@geminixiang/mikan 1.0.0-beta.62 → 1.0.0-beta.63

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAatC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC","sourcesContent":["import type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport { execFile } from \"node:child_process\";\nimport { promisify } from \"node:util\";\nimport type { SubagentRunStatus } from \"./harness/types.js\";\nimport type { SessionViewTokenStoreLike } from \"./adapters/commands/types.js\";\nimport type { MikanModels } from \"./harness/models.js\";\nimport type { McpServerConfig } from \"./harness/types.js\";\nimport type { EventScheduleSink } from \"./events/index.js\";\nimport type { Office } from \"./office/types.js\";\nimport type { DockerContainerManager } from \"./sandbox/provisioner.js\";\nimport type { SandboxConfig } from \"./sandbox/types.js\";\nimport type { ResolvedSessionScope } from \"./sessions/types.js\";\nimport type { PlatformToolPackFactory } from \"./harness/tools/types.js\";\nimport type { VaultManager } from \"./vault/types.js\";\n\nconst execFileAsync = promisify(execFile);\ntype ExecFileAsync = typeof execFileAsync;\n\n// ── adapter ───────────────────────────────────────────────────────────────────\n\nexport type ConversationKind = \"direct\" | \"shared\";\n\nexport type PlatformName = \"slack\" | \"discord\" | \"telegram\" | \"github\";\n\n/** Canonical platform-plus-raw identifier for one conversation office. */\nexport interface OfficeAddress {\n  readonly platform: PlatformName;\n  readonly conversationId: string;\n}\n\n/** Stable, filesystem-safe identity derived from an OfficeAddress. */\nexport type OfficeKey = string & { readonly __brand: \"OfficeKey\" };\n\nexport type OfficeMigrationStatus = \"needs-owner\" | \"prepared\" | \"moving\" | \"committed\" | \"failed\";\n\nexport interface OfficeMigrationRecord {\n  readonly rawConversationId: string;\n  readonly sourceDir: string;\n  readonly workspaceRoot: string;\n  readonly ownerPlatform?: PlatformName;\n  readonly targetDir?: string;\n  readonly status: OfficeMigrationStatus;\n  readonly error?: string;\n  readonly updatedAt: string;\n}\n\n/**\n * Directory entry for one conversation office. The workspace dir name stops\n * carrying the raw platform id once the ADR 0005 layout migration lands, so\n * the registry is the durable raw-id ↔ office mapping used for enumeration.\n */\nexport interface OfficeRecord {\n  readonly platform: PlatformName;\n  readonly conversationId: string;\n  readonly recordedAt: string;\n}\n\nexport interface OfficeRegistryState {\n  readonly version: 1;\n  readonly enabledPlatforms: readonly PlatformName[];\n  readonly offices: readonly OfficeRecord[];\n  readonly migrations: readonly OfficeMigrationRecord[];\n}\n\nexport interface OfficeMigrationPreparation {\n  readonly rawConversationId: string;\n  readonly sourceDir: string;\n  readonly workspaceRoot: string;\n  readonly ownerPlatform?: PlatformName;\n}\n\n/**\n * Who can drive conversations on a platform — gates ambient credential policy.\n *\n * - `membership`: only invited workspace/server members (Slack/Discord/Telegram).\n *   Safe to copy `sandbox.defaultSharedVault` into new conversation vaults.\n * - `open-trigger`: broader trigger surface (e.g. GitHub repo writers on public\n *   issues/PRs). Ambient shared vault must not apply; use host-side platform\n *   identity or an explicitly provisioned vault.\n */\nexport type PlatformTrustModel = \"membership\" | \"open-trigger\";\n\nexport interface ConversationMessage {\n  id: string;\n  /** Canonical identity of the conversation office. */\n  address: OfficeAddress;\n  /** @deprecated Use address.conversationId except at platform I/O seams. */\n  conversationId?: string;\n  sessionKey: string;\n  conversationKind: ConversationKind;\n  userId: string;\n  userName?: string;\n  text: string;\n  attachments?: { name: string; localPath: string }[];\n  threadTs?: string;\n}\n\nexport interface ChatToolResult {\n  toolName: string;\n  label?: string;\n  args?: Record<string, unknown>;\n  result: string;\n  isError: boolean;\n  durationMs: number;\n}\n\n/**\n * Derived from the run status rather than restated, so a new terminal status\n * in the harness reaches the dashboard instead of silently rendering as a\n * status the marker tables never learned about.\n */\nexport type SubagentProgressStatus = SubagentRunStatus | \"pending\" | \"running\" | \"skipped\";\n\nexport interface SubagentProgressNode {\n  id: string;\n  label: string;\n  status: SubagentProgressStatus;\n  /** Profile the node ran under; the first thing to check when a run is ungrounded. */\n  profile?: string;\n  turns?: number;\n  toolCalls?: number;\n  toolCallCounts?: Record<string, number>;\n  tokens?: number;\n  costUsd?: number;\n  durationMs?: number;\n  /**\n   * What the node is doing right now, for running nodes only.\n   *\n   * Without it a node reports nothing between \"started\" and \"finished\", so a\n   * step that legitimately takes minutes is indistinguishable from a hang —\n   * and when it does finish, there is no record of how it got there.\n   */\n  activity?: string;\n  reason?: string;\n  cleanupPending?: boolean;\n}\n\nexport interface SubagentProgressSnapshot {\n  mode: \"single\" | \"parallel\" | \"dag\";\n  nodes: SubagentProgressNode[];\n}\n\nexport interface TaskStatus {\n  sessionKey: string;\n  threadTs: string;\n  acknowledgement: string;\n  status:\n    | \"running\"\n    | \"stopping\"\n    | \"completed\"\n    | \"aborted\"\n    | \"failed\"\n    | \"declined\"\n    | \"queued\"\n    | \"unknown\";\n  currentTool?: string;\n  observedAt: string;\n  endedAt?: string;\n}\n\nexport interface ConversationResponder {\n  /** Admit independent work; returns its platform session reference, never waits for completion. */\n  startTask?