pi-harness-runtime 0.10.7 → 0.10.12

package/packages/context-manager/test/context.test.ts

@@ -1,198 +0,0 @@
-/**
- * Context Manager Tests (RFC-0010)
- */
-
-import { describe, it, expect } from "bun:test";
-import {
-	DEFAULT_POLICY,
-	estimatePressure,
-	getPressureLevel,
-	createSessionScope,
-	setTTL,
-	addToScope,
-	evictExpired,
-	prioritize,
-	estimateTokens,
-	calculateTotalTokens,
-	compactContext,
-	generateResumePrompt,
-	formatResumeMarkdown,
-} from "../src/index.js";
-
-const makeItem = (
-	overrides?: Partial<import("../src/index.js").ContextItem>,
-): import("../src/index.js").ContextItem => ({
-	id: `item-${Math.random().toString(36).slice(2)}`,
-	role: "user",
-	content: "Test content",
-	tokens: 10,
-	priority: 5,
-	timestamp: Date.now(),
-	...overrides,
-});
-
-describe("DEFAULT_POLICY", () => {
-	it("has threshold values", () => {
-		expect(DEFAULT_POLICY.warningThreshold).toBe(0.6);
-		expect(DEFAULT_POLICY.compactThreshold).toBe(0.7);
-		expect(DEFAULT_POLICY.hardStopThreshold).toBe(0.85);
-	});
-});
-
-describe("estimatePressure", () => {
-	it("returns ratio", () => expect(estimatePressure(5000, 10000)).toBe(0.5));
-	it("caps at 1", () => expect(estimatePressure(15000, 10000)).toBe(1));
-	it("handles zero max", () => expect(estimatePressure(100, 0)).toBe(1));
-});
-
-describe("getPressureLevel", () => {
-	it("normal below warning", () =>
-		expect(getPressureLevel(0.3)).toBe("normal"));
-	it("warning above warningThreshold", () =>
-		expect(getPressureLevel(0.65)).toBe("warning"));
-	it("compact above compactThreshold", () =>
-		expect(getPressureLevel(0.75)).toBe("compact"));
-	it("hard_stop above hardStopThreshold", () =>
-		expect(getPressureLevel(0.9)).toBe("hard_stop"));
-	it("uses custom policy", () => {
-		const custom = {
-			warningThreshold: 0.1,
-			compactThreshold: 0.2,
-			hardStopThreshold: 0.3,
-		};
-		expect(getPressureLevel(0.25, custom)).toBe("compact");
-	});
-});
-
-describe("createSessionScope", () => {
-	it("creates with defaults", () => {
-		const scope = createSessionScope("session-1");
-		expect(scope.id).toBe("session-1");
-		expect(scope.items).toEqual([]);
-		expect(scope.ttlMs).toBe(30 * 60 * 1000);
-		expect(scope.createdAt).toBeGreaterThan(0);
-	});
-});
-
-describe("setTTL", () => {
-	it("updates ttl", () => {
-		const scope = createSessionScope("s1");
-		const updated = setTTL(scope, 60_000);
-		expect(updated.ttlMs).toBe(60_000);
-		expect(updated.id).toBe("s1");
-	});
-});
-
-describe("addToScope", () => {
-	it("appends item", () => {
-		const scope = createSessionScope("s1");
-		const item = makeItem({ id: "i1" });
-		const updated = addToScope(scope, item);
-		expect(updated.items).toHaveLength(1);
-		expect(updated.items[0].id).toBe("i1");
-	});
-});
-
-describe("evictExpired", () => {
-	it("removes expired items", () => {
-		const scope = createSessionScope("s1");
-		const item1 = makeItem({ id: "i1", expiresAt: Date.now() + 10000 });
