@geminixiang/mikan 1.0.0-beta.64 → 1.0.0-beta.65

package/dist/runtime/types.d.ts

@@ -1,7 +1,7 @@
 import type { McpServerConfig } from "../harness/types.js";
 import type { EventScheduleSink } from "../events/index.js";
 import type { PiAgentWrapper, PlatformTrustModel } from "../types.js";
-import type { MessagingBot, ConversationContext, ConversationEvent, MessagingEventHandler, OfficeAddress } from "../adapter.js";
+import type { MessagingBot, ConversationContext, ConversationEvent, MessagingEventHandler, OfficeAddress } from "../types.js";
 import type { AdminTokenStoreLike, CommandHandler, CommandServices, LinkTokenStoreLike, SessionViewTokenStoreLike } from "../adapters/commands/types.js";
 import type { MikanModels } from "../harness/index.js";
 import type { PlatformToolPackFactory } from "../harness/tools/types.js";

package/dist/runtime/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/runtime/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,KAAK,EACV,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,aAAa,EACd,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EACV,mBAAmB,EACnB,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,yBAAyB,EAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,WAAW,uBAAuB;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,wBAAwB;IACvC,+CAA+C;IAC/C,OAAO,EAAE,aAAa,CAAC;IACvB,0EAA0E;IAC1E,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,iFAAiF;IACjF,aAAa,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,EAAE,cAAc,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,2FAA2F;IAC3F,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,2EAA2E;IAC3E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,iBAAiB,CAAC;IACzB,GAAG,EAAE,YAAY,CAAC;IAClB,OAAO,EAAE,mBAAmB,CAAC;CAC9B;AAED,8EAA8E;AAC9E,MAAM,WAAW,mBAAmB;IAClC,qEAAqE;IACrE,OAAO,EAAE,aAAa,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,UAAU,EAAE,kBAAkB,CAAC;IAC/B,6EAA6E;IAC7E,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,0BAA2B,SAAQ,IAAI,CACtD,eAAe,EACf,SAAS,GAAG,cAAc,GAAG,gBAAgB,GAAG,uBAAuB,GAAG,iBAAiB,CAC5F;IACC;;;OAGG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,mEAAmE;IACnE,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC,qEAAqE;IACrE,qBAAqB,CAAC,EAAE,yBAAyB,CAAC;IAClD,mEAAmE;IACnE,eAAe,CAAC,EAAE,mBAAmB,CAAC;IACtC,2EAA2E;IAC3E,eAAe,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,8EAA8E;IAC9E,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,uFAAuF;IACvF,aAAa,CAAC,EAAE,eAAe,CAAC;IAChC,mGAAmG;IACnG,cAAc,CAAC,EAAE,MAAM,iBAAiB,GAAG,SAAS,CAAC;IACrD;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;CAChE;AAED,MAAM,WAAW,mBAAoB,SAAQ,qBAAqB;IAChE,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,QAAQ,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/D,uBAAuB,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1F,8BAA8B,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC;IAChE,iFAAiF;IACjF,uBAAuB,IAAI;QAAE,IAAI,EAAE,aAAa,EAAE,CAAA;KAAE,CAAC;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/runtime/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,KAAK,EACV,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,aAAa,EACd,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACV,mBAAmB,EACnB,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,yBAAyB,EAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,WAAW,uBAAuB;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,wBAAwB;IACvC,+CAA+C;IAC/C,OAAO,EAAE,aAAa,CAAC;IACvB,0EAA0E;IAC1E,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,iFAAiF;IACjF,aAAa,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,EAAE,cAAc,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,2FAA2F;IAC3F,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,2EAA2E;IAC3E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,iBAAiB,CAAC;IACzB,GAAG,EAAE,YAAY,CAAC;IAClB,OAAO,EAAE,mBAAmB,CAAC;CAC9B;AAED,8EAA8E;AAC9E,MAAM,WAAW,mBAAmB;IAClC,qEAAqE;IACrE,OAAO,EAAE,aAAa,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,UAAU,EAAE,kBAAkB,CAAC;IAC/B,6EAA6E;IAC7E,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,0BAA2B,SAAQ,IAAI,CACtD,eAAe,EACf,SAAS,GAAG,cAAc,GAAG,gBAAgB,GAAG,uBAAuB,GAAG,iBAAiB,CAC5F;IACC;;;OAGG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,mEAAmE;IACnE,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC,qEAAqE;IACrE,qBAAqB,CAAC,EAAE,yBAAyB,CAAC;IAClD,mEAAmE;IACnE,eAAe,CAAC,EAAE,mBAAmB,CAAC;IACtC,2EAA2E;IAC3E,eAAe,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,8EAA8E;IAC9E,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,uFAAuF;IACvF,aAAa,CAAC,EAAE,eAAe,CAAC;IAChC,mGAAmG;IACnG,cAAc,CAAC,EAAE,MAAM,iBAAiB,GAAG,SAAS,CAAC;IACrD;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;CAChE;AAED,MAAM,WAAW,mBAAoB,SAAQ,qBAAqB;IAChE,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,QAAQ,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/D,uBAAuB,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1F,8BAA8B,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC;IAChE,iFAAiF;IACjF,uBAAuB,IAAI;QAAE,IAAI,EAAE,aAAa,EAAE,CAAA;KAAE,CAAC;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C"}

package/dist/runtime/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/runtime/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { McpServerConfig } from \"../harness/types.js\";\nimport type { EventScheduleSink } from \"../events/index.js\";\nimport type { PiAgentWrapper, PlatformTrustModel } from \"../types.js\";\nimport type {\n  MessagingBot,\n  ConversationContext,\n  ConversationEvent,\n  MessagingEventHandler,\n  OfficeAddress,\n} from \"../adapter.js\";\nimport type {\n  AdminTokenStoreLike,\n  CommandHandler,\n  CommandServices,\n  LinkTokenStoreLike,\n  SessionViewTokenStoreLike,\n} from \"../adapters/commands/types.js\";\nimport type { MikanModels } from \"../harness/index.js\";\nimport type { PlatformToolPackFactory } from \"../harness/tools/types.js\";\nimport type { VaultManager } from \"../vault/index.js\";\n\nexport interface SessionLifecycleOptions {\n  maxSessions?: number;\n  idleTimeoutMs?: number;\n  now?: () => number;\n}\n\nexport interface ConversationRuntimeState {\n  /** The office that owns this runtime state. */\n  address: OfficeAddress;\n  /** This office's platform session reference (raw session-key grammar). */\n  sessionKey: string;\n  running: boolean;\n  /** Exact settlement of the current run, including post-run response handling. */\n  runSettlement?: Promise<void>;\n  runner: PiAgentWrapper;\n  stopRequested: boolean;\n  /** Set when the shutdown deadline aborted this run; the runtime posts a restart notice. */\n  shutdownAborted?: boolean;\n  /** An explicit stop caller owns its acknowledgement through settlement. */\n  stopNoticeOwned?: boolean;\n  lastAccessedAt: number;\n  sessionFile: string;\n  /** Epoch ms when the current run started; 0 when idle. */\n  startedAt: number;\n  lastActivityAt?: number;\n}\n\nexport interface RunSessionOptions {\n  event: ConversationEvent;\n  bot: MessagingBot;\n  context: ConversationContext;\n}\n\n/** Conversation/session identity used to resolve per-session runner state. */\nexport interface SessionStateOptions {\n  /** Canonical office identity; the runtime keys all state by this. */\n  address: OfficeAddress;\n  sessionKey: string;\n  /** Fixed trust boundary for this office's built-in platform path. */\n  trustModel: PlatformTrustModel;\n  /** Stable platform workspace/team identity when the adapter supplies one. */\n  platformWorkspaceId?: string;\n}\n\nexport interface ConversationRuntimeOptions extends Omit<\n  CommandServices,\n  \"runtime\" | \"vaultManager\" | \"linkTokenStore\" | \"sessionViewTokenStore\" | \"adminTokenStore\"\n> {\n  /**\n   * Credential vault for sandboxed conversations. Optional for embedders;\n   * when omitted the runtime uses an inert, disabled vault.\n   */\n  vaultManager?: VaultManager;\n  /** Login-portal token store; omit when no web portal is hosted. */\n  linkTokenStore?: LinkTokenStoreLike;\n  /** Session-viewer token store; omit when no web portal is hosted. */\n  sessionViewTokenStore?: SessionViewTokenStoreLike;\n  /** Admin-portal token store; omit when no web portal is hosted. */\n  adminTokenStore?: AdminTokenStoreLike;\n  /** Override the default command handlers (e.g., to add /help, /status). */\n  commandHandlers?: readonly CommandHandler[];\n  /** Model registry override; defaults to the process-wide models.json load. */\n  models?: MikanModels;\n  /** Deployment default for the `open-connector` MCP entry; settings may override it. */\n  openConnector?: McpServerConfig;\n  /** Scheduler that office event stores notify; resolved lazily because it starts after the bots. */\n  eventScheduler?: () => EventScheduleSink | undefined;\n  /**\n   * Optional platform capability packs (extra tools + per-run bind), as\n   * factories — each runner instantiates its own pack because bind state is\n   * per-runner. Assembled at process start (e.g. GitHub PR/CI pack); core\n   * stays platform-neutral.\n   */\n  platformToolPackFactories?: readonly PlatformToolPackFactory[];\n}\n\nexport interface ConversationRuntime extends MessagingEventHandler {\n  runSession(options: RunSessionOptions): Promise<void>;\n  runDream(address: OfficeAddress, now?: Date): Promise<boolean>;\n  switchConversationModel(address: OfficeAddress, provider: string, model: string): boolean;\n  refreshConversationEnvironment(address: OfficeAddress): boolean;\n  /** Clear idle runners; defer busy conversation invalidation until settlement. */\n  refreshAllConversations(): { busy: OfficeAddress[] };\n  shutdown(timeoutMs?: number): Promise<void>;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/runtime/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { McpServerConfig } from \"../harness/types.js\";\nimport type { EventScheduleSink } from \"../events/index.js\";\nimport type { PiAgentWrapper, PlatformTrustModel } from \"../types.js\";\nimport type {\n  MessagingBot,\n  ConversationContext,\n  ConversationEvent,\n  MessagingEventHandler,\n  OfficeAddress,\n} from \"../types.js\";\nimport type {\n  AdminTokenStoreLike,\n  CommandHandler,\n  CommandServices,\n  LinkTokenStoreLike,\n  SessionViewTokenStoreLike,\n} from \"../adapters/commands/types.js\";\nimport type { MikanModels } from \"../harness/index.js\";\nimport type { PlatformToolPackFactory } from \"../harness/tools/types.js\";\nimport type { VaultManager } from \"../vault/index.js\";\n\nexport interface SessionLifecycleOptions {\n  maxSessions?: number;\n  idleTimeoutMs?: number;\n  now?: () => number;\n}\n\nexport interface ConversationRuntimeState {\n  /** The office that owns this runtime state. */\n  address: OfficeAddress;\n  /** This office's platform session reference (raw session-key grammar). */\n  sessionKey: string;\n  running: boolean;\n  /** Exact settlement of the current run, including post-run response handling. */\n  runSettlement?: Promise<void>;\n  runner: PiAgentWrapper;\n  stopRequested: boolean;\n  /** Set when the shutdown deadline aborted this run; the runtime posts a restart notice. */\n  shutdownAborted?: boolean;\n  /** An explicit stop caller owns its acknowledgement through settlement. */\n  stopNoticeOwned?: boolean;\n  lastAccessedAt: number;\n  sessionFile: string;\n  /** Epoch ms when the current run started; 0 when idle. */\n  startedAt: number;\n  lastActivityAt?: number;\n}\n\nexport interface RunSessionOptions {\n  event: ConversationEvent;\n  bot: MessagingBot;\n  context: ConversationContext;\n}\n\n/** Conversation/session identity used to resolve per-session runner state. */\nexport interface SessionStateOptions {\n  /** Canonical office identity; the runtime keys all state by this. */\n  address: OfficeAddress;\n  sessionKey: string;\n  /** Fixed trust boundary for this office's built-in platform path. */\n  trustModel: PlatformTrustModel;\n  /** Stable platform workspace/team identity when the adapter supplies one. */\n  platformWorkspaceId?: string;\n}\n\nexport interface ConversationRuntimeOptions extends Omit<\n  CommandServices,\n  \"runtime\" | \"vaultManager\" | \"linkTokenStore\" | \"sessionViewTokenStore\" | \"adminTokenStore\"\n> {\n  /**\n   * Credential vault for sandboxed conversations. Optional for embedders;\n   * when omitted the runtime uses an inert, disabled vault.\n   */\n  vaultManager?: VaultManager;\n  /** Login-portal token store; omit when no web portal is hosted. */\n  linkTokenStore?: LinkTokenStoreLike;\n  /** Session-viewer token store; omit when no web portal is hosted. */\n  sessionViewTokenStore?: SessionViewTokenStoreLike;\n  /** Admin-portal token store; omit when no web portal is hosted. */\n  adminTokenStore?: AdminTokenStoreLike;\n  /** Override the default command handlers (e.g., to add /help, /status). */\n  commandHandlers?: readonly CommandHandler[];\n  /** Model registry override; defaults to the process-wide models.json load. */\n  models?: MikanModels;\n  /** Deployment default for the `open-connector` MCP entry; settings may override it. */\n  openConnector?: McpServerConfig;\n  /** Scheduler that office event stores notify; resolved lazily because it starts after the bots. */\n  eventScheduler?: () => EventScheduleSink | undefined;\n  /**\n   * Optional platform capability packs (extra tools + per-run bind), as\n   * factories — each runner instantiates its own pack because bind state is\n   * per-runner. Assembled at process start (e.g. GitHub PR/CI pack); core\n   * stays platform-neutral.\n   */\n  platformToolPackFactories?: readonly PlatformToolPackFactory[];\n}\n\nexport interface ConversationRuntime extends MessagingEventHandler {\n  runSession(options: RunSessionOptions): Promise<void>;\n  runDream(address: OfficeAddress, now?: Date): Promise<boolean>;\n  switchConversationModel(address: OfficeAddress, provider: string, model: string): boolean;\n  refreshConversationEnvironment(address: OfficeAddress): boolean;\n  /** Clear idle runners; defer busy conversation invalidation until settlement. */\n  refreshAllConversations(): { busy: OfficeAddress[] };\n  shutdown(timeoutMs?: number): Promise<void>;\n}\n"]}