(message: string, task: string): Promise<string>;\n  /** Post a fresh delivery notification after the final task response. */\n  notifyCompletion?(): Promise<void>;\n  /** Read-only task observations, scoped to the current conversation. */\n  getTaskStatus?(sessionKey?: string): Promise<TaskStatus[]>;\n  respond(text: string): Promise<void>;\n  appendResponseDelta?(delta: string): Promise<void>;\n  finishResponse?(finalText?: string): Promise<void>;\n  replaceResponse(text: string, options?: { createOverflowLink?: () => string }): Promise<void>;\n  /**\n   * Override only to convert the subagent dashboard for a pipeline that is\n   * not response-source Markdown (Telegram HTML). Absent, the harness composes\n   * the Markdown dashboard — optionally followed by the final answer — through\n   * `replaceResponse`.\n   */\n  replaceSubagentProgress?(progress: SubagentProgressSnapshot, finalText?: string): Promise<void>;\n  respondDiagnostic(text: string, options?: { style?: \"muted\" | \"error\" }): Promise<void>;\n  respondToolResult(result: ChatToolResult): Promise<void>;\n  setTyping(isTyping: boolean): Promise<void>;\n  setWorking(working: boolean): Promise<void>;\n  uploadFile(filePath: string, title?: string): Promise<void>;\n  /**\n   * React to the message that triggered this run with an emoji short name\n   * (no colons). Optional: platforms/contexts without reaction support omit\n   * it, and callers must handle its absence.\n   */\n  react?(emoji: string): Promise<void>;\n  deleteResponse(): Promise<void>;\n}\n\nexport interface MessagingInfo {\n  name: string;\n  /** Stable platform workspace/team identity when the adapter has one. */\n  workspaceId?: string;\n  formattingGuide: string;\n  channels: { id: string; name: string }[];\n  users: { id: string; userName: string; displayName: string }[];\n  /**\n   * Trust boundary for ambient credentials and host-side MCP capabilities.\n   * Built-in product paths normalize omission to `membership`; open-trigger\n   * platforms set this explicitly so policy does not key off platform names.\n   */\n  trustModel?: PlatformTrustModel;\n  diagnostics?: {\n    showUsageSummary?: boolean;\n  };\n}\n\n/**\n * A platform-agnostic event (message/mention) that triggers the agent.\n */\nexport interface ConversationEvent {\n  type: string;\n  /** Canonical identity created by the platform adapter at intake. */\n  address: OfficeAddress;\n  /** @deprecated Raw platform identifier; valid only at adapter I/O seams. */\n  conversationId: string;\n  /** Optional alternate conversation identity used for vault routing. */\n  vaultConversationId?: string;\n  /** Cross-platform conversation shape: direct message vs shared space */\n  conversationKind: ConversationKind;\n  /** Message timestamp or ID as string */\n  ts: string;\n  /** Parent message ID for threaded replies (optional) */\n  thread_ts?: string;\n  /** User ID */\n  user: string;\n  /** Message text (already stripped of bot mentions) */\n  text: string;\n  /** Downloaded attachments */\n  attachments?: { name: string; localPath: string }[];\n  /** Platform-computed session key; overrides default conversationId:thread_ts computation */\n  sessionKey?: string;\n}\n\n/**\n * Minimum interface that every platform bot must implement,\n * used by the central handler in main.ts and by EventsWatcher.\n */\nexport interface MessagingBot {\n  start(): Promise<void>;\n  /** Stop accepting new platform events and wait for intake already in flight. */\n  stop(): Promise<void>;\n  postMessage(channel: string, text: string): Promise<string>;\n  updateMessage(channel: string, ts: string, text: string): Promise<void>;\n  /**\n   * Add an emoji reaction to a message. `emoji` is a platform-agnostic short\n   * name without colons (e.g. \"eyes\", \"white_check_mark\"). Optional so\n   * adapters adopt it incrementally; callers must handle its absence.\n   */\n  addReaction?(channel: string, messageTs: string, emoji: string): Promise<void>;\n  /**\n   * Upload a host-side file into a conversation. Optional so adapters adopt\n   * it incrementally; callers must handle its absence. Existing adapter\n   * implementations (Slack/Discord/Telegram) already match this shape.\n   */\n  uploadFile?(channel: string, filePath: string, title?: string): Promise<void>;\n  /**\n   * Post into a platform thread. Optional so adapters adopt it incrementally;\n   * callers must handle its absence.\n   */\n  postInThread?(channel: string, threadTs: string, text: string): Promise<string>;\n  /**\n   * Open (or resolve) the direct-message conversation with a user, returning\n   * its conversation id — usable with `postMessage`. Optional capability.\n   */\n  openDirectConversation?(userId: string): Promise<string>;\n  /**\n   * Fetch recent messages from a conversation, oldest first. Optional\n   * capability; adapters may cap `limit` below what the caller asks for.\n   */\n  fetchHistory?(\n    channel: string,\n    options?: PlatformHistoryOptions,\n  ): Promise<PlatformHistoryMessage[]>;\n  /** List the platform workspace's active users. Optional capability. */\n  listUsers?(): Promise<PlatformUserInfo[]>;\n  enqueueEvent(event: ConversationEvent): boolean;\n  getMessagingInfo(): MessagingInfo;\n  postPrivate?