@geminixiang/mikan 1.0.0-beta.2 → 1.0.0-beta.20

package/dist/vault/routing.js

@@ -1,13 +1,6 @@
-import { DockerContainerManager } from "../provisioner.js";
+import { actorKey } from "../sandbox/identity.js";
+/** The vault key for an actor — the shared runtime identity (see sandbox/identity.ts). */
 export function resolveActorVaultKey(baseConfig, userId, conversationId) {
-    if (baseConfig.type === "container") {
-        return `container-${baseConfig.container}`;
-    }
-    if (baseConfig.type === "image" ||
-        baseConfig.type === "cloudflare" ||
-        baseConfig.type === "firecracker") {
-        return DockerContainerManager.sanitizeSegment(conversationId);
-    }
-    return userId;
+    return actorKey(baseConfig, { userId, conversationId });
 }
 //# sourceMappingURL=routing.js.map

package/dist/vault/routing.js.map

@@ -1 +1 @@
-{"version":3,"file":"routing.js","sourceRoot":"","sources":["../../src/vault/routing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,MAAM,UAAU,oBAAoB,CAClC,UAAyB,EACzB,MAAc,EACd,cAAsB;IAEtB,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACpC,OAAO,aAAa,UAAU,CAAC,SAAS,EAAE,CAAC;IAC7C,CAAC;IAED,IACE,UAAU,CAAC,IAAI,KAAK,OAAO;QAC3B,UAAU,CAAC,IAAI,KAAK,YAAY;QAChC,UAAU,CAAC,IAAI,KAAK,aAAa,EACjC,CAAC;QACD,OAAO,sBAAsB,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { DockerContainerManager } from \"../provisioner.js\";\nimport type { SandboxConfig } from \"../sandbox/index.js\";\nexport function resolveActorVaultKey(\n  baseConfig: SandboxConfig,\n  userId: string,\n  conversationId: string,\n): string {\n  if (baseConfig.type === \"container\") {\n    return `container-${baseConfig.container}`;\n  }\n\n  if (\n    baseConfig.type === \"image\" ||\n    baseConfig.type === \"cloudflare\" ||\n    baseConfig.type === \"firecracker\"\n  ) {\n    return DockerContainerManager.sanitizeSegment(conversationId);\n  }\n\n  return userId;\n}\n"]}
+{"version":3,"file":"routing.js","sourceRoot":"","sources":["../../src/vault/routing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAGlD,0FAA0F;AAC1F,MAAM,UAAU,oBAAoB,CAClC,UAAyB,EACzB,MAAc,EACd,cAAsB;IAEtB,OAAO,QAAQ,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAC1D,CAAC","sourcesContent":["import { actorKey } from \"../sandbox/identity.js\";\nimport type { SandboxConfig } from \"../sandbox/index.js\";\n\n/** The vault key for an actor — the shared runtime identity (see sandbox/identity.ts). */\nexport function resolveActorVaultKey(\n  baseConfig: SandboxConfig,\n  userId: string,\n  conversationId: string,\n): string {\n  return actorKey(baseConfig, { userId, conversationId });\n}\n"]}

package/dist/web/admin/portal.d.ts

@@ -1,5 +1,32 @@
 import type { IncomingMessage, ServerResponse } from "http";
+import type { EventStore } from "../../tools/types.js";
 export type { AdminRuntimeBridge, AdminServices } from "./types.js";
 import type { AdminServices } from "./types.js";
 export declare function handleAdminRequest(req: IncomingMessage, res: ServerResponse, url: URL, services: AdminServices): Promise<boolean>;
+interface SkillEntry {
+    name: string;
+    description: string;
+    source: "global" | "conversation";
+    path: string;
+    directory: string;
+}
+export declare function readSkillsFromDir(skillsDir: string, source: SkillEntry["source"]): SkillEntry[];
+export interface EventSummary {
+    name: string;
+    size: number;
+    mtimeMs: number;
+    type: string | null;
+    platform: string | null;
+    conversationId: string | null;
+    text: string | null;
+    at: string | null;
+    schedule: string | null;
+    timezone: string | null;
+}
+/**
+ * List events through the owning store (which normalizes the legacy
+ * `channelId` alias and keeps unparseable files visible with a null payload).
+ * Store payloads are unvalidated JSON, so field access stays defensive.
+ */
+export declare function listAllEvents(store: EventStore): Promise<EventSummary[]>;
 //# sourceMappingURL=portal.d.ts.map

