@geminixiang/mikan 1.0.0-beta.7 → 1.0.0-beta.71

package/dist/harness/tools/index.d.ts

@@ -0,0 +1,41 @@
+import type { Api, Model } from "@earendil-works/pi-ai";
+import type { ConversationKind } from "../../types.js";
+import type { Executor, SandboxConfig } from "../../sandbox/index.js";
+import type { OfficeAddress, SandboxResourceController } from "../../types.js";
+import type { EventStore } from "../../events/index.js";
+import { type MikanHarnessTool } from "./pi-tools.js";
+import { createTaskTools } from "./task.js";
+import type { PlatformToolPackFactory, PlatformToolRunContext } from "./types.js";
+export { createSubagentTool } from "./subagent.js";
+export declare function createMikanTools(executor: Executor, eventStore: EventStore, sandboxController?: {
+    sandbox: SandboxConfig;
+    resourceController?: Pick<SandboxResourceController, "getLimitStatus" | "setLimits">;
+}, 
+/** Platform capability pack factories (e.g. GitHub PR/CI); instantiated
+ *  here so each runner owns its packs' bind state. Not core tools. */
+platformToolPackFactories?: readonly PlatformToolPackFactory[], imageGeneration?: {
+    model: Model<Api>;
+    getApiKey: () => Promise<string | undefined>;
+    outputDir: string;
+}): {
+    tools: MikanHarnessTool[];
+    setUploadFunction: (fn: (filePath: string, title?: string) => Promise<void>) => void;
+    /** Upload for generate_image. Receives the file's HOST path — the tool
+     *  writes host-side, so this must not stage through the sandbox like the
+     *  attach upload does. No-op when image generation is not configured. */
+    setImageUploadFunction: (fn: (hostPath: string, title?: string) => Promise<void>) => void;
+    bindTasks: ReturnType<typeof createTaskTools>["bindTasks"];
+    setReactFunction: (fn: ((emoji: string) => Promise<void>) | null) => void;
+    bindPlatformToolPacks: (ctx: PlatformToolRunContext) => void;
+    setEventContext: (context: {
+        platform: string;
+        conversationId: string;
+        conversationKind: ConversationKind;
+        userId: string;
+    }) => void;
+    setSandboxContext: (context: {
+        address: OfficeAddress;
+        userId: string;
+    }) => void;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/harness/tools/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/harness/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,KAAK,EAAE,aAAa,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAC/E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGxD,OAAO,EAAsC,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAI5C,OAAO,KAAK,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAElF,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,QAAQ,EAClB,UAAU,EAAE,UAAU,EACtB,iBAAiB,CAAC,EAAE;IAClB,OAAO,EAAE,aAAa,CAAC;IACvB,kBAAkB,CAAC,EAAE,IAAI,CAAC,yBAAyB,EAAE,gBAAgB,GAAG,WAAW,CAAC,CAAC;CACtF;AACD;sEACsE;AACtE,yBAAyB,GAAE,SAAS,uBAAuB,EAAO,EAClE,eAAe,CAAC,EAAE;IAChB,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAClB,SAAS,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C,SAAS,EAAE,MAAM,CAAC;CACnB,GACA;IACD,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,iBAAiB,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;IACrF;;6EAEyE;IACzE,sBAAsB,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;IAC1F,SAAS,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,WAAW,CAAC,CAAC;IAC3D,gBAAgB,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,KAAK,IAAI,CAAC;IAC1E,qBAAqB,EAAE,CAAC,GAAG,EAAE,sBAAsB,KAAK,IAAI,CAAC;IAC7D,eAAe,EAAE,CAAC,OAAO,EAAE;QACzB,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,EAAE,gBAAgB,CAAC;QACnC,MAAM,EAAE,MAAM,CAAC;KAChB,KAAK,IAAI,CAAC;IACX,iBAAiB,EAAE,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,aAAa,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CAClF,CAuCA"}

