@geminixiang/mama 0.2.0-beta.7 → 0.2.0-beta.9

package/dist/commands/sandbox.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/commands/sandbox.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGjE,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,aAAa,GAAG,UAAU,CAAC;IACpC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI,CAW7E;AAMD,qBAAa,qBAAsB,YAAW,cAAc;IACpD,SAAS,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAkEzD;CACF","sourcesContent":["import { resolveActorVaultKey } from \"../vault-routing.js\";\nimport type { CommandContext, CommandHandler } from \"./types.js\";\nimport { replyDiagnosticWithContext } from \"./utils.js\";\n\nexport interface ParsedSandboxCommand {\n  command: \"/pi-sandbox\" | \"/sandbox\";\n  action?: \"boost\";\n}\n\nexport function parseSandboxCommand(text: string): ParsedSandboxCommand | null {\n  const tokens = text.trim().split(/\\s+/).filter(Boolean);\n  if (tokens.length === 0) return null;\n\n  const command = tokens[0].replace(/@\\w+$/i, \"\").toLowerCase();\n  if (command !== \"/pi-sandbox\" && command !== \"/sandbox\") return null;\n  if (tokens.length === 1) return { command };\n  if (tokens.length === 2 && tokens[1].toLowerCase() === \"boost\") {\n    return { command, action: \"boost\" };\n  }\n  return { command };\n}\n\nfunction formatSandboxCommandSummary(title: string, lines: string[]): string {\n  return [`_${title}_`, ...lines].join(\"\\n\");\n}\n\nexport class SandboxCommandHandler implements CommandHandler {\n  async tryHandle(context: CommandContext): Promise<boolean> {\n    const parsed = parseSandboxCommand(context.commandText);\n    if (!parsed) return false;\n\n    if (context.services.sandbox.type !== \"image\" || !context.services.provisioner) {\n      await replyDiagnosticWithContext(\n        context.responseCtx,\n        formatSandboxCommandSummary(\"Sandbox\", [\n          \"`/pi-sandbox` 目前只支援 `image:*` managed sandbox。\",\n        ]),\n        { style: \"muted\" },\n      );\n      return true;\n    }\n\n    const containerKey = resolveActorVaultKey(\n      context.services.sandbox,\n      context.platformUserId,\n      context.conversationId,\n    );\n\n    if (parsed.action === \"boost\") {\n      const boostLimits = context.services.provisioner.getBoostLimits();\n      if (!boostLimits?.cpus && !boostLimits?.memory) {\n        await replyDiagnosticWithContext(\n          context.responseCtx,\n          formatSandboxCommandSummary(\"Sandbox Boost\", [\n            \"此 mama instance 尚未設定 sandbox boost 規格。\",\n            \"請先在全域 settings.json 設定 `sandbox.boost`。\",\n          ]),\n          { style: \"muted\" },\n        );\n        return true;\n      }\n\n      const status = await context.services.provisioner.boost(containerKey);\n      await replyDiagnosticWithContext(\n        context.responseCtx,\n        formatSandboxCommandSummary(\"Sandbox Boost\", [\n          \"已暫時提升此 conversation 的 sandbox 規格。\",\n          `Current: ${formatLimits(status.limits)}`,\n          \"boost 會在此 sandbox container 關閉後結束。\",\n        ]),\n        { style: \"muted\" },\n      );\n      return true;\n    }\n\n    const status = context.services.provisioner.getLimitStatus(containerKey);\n    const defaultLimits = context.services.provisioner.getDefaultLimits();\n    const boostLimits = context.services.provisioner.getBoostLimits();\n    await replyDiagnosticWithContext(\n      context.responseCtx,\n      formatSandboxCommandSummary(\n        \"Sandbox\",\n        [\n          `Current: ${formatLimits(status.limits)}`,\n          `Status: ${status.boosted ? \"boosted\" : \"default\"}`,\n          \"\",\n          `Default: ${formatLimits(defaultLimits)}`,\n          boostLimits ? `Boost: ${formatLimits({ ...defaultLimits, ...boostLimits })}` : undefined,\n        ].filter((line): line is string => line !== undefined),\n      ),\n      { style: \"muted\" },\n    );\n    return true;\n  }\n}\n\nfunction formatLimits(limits: { cpus?: string; memory?: string } | undefined): string {\n  return `CPU ${limits?.cpus ?? \"unlimited\"} / Memory ${limits?.memory ?? \"unlimited\"}`;\n}\n"]}
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/commands/sandbox.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGjE,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,aAAa,GAAG,UAAU,CAAC;IACpC,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;CACvC;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI,CAc7E;AAMD,qBAAa,qBAAsB,YAAW,cAAc;IACpD,SAAS,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CA2FzD;CACF","sourcesContent":["import { join } from \"node:path\";\nimport { saveConversationSandboxConfig } from \"../config.js\";\nimport { readConversationWorkspaceMountMode } from \"../execution-resolver.js\";\nimport { resolveActorVaultKey } from \"../vault-routing.js\";\nimport type { CommandContext, CommandHandler } from \"./types.js\";\nimport { replyDiagnosticWithContext } from \"./utils.js\";\n\nexport interface ParsedSandboxCommand {\n  command: \"/pi-sandbox\" | \"/sandbox\";\n  action?: \"boost\" | \"private\" | \"full\";\n}\n\nexport function parseSandboxCommand(text: string): ParsedSandboxCommand | null {\n  const tokens = text.trim().split(/\\s+/).filter(Boolean);\n  if (tokens.length === 0) return null;\n\n  const command = tokens[0].replace(/@\\w+$/i, \"\").toLowerCase();\n  if (command !== \"/pi-sandbox\" && command !== \"/sandbox\") return null;\n  if (tokens.length === 1) return { command };\n  if (tokens.length === 2) {\n    const action = tokens[1].toLowerCase();\n    if (action === \"boost\" || action === \"private\" || action === \"full\") {\n      return { command, action };\n    }\n  }\n  return { command };\n}\n\nfunction formatSandboxCommandSummary(title: string, lines: string[]): string {\n  return [`_${title}_`, ...lines].join(\"\\n\");\n}\n\nexport class SandboxCommandHandler implements CommandHandler {\n  async tryHandle(context: CommandContext): Promise<boolean> {\n    const parsed = parseSandboxCommand(context.commandText);\n    if (!parsed) return false;\n\n    if (context.services.sandbox.type !== \"image\" || !context.services.provisioner) {\n      await replyDiagnosticWithContext(\n        context.responseCtx,\n        formatSandboxCommandSummary(\"Sandbox\", [\n          \"`/pi-sandbox` 目前只支援 `image:*` managed sandbox。\",\n        ]),\n        { style: \"muted\" },\n      );\n      return true;\n    }\n\n    const containerKey = resolveActorVaultKey(\n      context.services.sandbox,\n      context.platformUserId,\n      context.conversationId,\n    );\n\n    if (parsed.action === \"private\" || parsed.action === \"full\") {\n      saveConversationSandboxConfig(join(context.services.workingDir, context.conversationId), {\n        imageWorkspaceMount: parsed.action,\n      });\n      await replyDiagnosticWithContext(\n        context.responseCtx,\n        formatSandboxCommandSummary(\"Sandbox Workspace\", [\n          parsed.action === \"full\"\n            ? \"已將此 conversation 的 sandbox 設為 full workspace mode。\"\n            : \"已將此 conversation 的 sandbox 設為 private workspace mode。\",\n          `Workspace mount: ${parsed.action}`,\n          parsed.action === \"full\"\n            ? \"之後這個 container 會把整個 host workspace 掛到 /workspace。\"\n            : \"之後這個 container 只會掛載 private workspace 檔案與當前 conversation 目錄。\",\n        ]),\n        { style: \"muted\" },\n      );\n      return true;\n    }\n\n    if (parsed.action === \"boost\") {\n      const boostLimits = context.services.provisioner.getBoostLimits();\n      if (!boostLimits?.cpus && !boostLimits?.memory) {\n        await replyDiagnosticWithContext(\n          context.responseCtx,\n          formatSandboxCommandSummary(\"Sandbox Boost\", [\n            \"此 mama instance 尚未設定 sandbox boost 規格。\",\n            \"請先在全域 settings.json 設定 `sandbox.boost`。\",\n          ]),\n          { style: \"muted\" },\n        );\n        return true;\n      }\n\n      const status = await context.services.provisioner.boost(containerKey);\n      await replyDiagnosticWithContext(\n        context.responseCtx,\n        formatSandboxCommandSummary(\"Sandbox Boost\", [\n          \"已暫時提升此 conversation 的 sandbox 規格。\",\n          `Current: ${formatLimits(status.limits)}`,\n          \"boost 會在此 sandbox container 關閉後結束。\",\n        ]),\n        { style: \"muted\" },\n      );\n      return true;\n    }\n\n    const status = context.services.provisioner.getLimitStatus(containerKey);\n    const defaultLimits = context.services.provisioner.getDefaultLimits();\n    const boostLimits = context.services.provisioner.getBoostLimits();\n    const workspaceMount = readConversationWorkspaceMountMode(\n      context.services.workingDir,\n      context.conversationId,\n    );\n    await replyDiagnosticWithContext(\n      context.responseCtx,\n      formatSandboxCommandSummary(\n        \"Sandbox\",\n        [\n          `Current: ${formatLimits(status.limits)}`,\n          `Status: ${status.boosted ? \"boosted\" : \"default\"}`,\n          `Workspace mount: ${workspaceMount}`,\n          \"\",\n          `Default: ${formatLimits(defaultLimits)}`,\n          boostLimits ? `Boost: ${formatLimits({ ...defaultLimits, ...boostLimits })}` : undefined,\n        ].filter((line): line is string => line !== undefined),\n      ),\n      { style: \"muted\" },\n    );\n    return true;\n  }\n}\n\nfunction formatLimits(limits: { cpus?: string; memory?: string } | undefined): string {\n  return `CPU ${limits?.cpus ?? \"unlimited\"} / Memory ${limits?.memory ?? \"unlimited\"}`;\n}\n"]}

package/dist/commands/sandbox.js

@@ -1,3 +1,6 @@
+import { join } from "node:path";
+import { saveConversationSandboxConfig } from "../config.js";
+import { readConversationWorkspaceMountMode } from "../execution-resolver.js";
 import { resolveActorVaultKey } from "../vault-routing.js";
 import { replyDiagnosticWithContext } from "./utils.js";
 export function parseSandboxCommand(text) {
@@ -9,8 +12,11 @@ export function parseSandboxCommand(text) {
         return null;
     if (tokens.length === 1)
         return { command };
-    if (tokens.length === 2 && tokens[1].toLowerCase() === "boost") {
-        return { command, action: "boost" };
+    if (tokens.length === 2) {
+        const action = tokens[1].toLowerCase();
+        if (action === "boost" || action === "private" || action === "full") {
+            return { command, action };
+        }
     }
     return { command };
 }
@@ -29,6 +35,21 @@ export class SandboxCommandHandler {
             return true;
         }
         const containerKey = resolveActorVaultKey(context.services.sandbox, context.platformUserId, context.conversationId);
+        if (parsed.action === "private" || parsed.action === "full") {
+            saveConversationSandboxConfig(join(context.services.workingDir, context.conversationId), {
+                imageWorkspaceMount: parsed.action,
+            });
+            await replyDiagnosticWithContext(context.responseCtx, formatSandboxCommandSummary("Sandbox Workspace", [
+                parsed.action === "full"
+                    ? "已將此 conversation 的 sandbox 設為 full workspace mode。"
+                    : "已將此 conversation 的 sandbox 設為 private workspace mode。",
+                `Workspace mount: ${parsed.action}`,
+                parsed.action === "full"
+                    ? "之後這個 container 會把整個 host workspace 掛到 /workspace。"
+                    : "之後這個 container 只會掛載 private workspace 檔案與當前 conversation 目錄。",
+            ]), { style: "muted" });
+            return true;
+        }
         if (parsed.action === "boost") {
             const boostLimits = context.services.provisioner.getBoostLimits();
             if (!boostLimits?.cpus && !boostLimits?.memory) {
@@ -49,9 +70,11 @@ export class SandboxCommandHandler {
         const status = context.services.provisioner.getLimitStatus(containerKey);
         const defaultLimits = context.services.provisioner.getDefaultLimits();
         const boostLimits = context.services.provisioner.getBoostLimits();
+        const workspaceMount = readConversationWorkspaceMountMode(context.services.workingDir, context.conversationId);
         await replyDiagnosticWithContext(context.responseCtx, formatSandboxCommandSummary("Sandbox", [
             `Current: ${formatLimits(status.limits)}`,
             `Status: ${status.boosted ? "boosted" : "default"}`,
+            `Workspace mount: ${workspaceMount}`,
             "",
             `Default: ${formatLimits(defaultLimits)}`,
             boostLimits ? `Boost: ${formatLimits({ ...defaultLimits, ...boostLimits })}` : undefined,

