@geminixiang/mikan 0.2.0

package/dist/tools/truncate.js

@@ -0,0 +1,184 @@
+/**
+ * Shared truncation utilities for tool outputs.
+ *
+ * Truncation is based on two independent limits - whichever is hit first wins:
+ * - Line limit (default: 2000 lines)
+ * - Byte limit (default: 50KB)
+ *
+ * Never returns partial lines (except bash tail truncation edge case).
+ */
+export const DEFAULT_MAX_LINES = 2000;
+export const DEFAULT_MAX_BYTES = 50 * 1024; // 50KB
+/**
+ * Format bytes as human-readable size.
+ */
+export function formatSize(bytes) {
+    if (bytes < 1024) {
+        return `${bytes}B`;
+    }
+    else if (bytes < 1024 * 1024) {
+        return `${(bytes / 1024).toFixed(1)}KB`;
+    }
+    else {
+        return `${(bytes / (1024 * 1024)).toFixed(1)}MB`;
+    }
+}
+/**
+ * Truncate content from the head (keep first N lines/bytes).
+ * Suitable for file reads where you want to see the beginning.
+ *
+ * Never returns partial lines. If first line exceeds byte limit,
+ * returns empty content with firstLineExceedsLimit=true.
+ */
+export function truncateHead(content, options = {}) {
+    const maxLines = options.maxLines ?? DEFAULT_MAX_LINES;
+    const maxBytes = options.maxBytes ?? DEFAULT_MAX_BYTES;
+    const totalBytes = Buffer.byteLength(content, "utf-8");
+    const lines = content.split("\n");
+    const totalLines = lines.length;
+    // Check if no truncation needed
+    if (totalLines <= maxLines && totalBytes <= maxBytes) {
+        return {
+            content,
+            truncated: false,
+            truncatedBy: null,
+            totalLines,
+            totalBytes,
+            outputLines: totalLines,
+            outputBytes: totalBytes,
+            lastLinePartial: false,
+            firstLineExceedsLimit: false,
+        };
+    }
+    // Check if first line alone exceeds byte limit
+    const firstLineBytes = Buffer.byteLength(lines[0], "utf-8");
+    if (firstLineBytes > maxBytes) {
+        return {
+            content: "",
+            truncated: true,
+            truncatedBy: "bytes",
+            totalLines,
+            totalBytes,
+            outputLines: 0,
+            outputBytes: 0,
+            lastLinePartial: false,
+            firstLineExceedsLimit: true,
+        };
+    }
+    // Collect complete lines that fit
+    const outputLinesArr = [];
+    let outputBytesCount = 0;
+    let truncatedBy = "lines";
+    for (let i = 0; i < lines.length && i < maxLines; i++) {
+        const line = lines[i];
+        const lineBytes = Buffer.byteLength(line, "utf-8") + (i > 0 ? 1 : 0); // +1 for newline
+        if (outputBytesCount + lineBytes > maxBytes) {
+            truncatedBy = "bytes";
+            break;
+        }
+        outputLinesArr.push(line);
+        outputBytesCount += lineBytes;
+    }
+    // If we exited due to line limit
+    if (outputLinesArr.length >= maxLines && outputBytesCount <= maxBytes) {
+        truncatedBy = "lines";
+    }
+    const outputContent = outputLinesArr.join("\n");
+    const finalOutputBytes = Buffer.byteLength(outputContent, "utf-8");
+    return {
+        content: outputContent,
+        truncated: true,
+        truncatedBy,
+        totalLines,
+        totalBytes,
+        outputLines: outputLinesArr.length,
+        outputBytes: finalOutputBytes,
+        lastLinePartial: false,
+        firstLineExceedsLimit: false,
+    };
+}
+/**
+ * Truncate content from the tail (keep last N lines/bytes).
+ * Suitable for bash output where you want to see the end (errors, final results).
+ *
+ * May return partial first line if the last line of original content exceeds byte limit.
+ */
+export function truncateTail(content, options = {}) {
+    const maxLines = options.maxLines ?? DEFAULT_MAX_LINES;
+    const maxBytes = options.maxBytes ?? DEFAULT_MAX_BYTES;
+    const totalBytes = Buffer.byteLength(content, "utf-8");
+    const lines = content.split("\n");
+    const totalLines = lines.length;
+    // Check if no truncation needed
+    if (totalLines <= maxLines && totalBytes <= maxBytes) {
+        return {
+            content,
+            truncated: false,
+            truncatedBy: null,
+            totalLines,
+            totalBytes,
+            outputLines: totalLines,
+            outputBytes: totalBytes,
+            lastLinePartial: false,
+            firstLineExceedsLimit: false,
+        };
+    }
+    // Work backwards from the end
+    const outputLinesArr = [];
+    let outputBytesCount = 0;
+    let truncatedBy = "lines";
+    let lastLinePartial = false;
+    for (let i = lines.length - 1; i >= 0 && outputLinesArr.length < maxLines; i--) {
+        const line = lines[i];
+        const lineBytes = Buffer.byteLength(line, "utf-8") + (outputLinesArr.length > 0 ? 1 : 0); // +1 for newline
+        if (outputBytesCount + lineBytes > maxBytes) {
+            truncatedBy = "bytes";
+            // Edge case: if we haven't added ANY lines yet and this line exceeds maxBytes,
+            // take the end of the line (partial)
+            if (outputLinesArr.length === 0) {
+                const truncatedLine = truncateStringToBytesFromEnd(line, maxBytes);
+                outputLinesArr.unshift(truncatedLine);
+                outputBytesCount = Buffer.byteLength(truncatedLine, "utf-8");
+                lastLinePartial = true;
+            }
+            break;
+        }
+        outputLinesArr.unshift(line);
+        outputBytesCount += lineBytes;
+    }
+    // If we exited due to line limit
+    if (outputLinesArr.length >= maxLines && outputBytesCount <= maxBytes) {
+        truncatedBy = "lines";
+    }
+    const outputContent = outputLinesArr.join("\n");
+    const finalOutputBytes = Buffer.byteLength(outputContent, "utf-8");
+    return {
+        content: outputContent,
+        truncated: true,
+        truncatedBy,
+        totalLines,
+        totalBytes,
+        outputLines: outputLinesArr.length,
+        outputBytes: finalOutputBytes,
+        lastLinePartial,
+        firstLineExceedsLimit: false,
+    };
+}
+/**
+ * Truncate a string to fit within a byte limit (from the end).
+ * Handles multi-byte UTF-8 characters correctly.
+ */
+function truncateStringToBytesFromEnd(str, maxBytes) {
+    const buf = Buffer.from(str, "utf-8");
+    if (buf.length <= maxBytes) {
+        return str;
+    }
+    // Start from the end, skip maxBytes back
+    let start = buf.length - maxBytes;
+    // Find a valid UTF-8 boundary (start of a character)
+    while (start < buf.length && (buf[start] & 0xc0) === 0x80) {
+        start++;
+    }
+    return buf.slice(start).toString("utf-8");
+}
+//# sourceMappingURL=truncate.js.map