package/dist/harness/tools/index.js

@@ -0,0 +1,51 @@
+import { createAttachTool } from "./attach.js";
+import { createEventTool } from "./event.js";
+import { createGenerateImageTool } from "./generate-image.js";
+import { adaptAgentTool, createSandboxTools } from "./pi-tools.js";
+import { createTaskTools } from "./task.js";
+import { createJevTool } from "./jev.js";
+import { createReactTool } from "./react.js";
+import { createSandboxTool } from "./sandbox.js";
+export { createSubagentTool } from "./subagent.js";
+export function createMikanTools(executor, eventStore, sandboxController, 
+/** Platform capability pack factories (e.g. GitHub PR/CI); instantiated
+ *  here so each runner owns its packs' bind state. Not core tools. */
+platformToolPackFactories = [], imageGeneration) {
+    const { tool: attachTool, setUploadFunction } = createAttachTool();
+    const imageTool = imageGeneration ? createGenerateImageTool(imageGeneration) : undefined;
+    const { tools: taskTools, bindTasks } = createTaskTools();
+    const { tool: reactTool, setReactFunction } = createReactTool();
+    const jevTool = createJevTool();
+    const { tool: eventTool, setEventContext } = createEventTool(eventStore);
+    const { tool: sandboxTool, setSandboxContext } = createSandboxTool(sandboxController ?? { sandbox: executor.getSandboxConfig() });
+    const platformToolPacks = platformToolPackFactories.map((createPack) => createPack());
+    const packTools = platformToolPacks.flatMap((pack) => pack.tools);
+    return {
+        tools: [
+            // pi-native read/write/edit/bash, addressed through the sandbox env.
+            ...createSandboxTools(),
+            adaptAgentTool(eventTool),
+            adaptAgentTool(sandboxTool),
+            adaptAgentTool(attachTool),
+            ...(imageTool ? [adaptAgentTool(imageTool.tool)] : []),
+            adaptAgentTool(reactTool),
+            adaptAgentTool(jevTool),
+            ...taskTools.map(adaptAgentTool),
+            ...packTools.map(adaptAgentTool),
+        ],
+        setUploadFunction,
+        setImageUploadFunction: (fn) => {
+            imageTool?.setUploadFunction(fn);
+        },
+        setReactFunction,
+        bindTasks,
+        bindPlatformToolPacks: (ctx) => {
+            for (const pack of platformToolPacks) {
+                pack.bindRun(ctx);
+            }
+        },
+        setEventContext,
+        setSandboxContext,
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/harness/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/harness/tools/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAI/C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAyB,MAAM,eAAe,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,UAAU,gBAAgB,CAC9B,QAAkB,EAClB,UAAsB,EACtB,iBAGC;AACD;sEACsE;AACtE,yBAAyB,GAAuC,EAAE,EAClE,eAIC;IAmBD,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,gBAAgB,EAAE,CAAC;IACnE,MAAM,SAAS,GAAG,eAAe,CAAC,CAAC,CAAC,uBAAuB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,eAAe,EAAE,CAAC;IAC1D,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,eAAe,EAAE,CAAC;IAChE,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAChC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IACzE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,iBAAiB,EAAE,GAAG,iBAAiB,CAChE,iBAAiB,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,gBAAgB,EAAE,EAAE,CAC9D,CAAC;IACF,MAAM,iBAAiB,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;IACtF,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClE,OAAO;QACL,KAAK,EAAE;YACL,qEAAqE;YACrE,GAAG,kBAAkB,EAAE;YACvB,cAAc,CAAC,SAAS,CAAC;YACzB,cAAc,CAAC,WAAW,CAAC;YAC3B,cAAc,CAAC,UAAU,CAAC;YAC1B,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,cAAc,CAAC,SAAS,CAAC;YACzB,cAAc,CAAC,OAAO,CAAC;YACvB,GAAG,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC;YAChC,GAAG,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC;SACjC;QACD,iBAAiB;QACjB,sBAAsB,EAAE,CAAC,EAAE,EAAE,EAAE;YAC7B,SAAS,EAAE,iBAAiB,CAAC,EAAE,CAAC,CAAC;QACnC,CAAC;QACD,gBAAgB;QAChB,SAAS;QACT,qBAAqB,EAAE,CAAC,GAAG,EAAE,EAAE;YAC7B,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;gBACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QACD,eAAe;QACf,iBAAiB;KAClB,CAAC;AACJ,CAAC","sourcesContent":["import type { Api, Model } from \"@earendil-works/pi-ai\";\nimport type { ConversationKind } from \"../../types.js\";\nimport { createAttachTool } from \"./attach.js\";\nimport type { Executor, SandboxConfig } from \"../../sandbox/index.js\";\nimport type { OfficeAddress, SandboxResourceController } from \"../../types.js\";\nimport type { EventStore } from \"../../events/index.js\";\nimport { createEventTool } from \"./event.js\";\nimport { createGenerateImageTool } from \"./generate-image.js\";\nimport { adaptAgentTool, createSandboxTools, type MikanHarnessTool } from \"./pi-tools.js\";\nimport { createTaskTools } from \"./task.js\";\nimport { createJevTool } from \"./jev.js\";\nimport { createReactTool } from \"./react.js\";\nimport { createSandboxTool } from \"./sandbox.js\";\nimport type { PlatformToolPackFactory, PlatformToolRunContext } from \"./types.js\";\n\nexport { createSubagentTool } from \"./subagent.js\";\n\nexport function createMikanTools(\n  executor: Executor,\n  eventStore: EventStore,\n  sandboxController?: {\n    sandbox: SandboxConfig;\n    resourceController?: Pick<SandboxResourceController, \"getLimitStatus\" | \"setLimits\">;\n  },\n  /** Platform capability pack factories (e.g. GitHub PR/CI); instantiated\n   *  here so each runner owns its packs' bind state. Not core tools. */\n  platformToolPackFactories: readonly PlatformToolPackFactory[] = [],\n  imageGeneration?: {\n    model: Model<Api>;\n    getApiKey: () => Promise<string | undefined>;\n    outputDir: string;\n  },\n): {\n  tools: MikanHarnessTool[];\n  setUploadFunction: (fn: (filePath: string, title?: string) => Promise<void>) => void;\n  /** Upload for generate_image. Receives the file's HOST path — the tool\n   *  writes host-side, so this must not stage through the sandbox like the\n   *  attach upload does. No-op when image generation is not configured. */\n  setImageUploadFunction: (fn: (hostPath: string, title?: string) => Promise<void>) => void;\n  bindTasks: ReturnType<typeof createTaskTools>[\"bindTasks\"];\n  setReactFunction: (fn: ((emoji: string) => Promise<void>) | null) => void;\n  bindPlatformToolPacks: (ctx: PlatformToolRunContext) => void;\n  setEventContext: (context: {\n    platform: string;\n    conversationId: string;\n    conversationKind: ConversationKind;\n    userId: string;\n  }) => void;\n  setSandboxContext: (context: { address: OfficeAddress; userId: string }) => void;\n} {\n  const { tool: attachTool, setUploadFunction } = createAttachTool();\n  const imageTool = imageGeneration ? createGenerateImageTool(imageGeneration) : undefined;\n  const { tools: taskTools, bindTasks } = createTaskTools();\n  const { tool: reactTool, setReactFunction } = createReactTool();\n  const jevTool = createJevTool();\n  const { tool: eventTool, setEventContext } = createEventTool(eventStore);\n  const { tool: sandboxTool, setSandboxContext } = createSandboxTool(\n    sandboxController ?? { sandbox: executor.getSandboxConfig() },\n  );\n  const platformToolPacks = platformToolPackFactories.map((createPack) => createPack());\n  const packTools = platformToolPacks.flatMap((pack) => pack.tools);\n  return {\n    tools: [\n      // pi-native read/write/edit/bash, addressed through the sandbox env.\n      ...createSandboxTools(),\n      adaptAgentTool(eventTool),\n      adaptAgentTool(sandboxTool),\n      adaptAgentTool(attachTool),\n      ...(imageTool ? [adaptAgentTool(imageTool.tool)] : []),\n      adaptAgentTool(reactTool),\n      adaptAgentTool(jevTool),\n      ...taskTools.map(adaptAgentTool),\n      ...packTools.map(adaptAgentTool),\n    ],\n    setUploadFunction,\n    setImageUploadFunction: (fn) => {\n      imageTool?.setUploadFunction(fn);\n    },\n    setReactFunction,\n    bindTasks,\n    bindPlatformToolPacks: (ctx) => {\n      for (const pack of platformToolPacks) {\n        pack.bindRun(ctx);\n      }\n    },\n    setEventContext,\n    setSandboxContext,\n  };\n}\n"]}

package/dist/harness/tools/jev.d.ts

@@ -0,0 +1,21 @@
+import type { AgentTool } from "@earendil-works/pi-agent-core";
+declare const jevSchema: import("@sinclair/typebox").TObject<{
+    label: import("@sinclair/typebox").TString;
+    state: import("@sinclair/typebox").TAny;
+    questions: import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TObject<{
+        type: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"boolean">, import("@sinclair/typebox").TLiteral<"choice">, import("@sinclair/typebox").TLiteral<"score">]>;
+        instructions: import("@sinclair/typebox").TAny;
+        criteria: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TAny>;
+    }>>;
+}>;
+/**
+ * The `jev` tool is a direct pass-through of the Jev decisions API
+ * (`state` + typed `questions` → calibrated answers) so the model can use
+ * Jev the way any client would: it composes the state and questions itself.
+ * Unlike the harness-internal decision points, a missing OPENROUTER_API_KEY
+ * surfaces as a tool error so the model knows to judge for itself instead of
+ * silently falling back.
+ */
+export declare function createJevTool(): AgentTool<typeof jevSchema>;
+export {};
+//# sourceMappingURL=jev.d.ts.map

