@geminixiang/mama 0.2.0-beta.2 → 0.2.0-beta.3

package/dist/session-view/store.js

@@ -0,0 +1,38 @@
+import { randomBytes } from "crypto";
+const TTL_MS = 24 * 60 * 60 * 1000;
+export class InMemorySessionViewTokenStore {
+    constructor() {
+        this.tokens = new Map();
+    }
+    create(platform, platformUserId, conversationId, sessionKey, sessionFile) {
+        const token = {
+            token: randomBytes(16).toString("hex"),
+            platform,
+            platformUserId,
+            conversationId,
+            sessionKey,
+            sessionFile,
+            expiresAt: Date.now() + TTL_MS,
+        };
+        this.tokens.set(token.token, token);
+        return token;
+    }
+    peek(rawToken) {
+        const entry = this.tokens.get(rawToken);
+        if (!entry || Date.now() > entry.expiresAt) {
+            if (entry)
+                this.tokens.delete(rawToken);
+            return undefined;
+        }
+        return entry;
+    }
+    purge() {
+        const now = Date.now();
+        for (const [key, value] of this.tokens) {
+            if (now > value.expiresAt) {
+                this.tokens.delete(key);
+            }
+        }
+    }
+}
+//# sourceMappingURL=store.js.map

package/dist/session-view/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/session-view/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAYrC,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEnC,MAAM,OAAO,6BAA6B;IAA1C;QACU,WAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IAuCvD,CAAC;IArCC,MAAM,CACJ,QAA0C,EAC1C,cAAsB,EACtB,cAAsB,EACtB,UAAkB,EAClB,WAAmB;QAEnB,MAAM,KAAK,GAAqB;YAC9B,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtC,QAAQ;YACR,cAAc;YACd,cAAc;YACd,UAAU;YACV,WAAW;YACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;SAC/B,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,QAAgB;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;YAC3C,IAAI,KAAK;gBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACxC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACvC,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;gBAC1B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;CACF","sourcesContent":["import { randomBytes } from \"crypto\";\n\nexport interface SessionViewToken {\n  token: string;\n  platform: \"slack\" | \"discord\" | \"telegram\";\n  platformUserId: string;\n  conversationId: string;\n  sessionKey: string;\n  sessionFile: string;\n  expiresAt: number;\n}\n\nconst TTL_MS = 24 * 60 * 60 * 1000;\n\nexport class InMemorySessionViewTokenStore {\n  private tokens = new Map<string, SessionViewToken>();\n\n  create(\n    platform: \"slack\" | \"discord\" | \"telegram\",\n    platformUserId: string,\n    conversationId: string,\n    sessionKey: string,\n    sessionFile: string,\n  ): SessionViewToken {\n    const token: SessionViewToken = {\n      token: randomBytes(16).toString(\"hex\"),\n      platform,\n      platformUserId,\n      conversationId,\n      sessionKey,\n      sessionFile,\n      expiresAt: Date.now() + TTL_MS,\n    };\n    this.tokens.set(token.token, token);\n    return token;\n  }\n\n  peek(rawToken: string): SessionViewToken | undefined {\n    const entry = this.tokens.get(rawToken);\n    if (!entry || Date.now() > entry.expiresAt) {\n      if (entry) this.tokens.delete(rawToken);\n      return undefined;\n    }\n    return entry;\n  }\n\n  purge(): void {\n    const now = Date.now();\n    for (const [key, value] of this.tokens) {\n      if (now > value.expiresAt) {\n        this.tokens.delete(key);\n      }\n    }\n  }\n}\n"]}

package/dist/store.d.ts

@@ -20,8 +20,6 @@ export interface ChannelStoreConfig {
 export declare class ChannelStore {
     private workingDir;
     private botToken;
-    private pendingDownloads;
-    private isDownloading;
     private recentlyLogged;
     constructor(config: ChannelStoreConfig);
     /**
@@ -33,14 +31,14 @@ export declare class ChannelStore {
      */
     generateLocalFilename(originalName: string, timestamp: string): string;
     /**
-     * Process attachments from a Slack message event
-     * Returns attachment metadata and queues downloads
+     * Process attachments from a Slack message event.
+     * Downloads files before returning so callers only receive readable paths.
      */
     processAttachments(channelId: string, files: Array<{
         name?: string;
         url_private_download?: string;
         url_private?: string;
-    }>, timestamp: string): Attachment[];
+    }>, timestamp: string): Promise<Attachment[]>;
     /**
      * Log a message to the channel's log.jsonl
      * Returns false if message was already logged (duplicate)
@@ -55,7 +53,6 @@ export declare class ChannelStore {
      * Returns null if no log exists
      */
     getLastTimestamp(channelId: string): string | null;
-    private processDownloadQueue;
     private downloadAttachment;
 }
 //# sourceMappingURL=store.d.ts.map

package/dist/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAQD,qBAAa,YAAY;IACvB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,gBAAgB,CAAyB;IACjD,OAAO,CAAC,aAAa,CAAS;IAG9B,OAAO,CAAC,cAAc,CAA6B;IAEnD,YAAY,MAAM,EAAE,kBAAkB,EAQrC;IAED;;OAEG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAMvC;IAED;;OAEG;IACH,qBAAqB,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAMrE;IAED;;;OAGG;IACH,kBAAkB,CAChB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,EACpF,SAAS,EAAE,MAAM,GAChB,UAAU,EAAE,CA2Bd;IAED;;;OAGG;IACG,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CA8B5E;IAED;;OAEG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAS/E;IAED;;;OAGG;IACH,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAkBjD;YAKa,oBAAoB;YAwBpB,kBAAkB;CAsBjC","sourcesContent":["import { existsSync, mkdirSync, readFileSync } from \"fs\";\nimport { appendFile, writeFile } from \"fs/promises\";\nimport { join } from \"path\";\nimport * as log from \"./log.js\";\n\nexport interface Attachment {\n  original: string; // original filename from uploader\n  localPath: string; // path relative to working dir (e.g., \"C12345/attachments/1732531234567_file.png\")\n}\n\nexport interface LoggedMessage {\n  date: string; // ISO 8601 date (e.g., \"2025-11-26T10:44:00.000Z\") for easy grepping\n  ts: string; // slack timestamp or epoch ms\n  user: string; // user ID (or \"bot\" for bot responses)\n  userName?: string; // handle (e.g., \"mario\")\n  displayName?: string; // display name (e.g., \"Mario Zechner\")\n  text: string;\n  attachments: Attachment[];\n  isBot: boolean;\n  threadTs?: string; // slack thread timestamp (root message ts)\n}\n\nexport interface ChannelStoreConfig {\n  workingDir: string;\n  botToken: string; // needed for authenticated file downloads\n}\n\ninterface PendingDownload {\n  channelId: string;\n  localPath: string; // relative path\n  url: string;\n}\n\nexport class ChannelStore {\n  private workingDir: string;\n  private botToken: string;\n  private pendingDownloads: PendingDownload[] = [];\n  private isDownloading = false;\n  // Track recently logged message timestamps to prevent duplicates\n  // Key: \"channelId:ts\", automatically cleaned up after 60 seconds\n  private recentlyLogged = new Map<string, number>();\n\n  constructor(config: ChannelStoreConfig) {\n    this.workingDir = config.workingDir;\n    this.botToken = config.botToken;\n\n    // Ensure working directory exists\n    if (!existsSync(this.workingDir)) {\n      mkdirSync(this.workingDir, { recursive: true });\n    }\n  }\n\n  /**\n   * Get or create the directory for a channel/DM\n   */\n  getChannelDir(channelId: string): string {\n    const channelDir = join(this.workingDir, channelId);\n    if (!existsSync(channelDir)) {\n      mkdirSync(channelDir, { recursive: true });\n    }\n    return channelDir;\n  }\n\n  /**\n   * Generate a unique local filename for an attachment\n   */\n  generateLocalFilename(originalName: string, timestamp: string): string {\n    // Convert slack timestamp (1234567890.123456) to milliseconds\n    const ts = Math.floor(parseFloat(timestamp) * 1000);\n    // Sanitize original name (remove problematic characters)\n    const sanitized = originalName.replace(/[^a-zA-Z0-9._-]/g, \"_\");\n    return `${ts}_${sanitized}`;\n  }\n\n  /**\n   * Process attachments from a Slack message event\n   * Returns attachment metadata and queues downloads\n   */\n  processAttachments(\n    channelId: string,\n    files: Array<{ name?: string; url_private_download?: string; url_private?: string }>,\n    timestamp: string,\n  ): Attachment[] {\n    const attachments: Attachment[] = [];\n\n    for (const file of files) {\n      const url = file.url_private_download || file.url_private;\n      if (!url) continue;\n      if (!file.name) {\n        log.logWarning(\"Attachment missing name, skipping\", url);\n        continue;\n      }\n\n      const filename = this.generateLocalFilename(file.name, timestamp);\n      const localPath = `${channelId}/attachments/${filename}`;\n\n      attachments.push({\n        original: file.name,\n        localPath,\n      });\n\n      // Queue for background download\n      this.pendingDownloads.push({ channelId, localPath, url });\n    }\n\n    // Trigger background download\n    this.processDownloadQueue();\n\n    return attachments;\n  }\n\n  /**\n   * Log a message to the channel's log.jsonl\n   * Returns false if message was already logged (duplicate)\n   */\n  async logMessage(channelId: string, message: LoggedMessage): Promise<boolean> {\n    // Check for duplicate (same channel + timestamp)\n    const dedupeKey = `${channelId}:${message.ts}`;\n    if (this.recentlyLogged.has(dedupeKey)) {\n      return false; // Already logged\n    }\n\n    // Mark as logged and schedule cleanup after 60 seconds\n    this.recentlyLogged.set(dedupeKey, Date.now());\n    setTimeout(() => this.recentlyLogged.delete(dedupeKey), 60000);\n\n    const logPath = join(this.getChannelDir(channelId), \"log.jsonl\");\n\n    // Ensure message has a date field\n    if (!message.date) {\n      // Parse timestamp to get date\n      let date: Date;\n      if (message.ts.includes(\".\")) {\n        // Slack timestamp format (1234567890.123456)\n        date = new Date(parseFloat(message.ts) * 1000);\n      } else {\n        // Epoch milliseconds\n        date = new Date(parseInt(message.ts, 10));\n      }\n      message.date = date.toISOString();\n    }\n\n    const line = `${JSON.stringify(message)}\\n`;\n    await appendFile(logPath, line, \"utf-8\");\n    return true;\n  }\n\n  /**\n   * Log a bot response\n   */\n  async logBotResponse(channelId: string, text: string, ts: string): Promise<void> {\n    await this.logMessage(channelId, {\n      date: new Date().toISOString(),\n      ts,\n      user: \"bot\",\n      text,\n      attachments: [],\n      isBot: true,\n    });\n  }\n\n  /**\n   * Get the timestamp of the last logged message for a channel\n   * Returns null if no log exists\n   */\n  getLastTimestamp(channelId: string): string | null {\n    const logPath = join(this.workingDir, channelId, \"log.jsonl\");\n    if (!existsSync(logPath)) {\n      return null;\n    }\n\n    try {\n      const content = readFileSync(logPath, \"utf-8\");\n      const lines = content.trim().split(\"\\n\");\n      if (lines.length === 0 || lines[0] === \"\") {\n        return null;\n      }\n      const lastLine = lines[lines.length - 1];\n      const message = JSON.parse(lastLine) as LoggedMessage;\n      return message.ts;\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * Process the download queue in the background\n   */\n  private async processDownloadQueue(): Promise<void> {\n    if (this.isDownloading || this.pendingDownloads.length === 0) return;\n\n    this.isDownloading = true;\n\n    while (this.pendingDownloads.length > 0) {\n      const item = this.pendingDownloads.shift();\n      if (!item) break;\n\n      try {\n        await this.downloadAttachment(item.localPath, item.url);\n        // Success - could add success logging here if we have context\n      } catch (error) {\n        const errorMsg = error instanceof Error ? error.message : String(error);\n        log.logWarning(`Failed to download attachment`, `${item.localPath}: ${errorMsg}`);\n      }\n    }\n\n    this.isDownloading = false;\n  }\n\n  /**\n   * Download a single attachment\n   */\n  private async downloadAttachment(localPath: string, url: string): Promise<void> {\n    const filePath = join(this.workingDir, localPath);\n\n    // Ensure directory exists\n    const parentDir = join(this.workingDir, localPath.substring(0, localPath.lastIndexOf(\"/\")));\n    if (!existsSync(parentDir)) {\n      mkdirSync(parentDir, { recursive: true });\n    }\n\n    const response = await fetch(url, {\n      headers: {\n        Authorization: `Bearer ${this.botToken}`,\n      },\n    });\n\n    if (!response.ok) {\n      throw new Error(`HTTP ${response.status}: ${response.statusText}`);\n    }\n\n    const buffer = await response.arrayBuffer();\n    await writeFile(filePath, Buffer.from(buffer));\n  }\n}\n"]}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAS;IAGzB,OAAO,CAAC,cAAc,CAA6B;IAEnD,YAAY,MAAM,EAAE,kBAAkB,EAQrC;IAED;;OAEG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAMvC;IAED;;OAEG;IACH,qBAAqB,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAMrE;IAED;;;OAGG;IACG,kBAAkB,CACtB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,EACpF,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,UAAU,EAAE,CAAC,CA+BvB;IAED;;;OAGG;IACG,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CA8B5E;IAED;;OAEG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAS/E;IAED;;;OAGG;IACH,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAkBjD;YAKa,kBAAkB;CAsBjC","sourcesContent":["import { existsSync, mkdirSync, readFileSync } from \"fs\";\nimport { appendFile, writeFile } from \"fs/promises\";\nimport { join } from \"path\";\nimport * as log from \"./log.js\";\n\nexport interface Attachment {\n  original: string; // original filename from uploader\n  localPath: string; // path relative to working dir (e.g., \"C12345/attachments/1732531234567_file.png\")\n}\n\nexport interface LoggedMessage {\n  date: string; // ISO 8601 date (e.g., \"2025-11-26T10:44:00.000Z\") for easy grepping\n  ts: string; // slack timestamp or epoch ms\n  user: string; // user ID (or \"bot\" for bot responses)\n  userName?: string; // handle (e.g., \"mario\")\n  displayName?: string; // display name (e.g., \"Mario Zechner\")\n  text: string;\n  attachments: Attachment[];\n  isBot: boolean;\n  threadTs?: string; // slack thread timestamp (root message ts)\n}\n\nexport interface ChannelStoreConfig {\n  workingDir: string;\n  botToken: string; // needed for authenticated file downloads\n}\n\nexport class ChannelStore {\n  private workingDir: string;\n  private botToken: string;\n  // Track recently logged message timestamps to prevent duplicates\n  // Key: \"channelId:ts\", automatically cleaned up after 60 seconds\n  private recentlyLogged = new Map<string, number>();\n\n  constructor(config: ChannelStoreConfig) {\n    this.workingDir = config.workingDir;\n    this.botToken = config.botToken;\n\n    // Ensure working directory exists\n    if (!existsSync(this.workingDir)) {\n      mkdirSync(this.workingDir, { recursive: true });\n    }\n  }\n\n  /**\n   * Get or create the directory for a channel/DM\n   */\n  getChannelDir(channelId: string): string {\n    const channelDir = join(this.workingDir, channelId);\n    if (!existsSync(channelDir)) {\n      mkdirSync(channelDir, { recursive: true });\n    }\n    return channelDir;\n  }\n\n  /**\n   * Generate a unique local filename for an attachment\n   */\n  generateLocalFilename(originalName: string, timestamp: string): string {\n    // Convert slack timestamp (1234567890.123456) to milliseconds\n    const ts = Math.floor(parseFloat(timestamp) * 1000);\n    // Sanitize original name (remove problematic characters)\n    const sanitized = originalName.replace(/[^a-zA-Z0-9._-]/g, \"_\");\n    return `${ts}_${sanitized}`;\n  }\n\n  /**\n   * Process attachments from a Slack message event.\n   * Downloads files before returning so callers only receive readable paths.\n   */\n  async processAttachments(\n    channelId: string,\n    files: Array<{ name?: string; url_private_download?: string; url_private?: string }>,\n    timestamp: string,\n  ): Promise<Attachment[]> {\n    const downloads: Array<Promise<Attachment | null>> = [];\n\n    for (const file of files) {\n      const url = file.url_private_download || file.url_private;\n      if (!url) continue;\n      if (!file.name) {\n        log.logWarning(\"Attachment missing name, skipping\", url);\n        continue;\n      }\n\n      const filename = this.generateLocalFilename(file.name, timestamp);\n      const localPath = `${channelId}/attachments/${filename}`;\n      const attachment: Attachment = {\n        original: file.name,\n        localPath,\n      };\n\n      downloads.push(\n        this.downloadAttachment(localPath, url)\n          .then(() => attachment)\n          .catch((error) => {\n            const errorMsg = error instanceof Error ? error.message : String(error);\n            log.logWarning(`Failed to download attachment`, `${localPath}: ${errorMsg}`);\n            return null;\n          }),\n      );\n    }\n\n    const attachments = await Promise.all(downloads);\n    return attachments.filter((attachment): attachment is Attachment => attachment !== null);\n  }\n\n  /**\n   * Log a message to the channel's log.jsonl\n   * Returns false if message was already logged (duplicate)\n   */\n  async logMessage(channelId: string, message: LoggedMessage): Promise<boolean> {\n    // Check for duplicate (same channel + timestamp)\n    const dedupeKey = `${channelId}:${message.ts}`;\n    if (this.recentlyLogged.has(dedupeKey)) {\n      return false; // Already logged\n    }\n\n    // Mark as logged and schedule cleanup after 60 seconds\n    this.recentlyLogged.set(dedupeKey, Date.now());\n    setTimeout(() => this.recentlyLogged.delete(dedupeKey), 60000);\n\n    const logPath = join(this.getChannelDir(channelId), \"log.jsonl\");\n\n    // Ensure message has a date field\n    if (!message.date) {\n      // Parse timestamp to get date\n      let date: Date;\n      if (message.ts.includes(\".\")) {\n        // Slack timestamp format (1234567890.123456)\n        date = new Date(parseFloat(message.ts) * 1000);\n      } else {\n        // Epoch milliseconds\n        date = new Date(parseInt(message.ts, 10));\n      }\n      message.date = date.toISOString();\n    }\n\n    const line = `${JSON.stringify(message)}\\n`;\n    await appendFile(logPath, line, \"utf-8\");\n    return true;\n  }\n\n  /**\n   * Log a bot response\n   */\n  async logBotResponse(channelId: string, text: string, ts: string): Promise<void> {\n    await this.logMessage(channelId, {\n      date: new Date().toISOString(),\n      ts,\n      user: \"bot\",\n      text,\n      attachments: [],\n      isBot: true,\n    });\n  }\n\n  /**\n   * Get the timestamp of the last logged message for a channel\n   * Returns null if no log exists\n   */\n  getLastTimestamp(channelId: string): string | null {\n    const logPath = join(this.workingDir, channelId, \"log.jsonl\");\n    if (!existsSync(logPath)) {\n      return null;\n    }\n\n    try {\n      const content = readFileSync(logPath, \"utf-8\");\n      const lines = content.trim().split(\"\\n\");\n      if (lines.length === 0 || lines[0] === \"\") {\n        return null;\n      }\n      const lastLine = lines[lines.length - 1];\n      const message = JSON.parse(lastLine) as LoggedMessage;\n      return message.ts;\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * Download a single attachment\n   */\n  private async downloadAttachment(localPath: string, url: string): Promise<void> {\n    const filePath = join(this.workingDir, localPath);\n\n    // Ensure directory exists\n    const parentDir = join(this.workingDir, localPath.substring(0, localPath.lastIndexOf(\"/\")));\n    if (!existsSync(parentDir)) {\n      mkdirSync(parentDir, { recursive: true });\n    }\n\n    const response = await fetch(url, {\n      headers: {\n        Authorization: `Bearer ${this.botToken}`,\n      },\n    });\n\n    if (!response.ok) {\n      throw new Error(`HTTP ${response.status}: ${response.statusText}`);\n    }\n\n    const buffer = await response.arrayBuffer();\n    await writeFile(filePath, Buffer.from(buffer));\n  }\n}\n"]}

