@geminixiang/mikan 1.0.0-beta.45 → 1.0.0-beta.47

package/dist/extension-schedules.js

@@ -1,229 +0,0 @@
-/**
- * Host-authoritative store + scheduler for extension callback schedules.
- *
- * `api.schedules` callback specs fire trusted host-side handlers, so unlike
- * the agent-writable workspace event bus (`events/`, watched by
- * EventsWatcher), these schedules persist under the host-only state dir:
- * `<stateDir>/conversations/<officeKey>/extension-schedules/<slug>.<name>.json`.
- * A sandboxed agent can neither create nor edit them — the file is written
- * exclusively by extension code running in the mikan process.
- *
- * One process-wide scheduler arms every schedule with croner (periodic cron
- * or a one-shot ISO date), survives restarts via a boot scan, and dispatches
- * fires to the conversation runtime, which materializes the conversation's
- * harness and runs the registered `onCallback` handler — no agent run, no
- * model call.
- */
-import { Cron } from "croner";
-import { existsSync, readdirSync, readFileSync, rmSync } from "node:fs";
-import { readFile } from "node:fs/promises";
-import { join } from "node:path";
-import { Type } from "@sinclair/typebox";
-import { isValidIsoTimestampWithOffset } from "./harness/event-format.js";
-import * as log from "./log.js";
-import { officeStateDir } from "./office/index.js";
-import { atomicWritePrivateFile, ensureDirExists, parseJsonSchemaValue, } from "./utils/file-guards.js";
-const SCHEDULES_DIRNAME = "extension-schedules";
-/** On-disk record: the fire payload plus the schedule's timing fields. */
-const CallbackScheduleFileSchema = Type.Object({
-    platform: Type.String(),
-    conversationId: Type.String(),
-    slug: Type.String(),
-    name: Type.String(),
-    type: Type.Union([Type.Literal("periodic"), Type.Literal("one-shot")]),
-    schedule: Type.Optional(Type.String()),
-    timezone: Type.Optional(Type.String()),
-    at: Type.Optional(Type.String()),
-    callback: Type.String(),
-    args: Type.Optional(Type.Unknown()),
-});
-function specFromRecord(record) {
-    const action = {
-        callback: record.callback,
-        ...(record.args !== undefined ? { args: record.args } : {}),
-    };
-    return record.type === "periodic"
-        ? {
-            type: "periodic",
-            schedule: record.schedule ?? "",
-            timezone: record.timezone ?? "",
-            ...action,
-        }
-        : { type: "one-shot", at: record.at ?? "", ...action };
-}
-export class ExtensionCallbackScheduler {
-    constructor(options) {
-        this.options = options;
-        /** Armed croner instances keyed by schedule file path. */
-        this.crons = new Map();
-    }
-    /** Arm every persisted schedule. Call once after the runtime is ready. */
-    start() {
-        const conversationsDir = join(this.options.stateDir, "conversations");
-        if (!existsSync(conversationsDir))
-            return;
-        let armed = 0;
-        for (const officeDir of readdirSync(conversationsDir)) {
-            const schedulesDir = join(conversationsDir, officeDir, SCHEDULES_DIRNAME);
-            if (!existsSync(schedulesDir))
-                continue;
-            for (const filename of readdirSync(schedulesDir)) {
-                if (!filename.endsWith(".json"))
-                    continue;
-                if (this.armFromDisk(join(schedulesDir, filename)))
-                    armed++;
-            }
-        }
-        if (armed > 0)
-            log.logInfo(`Extension callback schedules armed: ${armed}`);
-    }
-    /** Disarm everything (shutdown). Persisted files re-arm on next start. */
-    stop() {
-        for (const cron of this.crons.values())
-            cron.stop();
-        this.crons.clear();
-    }
-    async upsert(address, slug, name, spec) {
-        if (spec.type === "one-shot") {
-            if (!isValidIsoTimestampWithOffset(spec.at)) {
-                throw new Error("`at` must be a valid ISO 8601 timestamp with UTC offset");
-            }
-            if (new Date(spec.at).getTime() <= Date.now()) {
-                throw new Error("`at` must be in the future");
-            }
-        }
-        const record = {
-            platform: address.platform,
-            conversationId: address.conversationId,
-            slug,
-            name,
-            type: spec.type,
-            ...(spec.type === "periodic" ? { schedule: spec.schedule, timezone: spec.timezone } : {}),
-            ...(spec.type === "one-shot" ? { at: spec.at } : {}),
-            callback: spec.callback,
-            // Round-tripped through JSON so what fires later is exactly what
-            // persisting kept (functions and other non-JSON values never survive).