package/dist/commands/sandbox.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/commands/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAOxD,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAErC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9D,IAAI,OAAO,KAAK,aAAa,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,EAAE,CAAC;QAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAa,EAAE,KAAe;IACjE,OAAO,CAAC,IAAI,KAAK,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,OAAO,qBAAqB;IAChC,KAAK,CAAC,SAAS,CAAC,OAAuB;QACrC,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1B,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC/E,MAAM,0BAA0B,CAC9B,OAAO,CAAC,WAAW,EACnB,2BAA2B,CAAC,SAAS,EAAE;gBACrC,gDAAgD;aACjD,CAAC,EACF,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,oBAAoB,CACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,EACxB,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,cAAc,CACvB,CAAC;QAEF,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC;YAClE,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;gBAC/C,MAAM,0BAA0B,CAC9B,OAAO,CAAC,WAAW,EACnB,2BAA2B,CAAC,eAAe,EAAE;oBAC3C,wCAAwC;oBACxC,yCAAyC;iBAC1C,CAAC,EACF,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACtE,MAAM,0BAA0B,CAC9B,OAAO,CAAC,WAAW,EACnB,2BAA2B,CAAC,eAAe,EAAE;gBAC3C,mCAAmC;gBACnC,YAAY,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;gBACzC,oCAAoC;aACrC,CAAC,EACF,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACzE,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC;QACtE,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC;QAClE,MAAM,0BAA0B,CAC9B,OAAO,CAAC,WAAW,EACnB,2BAA2B,CACzB,SAAS,EACT;YACE,YAAY,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;YACzC,WAAW,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE;YACnD,EAAE;YACF,YAAY,YAAY,CAAC,aAAa,CAAC,EAAE;YACzC,WAAW,CAAC,CAAC,CAAC,UAAU,YAAY,CAAC,EAAE,GAAG,aAAa,EAAE,GAAG,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;SACzF,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CACvD,EACD,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,SAAS,YAAY,CAAC,MAAsD;IAC1E,OAAO,OAAO,MAAM,EAAE,IAAI,IAAI,WAAW,aAAa,MAAM,EAAE,MAAM,IAAI,WAAW,EAAE,CAAC;AACxF,CAAC","sourcesContent":["import { resolveActorVaultKey } from \"../vault-routing.js\";\nimport type { CommandContext, CommandHandler } from \"./types.js\";\nimport { replyDiagnosticWithContext } from \"./utils.js\";\n\nexport interface ParsedSandboxCommand {\n  command: \"/pi-sandbox\" | \"/sandbox\";\n  action?: \"boost\";\n}\n\nexport function parseSandboxCommand(text: string): ParsedSandboxCommand | null {\n  const tokens = text.trim().split(/\\s+/).filter(Boolean);\n  if (tokens.length === 0) return null;\n\n  const command = tokens[0].replace(/@\\w+$/i, \"\").toLowerCase();\n  if (command !== \"/pi-sandbox\" && command !== \"/sandbox\") return null;\n  if (tokens.length === 1) return { command };\n  if (tokens.length === 2 && tokens[1].toLowerCase() === \"boost\") {\n    return { command, action: \"boost\" };\n  }\n  return { command };\n}\n\nfunction formatSandboxCommandSummary(title: string, lines: string[]): string {\n  return [`_${title}_`, ...lines].join(\"\\n\");\n}\n\nexport class SandboxCommandHandler implements CommandHandler {\n  async tryHandle(context: CommandContext): Promise<boolean> {\n    const parsed = parseSandboxCommand(context.commandText);\n    if (!parsed) return false;\n\n    if (context.services.sandbox.type !== \"image\" || !context.services.provisioner) {\n      await replyDiagnosticWithContext(\n        context.responseCtx,\n        formatSandboxCommandSummary(\"Sandbox\", [\n          \"`/pi-sandbox` 目前只支援 `image:*` managed sandbox。\",\n        ]),\n        { style: \"muted\" },\n      );\n      return true;\n    }\n\n    const containerKey = resolveActorVaultKey(\n      context.services.sandbox,\n      context.platformUserId,\n      context.conversationId,\n    );\n\n    if (parsed.action === \"boost\") {\n      const boostLimits = context.services.provisioner.getBoostLimits();\n      if (!boostLimits?.cpus && !boostLimits?.memory) {\n        await replyDiagnosticWithContext(\n          context.responseCtx,\n          formatSandboxCommandSummary(\"Sandbox Boost\", [\n            \"此 mama instance 尚未設定 sandbox boost 規格。\",\n            \"請先在全域 settings.json 設定 `sandbox.boost`。\",\n          ]),\n          { style: \"muted\" },\n        );\n        return true;\n      }\n\n      const status = await context.services.provisioner.boost(containerKey);\n      await replyDiagnosticWithContext(\n        context.responseCtx,\n        formatSandboxCommandSummary(\"Sandbox Boost\", [\n          \"已暫時提升此 conversation 的 sandbox 規格。\",\n          `Current: ${formatLimits(status.limits)}`,\n          \"boost 會在此 sandbox container 關閉後結束。\",\n        ]),\n        { style: \"muted\" },\n      );\n      return true;\n    }\n\n    const status = context.services.provisioner.getLimitStatus(containerKey);\n    const defaultLimits = context.services.provisioner.getDefaultLimits();\n    const boostLimits = context.services.provisioner.getBoostLimits();\n    await replyDiagnosticWithContext(\n      context.responseCtx,\n      formatSandboxCommandSummary(\n        \"Sandbox\",\n        [\n          `Current: ${formatLimits(status.limits)}`,\n          `Status: ${status.boosted ? \"boosted\" : \"default\"}`,\n          \"\",\n          `Default: ${formatLimits(defaultLimits)}`,\n          boostLimits ? `Boost: ${formatLimits({ ...defaultLimits, ...boostLimits })}` : undefined,\n        ].filter((line): line is string => line !== undefined),\n      ),\n      { style: \"muted\" },\n    );\n    return true;\n  }\n}\n\nfunction formatLimits(limits: { cpus?: string; memory?: string } | undefined): string {\n  return `CPU ${limits?.cpus ?? \"unlimited\"} / Memory ${limits?.memory ?? \"unlimited\"}`;\n}\n"]}
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/commands/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,kCAAkC,EAAE,MAAM,0BAA0B,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAOxD,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAErC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9D,IAAI,OAAO,KAAK,aAAa,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACvC,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACpE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAa,EAAE,KAAe;IACjE,OAAO,CAAC,IAAI,KAAK,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,OAAO,qBAAqB;IAChC,KAAK,CAAC,SAAS,CAAC,OAAuB;QACrC,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1B,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC/E,MAAM,0BAA0B,CAC9B,OAAO,CAAC,WAAW,EACnB,2BAA2B,CAAC,SAAS,EAAE;gBACrC,gDAAgD;aACjD,CAAC,EACF,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,oBAAoB,CACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,EACxB,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,cAAc,CACvB,CAAC;QAEF,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC5D,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE;gBACvF,mBAAmB,EAAE,MAAM,CAAC,MAAM;aACnC,CAAC,CAAC;YACH,MAAM,0BAA0B,CAC9B,OAAO,CAAC,WAAW,EACnB,2BAA2B,CAAC,mBAAmB,EAAE;gBAC/C,MAAM,CAAC,MAAM,KAAK,MAAM;oBACtB,CAAC,CAAC,oDAAoD;oBACtD,CAAC,CAAC,uDAAuD;gBAC3D,oBAAoB,MAAM,CAAC,MAAM,EAAE;gBACnC,MAAM,CAAC,MAAM,KAAK,MAAM;oBACtB,CAAC,CAAC,mDAAmD;oBACrD,CAAC,CAAC,8DAA8D;aACnE,CAAC,EACF,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC;YAClE,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;gBAC/C,MAAM,0BAA0B,CAC9B,OAAO,CAAC,WAAW,EACnB,2BAA2B,CAAC,eAAe,EAAE;oBAC3C,wCAAwC;oBACxC,yCAAyC;iBAC1C,CAAC,EACF,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACtE,MAAM,0BAA0B,CAC9B,OAAO,CAAC,WAAW,EACnB,2BAA2B,CAAC,eAAe,EAAE;gBAC3C,mCAAmC;gBACnC,YAAY,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;gBACzC,oCAAoC;aACrC,CAAC,EACF,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACzE,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC;QACtE,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC;QAClE,MAAM,cAAc,GAAG,kCAAkC,CACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,EAC3B,OAAO,CAAC,cAAc,CACvB,CAAC;QACF,MAAM,0BAA0B,CAC9B,OAAO,CAAC,WAAW,EACnB,2BAA2B,CACzB,SAAS,EACT;YACE,YAAY,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;YACzC,WAAW,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE;YACnD,oBAAoB,cAAc,EAAE;YACpC,EAAE;YACF,YAAY,YAAY,CAAC,aAAa,CAAC,EAAE;YACzC,WAAW,CAAC,CAAC,CAAC,UAAU,YAAY,CAAC,EAAE,GAAG,aAAa,EAAE,GAAG,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;SACzF,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CACvD,EACD,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,SAAS,YAAY,CAAC,MAAsD;IAC1E,OAAO,OAAO,MAAM,EAAE,IAAI,IAAI,WAAW,aAAa,MAAM,EAAE,MAAM,IAAI,WAAW,EAAE,CAAC;AACxF,CAAC","sourcesContent":["import { join } from \"node:path\";\nimport { saveConversationSandboxConfig } from \"../config.js\";\nimport { readConversationWorkspaceMountMode } from \"../execution-resolver.js\";\nimport { resolveActorVaultKey } from \"../vault-routing.js\";\nimport type { CommandContext, CommandHandler } from \"./types.js\";\nimport { replyDiagnosticWithContext } from \"./utils.js\";\n\nexport interface ParsedSandboxCommand {\n  command: \"/pi-sandbox\" | \"/sandbox\";\n  action?: \"boost\" | \"private\" | \"full\";\n}\n\nexport function parseSandboxCommand(text: string): ParsedSandboxCommand | null {\n  const tokens = text.trim().split(/\\s+/).filter(Boolean);\n  if (tokens.length === 0) return null;\n\n  const command = tokens[0].replace(/@\\w+$/i, \"\").toLowerCase();\n  if (command !== \"/pi-sandbox\" && command !== \"/sandbox\") return null;\n  if (tokens.length === 1) return { command };\n  if (tokens.length === 2) {\n    const action = tokens[1].toLowerCase();\n    if (action === \"boost\" || action === \"private\" || action === \"full\") {\n      return { command, action };\n    }\n  }\n  return { command };\n}\n\nfunction formatSandboxCommandSummary(title: string, lines: string[]): string {\n  return [`_${title}_`, ...lines].join(\"\\n\");\n}\n\nexport class SandboxCommandHandler implements CommandHandler {\n  async tryHandle(context: CommandContext): Promise<boolean> {\n    const parsed = parseSandboxCommand(context.commandText);\n    if (!parsed) return false;\n\n    if (context.services.sandbox.type !== \"image\" || !context.services.provisioner) {\n      await replyDiagnosticWithContext(\n        context.responseCtx,\n        formatSandboxCommandSummary(\"Sandbox\", [\n          \"`/pi-sandbox` 目前只支援 `image:*` managed sandbox。\",\n        ]),\n        { style: \"muted\" },\n      );\n      return true;\n    }\n\n    const containerKey = resolveActorVaultKey(\n      context.services.sandbox,\n      context.platformUserId,\n      context.conversationId,\n    );\n\n    if (parsed.action === \"private\" || parsed.action === \"full\") {\n      saveConversationSandboxConfig(join(context.services.workingDir, context.conversationId), {\n        imageWorkspaceMount: parsed.action,\n      });\n      await replyDiagnosticWithContext(\n        context.responseCtx,\n        formatSandboxCommandSummary(\"Sandbox Workspace\", [\n          parsed.action === \"full\"\n            ? \"已將此 conversation 的 sandbox 設為 full workspace mode。\"\n            : \"已將此 conversation 的 sandbox 設為 private workspace mode。\",\n          `Workspace mount: ${parsed.action}`,\n          parsed.action === \"full\"\n            ? \"之後這個 container 會把整個 host workspace 掛到 /workspace。\"\n            : \"之後這個 container 只會掛載 private workspace 檔案與當前 conversation 目錄。\",\n        ]),\n        { style: \"muted\" },\n      );\n      return true;\n    }\n\n    if (parsed.action === \"boost\") {\n      const boostLimits = context.services.provisioner.getBoostLimits();\n      if (!boostLimits?.cpus && !boostLimits?.memory) {\n        await replyDiagnosticWithContext(\n          context.responseCtx,\n          formatSandboxCommandSummary(\"Sandbox Boost\", [\n            \"此 mama instance 尚未設定 sandbox boost 規格。\",\n            \"請先在全域 settings.json 設定 `sandbox.boost`。\",\n          ]),\n          { style: \"muted\" },\n        );\n        return true;\n      }\n\n      const status = await context.services.provisioner.boost(containerKey);\n      await replyDiagnosticWithContext(\n        context.responseCtx,\n        formatSandboxCommandSummary(\"Sandbox Boost\", [\n          \"已暫時提升此 conversation 的 sandbox 規格。\",\n          `Current: ${formatLimits(status.limits)}`,\n          \"boost 會在此 sandbox container 關閉後結束。\",\n        ]),\n        { style: \"muted\" },\n      );\n      return true;\n    }\n\n    const status = context.services.provisioner.getLimitStatus(containerKey);\n    const defaultLimits = context.services.provisioner.getDefaultLimits();\n    const boostLimits = context.services.provisioner.getBoostLimits();\n    const workspaceMount = readConversationWorkspaceMountMode(\n      context.services.workingDir,\n      context.conversationId,\n    );\n    await replyDiagnosticWithContext(\n      context.responseCtx,\n      formatSandboxCommandSummary(\n        \"Sandbox\",\n        [\n          `Current: ${formatLimits(status.limits)}`,\n          `Status: ${status.boosted ? \"boosted\" : \"default\"}`,\n          `Workspace mount: ${workspaceMount}`,\n          \"\",\n          `Default: ${formatLimits(defaultLimits)}`,\n          boostLimits ? `Boost: ${formatLimits({ ...defaultLimits, ...boostLimits })}` : undefined,\n        ].filter((line): line is string => line !== undefined),\n      ),\n      { style: \"muted\" },\n    );\n    return true;\n  }\n}\n\nfunction formatLimits(limits: { cpus?: string; memory?: string } | undefined): string {\n  return `CPU ${limits?.cpus ?? \"unlimited\"} / Memory ${limits?.memory ?? \"unlimited\"}`;\n}\n"]}

package/dist/commands/session-view.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-view.d.ts","sourceRoot":"","sources":["../../src/commands/session-view.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAOjE,qBAAa,yBAA0B,YAAW,cAAc;IACxD,SAAS,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAuEzD;CACF","sourcesContent":["import { resolveExistingSessionFile } from \"../session-view/service.js\";\nimport { parseSessionViewCommand } from \"../session-view/command.js\";\nimport type { CommandContext, CommandHandler } from \"./types.js\";\nimport { replyDiagnosticWithContext } from \"./utils.js\";\n\nfunction formatSessionCommandSummary(lines: string[]): string {\n  return [\"_Session_\", ...lines].join(\"\\n\");\n}\n\nexport class SessionViewCommandHandler implements CommandHandler {\n  async tryHandle(context: CommandContext): Promise<boolean> {\n    if (!parseSessionViewCommand(context.commandText)) return false;\n\n    const sendSessionViewReply = async (lines: string[]): Promise<void> => {\n      const text = formatSessionCommandSummary(lines);\n      if (context.privateConversation) {\n        await replyDiagnosticWithContext(context.responseCtx, text, { style: \"muted\" });\n        return;\n      }\n\n      if (context.bot.postPrivateDiagnostic) {\n        await context.bot.postPrivateDiagnostic(\n          context.conversationId,\n          context.platformUserId,\n          text,\n          {\n            style: \"muted\",\n          },\n        );\n        return;\n      }\n\n      if (context.bot.postPrivate) {\n        await context.bot.postPrivate(context.conversationId, context.platformUserId, text);\n        return;\n      }\n\n      await replyDiagnosticWithContext(context.responseCtx, text, { style: \"muted\" });\n    };\n\n    if (!context.privateConversation && !context.bot.postPrivate) {\n      await sendSessionViewReply([\n        \"為了保護對話內容，`/session` 目前只能在與機器人的私訊 / DM 中使用。\",\n      ]);\n      return true;\n    }\n\n    if (!context.services.portalBaseUrl) {\n      await sendSessionViewReply([\n        \"Session viewer is not configured.\",\n        \"Set `MAMA_LINK_URL` or `MAMA_LINK_PORT` on the server.\",\n      ]);\n      return true;\n    }\n\n    const sessionFile = resolveExistingSessionFile(\n      context.services.workingDir,\n      context.conversationId,\n      context.sessionKey,\n    );\n    if (!sessionFile) {\n      await sendSessionViewReply([\n        \"目前還沒有可查看的 session。\",\n        \"先和機器人對話一次，建立 session 後再試。\",\n      ]);\n      return true;\n    }\n\n    const token = context.services.sessionViewTokenStore.create(\n      context.platform,\n      context.platformUserId,\n      context.conversationId,\n      context.sessionKey,\n      sessionFile,\n    );\n\n    await sendSessionViewReply([\n      \"Open this read-only session link (expires in 24 hours):\",\n      `${context.services.portalBaseUrl}/session?token=${token.token}`,\n    ]);\n    return true;\n  }\n}\n"]}
+{"version":3,"file":"session-view.d.ts","sourceRoot":"","sources":["../../src/commands/session-view.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAOjE,qBAAa,yBAA0B,YAAW,cAAc;IACxD,SAAS,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CA6EzD;CACF","sourcesContent":["import { resolveExistingSessionFile } from \"../session-view/service.js\";\nimport { parseSessionViewCommand } from \"../session-view/command.js\";\nimport type { CommandContext, CommandHandler } from \"./types.js\";\nimport { replyDiagnosticWithContext } from \"./utils.js\";\n\nfunction formatSessionCommandSummary(lines: string[]): string {\n  return [\"_Session_\", ...lines].join(\"\\n\");\n}\n\nexport class SessionViewCommandHandler implements CommandHandler {\n  async tryHandle(context: CommandContext): Promise<boolean> {\n    if (!parseSessionViewCommand(context.commandText)) return false;\n\n    const sendSessionViewReply = async (lines: string[]): Promise<void> => {\n      const text = formatSessionCommandSummary(lines);\n      if (context.privateConversation) {\n        await replyDiagnosticWithContext(context.responseCtx, text, { style: \"muted\" });\n        return;\n      }\n\n      if (context.bot.postPrivateDiagnostic) {\n        await context.bot.postPrivateDiagnostic(\n          context.conversationId,\n          context.platformUserId,\n          text,\n          {\n            style: \"muted\",\n          },\n        );\n        return;\n      }\n\n      if (context.bot.postPrivate) {\n        await context.bot.postPrivate(context.conversationId, context.platformUserId, text);\n        return;\n      }\n\n      await replyDiagnosticWithContext(context.responseCtx, text, { style: \"muted\" });\n    };\n\n    if (!context.privateConversation && !context.bot.postPrivate) {\n      await sendSessionViewReply([\n        \"為了保護對話內容，`/session` 目前只能在與機器人的私訊 / DM 中使用。\",\n      ]);\n      return true;\n    }\n\n    if (!context.services.portalBaseUrl) {\n      await sendSessionViewReply([\n        \"Session viewer is not configured.\",\n        \"Set `MAMA_LINK_URL` or `MAMA_LINK_PORT` on the server.\",\n      ]);\n      return true;\n    }\n\n    const sessionFile = resolveExistingSessionFile(\n      context.services.workingDir,\n      context.conversationId,\n      context.sessionKey,\n    );\n    if (!sessionFile) {\n      await sendSessionViewReply([\n        \"目前還沒有可查看的 session。\",\n        \"先和機器人對話一次，建立 session 後再試。\",\n      ]);\n      return true;\n    }\n\n    const platformUser = context.bot\n      .getPlatformInfo()\n      .users.find((user) => user.id === context.platformUserId);\n    const platformUserName = platformUser?.userName || platformUser?.displayName;\n\n    const token = context.services.sessionViewTokenStore.create(\n      context.platform,\n      context.platformUserId,\n      context.conversationId,\n      context.sessionKey,\n      sessionFile,\n      platformUserName,\n    );\n\n    await sendSessionViewReply([\n      \"Open this read-only session link (expires in 24 hours):\",\n      `${context.services.portalBaseUrl}/session?token=${token.token}`,\n    ]);\n    return true;\n  }\n}\n"]}