package/dist/sessions/session-key.d.ts

@@ -1,4 +1,4 @@
-import type { ConversationKind } from "../adapter.js";
+import type { ConversationKind } from "../types.js";
 export type { ResolveSessionKeyOptions } from "./types.js";
 import type { ResolveSessionKeyOptions } from "./types.js";
 export declare function assertConversationId(conversationId: string): string;

package/dist/sessions/session-key.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-key.d.ts","sourceRoot":"","sources":["../../src/sessions/session-key.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,YAAY,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAuC3D,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CASnE;AAED,6EAA6E;AAC7E,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,yCAAyC;AACzC,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEnF;AAED;;;;;GAKG;AACH,wBAAgB,qCAAqC,CACnD,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,GACrB,MAAM,CAYR;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;CACZ,GAAG,MAAM,CAKT;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED,0EAA0E;AAC1E,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAG3D;AAED,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGhE;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,wBAAwB,GAAG,MAAM,CAgB/E;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,gBAAgB,CAehG"}
+{"version":3,"file":"session-key.d.ts","sourceRoot":"","sources":["../../src/sessions/session-key.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,YAAY,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAuC3D,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CASnE;AAED,6EAA6E;AAC7E,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,yCAAyC;AACzC,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEnF;AAED;;;;;GAKG;AACH,wBAAgB,qCAAqC,CACnD,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,GACrB,MAAM,CAYR;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;CACZ,GAAG,MAAM,CAKT;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED,0EAA0E;AAC1E,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAG3D;AAED,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGhE;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,wBAAwB,GAAG,MAAM,CAgB/E;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,gBAAgB,CAehG"}

package/dist/sessions/session-key.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-key.js","sourceRoot":"","sources":["../../src/sessions/session-key.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;GAWG;AAEH,sFAAsF;AACtF,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAEvC,SAAS,wBAAwB,CAAC,KAAa;IAC7C,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;QAC5C,IAAI,SAAS,IAAI,IAAI,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa,EAAE,KAAa;IAC1D,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8CAA8C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0CAA0C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6CAA6C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,cAAsB;IACzD,sBAAsB,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IAC1D,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,6CAA6C,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK;YAC9E,yDAAyD,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,OAAO,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;AAC1D,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,oBAAoB,CAAC,cAAsB,EAAE,MAAc;IACzE,OAAO,GAAG,oBAAoB,CAAC,cAAc,CAAC,IAAI,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;AAClF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qCAAqC,CACnD,UAAkB,EAClB,cAAsB;IAEtB,MAAM,sBAAsB,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;IACpE,MAAM,oBAAoB,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC1D,IAAI,oBAAoB,KAAK,sBAAsB,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,eAAe,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,mCAAmC;YAC1E,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CACjC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,IAAI;QAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACjD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAKhC;IACC,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,qCAAqC,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,oBAAoB,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,OAAO,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAClC,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB,CAAC,UAAkB;IACjD,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AACxE,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAiC;IACrE,MAAM,EACJ,cAAc,EACd,gBAAgB,EAChB,SAAS,EACT,kBAAkB,EAClB,kBAAkB,EAClB,QAAQ,GACT,GAAG,OAAO,CAAC;IACZ,IAAI,gBAAgB,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxE,OAAO,oBAAoB,CAAC,cAAc,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,QAAQ,IAAI,kBAAkB,EAAE,CAAC;QACpC,OAAO,oBAAoB,CAAC,cAAc,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,oBAAoB,CAAC,cAAc,EAAE,QAAQ,IAAI,SAAS,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,cAAsB;IAC5E,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9D,CAAC;IAED,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC5B,OAAO,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9D,CAAC;IAED,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC/D,CAAC;IAED,0EAA0E;IAC1E,OAAO,QAAQ,CAAC;AAClB,CAAC","sourcesContent":["import type { ConversationKind } from \"../adapter.js\";\nexport type { ResolveSessionKeyOptions } from \"./types.js\";\nimport type { ResolveSessionKeyOptions } from \"./types.js\";\n\n/**\n * The session-key grammar. A session key is the conversation-scoped runtime\n * identity used to serialize and resume work (see CONTEXT.md):\n *\n *   `conversationId`            — the persistent conversation session\n *   `conversationId:suffix`     — a scoped thread session (suffix = thread\n *                                 ts / message id, opaque to this module)\n *\n * This module owns the convention; nothing else may split on \":\". The grammar\n * only works because conversation ids never contain \":\" — that invariant is\n * asserted here at every derivation instead of being assumed everywhere.\n */\n\n/** Characters that can change host path structure or make identity logs ambiguous. */\nconst PATH_SEPARATOR_PATTERN = /[\\\\/]/;\n\nfunction containsControlCharacter(value: string): boolean {\n  for (const character of value) {\n    const codePoint = character.codePointAt(0)!;\n    if (codePoint <= 0x1f || codePoint === 0x7f) return true;\n  }\n  return false;\n}\n\nfunction assertSafeIdentityPart(value: string, label: string): string {\n  if (!value || value === \".\" || value === \"..\") {\n    throw new Error(`${label} must be a non-empty identity segment (got ${JSON.stringify(value)})`);\n  }\n  if (PATH_SEPARATOR_PATTERN.test(value)) {\n    throw new Error(`${label} must not contain path separators (got ${JSON.stringify(value)})`);\n  }\n  if (containsControlCharacter(value)) {\n    throw new Error(`${label} must not contain control characters (got ${JSON.stringify(value)})`);\n  }\n  return value;\n}\n\nexport function assertConversationId(conversationId: string): string {\n  assertSafeIdentityPart(conversationId, \"Conversation id\");\n  if (conversationId.includes(\":\")) {\n    throw new Error(\n      `Conversation id must not contain \":\" (got ${JSON.stringify(conversationId)}); ` +\n        \"the session-key grammar reserves it for thread suffixes\",\n    );\n  }\n  return conversationId;\n}\n\n/** Validate the opaque scoped suffix without changing its platform value. */\nexport function assertSessionSuffix(suffix: string): string {\n  return assertSafeIdentityPart(suffix, \"Session suffix\");\n}\n\n/** Build a scoped thread session key. */\nexport function makeThreadSessionKey(conversationId: string, suffix: string): string {\n  return `${assertConversationId(conversationId)}:${assertSessionSuffix(suffix)}`;\n}\n\n/**\n * Validate that a platform-computed session key belongs to its conversation.\n * The key may be the bare conversation id or one of that conversation's\n * scoped keys; callers must not be able to select another conversation's\n * runtime/cache entry.\n */\nexport function assertSessionKeyBelongsToConversation(\n  sessionKey: string,\n  conversationId: string,\n): string {\n  const expectedConversationId = assertConversationId(conversationId);\n  const actualConversationId = conversationIdOf(sessionKey);\n  if (actualConversationId !== expectedConversationId) {\n    throw new Error(\n      `Session key ${JSON.stringify(sessionKey)} does not belong to conversation ` +\n        JSON.stringify(conversationId),\n    );\n  }\n  const suffix = threadSuffixOf(sessionKey);\n  if (suffix !== null) assertSessionSuffix(suffix);\n  return sessionKey;\n}\n\n/**\n * The runtime fallback: honor a platform-computed session key, otherwise\n * scope the event to its thread (or to itself for thread-starting messages).\n */\nexport function deriveSessionKey(event: {\n  sessionKey?: string;\n  conversationId: string;\n  thread_ts?: string;\n  ts: string;\n}): string {\n  if (event.sessionKey !== undefined) {\n    return assertSessionKeyBelongsToConversation(event.sessionKey, event.conversationId);\n  }\n  return makeThreadSessionKey(event.conversationId, event.thread_ts ?? event.ts);\n}\n\nexport function isThreadSessionKey(sessionKey: string): boolean {\n  return sessionKey.includes(\":\");\n}\n\n/** The conversation a session key belongs to (identity for bare keys). */\nexport function conversationIdOf(sessionKey: string): string {\n  const separator = sessionKey.indexOf(\":\");\n  return separator === -1 ? sessionKey : sessionKey.slice(0, separator);\n}\n\n/** The thread suffix of a scoped key, or null for a bare conversation key. */\nexport function threadSuffixOf(sessionKey: string): string | null {\n  const separator = sessionKey.indexOf(\":\");\n  return separator === -1 ? null : sessionKey.slice(separator + 1);\n}\n\nexport function resolveChatSessionKey(options: ResolveSessionKeyOptions): string {\n  const {\n    conversationId,\n    conversationKind,\n    messageId,\n    persistentTopLevel,\n    scopeDirectThreads,\n    threadTs,\n  } = options;\n  if (conversationKind === \"direct\" && (!threadTs || !scopeDirectThreads)) {\n    return assertConversationId(conversationId);\n  }\n  if (!threadTs && persistentTopLevel) {\n    return assertConversationId(conversationId);\n  }\n  return makeThreadSessionKey(conversationId, threadTs || messageId);\n}\n\nexport function inferConversationKind(platform: string, conversationId: string): ConversationKind {\n  if (platform === \"slack\") {\n    return conversationId.startsWith(\"D\") ? \"direct\" : \"shared\";\n  }\n\n  if (platform === \"telegram\") {\n    return conversationId.startsWith(\"-\") ? \"shared\" : \"direct\";\n  }\n\n  if (platform === \"discord\") {\n    return conversationId.startsWith(\"DM\") ? \"direct\" : \"shared\";\n  }\n\n  // github: issues/PRs are always shared within the repo; there are no DMs.\n  return \"shared\";\n}\n"]}
+{"version":3,"file":"session-key.js","sourceRoot":"","sources":["../../src/sessions/session-key.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;GAWG;AAEH,sFAAsF;AACtF,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAEvC,SAAS,wBAAwB,CAAC,KAAa;IAC7C,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;QAC5C,IAAI,SAAS,IAAI,IAAI,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa,EAAE,KAAa;IAC1D,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8CAA8C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0CAA0C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6CAA6C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,cAAsB;IACzD,sBAAsB,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IAC1D,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,6CAA6C,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK;YAC9E,yDAAyD,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,OAAO,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;AAC1D,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,oBAAoB,CAAC,cAAsB,EAAE,MAAc;IACzE,OAAO,GAAG,oBAAoB,CAAC,cAAc,CAAC,IAAI,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;AAClF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qCAAqC,CACnD,UAAkB,EAClB,cAAsB;IAEtB,MAAM,sBAAsB,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;IACpE,MAAM,oBAAoB,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC1D,IAAI,oBAAoB,KAAK,sBAAsB,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,eAAe,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,mCAAmC;YAC1E,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CACjC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,IAAI;QAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACjD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAKhC;IACC,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,qCAAqC,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,oBAAoB,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,OAAO,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAClC,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB,CAAC,UAAkB;IACjD,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AACxE,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAiC;IACrE,MAAM,EACJ,cAAc,EACd,gBAAgB,EAChB,SAAS,EACT,kBAAkB,EAClB,kBAAkB,EAClB,QAAQ,GACT,GAAG,OAAO,CAAC;IACZ,IAAI,gBAAgB,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxE,OAAO,oBAAoB,CAAC,cAAc,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,QAAQ,IAAI,kBAAkB,EAAE,CAAC;QACpC,OAAO,oBAAoB,CAAC,cAAc,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,oBAAoB,CAAC,cAAc,EAAE,QAAQ,IAAI,SAAS,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,cAAsB;IAC5E,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9D,CAAC;IAED,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC5B,OAAO,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9D,CAAC;IAED,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC/D,CAAC;IAED,0EAA0E;IAC1E,OAAO,QAAQ,CAAC;AAClB,CAAC","sourcesContent":["import type { ConversationKind } from \"../types.js\";\nexport type { ResolveSessionKeyOptions } from \"./types.js\";\nimport type { ResolveSessionKeyOptions } from \"./types.js\";\n\n/**\n * The session-key grammar. A session key is the conversation-scoped runtime\n * identity used to serialize and resume work (see CONTEXT.md):\n *\n *   `conversationId`            — the persistent conversation session\n *   `conversationId:suffix`     — a scoped thread session (suffix = thread\n *                                 ts / message id, opaque to this module)\n *\n * This module owns the convention; nothing else may split on \":\". The grammar\n * only works because conversation ids never contain \":\" — that invariant is\n * asserted here at every derivation instead of being assumed everywhere.\n */\n\n/** Characters that can change host path structure or make identity logs ambiguous. */\nconst PATH_SEPARATOR_PATTERN = /[\\\\/]/;\n\nfunction containsControlCharacter(value: string): boolean {\n  for (const character of value) {\n    const codePoint = character.codePointAt(0)!;\n    if (codePoint <= 0x1f || codePoint === 0x7f) return true;\n  }\n  return false;\n}\n\nfunction assertSafeIdentityPart(value: string, label: string): string {\n  if (!value || value === \".\" || value === \"..\") {\n    throw new Error(`${label} must be a non-empty identity segment (got ${JSON.stringify(value)})`);\n  }\n  if (PATH_SEPARATOR_PATTERN.test(value)) {\n    throw new Error(`${label} must not contain path separators (got ${JSON.stringify(value)})`);\n  }\n  if (containsControlCharacter(value)) {\n    throw new Error(`${label} must not contain control characters (got ${JSON.stringify(value)})`);\n  }\n  return value;\n}\n\nexport function assertConversationId(conversationId: string): string {\n  assertSafeIdentityPart(conversationId, \"Conversation id\");\n  if (conversationId.includes(\":\")) {\n    throw new Error(\n      `Conversation id must not contain \":\" (got ${JSON.stringify(conversationId)}); ` +\n        \"the session-key grammar reserves it for thread suffixes\",\n    );\n  }\n  return conversationId;\n}\n\n/** Validate the opaque scoped suffix without changing its platform value. */\nexport function assertSessionSuffix(suffix: string): string {\n  return assertSafeIdentityPart(suffix, \"Session suffix\");\n}\n\n/** Build a scoped thread session key. */\nexport function makeThreadSessionKey(conversationId: string, suffix: string): string {\n  return `${assertConversationId(conversationId)}:${assertSessionSuffix(suffix)}`;\n}\n\n/**\n * Validate that a platform-computed session key belongs to its conversation.\n * The key may be the bare conversation id or one of that conversation's\n * scoped keys; callers must not be able to select another conversation's\n * runtime/cache entry.\n */\nexport function assertSessionKeyBelongsToConversation(\n  sessionKey: string,\n  conversationId: string,\n): string {\n  const expectedConversationId = assertConversationId(conversationId);\n  const actualConversationId = conversationIdOf(sessionKey);\n  if (actualConversationId !== expectedConversationId) {\n    throw new Error(\n      `Session key ${JSON.stringify(sessionKey)} does not belong to conversation ` +\n        JSON.stringify(conversationId),\n    );\n  }\n  const suffix = threadSuffixOf(sessionKey);\n  if (suffix !== null) assertSessionSuffix(suffix);\n  return sessionKey;\n}\n\n/**\n * The runtime fallback: honor a platform-computed session key, otherwise\n * scope the event to its thread (or to itself for thread-starting messages).\n */\nexport function deriveSessionKey(event: {\n  sessionKey?: string;\n  conversationId: string;\n  thread_ts?: string;\n  ts: string;\n}): string {\n  if (event.sessionKey !== undefined) {\n    return assertSessionKeyBelongsToConversation(event.sessionKey, event.conversationId);\n  }\n  return makeThreadSessionKey(event.conversationId, event.thread_ts ?? event.ts);\n}\n\nexport function isThreadSessionKey(sessionKey: string): boolean {\n  return sessionKey.includes(\":\");\n}\n\n/** The conversation a session key belongs to (identity for bare keys). */\nexport function conversationIdOf(sessionKey: string): string {\n  const separator = sessionKey.indexOf(\":\");\n  return separator === -1 ? sessionKey : sessionKey.slice(0, separator);\n}\n\n/** The thread suffix of a scoped key, or null for a bare conversation key. */\nexport function threadSuffixOf(sessionKey: string): string | null {\n  const separator = sessionKey.indexOf(\":\");\n  return separator === -1 ? null : sessionKey.slice(separator + 1);\n}\n\nexport function resolveChatSessionKey(options: ResolveSessionKeyOptions): string {\n  const {\n    conversationId,\n    conversationKind,\n    messageId,\n    persistentTopLevel,\n    scopeDirectThreads,\n    threadTs,\n  } = options;\n  if (conversationKind === \"direct\" && (!threadTs || !scopeDirectThreads)) {\n    return assertConversationId(conversationId);\n  }\n  if (!threadTs && persistentTopLevel) {\n    return assertConversationId(conversationId);\n  }\n  return makeThreadSessionKey(conversationId, threadTs || messageId);\n}\n\nexport function inferConversationKind(platform: string, conversationId: string): ConversationKind {\n  if (platform === \"slack\") {\n    return conversationId.startsWith(\"D\") ? \"direct\" : \"shared\";\n  }\n\n  if (platform === \"telegram\") {\n    return conversationId.startsWith(\"-\") ? \"shared\" : \"direct\";\n  }\n\n  if (platform === \"discord\") {\n    return conversationId.startsWith(\"DM\") ? \"direct\" : \"shared\";\n  }\n\n  // github: issues/PRs are always shared within the repo; there are no DMs.\n  return \"shared\";\n}\n"]}

