@tianshu-ai/tianshu 0.3.0

package/packages/server/dist/chat/dump-system-prompt.js

@@ -0,0 +1,58 @@
+// Optional dump of the assembled system prompt for debugging.
+//
+// Off by default. Enabled by setting
+//   `logging.dumpSystemPrompt: true`
+// in the global config (NOT tenant config — see config.ts comment).
+// When on, every assembled prompt is overwritten to
+//   <tenantHomeDir>/logs/system-prompt-<role>-<userId>.txt
+// at the moment we hand it to the harness.
+//
+// This is the simplest possible "what does the agent actually see"
+// inspector. It exists because pi-ai itself doesn't expose a
+// post-render system-prompt hook, and we keep regretting having to
+// stand up tracing every time someone asks "wait, did the
+// `prefer-delegation` fragment make it into the worker prompt?".
+//
+// Failure mode: silent. If the dump write fails (read-only fs,
+// disk full, race), we log a warning to stderr and let the agent
+// continue. Whatever's wrong with the disk shouldn't block real
+// work.
+import * as fs from "node:fs";
+import * as path from "node:path";
+/** Returns true iff the dump is enabled in this tenant's resolved
+ *  config. Cheap to call per-turn. */
+export function dumpSystemPromptEnabled(ctx) {
+    return ctx.config.logging?.dumpSystemPrompt === true;
+}
+/** Overwrite the dump file for this (tenant, role, user). Best
+ *  effort — never throws. */
+export function dumpSystemPrompt(args) {
+    if (!dumpSystemPromptEnabled(args.ctx))
+        return;
+    try {
+        const dir = args.ctx.logsDir;
+        fs.mkdirSync(dir, { recursive: true });
+        // Sanitise role + userId for the filename. We keep alphanum,
+        // dash, underscore, colon (the worker:<slug> separator), and
+        // dot — anything else becomes `_`. The full unsanitised pair
+        // is also included as a header inside the file so a human
+        // reading the dump still knows which agent it was.
+        const safeRole = sanitise(args.role);
+        const safeUser = sanitise(args.userId);
+        const file = path.join(dir, `system-prompt-${safeRole}-${safeUser}.txt`);
+        const header = `# tenant=${args.ctx.tenantId} role=${args.role} user=${args.userId}\n` +
+            `# written-at=${new Date().toISOString()}\n` +
+            `# bytes=${Buffer.byteLength(args.systemPrompt, "utf8")}\n` +
+            `# ----- begin prompt -----\n`;
+        fs.writeFileSync(file, header + args.systemPrompt + "\n");
+    }
+    catch (err) {
+        // Best-effort: don't break the agent if dumping fails.
+        // eslint-disable-next-line no-console
+        console.warn(`[dump-system-prompt] write failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+function sanitise(s) {
+    return s.replace(/[^A-Za-z0-9._:-]/gu, "_");
+}
+//# sourceMappingURL=dump-system-prompt.js.map

package/packages/server/dist/chat/dump-system-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dump-system-prompt.js","sourceRoot":"","sources":["../../src/chat/dump-system-prompt.