@geminixiang/mikan 1.0.0-beta.6 → 1.0.0-beta.61

package/README.md

@@ -1,5 +1,5 @@
 <p align="center">
-  <img src="src/content/docs/assets/mikan.png" alt="mikan — multi-platform AI coding agent" width="100%">
+  <img src="src/content/docs/assets/mikan-office-hero.png" alt="mikan office architecture — conversation-scoped workspaces and sandbox execution" width="100%">
 </p>
 
 # @geminixiang/mikan
@@ -7,7 +7,10 @@
 [![npm version](https://img.shields.io/npm/v/@geminixiang/mikan.svg)](https://www.npmjs.com/package/@geminixiang/mikan)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 
-A multi-platform AI coding agent for Slack, Telegram, and Discord.
+A multi-platform AI coding agent for Slack, Telegram, Discord, and GitHub.
+
+> [!WARNING]
+> **Pre-1.0 status** — the overall framework stabilizes at 1.0.0. Until then, releases may change settings and on-disk data formats without migrations: upgrading between pre-1.0 versions can require resetting or manually adjusting existing state and workspace data.
 
 ## Architecture
 
@@ -15,20 +18,22 @@ mikan keeps the chat record, agent session, and execution runtime separate:
 
 ![mikan architecture](src/content/docs/assets/architecture.png)
 
+- **Conversation office** is the unit everything else hangs off: one conversation's working area plus its own sandbox runtime. An office is identified by its platform and raw conversation id, and its directory is named by an office key (`v1-<platform>-<readable-id>-<hash>`), so two platforms can never collide on the same raw id.
 - **Chat / conversation data** is the platform-facing record: `log.jsonl`, attachments, and conversation files.
 - **Session orchestration** turns platform events into agent runs, handles top-level/thread scopes, and persists structured context under `sessions/*.jsonl`.
-- **mikan agent harness** (`src/harness/`, built on pi-agent-core and pi-ai) runs the model loop, session persistence, compaction, and calls mikan tools.
-- **Sandbox runtime** is where tool commands execute: host, Docker container/image, Firecracker, or Cloudflare bridge.
+- **mikan agent harness** (`src/harness/`, built on pi-agent-core and pi-ai) owns run preparation, authorized prompts/tools, response presentation, and native Pi session integration. Pi handles the model/tool loop, persistence, compaction, retries, and cancellation.
+- **Sandbox runtime** is where tool commands execute: host, Docker container/image, or the experimental Cloudflare bridge.
 - **Vault** provides runtime credentials as env vars and mounted secret files.
 
 ## Features
 
-- **Multi-platform** — Slack, Telegram, Discord adapters
+- **Multi-platform** — Slack, Telegram, Discord, and GitHub adapters
 - **Concurrent conversations** — Slack threads, Discord replies/threads, and Telegram reply chains run as independent sessions
-- **Sandbox execution** — host, shared container, per-user managed container, Firecracker (alpha), or Cloudflare bridge (experimental)
+- **Conversation offices** — one office directory and one sandbox runtime per conversation, with platform-derived workspace sharing and explicit door-policy overrides
+- **Sandbox execution** — host, shared container, per-conversation managed container, or Cloudflare bridge (experimental)
 - **Credential vaults** — `/login` stores credentials under `--state-dir` and injects env into sandbox runs
 - **Web session viewer** — read-only web view of the current session via `session` / `/session`
-- **Persistent memory** — workspace-level and channel-level `MEMORY.md`
+- **Persistent memory** — workspace-level and per-office `MEMORY.md`
 - **Skills** — drop CLI tools into `skills/`
 - **Events** — schedule one-shot or recurring tasks via JSON files
 - **Multi-provider** — any provider/model supported by `pi-ai`
@@ -51,57 +56,99 @@ npm install && npm run build
 
 ## Quick Start
 
-All platforms share the same CLI:
+Run mikan under [PM2](https://pm2.keymetrics.io/) so it stays up, restarts after failures, and starts on boot:
 
 ```bash
-mikan [--state-dir=~/.mikan] [--sandbox=<mode>] <working-directory>
+npm i -g @geminixiang/mikan pm2
+
+# One-time setup: create the state directory and settings
+mikan --onboard --state-dir=~/.mikan
+
+# Secrets live in ~/.mikan/mikan.env (0600), outside any repo tree
+curl -o ~/.mikan/mikan.env https://raw.githubusercontent.com/geminixiang/mikan/main/deploy/pm2/mikan.env.example
+chmod 600 ~/.mikan/mikan.env   # then fill in your tokens
+
+# Pull the sandbox image the default deployment runs tools in
+docker pull ghcr.io/geminixiang/mikan-sandbox:latest
+
+# Grab the maintained ecosystem file (supervision only), edit `args`
+curl -O https://raw.githubusercontent.com/geminixiang/mikan/main/deploy/pm2/ecosystem.config.cjs
+
+pm2 start ecosystem.config.cjs
+pm2 save
+pm2 startup   # run the printed command to enable boot autostart
 ```
 
-Set the platform tokens you need; you can run multiple platforms at once:
+Each file has one job: `settings.json` holds behavior (model, sandbox limits, reply modes — the Admin surface), `~/.mikan/mikan.env` holds secrets and platform tokens, and `ecosystem.config.cjs` holds process supervision only. In `ecosystem.config.cjs`, point `args` at your state dir, sandbox mode, and working directory (`mikan --help` documents the flags):
+
+```js
+args: "--state-dir=/srv/mikan/state --sandbox=image:ghcr.io/geminixiang/mikan-sandbox:latest /srv/mikan/workspace",
+```
+
+Set the platform tokens you need in `~/.mikan/mikan.env`; you can run multiple platforms at once. `mikan env` prints the full inventory and what is currently set:
 
 ```bash
-export SLACK_APP_TOKEN=xapp-...
-export SLACK_BOT_TOKEN=xoxb-...
-export TELEGRAM_BOT_TOKEN=123456:ABC-...
-export DISCORD_BOT_TOKEN=MTI...
+SLACK_APP_TOKEN=xapp-...
+SLACK_BOT_TOKEN=xoxb-...
+TELEGRAM_BOT_TOKEN=123456:ABC-...
+DISCORD_BOT_TOKEN=MTI...
+GITHUB_APP_ID=123456
+GITHUB_INSTALLATION_ID=12345678
+GITHUB_APP_PRIVATE_KEY_PATH=/srv/mikan/github-app.pem
 ```
 
