@geminixiang/mikan 1.0.0-beta.8 → 1.0.0-beta.80

package/dist/events/scheduler.js

@@ -0,0 +1,223 @@
+import { Cron } from "croner";
+import { existsSync, readdirSync, readFileSync, unlinkSync } from "node:fs";
+import { join } from "node:path";
+import * as log from "../log.js";
+import { createConversationEvent, listRegisteredOffices, officeKey } from "../office/index.js";
+import { reportUserFacingError } from "../observability/index.js";
+import { inferConversationKind } from "../sessions/session-key.js";
+import { officeEventsDir, parseEventPayload, } from "./index.js";
+import { errorMessage } from "../unknown-values.js";
+export class EventScheduler {
+    constructor(workspace, botsByPlatform) {
+        this.workspace = workspace;
+        this.botsByPlatform = botsByPlatform;
+        this.scheduled = new Map();
+        this.startTime = Date.now();
+    }
+    start() {
+        this.startTime = Date.now();
+        let loaded = 0;
+        for (const record of listRegisteredOffices(this.workspace.stateDir)) {
+            const office = this.workspace.office(record);
+            const dir = officeEventsDir(office);
+            if (!existsSync(dir))
+                continue;
+            for (const filename of readdirSync(dir).filter((name) => name.endsWith(".json"))) {
+                const path = join(dir, filename);
+                try {
+                    const payload = parseEventPayload(readFileSync(path, "utf-8"), filename);
+                    this.scheduleRecord(office.address, { filename, payload, size: 0, mtimeMs: 0 });
+                    loaded++;
+                }
+                catch (error) {
+                    log.logWarning(`Removing unparseable event file ${filename} for ${office.key}`, errorMessage(error));
+                    this.removeFile(office.address, filename);
+                }
+            }
+        }
+        log.logInfo(`Event scheduler started, tracking ${loaded} records`);
+    }
+    stop() {
+        for (const entry of this.scheduled.values()) {
+            if (entry.timer)
+                clearTimeout(entry.timer);
+            entry.cron?.stop();
+        }
+        this.scheduled.clear();
+        log.logInfo("Event scheduler stopped");
+    }
+    scheduledCount() {
+        return this.scheduled.size;
+    }
+    periodicEvents(address) {
+        const prefix = `${officeKey(address)}/`;
+        const results = [];
+        for (const [key, entry] of this.scheduled) {
+            if (!key.startsWith(prefix) || entry.event.type !== "periodic" || !entry.cron)
+                continue;
+            results.push({
+                filename: entry.filename,
+                platform: entry.event.platform,
+                conversationId: entry.event.conversationId,
+                conversationKind: entry.event.conversationKind,
+                text: entry.event.text,
+                schedule: entry.event.schedule,
+                timezone: entry.event.timezone,
+                nextRun: entry.cron.nextRun()?.toISOString() ?? null,
+            });
+        }
+        return results;
+    }
+    scheduleRecord(address, record) {
+        const key = this.key(address, record.filename);
+        this.cancelKey(key);
+        let event;
+        try {
+            event = this.resolve(record, address);
+        }
+        catch (error) {
+            log.logWarning(`Rejecting event ${record.filename}`, errorMessage(error));
+            this.removeFile(address, record.filename);
+            return;
+        }
+        const entry = { address, filename: record.filename, event };
+        switch (event.type) {
+            case "immediate":
+                this.execute(entry);
+                return;
+            case "one-shot": {
+                const delay = new Date(event.at).getTime() - Date.now();
+                if (delay <= 0) {
+                    log.logInfo(`One-shot event in the past, deleting: ${record.filename}`);
+                    this.removeFile(address, record.filename);
+                    return;
+                }
+                entry.timer = setTimeout(() => {
+                    this.scheduled.delete(key);
+                    this.execute(entry);
+                }, delay);
+                this.scheduled.set(key, entry);
+                return;
+            }
+            case "periodic":
+                try {
+                    entry.cron = new Cron(event.schedule, { timezone: event.timezone }, () => this.execute(entry, false));
+                }
+                catch (error) {
+                    log.logWarning(`Invalid cron schedule for ${record.filename}`, String(error));
+                    this.removeFile(address, record.filename);
+                    return;
+                }
+                this.scheduled.set(key, entry);
+        }
+    }
+    cancelRecord(address, filename) {
+        this.cancelKey(this.key(address, filename));
+    }
+    key(address, filename) {
+        return `${officeKey(address)}/${filename}`;
+    }
+    cancelKey(key) {
+        const entry = this.scheduled.get(key);
+        if (!entry)
+            return;
+        if (entry.timer)
+            clearTimeout(entry.timer);
+        entry.cron?.stop();
+        this.scheduled.delete(key);
+    }
+    resolve(record, address) {
+        const { payload } = record;
+        const platform = (payload.platform ?? address.platform).toLowerCase();
+        if (platform !== address.platform || payload.conversationId !== address.conversationId) {
+            throw new Error("event payload does not address its owning office");
+        }
+        if (!this.botsByPlatform[platform]) {
+            throw new Error(`no bot configured for platform '${platform}'`);
+        }
+        const conversationKind = payload.conversationKind ?? inferConversationKind(platform, payload.conversationId);
+        return { ...payload, platform, conversationKind };
+    }
+    execute(entry, deleteAfter = true) {
+        const { event, filename, address } = entry;
+        const bot = this.botsByPlatform[event.platform];
+        if (!bot) {
+            this.reportFailure(entry, deleteAfter, "missing_bot");
+            if (deleteAfter)
+                this.removeFile(address, filename);
