@geminixiang/mikan 1.0.0-beta.21 → 1.0.0-beta.23

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAOjC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC","sourcesContent":["import type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport { execFile } from \"child_process\";\nimport { promisify } from \"util\";\nimport type {\n  ImmediateEventPayload,\n  OneShotEventPayload,\n  PeriodicEventPayload,\n} from \"./harness/event-format.js\";\n\nconst execFileAsync = promisify(execFile);\ntype ExecFileAsync = typeof execFileAsync;\n\n// ── adapter ───────────────────────────────────────────────────────────────────\n\nexport type ConversationKind = \"direct\" | \"shared\";\n\nexport type PlatformName = \"slack\" | \"discord\" | \"telegram\" | \"github\";\n\n/**\n * Who can drive conversations on a platform — gates ambient credential policy.\n *\n * - `membership`: only invited workspace/server members (Slack/Discord/Telegram).\n *   Safe to copy `sandbox.defaultSharedVault` into new conversation vaults.\n * - `open-trigger`: broader trigger surface (e.g. GitHub repo writers on public\n *   issues/PRs). Ambient shared vault must not apply; use host-side platform\n *   identity or an explicitly provisioned vault.\n */\nexport type PlatformTrustModel = \"membership\" | \"open-trigger\";\n\nexport interface ConversationMessage {\n  id: string;\n  sessionKey: string;\n  conversationKind: ConversationKind;\n  userId: string;\n  userName?: string;\n  text: string;\n  attachments?: { name: string; localPath: string }[];\n  threadTs?: string;\n}\n\nexport interface ChatToolResult {\n  toolName: string;\n  label?: string;\n  args?: Record<string, unknown>;\n  result: string;\n  isError: boolean;\n  durationMs: number;\n}\n\nexport interface ConversationResponder {\n  respond(text: string): Promise<void>;\n  appendResponseDelta?(delta: string): Promise<void>;\n  finishResponse?(finalText?: string): Promise<void>;\n  replaceResponse(text: string, options?: { createOverflowLink?: () => string }): Promise<void>;\n  respondDiagnostic(text: string, options?: { style?: \"muted\" | \"error\" }): Promise<void>;\n  respondToolResult(result: ChatToolResult): Promise<void>;\n  setTyping(isTyping: boolean): Promise<void>;\n  setWorking(working: boolean): Promise<void>;\n  uploadFile(filePath: string, title?: string): Promise<void>;\n  /**\n   * React to the message that triggered this run with an emoji short name\n   * (no colons). Optional: platforms/contexts without reaction support omit\n   * it, and callers must handle its absence.\n   */\n  react?(emoji: string): Promise<void>;\n  deleteResponse(): Promise<void>;\n}\n\nexport interface MessagingInfo {\n  name: string;\n  formattingGuide: string;\n  channels: { id: string; name: string }[];\n  users: { id: string; userName: string; displayName: string }[];\n  /**\n   * Trust boundary for ambient credentials. Defaults to `membership` when\n   * omitted (closed chat platforms). Open-trigger platforms must set this\n   * explicitly so vault policy does not key off platform name strings.\n   */\n  trustModel?: PlatformTrustModel;\n  diagnostics?: {\n    showUsageSummary?: boolean;\n  };\n}\n\nexport interface ChatAdapter {\n  start(): Promise<void>;\n  stop(): Promise<void>;\n  getMessagingInfo(): MessagingInfo;\n}\n\nexport type AgentEventPayload =\n  | { kind: \"sessionStart\" }\n  | { kind: \"responseDelta\"; delta: string }\n  | { kind: \"responseFinal\"; text: string }\n  | { kind: \"diagnostic\"; text: string }\n  | { kind: \"toolStart\"; toolId: string; toolName: string; input?: unknown }\n  | { kind: \"toolEnd\"; toolId: string }\n  | { kind: \"turnEnd\"; awaitingInput?: boolean }\n  | { kind: \"sessionEnd\"; reason?: string };\n\nexport interface AgentEventEnvelope {\n  source: \"mikan\";\n  sessionId: string;\n  actorName: string;\n  event: AgentEventPayload;\n}\n\n/**\n * A platform-agnostic event (message/mention) that triggers the agent.\n */\nexport interface ConversationEvent {\n  type: string;\n  /** Platform-specific raw conversation/channel/chat identifier */\n  conversationId: string;\n  /** Optional alternate conversation identity used for vault routing. */\n  vaultConversationId?: string;\n  /** Cross-platform conversation shape: direct message vs shared space */\n  conversationKind: ConversationKind;\n  /** Message timestamp or ID as string */\n  ts: string;\n  /** Parent message ID for threaded replies (optional) */\n  thread_ts?: string;\n  /** User ID */\n  user: string;\n  /** Message text (already stripped of bot mentions) */\n  text: string;\n  /** Downloaded attachments */\n  attachments?: { name: string; localPath: string }[];\n  /** Platform-computed session key; overrides default conversationId:thread_ts computation */\n  sessionKey?: string;\n}\n\n/**\n * Minimum interface that every platform bot must implement,\n * used by the central handler in main.ts and by EventsWatcher.\n */\nexport interface MessagingBot {\n  start(): Promise<void>;\n  postMessage(channel: string, text: string): Promise<string>;\n  updateMessage(channel: string, ts: string, text: string): Promise<void>;\n  /**\n   * Add an emoji reaction to a message. `emoji` is a platform-agnostic short\n   * name without colons (e.g. \"eyes\", \"white_check_mark\"). Optional so\n   * adapters adopt it incrementally; callers must handle its absence.\n   */\n  addReaction?(channel: string, messageTs: string, emoji: string): Promise<void>;\n  /**\n   * Upload a host-side file into a conversation. Optional so adapters adopt\n   * it incrementally; callers must handle its absence. Existing adapter\n   * implementations (Slack/Discord/Telegram) already match this shape.\n   */\n  uploadFile?(channel: string, filePath: string, title?: string): Promise<void>;\n  enqueueEvent(event: ConversationEvent): boolean;\n  getMessagingInfo(): MessagingInfo;\n  postPrivate?(conversationId: string, userId: string, text: string): Promise<void>;\n  postPrivateDiagnostic?(\n    conversationId: string,\n    userId: string,\n    text: string,\n    options?: { style?: \"muted\" | \"error\" },\n  ): Promise<void>;\n}\n\n/**\n * Post a plain message to a conversation without triggering an agent run.