@bastani/atomic 0.9.14 → 0.9.15

package/dist/builtin/subagents/src/runs/inprocess/runtime-support/nested-sanitize.ts

@@ -1,252 +0,0 @@
-import type { NestedRunState, NestedRunSummary, NestedStepSummary } from "../../../shared/types.js";
-import {
-	clampNumber,
-	isSafeNestedId,
-	MAX_NESTED_CHILDREN,
-	MAX_NESTED_DEPTH,
-	MAX_NESTED_EVENT_BYTES,
-	MAX_NESTED_STEPS,
-	type NestedEventRecord,
-	type NestedRegistry,
-	type NestedRoute,
-	stringValue,
-} from "./nested-core.js";
-import { sanitizeNestedPath } from "./nested-paths.js";
-
-function sanitizeTokenUsage(value: unknown): NestedRunSummary["totalTokens"] | undefined {
-	if (!value || typeof value !== "object") return undefined;
-	const raw = value as Record<string, unknown>;
-	const input = clampNumber(raw.input);
-	const output = clampNumber(raw.output);
-	const total = clampNumber(raw.total);
-	return input !== undefined && output !== undefined && total !== undefined ? { input, output, total } : undefined;
-}
-
-function sanitizeState(value: unknown, fallback: NestedRunState): NestedRunState {
-	return value === "queued" || value === "running" || value === "complete" || value === "failed" || value === "paused"
-		? value
-		: fallback;
-}
-
-function sanitizeStep(input: unknown, depth: number): NestedStepSummary | undefined {
-	if (!input || typeof input !== "object") return undefined;
-	const raw = input as Record<string, unknown>;
-	const agent = stringValue(raw.agent, 128);
-	if (!agent) return undefined;
-	const status =
-		raw.status === "pending" ||
-		raw.status === "running" ||
-		raw.status === "complete" ||
-		raw.status === "completed" ||
-		raw.status === "failed" ||
-		raw.status === "paused"
-			? raw.status
-			: "pending";
-	return {
-		agent,
-		status: status === "completed" ? "complete" : status,
-		...(stringValue(raw.sessionFile, 2048) ? { sessionFile: stringValue(raw.sessionFile, 2048) } : {}),
-		...(raw.activityState === "active_long_running" || raw.activityState === "needs_attention"
-			? { activityState: raw.activityState }
-			: {}),
-		...(clampNumber(raw.lastActivityAt) !== undefined ? { lastActivityAt: clampNumber(raw.lastActivityAt) } : {}),
-		...(stringValue(raw.currentTool, 128) ? { currentTool: stringValue(raw.currentTool, 128) } : {}),
-		...(clampNumber(raw.currentToolStartedAt) !== undefined
-			? { currentToolStartedAt: clampNumber(raw.currentToolStartedAt) }
-			: {}),
-		...(stringValue(raw.currentPath, 2048) ? { currentPath: stringValue(raw.currentPath, 2048) } : {}),
-		...(clampNumber(raw.turnCount) !== undefined ? { turnCount: clampNumber(raw.turnCount) } : {}),
-		...(clampNumber(raw.toolCount) !== undefined ? { toolCount: clampNumber(raw.toolCount) } : {}),
-		...(clampNumber(raw.startedAt) !== undefined ? { startedAt: clampNumber(raw.startedAt) } : {}),
-		...(clampNumber(raw.endedAt) !== undefined ? { endedAt: clampNumber(raw.endedAt) } : {}),
-		...(stringValue(raw.error, 1024) ? { error: stringValue(raw.error, 1024) } : {}),
-		...(depth < MAX_NESTED_DEPTH && Array.isArray(raw.children)
-			? {
-					children: raw.children
-						.map((child) => sanitizeSummary(child, depth + 1))
-						.filter((child): child is NestedRunSummary => Boolean(child))
-						.slice(0, MAX_NESTED_CHILDREN),
-				}
-			: {}),
-	};
-}
-
-export function sanitizeSummary(input: unknown, depth = 0): NestedRunSummary | undefined {
