@geminixiang/mikan 1.0.0-beta.3 → 1.0.0-beta.30

package/dist/cli/arg-grammar.d.ts

@@ -0,0 +1,25 @@
+export declare function defaultStateDir(): string;
+/**
+ * Match `args[i]` against a value flag, accepting both `--name value` and
+ * `--name=value`. Returns the raw value and the index of the last argv slot
+ * consumed, or undefined when `args[i]` is not this flag.
+ */
+export declare function takeValueFlag(args: string[], i: number, name: string): {
+    value: string;
+    lastIndex: number;
+} | undefined;
+/**
+ * Effective state dir — the ONE place its precedence is decided:
+ * `--state-dir` flag (last occurrence wins) > STATE_DIR / MIKAN_STATE_DIR
+ * env > `~/.mikan`. Boot writes the resolved value back into the env
+ * (setEnvAliases) purely as a compatibility channel for code that runs
+ * without access to the boot plan — see `effectiveStateDir`.
+ */
+export declare function resolveStateDir(args?: string[], envValue?: string | undefined): string;
+/**
+ * State dir for post-boot readers: the env channel (which boot populated
+ * from the resolved plan) with the shared default. Never re-reads argv —
+ * by the time this runs, any `--state-dir` flag is already folded in.
+ */
+export declare function effectiveStateDir(): string;
+//# sourceMappingURL=arg-grammar.d.ts.map

package/dist/cli/arg-grammar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"arg-grammar.d.ts","sourceRoot":"","sources":["../../src/cli/arg-grammar.ts"],"names":[],"mappings":"AAaA,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EAAE,EACd,CAAC,EAAE,MAAM,EACT,IAAI,EAAE,MAAM,GACX;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAKlD;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,IAAI,GAAE,MAAM,EAA0B,EACtC,QAAQ,GAAE,MAAM,GAAG,SAAgC,GAClD,MAAM,CAYR;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C"}

package/dist/cli/arg-grammar.js

@@ -0,0 +1,59 @@
+/**
+ * Shared pieces of the CLI flag grammar.
+ *
+ * `resolveBoot` (cli/boot.ts) is the daemon's only full argv parser. This
+ * module holds what other scanners must agree with it on: the value-flag
+ * spelling (`--flag value` / `--flag=value`) via `takeValueFlag`, the default
+ * state dir, and an early `--state-dir` probe for import-time consumers
+ * (Sentry instrumentation) that must not load the boot path.
+ */
+import { homedir } from "os";
+import { join, resolve } from "path";
+import { readEnv } from "../utils/env.js";
+export function defaultStateDir() {
+    return join(homedir(), ".mikan");
+}
+/**
+ * Match `args[i]` against a value flag, accepting both `--name value` and
+ * `--name=value`. Returns the raw value and the index of the last argv slot
+ * consumed, or undefined when `args[i]` is not this flag.
+ */
+export function takeValueFlag(args, i, name) {
+    const arg = args[i];
+    if (arg === name)
+        return { value: args[i + 1] ?? "", lastIndex: i + 1 };
+    if (arg.startsWith(name + "="))
+        return { value: arg.slice(name.length + 1), lastIndex: i };
+    return undefined;
+}
+/**
+ * Effective state dir — the ONE place its precedence is decided:
+ * `--state-dir` flag (last occurrence wins) > STATE_DIR / MIKAN_STATE_DIR
+ * env > `~/.mikan`. Boot writes the resolved value back into the env
+ * (setEnvAliases) purely as a compatibility channel for code that runs
+ * without access to the boot plan — see `effectiveStateDir`.
+ */
+export function resolveStateDir(args = process.argv.slice(2), envValue = readEnv("STATE_DIR")) {
+    let flagValue;
+    for (let i = 0; i < args.length; i++) {
+        const taken = takeValueFlag(args, i, "--state-dir");
+        if (taken) {
+            flagValue = taken.value;
+            i = taken.lastIndex;
+        }
+    }
+    if (flagValue !== undefined)
+        return resolve(flagValue);
+    if (envValue)
+        return resolve(envValue);
+    return defaultStateDir();
+}
+/**
+ * State dir for post-boot readers: the env channel (which boot populated
+ * from the resolved plan) with the shared default. Never re-reads argv —
+ * by the time this runs, any `--state-dir` flag is already folded in.
+ */
+export function effectiveStateDir() {
+    return resolveStateDir([]);
+}
+//# sourceMappingURL=arg-grammar.js.map

package/dist/cli/arg-grammar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"arg-grammar.js","sourceRoot":"","sources":["../../src/cli/arg-grammar.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAc,EACd,CAAS,EACT,IAAY;IAEZ,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IACxE,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC3F,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAI,GAAa,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EACtC,QAAQ,GAAuB,OAAO,CAAC,WAAW,CAAC;IAEnD,IAAI,SAA6B,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;QACpD,IAAI,KAAK,EAAE,CAAC;YACV,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC;YACxB,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC;QACtB,CAAC;IACH,CAAC;IACD,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;IACvD,IAAI,QAAQ;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,OAAO,eAAe,EAAE,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,eAAe,CAAC,EAAE,CAAC,CAAC;AAC7B,CAAC","sourcesContent":["/**\n * Shared pieces of the CLI flag grammar.\n *\n * `resolveBoot` (cli/boot.ts) is the daemon's only full argv parser. This\n * module holds what other scanners must agree with it on: the value-flag\n * spelling (`--flag value` / `--flag=value`) via `takeValueFlag`, the default\n * state dir, and an early `--state-dir` probe for import-time consumers\n * (Sentry instrumentation) that must not load the boot path.\n */\nimport { homedir } from \"os\";\nimport { join, resolve } from \"path\";\nimport { readEnv } from \"../utils/env.js\";\n\nexport function defaultStateDir(): string {\n  return join(homedir(), \".mikan\");\n}\n\n/**\n * Match `args[i]` against a value flag, accepting both `--name value` and\n * `--name=value`. Returns the raw value and the index of the last argv slot\n * consumed, or undefined when `args[i]` is not this flag.\n */\nexport function takeValueFlag(\n  args: string[],\n  i: number,\n  name: string,\n): { value: string; lastIndex: number } | undefined {\n  const arg = args[i];\n  if (arg === name) return { value: args[i + 1] ?? \"\", lastIndex: i + 1 };\n  if (arg.startsWith(name + \"=\")) return { value: arg.slice(name.length + 1), lastIndex: i };\n  return undefined;\n}\n\n/**\n * Effective state dir — the ONE place its precedence is decided:\n * `--state-dir` flag (last occurrence wins) > STATE_DIR / MIKAN_STATE_DIR\n * env > `~/.mikan`. Boot writes the resolved value back into the env\n * (setEnvAliases) purely as a compatibility channel for code that runs\n * without access to the boot plan — see `effectiveStateDir`.\n */\nexport function resolveStateDir(\n  args: string[] = process.argv.slice(2),\n  envValue: string | undefined = readEnv(\"STATE_DIR\"),\n): string {\n  let flagValue: string | undefined;\n  for (let i = 0; i < args.length; i++) {\n    const taken = takeValueFlag(args, i, \"--state-dir\");\n    if (taken) {\n      flagValue = taken.value;\n      i = taken.lastIndex;\n    }\n  }\n  if (flagValue !== undefined) return resolve(flagValue);\n  if (envValue) return resolve(envValue);\n  return defaultStateDir();\n}\n\n/**\n * State dir for post-boot readers: the env channel (which boot populated\n * from the resolved plan) with the shared default. Never re-reads argv —\n * by the time this runs, any `--state-dir` flag is already folded in.\n */\nexport function effectiveStateDir(): string {\n  return resolveStateDir([]);\n}\n"]}

