shennian 0.5.12 → 0.5.13

package/dist/src/agents/cursor.js

@@ -1 +1 @@
-import{createInterface as d}from"node:readline";import{randomUUID as l}from"node:crypto";import{AgentAdapter as c,registerAgent as h}from"./adapter.js";import{resolveBuiltinCommand as u,spawnResolvedCommand as m}from"./command-spec.js";import{spawnEnoentError as g}from"./spawn-errors.js";import{buildAgentProcessEnv as f,buildManagedAgentProcessEnv as p,buildManagedNativeFullProcessEnv as v}from"../agent-env.js";import{buildInlineChannelPreamble as E}from"./platform-instructions.js";import{resolveManagedAgentAdapterEnforcement as w,isManagedAgentNativeFull as k}from"../security/managed-agent-policy.js";import{registerManagedAgentRuntimeSecurity as y}from"../security/managed-agent-runtime.js";import{compileCursorManagedPermissions as C,createCursorManagedConfigDirectory as x,CURSOR_MANAGED_RUNTIME_SECURITY as I,disposeCursorManagedConfigDirectory as D}from"./cursor-managed-permissions.js";y("cursor",I);class A extends c{type="cursor";get recoveryCapabilities(){return{inspectTerminal:!1,reattachRun:!1,resumeRun:!1,resumeSession:!0}}process=null;chatId=null;workDir=null;seq=0;runId="";emittedText="";externalChannel=null;shennianSessionId=null;extraEnv={};managedAgentPolicy=null;managedConfigDir=null;configure(t){this.shennianSessionId=t.sessionId??null,this.externalChannel=t.externalChannel??null,this.extraEnv=t.env??{},"managedAgentPolicy"in t&&(this.managedAgentPolicy=t.managedAgentPolicy??null),this.managedAgentPolicy&&(this.workDir=this.managedAgentPolicy.adapterPolicy.workDir)}async start(t,s,e){this.workDir=this.managedAgentPolicy?.adapterPolicy.workDir??s,this.seq=0,e&&(this.chatId=e)}async send(t,s,e,n,o,r){if(r?.source==="room_activation"&&!this.managedAgentPolicy)throw new Error("managed_agent_policy_missing");await this.killProcess(),this.runId=l(),this.resetRunState();const i=`${E(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0,o)}${t}`;await this.spawnAndParse(this.buildSendArgs(i,s))}async resume(t){await this.killProcess(),this.chatId=t,this.runId=l(),this.resetRunState(),await this.spawnAndParse(["--resume",t,"--output-format","stream-json","--stream-partial-output"])}async stop(){await this.killProcess()}buildSendArgs(t,s){const e=["-p",t,"--output-format","stream-json","--stream-partial-output"];return s&&e.push("--model",s),this.chatId&&e.push("--resume",this.chatId),e}async spawnAndParse(t){const s=u("cursor");if(!s){this.emit("error",new Error('Cursor Agent CLI not found. Expected "agent" or "cursor agent".'));return}const e=await this.prepareManagedLaunch();let n;try{n=m(s,[...t,...e.args],{cwd:this.workDir??void 0,stdio:["ignore","pipe","pipe"],env:e.env})}catch(i){throw await this.disposeManagedConfig(e.configDir),i}this.process=n,this.managedConfigDir=e.configDir,d({input:n.stdout}).on("line",i=>{if(i.trim())try{const a=JSON.parse(i);this.handleStreamEvent(a)}catch{this.emitEvent({state:"delta",text:i})}});let r="";n.stderr?.on("data",i=>{r+=i.toString()}),n.on("close",i=>{if(this.process===n&&(this.process=null,this.disposeManagedConfig(e.configDir),i!==0&&i!==null)){const a=r.trim()||`cursor agent exited with code ${i}`;this.emitEvent({state:"error",message:a})}}),n.on("error",i=>{this.process===n&&(this.process=null,this.disposeManagedConfig(e.configDir),i.code==="ENOENT"?this.emit("error",g(this.workDir,'Command "cursor" not found. Is Cursor CLI installed?')):this.emit("error",i))})}async prepareManagedLaunch(){const t=this.managedAgentPolicy;if(!t)return{args:["--trust"],env:f(this.extraEnv),configDir:null};if(k(t))return{args:["--trust"],env:v(this.extraEnv),configDir:null};const s=C(w(t),t.adapterPolicy.workDir),e=await x(s),n=p({agentType:"cursor",providerEnv:this.extraEnv,sessionEnv:this.extraEnv,runtimeEnv:{NO_COLOR:"1"}});return n.CURSOR_CONFIG_DIR=e,{args:s.args,env:n,configDir:e}}async disposeManagedConfig(t){t&&(this.managedConfigDir===t&&(this.managedConfigDir=null),await D(t).catch(()=>{}))}handleStreamEvent(t){switch(t.session_id&&!this.chatId&&(this.chatId=t.session_id),t.chat_id&&!this.chatId&&(this.chatId=t.chat_id),t.type??t.event){case"system":break;case"assistant":{if(t.message?.content){if(!this.isLiveAssistantDelta(t))break;for(const e of t.message.content)e.type==="text"&&e.text?this.emitTextDelta(e.text):e.type==="thinking"&&e.thinking?this.emitEvent({state:"delta",text:e.thinking,thinking:!0}):e.type==="tool_use"&&this.emitEvent({state:"tool-call",name:e.name,args:e.input});break}(t.delta??t.text)&&this.emitEvent({state:"delta",text:t.delta??t.text});break}case"user":break;case"result":{if(t.subtype==="success"||!t.is_error){this.emitFinalResultDelta(t.result);const e=t.usage;this.emitEvent({state:"final",agentSessionId:this.chatId??void 0,usage:e?{inputTokens:e.inputTokens??e.input_tokens??0,outputTokens:e.outputTokens??e.output_tokens??0}:void 0})}else this.emitEvent({state:"error",message:t.result??t.error??"unknown error"});break}case"error":{this.emitEvent({state:"error",message:t.error??"unknown error"});break}case"text":case"delta":case"content":{const e=t.delta??t.text;e&&this.emitEvent({state:"delta",text:e});break}case"done":{this.emitEvent({state:"final",agentSessionId:this.chatId??void 0});break}default:t.done?this.emitEvent({state:"final",agentSessionId:this.chatId??void 0}):(t.delta??t.text)&&this.emitEvent({state:"delta",text:t.delta??t.text})}}emitEvent(t){const s={...t,runId:this.runId,seq:this.seq++};this.emit("agentEvent",s)}async killProcess(){const t=this.process;if(!t){await this.disposeManagedConfig(this.managedConfigDir);return}this.process=null,t.kill("SIGTERM"),await new Promise(s=>{t.on("close",s),setTimeout(()=>{t.kill("SIGKILL"),s()},3e3)}),await this.disposeManagedConfig(this.managedConfigDir)}resetRunState(){this.seq=0,this.emittedText=""}isLiveAssistantDelta(t){return t.timestamp_ms!=null&&!t.model_call_id}emitTextDelta(t){t&&(this.emittedText+=t,this.emitEvent({state:"delta",text:t}))}emitFinalResultDelta(t){if(!t)return;if(!this.emittedText){this.emitTextDelta(t);return}if(!t.startsWith(this.emittedText))return;const s=t.slice(this.emittedText.length);s&&this.emitTextDelta(s)}}h("cursor",()=>new A);export{A as CursorAdapter};
+import{createInterface as c}from"node:readline";import{randomUUID as d}from"node:crypto";import{AgentAdapter as h,registerAgent as u}from"./adapter.js";import{resolveBuiltinCommand as m,spawnResolvedCommand as g}from"./command-spec.js";import{spawnEnoentError as f}from"./spawn-errors.js";import{buildAgentProcessEnv as p,buildManagedAgentProcessEnv as v,buildManagedNativeFullProcessEnv as E}from"../agent-env.js";import{buildInlineChannelPreamble as y}from"./platform-instructions.js";import{resolveManagedAgentAdapterEnforcement as w,isManagedAgentNativeFull as k}from"../security/managed-agent-policy.js";import{assertPublicAgentPolicy as C}from"../security/public-agent-policy.js";import{registerManagedAgentRuntimeSecurity as I}from"../security/managed-agent-runtime.js";import{compileCursorManagedPermissions as x,createCursorManagedConfigDirectory as D,CURSOR_MANAGED_RUNTIME_SECURITY as A,disposeCursorManagedConfigDirectory as P}from"./cursor-managed-permissions.js";I("cursor",A);class _ extends h{type="cursor";get recoveryCapabilities(){return{inspectTerminal:!1,reattachRun:!1,resumeRun:!1,resumeSession:!0}}process=null;chatId=null;workDir=null;seq=0;runId="";emittedText="";externalChannel=null;shennianSessionId=null;extraEnv={};managedAgentPolicy=null;managedConfigDir=null;configure(e){this.shennianSessionId=e.sessionId??null,this.externalChannel=e.externalChannel??null,this.extraEnv=e.env??{},"managedAgentPolicy"in e&&(this.managedAgentPolicy=e.managedAgentPolicy??null),this.managedAgentPolicy&&(this.workDir=this.managedAgentPolicy.adapterPolicy.workDir)}async start(e,s,t){this.workDir=this.managedAgentPolicy?.adapterPolicy.workDir??s,this.seq=0,t&&(this.chatId=t)}async send(e,s,t,r,n,a){if(a?.source==="published_agent"&&C(this.managedAgentPolicy),a?.source==="room_activation"&&!this.managedAgentPolicy)throw new Error("managed_agent_policy_missing");await this.killProcess(),this.runId=d(),this.resetRunState();const o=`${y(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0,n)}${e}`;await this.spawnAndParse(this.buildSendArgs(o,s),a?.source==="published_agent")}async resume(e){await this.killProcess(),this.chatId=e,this.runId=d(),this.resetRunState(),await this.spawnAndParse(["--resume",e,"--output-format","stream-json","--stream-partial-output"])}async stop(){await this.killProcess()}buildSendArgs(e,s){const t=["-p",e,"--output-format","stream-json","--stream-partial-output"];return s&&t.push("--model",s),this.chatId&&t.push("--resume",this.chatId),t}async spawnAndParse(e,s=!1){const t=m("cursor");if(!t){this.emit("error",new Error('Cursor Agent CLI not found. Expected "agent" or "cursor agent".'));return}const r=await this.prepareManagedLaunch(s);let n;try{n=g(t,[...e,...r.args],{cwd:this.workDir??void 0,stdio:["ignore","pipe","pipe"],env:r.env})}catch(i){throw await this.disposeManagedConfig(r.configDir),i}this.process=n,this.managedConfigDir=r.configDir,c({input:n.stdout}).on("line",i=>{if(i.trim())try{const l=JSON.parse(i);this.handleStreamEvent(l)}catch{this.emitEvent({state:"delta",text:i})}});let o="";n.stderr?.on("data",i=>{o+=i.toString()}),n.on("close",i=>{if(this.process===n&&(this.process=null,this.disposeManagedConfig(r.configDir),i!==0&&i!==null)){const l=o.trim()||`cursor agent exited with code ${i}`;this.emitEvent({state:"error",message:l})}}),n.on("error",i=>{this.process===n&&(this.process=null,this.disposeManagedConfig(r.configDir),i.code==="ENOENT"?this.emit("error",f(this.workDir,'Command "cursor" not found. Is Cursor CLI installed?')):this.emit("error",i))})}async prepareManagedLaunch(e=!1){const s=this.managedAgentPolicy;if(!s)return{args:["--trust"],env:p(this.extraEnv),configDir:null};if(k(s))return{args:["--trust"],env:E(this.extraEnv),configDir:null};const t=x(w(s),s.adapterPolicy.workDir,{publicTurn:e}),r=await D(t),n=v({agentType:"cursor",providerEnv:this.extraEnv,sessionEnv:this.extraEnv,runtimeEnv:{NO_COLOR:"1"}});return n.CURSOR_CONFIG_DIR=r,{args:t.args,env:n,configDir:r}}async disposeManagedConfig(e){e&&(this.managedConfigDir===e&&(this.managedConfigDir=null),await P(e).catch(()=>{}))}handleStreamEvent(e){switch(e.session_id&&!this.chatId&&(this.chatId=e.session_id,this.emit("nativeSession","cursor",e.session_id)),e.chat_id&&!this.chatId&&(this.chatId=e.chat_id,this.emit("nativeSession","cursor",e.chat_id)),e.type??e.event){case"system":break;case"assistant":{if(e.message?.content){if(!this.isLiveAssistantDelta(e))break;for(const t of e.message.content)t.type==="text"&&t.text?this.emitTextDelta(t.text):t.type==="thinking"&&t.thinking?this.emitEvent({state:"delta",text:t.thinking,thinking:!0}):t.type==="tool_use"&&this.emitEvent({state:"tool-call",name:t.name,args:t.input});break}(e.delta??e.text)&&this.emitEvent({state:"delta",text:e.delta??e.text});break}case"user":break;case"result":{if(e.subtype==="success"||!e.is_error){this.emitFinalResultDelta(e.result);const t=e.usage;this.emitEvent({state:"final",agentSessionId:this.chatId??void 0,usage:t?{inputTokens:t.inputTokens??t.input_tokens??0,outputTokens:t.outputTokens??t.output_tokens??0}:void 0})}else this.emitEvent({state:"error",message:e.result??e.error??"unknown error"});break}case"error":{this.emitEvent({state:"error",message:e.error??"unknown error"});break}case"text":case"delta":case"content":{const t=e.delta??e.text;t&&this.emitEvent({state:"delta",text:t});break}case"done":{this.emitEvent({state:"final",agentSessionId:this.chatId??void 0});break}default:e.done?this.emitEvent({state:"final",agentSessionId:this.chatId??void 0}):(e.delta??e.text)&&this.emitEvent({state:"delta",text:e.delta??e.text})}}emitEvent(e){const s={...e,runId:this.runId,seq:this.seq++};this.emit("agentEvent",s)}async killProcess(){const e=this.process;if(!e){await this.disposeManagedConfig(this.managedConfigDir);return}this.process=null,e.kill("SIGTERM"),await new Promise(s=>{e.on("close",s),setTimeout(()=>{e.kill("SIGKILL"),s()},3e3)}),await this.disposeManagedConfig(this.managedConfigDir)}resetRunState(){this.seq=0,this.emittedText=""}isLiveAssistantDelta(e){return e.timestamp_ms!=null&&!e.model_call_id}emitTextDelta(e){e&&(this.emittedText+=e,this.emitEvent({state:"delta",text:e}))}emitFinalResultDelta(e){if(!e)return;if(!this.emittedText){this.emitTextDelta(e);return}if(!e.startsWith(this.emittedText))return;const s=e.slice(this.emittedText.length);s&&this.emitTextDelta(s)}}u("cursor",()=>new _);export{_ as CursorAdapter};

