@agimon-ai/po-core 0.0.0-alpha.2 → 0.0.0-alpha.21

package/dist/src/services/sqliteTranscriptReader/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/sqliteTranscriptReader/index.ts"],"sourcesContent":["import path from 'node:path';\n\nimport type { Context } from '@earendil-works/chord';\nimport { createSession, type Cursor, type EntryRecord } from '@earendil-works/pi-durable';\n\nimport type { TranscriptPageRequest, TranscriptPage } from '../../exports/sessionProtocol';\nimport { DurableNavigationDoc } from '../durableNavigation';\nimport { readSavedExecution } from '../sqliteSessionHistory';\nimport {\n  DURABLE_DIRECTORY,\n  SessionIdentityDoc,\n  SessionMetadataDoc,\n  openReadOnlyDurableStorage,\n} from '../sqliteSessionStorage';\nimport { projectDurableEntries, readTranscriptPage } from '../transcriptPages';\n\nexport interface SqliteTranscriptOwnership {\n  sessionId: string;\n  workspaceRoot: string;\n  workspaceId?: string;\n  groupingRoot?: string;\n}\n\n/** A completed child is read without admitting a writer or updating the schema. */\nexport async function readSqliteTranscript(\n  file: string,\n  request: TranscriptPageRequest,\n  context: Context,\n  ownership?: SqliteTranscriptOwnership,\n): Promise<TranscriptPage> {\n  if (path.basename(path.dirname(file)) !== DURABLE_DIRECTORY)\n    throw new Error('Legacy SQLite transcripts are unsupported');\n  const storage = await openReadOnlyDurableStorage(file);\n  const session = createSession(storage);\n  try {\n    const identity = await session.snapshot(SessionIdentityDoc, context);\n    if (\n      !identity ||\n      identity.id !== path.basename(file, '.sqlite') ||\n      (ownership && identity.id !== ownership.sessionId)\n    )\n      throw new Error('Saved transcript does not belong to this session');\n    if (ownership) {\n      const metadata = await session.snapshot(SessionMetadataDoc, context);\n      const execution = readSavedExecution(metadata?.execution, ownership.workspaceRoot);\n      if (\n        metadata?.workspaceRoot !== ownership.workspaceRoot ||\n        !execution ||\n        (ownership.workspaceId !== undefined && execution.workspaceId !== ownership.workspaceId) ||\n        (ownership.groupingRoot !== undefined && execution.groupingRoot !== ownership.groupingRoot)\n      )\n        throw new Error('Saved transcript does not belong to this workspace');\n    }\n    const navigation = await session.snapshot(DurableNavigationDoc, context);\n    const conversationId = navigation?.activeConversationId;\n    const raw: EntryRecord[] = [];\n    if (conversationId !== null && conversationId !== undefined) {\n      let cursor: Cursor | undefined;\n      do {\n        const page = await storage.scanEntries({ conversationId }, 100, cursor, context);\n        raw.push(...page.items);\n        cursor = page.next;\n      } while (cursor);\n    }\n    const entries = projectDurableEntries(raw.reverse());\n    const tip = entries.at(-1)?.id ?? null;\n    const metadata = await session.snapshot(SessionMetadataDoc, context);\n    const laneName = metadata?.laneName ?? 'main';\n    const page = await readTranscriptPage(\n      {\n        sessionId: identity.id,\n        laneName,\n        lane: {\n          getTipId: async () => tip,\n          findEntries: async (query) => {\n            let rows = entries;\n            if (query.start) {\n              const index = rows.findIndex((entry) => entry.id === query.start);\n              if (index < 0) throw new Error('Transcript references missing entry');\n              rows = rows.slice(0, index + 1);\n            }\n            if (query.cursor)\n              rows = rows.filter((entry) =>\n                query.order === 'oldestFirst' ? entry.seq > query.cursor!.seq : entry.seq < query.cursor!.seq,\n              );\n            if (query.type) rows = rows.filter((entry) => entry.type === query.type);\n            if (query.customType)\n              rows = rows.filter((entry) => entry.type === 'custom' && entry.customType === query.customType);\n            if (query.order !== 'oldestFirst') rows = [...rows].reverse();\n            return rows.slice(0, query.limit);\n          },\n        },\n      },\n      request,\n      0,\n      context,\n    );\n    return { ...page, revision: 0, drafts: [] };\n  } finally {\n    await session.close(context);\n  }\n}\n"],"mappings":";;;;;;;;AAwBA,eAAsB,qBACpB,MACA,SACA,SACA,WACyB;CACzB,IAAI,KAAK,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAA,cAClC,MAAM,IAAI,MAAM,2CAA2C;CAC7D,MAAM,UAAU,MAAM,2BAA2B,IAAI;CACrD,MAAM,UAAU,cAAc,OAAO;CACrC,IAAI;EACF,MAAM,WAAW,MAAM,QAAQ,SAAS,oBAAoB,OAAO;EACnE,IACE,CAAC,YACD,SAAS,OAAO,KAAK,SAAS,MAAM,SAAS,KAC5C,aAAa,SAAS,OAAO,UAAU,WAExC,MAAM,IAAI,MAAM,kDAAkD;EACpE,IAAI,WAAW;GACb,MAAM,WAAW,MAAM,QAAQ,SAAS,oBAAoB,OAAO;GACnE,MAAM,YAAY,mBAAmB,UAAU,WAAW,UAAU,aAAa;GACjF,IACE,UAAU,kBAAkB,UAAU,iBACtC,CAAC,aACA,UAAU,gBAAgB,KAAA,KAAa,UAAU,gBAAgB,UAAU,eAC3E,UAAU,iBAAiB,KAAA,KAAa,UAAU,iBAAiB,UAAU,cAE9E,MAAM,IAAI,MAAM,oDAAoD;EACxE;EAEA,MAAM,kBAAiB,MADE,QAAQ,SAAS,sBAAsB,OAAO,EAAA,EACpC;EACnC,MAAM,MAAqB,CAAC;EAC5B,IAAI,mBAAmB,QAAQ,mBAAmB,KAAA,GAAW;GAC3D,IAAI;GACJ,GAAG;IACD,MAAM,OAAO,MAAM,QAAQ,YAAY,EAAE,eAAe,GAAG,KAAK,QAAQ,OAAO;IAC/E,IAAI,KAAK,GAAG,KAAK,KAAK;IACtB,SAAS,KAAK;GAChB,SAAS;EACX;EACA,MAAM,UAAU,sBAAsB,IAAI,QAAQ,CAAC;EACnD,MAAM,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,MAAM;EAElC,MAAM,YAAW,MADM,QAAQ,SAAS,oBAAoB,OAAO,EAAA,EACxC,YAAY;EA8BvC,OAAO;GAAE,GAAG,MA7BO,mBACjB;IACE,WAAW,SAAS;IACpB;IACA,MAAM;KACJ,UAAU,YAAY;KACtB,aAAa,OAAO,UAAU;MAC5B,IAAI,OAAO;MACX,IAAI,MAAM,OAAO;OACf,MAAM,QAAQ,KAAK,WAAW,UAAU,MAAM,OAAO,MAAM,KAAK;OAChE,IAAI,QAAQ,GAAG,MAAM,IAAI,MAAM,qCAAqC;OACpE,OAAO,KAAK,MAAM,GAAG,QAAQ,CAAC;MAChC;MACA,IAAI,MAAM,QACR,OAAO,KAAK,QAAQ,UAClB,MAAM,UAAU,gBAAgB,MAAM,MAAM,MAAM,OAAQ,MAAM,MAAM,MAAM,MAAM,OAAQ,GAC5F;MACF,IAAI,MAAM,MAAM,OAAO,KAAK,QAAQ,UAAU,MAAM,SAAS,MAAM,IAAI;MACvE,IAAI,MAAM,YACR,OAAO,KAAK,QAAQ,UAAU,MAAM,SAAS,YAAY,MAAM,eAAe,MAAM,UAAU;MAChG,IAAI,MAAM,UAAU,eAAe,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ;MAC5D,OAAO,KAAK,MAAM,GAAG,MAAM,KAAK;KAClC;IACF;GACF,GACA,SACA,GACA,OACF;GACkB,UAAU;GAAG,QAAQ,CAAC;EAAE;CAC5C,UAAU;EACR,MAAM,QAAQ,MAAM,OAAO;CAC7B;AACF"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/sqliteTranscriptReader/index.ts"],"sourcesContent":["import type { Context } from '@earendil-works/chord';\nimport { createSession } from '@earendil-works/pi-durable';\n\nimport type { TranscriptPageRequest, TranscriptPage } from '../../exports/sessionProtocol';\nimport type { PoSessionStorageService } from '../../schemas/platform';\nimport { DurableNavigationDoc } from '../durableNavigation/docs';\nimport { IdentityHistoryDoc } from '../durableSession/docs';\nimport { readSavedExecution } from '../sqliteSessionHistory';\nimport { SessionIdentityDoc, SessionMetadataDoc } from '../sqliteSessionStorage';\nimport { durableTranscriptLane, readTranscriptPage } from '../transcriptPages';\n\nexport interface SqliteTranscriptOwnership {\n  sessionId: string;\n  workspaceRoot: string;\n  workspaceId?: string;\n  groupingRoot?: string;\n}\n\n/** A stored session is read without admitting a writer or updating the schema. */\nexport async function readSqliteTranscript(\n  sessions: PoSessionStorageService,\n  sessionId: string,\n  request: TranscriptPageRequest,\n  context: Context,\n  ownership?: SqliteTranscriptOwnership,\n): Promise<TranscriptPage> {\n  const storage = await sessions.openReadOnly(sessionId, context);\n  const session = createSession(storage);\n  try {\n    const identity = await session.snapshot(SessionIdentityDoc, context);\n    if (!identity || identity.id !== sessionId || (ownership && identity.id !== ownership.sessionId))\n      throw new Error('Saved transcript does not belong to this session');\n    if (ownership) {\n      const metadata = await session.snapshot(SessionMetadataDoc, context);\n      const execution = readSavedExecution(metadata?.execution, ownership.workspaceRoot);\n      if (\n        metadata?.workspaceRoot !== ownership.workspaceRoot ||\n        !execution ||\n        (ownership.workspaceId !== undefined && execution.workspaceId !== ownership.workspaceId) ||\n        (ownership.groupingRoot !== undefined && execution.groupingRoot !== ownership.groupingRoot)\n      )\n        throw new Error('Saved transcript does not belong to this workspace');\n    }\n    const navigation = await session.snapshot(DurableNavigationDoc, context);\n    const conversationId = navigation?.activeConversationId;\n    const metadata = await session.snapshot(SessionMetadataDoc, context);\n    const laneName = metadata?.laneName ?? 'main';\n    const page = await readTranscriptPage(\n      {\n        sessionId: identity.id,\n        laneName,\n        lane:\n          conversationId === null || conversationId === undefined\n            ? { findEntries: async () => [], readIdentities: async () => undefined }\n            : durableTranscriptLane(\n                (query, limit, cursor, scanContext) =>\n                  storage.scanEntries({ conversationId, ...query }, limit, cursor, scanContext),\n                (readContext) => session.snapshot(IdentityHistoryDoc, conversationId, readContext),\n              ),\n      },\n      request,\n      0,\n      context,\n    );\n    return { ...page, revision: 0 };\n  } finally {\n    await session.close(context);\n  }\n}\n"],"mappings":";;;;;;;;AAmBA,eAAsB,qBACpB,UACA,WACA,SACA,SACA,WACyB;CACzB,MAAM,UAAU,MAAM,SAAS,aAAa,WAAW,OAAO;CAC9D,MAAM,UAAU,cAAc,OAAO;CACrC,IAAI;EACF,MAAM,WAAW,MAAM,QAAQ,SAAS,oBAAoB,OAAO;EACnE,IAAI,CAAC,YAAY,SAAS,OAAO,aAAc,aAAa,SAAS,OAAO,UAAU,WACpF,MAAM,IAAI,MAAM,kDAAkD;EACpE,IAAI,WAAW;GACb,MAAM,WAAW,MAAM,QAAQ,SAAS,oBAAoB,OAAO;GACnE,MAAM,YAAY,mBAAmB,UAAU,WAAW,UAAU,aAAa;GACjF,IACE,UAAU,kBAAkB,UAAU,iBACtC,CAAC,aACA,UAAU,gBAAgB,KAAA,KAAa,UAAU,gBAAgB,UAAU,eAC3E,UAAU,iBAAiB,KAAA,KAAa,UAAU,iBAAiB,UAAU,cAE9E,MAAM,IAAI,MAAM,oDAAoD;EACxE;EAEA,MAAM,kBAAiB,MADE,QAAQ,SAAS,sBAAsB,OAAO,EAAA,EACpC;EAEnC,MAAM,YAAW,MADM,QAAQ,SAAS,oBAAoB,OAAO,EAAA,EACxC,YAAY;EAkBvC,OAAO;GAAE,GAAG,MAjBO,mBACjB;IACE,WAAW,SAAS;IACpB;IACA,MACE,mBAAmB,QAAQ,mBAAmB,KAAA,IAC1C;KAAE,aAAa,YAAY,CAAC;KAAG,gBAAgB,YAAY,KAAA;IAAU,IACrE,uBACG,OAAO,OAAO,QAAQ,gBACrB,QAAQ,YAAY;KAAE;KAAgB,GAAG;IAAM,GAAG,OAAO,QAAQ,WAAW,IAC7E,gBAAgB,QAAQ,SAAS,oBAAoB,gBAAgB,WAAW,CACnF;GACR,GACA,SACA,GACA,OACF;GACkB,UAAU;EAAE;CAChC,UAAU;EACR,MAAM,QAAQ,MAAM,OAAO;CAC7B;AACF"}