package/dist/cli/boot.d.ts

@@ -0,0 +1,5 @@
+import type { BootPlan } from "./types.js";
+export type { BootPlan } from "./types.js";
+export declare function resolveBoot(args?: string[]): BootPlan;
+export declare function helpText(): string;
+//# sourceMappingURL=boot.d.ts.map

package/dist/cli/boot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boot.d.ts","sourceRoot":"","sources":["../../src/cli/boot.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAG3C,YAAY,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,wBAAgB,WAAW,CAAC,IAAI,GAAE,MAAM,EAA0B,GAAG,QAAQ,CA8D5E;AAED,wBAAgB,QAAQ,IAAI,MAAM,CA8BjC"}

package/dist/cli/boot.js

@@ -0,0 +1,112 @@
+/**
+ * Boot resolution for the `mikan` binary: argv → a BootPlan saying which mode
+ * to run and with what configuration. Pure — no side effects, no exits — so
+ * the grammar that actually drives the daemon is testable without spawning a
+ * process; main.ts just executes the plan.
+ *
+ * Modes, highest priority first: `ext` (own grammar, never flag-parsed here),
+ * `help`, `version`, `onboard`, `download`, `run`.
+ */
+import { join, resolve } from "path";
+import { envSummaryLines } from "../env-manifest.js";
+import { parseSandboxArg } from "../sandbox/index.js";
+import { defaultStateDir, resolveStateDir, takeValueFlag } from "./arg-grammar.js";
+export function resolveBoot(args = process.argv.slice(2)) {
+    if (args[0] === "ext" || args[0] === "env") {
+        return {
+            mode: args[0],
+            ...(args[0] === "ext" ? { extArgs: args.slice(1) } : {}),
+            stateDir: defaultStateDir(),
+            workingDir: join(defaultStateDir(), "workspace"),
+            workingDirExplicit: false,
+            sandbox: { type: "host" },
+        };
+    }
+    let sandbox = { type: "host" };
+    let workingDirArg;
+    let downloadChannel;
+    let help = false;
+    let version = false;
+    let onboard = false;
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        let taken;
+        if (arg === "--help" || arg === "-h") {
+            help = true;
+        }
+        else if (arg === "--version" || arg === "-v" || arg === "-V") {
+            version = true;
+        }
+        else if (arg === "--onboard") {
+            onboard = true;
+        }
+        else if ((taken = takeValueFlag(args, i, "--sandbox"))) {
+            sandbox = parseSandboxArg(taken.value);
+            i = taken.lastIndex;
+        }
+        else if ((taken = takeValueFlag(args, i, "--state-dir"))) {
+            // Consumed here so its value never reads as the positional working
+            // dir; the value itself is resolved by resolveStateDir below.
+            i = taken.lastIndex;
+        }
+        else if ((taken = takeValueFlag(args, i, "--download"))) {
+            downloadChannel = taken.value;
+            i = taken.lastIndex;
+        }
+        else if (!arg.startsWith("-")) {
+            workingDirArg = arg;
+        }
+        else {
+            throw new Error(`Unknown flag: ${arg}. Run \`mikan --help\` for usage.`);
+        }
+    }
+    const stateDir = resolveStateDir(args);
+    return {
+        mode: help
+            ? "help"
+            : version
+                ? "version"
+                : onboard
+                    ? "onboard"
+                    : downloadChannel
+                        ? "download"
+                        : "run",
+        stateDir,
+        workingDir: workingDirArg ? resolve(workingDirArg) : join(stateDir, "workspace"),
+        workingDirExplicit: workingDirArg !== undefined,
+        sandbox,
+        downloadChannel,
+    };
+}
+export function helpText() {
+    return `mikan — multi-platform chat agent daemon
+
+Usage:
+  mikan [options] [working-directory]
+      Start the daemon. The working directory defaults to <state-dir>/workspace.
+  mikan ext <install|validate|list|remove> …
+      Manage extensions (run \`mikan ext\` for details).
+  mikan env
+      Show the full environment-variable inventory and what is currently set.
+
+Options:
+  --state-dir <dir>      State directory (settings.json, vaults, extensions).
+                         Default: ~/.mikan
+  --sandbox <spec>       Execution sandbox. One of:
+                           host
+                           container:<existing-container-name>
+                           image:<image[:tag]>
+                           gondolin:default
+                           firecracker:<vm-id>:<host-path>[:<ssh-user>[:<ssh-port>]]
+                           cloudflare:<sandbox-id>
+                         Default: host
+  --onboard              Create <state-dir>/settings.json from a template, then exit.
+  --download <channel>   Dump a Slack channel's history (Slack only), then exit.
+  --version, -v          Print the version.
+  --help, -h             Show this help.
+
+Environment (platform tokens select which chat adapters start):
+${envSummaryLines().join("\n")}
+Run \`mikan env\` for the full inventory.`;
+}
+//# sourceMappingURL=boot.js.map

