@geminixiang/mikan 1.0.0-beta.2 → 1.0.0-beta.21

package/dist/adapters/github/types.d.ts

@@ -0,0 +1,350 @@
+import type { ConversationEvent } from "../../adapter.js";
+import type { GcpTokenProvider } from "./gcp-auth.js";
+export interface GithubEvent extends ConversationEvent {
+    type: "message" | "issue";
+    userName?: string;
+}
+export interface GithubBotConfig {
+    appId: string;
+    /** PEM-encoded GitHub App private key. */
+    privateKey: string;
+    installationId: string;
+    /** `owner/repo` entries to watch; empty = all installation repositories. */
+    repos: string[];
+    pollIntervalMs: number;
+    workingDir: string;
+    /**
+     * Where the poll watermark state (baseline + seen ids) is persisted. Lives
+     * under the host-only state dir: the workspace dir can be mounted into
+     * sandboxes, and sandboxed code must not be able to clear dedup state and
+     * re-trigger runs.
+     */
+    syncStatePath: string;
+    /**
+     * Present when the host has GCP credentials (GOOGLE_APPLICATION_CREDENTIALS):
+     * lets github_checks fetch Cloud Build logs. Credentials never enter the
+     * sandbox; absent, external-CI checks degrade to guidance text.
+     */
+    cloudBuild?: {
+        tokenProvider: GcpTokenProvider;
+        /** Project used when a check's details_url does not name one. */
+        projectFallback?: string;
+    };
+}
+/** Persisted per-repo poll watermark (DESIGN.md § Event source). */
+interface GithubRepoSyncState {
+    /** Comments/issues created before this ISO instant never trigger. */
+    baseline: string;
+    /** Newest updated_at seen; polls fetch from (cursor - overlap). */
+    cursor: string;
+    seenComments: number[];
+    seenIssues: number[];
+    /** Optional so state files written before review-comment polling still load. */
+    seenReviewComments?: number[];
+}
+export interface GithubSyncState {
+    repos: Record<string, GithubRepoSyncState>;
+}
+export interface GithubRepoRef {
+    owner: string;
+    repo: string;
+}
+export interface GithubConversationRef extends GithubRepoRef {
+    number: number;
+}
+interface GithubUser {
+    login: string;
+    type: string;
+}
+export interface GithubIssue {
+    id: number;
+    number: number;
+    title: string;
+    body: string | null;
+    user: GithubUser;
+    created_at: string;
+    updated_at: string;
+    pull_request?: object;
+    /** open | closed */
+    state?: string;
+    labels?: {
+        name: string;
+    }[];
+    assignees?: {
+        login: string;
+    }[];
+}
+export interface GithubIssueComment {
+    id: number;
+    body: string;
+    user: GithubUser;
+    created_at: string;
+    updated_at: string;
+    /** API URL of the parent issue, e.g. …/repos/o/r/issues/42 */
+    issue_url: string;
+}
+/** An inline PR review comment (a comment on a diff line). */
+export interface GithubReviewComment {
+    id: number;
+    body: string;
+    user: GithubUser;
+    created_at: string;
+    updated_at: string;
+    /** API URL of the parent PR, e.g. …/repos/o/r/pulls/42 */
+    pull_request_url: string;
+    /** File the comment is anchored to. */
+    path: string;
+    /** Line in the diff's right side; null when the anchor is outdated. */
+    line: number | null;
+    /** The diff excerpt the comment is anchored to. */
+    diff_hunk: string;
+    /** Set on replies: the id of the thread's root comment. */
+    in_reply_to_id?: number;
+}
+export interface GithubRepository {
+    name: string;
+    owner: GithubUser;
+}
+export interface GithubRepositoryDetails {
+    default_branch: string;
+}
+export interface GithubCollaboratorPermission {
+    /** Legacy field: admin | write | read | none (maintain→write, triage→read). */
+    permission: string;
+    /** Granular assigned role (admin/maintain/write/triage/read or a custom role). */
+    role_name?: string;
+}
+export interface GithubPullRequest {
+    number: number;
+    html_url: string;
+    /** head.repo is null when the fork a PR came from was deleted. */
+    head?: {
+        ref: string;
+        sha: string;
+        repo?: {
+            full_name?: string;
+        } | null;
+    };
+    base?: {
+        ref: string;
+    };
+    title?: string;
+    body?: string | null;
+    /** open | closed */
+    state?: string;
+    draft?: boolean;
+    merged?: boolean;
+    mergeable_state?: string;
+    changed_files?: number;
+    additions?: number;
+    deletions?: number;
+    user?: GithubUser;
+}
+/** One row of GET /pulls/{n}/files. */
+export interface GithubPullRequestFile {
+    filename: string;
+    /** added | removed | modified | renamed | … */
+    status: string;
+    additions: number;
+    deletions: number;
+}
+/** One submitted review of GET /pulls/{n}/reviews. */
+export interface GithubPullRequestReview {
+    id: number;
+    user: GithubUser;
+    body: string | null;
+    /** APPROVED | CHANGES_REQUESTED | COMMENTED | DISMISSED | PENDING */
+    state: string;
+    submitted_at?: string;
+}
+export interface GithubCheckRun {
+    /** Check-run id; for GitHub Actions this doubles as the job id (log fetch). */
+    id: number;
+    name: string;
+    /** queued | in_progress | completed */
+    status: string;
+    /** success | failure | neutral | cancelled | skipped | timed_out | action_required | null while running */
+    conclusion: string | null;
+    html_url: string | null;
+    /** The app that reported the check (github-actions vs external CI). */
+    app?: {
+        slug?: string;
+    } | null;
+    /** Whatever the reporting app posted about the run. */
+    output?: {
+        title?: string | null;
+        summary?: string | null;
+    } | null;
+    /** The reporting app's own id for the run; Cloud Build puts the build UUID here. */
+    external_id?: string | null;
+    /** The reporting app's own results page; Cloud Build encodes the GCP project here. */
+    details_url?: string | null;
+}
+/** Permission subset requestable on a scoped installation token. */
+export type GithubTokenPermissions = Partial<Record<"contents" | "pull_requests" | "issues", "read" | "write">>;
+export type GithubReactionContent = "+1" | "-1" | "laugh" | "confused" | "heart" | "hooray" | "rocket" | "eyes";
+export interface CloneRepoOptions {
+    /** HTTPS remote, e.g. https://github.com/owner/repo.git (no credentials). */
+    url: string;
+    /** Destination directory (the conversation dir's `repo/`). */
+    dir: string;
+    /** Ephemeral scoped installation token; used per-invocation, never stored. */
+    token: string;
+    botLogin: string;
+    botEmail: string;
+    /** When the conversation is a PR: fetch and check out its head. */
+    prNumber?: number;
+    /**
+     * The PR's head branch name when it lives in this repo (not a fork): the
+     * checkout is named after it so committing there + github_pr updates the
+     * PR in place. Absent (fork/unknown), the checkout falls back to pr-<n>.
