@geminixiang/mikan 1.0.0-beta.7 → 1.0.0-beta.71

package/dist/events/scheduler.js

@@ -0,0 +1,231 @@
+import { Cron } from "croner";
+import { existsSync, readdirSync, readFileSync, unlinkSync } from "node:fs";
+import { join } from "node:path";
+import { createConversationEvent } from "../adapters/index.js";
+import * as log from "../log.js";
+import { listRegisteredOffices, officeKey } from "../office/index.js";
+import { reportUserFacingError } from "../observability/index.js";
+import { inferConversationKind } from "../sessions/session-key.js";
+import { officeEventsDir, parseEventPayload, } from "./index.js";
+/**
+ * In-memory timer/cron owner for every office's admitted events. Records are
+ * loaded once from each registered office's host-only events directory at
+ * start; afterwards the only inputs are {@link OfficeEventStore} mutations
+ * through {@link EventScheduleSink}. There is no filesystem watcher: files
+ * edited by hand take effect on the next start.
+ */
+export class EventScheduler {
+    constructor(workspace, botsByPlatform) {
+        this.workspace = workspace;
+        this.botsByPlatform = botsByPlatform;
+        this.scheduled = new Map();
+        this.startTime = Date.now();
+    }
+    start() {
+        this.startTime = Date.now();
+        let loaded = 0;
+        for (const record of listRegisteredOffices(this.workspace.stateDir)) {
+            const office = this.workspace.office(record);
+            const dir = officeEventsDir(office);
+            if (!existsSync(dir))
+                continue;
+            for (const filename of readdirSync(dir).filter((name) => name.endsWith(".json"))) {
+                const path = join(dir, filename);
+                try {
+                    const payload = parseEventPayload(readFileSync(path, "utf-8"), filename);
+                    this.scheduleRecord(office.address, { filename, payload, size: 0, mtimeMs: 0 });
+                    loaded++;
+                }
+                catch (error) {
+                    log.logWarning(`Removing unparseable event file ${filename} for ${office.key}`, error instanceof Error ? error.message : String(error));
+                    this.removeFile(office.address, filename);
+                }
+            }
+        }
+        log.logInfo(`Event scheduler started, tracking ${loaded} records`);
+    }
+    stop() {
+        for (const entry of this.scheduled.values()) {
+            if (entry.timer)
+                clearTimeout(entry.timer);
+            entry.cron?.stop();
+        }
+        this.scheduled.clear();
+        log.logInfo("Event scheduler stopped");
+    }
+    scheduledCount() {
+        return this.scheduled.size;
+    }
+    /** Active periodic events of one office with their next run. */
+    periodicEvents(address) {
+        const prefix = `${officeKey(address)}/`;
+        const results = [];
+        for (const [key, entry] of this.scheduled) {
+            if (!key.startsWith(prefix) || entry.event.type !== "periodic" || !entry.cron)
+                continue;
+            results.push({
+                filename: entry.filename,
+                platform: entry.event.platform,
+                conversationId: entry.event.conversationId,
+                conversationKind: entry.event.conversationKind,
+                text: entry.event.text,
+                schedule: entry.event.schedule,
+                timezone: entry.event.timezone,
+                nextRun: entry.cron.nextRun()?.toISOString() ?? null,
+            });
+        }
+        return results;
+    }
+    scheduleRecord(address, record) {
+        const key = this.key(address, record.filename);
+        this.cancelKey(key);
+        let event;
+        try {
+            event = this.resolve(record, address);
+        }
+        catch (error) {
+            log.logWarning(`Rejecting event ${record.filename}`, error instanceof Error ? error.message : String(error));
+            this.removeFile(address, record.filename);
+            return;
+        }
+        const entry = { address, filename: record.filename, event };
+        switch (event.type) {
+            case "immediate":
+                this.execute(entry);
+                return;
+            case "one-shot": {
+                const delay = new Date(event.at).getTime() - Date.now();
+                if (delay <= 0) {
+                    log.logInfo(`One-shot event in the past, deleting: ${record.filename}`);
+                    this.removeFile(address, record.filename);
+                    return;
+                }
+                entry.timer = setTimeout(() => {
+                    this.scheduled.delete(key);
+                    this.execute(entry);
+                }, delay);
+                this.scheduled.set(key, entry);
+                return;
+            }
+            case "periodic":
+                try {
+                    entry.cron = new Cron(event.schedule, { timezone: event.timezone }, () => this.execute(entry, false));
+                }
+                catch (error) {
+                    log.logWarning(`Invalid cron schedule for ${record.filename}`, String(error));
+                    this.removeFile(address, record.filename);
+                    return;
+                }
+                this.scheduled.set(key, entry);
+        }
+    }
+    cancelRecord(address, filename) {
+        this.cancelKey(this.key(address, filename));
+    }
+    key(address, filename) {
+        return `${officeKey(address)}/${filename}`;
+    }
+    cancelKey(key) {
+        const entry = this.scheduled.get(key);
+        if (!entry)