package/dist/commands/session-view.js

@@ -47,7 +47,11 @@ export class SessionViewCommandHandler {
             ]);
             return true;
         }
-        const token = context.services.sessionViewTokenStore.create(context.platform, context.platformUserId, context.conversationId, context.sessionKey, sessionFile);
+        const platformUser = context.bot
+            .getPlatformInfo()
+            .users.find((user) => user.id === context.platformUserId);
+        const platformUserName = platformUser?.userName || platformUser?.displayName;
+        const token = context.services.sessionViewTokenStore.create(context.platform, context.platformUserId, context.conversationId, context.sessionKey, sessionFile, platformUserName);
         await sendSessionViewReply([
             "Open this read-only session link (expires in 24 hours):",
             `${context.services.portalBaseUrl}/session?token=${token.token}`,

package/dist/commands/session-view.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-view.js","sourceRoot":"","sources":["../../src/commands/session-view.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAExD,SAAS,2BAA2B,CAAC,KAAe;IAClD,OAAO,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,OAAO,yBAAyB;IACpC,KAAK,CAAC,SAAS,CAAC,OAAuB;QACrC,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAC;QAEhE,MAAM,oBAAoB,GAAG,KAAK,EAAE,KAAe,EAAiB,EAAE;YACpE,MAAM,IAAI,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;YAChD,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;gBAChC,MAAM,0BAA0B,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;gBAChF,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;gBACtC,MAAM,OAAO,CAAC,GAAG,CAAC,qBAAqB,CACrC,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,cAAc,EACtB,IAAI,EACJ;oBACE,KAAK,EAAE,OAAO;iBACf,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC5B,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;gBACpF,OAAO;YACT,CAAC;YAED,MAAM,0BAA0B,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAClF,CAAC,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAC7D,MAAM,oBAAoB,CAAC;gBACzB,4CAA4C;aAC7C,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;YACpC,MAAM,oBAAoB,CAAC;gBACzB,mCAAmC;gBACnC,wDAAwD;aACzD,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,WAAW,GAAG,0BAA0B,CAC5C,OAAO,CAAC,QAAQ,CAAC,UAAU,EAC3B,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,UAAU,CACnB,CAAC;QACF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,oBAAoB,CAAC;gBACzB,oBAAoB;gBACpB,2BAA2B;aAC5B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,MAAM,CACzD,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,UAAU,EAClB,WAAW,CACZ,CAAC;QAEF,MAAM,oBAAoB,CAAC;YACzB,yDAAyD;YACzD,GAAG,OAAO,CAAC,QAAQ,CAAC,aAAa,kBAAkB,KAAK,CAAC,KAAK,EAAE;SACjE,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;CACF","sourcesContent":["import { resolveExistingSessionFile } from \"../session-view/service.js\";\nimport { parseSessionViewCommand } from \"../session-view/command.js\";\nimport type { CommandContext, CommandHandler } from \"./types.js\";\nimport { replyDiagnosticWithContext } from \"./utils.js\";\n\nfunction formatSessionCommandSummary(lines: string[]): string {\n  return [\"_Session_\", ...lines].join(\"\\n\");\n}\n\nexport class SessionViewCommandHandler implements CommandHandler {\n  async tryHandle(context: CommandContext): Promise<boolean> {\n    if (!parseSessionViewCommand(context.commandText)) return false;\n\n    const sendSessionViewReply = async (lines: string[]): Promise<void> => {\n      const text = formatSessionCommandSummary(lines);\n      if (context.privateConversation) {\n        await replyDiagnosticWithContext(context.responseCtx, text, { style: \"muted\" });\n        return;\n      }\n\n      if (context.bot.postPrivateDiagnostic) {\n        await context.bot.postPrivateDiagnostic(\n          context.conversationId,\n          context.platformUserId,\n          text,\n          {\n            style: \"muted\",\n          },\n        );\n        return;\n      }\n\n      if (context.bot.postPrivate) {\n        await context.bot.postPrivate(context.conversationId, context.platformUserId, text);\n        return;\n      }\n\n      await replyDiagnosticWithContext(context.responseCtx, text, { style: \"muted\" });\n    };\n\n    if (!context.privateConversation && !context.bot.postPrivate) {\n      await sendSessionViewReply([\n        \"為了保護對話內容，`/session` 目前只能在與機器人的私訊 / DM 中使用。\",\n      ]);\n      return true;\n    }\n\n    if (!context.services.portalBaseUrl) {\n      await sendSessionViewReply([\n        \"Session viewer is not configured.\",\n        \"Set `MAMA_LINK_URL` or `MAMA_LINK_PORT` on the server.\",\n      ]);\n      return true;\n    }\n\n    const sessionFile = resolveExistingSessionFile(\n      context.services.workingDir,\n      context.conversationId,\n      context.sessionKey,\n    );\n    if (!sessionFile) {\n      await sendSessionViewReply([\n        \"目前還沒有可查看的 session。\",\n        \"先和機器人對話一次，建立 session 後再試。\",\n      ]);\n      return true;\n    }\n\n    const token = context.services.sessionViewTokenStore.create(\n      context.platform,\n      context.platformUserId,\n      context.conversationId,\n      context.sessionKey,\n      sessionFile,\n    );\n\n    await sendSessionViewReply([\n      \"Open this read-only session link (expires in 24 hours):\",\n      `${context.services.portalBaseUrl}/session?token=${token.token}`,\n    ]);\n    return true;\n  }\n}\n"]}
+{"version":3,"file":"session-view.js","sourceRoot":"","sources":["../../src/commands/session-view.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAExD,SAAS,2BAA2B,CAAC,KAAe;IAClD,OAAO,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,OAAO,yBAAyB;IACpC,KAAK,CAAC,SAAS,CAAC,OAAuB;QACrC,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAC;QAEhE,MAAM,oBAAoB,GAAG,KAAK,EAAE,KAAe,EAAiB,EAAE;YACpE,MAAM,IAAI,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;YAChD,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;gBAChC,MAAM,0BAA0B,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;gBAChF,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;gBACtC,MAAM,OAAO,CAAC,GAAG,CAAC,qBAAqB,CACrC,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,cAAc,EACtB,IAAI,EACJ;oBACE,KAAK,EAAE,OAAO;iBACf,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC5B,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;gBACpF,OAAO;YACT,CAAC;YAED,MAAM,0BAA0B,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAClF,CAAC,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAC7D,MAAM,oBAAoB,CAAC;gBACzB,4CAA4C;aAC7C,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;YACpC,MAAM,oBAAoB,CAAC;gBACzB,mCAAmC;gBACnC,wDAAwD;aACzD,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,WAAW,GAAG,0BAA0B,CAC5C,OAAO,CAAC,QAAQ,CAAC,UAAU,EAC3B,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,UAAU,CACnB,CAAC;QACF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,oBAAoB,CAAC;gBACzB,oBAAoB;gBACpB,2BAA2B;aAC5B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG;aAC7B,eAAe,EAAE;aACjB,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;QAC5D,MAAM,gBAAgB,GAAG,YAAY,EAAE,QAAQ,IAAI,YAAY,EAAE,WAAW,CAAC;QAE7E,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,MAAM,CACzD,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,UAAU,EAClB,WAAW,EACX,gBAAgB,CACjB,CAAC;QAEF,MAAM,oBAAoB,CAAC;YACzB,yDAAyD;YACzD,GAAG,OAAO,CAAC,QAAQ,CAAC,aAAa,kBAAkB,KAAK,CAAC,KAAK,EAAE;SACjE,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;CACF","sourcesContent":["import { resolveExistingSessionFile } from \"../session-view/service.js\";\nimport { parseSessionViewCommand } from \"../session-view/command.js\";\nimport type { CommandContext, CommandHandler } from \"./types.js\";\nimport { replyDiagnosticWithContext } from \"./utils.js\";\n\nfunction formatSessionCommandSummary(lines: string[]): string {\n  return [\"_Session_\", ...lines].join(\"\\n\");\n}\n\nexport class SessionViewCommandHandler implements CommandHandler {\n  async tryHandle(context: CommandContext): Promise<boolean> {\n    if (!parseSessionViewCommand(context.commandText)) return false;\n\n    const sendSessionViewReply = async (lines: string[]): Promise<void> => {\n      const text = formatSessionCommandSummary(lines);\n      if (context.privateConversation) {\n        await replyDiagnosticWithContext(context.responseCtx, text, { style: \"muted\" });\n        return;\n      }\n\n      if (context.bot.postPrivateDiagnostic) {\n        await context.bot.postPrivateDiagnostic(\n          context.conversationId,\n          context.platformUserId,\n          text,\n          {\n            style: \"muted\",\n          },\n        );\n        return;\n      }\n\n      if (context.bot.postPrivate) {\n        await context.bot.postPrivate(context.conversationId, context.platformUserId, text);\n        return;\n      }\n\n      await replyDiagnosticWithContext(context.responseCtx, text, { style: \"muted\" });\n    };\n\n    if (!context.privateConversation && !context.bot.postPrivate) {\n      await sendSessionViewReply([\n        \"為了保護對話內容，`/session` 目前只能在與機器人的私訊 / DM 中使用。\",\n      ]);\n      return true;\n    }\n\n    if (!context.services.portalBaseUrl) {\n      await sendSessionViewReply([\n        \"Session viewer is not configured.\",\n        \"Set `MAMA_LINK_URL` or `MAMA_LINK_PORT` on the server.\",\n      ]);\n      return true;\n    }\n\n    const sessionFile = resolveExistingSessionFile(\n      context.services.workingDir,\n      context.conversationId,\n      context.sessionKey,\n    );\n    if (!sessionFile) {\n      await sendSessionViewReply([\n        \"目前還沒有可查看的 session。\",\n        \"先和機器人對話一次，建立 session 後再試。\",\n      ]);\n      return true;\n    }\n\n    const platformUser = context.bot\n      .getPlatformInfo()\n      .users.find((user) => user.id === context.platformUserId);\n    const platformUserName = platformUser?.userName || platformUser?.displayName;\n\n    const token = context.services.sessionViewTokenStore.create(\n      context.platform,\n      context.platformUserId,\n      context.conversationId,\n      context.sessionKey,\n      sessionFile,\n      platformUserName,\n    );\n\n    await sendSessionViewReply([\n      \"Open this read-only session link (expires in 24 hours):\",\n      `${context.services.portalBaseUrl}/session?token=${token.token}`,\n    ]);\n    return true;\n  }\n}\n"]}

package/dist/commands/types.d.ts

@@ -1,5 +1,4 @@
 import type { Bot, BotAdapters, PlatformName } from "../adapter.js";
-import type { UserBindingStore } from "../bindings.js";
 import type { DockerContainerManager } from "../provisioner.js";
 import type { SessionRuntime } from "../runtime/session-runtime.js";
 import type { SandboxConfig } from "../sandbox.js";
@@ -10,7 +9,7 @@ export interface LinkTokenStoreLike {
     };
 }
 export interface SessionViewTokenStoreLike {
-    create(platform: PlatformName, platformUserId: string, conversationId: string, sessionKey: string, sessionFile: string): {
+    create(platform: PlatformName, platformUserId: string, conversationId: string, sessionKey: string, sessionFile: string, platformUserName?: string): {
         token: string;
     };
 }
@@ -19,7 +18,6 @@ export interface CommandServices {
     runtime?: SessionRuntime;
     sandbox: SandboxConfig;
     vaultManager: VaultManager;
-    bindingStore?: UserBindingStore;
     provisioner?: DockerContainerManager;
     linkTokenStore: LinkTokenStoreLike;
     sessionViewTokenStore: SessionViewTokenStoreLike;

package/dist/commands/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/commands/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,kBAAkB;IACjC,MAAM,CACJ,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GACjB;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACtB;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,CACJ,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,OAAO,EAAE,aAAa,CAAC;IACvB,YAAY,EAAE,YAAY,CAAC;IAC3B,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,cAAc,EAAE,kBAAkB,CAAC;IACnC,qBAAqB,EAAE,yBAAyB,CAAC;IACjD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,GAAG,CAAC;IACT,WAAW,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC;IACxC,QAAQ,EAAE,YAAY,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,QAAQ,EAAE,eAAe,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtD","sourcesContent":["import type { Bot, BotAdapters, PlatformName } from \"../adapter.js\";\nimport type { UserBindingStore } from \"../bindings.js\";\nimport type { DockerContainerManager } from \"../provisioner.js\";\nimport type { SessionRuntime } from \"../runtime/session-runtime.js\";\nimport type { SandboxConfig } from \"../sandbox.js\";\nimport type { VaultManager } from \"../vault.js\";\n\nexport interface LinkTokenStoreLike {\n  create(\n    platform: PlatformName,\n    platformUserId: string,\n    conversationId: string,\n    vaultId: string,\n    providerId: string,\n  ): { token: string };\n}\n\nexport interface SessionViewTokenStoreLike {\n  create(\n    platform: PlatformName,\n    platformUserId: string,\n    conversationId: string,\n    sessionKey: string,\n    sessionFile: string,\n  ): { token: string };\n}\n\nexport interface CommandServices {\n  workingDir: string;\n  runtime?: SessionRuntime;\n  sandbox: SandboxConfig;\n  vaultManager: VaultManager;\n  bindingStore?: UserBindingStore;\n  provisioner?: DockerContainerManager;\n  linkTokenStore: LinkTokenStoreLike;\n  sessionViewTokenStore: SessionViewTokenStoreLike;\n  portalBaseUrl?: string;\n}\n\nexport interface CommandContext {\n  bot: Bot;\n  responseCtx: BotAdapters[\"responseCtx\"];\n  platform: PlatformName;\n  platformUserId: string;\n  conversationId: string;\n  vaultConversationId?: string;\n  sessionKey: string;\n  commandText: string;\n  privateConversation: boolean;\n  services: CommandServices;\n}\n\nexport interface CommandHandler {\n  tryHandle(context: CommandContext): Promise<boolean>;\n}\n"]}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/commands/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,kBAAkB;IACjC,MAAM,CACJ,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GACjB;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACtB;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,CACJ,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,gBAAgB,CAAC,EAAE,MAAM,GACxB;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,OAAO,EAAE,aAAa,CAAC;IACvB,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,cAAc,EAAE,kBAAkB,CAAC;IACnC,qBAAqB,EAAE,yBAAyB,CAAC;IACjD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,GAAG,CAAC;IACT,WAAW,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC;IACxC,QAAQ,EAAE,YAAY,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,QAAQ,EAAE,eAAe,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtD","sourcesContent":["import type { Bot, BotAdapters, PlatformName } from \"../adapter.js\";\nimport type { DockerContainerManager } from \"../provisioner.js\";\nimport type { SessionRuntime } from \"../runtime/session-runtime.js\";\nimport type { SandboxConfig } from \"../sandbox.js\";\nimport type { VaultManager } from \"../vault.js\";\n\nexport interface LinkTokenStoreLike {\n  create(\n    platform: PlatformName,\n    platformUserId: string,\n    conversationId: string,\n    vaultId: string,\n    providerId: string,\n  ): { token: string };\n}\n\nexport interface SessionViewTokenStoreLike {\n  create(\n    platform: PlatformName,\n    platformUserId: string,\n    conversationId: string,\n    sessionKey: string,\n    sessionFile: string,\n    platformUserName?: string,\n  ): { token: string };\n}\n\nexport interface CommandServices {\n  workingDir: string;\n  runtime?: SessionRuntime;\n  sandbox: SandboxConfig;\n  vaultManager: VaultManager;\n  provisioner?: DockerContainerManager;\n  linkTokenStore: LinkTokenStoreLike;\n  sessionViewTokenStore: SessionViewTokenStoreLike;\n  portalBaseUrl?: string;\n}\n\nexport interface CommandContext {\n  bot: Bot;\n  responseCtx: BotAdapters[\"responseCtx\"];\n  platform: PlatformName;\n  platformUserId: string;\n  conversationId: string;\n  vaultConversationId?: string;\n  sessionKey: string;\n  commandText: string;\n  privateConversation: boolean;\n  services: CommandServices;\n}\n\nexport interface CommandHandler {\n  tryHandle(context: CommandContext): Promise<boolean>;\n}\n"]}

