): void {\n\tupdateStored((stored) => {\n\t\tstored[PROVIDER] = { token: token.trim() };\n\t});\n}\n\nexport function deleteCredential(): void {\n\tif (!existsSync(credentialPath())) return;\n\tupdateStored((stored) => {\n\t\tdelete stored[PROVIDER];\n\t});\n}\n\n/** Whether pasted text is a token rather than a one-time authorization code. */\nexport function looksLikeToken(value: string): boolean {\n\treturn value.startsWith(SESSION_PREFIX) || toApiKey(value) !== value;\n}\n\nexport interface SignInAttempt {\n\turl: string;\n\t/** Never leaves this process. */\n\tverifier: string;\n}\n\n/** PKCE S256 without a redirect: Devin shows the code in the browser and the user pastes it back. */\nexport function createSignIn(): SignInAttempt {\n\tconst verifier = randomBytes(64).toString(\"base64url\");\n\tconst url = new URL(AUTHORIZE_URL);\n\turl.search = new URLSearchParams({\n\t\tstate: randomBytes(32).toString(\"base64url\"),\n\t\tprompt: \"select_account\",\n\t\tcode_challenge: createHash(\"sha256\").update(verifier).digest(\"base64url\"),\n\t\tcode_challenge_method: \"S256\",\n\t}).toString();\n\treturn { url: url.toString(), verifier };\n}\n\nexport async function exchangeCode(\n\tattempt: SignInAttempt,\n\tinput: string,\n\tfetcher: typeof fetch = fetch,\n): Promise<string> {\n\tconst code = input.trim();\n\tif (!code || code.length > MAX_INPUT_CHARS || /\\s|[\\x00-\\x1f\\x7f]/.test(code)) {\n\t\tthrow new Error(\"That does not look like a Devin authorization code.\");\n\t}\n\tlet response: Response;\n\ttry {\n\t\tresponse = await fetcher(TOKEN_URL, {\n\t\t\tmethod: \"POST\",\n\t\t\theaders: { \"content-type\": \"application/json\", accept: \"application/json\" },\n\t\t\tbody: JSON.stringify({ code, code_verifier: attempt.verifier }),\n\t\t\tredirect: \"error\",\n\t\t\tsignal: AbortSignal.timeout(60_000),\n\t\t});\n\t} catch {\n\t\tthrow new Error(\"Could not reach Devin. Check your network and run /search again.\");\n\t}\n\tif (!response.ok) {\n\t\tthrow new Error(`Devin rejected the code (HTTP ${response.status}). Codes are one-time; run /search again.`);\n\t}\n\tconst token = ((await response.json().catch(() => undefined)) as { token?: unknown } | undefined)?.token;\n\tif (typeof token !== \"string\" || !token || token.length > MAX_INPUT_CHARS) {\n\t\tthrow new Error(\"Devin returned no usable session token.\");\n\t}\n\treturn token;\n}\n"]}

package/dist/extensions/search/devin.d.ts

@@ -0,0 +1,34 @@
+export declare class DevinError extends Error {
+    name: string;
+}
+/** The credential is missing, revoked, or malformed; only signing in again fixes it. */
+export declare class DevinAuthError extends DevinError {
+    name: string;
+}
+export interface ChatMessage {
+    role: "system" | "user" | "assistant" | "tool";
+    content: string;
+    /** On an assistant message: the tool call it made. */
+    call?: {
+        id: string;
+        name: string;
+        arguments: string;
+    };
+    /** On a tool message: the id of the call it answers. */
+    callId?: string;
+}
+export declare function encodeChatRequest(apiKey: string, messages: ChatMessage[], tools: string): Buffer;
+/**
+ * Connect streaming envelopes: a flags byte (bit 0 gzip, bit 1 end-of-stream) and a length. Data
+ * frames carry text chunks in field 2; the end frame is JSON that names an error, if any.
+ */
+export declare function decodeChatResponse(body: Buffer): string;
+export declare function chat(apiKey: string, messages: ChatMessage[], tools: string, signal?: AbortSignal): Promise<string>;
+export interface WebResult {
+    url: string;
+    title?: string;
+    /** Query-relevant excerpts of the page, joined by `...`; up to about 4,000 characters. */
+    summary?: string;
+}
+export declare function webSearch(apiKey: string, query: string, limit: number, signal?: AbortSignal): Promise<WebResult[]>;
+//# sourceMappingURL=devin.d.ts.map

package/dist/extensions/search/devin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"devin.d.ts","sourceRoot":"","sources":["../../../src/extensions/search/devin.ts"],"names":[],"mappings":"AAoBA,qBAAa,UAAW,SAAQ,KAAK;IAC3B,IAAI,SAAgB;CAC7B;AAED,wFAAwF;AACxF,qBAAa,cAAe,SAAQ,UAAU;IACpC,IAAI,SAAoB;CACjC;AAiFD,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,IAAI,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAID,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAkBhG;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAiBvD;AAED,wBAAsB,IAAI,CACzB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,WAAW,EAAE,EACvB,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,MAAM,CAAC,CAoBjB;AAID,MAAM,WAAW,SAAS;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0FAA0F;IAC1F,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,SAAS,CAC9B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,SAAS,EAAE,CAAC,CA0BtB"}