package/dist/sessions/types.d.ts

@@ -1,4 +1,4 @@
-import type { ConversationKind } from "../adapter.js";
+import type { ConversationKind } from "../types.js";
 import type { AgentMessage, Entry, MessageEntry } from "@earendil-works/pi-agent-core";
 import type { ConversationLogMessage } from "../types.js";
 import type { SessionStore } from "./session-store.js";

package/dist/sessions/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/sessions/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AACvF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAIvD,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qFAAqF;IACrF,MAAM,CAAC,EAAE;QACP,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAID,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAID,2EAA2E;AAC3E,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,YAAY,EAAE,CAAC;CAC1B;AAED,8DAA8D;AAC9D,MAAM,MAAM,mBAAmB,GAAG,YAAY,CAAC;AAE/C,2EAA2E;AAC3E,MAAM,MAAM,YAAY,GAAG,KAAK,CAAC;AAEjC,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,MAAM,WAAW,iBAAiB;IAChC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,iFAAiF;AACjF,MAAM,WAAW,iBAAiB;IAChC,SAAS,IAAI,aAAa,CAAC;IAC3B,UAAU,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/B,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7C,mBAAmB,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;CAChD;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,iBAAiB,GAAG,IAAI,CAAC;CAC7C;AAED,+DAA+D;AAC/D,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,sBAAsB,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;CACf;AAID,0EAA0E;AAC1E,MAAM,WAAW,cAAc;IAC7B,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,8BAA8B;IAC7C,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2GAA2G;IAC3G,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,YAAY,CAAC;IAC7B,wGAAwG;IACxG,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,4BAA4B;IAC3C,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,6BAA6B;IAC5C,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,OAAO,CAAC;IAChC,eAAe,EAAE,MAAM,OAAO,CAAC;IAC/B,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAID,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,GAAG,YAAY,GAAG,SAAS,CAAC;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,GAAG,iBAAiB,GAAG,YAAY,CAAC;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/sessions/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AACvF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAIvD,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qFAAqF;IACrF,MAAM,CAAC,EAAE;QACP,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAID,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAID,2EAA2E;AAC3E,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,YAAY,EAAE,CAAC;CAC1B;AAED,8DAA8D;AAC9D,MAAM,MAAM,mBAAmB,GAAG,YAAY,CAAC;AAE/C,2EAA2E;AAC3E,MAAM,MAAM,YAAY,GAAG,KAAK,CAAC;AAEjC,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,MAAM,WAAW,iBAAiB;IAChC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,iFAAiF;AACjF,MAAM,WAAW,iBAAiB;IAChC,SAAS,IAAI,aAAa,CAAC;IAC3B,UAAU,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/B,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7C,mBAAmB,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;CAChD;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,iBAAiB,GAAG,IAAI,CAAC;CAC7C;AAED,+DAA+D;AAC/D,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,sBAAsB,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;CACf;AAID,0EAA0E;AAC1E,MAAM,WAAW,cAAc;IAC7B,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,8BAA8B;IAC7C,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2GAA2G;IAC3G,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,YAAY,CAAC;IAC7B,wGAAwG;IACxG,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,4BAA4B;IAC3C,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,6BAA6B;IAC5C,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,OAAO,CAAC;IAChC,eAAe,EAAE,MAAM,OAAO,CAAC;IAC/B,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAID,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,GAAG,YAAY,GAAG,SAAS,CAAC;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,GAAG,iBAAiB,GAAG,YAAY,CAAC;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}

