lastlight 0.16.0 → 0.16.1

package/dist/engine/agent-executor.d.ts

@@ -1,34 +0,0 @@
-import { type ExecutorConfig, type ExecutionResult, type GitSandboxAccess } from "./github/profiles.js";
-import type { SandboxFactory } from "../sandbox/sandbox.js";
-import { type CommandSpec } from "./executors/orchestrator.js";
-export { RunResultAccumulator, stageSkillBundle, excludeFromGit, detectAccountError } from "./executors/shared.js";
-export type { CommandSpec } from "./executors/orchestrator.js";
-export declare function executeAgent(prompt: string, config: ExecutorConfig, opts?: {
-    taskId?: string;
-    /**
-     * Fired as soon as the run gets a session id. Used to persist the id
-     * onto the in-flight executions row so the dashboard can deep-link
-     * the running phase to its live JSONL.
-     */
-    onSessionId?: (sessionId: string) => void;
-    githubAccess?: GitSandboxAccess;
-    /** Test seam — substitute a FakeSandbox. Defaults to the real factory. */
-    sandboxFactory?: SandboxFactory;
-}): Promise<ExecutionResult>;
-export declare function executeCommand(spec: CommandSpec, config: ExecutorConfig, opts?: {
-    taskId?: string;
-    githubAccess?: GitSandboxAccess;
-    /** Per-step timeout in seconds. */
-    timeoutSeconds?: number;
-    /** Extra env forwarded into the command (e.g. upstream phase outputs). */
-    sandboxEnv?: Record<string, string>;
-    onSessionId?: (sessionId: string) => void;
-    /**
-     * Mirror the command output to a session jsonl (visible in the dashboard +
-     * CLI). Default true. Set false for internal checks like `until_bash` that
-     * shouldn't create a user-facing session log.
-     */
-    writeSession?: boolean;
-    /** Test seam — substitute a FakeSandbox. Defaults to the real factory. */
-    sandboxFactory?: SandboxFactory;
-}): Promise<ExecutionResult>;

package/dist/engine/agent-executor.js

@@ -1,246 +0,0 @@
-import { resolve } from "path";
-import { randomUUID } from "crypto";
-import { refreshGitAuth } from "./github/git-auth.js";
-import { GITHUB_PERMISSION_PROFILES, } from "./github/profiles.js";
-import { getDockerSandboxOtelEnv, getOtelEnvForSandbox, safeSpanAttributes, withSpan } from "../telemetry/index.js";
-import { DEFAULT_MODEL } from "./executors/shared.js";
-import { PROVIDER_ENV_KEYS } from "../providers.js";
-import { oauthEnvVarForProvider, oauthProviderIdForModel, resolveOAuthApiKey } from "./oauth.js";
-import { runSandboxedAgent, runSandboxedCommand, } from "./executors/orchestrator.js";
-// Re-exported for back-compat with existing importers (tests, dashboards,
-// workflow phase executor).
-export { RunResultAccumulator, stageSkillBundle, excludeFromGit, detectAccountError } from "./executors/shared.js";
-/**
- * Shared run preparation for {@link executeAgent} and {@link executeCommand}:
- * resolve the taskId / state dir / backend, mint the scoped GitHub token,
- * assemble the sandbox env (git token, provider keys, OTEL), and compute the
- * pre-populate descriptor. Both the agent and the deterministic command paths
- * run in the same sandbox/workspace with the same git access, so they share
- * this setup verbatim.
- */
-async function prepareRun(config, opts) {
-    const taskId = opts?.taskId || `task-${randomUUID().slice(0, 8)}`;
-    const stateDir = config.stateDir || resolve("data");
-    const backend = config.sandbox ?? "gondolin";
-    // Mint a scoped GitHub App token. Same flow as the legacy executor —
-    // defense in depth so a downstream tool gating regression can't burn
-    // more access than the profile allowed.
-    //
-    // GITHUB_APP_* env vars are forwarded to agentic-pi *only* when the access
-    // profile opts into App PEM access via `allowMcpAppAuth`. That is currently
-    // never set (see gitSandboxAccessForWorkflow): the github extension can't
-    // read the PEM in the sandbox and skips rather than falling back, so we keep
-    // the App key out entirely and every run uses just the minted `GITHUB_TOKEN`
-    // below — which also stops agents minting elevated tokens themselves. The
-    // branch is retained so per-profile App auth can be re-enabled if the
-    // sandbox-side PEM is ever materialized.
