@geminixiang/mikan 1.0.0-beta.5 → 1.0.0-beta.50

package/dist/commands/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/commands/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport type { MessagingBot, ConversationContext, PlatformName } from \"../adapter.js\";\nimport type { DockerContainerManager } from \"../provisioner.js\";\nimport type { SandboxConfig } from \"../sandbox/index.js\";\nimport type { VaultManager } from \"../vault/index.js\";\n\nexport interface LinkTokenStoreLike {\n  create(\n    platform: PlatformName,\n    platformUserId: string,\n    conversationId: string,\n    vaultId: string,\n    providerId: string,\n  ): { token: string };\n}\n\nexport interface SessionViewTokenStoreLike {\n  create(\n    platform: PlatformName,\n    platformUserId: string,\n    conversationId: string,\n    sessionKey: string,\n    sessionFile: string,\n    platformUserName?: string,\n  ): { token: string };\n}\n\ninterface AdminTokenStoreLike {\n  create(args: {\n    platform: PlatformName;\n    platformUserId: string;\n    conversationId: string;\n    platformUserName?: string;\n  }): { token: string };\n}\n\ninterface CommandRuntimeBridge {\n  handleNewCommand(sessionKey: string, conversationId: string, bot: MessagingBot): Promise<void>;\n  switchConversationModel(conversationId: string, provider: string, model: string): boolean;\n  refreshConversationEnvironment(conversationId: string): boolean;\n}\n\nexport interface CommandServices {\n  workingDir: string;\n  runtime?: CommandRuntimeBridge;\n  sandbox: SandboxConfig;\n  vaultManager: VaultManager;\n  provisioner?: DockerContainerManager;\n  linkTokenStore: LinkTokenStoreLike;\n  sessionViewTokenStore: SessionViewTokenStoreLike;\n  adminTokenStore: AdminTokenStoreLike;\n  portalBaseUrl?: string;\n}\n\nexport interface CommandContext {\n  bot: MessagingBot;\n  responder: ConversationContext[\"responder\"];\n  platform: PlatformName;\n  platformUserId: string;\n  conversationId: string;\n  vaultConversationId?: string;\n  sessionKey: string;\n  commandText: string;\n  privateConversation: boolean;\n  services: CommandServices;\n}\n\nexport interface CommandHandler {\n  tryHandle(context: CommandContext): Promise<boolean>;\n}\n\n// ── command-specific parsed types ────────────────────────────────────────────\n\nexport interface ParsedModelCommand {\n  provider?: string;\n  model?: string;\n  thinkingLevel?: ThinkingLevel;\n}\n\nexport interface ParsedSandboxCommand {\n  action?: \"boost\" | \"private\" | \"full\";\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/commands/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport type { Api, Model } from \"@earendil-works/pi-ai\";\nimport type {\n  ConversationContext,\n  HandleNewCommandOptions,\n  MessagingBot,\n  OfficeAddress,\n  PlatformName,\n} from \"../adapter.js\";\nimport type { Workspace } from \"../office/index.js\";\nimport type { DockerContainerManager } from \"../provisioner.js\";\nimport type { SandboxConfig } from \"../sandbox/index.js\";\nimport type { SandboxResourceController } from \"../types.js\";\nimport type { VaultManager } from \"../vault/index.js\";\nimport type { SessionViewTokenCreateOptions } from \"../web/session-view/types.js\";\n\ninterface CommandArgSpec {\n  name: string;\n  description: string;\n  required: boolean;\n}\n\n/**\n * Data for the Slack adapter's generic slash route (how the synthesized\n * command event is built). All flags default to false.\n */\nexport interface SlackSlashRoute {\n  /** Append the slash payload's free text to the synthesized command text. */\n  includeText?: boolean;\n  /** Scope the event to the invoking thread (thread-scoped session key). */\n  thread?: boolean;\n  /** Outside DMs, mark the event `private_command` so replies stay between the bot and the user. */\n  privateCommand?: boolean;\n}\n\nexport interface CommandManifestEntry {\n  /** Canonical name without slash, e.g. \"login\"; `/login` and `/pi-login` are derived. */\n  name: string;\n  description: string;\n  /** Extra accepted spellings beyond `name` (e.g. \"autoreply\"); each also gets a `pi-` form. */\n  aliases?: readonly string[];\n  /** Optional single free-text argument for platforms that register typed args. */\n  arg?: CommandArgSpec;\n  /** Accepted without a leading slash. Per CONTEXT.md, only `session`. */\n  bare?: boolean;\n  /**\n   * Routed by conversation intake as a magic word, never by a command\n   * handler. Such an entry exists for platform registration/UI only.