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,EAAE;AACF,qCAAqC;AACrC,qCAAqC;AACrC,oEAAoE;AACpE,oDAAoD;AACpD,2DAA2D;AAC3D,2CAA2C;AAC3C,EAAE;AACF,mEAAmE;AACnE,6DAA6D;AAC7D,mEAAmE;AACnE,0DAA0D;AAC1D,iEAAiE;AACjE,EAAE;AACF,+DAA+D;AAC/D,iEAAiE;AACjE,gEAAgE;AAChE,QAAQ;AAER,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAclC;sCACsC;AACtC,MAAM,UAAU,uBAAuB,CAAC,GAAkB;IACxD,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,KAAK,IAAI,CAAC;AACvD,CAAC;AAED;6BAC6B;AAC7B,MAAM,UAAU,gBAAgB,CAAC,IAA0B;IACzD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO;IAC/C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;QAC7B,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,6DAA6D;QAC7D,6DAA6D;QAC7D,6DAA6D;QAC7D,0DAA0D;QAC1D,mDAAmD;QACnD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CACpB,GAAG,EACH,iBAAiB,QAAQ,IAAI,QAAQ,MAAM,CAC5C,CAAC;QACF,MAAM,MAAM,GACV,YAAY,IAAI,CAAC,GAAG,CAAC,QAAQ,SAAS,IAAI,CAAC,IAAI,SAAS,IAAI,CAAC,MAAM,IAAI;YACvE,gBAAgB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI;YAC5C,WAAW,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI;YAC3D,8BAA8B,CAAC;QACjC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uDAAuD;QACvD,sCAAsC;QACtC,OAAO,CAAC,IAAI,CACV,sCAAsC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACzF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,OAAO,CAAC,CAAC,OAAO,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;AAC9C,CAAC"}

package/packages/server/dist/chat/handler.d.ts

@@ -0,0 +1,186 @@
+import { AgentHarness, Session as PiSession, type CompactionSettings, type SessionTreeEntry } from "@earendil-works/pi-agent-core";
+import type { WebSocket } from "ws";
+import { type TenantContext } from "../core/index.js";
+import { type LoadedSkill } from "../core/plugins/skills.js";
+import { type ChatMessage } from "./messages.js";
+import { type ServerMsg, type WireAttachment } from "./ws-protocol.js";
+export interface ChatHandlerOpts {
+    ctx: TenantContext;
+    userId: string;
+    socket: WebSocket;
+    /**
+     * Plugin registry for this tenant. The chat handler asks it for
+     * the current `toolsForTenant()` and a `hostCapabilities()`
+     * handle each agent turn, so plugin enable/disable flips are
+     * picked up without restarting the session.
+     */
+    pluginRegistry?: import("../core/plugins/registry.js").PluginRegistry;
+    /** Tenant root dir on the host — fed into AgentToolContext. */
+    homeDir?: string;
+}
+export declare function attachChatHandler(opts: ChatHandlerOpts): void;
+interface RunPromptArgs {
+    ctx: TenantContext;
+    userId: string;
+    send: (msg: ServerMsg) => void;
+    content: string;
+    modelId?: string;
+    attachments?: WireAttachment[];
+    signal: AbortSignal;
+    pluginRegistry?: import("../core/plugins/registry.js").PluginRegistry;
+    homeDir?: string;
+}
+export declare function runPrompt(args: RunPromptArgs): Promise<void>;
+export interface ShouldCompactBranchInput {
+    branch: SessionTreeEntry[];
+    contextWindow: number | undefined;
+    settings?: CompactionSettings;
+}
+/**
+ * Pure decision function: given a branch (the entries pi's
+ * harness sees as the active turn history) and the model's
+ * context window, return whether the next turn should run
+ * compaction first.
+ *
+ * Exported for tests; runtime callers go through
+ * `maybeAutoCompact` which folds storage + harness in.
+ */
+export declare function shouldCompactBranch(input: ShouldCompactBranchInput): boolean;
+/**
+ * Pure-side-effect helper that drives one auto-compact decision
+ * + (if needed) action against any AgentHarness, with no
+ * dependency on the chat WebSocket or session-row plumbing.
+ *
+ * Reused by:
+ *   - the main chat handler after every successful turn
+ *   - the worker agent loop (agent-loop.ts) on a configurable
+ *     cadence so a long-running worker can recover from runaway
+ *     context growth instead of stalling with `no_completion`.