-            ...(spec.args !== undefined
-                ? { args: JSON.parse(JSON.stringify(spec.args)) }
-                : {}),
-        };
-        const filePath = this.filePath(address, slug, name);
-        // Validate by arming first: an invalid cron pattern or timezone throws
-        // here, before anything is persisted or replaced.
-        this.arm(filePath, record);
-        ensureDirExists(join(officeStateDir(this.options.stateDir, address), SCHEDULES_DIRNAME));
-        atomicWritePrivateFile(filePath, JSON.stringify(record, null, 2));
-    }
-    async delete(address, slug, name) {
-        const filePath = this.filePath(address, slug, name);
-        this.disarm(filePath);
-        if (!existsSync(filePath))
-            return false;
-        rmSync(filePath, { force: true });
-        return true;
-    }
-    async list(address, slug) {
-        const schedulesDir = join(officeStateDir(this.options.stateDir, address), SCHEDULES_DIRNAME);
-        if (!existsSync(schedulesDir))
-            return [];
-        const prefix = `${slug}.`;
-        const infos = [];
-        for (const filename of readdirSync(schedulesDir).toSorted()) {
-            if (!filename.startsWith(prefix) || !filename.endsWith(".json"))
-                continue;
-            const record = await this.readRecord(join(schedulesDir, filename));
-            if (record && record.slug === slug) {
-                infos.push({ name: record.name, spec: specFromRecord(record) });
-            }
-        }
-        return infos;
-    }
-    filePath(address, slug, name) {
-        return join(officeStateDir(this.options.stateDir, address), SCHEDULES_DIRNAME, `${slug}.${name}.json`);
-    }
-    async readRecord(filePath) {
-        try {
-            const content = await readFile(filePath, "utf-8");
-            return parseJsonSchemaValue(content, CallbackScheduleFileSchema, (detail) => `Malformed extension schedule ${filePath}: ${detail}`);
-        }
-        catch (err) {
-            log.logWarning(`Skipping unreadable extension schedule: ${filePath}`, err instanceof Error ? err.message : String(err));
-            return undefined;
-        }
-    }
-    armFromDisk(filePath) {
-        try {
-            const record = parseJsonSchemaValue(readFileSync(filePath, "utf-8"), CallbackScheduleFileSchema, (detail) => `Malformed extension schedule ${filePath}: ${detail}`);
-            this.arm(filePath, record);
-            return this.crons.has(filePath);
-        }
-        catch (err) {
-            // Never delete on parse failure: a code bug must not destroy schedules.
-            log.logWarning(`Skipping invalid extension schedule: ${filePath}`, err instanceof Error ? err.message : String(err));
-            return false;
-        }
-    }
-    /**
-     * Replace the armed cron for one schedule file. Throws on an invalid cron
-     * pattern or timezone BEFORE touching the existing arm, so a failed upsert
-     * leaves the previous schedule running.
-     */
-    arm(filePath, record) {
-        const fire = () => void this.fire(filePath, record);
-        let cron;
-        if (record.type === "periodic") {
-            if (!record.schedule || !record.timezone) {
-                throw new Error("`schedule` and `timezone` are required for periodic schedules");
-            }
-            cron = new Cron(record.schedule, { timezone: record.timezone }, fire);
-        }
-        else {
-            if (!record.at)
-                throw new Error("`at` is required for one-shot schedules");
-            const at = new Date(record.at);
-            if (at.getTime() <= Date.now()) {
-                // Fired while we were down (or was written in the past): drop it,
-                // mirroring the event watcher's stale one-shot handling. Only the
-                // boot scan reaches here — upsert rejects past timestamps.