+     */
+    prHeadBranch?: string;
+}
+export interface PushBranchOptions {
+    dir: string;
+    branch: string;
+    token: string;
+}
+export interface SyncRepoOptions {
+    dir: string;
+    /** Ephemeral contents:read token; used per-invocation, never stored. */
+    token: string;
+    /** Explicit branch to fetch; wins over prNumber/defaultBranch. */
+    branch?: string;
+    /** PR conversations: fetch pull/<n>/head into the local PR checkout. */
+    prNumber?: number;
+    /** Same-repo PR head name; the local checkout target. Fallback: pr-<n>. */
+    prHeadBranch?: string;
+    /** Fallback target when neither branch nor prNumber applies. */
+    defaultBranch?: string;
+}
+export interface SyncRepoResult {
+    /** Local branch the fetch targets (the PR head name, pr-<n>, or the branch). */
+    target: string;
+    fetchedSha: string;
+    /** True when the checkout was moved to the fetched head. */
+    updatedCheckout: boolean;
+    /** Working tree had uncommitted changes (checkout left alone). */
+    dirty: boolean;
+    currentBranch: string;
+    /** Bot-committed (agent-made) commits on the target that origin lacks. */
+    localCommits: number;
+}
+export interface GithubClientOptions {
+    appId: string;
+    privateKey: string;
+    installationId: string;
+    /** Override the API root for tests; defaults to https://api.github.com */
+    baseUrl?: string;
+    fetchImpl?: typeof fetch;
+}
+/** Arguments for the host-side `github_pr` tool. */
+export interface GithubPrRequest {
+    /** Local branch in the conversation's ./repo clone; must match pi/<name>. */
+    branch: string;
+    title: string;
+    body?: string;
+    /** Target branch; defaults to the repository's default branch. */
+    base?: string;
+    draft?: boolean;
+}
+export interface GithubPrResult {
+    number: number;
+    url: string;
+    /** True when the branch already had an open PR that this push updated. */
+    updatedExisting?: boolean;
+}
+/** Normalized check-run row for the host-side `github_checks` tool. */
+export interface GithubCheckSummary {
+    /** Check-run id; for GitHub Actions checks it is also the job id for log fetch. */
+    id: number;
+    name: string;
+    /** queued | in_progress | completed */
+    status: string;
+    /** success | failure | … ; null while the run is still in progress */
+    conclusion: string | null;
+    url: string | null;
+    /** Slug of the reporting app; "github-actions" checks have fetchable logs. */
+    appSlug: string | null;
+    /** The reporting app's own summary of the run, when it posted one. */
+    outputSummary: string | null;
+    /** The reporting app's run id (Cloud Build: the build UUID). */
+    externalId: string | null;
+    /** True when this run's log is fetchable via build_id (Cloud Build + GCP creds). */
+    buildLogAvailable?: boolean;
+}
+/** Arguments for the host-side `github_read` tool. */
+export interface GithubReadRequest {
+    action: "pr" | "pr_files" | "pr_reviews" | "issue" | "comments" | "list";
+    /** Issue/PR number; defaults to the conversation's own. */
+    number?: number;
+    /** list only: open | closed | all (default open). */
+    state?: string;
+    /** list only: comma-separated label names. */
+    labels?: string;
+    /** list only: filter by author login. */
+    creator?: string;
+}
+/** Typed payload of one `github_read` action; the tool renders it. */
+export type GithubReadResult = {
+    kind: "pr";
+    pr: GithubPullRequest;
+} | {
+    kind: "pr_files";
+    files: GithubPullRequestFile[];
+} | {
+    kind: "pr_reviews";
+    reviews: GithubPullRequestReview[];
+    threads: GithubReviewComment[];
+} | {
+    kind: "issue";
+    issue: GithubIssue;
+} | {
+    kind: "comments";
+    comments: GithubIssueComment[];
+} | {
+    kind: "list";
+    issues: GithubIssue[];
+};
+/** Arguments for the host-side `github_issue` tool. Deliberately a closed
+ *  action set: lock/delete/transfer are not offered at all. */
+export interface GithubIssueRequest {
+    action: "add_labels" | "remove_label" | "add_assignees" | "remove_assignees" | "close" | "reopen";
+    /** Issue/PR number; defaults to the conversation's own (triage may target others). */
+    number?: number;
+    /** add_labels */
+    labels?: string[];
+    /** remove_label */
+    label?: string;
+    /** add_assignees / remove_assignees */
+    assignees?: string[];
+    /** close */
+    state_reason?: "completed" | "not_planned";
+}
+/**
+ * Host-side GitHub operations for github_* tools. Wired in main.ts over the
+ * GitHub bot; tokens stay host-side. Consumed by `createGithubToolPack`.