-	if (!input || typeof input !== "object") return undefined;
-	const raw = input as Record<string, unknown>;
-	if (!isSafeNestedId(raw.id) || !isSafeNestedId(raw.parentRunId)) return undefined;
-	const pathParts = sanitizeNestedPath(raw.path);
-	const steps = Array.isArray(raw.steps)
-		? raw.steps
-				.map((step) => sanitizeStep(step, depth + 1))
-				.filter((step): step is NestedStepSummary => Boolean(step))
-				.slice(0, MAX_NESTED_STEPS)
-		: undefined;
-	const totalTokens = sanitizeTokenUsage(raw.totalTokens);
-	return {
-		id: raw.id,
-		parentRunId: raw.parentRunId,
-		...(clampNumber(raw.parentStepIndex) !== undefined ? { parentStepIndex: clampNumber(raw.parentStepIndex) } : {}),
-		...(stringValue(raw.parentAgent, 128) ? { parentAgent: stringValue(raw.parentAgent, 128) } : {}),
-		depth: Math.min(Math.max(0, clampNumber(raw.depth) ?? 0), MAX_NESTED_DEPTH),
-		path: pathParts,
-		state: sanitizeState(raw.state, "running"),
-		...(stringValue(raw.sessionId, 256) ? { sessionId: stringValue(raw.sessionId, 256) } : {}),
-		...(stringValue(raw.sessionFile, 2048) ? { sessionFile: stringValue(raw.sessionFile, 2048) } : {}),
-		...(stringValue(raw.intercomTarget, 256) ? { intercomTarget: stringValue(raw.intercomTarget, 256) } : {}),
-		...(stringValue(raw.ownerIntercomTarget, 256)
-			? { ownerIntercomTarget: stringValue(raw.ownerIntercomTarget, 256) }
-			: {}),
-		...(stringValue(raw.leafIntercomTarget, 256)
-			? { leafIntercomTarget: stringValue(raw.leafIntercomTarget, 256) }
-			: {}),
-		...(raw.ownerState === "live" || raw.ownerState === "gone" || raw.ownerState === "unknown"
-			? { ownerState: raw.ownerState }
-			: {}),
-		...(stringValue(raw.controlInbox, 2048) ? { controlInbox: stringValue(raw.controlInbox, 2048) } : {}),
-		...(stringValue(raw.capabilityToken, 128) ? { capabilityToken: stringValue(raw.capabilityToken, 128) } : {}),
-		...(raw.mode === "single" || raw.mode === "parallel" ? { mode: raw.mode } : {}),
-		...(stringValue(raw.agent, 128) ? { agent: stringValue(raw.agent, 128) } : {}),
-		...(Array.isArray(raw.agents)
-			? {
-					agents: raw.agents
-						.map((agent) => stringValue(agent, 128))
-						.filter((agent): agent is string => Boolean(agent))
-						.slice(0, MAX_NESTED_STEPS),
-				}
-			: {}),
-		...(raw.activityState === "active_long_running" || raw.activityState === "needs_attention"
-			? { activityState: raw.activityState }
-			: {}),
-		...(clampNumber(raw.lastActivityAt) !== undefined ? { lastActivityAt: clampNumber(raw.lastActivityAt) } : {}),
-		...(stringValue(raw.currentTool, 128) ? { currentTool: stringValue(raw.currentTool, 128) } : {}),
-		...(clampNumber(raw.currentToolStartedAt) !== undefined
-			? { currentToolStartedAt: clampNumber(raw.currentToolStartedAt) }
-			: {}),
-		...(stringValue(raw.currentPath, 2048) ? { currentPath: stringValue(raw.currentPath, 2048) } : {}),
-		...(clampNumber(raw.turnCount) !== undefined ? { turnCount: clampNumber(raw.turnCount) } : {}),
-		...(clampNumber(raw.toolCount) !== undefined ? { toolCount: clampNumber(raw.toolCount) } : {}),
-		...(totalTokens ? { totalTokens } : {}),
-		...(clampNumber(raw.startedAt) !== undefined ? { startedAt: clampNumber(raw.startedAt) } : {}),
-		...(clampNumber(raw.endedAt) !== undefined ? { endedAt: clampNumber(raw.endedAt) } : {}),
-		...(clampNumber(raw.lastUpdate) !== undefined ? { lastUpdate: clampNumber(raw.lastUpdate) } : {}),
