@geminixiang/mama 0.2.0-beta.1 → 0.2.0-beta.10

package/dist/sandbox/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EAIlB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EAIpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,YAAY,EAIb,MAAM,WAAW,CAAC;AAGnB,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE1E,YAAY,EACV,sBAAsB,EACtB,WAAW,EACX,UAAU,EACV,QAAQ,EACR,wBAAwB,EACxB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,YAAY,EAAE,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAE7F,QAAA,MAAM,eAAe,wPAKX,CAAC;AAKX,wBAAgB,kBAAkB,IAAI,SAAS,CAAC,GAAG,OAAO,eAAe,CAAC,CAEzE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CAiB5D;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAO1E;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,aAAa,EACrB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAChC,QAAQ,CAMV","sourcesContent":["import {\n  ContainerExecutor,\n  containerSandboxAdapter,\n  parseContainerSandboxArg,\n  validateContainerSandbox,\n} from \"./container.js\";\nimport {\n  FirecrackerExecutor,\n  firecrackerSandboxAdapter,\n  parseFirecrackerSandboxArg,\n  validateFirecrackerSandbox,\n} from \"./firecracker.js\";\nimport {\n  HostExecutor,\n  hostSandboxAdapter,\n  parseHostSandboxArg,\n  validateHostSandbox,\n} from \"./host.js\";\nimport { imageSandboxAdapter, parseImageSandboxArg, validateImageSandbox } from \"./image.js\";\nimport { SandboxError } from \"./errors.js\";\nimport type { Executor, SandboxAdapter, SandboxConfig } from \"./types.js\";\n\nexport type {\n  ContainerSandboxConfig,\n  ExecOptions,\n  ExecResult,\n  Executor,\n  FirecrackerSandboxConfig,\n  HostSandboxConfig,\n  ImageSandboxConfig,\n  SandboxAdapter,\n  SandboxConfig,\n} from \"./types.js\";\nexport { ContainerExecutor, FirecrackerExecutor, HostExecutor };\nexport { SandboxError } from \"./errors.js\";\nexport {\n  buildContainerExecCommand,\n  containerSandboxAdapter,\n  parseContainerSandboxArg,\n  validateContainerSandbox,\n} from \"./container.js\";\nexport {\n  firecrackerSandboxAdapter,\n  parseFirecrackerSandboxArg,\n  validateFirecrackerSandbox,\n} from \"./firecracker.js\";\nexport { hostSandboxAdapter, parseHostSandboxArg, validateHostSandbox } from \"./host.js\";\nexport { imageSandboxAdapter, parseImageSandboxArg, validateImageSandbox } from \"./image.js\";\n\nconst sandboxAdapters = [\n  hostSandboxAdapter,\n  containerSandboxAdapter,\n  imageSandboxAdapter,\n  firecrackerSandboxAdapter,\n] as const;\nconst sandboxAdapterByType = new Map(\n  sandboxAdapters.map((adapter) => [adapter.type, adapter]),\n) as Map<SandboxConfig[\"type\"], SandboxAdapter>;\n\nexport function getSandboxAdapters(): readonly [...typeof sandboxAdapters] {\n  return sandboxAdapters;\n}\n\nexport function parseSandboxArg(value: string): SandboxConfig {\n  for (const adapter of sandboxAdapters) {\n    const config = adapter.parse(value);\n    if (config) {\n      return config;\n    }\n  }\n\n  if (value.startsWith(\"docker:\")) {\n    throw new SandboxError(\n      `Error: '${value}' is not supported. Use 'container:<container-name>' for the shared-container mode or 'image:<image-name>' for mama-managed per-user containers.`,\n    );\n  }\n\n  throw new SandboxError(\n    `Error: Invalid sandbox type '${value}'. Use 'host', 'container:<container-name>', 'image:<image-name>', or 'firecracker:<vm-id>:<host-path>'`,\n  );\n}\n\nexport async function validateSandbox(config: SandboxConfig): Promise<void> {\n  const adapter = sandboxAdapterByType.get(config.type);\n  if (!adapter) {\n    throw new SandboxError(`Error: Unsupported sandbox type '${config.type}'`);\n  }\n\n  await adapter.validate(config);\n}\n\n/**\n * Create an executor that runs commands on host, in a Docker container, or in a Firecracker VM.\n */\nexport function createExecutor(\n  config: SandboxConfig,\n  env?: Record<string, string>,\n  ensureReady?: () => Promise<void>,\n): Executor {\n  const adapter = sandboxAdapterByType.get(config.type);\n  if (!adapter) {\n    throw new SandboxError(`Error: Unsupported sandbox type '${config.type}'`);\n  }\n  return adapter.createExecutor(config, env, ensureReady);\n}\n"]}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAA2B,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAA6B,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,yBAAyB,EAA4B,MAAM,iBAAiB,CAAC;AACtF,OAAO,EAAE,YAAY,EAAsB,MAAM,WAAW,CAAC;AAG7D,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE1E,YAAY,EACV,sBAAsB,EACtB,uBAAuB,EACvB,WAAW,EACX,UAAU,EACV,QAAQ,EACR,wBAAwB,EACxB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,YAAY,EAAE,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAE7F,QAAA,MAAM,eAAe,sTAMX,CAAC;AAKX,wBAAgB,kBAAkB,IAAI,SAAS,CAAC,GAAG,OAAO,eAAe,CAAC,CAEzE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CAiB5D;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAO1E;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,aAAa,EACrB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAChC,QAAQ,CAMV","sourcesContent":["import { ContainerExecutor, containerSandboxAdapter } from \"./container.js\";\nimport { FirecrackerExecutor, firecrackerSandboxAdapter } from \"./firecracker.js\";\nimport { CloudflareSandboxExecutor, cloudflareSandboxAdapter } from \"./cloudflare.js\";\nimport { HostExecutor, hostSandboxAdapter } from \"./host.js\";\nimport { imageSandboxAdapter } from \"./image.js\";\nimport { SandboxError } from \"./errors.js\";\nimport type { Executor, SandboxAdapter, SandboxConfig } from \"./types.js\";\n\nexport type {\n  ContainerSandboxConfig,\n  CloudflareSandboxConfig,\n  ExecOptions,\n  ExecResult,\n  Executor,\n  FirecrackerSandboxConfig,\n  HostSandboxConfig,\n  ImageSandboxConfig,\n  RuntimePathContext,\n  SandboxAdapter,\n  SandboxConfig,\n} from \"./types.js\";\nexport { CloudflareSandboxExecutor, ContainerExecutor, FirecrackerExecutor, HostExecutor };\nexport { SandboxError } from \"./errors.js\";\nexport {\n  buildContainerExecCommand,\n  containerSandboxAdapter,\n  parseContainerSandboxArg,\n  validateContainerSandbox,\n} from \"./container.js\";\nexport {\n  firecrackerSandboxAdapter,\n  parseFirecrackerSandboxArg,\n  validateFirecrackerSandbox,\n} from \"./firecracker.js\";\nexport {\n  cloudflareSandboxAdapter,\n  parseCloudflareSandboxArg,\n  validateCloudflareSandbox,\n} from \"./cloudflare.js\";\nexport { hostSandboxAdapter, parseHostSandboxArg, validateHostSandbox } from \"./host.js\";\nexport { imageSandboxAdapter, parseImageSandboxArg, validateImageSandbox } from \"./image.js\";\n\nconst sandboxAdapters = [\n  hostSandboxAdapter,\n  containerSandboxAdapter,\n  imageSandboxAdapter,\n  firecrackerSandboxAdapter,\n  cloudflareSandboxAdapter,\n] as const;\nconst sandboxAdapterByType = new Map(\n  sandboxAdapters.map((adapter) => [adapter.type, adapter]),\n) as Map<SandboxConfig[\"type\"], SandboxAdapter>;\n\nexport function getSandboxAdapters(): readonly [...typeof sandboxAdapters] {\n  return sandboxAdapters;\n}\n\nexport function parseSandboxArg(value: string): SandboxConfig {\n  for (const adapter of sandboxAdapters) {\n    const config = adapter.parse(value);\n    if (config) {\n      return config;\n    }\n  }\n\n  if (value.startsWith(\"docker:\")) {\n    throw new SandboxError(\n      `Error: '${value}' is not supported. Use 'container:<container-name>' for the shared-container mode or 'image:<image-name>' for mama-managed per-user containers.`,\n    );\n  }\n\n  throw new SandboxError(\n    `Error: Invalid sandbox type '${value}'. Use 'host', 'container:<container-name>', 'image:<image-name>', 'firecracker:<vm-id>:<host-path>', or 'cloudflare:<sandbox-id>'`,\n  );\n}\n\nexport async function validateSandbox(config: SandboxConfig): Promise<void> {\n  const adapter = sandboxAdapterByType.get(config.type);\n  if (!adapter) {\n    throw new SandboxError(`Error: Unsupported sandbox type '${config.type}'`);\n  }\n\n  await adapter.validate(config);\n}\n\n/**\n * Create an executor that runs commands on host, in Docker, in a Firecracker VM, or through a Cloudflare sandbox bridge.\n */\nexport function createExecutor(\n  config: SandboxConfig,\n  env?: Record<string, string>,\n  ensureReady?: () => Promise<void>,\n): Executor {\n  const adapter = sandboxAdapterByType.get(config.type);\n  if (!adapter) {\n    throw new SandboxError(`Error: Unsupported sandbox type '${config.type}'`);\n  }\n  return adapter.createExecutor(config, env, ensureReady);\n}\n"]}

package/dist/sandbox/index.js

@@ -1,12 +1,14 @@
-import { ContainerExecutor, containerSandboxAdapter, } from "./container.js";
-import { FirecrackerExecutor, firecrackerSandboxAdapter, } from "./firecracker.js";
-import { HostExecutor, hostSandboxAdapter, } from "./host.js";
+import { ContainerExecutor, containerSandboxAdapter } from "./container.js";
+import { FirecrackerExecutor, firecrackerSandboxAdapter } from "./firecracker.js";
+import { CloudflareSandboxExecutor, cloudflareSandboxAdapter } from "./cloudflare.js";
+import { HostExecutor, hostSandboxAdapter } from "./host.js";
 import { imageSandboxAdapter } from "./image.js";
 import { SandboxError } from "./errors.js";
-export { ContainerExecutor, FirecrackerExecutor, HostExecutor };
+export { CloudflareSandboxExecutor, ContainerExecutor, FirecrackerExecutor, HostExecutor };
 export { SandboxError } from "./errors.js";
 export { buildContainerExecCommand, containerSandboxAdapter, parseContainerSandboxArg, validateContainerSandbox, } from "./container.js";
 export { firecrackerSandboxAdapter, parseFirecrackerSandboxArg, validateFirecrackerSandbox, } from "./firecracker.js";
+export { cloudflareSandboxAdapter, parseCloudflareSandboxArg, validateCloudflareSandbox, } from "./cloudflare.js";
 export { hostSandboxAdapter, parseHostSandboxArg, validateHostSandbox } from "./host.js";
 export { imageSandboxAdapter, parseImageSandboxArg, validateImageSandbox } from "./image.js";
 const sandboxAdapters = [
@@ -14,6 +16,7 @@ const sandboxAdapters = [
     containerSandboxAdapter,
     imageSandboxAdapter,
     firecrackerSandboxAdapter,
+    cloudflareSandboxAdapter,
 ];
 const sandboxAdapterByType = new Map(sandboxAdapters.map((adapter) => [adapter.type, adapter]));
 export function getSandboxAdapters() {
@@ -29,7 +32,7 @@ export function parseSandboxArg(value) {
     if (value.startsWith("docker:")) {
         throw new SandboxError(`Error: '${value}' is not supported. Use 'container:<container-name>' for the shared-container mode or 'image:<image-name>' for mama-managed per-user containers.`);
     }
-    throw new SandboxError(`Error: Invalid sandbox type '${value}'. Use 'host', 'container:<container-name>', 'image:<image-name>', or 'firecracker:<vm-id>:<host-path>'`);
+    throw new SandboxError(`Error: Invalid sandbox type '${value}'. Use 'host', 'container:<container-name>', 'image:<image-name>', 'firecracker:<vm-id>:<host-path>', or 'cloudflare:<sandbox-id>'`);
 }
 export async function validateSandbox(config) {
     const adapter = sandboxAdapterByType.get(config.type);
@@ -39,7 +42,7 @@ export async function validateSandbox(config) {
     await adapter.validate(config);
 }
 /**
- * Create an executor that runs commands on host, in a Docker container, or in a Firecracker VM.
+ * Create an executor that runs commands on host, in Docker, in a Firecracker VM, or through a Cloudflare sandbox bridge.
  */
 export function createExecutor(config, env, ensureReady) {
     const adapter = sandboxAdapterByType.get(config.type);