package/dist/src/services/testMode/index.cjs

@@ -0,0 +1,162 @@
+const require_runtime = require("../../../_virtual/_rolldown/runtime.cjs");
+let node_fs = require("node:fs");
+node_fs = require_runtime.__toESM(node_fs, 1);
+let node_os = require("node:os");
+node_os = require_runtime.__toESM(node_os, 1);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path, 1);
+let node_url = require("node:url");
+//#region src/services/testMode/index.ts
+const CLI_PACKAGE = "@agimon-ai/po";
+const WEB_PACKAGE = "@agimon-ai/po-web";
+const PACKAGE_PATTERNS = ["packages/*/*/package.json", "layers/*/*/package.json"];
+const TEST_FLAG = "--test";
+const SEEDED_AGENT_FILES = ["auth.json", "models.json"];
+function manifestName(directory) {
+	try {
+		const manifest = JSON.parse(node_fs.default.readFileSync(node_path.default.join(directory, "package.json"), "utf8"));
+		return typeof manifest.name === "string" ? manifest.name : void 0;
+	} catch {
+		return;
+	}
+}
+/** Resolve existing ancestors too, so a not-yet-created test home cannot hide a symlink escape. */
+function canonicalPath(target) {
+	const absolute = node_path.default.resolve(target);
+	try {
+		return node_fs.default.realpathSync(absolute);
+	} catch (error) {
+		if (error.code !== "ENOENT") throw error;
+		const parent = node_path.default.dirname(absolute);
+		if (parent === absolute) throw error;
+		return node_path.default.join(canonicalPath(parent), node_path.default.basename(absolute));
+	}
+}
+function contained(root, target) {
+	const relative = node_path.default.relative(root, target);
+	return relative !== "" && relative !== ".." && !relative.startsWith(`..${node_path.default.sep}`) && !node_path.default.isAbsolute(relative);
+}
+/** Find a real Po source checkout, not an arbitrary consumer with workspace folders. */
+function discoverPoCheckout(start) {
+	let directory = canonicalPath(start);
+	while (true) {
+		if (node_fs.default.existsSync(node_path.default.join(directory, "pnpm-workspace.yaml")) && manifestName(node_path.default.join(directory, "packages/cli/po")) === CLI_PACKAGE) return directory;
+		const parent = node_path.default.dirname(directory);
+		if (parent === directory) return void 0;
+		directory = parent;
+	}
+}
+function checkoutPackages(checkoutRoot) {
+	const packages = {};
+	for (const manifest of node_fs.default.globSync(PACKAGE_PATTERNS, { cwd: checkoutRoot }).sort()) {
+		const directory = node_fs.default.realpathSync(node_path.default.dirname(node_path.default.join(checkoutRoot, manifest)));
+		if (!contained(checkoutRoot, directory)) throw new Error(`Po checkout package escapes ${checkoutRoot}: ${manifest}`);
+		const name = manifestName(directory);
+		if (name) packages[name] = directory;
+	}
+	return packages;
+}
+function contextEnvironment(checkoutRoot) {
+	const packages = checkoutPackages(checkoutRoot);
+	if (!packages[CLI_PACKAGE] || !packages[WEB_PACKAGE]) throw new Error("Po test checkout must contain the Po CLI and po-web packages.");
+	const poHome = node_path.default.join(checkoutRoot, ".po/test");
+	const realHome = canonicalPath(poHome);
+	const agent = node_path.default.join(poHome, "agent");
+	if (realHome !== poHome || canonicalPath(agent) !== agent || !contained(checkoutRoot, realHome) || !contained(realHome, canonicalPath(agent))) throw new Error(`Po test home must stay inside the checkout without symlinked home or agent directories: ${poHome}`);
+	for (const file of SEEDED_AGENT_FILES) {
+		const target = node_path.default.join(agent, file);
+		try {
+			if (node_fs.default.lstatSync(target).isSymbolicLink() || !contained(canonicalPath(agent), canonicalPath(target))) throw new Error(`Po test credentials must be private files inside the test agent directory: ${target}`);
+		} catch (error) {
+			if (error.code !== "ENOENT") throw error;
+		}
+	}
+	return {
+		PO_TEST: "1",
+		PO_TEST_ROOT: checkoutRoot,
+		PO_HOME: poHome,
+		PI_CODING_AGENT_DIR: agent,
+		PO_TEST_PACKAGES: JSON.stringify(packages),
+		PO_WEB_PACKAGE_ROOT: packages[WEB_PACKAGE],
+		PO_SERVER_COMMAND: node_path.default.join(packages[CLI_PACKAGE], "dist/bin/serve.mjs")
+	};
+}
+/** Validate inherited test pins before forwarding them to another process. Invalid test mode fails closed. */
+function getValidatedTestContext(environment = process.env) {
+	if (environment.PO_TEST !== "1") return void 0;
+	const root = environment.PO_TEST_ROOT;
+	if (!root || !node_path.default.isAbsolute(root) || canonicalPath(root) !== root || discoverPoCheckout(root) !== root) throw new Error("Invalid PO_TEST_ROOT. Run po --test from a Po checkout to initialize test mode.");
+	const expected = contextEnvironment(root);
+	for (const [key, value] of Object.entries(expected)) if (key === "PO_TEST_PACKAGES") {
+		let packages;
+		try {
+			packages = JSON.parse(environment[key] ?? "");
+		} catch {
+			throw new Error("Invalid PO_TEST_PACKAGES. Run po --test to initialize checkout packages.");
+		}
+		const entries = typeof packages === "object" && packages !== null && !Array.isArray(packages) ? Object.entries(packages) : [];
+		const expectedPackages = JSON.parse(value);
+		if (entries.length !== Object.keys(expectedPackages).length || entries.some(([name, directory]) => expectedPackages[name] !== directory)) throw new Error("Invalid PO_TEST_PACKAGES: package map must match the pinned Po checkout.");
+	} else if (environment[key] !== value) throw new Error(`Invalid ${key}: expected ${value}. Run po --test to initialize test mode.`);
+	return {
+		checkoutRoot: root,
+		env: expected
+	};
+}
+/** Initialize checkout-local test mode before any configuration or runtime imports. */
+function initializeTestMode(entryUrl, options = {}) {
+	const argv = options.argv ?? process.argv;
+	const environment = options.env ?? process.env;
+	const end = argv.indexOf("--", 2);
+	if (argv.findIndex((argument, index) => index >= 2 && argument === TEST_FLAG && (end === -1 || index < end)) === -1) return getValidatedTestContext(environment)?.checkoutRoot;
+	const checkoutRoot = discoverPoCheckout(options.cwd ?? process.cwd()) ?? discoverPoCheckout(node_path.default.dirname((0, node_url.fileURLToPath)(entryUrl)));
+	if (!checkoutRoot) throw new Error("po --test requires a Po source checkout. Run it from the checkout or execute its built CLI.");
+	const pins = contextEnvironment(checkoutRoot);
+	const home = options.homeDir ?? environment.HOME ?? node_os.default.homedir();
+	const stableHome = canonicalPath(node_path.default.join(home, ".po"));
+	const testHome = canonicalPath(pins.PO_HOME);
+	if (testHome === stableHome || contained(stableHome, testHome)) throw new Error("Po test home must not use the stable Po home.");
+	let previousRoot;
+	try {
+		previousRoot = getValidatedTestContext(environment)?.checkoutRoot;
+	} catch {
+		previousRoot = void 0;
+	}
+	Object.assign(environment, pins);
+	if (previousRoot !== checkoutRoot) environment.PO_TEST_RESET_HARNESS = "1";
+	for (let index = (end === -1 ? argv.length : end) - 1; index >= 2; index--) if (argv[index] === TEST_FLAG) argv.splice(index, 1);
+	try {
+		const agent = pins.PI_CODING_AGENT_DIR;
+		node_fs.default.mkdirSync(agent, {
+			recursive: true,
+			mode: 448
+		});
+		node_fs.default.chmodSync(agent, 448);
+		for (const file of SEEDED_AGENT_FILES) {
+			const target = node_path.default.join(agent, file);
+			const source = node_path.default.join(stableHome, "agent", file);
+			if (node_fs.default.existsSync(target) || !node_fs.default.existsSync(source)) continue;
+			node_fs.default.copyFileSync(source, target, node_fs.default.constants.COPYFILE_EXCL);
+			node_fs.default.chmodSync(target, 384);
+		}
+	} catch (error) {
+		process.stderr.write(`[po] Could not copy the stable login into ${pins.PO_HOME}: ${error instanceof Error ? error.message : String(error)}\n`);
+	}
+	return checkoutRoot;
+}
+/** Only repository-owned Po packages are excluded from implicit non-test consumer resolution. */
+function isCheckoutPoPackage(packageRoot) {
+	const realRoot = node_fs.default.realpathSync(packageRoot);
+	const name = manifestName(realRoot);
+	if (name !== CLI_PACKAGE && !name?.startsWith("@agimon-ai/po-")) return false;
+	const checkout = discoverPoCheckout(realRoot);
+	if (!checkout) return false;
+	return /^(packages|layers)\/[^/]+\/[^/]+$/.test(node_path.default.relative(checkout, realRoot).split(node_path.default.sep).join("/"));
+}
+//#endregion
+exports.discoverPoCheckout = discoverPoCheckout;
+exports.getValidatedTestContext = getValidatedTestContext;
+exports.initializeTestMode = initializeTestMode;
+exports.isCheckoutPoPackage = isCheckoutPoPackage;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/services/testMode/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["fs","path","fileURLToPath","os"],"sources":["../../../../src/services/testMode/index.ts"],"sourcesContent":["import fs from 'node:fs';\nimport os from 'node:os';\nimport path from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nconst CLI_PACKAGE = '@agimon-ai/po';\nconst WEB_PACKAGE = '@agimon-ai/po-web';\nconst PACKAGE_PATTERNS = ['packages/*/*/package.json', 'layers/*/*/package.json'];\nconst TEST_FLAG = '--test';\nconst SEEDED_AGENT_FILES = ['auth.json', 'models.json'];\ntype Environment = Readonly<Record<string, string | undefined>>;\n\nfunction manifestName(directory: string): string | undefined {\n  try {\n    const manifest = JSON.parse(fs.readFileSync(path.join(directory, 'package.json'), 'utf8')) as { name?: unknown };\n    return typeof manifest.name === 'string' ? manifest.name : undefined;\n  } catch {\n    return undefined; // An absent or malformed manifest cannot identify a checkout package.\n  }\n}\n\n/** Resolve existing ancestors too, so a not-yet-created test home cannot hide a symlink escape. */\nfunction canonicalPath(target: string): string {\n  const absolute = path.resolve(target);\n  try {\n    return fs.realpathSync(absolute);\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code !== 'ENOENT') throw error;\n    const parent = path.dirname(absolute);\n    if (parent === absolute) throw error;\n    return path.join(canonicalPath(parent), path.basename(absolute));\n  }\n}\n\nfunction contained(root: string, target: string): boolean {\n  const relative = path.relative(root, target);\n  return relative !== '' && relative !== '..' && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative);\n}\n\n/** Find a real Po source checkout, not an arbitrary consumer with workspace folders. */\nexport function discoverPoCheckout(start: string): string | undefined {\n  let directory = canonicalPath(start);\n  while (true) {\n    if (\n      fs.existsSync(path.join(directory, 'pnpm-workspace.yaml')) &&\n      manifestName(path.join(directory, 'packages/cli/po')) === CLI_PACKAGE\n    )\n      return directory;\n    const parent = path.dirname(directory);\n    if (parent === directory) return undefined;\n    directory = parent;\n  }\n}\n\nfunction checkoutPackages(checkoutRoot: string): Record<string, string> {\n  const packages: Record<string, string> = {};\n  for (const manifest of fs.globSync(PACKAGE_PATTERNS, { cwd: checkoutRoot }).sort()) {\n    const directory = fs.realpathSync(path.dirname(path.join(checkoutRoot, manifest)));\n    if (!contained(checkoutRoot, directory))\n      throw new Error(`Po checkout package escapes ${checkoutRoot}: ${manifest}`);\n    const name = manifestName(directory);\n    if (name) packages[name] = directory;\n  }\n  return packages;\n}\n\nfunction contextEnvironment(checkoutRoot: string): Record<string, string> {\n  const packages = checkoutPackages(checkoutRoot);\n  if (!packages[CLI_PACKAGE] || !packages[WEB_PACKAGE]) {\n    throw new Error('Po test checkout must contain the Po CLI and po-web packages.');\n  }\n  const poHome = path.join(checkoutRoot, '.po/test');\n  const realHome = canonicalPath(poHome);\n  const agent = path.join(poHome, 'agent');\n  if (\n    realHome !