+ */
+export interface PlatformGithubOps {
+    /** Push a prepared pi/* branch and open (or update) a pull request. */
+    pushAndCreatePr(conversationId: string, request: GithubPrRequest): Promise<GithubPrResult>;
+    /** CI check runs for a branch, or for the conversation's PR head when omitted. */
+    getChecks(conversationId: string, branch?: string): Promise<GithubCheckSummary[]>;
+    /** Log text of one CI job (an Actions check-run id), tail-truncated. */
+    getJobLog(conversationId: string, jobId: number): Promise<string>;
+    /** Log text of one Cloud Build run (a [build …] uuid), tail-truncated. */
+    getBuildLog(conversationId: string, buildId: string): Promise<string>;
+    /** Reply inside one inline review thread of the conversation's PR. */
+    replyToReviewThread(conversationId: string, commentId: number, body: string): Promise<{
+        url: string;
+    }>;
+    /** Refresh the conversation's ./repo clone; returns a human-readable report. */
+    syncRepo(conversationId: string, branch?: string): Promise<string>;
+    /** Read PR/issue metadata the clone cannot provide; same repo only. */
+    readGithub(conversationId: string, request: GithubReadRequest): Promise<GithubReadResult>;
+    /** Label/assignee/state management on this repo's issues; returns a report. */
+    manageIssue(conversationId: string, request: GithubIssueRequest): Promise<string>;
+}
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/adapters/github/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/adapters/github/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtD,MAAM,WAAW,WAAY,SAAQ,iBAAiB;IACpD,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,4EAA4E;IAC5E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,UAAU,CAAC,EAAE;QACX,aAAa,EAAE,gBAAgB,CAAC;QAChC,iEAAiE;QACjE,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AAED,oEAAoE;AACpE,UAAU,mBAAmB;IAC3B,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,gFAAgF;IAChF,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,qBAAsB,SAAQ,aAAa;IAC1D,MAAM,EAAE,MAAM,CAAC;CAChB;AAID,UAAU,UAAU;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,UAAU,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,8DAA8D;AAC9D,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,gBAAgB,EAAE,MAAM,CAAC;IACzB,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,4BAA4B;IAC3C,+EAA+E;IAC/E,UAAU,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,IAAI,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE;YAAE,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,CAAC;IAC1E,IAAI,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,oBAAoB;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB;AAED,uCAAuC;AACvC,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,sDAAsD;AACtD,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,qEAAqE;IACrE,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,+EAA+E;IAC/E,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,2GAA2G;IAC3G,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,uEAAuE;IACvE,GAAG,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/B,uDAAuD;IACvD,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACnE,oFAAoF;IACpF,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,sFAAsF;IACtF,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,oEAAoE;AACpE,MAAM,MAAM,sBAAsB,GAAG,OAAO,CAC1C,MAAM,CAAC,UAAU,GAAG,eAAe,GAAG,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,CAClE,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAC7B,IAAI,GACJ,IAAI,GACJ,OAAO,GACP,UAAU,GACV,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,MAAM,CAAC;AAEX,MAAM,WAAW,gBAAgB;IAC/B,6EAA6E;IAC7E,GAAG,EAAE,MAAM,CAAC;IACZ,8DAA8D;IAC9D,GAAG,EAAE,MAAM,CAAC;IACZ,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,wEAAwE;IACxE,KAAK,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gEAAgE;IAChE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,gFAAgF;IAChF,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,eAAe,EAAE,OAAO,CAAC;IACzB,kEAAkE;IAClE,KAAK,EAAE,OAAO,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAID,oDAAoD;AACpD,MAAM,WAAW,eAAe;IAC9B,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,0EAA0E;IAC1E,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IACjC,mFAAmF;IACnF,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,8EAA8E;IAC9E,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,sEAAsE;IACtE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gEAAgE;IAChE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,oFAAoF;IACpF,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,sDAAsD;AACtD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,IAAI,GAAG,UAAU,GAAG,YAAY,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,CAAC;IACzE,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,sEAAsE;AACtE,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,iBAAiB,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,qBAAqB,EAAE,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,uBAAuB,EAAE,CAAC;IAAC,OAAO,EAAE,mBAAmB,EAAE,CAAA;CAAE,GAC1F;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,WAAW,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,kBAAkB,EAAE,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,EAAE,CAAA;CAAE,CAAC;AAE5C;+DAC+D;AAC/D,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,YAAY,GAAG,cAAc,GAAG,eAAe,GAAG,kBAAkB,GAAG,OAAO,GAAG,QAAQ,CAAC;IAClG,sFAAsF;IACtF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,mBAAmB;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,YAAY;IACZ,YAAY,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC;CAC5C;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,uEAAuE;IACvE,eAAe,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3F,kFAAkF;IAClF,SAAS,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAClF,wEAAwE;IACxE,SAAS,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClE,0EAA0E;IAC1E,WAAW,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACtE,sEAAsE;IACtE,mBAAmB,CACjB,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5B,gFAAgF;IAChF,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACnE,uEAAuE;IACvE,UAAU,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC1F,+EAA+E;IAC/E,WAAW,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACnF"}