(conversationId: string, userId: string, text: string): Promise<void>;\n  postPrivateDiagnostic?(\n    conversationId: string,\n    userId: string,\n    text: string,\n    options?: { style?: \"muted\" | \"error\" },\n  ): Promise<void>;\n}\n\n/** Filters for a platform conversation-history fetch. */\nexport interface PlatformHistoryOptions {\n  /** Only messages strictly newer than this platform message id/timestamp. */\n  oldest?: string;\n  /** Maximum number of messages to return (adapters may cap this lower). */\n  limit?: number;\n  /**\n   * Read the replies inside this thread instead of the conversation's\n   * top-level messages. The thread parent itself is not returned — the result\n   * is the replies to it. Adapters without threads ignore this.\n   */\n  threadTs?: string;\n}\n\n/** One platform message returned by a history fetch. */\nexport interface PlatformHistoryMessage {\n  ts: string;\n  threadTs?: string;\n  userId?: string;\n  userName?: string;\n  text: string;\n  isBot: boolean;\n}\n\n/** One platform user returned by a workspace user listing. */\nexport interface PlatformUserInfo {\n  id: string;\n  userName: string;\n  displayName: string;\n  isBot: boolean;\n}\n\n/** Normalized platform data and reply hook for one event. */\nexport interface ConversationContext {\n  /** Canonical identity for the office handling this turn. */\n  address: OfficeAddress;\n  message: ConversationMessage;\n  responder: ConversationResponder;\n  platform: MessagingInfo;\n}\n\nexport interface RunningSession {\n  /** The office this run belongs to; two platforms may share a raw id. */\n  address: OfficeAddress;\n  sessionKey: string;\n  startedAt: number;\n  lastActivityAt?: number;\n  currentTool?: string;\n  stopping?: boolean;\n}\n\nexport interface HandleNewCommandOptions {\n  sessionKey: string;\n  conversationId: string;\n  bot: MessagingBot;\n  message: ConversationMessage;\n}\n\n/**\n * Runtime state is addressed by an office plus that office's platform session\n * reference. The session key alone is a platform value and is not unique\n * across platforms, so every session-scoped call carries its `OfficeAddress`.\n */\nexport interface MessagingEventHandler {\n  isRunning(address: OfficeAddress, sessionKey: string): boolean;\n  getRunningSessions(): RunningSession[];\n  handleEvent(\n    event: ConversationEvent,\n    bot: MessagingBot,\n    context: ConversationContext,\n  ): Promise<void>;\n  handleStop(\n    address: OfficeAddress,\n    sessionKey: string,\n    bot: MessagingBot,\n    replyThreadTs?: string,\n  ): Promise<void>;\n  /** Returns false when idle; accepted controls bypass the normal run queue. */\n  steer?(message: ConversationMessage): Promise<boolean>;\n  forceStop(address: OfficeAddress, sessionKey: string): void;\n  handleNewCommand(options: HandleNewCommandOptions): Promise<void>;\n}\n\n// ── agent ─────────────────────────────────────────────────────────────────────\n\nexport interface PiAgentWrapper {\n  steer?(message: ConversationMessage): Promise<boolean>;\n  syncChatHistory(currentMessageId?: string): Promise<void>;\n  run(\n    message: ConversationMessage,\n    responder: ConversationResponder,\n    platform: MessagingInfo,\n  ): Promise<{ stopReason: string; errorMessage?: string }>;\n  abort(): void;\n  getCurrentStep(): { toolName?: string; label?: string } | undefined;\n  dispose(): Promise<void>;\n}\n\n// ── config ────────────────────────────────────────────────────────────────────\n\nexport type WorkspaceDoorPolicy = \"isolated\" | \"trusted\";\nexport type WorkspaceLayout = \"conversation\" | \"shared-support\" | \"full\";\n/** An explicit office door-policy selection. */\nexport type WorkspacePolicyChoice =\n  | { doorPolicy: \"isolated\" }\n  | { doorPolicy: \"trusted\"; layout: \"full\" }\n  | { doorPolicy: \"trusted\"; layout: \"shared-support\"; visibility?: WorkspaceVisibility };\n/**\n * Read/write posture for the workspace-global MEMORY.md a `shared-support`\n * office mounts, modeled on Claude Tag's public/private channel memory:\n * `public` offices read and write it (today's default, unchanged behavior);\n * `private` offices read it but cannot write it, so information can flow in\n * from the shared pool but never leak out through a single trusted-but-\n * private office. Meaningless for `full` layout, which mounts the whole\n * workspace read-write as one bind and has no separate memory file to gate.\n */\nexport type WorkspaceVisibility = \"public\" | \"private\";\n\ninterface WorkspaceSettings {\n  doorPolicy?: WorkspaceDoorPolicy;\n  layout?: WorkspaceLayout;\n  visibility?: WorkspaceVisibility;\n}\n\nexport interface SandboxSettings {\n  cpus?: string;\n  memory?: string;\n  boost?: { cpus?: string; memory?: string };\n  /** Legacy image-specific workspace setting; new installations use workspace. */\n  image?: { workspaceMount?: \"private\" | \"full\" };\n  /** Backend-neutral office data policy and layout. */\n  workspace?: WorkspaceSettings;\n  defaultSharedVault?: string;\n}\n\nexport interface AgentConfig {\n  provider: string;\n  model: string;\n  thinkingLevel: ThinkingLevel;\n  sentryDsn?: string;\n  sandbox?: SandboxSettings;\n  slack?: {\n    replyMode?: \"top-level\" | \"thread\";\n  };\n  /**\n   * MCP servers available to this scope, keyed by server name. Global and\n   * conversation entries merge per key (conversation wins); an entry with\n   * `disabled: true` turns off the inherited server. `open-connector` is\n   * filled in from the deployment default when undeclared. See `src/harness`.