\n * Backs extension `api.notify`; implemented in main.ts over the platform bots.\n * `platform` is required only when more than one platform is running.\n */\nexport type PlatformNotifier = (\n  conversationId: string,\n  text: string,\n  platform?: string,\n) => Promise<void>;\n\n/**\n * Add an emoji reaction to a message without triggering an agent run. Backs\n * extension `api.react`; implemented in main.ts over the platform bots.\n */\nexport type PlatformReactor = (\n  conversationId: string,\n  messageTs: string,\n  emoji: string,\n  platform?: string,\n) => Promise<void>;\n\n/**\n * Upload a host-side file into a conversation without triggering an agent\n * run. Backs extension `api.uploadFile`; implemented in main.ts over the\n * platform bots. `platform` is required only when more than one is running.\n */\nexport type PlatformUploader = (\n  conversationId: string,\n  filePath: string,\n  title?: string,\n  platform?: string,\n) => Promise<void>;\n\n/** Normalized platform data and reply hook for one event. */\nexport interface ConversationContext {\n  message: ConversationMessage;\n  responder: ConversationResponder;\n  platform: MessagingInfo;\n}\n\nexport interface RunningSession {\n  sessionKey: string;\n  startedAt: number;\n  lastActivityAt?: number;\n  currentTool?: string;\n}\n\nexport interface MessagingEventHandler {\n  isRunning(sessionKey: string): boolean;\n  getRunningSessions(): RunningSession[];\n  handleEvent(\n    event: ConversationEvent,\n    bot: MessagingBot,\n    context: ConversationContext,\n  ): Promise<void>;\n  handleStop(sessionKey: string, conversationId: string, bot: MessagingBot): Promise<void>;\n  forceStop(sessionKey: string): void;\n  handleNewCommand(sessionKey: string, conversationId: string, bot: MessagingBot): Promise<void>;\n}\n\n// ── agent ─────────────────────────────────────────────────────────────────────\n\nexport interface PiAgentWrapper {\n  syncChatHistory(currentMessageId?: string): void;\n  run(\n    message: ConversationMessage,\n    responder: ConversationResponder,\n    platform: MessagingInfo,\n  ): Promise<{ stopReason: string; errorMessage?: string }>;\n  abort(): void;\n  getCurrentStep(): { toolName?: string; label?: string } | undefined;\n  /**\n   * Dispatch a leading-slash message to an extension-registered command.\n   * Returns true when a command consumed the message (no agent run follows).\n   */\n  tryExtensionCommand(\n    message: ConversationMessage,\n    responder: ConversationResponder,\n  ): Promise<boolean>;\n  /** Run extension disposers. Call once when this wrapper is discarded. */\n  dispose(): Promise<void>;\n}\n\n// ── config ────────────────────────────────────────────────────────────────────\n\nexport interface GondolinRemoteWorkerSettings {\n  /** Stable placement identity; defaults to the URL. */\n  name?: string;\n  /** Base URL of the mikan-worker daemon, e.g. https://worker.internal:8433 */\n  url: string;\n  /** CA bundle that signs the daemon's server certificate. */\n  caFile?: string;\n  /** Client certificate + key presented to the daemon (mTLS); falls back to the fleet-level pair. */\n  certFile?: string;\n  keyFile?: string;\n  /** Worker-side path of the shared workspace filesystem. */\n  workspaceRoot?: string;\n  /** Admission cap for new placements (existing runtimes always count). */\n  maxRuntimes?: number;\n  /** Drained workers accept no new placements; existing ones finish out. */\n  draining?: boolean;\n}\n\nexport interface GondolinGatewaySettings {\n  /** Port the worker gateway listens on for dial-home workers. */\n  port: number;\n  /**\n   * Gateway server certificate + key and the CA that signs worker client\n   * certificates. Omit all three to let the gateway provision its own CA and\n   * server certificate under the state dir (required for `--worker-token`\n   * joins).\n   */\n  certFile?: string;\n  keyFile?: string;\n  clientCaFile?: string;\n  /** SANs for the auto-issued server certificate (defaults to os.hostname). */\n  hostnames?: string[];\n  /**\n   * Worker-side path of the shared workspace filesystem. Required in practice:\n   * mount sources are translated to it, and without it every runtime is\n   * rejected with \"escapes the workspace root\". gondolinGateway.start()\n   * enforces it at boot; typed optional to match the settings schema.\n   */\n  workspaceRoot?: string;\n  /** Per-worker host-side overrides, keyed by worker name. */\n  workers?: Record<string, { maxRuntimes?: number; draining?: boolean }>;\n}\n\nexport interface GondolinRemoteSettings {\n  /** Single-worker form: connection fields inline (a fleet of one). */\n  url?: string;\n  caFile?: string;\n  certFile?: string;\n  keyFile?: string;\n  workspaceRoot?: string;\n  maxRuntimes?: number;\n  /** Fleet form: several workers; per-worker fields fall back to the inline ones. */\n  workers?: GondolinRemoteWorkerSettings[];\n  /** Dial-home form: listen for workers that connect to mikan instead. */\n  gateway?: GondolinGatewaySettings;\n  /** Guest image selector resolved on the workers. */\n  imageSelector?: string;\n  /** How long a new conversation waits for capacity before failing. */\n  queueWaitSeconds?: number;\n}\n\nexport interface SandboxSettings {\n  cpus?: string;\n  memory?: string;\n  boost?: { cpus?: string; memory?: string };\n  image?: { workspaceMount?: \"private\" | \"full\" };\n  gondolin?: { remote?: GondolinRemoteSettings };\n  defaultSharedVault?: string;\n}\n\nexport interface AgentConfig {\n  provider: string;\n  model: string;\n  thinkingLevel: ThinkingLevel;\n  sentryDsn?: string;\n  sandbox?: SandboxSettings;\n  slack?: {\n    replyMode?: \"top-level\" | \"thread\";\n  };\n}\n\n/**\n * @deprecated Auto-reply is kept for compatibility while its future is undecided.\n */\nexport interface AutoReplyConfig {\n  enabled: boolean;\n  rules: string[];\n}\n\nexport interface JudgeModelConfig {\n  provider: string;\n  model: string;\n}\n\n// ── context ───────────────────────────────────────────────────────────────────\n\n/**\n * Platform conversation history entry from log.jsonl.