== poHome ||\n    canonicalPath(agent) !== agent ||\n    !contained(checkoutRoot, realHome) ||\n    !contained(realHome, canonicalPath(agent))\n  ) {\n    throw new Error(\n      `Po test home must stay inside the checkout without symlinked home or agent directories: ${poHome}`,\n    );\n  }\n  for (const file of SEEDED_AGENT_FILES) {\n    const target = path.join(agent, file);\n    try {\n      if (fs.lstatSync(target).isSymbolicLink() || !contained(canonicalPath(agent), canonicalPath(target))) {\n        throw new Error(`Po test credentials must be private files inside the test agent directory: ${target}`);\n      }\n    } catch (error) {\n      if ((error as NodeJS.ErrnoException).code !== 'ENOENT') throw error;\n      // A missing credential is safe to seed with an exclusive copy below.\n    }\n  }\n  return {\n    PO_TEST: '1',\n    PO_TEST_ROOT: checkoutRoot,\n    PO_HOME: poHome,\n    PI_CODING_AGENT_DIR: agent,\n    PO_TEST_PACKAGES: JSON.stringify(packages),\n    PO_WEB_PACKAGE_ROOT: packages[WEB_PACKAGE],\n    PO_SERVER_COMMAND: path.join(packages[CLI_PACKAGE], 'dist/bin/serve.mjs'),\n  };\n}\n\n/** Validate inherited test pins before forwarding them to another process. Invalid test mode fails closed. */\nexport function getValidatedTestContext(\n  environment: Environment = process.env,\n): { checkoutRoot: string; env: Record<string, string> } | undefined {\n  if (environment.PO_TEST !== '1') return undefined;\n  const root = environment.PO_TEST_ROOT;\n  if (!root || !path.isAbsolute(root) || canonicalPath(root) !== root || discoverPoCheckout(root) !== root) {\n    throw new Error('Invalid PO_TEST_ROOT. Run po --test from a Po checkout to initialize test mode.');\n  }\n  const expected = contextEnvironment(root);\n  for (const [key, value] of Object.entries(expected)) {\n    if (key === 'PO_TEST_PACKAGES') {\n      let packages: unknown;\n      try {\n        packages = JSON.parse(environment[key] ?? '');\n      } catch {\n        throw new Error('Invalid PO_TEST_PACKAGES. Run po --test to initialize checkout packages.');\n      }\n      const entries =\n        typeof packages === 'object' && packages !== null && !Array.isArray(packages) ? Object.entries(packages) : [];\n      const expectedPackages = JSON.parse(value) as Record<string, string>;\n      if (\n        entries.length !== Object.keys(expectedPackages).length ||\n        entries.some(([name, directory]) => expectedPackages[name] !== directory)\n      ) {\n        throw new Error('Invalid PO_TEST_PACKAGES: package map must match the pinned Po checkout.');\n      }\n    } else if (environment[key] !== value) {\n      throw new Error(`Invalid ${key}: expected ${value}. Run po --test to initialize test mode.`);\n    }\n  }\n  return { checkoutRoot: root, env: expected };\n}\n\n/** Initialize checkout-local test mode before any configuration or runtime imports. */\nexport function initializeTestMode(\n  entryUrl: string,\n  options: {\n    argv?: string[];\n    env?: NodeJS.ProcessEnv;\n    cwd?: string;\n    homeDir?: string;\n  } = {},\n): string | undefined {\n  const argv = options.argv ?? process.argv;\n  const environment = options.env ?? process.env;\n  const end = argv.indexOf('--', 2);\n  const flag = argv.findIndex((argument, index) => index >= 2 && argument === TEST_FLAG && (end === -1 || index < end));\n  if (flag === -1) return getValidatedTestContext(environment)?.checkoutRoot;\n  const checkoutRoot =\n    discoverPoCheckout(options.cwd ?? process.cwd()) ?? discoverPoCheckout(path.dirname(fileURLToPath(entryUrl)));\n  if (!checkoutRoot)\n    throw new Error('po --test requires a Po source checkout. Run it from the checkout or execute its built CLI.');\n  const pins = contextEnvironment(checkoutRoot);\n  const home = options.homeDir ?? environment.HOME ?? os.homedir();\n  const stableHome = canonicalPath(path.join(home, '.po'));\n  const testHome = canonicalPath(pins.PO_HOME!);\n  if (testHome === stableHome || contained(stableHome, testHome))\n    throw new Error('Po test home must not use the stable Po home.');\n  let previousRoot: string | undefined;\n  try {\n    previousRoot = getValidatedTestContext(environment)?.checkoutRoot;\n  } catch {\n    // An explicit flag replaces stale inherited pins instead of trusting their harness state.\n    previousRoot = undefined;\n  }\n  Object.assign(environment, pins);\n  if (previousRoot !== checkoutRoot) environment.PO_TEST_RESET_HARNESS = '1';\n  // Strip every launcher flag, but preserve command arguments following the separator.\n  for (let index = (end === -1 ? argv.length : end) - 1; index >= 2; index--) {\n    if (argv[index] === TEST_FLAG) argv.splice(index, 1);\n  }\n  try {\n    const agent = pins.PI_CODING_AGENT_DIR!;\n    fs.mkdirSync(agent, { recursive: true, mode: 0o700 });\n    fs.chmodSync(agent, 0o700);\n    for (const file of SEEDED_AGENT_FILES) {\n      const target = path.join(agent, file);\n      const source = path.join(stableHome, 'agent', file);\n      if (fs.existsSync(target) || !fs.existsSync(source)) continue;\n      fs.copyFileSync(source, target, fs.constants.COPYFILE_EXCL);\n      fs.chmodSync(target, 0o600);\n    }\n  } catch (error) {\n    process.stderr.write(\n      `[po] Could not copy the stable login into ${pins.PO_HOME}: ${error instanceof Error ? error.message : String(error)}\\n`,\n    );\n  }\n  return checkoutRoot;\n}\n\n/** Only repository-owned Po packages are excluded from implicit non-test consumer resolution. */\nexport function isCheckoutPoPackage(packageRoot: string): boolean {\n  const realRoot = fs.realpathSync(packageRoot);\n  const name = manifestName(realRoot);\n  if (name !== CLI_PACKAGE && !name?.startsWith('@agimon-ai/po-')) return false;\n  const checkout = discoverPoCheckout(realRoot);\n  if (!checkout) return false;\n  return /^(packages|layers)\\/[^/]+\\/[^/]+$/.test(path.relative(checkout, realRoot).split(path.sep).join('/'));\n}\n"],"mappings":";;;;;;;;;AAKA,MAAM,cAAc;AACpB,MAAM,cAAc;AACpB,MAAM,mBAAmB,CAAC,6BAA6B,yBAAyB;AAChF,MAAM,YAAY;AAClB,MAAM,qBAAqB,CAAC,aAAa,aAAa;AAGtD,SAAS,aAAa,WAAuC;CAC3D,IAAI;EACF,MAAM,WAAW,KAAK,MAAMA,QAAAA,QAAG,aAAaC,UAAAA,QAAK,KAAK,WAAW,cAAc,GAAG,MAAM,CAAC;EACzF,OAAO,OAAO,SAAS,SAAS,WAAW,SAAS,OAAO,KAAA;CAC7D,QAAQ;EACN;CACF;AACF;;AAGA,SAAS,cAAc,QAAwB;CAC7C,MAAM,WAAWA,UAAAA,QAAK,QAAQ,MAAM;CACpC,IAAI;EACF,OAAOD,QAAAA,QAAG,aAAa,QAAQ;CACjC,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAAU,MAAM;EAC9D,MAAM,SAASC,UAAAA,QAAK,QAAQ,QAAQ;EACpC,IAAI,WAAW,UAAU,MAAM;EAC/B,OAAOA,UAAAA,QAAK,KAAK,cAAc,MAAM,GAAGA,UAAAA,QAAK,SAAS,QAAQ,CAAC;CACjE;AACF;AAEA,SAAS,UAAU,MAAc,QAAyB;CACxD,MAAM,WAAWA,UAAAA,QAAK,SAAS,MAAM,MAAM;CAC3C,OAAO,aAAa,MAAM,aAAa,QAAQ,CAAC,SAAS,WAAW,KAAKA,UAAAA,QAAK,KAAK,KAAK,CAACA,UAAAA,QAAK,WAAW,QAAQ;AACnH;;AAGA,SAAgB,mBAAmB,OAAmC;CACpE,IAAI,YAAY,cAAc,KAAK;CACnC,OAAO,MAAM;EACX,IACED,QAAAA,QAAG,WAAWC,UAAAA,QAAK,KAAK,WAAW,qBAAqB,CAAC,KACzD,aAAaA,UAAAA,QAAK,KAAK,WAAW,iBAAiB,CAAC,MAAM,aAE1D,OAAO;EACT,MAAM,SAASA,UAAAA,QAAK,QAAQ,SAAS;EACrC,IAAI,WAAW,WAAW,OAAO,KAAA;EACjC,YAAY;CACd;AACF;AAEA,SAAS,iBAAiB,cAA8C;CACtE,MAAM,WAAmC,CAAC;CAC1C,KAAK,MAAM,YAAYD,QAAAA,QAAG,SAAS,kBAAkB,EAAE,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,GAAG;EAClF,MAAM,YAAYA,QAAAA,QAAG,aAAaC,UAAAA,QAAK,QAAQA,UAAAA,QAAK,KAAK,cAAc,QAAQ,CAAC,CAAC;EACjF,IAAI,CAAC,UAAU,cAAc,SAAS,GACpC,MAAM,IAAI,MAAM,+BAA+B,aAAa,IAAI,UAAU;EAC5E,MAAM,OAAO,aAAa,SAAS;EACnC,IAAI,MAAM,SAAS,QAAQ;CAC7B;CACA,OAAO;AACT;AAEA,SAAS,mBAAmB,cAA8C;CACxE,MAAM,WAAW,iBAAiB,YAAY;CAC9C,IAAI,CAAC,SAAS,gBAAgB,CAAC,SAAS,cACtC,MAAM,IAAI,MAAM,+DAA+D;CAEjF,MAAM,SAASA,UAAAA,QAAK,KAAK,cAAc,UAAU;CACjD,MAAM,WAAW,cAAc,MAAM;CACrC,MAAM,QAAQA,UAAAA,QAAK,KAAK,QAAQ,OAAO;CACvC,IACE,aAAa,UACb,cAAc,KAAK,MAAM,SACzB,CAAC,UAAU,cAAc,QAAQ,KACjC,CAAC,UAAU,UAAU,cAAc,KAAK,CAAC,GAEzC,MAAM,IAAI,MACR,2FAA2F,QAC7F;CAEF,KAAK,MAAM,QAAQ,oBAAoB;EACrC,MAAM,SAASA,UAAAA,QAAK,KAAK,OAAO,IAAI;EACpC,IAAI;GACF,IAAID,QAAAA,QAAG,UAAU,MAAM,CAAC,CAAC,eAAe,KAAK,CAAC,UAAU,cAAc,KAAK,GAAG,cAAc,MAAM,CAAC,GACjG,MAAM,IAAI,MAAM,8EAA8E,QAAQ;EAE1G,SAAS,OAAO;GACd,IAAK,MAAgC,SAAS,UAAU,MAAM;EAEhE;CACF;CACA,OAAO;EACL,SAAS;EACT,cAAc;EACd,SAAS;EACT,qBAAqB;EACrB,kBAAkB,KAAK,UAAU,QAAQ;EACzC,qBAAqB,SAAS;EAC9B,mBAAmBC,UAAAA,QAAK,KAAK,SAAS,cAAc,oBAAoB;CAC1E;AACF;;AAGA,SAAgB,wBACd,cAA2B,QAAQ,KACgC;CACnE,IAAI,YAAY,YAAY,KAAK,OAAO,KAAA;CACxC,MAAM,OAAO,YAAY;CACzB,IAAI,CAAC,QAAQ,CAACA,UAAAA,QAAK,WAAW,IAAI,KAAK,cAAc,IAAI,MAAM,QAAQ,mBAAmB,IAAI,MAAM,MAClG,MAAM,IAAI,MAAM,iFAAiF;CAEnG,MAAM,WAAW,mBAAmB,IAAI;CACxC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,GAChD,IAAI,QAAQ,oBAAoB;EAC9B,IAAI;EACJ,IAAI;GACF,WAAW,KAAK,MAAM,YAAY,QAAQ,EAAE;EAC9C,QAAQ;GACN,MAAM,IAAI,MAAM,0EAA0E;EAC5F;EACA,MAAM,UACJ,OAAO,aAAa,YAAY,aAAa,QAAQ,CAAC,MAAM,QAAQ,QAAQ,IAAI,OAAO,QAAQ,QAAQ,IAAI,CAAC;EAC9G,MAAM,mBAAmB,KAAK,MAAM,KAAK;EACzC,IACE,QAAQ,WAAW,OAAO,KAAK,gBAAgB,CAAC,CAAC,UACjD,QAAQ,MAAM,CAAC,MAAM,eAAe,iBAAiB,UAAU,SAAS,GAExE,MAAM,IAAI,MAAM,0EAA0E;CAE9F,OAAO,IAAI,YAAY,SAAS,OAC9B,MAAM,IAAI,MAAM,WAAW,IAAI,aAAa,MAAM,yCAAyC;CAG/F,OAAO;EAAE,cAAc;EAAM,KAAK;CAAS;AAC7C;;AAGA,SAAgB,mBACd,UACA,UAKI,CAAC,GACe;CACpB,MAAM,OAAO,QAAQ,QAAQ,QAAQ;CACrC,MAAM,cAAc,QAAQ,OAAO,QAAQ;CAC3C,MAAM,MAAM,KAAK,QAAQ,MAAM,CAAC;CAEhC,IADa,KAAK,WAAW,UAAU,UAAU,SAAS,KAAK,aAAa,cAAc,QAAQ,MAAM,QAAQ,IACzG,MAAM,IAAI,OAAO,wBAAwB,WAAW,CAAC,EAAE;CAC9D,MAAM,eACJ,mBAAmB,QAAQ,OAAO,QAAQ,IAAI,CAAC,KAAK,mBAAmBA,UAAAA,QAAK,SAAA,GAAQC,SAAAA,cAAAA,CAAc,QAAQ,CAAC,CAAC;CAC9G,IAAI,CAAC,cACH,MAAM,IAAI,MAAM,6FAA6F;CAC/G,MAAM,OAAO,mBAAmB,YAAY;CAC5C,MAAM,OAAO,QAAQ,WAAW,YAAY,QAAQC,QAAAA,QAAG,QAAQ;CAC/D,MAAM,aAAa,cAAcF,UAAAA,QAAK,KAAK,MAAM,KAAK,CAAC;CACvD,MAAM,WAAW,cAAc,KAAK,OAAQ;CAC5C,IAAI,aAAa,cAAc,UAAU,YAAY,QAAQ,GAC3D,MAAM,IAAI,MAAM,+CAA+C;CACjE,IAAI;CACJ,IAAI;EACF,eAAe,wBAAwB,WAAW,CAAC,EAAE;CACvD,QAAQ;EAEN,eAAe,KAAA;CACjB;CACA,OAAO,OAAO,aAAa,IAAI;CAC/B,IAAI,iBAAiB,cAAc,YAAY,wBAAwB;CAEvE,KAAK,IAAI,SAAS,QAAQ,KAAK,KAAK,SAAS,OAAO,GAAG,SAAS,GAAG,SACjE,IAAI,KAAK,WAAW,WAAW,KAAK,OAAO,OAAO,CAAC;CAErD,IAAI;EACF,MAAM,QAAQ,KAAK;EACnB,QAAA,QAAG,UAAU,OAAO;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EACpD,QAAA,QAAG,UAAU,OAAO,GAAK;EACzB,KAAK,MAAM,QAAQ,oBAAoB;GACrC,MAAM,SAASA,UAAAA,QAAK,KAAK,OAAO,IAAI;GACpC,MAAM,SAASA,UAAAA,QAAK,KAAK,YAAY,SAAS,IAAI;GAClD,IAAID,QAAAA,QAAG,WAAW,MAAM,KAAK,CAACA,QAAAA,QAAG,WAAW,MAAM,GAAG;GACrD,QAAA,QAAG,aAAa,QAAQ,QAAQA,QAAAA,QAAG,UAAU,aAAa;GAC1D,QAAA,QAAG,UAAU,QAAQ,GAAK;EAC5B;CACF,SAAS,OAAO;EACd,QAAQ,OAAO,MACb,6CAA6C,KAAK,QAAQ,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GACvH;CACF;CACA,OAAO;AACT;;AAGA,SAAgB,oBAAoB,aAA8B;CAChE,MAAM,WAAWA,QAAAA,QAAG,aAAa,WAAW;CAC5C,MAAM,OAAO,aAAa,QAAQ;CAClC,IAAI,SAAS,eAAe,CAAC,MAAM,WAAW,gBAAgB,GAAG,OAAO;CACxE,MAAM,WAAW,mBAAmB,QAAQ;CAC5C,IAAI,CAAC,UAAU,OAAO;CACtB,OAAO,oCAAoC,KAAKC,UAAAA,QAAK,SAAS,UAAU,QAAQ,CAAC,CAAC,MAAMA,UAAAA,QAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;AAC7G"}