-		...(stringValue(raw.error, 1024) ? { error: stringValue(raw.error, 1024) } : {}),
-		...(steps && steps.length > 0 ? { steps } : {}),
-		...(depth < MAX_NESTED_DEPTH && Array.isArray(raw.children)
-			? {
-					children: raw.children
-						.map((child) => sanitizeSummary(child, depth + 1))
-						.filter((child): child is NestedRunSummary => Boolean(child))
-						.slice(0, MAX_NESTED_CHILDREN),
-				}
-			: {}),
-	};
-}
-
-export function parseRecord(content: string, route: NestedRoute): NestedEventRecord | undefined {
-	if (Buffer.byteLength(content, "utf-8") > MAX_NESTED_EVENT_BYTES) return undefined;
-	let parsed: unknown;
-	try {
-		parsed = JSON.parse(content);
-	} catch {
-		return undefined;
-	}
-	if (!parsed || typeof parsed !== "object") return undefined;
-	const raw = parsed as Record<string, unknown>;
-	if (
-		raw.type !== "subagent.nested.started" &&
-		raw.type !== "subagent.nested.updated" &&
-		raw.type !== "subagent.nested.completed"
-	)
-		return undefined;
-	if (raw.rootRunId !== route.rootRunId || raw.capabilityToken !== route.capabilityToken) return undefined;
-	if (!isSafeNestedId(raw.parentRunId)) return undefined;
-	const ts = clampNumber(raw.ts);
-	if (ts === undefined) return undefined;
-	const child = sanitizeSummary(raw.child);
-	if (!child || child.id === route.rootRunId) return undefined;
-	const routedChild: NestedRunSummary = {
-		...child,
-		controlInbox: route.controlInbox,
-		capabilityToken: route.capabilityToken,
-		ownerState: child.ownerState ?? "unknown",
-	};
-	return {
-		type: raw.type,
-		ts,
-		rootRunId: route.rootRunId,
-		parentRunId: raw.parentRunId,
-		...(clampNumber(raw.parentStepIndex) !== undefined ? { parentStepIndex: clampNumber(raw.parentStepIndex) } : {}),
-		capabilityToken: route.capabilityToken,
-		child: routedChild,
-	};
-}
-
-export function parseNestedEventRecords(content: string, route: NestedRoute): NestedEventRecord[] {
-	if (!content.includes("\n")) {
-		const record = parseRecord(content.trim(), route);
-		return record ? [record] : [];
-	}
-	return content
-		.split("\n")
-		.slice(0, content.endsWith("\n") ? undefined : -1)
-		.map((line) => (line.trim() ? parseRecord(line, route) : undefined))
-		.filter((event): event is NestedEventRecord => Boolean(event));
-}
-
-export function terminal(state: NestedRunState): boolean {
-	return state === "complete" || state === "failed" || state === "paused";
-}
-
-function mergeSummary(existing: NestedRunSummary | undefined, event: NestedEventRecord): NestedRunSummary {
-	const incomingState =
-		event.type === "subagent.nested.completed" && event.child.state === "running" ? "complete" : event.child.state;
-	const incoming = { ...event.child, state: incomingState, lastUpdate: event.child.lastUpdate ?? event.ts };
-	if (!existing) return incoming;
-	const existingUpdate = existing.lastUpdate ?? 0;
-	const incomingUpdate = incoming.lastUpdate ?? event.ts;
-	if (incomingUpdate < existingUpdate) return existing;
-	if (terminal(existing.state) && !terminal(incoming.state)) return existing;
-	if (terminal(existing.state) && terminal(incoming.state) && incomingUpdate === existingUpdate) return existing;
-	return { ...existing, ...incoming, state: incoming.state, lastUpdate: Math.max(existingUpdate, incomingUpdate) };
-}
-
-function attachChild(children: NestedRunSummary[], event: NestedEventRecord): NestedRunSummary[] {