package/dist/adapters/github/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/adapters/github/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/adapters/github/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { ConversationEvent } from \"../../adapter.js\";\nimport type { GcpTokenProvider } from \"./gcp-auth.js\";\n\nexport interface GithubEvent extends ConversationEvent {\n  type: \"message\" | \"issue\";\n  userName?: string;\n}\n\nexport interface GithubBotConfig {\n  appId: string;\n  /** PEM-encoded GitHub App private key. */\n  privateKey: string;\n  installationId: string;\n  /** `owner/repo` entries to watch; empty = all installation repositories. */\n  repos: string[];\n  pollIntervalMs: number;\n  workingDir: string;\n  /**\n   * Where the poll watermark state (baseline + seen ids) is persisted. Lives\n   * under the host-only state dir: the workspace dir can be mounted into\n   * sandboxes, and sandboxed code must not be able to clear dedup state and\n   * re-trigger runs.\n   */\n  syncStatePath: string;\n  /**\n   * Present when the host has GCP credentials (GOOGLE_APPLICATION_CREDENTIALS):\n   * lets github_checks fetch Cloud Build logs. Credentials never enter the\n   * sandbox; absent, external-CI checks degrade to guidance text.\n   */\n  cloudBuild?: {\n    tokenProvider: GcpTokenProvider;\n    /** Project used when a check's details_url does not name one. */\n    projectFallback?: string;\n  };\n}\n\n/** Persisted per-repo poll watermark (DESIGN.md § Event source). */\ninterface GithubRepoSyncState {\n  /** Comments/issues created before this ISO instant never trigger. */\n  baseline: string;\n  /** Newest updated_at seen; polls fetch from (cursor - overlap). */\n  cursor: string;\n  seenComments: number[];\n  seenIssues: number[];\n  /** Optional so state files written before review-comment polling still load. */\n  seenReviewComments?: number[];\n}\n\nexport interface GithubSyncState {\n  repos: Record<string, GithubRepoSyncState>;\n}\n\nexport interface GithubRepoRef {\n  owner: string;\n  repo: string;\n}\n\nexport interface GithubConversationRef extends GithubRepoRef {\n  number: number;\n}\n\n// ── GitHub REST payload shapes (only the fields mikan reads) ─────────────────\n\ninterface GithubUser {\n  login: string;\n  type: string;\n}\n\nexport interface GithubIssue {\n  id: number;\n  number: number;\n  title: string;\n  body: string | null;\n  user: GithubUser;\n  created_at: string;\n  updated_at: string;\n  pull_request?: object;\n  /** open | closed */\n  state?: string;\n  labels?: { name: string }[];\n  assignees?: { login: string }[];\n}\n\nexport interface GithubIssueComment {\n  id: number;\n  body: string;\n  user: GithubUser;\n  created_at: string;\n  updated_at: string;\n  /** API URL of the parent issue, e.g. …/repos/o/r/issues/42 */\n  issue_url: string;\n}\n\n/** An inline PR review comment (a comment on a diff line). */\nexport interface GithubReviewComment {\n  id: number;\n  body: string;\n  user: GithubUser;\n  created_at: string;\n  updated_at: string;\n  /** API URL of the parent PR, e.g. …/repos/o/r/pulls/42 */\n  pull_request_url: string;\n  /** File the comment is anchored to. */\n  path: string;\n  /** Line in the diff's right side; null when the anchor is outdated. */\n  line: number | null;\n  /** The diff excerpt the comment is anchored to. */\n  diff_hunk: string;\n  /** Set on replies: the id of the thread's root comment. */\n  in_reply_to_id?: number;\n}\n\nexport interface GithubRepository {\n  name: string;\n  owner: GithubUser;\n}\n\nexport interface GithubRepositoryDetails {\n  default_branch: string;\n}\n\nexport interface GithubCollaboratorPermission {\n  /** Legacy field: admin | write | read | none (maintain→write, triage→read). */\n  permission: string;\n  /** Granular assigned role (admin/maintain/write/triage/read or a custom role). */\n  role_name?: string;\n}\n\nexport interface GithubPullRequest {\n  number: number;\n  html_url: string;\n  /** head.repo is null when the fork a PR came from was deleted. */\n  head?: { ref: string; sha: string; repo?: { full_name?: string } | null };\n  base?: { ref: string };\n  title?: string;\n  body?: string | null;\n  /** open | closed */\n  state?: string;\n  draft?: boolean;\n  merged?: boolean;\n  mergeable_state?: string;\n  changed_files?: number;\n  additions?: number;\n  deletions?: number;\n  user?: GithubUser;\n}\n\n/** One row of GET /pulls/{n}/files. */\nexport interface GithubPullRequestFile {\n  filename: string;\n  /** added | removed | modified | renamed | … */\n  status: string;\n  additions: number;\n  deletions: number;\n}\n\n/** One submitted review of GET /pulls/{n}/reviews. */\nexport interface GithubPullRequestReview {\n  id: number;\n  user: GithubUser;\n  body: string | null;\n  /** APPROVED | CHANGES_REQUESTED | COMMENTED | DISMISSED | PENDING */\n  state: string;\n  submitted_at?: string;\n}\n\nexport interface GithubCheckRun {\n  /** Check-run id; for GitHub Actions this doubles as the job id (log fetch). */\n  id: number;\n  name: string;\n  /** queued | in_progress | completed */\n  status: string;\n  /** success | failure | neutral | cancelled | skipped | timed_out | action_required | null while running */\n  conclusion: string | null;\n  html_url: string | null;\n  /** The app that reported the check (github-actions vs external CI). */\n  app?: { slug?: string } | null;\n  /** Whatever the reporting app posted about the run. */\n  output?: { title?: string | null; summary?: string | null } | null;\n  /** The reporting app's own id for the run; Cloud Build puts the build UUID here. */\n  external_id?: string | null;\n  /** The reporting app's own results page; Cloud Build encodes the GCP project here. */\n  details_url?: string | null;\n}\n\n/** Permission subset requestable on a scoped installation token. */\nexport type GithubTokenPermissions = Partial<\n  Record<\"contents\" | \"pull_requests\" | \"issues\", \"read\" | \"write\">\n>;\n\nexport type GithubReactionContent =\n  | \"+1\"\n  | \"-1\"\n  | \"laugh\"\n  | \"confused\"\n  | \"heart\"\n  | \"hooray\"\n  | \"rocket\"\n  | \"eyes\";\n\nexport interface CloneRepoOptions {\n  /** HTTPS remote, e.g. https://github.com/owner/repo.git (no credentials). */\n  url: string;\n  /** Destination directory (the conversation dir's `repo/`). */\n  dir: string;\n  /** Ephemeral scoped installation token; used per-invocation, never stored. */\n  token: string;\n  botLogin: string;\n  botEmail: string;\n  /** When the conversation is a PR: fetch and check out its head. */\n  prNumber?: number;\n  /**\n   * The PR's head branch name when it lives in this repo (not a fork): the\n   * checkout is named after it so committing there + github_pr updates the\n   * PR in place. Absent (fork/unknown), the checkout falls back to pr-<n>.