+            return;
+        }
+        const enqueued = bot.enqueueEvent(createConversationEvent({
+            platform: event.platform,
+            type: "mention",
+            conversationId: event.conversationId,
+            conversationKind: event.conversationKind,
+            user: event.userId ?? "EVENT",
+            text: buildEventPrompt(event),
+            ts: `event:${filename.replace(/\.json$/i, "")}`,
+        }));
+        if (!enqueued) {
+            log.logWarning(`Event queue full, discarded: ${filename}`);
+            this.reportFailure(entry, deleteAfter, "queue_full");
+        }
+        if (deleteAfter)
+            this.removeFile(address, filename);
+    }
+    reportFailure(entry, deleteAfter, failure) {
+        const reason = failure === "missing_bot" ? "missing bot" : "queue full";
+        reportUserFacingError(new Error(`Scheduled event delivery failed: ${reason}`), {
+            domain: "events",
+            surface: "event_delivery",
+            operation: "event_execute",
+            severity: "error",
+            platform: entry.event.platform,
+            context: {
+                failure,
+                filename: entry.filename,
+                eventType: entry.event.type,
+                conversationId: entry.event.conversationId,
+                conversationKind: entry.event.conversationKind,
+                deleteAfter,
+                triggeredByEventFile: true,
+                textLength: entry.event.text.length,
+            },
+        });
+    }
+    removeFile(address, filename) {
+        const path = join(officeEventsDir(this.workspace.office(address)), filename);
+        try {
+            unlinkSync(path);
+        }
+        catch (error) {
+            if (error instanceof Error && "code" in error && error.code !== "ENOENT") {
+                log.logWarning(`Failed to delete event file: ${filename}`, String(error));
+            }
+        }
+    }
+}
+export function buildEventPrompt(event) {
+    switch (event.type) {
+        case "one-shot":
+            return [
+                "Please deliver the following reminder to the user in a short, natural way.",
+                "Do not greet, do not introduce yourself, and do not ask generic follow-up questions.",
+                "",
+                `Reminder: ${event.text}`,
+            ].join("\n");
+        case "periodic":
+            return [
+                "Handle the following recurring task.",
+                "Respond concisely. If there is nothing actionable to report, reply with [SILENT].",
+                "",
+                `Task: ${event.text}`,
+            ].join("\n");
+        case "immediate":
+            return [
+                "Handle the following event/update in a concise, context-appropriate way.",
+                "If it reads like a reminder or follow-up, deliver it directly without greeting or generic offers to help.",
+                "",
+                `Event: ${event.text}`,
+            ].join("\n");
+    }
+}
+//# sourceMappingURL=scheduler.js.map

package/dist/events/scheduler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler.js","sourceRoot":"","sources":["../../src/events/scheduler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,KAAK,GAAG,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/F,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,OAAO,EACL,eAAe,EACf,iBAAiB,GAKlB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAUpD,MAAM,OAAO,cAAc;IAIzB,YACmB,SAAoB,EACpB,cAA4C;QAD5C,cAAS,GAAT,SAAS,CAAW;QACpB,mBAAc,GAAd,cAAc,CAA8B;QAL9C,cAAS,GAAG,IAAI,GAAG,EAAqB,CAAC;QAClD,cAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAK5B,CAAC;IAEJ,KAAK;QACH,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,MAAM,IAAI,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC/B,KAAK,MAAM,QAAQ,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBACjF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBACjC,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,iBAAiB,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;oBACzE,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;oBAChF,MAAM,EAAE,CAAC;gBACX,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,GAAG,CAAC,UAAU,CACZ,mCAAmC,QAAQ,QAAQ,MAAM,CAAC,GAAG,EAAE,EAC/D,YAAY,CAAC,KAAK,CAAC,CACpB,CAAC;oBACF,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;QACH,CAAC;QACD,GAAG,CAAC,OAAO,CAAC,qCAAqC,MAAM,UAAU,CAAC,CAAC;IACrE,CAAC;IAED,IAAI;QACF,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,KAAK,CAAC,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3C,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACzC,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;IAC7B,CAAC;IAED,cAAc,CAAC,OAAsB;QACnC,MAAM,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC;QACxC,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,IAAI;gBAAE,SAAS;YACxF,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;gBAC9B,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,cAAc;gBAC1C,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;gBAC9C,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;gBACtB,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;gBAC9B,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;gBAC9B,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,IAAI;aACrD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,cAAc,CAAC,OAAsB,EAAE,MAAmB;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACpB,IAAI,KAAiB,CAAC;QACtB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,UAAU,CAAC,mBAAmB,MAAM,CAAC,QAAQ,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1E,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;QACvE,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,WAAW;gBACd,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO;YACT,KAAK,UAAU,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACxD,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;oBACf,GAAG,CAAC,OAAO,CAAC,yCAAyC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACxE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC1C,OAAO;gBACT,CAAC;gBACD,KAAK,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC5B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC3B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC,EAAE,KAAK,CAAC,CAAC;gBACV,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC/B,OAAO;YACT,CAAC;YACD,KAAK,UAAU;gBACb,IAAI,CAAC;oBACH,KAAK,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CACvE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAC3B,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,GAAG,CAAC,UAAU,CAAC,6BAA6B,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC9E,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC1C,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,YAAY,CAAC,OAAsB,EAAE,QAAgB;QACnD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9C,CAAC;IAEO,GAAG,CAAC,OAAsB,EAAE,QAAgB;QAClD,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;IAC7C,CAAC;IAEO,SAAS,CAAC,GAAW;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,IAAI,KAAK,CAAC,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3C,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;QACnB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAEO,OAAO,CAAC,MAAmB,EAAE,OAAsB;QACzD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QACtE,IAAI,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC;YACvF,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,GAAG,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,gBAAgB,GACpB,OAAO,CAAC,gBAAgB,IAAI,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QACtF,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IACpD,CAAC;IAEO,OAAO,CAAC,KAAgB,EAAE,WAAW,GAAG,IAAI;QAClD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;YACtD,IAAI,WAAW;gBAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAC/B,uBAAuB,CAAC;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAwB;YACxC,IAAI,EAAE,SAAS;YACf,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,IAAI,EAAE,KAAK,CAAC,MAAM,IAAI,OAAO;YAC7B,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC;YAC7B,EAAE,EAAE,SAAS,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE;SAChD,CAAC,CACH,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,UAAU,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;YAC3D,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,WAAW;YAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC;IAEO,aAAa,CACnB,KAAgB,EAChB,WAAoB,EACpB,OAAqC;QAErC,MAAM,MAAM,GAAG,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC;QACxE,qBAAqB,CAAC,IAAI,KAAK,CAAC,oCAAoC,MAAM,EAAE,CAAC,EAAE;YAC7E,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,gBAAgB;YACzB,SAAS,EAAE,eAAe;YAC1B,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;YAC9B,OAAO,EAAE;gBACP,OAAO;gBACP,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;gBAC3B,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,cAAc;gBAC1C,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;gBAC9C,WAAW;gBACX,oBAAoB,EAAE,IAAI;gBAC1B,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM;aACpC;SACF,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,CAAC,OAAsB,EAAE,QAAgB;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC7E,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACzE,GAAG,CAAC,UAAU,CAAC,gCAAgC,QAAQ,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,UAAU;YACb,OAAO;gBACL,4EAA4E;gBAC5E,sFAAsF;gBACtF,EAAE;gBACF,aAAa,KAAK,CAAC,IAAI,EAAE;aAC1B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,KAAK,UAAU;YACb,OAAO;gBACL,sCAAsC;gBACtC,mFAAmF;gBACnF,EAAE;gBACF,SAAS,KAAK,CAAC,IAAI,EAAE;aACtB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,KAAK,WAAW;YACd,OAAO;gBACL,0EAA0E;gBAC1E,2GAA2G;gBAC3G,EAAE;gBACF,UAAU,KAAK,CAAC,IAAI,EAAE;aACvB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;AACH,CAAC","sourcesContent":["import { Cron } from \"croner\";\nimport { existsSync, readdirSync, readFileSync, unlinkSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport type { ConversationKind, MessagingBot, PlatformName } from \"../types.js\";\nimport * as log from \"../log.js\";\nimport { createConversationEvent, listRegisteredOffices, officeKey } from \"../office/index.js\";\nimport type { Workspace } from \"../office/types.js\";\nimport { reportUserFacingError } from \"../observability/index.js\";\nimport { inferConversationKind } from \"../sessions/session-key.js\";\nimport type { OfficeAddress } from \"../types.js\";\nimport {\n  officeEventsDir,\n  parseEventPayload,\n  type EventRecord,\n  type EventScheduleSink,\n  type MikanEvent,\n  type PeriodicEventInfo,\n} from \"./index.js\";\nimport { errorMessage } from \"../unknown-values.js\";\n\ninterface Scheduled {\n  address: OfficeAddress;\n  filename: string;\n  event: MikanEvent;\n  timer?: NodeJS.Timeout;\n  cron?: Cron;\n}\n\nexport class EventScheduler implements EventScheduleSink {\n  private readonly scheduled = new Map<string, Scheduled>();\n  private startTime = Date.now();\n\n  constructor(\n    private readonly workspace: Workspace,\n    private readonly botsByPlatform: Record<string, MessagingBot>,\n  ) {}\n\n  start(): void {\n    this.startTime = Date.now();\n    let loaded = 0;\n    for (const record of listRegisteredOffices(this.workspace.stateDir)) {\n      const office = this.workspace.office(record);\n      const dir = officeEventsDir(office);\n      if (!existsSync(dir)) continue;\n      for (const filename of readdirSync(dir).filter((name) => name.endsWith(\".json\"))) {\n        const path = join(dir, filename);\n        try {\n          const payload = parseEventPayload(readFileSync(path, \"utf-8\"), filename);\n          this.scheduleRecord(office.address, { filename, payload, size: 0, mtimeMs: 0 });\n          loaded++;\n        } catch (error) {\n          log.logWarning(\n            `Removing unparseable event file ${filename} for ${office.key}`,\n            errorMessage(error),\n          );\n          this.removeFile(office.address, filename);\n        }\n      }\n    }\n    log.logInfo(`Event scheduler started, tracking ${loaded} records`);\n  }\n\n  stop(): void {\n    for (const entry of this.scheduled.values()) {\n      if (entry.timer) clearTimeout(entry.timer);\n      entry.cron?.stop();\n    }\n    this.scheduled.clear();\n    log.logInfo(\"Event scheduler stopped\");\n  }\n\n  scheduledCount(): number {\n    return this.scheduled.size;\n  }\n\n  periodicEvents(address: OfficeAddress): PeriodicEventInfo[] {\n    const prefix = `${officeKey(address)}/`;\n    const results: PeriodicEventInfo[] = [];\n    for (const [key, entry] of this.scheduled) {\n      if (!key.startsWith(prefix) || entry.event.type !