package/dist/src/agents/custom.js

@@ -1,5 +1,5 @@
-import{createInterface as g}from"node:readline";import{createHash as f,randomUUID as a}from"node:crypto";import{AgentAdapter as w,registerAgent as P}from"./adapter.js";import{spawnCommandString as l}from"./command-spec.js";import{buildAgentProcessEnv as v,buildManagedAgentProcessEnv as S,buildManagedNativeFullProcessEnv as y}from"../agent-env.js";import{buildInlineChannelPreamble as u,buildPlatformInstructions as D}from"./platform-instructions.js";import{isManagedAgentNativeFull as C}from"../security/managed-agent-policy.js";import{collectPolicyEnforcementGaps as I}from"../security/managed-agent-runtime.js";import{assessCustomRuntimeSecurity as E,createCustomManagedPolicyFile as R,CUSTOM_RUNTIME_POLICY_ENV as x,disposeCustomManagedPolicyFile as b,registerCustomRuntimeSecurity as k,resolveCustomRuntimeExecutableFingerprint as p}from"./custom-managed-runtime.js";import{hasCustomResumeConformance as q,recordCustomResumeConformance as _}from"./custom-recovery-conformance.js";const m=3e3;class A extends w{type;get recoveryCapabilities(){return{inspectTerminal:!1,reattachRun:!1,resumeRun:!1,resumeSession:this.entry.caps.resume===!0&&this.resumeConformant}}command;mode;proactive;entry;sessionId=null;agentSessionId=null;workDir=null;runId="";seq=0;externalChannel=null;shennianSessionId=null;extraEnv={};managedAgentPolicy=null;managedConfigDir=null;configurationRestartRequired=!1;executableFingerprint;resumeConformant;expectedResumedSessionId=null;stoppingStdioProcess=!1;pendingProtocolRequests=new Map;stdioProcess=null;spawnProcess=null;dispatchGuard=null;dispatchObservedEvent=!1;constructor(e,t){super(),this.type=`custom:${e}`,this.entry=t,this.command=t.command,this.mode=t.caps.mode,this.proactive=t.caps.proactive??!1,this.executableFingerprint=p(t),this.resumeConformant=q(this.type,this.executableFingerprint,t.caps.version)}get usesNodeStdioV2(){return this.entry.caps.protocol==="shennian-node-stdio"&&this.entry.caps.protocolVersion===2}async start(e,t,s){if(this.sessionId=e,this.workDir=this.managedAgentPolicy?.adapterPolicy.workDir??t,this.seq=0,s&&(this.agentSessionId=s,this.expectedResumedSessionId=s),this.mode==="stdio"){if(await this.startStdioProcess(),this.usesNodeStdioV2){const i=await this.sendProtocolRequest("start",{sessionId:e,workDir:this.workDir});i?.nativeSessionId&&(this.agentSessionId=i.nativeSessionId)}s&&await this.resume(s)}}configure(e){const t=this.configurationFingerprint();this.shennianSessionId=e.sessionId??null,this.externalChannel=e.externalChannel??null,this.extraEnv=e.env??{},"managedAgentPolicy"in e&&(this.managedAgentPolicy=e.managedAgentPolicy??null),this.managedAgentPolicy&&(this.workDir=this.managedAgentPolicy.adapterPolicy.workDir),t!==this.configurationFingerprint()&&(this.stdioProcess||this.spawnProcess)&&(this.configurationRestartRequired=!0)}async send(e,t,s,i,n,r){if(r?.source==="room_activation"&&!this.managedAgentPolicy)throw new Error("managed_agent_policy_missing");if(this.configurationRestartRequired&&(this.mode==="stdio"?await this.stopStdioProcess():await this.killSpawnProcess(),this.configurationRestartRequired=!1),this.runId=a(),this.seq=0,this.mode==="stdio")if(this.usesNodeStdioV2)await this.sendStdioV2(e,D(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0,n),t,s,i);else{const o=`${u(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0,n)}${e}`;await this.sendStdio(o,t)}else{const o=`${u(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0,n)}${e}`;await this.runSpawn(o,t)}}async resume(e){if(this.mode==="stdio"){if(this.usesNodeStdioV2){const s=await this.sendProtocolRequest("resume",{sessionId:this.sessionId,nativeSessionId:e});this.agentSessionId=s?.nativeSessionId??e;return}const t=JSON.stringify({method:"resume",id:a(),params:{sessionId:this.sessionId,agentSessionId:e}});this.stdioProcess?.stdin?.write(t+`
-`)}}async stop(){this.mode==="stdio"?await this.stopStdioProcess():await this.killSpawnProcess()}async runSpawn(e,t){await this.killSpawnProcess();const s=this.startDispatchGuard();this.dispatchObservedEvent=!1;const i=["/run","--workdir",this.workDir??process.cwd()];this.sessionId&&i.push("--session",this.sessionId),this.agentSessionId&&i.push("--resume",this.agentSessionId),t&&i.push("--model",t);const n=await this.prepareManagedLaunch();let r;try{r=l(this.command,i,{cwd:this.workDir??void 0,stdio:["pipe","pipe","pipe"],env:n.env})}catch(o){throw await this.disposeManagedConfig(n.configDir),o}this.spawnProcess=r,this.managedConfigDir=n.configDir,this.attachOutputHandlers(r,()=>{this.spawnProcess===r&&(this.spawnProcess=null),this.disposeManagedConfig(n.configDir)}),r.stdin?.once("error",o=>this.rejectDispatch(o)),r.stdin?.write(e),r.stdin?.end(),await s.promise}async killSpawnProcess(){const e=this.spawnProcess;if(!e){await this.disposeManagedConfig(this.managedConfigDir);return}this.spawnProcess=null,e.kill("SIGTERM"),await new Promise(t=>{e.on("close",t),setTimeout(()=>{e.kill("SIGKILL"),t()},3e3)}),await this.disposeManagedConfig(this.managedConfigDir)}async startStdioProcess(){const e=await this.prepareManagedLaunch();let t;try{t=l(this.command,["/start","--workdir",this.workDir??process.cwd()],{cwd:this.workDir??void 0,stdio:["pipe","pipe","pipe"],env:e.env})}catch(s){throw await this.disposeManagedConfig(e.configDir),s}this.stdioProcess=t,this.managedConfigDir=e.configDir,this.attachOutputHandlers(t,()=>{this.stdioProcess===t&&(this.stdioProcess=null,this.disposeManagedConfig(e.configDir),this.stoppingStdioProcess||this.emit("error",new Error("Custom agent process exited unexpectedly")))})}async sendStdio(e,t){this.stdioProcess||await this.startStdioProcess();const s=this.startDispatchGuard();this.dispatchObservedEvent=!1;const i=JSON.stringify({method:"send",id:a(),params:{sessionId:this.sessionId,text:e,modelId:t}});this.stdioProcess?.stdin?.once("error",n=>this.rejectDispatch(n)),this.stdioProcess?.stdin?.write(i+`
-`),await s.promise}async sendStdioV2(e,t,s,i,n){this.stdioProcess||(await this.startStdioProcess(),await this.sendProtocolRequest("start",{sessionId:this.sessionId,workDir:this.workDir})),this.dispatchObservedEvent=!1,await this.sendProtocolRequest("send",{sessionId:this.sessionId,text:e,systemPrompt:t,modelId:s,reasoningEffort:i,attachments:n?.map(r=>({path:r.path,name:r.name,mime:r.mimeType}))??[]})}async stopStdioProcess(){const e=this.stdioProcess;if(!e){await this.disposeManagedConfig(this.managedConfigDir);return}this.stoppingStdioProcess=!0;const t=new Promise(s=>{const i=setTimeout(()=>{e.kill("SIGTERM"),setTimeout(()=>{e.kill("SIGKILL"),s()},3e3)},5e3);e.on("close",()=>{clearTimeout(i),s()})});if(this.usesNodeStdioV2)await this.sendProtocolRequest("stop",{}).catch(()=>{});else{const s=JSON.stringify({method:"stop",id:a()});e.stdin?.write(s+`
-`)}await t,this.stdioProcess=null,await this.disposeManagedConfig(this.managedConfigDir),this.stoppingStdioProcess=!1}async prepareManagedLaunch(){const e=this.managedAgentPolicy;if(!e)return{env:v(this.extraEnv),configDir:null};if(C(e))return{env:y(this.extraEnv),configDir:null};const t=p(this.entry);if(!e.enforcement.executableFingerprint||t!==e.enforcement.executableFingerprint)throw new Error("custom_managed_runtime_executable_changed");if(e.enforcement.level!=="unverified")throw new Error("custom_managed_runtime_protection_must_be_unverified");const s=E(this.entry);if(s.state==="declared"&&e.enforcement.runtimeVersion!==this.entry.caps.version)throw new Error("custom_managed_runtime_version_changed");if(s.state==="declared"){const r=s.declaration.platforms[e.enforcement.platform],o=I(e.requestedPolicy,r??null);if(o.unavailableCapabilities.length>0)throw new Error(`custom_managed_runtime_capability_unavailable:${o.unavailableCapabilities.join(",")}`)}const i=S({agentType:this.type,providerEnv:this.extraEnv,sessionEnv:this.extraEnv,runtimeEnv:{NO_COLOR:"1"}});if(s.state==="unverified")return{env:i,configDir:null};const n=await R(e);return i[x]=n.policyPath,{env:i,configDir:n.directory}}async disposeManagedConfig(e){e&&(this.managedConfigDir===e&&(this.managedConfigDir=null),await b(e).catch(()=>{}))}configurationFingerprint(){const e=Object.keys(this.extraEnv).sort().map(t=>[t,this.extraEnv[t]??null]);return f("sha256").update(JSON.stringify({sessionId:this.shennianSessionId,externalChannel:this.externalChannel,env:e,managedAgentPolicy:this.managedAgentPolicy})).digest("hex")}attachOutputHandlers(e,t){g({input:e.stdout}).on("line",n=>{if(n.trim())try{const r=JSON.parse(n);"type"in r&&r.type==="response"?this.handleProtocolResponse(r):"type"in r&&r.type==="event"?this.handleProtocolEvent({...r.event,agentSessionId:r.event.nativeSessionId}):this.handleProtocolEvent(r)}catch{}});let i="";e.stderr?.on("data",n=>{i+=n.toString()}),e.on("close",n=>{if(t(),this.rejectPendingProtocolRequests(new Error(`Custom agent process exited with code ${n??"unknown"}`)),n!==0&&n!==null){const r=i.trim()||`Agent exited with code ${n}`;this.rejectDispatch(new Error(r)),this.emitEvent({state:"error",message:r})}else this.dispatchObservedEvent?this.acceptDispatch():this.rejectDispatch(new Error("Custom agent exited without protocol events"))}),e.on("error",n=>{t(),this.rejectDispatch(n),this.emit("error",n)})}handleProtocolResponse(e){if(!e.id)return;const t=this.pendingProtocolRequests.get(e.id);if(t){if(clearTimeout(t.timer),this.pendingProtocolRequests.delete(e.id),e.ok){t.resolve(e.result);return}t.reject(new Error(e.error?.message??e.error?.code??"Adapter request failed"))}}sendProtocolRequest(e,t){const s=this.stdioProcess?.stdin;if(!s?.writable)return Promise.reject(new Error("Custom adapter stdio is not writable"));const i=a();return new Promise((n,r)=>{const o=setTimeout(()=>{this.pendingProtocolRequests.delete(i),r(new Error(`Timed out waiting for custom adapter ${e} response`))},e==="send"?m:5e3);this.pendingProtocolRequests.set(i,{resolve:n,reject:r,timer:o}),s.write(`${JSON.stringify({protocolVersion:2,id:i,method:e,params:t})}
-`,h=>{if(!h)return;const d=this.pendingProtocolRequests.get(i);d&&(clearTimeout(d.timer),this.pendingProtocolRequests.delete(i),d.reject(h))})})}rejectPendingProtocolRequests(e){for(const t of this.pendingProtocolRequests.values())clearTimeout(t.timer),t.reject(e);this.pendingProtocolRequests.clear()}handleProtocolEvent(e){const{state:t}=e;if(t)switch(this.dispatchObservedEvent=!0,t){case"delta":this.acceptDispatch(),this.emitEvent({state:"delta",text:e.text??"",thinking:e.thinking});break;case"final":this.acceptDispatch(),this.expectedResumedSessionId&&e.agentSessionId===this.expectedResumedSessionId&&this.executableFingerprint&&(_(this.type,this.executableFingerprint,this.entry.caps.version),this.resumeConformant=!0,this.expectedResumedSessionId=null),e.agentSessionId&&(this.agentSessionId=e.agentSessionId),this.emitEvent({state:"final",usage:e.usage,agentSessionId:this.agentSessionId??void 0});break;case"error":this.rejectDispatch(new Error(e.message??"unknown error")),this.emitEvent({state:"error",message:e.message??"unknown error"});break;case"tool-call":this.acceptDispatch(),this.emitEvent({state:"tool-call",name:e.name??"",args:e.args});break;case"tool-result":this.acceptDispatch(),this.emitEvent({state:"tool-result",name:e.name??"",result:e.result??""});break;case"notify":this.acceptDispatch(),this.emitEvent({state:"notify",text:e.text??"",title:e.title,source:e.source});break}}startDispatchGuard(){this.acceptDispatch();let e;const t=new Promise((s,i)=>{e={settled:!1,timer:setTimeout(()=>this.acceptDispatch(e),m),resolve:s,reject:i,promise:Promise.resolve()}});return e.promise=t,this.dispatchGuard=e,e}acceptDispatch(e=this.dispatchGuard){!e||e.settled||(e.settled=!0,clearTimeout(e.timer),this.dispatchGuard===e&&(this.dispatchGuard=null),e.resolve())}rejectDispatch(e,t=this.dispatchGuard){!t||t.settled||(t.settled=!0,clearTimeout(t.timer),this.dispatchGuard===t&&(this.dispatchGuard=null),t.reject(e))}emitEvent(e){const t={...e,runId:this.runId,seq:this.seq++};this.emit("agentEvent",t)}}function J(c,e){const t=`custom:${c}`;k(t,e),P(t,()=>new A(c,e))}export{A as CustomAgentAdapter,J as registerCustomAgent};
+import{createInterface as g}from"node:readline";import{createHash as f,randomUUID as a}from"node:crypto";import{AgentAdapter as w,registerAgent as P}from"./adapter.js";import{spawnCommandString as l}from"./command-spec.js";import{buildAgentProcessEnv as v,buildManagedAgentProcessEnv as S,buildManagedNativeFullProcessEnv as y}from"../agent-env.js";import{buildInlineChannelPreamble as u,buildPlatformInstructions as D}from"./platform-instructions.js";import{isManagedAgentNativeFull as C}from"../security/managed-agent-policy.js";import{assertPublicAgentPolicy as I}from"../security/public-agent-policy.js";import{collectPolicyEnforcementGaps as E}from"../security/managed-agent-runtime.js";import{assessCustomRuntimeSecurity as R,createCustomManagedPolicyFile as b,CUSTOM_RUNTIME_POLICY_ENV as x,disposeCustomManagedPolicyFile as k,registerCustomRuntimeSecurity as _,resolveCustomRuntimeExecutableFingerprint as p}from"./custom-managed-runtime.js";import{hasCustomResumeConformance as q,recordCustomResumeConformance as A}from"./custom-recovery-conformance.js";const m=3e3;class M extends w{type;get recoveryCapabilities(){return{inspectTerminal:!1,reattachRun:!1,resumeRun:!1,resumeSession:this.entry.caps.resume===!0&&this.resumeConformant}}command;mode;proactive;entry;sessionId=null;agentSessionId=null;workDir=null;runId="";seq=0;externalChannel=null;shennianSessionId=null;extraEnv={};managedAgentPolicy=null;managedConfigDir=null;configurationRestartRequired=!1;executableFingerprint;resumeConformant;expectedResumedSessionId=null;stoppingStdioProcess=!1;pendingProtocolRequests=new Map;stdioProcess=null;spawnProcess=null;dispatchGuard=null;dispatchObservedEvent=!1;constructor(e,t){super(),this.type=`custom:${e}`,this.entry=t,this.command=t.command,this.mode=t.caps.mode,this.proactive=t.caps.proactive??!1,this.executableFingerprint=p(t),this.resumeConformant=q(this.type,this.executableFingerprint,t.caps.version)}get usesNodeStdioV2(){return this.entry.caps.protocol==="shennian-node-stdio"&&this.entry.caps.protocolVersion===2}async start(e,t,s){if(this.sessionId=e,this.workDir=this.managedAgentPolicy?.adapterPolicy.workDir??t,this.seq=0,s&&(this.agentSessionId=s,this.expectedResumedSessionId=s),this.mode==="stdio"){if(await this.startStdioProcess(),this.usesNodeStdioV2){const n=await this.sendProtocolRequest("start",{sessionId:e,workDir:this.workDir});n?.nativeSessionId&&(this.agentSessionId=n.nativeSessionId)}s&&await this.resume(s)}}configure(e){const t=this.configurationFingerprint();this.shennianSessionId=e.sessionId??null,this.externalChannel=e.externalChannel??null,this.extraEnv=e.env??{},"managedAgentPolicy"in e&&(this.managedAgentPolicy=e.managedAgentPolicy??null),this.managedAgentPolicy&&(this.workDir=this.managedAgentPolicy.adapterPolicy.workDir),t!==this.configurationFingerprint()&&(this.stdioProcess||this.spawnProcess)&&(this.configurationRestartRequired=!0)}async send(e,t,s,n,r,i){if(i?.source==="published_agent"&&I(this.managedAgentPolicy),i?.source==="room_activation"&&!this.managedAgentPolicy)throw new Error("managed_agent_policy_missing");if(this.configurationRestartRequired&&(this.mode==="stdio"?await this.stopStdioProcess():await this.killSpawnProcess(),this.configurationRestartRequired=!1),this.runId=a(),this.seq=0,this.mode==="stdio")if(this.usesNodeStdioV2)await this.sendStdioV2(e,D(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0,r),t,s,n);else{const o=`${u(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0,r)}${e}`;await this.sendStdio(o,t)}else{const o=`${u(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0,r)}${e}`;await this.runSpawn(o,t)}}async resume(e){if(this.mode==="stdio"){if(this.usesNodeStdioV2){const s=await this.sendProtocolRequest("resume",{sessionId:this.sessionId,nativeSessionId:e});this.agentSessionId=s?.nativeSessionId??e;return}const t=JSON.stringify({method:"resume",id:a(),params:{sessionId:this.sessionId,agentSessionId:e}});this.stdioProcess?.stdin?.write(t+`
+`)}}async stop(){this.mode==="stdio"?await this.stopStdioProcess():await this.killSpawnProcess()}async runSpawn(e,t){await this.killSpawnProcess();const s=this.startDispatchGuard();this.dispatchObservedEvent=!1;const n=["/run","--workdir",this.workDir??process.cwd()];this.sessionId&&n.push("--session",this.sessionId),this.agentSessionId&&n.push("--resume",this.agentSessionId),t&&n.push("--model",t);const r=await this.prepareManagedLaunch();let i;try{i=l(this.command,n,{cwd:this.workDir??void 0,stdio:["pipe","pipe","pipe"],env:r.env})}catch(o){throw await this.disposeManagedConfig(r.configDir),o}this.spawnProcess=i,this.managedConfigDir=r.configDir,this.attachOutputHandlers(i,()=>{this.spawnProcess===i&&(this.spawnProcess=null),this.disposeManagedConfig(r.configDir)}),i.stdin?.once("error",o=>this.rejectDispatch(o)),i.stdin?.write(e),i.stdin?.end(),await s.promise}async killSpawnProcess(){const e=this.spawnProcess;if(!e){await this.disposeManagedConfig(this.managedConfigDir);return}this.spawnProcess=null,e.kill("SIGTERM"),await new Promise(t=>{e.on("close",t),setTimeout(()=>{e.kill("SIGKILL"),t()},3e3)}),await this.disposeManagedConfig(this.managedConfigDir)}async startStdioProcess(){const e=await this.prepareManagedLaunch();let t;try{t=l(this.command,["/start","--workdir",this.workDir??process.cwd()],{cwd:this.workDir??void 0,stdio:["pipe","pipe","pipe"],env:e.env})}catch(s){throw await this.disposeManagedConfig(e.configDir),s}this.stdioProcess=t,this.managedConfigDir=e.configDir,this.attachOutputHandlers(t,()=>{this.stdioProcess===t&&(this.stdioProcess=null,this.disposeManagedConfig(e.configDir),this.stoppingStdioProcess||this.emit("error",new Error("Custom agent process exited unexpectedly")))})}async sendStdio(e,t){this.stdioProcess||await this.startStdioProcess();const s=this.startDispatchGuard();this.dispatchObservedEvent=!1;const n=JSON.stringify({method:"send",id:a(),params:{sessionId:this.sessionId,text:e,modelId:t}});this.stdioProcess?.stdin?.once("error",r=>this.rejectDispatch(r)),this.stdioProcess?.stdin?.write(n+`
+`),await s.promise}async sendStdioV2(e,t,s,n,r){this.stdioProcess||(await this.startStdioProcess(),await this.sendProtocolRequest("start",{sessionId:this.sessionId,workDir:this.workDir})),this.dispatchObservedEvent=!1,await this.sendProtocolRequest("send",{sessionId:this.sessionId,text:e,systemPrompt:t,modelId:s,reasoningEffort:n,attachments:r?.map(i=>({path:i.path,name:i.name,mime:i.mimeType}))??[]})}async stopStdioProcess(){const e=this.stdioProcess;if(!e){await this.disposeManagedConfig(this.managedConfigDir);return}this.stoppingStdioProcess=!0;const t=new Promise(s=>{const n=setTimeout(()=>{e.kill("SIGTERM"),setTimeout(()=>{e.kill("SIGKILL"),s()},3e3)},5e3);e.on("close",()=>{clearTimeout(n),s()})});if(this.usesNodeStdioV2)await this.sendProtocolRequest("stop",{}).catch(()=>{});else{const s=JSON.stringify({method:"stop",id:a()});e.stdin?.write(s+`
+`)}await t,this.stdioProcess=null,await this.disposeManagedConfig(this.managedConfigDir),this.stoppingStdioProcess=!1}async prepareManagedLaunch(){const e=this.managedAgentPolicy;if(!e)return{env:v(this.extraEnv),configDir:null};if(C(e))return{env:y(this.extraEnv),configDir:null};const t=p(this.entry);if(!e.enforcement.executableFingerprint||t!==e.enforcement.executableFingerprint)throw new Error("custom_managed_runtime_executable_changed");if(e.enforcement.level!=="unverified")throw new Error("custom_managed_runtime_protection_must_be_unverified");const s=R(this.entry);if(s.state==="declared"&&e.enforcement.runtimeVersion!==this.entry.caps.version)throw new Error("custom_managed_runtime_version_changed");if(s.state==="declared"){const i=s.declaration.platforms[e.enforcement.platform],o=E(e.requestedPolicy,i??null);if(o.unavailableCapabilities.length>0)throw new Error(`custom_managed_runtime_capability_unavailable:${o.unavailableCapabilities.join(",")}`)}const n=S({agentType:this.type,providerEnv:this.extraEnv,sessionEnv:this.extraEnv,runtimeEnv:{NO_COLOR:"1"}});if(s.state==="unverified")return{env:n,configDir:null};const r=await b(e);return n[x]=r.policyPath,{env:n,configDir:r.directory}}async disposeManagedConfig(e){e&&(this.managedConfigDir===e&&(this.managedConfigDir=null),await k(e).catch(()=>{}))}configurationFingerprint(){const e=Object.keys(this.extraEnv).sort().map(t=>[t,this.extraEnv[t]??null]);return f("sha256").update(JSON.stringify({sessionId:this.shennianSessionId,externalChannel:this.externalChannel,env:e,managedAgentPolicy:this.managedAgentPolicy})).digest("hex")}attachOutputHandlers(e,t){g({input:e.stdout}).on("line",r=>{if(r.trim())try{const i=JSON.parse(r);"type"in i&&i.type==="response"?this.handleProtocolResponse(i):"type"in i&&i.type==="event"?this.handleProtocolEvent({...i.event,agentSessionId:i.event.nativeSessionId}):this.handleProtocolEvent(i)}catch{}});let n="";e.stderr?.on("data",r=>{n+=r.toString()}),e.on("close",r=>{if(t(),this.rejectPendingProtocolRequests(new Error(`Custom agent process exited with code ${r??"unknown"}`)),r!==0&&r!==null){const i=n.trim()||`Agent exited with code ${r}`;this.rejectDispatch(new Error(i)),this.emitEvent({state:"error",message:i})}else this.dispatchObservedEvent?this.acceptDispatch():this.rejectDispatch(new Error("Custom agent exited without protocol events"))}),e.on("error",r=>{t(),this.rejectDispatch(r),this.emit("error",r)})}handleProtocolResponse(e){if(!e.id)return;const t=this.pendingProtocolRequests.get(e.id);if(t){if(clearTimeout(t.timer),this.pendingProtocolRequests.delete(e.id),e.ok){t.resolve(e.result);return}t.reject(new Error(e.error?.message??e.error?.code??"Adapter request failed"))}}sendProtocolRequest(e,t){const s=this.stdioProcess?.stdin;if(!s?.writable)return Promise.reject(new Error("Custom adapter stdio is not writable"));const n=a();return new Promise((r,i)=>{const o=setTimeout(()=>{this.pendingProtocolRequests.delete(n),i(new Error(`Timed out waiting for custom adapter ${e} response`))},e==="send"?m:5e3);this.pendingProtocolRequests.set(n,{resolve:r,reject:i,timer:o}),s.write(`${JSON.stringify({protocolVersion:2,id:n,method:e,params:t})}
+`,h=>{if(!h)return;const d=this.pendingProtocolRequests.get(n);d&&(clearTimeout(d.timer),this.pendingProtocolRequests.delete(n),d.reject(h))})})}rejectPendingProtocolRequests(e){for(const t of this.pendingProtocolRequests.values())clearTimeout(t.timer),t.reject(e);this.pendingProtocolRequests.clear()}handleProtocolEvent(e){const{state:t}=e;if(t)switch(this.dispatchObservedEvent=!0,t){case"delta":this.acceptDispatch(),this.emitEvent({state:"delta",text:e.text??"",thinking:e.thinking});break;case"final":this.acceptDispatch(),this.expectedResumedSessionId&&e.agentSessionId===this.expectedResumedSessionId&&this.executableFingerprint&&(A(this.type,this.executableFingerprint,this.entry.caps.version),this.resumeConformant=!0,this.expectedResumedSessionId=null),e.agentSessionId&&(this.agentSessionId=e.agentSessionId),this.emitEvent({state:"final",usage:e.usage,agentSessionId:this.agentSessionId??void 0});break;case"error":this.rejectDispatch(new Error(e.message??"unknown error")),this.emitEvent({state:"error",message:e.message??"unknown error"});break;case"tool-call":this.acceptDispatch(),this.emitEvent({state:"tool-call",name:e.name??"",args:e.args});break;case"tool-result":this.acceptDispatch(),this.emitEvent({state:"tool-result",name:e.name??"",result:e.result??""});break;case"notify":this.acceptDispatch(),this.emitEvent({state:"notify",text:e.text??"",title:e.title,source:e.source});break}}startDispatchGuard(){this.acceptDispatch();let e;const t=new Promise((s,n)=>{e={settled:!1,timer:setTimeout(()=>this.acceptDispatch(e),m),resolve:s,reject:n,promise:Promise.resolve()}});return e.promise=t,this.dispatchGuard=e,e}acceptDispatch(e=this.dispatchGuard){!e||e.settled||(e.settled=!0,clearTimeout(e.timer),this.dispatchGuard===e&&(this.dispatchGuard=null),e.resolve())}rejectDispatch(e,t=this.dispatchGuard){!t||t.settled||(t.settled=!0,clearTimeout(t.timer),this.dispatchGuard===t&&(this.dispatchGuard=null),t.reject(e))}emitEvent(e){const t={...e,runId:this.runId,seq:this.seq++};this.emit("agentEvent",t)}}function U(c,e){const t=`custom:${c}`;_(t,e),P(t,()=>new M(c,e))}export{M as CustomAgentAdapter,U as registerCustomAgent};

package/dist/src/agents/opencode-managed-permissions.js

@@ -1,2 +1,2 @@
-import p from"node:fs";import r from"node:fs/promises";import c from"node:os";import n from"node:path";import{resolveProtectedShennianDirectories as w}from"../security/managed-agent-credential-paths.js";const d="shennian-opencode-managed-",u=[".env",".env.*","**/.env","**/.env.*","*.key","**/*.key","*.pem","**/*.pem","~/.ssh/**","$HOME/.ssh/**","~/.aws/**","$HOME/.aws/**","~/.azure/**","$HOME/.azure/**","~/.config/gcloud/**","$HOME/.config/gcloud/**","~/.netrc","$HOME/.netrc","~/.npmrc","$HOME/.npmrc","~/.shennian/**","$HOME/.shennian/**"],f={commandNetwork:{allow:!1,deny:!0},webSearch:{allow:!0,deny:!0},browser:{allow:!1,deny:!0},computerUse:{allow:!1,deny:!0},mcp:{allow:!1,deny:!0}},C={minimumRuntimeVersion:"1.18.0",maximumRuntimeVersionExclusive:"1.19.0",platforms:Object.fromEntries(["darwin","linux","wsl","win32"].map(a=>[a,{level:"partial",fileAccess:{"workspace-read":!0,"workspace-write":!0,"host-full":!0},externalCapabilities:f,knownGaps:["sandbox.toolPermissionOnly","shell.unavailableInManagedMode","config.globalAndAdministratorSourcesMayRemain"]}]))};function k(a,e){b(e);const o=a.effectivePolicy;if(o.externalCapabilities.commandNetwork)throw new Error("opencode_managed_command_network_unavailable");if(o.externalCapabilities.browser||o.externalCapabilities.computerUse)throw new Error("opencode_managed_interactive_tools_unavailable");if(o.externalCapabilities.mcp)throw new Error("opencode_managed_mcp_allowlist_unavailable");const t=o.fileAccess==="host-full",m=o.fileAccess==="workspace-write",i=g(),s={"*":"deny",read:l("allow",i),glob:"allow",grep:"allow",list:"allow",edit:m||t?l("allow",i):"deny",external_directory:t?l("allow",i):"deny",bash:"deny",task:"deny",skill:"deny",question:"allow",todoread:"allow",todowrite:"allow",webfetch:o.externalCapabilities.webSearch?"allow":"deny",websearch:o.externalCapabilities.webSearch?"allow":"deny",codesearch:o.externalCapabilities.webSearch?"allow":"deny"};return{args:["--pure","--auto"],config:{$schema:"https://opencode.ai/config.json",default_agent:"build",share:"disabled",subagent_depth:0,autoupdate:!1,formatter:!1,lsp:!1,permission:s,agent:{build:{permission:s}},plugin:[],mcp:{},command:{},instructions:[]}}}async function M(a){const e=await r.mkdtemp(n.join(c.tmpdir(),d)),o=n.join(e,"opencode.json");try{return await r.chmod(e,448),await r.writeFile(o,`${JSON.stringify(a.config)}
-`,{encoding:"utf8",mode:384,flag:"wx"}),process.platform!=="win32"&&await r.chmod(o,384),{directory:e,configPath:o}}catch(t){throw await h(e).catch(()=>{}),new Error("opencode_managed_config_initialization_failed",{cause:t})}}async function h(a){const e=n.resolve(a),o=n.resolve(c.tmpdir());if(n.dirname(e)!==o||!n.basename(e).startsWith(d))throw new Error("opencode_managed_config_cleanup_refused");await r.rm(e,{recursive:!0,force:!0})}function l(a,e){return{"*":a,...Object.fromEntries(e.map(o=>[o,"deny"]))}}function _(a){return a.replaceAll("\\","/")}function g(){const a=w().map(e=>`${_(n.normalize(e))}/**`);return[...new Set([...u,...a])]}function b(a){const e=n.normalize(a.trim());if(!e||!n.isAbsolute(e))throw new Error("opencode_managed_workdir_invalid");let o;try{o=p.realpathSync(e)}catch{throw new Error("opencode_managed_workdir_unavailable")}if(n.normalize(o)!==e)throw new Error("opencode_managed_workdir_not_realpath");return e}export{C as OPENCODE_MANAGED_RUNTIME_SECURITY,k as compileOpenCodeManagedPermissions,M as createOpenCodeManagedConfigDirectory,h as disposeOpenCodeManagedConfigDirectory};
+import u from"node:fs";import t from"node:fs/promises";import p from"node:os";import r from"node:path";import{resolveProtectedShennianDirectories as f}from"../security/managed-agent-credential-paths.js";const w="shennian-opencode-managed-",h=[".env",".env.*","**/.env","**/.env.*","*.key","**/*.key","*.pem","**/*.pem","~/.ssh/**","$HOME/.ssh/**","~/.aws/**","$HOME/.aws/**","~/.azure/**","$HOME/.azure/**","~/.config/gcloud/**","$HOME/.config/gcloud/**","~/.netrc","$HOME/.netrc","~/.npmrc","$HOME/.npmrc","~/.shennian/**","$HOME/.shennian/**"],_={commandNetwork:{allow:!1,deny:!0},webSearch:{allow:!0,deny:!0},browser:{allow:!1,deny:!0},computerUse:{allow:!1,deny:!0},mcp:{allow:!1,deny:!0}},M={minimumRuntimeVersion:"1.18.0",maximumRuntimeVersionExclusive:"1.19.0",platforms:Object.fromEntries(["darwin","linux","wsl","win32"].map(o=>[o,{level:"partial",fileAccess:{"workspace-read":!0,"workspace-write":!0,"host-full":!0},externalCapabilities:_,knownGaps:["sandbox.toolPermissionOnly","shell.unavailableInManagedMode","config.globalAndAdministratorSourcesMayRemain"]}]))};function P(o,e,a={}){E(e);const n=o.effectivePolicy;if(n.externalCapabilities.commandNetwork)throw new Error("opencode_managed_command_network_unavailable");if(n.externalCapabilities.browser||n.externalCapabilities.computerUse)throw new Error("opencode_managed_interactive_tools_unavailable");if(n.externalCapabilities.mcp)throw new Error("opencode_managed_mcp_allowlist_unavailable");const s=n.fileAccess==="host-full",i=n.fileAccess==="workspace-write",l=a.publicTurn===!0,c=y(),m={"*":"deny",read:l?"deny":d("allow",c),glob:l?"deny":"allow",grep:l?"deny":"allow",list:l?"deny":"allow",edit:!l&&(i||s)?d("allow",c):"deny",external_directory:!l&&s?d("allow",c):"deny",bash:"deny",task:"deny",skill:"deny",question:"allow",todoread:"allow",todowrite:"allow",webfetch:n.externalCapabilities.webSearch?"allow":"deny",websearch:n.externalCapabilities.webSearch?"allow":"deny",codesearch:n.externalCapabilities.webSearch?"allow":"deny"};return{args:["--pure","--auto"],config:{$schema:"https://opencode.ai/config.json",default_agent:"build",share:"disabled",subagent_depth:0,autoupdate:!1,formatter:!1,lsp:!1,permission:m,agent:{build:{permission:m,...a.systemPrompt?.trim()?{prompt:a.systemPrompt.trim()}:{}}},plugin:[],mcp:{},command:{},instructions:[]}}}async function S(o){const e=await t.mkdtemp(r.join(p.tmpdir(),w)),a=r.join(e,"opencode.json"),n=r.join(e,"cache"),s=r.join(e,"state");try{await t.chmod(e,448),await t.writeFile(a,`${JSON.stringify(o.config)}
+`,{encoding:"utf8",mode:384,flag:"wx"}),process.platform!=="win32"&&await t.chmod(a,384);for(const i of[n,s])await t.mkdir(i,{mode:448}),process.platform!=="win32"&&await t.chmod(i,448);return{directory:e,configPath:a,cacheDir:n,stateDir:s}}catch(i){throw await b(e).catch(()=>{}),new Error("opencode_managed_config_initialization_failed",{cause:i})}}async function b(o){const e=r.resolve(o),a=r.resolve(p.tmpdir());if(r.dirname(e)!==a||!r.basename(e).startsWith(w))throw new Error("opencode_managed_config_cleanup_refused");await t.rm(e,{recursive:!0,force:!0})}function d(o,e){return{"*":o,...Object.fromEntries(e.map(a=>[a,"deny"]))}}function g(o){return o.replaceAll("\\","/")}function y(){const o=f().map(e=>`${g(r.normalize(e))}/**`);return[...new Set([...h,...o])]}function E(o){const e=r.normalize(o.trim());if(!e||!r.isAbsolute(e))throw new Error("opencode_managed_workdir_invalid");let a;try{a=u.realpathSync(e)}catch{throw new Error("opencode_managed_workdir_unavailable")}if(r.normalize(a)!==e)throw new Error("opencode_managed_workdir_not_realpath");return e}export{M as OPENCODE_MANAGED_RUNTIME_SECURITY,P as compileOpenCodeManagedPermissions,S as createOpenCodeManagedConfigDirectory,b as disposeOpenCodeManagedConfigDirectory};