+            return;
+        if (entry.timer)
+            clearTimeout(entry.timer);
+        entry.cron?.stop();
+        this.scheduled.delete(key);
+    }
+    resolve(record, address) {
+        const { payload } = record;
+        const platform = (payload.platform ?? address.platform).toLowerCase();
+        if (platform !== address.platform || payload.conversationId !== address.conversationId) {
+            throw new Error("event payload does not address its owning office");
+        }
+        if (!this.botsByPlatform[platform]) {
+            throw new Error(`no bot configured for platform '${platform}'`);
+        }
+        const conversationKind = payload.conversationKind ?? inferConversationKind(platform, payload.conversationId);
+        return { ...payload, platform, conversationKind };
+    }
+    execute(entry, deleteAfter = true) {
+        const { event, filename, address } = entry;
+        const bot = this.botsByPlatform[event.platform];
+        if (!bot) {
+            this.reportFailure(entry, deleteAfter, "missing_bot");
+            if (deleteAfter)
+                this.removeFile(address, filename);
+            return;
+        }
+        const enqueued = bot.enqueueEvent(createConversationEvent({
+            platform: event.platform,
+            type: "mention",
+            conversationId: event.conversationId,
+            conversationKind: event.conversationKind,
+            user: event.userId ?? "EVENT",
+            text: buildEventPrompt(event),
+            ts: `event:${filename.replace(/\.json$/i, "")}`,
+        }));
+        if (!enqueued) {
+            log.logWarning(`Event queue full, discarded: ${filename}`);
+            this.reportFailure(entry, deleteAfter, "queue_full");
+        }
+        if (deleteAfter)
+            this.removeFile(address, filename);
+    }
+    reportFailure(entry, deleteAfter, failure) {
+        const reason = failure === "missing_bot" ? "missing bot" : "queue full";
+        reportUserFacingError(new Error(`Scheduled event delivery failed: ${reason}`), {
+            domain: "events",
+            surface: "event_delivery",
+            operation: "event_execute",
+            severity: "error",
+            platform: entry.event.platform,
+            context: {
+                failure,
+                filename: entry.filename,
+                eventType: entry.event.type,
+                conversationId: entry.event.conversationId,
+                conversationKind: entry.event.conversationKind,
+                deleteAfter,
+                triggeredByEventFile: true,
+                textLength: entry.event.text.length,
+            },
+        });
+    }
+    removeFile(address, filename) {
+        const path = join(officeEventsDir(this.workspace.office(address)), filename);
+        try {
+            unlinkSync(path);
+        }
+        catch (error) {
+            if (error instanceof Error && "code" in error && error.code !== "ENOENT") {
+                log.logWarning(`Failed to delete event file: ${filename}`, String(error));
+            }
+        }
+    }
+}
+export function buildEventPrompt(event) {
+    switch (event.type) {
+        case "one-shot":
+            return [
+                "Please deliver the following reminder to the user in a short, natural way.",
+                "Do not greet, do not introduce yourself, and do not ask generic follow-up questions.",
+                "",
+                `Reminder: ${event.text}`,
+            ].join("\n");
+        case "periodic":
+            return [
+                "Handle the following recurring task.",
+                "Respond concisely. If there is nothing actionable to report, reply with [SILENT].",
+                "",
+                `Task: ${event.text}`,
+            ].join("\n");
+        case "immediate":
+            return [
+                "Handle the following event/update in a concise, context-appropriate way.",
+                "If it reads like a reminder or follow-up, deliver it directly without greeting or generic offers to help.",
+                "",
+                `Event: ${event.text}`,
+            ].join("\n");
+    }
+}
+//# sourceMappingURL=scheduler.js.map

package/dist/events/scheduler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler.js","sourceRoot":"","sources":["../../src/events/scheduler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,OAAO,KAAK,GAAG,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAkB,MAAM,oBAAoB,CAAC;AACtF,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,OAAO,EACL,eAAe,EACf,iBAAiB,GAKlB,MAAM,YAAY,CAAC;AAYpB;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IAIzB,YACmB,SAAoB,EACpB,cAA4C;QAD5C,cAAS,GAAT,SAAS,CAAW;QACpB,mBAAc,GAAd,cAAc,CAA8B;QAL9C,cAAS,GAAG,IAAI,GAAG,EAAqB,CAAC;QAClD,cAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAK5B,CAAC;IAEJ,KAAK;QACH,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,MAAM,IAAI,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC/B,KAAK,MAAM,QAAQ,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBACjF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBACjC,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,iBAAiB,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;oBACzE,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;oBAChF,MAAM,EAAE,CAAC;gBACX,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,GAAG,CAAC,UAAU,CACZ,mCAAmC,QAAQ,QAAQ,MAAM,CAAC,GAAG,EAAE,EAC/D,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;oBACF,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;QACH,CAAC;QACD,GAAG,CAAC,OAAO,CAAC,qCAAqC,MAAM,UAAU,CAAC,CAAC;IACrE,CAAC;IAED,IAAI;QACF,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,KAAK,CAAC,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3C,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACzC,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;IAC7B,CAAC;IAED,gEAAgE;IAChE,cAAc,CAAC,OAAsB;QACnC,MAAM,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC;QACxC,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,IAAI;gBAAE,SAAS;YACxF,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;gBAC9B,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,cAAc;gBAC1C,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;gBAC9C,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;gBACtB,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;gBAC9B,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;gBAC9B,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,IAAI;aACrD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,cAAc,CAAC,OAAsB,EAAE,MAAmB;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACpB,IAAI,KAAiB,CAAC;QACtB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,UAAU,CACZ,mBAAmB,MAAM,CAAC,QAAQ,EAAE,EACpC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;QACvE,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,WAAW;gBACd,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO;YACT,KAAK,UAAU,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACxD,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;oBACf,GAAG,CAAC,OAAO,CAAC,yCAAyC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACxE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC1C,OAAO;gBACT,CAAC;gBACD,KAAK,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC5B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC3B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC,EAAE,KAAK,CAAC,CAAC;gBACV,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC/B,OAAO;YACT,CAAC;YACD,KAAK,UAAU;gBACb,IAAI,CAAC;oBACH,KAAK,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CACvE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAC3B,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,GAAG,CAAC,UAAU,CAAC,6BAA6B,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC9E,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC1C,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,YAAY,CAAC,OAAsB,EAAE,QAAgB;QACnD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9C,CAAC;IAEO,GAAG,CAAC,OAAsB,EAAE,QAAgB;QAClD,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;IAC7C,CAAC;IAEO,SAAS,CAAC,GAAW;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,IAAI,KAAK,CAAC,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3C,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;QACnB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAEO,OAAO,CAAC,MAAmB,EAAE,OAAsB;QACzD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QACtE,IAAI,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC;YACvF,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,GAAG,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,gBAAgB,GACpB,OAAO,CAAC,gBAAgB,IAAI,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QACtF,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IACpD,CAAC;IAEO,OAAO,CAAC,KAAgB,EAAE,WAAW,GAAG,IAAI;QAClD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;YACtD,IAAI,WAAW;gBAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAC/B,uBAAuB,CAAC;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAwB;YACxC,IAAI,EAAE,SAAS;YACf,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,IAAI,EAAE,KAAK,CAAC,MAAM,IAAI,OAAO;YAC7B,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC;YAC7B,EAAE,EAAE,SAAS,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE;SAChD,CAAC,CACH,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,UAAU,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;YAC3D,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,WAAW;YAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC;IAEO,aAAa,CACnB,KAAgB,EAChB,WAAoB,EACpB,OAAqC;QAErC,MAAM,MAAM,GAAG,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC;QACxE,qBAAqB,CAAC,IAAI,KAAK,CAAC,oCAAoC,MAAM,EAAE,CAAC,EAAE;YAC7E,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,gBAAgB;YACzB,SAAS,EAAE,eAAe;YAC1B,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;YAC9B,OAAO,EAAE;gBACP,OAAO;gBACP,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;gBAC3B,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,cAAc;gBAC1C,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;gBAC9C,WAAW;gBACX,oBAAoB,EAAE,IAAI;gBAC1B,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM;aACpC;SACF,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,CAAC,OAAsB,EAAE,QAAgB;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC7E,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACzE,GAAG,CAAC,UAAU,CAAC,gCAAgC,QAAQ,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,UAAU;YACb,OAAO;gBACL,4EAA4E;gBAC5E,sFAAsF;gBACtF,EAAE;gBACF,aAAa,KAAK,CAAC,IAAI,EAAE;aAC1B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,KAAK,UAAU;YACb,OAAO;gBACL,sCAAsC;gBACtC,mFAAmF;gBACnF,EAAE;gBACF,SAAS,KAAK,CAAC,IAAI,EAAE;aACtB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,KAAK,WAAW;YACd,OAAO;gBACL,0EAA0E;gBAC1E,2GAA2G;gBAC3G,EAAE;gBACF,UAAU,KAAK,CAAC,IAAI,EAAE;aACvB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;AACH,CAAC","sourcesContent":["import { Cron } from \"croner\";\nimport { existsSync, readdirSync, readFileSync, unlinkSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { createConversationEvent } from \"../adapters/index.js\";\nimport type { ConversationKind, MessagingBot, PlatformName } from \"../types.js\";\nimport * as log from \"../log.js\";\nimport { listRegisteredOffices, officeKey, type Workspace } from \"../office/index.js\";\nimport { reportUserFacingError } from \"../observability/index.js\";\nimport { inferConversationKind } from \"../sessions/session-key.js\";\nimport type { OfficeAddress } from \"../types.js\";\nimport {\n  officeEventsDir,\n  parseEventPayload,\n  type EventRecord,\n  type EventScheduleSink,\n  type MikanEvent,\n  type PeriodicEventInfo,\n} from \"./index.js\";\n\nexport type { MikanEvent, PeriodicEventInfo } from \"./index.js\";\n\ninterface Scheduled {\n  address: OfficeAddress;\n  filename: string;\n  event: MikanEvent;\n  timer?: NodeJS.Timeout;\n  cron?: Cron;\n}\n\n/**\n * In-memory timer/cron owner for every office's admitted events. Records are\n * loaded once from each registered office's host-only events directory at\n * start; afterwards the only inputs are {@link OfficeEventStore} mutations\n * through {@link EventScheduleSink}. There is no filesystem watcher: files\n * edited by hand take effect on the next start.\n */\nexport class EventScheduler implements EventScheduleSink {\n  private readonly scheduled = new Map<string, Scheduled>();\n  private startTime = Date.now();\n\n  constructor(\n    private readonly workspace: Workspace,\n    private readonly botsByPlatform: Record<string, MessagingBot>,\n  ) {}\n\n  start(): void {\n    this.startTime = Date.now();\n    let loaded = 0;\n    for (const record of listRegisteredOffices(this.workspace.stateDir)) {\n      const office = this.workspace.office(record);\n      const dir = officeEventsDir(office);\n      if (!existsSync(dir)) continue;\n      for (const filename of readdirSync(dir).filter((name) => name.endsWith(\".json\"))) {\n        const path = join(dir, filename);\n        try {\n          const payload = parseEventPayload(readFileSync(path, \"utf-8\"), filename);\n          this.scheduleRecord(office.address, { filename, payload, size: 0, mtimeMs: 0 });\n          loaded++;\n        } catch (error) {\n          log.logWarning(\n            `Removing unparseable event file ${filename} for ${office.key}`,\n            error instanceof Error ? error.message : String(error),\n          );\n          this.removeFile(office.address, filename);\n        }\n      }\n    }\n    log.logInfo(`Event scheduler started, tracking ${loaded} records`);\n  }\n\n  stop(): void {\n    for (const entry of this.scheduled.values()) {\n      if (entry.timer) clearTimeout(entry.timer);\n      entry.cron?.stop();\n    }\n    this.scheduled.clear();\n    log.logInfo(\"Event scheduler stopped\");\n  }\n\n  scheduledCount(): number {\n    return this.scheduled.size;\n  }\n\n  /** Active periodic events of one office with their next run. */\n  periodicEvents(address: OfficeAddress): PeriodicEventInfo[] {\n    const prefix = `${officeKey(address)}/`;\n    const results: PeriodicEventInfo[] = [];\n    for (const [key, entry] of this.scheduled) {\n      if (!key.startsWith(prefix) || entry.event.type !== \"periodic\" || !entry.cron) continue;\n      results.push({\n        filename: entry.filename,\n        platform: entry.event.platform,\n        conversationId: entry.event.conversationId,\n        conversationKind: entry.event.conversationKind,\n        text: entry.event.text,\n        schedule: entry.event.schedule,\n        timezone: entry.event.timezone,\n        nextRun: entry.cron.nextRun()?.toISOString() ?? null,\n      });\n    }\n    return results;\n  }\n\n  scheduleRecord(address: OfficeAddress, record: EventRecord): void {\n    const key = this.key(address, record.filename);\n    this.cancelKey(key);\n    let event: MikanEvent;\n    try {\n      event = this.resolve(record, address);\n    } catch (error) {\n      log.logWarning(\n        `Rejecting event ${record.filename}`,\n        error instanceof Error ? error.message : String(error),\n      );\n      this.removeFile(address, record.filename);\n      return;\n    }\n    const entry: Scheduled = { address, filename: record.filename, event };\n    switch (event.type) {\n      case \"immediate\":\n        this.execute(entry);\n        return;\n      case \"one-shot\": {\n        const delay = new Date(event.at).getTime() - Date.now();\n        if (delay <= 0) {\n          log.logInfo(`One-shot event in the past, deleting: ${record.filename}`);\n          this.removeFile(address, record.filename);\n          return;\n        }\n        entry.timer = setTimeout(() => {\n          this.scheduled.delete(key);\n          this.execute(entry);\n        }, delay);\n        this.scheduled.set(key, entry);\n        return;\n      }\n      case \"periodic\":\n        try {\n          entry.cron = new Cron(event.schedule, { timezone: event.timezone }, () =>\n            this.execute(entry, false),\n          );\n        } catch (error) {\n          log.logWarning(`Invalid cron schedule for ${record.filename}`, String(error));\n          this.removeFile(address, record.filename);\n          return;\n        }\n        this.scheduled.set(key, entry);\n    }\n  }\n\n  cancelRecord(address: OfficeAddress, filename: string): void {\n    this.cancelKey(this.key(address, filename));\n  }\n\n  private key(address: OfficeAddress, filename: string): string {\n    return `${officeKey(address)}/${filename}`;\n  }\n\n  private cancelKey(key: string): void {\n    const entry = this.scheduled.get(key);\n    if (!entry) return;\n    if (entry.timer) clearTimeout(entry.timer);\n    entry.cron?.stop();\n    this.scheduled.delete(key);\n  }\n\n  private resolve(record: EventRecord, address: OfficeAddress): MikanEvent {\n    const { payload } = record;\n    const platform = (payload.platform ?? address.platform).toLowerCase();\n    if (platform !