package/dist/harness/tools/jev.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jev.d.ts","sourceRoot":"","sources":["../../../src/harness/tools/jev.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AA+B/D,QAAA,MAAM,SAAS;;;;;;;;EAQb,CAAC;AAyCH;;;;;;;GAOG;AACH,wBAAgB,aAAa,IAAI,SAAS,CAAC,OAAO,SAAS,CAAC,CAiD3D"}

package/dist/harness/tools/jev.js

@@ -0,0 +1,109 @@
+import { Type } from "@sinclair/typebox";
+import { evaluateWithJev, JevNotConfiguredError, } from "../jev.js";
+// State, instructions, and criteria descriptions all accept text or JSON
+// structure per the Jev API; `Type.Any` keeps that open while the object root
+// stays provider-safe.
+const entrySchema = Type.Any({
+    description: "Text, or a JSON object or array. Jev reads structure, so labelled keys help.",
+});
+const questionSchema = Type.Object({
+    type: Type.Union([Type.Literal("boolean"), Type.Literal("choice"), Type.Literal("score")], {
+        description: "boolean: yes/no, answered as a probability 0-1. choice: pick one option from a set; answered with a probability per option and a confidence. score: place the state on an ordered rubric; answered with a score (fractional between levels), a probability per level, and a confidence.",
+    }),
+    instructions: entrySchema,
+    criteria: Type.Optional(Type.Any({
+        description: 'choice (required): object mapping option id -> description (string, JSON, or null when the id is self-explanatory). score (required): array of level descriptions, lowest first. boolean (optional): {"true": description of yes, "false": description of no}.',
+    })),
+});
+const jevSchema = Type.Object({
+    label: Type.String({ description: "Brief description of the judgment (shown to user)" }),
+    state: entrySchema,
+    questions: Type.Record(Type.String(), questionSchema, {
+        description: "Questions keyed by id. Every question is evaluated independently against the same state in one request.",
+        minProperties: 1,
+    }),
+});
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function toJevQuestion(id, question) {
+    const instructions = question.instructions;
+    if (question.type === "boolean") {
+        if (question.criteria === undefined)
+            return { type: "boolean", instructions };
+        if (!isRecord(question.criteria)) {
+            throw new Error(`Question "${id}" (boolean) criteria must be {"true": …, "false": …}`);
+        }
+        return {
+            type: "boolean",
+            instructions,
+            criteria: question.criteria,
+        };
+    }
+    if (question.type === "choice") {
+        if (!isRecord(question.criteria) || Object.keys(question.criteria).length < 2) {
+            throw new Error(`Question "${id}" (choice) criteria must be an object with at least two options`);
+        }
+        return {
+            type: "choice",
+            instructions,
+            criteria: question.criteria,
+        };
+    }
+    if (!Array.isArray(question.criteria) || question.criteria.length < 2) {
+        throw new Error(`Question "${id}" (score) criteria must be an array of at least two levels, lowest first`);
+    }
+    return { type: "score", instructions, criteria: question.criteria };
+}
+/**
+ * The `jev` tool is a direct pass-through of the Jev decisions API
+ * (`state` + typed `questions` → calibrated answers) so the model can use
+ * Jev the way any client would: it composes the state and questions itself.
+ * Unlike the harness-internal decision points, a missing OPENROUTER_API_KEY
+ * surfaces as a tool error so the model knows to judge for itself instead of
+ * silently falling back.
+ */
+export function createJevTool() {
+    return {
+        name: "jev",
+        label: "jev",
+        description: [
+            "Ask Jev, a fast calibrated decision model, typed questions about a state. Jev never generates text; it returns probabilities.",
+            "state: the material to judge — text, or a JSON object/array (prefer labelled keys). questions: any number of boolean / choice / score questions, all evaluated against that state in one request.",
+            "Use it for classification, detection, scoring, ranking, routing, extraction over known candidates, and verification — anywhere you would otherwise judge by eye.",
+            "Ask narrow, atomic questions and batch them: to rank N items, ask one score question per item (not one choice over orderings); to verify a summary, ask one boolean per claim.",
+            "choice and score answers carry a confidence; below 0.5 Jev is unsure between options, so say so instead of presenting the top option as settled.",
+        ].join(" "),
+        parameters: jevSchema,
+        execute: async (_toolCallId, args, signal) => {
+            if (signal?.aborted)
+                throw new Error("Operation aborted");
+            const questions = {};
+            for (const [id, question] of Object.entries(args.questions)) {
+                questions[id] = toJevQuestion(id, question);
+            }
+            let result;
+            try {
+                result = await evaluateWithJev(args.state, questions, {
+                    abortSignal: signal,
+                });
+            }
+            catch (error) {
+                if (error instanceof JevNotConfiguredError) {
+                    throw new Error("Jev is not configured (OPENROUTER_API_KEY missing). Judge the input yourself.", { cause: error });
+                }
+                throw error;
+            }
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify({ answers: result.answers, model: result.model, usage: result.usage }, null, 2),
+                    },
+                ],
+                details: undefined,
+            };
+        },
+    };
+}
+//# sourceMappingURL=jev.js.map