-		const item2 = makeItem({ id: "i2", expiresAt: Date.now() - 1000 });
-		const updated = addToScope(addToScope(scope, item1), item2);
-		const evicted = evictExpired(updated);
-		expect(evicted.items.map((i) => i.id)).toEqual(["i1"]);
-	});
-
-	it("keeps items without expiry", () => {
-		const scope = createSessionScope("s1");
-		const item = makeItem({ id: "i1" });
-		const updated = addToScope(scope, item);
-		expect(evictExpired(updated).items).toHaveLength(1);
-	});
-});
-
-describe("prioritize", () => {
-	it("sorts by priority ascending", () => {
-		const items = [
-			makeItem({ id: "low", priority: 9 }),
-			makeItem({ id: "high", priority: 1 }),
-			makeItem({ id: "mid", priority: 5 }),
-		];
-		const sorted = prioritize(items);
-		expect(sorted.map((i) => i.id)).toEqual(["high", "mid", "low"]);
-	});
-
-	it("respects limit", () => {
-		const items = [
-			makeItem({ id: "a", priority: 3 }),
-			makeItem({ id: "b", priority: 1 }),
-			makeItem({ id: "c", priority: 2 }),
-		];
-		expect(prioritize(items, 2)).toHaveLength(2);
-	});
-});
-
-describe("estimateTokens", () => {
-	it("counts chars/4", () => expect(estimateTokens("abcdefgh")).toBe(2));
-	it("rounds up", () => expect(estimateTokens("abc")).toBe(1));
-});
-
-describe("calculateTotalTokens", () => {
-	it("sums tokens", () => {
-		const items = [makeItem({ tokens: 10 }), makeItem({ tokens: 20 })];
-		expect(calculateTotalTokens(items)).toBe(30);
-	});
-	it("empty returns 0", () => expect(calculateTotalTokens([])).toBe(0));
-});
-
-describe("compactContext", () => {
-	it("extracts decisions", () => {
-		const items = [makeItem({ content: "DECISION: use tRPC for API" })];
-		const result = compactContext(items, 1000);
-		expect(result.decisions.length).toBeGreaterThan(0);
-	});
-
-	it("extracts questions", () => {
-		const items = [
-			makeItem({
-				content: "Should we use Redis? TODO: decide caching strategy",
-			}),
-		];
-		const result = compactContext(items, 1000);
-		expect(result.openQuestions.length).toBeGreaterThan(0);
-	});
-
-	it("respects maxTokens threshold", () => {
-		const items = [makeItem({ tokens: 100 })];
-		const result = compactContext(items, 50);
-		expect(result.remainingTokens).toBeLessThan(100);
-	});
-});
-
-describe("generateResumePrompt", () => {
-	it("creates prompt from result", () => {
-		const result = compactContext([], 1000);
-		const prompt = generateResumePrompt(result, "Continue with API");
-		expect(prompt.nextAction).toBe("Continue with API");
-		expect(prompt.decisions).toEqual([]);
-	});
-});
-
-describe("formatResumeMarkdown", () => {
-	it("includes headings", () => {
-		const prompt = generateResumePrompt(
-			{
-				decisions: ["Use tRPC"],
-				openQuestions: ["Which DB?"],
-				taskProgress: {},
-				remainingTokens: 100,
-				compactedContent: "",
-			},
-			"Continue",
-		);
-		const md = formatResumeMarkdown(prompt);
-		expect(md).toContain("# Resume Prompt");
-		expect(md).toContain("## Decisions");
-		expect(md).toContain("## Next Action");
-	});
-});

