botmancers 0.6.1 → 0.8.0

package/app/.next/server/chunks/lib_0v6lblw._.js

@@ -1,5 +0,0 @@
-module.exports=[64909,e=>{"use strict";var t=e.i(54799),n=e.i(33405),r=e.i(22734),i=e.i(14747),a=e.i(62294),s=e.i(25211),l=e.i(51714),o=e.i(10860),u=e.i(85072);let c=["read_file","run_command","send_draft","write_file"];function d(e){return"string"==typeof e&&c.includes(e)}let f=/^[A-Za-z0-9][A-Za-z0-9_-]*$/;class p extends Error{}function m(e){throw new p(e)}function y(e){let t=e?.name;"string"==typeof t&&t||m("read_file needs a file name"),(0,s.isSafeFileName)(t)||m(`refused: unsafe file name ${JSON.stringify(t)}`);let n=(0,u.filesRoot)();return i.default.resolve(n,t).startsWith(n+i.default.sep)||m(`refused: path traversal in ${JSON.stringify(t)}`),t}function g(e){try{return(0,l.resolveCommand)({command:e?.command??"printf",format:e?.format,word:e?.word}).argv[1]}catch(e){m(e instanceof Error?e.message:"refused: command not allowlisted")}}function h(e){let t=e?.recipient,n=e?.body;return"string"==typeof t&&t.trim()||m("send_draft needs a recipient"),"string"==typeof n&&n.trim()||m("send_draft needs a body"),e?.channel!==void 0&&"email"!==e.channel&&"slack"!==e.channel&&m("send_draft channel must be email or slack"),{recipient:t.trim(),body:n.trim()}}function w(e){let t=e?.name;"string"==typeof t&&t||m("write_file needs a file name"),(0,s.isSafeFileName)(t)||m(`refused: unsafe file name ${JSON.stringify(t)}`);let n=(0,u.filesRoot)();i.default.resolve(n,t).startsWith(n+i.default.sep)||m(`refused: path traversal in ${JSON.stringify(t)}`);let r=e?.content;return"string"==typeof r&&r||m("write_file needs content"),Buffer.byteLength(r,"utf8")>u.ARTIFACT_MAX_BYTES&&m(`refused: file content exceeds ${u.ARTIFACT_MAX_BYTES} bytes`),{name:t,content:r}}let b={read_file:{validate:e=>{y(e)},run:e=>{let t=y(e),n=i.default.join((0,u.filesRoot)(),t),a=r.default.readFileSync(n,"utf8");return{ok:!0,lines:[`[tool call] readFile ${JSON.stringify([t])}`,`[tool result] ${a}`],result:a}}},run_command:{validate:e=>{g(e)},run:e=>{let t=g(e),r=(0,n.execFileSync)("printf",["%s",t],{encoding:"utf8"});return{ok:!0,lines:[`[tool call] printf ${JSON.stringify(["%s",t])}`,`[tool result] ${r}`],result:r}}},send_draft:{validate:e=>{h(e)},run:e=>{let{recipient:t,body:n}=h(e),r=`[Sent to ${t}] ${n}`;return{ok:!0,lines:[r],result:r}}},write_file:{validate:e=>{w(e)},run:e=>{let{name:t,content:n}=w(e),a=(0,u.filesRoot)();r.default.mkdirSync(a,{recursive:!0});let s=i.default.resolve(a,t);if(!s.startsWith(a+i.default.sep))throw new p(`refused: path traversal in ${JSON.stringify(t)}`);return r.default.writeFileSync(s,n,"utf8"),{ok:!0,lines:[`[file] ${t}`],result:t}}}};function _(e,t){let n=a.default.prepare("SELECT * FROM approval_requests WHERE conversation_id = ? AND code = ?").get(e,t);return n?function(e){let t=null;if("string"==typeof e.action_args&&e.action_args)try{let n=JSON.parse(e.action_args);n&&"object"==typeof n&&!Array.isArray(n)&&(t=n)}catch{t=null}return{id:String(e.id),conversation_id:String(e.conversation_id),bot_id:e.bot_id??null,code:String(e.code),action_type:e.action_type??null,action_args:t,message_id:e.message_id??null,status:e.status,result:e.result??null,created_at:Number(e.created_at),resolved_at:e.resolved_at??null}}(n):void 0}function v(e){let n=(e.code||"").trim();if(!f.test(n))throw Error("approval code is required");let r=e.actionType??null,i=e.actionArgs??null;if(null!