package/dist/src/services/testMode/index.d.mts

@@ -0,0 +1,17 @@
+//#region src/services/testMode/index.d.ts
+type Environment = Readonly<Record<string, string | undefined>>;
+/** Validate inherited test pins before forwarding them to another process. Invalid test mode fails closed. */
+export declare function getValidatedTestContext(environment?: Environment): {
+  checkoutRoot: string;
+  env: Record<string, string>;
+} | undefined;
+/** Initialize checkout-local test mode before any configuration or runtime imports. */
+export declare function initializeTestMode(entryUrl: string, options?: {
+  argv?: string[];
+  env?: NodeJS.ProcessEnv;
+  cwd?: string;
+  homeDir?: string;
+}): string | undefined;
+//#endregion
+export {};
+//# sourceMappingURL=index.d.mts.map

package/dist/src/services/testMode/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../src/services/testMode/index.ts"],"mappings":";KAUK,cAAc,SAAS;;wBAiGZ,wBACd,cAAa;EACV;EAAsB,KAAK;;;wBAgChB,mBACd,kBACA;EACE;EACA,MAAM,OAAO;EACb;EACA"}

package/dist/src/services/testMode/index.mjs

@@ -0,0 +1,155 @@
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+//#region src/services/testMode/index.ts
+const CLI_PACKAGE = "@agimon-ai/po";
+const WEB_PACKAGE = "@agimon-ai/po-web";
+const PACKAGE_PATTERNS = ["packages/*/*/package.json", "layers/*/*/package.json"];
+const TEST_FLAG = "--test";
+const SEEDED_AGENT_FILES = ["auth.json", "models.json"];
+function manifestName(directory) {
+	try {
+		const manifest = JSON.parse(fs.readFileSync(path.join(directory, "package.json"), "utf8"));
+		return typeof manifest.name === "string" ? manifest.name : void 0;
+	} catch {
+		return;
+	}
+}
+/** Resolve existing ancestors too, so a not-yet-created test home cannot hide a symlink escape. */
+function canonicalPath(target) {
+	const absolute = path.resolve(target);
+	try {
+		return fs.realpathSync(absolute);
+	} catch (error) {
+		if (error.code !== "ENOENT") throw error;
+		const parent = path.dirname(absolute);
+		if (parent === absolute) throw error;
+		return path.join(canonicalPath(parent), path.basename(absolute));
+	}
+}
+function contained(root, target) {
+	const relative = path.relative(root, target);
+	return relative !== "" && relative !== ".." && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative);
+}
+/** Find a real Po source checkout, not an arbitrary consumer with workspace folders. */
+function discoverPoCheckout(start) {
+	let directory = canonicalPath(start);
+	while (true) {
+		if (fs.existsSync(path.join(directory, "pnpm-workspace.yaml")) && manifestName(path.join(directory, "packages/cli/po")) === CLI_PACKAGE) return directory;
+		const parent = path.dirname(directory);
+		if (parent === directory) return void 0;
+		directory = parent;
+	}
+}
+function checkoutPackages(checkoutRoot) {
+	const packages = {};
+	for (const manifest of fs.globSync(PACKAGE_PATTERNS, { cwd: checkoutRoot }).sort()) {
+		const directory = fs.realpathSync(path.dirname(path.join(checkoutRoot, manifest)));
+		if (!contained(checkoutRoot, directory)) throw new Error(`Po checkout package escapes ${checkoutRoot}: ${manifest}`);
+		const name = manifestName(directory);
+		if (name) packages[name] = directory;
+	}
+	return packages;
+}
+function contextEnvironment(checkoutRoot) {
+	const packages = checkoutPackages(checkoutRoot);
+	if (!packages[CLI_PACKAGE] || !packages[WEB_PACKAGE]) throw new Error("Po test checkout must contain the Po CLI and po-web packages.");
+	const poHome = path.join(checkoutRoot, ".po/test");
+	const realHome = canonicalPath(poHome);
+	const agent = path.join(poHome, "agent");
+	if (realHome !== poHome || canonicalPath(agent) !== agent || !contained(checkoutRoot, realHome) || !contained(realHome, canonicalPath(agent))) throw new Error(`Po test home must stay inside the checkout without symlinked home or agent directories: ${poHome}`);
+	for (const file of SEEDED_AGENT_FILES) {
+		const target = path.join(agent, file);
+		try {
+			if (fs.lstatSync(target).isSymbolicLink() || !contained(canonicalPath(agent), canonicalPath(target))) throw new Error(`Po test credentials must be private files inside the test agent directory: ${target}`);
+		} catch (error) {
+			if (error.code !== "ENOENT") throw error;
+		}
+	}
+	return {
+		PO_TEST: "1",
+		PO_TEST_ROOT: checkoutRoot,
+		PO_HOME: poHome,
+		PI_CODING_AGENT_DIR: agent,
+		PO_TEST_PACKAGES: JSON.stringify(packages),
+		PO_WEB_PACKAGE_ROOT: packages[WEB_PACKAGE],
+		PO_SERVER_COMMAND: path.join(packages[CLI_PACKAGE], "dist/bin/serve.mjs")
+	};
+}
+/** Validate inherited test pins before forwarding them to another process. Invalid test mode fails closed. */
+function getValidatedTestContext(environment = process.env) {
+	if (environment.PO_TEST !== "1") return void 0;
+	const root = environment.PO_TEST_ROOT;
+	if (!root || !path.isAbsolute(root) || canonicalPath(root) !== root || discoverPoCheckout(root) !== root) throw new Error("Invalid PO_TEST_ROOT. Run po --test from a Po checkout to initialize test mode.");
+	const expected = contextEnvironment(root);
+	for (const [key, value] of Object.entries(expected)) if (key === "PO_TEST_PACKAGES") {
+		let packages;
+		try {
+			packages = JSON.parse(environment[key] ?? "");
+		} catch {
+			throw new Error("Invalid PO_TEST_PACKAGES. Run po --test to initialize checkout packages.");
+		}
+		const entries = typeof packages === "object" && packages !== null && !Array.isArray(packages) ? Object.entries(packages) : [];
+		const expectedPackages = JSON.parse(value);
+		if (entries.length !== Object.keys(expectedPackages).length || entries.some(([name, directory]) => expectedPackages[name] !== directory)) throw new Error("Invalid PO_TEST_PACKAGES: package map must match the pinned Po checkout.");
+	} else if (environment[key] !== value) throw new Error(`Invalid ${key}: expected ${value}. Run po --test to initialize test mode.`);
+	return {
+		checkoutRoot: root,
+		env: expected
+	};
+}
+/** Initialize checkout-local test mode before any configuration or runtime imports. */
+function initializeTestMode(entryUrl, options = {}) {
+	const argv = options.argv ?? process.argv;
+	const environment = options.env ?? process.env;
+	const end = argv.indexOf("--", 2);
+	if (argv.findIndex((argument, index) => index >= 2 && argument === TEST_FLAG && (end === -1 || index < end)) === -1) return getValidatedTestContext(environment)?.checkoutRoot;
+	const checkoutRoot = discoverPoCheckout(options.cwd ?? process.cwd()) ?? discoverPoCheckout(path.dirname(fileURLToPath(entryUrl)));
+	if (!checkoutRoot) throw new Error("po --test requires a Po source checkout. Run it from the checkout or execute its built CLI.");
+	const pins = contextEnvironment(checkoutRoot);
+	const home = options.homeDir ?? environment.HOME ?? os.homedir();
+	const stableHome = canonicalPath(path.join(home, ".po"));
+	const testHome = canonicalPath(pins.PO_HOME);
+	if (testHome === stableHome || contained(stableHome, testHome)) throw new Error("Po test home must not use the stable Po home.");
+	let previousRoot;
+	try {
+		previousRoot = getValidatedTestContext(environment)?.checkoutRoot;
+	} catch {
+		previousRoot = void 0;
+	}
+	Object.assign(environment, pins);
+	if (previousRoot !== checkoutRoot) environment.PO_TEST_RESET_HARNESS = "1";
+	for (let index = (end === -1 ? argv.length : end) - 1; index >= 2; index--) if (argv[index] === TEST_FLAG) argv.splice(index, 1);
+	try {
+		const agent = pins.PI_CODING_AGENT_DIR;
+		fs.mkdirSync(agent, {
+			recursive: true,
+			mode: 448
+		});
+		fs.chmodSync(agent, 448);
+		for (const file of SEEDED_AGENT_FILES) {
+			const target = path.join(agent, file);
+			const source = path.join(stableHome, "agent", file);
+			if (fs.existsSync(target) || !fs.existsSync(source)) continue;
+			fs.copyFileSync(source, target, fs.constants.COPYFILE_EXCL);
+			fs.chmodSync(target, 384);
+		}
+	} catch (error) {
+		process.stderr.write(`[po] Could not copy the stable login into ${pins.PO_HOME}: ${error instanceof Error ? error.message : String(error)}\n`);
+	}
+	return checkoutRoot;
+}
+/** Only repository-owned Po packages are excluded from implicit non-test consumer resolution. */
+function isCheckoutPoPackage(packageRoot) {
+	const realRoot = fs.realpathSync(packageRoot);
+	const name = manifestName(realRoot);
+	if (name !== CLI_PACKAGE && !name?.startsWith("@agimon-ai/po-")) return false;
+	const checkout = discoverPoCheckout(realRoot);
+	if (!checkout) return false;
+	return /^(packages|layers)\/[^/]+\/[^/]+$/.test(path.relative(checkout, realRoot).split(path.sep).join("/"));
+}
+//#endregion
+export { discoverPoCheckout, getValidatedTestContext, initializeTestMode, isCheckoutPoPackage };
+
+//# sourceMappingURL=index.mjs.map