\n   */\n  prHeadBranch?: string;\n}\n\nexport interface PushBranchOptions {\n  dir: string;\n  branch: string;\n  token: string;\n}\n\nexport interface SyncRepoOptions {\n  dir: string;\n  /** Ephemeral contents:read token; used per-invocation, never stored. */\n  token: string;\n  /** Explicit branch to fetch; wins over prNumber/defaultBranch. */\n  branch?: string;\n  /** PR conversations: fetch pull/<n>/head into the local PR checkout. */\n  prNumber?: number;\n  /** Same-repo PR head name; the local checkout target. Fallback: pr-<n>. */\n  prHeadBranch?: string;\n  /** Fallback target when neither branch nor prNumber applies. */\n  defaultBranch?: string;\n}\n\nexport interface SyncRepoResult {\n  /** Local branch the fetch targets (the PR head name, pr-<n>, or the branch). */\n  target: string;\n  fetchedSha: string;\n  /** True when the checkout was moved to the fetched head. */\n  updatedCheckout: boolean;\n  /** Working tree had uncommitted changes (checkout left alone). */\n  dirty: boolean;\n  currentBranch: string;\n  /** Bot-committed (agent-made) commits on the target that origin lacks. */\n  localCommits: number;\n}\n\nexport interface GithubClientOptions {\n  appId: string;\n  privateKey: string;\n  installationId: string;\n  /** Override the API root for tests; defaults to https://api.github.com */\n  baseUrl?: string;\n  fetchImpl?: typeof fetch;\n}\n\n// ── Host-side tool contracts (capability pack, not messaging core) ───────────\n\n/** Arguments for the host-side `github_pr` tool. */\nexport interface GithubPrRequest {\n  /** Local branch in the conversation's ./repo clone; must match pi/<name>. */\n  branch: string;\n  title: string;\n  body?: string;\n  /** Target branch; defaults to the repository's default branch. */\n  base?: string;\n  draft?: boolean;\n}\n\nexport interface GithubPrResult {\n  number: number;\n  url: string;\n  /** True when the branch already had an open PR that this push updated. */\n  updatedExisting?: boolean;\n}\n\n/** Normalized check-run row for the host-side `github_checks` tool. */\nexport interface GithubCheckSummary {\n  /** Check-run id; for GitHub Actions checks it is also the job id for log fetch. */\n  id: number;\n  name: string;\n  /** queued | in_progress | completed */\n  status: string;\n  /** success | failure | … ; null while the run is still in progress */\n  conclusion: string | null;\n  url: string | null;\n  /** Slug of the reporting app; \"github-actions\" checks have fetchable logs. */\n  appSlug: string | null;\n  /** The reporting app's own summary of the run, when it posted one. */\n  outputSummary: string | null;\n  /** The reporting app's run id (Cloud Build: the build UUID). */\n  externalId: string | null;\n  /** True when this run's log is fetchable via build_id (Cloud Build + GCP creds). */\n  buildLogAvailable?: boolean;\n}\n\n/** Arguments for the host-side `github_read` tool. */\nexport interface GithubReadRequest {\n  action: \"pr\" | \"pr_files\" | \"pr_reviews\" | \"issue\" | \"comments\" | \"list\";\n  /** Issue/PR number; defaults to the conversation's own. */\n  number?: number;\n  /** list only: open | closed | all (default open). */\n  state?: string;\n  /** list only: comma-separated label names. */\n  labels?: string;\n  /** list only: filter by author login. */\n  creator?: string;\n}\n\n/** Typed payload of one `github_read` action; the tool renders it. */\nexport type GithubReadResult =\n  | { kind: \"pr\"; pr: GithubPullRequest }\n  | { kind: \"pr_files\"; files: GithubPullRequestFile[] }\n  | { kind: \"pr_reviews\"; reviews: GithubPullRequestReview[]; threads: GithubReviewComment[] }\n  | { kind: \"issue\"; issue: GithubIssue }\n  | { kind: \"comments\"; comments: GithubIssueComment[] }\n  | { kind: \"list\"; issues: GithubIssue[] };\n\n/** Arguments for the host-side `github_issue` tool. Deliberately a closed\n *  action set: lock/delete/transfer are not offered at all. */\nexport interface GithubIssueRequest {\n  action: \"add_labels\" | \"remove_label\" | \"add_assignees\" | \"remove_assignees\" | \"close\" | \"reopen\";\n  /** Issue/PR number; defaults to the conversation's own (triage may target others). */\n  number?: number;\n  /** add_labels */\n  labels?: string[];\n  /** remove_label */\n  label?: string;\n  /** add_assignees / remove_assignees */\n  assignees?: string[];\n  /** close */\n  state_reason?: \"completed\" | \"not_planned\";\n}\n\n/**\n * Host-side GitHub operations for github_* tools. Wired in main.ts over the\n * GitHub bot; tokens stay host-side. Consumed by `createGithubToolPack`.\n */\nexport interface PlatformGithubOps {\n  /** Push a prepared pi/* branch and open (or update) a pull request. */\n  pushAndCreatePr(conversationId: string, request: GithubPrRequest): Promise<GithubPrResult>;\n  /** CI check runs for a branch, or for the conversation's PR head when omitted. */\n  getChecks(conversationId: string, branch?: string): Promise<GithubCheckSummary[]>;\n  /** Log text of one CI job (an Actions check-run id), tail-truncated. */\n  getJobLog(conversationId: string, jobId: number): Promise<string>;\n  /** Log text of one Cloud Build run (a [build …] uuid), tail-truncated. */\n  getBuildLog(conversationId: string, buildId: string): Promise<string>;\n  /** Reply inside one inline review thread of the conversation's PR. */\n  replyToReviewThread(\n    conversationId: string,\n    commentId: number,\n    body: string,\n  ): Promise<{ url: string }>;\n  /** Refresh the conversation's ./repo clone; returns a human-readable report. */\n  syncRepo(conversationId: string, branch?: string): Promise<string>;\n  /** Read PR/issue metadata the clone cannot provide; same repo only. */\n  readGithub(conversationId: string, request: GithubReadRequest): Promise<GithubReadResult>;\n  /** Label/assignee/state management on this repo's issues; returns a report. */\n  manageIssue(conversationId: string, request: GithubIssueRequest): Promise<string>;\n}\n"]}

package/dist/adapters/intake.d.ts

@@ -1,11 +1,22 @@
 import type { ConversationEvent } from "../adapter.js";
-import type { MessageIntakeOptions } from "./types.js";
+import type { MessageIntakeOptions, MessageIntakeOutcome } from "./types.js";
+/**
+ * Recognize a magic word: a highest-priority chat control phrase that bypasses
+ * trigger policy and queueing (see CONTEXT.md). One grammar for every
+ * platform: optional leading slash, optional `@botname` suffix, any case.
+ */
+export declare function matchMagicWord(text: string): "stop" | null;
 /**
  * Shared message ingress pipeline for platform adapters.
  *
- * Platform adapters still normalize SDK events and handle platform-specific stop
- * semantics. This module owns the common trigger/log/attachment/queue/handler
- * ordering for messages that may start an agent run.