package/dist/store.js

@@ -4,8 +4,6 @@ import { join } from "path";
 import * as log from "./log.js";
 export class ChannelStore {
     constructor(config) {
-        this.pendingDownloads = [];
-        this.isDownloading = false;
         // Track recently logged message timestamps to prevent duplicates
         // Key: "channelId:ts", automatically cleaned up after 60 seconds
         this.recentlyLogged = new Map();
@@ -37,11 +35,11 @@ export class ChannelStore {
         return `${ts}_${sanitized}`;
     }
     /**
-     * Process attachments from a Slack message event
-     * Returns attachment metadata and queues downloads
+     * Process attachments from a Slack message event.
+     * Downloads files before returning so callers only receive readable paths.
      */
-    processAttachments(channelId, files, timestamp) {
-        const attachments = [];
+    async processAttachments(channelId, files, timestamp) {
+        const downloads = [];
         for (const file of files) {
             const url = file.url_private_download || file.url_private;
             if (!url)
@@ -52,16 +50,20 @@ export class ChannelStore {
             }
             const filename = this.generateLocalFilename(file.name, timestamp);
             const localPath = `${channelId}/attachments/${filename}`;
-            attachments.push({
+            const attachment = {
                 original: file.name,
                 localPath,
-            });
-            // Queue for background download
-            this.pendingDownloads.push({ channelId, localPath, url });
+            };
+            downloads.push(this.downloadAttachment(localPath, url)
+                .then(() => attachment)
+                .catch((error) => {
+                const errorMsg = error instanceof Error ? error.message : String(error);
+                log.logWarning(`Failed to download attachment`, `${localPath}: ${errorMsg}`);
+                return null;
+            }));
         }
-        // Trigger background download
-        this.processDownloadQueue();
-        return attachments;
+        const attachments = await Promise.all(downloads);
+        return attachments.filter((attachment) => attachment !== null);
     }
     /**
      * Log a message to the channel's log.jsonl
@@ -131,28 +133,6 @@ export class ChannelStore {
             return null;
         }
     }
-    /**
-     * Process the download queue in the background
-     */
-    async processDownloadQueue() {
-        if (this.isDownloading || this.pendingDownloads.length === 0)
-            return;
-        this.isDownloading = true;
-        while (this.pendingDownloads.length > 0) {
-            const item = this.pendingDownloads.shift();
-            if (!item)
-                break;
-            try {
-                await this.downloadAttachment(item.localPath, item.url);
-                // Success - could add success logging here if we have context
-            }
-            catch (error) {
-                const errorMsg = error instanceof Error ? error.message : String(error);
-                log.logWarning(`Failed to download attachment`, `${item.localPath}: ${errorMsg}`);
-            }
-        }
-        this.isDownloading = false;
-    }
     /**
      * Download a single attachment
      */

