@geminixiang/mikan 1.0.0-beta.42 → 1.0.0-beta.44

package/dist/agent/catalog.js

@@ -0,0 +1,236 @@
+import {} from "@earendil-works/pi-ai";
+import { loadExtensions, loadSkillsFromDir, MikanAgentSession, } from "../harness/index.js";
+import { runSubagent } from "../harness/subagent-runner.js";
+import { loadSubagentProfiles } from "../harness/subagent-profiles.js";
+import { packageSkillRuntimeDir, resolveConversationPackages } from "../packages/index.js";
+import * as log from "../log.js";
+import { HostEventStore } from "../tools/event.js";
+import { createSubagentTool } from "../tools/index.js";
+import { DEFAULT_GLOBAL_SUBAGENT_SLOTS, SubagentSlotPool } from "../harness/subagent-slots.js";
+// One process-wide fan-out account: per-conversation queues serialize runs,
+// but each run can fan out up to the per-run cap — without this shared
+// ceiling, N busy conversations hold N × cap live subagent sessions.
+const globalSubagentSlots = new SubagentSlotPool(DEFAULT_GLOBAL_SUBAGENT_SLOTS);
+export function loadMikanSkills(office, workspacePath, projection) {
+    const skillMap = new Map();
+    // workspacePath is the runtime-side root (e.g. /workspace); host paths under
+    // the workspace root translate onto it for prompt references.
+    const hostWorkspacePath = office.workspace.root;
+    // Helper to translate host paths to container paths
+    const translatePath = (hostPath) => {
+        if (hostPath.startsWith(hostWorkspacePath)) {
+            return workspacePath + hostPath.slice(hostWorkspacePath.length);
+        }
+        return hostPath;
+    };
+    // Package skills first: they are the lowest precedence, so a workspace or
+    // conversation skill of the same name below overwrites them. A package can
+    // offer a capability without taking the name away from whoever wants to
+    // replace it locally.
+    //
+    // Unlike extension-shipped skills, these are NOT inlined into the prompt:
+    // conversationPackageSkillMounts exposes them read-only at a runtime path,
+    // so the agent can read the files — including any scripts or templates the
+    // skill ships alongside its SKILL.md, which inlining could never carry.
+    const mounted = workspacePath !== hostWorkspacePath;
+    for (const { slug, dir } of resolveConversationPackages({ office }).skillDirs) {
+        const runtimeDir = packageSkillRuntimeDir(slug);
+        for (const skill of loadSkillsFromDir({ dir, source: `package:${slug}` }).skills) {
+            // In host mode there is no mount, so the host path is already the path
+            // the agent will use.
+            if (mounted) {
+                skill.filePath = runtimeDir + skill.filePath.slice(dir.length);
+                skill.baseDir = runtimeDir + skill.baseDir.slice(dir.length);
+            }
+            skillMap.set(skill.name, skill);
+        }
+    }
+    // Load workspace-level skills only when the office projection authorizes it.
+    const workspaceSkillsDir = projection.promptSources.globalSkillsDir;
+    if (workspaceSkillsDir) {
+        for (const skill of loadSkillsFromDir({ dir: workspaceSkillsDir, source: "workspace" })
+            .skills) {
+            skill.filePath = translatePath(skill.filePath);
+            skill.baseDir = translatePath(skill.baseDir);
+            skillMap.set(skill.name, skill);
+        }
+    }
+    // Load conversation-specific skills (override workspace skills on collision).
+    // Host prompt construction must never follow an agent-created symlink out of
+    // the conversation office, so this load rejects symlinks per entry — on
+    // exactly the paths it reads. Vendored node_modules and dot directories are
+    // never read and never disqualify anything.
+    const conversationSkillsDir = projection.promptSources.conversationSkillsDir;
+    const conversationSkills = loadSkillsFromDir({
+        dir: conversationSkillsDir,
+        source: "channel",
+        rejectSymlinks: true,
+    });
+    const skippedSkillLinks = [];
+    for (const diagnostic of conversationSkills.diagnostics) {
+        if (diagnostic.code !== "symlink")
+            continue;
+        log.logWarning("Skipping conversation skill entry (symlink)", diagnostic.path);
+        skippedSkillLinks.push(translatePath(diagnostic.path));
+    }
+    for (const skill of conversationSkills.skills) {
+        skill.filePath = translatePath(skill.filePath);
+        skill.baseDir = translatePath(skill.baseDir);
+        skillMap.set(skill.name, skill);
+    }
+    return { skills: Array.from(skillMap.values()), skippedSkillLinks };
+}
+export function mergeExtensionSkills(local, extension) {
+    if (extension.length === 0)
+        return local;
+    const byName = new Map();
+    for (const skill of extension)
+        byName.set(skill.name, skill);
+    for (const skill of local)
+        byName.set(skill.name, skill);
+    return [...byName.values()];
+}
+function buildExtensionHostServices(params) {
+    const { workspace, address, vaultManager, platformNotifier, platformReactor, platformUploader, platformBlockKit, platformDmOpener, platformHistoryFetcher, platformUserLister, extensionScheduleEngine, runSubagentService, } = params;
+    const eventStore = HostEventStore.fromWorkspaceDir(workspace.root);
+    return {
+        stateDir: workspace.stateDir,
+        scheduleStore: {
+            write: async (filename, payload) => {
+                await eventStore.write(filename, payload);
+            },
+            delete: async (filename) => (await eventStore.delete(filename)).deleted,
+            list: async () => (await eventStore.list()).flatMap((entry) => entry.payload ? [{ filename: entry.filename, payload: entry.payload }] : []),
+        },
+        ...(platformNotifier ? { postMessage: platformNotifier } : {}),
+        ...(platformReactor ? { addReaction: platformReactor } : {}),
+        ...(platformUploader ? { uploadFile: platformUploader } : {}),
+        ...(platformDmOpener ? { openDirectConversation: platformDmOpener } : {}),
+        ...(platformHistoryFetcher ? { fetchHistory: platformHistoryFetcher } : {}),
+        ...(platformUserLister ? { listUsers: platformUserLister } : {}),
+        ...(extensionScheduleEngine
+            ? {
+                callbackScheduleStore: {
+                    upsert: (slug, name, spec) => extensionScheduleEngine.upsert(address, slug, name, spec),
+                    delete: (slug, name) => extensionScheduleEngine.delete(address, slug, name),
+                    list: (slug) => extensionScheduleEngine.list(address, slug),
+                },
+            }
+            : {}),
+        ...(platformBlockKit
+            ? { postBlocks: platformBlockKit.postBlocks, updateBlocks: platformBlockKit.updateBlocks }
+            : {}),
+        ...(runSubagentService ? { runSubagent: runSubagentService } : {}),
+        ...(vaultManager
+            ? {
+                resolveSecrets: (slug) => vaultManager.resolve(`extensions/${slug}`)?.env ?? {},
+            }
+            : {}),
+    };
+}
+export async function createConfiguredAgentSession(params) {
+    const { office, systemPrompt, model, thinkingLevel, tools, sessionStore, models, vaultManager, platformNotifier, platformReactor, platformUploader, platformBlockKit, platformDmOpener, platformHistoryFetcher, platformUserLister, extensionScheduleEngine, } = params;
+    const { address } = office;
+    const conversationId = address.conversationId;
+    const workspaceDir = office.workspace.root;
+    // Host-only dirs under the state dir: extension code runs in the mikan
+    // process, so it must never load from workspace paths — those are mounted
+    // into sandbox containers and agent-writable (sandbox escape otherwise).
+    // resolveConversationPackages only ever returns state-dir paths (and host
+    // paths an administrator named explicitly in settings); it never reaches
+    // the network on this path, so a slow remote cannot delay a reply.
+    let session;
+    const loadedProfiles = loadSubagentProfiles(workspaceDir);
+    for (const diagnostic of loadedProfiles.diagnostics) {
+        log.logWarning(`[${conversationId}] Subagent profile ignored: ${diagnostic.path}`, diagnostic.message);
+    }
+    // Narrowed to the profiles whose tools actually exist once extensions have
+    // contributed theirs. Both subagent entry points read this at call time, so
+    // they always agree on which profiles are launchable.
+    let runnableSubagentProfiles = loadedProfiles.profiles;
+    const resolvedPackages = resolveConversationPackages({ office });
+    for (const error of resolvedPackages.errors) {
+        log.logWarning(`Package unavailable: ${error.source}`, error.message);
+    }
+    const extensionsResult = await loadExtensions({
+        dirs: resolvedPackages.extensionDirs,
+        roots: resolvedPackages.extensionRoots,
+        context: { address, conversationId, workspaceDir, model, thinkingLevel },
+        services: buildExtensionHostServices({
+            workspace: office.workspace,
+            address,
+            vaultManager,
+            platformNotifier,
+            platformReactor,
+            platformUploader,
+            platformBlockKit,
+            platformDmOpener,
+            platformHistoryFetcher,
+            platformUserLister,
+            extensionScheduleEngine,
+            runSubagentService: (request, extensionTools) => {
+                const activeParent = session?.isActiveRun ? session : undefined;
+                return runSubagent({
+                    request,
+                    defaultModel: model,
+                    thinkingLevel,
+                    models,
+                    workspaceDir,
+                    availableTools: [...tools, ...extensionTools],
+                    profiles: runnableSubagentProfiles,
+                    slots: globalSubagentSlots,
+                    ...(activeParent
+                        ? {
+                            parentMessages: [...activeParent.messages],
+                            onUsage: activeParent.captureExternalUsageSink(),
+                        }
+                        : {}),
+                });
+            },
+        }),
+    });
+    const contributedTools = extensionsResult.registry.getContributedTools();
+    const subagentAvailableTools = [...tools, ...contributedTools];
+    const availableToolNames = new Set(subagentAvailableTools.map((tool) => tool.name));
+    runnableSubagentProfiles = new Map([...loadedProfiles.profiles].filter(([, profile]) => profile.tools.every((tool) => availableToolNames.has(tool))));
+    for (const err of extensionsResult.errors) {
+        log.logWarning(`[${conversationId}] Extension load error: ${err.path}`, err.error);
+    }
+    if (extensionsResult.extensions.length > 0) {
+        log.logInfo(`[${conversationId}] Loaded ${extensionsResult.extensions.length} extension(s): ${extensionsResult.extensions.map((extension) => extension.name).join(", ")}`);
+    }
+    const subagentTool = createSubagentTool((request, hooks) => runSubagent({
+        request,
+        ...(hooks?.onActivity ? { onActivity: hooks.onActivity } : {}),
+        defaultModel: model,
+        thinkingLevel,
+        models,
+        workspaceDir,
+        availableTools: subagentAvailableTools,
+        profiles: runnableSubagentProfiles,
+        slots: globalSubagentSlots,
+        parentMessages: [...session.messages],
+        onUsage: session.captureExternalUsageSink(),
+    }), runnableSubagentProfiles);
+    session = new MikanAgentSession({
+        systemPrompt,
+        model,
+        thinkingLevel,
+        tools: [...tools, subagentTool],
+        models,
+        sessionStore,
+        extensions: extensionsResult.registry,
+    });
+    const activeSession = session;
+    const reloaded = await activeSession.reloadFromSession();
+    if (reloaded > 0) {
+        log.logInfo(`[${conversationId}] Reloaded ${reloaded} messages from session context`);
+    }
+    return {
+        session: activeSession,
+        extensionSkills: extensionsResult.skills,
+        extensionRegistry: extensionsResult.registry,
+        disposeExtensions: extensionsResult.dispose,
+    };
+}
+//# sourceMappingURL=catalog.js.map

