@ashx-j/lunr 0.1.0

package/dist/builtin-extensions/pi-subagents/src/runs/shared/model-fallback.d.ts

@@ -0,0 +1,83 @@
+import type { ModelInfo as AvailableModelInfo } from "../../shared/model-info.ts";
+import type { Usage } from "../../shared/types.ts";
+import { type ModelScopeConfig, type ModelScopeViolation, type ModelSource } from "./model-scope.ts";
+export type { AvailableModelInfo };
+interface ModelAttemptSummary {
+    model: string;
+    success: boolean;
+    exitCode?: number | null;
+    error?: string;
+    usage?: Usage;
+}
+export declare function splitThinkingSuffix(model: string): {
+    baseModel: string;
+    thinkingSuffix: string;
+};
+/** Sentinel model value requesting that a subagent inherit the parent session's model. */
+export declare const INHERIT_MODEL = "inherit";
+/** Minimal shape of the parent session's in-memory model (`ctx.model`). */
+export interface ParentModel {
+    provider: string;
+    id: string;
+}
+/**
+ * Normalize a model id or provider segment for fuzzy comparison: case-fold,
+ * treat dots/underscores as dashes (so `4.5` matches `4-5`), and collapse
+ * repeated separators. Pure.
+ */
+export declare function normalizeModelSegment(segment: string): string;
+/**
+ * Fuzzy-resolve a base model id (thinking suffix already stripped) against the
+ * registry, tolerating separator, case, and optional date-stamp differences so
+ * users do not have to spell provider/model exactly. A qualified `provider/id`
+ * query only matches within the named provider — this never silently switches
+ * providers for security/cost-sensitive configs. Returns the matched `fullId`,
+ * or `undefined` when there is no match or the match is ambiguous across
+ * providers (and no `preferredProvider` disambiguates). Pure.
+ */
+export declare function fuzzyResolveModel(baseModel: string, availableModels: AvailableModelInfo[], preferredProvider?: string): string | undefined;
+/**
+ * Resolve a possibly-loose model id to a canonical `provider/id` (plus any
+ * thinking suffix). Exact registry matches win; fuzzy normalization
+ * (separator/case/date-stamp via {@link fuzzyResolveModel}) is a fallback so
+ * spelling differences still resolve. Never switches providers for a qualified
+ * query. Pure.
+ */
+export declare function resolveModelCandidate(model: string | undefined, availableModels: AvailableModelInfo[] | undefined, preferredProvider?: string): string | undefined;
+export interface ResolveSubagentModelOverrideOptions {
+    /** When set with `enforce: true`, out-of-scope models are rejected. */
+    scope?: ModelScopeConfig;
+    /** Origin of the requested model: explicit caller-supplied (hard error) vs inherited (warn). Defaults to `"inherited"`. */
+    source?: ModelSource;
+    /** Called for warn-severity violations instead of `console.warn`. */
+    onWarn?: (violation: ModelScopeViolation) => void;
+}
+/**
+ * Resolve the `--model` override passed to a spawned subagent.
+ *
+ * When no model is requested (`undefined`, `false`, empty, or the `"inherit"`
+ * sentinel), the child must inherit the parent session's *in-memory* model
+ * (`provider/id`) instead of being left to resolve its own model. Without an
+ * explicit `provider/id`, the child falls back to the global
+ * `~/.pi/agent/settings.json` default, which is shared across every open PI
+ * session — so a different session that last changed its model in the TUI would
+ * silently contaminate this session's subagents (see issue #266). Passing an
+ * explicit `provider/id` keeps each session's children isolated to that
+ * session's model.
+ *
+ * An explicitly requested model string is resolved via {@link resolveModelCandidate}.
+ * When `options.scope.enforce` is on, an out-of-scope resolved model throws for
+ * an explicit (`source: "explicit"`) request and warns for an inherited one.
+ */
+export declare function resolveSubagentModelOverride(requestedModel: string | boolean | undefined, parentModel: ParentModel | undefined, availableModels: AvailableModelInfo[] | undefined, preferredProvider?: string, options?: ResolveSubagentModelOverrideOptions): string | undefined;
+export declare function resolveEffectiveSubagentModel(explicitModel: string | boolean | undefined, agentModel: string | boolean | undefined, parentModel: ParentModel | undefined, availableModels: AvailableModelInfo[] | undefined, preferredProvider?: string, options?: Omit<ResolveSubagentModelOverrideOptions, "source">): string | undefined;
+export declare function resolveTierModelOverride(tier: unknown): string | undefined;
+export interface BuildModelCandidatesOptions {
+    /** Fallback models are inherited agent config and warn, rather than error, when out of scope. */
+    scope?: ModelScopeConfig;
+    onWarn?: (violation: ModelScopeViolation) => void;
+}
+export declare function buildModelCandidates(primaryModel: string | undefined, fallbackModels: string[] | undefined, availableModels: AvailableModelInfo[] | undefined, preferredProvider?: string, options?: BuildModelCandidatesOptions): string[];
+export declare function isRetryableModelFailure(error: string | undefined): boolean;
+export declare function formatModelAttemptNote(attempt: ModelAttemptSummary, nextModel?: string): string;
+//# sourceMappingURL=model-fallback.d.ts.map

package/dist/builtin-extensions/pi-subagents/src/runs/shared/model-fallback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-fallback.d.ts","sourceRoot":"","sources":["../../../../../../src/builtin-extensions/pi-subagents/src/runs/shared/model-fallback.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,IAAI,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAmB,KAAK,gBAAgB,EAAE,KAAK,mBAAmB,EAAE,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEtH,YAAY,EAAE,kBAAkB,EAAE,CAAC;AAEnC,UAAU,mBAAmB;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,KAAK,CAAC;CACd;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAOhG;AAED,0FAA0F;AAC1F,eAAO,MAAM,aAAa,YAAY,CAAC;AAEvC,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;CACX;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAM7D;AAsCD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAChC,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,kBAAkB,EAAE,EACrC,iBAAiB,CAAC,EAAE,MAAM,GACxB,MAAM,GAAG,SAAS,CAoCpB;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACpC,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,eAAe,EAAE,kBAAkB,EAAE,GAAG,SAAS,EACjD,iBAAiB,CAAC,EAAE,MAAM,GACxB,MAAM,GAAG,SAAS,CAYpB;AAED,MAAM,WAAW,mCAAmC;IACnD,uEAAuE;IACvE,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,2HAA2H;IAC3H,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,qEAAqE;IACrE,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,mBAAmB,KAAK,IAAI,CAAC;CAClD;AAMD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,4BAA4B,CAC3C,cAAc,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,EAC5C,WAAW,EAAE,WAAW,GAAG,SAAS,EACpC,eAAe,EAAE,kBAAkB,EAAE,GAAG,SAAS,EACjD,iBAAiB,CAAC,EAAE,MAAM,EAC1B,OAAO,CAAC,EAAE,mCAAmC,GAC3C,MAAM,GAAG,SAAS,CAkBpB;AAED,wBAAgB,6BAA6B,CAC5C,aAAa,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,EAC3C,UAAU,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,EACxC,WAAW,EAAE,WAAW,GAAG,SAAS,EACpC,eAAe,EAAE,kBAAkB,EAAE,GAAG,SAAS,EACjD,iBAAiB,CAAC,EAAE,MAAM,EAC1B,OAAO,CAAC,EAAE,IAAI,CAAC,mCAAmC,EAAE,QAAQ,CAAC,GAC3D,MAAM,GAAG,SAAS,CAgBpB;AAMD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAyB1E;AAED,MAAM,WAAW,2BAA2B;IAC3C,iGAAiG;IACjG,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,mBAAmB,KAAK,IAAI,CAAC;CAClD;AAED,wBAAgB,oBAAoB,CACnC,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,cAAc,EAAE,MAAM,EAAE,GAAG,SAAS,EACpC,eAAe,EAAE,kBAAkB,EAAE,GAAG,SAAS,EACjD,iBAAiB,CAAC,EAAE,MAAM,EAC1B,OAAO,CAAC,EAAE,2BAA2B,GACnC,MAAM,EAAE,CAiBV;AAiDD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAI1E;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,mBAAmB,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAK/F","sourcesContent":["// @ts-nocheck\nimport type { ModelInfo as AvailableModelInfo } from \"../../shared/model-info.ts\";\nimport type { Usage } from \"../../shared/types.ts\";\nimport { checkModelScope, type ModelScopeConfig, type ModelScopeViolation, type ModelSource } from \"./model-scope.ts\";\n\nexport type { AvailableModelInfo };\n\ninterface ModelAttemptSummary {\n\tmodel: string;\n\tsuccess: boolean;\n\texitCode?: number | null;\n\terror?: string;\n\tusage?: Usage;\n}\n\nexport function splitThinkingSuffix(model: string): { baseModel: string; thinkingSuffix: string } {\n\tconst colonIdx = model.lastIndexOf(\":\");\n\tif (colonIdx === -1) return { baseModel: model, thinkingSuffix: \"\" };\n\treturn {\n\t\tbaseModel: model.substring(0, colonIdx),\n\t\tthinkingSuffix: model.substring(colonIdx),\n\t};\n}\n\n/** Sentinel model value requesting that a subagent inherit the parent session's model. */\nexport const INHERIT_MODEL = \"inherit\";\n\n/** Minimal shape of the parent session's in-memory model (`ctx.model`). */\nexport interface ParentModel {\n\tprovider: string;\n\tid: string;\n}\n\n/**\n * Normalize a model id or provider segment for fuzzy comparison: case-fold,\n * treat dots/underscores as dashes (so `4.5` matches `4-5`), and collapse\n * repeated separators. Pure.