\n */\nexport interface ConversationLogMessage {\n  date?: string;\n  ts?: string;\n  threadTs?: string;\n  user?: string;\n  userName?: string;\n  text?: string;\n  isMessagingBot?: boolean;\n}\n\n// ── events ────────────────────────────────────────────────────────────────────\n// The wire format (payload union, schema, parser, builder) is owned by\n// src/harness/event-format.ts. These are the *resolved* runtime shapes: the\n// EventsWatcher fills in the platform default and infers the conversation\n// kind before an event reaches a bot.\n\ninterface ResolvedEventFields {\n  platform: string;\n  conversationKind: ConversationKind;\n}\n\nexport type ImmediateEvent = ImmediateEventPayload & ResolvedEventFields;\n\nexport type OneShotEvent = OneShotEventPayload & ResolvedEventFields;\n\nexport type PeriodicEvent = PeriodicEventPayload & ResolvedEventFields;\n\nexport type MikanEvent = ImmediateEvent | OneShotEvent | PeriodicEvent;\n\nexport interface PeriodicEventInfo {\n  filename: string;\n  platform: string;\n  conversationId: string;\n  conversationKind: ConversationKind;\n  text: string;\n  schedule: string;\n  timezone: string;\n  nextRun: string | null;\n}\n\n// ── execution-resolver ────────────────────────────────────────────────────────\n\nexport interface ActorContext {\n  platform: string;\n  userId: string;\n  conversationId: string;\n  /** From MessagingInfo.trustModel; vault policy uses this, not platform name. */\n  trustModel?: PlatformTrustModel;\n}\n\nexport type ImageWorkspaceMountMode = \"private\" | \"full\";\n\n// ── log ───────────────────────────────────────────────────────────────────────\n\nexport interface LogContext {\n  conversationId: string;\n  userName?: string;\n  conversationName?: string;\n  sessionId?: string;\n}\n\n// ── portal shell (src/web/portal-shell.ts) ────────────────────────────────────\n\ntype PortalView = \"admin\" | \"session\" | \"vault\";\n\nexport interface PortalShellOptions {\n  activeView: PortalView;\n  pageTitle: string;\n  identity?: {\n    primary: string;\n    secondary?: string;\n  };\n  conversationSwitcher?: {\n    currentId: string;\n    options?: Array<{ id: string; label: string; running?: boolean }>;\n  };\n  navLinks?: Partial<Record<PortalView, string>>;\n  body: string;\n  extraStyles?: string;\n  inlineScript?: string;\n  extraHead?: string;\n  bodyAttributes?: Record<string, string>;\n}\n\n// ── provisioner ───────────────────────────────────────────────────────────────\n\nexport interface ContainerMount {\n  source: string;\n  target: string;\n}\n\nexport interface ResourceLimits {\n  cpus?: string;\n  memory?: string;\n}\n\nexport interface SandboxLimitStatus {\n  limits?: ResourceLimits;\n  boosted: boolean;\n}\n\nexport interface SandboxResourceController {\n  boost(key: string): Promise<SandboxLimitStatus>;\n  setLimits(key: string, limits: ResourceLimits): Promise<SandboxLimitStatus>;\n  getLimitStatus(key: string): SandboxLimitStatus;\n  getDefaultLimits(): ResourceLimits | undefined;\n  getBoostLimits(): ResourceLimits | undefined;\n}\n\nexport interface ProvisionOptions {\n  containerName?: string;\n  mounts?: ContainerMount[];\n  conversationId?: string;\n}\n\nexport interface DockerContainerManagerOptions {\n  limits?: ResourceLimits;\n  boostLimits?: ResourceLimits;\n  execFileImpl?: ExecFileAsync;\n}\n\n// ── store ─────────────────────────────────────────────────────────────────────\n\nexport interface Attachment {\n  original: string;\n  localPath: string;\n}\n\nexport interface LoggedMessage {\n  date: string;\n  ts: string;\n  user: string;\n  userName?: string;\n  displayName?: string;\n  text: string;\n  attachments: Attachment[];\n  isMessagingBot: boolean;\n  threadTs?: string;\n}\n\nexport interface ChannelStoreConfig {\n  workingDir: string;\n  botToken: string;\n}\n\n// ── trigger ───────────────────────────────────────────────────────────────────\n\nexport type TriggerIntent = \"mention\" | \"direct\" | \"thread-continuation\" | \"auto-reply-candidate\";\n\nexport type TriggerResult = { trigger: true; reason: string } | { trigger: false; reason: string };\n\n/**\n * @deprecated Auto-reply is kept for compatibility while its future is undecided.\n */\nexport type AutoReplyJudge = (input: {\n  event: ConversationEvent;\n  rules: string[];\n  conversationDir: string;\n}) => Promise<boolean>;\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAOjC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC","sourcesContent":["import type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport { execFile } from \"child_process\";\nimport { promisify } from \"util\";\nimport type {\n  ImmediateEventPayload,\n  OneShotEventPayload,\n  PeriodicEventPayload,\n} from \"./harness/event-format.js\";\n\nconst execFileAsync = promisify(execFile);\ntype ExecFileAsync = typeof execFileAsync;\n\n// ── adapter ───────────────────────────────────────────────────────────────────\n\nexport type ConversationKind = \"direct\" | \"shared\";\n\nexport type PlatformName = \"slack\" | \"discord\" | \"telegram\" | \"github\";\n\n/**\n * Who can drive conversations on a platform — gates ambient credential policy.\n *\n * - `membership`: only invited workspace/server members (Slack/Discord/Telegram).\n *   Safe to copy `sandbox.defaultSharedVault` into new conversation vaults.\n * - `open-trigger`: broader trigger surface (e.g. GitHub repo writers on public\n *   issues/PRs). Ambient shared vault must not apply; use host-side platform\n *   identity or an explicitly provisioned vault.\n */\nexport type PlatformTrustModel = \"membership\" | \"open-trigger\";\n\nexport interface ConversationMessage {\n  id: string;\n  sessionKey: string;\n  conversationKind: ConversationKind;\n  userId: string;\n  userName?: string;\n  text: string;\n  attachments?: { name: string; localPath: string }[];\n  threadTs?: string;\n}\n\nexport interface ChatToolResult {\n  toolName: string;\n  label?: string;\n  args?: Record<string, unknown>;\n  result: string;\n  isError: boolean;\n  durationMs: number;\n}\n\nexport interface ConversationResponder {\n  respond(text: string): Promise<void>;\n  appendResponseDelta?(delta: string): Promise<void>;\n  finishResponse?