package/dist/sandbox/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,uBAAuB,GAGxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,yBAAyB,GAG1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,YAAY,EACZ,kBAAkB,GAGnB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,mBAAmB,EAA8C,MAAM,YAAY,CAAC;AAC7F,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAc3C,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,YAAY,EAAE,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAE7F,MAAM,eAAe,GAAG;IACtB,kBAAkB;IAClB,uBAAuB;IACvB,mBAAmB;IACnB,yBAAyB;CACjB,CAAC;AACX,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAClC,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CACZ,CAAC;AAEhD,MAAM,UAAU,kBAAkB;IAChC,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,YAAY,CACpB,WAAW,KAAK,kJAAkJ,CACnK,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,YAAY,CACpB,gCAAgC,KAAK,yGAAyG,CAC/I,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAqB;IACzD,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,YAAY,CAAC,oCAAoC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAqB,EACrB,GAA4B,EAC5B,WAAiC;IAEjC,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,YAAY,CAAC,oCAAoC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;AAC1D,CAAC","sourcesContent":["import {\n  ContainerExecutor,\n  containerSandboxAdapter,\n  parseContainerSandboxArg,\n  validateContainerSandbox,\n} from \"./container.js\";\nimport {\n  FirecrackerExecutor,\n  firecrackerSandboxAdapter,\n  parseFirecrackerSandboxArg,\n  validateFirecrackerSandbox,\n} from \"./firecracker.js\";\nimport {\n  HostExecutor,\n  hostSandboxAdapter,\n  parseHostSandboxArg,\n  validateHostSandbox,\n} from \"./host.js\";\nimport { imageSandboxAdapter, parseImageSandboxArg, validateImageSandbox } from \"./image.js\";\nimport { SandboxError } from \"./errors.js\";\nimport type { Executor, SandboxAdapter, SandboxConfig } from \"./types.js\";\n\nexport type {\n  ContainerSandboxConfig,\n  ExecOptions,\n  ExecResult,\n  Executor,\n  FirecrackerSandboxConfig,\n  HostSandboxConfig,\n  ImageSandboxConfig,\n  SandboxAdapter,\n  SandboxConfig,\n} from \"./types.js\";\nexport { ContainerExecutor, FirecrackerExecutor, HostExecutor };\nexport { SandboxError } from \"./errors.js\";\nexport {\n  buildContainerExecCommand,\n  containerSandboxAdapter,\n  parseContainerSandboxArg,\n  validateContainerSandbox,\n} from \"./container.js\";\nexport {\n  firecrackerSandboxAdapter,\n  parseFirecrackerSandboxArg,\n  validateFirecrackerSandbox,\n} from \"./firecracker.js\";\nexport { hostSandboxAdapter, parseHostSandboxArg, validateHostSandbox } from \"./host.js\";\nexport { imageSandboxAdapter, parseImageSandboxArg, validateImageSandbox } from \"./image.js\";\n\nconst sandboxAdapters = [\n  hostSandboxAdapter,\n  containerSandboxAdapter,\n  imageSandboxAdapter,\n  firecrackerSandboxAdapter,\n] as const;\nconst sandboxAdapterByType = new Map(\n  sandboxAdapters.map((adapter) => [adapter.type, adapter]),\n) as Map<SandboxConfig[\"type\"], SandboxAdapter>;\n\nexport function getSandboxAdapters(): readonly [...typeof sandboxAdapters] {\n  return sandboxAdapters;\n}\n\nexport function parseSandboxArg(value: string): SandboxConfig {\n  for (const adapter of sandboxAdapters) {\n    const config = adapter.parse(value);\n    if (config) {\n      return config;\n    }\n  }\n\n  if (value.startsWith(\"docker:\")) {\n    throw new SandboxError(\n      `Error: '${value}' is not supported. Use 'container:<container-name>' for the shared-container mode or 'image:<image-name>' for mama-managed per-user containers.`,\n    );\n  }\n\n  throw new SandboxError(\n    `Error: Invalid sandbox type '${value}'. Use 'host', 'container:<container-name>', 'image:<image-name>', or 'firecracker:<vm-id>:<host-path>'`,\n  );\n}\n\nexport async function validateSandbox(config: SandboxConfig): Promise<void> {\n  const adapter = sandboxAdapterByType.get(config.type);\n  if (!adapter) {\n    throw new SandboxError(`Error: Unsupported sandbox type '${config.type}'`);\n  }\n\n  await adapter.validate(config);\n}\n\n/**\n * Create an executor that runs commands on host, in a Docker container, or in a Firecracker VM.\n */\nexport function createExecutor(\n  config: SandboxConfig,\n  env?: Record<string, string>,\n  ensureReady?: () => Promise<void>,\n): Executor {\n  const adapter = sandboxAdapterByType.get(config.type);\n  if (!adapter) {\n    throw new SandboxError(`Error: Unsupported sandbox type '${config.type}'`);\n  }\n  return adapter.createExecutor(config, env, ensureReady);\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AACtF,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAgB3C,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,YAAY,EAAE,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAE7F,MAAM,eAAe,GAAG;IACtB,kBAAkB;IAClB,uBAAuB;IACvB,mBAAmB;IACnB,yBAAyB;IACzB,wBAAwB;CAChB,CAAC;AACX,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAClC,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CACZ,CAAC;AAEhD,MAAM,UAAU,kBAAkB;IAChC,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,YAAY,CACpB,WAAW,KAAK,kJAAkJ,CACnK,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,YAAY,CACpB,gCAAgC,KAAK,oIAAoI,CAC1K,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAqB;IACzD,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,YAAY,CAAC,oCAAoC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAqB,EACrB,GAA4B,EAC5B,WAAiC;IAEjC,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,YAAY,CAAC,oCAAoC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;AAC1D,CAAC","sourcesContent":["import { ContainerExecutor, containerSandboxAdapter } from \"./container.js\";\nimport { FirecrackerExecutor, firecrackerSandboxAdapter } from \"./firecracker.js\";\nimport { CloudflareSandboxExecutor, cloudflareSandboxAdapter } from \"./cloudflare.js\";\nimport { HostExecutor, hostSandboxAdapter } from \"./host.js\";\nimport { imageSandboxAdapter } from \"./image.js\";\nimport { SandboxError } from \"./errors.js\";\nimport type { Executor, SandboxAdapter, SandboxConfig } from \"./types.js\";\n\nexport type {\n  ContainerSandboxConfig,\n  CloudflareSandboxConfig,\n  ExecOptions,\n  ExecResult,\n  Executor,\n  FirecrackerSandboxConfig,\n  HostSandboxConfig,\n  ImageSandboxConfig,\n  RuntimePathContext,\n  SandboxAdapter,\n  SandboxConfig,\n} from \"./types.js\";\nexport { CloudflareSandboxExecutor, ContainerExecutor, FirecrackerExecutor, HostExecutor };\nexport { SandboxError } from \"./errors.js\";\nexport {\n  buildContainerExecCommand,\n  containerSandboxAdapter,\n  parseContainerSandboxArg,\n  validateContainerSandbox,\n} from \"./container.js\";\nexport {\n  firecrackerSandboxAdapter,\n  parseFirecrackerSandboxArg,\n  validateFirecrackerSandbox,\n} from \"./firecracker.js\";\nexport {\n  cloudflareSandboxAdapter,\n  parseCloudflareSandboxArg,\n  validateCloudflareSandbox,\n} from \"./cloudflare.js\";\nexport { hostSandboxAdapter, parseHostSandboxArg, validateHostSandbox } from \"./host.js\";\nexport { imageSandboxAdapter, parseImageSandboxArg, validateImageSandbox } from \"./image.js\";\n\nconst sandboxAdapters = [\n  hostSandboxAdapter,\n  containerSandboxAdapter,\n  imageSandboxAdapter,\n  firecrackerSandboxAdapter,\n  cloudflareSandboxAdapter,\n] as const;\nconst sandboxAdapterByType = new Map(\n  sandboxAdapters.map((adapter) => [adapter.type, adapter]),\n) as Map<SandboxConfig[\"type\"], SandboxAdapter>;\n\nexport function getSandboxAdapters(): readonly [...typeof sandboxAdapters] {\n  return sandboxAdapters;\n}\n\nexport function parseSandboxArg(value: string): SandboxConfig {\n  for (const adapter of sandboxAdapters) {\n    const config = adapter.parse(value);\n    if (config) {\n      return config;\n    }\n  }\n\n  if (value.startsWith(\"docker:\")) {\n    throw new SandboxError(\n      `Error: '${value}' is not supported. Use 'container:<container-name>' for the shared-container mode or 'image:<image-name>' for mama-managed per-user containers.`,\n    );\n  }\n\n  throw new SandboxError(\n    `Error: Invalid sandbox type '${value}'. Use 'host', 'container:<container-name>', 'image:<image-name>', 'firecracker:<vm-id>:<host-path>', or 'cloudflare:<sandbox-id>'`,\n  );\n}\n\nexport async function validateSandbox(config: SandboxConfig): Promise<void> {\n  const adapter = sandboxAdapterByType.get(config.type);\n  if (!adapter) {\n    throw new SandboxError(`Error: Unsupported sandbox type '${config.type}'`);\n  }\n\n  await adapter.validate(config);\n}\n\n/**\n * Create an executor that runs commands on host, in Docker, in a Firecracker VM, or through a Cloudflare sandbox bridge.\n */\nexport function createExecutor(\n  config: SandboxConfig,\n  env?: Record<string, string>,\n  ensureReady?: () => Promise<void>,\n): Executor {\n  const adapter = sandboxAdapterByType.get(config.type);\n  if (!adapter) {\n    throw new SandboxError(`Error: Unsupported sandbox type '${config.type}'`);\n  }\n  return adapter.createExecutor(config, env, ensureReady);\n}\n"]}

package/dist/sandbox/path-context.d.ts

@@ -0,0 +1,4 @@
+import type { RuntimePathContext } from "./types.js";
+export declare function createMountedRuntimePathContext(hostWorkspaceRoot: string, runtimeWorkspaceRoot: string): RuntimePathContext;
+export declare function translateMountedRuntimePathToHost(runtimePath: string, runtimeWorkspaceRoot: string, hostWorkspaceRoot: string): string;
+//# sourceMappingURL=path-context.d.ts.map

package/dist/sandbox/path-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-context.d.ts","sourceRoot":"","sources":["../../src/sandbox/path-context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,wBAAgB,+BAA+B,CAC7C,iBAAiB,EAAE,MAAM,EACzB,oBAAoB,EAAE,MAAM,GAC3B,kBAAkB,CAOpB;AAED,wBAAgB,iCAAiC,CAC/C,WAAW,EAAE,MAAM,EACnB,oBAAoB,EAAE,MAAM,EAC5B,iBAAiB,EAAE,MAAM,GACxB,MAAM,CAYR","sourcesContent":["import { join } from \"node:path\";\nimport type { RuntimePathContext } from \"./types.js\";\n\nexport function createMountedRuntimePathContext(\n  hostWorkspaceRoot: string,\n  runtimeWorkspaceRoot: string,\n): RuntimePathContext {\n  return {\n    hostWorkspaceRoot,\n    runtimeWorkspaceRoot,\n    runtimeToHostPath: (runtimePath) =>\n      translateMountedRuntimePathToHost(runtimePath, runtimeWorkspaceRoot, hostWorkspaceRoot),\n  };\n}\n\nexport function translateMountedRuntimePathToHost(\n  runtimePath: string,\n  runtimeWorkspaceRoot: string,\n  hostWorkspaceRoot: string,\n): string {\n  const runtimeRoot = runtimeWorkspaceRoot.replace(/\\/+$/, \"\");\n  if (runtimePath === runtimeRoot) {\n    return hostWorkspaceRoot;\n  }\n\n  const workspacePrefix = `${runtimeRoot}/`;\n  if (runtimePath.startsWith(workspacePrefix)) {\n    return join(hostWorkspaceRoot, runtimePath.slice(workspacePrefix.length));\n  }\n\n  return runtimePath;\n}\n"]}

package/dist/sandbox/path-context.js

@@ -0,0 +1,20 @@
+import { join } from "node:path";
+export function createMountedRuntimePathContext(hostWorkspaceRoot, runtimeWorkspaceRoot) {
+    return {
+        hostWorkspaceRoot,
+        runtimeWorkspaceRoot,
+        runtimeToHostPath: (runtimePath) => translateMountedRuntimePathToHost(runtimePath, runtimeWorkspaceRoot, hostWorkspaceRoot),
+    };
+}
+export function translateMountedRuntimePathToHost(runtimePath, runtimeWorkspaceRoot, hostWorkspaceRoot) {
+    const runtimeRoot = runtimeWorkspaceRoot.replace(/\/+$/, "");
+    if (runtimePath === runtimeRoot) {
+        return hostWorkspaceRoot;
+    }
+    const workspacePrefix = `${runtimeRoot}/`;
+    if (runtimePath.startsWith(workspacePrefix)) {
+        return join(hostWorkspaceRoot, runtimePath.slice(workspacePrefix.length));
+    }
+    return runtimePath;
+}
+//# sourceMappingURL=path-context.js.map

package/dist/sandbox/path-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-context.js","sourceRoot":"","sources":["../../src/sandbox/path-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,UAAU,+BAA+B,CAC7C,iBAAyB,EACzB,oBAA4B;IAE5B,OAAO;QACL,iBAAiB;QACjB,oBAAoB;QACpB,iBAAiB,EAAE,CAAC,WAAW,EAAE,EAAE,CACjC,iCAAiC,CAAC,WAAW,EAAE,oBAAoB,EAAE,iBAAiB,CAAC;KAC1F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,WAAmB,EACnB,oBAA4B,EAC5B,iBAAyB;IAEzB,MAAM,WAAW,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7D,IAAI,WAAW,KAAK,WAAW,EAAE,CAAC;QAChC,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,MAAM,eAAe,GAAG,GAAG,WAAW,GAAG,CAAC;IAC1C,IAAI,WAAW,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC","sourcesContent":["import { join } from \"node:path\";\nimport type { RuntimePathContext } from \"./types.js\";\n\nexport function createMountedRuntimePathContext(\n  hostWorkspaceRoot: string,\n  runtimeWorkspaceRoot: string,\n): RuntimePathContext {\n  return {\n    hostWorkspaceRoot,\n    runtimeWorkspaceRoot,\n    runtimeToHostPath: (runtimePath) =>\n      translateMountedRuntimePathToHost(runtimePath, runtimeWorkspaceRoot, hostWorkspaceRoot),\n  };\n}\n\nexport function translateMountedRuntimePathToHost(\n  runtimePath: string,\n  runtimeWorkspaceRoot: string,\n  hostWorkspaceRoot: string,\n): string {\n  const runtimeRoot = runtimeWorkspaceRoot.replace(/\\/+$/, \"\");\n  if (runtimePath === runtimeRoot) {\n    return hostWorkspaceRoot;\n  }\n\n  const workspacePrefix = `${runtimeRoot}/`;\n  if (runtimePath.startsWith(workspacePrefix)) {\n    return join(hostWorkspaceRoot, runtimePath.slice(workspacePrefix.length));\n  }\n\n  return runtimePath;\n}\n"]}

package/dist/sandbox/types.d.ts

@@ -1,4 +1,4 @@
-export type SandboxConfig = HostSandboxConfig | ContainerSandboxConfig | ImageSandboxConfig | FirecrackerSandboxConfig;
+export type SandboxConfig = HostSandboxConfig | ContainerSandboxConfig | ImageSandboxConfig | FirecrackerSandboxConfig | CloudflareSandboxConfig;
 export interface HostSandboxConfig {
     type: "host";
 }
@@ -17,6 +17,10 @@ export interface FirecrackerSandboxConfig {
     sshUser?: string;
     sshPort?: number;
 }
+export interface CloudflareSandboxConfig {
+    type: "cloudflare";
+    sandboxId: string;
+}
 export interface Executor {
     /**
      * Execute a bash command.
@@ -28,11 +32,23 @@ export interface Executor {
      * Container/Firecracker: returns /workspace.
      */
     getWorkspacePath(hostPath: string): string;
+    /**
+     * Return explicit host/control-plane/runtime path semantics for this executor.
+     */
+    getPathContext(hostWorkspaceRoot: string): RuntimePathContext;
     /**
      * Get the current sandbox config used by this executor.
      */
     getSandboxConfig(): SandboxConfig;
 }
+export interface RuntimePathContext {
+    /** Host-side workspace root used by mama's control plane. */
+    hostWorkspaceRoot: string;
+    /** Workspace root as seen by bash/read/write/edit inside the runtime. */
+    runtimeWorkspaceRoot: string;
+    /** Translate a runtime path back to a host path when the runtime is host-backed. */
+    runtimeToHostPath?: (runtimePath: string) => string;
+}
 export interface ExecOptions {
     timeout?: number;
     signal?: AbortSignal;