package/packages/context-manager/tsconfig.json

@@ -1,6 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": { "outDir": "./dist", "rootDir": "./src", "types": ["node"], "lib": ["ES2022"] },
-  "include": ["src/**/*"],
-  "exclude": ["node_modules", "dist", "test"]
-}

package/packages/cookie-sanitizer/README.md

@@ -1,141 +0,0 @@
-# @pi-harness/cookie-sanitizer
-
-> Forgiving input -> strict canonical cache for provider-quota mirroring.
-
-A normalization boundary that lets users drop **any** cookie file (any name, any format) into a known folder, and turns it into a single standard Netscape file the rest of the runtime can rely on.
-
-```
-~/.pi-harness-runtime/cookies/          <-  user drops anything here
-            |
-            ▼
-   Cookie Sanitizer                     <-  THIS PACKAGE
-            |
-            ▼
-~/.config/<provider>-cookies.txt        <-  canonical, runtime-owned
-            |
-            ▼
-   MiniMaxQuotaScraper (unchanged)      <-  reads only the canonical
-```
-
-## Why
-
-The previous design expected users to know the exact path (`~/.config/minimax-cookies.txt`) and the exact format (Netscape). On a fresh machine, no-one ever set this up — the scraper silently no-op'd and the footer lost its `5h:` / `week:` lines. This package is the discoverable, forgiving adapter between messy human input and the clean contract downstream code already understands.
-
-## What it accepts
-
-**Input formats** (auto-detected per file):
-
-1. **Netscape HTTP Cookie File** — the canonical format
-2. **EditThisCookie / Chrome devtools JSON export** — array of records in the Chrome/Edge cookie store shape
-
-**File names** — any name in the drop folder. Inference prefers:
-
-1. Filename hint (`minimax-*.txt`, `*claude*`, etc.) -> provider
-2. Dominant cookie domain (≥ 80% match) -> provider
-3. `providerHint` option overrides all of the above
-
-**Provider scope** — currently shipping with: `minimax`, `anthropic`, `openai`, `glm`, `openrouter`. The registry is open and inference by domain works for any provider whose cookies are in the drop folder.
-
-## Usage
-
-### One-shot sync
-
-```typescript
-import { sync } from "@pi-harness/cookie-sanitizer";
-
-const result = sync();
-
-if (result.wrote) {
-  console.log(`Synced ${result.totalCookies} cookies for ${result.provider} -> ${result.cachePath}`);
-} else {
-  console.log(`No-op: ${result.errors[0]?.message ?? "nothing to sync"}`);
-}
-```
-
-### Live watcher
-
-```typescript
-import { CookieWatcher } from "@pi-harness/cookie-sanitizer";
-
-const watcher = new CookieWatcher({
-  dropDir: "~/.pi-harness-runtime/cookies",
-  onEvent: (e) => {
-    if (e.kind === "sync-ok") console.log(`Synced ${e.cookies} cookies -> ${e.cachePath}`);
-    if (e.kind === "sync-error") console.error(`Sync error: ${e.message}`);
-  },
-});
-
-watcher.start();
-// ... later
-await watcher.stop();
-```
-
-### Custom drop folder / cache path
-
-```typescript
-import { sync } from "@pi-harness/cookie-sanitizer";
-
-const result = sync({
-  dropDir: "/var/spool/cookies",
-  cachePath: "/var/spool/canonical/minimax-cookies.txt",
-  providerHint: "minimax", // skip inference
-});
-```
-
-## Storage contract
-
-| Path | Owned by | Mode | Format |
-|---|---|---|---|
-| `~/.pi-harness-runtime/cookies/` | user (writes freely) | `0o644` | anything |
-| `~/.config/<provider>-cookies.txt` | sanitizer (single writer) | `0o600` | standard Netscape |
-
-The sanitizer is the **only** writer of the canonical cache. Manual edits are overwritten on next sync — by design. If you want a manual override, set `QUOTA_COOKIE_FILE` env var to a different path; the sanitizer will then skip its work and the scraper reads the override directly.
-
-## What is NOT logged
-
-- Cookie **values** — never. Diagnostics use file basenames and 64-char previews with values redacted.
-- Cookie **paths** (except the canonical cache path, which is a configuration location).
-- Cookie **domains** are OK to print (public).
-
-## Tests
-
-```bash
-bun test                 # all package tests
-bun test test/parse.test.ts
-bun test test/sync.test.ts
-```
-
-## Security
-
-- The canonical cache is `0o600` (owner R/W only) — atomic write with `0o600` parent, `fsync` before `rename`, `chmod` to `0o600` after rename.
-- The drop folder is gitignored by convention (`.gitleaks.toml` allowlists `cookies.txt` files in both locations).
-- `chokidar` v5 watches the drop folder; sandboxed to `depth: 2` so we don't follow symlinks into the rest of the home directory.
-
-## Files
-
-```
-src/
-+-- index.ts            # public API surface
-+-- types.ts            # canonical types
-+-- detect-format.ts    # Netscape vs JSON detection
-+-- parse-netscape.ts   # Netscape parser + serializer
-+-- parse-json.ts       # EditThisCookie JSON parser
-+-- normalize.ts        # dedupe, expire, domain-match
-+-- infer-provider.ts   # filename + domain inference
-+-- atomic-write.ts     # POSIX atomic write
-+-- sync.ts             # orchestrator
-+-- watcher.ts          # chokidar v5 wrapper
-
-test/
-+-- parse.test.ts       # 14 cases — Netscape + JSON
-+-- normalize.test.ts   # 12 cases — dedupe/expire/domain
-+-- infer.test.ts       # 13 cases — filename + domain + combined
-+-- sync.test.ts        # 12 cases — end-to-end
-+-- watcher.test.ts     # 2 cases — config sanity (chokidar is exercised live)
-```
-
-## Limitations
-
-- Watcher tests are light-touch (chokidar needs a real OS-level fs watcher). Real behavior is exercised by the live runtime.
-- Multi-format inputs (e.g. raw `Cookie:` headers, single-line `k=v`) are deferred. Add on demand.
-- Provider scope is currently hard-coded to a small set. Adding a new provider = adding an entry in `infer-provider.ts`.