== address.platform || payload.conversationId !== address.conversationId) {\n      throw new Error(\"event payload does not address its owning office\");\n    }\n    if (!this.botsByPlatform[platform]) {\n      throw new Error(`no bot configured for platform '${platform}'`);\n    }\n    const conversationKind: ConversationKind =\n      payload.conversationKind ?? inferConversationKind(platform, payload.conversationId);\n    return { ...payload, platform, conversationKind };\n  }\n\n  private execute(entry: Scheduled, deleteAfter = true): void {\n    const { event, filename, address } = entry;\n    const bot = this.botsByPlatform[event.platform];\n    if (!bot) {\n      this.reportFailure(entry, deleteAfter, \"missing_bot\");\n      if (deleteAfter) this.removeFile(address, filename);\n      return;\n    }\n    const enqueued = bot.enqueueEvent(\n      createConversationEvent({\n        platform: event.platform as PlatformName,\n        type: \"mention\",\n        conversationId: event.conversationId,\n        conversationKind: event.conversationKind,\n        user: event.userId ?? \"EVENT\",\n        text: buildEventPrompt(event),\n        ts: `event:${filename.replace(/\\.json$/i, \"\")}`,\n      }),\n    );\n    if (!enqueued) {\n      log.logWarning(`Event queue full, discarded: ${filename}`);\n      this.reportFailure(entry, deleteAfter, \"queue_full\");\n    }\n    if (deleteAfter) this.removeFile(address, filename);\n  }\n\n  private reportFailure(\n    entry: Scheduled,\n    deleteAfter: boolean,\n    failure: \"missing_bot\" | \"queue_full\",\n  ): void {\n    const reason = failure === \"missing_bot\" ? \"missing bot\" : \"queue full\";\n    reportUserFacingError(new Error(`Scheduled event delivery failed: ${reason}`), {\n      domain: \"events\",\n      surface: \"event_delivery\",\n      operation: \"event_execute\",\n      severity: \"error\",\n      platform: entry.event.platform,\n      context: {\n        failure,\n        filename: entry.filename,\n        eventType: entry.event.type,\n        conversationId: entry.event.conversationId,\n        conversationKind: entry.event.conversationKind,\n        deleteAfter,\n        triggeredByEventFile: true,\n        textLength: entry.event.text.length,\n      },\n    });\n  }\n\n  private removeFile(address: OfficeAddress, filename: string): void {\n    const path = join(officeEventsDir(this.workspace.office(address)), filename);\n    try {\n      unlinkSync(path);\n    } catch (error) {\n      if (error instanceof Error && \"code\" in error && error.code !== \"ENOENT\") {\n        log.logWarning(`Failed to delete event file: ${filename}`, String(error));\n      }\n    }\n  }\n}\n\nexport function buildEventPrompt(event: MikanEvent): string {\n  switch (event.type) {\n    case \"one-shot\":\n      return [\n        \"Please deliver the following reminder to the user in a short, natural way.\",\n        \"Do not greet, do not introduce yourself, and do not ask generic follow-up questions.\",\n        \"\",\n        `Reminder: ${event.text}`,\n      ].join(\"\\n\");\n    case \"periodic\":\n      return [\n        \"Handle the following recurring task.\",\n        \"Respond concisely. If there is nothing actionable to report, reply with [SILENT].\",\n        \"\",\n        `Task: ${event.text}`,\n      ].join(\"\\n\");\n    case \"immediate\":\n      return [\n        \"Handle the following event/update in a concise, context-appropriate way.\",\n        \"If it reads like a reminder or follow-up, deliver it directly without greeting or generic offers to help.\",\n        \"\",\n        `Event: ${event.text}`,\n      ].join(\"\\n\");\n  }\n}\n"]}

package/dist/file-guards.d.ts

@@ -0,0 +1,26 @@
+import type { Static, TSchema } from "@sinclair/typebox";
+export declare function ensureDirExists(dir: string): void;
+export declare function readTextFileIfExists(path: string): string | undefined;
+export declare function readJsonFileIfExists<T>(path: string, validate: (value: unknown) => value is T, malformedMessage: (detail: string) => string): T | undefined;
+export declare function readJsonSchemaFileIfExists<T extends TSchema>(path: string, schema: T, malformedMessage: (detail: string) => string): Static<T> | undefined;
+export declare function parseJsonValue<T>(raw: string, validate: (value: unknown) => value is T, malformedMessage: (detail: string) => string): T;
+export declare function parseJsonSchemaValue<T extends TSchema>(raw: string, schema: T, malformedMessage: (detail: string) => string): Static<T>;
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+/**
+ * Write `content` to `targetPath` with mode 0600, even when `targetPath`
+ * already exists. Uses O_CREAT|O_EXCL on a temp sibling (so the kernel
+ * guarantees permissions at creation, not after a racy chmod) and then
+ * rename(2) into place for atomicity. Readers never see a torn write,
+ * and a crash mid-write leaves either the old file or a stray .tmp
+ * (cleaned by the next attempt or manually) — never a half-written target.
+ */
+export declare function atomicWritePrivateFile(targetPath: string, content: string): void;
+/**
+ * The state dir (settings, office records, vaults) must never live inside
+ * the working dir: conversation opt-in "full" mode mounts the entire working
+ * dir read-write into sandbox containers, which would expose host-authoritative
+ * state and credentials. Fatal under sandboxed modes; host mode has no mounts,
+ * so only warn about the bad hygiene.
