@openparachute/agent 0.1.1 → 0.2.0

package/container/agent-runner/src/db/session-state.ts

@@ -1,79 +0,0 @@
-/**
- * Persistent key/value state for the container. Lives in outbound.db
- * (container-owned, already scoped per channel/thread).
- *
- * Primary use: remember each provider's opaque continuation id so the
- * agent's conversation resumes across container restarts. Keyed per
- * provider because continuations are provider-private — a Claude
- * conversation id means nothing to Codex and vice versa. Switching
- * providers is therefore lossless: each provider's last thread stays
- * on file and resumes cleanly if the user flips back.
- */
-import { getOutboundDb } from './connection.js';
-
-const LEGACY_KEY = 'sdk_session_id';
-
-function continuationKey(providerName: string): string {
-  return `continuation:${providerName.toLowerCase()}`;
-}
-
-function getValue(key: string): string | undefined {
-  const row = getOutboundDb()
-    .prepare('SELECT value FROM session_state WHERE key = ?')
-    .get(key) as { value: string } | undefined;
-  return row?.value;
-}
-
-function setValue(key: string, value: string): void {
-  getOutboundDb()
-    .prepare('INSERT OR REPLACE INTO session_state (key, value, updated_at) VALUES (?, ?, ?)')
-    .run(key, value, new Date().toISOString());
-}
-
-function deleteValue(key: string): void {
-  getOutboundDb().prepare('DELETE FROM session_state WHERE key = ?').run(key);
-}
-
-/**
- * One-time migration of the pre-per-provider continuation row.
- *
- * Before this was keyed per provider, continuations lived under the
- * single key `sdk_session_id`. On container start, if that legacy row
- * exists and the current provider has no continuation of its own, adopt
- * the legacy value into the current provider's slot (best-guess — the
- * legacy row was written by whatever provider ran last). The legacy row
- * is always deleted so future provider flips never re-read a stale id
- * through the wrong lens.
- *
- * Returns the continuation the caller should use at startup (either the
- * current provider's existing value, the adopted legacy value, or
- * undefined).
- */
-export function migrateLegacyContinuation(providerName: string): string | undefined {
-  const legacy = getValue(LEGACY_KEY);
-  const currentKey = continuationKey(providerName);
-  const current = getValue(currentKey);
-
-  if (legacy === undefined) return current;
-
-  // Always drop the legacy row so no future provider reads it.
-  deleteValue(LEGACY_KEY);
-
-  // Prefer the current provider's own slot if one already exists.
-  if (current !== undefined) return current;
-
-  setValue(currentKey, legacy);
-  return legacy;
-}
-
-export function getContinuation(providerName: string): string | undefined {
-  return getValue(continuationKey(providerName));
-}
-
-export function setContinuation(providerName: string, id: string): void {
-  setValue(continuationKey(providerName), id);
-}
-
-export function clearContinuation(providerName: string): void {
-  deleteValue(continuationKey(providerName));
-}

package/container/agent-runner/src/destinations.ts

@@ -1,135 +0,0 @@
-/**
- * Destination map — lives in inbound.db's `destinations` table.
- *
- * The host writes this table before every container wake AND on demand
- * (e.g. when a new child agent is created mid-session). The container
- * queries the table live on every lookup, so admin changes take effect
- * immediately — no restart required.
- *
- * This table is BOTH the routing map and the container-visible ACL.
- * The host re-validates on the delivery side against the central DB,
- * so even if this table is stale the host's enforcement is authoritative.
- */
-import { getInboundDb } from './db/connection.js';
-
-export interface DestinationEntry {
-  name: string;
-  displayName: string;
-  type: 'channel' | 'agent';
-  channelType?: string;
-  platformId?: string;
-  agentGroupId?: string;
-}
-
-interface DestRow {
-  name: string;
-  display_name: string | null;
-  type: 'channel' | 'agent';
-  channel_type: string | null;
-  platform_id: string | null;
-  agent_group_id: string | null;
-}
-
-function rowToEntry(row: DestRow): DestinationEntry {
-  return {
-    name: row.name,
-    displayName: row.display_name ?? row.name,
-    type: row.type,
-    channelType: row.channel_type ?? undefined,
-    platformId: row.platform_id ?? undefined,
-    agentGroupId: row.agent_group_id ?? undefined,
-  };
-}
-
-export function getAllDestinations(): DestinationEntry[] {
-  const rows = getInboundDb().prepare('SELECT * FROM destinations ORDER BY name').all() as DestRow[];
-  return rows.map(rowToEntry);
-}
-
-export function findByName(name: string): DestinationEntry | undefined {
-  const row = getInboundDb().prepare('SELECT * FROM destinations WHERE name = ?').get(name) as DestRow | undefined;
-  return row ? rowToEntry(row) : undefined;
-}
-
-/**
- * Reverse lookup: given routing fields from an inbound message, find
- * which destination they correspond to (what does this agent call the sender?).