package/dist/sandbox/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/sandbox/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GACrB,iBAAiB,GACjB,sBAAsB,GACtB,kBAAkB,GAClB,wBAAwB,CAAC;AAE7B,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB;;OAEG;IACH,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAElE;;;;OAIG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAE3C;;OAEG;IACH,gBAAgB,IAAI,aAAa,CAAC;CACnC;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc,CAAC,OAAO,SAAS,aAAa,GAAG,aAAa;IAC3E,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACtB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,cAAc,CACZ,MAAM,EAAE,OAAO,EACf,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAChC,QAAQ,CAAC;CACb","sourcesContent":["export type SandboxConfig =\n  | HostSandboxConfig\n  | ContainerSandboxConfig\n  | ImageSandboxConfig\n  | FirecrackerSandboxConfig;\n\nexport interface HostSandboxConfig {\n  type: \"host\";\n}\n\nexport interface ContainerSandboxConfig {\n  type: \"container\";\n  container: string;\n}\n\nexport interface ImageSandboxConfig {\n  type: \"image\";\n  image: string;\n}\n\nexport interface FirecrackerSandboxConfig {\n  type: \"firecracker\";\n  vmId: string;\n  hostPath: string;\n  sshUser?: string;\n  sshPort?: number;\n}\n\nexport interface Executor {\n  /**\n   * Execute a bash command.\n   */\n  exec(command: string, options?: ExecOptions): Promise<ExecResult>;\n\n  /**\n   * Get the workspace path prefix for this executor.\n   * Host: returns the actual path.\n   * Container/Firecracker: returns /workspace.\n   */\n  getWorkspacePath(hostPath: string): string;\n\n  /**\n   * Get the current sandbox config used by this executor.\n   */\n  getSandboxConfig(): SandboxConfig;\n}\n\nexport interface ExecOptions {\n  timeout?: number;\n  signal?: AbortSignal;\n}\n\nexport interface ExecResult {\n  stdout: string;\n  stderr: string;\n  code: number;\n}\n\nexport interface SandboxAdapter<TConfig extends SandboxConfig = SandboxConfig> {\n  type: TConfig[\"type\"];\n  parse(value: string): TConfig | undefined;\n  validate(config: TConfig): Promise<void>;\n  createExecutor(\n    config: TConfig,\n    env?: Record<string, string>,\n    ensureReady?: () => Promise<void>,\n  ): Executor;\n}\n"]}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/sandbox/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GACrB,iBAAiB,GACjB,sBAAsB,GACtB,kBAAkB,GAClB,wBAAwB,GACxB,uBAAuB,CAAC;AAE5B,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,YAAY,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,QAAQ;IACvB;;OAEG;IACH,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAElE;;;;OAIG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAE3C;;OAEG;IACH,cAAc,CAAC,iBAAiB,EAAE,MAAM,GAAG,kBAAkB,CAAC;IAE9D;;OAEG;IACH,gBAAgB,IAAI,aAAa,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,6DAA6D;IAC7D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,yEAAyE;IACzE,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oFAAoF;IACpF,iBAAiB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,MAAM,CAAC;CACrD;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc,CAAC,OAAO,SAAS,aAAa,GAAG,aAAa;IAC3E,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACtB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,cAAc,CACZ,MAAM,EAAE,OAAO,EACf,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAChC,QAAQ,CAAC;CACb","sourcesContent":["export type SandboxConfig =\n  | HostSandboxConfig\n  | ContainerSandboxConfig\n  | ImageSandboxConfig\n  | FirecrackerSandboxConfig\n  | CloudflareSandboxConfig;\n\nexport interface HostSandboxConfig {\n  type: \"host\";\n}\n\nexport interface ContainerSandboxConfig {\n  type: \"container\";\n  container: string;\n}\n\nexport interface ImageSandboxConfig {\n  type: \"image\";\n  image: string;\n}\n\nexport interface FirecrackerSandboxConfig {\n  type: \"firecracker\";\n  vmId: string;\n  hostPath: string;\n  sshUser?: string;\n  sshPort?: number;\n}\n\nexport interface CloudflareSandboxConfig {\n  type: \"cloudflare\";\n  sandboxId: string;\n}\n\nexport interface Executor {\n  /**\n   * Execute a bash command.\n   */\n  exec(command: string, options?: ExecOptions): Promise<ExecResult>;\n\n  /**\n   * Get the workspace path prefix for this executor.\n   * Host: returns the actual path.\n   * Container/Firecracker: returns /workspace.\n   */\n  getWorkspacePath(hostPath: string): string;\n\n  /**\n   * Return explicit host/control-plane/runtime path semantics for this executor.\n   */\n  getPathContext(hostWorkspaceRoot: string): RuntimePathContext;\n\n  /**\n   * Get the current sandbox config used by this executor.\n   */\n  getSandboxConfig(): SandboxConfig;\n}\n\nexport interface RuntimePathContext {\n  /** Host-side workspace root used by mama's control plane. */\n  hostWorkspaceRoot: string;\n  /** Workspace root as seen by bash/read/write/edit inside the runtime. */\n  runtimeWorkspaceRoot: string;\n  /** Translate a runtime path back to a host path when the runtime is host-backed. */\n  runtimeToHostPath?: (runtimePath: string) => string;\n}\n\nexport interface ExecOptions {\n  timeout?: number;\n  signal?: AbortSignal;\n}\n\nexport interface ExecResult {\n  stdout: string;\n  stderr: string;\n  code: number;\n}\n\nexport interface SandboxAdapter<TConfig extends SandboxConfig = SandboxConfig> {\n  type: TConfig[\"type\"];\n  parse(value: string): TConfig | undefined;\n  validate(config: TConfig): Promise<void>;\n  createExecutor(\n    config: TConfig,\n    env?: Record<string, string>,\n    ensureReady?: () => Promise<void>,\n  ): Executor;\n}\n"]}

package/dist/sandbox/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/sandbox/types.ts"],"names":[],"mappings":"","sourcesContent":["export type SandboxConfig =\n  | HostSandboxConfig\n  | ContainerSandboxConfig\n  | ImageSandboxConfig\n  | FirecrackerSandboxConfig;\n\nexport interface HostSandboxConfig {\n  type: \"host\";\n}\n\nexport interface ContainerSandboxConfig {\n  type: \"container\";\n  container: string;\n}\n\nexport interface ImageSandboxConfig {\n  type: \"image\";\n  image: string;\n}\n\nexport interface FirecrackerSandboxConfig {\n  type: \"firecracker\";\n  vmId: string;\n  hostPath: string;\n  sshUser?: string;\n  sshPort?: number;\n}\n\nexport interface Executor {\n  /**\n   * Execute a bash command.\n   */\n  exec(command: string, options?: ExecOptions): Promise<ExecResult>;\n\n  /**\n   * Get the workspace path prefix for this executor.\n   * Host: returns the actual path.\n   * Container/Firecracker: returns /workspace.\n   */\n  getWorkspacePath(hostPath: string): string;\n\n  /**\n   * Get the current sandbox config used by this executor.\n   */\n  getSandboxConfig(): SandboxConfig;\n}\n\nexport interface ExecOptions {\n  timeout?: number;\n  signal?: AbortSignal;\n}\n\nexport interface ExecResult {\n  stdout: string;\n  stderr: string;\n  code: number;\n}\n\nexport interface SandboxAdapter<TConfig extends SandboxConfig = SandboxConfig> {\n  type: TConfig[\"type\"];\n  parse(value: string): TConfig | undefined;\n  validate(config: TConfig): Promise<void>;\n  createExecutor(\n    config: TConfig,\n    env?: Record<string, string>,\n    ensureReady?: () => Promise<void>,\n  ): Executor;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/sandbox/types.ts"],"names":[],"mappings":"","sourcesContent":["export type SandboxConfig =\n  | HostSandboxConfig\n  | ContainerSandboxConfig\n  | ImageSandboxConfig\n  | FirecrackerSandboxConfig\n  | CloudflareSandboxConfig;\n\nexport interface HostSandboxConfig {\n  type: \"host\";\n}\n\nexport interface ContainerSandboxConfig {\n  type: \"container\";\n  container: string;\n}\n\nexport interface ImageSandboxConfig {\n  type: \"image\";\n  image: string;\n}\n\nexport interface FirecrackerSandboxConfig {\n  type: \"firecracker\";\n  vmId: string;\n  hostPath: string;\n  sshUser?: string;\n  sshPort?: number;\n}\n\nexport interface CloudflareSandboxConfig {\n  type: \"cloudflare\";\n  sandboxId: string;\n}\n\nexport interface Executor {\n  /**\n   * Execute a bash command.\n   */\n  exec(command: string, options?: ExecOptions): Promise<ExecResult>;\n\n  /**\n   * Get the workspace path prefix for this executor.\n   * Host: returns the actual path.\n   * Container/Firecracker: returns /workspace.\n   */\n  getWorkspacePath(hostPath: string): string;\n\n  /**\n   * Return explicit host/control-plane/runtime path semantics for this executor.\n   */\n  getPathContext(hostWorkspaceRoot: string): RuntimePathContext;\n\n  /**\n   * Get the current sandbox config used by this executor.\n   */\n  getSandboxConfig(): SandboxConfig;\n}\n\nexport interface RuntimePathContext {\n  /** Host-side workspace root used by mama's control plane. */\n  hostWorkspaceRoot: string;\n  /** Workspace root as seen by bash/read/write/edit inside the runtime. */\n  runtimeWorkspaceRoot: string;\n  /** Translate a runtime path back to a host path when the runtime is host-backed. */\n  runtimeToHostPath?: (runtimePath: string) => string;\n}\n\nexport interface ExecOptions {\n  timeout?: number;\n  signal?: AbortSignal;\n}\n\nexport interface ExecResult {\n  stdout: string;\n  stderr: string;\n  code: number;\n}\n\nexport interface SandboxAdapter<TConfig extends SandboxConfig = SandboxConfig> {\n  type: TConfig[\"type\"];\n  parse(value: string): TConfig | undefined;\n  validate(config: TConfig): Promise<void>;\n  createExecutor(\n    config: TConfig,\n    env?: Record<string, string>,\n    ensureReady?: () => Promise<void>,\n  ): Executor;\n}\n"]}

package/dist/sentry.d.ts

@@ -9,7 +9,7 @@ export interface SentryRunScopeContext {
     threadTs?: string;
     provider?: string;
     model?: string;
-    isEvent?: boolean;
+    isSyntheticEvent?: boolean;
 }
 export declare function createSentryInitOptions(dsn?: string): {
     dsn: string | undefined;