+ */
+export declare function assertStateDirOutsideWorkspace(stateDir: string, workingDir: string, sandboxType: string): void;
+//# sourceMappingURL=file-guards.d.ts.map

package/dist/file-guards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-guards.d.ts","sourceRoot":"","sources":["../src/file-guards.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAiBzD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAEjD;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CASrE;AAED,wBAAgB,oBAAoB,CAAC,CAAC,EACpC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,KAAK,IAAI,CAAC,EACxC,gBAAgB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAC3C,CAAC,GAAG,SAAS,CAGf;AAED,wBAAgB,0BAA0B,CAAC,CAAC,SAAS,OAAO,EAC1D,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,CAAC,EACT,gBAAgB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAC3C,MAAM,CAAC,CAAC,CAAC,GAAG,SAAS,CAGvB;AAWD,wBAAgB,cAAc,CAAC,CAAC,EAC9B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,KAAK,IAAI,CAAC,EACxC,gBAAgB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAC3C,CAAC,CAMH;AAED,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,OAAO,EACpD,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,CAAC,EACT,gBAAgB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAC3C,MAAM,CAAC,CAAC,CAAC,CAeX;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAID;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAiChF;AAaD;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,IAAI,CAWN"}

package/dist/file-guards.js

@@ -0,0 +1,133 @@
+import { Value } from "@sinclair/typebox/value";
+import { closeSync, constants as fsConstants, mkdirSync, openSync, readFileSync, renameSync, unlinkSync, writeSync, } from "node:fs";
+import { resolve } from "node:path";
+import * as log from "./log.js";
+import { randomBytes } from "node:crypto";
+import { basename, dirname, join } from "node:path";
+export function ensureDirExists(dir) {
+    mkdirSync(dir, { recursive: true });
+}
+export function readTextFileIfExists(path) {
+    try {
+        return readFileSync(path, "utf-8");
+    }
+    catch (err) {
+        if (err instanceof Error && "code" in err && err.code === "ENOENT") {
+            return undefined;
+        }
+        throw err;
+    }
+}
+export function readJsonFileIfExists(path, validate, malformedMessage) {
+    const raw = readTextFileIfExists(path);
+    return raw === undefined ? undefined : parseJsonValue(raw, validate, malformedMessage);
+}
+export function readJsonSchemaFileIfExists(path, schema, malformedMessage) {
+    const raw = readTextFileIfExists(path);
+    return raw === undefined ? undefined : parseJsonSchemaValue(raw, schema, malformedMessage);
+}
+function parseJson(raw, malformedMessage) {
+    try {
+        return JSON.parse(raw);
+    }
+    catch (err) {
+        const detail = err instanceof Error ? err.message : String(err);
+        throw new Error(malformedMessage(detail), { cause: err });
+    }
+}
+export function parseJsonValue(raw, validate, malformedMessage) {
+    const parsed = parseJson(raw, malformedMessage);
+    if (!validate(parsed)) {
+        throw new Error(malformedMessage("unexpected JSON shape"));
+    }
+    return parsed;
+}
+export function parseJsonSchemaValue(raw, schema, malformedMessage) {
+    const parsed = parseJson(raw, malformedMessage);
+    if (!Value.Check(schema, parsed)) {
+        let firstError;
+        for (const err of Value.Errors(schema, parsed)) {
+            firstError = err;
+            break;
+        }
+        const detail = !firstError || firstError.path === "" || firstError.path === "/"
+            ? "unexpected JSON shape"
+            : `${firstError.path}: ${firstError.message}`;
+        throw new Error(malformedMessage(detail));
+    }
+    return parsed;
+}
+export function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+const PRIVATE_FILE_MODE = 0o600;
+/**
+ * Write `content` to `targetPath` with mode 0600, even when `targetPath`
+ * already exists. Uses O_CREAT|O_EXCL on a temp sibling (so the kernel
+ * guarantees permissions at creation, not after a racy chmod) and then
+ * rename(2) into place for atomicity. Readers never see a torn write,
+ * and a crash mid-write leaves either the old file or a stray .tmp
+ * (cleaned by the next attempt or manually) — never a half-written target.
+ */
+export function atomicWritePrivateFile(targetPath, content) {
+    const dir = dirname(targetPath);
+    const tmpPath = join(dir, `.${basename(targetPath)}.${process.pid}.${randomBytes(8).toString("hex")}.tmp`);
+    const fd = openSync(tmpPath, fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL, PRIVATE_FILE_MODE);
+    try {
+        writeSync(fd, content);
+    }
+    catch (err) {
+        try {
+            unlinkSync(tmpPath);
+        }
+        catch {
+            // ignore — original error is more informative
+        }
+        throw err;
+    }
+    finally {
+        closeSync(fd);
+    }
+    try {
+        renameSync(tmpPath, targetPath);
+    }
+    catch (err) {
+        try {
+            unlinkSync(tmpPath);
+        }
+        catch {
+            // ignore
+        }
+        throw err;
+    }
+}
+/**
+ * True when `child` is `parent` or a path inside it. Purely lexical (no
+ * symlink resolution) — used for configuration sanity checks, not as the
+ * final security boundary.
+ */
+function isPathInside(child, parent) {
+    const parentPath = resolve(parent);
+    const childPath = resolve(child);
+    return childPath === parentPath || childPath.startsWith(parentPath + "/");
+}
+/**
+ * The state dir (settings, office records, vaults) must never live inside
+ * the working dir: conversation opt-in "full" mode mounts the entire working
+ * dir read-write into sandbox containers, which would expose host-authoritative
+ * state and credentials. Fatal under sandboxed modes; host mode has no mounts,
+ * so only warn about the bad hygiene.