package/packages/cookie-sanitizer/dist/atomic-write.d.ts

@@ -1,38 +0,0 @@
-/**
- * Atomic file write — write to temp, fsync, then rename.
- *
- * POSIX `rename(2)` is atomic — on partial-write crash, the prior target
- * file remains valid. We pair this with `fsync(tempfile)` so the temp
- * file's data is durable on disk before the rename.
- *
- * Permissions: `0o600` (owner R/W only) to keep the canonical cache
- * owner-readable.
- *
- * Sec-001: Cookie values go into the file content. The caller is
- * responsible for value-handling hygiene; this module just writes
- * bytes. We do not log the content.
- */
-import type { ProviderId } from "./types.js";
-/**
- * Atomically write `content` to `finalPath`.
- *
- * Steps:
- *   1. mkdir -p the parent directory
- *   2. write to <finalPath>.tmp.<rand>  with mode 0o600
- *   3. fsync the temp file
- *   4. rename temp → final  (atomic on POSIX)
- *   5. chmod final to 0o600  (in case rename preserved looser perms)
- *
- * Throws if any step fails. The original `finalPath` is unchanged
- * until step 4 succeeds.
- */
-export declare function atomicWriteFileSync(finalPath: string, content: string): void;
-/**
- * Compute the default cache path for a given provider, e.g.:
- *   defaultCachePathFor("minimax") → "~/.config/minimax-cookies.txt"
- *
- * The home directory is read via `process.env.HOME` so tests can
- * override it.
- */
-export declare function defaultCachePathFor(provider: ProviderId): string;
-//# sourceMappingURL=atomic-write.d.ts.map

package/packages/cookie-sanitizer/dist/atomic-write.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"atomic-write.d.ts","sourceRoot":"","sources":["../src/atomic-write.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAaH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAyB5E;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,UAAU,GAAG,MAAM,CAGhE"}