package/dist/src/services/testMode/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/testMode/index.ts"],"sourcesContent":["import fs from 'node:fs';\nimport os from 'node:os';\nimport path from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nconst CLI_PACKAGE = '@agimon-ai/po';\nconst WEB_PACKAGE = '@agimon-ai/po-web';\nconst PACKAGE_PATTERNS = ['packages/*/*/package.json', 'layers/*/*/package.json'];\nconst TEST_FLAG = '--test';\nconst SEEDED_AGENT_FILES = ['auth.json', 'models.json'];\ntype Environment = Readonly<Record<string, string | undefined>>;\n\nfunction manifestName(directory: string): string | undefined {\n  try {\n    const manifest = JSON.parse(fs.readFileSync(path.join(directory, 'package.json'), 'utf8')) as { name?: unknown };\n    return typeof manifest.name === 'string' ? manifest.name : undefined;\n  } catch {\n    return undefined; // An absent or malformed manifest cannot identify a checkout package.\n  }\n}\n\n/** Resolve existing ancestors too, so a not-yet-created test home cannot hide a symlink escape. */\nfunction canonicalPath(target: string): string {\n  const absolute = path.resolve(target);\n  try {\n    return fs.realpathSync(absolute);\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code !== 'ENOENT') throw error;\n    const parent = path.dirname(absolute);\n    if (parent === absolute) throw error;\n    return path.join(canonicalPath(parent), path.basename(absolute));\n  }\n}\n\nfunction contained(root: string, target: string): boolean {\n  const relative = path.relative(root, target);\n  return relative !== '' && relative !== '..' && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative);\n}\n\n/** Find a real Po source checkout, not an arbitrary consumer with workspace folders. */\nexport function discoverPoCheckout(start: string): string | undefined {\n  let directory = canonicalPath(start);\n  while (true) {\n    if (\n      fs.existsSync(path.join(directory, 'pnpm-workspace.yaml')) &&\n      manifestName(path.join(directory, 'packages/cli/po')) === CLI_PACKAGE\n    )\n      return directory;\n    const parent = path.dirname(directory);\n    if (parent === directory) return undefined;\n    directory = parent;\n  }\n}\n\nfunction checkoutPackages(checkoutRoot: string): Record<string, string> {\n  const packages: Record<string, string> = {};\n  for (const manifest of fs.globSync(PACKAGE_PATTERNS, { cwd: checkoutRoot }).sort()) {\n    const directory = fs.realpathSync(path.dirname(path.join(checkoutRoot, manifest)));\n    if (!contained(checkoutRoot, directory))\n      throw new Error(`Po checkout package escapes ${checkoutRoot}: ${manifest}`);\n    const name = manifestName(directory);\n    if (name) packages[name] = directory;\n  }\n  return packages;\n}\n\nfunction contextEnvironment(checkoutRoot: string): Record<string, string> {\n  const packages = checkoutPackages(checkoutRoot);\n  if (!packages[CLI_PACKAGE] || !packages[WEB_PACKAGE]) {\n    throw new Error('Po test checkout must contain the Po CLI and po-web packages.');\n  }\n  const poHome = path.join(checkoutRoot, '.po/test');\n  const realHome = canonicalPath(poHome);\n  const agent = path.join(poHome, 'agent');\n  if (\n    realHome !== poHome ||\n    canonicalPath(agent) !== agent ||\n    !contained(checkoutRoot, realHome) ||\n    !contained(realHome, canonicalPath(agent))\n  ) {\n    throw new Error(\n      `Po test home must stay inside the checkout without symlinked home or agent directories: ${poHome}`,\n    );\n  }\n  for (const file of SEEDED_AGENT_FILES) {\n    const target = path.join(agent, file);\n    try {\n      if (fs.lstatSync(target).isSymbolicLink() || !contained(canonicalPath(agent), canonicalPath(target))) {\n        throw new Error(`Po test credentials must be private files inside the test agent directory: ${target}`);\n      }\n    } catch (error) {\n      if ((error as NodeJS.ErrnoException).code !== 'ENOENT') throw error;\n      // A missing credential is safe to seed with an exclusive copy below.\n    }\n  }\n  return {\n    PO_TEST: '1',\n    PO_TEST_ROOT: checkoutRoot,\n    PO_HOME: poHome,\n    PI_CODING_AGENT_DIR: agent,\n    PO_TEST_PACKAGES: JSON.stringify(packages),\n    PO_WEB_PACKAGE_ROOT: packages[WEB_PACKAGE],\n    PO_SERVER_COMMAND: path.join(packages[CLI_PACKAGE], 'dist/bin/serve.mjs'),\n  };\n}\n\n/** Validate inherited test pins before forwarding them to another process. Invalid test mode fails closed. */\nexport function getValidatedTestContext(\n  environment: Environment = process.env,\n): { checkoutRoot: string; env: Record<string, string> } | undefined {\n  if (environment.PO_TEST !== '1') return undefined;\n  const root = environment.PO_TEST_ROOT;\n  if (!root || !path.isAbsolute(root) || canonicalPath(root) !== root || discoverPoCheckout(root) !== root) {\n    throw new Error('Invalid PO_TEST_ROOT. Run po --test from a Po checkout to initialize test mode.');\n  }\n  const expected = contextEnvironment(root);\n  for (const [key, value] of Object.entries(expected)) {\n    if (key === 'PO_TEST_PACKAGES') {\n      let packages: unknown;\n      try {\n        packages = JSON.parse(environment[key] ?? '');\n      } catch {\n        throw new Error('Invalid PO_TEST_PACKAGES. Run po --test to initialize checkout packages.');\n      }\n      const entries =\n        typeof packages === 'object' && packages !== null && !Array.isArray(packages) ? Object.entries(packages) : [];\n      const expectedPackages = JSON.parse(value) as Record<string, string>;\n      if (\n        entries.length !== Object.keys(expectedPackages).length ||\n        entries.some(([name, directory]) => expectedPackages[name] !== directory)\n      ) {\n        throw new Error('Invalid PO_TEST_PACKAGES: package map must match the pinned Po checkout.');\n      }\n    } else if (environment[key] !== value) {\n      throw new Error(`Invalid ${key}: expected ${value}. Run po --test to initialize test mode.`);\n    }\n  }\n  return { checkoutRoot: root, env: expected };\n}\n\n/** Initialize checkout-local test mode before any configuration or runtime imports. */\nexport function initializeTestMode(\n  entryUrl: string,\n  options: {\n    argv?: string[];\n    env?: NodeJS.ProcessEnv;\n    cwd?: string;\n    homeDir?: string;\n  } = {},\n): string | undefined {\n  const argv = options.argv ?? process.argv;\n  const environment = options.env ?? process.env;\n  const end = argv.indexOf('--', 2);\n  const flag = argv.findIndex((argument, index) => index >= 2 && argument === TEST_FLAG && (end === -1 || index < end));\n  if (flag === -1) return getValidatedTestContext(environment)?.checkoutRoot;\n  const checkoutRoot =\n    discoverPoCheckout(options.cwd ?? process.cwd()) ?? discoverPoCheckout(path.dirname(fileURLToPath(entryUrl)));\n  if (!checkoutRoot)\n    throw new Error('po --test requires a Po source checkout. Run it from the checkout or execute its built CLI.');\n  const pins = contextEnvironment(checkoutRoot);\n  const home = options.homeDir ?? environment.HOME ?? os.homedir();\n  const stableHome = canonicalPath(path.join(home, '.po'));\n  const testHome = canonicalPath(pins.PO_HOME!);\n  if (testHome === stableHome || contained(stableHome, testHome))\n    throw new Error('Po test home must not use the stable Po home.');\n  let previousRoot: string | undefined;\n  try {\n    previousRoot = getValidatedTestContext(environment)?.checkoutRoot;\n  } catch {\n    // An explicit flag replaces stale inherited pins instead of trusting their harness state.