package/dist/web/admin/portal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"portal.d.ts","sourceRoot":"","sources":["../../../src/web/admin/portal.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,MAAM,CAAC;AAuB5D,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAIhD,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,aAAa,GACtB,OAAO,CAAC,OAAO,CAAC,CA6BlB"}
+{"version":3,"file":"portal.d.ts","sourceRoot":"","sources":["../../../src/web/admin/portal.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,MAAM,CAAC;AAG5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAsBvD,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAIhD,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,aAAa,GACtB,OAAO,CAAC,OAAO,CAAC,CA6BlB;AA4nCD,UAAU,UAAU;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,QAAQ,GAAG,cAAc,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAwBD,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,GAAG,UAAU,EAAE,CAuB/F;AAyED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAMD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAyB9E"}

package/dist/web/admin/portal.js

@@ -1,10 +1,10 @@
-import { existsSync, readdirSync, readFileSync, rmSync, statSync } from "fs";
+import { existsSync, readdirSync, readFileSync, statSync } from "fs";
 import { basename, join, resolve as pathResolve, sep as pathSep } from "path";
-import { MikanModels, SessionStore } from "../../harness/index.js";
+import { MikanModels, parseFrontmatter, SessionStore } from "../../harness/index.js";
 import { loadConversationAutoReplyConfig, loadGlobalSettings, resolveConversationSettings, saveConversationAutoReplyConfig, updateConversationSettings, updateGlobalSettings, } from "../../config.js";
 import { escapeHtml } from "../../utils/html.js";
 import { readRawBody } from "../../utils/http-body.js";
-import { renderPortalShell } from "../../portal-shell.js";
+import { renderPortalShell } from "../portal-shell.js";
 import { resolveExistingSessionFile } from "../session-view/service.js";
 import { PRODUCT_NAME } from "../../platform-messages.js";
 import { resolveActorVaultKey } from "../../vault/routing.js";
@@ -88,7 +88,7 @@ async function routeApiRequest(req, res, url, services) {
             return;
         }
         if (url.pathname === "/admin/api/events") {
-            serveEventsList(res, services);
+            await serveEventsList(res, services);
             return;
         }
         if (url.pathname === "/admin/api/events/file") {
@@ -96,7 +96,7 @@ async function routeApiRequest(req, res, url, services) {
             return;
         }
         if (url.pathname === "/admin/api/conversations/events") {
-            serveConversationEventsList(res, url, services, token);
+            await serveConversationEventsList(res, url, services, token);
             return;
         }
         jsonRes(res, 404, { error: "Not found" });
@@ -140,7 +140,7 @@ async function routeApiRequest(req, res, url, services) {
         return;
     }
     if (url.pathname === "/admin/api/conversations/events/delete") {
-        serveConversationEventDelete(res, body, services, token);
+        await serveConversationEventDelete(res, body, services, token);
         return;
     }
     if (url.pathname === "/admin/api/settings/model") {
@@ -465,8 +465,8 @@ function serveConversationState(res, url, services, token) {
         globalProvider: globalConfig.provider,
         globalModel: globalConfig.model,
         globalThinkingLevel: globalConfig.thinkingLevel,
-        sandboxImageWorkspaceMount: conversationConfig.sandboxImageWorkspaceMount ?? null,
-        globalSandboxImageWorkspaceMount: globalConfig.sandboxImageWorkspaceMount ?? null,
+        sandboxImageWorkspaceMount: conversationConfig.sandbox?.image?.workspaceMount ?? null,
+        globalSandboxImageWorkspaceMount: globalConfig.sandbox?.image?.workspaceMount ?? null,
         autoReplyEnabled: autoReply.enabled,
         autoReplyRules: autoReply.rules,
         slack: {
@@ -482,12 +482,12 @@ function serveGlobalSettings(res) {
             provider: config.provider,
             model: config.model,
             thinkingLevel: config.thinkingLevel,
-            sandboxCpus: config.sandboxCpus ?? null,
-            sandboxMemory: config.sandboxMemory ?? null,