package/dist/sessions/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/sessions/types.ts"],"names":[],"mappings":"AA8CA,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC","sourcesContent":["import type { ConversationKind } from \"../adapter.js\";\nimport type { AgentMessage, Entry, MessageEntry } from \"@earendil-works/pi-agent-core\";\nimport type { ConversationLogMessage } from \"../types.js\";\nimport type { SessionStore } from \"./session-store.js\";\n\n// ── session metadata ─────────────────────────────────────────────────────────\n\nexport interface MikanSessionHeader {\n  type?: string;\n  version?: number;\n  id?: string;\n  timestamp?: string;\n  cwd?: string;\n  parentSession?: string;\n  /** Legacy platform-history marker; preserved in mikan's durable session metadata. */\n  source?: {\n    kind?: string;\n    file?: string;\n    recentDays?: number;\n  };\n}\n\n// ── session policy ───────────────────────────────────────────────────────────\n\nexport interface ResolveSessionKeyOptions {\n  conversationId: string;\n  conversationKind: ConversationKind;\n  messageId: string;\n  threadTs?: string;\n  persistentTopLevel?: boolean;\n  scopeDirectThreads?: boolean;\n}\n\n// ── session store ────────────────────────────────────────────────────────────\n\n/** Model-visible messages reconstructed from the active session branch. */\nexport interface SessionContext {\n  messages: AgentMessage[];\n}\n\n/** Message entry as stored in mikan session files (Pi v4). */\nexport type SessionMessageEntry = MessageEntry;\n\n/** Union of entry types mikan reads and writes. Alias of Pi's v4 entry. */\nexport type SessionEntry = Entry;\n\nexport const CURRENT_SESSION_VERSION = 4;\n\nexport interface SessionCreateInfo {\n  id?: string;\n  parentSession?: string;\n  parentSessionId?: string;\n}\n\n/** Immutable session queries available to portals, admin, and migration code. */\nexport interface SessionInspection {\n  getHeader(): SessionHeader;\n  getEntries(): Promise<Entry[]>;\n  getSessionName(): Promise<string | undefined>;\n  getBranch(fromId?: string): Promise<Entry[]>;\n  buildSessionContext(): Promise<SessionContext>;\n}\n\n/**\n * Compatibility header view synthesized from the v4 file header for callers\n * that read mikan session lineage. `metadata` carries mikan header extras (for\n * example `parentSessionPath` and the legacy `source` marker preserved by\n * the v3 migration).\n */\nexport interface SessionHeader {\n  type: \"session\";\n  version?: number;\n  id: string;\n  timestamp: string;\n  cwd: string;\n  parentSession?: string;\n  parentSessionId?: string;\n  [extra: string]: unknown;\n}\n\nexport interface ParentSessionRef {\n  path: string;\n  id: string;\n}\n\nexport interface ThreadRootMessage {\n  text?: string;\n  userName?: string;\n  user?: string;\n  loggedAt?: number;\n  isMessagingBot?: boolean;\n}\n\nexport interface ResolvedSessionScope {\n  sessionDir: string;\n  contextFile: string;\n  threadRootMessage: ThreadRootMessage | null;\n}\n\n/** One parsed log.jsonl entry with its original line index. */\nexport interface LogRecord {\n  message: ConversationLogMessage;\n  index: number;\n}\n\n// ── chat history sync ────────────────────────────────────────────────────────\n\n/** What one sync pass actually did — the inspectable result of a sync. */\nexport interface ChatSyncReport {\n  /** Log messages appended to the session in this pass. */\n  appended: number;\n  /** The log message id recorded as the new sync watermark. */\n  lastMessageId?: string;\n}\n\nexport interface ChatHistorySyncOptions {\n  recentDays?: number;\n  maxTopLevelMessages?: number;\n  now?: () => Date;\n}\n\nexport interface ResolveChatSessionScopeOptions {\n  conversationDir: string;\n  sessionKey: string;\n  cwd?: string;\n  /** The triggering platform message ID. History is capped before this turn to avoid future queued turns. */\n  currentMessageId?: string;\n}\n\nexport interface SyncChatSessionOptions {\n  conversationDir: string;\n  sessionKey: string;\n  sessionManager: SessionStore;\n  /** The triggering platform message ID. Sync is capped before this turn to avoid future queued turns. */\n  currentMessageId?: string;\n}\n\nexport interface ResetChatSessionOptions {\n  conversationDir: string;\n  sessionKey: string;\n  cwd?: string;\n}\n\nexport interface RegisterThreadSessionOptions {\n  conversationDir: string;\n  sessionKey: string;\n  cwd?: string;\n}\n\nexport interface HasMaterializedSessionOptions {\n  conversationDir: string;\n  sessionKey: string;\n}\n\nexport interface ThreadBootstrapWaitOptions {\n  parentSessionKey: string;\n  sessionKey: string;\n  hasThreadSession: () => boolean;\n  isParentRunning: () => boolean;\n  sleep?: (ms: number) => Promise<void>;\n  pollMs?: number;\n}\n\n// ── v3 migration ─────────────────────────────────────────────────────────────\n\nexport interface MigrateResult {\n  file: string;\n  status: \"migrated\" | \"already-v4\" | \"skipped\";\n  detail?: string;\n}\n\nexport interface Pi084MigrationResult {\n  file: string;\n  status: \"migrated\" | \"already-current\" | \"not-pi-084\";\n  detail?: string;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/sessions/types.ts"],"names":[],"mappings":"AA8CA,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC","sourcesContent":["import type { ConversationKind } from \"../types.js\";\nimport type { AgentMessage, Entry, MessageEntry } from \"@earendil-works/pi-agent-core\";\nimport type { ConversationLogMessage } from \"../types.js\";\nimport type { SessionStore } from \"./session-store.js\";\n\n// ── session metadata ─────────────────────────────────────────────────────────\n\nexport interface MikanSessionHeader {\n  type?: string;\n  version?: number;\n  id?: string;\n  timestamp?: string;\n  cwd?: string;\n  parentSession?: string;\n  /** Legacy platform-history marker; preserved in mikan's durable session metadata. */\n  source?: {\n    kind?: string;\n    file?: string;\n    recentDays?: number;\n  };\n}\n\n// ── session policy ───────────────────────────────────────────────────────────\n\nexport interface ResolveSessionKeyOptions {\n  conversationId: string;\n  conversationKind: ConversationKind;\n  messageId: string;\n  threadTs?: string;\n  persistentTopLevel?: boolean;\n  scopeDirectThreads?: boolean;\n}\n\n// ── session store ────────────────────────────────────────────────────────────\n\n/** Model-visible messages reconstructed from the active session branch. */\nexport interface SessionContext {\n  messages: AgentMessage[];\n}\n\n/** Message entry as stored in mikan session files (Pi v4). */\nexport type SessionMessageEntry = MessageEntry;\n\n/** Union of entry types mikan reads and writes. Alias of Pi's v4 entry. */\nexport type SessionEntry = Entry;\n\nexport const CURRENT_SESSION_VERSION = 4;\n\nexport interface SessionCreateInfo {\n  id?: string;\n  parentSession?: string;\n  parentSessionId?: string;\n}\n\n/** Immutable session queries available to portals, admin, and migration code. */\nexport interface SessionInspection {\n  getHeader(): SessionHeader;\n  getEntries(): Promise<Entry[]>;\n  getSessionName(): Promise<string | undefined>;\n  getBranch(fromId?: string): Promise<Entry[]>;\n  buildSessionContext(): Promise<SessionContext>;\n}\n\n/**\n * Compatibility header view synthesized from the v4 file header for callers\n * that read mikan session lineage. `metadata` carries mikan header extras (for\n * example `parentSessionPath` and the legacy `source` marker preserved by\n * the v3 migration).\n */\nexport interface SessionHeader {\n  type: \"session\";\n  version?: number;\n  id: string;\n  timestamp: string;\n  cwd: string;\n  parentSession?: string;\n  parentSessionId?: string;\n  [extra: string]: unknown;\n}\n\nexport interface ParentSessionRef {\n  path: string;\n  id: string;\n}\n\nexport interface ThreadRootMessage {\n  text?: string;\n  userName?: string;\n  user?: string;\n  loggedAt?: number;\n  isMessagingBot?: boolean;\n}\n\nexport interface ResolvedSessionScope {\n  sessionDir: string;\n  contextFile: string;\n  threadRootMessage: ThreadRootMessage | null;\n}\n\n/** One parsed log.jsonl entry with its original line index. */\nexport interface LogRecord {\n  message: ConversationLogMessage;\n  index: number;\n}\n\n// ── chat history sync ────────────────────────────────────────────────────────\n\n/** What one sync pass actually did — the inspectable result of a sync. */\nexport interface ChatSyncReport {\n  /** Log messages appended to the session in this pass. */\n  appended: number;\n  /** The log message id recorded as the new sync watermark. */\n  lastMessageId?: string;\n}\n\nexport interface ChatHistorySyncOptions {\n  recentDays?: number;\n  maxTopLevelMessages?: number;\n  now?: () => Date;\n}\n\nexport interface ResolveChatSessionScopeOptions {\n  conversationDir: string;\n  sessionKey: string;\n  cwd?: string;\n  /** The triggering platform message ID. History is capped before this turn to avoid future queued turns. */\n  currentMessageId?: string;\n}\n\nexport interface SyncChatSessionOptions {\n  conversationDir: string;\n  sessionKey: string;\n  sessionManager: SessionStore;\n  /** The triggering platform message ID. Sync is capped before this turn to avoid future queued turns. */\n  currentMessageId?: string;\n}\n\nexport interface ResetChatSessionOptions {\n  conversationDir: string;\n  sessionKey: string;\n  cwd?: string;\n}\n\nexport interface RegisterThreadSessionOptions {\n  conversationDir: string;\n  sessionKey: string;\n  cwd?: string;\n}\n\nexport interface HasMaterializedSessionOptions {\n  conversationDir: string;\n  sessionKey: string;\n}\n\nexport interface ThreadBootstrapWaitOptions {\n  parentSessionKey: string;\n  sessionKey: string;\n  hasThreadSession: () => boolean;\n  isParentRunning: () => boolean;\n  sleep?: (ms: number) => Promise<void>;\n  pollMs?: number;\n}\n\n// ── v3 migration ─────────────────────────────────────────────────────────────\n\nexport interface MigrateResult {\n  file: string;\n  status: \"migrated\" | \"already-v4\" | \"skipped\";\n  detail?: string;\n}\n\nexport interface Pi084MigrationResult {\n  file: string;\n  status: \"migrated\" | \"already-current\" | \"not-pi-084\";\n  detail?: string;\n}\n"]}

package/dist/{settings-mutation.d.ts → settings/apply.d.ts}

@@ -1,6 +1,6 @@
-import type { Office } from "./office/index.js";
-import type { AgentConfig, GlobalRunnerCacheControl, OfficeAddress, RunnerCacheControl, SettingsApplyResult } from "./types.js";
-export type { GlobalRunnerCacheControl, RunnerCacheControl, SettingsApplyResult } from "./types.js";
+import type { Office } from "../office/index.js";
+import type { AgentConfig, GlobalRunnerCacheControl, OfficeAddress, RunnerCacheControl, SettingsApplyResult } from "../types.js";
+export type { GlobalRunnerCacheControl, RunnerCacheControl, SettingsApplyResult, } from "../types.js";
 export declare function applyConversationSettings(runtime: RunnerCacheControl | undefined, office: Office, patch: Partial<AgentConfig>): SettingsApplyResult;
 export declare function applyGlobalSettings(runtime: GlobalRunnerCacheControl | undefined, patch: Partial<AgentConfig>): {
     ok: true;
@@ -13,4 +13,4 @@ export declare function applyGlobalSettings(runtime: GlobalRunnerCacheControl |
  * the next message when its mount signature no longer matches.
  */
 export declare function applyOfficeVisibility(runtime: RunnerCacheControl | undefined, office: Office, visibility: "private" | null): SettingsApplyResult;
-//# sourceMappingURL=settings-mutation.d.ts.map
+//# sourceMappingURL=apply.d.ts.map

package/dist/settings/apply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../src/settings/apply.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EACV,WAAW,EACX,wBAAwB,EACxB,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,wBAAwB,EACxB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAcrB,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,kBAAkB,GAAG,SAAS,EACvC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,GAC1B,mBAAmB,CAYrB;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,wBAAwB,GAAG,SAAS,EAC7C,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,kBAAkB,EAAE,aAAa,EAAE,CAAA;CAAE,CAKnD;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,kBAAkB,GAAG,SAAS,EACvC,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,SAAS,GAAG,IAAI,GAC3B,mBAAmB,CAMrB"}

package/dist/{settings-mutation.js → settings/apply.js}

@@ -16,7 +16,7 @@
  *   their old runner until it settles, are reported as stale, and are cleared
  *   automatically before their next turn.
  */
-import { setOfficeVisibilityOverride, updateConversationSettings, updateGlobalSettings, } from "./config.js";
+import { setOfficeVisibilityOverride, updateConversationSettings, updateGlobalSettings, } from "./index.js";
 /** True when a patch touches keys a cached session runner bakes in. */
 function affectsCachedRunner(patch) {
     return (patch.provider !== undefined ||
@@ -57,4 +57,4 @@ export function applyOfficeVisibility(runtime, office, visibility) {
     setOfficeVisibilityOverride(office, visibility);
     return { ok: true, runtimeSwitched: runtime ? true : null };
 }
-//# sourceMappingURL=settings-mutation.js.map
+//# sourceMappingURL=apply.js.map