package/dist/harness/tools/jev.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jev.js","sourceRoot":"","sources":["../../../src/harness/tools/jev.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAe,MAAM,mBAAmB,CAAC;AACtD,OAAO,EACL,eAAe,EACf,qBAAqB,GAItB,MAAM,WAAW,CAAC;AAEnB,yEAAyE;AACzE,8EAA8E;AAC9E,uBAAuB;AACvB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC;IAC3B,WAAW,EAAE,8EAA8E;CAC5F,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE;QACzF,WAAW,EACT,yRAAyR;KAC5R,CAAC;IACF,YAAY,EAAE,WAAW;IACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CACrB,IAAI,CAAC,GAAG,CAAC;QACP,WAAW,EACT,gQAAgQ;KACnQ,CAAC,CACH;CACF,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,mDAAmD,EAAE,CAAC;IACxF,KAAK,EAAE,WAAW;IAClB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE;QACpD,WAAW,EACT,yGAAyG;QAC3G,aAAa,EAAE,CAAC;KACjB,CAAC;CACH,CAAC,CAAC;AAIH,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa,CAAC,EAAU,EAAE,QAAqB;IACtD,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAwB,CAAC;IACvD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;QAC9E,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,sDAAsD,CAAC,CAAC;QACzF,CAAC;QACD,OAAO;YACL,IAAI,EAAE,SAAS;YACf,YAAY;YACZ,QAAQ,EAAE,QAAQ,CAAC,QAAiD;SACrE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,KAAK,CACb,aAAa,EAAE,iEAAiE,CACjF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,YAAY;YACZ,QAAQ,EAAE,QAAQ,CAAC,QAAoC;SACxD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,aAAa,EAAE,0EAA0E,CAC1F,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAsB,EAAE,CAAC;AACpF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,WAAW,EAAE;YACX,+HAA+H;YAC/H,mMAAmM;YACnM,kKAAkK;YAClK,gLAAgL;YAChL,kJAAkJ;SACnJ,CAAC,IAAI,CAAC,GAAG,CAAC;QACX,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;YAC3C,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC1D,MAAM,SAAS,GAAiB,EAAE,CAAC;YACnC,KAAK,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC5D,SAAS,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC9C,CAAC;YAED,IAAI,MAAM,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,KAAiB,EAAE,SAAS,EAAE;oBAChE,WAAW,EAAE,MAAM;iBACpB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;oBAC3C,MAAM,IAAI,KAAK,CACb,+EAA+E,EAC/E,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YAED,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EACrE,IAAI,EACJ,CAAC,CACF;qBACF;iBACF;gBACD,OAAO,EAAE,SAAS;aACnB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { AgentTool } from \"@earendil-works/pi-agent-core\";\nimport { Type, type Static } from \"@sinclair/typebox\";\nimport {\n  evaluateWithJev,\n  JevNotConfiguredError,\n  type JevEntry,\n  type JevQuestion,\n  type JevQuestions,\n} from \"../jev.js\";\n\n// State, instructions, and criteria descriptions all accept text or JSON\n// structure per the Jev API; `Type.Any` keeps that open while the object root\n// stays provider-safe.\nconst entrySchema = Type.Any({\n  description: \"Text, or a JSON object or array. Jev reads structure, so labelled keys help.\",\n});\n\nconst questionSchema = Type.Object({\n  type: Type.Union([Type.Literal(\"boolean\"), Type.Literal(\"choice\"), Type.Literal(\"score\")], {\n    description:\n      \"boolean: yes/no, answered as a probability 0-1. choice: pick one option from a set; answered with a probability per option and a confidence. score: place the state on an ordered rubric; answered with a score (fractional between levels), a probability per level, and a confidence.\",\n  }),\n  instructions: entrySchema,\n  criteria: Type.Optional(\n    Type.Any({\n      description:\n        'choice (required): object mapping option id -> description (string, JSON, or null when the id is self-explanatory). score (required): array of level descriptions, lowest first. boolean (optional): {\"true\": description of yes, \"false\": description of no}.',\n    }),\n  ),\n});\n\nconst jevSchema = Type.Object({\n  label: Type.String({ description: \"Brief description of the judgment (shown to user)\" }),\n  state: entrySchema,\n  questions: Type.Record(Type.String(), questionSchema, {\n    description:\n      \"Questions keyed by id. Every question is evaluated independently against the same state in one request.\",\n    minProperties: 1,\n  }),\n});\n\ntype QuestionArg = Static<typeof questionSchema>;\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction toJevQuestion(id: string, question: QuestionArg): JevQuestion {\n  const instructions = question.instructions as JevEntry;\n  if (question.type === \"boolean\") {\n    if (question.criteria === undefined) return { type: \"boolean\", instructions };\n    if (!isRecord(question.criteria)) {\n      throw new Error(`Question \"${id}\" (boolean) criteria must be {\"true\": …, \"false\": …}`);\n    }\n    return {\n      type: \"boolean\",\n      instructions,\n      criteria: question.criteria as { true?: JevEntry; false?: JevEntry },\n    };\n  }\n  if (question.type === \"choice\") {\n    if (!isRecord(question.criteria) || Object.keys(question.criteria).length < 2) {\n      throw new Error(\n        `Question \"${id}\" (choice) criteria must be an object with at least two options`,\n      );\n    }\n    return {\n      type: \"choice\",\n      instructions,\n      criteria: question.criteria as Record<string, JevEntry>,\n    };\n  }\n  if (!Array.isArray(question.criteria) || question.criteria.length < 2) {\n    throw new Error(\n      `Question \"${id}\" (score) criteria must be an array of at least two levels, lowest first`,\n    );\n  }\n  return { type: \"score\", instructions, criteria: question.criteria as JevEntry[] };\n}\n\n/**\n * The `jev` tool is a direct pass-through of the Jev decisions API\n * (`state` + typed `questions` → calibrated answers) so the model can use\n * Jev the way any client would: it composes the state and questions itself.\n * Unlike the harness-internal decision points, a missing OPENROUTER_API_KEY\n * surfaces as a tool error so the model knows to judge for itself instead of\n * silently falling back.\n */\nexport function createJevTool(): AgentTool<typeof jevSchema> {\n  return {\n    name: \"jev\",\n    label: \"jev\",\n    description: [\n      \"Ask Jev, a fast calibrated decision model, typed questions about a state. Jev never generates text; it returns probabilities.\",\n      \"state: the material to judge — text, or a JSON object/array (prefer labelled keys). questions: any number of boolean / choice / score questions, all evaluated against that state in one request.\",\n      \"Use it for classification, detection, scoring, ranking, routing, extraction over known candidates, and verification — anywhere you would otherwise judge by eye.\",\n      \"Ask narrow, atomic questions and batch them: to rank N items, ask one score question per item (not one choice over orderings); to verify a summary, ask one boolean per claim.\",\n      \"choice and score answers carry a confidence; below 0.5 Jev is unsure between options, so say so instead of presenting the top option as settled.\",\n    ].join(\" \"),\n    parameters: jevSchema,\n    execute: async (_toolCallId, args, signal) => {\n      if (signal?.aborted) throw new Error(\"Operation aborted\");\n      const questions: JevQuestions = {};\n      for (const [id, question] of Object.entries(args.questions)) {\n        questions[id] = toJevQuestion(id, question);\n      }\n\n      let result;\n      try {\n        result = await evaluateWithJev(args.state as JevEntry, questions, {\n          abortSignal: signal,\n        });\n      } catch (error) {\n        if (error instanceof JevNotConfiguredError) {\n          throw new Error(\n            \"Jev is not configured (OPENROUTER_API_KEY missing). Judge the input yourself.\",\n            { cause: error },\n          );\n        }\n        throw error;\n      }\n\n      return {\n        content: [\n          {\n            type: \"text\" as const,\n            text: JSON.stringify(\n              { answers: result.answers, model: result.model, usage: result.usage },\n              null,\n              2,\n            ),\n          },\n        ],\n        details: undefined,\n      };\n    },\n  };\n}\n"]}

package/dist/harness/tools/pi-tools.d.ts

@@ -0,0 +1,18 @@
+import { type AgentTool } from "@earendil-works/pi-agent-core";
+import type { MikanHarnessTool } from "../types.js";
+export type { MikanHarnessTool };
+export declare function isHarnessTool(tool: unknown): tool is MikanHarnessTool;
+/**
+ * pi's four execution tools, bound to the sandbox-backed env supplied as the
+ * harness `toolContext`. Nothing mikan-specific lives here beyond `label` and
+ * the bash cwd (pi defaults it to `env.cwd` anyway, but pinning it documents
+ * that the runtime workspace root is the shell's working directory).
+ */
+export declare function createSandboxTools(): MikanHarnessTool[];
+/**
+ * Adapt a mikan-authored `AgentTool` (its execute takes `(id, params, signal,
+ * onUpdate)`) to a harness tool. mikan's tools carry their own sandbox executor
+ * and read the abort signal from the harness context.
+ */
+export declare function adaptAgentTool(tool: AgentTool): MikanHarnessTool;
+//# sourceMappingURL=pi-tools.d.ts.map