-            sandboxBoostCpus: config.sandboxBoostCpus ?? null,
-            sandboxBoostMemory: config.sandboxBoostMemory ?? null,
-            sandboxImageWorkspaceMount: config.sandboxImageWorkspaceMount ?? null,
-            defaultSharedVault: config.defaultSharedVault ?? null,
+            sandboxCpus: config.sandbox?.cpus ?? null,
+            sandboxMemory: config.sandbox?.memory ?? null,
+            sandboxBoostCpus: config.sandbox?.boost?.cpus ?? null,
+            sandboxBoostMemory: config.sandbox?.boost?.memory ?? null,
+            sandboxImageWorkspaceMount: config.sandbox?.image?.workspaceMount ?? null,
+            defaultSharedVault: config.sandbox?.defaultSharedVault ?? null,
             slack: {
                 replyMode: config.slack?.replyMode ?? "top-level",
             },
@@ -518,7 +518,7 @@ async function serveModelsList(res) {
         jsonRes(res, 500, { error: err instanceof Error ? err.message : String(err) });
     }
 }
-const VALID_THINKING_LEVELS = new Set(["off", "minimal", "low", "medium", "high", "xhigh"]);
+const VALID_THINKING_LEVELS = new Set(["off", "minimal", "low", "medium", "high", "xhigh", "max"]);
 function serveConversationModelUpdate(res, body, services, token) {
     const provider = typeof body.provider === "string" ? body.provider.trim() : "";
     const model = typeof body.model === "string" ? body.model.trim() : "";
@@ -570,7 +570,7 @@ function serveConversationSandboxUpdate(res, body, services, token) {
         return;
     const dir = join(workingDir, scope.conversationId);
     try {
-        updateConversationSettings(dir, { sandboxImageWorkspaceMount: workspaceMount });
+        updateConversationSettings(dir, { sandbox: { image: { workspaceMount } } });
         jsonRes(res, 200, { ok: true });
     }
     catch (err) {
@@ -747,23 +747,25 @@ function serveGlobalSandboxUpdate(res, body) {
     const boostMemory = typeof body.boostMemory === "string" ? body.boostMemory.trim() : "";
     const workspaceMount = body.workspaceMount;
     const validMount = workspaceMount === "private" || workspaceMount === "full";
-    const update = {};
-    if (cpus)
-        update.sandboxCpus = cpus;
-    if (memory)
-        update.sandboxMemory = memory;
-    if (boostCpus)
-        update.sandboxBoostCpus = boostCpus;
-    if (boostMemory)
-        update.sandboxBoostMemory = boostMemory;
-    if (validMount)
-        update.sandboxImageWorkspaceMount = workspaceMount;
+    const update = {
+        ...(cpus ? { cpus } : {}),
+        ...(memory ? { memory } : {}),
+        ...(boostCpus || boostMemory
+            ? {
+                boost: {
+                    ...(boostCpus ? { cpus: boostCpus } : {}),
+                    ...(boostMemory ? { memory: boostMemory } : {}),
+                },
+            }
+            : {}),
+        ...(validMount ? { image: { workspaceMount: workspaceMount } } : {}),
+    };
     if (Object.keys(update).length === 0) {
         jsonRes(res, 400, { error: "No valid sandbox fields provided" });
         return;
     }
     try {
-        updateGlobalSettings(update);
+        updateGlobalSettings({ sandbox: update });
         jsonRes(res, 200, { ok: true });
     }
     catch (err) {
@@ -994,7 +996,12 @@ function serveWorkspaceFile(res, url, services, token) {
     }
     servePreviewFile(res, safe.absolute, { path: requestedPath }, "File not found");
 }
-function parseSkillFrontmatter(filePath) {
+/**
+ * Read skill metadata via the harness frontmatter parser (the owning module).
+ * The portal historically accepted frontmatter keys case-insensitively, so
+ * the lookup — not the parser — preserves that leniency.
+ */
+function readSkillMeta(filePath) {
     let text;
     try {
         text = readFileSync(filePath, "utf-8");
@@ -1002,31 +1009,18 @@ function parseSkillFrontmatter(filePath) {
     catch {
         return {};
     }
-    if (!text.startsWith("---"))
-        return {};
-    const end = text.indexOf("\n---", 3);
-    if (end < 0)
-        return {};
-    const block = text.slice(3, end);
+    const { values } = parseFrontmatter(text);
     const out = {};
-    for (const line of block.split("\n")) {
-        const colon = line.indexOf(":");
-        if (colon < 0)
-            continue;
-        const key = line.slice(0, colon).trim().toLowerCase();