package/dist/agent/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/agent/catalog.ts"],"names":[],"mappings":"AAGA,OAAO,EAAwB,MAAM,uBAAuB,CAAC;AAE7D,OAAO,EAGL,cAAc,EACd,iBAAiB,EACjB,iBAAiB,GAGlB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAWvE,OAAO,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAC3F,OAAO,KAAK,GAAG,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,6BAA6B,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAG/F,4EAA4E;AAC5E,uEAAuE;AACvE,qEAAqE;AACrE,MAAM,mBAAmB,GAAG,IAAI,gBAAgB,CAAC,6BAA6B,CAAC,CAAC;AAEhF,MAAM,UAAU,eAAe,CAC7B,MAAc,EACd,aAAqB,EACrB,UAA+B;IAE/B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAsB,CAAC;IAE/C,6EAA6E;IAC7E,8DAA8D;IAC9D,MAAM,iBAAiB,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;IAEhD,oDAAoD;IACpD,MAAM,aAAa,GAAG,CAAC,QAAgB,EAAU,EAAE;QACjD,IAAI,QAAQ,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC3C,OAAO,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEF,0EAA0E;IAC1E,2EAA2E;IAC3E,wEAAwE;IACxE,sBAAsB;IACtB,EAAE;IACF,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,OAAO,GAAG,aAAa,KAAK,iBAAiB,CAAC;IACpD,KAAK,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,2BAA2B,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;QAC9E,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAChD,KAAK,MAAM,KAAK,IAAI,iBAAiB,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;YACjF,uEAAuE;YACvE,sBAAsB;YACtB,IAAI,OAAO,EAAE,CAAC;gBACZ,KAAK,CAAC,QAAQ,GAAG,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC/D,KAAK,CAAC,OAAO,GAAG,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/D,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,MAAM,kBAAkB,GAAG,UAAU,CAAC,aAAa,CAAC,eAAe,CAAC;IACpE,IAAI,kBAAkB,EAAE,CAAC;QACvB,KAAK,MAAM,KAAK,IAAI,iBAAiB,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;aACpF,MAAM,EAAE,CAAC;YACV,KAAK,CAAC,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/C,KAAK,CAAC,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7C,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,6EAA6E;IAC7E,wEAAwE;IACxE,4EAA4E;IAC5E,4CAA4C;IAC5C,MAAM,qBAAqB,GAAG,UAAU,CAAC,aAAa,CAAC,qBAAqB,CAAC;IAC7E,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;QAC3C,GAAG,EAAE,qBAAqB;QAC1B,MAAM,EAAE,SAAS;QACjB,cAAc,EAAE,IAAI;KACrB,CAAC,CAAC;IACH,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,KAAK,MAAM,UAAU,IAAI,kBAAkB,CAAC,WAAW,EAAE,CAAC;QACxD,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS;YAAE,SAAS;QAC5C,GAAG,CAAC,UAAU,CAAC,6CAA6C,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/E,iBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,kBAAkB,CAAC,MAAM,EAAE,CAAC;QAC9C,KAAK,CAAC,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/C,KAAK,CAAC,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7C,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAmB,EAAE,SAAuB;IAC/E,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7D,KAAK,MAAM,KAAK,IAAI,KAAK;QAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,0BAA0B,CAAC,MAanC;IACC,MAAM,EACJ,SAAS,EACT,OAAO,EACP,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,sBAAsB,EACtB,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,GACnB,GAAG,MAAM,CAAC;IACX,MAAM,UAAU,GAAG,cAAc,CAAC,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACnE,OAAO;QACL,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,aAAa,EAAE;YACb,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;gBACjC,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;YACvE,IAAI,EAAE,KAAK,IAAI,EAAE,CACf,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1C,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAC5E;SACJ;QACD,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,uBAAuB;YACzB,CAAC,CAAC;gBACE,qBAAqB,EAAE;oBACrB,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;oBACvF,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;oBAC3E,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC;iBAC5D;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,gBAAgB;YAClB,CAAC,CAAC,EAAE,UAAU,EAAE,gBAAgB,CAAC,UAAU,EAAE,YAAY,EAAE,gBAAgB,CAAC,YAAY,EAAE;YAC1F,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,YAAY;YACd,CAAC,CAAC;gBACE,cAAc,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE;aACxF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,MAiBlD;IACC,MAAM,EACJ,MAAM,EACN,YAAY,EACZ,KAAK,EACL,aAAa,EACb,KAAK,EACL,YAAY,EACZ,MAAM,EACN,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,sBAAsB,EACtB,kBAAkB,EAClB,uBAAuB,GACxB,GAAG,MAAM,CAAC;IACX,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC3B,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IAC9C,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;IAE3C,uEAAuE;IACvE,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,mEAAmE;IACnE,IAAI,OAAsC,CAAC;IAC3C,MAAM,cAAc,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAC1D,KAAK,MAAM,UAAU,IAAI,cAAc,CAAC,WAAW,EAAE,CAAC;QACpD,GAAG,CAAC,UAAU,CACZ,IAAI,cAAc,+BAA+B,UAAU,CAAC,IAAI,EAAE,EAClE,UAAU,CAAC,OAAO,CACnB,CAAC;IACJ,CAAC;IACD,2EAA2E;IAC3E,4EAA4E;IAC5E,sDAAsD;IACtD,IAAI,wBAAwB,GAAG,cAAc,CAAC,QAAQ,CAAC;IACvD,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACjE,KAAK,MAAM,KAAK,IAAI,gBAAgB,CAAC,MAAM,EAAE,CAAC;QAC5C,GAAG,CAAC,UAAU,CAAC,wBAAwB,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,gBAAgB,GAAG,MAAM,cAAc,CAAC;QAC5C,IAAI,EAAE,gBAAgB,CAAC,aAAa;QACpC,KAAK,EAAE,gBAAgB,CAAC,cAAc;QACtC,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE;QACxE,QAAQ,EAAE,0BAA0B,CAAC;YACnC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO;YACP,YAAY;YACZ,gBAAgB;YAChB,eAAe;YACf,gBAAgB;YAChB,gBAAgB;YAChB,gBAAgB;YAChB,sBAAsB;YACtB,kBAAkB;YAClB,uBAAuB;YACvB,kBAAkB,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE;gBAC9C,MAAM,YAAY,GAAG,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;gBAChE,OAAO,WAAW,CAAC;oBACjB,OAAO;oBACP,YAAY,EAAE,KAAK;oBACnB,aAAa;oBACb,MAAM;oBACN,YAAY;oBACZ,cAAc,EAAE,CAAC,GAAG,KAAK,EAAE,GAAG,cAAc,CAAC;oBAC7C,QAAQ,EAAE,wBAAwB;oBAClC,KAAK,EAAE,mBAAmB;oBAC1B,GAAG,CAAC,YAAY;wBACd,CAAC,CAAC;4BACE,cAAc,EAAE,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC;4BAC1C,OAAO,EAAE,YAAY,CAAC,wBAAwB,EAAE;yBACjD;wBACH,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC,CAAC;YACL,CAAC;SACF,CAAC;KACH,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;IACzE,MAAM,sBAAsB,GAAG,CAAC,GAAG,KAAK,EAAE,GAAG,gBAAgB,CAAC,CAAC;IAC/D,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACpF,wBAAwB,GAAG,IAAI,GAAG,CAChC,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAClD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAC5D,CACF,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,gBAAgB,CAAC,MAAM,EAAE,CAAC;QAC1C,GAAG,CAAC,UAAU,CAAC,IAAI,cAAc,2BAA2B,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,gBAAgB,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,OAAO,CACT,IAAI,cAAc,YAAY,gBAAgB,CAAC,UAAU,CAAC,MAAM,kBAAkB,gBAAgB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9J,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,kBAAkB,CACrC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CACjB,WAAW,CAAC;QACV,OAAO;QACP,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,YAAY,EAAE,KAAK;QACnB,aAAa;QACb,MAAM;QACN,YAAY;QACZ,cAAc,EAAE,sBAAsB;QACtC,QAAQ,EAAE,wBAAwB;QAClC,KAAK,EAAE,mBAAmB;QAC1B,cAAc,EAAE,CAAC,GAAG,OAAQ,CAAC,QAAQ,CAAC;QACtC,OAAO,EAAE,OAAQ,CAAC,wBAAwB,EAAE;KAC7C,CAAC,EACJ,wBAAwB,CACzB,CAAC;IAEF,OAAO,GAAG,IAAI,iBAAiB,CAAC;QAC9B,YAAY;QACZ,KAAK;QACL,aAAa;QACb,KAAK,EAAE,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;QAC/B,MAAM;QACN,YAAY;QACZ,UAAU,EAAE,gBAAgB,CAAC,QAAQ;KACtC,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,OAAO,CAAC;IAC9B,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,iBAAiB,EAAE,CAAC;IACzD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,GAAG,CAAC,OAAO,CAAC,IAAI,cAAc,cAAc,QAAQ,gCAAgC,CAAC,CAAC;IACxF,CAAC;IACD,OAAO;QACL,OAAO,EAAE,aAAa;QACtB,eAAe,EAAE,gBAAgB,CAAC,MAAM;QACxC,iBAAiB,EAAE,gBAAgB,CAAC,QAAQ;QAC5C,iBAAiB,EAAE,gBAAgB,CAAC,OAAO;KAC5C,CAAC;AACJ,CAAC","sourcesContent":["import