package/dist/tools/truncate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"truncate.js","sourceRoot":"","sources":["../../src/tools/truncate.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AACtC,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO;AA8BnD;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,IAAI,KAAK,GAAG,IAAI,EAAE,CAAC;QACjB,OAAO,GAAG,KAAK,GAAG,CAAC;IACrB,CAAC;SAAM,IAAI,KAAK,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;QAC/B,OAAO,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACnD,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,OAAO,GAAsB,EAAE;IAC3E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IAEvD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC;IAEhC,gCAAgC;IAChC,IAAI,UAAU,IAAI,QAAQ,IAAI,UAAU,IAAI,QAAQ,EAAE,CAAC;QACrD,OAAO;YACL,OAAO;YACP,SAAS,EAAE,KAAK;YAChB,WAAW,EAAE,IAAI;YACjB,UAAU;YACV,UAAU;YACV,WAAW,EAAE,UAAU;YACvB,WAAW,EAAE,UAAU;YACvB,eAAe,EAAE,KAAK;YACtB,qBAAqB,EAAE,KAAK;SAC7B,CAAC;IACJ,CAAC;IAED,+CAA+C;IAC/C,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5D,IAAI,cAAc,GAAG,QAAQ,EAAE,CAAC;QAC9B,OAAO;YACL,OAAO,EAAE,EAAE;YACX,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,OAAO;YACpB,UAAU;YACV,UAAU;YACV,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,CAAC;YACd,eAAe,EAAE,KAAK;YACtB,qBAAqB,EAAE,IAAI;SAC5B,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,WAAW,GAAsB,OAAO,CAAC;IAE7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB;QAEvF,IAAI,gBAAgB,GAAG,SAAS,GAAG,QAAQ,EAAE,CAAC;YAC5C,WAAW,GAAG,OAAO,CAAC;YACtB,MAAM;QACR,CAAC;QAED,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,gBAAgB,IAAI,SAAS,CAAC;IAChC,CAAC;IAED,iCAAiC;IACjC,IAAI,cAAc,CAAC,MAAM,IAAI,QAAQ,IAAI,gBAAgB,IAAI,QAAQ,EAAE,CAAC;QACtE,WAAW,GAAG,OAAO,CAAC;IACxB,CAAC;IAED,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,gBAAgB,GAAG,MAAM,CAAC,UAAU,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAEnE,OAAO;QACL,OAAO,EAAE,aAAa;QACtB,SAAS,EAAE,IAAI;QACf,WAAW;QACX,UAAU;QACV,UAAU;QACV,WAAW,EAAE,cAAc,CAAC,MAAM;QAClC,WAAW,EAAE,gBAAgB;QAC7B,eAAe,EAAE,KAAK;QACtB,qBAAqB,EAAE,KAAK;KAC7B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,OAAO,GAAsB,EAAE;IAC3E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IAEvD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC;IAEhC,gCAAgC;IAChC,IAAI,UAAU,IAAI,QAAQ,IAAI,UAAU,IAAI,QAAQ,EAAE,CAAC;QACrD,OAAO;YACL,OAAO;YACP,SAAS,EAAE,KAAK;YAChB,WAAW,EAAE,IAAI;YACjB,UAAU;YACV,UAAU;YACV,WAAW,EAAE,UAAU;YACvB,WAAW,EAAE,UAAU;YACvB,eAAe,EAAE,KAAK;YACtB,qBAAqB,EAAE,KAAK;SAC7B,CAAC;IACJ,CAAC;IAED,8BAA8B;IAC9B,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,WAAW,GAAsB,OAAO,CAAC;IAC7C,IAAI,eAAe,GAAG,KAAK,CAAC;IAE5B,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/E,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB;QAE3G,IAAI,gBAAgB,GAAG,SAAS,GAAG,QAAQ,EAAE,CAAC;YAC5C,WAAW,GAAG,OAAO,CAAC;YACtB,+EAA+E;YAC/E,qCAAqC;YACrC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChC,MAAM,aAAa,GAAG,4BAA4B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBACnE,cAAc,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;gBACtC,gBAAgB,GAAG,MAAM,CAAC,UAAU,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;gBAC7D,eAAe,GAAG,IAAI,CAAC;YACzB,CAAC;YACD,MAAM;QACR,CAAC;QAED,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,gBAAgB,IAAI,SAAS,CAAC;IAChC,CAAC;IAED,iCAAiC;IACjC,IAAI,cAAc,CAAC,MAAM,IAAI,QAAQ,IAAI,gBAAgB,IAAI,QAAQ,EAAE,CAAC;QACtE,WAAW,GAAG,OAAO,CAAC;IACxB,CAAC;IAED,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,gBAAgB,GAAG,MAAM,CAAC,UAAU,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAEnE,OAAO;QACL,OAAO,EAAE,aAAa;QACtB,SAAS,EAAE,IAAI;QACf,WAAW;QACX,UAAU;QACV,UAAU;QACV,WAAW,EAAE,cAAc,CAAC,MAAM;QAClC,WAAW,EAAE,gBAAgB;QAC7B,eAAe;QACf,qBAAqB,EAAE,KAAK;KAC7B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,4BAA4B,CAAC,GAAW,EAAE,QAAgB;IACjE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACtC,IAAI,GAAG,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC3B,OAAO,GAAG,CAAC;IACb,CAAC;IAED,yCAAyC;IACzC,IAAI,KAAK,GAAG,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC;IAElC,qDAAqD;IACrD,OAAO,KAAK,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1D,KAAK,EAAE,CAAC;IACV,CAAC;IAED,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC5C,CAAC","sourcesContent":["/**\n * Shared truncation utilities for tool outputs.\n *\n * Truncation is based on two independent limits - whichever is hit first wins:\n * - Line limit (default: 2000 lines)\n * - Byte limit (default: 50KB)\n *\n * Never returns partial lines (except bash tail truncation edge case).\n */\n\nexport const DEFAULT_MAX_LINES = 2000;\nexport const DEFAULT_MAX_BYTES = 50 * 1024; // 50KB\n\nexport interface TruncationResult {\n  /** The truncated content */\n  content: string;\n  /** Whether truncation occurred */\n  truncated: boolean;\n  /** Which limit was hit: \"lines\", \"bytes\", or null if not truncated */\n  truncatedBy: \"lines\" | \"bytes\" | null;\n  /** Total number of lines in the original content */\n  totalLines: number;\n  /** Total number of bytes in the original content */\n  totalBytes: number;\n  /** Number of complete lines in the truncated output */\n  outputLines: number;\n  /** Number of bytes in the truncated output */\n  outputBytes: number;\n  /** Whether the last line was partially truncated (only for tail truncation edge case) */\n  lastLinePartial: boolean;\n  /** Whether the first line exceeded the byte limit (for head truncation) */\n  firstLineExceedsLimit: boolean;\n}\n\nexport interface TruncationOptions {\n  /** Maximum number of lines (default: 2000) */\n  maxLines?: number;\n  /** Maximum number of bytes (default: 50KB) */\n  maxBytes?: number;\n}\n\n/**\n * Format bytes as human-readable size.\n */\nexport function formatSize(bytes: number): string {\n  if (bytes < 1024) {\n    return `${bytes}B`;\n  } else if (bytes < 1024 * 1024) {\n    return `${(bytes / 1024).toFixed(1)}KB`;\n  } else {\n    return `${(bytes / (1024 * 1024)).toFixed(1)}MB`;\n  }\n}\n\n/**\n * Truncate content from the head (keep first N lines/bytes).\n * Suitable for file reads where you want to see the beginning.\n *\n * Never returns partial lines. If first line exceeds byte limit,\n * returns empty content with firstLineExceedsLimit=true.\n */\nexport function truncateHead(content: string, options: TruncationOptions = {}): TruncationResult {\n  const maxLines = options.maxLines ?? DEFAULT_MAX_LINES;\n  const maxBytes = options.maxBytes ?? DEFAULT_MAX_BYTES;\n\n  const totalBytes = Buffer.byteLength(content, \"utf-8\");\n  const lines = content.split(\"\\n\");\n  const totalLines = lines.length;\n\n  // Check if no truncation needed\n  if (totalLines <= maxLines && totalBytes <= maxBytes) {\n    return {\n      content,\n      truncated: false,\n      truncatedBy: null,\n      totalLines,\n      totalBytes,\n      outputLines: totalLines,\n      outputBytes: totalBytes,\n      lastLinePartial: false,\n      firstLineExceedsLimit: false,\n    };\n  }\n\n  // Check if first line alone exceeds byte limit\n  const firstLineBytes = Buffer.byteLength(lines[0], \"utf-8\");\n  if (firstLineBytes > maxBytes) {\n    return {\n      content: \"\",\n      truncated: true,\n      truncatedBy: \"bytes\",\n      totalLines,\n      totalBytes,\n      outputLines: 0,\n      outputBytes: 0,\n      lastLinePartial: false,\n      firstLineExceedsLimit: true,\n    };\n  }\n\n  // Collect complete lines that fit\n  const outputLinesArr: string[] = [];\n  let outputBytesCount = 0;\n  let truncatedBy: \"lines\" | \"bytes\" = \"lines\";\n\n  for (let i = 0; i < lines.length && i < maxLines; i++) {\n    const line = lines[i];\n    const lineBytes = Buffer.byteLength(line, \"utf-8\") + (i > 0 ? 1 : 0); // +1 for newline\n\n    if (outputBytesCount + lineBytes > maxBytes) {\n      truncatedBy = \"bytes\";\n      break;\n    }\n\n    outputLinesArr.push(line);\n    outputBytesCount += lineBytes;\n  }\n\n  // If we exited due to line limit\n  if (outputLinesArr.length >= maxLines && outputBytesCount <= maxBytes) {\n    truncatedBy = \"lines\";\n  }\n\n  const outputContent = outputLinesArr.join(\"\\n\");\n  const finalOutputBytes = Buffer.byteLength(outputContent, \"utf-8\");\n\n  return {\n    content: outputContent,\n    truncated: true,\n    truncatedBy,\n    totalLines,\n    totalBytes,\n    outputLines: outputLinesArr.length,\n    outputBytes: finalOutputBytes,\n    lastLinePartial: false,\n    firstLineExceedsLimit: false,\n  };\n}\n\n/**\n * Truncate content from the tail (keep last N lines/bytes).\n * Suitable for bash output where you want to see the end (errors, final results).\n *\n * May return partial first line if the last line of original content exceeds byte limit.\n */\nexport function truncateTail(content: string, options: TruncationOptions = {}): TruncationResult {\n  const maxLines = options.maxLines ?? DEFAULT_MAX_LINES;\n  const maxBytes = options.maxBytes ?? DEFAULT_MAX_BYTES;\n\n  const totalBytes = Buffer.byteLength(content, \"utf-8\");\n  const lines = content.split(\"\\n\");\n  const totalLines = lines.length;\n\n  // Check if no truncation needed\n  if (totalLines <= maxLines && totalBytes <= maxBytes) {\n    return {\n      content,\n      truncated: false,\n      truncatedBy: null,\n      totalLines,\n      totalBytes,\n      outputLines: totalLines,\n      outputBytes: totalBytes,\n      lastLinePartial: false,\n      firstLineExceedsLimit: false,\n    };\n  }\n\n  // Work backwards from the end\n  const outputLinesArr: string[] = [];\n  let outputBytesCount = 0;\n  let truncatedBy: \"lines\" | \"bytes\" = \"lines\";\n  let lastLinePartial = false;\n\n  for (let i = lines.length - 1; i >= 0 && outputLinesArr.length < maxLines; i--) {\n    const line = lines[i];\n    const lineBytes = Buffer.byteLength(line, \"utf-8\") + (outputLinesArr.length > 0 ? 1 : 0); // +1 for newline\n\n    if (outputBytesCount + lineBytes > maxBytes) {\n      truncatedBy = \"bytes\";\n      // Edge case: if we haven't added ANY lines yet and this line exceeds maxBytes,\n      // take the end of the line (partial)\n      if (outputLinesArr.length === 0) {\n        const truncatedLine = truncateStringToBytesFromEnd(line, maxBytes);\n        outputLinesArr.unshift(truncatedLine);\n        outputBytesCount = Buffer.byteLength(truncatedLine, \"utf-8\");\n        lastLinePartial = true;\n      }\n      break;\n    }\n\n    outputLinesArr.unshift(line);\n    outputBytesCount += lineBytes;\n  }\n\n  // If we exited due to line limit\n  if (outputLinesArr.length >= maxLines && outputBytesCount <= maxBytes) {\n    truncatedBy = \"lines\";\n  }\n\n  const outputContent = outputLinesArr.join(\"\\n\");\n  const finalOutputBytes = Buffer.byteLength(outputContent, \"utf-8\");\n\n  return {\n    content: outputContent,\n    truncated: true,\n    truncatedBy,\n    totalLines,\n    totalBytes,\n    outputLines: outputLinesArr.length,\n    outputBytes: finalOutputBytes,\n    lastLinePartial,\n    firstLineExceedsLimit: false,\n  };\n}\n\n/**\n * Truncate a string to fit within a byte limit (from the end).\n * Handles multi-byte UTF-8 characters correctly.\n */\nfunction truncateStringToBytesFromEnd(str: string, maxBytes: number): string {\n  const buf = Buffer.from(str, \"utf-8\");\n  if (buf.length <= maxBytes) {\n    return str;\n  }\n\n  // Start from the end, skip maxBytes back\n  let start = buf.length - maxBytes;\n\n  // Find a valid UTF-8 boundary (start of a character)\n  while (start < buf.length && (buf[start] & 0xc0) === 0x80) {\n    start++;\n  }\n\n  return buf.slice(start).toString(\"utf-8\");\n}\n"]}