\n   */\n  magicWord?: boolean;\n  /** Slack slash-command name, e.g. \"/pi-login\". Absent = not a Slack slash command. */\n  slackCommand?: string;\n  /** Slack routing data; absent for `new`, whose Slack dispatch is bespoke. */\n  slackRoute?: SlackSlashRoute;\n  /** Registered as a Discord application command. */\n  discord?: boolean;\n  /** Listed in Telegram's command menu; `description` overrides the shared one. */\n  telegramMenu?: { description?: string };\n  /**\n   * Registered as a native grammY command handler, bypassing conversation\n   * intake (no trigger/busy policy). Other menu commands reach the runtime\n   * through the catch-all message path.\n   */\n  telegramCommand?: boolean;\n}\n\nexport interface LinkTokenStoreLike {\n  create(\n    platform: PlatformName,\n    platformUserId: string,\n    conversationId: string,\n    vaultId: string,\n    providerId: string,\n  ): { token: string };\n}\n\nexport interface SessionViewTokenStoreLike {\n  create(options: SessionViewTokenCreateOptions): { token: string };\n}\n\nexport interface AdminTokenStoreLike {\n  create(args: {\n    platform: PlatformName;\n    platformUserId: string;\n    conversationId: string;\n    platformUserName?: string;\n  }): { token: string };\n}\n\ninterface CommandRuntimeBridge {\n  handleNewCommand(options: HandleNewCommandOptions): Promise<void>;\n  switchConversationModel(address: OfficeAddress, provider: string, model: string): boolean;\n  refreshConversationEnvironment(address: OfficeAddress): boolean;\n}\n\nexport interface CommandServices {\n  workspace: Workspace;\n  runtime?: CommandRuntimeBridge;\n  sandbox: SandboxConfig;\n  vaultManager: VaultManager;\n  provisioner?: DockerContainerManager;\n  resourceController?: SandboxResourceController;\n  linkTokenStore: LinkTokenStoreLike;\n  sessionViewTokenStore: SessionViewTokenStoreLike;\n  adminTokenStore: AdminTokenStoreLike;\n  portalBaseUrl?: string;\n}\n\nexport interface CommandContext {\n  bot: MessagingBot;\n  responder: ConversationContext[\"responder\"];\n  platform: PlatformName;\n  address: OfficeAddress;\n  platformUserId: string;\n  platformUserName?: string;\n  conversationId: string;\n  vaultConversationId?: string;\n  sessionKey: string;\n  commandText: string;\n  privateConversation: boolean;\n  services: CommandServices;\n}\n\nexport interface CommandHandler {\n  tryHandle(context: CommandContext): Promise<boolean>;\n}\n\n/** Minimal model lookup contract used by the model command. */\nexport interface ModelRegistry {\n  find(provider: string, modelId: string): Model<Api> | undefined;\n}\n\n// ── command-specific parsed types ────────────────────────────────────────────\n\nexport interface ParsedModelCommand {\n  provider?: string;\n  /** Model id without a thinking-level suffix, when one was supplied. */\n  model?: string;\n  /** Complete model id candidate, including a possible colon suffix. */\n  modelCandidate?: string;\n  /** Suffix kept for handler-side validation after exact model lookup. */\n  thinkingLevelCandidate?: string;\n  thinkingLevel?: ThinkingLevel;\n  error?: \"invalid_spec\";\n}\n\nexport interface ParsedSandboxCommand {\n  action?: \"boost\" | \"door\";\n  /** Raw door-policy argument; the handler validates it so typos get a usage reply. */\n  doorPolicy?: string;\n}\n\nexport type ParsedLoginCommand =\n  | { action: \"setup\" }\n  | { action: \"shared_create\" | \"shared_update\" | \"shared_delete\"; name: string }\n  | { action: \"shared_list\" }\n  | { action: \"copy_shared\"; name: string };\n"]}

package/dist/config.d.ts

@@ -2,12 +2,17 @@ export declare class MissingGlobalSettingsError extends Error {
     readonly settingsPath: string;
     constructor(settingsPath: string);
 }
-export type { AgentConfig, AutoReplyConfig, JudgeModelConfig } from "./types.js";
-import type { AgentConfig, AutoReplyConfig, JudgeModelConfig } from "./types.js";
+export type { AgentConfig, AutoReplyConfig, JudgeModelConfig, SandboxSettings, WorkspacePolicyChoice, } from "./types.js";
+import type { AgentConfig, AutoReplyConfig, JudgeModelConfig, WorkspacePolicyChoice } from "./types.js";
+import type { McpServerConfig } from "./mcp/types.js";
+import type { OnboardLlmChoice } from "./types.js";
+import type { Office } from "./office/index.js";
 export declare function loadGlobalSettings(): AgentConfig;
 /**
  * Host-authoritative location of a conversation's settings file:
- * `<stateDir>/conversations/<conversationId>/settings.json`.
