@nikolasp98/minion 2026.6.14-dev.20260616061802 → 2026.6.16-dev

package/dist/{pi-embedded-utils-C6MaVLHj.js → pi-embedded-utils-BlNfBen_.js}

@@ -1,5 +1,5 @@
 import { F as shortenHomeInString } from "./subsystem-Bz8lTz2g.js";
-import { S as sanitizeUserFacingText } from "./pi-embedded-helpers-BbHYim54.js";
+import { S as sanitizeUserFacingText } from "./pi-embedded-helpers-CUfPWD_N.js";
 import { n as redactToolDetail } from "./redact-Bekggfw4.js";
 import { t as stripReasoningTagsFromText } from "./reasoning-tags-DYznQbdm.js";
 import "node:module";

package/dist/{pi-embedded-utils-DIGchmzO.js → pi-embedded-utils-Bql42QTv.js}

@@ -1,4 +1,4 @@
-import { N as sanitizeUserFacingText } from "./pi-embedded-helpers-D-m7pmXE.js";
+import { N as sanitizeUserFacingText } from "./pi-embedded-helpers-BsRnajNh.js";
 import { t as stripReasoningTagsFromText } from "./reasoning-tags-DYznQbdm.js";
 import { n as resolveToolDisplay, t as formatToolDetail } from "./tool-display-DQ7I53Xn.js";
 //#region src/shared/chat-content.ts

package/dist/{pi-embedded-utils-Ip0GsjWb.js → pi-embedded-utils-BtyCE2ZK.js}

@@ -1,4 +1,4 @@
-import { S as sanitizeUserFacingText } from "./pi-embedded-helpers-CkhQP2gU.js";
+import { S as sanitizeUserFacingText } from "./pi-embedded-helpers-CSxJBpFl.js";
 import { t as stripReasoningTagsFromText } from "./reasoning-tags-DYznQbdm.js";
 import { n as resolveToolDisplay, t as formatToolDetail } from "./tool-display-ByuoRPis.js";
 //#region src/shared/chat-content.ts

package/dist/{pi-model-discovery-Ot_Q_yYa.js → pi-model-discovery-BV73T1am.js}

@@ -1,4 +1,4 @@
-import { m as __exportAll } from "./pi-embedded-utils-C6MaVLHj.js";
+import { m as __exportAll } from "./pi-embedded-utils-BlNfBen_.js";
 import path from "node:path";
 import { AuthStorage, AuthStorage as AuthStorage$1, ModelRegistry, ModelRegistry as ModelRegistry$1 } from "@earendil-works/pi-coding-agent";
 //#region src/agents/models/pi-model-discovery.ts

package/dist/{pi-tools.policy-Dt2kTSid.js → pi-tools.policy-DDJ31-0E.js}

@@ -1,9 +1,9 @@
 import { u as resolveAgentIdFromSessionKey, x as resolveThreadParentSessionKey } from "./session-key-DK3D9dkE.js";
 import { l as resolveAgentWorkspaceDir, r as resolveAgentConfig, u as resolveDefaultAgentId } from "./agent-scope-BP7xXcTE.js";
-import { E as ALL_SCOPES, T as AGENT_TYPE_SCOPES } from "./io-TKYkFbcF.js";
+import { E as ALL_SCOPES, T as AGENT_TYPE_SCOPES } from "./io-C_Q6AU5E.js";
 import { l as normalizeMessageChannel } from "./message-channel-C02KGm4w.js";
-import { B as getChannelDock, W as resolveChannelGroupToolsPolicy } from "./sessions-D_b2UXud.js";
-import { C as compileGlobPatterns, b as normalizeToolName, p as TOOL_GROUPS, v as expandToolGroups, w as matchesAnyGlobPattern } from "./sandbox-pZvVQZ-a.js";
+import { B as getChannelDock, W as resolveChannelGroupToolsPolicy } from "./sessions-C0Qs0Flz.js";
+import { C as compileGlobPatterns, b as normalizeToolName, p as TOOL_GROUPS, v as expandToolGroups, w as matchesAnyGlobPattern } from "./sandbox-CDGF9AVA.js";
 //#region src/agents/identity/workspace-dirs.ts
 function listAgentWorkspaceDirs(cfg) {
 	const dirs = /* @__PURE__ */ new Set();

