@geminixiang/mama 0.2.0-beta.1 → 0.2.0-beta.2

package/dist/ui-copy.js.map

@@ -1 +1 @@
-{"version":3,"file":"ui-copy.js","sourceRoot":"","sources":["../src/ui-copy.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC;AAInC,SAAS,mBAAmB,CAAC,MAAsB;IACjD,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,iBAAiB,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC;IACtE,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,sBAAsB,CAAC,YAAoB;IAClD,OAAO,YAAY,KAAK,UAAU,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CAAC,YAAoB,EAAE,IAAY;IACtD,OAAO,sBAAsB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC;AACnE,CAAC;AAED,SAAS,UAAU,CAAC,YAAoB,EAAE,IAAY;IACpD,OAAO,sBAAsB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAsB;IACzD,OAAO,YAAY,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,OAAO,YAAY,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAAsB,EACtB,WAAmB,EACnB,OAA8B;IAE9B,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,UAAU,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IACtD,MAAM,MAAM,GACV,OAAO,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,kBAAkB,CAAC;IACvF,OAAO,YAAY,CAAC,YAAY,EAAE,GAAG,MAAM,SAAS,OAAO,aAAa,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAsB,EAAE,UAAkB;IAC3E,OAAO,YAAY,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,oBAAoB,UAAU,GAAG,CAAC,CAAC;AACtF,CAAC","sourcesContent":["import type { Bot, PlatformInfo } from \"./adapter.js\";\n\nexport const PRODUCT_NAME = \"mama\";\n\ntype PlatformSource = Bot | PlatformInfo | string;\n\nfunction resolvePlatformName(source: PlatformSource): string {\n  if (typeof source === \"string\") return source;\n  if (\"getPlatformInfo\" in source) return source.getPlatformInfo().name;\n  return source.name;\n}\n\nfunction supportsHtmlFormatting(platformName: string): boolean {\n  return platformName === \"telegram\";\n}\n\nfunction formatItalic(platformName: string, text: string): string {\n  return supportsHtmlFormatting(platformName) ? text : `_${text}_`;\n}\n\nfunction formatCode(platformName: string, text: string): string {\n  return supportsHtmlFormatting(platformName) ? `<code>${text}</code>` : `\\`${text}\\``;\n}\n\nexport function formatNothingRunning(source: PlatformSource): string {\n  return formatItalic(resolvePlatformName(source), \"Nothing running.\");\n}\n\nexport function formatStopping(source: PlatformSource): string {\n  return formatItalic(resolvePlatformName(source), \"Stopping…\");\n}\n\nexport function formatAlreadyWorking(\n  source: PlatformSource,\n  stopCommand: string,\n  options?: { scope?: \"thread\" },\n): string {\n  const platformName = resolvePlatformName(source);\n  const command = formatCode(platformName, stopCommand);\n  const prefix =\n    options?.scope === \"thread\" ? \"Already working in this thread.\" : \"Already working.\";\n  return formatItalic(platformName, `${prefix} Send ${command} to cancel.`);\n}\n\nexport function formatForceStopped(source: PlatformSource, actorLabel: string): string {\n  return formatItalic(resolvePlatformName(source), `Force stopped by ${actorLabel}.`);\n}\n"]}
+{"version":3,"file":"ui-copy.js","sourceRoot":"","sources":["../src/ui-copy.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC;AAInC,SAAS,mBAAmB,CAAC,MAAsB;IACjD,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,iBAAiB,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC;IACtE,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,sBAAsB,CAAC,YAAoB;IAClD,OAAO,YAAY,KAAK,UAAU,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CAAC,YAAoB,EAAE,IAAY;IACtD,OAAO,sBAAsB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC;AACnE,CAAC;AAED,SAAS,UAAU,CAAC,YAAoB,EAAE,IAAY;IACpD,OAAO,sBAAsB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAsB;IACzD,OAAO,YAAY,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,OAAO,YAAY,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAsB;IAClD,OAAO,YAAY,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAAsB,EACtB,WAAmB,EACnB,OAA8B;IAE9B,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,UAAU,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IACtD,MAAM,MAAM,GACV,OAAO,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,kBAAkB,CAAC;IACvF,OAAO,YAAY,CAAC,YAAY,EAAE,GAAG,MAAM,SAAS,OAAO,aAAa,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAsB,EAAE,UAAkB;IAC3E,OAAO,YAAY,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,oBAAoB,UAAU,GAAG,CAAC,CAAC;AACtF,CAAC","sourcesContent":["import type { Bot, PlatformInfo } from \"./adapter.js\";\n\nexport const PRODUCT_NAME = \"mama\";\n\ntype PlatformSource = Bot | PlatformInfo | string;\n\nfunction resolvePlatformName(source: PlatformSource): string {\n  if (typeof source === \"string\") return source;\n  if (\"getPlatformInfo\" in source) return source.getPlatformInfo().name;\n  return source.name;\n}\n\nfunction supportsHtmlFormatting(platformName: string): boolean {\n  return platformName === \"telegram\";\n}\n\nfunction formatItalic(platformName: string, text: string): string {\n  return supportsHtmlFormatting(platformName) ? text : `_${text}_`;\n}\n\nfunction formatCode(platformName: string, text: string): string {\n  return supportsHtmlFormatting(platformName) ? `<code>${text}</code>` : `\\`${text}\\``;\n}\n\nexport function formatNothingRunning(source: PlatformSource): string {\n  return formatItalic(resolvePlatformName(source), \"Nothing running.\");\n}\n\nexport function formatStopping(source: PlatformSource): string {\n  return formatItalic(resolvePlatformName(source), \"Stopping…\");\n}\n\nexport function formatStopped(source: PlatformSource): string {\n  return formatItalic(resolvePlatformName(source), \"Stopped.\");\n}\n\nexport function formatAlreadyWorking(\n  source: PlatformSource,\n  stopCommand: string,\n  options?: { scope?: \"thread\" },\n): string {\n  const platformName = resolvePlatformName(source);\n  const command = formatCode(platformName, stopCommand);\n  const prefix =\n    options?.scope === \"thread\" ? \"Already working in this thread.\" : \"Already working.\";\n  return formatItalic(platformName, `${prefix} Send ${command} to cancel.`);\n}\n\nexport function formatForceStopped(source: PlatformSource, actorLabel: string): string {\n  return formatItalic(resolvePlatformName(source), `Force stopped by ${actorLabel}.`);\n}\n"]}

package/dist/vault-routing.d.ts

@@ -2,9 +2,8 @@ import type { UserBindingStore } from "./bindings.js";
 import type { SandboxConfig } from "./sandbox.js";
 import type { VaultEntry, VaultManager } from "./vault.js";
 export declare function resolveActorVaultKey(baseConfig: SandboxConfig, vaultManager: Pick<VaultManager, "hasEntry">, bindingStore: Pick<UserBindingStore, "resolve"> | undefined, platform: string, userId: string): string;
-export declare function createManagedVaultEntry(platform: string, userId: string, vaultKey: string, withImageSandbox: boolean): VaultEntry;
+export declare function createManagedVaultEntry(platform: string, userId: string, vaultKey: string, withImageSandbox?: boolean): VaultEntry;
 export declare function containerSharedVaultId(containerName: string): string;
 export declare function createSharedContainerVaultEntry(containerName: string): VaultEntry;
 export declare function ensureSandboxVaultEntry(baseConfig: SandboxConfig, vaultManager: Pick<VaultManager, "addEntry" | "ensureImageSandboxEntry">, platform: string, userId: string, vaultKey: string): void;
-export declare function ensureImageSandboxVault(baseConfig: SandboxConfig, vaultManager: Pick<VaultManager, "ensureImageSandboxEntry">, platform: string, userId: string, vaultKey: string): void;
 //# sourceMappingURL=vault-routing.d.ts.map

package/dist/vault-routing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vault-routing.d.ts","sourceRoot":"","sources":["../src/vault-routing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE3D,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,aAAa,EACzB,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,EAC5C,YAAY,EAAE,IAAI,CAAC,gBAAgB,EAAE,SAAS,CAAC,GAAG,SAAS,EAC3D,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,MAAM,CAeR;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,gBAAgB,EAAE,OAAO,GACxB,UAAU,CAaZ;AAED,wBAAgB,sBAAsB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED,wBAAgB,+BAA+B,CAAC,aAAa,EAAE,MAAM,GAAG,UAAU,CAIjF;AAED,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,aAAa,EACzB,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,UAAU,GAAG,yBAAyB,CAAC,EACxE,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,IAAI,CAYN;AAED,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,aAAa,EACzB,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,yBAAyB,CAAC,EAC3D,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,IAAI,CASN","sourcesContent":["import type { UserBindingStore } from \"./bindings.js\";\nimport { DockerContainerManager } from \"./provisioner.js\";\nimport type { SandboxConfig } from \"./sandbox.js\";\nimport type { VaultEntry, VaultManager } from \"./vault.js\";\n\nexport function resolveActorVaultKey(\n  baseConfig: SandboxConfig,\n  vaultManager: Pick<VaultManager, \"hasEntry\">,\n  bindingStore: Pick<UserBindingStore, \"resolve\"> | undefined,\n  platform: string,\n  userId: string,\n): string {\n  if (baseConfig.type === \"container\") {\n    return containerSharedVaultId(baseConfig.container);\n  }\n\n  const binding = bindingStore?.resolve(platform, userId);\n  if (binding) {\n    return binding.vaultId;\n  }\n\n  if (vaultManager.hasEntry(userId)) {\n    return userId;\n  }\n\n  return baseConfig.type === \"image\" ? DockerContainerManager.vaultId(platform, userId) : userId;\n}\n\nexport function createManagedVaultEntry(\n  platform: string,\n  userId: string,\n  vaultKey: string,\n  withImageSandbox: boolean,\n): VaultEntry {\n  return {\n    displayName: `${platform}:${userId}`,\n    platform: asVaultPlatform(platform),\n    ...(withImageSandbox\n      ? {\n          sandbox: {\n            type: \"image\" as const,\n            container: DockerContainerManager.containerName(vaultKey),\n          },\n        }\n      : {}),\n  };\n}\n\nexport function containerSharedVaultId(containerName: string): string {\n  return `container-${containerName}`;\n}\n\nexport function createSharedContainerVaultEntry(containerName: string): VaultEntry {\n  return {\n    displayName: `container:${containerName}`,\n  };\n}\n\nexport function ensureSandboxVaultEntry(\n  baseConfig: SandboxConfig,\n  vaultManager: Pick<VaultManager, \"addEntry\" | \"ensureImageSandboxEntry\">,\n  platform: string,\n  userId: string,\n  vaultKey: string,\n): void {\n  if (baseConfig.type === \"image\") {\n    vaultManager.ensureImageSandboxEntry(\n      vaultKey,\n      createManagedVaultEntry(platform, userId, vaultKey, true),\n    );\n    return;\n  }\n\n  if (baseConfig.type === \"container\") {\n    vaultManager.addEntry(vaultKey, createSharedContainerVaultEntry(baseConfig.container));\n  }\n}\n\nexport function ensureImageSandboxVault(\n  baseConfig: SandboxConfig,\n  vaultManager: Pick<VaultManager, \"ensureImageSandboxEntry\">,\n  platform: string,\n  userId: string,\n  vaultKey: string,\n): void {\n  if (baseConfig.type !== \"image\") {\n    return;\n  }\n\n  vaultManager.ensureImageSandboxEntry(\n    vaultKey,\n    createManagedVaultEntry(platform, userId, vaultKey, true),\n  );\n}\n\nfunction asVaultPlatform(platform: string): VaultEntry[\"platform\"] | undefined {\n  if (platform === \"slack\" || platform === \"discord\" || platform === \"telegram\") {\n    return platform;\n  }\n  return undefined;\n}\n"]}
+{"version":3,"file":"vault-routing.d.ts","sourceRoot":"","sources":["../src/vault-routing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE3D,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,aAAa,EACzB,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,EAC5C,YAAY,EAAE,IAAI,CAAC,gBAAgB,EAAE,SAAS,CAAC,GAAG,SAAS,EAC3D,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,MAAM,CAeR;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,gBAAgB,UAAQ,GACvB,UAAU,CAaZ;AAED,wBAAgB,sBAAsB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED,wBAAgB,+BAA+B,CAAC,aAAa,EAAE,MAAM,GAAG,UAAU,CAIjF;AAED,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,aAAa,EACzB,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,UAAU,GAAG,yBAAyB,CAAC,EACxE,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,IAAI,CAYN","sourcesContent":["import type { UserBindingStore } from \"./bindings.js\";\nimport { DockerContainerManager } from \"./provisioner.js\";\nimport type { SandboxConfig } from \"./sandbox.js\";\nimport type { VaultEntry, VaultManager } from \"./vault.js\";\n\nexport function resolveActorVaultKey(\n  baseConfig: SandboxConfig,\n  vaultManager: Pick<VaultManager, \"hasEntry\">,\n  bindingStore: Pick<UserBindingStore, \"resolve\"> | undefined,\n  platform: string,\n  userId: string,\n): string {\n  if (baseConfig.type === \"container\") {\n    return containerSharedVaultId(baseConfig.container);\n  }\n\n  const binding = bindingStore?.resolve(platform, userId);\n  if (binding) {\n    return binding.vaultId;\n  }\n\n  if (vaultManager.hasEntry(userId)) {\n    return userId;\n  }\n\n  return baseConfig.type === \"image\" ? DockerContainerManager.vaultId(platform, userId) : userId;\n}\n\nexport function createManagedVaultEntry(\n  platform: string,\n  userId: string,\n  vaultKey: string,\n  withImageSandbox = false,\n): VaultEntry {\n  return {\n    displayName: `${platform}:${userId}`,\n    platform: asVaultPlatform(platform),\n    ...