package/dist/cli/boot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"boot.js","sourceRoot":"","sources":["../../src/cli/boot.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAInF,MAAM,UAAU,WAAW,CAAC,IAAI,GAAa,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;QAC3C,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,QAAQ,EAAE,eAAe,EAAE;YAC3B,UAAU,EAAE,IAAI,CAAC,eAAe,EAAE,EAAE,WAAW,CAAC;YAChD,kBAAkB,EAAE,KAAK;YACzB,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SAC1B,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,GAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9C,IAAI,aAAiC,CAAC;IACtC,IAAI,eAAmC,CAAC;IACxC,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,KAAK,CAAC;QACV,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACrC,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC/D,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;aAAM,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YAC/B,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;YACzD,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACvC,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC;QACtB,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;YAC3D,mEAAmE;YACnE,8DAA8D;YAC9D,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC;QACtB,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;YAC1D,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC;YAC9B,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC;QACtB,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,aAAa,GAAG,GAAG,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,mCAAmC,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO;QACL,IAAI,EAAE,IAAI;YACR,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,OAAO;gBACP,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,OAAO;oBACP,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,eAAe;wBACf,CAAC,CAAC,UAAU;wBACZ,CAAC,CAAC,KAAK;QACf,QAAQ;QACR,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC;QAChF,kBAAkB,EAAE,aAAa,KAAK,SAAS;QAC/C,OAAO;QACP,eAAe;KAChB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ;IACtB,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2BP,eAAe,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;0CACY,CAAC;AAC3C,CAAC","sourcesContent":["/**\n * Boot resolution for the `mikan` binary: argv → a BootPlan saying which mode\n * to run and with what configuration. Pure — no side effects, no exits — so\n * the grammar that actually drives the daemon is testable without spawning a\n * process; main.ts just executes the plan.\n *\n * Modes, highest priority first: `ext` (own grammar, never flag-parsed here),\n * `help`, `version`, `onboard`, `download`, `run`.\n */\nimport { join, resolve } from \"path\";\nimport { envSummaryLines } from \"../env-manifest.js\";\nimport { parseSandboxArg } from \"../sandbox/index.js\";\nimport type { SandboxConfig } from \"../sandbox/types.js\";\nimport type { BootPlan } from \"./types.js\";\nimport { defaultStateDir, resolveStateDir, takeValueFlag } from \"./arg-grammar.js\";\n\nexport type { BootPlan } from \"./types.js\";\n\nexport function resolveBoot(args: string[] = process.argv.slice(2)): BootPlan {\n  if (args[0] === \"ext\" || args[0] === \"env\") {\n    return {\n      mode: args[0],\n      ...(args[0] === \"ext\" ? { extArgs: args.slice(1) } : {}),\n      stateDir: defaultStateDir(),\n      workingDir: join(defaultStateDir(), \"workspace\"),\n      workingDirExplicit: false,\n      sandbox: { type: \"host\" },\n    };\n  }\n\n  let sandbox: SandboxConfig = { type: \"host\" };\n  let workingDirArg: string | undefined;\n  let downloadChannel: string | undefined;\n  let help = false;\n  let version = false;\n  let onboard = false;\n\n  for (let i = 0; i < args.length; i++) {\n    const arg = args[i];\n    let taken;\n    if (arg === \"--help\" || arg === \"-h\") {\n      help = true;\n    } else if (arg === \"--version\" || arg === \"-v\" || arg === \"-V\") {\n      version = true;\n    } else if (arg === \"--onboard\") {\n      onboard = true;\n    } else if ((taken = takeValueFlag(args, i, \"--sandbox\"))) {\n      sandbox = parseSandboxArg(taken.value);\n      i = taken.lastIndex;\n    } else if ((taken = takeValueFlag(args, i, \"--state-dir\"))) {\n      // Consumed here so its value never reads as the positional working\n      // dir; the value itself is resolved by resolveStateDir below.\n      i = taken.lastIndex;\n    } else if ((taken = takeValueFlag(args, i, \"--download\"))) {\n      downloadChannel = taken.value;\n      i = taken.lastIndex;\n    } else if (!arg.startsWith(\"-\")) {\n      workingDirArg = arg;\n    } else {\n      throw new Error(`Unknown flag: ${arg}. Run \\`mikan --help\\` for usage.`);\n    }\n  }\n\n  const stateDir = resolveStateDir(args);\n  return {\n    mode: help\n      ? \"help\"\n      : version\n        ? \"version\"\n        : onboard\n          ? \"onboard\"\n          : downloadChannel\n            ? \"download\"\n            : \"run\",\n    stateDir,\n    workingDir: workingDirArg ? resolve(workingDirArg) : join(stateDir, \"workspace\"),\n    workingDirExplicit: workingDirArg !== undefined,\n    sandbox,\n    downloadChannel,\n  };\n}\n\nexport function helpText(): string {\n  return `mikan — multi-platform chat agent daemon\n\nUsage:\n  mikan [options] [working-directory]\n      Start the daemon. The working directory defaults to <state-dir>/workspace.\n  mikan ext <install|validate|list|remove> …\n      Manage extensions (run \\`mikan ext\\` for details).\n  mikan env\n      Show the full environment-variable inventory and what is currently set.\n\nOptions:\n  --state-dir <dir>      State directory (settings.json, vaults, extensions).\n                         Default: ~/.mikan\n  --sandbox <spec>       Execution sandbox. One of:\n                           host\n                           container:<existing-container-name>\n                           image:<image[:tag]>\n                           gondolin:default\n                           firecracker:<vm-id>:<host-path>[:<ssh-user>[:<ssh-port>]]\n                           cloudflare:<sandbox-id>\n                         Default: host\n  --onboard              Create <state-dir>/settings.json from a template, then exit.\n  --download <channel>   Dump a Slack channel's history (Slack only), then exit.\n  --version, -v          Print the version.\n  --help, -h             Show this help.\n\nEnvironment (platform tokens select which chat adapters start):\n${envSummaryLines().join(\"\\n\")}\nRun \\`mikan env\\` for the full inventory.`;\n}\n"]}

package/dist/cli/download.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"download.d.ts","sourceRoot":"","sources":["../../src/cli/download.ts"],"names":[],"mappings":"AA6BA,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuFxF"}