package/dist/{plugin-registry-BZCSZFQn.js → plugin-registry-Dq33ZU89.js}

@@ -1,9 +1,9 @@
 import { n as __exportAll } from "./chunk-2rV9d50f.js";
 import { j as getActivePluginRegistry, o as createSubsystemLogger } from "./entry.js";
 import { l as resolveAgentWorkspaceDir, u as resolveDefaultAgentId } from "./agent-scope-BP7xXcTE.js";
-import { i as loadConfig } from "./io-TKYkFbcF.js";
-import "./config-ClkrcdId.js";
-import { k as loadMinionPlugins } from "./subagent-registry-0zv9UyYz.js";
+import { i as loadConfig } from "./io-C_Q6AU5E.js";
+import "./config-DHYot764.js";
+import { A as loadMinionPlugins } from "./subagent-registry-C_UHFYRY.js";
 import "./logging-D43UWj1X.js";
 //#region src/cli/plugin-registry.ts
 var plugin_registry_exports = /* @__PURE__ */ __exportAll({ ensurePluginRegistryLoaded: () => ensurePluginRegistryLoaded });

package/dist/{plugin-registry-DMRnpxA2.js → plugin-registry-RoPLmlrM.js}

@@ -1,9 +1,9 @@
 import { n as __exportAll } from "./chunk-2rV9d50f.js";
-import { cn as loadMinionPlugins } from "./reply-D_uwJ_hb.js";
+import { ln as loadMinionPlugins } from "./reply-CNJWciSj.js";
 import { t as createSubsystemLogger, x as getActivePluginRegistry } from "./subsystem-Cnn1-kOi.js";
 import { l as resolveAgentWorkspaceDir, u as resolveDefaultAgentId } from "./agent-scope-D_1ZJVsc.js";
-import { i as loadConfig } from "./io-oiyyZuuG.js";
-import "./config-BgqD6SVw.js";
+import { i as loadConfig } from "./io-CpUiX-Lv.js";
+import "./config-DJTLRK5S.js";
 import "./logging-BlQyBIpf.js";
 //#region src/cli/plugin-registry.ts
 var plugin_registry_exports = /* @__PURE__ */ __exportAll({ ensurePluginRegistryLoaded: () => ensurePluginRegistryLoaded });

package/dist/plugin-sdk/agents/bash/bash-tools.exec-runtime.d.ts

@@ -4,6 +4,7 @@ import type { ProcessSession } from "./bash-process-registry.js";
 import type { ExecToolDetails } from "./bash-tools.exec.js";
 import type { BashSandboxConfig } from "./bash-tools.shared.js";
 export { applyPathPrepend, normalizePathPrepend } from "../../infra/path-prepend.js";
+import { type Tier0Binding } from "../sandbox/tier0/index.js";
 export declare function validateHostEnv(env: Record<string, string>): void;
 export declare function stripAnsi(str: string): string;
 export declare const DEFAULT_MAX_OUTPUT: number;
@@ -71,4 +72,7 @@ export declare function runExecProcess(opts: {
     sessionKey?: string;
     timeoutSec: number;
     onUpdate?: (partialResult: AgentToolResult<ExecToolDetails>) => void;
+    /** Opt-in tier-0 virtual sandbox binding; when set, eligible commands run
+     * in-process via just-bash before falling back to the Docker/host path. */
+    tier0?: Tier0Binding;
 }): Promise<ExecProcessHandle>;

package/dist/plugin-sdk/agents/pi-embedded-runner/tool-result-context-guard.d.ts

@@ -15,6 +15,11 @@ type GuardableAgent = object;
 export declare function createToolResultContextGuardTransform(params: {
     contextWindowTokens: number;
     wrappedTransform?: (messages: AgentMessage[], signal: AbortSignal) => AgentMessage[] | Promise<AgentMessage[]>;
+    /**
+     * Collapse oversized/repetitive tool output (head + elision + tail) before
+     * budget enforcement. Enabled unless explicitly set to false.
+     */
+    reduceOutput?: boolean;
 }): (messages: AgentMessage[], signal?: AbortSignal) => Promise<AgentMessage[]>;
 /**
  * @deprecated Use {@link createToolResultContextGuardTransform} instead.