package/dist/tools/write.d.ts

@@ -0,0 +1,10 @@
+import type { AgentTool } from "@earendil-works/pi-agent-core";
+import type { Executor } from "../sandbox/index.js";
+declare const writeSchema: import("@sinclair/typebox").TObject<{
+    label: import("@sinclair/typebox").TString;
+    path: import("@sinclair/typebox").TString;
+    content: import("@sinclair/typebox").TString;
+}>;
+export declare function createWriteTool(executor: Executor): AgentTool<typeof writeSchema>;
+export {};
+//# sourceMappingURL=write.d.ts.map

package/dist/tools/write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write.d.ts","sourceRoot":"","sources":["../../src/tools/write.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAE/D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,QAAA,MAAM,WAAW;;;;EAIf,CAAC;AAEH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,CAAC,OAAO,WAAW,CAAC,CA8BjF","sourcesContent":["import type { AgentTool } from \"@earendil-works/pi-agent-core\";\nimport { Type } from \"@sinclair/typebox\";\nimport type { Executor } from \"../sandbox/index.js\";\n\nconst writeSchema = Type.Object({\n  label: Type.String({ description: \"Brief description of what you're writing (shown to user)\" }),\n  path: Type.String({ description: \"Path to the file to write (relative or absolute)\" }),\n  content: Type.String({ description: \"Content to write to the file\" }),\n});\n\nexport function createWriteTool(executor: Executor): AgentTool<typeof writeSchema> {\n  return {\n    name: \"write\",\n    label: \"write\",\n    description:\n      \"Write content to a file. Creates the file if it doesn't exist, overwrites if it does. Automatically creates parent directories.\",\n    parameters: writeSchema,\n    execute: async (\n      _toolCallId: string,\n      { path, content }: { label: string; path: string; content: string },\n      signal?: AbortSignal,\n    ) => {\n      // Create parent directories and write file using heredoc\n      const dir = path.includes(\"/\") ? path.substring(0, path.lastIndexOf(\"/\")) : \".\";\n\n      // Use printf to handle content with special characters, pipe to file\n      // This avoids issues with heredoc and special characters\n      const cmd = `mkdir -p ${shellEscape(dir)} && printf '%s' ${shellEscape(content)} > ${shellEscape(path)}`;\n\n      const result = await executor.exec(cmd, { signal });\n      if (result.code !== 0) {\n        throw new Error(result.stderr || `Failed to write file: ${path}`);\n      }\n\n      return {\n        content: [{ type: \"text\", text: `Successfully wrote ${content.length} bytes to ${path}` }],\n        details: undefined,\n      };\n    },\n  };\n}\n\nfunction shellEscape(s: string): string {\n  return `'${s.replace(/'/g, \"'\\\\''\")}'`;\n}\n"]}