+ */
+export function assertStateDirOutsideWorkspace(stateDir, workingDir, sandboxType) {
+    if (!isPathInside(stateDir, workingDir))
+        return;
+    const message = `--state-dir (${stateDir}) must not be inside the working directory (${workingDir}): ` +
+        `sandbox containers mount the working directory, and a mounted state dir ` +
+        `would expose settings, office records, vaults, and credentials to sandboxed code.`;
+    if (sandboxType === "host") {
+        log.logWarning("Insecure state dir location", message);
+        return;
+    }
+    throw new Error(message);
+}
+//# sourceMappingURL=file-guards.js.map

package/dist/file-guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-guards.js","sourceRoot":"","sources":["../src/file-guards.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAChD,OAAO,EACL,SAAS,EACT,SAAS,IAAI,WAAW,EACxB,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,UAAU,EACV,SAAS,GACV,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEpD,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,QAAwC,EACxC,gBAA4C;IAE5C,MAAM,GAAG,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,IAAY,EACZ,MAAS,EACT,gBAA4C;IAE5C,MAAM,GAAG,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,SAAS,CAAC,GAAW,EAAE,gBAA4C;IAC1E,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,GAAW,EACX,QAAwC,EACxC,gBAA4C;IAE5C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,GAAW,EACX,MAAS,EACT,gBAA4C;IAE5C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QACjC,IAAI,UAAyD,CAAC;QAC9D,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;YAC/C,UAAU,GAAG,GAAG,CAAC;YACjB,MAAM;QACR,CAAC;QACD,MAAM,MAAM,GACV,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,KAAK,EAAE,IAAI,UAAU,CAAC,IAAI,KAAK,GAAG;YAC9D,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,GAAG,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,UAAkB,EAAE,OAAe;IACxE,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,CAClB,GAAG,EACH,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAChF,CAAC;IACF,MAAM,EAAE,GAAG,QAAQ,CACjB,OAAO,EACP,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,OAAO,GAAG,WAAW,CAAC,MAAM,EAC/D,iBAAiB,CAClB,CAAC;IACF,IAAI,CAAC;QACH,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,UAAU,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;QAChD,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;IACD,IAAI,CAAC;QACH,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,UAAU,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,KAAa,EAAE,MAAc;IACjD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,SAAS,KAAK,UAAU,IAAI,SAAS,CAAC,UAAU,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAC5C,QAAgB,EAChB,UAAkB,EAClB,WAAmB;IAEnB,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC;QAAE,OAAO;IAChD,MAAM,OAAO,GACX,gBAAgB,QAAQ,+CAA+C,UAAU,KAAK;QACtF,0EAA0E;QAC1E,mFAAmF,CAAC;IACtF,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QAC3B,GAAG,CAAC,UAAU,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC","sourcesContent":["import type { Static, TSchema } from \"@sinclair/typebox\";\nimport { Value } from \"@sinclair/typebox/value\";\nimport {\n  closeSync,\n  constants as fsConstants,\n  mkdirSync,\n  openSync,\n  readFileSync,\n  renameSync,\n  unlinkSync,\n  writeSync,\n} from \"node:fs\";\nimport { resolve } from \"node:path\";\nimport * as log from \"./log.js\";\nimport { randomBytes } from \"node:crypto\";\nimport { basename, dirname, join } from \"node:path\";\n\nexport function ensureDirExists(dir: string): void {\n  mkdirSync(dir, { recursive: true });\n}\n\nexport function readTextFileIfExists(path: string): string | undefined {\n  try {\n    return readFileSync(path, \"utf-8\");\n  } catch (err) {\n    if (err instanceof Error && \"code\" in err && err.code === \"ENOENT\") {\n      return undefined;\n    }\n    throw err;\n  }\n}\n\nexport function readJsonFileIfExists<T>(\n  path: string,\n  validate: (value: unknown) => value is T,\n  malformedMessage: (detail: string) => string,\n): T | undefined {\n  const raw = readTextFileIfExists(path);\n  return raw === undefined ? undefined : parseJsonValue(raw, validate, malformedMessage);\n}\n\nexport function readJsonSchemaFileIfExists<T extends TSchema>(\n  path: string,\n  schema: T,\n  malformedMessage: (detail: string) => string,\n): Static<T> | undefined {\n  const raw = readTextFileIfExists(path);\n  return raw === undefined ? undefined : parseJsonSchemaValue(raw, schema, malformedMessage);\n}\n\nfunction parseJson(raw: string, malformedMessage: (detail: string) => string): unknown {\n  try {\n    return JSON.parse(raw);\n  } catch (err) {\n    const detail = err instanceof Error ? err.message : String(err);\n    throw new Error(malformedMessage(detail), { cause: err });\n  }\n}\n\nexport function parseJsonValue<T>(\n  raw: string,\n  validate: (value: unknown) => value is T,\n  malformedMessage: (detail: string) => string,\n): T {\n  const parsed = parseJson(raw, malformedMessage);\n  if (!validate(parsed)) {\n    throw new Error(malformedMessage(\"unexpected JSON shape\"));\n  }\n  return