type { OfficeAddress } from \"../types.js\";\nimport type { Office, Workspace } from \"../office/index.js\";\nimport type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport { type Api, type Model } from \"@earendil-works/pi-ai\";\nimport type { MikanModels } from \"../harness/index.js\";\nimport {\n  type ExtensionHostServices,\n  type ExtensionScheduleEngine,\n  loadExtensions,\n  loadSkillsFromDir,\n  MikanAgentSession,\n  type MikanSkill,\n  type SessionStore,\n} from \"../harness/index.js\";\nimport { runSubagent } from \"../harness/subagent-runner.js\";\nimport { loadSubagentProfiles } from \"../harness/subagent-profiles.js\";\nimport type {\n  PlatformBlockKit,\n  PlatformDmOpener,\n  PlatformHistoryFetcher,\n  PlatformNotifier,\n  PlatformReactor,\n  PlatformUploader,\n  PlatformUserLister,\n} from \"../types.js\";\nimport type { WorkspaceProjection } from \"../workspace-projection/types.js\";\nimport { packageSkillRuntimeDir, resolveConversationPackages } from \"../packages/index.js\";\nimport * as log from \"../log.js\";\nimport type { VaultManager } from \"../vault/index.js\";\nimport { HostEventStore } from \"../tools/event.js\";\nimport type { createMikanTools } from \"../tools/index.js\";\nimport { createSubagentTool } from \"../tools/index.js\";\nimport { DEFAULT_GLOBAL_SUBAGENT_SLOTS, SubagentSlotPool } from \"../harness/subagent-slots.js\";\nimport type { ConfiguredAgentSession } from \"./types.js\";\n\n// One process-wide fan-out account: per-conversation queues serialize runs,\n// but each run can fan out up to the per-run cap — without this shared\n// ceiling, N busy conversations hold N × cap live subagent sessions.\nconst globalSubagentSlots = new SubagentSlotPool(DEFAULT_GLOBAL_SUBAGENT_SLOTS);\n\nexport function loadMikanSkills(\n  office: Office,\n  workspacePath: string,\n  projection: WorkspaceProjection,\n): { skills: MikanSkill[]; skippedSkillLinks: string[] } {\n  const skillMap = new Map<string, MikanSkill>();\n\n  // workspacePath is the runtime-side root (e.g. /workspace); host paths under\n  // the workspace root translate onto it for prompt references.\n  const hostWorkspacePath = office.workspace.root;\n\n  // Helper to translate host paths to container paths\n  const translatePath = (hostPath: string): string => {\n    if (hostPath.startsWith(hostWorkspacePath)) {\n      return workspacePath + hostPath.slice(hostWorkspacePath.length);\n    }\n    return hostPath;\n  };\n\n  // Package skills first: they are the lowest precedence, so a workspace or\n  // conversation skill of the same name below overwrites them. A package can\n  // offer a capability without taking the name away from whoever wants to\n  // replace it locally.\n  //\n  // Unlike extension-shipped skills, these are NOT inlined into the prompt:\n  // conversationPackageSkillMounts exposes them read-only at a runtime path,\n  // so the agent can read the files — including any scripts or templates the\n  // skill ships alongside its SKILL.md, which inlining could never carry.\n  const mounted = workspacePath !== hostWorkspacePath;\n  for (const { slug, dir } of resolveConversationPackages({ office }).skillDirs) {\n    const runtimeDir = packageSkillRuntimeDir(slug);\n    for (const skill of loadSkillsFromDir({ dir, source: `package:${slug}` }).skills) {\n      // In host mode there is no mount, so the host path is already the path\n      // the agent will use.\n      if (mounted) {\n        skill.filePath = runtimeDir + skill.filePath.slice(dir.length);\n        skill.baseDir = runtimeDir + skill.baseDir.slice(dir.length);\n      }\n      skillMap.set(skill.name, skill);\n    }\n  }\n\n  // Load workspace-level skills only when the office projection authorizes it.\n  const workspaceSkillsDir = projection.promptSources.globalSkillsDir;\n  if (workspaceSkillsDir) {\n    for (const skill of loadSkillsFromDir({ dir: workspaceSkillsDir, source: \"workspace\" })\n      .skills) {\n      skill.filePath = translatePath(skill.filePath);\n      skill.baseDir = translatePath(skill.baseDir);\n      skillMap.set(skill.name, skill);\n    }\n  }\n\n  // Load conversation-specific skills (override workspace skills on collision).\n  // Host prompt construction must never follow an agent-created symlink out of\n  // the conversation office, so this load rejects symlinks per entry — on\n  // exactly the paths it reads. Vendored node_modules and dot directories are\n  // never read and never disqualify anything.\n  const conversationSkillsDir = projection.promptSources.conversationSkillsDir;\n  const conversationSkills = loadSkillsFromDir({\n    dir: conversationSkillsDir,\n    source: \"channel\",\n    rejectSymlinks: true,\n  });\n  const skippedSkillLinks: string[] = [];\n  for (const diagnostic of conversationSkills.diagnostics) {\n    if (diagnostic.code !== \"symlink\") continue;\n    log.logWarning(\"Skipping conversation skill entry (symlink)\", diagnostic.path);\n    skippedSkillLinks.push(translatePath(diagnostic.path));\n  }\n  for (const skill of conversationSkills.skills) {\n    skill.filePath = translatePath(skill.filePath);\n    skill.baseDir = translatePath(skill.baseDir);\n    skillMap.set(skill.name, skill);\n  }\n\n  return { skills: Array.from(skillMap.values()), skippedSkillLinks };\n}\n\nexport function mergeExtensionSkills(local: MikanSkill[], extension: MikanSkill[]): MikanSkill[] {\n  if (extension.length === 0) return local;\n  const byName = new Map<string, MikanSkill>();\n  for (const skill of extension) byName.set(skill.name, skill);\n  for (const skill of local) byName.set(skill.name, skill);\n  return [...byName.values()];\n}\n\nfunction buildExtensionHostServices(params: {\n  workspace: Workspace;\n  address: OfficeAddress;\n  vaultManager?: VaultManager;\n  platformNotifier?: PlatformNotifier;\n  platformReactor?: PlatformReactor;\n  platformUploader?: PlatformUploader;\n  platformBlockKit?: PlatformBlockKit;\n  platformDmOpener?: PlatformDmOpener;\n  platformHistoryFetcher?: PlatformHistoryFetcher;\n  platformUserLister?: PlatformUserLister;\n  extensionScheduleEngine?: ExtensionScheduleEngine;\n  runSubagentService?: ExtensionHostServices[\"runSubagent\"];\n}): ExtensionHostServices {\n  const {\n    workspace,\n    address,\n    vaultManager,\n    platformNotifier,\n    platformReactor,\n    platformUploader,\n    platformBlockKit,\n    platformDmOpener,\n    platformHistoryFetcher,\n    platformUserLister,\n    extensionScheduleEngine,\n    runSubagentService,\n  } = params;\n  const eventStore = HostEventStore.fromWorkspaceDir(workspace.root);\n  return {\n    stateDir: workspace.stateDir,\n    scheduleStore: {\n      write: async (filename, payload) => {\n        await eventStore.write(filename, payload);\n      },\n      delete: async (filename) => (await eventStore.delete(filename)).deleted,\n      list: async () =>\n        (await eventStore.list()).flatMap((entry) =>\n          entry.payload ? [{ filename: entry.filename, payload: entry.payload }] : [],\n        ),\n    },\n    ...