\n */\nexport function normalizeModelSegment(segment: string): string {\n\treturn segment\n\t\t.toLowerCase()\n\t\t.replace(/[._]+/g, \"-\")\n\t\t.replace(/-+/g, \"-\")\n\t\t.replace(/^-|-$/g, \"\");\n}\n\nfunction isPlausibleDateStamp(year: string, month: string, day: string): boolean {\n\tconst yyyy = Number(year);\n\tconst mm = Number(month);\n\tconst dd = Number(day);\n\treturn yyyy >= 1900 && yyyy <= 2099 && mm >= 1 && mm <= 12 && dd >= 1 && dd <= 31;\n}\n\n/** Drop a trailing date stamp (`-20251001` or `-2025-10-01`) so dated and undated ids match. Pure. */\nfunction stripTrailingDateStamp(segment: string): string {\n\tconst dashed = /^(.*)-(\\d{4})-(\\d{2})-(\\d{2})$/.exec(segment);\n\tif (dashed && isPlausibleDateStamp(dashed[2]!, dashed[3]!, dashed[4]!)) return dashed[1]!;\n\tconst compact = /^(.*)-(\\d{4})(\\d{2})(\\d{2})$/.exec(segment);\n\tif (compact && isPlausibleDateStamp(compact[2]!, compact[3]!, compact[4]!)) return compact[1]!;\n\treturn segment;\n}\n\nfunction resolveBaseModelCandidate(\n\tbaseModel: string,\n\tavailableModels: AvailableModelInfo[],\n\tpreferredProvider?: string,\n): string | undefined {\n\tif (baseModel.includes(\"/\")) {\n\t\tconst exact = availableModels.find((entry) => entry.fullId === baseModel);\n\t\tif (exact) return exact.fullId;\n\t} else {\n\t\tconst exactMatches = availableModels.filter((entry) => entry.id === baseModel);\n\t\tif (preferredProvider) {\n\t\t\tconst preferredMatch = exactMatches.find((entry) => entry.provider === preferredProvider);\n\t\t\tif (preferredMatch) return preferredMatch.fullId;\n\t\t}\n\t\tif (exactMatches.length === 1) return exactMatches[0]!.fullId;\n\t}\n\n\treturn fuzzyResolveModel(baseModel, availableModels, preferredProvider);\n}\n\n/**\n * Fuzzy-resolve a base model id (thinking suffix already stripped) against the\n * registry, tolerating separator, case, and optional date-stamp differences so\n * users do not have to spell provider/model exactly. A qualified `provider/id`\n * query only matches within the named provider — this never silently switches\n * providers for security/cost-sensitive configs. Returns the matched `fullId`,\n * or `undefined` when there is no match or the match is ambiguous across\n * providers (and no `preferredProvider` disambiguates). Pure.\n */\nexport function fuzzyResolveModel(\n\tbaseModel: string,\n\tavailableModels: AvailableModelInfo[],\n\tpreferredProvider?: string,\n): string | undefined {\n\tlet queryProvider: string | undefined;\n\tlet queryIdRaw = baseModel;\n\tconst slashIdx = baseModel.indexOf(\"/\");\n\tif (slashIdx !== -1) {\n\t\tqueryProvider = normalizeModelSegment(baseModel.slice(0, slashIdx));\n\t\tqueryIdRaw = baseModel.slice(slashIdx + 1);\n\t} else {\n\t\tconst providerSeparators = [\":\", \".\"];\n\t\tfor (const separator of providerSeparators) {\n\t\t\tconst separatorIdx = baseModel.indexOf(separator);\n\t\t\tif (separatorIdx <= 0) continue;\n\t\t\tconst providerPart = normalizeModelSegment(baseModel.slice(0, separatorIdx));\n\t\t\tif (!availableModels.some((entry) => normalizeModelSegment(entry.provider) === providerPart)) continue;\n\t\t\tqueryProvider = providerPart;\n\t\t\tqueryIdRaw = baseModel.slice(separatorIdx + 1);\n\t\t\tbreak;\n\t\t}\n\t}\n\tconst queryId = normalizeModelSegment(queryIdRaw);\n\tconst queryIdNoDate = stripTrailingDateStamp(queryId);\n\n\tconst candidates = availableModels.filter((entry) => {\n\t\tconst entryId = normalizeModelSegment(entry.id);\n\t\tif (entryId !== queryId && stripTrailingDateStamp(entryId) !== queryIdNoDate) return false;\n\t\tif (queryProvider !== undefined && normalizeModelSegment(entry.provider) !== queryProvider) return false;\n\t\treturn true;\n\t});\n\tif (candidates.length === 0) return undefined;\n\tif (preferredProvider) {\n\t\tconst preferredProviderNorm = normalizeModelSegment(preferredProvider);\n\t\tconst preferred = candidates.find((entry) => normalizeModelSegment(entry.provider) === preferredProviderNorm);\n\t\tif (preferred) return preferred.fullId;\n\t}\n\tif (candidates.length === 1) return candidates[0]!.fullId;\n\treturn undefined;\n}\n\n/**\n * Resolve a possibly-loose model id to a canonical `provider/id` (plus any\n * thinking suffix). Exact registry matches win; fuzzy normalization\n * (separator/case/date-stamp via {@link fuzzyResolveModel}) is a fallback so\n * spelling differences still resolve. Never switches providers for a qualified\n * query. Pure.\n */\nexport function resolveModelCandidate(\n\tmodel: string | undefined,\n\tavailableModels: AvailableModelInfo[] | undefined,\n\tpreferredProvider?: string,\n): string | undefined {\n\tif (!model) return undefined;\n\tif (!availableModels || availableModels.length === 0) return model;\n\n\tconst resolvedWhole = resolveBaseModelCandidate(model, availableModels, preferredProvider);\n\tif (resolvedWhole) return resolvedWhole;\n\n\tconst { baseModel, thinkingSuffix } = splitThinkingSuffix(model);\n\tif (!thinkingSuffix) return model;\n\tconst resolvedBase = resolveBaseModelCandidate(baseModel, availableModels, preferredProvider);\n\tif (resolvedBase) return `${resolvedBase}${thinkingSuffix}`;\n\treturn model;\n}\n\nexport interface ResolveSubagentModelOverrideOptions {\n\t/** When set with `enforce: true`, out-of-scope models are rejected. */\n\tscope?: ModelScopeConfig;\n\t/** Origin of the requested model: explicit caller-supplied (hard error) vs inherited (warn). Defaults to `\"inherited\"`. */\n\tsource?: ModelSource;\n\t/** Called for warn-severity violations instead of `console.warn`. */\n\tonWarn?: (violation: ModelScopeViolation) => void;\n}\n\nfunction defaultScopeWarn(violation: ModelScopeViolation): void {\n\tconsole.warn(`[pi-subagents] ${violation.message}`);\n}\n\n/**\n * Resolve the `--model` override passed to a spawned subagent.\n *\n * When no model is requested (`undefined`, `false`, empty, or the `\"inherit\"`\n * sentinel), the child must inherit the parent session's *in-memory* model\n * (`provider/id`) instead of being left to resolve its own model. Without an\n * explicit `provider/id`, the child falls back to the global\n * `~/.pi/agent/settings.json` default, which is shared across every open PI\n * session — so a different session that last changed its model in the TUI would\n * silently contaminate this session's subagents (see issue #266). Passing an\n * explicit `provider/id` keeps each session's children isolated to that\n * session's model.\n *\n * An explicitly requested model string is resolved via {@link resolveModelCandidate}.\n * When `options.scope.enforce` is on, an out-of-scope resolved model throws for\n * an explicit (`source: \"explicit\"`) request and warns for an inherited one.\n */\nexport function resolveSubagentModelOverride(\n\trequestedModel: string | boolean | undefined,\n\tparentModel: ParentModel | undefined,\n\tavailableModels: AvailableModelInfo[] | undefined,\n\tpreferredProvider?: string,\n\toptions?: ResolveSubagentModelOverrideOptions,\n): string | undefined {\n\tconst trimmed = typeof requestedModel === \"string\" ? requestedModel.trim() : \"\";\n\tconst explicit = trimmed && trimmed !== INHERIT_MODEL ? trimmed : undefined;\n\tlet resolved: string | undefined;\n\tif (explicit === undefined) {\n\t\tresolved = parentModel ? `${parentModel.provider}/${parentModel.id}` : undefined;\n\t} else {\n\t\tresolved = resolveModelCandidate(explicit, availableModels, preferredProvider);\n\t}\n\tif (resolved && options?.scope?.enforce) {\n\t\tconst source: ModelSource = explicit === undefined ? \"inherited\" : (options.source ?? \"inherited\");\n\t\tconst violation = checkModelScope(resolved, options.scope, source);\n\t\tif (violation) {\n\t\t\tif (violation.severity === \"error\") throw new Error(violation.message);\n\t\t\t(options.onWarn ?? defaultScopeWarn)(violation);\n\t\t}\n\t}\n\treturn resolved;\n}\n\nexport function resolveEffectiveSubagentModel(\n\texplicitModel: string | boolean | undefined,\n\tagentModel: string | boolean | undefined,\n\tparentModel: ParentModel | undefined,\n\tavailableModels: AvailableModelInfo[] | undefined,\n\tpreferredProvider?: string,\n\toptions?: Omit<ResolveSubagentModelOverrideOptions, \"source\">,\n): string | undefined {\n\tconst resolved = resolveSubagentModelOverride(\n\t\texplicitModel ?? agentModel,\n\t\tparentModel,\n\t\tavailableModels,\n\t\tpreferredProvider,\n\t\t{ ...options, source: explicitModel !