+ *
+ * Returns one of:
+ *   - { compacted: false }                    — below threshold,
+ *     no work done
+ *   - { compacted: true,  tokensBefore: N }   — ran compact()
+ *     successfully
+ *   - { compacted: false, error: "..." }      — attempted but
+ *     compact() threw; caller decides whether to surface this
+ */
+export interface AutoCompactDecision {
+    compacted: boolean;
+    tokensBefore?: number;
+    error?: string;
+}
+export declare function tryAutoCompact(args: {
+    piSession: PiSession;
+    harness: AgentHarness;
+    contextWindow: number | undefined;
+}): Promise<AutoCompactDecision>;
+/**
+ * Build the system prompt the orchestrator runs with.
+ *
+ * The prompt encodes the workspace scaffold defined in ADR-0001 so the
+ * agent has a stable mental model of where things live:
+ *
+ *   - Default cwd is the user's per-tenant home (`users/<userId>/`).
+ *   - Projects, uploads, scratch and trash all live under that home.
+ *   - The shared `_tenant/` area is read-only by convention (team
+ *     persona / memory / config).
+ *
+ * Tools currently expose a path model rooted at the user's home, so
+ * paths in this prompt are written relative to `./` (= cwd) for
+ * exactly that reason. When sandbox mounts land (PR #22+) the absolute
+ * `/workspace/...` view will become real and we'll surface it here.
+ *
+ * Worker / task vocabulary is intentionally absent: workers don't ship
+ * until PR #23+, and dangling references just let the model fabricate.
+ */
+/** Plugin-contributed system-prompt fragment (see
+ *  `manifest.contributes.systemPromptFragments`). The handler
+ *  pulls these from the plugin registry on every turn and injects
+ *  them between the workspace section and the available-skills
+ *  block, grouped by plugin so the agent can attribute the
+ *  guidance. */
+export interface PluginPromptFragment {
+    pluginId: string;
+    pluginDisplayName: string;
+    fragmentId: string;
+    text: string;
+}
+export declare function defaultSystemPrompt(ctx: TenantContext, userId: string, skills?: readonly LoadedSkill[], pluginFragments?: readonly PluginPromptFragment[]): string;
+/**
+ * Host-level Execution Bias block. Exported so the worker
+ * agent-loop path (which builds its own systemPrompt by
+ * concatenating SOUL + fragments + skills, bypassing
+ * defaultSystemPrompt) can include the same rules without copying
+ * the strings.
+ */
+export declare function formatExecutionBiasBlock(): string;
+/**
+ * Main-agent context: tenant-shared working files plus the
+ * caller's per-user USER.md. SOUL / MEMORY / AGENTS live at the
+ * tenant root because they're team-wide; USER.md is the only
+ * per-user file because it captures preferences that don't
+ * generalise.
+ */
+export declare function formatMainAgentContextBlock(workspaceDir: string, userHome: string): string;
+/**
+ * Worker-agent context: the worker's own bundle (AGENTS.md /
+ * MEMORY.md — SOUL.md is already injected upstream via
+ * req.systemPrompt) plus the caller's USER.md. Workers don't
+ * read the tenant-shared SOUL/AGENTS/MEMORY because each worker
+ * has its own personality + own long-term notes scoped to its
+ * specialisation.
+ */
+export declare function formatWorkerAgentContextBlock(workspaceDir: string, userHome: string, workerSlug: string): string;
+/**
+ * Backwards-compatible thin wrapper. The previous shape pointed
+ * to user home only; kept as an alias for tests / external
+ * callers but new code should use formatMainAgentContextBlock.
+ */
+export declare function formatWorkspaceContextBlock(userHome: string): string;
+/**
+ * Replace `<self>` and `<userId>` placeholders with the caller's
+ * concrete userId throughout an assembled system prompt.
+ *
+ * Plugin manifests + tool descriptions write paths like
+ * `/workspace/users/<self>/...` because the plugin author can't
+ * know the runtime userId. Without substitution the LLM sees a
+ * literal `<self>` and either invents a userId (we caught
+ * `user1` / `user3` / `user_x` in production) or just guesses
+ * wrong. Substituting at the very end of prompt assembly — after
+ * SOUL, plugin fragments, context block, skills are all stitched
+ * together — means every appearance of these placeholders
+ * resolves to the right value, regardless of which layer wrote
+ * it.