-                log.logInfo(`Extension schedule in the past, deleting: ${filePath}`);
-                rmSync(filePath, { force: true });
-            }
-            else {
-                cron = new Cron(at, fire);
-            }
-        }
-        this.disarm(filePath);
-        if (cron)
-            this.crons.set(filePath, cron);
-    }
-    disarm(filePath) {
-        const cron = this.crons.get(filePath);
-        if (cron) {
-            cron.stop();
-            this.crons.delete(filePath);
-        }
-    }
-    async fire(filePath, record) {
-        if (record.type === "one-shot") {
-            this.disarm(filePath);
-            rmSync(filePath, { force: true });
-        }
-        try {
-            const consumed = await this.options.dispatch({
-                platform: record.platform,
-                conversationId: record.conversationId,
-                slug: record.slug,
-                scheduleName: record.name,
-                callback: record.callback,
-                ...(record.args !== undefined ? { args: record.args } : {}),
-            });
-            if (!consumed) {
-                log.logWarning(`Extension schedule callback has no registered handler: ${record.slug}.${record.name} → ${record.callback}`, filePath);
-            }
-        }
-        catch (err) {
-            log.logWarning(`Extension schedule dispatch failed: ${record.slug}.${record.name}`, err instanceof Error ? err.message : String(err));
-        }
-    }
-}
-//# sourceMappingURL=extension-schedules.js.map

package/dist/extension-schedules.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"extension-schedules.js","sourceRoot":"","sources":["../src/extension-schedules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,EAAe,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAO1E,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAEhD,0EAA0E;AAC1E,MAAM,0BAA0B,GAAG,IAAI,CAAC,MAAM,CAAC;IAC7C,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE;IACvB,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE;IAC7B,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IACtE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACtC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACtC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAChC,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE;IACvB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;CACpC,CAAC,CAAC;AAIH,SAAS,cAAc,CAAC,MAA8B;IACpD,MAAM,MAAM,GAAG;QACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU;QAC/B,CAAC,CAAC;YACE,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;YAC/B,GAAG,MAAM;SACV;QACH,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC;AAC3D,CAAC;AAED,MAAM,OAAO,0BAA0B;IAIrC,YACU,OAIP;QAJO,YAAO,GAAP,OAAO,CAId;QARH,0DAA0D;QAClD,UAAK,GAAG,IAAI,GAAG,EAAgB,CAAC;IAQrC,CAAC;IAEJ,0EAA0E;IAC1E,KAAK;QACH,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QACtE,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC;YAAE,OAAO;QAC1C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,SAAS,IAAI,WAAW,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACtD,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;YAC1E,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;gBAAE,SAAS;YACxC,KAAK,MAAM,QAAQ,IAAI,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;gBACjD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAAE,SAAS;gBAC1C,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;oBAAE,KAAK,EAAE,CAAC;YAC9D,CAAC;QACH,CAAC;QACD,IAAI,KAAK,GAAG,CAAC;YAAE,GAAG,CAAC,OAAO,CAAC,uCAAuC,KAAK,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,0EAA0E;IAC1E,IAAI;QACF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,MAAM,CACV,OAAsB,EACtB,IAAY,EACZ,IAAY,EACZ,IAAmC;QAEnC,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC7B,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;YAC7E,CAAC;YACD,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAA2B;YACrC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,IAAI;YACJ,IAAI;YACJ,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,iEAAiE;YACjE,uEAAuE;YACvE,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;gBACzB,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAY,EAAE;gBAC5D,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACpD,uEAAuE;QACvE,kDAAkD;QAClD,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3B,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACzF,sBAAsB,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAsB,EAAE,IAAY,EAAE,IAAY;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAsB,EAAE,IAAY;QAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAC7F,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,OAAO,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC;QAC1B,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,KAAK,MAAM,QAAQ,IAAI,WAAW,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC5D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YAC1E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;YACnE,