== undefined ? \"explicit\" : \"inherited\" },\n\t);\n\tif (resolved || explicitModel === undefined) return resolved;\n\treturn resolveSubagentModelOverride(\n\t\tagentModel,\n\t\tparentModel,\n\t\tavailableModels,\n\t\tpreferredProvider,\n\t\t{ ...options, source: \"inherited\" },\n\t);\n}\n\n// lunr: model tier bridge — resolve a subagent `tier` param through lunR core's\n// model-tiers global (Symbol.for(\"@lunr/model-tiers\")). Absent bridge, disabled tier\n// mode, unknown tier, or unconfigured tier all resolve to undefined so callers fall\n// back to normal inherit behavior. Never throws.\nexport function resolveTierModelOverride(tier: unknown): string | undefined {\n\tif (typeof tier !== \"string\" || !tier.trim()) return undefined;\n\tconst tierName = tier.trim();\n\ttry {\n\t\tconst bridge = (globalThis as Record<symbol, unknown>)[Symbol.for(\"@lunr/model-tiers\")] as\n\t\t\t| { getTierModel?: (tier: string) => unknown; isTierModeEnabled?: () => unknown }\n\t\t\t| undefined;\n\t\tif (typeof bridge?.isTierModeEnabled !== \"function\" || typeof bridge?.getTierModel !== \"function\") {\n\t\t\treturn undefined;\n\t\t}\n\t\tif (bridge.isTierModeEnabled() !== true) return undefined;\n\t\tconst model = bridge.getTierModel(tierName);\n\t\tif (typeof model === \"string\" && model.trim()) return model.trim();\n\t\tif (process.env.PI_SUBAGENTS_DEBUG) {\n\t\t\tconsole.warn(`[pi-subagents] model tier '${tierName}' has no configured model; inheriting parent model.`);\n\t\t}\n\t\treturn undefined;\n\t} catch (error) {\n\t\tif (process.env.PI_SUBAGENTS_DEBUG) {\n\t\t\tconsole.warn(\n\t\t\t\t`[pi-subagents] model tier resolution failed for '${tierName}': ${error instanceof Error ? error.message : String(error)}`,\n\t\t\t);\n\t\t}\n\t\treturn undefined;\n\t}\n}\n\nexport interface BuildModelCandidatesOptions {\n\t/** Fallback models are inherited agent config and warn, rather than error, when out of scope. */\n\tscope?: ModelScopeConfig;\n\tonWarn?: (violation: ModelScopeViolation) => void;\n}\n\nexport function buildModelCandidates(\n\tprimaryModel: string | undefined,\n\tfallbackModels: string[] | undefined,\n\tavailableModels: AvailableModelInfo[] | undefined,\n\tpreferredProvider?: string,\n\toptions?: BuildModelCandidatesOptions,\n): string[] {\n\tconst seen = new Set<string>();\n\tconst candidates: string[] = [];\n\tconst rawCandidates = [primaryModel, ...(fallbackModels ?? [])];\n\tfor (let index = 0; index < rawCandidates.length; index++) {\n\t\tconst raw = rawCandidates[index];\n\t\tif (!raw) continue;\n\t\tconst normalized = resolveModelCandidate(raw.trim(), availableModels, preferredProvider);\n\t\tif (!normalized || seen.has(normalized)) continue;\n\t\tif (index > 0 && options?.scope?.enforce) {\n\t\t\tconst violation = checkModelScope(normalized, options.scope, \"inherited\");\n\t\t\tif (violation) (options.onWarn ?? defaultScopeWarn)(violation);\n\t\t}\n\t\tseen.add(normalized);\n\t\tcandidates.push(normalized);\n\t}\n\treturn candidates;\n}\n\nconst RETRYABLE_MODEL_FAILURE_PATTERNS = [\n\t/rate\\s*limit/i,\n\t/too many requests/i,\n\t/\\b429\\b/,\n\t/quota/i,\n\t/billing/i,\n\t/credit/i,\n\t/auth(?:entication)?/i,\n\t/unauthori[sz]ed/i,\n\t/forbidden/i,\n\t/api key/i,\n\t/token expired/i,\n\t/invalid key/i,\n\t/provider.*unavailable/i,\n\t/model.*unavailable/i,\n\t/model.*disabled/i,\n\t/model.*not found/i,\n\t/unknown model/i,\n\t/overloaded/i,\n\t/service unavailable/i,\n\t/temporar(?:ily)? unavailable/i,\n\t/connection refused/i,\n\t/fetch failed/i,\n\t/network error/i,\n\t/socket hang up/i,\n\t/stream ended without finish_reason/i,\n\t/upstream/i,\n\t/timed? out/i,\n\t/timeout/i,\n\t/\\b502\\b/,\n\t/\\b503\\b/,\n\t/\\b504\\b/,\n\t/cold.?start/i,\n\t/empty response/i,\n\t/no output/i,\n\t/model.*(?:load|fail|error)/i,\n];\n\n/**\n * Failures reported as `<tool> failed (exit N): ...` or `<tool> failed with\n * exit code N` come from a tool call inside the child's task, not from the\n * provider/model, however network-flavored their details read. Retrying a\n * different model cannot fix them and would rerun the whole task. Tool names\n * include namespaced forms like `mcp.server/write`.\n */\nconst TOOL_FAILURE_PREFIX = /^[\\w.:@/-]+ failed (?:(?:\\(exit \\d+\\):)|(?:with exit code \\d+))(?:\\s|$)/i;\n\nexport function isRetryableModelFailure(error: string | undefined): boolean {\n\tif (!error) return false;\n\tif (TOOL_FAILURE_PREFIX.test(error.trim())) return false;\n\treturn RETRYABLE_MODEL_FAILURE_PATTERNS.some((pattern) => pattern.test(error));\n}\n\nexport function formatModelAttemptNote(attempt: ModelAttemptSummary, nextModel?: string): string {\n\tconst failure = attempt.error?.trim() || `exit ${attempt.exitCode ?? 1}`;\n\treturn nextModel\n\t\t? `[fallback] ${attempt.model} failed: ${failure}. Retrying with ${nextModel}.`\n\t\t: `[fallback] ${attempt.model} failed: ${failure}.`;\n}\n"]}

package/dist/builtin-extensions/pi-subagents/src/runs/shared/model-fallback.js

@@ -0,0 +1,291 @@
+import { checkModelScope } from "./model-scope.js";
+export function splitThinkingSuffix(model) {
+    const colonIdx = model.lastIndexOf(":");
+    if (colonIdx === -1)
+        return { baseModel: model, thinkingSuffix: "" };
+    return {
+        baseModel: model.substring(0, colonIdx),
+        thinkingSuffix: model.substring(colonIdx),
+    };
+}
+/** Sentinel model value requesting that a subagent inherit the parent session's model. */
+export const INHERIT_MODEL = "inherit";
+/**
+ * Normalize a model id or provider segment for fuzzy comparison: case-fold,
+ * treat dots/underscores as dashes (so `4.5` matches `4-5`), and collapse
+ * repeated separators. Pure.
+ */
+export function normalizeModelSegment(segment) {
+    return segment
+        .toLowerCase()
+        .replace(/[._]+/g, "-")
+        .replace(/-+/g, "-")
+        .replace(/^-|-$/g, "");
+}
+function isPlausibleDateStamp(year, month, day) {
+    const yyyy = Number(year);
+    const mm = Number(month);
+    const dd = Number(day);
+    return yyyy >= 1900 && yyyy <= 2099 && mm >= 1 && mm <= 12 && dd >= 1 && dd <= 31;
+}
+/** Drop a trailing date stamp (`-20251001` or `-2025-10-01`) so dated and undated ids match. Pure. */
+function stripTrailingDateStamp(segment) {
+    const dashed = /^(.*)-(\d{4})-(\d{2})-(\d{2})$/.exec(segment);
+    if (dashed && isPlausibleDateStamp(dashed[2], dashed[3], dashed[4]))
+        return dashed[1];
+    const compact = /^(.*)-(\d{4})(\d{2})(\d{2})$/.exec(segment);
+    if (compact && isPlausibleDateStamp(compact[2], compact[3], compact[4]))
+        return compact[1];
+    return segment;
+}
+function resolveBaseModelCandidate(baseModel, availableModels, preferredProvider) {
+    if (baseModel.includes("/")) {
+        const exact = availableModels.find((entry) => entry.fullId === baseModel);
+        if (exact)
+            return exact.fullId;
+    }
+    else {
+        const exactMatches = availableModels.filter((entry) => entry.id === baseModel);
+        if (preferredProvider) {
+            const preferredMatch = exactMatches.find((entry) => entry.provider === preferredProvider);
+            if (preferredMatch)
+                return preferredMatch.fullId;
+        }
+        if (exactMatches.length === 1)
+            return exactMatches[0].fullId;
+    }
+    return fuzzyResolveModel(baseModel, availableModels, preferredProvider);
+}
+/**
+ * Fuzzy-resolve a base model id (thinking suffix already stripped) against the
+ * registry, tolerating separator, case, and optional date-stamp differences so
+ * users do not have to spell provider/model exactly. A qualified `provider/id`
+ * query only matches within the named provider — this never silently switches
+ * providers for security/cost-sensitive configs. Returns the matched `fullId`,
+ * or `undefined` when there is no match or the match is ambiguous across
+ * providers (and no `preferredProvider` disambiguates). Pure.