-	let updated = false;
-	const walk = (items: NestedRunSummary[]): NestedRunSummary[] =>
-		items.map((item) => {
-			if (item.id === event.parentRunId) {
-				const existingChildren = item.children ?? [];
-				const childIndex = existingChildren.findIndex((child) => child.id === event.child.id);
-				const nextChild = mergeSummary(childIndex >= 0 ? existingChildren[childIndex] : undefined, event);
-				const nextChildren =
-					childIndex >= 0
-						? existingChildren.map((child, index) => (index === childIndex ? nextChild : child))
-						: [...existingChildren, nextChild];
-				updated = true;
-				return {
-					...item,
-					children: nextChildren.slice(0, MAX_NESTED_CHILDREN),
-					lastUpdate: Math.max(item.lastUpdate ?? 0, event.ts),
-				};
-			}
-			if (!item.children?.length) return item;
-			const nextChildren = walk(item.children);
-			return nextChildren === item.children ? item : { ...item, children: nextChildren };
-		});
-	const next = walk(children);
-	if (updated) return next;
-	const childIndex = next.findIndex((child) => child.id === event.child.id);
-	const nextChild = mergeSummary(childIndex >= 0 ? next[childIndex] : undefined, event);
-	return childIndex >= 0
-		? next.map((child, index) => (index === childIndex ? nextChild : child))
-		: [...next, nextChild].slice(0, MAX_NESTED_CHILDREN);
-}
-
-export function applyNestedEvent(registry: NestedRegistry, event: NestedEventRecord): NestedRegistry {
-	return {
-		...registry,
-		updatedAt: Math.max(registry.updatedAt, event.ts),
-		children: attachChild(registry.children, event),
-	};
-}

package/dist/builtin/subagents/src/shared/types-nested.ts

@@ -1,127 +0,0 @@
-/**
- * Nested foreground run and extension state public types.
- */
-
-import type { ExtensionContext } from "@bastani/atomic";
-import type {
-	ActivityState,
-	SingleResult,
-	SubagentResultStatus,
-	SubagentRunMode,
-	TokenUsage,
-} from "./types-results.js";
-
-export type NestedRunState = "queued" | "running" | "complete" | "failed" | "paused";
-export type NestedOwnerState = "live" | "gone" | "unknown";
-
-export interface NestedRunAddress {
-	id: string;
-	parentRunId: string;
-	parentStepIndex?: number;
-	parentAgent?: string;
-	depth: number;
-	path: Array<{ runId: string; stepIndex?: number; agent?: string }>;
-}
-
-export interface NestedStepSummary {
-	agent: string;
-	status: "pending" | "running" | "complete" | "completed" | "failed" | "paused";
-	sessionFile?: string;
-	activityState?: ActivityState;
-	lastActivityAt?: number;
-	currentTool?: string;
-	currentToolStartedAt?: number;
-	currentPath?: string;
-	turnCount?: number;
-	toolCount?: number;
-	startedAt?: number;
-	endedAt?: number;
-	error?: string;
-	children?: NestedRunSummary[];
-}
-
-export interface NestedRunSummary extends NestedRunAddress {
-	sessionId?: string;
-	sessionFile?: string;
-	intercomTarget?: string;
-	ownerIntercomTarget?: string;
-	leafIntercomTarget?: string;
-	ownerState?: NestedOwnerState;
-	controlInbox?: string;
-	capabilityToken?: string;
-	mode?: SubagentRunMode;
-	state: NestedRunState;
-	agent?: string;
-	agents?: string[];
-	steps?: NestedStepSummary[];
-	children?: NestedRunSummary[];
-	activityState?: ActivityState;
-	lastActivityAt?: number;
-	currentTool?: string;
-	currentToolStartedAt?: number;
-	currentPath?: string;
-	turnCount?: number;
-	toolCount?: number;
-	totalTokens?: TokenUsage;