package/dist/store.js.map

@@ -1 +1 @@
-{"version":3,"file":"store.js","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AA8BhC,MAAM,OAAO,YAAY;IASvB,YAAY,MAA0B;QAN9B,qBAAgB,GAAsB,EAAE,CAAC;QACzC,kBAAa,GAAG,KAAK,CAAC;QAC9B,iEAAiE;QACjE,iEAAiE;QACzD,mBAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;QAGjD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAEhC,kCAAkC;QAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,SAAiB;QAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,YAAoB,EAAE,SAAiB;QAC3D,8DAA8D;QAC9D,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;QACpD,yDAAyD;QACzD,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAChE,OAAO,GAAG,EAAE,IAAI,SAAS,EAAE,CAAC;IAC9B,CAAC;IAED;;;OAGG;IACH,kBAAkB,CAChB,SAAiB,EACjB,KAAoF,EACpF,SAAiB;QAEjB,MAAM,WAAW,GAAiB,EAAE,CAAC;QAErC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,IAAI,IAAI,CAAC,WAAW,CAAC;YAC1D,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACf,GAAG,CAAC,UAAU,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;gBACzD,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAClE,MAAM,SAAS,GAAG,GAAG,SAAS,gBAAgB,QAAQ,EAAE,CAAC;YAEzD,WAAW,CAAC,IAAI,CAAC;gBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,SAAS;aACV,CAAC,CAAC;YAEH,gCAAgC;YAChC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,8BAA8B;QAC9B,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAE5B,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,OAAsB;QACxD,iDAAiD;QACjD,MAAM,SAAS,GAAG,GAAG,SAAS,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,OAAO,KAAK,CAAC,CAAC,iBAAiB;QACjC,CAAC;QAED,uDAAuD;QACvD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/C,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;QAE/D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC;QAEjE,kCAAkC;QAClC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,8BAA8B;YAC9B,IAAI,IAAU,CAAC;YACf,IAAI,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,6CAA6C;gBAC7C,IAAI,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACN,qBAAqB;gBACrB,IAAI,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAC5C,CAAC;YACD,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;QAC5C,MAAM,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,SAAiB,EAAE,IAAY,EAAE,EAAU;QAC9D,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE;YAC/B,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC9B,EAAE;YACF,IAAI,EAAE,KAAK;YACX,IAAI;YACJ,WAAW,EAAE,EAAE;YACf,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,gBAAgB,CAAC,SAAiB;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC1C,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAkB,CAAC;YACtD,OAAO,OAAO,CAAC,EAAE,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,oBAAoB;QAChC,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAErE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAE1B,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI;gBAAE,MAAM;YAEjB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;gBACxD,8DAA8D;YAChE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACxE,GAAG,CAAC,UAAU,CAAC,+BAA+B,EAAE,GAAG,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QAED,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;IAC7B,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB,CAAC,SAAiB,EAAE,GAAW;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAElD,0BAA0B;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5F,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,QAAQ,EAAE;aACzC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACjD,CAAC;CACF","sourcesContent":["import { existsSync, mkdirSync, readFileSync } from \"fs\";\nimport { appendFile, writeFile } from \"fs/promises\";\nimport { join } from \"path\";\nimport * as log from \"./log.js\";\n\nexport interface Attachment {\n  original: string; // original filename from uploader\n  localPath: string; // path relative to working dir (e.g., \"C12345/attachments/1732531234567_file.png\")\n}\n\nexport interface LoggedMessage {\n  date: string; // ISO 8601 date (e.g., \"2025-11-26T10:44:00.000Z\") for easy grepping\n  ts: string; // slack timestamp or epoch ms\n  user: string; // user ID (or \"bot\" for bot responses)\n  userName?: string; // handle (e.g., \"mario\")\n  displayName?: string; // display name (e.g., \"Mario Zechner\")\n  text: string;\n  attachments: Attachment[];\n  isBot: boolean;\n  threadTs?: string; // slack thread timestamp (root message ts)\n}\n\nexport interface ChannelStoreConfig {\n  workingDir: string;\n  botToken: string; // needed for authenticated file downloads\n}\n\ninterface PendingDownload {\n  channelId: string;\n  localPath: string; // relative path\n  url: string;\n}\n\nexport class ChannelStore {\n  private workingDir: string;\n  private botToken: string;\n  private pendingDownloads: PendingDownload[] = [];\n  private isDownloading = false;\n  // Track recently logged message timestamps to prevent duplicates\n  // Key: \"channelId:ts\", automatically cleaned up after 60 seconds\n  private recentlyLogged = new Map<string, number>();\n\n  constructor(config: ChannelStoreConfig) {\n    this.workingDir = config.workingDir;\n    this.botToken = config.botToken;\n\n    // Ensure working directory exists\n    if (!existsSync(this.workingDir)) {\n      mkdirSync(this.workingDir, { recursive: true });\n    }\n  }\n\n  /**\n   * Get or create the directory for a channel/DM\n   */\n  getChannelDir(channelId: string): string {\n    const channelDir = join(this.workingDir, channelId);\n    if (!existsSync(channelDir)) {\n      mkdirSync(channelDir, { recursive: true });\n    }\n    return channelDir;\n  }\n\n  /**\n   * Generate a unique local filename for an attachment\n   */\n  generateLocalFilename(originalName: string, timestamp: string): string {\n    // Convert slack timestamp (1234567890.123456) to milliseconds\n    const ts = Math.floor(parseFloat(timestamp) * 1000);\n    // Sanitize original name (remove problematic characters)\n    const sanitized = originalName.replace(/[^a-zA-Z0-9._-]/g, \"_\");\n    return `${ts}_${sanitized}`;\n  }\n\n  /**\n   * Process attachments from a Slack message event\n   * Returns attachment metadata and queues downloads\n   */\n  processAttachments(\n    channelId: string,\n    files: Array<{ name?: string; url_private_download?: string; url_private?: string }>,\n    timestamp: string,\n  ): Attachment[] {\n    const attachments: Attachment[] = [];\n\n    for (const file of files) {\n      const url = file.url_private_download || file.url_private;\n      if (!url) continue;\n      if (!file.name) {\n        log.logWarning(\"Attachment missing name, skipping\", url);\n        continue;\n      }\n\n      const filename = this.generateLocalFilename(file.name, timestamp);\n      const localPath = `${channelId}/attachments/${filename}`;\n\n      attachments.push({\n        original: file.name,\n        localPath,\n      });\n\n      // Queue for background download\n      this.pendingDownloads.push({ channelId, localPath, url });\n    }\n\n    // Trigger background download\n    this.processDownloadQueue();\n\n    return attachments;\n  }\n\n  /**\n   * Log a message to the channel's log.jsonl\n   * Returns false if message was already logged (duplicate)\n   */\n  async logMessage(channelId: string, message: LoggedMessage): Promise<boolean> {\n    // Check for duplicate (same channel + timestamp)\n    const dedupeKey = `${channelId}:${message.ts}`;\n    if (this.recentlyLogged.has(dedupeKey)) {\n      return false; // Already logged\n    }\n\n    // Mark as logged and schedule cleanup after 60 seconds\n    this.recentlyLogged.set(dedupeKey, Date.now());\n    setTimeout(() => this.recentlyLogged.delete(dedupeKey), 60000);\n\n    const logPath = join(this.getChannelDir(channelId), \"log.jsonl\");\n\n    // Ensure message has a date field\n    if (!message.date) {\n      // Parse timestamp to get date\n      let date: Date;\n      if (message.ts.includes(\".\")) {\n        // Slack timestamp format (1234567890.123456)\n        date = new Date(parseFloat(message.ts) * 1000);\n      } else {\n        // Epoch milliseconds\n        date = new Date(parseInt(message.ts, 10));\n      }\n      message.date = date.toISOString();\n    }\n\n    const line = `${JSON.stringify(message)}\\n`;\n    await appendFile(logPath, line, \"utf-8\");\n    return true;\n  }\n\n  /**\n   * Log a bot response\n   */\n  async logBotResponse(channelId: string, text: string, ts: string): Promise<void> {\n    await this.logMessage(channelId, {\n      date: new Date().toISOString(),\n      ts,\n      user: \"bot\",\n      text,\n      attachments: [],\n      isBot: true,\n    });\n  }\n\n  /**\n   * Get the timestamp of the last logged message for a channel\n   * Returns null if no log exists\n   */\n  getLastTimestamp(channelId: string): string | null {\n    const logPath = join(this.workingDir, channelId, \"log.jsonl\");\n    if (!existsSync(logPath)) {\n      return null;\n    }\n\n    try {\n      const content = readFileSync(logPath, \"utf-8\");\n      const lines = content.trim().split(\"\\n\");\n      if (lines.length === 0 || lines[0] === \"\") {\n        return null;\n      }\n      const lastLine = lines[lines.length - 1];\n      const message = JSON.parse(lastLine) as LoggedMessage;\n      return message.ts;\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * Process the download queue in the background\n   */\n  private async processDownloadQueue(): Promise<void> {\n    if (this.isDownloading || this.pendingDownloads.length === 0) return;\n\n    this.isDownloading = true;\n\n    while (this.pendingDownloads.length > 0) {\n      const item = this.pendingDownloads.shift();\n      if (!item) break;\n\n      try {\n        await this.downloadAttachment(item.localPath, item.url);\n        // Success - could add success logging here if we have context\n      } catch (error) {\n        const errorMsg = error instanceof Error ? error.message : String(error);\n        log.logWarning(`Failed to download attachment`, `${item.localPath}: ${errorMsg}`);\n      }\n    }\n\n    this.isDownloading = false;\n  }\n\n  /**\n   * Download a single attachment\n   */\n  private async downloadAttachment(localPath: string, url: string): Promise<void> {\n    const filePath = join(this.workingDir, localPath);\n\n    // Ensure directory exists\n    const parentDir = join(this.workingDir, localPath.substring(0, localPath.lastIndexOf(\"/\")));\n    if (!existsSync(parentDir)) {\n      mkdirSync(parentDir, { recursive: true });\n    }\n\n    const response = await fetch(url, {\n      headers: {\n        Authorization: `Bearer ${this.botToken}`,\n      },\n    });\n\n    if (!response.ok) {\n      throw new Error(`HTTP ${response.status}: ${response.statusText}`);\n    }\n\n    const buffer = await response.arrayBuffer();\n    await writeFile(filePath, Buffer.from(buffer));\n  }\n}\n"]}
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAwBhC,MAAM,OAAO,YAAY;IAOvB,YAAY,MAA0B;QAJtC,iEAAiE;QACjE,iEAAiE;QACzD,mBAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;QAGjD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAEhC,kCAAkC;QAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,SAAiB;QAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,YAAoB,EAAE,SAAiB;QAC3D,8DAA8D;QAC9D,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;QACpD,yDAAyD;QACzD,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAChE,OAAO,GAAG,EAAE,IAAI,SAAS,EAAE,CAAC;IAC9B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,kBAAkB,CACtB,SAAiB,EACjB,KAAoF,EACpF,SAAiB;QAEjB,MAAM,SAAS,GAAsC,EAAE,CAAC;QAExD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,IAAI,IAAI,CAAC,WAAW,CAAC;YAC1D,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACf,GAAG,CAAC,UAAU,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;gBACzD,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAClE,MAAM,SAAS,GAAG,GAAG,SAAS,gBAAgB,QAAQ,EAAE,CAAC;YACzD,MAAM,UAAU,GAAe;gBAC7B,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,SAAS;aACV,CAAC;YAEF,SAAS,CAAC,IAAI,CACZ,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC;iBACpC,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC;iBACtB,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACf,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACxE,GAAG,CAAC,UAAU,CAAC,+BAA+B,EAAE,GAAG,SAAS,KAAK,QAAQ,EAAE,CAAC,CAAC;gBAC7E,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CACL,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAA4B,EAAE,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;IAC3F,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,OAAsB;QACxD,iDAAiD;QACjD,MAAM,SAAS,GAAG,GAAG,SAAS,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,OAAO,KAAK,CAAC,CAAC,iBAAiB;QACjC,CAAC;QAED,uDAAuD;QACvD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/C,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;QAE/D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC;QAEjE,kCAAkC;QAClC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,8BAA8B;YAC9B,IAAI,IAAU,CAAC;YACf,IAAI,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,6CAA6C;gBAC7C,IAAI,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACN,qBAAqB;gBACrB,IAAI,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAC5C,CAAC;YACD,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;QAC5C,MAAM,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,SAAiB,EAAE,IAAY,EAAE,EAAU;QAC9D,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE;YAC/B,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC9B,EAAE;YACF,IAAI,EAAE,KAAK;YACX,IAAI;YACJ,WAAW,EAAE,EAAE;YACf,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,gBAAgB,CAAC,SAAiB;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC1C,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAkB,CAAC;YACtD,OAAO,OAAO,CAAC,EAAE,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB,CAAC,SAAiB,EAAE,GAAW;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAElD,0BAA0B;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5F,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,QAAQ,EAAE;aACzC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACjD,CAAC;CACF","sourcesContent":["import { existsSync, mkdirSync, readFileSync } from \"fs\";\nimport { appendFile, writeFile } from \"fs/promises\";\nimport { join } from \"path\";\nimport * as log from \"./log.js\";\n\nexport interface Attachment {\n  original: string; // original filename from uploader\n  localPath: string; // path relative to working dir (e.g., \"C12345/attachments/1732531234567_file.png\")\n}\n\nexport interface LoggedMessage {\n  date: string; // ISO 8601 date (e.g., \"2025-11-26T10:44:00.000Z\") for easy grepping\n  ts: string; // slack timestamp or epoch ms\n  user: string; // user ID (or \"bot\" for bot responses)\n  userName?: string; // handle (e.g., \"mario\")\n  displayName?: string; // display name (e.g., \"Mario Zechner\")\n  text: string;\n  attachments: Attachment[];\n  isBot: boolean;\n  threadTs?: string; // slack thread timestamp (root message ts)\n}\n\nexport interface ChannelStoreConfig {\n  workingDir: string;\n  botToken: string; // needed for authenticated file downloads\n}\n\nexport class ChannelStore {\n  private workingDir: string;\n  private botToken: string;\n  // Track recently logged message timestamps to prevent duplicates\n  // Key: \"channelId:ts\", automatically cleaned up after 60 seconds\n  private recentlyLogged = new Map<string, number>();\n\n  constructor(config: ChannelStoreConfig) {\n    this.workingDir = config.workingDir;\n    this.botToken = config.botToken;\n\n    // Ensure working directory exists\n    if (!existsSync(this.workingDir)) {\n      mkdirSync(this.workingDir, { recursive: true });\n    }\n  }\n\n  /**\n   * Get or create the directory for a channel/DM\n   */\n  getChannelDir(channelId: string): string {\n    const channelDir = join(this.workingDir, channelId);\n    if (!existsSync(channelDir)) {\n      mkdirSync(channelDir, { recursive: true });\n    }\n    return channelDir;\n  }\n\n  /**\n   * Generate a unique local filename for an attachment\n   */\n  generateLocalFilename(originalName: string, timestamp: string): string {\n    // Convert slack timestamp (1234567890.123456) to milliseconds\n    const ts = Math.floor(parseFloat(timestamp) * 1000);\n    // Sanitize original name (remove problematic characters)\n    const sanitized = originalName.replace(/[^a-zA-Z0-9._-]/g, \"_\");\n    return `${ts}_${sanitized}`;\n  }\n\n  /**\n   * Process attachments from a Slack message event.\n   * Downloads files before returning so callers only receive readable paths.\n   */\n  async processAttachments(\n    channelId: string,\n    files: Array<{ name?: string; url_private_download?: string; url_private?: string }>,\n    timestamp: string,\n  ): Promise<Attachment[]> {\n    const downloads: Array<Promise<Attachment | null>> = [];\n\n    for (const file of files) {\n      const url = file.url_private_download || file.url_private;\n      if (!url) continue;\n      if (!file.name) {\n        log.logWarning(\"Attachment missing name, skipping\", url);\n        continue;\n      }\n\n      const filename = this.generateLocalFilename(file.name, timestamp);\n      const localPath = `${channelId}/attachments/${filename}`;\n      const attachment: Attachment = {\n        original: file.name,\n        localPath,\n      };\n\n      downloads.push(\n        this.downloadAttachment(localPath, url)\n          .then(() => attachment)\n          .catch((error) => {\n            const errorMsg = error instanceof Error ? error.message : String(error);\n            log.logWarning(`Failed to download attachment`, `${localPath}: ${errorMsg}`);\n            return null;\n          }),\n      );\n    }\n\n    const attachments = await Promise.all(downloads);\n    return attachments.filter((attachment): attachment is Attachment => attachment !== null);\n  }\n\n  /**\n   * Log a message to the channel's log.jsonl\n   * Returns false if message was already logged (duplicate)\n   */\n  async logMessage(channelId: string, message: LoggedMessage): Promise<boolean> {\n    // Check for duplicate (same channel + timestamp)\n    const dedupeKey = `${channelId}:${message.ts}`;\n    if (this.recentlyLogged.has(dedupeKey)) {\n      return false; // Already logged\n    }\n\n    // Mark as logged and schedule cleanup after 60 seconds\n    this.recentlyLogged.set(dedupeKey, Date.now());\n    setTimeout(() => this.recentlyLogged.delete(dedupeKey), 60000);\n\n    const logPath = join(this.getChannelDir(channelId), \"log.jsonl\");\n\n    // Ensure message has a date field\n    if (!message.date) {\n      // Parse timestamp to get date\n      let date: Date;\n      if (message.ts.includes(\".\")) {\n        // Slack timestamp format (1234567890.123456)\n        date = new Date(parseFloat(message.ts) * 1000);\n      } else {\n        // Epoch milliseconds\n        date = new Date(parseInt(message.ts, 10));\n      }\n      message.date = date.toISOString();\n    }\n\n    const line = `${JSON.stringify(message)}\\n`;\n    await appendFile(logPath, line, \"utf-8\");\n    return true;\n  }\n\n  /**\n   * Log a bot response\n   */\n  async logBotResponse(channelId: string, text: string, ts: string): Promise<void> {\n    await this.logMessage(channelId, {\n      date: new Date().toISOString(),\n      ts,\n      user: \"bot\",\n      text,\n      attachments: [],\n      isBot: true,\n    });\n  }\n\n  /**\n   * Get the timestamp of the last logged message for a channel\n   * Returns null if no log exists\n   */\n  getLastTimestamp(channelId: string): string | null {\n    const logPath = join(this.workingDir, channelId, \"log.jsonl\");\n    if (!existsSync(logPath)) {\n      return null;\n    }\n\n    try {\n      const content = readFileSync(logPath, \"utf-8\");\n      const lines = content.trim().split(\"\\n\");\n      if (lines.length === 0 || lines[0] === \"\") {\n        return null;\n      }\n      const lastLine = lines[lines.length - 1];\n      const message = JSON.parse(lastLine) as LoggedMessage;\n      return message.ts;\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * Download a single attachment\n   */\n  private async downloadAttachment(localPath: string, url: string): Promise<void> {\n    const filePath = join(this.workingDir, localPath);\n\n    // Ensure directory exists\n    const parentDir = join(this.workingDir, localPath.substring(0, localPath.lastIndexOf(\"/\")));\n    if (!existsSync(parentDir)) {\n      mkdirSync(parentDir, { recursive: true });\n    }\n\n    const response = await fetch(url, {\n      headers: {\n        Authorization: `Bearer ${this.botToken}`,\n      },\n    });\n\n    if (!response.ok) {\n      throw new Error(`HTTP ${response.status}: ${response.statusText}`);\n    }\n\n    const buffer = await response.arrayBuffer();\n    await writeFile(filePath, Buffer.from(buffer));\n  }\n}\n"]}

package/dist/tools/event.d.ts

@@ -13,6 +13,8 @@ interface EventToolContext {
     conversationId: string;
     conversationKind: "direct" | "shared";
     userId: string;
+    sessionKey: string;
+    threadTs?: string;
 }
 export declare function createEventTool(workspaceDir: string): {
     tool: AgentTool<typeof eventSchema>;