+ */
+export function fuzzyResolveModel(baseModel, availableModels, preferredProvider) {
+    let queryProvider;
+    let queryIdRaw = baseModel;
+    const slashIdx = baseModel.indexOf("/");
+    if (slashIdx !== -1) {
+        queryProvider = normalizeModelSegment(baseModel.slice(0, slashIdx));
+        queryIdRaw = baseModel.slice(slashIdx + 1);
+    }
+    else {
+        const providerSeparators = [":", "."];
+        for (const separator of providerSeparators) {
+            const separatorIdx = baseModel.indexOf(separator);
+            if (separatorIdx <= 0)
+                continue;
+            const providerPart = normalizeModelSegment(baseModel.slice(0, separatorIdx));
+            if (!availableModels.some((entry) => normalizeModelSegment(entry.provider) === providerPart))
+                continue;
+            queryProvider = providerPart;
+            queryIdRaw = baseModel.slice(separatorIdx + 1);
+            break;
+        }
+    }
+    const queryId = normalizeModelSegment(queryIdRaw);
+    const queryIdNoDate = stripTrailingDateStamp(queryId);
+    const candidates = availableModels.filter((entry) => {
+        const entryId = normalizeModelSegment(entry.id);
+        if (entryId !== queryId && stripTrailingDateStamp(entryId) !== queryIdNoDate)
+            return false;
+        if (queryProvider !== undefined && normalizeModelSegment(entry.provider) !== queryProvider)
+            return false;
+        return true;
+    });
+    if (candidates.length === 0)
+        return undefined;
+    if (preferredProvider) {
+        const preferredProviderNorm = normalizeModelSegment(preferredProvider);
+        const preferred = candidates.find((entry) => normalizeModelSegment(entry.provider) === preferredProviderNorm);
+        if (preferred)
+            return preferred.fullId;
+    }
+    if (candidates.length === 1)
+        return candidates[0].fullId;
+    return undefined;
+}
+/**
+ * Resolve a possibly-loose model id to a canonical `provider/id` (plus any
+ * thinking suffix). Exact registry matches win; fuzzy normalization
+ * (separator/case/date-stamp via {@link fuzzyResolveModel}) is a fallback so
+ * spelling differences still resolve. Never switches providers for a qualified
+ * query. Pure.
+ */
+export function resolveModelCandidate(model, availableModels, preferredProvider) {
+    if (!model)
+        return undefined;
+    if (!availableModels || availableModels.length === 0)
+        return model;
+    const resolvedWhole = resolveBaseModelCandidate(model, availableModels, preferredProvider);
+    if (resolvedWhole)
+        return resolvedWhole;
+    const { baseModel, thinkingSuffix } = splitThinkingSuffix(model);
+    if (!thinkingSuffix)
+        return model;
+    const resolvedBase = resolveBaseModelCandidate(baseModel, availableModels, preferredProvider);
+    if (resolvedBase)
+        return `${resolvedBase}${thinkingSuffix}`;
+    return model;
+}
+function defaultScopeWarn(violation) {
+    console.warn(`[pi-subagents] ${violation.message}`);
+}
+/**
+ * Resolve the `--model` override passed to a spawned subagent.
+ *
+ * When no model is requested (`undefined`, `false`, empty, or the `"inherit"`
+ * sentinel), the child must inherit the parent session's *in-memory* model
+ * (`provider/id`) instead of being left to resolve its own model. Without an
+ * explicit `provider/id`, the child falls back to the global
+ * `~/.pi/agent/settings.json` default, which is shared across every open PI
+ * session — so a different session that last changed its model in the TUI would
+ * silently contaminate this session's subagents (see issue #266). Passing an
+ * explicit `provider/id` keeps each session's children isolated to that
+ * session's model.
+ *
+ * An explicitly requested model string is resolved via {@link resolveModelCandidate}.
+ * When `options.scope.enforce` is on, an out-of-scope resolved model throws for
+ * an explicit (`source: "explicit"`) request and warns for an inherited one.
+ */
+export function resolveSubagentModelOverride(requestedModel, parentModel, availableModels, preferredProvider, options) {
+    const trimmed = typeof requestedModel === "string" ? requestedModel.trim() : "";
+    const explicit = trimmed && trimmed !== INHERIT_MODEL ? trimmed : undefined;
+    let resolved;
+    if (explicit === undefined) {
+        resolved = parentModel ? `${parentModel.provider}/${parentModel.id}` : undefined;
+    }
+    else {
+        resolved = resolveModelCandidate(explicit, availableModels, preferredProvider);
+    }
+    if (resolved && options?.scope?.enforce) {
+        const source = explicit === undefined ? "inherited" : (options.source ?? "inherited");
+        const violation = checkModelScope(resolved, options.scope, source);
+        if (violation) {
+            if (violation.severity === "error")
+                throw new Error(violation.message);
+            (options.onWarn ?? defaultScopeWarn)(violation);
+        }
+    }
+    return resolved;
+}
+export function resolveEffectiveSubagentModel(explicitModel, agentModel, parentModel, availableModels, preferredProvider, options) {
+    const resolved = resolveSubagentModelOverride(explicitModel ?? agentModel, parentModel, availableModels, preferredProvider, { ...options, source: explicitModel !== undefined ? "explicit" : "inherited" });
+    if (resolved || explicitModel === undefined)
+        return resolved;
+    return resolveSubagentModelOverride(agentModel, parentModel, availableModels, preferredProvider, { ...options, source: "inherited" });
+}
+// lunr: model tier bridge — resolve a subagent `tier` param through lunR core's
+// model-tiers global (Symbol.for("@lunr/model-tiers")). Absent bridge, disabled tier
+// mode, unknown tier, or unconfigured tier all resolve to undefined so callers fall
+// back to normal inherit behavior. Never throws.
+export function resolveTierModelOverride(tier) {
+    if (typeof tier !== "string" || !tier.trim())
+        return undefined;
+    const tierName = tier.trim();
+    try {
+        const bridge = globalThis[Symbol.for("@lunr/model-tiers")];
+        if (typeof bridge?.isTierModeEnabled !== "function" || typeof bridge?.getTierModel !== "function") {
+            return undefined;
+        }
+        if (bridge.isTierModeEnabled() !== true)
+            return undefined;
+        const model = bridge.getTierModel(tierName);
+        if (typeof model === "string" && model.trim())
+            return model.trim();
+        if (process.env.PI_SUBAGENTS_DEBUG) {
+            console.warn(`[pi-subagents] model tier '${tierName}' has no configured model; inheriting parent model.`);
+        }
+        return undefined;
+    }
+    catch (error) {
+        if (process.env.PI_SUBAGENTS_DEBUG) {
+            console.warn(`[pi-subagents] model tier resolution failed for '${tierName}': ${error instanceof Error ? error.message : String(error)}`);
+        }
+        return undefined;
+    }
+}
+export function buildModelCandidates(primaryModel, fallbackModels, availableModels, preferredProvider, options) {
+    const seen = new Set();
+    const candidates = [];
+    const rawCandidates = [primaryModel, ...(fallbackModels ?? [])];
+    for (let index = 0; index < rawCandidates.length; index++) {
+        const raw = rawCandidates[index];
+        if (!raw)
+            continue;
+        const normalized = resolveModelCandidate(raw.trim(), availableModels, preferredProvider);
+        if (!normalized || seen.has(normalized))
+            continue;
+        if (index > 0 && options?.scope?.enforce) {
+            const violation = checkModelScope(normalized, options.scope, "inherited");
+            if (violation)
+                (options.onWarn ?? defaultScopeWarn)(violation);
+        }
+        seen.add(normalized);
+        candidates.push(normalized);
+    }
+    return candidates;
+}
+const RETRYABLE_MODEL_FAILURE_PATTERNS = [
+    /rate\s*limit/i,
+    /too many requests/i,
+    /\b429\b/,
+    /quota/i,
+    /billing/i,
+    /credit/i,
+    /auth(?:entication)?/i,
+    /unauthori[sz]ed/i,
+    /forbidden/i,
+    /api key/i,
+    /token expired/i,
+    /invalid key/i,
+    /provider.*unavailable/i,
+    /model.*unavailable/i,
+    /model.*disabled/i,
+    /model.*not found/i,
+    /unknown model/i,
+    /overloaded/i,
+    /service unavailable/i,
+    /temporar(?:ily)? unavailable/i,
+    /connection refused/i,
+    /fetch failed/i,
+    /network error/i,
+    /socket hang up/i,
+    /stream ended without finish_reason/i,
+    /upstream/i,
+    /timed? out/i,
+    /timeout/i,
+    /\b502\b/,
+    /\b503\b/,
+    /\b504\b/,
+    /cold.?start/i,
+    /empty response/i,
+    /no output/i,
+    /model.*(?:load|fail|error)/i,
+];
+/**
+ * Failures reported as `<tool> failed (exit N): ...` or `<tool> failed with
+ * exit code N` come from a tool call inside the child's task, not from the
+ * provider/model, however network-flavored their details read. Retrying a
+ * different model cannot fix them and would rerun the whole task. Tool names
+ * include namespaced forms like `mcp.server/write`.