-	startedAt?: number;
-	endedAt?: number;
-	lastUpdate?: number;
-	error?: string;
-}
-
-export interface NestedRouteInfo {
-	rootRunId: string;
-	eventSink: string;
-	controlInbox: string;
-	capabilityToken: string;
-}
-
-export interface ForegroundResumeChild {
-	agent: string;
-	index: number;
-	sessionFile?: string;
-	status: SubagentResultStatus;
-	result?: SingleResult;
-	/** Effective delegation limit retained for a resumed child. */
-	maxSubagentDepth?: number;
-}
-
-export interface ForegroundResumeRun {
-	runId: string;
-	mode: SubagentRunMode;
-	cwd: string;
-	updatedAt: number;
-	children: ForegroundResumeChild[];
-}
-
-export interface SubagentState {
-	baseCwd: string;
-	currentSessionId: string | null;
-	subagentInProgress?: boolean;
-	foregroundRuns?: Map<string, ForegroundResumeRun>;
-	foregroundControls: Map<
-		string,
-		{
-			runId: string;
-			mode: SubagentRunMode;
-			startedAt: number;
-			updatedAt: number;
-			currentAgent?: string;
-			currentIndex?: number;
-			currentActivityState?: ActivityState;
-			lastActivityAt?: number;
-			currentTool?: string;
-			currentToolStartedAt?: number;
-			currentPath?: string;
-			turnCount?: number;
-			tokens?: number;
-			toolCount?: number;
-			nestedRoute?: NestedRouteInfo;
-			nestedChildren?: NestedRunSummary[];
-			interrupt?: () => boolean;
-		}
-	>;
-	lastForegroundControlId: string | null;
-	pendingForegroundControlNotices?: Map<string, ReturnType<typeof setTimeout>>;
-	lastUiContext: ExtensionContext | null;
-}

package/dist/core/copilot-env-routing.d.ts

@@ -1,36 +0,0 @@
-import type { Provider } from "@earendil-works/pi-ai";
-/**
- * GitHub Copilot host routing for `COPILOT_GITHUB_TOKEN` (PAT) auth.
- *
- * Upstream pi pins `github-copilot` to `https://api.individual.githubcopilot.com`
- * and only derives a per-tenant host inside the OAuth loader, which returns an
- * `auth.baseUrl` from the token's `proxy-ep` segment. `envApiKeyAuth` resolves
- * `COPILOT_GITHUB_TOKEN` without a base URL, so business/enterprise tokens are
- * sent to the individual CAPI host and GitHub answers `421 Misdirected Request`.
- *
- * This module restores the routing precedence for the env-token path only; the
- * OAuth path stays exactly upstream. A `models.json` provider `baseUrl` still
- * wins, because it is applied as a later overlay in `applyModelsJson`.
- */
-export type CopilotRoutingEnv = Readonly<Record<string, string | undefined>>;
-/**
- * Resolve the Copilot API base URL for env-token auth, highest precedence first:
- *
- * 1. `COPILOT_API_TARGET` / `GITHUB_COPILOT_BASE_URL` explicit override
- * 2. the `proxy-ep` segment embedded in `COPILOT_GITHUB_TOKEN`
- * 3. an explicit `enterpriseDomain`
- * 4. `GITHUB_SERVER_URL` (`*.ghe.com` tenant host, else the enterprise host)
- * 5. the public Copilot routing hub when `COPILOT_GITHUB_TOKEN` is set
- *
- * Returns `undefined` when nothing applies, leaving pi's individual-host default.
- */
-export declare function resolveCopilotEnvBaseUrl(env: CopilotRoutingEnv, enterpriseDomain?: string): string | undefined;
-/**
- * Rewrite the builtin Copilot provider's host when `COPILOT_GITHUB_TOKEN` is set.
- *
- * Applied to the builtin layer so a `models.json` `baseUrl` override, which is
- * composed afterwards, still takes precedence. Providers without the env token
- * are returned untouched so OAuth logins keep pi's exact behavior.