package/dist/sentry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sentry.d.ts","sourceRoot":"","sources":["../src/sentry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AA6CpF,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,uBAAuB,CAAC,GAAG,CAAC,EAAE,MAAM;;;;;;;;sBAS9B,UAAU,QAAQ,SAAS,GAAG,UAAU,GAAG,IAAI;iCAGpC,UAAU,GAAG,UAAU,GAAG,IAAI;EAI9D;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAuBhF;AAED,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,GAChE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAO3C;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,GAC3D,IAAI,CAON;AAED,wBAAgB,aAAa,CAAC,CAAC,SAAS,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,SAAS,GAAG,CAAC,GAAG,IAAI,CA2CpF;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAU5E;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,SAAI,GAAG,OAAO,CAwB9E","sourcesContent":["import type { Breadcrumb, ErrorEvent, Event, EventHint, Scope } from \"@sentry/node\";\nimport * as Sentry from \"@sentry/node\";\n\nconst REDACTED = \"[REDACTED]\";\nconst REDACTED_PATH = \"[REDACTED_PATH]\";\nconst MAX_STRING_LENGTH = 256;\nconst MAX_DEPTH = 4;\n\nconst SENSITIVE_KEYS = new Set([\n  \"args\",\n  \"attachment\",\n  \"attachments\",\n  \"authorization\",\n  \"body\",\n  \"content\",\n  \"contents\",\n  \"cookie\",\n  \"cookies\",\n  \"filePath\",\n  \"headers\",\n  \"image\",\n  \"imageAttachments\",\n  \"images\",\n  \"localPath\",\n  \"messages\",\n  \"newUserMessage\",\n  \"path\",\n  \"paths\",\n  \"prompt\",\n  \"response\",\n  \"result\",\n  \"systemPrompt\",\n  \"text\",\n  \"thinking\",\n]);\n\nconst ABSOLUTE_PATH_PATTERN =\n  /(?:\\/Users\\/[^\\s\"'`]+|\\/workspace\\/[^\\s\"'`]+|\\/tmp\\/[^\\s\"'`]+|\\/var\\/folders\\/[^\\s\"'`]+|[A-Za-z]:\\\\[^\\s\"'`]+)/;\nconst TOKEN_PATTERNS = [\n  /\\bsk-[A-Za-z0-9_-]{12,}\\b/,\n  /\\bxox[a-z]-[A-Za-z0-9-]{10,}\\b/,\n  /\\bAIza[0-9A-Za-z_-]{20,}\\b/,\n  /\\bgh[pousr]_[A-Za-z0-9]{20,}\\b/,\n];\n\nexport interface SentryRunScopeContext {\n  conversationId: string;\n  sessionKey: string;\n  messageId: string;\n  platform: string;\n  userId: string;\n  userName?: string;\n  threadTs?: string;\n  provider?: string;\n  model?: string;\n  isEvent?: boolean;\n}\n\nexport function createSentryInitOptions(dsn?: string) {\n  return {\n    dsn,\n    environment: process.env.SENTRY_ENVIRONMENT ?? \"production\",\n    enabled: Boolean(dsn) && process.env.SENTRY_ENABLED !== \"false\",\n    sendDefaultPii: false,\n    tracesSampleRate: process.env.NODE_ENV === \"development\" ? 1.0 : 1.0,\n    includeLocalVariables: false,\n    enableLogs: true,\n    beforeSend(event: ErrorEvent, hint: EventHint): ErrorEvent | null {\n      return sanitizeEvent(event, hint);\n    },\n    beforeBreadcrumb(breadcrumb: Breadcrumb): Breadcrumb | null {\n      return sanitizeBreadcrumb(breadcrumb);\n    },\n  };\n}\n\nexport function applyRunScope(scope: Scope, context: SentryRunScopeContext): void {\n  scope.setTag(\"channel_id\", context.conversationId);\n  scope.setTag(\"session_key\", context.sessionKey);\n  scope.setTag(\"platform\", context.platform);\n  scope.setTag(\"is_event\", String(Boolean(context.isEvent)));\n  if (context.threadTs) scope.setTag(\"thread_ts\", context.threadTs);\n  if (context.provider) scope.setTag(\"provider\", context.provider);\n  if (context.model) scope.setTag(\"model\", context.model);\n\n  scope.setUser({\n    id: context.userId,\n    username: context.userName,\n  });\n  scope.setContext(\"agent_run\", {\n    conversationId: context.conversationId,\n    sessionKey: context.sessionKey,\n    messageId: context.messageId,\n    threadTs: context.threadTs,\n    platform: context.platform,\n    provider: context.provider,\n    model: context.model,\n    isEvent: Boolean(context.isEvent),\n  });\n}\n\nexport function metricAttributes(\n  attributes: Record<string, string | number | boolean | undefined>,\n): Record<string, string | number | boolean> {\n  return Object.fromEntries(\n    Object.entries(attributes).filter((entry): entry is [string, string | number | boolean] => {\n      const [, value] = entry;\n      return value !== undefined;\n    }),\n  );\n}\n\nexport function addLifecycleBreadcrumb(\n  message: string,\n  data?: Record<string, string | number | boolean | undefined>,\n): void {\n  Sentry.addBreadcrumb({\n    category: \"agent.lifecycle\",\n    message,\n    level: \"info\",\n    data: data ? metricAttributes(data) : undefined,\n  });\n}\n\nexport function sanitizeEvent<T extends Event>(event: T, _hint?: EventHint): T | null {\n  const sanitized: T = {\n    ...event,\n    breadcrumbs: event.breadcrumbs\n      ?.map((breadcrumb) => sanitizeBreadcrumb(breadcrumb))\n      .filter((breadcrumb): breadcrumb is Breadcrumb => breadcrumb !== null),\n    extra: sanitizeValue(event.extra) as T[\"extra\"],\n    contexts: sanitizeValue(event.contexts) as T[\"contexts\"],\n    request: sanitizeRequest(event.request),\n    user: undefined,\n    server_name: undefined,\n  };\n\n  if (sanitized.message) {\n    sanitized.message = sanitizeString(sanitized.message);\n  }\n\n  if (sanitized.logentry) {\n    sanitized.logentry = {\n      ...sanitized.logentry,\n      message: sanitized.logentry.message ? sanitizeString(sanitized.logentry.message) : undefined,\n    };\n  }\n\n  if (sanitized.exception?.values) {\n    sanitized.exception.values = sanitized.exception.values.map((value) => ({\n      ...value,\n      value: value.value ? sanitizeString(value.value) : value.value,\n      stacktrace: value.stacktrace\n        ? {\n            ...value.stacktrace,\n            frames: value.stacktrace.frames?.map((frame) => ({\n              ...frame,\n              filename: frame.filename ? sanitizeString(frame.filename) : frame.filename,\n              abs_path: frame.abs_path ? sanitizeString(frame.abs_path) : frame.abs_path,\n              vars: undefined,\n            })),\n          }\n        : value.stacktrace,\n    }));\n  }\n\n  return sanitized;\n}\n\nexport function sanitizeBreadcrumb(breadcrumb: Breadcrumb): Breadcrumb | null {\n  if (breadcrumb.category === \"console\") {\n    return null;\n  }\n\n  return {\n    ...breadcrumb,\n    message: breadcrumb.message ? sanitizeString(breadcrumb.message) : breadcrumb.message,\n    data: sanitizeValue(breadcrumb.data) as Breadcrumb[\"data\"],\n  };\n}\n\nexport function sanitizeValue(value: unknown, key?: string, depth = 0): unknown {\n  if (value == null) return value;\n  if (depth > MAX_DEPTH) return \"[Truncated]\";\n\n  if (isSensitiveKey(key)) {\n    return summarizeValue(value, key);\n  }\n\n  if (typeof value === \"string\") {\n    return sanitizeString(value);\n  }\n\n  if (Array.isArray(value)) {\n    return value.slice(0, 20).map((entry) => sanitizeValue(entry, key, depth + 1));\n  }\n\n  if (typeof value === \"object\") {\n    const entries = Object.entries(value as Record<string, unknown>).map(\n      ([entryKey, entryValue]) => [entryKey, sanitizeValue(entryValue, entryKey, depth + 1)],\n    );\n    return Object.fromEntries(entries);\n  }\n\n  return value;\n}\n\nfunction sanitizeRequest(request: Event[\"request\"]): Event[\"request\"] {\n  if (!request) return request;\n\n  return {\n    ...request,\n    data: request.data ? summarizeValue(request.data, \"body\") : undefined,\n    headers: undefined,\n    cookies: undefined,\n  };\n}\n\nfunction isSensitiveKey(key?: string): boolean {\n  if (!key) return false;\n  return SENSITIVE_KEYS.has(key);\n}\n\nfunction summarizeValue(value: unknown, key?: string): string {\n  const label = key ?? \"field\";\n  if (typeof value === \"string\") {\n    return `[Redacted ${label}; length=${value.length}]`;\n  }\n  if (Array.isArray(value)) {\n    return `[Redacted ${label}; items=${value.length}]`;\n  }\n  if (value && typeof value === \"object\") {\n    return `[Redacted ${label}; keys=${Object.keys(value as Record<string, unknown>).length}]`;\n  }\n  return `[Redacted ${label}]`;\n}\n\nfunction sanitizeString(value: string): string {\n  let sanitized = value.replace(new RegExp(ABSOLUTE_PATH_PATTERN, \"g\"), REDACTED_PATH);\n  for (const pattern of TOKEN_PATTERNS) {\n    sanitized = sanitized.replace(new RegExp(pattern, \"g\"), REDACTED);\n  }\n  if (sanitized.length > MAX_STRING_LENGTH) {\n    return `${sanitized.slice(0, MAX_STRING_LENGTH)}… [truncated ${sanitized.length - MAX_STRING_LENGTH} chars]`;\n  }\n  return sanitized;\n}\n"]}
+{"version":3,"file":"sentry.d.ts","sourceRoot":"","sources":["../src/sentry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AA6CpF,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,wBAAgB,uBAAuB,CAAC,GAAG,CAAC,EAAE,MAAM;;;;;;;;sBAS9B,UAAU,QAAQ,SAAS,GAAG,UAAU,GAAG,IAAI;iCAGpC,UAAU,GAAG,UAAU,GAAG,IAAI;EAI9D;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAyBhF;AAED,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,GAChE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAO3C;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,GAC3D,IAAI,CAON;AAED,wBAAgB,aAAa,CAAC,CAAC,SAAS,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,SAAS,GAAG,CAAC,GAAG,IAAI,CA2CpF;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAU5E;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,SAAI,GAAG,OAAO,CAwB9E","sourcesContent":["import type { Breadcrumb, ErrorEvent, Event, EventHint, Scope } from \"@sentry/node\";\nimport * as Sentry from \"@sentry/node\";\n\nconst REDACTED = \"[REDACTED]\";\nconst REDACTED_PATH = \"[REDACTED_PATH]\";\nconst MAX_STRING_LENGTH = 256;\nconst MAX_DEPTH = 4;\n\nconst SENSITIVE_KEYS = new Set([\n  \"args\",\n  \"attachment\",\n  \"attachments\",\n  \"authorization\",\n  \"body\",\n  \"content\",\n  \"contents\",\n  \"cookie\",\n  \"cookies\",\n  \"filePath\",\n  \"headers\",\n  \"image\",\n  \"imageAttachments\",\n  \"images\",\n  \"localPath\",\n  \"messages\",\n  \"newUserMessage\",\n  \"path\",\n  \"paths\",\n  \"prompt\",\n  \"response\",\n  \"result\",\n  \"systemPrompt\",\n  \"text\",\n  \"thinking\",\n]);\n\nconst ABSOLUTE_PATH_PATTERN =\n  /(?:\\/Users\\/[^\\s\"'`]+|\\/workspace\\/[^\\s\"'`]+|\\/tmp\\/[^\\s\"'`]+|\\/var\\/folders\\/[^\\s\"'`]+|[A-Za-z]:\\\\[^\\s\"'`]+)/;\nconst TOKEN_PATTERNS = [\n  /\\bsk-[A-Za-z0-9_-]{12,}\\b/,\n  /\\bxox[a-z]-[A-Za-z0-9-]{10,}\\b/,\n  /\\bAIza[0-9A-Za-z_-]{20,}\\b/,\n  /\\bgh[pousr]_[A-Za-z0-9]{20,}\\b/,\n];\n\nexport interface SentryRunScopeContext {\n  conversationId: string;\n  sessionKey: string;\n  messageId: string;\n  platform: string;\n  userId: string;\n  userName?: string;\n  threadTs?: string;\n  provider?: string;\n  model?: string;\n  isSyntheticEvent?: boolean;\n}\n\nexport function createSentryInitOptions(dsn?: string) {\n  return {\n    dsn,\n    environment: process.env.SENTRY_ENVIRONMENT ?? \"production\",\n    enabled: Boolean(dsn) && process.env.SENTRY_ENABLED !== \"false\",\n    sendDefaultPii: false,\n    tracesSampleRate: process.env.NODE_ENV === \"development\" ? 1.0 : 1.0,\n    includeLocalVariables: false,\n    enableLogs: true,\n    beforeSend(event: ErrorEvent, hint: EventHint): ErrorEvent | null {\n      return sanitizeEvent(event, hint);\n    },\n    beforeBreadcrumb(breadcrumb: Breadcrumb): Breadcrumb | null {\n      return sanitizeBreadcrumb(breadcrumb);\n    },\n  };\n}\n\nexport function applyRunScope(scope: Scope, context: SentryRunScopeContext): void {\n  scope.setTag(\"conversation_id\", context.conversationId);\n  scope.setTag(\"channel_id\", context.conversationId);\n  scope.setTag(\"session_key\", context.sessionKey);\n  scope.setTag(\"platform\", context.platform);\n  scope.setTag(\"is_synthetic_event\", String(Boolean(context.isSyntheticEvent)));\n  if (context.threadTs) scope.setTag(\"thread_ts\", context.threadTs);\n  if (context.provider) scope.setTag(\"provider\", context.provider);\n  if (context.model) scope.setTag(\"model\", context.model);\n\n  scope.setUser({\n    id: context.userId,\n    username: context.userName,\n  });\n  scope.setContext(\"agent_run\", {\n    conversationId: context.conversationId,\n    channelId: context.conversationId,\n    sessionKey: context.sessionKey,\n    messageId: context.messageId,\n    threadTs: context.threadTs,\n    platform: context.platform,\n    provider: context.provider,\n    model: context.model,\n    isSyntheticEvent: Boolean(context.isSyntheticEvent),\n  });\n}\n\nexport function metricAttributes(\n  attributes: Record<string, string | number | boolean | undefined>,\n): Record<string, string | number | boolean> {\n  return Object.fromEntries(\n    Object.entries(attributes).filter((entry): entry is [string, string | number | boolean] => {\n      const [, value] = entry;\n      return value !== undefined;\n    }),\n  );\n}\n\nexport function addLifecycleBreadcrumb(\n  message: string,\n  data?: Record<string, string | number | boolean | undefined>,\n): void {\n  Sentry.addBreadcrumb({\n    category: \"agent.lifecycle\",\n    message,\n    level: \"info\",\n    data: data ? metricAttributes(data) : undefined,\n  });\n}\n\nexport function sanitizeEvent<T extends Event>(event: T, _hint?: EventHint): T | null {\n  const sanitized: T = {\n    ...event,\n    breadcrumbs: event.breadcrumbs\n      ?.map((breadcrumb) => sanitizeBreadcrumb(breadcrumb))\n      .filter((breadcrumb): breadcrumb is Breadcrumb => breadcrumb !== null),\n    extra: sanitizeValue(event.extra) as T[\"extra\"],\n    contexts: sanitizeValue(event.contexts) as T[\"contexts\"],\n    request: sanitizeRequest(event.request),\n    user: undefined,\n    server_name: undefined,\n  };\n\n  if (sanitized.message) {\n    sanitized.message = sanitizeString(sanitized.message);\n  }\n\n  if (sanitized.logentry) {\n    sanitized.logentry = {\n      ...sanitized.logentry,\n      message: sanitized.logentry.message ? sanitizeString(sanitized.logentry.message) : undefined,\n    };\n  }\n\n  if (sanitized.exception?.values) {\n    sanitized.exception.values = sanitized.exception.values.map((value) => ({\n      ...value,\n      value: value.value ? sanitizeString(value.value) : value.value,\n      stacktrace: value.stacktrace\n        ? {\n            ...value.stacktrace,\n            frames: value.stacktrace.frames?.map((frame) => ({\n              ...frame,\n              filename: frame.filename ? sanitizeString(frame.filename) : frame.filename,\n              abs_path: frame.abs_path ? sanitizeString(frame.abs_path) : frame.abs_path,\n              vars: undefined,\n            })),\n          }\n        : value.stacktrace,\n    }));\n  }\n\n  return sanitized;\n}\n\nexport function sanitizeBreadcrumb(breadcrumb: Breadcrumb): Breadcrumb | null {\n  if (breadcrumb.category === \"console\") {\n    return null;\n  }\n\n  return {\n    ...breadcrumb,\n    message: breadcrumb.message ? sanitizeString(breadcrumb.message) : breadcrumb.message,\n    data: sanitizeValue(breadcrumb.data) as Breadcrumb[\"data\"],\n  };\n}\n\nexport function sanitizeValue(value: unknown, key?: string, depth = 0): unknown {\n  if (value == null) return value;\n  if (depth > MAX_DEPTH) return \"[Truncated]\";\n\n  if (isSensitiveKey(key)) {\n    return summarizeValue(value, key);\n  }\n\n  if (typeof value === \"string\") {\n    return sanitizeString(value);\n  }\n\n  if (Array.isArray(value)) {\n    return value.slice(0, 20).map((entry) => sanitizeValue(entry, key, depth + 1));\n  }\n\n  if (typeof value === \"object\") {\n    const entries = Object.entries(value as Record<string, unknown>).map(\n      ([entryKey, entryValue]) => [entryKey, sanitizeValue(entryValue, entryKey, depth + 1)],\n    );\n    return Object.fromEntries(entries);\n  }\n\n  return value;\n}\n\nfunction sanitizeRequest(request: Event[\"request\"]): Event[\"request\"] {\n  if (!request) return request;\n\n  return {\n    ...request,\n    data: request.data ? summarizeValue(request.data, \"body\") : undefined,\n    headers: undefined,\n    cookies: undefined,\n  };\n}\n\nfunction isSensitiveKey(key?: string): boolean {\n  if (!key) return false;\n  return SENSITIVE_KEYS.has(key);\n}\n\nfunction summarizeValue(value: unknown, key?: string): string {\n  const label = key ?? \"field\";\n  if (typeof value === \"string\") {\n    return `[Redacted ${label}; length=${value.length}]`;\n  }\n  if (Array.isArray(value)) {\n    return `[Redacted ${label}; items=${value.length}]`;\n  }\n  if (value && typeof value === \"object\") {\n    return `[Redacted ${label}; keys=${Object.keys(value as Record<string, unknown>).length}]`;\n  }\n  return `[Redacted ${label}]`;\n}\n\nfunction sanitizeString(value: string): string {\n  let sanitized = value.replace(new RegExp(ABSOLUTE_PATH_PATTERN, \"g\"), REDACTED_PATH);\n  for (const pattern of TOKEN_PATTERNS) {\n    sanitized = sanitized.replace(new RegExp(pattern, \"g\"), REDACTED);\n  }\n  if (sanitized.length > MAX_STRING_LENGTH) {\n    return `${sanitized.slice(0, MAX_STRING_LENGTH)}… [truncated ${sanitized.length - MAX_STRING_LENGTH} chars]`;\n  }\n  return sanitized;\n}\n"]}

package/dist/sentry.js

@@ -55,10 +55,11 @@ export function createSentryInitOptions(dsn) {
     };
 }
 export function applyRunScope(scope, context) {
+    scope.setTag("conversation_id", context.conversationId);
     scope.setTag("channel_id", context.conversationId);
     scope.setTag("session_key", context.sessionKey);
     scope.setTag("platform", context.platform);
-    scope.setTag("is_event", String(Boolean(context.isEvent)));
+    scope.setTag("is_synthetic_event", String(Boolean(context.isSyntheticEvent)));
     if (context.threadTs)
         scope.setTag("thread_ts", context.threadTs);
     if (context.provider)
@@ -71,13 +72,14 @@ export function applyRunScope(scope, context) {
     });
     scope.setContext("agent_run", {
         conversationId: context.conversationId,
+        channelId: context.conversationId,
         sessionKey: context.sessionKey,
         messageId: context.messageId,
         threadTs: context.threadTs,
         platform: context.platform,
         provider: context.provider,
         model: context.model,
-        isEvent: Boolean(context.isEvent),
+        isSyntheticEvent: Boolean(context.isSyntheticEvent),
     });
 }
 export function metricAttributes(attributes) {