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBACnC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,QAAQ,CAAC,OAAsB,EAAE,IAAY,EAAE,IAAY;QACjE,OAAO,IAAI,CACT,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,EAC9C,iBAAiB,EACjB,GAAG,IAAI,IAAI,IAAI,OAAO,CACvB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,QAAgB;QACvC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClD,OAAO,oBAAoB,CACzB,OAAO,EACP,0BAA0B,EAC1B,CAAC,MAAM,EAAE,EAAE,CAAC,gCAAgC,QAAQ,KAAK,MAAM,EAAE,CAClE,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,UAAU,CACZ,2CAA2C,QAAQ,EAAE,EACrD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;YACF,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,QAAgB;QAClC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,oBAAoB,CACjC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,EAC/B,0BAA0B,EAC1B,CAAC,MAAM,EAAE,EAAE,CAAC,gCAAgC,QAAQ,KAAK,MAAM,EAAE,CAClE,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,wEAAwE;YACxE,GAAG,CAAC,UAAU,CACZ,wCAAwC,QAAQ,EAAE,EAClD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,GAAG,CAAC,QAAgB,EAAE,MAA8B;QAC1D,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,IAAsB,CAAC;QAC3B,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;YACnF,CAAC;YACD,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC3E,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC/B,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC/B,kEAAkE;gBAClE,kEAAkE;gBAClE,2DAA2D;gBAC3D,GAAG,CAAC,OAAO,CAAC,6CAA6C,QAAQ,EAAE,CAAC,CAAC;gBACrE,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,IAAI,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtB,IAAI,IAAI;YAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAEO,MAAM,CAAC,QAAgB;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,MAA8B;QACjE,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACtB,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,YAAY,EAAE,MAAM,CAAC,IAAI;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5D,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,GAAG,CAAC,UAAU,CACZ,0DAA0D,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,QAAQ,EAAE,EAC3G,QAAQ,CACT,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,UAAU,CACZ,uCAAuC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,EACnE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;QACJ,CAAC;IACH,CAAC;CACF","sourcesContent":["/**\n * Host-authoritative store + scheduler for extension callback schedules.\n *\n * `api.schedules` callback specs fire trusted host-side handlers, so unlike\n * the agent-writable workspace event bus (`events/`, watched by\n * EventsWatcher), these schedules persist under the host-only state dir:\n * `<stateDir>/conversations/<officeKey>/extension-schedules/<slug>.<name>.json`.\n * A sandboxed agent can neither create nor edit them — the file is written\n * exclusively by extension code running in the mikan process.\n *\n * One process-wide scheduler arms every schedule with croner (periodic cron\n * or a one-shot ISO date), survives restarts via a boot scan, and dispatches\n * fires to the conversation runtime, which materializes the conversation's\n * harness and runs the registered `onCallback` handler — no agent run, no\n * model call.\n */\nimport { Cron } from \"croner\";\nimport { existsSync, readdirSync, readFileSync, rmSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { Type, type Static } from \"@sinclair/typebox\";\nimport { isValidIsoTimestampWithOffset } from \"./harness/event-format.js\";\nimport type {\n  ExtensionCallbackScheduleSpec,\n  ExtensionScheduleCallbackFire,\n  ExtensionScheduleEngine,\n  ExtensionScheduleInfo,\n} from \"./harness/index.js\";\nimport * as log from \"./log.js\";\nimport { officeStateDir } from \"./office/index.js\";\nimport type { OfficeAddress } from \"./types.js\";\nimport {\n  atomicWritePrivateFile,\n  ensureDirExists,\n  parseJsonSchemaValue,\n} from \"./utils/file-guards.js\";\n\nconst SCHEDULES_DIRNAME = \"extension-schedules\";\n\n/** On-disk record: the fire payload plus the schedule's timing fields. */\nconst CallbackScheduleFileSchema = Type.Object({\n  platform: Type.String(),\n  conversationId: Type.String(),\n  slug: Type.String(),\n  name: Type.String(),\n  type: Type.Union([Type.Literal(\"periodic\"), Type.Literal(\"one-shot\")]),\n  schedule: Type.Optional(Type.String()),\n  timezone: Type.Optional(Type.String()),\n  at: Type.Optional(Type.String()),\n  callback: Type.String(),\n  args: Type.Optional(Type.Unknown()),\n});\n\ntype CallbackScheduleRecord = Static<typeof CallbackScheduleFileSchema>;\n\nfunction specFromRecord(record: CallbackScheduleRecord): ExtensionCallbackScheduleSpec {\n  const action = {\n    callback: record.callback,\n    ...(record.args !