package/dist/cli/download.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"download.js","sourceRoot":"","sources":["../../src/cli/download.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAWrD,SAAS,QAAQ,CAAC,EAAU;IAC1B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7C,OAAO,IAAI;SACR,WAAW,EAAE;SACb,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC;SACjB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,aAAa,CAAC,EAAU,EAAE,IAAY,EAAE,IAAY,EAAE,MAAM,GAAG,EAAE;IACxE,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC;IAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAClD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,0DAA0D;IAC1D,MAAM,aAAa,GAAG,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD,OAAO,CAAC,SAAS,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB,EAAE,QAAgB;IACvE,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAErE,OAAO,CAAC,KAAK,CAAC,6BAA6B,SAAS,KAAK,CAAC,CAAC;IAE3D,mBAAmB;IACnB,IAAI,WAAW,GAAG,SAAS,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACrE,WAAW,GAAG,OAAO,IAAI,CAAC,OAAO,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;IAC9C,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,4BAA4B,WAAW,KAAK,SAAS,MAAM,CAAC,CAAC;IAE3E,qBAAqB;IACrB,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,IAAI,MAA0B,CAAC;IAE/B,GAAG,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC;YAClD,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,GAAG;YACV,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,GAAI,QAAQ,CAAC,QAAsB,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,GAAG,QAAQ,CAAC,iBAAiB,EAAE,WAAW,CAAC;QACjD,OAAO,CAAC,KAAK,CAAC,aAAa,QAAQ,CAAC,MAAM,cAAc,CAAC,CAAC;IAC5D,CAAC,QAAQ,MAAM,EAAE;IAEjB,iCAAiC;IACjC,QAAQ,CAAC,OAAO,EAAE,CAAC;IAEnB,8BAA8B;IAC9B,MAAM,aAAa,GAAG,IAAI,GAAG,EAAqB,CAAC;IACnD,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;IAElF,OAAO,CAAC,KAAK,CAAC,YAAY,cAAc,CAAC,MAAM,aAAa,CAAC,CAAC;IAE9D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QACjC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,MAAM,KAAK,MAAM,CAAC,WAAW,cAAc,CAAC,CAAC;QAE/F,MAAM,OAAO,GAAc,EAAE,CAAC;QAC9B,IAAI,YAAgC,CAAC;QAErC,GAAG,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC;gBAClD,OAAO,EAAE,SAAS;gBAClB,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,KAAK,EAAE,GAAG;gBACV,MAAM,EAAE,YAAY;aACrB,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACtB,2CAA2C;gBAC3C,OAAO,CAAC,IAAI,CAAC,GAAI,QAAQ,CAAC,QAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,CAAC;YAED,YAAY,GAAG,QAAQ,CAAC,iBAAiB,EAAE,WAAW,CAAC;QACzD,CAAC,QAAQ,YAAY,EAAE;QAEvB,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,kDAAkD;IAClD,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,qBAAqB;QACrB,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,IAAI,SAAS,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QAE1E,sDAAsD;QACtD,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,SAAS,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;gBACtF,YAAY,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,SAAS,QAAQ,CAAC,MAAM,cAAc,YAAY,iBAAiB,CAAC,CAAC;AACrF,CAAC","sourcesContent":["import { LogLevel, WebClient } from \"@slack/web-api\";\n\ninterface Message {\n  ts: string;\n  user?: string;\n  text?: string;\n  thread_ts?: string;\n  reply_count?: number;\n  files?: Array<{ name: string; url_private?: string }>;\n}\n\nfunction formatTs(ts: string): string {\n  const date = new Date(parseFloat(ts) * 1000);\n  return date\n    .toISOString()\n    .replace(\"T\", \" \")\n    .replace(/\\.\\d+Z$/, \"\");\n}\n\nfunction formatMessage(ts: string, user: string, text: string, indent = \"\"): string {\n  const prefix = `[${formatTs(ts)}] ${user}: `;\n  const lines = text.split(\"\\n\");\n  const firstLine = `${indent}${prefix}${lines[0]}`;\n  if (lines.length === 1) return firstLine;\n  // All continuation lines get same indent as content start\n  const contentIndent = indent + \" \".repeat(prefix.length);\n  return [firstLine, ...lines.slice(1).map((l) => contentIndent + l)].join(\"\\n\");\n}\n\nexport async function downloadChannel(channelId: string, botToken: string): Promise<void> {\n  const client = new WebClient(botToken, { logLevel: LogLevel.ERROR });\n\n  console.error(`Fetching channel info for ${channelId}...`);\n\n  // Get channel info\n  let channelName = channelId;\n  try {\n    const info = await client.conversations.info({ channel: channelId });\n    channelName = typeof info.channel?.name === \"string\" ? info.channel.name : channelId;\n  } catch {\n    // DM channels don't have names, that's fine\n  }\n\n  console.error(`Downloading history for #${channelName} (${channelId})...`);\n\n  // Fetch all messages\n  const messages: Message[] = [];\n  let cursor: string | undefined;\n\n  do {\n    const response = await client.conversations.history({\n      channel: channelId,\n      limit: 200,\n      cursor,\n    });\n\n    if (response.messages) {\n      messages.push(...(response.messages as Message[]));\n    }\n\n    cursor = response.response_metadata?.next_cursor;\n    console.error(`  Fetched ${messages.length} messages...`);\n  } while (cursor);\n\n  // Reverse to chronological order\n  messages.reverse();\n\n  // Build map of thread replies\n  const threadReplies = new Map<string, Message[]>();\n  const threadsToFetch = messages.filter((m) => m.reply_count && m.reply_count > 0);\n\n  console.error(`Fetching ${threadsToFetch.length} threads...`);\n\n  for (let i = 0; i < threadsToFetch.length; i++) {\n    const parent = threadsToFetch[i];\n    console.error(`  Thread ${i + 1}/${threadsToFetch.length} (${parent.reply_count} replies)...`);\n\n    const replies: Message[] = [];\n    let threadCursor: string | undefined;\n\n    do {\n      const response = await client.conversations.replies({\n        channel: channelId,\n        ts: parent.ts,\n        limit: 200,\n        cursor: threadCursor,\n      });\n\n      if (response.messages) {\n        // Skip the first message (it's the parent)\n        replies.push(...(response.messages as Message[]).slice(1));\n      }\n\n      threadCursor = response.response_metadata?.next_cursor;\n    } while (threadCursor);\n\n    threadReplies.set(parent.ts, replies);\n  }\n\n  // Output messages with thread replies interleaved\n  let totalReplies = 0;\n  for (const msg of messages) {\n    // Output the message\n    console.log(formatMessage(msg.ts, msg.user || \"unknown\", msg.text || \"\"));\n\n    // Output thread replies right after parent (indented)\n    const replies = threadReplies.get(msg.ts);\n    if (replies) {\n      for (const reply of replies) {\n        console.log(formatMessage(reply.ts, reply.user || \"unknown\", reply.text || \"\", \"  \"));\n        totalReplies++;\n      }\n    }\n  }\n\n  console.error(`Done! ${messages.length} messages, ${totalReplies} thread replies`);\n}\n"]}

package/dist/cli/ext-dev.d.ts

@@ -0,0 +1,2 @@
+export declare function runExtDevCommand(argv: string[]): Promise<number>;
+//# sourceMappingURL=ext-dev.d.ts.map

package/dist/cli/ext-dev.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ext-dev.d.ts","sourceRoot":"","sources":["../../src/cli/ext-dev.ts"],"names":[],"mappings":"AAwDA,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAqDtE"}

