@chainingintention/pi-web-cn 1.202606.22 → 1.202606.24

package/dist/client/index.html

@@ -50,7 +50,7 @@
       html, body { margin: 0; height: 100%; overflow: hidden; background: var(--pi-bg); color: var(--pi-text); }
       body { min-height: 100dvh; }
     </style>
-    <script type="module" crossorigin src="/assets/index-bm72ZAqQ.js"></script>
+    <script type="module" crossorigin src="/assets/index-Bjpa_x8C.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/vendor-editor-core-Bc1A7SO7.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-editor-languages-D0CnB2js.js">
   </head>

package/dist/server/sessions/managementAgentTools.js

@@ -2,14 +2,13 @@ import { spawn } from "node:child_process";
 import { constants } from "node:fs";
 import { access, mkdir, readdir, readFile, realpath, stat, writeFile } from "node:fs/promises";
 import path from "node:path";
-import { createBubblewrapShellInvocation, createManagedSandboxEnvironment } from "./managementSandbox.js";
-const DEFAULT_BUBBLEWRAP_EXECUTABLE = envOrDefault("PI_WEB_BUBBLEWRAP", "bwrap");
-const DEFAULT_SHELL_EXECUTABLE = envOrDefault("SHELL", "/bin/bash");
-export function createManagedAgentToolOptions(cwd, context) {
+import { defineTool } from "@earendil-works/pi-coding-agent";
+import { Type } from "typebox";
+import { createBubblewrapPythonInvocation, createManagedSandboxEnvironment, DEFAULT_BUBBLEWRAP_PATHS } from "./managementSandbox.js";
+export function createManagedAgentToolOptions(cwd) {
     const guard = createWorkspacePathGuard(cwd);
     return {
         read: { operations: createManagedReadOperations(guard) },
-        bash: { operations: createManagedBashOperations(cwd, context, guard) },
         edit: { operations: createManagedEditOperations(guard) },
         write: { operations: createManagedWriteOperations(guard) },
         grep: { operations: createManagedGrepOperations(guard) },
@@ -17,6 +16,35 @@ export function createManagedAgentToolOptions(cwd, context) {
         ls: { operations: createManagedLsOperations(guard) },
     };
 }
+const pythonSchema = Type.Object({
+    code: Type.String({ description: "Python code to run in the managed project workspace" }),
+    timeoutMs: Type.Optional(Type.Number({ description: "Execution timeout in milliseconds" })),
+});
+export function createManagedPythonToolDefinition(cwd, context) {
+    return defineTool({
+        name: "python",
+        label: "python",
+        description: "Run Python code inside the managed project workspace. Shell commands and paths outside the project are blocked.",
+        promptSnippet: "Run Python code in the current project",
+        promptGuidelines: ["Use python for scripts and calculations. Do not use it to run shell commands."],
+        parameters: pythonSchema,
+        async execute(_toolCallId, params, signal) {
+            const configuredPython = context.sandbox?.pythonExecutable?.trim();
+            const pythonExecutable = configuredPython === undefined || configuredPython === "" ? "python3" : configuredPython;
+            const timeoutMs = Math.max(1_000, Math.min(params.timeoutMs ?? 30_000, 120_000));
+            const env = createManagedSandboxEnvironment({ hostEnv: process.env, context });
+            return runManagedPython({
+                pythonExecutable,
+                bubblewrapExecutable: bubblewrapExecutable(),
+                cwd,
+                code: params.code,
+                timeoutMs,
+                env,
+                signal,
+            });
+        },
+    });
+}
 function createManagedReadOperations(guard) {
     return {
         readFile: async (absolutePath) => readFile(await guard.existingPath(absolutePath)),
@@ -71,64 +99,6 @@ function createManagedFindOperations(guard) {
         glob: async (pattern, searchCwd, options) => findMatchingPaths(await guard.existingPath(searchCwd), pattern, options.limit, guard),
     };
 }
-function createManagedBashOperations(cwd, context, guard) {
-    return {
-        exec: async (command, requestedCwd, { onData, signal, timeout }) => {
-            const workspaceRoot = await guard.workspaceRoot();
-            const realRequestedCwd = await guard.existingPath(requestedCwd);
-            if (realRequestedCwd !== workspaceRoot)
-                throw new Error("Managed bash commands must run at the workspace root");
-            const env = createManagedSandboxEnvironment({ hostEnv: process.env, context });
-            const invocation = createBubblewrapShellInvocation({
-                bubblewrapExecutable: DEFAULT_BUBBLEWRAP_EXECUTABLE,
-                shellExecutable: DEFAULT_SHELL_EXECUTABLE,
-                workspaceRoot,
-                script: command,
-                env,
-            });
-            return new Promise((resolve, reject) => {
-                if (signal?.aborted === true) {
-                    reject(new Error("aborted"));
-                    return;
-                }
-                const child = spawn(invocation.command, invocation.args, {
-                    cwd,