\n   */\n  mcpServers?: Record<string, McpServerConfig>;\n}\n\n// ── context ───────────────────────────────────────────────────────────────────\n\n/**\n * Platform conversation history entry from log.jsonl.\n */\nexport interface ConversationLogMessage {\n  date?: string;\n  ts?: string;\n  threadTs?: string;\n  user?: string;\n  userName?: string;\n  text?: string;\n  isMessagingBot?: boolean;\n}\n\n// ── execution-resolver ────────────────────────────────────────────────────────\n\nexport interface ActorContext {\n  /** Canonical office identity used by vault and execution policy. */\n  address: OfficeAddress;\n  userId: string;\n  /** From MessagingInfo.trustModel; vault policy uses this, not platform name. */\n  trustModel?: PlatformTrustModel;\n}\n\nexport type ImageWorkspaceMountMode = \"private\" | \"full\";\n\n// ── log ───────────────────────────────────────────────────────────────────────\n\nexport interface LogContext {\n  conversationId: string;\n  userName?: string;\n  conversationName?: string;\n  sessionId?: string;\n}\n\n// ── portal shell (src/adapters/web/portal-shell.ts) ────────────────────────────────────\n\ntype PortalView = \"admin\" | \"session\" | \"vault\";\n\nexport interface PortalShellOptions {\n  activeView: PortalView;\n  pageTitle: string;\n  identity?: {\n    primary: string;\n    secondary?: string;\n  };\n  conversationSwitcher?: {\n    currentId: string;\n    options?: Array<{ id: string; label: string; running?: boolean }>;\n  };\n  navLinks?: Partial<Record<PortalView, string>>;\n  body: string;\n  extraStyles?: string;\n  inlineScript?: string;\n  extraHead?: string;\n  bodyAttributes?: Record<string, string>;\n}\n\n// ── provisioner ───────────────────────────────────────────────────────────────\n\n/** Rewrites one Docker bind spec (`src:dst[:ro]`) during layout migration. */\nexport type ContainerBindTranslator = (bindSpec: string) => string;\n\nexport interface ContainerMount {\n  source: string;\n  target: string;\n  /**\n   * Mount without write access. Used for shared content an isolated runtime\n   * may read but must not modify. Absent means read-write.\n   */\n  readOnly?: boolean;\n}\n\nexport interface ResourceLimits {\n  cpus?: string;\n  memory?: string;\n}\n\nexport interface SandboxLimitStatus {\n  limits?: ResourceLimits;\n  boosted: boolean;\n}\n\nexport interface SandboxResourceController {\n  boost(key: string): Promise<SandboxLimitStatus>;\n  setLimits(key: string, limits: ResourceLimits): Promise<SandboxLimitStatus>;\n  getLimitStatus(key: string): SandboxLimitStatus;\n  getDefaultLimits(): ResourceLimits | undefined;\n  getBoostLimits(): ResourceLimits | undefined;\n}\n\nexport interface ProvisionOptions {\n  containerName?: string;\n  mounts?: ContainerMount[];\n  conversationId?: string;\n}\n\nexport interface DockerContainerManagerOptions {\n  limits?: ResourceLimits;\n  boostLimits?: ResourceLimits;\n  execFileImpl?: ExecFileAsync;\n}\n\nexport interface ExecutionPlan {\n  credentialKey: string;\n  resourceKey: string;\n  sandboxConfig: SandboxConfig;\n  env?: Record<string, string>;\n  mounts: ContainerMount[];\n}\n\n// ── store ─────────────────────────────────────────────────────────────────────\n\nexport interface Attachment {\n  original: string;\n  localPath: string;\n}\n\n// ── shared implementation contracts ─────────────────────────────────────────\n\ninterface EnvVarSpec {\n  name: string;\n  required?: boolean;\n  secret?: boolean;\n  deploy?: boolean;\n  doc: string;\n}\n\n/** The onboarding wizard's LLM answer, applied to the settings template. */\nexport interface OnboardLlmChoice {\n  provider: string;\n  model: string;\n}\n\nexport interface EnvGroup {\n  key: string;\n  title: string;\n  kind: \"platform\" | \"feature\";\n  vars: EnvVarSpec[];\n  anyOf?: readonly string[];\n  doc?: string;\n}\n\nexport interface RunnerCacheControl {\n  switchConversationModel(address: OfficeAddress, provider: string, model: string): boolean;\n  /** Clear the office's cached runner for a non-model settings change; false while busy. */\n  refreshConversationEnvironment(address: OfficeAddress): boolean;\n}\n\nexport interface GlobalRunnerCacheControl {\n  refreshAllConversations(): { busy: OfficeAddress[] };\n}\n\nexport type SettingsApplyResult =\n  | { ok: true; runtimeSwitched: boolean | null }\n  | { ok: false; reason: \"busy\" };\n\nexport interface CreateRunnerOptions {\n  sandboxConfig: SandboxConfig;\n  sessionKey: string;\n  /** The Conversation office this runner serves; identity and layout derive from it. */\n  office: Office;\n  /**\n   * Fixed trust boundary for this office. It is not part of runner cache\n   * identity; changing it requires runner replacement, not another cache entry.