package/dist/tools/write.js

@@ -0,0 +1,33 @@
+import { Type } from "@sinclair/typebox";
+const writeSchema = Type.Object({
+    label: Type.String({ description: "Brief description of what you're writing (shown to user)" }),
+    path: Type.String({ description: "Path to the file to write (relative or absolute)" }),
+    content: Type.String({ description: "Content to write to the file" }),
+});
+export function createWriteTool(executor) {
+    return {
+        name: "write",
+        label: "write",
+        description: "Write content to a file. Creates the file if it doesn't exist, overwrites if it does. Automatically creates parent directories.",
+        parameters: writeSchema,
+        execute: async (_toolCallId, { path, content }, signal) => {
+            // Create parent directories and write file using heredoc
+            const dir = path.includes("/") ? path.substring(0, path.lastIndexOf("/")) : ".";
+            // Use printf to handle content with special characters, pipe to file
+            // This avoids issues with heredoc and special characters
+            const cmd = `mkdir -p ${shellEscape(dir)} && printf '%s' ${shellEscape(content)} > ${shellEscape(path)}`;
+            const result = await executor.exec(cmd, { signal });
+            if (result.code !== 0) {
+                throw new Error(result.stderr || `Failed to write file: ${path}`);
+            }
+            return {
+                content: [{ type: "text", text: `Successfully wrote ${content.length} bytes to ${path}` }],
+                details: undefined,
+            };
+        },
+    };
+}
+function shellEscape(s) {
+    return `'${s.replace(/'/g, "'\\''")}'`;
+}
+//# sourceMappingURL=write.js.map

package/dist/tools/write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write.js","sourceRoot":"","sources":["../../src/tools/write.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAGzC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC;IAC9B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,0DAA0D,EAAE,CAAC;IAC/F,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kDAAkD,EAAE,CAAC;IACtF,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,8BAA8B,EAAE,CAAC;CACtE,CAAC,CAAC;AAEH,MAAM,UAAU,eAAe,CAAC,QAAkB;IAChD,OAAO;QACL,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,OAAO;QACd,WAAW,EACT,iIAAiI;QACnI,UAAU,EAAE,WAAW;QACvB,OAAO,EAAE,KAAK,EACZ,WAAmB,EACnB,EAAE,IAAI,EAAE,OAAO,EAAoD,EACnE,MAAoB,EACpB,EAAE;YACF,yDAAyD;YACzD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YAEhF,qEAAqE;YACrE,yDAAyD;YACzD,MAAM,GAAG,GAAG,YAAY,WAAW,CAAC,GAAG,CAAC,mBAAmB,WAAW,CAAC,OAAO,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YAEzG,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACpD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,yBAAyB,IAAI,EAAE,CAAC,CAAC;YACpE,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,OAAO,CAAC,MAAM,aAAa,IAAI,EAAE,EAAE,CAAC;gBAC1F,OAAO,EAAE,SAAS;aACnB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AACzC,CAAC","sourcesContent":["import type { AgentTool } from \"@earendil-works/pi-agent-core\";\nimport { Type } from \"@sinclair/typebox\";\nimport type { Executor } from \"../sandbox/index.js\";\n\nconst writeSchema = Type.Object({\n  label: Type.String({ description: \"Brief description of what you're writing (shown to user)\" }),\n  path: Type.String({ description: \"Path to the file to write (relative or absolute)\" }),\n  content: Type.String({ description: \"Content to write to the file\" }),\n});\n\nexport function createWriteTool(executor: Executor): AgentTool<typeof writeSchema> {\n  return {\n    name: \"write\",\n    label: \"write\",\n    description:\n      \"Write content to a file. Creates the file if it doesn't exist, overwrites if it does. Automatically creates parent directories.\",\n    parameters: writeSchema,\n    execute: async (\n      _toolCallId: string,\n      { path, content }: { label: string; path: string; content: string },\n      signal?: AbortSignal,\n    ) => {\n      // Create parent directories and write file using heredoc\n      const dir = path.includes(\"/\") ? path.substring(0, path.lastIndexOf(\"/\")) : \".\";\n\n      // Use printf to handle content with special characters, pipe to file\n      // This avoids issues with heredoc and special characters\n      const cmd = `mkdir -p ${shellEscape(dir)} && printf '%s' ${shellEscape(content)} > ${shellEscape(path)}`;\n\n      const result = await executor.exec(cmd, { signal });\n      if (result.code !== 0) {\n        throw new Error(result.stderr || `Failed to write file: ${path}`);\n      }\n\n      return {\n        content: [{ type: \"text\", text: `Successfully wrote ${content.length} bytes to ${path}` }],\n        details: undefined,\n      };\n    },\n  };\n}\n\nfunction shellEscape(s: string): string {\n  return `'${s.replace(/'/g, \"'\\\\''\")}'`;\n}\n"]}

package/dist/trigger.d.ts

@@ -0,0 +1,31 @@
+import type { BotEvent } from "./adapter.js";
+export type TriggerIntent = "mention" | "direct" | "thread-continuation" | "auto-reply-candidate";
+export type TriggerResult = {
+    trigger: true;
+    reason: string;
+} | {
+    trigger: false;
+    reason: string;
+};
+export type AutoReplyJudge = (input: {
+    event: BotEvent;
+    rules: string[];
+    conversationDir: string;
+}) => Promise<boolean>;
+/**
+ * Trivially decide non-auto-reply intents synchronously. For "auto-reply-candidate"
+ * callers must use {@link evaluateAutoReplyPolicy}.
+ */
+export declare function decideTrigger(intent: Exclude<TriggerIntent, "auto-reply-candidate">): TriggerResult;
+/**
+ * Decide whether to auto-reply. Never throws — judge errors and timeouts are
+ * folded into a `trigger: false` result with a distinct reason, so adapters
+ * can apply a single uniform "do not trigger, but still log" policy.
+ */
+export declare function evaluateAutoReplyPolicy(input: {
+    event: BotEvent;
+    workingDir: string | undefined;
+    judge?: AutoReplyJudge;
+    timeoutMs?: number;
+}): Promise<TriggerResult>;
+//# sourceMappingURL=trigger.d.ts.map