== undefined ? { args: record.args } : {}),\n  };\n  return record.type === \"periodic\"\n    ? {\n        type: \"periodic\",\n        schedule: record.schedule ?? \"\",\n        timezone: record.timezone ?? \"\",\n        ...action,\n      }\n    : { type: \"one-shot\", at: record.at ?? \"\", ...action };\n}\n\nexport class ExtensionCallbackScheduler implements ExtensionScheduleEngine {\n  /** Armed croner instances keyed by schedule file path. */\n  private crons = new Map<string, Cron>();\n\n  constructor(\n    private options: {\n      stateDir: string;\n      /** Resolves false when no handler is registered for the fire. */\n      dispatch: (fire: ExtensionScheduleCallbackFire) => Promise<boolean>;\n    },\n  ) {}\n\n  /** Arm every persisted schedule. Call once after the runtime is ready. */\n  start(): void {\n    const conversationsDir = join(this.options.stateDir, \"conversations\");\n    if (!existsSync(conversationsDir)) return;\n    let armed = 0;\n    for (const officeDir of readdirSync(conversationsDir)) {\n      const schedulesDir = join(conversationsDir, officeDir, SCHEDULES_DIRNAME);\n      if (!existsSync(schedulesDir)) continue;\n      for (const filename of readdirSync(schedulesDir)) {\n        if (!filename.endsWith(\".json\")) continue;\n        if (this.armFromDisk(join(schedulesDir, filename))) armed++;\n      }\n    }\n    if (armed > 0) log.logInfo(`Extension callback schedules armed: ${armed}`);\n  }\n\n  /** Disarm everything (shutdown). Persisted files re-arm on next start. */\n  stop(): void {\n    for (const cron of this.crons.values()) cron.stop();\n    this.crons.clear();\n  }\n\n  async upsert(\n    address: OfficeAddress,\n    slug: string,\n    name: string,\n    spec: ExtensionCallbackScheduleSpec,\n  ): Promise<void> {\n    if (spec.type === \"one-shot\") {\n      if (!isValidIsoTimestampWithOffset(spec.at)) {\n        throw new Error(\"`at` must be a valid ISO 8601 timestamp with UTC offset\");\n      }\n      if (new Date(spec.at).getTime() <= Date.now()) {\n        throw new Error(\"`at` must be in the future\");\n      }\n    }\n    const record: CallbackScheduleRecord = {\n      platform: address.platform,\n      conversationId: address.conversationId,\n      slug,\n      name,\n      type: spec.type,\n      ...(spec.type === \"periodic\" ? { schedule: spec.schedule, timezone: spec.timezone } : {}),\n      ...(spec.type === \"one-shot\" ? { at: spec.at } : {}),\n      callback: spec.callback,\n      // Round-tripped through JSON so what fires later is exactly what\n      // persisting kept (functions and other non-JSON values never survive).\n      ...(spec.args !== undefined\n        ? { args: JSON.parse(JSON.stringify(spec.args)) as unknown }\n        : {}),\n    };\n    const filePath = this.filePath(address, slug, name);\n    // Validate by arming first: an invalid cron pattern or timezone throws\n    // here, before anything is persisted or replaced.\n    this.arm(filePath, record);\n    ensureDirExists(join(officeStateDir(this.options.stateDir, address), SCHEDULES_DIRNAME));\n    atomicWritePrivateFile(filePath, JSON.stringify(record, null, 2));\n  }\n\n  async delete(address: OfficeAddress, slug: string, name: string): Promise<boolean> {\n    const filePath = this.filePath(address, slug, name);\n    this.disarm(filePath);\n    if (!existsSync(filePath)) return false;\n    rmSync(filePath, { force: true });\n    return true;\n  }\n\n  async list(address: OfficeAddress, slug: string): Promise<ExtensionScheduleInfo[]> {\n    const schedulesDir = join(officeStateDir(this.options.stateDir, address), SCHEDULES_DIRNAME);\n    if (!existsSync(schedulesDir)) return [];\n    const prefix = `${slug}.`;\n    const infos: ExtensionScheduleInfo[] = [];\n    for (const filename of readdirSync(schedulesDir).toSorted()) {\n      if (!filename.startsWith(prefix) || !filename.endsWith(\".json\")) continue;\n      const record = await this.readRecord(join(schedulesDir, filename));\n      if (record && record.slug === slug) {\n        infos.push({ name: record.name, spec: specFromRecord(record) });\n      }\n    }\n    return infos;\n  }\n\n  private filePath(address: OfficeAddress, slug: string, name: string): string {\n    return join(\n      officeStateDir(this.options.stateDir, address),\n      SCHEDULES_DIRNAME,\n      `${slug}.${name}.json`,\n    );\n  }\n\n  private async readRecord(filePath: string): Promise<CallbackScheduleRecord | undefined> {\n    try {\n      const content = await readFile(filePath, \"utf-8\");\n      return parseJsonSchemaValue(\n        content,\n        CallbackScheduleFileSchema,\n        (detail) => `Malformed extension schedule ${filePath}: ${detail}`,\n      );\n    } catch (err) {\n      log.logWarning(\n        `Skipping unreadable extension schedule: ${filePath}`,\n        err instanceof Error ? err.message : String(err),\n      );\n      return undefined;\n    }\n  }\n\n  private armFromDisk(filePath: string): boolean {\n    try {\n      const record = parseJsonSchemaValue(\n        readFileSync(filePath, \"utf-8\"),\n        CallbackScheduleFileSchema,\n        (detail) => `Malformed extension schedule ${filePath}: ${detail}`,\n      );\n      this.arm(filePath, record);\n      return this.crons.has(filePath);\n    } catch (err) {\n      // Never delete on parse failure: a code bug must not destroy schedules.