- */
-export function findByRouting(
-  channelType: string | null | undefined,
-  platformId: string | null | undefined,
-): DestinationEntry | undefined {
-  if (!channelType || !platformId) return undefined;
-  const db = getInboundDb();
-  const row =
-    channelType === 'agent'
-      ? (db
-          .prepare("SELECT * FROM destinations WHERE type = 'agent' AND agent_group_id = ?")
-          .get(platformId) as DestRow | undefined)
-      : (db
-          .prepare("SELECT * FROM destinations WHERE type = 'channel' AND channel_type = ? AND platform_id = ?")
-          .get(channelType, platformId) as DestRow | undefined);
-  return row ? rowToEntry(row) : undefined;
-}
-
-/**
- * Generate the system-prompt addendum: agent identity + destination map.
- *
- * Identity is injected here (not in the shared CLAUDE.md) because it's
- * per-agent-group and changes when the operator renames an agent, while
- * the shared base is identical across all agents.
- */
-export function buildSystemPromptAddendum(assistantName?: string): string {
-  const sections: string[] = [];
-
-  if (assistantName) {
-    sections.push(['# You are ' + assistantName, '', `Your name is **${assistantName}**. Use it when the channel asks who you are, when introducing yourself, and when signing any message that explicitly calls for a signature.`].join('\n'));
-  }
-
-  sections.push(buildDestinationsSection());
-
-  return sections.join('\n\n');
-}
-
-function buildDestinationsSection(): string {
-  const all = getAllDestinations();
-
-  if (all.length === 0) {
-    return [
-      '## Sending messages',
-      '',
-      'You currently have no configured destinations. You cannot send messages until an admin wires one up.',
-    ].join('\n');
-  }
-
-  // Single-destination shortcut: the agent just writes its response normally.
-  if (all.length === 1) {
-    const d = all[0];
-    const label = d.displayName && d.displayName !== d.name ? ` (${d.displayName})` : '';
-    return [
-      '## Sending messages',
-      '',
-      `Your messages are delivered to \`${d.name}\`${label}. Just write your response directly — no special wrapping needed.`,
-      '',
-      'To mark something as scratchpad (logged but not sent), wrap it in `<internal>...</internal>`.',
-      '',
-      'To send a message mid-response (e.g., an acknowledgment before a long task), call the `send_message` MCP tool.',
-    ].join('\n');
-  }
-
-  const lines = ['## Sending messages', '', 'You can send messages to the following destinations:', ''];
-  for (const d of all) {
-    const label = d.displayName && d.displayName !== d.name ? ` (${d.displayName})` : '';
-    lines.push(`- \`${d.name}\`${label}`);
-  }
-  lines.push('');
-  lines.push('To send a message, wrap it in a `<message to="name">...</message>` block.');
-  lines.push('You can include multiple `<message>` blocks in one response to send to multiple destinations.');
-  lines.push('Text outside of `<message>` blocks is scratchpad — logged but not sent anywhere.');
-  lines.push('Use `<internal>...</internal>` to make scratchpad intent explicit.');
-  lines.push('');
-  lines.push(
-    'To send a message mid-response (e.g., an acknowledgment before a long task), call the `send_message` MCP tool with the `to` parameter set to a destination name.',
-  );
-  return lines.join('\n');
-}

package/container/agent-runner/src/formatter.test.ts

@@ -1,167 +0,0 @@
-/**
- * v1-parity tests for formatter behavior.
- *
- * Port of src/v1/formatting.test.ts (at commit 27c5220, parent of the v1
- * deletion commit 86becf8). Covers: context timezone header, reply_to +
- * quoted_message rendering, XML escaping, and stripInternalTags.