\n   */\n  trustModel: PlatformTrustModel;\n  /** Platform workspace/team identity used by host-side integration provisioning. */\n  platformWorkspaceId?: string;\n  /** Deployment default for the `open-connector` MCP entry; settings may override it. */\n  openConnector?: McpServerConfig;\n  /** Scheduler notified by the office event store after each admitted mutation. */\n  eventScheduler?: EventScheduleSink;\n  sessionScope: ResolvedSessionScope;\n  /** Cancels construction during process shutdown; acquired resources still roll back before rejection. */\n  signal?: AbortSignal;\n  vaultManager?: VaultManager;\n  provisioner?: DockerContainerManager;\n  resourceController?: SandboxResourceController;\n  sessionView?: {\n    tokenStore: SessionViewTokenStoreLike;\n    portalBaseUrl?: string;\n  };\n  platformToolPackFactories?: readonly PlatformToolPackFactory[];\n  models?: MikanModels;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAatC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC","sourcesContent":["import type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport { execFile } from \"node:child_process\";\nimport { promisify } from \"node:util\";\nimport type { SubagentRunStatus } from \"./harness/types.js\";\nimport type { SessionViewTokenStoreLike } from \"./adapters/commands/types.js\";\nimport type { MikanModels } from \"./harness/models.js\";\nimport type { McpServerConfig } from \"./harness/types.js\";\nimport type { EventScheduleSink } from \"./events/index.js\";\nimport type { Office } from \"./office/types.js\";\nimport type { DockerContainerManager } from \"./sandbox/provisioner.js\";\nimport type { SandboxConfig } from \"./sandbox/types.js\";\nimport type { ResolvedSessionScope } from \"./sessions/types.js\";\nimport type { PlatformToolPackFactory } from \"./harness/tools/types.js\";\nimport type { VaultManager } from \"./vault/types.js\";\n\nconst execFileAsync = promisify(execFile);\ntype ExecFileAsync = typeof execFileAsync;\n\n// ── adapter ───────────────────────────────────────────────────────────────────\n\nexport type ConversationKind = \"direct\" | \"shared\";\n\nexport type PlatformName = \"slack\" | \"discord\" | \"telegram\" | \"github\";\n\n/** Canonical platform-plus-raw identifier for one conversation office. */\nexport interface OfficeAddress {\n  readonly platform: PlatformName;\n  readonly conversationId: string;\n}\n\n/** Stable, filesystem-safe identity derived from an OfficeAddress. */\nexport type OfficeKey = string & { readonly __brand: \"OfficeKey\" };\n\nexport type OfficeMigrationStatus = \"needs-owner\" | \"prepared\" | \"moving\" | \"committed\" | \"failed\";\n\nexport interface OfficeMigrationRecord {\n  readonly rawConversationId: string;\n  readonly sourceDir: string;\n  readonly workspaceRoot: string;\n  readonly ownerPlatform?: PlatformName;\n  readonly targetDir?: string;\n  readonly status: OfficeMigrationStatus;\n  readonly error?: string;\n  readonly updatedAt: string;\n}\n\n/**\n * Directory entry for one conversation office. The workspace dir name stops\n * carrying the raw platform id once the ADR 0005 layout migration lands, so\n * the registry is the durable raw-id ↔ office mapping used for enumeration.\n */\nexport interface OfficeRecord {\n  readonly platform: PlatformName;\n  readonly conversationId: string;\n  readonly recordedAt: string;\n}\n\nexport interface OfficeRegistryState {\n  readonly version: 1;\n  readonly enabledPlatforms: readonly PlatformName[];\n  readonly offices: readonly OfficeRecord[];\n  readonly migrations: readonly OfficeMigrationRecord[];\n}\n\nexport interface OfficeMigrationPreparation {\n  readonly rawConversationId: string;\n  readonly sourceDir: string;\n  readonly workspaceRoot: string;\n  readonly ownerPlatform?: PlatformName;\n}\n\n/**\n * Who can drive conversations on a platform — gates ambient credential policy.\n *\n * - `membership`: only invited workspace/server members (Slack/Discord/Telegram).\n *   Safe to copy `sandbox.defaultSharedVault` into new conversation vaults.\n * - `open-trigger`: broader trigger surface (e.g. GitHub repo writers on public\n *   issues/PRs). Ambient shared vault must not apply; use host-side platform\n *   identity or an explicitly provisioned vault.\n */\nexport type PlatformTrustModel = \"membership\" | \"open-trigger\";\n\nexport interface ConversationMessage {\n  id: string;\n  /** Canonical identity of the conversation office. */\n  address: OfficeAddress;\n  /** @deprecated Use address.conversationId except at platform I/O seams. */\n  conversationId?: string;\n  sessionKey: string;\n  conversationKind: ConversationKind;\n  userId: string;\n  userName?: string;\n  text: string;\n  attachments?: { name: string; localPath: string }[];\n  threadTs?: string;\n}\n\nexport interface ChatToolResult {\n  toolName: string;\n  label?: string;\n  args?: Record<string, unknown>;\n  result: string;\n  isError: boolean;\n  durationMs: number;\n}\n\n/**\n * Derived from the run status rather than restated, so a new terminal status\n * in the harness reaches the dashboard instead of silently rendering as a\n * status the marker tables never learned about.\n */\nexport type SubagentProgressStatus = SubagentRunStatus | \"pending\" | \"running\" | \"skipped\";\n\nexport interface SubagentProgressNode {\n  id: string;\n  label: string;\n  status: SubagentProgressStatus;\n  /** Profile the node ran under; the first thing to check when a run is ungrounded. */\n  profile?: string;\n  turns?: number;\n  toolCalls?: number;\n  toolCallCounts?: Record<string, number>;\n  tokens?: number;\n  costUsd?: number;\n  durationMs?: number;\n  /**\n   * What the node is doing right now, for running nodes only.\n   *\n   * Without it a node reports nothing between \"started\" and \"finished\", so a\n   * step that legitimately takes minutes is indistinguishable from a hang —\n   * and when it does finish, there is no record of how it got there.