== \"periodic\" || !entry.cron) continue;\n      results.push({\n        filename: entry.filename,\n        platform: entry.event.platform,\n        conversationId: entry.event.conversationId,\n        conversationKind: entry.event.conversationKind,\n        text: entry.event.text,\n        schedule: entry.event.schedule,\n        timezone: entry.event.timezone,\n        nextRun: entry.cron.nextRun()?.toISOString() ?? null,\n      });\n    }\n    return results;\n  }\n\n  scheduleRecord(address: OfficeAddress, record: EventRecord): void {\n    const key = this.key(address, record.filename);\n    this.cancelKey(key);\n    let event: MikanEvent;\n    try {\n      event = this.resolve(record, address);\n    } catch (error) {\n      log.logWarning(`Rejecting event ${record.filename}`, errorMessage(error));\n      this.removeFile(address, record.filename);\n      return;\n    }\n    const entry: Scheduled = { address, filename: record.filename, event };\n    switch (event.type) {\n      case \"immediate\":\n        this.execute(entry);\n        return;\n      case \"one-shot\": {\n        const delay = new Date(event.at).getTime() - Date.now();\n        if (delay <= 0) {\n          log.logInfo(`One-shot event in the past, deleting: ${record.filename}`);\n          this.removeFile(address, record.filename);\n          return;\n        }\n        entry.timer = setTimeout(() => {\n          this.scheduled.delete(key);\n          this.execute(entry);\n        }, delay);\n        this.scheduled.set(key, entry);\n        return;\n      }\n      case \"periodic\":\n        try {\n          entry.cron = new Cron(event.schedule, { timezone: event.timezone }, () =>\n            this.execute(entry, false),\n          );\n        } catch (error) {\n          log.logWarning(`Invalid cron schedule for ${record.filename}`, String(error));\n          this.removeFile(address, record.filename);\n          return;\n        }\n        this.scheduled.set(key, entry);\n    }\n  }\n\n  cancelRecord(address: OfficeAddress, filename: string): void {\n    this.cancelKey(this.key(address, filename));\n  }\n\n  private key(address: OfficeAddress, filename: string): string {\n    return `${officeKey(address)}/${filename}`;\n  }\n\n  private cancelKey(key: string): void {\n    const entry = this.scheduled.get(key);\n    if (!entry) return;\n    if (entry.timer) clearTimeout(entry.timer);\n    entry.cron?.stop();\n    this.scheduled.delete(key);\n  }\n\n  private resolve(record: EventRecord, address: OfficeAddress): MikanEvent {\n    const { payload } = record;\n    const platform = (payload.platform ?? address.platform).toLowerCase();\n    if (platform !== address.platform || payload.conversationId !== address.conversationId) {\n      throw new Error(\"event payload does not address its owning office\");\n    }\n    if (!this.botsByPlatform[platform]) {\n      throw new Error(`no bot configured for platform '${platform}'`);\n    }\n    const conversationKind: ConversationKind =\n      payload.conversationKind ?? inferConversationKind(platform, payload.conversationId);\n    return { ...payload, platform, conversationKind };\n  }\n\n  private execute(entry: Scheduled, deleteAfter = true): void {\n    const { event, filename, address } = entry;\n    const bot = this.botsByPlatform[event.platform];\n    if (!bot) {\n      this.reportFailure(entry, deleteAfter, \"missing_bot\");\n      if (deleteAfter) this.removeFile(address, filename);\n      return;\n    }\n    const enqueued = bot.enqueueEvent(\n      createConversationEvent({\n        platform: event.platform as PlatformName,\n        type: \"mention\",\n        conversationId: event.conversationId,\n        conversationKind: event.conversationKind,\n        user: event.userId ?? \"EVENT\",\n        text: buildEventPrompt(event),\n        ts: `event:${filename.replace(/\\.json$/i, \"\")}`,\n      }),\n    );\n    if (!enqueued) {\n      log.logWarning(`Event queue full, discarded: ${filename}`);\n      this.reportFailure(entry, deleteAfter, \"queue_full\");\n    }\n    if (deleteAfter) this.removeFile(address, filename);\n  }\n\n  private reportFailure(\n    entry: Scheduled,\n    deleteAfter: boolean,\n    failure: \"missing_bot\" | \"queue_full\",\n  ): void {\n    const reason = failure === \"missing_bot\" ? \"missing bot\" : \"queue full\";\n    reportUserFacingError(new Error(`Scheduled event delivery failed: ${reason}`), {\n      domain: \"events\",\n      surface: \"event_delivery\",\n      operation: \"event_execute\",\n      severity: \"error\",\n      platform: entry.event.platform,\n      context: {\n        failure,\n        filename: entry.filename,\n        eventType: entry.event.type,\n        conversationId: entry.event.conversationId,\n        conversationKind: entry.event.conversationKind,\n        deleteAfter,\n        triggeredByEventFile: true,\n        textLength: entry.event.text.length,\n      },\n    });\n  }\n\n  private removeFile(address: OfficeAddress, filename: string): void {\n    const path = join(officeEventsDir(this.workspace.office(address)), filename);\n    try {\n      unlinkSync(path);\n    } catch (error) {\n      if (error instanceof Error && \"code\" in error && error.code !== \"ENOENT\") {\n        log.logWarning(`Failed to delete event file: ${filename}`, String(error));\n      }\n    }\n  }\n}\n\nexport function buildEventPrompt(event: MikanEvent): string {\n  switch (event.type) {\n    case \"one-shot\":\n      return [\n        \"Please deliver the following reminder to the user in a short, natural way.\",\n        \"Do not greet, do not introduce yourself, and do not ask generic follow-up questions.\",\n        \"\",\n        `Reminder: ${event.text}`,\n      ].join(\"\\n\");\n    case \"periodic\":\n      return [\n        \"Handle the following recurring task.\",\n        \"Respond concisely. If there is nothing actionable to report, reply with [SILENT].\",\n        \"\",\n        `Task: ${event.text}`,\n      ].join(\"\\n\");\n    case \"immediate\":\n      return [\n        \"Handle the following event/update in a concise, context-appropriate way.\",\n        \"If it reads like a reminder or follow-up, deliver it directly without greeting or generic offers to help.\",\n        \"\",\n        `Event: ${event.text}`,\n      ].join(\"\\n\");\n  }\n}\n"]}

