clankie 0.2.1 → 0.2.2

package/README.md

@@ -15,31 +15,40 @@ A minimal AI assistant that lives in Slack. Built on [pi](https://github.com/bad
 
 ### 1. Install Dependencies
 
-Requires [Bun](https://bun.sh):
+**Runtime:** [Node.js](https://nodejs.org) v22.6.0+ (for native TypeScript support)  
+**Build:** [Bun](https://bun.sh) (for faster package installation and web-ui builds)
 
 ```bash
-# macOS/Linux
-curl -fsSL https://bun.sh/install | bash
+# Check Node version
+node --version  # Should be >= v22.6.0
 
-# Verify
+# Install Bun (if not already installed)
+curl -fsSL https://bun.sh/install | bash
 bun --version
 ```
 
-### 2. Clone and Install
+**Don't have Node.js?** Install via [mise](https://mise.jdx.dev) (recommended) or [nvm](https://github.com/nvm-sh/nvm).
+
+### 2. Quick Install via npm
 
 ```bash
-git clone https://github.com/thiagovarela/clankie
-cd clankie
-bun install
+npm install -g clankie
 ```
 
-### 3. Link Globally (Optional)
+This installs clankie globally. Now `clankie` is available from anywhere.
+
+### 3. Or: Install from Source
 
 ```bash
-bun link
+git clone https://github.com/thiagovarela/clankie
+cd clankie
+npm install
+npm link
 ```
 
-Now `clankie` is available from anywhere. If you skip this, use `bun run src/cli.ts` instead of `clankie`.
+Now `clankie` is available from anywhere. If you skip `npm link`, use `node --experimental-strip-types src/cli.ts` instead of `clankie`.
+
+**Note:** Bun is used for faster package installation and building the web-ui. The runtime requires Node.js v22.6.0+.
 
 ## Slack Setup
 
@@ -287,16 +296,22 @@ Logs are stored in `~/.clankie/logs/daemon.log`.
 ## Development
 
 ```bash
-# Run directly with Bun (no build step)
-bun run src/cli.ts chat
-bun run src/cli.ts send "hello"
+# Run directly with Node.js (no build step, native TypeScript support)
+node --experimental-strip-types src/cli.ts chat
+node --experimental-strip-types src/cli.ts send "hello"
+
+# Or use npm scripts
+npm run dev -- chat
+npm run dev -- send "hello"
 
 # Code quality checks
-bun run check        # Run linter
-bun run check:fix    # Auto-fix issues
-bun run format       # Format code
+npm run check        # Run linter
+npm run check:fix    # Auto-fix issues
+npm run format       # Format code
 ```
 
+**Note:** Bun is used for package installation and building the web-ui. The runtime requires Node.js v22.6.0+ with native TypeScript support.
+
 ## Troubleshooting
 
 ### Bot doesn't respond in threads

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "clankie",
-	"version": "0.2.1",
+	"version": "0.2.2",
 	"description": "A minimal personal AI assistant built on pi's SDK",
 	"type": "module",
 	"bin": {
@@ -13,21 +13,30 @@
 		"README.md"
 	],
 	"scripts": {
-		"dev": "bun run src/cli.ts",
-		"build:web-ui": "cd web-ui && bun install --frozen-lockfile && bun run build && cd .. && rm -rf web-ui-dist && cp -r web-ui/.output/public web-ui-dist",
+		"dev": "node --experimental-strip-types src/cli.ts",
+		"build:web-ui": "cd web-ui && bun install && bun run build && cd .. && rm -rf web-ui-dist && cp -r web-ui/.output/public web-ui-dist",
 		"check": "biome check .",
 		"check:fix": "biome check --fix .",
 		"format": "biome format --write ."
 	},
+	"engines": {
+		"node": ">=22.6.0"
+	},
 	"dependencies": {
+		"@hono/node-server": "^1.19.9",
+		"@hono/node-ws": "^1.3.0",
 		"@mariozechner/pi-ai": "^0.54.0",
 		"@mariozechner/pi-coding-agent": "^0.54.0",
 		"@slack/socket-mode": "^2.0.0",
 		"@slack/web-api": "^7.0.0",
-		"json5": "^2.2.3"
+		"hono": "^4.12.3",
+		"json5": "^2.2.3",
+		"ws": "^8.18.0"
 	},
 	"devDependencies": {
 		"@biomejs/biome": "^2.4.4",
-		"@types/bun": "latest"
+		"@types/node": "^22.10.2",
+		"@types/ws": "^8.5.13",
+		"tsx": "^4.21.0"
 	}
 }

package/src/agent.ts

@@ -14,10 +14,12 @@ import {
 	type CreateAgentSessionResult,
 	createAgentSession,
 	DefaultResourceLoader,
+	type ExtensionFactory,
 	ModelRegistry,
 	SessionManager,
 } from "@mariozechner/pi-coding-agent";
 import { getAgentDir, getAuthPath, getWorkspace, loadConfig } from "./config.ts";
+import { createWorkspaceJailExtension } from "./extensions/workspace-jail.ts";
 
 export interface SessionOptions {
 	/**
@@ -59,10 +61,19 @@ export async function createSession(options: SessionOptions = {}): Promise<Creat
 	const authStorage = AuthStorage.create(getAuthPath());
 	const modelRegistry = new ModelRegistry(authStorage);
 
+	// Build extension factories (workspace jail if enabled)
+	const extensionFactories: ExtensionFactory[] = [];
+	const restrictToWorkspace = config.agent?.restrictToWorkspace ?? true; // default: enabled
+	if (restrictToWorkspace) {
+		const allowedPaths = config.agent?.allowedPaths ?? [];
+		extensionFactories.push(createWorkspaceJailExtension(cwd, allowedPaths));
+	}
+
 	// DefaultResourceLoader with standard pi discovery
 	const loader = new DefaultResourceLoader({
 		cwd,
 		agentDir,
+		extensionFactories,
 	});
 	await loader.reload();
 

package/src/channels/slack.ts

@@ -46,6 +46,7 @@ export interface SlackChannelOptions {
 
 export class SlackChannel implements Channel {
 	readonly name = "slack";
+	private options: SlackChannelOptions;
 	private socketClient: SocketModeClient;
 	private webClient: WebClient;
 	private allowedUsers: Set<string>;
@@ -55,7 +56,8 @@ export class SlackChannel implements Channel {
 	/** Threads where bot has been @mentioned - Map<threadId, timestamp> for TTL cleanup */
 	private activeThreads: Map<string, number> = new Map();
 
-	constructor(private options: SlackChannelOptions) {
+	constructor(options: SlackChannelOptions) {
+		this.options = options;
 		this.socketClient = new SocketModeClient({
 			appToken: options.appToken,
 			// biome-ignore lint/suspicious/noExplicitAny: Slack SDK logLevel type is not exported