+ * `<office state dir>/settings.json`. The Office value names both the
+ * state-dir key and the legacy pre-host-migration location (its workspace
+ * dir) — the key is never inferred from a directory basename.
  *
  * Conversation settings used to live at `<conversationDir>/settings.json`,
  * but conversation dirs are bind-mounted read-write into sandbox containers
@@ -22,8 +27,8 @@ export declare function loadGlobalSettings(): AgentConfig;
  * migration marker — a legacy file (re)appearing later, e.g. planted from
  * inside the sandbox, is never read again.
  */
-export declare function conversationSettingsPath(conversationDir: string): string;
-export declare function resolveConversationSettings(conversationDir: string): AgentConfig;
+export declare function conversationSettingsPath(office: Office): string;
+export declare function resolveConversationSettings(office: Office): AgentConfig;
 /**
  * Resolve the model used to judge auto-reply rules. Falls back to the main
  * llm.{provider,model} when llm.autoReply is not set, so a missing override
@@ -31,7 +36,7 @@ export declare function resolveConversationSettings(conversationDir: string): Ag
  *
  * @deprecated Auto-reply is kept for compatibility while its future is undecided.
  */
-export declare function loadAutoReplyJudgeModel(conversationDir?: string): JudgeModelConfig;
+export declare function loadAutoReplyJudgeModel(office?: Office): JudgeModelConfig;
 /**
  * Load the mom-compatible auto-reply marker file state for a conversation.
  *
@@ -48,8 +53,6 @@ export declare function loadConversationAutoReplyConfig(conversationDir: string)
  * @deprecated Auto-reply is kept for compatibility while its future is undecided.
  */
 export declare function saveConversationAutoReplyConfig(conversationDir: string, config: AutoReplyConfig): void;
-export declare function resolveWorkspaceDirFromArgv(args?: string[]): string | undefined;
-export declare function resolveStateDirFromArgv(args?: string[]): string;
 /**
  * True when `child` is `parent` or a path inside it. Purely lexical (no
  * symlink resolution) — used for configuration sanity checks, not as the
@@ -57,16 +60,15 @@ export declare function resolveStateDirFromArgv(args?: string[]): string;
  */
 export declare function isPathInside(child: string, parent: string): boolean;
 /**
- * The state dir (extensions code, extension data, vaults, auth.json) must
- * never live inside the working dir: conversation opt-in "full" mode mounts
- * the entire working dir read-write into sandbox containers, and a mounted
- * state dir would let sandboxed code plant extension modules that the host
- * process later imports — a sandbox escape. Fatal under sandboxed modes;
- * host mode has no mounts, so only warn about the bad hygiene.
+ * The state dir (settings, package checkouts, vaults) must never live inside
+ * the working dir: conversation opt-in "full" mode mounts the entire working
+ * dir read-write into sandbox containers, which would expose host-authoritative
+ * state and credentials. Fatal under sandboxed modes; host mode has no mounts,
+ * so only warn about the bad hygiene.
  */
 export declare function assertStateDirOutsideWorkspace(stateDir: string, workingDir: string, sandboxType: string): void;
 export declare function resolveSentryDsn(): string | undefined;
-export declare function createGlobalSettingsFile(stateDir: string): string;
+export declare function createGlobalSettingsFile(stateDir: string, llm?: OnboardLlmChoice): string;
 /**
  * Externally-visible base URL of the link/OAuth server, e.g.