- */
-export declare function withCopilotEnvBaseUrl(provider: Provider, env: CopilotRoutingEnv): Provider;
-//# sourceMappingURL=copilot-env-routing.d.ts.map

package/dist/core/copilot-env-routing.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"copilot-env-routing.d.ts","sourceRoot":"","sources":["../../src/core/copilot-env-routing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAc,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAElE;;;;;;;;;;;;GAYG;AAEH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;AAyC7E;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAoB9G;AAMD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,iBAAiB,GAAG,QAAQ,CAU1F"}

package/dist/core/copilot-env-routing.js

@@ -1,94 +0,0 @@
-const COPILOT_PROVIDER_ID = "github-copilot";
-/** Public routing hub: resolves the caller's plan-specific CAPI host server-side. */
-const PUBLIC_COPILOT_HUB = "https://api.githubcopilot.com";
-const ENTERPRISE_COPILOT_HOST = "https://api.enterprise.githubcopilot.com";
-function normalizeBaseUrl(value) {
-    const trimmed = value.trim().replace(/\/+$/u, "");
-    if (!trimmed)
-        return "";
-    return /^https?:\/\//u.test(trimmed) ? trimmed : `https://${trimmed}`;
-}
-/** `tid=...;exp=...;proxy-ep=proxy.business.githubcopilot.com;...` -> API host. */
-function baseUrlFromToken(token) {
-    const match = token.match(/proxy-ep=([^;]+)/u);
-    if (!match?.[1])
-        return undefined;
-    const host = match[1].trim().replace(/^proxy\./u, "api.");
-    return host ? normalizeBaseUrl(host) : undefined;
-}
-function hostFromServerUrl(serverUrl) {
-    try {
-        return new URL(normalizeBaseUrl(serverUrl)).hostname.toLowerCase() || undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-function baseUrlFromServerHost(host) {
-    if (host === "github.com" || host.endsWith(".github.com"))
-        return undefined;
-    // Tenant-scoped GHE.com: octocorp.ghe.com -> copilot-api.octocorp.ghe.com
-    if (host.endsWith(".ghe.com")) {
-        const tenant = host.slice(0, -".ghe.com".length).split(".").pop();
-        return tenant ? `https://copilot-api.${tenant}.ghe.com` : ENTERPRISE_COPILOT_HOST;
-    }
-    // GitHub Enterprise Server on a self-hosted domain routes through the
-    // enterprise CAPI host rather than a per-appliance Copilot endpoint.
-    return ENTERPRISE_COPILOT_HOST;
-}
-/**
- * Resolve the Copilot API base URL for env-token auth, highest precedence first:
- *
- * 1. `COPILOT_API_TARGET` / `GITHUB_COPILOT_BASE_URL` explicit override
- * 2. the `proxy-ep` segment embedded in `COPILOT_GITHUB_TOKEN`
- * 3. an explicit `enterpriseDomain`
- * 4. `GITHUB_SERVER_URL` (`*.ghe.com` tenant host, else the enterprise host)
- * 5. the public Copilot routing hub when `COPILOT_GITHUB_TOKEN` is set
- *
- * Returns `undefined` when nothing applies, leaving pi's individual-host default.
- */
-export function resolveCopilotEnvBaseUrl(env, enterpriseDomain) {
-    const override = env.COPILOT_API_TARGET?.trim() || env.GITHUB_COPILOT_BASE_URL?.trim();
-    if (override)
-        return normalizeBaseUrl(override);
-    const token = env.COPILOT_GITHUB_TOKEN?.trim();
-    if (token) {
-        const fromToken = baseUrlFromToken(token);
-        if (fromToken)
-            return fromToken;
-    }
-    if (enterpriseDomain?.trim())
-        return `https://copilot-api.${enterpriseDomain.trim()}`;
-    const serverUrl = env.GITHUB_SERVER_URL?.trim();
-    if (serverUrl) {
-        const host = hostFromServerUrl(serverUrl);
-        const fromServer = host ? baseUrlFromServerHost(host) : undefined;
-        if (fromServer)
-            return fromServer;
-    }
-    return token ? PUBLIC_COPILOT_HUB : undefined;
-}
-function withModelBaseUrl(models, baseUrl) {
-    return models.map((model) => ({ ...model, baseUrl }));
-}
-/**
- * Rewrite the builtin Copilot provider's host when `COPILOT_GITHUB_TOKEN` is set.
- *
- * Applied to the builtin layer so a `models.json` `baseUrl` override, which is
- * composed afterwards, still takes precedence. Providers without the env token
- * are returned untouched so OAuth logins keep pi's exact behavior.
- */
-export function withCopilotEnvBaseUrl(provider, env) {
-    if (provider.id !== COPILOT_PROVIDER_ID || !env.COPILOT_GITHUB_TOKEN?.trim())
-        return provider;
-    const baseUrl = resolveCopilotEnvBaseUrl(env);
-    if (!baseUrl || baseUrl === provider.baseUrl)
-        return provider;
-    return {
-        ...provider,
-        baseUrl,
-        // Wrap the getter so dynamically refreshed models are routed too.