==r){if(!d(r))throw new p(`refused: unknown action type ${JSON.stringify(r)}`);b[r].validate(i)}let s=Date.now();a.default.prepare(`INSERT OR IGNORE INTO approval_requests
-      (id, conversation_id, bot_id, code, action_type, action_args, message_id, status, created_at)
-     VALUES (?, ?, ?, ?, ?, ?, ?, 'pending', ?)`).run((0,t.randomUUID)(),e.conversationId,e.botId??null,n,r,i?JSON.stringify(i):null,e.messageId??null,s);let l=_(e.conversationId,n);if(!l)throw Error("failed to store approval request");return l}function A(e,t,n){a.default.prepare("UPDATE approval_requests SET message_id = ? WHERE conversation_id = ? AND code = ?").run(n,e,t)}function $(e){let n=e.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"").slice(0,16)||"gate";return`${n}-${(0,t.randomBytes)(2).toString("hex")}`}function S(e){return e?a.bots.getById(e)?.name??null:null}function E(e,t){a.messages.create(e.conversation_id,"bot",t,e.bot_id??void 0)}function N(e){return`Approve using the code ${e}`}function T(e,t){for(let n=0;n<8;n++){let n=$(t);if(!_(e,n))return n}return $(`${t}-${Date.now().toString(36)}`)}e.s(["ApprovalActionRefused",0,p,"approvalCardText",0,N,"createApprovalRequest",0,v,"decideApproval",0,function(e,t,n){let r,i=_(e,t);if(!i)throw Error("Approval request not found");if("pending"!==i.status)return{status:i.status,code:t,ran:!1,already:!0};if("deny"===n){if(1!==Number(a.default.prepare("UPDATE approval_requests SET status = 'denied', resolved_at = ? WHERE conversation_id = ? AND code = ? AND status = 'pending'").run(Date.now(),e,t).changes)){let n=_(e,t);return{status:n?.status??"denied",code:t,ran:!1,already:!0}}return E(i,(0,o.applySkillEndToken)(S(i.bot_id),`Denied ${t}`)),{status:"denied",code:t,ran:!1,already:!1}}if(null!==i.action_type&&!d(i.action_type))return{status:"pending",code:t,ran:!1,already:!1,refused:`refused: unknown action type ${JSON.stringify(i.action_type)}`};if(null!==i.action_type)try{b[i.action_type].validate(i.action_args)}catch(e){return{status:"pending",code:t,ran:!1,already:!1,refused:e instanceof Error?e.message:String(e)}}if(1!==Number(a.default.prepare("UPDATE approval_requests SET status = 'approved', resolved_at = ? WHERE conversation_id = ? AND code = ? AND status = 'pending'").run(Date.now(),e,t).changes)){let n=_(e,t);return{status:n?.status??"approved",code:t,ran:!1,already:!0}}if(null===i.action_type)return E(i,(0,o.applySkillEndToken)(S(i.bot_id),t)),{status:"approved",code:t,ran:!1,already:!1};try{r=b[i.action_type].run(i.action_args,{conversationId:e,botId:i.bot_id})}catch(t){let e=t instanceof