-                    detached: true,
-                    stdio: ["ignore", "pipe", "pipe"],
-                });
-                let timedOut = false;
-                const effectiveTimeout = timeout === undefined || timeout <= 0 ? undefined : timeout;
-                const timeoutHandle = effectiveTimeout === undefined ? undefined : setTimeout(() => {
-                    timedOut = true;
-                    killProcessGroup(child.pid, child.kill.bind(child));
-                }, effectiveTimeout * 1000);
-                const onAbort = () => {
-                    killProcessGroup(child.pid, child.kill.bind(child));
-                };
-                child.stdout.on("data", onData);
-                child.stderr.on("data", onData);
-                signal?.addEventListener("abort", onAbort, { once: true });
-                child.on("error", (error) => {
-                    if (timeoutHandle !== undefined)
-                        clearTimeout(timeoutHandle);
-                    signal?.removeEventListener("abort", onAbort);
-                    reject(error);
-                });
-                child.on("close", (code) => {
-                    if (timeoutHandle !== undefined)
-                        clearTimeout(timeoutHandle);
-                    signal?.removeEventListener("abort", onAbort);
-                    if (signal?.aborted === true)
-                        reject(new Error("aborted"));
-                    else if (timedOut)
-                        reject(new Error(`timeout:${String(effectiveTimeout ?? "unknown")}`));
-                    else
-                        resolve({ exitCode: code });
-                });
-            });
-        },
-    };
-}
 function createWorkspacePathGuard(cwd) {
     const root = realpath(cwd);
     return {
@@ -167,6 +137,77 @@ function createWorkspacePathGuard(cwd) {
         },
     };
 }
+async function runManagedPython(options) {
+    const workspaceRoot = await realpath(options.cwd);
+    const invocation = createBubblewrapPythonInvocation({
+        bubblewrapExecutable: options.bubblewrapExecutable,
+        pythonExecutable: options.pythonExecutable,
+        workspaceRoot,
+        env: options.env,
+        readOnlyPaths: await readableBubblewrapPaths(),
+    });
+    return new Promise((resolve, reject) => {
+        if (options.signal?.aborted === true) {
+            reject(new Error("Operation aborted"));
+            return;
+        }
+        const child = spawn(invocation.command, invocation.args, { cwd: workspaceRoot, env: options.env, stdio: ["pipe", "pipe", "pipe"], shell: false });
+        let stdout = "";
+        let stderr = "";
+        let settled = false;
+        const cleanup = () => {
+            clearTimeout(timer);
+            options.signal?.removeEventListener("abort", onAbort);
+        };
+        const fail = (error) => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            reject(error);
+        };
+        const finish = (code) => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            const output = truncateToolOutput([stdout.trimEnd(), stderr.trimEnd()].filter((part) => part !== "").join("\n"));
+            const prefix = code === 0 ? "" : `Python exited with code ${String(code)}\n`;
+            resolve({ content: [{ type: "text", text: `${prefix}${output}`.trimEnd() }], details: undefined });
+        };
+        const timer = setTimeout(() => {
+            child.kill();
+            fail(new Error(`Python execution timed out after ${String(options.timeoutMs)}ms`));
+        }, options.timeoutMs);
+        const onAbort = () => {
+            child.kill();
+            fail(new Error("Operation aborted"));
+        };
+        options.signal?.addEventListener("abort", onAbort, { once: true });
+        child.stdout.on("data", (chunk) => { stdout += chunk.toString("utf8"); });
+        child.stderr.on("data", (chunk) => { stderr += chunk.toString("utf8"); });
+        child.on("error", (error) => {
+            if (isNodeErrorWithCode(error, "ENOENT"))
+                fail(new Error("Python sandbox is unavailable"));
+            else
+                fail(error);
+        });
+        child.on("close", finish);
+        child.stdin.end(options.code);
+    });
+}
+async function readableBubblewrapPaths() {
+    const paths = await Promise.all(DEFAULT_BUBBLEWRAP_PATHS.map(async (candidate) => {
+        try {
+            await access(candidate, constants.R_OK);
+            return candidate;
+        }
+        catch {
+            return undefined;
+        }
+    }));
+    return paths.filter(isDefined);
+}
 async function nearestExistingParent(target) {
     let current = target;
     for (;;) {
@@ -184,9 +225,9 @@ async function nearestExistingParent(target) {
         }
     }
 }
-function envOrDefault(key, fallback) {
-    const value = process.env[key];
-    return value === undefined || value === "" ? fallback : value;
+function bubblewrapExecutable() {