package/dist/tools/event.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"event.d.ts","sourceRoot":"","sources":["../../src/tools/event.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAG7D,QAAA,MAAM,WAAW;;;;;;;;EA0Bf,CAAC;AAEH,UAAU,gBAAgB;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACtC,MAAM,EAAE,MAAM,CAAC;CAChB;AAyCD,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG;IACrD,IAAI,EAAE,SAAS,CAAC,OAAO,WAAW,CAAC,CAAC;IACpC,eAAe,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,IAAI,CAAC;CACtD,CAkDA","sourcesContent":["import { mkdir, writeFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport type { AgentTool } from \"@mariozechner/pi-agent-core\";\nimport { Type } from \"@sinclair/typebox\";\n\nconst eventSchema = Type.Object({\n  label: Type.String({\n    description: \"Brief description of the event you're scheduling (shown to user)\",\n  }),\n  type: Type.Union([Type.Literal(\"immediate\"), Type.Literal(\"one-shot\"), Type.Literal(\"periodic\")]),\n  text: Type.String({ description: \"The reminder or event text to send when it fires\" }),\n  at: Type.Optional(\n    Type.String({\n      description: \"ISO 8601 timestamp with offset, required for one-shot events\",\n    }),\n  ),\n  schedule: Type.Optional(\n    Type.String({\n      description: \"Cron schedule, required for periodic events\",\n    }),\n  ),\n  timezone: Type.Optional(\n    Type.String({\n      description: \"IANA timezone, required for periodic events\",\n    }),\n  ),\n  filenamePrefix: Type.Optional(\n    Type.String({\n      description: \"Optional filename prefix for the event file\",\n    }),\n  ),\n});\n\ninterface EventToolContext {\n  platform: string;\n  conversationId: string;\n  conversationKind: \"direct\" | \"shared\";\n  userId: string;\n}\n\ntype EventToolParams = {\n  label: string;\n  type: \"immediate\" | \"one-shot\" | \"periodic\";\n  text: string;\n  at?: string;\n  schedule?: string;\n  timezone?: string;\n  filenamePrefix?: string;\n};\n\ntype EventPayload =\n  | {\n      type: \"immediate\";\n      platform: string;\n      conversationId: string;\n      conversationKind: \"direct\" | \"shared\";\n      userId: string;\n      text: string;\n    }\n  | {\n      type: \"one-shot\";\n      platform: string;\n      conversationId: string;\n      conversationKind: \"direct\" | \"shared\";\n      userId: string;\n      text: string;\n      at: string;\n    }\n  | {\n      type: \"periodic\";\n      platform: string;\n      conversationId: string;\n      conversationKind: \"direct\" | \"shared\";\n      userId: string;\n      text: string;\n      schedule: string;\n      timezone: string;\n    };\n\nexport function createEventTool(workspaceDir: string): {\n  tool: AgentTool<typeof eventSchema>;\n  setEventContext: (context: EventToolContext) => void;\n} {\n  let eventContext: EventToolContext | null = null;\n\n  const tool: AgentTool<typeof eventSchema> = {\n    name: \"event\",\n    label: \"event\",\n    description:\n      \"Schedule an immediate, one-shot, or periodic event for the current conversation. This automatically writes to the correct events directory and fills the current platform, conversation, conversation kind, and requester userId.\",\n    parameters: eventSchema,\n    execute: async (_toolCallId: string, params: EventToolParams, signal?: AbortSignal) => {\n      if (signal?.aborted) {\n        throw new Error(\"Operation aborted\");\n      }\n\n      if (!eventContext) {\n        throw new Error(\"Event context not configured\");\n      }\n\n      const payload = buildEventPayload(params, eventContext);\n      const eventsDir = join(workspaceDir, \"events\");\n      await mkdir(eventsDir, { recursive: true });\n\n      const prefix = sanitizeFileSegment(params.filenamePrefix || payload.type || \"event\");\n      const filename = `${prefix}-${Date.now()}.json`;\n      const filePath = join(eventsDir, filename);\n      await writeFile(filePath, JSON.stringify(payload) + \"\\n\", \"utf-8\");\n\n      return {\n        content: [\n          {\n            type: \"text\",\n            text:\n              payload.type === \"periodic\"\n                ? `Scheduled periodic event ${filename} for ${payload.platform}/${payload.conversationId} (${payload.schedule} ${payload.timezone})`\n                : payload.type === \"one-shot\"\n                  ? `Scheduled one-shot event ${filename} for ${payload.platform}/${payload.conversationId} at ${payload.at}`\n                  : `Queued immediate event ${filename} for ${payload.platform}/${payload.conversationId}`,\n          },\n        ],\n        details: undefined,\n      };\n    },\n  };\n\n  return {\n    tool,\n    setEventContext: (context: EventToolContext) => {\n      eventContext = context;\n    },\n  };\n}\n\nfunction buildEventPayload(params: EventToolParams, context: EventToolContext): EventPayload {\n  const base = {\n    platform: context.platform,\n    conversationId: context.conversationId,\n    conversationKind: context.conversationKind,\n    userId: context.userId,\n    text: params.text,\n  };\n\n  if (params.type === \"immediate\") {\n    return { ...base, type: \"immediate\" };\n  }\n\n  if (params.type === \"one-shot\") {\n    if (!params.at) {\n      throw new Error(\"`at` is required for one-shot events\");\n    }\n    return { ...base, type: \"one-shot\", at: params.at };\n  }\n\n  if (!params.schedule) {\n    throw new Error(\"`schedule` is required for periodic events\");\n  }\n  if (!params.timezone) {\n    throw new Error(\"`timezone` is required for periodic events\");\n  }\n  return {\n    ...base,\n    type: \"periodic\",\n    schedule: params.schedule,\n    timezone: params.timezone,\n  };\n}\n\nfunction sanitizeFileSegment(value: string): string {\n  const sanitized = value\n    .trim()\n    .toLowerCase()\n    .replace(/[^a-z0-9._-]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  return sanitized || \"event\";\n}\n"]}
+{"version":3,"file":"event.d.ts","sourceRoot":"","sources":["../../src/tools/event.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAI7D,QAAA,MAAM,WAAW;;;;;;;;EA0Bf,CAAC;AAEH,UAAU,gBAAgB;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AA4CD,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG;IACrD,IAAI,EAAE,SAAS,CAAC,OAAO,WAAW,CAAC,CAAC;IACpC,eAAe,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,IAAI,CAAC;CACtD,CAgEA","sourcesContent":["import { mkdir, stat, writeFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport type { AgentTool } from \"@mariozechner/pi-agent-core\";\nimport { Type } from \"@sinclair/typebox\";\nimport * as log from \"../log.js\";\n\nconst eventSchema = Type.Object({\n  label: Type.String({\n    description: \"Brief description of the event you're scheduling (shown to user)\",\n  }),\n  type: Type.Union([Type.Literal(\"immediate\"), Type.Literal(\"one-shot\"), Type.Literal(\"periodic\")]),\n  text: Type.String({ description: \"The reminder or event text to send when it fires\" }),\n  at: Type.Optional(\n    Type.String({\n      description: \"ISO 8601 timestamp with offset, required for one-shot events\",\n    }),\n  ),\n  schedule: Type.Optional(\n    Type.String({\n      description: \"Cron schedule, required for periodic events\",\n    }),\n  ),\n  timezone: Type.Optional(\n    Type.String({\n      description: \"IANA timezone, required for periodic events\",\n    }),\n  ),\n  filenamePrefix: Type.Optional(\n    Type.String({\n      description: \"Optional filename prefix for the event file\",\n    }),\n  ),\n});\n\ninterface EventToolContext {\n  platform: string;\n  conversationId: string;\n  conversationKind: \"direct\" | \"shared\";\n  userId: string;\n  sessionKey: string;\n  threadTs?: string;\n}\n\ntype EventToolParams = {\n  label: string;\n  type: \"immediate\" | \"one-shot\" | \"periodic\";\n  text: string;\n  at?: string;\n  schedule?: string;\n  timezone?: string;\n  filenamePrefix?: string;\n};\n\ntype EventPayload =\n  | {\n      type: \"immediate\";\n      platform: string;\n      conversationId: string;\n      conversationKind: \"direct\" | \"shared\";\n      userId: string;\n      text: string;\n      sessionKey?: string;\n      threadTs?: string;\n    }\n  | {\n      type: \"one-shot\";\n      platform: string;\n      conversationId: string;\n      conversationKind: \"direct\" | \"shared\";\n      userId: string;\n      text: string;\n      at: string;\n    }\n  | {\n      type: \"periodic\";\n      platform: string;\n      conversationId: string;\n      conversationKind: \"direct\" | \"shared\";\n      userId: string;\n      text: string;\n      schedule: string;\n      timezone: string;\n      sessionKey?: string;\n    };\n\nexport function createEventTool(workspaceDir: string): {\n  tool: AgentTool<typeof eventSchema>;\n  setEventContext: (context: EventToolContext) => void;\n} {\n  let eventContext: EventToolContext | null = null;\n\n  const tool: AgentTool<typeof eventSchema> = {\n    name: \"event\",\n    label: \"event\",\n    description:\n      \"Schedule an immediate, one-shot, or periodic event for the current conversation. This automatically writes to the correct events directory and fills the current platform, conversation, conversation kind, and requester userId.\",\n    parameters: eventSchema,\n    execute: async (_toolCallId: string, params: EventToolParams, signal?: AbortSignal) => {\n      if (signal?.aborted) {\n        throw new Error(\"Operation aborted\");\n      }\n\n      if (!eventContext) {\n        throw new Error(\"Event context not configured\");\n      }\n\n      const payload = buildEventPayload(params, eventContext);\n      const eventsDir = join(workspaceDir, \"events\");\n      await mkdir(eventsDir, { recursive: true });\n\n      const prefix = sanitizeFileSegment(params.filenamePrefix || payload.type || \"event\");\n      const filename = `${prefix}-${Date.now()}.json`;\n      const filePath = join(eventsDir, filename);\n      const content = JSON.stringify(payload) + \"\\n\";\n\n      log.logInfo(\n        `Writing event file: ${filePath} (type=${payload.type}, platform=${payload.platform}, conversation=${payload.conversationId})`,\n      );\n      await writeFile(filePath, content, \"utf-8\");\n\n      try {\n        const fileStat = await stat(filePath);\n        log.logInfo(\n          `Wrote event file: ${filePath} (${fileStat.size} bytes, mtime=${fileStat.mtime.toISOString()})`,\n        );\n      } catch (err) {\n        log.logWarning(`Event file missing immediately after write: ${filePath}`, String(err));\n      }\n\n      return {\n        content: [\n          {\n            type: \"text\",\n            text:\n              payload.type === \"periodic\"\n                ? `Scheduled periodic event ${filename} for ${payload.platform}/${payload.conversationId} (${payload.schedule} ${payload.timezone})`\n                : payload.type === \"one-shot\"\n                  ? `Scheduled one-shot event ${filename} for ${payload.platform}/${payload.conversationId} at ${payload.at}`\n                  : `Queued immediate event ${filename} for ${payload.platform}/${payload.conversationId}`,\n          },\n        ],\n        details: undefined,\n      };\n    },\n  };\n\n  return {\n    tool,\n    setEventContext: (context: EventToolContext) => {\n      eventContext = context;\n    },\n  };\n}\n\nfunction buildEventPayload(params: EventToolParams, context: EventToolContext): EventPayload {\n  const base = {\n    platform: context.platform,\n    conversationId: context.conversationId,\n    conversationKind: context.conversationKind,\n    userId: context.userId,\n    text: params.text,\n  };\n\n  if (params.type === \"immediate\") {\n    return {\n      ...base,\n      type: \"immediate\",\n      sessionKey: context.sessionKey,\n      ...(context.threadTs ? { threadTs: context.threadTs } : {}),\n    };\n  }\n\n  if (params.type === \"one-shot\") {\n    if (!params.at) {\n      throw new Error(\"`at` is required for one-shot events\");\n    }\n    // No sessionKey or threadTs: reminders should fire as top-level messages, not buried in old threads\n    return { ...base, type: \"one-shot\", at: params.at };\n  }\n\n  if (!params.schedule) {\n    throw new Error(\"`schedule` is required for periodic events\");\n  }\n  if (!params.timezone) {\n    throw new Error(\"`timezone` is required for periodic events\");\n  }\n  // No threadTs: periodic events should always be top-level; keep sessionKey for task context\n  return {\n    ...base,\n    type: \"periodic\",\n    schedule: params.schedule,\n    timezone: params.timezone,\n    sessionKey: context.sessionKey,\n  };\n}\n\nfunction sanitizeFileSegment(value: string): string {\n  const sanitized = value\n    .trim()\n    .toLowerCase()\n    .replace(/[^a-z0-9._-]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  return sanitized || \"event\";\n}\n"]}

package/dist/tools/event.js

@@ -1,6 +1,7 @@
-import { mkdir, writeFile } from "node:fs/promises";
+import { mkdir, stat, writeFile } from "node:fs/promises";
 import { join } from "node:path";
 import { Type } from "@sinclair/typebox";
+import * as log from "../log.js";
 const eventSchema = Type.Object({
     label: Type.String({
         description: "Brief description of the event you're scheduling (shown to user)",
@@ -40,7 +41,16 @@ export function createEventTool(workspaceDir) {
             const prefix = sanitizeFileSegment(params.filenamePrefix || payload.type || "event");
             const filename = `${prefix}-${Date.now()}.json`;
             const filePath = join(eventsDir, filename);
-            await writeFile(filePath, JSON.stringify(payload) + "\n", "utf-8");
+            const content = JSON.stringify(payload) + "\n";
+            log.logInfo(`Writing event file: ${filePath} (type=${payload.type}, platform=${payload.platform}, conversation=${payload.conversationId})`);
+            await writeFile(filePath, content, "utf-8");
+            try {
+                const fileStat = await stat(filePath);
+                log.logInfo(`Wrote event file: ${filePath} (${fileStat.size} bytes, mtime=${fileStat.mtime.toISOString()})`);
+            }
+            catch (err) {
+                log.logWarning(`Event file missing immediately after write: ${filePath}`, String(err));
+            }
             return {
                 content: [
                     {
@@ -72,12 +82,18 @@ function buildEventPayload(params, context) {
         text: params.text,
     };
     if (params.type === "immediate") {
-        return { ...base, type: "immediate" };
+        return {
+            ...base,
+            type: "immediate",
+            sessionKey: context.sessionKey,
+            ...(context.threadTs ? { threadTs: context.threadTs } : {}),
+        };
     }
     if (params.type === "one-shot") {
         if (!params.at) {
             throw new Error("`at` is required for one-shot events");
         }
+        // No sessionKey or threadTs: reminders should fire as top-level messages, not buried in old threads
         return { ...base, type: "one-shot", at: params.at };
     }
     if (!params.schedule) {
@@ -86,11 +102,13 @@ function buildEventPayload(params, context) {
     if (!params.timezone) {
         throw new Error("`timezone` is required for periodic events");
     }
+    // No threadTs: periodic events should always be top-level; keep sessionKey for task context
     return {
         ...base,
         type: "periodic",
         schedule: params.schedule,
         timezone: params.timezone,
+        sessionKey: context.sessionKey,
     };
 }
 function sanitizeFileSegment(value) {