- *
- * Timestamp-format assertions use `formatLocalTime()` output format, which
- * is host locale-dependent for decorators (month abbr, "," separator) but
- * stable for the numeric parts we assert on (hour, minute, year).
- */
-import { describe, it, expect, beforeEach, afterEach } from 'bun:test';
-
-import { initTestSessionDb, closeSessionDb, getInboundDb } from './db/connection.js';
-import { getPendingMessages } from './db/messages-in.js';
-import { formatMessages, stripInternalTags } from './formatter.js';
-import { TIMEZONE } from './timezone.js';
-
-beforeEach(() => {
-  initTestSessionDb();
-});
-
-afterEach(() => {
-  closeSessionDb();
-});
-
-function insertMessage(
-  id: string,
-  kind: string,
-  content: object,
-  opts?: { timestamp?: string },
-) {
-  const timestamp = opts?.timestamp ?? new Date().toISOString();
-  getInboundDb()
-    .prepare(
-      `INSERT INTO messages_in (id, kind, timestamp, status, content)
-       VALUES (?, ?, ?, 'pending', ?)`,
-    )
-    .run(id, kind, timestamp, JSON.stringify(content));
-}
-
-describe('context timezone header', () => {
-  it('prepends <context timezone="..."/> to formatted output', () => {
-    insertMessage('m1', 'chat', { sender: 'Alice', text: 'hello' });
-    const result = formatMessages(getPendingMessages());
-    expect(result).toContain(`<context timezone="${TIMEZONE}"`);
-  });
-
-  it('includes the header even when the message list is empty', () => {
-    const result = formatMessages([]);
-    expect(result).toContain(`<context timezone="${TIMEZONE}"`);
-  });
-
-  it('header comes before the <messages> block', () => {
-    insertMessage('m1', 'chat', { sender: 'Alice', text: 'one' });
-    insertMessage('m2', 'chat', { sender: 'Bob', text: 'two' });
-    const result = formatMessages(getPendingMessages());
-    const ctxIdx = result.indexOf('<context');
-    const msgsIdx = result.indexOf('<messages>');
-    expect(ctxIdx).toBeGreaterThanOrEqual(0);
-    expect(msgsIdx).toBeGreaterThan(ctxIdx);
-  });
-});
-
-describe('timestamp formatting', () => {
-  it('renders time via formatLocalTime (user TZ)', () => {
-    // 2026-06-15T12:00:00Z — timezone-agnostic assertions (year is stable)
-    insertMessage('m1', 'chat', { sender: 'Alice', text: 'hi' }, { timestamp: '2026-06-15T12:00:00.000Z' });
-    const result = formatMessages(getPendingMessages());
-    // formatLocalTime's format in en-US contains the year and a month abbrev
-    expect(result).toContain('2026');
-    expect(result).toMatch(/Jun/);
-  });
-
-  it('uses 12-hour AM/PM format', () => {
-    // 15:30 UTC — some hour will show with AM or PM depending on TZ
-    insertMessage('m1', 'chat', { sender: 'Alice', text: 'hi' }, { timestamp: '2026-06-15T15:30:00.000Z' });
-    const result = formatMessages(getPendingMessages());
-    expect(result).toMatch(/(AM|PM)/);
-  });
-});
-
-describe('reply_to + quoted_message rendering', () => {
-  it('renders reply_to attribute and quoted_message when all fields present', () => {
-    insertMessage('m1', 'chat', {
-      sender: 'Alice',
-      text: 'Yes, on my way!',
-      replyTo: { id: '42', sender: 'Bob', text: 'Are you coming tonight?' },
-    });
-    const result = formatMessages(getPendingMessages());
-    expect(result).toContain('reply_to="42"');
-    expect(result).toContain('<quoted_message from="Bob">Are you coming tonight?</quoted_message>');
-    expect(result).toContain('Yes, on my way!</message>');
-  });
-
-  it('omits reply_to and quoted_message when no reply context', () => {
-    insertMessage('m1', 'chat', { sender: 'Alice', text: 'plain' });
-    const result = formatMessages(getPendingMessages());
-    expect(result).not.toContain('reply_to');
-    expect(result).not.toContain('quoted_message');
-  });
-
-  it('renders reply_to but omits quoted_message when original content is missing', () => {
-    insertMessage('m1', 'chat', {