\n   */\n  activity?: string;\n  reason?: string;\n  cleanupPending?: boolean;\n}\n\nexport interface SubagentProgressSnapshot {\n  mode: \"single\" | \"parallel\" | \"dag\";\n  nodes: SubagentProgressNode[];\n}\n\nexport interface TaskStatus {\n  sessionKey: string;\n  threadTs: string;\n  acknowledgement: string;\n  status:\n    | \"running\"\n    | \"stopping\"\n    | \"completed\"\n    | \"aborted\"\n    | \"failed\"\n    | \"declined\"\n    | \"queued\"\n    | \"unknown\";\n  currentTool?: string;\n  observedAt: string;\n  endedAt?: string;\n}\n\nexport interface ConversationResponder {\n  /** Admit independent work; returns its platform session reference, never waits for completion. */\n  startTask?(message: string, task: string): Promise<string>;\n  /** Post a fresh delivery notification after the final task response. */\n  notifyCompletion?(): Promise<void>;\n  /** Read-only task observations, scoped to the current conversation. */\n  getTaskStatus?(sessionKey?: string): Promise<TaskStatus[]>;\n  respond(text: string): Promise<void>;\n  appendResponseDelta?(delta: string): Promise<void>;\n  finishResponse?(finalText?: string): Promise<void>;\n  replaceResponse(text: string, options?: { createOverflowLink?: () => string }): Promise<void>;\n  /**\n   * Override only to convert the subagent dashboard for a pipeline that is\n   * not response-source Markdown (Telegram HTML). Absent, the harness composes\n   * the Markdown dashboard — optionally followed by the final answer — through\n   * `replaceResponse`.\n   */\n  replaceSubagentProgress?(progress: SubagentProgressSnapshot, finalText?: string): Promise<void>;\n  respondDiagnostic(text: string, options?: { style?: \"muted\" | \"error\" }): Promise<void>;\n  respondToolResult(result: ChatToolResult): Promise<void>;\n  setTyping(isTyping: boolean): Promise<void>;\n  setWorking(working: boolean): Promise<void>;\n  uploadFile(filePath: string, title?: string): Promise<void>;\n  /**\n   * React to the message that triggered this run with an emoji short name\n   * (no colons). Optional: platforms/contexts without reaction support omit\n   * it, and callers must handle its absence.\n   */\n  react?(emoji: string): Promise<void>;\n  deleteResponse(): Promise<void>;\n}\n\nexport interface MessagingInfo {\n  name: string;\n  /** Stable platform workspace/team identity when the adapter has one. */\n  workspaceId?: string;\n  formattingGuide: string;\n  channels: { id: string; name: string }[];\n  users: { id: string; userName: string; displayName: string }[];\n  /**\n   * Trust boundary for ambient credentials and host-side MCP capabilities.\n   * Built-in product paths normalize omission to `membership`; open-trigger\n   * platforms set this explicitly so policy does not key off platform names.\n   */\n  trustModel?: PlatformTrustModel;\n  diagnostics?: {\n    showUsageSummary?: boolean;\n  };\n}\n\n/**\n * A platform-agnostic event (message/mention) that triggers the agent.\n */\nexport interface ConversationEvent {\n  type: string;\n  /** Canonical identity created by the platform adapter at intake. */\n  address: OfficeAddress;\n  /** @deprecated Raw platform identifier; valid only at adapter I/O seams. */\n  conversationId: string;\n  /** Optional alternate conversation identity used for vault routing. */\n  vaultConversationId?: string;\n  /** Cross-platform conversation shape: direct message vs shared space */\n  conversationKind: ConversationKind;\n  /** Message timestamp or ID as string */\n  ts: string;\n  /** Parent message ID for threaded replies (optional) */\n  thread_ts?: string;\n  /** User ID */\n  user: string;\n  /** Message text (already stripped of bot mentions) */\n  text: string;\n  /** Downloaded attachments */\n  attachments?: { name: string; localPath: string }[];\n  /** Platform-computed session key; overrides default conversationId:thread_ts computation */\n  sessionKey?: string;\n}\n\n/**\n * Minimum interface that every platform bot must implement,\n * used by the central handler in main.ts and by EventsWatcher.\n */\nexport interface MessagingBot {\n  start(): Promise<void>;\n  /** Stop accepting new platform events and wait for intake already in flight. */\n  stop(): Promise<void>;\n  postMessage(channel: string, text: string): Promise<string>;\n  updateMessage(channel: string, ts: string, text: string): Promise<void>;\n  /**\n   * Add an emoji reaction to a message. `emoji` is a platform-agnostic short\n   * name without colons (e.g. \"eyes\", \"white_check_mark\"). Optional so\n   * adapters adopt it incrementally; callers must handle its absence.\n   */\n  addReaction?(channel: string, messageTs: string, emoji: string): Promise<void>;\n  /**\n   * Upload a host-side file into a conversation. Optional so adapters adopt\n   * it incrementally; callers must handle its absence. Existing adapter\n   * implementations (Slack/Discord/Telegram) already match this shape.\n   */\n  uploadFile?(channel: string, filePath: string, title?: string): Promise<void>;\n  /**\n   * Post into a platform thread. Optional so adapters adopt it incrementally;\n   * callers must handle its absence.\n   */\n  postInThread?(channel: string, threadTs: string, text: string): Promise<string>;\n  /**\n   * Open (or resolve) the direct-message conversation with a user, returning\n   * its conversation id — usable with `postMessage`. Optional capability.\n   */\n  openDirectConversation?(userId: string): Promise<string>;\n  /**\n   * Fetch recent messages from a conversation, oldest first. Optional\n   * capability; adapters may cap `limit` below what the caller asks for.\n   */\n  fetchHistory?