package/dist/tools/event.js.map

@@ -1 +1 @@
-{"version":3,"file":"event.js","sourceRoot":"","sources":["../../src/tools/event.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAEzC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC;IAC9B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC;QACjB,WAAW,EAAE,kEAAkE;KAChF,CAAC;IACF,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IACjG,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kDAAkD,EAAE,CAAC;IACtF,EAAE,EAAE,IAAI,CAAC,QAAQ,CACf,IAAI,CAAC,MAAM,CAAC;QACV,WAAW,EAAE,8DAA8D;KAC5E,CAAC,CACH;IACD,QAAQ,EAAE,IAAI,CAAC,QAAQ,CACrB,IAAI,CAAC,MAAM,CAAC;QACV,WAAW,EAAE,6CAA6C;KAC3D,CAAC,CACH;IACD,QAAQ,EAAE,IAAI,CAAC,QAAQ,CACrB,IAAI,CAAC,MAAM,CAAC;QACV,WAAW,EAAE,6CAA6C;KAC3D,CAAC,CACH;IACD,cAAc,EAAE,IAAI,CAAC,QAAQ,CAC3B,IAAI,CAAC,MAAM,CAAC;QACV,WAAW,EAAE,6CAA6C;KAC3D,CAAC,CACH;CACF,CAAC,CAAC;AAgDH,MAAM,UAAU,eAAe,CAAC,YAAoB;IAIlD,IAAI,YAAY,GAA4B,IAAI,CAAC;IAEjD,MAAM,IAAI,GAAkC;QAC1C,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,OAAO;QACd,WAAW,EACT,mOAAmO;QACrO,UAAU,EAAE,WAAW;QACvB,OAAO,EAAE,KAAK,EAAE,WAAmB,EAAE,MAAuB,EAAE,MAAoB,EAAE,EAAE;YACpF,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACvC,CAAC;YAED,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAClD,CAAC;YAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YACxD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YAC/C,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAE5C,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,cAAc,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC;YACrF,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC;YAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC3C,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;YAEnE,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EACF,OAAO,CAAC,IAAI,KAAK,UAAU;4BACzB,CAAC,CAAC,4BAA4B,QAAQ,QAAQ,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,cAAc,KAAK,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,GAAG;4BACpI,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU;gCAC3B,CAAC,CAAC,4BAA4B,QAAQ,QAAQ,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,cAAc,OAAO,OAAO,CAAC,EAAE,EAAE;gCAC3G,CAAC,CAAC,0BAA0B,QAAQ,QAAQ,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,cAAc,EAAE;qBAC/F;iBACF;gBACD,OAAO,EAAE,SAAS;aACnB,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,OAAO;QACL,IAAI;QACJ,eAAe,EAAE,CAAC,OAAyB,EAAE,EAAE;YAC7C,YAAY,GAAG,OAAO,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAuB,EAAE,OAAyB;IAC3E,MAAM,IAAI,GAAG;QACX,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC;IAEF,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAChC,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACxC,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IACtD,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO;QACL,GAAG,IAAI;QACP,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,MAAM,SAAS,GAAG,KAAK;SACpB,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,SAAS,IAAI,OAAO,CAAC;AAC9B,CAAC","sourcesContent":["import { mkdir, writeFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport type { AgentTool } from \"@mariozechner/pi-agent-core\";\nimport { Type } from \"@sinclair/typebox\";\n\nconst eventSchema = Type.Object({\n  label: Type.String({\n    description: \"Brief description of the event you're scheduling (shown to user)\",\n  }),\n  type: Type.Union([Type.Literal(\"immediate\"), Type.Literal(\"one-shot\"), Type.Literal(\"periodic\")]),\n  text: Type.String({ description: \"The reminder or event text to send when it fires\" }),\n  at: Type.Optional(\n    Type.String({\n      description: \"ISO 8601 timestamp with offset, required for one-shot events\",\n    }),\n  ),\n  schedule: Type.Optional(\n    Type.String({\n      description: \"Cron schedule, required for periodic events\",\n    }),\n  ),\n  timezone: Type.Optional(\n    Type.String({\n      description: \"IANA timezone, required for periodic events\",\n    }),\n  ),\n  filenamePrefix: Type.Optional(\n    Type.String({\n      description: \"Optional filename prefix for the event file\",\n    }),\n  ),\n});\n\ninterface EventToolContext {\n  platform: string;\n  conversationId: string;\n  conversationKind: \"direct\" | \"shared\";\n  userId: string;\n}\n\ntype EventToolParams = {\n  label: string;\n  type: \"immediate\" | \"one-shot\" | \"periodic\";\n  text: string;\n  at?: string;\n  schedule?: string;\n  timezone?: string;\n  filenamePrefix?: string;\n};\n\ntype EventPayload =\n  | {\n      type: \"immediate\";\n      platform: string;\n      conversationId: string;\n      conversationKind: \"direct\" | \"shared\";\n      userId: string;\n      text: string;\n    }\n  | {\n      type: \"one-shot\";\n      platform: string;\n      conversationId: string;\n      conversationKind: \"direct\" | \"shared\";\n      userId: string;\n      text: string;\n      at: string;\n    }\n  | {\n      type: \"periodic\";\n      platform: string;\n      conversationId: string;\n      conversationKind: \"direct\" | \"shared\";\n      userId: string;\n      text: string;\n      schedule: string;\n      timezone: string;\n    };\n\nexport function createEventTool(workspaceDir: string): {\n  tool: AgentTool<typeof eventSchema>;\n  setEventContext: (context: EventToolContext) => void;\n} {\n  let eventContext: EventToolContext | null = null;\n\n  const tool: AgentTool<typeof eventSchema> = {\n    name: \"event\",\n    label: \"event\",\n    description:\n      \"Schedule an immediate, one-shot, or periodic event for the current conversation. This automatically writes to the correct events directory and fills the current platform, conversation, conversation kind, and requester userId.\",\n    parameters: eventSchema,\n    execute: async (_toolCallId: string, params: EventToolParams, signal?: AbortSignal) => {\n      if (signal?.aborted) {\n        throw new Error(\"Operation aborted\");\n      }\n\n      if (!eventContext) {\n        throw new Error(\"Event context not configured\");\n      }\n\n      const payload = buildEventPayload(params, eventContext);\n      const eventsDir = join(workspaceDir, \"events\");\n      await mkdir(eventsDir, { recursive: true });\n\n      const prefix = sanitizeFileSegment(params.filenamePrefix || payload.type || \"event\");\n      const filename = `${prefix}-${Date.now()}.json`;\n      const filePath = join(eventsDir, filename);\n      await writeFile(filePath, JSON.stringify(payload) + \"\\n\", \"utf-8\");\n\n      return {\n        content: [\n          {\n            type: \"text\",\n            text:\n              payload.type === \"periodic\"\n                ? `Scheduled periodic event ${filename} for ${payload.platform}/${payload.conversationId} (${payload.schedule} ${payload.timezone})`\n                : payload.type === \"one-shot\"\n                  ? `Scheduled one-shot event ${filename} for ${payload.platform}/${payload.conversationId} at ${payload.at}`\n                  : `Queued immediate event ${filename} for ${payload.platform}/${payload.conversationId}`,\n          },\n        ],\n        details: undefined,\n      };\n    },\n  };\n\n  return {\n    tool,\n    setEventContext: (context: EventToolContext) => {\n      eventContext = context;\n    },\n  };\n}\n\nfunction buildEventPayload(params: EventToolParams, context: EventToolContext): EventPayload {\n  const base = {\n    platform: context.platform,\n    conversationId: context.conversationId,\n    conversationKind: context.conversationKind,\n    userId: context.userId,\n    text: params.text,\n  };\n\n  if (params.type === \"immediate\") {\n    return { ...base, type: \"immediate\" };\n  }\n\n  if (params.type === \"one-shot\") {\n    if (!params.at) {\n      throw new Error(\"`at` is required for one-shot events\");\n    }\n    return { ...base, type: \"one-shot\", at: params.at };\n  }\n\n  if (!params.schedule) {\n    throw new Error(\"`schedule` is required for periodic events\");\n  }\n  if (!params.timezone) {\n    throw new Error(\"`timezone` is required for periodic events\");\n  }\n  return {\n    ...base,\n    type: \"periodic\",\n    schedule: params.schedule,\n    timezone: params.timezone,\n  };\n}\n\nfunction sanitizeFileSegment(value: string): string {\n  const sanitized = value\n    .trim()\n    .toLowerCase()\n    .replace(/[^a-z0-9._-]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  return sanitized || \"event\";\n}\n"]}
+{"version":3,"file":"event.js","sourceRoot":"","sources":["../../src/tools/event.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,KAAK,GAAG,MAAM,WAAW,CAAC;AAEjC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC;IAC9B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC;QACjB,WAAW,EAAE,kEAAkE;KAChF,CAAC;IACF,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IACjG,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kDAAkD,EAAE,CAAC;IACtF,EAAE,EAAE,IAAI,CAAC,QAAQ,CACf,IAAI,CAAC,MAAM,CAAC;QACV,WAAW,EAAE,8DAA8D;KAC5E,CAAC,CACH;IACD,QAAQ,EAAE,IAAI,CAAC,QAAQ,CACrB,IAAI,CAAC,MAAM,CAAC;QACV,WAAW,EAAE,6CAA6C;KAC3D,CAAC,CACH;IACD,QAAQ,EAAE,IAAI,CAAC,QAAQ,CACrB,IAAI,CAAC,MAAM,CAAC;QACV,WAAW,EAAE,6CAA6C;KAC3D,CAAC,CACH;IACD,cAAc,EAAE,IAAI,CAAC,QAAQ,CAC3B,IAAI,CAAC,MAAM,CAAC;QACV,WAAW,EAAE,6CAA6C;KAC3D,CAAC,CACH;CACF,CAAC,CAAC;AAqDH,MAAM,UAAU,eAAe,CAAC,YAAoB;IAIlD,IAAI,YAAY,GAA4B,IAAI,CAAC;IAEjD,MAAM,IAAI,GAAkC;QAC1C,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,OAAO;QACd,WAAW,EACT,mOAAmO;QACrO,UAAU,EAAE,WAAW;QACvB,OAAO,EAAE,KAAK,EAAE,WAAmB,EAAE,MAAuB,EAAE,MAAoB,EAAE,EAAE;YACpF,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACvC,CAAC;YAED,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAClD,CAAC;YAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YACxD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YAC/C,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAE5C,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,cAAc,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC;YACrF,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC;YAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;YAE/C,GAAG,CAAC,OAAO,CACT,uBAAuB,QAAQ,UAAU,OAAO,CAAC,IAAI,cAAc,OAAO,CAAC,QAAQ,kBAAkB,OAAO,CAAC,cAAc,GAAG,CAC/H,CAAC;YACF,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAE5C,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACtC,GAAG,CAAC,OAAO,CACT,qBAAqB,QAAQ,KAAK,QAAQ,CAAC,IAAI,iBAAiB,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,CAChG,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,UAAU,CAAC,+CAA+C,QAAQ,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACzF,CAAC;YAED,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EACF,OAAO,CAAC,IAAI,KAAK,UAAU;4BACzB,CAAC,CAAC,4BAA4B,QAAQ,QAAQ,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,cAAc,KAAK,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,GAAG;4BACpI,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU;gCAC3B,CAAC,CAAC,4BAA4B,QAAQ,QAAQ,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,cAAc,OAAO,OAAO,CAAC,EAAE,EAAE;gCAC3G,CAAC,CAAC,0BAA0B,QAAQ,QAAQ,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,cAAc,EAAE;qBAC/F;iBACF;gBACD,OAAO,EAAE,SAAS;aACnB,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,OAAO;QACL,IAAI;QACJ,eAAe,EAAE,CAAC,OAAyB,EAAE,EAAE;YAC7C,YAAY,GAAG,OAAO,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAuB,EAAE,OAAyB;IAC3E,MAAM,IAAI,GAAG;QACX,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC;IAEF,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAChC,OAAO;YACL,GAAG,IAAI;YACP,IAAI,EAAE,WAAW;YACjB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,oGAAoG;QACpG,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IACtD,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,4FAA4F;IAC5F,OAAO;QACL,GAAG,IAAI;QACP,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,MAAM,SAAS,GAAG,KAAK;SACpB,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,SAAS,IAAI,OAAO,CAAC;AAC9B,CAAC","sourcesContent":["import { mkdir, stat, writeFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport type { AgentTool } from \"@mariozechner/pi-agent-core\";\nimport { Type } from \"@sinclair/typebox\";\nimport * as log from \"../log.js\";\n\nconst eventSchema = Type.Object({\n  label: Type.String({\n    description: \"Brief description of the event you're scheduling (shown to user)\",\n  }),\n  type: Type.Union([Type.Literal(\"immediate\"), Type.Literal(\"one-shot\"), Type.Literal(\"periodic\")]),\n  text: Type.String({ description: \"The reminder or event text to send when it fires\" }),\n  at: Type.Optional(\n    Type.String({\n      description: \"ISO 8601 timestamp with offset, required for one-shot events\",\n    }),\n  ),\n  schedule: Type.Optional(\n    Type.String({\n      description: \"Cron schedule, required for periodic events\",\n    }),\n  ),\n  timezone: Type.Optional(\n    Type.String({\n      description: \"IANA timezone, required for periodic events\",\n    }),\n  ),\n  filenamePrefix: Type.Optional(\n    Type.String({\n      description: \"Optional filename prefix for the event file\",\n    }),\n  ),\n});\n\ninterface EventToolContext {\n  platform: string;\n  conversationId: string;\n  conversationKind: \"direct\" | \"shared\";\n  userId: string;\n  sessionKey: string;\n  threadTs?: string;\n}\n\ntype EventToolParams = {\n  label: string;\n  type: \"immediate\" | \"one-shot\" | \"periodic\";\n  text: string;\n  at?: string;\n  schedule?: string;\n  timezone?: string;\n  filenamePrefix?: string;\n};\n\ntype EventPayload =\n  | {\n      type: \"immediate\";\n      platform: string;\n      conversationId: string;\n      conversationKind: \"direct\" | \"shared\";\n      userId: string;\n      text: string;\n      sessionKey?: string;\n      threadTs?: string;\n    }\n  | {\n      type: \"one-shot\";\n      platform: string;\n      conversationId: string;\n      conversationKind: \"direct\" | \"shared\";\n      userId: string;\n      text: string;\n      at: string;\n    }\n  | {\n      type: \"periodic\";\n      platform: string;\n      conversationId: string;\n      conversationKind: \"direct\" | \"shared\";\n      userId: string;\n      text: string;\n      schedule: string;\n      timezone: string;\n      sessionKey?: string;\n    };\n\nexport function createEventTool(workspaceDir: string): {\n  tool: AgentTool<typeof eventSchema>;\n  setEventContext: (context: EventToolContext) => void;\n} {\n  let eventContext: EventToolContext | null = null;\n\n  const tool: AgentTool<typeof eventSchema> = {\n    name: \"event\",\n    label: \"event\",\n    description:\n      \"Schedule an immediate, one-shot, or periodic event for the current conversation. This automatically writes to the correct events directory and fills the current platform, conversation, conversation kind, and requester userId.\",\n    parameters: eventSchema,\n    execute: async (_toolCallId: string, params: EventToolParams, signal?: AbortSignal) => {\n      if (signal?.aborted) {\n        throw new Error(\"Operation aborted\");\n      }\n\n      if (!eventContext) {\n        throw new Error(\"Event context not configured\");\n      }\n\n      const payload = buildEventPayload(params, eventContext);\n      const eventsDir = join(workspaceDir, \"events\");\n      await mkdir(eventsDir, { recursive: true });\n\n      const prefix = sanitizeFileSegment(params.filenamePrefix || payload.type || \"event\");\n      const filename = `${prefix}-${Date.now()}.json`;\n      const filePath = join(eventsDir, filename);\n      const content = JSON.stringify(payload) + \"\\n\";\n\n      log.logInfo(\n        `Writing event file: ${filePath} (type=${payload.type}, platform=${payload.platform}, conversation=${payload.conversationId})`,\n      );\n      await writeFile(filePath, content, \"utf-8\");\n\n      try {\n        const fileStat = await stat(filePath);\n        log.logInfo(\n          `Wrote event file: ${filePath} (${fileStat.size} bytes, mtime=${fileStat.mtime.toISOString()})`,\n        );\n      } catch (err) {\n        log.logWarning(`Event file missing immediately after write: ${filePath}`, String(err));\n      }\n\n      return {\n        content: [\n          {\n            type: \"text\",\n            text:\n              payload.type === \"periodic\"\n                ? `Scheduled periodic event ${filename} for ${payload.platform}/${payload.conversationId} (${payload.schedule} ${payload.timezone})`\n                : payload.type === \"one-shot\"\n                  ? `Scheduled one-shot event ${filename} for ${payload.platform}/${payload.conversationId} at ${payload.at}`\n                  : `Queued immediate event ${filename} for ${payload.platform}/${payload.conversationId}`,\n          },\n        ],\n        details: undefined,\n      };\n    },\n  };\n\n  return {\n    tool,\n    setEventContext: (context: EventToolContext) => {\n      eventContext = context;\n    },\n  };\n}\n\nfunction buildEventPayload(params: EventToolParams, context: EventToolContext): EventPayload {\n  const base = {\n    platform: context.platform,\n    conversationId: context.conversationId,\n    conversationKind: context.conversationKind,\n    userId: context.userId,\n    text: params.text,\n  };\n\n  if (params.type === \"immediate\") {\n    return {\n      ...base,\n      type: \"immediate\",\n      sessionKey: context.sessionKey,\n      ...(context.threadTs ? { threadTs: context.threadTs } : {}),\n    };\n  }\n\n  if (params.type === \"one-shot\") {\n    if (!params.at) {\n      throw new Error(\"`at` is required for one-shot events\");\n    }\n    // No sessionKey or threadTs: reminders should fire as top-level messages, not buried in old threads\n    return { ...base, type: \"one-shot\", at: params.at };\n  }\n\n  if (!params.schedule) {\n    throw new Error(\"`schedule` is required for periodic events\");\n  }\n  if (!params.timezone) {\n    throw new Error(\"`timezone` is required for periodic events\");\n  }\n  // No threadTs: periodic events should always be top-level; keep sessionKey for task context\n  return {\n    ...base,\n    type: \"periodic\",\n    schedule: params.schedule,\n    timezone: params.timezone,\n    sessionKey: context.sessionKey,\n  };\n}\n\nfunction sanitizeFileSegment(value: string): string {\n  const sanitized = value\n    .trim()\n    .toLowerCase()\n    .replace(/[^a-z0-9._-]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  return sanitized || \"event\";\n}\n"]}

package/dist/tools/index.d.ts

@@ -8,6 +8,8 @@ export declare function createMamaTools(executor: Executor, workspaceDir: string
         conversationId: string;
         conversationKind: "direct" | "shared";
         userId: string;
+        sessionKey: string;
+        threadTs?: string;
     }) => void;
 };
 //# sourceMappingURL=index.d.ts.map