package/dist/trigger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trigger.d.ts","sourceRoot":"","sources":["../src/trigger.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAO7C,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,QAAQ,GAAG,qBAAqB,GAAG,sBAAsB,CAAC;AAElG,MAAM,MAAM,aAAa,GAAG;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnG,MAAM,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE;IACnC,KAAK,EAAE,QAAQ,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;CACzB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAEvB;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,OAAO,CAAC,aAAa,EAAE,sBAAsB,CAAC,GACrD,aAAa,CAEf;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,KAAK,EAAE,QAAQ,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,aAAa,CAAC,CA4BzB","sourcesContent":["import { completeSimple, getModel, type Api, type Model } from \"@earendil-works/pi-ai\";\nimport type { BotEvent } from \"./adapter.js\";\nimport { loadAutoReplyJudgeModel, loadConversationAutoReplyConfig } from \"./config.js\";\nimport * as log from \"./log.js\";\nimport { join } from \"path\";\n\nconst JUDGE_TIMEOUT_MS = 10_000;\n\nexport type TriggerIntent = \"mention\" | \"direct\" | \"thread-continuation\" | \"auto-reply-candidate\";\n\nexport type TriggerResult = { trigger: true; reason: string } | { trigger: false; reason: string };\n\nexport type AutoReplyJudge = (input: {\n  event: BotEvent;\n  rules: string[];\n  conversationDir: string;\n}) => Promise<boolean>;\n\n/**\n * Trivially decide non-auto-reply intents synchronously. For \"auto-reply-candidate\"\n * callers must use {@link evaluateAutoReplyPolicy}.\n */\nexport function decideTrigger(\n  intent: Exclude<TriggerIntent, \"auto-reply-candidate\">,\n): TriggerResult {\n  return { trigger: true, reason: intent };\n}\n\n/**\n * Decide whether to auto-reply. Never throws — judge errors and timeouts are\n * folded into a `trigger: false` result with a distinct reason, so adapters\n * can apply a single uniform \"do not trigger, but still log\" policy.\n */\nexport async function evaluateAutoReplyPolicy(input: {\n  event: BotEvent;\n  workingDir: string | undefined;\n  judge?: AutoReplyJudge;\n  timeoutMs?: number;\n}): Promise<TriggerResult> {\n  const { event, workingDir, judge = judgeAutoReplyWithLlm, timeoutMs = JUDGE_TIMEOUT_MS } = input;\n  if (!workingDir) return { trigger: false, reason: \"auto-reply-unconfigured\" };\n\n  const conversationDir = join(workingDir, event.conversationId);\n\n  try {\n    const config = loadConversationAutoReplyConfig(conversationDir);\n    if (!config.enabled) return { trigger: false, reason: \"auto-reply-disabled\" };\n    if (config.rules.length === 0) {\n      return { trigger: true, reason: \"auto-reply-enabled\" };\n    }\n\n    const shouldReply = await withTimeout(\n      judge({ event, rules: config.rules, conversationDir }),\n      timeoutMs,\n    );\n    return shouldReply\n      ? { trigger: true, reason: \"auto-reply-rule-match\" }\n      : { trigger: false, reason: \"auto-reply-rule-no-match\" };\n  } catch (err) {\n    if (err instanceof JudgeTimeoutError) {\n      log.logWarning(\"Auto-reply judge timed out\", String(err));\n      return { trigger: false, reason: \"auto-reply-judge-timeout\" };\n    }\n    log.logWarning(\"Auto-reply policy evaluation failed\", String(err));\n    return { trigger: false, reason: \"auto-reply-judge-failed\" };\n  }\n}\n\nclass JudgeTimeoutError extends Error {\n  constructor(ms: number) {\n    super(`auto-reply judge exceeded ${ms}ms`);\n    this.name = \"JudgeTimeoutError\";\n  }\n}\n\nfunction withTimeout<T>(promise: Promise<T>, ms: number): Promise<T> {\n  return new Promise<T>((resolve, reject) => {\n    const timer = setTimeout(() => reject(new JudgeTimeoutError(ms)), ms);\n    promise.then(\n      (value) => {\n        clearTimeout(timer);\n        resolve(value);\n      },\n      (err) => {\n        clearTimeout(timer);\n        reject(err);\n      },\n    );\n  });\n}\n\nasync function judgeAutoReplyWithLlm(input: {\n  event: BotEvent;\n  rules: string[];\n  conversationDir: string;\n}): Promise<boolean> {\n  const judgeConfig = loadAutoReplyJudgeModel(input.conversationDir);\n  // Config stores provider/model as user-provided strings, while getModel's public\n  // overload is narrowed to generated known providers.\n  const model = getModel(judgeConfig.provider as never, judgeConfig.model as never) as Model<Api>;\n  const answer = await completeSimple(\n    model,\n    {\n      systemPrompt:\n        \"You decide whether a bot should reply to a group/channel message. \" +\n        \"Use only the rules provided by the user. Answer exactly YES or NO.\",\n      messages: [\n        {\n          role: \"user\",\n          timestamp: Date.now(),\n          content: [\n            \"Rules:\",\n            ...input.rules.map((rule, index) => `${index + 1}. ${rule}`),\n            \"\",\n            \"Message:\",\n            input.event.text,\n            \"\",\n            \"Should the bot reply? Answer exactly YES or NO.\",\n          ].join(\"\\n\"),\n        },\n      ],\n    },\n    {\n      temperature: 0,\n      maxTokens: 4,\n      reasoning: \"minimal\",\n    },\n  );\n  const text = answer.content\n    .filter((part) => part.type === \"text\")\n    .map((part) => part.text)\n    .join(\"\")\n    .trim()\n    .toUpperCase();\n  return /^YES\\b/.test(text);\n}\n"]}

package/dist/trigger.js

@@ -0,0 +1,98 @@
+import { completeSimple, getModel } from "@earendil-works/pi-ai";
+import { loadAutoReplyJudgeModel, loadConversationAutoReplyConfig } from "./config.js";
+import * as log from "./log.js";
+import { join } from "path";
+const JUDGE_TIMEOUT_MS = 10_000;
+/**
+ * Trivially decide non-auto-reply intents synchronously. For "auto-reply-candidate"
+ * callers must use {@link evaluateAutoReplyPolicy}.
+ */
+export function decideTrigger(intent) {
+    return { trigger: true, reason: intent };
+}
+/**
+ * Decide whether to auto-reply. Never throws — judge errors and timeouts are
+ * folded into a `trigger: false` result with a distinct reason, so adapters
+ * can apply a single uniform "do not trigger, but still log" policy.
+ */
+export async function evaluateAutoReplyPolicy(input) {
+    const { event, workingDir, judge = judgeAutoReplyWithLlm, timeoutMs = JUDGE_TIMEOUT_MS } = input;
+    if (!workingDir)
+        return { trigger: false, reason: "auto-reply-unconfigured" };
+    const conversationDir = join(workingDir, event.conversationId);
+    try {
+        const config = loadConversationAutoReplyConfig(conversationDir);
+        if (!config.enabled)
+            return { trigger: false, reason: "auto-reply-disabled" };
+        if (config.rules.length === 0) {
+            return { trigger: true, reason: "auto-reply-enabled" };
+        }
+        const shouldReply = await withTimeout(judge({ event, rules: config.rules, conversationDir }), timeoutMs);
+        return shouldReply
+            ? { trigger: true, reason: "auto-reply-rule-match" }
+            : { trigger: false, reason: "auto-reply-rule-no-match" };
+    }
+    catch (err) {
+        if (err instanceof JudgeTimeoutError) {
+            log.logWarning("Auto-reply judge timed out", String(err));
+            return { trigger: false, reason: "auto-reply-judge-timeout" };
+        }
+        log.logWarning("Auto-reply policy evaluation failed", String(err));
+        return { trigger: false, reason: "auto-reply-judge-failed" };
+    }
+}
+class JudgeTimeoutError extends Error {
+    constructor(ms) {
+        super(`auto-reply judge exceeded ${ms}ms`);
+        this.name = "JudgeTimeoutError";
+    }
+}
+function withTimeout(promise, ms) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => reject(new JudgeTimeoutError(ms)), ms);
+        promise.then((value) => {
+            clearTimeout(timer);
+            resolve(value);
+        }, (err) => {
+            clearTimeout(timer);
+            reject(err);
+        });
+    });
+}
+async function judgeAutoReplyWithLlm(input) {
+    const judgeConfig = loadAutoReplyJudgeModel(input.conversationDir);
+    // Config stores provider/model as user-provided strings, while getModel's public
+    // overload is narrowed to generated known providers.
+    const model = getModel(judgeConfig.provider, judgeConfig.model);
+    const answer = await completeSimple(model, {
+        systemPrompt: "You decide whether a bot should reply to a group/channel message. " +
+            "Use only the rules provided by the user. Answer exactly YES or NO.",
+        messages: [
+            {
+                role: "user",
+                timestamp: Date.now(),
+                content: [
+                    "Rules:",
+                    ...input.rules.map((rule, index) => `${index + 1}. ${rule}`),
+                    "",
+                    "Message:",
+                    input.event.text,
+                    "",
+                    "Should the bot reply? Answer exactly YES or NO.",
+                ].join("\n"),
+            },
+        ],
+    }, {
+        temperature: 0,
+        maxTokens: 4,
+        reasoning: "minimal",
+    });
+    const text = answer.content
+        .filter((part) => part.type === "text")
+        .map((part) => part.text)
+        .join("")
+        .trim()
+        .toUpperCase();
+    return /^YES\b/.test(text);
+}
+//# sourceMappingURL=trigger.js.map