-    const ghEnv = {};
-    let mintedToken;
-    const access = opts?.githubAccess;
-    const allowAppAuth = access?.allowMcpAppAuth === true;
-    if (process.env.GITHUB_APP_ID && allowAppAuth) {
-        ghEnv.GITHUB_APP_ID = process.env.GITHUB_APP_ID;
-        if (process.env.GITHUB_APP_INSTALLATION_ID) {
-            ghEnv.GITHUB_APP_INSTALLATION_ID = process.env.GITHUB_APP_INSTALLATION_ID;
-        }
-        if (process.env.GITHUB_APP_PRIVATE_KEY_PATH) {
-            ghEnv.GITHUB_APP_PRIVATE_KEY_PATH = process.env.GITHUB_APP_PRIVATE_KEY_PATH;
-        }
-    }
-    else {
-        // Suppress for in-process runs that inherit our env. Empty strings
-        // override the inherited value via `applyEnv()`.
-        ghEnv.GITHUB_APP_ID = "";
-        ghEnv.GITHUB_APP_INSTALLATION_ID = "";
-        ghEnv.GITHUB_APP_PRIVATE_KEY_PATH = "";
-    }
-    if (process.env.GITHUB_APP_ID && access) {
-        try {
-            const permissions = GITHUB_PERMISSION_PROFILES[access.profile];
-            const repositories = access.repo ? [access.repo] : undefined;
-            console.log(`[executor] Minting git token: profile=${access.profile}, ` +
-                `repo=${access.repo || "(unscoped)"}, permissions=${permissions ? Object.keys(permissions).join(",") : "all"}`);
-            const { token } = await refreshGitAuth({
-                appId: process.env.GITHUB_APP_ID,
-                privateKeyPath: process.env.GITHUB_APP_PRIVATE_KEY_PATH || "",
-                installationId: process.env.GITHUB_APP_INSTALLATION_ID || "",
-                permissions,
-                repositories,
-            });
-            mintedToken = token;
-            ghEnv.GITHUB_TOKEN = token;
-            ghEnv.GIT_TOKEN = token;
-        }
-        catch (err) {
-            const msg = err instanceof Error ? err.message : String(err);
-            console.warn(`[executor] Could not mint git token (repo=${access.repo || "none"}, ` +
-                `profile=${access.profile}): ${msg}`);
-        }
-    }
-    else if (process.env.GITHUB_TOKEN && access) {
-        // PAT fallback: no GitHub App, but a static Personal Access Token is set.
-        // Forward it directly — a PAT can't be per-run downscoped like an App
-        // installation token, so it carries whatever scopes GitHub granted. A
-        // read-only fine-grained PAT is the safe default; warn on repo-write
-        // profiles so an operator running build/pr-fix under a PAT knows the
-        // requested downscope isn't being applied.
-        if (GITHUB_PERMISSION_PROFILES[access.profile]?.contents === "write") {
-            console.warn(`[executor] Using a static GITHUB_TOKEN for a repo-write workflow ` +
-                `(profile=${access.profile}, repo=${access.repo || "none"}) — the PAT's ` +
-                `own scopes apply (no per-run downscoping).`);
-        }
-        mintedToken = process.env.GITHUB_TOKEN;
-        ghEnv.GITHUB_TOKEN = process.env.GITHUB_TOKEN;
-        ghEnv.GIT_TOKEN = process.env.GITHUB_TOKEN;
-    }
-    // Provider API keys. Forwarded in registry order — see `src/providers.ts`
-    // (the single source of truth for wizard-able providers). Every entry a
-    // user can pick in the setup wizard is reachable from the sandbox because
-    // the egress firewall list is also derived from the same registry's hosts.
-    for (const envKey of PROVIDER_ENV_KEYS) {
-        const v = process.env[envKey];
-        if (v)
-            ghEnv[envKey] = v;
-    }
-    // OAuth-backed providers (subscription logins: Codex / Claude Pro / Copilot).