package/dist/settings/apply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.js","sourceRoot":"","sources":["../../src/settings/apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EACL,2BAA2B,EAC3B,0BAA0B,EAC1B,oBAAoB,GACrB,MAAM,YAAY,CAAC;AAgBpB,uEAAuE;AACvE,SAAS,mBAAmB,CAAC,KAA2B;IACtD,OAAO,CACL,KAAK,CAAC,QAAQ,KAAK,SAAS;QAC5B,KAAK,CAAC,KAAK,KAAK,SAAS;QACzB,KAAK,CAAC,aAAa,KAAK,SAAS;QACjC,uEAAuE;QACvE,uCAAuC;QACvC,KAAK,CAAC,UAAU,KAAK,SAAS,CAC/B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAuC,EACvC,MAAc,EACd,KAA2B;IAE3B,IAAI,eAAe,GAAmB,IAAI,CAAC;IAC3C,IAAI,mBAAmB,CAAC,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QAC1C,wEAAwE;QACxE,iEAAiE;QACjE,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;YAC9F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACvC,CAAC;QACD,eAAe,GAAG,IAAI,CAAC;IACzB,CAAC;IACD,0BAA0B,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC1C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAA6C,EAC7C,KAA2B;IAE3B,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,kBAAkB,GACtB,mBAAmB,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAuB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAuC,EACvC,MAAc,EACd,UAA4B;IAE5B,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,8BAA8B,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACvE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACvC,CAAC;IACD,2BAA2B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC9D,CAAC","sourcesContent":["/**\n * The one writer seam for settings mutations that affect live conversations.\n * Chat commands (/model, /sandbox) and the Admin portal are adapters here;\n * none of them call updateConversationSettings/updateGlobalSettings directly\n * for these keys anymore.\n *\n * Policy, uniform across all adapters:\n * - llm.* changes bake into cached session runners, so a conversation-scoped\n *   change clears the conversation's cached runners BEFORE writing — and\n *   refuses (no write, no clear) while the conversation has a running job.\n *   Disk and cache never disagree.\n * - Other keys (sandbox mount, slack replyMode, limits) are re-read at use\n *   time and write without touching runners.\n * - Global changes always write (the Admin default surface), then clear every\n *   idle conversation's cached runners; conversations that were busy keep\n *   their old runner until it settles, are reported as stale, and are cleared\n *   automatically before their next turn.\n */\nimport {\n  setOfficeVisibilityOverride,\n  updateConversationSettings,\n  updateGlobalSettings,\n} from \"./index.js\";\nimport type { Office } from \"../office/index.js\";\nimport type {\n  AgentConfig,\n  GlobalRunnerCacheControl,\n  OfficeAddress,\n  RunnerCacheControl,\n  SettingsApplyResult,\n} from \"../types.js\";\n\nexport type {\n  GlobalRunnerCacheControl,\n  RunnerCacheControl,\n  SettingsApplyResult,\n} from \"../types.js\";\n\n/** True when a patch touches keys a cached session runner bakes in. */\nfunction affectsCachedRunner(patch: Partial<AgentConfig>): boolean {\n  return (\n    patch.provider !== undefined ||\n    patch.model !== undefined ||\n    patch.thinkingLevel !== undefined ||\n    // MCP tools are connected when the runner is built, so a server change\n    // only takes effect on a fresh runner.\n    patch.mcpServers !== undefined\n  );\n}\n\nexport function applyConversationSettings(\n  runtime: RunnerCacheControl | undefined,\n  office: Office,\n  patch: Partial<AgentConfig>,\n): SettingsApplyResult {\n  let runtimeSwitched: boolean | null = null;\n  if (affectsCachedRunner(patch) && runtime) {\n    // Clear-or-refuse before writing. The clear and the write happen in the\n    // same synchronous tick, so no runner can be created in between.\n    if (!runtime.switchConversationModel(office.address, patch.provider ?? \"\", patch.model ?? \"\")) {\n      return { ok: false, reason: \"busy\" };\n    }\n    runtimeSwitched = true;\n  }\n  updateConversationSettings(office, patch);\n  return { ok: true, runtimeSwitched };\n}\n\nexport function applyGlobalSettings(\n  runtime: GlobalRunnerCacheControl | undefined,\n  patch: Partial<AgentConfig>,\n): { ok: true; staleConversations: OfficeAddress[] } {\n  updateGlobalSettings(patch);\n  const staleConversations =\n    affectsCachedRunner(patch) && runtime ? runtime.refreshAllConversations().busy : [];\n  return { ok: true, staleConversations };\n}\n\n/**\n * Visibility changes follow the same clear-or-refuse contract as model\n * changes: the system prompt bakes the workspace projection, so the cached\n * runner must clear before the write, and the container is re-provisioned on\n * the next message when its mount signature no longer matches.\n */\nexport function applyOfficeVisibility(\n  runtime: RunnerCacheControl | undefined,\n  office: Office,\n  visibility: \"private\" | null,\n): SettingsApplyResult {\n  if (runtime && !runtime.refreshConversationEnvironment(office.address)) {\n    return { ok: false, reason: \"busy\" };\n  }\n  setOfficeVisibilityOverride(office, visibility);\n  return { ok: true, runtimeSwitched: runtime ? true : null };\n}\n"]}

package/dist/settings/index.d.ts

@@ -0,0 +1,118 @@
+import { type Static } from "@sinclair/typebox";
+export declare class MissingGlobalSettingsError extends Error {
+    readonly settingsPath: string;
+    constructor(settingsPath: string);
+}
+export type { AgentConfig, SandboxSettings } from "../types.js";
+import type { AgentConfig } from "../types.js";
+import type { McpServerConfig } from "../harness/types.js";
+import type { OnboardLlmChoice } from "../types.js";
+import type { Office } from "../office/index.js";
+declare const SettingsFileSchema: import("@sinclair/typebox").TObject<{
+    llm: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        provider: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        model: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        thinkingLevel: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"off">, import("@sinclair/typebox").TLiteral<"minimal">, import("@sinclair/typebox").TLiteral<"low">, import("@sinclair/typebox").TLiteral<"medium">, import("@sinclair/typebox").TLiteral<"high">, import("@sinclair/typebox").TLiteral<"xhigh">, import("@sinclair/typebox").TLiteral<"max">]>>;
+    }>>;
+    sentry: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        dsn: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    }>>;
+    slack: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        replyMode: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"top-level">, import("@sinclair/typebox").TLiteral<"thread">]>>;
+    }>>;
+    /**
+     * Conversation-only office policy. `visibility: "private"` marks a
+     * platform-public conversation as private; nothing can widen visibility
+     * beyond what the platform grants, so "public" is never stored here.
+     */
+    office: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        visibility: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TLiteral<"private">>;
+    }>>;
+    sandbox: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        cpus: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        memory: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        boost: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+            cpus: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+            memory: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        }>>;
+        /**
+         * Retired door-policy keys (ADR 0008). Still accepted so existing files
+         * load, never copied into AgentConfig, and removed by
+         * `mikan office migrate-door-policy`.
+         */
+        image: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+            workspaceMount: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"private">, import("@sinclair/typebox").TLiteral<"full">]>>;
+        }>>;
+        workspace: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+            doorPolicy: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"isolated">, import("@sinclair/typebox").TLiteral<"trusted">]>>;
+            layout: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"conversation">, import("@sinclair/typebox").TLiteral<"shared-support">, import("@sinclair/typebox").TLiteral<"full">]>>;
+            visibility: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"public">, import("@sinclair/typebox").TLiteral<"private">]>>;
+        }>>;
+        defaultSharedVault: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    }>>;
+    /**
+     * MCP servers, keyed by name. Merged per key across scopes: a conversation
+     * entry overrides (or, with `disabled: true`, turns off) the same-name
+     * global entry; other global entries stay available. `open-connector` is an
+     * ordinary entry that the host fills in from `OPENCONNECTOR_ENDPOINT` when
+     * neither scope declares it (see `src/harness/open-connector.ts`).
+     */
+    mcpServers: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TObject<{
+        command: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        args: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+        env: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TString>>;
+        url: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        headers: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TString>>;
+        disabled: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
+    }>>>;
+}>;
+export type SettingsFileConfig = Static<typeof SettingsFileSchema>;
+export type SandboxFileSettings = NonNullable<SettingsFileConfig["sandbox"]>;
+export declare function loadSettingsFile(settingsPath: string): SettingsFileConfig | undefined;
+export declare function loadGlobalSettings(): AgentConfig;
+/**
+ * Host-authoritative location of a conversation's settings file:
+ * `<office state dir>/settings.json`. The Office value names both the
+ * state-dir key and the legacy pre-host-migration location (its workspace
+ * dir) — the key is never inferred from a directory basename.
+ *
+ * Conversation settings used to live at `<conversationDir>/settings.json`,
+ * but conversation dirs are bind-mounted read-write into sandbox containers
+ * in image mode — code inside the sandbox could edit its own settings.json
+ * and flip `sandbox.image.workspaceMount` to "full", remounting the entire
+ * workspace into its container (cross-conversation access). Settings are an
+ * administrator surface, so they live under the host-only state dir.
+ *
+ * Migration: on first access per conversation, a legacy
+ * `<conversationDir>/settings.json` is moved here. The new file's existence
+ * (an empty `{}` is written when there is nothing to migrate) is the
+ * migration marker — a legacy file (re)appearing later, e.g. planted from
+ * inside the sandbox, is never read again.
+ */
+export declare function conversationSettingsPath(office: Office): string;
+export declare function slackConversationAutoReplyEnabled(office: Office): boolean;
+export declare function setSlackConversationAutoReply(office: Office, enabled: boolean): void;
+export declare function resolveConversationSettings(office: Office): AgentConfig;
+export declare function resolveSentryDsn(): string | undefined;
+export declare function createGlobalSettingsFile(stateDir: string, llm?: OnboardLlmChoice): string;
+export declare function hasDefinedValue(values: Record<string, unknown> | undefined): boolean;
+export declare function compactSettingsConfig(config: SettingsFileConfig): SettingsFileConfig;
+export declare function updateGlobalSettings(patch: Partial<AgentConfig>): void;
+export declare function updateConversationSettings(office: Office, patch: Partial<AgentConfig>): void;
+/**
+ * The two scope-level MCP server maps, unmerged: the portal edits each scope's
+ * own file, so it needs the raw per-scope values, not the effective merge
+ * (`resolveConversationSettings` owns that).
+ */
+export declare function loadScopeMcpServers(office: Office): {
+    global: Record<string, McpServerConfig>;
+    conversation: Record<string, McpServerConfig>;
+};
+/**
+ * The conversation's own visibility override, or null when it follows the
+ * platform. Only "private" can be stored: an operator may narrow a public
+ * channel, never widen a private one (see ADR 0008).
+ */
+export declare function loadOfficeVisibilityOverride(office: Office): "private" | null;
+export declare function setOfficeVisibilityOverride(office: Office, visibility: "private" | null): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/settings/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/settings/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAQ,KAAK,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAYtD,qBAAa,0BAA2B,SAAQ,KAAK;aACvB,YAAY,EAAE,MAAM;IAAhD,YAA4B,YAAY,EAAE,MAAM,EAG/C;CACF;AAED,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAmB,MAAM,aAAa,CAAC;AAChE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAwBjD,QAAA,MAAM,kBAAkB;;;;;;;;;;;;IA4BtB;;;;OAIG;;;;;;;;;;;QAgBC;;;;WAIG;;;;;;;;;;;IA0BP;;;;;;OAMG;;;;;;;;;EAcH,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACnE,MAAM,MAAM,mBAAmB,GAAG,WAAW,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC;AAE7E,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAMrF;AAiGD,wBAAgB,kBAAkB,IAAI,WAAW,CAEhD;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CA6B/D;AAiBD,wBAAgB,iCAAiC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEzE;AAED,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAcpF;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAiBvE;AAOD,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAGrD;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAkBzF;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,OAAO,CAEpF;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,kBAAkB,GAAG,kBAAkB,CAUpF;AAiED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAEtE;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAE5F;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG;IACnD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACxC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;CAC/C,CAKA;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAE7E;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,GAAG,IAAI,GAAG,IAAI,CAa9F"}