package/dist/harness/tools/pi-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi-tools.d.ts","sourceRoot":"","sources":["../../../src/harness/tools/pi-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,SAAS,EACf,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,YAAY,EAAE,gBAAgB,EAAE,CAAC;AAYjC,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,gBAAgB,CAErE;AAkDD;;;;;GAKG;AACH,wBAAgB,kBAAkB,IAAI,gBAAgB,EAAE,CAYvD;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,GAAG,gBAAgB,CAQhE"}

package/dist/harness/tools/pi-tools.js

@@ -0,0 +1,84 @@
+import { createBashTool, createEditTool, createReadTool, createWriteTool, } from "@earendil-works/pi-agent-core";
+import { Type } from "@sinclair/typebox";
+/**
+ * Marker distinguishing harness-native tools from mikan's own `AgentTool`s.
+ *
+ * `MikanAgentSession` is published API and historically accepted plain
+ * `AgentTool`s, so the session upgrades any untagged tool at the boundary
+ * instead of forcing every caller to adapt first. Pi's native tools and
+ * `adaptAgentTool` results carry the marker so they pass through untouched.
+ */
+const HARNESS_TOOL = Symbol.for("mikan.harnessTool");
+export function isHarnessTool(tool) {
+    return Boolean(tool && tool[HARNESS_TOOL]);
+}
+function tagHarnessTool(tool) {
+    Object.defineProperty(tool, HARNESS_TOOL, { value: true });
+    return tool;
+}
+/**
+ * Add mikan's `label` parameter to a pi-native tool.
+ *
+ * pi's tools do not carry a `label`, but mikan's system prompt tells the model
+ * every tool takes one and the presenter renders it as the run's current step.
+ * The parameter is optional so pi's own validation still accepts a raw call,
+ * and it is stripped before the original tool sees the arguments.
+ */
+function withLabel(tool) {
+    const schema = tool.parameters;
+    // Pi uses `typebox`, not mikan's `@sinclair/typebox`. Preserve its JSON
+    // Schema (especially required) instead of rebuilding optional markers.
+    const parameters = {
+        ...schema,
+        properties: {
+            ...schema.properties,
+            label: Type.String({ description: "Brief description of this action (shown to user)" }),
+        },
+    };
+    return tagHarnessTool({
+        ...tool,
+        parameters,
+        execute: async (...args) => {
+            const [toolCallId, params, onUpdate, toolContext, invocation, context] = args;
+            if (!toolContext?.env) {
+                throw new Error(`Tool ${tool.name} requires toolContext.env; supply an authorized execution env.`);
+            }
+            const { label: _label, ...rest } = params;
+            return tool.execute(toolCallId, rest, onUpdate, toolContext, invocation, context);
+        },
+    });
+}
+/**
+ * pi's four execution tools, bound to the sandbox-backed env supplied as the
+ * harness `toolContext`. Nothing mikan-specific lives here beyond `label` and
+ * the bash cwd (pi defaults it to `env.cwd` anyway, but pinning it documents
+ * that the runtime workspace root is the shell's working directory).
+ */
+export function createSandboxTools() {
+    const bash = createBashTool({
+        prepare: (execution, toolContext) => {
+            execution.cwd = toolContext.env.cwd;
+        },
+    });
+    return [
+        withLabel(createReadTool()),
+        withLabel(createWriteTool()),
+        withLabel(createEditTool()),
+        withLabel(bash),
+    ];
+}
+/**
+ * Adapt a mikan-authored `AgentTool` (its execute takes `(id, params, signal,
+ * onUpdate)`) to a harness tool. mikan's tools carry their own sandbox executor
+ * and read the abort signal from the harness context.
+ */
+export function adaptAgentTool(tool) {
+    return tagHarnessTool({
+        ...tool,
+        execute: (...args) => {
+            const [toolCallId, params, onUpdate, , , context] = args;
+            return tool.execute(toolCallId, params, context.abortSignal, onUpdate);
+        },
+    });
+}
+//# sourceMappingURL=pi-tools.js.map