(platformNotifier ? { postMessage: platformNotifier } : {}),\n    ...(platformReactor ? { addReaction: platformReactor } : {}),\n    ...(platformUploader ? { uploadFile: platformUploader } : {}),\n    ...(platformDmOpener ? { openDirectConversation: platformDmOpener } : {}),\n    ...(platformHistoryFetcher ? { fetchHistory: platformHistoryFetcher } : {}),\n    ...(platformUserLister ? { listUsers: platformUserLister } : {}),\n    ...(extensionScheduleEngine\n      ? {\n          callbackScheduleStore: {\n            upsert: (slug, name, spec) => extensionScheduleEngine.upsert(address, slug, name, spec),\n            delete: (slug, name) => extensionScheduleEngine.delete(address, slug, name),\n            list: (slug) => extensionScheduleEngine.list(address, slug),\n          },\n        }\n      : {}),\n    ...(platformBlockKit\n      ? { postBlocks: platformBlockKit.postBlocks, updateBlocks: platformBlockKit.updateBlocks }\n      : {}),\n    ...(runSubagentService ? { runSubagent: runSubagentService } : {}),\n    ...(vaultManager\n      ? {\n          resolveSecrets: (slug: string) => vaultManager.resolve(`extensions/${slug}`)?.env ?? {},\n        }\n      : {}),\n  };\n}\n\nexport async function createConfiguredAgentSession(params: {\n  office: Office;\n  systemPrompt: string;\n  model: Model<Api>;\n  thinkingLevel: ThinkingLevel;\n  tools: Awaited<ReturnType<typeof createMikanTools>>[\"tools\"];\n  sessionStore: SessionStore;\n  models: MikanModels;\n  vaultManager?: VaultManager;\n  platformNotifier?: PlatformNotifier;\n  platformReactor?: PlatformReactor;\n  platformUploader?: PlatformUploader;\n  platformBlockKit?: PlatformBlockKit;\n  platformDmOpener?: PlatformDmOpener;\n  platformHistoryFetcher?: PlatformHistoryFetcher;\n  platformUserLister?: PlatformUserLister;\n  extensionScheduleEngine?: ExtensionScheduleEngine;\n}): Promise<ConfiguredAgentSession> {\n  const {\n    office,\n    systemPrompt,\n    model,\n    thinkingLevel,\n    tools,\n    sessionStore,\n    models,\n    vaultManager,\n    platformNotifier,\n    platformReactor,\n    platformUploader,\n    platformBlockKit,\n    platformDmOpener,\n    platformHistoryFetcher,\n    platformUserLister,\n    extensionScheduleEngine,\n  } = params;\n  const { address } = office;\n  const conversationId = address.conversationId;\n  const workspaceDir = office.workspace.root;\n\n  // Host-only dirs under the state dir: extension code runs in the mikan\n  // process, so it must never load from workspace paths — those are mounted\n  // into sandbox containers and agent-writable (sandbox escape otherwise).\n  // resolveConversationPackages only ever returns state-dir paths (and host\n  // paths an administrator named explicitly in settings); it never reaches\n  // the network on this path, so a slow remote cannot delay a reply.\n  let session: MikanAgentSession | undefined;\n  const loadedProfiles = loadSubagentProfiles(workspaceDir);\n  for (const diagnostic of loadedProfiles.diagnostics) {\n    log.logWarning(\n      `[${conversationId}] Subagent profile ignored: ${diagnostic.path}`,\n      diagnostic.message,\n    );\n  }\n  // Narrowed to the profiles whose tools actually exist once extensions have\n  // contributed theirs. Both subagent entry points read this at call time, so\n  // they always agree on which profiles are launchable.\n  let runnableSubagentProfiles = loadedProfiles.profiles;\n  const resolvedPackages = resolveConversationPackages({ office });\n  for (const error of resolvedPackages.errors) {\n    log.logWarning(`Package unavailable: ${error.source}`, error.message);\n  }\n  const extensionsResult = await loadExtensions({\n    dirs: resolvedPackages.extensionDirs,\n    roots: resolvedPackages.extensionRoots,\n    context: { address, conversationId, workspaceDir, model, thinkingLevel },\n    services: buildExtensionHostServices({\n      workspace: office.workspace,\n      address,\n      vaultManager,\n      platformNotifier,\n      platformReactor,\n      platformUploader,\n      platformBlockKit,\n      platformDmOpener,\n      platformHistoryFetcher,\n      platformUserLister,\n      extensionScheduleEngine,\n      runSubagentService: (request, extensionTools) => {\n        const activeParent = session?.isActiveRun ? session : undefined;\n        return runSubagent({\n          request,\n          defaultModel: model,\n          thinkingLevel,\n          models,\n          workspaceDir,\n          availableTools: [...tools, ...extensionTools],\n          profiles: runnableSubagentProfiles,\n          slots: globalSubagentSlots,\n          ...(activeParent\n            ? {\n                parentMessages: [...activeParent.messages],\n                onUsage: activeParent.captureExternalUsageSink(),\n              }\n            : {}),\n        });\n      },\n    }),\n  });\n  const contributedTools = extensionsResult.registry.getContributedTools();\n  const subagentAvailableTools = [...tools, ...contributedTools];\n  const availableToolNames = new Set(subagentAvailableTools.map((tool) => tool.name));\n  runnableSubagentProfiles = new Map(\n    [...loadedProfiles.profiles].filter(([, profile]) =>\n      profile.tools.every((tool) => availableToolNames.has(tool)),\n    ),\n  );\n  for (const err of extensionsResult.errors) {\n    log.logWarning(`[${conversationId}] Extension load error: ${err.path}`, err.error);\n  }\n  if (extensionsResult.extensions.length > 0) {\n    log.logInfo(\n      `[${conversationId}] Loaded ${extensionsResult.extensions.length} extension(s): ${extensionsResult.extensions.map((extension) => extension.name).join(\", \")}`,\n    );\n  }\n\n  const subagentTool = createSubagentTool(\n    (request, hooks) =>\n      runSubagent({\n        request,\n        ...(hooks?.onActivity ? { onActivity: hooks.onActivity } : {}),\n        defaultModel: model,\n        thinkingLevel,\n        models,\n        workspaceDir,\n        availableTools: subagentAvailableTools,\n        profiles: runnableSubagentProfiles,\n        slots: globalSubagentSlots,\n        parentMessages: [...session!.messages],\n        onUsage: session!.captureExternalUsageSink(),\n      }),\n    runnableSubagentProfiles,\n  );\n\n  session = new MikanAgentSession({\n    systemPrompt,\n    model,\n    thinkingLevel,\n    tools: [...tools, subagentTool],\n    models,\n    sessionStore,\n    extensions: extensionsResult.registry,\n  });\n\n  const activeSession = session;\n  const reloaded = await activeSession.reloadFromSession();\n  if (reloaded > 0) {\n    log.logInfo(`[${conversationId}] Reloaded ${reloaded} messages from session context`);\n  }\n  return {\n    session: activeSession,\n    extensionSkills: extensionsResult.skills,\n    extensionRegistry: extensionsResult.registry,\n    disposeExtensions: extensionsResult.dispose,\n  };\n}\n"]}