+Tail logs with `pm2 logs mikan`; upgrade with `npm i -g @geminixiang/mikan && pm2 reload mikan`. See [the deployment guide](src/content/docs/deployment.mdx) for sandbox images, graceful shutdown, and the health endpoint.
+
+For a one-off foreground run, the same CLI works directly:
+
+```bash
+mikan [--state-dir=~/.mikan] [--sandbox=<mode>] [<working-directory>]
+```
+
+The working directory is optional: it defaults to `<state-dir>/workspace` (so `~/.mikan/workspace` with the default state dir) and is created on first run.
+
 ## Platforms
 
 - **Slack** — create a Socket Mode app using [src/content/docs/slack-bot-minimal-guide.md](src/content/docs/slack-bot-minimal-guide.md). The bot responds when `@mentioned` in channels and to all DMs.
 - **Telegram** — create a bot via [@BotFather](https://t.me/BotFather). The bot responds to private messages, `@mention`, and reply chains in groups.
 - **Discord** — create an application in the [Discord Developer Portal](https://discord.com/developers/applications), enable **Message Content Intent**, and invite it with message/file permissions.
+- **GitHub** — install a GitHub App (polling, no webhooks) and set `GITHUB_APP_ID`, `GITHUB_INSTALLATION_ID`, and a private key. One issue or PR is one conversation. See [src/content/docs/platform-adapters/github.md](src/content/docs/platform-adapters/github.md).
 
-Slack threads, Discord replies/threads, and Telegram reply chains are mapped to independent session scopes. See [src/content/docs/sessions.md](src/content/docs/sessions.md).
+Slack threads, Discord replies/threads, and Telegram reply chains are mapped to independent session scopes. See [src/content/docs/sessions.mdx](src/content/docs/sessions.mdx).
 
 ## Sandbox
 
-| Mode                         | Description                                                            |
-| ---------------------------- | ---------------------------------------------------------------------- |
-| `host` (default)             | Run on host; no vault env injection                                    |
-| `container:<name>`           | Run in an existing shared container; uses vault key `container-<name>` |
-| `image:<image>`              | Auto-provision one Docker container per resolved vault/user            |
-| `firecracker:<vm-id>:<path>` | Firecracker microVM (alpha; not recommended)                           |
-| `cloudflare:<sandbox-id>`    | Cloudflare Worker bridge (experimental; no auto workspace sync)        |
+| Mode                      | Description                                                                   |
+| ------------------------- | ----------------------------------------------------------------------------- |
+| `host` (default)          | Run on host; no vault env injection                                           |
+| `container:<name>`        | Run in an existing shared container; everyone sharing it shares its one vault |
+| `image:<image>`           | Auto-provision one Docker container and one vault per conversation office     |
+| `cloudflare:<sandbox-id>` | Cloudflare Worker bridge (experimental; no auto workspace sync)               |
 
-For routing, mounts, vault behavior, managed container details, and Firecracker/Cloudflare notes, see [src/content/docs/sandbox.md](src/content/docs/sandbox.md).
+Each office's data view is set by its **door policy**. Without an explicit workspace setting, Slack follows the channel kind: public channels use trusted shared support and can update workspace `MEMORY.md`; private channels can read that shared memory but receive it read-only; DMs, external channels, unknown channel kinds, and other platforms stay isolated. The admin portal or `/pi-sandbox door <default|isolated|shared|shared-private|full>` can override that result. Door policy governs data access only; execution isolation is unaffected.
+
+Only `image:*` can enforce isolated projections and read-only shared memory. `host`, `container:*`, and `cloudflare:*` therefore fail closed for isolated or private-channel projections; an admin must either use `image:*` or explicitly select a trusted read-write layout.
+
+For routing, mounts, vault behavior, managed container details, and Cloudflare notes, see [src/content/docs/sandbox.mdx](src/content/docs/sandbox.mdx).
 
 ## Chat commands
 
-| Command                                                    | Purpose                                          |
-| ---------------------------------------------------------- | ------------------------------------------------ |
-| `/login` / `/pi-login`                                     | Store API keys or run built-in OAuth flows       |
-| `session` / `/session`                                     | Open a read-only web view of the current session |
-| `new` / `/new`                                             | Reset the current session                        |
-| `model` / `/model` / `/pi-model provider/model[:thinking]` | Switch the LLM for the current conversation      |
-| `auto-reply` / `/pi-auto-reply on\|off\|status`            | Control group/channel auto-reply                 |
-| `stop` / `/stop`                                           | Stop the current run                             |
+| Command                                          | Purpose                                                          |
+| ------------------------------------------------ | ---------------------------------------------------------------- |
+| `/login` / `/pi-login`                           | Store API keys or run built-in OAuth flows                       |
+| `session` / `/session`                           | Open a read-only web view of the current session                 |
+| `/new` / `/pi-new`                               | Reset the current session                                        |
+| `/model` / `/pi-model provider/model[:thinking]` | Switch the LLM for the current conversation                      |
+| `/sandbox` / `/pi-sandbox [boost\|door …]`       | Show sandbox status, boost limits, or set the office door policy |
+| `/pi-auto-reply <on\|off>`                       | Toggle mention-free replies for the current Slack channel        |
+| `/admin` / `/pi-admin`                           | Open the admin portal                                            |
+| `stop` / `/stop`                                 | Stop the current run (works on every platform)                   |
 
-See [src/content/docs/commands.md](src/content/docs/commands.md) for command details and web session viewer setup.
+`session` is the only command accepted without a leading slash. See [src/content/docs/commands.mdx](src/content/docs/commands.mdx) for the full command reference and web session viewer setup.
 
 ## Configuration
 
-mikan reads global settings from `<state-dir>/settings.json`; per-conversation overrides live at `<working-directory>/<conversationId>/settings.json`.
+mikan reads global settings from `<state-dir>/settings.json`; host-only per-conversation overrides live at `<state-dir>/conversations/<office-key>/settings.json`. Legacy workspace settings are migrated once, then ignored.
 
 ```json
 {
@@ -120,14 +167,20 @@ See [src/content/docs/configuration.md](src/content/docs/configuration.md) for a
 ```text
 <state-dir>/
 ├── settings.json
+├── office-registry.json
+├── conversations/
+│   └── <office-key>/
+│       └── settings.json
 └── vaults/
 