(withImageSandbox\n      ? {\n          sandbox: {\n            type: \"image\" as const,\n            container: DockerContainerManager.containerName(vaultKey),\n          },\n        }\n      : {}),\n  };\n}\n\nexport function containerSharedVaultId(containerName: string): string {\n  return `container-${containerName}`;\n}\n\nexport function createSharedContainerVaultEntry(containerName: string): VaultEntry {\n  return {\n    displayName: `container:${containerName}`,\n  };\n}\n\nexport function ensureSandboxVaultEntry(\n  baseConfig: SandboxConfig,\n  vaultManager: Pick<VaultManager, \"addEntry\" | \"ensureImageSandboxEntry\">,\n  platform: string,\n  userId: string,\n  vaultKey: string,\n): void {\n  if (baseConfig.type === \"image\") {\n    vaultManager.ensureImageSandboxEntry(\n      vaultKey,\n      createManagedVaultEntry(platform, userId, vaultKey, true),\n    );\n    return;\n  }\n\n  if (baseConfig.type === \"container\") {\n    vaultManager.addEntry(vaultKey, createSharedContainerVaultEntry(baseConfig.container));\n  }\n}\n\nfunction asVaultPlatform(platform: string): VaultEntry[\"platform\"] | undefined {\n  if (platform === \"slack\" || platform === \"discord\" || platform === \"telegram\") {\n    return platform;\n  }\n  return undefined;\n}\n"]}

package/dist/vault-routing.js

@@ -12,7 +12,7 @@ export function resolveActorVaultKey(baseConfig, vaultManager, bindingStore, pla
     }
     return baseConfig.type === "image" ? DockerContainerManager.vaultId(platform, userId) : userId;
 }
-export function createManagedVaultEntry(platform, userId, vaultKey, withImageSandbox) {
+export function createManagedVaultEntry(platform, userId, vaultKey, withImageSandbox = false) {
     return {
         displayName: `${platform}:${userId}`,
         platform: asVaultPlatform(platform),
@@ -43,12 +43,6 @@ export function ensureSandboxVaultEntry(baseConfig, vaultManager, platform, user
         vaultManager.addEntry(vaultKey, createSharedContainerVaultEntry(baseConfig.container));
     }
 }
-export function ensureImageSandboxVault(baseConfig, vaultManager, platform, userId, vaultKey) {
-    if (baseConfig.type !== "image") {
-        return;
-    }
-    vaultManager.ensureImageSandboxEntry(vaultKey, createManagedVaultEntry(platform, userId, vaultKey, true));
-}
 function asVaultPlatform(platform) {
     if (platform === "slack" || platform === "discord" || platform === "telegram") {
         return platform;

package/dist/vault-routing.js.map

@@ -1 +1 @@
-{"version":3,"file":"vault-routing.js","sourceRoot":"","sources":["../src/vault-routing.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAI1D,MAAM,UAAU,oBAAoB,CAClC,UAAyB,EACzB,YAA4C,EAC5C,YAA2D,EAC3D,QAAgB,EAChB,MAAc;IAEd,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACpC,OAAO,sBAAsB,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC,OAAO,CAAC;IACzB,CAAC;IAED,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,QAAgB,EAChB,MAAc,EACd,QAAgB,EAChB,gBAAyB;IAEzB,OAAO;QACL,WAAW,EAAE,GAAG,QAAQ,IAAI,MAAM,EAAE;QACpC,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;QACnC,GAAG,CAAC,gBAAgB;YAClB,CAAC,CAAC;gBACE,OAAO,EAAE;oBACP,IAAI,EAAE,OAAgB;oBACtB,SAAS,EAAE,sBAAsB,CAAC,aAAa,CAAC,QAAQ,CAAC;iBAC1D;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,aAAqB;IAC1D,OAAO,aAAa,aAAa,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,aAAqB;IACnE,OAAO;QACL,WAAW,EAAE,aAAa,aAAa,EAAE;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,UAAyB,EACzB,YAAwE,EACxE,QAAgB,EAChB,MAAc,EACd,QAAgB;IAEhB,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAChC,YAAY,CAAC,uBAAuB,CAClC,QAAQ,EACR,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAC1D,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACpC,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,+BAA+B,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,UAAyB,EACzB,YAA2D,EAC3D,QAAgB,EAChB,MAAc,EACd,QAAgB;IAEhB,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO;IACT,CAAC;IAED,YAAY,CAAC,uBAAuB,CAClC,QAAQ,EACR,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACvC,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC9E,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["import type { UserBindingStore } from \"./bindings.js\";\nimport { DockerContainerManager } from \"./provisioner.js\";\nimport type { SandboxConfig } from \"./sandbox.js\";\nimport type { VaultEntry, VaultManager } from \"./vault.js\";\n\nexport function resolveActorVaultKey(\n  baseConfig: SandboxConfig,\n  vaultManager: Pick<VaultManager, \"hasEntry\">,\n  bindingStore: Pick<UserBindingStore, \"resolve\"> | undefined,\n  platform: string,\n  userId: string,\n): string {\n  if (baseConfig.type === \"container\") {\n    return containerSharedVaultId(baseConfig.container);\n  }\n\n  const binding = bindingStore?.resolve(platform, userId);\n  if (binding) {\n    return binding.vaultId;\n  }\n\n  if (vaultManager.hasEntry(userId)) {\n    return userId;\n  }\n\n  return baseConfig.type === \"image\" ? DockerContainerManager.vaultId(platform, userId) : userId;\n}\n\nexport function createManagedVaultEntry(\n  platform: string,\n  userId: string,\n  vaultKey: string,\n  withImageSandbox: boolean,\n): VaultEntry {\n  return {\n    displayName: `${platform}:${userId}`,\n    platform: asVaultPlatform(platform),\n    ...(withImageSandbox\n      ? {\n          sandbox: {\n            type: \"image\" as const,\n            container: DockerContainerManager.containerName(vaultKey),\n          },\n        }\n      : {}),\n  };\n}\n\nexport function containerSharedVaultId(containerName: string): string {\n  return `container-${containerName}`;\n}\n\nexport function createSharedContainerVaultEntry(containerName: string): VaultEntry {\n  return {\n    displayName: `container:${containerName}`,\n  };\n}\n\nexport function ensureSandboxVaultEntry(\n  baseConfig: SandboxConfig,\n  vaultManager: Pick<VaultManager, \"addEntry\" | \"ensureImageSandboxEntry\">,\n  platform: string,\n  userId: string,\n  vaultKey: string,\n): void {\n  if (baseConfig.type === \"image\") {\n    vaultManager.ensureImageSandboxEntry(\n      vaultKey,\n      createManagedVaultEntry(platform, userId, vaultKey, true),\n    );\n    return;\n  }\n\n  if (baseConfig.type === \"container\") {\n    vaultManager.addEntry(vaultKey, createSharedContainerVaultEntry(baseConfig.container));\n  }\n}\n\nexport function ensureImageSandboxVault(\n  baseConfig: SandboxConfig,\n  vaultManager: Pick<VaultManager, \"ensureImageSandboxEntry\">,\n  platform: string,\n  userId: string,\n  vaultKey: string,\n): void {\n  if (baseConfig.type !== \"image\") {\n    return;\n  }\n\n  vaultManager.ensureImageSandboxEntry(\n    vaultKey,\n    createManagedVaultEntry(platform, userId, vaultKey, true),\n  );\n}\n\nfunction asVaultPlatform(platform: string): VaultEntry[\"platform\"] | undefined {\n  if (platform === \"slack\" || platform === \"discord\" || platform === \"telegram\") {\n    return platform;\n  }\n  return undefined;\n}\n"]}
+{"version":3,"file":"vault-routing.js","sourceRoot":"","sources":["../src/vault-routing.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAI1D,MAAM,UAAU,oBAAoB,CAClC,UAAyB,EACzB,YAA4C,EAC5C,YAA2D,EAC3D,QAAgB,EAChB,MAAc;IAEd,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACpC,OAAO,sBAAsB,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC,OAAO,CAAC;IACzB,CAAC;IAED,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,QAAgB,EAChB,MAAc,EACd,QAAgB,EAChB,gBAAgB,GAAG,KAAK;IAExB,OAAO;QACL,WAAW,EAAE,GAAG,QAAQ,IAAI,MAAM,EAAE;QACpC,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;QACnC,GAAG,CAAC,gBAAgB;YAClB,CAAC,CAAC;gBACE,OAAO,EAAE;oBACP,IAAI,EAAE,OAAgB;oBACtB,SAAS,EAAE,sBAAsB,CAAC,aAAa,CAAC,QAAQ,CAAC;iBAC1D;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,aAAqB;IAC1D,OAAO,aAAa,aAAa,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,aAAqB;IACnE,OAAO;QACL,WAAW,EAAE,aAAa,aAAa,EAAE;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,UAAyB,EACzB,YAAwE,EACxE,QAAgB,EAChB,MAAc,EACd,QAAgB;IAEhB,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAChC,YAAY,CAAC,uBAAuB,CAClC,QAAQ,EACR,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAC1D,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACpC,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,+BAA+B,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACvC,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC9E,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["import type { UserBindingStore } from \"./bindings.js\";\nimport { DockerContainerManager } from \"./provisioner.js\";\nimport type { SandboxConfig } from \"./sandbox.js\";\nimport type { VaultEntry, VaultManager } from \"./vault.js\";\n\nexport function resolveActorVaultKey(\n  baseConfig: SandboxConfig,\n  vaultManager: Pick<VaultManager, \"hasEntry\">,\n  bindingStore: Pick<UserBindingStore, \"resolve\"> | undefined,\n  platform: string,\n  userId: string,\n): string {\n  if (baseConfig.type === \"container\") {\n    return containerSharedVaultId(baseConfig.container);\n  }\n\n  const binding = bindingStore?.resolve(platform, userId);\n  if (binding) {\n    return binding.vaultId;\n  }\n\n  if (vaultManager.hasEntry(userId)) {\n    return userId;\n  }\n\n  return baseConfig.type === \"image\" ? DockerContainerManager.vaultId(platform, userId) : userId;\n}\n\nexport function createManagedVaultEntry(\n  platform: string,\n  userId: string,\n  vaultKey: string,\n  withImageSandbox = false,\n): VaultEntry {\n  return {\n    displayName: `${platform}:${userId}`,\n    platform: asVaultPlatform(platform),\n    ...(withImageSandbox\n      ? {\n          sandbox: {\n            type: \"image\" as const,\n            container: DockerContainerManager.containerName(vaultKey),\n          },\n        }\n      : {}),\n  };\n}\n\nexport function containerSharedVaultId(containerName: string): string {\n  return `container-${containerName}`;\n}\n\nexport function createSharedContainerVaultEntry(containerName: string): VaultEntry {\n  return {\n    displayName: `container:${containerName}`,\n  };\n}\n\nexport function ensureSandboxVaultEntry(\n  baseConfig: SandboxConfig,\n  vaultManager: Pick<VaultManager, \"addEntry\" | \"ensureImageSandboxEntry\">,\n  platform: string,\n  userId: string,\n  vaultKey: string,\n): void {\n  if (baseConfig.type === \"image\") {\n    vaultManager.ensureImageSandboxEntry(\n      vaultKey,\n      createManagedVaultEntry(platform, userId, vaultKey, true),\n    );\n    return;\n  }\n\n  if (baseConfig.type === \"container\") {\n    vaultManager.addEntry(vaultKey, createSharedContainerVaultEntry(baseConfig.container));\n  }\n}\n\nfunction asVaultPlatform(platform: string): VaultEntry[\"platform\"] | undefined {\n  if (platform === \"slack\" || platform === \"discord\" || platform === \"telegram\") {\n    return platform;\n  }\n  return undefined;\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geminixiang/mama",
-  "version": "0.2.0-beta.1",
+  "version": "0.2.0-beta.2",
   "description": "Slack bot that delegates messages to the pi coding agent",
   "keywords": [
     "agent",

package/dist/vault.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=vault.test.d.ts.map

package/dist/vault.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"vault.test.d.ts","sourceRoot":"","sources":["../src/vault.test.ts"],"names":[],"mappings":"","sourcesContent":["import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from \"fs\";\nimport { tmpdir } from \"os\";\nimport { join } from \"path\";\nimport { afterEach, describe, expect, it } from \"vitest\";\nimport { FileVaultManager } from \"./vault.js\";\n\ndescribe(\"FileVaultManager\", () => {\n  const tempDirs: string[] = [];\n\n  afterEach(() => {\n    while (tempDirs.length > 0) {\n      rmSync(tempDirs.pop()!, { recursive: true, force: true });\n    }\n  });\n\n  function createStateDir(): string {\n    const dir = mkdtempSync(join(tmpdir(), \"mama-vault-test-\"));\n    tempDirs.push(dir);\n    return dir;\n  }\n\n  it(\"reuses the base firecracker workspace hostPath for user overrides\", () => {\n    const stateDir = createStateDir();\n    const vaultsDir = join(stateDir, \"vaults\");\n    mkdirSync(vaultsDir, { recursive: true, mode: 0o700 });\n    writeFileSync(\n      join(vaultsDir, \"vault.json\"),\n      JSON.stringify(\n        {\n          vaults: {\n            alice: {\n              displayName: \"Alice\",\n              sandbox: { type: \"firecracker\", vmId: \"alice-vm\", sshUser: \"root\", sshPort: 2222 },\n            },\n          },\n        },\n        null,\n        2,\n      ) + \"\\n\",\n      { encoding: \"utf-8\", mode: 0o600 },\n    );\n\n    const manager = new FileVaultManager(stateDir);\n    expect(\n      manager.getSandboxConfig(\"alice\", {\n        type: \"firecracker\",\n        vmId: \"shared-vm\",\n        hostPath: \"/real/workspace\",\n        sshUser: \"root\",\n        sshPort: 22,\n      }),\n    ).toEqual({\n      type: \"firecracker\",\n      vmId: \"alice-vm\",\n      hostPath: \"/real/workspace\",\n      sshUser: \"root\",\n      sshPort: 2222,\n    });\n  });\n\n  it(\"rejects firecracker overrides when the base sandbox is not firecracker\", () => {\n    const stateDir = createStateDir();\n    const vaultsDir = join(stateDir, \"vaults\");\n    mkdirSync(vaultsDir, { recursive: true, mode: 0o700 });\n    writeFileSync(\n      