\n      log.logWarning(\n        `Skipping invalid extension schedule: ${filePath}`,\n        err instanceof Error ? err.message : String(err),\n      );\n      return false;\n    }\n  }\n\n  /**\n   * Replace the armed cron for one schedule file. Throws on an invalid cron\n   * pattern or timezone BEFORE touching the existing arm, so a failed upsert\n   * leaves the previous schedule running.\n   */\n  private arm(filePath: string, record: CallbackScheduleRecord): void {\n    const fire = () => void this.fire(filePath, record);\n    let cron: Cron | undefined;\n    if (record.type === \"periodic\") {\n      if (!record.schedule || !record.timezone) {\n        throw new Error(\"`schedule` and `timezone` are required for periodic schedules\");\n      }\n      cron = new Cron(record.schedule, { timezone: record.timezone }, fire);\n    } else {\n      if (!record.at) throw new Error(\"`at` is required for one-shot schedules\");\n      const at = new Date(record.at);\n      if (at.getTime() <= Date.now()) {\n        // Fired while we were down (or was written in the past): drop it,\n        // mirroring the event watcher's stale one-shot handling. Only the\n        // boot scan reaches here — upsert rejects past timestamps.\n        log.logInfo(`Extension schedule in the past, deleting: ${filePath}`);\n        rmSync(filePath, { force: true });\n      } else {\n        cron = new Cron(at, fire);\n      }\n    }\n    this.disarm(filePath);\n    if (cron) this.crons.set(filePath, cron);\n  }\n\n  private disarm(filePath: string): void {\n    const cron = this.crons.get(filePath);\n    if (cron) {\n      cron.stop();\n      this.crons.delete(filePath);\n    }\n  }\n\n  private async fire(filePath: string, record: CallbackScheduleRecord): Promise<void> {\n    if (record.type === \"one-shot\") {\n      this.disarm(filePath);\n      rmSync(filePath, { force: true });\n    }\n    try {\n      const consumed = await this.options.dispatch({\n        platform: record.platform,\n        conversationId: record.conversationId,\n        slug: record.slug,\n        scheduleName: record.name,\n        callback: record.callback,\n        ...(record.args !== undefined ? { args: record.args } : {}),\n      });\n      if (!consumed) {\n        log.logWarning(\n          `Extension schedule callback has no registered handler: ${record.slug}.${record.name} → ${record.callback}`,\n          filePath,\n        );\n      }\n    } catch (err) {\n      log.logWarning(\n        `Extension schedule dispatch failed: ${record.slug}.${record.name}`,\n        err instanceof Error ? err.message : String(err),\n      );\n    }\n  }\n}\n"]}

package/dist/harness/auth.d.ts

@@ -1,17 +0,0 @@
-import type { Credential, CredentialInfo, CredentialStore } from "@earendil-works/pi-ai";
-/** Default location of mikan's credential file. */
-export declare function defaultAuthPath(): string;
-export declare class FileCredentialStore implements CredentialStore {
-    private readonly authPath;
-    private chain;
-    constructor(authPath?: string);
-    private load;
-    private save;
-    /** Serialize read-modify-write cycles so concurrent refreshes cannot clobber each other. */
-    private enqueue;
-    read(providerId: string): Promise<Credential | undefined>;
-    list(): Promise<readonly CredentialInfo[]>;
-    modify(providerId: string, fn: (current: Credential | undefined) => Promise<Credential | undefined>): Promise<Credential | undefined>;
-    delete(providerId: string): Promise<void>;
-}
-//# sourceMappingURL=auth.d.ts.map

package/dist/harness/auth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/harness/auth.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAIzF,mDAAmD;AACnD,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAQD,qBAAa,mBAAoB,YAAW,eAAe;IACzD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,KAAK,CAAqB;IAElC,YAAY,QAAQ,GAAE,MAA0B,EAE/C;IAED,OAAO,CAAC,IAAI;IAmBZ,OAAO,CAAC,IAAI;IAKZ,4FAA4F;IAC5F,OAAO,CAAC,OAAO;IASf,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAExD;IAED,IAAI,IAAI,OAAO,CAAC,SAAS,cAAc,EAAE,CAAC,CAOzC;IAED,MAAM,CACJ,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,CAAC,OAAO,EAAE,UAAU,GAAG,SAAS,KAAK,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,GACvE,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CASjC;IAED,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOxC;CACF"}

package/dist/harness/auth.js

@@ -1,92 +0,0 @@
-/**
- * File-backed credential store for the mikan harness.
- *
- * Implements pi-ai's `CredentialStore` over mikan's `auth.json`
- * (`~/.mikan/auth.json` by default). The file maps provider ids to
- * type-tagged credentials — the same shape pi-ai documents for auth.json.
- *
- * Writes are atomic (temp file + rename, mode 0600) and serialized per
- * provider within the process. mikan runs as a single process, so no
- * cross-process file lock is taken.