package/dist/sentry.js.map

@@ -1 +1 @@
-{"version":3,"file":"sentry.js","sourceRoot":"","sources":["../src/sentry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AAEvC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,MAAM,aAAa,GAAG,iBAAiB,CAAC;AACxC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,MAAM;IACN,YAAY;IACZ,aAAa;IACb,eAAe;IACf,MAAM;IACN,SAAS;IACT,UAAU;IACV,QAAQ;IACR,SAAS;IACT,UAAU;IACV,SAAS;IACT,OAAO;IACP,kBAAkB;IAClB,QAAQ;IACR,WAAW;IACX,UAAU;IACV,gBAAgB;IAChB,MAAM;IACN,OAAO;IACP,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,cAAc;IACd,MAAM;IACN,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,qBAAqB,GACzB,+GAA+G,CAAC;AAClH,MAAM,cAAc,GAAG;IACrB,2BAA2B;IAC3B,gCAAgC;IAChC,4BAA4B;IAC5B,gCAAgC;CACjC,CAAC;AAeF,MAAM,UAAU,uBAAuB,CAAC,GAAY;IAClD,OAAO;QACL,GAAG;QACH,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,YAAY;QAC3D,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,OAAO;QAC/D,cAAc,EAAE,KAAK;QACrB,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QACpE,qBAAqB,EAAE,KAAK;QAC5B,UAAU,EAAE,IAAI;QAChB,UAAU,CAAC,KAAiB,EAAE,IAAe;YAC3C,OAAO,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,gBAAgB,CAAC,UAAsB;YACrC,OAAO,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACxC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAY,EAAE,OAA8B;IACxE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACnD,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAChD,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,QAAQ;QAAE,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,QAAQ;QAAE,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAI,OAAO,CAAC,KAAK;QAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAExD,KAAK,CAAC,OAAO,CAAC;QACZ,EAAE,EAAE,OAAO,CAAC,MAAM;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;IACH,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE;QAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,UAAiE;IAEjE,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAgD,EAAE;QACxF,MAAM,CAAC,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC;QACxB,OAAO,KAAK,KAAK,SAAS,CAAC;IAC7B,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAe,EACf,IAA4D;IAE5D,MAAM,CAAC,aAAa,CAAC;QACnB,QAAQ,EAAE,iBAAiB;QAC3B,OAAO;QACP,KAAK,EAAE,MAAM;QACb,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAChD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAkB,KAAQ,EAAE,KAAiB;IACxE,MAAM,SAAS,GAAM;QACnB,GAAG,KAAK;QACR,WAAW,EAAE,KAAK,CAAC,WAAW;YAC5B,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;aACpD,MAAM,CAAC,CAAC,UAAU,EAA4B,EAAE,CAAC,UAAU,KAAK,IAAI,CAAC;QACxE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAe;QAC/C,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAkB;QACxD,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC;QACvC,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,SAAS;KACvB,CAAC;IAEF,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACtB,SAAS,CAAC,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;QACvB,SAAS,CAAC,QAAQ,GAAG;YACnB,GAAG,SAAS,CAAC,QAAQ;YACrB,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7F,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;QAChC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACtE,GAAG,KAAK;YACR,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK;YAC9D,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC1B,CAAC,CAAC;oBACE,GAAG,KAAK,CAAC,UAAU;oBACnB,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;wBAC/C,GAAG,KAAK;wBACR,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ;wBAC1E,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ;wBAC1E,IAAI,EAAE,SAAS;qBAChB,CAAC,CAAC;iBACJ;gBACH,CAAC,CAAC,KAAK,CAAC,UAAU;SACrB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAsB;IACvD,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,GAAG,UAAU;QACb,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO;QACrF,IAAI,EAAE,aAAa,CAAC,UAAU,CAAC,IAAI,CAAuB;KAC3D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,GAAY,EAAE,KAAK,GAAG,CAAC;IACnE,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,aAAa,CAAC;IAE5C,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAClE,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CACvF,CAAC;QACF,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,OAAyB;IAChD,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC;IAE7B,OAAO;QACL,GAAG,OAAO;QACV,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QACrE,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,SAAS;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,OAAO,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,GAAY;IAClD,MAAM,KAAK,GAAG,GAAG,IAAI,OAAO,CAAC;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,aAAa,KAAK,YAAY,KAAK,CAAC,MAAM,GAAG,CAAC;IACvD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,aAAa,KAAK,WAAW,KAAK,CAAC,MAAM,GAAG,CAAC;IACtD,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,aAAa,KAAK,UAAU,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,MAAM,GAAG,CAAC;IAC7F,CAAC;IACD,OAAO,aAAa,KAAK,GAAG,CAAC;AAC/B,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,qBAAqB,EAAE,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC;IACrF,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACzC,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,gBAAgB,SAAS,CAAC,MAAM,GAAG,iBAAiB,SAAS,CAAC;IAC/G,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["import type { Breadcrumb, ErrorEvent, Event, EventHint, Scope } from \"@sentry/node\";\nimport * as Sentry from \"@sentry/node\";\n\nconst REDACTED = \"[REDACTED]\";\nconst REDACTED_PATH = \"[REDACTED_PATH]\";\nconst MAX_STRING_LENGTH = 256;\nconst MAX_DEPTH = 4;\n\nconst SENSITIVE_KEYS = new Set([\n  \"args\",\n  \"attachment\",\n  \"attachments\",\n  \"authorization\",\n  \"body\",\n  \"content\",\n  \"contents\",\n  \"cookie\",\n  \"cookies\",\n  \"filePath\",\n  \"headers\",\n  \"image\",\n  \"imageAttachments\",\n  \"images\",\n  \"localPath\",\n  \"messages\",\n  \"newUserMessage\",\n  \"path\",\n  \"paths\",\n  \"prompt\",\n  \"response\",\n  \"result\",\n  \"systemPrompt\",\n  \"text\",\n  \"thinking\",\n]);\n\nconst ABSOLUTE_PATH_PATTERN =\n  /(?:\\/Users\\/[^\\s\"'`]+|\\/workspace\\/[^\\s\"'`]+|\\/tmp\\/[^\\s\"'`]+|\\/var\\/folders\\/[^\\s\"'`]+|[A-Za-z]:\\\\[^\\s\"'`]+)/;\nconst TOKEN_PATTERNS = [\n  /\\bsk-[A-Za-z0-9_-]{12,}\\b/,\n  /\\bxox[a-z]-[A-Za-z0-9-]{10,}\\b/,\n  /\\bAIza[0-9A-Za-z_-]{20,}\\b/,\n  /\\bgh[pousr]_[A-Za-z0-9]{20,}\\b/,\n];\n\nexport interface SentryRunScopeContext {\n  conversationId: string;\n  sessionKey: string;\n  messageId: string;\n  platform: string;\n  userId: string;\n  userName?: string;\n  threadTs?: string;\n  provider?: string;\n  model?: string;\n  isEvent?: boolean;\n}\n\nexport function createSentryInitOptions(dsn?: string) {\n  return {\n    dsn,\n    environment: process.env.SENTRY_ENVIRONMENT ?? \"production\",\n    enabled: Boolean(dsn) && process.env.SENTRY_ENABLED !== \"false\",\n    sendDefaultPii: false,\n    tracesSampleRate: process.env.NODE_ENV === \"development\" ? 1.0 : 1.0,\n    includeLocalVariables: false,\n    enableLogs: true,\n    beforeSend(event: ErrorEvent, hint: EventHint): ErrorEvent | null {\n      return sanitizeEvent(event, hint);\n    },\n    beforeBreadcrumb(breadcrumb: Breadcrumb): Breadcrumb | null {\n      return sanitizeBreadcrumb(breadcrumb);\n    },\n  };\n}\n\nexport function applyRunScope(scope: Scope, context: SentryRunScopeContext): void {\n  scope.setTag(\"channel_id\", context.conversationId);\n  scope.setTag(\"session_key\", context.sessionKey);\n  scope.setTag(\"platform\", context.platform);\n  scope.setTag(\"is_event\", String(Boolean(context.isEvent)));\n  if (context.threadTs) scope.setTag(\"thread_ts\", context.threadTs);\n  if (context.provider) scope.setTag(\"provider\", context.provider);\n  if (context.model) scope.setTag(\"model\", context.model);\n\n  scope.setUser({\n    id: context.userId,\n    username: context.userName,\n  });\n  scope.setContext(\"agent_run\", {\n    conversationId: context.conversationId,\n    sessionKey: context.sessionKey,\n    messageId: context.messageId,\n    threadTs: context.threadTs,\n    platform: context.platform,\n    provider: context.provider,\n    model: context.model,\n    isEvent: Boolean(context.isEvent),\n  });\n}\n\nexport function metricAttributes(\n  attributes: Record<string, string | number | boolean | undefined>,\n): Record<string, string | number | boolean> {\n  return Object.fromEntries(\n    Object.entries(attributes).filter((entry): entry is [string, string | number | boolean] => {\n      const [, value] = entry;\n      return value !== undefined;\n    }),\n  );\n}\n\nexport function addLifecycleBreadcrumb(\n  message: string,\n  data?: Record<string, string | number | boolean | undefined>,\n): void {\n  Sentry.addBreadcrumb({\n    category: \"agent.lifecycle\",\n    message,\n    level: \"info\",\n    data: data ? metricAttributes(data) : undefined,\n  });\n}\n\nexport function sanitizeEvent<T extends Event>(event: T, _hint?: EventHint): T | null {\n  const sanitized: T = {\n    ...event,\n    breadcrumbs: event.breadcrumbs\n      ?.map((breadcrumb) => sanitizeBreadcrumb(breadcrumb))\n      .filter((breadcrumb): breadcrumb is Breadcrumb => breadcrumb !== null),\n    extra: sanitizeValue(event.extra) as T[\"extra\"],\n    contexts: sanitizeValue(event.contexts) as T[\"contexts\"],\n    request: sanitizeRequest(event.request),\n    user: undefined,\n    server_name: undefined,\n  };\n\n  if (sanitized.message) {\n    sanitized.message = sanitizeString(sanitized.message);\n  }\n\n  if (sanitized.logentry) {\n    sanitized.logentry = {\n      ...sanitized.logentry,\n      message: sanitized.logentry.message ? sanitizeString(sanitized.logentry.message) : undefined,\n    };\n  }\n\n  if (sanitized.exception?.values) {\n    sanitized.exception.values = sanitized.exception.values.map((value) => ({\n      ...value,\n      value: value.value ? sanitizeString(value.value) : value.value,\n      stacktrace: value.stacktrace\n        ? {\n            ...value.stacktrace,\n            frames: value.stacktrace.frames?.map((frame) => ({\n              ...frame,\n              filename: frame.filename ? sanitizeString(frame.filename) : frame.filename,\n              abs_path: frame.abs_path ? sanitizeString(frame.abs_path) : frame.abs_path,\n              vars: undefined,\n            })),\n          }\n        : value.stacktrace,\n    }));\n  }\n\n  return sanitized;\n}\n\nexport function sanitizeBreadcrumb(breadcrumb: Breadcrumb): Breadcrumb | null {\n  if (breadcrumb.category === \"console\") {\n    return null;\n  }\n\n  return {\n    ...breadcrumb,\n    message: breadcrumb.message ? sanitizeString(breadcrumb.message) : breadcrumb.message,\n    data: sanitizeValue(breadcrumb.data) as Breadcrumb[\"data\"],\n  };\n}\n\nexport function sanitizeValue(value: unknown, key?: string, depth = 0): unknown {\n  if (value == null) return value;\n  if (depth > MAX_DEPTH) return \"[Truncated]\";\n\n  if (isSensitiveKey(key)) {\n    return summarizeValue(value, key);\n  }\n\n  if (typeof value === \"string\") {\n    return sanitizeString(value);\n  }\n\n  if (Array.isArray(value)) {\n    return value.slice(0, 20).map((entry) => sanitizeValue(entry, key, depth + 1));\n  }\n\n  if (typeof value === \"object\") {\n    const entries = Object.entries(value as Record<string, unknown>).map(\n      ([entryKey, entryValue]) => [entryKey, sanitizeValue(entryValue, entryKey, depth + 1)],\n    );\n    return Object.fromEntries(entries);\n  }\n\n  return value;\n}\n\nfunction sanitizeRequest(request: Event[\"request\"]): Event[\"request\"] {\n  if (!request) return request;\n\n  return {\n    ...request,\n    data: request.data ? summarizeValue(request.data, \"body\") : undefined,\n    headers: undefined,\n    cookies: undefined,\n  };\n}\n\nfunction isSensitiveKey(key?: string): boolean {\n  if (!key) return false;\n  return SENSITIVE_KEYS.has(key);\n}\n\nfunction summarizeValue(value: unknown, key?: string): string {\n  const label = key ?? \"field\";\n  if (typeof value === \"string\") {\n    return `[Redacted ${label}; length=${value.length}]`;\n  }\n  if (Array.isArray(value)) {\n    return `[Redacted ${label}; items=${value.length}]`;\n  }\n  if (value && typeof value === \"object\") {\n    return `[Redacted ${label}; keys=${Object.keys(value as Record<string, unknown>).length}]`;\n  }\n  return `[Redacted ${label}]`;\n}\n\nfunction sanitizeString(value: string): string {\n  let sanitized = value.replace(new RegExp(ABSOLUTE_PATH_PATTERN, \"g\"), REDACTED_PATH);\n  for (const pattern of TOKEN_PATTERNS) {\n    sanitized = sanitized.replace(new RegExp(pattern, \"g\"), REDACTED);\n  }\n  if (sanitized.length > MAX_STRING_LENGTH) {\n    return `${sanitized.slice(0, MAX_STRING_LENGTH)}… [truncated ${sanitized.length - MAX_STRING_LENGTH} chars]`;\n  }\n  return sanitized;\n}\n"]}
+{"version":3,"file":"sentry.js","sourceRoot":"","sources":["../src/sentry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AAEvC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,MAAM,aAAa,GAAG,iBAAiB,CAAC;AACxC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,MAAM;IACN,YAAY;IACZ,aAAa;IACb,eAAe;IACf,MAAM;IACN,SAAS;IACT,UAAU;IACV,QAAQ;IACR,SAAS;IACT,UAAU;IACV,SAAS;IACT,OAAO;IACP,kBAAkB;IAClB,QAAQ;IACR,WAAW;IACX,UAAU;IACV,gBAAgB;IAChB,MAAM;IACN,OAAO;IACP,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,cAAc;IACd,MAAM;IACN,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,qBAAqB,GACzB,+GAA+G,CAAC;AAClH,MAAM,cAAc,GAAG;IACrB,2BAA2B;IAC3B,gCAAgC;IAChC,4BAA4B;IAC5B,gCAAgC;CACjC,CAAC;AAeF,MAAM,UAAU,uBAAuB,CAAC,GAAY;IAClD,OAAO;QACL,GAAG;QACH,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,YAAY;QAC3D,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,OAAO;QAC/D,cAAc,EAAE,KAAK;QACrB,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QACpE,qBAAqB,EAAE,KAAK;QAC5B,UAAU,EAAE,IAAI;QAChB,UAAU,CAAC,KAAiB,EAAE,IAAe;YAC3C,OAAO,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,gBAAgB,CAAC,UAAsB;YACrC,OAAO,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACxC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAY,EAAE,OAA8B;IACxE,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACxD,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACnD,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAChD,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,KAAK,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAC9E,IAAI,OAAO,CAAC,QAAQ;QAAE,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,QAAQ;QAAE,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAI,OAAO,CAAC,KAAK;QAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAExD,KAAK,CAAC,OAAO,CAAC;QACZ,EAAE,EAAE,OAAO,CAAC,MAAM;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;IACH,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE;QAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,SAAS,EAAE,OAAO,CAAC,cAAc;QACjC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,gBAAgB,EAAE,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC;KACpD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,UAAiE;IAEjE,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAgD,EAAE;QACxF,MAAM,CAAC,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC;QACxB,OAAO,KAAK,KAAK,SAAS,CAAC;IAC7B,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAe,EACf,IAA4D;IAE5D,MAAM,CAAC,aAAa,CAAC;QACnB,QAAQ,EAAE,iBAAiB;QAC3B,OAAO;QACP,KAAK,EAAE,MAAM;QACb,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAChD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAkB,KAAQ,EAAE,KAAiB;IACxE,MAAM,SAAS,GAAM;QACnB,GAAG,KAAK;QACR,WAAW,EAAE,KAAK,CAAC,WAAW;YAC5B,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;aACpD,MAAM,CAAC,CAAC,UAAU,EAA4B,EAAE,CAAC,UAAU,KAAK,IAAI,CAAC;QACxE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAe;QAC/C,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAkB;QACxD,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC;QACvC,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,SAAS;KACvB,CAAC;IAEF,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACtB,SAAS,CAAC,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;QACvB,SAAS,CAAC,QAAQ,GAAG;YACnB,GAAG,SAAS,CAAC,QAAQ;YACrB,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7F,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;QAChC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACtE,GAAG,KAAK;YACR,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK;YAC9D,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC1B,CAAC,CAAC;oBACE,GAAG,KAAK,CAAC,UAAU;oBACnB,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;wBAC/C,GAAG,KAAK;wBACR,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ;wBAC1E,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ;wBAC1E,IAAI,EAAE,SAAS;qBAChB,CAAC,CAAC;iBACJ;gBACH,CAAC,CAAC,KAAK,CAAC,UAAU;SACrB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAsB;IACvD,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,GAAG,UAAU;QACb,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO;QACrF,IAAI,EAAE,aAAa,CAAC,UAAU,CAAC,IAAI,CAAuB;KAC3D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,GAAY,EAAE,KAAK,GAAG,CAAC;IACnE,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,aAAa,CAAC;IAE5C,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAClE,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CACvF,CAAC;QACF,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,OAAyB;IAChD,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC;IAE7B,OAAO;QACL,GAAG,OAAO;QACV,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QACrE,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,SAAS;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,OAAO,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,GAAY;IAClD,MAAM,KAAK,GAAG,GAAG,IAAI,OAAO,CAAC;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,aAAa,KAAK,YAAY,KAAK,CAAC,MAAM,GAAG,CAAC;IACvD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,aAAa,KAAK,WAAW,KAAK,CAAC,MAAM,GAAG,CAAC;IACtD,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,aAAa,KAAK,UAAU,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,MAAM,GAAG,CAAC;IAC7F,CAAC;IACD,OAAO,aAAa,KAAK,GAAG,CAAC;AAC/B,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,qBAAqB,EAAE,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC;IACrF,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACzC,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,gBAAgB,SAAS,CAAC,MAAM,GAAG,iBAAiB,SAAS,CAAC;IAC/G,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["import type { Breadcrumb, ErrorEvent, Event, EventHint, Scope } from \"@sentry/node\";\nimport * as Sentry from \"@sentry/node\";\n\nconst REDACTED = \"[REDACTED]\";\nconst REDACTED_PATH = \"[REDACTED_PATH]\";\nconst MAX_STRING_LENGTH = 256;\nconst MAX_DEPTH = 4;\n\nconst SENSITIVE_KEYS = new Set([\n  \"args\",\n  \"attachment\",\n  \"attachments\",\n  \"authorization\",\n  \"body\",\n  \"content\",\n  \"contents\",\n  \"cookie\",\n  \"cookies\",\n  \"filePath\",\n  \"headers\",\n  \"image\",\n  \"imageAttachments\",\n  \"images\",\n  \"localPath\",\n  \"messages\",\n  \"newUserMessage\",\n  \"path\",\n  \"paths\",\n  \"prompt\",\n  \"response\",\n  \"result\",\n  \"systemPrompt\",\n  \"text\",\n  \"thinking\",\n]);\n\nconst ABSOLUTE_PATH_PATTERN =\n  /(?:\\/Users\\/[^\\s\"'`]+|\\/workspace\\/[^\\s\"'`]+|\\/tmp\\/[^\\s\"'`]+|\\/var\\/folders\\/[^\\s\"'`]+|[A-Za-z]:\\\\[^\\s\"'`]+)/;\nconst TOKEN_PATTERNS = [\n  /\\bsk-[A-Za-z0-9_-]{12,}\\b/,\n  /\\bxox[a-z]-[A-Za-z0-9-]{10,}\\b/,\n  /\\bAIza[0-9A-Za-z_-]{20,}\\b/,\n  /\\bgh[pousr]_[A-Za-z0-9]{20,}\\b/,\n];\n\nexport interface SentryRunScopeContext {\n  conversationId: string;\n  sessionKey: string;\n  messageId: string;\n  platform: string;\n  userId: string;\n  userName?: string;\n  threadTs?: string;\n  provider?: string;\n  model?: string;\n  isSyntheticEvent?: boolean;\n}\n\nexport function createSentryInitOptions(dsn?: string) {\n  return {\n    dsn,\n    environment: process.env.SENTRY_ENVIRONMENT ?? \"production\",\n    enabled: Boolean(dsn) && process.env.SENTRY_ENABLED !== \"false\",\n    sendDefaultPii: false,\n    tracesSampleRate: process.env.NODE_ENV === \"development\" ? 1.0 : 1.0,\n    includeLocalVariables: false,\n    enableLogs: true,\n    beforeSend(event: ErrorEvent, hint: EventHint): ErrorEvent | null {\n      return sanitizeEvent(event, hint);\n    },\n    beforeBreadcrumb(breadcrumb: Breadcrumb): Breadcrumb | null {\n      return sanitizeBreadcrumb(breadcrumb);\n    },\n  };\n}\n\nexport function applyRunScope(scope: Scope, context: SentryRunScopeContext): void {\n  scope.setTag(\"conversation_id\", context.conversationId);\n  scope.setTag(\"channel_id\", context.conversationId);\n  scope.setTag(\"session_key\", context.sessionKey);\n  scope.setTag(\"platform\", context.platform);\n  scope.setTag(\"is_synthetic_event\", String(Boolean(context.isSyntheticEvent)));\n  if (context.threadTs) scope.setTag(\"thread_ts\", context.threadTs);\n  if (context.provider) scope.setTag(\"provider\", context.provider);\n  if (context.model) scope.setTag(\"model\", context.model);\n\n  scope.setUser({\n    id: context.userId,\n    username: context.userName,\n  });\n  scope.setContext(\"agent_run\", {\n    conversationId: context.conversationId,\n    channelId: context.conversationId,\n    sessionKey: context.sessionKey,\n    messageId: context.messageId,\n    threadTs: context.threadTs,\n    platform: context.platform,\n    provider: context.provider,\n    model: context.model,\n    isSyntheticEvent: Boolean(context.isSyntheticEvent),\n  });\n}\n\nexport function metricAttributes(\n  attributes: Record<string, string | number | boolean | undefined>,\n): Record<string, string | number | boolean> {\n  return Object.fromEntries(\n    Object.entries(attributes).filter((entry): entry is [string, string | number | boolean] => {\n      const [, value] = entry;\n      return value !== undefined;\n    }),\n  );\n}\n\nexport function addLifecycleBreadcrumb(\n  message: string,\n  data?: Record<string, string | number | boolean | undefined>,\n): void {\n  Sentry.addBreadcrumb({\n    category: \"agent.lifecycle\",\n    message,\n    level: \"info\",\n    data: data ? metricAttributes(data) : undefined,\n  });\n}\n\nexport function sanitizeEvent<T extends Event>(event: T, _hint?: EventHint): T | null {\n  const sanitized: T = {\n    ...event,\n    breadcrumbs: event.breadcrumbs\n      ?.map((breadcrumb) => sanitizeBreadcrumb(breadcrumb))\n      .filter((breadcrumb): breadcrumb is Breadcrumb => breadcrumb !== null),\n    extra: sanitizeValue(event.extra) as T[\"extra\"],\n    contexts: sanitizeValue(event.contexts) as T[\"contexts\"],\n    request: sanitizeRequest(event.request),\n    user: undefined,\n    server_name: undefined,\n  };\n\n  if (sanitized.message) {\n    sanitized.message = sanitizeString(sanitized.message);\n  }\n\n  if (sanitized.logentry) {\n    sanitized.logentry = {\n      ...sanitized.logentry,\n      message: sanitized.logentry.message ? sanitizeString(sanitized.logentry.message) : undefined,\n    };\n  }\n\n  if (sanitized.exception?.values) {\n    sanitized.exception.values = sanitized.exception.values.map((value) => ({\n      ...value,\n      value: value.value ? sanitizeString(value.value) : value.value,\n      stacktrace: value.stacktrace\n        ? {\n            ...value.stacktrace,\n            frames: value.stacktrace.frames?.map((frame) => ({\n              ...frame,\n              filename: frame.filename ? sanitizeString(frame.filename) : frame.filename,\n              abs_path: frame.abs_path ? sanitizeString(frame.abs_path) : frame.abs_path,\n              vars: undefined,\n            })),\n          }\n        : value.stacktrace,\n    }));\n  }\n\n  return sanitized;\n}\n\nexport function sanitizeBreadcrumb(breadcrumb: Breadcrumb): Breadcrumb | null {\n  if (breadcrumb.category === \"console\") {\n    return null;\n  }\n\n  return {\n    ...breadcrumb,\n    message: breadcrumb.message ? sanitizeString(breadcrumb.message) : breadcrumb.message,\n    data: sanitizeValue(breadcrumb.data) as Breadcrumb[\"data\"],\n  };\n}\n\nexport function sanitizeValue(value: unknown, key?: string, depth = 0): unknown {\n  if (value == null) return value;\n  if (depth > MAX_DEPTH) return \"[Truncated]\";\n\n  if (isSensitiveKey(key)) {\n    return summarizeValue(value, key);\n  }\n\n  if (typeof value === \"string\") {\n    return sanitizeString(value);\n  }\n\n  if (Array.isArray(value)) {\n    return value.slice(0, 20).map((entry) => sanitizeValue(entry, key, depth + 1));\n  }\n\n  if (typeof value === \"object\") {\n    const entries = Object.entries(value as Record<string, unknown>).map(\n      ([entryKey, entryValue]) => [entryKey, sanitizeValue(entryValue, entryKey, depth + 1)],\n    );\n    return Object.fromEntries(entries);\n  }\n\n  return value;\n}\n\nfunction sanitizeRequest(request: Event[\"request\"]): Event[\"request\"] {\n  if (!request) return request;\n\n  return {\n    ...request,\n    data: request.data ? summarizeValue(request.data, \"body\") : undefined,\n    headers: undefined,\n    cookies: undefined,\n  };\n}\n\nfunction isSensitiveKey(key?: string): boolean {\n  if (!key) return false;\n  return SENSITIVE_KEYS.has(key);\n}\n\nfunction summarizeValue(value: unknown, key?: string): string {\n  const label = key ?? \"field\";\n  if (typeof value === \"string\") {\n    return `[Redacted ${label}; length=${value.length}]`;\n  }\n  if (Array.isArray(value)) {\n    return `[Redacted ${label}; items=${value.length}]`;\n  }\n  if (value && typeof value === \"object\") {\n    return `[Redacted ${label}; keys=${Object.keys(value as Record<string, unknown>).length}]`;\n  }\n  return `[Redacted ${label}]`;\n}\n\nfunction sanitizeString(value: string): string {\n  let sanitized = value.replace(new RegExp(ABSOLUTE_PATH_PATTERN, \"g\"), REDACTED_PATH);\n  for (const pattern of TOKEN_PATTERNS) {\n    sanitized = sanitized.replace(new RegExp(pattern, \"g\"), REDACTED);\n  }\n  if (sanitized.length > MAX_STRING_LENGTH) {\n    return `${sanitized.slice(0, MAX_STRING_LENGTH)}… [truncated ${sanitized.length - MAX_STRING_LENGTH} chars]`;\n  }\n  return sanitized;\n}\n"]}