-        let value = line.slice(colon + 1).trim();
-        if ((value.startsWith('"') && value.endsWith('"')) ||
-            (value.startsWith("'") && value.endsWith("'"))) {
-            value = value.slice(1, -1);
-        }
-        if (key === "name")
+    for (const [key, value] of Object.entries(values)) {
+        const normalized = key.toLowerCase();
+        if (normalized === "name")
             out.name = value;
-        if (key === "description")
+        if (normalized === "description")
             out.description = value;
     }
     return out;
 }
-function readSkillsFromDir(skillsDir, source) {
+export function readSkillsFromDir(skillsDir, source) {
     if (!existsSync(skillsDir))
         return [];
     const out = [];
@@ -1043,7 +1037,7 @@ function readSkillsFromDir(skillsDir, source) {
         const skillMd = join(skillsDir, entry.name, "SKILL.md");
         if (!existsSync(skillMd))
             continue;
-        const meta = parseSkillFrontmatter(skillMd);
+        const meta = readSkillMeta(skillMd);
         out.push({
             name: meta.name ?? entry.name,
             description: meta.description ?? "",
@@ -1104,75 +1098,56 @@ function serveSkillFile(res, url, services, token) {
 }
 // ── Events ─────────────────────────────────────────────────────────────────────
 const EVENTS_FILE_MAX_BYTES = 64 * 1024;
-function listAllEvents(workingDir) {
-    const dir = join(workingDir, "events");
-    if (!existsSync(dir))
-        return [];
-    let entries;
-    try {
-        entries = readdirSync(dir, { withFileTypes: true });
-    }
-    catch {
-        return [];
-    }
-    return entries
-        .filter((e) => e.isFile() && e.name.endsWith(".json"))
-        .map((e) => {
-        const filePath = join(dir, e.name);
-        let stats;
-        try {
-            stats = statSync(filePath);
-        }
-        catch {
-            return null;
-        }
-        let parsed = null;
-        try {
-            parsed = JSON.parse(readFileSync(filePath, "utf-8"));
-        }
-        catch {
-            // Keep entry; just omit parsed fields.
-        }
-        const meta = parsed && typeof parsed === "object" ? parsed : {};
-        // events.ts accepts `channelId` as a legacy alias for `conversationId`.
-        const conversationId = typeof meta.conversationId === "string"
-            ? meta.conversationId
-            : typeof meta.channelId === "string"
-                ? meta.channelId
-                : null;
+function stringOrNull(value) {
+    return typeof value === "string" ? value : null;
+}
+/**
+ * List events through the owning store (which normalizes the legacy
+ * `channelId` alias and keeps unparseable files visible with a null payload).
+ * Store payloads are unvalidated JSON, so field access stays defensive.
+ */
+export async function listAllEvents(store) {
+    const entries = await store.list();
+    return entries.map((entry) => {
+        const payload = entry.payload;
         return {
-            name: e.name,
-            size: stats.size,
-            mtimeMs: stats.mtimeMs,
-            type: typeof meta.type === "string" ? meta.type : null,
-            platform: typeof meta.platform === "string" ? meta.platform : null,
-            conversationId,
-            text: typeof meta.text === "string" ? meta.text : null,
-            at: typeof meta.at === "string" ? meta.at : null,
-            schedule: typeof meta.schedule === "string" ? meta.schedule : null,
-            timezone: typeof meta.timezone === "string" ? meta.timezone : null,
+            name: entry.filename,
+            size: entry.size,
+            mtimeMs: entry.mtimeMs,
+            type: stringOrNull(payload?.type),
+            platform: stringOrNull(payload?.platform),
+            conversationId: stringOrNull(payload?.conversationId),
+            text: stringOrNull(payload?.text),
+            at: stringOrNull(payload?.at),
+            schedule: stringOrNull(payload?.schedule),
+            timezone: stringOrNull(payload?.timezone),
         };
-    })
-        .filter((e) => e !== null)
-        .toSorted((a, b) => a.name.localeCompare(b.name));
+    });
 }
-function serveEventsList(res, services) {
-    const workingDir = requireAdminWorkingDir(res, services);