package/dist/harness/tools/pi-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi-tools.js","sourceRoot":"","sources":["../../../src/harness/tools/pi-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,cAAc,EACd,cAAc,EACd,eAAe,GAEhB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,IAAI,EAAgB,MAAM,mBAAmB,CAAC;AAKvD;;;;;;;GAOG;AACH,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;AAErD,MAAM,UAAU,aAAa,CAAC,IAAa;IACzC,OAAO,OAAO,CAAC,IAAI,IAAK,IAAqC,CAAC,YAAY,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,cAAc,CAAC,IAAsB;IAC5C,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,IAAsB;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAqB,CAAC;IAC1C,wEAAwE;IACxE,uEAAuE;IACvE,MAAM,UAAU,GAAG;QACjB,GAAG,MAAM;QACT,UAAU,EAAE;YACV,GAAG,MAAM,CAAC,UAAU;YACpB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kDAAkD,EAAE,CAAC;SACxF;KACF,CAAC;IAEF,OAAO,cAAc,CAAC;QACpB,GAAG,IAAI;QACP,UAAU;QACV,OAAO,EAAE,KAAK,EAAE,GAAG,IAA6C,EAAE,EAAE;YAClE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;YAC9E,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CACb,QAAQ,IAAI,CAAC,IAAI,gEAAgE,CAClF,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,MAAiC,CAAC;YACrE,OAAO,IAAI,CAAC,OAAO,CACjB,UAAU,EACV,IAAqB,EACrB,QAAQ,EACR,WAAW,EACX,UAAU,EACV,OAAO,CACR,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,IAAI,GAAG,cAAc,CAAC;QAC1B,OAAO,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,EAAE;YAClC,SAAS,CAAC,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;QACtC,CAAC;KACF,CAAC,CAAC;IACH,OAAO;QACL,SAAS,CAAC,cAAc,EAAsB,CAAC;QAC/C,SAAS,CAAC,eAAe,EAAsB,CAAC;QAChD,SAAS,CAAC,cAAc,EAAsB,CAAC;QAC/C,SAAS,CAAC,IAAwB,CAAC;KACpC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAe;IAC5C,OAAO,cAAc,CAAC;QACpB,GAAG,IAAI;QACP,OAAO,EAAE,CAAC,GAAG,IAA6C,EAAE,EAAE;YAC5D,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,AAAD,EAAG,AAAD,EAAG,OAAO,CAAC,GAAG,IAAI,CAAC;YACzD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACzE,CAAC;KACkB,CAAC,CAAC;AACzB,CAAC","sourcesContent":["import {\n  createBashTool,\n  createEditTool,\n  createReadTool,\n  createWriteTool,\n  type AgentTool,\n} from \"@earendil-works/pi-agent-core\";\nimport { Type, type TSchema } from \"@sinclair/typebox\";\nimport type { MikanHarnessTool } from \"../types.js\";\n\nexport type { MikanHarnessTool };\n\n/**\n * Marker distinguishing harness-native tools from mikan's own `AgentTool`s.\n *\n * `MikanAgentSession` is published API and historically accepted plain\n * `AgentTool`s, so the session upgrades any untagged tool at the boundary\n * instead of forcing every caller to adapt first. Pi's native tools and\n * `adaptAgentTool` results carry the marker so they pass through untouched.\n */\nconst HARNESS_TOOL = Symbol.for(\"mikan.harnessTool\");\n\nexport function isHarnessTool(tool: unknown): tool is MikanHarnessTool {\n  return Boolean(tool && (tool as Record<PropertyKey, unknown>)[HARNESS_TOOL]);\n}\n\nfunction tagHarnessTool(tool: MikanHarnessTool): MikanHarnessTool {\n  Object.defineProperty(tool, HARNESS_TOOL, { value: true });\n  return tool;\n}\n\n/**\n * Add mikan's `label` parameter to a pi-native tool.\n *\n * pi's tools do not carry a `label`, but mikan's system prompt tells the model\n * every tool takes one and the presenter renders it as the run's current step.\n * The parameter is optional so pi's own validation still accepts a raw call,\n * and it is stripped before the original tool sees the arguments.\n */\nfunction withLabel(tool: MikanHarnessTool): MikanHarnessTool {\n  const schema = tool.parameters as TSchema;\n  // Pi uses `typebox`, not mikan's `@sinclair/typebox`. Preserve its JSON\n  // Schema (especially required) instead of rebuilding optional markers.\n  const parameters = {\n    ...schema,\n    properties: {\n      ...schema.properties,\n      label: Type.String({ description: \"Brief description of this action (shown to user)\" }),\n    },\n  };\n\n  return tagHarnessTool({\n    ...tool,\n    parameters,\n    execute: async (...args: Parameters<MikanHarnessTool[\"execute\"]>) => {\n      const [toolCallId, params, onUpdate, toolContext, invocation, context] = args;\n      if (!toolContext?.env) {\n        throw new Error(\n          `Tool ${tool.name} requires toolContext.env; supply an authorized execution env.`,\n        );\n      }\n      const { label: _label, ...rest } = params as Record<string, unknown>;\n      return tool.execute(\n        toolCallId,\n        rest as typeof params,\n        onUpdate,\n        toolContext,\n        invocation,\n        context,\n      );\n    },\n  });\n}\n\n/**\n * pi's four execution tools, bound to the sandbox-backed env supplied as the\n * harness `toolContext`. Nothing mikan-specific lives here beyond `label` and\n * the bash cwd (pi defaults it to `env.cwd` anyway, but pinning it documents\n * that the runtime workspace root is the shell's working directory).\n */\nexport function createSandboxTools(): MikanHarnessTool[] {\n  const bash = createBashTool({\n    prepare: (execution, toolContext) => {\n      execution.cwd = toolContext.env.cwd;\n    },\n  });\n  return [\n    withLabel(createReadTool() as MikanHarnessTool),\n    withLabel(createWriteTool() as MikanHarnessTool),\n    withLabel(createEditTool() as MikanHarnessTool),\n    withLabel(bash as MikanHarnessTool),\n  ];\n}\n\n/**\n * Adapt a mikan-authored `AgentTool` (its execute takes `(id, params, signal,\n * onUpdate)`) to a harness tool. mikan's tools carry their own sandbox executor\n * and read the abort signal from the harness context.\n */\nexport function adaptAgentTool(tool: AgentTool): MikanHarnessTool {\n  return tagHarnessTool({\n    ...tool,\n    execute: (...args: Parameters<MikanHarnessTool[\"execute\"]>) => {\n      const [toolCallId, params, onUpdate, , , context] = args;\n      return tool.execute(toolCallId, params, context.abortSignal, onUpdate);\n    },\n  } as MikanHarnessTool);\n}\n"]}

package/dist/harness/tools/react.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../../../src/harness/tools/react.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAI/D,QAAA,MAAM,WAAW;;EAKf,CAAC;AAEH;;;;GAIG;AACH,wBAAgB,eAAe,IAAI;IACjC,IAAI,EAAE,SAAS,CAAC,OAAO,WAAW,CAAC,CAAC;IACpC,gBAAgB,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,KAAK,IAAI,CAAC;CAC3E,CAiBA"}

package/dist/{tools → harness/tools}/react.js

@@ -1,4 +1,5 @@
 import { Type } from "@sinclair/typebox";
+import { defineHostFnTool } from "./host-fn-tool.js";
 const reactSchema = Type.Object({
     emoji: Type.String({
         description: "Emoji to react with. Use a short name without colons (e.g. eyes, white_check_mark, +1) on Slack, or a Unicode emoji on Discord/Telegram.",
@@ -10,31 +11,19 @@ const reactSchema = Type.Object({
  * {@link createReactTool}'s setter; the model only supplies the emoji.
  */
 export function createReactTool() {
-    let reactFn = null;
-    const tool = {
+    const { tool, setFn } = defineHostFnTool({
         name: "react",
-        label: "react",
         description: "Add an emoji reaction to the message you are responding to. Useful for a lightweight acknowledgement (e.g. eyes to show you saw a request, white_check_mark when done) instead of a full reply.",
         parameters: reactSchema,
-        execute: async (_toolCallId, { emoji }, signal) => {
-            if (!reactFn) {
-                throw new Error("Reactions are not supported in this conversation.");
-            }
-            if (signal?.aborted) {
-                throw new Error("Operation aborted");
-            }
+        unavailable: "Reactions are not supported in this conversation.",
+        run: async (reactFn, { emoji }) => {
             await reactFn(emoji);
             return {
                 content: [{ type: "text", text: `Reacted with :${emoji.replace(/^:|:$/g, "")}:` }],
                 details: undefined,
             };
         },
-    };
-    return {
-        tool,
-        setReactFunction: (fn) => {
-            reactFn = fn;
-        },
-    };
+    });
+    return { tool, setReactFunction: setFn };
 }
 //# sourceMappingURL=react.js.map