package/dist/tools/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAE7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAO9C,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,QAAQ,EAClB,YAAY,EAAE,MAAM,GACnB;IACD,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;IACxB,iBAAiB,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;IACrF,eAAe,EAAE,CAAC,OAAO,EAAE;QACzB,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,EAAE,QAAQ,GAAG,QAAQ,CAAC;QACtC,MAAM,EAAE,MAAM,CAAC;KAChB,KAAK,IAAI,CAAC;CACZ,CAeA","sourcesContent":["import type { AgentTool } from \"@mariozechner/pi-agent-core\";\nimport { createAttachTool } from \"../adapters/slack/tools/attach.js\";\nimport type { Executor } from \"../sandbox.js\";\nimport { createBashTool } from \"./bash.js\";\nimport { createEditTool } from \"./edit.js\";\nimport { createEventTool } from \"./event.js\";\nimport { createReadTool } from \"./read.js\";\nimport { createWriteTool } from \"./write.js\";\n\nexport function createMamaTools(\n  executor: Executor,\n  workspaceDir: string,\n): {\n  tools: AgentTool<any>[];\n  setUploadFunction: (fn: (filePath: string, title?: string) => Promise<void>) => void;\n  setEventContext: (context: {\n    platform: string;\n    conversationId: string;\n    conversationKind: \"direct\" | \"shared\";\n    userId: string;\n  }) => void;\n} {\n  const { tool: attachTool, setUploadFunction } = createAttachTool();\n  const { tool: eventTool, setEventContext } = createEventTool(workspaceDir);\n  return {\n    tools: [\n      createReadTool(executor),\n      createBashTool(executor),\n      createEditTool(executor),\n      createWriteTool(executor),\n      eventTool,\n      attachTool,\n    ],\n    setUploadFunction,\n    setEventContext,\n  };\n}\n"]}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAE7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAO9C,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,QAAQ,EAClB,YAAY,EAAE,MAAM,GACnB;IACD,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;IACxB,iBAAiB,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;IACrF,eAAe,EAAE,CAAC,OAAO,EAAE;QACzB,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,EAAE,QAAQ,GAAG,QAAQ,CAAC;QACtC,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,KAAK,IAAI,CAAC;CACZ,CAeA","sourcesContent":["import type { AgentTool } from \"@mariozechner/pi-agent-core\";\nimport { createAttachTool } from \"../adapters/slack/tools/attach.js\";\nimport type { Executor } from \"../sandbox.js\";\nimport { createBashTool } from \"./bash.js\";\nimport { createEditTool } from \"./edit.js\";\nimport { createEventTool } from \"./event.js\";\nimport { createReadTool } from \"./read.js\";\nimport { createWriteTool } from \"./write.js\";\n\nexport function createMamaTools(\n  executor: Executor,\n  workspaceDir: string,\n): {\n  tools: AgentTool<any>[];\n  setUploadFunction: (fn: (filePath: string, title?: string) => Promise<void>) => void;\n  setEventContext: (context: {\n    platform: string;\n    conversationId: string;\n    conversationKind: \"direct\" | \"shared\";\n    userId: string;\n    sessionKey: string;\n    threadTs?: string;\n  }) => void;\n} {\n  const { tool: attachTool, setUploadFunction } = createAttachTool();\n  const { tool: eventTool, setEventContext } = createEventTool(workspaceDir);\n  return {\n    tools: [\n      createReadTool(executor),\n      createBashTool(executor),\n      createEditTool(executor),\n      createWriteTool(executor),\n      eventTool,\n      attachTool,\n    ],\n    setUploadFunction,\n    setEventContext,\n  };\n}\n"]}

package/dist/tools/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAErE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,UAAU,eAAe,CAC7B,QAAkB,EAClB,YAAoB;IAWpB,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,gBAAgB,EAAE,CAAC;IACnE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAC3E,OAAO;QACL,KAAK,EAAE;YACL,cAAc,CAAC,QAAQ,CAAC;YACxB,cAAc,CAAC,QAAQ,CAAC;YACxB,cAAc,CAAC,QAAQ,CAAC;YACxB,eAAe,CAAC,QAAQ,CAAC;YACzB,SAAS;YACT,UAAU;SACX;QACD,iBAAiB;QACjB,eAAe;KAChB,CAAC;AACJ,CAAC","sourcesContent":["import type { AgentTool } from \"@mariozechner/pi-agent-core\";\nimport { createAttachTool } from \"../adapters/slack/tools/attach.js\";\nimport type { Executor } from \"../sandbox.js\";\nimport { createBashTool } from \"./bash.js\";\nimport { createEditTool } from \"./edit.js\";\nimport { createEventTool } from \"./event.js\";\nimport { createReadTool } from \"./read.js\";\nimport { createWriteTool } from \"./write.js\";\n\nexport function createMamaTools(\n  executor: Executor,\n  workspaceDir: string,\n): {\n  tools: AgentTool<any>[];\n  setUploadFunction: (fn: (filePath: string, title?: string) => Promise<void>) => void;\n  setEventContext: (context: {\n    platform: string;\n    conversationId: string;\n    conversationKind: \"direct\" | \"shared\";\n    userId: string;\n  }) => void;\n} {\n  const { tool: attachTool, setUploadFunction } = createAttachTool();\n  const { tool: eventTool, setEventContext } = createEventTool(workspaceDir);\n  return {\n    tools: [\n      createReadTool(executor),\n      createBashTool(executor),\n      createEditTool(executor),\n      createWriteTool(executor),\n      eventTool,\n      attachTool,\n    ],\n    setUploadFunction,\n    setEventContext,\n  };\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAErE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,UAAU,eAAe,CAC7B,QAAkB,EAClB,YAAoB;IAapB,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,gBAAgB,EAAE,CAAC;IACnE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAC3E,OAAO;QACL,KAAK,EAAE;YACL,cAAc,CAAC,QAAQ,CAAC;YACxB,cAAc,CAAC,QAAQ,CAAC;YACxB,cAAc,CAAC,QAAQ,CAAC;YACxB,eAAe,CAAC,QAAQ,CAAC;YACzB,SAAS;YACT,UAAU;SACX;QACD,iBAAiB;QACjB,eAAe;KAChB,CAAC;AACJ,CAAC","sourcesContent":["import type { AgentTool } from \"@mariozechner/pi-agent-core\";\nimport { createAttachTool } from \"../adapters/slack/tools/attach.js\";\nimport type { Executor } from \"../sandbox.js\";\nimport { createBashTool } from \"./bash.js\";\nimport { createEditTool } from \"./edit.js\";\nimport { createEventTool } from \"./event.js\";\nimport { createReadTool } from \"./read.js\";\nimport { createWriteTool } from \"./write.js\";\n\nexport function createMamaTools(\n  executor: Executor,\n  workspaceDir: string,\n): {\n  tools: AgentTool<any>[];\n  setUploadFunction: (fn: (filePath: string, title?: string) => Promise<void>) => void;\n  setEventContext: (context: {\n    platform: string;\n    conversationId: string;\n    conversationKind: \"direct\" | \"shared\";\n    userId: string;\n    sessionKey: string;\n    threadTs?: string;\n  }) => void;\n} {\n  const { tool: attachTool, setUploadFunction } = createAttachTool();\n  const { tool: eventTool, setEventContext } = createEventTool(workspaceDir);\n  return {\n    tools: [\n      createReadTool(executor),\n      createBashTool(executor),\n      createEditTool(executor),\n      createWriteTool(executor),\n      eventTool,\n      attachTool,\n    ],\n    setUploadFunction,\n    setEventContext,\n  };\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geminixiang/mama",
-  "version": "0.2.0-beta.2",
+  "version": "0.2.0-beta.3",
   "description": "Slack bot that delegates messages to the pi coding agent",
   "keywords": [
     "agent",