+ */
+const TOOL_FAILURE_PREFIX = /^[\w.:@/-]+ failed (?:(?:\(exit \d+\):)|(?:with exit code \d+))(?:\s|$)/i;
+export function isRetryableModelFailure(error) {
+    if (!error)
+        return false;
+    if (TOOL_FAILURE_PREFIX.test(error.trim()))
+        return false;
+    return RETRYABLE_MODEL_FAILURE_PATTERNS.some((pattern) => pattern.test(error));
+}
+export function formatModelAttemptNote(attempt, nextModel) {
+    const failure = attempt.error?.trim() || `exit ${attempt.exitCode ?? 1}`;
+    return nextModel
+        ? `[fallback] ${attempt.model} failed: ${failure}. Retrying with ${nextModel}.`
+        : `[fallback] ${attempt.model} failed: ${failure}.`;
+}
+//# sourceMappingURL=model-fallback.js.map

package/dist/builtin-extensions/pi-subagents/src/runs/shared/model-fallback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-fallback.js","sourceRoot":"","sources":["../../../../../../src/builtin-extensions/pi-subagents/src/runs/shared/model-fallback.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAqE,MAAM,kBAAkB,CAAC;AAYtH,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAiD;IACjG,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,QAAQ,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IACrE,OAAO;QACN,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC;QACvC,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC;KACzC,CAAC;AAAA,CACF;AAED,0FAA0F;AAC1F,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;AAQvC;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAU;IAC9D,OAAO,OAAO;SACZ,WAAW,EAAE;SACb,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAAA,CACxB;AAED,SAAS,oBAAoB,CAAC,IAAY,EAAE,KAAa,EAAE,GAAW,EAAW;IAChF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACvB,OAAO,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;AAAA,CAClF;AAED,sGAAsG;AACtG,SAAS,sBAAsB,CAAC,OAAe,EAAU;IACxD,MAAM,MAAM,GAAG,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAI,MAAM,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC;QAAE,OAAO,MAAM,CAAC,CAAC,CAAE,CAAC;IAC1F,MAAM,OAAO,GAAG,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,IAAI,OAAO,IAAI,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAE,EAAE,OAAO,CAAC,CAAC,CAAE,EAAE,OAAO,CAAC,CAAC,CAAE,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,CAAE,CAAC;IAC/F,OAAO,OAAO,CAAC;AAAA,CACf;AAED,SAAS,yBAAyB,CACjC,SAAiB,EACjB,eAAqC,EACrC,iBAA0B,EACL;IACrB,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;QAC1E,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC;IAChC,CAAC;SAAM,CAAC;QACP,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QAC/E,IAAI,iBAAiB,EAAE,CAAC;YACvB,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,iBAAiB,CAAC,CAAC;YAC1F,IAAI,cAAc;gBAAE,OAAO,cAAc,CAAC,MAAM,CAAC;QAClD,CAAC;QACD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,YAAY,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC;IAC/D,CAAC;IAED,OAAO,iBAAiB,CAAC,SAAS,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC;AAAA,CACxE;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAChC,SAAiB,EACjB,eAAqC,EACrC,iBAA0B,EACL;IACrB,IAAI,aAAiC,CAAC;IACtC,IAAI,UAAU,GAAG,SAAS,CAAC;IAC3B,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;QACrB,aAAa,GAAG,qBAAqB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QACpE,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACP,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACtC,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;YAC5C,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAClD,IAAI,YAAY,IAAI,CAAC;gBAAE,SAAS;YAChC,MAAM,YAAY,GAAG,qBAAqB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;YAC7E,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,YAAY,CAAC;gBAAE,SAAS;YACvG,aAAa,GAAG,YAAY,CAAC;YAC7B,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;YAC/C,MAAM;QACP,CAAC;IACF,CAAC;IACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAEtD,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChD,IAAI,OAAO,KAAK,OAAO,IAAI,sBAAsB,CAAC,OAAO,CAAC,KAAK,aAAa;YAAE,OAAO,KAAK,CAAC;QAC3F,IAAI,aAAa,KAAK,SAAS,IAAI,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,aAAa;YAAE,OAAO,KAAK,CAAC;QACzG,OAAO,IAAI,CAAC;IAAA,CACZ,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,iBAAiB,EAAE,CAAC;QACvB,MAAM,qBAAqB,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,qBAAqB,CAAC,CAAC;QAC9G,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC,MAAM,CAAC;IACxC,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC;IAC1D,OAAO,SAAS,CAAC;AAAA,CACjB;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACpC,KAAyB,EACzB,eAAiD,EACjD,iBAA0B,EACL;IACrB,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEnE,MAAM,aAAa,GAAG,yBAAyB,CAAC,KAAK,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAC3F,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IAExC,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACjE,IAAI,CAAC,cAAc;QAAE,OAAO,KAAK,CAAC;IAClC,MAAM,YAAY,GAAG,yBAAyB,CAAC,SAAS,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAC9F,IAAI,YAAY;QAAE,OAAO,GAAG,YAAY,GAAG,cAAc,EAAE,CAAC;IAC5D,OAAO,KAAK,CAAC;AAAA,CACb;AAWD,SAAS,gBAAgB,CAAC,SAA8B,EAAQ;IAC/D,OAAO,CAAC,IAAI,CAAC,kBAAkB,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;AAAA,CACpD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,4BAA4B,CAC3C,cAA4C,EAC5C,WAAoC,EACpC,eAAiD,EACjD,iBAA0B,EAC1B,OAA6C,EACxB;IACrB,MAAM,OAAO,GAAG,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,MAAM,QAAQ,GAAG,OAAO,IAAI,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,IAAI,QAA4B,CAAC;IACjC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5B,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,QAAQ,IAAI,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,CAAC;SAAM,CAAC;QACP,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,QAAQ,IAAI,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACzC,MAAM,MAAM,GAAgB,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC,CAAC;QACnG,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACnE,IAAI,SAAS,EAAE,CAAC;YACf,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACvE,CAAC,OAAO,CAAC,MAAM,IAAI,gBAAgB,CAAC,CAAC,SAAS,CAAC,CAAC;QACjD,CAAC;IACF,CAAC;IACD,OAAO,QAAQ,CAAC;AAAA,CAChB;AAED,MAAM,UAAU,6BAA6B,CAC5C,aAA2C,EAC3C,UAAwC,EACxC,WAAoC,EACpC,eAAiD,EACjD,iBAA0B,EAC1B,OAA6D,EACxC;IACrB,MAAM,QAAQ,GAAG,4BAA4B,CAC5C,aAAa,IAAI,UAAU,EAC3B,WAAW,EACX,eAAe,EACf,iBAAiB,EACjB,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE,CAC9E,CAAC;IACF,IAAI,QAAQ,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC7D,OAAO,4BAA4B,CAClC,UAAU,EACV,WAAW,EACX,eAAe,EACf,iBAAiB,EACjB,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CACnC,CAAC;AAAA,CACF;AAED,kFAAgF;AAChF,qFAAqF;AACrF,oFAAoF;AACpF,iDAAiD;AACjD,MAAM,UAAU,wBAAwB,CAAC,IAAa,EAAsB;IAC3E,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC;QACJ,MAAM,MAAM,GAAI,UAAsC,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAE1E,CAAC;QACb,IAAI,OAAO,MAAM,EAAE,iBAAiB,KAAK,UAAU,IAAI,OAAO,MAAM,EAAE,YAAY,KAAK,UAAU,EAAE,CAAC;YACnG,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,IAAI,MAAM,CAAC,iBAAiB,EAAE,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;YAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;QACnE,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,8BAA8B,QAAQ,qDAAqD,CAAC,CAAC;QAC3G,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;YACpC,OAAO,CAAC,IAAI,CACX,oDAAoD,QAAQ,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC1H,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;AAAA,CACD;AAQD,MAAM,UAAU,oBAAoB,CACnC,YAAgC,EAChC,cAAoC,EACpC,eAAiD,EACjD,iBAA0B,EAC1B,OAAqC,EAC1B;IACX,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,aAAa,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC;IAChE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC;QACzF,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,SAAS;QAClD,IAAI,KAAK,GAAG,CAAC,IAAI,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;YAC1C,MAAM,SAAS,GAAG,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAC1E,IAAI,SAAS;gBAAE,CAAC,OAAO,CAAC,MAAM,IAAI,gBAAgB,CAAC,CAAC,SAAS,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrB,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,UAAU,CAAC;AAAA,CAClB;AAED,MAAM,gCAAgC,GAAG;IACxC,eAAe;IACf,oBAAoB;IACpB,SAAS;IACT,QAAQ;IACR,UAAU;IACV,SAAS;IACT,sBAAsB;IACtB,kBAAkB;IAClB,YAAY;IACZ,UAAU;IACV,gBAAgB;IAChB,cAAc;IACd,wBAAwB;IACxB,qBAAqB;IACrB,kBAAkB;IAClB,mBAAmB;IACnB,gBAAgB;IAChB,aAAa;IACb,sBAAsB;IACtB,+BAA+B;IAC/B,qBAAqB;IACrB,eAAe;IACf,gBAAgB;IAChB,iBAAiB;IACjB,qCAAqC;IACrC,WAAW;IACX,aAAa;IACb,UAAU;IACV,SAAS;IACT,SAAS;IACT,SAAS;IACT,cAAc;IACd,iBAAiB;IACjB,YAAY;IACZ,6BAA6B;CAC7B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAG,0EAA0E,CAAC;AAEvG,MAAM,UAAU,uBAAuB,CAAC,KAAyB,EAAW;IAC3E,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,OAAO,gCAAgC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAAA,CAC/E;AAED,MAAM,UAAU,sBAAsB,CAAC,OAA4B,EAAE,SAAkB,EAAU;IAChG,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,QAAQ,OAAO,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;IACzE,OAAO,SAAS;QACf,CAAC,CAAC,cAAc,OAAO,CAAC,KAAK,YAAY,OAAO,mBAAmB,SAAS,GAAG;QAC/E,CAAC,CAAC,cAAc,OAAO,CAAC,KAAK,YAAY,OAAO,GAAG,CAAC;AAAA,CACrD","sourcesContent":["// @ts-nocheck\nimport