package/dist/commands/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/commands/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Bot, BotAdapters, PlatformName } from \"../adapter.js\";\nimport type { UserBindingStore } from \"../bindings.js\";\nimport type { DockerContainerManager } from \"../provisioner.js\";\nimport type { SessionRuntime } from \"../runtime/session-runtime.js\";\nimport type { SandboxConfig } from \"../sandbox.js\";\nimport type { VaultManager } from \"../vault.js\";\n\nexport interface LinkTokenStoreLike {\n  create(\n    platform: PlatformName,\n    platformUserId: string,\n    conversationId: string,\n    vaultId: string,\n    providerId: string,\n  ): { token: string };\n}\n\nexport interface SessionViewTokenStoreLike {\n  create(\n    platform: PlatformName,\n    platformUserId: string,\n    conversationId: string,\n    sessionKey: string,\n    sessionFile: string,\n  ): { token: string };\n}\n\nexport interface CommandServices {\n  workingDir: string;\n  runtime?: SessionRuntime;\n  sandbox: SandboxConfig;\n  vaultManager: VaultManager;\n  bindingStore?: UserBindingStore;\n  provisioner?: DockerContainerManager;\n  linkTokenStore: LinkTokenStoreLike;\n  sessionViewTokenStore: SessionViewTokenStoreLike;\n  portalBaseUrl?: string;\n}\n\nexport interface CommandContext {\n  bot: Bot;\n  responseCtx: BotAdapters[\"responseCtx\"];\n  platform: PlatformName;\n  platformUserId: string;\n  conversationId: string;\n  vaultConversationId?: string;\n  sessionKey: string;\n  commandText: string;\n  privateConversation: boolean;\n  services: CommandServices;\n}\n\nexport interface CommandHandler {\n  tryHandle(context: CommandContext): Promise<boolean>;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/commands/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Bot, BotAdapters, PlatformName } from \"../adapter.js\";\nimport type { DockerContainerManager } from \"../provisioner.js\";\nimport type { SessionRuntime } from \"../runtime/session-runtime.js\";\nimport type { SandboxConfig } from \"../sandbox.js\";\nimport type { VaultManager } from \"../vault.js\";\n\nexport interface LinkTokenStoreLike {\n  create(\n    platform: PlatformName,\n    platformUserId: string,\n    conversationId: string,\n    vaultId: string,\n    providerId: string,\n  ): { token: string };\n}\n\nexport interface SessionViewTokenStoreLike {\n  create(\n    platform: PlatformName,\n    platformUserId: string,\n    conversationId: string,\n    sessionKey: string,\n    sessionFile: string,\n    platformUserName?: string,\n  ): { token: string };\n}\n\nexport interface CommandServices {\n  workingDir: string;\n  runtime?: SessionRuntime;\n  sandbox: SandboxConfig;\n  vaultManager: VaultManager;\n  provisioner?: DockerContainerManager;\n  linkTokenStore: LinkTokenStoreLike;\n  sessionViewTokenStore: SessionViewTokenStoreLike;\n  portalBaseUrl?: string;\n}\n\nexport interface CommandContext {\n  bot: Bot;\n  responseCtx: BotAdapters[\"responseCtx\"];\n  platform: PlatformName;\n  platformUserId: string;\n  conversationId: string;\n  vaultConversationId?: string;\n  sessionKey: string;\n  commandText: string;\n  privateConversation: boolean;\n  services: CommandServices;\n}\n\nexport interface CommandHandler {\n  tryHandle(context: CommandContext): Promise<boolean>;\n}\n"]}

package/dist/config.d.ts

@@ -14,10 +14,14 @@ export interface AgentConfig {
     sandboxMemory?: string;
     sandboxBoostCpus?: string;
     sandboxBoostMemory?: string;
+    sandboxImageWorkspaceMount?: "private" | "full";
 }
 export declare function loadAgentConfig(): AgentConfig;
 export declare function loadAgentConfigForConversation(conversationDir: string): AgentConfig;
 export declare function saveConversationModelConfig(conversationDir: string, config: Pick<AgentConfig, "provider" | "model"> & Partial<Pick<AgentConfig, "thinkingLevel">>): void;
+export declare function saveConversationSandboxConfig(conversationDir: string, config: {
+    imageWorkspaceMount: AgentConfig["sandboxImageWorkspaceMount"];
+}): void;
 export declare function resolveWorkspaceDirFromArgv(args?: string[]): string | undefined;
 export declare function resolveStateDirFromArgv(args?: string[]): string;
 export declare function resolveSentryDsn(): string | undefined;