package/dist/plugin-sdk/agents/pi-embedded-runner/tool-result-reduce.d.ts

@@ -0,0 +1,8 @@
+export interface ReduceOptions {
+    maxLines: number;
+    headLines: number;
+    tailLines: number;
+    collapseRuns?: boolean;
+}
+/** Pure text reducer for oversized/repetitive tool output. Never throws. */
+export declare function reduceToolOutputText(text: string, opts: ReduceOptions): string;

package/dist/plugin-sdk/agents/sandbox/tier0/index.d.ts

@@ -0,0 +1,3 @@
+export { isInterpreterLimitation, shouldTryTier0 } from "./router.js";
+export { getTier0Sandbox, resetTier0Sandbox, resolveTier0Binding, type Tier0Binding, } from "./registry.js";
+export { Tier0VirtualSandbox, type Tier0ExecRequest, type Tier0Outcome, } from "./virtual-sandbox.js";

package/dist/plugin-sdk/agents/sandbox/tier0/registry.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Tier-0 enablement + process-wide backend singleton.
+ *
+ * Tier-0 is opt-in per agent via `sandbox.tier0.enabled` (default false). It only
+ * activates when a Docker sandbox is also configured (so there is always a
+ * guaranteed fallback) and when `workspaceAccess !== "ro"` — read-only workspaces
+ * can't be served with byte-for-byte parity by the read-write virtual mount, so
+ * we let those run on Docker.
+ */
+import type { MinionConfig } from "../../../config/config.js";
+import { Tier0VirtualSandbox } from "./virtual-sandbox.js";
+export declare function getTier0Sandbox(): Tier0VirtualSandbox;
+/** Test hook — drop the singleton + its cached interpreters. */
+export declare function resetTier0Sandbox(): void;
+export type Tier0Binding = {
+    backend: Tier0VirtualSandbox;
+    workspaceHostDir: string;
+};
+/**
+ * Resolve the tier-0 binding for an exec, or undefined to use the Docker/host
+ * path. `workspaceHostDir` is the real sandbox workspace dir (mounted into the
+ * Docker container too), so tier-0 sees the same files.
+ */
+export declare function resolveTier0Binding(params: {
+    config?: MinionConfig;
+    agentId?: string;
+    workspaceHostDir?: string;
+}): Tier0Binding | undefined;

package/dist/plugin-sdk/agents/sandbox/tier0/router.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Tier-0 routing + interpreter-limitation heuristics.
+ *
+ * `shouldTryTier0` decides — cheaply, before running anything — whether a command
+ * is a candidate for the in-process virtual sandbox. It is CONSERVATIVE: anything
+ * that needs the network, a real runtime/toolchain, a privileged syscall, or an
+ * external binary that lives outside the virtual command set escalates straight
+ * to Docker. When tier-0 is tried and just-bash can't serve it, the exec result
+ * is flagged `unsupported` (see isInterpreterLimitation) and the caller escalates.
+ */
+export declare function shouldTryTier0(command: string): boolean;
+/**
+ * Distinguish "just-bash can't do this" from "the user's command legitimately
+ * failed". Known limitations in just-bash@3.0.1 include `$(( ))` arithmetic
+ * expansion (trips its own defense-in-depth `node:module` guard) and any
+ * unimplemented builtin. These must escalate to Docker, not surface as failures.
+ */
+export declare function isInterpreterLimitation(stderr: string): boolean;