Error?t.message:String(t);r={ok:!1,lines:[`[tool result] Error: ${e}`],result:`Error: ${e}`}}for(let e of r.lines)E(i,e);let s=function(e){if(!e)return null;let t=a.bots.getById(e);return(0,o.skillEndToken)(t?.name)}(i.bot_id);return s&&E(i,s),a.default.prepare("UPDATE approval_requests SET status = ?, result = ? WHERE conversation_id = ? AND code = ?").run("executed",r.result,e,t),{status:"executed",code:t,ran:r.ok,already:!1}},"getApprovalByCode",0,_,"mintApprovalCode",0,$,"raiseApprovalFromUserInstruction",0,function(e){let t,n,r,{conversationId:i,botId:l,botName:u,userMessage:c,thread:d}=e,m=function(e){let t=(e||"").trim();if(!t)return null;let n=t.match(/^(?:please\s+|could you\s+)?(read|open|cat|display|show)\s+(?:me\s+)?(?:the\s+)?(?:file\s+|contents\s+of\s+(?:the\s+)?(?:file\s+)?)(\S+?)\s*(?:for me\s*)?[.?!]?\s*$/i);if(!n)return null;let r=n[2].replace(/^[`"'"]+|[`"'"]+$/g,"").replace(/[.?!]+$/,"");return r?{name:r}:null}(c.content),y=m?null:function(e){let t=(e||"").trim();if(!t)return null;let n=t.match(/^(?:please\s+)?(run|execute)\s+(?:a\s+)?command\s+(?:that\s+prints|to\s+print|printing)\s+(?:the\s+)?word\s+([A-Za-z0-9_-]+)\s*[.?!]?\s*$/i);return n?{word:n[2]}:null}(c.content),g=m||y?null:function(e){let t,n=(e||"").trim();if(!n||!/\bask\b/i.test(n)||!/\bapprov(?:e|al)\b/i.test(n)||!/\bcode\b/i.test(n)||!/\bwait\b/i.test(n))return null;let r=n.match(/code\s*:?\s*[`"'"]?([A-Za-z0-9][A-Za-z0-9_.-]*)[`"'"]?/i);return r?(t=r[1].replace(/^[`"'"]+|[`"'"]+$/g,"").replace(/[^A-Za-z0-9_-]+$/,""),f.test(t)?t:null):null}(c.content);if(!m&&!y&&!g)return!1;if(d.some(e=>{let t;return"bot"===e.sender_type&&e.sender_id===l&&e.created_at>c.created_at&&!!(t=(0,s.parseApprovalCode)(e.content))&&!!_(i,t)}))return!0;m?(t=T(i,`read-${m.name}`),n="read_file",r={name:m.name}):y?(t=T(i,`run-${y.word}`),n="run_command",r={command:"printf",format:"%s",word:y.word}):(t=g,n=null,r=null);try{v({conversationId:i,botId:l,code:t,actionType:n,actionArgs:r})}catch(e){if(e instanceof p)return!0;throw e}let h=(0,o.applySkillEndToken)(u,N(t)),w=a.messages.create(i,"bot",h,l);return A(i,t,w.id),!0},"recordModelApproval",0,function(e,t){let n=function(e){let t,n=(0,s.parseApprovalCode)(e||"");if(!n||!f.test(n))return null;let r=(e||"").match(/\[approval-action\]\s*(\{[\s\S]*?\})\s*(?:\r?\n|$)/i);if(!r)return{code:n,actionType:null,actionArgs:null};try{t=JSON.parse(r[1])}catch{return{code:n,actionType:null,actionArgs:null}}if(!t||"object"!=typeof t||Array.isArray(t))return{code:n,actionType:null,actionArgs:null};let i=t;if(!d(i.type))return{code:n,actionType:null,actionArgs:null};let a={};for(let[e,t]of Object.entries(i))"type"!==e&&(a[e]=t);try{b[i.type].validate(a)}catch{return{code:n,actionType:null,actionArgs:null}}return{code:n,actionType:i.type,actionArgs:a}}(t.content);if(!n)return null;let r=v({conversationId:e,botId:t.sender_id??null,code:n.code,actionType:n.actionType,actionArgs:n.actionArgs,messageId:t.id});return r.message_id||A(e,n.code,t.id),r},"setApprovalMessage",0,A])},85072,3620,e=>{"use strict";var t=e.i(22734),n=e.i(14747),r=e.i(25211);class i extends Error{}function a(e,t){return RegExp("\\b"+t+"\\b","i").test(e)}function s(e){return e.trim().replace(/^[@"'`]+|["'`]+$/g,"").replace(/[.?!;,:'"`]+$/g,"").trim()}function l(e){if(!e||"object"!