-      sender: 'Alice',
-      text: 'ack',
-      replyTo: { id: '42', sender: 'Bob' }, // no text
-    });
-    const result = formatMessages(getPendingMessages());
-    expect(result).toContain('reply_to="42"');
-    expect(result).not.toContain('quoted_message');
-  });
-
-  it('XML-escapes reply context', () => {
-    insertMessage('m1', 'chat', {
-      sender: 'Alice',
-      text: 'reply',
-      replyTo: { id: '1', sender: 'A & B', text: '<script>alert("xss")</script>' },
-    });
-    const result = formatMessages(getPendingMessages());
-    expect(result).toContain('from="A &amp; B"');
-    expect(result).toContain('&lt;script&gt;');
-    expect(result).toContain('&quot;xss&quot;');
-  });
-});
-
-describe('XML escaping', () => {
-  it('escapes <, >, &, " in sender and body', () => {
-    insertMessage('m1', 'chat', {
-      sender: 'A & B <Co>',
-      text: '<script>alert("xss")</script>',
-    });
-    const result = formatMessages(getPendingMessages());
-    expect(result).toContain('sender="A &amp; B &lt;Co&gt;"');
-    expect(result).toContain('&lt;script&gt;alert(&quot;xss&quot;)&lt;/script&gt;');
-  });
-});
-
-describe('stripInternalTags', () => {
-  it('strips single-line internal tags and trims', () => {
-    expect(stripInternalTags('hello <internal>secret</internal> world')).toBe('hello  world');
-  });
-
-  it('strips multi-line internal tags', () => {
-    expect(stripInternalTags('hello <internal>\nsecret\nstuff\n</internal> world')).toBe(
-      'hello  world',
-    );
-  });
-
-  it('strips multiple internal tag blocks', () => {
-    expect(stripInternalTags('<internal>a</internal>hello<internal>b</internal>')).toBe('hello');
-  });
-
-  it('returns empty string when input is only internal tags', () => {
-    expect(stripInternalTags('<internal>only this</internal>')).toBe('');
-  });
-
-  it('returns input unchanged when there are no internal tags', () => {
-    expect(stripInternalTags('hello world')).toBe('hello world');
-  });
-
-  it('preserves content that surrounds internal tags', () => {
-    expect(stripInternalTags('<internal>thinking</internal>The answer is 42')).toBe(
-      'The answer is 42',
-    );
-  });
-});

package/container/agent-runner/src/formatter.ts

@@ -1,260 +0,0 @@
-import { findByRouting } from './destinations.js';
-import type { MessageInRow } from './db/messages-in.js';
-import { TIMEZONE, formatLocalTime } from './timezone.js';
-
-/**
- * Command categories for messages starting with '/'.
- * - admin: sender must have an admin role in the central `user_roles` table
- * - filtered: silently drop (mark completed without processing)
- * - passthrough: pass raw to the agent (no XML wrapping)
- * - none: not a command — format normally
- */
-export type CommandCategory = 'admin' | 'filtered' | 'passthrough' | 'none';
-
-const ADMIN_COMMANDS = new Set(['/remote-control', '/clear', '/compact', '/context', '/cost', '/files']);
-const FILTERED_COMMANDS = new Set(['/help', '/login', '/logout', '/doctor', '/config', '/start']);
-
-export interface CommandInfo {
-  category: CommandCategory;
-  command: string; // the command name (e.g., '/clear')
-  text: string; // full original text
-  senderId: string | null;
-}
-
-/**
- * Categorize a message as a command or not.
- * Only applies to chat/chat-sdk messages.
- *
- * The extracted `senderId` is checked against the central DB's `user_roles`
- * table on the host (the container itself doesn't enforce admin gating —
- * that's the host's command gate, see src/command-gate.ts). User ids are
- * stored in the namespaced form `<channel_type>:<raw>` (see src/db/users.ts).
- * chat-sdk-bridge serializes `author.userId` as a raw platform id with no
- * prefix, so we prefix it here. If the id already contains a `:` we assume
- * it's pre-namespaced (non-chat-sdk adapters that populate `senderId`
- * directly) and leave it alone.