type { ModelInfo as AvailableModelInfo } from \"../../shared/model-info.ts\";\nimport type { Usage } from \"../../shared/types.ts\";\nimport { checkModelScope, type ModelScopeConfig, type ModelScopeViolation, type ModelSource } from \"./model-scope.ts\";\n\nexport type { AvailableModelInfo };\n\ninterface ModelAttemptSummary {\n\tmodel: string;\n\tsuccess: boolean;\n\texitCode?: number | null;\n\terror?: string;\n\tusage?: Usage;\n}\n\nexport function splitThinkingSuffix(model: string): { baseModel: string; thinkingSuffix: string } {\n\tconst colonIdx = model.lastIndexOf(\":\");\n\tif (colonIdx === -1) return { baseModel: model, thinkingSuffix: \"\" };\n\treturn {\n\t\tbaseModel: model.substring(0, colonIdx),\n\t\tthinkingSuffix: model.substring(colonIdx),\n\t};\n}\n\n/** Sentinel model value requesting that a subagent inherit the parent session's model. */\nexport const INHERIT_MODEL = \"inherit\";\n\n/** Minimal shape of the parent session's in-memory model (`ctx.model`). */\nexport interface ParentModel {\n\tprovider: string;\n\tid: string;\n}\n\n/**\n * Normalize a model id or provider segment for fuzzy comparison: case-fold,\n * treat dots/underscores as dashes (so `4.5` matches `4-5`), and collapse\n * repeated separators. Pure.\n */\nexport function normalizeModelSegment(segment: string): string {\n\treturn segment\n\t\t.toLowerCase()\n\t\t.replace(/[._]+/g, \"-\")\n\t\t.replace(/-+/g, \"-\")\n\t\t.replace(/^-|-$/g, \"\");\n}\n\nfunction isPlausibleDateStamp(year: string, month: string, day: string): boolean {\n\tconst yyyy = Number(year);\n\tconst mm = Number(month);\n\tconst dd = Number(day);\n\treturn yyyy >= 1900 && yyyy <= 2099 && mm >= 1 && mm <= 12 && dd >= 1 && dd <= 31;\n}\n\n/** Drop a trailing date stamp (`-20251001` or `-2025-10-01`) so dated and undated ids match. Pure. */\nfunction stripTrailingDateStamp(segment: string): string {\n\tconst dashed = /^(.*)-(\\d{4})-(\\d{2})-(\\d{2})$/.exec(segment);\n\tif (dashed && isPlausibleDateStamp(dashed[2]!, dashed[3]!, dashed[4]!)) return dashed[1]!;\n\tconst compact = /^(.*)-(\\d{4})(\\d{2})(\\d{2})$/.exec(segment);\n\tif (compact && isPlausibleDateStamp(compact[2]!, compact[3]!, compact[4]!)) return compact[1]!;\n\treturn segment;\n}\n\nfunction resolveBaseModelCandidate(\n\tbaseModel: string,\n\tavailableModels: AvailableModelInfo[],\n\tpreferredProvider?: string,\n): string | undefined {\n\tif (baseModel.includes(\"/\")) {\n\t\tconst exact = availableModels.find((entry) => entry.fullId === baseModel);\n\t\tif (exact) return exact.fullId;\n\t} else {\n\t\tconst exactMatches = availableModels.filter((entry) => entry.id === baseModel);\n\t\tif (preferredProvider) {\n\t\t\tconst preferredMatch = exactMatches.find((entry) => entry.provider === preferredProvider);\n\t\t\tif (preferredMatch) return preferredMatch.fullId;\n\t\t}\n\t\tif (exactMatches.length === 1) return exactMatches[0]!.fullId;\n\t}\n\n\treturn fuzzyResolveModel(baseModel, availableModels, preferredProvider);\n}\n\n/**\n * Fuzzy-resolve a base model id (thinking suffix already stripped) against the\n * registry, tolerating separator, case, and optional date-stamp differences so\n * users do not have to spell provider/model exactly. A qualified `provider/id`\n * query only matches within the named provider — this never silently switches\n * providers for security/cost-sensitive configs. Returns the matched `fullId`,\n * or `undefined` when there is no match or the match is ambiguous across\n * providers (and no `preferredProvider` disambiguates). Pure.\n */\nexport function fuzzyResolveModel(\n\tbaseModel: string,\n\tavailableModels: AvailableModelInfo[],\n\tpreferredProvider?: string,\n): string | undefined {\n\tlet queryProvider: string | undefined;\n\tlet queryIdRaw = baseModel;\n\tconst slashIdx = baseModel.indexOf(\"/\");\n\tif (slashIdx !== -1) {\n\t\tqueryProvider = normalizeModelSegment(baseModel.slice(0, slashIdx));\n\t\tqueryIdRaw = baseModel.slice(slashIdx + 1);\n\t} else {\n\t\tconst providerSeparators = [\":\", \".\"];\n\t\tfor (const separator of providerSeparators) {\n\t\t\tconst separatorIdx = baseModel.indexOf(separator);\n\t\t\tif (separatorIdx <= 0) continue;\n\t\t\tconst providerPart = normalizeModelSegment(baseModel.slice(0, separatorIdx));\n\t\t\tif (!availableModels.some((entry) => normalizeModelSegment(entry.provider) === providerPart)) continue;\n\t\t\tqueryProvider = providerPart;\n\t\t\tqueryIdRaw = baseModel.slice(separatorIdx + 1);\n\t\t\tbreak;\n\t\t}\n\t}\n\tconst queryId = normalizeModelSegment(queryIdRaw);\n\tconst queryIdNoDate = stripTrailingDateStamp(queryId);\n\n\tconst candidates = availableModels.filter((entry) => {\n\t\tconst entryId = normalizeModelSegment(entry.id);\n\t\tif (entryId !== queryId && stripTrailingDateStamp(entryId) !== queryIdNoDate) return false;\n\t\tif (queryProvider !== undefined && normalizeModelSegment(entry.provider) !== queryProvider) return false;\n\t\treturn true;\n\t});\n\tif (candidates.length === 0) return undefined;\n\tif (preferredProvider) {\n\t\tconst preferredProviderNorm = normalizeModelSegment(preferredProvider);\n\t\tconst preferred = candidates.find((entry) => normalizeModelSegment(entry.provider) === preferredProviderNorm);\n\t\tif (preferred) return preferred.fullId;\n\t}\n\tif (candidates.length === 1) return candidates[0]!.fullId;\n\treturn undefined;\n}\n\n/**\n * Resolve a possibly-loose model id to a canonical `provider/id` (plus any\n * thinking suffix). Exact registry matches win; fuzzy normalization\n * (separator/case/date-stamp via {@link fuzzyResolveModel}) is a fallback so\n * spelling differences still resolve. Never switches providers for a qualified\n * query. Pure.\n */\nexport function resolveModelCandidate(\n\tmodel: string | undefined,\n\tavailableModels: AvailableModelInfo[] | undefined,\n\tpreferredProvider?: string,\n): string | undefined {\n\tif (!model) return undefined;\n\tif (!availableModels || availableModels.length === 0) return model;\n\n\tconst resolvedWhole = resolveBaseModelCandidate(model, availableModels, preferredProvider);\n\tif (resolvedWhole) return resolvedWhole;\n\n\tconst { baseModel, thinkingSuffix } = splitThinkingSuffix(model);\n\tif (!thinkingSuffix) return model;\n\tconst resolvedBase = resolveBaseModelCandidate(baseModel, availableModels, preferredProvider);\n\tif (resolvedBase) return `${resolvedBase}${thinkingSuffix}`;\n\treturn model;\n}\n\nexport interface ResolveSubagentModelOverrideOptions {\n\t/** When set with `enforce: true`, out-of-scope models are rejected. */\n\tscope?: ModelScopeConfig;\n\t/** Origin of the requested model: explicit caller-supplied (hard error) vs inherited (warn). Defaults to `\"inherited\"`. */\n\tsource?: ModelSource;\n\t/** Called for warn-severity violations instead of `console.warn`. */\n\tonWarn?: (violation: ModelScopeViolation) => void;\n}\n\nfunction defaultScopeWarn(violation: ModelScopeViolation): void {\n\tconsole.warn(`[pi-subagents] ${violation.message}`);\n}\n\n/**\n * Resolve the `--model` override passed to a spawned subagent.\n *\n * When no model is requested (`undefined`, `false`, empty, or the `\"inherit\"`\n * sentinel), the child must inherit the parent session's *in-memory* model\n * (`provider/id`) instead of being left to resolve its own model. Without an\n * explicit `provider/id`, the child falls back to the global\n * `~/.pi/agent/settings.json` default, which is shared across every open PI\n * session — so a different session that last changed its model in the TUI would\n * silently contaminate this session's subagents (see issue #266). Passing an\n * explicit `provider/id` keeps each session's children isolated to that\n * session's model.\n *\n * An explicitly requested model string is resolved via {@link resolveModelCandidate}.\n * When `options.scope.enforce` is on, an out-of-scope resolved model throws for\n * an explicit (`source: \"explicit\"`) request and warns for an inherited one.\n */\nexport function resolveSubagentModelOverride(\n\trequestedModel: string | boolean | undefined,\n\tparentModel: ParentModel | undefined,\n\tavailableModels: AvailableModelInfo[] | undefined,\n\tpreferredProvider?: string,\n\toptions?: ResolveSubagentModelOverrideOptions,\n): string | undefined {\n\tconst trimmed = typeof requestedModel === \"string\" ? requestedModel.trim() : \"\";\n\tconst explicit = trimmed && trimmed !