=typeof e||Array.isArray(e))throw new i("draft needs {channel, recipient, body}");if("email"!==e.channel&&"slack"!==e.channel)throw new i("draft channel must be email or slack");if("string"!=typeof e.recipient)throw new i("draft needs a recipient string");if("string"!=typeof e.body)throw new i("draft needs a body string");let t=e.recipient.trim(),n=e.body.trim();if(t.length>256)throw new i("draft recipient is too long");if(!n)throw new i("draft needs a body");if(Buffer.byteLength(n,"utf8")>32768)throw new i("draft body is too large");return{channel:e.channel,recipient:t,body:n}}e.s(["createDraft",0,function(e){let t=l(e);return{channel:t.channel,recipient:t.recipient,body:t.body,state:"open"}},"parseDraftRequest",0,function(e){let t=(e||"").trim();if(!t||/^\s*(create a specialist|duplicate)\b/i.test(t))return null;let n=null;if(a(t,"email")?n="email":a(t,"slack")&&(n="slack"),!n)return null;let r=/\b(draft|write|compose|create|prepare|send)\b/i.test(t),i=/\bplease\b/i.test(t),o=/\b(can|could|would)\s+you\b/i.test(t),u=/^\s*(please\s+)?(email|slack)\b/i.test(t);if(!r&&!i&&!o&&!u)return null;let c=function(e){if(e.toLowerCase().includes("one-line note"))return"One-line note.";let t=e.toLowerCase(),n=-1,r="";for(let e of["that says","saying","note:"]){let i=t.indexOf(e);i>=0&&(n<0||i<n)&&(n=i,r=e)}return n<0?null:e.slice(n+r.length).trim()||null}(t);if(c){let e=function(e){let t=e.toLowerCase(),n=-1;for(let e of["that says","saying","note:"]){let r=t.indexOf(e);r>=0&&(n<0||r<n)&&(n=r)}return n<0?e:e.slice(0,n)}(t),r="",i=e.match(/\bto\s+@?([A-Za-z0-9_.-]+(?:@[A-Za-z0-9_.-]+\.[A-Za-z]+)?)/i);if(i)r=s(i[1]||"");else{let t=e.match(/\b(email|slack)\b\s+@?([A-Za-z0-9_.-]+)/i);if(t){let e=s(t[2]||"");e&&!["to","a","an","the","that","saying","note"].includes(e.toLowerCase())&&(r=e)}}try{return l({channel:n,recipient:r,body:c})}catch{return null}}if(!u)return null;let d=t.match(/^\s*(?:please\s+)?(?:email|slack)\s+@?([A-Za-z0-9_.-]+)\s+(.+?)\s*[.?!]?\s*$/i);if(!d)return null;let f=s(d[1]||""),p=(d[2]||"").trim();if(!f||["to","a","an","the","that","saying","note"].includes(f.toLowerCase())||!p||p.length<2)return null;try{return l({channel:n,recipient:f,body:p})}catch{return null}},"validateDraftRequest",0,l],3620);var o=e.i(52036);class u extends Error{}function c(){return(0,o.filesRootPath)()}function d(e){let t=f(e),r=c(),i=n.default.resolve(r,t);if(i!==r&&!i.startsWith(r+n.default.sep))throw new u(`refused: path traversal in ${JSON.stringify(e)}`);return i}function f(e){if("string"!=typeof e||!e)throw new u("file needs a name");if(e.length>128)throw new u(`refused: file name too long ${JSON.stringify(e)}`);if(!