package/dist/link-server.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"link-server.d.ts","sourceRoot":"","sources":["../src/link-server.ts"],"names":[],"mappings":"AACA,OAAO,EAAsC,KAAK,MAAM,EAAuB,MAAM,MAAM,CAAC;AAE5F,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAS9D,OAAO,EAA0B,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAIvE,oEAAoE;AACpE,MAAM,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAyBpG;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,sBAAsB,EACtC,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,QAAQ,GACf,MAAM,CAqHR","sourcesContent":["import { createHash, randomBytes } from \"crypto\";\nimport { createServer, type IncomingMessage, type Server, type ServerResponse } from \"http\";\nimport { resolveLinkBaseUrl } from \"./config.js\";\nimport type { InMemoryLinkTokenStore } from \"./link-token.js\";\nimport {\n  getOAuthServices,\n  resolveOAuthService,\n  type LoginCredentialKind,\n  type OAuthService,\n} from \"./login.js\";\nimport * as log from \"./log.js\";\nimport { PRODUCT_NAME } from \"./ui-copy.js\";\nimport { defaultVaultTargetPath, type VaultManager } from \"./vault.js\";\n\n// ── Types ──────────────────────────────────────────────────────────────────────\n\n/** Called after a binding is written, to notify the user in chat */\nexport type NotifyFn = (platform: string, conversationId: string, message: string) => Promise<void>;\n\ninterface LinkCompleteBody {\n  token: string;\n  mode?: LoginCredentialKind;\n  envKey?: string;\n  credential?: string;\n}\n\ninterface OAuthStartBody {\n  token: string;\n  serviceId: string;\n}\n\ninterface PendingOAuthState {\n  linkToken: string;\n  serviceId: string;\n  codeVerifier: string;\n  expiresAt: number;\n}\n\nconst OAUTH_STATE_TTL_MS = 10 * 60 * 1000;\n\n// ── startLinkServer ────────────────────────────────────────────────────────────\n\n/**\n * Start a small HTTP server that receives credential onboarding callbacks from the web portal.\n *\n * Routes:\n *   GET  /health              — health check\n *   GET  /link?token=xxx      — credential onboarding page\n *   POST /api/link/complete   — API key completion endpoint\n *   POST /api/oauth/start     — creates provider OAuth redirect URL\n *   GET  /oauth/callback      — OAuth callback endpoint\n */\nexport function startLinkServer(\n  port: number,\n  linkTokenStore: InMemoryLinkTokenStore,\n  vaultManager: VaultManager,\n  notify: NotifyFn,\n): Server {\n  const oauthStates = new Map<string, PendingOAuthState>();\n\n  const server = createServer((req: IncomingMessage, res: ServerResponse) => {\n    const url = new URL(req.url ?? \"/\", requestBaseUrl(req));\n\n    if (req.method === \"GET\" && url.pathname === \"/health\") {\n      res.writeHead(200, { \"Content-Type\": \"application/json\" });\n      res.end(JSON.stringify({ ok: true }));\n      return;\n    }\n\n    if (req.method === \"GET\" && url.pathname === \"/link\") {\n      const rawToken = url.searchParams.get(\"token\") ?? \"\";\n      const linkToken = linkTokenStore.peek(rawToken);\n\n      if (!linkToken) {\n        res.writeHead(400, { \"Content-Type\": \"text/html; charset=utf-8\" });\n        res.end(\n          renderErrorPage(\n            \"This link is invalid or has expired. Ask the bot for a new /login link.\",\n          ),\n        );\n        return;\n      }\n\n      const oauthServiceHint = linkToken.providerId\n        ? resolveOAuthService(linkToken.providerId)\n        : undefined;\n      const oauthServices = getOAuthServices();\n      const defaultMode: LoginCredentialKind = oauthServiceHint ? \"oauth\" : \"api_key\";\n      const existingSecrets = describeVaultSecrets(vaultManager, linkToken.vaultId);\n\n      const title = oauthServiceHint ? `${oauthServiceHint.label} OAuth` : \"Store Secret\";\n      const helpText = oauthServiceHint\n        ? `Authorize ${oauthServiceHint.label} and store tokens in your vault.`\n        : \"Set any environment variable key/value pair in your vault.\";\n      const secretLabel = \"Secret value\";\n      const placeholder = \"sk-...\";\n      const initialEnvKey = \"\";\n\n      res.writeHead(200, { \"Content-Type\": \"text/html; charset=utf-8\" });\n      res.end(\n        renderCredentialPage(\n          rawToken,\n          title,\n          defaultMode,\n          initialEnvKey,\n          secretLabel,\n          placeholder,\n          helpText,\n          oauthServices,\n          oauthServiceHint?.id,\n          existingSecrets,\n        ),\n      );\n      return;\n    }\n\n    if (req.method === \"POST\" && url.pathname === \"/api/link/complete\") {\n      if (!enforceCsrf(req, res)) return;\n      void readJsonBody(req, res, async (body) => {\n        await handleLinkComplete(body, linkTokenStore, vaultManager, notify, res);\n      });\n      return;\n    }\n\n    if (req.method === \"POST\" && url.pathname === \"/api/oauth/start\") {\n      if (!enforceCsrf(req, res)) return;\n      void readJsonBody(req, res, async (body) => {\n        await handleOAuthStart(body, req, linkTokenStore, oauthStates, res);\n      });\n      return;\n    }\n\n    if (req.method === \"GET\" && url.pathname === \"/oauth/callback\") {\n      void handleOAuthCallback(\n        url,\n        req,\n        linkTokenStore,\n        vaultManager,\n        notify,\n        oauthStates,\n        res,\n      ).catch((err: Error) => {\n        log.logWarning(\"OAuth callback failed\", err.message);\n        res.writeHead(500, { \"Content-Type\": \"text/html; charset=utf-8\" });\n        res.end(renderErrorPage(\"OAuth callback failed. Please retry /login.\"));\n      });\n      return;\n    }\n\n    res.writeHead(404);\n    res.end();\n  });\n\n  // Bind to loopback when MOM_LINK_URL is unset so the credential UI and OAuth\n  // callbacks are not exposed on public interfaces by default. Production\n  // deployments set MOM_LINK_URL and are expected to front this server with a\n  // reverse proxy, which can still reach it via 0.0.0.0.\n  const bindHost = resolveLinkBaseUrl() ? undefined : \"127.0.0.1\";\n  server.listen(port, bindHost, () => {\n    log.logInfo(`Link callback server listening on ${bindHost ?? \"0.0.0.0\"}:${port}`);\n    if (!resolveLinkBaseUrl()) {\n      log.logWarning(\n        \"MOM_LINK_URL is not set — bound to 127.0.0.1 and OAuth redirect_uri will be \" +\n          \"derived from request headers (Host / X-Forwarded-*). Set \" +\n          \"MOM_LINK_URL=https://your-host.example.com for production.\",\n      );\n    }\n  });\n\n  server.on(\"error\", (err) => {\n    log.logWarning(\"Link server error\", err.message);\n  });\n\n  return server;\n}\n\n/**\n * Resolve the externally-visible base URL of this server.\n *\n * Prefers MOM_LINK_URL (see config.ts) so the OAuth `redirect_uri` is\n * deterministic and not influenced by attacker-controlled request headers.\n * Falls back to Host / X-Forwarded-* only when no base URL is configured\n * — intended for local development.\n */\nfunction requestBaseUrl(req: IncomingMessage): string {\n  const configured = resolveLinkBaseUrl();\n  if (configured) return configured;\n\n  const protoRaw = (req.headers[\"x-forwarded-proto\"] as string | undefined)?.split(\",\")[0]?.trim();\n  const proto = protoRaw || \"http\";\n  const host =\n    ((req.headers[\"x-forwarded-host\"] as string | undefined)?.split(\",\")[0]?.trim() ??\n      req.headers.host ??\n      `localhost`) ||\n    `localhost`;\n  return `${proto}://${host}`;\n}\n\n/**\n * Block cross-site POSTs to the credential endpoints. Two defenses:\n *   1. Require Content-Type: application/json, which forces a CORS preflight\n *      for any cross-origin fetch and rules out `<form enctype=\"text/plain\">`\n *      tricks that could otherwise smuggle a JSON body.\n *   2. When MOM_LINK_URL is configured, require that the Origin (or Referer,\n *      as a fallback for browsers that strip Origin) matches that base URL.\n *      This stops an attacker-controlled page — even one that somehow stole a\n *      victim's link token — from completing the flow.\n */\nfunction enforceCsrf(req: IncomingMessage, res: ServerResponse): boolean {\n  const contentType = (req.headers[\"content-type\"] as string | undefined)\n    ?.split(\";\")[0]\n    ?.trim()\n    .toLowerCase();\n  if (contentType !== \"application/json\") {\n    res.writeHead(415, { \"Content-Type\": \"application/json\" });\n    res.end(JSON.stringify({ error: \"Content-Type must be application/json\" }));\n    return false;\n  }\n\n  const configured = resolveLinkBaseUrl();\n  if (!configured) {\n    // No trusted origin to compare against in local/dev mode; the loopback\n    // bind already prevents cross-host access.\n    return true;\n  }\n\n  let configuredOrigin: string;\n  try {\n    configuredOrigin = new URL(configured).origin;\n  } catch {\n    // Misconfigured MOM_LINK_URL — fail closed.\n    res.writeHead(500, { \"Content-Type\": \"application/json\" });\n    res.end(JSON.stringify({ error: \"Server misconfiguration\" }));\n    return false;\n  }\n\n  if (requestOrigin(req) !== configuredOrigin) {\n    res.writeHead(403, { \"Content-Type\": \"application/json\" });\n    res.end(JSON.stringify({ error: \"Cross-origin request rejected\" }));\n    return false;\n  }\n\n  return true;\n}\n\n/** Best-effort origin of the request, derived from Origin or Referer. */\nfunction requestOrigin(req: IncomingMessage): string | undefined {\n  const origin = (req.headers.origin as string | undefined)?.trim();\n  if (origin && origin !== \"null\") return origin;\n\n  const referer = (req.headers.referer as string | undefined)?.trim();\n  if (!referer) return undefined;\n  try {\n    return new URL(referer).origin;\n  } catch {\n    return undefined;\n  }\n}\n\nasync function readJsonBody(\n  req: IncomingMessage,\n  res: ServerResponse,\n  onBody: (body: string) => Promise<void>,\n): Promise<void> {\n  let body = \"\";\n  let bodyTooLarge = false;\n\n  req.on(\"data\", (chunk: Buffer) => {\n    if (bodyTooLarge) return;\n    body += chunk.toString();\n    if (body.length > 16 * 1024) {\n      bodyTooLarge = true;\n      res.writeHead(413);\n      res.end();\n      req.destroy();\n    }\n  });\n\n  req.on(\"end\", async () => {\n    if (bodyTooLarge) return;\n    await onBody(body);\n  });\n}\n\n// ── HTML helpers ───────────────────────────────────────────────────────────────\n\nfunction esc(s: string): string {\n  return s.replace(\n    /[&<>\"']/g,\n    (c) => ({ \"&\": \"&amp;\", \"<\": \"&lt;\", \">\": \"&gt;\", '\"': \"&quot;\", \"'\": \"&#39;\" })[c]!,\n  );\n}\n\nconst sharedPageStyles = `\n  :root {\n    color-scheme: light;\n    --bg: #f5f1e8;\n    --panel: rgba(255, 255, 255, 0.9);\n    --panel-border: rgba(28, 30, 33, 0.08);\n    --text: #1c1e21;\n    --muted: #5d5f64;\n    --button: #1c1e21;\n    --button-hover: #2c3035;\n    --button-disabled: #8f949b;\n    --field-border: #c9cfd6;\n    --field-focus: #1c1e21;\n    --ok-bg: #dff4e4;\n    --ok-text: #1f5b34;\n    --err-bg: #fde2e2;\n    --err-text: #8a2f2f;\n  }\n\n  * { box-sizing: border-box; }\n\n  body {\n    margin: 0;\n    min-height: 100vh;\n    padding: 32px 20px;\n    display: grid;\n    place-items: center;\n    background:\n      radial-gradient(circle at top, rgba(255, 255, 255, 0.7), transparent 45%),\n      linear-gradient(180deg, #faf7f0 0%, var(--bg) 100%);\n    color: var(--text);\n    font-family:\n      \"SF Pro Text\",\n      \"Segoe UI\",\n      system-ui,\n      sans-serif;\n  }\n\n  .shell {\n    width: min(100%, 560px);\n  }\n\n  .card {\n    padding: 28px;\n    border: 1px solid var(--panel-border);\n    border-radius: 20px;\n    background: var(--panel);\n    box-shadow: 0 18px 48px rgba(28, 30, 33, 0.08);\n    backdrop-filter: blur(8px);\n  }\n\n  .eyebrow {\n    margin: 0 0 10px;\n    color: var(--muted);\n    font-size: 0.82rem;\n    font-weight: 700;\n    letter-spacing: 0.08em;\n    text-transform: uppercase;\n  }\n\n  h1 {\n    margin: 0 0 10px;\n    font-size: clamp(1.5rem, 2vw, 1.8rem);\n    line-height: 1.15;\n    text-wrap: balance;\n  }\n\n  p {\n    margin: 0;\n    color: var(--muted);\n    font-size: 0.98rem;\n    line-height: 1.5;\n  }\n\n  .stack > * + * {\n    margin-top: 14px;\n  }\n\n  .form {\n    margin-top: 24px;\n  }\n\n  .form > * + * {\n    margin-top: 18px;\n  }\n\n  label {\n    display: block;\n    margin-bottom: 6px;\n    font-size: 0.92rem;\n    font-weight: 650;\n  }\n\n  input,\n  select,\n  button {\n    font: inherit;\n  }\n\n  input,\n  select {\n    width: 100%;\n    padding: 12px 14px;\n    border: 1px solid var(--field-border);\n    border-radius: 12px;\n    background: #fff;\n    color: var(--text);\n  }\n\n  input:focus-visible,\n  select:focus-visible,\n  button:focus-visible {\n    outline: 2px solid var(--field-focus);\n    outline-offset: 2px;\n  }\n\n  button {\n    width: 100%;\n    margin-top: 24px;\n    padding: 13px 18px;\n    border: none;\n    border-radius: 12px;\n    background: var(--button);\n    color: #fff;\n    cursor: pointer;\n    transition: background-color 160ms ease;\n  }\n\n  button:hover {\n    background: var(--button-hover);\n  }\n\n  button:disabled {\n    background: var(--button-disabled);\n    cursor: default;\n  }\n\n  .mode {\n    display: flex;\n    flex-wrap: wrap;\n    gap: 10px;\n    margin-top: 22px;\n  }\n\n  .mode label {\n    display: inline-flex;\n    align-items: center;\n    gap: 8px;\n    margin: 0;\n    padding: 10px 12px;\n    border: 1px solid var(--field-border);\n    border-radius: 999px;\n    background: rgba(255, 255, 255, 0.85);\n    font-weight: 500;\n  }\n\n  .mode input {\n    width: auto;\n    margin: 0;\n  }\n\n  .panel {\n    display: none;\n  }\n\n  .panel.active {\n    display: block;\n  }\n\n  .panel-note {\n    margin-top: 10px;\n    font-size: 0.92rem;\n  }\n\n  .result,\n  .status {\n    margin-top: 20px;\n    padding: 14px 16px;\n    border-radius: 14px;\n    font-size: 0.95rem;\n  }\n\n  .result {\n    display: none;\n  }\n\n  .result.ok,\n  .status.ok {\n    background: var(--ok-bg);\n    color: var(--ok-text);\n  }\n\n  .result.err,\n  .status.err {\n    background: var(--err-bg);\n    color: var(--err-text);\n  }\n\n  .secrets-summary {\n    margin-top: 18px;\n    padding: 14px 16px;\n    border: 1px solid var(--panel-border);\n    border-radius: 14px;\n    background: rgba(255, 255, 255, 0.72);\n  }\n\n  .secrets-summary h2 {\n    margin: 0 0 8px;\n    font-size: 0.98rem;\n  }\n\n  .secrets-summary p {\n    font-size: 0.92rem;\n  }\n\n  .secrets-summary ul {\n    margin: 10px 0 0;\n    padding-left: 18px;\n    color: var(--text);\n  }\n\n  .secrets-summary li + li {\n    margin-top: 6px;\n  }\n\n  .close-note {\n    margin-top: 14px;\n    font-size: 0.92rem;\n  }\n\n  @media (max-width: 640px) {\n    body {\n      padding: 20px 14px;\n    }\n\n    .card {\n      padding: 22px;\n      border-radius: 16px;\n    }\n  }\n`;\n\nfunction renderPageDocument(title: string, body: string): string {\n  return `<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n  <meta charset=\"utf-8\">\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n  <title>${esc(title)} — ${PRODUCT_NAME}</title>\n  <style>${sharedPageStyles}</style>\n</head>\n<body>\n  <main class=\"shell\">\n    <section class=\"card\">\n      ${body}\n    </section>\n  </main>\n</body>\n</html>`;\n}\n\nfunction renderStatusPage(\n  title: string,\n  message: string,\n  tone: \"ok\" | \"err\",\n  options?: { closeNote?: boolean },\n): string {\n  const closeNote = options?.closeNote ? '<p class=\"close-note\">You can close this tab.</p>' : \"\";\n  return renderPageDocument(\n    title,\n    `<div class=\"stack\">\n      <p class=\"eyebrow\">${PRODUCT_NAME}</p>\n      <h1>${esc(title)}</h1>\n      <div class=\"status ${tone}\">${esc(message)}</div>\n      ${closeNote}\n    </div>`,\n  );\n}\n\ninterface ExistingSecretsSummary {\n  envKeys: string[];\n  mountTargets: string[];\n}\n\nfunction describeVaultSecrets(vaultManager: VaultManager, vaultId: string): ExistingSecretsSummary {\n  const vault = vaultManager.resolve(vaultId);\n  if (!vault) {\n    return { envKeys: [], mountTargets: [] };\n  }\n\n  return {\n    envKeys: Object.keys(vault.env).sort((left, right) => left.localeCompare(right)),\n    mountTargets: [...new Set(vault.mounts.map((mount) => mount.target))].sort((left, right) =>\n      left.localeCompare(right),\n    ),\n  };\n}\n\nfunction renderSecretsSummary(summary: ExistingSecretsSummary): string {\n  if (summary.envKeys.length === 0 && summary.mountTargets.length === 0) {\n    return `\n  <section class=\"secrets-summary\">\n    <h2>Currently stored</h2>\n    <p>No secrets are stored in this vault yet.</p>\n  </section>`;\n  }\n\n  const envItems = summary.envKeys.map((envKey) => `<li><code>${esc(envKey)}</code></li>`).join(\"\");\n  const mountItems = summary.mountTargets\n    .map((target) => `<li><code>${esc(target)}</code></li>`)\n    .join(\"\");\n\n  return `\n  <section class=\"secrets-summary\">\n    <h2>Currently stored</h2>\n    <p>Only secret names and mounted paths are shown here. Secret values are never displayed.</p>\n    ${summary.envKeys.length > 0 ? `<p><strong>Environment keys</strong></p><ul>${envItems}</ul>` : \"\"}\n    ${summary.mountTargets.length > 0 ? `<p><strong>Mounted secret files</strong></p><ul>${mountItems}</ul>` : \"\"}\n  </section>`;\n}\n\nfunction renderCredentialPage(\n  token: string,\n  title: string,\n  defaultMode: LoginCredentialKind,\n  initialEnvKey: string,\n  secretLabel: string,\n  placeholder: string,\n  helpText: string,\n  oauthServices: OAuthService[],\n  oauthServiceIdHint: string | undefined,\n  existingSecrets: ExistingSecretsSummary,\n): string {\n  const oauthOptions = oauthServices\n    .map((service) => {\n      const selected = service.id === oauthServiceIdHint ? ' selected=\"selected\"' : \"\";\n      return `<option value=\"${esc(service.id)}\"${selected}>${esc(service.label)}</option>`;\n    })\n    .join(\"\\n\");\n\n  return renderPageDocument(\n    \"Login\",\n    `<div class=\"stack\">\n  <p class=\"eyebrow\">${PRODUCT_NAME}</p>\n  <h1>${esc(title)}</h1>\n  <p>Your personal sandbox is already provisioned automatically.