join(vaultsDir, \"vault.json\"),\n      JSON.stringify(\n        {\n          vaults: {\n            alice: {\n              displayName: \"Alice\",\n              sandbox: { type: \"firecracker\", vmId: \"alice-vm\" },\n            },\n          },\n        },\n        null,\n        2,\n      ) + \"\\n\",\n      { encoding: \"utf-8\", mode: 0o600 },\n    );\n\n    const manager = new FileVaultManager(stateDir);\n    expect(() =>\n      manager.getSandboxConfig(\"alice\", { type: \"image\", image: \"alpine:3.20\" }),\n    ).toThrow(/base sandbox is \"image\"/);\n  });\n\n  it(\"throws on invalid secret file paths instead of silently succeeding\", () => {\n    const stateDir = createStateDir();\n    const manager = new FileVaultManager(stateDir);\n    manager.addEntry(\"alice\", { displayName: \"Alice\" });\n\n    expect(() => manager.upsertFile(\"alice\", \"../credentials.txt\", \"secret\")).toThrow(\n      /invalid relative secret file path/,\n    );\n  });\n});\n"]}

package/dist/vault.test.js

@@ -1,67 +0,0 @@
-import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "fs";
-import { tmpdir } from "os";
-import { join } from "path";
-import { afterEach, describe, expect, it } from "vitest";
-import { FileVaultManager } from "./vault.js";
-describe("FileVaultManager", () => {
-    const tempDirs = [];
-    afterEach(() => {
-        while (tempDirs.length > 0) {
-            rmSync(tempDirs.pop(), { recursive: true, force: true });
-        }
-    });
-    function createStateDir() {
-        const dir = mkdtempSync(join(tmpdir(), "mama-vault-test-"));
-        tempDirs.push(dir);
-        return dir;
-    }
-    it("reuses the base firecracker workspace hostPath for user overrides", () => {
-        const stateDir = createStateDir();
-        const vaultsDir = join(stateDir, "vaults");
-        mkdirSync(vaultsDir, { recursive: true, mode: 0o700 });
-        writeFileSync(join(vaultsDir, "vault.json"), JSON.stringify({
-            vaults: {
-                alice: {
-                    displayName: "Alice",
-                    sandbox: { type: "firecracker", vmId: "alice-vm", sshUser: "root", sshPort: 2222 },
-                },
-            },
-        }, null, 2) + "\n", { encoding: "utf-8", mode: 0o600 });
-        const manager = new FileVaultManager(stateDir);
-        expect(manager.getSandboxConfig("alice", {
-            type: "firecracker",
-            vmId: "shared-vm",
-            hostPath: "/real/workspace",
-            sshUser: "root",
-            sshPort: 22,
-        })).toEqual({
-            type: "firecracker",
-            vmId: "alice-vm",
-            hostPath: "/real/workspace",
-            sshUser: "root",
-            sshPort: 2222,
-        });
-    });
-    it("rejects firecracker overrides when the base sandbox is not firecracker", () => {
-        const stateDir = createStateDir();
-        const vaultsDir = join(stateDir, "vaults");
-        mkdirSync(vaultsDir, { recursive: true, mode: 0o700 });
-        writeFileSync(join(vaultsDir, "vault.json"), JSON.stringify({
-            vaults: {
-                alice: {
-                    displayName: "Alice",
-                    sandbox: { type: "firecracker", vmId: "alice-vm" },
-                },
-            },
-        }, null, 2) + "\n", { encoding: "utf-8", mode: 0o600 });
-        const manager = new FileVaultManager(stateDir);
-        expect(() => manager.getSandboxConfig("alice", { type: "image", image: "alpine:3.20" })).toThrow(/base sandbox is "image"/);
-    });
-    it("throws on invalid secret file paths instead of silently succeeding", () => {
-        const stateDir = createStateDir();
-        const manager = new FileVaultManager(stateDir);
-        manager.addEntry("alice", { displayName: "Alice" });
-        expect(() => manager.upsertFile("alice", "../credentials.txt", "secret")).toThrow(/invalid relative secret file path/);
-    });
-});
-//# sourceMappingURL=vault.test.js.map