package/dist/src/agents/opencode.js

@@ -1 +1 @@
-import{createInterface as f}from"node:readline";import{randomUUID as u}from"node:crypto";import{AgentAdapter as g,registerAgent as h}from"./adapter.js";import{resolveBuiltinCommand as m,spawnAgentCommand as E}from"./command-spec.js";import{spawnEnoentError as C}from"./spawn-errors.js";import{DETACH_PROCESS_GROUP as y,stopProcessTree as O}from"./process-tree.js";import{buildAgentProcessEnv as D,buildManagedAgentProcessEnv as I,buildManagedNativeFullProcessEnv as S}from"../agent-env.js";import{buildInlineChannelPreamble as P}from"./platform-instructions.js";import{resolveManagedAgentAdapterEnforcement as w,isManagedAgentNativeFull as _}from"../security/managed-agent-policy.js";import{registerManagedAgentRuntimeSecurity as A}from"../security/managed-agent-runtime.js";import{compileOpenCodeManagedPermissions as v,createOpenCodeManagedConfigDirectory as N,disposeOpenCodeManagedConfigDirectory as x,OPENCODE_MANAGED_RUNTIME_SECURITY as k}from"./opencode-managed-permissions.js";A("opencode",k);const T=64*1024;function R(n){if(!n)return;const e=n.input,t=n.output;if(!(typeof e!="number"&&typeof t!="number"))return{inputTokens:typeof e=="number"?e:0,outputTokens:typeof t=="number"?t:0}}function l(n){if(n==null)return"";if(typeof n=="string")return n;try{return JSON.stringify(n)}catch{return String(n)}}function p(n){if(!n)return"opencode request failed";if(typeof n=="string")return n;if(typeof n!="object")return String(n);const e=n;return typeof e.message=="string"?e.message:typeof e.name=="string"?e.name:"data"in e?p(e.data):l(n)||"opencode request failed"}class M extends g{type="opencode";get recoveryCapabilities(){return{inspectTerminal:!1,reattachRun:!1,resumeRun:!1,resumeSession:!0}}process=null;agentSessionId=null;workDir=null;seq=0;runId="";terminalState="closed";runUsage;externalChannel=null;shennianSessionId=null;extraEnv={};managedAgentPolicy=null;managedConfigDir=null;configure(e){this.shennianSessionId=e.sessionId??null,this.externalChannel=e.externalChannel??null,this.extraEnv=e.env??{},"managedAgentPolicy"in e&&(this.managedAgentPolicy=e.managedAgentPolicy??null),this.managedAgentPolicy&&(this.workDir=this.managedAgentPolicy.adapterPolicy.workDir)}async start(e,t,o){this.workDir=this.managedAgentPolicy?.adapterPolicy.workDir??t,o&&(this.agentSessionId=o),this.resetRunState()}async send(e,t,o,i,s,c){if(c?.source==="room_activation"&&!this.managedAgentPolicy)throw new Error("managed_agent_policy_missing");await this.killProcess(),this.runId=u(),this.resetRunState();const a=["run","--format","json"];this.agentSessionId&&a.push("--session",this.agentSessionId),t&&a.push("--model",t);const r=`${P(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0,s)}${e}`;await this.spawnAndParse(a,r)}async resume(e){await this.killProcess(),this.agentSessionId=e,this.runId=u(),this.resetRunState(),this.emitEvent({state:"start",agentSessionId:e}),this.emitFinalIfOpen({state:"final",agentSessionId:e})}async stop(){await this.killProcess()}resetRunState(){this.seq=0,this.terminalState="open",this.runUsage=void 0}async spawnAndParse(e,t){const o=m("opencode");if(!o){this.emit("error",new Error('Command "opencode" not found. Install it with "npm i -g opencode-ai@latest".'));return}const i=await this.prepareManagedLaunch();process.platform!=="win32"&&(i.env.PWD=this.workDir??process.cwd());let s;try{s=E(o,[e[0],...i.args,...e.slice(1)],{cwd:this.workDir??void 0,stdio:["pipe","pipe","pipe"],env:i.env,detached:y})}catch(r){throw await this.disposeManagedConfig(i.configDir),r}this.process=s,this.managedConfigDir=i.configDir,f({input:s.stdout}).on("line",r=>{this.handleProcessLine(s,r)});let a=Buffer.alloc(0);s.stderr?.on("data",r=>{const d=T-a.byteLength;d>0&&(a=Buffer.concat([a,r.subarray(0,d)]))}),s.on("close",(r,d)=>{this.process===s&&(this.disposeManagedConfig(i.configDir),this.terminalState==="open"&&this.completeRunAfterProcessExit(r,d,a.toString("utf8").trim()))}),s.on("error",r=>{this.process===s&&(this.process=null,this.disposeManagedConfig(i.configDir),r.code==="ENOENT"?this.emit("error",C(this.workDir,'Command "opencode" not found. Install it with "npm i -g opencode-ai@latest".')):this.emit("error",r))}),s.stdin.on("error",r=>{this.process===s&&this.emitErrorIfOpen({state:"error",message:r.message})}),s.stdin.end(t)}async prepareManagedLaunch(){const e=this.managedAgentPolicy;if(!e)return{args:["--auto"],env:D({NO_COLOR:"1",...this.extraEnv}),configDir:null};if(_(e))return{args:["--auto"],env:S({NO_COLOR:"1",...this.extraEnv}),configDir:null};const t=v(w(e),e.adapterPolicy.workDir),o=await N(t),i=I({agentType:"opencode",providerEnv:this.extraEnv,sessionEnv:this.extraEnv,runtimeEnv:{NO_COLOR:"1"}});return i.OPENCODE_CONFIG=o.configPath,i.OPENCODE_CONFIG_DIR=o.directory,i.OPENCODE_CONFIG_CONTENT=JSON.stringify(t.config),i.OPENCODE_DISABLE_PROJECT_CONFIG="true",i.OPENCODE_DISABLE_CLAUDE_CODE="1",i.OPENCODE_DISABLE_CLAUDE_CODE_PROMPT="1",i.OPENCODE_DISABLE_CLAUDE_CODE_SKILLS="1",{args:t.args,env:i,configDir:o.directory}}async disposeManagedConfig(e){e&&(this.managedConfigDir===e&&(this.managedConfigDir=null),await x(e).catch(()=>{}))}handleStreamEvent(e){e.sessionID&&e.sessionID!==this.agentSessionId&&(this.agentSessionId=e.sessionID,this.emitEvent({state:"start",agentSessionId:e.sessionID}));const t=e.part;if(e.type==="text"&&t?.text){this.emitEvent({state:"delta",text:t.text});return}if(e.type==="reasoning"&&t?.text){this.emitEvent({state:"delta",text:t.text,thinking:!0});return}if(e.type==="tool_use"&&t?.type==="tool"){t.state?.status==="completed"||t.state?.status==="error"?this.emitEvent({state:"tool-result",name:t.tool??"tool",result:t.state.status==="error"?t.state.error??"tool failed":l(t.state?.output)}):this.emitEvent({state:"tool-call",name:t.tool??"tool",args:t.state?.input??{}});return}if(e.type==="error"){this.emitErrorIfOpen({state:"error",message:p(e.error)});return}e.type==="step_finish"&&this.recordStepUsage(R(t?.tokens))}handleProcessLine(e,t){if(!(this.process!==e||!t.trim()))try{this.handleStreamEvent(JSON.parse(t))}catch{this.emitEvent({state:"delta",text:t})}}recordStepUsage(e){e&&(this.runUsage={inputTokens:(this.runUsage?.inputTokens??0)+e.inputTokens,outputTokens:(this.runUsage?.outputTokens??0)+e.outputTokens})}completeRunAfterProcessExit(e=0,t=null,o=""){if(e!==0||t!==null){this.emitErrorIfOpen({state:"error",message:o||(t?`opencode exited with signal ${t}`:`opencode exited with code ${String(e)}`)});return}this.emitFinalIfOpen({state:"final",agentSessionId:this.agentSessionId??void 0,usage:this.runUsage})}emitEvent(e){const t={...e,runId:this.runId,seq:this.seq++};this.emit("agentEvent",t)}emitFinalIfOpen(e){this.terminalState==="open"&&(this.terminalState="closed",this.emitEvent(e))}emitErrorIfOpen(e){this.terminalState==="open"&&(this.terminalState="closed",this.emitEvent(e))}async killProcess(){const e=this.process;if(!e){await this.disposeManagedConfig(this.managedConfigDir);return}this.process=null,await O(e),await this.disposeManagedConfig(this.managedConfigDir)}}h("opencode",()=>new M);export{M as OpenCodeAdapter};
+import{createInterface as g}from"node:readline";import{randomUUID as p}from"node:crypto";import E from"node:os";import h from"node:path";import{AgentAdapter as D,registerAgent as S}from"./adapter.js";import{resolveBuiltinCommand as C,spawnAgentCommand as y}from"./command-spec.js";import{isMacosFileSandboxSupported as O}from"../security/macos-file-sandbox.js";import{spawnEnoentError as I}from"./spawn-errors.js";import{DETACH_PROCESS_GROUP as P,stopProcessTree as w}from"./process-tree.js";import{buildAgentProcessEnv as _,buildManagedAgentProcessEnv as A,buildManagedNativeFullProcessEnv as v}from"../agent-env.js";import{buildInlineChannelPreamble as x,buildPlatformInstructions as M}from"./platform-instructions.js";import{resolveManagedAgentAdapterEnforcement as N,isManagedAgentNativeFull as k}from"../security/managed-agent-policy.js";import{assertPublicAgentPolicy as T}from"../security/public-agent-policy.js";import{registerManagedAgentRuntimeSecurity as R}from"../security/managed-agent-runtime.js";import{compileOpenCodeManagedPermissions as F,createOpenCodeManagedConfigDirectory as L,disposeOpenCodeManagedConfigDirectory as b,OPENCODE_MANAGED_RUNTIME_SECURITY as U}from"./opencode-managed-permissions.js";R("opencode",U);const B=64*1024;function G(i){if(!i)return;const e=i.input,t=i.output;if(!(typeof e!="number"&&typeof t!="number"))return{inputTokens:typeof e=="number"?e:0,outputTokens:typeof t=="number"?t:0}}function f(i){if(i==null)return"";if(typeof i=="string")return i;try{return JSON.stringify(i)}catch{return String(i)}}function m(i){if(!i)return"opencode request failed";if(typeof i=="string")return i;if(typeof i!="object")return String(i);const e=i;return typeof e.message=="string"?e.message:typeof e.name=="string"?e.name:"data"in e?m(e.data):f(i)||"opencode request failed"}class q extends D{type="opencode";get recoveryCapabilities(){return{inspectTerminal:!1,reattachRun:!1,resumeRun:!1,resumeSession:!0}}process=null;agentSessionId=null;workDir=null;seq=0;runId="";terminalState="closed";runUsage;externalChannel=null;shennianSessionId=null;extraEnv={};managedAgentPolicy=null;managedConfigDir=null;configure(e){this.shennianSessionId=e.sessionId??null,this.externalChannel=e.externalChannel??null,this.extraEnv=e.env??{},"managedAgentPolicy"in e&&(this.managedAgentPolicy=e.managedAgentPolicy??null),this.managedAgentPolicy&&(this.workDir=this.managedAgentPolicy.adapterPolicy.workDir)}async start(e,t,r){this.workDir=this.managedAgentPolicy?.adapterPolicy.workDir??t,r&&(this.agentSessionId=r),this.resetRunState()}async send(e,t,r,d,o,n){if(n?.source==="published_agent"&&T(this.managedAgentPolicy),n?.source==="room_activation"&&!this.managedAgentPolicy)throw new Error("managed_agent_policy_missing");await this.killProcess(),this.runId=p(),this.resetRunState();const s=["run","--format","json"];this.agentSessionId&&s.push("--session",this.agentSessionId),t&&s.push("--model",t);const l=n?.source==="published_agent",c=l?e:`${x(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0,o)}${e}`;await this.spawnAndParse(s,c,l?M(this.workDir??process.cwd(),null,void 0,o):void 0,l)}async resume(e){await this.killProcess(),this.agentSessionId=e,this.runId=p(),this.resetRunState(),this.emitEvent({state:"start",agentSessionId:e}),this.emitFinalIfOpen({state:"final",agentSessionId:e})}async stop(){await this.killProcess()}resetRunState(){this.seq=0,this.terminalState="open",this.runUsage=void 0}async spawnAndParse(e,t,r,d=!1){const o=C("opencode");if(!o){this.emit("error",new Error('Command "opencode" not found. Install it with "npm i -g opencode-ai@latest".'));return}const n=await this.prepareManagedLaunch(r,d);process.platform!=="win32"&&(n.env.PWD=this.workDir??process.cwd());let s;try{s=y(o,[e[0],...n.args,...e.slice(1)],{cwd:this.workDir??void 0,stdio:["pipe","pipe","pipe"],env:n.env,detached:P,...n.macosFileSandbox?{macosFileSandbox:n.macosFileSandbox}:{}})}catch(a){throw await this.disposeManagedConfig(n.configDir),a}this.process=s,this.managedConfigDir=n.configDir,g({input:s.stdout}).on("line",a=>{this.handleProcessLine(s,a)});let c=Buffer.alloc(0);s.stderr?.on("data",a=>{const u=B-c.byteLength;u>0&&(c=Buffer.concat([c,a.subarray(0,u)]))}),s.on("close",(a,u)=>{this.process===s&&(this.disposeManagedConfig(n.configDir),this.terminalState==="open"&&this.completeRunAfterProcessExit(a,u,c.toString("utf8").trim()))}),s.on("error",a=>{this.process===s&&(this.process=null,this.disposeManagedConfig(n.configDir),a.code==="ENOENT"?this.emit("error",I(this.workDir,'Command "opencode" not found. Install it with "npm i -g opencode-ai@latest".')):this.emit("error",a))}),s.stdin.on("error",a=>{this.process===s&&this.emitErrorIfOpen({state:"error",message:a.message})}),s.stdin.end(t)}async prepareManagedLaunch(e,t=!1){const r=this.managedAgentPolicy;if(!r)return{args:["--auto"],env:_({NO_COLOR:"1",...this.extraEnv}),configDir:null,macosFileSandbox:null};if(k(r))return{args:["--auto"],env:v({NO_COLOR:"1",...this.extraEnv}),configDir:null,macosFileSandbox:null};const d=F(N(r),r.adapterPolicy.workDir,{systemPrompt:e,publicTurn:t}),o=await L(d),n=A({agentType:"opencode",providerEnv:this.extraEnv,sessionEnv:this.extraEnv,runtimeEnv:{NO_COLOR:"1"}});n.OPENCODE_CONFIG=o.configPath,n.OPENCODE_CONFIG_DIR=o.directory,n.OPENCODE_CONFIG_CONTENT=JSON.stringify(d.config),n.XDG_CACHE_HOME=o.cacheDir,n.XDG_STATE_HOME=o.stateDir,n.OPENCODE_DISABLE_PROJECT_CONFIG="true",n.OPENCODE_DISABLE_CLAUDE_CODE="1",n.OPENCODE_DISABLE_CLAUDE_CODE_PROMPT="1",n.OPENCODE_DISABLE_CLAUDE_CODE_SKILLS="1";const s=t&&O()?this.buildMacosFileSandboxSpec(r.adapterPolicy.workDir,o.directory):null;return{args:d.args,env:n,configDir:o.directory,macosFileSandbox:s}}buildMacosFileSandboxSpec(e,t){const r=E.homedir();return{confinedRoots:[r],scopes:[{path:e,write:!0},{path:t,write:!0},{path:h.join(r,".local","share","opencode"),write:!0},{path:h.join(r,".config","opencode"),write:!0}]}}async disposeManagedConfig(e){e&&(this.managedConfigDir===e&&(this.managedConfigDir=null),await b(e).catch(()=>{}))}handleStreamEvent(e){e.sessionID&&e.sessionID!==this.agentSessionId&&(this.agentSessionId=e.sessionID,this.emitEvent({state:"start",agentSessionId:e.sessionID}),this.emit("nativeSession","opencode",e.sessionID));const t=e.part;if(e.type==="text"&&t?.text){this.emitEvent({state:"delta",text:t.text});return}if(e.type==="reasoning"&&t?.text){this.emitEvent({state:"delta",text:t.text,thinking:!0});return}if(e.type==="tool_use"&&t?.type==="tool"){t.state?.status==="completed"||t.state?.status==="error"?this.emitEvent({state:"tool-result",name:t.tool??"tool",result:t.state.status==="error"?t.state.error??"tool failed":f(t.state?.output)}):this.emitEvent({state:"tool-call",name:t.tool??"tool",args:t.state?.input??{}});return}if(e.type==="error"){this.emitErrorIfOpen({state:"error",message:m(e.error)});return}e.type==="step_finish"&&this.recordStepUsage(G(t?.tokens))}handleProcessLine(e,t){if(!(this.process!==e||!t.trim()))try{this.handleStreamEvent(JSON.parse(t))}catch{this.emitEvent({state:"delta",text:t})}}recordStepUsage(e){e&&(this.runUsage={inputTokens:(this.runUsage?.inputTokens??0)+e.inputTokens,outputTokens:(this.runUsage?.outputTokens??0)+e.outputTokens})}completeRunAfterProcessExit(e=0,t=null,r=""){if(e!==0||t!==null){this.emitErrorIfOpen({state:"error",message:r||(t?`opencode exited with signal ${t}`:`opencode exited with code ${String(e)}`)});return}this.emitFinalIfOpen({state:"final",agentSessionId:this.agentSessionId??void 0,usage:this.runUsage})}emitEvent(e){const t={...e,runId:this.runId,seq:this.seq++};this.emit("agentEvent",t)}emitFinalIfOpen(e){this.terminalState==="open"&&(this.terminalState="closed",this.emitEvent(e))}emitErrorIfOpen(e){this.terminalState==="open"&&(this.terminalState="closed",this.emitEvent(e))}async killProcess(){const e=this.process;if(!e){await this.disposeManagedConfig(this.managedConfigDir);return}this.process=null,await w(e),await this.disposeManagedConfig(this.managedConfigDir)}}S("opencode",()=>new q);export{q as OpenCodeAdapter};

