agentic-pi 0.1.0

package/dist/emitter.d.ts

@@ -0,0 +1,49 @@
+/**
+ * JSONL event emitter.
+ *
+ * Two sinks ship: `StdoutSink` (used by the CLI) and `CollectorSink` (used
+ * by the programmatic `run()` API to capture events in-process). The
+ * `Emitter` wraps a sink and injects `sessionId` + `timestamp` into every
+ * record, plus the session header.
+ *
+ * Consumers can provide their own sink — e.g. lastlight could write
+ * straight to the dashboard's shim jsonl while also calling onEvent for
+ * accumulator-side state updates.
+ */
+export interface EmitterRecord {
+    type: string;
+    [key: string]: unknown;
+}
+export interface EmitterSink {
+    write(record: EmitterRecord): void;
+}
+export interface EmitterContext {
+    sessionId: string;
+    cwd: string;
+    startedAt: string;
+}
+/** Writes JSONL to process.stdout. Used by the CLI. */
+export declare class StdoutSink implements EmitterSink {
+    write(record: EmitterRecord): void;
+}
+/** Captures every record in an in-memory array. Used by `run()`. */
+export declare class CollectorSink implements EmitterSink {
+    private readonly onRecord?;
+    readonly records: EmitterRecord[];
+    /** Optional pass-through (e.g. for live observation by the programmatic caller). */
+    constructor(onRecord?: ((r: EmitterRecord) => void) | undefined);
+    write(record: EmitterRecord): void;
+}
+/** Fan-out sink — writes the same record to every downstream sink. */
+export declare class TeeSink implements EmitterSink {
+    private readonly sinks;
+    constructor(sinks: EmitterSink[]);
+    write(record: EmitterRecord): void;
+}
+export declare class Emitter {
+    private readonly ctx;
+    private readonly sink;
+    constructor(ctx: EmitterContext, sink: EmitterSink);
+    sessionHeader(): void;
+    event(event: EmitterRecord): void;
+}

package/dist/emitter.js

@@ -0,0 +1,67 @@
+/**
+ * JSONL event emitter.
+ *
+ * Two sinks ship: `StdoutSink` (used by the CLI) and `CollectorSink` (used
+ * by the programmatic `run()` API to capture events in-process). The
+ * `Emitter` wraps a sink and injects `sessionId` + `timestamp` into every
+ * record, plus the session header.
+ *
+ * Consumers can provide their own sink — e.g. lastlight could write
+ * straight to the dashboard's shim jsonl while also calling onEvent for
+ * accumulator-side state updates.
+ */
+/** Writes JSONL to process.stdout. Used by the CLI. */
+export class StdoutSink {
+    write(record) {
+        process.stdout.write(JSON.stringify(record) + "\n");
+    }
+}
+/** Captures every record in an in-memory array. Used by `run()`. */
+export class CollectorSink {
+    onRecord;
+    records = [];
+    /** Optional pass-through (e.g. for live observation by the programmatic caller). */
+    constructor(onRecord) {
+        this.onRecord = onRecord;
+    }
+    write(record) {
+        this.records.push(record);
+        this.onRecord?.(record);
+    }
+}
+/** Fan-out sink — writes the same record to every downstream sink. */
+export class TeeSink {
+    sinks;
+    constructor(sinks) {
+        this.sinks = sinks;
+    }
+    write(record) {
+        for (const s of this.sinks)
+            s.write(record);
+    }
+}
+export class Emitter {
+    ctx;
+    sink;
+    constructor(ctx, sink) {
+        this.ctx = ctx;
+        this.sink = sink;
+    }
+    sessionHeader() {
+        this.sink.write({
+            type: "session",
+            version: 3,
+            id: this.ctx.sessionId,
+            timestamp: this.ctx.startedAt,
+            cwd: this.ctx.cwd,
+        });
+    }
+    event(event) {
+        this.sink.write({
+            ...event,
+            sessionId: this.ctx.sessionId,
+            timestamp: new Date().toISOString(),
+        });
+    }
+}
+//# sourceMappingURL=emitter.js.map

package/dist/emitter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emitter.js","sourceRoot":"","sources":["../src/emitter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAiBH,uDAAuD;AACvD,MAAM,OAAO,UAAU;IACrB,KAAK,CAAC,MAAqB;QACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IACtD,CAAC;CACF;AAED,oEAAoE;AACpE,MAAM,OAAO,aAAa;IAGK;IAFpB,OAAO,GAAoB,EAAE,CAAC;IACvC,oFAAoF;IACpF,YAA6B,QAAqC;QAArC,aAAQ,GAAR,QAAQ,CAA6B;IAAG,CAAC;IACtE,KAAK,CAAC,MAAqB;QACzB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;CACF;AAED,sEAAsE;AACtE,MAAM,OAAO,OAAO;IACW;IAA7B,YAA6B,KAAoB;QAApB,UAAK,GAAL,KAAK,CAAe;IAAG,CAAC;IACrD,KAAK,CAAC,MAAqB;QACzB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK;YAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;CACF;AAED,MAAM,OAAO,OAAO;IAEC;IACA;IAFnB,YACmB,GAAmB,EACnB,IAAiB;QADjB,QAAG,GAAH,GAAG,CAAgB;QACnB,SAAI,GAAJ,IAAI,CAAa;IACjC,CAAC;IAEJ,aAAa;QACX,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;YACd,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,CAAC;YACV,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS;YACtB,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS;YAC7B,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG;SAClB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAoB;QACxB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;YACd,GAAG,KAAK;YACR,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS;YAC7B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/extensions/github/auth.d.ts