package/dist/session-policy.d.ts

@@ -0,0 +1,13 @@
+import type { ConversationKind } from "./adapter.js";
+export type ChatPlatform = "slack" | "telegram" | "discord" | string;
+export interface ResolveSessionKeyOptions {
+    conversationId: string;
+    conversationKind: ConversationKind;
+    messageId: string;
+    threadTs?: string;
+    persistentTopLevel?: boolean;
+    scopeDirectThreads?: boolean;
+}
+export declare function resolveChatSessionKey(options: ResolveSessionKeyOptions): string;
+export declare function inferConversationKind(platform: ChatPlatform, conversationId: string): ConversationKind;
+//# sourceMappingURL=session-policy.d.ts.map

package/dist/session-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-policy.d.ts","sourceRoot":"","sources":["../src/session-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErD,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;AAErE,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,wBAAwB,GAAG,MAAM,CAgB/E;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,MAAM,GACrB,gBAAgB,CAclB","sourcesContent":["import type { ConversationKind } from \"./adapter.js\";\n\nexport type ChatPlatform = \"slack\" | \"telegram\" | \"discord\" | string;\n\nexport interface ResolveSessionKeyOptions {\n  conversationId: string;\n  conversationKind: ConversationKind;\n  messageId: string;\n  threadTs?: string;\n  persistentTopLevel?: boolean;\n  scopeDirectThreads?: boolean;\n}\n\nexport function resolveChatSessionKey(options: ResolveSessionKeyOptions): string {\n  const {\n    conversationId,\n    conversationKind,\n    messageId,\n    persistentTopLevel,\n    scopeDirectThreads,\n    threadTs,\n  } = options;\n  if (conversationKind === \"direct\" && (!threadTs || !scopeDirectThreads)) {\n    return conversationId;\n  }\n  if (!threadTs && persistentTopLevel) {\n    return conversationId;\n  }\n  return `${conversationId}:${threadTs || messageId}`;\n}\n\nexport function inferConversationKind(\n  platform: ChatPlatform,\n  conversationId: string,\n): ConversationKind {\n  if (platform === \"slack\") {\n    return conversationId.startsWith(\"D\") ? \"direct\" : \"shared\";\n  }\n\n  if (platform === \"telegram\") {\n    return conversationId.startsWith(\"-\") ? \"shared\" : \"direct\";\n  }\n\n  if (platform === \"discord\") {\n    return conversationId.startsWith(\"DM\") ? \"direct\" : \"shared\";\n  }\n\n  return \"shared\";\n}\n"]}

package/dist/session-policy.js

@@ -0,0 +1,23 @@
+export function resolveChatSessionKey(options) {
+    const { conversationId, conversationKind, messageId, persistentTopLevel, scopeDirectThreads, threadTs, } = options;
+    if (conversationKind === "direct" && (!threadTs || !scopeDirectThreads)) {
+        return conversationId;
+    }
+    if (!threadTs && persistentTopLevel) {
+        return conversationId;
+    }
+    return `${conversationId}:${threadTs || messageId}`;
+}
+export function inferConversationKind(platform, conversationId) {
+    if (platform === "slack") {
+        return conversationId.startsWith("D") ? "direct" : "shared";
+    }
+    if (platform === "telegram") {
+        return conversationId.startsWith("-") ? "shared" : "direct";
+    }
+    if (platform === "discord") {
+        return conversationId.startsWith("DM") ? "direct" : "shared";
+    }
+    return "shared";
+}
+//# sourceMappingURL=session-policy.js.map