(finalText?: string): Promise<void>;\n  replaceResponse(text: string, options?: { createOverflowLink?: () => string }): Promise<void>;\n  respondDiagnostic(text: string, options?: { style?: \"muted\" | \"error\" }): Promise<void>;\n  respondToolResult(result: ChatToolResult): Promise<void>;\n  setTyping(isTyping: boolean): Promise<void>;\n  setWorking(working: boolean): Promise<void>;\n  uploadFile(filePath: string, title?: string): Promise<void>;\n  /**\n   * React to the message that triggered this run with an emoji short name\n   * (no colons). Optional: platforms/contexts without reaction support omit\n   * it, and callers must handle its absence.\n   */\n  react?(emoji: string): Promise<void>;\n  deleteResponse(): Promise<void>;\n}\n\nexport interface MessagingInfo {\n  name: string;\n  formattingGuide: string;\n  channels: { id: string; name: string }[];\n  users: { id: string; userName: string; displayName: string }[];\n  /**\n   * Trust boundary for ambient credentials. Defaults to `membership` when\n   * omitted (closed chat platforms). Open-trigger platforms must set this\n   * explicitly so vault policy does not key off platform name strings.\n   */\n  trustModel?: PlatformTrustModel;\n  diagnostics?: {\n    showUsageSummary?: boolean;\n  };\n}\n\nexport interface ChatAdapter {\n  start(): Promise<void>;\n  stop(): Promise<void>;\n  getMessagingInfo(): MessagingInfo;\n}\n\nexport type AgentEventPayload =\n  | { kind: \"sessionStart\" }\n  | { kind: \"responseDelta\"; delta: string }\n  | { kind: \"responseFinal\"; text: string }\n  | { kind: \"diagnostic\"; text: string }\n  | { kind: \"toolStart\"; toolId: string; toolName: string; input?: unknown }\n  | { kind: \"toolEnd\"; toolId: string }\n  | { kind: \"turnEnd\"; awaitingInput?: boolean }\n  | { kind: \"sessionEnd\"; reason?: string };\n\nexport interface AgentEventEnvelope {\n  source: \"mikan\";\n  sessionId: string;\n  actorName: string;\n  event: AgentEventPayload;\n}\n\n/**\n * A platform-agnostic event (message/mention) that triggers the agent.\n */\nexport interface ConversationEvent {\n  type: string;\n  /** Platform-specific raw conversation/channel/chat identifier */\n  conversationId: string;\n  /** Optional alternate conversation identity used for vault routing. */\n  vaultConversationId?: string;\n  /** Cross-platform conversation shape: direct message vs shared space */\n  conversationKind: ConversationKind;\n  /** Message timestamp or ID as string */\n  ts: string;\n  /** Parent message ID for threaded replies (optional) */\n  thread_ts?: string;\n  /** User ID */\n  user: string;\n  /** Message text (already stripped of bot mentions) */\n  text: string;\n  /** Downloaded attachments */\n  attachments?: { name: string; localPath: string }[];\n  /** Platform-computed session key; overrides default conversationId:thread_ts computation */\n  sessionKey?: string;\n}\n\n/**\n * Minimum interface that every platform bot must implement,\n * used by the central handler in main.ts and by EventsWatcher.\n */\nexport interface MessagingBot {\n  start(): Promise<void>;\n  postMessage(channel: string, text: string): Promise<string>;\n  updateMessage(channel: string, ts: string, text: string): Promise<void>;\n  /**\n   * Add an emoji reaction to a message. `emoji` is a platform-agnostic short\n   * name without colons (e.g. \"eyes\", \"white_check_mark\"). Optional so\n   * adapters adopt it incrementally; callers must handle its absence.\n   */\n  addReaction?(channel: string, messageTs: string, emoji: string): Promise<void>;\n  /**\n   * Upload a host-side file into a conversation. Optional so adapters adopt\n   * it incrementally; callers must handle its absence. Existing adapter\n   * implementations (Slack/Discord/Telegram) already match this shape.\n   */\n  uploadFile?(channel: string, filePath: string, title?: string): Promise<void>;\n  enqueueEvent(event: ConversationEvent): boolean;\n  getMessagingInfo(): MessagingInfo;\n  postPrivate?(conversationId: string, userId: string, text: string): Promise<void>;\n  postPrivateDiagnostic?(\n    conversationId: string,\n    userId: string,\n    text: string,\n    options?: { style?: \"muted\" | \"error\" },\n  ): Promise<void>;\n}\n\n/**\n * Post a plain message to a conversation without triggering an agent run.\n * Backs extension `api.notify`; implemented in main.ts over the platform bots.\n * `platform` is required only when more than one platform is running.\n */\nexport type PlatformNotifier = (\n  conversationId: string,\n  text: string,\n  platform?: string,\n) => Promise<void>;\n\n/**\n * Add an emoji reaction to a message without triggering an agent run. Backs\n * extension `api.react`; implemented in main.ts over the platform bots.\n */\nexport type PlatformReactor = (\n  conversationId: string,\n  messageTs: string,\n  emoji: string,\n  platform?: string,\n) => Promise<void>;\n\n/**\n * Upload a host-side file into a conversation without triggering an agent\n * run. Backs extension `api.uploadFile`; implemented in main.ts over the\n * platform bots. `platform` is required only when more than one is running.\n */\nexport type PlatformUploader = (\n  conversationId: string,\n  filePath: string,\n  title?: string,\n  platform?: string,\n) => Promise<void>;\n\n/** Normalized platform data and reply hook for one event. */\nexport interface ConversationContext {\n  message: ConversationMessage;\n  responder: ConversationResponder;\n  platform: MessagingInfo;\n}\n\nexport interface RunningSession {\n  sessionKey: string;\n  startedAt: number;\n  lastActivityAt?: number;\n  currentTool?: string;\n}\n\nexport interface MessagingEventHandler {\n  isRunning(sessionKey: string): boolean;\n  getRunningSessions(): RunningSession[];\n  handleEvent(\n    event: ConversationEvent,\n    bot: MessagingBot,\n    context: ConversationContext,\n  ): Promise<void>;\n  handleStop(sessionKey: string, conversationId: string, bot: MessagingBot): Promise<void>;\n  forceStop(sessionKey: string): void;\n  handleNewCommand(sessionKey: string, conversationId: string, bot: MessagingBot): Promise<void>;\n}\n\n// ── agent ─────────────────────────────────────────────────────────────────────\n\nexport interface PiAgentWrapper {\n  syncChatHistory(currentMessageId?: string): void;\n  run(\n    message: ConversationMessage,\n    responder: ConversationResponder,\n    platform: MessagingInfo,\n  ): Promise<{ stopReason: string; errorMessage?: string }>;\n  abort(): void;\n  getCurrentStep(): { toolName?: string; label?: string } | undefined;\n  /**\n   * Dispatch a leading-slash message to an extension-registered command.