package/dist/vault.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"vault.test.js","sourceRoot":"","sources":["../src/vault.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACnE,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,SAAS,cAAc;QACrB,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAC5D,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,GAAG,CAAC;IACb,CAAC;IAED,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3C,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,aAAa,CACX,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAC7B,IAAI,CAAC,SAAS,CACZ;YACE,MAAM,EAAE;gBACN,KAAK,EAAE;oBACL,WAAW,EAAE,OAAO;oBACpB,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;iBACnF;aACF;SACF,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,EACR,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CACnC,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,CACJ,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE;YAChC,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,iBAAiB;YAC3B,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,EAAE;SACZ,CAAC,CACH,CAAC,OAAO,CAAC;YACR,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,iBAAiB;YAC3B,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3C,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,aAAa,CACX,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAC7B,IAAI,CAAC,SAAS,CACZ;YACE,MAAM,EAAE;gBACN,KAAK,EAAE;oBACL,WAAW,EAAE,OAAO;oBACpB,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE;iBACnD;aACF;SACF,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,EACR,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CACnC,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,EAAE,CACV,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAC3E,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC/C,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QAEpD,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,oBAAoB,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAC/E,mCAAmC,CACpC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from \"fs\";\nimport { tmpdir } from \"os\";\nimport { join } from \"path\";\nimport { afterEach, describe, expect, it } from \"vitest\";\nimport { FileVaultManager } from \"./vault.js\";\n\ndescribe(\"FileVaultManager\", () => {\n  const tempDirs: string[] = [];\n\n  afterEach(() => {\n    while (tempDirs.length > 0) {\n      rmSync(tempDirs.pop()!, { recursive: true, force: true });\n    }\n  });\n\n  function createStateDir(): string {\n    const dir = mkdtempSync(join(tmpdir(), \"mama-vault-test-\"));\n    tempDirs.push(dir);\n    return dir;\n  }\n\n  it(\"reuses the base firecracker workspace hostPath for user overrides\", () => {\n    const stateDir = createStateDir();\n    const vaultsDir = join(stateDir, \"vaults\");\n    mkdirSync(vaultsDir, { recursive: true, mode: 0o700 });\n    writeFileSync(\n      join(vaultsDir, \"vault.json\"),\n      JSON.stringify(\n        {\n          vaults: {\n            alice: {\n              displayName: \"Alice\",\n              sandbox: { type: \"firecracker\", vmId: \"alice-vm\", sshUser: \"root\", sshPort: 2222 },\n            },\n          },\n        },\n        null,\n        2,\n      ) + \"\\n\",\n      { encoding: \"utf-8\", mode: 0o600 },\n    );\n\n    const manager = new FileVaultManager(stateDir);\n    expect(\n      manager.getSandboxConfig(\"alice\", {\n        type: \"firecracker\",\n        vmId: \"shared-vm\",\n        hostPath: \"/real/workspace\",\n        sshUser: \"root\",\n        sshPort: 22,\n      }),\n    ).toEqual({\n      type: \"firecracker\",\n      vmId: \"alice-vm\",\n      hostPath: \"/real/workspace\",\n      sshUser: \"root\",\n      sshPort: 2222,\n    });\n  });\n\n  it(\"rejects firecracker overrides when the base sandbox is not firecracker\", () => {\n    const stateDir = createStateDir();\n    const vaultsDir = join(stateDir, \"vaults\");\n    mkdirSync(vaultsDir, { recursive: true, mode: 0o700 });\n    writeFileSync(\n      join(vaultsDir, \"vault.json\"),\n      JSON.stringify(\n        {\n          vaults: {\n            alice: {\n              displayName: \"Alice\",\n              sandbox: { type: \"firecracker\", vmId: \"alice-vm\" },\n            },\n          },\n        },\n        null,\n        2,\n      ) + \"\\n\",\n      { encoding: \"utf-8\", mode: 0o600 },\n    );\n\n    const manager = new FileVaultManager(stateDir);\n    expect(() =>\n      manager.getSandboxConfig(\"alice\", { type: \"image\", image: \"alpine:3.20\" }),\n    ).toThrow(/base sandbox is \"image\"/);\n  });\n\n  it(\"throws on invalid secret file paths instead of silently succeeding\", () => {\n    const stateDir = createStateDir();\n    const manager = new FileVaultManager(stateDir);\n    manager.addEntry(\"alice\", { displayName: \"Alice\" });\n\n    expect(() => manager.upsertFile(\"alice\", \"../credentials.txt\", \"secret\")).toThrow(\n      /invalid relative secret file path/,\n    );\n  });\n});\n"]}