package/dist/trigger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trigger.js","sourceRoot":"","sources":["../src/trigger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAwB,MAAM,uBAAuB,CAAC;AAEvF,OAAO,EAAE,uBAAuB,EAAE,+BAA+B,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAYhC;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAsD;IAEtD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAK7C;IACC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,GAAG,qBAAqB,EAAE,SAAS,GAAG,gBAAgB,EAAE,GAAG,KAAK,CAAC;IACjG,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAE9E,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAE/D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,+BAA+B,CAAC,eAAe,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAC9E,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QACzD,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,WAAW,CACnC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC,EACtD,SAAS,CACV,CAAC;QACF,OAAO,WAAW;YAChB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,uBAAuB,EAAE;YACpD,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;YACrC,GAAG,CAAC,UAAU,CAAC,4BAA4B,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;QAChE,CAAC;QACD,GAAG,CAAC,UAAU,CAAC,qCAAqC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACnE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,MAAM,iBAAkB,SAAQ,KAAK;IACnC,YAAY,EAAU;QACpB,KAAK,CAAC,6BAA6B,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,SAAS,WAAW,CAAI,OAAmB,EAAE,EAAU;IACrD,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,iBAAiB,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE;YACR,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,EACD,CAAC,GAAG,EAAE,EAAE;YACN,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,KAIpC;IACC,MAAM,WAAW,GAAG,uBAAuB,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACnE,iFAAiF;IACjF,qDAAqD;IACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,QAAiB,EAAE,WAAW,CAAC,KAAc,CAAe,CAAC;IAChG,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,KAAK,EACL;QACE,YAAY,EACV,oEAAoE;YACpE,oEAAoE;QACtE,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAM;gBACZ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,OAAO,EAAE;oBACP,QAAQ;oBACR,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC5D,EAAE;oBACF,UAAU;oBACV,KAAK,CAAC,KAAK,CAAC,IAAI;oBAChB,EAAE;oBACF,iDAAiD;iBAClD,CAAC,IAAI,CAAC,IAAI,CAAC;aACb;SACF;KACF,EACD;QACE,WAAW,EAAE,CAAC;QACd,SAAS,EAAE,CAAC;QACZ,SAAS,EAAE,SAAS;KACrB,CACF,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO;SACxB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC;SACtC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;SACxB,IAAI,CAAC,EAAE,CAAC;SACR,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;IACjB,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC","sourcesContent":["import { completeSimple, getModel, type Api, type Model } from \"@earendil-works/pi-ai\";\nimport type { BotEvent } from \"./adapter.js\";\nimport { loadAutoReplyJudgeModel, loadConversationAutoReplyConfig } from \"./config.js\";\nimport * as log from \"./log.js\";\nimport { join } from \"path\";\n\nconst JUDGE_TIMEOUT_MS = 10_000;\n\nexport type TriggerIntent = \"mention\" | \"direct\" | \"thread-continuation\" | \"auto-reply-candidate\";\n\nexport type TriggerResult = { trigger: true; reason: string } | { trigger: false; reason: string };\n\nexport type AutoReplyJudge = (input: {\n  event: BotEvent;\n  rules: string[];\n  conversationDir: string;\n}) => Promise<boolean>;\n\n/**\n * Trivially decide non-auto-reply intents synchronously. For \"auto-reply-candidate\"\n * callers must use {@link evaluateAutoReplyPolicy}.\n */\nexport function decideTrigger(\n  intent: Exclude<TriggerIntent, \"auto-reply-candidate\">,\n): TriggerResult {\n  return { trigger: true, reason: intent };\n}\n\n/**\n * Decide whether to auto-reply. Never throws — judge errors and timeouts are\n * folded into a `trigger: false` result with a distinct reason, so adapters\n * can apply a single uniform \"do not trigger, but still log\" policy.\n */\nexport async function evaluateAutoReplyPolicy(input: {\n  event: BotEvent;\n  workingDir: string | undefined;\n  judge?: AutoReplyJudge;\n  timeoutMs?: number;\n}): Promise<TriggerResult> {\n  const { event, workingDir, judge = judgeAutoReplyWithLlm, timeoutMs = JUDGE_TIMEOUT_MS } = input;\n  if (!workingDir) return { trigger: false, reason: \"auto-reply-unconfigured\" };\n\n  const conversationDir = join(workingDir, event.conversationId);\n\n  try {\n    const config = loadConversationAutoReplyConfig(conversationDir);\n    if (!config.enabled) return { trigger: false, reason: \"auto-reply-disabled\" };\n    if (config.rules.length === 0) {\n      return { trigger: true, reason: \"auto-reply-enabled\" };\n    }\n\n    const shouldReply = await withTimeout(\n      judge({ event, rules: config.rules, conversationDir }),\n      timeoutMs,\n    );\n    return shouldReply\n      ? { trigger: true, reason: \"auto-reply-rule-match\" }\n      : { trigger: false, reason: \"auto-reply-rule-no-match\" };\n  } catch (err) {\n    if (err instanceof JudgeTimeoutError) {\n      log.logWarning(\"Auto-reply judge timed out\", String(err));\n      return { trigger: false, reason: \"auto-reply-judge-timeout\" };\n    }\n    log.logWarning(\"Auto-reply policy evaluation failed\", String(err));\n    return { trigger: false, reason: \"auto-reply-judge-failed\" };\n  }\n}\n\nclass JudgeTimeoutError extends Error {\n  constructor(ms: number) {\n    super(`auto-reply judge exceeded ${ms}ms`);\n    this.name = \"JudgeTimeoutError\";\n  }\n}\n\nfunction withTimeout<T>(promise: Promise<T>, ms: number): Promise<T> {\n  return new Promise<T>((resolve, reject) => {\n    const timer = setTimeout(() => reject(new JudgeTimeoutError(ms)), ms);\n    promise.then(\n      (value) => {\n        clearTimeout(timer);\n        resolve(value);\n      },\n      (err) => {\n        clearTimeout(timer);\n        reject(err);\n      },\n    );\n  });\n}\n\nasync function judgeAutoReplyWithLlm(input: {\n  event: BotEvent;\n  rules: string[];\n  conversationDir: string;\n}): Promise<boolean> {\n  const judgeConfig = loadAutoReplyJudgeModel(input.conversationDir);\n  // Config stores provider/model as user-provided strings, while getModel's public\n  // overload is narrowed to generated known providers.\n  const model = getModel(judgeConfig.provider as never, judgeConfig.model as never) as Model<Api>;\n  const answer = await completeSimple(\n    model,\n    {\n      systemPrompt:\n        \"You decide whether a bot should reply to a group/channel message. \" +\n        \"Use only the rules provided by the user. Answer exactly YES or NO.\",\n      messages: [\n        {\n          role: \"user\",\n          timestamp: Date.now(),\n          content: [\n            \"Rules:\",\n            ...input.rules.map((rule, index) => `${index + 1}. ${rule}`),\n            \"\",\n            \"Message:\",\n            input.event.text,\n            \"\",\n            \"Should the bot reply? Answer exactly YES or NO.\",\n          ].join(\"\\n\"),\n        },\n      ],\n    },\n    {\n      temperature: 0,\n      maxTokens: 4,\n      reasoning: \"minimal\",\n    },\n  );\n  const text = answer.content\n    .filter((part) => part.type === \"text\")\n    .map((part) => part.text)\n    .join(\"\")\n    .trim()\n    .toUpperCase();\n  return /^YES\\b/.test(text);\n}\n"]}