</p>\n  <p>${esc(helpText)}</p>\n  ${renderSecretsSummary(existingSecrets)}\n  <div class=\"mode\">\n    <label><input type=\"radio\" name=\"mode\" value=\"api_key\" ${defaultMode === \"api_key\" ? \"checked\" : \"\"}> API key</label>\n    <label><input type=\"radio\" name=\"mode\" value=\"oauth\" ${defaultMode === \"oauth\" ? \"checked\" : \"\"}> OAuth login</label>\n  </div>\n\n  <div class=\"form\">\n  <div id=\"api-panel\" class=\"panel\">\n    <label for=\"envKey\">Environment key</label>\n    <input id=\"envKey\" type=\"text\" name=\"envKey\" placeholder=\"OPENAI_API_KEY\" value=\"${esc(initialEnvKey)}\" autocomplete=\"off\">\n    <label for=\"credential\">${esc(secretLabel)}</label>\n    <input id=\"credential\" type=\"password\" name=\"credential\" placeholder=\"${esc(placeholder)}\" autocomplete=\"off\">\n  </div>\n\n  <div id=\"oauth-panel\" class=\"panel\">\n    <label for=\"oauthService\">OAuth service</label>\n    <select id=\"oauthService\" name=\"oauthService\">${oauthOptions}</select>\n    <p class=\"panel-note\">You'll be redirected to the selected service's authorization page.</p>\n  </div>\n\n  <button id=\"btn\" onclick=\"connect()\">Continue</button>\n  <div id=\"result\" class=\"result\" aria-live=\"polite\"></div>\n  </div>\n  <script>\n    const envKeyPattern = /^[A-Za-z_][A-Za-z0-9_]*$/;\n\n    function selectedMode() {\n      return document.querySelector('input[name=\"mode\"]:checked').value;\n    }\n\n    function showResult(message, ok) {\n      const result = document.getElementById('result');\n      result.style.display = 'block';\n      result.className = ok ? 'result ok' : 'result err';\n      result.textContent = message;\n    }\n\n    function syncPanels() {\n      const api = document.getElementById('api-panel');\n      const oauth = document.getElementById('oauth-panel');\n      const mode = selectedMode();\n      api.className = mode === 'api_key' ? 'panel active' : 'panel';\n      oauth.className = mode === 'oauth' ? 'panel active' : 'panel';\n    }\n\n    for (const radio of document.querySelectorAll('input[name=\"mode\"]')) {\n      radio.addEventListener('change', syncPanels);\n    }\n\n    syncPanels();\n\n    async function connect() {\n      const btn = document.getElementById('btn');\n      const mode = selectedMode();\n      btn.disabled = true;\n      btn.textContent = mode === 'oauth' ? 'Redirecting…' : 'Saving…';\n\n      try {\n        if (mode === 'oauth') {\n          const serviceId = document.getElementById('oauthService').value;\n          const r = await fetch('/api/oauth/start', {\n            method: 'POST',\n            headers: { 'Content-Type': 'application/json' },\n            body: JSON.stringify({ token: '${esc(token)}', serviceId }),\n          });\n          const data = await r.json();\n          if (!r.ok) {\n            showResult('Error: ' + (data.error ?? r.status), false);\n            btn.disabled = false;\n            btn.textContent = 'Continue';\n            return;\n          }\n          window.location.href = data.redirectUrl;\n          return;\n        }\n\n        const envKey = document.getElementById('envKey').value.trim();\n        const credential = document.getElementById('credential').value.trim();\n        if (!envKeyPattern.test(envKey)) {\n          showResult('Please enter a valid environment key.', false);\n          btn.disabled = false;\n          btn.textContent = 'Continue';\n          return;\n        }\n        if (!credential) {\n          showResult('Please enter a value.', false);\n          btn.disabled = false;\n          btn.textContent = 'Continue';\n          return;\n        }\n\n        const r = await fetch('/api/link/complete', {\n          method: 'POST',\n          headers: { 'Content-Type': 'application/json' },\n          body: JSON.stringify({ token: '${esc(token)}', mode: 'api_key', envKey, credential }),\n        });\n        const data = await r.json();\n        if (r.ok) {\n          showResult(data.message ?? 'Credential stored. You can close this tab.', true);\n          btn.style.display = 'none';\n          for (const input of document.querySelectorAll('input,select')) input.disabled = true;\n        } else {\n          showResult('Error: ' + (data.error ?? r.status), false);\n          btn.disabled = false;\n          btn.textContent = 'Continue';\n        }\n      } catch (err) {\n        showResult('Network error: ' + err.message, false);\n        btn.disabled = false;\n        btn.textContent = 'Continue';\n      }\n    }\n  </script>\n</div>`,\n  );\n}\n\nfunction renderErrorPage(message: string): string {\n  return renderStatusPage(\"Login Error\", message, \"err\");\n}\n\nfunction renderSuccessPage(message: string): string {\n  return renderStatusPage(\"Connected\", message, \"ok\", { closeNote: true });\n}\n\n// ── API-key completion ────────────────────────────────────────────────────────\n\nasync function handleLinkComplete(\n  body: string,\n  linkTokenStore: InMemoryLinkTokenStore,\n  vaultManager: VaultManager,\n  notify: NotifyFn,\n  res: ServerResponse,\n): Promise<void> {\n  let data: Partial<LinkCompleteBody>;\n  try {\n    data = JSON.parse(body) as Partial<LinkCompleteBody>;\n  } catch {\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(JSON.stringify({ error: \"Invalid JSON\" }));\n    return;\n  }\n\n  if (!data.token) {\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(JSON.stringify({ error: \"Missing required field: token\" }));\n    return;\n  }\n\n  const envKey = data.envKey?.trim() ?? \"\";\n  const credential = data.credential?.trim() ?? \"\";\n\n  if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(envKey)) {\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(JSON.stringify({ error: \"Invalid envKey format\" }));\n    return;\n  }\n\n  if (!credential) {\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(JSON.stringify({ error: \"Missing required field: credential\" }));\n    return;\n  }\n\n  // Atomic consume prevents two concurrent requests from both passing the\n  // validity check before either deletes the token.\n  const linkToken = linkTokenStore.consume(data.token);\n  if (!linkToken) {\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(JSON.stringify({ error: \"Invalid or expired token\" }));\n    return;\n  }\n\n  try {\n    vaultManager.upsertEnv(linkToken.vaultId, { [envKey]: credential });\n  } catch (error) {\n    log.logWarning(\n      `Failed to persist ${envKey} for ${linkToken.platform}/${linkToken.platformUserId}`,\n      error instanceof Error ? error.message : String(error),\n    );\n    res.writeHead(500, { \"Content-Type\": \"application/json\" });\n    res.end(\n      JSON.stringify({\n        error:\n          \"Failed to store credential on server. Please fix the server issue and run /login again.\",\n      }),\n    );\n    return;\n  }\n\n  log.logInfo(\n    `Stored ${envKey} for ${linkToken.platform}/${linkToken.platformUserId} in vault:${linkToken.vaultId}`,\n  );\n\n  res.writeHead(200, { \"Content-Type\": \"application/json\" });\n  res.end(JSON.stringify({ ok: true, message: `${envKey} stored successfully in vault.` }));\n\n  notify(\n    linkToken.platform,\n    linkToken.conversationId,\n    `${envKey} stored successfully in vault \\`${linkToken.vaultId}\\`.`,\n  ).catch((err: Error) => {\n    log.logWarning(\"Failed to notify user after credential login\", err.message);\n  });\n}\n\n// ── OAuth flow ────────────────────────────────────────────────────────────────\n\nasync function handleOAuthStart(\n  body: string,\n  req: IncomingMessage,\n  linkTokenStore: InMemoryLinkTokenStore,\n  oauthStates: Map<string, PendingOAuthState>,\n  res: ServerResponse,\n): Promise<void> {\n  let data: Partial<OAuthStartBody>;\n  try {\n    data = JSON.parse(body) as Partial<OAuthStartBody>;\n  } catch {\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(JSON.stringify({ error: \"Invalid JSON\" }));\n    return;\n  }\n\n  if (!data.token || !data.serviceId) {\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(JSON.stringify({ error: \"Missing required fields: token/serviceId\" }));\n    return;\n  }\n\n  const linkToken = linkTokenStore.peek(data.token);\n  if (!linkToken) {\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(JSON.stringify({ error: \"Invalid or expired token\" }));\n    return;\n  }\n\n  const service = resolveOAuthService(data.serviceId);\n  if (!service) {\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(JSON.stringify({ error: `Unsupported OAuth service: ${data.serviceId}` }));\n    return;\n  }\n\n  const clientId = process.env[service.clientIdEnvKey];\n  const clientSecret = process.env[service.clientSecretEnvKey];\n  if (!clientId || !clientSecret) {\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(\n      JSON.stringify({\n        error:\n          `OAuth service ${service.label} is not configured. ` +\n          `Missing ${service.clientIdEnvKey}/${service.clientSecretEnvKey}.`,\n      }),\n    );\n    return;\n  }\n\n  const state = randomBytes(16).toString(\"hex\");\n  const codeVerifier = randomBytes(32).toString(\"base64url\");\n  oauthStates.set(state, {\n    linkToken: data.token,\n    serviceId: service.id,\n    codeVerifier,\n    expiresAt: Date.now() + OAUTH_STATE_TTL_MS,\n  });\n\n  for (const [k, v] of oauthStates) {\n    if (Date.now() > v.expiresAt) oauthStates.delete(k);\n  }\n\n  const redirectUri = `${requestBaseUrl(req)}/oauth/callback`;\n  const authorizeUrl = new URL(service.authorizationUrl);\n  authorizeUrl.searchParams.set(\"response_type\", \"code\");\n  authorizeUrl.searchParams.set(\"client_id\", clientId);\n  authorizeUrl.searchParams.set(\"redirect_uri\", redirectUri);\n  authorizeUrl.searchParams.set(\"state\", state);\n  if (service.scopes.length > 0) {\n    authorizeUrl.searchParams.set(\"scope\", service.scopes.join(\" \"));\n  }\n  for (const [key, value] of Object.entries(service.authorizationParams ?? {})) {\n    authorizeUrl.searchParams.set(key, value);\n  }\n\n  const codeChallenge = createHash(\"sha256\").update(codeVerifier).digest(\"base64url\");\n  authorizeUrl.searchParams.set(\"code_challenge\", codeChallenge);\n  authorizeUrl.searchParams.set(\"code_challenge_method\", \"S256\");\n\n  res.writeHead(200, { \"Content-Type\": \"application/json\" });\n  res.end(JSON.stringify({ ok: true, redirectUrl: authorizeUrl.toString() }));\n}\n\nasync function handleOAuthCallback(\n  url: URL,\n  req: IncomingMessage,\n  linkTokenStore: InMemoryLinkTokenStore,\n  vaultManager: VaultManager,\n  notify: NotifyFn,\n  oauthStates: Map<string, PendingOAuthState>,\n  res: ServerResponse,\n): Promise<void> {\n  const state = url.searchParams.get(\"state\") ?? \"\";\n  const code = url.searchParams.get(\"code\") ?? \"\";\n  const error = url.searchParams.get(\"error\");\n\n  // Atomic pop: whatever path we take from here, this state is spent.\n  // Done before any `await` to close the TOCTOU window between the state\n  // lookup and the final delete.\n  const pending = oauthStates.get(state);\n  if (pending) oauthStates.delete(state);\n\n  if (error) {\n    res.writeHead(400, { \"Content-Type\": \"text/html; charset=utf-8\" });\n    res.end(renderErrorPage(`OAuth authorization failed: ${error}`));\n    return;\n  }\n\n  if (!pending || Date.now() > pending.expiresAt) {\n    res.writeHead(400, { \"Content-Type\": \"text/html; charset=utf-8\" });\n    res.end(renderErrorPage(\"OAuth state is invalid or expired. Please run /login again.\"));\n    return;\n  }\n\n  if (!code) {\n    res.writeHead(400, { \"Content-Type\": \"text/html; charset=utf-8\" });\n    res.end(renderErrorPage(\"Missing OAuth authorization code.\"));\n    return;\n  }\n\n  const service = resolveOAuthService(pending.serviceId);\n  if (!service) {\n    res.writeHead(400, { \"Content-Type\": \"text/html; charset=utf-8\" });\n    res.end(renderErrorPage(\"Unsupported OAuth service.\"));\n    return;\n  }\n\n  const clientId = process.env[service.clientIdEnvKey];\n  const clientSecret = process.env[service.clientSecretEnvKey];\n  if (!clientId || !clientSecret) {\n    res.writeHead(500, { \"Content-Type\": \"text/html; charset=utf-8\" });\n    res.end(renderErrorPage(\"OAuth service is not configured on server.\"));\n    return;\n  }\n\n  // Atomic consume: pairs with the callback being one-shot. Two concurrent\n  // callbacks for the same state would previously both pass `peek` and both\n  // run `exchangeOAuthCode` across the await; only one reaches `consume`.\n  const linkToken = linkTokenStore.consume(pending.linkToken);\n  if (!linkToken) {\n    res.writeHead(400, { \"Content-Type\": \"text/html; charset=utf-8\" });\n    res.end(renderErrorPage(\"Login link is invalid or expired. Please run /login again.\"));\n    return;\n  }\n\n  const redirectUri = `${requestBaseUrl(req)}/oauth/callback`;\n  const tokenResp = await exchangeOAuthCode(\n    service,\n    code,\n    clientId,\n    clientSecret,\n    redirectUri,\n    pending.codeVerifier,\n  );\n\n  const accessToken = tokenResp.access_token?.trim();\n  const refreshToken = tokenResp.refresh_token?.trim();\n\n  if (!accessToken) {\n    res.writeHead(400, { \"Content-Type\": \"text/html; charset=utf-8\" });\n    res.end(renderErrorPage(\"OAuth token exchange did not return an access_token.\"));\n    return;\n  }\n\n  const updates: Record<string, string> = {};\n  if (service.accessTokenEnvKey) {\n    updates[service.accessTokenEnvKey] = accessToken;\n  }\n  for (const key of service.additionalAccessTokenEnvKeys ?? []) {\n    updates[key] = accessToken;\n  }\n  if (refreshToken && service.refreshTokenEnvKey) {\n    updates[service.refreshTokenEnvKey] = refreshToken;\n  }\n\n  const fileOutput = service.fileOutput;\n  let mountedPath: string | undefined;\n  if (fileOutput?.type === \"authorized_user\") {\n    if (!refreshToken) {\n      res.writeHead(400, { \"Content-Type\": \"text/html; charset=utf-8\" });\n      res.end(\n        renderErrorPage(\n          \"OAuth token exchange did not return a refresh_token. \" +\n            \"Retry after revoking prior consent or ensure prompt=consent is applied.\",\n        ),\n      );\n      return;\n    }\n\n    mountedPath = fileOutput.targetPath ?? defaultVaultTargetPath(fileOutput.relativePath);\n    if (fileOutput.envKey) {\n      updates[fileOutput.envKey] = mountedPath;\n    }\n  }\n\n  const storedTargets: string[] = [];\n  try {\n    if (Object.keys(updates).length > 0) {\n      vaultManager.upsertEnv(linkToken.vaultId, updates);\n      storedTargets.push(...Object.keys(updates).sort());\n    }\n    if (fileOutput?.type === \"authorized_user\" && refreshToken) {\n      vaultManager.upsertFile(\n        linkToken.vaultId,\n        fileOutput.relativePath,\n        renderAuthorizedUserCredential(clientId, clientSecret, refreshToken),\n        fileOutput.targetPath,\n      );\n      if (mountedPath) storedTargets.push(mountedPath);\n    }\n  } catch (error) {\n    log.logWarning(\n      `Failed to persist OAuth credentials for ${linkToken.platform}/${linkToken.platformUserId}`,\n      error instanceof Error ? error.message : String(error),\n    );\n    res.writeHead(500, { \"Content-Type\": \"text/html; charset=utf-8\" });\n    res.end(\n      renderErrorPage(\n        \"OAuth tokens were received but could not be stored on the server. Fix the server issue and run /login again.\",\n      ),\n    );\n    return;\n  }\n\n  log.logInfo(\n    `Stored [${storedTargets.join(\", \")}] for ${linkToken.platform}/${linkToken.platformUserId} in vault:${linkToken.vaultId}`,\n  );\n\n  notify(\n    linkToken.platform,\n    linkToken.conversationId,\n    `${service.label} OAuth stored (${storedTargets.join(\", \")}) in vault \\`${linkToken.vaultId}\\`.`,\n  ).catch((err: Error) => {\n    log.logWarning(\"Failed to notify user after OAuth login\", err.message);\n  });\n\n  res.writeHead(200, { \"Content-Type\": \"text/html; charset=utf-8\" });\n  res.end(renderSuccessPage(`${service.label} OAuth connected successfully.`));\n}\n\nasync function exchangeOAuthCode(\n  service: OAuthService,\n  code: string,\n  clientId: string,\n  clientSecret: string,\n  redirectUri: string,\n  codeVerifier: string,\n): Promise<Record<string, string>> {\n  const params = new URLSearchParams();\n  params.set(\"grant_type\", \"authorization_code\");\n  params.set(\"code\", code);\n  params.set(\"client_id\", clientId);\n  params.set(\"client_secret\", clientSecret);\n  params.set(\"redirect_uri\", redirectUri);\n  params.set(\"code_verifier\", codeVerifier);\n\n  const response = await fetch(service.tokenUrl, {\n    method: \"POST\",\n    headers: {\n      \"Content-Type\": \"application/x-www-form-urlencoded\",\n      Accept: \"application/json\",\n    },\n    body: params.toString(),\n  });\n\n  const text = await response.text();\n  const contentType = response.headers.get(\"content-type\") ?? \"\";\n  let parsed: Record<string, string> = {};\n\n  if (contentType.includes(\"application/json\")) {\n    parsed = JSON.parse(text) as Record<string, string>;\n  } else {\n    const form = new URLSearchParams(text);\n    parsed = Object.fromEntries(form.entries());\n  }\n\n  if (!response.ok) {\n    const message = parsed.error_description ?? parsed.error ?? `${response.status}`;\n    throw new Error(`OAuth token exchange failed for ${service.id}: ${message}`);\n  }\n\n  return parsed;\n}\n\nfunction renderAuthorizedUserCredential(\n  clientId: string,\n  clientSecret: string,\n  refreshToken: string,\n): string {\n  return (\n    JSON.stringify(\n      {\n        client_id: clientId,\n        client_secret: clientSecret,\n        refresh_token: refreshToken,\n        type: \"authorized_user\",\n      },\n      null,\n      2,\n    ) + \"\\n\"\n  );\n}\n"]}