+ * Platform adapters normalize SDK events; this module owns the ordering for
+ * messages that may start an agent run:
+ *
+ *   magic word → trigger policy → attachments → log → busy policy → queue → dispatch
+ *
+ * Magic words are matched before the trigger gate — `stop` must never wait on
+ * an auto-reply judgment or queue behind a running agent turn. Adapters state
+ * platform policy as data (`magicWord`, `busyPolicy`) instead of callbacks.
  */
-export declare function processMessageIntake<TEvent extends ConversationEvent>(options: MessageIntakeOptions<TEvent>): Promise<void>;
+export declare function processMessageIntake<TEvent extends ConversationEvent>(options: MessageIntakeOptions<TEvent>): Promise<MessageIntakeOutcome>;
 //# sourceMappingURL=intake.d.ts.map

package/dist/adapters/intake.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"intake.d.ts","sourceRoot":"","sources":["../../src/adapters/intake.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,SAAS,iBAAiB,EACzE,OAAO,EAAE,oBAAoB,CAAC,MAAM,CAAC,GACpC,OAAO,CAAC,IAAI,CAAC,CAqCf"}
+{"version":3,"file":"intake.d.ts","sourceRoot":"","sources":["../../src/adapters/intake.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAIvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAE7E;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE1D;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,SAAS,iBAAiB,EACzE,OAAO,EAAE,oBAAoB,CAAC,MAAM,CAAC,GACpC,OAAO,CAAC,oBAAoB,CAAC,CAoD/B"}

package/dist/adapters/intake.js

@@ -1,42 +1,99 @@
+import { formatAlreadyWorking, formatNothingRunning } from "../platform-messages.js";
 import { evaluateAutoReplyPolicy } from "../trigger.js";
+import { resolveOnlyScopedStopTarget, resolveStopTarget } from "./shared.js";
+/**
+ * Recognize a magic word: a highest-priority chat control phrase that bypasses
+ * trigger policy and queueing (see CONTEXT.md). One grammar for every
+ * platform: optional leading slash, optional `@botname` suffix, any case.
+ */
+export function matchMagicWord(text) {
+    return /^\/?stop(?:@\w+)?$/i.test(text.trim()) ? "stop" : null;
+}
 /**
  * Shared message ingress pipeline for platform adapters.
  *
- * Platform adapters still normalize SDK events and handle platform-specific stop
- * semantics. This module owns the common trigger/log/attachment/queue/handler
- * ordering for messages that may start an agent run.
+ * Platform adapters normalize SDK events; this module owns the ordering for
+ * messages that may start an agent run:
+ *
+ *   magic word → trigger policy → attachments → log → busy policy → queue → dispatch
+ *
+ * Magic words are matched before the trigger gate — `stop` must never wait on
+ * an auto-reply judgment or queue behind a running agent turn. Adapters state
+ * platform policy as data (`magicWord`, `busyPolicy`) instead of callbacks.
  */
 export async function processMessageIntake(options) {
+    if (matchMagicWord(options.magicWord.text ?? options.eventBase.text) === "stop") {
+        options.log?.({ ...options.logEntryBase, attachments: [] });
+        await handleStopMagicWord(options);
+        return "magic-word";
+    }
     const triggerResult = options.isAutoReplyCandidate
         ? await evaluateAutoReplyPolicy({ event: options.eventBase, workingDir: options.workingDir })
         : { trigger: true, reason: "addressed" };
     if (!triggerResult.trigger) {
         options.log?.({ ...options.logEntryBase, attachments: [] });
-        options.onNotTriggered?.();
-        return;
+        return "not-triggered";
+    }
+    function prepareEvent(attachments) {
+        const event = { ...options.eventBase, attachments };
+        options.log?.({ ...options.logEntryBase, attachments });
+        return event;
+    }
+    async function rejectedWhileBusy() {
+        const sessionKey = options.eventBase.sessionKey ?? options.eventBase.conversationId;
+        if (!options.handler.isRunning(sessionKey))
+            return false;
+        await options.bot.postMessage(options.eventBase.conversationId, formatAlreadyWorking(options.bot, "/stop"));
+        return true;
+    }
+    function dispatch(event) {
+        const context = options.createContext(event);
+        return options.handler.handleEvent(event, options.bot, context);
     }
     if (options.deferAttachmentsUntilRun) {
+        // Busy rejection happens inside the queued work here, so the outcome is
+        // already "enqueued" by the time it is evaluated.
         options.enqueue(options.queueKey, async () => {
-            const attachments = await options.processAttachments();
-            const event = { ...options.eventBase, attachments };
-            options.log?.({ ...options.logEntryBase, attachments });
-            if (options.beforeEnqueue && !(await options.beforeEnqueue(event))) {
+            const event = prepareEvent(await options.processAttachments());
+            if (options.busyPolicy === "reject" && (await rejectedWhileBusy()))
                 return;
-            }
-            const context = options.createContext(event);
-            return options.handler.handleEvent(event, options.bot, context);
+            return dispatch(event);
         });
-        return;
+        return "enqueued";
+    }
+    const event = prepareEvent(await options.processAttachments());
+    if (options.busyPolicy === "reject" && (await rejectedWhileBusy()))
+        return "rejected-busy";
+    options.enqueue(options.queueKey, () => dispatch(event));
+    return "enqueued";
+}
+/**
+ * Resolve and stop the session a magic-word `stop` targets. When nothing is
+ * running, reply only if the message addressed the bot — an unaddressed
+ * "stop" in a busy channel should never make the bot pipe up.
+ */
+async function handleStopMagicWord(options) {
+    const { handler, bot, eventBase, magicWord } = options;
+    const conversationId = eventBase.conversationId;
+    const sessionKey = eventBase.sessionKey;
+    let target = resolveStopTarget({ handler, conversationId, sessionKey });
+    if (!target && widensToScopedSession(magicWord.scopeFallback, sessionKey, conversationId)) {
+        target = resolveOnlyScopedStopTarget(handler, conversationId);
     }
-    const attachments = await options.processAttachments();
-    const event = { ...options.eventBase, attachments };
-    options.log?.({ ...options.logEntryBase, attachments });
-    if (options.beforeEnqueue && !(await options.beforeEnqueue(event))) {
-        return;
+    if (target) {
+        await handler.handleStop(target, conversationId, bot);
     }
-    options.enqueue(options.queueKey, () => {
-        const context = options.createContext(event);
-        return options.handler.handleEvent(event, options.bot, context);
-    });
+    else if (magicWord.addressed) {
+        await bot.postMessage(conversationId, formatNothingRunning(bot));
+    }
+}
+function widensToScopedSession(scopeFallback, sessionKey, conversationId) {
+    if (scopeFallback === "never")
+        return false;
+    if (scopeFallback === "always")
+        return true;
+    // "top-level": only a message aimed at the persistent conversation session
+    // may widen to the single running scoped session; thread messages stay put.