package/dist/file-guards.d.ts

@@ -0,0 +1,13 @@
+import type { Static, TSchema } from "typebox";
+type JsonFailureKind = "syntax" | "shape" | "field";
+type MalformedJsonMessage = (detail: string, kind: JsonFailureKind) => string;
+export declare function ensureDirExists(dir: string): void;
+export declare function readTextFileIfExists(path: string): string | undefined;
+export declare function readJsonFileIfExists<T>(path: string, validate: (value: unknown) => value is T, malformedMessage: MalformedJsonMessage): T | undefined;
+export declare function readJsonSchemaFileIfExists<T extends TSchema>(path: string, schema: T, malformedMessage: MalformedJsonMessage): Static<T> | undefined;
+export declare function parseJsonValue<T>(raw: string, validate: (value: unknown) => value is T, malformedMessage: MalformedJsonMessage): T;
+export declare function parseJsonSchemaValue<T extends TSchema>(raw: string, schema: T, malformedMessage: MalformedJsonMessage): Static<T>;
+export declare function atomicWritePrivateFile(targetPath: string, content: string): void;
+export declare function assertStateDirOutsideWorkspace(stateDir: string, workingDir: string, sandboxType: string): void;
+export {};
+//# sourceMappingURL=file-guards.d.ts.map

package/dist/file-guards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-guards.d.ts","sourceRoot":"","sources":["../src/file-guards.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAkB/C,KAAK,eAAe,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;AAEpD,KAAK,oBAAoB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,KAAK,MAAM,CAAC;AAI9E,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAEjD;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CASrE;AAED,wBAAgB,oBAAoB,CAAC,CAAC,EACpC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,KAAK,IAAI,CAAC,EACxC,gBAAgB,EAAE,oBAAoB,GACrC,CAAC,GAAG,SAAS,CAGf;AAED,wBAAgB,0BAA0B,CAAC,CAAC,SAAS,OAAO,EAC1D,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,CAAC,EACT,gBAAgB,EAAE,oBAAoB,GACrC,MAAM,CAAC,CAAC,CAAC,GAAG,SAAS,CAGvB;AAWD,wBAAgB,cAAc,CAAC,CAAC,EAC9B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,KAAK,IAAI,CAAC,EACxC,gBAAgB,EAAE,oBAAoB,GACrC,CAAC,CAMH;AAED,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,OAAO,EACpD,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,CAAC,EACT,gBAAgB,EAAE,oBAAoB,GACrC,MAAM,CAAC,CAAC,CAAC,CAUX;AAID,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CA6BhF;AAQD,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,IAAI,CAWN"}

package/dist/file-guards.js

@@ -0,0 +1,104 @@
+import { Value } from "typebox/value";
+import { closeSync, constants as fsConstants, mkdirSync, openSync, readFileSync, renameSync, unlinkSync, writeSync, } from "node:fs";
+import { resolve } from "node:path";
+import * as log from "./log.js";
+import { randomBytes } from "node:crypto";
+import { basename, dirname, join } from "node:path";
+import { errorMessage } from "./unknown-values.js";
+const UNEXPECTED_JSON_SHAPE = "unexpected JSON shape";
+export function ensureDirExists(dir) {
+    mkdirSync(dir, { recursive: true });
+}
+export function readTextFileIfExists(path) {
+    try {
+        return readFileSync(path, "utf-8");
+    }
+    catch (err) {
+        if (err instanceof Error && "code" in err && err.code === "ENOENT") {
+            return undefined;
+        }
+        throw err;
+    }
+}
+export function readJsonFileIfExists(path, validate, malformedMessage) {
+    const raw = readTextFileIfExists(path);
+    return raw === undefined ? undefined : parseJsonValue(raw, validate, malformedMessage);
+}
+export function readJsonSchemaFileIfExists(path, schema, malformedMessage) {
+    const raw = readTextFileIfExists(path);
+    return raw === undefined ? undefined : parseJsonSchemaValue(raw, schema, malformedMessage);
+}
+function parseJson(raw, malformedMessage) {
+    try {
+        return JSON.parse(raw);
+    }
+    catch (err) {
+        const detail = errorMessage(err);
+        throw new Error(malformedMessage(detail, "syntax"), { cause: err });
+    }
+}
+export function parseJsonValue(raw, validate, malformedMessage) {
+    const parsed = parseJson(raw, malformedMessage);
+    if (!validate(parsed)) {
+        throw new Error(malformedMessage(UNEXPECTED_JSON_SHAPE, "shape"));
+    }
+    return parsed;
+}
+export function parseJsonSchemaValue(raw, schema, malformedMessage) {
+    const parsed = parseJson(raw, malformedMessage);
+    if (!Value.Check(schema, parsed)) {
+        const firstError = Value.Errors(schema, parsed)[0];
+        if (!firstError || firstError.instancePath === "" || firstError.instancePath === "/") {
+            throw new Error(malformedMessage(UNEXPECTED_JSON_SHAPE, "shape"));
+        }
+        throw new Error(malformedMessage(`${firstError.instancePath}: ${firstError.message}`, "field"));
+    }
+    return parsed;
+}
+const PRIVATE_FILE_MODE = 0o600;
+export function atomicWritePrivateFile(targetPath, content) {
+    const dir = dirname(targetPath);
+    const tmpPath = join(dir, `.${basename(targetPath)}.${process.pid}.${randomBytes(8).toString("hex")}.tmp`);
+    const fd = openSync(tmpPath, fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL, PRIVATE_FILE_MODE);
+    try {
+        writeSync(fd, content);
+    }
+    catch (err) {
+        try {
+            unlinkSync(tmpPath);
+        }
+        catch { }
+        throw err;
+    }
+    finally {
+        closeSync(fd);
+    }
+    try {
+        renameSync(tmpPath, targetPath);
+    }
+    catch (err) {
+        try {
+            unlinkSync(tmpPath);
+        }
+        catch { }
+        throw err;
+    }
+}
+function isPathInside(child, parent) {
+    const parentPath = resolve(parent);
+    const childPath = resolve(child);
+    return childPath === parentPath || childPath.startsWith(parentPath + "/");
+}
+export function assertStateDirOutsideWorkspace(stateDir, workingDir, sandboxType) {
+    if (!isPathInside(stateDir, workingDir))
+        return;
+    const message = `--state-dir (${stateDir}) must not be inside the working directory (${workingDir}): ` +