package/dist/ui-copy.d.ts

@@ -0,0 +1,12 @@
+import type { Bot, PlatformInfo } from "./adapter.js";
+export declare const PRODUCT_NAME = "mikan";
+type PlatformSource = Bot | PlatformInfo | string;
+export declare function formatNothingRunning(source: PlatformSource): string;
+export declare function formatStopping(source: PlatformSource): string;
+export declare function formatStopped(source: PlatformSource): string;
+export declare function formatAlreadyWorking(source: PlatformSource, stopCommand: string, options?: {
+    scope?: "thread";
+}): string;
+export declare function formatForceStopped(source: PlatformSource, actorLabel: string): string;
+export {};
+//# sourceMappingURL=ui-copy.d.ts.map

package/dist/ui-copy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-copy.d.ts","sourceRoot":"","sources":["../src/ui-copy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEtD,eAAO,MAAM,YAAY,UAAU,CAAC;AAEpC,KAAK,cAAc,GAAG,GAAG,GAAG,YAAY,GAAG,MAAM,CAAC;AAoBlD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAEnE;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAE7D;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAE5D;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,cAAc,EACtB,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,QAAQ,CAAA;CAAE,GAC7B,MAAM,CAMR;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAErF","sourcesContent":["import type { Bot, PlatformInfo } from \"./adapter.js\";\n\nexport const PRODUCT_NAME = \"mikan\";\n\ntype PlatformSource = Bot | PlatformInfo | string;\n\nfunction resolvePlatformName(source: PlatformSource): string {\n  if (typeof source === \"string\") return source;\n  if (\"getPlatformInfo\" in source) return source.getPlatformInfo().name;\n  return source.name;\n}\n\nfunction supportsHtmlFormatting(platformName: string): boolean {\n  return platformName === \"telegram\";\n}\n\nfunction formatItalic(platformName: string, text: string): string {\n  return supportsHtmlFormatting(platformName) ? text : `_${text}_`;\n}\n\nfunction formatCode(platformName: string, text: string): string {\n  return supportsHtmlFormatting(platformName) ? `<code>${text}</code>` : `\\`${text}\\``;\n}\n\nexport function formatNothingRunning(source: PlatformSource): string {\n  return formatItalic(resolvePlatformName(source), \"Nothing running.\");\n}\n\nexport function formatStopping(source: PlatformSource): string {\n  return formatItalic(resolvePlatformName(source), \"Stopping…\");\n}\n\nexport function formatStopped(source: PlatformSource): string {\n  return formatItalic(resolvePlatformName(source), \"Stopped.\");\n}\n\nexport function formatAlreadyWorking(\n  source: PlatformSource,\n  stopCommand: string,\n  options?: { scope?: \"thread\" },\n): string {\n  const platformName = resolvePlatformName(source);\n  const command = formatCode(platformName, stopCommand);\n  const prefix =\n    options?.scope === \"thread\" ? \"Already working in this thread.\" : \"Already working.\";\n  return formatItalic(platformName, `${prefix} Send ${command} to cancel.`);\n}\n\nexport function formatForceStopped(source: PlatformSource, actorLabel: string): string {\n  return formatItalic(resolvePlatformName(source), `Force stopped by ${actorLabel}.`);\n}\n"]}

package/dist/ui-copy.js

@@ -0,0 +1,36 @@
+export const PRODUCT_NAME = "mikan";
+function resolvePlatformName(source) {
+    if (typeof source === "string")
+        return source;
+    if ("getPlatformInfo" in source)
+        return source.getPlatformInfo().name;
+    return source.name;
+}
+function supportsHtmlFormatting(platformName) {
+    return platformName === "telegram";
+}
+function formatItalic(platformName, text) {
+    return supportsHtmlFormatting(platformName) ? text : `_${text}_`;
+}
+function formatCode(platformName, text) {
+    return supportsHtmlFormatting(platformName) ? `<code>${text}</code>` : `\`${text}\``;
+}
+export function formatNothingRunning(source) {
+    return formatItalic(resolvePlatformName(source), "Nothing running.");
+}
+export function formatStopping(source) {
+    return formatItalic(resolvePlatformName(source), "Stopping…");
+}
+export function formatStopped(source) {
+    return formatItalic(resolvePlatformName(source), "Stopped.");
+}
+export function formatAlreadyWorking(source, stopCommand, options) {
+    const platformName = resolvePlatformName(source);
+    const command = formatCode(platformName, stopCommand);
+    const prefix = options?.scope === "thread" ? "Already working in this thread." : "Already working.";
+    return formatItalic(platformName, `${prefix} Send ${command} to cancel.`);
+}
+export function formatForceStopped(source, actorLabel) {
+    return formatItalic(resolvePlatformName(source), `Force stopped by ${actorLabel}.`);
+}
+//# sourceMappingURL=ui-copy.js.map

package/dist/ui-copy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-copy.js","sourceRoot":"","sources":["../src/ui-copy.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC;AAIpC,SAAS,mBAAmB,CAAC,MAAsB;IACjD,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,iBAAiB,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC;IACtE,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,sBAAsB,CAAC,YAAoB;IAClD,OAAO,YAAY,KAAK,UAAU,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CAAC,YAAoB,EAAE,IAAY;IACtD,OAAO,sBAAsB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC;AACnE,CAAC;AAED,SAAS,UAAU,CAAC,YAAoB,EAAE,IAAY;IACpD,OAAO,sBAAsB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAsB;IACzD,OAAO,YAAY,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,OAAO,YAAY,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAsB;IAClD,OAAO,YAAY,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAAsB,EACtB,WAAmB,EACnB,OAA8B;IAE9B,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,UAAU,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IACtD,MAAM,MAAM,GACV,OAAO,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,kBAAkB,CAAC;IACvF,OAAO,YAAY,CAAC,YAAY,EAAE,GAAG,MAAM,SAAS,OAAO,aAAa,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAsB,EAAE,UAAkB;IAC3E,OAAO,YAAY,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,oBAAoB,UAAU,GAAG,CAAC,CAAC;AACtF,CAAC","sourcesContent":["import type { Bot, PlatformInfo } from \"./adapter.js\";\n\nexport const PRODUCT_NAME = \"mikan\";\n\ntype PlatformSource = Bot | PlatformInfo | string;\n\nfunction resolvePlatformName(source: PlatformSource): string {\n  if (typeof source === \"string\") return source;\n  if (\"getPlatformInfo\" in source) return source.getPlatformInfo().name;\n  return source.name;\n}\n\nfunction supportsHtmlFormatting(platformName: string): boolean {\n  return platformName === \"telegram\";\n}\n\nfunction formatItalic(platformName: string, text: string): string {\n  return supportsHtmlFormatting(platformName) ? text : `_${text}_`;\n}\n\nfunction formatCode(platformName: string, text: string): string {\n  return supportsHtmlFormatting(platformName) ? `<code>${text}</code>` : `\\`${text}\\``;\n}\n\nexport function formatNothingRunning(source: PlatformSource): string {\n  return formatItalic(resolvePlatformName(source), \"Nothing running.\");\n}\n\nexport function formatStopping(source: PlatformSource): string {\n  return formatItalic(resolvePlatformName(source), \"Stopping…\");\n}\n\nexport function formatStopped(source: PlatformSource): string {\n  return formatItalic(resolvePlatformName(source), \"Stopped.\");\n}\n\nexport function formatAlreadyWorking(\n  source: PlatformSource,\n  stopCommand: string,\n  options?: { scope?: \"thread\" },\n): string {\n  const platformName = resolvePlatformName(source);\n  const command = formatCode(platformName, stopCommand);\n  const prefix =\n    options?.scope === \"thread\" ? \"Already working in this thread.\" : \"Already working.\";\n  return formatItalic(platformName, `${prefix} Send ${command} to cancel.`);\n}\n\nexport function formatForceStopped(source: PlatformSource, actorLabel: string): string {\n  return formatItalic(resolvePlatformName(source), `Force stopped by ${actorLabel}.`);\n}\n"]}