+    return sessionKey === undefined || sessionKey === conversationId;
 }
 //# sourceMappingURL=intake.js.map

package/dist/adapters/intake.js.map

@@ -1 +1 @@
-{"version":3,"file":"intake.js","sourceRoot":"","sources":["../../src/adapters/intake.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAGxD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAqC;IAErC,MAAM,aAAa,GAAG,OAAO,CAAC,oBAAoB;QAChD,CAAC,CAAC,MAAM,uBAAuB,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;QAC7F,CAAC,CAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAY,CAAC;IAEtD,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;QACrC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;YAC3C,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,kBAAkB,EAAE,CAAC;YACvD,MAAM,KAAK,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,WAAW,EAAY,CAAC;YAC9D,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;YACxD,IAAI,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACnE,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAC7C,OAAO,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,kBAAkB,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,WAAW,EAAY,CAAC;IAC9D,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;IAExD,IAAI,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACnE,OAAO;IACT,CAAC;IAED,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE;QACrC,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { ConversationEvent } from \"../adapter.js\";\nimport { evaluateAutoReplyPolicy } from \"../trigger.js\";\nimport type { MessageIntakeOptions } from \"./types.js\";\n\n/**\n * Shared message ingress pipeline for platform adapters.\n *\n * Platform adapters still normalize SDK events and handle platform-specific stop\n * semantics. This module owns the common trigger/log/attachment/queue/handler\n * ordering for messages that may start an agent run.\n */\nexport async function processMessageIntake<TEvent extends ConversationEvent>(\n  options: MessageIntakeOptions<TEvent>,\n): Promise<void> {\n  const triggerResult = options.isAutoReplyCandidate\n    ? await evaluateAutoReplyPolicy({ event: options.eventBase, workingDir: options.workingDir })\n    : ({ trigger: true, reason: \"addressed\" } as const);\n\n  if (!triggerResult.trigger) {\n    options.log?.({ ...options.logEntryBase, attachments: [] });\n    options.onNotTriggered?.();\n    return;\n  }\n\n  if (options.deferAttachmentsUntilRun) {\n    options.enqueue(options.queueKey, async () => {\n      const attachments = await options.processAttachments();\n      const event = { ...options.eventBase, attachments } as TEvent;\n      options.log?.({ ...options.logEntryBase, attachments });\n      if (options.beforeEnqueue && !(await options.beforeEnqueue(event))) {\n        return;\n      }\n      const context = options.createContext(event);\n      return options.handler.handleEvent(event, options.bot, context);\n    });\n    return;\n  }\n\n  const attachments = await options.processAttachments();\n  const event = { ...options.eventBase, attachments } as TEvent;\n  options.log?.({ ...options.logEntryBase, attachments });\n\n  if (options.beforeEnqueue && !(await options.beforeEnqueue(event))) {\n    return;\n  }\n\n  options.enqueue(options.queueKey, () => {\n    const context = options.createContext(event);\n    return options.handler.handleEvent(event, options.bot, context);\n  });\n}\n"]}
+{"version":3,"file":"intake.js","sourceRoot":"","sources":["../../src/adapters/intake.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACrF,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,2BAA2B,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAG7E;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAqC;IAErC,IAAI,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;QAChF,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5D,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,oBAAoB;QAChD,CAAC,CAAC,MAAM,uBAAuB,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;QAC7F,CAAC,CAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAY,CAAC;IAEtD,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5D,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,SAAS,YAAY,CAAC,WAAsB;QAC1C,MAAM,KAAK,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,WAAW,EAAY,CAAC;QAC9D,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;QACxD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,UAAU,iBAAiB;QAC9B,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,UAAU,IAAI,OAAO,CAAC,SAAS,CAAC,cAAc,CAAC;QACpF,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QACzD,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,CAC3B,OAAO,CAAC,SAAS,CAAC,cAAc,EAChC,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAC3C,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,QAAQ,CAAC,KAAa;QAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;QACrC,wEAAwE;QACxE,kDAAkD;QAClD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;YAC3C,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;YAC/D,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,iBAAiB,EAAE,CAAC;gBAAE,OAAO;YAC3E,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC/D,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,iBAAiB,EAAE,CAAC;QAAE,OAAO,eAAe,CAAC;IAC3F,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,mBAAmB,CAChC,OAAqC;IAErC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IACvD,MAAM,cAAc,GAAG,SAAS,CAAC,cAAc,CAAC;IAChD,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;IAExC,IAAI,MAAM,GAAG,iBAAiB,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,MAAM,IAAI,qBAAqB,CAAC,SAAS,CAAC,aAAa,EAAE,UAAU,EAAE,cAAc,CAAC,EAAE,CAAC;QAC1F,MAAM,GAAG,2BAA2B,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;SAAM,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;QAC/B,MAAM,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,aAA+C,EAC/C,UAA8B,EAC9B,cAAsB;IAEtB,IAAI,aAAa,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,aAAa,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC5C,2EAA2E;IAC3E,4EAA4E;IAC5E,OAAO,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,cAAc,CAAC;AACnE,CAAC","sourcesContent":["import type { ConversationEvent } from \"../adapter.js\";\nimport { formatAlreadyWorking, formatNothingRunning } from \"../platform-messages.js\";\nimport { evaluateAutoReplyPolicy } from \"../trigger.js\";\nimport { resolveOnlyScopedStopTarget, resolveStopTarget } from \"./shared.js\";\nimport type { MessageIntakeOptions, MessageIntakeOutcome } from \"./types.js\";\n\n/**\n * Recognize a magic word: a highest-priority chat control phrase that bypasses\n * trigger policy and queueing (see CONTEXT.md). One grammar for every\n * platform: optional leading slash, optional `@botname` suffix, any case.