parsed;\n}\n\nexport function parseJsonSchemaValue<T extends TSchema>(\n  raw: string,\n  schema: T,\n  malformedMessage: (detail: string) => string,\n): Static<T> {\n  const parsed = parseJson(raw, malformedMessage);\n  if (!Value.Check(schema, parsed)) {\n    let firstError: { path: string; message: string } | undefined;\n    for (const err of Value.Errors(schema, parsed)) {\n      firstError = err;\n      break;\n    }\n    const detail =\n      !firstError || firstError.path === \"\" || firstError.path === \"/\"\n        ? \"unexpected JSON shape\"\n        : `${firstError.path}: ${firstError.message}`;\n    throw new Error(malformedMessage(detail));\n  }\n  return parsed;\n}\n\nexport function isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nconst PRIVATE_FILE_MODE = 0o600;\n\n/**\n * Write `content` to `targetPath` with mode 0600, even when `targetPath`\n * already exists. Uses O_CREAT|O_EXCL on a temp sibling (so the kernel\n * guarantees permissions at creation, not after a racy chmod) and then\n * rename(2) into place for atomicity. Readers never see a torn write,\n * and a crash mid-write leaves either the old file or a stray .tmp\n * (cleaned by the next attempt or manually) — never a half-written target.\n */\nexport function atomicWritePrivateFile(targetPath: string, content: string): void {\n  const dir = dirname(targetPath);\n  const tmpPath = join(\n    dir,\n    `.${basename(targetPath)}.${process.pid}.${randomBytes(8).toString(\"hex\")}.tmp`,\n  );\n  const fd = openSync(\n    tmpPath,\n    fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL,\n    PRIVATE_FILE_MODE,\n  );\n  try {\n    writeSync(fd, content);\n  } catch (err) {\n    try {\n      unlinkSync(tmpPath);\n    } catch {\n      // ignore — original error is more informative\n    }\n    throw err;\n  } finally {\n    closeSync(fd);\n  }\n  try {\n    renameSync(tmpPath, targetPath);\n  } catch (err) {\n    try {\n      unlinkSync(tmpPath);\n    } catch {\n      // ignore\n    }\n    throw err;\n  }\n}\n\n/**\n * True when `child` is `parent` or a path inside it. Purely lexical (no\n * symlink resolution) — used for configuration sanity checks, not as the\n * final security boundary.\n */\nfunction isPathInside(child: string, parent: string): boolean {\n  const parentPath = resolve(parent);\n  const childPath = resolve(child);\n  return childPath === parentPath || childPath.startsWith(parentPath + \"/\");\n}\n\n/**\n * The state dir (settings, office records, vaults) must never live inside\n * the working dir: conversation opt-in \"full\" mode mounts the entire working\n * dir read-write into sandbox containers, which would expose host-authoritative\n * state and credentials. Fatal under sandboxed modes; host mode has no mounts,\n * so only warn about the bad hygiene.\n */\nexport function assertStateDirOutsideWorkspace(\n  stateDir: string,\n  workingDir: string,\n  sandboxType: string,\n): void {\n  if (!isPathInside(stateDir, workingDir)) return;\n  const message =\n    `--state-dir (${stateDir}) must not be inside the working directory (${workingDir}): ` +\n    `sandbox containers mount the working directory, and a mounted state dir ` +\n    `would expose settings, office records, vaults, and credentials to sandboxed code.`;\n  if (sandboxType === \"host\") {\n    log.logWarning(\"Insecure state dir location\", message);\n    return;\n  }\n  throw new Error(message);\n}\n"]}

package/dist/harness/execution-env.d.ts

@@ -0,0 +1,19 @@
+import { type ExecutionEnv } from "@earendil-works/pi-agent-core";
+import type { Executor, SandboxConfig } from "../sandbox/index.js";
+/**
+ * pi's harness tools address files through an {@link ExecutionEnv}. mikan's
+ * `Executor` is the sandbox transport, so this bridges the two:
+ *
+ * - `host` uses pi's own `NodeExecutionEnv` — the host executor is plain node
+ *   fs + spawn, so there is nothing to adapt.
+ * - container / cloudflare are reached only through `exec`, so every file op
+ *   is a shell round-trip over the executor. The methods pi's four tools
+ *   actually call (`absolutePath`, `exists`, `readTextFile`, `readBinaryFile`,
+ *   `writeFile`, `fileInfo`, `exec`) delegate to the executor's existing
+ *   correct transports; the rest are shell fallbacks.
+ *
+ * The executor passed here is mikan's stable wrapper, which delegates to the
+ * actor-resolved executor at call time, so one env serves every run.
+ */
+export declare function createSandboxExecutionEnv(executor: Executor, sandboxType: SandboxConfig["type"], runtimeWorkspaceRoot: string): ExecutionEnv;
+//# sourceMappingURL=execution-env.d.ts.map

package/dist/harness/execution-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-env.d.ts","sourceRoot":"","sources":["../../src/harness/execution-env.ts"],"names":[],"mappings":"AAEA,OAAO,EAUL,KAAK,YAAY,EAQlB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AASnE;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,QAAQ,EAClB,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,EAClC,oBAAoB,EAAE,MAAM,GAC3B,YAAY,CAKd"}