 <working-directory>/
 ├── MEMORY.md
-├── SYSTEM.md
 ├── skills/
 ├── events/
-└── <conversation-id>/
+├── agents/
+└── <office-key>/
+    ├── MEMORY.md
+    ├── SYSTEM.md
     ├── log.jsonl
     ├── attachments/
     ├── scratch/
@@ -135,13 +188,16 @@ See [src/content/docs/configuration.md](src/content/docs/configuration.md) for a
     └── sessions/
 ```
 
+Office directories are named by office key (`v1-<platform>-<readable-id>-<hash>`) and are not reversible to a raw platform id, so `office-registry.json` records each office's `(platform, conversationId)`. `mikan office list` prints the registered offices; deployments created before the office layout are migrated on the next boot, and `mikan office claim <conversationId> <platform>` names the owner when boot cannot infer it.
+
 ## More docs
 
 - [Events](src/content/docs/events.md)
 - [Skills](src/content/docs/skills.md)
-- [Deployment](src/content/docs/deployment.md)
+- [Deployment](src/content/docs/deployment.mdx)
 - [Development](src/content/docs/development.md)
-- [Sandbox](src/content/docs/sandbox.md)
+- [Sandbox](src/content/docs/sandbox.mdx)
+- [Embedding mikan](deploy/examples/embedder/README.md) — build your own agent on the published package interface
 
 ## Slack: Download channel history
 
@@ -168,3 +224,5 @@ PRs welcome — see [CONTRIBUTING.md](CONTRIBUTING.md) for dev setup, commit sty
 ## License
 
 MIT — see [LICENSE](LICENSE).
+
+Slack auto-reply uses the conversation's `auto-reply` / `auto-reply.disabled` marker files. File contents are ignored: only the on/off marker name matters; rules and `llm.autoReply` judge-model settings remain retired.

package/dist/adapter.d.ts

@@ -1,2 +1,12 @@
-export type { MessagingBot, ConversationContext, ConversationEvent, MessagingEventHandler, ChatAdapter, ConversationMessage, ConversationResponder, ChatToolResult, ConversationKind, MessagingInfo, PlatformName, PlatformNotifier, PlatformReactor, RunningSession, } from "./types.js";
+import type { ConversationEvent, ConversationMessage, OfficeAddress, PlatformName } from "./types.js";
+export type { MessagingBot, ConversationContext, ConversationEvent, MessagingEventHandler, HandleNewCommandOptions, ConversationMessage, ConversationResponder, ChatToolResult, ConversationKind, MessagingInfo, OfficeAddress, OfficeKey, PlatformHistoryMessage, PlatformHistoryOptions, PlatformName, PlatformUserInfo, RunningSession, SubagentProgressSnapshot, } from "./types.js";
+interface ConversationIdentityInput {
+    platform: PlatformName;
+    conversationId: string;
+    address?: OfficeAddress;
+}
+/** Normalize platform intake into one authoritative conversation identity. */
+export declare function createConversationEvent<T extends Omit<ConversationEvent, "address" | "conversationId">>(input: T & ConversationIdentityInput): T & ConversationEvent;
+/** Normalize a platform response context into one authoritative identity. */
+export declare function createConversationMessage<T extends Omit<ConversationMessage, "address" | "conversationId">>(input: T & ConversationIdentityInput): T & ConversationMessage;
 //# sourceMappingURL=adapter.d.ts.map

package/dist/adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,EACX,mBAAmB,EACnB,qBAAqB,EACrB,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,cAAc,GACf,MAAM,YAAY,CAAC"}
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACb,YAAY,EACb,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,uBAAuB,EACvB,mBAAmB,EACnB,qBAAqB,EACrB,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,SAAS,EACT,sBAAsB,EACtB,sBAAsB,EACtB,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,wBAAwB,GACzB,MAAM,YAAY,CAAC;AAEpB,UAAU,yBAAyB;IACjC,QAAQ,EAAE,YAAY,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAYD,8EAA8E;AAC9E,wBAAgB,uBAAuB,CACrC,CAAC,SAAS,IAAI,CAAC,iBAAiB,EAAE,SAAS,GAAG,gBAAgB,CAAC,EAC/D,KAAK,EAAE,CAAC,GAAG,yBAAyB,GAAG,CAAC,GAAG,iBAAiB,CAG7D;AAED,6EAA6E;AAC7E,wBAAgB,yBAAyB,CACvC,CAAC,SAAS,IAAI,CAAC,mBAAmB,EAAE,SAAS,GAAG,gBAAgB,CAAC,EACjE,KAAK,EAAE,CAAC,GAAG,yBAAyB,GAAG,CAAC,GAAG,mBAAmB,CAG/D"}

package/dist/adapter.js

@@ -1,2 +1,19 @@
-export {};
+import { createOfficeAddress, sameOffice } from "./office/index.js";
+function resolveConversationAddress(input) {
+    const address = createOfficeAddress(input.platform, input.conversationId);
+    if (input.address && !sameOffice(address, input.address)) {
+        throw new Error(`Conversation address mismatch for ${JSON.stringify(input.conversationId)} on ${input.platform}`);
+    }
+    return address;
+}
+/** Normalize platform intake into one authoritative conversation identity. */
+export function createConversationEvent(input) {
+    const address = resolveConversationAddress(input);
+    return { ...input, address, conversationId: address.conversationId };
+}
+/** Normalize a platform response context into one authoritative identity. */
+export function createConversationMessage(input) {
+    const address = resolveConversationAddress(input);
+    return { ...input, address, conversationId: address.conversationId };
+}
 //# sourceMappingURL=adapter.js.map

package/dist/adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"","sourcesContent":["export type {\n  MessagingBot,\n  ConversationContext,\n  ConversationEvent,\n  MessagingEventHandler,\n  ChatAdapter,\n  ConversationMessage,\n  ConversationResponder,\n  ChatToolResult,\n  ConversationKind,\n  MessagingInfo,\n  PlatformName,\n  PlatformNotifier,\n  PlatformReactor,\n  RunningSession,\n} from \"./types.js\";\n"]}
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAmCpE,SAAS,0BAA0B,CAAC,KAAgC;IAClE,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAC1E,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CACb,qCAAqC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,KAAK,CAAC,QAAQ,EAAE,CACjG,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,uBAAuB,CAErC,KAAoC;IACpC,MAAM,OAAO,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAClD,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;AACvE,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,yBAAyB,CAEvC,KAAoC;IACpC,MAAM,OAAO,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAClD,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;AACvE,CAAC","sourcesContent":["import { createOfficeAddress, sameOffice } from \"./office/index.js\";\nimport type {\n  ConversationEvent,\n  ConversationMessage,\n  OfficeAddress,\n  PlatformName,\n} from \"./types.js\";\n\nexport type {\n  MessagingBot,\n  ConversationContext,\n  ConversationEvent,\n  MessagingEventHandler,\n  HandleNewCommandOptions,\n  ConversationMessage,\n  ConversationResponder,\n  ChatToolResult,\n  ConversationKind,\n  MessagingInfo,\n  OfficeAddress,\n  OfficeKey,\n  PlatformHistoryMessage,\n  PlatformHistoryOptions,\n  PlatformName,\n  PlatformUserInfo,\n  RunningSession,\n  