-    //
-    // In-process backends (none/gondolin) run the model call host-side, so the
-    // orchestrator hands agentic-pi `authFile` = our credential store and Pi's
-    // AuthStorage resolves EVERY OAuth provider (Codex included) from it. Nothing
-    // to do here for those backends.
-    //
-    // Container backends (docker/smol) run the model call inside the guest, where
-    // that host path can't be read — so we inject the refreshed token via the env
-    // var pi reads in-guest (ANTHROPIC_OAUTH_TOKEN / COPILOT_GITHUB_TOKEN). Codex
-    // has no in-guest env route (chatgpt.com backend), so it can't authenticate
-    // there — warn rather than 401 mid-run, and point at a host-side backend.
-    const inProcessBackend = backend === "none" || backend === "gondolin";
-    const modelSpec = config.model || DEFAULT_MODEL;
-    const oauthId = oauthProviderIdForModel(modelSpec);
-    if (oauthId && !inProcessBackend) {
-        const oauthEnvVar = oauthEnvVarForProvider(oauthId);
-        if (!oauthEnvVar) {
-            console.warn(`[executor] Model '${modelSpec}' uses OAuth provider '${oauthId}', which has no ` +
-                `in-guest env route — the '${backend}' sandbox can't authenticate it. Use the ` +
-                `gondolin/none backend (host-side auth via the credential store) or an API-key provider.`);
-        }
-        else if (!ghEnv[oauthEnvVar] && !process.env[oauthEnvVar]) {
-            // Only mint from stored creds when an explicit token isn't already set.
-            try {
-                const res = await resolveOAuthApiKey(oauthId, undefined, stateDir);
-                if (res) {
-                    ghEnv[oauthEnvVar] = res.apiKey;
-                }
-                else {
-                    console.warn(`[executor] Model '${modelSpec}' needs an OAuth login for '${oauthId}' but none is ` +
-                        `stored. Run: lastlight oauth login ${oauthId}`);
-                }
-            }
-            catch (err) {
-                const msg = err instanceof Error ? err.message : String(err);
-                console.warn(`[executor] OAuth token refresh failed for '${oauthId}': ${msg}`);
-            }
-        }
-    }
-    // Web-search provider keys. Forwarded only when the workflow opted into
-    // web search (scoped to explore today; see webSearchEnabledForWorkflow
-    // in workflows/runner.ts). agentic-pi auto-detects the provider from
-    // whichever key is present (Tavily > Exa > Brave by default).
-    if (config.webSearch) {
-        if (process.env.TAVILY_API_KEY)
-            ghEnv.TAVILY_API_KEY = process.env.TAVILY_API_KEY;
-        if (process.env.BRAVE_SEARCH_API_KEY)
-            ghEnv.BRAVE_SEARCH_API_KEY = process.env.BRAVE_SEARCH_API_KEY;
-        if (process.env.EXA_API_KEY)
-            ghEnv.EXA_API_KEY = process.env.EXA_API_KEY;
-    }
-    // OTEL config for the agent runtime itself. On docker the agent runs
-    // inside the container, so it reads this (the container env) and is
-    // pointed at the in-network collector — never the real backend or its
-    // auth headers. On gondolin/none the agent runs in the harness process
-    // and inherits the harness SDK; forwarding the host's OTEL_* here just
-    // re-affirms that config for any child processes.