@@ -0,0 +1,54 @@
+/**
+ * GitHub App authentication.
+ *
+ * Ported from lastlight/mcp-github-app/src/auth.js with minimal changes:
+ * - TypeScript types
+ * - Static-token fallback wrapped into a shared GitHubAuth interface
+ */
+export interface GitHubAuth {
+    /** Returns a currently-valid GitHub installation token (or the static token). */
+    getToken(): Promise<string>;
+    /** When the cached App token expires (null for static-token mode). */
+    readonly expiresAt: Date | null;
+}
+export interface GitHubAppAuthOptions {
+    appId: string;
+    privateKeyPath: string;
+    installationId: string;
+}
+export declare class GitHubAppAuth implements GitHubAuth {
+    private readonly appId;
+    private readonly installationId;
+    private readonly privateKey;
+    private _token;
+    private _expiresAt;
+    constructor({ appId, privateKeyPath, installationId }: GitHubAppAuthOptions);
+    private generateJwt;
+    getToken(): Promise<string>;
+    get expiresAt(): Date | null;
+}
+export interface GitHubAuthEnv {
+    GITHUB_APP_ID?: string;
+    GITHUB_APP_PRIVATE_KEY_PATH?: string;
+    GITHUB_APP_INSTALLATION_ID?: string;
+    GITHUB_TOKEN?: string;
+}
+/** Why auth could not be built. Consumers can distinguish silent skips from misconfiguration. */
+export type AuthFailureReason = "no-credentials" | "pem-unreadable" | "invalid-config";
+export interface BuildAuthResult {
+    auth: GitHubAuth | null;
+    reason?: AuthFailureReason;
+    message?: string;
+}
+/**
+ * Construct the appropriate auth backend from env vars.
+ *
+ * Prefer GitHub App credentials when all three are present. Static-token mode
+ * is the fallback for low-trust sandboxes that intentionally clear the App env
+ * vars — this stops a stale host-side GITHUB_TOKEN PAT from silently
+ * downgrading the agent's auth. Mirrors mcp-github-app's behaviour.
+ *
+ * Returns a structured result so the caller can decide whether to warn or
+ * just silently skip GitHub-tool registration.
+ */
+export declare function buildAuthFromEnv(env?: GitHubAuthEnv): BuildAuthResult;