package/dist/src/agents/pi-coding-agent.js

@@ -1,3 +1,3 @@
-import f from"node:fs";import p from"node:path";import{randomUUID as A}from"node:crypto";import{AgentAdapter as O,registerAgent as M}from"./adapter.js";import{resolveBuiltinCommand as $,spawnAgentCommand as j}from"./command-spec.js";import{buildAgentProcessEnv as F,buildManagedAgentProcessEnv as U,buildManagedNativeFullProcessEnv as G}from"../agent-env.js";import{resolveShennianPath as w}from"../config/index.js";import{buildInlineChannelPreamble as H,buildPlatformInstructions as B}from"./platform-instructions.js";import{isManagedAgentNativeFull as x}from"../security/managed-agent-policy.js";import{PiRpcClient as X}from"./pi-rpc-client.js";import{registerManagedAgentRuntimeSecurity as z}from"../security/managed-agent-runtime.js";import{PI_CODING_AGENT_MANAGED_RUNTIME_SECURITY as L}from"./pi-coding-agent-managed-permissions.js";import{writePiManagedExtension as W}from"./pi-managed-extension.js";import{recordPiSessionOwnership as Y}from"./pi-session-ownership.js";import{classifyPiFailure as _,createPiDiagnosticMarker as J,formatPiDiagnostic as P,inspectPiTurnConfiguration as K,sanitizePiDiagnosticDimension as S}from"./pi-turn-diagnostics.js";z("pi-coding-agent",L);const V=32*1024,Z=256*1024,Q=3e3;function E(n){return n.replace(/[^a-zA-Z0-9_.-]/g,"_").slice(0,180)||"session"}function tt(n){return n.data&&typeof n.data=="object"&&!Array.isArray(n.data)?n.data:{}}function et(n){if(typeof n=="string")return n;if(!n||typeof n!="object")return"";const t=n.content;return Array.isArray(t)?t.map(e=>{if(!e||typeof e!="object")return"";const i=e;return i.type==="text"&&typeof i.text=="string"?i.text:""}).join(""):""}function D(n,t=Z){return n.length<=t?n:`${n.slice(0,t)}
-[truncated]`}function R(n){const t=_(n),e=t.safeDetail??"Upstream error details were omitted";return`Pi model request failed${t.httpStatus?` (HTTP ${t.httpStatus})`:""}: ${e}`}function it(n){try{return D(JSON.stringify(n))}catch{return"[unserializable]"}}function N(n){if(!n||typeof n!="object")return;const t=n;if(!(typeof t.input!="number"&&typeof t.output!="number"))return{inputTokens:typeof t.input=="number"?t.input:0,outputTokens:typeof t.output=="number"?t.output:0}}function st(n){const t=n?.trim();if(!t)return{};const e=t.indexOf("/");return e<=0||e===t.length-1?{modelId:t}:{provider:t.slice(0,e),modelId:t.slice(e+1)}}function T(n,t,e,i,s,c){const l=H(e,i,s,c),m=t?.filter(u=>u.kind!=="image")??[];if(!m.length)return`${l}${n}`;const a=m.map(u=>`[${u.name}](<${u.path}>)`);return`${l}${[n,"",...a].join(`
-`)}`}function k(n,t){const e=[];for(const i of n??[]){if(i.kind!=="image"||!i.mimeType.startsWith("image/"))continue;let s=i.previewData?.trim()??"";const c=s.indexOf(",");if(s.startsWith("data:")&&c>=0&&(s=s.slice(c+1)),!s&&t&&i.path&&!/^https?:\/\//i.test(i.path))try{const l=f.statSync(i.path);l.isFile()&&l.size<=10*1024*1024&&(s=f.readFileSync(i.path).toString("base64"))}catch{s=""}s&&e.push({type:"image",data:s,mimeType:i.mimeType})}return e}class nt extends O{type="pi-coding-agent";get supportsActiveInput(){return!0}async injectActiveInput(t){const e=await this.readState();if(!this.rpc||!this.runId||!e.isStreaming&&!e.isCompacting)throw new Error("pi_active_turn_unavailable");const i={message:T(t.text,t.attachments,this.workDir,this.externalChannel,this.shennianSessionId,null)},s=k(t.attachments,!this.managedAgentPolicy);s.length&&(i.images=s),await this.rpc.request("steer",i)}get recoveryCapabilities(){return{inspectTerminal:!1,reattachRun:!1,resumeRun:!1,resumeSession:!0}}process=null;rpc=null;shennianSessionId="";workDir="";sessionDir="";agentSessionId=null;externalChannel=null;extraEnv={};spawnedRoomContext=null;managedAgentPolicy=null;runId="";seq=0;active=!1;terminal=!0;stderr="";lastUsage;promptFile=null;persistNativeSession=!0;validationRoot=null;runPhase=null;processEnv={};turnDiagnostic=null;configure(t){t.sessionId&&(this.shennianSessionId=t.sessionId),this.externalChannel=t.externalChannel??null,this.extraEnv=t.env??{},"managedAgentPolicy"in t&&(this.managedAgentPolicy=t.managedAgentPolicy??null)}async start(t,e,i,s){await this.stopProcess(),this.shennianSessionId=t,this.workDir=this.managedAgentPolicy?.adapterPolicy.workDir??e,this.agentSessionId=i??null;const c=w("runtime","pi-coding-agent",E(t));this.persistNativeSession=s?.persistNativeSession!==!1,this.validationRoot=this.persistNativeSession?null:p.join(c,`validation-${A()}`),this.sessionDir=this.validationRoot?p.join(this.validationRoot,"sessions"):p.join(c,"sessions"),f.mkdirSync(this.sessionDir,{recursive:!0,mode:448}),process.platform!=="win32"&&f.chmodSync(this.sessionDir,448),this.active=!1,this.terminal=!0}async send(t,e,i,s,c,l){const m=J(),a=st(e),u=s?.length??0,r=s?.filter(y=>y.kind==="image").length??0;let h="process_start",I=!1;try{await this.ensureProcess(c);const y=this.requireRpc();h="state_read";let o=await this.readState();const g=!!(o.isStreaming||o.isCompacting);(!g||!this.runId)&&(this.runId=A(),this.seq=0,this.terminal=!1,this.lastUsage=void 0,this.runPhase="thinking");const d=a;if(d.modelId&&!g&&(o.model?.id!==d.modelId||d.provider&&o.model?.provider!==d.provider)){if(!d.provider)throw new Error("Pi model selection must include provider/modelId");h="model_selection",await y.request("set_model",{provider:d.provider,modelId:d.modelId}),h="state_read",o=await this.readState()}i&&!g&&(h="thinking_selection",await y.request("set_thinking_level",{level:i}));const b=K({model:o.model,env:this.processEnv});this.turnDiagnostic={marker:m,phase:"request_config",...S(d.provider)?{requestedProvider:S(d.provider)}:{},...S(d.modelId)?{requestedModel:S(d.modelId)}:{},modelSelectionSource:l?.modelSelectionSource??(e?"request_model":"pi_default_model"),piObservedRequestConfig:!0,finalHttpRequestObserved:!1,...b,historyMessageCount:Number.isSafeInteger(o.messageCount)?o.messageCount:null,attachmentCount:u,imageAttachmentCount:r,toolCallCount:0,queuedIntoActiveRun:g},console.info(P(this.turnDiagnostic)),I=!0;const q=g?l?.source==="room_activation"?"follow_up":"steer":"prompt",v={message:T(t,s,this.workDir,this.externalChannel,this.shennianSessionId,null)},C=k(s,!this.managedAgentPolicy);C.length&&(v.images=C),h="prompt_dispatch",await y.request(q,v)}catch(y){const o=_(y),g=this.turnDiagnostic??{marker:m,phase:"request_config",...S(a.provider)?{requestedProvider:S(a.provider)}:{},...S(a.modelId)?{requestedModel:S(a.modelId)}:{},modelSelectionSource:l?.modelSelectionSource??(e?"request_model":"pi_default_model"),piObservedRequestConfig:!1,finalHttpRequestObserved:!1,providerConfigSource:"unknown",credentialSource:"unknown",credentialPresent:"unknown",agentDirSource:this.processEnv.PI_CODING_AGENT_DIR?"pi_agent_dir_environment":"user_home_default",historyMessageCount:null,attachmentCount:u,imageAttachmentCount:r,toolCallCount:0,queuedIntoActiveRun:!1};throw I||console.info(P(g)),console.warn(P({...g,phase:"outcome",outcome:"failed",errorStage:h,errorCode:o.errorCode,...o.httpStatus?{httpStatus:o.httpStatus}:{}})),this.turnDiagnostic=null,new Error(`Pi ${h} failed${o.httpStatus?` (HTTP ${o.httpStatus})`:""}: ${o.safeDetail??o.errorCode}`)}}async resume(t){await this.stopProcess(),this.agentSessionId=t}async stop(){const t=this.rpc;t&&(await t.request("clear_queue").catch(()=>{}),await t.request("abort").catch(()=>{})),!this.terminal&&this.runId&&(this.logDiagnosticOutcome("aborted"),this.emitTerminal({state:"aborted"})),await this.stopProcess()}async getStatus(){if(!this.rpc||!this.process)return{active:!1,runId:null,canStop:!1};const t=await this.readState().catch(()=>null),e=!!(t?.isStreaming||t?.isCompacting||this.active);return{active:e,runId:e?this.runId:null,runPhase:e?this.runPhase??"thinking":null,canStop:e}}async setTitle(t,e){this.rpc&&await this.rpc.request("set_session_name",{name:e.slice(0,200)})}async ensureProcess(t){if(this.process&&this.rpc){if(!await this.roomContextStale())return;await this.stopProcess()}const e=$("pi-coding-agent");if(!e)throw new Error('Command "pi" not found. Install @earendil-works/pi-coding-agent from the official package.');const i=["--mode","rpc","--session-dir",this.sessionDir,"--offline"];if(this.agentSessionId&&i.push("--session",this.agentSessionId),this.managedAgentPolicy&&!x(this.managedAgentPolicy)){i.push("--no-extensions","--no-skills","--no-prompt-templates","--no-context-files");const r=this.managedTools(),h=W({outputPath:p.join(w("runtime","pi-coding-agent",E(this.shennianSessionId)),"managed-extension.ts"),policy:this.managedAgentPolicy,allowRoomControl:!!this.extraEnv.SHENNIAN_MANAGED_ROOM_CONTEXT,allowManagerControl:!!this.extraEnv.SHENNIAN_MANAGER_SESSION_ID,allowHostShell:this.managedAgentPolicy.adapterPolicy.fileAccess==="host-full"});i.push("--no-builtin-tools","--extension",h),r.length?i.push("--tools",r.join(",")):i.push("--no-tools")}const s=B(this.workDir,this.externalChannel,this.shennianSessionId,t),c=this.validationRoot??w("runtime","pi-coding-agent",E(this.shennianSessionId));f.mkdirSync(c,{recursive:!0,mode:448}),this.promptFile=p.join(c,"instructions.md"),f.writeFileSync(this.promptFile,s,{encoding:"utf8",mode:384}),process.platform!=="win32"&&f.chmodSync(this.promptFile,384),i.push("--append-system-prompt",this.promptFile);const l={NO_COLOR:"1"},m=this.managedAgentPolicy&&!x(this.managedAgentPolicy)?U({agentType:this.type,providerEnv:this.extraEnv,sessionEnv:this.extraEnv,runtimeEnv:l}):this.managedAgentPolicy?G({...l,...this.extraEnv}):F({...l,...this.extraEnv});this.processEnv=m;const a=j(e,i,{cwd:this.workDir,stdio:["pipe","pipe","pipe"],env:m});this.process=a,this.spawnedRoomContext=this.currentRoomContext(),this.stderr="",a.stderr?.on("data",r=>{const h=typeof r=="string"?r:r.toString("utf8");this.stderr=D(`${this.stderr}${h}`,V)});const u=new X(a);this.rpc=u,u.on("event",r=>this.handleRpcEvent(r)),u.on("protocolError",r=>this.emitError(r.message)),a.once("close",r=>{this.process===a&&(this.process=null,this.rpc=null,this.terminal||this.emitError(r===0?"Pi RPC process closed before agent_settled":`Pi RPC process exited with code ${r??"unknown"}${this.stderr?`: ${this.stderr}`:""}`))}),a.once("error",r=>{this.process===a&&this.emitError(r.message)});try{const r=await this.readState();if(!r.sessionId)throw new Error("Pi RPC did not return a session ID");if(r.isStreaming||r.isCompacting)throw new Error("Pi RPC session is not idle after startup");if(this.agentSessionId&&r.sessionId!==this.agentSessionId)throw new Error("Pi RPC resumed a different session");if(!r.sessionFile||!this.ownsSessionFile(r.sessionFile))throw new Error("Pi RPC returned a session file outside the Shennian-owned directory");this.agentSessionId=r.sessionId,this.persistNativeSession&&Y(r.sessionId,this.sessionDir)}catch(r){throw await this.stopProcess(),r}}currentRoomContext(){return this.extraEnv.SHENNIAN_MANAGED_ROOM_CONTEXT??null}async roomContextStale(){if(this.currentRoomContext()===this.spawnedRoomContext)return!1;const t=await this.readState().catch(()=>null);return!t?.isStreaming&&!t?.isCompacting}managedTools(){const t=this.managedAgentPolicy?.adapterPolicy;if(!t)return[];const e=["read","grep","find","ls"];(t.fileAccess==="workspace-write"||t.fileAccess==="host-full")&&e.push("edit","write");const i=!!this.extraEnv.SHENNIAN_MANAGER_SESSION_ID,s=!!this.extraEnv.SHENNIAN_MANAGED_ROOM_CONTEXT;return(i||s||t.fileAccess==="host-full")&&e.push("bash"),e}ownsSessionFile(t){const e=p.resolve(this.sessionDir),i=p.resolve(t),s=p.relative(e,i);return s!==""&&!s.startsWith("..")&&!p.isAbsolute(s)}async readState(){const t=await this.requireRpc().request("get_state");return tt(t)}requireRpc(){if(!this.rpc)throw new Error("Pi RPC process is not running");return this.rpc}handleRpcEvent(t){if(t.type==="agent_start"){this.active=!0,this.runPhase="thinking",this.emitEvent({state:"start",agentSessionId:this.agentSessionId??void 0});return}if(t.type==="message_update"){this.lastUsage=N(t.usage)??this.lastUsage;const e=t.assistantMessageEvent;if(!e||typeof e!="object")return;const i=e;i.type==="text_delta"&&typeof i.delta=="string"?(this.runPhase="streaming_text",this.emitEvent({state:"delta",text:i.delta})):i.type==="thinking_delta"&&typeof i.delta=="string"&&(this.runPhase="thinking",this.emitEvent({state:"delta",text:i.delta,thinking:!0}));return}if(t.type==="tool_execution_start"){this.turnDiagnostic&&(this.turnDiagnostic.toolCallCount+=1),this.runPhase="tool_running",this.emitEvent({state:"tool-call",name:typeof t.toolName=="string"?t.toolName:"tool",args:t.args&&typeof t.args=="object"&&!Array.isArray(t.args)?t.args:{}});return}if(t.type==="tool_execution_end"){this.runPhase="thinking",this.emitEvent({state:"tool-result",name:typeof t.toolName=="string"?t.toolName:"tool",result:et(t.result)||it(t.result)});return}if(t.type==="tool_execution_update"){this.emitEvent({state:"notify",runPhase:"tool_running",message:"Pi tool is running"});return}if(t.type==="message_end"){const e=t.message;if(e&&typeof e=="object"){const i=e;if(this.lastUsage=N(i.usage)??this.lastUsage,i.stopReason==="error"){const s=_(i.errorMessage);this.logDiagnosticOutcome("failed",{errorStage:"pi_model_turn",errorCode:s.errorCode,...s.httpStatus?{httpStatus:s.httpStatus}:{}}),this.emitError(R(i.errorMessage))}}return}if(t.type==="compaction_start"){this.runPhase="thinking",this.emitEvent({state:"notify",runPhase:"thinking",message:"Pi is compacting context"});return}if(t.type==="auto_retry_start"||t.type==="summarization_retry_scheduled"){this.runPhase="thinking",this.emitEvent({state:"notify",runPhase:"thinking",message:"Pi is retrying"});return}if(t.type==="extension_ui_request"){typeof t.id=="string"&&this.rpc?.notify("extension_ui_response",{id:t.id,cancelled:!0});return}if(t.type==="extension_error"){this.logDiagnosticOutcome("failed",{errorStage:"pi_process",errorCode:"extension_error"}),this.emitError(typeof t.error=="string"?t.error:"Pi extension failed");return}t.type==="agent_settled"&&(this.active=!1,this.logDiagnosticOutcome("completed"),this.emitTerminal({state:"final",agentSessionId:this.agentSessionId??void 0,usage:this.lastUsage}))}emitEvent(t){this.runId&&this.emit("agentEvent",{...t,runId:this.runId,seq:this.seq++})}emitTerminal(t){this.terminal||(this.terminal=!0,this.active=!1,this.runPhase=null,this.emitEvent(t))}logDiagnosticOutcome(t,e={}){this.turnDiagnostic&&(console.info(P({...this.turnDiagnostic,phase:"outcome",outcome:t,...e})),this.turnDiagnostic=null)}emitError(t){if(this.turnDiagnostic){const e=_(t);this.logDiagnosticOutcome("failed",{errorStage:"pi_process",errorCode:e.errorCode,...e.httpStatus?{httpStatus:e.httpStatus}:{}})}this.emitTerminal({state:"error",message:t.startsWith("Pi model request failed")?t:R(t)})}async stopProcess(){const t=this.process;this.process=null,this.rpc?.close(),this.rpc=null,t&&(t.kill("SIGTERM"),await new Promise(e=>{let i=!1;const s=()=>{i||(i=!0,e())};t.once("close",s),setTimeout(()=>{t.kill("SIGKILL"),s()},Q).unref()})),this.validationRoot&&(f.rmSync(this.validationRoot,{recursive:!0,force:!0}),this.validationRoot=null)}}M("pi-coding-agent",()=>new nt);export{nt as PiCodingAgentAdapter};
+import g from"node:fs";import p from"node:path";import{randomUUID as x}from"node:crypto";import{AgentAdapter as M,registerAgent as $}from"./adapter.js";import{resolveBuiltinCommand as j,spawnAgentCommand as F}from"./command-spec.js";import{buildAgentProcessEnv as U,buildManagedAgentProcessEnv as G,buildManagedNativeFullProcessEnv as H}from"../agent-env.js";import{resolveShennianPath as I}from"../config/index.js";import{buildInlineChannelPreamble as B,buildPlatformInstructions as X}from"./platform-instructions.js";import{isManagedAgentNativeFull as D}from"../security/managed-agent-policy.js";import{assertPublicAgentPolicy as z}from"../security/public-agent-policy.js";import{PiRpcClient as L}from"./pi-rpc-client.js";import{registerManagedAgentRuntimeSecurity as W}from"../security/managed-agent-runtime.js";import{PI_CODING_AGENT_MANAGED_RUNTIME_SECURITY as Y}from"./pi-coding-agent-managed-permissions.js";import{writePiManagedExtension as J}from"./pi-managed-extension.js";import{recordPiSessionOwnership as K}from"./pi-session-ownership.js";import{classifyPiFailure as P,createPiDiagnosticMarker as V,formatPiDiagnostic as w,inspectPiTurnConfiguration as Z,sanitizePiDiagnosticDimension as f}from"./pi-turn-diagnostics.js";W("pi-coding-agent",Y);const Q=32*1024,tt=256*1024,et=3e3;function E(n){return n.replace(/[^a-zA-Z0-9_.-]/g,"_").slice(0,180)||"session"}function st(n){return n.data&&typeof n.data=="object"&&!Array.isArray(n.data)?n.data:{}}function it(n){if(typeof n=="string")return n;if(!n||typeof n!="object")return"";const t=n.content;return Array.isArray(t)?t.map(e=>{if(!e||typeof e!="object")return"";const s=e;return s.type==="text"&&typeof s.text=="string"?s.text:""}).join(""):""}function R(n,t=tt){return n.length<=t?n:`${n.slice(0,t)}
+[truncated]`}function N(n){const t=P(n),e=t.safeDetail??"Upstream error details were omitted";return`Pi model request failed${t.httpStatus?` (HTTP ${t.httpStatus})`:""}: ${e}`}function nt(n){try{return R(JSON.stringify(n))}catch{return"[unserializable]"}}function T(n){if(!n||typeof n!="object")return;const t=n;if(!(typeof t.input!="number"&&typeof t.output!="number"))return{inputTokens:typeof t.input=="number"?t.input:0,outputTokens:typeof t.output=="number"?t.output:0}}function rt(n){const t=n?.trim();if(!t)return{};const e=t.indexOf("/");return e<=0||e===t.length-1?{modelId:t}:{provider:t.slice(0,e),modelId:t.slice(e+1)}}function b(n,t,e,s,i,u){const l=B(e,s,i,u),d=t?.filter(o=>o.kind!=="image")??[];if(!d.length)return`${l}${n}`;const S=d.map(o=>`[${o.name}](<${o.path}>)`);return`${l}${[n,"",...S].join(`
+`)}`}function k(n,t){const e=[];for(const s of n??[]){if(s.kind!=="image"||!s.mimeType.startsWith("image/"))continue;let i=s.previewData?.trim()??"";const u=i.indexOf(",");if(i.startsWith("data:")&&u>=0&&(i=i.slice(u+1)),!i&&t&&s.path&&!/^https?:\/\//i.test(s.path))try{const l=g.statSync(s.path);l.isFile()&&l.size<=10*1024*1024&&(i=g.readFileSync(s.path).toString("base64"))}catch{i=""}i&&e.push({type:"image",data:i,mimeType:s.mimeType})}return e}class ot extends M{type="pi-coding-agent";get supportsActiveInput(){return!0}async injectActiveInput(t){const e=await this.readState();if(!this.rpc||!this.runId||!e.isStreaming&&!e.isCompacting)throw new Error("pi_active_turn_unavailable");const s={message:b(t.text,t.attachments,this.workDir,this.externalChannel,this.shennianSessionId,null)},i=k(t.attachments,!this.managedAgentPolicy);i.length&&(s.images=i),await this.rpc.request("steer",s)}get recoveryCapabilities(){return{inspectTerminal:!1,reattachRun:!1,resumeRun:!1,resumeSession:!0}}process=null;rpc=null;shennianSessionId="";workDir="";sessionDir="";agentSessionId=null;externalChannel=null;extraEnv={};spawnedRoomContext=null;spawnedPublicTurn=!1;managedAgentPolicy=null;runId="";seq=0;active=!1;terminal=!0;stderr="";lastUsage;promptFile=null;persistNativeSession=!0;validationRoot=null;runPhase=null;processEnv={};turnDiagnostic=null;configure(t){t.sessionId&&(this.shennianSessionId=t.sessionId),this.externalChannel=t.externalChannel??null,this.extraEnv=t.env??{},"managedAgentPolicy"in t&&(this.managedAgentPolicy=t.managedAgentPolicy??null)}async start(t,e,s,i){await this.stopProcess(),this.shennianSessionId=t,this.workDir=this.managedAgentPolicy?.adapterPolicy.workDir??e,this.agentSessionId=s??null;const u=I("runtime","pi-coding-agent",E(t));this.persistNativeSession=i?.persistNativeSession!==!1,this.validationRoot=this.persistNativeSession?null:p.join(u,`validation-${x()}`),this.sessionDir=this.validationRoot?p.join(this.validationRoot,"sessions"):p.join(u,"sessions"),g.mkdirSync(this.sessionDir,{recursive:!0,mode:448}),process.platform!=="win32"&&g.chmodSync(this.sessionDir,448),this.active=!1,this.terminal=!0}async send(t,e,s,i,u,l){const d=l?.source==="published_agent";d&&z(this.managedAgentPolicy);const S=V(),o=rt(e),_=i?.length??0,r=i?.filter(y=>y.kind==="image").length??0;let c="process_start",v=!1;try{await this.ensureProcess(u,d);const y=this.requireRpc();c="state_read";let a=await this.readState();const m=!!(a.isStreaming||a.isCompacting);(!m||!this.runId)&&(this.runId=x(),this.seq=0,this.terminal=!1,this.lastUsage=void 0,this.runPhase="thinking");const h=o;if(h.modelId&&!m&&(a.model?.id!==h.modelId||h.provider&&a.model?.provider!==h.provider)){if(!h.provider)throw new Error("Pi model selection must include provider/modelId");c="model_selection",await y.request("set_model",{provider:h.provider,modelId:h.modelId}),c="state_read",a=await this.readState()}s&&!m&&(c="thinking_selection",await y.request("set_thinking_level",{level:s}));const q=Z({model:a.model,env:this.processEnv});this.turnDiagnostic={marker:S,phase:"request_config",...f(h.provider)?{requestedProvider:f(h.provider)}:{},...f(h.modelId)?{requestedModel:f(h.modelId)}:{},modelSelectionSource:l?.modelSelectionSource??(e?"request_model":"pi_default_model"),piObservedRequestConfig:!0,finalHttpRequestObserved:!1,...q,historyMessageCount:Number.isSafeInteger(a.messageCount)?a.messageCount:null,attachmentCount:_,imageAttachmentCount:r,toolCallCount:0,queuedIntoActiveRun:m},console.info(w(this.turnDiagnostic)),v=!0;const O=m?l?.source==="room_activation"?"follow_up":"steer":"prompt",C={message:b(t,i,this.workDir,this.externalChannel,this.shennianSessionId,null)},A=k(i,!this.managedAgentPolicy);A.length&&(C.images=A),c="prompt_dispatch",await y.request(O,C)}catch(y){const a=P(y),m=this.turnDiagnostic??{marker:S,phase:"request_config",...f(o.provider)?{requestedProvider:f(o.provider)}:{},...f(o.modelId)?{requestedModel:f(o.modelId)}:{},modelSelectionSource:l?.modelSelectionSource??(e?"request_model":"pi_default_model"),piObservedRequestConfig:!1,finalHttpRequestObserved:!1,providerConfigSource:"unknown",credentialSource:"unknown",credentialPresent:"unknown",agentDirSource:this.processEnv.PI_CODING_AGENT_DIR?"pi_agent_dir_environment":"user_home_default",historyMessageCount:null,attachmentCount:_,imageAttachmentCount:r,toolCallCount:0,queuedIntoActiveRun:!1};throw v||console.info(w(m)),console.warn(w({...m,phase:"outcome",outcome:"failed",errorStage:c,errorCode:a.errorCode,...a.httpStatus?{httpStatus:a.httpStatus}:{}})),this.turnDiagnostic=null,new Error(`Pi ${c} failed${a.httpStatus?` (HTTP ${a.httpStatus})`:""}: ${a.safeDetail??a.errorCode}`)}}async resume(t){await this.stopProcess(),this.agentSessionId=t}async stop(){const t=this.rpc;t&&(await t.request("clear_queue").catch(()=>{}),await t.request("abort").catch(()=>{})),!this.terminal&&this.runId&&(this.logDiagnosticOutcome("aborted"),this.emitTerminal({state:"aborted"})),await this.stopProcess()}async getStatus(){if(!this.rpc||!this.process)return{active:!1,runId:null,canStop:!1};const t=await this.readState().catch(()=>null),e=!!(t?.isStreaming||t?.isCompacting||this.active);return{active:e,runId:e?this.runId:null,runPhase:e?this.runPhase??"thinking":null,canStop:e}}async setTitle(t,e){this.rpc&&await this.rpc.request("set_session_name",{name:e.slice(0,200)})}async ensureProcess(t,e=!1){if(this.process&&this.rpc){if(this.spawnedPublicTurn===e&&!await this.roomContextStale())return;await this.stopProcess()}const s=j("pi-coding-agent");if(!s)throw new Error('Command "pi" not found. Install @earendil-works/pi-coding-agent from the official package.');const i=["--mode","rpc","--session-dir",this.sessionDir,"--offline"];if(this.agentSessionId&&i.push("--session",this.agentSessionId),this.managedAgentPolicy&&!D(this.managedAgentPolicy))if(i.push("--no-extensions","--no-skills","--no-prompt-templates","--no-context-files"),e)i.push("--no-tools","--no-approve");else{const r=this.managedTools(),c=J({outputPath:p.join(I("runtime","pi-coding-agent",E(this.shennianSessionId)),"managed-extension.ts"),policy:this.managedAgentPolicy,allowRoomControl:!!this.extraEnv.SHENNIAN_MANAGED_ROOM_CONTEXT,allowManagerControl:!!this.extraEnv.SHENNIAN_MANAGER_SESSION_ID,allowHostShell:this.managedAgentPolicy.adapterPolicy.fileAccess==="host-full"});i.push("--no-builtin-tools","--extension",c),r.length?i.push("--tools",r.join(",")):i.push("--no-tools")}const u=X(this.workDir,this.externalChannel,this.shennianSessionId,t),l=this.validationRoot??I("runtime","pi-coding-agent",E(this.shennianSessionId));g.mkdirSync(l,{recursive:!0,mode:448}),this.promptFile=p.join(l,"instructions.md"),g.writeFileSync(this.promptFile,u,{encoding:"utf8",mode:384}),process.platform!=="win32"&&g.chmodSync(this.promptFile,384),i.push("--append-system-prompt",this.promptFile);const d={NO_COLOR:"1"},S=this.managedAgentPolicy&&!D(this.managedAgentPolicy)?G({agentType:this.type,providerEnv:this.extraEnv,sessionEnv:this.extraEnv,runtimeEnv:d}):this.managedAgentPolicy?H({...d,...this.extraEnv}):U({...d,...this.extraEnv});this.processEnv=S;const o=F(s,i,{cwd:this.workDir,stdio:["pipe","pipe","pipe"],env:S});this.process=o,this.spawnedPublicTurn=e,this.spawnedRoomContext=this.currentRoomContext(),this.stderr="",o.stderr?.on("data",r=>{const c=typeof r=="string"?r:r.toString("utf8");this.stderr=R(`${this.stderr}${c}`,Q)});const _=new L(o);this.rpc=_,_.on("event",r=>this.handleRpcEvent(r)),_.on("protocolError",r=>this.emitError(r.message)),o.once("close",r=>{this.process===o&&(this.process=null,this.rpc=null,this.terminal||this.emitError(r===0?"Pi RPC process closed before agent_settled":`Pi RPC process exited with code ${r??"unknown"}${this.stderr?`: ${this.stderr}`:""}`))}),o.once("error",r=>{this.process===o&&this.emitError(r.message)});try{const r=await this.readState();if(!r.sessionId)throw new Error("Pi RPC did not return a session ID");if(r.isStreaming||r.isCompacting)throw new Error("Pi RPC session is not idle after startup");if(this.agentSessionId&&r.sessionId!==this.agentSessionId)throw new Error("Pi RPC resumed a different session");if(!r.sessionFile||!this.ownsSessionFile(r.sessionFile))throw new Error("Pi RPC returned a session file outside the Shennian-owned directory");const c=this.agentSessionId!==r.sessionId;this.agentSessionId=r.sessionId,c&&this.emit("nativeSession","pi-coding-agent",r.sessionId),this.persistNativeSession&&K(r.sessionId,this.sessionDir)}catch(r){throw await this.stopProcess(),r}}currentRoomContext(){return this.extraEnv.SHENNIAN_MANAGED_ROOM_CONTEXT??null}async roomContextStale(){if(this.currentRoomContext()===this.spawnedRoomContext)return!1;const t=await this.readState().catch(()=>null);return!t?.isStreaming&&!t?.isCompacting}managedTools(){const t=this.managedAgentPolicy?.adapterPolicy;if(!t)return[];const e=["read","grep","find","ls"];(t.fileAccess==="workspace-write"||t.fileAccess==="host-full")&&e.push("edit","write");const s=!!this.extraEnv.SHENNIAN_MANAGER_SESSION_ID,i=!!this.extraEnv.SHENNIAN_MANAGED_ROOM_CONTEXT;return(s||i||t.fileAccess==="host-full")&&e.push("bash"),e}ownsSessionFile(t){const e=p.resolve(this.sessionDir),s=p.resolve(t),i=p.relative(e,s);return i!==""&&!i.startsWith("..")&&!p.isAbsolute(i)}async readState(){const t=await this.requireRpc().request("get_state");return st(t)}requireRpc(){if(!this.rpc)throw new Error("Pi RPC process is not running");return this.rpc}handleRpcEvent(t){if(t.type==="agent_start"){this.active=!0,this.runPhase="thinking",this.emitEvent({state:"start",agentSessionId:this.agentSessionId??void 0});return}if(t.type==="message_update"){this.lastUsage=T(t.usage)??this.lastUsage;const e=t.assistantMessageEvent;if(!e||typeof e!="object")return;const s=e;s.type==="text_delta"&&typeof s.delta=="string"?(this.runPhase="streaming_text",this.emitEvent({state:"delta",text:s.delta})):s.type==="thinking_delta"&&typeof s.delta=="string"&&(this.runPhase="thinking",this.emitEvent({state:"delta",text:s.delta,thinking:!0}));return}if(t.type==="tool_execution_start"){this.turnDiagnostic&&(this.turnDiagnostic.toolCallCount+=1),this.runPhase="tool_running",this.emitEvent({state:"tool-call",name:typeof t.toolName=="string"?t.toolName:"tool",args:t.args&&typeof t.args=="object"&&!Array.isArray(t.args)?t.args:{}});return}if(t.type==="tool_execution_end"){this.runPhase="thinking",this.emitEvent({state:"tool-result",name:typeof t.toolName=="string"?t.toolName:"tool",result:it(t.result)||nt(t.result)});return}if(t.type==="tool_execution_update"){this.emitEvent({state:"notify",runPhase:"tool_running",message:"Pi tool is running"});return}if(t.type==="message_end"){const e=t.message;if(e&&typeof e=="object"){const s=e;if(this.lastUsage=T(s.usage)??this.lastUsage,s.stopReason==="error"){const i=P(s.errorMessage);this.logDiagnosticOutcome("failed",{errorStage:"pi_model_turn",errorCode:i.errorCode,...i.httpStatus?{httpStatus:i.httpStatus}:{}}),this.emitError(N(s.errorMessage))}}return}if(t.type==="compaction_start"){this.runPhase="thinking",this.emitEvent({state:"notify",runPhase:"thinking",message:"Pi is compacting context"});return}if(t.type==="auto_retry_start"||t.type==="summarization_retry_scheduled"){this.runPhase="thinking",this.emitEvent({state:"notify",runPhase:"thinking",message:"Pi is retrying"});return}if(t.type==="extension_ui_request"){typeof t.id=="string"&&this.rpc?.notify("extension_ui_response",{id:t.id,cancelled:!0});return}if(t.type==="extension_error"){this.logDiagnosticOutcome("failed",{errorStage:"pi_process",errorCode:"extension_error"}),this.emitError(typeof t.error=="string"?t.error:"Pi extension failed");return}t.type==="agent_settled"&&(this.active=!1,this.logDiagnosticOutcome("completed"),this.emitTerminal({state:"final",agentSessionId:this.agentSessionId??void 0,usage:this.lastUsage}))}emitEvent(t){this.runId&&this.emit("agentEvent",{...t,runId:this.runId,seq:this.seq++})}emitTerminal(t){this.terminal||(this.terminal=!0,this.active=!1,this.runPhase=null,this.emitEvent(t))}logDiagnosticOutcome(t,e={}){this.turnDiagnostic&&(console.info(w({...this.turnDiagnostic,phase:"outcome",outcome:t,...e})),this.turnDiagnostic=null)}emitError(t){if(this.turnDiagnostic){const e=P(t);this.logDiagnosticOutcome("failed",{errorStage:"pi_process",errorCode:e.errorCode,...e.httpStatus?{httpStatus:e.httpStatus}:{}})}this.emitTerminal({state:"error",message:t.startsWith("Pi model request failed")?t:N(t)})}async stopProcess(){const t=this.process;this.process=null,this.rpc?.close(),this.rpc=null,t&&(t.kill("SIGTERM"),await new Promise(e=>{let s=!1;const i=()=>{s||(s=!0,e())};t.once("close",i),setTimeout(()=>{t.kill("SIGKILL"),i()},et).unref()})),this.validationRoot&&(g.rmSync(this.validationRoot,{recursive:!0,force:!0}),this.validationRoot=null)}}$("pi-coding-agent",()=>new ot);export{ot as PiCodingAgentAdapter};