package/dist/session-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-policy.js","sourceRoot":"","sources":["../src/session-policy.ts"],"names":[],"mappings":"AAaA,MAAM,UAAU,qBAAqB,CAAC,OAAiC;IACrE,MAAM,EACJ,cAAc,EACd,gBAAgB,EAChB,SAAS,EACT,kBAAkB,EAClB,kBAAkB,EAClB,QAAQ,GACT,GAAG,OAAO,CAAC;IACZ,IAAI,gBAAgB,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxE,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,QAAQ,IAAI,kBAAkB,EAAE,CAAC;QACpC,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,OAAO,GAAG,cAAc,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAsB,EACtB,cAAsB;IAEtB,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9D,CAAC;IAED,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC5B,OAAO,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9D,CAAC;IAED,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC/D,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC","sourcesContent":["import type { ConversationKind } from \"./adapter.js\";\n\nexport type ChatPlatform = \"slack\" | \"telegram\" | \"discord\" | string;\n\nexport interface ResolveSessionKeyOptions {\n  conversationId: string;\n  conversationKind: ConversationKind;\n  messageId: string;\n  threadTs?: string;\n  persistentTopLevel?: boolean;\n  scopeDirectThreads?: boolean;\n}\n\nexport function resolveChatSessionKey(options: ResolveSessionKeyOptions): string {\n  const {\n    conversationId,\n    conversationKind,\n    messageId,\n    persistentTopLevel,\n    scopeDirectThreads,\n    threadTs,\n  } = options;\n  if (conversationKind === \"direct\" && (!threadTs || !scopeDirectThreads)) {\n    return conversationId;\n  }\n  if (!threadTs && persistentTopLevel) {\n    return conversationId;\n  }\n  return `${conversationId}:${threadTs || messageId}`;\n}\n\nexport function inferConversationKind(\n  platform: ChatPlatform,\n  conversationId: string,\n): ConversationKind {\n  if (platform === \"slack\") {\n    return conversationId.startsWith(\"D\") ? \"direct\" : \"shared\";\n  }\n\n  if (platform === \"telegram\") {\n    return conversationId.startsWith(\"-\") ? \"shared\" : \"direct\";\n  }\n\n  if (platform === \"discord\") {\n    return conversationId.startsWith(\"DM\") ? \"direct\" : \"shared\";\n  }\n\n  return \"shared\";\n}\n"]}

package/dist/session-store.d.ts

@@ -1,6 +1,25 @@
-import { SessionManager } from "@mariozechner/pi-coding-agent";
+import { SessionManager } from "@earendil-works/pi-coding-agent";
+export declare class ThreadRootNotFoundError extends Error {
+    constructor(sessionFile: string);
+}
+export interface ThreadRootMessage {
+    text?: string;
+    userName?: string;
+    user?: string;
+    loggedAt?: number;
+}
+export interface ResolvedSessionScope {
+    sessionDir: string;
+    contextFile: string;
+    threadRootMessage: ThreadRootMessage | null;
+}
+export interface ResolveGenericSessionScopeOptions {
+    conversationDir: string;
+    sessionKey: string;
+    cwd?: string;
+}
 /**
- * Returns the shared session directory for a channel.
+ * Returns the shared session directory for a conversation.
  * Channel sessions use a current pointer within this directory.
  * Thread sessions are stored as fixed files within the same directory.
  */
@@ -29,11 +48,15 @@ export declare function extractSessionSuffix(sessionKey: string): string;
 /**
  * Creates an empty timestamped file and updates the "current" pointer.
  * Used only by tests for placeholder-file scenarios.
+ *
+ * Order matters: write the session file first, then atomic-rename the pointer
+ * last so a crash mid-create never leaves "current" pointing at a missing file.
  */
 export declare function createNewSessionFile(sessionDir: string): string;
 /**
  * Creates a new persistent session file with a proper SessionManager header and cwd.
- * Also updates the "current" pointer.
+ * Also updates the "current" pointer. Header is written before the pointer flips so a
+ * partial create cannot leave "current" pointing at a missing file.
  */
 export declare function createManagedSessionFile(sessionDir: string, cwd: string): string;
 /**
@@ -49,6 +72,12 @@ export declare function createManagedSessionFileAtPath(sessionFile: string, cwd:
  * Returns the fixed session file path for a Slack thread.
  */
 export declare function getThreadSessionFile(channelDir: string, sessionKey: string): string;
+/**
+ * Resolve the default session scope for platforms without Slack-style branch forking.
+ * Top-level/private sessions use the conversation's current pointer. Threaded or
+ * per-message sessions use a fixed file derived from the session key suffix.
+ */
+export declare function resolveGenericSessionScope(options: ResolveGenericSessionScopeOptions): ResolvedSessionScope;
 /**
  * Try to resolve an existing current session file.
  * Returns null if no current pointer exists or the pointed file has no valid session header.
@@ -69,4 +98,6 @@ export declare function resolveChannelSessionFile(channelDir: string): string |
  * The resulting file keeps forkFrom's distinct session/header metadata.
  */
 export declare function forkThreadSessionFile(sourceSessionFile: string, targetSessionFile: string, cwd: string): string;
+export declare function createThreadSessionFileFromRootMessage(targetSessionFile: string, cwd: string, rootMessage: ThreadRootMessage, parentSession?: string): string;
+export declare function forkThreadSessionFileFromRootMessage(sourceSessionFile: string, targetSessionFile: string, cwd: string, rootMessage: ThreadRootMessage): string;
 //# sourceMappingURL=session-store.d.ts.map