package/dist/agent/execution.d.ts

@@ -0,0 +1,32 @@
+import type { Office, Workspace } from "../office/index.js";
+import { type ImageContent } from "@earendil-works/pi-ai";
+import type { ConversationMessage } from "../adapter.js";
+import type { DockerContainerManager } from "../provisioner.js";
+import { type Executor, type RuntimePathContext, type SandboxConfig } from "../sandbox/index.js";
+import type { VaultManager } from "../vault/index.js";
+import type { RunnerExecutionContext } from "./types.js";
+export declare function translateRuntimePathToHost(runtimePath: string, pathContext: RuntimePathContext): string;
+export declare function translateAttachPathToHost(filePath: string, pathContext: RuntimePathContext): string;
+/**
+ * Normalize an attachment path using runtime lexical semantics only. The
+ * executor remains the authority for reading the resulting runtime path.
+ */
+export declare function normalizeAttachRuntimePath(filePath: string, runtimeWorkspaceRoot: string): string;
+export declare function withStagedRuntimeFile(executor: Executor, runtimePath: string, upload: (stagedPath: string) => Promise<void>): Promise<void>;
+export declare function collectMessageAttachments(message: ConversationMessage, workspacePath: string, pathContext?: RuntimePathContext, readAttachment?: (runtimePath: string) => Promise<string>): Promise<{
+    imageAttachments: ImageContent[];
+    nonImagePaths: string[];
+}>;
+export declare function buildRuntimePaths(runtimeWorkspaceRoot: string, office: Office): {
+    workspaceRoot: string;
+    conversationPath: string;
+    scratchPath: string;
+};
+export declare function createRunnerExecutionContext(sandboxConfig: SandboxConfig, vaultManager: VaultManager | undefined, provisioner: DockerContainerManager | undefined, workspace: Workspace): RunnerExecutionContext;
+/**
+ * Extension host services over mikan's runtime infrastructure: schedules
+ * become event files under `<workspaceDir>/events` (picked up live by
+ * EventsWatcher), secrets come from `vaults/extensions/<slug>/env`, and
+ * notify posts through the platform bots when main.ts provides a notifier.
+ */
+//# sourceMappingURL=execution.d.ts.map

package/dist/agent/execution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../../src/agent/execution.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAK1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,kBAAkB,EACvB,KAAK,aAAa,EACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEzD,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,kBAAkB,GAC9B,MAAM,CAER;AAcD,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,kBAAkB,GAC9B,MAAM,CA2BR;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,GAAG,MAAM,CAgBjG;AAED,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,QAAQ,EAClB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAC5C,OAAO,CAAC,IAAI,CAAC,CAaf;AAcD,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,mBAAmB,EAC5B,aAAa,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,kBAAkB,EAChC,cAAc,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,GACxD,OAAO,CAAC;IAAE,gBAAgB,EAAE,YAAY,EAAE,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAyBxE;AAED,wBAAgB,iBAAiB,CAAC,oBAAoB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;;;;EAQ7E;AAED,wBAAgB,4BAA4B,CAC1C,aAAa,EAAE,aAAa,EAC5B,YAAY,EAAE,YAAY,GAAG,SAAS,EACtC,WAAW,EAAE,sBAAsB,GAAG,SAAS,EAC/C,SAAS,EAAE,SAAS,GACnB,sBAAsB,CA6CxB;AAED;;;;;GAKG"}