-    if (!workingDir)
+function requireAdminEventStore(res, services) {
+    if (!services.eventStore) {
+        jsonRes(res, 503, { error: "Working directory not available" });
+        return null;
+    }
+    return services.eventStore;
+}
+async function serveEventsList(res, services) {
+    const store = requireAdminEventStore(res, services);
+    if (!store)
         return;
-    jsonRes(res, 200, { events: listAllEvents(workingDir) });
+    jsonRes(res, 200, { events: await listAllEvents(store) });
 }
 /** Per-conversation listing — filter all events by conversationId match. */
-function serveConversationEventsList(res, url, services, token) {
+async function serveConversationEventsList(res, url, services, token) {
     const scope = resolveConversationFromQuery(url, token);
     if (scope.error) {
         jsonRes(res, 403, { error: scope.error });
         return;
     }
-    const workingDir = requireAdminWorkingDir(res, services);
-    if (!workingDir)
+    const store = requireAdminEventStore(res, services);
+    if (!store)
         return;
-    const events = listAllEvents(workingDir).filter((e) => e.conversationId === scope.conversationId);
+    const events = (await listAllEvents(store)).filter((e) => e.conversationId === scope.conversationId);
     jsonRes(res, 200, { conversationId: scope.conversationId, events });
 }
 function serveEventsFile(res, url, services) {
@@ -1212,7 +1187,7 @@ function serveEventsFile(res, url, services) {
     jsonRes(res, 200, { name, content: raw });
 }
 /** Delete a single event file scoped to the caller's conversation. */
-function serveConversationEventDelete(res, body, services, token) {
+async function serveConversationEventDelete(res, body, services, token) {
     const scope = resolveTargetConversation(body, token);
     if (scope.error) {
         jsonRes(res, 403, { error: scope.error });
@@ -1223,38 +1198,24 @@ function serveConversationEventDelete(res, body, services, token) {
         jsonRes(res, 400, { error: "Invalid name" });
         return;
     }
-    const workingDir = requireAdminWorkingDir(res, services);
-    if (!workingDir)
+    const store = requireAdminEventStore(res, services);
+    if (!store)
         return;
-    const filePath = join(workingDir, "events", name);
-    let raw;
+    let payload;
     try {
-        raw = readFileSync(filePath, "utf-8");
+        payload = (await store.read(name)).payload;
     }
     catch {
         jsonRes(res, 404, { error: "Event not found" });
         return;
     }
-    let parsed = {};
-    try {
-        const j = JSON.parse(raw);
-        if (j && typeof j === "object")
-            parsed = j;
-    }
-    catch {
-        // Malformed events cannot be associated with a conversation below.
-    }
-    const eventConvId = typeof parsed.conversationId === "string"
-        ? parsed.conversationId
-        : typeof parsed.channelId === "string"
-            ? parsed.channelId
-            : null;
-    if (eventConvId !== scope.conversationId) {
+    // The store normalizes the legacy `channelId` alias into `conversationId`.
+    if (payload?.conversationId !== scope.conversationId) {
         jsonRes(res, 403, { error: "Event does not belong to this conversation." });
         return;
     }
     try {
-        rmSync(filePath, { force: true });
+        await store.delete(name);
         jsonRes(res, 200, { ok: true });
     }
     catch (err) {
@@ -1578,7 +1539,7 @@ function renderAdminPage(token) {
     }
 
     function renderSettings(data) {
-      const thinking = ['off','minimal','low','medium','high','xhigh'];
+      const thinking = ['off','minimal','low','medium','high','xhigh','max'];
       const thinkingOpts = thinking.map((t) =>
         '<option value="' + t + '"' + (data.thinkingLevel === t ? ' selected' : '') + '>' + t + '</option>'
       ).join('');
@@ -2130,7 +2091,7 @@ function renderAdminPage(token) {
     }
 
     function renderGlobalSettings(data) {
-      const thinking = ['off','minimal','low','medium','high','xhigh'];
+      const thinking = ['off','minimal','low','medium','high','xhigh','max'];
       const thinkingOpts = thinking.map((t) =>
         '<option value="' + t + '"' + (data.thinkingLevel === t ? ' selected' : '') + '>' + t + '</option>'
       ).join('');