+ *
+ * Idempotent and safe to call on prompts that don't contain
+ * either placeholder.
+ */
+export declare function substituteUserIdPlaceholders(prompt: string, userId: string): string;
+/** Render plugin-contributed system-prompt fragments. Grouped by
+ *  plugin so the agent sees one section per plugin (workboard
+ *  rules in one block, microsandbox rules in another, etc), and
+ *  so debugging prompts is straightforward ("this guidance came
+ *  from plugin X"). Returns an empty string when no fragments
+ *  are contributed. */
+export declare function formatPluginPromptFragments(fragments: readonly PluginPromptFragment[]): string;
+/**
+ * Render the `<available_skills>` block that's appended to every
+ * system prompt — the host default prompt for the main chat agent,
+ * AND any custom worker prompt coming from `worker_agents.system_prompt`.
+ *
+ * Worker LLMs need this just as badly as the main agent: without
+ * it they only see plugin-shipped skills via `tenant_config_list`,
+ * not their per-tenant ones. Workers ship a kind-specific
+ * `system_prompt` in the worker_agents table, and the agent-loop
+ * bypasses `defaultSystemPrompt` when that's set; so we expose the
+ * skill block as a reusable helper and the loop appends it after
+ * the kind-specific prompt.
+ *
+ * Returns "" when the skills list is empty so callers can drop the
+ * block entirely (no leading blank lines, no half-empty XML).
+ */
+export declare function formatAvailableSkillsBlock(skills: readonly LoadedSkill[]): string;
+export declare function loadHostSkills(): LoadedSkill[];
+export type { ChatMessage };
+//# sourceMappingURL=handler.d.ts.map

package/packages/server/dist/chat/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../src/chat/handler.ts"],"names":[],"mappings":"AAoBA,OAAO,EACL,YAAY,EAEZ,OAAO,IAAI,SAAS,EAMpB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACtB,MAAM,+BAA+B,CAAC;AAWvC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAML,KAAK,aAAa,EACnB,MAAM,kBAAkB,CAAC;AAgB1B,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAKL,KAAK,WAAW,EAEjB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAGL,KAAK,SAAS,EAEd,KAAK,cAAc,EAEpB,MAAM,kBAAkB,CAAC;AAU1B,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,aAAa,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,SAAS,CAAC;IAClB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,OAAO,6BAA6B,EAAE,cAAc,CAAC;IACtE,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CA6G7D;AAED,UAAU,aAAa;IACrB,GAAG,EAAE,aAAa,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,IAAI,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,cAAc,EAAE,CAAC;IAC/B,MAAM,EAAE,WAAW,CAAC;IACpB,cAAc,CAAC,EAAE,OAAO,6BAA6B,EAAE,cAAc,CAAC;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAyTlE;AA+UD,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CAC/B;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAWT;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,YAAY,CAAC;IACtB,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAuB/B;AAqHD;;;;;;;;;;;;;;;;;;GAkBG;AACH;;;;;gBAKgB;AAChB,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,GAAE,SAAS,WAAW,EAAO,EACnC,eAAe,GAAE,SAAS,oBAAoB,EAAO,GACpD,MAAM,CA+ER;AAmDD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,CAWjD;AA+ED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GACf,MAAM,CAQR;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAC3C,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,MAAM,CAmBR;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAMpE;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACb,MAAM,CAKR;AAED;;;;;uBAKuB;AACvB,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,SAAS,oBAAoB,EAAE,GACzC,MAAM,CAyBR;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,SAAS,WAAW,EAAE,GAC7B,MAAM,CAsBR;AA0CD,wBAAgB,cAAc,IAAI,WAAW,EAAE,CAkC9C;AAGD,YAAY,EAAE,WAAW,EAAE,CAAC"}