\n    previousRoot = undefined;\n  }\n  Object.assign(environment, pins);\n  if (previousRoot !== checkoutRoot) environment.PO_TEST_RESET_HARNESS = '1';\n  // Strip every launcher flag, but preserve command arguments following the separator.\n  for (let index = (end === -1 ? argv.length : end) - 1; index >= 2; index--) {\n    if (argv[index] === TEST_FLAG) argv.splice(index, 1);\n  }\n  try {\n    const agent = pins.PI_CODING_AGENT_DIR!;\n    fs.mkdirSync(agent, { recursive: true, mode: 0o700 });\n    fs.chmodSync(agent, 0o700);\n    for (const file of SEEDED_AGENT_FILES) {\n      const target = path.join(agent, file);\n      const source = path.join(stableHome, 'agent', file);\n      if (fs.existsSync(target) || !fs.existsSync(source)) continue;\n      fs.copyFileSync(source, target, fs.constants.COPYFILE_EXCL);\n      fs.chmodSync(target, 0o600);\n    }\n  } catch (error) {\n    process.stderr.write(\n      `[po] Could not copy the stable login into ${pins.PO_HOME}: ${error instanceof Error ? error.message : String(error)}\\n`,\n    );\n  }\n  return checkoutRoot;\n}\n\n/** Only repository-owned Po packages are excluded from implicit non-test consumer resolution. */\nexport function isCheckoutPoPackage(packageRoot: string): boolean {\n  const realRoot = fs.realpathSync(packageRoot);\n  const name = manifestName(realRoot);\n  if (name !== CLI_PACKAGE && !name?.startsWith('@agimon-ai/po-')) return false;\n  const checkout = discoverPoCheckout(realRoot);\n  if (!checkout) return false;\n  return /^(packages|layers)\\/[^/]+\\/[^/]+$/.test(path.relative(checkout, realRoot).split(path.sep).join('/'));\n}\n"],"mappings":";;;;;AAKA,MAAM,cAAc;AACpB,MAAM,cAAc;AACpB,MAAM,mBAAmB,CAAC,6BAA6B,yBAAyB;AAChF,MAAM,YAAY;AAClB,MAAM,qBAAqB,CAAC,aAAa,aAAa;AAGtD,SAAS,aAAa,WAAuC;CAC3D,IAAI;EACF,MAAM,WAAW,KAAK,MAAM,GAAG,aAAa,KAAK,KAAK,WAAW,cAAc,GAAG,MAAM,CAAC;EACzF,OAAO,OAAO,SAAS,SAAS,WAAW,SAAS,OAAO,KAAA;CAC7D,QAAQ;EACN;CACF;AACF;;AAGA,SAAS,cAAc,QAAwB;CAC7C,MAAM,WAAW,KAAK,QAAQ,MAAM;CACpC,IAAI;EACF,OAAO,GAAG,aAAa,QAAQ;CACjC,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAAU,MAAM;EAC9D,MAAM,SAAS,KAAK,QAAQ,QAAQ;EACpC,IAAI,WAAW,UAAU,MAAM;EAC/B,OAAO,KAAK,KAAK,cAAc,MAAM,GAAG,KAAK,SAAS,QAAQ,CAAC;CACjE;AACF;AAEA,SAAS,UAAU,MAAc,QAAyB;CACxD,MAAM,WAAW,KAAK,SAAS,MAAM,MAAM;CAC3C,OAAO,aAAa,MAAM,aAAa,QAAQ,CAAC,SAAS,WAAW,KAAK,KAAK,KAAK,KAAK,CAAC,KAAK,WAAW,QAAQ;AACnH;;AAGA,SAAgB,mBAAmB,OAAmC;CACpE,IAAI,YAAY,cAAc,KAAK;CACnC,OAAO,MAAM;EACX,IACE,GAAG,WAAW,KAAK,KAAK,WAAW,qBAAqB,CAAC,KACzD,aAAa,KAAK,KAAK,WAAW,iBAAiB,CAAC,MAAM,aAE1D,OAAO;EACT,MAAM,SAAS,KAAK,QAAQ,SAAS;EACrC,IAAI,WAAW,WAAW,OAAO,KAAA;EACjC,YAAY;CACd;AACF;AAEA,SAAS,iBAAiB,cAA8C;CACtE,MAAM,WAAmC,CAAC;CAC1C,KAAK,MAAM,YAAY,GAAG,SAAS,kBAAkB,EAAE,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,GAAG;EAClF,MAAM,YAAY,GAAG,aAAa,KAAK,QAAQ,KAAK,KAAK,cAAc,QAAQ,CAAC,CAAC;EACjF,IAAI,CAAC,UAAU,cAAc,SAAS,GACpC,MAAM,IAAI,MAAM,+BAA+B,aAAa,IAAI,UAAU;EAC5E,MAAM,OAAO,aAAa,SAAS;EACnC,IAAI,MAAM,SAAS,QAAQ;CAC7B;CACA,OAAO;AACT;AAEA,SAAS,mBAAmB,cAA8C;CACxE,MAAM,WAAW,iBAAiB,YAAY;CAC9C,IAAI,CAAC,SAAS,gBAAgB,CAAC,SAAS,cACtC,MAAM,IAAI,MAAM,+DAA+D;CAEjF,MAAM,SAAS,KAAK,KAAK,cAAc,UAAU;CACjD,MAAM,WAAW,cAAc,MAAM;CACrC,MAAM,QAAQ,KAAK,KAAK,QAAQ,OAAO;CACvC,IACE,aAAa,UACb,cAAc,KAAK,MAAM,SACzB,CAAC,UAAU,cAAc,QAAQ,KACjC,CAAC,UAAU,UAAU,cAAc,KAAK,CAAC,GAEzC,MAAM,IAAI,MACR,2FAA2F,QAC7F;CAEF,KAAK,MAAM,QAAQ,oBAAoB;EACrC,MAAM,SAAS,KAAK,KAAK,OAAO,IAAI;EACpC,IAAI;GACF,IAAI,GAAG,UAAU,MAAM,CAAC,CAAC,eAAe,KAAK,CAAC,UAAU,cAAc,KAAK,GAAG,cAAc,MAAM,CAAC,GACjG,MAAM,IAAI,MAAM,8EAA8E,QAAQ;EAE1G,SAAS,OAAO;GACd,IAAK,MAAgC,SAAS,UAAU,MAAM;EAEhE;CACF;CACA,OAAO;EACL,SAAS;EACT,cAAc;EACd,SAAS;EACT,qBAAqB;EACrB,kBAAkB,KAAK,UAAU,QAAQ;EACzC,qBAAqB,SAAS;EAC9B,mBAAmB,KAAK,KAAK,SAAS,cAAc,oBAAoB;CAC1E;AACF;;AAGA,SAAgB,wBACd,cAA2B,QAAQ,KACgC;CACnE,IAAI,YAAY,YAAY,KAAK,OAAO,KAAA;CACxC,MAAM,OAAO,YAAY;CACzB,IAAI,CAAC,QAAQ,CAAC,KAAK,WAAW,IAAI,KAAK,cAAc,IAAI,MAAM,QAAQ,mBAAmB,IAAI,MAAM,MAClG,MAAM,IAAI,MAAM,iFAAiF;CAEnG,MAAM,WAAW,mBAAmB,IAAI;CACxC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,GAChD,IAAI,QAAQ,oBAAoB;EAC9B,IAAI;EACJ,IAAI;GACF,WAAW,KAAK,MAAM,YAAY,QAAQ,EAAE;EAC9C,QAAQ;GACN,MAAM,IAAI,MAAM,0EAA0E;EAC5F;EACA,MAAM,UACJ,OAAO,aAAa,YAAY,aAAa,QAAQ,CAAC,MAAM,QAAQ,QAAQ,IAAI,OAAO,QAAQ,QAAQ,IAAI,CAAC;EAC9G,MAAM,mBAAmB,KAAK,MAAM,KAAK;EACzC,IACE,QAAQ,WAAW,OAAO,KAAK,gBAAgB,CAAC,CAAC,UACjD,QAAQ,MAAM,CAAC,MAAM,eAAe,iBAAiB,UAAU,SAAS,GAExE,MAAM,IAAI,MAAM,0EAA0E;CAE9F,OAAO,IAAI,YAAY,SAAS,OAC9B,MAAM,IAAI,MAAM,WAAW,IAAI,aAAa,MAAM,yCAAyC;CAG/F,OAAO;EAAE,cAAc;EAAM,KAAK;CAAS;AAC7C;;AAGA,SAAgB,mBACd,UACA,UAKI,CAAC,GACe;CACpB,MAAM,OAAO,QAAQ,QAAQ,QAAQ;CACrC,MAAM,cAAc,QAAQ,OAAO,QAAQ;CAC3C,MAAM,MAAM,KAAK,QAAQ,MAAM,CAAC;CAEhC,IADa,KAAK,WAAW,UAAU,UAAU,SAAS,KAAK,aAAa,cAAc,QAAQ,MAAM,QAAQ,IACzG,MAAM,IAAI,OAAO,wBAAwB,WAAW,CAAC,EAAE;CAC9D,MAAM,eACJ,mBAAmB,QAAQ,OAAO,QAAQ,IAAI,CAAC,KAAK,mBAAmB,KAAK,QAAQ,cAAc,QAAQ,CAAC,CAAC;CAC9G,IAAI,CAAC,cACH,MAAM,IAAI,MAAM,6FAA6F;CAC/G,MAAM,OAAO,mBAAmB,YAAY;CAC5C,MAAM,OAAO,QAAQ,WAAW,YAAY,QAAQ,GAAG,QAAQ;CAC/D,MAAM,aAAa,cAAc,KAAK,KAAK,MAAM,KAAK,CAAC;CACvD,MAAM,WAAW,cAAc,KAAK,OAAQ;CAC5C,IAAI,aAAa,cAAc,UAAU,YAAY,QAAQ,GAC3D,MAAM,IAAI,MAAM,+CAA+C;CACjE,IAAI;CACJ,IAAI;EACF,eAAe,wBAAwB,WAAW,CAAC,EAAE;CACvD,QAAQ;EAEN,eAAe,KAAA;CACjB;CACA,OAAO,OAAO,aAAa,IAAI;CAC/B,IAAI,iBAAiB,cAAc,YAAY,wBAAwB;CAEvE,KAAK,IAAI,SAAS,QAAQ,KAAK,KAAK,SAAS,OAAO,GAAG,SAAS,GAAG,SACjE,IAAI,KAAK,WAAW,WAAW,KAAK,OAAO,OAAO,CAAC;CAErD,IAAI;EACF,MAAM,QAAQ,KAAK;EACnB,GAAG,UAAU,OAAO;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EACpD,GAAG,UAAU,OAAO,GAAK;EACzB,KAAK,MAAM,QAAQ,oBAAoB;GACrC,MAAM,SAAS,KAAK,KAAK,OAAO,IAAI;GACpC,MAAM,SAAS,KAAK,KAAK,YAAY,SAAS,IAAI;GAClD,IAAI,GAAG,WAAW,MAAM,KAAK,CAAC,GAAG,WAAW,MAAM,GAAG;GACrD,GAAG,aAAa,QAAQ,QAAQ,GAAG,UAAU,aAAa;GAC1D,GAAG,UAAU,QAAQ,GAAK;EAC5B;CACF,SAAS,OAAO;EACd,QAAQ,OAAO,MACb,6CAA6C,KAAK,QAAQ,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GACvH;CACF;CACA,OAAO;AACT;;AAGA,SAAgB,oBAAoB,aAA8B;CAChE,MAAM,WAAW,GAAG,aAAa,WAAW;CAC5C,MAAM,OAAO,aAAa,QAAQ;CAClC,IAAI,SAAS,eAAe,CAAC,MAAM,WAAW,gBAAgB,GAAG,OAAO;CACxE,MAAM,WAAW,mBAAmB,QAAQ;CAC5C,IAAI,CAAC,UAAU,OAAO;CACtB,OAAO,oCAAoC,KAAK,KAAK,SAAS,UAAU,QAAQ,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;AAC7G"}