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAMnE,qBAAa,0BAA2B,SAAQ,KAAK;aACvB,YAAY,EAAE,MAAM;IAAhD,YAA4B,YAAY,EAAE,MAAM,EAG/C;CACF;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC;IAC9B,QAAQ,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAiJD,wBAAgB,eAAe,IAAI,WAAW,CAE7C;AAED,wBAAgB,8BAA8B,CAAC,eAAe,EAAE,MAAM,GAAG,WAAW,CAMnF;AAED,wBAAgB,2BAA2B,CACzC,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,GAAG,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,GAC5F,IAAI,CAWN;AAED,wBAAgB,2BAA2B,CAAC,IAAI,WAAwB,GAAG,MAAM,GAAG,SAAS,CA2B5F;AAED,wBAAgB,uBAAuB,CAAC,IAAI,WAAwB,GAAG,MAAM,CAY5E;AAED,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAOrD;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAUjE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAIvD;AAwDD,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAwBlE","sourcesContent":["import type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport { existsSync, mkdirSync, readFileSync } from \"fs\";\nimport { homedir } from \"os\";\nimport { dirname, join, resolve } from \"path\";\nimport { atomicWritePrivateFile } from \"./fs-atomic.js\";\n\nexport class MissingGlobalSettingsError extends Error {\n  constructor(public readonly settingsPath: string) {\n    super(`Missing global settings file at ${settingsPath}`);\n    this.name = \"MissingGlobalSettingsError\";\n  }\n}\n\nexport interface AgentConfig {\n  provider: string;\n  model: string;\n  thinkingLevel: ThinkingLevel;\n  logFormat: \"console\" | \"json\";\n  logLevel: \"trace\" | \"debug\" | \"info\" | \"warn\" | \"error\";\n  sentryDsn?: string;\n  sandboxCpus?: string;\n  sandboxMemory?: string;\n  sandboxBoostCpus?: string;\n  sandboxBoostMemory?: string;\n}\n\nconst ONBOARD_SETTINGS: SettingsFileConfig = {\n  llm: {\n    provider: \"anthropic\",\n    model: \"claude-sonnet-4-5\",\n    thinkingLevel: \"off\",\n  },\n  log: {\n    format: \"console\",\n    level: \"info\",\n  },\n  sandbox: {\n    cpus: \"0.5\",\n    memory: \"1g\",\n    boost: {\n      cpus: \"2\",\n      memory: \"4g\",\n    },\n  },\n};\n\ninterface SettingsFileConfig {\n  llm?: Partial<Pick<AgentConfig, \"provider\" | \"model\" | \"thinkingLevel\">>;\n  log?: { format?: AgentConfig[\"logFormat\"]; level?: AgentConfig[\"logLevel\"] };\n  sentry?: { dsn?: string };\n  sandbox?: { cpus?: string; memory?: string; boost?: { cpus?: string; memory?: string } };\n}\n\nfunction loadSettingsFile(settingsPath: string): SettingsFileConfig | undefined {\n  if (!existsSync(settingsPath)) {\n    return undefined;\n  }\n\n  const raw = readFileSync(settingsPath, \"utf-8\");\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch (err) {\n    const detail = err instanceof Error ? err.message : String(err);\n    throw new Error(`Malformed settings file at ${settingsPath}: ${detail}`);\n  }\n  if (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n    throw new Error(\n      `Malformed settings file at ${settingsPath}: expected a JSON object at the top level`,\n    );\n  }\n  return parsed as SettingsFileConfig;\n}\n\nfunction getStateDir(): string {\n  const raw = process.env.MAMA_STATE_DIR?.trim();\n  return raw ? resolve(raw) : join(homedir(), \".mama\");\n}\n\nfunction normalizeSettingsConfig(config: SettingsFileConfig): Partial<AgentConfig> {\n  return {\n    ...(config.llm?.provider !== undefined ? { provider: config.llm.provider } : {}),\n    ...(config.llm?.model !== undefined ? { model: config.llm.model } : {}),\n    ...(config.llm?.thinkingLevel !== undefined ? { thinkingLevel: config.llm.thinkingLevel } : {}),\n    ...(config.log?.format !== undefined ? { logFormat: config.log.format } : {}),\n    ...(config.log?.level !== undefined ? { logLevel: config.log.level } : {}),\n    ...(config.sentry?.dsn !== undefined ? { sentryDsn: config.sentry.dsn } : {}),\n    ...(config.sandbox?.cpus !== undefined ? { sandboxCpus: config.sandbox.cpus } : {}),\n    ...(config.sandbox?.memory !== undefined ? { sandboxMemory: config.sandbox.memory } : {}),\n    ...(config.sandbox?.boost?.cpus !== undefined\n      ? { sandboxBoostCpus: config.sandbox.boost.cpus }\n      : {}),\n    ...(config.sandbox?.boost?.memory !== undefined\n      ? { sandboxBoostMemory: config.sandbox.boost.memory }\n      : {}),\n  };\n}\n\nfunction getSettingsPath(): string {\n  return join(getStateDir(), \"settings.json\");\n}\n\nfunction requireGlobalSettings(): SettingsFileConfig {\n  const settingsPath = getSettingsPath();\n  const config = loadSettingsFile(settingsPath);\n  if (!config) {\n    throw new MissingGlobalSettingsError(settingsPath);\n  }\n  return config;\n}\n\nfunction requireString(value: string | undefined, path: string): string {\n  if (!value) {\n    throw new Error(\n      `Missing required global setting: ${path}. Run \\`mama --onboard\\` to create settings.json.`,\n    );\n  }\n  return value;\n}\n\nfunction requireThinkingLevel(value: ThinkingLevel | undefined): ThinkingLevel {\n  return requireString(value, \"llm.thinkingLevel\") as ThinkingLevel;\n}\n\nfunction requireLogFormat(value: AgentConfig[\"logFormat\"] | undefined): AgentConfig[\"logFormat\"] {\n  if (value !== \"console\" && value !== \"json\") {\n    throw new Error(\"Missing or invalid required global setting: log.format\");\n  }\n  return value;\n}\n\nfunction requireLogLevel(value: AgentConfig[\"logLevel\"] | undefined): AgentConfig[\"logLevel\"] {\n  const allowed = [\"trace\", \"debug\", \"info\", \"warn\", \"error\"];\n  if (!value || !allowed.includes(value)) {\n    throw new Error(\"Missing or invalid required global setting: log.level\");\n  }\n  return value;\n}\n\nfunction toAgentConfig(fromFile: Partial<AgentConfig>): AgentConfig {\n  const provider = requireString(fromFile.provider, \"llm.provider\");\n  const model = requireString(fromFile.model, \"llm.model\");\n  const thinkingLevel = requireThinkingLevel(fromFile.thinkingLevel);\n  const logFormat = requireLogFormat(fromFile.logFormat);\n  const logLevel = requireLogLevel(fromFile.logLevel);\n  const sentryDsn = fromFile.sentryDsn ?? process.env.SENTRY_DSN;\n  const sandboxCpus = fromFile.sandboxCpus;\n  const sandboxMemory = fromFile.sandboxMemory;\n  const sandboxBoostCpus = fromFile.sandboxBoostCpus;\n  const sandboxBoostMemory = fromFile.sandboxBoostMemory;\n\n  return {\n    provider,\n    model,\n    thinkingLevel,\n    logFormat,\n    logLevel,\n    sentryDsn,\n    sandboxCpus,\n    sandboxMemory,\n    sandboxBoostCpus,\n    sandboxBoostMemory,\n  };\n}\n\nfunction loadRawAgentConfig(): Partial<AgentConfig> {\n  return normalizeSettingsConfig(requireGlobalSettings());\n}\n\nexport function loadAgentConfig(): AgentConfig {\n  return toAgentConfig(loadRawAgentConfig());\n}\n\nexport function loadAgentConfigForConversation(conversationDir: string): AgentConfig {\n  const globalConfig = loadRawAgentConfig();\n  const conversationConfig = normalizeSettingsConfig(\n    loadSettingsFile(join(conversationDir, \"settings.json\")) ?? {},\n  );\n  return toAgentConfig({ ...globalConfig, ...conversationConfig });\n}\n\nexport function saveConversationModelConfig(\n  conversationDir: string,\n  config: Pick<AgentConfig, \"provider\" | \"model\"> & Partial<Pick<AgentConfig, \"thinkingLevel\">>,\n): void {\n  if (!existsSync(conversationDir)) {\n    mkdirSync(conversationDir, { recursive: true });\n  }\n  const settingsPath = join(conversationDir, \"settings.json\");\n  const existing = loadSettingsFile(settingsPath) ?? {};\n  const scopedConfig: SettingsFileConfig = {\n    ...existing,\n    llm: { ...existing.llm, ...config },\n  };\n  atomicWritePrivateFile(settingsPath, JSON.stringify(scopedConfig, null, 2));\n}\n\nexport function resolveWorkspaceDirFromArgv(args = process.argv.slice(2)): string | undefined {\n  for (let i = 0; i < args.length; i++) {\n    const arg = args[i];\n\n    if (arg === \"--sandbox\" || arg === \"--download\" || arg === \"--state-dir\") {\n      i += 1;\n      continue;\n    }\n\n    if (arg === \"--version\" || arg === \"-v\" || arg === \"-V\" || arg === \"--onboard\") {\n      continue;\n    }\n\n    if (\n      arg.startsWith(\"--sandbox=\") ||\n      arg.startsWith(\"--download=\") ||\n      arg.startsWith(\"--state-dir=\")\n    ) {\n      continue;\n    }\n\n    if (!arg.startsWith(\"-\")) {\n      return arg;\n    }\n  }\n\n  return undefined;\n}\n\nexport function resolveStateDirFromArgv(args = process.argv.slice(2)): string {\n  for (let i = 0; i < args.length; i++) {\n    const arg = args[i];\n    if (arg.startsWith(\"--state-dir=\")) {\n      return resolve(arg.slice(\"--state-dir=\".length));\n    }\n    if (arg === \"--state-dir\") {\n      return resolve(args[++i] || \"\");\n    }\n  }\n\n  return join(homedir(), \".mama\");\n}\n\nexport function resolveSentryDsn(): string | undefined {\n  const fromFile = normalizeSettingsConfig(loadSettingsFile(getSettingsPath()) ?? {});\n  if (fromFile.sentryDsn) {\n    return fromFile.sentryDsn;\n  }\n\n  return process.env.SENTRY_DSN;\n}\n\nexport function createGlobalSettingsFile(stateDir: string): string {\n  const settingsPath = join(stateDir, \"settings.json\");\n  if (existsSync(settingsPath)) {\n    throw new Error(`Global settings already exists at ${settingsPath}`);\n  }\n  if (!existsSync(stateDir)) {\n    mkdirSync(stateDir, { recursive: true });\n  }\n  atomicWritePrivateFile(settingsPath, JSON.stringify(ONBOARD_SETTINGS, null, 2));\n  return settingsPath;\n}\n\n/**\n * Externally-visible base URL of the link/OAuth server, e.g.\n * `https://mama.example.com` (no trailing slash). Read from `MAMA_LINK_URL`,\n * the same env var the bot uses to build credential onboarding links.\n */\nexport function resolveLinkBaseUrl(): string | undefined {\n  const raw = process.env.MAMA_LINK_URL?.trim();\n  if (!raw) return undefined;\n  return raw.replace(/\\/+$/, \"\");\n}\n\nfunction hasDefinedValue(values: Record<string, unknown> | undefined): boolean {\n  return values !== undefined && Object.values(values).some((value) => value !== undefined);\n}\n\nfunction compactSettingsConfig(config: SettingsFileConfig): SettingsFileConfig {\n  return {\n    ...(hasDefinedValue(config.llm) ? { llm: config.llm } : {}),\n    ...(hasDefinedValue(config.log) ? { log: config.log } : {}),\n    ...(hasDefinedValue(config.sentry) ? { sentry: config.sentry } : {}),\n    ...(hasDefinedValue(config.sandbox) ? { sandbox: config.sandbox } : {}),\n  };\n}\n\nfunction patchSettingsConfig(\n  existing: SettingsFileConfig,\n  config: Partial<AgentConfig>,\n): SettingsFileConfig {\n  const patched: SettingsFileConfig = {\n    ...existing,\n    llm: {\n      ...existing.llm,\n      ...(config.provider !== undefined ? { provider: config.provider } : {}),\n      ...(config.model !== undefined ? { model: config.model } : {}),\n      ...(config.thinkingLevel !== undefined ? { thinkingLevel: config.thinkingLevel } : {}),\n    },\n    log: {\n      ...existing.log,\n      ...(config.logFormat !== undefined ? { format: config.logFormat } : {}),\n      ...(config.logLevel !== undefined ? { level: config.logLevel } : {}),\n    },\n    sentry: {\n      ...existing.sentry,\n      ...(config.sentryDsn !== undefined ? { dsn: config.sentryDsn } : {}),\n    },\n    sandbox: {\n      ...existing.sandbox,\n      ...(config.sandboxCpus !== undefined ? { cpus: config.sandboxCpus } : {}),\n      ...(config.sandboxMemory !== undefined ? { memory: config.sandboxMemory } : {}),\n      ...(config.sandboxBoostCpus !== undefined || config.sandboxBoostMemory !== undefined\n        ? {\n            boost: {\n              ...existing.sandbox?.boost,\n              ...(config.sandboxBoostCpus !== undefined ? { cpus: config.sandboxBoostCpus } : {}),\n              ...(config.sandboxBoostMemory !