package/dist/agent/execution.js

@@ -0,0 +1,169 @@
+import {} from "@earendil-works/pi-ai";
+import { existsSync } from "node:fs";
+import { chmod, mkdtemp, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { basename, isAbsolute, join, posix, relative, resolve, sep } from "node:path";
+import { ActorExecutionResolver } from "../execution-resolver.js";
+import { createExecutor, } from "../sandbox/index.js";
+export function translateRuntimePathToHost(runtimePath, pathContext) {
+    return pathContext.runtimeToHostPath?.(runtimePath) ?? runtimePath;
+}
+function isWithinPathRoot(path, root) {
+    const pathRelative = relative(root, path);
+    return (pathRelative === "" ||
+        (pathRelative !== ".." && !pathRelative.startsWith(`..${sep}`) && !isAbsolute(pathRelative)));
+}
+function hasParentTraversal(path) {
+    return path.split(/[\\/]/).some((segment) => segment === "..");
+}
+export function translateAttachPathToHost(filePath, pathContext) {
+    if (!pathContext.runtimeToHostPath) {
+        throw new Error("Cannot attach files: this sandbox has no host-backed runtime path mapping; attachments are unavailable for remote sandboxes such as Cloudflare or Firecracker");
+    }
+    if (hasParentTraversal(filePath)) {
+        throw new Error("Cannot attach files: parent-directory traversal is not allowed");
+    }
+    const runtimeRoot = resolve(pathContext.runtimeWorkspaceRoot);
+    const runtimePath = posix.isAbsolute(filePath)
+        ? filePath
+        : posix.join(pathContext.runtimeWorkspaceRoot, filePath);
+    const normalizedRuntimePath = resolve(runtimePath);
+    if (!isWithinPathRoot(normalizedRuntimePath, runtimeRoot)) {
+        throw new Error("Cannot attach files: path must be within the runtime workspace");
+    }
+    const hostRoot = resolve(pathContext.hostWorkspaceRoot);
+    const translatedPath = pathContext.runtimeToHostPath(runtimePath);
+    const hostPath = resolve(translatedPath);
+    if (!isWithinPathRoot(hostPath, hostRoot)) {
+        throw new Error("Cannot attach files: path must be within the host workspace");
+    }
+    return hostPath;
+}
+/**
+ * Normalize an attachment path using runtime lexical semantics only. The
+ * executor remains the authority for reading the resulting runtime path.
+ */
+export function normalizeAttachRuntimePath(filePath, runtimeWorkspaceRoot) {
+    if (hasParentTraversal(filePath)) {
+        throw new Error("Cannot attach files: parent-directory traversal is not allowed");
+    }
+    const runtimeRoot = posix.resolve(runtimeWorkspaceRoot);
+    const runtimePath = posix.resolve(runtimeRoot, filePath);
+    const runtimeRelativePath = posix.relative(runtimeRoot, runtimePath);
+    if (runtimeRelativePath === ".." ||
+        runtimeRelativePath.startsWith("../") ||
+        posix.isAbsolute(runtimeRelativePath)) {
+        throw new Error("Cannot attach files: path must be within the runtime workspace");
+    }
+    return runtimePath;
+}
+export async function withStagedRuntimeFile(executor, runtimePath, upload) {
+    const content = Buffer.from(await executor.readFileBase64(runtimePath), "base64");
+    let stagingDir;
+    try {
+        stagingDir = await mkdtemp(join(tmpdir(), "mikan-upload-"));
+        await chmod(stagingDir, 0o700);
+        const stagedPath = join(stagingDir, basename(runtimePath));
+        await writeFile(stagedPath, content, { mode: 0o600, flag: "wx" });
+        await chmod(stagedPath, 0o600);
+        await upload(stagedPath);
+    }
+    finally {
+        if (stagingDir)
+            await rm(stagingDir, { recursive: true, force: true });
+    }
+}
+const IMAGE_MIME_TYPES = {
+    jpg: "image/jpeg",
+    jpeg: "image/jpeg",
+    png: "image/png",
+    gif: "image/gif",
+    webp: "image/webp",
+};
+function getImageMimeType(filename) {
+    return IMAGE_MIME_TYPES[filename.toLowerCase().split(".").pop() || ""];
+}
+export async function collectMessageAttachments(message, workspacePath, pathContext, readAttachment) {
+    const imageAttachments = [];
+    const nonImagePaths = [];
+    for (const attachment of message.attachments || []) {
+        const runtimePath = `${workspacePath}/${attachment.localPath}`;
+        const hostPath = pathContext?.runtimeToHostPath?.(runtimePath) ?? runtimePath;
+        const mimeType = getImageMimeType(attachment.localPath);
+        if (mimeType && existsSync(hostPath) && readAttachment) {
+            try {
+                imageAttachments.push({
+                    type: "image",
+                    mimeType,
+                    data: await readAttachment(runtimePath),
+                });
+            }
+            catch {
+                nonImagePaths.push(runtimePath);
+            }
+        }
+        else {
+            nonImagePaths.push(runtimePath);
+        }
+    }
+    return { imageAttachments, nonImagePaths };
+}
+export function buildRuntimePaths(runtimeWorkspaceRoot, office) {
+    const workspaceRoot = runtimeWorkspaceRoot.replace(/\/+$/, "") || "/";
+    const conversationPath = posix.join(workspaceRoot, office.key);
+    return {
+        workspaceRoot,
+        conversationPath,
+        scratchPath: posix.join(conversationPath, "scratch"),
+    };
+}
+export function createRunnerExecutionContext(sandboxConfig, vaultManager, provisioner, workspace) {
+    const executionResolver = vaultManager && sandboxConfig.type !== "host"
+        ? new ActorExecutionResolver(sandboxConfig, vaultManager, provisioner, workspace)
+        : undefined;
+    // activeExecutor is replaced at the start of each run() call when executionResolver
+    // is present, so the stable `executor` wrapper always delegates to the latest resolved value.
+    let activeExecutor = executionResolver !== undefined
+        ? createExecutor({ type: "host" })
+        : createExecutor(sandboxConfig);
+    const executor = {
+        exec(command, options) {
+            return activeExecutor.exec(command, options);
+        },
+        readFile(path, options) {
+            return activeExecutor.readFile(path, options);
+        },
+        readFileBase64(path, options) {
+            return activeExecutor.readFileBase64(path, options);
+        },
+        writeFile(path, content, options) {
+            return activeExecutor.writeFile(path, content, options);
+        },
+        getWorkspacePath(hostPath) {
+            return activeExecutor.getWorkspacePath(hostPath);
+        },
+        getSandboxConfig() {
+            return activeExecutor.getSandboxConfig();
+        },
+        getPathContext(hostWorkspaceRoot) {
+            return activeExecutor.getPathContext(hostWorkspaceRoot);
+        },
+    };
+    return {
+        executionResolver,
+        executor,
+        getPathContext: () => executor.getPathContext(workspace.root),
+        async resolveExecutorForRun(context) {
+            if (!executionResolver)
+                return;
+            activeExecutor = await executionResolver.resolve(context);
+        },
+    };
+}
+/**
+ * Extension host services over mikan's runtime infrastructure: schedules
+ * become event files under `<workspaceDir>/events` (picked up live by
+ * EventsWatcher), secrets come from `vaults/extensions/<slug>/env`, and
+ * notify posts through the platform bots when main.ts provides a notifier.
+ */
+//# sourceMappingURL=execution.js.map