-    if (config.otel?.enabled && config.otel.forwardToSandbox) {
-        Object.assign(ghEnv, backend === "docker" ? getDockerSandboxOtelEnv() : getOtelEnvForSandbox());
-    }
-    const prePopulate = access?.prePopulateBranch && mintedToken
-        ? {
-            owner: access.owner,
-            repo: access.repo,
-            branch: access.prePopulateBranch,
-            token: mintedToken,
-            runId: access.runId,
-            shallow: access.shallow,
-            recreateFromBase: access.recreateFromBase,
-        }
-        : undefined;
-    return { taskId, stateDir, backend, ghEnv, mintedToken, prePopulate };
-}
-export async function executeAgent(prompt, config, opts) {
-    const { taskId, stateDir, backend, ghEnv, prePopulate } = await prepareRun(config, opts);
-    const access = opts?.githubAccess;
-    const spanAttrs = safeSpanAttributes({
-        "agent.runtime": "agentic-pi",
-        "sandbox.backend": backend,
-        "task.id": taskId,
-        repo: access?.repo,
-        "github.profile": access?.profile,
-        model: config.model || DEFAULT_MODEL,
-        variant: config.variant,
-        "web_search.enabled": config.webSearch === true,
-        unrestricted_egress: config.unrestrictedEgress === true,
-        "workflow.name": config.telemetry?.workflowName,
-        "phase.name": config.telemetry?.phaseName,
-    });
-    const ctx = {
-        config,
-        taskId,
-        stateDir,
-        backend,
-        env: ghEnv,
-        prePopulate,
-        access,
-        onSessionId: opts?.onSessionId,
-        sandboxFactory: opts?.sandboxFactory,
-    };
-    return withSpan("lastlight.agent.execute", spanAttrs, () => runSandboxedAgent(prompt, ctx));
-}
-// ── Deterministic command path (type: bash / type: script) ───────────
-//
-// Runs a deterministic shell command (or inline script) inside the SAME
-// sandbox/workspace an agent phase would use — no LLM. The command's output is
-// mirrored to a Claude-SDK-style session jsonl via the AgenticShim (the same
-// shim agent phases use), so a bash/script phase shows up in the admin console
-// and `lastlight session log` exactly like an agent turn: the command renders
-// as a `bash` tool_use and its stdout/stderr as the tool_result.
-export async function executeCommand(spec, config, opts) {
-    const { taskId, stateDir, backend, ghEnv, prePopulate } = await prepareRun(config, opts);
-    const access = opts?.githubAccess;
-    const spanAttrs = safeSpanAttributes({
-        "agent.runtime": spec.kind,
-        "sandbox.backend": backend,
-        "task.id": taskId,
-        repo: access?.repo,
-        "github.profile": access?.profile,
-        unrestricted_egress: config.unrestrictedEgress === true,
-        "workflow.name": config.telemetry?.workflowName,
-        "phase.name": config.telemetry?.phaseName,
-    });
-    const ctx = {
-        config,
-        taskId,
-        stateDir,
-        backend,
-        env: ghEnv,
-        prePopulate,
-        access,
-        onSessionId: opts?.onSessionId,
-        sandboxFactory: opts?.sandboxFactory,
-    };
-    return withSpan("lastlight.command.execute", spanAttrs, () => runSandboxedCommand(spec, ctx, {
-        timeoutSeconds: opts?.timeoutSeconds,
-        sandboxEnv: opts?.sandboxEnv,
-        writeSession: opts?.writeSession,
-    }));
-}
-//# sourceMappingURL=agent-executor.js.map

package/dist/engine/agent-executor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-executor.js","sourceRoot":"","sources":["../../src/engine/agent-executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EACL,0BAA0B,GAI3B,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACpH,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACjG,OAAO,EACL,iBAAiB,EACjB,mBAAmB,GAGpB,MAAM,6BAA6B,CAAC;AACrC,0EAA0E;AAC1E,4BAA4B;AAC5B,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAGnH;;;;;;;GAOG;AACH,KAAK,UAAU,UAAU,CACvB,MAAsB,EACtB,IAA2D;IAS3D,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,QAAQ,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,OAAO,GAAmB,MAAM,CAAC,OAAO,IAAI,UAAU,CAAC;IAE7D,qEAAqE;IACrE,qEAAqE;IACrE,wCAAwC;IACxC,EAAE;IACF,2EAA2E;IAC3E,4EAA4E;IAC5E,0EAA0E;IAC1E,6EAA6E;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,sEAAsE;IACtE,yCAAyC;IACzC,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,IAAI,WAA+B,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,EAAE,YAAY,CAAC;IAClC,MAAM,YAAY,GAAG,MAAM,EAAE,eAAe,KAAK,IAAI,CAAC;IACtD,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,YAAY,EAAE,CAAC;QAC9C,KAAK,CAAC,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QAChD,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,CAAC;YAC3C,KAAK,CAAC,0BAA0B,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QAC5E,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,CAAC;YAC5C,KAAK,CAAC,2BAA2B,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;QAC9E,CAAC;IACH,CAAC;SAAM,CAAC;QACN,mEAAmE;QACnE,iDAAiD;QACjD,KAAK,CAAC,aAAa,GAAG,EAAE,CAAC;QACzB,KAAK,CAAC,0BAA0B,GAAG,EAAE,CAAC;QACtC,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,MAAM,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,0BAA0B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC/D,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7D,OAAO,CAAC,GAAG,CACT,yCAAyC,MAAM,CAAC,OAAO,IAAI;gBAC3D,QAAQ,MAAM,CAAC,IAAI,IAAI,YAAY,iBAAiB,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAC/G,CAAC;YACF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CAAC;gBACrC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa;gBAChC,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,EAAE;gBAC7D,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,EAAE;gBAC5D,WAAW;gBACX,YAAY;aACb,CAAC,CAAC;YACH,WAAW,GAAG,KAAK,CAAC;YACpB,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC;YAC3B,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,IAAI,CACV,6CAA6C,MAAM,CAAC,IAAI,IAAI,MAAM,IAAI;gBACtE,WAAW,MAAM,CAAC,OAAO,MAAM,GAAG,EAAE,CACrC,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,MAAM,EAAE,CAAC;QAC9C,0EAA0E;QAC1E,sEAAsE;QACtE,sEAAsE;QACtE,qEAAqE;QACrE,qEAAqE;QACrE,2CAA2C;QAC3C,IAAI,0BAA0B,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,KAAK,OAAO,EAAE,CAAC;YACrE,OAAO,CAAC,IAAI,CACV,mEAAmE;gBACnE,YAAY,MAAM,CAAC,OAAO,UAAU,MAAM,CAAC,IAAI,IAAI,MAAM,gBAAgB;gBACzE,4CAA4C,CAC7C,CAAC;QACJ,CAAC;QACD,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QACvC,KAAK,CAAC,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAC9C,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAC7C,CAAC;IAED,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC;YAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,8EAA8E;IAC9E,EAAE;IACF,2EAA2E;IAC3E,2EAA2E;IAC3E,8EAA8E;IAC9E,iCAAiC;IACjC,EAAE;IACF,8EAA8E;IAC9E,8EAA8E;IAC9E,8EAA8E;IAC9E,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAM,gBAAgB,GAAG,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,UAAU,CAAC;IACtE,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,IAAI,aAAa,CAAC;IAChD,MAAM,OAAO,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACjC,MAAM,WAAW,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CACV,qBAAqB,SAAS,0BAA0B,OAAO,kBAAkB;gBAC/E,6BAA6B,OAAO,2CAA2C;gBAC/E,yFAAyF,CAC5F,CAAC;QACJ,CAAC;aAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5D,wEAAwE;YACxE,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;gBACnE,IAAI,GAAG,EAAE,CAAC;oBACR,KAAK,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;gBAClC,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CACV,qBAAqB,SAAS,+BAA+B,OAAO,gBAAgB;wBAClF,sCAAsC,OAAO,EAAE,CAClD,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,OAAO,CAAC,IAAI,CAAC,8CAA8C,OAAO,MAAM,GAAG,EAAE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,uEAAuE;IACvE,qEAAqE;IACrE,8DAA8D;IAC9D,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;YAAE,KAAK,CAAC,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAClF,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB;YAAE,KAAK,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACpG,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW;YAAE,KAAK,CAAC,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAC3E,CAAC;IAED,qEAAqE;IACrE,oEAAoE