+        `sandbox containers mount the working directory, and a mounted state dir ` +
+        `would expose settings, office records, vaults, and credentials to sandboxed code.`;
+    if (sandboxType === "host") {
+        log.logWarning("Insecure state dir location", message);
+        return;
+    }
+    throw new Error(message);
+}
+//# sourceMappingURL=file-guards.js.map

package/dist/file-guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-guards.js","sourceRoot":"","sources":["../src/file-guards.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EACL,SAAS,EACT,SAAS,IAAI,WAAW,EACxB,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,UAAU,EACV,SAAS,GACV,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAMnD,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AAEtD,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,QAAwC,EACxC,gBAAsC;IAEtC,MAAM,GAAG,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,IAAY,EACZ,MAAS,EACT,gBAAsC;IAEtC,MAAM,GAAG,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,SAAS,CAAC,GAAW,EAAE,gBAAsC;IACpE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,GAAW,EACX,QAAwC,EACxC,gBAAsC;IAEtC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,GAAW,EACX,MAAS,EACT,gBAAsC;IAEtC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,YAAY,KAAK,EAAE,IAAI,UAAU,CAAC,YAAY,KAAK,GAAG,EAAE,CAAC;YACrF,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,GAAG,UAAU,CAAC,YAAY,KAAK,UAAU,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC,MAAM,UAAU,sBAAsB,CAAC,UAAkB,EAAE,OAAe;IACxE,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,CAClB,GAAG,EACH,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAChF,CAAC;IACF,MAAM,EAAE,GAAG,QAAQ,CACjB,OAAO,EACP,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,OAAO,GAAG,WAAW,CAAC,MAAM,EAC/D,iBAAiB,CAClB,CAAC;IACF,IAAI,CAAC;QACH,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,UAAU,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,MAAM,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;IACD,IAAI,CAAC;QACH,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,UAAU,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,MAAc;IACjD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,SAAS,KAAK,UAAU,IAAI,SAAS,CAAC,UAAU,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,QAAgB,EAChB,UAAkB,EAClB,WAAmB;IAEnB,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC;QAAE,OAAO;IAChD,MAAM,OAAO,GACX,gBAAgB,QAAQ,+CAA+C,UAAU,KAAK;QACtF,0EAA0E;QAC1E,mFAAmF,CAAC;IACtF,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QAC3B,GAAG,CAAC,UAAU,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC","sourcesContent":["import type { Static, TSchema } from \"typebox\";\nimport { Value } from \"typebox/value\";\nimport {\n  closeSync,\n  constants as fsConstants,\n  mkdirSync,\n  openSync,\n  readFileSync,\n  renameSync,\n  unlinkSync,\n  writeSync,\n} from \"node:fs\";\nimport { resolve } from \"node:path\";\nimport * as log from \"./log.js\";\nimport { randomBytes } from \"node:crypto\";\nimport { basename, dirname, join } from \"node:path\";\nimport { errorMessage } from \"./unknown-values.js\";\n\ntype JsonFailureKind = \"syntax\" | \"shape\" | \"field\";\n\ntype MalformedJsonMessage = (detail: string, kind: JsonFailureKind) => string;\n\nconst UNEXPECTED_JSON_SHAPE = \"unexpected JSON shape\";\n\nexport function ensureDirExists(dir: string): void {\n  mkdirSync(dir, { recursive: true });\n}\n\nexport function readTextFileIfExists(path: string): string | undefined {\n  try {\n    return readFileSync(path, \"utf-8\");\n  } catch (err) {\n    if (err instanceof Error && \"code\" in err && err.code === \"ENOENT\") {\n      return undefined;\n    }\n    throw err;\n  }\n}\n\nexport function readJsonFileIfExists<T>(\n  path: string,\n  validate: (value: unknown) => value is T,\n  malformedMessage: MalformedJsonMessage,\n): T | undefined {\n  const raw = readTextFileIfExists(path);\n  return raw === undefined ? undefined : parseJsonValue(raw, validate, malformedMessage);\n}\n\nexport function readJsonSchemaFileIfExists<T extends TSchema>(\n  path: string,\n  schema: T,\n  malformedMessage: MalformedJsonMessage,\n): Static<T> | undefined {\n  const raw = readTextFileIfExists(path);\n  return raw === undefined ? undefined : parseJsonSchemaValue(raw, schema, malformedMessage);\n}\n\nfunction parseJson(raw: string, malformedMessage: MalformedJsonMessage): unknown {\n  try {\n    return JSON.parse(raw);\n  } catch (err) {\n    const detail = errorMessage(err);\n    throw new Error(malformedMessage(detail, \"syntax\"), { cause: err });\n  }\n}\n\nexport function parseJsonValue<T>(\n  raw: string,\n  validate: (value: unknown) => value is T,\n  malformedMessage: MalformedJsonMessage,\n): T {\n  const parsed = parseJson(raw, malformedMessage);\n  if (!validate(parsed)) {\n    throw new Error(malformedMessage(UNEXPECTED_JSON_SHAPE, \"shape\"));\n  }\n  return parsed;\n}\n\nexport function parseJsonSchemaValue<T extends TSchema>(\n  raw: string,\n  schema: T,\n  malformedMessage: MalformedJsonMessage,\n): Static<T> {\n  const parsed = parseJson(raw, malformedMessage);\n  if (!Value.Check(schema, parsed)) {\n    const firstError = Value.Errors(schema, parsed)[0];\n    if (!firstError || firstError.instancePath === \"\" || firstError.instancePath === \"/\") {\n      throw new Error(malformedMessage(UNEXPECTED_JSON_SHAPE, \"shape\"));\n    }\n    throw new Error(malformedMessage(`${firstError.instancePath}: ${firstError.message}`, \"field\"));\n  }\n  return parsed;\n}\n\nconst PRIVATE_FILE_MODE = 0o600;\n\nexport function atomicWritePrivateFile(targetPath: string, content: string): void {\n  const dir = dirname(targetPath);\n  const tmpPath = join(\n    dir,\n    `.${basename(targetPath)}.${process.pid}.${randomBytes(8).toString(\"hex\")}.tmp`,\n  );\n  const fd = openSync(\n    tmpPath,\n    fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL,\n    PRIVATE_FILE_MODE,\n  );\n  try {\n    writeSync(fd, content);\n  } catch (err) {\n    try {\n      unlinkSync(tmpPath);\n    } catch {}\n    throw err;\n  } finally {\n    closeSync(fd);\n  }\n  try {\n    renameSync(tmpPath, targetPath);\n  } catch (err) {\n    try {\n      unlinkSync(tmpPath);\n    } catch {}\n    throw err;\n  }\n}\n\nfunction isPathInside(child: string, parent: string): boolean {\n  const parentPath = resolve(parent);\n  const childPath = resolve(child);\n  return childPath === parentPath || childPath.startsWith(parentPath + \"/\");\n}\n\nexport function assertStateDirOutsideWorkspace(\n  stateDir: string,\n  workingDir: string,\n  sandboxType: string,\n): void {\n  if (!isPathInside(stateDir, workingDir)) return;\n  const message =\n    `--state-dir (${stateDir}) must not be inside the working directory (${workingDir}): ` +\n    `sandbox containers mount the working directory, and a mounted state dir ` +\n    `would expose settings, office records, vaults, and credentials to sandboxed code.`;\n  if (sandboxType === \"host\") {\n    log.logWarning(\"Insecure state dir location\", message);\n    return;\n  }\n  throw new Error(message);\n}\n"]}