package/dist/agent/execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.js","sourceRoot":"","sources":["../../src/agent/execution.ts"],"names":[],"mappings":"AACA,OAAO,EAAqB,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEtF,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE,OAAO,EACL,cAAc,GAIf,MAAM,qBAAqB,CAAC;AAI7B,MAAM,UAAU,0BAA0B,CACxC,WAAmB,EACnB,WAA+B;IAE/B,OAAO,WAAW,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC;AACrE,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,IAAY;IAClD,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,OAAO,CACL,YAAY,KAAK,EAAE;QACnB,CAAC,YAAY,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAC7F,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,QAAgB,EAChB,WAA+B;IAE/B,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,+JAA+J,CAChK,CAAC;IACJ,CAAC;IACD,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC5C,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;IAC3D,MAAM,qBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,WAAW,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,WAAW,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACzC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAgB,EAAE,oBAA4B;IACvF,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACzD,MAAM,mBAAmB,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACrE,IACE,mBAAmB,KAAK,IAAI;QAC5B,mBAAmB,CAAC,UAAU,CAAC,KAAK,CAAC;QACrC,KAAK,CAAC,UAAU,CAAC,mBAAmB,CAAC,EACrC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAkB,EAClB,WAAmB,EACnB,MAA6C;IAE7C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC;IAClF,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;QAC5D,MAAM,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;QAC3D,MAAM,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,IAAI,UAAU;YAAE,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,MAAM,gBAAgB,GAA2B;IAC/C,GAAG,EAAE,YAAY;IACjB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,YAAY;CACnB,CAAC;AAEF,SAAS,gBAAgB,CAAC,QAAgB;IACxC,OAAO,gBAAgB,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAA4B,EAC5B,aAAqB,EACrB,WAAgC,EAChC,cAAyD;IAEzD,MAAM,gBAAgB,GAAmB,EAAE,CAAC;IAC5C,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QACnD,MAAM,WAAW,GAAG,GAAG,aAAa,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;QAC/D,MAAM,QAAQ,GAAG,WAAW,EAAE,iBAAiB,EAAE,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC;QAC9E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAExD,IAAI,QAAQ,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,cAAc,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,gBAAgB,CAAC,IAAI,CAAC;oBACpB,IAAI,EAAE,OAAO;oBACb,QAAQ;oBACR,IAAI,EAAE,MAAM,cAAc,CAAC,WAAW,CAAC;iBACxC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,oBAA4B,EAAE,MAAc;IAC5E,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;IACtE,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/D,OAAO;QACL,aAAa;QACb,gBAAgB;QAChB,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,SAAS,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,aAA4B,EAC5B,YAAsC,EACtC,WAA+C,EAC/C,SAAoB;IAEpB,MAAM,iBAAiB,GACrB,YAAY,IAAI,aAAa,CAAC,IAAI,KAAK,MAAM;QAC3C,CAAC,CAAC,IAAI,sBAAsB,CAAC,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,CAAC;QACjF,CAAC,CAAC,SAAS,CAAC;IAEhB,oFAAoF;IACpF,8FAA8F;IAC9F,IAAI,cAAc,GAChB,iBAAiB,KAAK,SAAS;QAC7B,CAAC,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAClC,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAa;QACzB,IAAI,CAAC,OAAO,EAAE,OAAO;YACnB,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;QACD,QAAQ,CAAC,IAAI,EAAE,OAAO;YACpB,OAAO,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QACD,cAAc,CAAC,IAAI,EAAE,OAAO;YAC1B,OAAO,cAAc,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;QACD,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO;YAC9B,OAAO,cAAc,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1D,CAAC;QACD,gBAAgB,CAAC,QAAQ;YACvB,OAAO,cAAc,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACnD,CAAC;QACD,gBAAgB;YACd,OAAO,cAAc,CAAC,gBAAgB,EAAE,CAAC;QAC3C,CAAC;QACD,cAAc,CAAC,iBAAiB;YAC9B,OAAO,cAAc,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QAC1D,CAAC;KACF,CAAC;IAEF,OAAO;QACL,iBAAiB;QACjB,QAAQ;QACR,cAAc,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC;QAC7D,KAAK,CAAC,qBAAqB,CAAC,OAAO;YACjC,IAAI,CAAC,iBAAiB;gBAAE,OAAO;YAC/B,cAAc,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5D,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG","sourcesContent":["import type { Office, Workspace } from \"../office/index.js\";\nimport { type ImageContent } from \"@earendil-works/pi-ai\";\nimport { existsSync } from \"node:fs\";\nimport { chmod, mkdtemp, rm, writeFile } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { basename, isAbsolute, join, posix, relative, resolve, sep } from \"node:path\";\nimport type { ConversationMessage } from \"../adapter.js\";\nimport { ActorExecutionResolver } from \"../execution-resolver.js\";\nimport type { DockerContainerManager } from \"../provisioner.js\";\nimport {\n  createExecutor,\n  type Executor,\n  type RuntimePathContext,\n  type SandboxConfig,\n} from \"../sandbox/index.js\";\nimport type { VaultManager } from \"../vault/index.js\";\nimport type { RunnerExecutionContext } from \"./types.js\";\n\nexport function translateRuntimePathToHost(\n  runtimePath: string,\n  pathContext: RuntimePathContext,\n): string {\n  return pathContext.runtimeToHostPath?.(runtimePath) ?? runtimePath;\n}\n\nfunction isWithinPathRoot(path: string, root: string): boolean {\n  const pathRelative = relative(root, path);\n  return (\n    pathRelative === \"\" ||\n    (pathRelative !== \"..\" && !pathRelative.startsWith(`..${sep}`) && !isAbsolute(pathRelative))\n  );\n}\n\nfunction hasParentTraversal(path: string): boolean {\n  return path.split(/[\\\\/]/).some((segment) => segment === \"..\");\n}\n\nexport function translateAttachPathToHost(\n  filePath: string,\n  pathContext: RuntimePathContext,\n): string {\n  if (!pathContext.runtimeToHostPath) {\n    throw new Error(\n      \"Cannot attach files: this sandbox has no host-backed runtime path mapping; attachments are unavailable for remote sandboxes such as Cloudflare or Firecracker\",\n    );\n  }\n  if (hasParentTraversal(filePath)) {\n    throw new Error(\"Cannot attach files: parent-directory traversal is not allowed\");\n  }\n\n  const runtimeRoot = resolve(pathContext.runtimeWorkspaceRoot);\n  const runtimePath = posix.isAbsolute(filePath)\n    ? filePath\n    : posix.join(pathContext.runtimeWorkspaceRoot, filePath);\n  const normalizedRuntimePath = resolve(runtimePath);\n  if (!isWithinPathRoot(normalizedRuntimePath, runtimeRoot)) {\n    throw new Error(\"Cannot attach files: path must be within the runtime workspace\");\n  }\n\n  const hostRoot = resolve(pathContext.hostWorkspaceRoot);\n  const translatedPath = pathContext.runtimeToHostPath(runtimePath);\n  const hostPath = resolve(translatedPath);\n  if (!isWithinPathRoot(hostPath, hostRoot)) {\n    throw new Error(\"Cannot attach files: path must be within the host workspace\");\n  }\n\n  return hostPath;\n}\n\n/**\n * Normalize an attachment path using runtime lexical semantics only. The\n * executor remains the authority for reading the resulting runtime path.\n */\nexport function normalizeAttachRuntimePath(filePath: string, runtimeWorkspaceRoot: string): string {\n  if (hasParentTraversal(filePath)) {\n    throw new Error(\"Cannot attach files: parent-directory traversal is not allowed\");\n  }\n\n  const runtimeRoot = posix.resolve(runtimeWorkspaceRoot);\n  const runtimePath = posix.resolve(runtimeRoot, filePath);\n  const runtimeRelativePath = posix.relative(runtimeRoot, runtimePath);\n  if (\n    runtimeRelativePath === \"..\" ||\n    runtimeRelativePath.startsWith(\"../\") ||\n    posix.isAbsolute(runtimeRelativePath)\n  ) {\n    throw new Error(\"Cannot attach files: path must be within the runtime workspace\");\n  }\n  return runtimePath;\n}\n\nexport async function withStagedRuntimeFile(\n  executor: Executor,\n  runtimePath: string,\n  upload: (stagedPath: string) => Promise<void>,\n): Promise<void> {\n  const content = Buffer.from(await executor.readFileBase64(runtimePath), \"base64\");\n  let stagingDir: string | undefined;\n  try {\n    stagingDir = await mkdtemp(join(tmpdir(), \"mikan-upload-\"));\n    await chmod(stagingDir, 0o700);\n    const stagedPath = join(stagingDir, basename(runtimePath));\n    await writeFile(stagedPath, content, { mode: 0o600, flag: \"wx\" });\n    await chmod(stagedPath, 0o600);\n    await upload(stagedPath);\n  } finally {\n    if (stagingDir) await rm(stagingDir, { recursive: true, force: true });\n  }\n}\n\nconst IMAGE_MIME_TYPES: Record<string, string> = {\n  jpg: \"image/jpeg\",\n  jpeg: \"image/jpeg\",\n  png: \"image/png\",\n  gif: \"image/gif\",\n  webp: \"image/webp\",\n};\n\nfunction getImageMimeType(filename: string): string | undefined {\n  return IMAGE_MIME_TYPES[filename.toLowerCase().split(\".\").pop() || \"\"];\n}\n\nexport async function collectMessageAttachments(\n  message: ConversationMessage,\n  workspacePath: string,\n  pathContext?: RuntimePathContext,\n  readAttachment?: (runtimePath: string) => Promise<string>,\n): Promise<{ imageAttachments: ImageContent[]; nonImagePaths: string[] }> {\n  const imageAttachments: ImageContent[] = [];\n  const nonImagePaths: string[] = [];\n\n  for (const attachment of message.attachments || []) {\n    const runtimePath = `${workspacePath}/${attachment.localPath}`;\n    const hostPath = pathContext?.runtimeToHostPath?.(runtimePath) ?? runtimePath;\n    const mimeType = getImageMimeType(attachment.localPath);\n\n    if (mimeType && existsSync(hostPath) && readAttachment) {\n      try {\n        imageAttachments.push({\n          type: \"image\",\n          mimeType,\n          data: await readAttachment(runtimePath),\n        });\n      } catch {\n        nonImagePaths.push(runtimePath);\n      }\n    } else {\n      nonImagePaths.push(runtimePath);\n    }\n  }\n\n  return { imageAttachments, nonImagePaths };\n}\n\nexport function buildRuntimePaths(runtimeWorkspaceRoot: string, office: Office) {\n  const workspaceRoot = runtimeWorkspaceRoot.replace(/\\/+$/, \"\") || \"/\";\n  const conversationPath = posix.join(workspaceRoot, office.key);\n  return {\n    workspaceRoot,\n    conversationPath,\n    scratchPath: posix.join(conversationPath, \"scratch\"),\n  };\n}\n\nexport function createRunnerExecutionContext(\n  sandboxConfig: SandboxConfig,\n  vaultManager: VaultManager | undefined,\n  provisioner: DockerContainerManager | undefined,\n  workspace: Workspace,\n): RunnerExecutionContext {\n  const executionResolver =\n    vaultManager && sandboxConfig.type !== \"host\"\n      ? new ActorExecutionResolver(sandboxConfig, vaultManager, provisioner, workspace)\n      : undefined;\n\n  // activeExecutor is replaced at the start of each run() call when executionResolver\n  // is present, so the stable `executor` wrapper always delegates to the latest resolved value.\n  let activeExecutor: Executor =\n    executionResolver !== undefined\n      ? createExecutor({ type: \"host\" })\n      : createExecutor(sandboxConfig);\n  const executor: Executor = {\n    exec(command, options) {\n      return activeExecutor.exec(command, options);\n    },\n    readFile(path, options) {\n      return activeExecutor.readFile(path, options);\n    },\n    readFileBase64(path, options) {\n      return activeExecutor.readFileBase64(path, options);\n    },\n    writeFile(path, content, options) {\n      return activeExecutor.writeFile(path, content, options);\n    },\n    getWorkspacePath(hostPath) {\n      return activeExecutor.getWorkspacePath(hostPath);\n    },\n    getSandboxConfig() {\n      return activeExecutor.getSandboxConfig();\n    },\n    getPathContext(hostWorkspaceRoot) {\n      return activeExecutor.getPathContext(hostWorkspaceRoot);\n    },\n  };\n\n  return {\n    executionResolver,\n    executor,\n    getPathContext: () => executor.getPathContext(workspace.root),\n    async resolveExecutorForRun(context): Promise<void> {\n      if (!executionResolver) return;\n      activeExecutor = await executionResolver.resolve(context);\n    },\n  };\n}\n\n/**\n * Extension host services over mikan's runtime infrastructure: schedules\n * become event files under `<workspaceDir>/events` (picked up live by\n * EventsWatcher), secrets come from `vaults/extensions/<slug>/env`, and\n * notify posts through the platform bots when main.ts provides a notifier.\n */\n"]}