package/packages/cookie-sanitizer/dist/atomic-write.js

@@ -1,67 +0,0 @@
-/**
- * Atomic file write — write to temp, fsync, then rename.
- *
- * POSIX `rename(2)` is atomic — on partial-write crash, the prior target
- * file remains valid. We pair this with `fsync(tempfile)` so the temp
- * file's data is durable on disk before the rename.
- *
- * Permissions: `0o600` (owner R/W only) to keep the canonical cache
- * owner-readable.
- *
- * Sec-001: Cookie values go into the file content. The caller is
- * responsible for value-handling hygiene; this module just writes
- * bytes. We do not log the content.
- */
-import { mkdirSync, openSync, writeSync, fsyncSync, closeSync, renameSync, chmodSync, } from "node:fs";
-import { dirname, join } from "node:path";
-import { randomBytes } from "node:crypto";
-/**
- * Atomically write `content` to `finalPath`.
- *
- * Steps:
- *   1. mkdir -p the parent directory
- *   2. write to <finalPath>.tmp.<rand>  with mode 0o600
- *   3. fsync the temp file
- *   4. rename temp → final  (atomic on POSIX)
- *   5. chmod final to 0o600  (in case rename preserved looser perms)
- *
- * Throws if any step fails. The original `finalPath` is unchanged
- * until step 4 succeeds.
- */
-export function atomicWriteFileSync(finalPath, content) {
-    mkdirSync(dirname(finalPath), { recursive: true });
-    const rand = randomBytes(6).toString("hex");
-    const tempPath = `${finalPath}.tmp.${rand}`;
-    let fd;
-    try {
-        fd = openSync(tempPath, "w", 0o600);
-        writeSync(fd, Buffer.from(content, "utf8"));
-        fsyncSync(fd);
-    }
-    finally {
-        if (fd !== undefined)
-            closeSync(fd);
-    }
-    renameSync(tempPath, finalPath);
-    // Belt-and-braces in case rename preserved a looser mode from an
-    // existing file on some systems.
-    try {
-        chmodSync(finalPath, 0o600);
-    }
-    catch {
-        // Filesystems that don't support chmod (e.g. FAT32) are not a
-        // target platform here — drop the error silently.
-    }
-}
-/**
- * Compute the default cache path for a given provider, e.g.:
- *   defaultCachePathFor("minimax") → "~/.config/minimax-cookies.txt"
- *
- * The home directory is read via `process.env.HOME` so tests can
- * override it.
- */
-export function defaultCachePathFor(provider) {
-    const home = process.env.HOME ?? "/tmp";
-    return join(home, ".config", `${provider}-cookies.txt`);
-}
-//# sourceMappingURL=atomic-write.js.map

package/packages/cookie-sanitizer/dist/atomic-write.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"atomic-write.js","sourceRoot":"","sources":["../src/atomic-write.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACN,SAAS,EACT,QAAQ,EACR,SAAS,EACT,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,GACT,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAiB,EAAE,OAAe;IACrE,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnD,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,GAAG,SAAS,QAAQ,IAAI,EAAE,CAAC;IAE5C,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACJ,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACpC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5C,SAAS,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;YAAS,CAAC;QACV,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAEhC,iEAAiE;IACjE,iCAAiC;IACjC,IAAI,CAAC;QACJ,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACR,8DAA8D;QAC9D,kDAAkD;IACnD,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAoB;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC;IACxC,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,QAAQ,cAAc,CAAC,CAAC;AACzD,CAAC"}

package/packages/cookie-sanitizer/dist/detect-format.d.ts

@@ -1,36 +0,0 @@
-/**
- * Format detection — does the input look like Netscape or EditThisCookie JSON?
- *
- * Detection rule:
- *  - File extension `.json` AND first non-blank byte is `[` or `{`  →  JSON
- *  - File content has `# Netscape HTTP Cookie File` header OR
- *    ≥ 1 tab-separated 7-column row                              →  Netscape
- *  - Otherwise                                                    →  unknown
- *
- * Cookie VALUES are never copied into return values that get logged.
- * Only the basename and a 64-char prefix of the first non-blank line.
- */
-import type { CookieFileFormat, DetectedFile } from "./types.js";
-/**
- * Returns the basename only, never a path that could leak directory
- * structure. Safe to log.
- */
-export declare function safeBasename(filePath: string): string;
-/**
- * Safely truncated preview of a file's content (for diagnostics).
- * Strips cookie values to avoid leaking secrets.
- *
- * Heuristic: any line that has a tab-separated name=value pair,
- * replace the value column with `<redacted>`.
- */
-export declare function safePreview(text: string, maxChars?: number): string;
-/**
- * Detect the format of cookie file text.
- */
-export declare function detectFormat(text: string): CookieFileFormat | null;
-/**
- * Build a DetectedFile from a path and its text contents.
- * Used by sync.ts after reading the file from disk.
- */
-export declare function buildDetectedFile(filePath: string, text: string): DetectedFile;
-//# sourceMappingURL=detect-format.d.ts.map