(0,r.isSafeFileName)(e))throw new u(`refused: unsafe file name ${JSON.stringify(e)}`);return e}function p(e){if(!e||"object"!=typeof e||Array.isArray(e))throw new u("file needs {name, content}");return{name:f(e.name),content:function(e){if("string"!=typeof e)throw new u("file needs string content");let t=Buffer.byteLength(e,"utf8");if(0===t)throw new u("file needs content");if(t>65536)throw new u("refused: file content exceeds 65536 bytes");return e}(e.content)}}e.s(["ARTIFACT_MAX_BYTES",0,65536,"artifactCardText",0,function(e){return`[file] ${e}`},"filesRoot",0,c,"parseFileWriteRequest",0,function(e){let t,n=(e||"").trim();if(!n||!/\b(write|create|make)\b/i.test(n)||!/\bfile\b/i.test(n)||!/\bfile\b\s+(named|called)\b/i.test(n))return null;let r=n.match(/\bfile\b\s+(?:named|called)\s+([`"'\u201c\u201d]?\S+?[`"'\u201c\u201d]?)(?:\s+|$)/i);if(!r)return null;let i=(t=(r[1]||"").trim().replace(/^["'`\u201c\u201d]+|["'`\u201c\u201d]+$/g,"").replace(/[?!;,:'"`]+$/,"").trim(),/^\.+$/.test(t)?t:t.replace(/[.]+$/,""));if(!i)return null;let a=n.match(/(?:whose\s+contents?\s+are\s+the\s+word|containing\s+the\s+word|with\s+the\s+word)\s+[`"'\u201c\u201d]?([A-Za-z0-9_-]+)[`"'\u201c\u201d]?/i);if(a)return{name:i,content:a[1]};let s=n.match(/(?:containing|with\s+contents?)\s+["\u201c](.+?)["\u201d]/i);if(s&&s[1].trim())return{name:i,content:s[1]};let l=n.match(/(?:containing|with\s+contents?)\s*:\s*(.+?)\s*$/i);if(l&&l[1].trim()){let e=l[1].trim().replace(/^["'`\u201c\u201d]+|["'`\u201c\u201d]+$/g,"").trim();if(e)return{name:i,content:e}}let o=n.match(/(?:containing|with\s+contents?)\s+(?!the\s+word\b)(.+?)\s*$/i);if(o&&o[1].trim()){let e=o[1].trim().replace(/^["'`\u201c\u201d]+|["'`\u201c\u201d]+$/g,"").trim();if(e=e.replace(/[.?!]+$/,"").trim())return{name:i,content:e}}return null},"parseTypedResult",0,function(e){for(let t of function(e){let t=[];for(let n of(e||"").split(/\r?\n/)){let e=n.match(/^\s*\[produce\]\s*(\{.*\})\s*$/i);if(e)try{t.push(JSON.parse(e[1]))}catch{}}return t}(e))if(!(!t||"object"!=typeof t||Array.isArray(t))){if("draft"===t.type)try{let e=l({channel:t.channel,recipient:t.recipient??"",body:t.body});return{kind:"draft",draft:e}}catch{break}if("file"===t.type)try{let e=p({name:t.name,content:t.content});return{kind:"file",file:e}}catch{}break}return null},"resolveArtifactPath",0,d,"validateArtifact",0,p,"writeArtifactFile",0,function(e,n,r){let i=p({name:e,content:n}),a=c();t.default.mkdirSync(a,{recursive:!0});let s=d(i.name);if(t.default.existsSync(s)){let e;try{e=t.default.statSync(s)}catch{throw new u(`refused: cannot stat ${JSON.stringify(i.name)}`)}if(!e.isFile())throw new u(`refused: not a file ${JSON.stringify(i.name)}`);if(!r?.allowOverwrite)throw new u(`refused: ${JSON.stringify(i.name)} already exists`)}return t.default.writeFileSync(s,i.content,"utf8"),s}],85072)},51714,e=>{"use strict";let t=/^[A-Za-z0-9_-]+$/;function n(e){return"printf"===e}class r extends Error{}function i(e){throw new r(e)}function a(e){return"string"==typeof e&&t.test(e)||i("refused: command not allowlisted"),e.length>64&&i("refused: command not allowlisted"),e}let s=/^(?:please\s+)?