package/dist/cli/ext-dev.js

@@ -0,0 +1,177 @@
+/**
+ * `mikan ext dev <path>` — develop an extension without a Slack workspace.
+ *
+ *   mikan ext dev ./my-extension
+ *   > add a poll for lunch
+ *   [agent reply]
+ *   > /pi-new          # picks up your edits
+ *
+ * The alternative this exists to avoid is asking every extension author to
+ * install mikan into a real Slack workspace, create an app, and deploy before
+ * they can see whether their `activate()` even runs.
+ *
+ * It is a stdin/stdout conversation on the same runtime production uses — same
+ * package resolution, same loader, same commands — with the platform swapped
+ * for the terminal and the sandbox set to `host`. That equivalence is the
+ * point: an extension that works here works in a channel, because nothing
+ * about how it is found or activated differs.
+ *
+ * The working copy is registered as a conversation-scoped local package, which
+ * is by-reference rather than copied, so the edit → `/pi-new` → test loop needs
+ * no reinstall step.
+ */
+import { createInterface } from "node:readline";
+import { existsSync, mkdirSync, statSync } from "node:fs";
+import { basename, resolve as resolvePath } from "node:path";
+import { join } from "node:path";
+import { createConversationRuntime, } from "../index.js";
+import { updateConversationSettings } from "../config.js";
+import { formatSource, parseSource } from "../packages/index.js";
+import { resolveStateDir, takeValueFlag } from "./arg-grammar.js";
+const USAGE = `Usage:
+  mikan ext dev <path|source> [--workspace <dir>] [--state-dir <dir>]
+
+  <path>       a working copy of an extension (or a package directory)
+  --workspace  where conversation state is written (default: ./.mikan-ext-dev)
+
+  Type a message to run the agent against your extension. /pi-new reloads it
+  after an edit; Ctrl-D exits.`;
+/**
+ * One dev conversation per extension, so two extensions can be developed side
+ * by side without overwriting each other's settings or session history.
+ */
+function devConversationId(source) {
+    const name = basename(source.replace(/[#@].*$/, "").replace(/\/+$/, "")) || "extension";
+    return `ext-dev-${name.toLowerCase().replace(/[^a-z0-9_-]+/g, "-")}`.slice(0, 64);
+}
+export async function runExtDevCommand(argv) {
+    const stateDir = resolveStateDir(argv);
+    let workspaceDir;
+    const positional = [];
+    for (let i = 0; i < argv.length; i++) {
+        let taken;
+        if ((taken = takeValueFlag(argv, i, "--workspace"))) {
+            workspaceDir = taken.value;
+            i = taken.lastIndex;
+        }
+        else if ((taken = takeValueFlag(argv, i, "--state-dir"))) {
+            i = taken.lastIndex; // already folded in by resolveStateDir
+        }
+        else
+            positional.push(argv[i]);
+    }
+    const target = positional[0];
+    if (!target) {
+        console.error(USAGE);
+        return 1;
+    }
+    // A local working copy is the common case; resolve it to an absolute path so
+    // the stored package source does not depend on the shell's cwd.
+    let source;
+    try {
+        const parsed = parseSource(existsSync(target) && !target.startsWith(".") ? resolvePath(target) : target);
+        source = formatSource(parsed);
+        if (parsed.type === "local" && !statSync(parsed.path).isDirectory()) {
+            console.error(`Not a directory: ${parsed.path}`);
+            return 1;
+        }
+    }
+    catch (err) {
+        console.error(err instanceof Error ? err.message : String(err));
+        return 1;
+    }
+    const conversationId = devConversationId(target);
+    const workingDir = resolvePath(workspaceDir ?? join(process.cwd(), ".mikan-ext-dev"));
+    mkdirSync(join(workingDir, conversationId), { recursive: true });
+    // Declaring the working copy as this conversation's package is what makes
+    // the dev loop use the real resolution path rather than a bespoke one.
+    process.env.MIKAN_STATE_DIR = stateDir;
+    updateConversationSettings(join(workingDir, conversationId), { packages: [source] });
+    console.log(`mikan ext dev — ${source}`);
+    console.log(`  conversation: ${conversationId}`);
+    console.log(`  workspace:    ${workingDir}`);
+    console.log(`  state dir:    ${stateDir}`);
+    console.log("Type a message. /pi-new reloads after an edit. Ctrl-D exits.\n");
+    return runDevLoop({ conversationId, workingDir });
+}
+function write(text) {
+    process.stdout.write(`${text}\n`);
+}
+function runDevLoop(options) {
+    const { conversationId, workingDir } = options;
+    const platform = {
+        name: "ext-dev",
+        formattingGuide: "Reply in plain text.",
+        channels: [{ id: conversationId, name: conversationId }],
+        users: [{ id: "dev", userName: "dev", displayName: "Developer" }],
+    };
+    const runtime = createConversationRuntime({
+        workingDir,
+        // The host executor keeps the loop dependency-free: no Docker, no image
+        // pull, no VM. An extension's own tools and hooks do not observe the
+        // difference, and the ones that shell out see the developer's machine —
+        // which is what they want while iterating.
+        sandbox: { type: "host" },
+    });
+    const bot = {
+        start: async () => { },
+        postMessage: async (_conversationId, text) => {
+            write(text);
+            return `${Date.now()}`;
+        },
+        updateMessage: async (_conversationId, _ts, text) => write(text),
+        enqueueEvent: () => false,
+        getMessagingInfo: () => platform,
+    };
+    const responder = {
+        respond: async (text) => write(text),
+        replaceResponse: async (text) => write(text),
+        respondDiagnostic: async (text) => write(`· ${text}`),
+        respondToolResult: async (result) => write(`· [${result.toolName}]`),
+        setTyping: async () => { },
+        setWorking: async () => { },
+        uploadFile: async (filePath) => write(`· [file] ${filePath}`),
+        deleteResponse: async () => { },
+    };
+    let counter = 0;
+    const handleLine = async (line) => {
+        const ts = `${++counter}`;
+        const event = {
+            type: "message",
+            conversationId,
+            conversationKind: "direct",
+            ts,
+            user: "dev",
+            text: line,
+            sessionKey: conversationId,
+        };
+        const context = {
+            message: {
+                id: ts,
+                sessionKey: conversationId,
+                conversationKind: "direct",
+                userId: "dev",
+                userName: "Developer",
+                text: line,
+            },
+            responder,
+            platform,
+        };
+        await runtime.handleEvent(event, bot, context);
+    };
+    return new Promise((resolveLoop) => {
+        const rl = createInterface({ input: process.stdin, output: process.stdout, prompt: "> " });
+        rl.prompt();
+        rl.on("line", (line) => {
+            if (!line.trim())
+                return rl.prompt();
+            void handleLine(line)
+                .catch((err) => write(`· error: ${err instanceof Error ? err.message : err}`))
+                .finally(() => rl.prompt());
+        });
+        rl.on("close", () => {
+            void runtime.shutdown().then(() => resolveLoop(0));
+        });
+    });
+}
+//# sourceMappingURL=ext-dev.js.map