package/dist/{config.js → settings/index.js}

@@ -1,11 +1,10 @@
 import { Type } from "@sinclair/typebox";
 import { existsSync, lstatSync, readFileSync, renameSync, rmSync } from "node:fs";
-import { dirname, join, resolve } from "node:path";
-import { effectiveStateDir } from "./cli/arg-grammar.js";
-import { readEnv } from "./env-manifest.js";
-import { ensureDirExists, readJsonSchemaFileIfExists } from "./file-guards.js";
-import { atomicWritePrivateFile } from "./file-guards.js";
-import * as log from "./log.js";
+import { dirname, join } from "node:path";
+import { effectiveStateDir } from "../cli/arg-grammar.js";
+import { readEnv } from "../env-manifest.js";
+import { atomicWritePrivateFile, ensureDirExists, readJsonSchemaFileIfExists, } from "../file-guards.js";
+import * as log from "../log.js";
 export class MissingGlobalSettingsError extends Error {
     constructor(settingsPath) {
         super(`Missing global settings file at ${settingsPath}`);
@@ -13,7 +12,6 @@ export class MissingGlobalSettingsError extends Error {
         this.name = "MissingGlobalSettingsError";
     }
 }
-import { listRegisteredOffices } from "./office/index.js";
 const ONBOARD_SETTINGS = {
     llm: {
         provider: "anthropic",
@@ -105,7 +103,7 @@ const SettingsFileSchema = Type.Object({
         disabled: Type.Optional(Type.Boolean()),
     }))),
 });
-function loadSettingsFile(settingsPath) {
+export function loadSettingsFile(settingsPath) {
     return readJsonSchemaFileIfExists(settingsPath, SettingsFileSchema, (detail) => detail === "unexpected JSON shape"
         ? `Malformed settings file at ${settingsPath}: expected a JSON object at the top level`
         : `Malformed settings file at ${settingsPath}: ${detail}`);
@@ -292,35 +290,6 @@ export function resolveConversationSettings(office) {
         ...(Object.keys(mcpServers).length > 0 ? { mcpServers } : {}),
     });
 }
-/**
- * True when `child` is `parent` or a path inside it. Purely lexical (no
- * symlink resolution) — used for configuration sanity checks, not as the
- * final security boundary.
- */
-export function isPathInside(child, parent) {
-    const parentPath = resolve(parent);
-    const childPath = resolve(child);
-    return childPath === parentPath || childPath.startsWith(parentPath + "/");
-}
-/**
- * The state dir (settings, office records, vaults) must never live inside
- * the working dir: conversation opt-in "full" mode mounts the entire working
- * dir read-write into sandbox containers, which would expose host-authoritative
- * state and credentials. Fatal under sandboxed modes; host mode has no mounts,
- * so only warn about the bad hygiene.
- */
-export function assertStateDirOutsideWorkspace(stateDir, workingDir, sandboxType) {
-    if (!isPathInside(stateDir, workingDir))
-        return;
-    const message = `--state-dir (${stateDir}) must not be inside the working directory (${workingDir}): ` +
-        `sandbox containers mount the working directory, and a mounted state dir ` +
-        `would expose settings, office records, vaults, and credentials to sandboxed code.`;
-    if (sandboxType === "host") {
-        log.logWarning("Insecure state dir location", message);
-        return;
-    }
-    throw new Error(message);
-}
 /** Settings-file DSN wins over SENTRY_DSN env — the rule lives only here. */
 function sentryDsnFrom(fromFile) {
     return fromFile || readEnv("SENTRY_DSN");
@@ -348,21 +317,10 @@ export function createGlobalSettingsFile(stateDir, llm) {
     atomicWritePrivateFile(settingsPath, JSON.stringify(settings, null, 2));
     return settingsPath;
 }
-/**
- * Externally-visible base URL of the link/OAuth server, e.g.
- * `https://mikan.example.com` (no trailing slash). Read from `LINK_URL` or
- * `MIKAN_LINK_URL`, the same env var the bot uses to build credential onboarding links.
- */
-export function resolveLinkBaseUrl() {
-    const raw = readEnv("LINK_URL");
-    if (!raw)
-        return undefined;
-    return raw.replace(/\/+$/, "");
-}
-function hasDefinedValue(values) {
+export function hasDefinedValue(values) {
     return values !== undefined && Object.values(values).some((value) => value !== undefined);
 }
-function compactSettingsConfig(config) {
+export function compactSettingsConfig(config) {
     return {
         ...(hasDefinedValue(config.llm) ? { llm: config.llm } : {}),
         ...(hasDefinedValue(config.sentry) ? { sentry: config.sentry } : {}),
@@ -454,80 +412,4 @@ export function setOfficeVisibilityOverride(office, visibility) {
     ensureDirExists(dirname(settingsPath));
     atomicWritePrivateFile(settingsPath, JSON.stringify(compactSettingsConfig({ ...rest, ...(visibility ? { office: { visibility } } : {}) }), null, 2));
 }
-const RETIRED_KEYS = {
-    image: "sandbox.image.workspaceMount",
-    workspace: "sandbox.workspace",
-};
-/**
- * Strip the retired door-policy keys from one settings file. Returns the
- * removed key paths, or an empty list when nothing had to change (the file is
- * then left byte-for-byte alone, which also preserves `{}` migration markers).
- * The only value carried forward is an explicit shared-support `private`
- * visibility, which maps onto `office.visibility` (ADR 0008). Every other
- * retired combination — `full`, `isolated`, legacy `private` — is dropped
- * without deriving a grant.
- */
-function stripRetiredDoorPolicy(settingsPath, allowVisibilityCarry) {
-    const existing = loadSettingsFile(settingsPath);
-    if (!existing?.sandbox)
-        return { removed: [] };
-    const { image, workspace, ...sandboxRest } = existing.sandbox;
-    const removed = [];
-    if (image?.workspaceMount !== undefined)
-        removed.push(RETIRED_KEYS.image);
-    if (workspace !== undefined)
-        removed.push(RETIRED_KEYS.workspace);
-    if (removed.length === 0)
-        return { removed };
-    const carry = allowVisibilityCarry &&
-        workspace?.doorPolicy === "trusted" &&
-        workspace.layout !== "full" &&
-        workspace.visibility === "private";
-    const { workspaceMount: _mount, ...imageRest } = image ?? {};
-    const sandbox = {
-        ...sandboxRest,
-        ...(hasDefinedValue(imageRest) ? { image: imageRest } : {}),
-    };
-    const next = {
-        ...existing,
-        sandbox,
-        ...(carry ? { office: { ...existing.office, visibility: "private" } } : {}),
-    };
-    atomicWritePrivateFile(settingsPath, JSON.stringify(compactSettingsConfig(next), null, 2));
-    return { removed, ...(carry ? { visibility: "private" } : {}) };
-}
-/**
- * One-time removal of the retired door-policy settings from the global file
- * and every registered office (ADR 0008). Run with the daemon stopped.
- */
-export function migrateLegacyDoorPolicy(workspace) {
-    const report = { global: [], conversations: [], skipped: [] };
-    try {
-        report.global = stripRetiredDoorPolicy(join(workspace.stateDir, "settings.json"), false).removed;
-    }
-    catch (error) {
-        report.skipped.push({
-            key: "global",
-            reason: error instanceof Error ? error.message : String(error),
-        });
-    }
-    for (const record of listRegisteredOffices(workspace.stateDir)) {
-        const office = workspace.office(record);
-        const settingsPath = join(office.stateDir, "settings.json");
-        if (!existsSync(settingsPath))
-            continue;
-        try {
-            const result = stripRetiredDoorPolicy(settingsPath, true);
-            if (result.removed.length > 0)
-                report.conversations.push({ key: office.key, ...result });
-        }
-        catch (error) {
-            report.skipped.push({
-                key: office.key,
-                reason: error instanceof Error ? error.message : String(error),
-            });
-        }
-    }
-    return report;
-}
-//# sourceMappingURL=config.js.map
+//# sourceMappingURL=index.js.map