  * `https://mikan.example.com` (no trailing slash). Read from `LINK_URL` or
@@ -74,5 +76,24 @@ export declare function createGlobalSettingsFile(stateDir: string): string;
  */
 export declare function resolveLinkBaseUrl(): string | undefined;
 export declare function updateGlobalSettings(patch: Partial<AgentConfig>): void;
-export declare function updateConversationSettings(conversationDir: string, patch: Partial<AgentConfig>): void;
+export declare function updateConversationSettings(office: Office, patch: Partial<AgentConfig>): void;
+/**
+ * The two scope-level MCP server maps, unmerged: the portal edits each scope's
+ * own file, so it needs the raw per-scope values, not the effective merge
+ * (`resolveConversationSettings` owns that).
+ */
+export declare function loadScopeMcpServers(office: Office): {
+    global: Record<string, McpServerConfig>;
+    conversation: Record<string, McpServerConfig>;
+};
+/**
+ * The conversation's own door-policy override (legacy `image.workspaceMount`
+ * included), or null when the office follows the global default. Missing
+ * `visibility` on a shared-support choice defaults to "public" downstream
+ * (see resolveEffectiveWorkspace), preserving today's read-write behavior for
+ * every office that predates this setting.
+ */
+export declare function loadConversationWorkspaceOverride(office: Office): WorkspacePolicyChoice | null;
+export declare function setConversationWorkspacePolicy(office: Office, choice: WorkspacePolicyChoice | null): void;
+export declare function setGlobalWorkspacePolicy(choice: WorkspacePolicyChoice | null): void;
 //# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAUA,qBAAa,0BAA2B,SAAQ,KAAK;aACvB,YAAY,EAAE,MAAM;IAAhD,YAA4B,YAAY,EAAE,MAAM,EAG/C;CACF;AAED,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACjF,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AA2LjF,wBAAgB,kBAAkB,IAAI,WAAW,CAEhD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CA2BxE;AAED,wBAAgB,2BAA2B,CAAC,eAAe,EAAE,MAAM,GAAG,WAAW,CAMhF;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAUlF;AAUD;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAAC,eAAe,EAAE,MAAM,GAAG,eAAe,CAYxF;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,eAAe,GACtB,IAAI,CAaN;AAED,wBAAgB,2BAA2B,CAAC,IAAI,WAAwB,GAAG,MAAM,GAAG,SAAS,CA2B5F;AAED,wBAAgB,uBAAuB,CAAC,IAAI,WAAwB,GAAG,MAAM,CAY5E;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAInE;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,IAAI,CAWN;AAED,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAOrD;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQjE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAIvD;AA4FD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAEtE;AAED,wBAAgB,0BAA0B,CACxC,eAAe,EAAE,MAAM,EACvB,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,GAC1B,IAAI,CAEN"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAUA,qBAAa,0BAA2B,SAAQ,KAAK;aACvB,YAAY,EAAE,MAAM;IAAhD,YAA4B,YAAY,EAAE,MAAM,EAG/C;CACF;AAED,YAAY,EACV,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,qBAAqB,GACtB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EACf,gBAAgB,EAEhB,qBAAqB,EACtB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAuQhD,wBAAgB,kBAAkB,IAAI,WAAW,CAEhD;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CA6B/D;AAcD,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAyBvE;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAQzE;AAUD;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAAC,eAAe,EAAE,MAAM,GAAG,eAAe,CAYxF;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,eAAe,GACtB,IAAI,CAaN;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAInE;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,IAAI,CAWN;AAOD,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAGrD;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAqBzF;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAIvD;AAoFD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAEtE;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAE5F;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG;IACnD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACxC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;CAC/C,CAKA;AAED;;;;;;GAMG;AACH,wBAAgB,iCAAiC,CAAC,MAAM,EAAE,MAAM,GAAG,qBAAqB,GAAG,IAAI,CAiB9F;AAED,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,qBAAqB,GAAG,IAAI,GACnC,IAAI,CAEN;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,qBAAqB,GAAG,IAAI,GAAG,IAAI,CAEnF"}