package/dist/cli/ext-dev.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ext-dev.js","sourceRoot":"","sources":["../../src/cli/ext-dev.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,yBAAyB,GAM1B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAElE,MAAM,KAAK,GAAG;;;;;;;+BAOiB,CAAC;AAEhC;;;GAGG;AACH,SAAS,iBAAiB,CAAC,MAAc;IACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,WAAW,CAAC;IACxF,OAAO,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAc;IACnD,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,YAAgC,CAAC;IACrC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC;QACV,IAAI,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;YACpD,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC;YAC3B,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC;QACtB,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;YAC3D,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,uCAAuC;QAC9D,CAAC;;YAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,6EAA6E;IAC7E,gEAAgE;IAChE,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,CACxB,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAC7E,CAAC;QACF,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACpE,OAAO,CAAC,KAAK,CAAC,oBAAoB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACjD,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,cAAc,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,WAAW,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACtF,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEjE,0EAA0E;IAC1E,uEAAuE;IACvE,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,QAAQ,CAAC;IACvC,0BAA0B,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAErF,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,mBAAmB,cAAc,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,mBAAmB,UAAU,EAAE,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;IAE9E,OAAO,UAAU,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,KAAK,CAAC,IAAY;IACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,UAAU,CAAC,OAAuD;IACzE,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAE/C,MAAM,QAAQ,GAAkB;QAC9B,IAAI,EAAE,SAAS;QACf,eAAe,EAAE,sBAAsB;QACvC,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QACxD,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;KAClE,CAAC;IAEF,MAAM,OAAO,GAAG,yBAAyB,CAAC;QACxC,UAAU;QACV,wEAAwE;QACxE,qEAAqE;QACrE,wEAAwE;QACxE,2CAA2C;QAC3C,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;KAC1B,CAAC,CAAC;IAEH,MAAM,GAAG,GAAiB;QACxB,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;QACrB,WAAW,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE;YAC3C,KAAK,CAAC,IAAI,CAAC,CAAC;YACZ,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACzB,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;QAChE,YAAY,EAAE,GAAG,EAAE,CAAC,KAAK;QACzB,gBAAgB,EAAE,GAAG,EAAE,CAAC,QAAQ;KACjC,CAAC;IAEF,MAAM,SAAS,GAA0B;QACvC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;QACpC,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;QAC5C,iBAAiB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;QACrD,iBAAiB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,QAAQ,GAAG,CAAC;QACpE,SAAS,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;QACzB,UAAU,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;QAC1B,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,QAAQ,EAAE,CAAC;QAC7D,cAAc,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;KAC/B,CAAC;IAEF,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,UAAU,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;QACvD,MAAM,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAsB;YAC/B,IAAI,EAAE,SAAS;YACf,cAAc;YACd,gBAAgB,EAAE,QAAQ;YAC1B,EAAE;YACF,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,IAAI;YACV,UAAU,EAAE,cAAc;SAC3B,CAAC;QACF,MAAM,OAAO,GAAwB;YACnC,OAAO,EAAE;gBACP,EAAE,EAAE,EAAE;gBACN,UAAU,EAAE,cAAc;gBAC1B,gBAAgB,EAAE,QAAQ;gBAC1B,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,WAAW;gBACrB,IAAI,EAAE,IAAI;aACX;YACD,SAAS;YACT,QAAQ;SACT,CAAC;QACF,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC,CAAC;IAEF,OAAO,IAAI,OAAO,CAAS,CAAC,WAAW,EAAE,EAAE;QACzC,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,EAAE,CAAC,MAAM,EAAE,CAAC;QACZ,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACrB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC;YACrC,KAAK,UAAU,CAAC,IAAI,CAAC;iBAClB,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;iBACtF,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAClB,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * `mikan ext dev <path>` — develop an extension without a Slack workspace.\n *\n *   mikan ext dev ./my-extension\n *   > add a poll for lunch\n *   [agent reply]\n *   > /pi-new          # picks up your edits\n *\n * The alternative this exists to avoid is asking every extension author to\n * install mikan into a real Slack workspace, create an app, and deploy before\n * they can see whether their `activate()` even runs.\n *\n * It is a stdin/stdout conversation on the same runtime production uses — same\n * package resolution, same loader, same commands — with the platform swapped\n * for the terminal and the sandbox set to `host`. That equivalence is the\n * point: an extension that works here works in a channel, because nothing\n * about how it is found or activated differs.\n *\n * The working copy is registered as a conversation-scoped local package, which\n * is by-reference rather than copied, so the edit → `/pi-new` → test loop needs\n * no reinstall step.\n */\nimport { createInterface } from \"node:readline\";\nimport { existsSync, mkdirSync, statSync } from \"node:fs\";\nimport { basename, resolve as resolvePath } from \"node:path\";\nimport { join } from \"node:path\";\nimport {\n  createConversationRuntime,\n  type ConversationContext,\n  type ConversationEvent,\n  type ConversationResponder,\n  type MessagingBot,\n  type MessagingInfo,\n} from \"../index.js\";\nimport { updateConversationSettings } from \"../config.js\";\nimport { formatSource, parseSource } from \"../packages/index.js\";\nimport { resolveStateDir, takeValueFlag } from \"./arg-grammar.js\";\n\nconst USAGE = `Usage:\n  mikan ext dev <path|source> [--workspace <dir>] [--state-dir <dir>]\n\n  <path>       a working copy of an extension (or a package directory)\n  --workspace  where conversation state is written (default: ./.mikan-ext-dev)\n\n  Type a message to run the agent against your extension. /pi-new reloads it\n  after an edit; Ctrl-D exits.`;\n\n/**\n * One dev conversation per extension, so two extensions can be developed side\n * by side without overwriting each other's settings or session history.\n */\nfunction devConversationId(source: string): string {\n  const name = basename(source.replace(/[#@].*$/, \"\").replace(/\\/+$/, \"\")) || \"extension\";\n  return `ext-dev-${name.toLowerCase().replace(/[^a-z0-9_-]+/g, \"-\")}`.slice(0, 64);\n}\n\nexport async function runExtDevCommand(argv: string[]): Promise<number> {\n  const stateDir = resolveStateDir(argv);\n  let workspaceDir: string | undefined;\n  const positional: string[] = [];\n  for (let i = 0; i < argv.length; i++) {\n    let taken;\n    if ((taken = takeValueFlag(argv, i, \"--workspace\"))) {\n      workspaceDir = taken.value;\n      i = taken.lastIndex;\n    } else if ((taken = takeValueFlag(argv, i, \"--state-dir\"))) {\n      i = taken.lastIndex; // already folded in by resolveStateDir\n    } else positional.push(argv[i]);\n  }\n\n  const target = positional[0];\n  if (!target) {\n    console.error(USAGE);\n    return 1;\n  }\n\n  // A local working copy is the common case; resolve it to an absolute path so\n  // the stored package source does not depend on the shell's cwd.\n  let source: string;\n  try {\n    const parsed = parseSource(\n      existsSync(target) && !target.startsWith(\".\") ? resolvePath(target) : target,\n    );\n    source = formatSource(parsed);\n    if (parsed.type === \"local\" && !statSync(parsed.path).isDirectory()) {\n      console.error(`Not a directory: ${parsed.path}`);\n      return 1;\n    }\n  } catch (err) {\n    console.error(err instanceof Error ? err.message : String(err));\n    return 1;\n  }\n\n  const conversationId = devConversationId(target);\n  const workingDir = resolvePath(workspaceDir ?? join(process.cwd(), \".mikan-ext-dev\"));\n  mkdirSync(join(workingDir, conversationId), { recursive: true });\n\n  // Declaring the working copy as this conversation's package is what makes\n  // the dev loop use the real resolution path rather than a bespoke one.\n  process.env.MIKAN_STATE_DIR = stateDir;\n  updateConversationSettings(join(workingDir, conversationId), { packages: [source] });\n\n  console.log(`mikan ext dev — ${source}`);\n  console.log(`  conversation: ${conversationId}`);\n  console.log(`  workspace:    ${workingDir}`);\n  console.log(`  state dir:    ${stateDir}`);\n  console.log(\"Type a message. /pi-new reloads after an edit. Ctrl-D exits.\\n\");\n\n  return runDevLoop({ conversationId, workingDir });\n}\n\nfunction write(text: string): void {\n  process.stdout.write(`${text}\\n`);\n}\n\nfunction runDevLoop(options: { conversationId: string; workingDir: string }): Promise<number> {\n  const { conversationId, workingDir } = options;\n\n  const platform: MessagingInfo = {\n    name: \"ext-dev\",\n    formattingGuide: \"Reply in plain text.\",\n    channels: [{ id: conversationId, name: conversationId }],\n    users: [{ id: \"dev\", userName: \"dev\", displayName: \"Developer\" }],\n  };\n\n  const runtime = createConversationRuntime({\n    workingDir,\n    // The host executor keeps the loop dependency-free: no Docker, no image\n    // pull, no VM. An extension's own tools and hooks do not observe the\n    // difference, and the ones that shell out see the developer's machine —\n    // which is what they want while iterating.\n    sandbox: { type: \"host\" },\n  });\n\n  const bot: MessagingBot = {\n    start: async () => {},\n    postMessage: async (_conversationId, text) => {\n      write(text);\n      return `${Date.now()}`;\n    },\n    updateMessage: async (_conversationId, _ts, text) => write(text),\n    enqueueEvent: () => false,\n    getMessagingInfo: () => platform,\n  };\n\n  const responder: ConversationResponder = {\n    respond: async (text) => write(text),\n    replaceResponse: async (text) => write(text),\n    respondDiagnostic: async (text) => write(`· ${text}`),\n    respondToolResult: async (result) => write(`· [${result.toolName}]`),\n    setTyping: async () => {},\n    setWorking: async () => {},\n    uploadFile: async (filePath) => write(`· [file] ${filePath}`),\n    deleteResponse: async () => {},\n  };\n\n  let counter = 0;\n  const handleLine = async (line: string): Promise<void> => {\n    const ts = `${++counter}`;\n    const event: ConversationEvent = {\n      type: \"message\",\n      conversationId,\n      conversationKind: \"direct\",\n      ts,\n      user: \"dev\",\n      text: line,\n      sessionKey: conversationId,\n    };\n    const context: ConversationContext = {\n      message: {\n        id: ts,\n        sessionKey: conversationId,\n        conversationKind: \"direct\",\n        userId: \"dev\",\n        userName: \"Developer\",\n        text: line,\n      },\n      responder,\n      platform,\n    };\n    await runtime.handleEvent(event, bot, context);\n  };\n\n  return new Promise<number>((resolveLoop) => {\n    const rl = createInterface({ input: process.stdin, output: process.stdout, prompt: \"> \" });\n    rl.prompt();\n    rl.on(\"line\", (line) => {\n      if (!line.trim()) return rl.prompt();\n      void handleLine(line)\n        .catch((err: unknown) => write(`· error: ${err instanceof Error ? err.message : err}`))\n        .finally(() => rl.prompt());\n    });\n    rl.on(\"close\", () => {\n      void runtime.shutdown().then(() => resolveLoop(0));\n    });\n  });\n}\n"]}