== undefined\n                ? { memory: config.sandboxBoostMemory }\n                : {}),\n            },\n          }\n        : {}),\n    },\n  };\n  return compactSettingsConfig(patched);\n}\n\nexport function saveAgentConfig(config: Partial<AgentConfig>): void {\n  const settingsPath = join(getStateDir(), \"settings.json\");\n\n  let existing: SettingsFileConfig = ONBOARD_SETTINGS;\n  if (existsSync(settingsPath)) {\n    try {\n      existing = loadSettingsFile(settingsPath) ?? {};\n    } catch (err) {\n      const detail = err instanceof Error ? err.message : String(err);\n      const message = detail.startsWith(\"Malformed settings file\")\n        ? detail.replace(\"Malformed settings file\", \"Refusing to overwrite malformed settings file\")\n        : detail;\n      throw new Error(message);\n    }\n  }\n\n  const merged = patchSettingsConfig(existing, config);\n\n  const dir = dirname(settingsPath);\n  if (!existsSync(dir)) {\n    mkdirSync(dir, { recursive: true });\n  }\n\n  atomicWritePrivateFile(settingsPath, JSON.stringify(merged, null, 2));\n}\n"]}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAOnE,qBAAa,0BAA2B,SAAQ,KAAK;aACvB,YAAY,EAAE,MAAM;IAAhD,YAA4B,YAAY,EAAE,MAAM,EAG/C;CACF;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC;IAC9B,QAAQ,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,0BAA0B,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;CACjD;AAoJD,wBAAgB,eAAe,IAAI,WAAW,CAE7C;AAED,wBAAgB,8BAA8B,CAAC,eAAe,EAAE,MAAM,GAAG,WAAW,CAMnF;AAED,wBAAgB,2BAA2B,CACzC,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,GAAG,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,GAC5F,IAAI,CAWN;AAED,wBAAgB,6BAA6B,CAC3C,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE;IAAE,mBAAmB,EAAE,WAAW,CAAC,4BAA4B,CAAC,CAAA;CAAE,GACzE,IAAI,CAiBN;AAED,wBAAgB,2BAA2B,CAAC,IAAI,WAAwB,GAAG,MAAM,GAAG,SAAS,CA2B5F;AAED,wBAAgB,uBAAuB,CAAC,IAAI,WAAwB,GAAG,MAAM,CAY5E;AAED,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAOrD;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAUjE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAIvD;AAwDD,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAsBlE","sourcesContent":["import type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport { existsSync } from \"fs\";\nimport { homedir } from \"os\";\nimport { dirname, join, resolve } from \"path\";\nimport { ensureDirExists, isRecord, readJsonFileIfExists } from \"./file-guards.js\";\nimport { atomicWritePrivateFile } from \"./fs-atomic.js\";\n\nexport class MissingGlobalSettingsError extends Error {\n  constructor(public readonly settingsPath: string) {\n    super(`Missing global settings file at ${settingsPath}`);\n    this.name = \"MissingGlobalSettingsError\";\n  }\n}\n\nexport interface AgentConfig {\n  provider: string;\n  model: string;\n  thinkingLevel: ThinkingLevel;\n  logFormat: \"console\" | \"json\";\n  logLevel: \"trace\" | \"debug\" | \"info\" | \"warn\" | \"error\";\n  sentryDsn?: string;\n  sandboxCpus?: string;\n  sandboxMemory?: string;\n  sandboxBoostCpus?: string;\n  sandboxBoostMemory?: string;\n  sandboxImageWorkspaceMount?: \"private\" | \"full\";\n}\n\nconst ONBOARD_SETTINGS: SettingsFileConfig = {\n  llm: {\n    provider: \"anthropic\",\n    model: \"claude-sonnet-4-5\",\n    thinkingLevel: \"off\",\n  },\n  log: {\n    format: \"console\",\n    level: \"info\",\n  },\n  sandbox: {\n    cpus: \"0.5\",\n    memory: \"1g\",\n    boost: {\n      cpus: \"2\",\n      memory: \"4g\",\n    },\n    image: {\n      workspaceMount: \"private\",\n    },\n  },\n};\n\ninterface SettingsFileConfig {\n  llm?: Partial<Pick<AgentConfig, \"provider\" | \"model\" | \"thinkingLevel\">>;\n  log?: { format?: AgentConfig[\"logFormat\"]; level?: AgentConfig[\"logLevel\"] };\n  sentry?: { dsn?: string };\n  sandbox?: {\n    cpus?: string;\n    memory?: string;\n    boost?: { cpus?: string; memory?: string };\n    image?: { workspaceMount?: AgentConfig[\"sandboxImageWorkspaceMount\"] };\n  };\n}\n\nfunction loadSettingsFile(settingsPath: string): SettingsFileConfig | undefined {\n  return readJsonFileIfExists(\n    settingsPath,\n    (value): value is SettingsFileConfig => isRecord(value),\n    (detail) =>\n      detail === \"unexpected JSON shape\"\n        ? `Malformed settings file at ${settingsPath}: expected a JSON object at the top level`\n        : `Malformed settings file at ${settingsPath}: ${detail}`,\n  );\n}\n\nfunction getStateDir(): string {\n  const raw = process.env.MAMA_STATE_DIR?.trim();\n  return raw ? resolve(raw) : join(homedir(), \".mama\");\n}\n\nfunction normalizeSettingsConfig(config: SettingsFileConfig): Partial<AgentConfig> {\n  return {\n    ...(config.llm?.provider !== undefined ? { provider: config.llm.provider } : {}),\n    ...(config.llm?.model !== undefined ? { model: config.llm.model } : {}),\n    ...(config.llm?.thinkingLevel !== undefined ? { thinkingLevel: config.llm.thinkingLevel } : {}),\n    ...(config.log?.format !== undefined ? { logFormat: config.log.format } : {}),\n    ...(config.log?.level !== undefined ? { logLevel: config.log.level } : {}),\n    ...(config.sentry?.dsn !== undefined ? { sentryDsn: config.sentry.dsn } : {}),\n    ...(config.sandbox?.cpus !== undefined ? { sandboxCpus: config.sandbox.cpus } : {}),\n    ...(config.sandbox?.memory !== undefined ? { sandboxMemory: config.sandbox.memory } : {}),\n    ...(config.sandbox?.boost?.cpus !== undefined\n      ? { sandboxBoostCpus: config.sandbox.boost.cpus }\n      : {}),\n    ...(config.sandbox?.boost?.memory !== undefined\n      ? { sandboxBoostMemory: config.sandbox.boost.memory }\n      : {}),\n    ...(config.sandbox?.image?.workspaceMount !== undefined\n      ? { sandboxImageWorkspaceMount: config.sandbox.image.workspaceMount }\n      : {}),\n  };\n}\n\nfunction getSettingsPath(): string {\n  return join(getStateDir(), \"settings.json\");\n}\n\nfunction requireGlobalSettings(): SettingsFileConfig {\n  const settingsPath = getSettingsPath();\n  const config = loadSettingsFile(settingsPath);\n  if (!config) {\n    throw new MissingGlobalSettingsError(settingsPath);\n  }\n  return config;\n}\n\nfunction requireString(value: string | undefined, path: string): string {\n  if (!value) {\n    throw new Error(\n      `Missing required global setting: ${path}. Run \\`mama --onboard\\` to create settings.json.`,\n    );\n  }\n  return value;\n}\n\nfunction requireThinkingLevel(value: ThinkingLevel | undefined): ThinkingLevel {\n  return requireString(value, \"llm.thinkingLevel\") as ThinkingLevel;\n}\n\nfunction requireLogFormat(value: AgentConfig[\"logFormat\"] | undefined): AgentConfig[\"logFormat\"] {\n  if (value !== \"console\" && value !== \"json\") {\n    throw new Error(\"Missing or invalid required global setting: log.format\");\n  }\n  return value;\n}\n\nfunction requireLogLevel(value: AgentConfig[\"logLevel\"] | undefined): AgentConfig[\"logLevel\"] {\n  const allowed = [\"trace\", \"debug\", \"info\", \"warn\", \"error\"];\n  if (!value || !allowed.includes(value)) {\n    throw new Error(\"Missing or invalid required global setting: log.level\");\n  }\n  return value;\n}\n\nfunction toAgentConfig(fromFile: Partial<AgentConfig>): AgentConfig {\n  const provider = requireString(fromFile.provider, \"llm.provider\");\n  const model = requireString(fromFile.model, \"llm.model\");\n  const thinkingLevel = requireThinkingLevel(fromFile.thinkingLevel);\n  const logFormat = requireLogFormat(fromFile.logFormat);\n  const logLevel = requireLogLevel(fromFile.logLevel);\n  const sentryDsn = fromFile.sentryDsn ?? process.env.SENTRY_DSN;\n  const sandboxCpus = fromFile.sandboxCpus;\n  const sandboxMemory = fromFile.sandboxMemory;\n  const sandboxBoostCpus = fromFile.sandboxBoostCpus;\n  const sandboxBoostMemory = fromFile.sandboxBoostMemory;\n  const sandboxImageWorkspaceMount = fromFile.sandboxImageWorkspaceMount;\n\n  return {\n    provider,\n    model,\n    thinkingLevel,\n    logFormat,\n    logLevel,\n    sentryDsn,\n    sandboxCpus,\n    sandboxMemory,\n    sandboxBoostCpus,\n    sandboxBoostMemory,\n    sandboxImageWorkspaceMount,\n  };\n}\n\nfunction loadRawAgentConfig(): Partial<AgentConfig> {\n  return normalizeSettingsConfig(requireGlobalSettings());\n}\n\nexport function loadAgentConfig(): AgentConfig {\n  return toAgentConfig(loadRawAgentConfig());\n}\n\nexport function loadAgentConfigForConversation(conversationDir: string): AgentConfig {\n  const globalConfig = loadRawAgentConfig();\n  const conversationConfig = normalizeSettingsConfig(\n    loadSettingsFile(join(conversationDir, \"settings.json\")) ?? {},\n  );\n  return toAgentConfig({ ...globalConfig, ...conversationConfig });\n}\n\nexport function saveConversationModelConfig(\n  conversationDir: string,\n  config: Pick<AgentConfig, \"provider\" | \"model\"> & Partial<Pick<AgentConfig, \"thinkingLevel\">>,\n): void {\n  if (!existsSync(conversationDir)) {\n    ensureDirExists(conversationDir);\n  }\n  const settingsPath = join(conversationDir, \"settings.json\");\n  const existing = loadSettingsFile(settingsPath) ?? {};\n  const scopedConfig: SettingsFileConfig = {\n    ...existing,\n    llm: { ...existing.llm, ...config },\n  };\n  atomicWritePrivateFile(settingsPath, JSON.stringify(scopedConfig, null, 2));\n}\n\nexport function saveConversationSandboxConfig(\n  conversationDir: string,\n  config: { imageWorkspaceMount: AgentConfig[\"sandboxImageWorkspaceMount\"] },\n): void {\n  if (!existsSync(conversationDir)) {\n    ensureDirExists(conversationDir);\n  }\n  const settingsPath = join(conversationDir, \"settings.json\");\n  const existing = loadSettingsFile(settingsPath) ?? {};\n  const scopedConfig: SettingsFileConfig = {\n    ...existing,\n    sandbox: {\n      ...existing.sandbox,\n      image: {\n        ...existing.sandbox?.image,\n        workspaceMount: config.imageWorkspaceMount,\n      },\n    },\n  };\n  atomicWritePrivateFile(settingsPath, JSON.stringify(scopedConfig, null, 2));\n}\n\nexport function resolveWorkspaceDirFromArgv(args = process.argv.slice(2)): string | undefined {\n  for (let i = 0; i < args.length; i++) {\n    const arg = args[i];\n\n    if (arg === \"--sandbox\" || arg === \"--download\" || arg === \"--state-dir\") {\n      i += 1;\n      continue;\n    }\n\n    if (arg === \"--version\" || arg === \"-v\" || arg === \"-V\" || arg === \"--onboard\") {\n      continue;\n    }\n\n    if (\n      arg.startsWith(\"--sandbox=\") ||\n      arg.startsWith(\"--download=\") ||\n      arg.startsWith(\"--state-dir=\")\n    ) {\n      continue;\n    }\n\n    if (!arg.startsWith(\"-\")) {\n      return arg;\n    }\n  }\n\n  return undefined;\n}\n\nexport function resolveStateDirFromArgv(args = process.argv.slice(2)): string {\n  for (let i = 0; i < args.length; i++) {\n    const arg = args[i];\n    if (arg.startsWith(\"--state-dir=\")) {\n      return resolve(arg.slice(\"--state-dir=\".length));\n    }\n    if (arg === \"--state-dir\") {\n      return resolve(args[++i] || \"\");\n    }\n  }\n\n  return join(homedir(), \".mama\");\n}\n\nexport function resolveSentryDsn(): string | undefined {\n  const fromFile = normalizeSettingsConfig(loadSettingsFile(getSettingsPath()) ?? {});\n  if (fromFile.sentryDsn) {\n    return fromFile.sentryDsn;\n  }\n\n  return process.env.SENTRY_DSN;\n}\n\nexport function createGlobalSettingsFile(stateDir: string): string {\n  const settingsPath = join(stateDir, \"settings.json\");\n  if (existsSync(settingsPath)) {\n    throw new Error(`Global settings already exists at ${settingsPath}`);\n  }\n  if (!existsSync(stateDir)) {\n    ensureDirExists(stateDir);\n  }\n  atomicWritePrivateFile(settingsPath, JSON.stringify(ONBOARD_SETTINGS, null, 2));\n  return settingsPath;\n}\n\n/**\n * Externally-visible base URL of the link/OAuth server, e.g.\n * `https://mama.example.com` (no trailing slash). Read from `MAMA_LINK_URL`,\n * the same env var the bot uses to build credential onboarding links.\n */\nexport function resolveLinkBaseUrl(): string | undefined {\n  const raw = process.env.MAMA_LINK_URL?.trim();\n  if (!raw) return undefined;\n  return raw.replace(/\\/+$/, \"\");\n}\n\nfunction hasDefinedValue(values: Record<string, unknown> | undefined): boolean {\n  return values !== undefined && Object.values(values).some((value) => value !== undefined);\n}\n\nfunction compactSettingsConfig(config: SettingsFileConfig): SettingsFileConfig {\n  return {\n    ...(hasDefinedValue(config.llm) ? { llm: config.llm } : {}),\n    ...(hasDefinedValue(config.log) ? { log: config.log } : {}),\n    ...(hasDefinedValue(config.sentry) ? { sentry: config.sentry } : {}),\n    ...(hasDefinedValue(config.sandbox) ? { sandbox: config.sandbox } : {}),\n  };\n}\n\nfunction patchSettingsConfig(\n  existing: SettingsFileConfig,\n  config: Partial<AgentConfig>,\n): SettingsFileConfig {\n  const patched: SettingsFileConfig = {\n    ...existing,\n    llm: {\n      ...existing.llm,\n      ...(config.provider !== undefined ? { provider: config.provider } : {}),\n      ...(config.model !== undefined ? { model: config.model } : {}),\n      ...(config.thinkingLevel !== undefined ? { thinkingLevel: config.thinkingLevel } : {}),\n    },\n    log: {\n      ...existing.log,\n      ...(config.logFormat !== undefined ? { format: config.logFormat } : {}),\n      ...(config.logLevel !== undefined ? { level: config.logLevel } : {}),\n    },\n    sentry: {\n      ...existing.sentry,\n      ...(config.sentryDsn !== undefined ? { dsn: config.sentryDsn } : {}),\n    },\n    sandbox: {\n      ...existing.sandbox,\n      ...(config.sandboxCpus !== undefined ? { cpus: config.sandboxCpus } : {}),\n      ...(config.sandboxMemory !== undefined ? { memory: config.sandboxMemory } : {}),\n      ...(config.sandboxBoostCpus !== undefined || config.sandboxBoostMemory !== undefined\n        ? {\n            boost: {\n              ...existing.sandbox?.boost,\n              ...(config.sandboxBoostCpus !== undefined ? { cpus: config.sandboxBoostCpus } : {}),\n              ...(config.sandboxBoostMemory !== undefined\n                ? { memory: config.sandboxBoostMemory }\n                : {}),\n            },\n          }\n        : {}),\n    },\n  };\n  return compactSettingsConfig(patched);\n}\n\nexport function saveAgentConfig(config: Partial<AgentConfig>): void {\n  const settingsPath = join(getStateDir(), \"settings.json\");\n\n  let existing: SettingsFileConfig = ONBOARD_SETTINGS;\n  if (existsSync(settingsPath)) {\n    try {\n      existing = loadSettingsFile(settingsPath) ?? {};\n    } catch (err) {\n      const detail = err instanceof Error ? err.message : String(err);\n      const message = detail.startsWith(\"Malformed settings file\")\n        ? detail.replace(\"Malformed settings file\", \"Refusing to overwrite malformed settings file\")\n        : detail;\n      throw new Error(message, { cause: err });\n    }\n  }\n\n  const merged = patchSettingsConfig(existing, config);\n\n  const dir = dirname(settingsPath);\n  ensureDirExists(dir);\n\n  atomicWritePrivateFile(settingsPath, JSON.stringify(merged, null, 2));\n}\n"]}