package/dist/src/agents/public-agent-client.js

@@ -1 +1 @@
-import{loadConfig as p}from"../config/index.js";import{SERVERS as g}from"../region.js";class a extends Error{code;nextAction;constructor(e,n,o=null){super(n),this.code=e,this.nextAction=o}}class R{fetchImpl;constructor(e=fetch){this.fetchImpl=e}list(){return this.request("GET","/api/agent-cli/agents")}get(e){return this.request("GET",`/api/agent-cli/agents/${encodeURIComponent(e)}`)}create(e){return this.request("POST","/api/agent-cli/agents",e)}update(e,n){return this.request("PATCH",`/api/agent-cli/agents/${encodeURIComponent(e)}`,n)}delete(e){return this.request("DELETE",`/api/agent-cli/agents/${encodeURIComponent(e)}`)}listRooms(e){return this.request("GET",`/api/agent-cli/agents/${encodeURIComponent(e)}/rooms`)}createRoomSession(e,n){return this.request("POST",`/api/agent-cli/agents/${encodeURIComponent(e)}/room-sessions`,n)}removeFromRoom(e,n){return this.request("POST",`/api/agent-cli/agents/${encodeURIComponent(e)}/rooms/${encodeURIComponent(n)}/remove`,{})}async request(e,n,o){const c=p();if(!c.machineToken)throw new a("not_paired","Shennian CLI is not paired.",{type:"run_command",command:"shennian pair --browser"});const u=(c.serverUrl??g.cn.url).replace(/\/+$/,"");let s;try{s=await this.fetchImpl(`${u}${n}`,{method:e,headers:{authorization:`Bearer ${c.machineToken}`,...o==null?{}:{"content-type":"application/json"}},...o==null?{}:{body:JSON.stringify(o)},signal:AbortSignal.timeout(2e4)})}catch{throw new a("server_unavailable","Shennian service is unavailable.")}const i=await m(s);if(!s.ok){const r=l(i)?i:{};throw new a(typeof r.error=="string"?r.error:`http_${s.status}`,typeof r.message=="string"?r.message:"Agent request failed.",h(r.nextAction)?r.nextAction:null)}if(!l(i))throw new a("invalid_server_response","Shennian returned an invalid Agent response.");return i}}async function m(t){try{return await t.json()}catch{return null}}function h(t){return l(t)&&Object.values(t).every(e=>typeof e=="string")}function l(t){return!!t&&typeof t=="object"&&!Array.isArray(t)}export{R as PublicAgentClient,a as PublicAgentClientError};
+import{loadConfig as l}from"../config/index.js";import{SERVERS as p}from"../region.js";const d=/^[A-Za-z0-9_-]{32}$/;function b(r,e){let t,n;try{t=new URL(r),n=new URL(e)}catch{throw new o("published_agent_url_invalid","Use a Shennian published Agent URL.")}const i=/^\/p\/([A-Za-z0-9_-]{32})\/?$/.exec(t.pathname);if(t.origin!==n.origin||!i||t.search||t.hash||!d.test(i[1]))throw new o("published_agent_url_invalid","Use a Shennian published Agent URL.");return i[1]}function f(r,e){if(!d.test(r))throw new o("published_agent_id_invalid","Shennian returned an invalid publication id.");return new URL(`/p/${r}`,e).toString()}class o extends Error{code;nextAction;constructor(e,t,n=null){super(t),this.code=e,this.nextAction=n}}class R{fetchImpl;constructor(e=fetch){this.fetchImpl=e}list(){return this.request("GET","/api/agent-cli/agents")}get(e){return this.request("GET",`/api/agent-cli/agents/${encodeURIComponent(e)}`)}create(e){return this.request("POST","/api/agent-cli/agents",e)}update(e,t){return this.request("PATCH",`/api/agent-cli/agents/${encodeURIComponent(e)}`,t)}delete(e){return this.request("DELETE",`/api/agent-cli/agents/${encodeURIComponent(e)}`)}listRooms(e){return this.request("GET",`/api/agent-cli/agents/${encodeURIComponent(e)}/rooms`)}createRoomSession(e,t){return this.request("POST",`/api/agent-cli/agents/${encodeURIComponent(e)}/room-sessions`,t)}removeFromRoom(e,t){return this.request("POST",`/api/agent-cli/agents/${encodeURIComponent(e)}/rooms/${encodeURIComponent(t)}/remove`,{})}async getPublication(e){const t=await this.request("GET",`/api/agents/${encodeURIComponent(e)}/publication`),n=t.publication;if(!u(n)||typeof n.publicId!="string")return t;const i=l();return{...t,publication:{...n,shareUrl:f(n.publicId,i.serverUrl??p.cn.url)}}}getPublicationReadiness(e){return this.request("GET",`/api/agents/${encodeURIComponent(e)}/publication/readiness`)}createPublicationDraft(e,t){return this.request("POST",`/api/agents/${encodeURIComponent(e)}/publication/draft`,t)}updatePublication(e,t){return this.request("PUT",`/api/agents/${encodeURIComponent(e)}/publication`,t)}activatePublication(e,t,n){return this.request("POST",`/api/agents/${encodeURIComponent(e)}/publication/activate`,{expectedGeneration:t,expectedPolicyVersion:n})}pausePublication(e,t,n){return this.request("POST",`/api/agents/${encodeURIComponent(e)}/publication/pause`,{expectedGeneration:t,expectedPolicyVersion:n})}revokePublication(e,t){return this.request("POST",`/api/agents/${encodeURIComponent(e)}/publication/revoke`,{expectedGeneration:t})}listPublicationConversations(e,t){const n=t?`?cursor=${encodeURIComponent(t)}`:"";return this.request("GET",`/api/agents/${encodeURIComponent(e)}/publication/conversations${n}`)}listMyDirectConversations(e){const t=e?`?cursor=${encodeURIComponent(e)}`:"";return this.request("GET",`/api/agent-direct-conversations${t}`)}openPublishedAgent(e){const t=this.publicIdFromUrl(e);return this.request("GET",`/api/published-agents/${t}`)}readPublishedAgent(e,t={}){const n=this.publicIdFromUrl(e),i=h(t);return this.request("GET",`/api/published-agents/${n}/conversation${i}`)}readDirectConversation(e,t={}){const n=h(t);return this.request("GET",`/api/agent-direct-conversations/${encodeURIComponent(e)}${n}`)}sendPublishedAgent(e,t){const n=this.publicIdFromUrl(e);return this.request("POST",`/api/published-agents/${n}/messages`,t)}publicIdFromUrl(e){const t=l();return b(e,t.serverUrl??p.cn.url)}async request(e,t,n){const i=l();if(!i.machineToken)throw new o("not_paired","Shennian CLI is not paired.",{type:"run_command",command:"shennian pair --browser"});const g=(i.serverUrl??p.cn.url).replace(/\/+$/,"");let a;try{a=await this.fetchImpl(`${g}${t}`,{method:e,redirect:"error",headers:{authorization:`Bearer ${i.machineToken}`,...n==null?{}:{"content-type":"application/json"}},...n==null?{}:{body:JSON.stringify(n)},signal:AbortSignal.timeout(2e4)})}catch{throw new o("server_unavailable","Shennian service is unavailable.")}const c=await m(a);if(!a.ok){const s=u(c)?c:{};throw new o(typeof s.error=="string"?s.error:`http_${a.status}`,typeof s.message=="string"?s.message:"Agent request failed.",U(s.nextAction)?s.nextAction:null)}if(!u(c))throw new o("invalid_server_response","Shennian returned an invalid Agent response.");return c}}function h(r){if(r.after!==void 0&&r.before!==void 0)throw new o("published_agent_cursor_invalid","Use --after or --before, not both.");return r.after!==void 0?`?after=${encodeURIComponent(r.after)}`:`?before=${encodeURIComponent(r.before??"latest")}`}async function m(r){try{return await r.json()}catch{return null}}function U(r){return u(r)&&Object.values(r).every(e=>typeof e=="string")}function u(r){return!!r&&typeof r=="object"&&!Array.isArray(r)}export{R as PublicAgentClient,o as PublicAgentClientError,b as parsePublishedAgentUrl,f as publishedAgentUrl};

package/dist/src/agents/public-delivery-client.js

@@ -0,0 +1 @@
+class n extends Error{code;constructor(e){super(e),this.code=e}}class c{fetchImpl;baseUrl;constructor(e,i=fetch){this.fetchImpl=i,this.baseUrl=e.replace(/\/+$/,"")}async post(e,i,a){let o;try{o=await this.fetchImpl(`${this.baseUrl}/api/agent-direct-delivery/${i}`,{method:"POST",redirect:"error",headers:{authorization:`Bearer ${e}`,"content-type":"application/json"},body:JSON.stringify(a??{}),signal:AbortSignal.timeout(15e3)})}catch{throw new n("public_agent_delivery_unavailable")}if(!o.ok){let r=`public_agent_delivery_http_${o.status}`;try{const t=await o.json();typeof t.error=="string"&&/^[a-z0-9_-]{1,100}$/.test(t.error)&&(r=t.error)}catch{}throw new n(r)}try{return await o.json()}catch{throw new n("public_agent_delivery_invalid_response")}}async claim(e){const i=await this.post(e,"claim");if(!i||typeof i!="object"||!("claim"in i))throw new n("public_agent_delivery_invalid_response");const a=i.claim;if(a===null)return null;if(!d(a))throw new n("public_agent_delivery_invalid_response");return a}async checkLease(e){const i=await this.post(e.machineToken,"check-lease",{messageId:e.claim.messageId,conversationId:e.claim.conversationId,bindingEpoch:e.claim.bindingEpoch,leaseToken:e.claim.leaseToken});if(!i||typeof i!="object"||!("valid"in i)||i.valid!==!0||!("leaseExpiresAt"in i)||typeof i.leaseExpiresAt!="string"||!Number.isFinite(Date.parse(i.leaseExpiresAt)))throw new n("public_agent_delivery_invalid_response")}async complete(e){const i=await this.post(e.machineToken,"complete",{messageId:e.claim.messageId,conversationId:e.claim.conversationId,bindingEpoch:e.claim.bindingEpoch,leaseToken:e.claim.leaseToken,replyText:e.replyText});if(!i||typeof i!="object"||!("replyMessageId"in i)||typeof i.replyMessageId!="string"||!("sequence"in i)||typeof i.sequence!="string"||!("idempotent"in i)||typeof i.idempotent!="boolean")throw new n("public_agent_delivery_invalid_response");return{replyMessageId:i.replyMessageId,sequence:i.sequence,idempotent:i.idempotent}}async fail(e){const i=await this.post(e.machineToken,"fail",{messageId:e.claim.messageId,conversationId:e.claim.conversationId,bindingEpoch:e.claim.bindingEpoch,leaseToken:e.claim.leaseToken,failureCode:e.failureCode});if(!i||typeof i!="object"||!("failed"in i)||i.failed!==!0)throw new n("public_agent_delivery_invalid_response")}async bindSession(e){const i=await this.post(e.machineToken,"bind-session",{messageId:e.claim.messageId,conversationId:e.claim.conversationId,bindingEpoch:e.claim.bindingEpoch,leaseToken:e.claim.leaseToken,nianSessionId:e.nianSessionId});if(!i||typeof i!="object"||!("bindingId"in i)||i.bindingId!==e.claim.bindingId||!("bindingEpoch"in i)||i.bindingEpoch!==e.claim.bindingEpoch||!("nianSessionId"in i)||i.nianSessionId!==e.nianSessionId)throw new n("public_agent_delivery_invalid_response");return{bindingId:e.claim.bindingId,bindingEpoch:e.claim.bindingEpoch,nianSessionId:e.nianSessionId}}async prepareSession(e){const i=await this.post(e.machineToken,"prepare-session",{messageId:e.claim.messageId,conversationId:e.claim.conversationId,bindingEpoch:e.claim.bindingEpoch,leaseToken:e.claim.leaseToken,workDir:e.workDir});if(!i||typeof i!="object"||!("nianSessionId"in i)||typeof i.nianSessionId!="string"||!/^[A-Za-z0-9_-]{1,191}$/.test(i.nianSessionId)||!("bindingId"in i)||i.bindingId!==e.claim.bindingId||!("bindingEpoch"in i)||i.bindingEpoch!==e.claim.bindingEpoch||!("nativeSessionId"in i)||i.nativeSessionId!==null&&(typeof i.nativeSessionId!="string"||!i.nativeSessionId||i.nativeSessionId.length>512)||!("workDir"in i)||i.workDir!==e.workDir)throw new n("public_agent_delivery_invalid_response");return{nianSessionId:i.nianSessionId,nativeSessionId:i.nativeSessionId,bindingId:e.claim.bindingId,bindingEpoch:e.claim.bindingEpoch,workDir:e.workDir}}async saveNativeSession(e){const i=await this.post(e.machineToken,"native-session",{messageId:e.claim.messageId,conversationId:e.claim.conversationId,bindingEpoch:e.claim.bindingEpoch,leaseToken:e.claim.leaseToken,nianSessionId:e.nianSessionId,nativeSessionId:e.nativeSessionId});if(!i||typeof i!="object"||!("nianSessionId"in i)||i.nianSessionId!==e.nianSessionId||!("nativeSessionId"in i)||i.nativeSessionId!==e.nativeSessionId)throw new n("public_agent_delivery_invalid_response")}}function d(s){if(!s||typeof s!="object")return!1;const e=s;return["messageId","conversationId","agentIdentityId","bindingId"].every(i=>typeof e[i]=="string"&&/^[A-Za-z0-9_-]{1,64}$/.test(e[i]))&&typeof e.runtimeAdapter=="string"&&e.runtimeAdapter.length>0&&e.runtimeAdapter.length<=64&&typeof e.executableFingerprint=="string"&&/^sha256:[a-f0-9]{64}$/.test(e.executableFingerprint)&&typeof e.text=="string"&&e.text.trim().length>0&&e.text.length<=2e4&&typeof e.sequence=="string"&&typeof e.leaseExpiresAt=="string"&&Number.isSafeInteger(e.bindingEpoch)&&Number(e.bindingEpoch)>=1&&typeof e.leaseToken=="string"&&/^[A-Za-z0-9_-]{43}$/.test(e.leaseToken)&&/^\d{1,20}$/.test(e.sequence)&&Number.isFinite(Date.parse(e.leaseExpiresAt))}export{c as HttpPublicAgentDeliveryClient,n as PublicAgentDeliveryError};