- */
-import { existsSync, readFileSync } from "node:fs";
-import { mkdirSync } from "node:fs";
-import { homedir } from "node:os";
-import { dirname, join } from "node:path";
-import { atomicWritePrivateFile } from "../utils/file-guards.js";
-import * as log from "../log.js";
-/** Default location of mikan's credential file. */
-export function defaultAuthPath() {
-    return join(homedir(), ".mikan", "auth.json");
-}
-function isCredential(value) {
-    if (!value || typeof value !== "object")
-        return false;
-    const type = value.type;
-    return type === "api_key" || type === "oauth";
-}
-export class FileCredentialStore {
-    constructor(authPath = defaultAuthPath()) {
-        this.chain = Promise.resolve();
-        this.authPath = authPath;
-    }
-    load() {
-        if (!existsSync(this.authPath))
-            return {};
-        try {
-            const parsed = JSON.parse(readFileSync(this.authPath, "utf-8"));
-            if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
-                return {};
-            const data = {};
-            for (const [provider, credential] of Object.entries(parsed)) {
-                if (isCredential(credential))
-                    data[provider] = credential;
-            }
-            return data;
-        }
-        catch (err) {
-            log.logWarning(`Failed to read credentials from ${this.authPath}`, err instanceof Error ? err.message : String(err));
-            return {};
-        }
-    }
-    save(data) {
-        mkdirSync(dirname(this.authPath), { recursive: true });
-        atomicWritePrivateFile(this.authPath, `${JSON.stringify(data, null, 2)}\n`);
-    }
-    /** Serialize read-modify-write cycles so concurrent refreshes cannot clobber each other. */
-    enqueue(task) {
-        const result = this.chain.then(task);
-        this.chain = result.then(() => undefined, () => undefined);
-        return result;
-    }
-    read(providerId) {
-        return this.enqueue(async () => this.load()[providerId]);
-    }
-    list() {
-        return this.enqueue(async () => Object.entries(this.load()).map(([providerId, credential]) => ({
-            providerId,
-            type: credential.type,
-        })));
-    }
-    modify(providerId, fn) {
-        return this.enqueue(async () => {
-            const data = this.load();
-            const next = await fn(data[providerId]);
-            if (next === undefined)
-                return data[providerId];
-            data[providerId] = next;
-            this.save(data);
-            return next;
-        });
-    }
-    delete(providerId) {
-        return this.enqueue(async () => {
-            const data = this.load();
-            if (!(providerId in data))
-                return;
-            delete data[providerId];
-            this.save(data);
-        });
-    }
-}
-//# sourceMappingURL=auth.js.map

package/dist/harness/auth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/harness/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,KAAK,GAAG,MAAM,WAAW,CAAC;AAEjC,mDAAmD;AACnD,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;IAChD,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,OAAO,CAAC;AAChD,CAAC;AAED,MAAM,OAAO,mBAAmB;IAI9B,YAAY,QAAQ,GAAW,eAAe,EAAE;QAFxC,UAAK,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QAGhC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAEO,IAAI;QACV,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;YACzE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,CAAC;YAC9E,MAAM,IAAI,GAA+B,EAAE,CAAC;YAC5C,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5D,IAAI,YAAY,CAAC,UAAU,CAAC;oBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC;YAC5D,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,UAAU,CACZ,mCAAmC,IAAI,CAAC,QAAQ,EAAE,EAClD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;YACF,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,IAAgC;QAC3C,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC;IAED,4FAA4F;IACpF,OAAO,CAAI,IAAsB;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CACtB,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,UAAkB;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAC7B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7D,UAAU;YACV,IAAI,EAAE,UAAU,CAAC,IAAI;SACtB,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;IAED,MAAM,CACJ,UAAkB,EAClB,EAAwE;QAExE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YACxC,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC;YAChD,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,UAAkB;QACvB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC;gBAAE,OAAO;YAClC,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["/**\n * File-backed credential store for the mikan harness.\n *\n * Implements pi-ai's `CredentialStore` over mikan's `auth.json`\n * (`~/.mikan/auth.json` by default). The file maps provider ids to\n * type-tagged credentials — the same shape pi-ai documents for auth.json.\n *\n * Writes are atomic (temp file + rename, mode 0600) and serialized per\n * provider within the process. mikan runs as a single process, so no\n * cross-process file lock is taken.\n */\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { mkdirSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport type { Credential, CredentialInfo, CredentialStore } from \"@earendil-works/pi-ai\";\nimport { atomicWritePrivateFile } from \"../utils/file-guards.js\";\nimport * as log from \"../log.js\";\n\n/** Default location of mikan's credential file. */\nexport function defaultAuthPath(): string {\n  return join(homedir(), \".mikan\", \"auth.json\");\n}\n\nfunction isCredential(value: unknown): value is Credential {\n  if (!value || typeof value !