package/dist/harness/execution-env.d.ts

@@ -0,0 +1,4 @@
+import { type ExecutionEnv } from "@earendil-works/pi-agent-core";
+import type { Executor, SandboxConfig } from "../sandbox/types.js";
+export declare function createSandboxExecutionEnv(executor: Executor, sandboxType: SandboxConfig["type"], runtimeWorkspaceRoot: string): ExecutionEnv;
+//# sourceMappingURL=execution-env.d.ts.map

package/dist/harness/execution-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-env.d.ts","sourceRoot":"","sources":["../../src/harness/execution-env.ts"],"names":[],"mappings":"AAEA,OAAO,EAUL,KAAK,YAAY,EAQlB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAMnE,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,QAAQ,EAClB,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,EAClC,oBAAoB,EAAE,MAAM,GAC3B,YAAY,CAKd"}

package/dist/harness/execution-env.js

@@ -0,0 +1,245 @@
+import { randomBytes } from "node:crypto";
+import { posix } from "node:path";
+import { DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, ExecutionError, FileError, err, ok, truncateHead, truncateTail, } from "@earendil-works/pi-agent-core";
+import { NodeExecutionEnv } from "@earendil-works/pi-agent-core/node";
+import { execAppendFile, execWriteFile, shellEscape } from "../sandbox/utils.js";
+import { errorMessage } from "../unknown-values.js";
+const SPILL_DIR = ".mikan/bash-output";
+export function createSandboxExecutionEnv(executor, sandboxType, runtimeWorkspaceRoot) {
+    if (sandboxType === "host") {
+        return new NodeExecutionEnv({ cwd: runtimeWorkspaceRoot });
+    }
+    return new ShellExecutionEnv(executor, runtimeWorkspaceRoot);
+}
+class ShellExecutionEnv {
+    constructor(executor, runtimeWorkspaceRoot) {
+        this.executor = executor;
+        this.cwd = runtimeWorkspaceRoot;
+    }
+    async absolutePath(path, _context) {
+        return ok(posix.isAbsolute(path) ? posix.normalize(path) : posix.resolve(this.cwd, path));
+    }
+    async joinPath(parts, _context) {
+        return ok(posix.join(...parts));
+    }
+    readTextFile(path, context) {
+        return this.fileOp(() => this.executor.readFile(path, this.execOptions(context)));
+    }
+    openTextLineReader(path, context) {
+        return this.fileOp(async () => {
+            const content = await this.executor.readFile(path, this.execOptions(context));
+            return new ShellTextLineReader(content);
+        });
+    }
+    async readBinaryFile(path, context) {
+        return this.fileOp(async () => Buffer.from(await this.executor.readFileBase64(path, this.execOptions(context)), "base64"));
+    }
+    readTextLines(path, options, context) {
+        return this.fileOp(async () => {
+            const max = options?.maxLines;
+            const command = max === undefined
+                ? `cat ${shellEscape(path)}`
+                : `head -n ${Math.max(0, Math.floor(max))} ${shellEscape(path)}`;
+            const { stdout } = await this.run(command, context);
+            const lines = stdout.split("\n");
+            if (lines.at(-1) === "")
+                lines.pop();
+            return lines;
+        });
+    }
+    writeFile(path, content, context) {
+        return this.fileOp(() => execWriteFile(this.executor, path, content, this.execOptions(context)));
+    }
+    appendFile(path, content, context) {
+        return this.fileOp(() => execAppendFile(this.executor, path, content, this.execOptions(context)));
+    }
+    renameFile(sourcePath, destinationPath, context) {
+        return this.fileOp(async () => {
+            await this.run(`mv -f ${shellEscape(sourcePath)} ${shellEscape(destinationPath)}`, context);
+        });
+    }
+    fileInfo(path, context) {
+        return this.fileOp(async () => {
+            const escaped = shellEscape(path);
+            const probe = await this.executor.exec(`if [ -L ${escaped} ]; then printf 'symlink'; elif [ -d ${escaped} ]; then printf 'directory'; ` +
+                `elif [ -f ${escaped} ]; then printf 'file'; else exit 1; fi`, this.execOptions(context));
+            if (probe.code !== 0)
+                throw new Error(`No such file or directory: ${path}`);
+            const kind = probe.stdout.trim();
+            let size = 0;
+            if (kind === "file") {
+                const stat = await this.executor.exec(`wc -c < ${escaped}`, this.execOptions(context));
+                if (stat.code === 0)
+                    size = Number.parseInt(stat.stdout.trim(), 10) || 0;
+            }
+            let mtimeMs = 0;
+            const mtime = await this.executor.exec(`date -r ${escaped} +%s`, this.execOptions(context));
+            if (mtime.code === 0)
+                mtimeMs = (Number.parseInt(mtime.stdout.trim(), 10) || 0) * 1000;
+            return { name: posix.basename(path), path, kind, size, mtimeMs };
+        });
+    }
+    async listDir(path, context) {
+        return this.fileOp(async () => {
+            const { stdout } = await this.run(`ls -A ${shellEscape(path)}`, context);
+            const names = stdout.split("\n").filter(Boolean).toSorted();
+            const entries = [];
+            for (const name of names) {
+                const child = posix.join(path, name);
+                const info = await this.fileInfo(child, context);
+                if (info.ok)
+                    entries.push(info.value);
+            }
+            return entries;
+        });
+    }