package/dist/src/agents/public-delivery-worker.js

@@ -0,0 +1 @@
+import{managedAgentConfirmationMatchesPolicy as d,parseManagedAgentPermissionPolicy as p}from"@shennian/wire";import{createAgent as m}from"./adapter.js";import{HttpPublicAgentDeliveryClient as f}from"./public-delivery-client.js";import{runPublicAgentTurn as g}from"./public-turn-runner.js";import{compileManagedAgentPolicy as y}from"../security/managed-agent-policy.js";const l=5e3;function b(s){if(!s||typeof s!="object")return!1;const t=s;return typeof t.id=="string"&&typeof t.machineId=="string"&&typeof t.runtimeAdapter=="string"&&typeof t.status=="string"&&typeof t.sessionMode=="string"&&typeof t.systemPrompt=="string"&&(t.modelId===null||typeof t.modelId=="string")&&p(t.permissionPolicy)!==null}class I{input;timer;generation=0;running=null;delivery;constructor(t){this.input=t,this.delivery=new f(t.serverUrl)}start(){this.generation%2!==1&&(this.generation+=1,this.schedule(0,this.generation))}stop(){this.generation%2!==0&&(this.generation+=1,this.timer&&clearTimeout(this.timer),this.timer=void 0,this.running?.abort())}schedule(t,i){i===this.generation&&(this.timer=setTimeout(()=>{this.tick(i)},t),this.timer.unref?.())}async tick(t){if(t!==this.generation)return;if(this.running)return this.schedule(l,t);const i=this.input.getMachineToken();if(!i)return this.schedule(l,t);try{const r=await this.delivery.claim(i);if(t!==this.generation){r&&await this.delivery.fail({machineToken:i,claim:r,failureCode:"execution_failed"}).catch(()=>{});return}if(r){const n=new AbortController;this.running=n;try{await this.run(r,i,n.signal)}finally{this.running=null}}}catch(r){this.input.onError?.(r)}this.schedule(l,t)}async run(t,i,r){let n=!1;try{const e=await this.loadAgent(t.agentIdentityId,i,r);if(r.aborted)throw new Error("public_agent_turn_aborted");if(e.id!==t.agentIdentityId||e.machineId!==this.input.machineId||e.runtimeAdapter!==t.runtimeAdapter||e.status!=="active"||e.sessionMode!=="standard")throw new Error("public_agent_definition_stale");const o=(await this.input.getDetectedAgents()).find(a=>a.type===t.runtimeAdapter);if(r.aborted)throw new Error("public_agent_turn_aborted");if(!o?.executableFingerprint||!o.version)throw new Error("public_agent_runtime_unavailable");if(o.executableFingerprint!==t.executableFingerprint){if(this.stop(),this.input.onRuntimeChanged)try{await this.input.onRuntimeChanged()}catch(a){this.input.onError?.(a)}throw new Error("public_agent_runtime_changed")}n=!0,await g({claim:t,machineToken:i,delivery:this.delivery,signal:r,createAdapter:()=>m(t.runtimeAdapter),compilePolicy:async a=>{const c={agentType:t.runtimeAdapter,runtimeVersion:o.version,platform:o.runtimePlatform??process.platform,isWsl:o.runtimeIsWsl??!1,executableFingerprint:o.executableFingerprint,requireExecutableFingerprint:!0},h=d({confirmation:e.permissionConfirmation,policy:e.permissionPolicy,runtimeAdapter:t.runtimeAdapter}),u=await y({...c,policy:e.permissionPolicy,hostFullAccessConfirmed:h,channel:"public",workDir:a});if(!u.ok)throw new Error(u.errorCode);return u.value},systemPrompt:e.systemPrompt,modelId:e.modelId,onError:this.input.onError})}catch(e){throw n||await this.delivery.fail({machineToken:i,claim:t,failureCode:"runtime_unavailable"}).catch(()=>{}),e}}async loadAgent(t,i,r){const n=await fetch(`${this.input.serverUrl.replace(/\/+$/,"")}/api/agent-cli/agents/${encodeURIComponent(t)}`,{headers:{authorization:`Bearer ${i}`},redirect:"error",signal:AbortSignal.any([r,AbortSignal.timeout(15e3)])});if(!n.ok)throw new Error("public_agent_definition_unavailable");const e=await n.json().catch(()=>null);if(!e||typeof e!="object"||!("agent"in e)||!b(e.agent))throw new Error("public_agent_definition_invalid");return e.agent}}export{I as PublicAgentDeliveryWorker};

package/dist/src/agents/public-reply-collector.js

@@ -0,0 +1 @@
+const h=2e4;class r extends Error{code;constructor(o){super(o),this.code=o}}function s(t){const o=t instanceof Error?t.message:typeof t=="string"?t:"";return/\b(?:insufficient quota|quota exceeded|out of credits|insufficient credits|billing hard limit|rate limit exceeded)\b|额度不足|余额不足|配额已用尽/.test(o.toLowerCase().slice(0,1e3))}async function E(t){const o=Math.min(t.timeoutMs??48e4,48e4);if(!Number.isSafeInteger(o)||o<1)throw new r("timeout");let a="",l=null,n=!1,c=!1,u=!1,m,d;const _=new Promise((e,b)=>{m=e,d=b}),i=e=>{n||(n=!0,e?d(e):a.trim()?m(a.trim()):d(new r("empty_reply")))},w=e=>{if(!n){if(e.runId){if(l&&e.runId!==l)return;l=e.runId}e.state==="delta"&&!e.thinking&&e.text?(a+=e.text,a.length>2e4&&i(new r("output_too_long"))):e.state==="final"?(c=!0,u&&i()):e.state==="error"?i(new r(s(e.message)?"provider_limit":"failed")):e.state==="aborted"?i(new r("aborted")):e.state==="approval-pending"&&(i(new r("unauthorized_tool_attempt")),t.adapter.stop().catch(()=>{}))}},p=e=>i(new r(s(e)?"provider_limit":"failed")),f=()=>{i(new r("aborted")),t.adapter.stop().catch(()=>{})};if(t.signal?.aborted)throw new r("aborted");t.adapter.on("agentEvent",w),t.adapter.on("error",p),t.signal?.addEventListener("abort",f,{once:!0}),t.signal?.aborted&&f();const g=setTimeout(()=>{n||(i(new r("timeout")),t.adapter.stop().catch(()=>{}))},o);try{try{t.send().then(e=>{e?.deliveryMode==="external_owner_queue"?i(new r("external_owner")):(u=!0,c&&i())}).catch(e=>i(new r(s(e)?"provider_limit":"failed")))}catch(e){i(new r(s(e)?"provider_limit":"failed"))}return await _}finally{clearTimeout(g),t.signal?.removeEventListener("abort",f),t.adapter.off("agentEvent",w),t.adapter.off("error",p)}}export{r as PublicAgentReplyError,E as collectPublicAgentReply};

package/dist/src/agents/public-turn-runner.js

@@ -0,0 +1,3 @@
+import{assertPublicAgentPolicy as y}from"../security/public-agent-policy.js";import{collectPublicAgentReply as S,PublicAgentReplyError as E}from"./public-reply-collector.js";import{preparePublicAgentWorkDir as k}from"./public-workdir.js";const A=5e3;async function T(t){try{await I(t)}catch(e){const i=e instanceof E?e.code==="timeout"?"timeout":e.code==="empty_reply"?"empty_reply":e.code==="provider_limit"?"provider_limit":e.code==="unauthorized_tool_attempt"?"unauthorized_tool_attempt":"execution_failed":String(e).includes("public_agent_policy_unavailable")||String(e).includes("public_agent_runtime_mismatch")?"runtime_unavailable":"execution_failed";throw await t.delivery.fail({machineToken:t.machineToken,claim:t.claim,failureCode:i}).catch(()=>{}),e}}async function I(t){const{claim:e,machineToken:i,delivery:o}=t,c=await(t.prepareWorkDir??k)(e.conversationId),m=await t.compilePolicy(c);if(y(m),m.adapterPolicy.workDir!==c)throw new Error("public_agent_workdir_mismatch");const a=t.createAdapter();if(!a||a.type!==e.runtimeAdapter)throw new Error("public_agent_runtime_mismatch");const n=new AbortController,p=()=>{n.abort(),a.stop().catch(()=>{})};t.signal?.addEventListener("abort",p,{once:!0}),t.signal?.aborted&&n.abort();let d,_=!1,v=!0,b=Promise.resolve(),g=null,f=null,l=null;const w=(r,s)=>{if(!(!v||n.signal.aborted)){if(l&&l!==s){g=new Error("public_agent_native_session_changed"),n.abort();return}l=s,b=b.then(()=>o.saveNativeSession({machineToken:i,claim:e,nianSessionId:f,nativeSessionId:s})).catch(u=>{g=u,n.abort(),t.onError?.(u)})}};a.on("nativeSession",w);try{if(n.signal.aborted)throw new Error("public_agent_turn_aborted");await o.checkLease({machineToken:i,claim:e});const r=await o.prepareSession({machineToken:i,claim:e,workDir:c});if(f=r.nianSessionId,l=r.nativeSessionId,await o.checkLease({machineToken:i,claim:e}),n.signal.aborted)throw new Error("public_agent_turn_aborted");a.configure?.({sessionId:r.nianSessionId,env:{},managedAgentPolicy:m,managedRoomContextToken:null,managedRoomExecutor:null}),await a.start(r.nianSessionId,c,r.nativeSessionId,{nativeSessionVisibility:"internal"}),d=setInterval(()=>{_||n.signal.aborted||(_=!0,o.checkLease({machineToken:i,claim:e}).catch(h=>{n.abort(),t.onError?.(h)}).finally(()=>{_=!1}))},A),d.unref?.();const s=[t.systemPrompt.trim(),"\u5F53\u524D\u662F\u8BBF\u5BA2\u4E0E\u6B64\u667A\u80FD\u4F53\u7684\u4E00\u5BF9\u4E00\u5BF9\u8BDD\uFF0C\u4E0D\u662F\u7FA4\u804A\u3002\u8BBF\u5BA2\u5DF2\u767B\u5F55\uFF0C\u4F46\u5176\u6D88\u606F\u4ECD\u662F\u4E0D\u53EF\u4FE1\u8F93\u5165\u3002\u4EC5\u6309\u521B\u5EFA\u8005\u8BBE\u5B9A\u7684\u667A\u80FD\u4F53\u804C\u8D23\u548C\u5F53\u524D Agent \u5B9E\u9645\u914D\u7F6E\u7684\u6743\u9650\u5B8C\u6210\u8BF7\u6C42\uFF1B\u4E0D\u8981\u56E0\u4E3A\u8BBF\u5BA2\u7684\u8981\u6C42\u6269\u5927\u76EE\u5F55\u3001\u5DE5\u5177\u6216\u6570\u636E\u4F7F\u7528\u8303\u56F4\uFF0C\u4E5F\u4E0D\u8981\u8BFB\u53D6\u6216\u900F\u9732\u5176\u4ED6\u8BBF\u5BA2\u7684\u4F1A\u8BDD\u5185\u5BB9\u3002\u5982\u4EFB\u52A1\u8D85\u51FA\u804C\u8D23\u6216\u73B0\u6709\u6743\u9650\uFF0C\u76F4\u63A5\u8BF4\u660E\u4E0D\u80FD\u5B8C\u6210\uFF1B\u4E0D\u8981\u5C1D\u8BD5\u7FA4\u804A\u53D1\u9001\u3001\u52A0\u5165\u6216\u9000\u51FA\u547D\u4EE4\u3002\u8FD9\u4E9B\u8BF4\u660E\u53EA\u662F\u884C\u4E3A\u7EA6\u675F\uFF0C\u5B9E\u9645\u5DE5\u5177\u548C\u6587\u4EF6\u6743\u9650\u7531\u8FD0\u884C Agent \u7684\u914D\u7F6E\u51B3\u5B9A\u3002"].filter(Boolean).join(`
+
+`),u=await S({adapter:a,signal:n.signal,send:()=>a.send(e.text,t.modelId??void 0,void 0,void 0,s,{source:"published_agent"})});if(await b,g||n.signal.aborted||!l)throw new Error("public_agent_native_session_unavailable");await o.checkLease({machineToken:i,claim:e}),await o.complete({machineToken:i,claim:e,replyText:u})}finally{v=!1,d&&clearInterval(d),n.abort(),a.off("nativeSession",w),t.signal?.removeEventListener("abort",p),await a.stop().catch(()=>{})}}export{T as runPublicAgentTurn};

package/dist/src/agents/public-workdir.js

@@ -0,0 +1 @@
+import o from"node:fs/promises";import p from"node:os";import i from"node:path";import{resolveProtectedShennianDirectories as u}from"../security/managed-agent-credential-paths.js";const _=/^[A-Za-z0-9_-]{1,64}$/;function c(r,t){const n=i.relative(r,t);return n===""||n!==".."&&!n.startsWith(`..${i.sep}`)&&!i.isAbsolute(n)}async function l(r){await o.mkdir(r,{recursive:!0,mode:448});const t=await o.lstat(r);if(!t.isDirectory()||t.isSymbolicLink())throw new Error("public_agent_workdir_invalid");return process.platform!=="win32"&&await o.chmod(r,448),o.realpath(r)}async function v(r){if(!_.test(r))throw new Error("public_agent_conversation_invalid");const t=i.join(p.homedir(),".shennian-public","published-agents");if((await o.lstat(i.dirname(t)).catch(a=>{if(a.code==="ENOENT")return null;throw a}))?.isSymbolicLink())throw new Error("public_agent_workdir_invalid");const e=await l(t);if((await o.lstat(i.dirname(t))).isSymbolicLink())throw new Error("public_agent_workdir_invalid");if(u().some(a=>c(a,e)||c(e,a)))throw new Error("public_agent_workdir_credential_overlap");const w=i.join(e,r),s=await l(w);if(!c(e,s)||s===e)throw new Error("public_agent_workdir_invalid");return s}export{v as preparePublicAgentWorkDir};

package/dist/src/agents/workbuddy-managed-permissions.js

@@ -1,2 +1,2 @@
-import O from"node:fs";import u from"node:fs/promises";import A from"node:os";import o from"node:path";import{resolveProtectedShennianDirectories as R}from"../security/managed-agent-credential-paths.js";const D="shennian-workbuddy-managed-",B=["Read","Glob","Grep","LSP","Bash","TaskOutput","TaskStop"],_=["Edit","Write","MultiEdit","NotebookEdit"],E=["WebSearch","WebFetch"],b=["ComputerUse"],g=[".env",".env.*","**/.env","**/.env.*","*.key","**/*.key","*.pem","**/*.pem","~/.ssh/**","~/.aws/**","~/.azure/**","~/.config/gcloud/**","~/.netrc","~/.npmrc","~/.workbuddy/**","~/.codebuddy/**","~/.claude/**","~/.codex/**","~/.shennian/**"],w={browser:{allow:!1,deny:!0},mcp:{allow:!1,deny:!0}},z={minimumRuntimeVersion:"2.115.0",maximumRuntimeVersionExclusive:"2.143.0",platforms:{darwin:{level:"partial",fileAccess:{"workspace-read":!1,"workspace-write":!1,"host-full":!0},externalCapabilities:{commandNetwork:{allow:!0,deny:!0},webSearch:{allow:!0,deny:!0},...w,computerUse:{allow:!0,deny:!0}},knownGaps:["fileAccess.outsideWorkspaceRead","fileAccess.sandboxRuntimeWriteAllowlist","fileAccess.hostFullSensitiveFilesViaShell"]},linux:{level:"partial",fileAccess:{"workspace-read":!1,"workspace-write":!1,"host-full":!0},externalCapabilities:{commandNetwork:{allow:!0,deny:!0},webSearch:{allow:!0,deny:!0},...w,computerUse:{allow:!1,deny:!0}},knownGaps:["fileAccess.outsideWorkspaceRead","fileAccess.sandboxRuntimeWriteAllowlist","fileAccess.hostFullSensitiveFilesViaShell","internalTransport.unixSocketGranularity"]},wsl:{level:"partial",fileAccess:{"workspace-read":!1,"workspace-write":!1,"host-full":!0},externalCapabilities:{commandNetwork:{allow:!0,deny:!0},webSearch:{allow:!0,deny:!0},...w,computerUse:{allow:!1,deny:!0}},knownGaps:["fileAccess.outsideWorkspaceRead","fileAccess.sandboxRuntimeWriteAllowlist","fileAccess.hostFullSensitiveFilesViaShell","internalTransport.unixSocketGranularity"]},win32:{level:"partial",fileAccess:{"workspace-read":!1,"workspace-write":!1,"host-full":!0},externalCapabilities:{commandNetwork:{allow:!0,deny:!1},webSearch:{allow:!0,deny:!0},...w,computerUse:{allow:!1,deny:!0}},knownGaps:["sandbox.nativeWindowsUnavailable","fileAccess.shellUncontained","fileAccess.hostFullSensitiveFilesViaShell"]}}};function V(t,e,a={}){const s=P(e),r=t.effectivePolicy,i=t.platform;if(t.level==="unverified")throw new Error("workbuddy_managed_runtime_unverified");if(i!=="darwin"&&i!=="linux"&&i!=="wsl"&&i!=="win32")throw new Error("workbuddy_managed_platform_unsupported");if(r.externalCapabilities.browser)throw new Error("workbuddy_managed_browser_unavailable");if(r.externalCapabilities.mcp)throw new Error("workbuddy_managed_mcp_isolation_unavailable");if(r.externalCapabilities.computerUse&&i!=="darwin")throw new Error("workbuddy_managed_computer_use_unavailable");if(r.fileAccess==="host-full"&&!r.externalCapabilities.commandNetwork)throw new Error("workbuddy_managed_host_full_network_isolation_unavailable");const l=i!=="win32"&&r.fileAccess!=="host-full",c=r.fileAccess==="workspace-read",f=T(),h=[...B,...c?[]:_,...r.externalCapabilities.webSearch?E:[],...r.externalCapabilities.computerUse?b:[]],S=m(s),y=["Bash",...c?[]:_.map(k=>r.fileAccess==="host-full"?k:`${k}(${S}/**)`),...r.externalCapabilities.webSearch?E:[],...r.externalCapabilities.computerUse?b:[]],C=[...c?_:[],...r.externalCapabilities.webSearch?[]:E,...r.externalCapabilities.computerUse?[]:b,"Agent","TeamCreate","Workflow","Artifact","ArtifactControl","VideoGen","Skill","SlashCommand","Browser","Chrome","mcp__*",...N(f)],x=M(a.internalUnixSockets),p=r.externalCapabilities.commandNetwork,U=[...f,...c?[s]:[]];return{settings:{permissions:{defaultMode:"dontAsk",disableBypassPermissionsMode:"disable",additionalDirectories:[],allow:n(y),ask:[],deny:n(C)},sandbox:{enabled:l,autoAllowBashIfSandboxed:!0,excludedCommands:[],allowUnsandboxedCommands:!1,enableWeakerNestedSandbox:!1,network:{allowedDomains:p?["*"]:[],deniedDomains:p?[]:["*"],allowLocalBinding:p,allowUnixSockets:i==="darwin"?x:[],allowAllUnixSockets:i==="linux"||i==="wsl"},filesystem:{denyRead:[...f],allowWrite:r.fileAccess==="workspace-write"?[s]:[],denyWrite:n(U)}}},toolNames:n(h),runtimeEnv:{CODEBUDDY_DISABLE_SHELL_SNAPSHOT:"1",CODEBUDDY_SKIP_BUILTIN_MARKETPLACE:"1",CODEBUDDY_AUTO_UPDATE_THIRD_PARTY_MARKETPLACES:"0",CODEBUDDY_DISABLE_CRON:"1",CODEBUDDY_PUSH_NOTIFICATION_ENABLED:"0",CODEBUDDY_ARTIFACT_ENABLED:"0",CODEBUDDY_SHARE_LINK_ENABLED:"0",CODEBUDDY_WAIT_FOR_MCP_SERVERS_ENABLED:"0",CODEBUDDY_DISABLE_AUTO_MEMORY:"1",CODEBUDDY_MEMORY_ENABLED:"0",CODEBUDDY_TEAM_MEMORY_ENABLED:"0",CODEBUDDY_COMPUTER_USE_ENABLED:r.externalCapabilities.computerUse?"1":"0"}}}async function H(t){const e=await u.mkdtemp(o.join(A.tmpdir(),D)),a=o.join(e,"settings.json");try{await u.chmod(e,448);const s=W(t.settings,e);return await u.writeFile(a,`${JSON.stringify(s)}
-`,{encoding:"utf8",mode:384,flag:"wx"}),{directory:e,settingsPath:a}}catch(s){throw await v(e).catch(()=>{}),new Error("workbuddy_managed_config_initialization_failed",{cause:s})}}async function v(t){const e=o.resolve(t),a=o.resolve(A.tmpdir());if(o.dirname(e)!==a||!o.basename(e).startsWith(D))throw new Error("workbuddy_managed_config_cleanup_refused");await u.rm(e,{recursive:!0,force:!0})}function W(t,e){const a=JSON.parse(JSON.stringify(t)),r=a.sandbox.filesystem,i=a.permissions,l=`${m(e)}/**`;return r.denyRead=n([...r.denyRead,l]),r.denyWrite=n([...r.denyWrite,l]),i.deny=n([...i.deny,`Read(${l})`,`Edit(${l})`,`Write(${l})`]),a}function N(t){return t.flatMap(e=>[`Read(${d(e)})`,`Edit(${d(e)})`,`Write(${d(e)})`,`MultiEdit(${d(e)})`,`NotebookEdit(${d(e)})`])}function T(){const t=R().map(e=>`${m(o.normalize(e))}/**`);return n([...g,...t])}function d(t){return o.isAbsolute(t)?t.startsWith("/")?`/${t}`:`//${t}`:t}function P(t){const e=o.normalize(t.trim());if(!e||!o.isAbsolute(e))throw new Error("workbuddy_managed_workdir_invalid");let a;try{a=O.realpathSync(e)}catch{throw new Error("workbuddy_managed_workdir_unavailable")}if(o.normalize(a)!==e)throw new Error("workbuddy_managed_workdir_not_realpath");return e}function M(t){return[...new Set(t??[])].map(e=>o.normalize(e.trim())).filter(e=>e&&o.isAbsolute(e)).map(m).sort()}function m(t){return t.replace(/\\/g,"/")}function n(t){return[...new Set(t)].sort()}export{z as WORKBUDDY_MANAGED_RUNTIME_SECURITY,V as compileWorkBuddyManagedPermissions,H as createWorkBuddyManagedConfigFiles,v as disposeWorkBuddyManagedConfigFiles};
+import R from"node:fs";import w from"node:fs/promises";import h from"node:os";import a from"node:path";import{resolveProtectedShennianDirectories as B}from"../security/managed-agent-credential-paths.js";const D="shennian-workbuddy-managed-",y=["Read","Glob","Grep","LSP","Bash","TaskOutput","TaskStop"],m=["Edit","Write","MultiEdit","NotebookEdit"],E=["WebSearch","WebFetch"],A=["ComputerUse"],v=[".env",".env.*","**/.env","**/.env.*","*.key","**/*.key","*.pem","**/*.pem","~/.ssh/**","~/.aws/**","~/.azure/**","~/.config/gcloud/**","~/.netrc","~/.npmrc","~/.workbuddy/**","~/.codebuddy/**","~/.claude/**","~/.codex/**","~/.shennian/**"],p={browser:{allow:!1,deny:!0},mcp:{allow:!1,deny:!0}},H={minimumRuntimeVersion:"2.115.0",maximumRuntimeVersionExclusive:"2.143.0",platforms:{darwin:{level:"partial",fileAccess:{"workspace-read":!1,"workspace-write":!1,"host-full":!0},externalCapabilities:{commandNetwork:{allow:!0,deny:!0},webSearch:{allow:!0,deny:!0},...p,computerUse:{allow:!0,deny:!0}},knownGaps:["fileAccess.outsideWorkspaceRead","fileAccess.sandboxRuntimeWriteAllowlist","fileAccess.hostFullSensitiveFilesViaShell","fileAccess.globalAppHomePersisted"]},linux:{level:"partial",fileAccess:{"workspace-read":!1,"workspace-write":!1,"host-full":!0},externalCapabilities:{commandNetwork:{allow:!0,deny:!0},webSearch:{allow:!0,deny:!0},...p,computerUse:{allow:!1,deny:!0}},knownGaps:["fileAccess.outsideWorkspaceRead","fileAccess.sandboxRuntimeWriteAllowlist","fileAccess.hostFullSensitiveFilesViaShell","fileAccess.globalAppHomePersisted","internalTransport.unixSocketGranularity"]},wsl:{level:"partial",fileAccess:{"workspace-read":!1,"workspace-write":!1,"host-full":!0},externalCapabilities:{commandNetwork:{allow:!0,deny:!0},webSearch:{allow:!0,deny:!0},...p,computerUse:{allow:!1,deny:!0}},knownGaps:["fileAccess.outsideWorkspaceRead","fileAccess.sandboxRuntimeWriteAllowlist","fileAccess.hostFullSensitiveFilesViaShell","fileAccess.globalAppHomePersisted","internalTransport.unixSocketGranularity"]},win32:{level:"partial",fileAccess:{"workspace-read":!1,"workspace-write":!1,"host-full":!0},externalCapabilities:{commandNetwork:{allow:!0,deny:!1},webSearch:{allow:!0,deny:!0},...p,computerUse:{allow:!1,deny:!0}},knownGaps:["sandbox.nativeWindowsUnavailable","fileAccess.shellUncontained","fileAccess.hostFullSensitiveFilesViaShell","fileAccess.globalAppHomePersisted"]}}};function V(t,e,i={}){const s=M(e),r=t.effectivePolicy,o=t.platform;if(t.level==="unverified")throw new Error("workbuddy_managed_runtime_unverified");if(o!=="darwin"&&o!=="linux"&&o!=="wsl"&&o!=="win32")throw new Error("workbuddy_managed_platform_unsupported");if(r.externalCapabilities.browser)throw new Error("workbuddy_managed_browser_unavailable");if(r.externalCapabilities.mcp)throw new Error("workbuddy_managed_mcp_isolation_unavailable");if(r.externalCapabilities.computerUse&&o!=="darwin")throw new Error("workbuddy_managed_computer_use_unavailable");if(r.fileAccess==="host-full"&&!r.externalCapabilities.commandNetwork)throw new Error("workbuddy_managed_host_full_network_isolation_unavailable");const l=o!=="win32"&&r.fileAccess!=="host-full",d=r.fileAccess==="workspace-read",u=i.publicTurn===!0;if(u&&(r.fileAccess!=="workspace-read"||i.internalUnixSockets?.length))throw new Error("workbuddy_public_turn_policy_invalid");const _=P(),S=[...u?[]:y,...d?[]:m,...r.externalCapabilities.webSearch?E:[],...r.externalCapabilities.computerUse?A:[]],C=f(s),x=[...u?[]:["Bash"],...d?[]:m.map(k=>r.fileAccess==="host-full"?k:`${k}(${C}/**)`),...r.externalCapabilities.webSearch?E:[],...r.externalCapabilities.computerUse?A:[]],U=[...u?[...y,...m]:[],...d?m:[],...r.externalCapabilities.webSearch?[]:E,...r.externalCapabilities.computerUse?[]:A,"Agent","TeamCreate","Workflow","Artifact","ArtifactControl","VideoGen","Skill","SlashCommand","Browser","Chrome","mcp__*",...N(_)],g=I(i.internalUnixSockets),b=r.externalCapabilities.commandNetwork,O=[..._,...d?[s]:[]];return{settings:{permissions:{defaultMode:"dontAsk",disableBypassPermissionsMode:"disable",additionalDirectories:[],allow:n(x),ask:[],deny:n(U)},sandbox:{enabled:l,autoAllowBashIfSandboxed:!0,excludedCommands:[],allowUnsandboxedCommands:!1,enableWeakerNestedSandbox:!1,network:{allowedDomains:b?["*"]:[],deniedDomains:b?[]:["*"],allowLocalBinding:b,allowUnixSockets:o==="darwin"?g:[],allowAllUnixSockets:o==="linux"||o==="wsl"},filesystem:{denyRead:[..._],allowWrite:r.fileAccess==="workspace-write"?[s]:[],denyWrite:n(O)}}},toolNames:n(S),runtimeEnv:{CODEBUDDY_DISABLE_SHELL_SNAPSHOT:"1",CODEBUDDY_SKIP_BUILTIN_MARKETPLACE:"1",CODEBUDDY_AUTO_UPDATE_THIRD_PARTY_MARKETPLACES:"0",CODEBUDDY_DISABLE_CRON:"1",CODEBUDDY_PUSH_NOTIFICATION_ENABLED:"0",CODEBUDDY_ARTIFACT_ENABLED:"0",CODEBUDDY_SHARE_LINK_ENABLED:"0",CODEBUDDY_WAIT_FOR_MCP_SERVERS_ENABLED:"0",CODEBUDDY_DISABLE_AUTO_MEMORY:"1",CODEBUDDY_MEMORY_ENABLED:"0",CODEBUDDY_TEAM_MEMORY_ENABLED:"0",CODEBUDDY_COMPUTER_USE_ENABLED:r.externalCapabilities.computerUse?"1":"0"}}}async function K(t){const e=await w.mkdtemp(a.join(h.tmpdir(),D)),i=a.join(e,"settings.json");try{await w.chmod(e,448);const s=W(t.settings,e);return await w.writeFile(i,`${JSON.stringify(s)}
+`,{encoding:"utf8",mode:384,flag:"wx"}),{directory:e,settingsPath:i}}catch(s){throw await T(e).catch(()=>{}),new Error("workbuddy_managed_config_initialization_failed",{cause:s})}}async function T(t){const e=a.resolve(t),i=a.resolve(h.tmpdir());if(a.dirname(e)!==i||!a.basename(e).startsWith(D))throw new Error("workbuddy_managed_config_cleanup_refused");await w.rm(e,{recursive:!0,force:!0})}function W(t,e){const i=JSON.parse(JSON.stringify(t)),r=i.sandbox.filesystem,o=i.permissions,l=`${f(e)}/**`;return r.denyRead=n([...r.denyRead,l]),r.denyWrite=n([...r.denyWrite,l]),o.deny=n([...o.deny,`Read(${l})`,`Edit(${l})`,`Write(${l})`]),i}function N(t){return t.flatMap(e=>[`Read(${c(e)})`,`Edit(${c(e)})`,`Write(${c(e)})`,`MultiEdit(${c(e)})`,`NotebookEdit(${c(e)})`])}function P(){const t=B().map(e=>`${f(a.normalize(e))}/**`);return n([...v,...t])}function c(t){return a.isAbsolute(t)?t.startsWith("/")?`/${t}`:`//${t}`:t}function M(t){const e=a.normalize(t.trim());if(!e||!a.isAbsolute(e))throw new Error("workbuddy_managed_workdir_invalid");let i;try{i=R.realpathSync(e)}catch{throw new Error("workbuddy_managed_workdir_unavailable")}if(a.normalize(i)!==e)throw new Error("workbuddy_managed_workdir_not_realpath");return e}function I(t){return[...new Set(t??[])].map(e=>a.normalize(e.trim())).filter(e=>e&&a.isAbsolute(e)).map(f).sort()}function f(t){return t.replace(/\\/g,"/")}function n(t){return[...new Set(t)].sort()}export{H as WORKBUDDY_MANAGED_RUNTIME_SECURITY,V as compileWorkBuddyManagedPermissions,K as createWorkBuddyManagedConfigFiles,T as disposeWorkBuddyManagedConfigFiles};