package/dist/src/services/toolOverrides/index.cjs

@@ -1,16 +1,16 @@
 //#region src/services/toolOverrides/index.ts
 function assertNonEmpty(value, field) {
-	if (value.trim().length === 0) throw new Error(`Doom tool override ${field} must not be empty.`);
+	if (value.trim().length === 0) throw new Error(`Po tool override ${field} must not be empty.`);
 }
-/** Creates the host-owned tool replacement registry for one Doom runtime. */
-function createDoomToolOverridesService(generation) {
-	if (!generation) throw new Error("Doom tool overrides require a runtime generation.");
+/** Creates the host-owned tool replacement registry for one Po runtime. */
+function createPoToolOverridesService(generation) {
+	if (!generation) throw new Error("Po tool overrides require a runtime generation.");
 	const owners = /* @__PURE__ */ new Map();
 	return Object.freeze({
 		generation,
 		claim(claim) {
 			assertNonEmpty(claim.source, "source");
-			if (claim.tools.length === 0) throw new Error("Doom tool override tools must not be empty.");
+			if (claim.tools.length === 0) throw new Error("Po tool override tools must not be empty.");
 			for (const tool of claim.tools) assertNonEmpty(tool, "tool");
 			const tools = Object.freeze([...new Set(claim.tools)]);
 			if (tools.some((tool) => owners.has(tool))) return Object.freeze({
@@ -40,6 +40,6 @@ function createDoomToolOverridesService(generation) {
 	});
 }
 //#endregion
-exports.createDoomToolOverridesService = createDoomToolOverridesService;
+exports.createPoToolOverridesService = createPoToolOverridesService;
 
 //# sourceMappingURL=index.cjs.map

package/dist/src/services/toolOverrides/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":[],"sources":["../../../../src/services/toolOverrides/index.ts"],"sourcesContent":["import type {\n  DoomToolOverrideClaim,\n  DoomToolOverrideRegistration,\n  DoomToolOverridesService,\n} from '../../schemas/toolOverrides';\n\ninterface StoredClaim {\n  readonly source: string;\n  readonly tools: readonly string[];\n}\n\nfunction assertNonEmpty(value: string, field: string): void {\n  if (value.trim().length === 0) throw new Error(`Doom tool override ${field} must not be empty.`);\n}\n\n/** Creates the host-owned tool replacement registry for one Doom runtime. */\nexport function createDoomToolOverridesService(generation: string): DoomToolOverridesService {\n  if (!generation) throw new Error('Doom tool overrides require a runtime generation.');\n\n  const owners = new Map<string, StoredClaim>();\n  return Object.freeze({\n    generation,\n    claim(claim: DoomToolOverrideClaim): DoomToolOverrideRegistration {\n      assertNonEmpty(claim.source, 'source');\n      if (claim.tools.length === 0) throw new Error('Doom tool override tools must not be empty.');\n      for (const tool of claim.tools) assertNonEmpty(tool, 'tool');\n\n      const tools = Object.freeze([...new Set(claim.tools)]);\n      if (tools.some((tool) => owners.has(tool))) {\n        return Object.freeze({ granted: false, tools, dispose: (): void => undefined });\n      }\n\n      const stored: StoredClaim = Object.freeze({ source: claim.source, tools });\n      for (const tool of tools) owners.set(tool, stored);\n\n      let disposed = false;\n      return Object.freeze({\n        granted: true,\n        tools,\n        dispose(): void {\n          if (disposed) return;\n          disposed = true;\n          for (const tool of tools) {\n            if (owners.get(tool) === stored) owners.delete(tool);\n          }\n        },\n      });\n    },\n    owner(tool: string): string | undefined {\n      return owners.get(tool)?.source;\n    },\n  });\n}\n"],"mappings":";AAWA,SAAS,eAAe,OAAe,OAAqB;CAC1D,IAAI,MAAM,KAAK,CAAC,CAAC,WAAW,GAAG,MAAM,IAAI,MAAM,sBAAsB,MAAM,oBAAoB;AACjG;;AAGA,SAAgB,+BAA+B,YAA8C;CAC3F,IAAI,CAAC,YAAY,MAAM,IAAI,MAAM,mDAAmD;CAEpF,MAAM,yBAAS,IAAI,IAAyB;CAC5C,OAAO,OAAO,OAAO;EACnB;EACA,MAAM,OAA4D;GAChE,eAAe,MAAM,QAAQ,QAAQ;GACrC,IAAI,MAAM,MAAM,WAAW,GAAG,MAAM,IAAI,MAAM,6CAA6C;GAC3F,KAAK,MAAM,QAAQ,MAAM,OAAO,eAAe,MAAM,MAAM;GAE3D,MAAM,QAAQ,OAAO,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,KAAK,CAAC,CAAC;GACrD,IAAI,MAAM,MAAM,SAAS,OAAO,IAAI,IAAI,CAAC,GACvC,OAAO,OAAO,OAAO;IAAE,SAAS;IAAO;IAAO,eAAqB,KAAA;GAAU,CAAC;GAGhF,MAAM,SAAsB,OAAO,OAAO;IAAE,QAAQ,MAAM;IAAQ;GAAM,CAAC;GACzE,KAAK,MAAM,QAAQ,OAAO,OAAO,IAAI,MAAM,MAAM;GAEjD,IAAI,WAAW;GACf,OAAO,OAAO,OAAO;IACnB,SAAS;IACT;IACA,UAAgB;KACd,IAAI,UAAU;KACd,WAAW;KACX,KAAK,MAAM,QAAQ,OACjB,IAAI,OAAO,IAAI,IAAI,MAAM,QAAQ,OAAO,OAAO,IAAI;IAEvD;GACF,CAAC;EACH;EACA,MAAM,MAAkC;GACtC,OAAO,OAAO,IAAI,IAAI,CAAC,EAAE;EAC3B;CACF,CAAC;AACH"}
+{"version":3,"file":"index.cjs","names":[],"sources":["../../../../src/services/toolOverrides/index.ts"],"sourcesContent":["import type {\n  PoToolOverrideClaim,\n  PoToolOverrideRegistration,\n  PoToolOverridesService,\n} from '../../schemas/toolOverrides';\n\ninterface StoredClaim {\n  readonly source: string;\n  readonly tools: readonly string[];\n}\n\nfunction assertNonEmpty(value: string, field: string): void {\n  if (value.trim().length === 0) throw new Error(`Po tool override ${field} must not be empty.`);\n}\n\n/** Creates the host-owned tool replacement registry for one Po runtime. */\nexport function createPoToolOverridesService(generation: string): PoToolOverridesService {\n  if (!generation) throw new Error('Po tool overrides require a runtime generation.');\n\n  const owners = new Map<string, StoredClaim>();\n  return Object.freeze({\n    generation,\n    claim(claim: PoToolOverrideClaim): PoToolOverrideRegistration {\n      assertNonEmpty(claim.source, 'source');\n      if (claim.tools.length === 0) throw new Error('Po tool override tools must not be empty.');\n      for (const tool of claim.tools) assertNonEmpty(tool, 'tool');\n\n      const tools = Object.freeze([...new Set(claim.tools)]);\n      if (tools.some((tool) => owners.has(tool))) {\n        return Object.freeze({ granted: false, tools, dispose: (): void => undefined });\n      }\n\n      const stored: StoredClaim = Object.freeze({ source: claim.source, tools });\n      for (const tool of tools) owners.set(tool, stored);\n\n      let disposed = false;\n      return Object.freeze({\n        granted: true,\n        tools,\n        dispose(): void {\n          if (disposed) return;\n          disposed = true;\n          for (const tool of tools) {\n            if (owners.get(tool) === stored) owners.delete(tool);\n          }\n        },\n      });\n    },\n    owner(tool: string): string | undefined {\n      return owners.get(tool)?.source;\n    },\n  });\n}\n"],"mappings":";AAWA,SAAS,eAAe,OAAe,OAAqB;CAC1D,IAAI,MAAM,KAAK,CAAC,CAAC,WAAW,GAAG,MAAM,IAAI,MAAM,oBAAoB,MAAM,oBAAoB;AAC/F;;AAGA,SAAgB,6BAA6B,YAA4C;CACvF,IAAI,CAAC,YAAY,MAAM,IAAI,MAAM,iDAAiD;CAElF,MAAM,yBAAS,IAAI,IAAyB;CAC5C,OAAO,OAAO,OAAO;EACnB;EACA,MAAM,OAAwD;GAC5D,eAAe,MAAM,QAAQ,QAAQ;GACrC,IAAI,MAAM,MAAM,WAAW,GAAG,MAAM,IAAI,MAAM,2CAA2C;GACzF,KAAK,MAAM,QAAQ,MAAM,OAAO,eAAe,MAAM,MAAM;GAE3D,MAAM,QAAQ,OAAO,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,KAAK,CAAC,CAAC;GACrD,IAAI,MAAM,MAAM,SAAS,OAAO,IAAI,IAAI,CAAC,GACvC,OAAO,OAAO,OAAO;IAAE,SAAS;IAAO;IAAO,eAAqB,KAAA;GAAU,CAAC;GAGhF,MAAM,SAAsB,OAAO,OAAO;IAAE,QAAQ,MAAM;IAAQ;GAAM,CAAC;GACzE,KAAK,MAAM,QAAQ,OAAO,OAAO,IAAI,MAAM,MAAM;GAEjD,IAAI,WAAW;GACf,OAAO,OAAO,OAAO;IACnB,SAAS;IACT;IACA,UAAgB;KACd,IAAI,UAAU;KACd,WAAW;KACX,KAAK,MAAM,QAAQ,OACjB,IAAI,OAAO,IAAI,IAAI,MAAM,QAAQ,OAAO,OAAO,IAAI;IAEvD;GACF,CAAC;EACH;EACA,MAAM,MAAkC;GACtC,OAAO,OAAO,IAAI,IAAI,CAAC,EAAE;EAC3B;CACF,CAAC;AACH"}

package/dist/src/services/toolOverrides/index.d.mts

@@ -1,6 +1,6 @@
-import { DoomToolOverridesService } from "../../schemas/toolOverrides.mjs";
+import { PoToolOverridesService } from "../../schemas/toolOverrides.mjs";
 //#region src/services/toolOverrides/index.d.ts
-/** Creates the host-owned tool replacement registry for one Doom runtime. */
-export declare function createDoomToolOverridesService(generation: string): DoomToolOverridesService;
+/** Creates the host-owned tool replacement registry for one Po runtime. */
+export declare function createPoToolOverridesService(generation: string): PoToolOverridesService;
 //#endregion
 //# sourceMappingURL=index.d.mts.map