;IACpE,sEAAsE;IACtE,uEAAuE;IACvE,uEAAuE;IACvE,kDAAkD;IAClD,IAAI,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,WAAW,GACf,MAAM,EAAE,iBAAiB,IAAI,WAAW;QACtC,CAAC,CAAC;YACE,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,CAAC,iBAAiB;YAChC,KAAK,EAAE,WAAW;YAClB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC1C;QACH,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,MAAsB,EACtB,IAWC;IAED,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,IAAI,EAAE,YAAY,CAAC;IAElC,MAAM,SAAS,GAAG,kBAAkB,CAAC;QACnC,eAAe,EAAE,YAAY;QAC7B,iBAAiB,EAAE,OAAO;QAC1B,SAAS,EAAE,MAAM;QACjB,IAAI,EAAE,MAAM,EAAE,IAAI;QAClB,gBAAgB,EAAE,MAAM,EAAE,OAAO;QACjC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,aAAa;QACpC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,oBAAoB,EAAE,MAAM,CAAC,SAAS,KAAK,IAAI;QAC/C,mBAAmB,EAAE,MAAM,CAAC,kBAAkB,KAAK,IAAI;QACvD,eAAe,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY;QAC/C,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS;KAC1C,CAAC,CAAC;IAEH,MAAM,GAAG,GAAsB;QAC7B,MAAM;QACN,MAAM;QACN,QAAQ;QACR,OAAO;QACP,GAAG,EAAE,KAAK;QACV,WAAW;QACX,MAAM;QACN,WAAW,EAAE,IAAI,EAAE,WAAW;QAC9B,cAAc,EAAE,IAAI,EAAE,cAAc;KACrC,CAAC;IACF,OAAO,QAAQ,CAAC,yBAAyB,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,wEAAwE;AACxE,EAAE;AACF,wEAAwE;AACxE,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAC/E,8EAA8E;AAC9E,iEAAiE;AAEjE,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAiB,EACjB,MAAsB,EACtB,IAgBC;IAED,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,IAAI,EAAE,YAAY,CAAC;IAElC,MAAM,SAAS,GAAG,kBAAkB,CAAC;QACnC,eAAe,EAAE,IAAI,CAAC,IAAI;QAC1B,iBAAiB,EAAE,OAAO;QAC1B,SAAS,EAAE,MAAM;QACjB,IAAI,EAAE,MAAM,EAAE,IAAI;QAClB,gBAAgB,EAAE,MAAM,EAAE,OAAO;QACjC,mBAAmB,EAAE,MAAM,CAAC,kBAAkB,KAAK,IAAI;QACvD,eAAe,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY;QAC/C,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS;KAC1C,CAAC,CAAC;IAEH,MAAM,GAAG,GAAsB;QAC7B,MAAM;QACN,MAAM;QACN,QAAQ;QACR,OAAO;QACP,GAAG,EAAE,KAAK;QACV,WAAW;QACX,MAAM;QACN,WAAW,EAAE,IAAI,EAAE,WAAW;QAC9B,cAAc,EAAE,IAAI,EAAE,cAAc;KACrC,CAAC;IACF,OAAO,QAAQ,CAAC,2BAA2B,EAAE,SAAS,EAAE,GAAG,EAAE,CAC3D,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE;QAC7B,cAAc,EAAE,IAAI,EAAE,cAAc;QACpC,UAAU,EAAE,IAAI,EAAE,UAAU;QAC5B,YAAY,EAAE,IAAI,EAAE,YAAY;KACjC,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/engine/chat/chat-runner.d.ts

@@ -1,132 +0,0 @@
-import { type AssistantMessage, type Context, type Model, type Api, type SimpleStreamOptions, type Tool, type ToolCall, type ToolResultMessage } from "@earendil-works/pi-ai";
-import type { SessionManager } from "../../connectors/messaging/session-manager.js";
-import { type ChatGitHubAuth } from "../github/github-tools.js";
-/**
- * Match transient, retryable model errors. Deliberately conservative: auth /
- * validation / context-overflow / other 4xx (anything but 429) are NOT
- * retried — only rate limits, server errors, and transient network faults.
- */
-export declare function isRetryableModelError(message: string): boolean;
-/**
- * Call `complete`, retrying transient failures with exponential backoff.
- * Handles both shapes pi-ai surfaces a failure as: a thrown error, and a
- * returned AssistantMessage with `stopReason === "error"`. Non-retryable
- * outcomes (and the final attempt) are returned/thrown unchanged so the
- * caller's existing error handling still applies. Dependency-injected for
- * testing (`delaysMs` / `sleepFn` / `onRetry`).
- */
-export declare function completeWithRetry(complete: (m: Model<Api>, c: Context, o: SimpleStreamOptions) => Promise<AssistantMessage>, model: Model<Api>, context: Context, opts: SimpleStreamOptions, deps?: {
-    delaysMs?: number[];
-    sleepFn?: (ms: number) => Promise<void>;
-    onRetry?: (info: {
-        attempt: number;
-        delayMs: number;
-        reason: string;
-    }) => void;
-}): Promise<AssistantMessage>;
-/**
- * Optional extra toolset merged into the chat agent's tool list
- * alongside the github tools. Used to register the `read_skill` tool
- * that exposes the curated chat skill catalogue.