\n */\nexport function matchMagicWord(text: string): \"stop\" | null {\n  return /^\\/?stop(?:@\\w+)?$/i.test(text.trim()) ? \"stop\" : null;\n}\n\n/**\n * Shared message ingress pipeline for platform adapters.\n *\n * Platform adapters normalize SDK events; this module owns the ordering for\n * messages that may start an agent run:\n *\n *   magic word → trigger policy → attachments → log → busy policy → queue → dispatch\n *\n * Magic words are matched before the trigger gate — `stop` must never wait on\n * an auto-reply judgment or queue behind a running agent turn. Adapters state\n * platform policy as data (`magicWord`, `busyPolicy`) instead of callbacks.\n */\nexport async function processMessageIntake<TEvent extends ConversationEvent>(\n  options: MessageIntakeOptions<TEvent>,\n): Promise<MessageIntakeOutcome> {\n  if (matchMagicWord(options.magicWord.text ?? options.eventBase.text) === \"stop\") {\n    options.log?.({ ...options.logEntryBase, attachments: [] });\n    await handleStopMagicWord(options);\n    return \"magic-word\";\n  }\n\n  const triggerResult = options.isAutoReplyCandidate\n    ? await evaluateAutoReplyPolicy({ event: options.eventBase, workingDir: options.workingDir })\n    : ({ trigger: true, reason: \"addressed\" } as const);\n\n  if (!triggerResult.trigger) {\n    options.log?.({ ...options.logEntryBase, attachments: [] });\n    return \"not-triggered\";\n  }\n\n  function prepareEvent(attachments: unknown[]): TEvent {\n    const event = { ...options.eventBase, attachments } as TEvent;\n    options.log?.({ ...options.logEntryBase, attachments });\n    return event;\n  }\n\n  async function rejectedWhileBusy(): Promise<boolean> {\n    const sessionKey = options.eventBase.sessionKey ?? options.eventBase.conversationId;\n    if (!options.handler.isRunning(sessionKey)) return false;\n    await options.bot.postMessage(\n      options.eventBase.conversationId,\n      formatAlreadyWorking(options.bot, \"/stop\"),\n    );\n    return true;\n  }\n\n  function dispatch(event: TEvent): Promise<void> {\n    const context = options.createContext(event);\n    return options.handler.handleEvent(event, options.bot, context);\n  }\n\n  if (options.deferAttachmentsUntilRun) {\n    // Busy rejection happens inside the queued work here, so the outcome is\n    // already \"enqueued\" by the time it is evaluated.\n    options.enqueue(options.queueKey, async () => {\n      const event = prepareEvent(await options.processAttachments());\n      if (options.busyPolicy === \"reject\" && (await rejectedWhileBusy())) return;\n      return dispatch(event);\n    });\n    return \"enqueued\";\n  }\n\n  const event = prepareEvent(await options.processAttachments());\n  if (options.busyPolicy === \"reject\" && (await rejectedWhileBusy())) return \"rejected-busy\";\n  options.enqueue(options.queueKey, () => dispatch(event));\n  return \"enqueued\";\n}\n\n/**\n * Resolve and stop the session a magic-word `stop` targets. When nothing is\n * running, reply only if the message addressed the bot — an unaddressed\n * \"stop\" in a busy channel should never make the bot pipe up.\n */\nasync function handleStopMagicWord<TEvent extends ConversationEvent>(\n  options: MessageIntakeOptions<TEvent>,\n): Promise<void> {\n  const { handler, bot, eventBase, magicWord } = options;\n  const conversationId = eventBase.conversationId;\n  const sessionKey = eventBase.sessionKey;\n\n  let target = resolveStopTarget({ handler, conversationId, sessionKey });\n  if (!target && widensToScopedSession(magicWord.scopeFallback, sessionKey, conversationId)) {\n    target = resolveOnlyScopedStopTarget(handler, conversationId);\n  }\n\n  if (target) {\n    await handler.handleStop(target, conversationId, bot);\n  } else if (magicWord.addressed) {\n    await bot.postMessage(conversationId, formatNothingRunning(bot));\n  }\n}\n\nfunction widensToScopedSession(\n  scopeFallback: \"top-level\" | \"always\" | \"never\",\n  sessionKey: string | undefined,\n  conversationId: string,\n): boolean {\n  if (scopeFallback === \"never\") return false;\n  if (scopeFallback === \"always\") return true;\n  // \"top-level\": only a message aimed at the persistent conversation session\n  // may widen to the single running scoped session; thread messages stay put.\n  return sessionKey === undefined || sessionKey === conversationId;\n}\n"]}

package/dist/adapters/slack/bot.d.ts

@@ -38,6 +38,7 @@ export declare class SlackMessagingBot implements MessagingBot {
     getAllChannels(): SlackChannel[];
     private stripOwnMention;
     postMessage(channel: string, text: string): Promise<string>;
+    addReaction(channel: string, messageTs: string, emoji: string): Promise<void>;
     postEphemeral(channel: string, user: string, text: string, threadTs?: string): Promise<void>;
     postEphemeralBlocks(channel: string, user: string, text: string, blocks: object[], threadTs?: string): Promise<void>;
     postMessageBlocks(channel: string, text: string, blocks: object[]): Promise<string>;
@@ -69,15 +70,16 @@ export declare class SlackMessagingBot implements MessagingBot {
     private hasKnownThreadSession;
     private processSlackMessageIntake;
     private buildHomeView;
-    private resolveStopTarget;
-    private isStopText;
     private createCommandAdapters;
     private buildSlashCommandEvent;
-    private routeSlashLoginCommand;
+    /**
+     * Generic slash-command route: synthesize the command text per the
+     * manifest's SlackSlashRoute data and dispatch to the handler. `/pi-new`
+     * stays bespoke (routeSlashNewCommand) because it replies in 中文 and calls
+     * handleNewCommand directly.
+     */
+    private routeSlashCommand;
     private routeSlashNewCommand;
-    private routeSlashModelCommand;
-    private routeSlashSessionCommand;
-    private routeSlashAdminCommand;
     private setupEventHandlers;
     private handleAppMention;
     private handleMessageEvent;