package/dist/config.js

@@ -1,6 +1,7 @@
-import { existsSync, mkdirSync, readFileSync } from "fs";
+import { existsSync } from "fs";
 import { homedir } from "os";
 import { dirname, join, resolve } from "path";
+import { ensureDirExists, isRecord, readJsonFileIfExists } from "./file-guards.js";
 import { atomicWritePrivateFile } from "./fs-atomic.js";
 export class MissingGlobalSettingsError extends Error {
     constructor(settingsPath) {
@@ -26,25 +27,15 @@ const ONBOARD_SETTINGS = {
             cpus: "2",
             memory: "4g",
         },
+        image: {
+            workspaceMount: "private",
+        },
     },
 };
 function loadSettingsFile(settingsPath) {
-    if (!existsSync(settingsPath)) {
-        return undefined;
-    }
-    const raw = readFileSync(settingsPath, "utf-8");
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch (err) {
-        const detail = err instanceof Error ? err.message : String(err);
-        throw new Error(`Malformed settings file at ${settingsPath}: ${detail}`);
-    }
-    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
-        throw new Error(`Malformed settings file at ${settingsPath}: expected a JSON object at the top level`);
-    }
-    return parsed;
+    return readJsonFileIfExists(settingsPath, (value) => isRecord(value), (detail) => detail === "unexpected JSON shape"
+        ? `Malformed settings file at ${settingsPath}: expected a JSON object at the top level`
+        : `Malformed settings file at ${settingsPath}: ${detail}`);
 }
 function getStateDir() {
     const raw = process.env.MAMA_STATE_DIR?.trim();
@@ -66,6 +57,9 @@ function normalizeSettingsConfig(config) {
         ...(config.sandbox?.boost?.memory !== undefined
             ? { sandboxBoostMemory: config.sandbox.boost.memory }
             : {}),
+        ...(config.sandbox?.image?.workspaceMount !== undefined
+            ? { sandboxImageWorkspaceMount: config.sandbox.image.workspaceMount }
+            : {}),
     };
 }
 function getSettingsPath() {
@@ -112,6 +106,7 @@ function toAgentConfig(fromFile) {
     const sandboxMemory = fromFile.sandboxMemory;
     const sandboxBoostCpus = fromFile.sandboxBoostCpus;
     const sandboxBoostMemory = fromFile.sandboxBoostMemory;
+    const sandboxImageWorkspaceMount = fromFile.sandboxImageWorkspaceMount;
     return {
         provider,
         model,
@@ -123,6 +118,7 @@ function toAgentConfig(fromFile) {
         sandboxMemory,
         sandboxBoostCpus,
         sandboxBoostMemory,
+        sandboxImageWorkspaceMount,
     };
 }
 function loadRawAgentConfig() {
@@ -138,7 +134,7 @@ export function loadAgentConfigForConversation(conversationDir) {
 }
 export function saveConversationModelConfig(conversationDir, config) {
     if (!existsSync(conversationDir)) {
-        mkdirSync(conversationDir, { recursive: true });
+        ensureDirExists(conversationDir);
     }
     const settingsPath = join(conversationDir, "settings.json");
     const existing = loadSettingsFile(settingsPath) ?? {};
@@ -148,6 +144,24 @@ export function saveConversationModelConfig(conversationDir, config) {
     };
     atomicWritePrivateFile(settingsPath, JSON.stringify(scopedConfig, null, 2));
 }
+export function saveConversationSandboxConfig(conversationDir, config) {
+    if (!existsSync(conversationDir)) {
+        ensureDirExists(conversationDir);
+    }
+    const settingsPath = join(conversationDir, "settings.json");
+    const existing = loadSettingsFile(settingsPath) ?? {};
+    const scopedConfig = {
+        ...existing,
+        sandbox: {
+            ...existing.sandbox,
+            image: {
+                ...existing.sandbox?.image,
+                workspaceMount: config.imageWorkspaceMount,
+            },
+        },
+    };
+    atomicWritePrivateFile(settingsPath, JSON.stringify(scopedConfig, null, 2));
+}
 export function resolveWorkspaceDirFromArgv(args = process.argv.slice(2)) {
     for (let i = 0; i < args.length; i++) {
         const arg = args[i];
@@ -194,7 +208,7 @@ export function createGlobalSettingsFile(stateDir) {
         throw new Error(`Global settings already exists at ${settingsPath}`);
     }
     if (!existsSync(stateDir)) {
-        mkdirSync(stateDir, { recursive: true });
+        ensureDirExists(stateDir);
     }
     atomicWritePrivateFile(settingsPath, JSON.stringify(ONBOARD_SETTINGS, null, 2));
     return settingsPath;
@@ -270,14 +284,12 @@ export function saveAgentConfig(config) {
             const message = detail.startsWith("Malformed settings file")
                 ? detail.replace("Malformed settings file", "Refusing to overwrite malformed settings file")
                 : detail;
-            throw new Error(message);
+            throw new Error(message, { cause: err });
         }
     }
     const merged = patchSettingsConfig(existing, config);
     const dir = dirname(settingsPath);
-    if (!existsSync(dir)) {
-        mkdirSync(dir, { recursive: true });
-    }
+    ensureDirExists(dir);
     atomicWritePrivateFile(settingsPath, JSON.stringify(merged, null, 2));
 }
 //# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD,YAA4B,YAAoB;QAC9C,KAAK,CAAC,mCAAmC,YAAY,EAAE,CAAC,CAAC;4BAD/B,YAAY;QAEtC,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAeD,MAAM,gBAAgB,GAAuB;IAC3C,GAAG,EAAE;QACH,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,mBAAmB;QAC1B,aAAa,EAAE,KAAK;KACrB;IACD,GAAG,EAAE;QACH,MAAM,EAAE,SAAS;QACjB,KAAK,EAAE,MAAM;KACd;IACD,OAAO,EAAE;QACP,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE;YACL,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,IAAI;SACb;KACF;CACF,CAAC;AASF,SAAS,gBAAgB,CAAC,YAAoB;IAC5C,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,8BAA8B,YAAY,KAAK,MAAM,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CACb,8BAA8B,YAAY,2CAA2C,CACtF,CAAC;IACJ,CAAC;IACD,OAAO,MAA4B,CAAC;AACtC,CAAC;AAED,SAAS,WAAW;IAClB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IAC/C,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,uBAAuB,CAAC,MAA0B;IACzD,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,SAAS;YAC3C,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE;YACjD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,KAAK,SAAS;YAC7C,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE;YACrD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,eAAe,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,qBAAqB;IAC5B,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,0BAA0B,CAAC,YAAY,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB,EAAE,IAAY;IAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,oCAAoC,IAAI,mDAAmD,CAC5F,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAgC;IAC5D,OAAO,aAAa,CAAC,KAAK,EAAE,mBAAmB,CAAkB,CAAC;AACpE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAA2C;IACnE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAA0C;IACjE,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,QAA8B;IACnD,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,oBAAoB,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IAC/D,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;IACzC,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC;IAC7C,MAAM,gBAAgB,GAAG,QAAQ,CAAC,gBAAgB,CAAC;IACnD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,kBAAkB,CAAC;IAEvD,OAAO;QACL,QAAQ;QACR,KAAK;QACL,aAAa;QACb,SAAS;QACT,QAAQ;QACR,SAAS;QACT,WAAW;QACX,aAAa;QACb,gBAAgB;QAChB,kBAAkB;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,uBAAuB,CAAC,qBAAqB,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,aAAa,CAAC,kBAAkB,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,eAAuB;IACpE,MAAM,YAAY,GAAG,kBAAkB,EAAE,CAAC;IAC1C,MAAM,kBAAkB,GAAG,uBAAuB,CAChD,gBAAgB,CAAC,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,IAAI,EAAE,CAC/D,CAAC;IACF,OAAO,aAAa,CAAC,EAAE,GAAG,YAAY,EAAE,GAAG,kBAAkB,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,eAAuB,EACvB,MAA6F;IAE7F,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACjC,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IACtD,MAAM,YAAY,GAAuB;QACvC,GAAG,QAAQ;QACX,GAAG,EAAE,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE;KACpC,CAAC;IACF,sBAAsB,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACtE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAEpB,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,YAAY,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;YACzE,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YAC/E,SAAS;QACX,CAAC;QAED,IACE,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC;YAC5B,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC;YAC7B,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,EAC9B,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACnC,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,QAAQ,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvB,OAAO,QAAQ,CAAC,SAAS,CAAC;IAC5B,CAAC;IAED,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,QAAgB;IACvD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACrD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qCAAqC,YAAY,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,sBAAsB,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAChF,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,eAAe,CAAC,MAA2C;IAClE,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,qBAAqB,CAAC,MAA0B;IACvD,OAAO;QACL,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxE,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAA4B,EAC5B,MAA4B;IAE5B,MAAM,OAAO,GAAuB;QAClC,GAAG,QAAQ;QACX,GAAG,EAAE;YACH,GAAG,QAAQ,CAAC,GAAG;YACf,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvF;QACD,GAAG,EAAE;YACH,GAAG,QAAQ,CAAC,GAAG;YACf,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE;QACD,MAAM,EAAE;YACN,GAAG,QAAQ,CAAC,MAAM;YAClB,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE;QACD,OAAO,EAAE;YACP,GAAG,QAAQ,CAAC,OAAO;YACnB,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS;gBAClF,CAAC,CAAC;oBACE,KAAK,EAAE;wBACL,GAAG,QAAQ,CAAC,OAAO,EAAE,KAAK;wBAC1B,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACnF,GAAG,CAAC,MAAM,CAAC,kBAAkB,KAAK,SAAS;4BACzC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,kBAAkB,EAAE;4BACvC,CAAC,CAAC,EAAE,CAAC;qBACR;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC;IACF,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAA4B;IAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,eAAe,CAAC,CAAC;IAE1D,IAAI,QAAQ,GAAuB,gBAAgB,CAAC;IACpD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,yBAAyB,CAAC;gBAC1D,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,EAAE,+CAA+C,CAAC;gBAC5F,CAAC,CAAC,MAAM,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAErD,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,sBAAsB,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC","sourcesContent":["import type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport { existsSync, mkdirSync, readFileSync } from \"fs\";\nimport { homedir } from \"os\";\nimport { dirname, join, resolve } from \"path\";\nimport { atomicWritePrivateFile } from \"./fs-atomic.js\";\n\nexport class MissingGlobalSettingsError extends Error {\n  constructor(public readonly settingsPath: string) {\n    super(`Missing global settings file at ${settingsPath}`);\n    this.name = \"MissingGlobalSettingsError\";\n  }\n}\n\nexport interface AgentConfig {\n  provider: string;\n  model: string;\n  thinkingLevel: ThinkingLevel;\n  logFormat: \"console\" | \"json\";\n  logLevel: \"trace\" | \"debug\" | \"info\" | \"warn\" | \"error\";\n  sentryDsn?: string;\n  sandboxCpus?: string;\n  sandboxMemory?: string;\n  sandboxBoostCpus?: string;\n  sandboxBoostMemory?: string;\n}\n\nconst ONBOARD_SETTINGS: SettingsFileConfig = {\n  llm: {\n    provider: \"anthropic\",\n    model: \"claude-sonnet-4-5\",\n    thinkingLevel: \"off\",\n  },\n  log: {\n    format: \"console\",\n    level: \"info\",\n  },\n  sandbox: {\n    cpus: \"0.5\",\n    memory: \"1g\",\n    boost: {\n      cpus: \"2\",\n      memory: \"4g\",\n    },\n  },\n};\n\ninterface SettingsFileConfig {\n  llm?: Partial<Pick<AgentConfig, \"provider\" | \"model\" | \"thinkingLevel\">>;\n  log?: { format?: AgentConfig[\"logFormat\"]; level?: AgentConfig[\"logLevel\"] };\n  sentry?: { dsn?: string };\n  sandbox?: { cpus?: string; memory?: string; boost?: { cpus?: string; memory?: string } };\n}\n\nfunction loadSettingsFile(settingsPath: string): SettingsFileConfig | undefined {\n  if (!existsSync(settingsPath)) {\n    return undefined;\n  }\n\n  const raw = readFileSync(settingsPath, \"utf-8\");\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch (err) {\n    const detail = err instanceof Error ? err.message : String(err);\n    throw new Error(`Malformed settings file at ${settingsPath}: ${detail}`);\n  }\n  if (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n    throw new Error(\n      `Malformed settings file at ${settingsPath}: expected a JSON object at the top level`,\n    );\n  }\n  return parsed as SettingsFileConfig;\n}\n\nfunction getStateDir(): string {\n  const raw = process.env.MAMA_STATE_DIR?.trim();\n  return raw ? resolve(raw) : join(homedir(), \".mama\");\n}\n\nfunction normalizeSettingsConfig(config: SettingsFileConfig): Partial<AgentConfig> {\n  return {\n    ...(config.llm?.provider !== undefined ? { provider: config.llm.provider } : {}),\n    ...(config.llm?.model !== undefined ? { model: config.llm.model } : {}),\n    ...(config.llm?.thinkingLevel !== undefined ? { thinkingLevel: config.llm.thinkingLevel } : {}),\n    ...(config.log?.format !== undefined ? { logFormat: config.log.format } : {}),\n    ...(config.log?.level !== undefined ? { logLevel: config.log.level } : {}),\n    ...(config.sentry?.dsn !== undefined ? { sentryDsn: config.sentry.dsn } : {}),\n    ...(config.sandbox?.cpus !== undefined ? { sandboxCpus: config.sandbox.cpus } : {}),\n    ...(config.sandbox?.memory !== undefined ? { sandboxMemory: config.sandbox.memory } : {}),\n    ...(config.sandbox?.boost?.cpus !== undefined\n      ? { sandboxBoostCpus: config.sandbox.boost.cpus }\n      : {}),\n    ...(config.sandbox?.boost?.memory !== undefined\n      ? { sandboxBoostMemory: config.sandbox.boost.memory }\n      : {}),\n  };\n}\n\nfunction getSettingsPath(): string {\n  return join(getStateDir(), \"settings.json\");\n}\n\nfunction requireGlobalSettings(): SettingsFileConfig {\n  const settingsPath = getSettingsPath();\n  const config = loadSettingsFile(settingsPath);\n  if (!config) {\n    throw new MissingGlobalSettingsError(settingsPath);\n  }\n  return config;\n}\n\nfunction requireString(value: string | undefined, path: string): string {\n  if (!value) {\n    throw new Error(\n      `Missing required global setting: ${path}. Run \\`mama --onboard\\` to create settings.json.`,\n    );\n  }\n  return value;\n}\n\nfunction requireThinkingLevel(value: ThinkingLevel | undefined): ThinkingLevel {\n  return requireString(value, \"llm.thinkingLevel\") as ThinkingLevel;\n}\n\nfunction requireLogFormat(value: AgentConfig[\"logFormat\"] | undefined): AgentConfig[\"logFormat\"] {\n  if (value !== \"console\" && value !== \"json\") {\n    throw new Error(\"Missing or invalid required global setting: log.format\");\n  }\n  return value;\n}\n\nfunction requireLogLevel(value: AgentConfig[\"logLevel\"] | undefined): AgentConfig[\"logLevel\"] {\n  const allowed = [\"trace\", \"debug\", \"info\", \"warn\", \"error\"];\n  if (!value || !allowed.includes(value)) {\n    throw new Error(\"Missing or invalid required global setting: log.level\");\n  }\n  return value;\n}\n\nfunction toAgentConfig(fromFile: Partial<AgentConfig>): AgentConfig {\n  const provider = requireString(fromFile.provider, \"llm.provider\");\n  const model = requireString(fromFile.model, \"llm.model\");\n  const thinkingLevel = requireThinkingLevel(fromFile.thinkingLevel);\n  const logFormat = requireLogFormat(fromFile.logFormat);\n  const logLevel = requireLogLevel(fromFile.logLevel);\n  const sentryDsn = fromFile.sentryDsn ?? process.env.SENTRY_DSN;\n  const sandboxCpus = fromFile.sandboxCpus;\n  const sandboxMemory = fromFile.sandboxMemory;\n  const sandboxBoostCpus = fromFile.sandboxBoostCpus;\n  const sandboxBoostMemory = fromFile.sandboxBoostMemory;\n\n  return {\n    provider,\n    model,\n    thinkingLevel,\n    logFormat,\n    logLevel,\n    sentryDsn,\n    sandboxCpus,\n    sandboxMemory,\n    sandboxBoostCpus,\n    sandboxBoostMemory,\n  };\n}\n\nfunction loadRawAgentConfig(): Partial<AgentConfig> {\n  return normalizeSettingsConfig(requireGlobalSettings());\n}\n\nexport function loadAgentConfig(): AgentConfig {\n  return toAgentConfig(loadRawAgentConfig());\n}\n\nexport function loadAgentConfigForConversation(conversationDir: string): AgentConfig {\n  const globalConfig = loadRawAgentConfig();\n  const conversationConfig = normalizeSettingsConfig(\n    loadSettingsFile(join(conversationDir, \"settings.json\")) ?? {},\n  );\n  return toAgentConfig({ ...globalConfig, ...conversationConfig });\n}\n\nexport function saveConversationModelConfig(\n  conversationDir: string,\n  config: Pick<AgentConfig, \"provider\" | \"model\"> & Partial<Pick<AgentConfig, \"thinkingLevel\">>,\n): void {\n  if (!existsSync(conversationDir)) {\n    mkdirSync(conversationDir, { recursive: true });\n  }\n  const settingsPath = join(conversationDir, \"settings.json\");\n  const existing = loadSettingsFile(settingsPath) ?? {};\n  const scopedConfig: SettingsFileConfig = {\n    ...existing,\n    llm: { ...existing.llm, ...config },\n  };\n  atomicWritePrivateFile(settingsPath, JSON.stringify(scopedConfig, null, 2));\n}\n\nexport function resolveWorkspaceDirFromArgv(args = process.argv.slice(2)): string | undefined {\n  for (let i = 0; i < args.length; i++) {\n    const arg = args[i];\n\n    if (arg === \"--sandbox\" || arg === \"--download\" || arg === \"--state-dir\") {\n      i += 1;\n      continue;\n    }\n\n    if (arg === \"--version\" || arg === \"-v\" || arg === \"-V\" || arg === \"--onboard\") {\n      continue;\n    }\n\n    if (\n      arg.startsWith(\"--sandbox=\") ||\n      arg.startsWith(\"--download=\") ||\n      arg.startsWith(\"--state-dir=\")\n    ) {\n      continue;\n    }\n\n    if (!arg.startsWith(\"-\")) {\n      return arg;\n    }\n  }\n\n  return undefined;\n}\n\nexport function resolveStateDirFromArgv(args = process.argv.slice(2)): string {\n  for (let i = 0; i < args.length; i++) {\n    const arg = args[i];\n    if (arg.startsWith(\"--state-dir=\")) {\n      return resolve(arg.slice(\"--state-dir=\".length));\n    }\n    if (arg === \"--state-dir\") {\n      return resolve(args[++i] || \"\");\n    }\n  }\n\n  return join(homedir(), \".mama\");\n}\n\nexport function resolveSentryDsn(): string | undefined {\n  const fromFile = normalizeSettingsConfig(loadSettingsFile(getSettingsPath()) ?? {});\n  if (fromFile.sentryDsn) {\n    return fromFile.sentryDsn;\n  }\n\n  return process.env.SENTRY_DSN;\n}\n\nexport function createGlobalSettingsFile(stateDir: string): string {\n  const settingsPath = join(stateDir, \"settings.json\");\n  if (existsSync(settingsPath)) {\n    throw new Error(`Global settings already exists at ${settingsPath}`);\n  }\n  if (!existsSync(stateDir)) {\n    mkdirSync(stateDir, { recursive: true });\n  }\n  atomicWritePrivateFile(settingsPath, JSON.stringify(ONBOARD_SETTINGS, null, 2));\n  return settingsPath;\n}\n\n/**\n * Externally-visible base URL of the link/OAuth server, e.g.\n * `https://mama.example.com` (no trailing slash). Read from `MAMA_LINK_URL`,\n * the same env var the bot uses to build credential onboarding links.\n */\nexport function resolveLinkBaseUrl(): string | undefined {\n  const raw = process.env.MAMA_LINK_URL?.trim();\n  if (!raw) return undefined;\n  return raw.replace(/\\/+$/, \"\");\n}\n\nfunction hasDefinedValue(values: Record<string, unknown> | undefined): boolean {\n  return values !== undefined && Object.values(values).some((value) => value !== undefined);\n}\n\nfunction compactSettingsConfig(config: SettingsFileConfig): SettingsFileConfig {\n  return {\n    ...(hasDefinedValue(config.llm) ? { llm: config.llm } : {}),\n    ...(hasDefinedValue(config.log) ? { log: config.log } : {}),\n    ...(hasDefinedValue(config.sentry) ? { sentry: config.sentry } : {}),\n    ...(hasDefinedValue(config.sandbox) ? { sandbox: config.sandbox } : {}),\n  };\n}\n\nfunction patchSettingsConfig(\n  existing: SettingsFileConfig,\n  config: Partial<AgentConfig>,\n): SettingsFileConfig {\n  const patched: SettingsFileConfig = {\n    ...existing,\n    llm: {\n      ...existing.llm,\n      ...(config.provider !== undefined ? { provider: config.provider } : {}),\n      ...(config.model !== undefined ? { model: config.model } : {}),\n      ...(config.thinkingLevel !== undefined ? { thinkingLevel: config.thinkingLevel } : {}),\n    },\n    log: {\n      ...existing.log,\n      ...(config.logFormat !== undefined ? { format: config.logFormat } : {}),\n      ...(config.logLevel !== undefined ? { level: config.logLevel } : {}),\n    },\n    sentry: {\n      ...existing.sentry,\n      ...