package/dist/cli/ext-git.d.ts

@@ -0,0 +1,17 @@
+import type { ResolvedGitSource } from "./types.js";
+export type { ResolvedGitSource } from "./types.js";
+interface GitSpec {
+    url: string;
+    subpath?: string;
+}
+/**
+ * Recognize a git source and split off an optional `#subpath`:
+ *   https://host/owner/repo.git#dir/ext   → { url, subpath }
+ *   git@host:owner/repo.git               → { url }
+ *   github:owner/repo                     → expands to https clone URL
+ * Returns undefined for anything that looks like a local path.
+ */
+export declare function parseGitSource(source: string): GitSpec | undefined;
+/** Clone a git source (shallow) and resolve the extension directory within it. */
+export declare function resolveGitSource(spec: GitSpec): ResolvedGitSource;
+//# sourceMappingURL=ext-git.d.ts.map

package/dist/cli/ext-git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ext-git.d.ts","sourceRoot":"","sources":["../../src/cli/ext-git.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,UAAU,OAAO;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAkBlE;AAkCD,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,iBAAiB,CA8BjE"}

package/dist/cli/ext-git.js

@@ -0,0 +1,107 @@
+/**
+ * Resolve a `mikan ext install` source that points at a git repository into a
+ * local directory: clone it, descend into an optional `#subpath`, and run
+ * `npm install --omit=dev` when the extension declares dependencies. The
+ * caller validates + copies the returned directory, then calls cleanup().
+ */
+import { execFileSync } from "node:child_process";
+import { existsSync, mkdtempSync, readFileSync, realpathSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { isAbsolute, join, relative, resolve, sep } from "node:path";
+/**
+ * Recognize a git source and split off an optional `#subpath`:
+ *   https://host/owner/repo.git#dir/ext   → { url, subpath }
+ *   git@host:owner/repo.git               → { url }
+ *   github:owner/repo                     → expands to https clone URL
+ * Returns undefined for anything that looks like a local path.
+ */
+export function parseGitSource(source) {
+    const [locator, subpath] = splitSubpath(source);
+    if (locator.startsWith("github:")) {
+        const repo = locator.slice("github:".length).replace(/\.git$/, "");
+        return { url: `https://github.com/${repo}.git`, subpath };
+    }
+    if (locator.startsWith("https://") ||
+        locator.startsWith("http://") ||
+        locator.startsWith("git://") ||
+        locator.startsWith("ssh://") ||
+        locator.startsWith("file://") ||
+        /^git@[^:]+:/.test(locator)) {
+        return { url: locator, subpath };
+    }
+    return undefined;
+}
+function splitSubpath(source) {
+    const hash = source.indexOf("#");
+    if (hash === -1)
+        return [source, undefined];
+    const subpath = source.slice(hash + 1).trim();
+    if (!subpath)
+        return [source.slice(0, hash), undefined];
+    assertSafeRelativePath(subpath);
+    return [source.slice(0, hash), subpath];
+}
+function assertSafeRelativePath(value) {
+    if (isAbsolute(value) ||
+        value.startsWith("/") ||
+        value.startsWith("\\") ||
+        /^[A-Za-z]:[\\/]/.test(value) ||
+        value.split(/[\\/]/).some((segment) => segment === "..")) {
+        throw new Error(`#subpath must be a relative path without '..': ${JSON.stringify(value)}`);
+    }
+}
+function resolveSubpath(root, subpath) {
+    assertSafeRelativePath(subpath);
+    const resolvedRoot = resolve(root);
+    const dir = resolve(resolvedRoot, subpath);
+    const relation = relative(resolvedRoot, dir);
+    if (isAbsolute(relation) || relation === ".." || relation.startsWith(`..${sep}`)) {
+        throw new Error(`Subpath escapes repository: ${subpath}`);
+    }
+    return dir;
+}
+/** Clone a git source (shallow) and resolve the extension directory within it. */
+export function resolveGitSource(spec) {
+    if (spec.subpath)
+        assertSafeRelativePath(spec.subpath);
+    const tempRoot = mkdtempSync(join(tmpdir(), "mikan-ext-git-"));
+    const cleanup = () => rmSync(tempRoot, { recursive: true, force: true });
+    try {
+        execFileSync("git", ["clone", "--depth", "1", spec.url, tempRoot], { stdio: "inherit" });
+        const root = realpathSync(tempRoot);
+        const selectedPath = spec.subpath ? resolveSubpath(root, spec.subpath) : root;
+        if (!existsSync(selectedPath)) {
+            throw new Error(`Subpath not found in repository: ${spec.subpath}`);
+        }
+        const dir = realpathSync(selectedPath);
+        const relation = relative(root, dir);
+        if (isAbsolute(relation) || relation === ".." || relation.startsWith(`..${sep}`)) {
+            throw new Error(`Subpath escapes repository: ${spec.subpath}`);
+        }
+        // Install runtime dependencies only when the extension declares any.
+        if (hasDependencies(dir)) {
+            execFileSync("npm", ["install", "--omit=dev", "--no-audit", "--no-fund"], {
+                cwd: dir,
+                stdio: "inherit",
+            });
+        }
+        return { dir, cleanup };
+    }
+    catch (err) {
+        cleanup();
+        throw err;
+    }
+}
+function hasDependencies(dir) {
+    const packageJsonPath = join(dir, "package.json");
+    if (!existsSync(packageJsonPath))
+        return false;
+    try {
+        const pkg = JSON.parse(readFileSync(packageJsonPath, "utf-8"));
+        return Boolean(pkg.dependencies && Object.keys(pkg.dependencies).length > 0);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=ext-git.js.map