\n   * Returns true when a command consumed the message (no agent run follows).\n   */\n  tryExtensionCommand(\n    message: ConversationMessage,\n    responder: ConversationResponder,\n  ): Promise<boolean>;\n  /** Run extension disposers. Call once when this wrapper is discarded. */\n  dispose(): Promise<void>;\n}\n\n// ── config ────────────────────────────────────────────────────────────────────\n\nexport interface AgentSandboxSettings {\n  namespace: string;\n  runtimeClassName: string;\n  apiUrl?: string;\n  routerNamespace?: string;\n  sandboxReadyTimeout?: number;\n}\n\nexport interface SandboxSettings {\n  cpus?: string;\n  memory?: string;\n  boost?: { cpus?: string; memory?: string };\n  image?: { workspaceMount?: \"private\" | \"full\" };\n  agentSandbox?: AgentSandboxSettings;\n  defaultSharedVault?: string;\n}\n\nexport interface AgentConfig {\n  provider: string;\n  model: string;\n  thinkingLevel: ThinkingLevel;\n  sentryDsn?: string;\n  sandbox?: SandboxSettings;\n  slack?: {\n    replyMode?: \"top-level\" | \"thread\";\n  };\n}\n\n/**\n * @deprecated Auto-reply is kept for compatibility while its future is undecided.\n */\nexport interface AutoReplyConfig {\n  enabled: boolean;\n  rules: string[];\n}\n\nexport interface JudgeModelConfig {\n  provider: string;\n  model: string;\n}\n\n// ── context ───────────────────────────────────────────────────────────────────\n\n/**\n * Platform conversation history entry from log.jsonl.\n */\nexport interface ConversationLogMessage {\n  date?: string;\n  ts?: string;\n  threadTs?: string;\n  user?: string;\n  userName?: string;\n  text?: string;\n  isMessagingBot?: boolean;\n}\n\n// ── events ────────────────────────────────────────────────────────────────────\n// The wire format (payload union, schema, parser, builder) is owned by\n// src/harness/event-format.ts. These are the *resolved* runtime shapes: the\n// EventsWatcher fills in the platform default and infers the conversation\n// kind before an event reaches a bot.\n\ninterface ResolvedEventFields {\n  platform: string;\n  conversationKind: ConversationKind;\n}\n\nexport type ImmediateEvent = ImmediateEventPayload & ResolvedEventFields;\n\nexport type OneShotEvent = OneShotEventPayload & ResolvedEventFields;\n\nexport type PeriodicEvent = PeriodicEventPayload & ResolvedEventFields;\n\nexport type MikanEvent = ImmediateEvent | OneShotEvent | PeriodicEvent;\n\nexport interface PeriodicEventInfo {\n  filename: string;\n  platform: string;\n  conversationId: string;\n  conversationKind: ConversationKind;\n  text: string;\n  schedule: string;\n  timezone: string;\n  nextRun: string | null;\n}\n\n// ── execution-resolver ────────────────────────────────────────────────────────\n\nexport interface ActorContext {\n  platform: string;\n  userId: string;\n  conversationId: string;\n  /** From MessagingInfo.trustModel; vault policy uses this, not platform name. */\n  trustModel?: PlatformTrustModel;\n}\n\nexport type ImageWorkspaceMountMode = \"private\" | \"full\";\n\n// ── log ───────────────────────────────────────────────────────────────────────\n\nexport interface LogContext {\n  conversationId: string;\n  userName?: string;\n  conversationName?: string;\n  sessionId?: string;\n}\n\n// ── portal shell (src/web/portal-shell.ts) ────────────────────────────────────\n\ntype PortalView = \"admin\" | \"session\" | \"vault\";\n\nexport interface PortalShellOptions {\n  activeView: PortalView;\n  pageTitle: string;\n  identity?: {\n    primary: string;\n    secondary?: string;\n  };\n  conversationSwitcher?: {\n    currentId: string;\n    options?: Array<{ id: string; label: string; running?: boolean }>;\n  };\n  navLinks?: Partial<Record<PortalView, string>>;\n  body: string;\n  extraStyles?: string;\n  inlineScript?: string;\n  extraHead?: string;\n  bodyAttributes?: Record<string, string>;\n}\n\n// ── provisioner ───────────────────────────────────────────────────────────────\n\nexport interface ContainerMount {\n  source: string;\n  target: string;\n}\n\nexport interface ResourceLimits {\n  cpus?: string;\n  memory?: string;\n}\n\nexport interface SandboxLimitStatus {\n  limits?: ResourceLimits;\n  boosted: boolean;\n}\n\nexport interface SandboxResourceController {\n  boost(key: string): Promise<SandboxLimitStatus>;\n  setLimits(key: string, limits: ResourceLimits): Promise<SandboxLimitStatus>;\n  getLimitStatus(key: string): SandboxLimitStatus;\n  getDefaultLimits(): ResourceLimits | undefined;\n  getBoostLimits(): ResourceLimits | undefined;\n}\n\nexport interface ProvisionOptions {\n  containerName?: string;\n  mounts?: ContainerMount[];\n  conversationId?: string;\n}\n\nexport interface DockerContainerManagerOptions {\n  limits?: ResourceLimits;\n  boostLimits?: ResourceLimits;\n  execFileImpl?: ExecFileAsync;\n}\n\nexport interface ExecutionPlan {\n  credentialKey: string;\n  resourceKey: string;\n  sandboxConfig: import(\"./sandbox/types.js\").SandboxConfig;\n  env?: Record<string, string>;\n  mounts: ContainerMount[];\n}\n\n// ── store ─────────────────────────────────────────────────────────────────────\n\nexport interface Attachment {\n  original: string;\n  localPath: string;\n}\n\nexport interface LoggedMessage {\n  date: string;\n  ts: string;\n  user: string;\n  userName?: string;\n  displayName?: string;\n  text: string;\n  attachments: Attachment[];\n  isMessagingBot: boolean;\n  threadTs?: string;\n}\n\nexport interface ChannelStoreConfig {\n  workingDir: string;\n  botToken: string;\n}\n\n// ── trigger ───────────────────────────────────────────────────────────────────\n\nexport type TriggerIntent = \"mention\" | \"direct\" | \"thread-continuation\" | \"auto-reply-candidate\";\n\nexport type TriggerResult = { trigger: true; reason: string } | { trigger: false; reason: string };\n\n/**\n * @deprecated Auto-reply is kept for compatibility while its future is undecided.\n */\nexport type AutoReplyJudge = (input: {\n  event: ConversationEvent;\n  rules: string[];\n  conversationDir: string;\n}) => Promise<boolean>;\n"]}