SubagentProgressSnapshot,\n} from \"./types.js\";\n\ninterface ConversationIdentityInput {\n  platform: PlatformName;\n  conversationId: string;\n  address?: OfficeAddress;\n}\n\nfunction resolveConversationAddress(input: ConversationIdentityInput): OfficeAddress {\n  const address = createOfficeAddress(input.platform, input.conversationId);\n  if (input.address && !sameOffice(address, input.address)) {\n    throw new Error(\n      `Conversation address mismatch for ${JSON.stringify(input.conversationId)} on ${input.platform}`,\n    );\n  }\n  return address;\n}\n\n/** Normalize platform intake into one authoritative conversation identity. */\nexport function createConversationEvent<\n  T extends Omit<ConversationEvent, \"address\" | \"conversationId\">,\n>(input: T & ConversationIdentityInput): T & ConversationEvent {\n  const address = resolveConversationAddress(input);\n  return { ...input, address, conversationId: address.conversationId };\n}\n\n/** Normalize a platform response context into one authoritative identity. */\nexport function createConversationMessage<\n  T extends Omit<ConversationMessage, \"address\" | \"conversationId\">,\n>(input: T & ConversationIdentityInput): T & ConversationMessage {\n  const address = resolveConversationAddress(input);\n  return { ...input, address, conversationId: address.conversationId };\n}\n"]}

package/dist/adapters/commands/admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../../src/adapters/commands/admin.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAKjE,qBAAa,mBAAoB,YAAW,cAAc;IAClD,SAAS,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CA8BzD;CACF"}

package/dist/{commands → adapters/commands}/admin.js

@@ -1,15 +1,18 @@
-import { matchCommand } from "./parse.js";
-import { formatCommandSummary, replyPrivatelyWithContext } from "./utils.js";
-const ADMIN_COMMANDS = ["/admin", "/pi-admin"];
+import { slashForms, matchCommand } from "./manifest.js";
+import { portalNotConfiguredLines, replySummary, replySummaryPrivately } from "./utils.js";
+const ADMIN_COMMANDS = slashForms("admin");
 export class AdminCommandHandler {
     async tryHandle(context) {
         if (!matchCommand(context.commandText, ADMIN_COMMANDS, { stripMention: true }))
             return false;
+        if (!context.privateConversation && !context.bot.postPrivate) {
+            await replySummary(context, "Admin", [
+                "For privacy, open a direct conversation with mikan and run `/admin` there.",
+            ]);
+            return true;
+        }
         if (!context.services.portalBaseUrl) {
-            await replyPrivatelyWithContext(context, formatCommandSummary("Admin", [
-                "Admin portal is not configured.",
-                "Set `MIKAN_LINK_URL` or `MIKAN_LINK_PORT` on the server.",
-            ]), { style: "muted" });
+            await replySummaryPrivately(context, "Admin", portalNotConfiguredLines("Admin portal"));
             return true;
         }
         const platformUser = context.bot
@@ -23,7 +26,7 @@ export class AdminCommandHandler {
             ...(platformUserName ? { platformUserName } : {}),
         });
         const url = `${context.services.portalBaseUrl}/admin?token=${token.token}`;
-        await replyPrivatelyWithContext(context, formatCommandSummary("Admin", [url, "Expires: 30 minutes"]), { style: "muted" });
+        await replySummaryPrivately(context, "Admin", [url, "Expires: 30 minutes"]);
         return true;
     }
 }

package/dist/adapters/commands/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../../src/adapters/commands/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAEzD,OAAO,EAAE,wBAAwB,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAE3F,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;AAE3C,MAAM,OAAO,mBAAmB;IAC9B,KAAK,CAAC,SAAS,CAAC,OAAuB;QACrC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QAE7F,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAC7D,MAAM,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE;gBACnC,4EAA4E;aAC7E,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;YACpC,MAAM,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,wBAAwB,CAAC,cAAc,CAAC,CAAC,CAAC;YACxF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG;aAC7B,gBAAgB,EAAE;aAClB,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;QAC5D,MAAM,gBAAgB,GAAG,YAAY,EAAE,QAAQ,IAAI,YAAY,EAAE,WAAW,CAAC;QAE7E,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC;YACpD,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,aAAa,gBAAgB,KAAK,CAAC,KAAK,EAAE,CAAC;QAC3E,MAAM,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;CACF","sourcesContent":["import { slashForms, matchCommand } from \"./manifest.js\";\nimport type { CommandContext, CommandHandler } from \"./types.js\";\nimport { portalNotConfiguredLines, replySummary, replySummaryPrivately } from \"./utils.js\";\n\nconst ADMIN_COMMANDS = slashForms(\"admin\");\n\nexport class AdminCommandHandler implements CommandHandler {\n  async tryHandle(context: CommandContext): Promise<boolean> {\n    if (!matchCommand(context.commandText, ADMIN_COMMANDS, { stripMention: true })) return false;\n\n    if (!context.privateConversation && !context.bot.postPrivate) {\n      await replySummary(context, \"Admin\", [\n        \"For privacy, open a direct conversation with mikan and run `/admin` there.\",\n      ]);\n      return true;\n    }\n\n    if (!context.services.portalBaseUrl) {\n      await replySummaryPrivately(context, \"Admin\", portalNotConfiguredLines(\"Admin portal\"));\n      return true;\n    }\n\n    const platformUser = context.bot\n      .getMessagingInfo()\n      .users.find((user) => user.id === context.platformUserId);\n    const platformUserName = platformUser?.userName || platformUser?.displayName;\n\n    const token = context.services.adminTokenStore.create({\n      platform: context.platform,\n      platformUserId: context.platformUserId,\n      conversationId: context.conversationId,\n      ...(platformUserName ? { platformUserName } : {}),\n    });\n\n    const url = `${context.services.portalBaseUrl}/admin?token=${token.token}`;\n    await replySummaryPrivately(context, \"Admin\", [url, \"Expires: 30 minutes\"]);\n    return true;\n  }\n}\n"]}

package/dist/{commands → adapters/commands}/auto-reply.d.ts

@@ -1,7 +1,4 @@
 import type { CommandContext, CommandHandler } from "./types.js";
-/**
- * @deprecated Auto-reply is kept for compatibility while its future is undecided.
- */
 export declare class AutoReplyCommandHandler implements CommandHandler {
     tryHandle(context: CommandContext): Promise<boolean>;
 }

package/dist/adapters/commands/auto-reply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-reply.d.ts","sourceRoot":"","sources":["../../../src/adapters/commands/auto-reply.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAKjE,qBAAa,uBAAwB,YAAW,cAAc;IACtD,SAAS,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAiCzD;CACF"}