package/dist/src/agents/workbuddy.js

@@ -1,3 +1,3 @@
-import{spawnSync as y}from"node:child_process";import{createInterface as w}from"node:readline";import{randomUUID as k}from"node:crypto";import E from"node:path";import{AgentAdapter as P,registerAgent as S}from"./adapter.js";import{resolveBuiltinCommand as I,spawnAgentCommand as x}from"./command-spec.js";import{buildAgentProcessEnv as _,buildManagedAgentProcessEnv as v,buildManagedNativeFullProcessEnv as B}from"../agent-env.js";import{buildPlatformInstructions as C,ensurePlatformInstructionsFile as A}from"./platform-instructions.js";import{resolveWindowsSystemRoot as T}from"../windows-shell.js";import{resolveManagedAgentAdapterEnforcement as W,isManagedAgentNativeFull as D}from"../security/managed-agent-policy.js";import{registerManagedAgentRuntimeSecurity as M}from"../security/managed-agent-runtime.js";import{resolveManagedRoomIpcPaths as O}from"../daemon-ipc/paths.js";import{compileWorkBuddyManagedPermissions as R,createWorkBuddyManagedConfigFiles as N,disposeWorkBuddyManagedConfigFiles as b,WORKBUDDY_MANAGED_RUNTIME_SECURITY as q}from"./workbuddy-managed-permissions.js";M("workbuddy",q);const F=new Set(["minimal","low","medium","high","xhigh","max"]);function U(n){const e=n?.trim();return e&&e!=="auto"?e:void 0}function $(n){const e=n?.trim();if(e){if(F.has(e))return e;throw new Error(`Unsupported WorkBuddy reasoning effort "${e}". Supported values: minimal, low, medium, high, xhigh, max.`)}}function z(n,e,t){if(!n)return[];if(e==="win32"){if(!t)throw new Error("WorkBuddy system prompt file is required on Windows.");return["--system-prompt-file",t]}return["--append-system-prompt",n]}function j(n){const e=n.split(/\n\n(?=<[^>\n]+>\n)/);return(e[e.length-1]??n).replace(/^\[群消息\][ \t]+<[^>\n]+>\n/,"").replace(/^\[群消息\]\n?/,"").replace(/^<[^>\n]+>\n/,"").trim()}function p(n,e=process.platform,t=L){e==="win32"&&n.pid&&t(n.pid)||n.kill("SIGTERM")}function L(n){const e=E.win32.join(T(),"System32","taskkill.exe");return y(e,["/pid",String(n),"/T","/F"],{stdio:"ignore",windowsHide:!0,timeout:5e3}).status===0}class Y extends P{type="workbuddy";get recoveryCapabilities(){return{inspectTerminal:!1,reattachRun:!1,resumeRun:!1,resumeSession:!0}}process=null;agentSessionId=null;workDir=null;seq=0;runId="";terminalState="open";hasEmittedText=!1;runPhase=null;persistNativeSession=!0;externalChannel=null;shennianSessionId=null;extraEnv={};managedAgentPolicy=null;managedConfigDir=null;managedProcessEnv=null;configure(e){this.shennianSessionId=e.sessionId??null,this.externalChannel=e.externalChannel??null,this.extraEnv=e.env??{},"managedAgentPolicy"in e&&(this.managedAgentPolicy=e.managedAgentPolicy??null),this.managedAgentPolicy&&(this.workDir=this.managedAgentPolicy.adapterPolicy.workDir)}async start(e,t,s,r){this.workDir=this.managedAgentPolicy?.adapterPolicy.workDir??t,this.seq=0,this.persistNativeSession=r?.persistNativeSession!==!1,s&&(this.agentSessionId=s)}async send(e,t,s,r,o,i){if((i?.source==="room_activation"||this.shennianSessionId?.startsWith("room-managed-")===!0)&&!this.managedAgentPolicy)throw new Error("managed_agent_policy_missing");await this.killProcess(),this.runId=k(),this.resetRunState();const d=i?.source==="room_activation",a=["-p",d?j(e):e,"--output-format","stream-json","--verbose"];this.persistNativeSession||a.push("--no-session-persistence");const h=U(t);h&&a.push("--model",h),d&&a.push("--max-turns","8");const m=this.shennianSessionId?.startsWith("room-managed-")&&!this.agentSessionId&&!d?null:C(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0,o);if(m){const f=process.platform==="win32"?A(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0,o):void 0;a.push(...z(m,process.platform,f))}const c=$(s);c&&a.push("--effort",c),this.agentSessionId&&a.push("--resume",this.agentSessionId),a.push(...await this.prepareManagedLaunch()),this.spawnAndParse(a)}async resume(e){await this.killProcess(),this.agentSessionId=e,this.resetRunState()}async stop(){await this.killProcess()}async getStatus(){return{active:this.process!=null&&this.terminalState==="open",runId:this.runId||null,runPhase:this.runPhase,canStop:this.process!=null&&this.terminalState==="open"}}spawnAndParse(e){const t=I("workbuddy");if(!t){this.disposeManagedConfig(),this.emit("error",new Error("WorkBuddy was not found. Install WorkBuddy Desktop or the CodeBuddy CLI, then retry."));return}let s;try{s=x(t,e,{cwd:this.workDir??void 0,stdio:["ignore","pipe","pipe"],env:this.buildProcessEnv()})}catch(i){throw this.disposeManagedConfig(),i}this.process=s,w({input:s.stdout}).on("line",i=>{if(i.trim())try{this.handleStreamEvent(JSON.parse(i))}catch{}});let o="";s.stderr?.on("data",i=>{o=`${o}${i.toString()}`.slice(-8e3)}),s.on("close",i=>{this.process===s&&(this.process=null,this.runPhase=null,this.disposeManagedConfig(),this.handleProcessClose(i,o))}),s.on("error",i=>{if(this.process!==s)return;this.process=null,this.runPhase=null,this.disposeManagedConfig();const l=i.code==="ENOENT";this.emitErrorIfOpen({state:"error",message:l?"WorkBuddy was not found. Install WorkBuddy Desktop or the CodeBuddy CLI, then retry.":u(i.message)})})}handleStreamEvent(e){if(e.type==="system"&&e.subtype==="init"&&e.session_id){this.agentSessionId=e.session_id,this.runPhase="thinking",this.emitEvent({state:"start",agentSessionId:e.session_id});return}if(e.type==="control_request"&&e.request?.subtype==="can_use_tool"){this.runPhase="waiting_approval",this.emitEvent({state:"approval-pending",name:e.request.tool_name,args:e.request.input,approval:{title:`WorkBuddy \u8BF7\u6C42\u4F7F\u7528 ${e.request.tool_name||"\u5DE5\u5177"}`,source:"workbuddy",actionHint:"\u8BF7\u5728 WorkBuddy \u6216\u795E\u5FF5\u4E2D\u786E\u8BA4\u540E\u7EE7\u7EED\u3002"}});return}if(e.type==="assistant"){const s=e.message?.content;if(s?.length)for(const r of s)this.handleContentBlock(r);else e.text&&this.emitText(e.text,!!e.thinking);return}if(e.type!=="result")return;if(e.subtype==="tool_result"){this.runPhase="tool_running",this.emitEvent({state:"tool-result",name:e.name,result:g(e.content)});return}if(e.subtype==="error"||e.error){this.emitErrorIfOpen({state:"error",message:u(e.error||e.result||"WorkBuddy failed.")});return}!this.hasEmittedText&&e.result&&this.emitText(e.result,!1),e.session_id&&(this.agentSessionId=e.session_id);const t=e.usage??e.message?.usage;this.emitFinalIfOpen({state:"final",agentSessionId:this.agentSessionId??void 0,usage:t?{inputTokens:t.input_tokens??0,outputTokens:t.output_tokens??0}:void 0})}handleContentBlock(e){e.type==="text"&&e.text?this.emitText(e.text,!1):e.type==="thinking"&&e.thinking?this.emitText(e.thinking,!0):e.type==="tool_use"?(this.runPhase="tool_running",this.emitEvent({state:"tool-call",name:e.name,args:e.input})):e.type==="tool_result"&&this.emitEvent({state:"tool-result",name:e.name,result:g(e.content)})}emitText(e,t){this.runPhase=t?"thinking":"streaming_text";const s=!t&&this.hasEmittedText?`
+import{spawnSync as y}from"node:child_process";import{createInterface as w}from"node:readline";import{randomUUID as k}from"node:crypto";import E from"node:path";import{AgentAdapter as P,registerAgent as S}from"./adapter.js";import{resolveBuiltinCommand as I,spawnAgentCommand as _}from"./command-spec.js";import{buildAgentProcessEnv as x,buildManagedAgentProcessEnv as v,buildManagedNativeFullProcessEnv as B}from"../agent-env.js";import{buildPlatformInstructions as A,ensurePlatformInstructionsFile as C}from"./platform-instructions.js";import{resolveWindowsSystemRoot as W}from"../windows-shell.js";import{resolveManagedAgentAdapterEnforcement as D,isManagedAgentNativeFull as M}from"../security/managed-agent-policy.js";import{assertPublicAgentPolicy as T}from"../security/public-agent-policy.js";import{registerManagedAgentRuntimeSecurity as O}from"../security/managed-agent-runtime.js";import{resolveManagedRoomIpcPaths as R}from"../daemon-ipc/paths.js";import{compileWorkBuddyManagedPermissions as b,createWorkBuddyManagedConfigFiles as N,disposeWorkBuddyManagedConfigFiles as q,WORKBUDDY_MANAGED_RUNTIME_SECURITY as F}from"./workbuddy-managed-permissions.js";O("workbuddy",F);const U=new Set(["minimal","low","medium","high","xhigh","max"]);function $(n){const e=n?.trim();return e&&e!=="auto"?e:void 0}function z(n){const e=n?.trim();if(e){if(U.has(e))return e;throw new Error(`Unsupported WorkBuddy reasoning effort "${e}". Supported values: minimal, low, medium, high, xhigh, max.`)}}function j(n,e,t){if(!n)return[];if(e==="win32"){if(!t)throw new Error("WorkBuddy system prompt file is required on Windows.");return["--system-prompt-file",t]}return["--append-system-prompt",n]}function L(n){const e=n.split(/\n\n(?=<[^>\n]+>\n)/);return(e[e.length-1]??n).replace(/^\[群消息\][ \t]+<[^>\n]+>\n/,"").replace(/^\[群消息\]\n?/,"").replace(/^<[^>\n]+>\n/,"").trim()}function p(n,e=process.platform,t=Y){e==="win32"&&n.pid&&t(n.pid)||n.kill("SIGTERM")}function Y(n){const e=E.win32.join(W(),"System32","taskkill.exe");return y(e,["/pid",String(n),"/T","/F"],{stdio:"ignore",windowsHide:!0,timeout:5e3}).status===0}class G extends P{type="workbuddy";get recoveryCapabilities(){return{inspectTerminal:!1,reattachRun:!1,resumeRun:!1,resumeSession:!0}}process=null;agentSessionId=null;workDir=null;seq=0;runId="";terminalState="open";hasEmittedText=!1;runPhase=null;persistNativeSession=!0;externalChannel=null;shennianSessionId=null;extraEnv={};managedAgentPolicy=null;managedConfigDir=null;managedProcessEnv=null;configure(e){this.shennianSessionId=e.sessionId??null,this.externalChannel=e.externalChannel??null,this.extraEnv=e.env??{},"managedAgentPolicy"in e&&(this.managedAgentPolicy=e.managedAgentPolicy??null),this.managedAgentPolicy&&(this.workDir=this.managedAgentPolicy.adapterPolicy.workDir)}async start(e,t,s,r){this.workDir=this.managedAgentPolicy?.adapterPolicy.workDir??t,this.seq=0,this.persistNativeSession=r?.persistNativeSession!==!1,s&&(this.agentSessionId=s)}async send(e,t,s,r,o,i){if(i?.source==="published_agent"&&T(this.managedAgentPolicy),(i?.source==="room_activation"||this.shennianSessionId?.startsWith("room-managed-")===!0)&&!this.managedAgentPolicy)throw new Error("managed_agent_policy_missing");await this.killProcess(),this.runId=k(),this.resetRunState();const d=i?.source==="room_activation",a=["-p",d?L(e):e,"--output-format","stream-json","--verbose"];this.persistNativeSession||a.push("--no-session-persistence");const h=$(t);h&&a.push("--model",h),d&&a.push("--max-turns","8");const m=this.shennianSessionId?.startsWith("room-managed-")&&!this.agentSessionId&&!d?null:A(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0,o);if(m){const f=process.platform==="win32"?C(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0,o):void 0;a.push(...j(m,process.platform,f))}const c=z(s);c&&a.push("--effort",c),this.agentSessionId&&a.push("--resume",this.agentSessionId),a.push(...await this.prepareManagedLaunch(i?.source==="published_agent")),this.spawnAndParse(a)}async resume(e){await this.killProcess(),this.agentSessionId=e,this.resetRunState()}async stop(){await this.killProcess()}async getStatus(){return{active:this.process!=null&&this.terminalState==="open",runId:this.runId||null,runPhase:this.runPhase,canStop:this.process!=null&&this.terminalState==="open"}}spawnAndParse(e){const t=I("workbuddy");if(!t){this.disposeManagedConfig(),this.emit("error",new Error("WorkBuddy was not found. Install WorkBuddy Desktop or the CodeBuddy CLI, then retry."));return}let s;try{s=_(t,e,{cwd:this.workDir??void 0,stdio:["ignore","pipe","pipe"],env:this.buildProcessEnv()})}catch(i){throw this.disposeManagedConfig(),i}this.process=s,w({input:s.stdout}).on("line",i=>{if(i.trim())try{this.handleStreamEvent(JSON.parse(i))}catch{}});let o="";s.stderr?.on("data",i=>{o=`${o}${i.toString()}`.slice(-8e3)}),s.on("close",i=>{this.process===s&&(this.process=null,this.runPhase=null,this.disposeManagedConfig(),this.handleProcessClose(i,o))}),s.on("error",i=>{if(this.process!==s)return;this.process=null,this.runPhase=null,this.disposeManagedConfig();const l=i.code==="ENOENT";this.emitErrorIfOpen({state:"error",message:l?"WorkBuddy was not found. Install WorkBuddy Desktop or the CodeBuddy CLI, then retry.":u(i.message)})})}handleStreamEvent(e){if(e.type==="system"&&e.subtype==="init"&&e.session_id){this.agentSessionId=e.session_id,this.runPhase="thinking",this.emitEvent({state:"start",agentSessionId:e.session_id}),this.emit("nativeSession","workbuddy",e.session_id);return}if(e.type==="control_request"&&e.request?.subtype==="can_use_tool"){this.runPhase="waiting_approval",this.emitEvent({state:"approval-pending",name:e.request.tool_name,args:e.request.input,approval:{title:`WorkBuddy \u8BF7\u6C42\u4F7F\u7528 ${e.request.tool_name||"\u5DE5\u5177"}`,source:"workbuddy",actionHint:"\u8BF7\u5728 WorkBuddy \u6216\u795E\u5FF5\u4E2D\u786E\u8BA4\u540E\u7EE7\u7EED\u3002"}});return}if(e.type==="assistant"){const s=e.message?.content;if(s?.length)for(const r of s)this.handleContentBlock(r);else e.text&&this.emitText(e.text,!!e.thinking);return}if(e.type!=="result")return;if(e.subtype==="tool_result"){this.runPhase="tool_running",this.emitEvent({state:"tool-result",name:e.name,result:g(e.content)});return}if(e.subtype==="error"||e.error){this.emitErrorIfOpen({state:"error",message:u(e.error||e.result||"WorkBuddy failed.")});return}!this.hasEmittedText&&e.result&&this.emitText(e.result,!1),e.session_id&&e.session_id!==this.agentSessionId&&(this.agentSessionId=e.session_id,this.emit("nativeSession","workbuddy",e.session_id));const t=e.usage??e.message?.usage;this.emitFinalIfOpen({state:"final",agentSessionId:this.agentSessionId??void 0,usage:t?{inputTokens:t.input_tokens??0,outputTokens:t.output_tokens??0}:void 0})}handleContentBlock(e){e.type==="text"&&e.text?this.emitText(e.text,!1):e.type==="thinking"&&e.thinking?this.emitText(e.thinking,!0):e.type==="tool_use"?(this.runPhase="tool_running",this.emitEvent({state:"tool-call",name:e.name,args:e.input})):e.type==="tool_result"&&this.emitEvent({state:"tool-result",name:e.name,result:g(e.content)})}emitText(e,t){this.runPhase=t?"thinking":"streaming_text";const s=!t&&this.hasEmittedText?`
 