-        getModels: () => withModelBaseUrl(provider.getModels(), baseUrl),
-    };
-}
-//# sourceMappingURL=copilot-env-routing.js.map

package/dist/core/copilot-env-routing.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"copilot-env-routing.js","sourceRoot":"","sources":["../../src/core/copilot-env-routing.ts"],"names":[],"mappings":"AAkBA,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAC7C,qFAAqF;AACrF,MAAM,kBAAkB,GAAG,+BAA+B,CAAC;AAC3D,MAAM,uBAAuB,GAAG,0CAA0C,CAAC;AAE3E,SAAS,gBAAgB,CAAC,KAAa;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,OAAO,EAAE,CAAC;AACvE,CAAC;AAED,mFAAmF;AACnF,SAAS,gBAAgB,CAAC,KAAa;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB;IAC3C,IAAI,CAAC;QACJ,OAAO,IAAI,GAAG,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IAC1C,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5E,0EAA0E;IAC1E,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QAClE,OAAO,MAAM,CAAC,CAAC,CAAC,uBAAuB,MAAM,UAAU,CAAC,CAAC,CAAC,uBAAuB,CAAC;IACnF,CAAC;IACD,sEAAsE;IACtE,qEAAqE;IACrE,OAAO,uBAAuB,CAAC;AAChC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAsB,EAAE,gBAAyB;IACzF,MAAM,QAAQ,GAAG,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE,CAAC;IACvF,IAAI,QAAQ;QAAE,OAAO,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAEhD,MAAM,KAAK,GAAG,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,KAAK,EAAE,CAAC;QACX,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;IACjC,CAAC;IAED,IAAI,gBAAgB,EAAE,IAAI,EAAE;QAAE,OAAO,uBAAuB,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC;IAEtF,MAAM,SAAS,GAAG,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;IAChD,IAAI,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;IACnC,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED,SAAS,gBAAgB,CAAmB,MAA8B,EAAE,OAAe;IAC1F,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAkB,EAAE,GAAsB;IAC/E,IAAI,QAAQ,CAAC,EAAE,KAAK,mBAAmB,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC9F,MAAM,OAAO,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,QAAQ,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC;IAC9D,OAAO;QACN,GAAG,QAAQ;QACX,OAAO;QACP,kEAAkE;QAClE,SAAS,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC;KAChE,CAAC;AACH,CAAC","sourcesContent":["import type { Api, Model, Provider } from \"@earendil-works/pi-ai\";\n\n/**\n * GitHub Copilot host routing for `COPILOT_GITHUB_TOKEN` (PAT) auth.\n *\n * Upstream pi pins `github-copilot` to `https://api.individual.githubcopilot.com`\n * and only derives a per-tenant host inside the OAuth loader, which returns an\n * `auth.baseUrl` from the token's `proxy-ep` segment. `envApiKeyAuth` resolves\n * `COPILOT_GITHUB_TOKEN` without a base URL, so business/enterprise tokens are\n * sent to the individual CAPI host and GitHub answers `421 Misdirected Request`.\n *\n * This module restores the routing precedence for the env-token path only; the\n * OAuth path stays exactly upstream. A `models.json` provider `baseUrl` still\n * wins, because it is applied as a later overlay in `applyModelsJson`.\n */\n\nexport type CopilotRoutingEnv = Readonly<Record<string, string | undefined>>;\n\nconst COPILOT_PROVIDER_ID = \"github-copilot\";\n/** Public routing hub: resolves the caller's plan-specific CAPI host server-side. */\nconst PUBLIC_COPILOT_HUB = \"https://api.githubcopilot.com\";\nconst ENTERPRISE_COPILOT_HOST = \"https://api.enterprise.githubcopilot.com\";\n\nfunction normalizeBaseUrl(value: string): string {\n\tconst trimmed = value.trim().replace(/\\/+$/u, \"\");\n\tif (!trimmed) return \"\";\n\treturn /^https?:\\/\\//u.test(trimmed) ? trimmed : `https://${trimmed}`;\n}\n\n/** `tid=...;exp=...;proxy-ep=proxy.business.githubcopilot.com;...