package/dist/agent/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Agent runner: prompt construction, path translation, run lifecycle, and createRunner.
+ * Split by authority; this barrel preserves the former public surface.
+ */
+export { translateRuntimePathToHost, translateAttachPathToHost } from "./execution.js";
+export { buildPromptPayload, resolveTriggerAttribution, buildTurnInstructions, appendTriggerAttribution, } from "./prompt.js";
+export { createRunner } from "./runner.js";
+export type { PiAgentWrapper } from "../types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/agent/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/agent/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AACvF,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC"}

package/dist/agent/index.js

@@ -0,0 +1,8 @@
+/**
+ * Agent runner: prompt construction, path translation, run lifecycle, and createRunner.
+ * Split by authority; this barrel preserves the former public surface.
+ */
+export { translateRuntimePathToHost, translateAttachPathToHost } from "./execution.js";
+export { buildPromptPayload, resolveTriggerAttribution, buildTurnInstructions, appendTriggerAttribution, } from "./prompt.js";
+export { createRunner } from "./runner.js";
+//# sourceMappingURL=index.js.map

package/dist/agent/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/agent/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AACvF,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC","sourcesContent":["/**\n * Agent runner: prompt construction, path translation, run lifecycle, and createRunner.\n * Split by authority; this barrel preserves the former public surface.\n */\nexport { translateRuntimePathToHost, translateAttachPathToHost } from \"./execution.js\";\nexport {\n  buildPromptPayload,\n  resolveTriggerAttribution,\n  buildTurnInstructions,\n  appendTriggerAttribution,\n} from \"./prompt.js\";\nexport { createRunner } from \"./runner.js\";\nexport type { PiAgentWrapper } from \"../types.js\";\n"]}

package/dist/agent/presenter.d.ts

@@ -0,0 +1,46 @@
+import { type Api, type Model } from "@earendil-works/pi-ai";
+import type { MikanAgentSession } from "../harness/index.js";
+import type { ConversationResponder } from "../adapter.js";
+import type { AgentEventPayload } from "../types.js";
+import type { resolveConversationSettings } from "../config.js";
+import type { RunnerSessionState, UsageReportContext } from "./types.js";
+export declare function createRunState(): RunnerSessionState;
+export declare function resetRunState(runState: RunnerSessionState, responder: ConversationResponder, sessionConversation: string, userName: string | undefined, sessionUuid: string, triggerAttribution: string | undefined): void;
+export declare function createRunQueue(responder: ConversationResponder, runState: RunnerSessionState): {
+    queue: {
+        enqueue(fn: () => Promise<void>, errorContext: string): void;
+    };
+    wait: () => Promise<void>;
+};
+export declare function isEventTriggerAttribution(triggerAttribution: string | undefined): boolean;
+export declare function finalizeRunResponse(responder: ConversationResponder, session: MikanAgentSession, runState: RunnerSessionState, options?: {
+    triggerAttribution?: string;
+    triggerSessionLink?: string;
+    createOverflowLink?: () => string;
+    platform?: string;
+    model?: Model<Api>;
+    sessionConversation?: string;
+    sessionUuid?: string;
+}): Promise<void>;
+export declare function reportUsageSummary(ctx: UsageReportContext): Promise<void>;
+export declare function createNoopResponder(): ConversationResponder;
+export declare function formatAgentActorName(userName: string | undefined, fallback: string): string;
+export declare function sendAgentEvent(payload: {
+    sessionId: string;
+    actorName: string;
+    event: AgentEventPayload;
+}): void;
+export declare function attachSessionEventHandlers(params: {
+    session: MikanAgentSession;
+    runState: RunnerSessionState;
+    model: Model<Api>;
+    agentConfig: ReturnType<typeof resolveConversationSettings>;
+}): void;
+/**
+ * Create a new PiAgentWrapper for a channel.
+ * Sets up the session and subscribes to events once.
+ *
+ * Runner caching is handled by the caller (channelStates in main.ts).
+ * This is a stateless factory function.
+ */
+//# sourceMappingURL=presenter.d.ts.map

package/dist/agent/presenter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presenter.d.ts","sourceRoot":"","sources":["../../src/agent/presenter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,GAAG,EAAE,KAAK,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAO7D,OAAO,KAAK,EAAE,qBAAqB,EAA4B,MAAM,eAAe,CAAC;AACrF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAUhE,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAYzE,wBAAgB,cAAc,IAAI,kBAAkB,CAsBnD;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,kBAAkB,EAC5B,SAAS,EAAE,qBAAqB,EAChC,mBAAmB,EAAE,MAAM,EAC3B,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,WAAW,EAAE,MAAM,EACnB,kBAAkB,EAAE,MAAM,GAAG,SAAS,GACrC,IAAI,CAyBN;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,qBAAqB,EAChC,QAAQ,EAAE,kBAAkB,GAC3B;IACD,KAAK,EAAE;QAAE,OAAO,CAAC,EAAE,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACxE,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B,CAuBA;AAYD,wBAAgB,yBAAyB,CAAC,kBAAkB,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEzF;AA+GD,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,qBAAqB,EAChC,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,CAAC,EAAE;IACR,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,MAAM,CAAC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GACA,OAAO,CAAC,IAAI,CAAC,CA+Ff;AAED,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsE/E;AA8BD,wBAAgB,mBAAmB,IAAI,qBAAqB,CAW3D;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE3F;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,iBAAiB,CAAC;CAC1B,GAAG,IAAI,CAEP;AAGD,wBAAgB,0BAA0B,CAAC,MAAM,EAAE;IACjD,OAAO,EAAE,iBAAiB,CAAC;IAC3B,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAClB,WAAW,EAAE,UAAU,CAAC,OAAO,2BAA2B,CAAC,CAAC;CAC7D,GAAG,IAAI,CAqUP;AAED;;;;;;GAMG"}