-`:"";this.emitEvent({state:"delta",text:s+e,thinking:t||void 0}),t||(this.hasEmittedText=!0)}handleProcessClose(e,t){if(e!==0&&e!==null){this.emitErrorIfOpen({state:"error",message:u(t)||`WorkBuddy exited with code ${e}.`});return}this.emitFinalIfOpen({state:"final",agentSessionId:this.agentSessionId??void 0})}emitFinalIfOpen(e){this.terminalState==="open"&&(this.terminalState="final",this.runPhase=null,this.emitEvent(e))}emitErrorIfOpen(e){this.terminalState==="open"&&(this.terminalState="error",this.runPhase=null,this.emitEvent(e))}emitEvent(e){this.emit("agentEvent",{...e,runId:this.runId,seq:this.seq++})}resetRunState(){this.seq=0,this.terminalState="open",this.hasEmittedText=!1,this.runPhase=null}async killProcess(){const e=this.process;if(!e){await this.disposeManagedConfig();return}this.process=null,this.runPhase=null,p(e),await new Promise(t=>{let s=!1;const r=()=>{s||(s=!0,t())};e.once("close",r),setTimeout(()=>{p(e),r()},3e3).unref?.()}),await this.disposeManagedConfig()}async prepareManagedLaunch(){const e=this.managedAgentPolicy;if(!e||D(e))return this.managedProcessEnv=null,e&&(this.managedProcessEnv=B(this.extraEnv)),["--permission-mode","bypassPermissions","--setting-sources","user,project,local","--tools","default"];const t=O(),s=R(W(e),e.adapterPolicy.workDir,{internalUnixSockets:t.transport==="unix_socket"?[t.endpoint]:[]}),r=await N(s);this.managedConfigDir=r.directory;const o=v({agentType:"workbuddy",providerEnv:this.extraEnv,sessionEnv:this.extraEnv,runtimeEnv:{NO_COLOR:"1"}});return Object.assign(o,s.runtimeEnv),delete o.CODEBUDDY_IS_SANDBOX,this.managedProcessEnv=o,["--permission-mode","dontAsk","--subagent-permission-mode","dontAsk","--settings",r.settingsPath,"--setting-sources","none","--strict-mcp-config","--mcp-config","{}","--tools",s.toolNames.join(",")]}buildProcessEnv(){return this.managedProcessEnv??_(this.extraEnv)}async disposeManagedConfig(){const e=this.managedConfigDir;this.managedConfigDir=null,this.managedProcessEnv=null,e&&await b(e).catch(()=>{})}}function g(n){if(typeof n=="string")return n;try{return JSON.stringify(n)}catch{return"[unserializable WorkBuddy tool result]"}}function u(n){return n.replace(/(Authorization\s*:\s*)Bearer\s+[A-Za-z0-9._~+/-]+/gi,"$1Bearer [redacted]").replace(/(api[-_ ]?key|access[-_ ]?token|refresh[-_ ]?token|connector[-_ ]?token)(\s*[:=]\s*)[^\s,;]+/gi,"$1$2[redacted]").trim().slice(0,2e3)}S("workbuddy",()=>new Y);export{Y as WorkBuddyAdapter,U as normalizeWorkBuddyModelId,$ as normalizeWorkBuddyReasoningEffort,u as sanitizeWorkBuddyError,p as terminateWorkBuddyProcess,j as workBuddyRoomActivationText,z as workBuddySystemPromptArgs};
+`:"";this.emitEvent({state:"delta",text:s+e,thinking:t||void 0}),t||(this.hasEmittedText=!0)}handleProcessClose(e,t){if(e!==0&&e!==null){this.emitErrorIfOpen({state:"error",message:u(t)||`WorkBuddy exited with code ${e}.`});return}this.emitFinalIfOpen({state:"final",agentSessionId:this.agentSessionId??void 0})}emitFinalIfOpen(e){this.terminalState==="open"&&(this.terminalState="final",this.runPhase=null,this.emitEvent(e))}emitErrorIfOpen(e){this.terminalState==="open"&&(this.terminalState="error",this.runPhase=null,this.emitEvent(e))}emitEvent(e){this.emit("agentEvent",{...e,runId:this.runId,seq:this.seq++})}resetRunState(){this.seq=0,this.terminalState="open",this.hasEmittedText=!1,this.runPhase=null}async killProcess(){const e=this.process;if(!e){await this.disposeManagedConfig();return}this.process=null,this.runPhase=null,p(e),await new Promise(t=>{let s=!1;const r=()=>{s||(s=!0,t())};e.once("close",r),setTimeout(()=>{p(e),r()},3e3).unref?.()}),await this.disposeManagedConfig()}async prepareManagedLaunch(e=!1){const t=this.managedAgentPolicy;if(!t||M(t))return this.managedProcessEnv=null,t&&(this.managedProcessEnv=B(this.extraEnv)),["--permission-mode","bypassPermissions","--setting-sources","user,project,local","--tools","default"];const s=e?null:R(),r=b(D(t),t.adapterPolicy.workDir,{internalUnixSockets:s?.transport==="unix_socket"?[s.endpoint]:[],publicTurn:e}),o=await N(r);this.managedConfigDir=o.directory;const i=v({agentType:"workbuddy",providerEnv:this.extraEnv,sessionEnv:this.extraEnv,runtimeEnv:{NO_COLOR:"1"}});return Object.assign(i,r.runtimeEnv),delete i.CODEBUDDY_IS_SANDBOX,this.managedProcessEnv=i,["--permission-mode","dontAsk","--subagent-permission-mode","dontAsk","--settings",o.settingsPath,"--setting-sources","none","--strict-mcp-config","--mcp-config","{}","--tools",r.toolNames.join(",")]}buildProcessEnv(){return this.managedProcessEnv??x(this.extraEnv)}async disposeManagedConfig(){const e=this.managedConfigDir;this.managedConfigDir=null,this.managedProcessEnv=null,e&&await q(e).catch(()=>{})}}function g(n){if(typeof n=="string")return n;try{return JSON.stringify(n)}catch{return"[unserializable WorkBuddy tool result]"}}function u(n){return n.replace(/(Authorization\s*:\s*)Bearer\s+[A-Za-z0-9._~+/-]+/gi,"$1Bearer [redacted]").replace(/(api[-_ ]?key|access[-_ ]?token|refresh[-_ ]?token|connector[-_ ]?token)(\s*[:=]\s*)[^\s,;]+/gi,"$1$2[redacted]").trim().slice(0,2e3)}S("workbuddy",()=>new G);export{G as WorkBuddyAdapter,$ as normalizeWorkBuddyModelId,z as normalizeWorkBuddyReasoningEffort,u as sanitizeWorkBuddyError,p as terminateWorkBuddyProcess,L as workBuddyRoomActivationText,j as workBuddySystemPromptArgs};

package/dist/src/commands/agent-workspace.js

@@ -1,3 +1,3 @@
-import O from"node:crypto";import E from"node:path";import{callDaemonIpc as M}from"../daemon-ipc/client.js";import{DaemonIpcError as k}from"../daemon-ipc/protocol.js";import{PublicAgentClient as q,PublicAgentClientError as b}from"../agents/public-agent-client.js";const C={write:e=>process.stdout.write(e),fail:()=>{process.exitCode=1}};function W(e,n={}){const i=n.client??new q,t=n.io??C,a=n.callDaemon??M;e.command("list").description("List Shennian Agents owned by the paired user on this computer").action(()=>c("agent.list",t,()=>i.list())),e.command("get <agent-id>").description("Read one exact Shennian Agent").action(o=>c("agent.get",t,()=>i.get(l(o,"agent_id_invalid")))),e.command("create").description("Check one local AI configuration, then create a standard full-access Shennian Agent").requiredOption("--name <name>","Agent display name").requiredOption("--description <description>","Public Room introduction").requiredOption("--agent <type>","Exact type returned by agent discover").requiredOption("--workdir <path>","Absolute working directory on this computer").option("--model <id>","Exact model id returned by agent discover").option("--system-prompt <prompt>","Private system prompt","").action(o=>c("agent.create",t,async()=>{const s=L(o);return await R(s,a),i.create(s)})),e.command("update <agent-id>").description("Update one exact Shennian Agent; runtime changes are checked before saving").option("--name <name>","Agent display name").option("--description <description>","Public Room introduction").option("--agent <type>","Exact type returned by agent discover").option("--workdir <path>","Absolute working directory on this computer").option("--model <id>","Exact model id returned by agent discover").option("--clear-model","Use the runtime default model").option("--system-prompt <prompt>","Private system prompt").action((o,s)=>c("agent.update",t,async()=>{const _=l(o,"agent_id_invalid"),m=F(s);Object.keys(m).length||d("agent_changes_required","Provide at least one Agent field to update.");const p=N(await i.get(_)),u={...p,...m};return I(p)!==I(u)&&await R(u,a),i.update(_,m)})),e.command("delete <agent-id>").description("Delete one exact Shennian Agent and its dedicated Room conversations").action(o=>c("agent.delete",t,()=>i.delete(l(o,"agent_id_invalid"))));const g=e.command("room").description("List, add, or remove this Agent in explicit Rooms");g.command("list <agent-id>").description("List Rooms currently linked to one exact Agent").action(o=>c("agent.room.list",t,()=>i.listRooms(l(o,"agent_id_invalid")))),g.command("add <agent-id> <room-url>").description("Create a dedicated conversation and add this Agent to one explicit Room").option("--mode <mode>","auto_follow, mention_only, or paused","auto_follow").action((o,s,_)=>c("agent.room.add",t,async()=>{const m=l(o,"agent_id_invalid"),p=x(s),u=$(_.mode),A=`cli-agent-room:${O.randomUUID()}`,f=await i.createRoomSession(m,{roomId:p,assignmentIntentId:A,activationMode:u});if(f.existing===!0)return f;const h=v(f.session,"invalid_server_response"),P=y(h.id,"invalid_server_response"),U=y(h.agentType,"invalid_server_response"),D=await a({method:"room.agent.bind-managed",params:{roomId:p,agentIdentityId:m,nianSessionId:P,assignmentIntentId:A,agentType:U,activationMode:u},timeoutMs:12e4});return{session:h,binding:D}})),g.command("remove <agent-id> <room-url>").description("Remove this Agent from one explicit Room and delete its dedicated conversation").action((o,s)=>c("agent.room.remove",t,()=>i.removeFromRoom(l(o,"agent_id_invalid"),x(s))))}function L(e){return{displayName:r(e.name,191,"agent_name_invalid",!0),description:r(e.description,1e3,"agent_description_invalid",!0),runtimeAdapter:r(e.agent,64,"agent_runtime_invalid",!0),workDir:S(e.workdir),modelId:e.model?r(e.model,191,"agent_model_invalid",!0):null,systemPrompt:r(e.systemPrompt,2e4,"agent_system_prompt_invalid")}}function F(e){return e.clearModel&&e.model!==void 0&&d("agent_model_ambiguous","Use either --model or --clear-model, not both."),{...e.name===void 0?{}:{displayName:r(e.name,191,"agent_name_invalid",!0)},...e.description===void 0?{}:{description:r(e.description,1e3,"agent_description_invalid",!0)},...e.agent===void 0?{}:{runtimeAdapter:r(e.agent,64,"agent_runtime_invalid",!0)},...e.workdir===void 0?{}:{workDir:S(e.workdir)},...e.model===void 0&&!e.clearModel?{}:{modelId:e.clearModel?null:r(e.model,191,"agent_model_invalid",!0)},...e.systemPrompt===void 0?{}:{systemPrompt:r(e.systemPrompt,2e4,"agent_system_prompt_invalid")}}}async function R(e,n){const i=y(e.runtimeAdapter,"agent_runtime_invalid"),t=y(e.workDir,"agent_workdir_invalid"),a=typeof e.modelId=="string"?e.modelId:null;if(v(await n({method:"agent.check",params:{agentType:i,workDir:t,modelId:a},timeoutMs:9e4}),"agent_check_invalid_response").ready!==!0)throw new k("agent_check_invalid_response","The daemon did not confirm a successful hello reply.")}function I(e){return JSON.stringify([e.runtimeAdapter??null,e.workDir??null,e.modelId??null,typeof e.systemPrompt=="string"?e.systemPrompt.trim():""])}function N(e){return v(e.agent,"invalid_server_response")}async function c(e,n,i){try{const t=await i();n.write(`${JSON.stringify({ok:!0,command:e,result:t})}
-`)}catch(t){if(t instanceof b){w(n,t.code,t.message,t.nextAction);return}if(t instanceof k){w(n,t.code,t.message,null);return}w(n,"agent_command_failed","Shennian Agent command failed.",null)}}function l(e,n){return/^[A-Za-z0-9_.:@/-]{1,191}$/.test(e)||d(n,"Use the exact Agent id returned by Shennian."),e}function x(e){let n;try{n=new URL(e)}catch{d("invalid_room_ref","Use an official Room URL returned by Shennian.")}const i=n.pathname.match(/^\/spaces\/([A-Za-z0-9_-]{1,191})$/);return(n.protocol!=="https:"||n.hostname!=="app.shennian.net"||n.port||n.username||n.password||n.hash||n.search||!i)&&d("invalid_room_ref","Use an official Room URL returned by Shennian."),i[1]}function $(e){if(e==="auto_follow"||e==="mention_only"||e==="paused")return e;d("invalid_activation_mode","--mode must be auto_follow, mention_only, or paused.")}function S(e){const n=r(e,1024,"agent_workdir_invalid",!0);return E.isAbsolute(n)||d("agent_workdir_invalid","Use an absolute working directory."),n}function r(e,n,i,t=!1){const a=typeof e=="string"?e.trim():"";return(t&&!a||a.length>n||a.includes("\0"))&&d(i,"Agent field is invalid."),a}function y(e,n){return(typeof e!="string"||!e)&&d(n,"Shennian returned an invalid Agent response."),e}function v(e,n){return(!e||typeof e!="object"||Array.isArray(e))&&d(n,"Shennian returned an invalid Agent response."),e}function d(e,n){throw new b(e,n)}function w(e,n,i,t){e.write(`${JSON.stringify({ok:!1,error:n,message:i,nextAction:t})}
-`),e.fail()}export{W as registerAgentWorkspaceCommands};
+import M from"node:crypto";import C from"node:path";import{callDaemonIpc as N}from"../daemon-ipc/client.js";import{DaemonIpcError as k}from"../daemon-ipc/protocol.js";import{PublicAgentClient as $,PublicAgentClientError as P}from"../agents/public-agent-client.js";const V={write:e=>process.stdout.write(e),fail:()=>{process.exitCode=1}};function K(e,i={}){const o=i.client??new $,t=i.io??V,p=i.callDaemon??N;e.command("list").description("List Shennian Agents owned by the paired user on this computer").action(()=>r("agent.list",t,()=>o.list())),e.command("get <agent-id>").description("Read one exact Shennian Agent").action(n=>r("agent.get",t,()=>o.get(s(n,"agent_id_invalid")))),e.command("create").description("Check one local AI configuration, then create a standard full-access Shennian Agent").requiredOption("--name <name>","Agent display name").requiredOption("--description <description>","Public Room introduction").requiredOption("--agent <type>","Exact type returned by agent discover").requiredOption("--workdir <path>","Absolute working directory on this computer").option("--model <id>","Exact model id returned by agent discover").option("--system-prompt <prompt>","Private system prompt","").action(n=>r("agent.create",t,async()=>{const a=F(n);return await q(a,p),o.create(a)})),e.command("update <agent-id>").description("Update one exact Shennian Agent; runtime changes are checked before saving").option("--name <name>","Agent display name").option("--description <description>","Public Room introduction").option("--agent <type>","Exact type returned by agent discover").option("--workdir <path>","Absolute working directory on this computer").option("--model <id>","Exact model id returned by agent discover").option("--clear-model","Use the runtime default model").option("--system-prompt <prompt>","Private system prompt").action((n,a)=>r("agent.update",t,async()=>{const _=s(n,"agent_id_invalid"),m=T(a);Object.keys(m).length||c("agent_changes_required","Provide at least one Agent field to update.");const l=J(await o.get(_)),b={...l,...m};return O(l)!==O(b)&&await q(b,p),o.update(_,m)})),e.command("delete <agent-id>").description("Delete one exact Shennian Agent and its dedicated Room conversations").action(n=>r("agent.delete",t,()=>o.delete(s(n,"agent_id_invalid"))));const y=e.command("room").description("List, add, or remove this Agent in explicit Rooms");y.command("list <agent-id>").description("List Rooms currently linked to one exact Agent").action(n=>r("agent.room.list",t,()=>o.listRooms(s(n,"agent_id_invalid")))),y.command("add <agent-id> <room-url>").description("Create a dedicated conversation and add this Agent to one explicit Room").option("--mode <mode>","auto_follow, mention_only, or paused","auto_follow").action((n,a,_)=>r("agent.room.add",t,async()=>{const m=s(n,"agent_id_invalid"),l=U(a),b=Z(_.mode),x=`cli-agent-room:${M.randomUUID()}`,h=await o.createRoomSession(m,{roomId:l,assignmentIntentId:x,activationMode:b});if(h.existing===!0)return h;const A=w(h.session,"invalid_server_response"),D=f(A.id,"invalid_server_response"),L=f(A.agentType,"invalid_server_response"),E=await p({method:"room.agent.bind-managed",params:{roomId:l,agentIdentityId:m,nianSessionId:D,assignmentIntentId:x,agentType:L,activationMode:b},timeoutMs:12e4});return{session:A,binding:E}})),y.command("remove <agent-id> <room-url>").description("Remove this Agent from one explicit Room and delete its dedicated conversation").action((n,a)=>r("agent.room.remove",t,()=>o.removeFromRoom(s(n,"agent_id_invalid"),U(a))));const u=e.command("publication").description("Manage one Agent publication by exact Agent id");u.command("get <agent-id>").description("Read publication status and versions").action(n=>r("agent.publication.get",t,()=>o.getPublication(s(n,"agent_id_invalid")))),u.command("readiness <agent-id>").description("Read the current machine and runtime checks for one exact Agent publication").action(n=>r("agent.publication.readiness",t,()=>o.getPublicationReadiness(s(n,"agent_id_invalid")))),u.command("draft <agent-id>").description("Create an inactive publication draft; this does not expose a share URL").requiredOption("--name <name>","Public display name").requiredOption("--description <description>","Public introduction").option("--daily-limit <count>","Visitor messages per day","100").action((n,a)=>r("agent.publication.draft",t,()=>o.createPublicationDraft(s(n,"agent_id_invalid"),{displayName:d(a.name,80,"publication_name_invalid",!0),description:d(a.description,1e3,"publication_description_invalid"),dailyMessageLimit:I(a.dailyLimit)}))),u.command("update <agent-id>").description("Update publication details with versions from publication get").requiredOption("--generation <number>","Expected generation").requiredOption("--policy-version <number>","Expected policy version").requiredOption("--name <name>","Public display name").requiredOption("--description <description>","Public introduction").requiredOption("--daily-limit <count>","Visitor messages per day").action((n,a)=>r("agent.publication.update",t,()=>o.updatePublication(s(n,"agent_id_invalid"),{expectedGeneration:g(a.generation,"publication_generation_invalid"),expectedPolicyVersion:g(a.policyVersion,"publication_policy_version_invalid"),displayName:d(a.name,80,"publication_name_invalid",!0),description:d(a.description,1e3,"publication_description_invalid"),dailyMessageLimit:I(a.dailyLimit)}))),u.command("pause <agent-id>").description("Pause an active publication using exact versions").requiredOption("--generation <number>","Expected generation").requiredOption("--policy-version <number>","Expected policy version").action((n,a)=>r("agent.publication.pause",t,()=>o.pausePublication(s(n,"agent_id_invalid"),g(a.generation,"publication_generation_invalid"),g(a.policyVersion,"publication_policy_version_invalid")))),u.command("activate <agent-id>").description("Activate a draft or resume a paused publication only after server release and runtime checks").requiredOption("--generation <number>","Expected generation").requiredOption("--policy-version <number>","Expected policy version").action((n,a)=>r("agent.publication.activate",t,()=>o.activatePublication(s(n,"agent_id_invalid"),g(a.generation,"publication_generation_invalid"),g(a.policyVersion,"publication_policy_version_invalid")))),u.command("revoke <agent-id>").description("Revoke a publication and invalidate its old share URL").requiredOption("--generation <number>","Expected generation").action((n,a)=>r("agent.publication.revoke",t,()=>o.revokePublication(s(n,"agent_id_invalid"),g(a.generation,"publication_generation_invalid")))),u.command("conversations <agent-id>").description("List this publication\u2019s conversations, one page at a time").option("--cursor <cursor>","Opaque next cursor from the previous page").action((n,a)=>r("agent.publication.conversations",t,()=>o.listPublicationConversations(s(n,"agent_id_invalid"),a.cursor)));const v=e.command("public").description("Use the same published Agent URL as a human visitor");v.command("list").description("List your own existing conversations, including history after a link is revoked").option("--cursor <cursor>","Opaque next cursor from the previous page").action(n=>r("agent.public.list",t,()=>o.listMyDirectConversations(n.cursor))),v.command("open <url>").description("Read public Agent details from an exact Shennian share URL").action(n=>r("agent.public.open",t,()=>o.openPublishedAgent(n))),v.command("read <url>").description("Read your latest messages, or page older / follow newer messages").option("--after <cursor>","Read messages after this sequence").option("--before <cursor>","Read older messages before this sequence (default: latest)").action((n,a)=>r("agent.public.read",t,()=>o.readPublishedAgent(n,a))),v.command("history <conversation-id>").description("Read your latest conversation history by stable ID after URL revocation").option("--after <cursor>","Read messages after this sequence").option("--before <cursor>","Read older messages before this sequence (default: latest)").action((n,a)=>r("agent.public.history",t,()=>o.readDirectConversation(s(n,"conversation_id_invalid"),a))),v.command("send <url> <message>").description("Send one message as the paired human user; requires an active publication").requiredOption("--client-message-id <id>","Stable ID for idempotent retries (letters, digits, _ or -)").action((n,a,_)=>r("agent.public.send",t,async()=>{const m=z(_.clientMessageId),l=await o.sendPublishedAgent(n,{text:d(a,2e4,"publication_message_invalid",!0),clientMessageId:m});return{...l,...typeof l.conversationId=="string"?{conversationRef:l.conversationId}:{},clientMessageId:m}}))}function g(e,i){/^[1-9][0-9]*$/.test(e)||c(i,"Use a positive integer.");const o=Number(e);return Number.isSafeInteger(o)||c(i,"Use a positive integer."),o}function I(e){const i=g(e,"publication_daily_limit_invalid");return i>1e3&&c("publication_daily_limit_invalid","Daily limit must be at most 1000."),i}function z(e){return/^[A-Za-z0-9_-]{1,128}$/.test(e)||c("publication_message_id_invalid","Use 1\u2013128 letters, digits, _ or - for --client-message-id."),e}function F(e){return{displayName:d(e.name,191,"agent_name_invalid",!0),description:d(e.description,1e3,"agent_description_invalid",!0),runtimeAdapter:d(e.agent,64,"agent_runtime_invalid",!0),workDir:S(e.workdir),modelId:e.model?d(e.model,191,"agent_model_invalid",!0):null,systemPrompt:d(e.systemPrompt,2e4,"agent_system_prompt_invalid")}}function T(e){return e.clearModel&&e.model!==void 0&&c("agent_model_ambiguous","Use either --model or --clear-model, not both."),{...e.name===void 0?{}:{displayName:d(e.name,191,"agent_name_invalid",!0)},...e.description===void 0?{}:{description:d(e.description,1e3,"agent_description_invalid",!0)},...e.agent===void 0?{}:{runtimeAdapter:d(e.agent,64,"agent_runtime_invalid",!0)},...e.workdir===void 0?{}:{workDir:S(e.workdir)},...e.model===void 0&&!e.clearModel?{}:{modelId:e.clearModel?null:d(e.model,191,"agent_model_invalid",!0)},...e.systemPrompt===void 0?{}:{systemPrompt:d(e.systemPrompt,2e4,"agent_system_prompt_invalid")}}}async function q(e,i){const o=f(e.runtimeAdapter,"agent_runtime_invalid"),t=f(e.workDir,"agent_workdir_invalid"),p=typeof e.modelId=="string"?e.modelId:null;if(w(await i({method:"agent.check",params:{agentType:o,workDir:t,modelId:p},timeoutMs:9e4}),"agent_check_invalid_response").ready!==!0)throw new k("agent_check_invalid_response","The daemon did not confirm a successful hello reply.")}function O(e){return JSON.stringify([e.runtimeAdapter??null,e.workDir??null,e.modelId??null,typeof e.systemPrompt=="string"?e.systemPrompt.trim():""])}function J(e){return w(e.agent,"invalid_server_response")}async function r(e,i,o){try{const t=await o();i.write(`${JSON.stringify({ok:!0,command:e,result:t})}
+`)}catch(t){if(t instanceof P){R(i,t.code,t.message,t.nextAction);return}if(t instanceof k){R(i,t.code,t.message,null);return}R(i,"agent_command_failed","Shennian Agent command failed.",null)}}function s(e,i){return/^[A-Za-z0-9_.:@/-]{1,191}$/.test(e)||c(i,"Use the exact Agent id returned by Shennian."),e}function U(e){let i;try{i=new URL(e)}catch{c("invalid_room_ref","Use an official Room URL returned by Shennian.")}const o=i.pathname.match(/^\/spaces\/([A-Za-z0-9_-]{1,191})$/);return(i.protocol!=="https:"||i.hostname!=="app.shennian.net"||i.port||i.username||i.password||i.hash||i.search||!o)&&c("invalid_room_ref","Use an official Room URL returned by Shennian."),o[1]}function Z(e){if(e==="auto_follow"||e==="mention_only"||e==="paused")return e;c("invalid_activation_mode","--mode must be auto_follow, mention_only, or paused.")}function S(e){const i=d(e,1024,"agent_workdir_invalid",!0);return C.isAbsolute(i)||c("agent_workdir_invalid","Use an absolute working directory."),i}function d(e,i,o,t=!1){const p=typeof e=="string"?e.trim():"";return(t&&!p||p.length>i||p.includes("\0"))&&c(o,"Agent field is invalid."),p}function f(e,i){return(typeof e!="string"||!e)&&c(i,"Shennian returned an invalid Agent response."),e}function w(e,i){return(!e||typeof e!="object"||Array.isArray(e))&&c(i,"Shennian returned an invalid Agent response."),e}function c(e,i){throw new P(e,i)}function R(e,i,o,t){e.write(`${JSON.stringify({ok:!1,error:i,message:o,nextAction:t})}
+`),e.fail()}export{K as registerAgentWorkspaceCommands};