package/dist/adapters/commands/auto-reply.js

@@ -0,0 +1,38 @@
+import { setSlackConversationAutoReply, slackConversationAutoReplyEnabled } from "../../config.js";
+import { slashForms, matchCommand } from "./manifest.js";
+import { replySummary } from "./utils.js";
+const AUTO_REPLY_COMMANDS = slashForms("autoreply");
+export class AutoReplyCommandHandler {
+    async tryHandle(context) {
+        const matched = matchCommand(context.commandText, AUTO_REPLY_COMMANDS);
+        if (!matched)
+            return false;
+        if (context.platform !== "slack") {
+            await replySummary(context, "Auto-reply", [
+                "Auto-reply is currently available on Slack only.",
+            ]);
+            return true;
+        }
+        if (context.privateConversation) {
+            await replySummary(context, "Auto-reply", [
+                "Auto-reply only applies to shared channels. Direct messages already reply automatically.",
+            ]);
+            return true;
+        }
+        const value = matched.args[0]?.toLowerCase();
+        if ((value !== "on" && value !== "off") || matched.args.length !== 1) {
+            await replySummary(context, "Auto-reply", ["Usage: `/pi-auto-reply <on|off>`"]);
+            return true;
+        }
+        const office = context.services.workspace.office(context.address);
+        setSlackConversationAutoReply(office, value === "on");
+        const enabled = slackConversationAutoReplyEnabled(office);
+        await replySummary(context, "Auto-reply", [
+            enabled
+                ? "Enabled. New messages in this channel will trigger mikan without a mention."
+                : "Disabled. New messages in this channel must address mikan explicitly.",
+        ]);
+        return true;
+    }
+}
+//# sourceMappingURL=auto-reply.js.map

package/dist/adapters/commands/auto-reply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-reply.js","sourceRoot":"","sources":["../../../src/adapters/commands/auto-reply.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,iCAAiC,EAAE,MAAM,iBAAiB,CAAC;AACnG,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAEzD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,mBAAmB,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;AAEpD,MAAM,OAAO,uBAAuB;IAClC,KAAK,CAAC,SAAS,CAAC,OAAuB;QACrC,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAE3B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE;gBACxC,kDAAkD;aACnD,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;YAChC,MAAM,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE;gBACxC,0FAA0F;aAC3F,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QAC7C,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrE,MAAM,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,kCAAkC,CAAC,CAAC,CAAC;YAChF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClE,6BAA6B,CAAC,MAAM,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,iCAAiC,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE;YACxC,OAAO;gBACL,CAAC,CAAC,6EAA6E;gBAC/E,CAAC,CAAC,uEAAuE;SAC5E,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;CACF","sourcesContent":["import { setSlackConversationAutoReply, slackConversationAutoReplyEnabled } from \"../../config.js\";\nimport { slashForms, matchCommand } from \"./manifest.js\";\nimport type { CommandContext, CommandHandler } from \"./types.js\";\nimport { replySummary } from \"./utils.js\";\n\nconst AUTO_REPLY_COMMANDS = slashForms(\"autoreply\");\n\nexport class AutoReplyCommandHandler implements CommandHandler {\n  async tryHandle(context: CommandContext): Promise<boolean> {\n    const matched = matchCommand(context.commandText, AUTO_REPLY_COMMANDS);\n    if (!matched) return false;\n\n    if (context.platform !== \"slack\") {\n      await replySummary(context, \"Auto-reply\", [\n        \"Auto-reply is currently available on Slack only.\",\n      ]);\n      return true;\n    }\n\n    if (context.privateConversation) {\n      await replySummary(context, \"Auto-reply\", [\n        \"Auto-reply only applies to shared channels. Direct messages already reply automatically.\",\n      ]);\n      return true;\n    }\n\n    const value = matched.args[0]?.toLowerCase();\n    if ((value !== \"on\" && value !== \"off\") || matched.args.length !== 1) {\n      await replySummary(context, \"Auto-reply\", [\"Usage: `/pi-auto-reply <on|off>`\"]);\n      return true;\n    }\n\n    const office = context.services.workspace.office(context.address);\n    setSlackConversationAutoReply(office, value === \"on\");\n    const enabled = slackConversationAutoReplyEnabled(office);\n    await replySummary(context, \"Auto-reply\", [\n      enabled\n        ? \"Enabled. New messages in this channel will trigger mikan without a mention.\"\n        : \"Disabled. New messages in this channel must address mikan explicitly.\",\n    ]);\n    return true;\n  }\n}\n"]}

package/dist/adapters/commands/login.d.ts

@@ -0,0 +1,6 @@
+import type { CommandContext, CommandHandler, ParsedLoginCommand } from "./types.js";
+export declare function parseLoginCommand(text: string): ParsedLoginCommand | null;
+export declare class LoginCommandHandler implements CommandHandler {
+    tryHandle(context: CommandContext): Promise<boolean>;
+}
+//# sourceMappingURL=login.d.ts.map

package/dist/adapters/commands/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../src/adapters/commands/login.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAQrF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAazE;AAkDD,qBAAa,mBAAoB,YAAW,cAAc;IAClD,SAAS,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAiBzD;CACF"}

package/dist/adapters/commands/login.js

@@ -0,0 +1,166 @@
+import * as log from "../../log.js";
+import { credentialAuthorizationKey, runtimeResourceKey } from "../../sandbox/identity.js";
+import { sharedVaultKey } from "../../vault/index.js";
+import { slashForms, matchCommand } from "./manifest.js";
+import { portalNotConfiguredLines, replySummary } from "./utils.js";
+import { createOfficeAddress } from "../../office/index.js";
+const LOGIN_COMMANDS = slashForms("login");
+const SHARED_OPERATIONS = ["create", "update", "delete"];
+export function parseLoginCommand(text) {
+    const matched = matchCommand(text, LOGIN_COMMANDS);
+    if (!matched)
+        return null;
+    const [subcommand, operation, name, ...extra] = matched.args;
+    if (!subcommand)
+        return { action: "setup" };
+    if (extra.length > 0)
+        return null;
+    const verb = subcommand.toLowerCase();
+    if (verb === "shared")
+        return parseSharedLogin(operation?.toLowerCase(), name);
+    if (verb === "copy" && operation && !name)