package/packages/cookie-sanitizer/dist/detect-format.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"detect-format.d.ts","sourceRoot":"","sources":["../src/detect-format.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAKjE;;;GAGG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,SAAK,GAAG,MAAM,CAa/D;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CA+BlE;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAChC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACV,YAAY,CASd"}

package/packages/cookie-sanitizer/dist/detect-format.js

@@ -1,88 +0,0 @@
-/**
- * Format detection — does the input look like Netscape or EditThisCookie JSON?
- *
- * Detection rule:
- *  - File extension `.json` AND first non-blank byte is `[` or `{`  →  JSON
- *  - File content has `# Netscape HTTP Cookie File` header OR
- *    ≥ 1 tab-separated 7-column row                              →  Netscape
- *  - Otherwise                                                    →  unknown
- *
- * Cookie VALUES are never copied into return values that get logged.
- * Only the basename and a 64-char prefix of the first non-blank line.
- */
-import { basename } from "node:path";
-const HEADER_RE = /^# Netscape HTTP Cookie File/im;
-const MIN_TAB_COLS = 7;
-/**
- * Returns the basename only, never a path that could leak directory
- * structure. Safe to log.
- */
-export function safeBasename(filePath) {
-    return basename(filePath);
-}
-/**
- * Safely truncated preview of a file's content (for diagnostics).
- * Strips cookie values to avoid leaking secrets.
- *
- * Heuristic: any line that has a tab-separated name=value pair,
- * replace the value column with `<redacted>`.
- */
-export function safePreview(text, maxChars = 64) {
-    const firstLine = text
-        .split("\n")
-        .map((l) => l.trim())
-        .find((l) => l.length > 0) ?? "";
-    const redacted = firstLine
-        .split("\t")
-        .map((col, i) => (i >= 5 ? "<redacted>" : col))
-        .join("\t");
-    return redacted.length > maxChars
-        ? `${redacted.slice(0, maxChars)}…`
-        : redacted;
-}
-/**
- * Detect the format of cookie file text.
- */
-export function detectFormat(text) {
-    if (typeof text !== "string" || text.length === 0)
-        return null;
-    const trimmed = text.trimStart();
-    const firstByte = trimmed[0];
-    // JSON heuristic — array or object at the top.
-    if (firstByte === "[" || firstByte === "{") {
-        return "edit-this-cookie-json";
-    }
-    // Netscape heuristic — header OR a tab-separated 7-column row.
-    if (HEADER_RE.test(text)) {
-        return "netscape";
-    }
-    const lines = text.split(/\r?\n/);
-    for (const line of lines) {
-        if (!line || (line.startsWith("#") && !line.startsWith("#HttpOnly_"))) {
-            continue;
-        }
-        const trimmedLine = line.startsWith("#HttpOnly_")
-            ? line.slice("#HttpOnly_".length)
-            : line;
-        const cols = trimmedLine.split("\t");
-        if (cols.length >= MIN_TAB_COLS) {
-            return "netscape";
-        }
-    }
-    return null;
-}
-/**
- * Build a DetectedFile from a path and its text contents.
- * Used by sync.ts after reading the file from disk.
- */
-export function buildDetectedFile(filePath, text) {
-    const format = detectFormat(text);
-    return {
-        path: filePath,
-        basename: safeBasename(filePath),
-        format,
-        text,
-        // No error if format is null — unknown format is a normal case.
-    };
-}
-//# sourceMappingURL=detect-format.js.map