== \"object\") return false;\n  const type = (value as { type?: unknown }).type;\n  return type === \"api_key\" || type === \"oauth\";\n}\n\nexport class FileCredentialStore implements CredentialStore {\n  private readonly authPath: string;\n  private chain = Promise.resolve();\n\n  constructor(authPath: string = defaultAuthPath()) {\n    this.authPath = authPath;\n  }\n\n  private load(): Record<string, Credential> {\n    if (!existsSync(this.authPath)) return {};\n    try {\n      const parsed: unknown = JSON.parse(readFileSync(this.authPath, \"utf-8\"));\n      if (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) return {};\n      const data: Record<string, Credential> = {};\n      for (const [provider, credential] of Object.entries(parsed)) {\n        if (isCredential(credential)) data[provider] = credential;\n      }\n      return data;\n    } catch (err) {\n      log.logWarning(\n        `Failed to read credentials from ${this.authPath}`,\n        err instanceof Error ? err.message : String(err),\n      );\n      return {};\n    }\n  }\n\n  private save(data: Record<string, Credential>): void {\n    mkdirSync(dirname(this.authPath), { recursive: true });\n    atomicWritePrivateFile(this.authPath, `${JSON.stringify(data, null, 2)}\\n`);\n  }\n\n  /** Serialize read-modify-write cycles so concurrent refreshes cannot clobber each other. */\n  private enqueue<T>(task: () => Promise<T>): Promise<T> {\n    const result = this.chain.then(task);\n    this.chain = result.then(\n      () => undefined,\n      () => undefined,\n    );\n    return result;\n  }\n\n  read(providerId: string): Promise<Credential | undefined> {\n    return this.enqueue(async () => this.load()[providerId]);\n  }\n\n  list(): Promise<readonly CredentialInfo[]> {\n    return this.enqueue(async () =>\n      Object.entries(this.load()).map(([providerId, credential]) => ({\n        providerId,\n        type: credential.type,\n      })),\n    );\n  }\n\n  modify(\n    providerId: string,\n    fn: (current: Credential | undefined) => Promise<Credential | undefined>,\n  ): Promise<Credential | undefined> {\n    return this.enqueue(async () => {\n      const data = this.load();\n      const next = await fn(data[providerId]);\n      if (next === undefined) return data[providerId];\n      data[providerId] = next;\n      this.save(data);\n      return next;\n    });\n  }\n\n  delete(providerId: string): Promise<void> {\n    return this.enqueue(async () => {\n      const data = this.load();\n      if (!(providerId in data)) return;\n      delete data[providerId];\n      this.save(data);\n    });\n  }\n}\n"]}

package/dist/harness/extensions/loader.d.ts

@@ -1,40 +0,0 @@
-import type { OfficeAddress } from "../../types.js";
-import type { ExtensionValidation, InstalledExtensionInfo, LoadExtensionsOptions, LoadExtensionsResult } from "./types.js";
-export type { ExtensionValidation, InstalledExtensionInfo, LoadExtensionsOptions, LoadExtensionsResult, } from "./types.js";
-/**
- * Canonical host-only extension code directories for a conversation, in load
- * order: `<stateDir>/global/extensions` (all conversations) then
- * `<stateDir>/conversations/<office key>/extensions` (that conversation
- * only). `global` and `conversations` are the two sibling scopes; see
- * `LAYOUT.md`.
- */
-export declare function defaultExtensionDirs(address: OfficeAddress, stateDir?: string): string[];
-/**
- * List installed extensions without importing or activating them — safe for
- * inventory surfaces (commands, portal). Activation side effects (schedule
- * upserts, tool registration) only happen in {@link loadExtensions}.
- */
-export declare function listInstalledExtensions(dirs: string[]): InstalledExtensionInfo[];
-/**
- * Filesystem-safe identifier for an extension, derived from its root (the
- * install directory, or the file path for a bare-file extension). The slug
- * keys the extension's data dir, secrets vault, and schedule ownership —
- * installing the same extension globally and per-conversation shares one
- * slug and therefore one shared data dir. This is the only slug derivation:
- * a second one keyed off a different input (e.g. the entrypoint, which for
- * package.json-form extensions can live under dist/) would silently split an
- * extension's identity.
- */
-export declare function extensionSlug(rootDir: string): string;
-/** Load and activate all extensions found in the given directories. */
-export declare function loadExtensions(options: LoadExtensionsOptions): Promise<LoadExtensionsResult>;
-/**
- * Validate an extension source path (a directory or a single file) WITHOUT
- * activating it: resolves the entrypoint (package.json `mikan.extensions`,
- * index file, or the file itself), imports it, and checks it exports an
- * `activate` function. Used by `mikan ext install` as a preflight and by
- * `mikan ext validate`. Importing runs top-level module code but not
- * `activate`, so there are no schedule/tool side effects.
- */
-export declare function validateExtension(sourcePath: string): Promise<ExtensionValidation>;
-//# sourceMappingURL=loader.d.ts.map

package/dist/harness/extensions/loader.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../../src/harness/extensions/loader.ts"],"names":[],"mappings":"AAmCA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EAWV,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EAKrB,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AAiBpB;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,aAAa,EACtB,QAAQ,GAAE,MAAkC,GAC3C,MAAM,EAAE,CAKV;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,sBAAsB,EAAE,CAmBhF;AAkJD;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAIrD;AA4WD,uEAAuE;AACvE,wBAAsB,cAAc,CAClC,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,oBAAoB,CAAC,CA6E/B;AA2DD;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAuDxF"}