(\n    channel: string,\n    options?: PlatformHistoryOptions,\n  ): Promise<PlatformHistoryMessage[]>;\n  /** List the platform workspace's active users. Optional capability. */\n  listUsers?(): Promise<PlatformUserInfo[]>;\n  enqueueEvent(event: ConversationEvent): boolean;\n  getMessagingInfo(): MessagingInfo;\n  postPrivate?(conversationId: string, userId: string, text: string): Promise<void>;\n  postPrivateDiagnostic?(\n    conversationId: string,\n    userId: string,\n    text: string,\n    options?: { style?: \"muted\" | \"error\" },\n  ): Promise<void>;\n}\n\n/** Filters for a platform conversation-history fetch. */\nexport interface PlatformHistoryOptions {\n  /** Only messages strictly newer than this platform message id/timestamp. */\n  oldest?: string;\n  /** Maximum number of messages to return (adapters may cap this lower). */\n  limit?: number;\n  /**\n   * Read the replies inside this thread instead of the conversation's\n   * top-level messages. The thread parent itself is not returned — the result\n   * is the replies to it. Adapters without threads ignore this.\n   */\n  threadTs?: string;\n}\n\n/** One platform message returned by a history fetch. */\nexport interface PlatformHistoryMessage {\n  ts: string;\n  threadTs?: string;\n  userId?: string;\n  userName?: string;\n  text: string;\n  isBot: boolean;\n}\n\n/** One platform user returned by a workspace user listing. */\nexport interface PlatformUserInfo {\n  id: string;\n  userName: string;\n  displayName: string;\n  isBot: boolean;\n}\n\n/** Normalized platform data and reply hook for one event. */\nexport interface ConversationContext {\n  /** Canonical identity for the office handling this turn. */\n  address: OfficeAddress;\n  message: ConversationMessage;\n  responder: ConversationResponder;\n  platform: MessagingInfo;\n}\n\nexport interface RunningSession {\n  /** The office this run belongs to; two platforms may share a raw id. */\n  address: OfficeAddress;\n  sessionKey: string;\n  startedAt: number;\n  lastActivityAt?: number;\n  currentTool?: string;\n  stopping?: boolean;\n}\n\nexport interface HandleNewCommandOptions {\n  sessionKey: string;\n  conversationId: string;\n  bot: MessagingBot;\n  message: ConversationMessage;\n}\n\n/**\n * Runtime state is addressed by an office plus that office's platform session\n * reference. The session key alone is a platform value and is not unique\n * across platforms, so every session-scoped call carries its `OfficeAddress`.\n */\nexport interface MessagingEventHandler {\n  isRunning(address: OfficeAddress, sessionKey: string): boolean;\n  getRunningSessions(): RunningSession[];\n  handleEvent(\n    event: ConversationEvent,\n    bot: MessagingBot,\n    context: ConversationContext,\n  ): Promise<void>;\n  handleStop(\n    address: OfficeAddress,\n    sessionKey: string,\n    bot: MessagingBot,\n    replyThreadTs?: string,\n  ): Promise<void>;\n  /** Returns false when idle; accepted controls bypass the normal run queue. */\n  steer?(message: ConversationMessage): Promise<boolean>;\n  forceStop(address: OfficeAddress, sessionKey: string): void;\n  handleNewCommand(options: HandleNewCommandOptions): Promise<void>;\n}\n\n// ── agent ─────────────────────────────────────────────────────────────────────\n\nexport interface PiAgentWrapper {\n  steer?(message: ConversationMessage): Promise<boolean>;\n  syncChatHistory(currentMessageId?: string): Promise<void>;\n  run(\n    message: ConversationMessage,\n    responder: ConversationResponder,\n    platform: MessagingInfo,\n  ): Promise<{ stopReason: string; errorMessage?: string }>;\n  abort(): void;\n  getCurrentStep(): { toolName?: string; label?: string } | undefined;\n  dispose(): Promise<void>;\n}\n\n// ── config ────────────────────────────────────────────────────────────────────\n\n/**\n * Office visibility (ADR 0008): public offices may be read by every office and\n * write shared knowledge; private ones are visible only to themselves.\n */\nexport type WorkspaceVisibility = \"public\" | \"private\";\n\n/** Retired door-policy fields, still parsed so legacy files load and `full` can be reported. */\ninterface WorkspaceSettings {\n  doorPolicy?: \"isolated\" | \"trusted\";\n  layout?: \"conversation\" | \"shared-support\" | \"full\";\n  visibility?: WorkspaceVisibility;\n}\n\nexport interface SandboxSettings {\n  cpus?: string;\n  memory?: string;\n  boost?: { cpus?: string; memory?: string };\n  /** Legacy image-specific workspace setting; new installations use workspace. */\n  image?: { workspaceMount?: \"private\" | \"full\" };\n  /** Backend-neutral office data policy and layout. */\n  workspace?: WorkspaceSettings;\n  defaultSharedVault?: string;\n}\n\nexport interface AgentConfig {\n  provider: string;\n  model: string;\n  thinkingLevel: ThinkingLevel;\n  sentryDsn?: string;\n  sandbox?: SandboxSettings;\n  slack?: {\n    replyMode?: \"top-level\" | \"thread\";\n  };\n  /**\n   * MCP servers available to this scope, keyed by server name. Global and\n   * conversation entries merge per key (conversation wins); an entry with\n   * `disabled: true` turns off the inherited server. `open-connector` is\n   * filled in from the deployment default when undeclared. See `src/harness`.\n   */\n  mcpServers?: Record<string, McpServerConfig>;\n}\n\n// ── context ───────────────────────────────────────────────────────────────────\n\n/**\n * Platform conversation history entry from log.jsonl.