package/dist/src/services/toolOverrides/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../src/services/toolOverrides/index.ts"],"mappings":";;;wBAgBgB,+BAA+B,qBAAqB"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../src/services/toolOverrides/index.ts"],"mappings":";;;wBAgBgB,6BAA6B,qBAAqB"}

package/dist/src/services/toolOverrides/index.mjs

@@ -1,16 +1,16 @@
 //#region src/services/toolOverrides/index.ts
 function assertNonEmpty(value, field) {
-	if (value.trim().length === 0) throw new Error(`Doom tool override ${field} must not be empty.`);
+	if (value.trim().length === 0) throw new Error(`Po tool override ${field} must not be empty.`);
 }
-/** Creates the host-owned tool replacement registry for one Doom runtime. */
-function createDoomToolOverridesService(generation) {
-	if (!generation) throw new Error("Doom tool overrides require a runtime generation.");
+/** Creates the host-owned tool replacement registry for one Po runtime. */
+function createPoToolOverridesService(generation) {
+	if (!generation) throw new Error("Po tool overrides require a runtime generation.");
 	const owners = /* @__PURE__ */ new Map();
 	return Object.freeze({
 		generation,
 		claim(claim) {
 			assertNonEmpty(claim.source, "source");
-			if (claim.tools.length === 0) throw new Error("Doom tool override tools must not be empty.");
+			if (claim.tools.length === 0) throw new Error("Po tool override tools must not be empty.");
 			for (const tool of claim.tools) assertNonEmpty(tool, "tool");
 			const tools = Object.freeze([...new Set(claim.tools)]);
 			if (tools.some((tool) => owners.has(tool))) return Object.freeze({
@@ -40,6 +40,6 @@ function createDoomToolOverridesService(generation) {
 	});
 }
 //#endregion
-export { createDoomToolOverridesService };
+export { createPoToolOverridesService };
 
 //# sourceMappingURL=index.mjs.map

package/dist/src/services/toolOverrides/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/toolOverrides/index.ts"],"sourcesContent":["import type {\n  DoomToolOverrideClaim,\n  DoomToolOverrideRegistration,\n  DoomToolOverridesService,\n} from '../../schemas/toolOverrides';\n\ninterface StoredClaim {\n  readonly source: string;\n  readonly tools: readonly string[];\n}\n\nfunction assertNonEmpty(value: string, field: string): void {\n  if (value.trim().length === 0) throw new Error(`Doom tool override ${field} must not be empty.`);\n}\n\n/** Creates the host-owned tool replacement registry for one Doom runtime. */\nexport function createDoomToolOverridesService(generation: string): DoomToolOverridesService {\n  if (!generation) throw new Error('Doom tool overrides require a runtime generation.');\n\n  const owners = new Map<string, StoredClaim>();\n  return Object.freeze({\n    generation,\n    claim(claim: DoomToolOverrideClaim): DoomToolOverrideRegistration {\n      assertNonEmpty(claim.source, 'source');\n      if (claim.tools.length === 0) throw new Error('Doom tool override tools must not be empty.');\n      for (const tool of claim.tools) assertNonEmpty(tool, 'tool');\n\n      const tools = Object.freeze([...new Set(claim.tools)]);\n      if (tools.some((tool) => owners.has(tool))) {\n        return Object.freeze({ granted: false, tools, dispose: (): void => undefined });\n      }\n\n      const stored: StoredClaim = Object.freeze({ source: claim.source, tools });\n      for (const tool of tools) owners.set(tool, stored);\n\n      let disposed = false;\n      return Object.freeze({\n        granted: true,\n        tools,\n        dispose(): void {\n          if (disposed) return;\n          disposed = true;\n          for (const tool of tools) {\n            if (owners.get(tool) === stored) owners.delete(tool);\n          }\n        },\n      });\n    },\n    owner(tool: string): string | undefined {\n      return owners.get(tool)?.source;\n    },\n  });\n}\n"],"mappings":";AAWA,SAAS,eAAe,OAAe,OAAqB;CAC1D,IAAI,MAAM,KAAK,CAAC,CAAC,WAAW,GAAG,MAAM,IAAI,MAAM,sBAAsB,MAAM,oBAAoB;AACjG;;AAGA,SAAgB,+BAA+B,YAA8C;CAC3F,IAAI,CAAC,YAAY,MAAM,IAAI,MAAM,mDAAmD;CAEpF,MAAM,yBAAS,IAAI,IAAyB;CAC5C,OAAO,OAAO,OAAO;EACnB;EACA,MAAM,OAA4D;GAChE,eAAe,MAAM,QAAQ,QAAQ;GACrC,IAAI,MAAM,MAAM,WAAW,GAAG,MAAM,IAAI,MAAM,6CAA6C;GAC3F,KAAK,MAAM,QAAQ,MAAM,OAAO,eAAe,MAAM,MAAM;GAE3D,MAAM,QAAQ,OAAO,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,KAAK,CAAC,CAAC;GACrD,IAAI,MAAM,MAAM,SAAS,OAAO,IAAI,IAAI,CAAC,GACvC,OAAO,OAAO,OAAO;IAAE,SAAS;IAAO;IAAO,eAAqB,KAAA;GAAU,CAAC;GAGhF,MAAM,SAAsB,OAAO,OAAO;IAAE,QAAQ,MAAM;IAAQ;GAAM,CAAC;GACzE,KAAK,MAAM,QAAQ,OAAO,OAAO,IAAI,MAAM,MAAM;GAEjD,IAAI,WAAW;GACf,OAAO,OAAO,OAAO;IACnB,SAAS;IACT;IACA,UAAgB;KACd,IAAI,UAAU;KACd,WAAW;KACX,KAAK,MAAM,QAAQ,OACjB,IAAI,OAAO,IAAI,IAAI,MAAM,QAAQ,OAAO,OAAO,IAAI;IAEvD;GACF,CAAC;EACH;EACA,MAAM,MAAkC;GACtC,OAAO,OAAO,IAAI,IAAI,CAAC,EAAE;EAC3B;CACF,CAAC;AACH"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/toolOverrides/index.ts"],"sourcesContent":["import type {\n  PoToolOverrideClaim,\n  PoToolOverrideRegistration,\n  PoToolOverridesService,\n} from '../../schemas/toolOverrides';\n\ninterface StoredClaim {\n  readonly source: string;\n  readonly tools: readonly string[];\n}\n\nfunction assertNonEmpty(value: string, field: string): void {\n  if (value.trim().length === 0) throw new Error(`Po tool override ${field} must not be empty.`);\n}\n\n/** Creates the host-owned tool replacement registry for one Po runtime. */\nexport function createPoToolOverridesService(generation: string): PoToolOverridesService {\n  if (!generation) throw new Error('Po tool overrides require a runtime generation.');\n\n  const owners = new Map<string, StoredClaim>();\n  return Object.freeze({\n    generation,\n    claim(claim: PoToolOverrideClaim): PoToolOverrideRegistration {\n      assertNonEmpty(claim.source, 'source');\n      if (claim.tools.length === 0) throw new Error('Po tool override tools must not be empty.');\n      for (const tool of claim.tools) assertNonEmpty(tool, 'tool');\n\n      const tools = Object.freeze([...new Set(claim.tools)]);\n      if (tools.some((tool) => owners.has(tool))) {\n        return Object.freeze({ granted: false, tools, dispose: (): void => undefined });\n      }\n\n      const stored: StoredClaim = Object.freeze({ source: claim.source, tools });\n      for (const tool of tools) owners.set(tool, stored);\n\n      let disposed = false;\n      return Object.freeze({\n        granted: true,\n        tools,\n        dispose(): void {\n          if (disposed) return;\n          disposed = true;\n          for (const tool of tools) {\n            if (owners.get(tool) === stored) owners.delete(tool);\n          }\n        },\n      });\n    },\n    owner(tool: string): string | undefined {\n      return owners.get(tool)?.source;\n    },\n  });\n}\n"],"mappings":";AAWA,SAAS,eAAe,OAAe,OAAqB;CAC1D,IAAI,MAAM,KAAK,CAAC,CAAC,WAAW,GAAG,MAAM,IAAI,MAAM,oBAAoB,MAAM,oBAAoB;AAC/F;;AAGA,SAAgB,6BAA6B,YAA4C;CACvF,IAAI,CAAC,YAAY,MAAM,IAAI,MAAM,iDAAiD;CAElF,MAAM,yBAAS,IAAI,IAAyB;CAC5C,OAAO,OAAO,OAAO;EACnB;EACA,MAAM,OAAwD;GAC5D,eAAe,MAAM,QAAQ,QAAQ;GACrC,IAAI,MAAM,MAAM,WAAW,GAAG,MAAM,IAAI,MAAM,2CAA2C;GACzF,KAAK,MAAM,QAAQ,MAAM,OAAO,eAAe,MAAM,MAAM;GAE3D,MAAM,QAAQ,OAAO,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,KAAK,CAAC,CAAC;GACrD,IAAI,MAAM,MAAM,SAAS,OAAO,IAAI,IAAI,CAAC,GACvC,OAAO,OAAO,OAAO;IAAE,SAAS;IAAO;IAAO,eAAqB,KAAA;GAAU,CAAC;GAGhF,MAAM,SAAsB,OAAO,OAAO;IAAE,QAAQ,MAAM;IAAQ;GAAM,CAAC;GACzE,KAAK,MAAM,QAAQ,OAAO,OAAO,IAAI,MAAM,MAAM;GAEjD,IAAI,WAAW;GACf,OAAO,OAAO,OAAO;IACnB,SAAS;IACT;IACA,UAAgB;KACd,IAAI,UAAU;KACd,WAAW;KACX,KAAK,MAAM,QAAQ,OACjB,IAAI,OAAO,IAAI,IAAI,MAAM,QAAQ,OAAO,OAAO,IAAI;IAEvD;GACF,CAAC;EACH;EACA,MAAM,MAAkC;GACtC,OAAO,OAAO,IAAI,IAAI,CAAC,EAAE;EAC3B;CACF,CAAC;AACH"}

package/dist/src/services/toolPrompt/index.d.mts

@@ -0,0 +1,17 @@
+//#region src/services/toolPrompt/index.d.ts
+/**
+ * The system-prompt block describing the tools a session currently exposes.
+ *
+ * Pi's CLI builds this from each tool's `promptSnippet` and `promptGuidelines`.
+ * The headless host does not run that builder, so a tool's guidance reached the
+ * cost estimate in `toolCost` but never the model. This renders the same two
+ * sections, in Pi's shape, from whatever the host has just applied.
+ */
+export interface ToolPromptEntry {
+  readonly name: string;
+  /** One line describing the tool. Pi omits a tool without one, and so does this. */
+  readonly promptSnippet?: string;
+  readonly promptGuidelines?: readonly string[];
+}
+//#endregion
+//# sourceMappingURL=index.d.mts.map

package/dist/src/services/toolPrompt/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../src/services/toolPrompt/index.ts"],"mappings":";;;;;;;;;iBASiB;WACN;;WAEA;WACA"}

package/dist/src/services/toolSurface/index.cjs

@@ -27,8 +27,8 @@ function sameList(left, right) {
 	if (left.length !== right.length) return false;
 	return left.every((name, index) => name === right[index]);
 }
-function createDoomToolSurface(options) {
-	const kernel = require_index.createDoomKernel({ activeLayers: options.activeLayers });
+function createPoToolSurface(options) {
+	const kernel = require_index.createPoKernel({ activeLayers: options.activeLayers });
 	let pushed;
 	let disposed = false;
 	let inspection = [];
@@ -129,6 +129,6 @@ function createDoomToolSurface(options) {
 	});
 }
 //#endregion
-exports.createDoomToolSurface = createDoomToolSurface;
+exports.createPoToolSurface = createPoToolSurface;
 
 //# sourceMappingURL=index.cjs.map