` -> API host. */\nfunction baseUrlFromToken(token: string): string | undefined {\n\tconst match = token.match(/proxy-ep=([^;]+)/u);\n\tif (!match?.[1]) return undefined;\n\tconst host = match[1].trim().replace(/^proxy\\./u, \"api.\");\n\treturn host ? normalizeBaseUrl(host) : undefined;\n}\n\nfunction hostFromServerUrl(serverUrl: string): string | undefined {\n\ttry {\n\t\treturn new URL(normalizeBaseUrl(serverUrl)).hostname.toLowerCase() || undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nfunction baseUrlFromServerHost(host: string): string | undefined {\n\tif (host === \"github.com\" || host.endsWith(\".github.com\")) return undefined;\n\t// Tenant-scoped GHE.com: octocorp.ghe.com -> copilot-api.octocorp.ghe.com\n\tif (host.endsWith(\".ghe.com\")) {\n\t\tconst tenant = host.slice(0, -\".ghe.com\".length).split(\".\").pop();\n\t\treturn tenant ? `https://copilot-api.${tenant}.ghe.com` : ENTERPRISE_COPILOT_HOST;\n\t}\n\t// GitHub Enterprise Server on a self-hosted domain routes through the\n\t// enterprise CAPI host rather than a per-appliance Copilot endpoint.\n\treturn ENTERPRISE_COPILOT_HOST;\n}\n\n/**\n * Resolve the Copilot API base URL for env-token auth, highest precedence first:\n *\n * 1. `COPILOT_API_TARGET` / `GITHUB_COPILOT_BASE_URL` explicit override\n * 2. the `proxy-ep` segment embedded in `COPILOT_GITHUB_TOKEN`\n * 3. an explicit `enterpriseDomain`\n * 4. `GITHUB_SERVER_URL` (`*.ghe.com` tenant host, else the enterprise host)\n * 5. the public Copilot routing hub when `COPILOT_GITHUB_TOKEN` is set\n *\n * Returns `undefined` when nothing applies, leaving pi's individual-host default.\n */\nexport function resolveCopilotEnvBaseUrl(env: CopilotRoutingEnv, enterpriseDomain?: string): string | undefined {\n\tconst override = env.COPILOT_API_TARGET?.trim() || env.GITHUB_COPILOT_BASE_URL?.trim();\n\tif (override) return normalizeBaseUrl(override);\n\n\tconst token = env.COPILOT_GITHUB_TOKEN?.trim();\n\tif (token) {\n\t\tconst fromToken = baseUrlFromToken(token);\n\t\tif (fromToken) return fromToken;\n\t}\n\n\tif (enterpriseDomain?.trim()) return `https://copilot-api.${enterpriseDomain.trim()}`;\n\n\tconst serverUrl = env.GITHUB_SERVER_URL?.trim();\n\tif (serverUrl) {\n\t\tconst host = hostFromServerUrl(serverUrl);\n\t\tconst fromServer = host ? baseUrlFromServerHost(host) : undefined;\n\t\tif (fromServer) return fromServer;\n\t}\n\n\treturn token ? PUBLIC_COPILOT_HUB : undefined;\n}\n\nfunction withModelBaseUrl<TApi extends Api>(models: readonly Model<TApi>[], baseUrl: string): Model<TApi>[] {\n\treturn models.map((model) => ({ ...model, baseUrl }));\n}\n\n/**\n * Rewrite the builtin Copilot provider's host when `COPILOT_GITHUB_TOKEN` is set.\n *\n * Applied to the builtin layer so a `models.json` `baseUrl` override, which is\n * composed afterwards, still takes precedence. Providers without the env token\n * are returned untouched so OAuth logins keep pi's exact behavior.\n */\nexport function withCopilotEnvBaseUrl(provider: Provider, env: CopilotRoutingEnv): Provider {\n\tif (provider.id !== COPILOT_PROVIDER_ID || !env.COPILOT_GITHUB_TOKEN?.trim()) return provider;\n\tconst baseUrl = resolveCopilotEnvBaseUrl(env);\n\tif (!baseUrl || baseUrl === provider.baseUrl) return provider;\n\treturn {\n\t\t...provider,\n\t\tbaseUrl,\n\t\t// Wrap the getter so dynamically refreshed models are routed too.\n\t\tgetModels: () => withModelBaseUrl(provider.getModels(), baseUrl),\n\t};\n}\n"]}