+    canonicalPath(path, context) {
+        return this.fileOp(async () => (await this.run(`realpath ${shellEscape(path)}`, context)).stdout.trim());
+    }
+    async exists(path, context) {
+        try {
+            const result = await this.executor.exec(`test -e ${shellEscape(path)}`, this.execOptions(context));
+            return ok(result.code === 0);
+        }
+        catch (error) {
+            return err(toFileError(error));
+        }
+    }
+    createDir(path, options, context) {
+        return this.fileOp(async () => {
+            const flag = options?.recursive === false ? "" : "-p ";
+            await this.run(`mkdir ${flag}${shellEscape(path)}`, context);
+        });
+    }
+    remove(path, options, context) {
+        return this.fileOp(async () => {
+            const recursive = options?.recursive ? "-r" : "";
+            const force = options?.force ? "-f" : "";
+            await this.run(`rm ${recursive} ${force} ${shellEscape(path)}`, context);
+        });
+    }
+    createTempDir(prefix, context) {
+        return this.fileOp(async () => {
+            const template = prefix === undefined ? "" : shellEscape(`${prefix}XXXXXX`);
+            const { stdout } = await this.run(`mktemp -d ${template}`.trim(), context);
+            return stdout.trim();
+        });
+    }
+    createTempFile(options, context) {
+        return this.fileOp(async () => {
+            const template = options?.prefix === undefined && options?.suffix === undefined
+                ? ""
+                : shellEscape(`${options?.prefix ?? ""}XXXXXX${options?.suffix ?? ""}`);
+            const { stdout } = await this.run(`mktemp ${template}`.trim(), context);
+            return stdout.trim();
+        });
+    }
+    async cleanup(_context) { }
+    async exec(command, options, context) {
+        try {
+            const result = await this.executor.exec(command, {
+                cwd: options?.cwd || undefined,
+                timeout: options?.timeout || undefined,
+                signal: context.abortSignal,
+            });
+            const combined = [result.stdout, result.stderr].filter((part) => part.length > 0).join("\n");
+            const limits = options?.capture?.limits ?? {
+                maxBytes: DEFAULT_MAX_BYTES,
+                maxLines: DEFAULT_MAX_LINES,
+                retain: "tail",
+            };
+            const truncation = limits.retain === "head"
+                ? truncateHead(combined, { maxLines: limits.maxLines, maxBytes: limits.maxBytes })
+                : truncateTail(combined, { maxLines: limits.maxLines, maxBytes: limits.maxBytes });
+            let spillPath;
+            if (options?.capture?.spill && truncation.truncated) {
+                try {
+                    spillPath = posix.join(this.cwd, SPILL_DIR, `${randomBytes(8).toString("hex")}.log`);
+                    await this.executor.writeFile(spillPath, combined, this.execOptions(context));
+                }
+                catch {
+                    spillPath = undefined;
+                }
+            }
+            const metadata = shellOutputMetadata(truncation, spillPath);
+            options?.onUpdate?.({ kind: "replace", output: { text: truncation.content, ...metadata } }, context);
+            return ok({ exitCode: result.code, ...metadata });
+        }
+        catch (error) {
+            return err(toExecutionError(error, context));
+        }
+    }
+    execOptions(context) {
+        return { signal: context.abortSignal };
+    }
+    async run(command, context) {
+        const result = await this.executor.exec(command, this.execOptions(context));
+        if (result.code !== 0) {
+            throw new Error(result.stderr.trim() || `Command failed (${result.code}): ${command}`);
+        }
+        return result;
+    }
+    async fileOp(op) {
+        try {
+            return ok(await op());
+        }
+        catch (error) {
+            return err(toFileError(error));
+        }
+    }
+}
+class ShellTextLineReader {
+    constructor(content) {
+        this.content = content;
+        this.offset = 0;
+    }
+    async readLine(_context) {
+        if (this.offset >= this.content.length)
+            return ok(undefined);
+        const newline = this.content.indexOf("\n", this.offset);
+        if (newline === -1) {
+            const text = this.content.slice(this.offset);
+            this.offset = this.content.length;
+            return ok({ text, terminated: false });
+        }
+        const text = this.content.slice(this.offset, newline);
+        this.offset = newline + 1;
+        return ok({ text, terminated: true });
+    }
+    async close(_context) {
+        this.offset = this.content.length;
+    }
+}
+function shellOutputMetadata(truncation, spillPath) {
+    const { content: _content, ...metadata } = truncation;
+    const lastLine = truncation.content.split("\n").at(-1) ?? "";
+    return {
+        truncation: metadata,
+        spillPath: spillPath || undefined,
+        lastLineBytes: truncation.lastLinePartial ? Buffer.byteLength(lastLine, "utf8") : undefined,
+    };
+}
+function toFileError(error) {
+    const message = errorMessage(error);
+    if (/aborted/i.test(message))
+        return new FileError("aborted", message);
+    if (/no such file|not found/i.test(message))
+        return new FileError("not_found", message);
+    if (/permission denied/i.test(message))
+        return new FileError("permission_denied", message);
+    if (/not a directory/i.test(message))
+        return new FileError("not_directory", message);
+    if (/is a directory/i.test(message))
+        return new FileError("is_directory", message);
+    return new FileError("unknown", message, undefined, error instanceof Error ? error : undefined);
+}
+function toExecutionError(error, context) {
+    const message = errorMessage(error);
+    if (context.abortSignal?.aborted || /aborted/i.test(message)) {
+        return new ExecutionError("aborted", message);
+    }
+    if (/timed out/i.test(message))
+        return new ExecutionError("timeout", message);
+    return new ExecutionError("unknown", message, error instanceof Error ? error : undefined);
+}
+//# sourceMappingURL=execution-env.js.map