(config.sentryDsn !== undefined ? { dsn: config.sentryDsn } : {}),\n    },\n    sandbox: {\n      ...existing.sandbox,\n      ...(config.sandboxCpus !== undefined ? { cpus: config.sandboxCpus } : {}),\n      ...(config.sandboxMemory !== undefined ? { memory: config.sandboxMemory } : {}),\n      ...(config.sandboxBoostCpus !== undefined || config.sandboxBoostMemory !== undefined\n        ? {\n            boost: {\n              ...existing.sandbox?.boost,\n              ...(config.sandboxBoostCpus !== undefined ? { cpus: config.sandboxBoostCpus } : {}),\n              ...(config.sandboxBoostMemory !== undefined\n                ? { memory: config.sandboxBoostMemory }\n                : {}),\n            },\n          }\n        : {}),\n    },\n  };\n  return compactSettingsConfig(patched);\n}\n\nexport function saveAgentConfig(config: Partial<AgentConfig>): void {\n  const settingsPath = join(getStateDir(), \"settings.json\");\n\n  let existing: SettingsFileConfig = ONBOARD_SETTINGS;\n  if (existsSync(settingsPath)) {\n    try {\n      existing = loadSettingsFile(settingsPath) ?? {};\n    } catch (err) {\n      const detail = err instanceof Error ? err.message : String(err);\n      const message = detail.startsWith(\"Malformed settings file\")\n        ? detail.replace(\"Malformed settings file\", \"Refusing to overwrite malformed settings file\")\n        : detail;\n      throw new Error(message);\n    }\n  }\n\n  const merged = patchSettingsConfig(existing, config);\n\n  const dir = dirname(settingsPath);\n  if (!existsSync(dir)) {\n    mkdirSync(dir, { recursive: true });\n  }\n\n  atomicWritePrivateFile(settingsPath, JSON.stringify(merged, null, 2));\n}\n"]}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD,YAA4B,YAAoB;QAC9C,KAAK,CAAC,mCAAmC,YAAY,EAAE,CAAC,CAAC;4BAD/B,YAAY;QAEtC,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAgBD,MAAM,gBAAgB,GAAuB;IAC3C,GAAG,EAAE;QACH,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,mBAAmB;QAC1B,aAAa,EAAE,KAAK;KACrB;IACD,GAAG,EAAE;QACH,MAAM,EAAE,SAAS;QACjB,KAAK,EAAE,MAAM;KACd;IACD,OAAO,EAAE;QACP,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE;YACL,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,IAAI;SACb;QACD,KAAK,EAAE;YACL,cAAc,EAAE,SAAS;SAC1B;KACF;CACF,CAAC;AAcF,SAAS,gBAAgB,CAAC,YAAoB;IAC5C,OAAO,oBAAoB,CACzB,YAAY,EACZ,CAAC,KAAK,EAA+B,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EACvD,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,KAAK,uBAAuB;QAChC,CAAC,CAAC,8BAA8B,YAAY,2CAA2C;QACvF,CAAC,CAAC,8BAA8B,YAAY,KAAK,MAAM,EAAE,CAC9D,CAAC;AACJ,CAAC;AAED,SAAS,WAAW;IAClB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IAC/C,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,uBAAuB,CAAC,MAA0B;IACzD,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,SAAS;YAC3C,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE;YACjD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,KAAK,SAAS;YAC7C,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE;YACrD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,cAAc,KAAK,SAAS;YACrD,CAAC,CAAC,EAAE,0BAA0B,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE;YACrE,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,eAAe,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,qBAAqB;IAC5B,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,0BAA0B,CAAC,YAAY,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB,EAAE,IAAY;IAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,oCAAoC,IAAI,mDAAmD,CAC5F,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAgC;IAC5D,OAAO,aAAa,CAAC,KAAK,EAAE,mBAAmB,CAAkB,CAAC;AACpE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAA2C;IACnE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAA0C;IACjE,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,QAA8B;IACnD,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,oBAAoB,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IAC/D,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;IACzC,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC;IAC7C,MAAM,gBAAgB,GAAG,QAAQ,CAAC,gBAAgB,CAAC;IACnD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,kBAAkB,CAAC;IACvD,MAAM,0BAA0B,GAAG,QAAQ,CAAC,0BAA0B,CAAC;IAEvE,OAAO;QACL,QAAQ;QACR,KAAK;QACL,aAAa;QACb,SAAS;QACT,QAAQ;QACR,SAAS;QACT,WAAW;QACX,aAAa;QACb,gBAAgB;QAChB,kBAAkB;QAClB,0BAA0B;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,uBAAuB,CAAC,qBAAqB,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,aAAa,CAAC,kBAAkB,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,eAAuB;IACpE,MAAM,YAAY,GAAG,kBAAkB,EAAE,CAAC;IAC1C,MAAM,kBAAkB,GAAG,uBAAuB,CAChD,gBAAgB,CAAC,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,IAAI,EAAE,CAC/D,CAAC;IACF,OAAO,aAAa,CAAC,EAAE,GAAG,YAAY,EAAE,GAAG,kBAAkB,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,eAAuB,EACvB,MAA6F;IAE7F,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACjC,eAAe,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IACtD,MAAM,YAAY,GAAuB;QACvC,GAAG,QAAQ;QACX,GAAG,EAAE,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE;KACpC,CAAC;IACF,sBAAsB,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,eAAuB,EACvB,MAA0E;IAE1E,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACjC,eAAe,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IACtD,MAAM,YAAY,GAAuB;QACvC,GAAG,QAAQ;QACX,OAAO,EAAE;YACP,GAAG,QAAQ,CAAC,OAAO;YACnB,KAAK,EAAE;gBACL,GAAG,QAAQ,CAAC,OAAO,EAAE,KAAK;gBAC1B,cAAc,EAAE,MAAM,CAAC,mBAAmB;aAC3C;SACF;KACF,CAAC;IACF,sBAAsB,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACtE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAEpB,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,YAAY,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;YACzE,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YAC/E,SAAS;QACX,CAAC;QAED,IACE,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC;YAC5B,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC;YAC7B,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,EAC9B,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACnC,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,QAAQ,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvB,OAAO,QAAQ,CAAC,SAAS,CAAC;IAC5B,CAAC;IAED,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,QAAgB;IACvD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACrD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qCAAqC,YAAY,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IACD,sBAAsB,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAChF,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,eAAe,CAAC,MAA2C;IAClE,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,qBAAqB,CAAC,MAA0B;IACvD,OAAO;QACL,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxE,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAA4B,EAC5B,MAA4B;IAE5B,MAAM,OAAO,GAAuB;QAClC,GAAG,QAAQ;QACX,GAAG,EAAE;YACH,GAAG,QAAQ,CAAC,GAAG;YACf,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvF;QACD,GAAG,EAAE;YACH,GAAG,QAAQ,CAAC,GAAG;YACf,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE;QACD,MAAM,EAAE;YACN,GAAG,QAAQ,CAAC,MAAM;YAClB,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE;QACD,OAAO,EAAE;YACP,GAAG,QAAQ,CAAC,OAAO;YACnB,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS;gBAClF,CAAC,CAAC;oBACE,KAAK,EAAE;wBACL,GAAG,QAAQ,CAAC,OAAO,EAAE,KAAK;wBAC1B,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACnF,GAAG,CAAC,MAAM,CAAC,kBAAkB,KAAK,SAAS;4BACzC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,kBAAkB,EAAE;4BACvC,CAAC,CAAC,EAAE,CAAC;qBACR;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC;IACF,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAA4B;IAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,eAAe,CAAC,CAAC;IAE1D,IAAI,QAAQ,GAAuB,gBAAgB,CAAC;IACpD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,yBAAyB,CAAC;gBAC1D,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,EAAE,+CAA+C,CAAC;gBAC5F,CAAC,CAAC,MAAM,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAErD,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAClC,eAAe,CAAC,GAAG,CAAC,CAAC;IAErB,sBAAsB,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC","sourcesContent":["import type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport { existsSync } from \"fs\";\nimport { homedir } from \"os\";\nimport { dirname, join, resolve } from \"path\";\nimport { ensureDirExists, isRecord, readJsonFileIfExists } from \"./file-guards.js\";\nimport { atomicWritePrivateFile } from \"./fs-atomic.js\";\n\nexport class MissingGlobalSettingsError extends Error {\n  constructor(public readonly settingsPath: string) {\n    super(`Missing global settings file at ${settingsPath}`);\n    this.name = \"MissingGlobalSettingsError\";\n  }\n}\n\nexport interface AgentConfig {\n  provider: string;\n  model: string;\n  thinkingLevel: ThinkingLevel;\n  logFormat: \"console\" | \"json\";\n  logLevel: \"trace\" | \"debug\" | \"info\" | \"warn\" | \"error\";\n  sentryDsn?: string;\n  sandboxCpus?: string;\n  sandboxMemory?: string;\n  sandboxBoostCpus?: string;\n  sandboxBoostMemory?: string;\n  sandboxImageWorkspaceMount?: \"private\" | \"full\";\n}\n\nconst ONBOARD_SETTINGS: SettingsFileConfig = {\n  llm: {\n    provider: \"anthropic\",\n    model: \"claude-sonnet-4-5\",\n    thinkingLevel: \"off\",\n  },\n  log: {\n    format: \"console\",\n    level: \"info\",\n  },\n  sandbox: {\n    cpus: \"0.5\",\n    memory: \"1g\",\n    boost: {\n      cpus: \"2\",\n      memory: \"4g\",\n    },\n    image: {\n      workspaceMount: \"private\",\n    },\n  },\n};\n\ninterface SettingsFileConfig {\n  llm?: Partial<Pick<AgentConfig, \"provider\" | \"model\" | \"thinkingLevel\">>;\n  log?: { format?: AgentConfig[\"logFormat\"]; level?: AgentConfig[\"logLevel\"] };\n  sentry?: { dsn?: string };\n  sandbox?: {\n    cpus?: string;\n    memory?: string;\n    boost?: { cpus?: string; memory?: string };\n    image?: { workspaceMount?: AgentConfig[\"sandboxImageWorkspaceMount\"] };\n  };\n}\n\nfunction loadSettingsFile(settingsPath: string): SettingsFileConfig | undefined {\n  return readJsonFileIfExists(\n    settingsPath,\n    (value): value is SettingsFileConfig => isRecord(value),\n    (detail) =>\n      detail === \"unexpected JSON shape\"\n        ? `Malformed settings file at ${settingsPath}: expected a JSON object at the top level`\n        : `Malformed settings file at ${settingsPath}: ${detail}`,\n  );\n}\n\nfunction getStateDir(): string {\n  const raw = process.env.MAMA_STATE_DIR?.trim();\n  return raw ? resolve(raw) : join(homedir(), \".mama\");\n}\n\nfunction normalizeSettingsConfig(config: SettingsFileConfig): Partial<AgentConfig> {\n  return {\n    ...(config.llm?.provider !== undefined ? { provider: config.llm.provider } : {}),\n    ...(config.llm?.model !== undefined ? { model: config.llm.model } : {}),\n    ...(config.llm?.thinkingLevel !== undefined ? { thinkingLevel: config.llm.thinkingLevel } : {}),\n    ...(config.log?.format !== undefined ? { logFormat: config.log.format } : {}),\n    ...(config.log?.level !== undefined ? { logLevel: config.log.level } : {}),\n    ...(config.sentry?.dsn !== undefined ? { sentryDsn: config.sentry.dsn } : {}),\n    ...(config.sandbox?.cpus !== undefined ? { sandboxCpus: config.sandbox.cpus } : {}),\n    ...(config.sandbox?.memory !== undefined ? { sandboxMemory: config.sandbox.memory } : {}),\n    ...(config.sandbox?.boost?.cpus !== undefined\n      ? { sandboxBoostCpus: config.sandbox.boost.cpus }\n      : {}),\n    ...(config.sandbox?.boost?.memory !== undefined\n      ? { sandboxBoostMemory: config.sandbox.boost.memory }\n      : {}),\n    ...(config.sandbox?.image?.workspaceMount !== undefined\n      ? { sandboxImageWorkspaceMount: config.sandbox.image.workspaceMount }\n      : {}),\n  };\n}\n\nfunction getSettingsPath(): string {\n  return join(getStateDir(), \"settings.json\");\n}\n\nfunction requireGlobalSettings(): SettingsFileConfig {\n  const settingsPath = getSettingsPath();\n  const config = loadSettingsFile(settingsPath);\n  if (!config) {\n    throw new MissingGlobalSettingsError(settingsPath);\n  }\n  return config;\n}\n\nfunction requireString(value: string | undefined, path: string): string {\n  if (!value) {\n    throw new Error(\n      `Missing required global setting: ${path}. Run \\`mama --onboard\\` to create settings.json.`,\n    );\n  }\n  return value;\n}\n\nfunction requireThinkingLevel(value: ThinkingLevel | undefined): ThinkingLevel {\n  return requireString(value, \"llm.thinkingLevel\") as ThinkingLevel;\n}\n\nfunction requireLogFormat(value: AgentConfig[\"logFormat\"] | undefined): AgentConfig[\"logFormat\"] {\n  if (value !== \"console\" && value !== \"json\") {\n    throw new Error(\"Missing or invalid required global setting: log.format\");\n  }\n  return value;\n}\n\nfunction requireLogLevel(value: AgentConfig[\"logLevel\"] | undefined): AgentConfig[\"logLevel\"] {\n  const allowed = [\"trace\", \"debug\", \"info\", \"warn\", \"error\"];\n  if (!value || !allowed.includes(value)) {\n    throw new Error(\"Missing or invalid required global setting: log.level\");\n  }\n  return value;\n}\n\nfunction toAgentConfig(fromFile: Partial<AgentConfig>): AgentConfig {\n  const provider = requireString(fromFile.provider, \"llm.provider\");\n  const model = requireString(fromFile.model, \"llm.model\");\n  const thinkingLevel = requireThinkingLevel(fromFile.thinkingLevel);\n  const logFormat = requireLogFormat(fromFile.logFormat);\n  const logLevel = requireLogLevel(fromFile.logLevel);\n  const sentryDsn = fromFile.sentryDsn ?? process.env.SENTRY_DSN;\n  const sandboxCpus = fromFile.sandboxCpus;\n  const sandboxMemory = fromFile.sandboxMemory;\n  const sandboxBoostCpus = fromFile.sandboxBoostCpus;\n  const sandboxBoostMemory = fromFile.sandboxBoostMemory;\n  const sandboxImageWorkspaceMount = fromFile.sandboxImageWorkspaceMount;\n\n  return {\n    provider,\n    model,\n    thinkingLevel,\n    logFormat,\n    logLevel,\n    sentryDsn,\n    sandboxCpus,\n    sandboxMemory,\n    sandboxBoostCpus,\n    sandboxBoostMemory,\n    sandboxImageWorkspaceMount,\n  };\n}\n\nfunction loadRawAgentConfig(): Partial<AgentConfig> {\n  return normalizeSettingsConfig(requireGlobalSettings());\n}\n\nexport function loadAgentConfig(): AgentConfig {\n  return toAgentConfig(loadRawAgentConfig());\n}\n\nexport function loadAgentConfigForConversation(conversationDir: string): AgentConfig {\n  const globalConfig = loadRawAgentConfig();\n  const conversationConfig = normalizeSettingsConfig(\n    loadSettingsFile(join(conversationDir, \"settings.json\")) ?? {},\n  );\n  return toAgentConfig({ ...globalConfig, ...conversationConfig });\n}\n\nexport function saveConversationModelConfig(\n  conversationDir: string,\n  config: Pick<AgentConfig, \"provider\" | \"model\"> & Partial<Pick<AgentConfig, \"thinkingLevel\">>,\n): void {\n  if (!existsSync(conversationDir)) {\n    ensureDirExists(conversationDir);\n  }\n  const settingsPath = join(conversationDir, \"settings.json\");\n  const existing = loadSettingsFile(settingsPath) ?? {};\n  const scopedConfig: SettingsFileConfig = {\n    ...existing,\n    llm: { ...existing.llm, ...config },\n  };\n  atomicWritePrivateFile(settingsPath, JSON.stringify(scopedConfig, null, 2));\n}\n\nexport function saveConversationSandboxConfig(\n  conversationDir: string,\n  config: { imageWorkspaceMount: AgentConfig[\"sandboxImageWorkspaceMount\"] },\n): void {\n  if (!existsSync(conversationDir)) {\n    ensureDirExists(conversationDir);\n  }\n  const settingsPath = join(conversationDir, \"settings.json\");\n  const existing = loadSettingsFile(settingsPath) ?? {};\n  const scopedConfig: SettingsFileConfig = {\n    ...existing,\n    sandbox: {\n      ...existing.sandbox,\n      image: {\n        ...existing.sandbox?.image,\n        workspaceMount: config.imageWorkspaceMount,\n      },\n    },\n  };\n  atomicWritePrivateFile(settingsPath, JSON.stringify(scopedConfig, null, 2));\n}\n\nexport function resolveWorkspaceDirFromArgv(args = process.argv.slice(2)): string | undefined {\n  for (let i = 0; i < args.length; i++) {\n    const arg = args[i];\n\n    if (arg === \"--sandbox\" || arg === \"--download\" || arg === \"--state-dir\") {\n      i += 1;\n      continue;\n    }\n\n    if (arg === \"--version\" || arg === \"-v\" || arg === \"-V\" || arg === \"--onboard\") {\n      continue;\n    }\n\n    if (\n      arg.startsWith(\"--sandbox=\") ||\n      arg.startsWith(\"--download=\") ||\n      arg.startsWith(\"--state-dir=\")\n    ) {\n      continue;\n    }\n\n    if (!arg.startsWith(\"-\")) {\n      return arg;\n    }\n  }\n\n  return undefined;\n}\n\nexport function resolveStateDirFromArgv(args = process.argv.slice(2)): string {\n  for (let i = 0; i < args.length; i++) {\n    const arg = args[i];\n    if (arg.startsWith(\"--state-dir=\")) {\n      return resolve(arg.slice(\"--state-dir=\".length));\n    }\n    if (arg === \"--state-dir\") {\n      return resolve(args[++i] || \"\");\n    }\n  }\n\n  return join(homedir(), \".mama\");\n}\n\nexport function resolveSentryDsn(): string | undefined {\n  const fromFile = normalizeSettingsConfig(loadSettingsFile(getSettingsPath()) ?? {});\n  if (fromFile.sentryDsn) {\n    return fromFile.sentryDsn;\n  }\n\n  return process.env.SENTRY_DSN;\n}\n\nexport function createGlobalSettingsFile(stateDir: string): string {\n  const settingsPath = join(stateDir, \"settings.json\");\n  if (existsSync(settingsPath)) {\n    throw new Error(`Global settings already exists at ${settingsPath}`);\n  }\n  if (!existsSync(stateDir)) {\n    ensureDirExists(stateDir);\n  }\n  atomicWritePrivateFile(settingsPath, JSON.stringify(ONBOARD_SETTINGS, null, 2));\n  return settingsPath;\n}\n\n/**\n * Externally-visible base URL of the link/OAuth server, e.g.\n * `https://mama.example.com` (no trailing slash). Read from `MAMA_LINK_URL`,\n * the same env var the bot uses to build credential onboarding links.\n */\nexport function resolveLinkBaseUrl(): string | undefined {\n  const raw = process.env.MAMA_LINK_URL?.trim();\n  if (!raw) return undefined;\n  return raw.replace(/\\/+$/, \"\");\n}\n\nfunction hasDefinedValue(values: Record<string, unknown> | undefined): boolean {\n  return values !== undefined && Object.values(values).some((value) => value !== undefined);\n}\n\nfunction compactSettingsConfig(config: SettingsFileConfig): SettingsFileConfig {\n  return {\n    ...(hasDefinedValue(config.llm) ? { llm: config.llm } : {}),\n    ...(hasDefinedValue(config.log) ? { log: config.log } : {}),\n    ...(hasDefinedValue(config.sentry) ? { sentry: config.sentry } : {}),\n    ...(hasDefinedValue(config.sandbox) ? { sandbox: config.sandbox } : {}),\n  };\n}\n\nfunction patchSettingsConfig(\n  existing: SettingsFileConfig,\n  config: Partial<AgentConfig>,\n): SettingsFileConfig {\n  const patched: SettingsFileConfig = {\n    ...existing,\n    llm: {\n      ...existing.llm,\n      ...(config.provider !== undefined ? { provider: config.provider } : {}),\n      ...(config.model !== undefined ? { model: config.model } : {}),\n      ...(config.thinkingLevel !== undefined ? { thinkingLevel: config.thinkingLevel } : {}),\n    },\n    log: {\n      ...existing.log,\n      ...(config.logFormat !== undefined ? { format: config.logFormat } : {}),\n      ...(config.logLevel !== undefined ? { level: config.logLevel } : {}),\n    },\n    sentry: {\n      ...existing.sentry,\n      ...(config.sentryDsn !== undefined ? { dsn: config.sentryDsn } : {}),\n    },\n    sandbox: {\n      ...existing.sandbox,\n      ...(config.sandboxCpus !== undefined ? { cpus: config.sandboxCpus } : {}),\n      ...(config.sandboxMemory !== undefined ? { memory: config.sandboxMemory } : {}),\n      ...(config.sandboxBoostCpus !== undefined || config.sandboxBoostMemory !== undefined\n        ? {\n            boost: {\n              ...existing.sandbox?.boost,\n              ...(config.sandboxBoostCpus !== undefined ? { cpus: config.sandboxBoostCpus } : {}),\n              ...(config.sandboxBoostMemory !== undefined\n                ? { memory: config.sandboxBoostMemory }\n                : {}),\n            },\n          }\n        : {}),\n    },\n  };\n  return compactSettingsConfig(patched);\n}\n\nexport function saveAgentConfig(config: Partial<AgentConfig>): void {\n  const settingsPath = join(getStateDir(), \"settings.json\");\n\n  let existing: SettingsFileConfig = ONBOARD_SETTINGS;\n  if (existsSync(settingsPath)) {\n    try {\n      existing = loadSettingsFile(settingsPath) ?? {};\n    } catch (err) {\n      const detail = err instanceof Error ? err.message : String(err);\n      const message = detail.startsWith(\"Malformed settings file\")\n        ? detail.replace(\"Malformed settings file\", \"Refusing to overwrite malformed settings file\")\n        : detail;\n      throw new Error(message, { cause: err });\n    }\n  }\n\n  const merged = patchSettingsConfig(existing, config);\n\n  const dir = dirname(settingsPath);\n  ensureDirExists(dir);\n\n  atomicWritePrivateFile(settingsPath, JSON.stringify(merged, null, 2));\n}\n"]}