package/dist/vault-routing.d.ts

@@ -0,0 +1,4 @@
+import type { SandboxConfig } from "./sandbox/index.js";
+export declare function resolveActorVaultKey(baseConfig: SandboxConfig, userId: string, conversationId: string): string;
+export declare function containerSharedVaultId(containerName: string): string;
+//# sourceMappingURL=vault-routing.d.ts.map

package/dist/vault-routing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-routing.d.ts","sourceRoot":"","sources":["../src/vault-routing.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,aAAa,EACzB,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,GACrB,MAAM,CAcR;AAED,wBAAgB,sBAAsB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAEpE","sourcesContent":["import { DockerContainerManager } from \"./provisioner.js\";\nimport type { SandboxConfig } from \"./sandbox/index.js\";\nexport function resolveActorVaultKey(\n  baseConfig: SandboxConfig,\n  userId: string,\n  conversationId: string,\n): string {\n  if (baseConfig.type === \"container\") {\n    return containerSharedVaultId(baseConfig.container);\n  }\n\n  if (\n    baseConfig.type === \"image\" ||\n    baseConfig.type === \"cloudflare\" ||\n    baseConfig.type === \"firecracker\"\n  ) {\n    return DockerContainerManager.sanitizeSegment(conversationId);\n  }\n\n  return userId;\n}\n\nexport function containerSharedVaultId(containerName: string): string {\n  return `container-${containerName}`;\n}\n"]}

package/dist/vault-routing.js

@@ -0,0 +1,16 @@
+import { DockerContainerManager } from "./provisioner.js";
+export function resolveActorVaultKey(baseConfig, userId, conversationId) {
+    if (baseConfig.type === "container") {
+        return containerSharedVaultId(baseConfig.container);
+    }
+    if (baseConfig.type === "image" ||
+        baseConfig.type === "cloudflare" ||
+        baseConfig.type === "firecracker") {
+        return DockerContainerManager.sanitizeSegment(conversationId);
+    }
+    return userId;
+}
+export function containerSharedVaultId(containerName) {
+    return `container-${containerName}`;
+}
+//# sourceMappingURL=vault-routing.js.map

package/dist/vault-routing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-routing.js","sourceRoot":"","sources":["../src/vault-routing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,MAAM,UAAU,oBAAoB,CAClC,UAAyB,EACzB,MAAc,EACd,cAAsB;IAEtB,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACpC,OAAO,sBAAsB,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;IAED,IACE,UAAU,CAAC,IAAI,KAAK,OAAO;QAC3B,UAAU,CAAC,IAAI,KAAK,YAAY;QAChC,UAAU,CAAC,IAAI,KAAK,aAAa,EACjC,CAAC;QACD,OAAO,sBAAsB,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,aAAqB;IAC1D,OAAO,aAAa,aAAa,EAAE,CAAC;AACtC,CAAC","sourcesContent":["import { DockerContainerManager } from \"./provisioner.js\";\nimport type { SandboxConfig } from \"./sandbox/index.js\";\nexport function resolveActorVaultKey(\n  baseConfig: SandboxConfig,\n  userId: string,\n  conversationId: string,\n): string {\n  if (baseConfig.type === \"container\") {\n    return containerSharedVaultId(baseConfig.container);\n  }\n\n  if (\n    baseConfig.type === \"image\" ||\n    baseConfig.type === \"cloudflare\" ||\n    baseConfig.type === \"firecracker\"\n  ) {\n    return DockerContainerManager.sanitizeSegment(conversationId);\n  }\n\n  return userId;\n}\n\nexport function containerSharedVaultId(containerName: string): string {\n  return `container-${containerName}`;\n}\n"]}

package/dist/vault.d.ts

@@ -0,0 +1,72 @@
+import type { SandboxConfig } from "./sandbox/index.js";
+export declare function normalizeSharedVaultName(name: string): string | undefined;
+export declare function sharedVaultKey(name: string): string | undefined;
+export interface ResolvedVaultMount {
+    source: string;
+    target: string;
+}
+/** Resolved vault ready for use at runtime */
+export interface ResolvedVault {
+    userId: string;
+    displayName: string;
+    /** Absolute path to vault directory */
+    dir: string;
+    /** Absolute mount specs */
+    mounts: ResolvedVaultMount[];
+    /** Parsed from env file */
+    env: Record<string, string>;
+}
+export interface VaultManager {
+    /** Return true when a vault directory exists for this exact key. */
+    hasEntry(key: string): boolean;
+    /** Resolve vault for a user; returns undefined when no directory exists. */
+    resolve(userId: string): ResolvedVault | undefined;
+    /** Get sandbox config with credential injection for a user */
+    getSandboxConfig(userId: string, baseConfig: SandboxConfig): SandboxConfig;
+    /** List all vaults discovered under vaults/. */
+    list(): ResolvedVault[];
+    /** Check if the vaults directory exists. */
+    isEnabled(): boolean;
+    /** Merge environment variables into vaults/<key>/env and persist them to disk. */
+    upsertEnv(key: string, env: Record<string, string>): void;
+    /** Write a private file into vaults/<key>/ and ensure it is mounted into the sandbox. */
+    upsertFile(key: string, relativePath: string, content: string, targetPath?: string): void;
+    /** List named shared login profiles under vaults/shared/. */
+    listSharedVaults(): string[];
+    /** Delete a shared login profile's directory. Returns true when it existed. */
+    deleteSharedVault(name: string): boolean;
+    /** Copy a shared login profile's files into another vault directory. */
+    copySharedVaultTo(name: string, targetKey: string): {
+        filesCopied: number;
+        envKeysCopied: number;
+    };
+}
+/**
+ * Parse a KEY=VALUE env file. Supports:
+ * - Lines starting with # are comments
+ * - Empty lines are skipped
+ * - Values can be quoted with single or double quotes (quotes are stripped)
+ * - No variable expansion
+ * - The value is everything after the first `=` to end of line (no inline comments)
+ */
+export declare function parseEnvFile(content: string): Record<string, string>;
+export declare class FileVaultManager implements VaultManager {
+    private readonly vaultsDir;
+    constructor(stateDir: string);
+    isEnabled(): boolean;
+    hasEntry(key: string): boolean;
+    listSharedVaults(): string[];
+    deleteSharedVault(name: string): boolean;
+    copySharedVaultTo(name: string, targetKey: string): {
+        filesCopied: number;
+        envKeysCopied: number;
+    };
+    resolve(userId: string): ResolvedVault | undefined;
+    getSandboxConfig(userId: string, baseConfig: SandboxConfig): SandboxConfig;
+    list(): ResolvedVault[];
+    upsertEnv(key: string, env: Record<string, string>): void;
+    upsertFile(key: string, relativePath: string, content: string, targetPath?: string): void;
+    private buildResolved;
+}
+export declare function defaultVaultTargetPath(relativePath: string): string;
+//# sourceMappingURL=vault.d.ts.map