package/dist/vault/injection.d.ts

@@ -1,19 +1,9 @@
-import type { SandboxConfig } from "../sandbox/types.js";
-import type { ResolvedVault, ResolvedVaultMount } from "./types.js";
-/**
- * What an actor's vault contributes to one sandbox execution. This is the
- * vault side of credential injection — the execution resolver composes it
- * with its own workspace layout and per-actor config shaping, without
- * knowing what a vault mount means or when vault env may flow.
- */
-export interface VaultInjection {
-    /** Per-exec env; absent for host sandboxes (no isolation) and empty vaults. */
-    env?: Record<string, string>;
-    /** Credential mounts whose sources exist; missing sources are reported and skipped. */
-    mounts: ResolvedVaultMount[];
-}
+import type { SandboxConfig, SandboxCredentialCapabilities } from "../sandbox/types.js";
+import type { ResolvedVault, VaultInjection } from "./types.js";
+export type { VaultInjection } from "./types.js";
 export declare function resolveVaultInjection(options: {
     vault: ResolvedVault | undefined;
+    capabilities: SandboxCredentialCapabilities;
     sandboxType: SandboxConfig["type"];
     conversationId: string;
 }): VaultInjection;

package/dist/vault/injection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"injection.d.ts","sourceRoot":"","sources":["../../src/vault/injection.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEpE;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,+EAA+E;IAC/E,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,uFAAuF;IACvF,MAAM,EAAE,kBAAkB,EAAE,CAAC;CAC9B;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE;IAC7C,KAAK,EAAE,aAAa,GAAG,SAAS,CAAC;IACjC,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACnC,cAAc,EAAE,MAAM,CAAC;CACxB,GAAG,cAAc,CA0BjB"}
+{"version":3,"file":"injection.d.ts","sourceRoot":"","sources":["../../src/vault/injection.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,KAAK,EAAE,aAAa,EAAsB,cAAc,EAAE,MAAM,YAAY,CAAC;AAEpF,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE;IAC7C,KAAK,EAAE,aAAa,GAAG,SAAS,CAAC;IACjC,YAAY,EAAE,6BAA6B,CAAC;IAC5C,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACnC,cAAc,EAAE,MAAM,CAAC;CACxB,GAAG,cAAc,CA6BjB"}

package/dist/vault/injection.js

@@ -1,7 +1,10 @@
 import { existsSync } from "fs";
 import { reportUserFacingError } from "../observability/sentry.js";
 export function resolveVaultInjection(options) {
-    const { vault, sandboxType, conversationId } = options;
+    const { vault, capabilities, sandboxType, conversationId } = options;
+    if (vault && vault.mounts.length > 0 && !capabilities.fileMounts) {
+        throw new Error(`Sandbox type "${sandboxType}" does not support vault file mounts`);
+    }
     const mounts = [];
     for (const mount of vault?.mounts ?? []) {
         if (!existsSync(mount.source)) {
@@ -21,7 +24,7 @@ export function resolveVaultInjection(options) {
         }
         mounts.push({ source: mount.source, target: mount.target });
     }
-    const env = sandboxType !== "host" && vault && Object.keys(vault.env).length > 0 ? vault.env : undefined;
+    const env = capabilities.env && vault && Object.keys(vault.env).length > 0 ? vault.env : undefined;
     return { ...(env ? { env } : {}), mounts };
 }
 //# sourceMappingURL=injection.js.map

package/dist/vault/injection.js.map

@@ -1 +1 @@
-{"version":3,"file":"injection.js","sourceRoot":"","sources":["../../src/vault/injection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAiBnE,MAAM,UAAU,qBAAqB,CAAC,OAIrC;IACC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC;IAEvD,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,qBAAqB,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,EAAE;gBAChE,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,iBAAiB;gBAC1B,SAAS,EAAE,gBAAgB;gBAC3B,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE;oBACP,WAAW;oBACX,cAAc;oBACd,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC;iBACzB;aACF,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,GAAG,GACP,WAAW,KAAK,MAAM,IAAI,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;AAC7C,CAAC","sourcesContent":["import { existsSync } from \"fs\";\nimport { reportUserFacingError } from \"../observability/sentry.js\";\nimport type { SandboxConfig } from \"../sandbox/types.js\";\nimport type { ResolvedVault, ResolvedVaultMount } from \"./types.js\";\n\n/**\n * What an actor's vault contributes to one sandbox execution. This is the\n * vault side of credential injection — the execution resolver composes it\n * with its own workspace layout and per-actor config shaping, without\n * knowing what a vault mount means or when vault env may flow.\n */\nexport interface VaultInjection {\n  /** Per-exec env; absent for host sandboxes (no isolation) and empty vaults. */\n  env?: Record<string, string>;\n  /** Credential mounts whose sources exist; missing sources are reported and skipped. */\n  mounts: ResolvedVaultMount[];\n}\n\nexport function resolveVaultInjection(options: {\n  vault: ResolvedVault | undefined;\n  sandboxType: SandboxConfig[\"type\"];\n  conversationId: string;\n}): VaultInjection {\n  const { vault, sandboxType, conversationId } = options;\n\n  const mounts: ResolvedVaultMount[] = [];\n  for (const mount of vault?.mounts ?? []) {\n    if (!existsSync(mount.source)) {\n      reportUserFacingError(new Error(\"Vault mount source is missing\"), {\n        domain: \"sandbox\",\n        surface: \"vault_injection\",\n        operation: \"resolve_mounts\",\n        severity: \"warning\",\n        context: {\n          sandboxType,\n          conversationId,\n          target: mount.target,\n          hasVault: Boolean(vault),\n        },\n      });\n      continue;\n    }\n    mounts.push({ source: mount.source, target: mount.target });\n  }\n\n  const env =\n    sandboxType !== \"host\" && vault && Object.keys(vault.env).length > 0 ? vault.env : undefined;\n  return { ...(env ? { env } : {}), mounts };\n}\n"]}
+{"version":3,"file":"injection.js","sourceRoot":"","sources":["../../src/vault/injection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAMnE,MAAM,UAAU,qBAAqB,CAAC,OAKrC;IACC,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC;IACrE,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,iBAAiB,WAAW,sCAAsC,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,qBAAqB,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,EAAE;gBAChE,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,iBAAiB;gBAC1B,SAAS,EAAE,gBAAgB;gBAC3B,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE;oBACP,WAAW;oBACX,cAAc;oBACd,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC;iBACzB;aACF,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,GAAG,GACP,YAAY,CAAC,GAAG,IAAI,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;AAC7C,CAAC","sourcesContent":["import { existsSync } from \"fs\";\nimport { reportUserFacingError } from \"../observability/sentry.js\";\nimport type { SandboxConfig, SandboxCredentialCapabilities } from \"../sandbox/types.js\";\nimport type { ResolvedVault, ResolvedVaultMount, VaultInjection } from \"./types.js\";\n\nexport type { VaultInjection } from \"./types.js\";\n\nexport function resolveVaultInjection(options: {\n  vault: ResolvedVault | undefined;\n  capabilities: SandboxCredentialCapabilities;\n  sandboxType: SandboxConfig[\"type\"];\n  conversationId: string;\n}): VaultInjection {\n  const { vault, capabilities, sandboxType, conversationId } = options;\n  if (vault && vault.mounts.length > 0 && !capabilities.fileMounts) {\n    throw new Error(`Sandbox type \"${sandboxType}\" does not support vault file mounts`);\n  }\n\n  const mounts: ResolvedVaultMount[] = [];\n  for (const mount of vault?.mounts ?? []) {\n    if (!existsSync(mount.source)) {\n      reportUserFacingError(new Error(\"Vault mount source is missing\"), {\n        domain: \"sandbox\",\n        surface: \"vault_injection\",\n        operation: \"resolve_mounts\",\n        severity: \"warning\",\n        context: {\n          sandboxType,\n          conversationId,\n          target: mount.target,\n          hasVault: Boolean(vault),\n        },\n      });\n      continue;\n    }\n    mounts.push({ source: mount.source, target: mount.target });\n  }\n\n  const env =\n    capabilities.env && vault && Object.keys(vault.env).length > 0 ? vault.env : undefined;\n  return { ...(env ? { env } : {}), mounts };\n}\n"]}