- */
-export interface ChatExtraToolset {
-    tools: Tool[];
-    execute(call: ToolCall): {
-        content: string;
-        isError: boolean;
-    } | Promise<{
-        content: string;
-        isError: boolean;
-    }>;
-}
-export interface ChatRunnerConfig {
-    /** Default model (pi-ai provider/id). */
-    model: string;
-    /** Pi thinking level (off..xhigh). Forwarded as `reasoning` option. */
-    thinking?: string;
-    /** Agent persona / system prompt — composed by index.ts from agent-context + CHAT_SYSTEM_SUFFIX. */
-    systemPrompt: string;
-    /** Optional GitHub App credentials. When set, read-only github tools are registered. */
-    github?: ChatGitHubAuth;
-    /**
-     * Optional extra tools (e.g. `read_skill`) registered in addition to
-     * the github toolset. Both tool lists are concatenated; per-call
-     * dispatch tries github first, then this set.
-     */
-    extraTools?: ChatExtraToolset;
-    /** Per-turn timeout (ms). Default: 120s. */
-    timeoutMs?: number;
-}
-export interface ChatRunnerTurnResult {
-    /** Final assistant text. */
-    text: string;
-    /** UUID that pins this Slack thread to its on-disk JSONL. Same across all turns in one thread. */
-    agentSessionId: string;
-    /** Token + cost stats from the final assistant message. */
-    tokens: {
-        input: number;
-        output: number;
-        cacheRead: number;
-        cacheWrite: number;
-    };
-    costUsd: number;
-    /** Number of round-trips to the model in this turn (1 + tool rounds). */
-    modelTurns: number;
-    /** "stop" on a clean finish, "tool-error" / "error" / "max-rounds" otherwise. */
-    finish: string;
-    /** Errors that occurred during the turn. Empty when finish === "stop". */
-    errors: string[];
-    /** Concatenated assistant content from every model turn — for the dashboard shim. */
-    assistantMessages: AssistantMessage[];
-    /** Tool results emitted during the turn — for the dashboard shim. */
-    toolResults: ToolResultMessage[];
-    /** Resolved model id (pi-ai format). */
-    modelId: string;
-}
-export declare class ChatRunner {
-    private cfg;
-    private sessionManager;
-    private tools;
-    private extraTools;
-    /** Concatenated tool list passed to pi-ai (github + extra). */
-    private mergedTools;
-    /**
-     * Resolved lazily on the first chat turn. A bad chat model spec
-     * (unknown id) MUST NOT crash the whole harness — webhooks, crons and
-     * workflows don't depend on it.
-     */
-    private model;
-    private modelError;
-    private chains;
-    /**
-     * OAuth provider id backing the chat model (e.g. `openai-codex` for a
-     * `openai-codex/gpt-5.4` spec), or undefined for API-key providers. When
-     * set, each turn resolves a fresh subscription token instead of relying on
-     * a provider env var. Derived once from `cfg.model`.
-     */
-    private oauthProviderId;
-    constructor(cfg: ChatRunnerConfig, sessionManager: SessionManager);
-    /**
-     * Dispatch a tool call to whichever toolset registered it. Github
-     * tools take precedence (they're registered first); fall back to the
-     * extra toolset for anything not in the github name set.
-     */
-    private dispatchTool;
-    /** Build a failed-turn result carrying a single actionable error message. */
-    private errorTurn;
-    private resolveModelLazy;
-    /**
-     * Run one chat turn. Each messagingSessionId maps to a stable pi-ai
-     * `agentSessionId` (a UUID we mint on first turn) which the dashboard
-     * uses to look up the JSONL on disk.
-     */
-    turn(messagingSessionId: string, prompt: string): Promise<ChatRunnerTurnResult>;
-    private doTurn;
-}
-/**
- * Octokit is bundled here only because github-tools.ts imports it at module
- * load. Re-export so callers can probe whether the integration is wired
- * without round-tripping through that file. Typed as `unknown` to avoid
- * dragging the Octokit type chain into the published .d.ts.
- */
-export declare const __octokitForTest: unknown;