+        return { action: "copy_shared", name: operation };
+    // Backward-compatible provider arguments open the generic login page.
+    return operation ? null : { action: "setup" };
+}
+function parseSharedLogin(operation, name) {
+    if (operation === "list")
+        return name ? null : { action: "shared_list" };
+    const matched = SHARED_OPERATIONS.find((candidate) => candidate === operation);
+    if (!matched || !name)
+        return null;
+    return { action: `shared_${matched}`, name };
+}
+function ensureLoginVault(context) {
+    const { services, platformUserId, conversationId, vaultConversationId } = context;
+    // The vault target is a conversation on the same platform; a command may
+    // aim at another conversation's vault via vaultConversationId.
+    return credentialAuthorizationKey(services.sandbox, {
+        userId: platformUserId,
+        address: createOfficeAddress(context.address.platform, vaultConversationId ?? conversationId),
+    });
+}
+async function refreshCopiedVaultRuntime(context) {
+    if (context.services.sandbox.type !== "image")
+        return undefined;
+    const targetAddress = createOfficeAddress(context.address.platform, context.vaultConversationId ?? context.conversationId);
+    const cleared = context.services.runtime?.refreshConversationEnvironment(targetAddress);
+    if (cleared === false) {
+        return "A session is currently running, so the sandbox was not restarted. The copied credentials will be applied after the run finishes and the sandbox is recreated.";
+    }
+    if (!context.services.provisioner) {
+        return "The cached session was refreshed. The sandbox will pick up copied credentials on the next provision.";
+    }
+    // The provisioner names containers by runtime resource key, not by the
+    // credential key the vault copy used — the two identities differ in image
+    // mode (office key vs raw-conversation key). Removing by the wrong key
+    // would silently leave the real container running with stale mounts.
+    const resourceKey = runtimeResourceKey(context.services.sandbox, {
+        userId: context.platformUserId,
+        address: targetAddress,
+    });
+    await context.services.provisioner.remove(resourceKey);
+    return "The sandbox container was removed and will be recreated with the copied env and file mounts on the next message.";
+}
+export class LoginCommandHandler {
+    async tryHandle(context) {
+        const parsed = parseLoginCommand(context.commandText);
+        if (!parsed)
+            return false;
+        if (!context.privateConversation) {
+            await replySummary(context, "Vault", [
+                "為了保護你的憑證，`/login` 只能在與機器人的私訊中使用。",
+                "請先私訊機器人，再重新執行 `/login`。",
+            ]);
+            return true;
+        }
+        if (parsed.action === "shared_list")
+            await listSharedProfiles(context);
+        else if (parsed.action === "shared_delete")
+            await deleteSharedProfile(context, parsed.name);
+        else if (parsed.action === "copy_shared")
+            await copySharedProfile(context, parsed.name);
+        else
+            await startLoginSetup(context, parsed);
+        return true;
+    }
+}
+/** Surface a vault-manager failure to the user without failing the command. */
+async function replyVaultError(context, error) {
+    await replySummary(context, "Vault", [error instanceof Error ? error.message : String(error)]);
+}
+async function listSharedProfiles(context) {
+    const profiles = context.services.vaultManager.listSharedVaults();
+    await replySummary(context, "Vault", profiles.length > 0
+        ? ["Shared login profiles:", ...profiles.map((name) => `- ${name}`)]
+        : ["No shared login profiles found."]);
+}
+async function deleteSharedProfile(context, name) {
+    try {
+        const deleted = context.services.vaultManager.deleteSharedVault(name);
+        await replySummary(context, "Vault", [
+            deleted
+                ? `Deleted shared login profile \`${name}\`.`
+                : `Shared login profile \`${name}\` does not exist.`,
+        ]);
+    }
+    catch (error) {
+        await replyVaultError(context, error);
+    }
+}
+async function copySharedProfile(context, name) {
+    try {
+        const vaultId = ensureLoginVault(context);
+        const result = context.services.vaultManager.copySharedVaultTo(name, vaultId);
+        const refreshNote = await refreshCopiedVaultRuntime(context);
+        await replySummary(context, "Vault", [
+            `Copied shared login profile \`${name}\` into this conversation.`,
+            "Shared values overwrite matching conversation values; conversation-only values are kept.",
+            `Copied: ${result.envKeysCopied} env key(s), ${result.filesCopied} file(s).`,
+            ...(refreshNote ? [refreshNote] : []),
+        ]);
+    }
+    catch (error) {
+        await replyVaultError(context, error);
+    }
+}
+/** Issue a portal link for this conversation's vault, or for a shared profile. */
+async function startLoginSetup(context, parsed) {
+    if (!context.services.portalBaseUrl) {
+        await replySummary(context, "Vault", portalNotConfiguredLines("Login"));
+        return;
+    }
+    let vaultId;
+    try {
+        vaultId = resolveLoginVaultId(context, parsed);
+    }
+    catch (error) {
+        log.logWarning(`[${context.conversationId}] Failed to prepare login vault for ${context.platform}/${context.platformUserId}`, error instanceof Error ? error.message : String(error));
+        await replySummary(context, "Vault", [
+            "Login setup failed on the server.",
+            "請稍後重試，或聯絡管理員檢查 vault 儲存權限。",
+        ]);
+        return;
+    }
+    const token = context.services.linkTokenStore.create(context.platform, context.platformUserId, context.conversationId, vaultId, "");
+    await replySummary(context, "Vault", [
+        `${context.services.portalBaseUrl}/link?token=${token.token}`,
+        `Target: ${loginVaultLabel(context, parsed, vaultId)} · Expires: 15 minutes`,
+    ]);
+}
+function resolveLoginVaultId(context, parsed) {
+    const isSharedSetup = parsed.action === "shared_create" || parsed.action === "shared_update";
+    const vaultId = isSharedSetup ? (sharedVaultKey(parsed.name) ?? "") : ensureLoginVault(context);
+    if (vaultId)
+        return vaultId;
+    throw new Error(isSharedSetup ? `Invalid shared login profile name: ${parsed.name}` : "Invalid vault id");
+}
+function loginVaultLabel(context, parsed, vaultId) {
+    if (parsed.action === "shared_create" || parsed.action === "shared_update") {
+        return `shared login profile (${parsed.name})`;
+    }
+    return context.services.sandbox.type === "container"
+        ? `container vault (${vaultId})`
+        : "your vault";
+}