- */
-export function categorizeMessage(msg: MessageInRow): CommandInfo {
-  const content = parseContent(msg.content);
-  const text = (content.text || '').trim();
-  const senderId = extractSenderId(msg, content);
-
-  if (!text.startsWith('/')) {
-    return { category: 'none', command: '', text, senderId };
-  }
-
-  // Extract the command name (e.g., '/clear' from '/clear some args')
-  const command = text.split(/\s/)[0].toLowerCase();
-
-  if (ADMIN_COMMANDS.has(command)) {
-    return { category: 'admin', command, text, senderId };
-  }
-
-  if (FILTERED_COMMANDS.has(command)) {
-    return { category: 'filtered', command, text, senderId };
-  }
-
-  return { category: 'passthrough', command, text, senderId };
-}
-
-/**
- * Narrow check for /clear — the only command the runner handles directly.
- * All other command gating (filtered, admin) is done by the host router
- * before messages reach the container.
- */
-export function isClearCommand(msg: MessageInRow): boolean {
-  const content = parseContent(msg.content);
-  const text = (content.text || '').trim();
-  return text.toLowerCase().startsWith('/clear');
-}
-
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-function extractSenderId(msg: MessageInRow, content: any): string | null {
-  const raw: string | null = content?.senderId || content?.author?.userId || null;
-  if (!raw) return null;
-  // Already namespaced (e.g. "telegram:123") — use as-is.
-  if (raw.includes(':')) return raw;
-  // Raw platform id from chat-sdk serialization — prefix with channel type.
-  if (!msg.channel_type) return raw;
-  return `${msg.channel_type}:${raw}`;
-}
-
-/**
- * Routing context extracted from messages_in rows.
- * Copied to messages_out by default so responses go back to the sender.
- */
-export interface RoutingContext {
-  platformId: string | null;
-  channelType: string | null;
-  threadId: string | null;
-  inReplyTo: string | null;
-}
-
-/**
- * Extract routing context from a batch of messages.
- * Uses the first message's routing fields.
- */
-export function extractRouting(messages: MessageInRow[]): RoutingContext {
-  const first = messages[0];
-  return {
-    platformId: first?.platform_id ?? null,
-    channelType: first?.channel_type ?? null,
-    threadId: first?.thread_id ?? null,
-    inReplyTo: first?.id ?? null,
-  };
-}
-
-/**
- * Format a batch of messages_in rows into a prompt string.
- *
- * Prepends a `<context timezone="<IANA>" />` header so the agent always knows
- * what timezone it's in — every timestamp it sees in message bodies is the
- * user's local time, and every time it produces (schedules, suggests) should
- * be interpreted as local time in that same zone. This header is v1 behavior
- * (src/v1/router.ts:20-22); dropping it led to misinterpretations where the
- * agent scheduled tasks for the wrong hour.
- *
- * Strips routing fields — the agent never sees platform_id, channel_type, thread_id.
- */
-export function formatMessages(messages: MessageInRow[]): string {
-  const header = `<context timezone="${escapeXml(TIMEZONE)}" />\n`;
-  if (messages.length === 0) return header;
-
-  // Group by kind
-  const chatMessages = messages.filter((m) => m.kind === 'chat' || m.kind === 'chat-sdk');
-  const taskMessages = messages.filter((m) => m.kind === 'task');
-  const webhookMessages = messages.filter((m) => m.kind === 'webhook');
-  const systemMessages = messages.filter((m) => m.kind === 'system');
-
-  const parts: string[] = [];
-
-  if (chatMessages.length > 0) {
-    parts.push(formatChatMessages(chatMessages));
-  }
-  if (taskMessages.length > 0) {
-    parts.push(...taskMessages.map(formatTaskMessage));
-  }
-  if (webhookMessages.length > 0) {
-    parts.push(...webhookMessages.map(formatWebhookMessage));
-  }
-  if (systemMessages.length > 0) {
-    parts.push(...systemMessages.map(formatSystemMessage));
-  }
-
-  return header + parts.join('\n\n');
-}
-
-function formatChatMessages(messages: MessageInRow[]): string {
-  if (messages.length === 1) {
-    return formatSingleChat(messages[0]);
-  }
-
-  const lines = ['<messages>'];
-  for (const msg of messages) {
-    lines.push(formatSingleChat(msg));
-  }
-  lines.push('</messages>');
-  return lines.join('\n');
-}
-
-function formatSingleChat(msg: MessageInRow): string {
-  const content = parseContent(msg.content);
-  const sender = content.sender || content.author?.fullName || content.author?.userName || 'Unknown';
-  const time = formatLocalTime(msg.timestamp, TIMEZONE);
-  const text = content.text || '';
-  const idAttr = msg.seq != null ? ` id="${msg.seq}"` : '';
-  const replyAttr = content.replyTo?.id ? ` reply_to="${escapeXml(String(content.replyTo.id))}"` : '';
-  const replyPrefix = formatReplyContext(content.replyTo);
-  const attachmentsSuffix = formatAttachments(content.attachments);
-
-  // Look up the destination name for the origin (reverse map lookup).