package/dist/harness/tools/react.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"react.js","sourceRoot":"","sources":["../../../src/harness/tools/react.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC;IAC9B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC;QACjB,WAAW,EACT,0IAA0I;KAC7I,CAAC;CACH,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAI7B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAuD;QAC7F,IAAI,EAAE,OAAO;QACb,WAAW,EACT,iMAAiM;QACnM,UAAU,EAAE,WAAW;QACvB,WAAW,EAAE,mDAAmD;QAChE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAChC,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;YACrB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,iBAAiB,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC;gBAC3F,OAAO,EAAE,SAAS;aACnB,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;AAC3C,CAAC","sourcesContent":["import type { AgentTool } from \"@earendil-works/pi-agent-core\";\nimport { Type } from \"@sinclair/typebox\";\nimport { defineHostFnTool } from \"./host-fn-tool.js\";\n\nconst reactSchema = Type.Object({\n  emoji: Type.String({\n    description:\n      \"Emoji to react with. Use a short name without colons (e.g. eyes, white_check_mark, +1) on Slack, or a Unicode emoji on Discord/Telegram.\",\n  }),\n});\n\n/**\n * The `react` tool adds an emoji reaction to the message that triggered the\n * current run. The channel and message timestamp are captured per run via\n * {@link createReactTool}'s setter; the model only supplies the emoji.\n */\nexport function createReactTool(): {\n  tool: AgentTool<typeof reactSchema>;\n  setReactFunction: (fn: ((emoji: string) => Promise<void>) | null) => void;\n} {\n  const { tool, setFn } = defineHostFnTool<(emoji: string) => Promise<void>, typeof reactSchema>({\n    name: \"react\",\n    description:\n      \"Add an emoji reaction to the message you are responding to. Useful for a lightweight acknowledgement (e.g. eyes to show you saw a request, white_check_mark when done) instead of a full reply.\",\n    parameters: reactSchema,\n    unavailable: \"Reactions are not supported in this conversation.\",\n    run: async (reactFn, { emoji }) => {\n      await reactFn(emoji);\n      return {\n        content: [{ type: \"text\" as const, text: `Reacted with :${emoji.replace(/^:|:$/g, \"\")}:` }],\n        details: undefined,\n      };\n    },\n  });\n\n  return { tool, setReactFunction: setFn };\n}\n"]}

package/dist/{tools → harness/tools}/sandbox.d.ts

@@ -1,6 +1,6 @@
 import type { AgentTool } from "@earendil-works/pi-agent-core";
-import type { DockerContainerManager } from "../provisioner.js";
-import type { SandboxConfig } from "../sandbox/index.js";
+import type { SandboxConfig } from "../../sandbox/index.js";
+import type { OfficeAddress, SandboxResourceController } from "../../types.js";
 declare const sandboxSchema: import("@sinclair/typebox").TObject<{
     action: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"status">, import("@sinclair/typebox").TLiteral<"set">]>;
     cpus: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
@@ -8,11 +8,11 @@ declare const sandboxSchema: import("@sinclair/typebox").TObject<{
 }>;
 interface SandboxToolContext {
     userId: string;
-    conversationId: string;
+    address: OfficeAddress;
 }
 interface SandboxToolController {
     sandbox: SandboxConfig;
-    provisioner?: Pick<DockerContainerManager, "getLimitStatus" | "setLimits">;
+    resourceController?: Pick<SandboxResourceController, "getLimitStatus" | "setLimits">;
 }
 export declare function createSandboxTool(controller: SandboxToolController): {
     tool: AgentTool<typeof sandboxSchema>;

package/dist/harness/tools/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../src/harness/tools/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAE/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAkB,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAG/F,QAAA,MAAM,aAAa;;;;EAcjB,CAAC;AAQH,UAAU,kBAAkB;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,aAAa,CAAC;CACxB;AAED,UAAU,qBAAqB;IAC7B,OAAO,EAAE,aAAa,CAAC;IACvB,kBAAkB,CAAC,EAAE,IAAI,CAAC,yBAAyB,EAAE,gBAAgB,GAAG,WAAW,CAAC,CAAC;CACtF;AAED,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,qBAAqB,GAAG;IACpE,IAAI,EAAE,SAAS,CAAC,OAAO,aAAa,CAAC,CAAC;IACtC,iBAAiB,EAAE,CAAC,OAAO,EAAE,kBAAkB,KAAK,IAAI,CAAC;CAC1D,CA+CA"}

package/dist/{tools → harness/tools}/sandbox.js

@@ -1,11 +1,11 @@
 import { Type } from "@sinclair/typebox";
-import { resolveActorVaultKey } from "../vault/routing.js";
+import { runtimeResourceKey } from "../../sandbox/identity.js";
 const sandboxSchema = Type.Object({
     action: Type.Union([Type.Literal("status"), Type.Literal("set")], {
         description: "Use status to inspect current limits, or set to apply temporary limits.",
     }),
     cpus: Type.Optional(Type.String({
-        description: "Docker CPU limit for action=set, for example '0.5', '1', or '2'.",
+        description: "CPU limit for action=set, for example '0.5', '1', or '2'.",
     })),
     memory: Type.Optional(Type.String({
         description: "Docker memory limit for action=set, for example '512m', '1g', or '4g'.",
@@ -16,7 +16,8 @@ export function createSandboxTool(controller) {
     const tool = {
         name: "sandbox",
         label: "sandbox",
-        description: "Inspect or temporarily set CPU/memory limits for the current managed image sandbox. Limits apply to this conversation's sandbox container and are cleared when the container stops.",
+        executionMode: "sequential",
+        description: "Inspect or temporarily set CPU/memory limits for the current managed sandbox. Limits apply to this conversation's runtime and are cleared when it stops.",
         parameters: sandboxSchema,
         execute: async (_toolCallId, params, signal) => {
             if (signal?.aborted) {
@@ -25,16 +26,19 @@ export function createSandboxTool(controller) {
             if (!sandboxContext) {
                 throw new Error("Sandbox context not configured");
             }
-            if (controller.sandbox.type !== "image" || !controller.provisioner) {
+            if (controller.sandbox.type !== "image" || !controller.resourceController) {
                 throw new Error("The sandbox tool only supports image:* managed sandboxes");
             }
-            const containerKey = resolveActorVaultKey(controller.sandbox, sandboxContext.userId, sandboxContext.conversationId);
+            const containerKey = runtimeResourceKey(controller.sandbox, {
+                userId: sandboxContext.userId,
+                address: sandboxContext.address,
+            });
             if (params.action === "set") {
                 const limits = normalizeLimits(params);
-                const status = await controller.provisioner.setLimits(containerKey, limits);
-                return textResult(`Updated sandbox limits for ${containerKey}: ${formatLimits(status.limits)}. These temporary limits are cleared when the sandbox container stops.`);
+                const status = await controller.resourceController.setLimits(containerKey, limits);
+                return textResult(`Updated sandbox limits for ${containerKey}: ${formatLimits(status.limits)}. These temporary limits are cleared when the sandbox runtime stops.`);
             }
-            const status = controller.provisioner.getLimitStatus(containerKey);
+            const status = controller.resourceController.getLimitStatus(containerKey);
             return textResult(`Sandbox limits for ${containerKey}: ${formatLimits(status.limits)}${status.boosted ? " (boosted)" : ""}.`);
         },
     };