== INHERIT_MODEL ? trimmed : undefined;\n\tlet resolved: string | undefined;\n\tif (explicit === undefined) {\n\t\tresolved = parentModel ? `${parentModel.provider}/${parentModel.id}` : undefined;\n\t} else {\n\t\tresolved = resolveModelCandidate(explicit, availableModels, preferredProvider);\n\t}\n\tif (resolved && options?.scope?.enforce) {\n\t\tconst source: ModelSource = explicit === undefined ? \"inherited\" : (options.source ?? \"inherited\");\n\t\tconst violation = checkModelScope(resolved, options.scope, source);\n\t\tif (violation) {\n\t\t\tif (violation.severity === \"error\") throw new Error(violation.message);\n\t\t\t(options.onWarn ?? defaultScopeWarn)(violation);\n\t\t}\n\t}\n\treturn resolved;\n}\n\nexport function resolveEffectiveSubagentModel(\n\texplicitModel: string | boolean | undefined,\n\tagentModel: string | boolean | undefined,\n\tparentModel: ParentModel | undefined,\n\tavailableModels: AvailableModelInfo[] | undefined,\n\tpreferredProvider?: string,\n\toptions?: Omit<ResolveSubagentModelOverrideOptions, \"source\">,\n): string | undefined {\n\tconst resolved = resolveSubagentModelOverride(\n\t\texplicitModel ?? agentModel,\n\t\tparentModel,\n\t\tavailableModels,\n\t\tpreferredProvider,\n\t\t{ ...options, source: explicitModel !== undefined ? \"explicit\" : \"inherited\" },\n\t);\n\tif (resolved || explicitModel === undefined) return resolved;\n\treturn resolveSubagentModelOverride(\n\t\tagentModel,\n\t\tparentModel,\n\t\tavailableModels,\n\t\tpreferredProvider,\n\t\t{ ...options, source: \"inherited\" },\n\t);\n}\n\n// lunr: model tier bridge — resolve a subagent `tier` param through lunR core's\n// model-tiers global (Symbol.for(\"@lunr/model-tiers\")). Absent bridge, disabled tier\n// mode, unknown tier, or unconfigured tier all resolve to undefined so callers fall\n// back to normal inherit behavior. Never throws.\nexport function resolveTierModelOverride(tier: unknown): string | undefined {\n\tif (typeof tier !== \"string\" || !tier.trim()) return undefined;\n\tconst tierName = tier.trim();\n\ttry {\n\t\tconst bridge = (globalThis as Record<symbol, unknown>)[Symbol.for(\"@lunr/model-tiers\")] as\n\t\t\t| { getTierModel?: (tier: string) => unknown; isTierModeEnabled?: () => unknown }\n\t\t\t| undefined;\n\t\tif (typeof bridge?.isTierModeEnabled !== \"function\" || typeof bridge?.getTierModel !== \"function\") {\n\t\t\treturn undefined;\n\t\t}\n\t\tif (bridge.isTierModeEnabled() !== true) return undefined;\n\t\tconst model = bridge.getTierModel(tierName);\n\t\tif (typeof model === \"string\" && model.trim()) return model.trim();\n\t\tif (process.env.PI_SUBAGENTS_DEBUG) {\n\t\t\tconsole.warn(`[pi-subagents] model tier '${tierName}' has no configured model; inheriting parent model.`);\n\t\t}\n\t\treturn undefined;\n\t} catch (error) {\n\t\tif (process.env.PI_SUBAGENTS_DEBUG) {\n\t\t\tconsole.warn(\n\t\t\t\t`[pi-subagents] model tier resolution failed for '${tierName}': ${error instanceof Error ? error.message : String(error)}`,\n\t\t\t);\n\t\t}\n\t\treturn undefined;\n\t}\n}\n\nexport interface BuildModelCandidatesOptions {\n\t/** Fallback models are inherited agent config and warn, rather than error, when out of scope. */\n\tscope?: ModelScopeConfig;\n\tonWarn?: (violation: ModelScopeViolation) => void;\n}\n\nexport function buildModelCandidates(\n\tprimaryModel: string | undefined,\n\tfallbackModels: string[] | undefined,\n\tavailableModels: AvailableModelInfo[] | undefined,\n\tpreferredProvider?: string,\n\toptions?: BuildModelCandidatesOptions,\n): string[] {\n\tconst seen = new Set<string>();\n\tconst candidates: string[] = [];\n\tconst rawCandidates = [primaryModel, ...(fallbackModels ?? [])];\n\tfor (let index = 0; index < rawCandidates.length; index++) {\n\t\tconst raw = rawCandidates[index];\n\t\tif (!raw) continue;\n\t\tconst normalized = resolveModelCandidate(raw.trim(), availableModels, preferredProvider);\n\t\tif (!normalized || seen.has(normalized)) continue;\n\t\tif (index > 0 && options?.scope?.enforce) {\n\t\t\tconst violation = checkModelScope(normalized, options.scope, \"inherited\");\n\t\t\tif (violation) (options.onWarn ?? defaultScopeWarn)(violation);\n\t\t}\n\t\tseen.add(normalized);\n\t\tcandidates.push(normalized);\n\t}\n\treturn candidates;\n}\n\nconst RETRYABLE_MODEL_FAILURE_PATTERNS = [\n\t/rate\\s*limit/i,\n\t/too many requests/i,\n\t/\\b429\\b/,\n\t/quota/i,\n\t/billing/i,\n\t/credit/i,\n\t/auth(?:entication)?/i,\n\t/unauthori[sz]ed/i,\n\t/forbidden/i,\n\t/api key/i,\n\t/token expired/i,\n\t/invalid key/i,\n\t/provider.*unavailable/i,\n\t/model.*unavailable/i,\n\t/model.*disabled/i,\n\t/model.*not found/i,\n\t/unknown model/i,\n\t/overloaded/i,\n\t/service unavailable/i,\n\t/temporar(?:ily)? unavailable/i,\n\t/connection refused/i,\n\t/fetch failed/i,\n\t/network error/i,\n\t/socket hang up/i,\n\t/stream ended without finish_reason/i,\n\t/upstream/i,\n\t/timed? out/i,\n\t/timeout/i,\n\t/\\b502\\b/,\n\t/\\b503\\b/,\n\t/\\b504\\b/,\n\t/cold.?start/i,\n\t/empty response/i,\n\t/no output/i,\n\t/model.*(?:load|fail|error)/i,\n];\n\n/**\n * Failures reported as `<tool> failed (exit N): ...` or `<tool> failed with\n * exit code N` come from a tool call inside the child's task, not from the\n * provider/model, however network-flavored their details read. Retrying a\n * different model cannot fix them and would rerun the whole task. Tool names\n * include namespaced forms like `mcp.server/write`.\n */\nconst TOOL_FAILURE_PREFIX = /^[\\w.:@/-]+ failed (?:(?:\\(exit \\d+\\):)|(?:with exit code \\d+))(?:\\s|$)/i;\n\nexport function isRetryableModelFailure(error: string | undefined): boolean {\n\tif (!error) return false;\n\tif (TOOL_FAILURE_PREFIX.test(error.trim())) return false;\n\treturn RETRYABLE_MODEL_FAILURE_PATTERNS.some((pattern) => pattern.test(error));\n}\n\nexport function formatModelAttemptNote(attempt: ModelAttemptSummary, nextModel?: string): string {\n\tconst failure = attempt.error?.trim() || `exit ${attempt.exitCode ?? 1}`;\n\treturn nextModel\n\t\t? `[fallback] ${attempt.model} failed: ${failure}. Retrying with ${nextModel}.`\n\t\t: `[fallback] ${attempt.model} failed: ${failure}.`;\n}\n"]}

package/dist/builtin-extensions/pi-subagents/src/runs/shared/model-scope.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Optional model-scope enforcement for subagent model resolution.
+ *
+ * When `subagents.modelScope.enforce` is enabled in settings, a resolved model
+ * that does not match any `allow` pattern is rejected. The severity depends on
+ * where the model came from: an explicit caller-supplied model (`--model`,
+ * tool-call `model`, or a TUI clarify pick) is a hard error, while a model
+ * inherited from agent frontmatter / `defaultModel` / the parent session only
+ * emits a warning so existing configurations keep working.
+ *
+ * The decision logic ({@link checkModelScope}) is a pure function of its
+ * inputs so it can be unit-tested without touching the filesystem or config.
+ */
+export interface ModelScopeConfig {
+    enforce?: boolean;
+    /** Glob-style allow patterns (only `*` is special), matched against `provider/id`. */
+    allow?: string[];
+}
+/** Where a resolved model originated, deciding enforcement severity. */
+export type ModelSource = "explicit" | "inherited";
+export interface ModelScopeViolation {
+    /** Resolved model id (without thinking suffix) that fell outside the scope. */
+    model: string;
+    severity: "warn" | "error";
+    message: string;
+    allowedPatterns: string[];
+}
+/**
+ * Test whether a resolved model matches a single allow pattern. Both sides are
+ * compared case-insensitively against the full `provider/id` (thinking suffix
+ * stripped from the model).
+ */
+export declare function matchesScopePattern(model: string, pattern: string): boolean;
+/**
+ * Pure scope decision. Returns a {@link ModelScopeViolation} when the model is
+ * out of scope and enforcement is on, otherwise `undefined`. Enforcement with
+ * no `allow` list is a no-op (the settings parser rejects that combination, but
+ * this stays defensive for callers that build configs programmatically).
+ */
+export declare function checkModelScope(model: string | undefined, scope: ModelScopeConfig | undefined, source: ModelSource): ModelScopeViolation | undefined;
+/**
+ * Validate and normalize a raw `subagents.modelScope` value from settings.
+ * Throws a descriptive error for malformed configs (matching the surrounding
+ * settings-parsing style). Returns `undefined` when the field is absent.