package/dist/vault/policy.d.ts

@@ -9,9 +9,9 @@ import type { SandboxConfig } from "../sandbox/index.js";
  * must not inherit ambient credentials — host-side platform identity or an
  * explicitly provisioned vault only.
  *
- * Topology: only isolated sandboxes (`image` / `cloudflare`) auto-provision
- * per-conversation vaults that receive the copy. `host` / `container` /
- * `firecracker` do not use this ambient path.
+ * Topology: isolated sandboxes (`image` / `agent-sandbox` / `cloudflare`)
+ * auto-provision per-conversation vaults that receive the copy. `host` and
+ * `container` do not use this ambient path.
  */
 export declare function allowsAmbientDefaultSharedVault(options: {
     trustModel?: PlatformTrustModel;

package/dist/vault/policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/vault/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;;;;;;;;;;;GAYG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAAE;IACvD,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACpC,GAAG,OAAO,CAIV"}
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/vault/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;;;;;;;;;;;GAYG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAAE;IACvD,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACpC,GAAG,OAAO,CAQV"}

package/dist/vault/policy.js

@@ -7,14 +7,16 @@
  * must not inherit ambient credentials — host-side platform identity or an
  * explicitly provisioned vault only.
  *
- * Topology: only isolated sandboxes (`image` / `cloudflare`) auto-provision
- * per-conversation vaults that receive the copy. `host` / `container` /
- * `firecracker` do not use this ambient path.
+ * Topology: isolated sandboxes (`image` / `agent-sandbox` / `cloudflare`)
+ * auto-provision per-conversation vaults that receive the copy. `host` and
+ * `container` do not use this ambient path.
  */
 export function allowsAmbientDefaultSharedVault(options) {
     const trustModel = options.trustModel ?? "membership";
     if (trustModel === "open-trigger")
         return false;
-    return options.sandboxType === "image" || options.sandboxType === "cloudflare";
+    return (options.sandboxType === "image" ||
+        options.sandboxType === "agent-sandbox" ||
+        options.sandboxType === "cloudflare");
 }
 //# sourceMappingURL=policy.js.map

package/dist/vault/policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/vault/policy.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,+BAA+B,CAAC,OAG/C;IACC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,YAAY,CAAC;IACtD,IAAI,UAAU,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,OAAO,CAAC,WAAW,KAAK,OAAO,IAAI,OAAO,CAAC,WAAW,KAAK,YAAY,CAAC;AACjF,CAAC","sourcesContent":["import type { PlatformTrustModel } from \"../types.js\";\nimport type { SandboxConfig } from \"../sandbox/index.js\";\n\n/**\n * Decide whether a new conversation vault may inherit `sandbox.defaultSharedVault`.\n *\n * Ambient copy is a membership-trust convenience: only appropriate when the\n * people who can drive the agent are already gated by platform membership\n * (Slack/Discord/Telegram). Open-trigger surfaces (GitHub issue/PR comments)\n * must not inherit ambient credentials — host-side platform identity or an\n * explicitly provisioned vault only.\n *\n * Topology: only isolated sandboxes (`image` / `cloudflare`) auto-provision\n * per-conversation vaults that receive the copy. `host` / `container` /\n * `firecracker` do not use this ambient path.\n */\nexport function allowsAmbientDefaultSharedVault(options: {\n  trustModel?: PlatformTrustModel;\n  sandboxType: SandboxConfig[\"type\"];\n}): boolean {\n  const trustModel = options.trustModel ?? \"membership\";\n  if (trustModel === \"open-trigger\") return false;\n  return options.sandboxType === \"image\" || options.sandboxType === \"cloudflare\";\n}\n"]}
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/vault/policy.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,+BAA+B,CAAC,OAG/C;IACC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,YAAY,CAAC;IACtD,IAAI,UAAU,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,CACL,OAAO,CAAC,WAAW,KAAK,OAAO;QAC/B,OAAO,CAAC,WAAW,KAAK,eAAe;QACvC,OAAO,CAAC,WAAW,KAAK,YAAY,CACrC,CAAC;AACJ,CAAC","sourcesContent":["import type { PlatformTrustModel } from \"../types.js\";\nimport type { SandboxConfig } from \"../sandbox/index.js\";\n\n/**\n * Decide whether a new conversation vault may inherit `sandbox.defaultSharedVault`.\n *\n * Ambient copy is a membership-trust convenience: only appropriate when the\n * people who can drive the agent are already gated by platform membership\n * (Slack/Discord/Telegram). Open-trigger surfaces (GitHub issue/PR comments)\n * must not inherit ambient credentials — host-side platform identity or an\n * explicitly provisioned vault only.\n *\n * Topology: isolated sandboxes (`image` / `agent-sandbox` / `cloudflare`)\n * auto-provision per-conversation vaults that receive the copy. `host` and\n * `container` do not use this ambient path.\n */\nexport function allowsAmbientDefaultSharedVault(options: {\n  trustModel?: PlatformTrustModel;\n  sandboxType: SandboxConfig[\"type\"];\n}): boolean {\n  const trustModel = options.trustModel ?? \"membership\";\n  if (trustModel === \"open-trigger\") return false;\n  return (\n    options.sandboxType === \"image\" ||\n    options.sandboxType === \"agent-sandbox\" ||\n    options.sandboxType === \"cloudflare\"\n  );\n}\n"]}