package/dist/settings/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/settings/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAe,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAClF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,GAAG,MAAM,WAAW,CAAC;AAEjC,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD,YAA4B,YAAoB;QAC9C,KAAK,CAAC,mCAAmC,YAAY,EAAE,CAAC,CAAC;4BAD/B,YAAY;QAEtC,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAQD,MAAM,gBAAgB,GAAuB;IAC3C,GAAG,EAAE;QACH,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,mBAAmB;QAC1B,aAAa,EAAE,KAAK;KACrB;IACD,KAAK,EAAE;QACL,SAAS,EAAE,WAAW;KACvB;IACD,OAAO,EAAE;QACP,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE;YACL,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,IAAI;SACb;QACD,mEAAmE;QACnE,qEAAqE;QACrE,kBAAkB,EAAE,EAAE;KACvB;CACF,CAAC;AAEF,MAAM,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC;IACrC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAChB,IAAI,CAAC,MAAM,CAAC;QACV,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACtC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACnC,aAAa,EAAE,IAAI,CAAC,QAAQ,CAC1B,IAAI,CAAC,KAAK,CAAC;YACT,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YACnB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YACvB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YACnB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YACtB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YACpB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;SACpB,CAAC,CACH;KACF,CAAC,CACH;IACD,MAAM,EAAE,IAAI,CAAC,QAAQ,CACnB,IAAI,CAAC,MAAM,CAAC;QACV,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;KAClC,CAAC,CACH;IACD,KAAK,EAAE,IAAI,CAAC,QAAQ,CAClB,IAAI,CAAC,MAAM,CAAC;QACV,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;KAC1F,CAAC,CACH;IACD;;;;OAIG;IACH,MAAM,EAAE,IAAI,CAAC,QAAQ,CACnB,IAAI,CAAC,MAAM,CAAC;QACV,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;KACnD,CAAC,CACH;IACD,OAAO,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,MAAM,CAAC;QACV,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACpC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAClB,IAAI,CAAC,MAAM,CAAC;YACV,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;SACrC,CAAC,CACH;QACD;;;;WAIG;QACH,KAAK,EAAE,IAAI,CAAC,QAAQ,CAClB,IAAI,CAAC,MAAM,CAAC;YACV,cAAc,EAAE,IAAI,CAAC,QAAQ,CAC3B,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAC5D;SACF,CAAC,CACH;QACD,SAAS,EAAE,IAAI,CAAC,QAAQ,CACtB,IAAI,CAAC,MAAM,CAAC;YACV,UAAU,EAAE,IAAI,CAAC,QAAQ,CACvB,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAChE;YACD,MAAM,EAAE,IAAI,CAAC,QAAQ,CACnB,IAAI,CAAC,KAAK,CAAC;gBACT,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;gBAC5B,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;gBAC9B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;aACrB,CAAC,CACH;YACD,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;SACzF,CAAC,CACH;QACD,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;KACjD,CAAC,CACH;IACD;;;;;;OAMG;IACH,UAAU,EAAE,IAAI,CAAC,QAAQ,CACvB,IAAI,CAAC,MAAM,CACT,IAAI,CAAC,MAAM,EAAE,EACb,IAAI,CAAC,MAAM,CAAC;QACV,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACrC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9C,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7D,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACjE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;KACxC,CAAC,CACH,CACF;CACF,CAAC,CAAC;AAKH,MAAM,UAAU,gBAAgB,CAAC,YAAoB;IACnD,OAAO,0BAA0B,CAAC,YAAY,EAAE,kBAAkB,EAAE,CAAC,MAAM,EAAE,EAAE,CAC7E,MAAM,KAAK,uBAAuB;QAChC,CAAC,CAAC,8BAA8B,YAAY,2CAA2C;QACvF,CAAC,CAAC,8BAA8B,YAAY,KAAK,MAAM,EAAE,CAC5D,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,MAA0B;IACzD,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,OAA4B;IAC5D,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IAC9D,0EAA0E;IAC1E,wEAAwE;IACxE,OAAO;QACL,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAC3B,IAAiC,EACjC,QAAqC;IAErC,IAAI,CAAC,IAAI;QAAE,OAAO,QAAQ,CAAC;IAC3B,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO;QACL,GAAG,IAAI;QACP,GAAG,QAAQ;QACX,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,IAAI,CAAC,iBAAiB,EAAE,EAAE,eAAe,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,qBAAqB;IAC5B,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,0BAA0B,CAAC,YAAY,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB,EAAE,IAAY;IAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,oCAAoC,IAAI,oDAAoD,CAC7F,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,QAA8B;IACnD,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,aAAa,CAAC,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAkB,CAAC;IAClG,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;IAEvC,OAAO;QACL,QAAQ;QACR,KAAK;QACL,aAAa;QACb,SAAS;QACT,OAAO;QACP,KAAK;QACL,UAAU;KACX,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB;IAC5B,OAAO,uBAAuB,CAAC,qBAAqB,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,aAAa,CAAC,qBAAqB,EAAE,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACxD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,kBAAkB,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC;QAC3D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACrD,IAAI,OAAO,GAAG,MAAM,CAAC;IACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,kBAAkB,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;QAC/D,OAAO,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC5C,qEAAqE;QACrE,yDAAyD;QACzD,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC7B,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IACD,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,CAAC,UAAU,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,UAAU,CAAC,kDAAkD,UAAU,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9F,CAAC;QACD,GAAG,CAAC,OAAO,CAAC,qDAAqD,QAAQ,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,KAAa;IACrD,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yBAAyB,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wCAAwC,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,MAAM,eAAe,GAAG,YAAY,CAAC;AACrC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAEvD,MAAM,UAAU,iCAAiC,CAAC,MAAc;IAC9D,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,MAAc,EAAE,OAAgB;IAC5E,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC;IACxD,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;IAEvD,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAClC,OAAO;IACT,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACvC,sBAAsB,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAc;IACxD,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAC7C,MAAM,kBAAkB,GAAG,uBAAuB,CAChD,gBAAgB,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CACzD,CAAC;IACF,6EAA6E;IAC7E,qDAAqD;IACrD,MAAM,UAAU,GAAG,EAAE,GAAG,YAAY,CAAC,UAAU,EAAE,GAAG,kBAAkB,CAAC,UAAU,EAAE,CAAC;IACpF,yEAAyE;IACzE,8EAA8E;IAC9E,MAAM,OAAO,GAAG,oBAAoB,CAAC,YAAY,CAAC,OAAO,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACvF,OAAO,aAAa,CAAC;QACnB,GAAG,YAAY;QACf,GAAG,kBAAkB;QACrB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,SAAS,aAAa,CAAC,QAA4B;IACjD,OAAO,QAAQ,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,QAAQ,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,OAAO,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,QAAgB,EAAE,GAAsB;IAC/E,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACrD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qCAAqC,YAAY,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAuB,GAAG;QACtC,CAAC,CAAC;YACE,GAAG,gBAAgB;YACnB,GAAG,EAAE;gBACH,GAAG,gBAAgB,CAAC,GAAG;gBACvB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK,EAAE,GAAG,CAAC,KAAK;aACjB;SACF;QACH,CAAC,CAAC,gBAAgB,CAAC;IACrB,sBAAsB,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAA2C;IACzE,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAA0B;IAC9D,OAAO;QACL,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,4CAA4C;QAC5C,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAA4B,EAC5B,MAA4B;IAE5B,MAAM,OAAO,GAAuB;QAClC,GAAG,QAAQ;QACX,GAAG,EAAE;YACH,GAAG,QAAQ,CAAC,GAAG;YACf,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvF;QACD,MAAM,EAAE;YACN,GAAG,QAAQ,CAAC,MAAM;YAClB,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE;QACD,0EAA0E;QAC1E,6EAA6E;QAC7E,mEAAmE;QACnE,OAAO,EAAE,oBAAoB,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE;QACrE,KAAK,EAAE;YACL,GAAG,QAAQ,CAAC,KAAK;YACjB,GAAG,MAAM,CAAC,KAAK;SAChB;QACD,0EAA0E;QAC1E,kCAAkC;QAClC,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,yCAAyC;QACzC,mDAAmD;QACnD,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAC;IACF,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,yBAAyB,CAChC,YAAoB,EACpB,eAAmC;IAEnC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,eAAe,CAAC;IACtD,IAAI,CAAC;QACH,OAAO,gBAAgB,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,yBAAyB,CAAC;YAC1D,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,EAAE,+CAA+C,CAAC;YAC5F,CAAC,CAAC,MAAM,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,YAAoB,EACpB,KAA2B,EAC3B,eAAmC;IAEnC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAC1E,eAAe,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IACvC,sBAAsB,CACpB,YAAY,EACZ,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAC9D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAA2B;IAC9D,kBAAkB,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAAc,EAAE,KAA2B;IACpF,kBAAkB,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAIhD,OAAO;QACL,MAAM,EAAE,qBAAqB,EAAE,CAAC,UAAU,IAAI,EAAE;QAChD,YAAY,EAAE,gBAAgB,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,IAAI,EAAE;KACnF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAc;IACzD,OAAO,gBAAgB,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,IAAI,IAAI,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAc,EAAE,UAA4B;IACtF,MAAM,YAAY,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,CAAC;IAChD,eAAe,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IACvC,sBAAsB,CACpB,YAAY,EACZ,IAAI,CAAC,SAAS,CACZ,qBAAqB,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EACrF,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC","sourcesContent":["import type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport { Type, type Static } from \"@sinclair/typebox\";\nimport { existsSync, lstatSync, readFileSync, renameSync, rmSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { effectiveStateDir } from \"../cli/arg-grammar.js\";\nimport { readEnv } from \"../env-manifest.js\";\nimport {\n  atomicWritePrivateFile,\n  ensureDirExists,\n  readJsonSchemaFileIfExists,\n} from \"../file-guards.js\";\nimport * as log from \"../log.js\";\n\nexport class MissingGlobalSettingsError extends Error {\n  constructor(public readonly settingsPath: string) {\n    super(`Missing global settings file at ${settingsPath}`);\n    this.name = \"MissingGlobalSettingsError\";\n  }\n}\n\nexport type { AgentConfig, SandboxSettings } from \"../types.js\";\nimport type { AgentConfig, SandboxSettings } from \"../types.js\";\nimport type { McpServerConfig } from \"../harness/types.js\";\nimport type { OnboardLlmChoice } from \"../types.js\";\nimport type { Office } from \"../office/index.js\";\n\nconst ONBOARD_SETTINGS: SettingsFileConfig = {\n  llm: {\n    provider: \"anthropic\",\n    model: \"claude-sonnet-4-6\",\n    thinkingLevel: \"off\",\n  },\n  slack: {\n    replyMode: \"top-level\",\n  },\n  sandbox: {\n    cpus: \"0.5\",\n    memory: \"1g\",\n    boost: {\n      cpus: \"2\",\n      memory: \"4g\",\n    },\n    // Office visibility is not a setting here: it follows the platform\n    // conversation type (see office/projection resolveOfficeVisibility).\n    defaultSharedVault: \"\",\n  },\n};\n\nconst SettingsFileSchema = Type.Object({\n  llm: Type.Optional(\n    Type.Object({\n      provider: Type.Optional(Type.String()),\n      model: Type.Optional(Type.String()),\n      thinkingLevel: Type.Optional(\n        Type.Union([\n          Type.Literal(\"off\"),\n          Type.Literal(\"minimal\"),\n          Type.Literal(\"low\"),\n          Type.Literal(\"medium\"),\n          Type.Literal(\"high\"),\n          Type.Literal(\"xhigh\"),\n          Type.Literal(\"max\"),\n        ]),\n      ),\n    }),\n  ),\n  sentry: Type.Optional(\n    Type.Object({\n      dsn: Type.Optional(Type.String()),\n    }),\n  ),\n  slack: Type.Optional(\n    Type.Object({\n      replyMode: Type.Optional(Type.Union([Type.Literal(\"top-level\"), Type.Literal(\"thread\")])),\n    }),\n  ),\n  /**\n   * Conversation-only office policy. `visibility: \"private\"` marks a\n   * platform-public conversation as private; nothing can widen visibility\n   * beyond what the platform grants, so \"public\" is never stored here.\n   */\n  office: Type.Optional(\n    Type.Object({\n      visibility: Type.Optional(Type.Literal(\"private\")),\n    }),\n  ),\n  sandbox: Type.Optional(\n    Type.Object({\n      cpus: Type.Optional(Type.String()),\n      memory: Type.Optional(Type.String()),\n      boost: Type.Optional(\n        Type.Object({\n          cpus: Type.Optional(Type.String()),\n          memory: Type.Optional(Type.String()),\n        }),\n      ),\n      /**\n       * Retired door-policy keys (ADR 0008). Still accepted so existing files\n       * load, never copied into AgentConfig, and removed by\n       * `mikan office migrate-door-policy`.\n       */\n      image: Type.Optional(\n        Type.Object({\n          workspaceMount: Type.Optional(\n            Type.Union([Type.Literal(\"private\"), Type.Literal(\"full\")]),\n          ),\n        }),\n      ),\n      workspace: Type.Optional(\n        Type.Object({\n          doorPolicy: Type.Optional(\n            Type.Union([Type.Literal(\"isolated\"), Type.Literal(\"trusted\")]),\n          ),\n          layout: Type.Optional(\n            Type.Union([\n              Type.Literal(\"conversation\"),\n              Type.Literal(\"shared-support\"),\n              Type.Literal(\"full\"),\n            ]),\n          ),\n          visibility: Type.Optional(Type.Union([Type.Literal(\"public\"), Type.Literal(\"private\")])),\n        }),\n      ),\n      defaultSharedVault: Type.Optional(Type.String()),\n    }),\n  ),\n  /**\n   * MCP servers, keyed by name. Merged per key across scopes: a conversation\n   * entry overrides (or, with `disabled: true`, turns off) the same-name\n   * global entry; other global entries stay available. `open-connector` is an\n   * ordinary entry that the host fills in from `OPENCONNECTOR_ENDPOINT` when\n   * neither scope declares it (see `src/harness/open-connector.ts`).