package/dist/cli/ext-git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ext-git.js","sourceRoot":"","sources":["../../src/cli/ext-git.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACtF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAUrE;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAEhD,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnE,OAAO,EAAE,GAAG,EAAE,sBAAsB,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;IAC5D,CAAC;IACD,IACE,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC;QAC9B,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;QAC7B,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC5B,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC5B,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;QAC7B,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAC3B,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IACnC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,IAAI,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IACxD,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,IACE,UAAU,CAAC,KAAK,CAAC;QACjB,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACrB,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QACtB,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC7B,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,EACxD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,OAAe;IACnD,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IAC7C,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC5C,IAAI,IAAI,CAAC,OAAO;QAAE,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,YAAY,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAEzF,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9E,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,qEAAqE;QACrE,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,YAAY,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,CAAC,EAAE;gBACxE,GAAG,EAAE,GAAG;gBACR,KAAK,EAAE,SAAS;aACjB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;QACV,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAClD,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAE5D,CAAC;QACF,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC","sourcesContent":["/**\n * Resolve a `mikan ext install` source that points at a git repository into a\n * local directory: clone it, descend into an optional `#subpath`, and run\n * `npm install --omit=dev` when the extension declares dependencies. The\n * caller validates + copies the returned directory, then calls cleanup().\n */\nimport { execFileSync } from \"node:child_process\";\nimport { existsSync, mkdtempSync, readFileSync, realpathSync, rmSync } from \"node:fs\";\nimport { tmpdir } from \"node:os\";\nimport { isAbsolute, join, relative, resolve, sep } from \"node:path\";\nimport type { ResolvedGitSource } from \"./types.js\";\n\nexport type { ResolvedGitSource } from \"./types.js\";\n\ninterface GitSpec {\n  url: string;\n  subpath?: string;\n}\n\n/**\n * Recognize a git source and split off an optional `#subpath`:\n *   https://host/owner/repo.git#dir/ext   → { url, subpath }\n *   git@host:owner/repo.git               → { url }\n *   github:owner/repo                     → expands to https clone URL\n * Returns undefined for anything that looks like a local path.\n */\nexport function parseGitSource(source: string): GitSpec | undefined {\n  const [locator, subpath] = splitSubpath(source);\n\n  if (locator.startsWith(\"github:\")) {\n    const repo = locator.slice(\"github:\".length).replace(/\\.git$/, \"\");\n    return { url: `https://github.com/${repo}.git`, subpath };\n  }\n  if (\n    locator.startsWith(\"https://\") ||\n    locator.startsWith(\"http://\") ||\n    locator.startsWith(\"git://\") ||\n    locator.startsWith(\"ssh://\") ||\n    locator.startsWith(\"file://\") ||\n    /^git@[^:]+:/.test(locator)\n  ) {\n    return { url: locator, subpath };\n  }\n  return undefined;\n}\n\nfunction splitSubpath(source: string): [string, string | undefined] {\n  const hash = source.indexOf(\"#\");\n  if (hash === -1) return [source, undefined];\n  const subpath = source.slice(hash + 1).trim();\n  if (!subpath) return [source.slice(0, hash), undefined];\n  assertSafeRelativePath(subpath);\n  return [source.slice(0, hash), subpath];\n}\n\nfunction assertSafeRelativePath(value: string): void {\n  if (\n    isAbsolute(value) ||\n    value.startsWith(\"/\") ||\n    value.startsWith(\"\\\\\") ||\n    /^[A-Za-z]:[\\\\/]/.test(value) ||\n    value.split(/[\\\\/]/).some((segment) => segment === \"..\")\n  ) {\n    throw new Error(`#subpath must be a relative path without '..': ${JSON.stringify(value)}`);\n  }\n}\n\nfunction resolveSubpath(root: string, subpath: string): string {\n  assertSafeRelativePath(subpath);\n  const resolvedRoot = resolve(root);\n  const dir = resolve(resolvedRoot, subpath);\n  const relation = relative(resolvedRoot, dir);\n  if (isAbsolute(relation) || relation === \"..\" || relation.startsWith(`..${sep}`)) {\n    throw new Error(`Subpath escapes repository: ${subpath}`);\n  }\n  return dir;\n}\n\n/** Clone a git source (shallow) and resolve the extension directory within it. */\nexport function resolveGitSource(spec: GitSpec): ResolvedGitSource {\n  if (spec.subpath) assertSafeRelativePath(spec.subpath);\n  const tempRoot = mkdtempSync(join(tmpdir(), \"mikan-ext-git-\"));\n  const cleanup = () => rmSync(tempRoot, { recursive: true, force: true });\n  try {\n    execFileSync(\"git\", [\"clone\", \"--depth\", \"1\", spec.url, tempRoot], { stdio: \"inherit\" });\n\n    const root = realpathSync(tempRoot);\n    const selectedPath = spec.subpath ? resolveSubpath(root, spec.subpath) : root;\n    if (!existsSync(selectedPath)) {\n      throw new Error(`Subpath not found in repository: ${spec.subpath}`);\n    }\n    const dir = realpathSync(selectedPath);\n    const relation = relative(root, dir);\n    if (isAbsolute(relation) || relation === \"..\" || relation.startsWith(`..${sep}`)) {\n      throw new Error(`Subpath escapes repository: ${spec.subpath}`);\n    }\n\n    // Install runtime dependencies only when the extension declares any.\n    if (hasDependencies(dir)) {\n      execFileSync(\"npm\", [\"install\", \"--omit=dev\", \"--no-audit\", \"--no-fund\"], {\n        cwd: dir,\n        stdio: \"inherit\",\n      });\n    }\n    return { dir, cleanup };\n  } catch (err) {\n    cleanup();\n    throw err;\n  }\n}\n\nfunction hasDependencies(dir: string): boolean {\n  const packageJsonPath = join(dir, \"package.json\");\n  if (!existsSync(packageJsonPath)) return false;\n  try {\n    const pkg = JSON.parse(readFileSync(packageJsonPath, \"utf-8\")) as {\n      dependencies?: Record<string, string>;\n    };\n    return Boolean(pkg.dependencies && Object.keys(pkg.dependencies).length > 0);\n  } catch {\n    return false;\n  }\n}\n"]}

package/dist/cli/ext.d.ts

@@ -0,0 +1,2 @@
+export declare function runExtCommand(argv: string[]): Promise<number>;
+//# sourceMappingURL=ext.d.ts.map

package/dist/cli/ext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ext.d.ts","sourceRoot":"","sources":["../../src/cli/ext.ts"],"names":[],"mappings":"AA+EA,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAmBnE"}