package/packages/cookie-sanitizer/dist/detect-format.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"detect-format.js","sourceRoot":"","sources":["../src/detect-format.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAGrC,MAAM,SAAS,GAAG,gCAAgC,CAAC;AACnD,MAAM,YAAY,GAAG,CAAC,CAAC;AAEvB;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC5C,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,QAAQ,GAAG,EAAE;IACtD,MAAM,SAAS,GACd,IAAI;SACF,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,SAAS;SACxB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;SAC9C,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,QAAQ,CAAC,MAAM,GAAG,QAAQ;QAChC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG;QACnC,CAAC,CAAC,QAAQ,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACxC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE/D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAE7B,+CAA+C;IAC/C,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;QAC5C,OAAO,uBAAuB,CAAC;IAChC,CAAC;IAED,+DAA+D;IAC/D,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,UAAU,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YACvE,SAAS;QACV,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAChD,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC;YACjC,CAAC,CAAC,IAAI,CAAC;QACR,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;YACjC,OAAO,UAAU,CAAC;QACnB,CAAC;IACF,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAChC,QAAgB,EAChB,IAAY;IAEZ,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO;QACN,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC;QAChC,MAAM;QACN,IAAI;QACJ,gEAAgE;KAChE,CAAC;AACH,CAAC"}

package/packages/cookie-sanitizer/dist/index.d.ts

@@ -1,41 +0,0 @@
-/**
- * Cookie Sanitizer — public API.
- *
- * Forgiving input → strict canonical cache for downstream consumers
- * (e.g. MiniMaxQuotaScraper reads only `~/.config/minimax-cookies.txt`).
- *
- * The package is provider-agnostic but currently shipping with:
- *   - filename hints: minimax, anthropic, openai, glm, openrouter
- *   - domain hints : the matching provider domains
- *
- * Inputs accepted (auto-detected per file):
- *   - Netscape HTTP Cookie File
- *   - EditThisCookie / Chrome devtools JSON export
- *
- * @example
- * ```typescript
- * import { sync, hasAnyCookieSource, CookieWatcher } from "@pi-harness/cookie-sanitizer";
- *
- * // One-shot sync.
- * const result = sync();
- * console.log(result.provider, result.cachePath, result.totalCookies);
- *
- * // Live updates.
- * const watcher = new CookieWatcher({
- *   dropDir: "~/.pi-harness-runtime/cookies",
- *   onEvent: (e) => console.log(e),
- * });
- * watcher.start();
- * ```
- */
-export { sync, hasAnyCookieSource, inferCachePath, enumerateDropFiles, readInputFile, DEFAULT_DROP_DIR, } from "./sync.js";
-export { parseNetscape, serializeNetscape, } from "./parse-netscape.js";
-export { parseEditThisCookieJson } from "./parse-json.js";
-export { inferProvider, inferProviderFromFilename, inferProviderFromCookies, knownProviders, } from "./infer-provider.js";
-export { normalize, domainMatchesProvider, isExpired, } from "./normalize.js";
-export { detectFormat, buildDetectedFile, safeBasename, safePreview, } from "./detect-format.js";
-export { atomicWriteFileSync, defaultCachePathFor, } from "./atomic-write.js";
-export { CookieWatcher, createWatcher, defaultDropDir, } from "./watcher.js";
-export type { CanonicalCookie, CookieFileFormat, DetectedFile, ProviderId, SyncOptions, SyncResult, WatcherEvent, } from "./types.js";
-export type { CookieWatcherConfig } from "./watcher.js";
-//# sourceMappingURL=index.d.ts.map

package/packages/cookie-sanitizer/dist/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EACN,IAAI,EACJ,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,gBAAgB,GAChB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACN,aAAa,EACb,iBAAiB,GACjB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE1D,OAAO,EACN,aAAa,EACb,yBAAyB,EACzB,wBAAwB,EACxB,cAAc,GACd,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACN,SAAS,EACT,qBAAqB,EACrB,SAAS,GACT,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACN,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,WAAW,GACX,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACN,mBAAmB,EACnB,mBAAmB,GACnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACN,aAAa,EACb,aAAa,EACb,cAAc,GACd,MAAM,cAAc,CAAC;AAEtB,YAAY,EACX,eAAe,EACf,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,WAAW,EACX,UAAU,EACV,YAAY,GACZ,MAAM,YAAY,CAAC;AAEpB,YAAY,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC"}