+//# sourceMappingURL=login.js.map

package/dist/adapters/commands/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../../src/adapters/commands/login.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAEzD,OAAO,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;AAE3C,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAElE,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACnD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAC7D,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC5C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAElC,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,gBAAgB,CAAC,SAAS,EAAE,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC;IAC/E,IAAI,IAAI,KAAK,MAAM,IAAI,SAAS,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7F,sEAAsE;IACtE,OAAO,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,gBAAgB,CACvB,SAA6B,EAC7B,IAAwB;IAExB,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACzE,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IAC/E,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,EAAE,MAAM,EAAE,UAAU,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAuB;IAC/C,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,cAAc,EAAE,mBAAmB,EAAE,GAAG,OAAO,CAAC;IAClF,yEAAyE;IACzE,+DAA+D;IAC/D,OAAO,0BAA0B,CAAC,QAAQ,CAAC,OAAO,EAAE;QAClD,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,mBAAmB,IAAI,cAAc,CAAC;KAC9F,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,OAAuB;IAC9D,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IAEhE,MAAM,aAAa,GAAG,mBAAmB,CACvC,OAAO,CAAC,OAAO,CAAC,QAAQ,EACxB,OAAO,CAAC,mBAAmB,IAAI,OAAO,CAAC,cAAc,CACtD,CAAC;IACF,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,8BAA8B,CAAC,aAAa,CAAC,CAAC;IACxF,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,OAAO,+JAA+J,CAAC;IACzK,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAClC,OAAO,sGAAsG,CAAC;IAChH,CAAC;IAED,uEAAuE;IACvE,0EAA0E;IAC1E,uEAAuE;IACvE,qEAAqE;IACrE,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE;QAC/D,MAAM,EAAE,OAAO,CAAC,cAAc;QAC9B,OAAO,EAAE,aAAa;KACvB,CAAC,CAAC;IACH,MAAM,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACvD,OAAO,kHAAkH,CAAC;AAC5H,CAAC;AAED,MAAM,OAAO,mBAAmB;IAC9B,KAAK,CAAC,SAAS,CAAC,OAAuB;QACrC,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1B,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;YACjC,MAAM,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE;gBACnC,kCAAkC;gBAClC,yBAAyB;aAC1B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa;YAAE,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;aAClE,IAAI,MAAM,CAAC,MAAM,KAAK,eAAe;YAAE,MAAM,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;aACvF,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa;YAAE,MAAM,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;;YACnF,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,+EAA+E;AAC/E,KAAK,UAAU,eAAe,CAAC,OAAuB,EAAE,KAAc;IACpE,MAAM,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACjG,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,OAAuB;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC;IAClE,MAAM,YAAY,CAChB,OAAO,EACP,OAAO,EACP,QAAQ,CAAC,MAAM,GAAG,CAAC;QACjB,CAAC,CAAC,CAAC,wBAAwB,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC,iCAAiC,CAAC,CACxC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,OAAuB,EAAE,IAAY;IACtE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE;YACnC,OAAO;gBACL,CAAC,CAAC,kCAAkC,IAAI,KAAK;gBAC7C,CAAC,CAAC,0BAA0B,IAAI,oBAAoB;SACvD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,OAAuB,EAAE,IAAY;IACpE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9E,MAAM,WAAW,GAAG,MAAM,yBAAyB,CAAC,OAAO,CAAC,CAAC;QAC7D,MAAM,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE;YACnC,iCAAiC,IAAI,4BAA4B;YACjE,0FAA0F;YAC1F,WAAW,MAAM,CAAC,aAAa,gBAAgB,MAAM,CAAC,WAAW,WAAW;YAC5E,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,eAAe,CAAC,OAAuB,EAAE,MAA0B;IAChF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QACpC,MAAM,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC;QACxE,OAAO;IACT,CAAC;IAED,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,UAAU,CACZ,IAAI,OAAO,CAAC,cAAc,uCAAuC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,cAAc,EAAE,EAC7G,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QACF,MAAM,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE;YACnC,mCAAmC;YACnC,4BAA4B;SAC7B,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAClD,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,cAAc,EACtB,OAAO,EACP,EAAE,CACH,CAAC;IACF,MAAM,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE;QACnC,GAAG,OAAO,CAAC,QAAQ,CAAC,aAAa,eAAe,KAAK,CAAC,KAAK,EAAE;QAC7D,WAAW,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,wBAAwB;KAC7E,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAuB,EAAE,MAA0B;IAC9E,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,KAAK,eAAe,IAAI,MAAM,CAAC,MAAM,KAAK,eAAe,CAAC;IAC7F,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAChG,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,IAAI,KAAK,CACb,aAAa,CAAC,CAAC,CAAC,sCAAsC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,kBAAkB,CACzF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,OAAuB,EACvB,MAA0B,EAC1B,OAAe;IAEf,IAAI,MAAM,CAAC,MAAM,KAAK,eAAe,IAAI,MAAM,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;QAC3E,OAAO,yBAAyB,MAAM,CAAC,IAAI,GAAG,CAAC;IACjD,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW;QAClD,CAAC,CAAC,oBAAoB,OAAO,GAAG;QAChC,CAAC,CAAC,YAAY,CAAC;AACnB,CAAC","sourcesContent":["import * as log from \"../../log.js\";\nimport { credentialAuthorizationKey, runtimeResourceKey } from \"../../sandbox/identity.js\";\nimport { sharedVaultKey } from \"../../vault/index.js\";\nimport { slashForms, matchCommand } from \"./manifest.js\";\nimport type { CommandContext, CommandHandler, ParsedLoginCommand } from \"./types.js\";\nimport { portalNotConfiguredLines, replySummary } from \"./utils.js\";\nimport { createOfficeAddress } from \"../../office/index.js\";\n\nconst LOGIN_COMMANDS = slashForms(\"login\");\n\nconst SHARED_OPERATIONS = [\"create\", \"update\", \"delete\"] as const;\n\nexport function parseLoginCommand(text: string): ParsedLoginCommand | null {\n  const matched = matchCommand(text, LOGIN_COMMANDS);\n  if (!matched) return null;\n\n  const [subcommand, operation, name, ...extra] = matched.args;\n  if (!subcommand) return { action: \"setup\" };\n  if (extra.length > 0) return null;\n\n  const verb = subcommand.toLowerCase();\n  if (verb === \"shared\") return parseSharedLogin(operation?.toLowerCase(), name);\n  if (verb === \"copy\" && operation && !name) return { action: \"copy_shared\", name: operation };\n  // Backward-compatible provider arguments open the generic login page.