\n */\nexport interface ConversationLogMessage {\n  date?: string;\n  ts?: string;\n  threadTs?: string;\n  user?: string;\n  userName?: string;\n  text?: string;\n  isMessagingBot?: boolean;\n}\n\n// ── execution-resolver ────────────────────────────────────────────────────────\n\nexport interface ActorContext {\n  /** Canonical office identity used by vault and execution policy. */\n  address: OfficeAddress;\n  userId: string;\n  /** From MessagingInfo.trustModel; vault policy uses this, not platform name. */\n  trustModel?: PlatformTrustModel;\n}\n\n// ── log ───────────────────────────────────────────────────────────────────────\n\nexport interface LogContext {\n  conversationId: string;\n  userName?: string;\n  conversationName?: string;\n  sessionId?: string;\n}\n\n// ── portal shell (src/adapters/web/portal-shell.ts) ────────────────────────────────────\n\ntype PortalView = \"admin\" | \"session\" | \"vault\";\n\nexport interface PortalShellOptions {\n  activeView: PortalView;\n  pageTitle: string;\n  identity?: {\n    primary: string;\n    secondary?: string;\n  };\n  conversationSwitcher?: {\n    currentId: string;\n    options?: Array<{ id: string; label: string; running?: boolean }>;\n  };\n  navLinks?: Partial<Record<PortalView, string>>;\n  body: string;\n  extraStyles?: string;\n  inlineScript?: string;\n  extraHead?: string;\n  bodyAttributes?: Record<string, string>;\n}\n\n// ── provisioner ───────────────────────────────────────────────────────────────\n\n/** Rewrites one Docker bind spec (`src:dst[:ro]`) during layout migration. */\nexport type ContainerBindTranslator = (bindSpec: string) => string;\n\nexport interface ContainerMount {\n  source: string;\n  target: string;\n  /**\n   * Mount without write access. Used for shared content an isolated runtime\n   * may read but must not modify. Absent means read-write.\n   */\n  readOnly?: boolean;\n}\n\nexport interface ResourceLimits {\n  cpus?: string;\n  memory?: string;\n}\n\nexport interface SandboxLimitStatus {\n  limits?: ResourceLimits;\n  boosted: boolean;\n}\n\nexport interface SandboxResourceController {\n  boost(key: string): Promise<SandboxLimitStatus>;\n  setLimits(key: string, limits: ResourceLimits): Promise<SandboxLimitStatus>;\n  getLimitStatus(key: string): SandboxLimitStatus;\n  getDefaultLimits(): ResourceLimits | undefined;\n  getBoostLimits(): ResourceLimits | undefined;\n}\n\nexport interface ProvisionOptions {\n  containerName?: string;\n  mounts?: ContainerMount[];\n  conversationId?: string;\n}\n\nexport interface DockerContainerManagerOptions {\n  limits?: ResourceLimits;\n  boostLimits?: ResourceLimits;\n  execFileImpl?: ExecFileAsync;\n}\n\nexport interface ExecutionPlan {\n  credentialKey: string;\n  resourceKey: string;\n  sandboxConfig: SandboxConfig;\n  env?: Record<string, string>;\n  mounts: ContainerMount[];\n}\n\n// ── store ─────────────────────────────────────────────────────────────────────\n\nexport interface Attachment {\n  original: string;\n  localPath: string;\n}\n\n// ── shared implementation contracts ─────────────────────────────────────────\n\ninterface EnvVarSpec {\n  name: string;\n  required?: boolean;\n  secret?: boolean;\n  deploy?: boolean;\n  doc: string;\n}\n\n/** The onboarding wizard's LLM answer, applied to the settings template. */\nexport interface OnboardLlmChoice {\n  provider: string;\n  model: string;\n}\n\nexport interface EnvGroup {\n  key: string;\n  title: string;\n  kind: \"platform\" | \"feature\";\n  vars: EnvVarSpec[];\n  anyOf?: readonly string[];\n  doc?: string;\n}\n\nexport interface RunnerCacheControl {\n  switchConversationModel(address: OfficeAddress, provider: string, model: string): boolean;\n  /** Clear the office's cached runner for a non-model settings change; false while busy. */\n  refreshConversationEnvironment(address: OfficeAddress): boolean;\n}\n\nexport interface GlobalRunnerCacheControl {\n  refreshAllConversations(): { busy: OfficeAddress[] };\n}\n\nexport type SettingsApplyResult =\n  | { ok: true; runtimeSwitched: boolean | null }\n  | { ok: false; reason: \"busy\" };\n\nexport interface CreateRunnerOptions {\n  sandboxConfig: SandboxConfig;\n  sessionKey: string;\n  /** The Conversation office this runner serves; identity and layout derive from it. */\n  office: Office;\n  /**\n   * Fixed trust boundary for this office. It is not part of runner cache\n   * identity; changing it requires runner replacement, not another cache entry.\n   */\n  trustModel: PlatformTrustModel;\n  /** Platform workspace/team identity used by host-side integration provisioning. */\n  platformWorkspaceId?: string;\n  /** Deployment default for the `open-connector` MCP entry; settings may override it. */\n  openConnector?: McpServerConfig;\n  /** Scheduler notified by the office event store after each admitted mutation. */\n  eventScheduler?: EventScheduleSink;\n  sessionScope: ResolvedSessionScope;\n  /** Cancels construction during process shutdown; acquired resources still roll back before rejection. */\n  signal?: AbortSignal;\n  vaultManager?: VaultManager;\n  provisioner?: DockerContainerManager;\n  resourceController?: SandboxResourceController;\n  sessionView?: {\n    tokenStore: SessionViewTokenStoreLike;\n    portalBaseUrl?: string;\n  };\n  platformToolPackFactories?: readonly PlatformToolPackFactory[];\n  models?: MikanModels;\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geminixiang/mikan",
-  "version": "1.0.0-beta.62",
+  "version": "1.0.0-beta.63",
   "description": "Multi-platform AI coding agent for Slack, Telegram, Discord, and GitHub",
   "keywords": [
     "agent",