package/dist/extensions/github/auth.js

@@ -0,0 +1,116 @@
+/**
+ * GitHub App authentication.
+ *
+ * Ported from lastlight/mcp-github-app/src/auth.js with minimal changes:
+ * - TypeScript types
+ * - Static-token fallback wrapped into a shared GitHubAuth interface
+ */
+import { readFileSync } from "node:fs";
+import { resolve } from "node:path";
+import jwt from "jsonwebtoken";
+export class GitHubAppAuth {
+    appId;
+    installationId;
+    privateKey;
+    _token = null;
+    _expiresAt = null;
+    constructor({ appId, privateKeyPath, installationId }) {
+        this.appId = appId;
+        this.installationId = installationId;
+        try {
+            this.privateKey = readFileSync(resolve(privateKeyPath), "utf8");
+        }
+        catch (err) {
+            throw new Error(`GitHubAppAuth: cannot read private key at '${privateKeyPath}': ${err.message}`);
+        }
+    }
+    generateJwt() {
+        const now = Math.floor(Date.now() / 1000);
+        return jwt.sign({ iat: now - 60, exp: now + 600, iss: this.appId }, this.privateKey, { algorithm: "RS256" });
+    }
+    async getToken() {
+        if (this._token && this._expiresAt) {
+            const bufferMs = 5 * 60 * 1000;
+            if (Date.now() + bufferMs < this._expiresAt.getTime()) {
+                return this._token;
+            }
+        }
+        const jwtToken = this.generateJwt();
+        const res = await fetch(`https://api.github.com/app/installations/${this.installationId}/access_tokens`, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${jwtToken}`,
+                Accept: "application/vnd.github+json",
+            },
+        });
+        if (!res.ok) {
+            const body = await res.text();
+            throw new Error(`Failed to get installation token (${res.status}): ${body}`);
+        }
+        const data = (await res.json());
+        this._token = data.token;
+        this._expiresAt = new Date(data.expires_at);
+        return this._token;
+    }
+    get expiresAt() {
+        return this._expiresAt;
+    }
+}
+class StaticTokenAuth {
+    token;
+    constructor(token) {
+        this.token = token;
+    }
+    async getToken() {
+        return this.token;
+    }
+    get expiresAt() {
+        return null;
+    }
+}
+/**
+ * Construct the appropriate auth backend from env vars.
+ *
+ * Prefer GitHub App credentials when all three are present. Static-token mode
+ * is the fallback for low-trust sandboxes that intentionally clear the App env
+ * vars — this stops a stale host-side GITHUB_TOKEN PAT from silently
+ * downgrading the agent's auth. Mirrors mcp-github-app's behaviour.
+ *
+ * Returns a structured result so the caller can decide whether to warn or
+ * just silently skip GitHub-tool registration.
+ */
+export function buildAuthFromEnv(env = process.env) {
+    const { GITHUB_APP_ID, GITHUB_APP_PRIVATE_KEY_PATH, GITHUB_APP_INSTALLATION_ID, GITHUB_TOKEN } = env;
+    const appParts = [GITHUB_APP_ID, GITHUB_APP_PRIVATE_KEY_PATH, GITHUB_APP_INSTALLATION_ID];
+    const appPartsSet = appParts.filter(Boolean).length;
+    if (appPartsSet === 3) {
+        try {
+            const auth = new GitHubAppAuth({
+                appId: GITHUB_APP_ID,
+                privateKeyPath: GITHUB_APP_PRIVATE_KEY_PATH,
+                installationId: GITHUB_APP_INSTALLATION_ID,
+            });
+            return { auth };
+        }
+        catch (err) {
+            return {
+                auth: null,
+                reason: "pem-unreadable",
+                message: err.message,
+            };
+        }
+    }
+    if (appPartsSet > 0 && appPartsSet < 3) {
+        return {
+            auth: null,
+            reason: "invalid-config",
+            message: `Partial GitHub App credentials: ${appPartsSet}/3 of GITHUB_APP_ID, GITHUB_APP_PRIVATE_KEY_PATH, GITHUB_APP_INSTALLATION_ID are set. ` +
+                `Set all three to use App auth, or unset all three to fall back to GITHUB_TOKEN.`,
+        };
+    }
+    if (GITHUB_TOKEN) {
+        return { auth: new StaticTokenAuth(GITHUB_TOKEN) };
+    }
+    return { auth: null, reason: "no-credentials" };
+}
+//# sourceMappingURL=auth.js.map

package/dist/extensions/github/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/extensions/github/auth.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,GAAG,MAAM,cAAc,CAAC;AAe/B,MAAM,OAAO,aAAa;IACP,KAAK,CAAS;IACd,cAAc,CAAS;IACvB,UAAU,CAAS;IAC5B,MAAM,GAAkB,IAAI,CAAC;IAC7B,UAAU,GAAgB,IAAI,CAAC;IAEvC,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,cAAc,EAAwB;QACzE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,8CAA8C,cAAc,MAAO,GAAa,CAAC,OAAO,EAAE,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,WAAW;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,OAAO,GAAG,CAAC,IAAI,CACb,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,EAClD,IAAI,CAAC,UAAU,EACf,EAAE,SAAS,EAAE,OAAO,EAAE,CACvB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAC/B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;gBACtD,OAAO,IAAI,CAAC,MAAM,CAAC;YACrB,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,4CAA4C,IAAI,CAAC,cAAc,gBAAgB,EAC/E;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,QAAQ,EAAE;gBACnC,MAAM,EAAE,6BAA6B;aACtC;SACF,CACF,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,qCAAqC,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0C,CAAC;QACzE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;CACF;AAED,MAAM,eAAe;IACU;IAA7B,YAA6B,KAAa;QAAb,UAAK,GAAL,KAAK,CAAQ;IAAG,CAAC;IAC9C,KAAK,CAAC,QAAQ;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IACD,IAAI,SAAS;QACX,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAqBD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAqB,OAAO,CAAC,GAAG;IAC/D,MAAM,EAAE,aAAa,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC;IACrG,MAAM,QAAQ,GAAG,CAAC,aAAa,EAAE,2BAA2B,EAAE,0BAA0B,CAAC,CAAC;IAC1F,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAEpD,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,aAAa,CAAC;gBAC7B,KAAK,EAAE,aAAc;gBACrB,cAAc,EAAE,2BAA4B;gBAC5C,cAAc,EAAE,0BAA2B;aAC5C,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,gBAAgB;gBACxB,OAAO,EAAG,GAAa,CAAC,OAAO;aAChC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,WAAW,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO;YACL,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,gBAAgB;YACxB,OAAO,EACL,mCAAmC,WAAW,wFAAwF;gBACtI,iFAAiF;SACpF,CAAC;IACJ,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,EAAE,IAAI,EAAE,IAAI,eAAe,CAAC,YAAY,CAAC,EAAE,CAAC;IACrD,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;AAClD,CAAC"}