package/dist/session-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-store.d.ts","sourceRoot":"","sources":["../src/session-store.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE/D;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAI7D;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAIjF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAG9D;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAS/D;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAQhF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,GACV,cAAc,CAKhB;AAQD;;GAEG;AACH,wBAAgB,8BAA8B,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAGvF;AAeD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAEnF;AA6BD;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAU1E;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE1E;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG3E;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,iBAAiB,EAAE,MAAM,EACzB,iBAAiB,EAAE,MAAM,EACzB,GAAG,EAAE,MAAM,GACV,MAAM,CAWR","sourcesContent":["import { randomUUID } from \"crypto\";\nimport { existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from \"fs\";\nimport { join } from \"path\";\nimport { SessionManager } from \"@mariozechner/pi-coding-agent\";\n\n/**\n * Returns the shared session directory for a channel.\n * Channel sessions use a current pointer within this directory.\n * Thread sessions are stored as fixed files within the same directory.\n */\nexport function getChannelSessionDir(channelDir: string): string {\n  return join(channelDir, \"sessions\");\n}\n\n/**\n * Resolves the current active session file for a session directory.\n * Reads the \"current\" pointer file; creates a new session if none exists\n * or the pointed-to file is missing.\n */\nexport function resolveSessionFile(sessionDir: string): string {\n  const existing = tryResolveCurrentSession(sessionDir);\n  if (existing) return existing;\n  return createNewSessionFile(sessionDir);\n}\n\n/**\n * Resolve the current active session file for a session directory.\n * Creates a fully initialized persistent session with the provided cwd when none exists.\n */\nexport function resolveManagedSessionFile(sessionDir: string, cwd: string): string {\n  const existingPath = getCurrentSessionPath(sessionDir);\n  if (existingPath) return existingPath;\n  return createManagedSessionFile(sessionDir, cwd);\n}\n\n/**\n * Extracts the short UUID from a session file path.\n * e.g. \"2026-04-05T00-00_7b54cf90.jsonl\" → \"7b54cf90\"\n */\nexport function extractSessionUuid(sessionFile: string): string {\n  const base = sessionFile.split(\"/\").pop() ?? sessionFile;\n  return base.replace(\".jsonl\", \"\").split(\"_\").pop() ?? base;\n}\n\n/**\n * Extracts the thread/suffix part of a session key.\n * \"channelId:threadId\" → \"threadId\", \"channelId\" → \"channelId\"\n */\nexport function extractSessionSuffix(sessionKey: string): string {\n  return sessionKey.includes(\":\") ? sessionKey.split(\":\").pop()! : sessionKey;\n}\n\n/**\n * Creates an empty timestamped file and updates the \"current\" pointer.\n * Used only by tests for placeholder-file scenarios.\n */\nexport function createNewSessionFile(sessionDir: string): string {\n  mkdirSync(sessionDir, { recursive: true });\n  const timestamp = new Date().toISOString().replace(/[:.]/g, \"-\");\n  const uuid = randomUUID().slice(0, 8);\n  const filename = `${timestamp}_${uuid}.jsonl`;\n  const filePath = join(sessionDir, filename);\n  writeFileSync(join(sessionDir, \"current\"), filename, \"utf-8\");\n  writeFileSync(filePath, \"\", \"utf-8\");\n  return filePath;\n}\n\n/**\n * Creates a new persistent session file with a proper SessionManager header and cwd.\n * Also updates the \"current\" pointer.\n */\nexport function createManagedSessionFile(sessionDir: string, cwd: string): string {\n  mkdirSync(sessionDir, { recursive: true });\n  const timestamp = new Date().toISOString().replace(/[:.]/g, \"-\");\n  const sessionId = randomUUID();\n  const sessionFile = join(sessionDir, `${timestamp}_${sessionId.slice(0, 8)}.jsonl`);\n  writeSessionHeader(sessionFile, cwd, sessionId);\n  setCurrentPointer(sessionDir, sessionFile);\n  return sessionFile;\n}\n\n/**\n * Open a session file with an explicit cwd, even if the file does not exist yet.\n * This avoids SessionManager.open() falling back to process.cwd() for fresh sessions.\n */\nexport function openManagedSession(\n  sessionFile: string,\n  sessionDir: string,\n  cwd: string,\n): SessionManager {\n  const SessionManagerCtor = SessionManager as unknown as {\n    new (cwd: string, sessionDir: string, sessionFile: string, persist: boolean): SessionManager;\n  };\n  return new SessionManagerCtor(cwd, sessionDir, sessionFile, true);\n}\n\nfunction setCurrentPointer(sessionDir: string, sessionFilePath: string): void {\n  const filename = sessionFilePath.split(\"/\").pop()!;\n  mkdirSync(sessionDir, { recursive: true });\n  writeFileSync(join(sessionDir, \"current\"), filename, \"utf-8\");\n}\n\n/**\n * Creates or overwrites a fixed-path session file with a valid session header.\n */\nexport function createManagedSessionFileAtPath(sessionFile: string, cwd: string): string {\n  writeSessionHeader(sessionFile, cwd);\n  return sessionFile;\n}\n\nfunction writeSessionHeader(sessionFile: string, cwd: string, sessionId = randomUUID()): void {\n  const sessionDir = getFileDir(sessionFile);\n  mkdirSync(sessionDir, { recursive: true });\n  const header = {\n    type: \"session\",\n    version: 3,\n    id: sessionId,\n    timestamp: new Date().toISOString(),\n    cwd,\n  };\n  writeFileSync(sessionFile, `${JSON.stringify(header)}\\n`, \"utf-8\");\n}\n\n/**\n * Returns the fixed session file path for a Slack thread.\n */\nexport function getThreadSessionFile(channelDir: string, sessionKey: string): string {\n  return join(getChannelSessionDir(channelDir), `${extractSessionSuffix(sessionKey)}.jsonl`);\n}\n\nfunction hasSessionHeader(sessionFile: string): boolean {\n  try {\n    const lines = readFileSync(sessionFile, \"utf-8\").split(\"\\n\");\n    for (const line of lines) {\n      const trimmed = line.trim();\n      if (!trimmed) continue;\n      const entry = JSON.parse(trimmed) as { type?: string };\n      return entry.type === \"session\";\n    }\n  } catch {\n    return false;\n  }\n  return false;\n}\n\nfunction getFileDir(sessionFile: string): string {\n  return sessionFile.substring(0, sessionFile.lastIndexOf(\"/\"));\n}\n\nfunction getCurrentSessionPath(sessionDir: string): string | null {\n  const pointerFile = join(sessionDir, \"current\");\n  if (!existsSync(pointerFile)) return null;\n  const filename = readFileSync(pointerFile, \"utf-8\").trim();\n  if (!filename) return null;\n  return join(sessionDir, filename);\n}\n\n/**\n * Try to resolve an existing current session file.\n * Returns null if no current pointer exists or the pointed file has no valid session header.\n */\nexport function tryResolveCurrentSession(sessionDir: string): string | null {\n  const currentSessionPath = getCurrentSessionPath(sessionDir);\n  if (\n    currentSessionPath &&\n    existsSync(currentSessionPath) &&\n    hasSessionHeader(currentSessionPath)\n  ) {\n    return currentSessionPath;\n  }\n  return null;\n}\n\n/**\n * Try to resolve an existing thread session file.\n * Returns the file path if found, or null if no valid thread session exists yet.\n */\nexport function tryResolveThreadSession(sessionFile: string): string | null {\n  return existsSync(sessionFile) && hasSessionHeader(sessionFile) ? sessionFile : null;\n}\n\n/**\n * Resolve the channel's current session file path (for fork source).\n * Returns null if no channel session exists.\n */\nexport function resolveChannelSessionFile(channelDir: string): string | null {\n  const channelSessionDir = getChannelSessionDir(channelDir);\n  return tryResolveCurrentSession(channelSessionDir);\n}\n\n/**\n * Fork a channel session into a fixed thread-session path.\n * The resulting file keeps forkFrom's distinct session/header metadata.\n */\nexport function forkThreadSessionFile(\n  sourceSessionFile: string,\n  targetSessionFile: string,\n  cwd: string,\n): string {\n  const sessionDir = getFileDir(targetSessionFile);\n  mkdirSync(sessionDir, { recursive: true });\n  const forked = SessionManager.forkFrom(sourceSessionFile, cwd, sessionDir);\n  const forkedFile = forked.getSessionFile();\n  if (!forkedFile) {\n    throw new Error(`Failed to fork session from ${sourceSessionFile}`);\n  }\n  rmSync(targetSessionFile, { force: true });\n  renameSync(forkedFile, targetSessionFile);\n  return targetSessionFile;\n}\n"]}
+{"version":3,"file":"session-store.d.ts","sourceRoot":"","sources":["../src/session-store.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAIjE,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,YAAY,WAAW,EAAE,MAAM,EAG9B;CACF;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,iBAAiB,GAAG,IAAI,CAAC;CAC7C;AAED,MAAM,WAAW,iCAAiC;IAChD,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAcD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAI7D;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAIjF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAG9D;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAG/D;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAS/D;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAQhF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,GACV,cAAc,CAShB;AAQD;;GAEG;AACH,wBAAgB,8BAA8B,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAGvF;AAeD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAEnF;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,iCAAiC,GACzC,oBAAoB,CAoBtB;AAuID;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI1E;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE1E;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE3E;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,iBAAiB,EAAE,MAAM,EACzB,iBAAiB,EAAE,MAAM,EACzB,GAAG,EAAE,MAAM,GACV,MAAM,CAWR;AAED,wBAAgB,sCAAsC,CACpD,iBAAiB,EAAE,MAAM,EACzB,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,iBAAiB,EAC9B,aAAa,CAAC,EAAE,MAAM,GACrB,MAAM,CAiCR;AAED,wBAAgB,oCAAoC,CAClD,iBAAiB,EAAE,MAAM,EACzB,iBAAiB,EAAE,MAAM,EACzB,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,iBAAiB,GAC7B,MAAM,CAqBR","sourcesContent":["import { randomUUID } from \"crypto\";\nimport { existsSync, mkdirSync, renameSync, rmSync } from \"fs\";\nimport { join } from \"path\";\nimport { SessionManager } from \"@earendil-works/pi-coding-agent\";\nimport { isRecord, parseJsonValue, readTextFileIfExists } from \"./file-guards.js\";\nimport { atomicWritePrivateFile } from \"./fs-atomic.js\";\n\nexport class ThreadRootNotFoundError extends Error {\n  constructor(sessionFile: string) {\n    super(`Thread root message not found in source session: ${sessionFile}`);\n    this.name = \"ThreadRootNotFoundError\";\n  }\n}\n\nexport interface ThreadRootMessage {\n  text?: string;\n  userName?: string;\n  user?: string;\n  loggedAt?: number;\n}\n\nexport interface ResolvedSessionScope {\n  sessionDir: string;\n  contextFile: string;\n  threadRootMessage: ThreadRootMessage | null;\n}\n\nexport interface ResolveGenericSessionScopeOptions {\n  conversationDir: string;\n  sessionKey: string;\n  cwd?: string;\n}\n\ninterface SessionMessageEntryLike {\n  type: string;\n  id: string;\n  parentId: string | null;\n  timestamp: string;\n  message?: {\n    role?: string;\n    timestamp?: number;\n    content?: Array<{ type?: string; text?: string }> | string;\n  };\n}\n\n/**\n * Returns the shared session directory for a conversation.\n * Channel sessions use a current pointer within this directory.\n * Thread sessions are stored as fixed files within the same directory.\n */\nexport function getChannelSessionDir(channelDir: string): string {\n  return join(channelDir, \"sessions\");\n}\n\n/**\n * Resolves the current active session file for a session directory.\n * Reads the \"current\" pointer file; creates a new session if none exists\n * or the pointed-to file is missing.\n */\nexport function resolveSessionFile(sessionDir: string): string {\n  const existing = tryResolveCurrentSession(sessionDir);\n  if (existing) return existing;\n  return createNewSessionFile(sessionDir);\n}\n\n/**\n * Resolve the current active session file for a session directory.\n * Creates a fully initialized persistent session with the provided cwd when none exists.\n */\nexport function resolveManagedSessionFile(sessionDir: string, cwd: string): string {\n  const existingPath = getCurrentSessionPath(sessionDir);\n  if (existingPath) return existingPath;\n  return createManagedSessionFile(sessionDir, cwd);\n}\n\n/**\n * Extracts the short UUID from a session file path.\n * e.g. \"2026-04-05T00-00_7b54cf90.jsonl\" → \"7b54cf90\"\n */\nexport function extractSessionUuid(sessionFile: string): string {\n  const base = sessionFile.split(\"/\").pop() ?? sessionFile;\n  return base.replace(\".jsonl\", \"\").split(\"_\").pop() ?? base;\n}\n\n/**\n * Extracts the thread/suffix part of a session key.\n * \"channelId:threadId\" → \"threadId\", \"channelId\" → \"channelId\"\n */\nexport function extractSessionSuffix(sessionKey: string): string {\n  const parts = sessionKey.split(\":\");\n  return parts.length > 1 ? parts[parts.length - 1] : sessionKey;\n}\n\n/**\n * Creates an empty timestamped file and updates the \"current\" pointer.\n * Used only by tests for placeholder-file scenarios.\n *\n * Order matters: write the session file first, then atomic-rename the pointer\n * last so a crash mid-create never leaves \"current\" pointing at a missing file.\n */\nexport function createNewSessionFile(sessionDir: string): string {\n  mkdirSync(sessionDir, { recursive: true });\n  const timestamp = new Date().toISOString().replace(/[:.]/g, \"-\");\n  const uuid = randomUUID().slice(0, 8);\n  const filename = `${timestamp}_${uuid}.jsonl`;\n  const filePath = join(sessionDir, filename);\n  atomicWritePrivateFile(filePath, \"\");\n  atomicWritePrivateFile(join(sessionDir, \"current\"), filename);\n  return filePath;\n}\n\n/**\n * Creates a new persistent session file with a proper SessionManager header and cwd.\n * Also updates the \"current\" pointer. Header is written before the pointer flips so a\n * partial create cannot leave \"current\" pointing at a missing file.\n */\nexport function createManagedSessionFile(sessionDir: string, cwd: string): string {\n  mkdirSync(sessionDir, { recursive: true });\n  const timestamp = new Date().toISOString().replace(/[:.]/g, \"-\");\n  const sessionId = randomUUID();\n  const sessionFile = join(sessionDir, `${timestamp}_${sessionId.slice(0, 8)}.jsonl`);\n  writeSessionHeader(sessionFile, cwd, sessionId);\n  setCurrentPointer(sessionDir, sessionFile);\n  return sessionFile;\n}\n\n/**\n * Open a session file with an explicit cwd, even if the file does not exist yet.\n * This avoids SessionManager.open() falling back to process.cwd() for fresh sessions.\n */\nexport function openManagedSession(\n  sessionFile: string,\n  sessionDir: string,\n  cwd: string,\n): SessionManager {\n  if (shouldRecreatePreinitializedSession(sessionFile)) {\n    rmSync(sessionFile, { force: true });\n  }\n\n  const SessionManagerCtor = SessionManager as unknown as {\n    new (cwd: string, sessionDir: string, sessionFile: string, persist: boolean): SessionManager;\n  };\n  return new SessionManagerCtor(cwd, sessionDir, sessionFile, true);\n}\n\nfunction setCurrentPointer(sessionDir: string, sessionFilePath: string): void {\n  const filename = sessionFilePath.split(\"/\").pop()!;\n  mkdirSync(sessionDir, { recursive: true });\n  atomicWritePrivateFile(join(sessionDir, \"current\"), filename);\n}\n\n/**\n * Creates or overwrites a fixed-path session file with a valid session header.\n */\nexport function createManagedSessionFileAtPath(sessionFile: string, cwd: string): string {\n  writeSessionHeader(sessionFile, cwd);\n  return sessionFile;\n}\n\nfunction writeSessionHeader(sessionFile: string, cwd: string, sessionId = randomUUID()): void {\n  const sessionDir = getFileDir(sessionFile);\n  mkdirSync(sessionDir, { recursive: true });\n  const header = {\n    type: \"session\",\n    version: 3,\n    id: sessionId,\n    timestamp: new Date().toISOString(),\n    cwd,\n  };\n  atomicWritePrivateFile(sessionFile, `${JSON.stringify(header)}\\n`);\n}\n\n/**\n * Returns the fixed session file path for a Slack thread.\n */\nexport function getThreadSessionFile(channelDir: string, sessionKey: string): string {\n  return join(getChannelSessionDir(channelDir), `${extractSessionSuffix(sessionKey)}.jsonl`);\n}\n\n/**\n * Resolve the default session scope for platforms without Slack-style branch forking.\n * Top-level/private sessions use the conversation's current pointer. Threaded or\n * per-message sessions use a fixed file derived from the session key suffix.\n */\nexport function resolveGenericSessionScope(\n  options: ResolveGenericSessionScopeOptions,\n): ResolvedSessionScope {\n  const { conversationDir, sessionKey } = options;\n  const cwd = options.cwd ?? conversationDir;\n  const sessionDir = getChannelSessionDir(conversationDir);\n\n  if (!sessionKey.includes(\":\")) {\n    return {\n      sessionDir,\n      contextFile: resolveManagedSessionFile(sessionDir, cwd),\n      threadRootMessage: null,\n    };\n  }\n\n  const threadFile = getThreadSessionFile(conversationDir, sessionKey);\n  return {\n    sessionDir,\n    contextFile:\n      tryResolveThreadSession(threadFile) ?? createManagedSessionFileAtPath(threadFile, cwd),\n    threadRootMessage: null,\n  };\n}\n\nfunction hasSessionHeader(sessionFile: string): boolean {\n  try {\n    const raw = readTextFileIfExists(sessionFile);\n    if (raw === undefined) return false;\n    const lines = raw.split(\"\\n\");\n    for (const line of lines) {\n      const trimmed = line.trim();\n      if (!trimmed) continue;\n      const entry = parseJsonValue(\n        trimmed,\n        (value): value is { type?: string } => isRecord(value),\n        (detail) => (detail === \"unexpected JSON shape\" ? \"expected a JSON object\" : detail),\n      );\n      return entry.type === \"session\";\n    }\n  } catch {\n    return false;\n  }\n  return false;\n}\n\nfunction shouldRecreatePreinitializedSession(sessionFile: string): boolean {\n  try {\n    const raw = readTextFileIfExists(sessionFile);\n    if (raw === undefined) return false;\n    const entries = raw\n      .split(\"\\n\")\n      .map((line) => line.trim())\n      .filter(Boolean)\n      .map((line) =>\n        parseJsonValue(\n          line,\n          (value): value is { type?: string } => isRecord(value),\n          (detail) => (detail === \"unexpected JSON shape\" ? \"expected a JSON object\" : detail),\n        ),\n      );\n\n    return entries.length === 1 && entries[0]?.type === \"session\";\n  } catch {\n    return false;\n  }\n}\n\nfunction getFileDir(sessionFile: string): string {\n  return sessionFile.substring(0, sessionFile.lastIndexOf(\"/\"));\n}\n\nfunction resolveThreadSnapshotEntries(\n  sourceSessionFile: string,\n  rootMessage: ThreadRootMessage,\n): SessionMessageEntryLike[] | null {\n  const targetText = buildComparableRootMessageText(rootMessage);\n  if (!targetText) return null;\n\n  const entries = SessionManager.open(sourceSessionFile).getEntries() as SessionMessageEntryLike[];\n  const matchIndex = findRootMessageIndex(entries, targetText, rootMessage.loggedAt);\n  if (matchIndex === -1) return null;\n\n  const nextTopLevelUserIndex = entries.findIndex(\n    (entry, index) => index > matchIndex && isUserMessageEntry(entry),\n  );\n  const endIndex = nextTopLevelUserIndex === -1 ? entries.length : nextTopLevelUserIndex;\n  return entries.slice(0, endIndex);\n}\n\nfunction findRootMessageIndex(\n  entries: SessionMessageEntryLike[],\n  targetText: string,\n  loggedAt?: number,\n): number {\n  for (let i = 0; i < entries.length; i++) {\n    const entry = entries[i];\n    if (!isUserMessageEntry(entry)) continue;\n\n    const comparableText = normalizeComparableUserText(getMessageText(entry));\n    if (comparableText !== targetText) continue;\n\n    const messageTimestamp = entry.message?.timestamp;\n    if (\n      loggedAt !== undefined &&\n      typeof messageTimestamp === \"number\" &&\n      messageTimestamp < loggedAt\n    ) {\n      continue;\n    }\n\n    return i;\n  }\n\n  return -1;\n}\n\nfunction isUserMessageEntry(entry: SessionMessageEntryLike): boolean {\n  return entry.type === \"message\" && entry.message?.role === \"user\";\n}\n\nfunction getMessageText(entry: SessionMessageEntryLike): string {\n  const content = entry.message?.content;\n  if (typeof content === \"string\") return content;\n  if (!Array.isArray(content)) return \"\";\n\n  return content\n    .filter((part): part is { type?: string; text?: string } => part.type === \"text\")\n    .map((part) => part.text ?? \"\")\n    .join(\"\\n\\n\");\n}\n\nfunction buildComparableRootMessageText(rootMessage: ThreadRootMessage): string | null {\n  const userLabel = rootMessage.userName || rootMessage.user || \"unknown\";\n  const text = rootMessage.text?.trim();\n  if (!text) return null;\n  return normalizeComparableUserText(`[${userLabel}]: ${text}`);\n}\n\nfunction stripSlackAttachmentBlock(text: string): string {\n  return text.replace(/\\n*<slack_attachments>\\n[\\s\\S]*?\\n<\\/slack_attachments>\\s*$/g, \"\");\n}\n\nfunction normalizeComparableUserText(text: string): string {\n  const withoutTimestamp = text.replace(\n    /^\\[[0-9]{4}-[0-9]{2}-[0-9]{2} [0-9]{2}:[0-9]{2}:[0-9]{2}[+-][0-9]{2}:[0-9]{2}\\]\\s+(?=\\[[^\\]]+\\](?:\\s+\\[in-thread:[^\\]]+\\])?:\\s)/,\n    \"\",\n  );\n  return stripSlackAttachmentBlock(withoutTimestamp).trim();\n}\n\nfunction getCurrentSessionPath(sessionDir: string): string | null {\n  const pointerFile = join(sessionDir, \"current\");\n  const filename = readTextFileIfExists(pointerFile)?.trim();\n  if (!filename) return null;\n  return join(sessionDir, filename);\n}\n\n/**\n * Try to resolve an existing current session file.\n * Returns null if no current pointer exists or the pointed file has no valid session header.\n */\nexport function tryResolveCurrentSession(sessionDir: string): string | null {\n  const fullPath = getCurrentSessionPath(sessionDir);\n  if (fullPath && existsSync(fullPath) && hasSessionHeader(fullPath)) return fullPath;\n  return null;\n}\n\n/**\n * Try to resolve an existing thread session file.\n * Returns the file path if found, or null if no valid thread session exists yet.\n */\nexport function tryResolveThreadSession(sessionFile: string): string | null {\n  return existsSync(sessionFile) && hasSessionHeader(sessionFile) ? sessionFile : null;\n}\n\n/**\n * Resolve the channel's current session file path (for fork source).\n * Returns null if no channel session exists.\n */\nexport function resolveChannelSessionFile(channelDir: string): string | null {\n  return tryResolveCurrentSession(getChannelSessionDir(channelDir));\n}\n\n/**\n * Fork a channel session into a fixed thread-session path.\n * The resulting file keeps forkFrom's distinct session/header metadata.\n */\nexport function forkThreadSessionFile(\n  sourceSessionFile: string,\n  targetSessionFile: string,\n  cwd: string,\n): string {\n  const sessionDir = getFileDir(targetSessionFile);\n  mkdirSync(sessionDir, { recursive: true });\n  const forked = SessionManager.forkFrom(sourceSessionFile, cwd, sessionDir);\n  const forkedFile = forked.getSessionFile();\n  if (!forkedFile) {\n    throw new Error(`Failed to fork session from ${sourceSessionFile}`);\n  }\n  rmSync(targetSessionFile, { force: true });\n  renameSync(forkedFile, targetSessionFile);\n  return targetSessionFile;\n}\n\nexport function createThreadSessionFileFromRootMessage(\n  targetSessionFile: string,\n  cwd: string,\n  rootMessage: ThreadRootMessage,\n  parentSession?: string,\n): string {\n  const sessionDir = getFileDir(targetSessionFile);\n  mkdirSync(sessionDir, { recursive: true });\n  rmSync(targetSessionFile, { force: true });\n\n  const header = {\n    type: \"session\",\n    version: 3,\n    id: randomUUID(),\n    timestamp: new Date().toISOString(),\n    cwd,\n    ...(parentSession ? { parentSession } : {}),\n  };\n  const rootText = buildComparableRootMessageText(rootMessage);\n  if (!rootText) {\n    atomicWritePrivateFile(targetSessionFile, `${JSON.stringify(header)}\\n`);\n    return targetSessionFile;\n  }\n\n  const rootEntry = {\n    type: \"message\",\n    id: randomUUID().slice(0, 8),\n    parentId: null,\n    timestamp: new Date().toISOString(),\n    message: {\n      role: \"user\",\n      content: [{ type: \"text\", text: rootText }],\n      ...(rootMessage.loggedAt !== undefined ? { timestamp: rootMessage.loggedAt } : {}),\n    },\n  };\n  const content = [header, rootEntry].map((entry) => JSON.stringify(entry)).join(\"\\n\");\n  atomicWritePrivateFile(targetSessionFile, `${content}\\n`);\n  return targetSessionFile;\n}\n\nexport function forkThreadSessionFileFromRootMessage(\n  sourceSessionFile: string,\n  targetSessionFile: string,\n  cwd: string,\n  rootMessage: ThreadRootMessage,\n): string {\n  const snapshotEntries = resolveThreadSnapshotEntries(sourceSessionFile, rootMessage);\n  if (!snapshotEntries) {\n    throw new ThreadRootNotFoundError(sourceSessionFile);\n  }\n\n  const sessionDir = getFileDir(targetSessionFile);\n  mkdirSync(sessionDir, { recursive: true });\n  rmSync(targetSessionFile, { force: true });\n\n  const header = {\n    type: \"session\",\n    version: 3,\n    id: randomUUID(),\n    timestamp: new Date().toISOString(),\n    cwd,\n    parentSession: sourceSessionFile,\n  };\n  const content = [header, ...snapshotEntries].map((entry) => JSON.stringify(entry)).join(\"\\n\");\n  atomicWritePrivateFile(targetSessionFile, `${content}\\n`);\n  return targetSessionFile;\n}\n"]}