+ */
+export declare function parseModelScopeConfig(value: unknown, meta: {
+    filePath: string;
+}): ModelScopeConfig | undefined;
+//# sourceMappingURL=model-scope.d.ts.map

package/dist/builtin-extensions/pi-subagents/src/runs/shared/model-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-scope.d.ts","sourceRoot":"","sources":["../../../../../../src/builtin-extensions/pi-subagents/src/runs/shared/model-scope.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;GAYG;AAIH,MAAM,WAAW,gBAAgB;IAChC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,sFAAsF;IACtF,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,wEAAwE;AACxE,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,WAAW,CAAC;AAEnD,MAAM,WAAW,mBAAmB;IACnC,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC1B;AAYD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAE3E;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC9B,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,KAAK,EAAE,gBAAgB,GAAG,SAAS,EACnC,MAAM,EAAE,WAAW,GACjB,mBAAmB,GAAG,SAAS,CAgBjC;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACpC,KAAK,EAAE,OAAO,EACd,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GACxB,gBAAgB,GAAG,SAAS,CAuC9B","sourcesContent":["// @ts-nocheck\n/**\n * Optional model-scope enforcement for subagent model resolution.\n *\n * When `subagents.modelScope.enforce` is enabled in settings, a resolved model\n * that does not match any `allow` pattern is rejected. The severity depends on\n * where the model came from: an explicit caller-supplied model (`--model`,\n * tool-call `model`, or a TUI clarify pick) is a hard error, while a model\n * inherited from agent frontmatter / `defaultModel` / the parent session only\n * emits a warning so existing configurations keep working.\n *\n * The decision logic ({@link checkModelScope}) is a pure function of its\n * inputs so it can be unit-tested without touching the filesystem or config.\n */\n\nimport { splitKnownThinkingSuffix } from \"../../shared/model-info.ts\";\n\nexport interface ModelScopeConfig {\n\tenforce?: boolean;\n\t/** Glob-style allow patterns (only `*` is special), matched against `provider/id`. */\n\tallow?: string[];\n}\n\n/** Where a resolved model originated, deciding enforcement severity. */\nexport type ModelSource = \"explicit\" | \"inherited\";\n\nexport interface ModelScopeViolation {\n\t/** Resolved model id (without thinking suffix) that fell outside the scope. */\n\tmodel: string;\n\tseverity: \"warn\" | \"error\";\n\tmessage: string;\n\tallowedPatterns: string[];\n}\n\nfunction stripThinkingSuffix(model: string): string {\n\treturn splitKnownThinkingSuffix(model).baseModel;\n}\n\n/** Escape RegExp specials except `*`, then turn `*` into `.*`. */\nfunction globToRegExp(pattern: string): RegExp {\n\tconst escaped = pattern.replace(/[.+^${}()|[\\]\\\\]/g, \"\\\\$&\").replace(/\\*/g, \".*\");\n\treturn new RegExp(`^${escaped}$`, \"i\");\n}\n\n/**\n * Test whether a resolved model matches a single allow pattern. Both sides are\n * compared case-insensitively against the full `provider/id` (thinking suffix\n * stripped from the model).\n */\nexport function matchesScopePattern(model: string, pattern: string): boolean {\n\treturn globToRegExp(pattern).test(stripThinkingSuffix(model));\n}\n\n/**\n * Pure scope decision. Returns a {@link ModelScopeViolation} when the model is\n * out of scope and enforcement is on, otherwise `undefined`. Enforcement with\n * no `allow` list is a no-op (the settings parser rejects that combination, but\n * this stays defensive for callers that build configs programmatically).\n */\nexport function checkModelScope(\n\tmodel: string | undefined,\n\tscope: ModelScopeConfig | undefined,\n\tsource: ModelSource,\n): ModelScopeViolation | undefined {\n\tif (!model || !scope?.enforce) return undefined;\n\tconst allow = scope.allow;\n\tif (!allow || allow.length === 0) return undefined;\n\tif (allow.some((pattern) => matchesScopePattern(model, pattern))) return undefined;\n\n\tconst baseModel = stripThinkingSuffix(model);\n\tconst severity: ModelScopeViolation[\"severity\"] = source === \"explicit\" ? \"error\" : \"warn\";\n\treturn {\n\t\tmodel: baseModel,\n\t\tseverity,\n\t\tallowedPatterns: allow,\n\t\tmessage:\n\t\t\t`Model '${baseModel}' is outside the configured subagent model scope. ` +\n\t\t\t`Allowed patterns: ${allow.join(\", \")}.`,\n\t};\n}\n\n/**\n * Validate and normalize a raw `subagents.modelScope` value from settings.\n * Throws a descriptive error for malformed configs (matching the surrounding\n * settings-parsing style). Returns `undefined` when the field is absent.\n */\nexport function parseModelScopeConfig(\n\tvalue: unknown,\n\tmeta: { filePath: string },\n): ModelScopeConfig | undefined {\n\tif (value === undefined) return undefined;\n\tif (!value || typeof value !== \"object\" || Array.isArray(value)) {\n\t\tthrow new Error(`Subagent settings in '${meta.filePath}' have invalid 'modelScope'; expected an object.`);\n\t}\n\n\tconst input = value as Record<string, unknown>;\n\tconst config: ModelScopeConfig = {};\n\n\tif (\"enforce\" in input) {\n\t\tif (typeof input.enforce !== \"boolean\") {\n\t\t\tthrow new Error(`Subagent settings in '${meta.filePath}' have invalid 'modelScope.enforce'; expected a boolean.`);\n\t\t}\n\t\tconfig.enforce = input.enforce;\n\t}\n\n\tif (\"allow\" in input) {\n\t\tif (!Array.isArray(input.allow)) {\n\t\t\tthrow new Error(`Subagent settings in '${meta.filePath}' have invalid 'modelScope.allow'; expected an array of strings.`);\n\t\t}\n\t\tconst allow: string[] = [];\n\t\tfor (const entry of input.allow) {\n\t\t\tif (typeof entry !== \"string\") {\n\t\t\t\tthrow new Error(`Subagent settings in '${meta.filePath}' have invalid 'modelScope.allow'; expected an array of strings.`);\n\t\t\t}\n\t\t\tconst trimmed = entry.trim();\n\t\t\tif (trimmed) allow.push(trimmed);\n\t\t}\n\t\tif (allow.length === 0) {\n\t\t\tthrow new Error(`Subagent settings in '${meta.filePath}' have invalid 'modelScope.allow'; expected a non-empty array of patterns.`);\n\t\t}\n\t\tconfig.allow = allow;\n\t}\n\n\tif (config.enforce === true && (!config.allow || config.allow.length === 0)) {\n\t\tthrow new Error(`Subagent settings in '${meta.filePath}' set modelScope.enforce without a non-empty 'allow' list; supply allowed model patterns or disable enforcement.`);\n\t}\n\n\treturn Object.keys(config).length > 0 ? config : undefined;\n}\n"]}

package/dist/builtin-extensions/pi-subagents/src/runs/shared/model-scope.js

@@ -0,0 +1,98 @@
+// @ts-nocheck
+/**
+ * Optional model-scope enforcement for subagent model resolution.
+ *
+ * When `subagents.modelScope.enforce` is enabled in settings, a resolved model
+ * that does not match any `allow` pattern is rejected. The severity depends on
+ * where the model came from: an explicit caller-supplied model (`--model`,
+ * tool-call `model`, or a TUI clarify pick) is a hard error, while a model
+ * inherited from agent frontmatter / `defaultModel` / the parent session only
+ * emits a warning so existing configurations keep working.
+ *
+ * The decision logic ({@link checkModelScope}) is a pure function of its
+ * inputs so it can be unit-tested without touching the filesystem or config.
+ */
+import { splitKnownThinkingSuffix } from "../../shared/model-info.js";
+function stripThinkingSuffix(model) {
+    return splitKnownThinkingSuffix(model).baseModel;
+}
+/** Escape RegExp specials except `*`, then turn `*` into `.*`. */
+function globToRegExp(pattern) {
+    const escaped = pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*");
+    return new RegExp(`^${escaped}$`, "i");
+}
+/**
+ * Test whether a resolved model matches a single allow pattern. Both sides are
+ * compared case-insensitively against the full `provider/id` (thinking suffix
+ * stripped from the model).
+ */
+export function matchesScopePattern(model, pattern) {
+    return globToRegExp(pattern).test(stripThinkingSuffix(model));
+}
+/**
+ * Pure scope decision. Returns a {@link ModelScopeViolation} when the model is
+ * out of scope and enforcement is on, otherwise `undefined`. Enforcement with
+ * no `allow` list is a no-op (the settings parser rejects that combination, but
+ * this stays defensive for callers that build configs programmatically).
+ */
+export function checkModelScope(model, scope, source) {
+    if (!model || !scope?.enforce)
+        return undefined;
+    const allow = scope.allow;
+    if (!allow || allow.length === 0)
+        return undefined;
+    if (allow.some((pattern) => matchesScopePattern(model, pattern)))
+        return undefined;
+    const baseModel = stripThinkingSuffix(model);
+    const severity = source === "explicit" ? "error" : "warn";
+    return {
+        model: baseModel,
+        severity,
+        allowedPatterns: allow,
+        message: `Model '${baseModel}' is outside the configured subagent model scope. ` +
+            `Allowed patterns: ${allow.join(", ")}.`,
+    };
+}
+/**
+ * Validate and normalize a raw `subagents.modelScope` value from settings.
+ * Throws a descriptive error for malformed configs (matching the surrounding
+ * settings-parsing style). Returns `undefined` when the field is absent.
+ */
+export function parseModelScopeConfig(value, meta) {
+    if (value === undefined)
+        return undefined;
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        throw new Error(`Subagent settings in '${meta.filePath}' have invalid 'modelScope'; expected an object.`);
+    }
+    const input = value;
+    const config = {};
+    if ("enforce" in input) {
+        if (typeof input.enforce !== "boolean") {
+            throw new Error(`Subagent settings in '${meta.filePath}' have invalid 'modelScope.enforce'; expected a boolean.`);
+        }
+        config.enforce = input.enforce;
+    }
+    if ("allow" in input) {
+        if (!Array.isArray(input.allow)) {
+            throw new Error(`Subagent settings in '${meta.filePath}' have invalid 'modelScope.allow'; expected an array of strings.`);
+        }
+        const allow = [];
+        for (const entry of input.allow) {
+            if (typeof entry !== "string") {
+                throw new Error(`Subagent settings in '${meta.filePath}' have invalid 'modelScope.allow'; expected an array of strings.`);
+            }
+            const trimmed = entry.trim();
+            if (trimmed)
+                allow.push(trimmed);
+        }
+        if (allow.length === 0) {
+            throw new Error(`Subagent settings in '${meta.filePath}' have invalid 'modelScope.allow'; expected a non-empty array of patterns.`);
+        }
+        config.allow = allow;
+    }
+    if (config.enforce === true && (!config.allow || config.allow.length === 0)) {
+        throw new Error(`Subagent settings in '${meta.filePath}' set modelScope.enforce without a non-empty 'allow' list; supply allowed model patterns or disable enforcement.`);
+    }
+    return Object.keys(config).length > 0 ? config : undefined;
+}
+//# sourceMappingURL=model-scope.js.map