\n   */\n  mcpServers: Type.Optional(\n    Type.Record(\n      Type.String(),\n      Type.Object({\n        command: Type.Optional(Type.String()),\n        args: Type.Optional(Type.Array(Type.String())),\n        env: Type.Optional(Type.Record(Type.String(), Type.String())),\n        url: Type.Optional(Type.String()),\n        headers: Type.Optional(Type.Record(Type.String(), Type.String())),\n        disabled: Type.Optional(Type.Boolean()),\n      }),\n    ),\n  ),\n});\n\nexport type SettingsFileConfig = Static<typeof SettingsFileSchema>;\nexport type SandboxFileSettings = NonNullable<SettingsFileConfig[\"sandbox\"]>;\n\nexport function loadSettingsFile(settingsPath: string): SettingsFileConfig | undefined {\n  return readJsonSchemaFileIfExists(settingsPath, SettingsFileSchema, (detail) =>\n    detail === \"unexpected JSON shape\"\n      ? `Malformed settings file at ${settingsPath}: expected a JSON object at the top level`\n      : `Malformed settings file at ${settingsPath}: ${detail}`,\n  );\n}\n\nfunction normalizeSettingsConfig(config: SettingsFileConfig): Partial<AgentConfig> {\n  return {\n    ...(config.llm?.provider !== undefined ? { provider: config.llm.provider } : {}),\n    ...(config.llm?.model !== undefined ? { model: config.llm.model } : {}),\n    ...(config.llm?.thinkingLevel !== undefined ? { thinkingLevel: config.llm.thinkingLevel } : {}),\n    ...(config.sentry?.dsn !== undefined ? { sentryDsn: config.sentry.dsn } : {}),\n    ...(config.sandbox !== undefined ? { sandbox: normalizeSandboxSettings(config.sandbox) } : {}),\n    ...(config.slack !== undefined ? { slack: config.slack } : {}),\n    ...(config.mcpServers !== undefined ? { mcpServers: config.mcpServers } : {}),\n  };\n}\n\n/**\n * File shape → in-memory shape for the sandbox group. An empty or\n * whitespace-only `defaultSharedVault` means \"no default\" and is dropped;\n * non-empty values are trimmed. Everything else passes through as-is.\n */\nfunction normalizeSandboxSettings(sandbox: SandboxFileSettings): SandboxSettings {\n  const defaultSharedVault = sandbox.defaultSharedVault?.trim();\n  // Retired `image.workspaceMount` and `workspace` are dropped here: office\n  // visibility comes from the platform (ADR 0008), never from these keys.\n  return {\n    ...(sandbox.cpus !== undefined ? { cpus: sandbox.cpus } : {}),\n    ...(sandbox.memory !== undefined ? { memory: sandbox.memory } : {}),\n    ...(sandbox.boost !== undefined ? { boost: sandbox.boost } : {}),\n    ...(defaultSharedVault ? { defaultSharedVault } : {}),\n  };\n}\n\n/**\n * Merge two sandbox settings groups. The merge invariant is LEAF-LEVEL:\n * an override that only sets `sandbox.memory` keeps the base `sandbox.cpus`,\n * and an override that only sets `boost.memory` keeps the base `boost.cpus`\n * (same for `image`). This mirrors how the fields merged when they were\n * flat top-level keys; a group-level spread would silently drop base leaves.\n */\nfunction mergeSandboxSettings(\n  base: SandboxSettings | undefined,\n  override: SandboxSettings | undefined,\n): SandboxSettings | undefined {\n  if (!base) return override;\n  if (!override) return base;\n  return {\n    ...base,\n    ...override,\n    ...(base.boost || override.boost ? { boost: { ...base.boost, ...override.boost } } : {}),\n  };\n}\n\nfunction getSettingsPath(): string {\n  return join(effectiveStateDir(), \"settings.json\");\n}\n\nfunction requireGlobalSettings(): SettingsFileConfig {\n  const settingsPath = getSettingsPath();\n  const config = loadSettingsFile(settingsPath);\n  if (!config) {\n    throw new MissingGlobalSettingsError(settingsPath);\n  }\n  return config;\n}\n\nfunction requireString(value: string | undefined, path: string): string {\n  if (!value) {\n    throw new Error(\n      `Missing required global setting: ${path}. Run \\`mikan --onboard\\` to create settings.json.`,\n    );\n  }\n  return value;\n}\n\nfunction toAgentConfig(fromFile: Partial<AgentConfig>): AgentConfig {\n  const provider = requireString(fromFile.provider, \"llm.provider\");\n  const model = requireString(fromFile.model, \"llm.model\");\n  const thinkingLevel = requireString(fromFile.thinkingLevel, \"llm.thinkingLevel\") as ThinkingLevel;\n  const sentryDsn = sentryDsnFrom(fromFile.sentryDsn);\n  const sandbox = fromFile.sandbox;\n  const slack = fromFile.slack;\n  const mcpServers = fromFile.mcpServers;\n\n  return {\n    provider,\n    model,\n    thinkingLevel,\n    sentryDsn,\n    sandbox,\n    slack,\n    mcpServers,\n  };\n}\n\nfunction loadRawGlobalSettings(): Partial<AgentConfig> {\n  return normalizeSettingsConfig(requireGlobalSettings());\n}\n\nexport function loadGlobalSettings(): AgentConfig {\n  return toAgentConfig(loadRawGlobalSettings());\n}\n\n/**\n * Host-authoritative location of a conversation's settings file:\n * `<office state dir>/settings.json`. The Office value names both the\n * state-dir key and the legacy pre-host-migration location (its workspace\n * dir) — the key is never inferred from a directory basename.\n *\n * Conversation settings used to live at `<conversationDir>/settings.json`,\n * but conversation dirs are bind-mounted read-write into sandbox containers\n * in image mode — code inside the sandbox could edit its own settings.json\n * and flip `sandbox.image.workspaceMount` to \"full\", remounting the entire\n * workspace into its container (cross-conversation access). Settings are an\n * administrator surface, so they live under the host-only state dir.\n *\n * Migration: on first access per conversation, a legacy\n * `<conversationDir>/settings.json` is moved here. The new file's existence\n * (an empty `{}` is written when there is nothing to migrate) is the\n * migration marker — a legacy file (re)appearing later, e.g. planted from\n * inside the sandbox, is never read again.\n */\nexport function conversationSettingsPath(office: Office): string {\n  const hostPath = join(office.stateDir, \"settings.json\");\n  if (existsSync(hostPath)) {\n    assertSettingsFile(hostPath, \"Host conversation settings\");\n    return hostPath;\n  }\n\n  ensureDirExists(dirname(hostPath));\n  const legacyPath = join(office.dir, \"settings.json\");\n  let content = \"{}\\n\";\n  let migrated = false;\n  if (existsSync(legacyPath)) {\n    assertSettingsFile(legacyPath, \"Legacy conversation settings\");\n    content = readFileSync(legacyPath, \"utf-8\");\n    // Validate before moving the file. A malformed legacy file must fail\n    // closed and remain available for an operator to repair.\n    loadSettingsFile(legacyPath);\n    migrated = true;\n  }\n  atomicWritePrivateFile(hostPath, content);\n  if (migrated) {\n    try {\n      rmSync(legacyPath);\n    } catch (err) {\n      log.logWarning(`Could not remove legacy conversation settings: ${legacyPath}`, String(err));\n    }\n    log.logInfo(`Migrated conversation settings to host-only path: ${hostPath}`);\n  }\n  return hostPath;\n}\n\nfunction assertSettingsFile(path: string, label: string): void {\n  let stats;\n  try {\n    stats = lstatSync(path);\n  } catch (err) {\n    throw new Error(`${label} cannot be inspected: ${path}`, { cause: err });\n  }\n  if (stats.isSymbolicLink() || !stats.isFile()) {\n    throw new Error(`${label} must be a regular non-symlink file: ${path}`);\n  }\n}\n\nconst AUTO_REPLY_FILE = \"auto-reply\";\nconst AUTO_REPLY_DISABLED_FILE = \"auto-reply.disabled\";\n\nexport function slackConversationAutoReplyEnabled(office: Office): boolean {\n  return existsSync(join(office.dir, AUTO_REPLY_FILE));\n}\n\nexport function setSlackConversationAutoReply(office: Office, enabled: boolean): void {\n  ensureDirExists(office.dir);\n  const enabledPath = join(office.dir, AUTO_REPLY_FILE);\n  const disabledPath = join(office.dir, AUTO_REPLY_DISABLED_FILE);\n  const targetPath = enabled ? enabledPath : disabledPath;\n  const otherPath = enabled ? disabledPath : enabledPath;\n\n  if (existsSync(otherPath)) {\n    renameSync(otherPath, targetPath);\n    return;\n  }\n  if (enabled && !existsSync(targetPath)) {\n    atomicWritePrivateFile(targetPath, \"\");\n  }\n}\n\nexport function resolveConversationSettings(office: Office): AgentConfig {\n  const globalConfig = loadRawGlobalSettings();\n  const conversationConfig = normalizeSettingsConfig(\n    loadSettingsFile(conversationSettingsPath(office)) ?? {},\n  );\n  // MCP servers merge per key: a conversation redefines or disables individual\n  // servers without losing the rest of the global set.\n  const mcpServers = { ...globalConfig.mcpServers, ...conversationConfig.mcpServers };\n  // The sandbox group merges at the leaf level (see mergeSandboxSettings):\n  // a conversation that only sets sandbox.memory keeps the global sandbox.cpus.\n  const sandbox = mergeSandboxSettings(globalConfig.sandbox, conversationConfig.sandbox);\n  return toAgentConfig({\n    ...globalConfig,\n    ...conversationConfig,\n    ...(sandbox ? { sandbox } : {}),\n    ...(Object.keys(mcpServers).length > 0 ? { mcpServers } : {}),\n  });\n}\n\n/** Settings-file DSN wins over SENTRY_DSN env — the rule lives only here. */\nfunction sentryDsnFrom(fromFile: string | undefined): string | undefined {\n  return fromFile || readEnv(\"SENTRY_DSN\");\n}\n\nexport function resolveSentryDsn(): string | undefined {\n  const fromFile = normalizeSettingsConfig(loadSettingsFile(getSettingsPath()) ?? {});\n  return sentryDsnFrom(fromFile.sentryDsn);\n}\n\nexport function createGlobalSettingsFile(stateDir: string, llm?: OnboardLlmChoice): string {\n  const settingsPath = join(stateDir, \"settings.json\");\n  if (existsSync(settingsPath)) {\n    throw new Error(`Global settings already exists at ${settingsPath}`);\n  }\n  ensureDirExists(stateDir);\n  const settings: SettingsFileConfig = llm\n    ? {\n        ...ONBOARD_SETTINGS,\n        llm: {\n          ...ONBOARD_SETTINGS.llm,\n          provider: llm.provider,\n          model: llm.model,\n        },\n      }\n    : ONBOARD_SETTINGS;\n  atomicWritePrivateFile(settingsPath, JSON.stringify(settings, null, 2));\n  return settingsPath;\n}\n\nexport function hasDefinedValue(values: Record<string, unknown> | undefined): boolean {\n  return values !== undefined && Object.values(values).some((value) => value !== undefined);\n}\n\nexport function compactSettingsConfig(config: SettingsFileConfig): SettingsFileConfig {\n  return {\n    ...(hasDefinedValue(config.llm) ? { llm: config.llm } : {}),\n    ...(hasDefinedValue(config.sentry) ? { sentry: config.sentry } : {}),\n    ...(hasDefinedValue(config.sandbox) ? { sandbox: config.sandbox } : {}),\n    ...(hasDefinedValue(config.slack) ? { slack: config.slack } : {}),\n    ...(hasDefinedValue(config.office) ? { office: config.office } : {}),\n    // An empty map means \"all servers removed\".\n    ...(config.mcpServers !== undefined ? { mcpServers: config.mcpServers } : {}),\n  };\n}\n\nfunction patchSettingsConfig(\n  existing: SettingsFileConfig,\n  config: Partial<AgentConfig>,\n): SettingsFileConfig {\n  const patched: SettingsFileConfig = {\n    ...existing,\n    llm: {\n      ...existing.llm,\n      ...(config.provider !== undefined ? { provider: config.provider } : {}),\n      ...(config.model !== undefined ? { model: config.model } : {}),\n      ...(config.thinkingLevel !== undefined ? { thinkingLevel: config.thinkingLevel } : {}),\n    },\n    sentry: {\n      ...existing.sentry,\n      ...(config.sentryDsn !== undefined ? { dsn: config.sentryDsn } : {}),\n    },\n    // Leaf-level merge: a patch that only sets sandbox.boost.memory keeps the\n    // existing boost.cpus (and every other existing leaf). compactSettingsConfig\n    // drops the group entirely when it ends up with no defined values.\n    sandbox: mergeSandboxSettings(existing.sandbox, config.sandbox) ?? {},\n    slack: {\n      ...existing.slack,\n      ...config.slack,\n    },\n    // Office visibility has its own writer (setOfficeVisibilityOverride); the\n    // generic patch must not drop it.\n    ...(existing.office !== undefined ? { office: existing.office } : {}),\n    // The portal edits the full MCP map, and\n    // a merge would make removing a server impossible.\n    ...(config.mcpServers !== undefined ? { mcpServers: config.mcpServers } : {}),\n  };\n  return compactSettingsConfig(patched);\n}\n\nfunction loadSettingsFileForUpdate(\n  settingsPath: string,\n  defaultSettings: SettingsFileConfig,\n): SettingsFileConfig {\n  if (!existsSync(settingsPath)) return defaultSettings;\n  try {\n    return loadSettingsFile(settingsPath) ?? {};\n  } catch (err) {\n    const detail = err instanceof Error ? err.message : String(err);\n    const message = detail.startsWith(\"Malformed settings file\")\n      ? detail.replace(\"Malformed settings file\", \"Refusing to overwrite malformed settings file\")\n      : detail;\n    throw new Error(message, { cause: err });\n  }\n}\n\nfunction updateSettingsFile(\n  settingsPath: string,\n  patch: Partial<AgentConfig>,\n  defaultSettings: SettingsFileConfig,\n): void {\n  const existing = loadSettingsFileForUpdate(settingsPath, defaultSettings);\n  ensureDirExists(dirname(settingsPath));\n  atomicWritePrivateFile(\n    settingsPath,\n    JSON.stringify(patchSettingsConfig(existing, patch), null, 2),\n  );\n}\n\nexport function updateGlobalSettings(patch: Partial<AgentConfig>): void {\n  updateSettingsFile(getSettingsPath(), patch, ONBOARD_SETTINGS);\n}\n\nexport function updateConversationSettings(office: Office, patch: Partial<AgentConfig>): void {\n  updateSettingsFile(conversationSettingsPath(office), patch, {});\n}\n\n/**\n * The two scope-level MCP server maps, unmerged: the portal edits each scope's\n * own file, so it needs the raw per-scope values, not the effective merge\n * (`resolveConversationSettings` owns that).\n */\nexport function loadScopeMcpServers(office: Office): {\n  global: Record<string, McpServerConfig>;\n  conversation: Record<string, McpServerConfig>;\n} {\n  return {\n    global: loadRawGlobalSettings().mcpServers ?? {},\n    conversation: loadSettingsFile(conversationSettingsPath(office))?.mcpServers ?? {},\n  };\n}\n\n/**\n * The conversation's own visibility override, or null when it follows the\n * platform. Only \"private\" can be stored: an operator may narrow a public\n * channel, never widen a private one (see ADR 0008).\n */\nexport function loadOfficeVisibilityOverride(office: Office): \"private\" | null {\n  return loadSettingsFile(conversationSettingsPath(office))?.office?.visibility ?? null;\n}\n\nexport function setOfficeVisibilityOverride(office: Office, visibility: \"private\" | null): void {\n  const settingsPath = conversationSettingsPath(office);\n  const existing = loadSettingsFileForUpdate(settingsPath, {});\n  const { office: _previous, ...rest } = existing;\n  ensureDirExists(dirname(settingsPath));\n  atomicWritePrivateFile(\n    settingsPath,\n    JSON.stringify(\n      compactSettingsConfig({ ...rest, ...(visibility ? { office: { visibility } } : {}) }),\n      null,\n      2,\n    ),\n  );\n}\n"]}