package/dist/plugin-sdk/agents/sandbox/tier0/virtual-sandbox.d.ts

@@ -0,0 +1,30 @@
+export type Tier0ExecRequest = {
+    /** The shell command to run (already resolved to its exec form). */
+    command: string;
+    /** Container workdir the workspace is mounted at, e.g. "/workspace". */
+    workdir: string;
+    /** Real host directory to mount at `workdir` (the sandbox workspace). */
+    workspaceHostDir: string;
+    env?: Record<string, string>;
+    /** Stable per-scope key (we reuse the Docker container name). */
+    scopeKey: string;
+    timeoutSec?: number;
+};
+export type Tier0Outcome = {
+    status: "completed" | "failed";
+    exitCode: number | null;
+    durationMs: number;
+    /** combined stdout+stderr, trimmed */
+    aggregated: string;
+    timedOut: boolean;
+    /** true when the failure is a just-bash limitation, not a real command failure */
+    unsupported: boolean;
+};
+export declare class Tier0VirtualSandbox {
+    private readonly instances;
+    private getInstance;
+    exec(req: Tier0ExecRequest): Promise<Tier0Outcome>;
+    dispose(scopeKey?: string): void;
+    /** test/inspection helper */
+    get liveInstances(): number;
+}

package/dist/plugin-sdk/agents/sandbox/types.d.ts

@@ -41,11 +41,16 @@ export type SandboxPruneConfig = {
     maxAgeDays: number;
 };
 export type SandboxScope = "session" | "agent" | "shared";
+export type SandboxTier0Config = {
+    /** Opt-in: run cheap/safe commands in-process via just-bash before Docker. */
+    enabled: boolean;
+};
 export type SandboxConfig = {
     mode: "off" | "non-main" | "all";
     scope: SandboxScope;
     workspaceAccess: SandboxWorkspaceAccess;
     workspaceRoot: string;
+    tier0: SandboxTier0Config;
     docker: SandboxDockerConfig;
     browser: SandboxBrowserConfig;
     tools: SandboxToolPolicy;

package/dist/plugin-sdk/agents/sections/behaviour.d.ts

@@ -0,0 +1,9 @@
+import type { PromptSectionDefinition } from "./types.js";
+/**
+ * Identity-layer section that injects the agent's self-maintained operating
+ * rules. The rules live at `<workspaceDir>/prompts/behaviour.md` and are
+ * written by the `update_behaviour` tool. There is intentionally no global
+ * fallback file — the section renders nothing unless the agent has authored
+ * its own behaviour.md.
+ */
+export declare const BEHAVIOUR_SECTIONS: PromptSectionDefinition[];

package/dist/plugin-sdk/agents/skills/compact-prompt.d.ts

@@ -0,0 +1,12 @@
+export interface CompactSkill {
+    name: string;
+    description: string;
+    body: string;
+}
+/**
+ * Render a compact, name+description-only skills listing for progressive
+ * disclosure. The full SKILL.md body is deliberately omitted; the agent is
+ * instructed to load it on demand via the `skill_view` tool. This keeps the
+ * system prompt small when many skills are available.
+ */
+export declare function formatSkillsCompact(skills: ReadonlyArray<CompactSkill>): string;

package/dist/plugin-sdk/agents/skills/workspace.d.ts

@@ -11,6 +11,8 @@ export declare function buildWorkspaceSkillSnapshot(workspaceDir: string, opts?:
     denyFilter?: string[];
     eligibility?: SkillEligibilityContext;
     snapshotVersion?: number;
+    /** Override progressive disclosure (default: config.skills.progressiveDisclosure !== false). */
+    progressive?: boolean;
 }): SkillSnapshot;
 export declare function buildWorkspaceSkillsPrompt(workspaceDir: string, opts?: {
     config?: MinionConfig;
@@ -22,6 +24,8 @@ export declare function buildWorkspaceSkillsPrompt(workspaceDir: string, opts?:
     /** Phase D LD-2: deny list. Deny wins over allow when both list a skill. */
     denyFilter?: string[];
     eligibility?: SkillEligibilityContext;
+    /** Override progressive disclosure (default: config.skills.progressiveDisclosure !== false). */
+    progressive?: boolean;
 }): string;
 export declare function resolveSkillsPromptForRun(params: {
     skillsSnapshot?: SkillSnapshot;