package/dist/harness/tools/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../../src/harness/tools/sandbox.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAGzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC;IAChC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE;QAChE,WAAW,EAAE,yEAAyE;KACvF,CAAC;IACF,IAAI,EAAE,IAAI,CAAC,QAAQ,CACjB,IAAI,CAAC,MAAM,CAAC;QACV,WAAW,EAAE,2DAA2D;KACzE,CAAC,CACH;IACD,MAAM,EAAE,IAAI,CAAC,QAAQ,CACnB,IAAI,CAAC,MAAM,CAAC;QACV,WAAW,EAAE,wEAAwE;KACtF,CAAC,CACH;CACF,CAAC,CAAC;AAkBH,MAAM,UAAU,iBAAiB,CAAC,UAAiC;IAIjE,IAAI,cAAc,GAA8B,IAAI,CAAC;IAErD,MAAM,IAAI,GAAoC;QAC5C,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,aAAa,EAAE,YAAY;QAC3B,WAAW,EACT,0JAA0J;QAC5J,UAAU,EAAE,aAAa;QACzB,OAAO,EAAE,KAAK,EAAE,WAAmB,EAAE,MAAyB,EAAE,MAAoB,EAAE,EAAE;YACtF,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACvC,CAAC;YACD,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC;gBAC1E,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAC9E,CAAC;YAED,MAAM,YAAY,GAAG,kBAAkB,CAAC,UAAU,CAAC,OAAO,EAAE;gBAC1D,MAAM,EAAE,cAAc,CAAC,MAAM;gBAC7B,OAAO,EAAE,cAAc,CAAC,OAAO;aAChC,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;gBACvC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,kBAAkB,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;gBACnF,OAAO,UAAU,CACf,8BAA8B,YAAY,KAAK,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,sEAAsE,CACjJ,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,UAAU,CAAC,kBAAkB,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;YAC1E,OAAO,UAAU,CACf,sBAAsB,YAAY,KAAK,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,CAC3G,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,OAAO;QACL,IAAI;QACJ,iBAAiB,EAAE,CAAC,OAA2B,EAAE,EAAE;YACjD,cAAc,GAAG,OAAO,CAAC;QAC3B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAyB;IAChD,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5D,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAyB;IAClE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,sDAAsD,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,MAAkC;IACtD,OAAO,OAAO,MAAM,EAAE,IAAI,IAAI,WAAW,aAAa,MAAM,EAAE,MAAM,IAAI,WAAW,EAAE,CAAC;AACxF,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAI9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACnE,CAAC","sourcesContent":["import type { AgentTool } from \"@earendil-works/pi-agent-core\";\nimport { Type } from \"@sinclair/typebox\";\nimport type { SandboxConfig } from \"../../sandbox/index.js\";\nimport type { OfficeAddress, ResourceLimits, SandboxResourceController } from \"../../types.js\";\nimport { runtimeResourceKey } from \"../../sandbox/identity.js\";\n\nconst sandboxSchema = Type.Object({\n  action: Type.Union([Type.Literal(\"status\"), Type.Literal(\"set\")], {\n    description: \"Use status to inspect current limits, or set to apply temporary limits.\",\n  }),\n  cpus: Type.Optional(\n    Type.String({\n      description: \"CPU limit for action=set, for example '0.5', '1', or '2'.\",\n    }),\n  ),\n  memory: Type.Optional(\n    Type.String({\n      description: \"Docker memory limit for action=set, for example '512m', '1g', or '4g'.\",\n    }),\n  ),\n});\n\ntype SandboxToolParams = {\n  action: \"status\" | \"set\";\n  cpus?: string;\n  memory?: string;\n};\n\ninterface SandboxToolContext {\n  userId: string;\n  address: OfficeAddress;\n}\n\ninterface SandboxToolController {\n  sandbox: SandboxConfig;\n  resourceController?: Pick<SandboxResourceController, \"getLimitStatus\" | \"setLimits\">;\n}\n\nexport function createSandboxTool(controller: SandboxToolController): {\n  tool: AgentTool<typeof sandboxSchema>;\n  setSandboxContext: (context: SandboxToolContext) => void;\n} {\n  let sandboxContext: SandboxToolContext | null = null;\n\n  const tool: AgentTool<typeof sandboxSchema> = {\n    name: \"sandbox\",\n    label: \"sandbox\",\n    executionMode: \"sequential\",\n    description:\n      \"Inspect or temporarily set CPU/memory limits for the current managed sandbox. Limits apply to this conversation's runtime and are cleared when it stops.\",\n    parameters: sandboxSchema,\n    execute: async (_toolCallId: string, params: SandboxToolParams, signal?: AbortSignal) => {\n      if (signal?.aborted) {\n        throw new Error(\"Operation aborted\");\n      }\n      if (!sandboxContext) {\n        throw new Error(\"Sandbox context not configured\");\n      }\n      if (controller.sandbox.type !== \"image\" || !controller.resourceController) {\n        throw new Error(\"The sandbox tool only supports image:* managed sandboxes\");\n      }\n\n      const containerKey = runtimeResourceKey(controller.sandbox, {\n        userId: sandboxContext.userId,\n        address: sandboxContext.address,\n      });\n\n      if (params.action === \"set\") {\n        const limits = normalizeLimits(params);\n        const status = await controller.resourceController.setLimits(containerKey, limits);\n        return textResult(\n          `Updated sandbox limits for ${containerKey}: ${formatLimits(status.limits)}. These temporary limits are cleared when the sandbox runtime stops.`,\n        );\n      }\n\n      const status = controller.resourceController.getLimitStatus(containerKey);\n      return textResult(\n        `Sandbox limits for ${containerKey}: ${formatLimits(status.limits)}${status.boosted ? \" (boosted)\" : \"\"}.`,\n      );\n    },\n  };\n\n  return {\n    tool,\n    setSandboxContext: (context: SandboxToolContext) => {\n      sandboxContext = context;\n    },\n  };\n}\n\nfunction normalizeLimits(params: SandboxToolParams): ResourceLimits {\n  const cpus = normalizeLimitValue(\"cpus\", params.cpus);\n  const memory = normalizeLimitValue(\"memory\", params.memory);\n  if (!cpus && !memory) {\n    throw new Error(\"action=set requires cpus and/or memory\");\n  }\n  return { ...(cpus ? { cpus } : {}), ...(memory ? { memory } : {}) };\n}\n\nfunction normalizeLimitValue(name: string, value: string | undefined): string | undefined {\n  if (value === undefined) return undefined;\n  const trimmed = value.trim();\n  if (!trimmed) return undefined;\n  if (!/^[A-Za-z0-9_.-]+$/.test(trimmed)) {\n    throw new Error(`${name} must not contain whitespace or shell metacharacters`);\n  }\n  return trimmed;\n}\n\nfunction formatLimits(limits: ResourceLimits | undefined): string {\n  return `CPU ${limits?.cpus ?? \"unlimited\"} / Memory ${limits?.memory ?? \"unlimited\"}`;\n}\n\nfunction textResult(text: string): {\n  content: Array<{ type: \"text\"; text: string }>;\n  details: undefined;\n} {\n  return { content: [{ type: \"text\", text }], details: undefined };\n}\n"]}