(?:print|output|display|show|echo)\s+(?:the\s+)?word\s+([A-Za-z0-9_-]+)\s*(.*?)\s*[.?!]?\s*$/i,l=[/^$/,/^wait\s+(\d+)\s*seconds?$/,/^and\s+wait\s+(\d+)\s*seconds?$/,/^wait\s+for\s+(\d+)\s*seconds?$/,/^and\s+wait\s+for\s+(\d+)\s*seconds?$/,/^then\s+wait\s+(\d+)\s*seconds?$/];function o(e){return e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;")}e.s(["COMMAND_OUTPUT_MAX_BYTES",0,4096,"commandRunPage",0,function(e,t){let n=`printf %s ${e.args.word}`;return'<!doctype html><html><body style="margin:0;background:#0d1117;color:#c9d1d9;font:13px/1.5 ui-monospace,monospace;padding:12px">'+(null===t?`<div class="cmd">$ ${o(n)}</div><div class="dim">waiting ${e.waitSeconds}s…</div>`:`<div class="cmd">$ ${o(n)}</div><div class="out">${o(t)}</div>`)+"</body></html>"},"commandTimeoutMs",0,function(e){return 1e3*e+1e4},"parseCommandAsk",0,function(e){let n=(e||"").trim();if(!n||/^(?:please\s+)?(run|execute)\s+(?:a\s+)?command\b/i.test(n))return null;let r=n.match(s);if(!r)return null;let i=r[1];if(!t.test(i)||i.length>64)return null;let a=(r[2]||"").trim().replace(/^[,\s]+/,"").trim();for(let e of(a=a.replace(/\s+/g," "),l)){let t=a.match(e);if(!t)continue;if(!t[1])return{command:"printf",args:{word:i},waitSeconds:4};let n=Number(t[1]);if(!Number.isInteger(n)||n<1||n>30)break;return{command:"printf",args:{word:i},waitSeconds:n}}return null},"resolveCommand",0,function(e){n(e.command)||i("refused: command not allowlisted");let t=e.args??null,r=t?.format??e.format;void 0!==r&&"%s"!==r&&i("refused: command not allowlisted");let s=a(t?.word??e.word);return{bin:"/usr/bin/printf",argv:["%s",s],display:`printf %s ${s}`}},"validateCommandRequest",0,function(e){var t;n(e.command)||i("refused: command not allowlisted");let r=e.args,s=a(r?.word);return{command:e.command,args:{word:s},waitSeconds:(("number"!=typeof(t=e.waitSeconds)||!Number.isInteger(t)||t<1||t>30)&&i("refused: wait must be 1 to 30 seconds"),t)}}])},25211,e=>{"use strict";let t=/^[A-Za-z0-9][A-Za-z0-9._-]*$/;e.s(["isSafeFileName",0,function(e){return t.test(e)},"parseApprovalCode",0,function(e){let t=e.match(/approve using the code ([A-Za-z0-9][A-Za-z0-9_-]*)/i);return t?t[1]:null},"parseDraft",0,function(e){let t,n=e.match(/^\s*\[draft\]\s*([\s\S]*)$/);if(!n)return null;try{t=JSON.parse(n[1])}catch{return null}if(!t||"object"!=typeof t)return null;let r=t;return"email"!==r.channel&&"slack"!==r.channel||"open"!==r.state&&"sent"!==r.state&&"discarded"!==r.state||"string"!=typeof r.recipient||"string"!=typeof r.body?null:{channel:r.channel,recipient:r.recipient,body:r.body,state:r.state}},"parseFileNames",0,function(e){let t=[];for(let n of e.split("\n")){let e=n.match(/^\s*\[file\]\s*(\S+)\s*$/i);e&&!t.includes(e[1])&&t.push(e[1])}return t},"serializeDraft",0,function(e){return"[draft]\n"+JSON.stringify({channel:e.channel,recipient:e.recipient,body:e.body,state:e.state})}])}];
-
-//# sourceMappingURL=lib_0v6lblw._.js.map