-  // If not found, fall back to a raw channel:platform_id marker so nothing
-  // gets silently dropped — this should only happen if the destination was
-  // removed between when the message was received and when it's being processed.
-  const fromDest = findByRouting(msg.channel_type, msg.platform_id);
-  const fromAttr = fromDest
-    ? ` from="${escapeXml(fromDest.name)}"`
-    : msg.channel_type || msg.platform_id
-      ? ` from="unknown:${escapeXml(msg.channel_type || '')}:${escapeXml(msg.platform_id || '')}"`
-      : '';
-
-  return `<message${idAttr}${fromAttr} sender="${escapeXml(sender)}" time="${escapeXml(time)}"${replyAttr}>${replyPrefix}${escapeXml(text)}${attachmentsSuffix}</message>`;
-}
-
-function formatTaskMessage(msg: MessageInRow): string {
-  const content = parseContent(msg.content);
-  const parts = ['[SCHEDULED TASK]'];
-  if (content.scriptOutput) {
-    parts.push('', 'Script output:', JSON.stringify(content.scriptOutput, null, 2));
-  }
-  parts.push('', 'Instructions:', content.prompt || '');
-  return parts.join('\n');
-}
-
-function formatWebhookMessage(msg: MessageInRow): string {
-  const content = parseContent(msg.content);
-  const source = content.source || 'unknown';
-  const event = content.event || 'unknown';
-  return `[WEBHOOK: ${source}/${event}]\n\n${JSON.stringify(content.payload || content, null, 2)}`;
-}
-
-function formatSystemMessage(msg: MessageInRow): string {
-  const content = parseContent(msg.content);
-  return `[SYSTEM RESPONSE]\n\nAction: ${content.action || 'unknown'}\nStatus: ${content.status || 'unknown'}\nResult: ${JSON.stringify(content.result || null)}`;
-}
-
-/**
- * Render the quoted original inside the <message> body.
- *
- * Matches v1 format (src/v1/router.ts:10-18): `<quoted_message from="X">Y</quoted_message>`.
- * Requires BOTH sender and text — if only id is present the reply_to attribute
- * on the parent <message> carries the link without an inline preview.
- *
- * No truncation here (v1 didn't truncate).
- */
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-function formatReplyContext(replyTo: any): string {
-  if (!replyTo) return '';
-  const sender = replyTo.sender;
-  const text = replyTo.text;
-  if (!sender || !text) return '';
-  return `\n  <quoted_message from="${escapeXml(sender)}">${escapeXml(text)}</quoted_message>\n`;
-}
-
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-function formatAttachments(attachments: any[] | undefined): string {
-  if (!Array.isArray(attachments) || attachments.length === 0) return '';
-  const parts = attachments.map((a) => {
-    const name = a.name || a.filename || 'attachment';
-    const type = a.type || 'file';
-    const localPath = a.localPath ? `/workspace/${a.localPath}` : '';
-    const url = a.url || '';
-    if (localPath) {
-      return `[${type}: ${escapeXml(name)} — saved to ${escapeXml(localPath)}]`;
-    }
-    return url ? `[${type}: ${escapeXml(name)} (${escapeXml(url)})]` : `[${type}: ${escapeXml(name)}]`;
-  });
-  return '\n' + parts.join('\n');
-}
-
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-function parseContent(json: string): any {
-  try {
-    return JSON.parse(json);
-  } catch {
-    return { text: json };
-  }
-}
-
-function escapeXml(str: string): string {
-  return str.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
-}
-
-/**
- * Strip `<internal>...</internal>` blocks from agent output, then trim.
- * Ported from v1 (src/v1/router.ts:25-27). Used to remove the agent's
- * own scratchpad/reasoning before a reply goes out over a channel.
- */
-export function stripInternalTags(text: string): string {
-  return text.replace(/<internal>[\s\S]*?<\/internal>/g, '').trim();
-}