package/dist/vault/types.d.ts

@@ -13,6 +13,10 @@ export interface ResolvedVault {
     /** Parsed from env file */
     env: Record<string, string>;
 }
+export interface VaultInjection {
+    env?: Record<string, string>;
+    mounts: ResolvedVaultMount[];
+}
 export interface VaultManager {
     /** Return true when a vault directory exists for this exact key. */
     hasEntry(key: string): boolean;

package/dist/vault/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/vault/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,8CAA8C;AAC9C,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,2BAA2B;IAC3B,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,2BAA2B;IAC3B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IAC3B,oEAAoE;IACpE,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAC/B,4EAA4E;IAC5E,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAC;IACnD,8DAA8D;IAC9D,gDAAgD;IAChD,IAAI,IAAI,aAAa,EAAE,CAAC;IACxB,4CAA4C;IAC5C,SAAS,IAAI,OAAO,CAAC;IACrB,kFAAkF;IAClF,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAC1D,yFAAyF;IACzF,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1F,6DAA6D;IAC7D,gBAAgB,IAAI,MAAM,EAAE,CAAC;IAC7B,+EAA+E;IAC/E,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACzC,wEAAwE;IACxE,iBAAiB,CACf,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,GAChB;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;CACnD"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/vault/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,8CAA8C;AAC9C,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,2BAA2B;IAC3B,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,2BAA2B;IAC3B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,MAAM,EAAE,kBAAkB,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,YAAY;IAC3B,oEAAoE;IACpE,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAC/B,4EAA4E;IAC5E,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAC;IACnD,8DAA8D;IAC9D,gDAAgD;IAChD,IAAI,IAAI,aAAa,EAAE,CAAC;IACxB,4CAA4C;IAC5C,SAAS,IAAI,OAAO,CAAC;IACrB,kFAAkF;IAClF,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAC1D,yFAAyF;IACzF,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1F,6DAA6D;IAC7D,gBAAgB,IAAI,MAAM,EAAE,CAAC;IAC7B,+EAA+E;IAC/E,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACzC,wEAAwE;IACxE,iBAAiB,CACf,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,GAChB;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;CACnD"}

package/dist/vault/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/vault/types.ts"],"names":[],"mappings":"","sourcesContent":["export interface ResolvedVaultMount {\n  source: string;\n  target: string;\n}\n\n/** Resolved vault ready for use at runtime */\nexport interface ResolvedVault {\n  userId: string;\n  displayName: string;\n  /** Absolute path to vault directory */\n  dir: string;\n  /** Absolute mount specs */\n  mounts: ResolvedVaultMount[];\n  /** Parsed from env file */\n  env: Record<string, string>;\n}\n\nexport interface VaultManager {\n  /** Return true when a vault directory exists for this exact key. */\n  hasEntry(key: string): boolean;\n  /** Resolve vault for a user; returns undefined when no directory exists. */\n  resolve(userId: string): ResolvedVault | undefined;\n  /** Get sandbox config with credential injection for a user */\n  /** List all vaults discovered under vaults/. */\n  list(): ResolvedVault[];\n  /** Check if the vaults directory exists. */\n  isEnabled(): boolean;\n  /** Merge environment variables into vaults/<key>/env and persist them to disk. */\n  upsertEnv(key: string, env: Record<string, string>): void;\n  /** Write a private file into vaults/<key>/ and ensure it is mounted into the sandbox. */\n  upsertFile(key: string, relativePath: string, content: string, targetPath?: string): void;\n  /** List named shared login profiles under vaults/shared/. */\n  listSharedVaults(): string[];\n  /** Delete a shared login profile's directory. Returns true when it existed. */\n  deleteSharedVault(name: string): boolean;\n  /** Copy a shared login profile's files into another vault directory. */\n  copySharedVaultTo(\n    name: string,\n    targetKey: string,\n  ): { filesCopied: number; envKeysCopied: number };\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/vault/types.ts"],"names":[],"mappings":"","sourcesContent":["export interface ResolvedVaultMount {\n  source: string;\n  target: string;\n}\n\n/** Resolved vault ready for use at runtime */\nexport interface ResolvedVault {\n  userId: string;\n  displayName: string;\n  /** Absolute path to vault directory */\n  dir: string;\n  /** Absolute mount specs */\n  mounts: ResolvedVaultMount[];\n  /** Parsed from env file */\n  env: Record<string, string>;\n}\n\nexport interface VaultInjection {\n  env?: Record<string, string>;\n  mounts: ResolvedVaultMount[];\n}\n\nexport interface VaultManager {\n  /** Return true when a vault directory exists for this exact key. */\n  hasEntry(key: string): boolean;\n  /** Resolve vault for a user; returns undefined when no directory exists. */\n  resolve(userId: string): ResolvedVault | undefined;\n  /** Get sandbox config with credential injection for a user */\n  /** List all vaults discovered under vaults/. */\n  list(): ResolvedVault[];\n  /** Check if the vaults directory exists. */\n  isEnabled(): boolean;\n  /** Merge environment variables into vaults/<key>/env and persist them to disk. */\n  upsertEnv(key: string, env: Record<string, string>): void;\n  /** Write a private file into vaults/<key>/ and ensure it is mounted into the sandbox. */\n  upsertFile(key: string, relativePath: string, content: string, targetPath?: string): void;\n  /** List named shared login profiles under vaults/shared/. */\n  listSharedVaults(): string[];\n  /** Delete a shared login profile's directory. Returns true when it existed. */\n  deleteSharedVault(name: string): boolean;\n  /** Copy a shared login profile's files into another vault directory. */\n  copySharedVaultTo(\n    name: string,\n    targetKey: string,\n  ): { filesCopied: number; envKeysCopied: number };\n}\n"]}

package/dist/web/admin/portal.js

@@ -8,7 +8,7 @@ import { readRawBody } from "../../utils/http-body.js";
 import { renderPortalShell } from "../portal-shell.js";
 import { resolveExistingSessionFile } from "../session-view/service.js";
 import { PRODUCT_NAME } from "../../platform-messages.js";
-import { actorKey } from "../../sandbox/identity.js";
+import { credentialAuthorizationKey } from "../../sandbox/identity.js";
 import { sharedVaultKey } from "../../vault/index.js";
 import { modelKey, resolveAdminModelAccessStatuses } from "./provider-models.js";
 // ── Handler ────────────────────────────────────────────────────────────────────
@@ -692,7 +692,7 @@ function serveConversationLoginLink(res, body, services, token) {
     }
     else {
         try {
-            vaultId = actorKey(services.sandbox, {
+            vaultId = credentialAuthorizationKey(services.sandbox, {
                 userId: token.platformUserId,
                 conversationId: scope.conversationId,
             });