\n  return operation ? null : { action: \"setup\" };\n}\n\nfunction parseSharedLogin(\n  operation: string | undefined,\n  name: string | undefined,\n): ParsedLoginCommand | null {\n  if (operation === \"list\") return name ? null : { action: \"shared_list\" };\n  const matched = SHARED_OPERATIONS.find((candidate) => candidate === operation);\n  if (!matched || !name) return null;\n  return { action: `shared_${matched}`, name };\n}\n\nfunction ensureLoginVault(context: CommandContext): string {\n  const { services, platformUserId, conversationId, vaultConversationId } = context;\n  // The vault target is a conversation on the same platform; a command may\n  // aim at another conversation's vault via vaultConversationId.\n  return credentialAuthorizationKey(services.sandbox, {\n    userId: platformUserId,\n    address: createOfficeAddress(context.address.platform, vaultConversationId ?? conversationId),\n  });\n}\n\nasync function refreshCopiedVaultRuntime(context: CommandContext): Promise<string | undefined> {\n  if (context.services.sandbox.type !== \"image\") return undefined;\n\n  const targetAddress = createOfficeAddress(\n    context.address.platform,\n    context.vaultConversationId ?? context.conversationId,\n  );\n  const cleared = context.services.runtime?.refreshConversationEnvironment(targetAddress);\n  if (cleared === false) {\n    return \"A session is currently running, so the sandbox was not restarted. The copied credentials will be applied after the run finishes and the sandbox is recreated.\";\n  }\n\n  if (!context.services.provisioner) {\n    return \"The cached session was refreshed. The sandbox will pick up copied credentials on the next provision.\";\n  }\n\n  // The provisioner names containers by runtime resource key, not by the\n  // credential key the vault copy used — the two identities differ in image\n  // mode (office key vs raw-conversation key). Removing by the wrong key\n  // would silently leave the real container running with stale mounts.\n  const resourceKey = runtimeResourceKey(context.services.sandbox, {\n    userId: context.platformUserId,\n    address: targetAddress,\n  });\n  await context.services.provisioner.remove(resourceKey);\n  return \"The sandbox container was removed and will be recreated with the copied env and file mounts on the next message.\";\n}\n\nexport class LoginCommandHandler implements CommandHandler {\n  async tryHandle(context: CommandContext): Promise<boolean> {\n    const parsed = parseLoginCommand(context.commandText);\n    if (!parsed) return false;\n\n    if (!context.privateConversation) {\n      await replySummary(context, \"Vault\", [\n        \"為了保護你的憑證，`/login` 只能在與機器人的私訊中使用。\",\n        \"請先私訊機器人，再重新執行 `/login`。\",\n      ]);\n      return true;\n    }\n\n    if (parsed.action === \"shared_list\") await listSharedProfiles(context);\n    else if (parsed.action === \"shared_delete\") await deleteSharedProfile(context, parsed.name);\n    else if (parsed.action === \"copy_shared\") await copySharedProfile(context, parsed.name);\n    else await startLoginSetup(context, parsed);\n    return true;\n  }\n}\n\n/** Surface a vault-manager failure to the user without failing the command. */\nasync function replyVaultError(context: CommandContext, error: unknown): Promise<void> {\n  await replySummary(context, \"Vault\", [error instanceof Error ? error.message : String(error)]);\n}\n\nasync function listSharedProfiles(context: CommandContext): Promise<void> {\n  const profiles = context.services.vaultManager.listSharedVaults();\n  await replySummary(\n    context,\n    \"Vault\",\n    profiles.length > 0\n      ? [\"Shared login profiles:\", ...profiles.map((name) => `- ${name}`)]\n      : [\"No shared login profiles found.\"],\n  );\n}\n\nasync function deleteSharedProfile(context: CommandContext, name: string): Promise<void> {\n  try {\n    const deleted = context.services.vaultManager.deleteSharedVault(name);\n    await replySummary(context, \"Vault\", [\n      deleted\n        ? `Deleted shared login profile \\`${name}\\`.`\n        : `Shared login profile \\`${name}\\` does not exist.`,\n    ]);\n  } catch (error) {\n    await replyVaultError(context, error);\n  }\n}\n\nasync function copySharedProfile(context: CommandContext, name: string): Promise<void> {\n  try {\n    const vaultId = ensureLoginVault(context);\n    const result = context.services.vaultManager.copySharedVaultTo(name, vaultId);\n    const refreshNote = await refreshCopiedVaultRuntime(context);\n    await replySummary(context, \"Vault\", [\n      `Copied shared login profile \\`${name}\\` into this conversation.`,\n      \"Shared values overwrite matching conversation values; conversation-only values are kept.\",\n      `Copied: ${result.envKeysCopied} env key(s), ${result.filesCopied} file(s).`,\n      ...(refreshNote ? [refreshNote] : []),\n    ]);\n  } catch (error) {\n    await replyVaultError(context, error);\n  }\n}\n\n/** Issue a portal link for this conversation's vault, or for a shared profile. */\nasync function startLoginSetup(context: CommandContext, parsed: ParsedLoginCommand): Promise<void> {\n  if (!context.services.portalBaseUrl) {\n    await replySummary(context, \"Vault\", portalNotConfiguredLines(\"Login\"));\n    return;\n  }\n\n  let vaultId: string;\n  try {\n    vaultId = resolveLoginVaultId(context, parsed);\n  } catch (error) {\n    log.logWarning(\n      `[${context.conversationId}] Failed to prepare login vault for ${context.platform}/${context.platformUserId}`,\n      error instanceof Error ? error.message : String(error),\n    );\n    await replySummary(context, \"Vault\", [\n      \"Login setup failed on the server.\",\n      \"請稍後重試，或聯絡管理員檢查 vault 儲存權限。\",\n    ]);\n    return;\n  }\n\n  const token = context.services.linkTokenStore.create(\n    context.platform,\n    context.platformUserId,\n    context.conversationId,\n    vaultId,\n    \"\",\n  );\n  await replySummary(context, \"Vault\", [\n    `${context.services.portalBaseUrl}/link?token=${token.token}`,\n    `Target: ${loginVaultLabel(context, parsed, vaultId)} · Expires: 15 minutes`,\n  ]);\n}\n\nfunction resolveLoginVaultId(context: CommandContext, parsed: ParsedLoginCommand): string {\n  const isSharedSetup = parsed.action === \"shared_create\" || parsed.action === \"shared_update\";\n  const vaultId = isSharedSetup ? (sharedVaultKey(parsed.name) ?? \"\") : ensureLoginVault(context);\n  if (vaultId) return vaultId;\n  throw new Error(\n    isSharedSetup ? `Invalid shared login profile name: ${parsed.name}` : \"Invalid vault id\",\n  );\n}\n\nfunction loginVaultLabel(\n  context: CommandContext,\n  parsed: ParsedLoginCommand,\n  vaultId: string,\n): string {\n  if (parsed.action === \"shared_create\" || parsed.action === \"shared_update\") {\n    return `shared login profile (${parsed.name})`;\n  }\n  return context.services.sandbox.type === \"container\"\n    ? `container vault (${vaultId})`\n    : \"your vault\";\n}\n"]}