+    const configured = process.env["PI_WEB_BWRAP_EXECUTABLE"]?.trim() ?? process.env["PI_WEB_BUBBLEWRAP"]?.trim();
+    return configured === undefined || configured === "" ? "bwrap" : configured;
 }
 function assertInsideWorkspace(workspaceRoot, target, originalPath) {
     const relative = path.relative(workspaceRoot, target);
@@ -252,16 +293,16 @@ function toPosix(value) {
 function isNotFoundError(error) {
     return typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
 }
-function killProcessGroup(pid, fallbackKill) {
-    if (pid === undefined) {
-        fallbackKill("SIGKILL");
-        return;
-    }
-    try {
-        process.kill(-pid, "SIGKILL");
-    }
-    catch {
-        fallbackKill("SIGKILL");
-    }
+function isNodeErrorWithCode(error, code) {
+    return typeof error === "object" && error !== null && "code" in error && error.code === code;
+}
+function isDefined(value) {
+    return value !== undefined;
+}
+function truncateToolOutput(value) {
+    const limit = 20_000;
+    if (value.length <= limit)
+        return value;
+    return `${value.slice(0, limit)}\n[output truncated]`;
 }
 //# sourceMappingURL=managementAgentTools.js.map

package/dist/server/sessions/managementAgentTools.js.map

@@ -1 +1 @@
-{"version":3,"file":"managementAgentTools.js","sourceRoot":"","sources":["../../../src/server/sessions/managementAgentTools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC/F,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,+BAA+B,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AAE1G,MAAM,6BAA6B,GAAG,YAAY,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;AACjF,MAAM,wBAAwB,GAAG,YAAY,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AAEpE,MAAM,UAAU,6BAA6B,CAAC,GAAW,EAAE,OAA+B;IACxF,MAAM,KAAK,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAC5C,OAAO;QACL,IAAI,EAAE,EAAE,UAAU,EAAE,2BAA2B,CAAC,KAAK,CAAC,EAAE;QACxD,IAAI,EAAE,EAAE,UAAU,EAAE,2BAA2B,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE;QACtE,IAAI,EAAE,EAAE,UAAU,EAAE,2BAA2B,CAAC,KAAK,CAAC,EAAE;QACxD,KAAK,EAAE,EAAE,UAAU,EAAE,4BAA4B,CAAC,KAAK,CAAC,EAAE;QAC1D,IAAI,EAAE,EAAE,UAAU,EAAE,2BAA2B,CAAC,KAAK,CAAC,EAAE;QACxD,IAAI,EAAE,EAAE,UAAU,EAAE,2BAA2B,CAAC,KAAK,CAAC,EAAE;QACxD,EAAE,EAAE,EAAE,UAAU,EAAE,yBAAyB,CAAC,KAAK,CAAC,EAAE;KACrD,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAyB;IAC5D,OAAO;QACL,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAClF,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KAC1G,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAyB;IAC5D,OAAO;QACL,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAClF,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;QACtG,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KAC3H,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CAAC,KAAyB;IAC7D,OAAO;QACL,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;QACtG,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;KACzG,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAyB;IAC1D,OAAO;QACL,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;YAC7B,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;gBACvC,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAC1E,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;KACjF,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAyB;IAC5D,OAAO;QACL,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QACvG,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;KAC3F,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAyB;IAC5D,OAAO;QACL,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;YAC7B,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;gBACvC,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;KACnI,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,GAAW,EAAE,OAA+B,EAAE,KAAyB;IAC1G,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;YACjE,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC;YAClD,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YAChE,IAAI,gBAAgB,KAAK,aAAa;gBAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAChH,MAAM,GAAG,GAAG,+BAA+B,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC/E,MAAM,UAAU,GAAG,+BAA+B,CAAC;gBACjD,oBAAoB,EAAE,6BAA6B;gBACnD,eAAe,EAAE,wBAAwB;gBACzC,aAAa;gBACb,MAAM,EAAE,OAAO;gBACf,GAAG;aACJ,CAAC,CAAC;YAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACrC,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;oBAC7B,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;oBAC7B,OAAO;gBACT,CAAC;gBAED,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,EAAE;oBACvD,GAAG;oBACH,QAAQ,EAAE,IAAI;oBACd,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;iBAClC,CAAC,CAAC;gBACH,IAAI,QAAQ,GAAG,KAAK,CAAC;gBACrB,MAAM,gBAAgB,GAAG,OAAO,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;gBACrF,MAAM,aAAa,GAAG,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;oBACjF,QAAQ,GAAG,IAAI,CAAC;oBAChB,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtD,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC,CAAC;gBAE5B,MAAM,OAAO,GAAG,GAAG,EAAE;oBACnB,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtD,CAAC,CAAC;gBAEF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAChC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAChC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;oBAC1B,IAAI,aAAa,KAAK,SAAS;wBAAE,YAAY,CAAC,aAAa,CAAC,CAAC;oBAC7D,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC9C,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC,CAAC,CAAC;gBACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;oBACzB,IAAI,aAAa,KAAK,SAAS;wBAAE,YAAY,CAAC,aAAa,CAAC,CAAC;oBAC7D,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC9C,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI;wBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;yBACtD,IAAI,QAAQ;wBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,MAAM,CAAC,gBAAgB,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;;wBACpF,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnC,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AASD,SAAS,wBAAwB,CAAC,GAAW;IAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO;QACL,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI;QACzB,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;YACnC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC;YACjC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC9C,qBAAqB,CAAC,aAAa,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC7D,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;YACnC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC;YACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC5C,qBAAqB,CAAC,aAAa,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC7D,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAC1C,qBAAqB,CAAC,aAAa,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC/D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAC;gBACzC,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,QAAQ,CAAC,CAAC;gBACrD,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC1C,qBAAqB,CAAC,aAAa,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;YACjE,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,eAAe,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;YACtC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC;YACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC5C,qBAAqB,CAAC,aAAa,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,QAAQ,CAAC,CAAC;YACrD,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC1C,qBAAqB,CAAC,aAAa,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;YAC/D,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,MAAc;IACjD,IAAI,OAAO,GAAG,MAAM,CAAC;IACrB,SAAS,CAAC;QACR,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YACtC,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,MAAM,KAAK,OAAO;gBAAE,MAAM,KAAK,CAAC;YACpC,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,QAAgB;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;AAChE,CAAC;AAED,SAAS,qBAAqB,CAAC,aAAqB,EAAE,MAAc,EAAE,YAAoB;IACxF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACtD,IAAI,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO;IAC1F,MAAM,IAAI,KAAK,CAAC,6CAA6C,YAAY,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,UAAkB,EAAE,OAAe,EAAE,KAAa,EAAE,KAAyB;IAC5G,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACnE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,GAAW,EAAE,OAA4D,EAAE,OAAiB,EAAE,KAAa,EAAE,KAAyB;IACtK,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK;QAAE,OAAO;IACpC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACtF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;YAAE,SAAS;QACrE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAClE,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK;YAAE,OAAO;QACpC,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,eAAe,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9D,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACnH,OAAO,CAAC,YAAY,EAAE,QAAQ,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;AACpH,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe;IAC1C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5B,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,MAAM,IAAI,IAAI,CAAC;YACf,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,MAAM,IAAI,OAAO,CAAC;QACpB,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,MAAM,IAAI,MAAM,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,YAAY,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,IAAI,MAAM,GAAG,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AACnG,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAuB,EAAE,YAAkD;IACnG,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,YAAY,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC"}
+{"version":3,"file":"managementAgentTools.js","sourceRoot":"","sources":["../../../src/server/sessions/managementAgentTools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC/F,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAA+H,MAAM,iCAAiC,CAAC;AAC1L,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B,OAAO,EAAE,gCAAgC,EAAE,+BAA+B,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAWrI,MAAM,UAAU,6BAA6B,CAAC,GAAW;IACvD,MAAM,KAAK,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAC5C,OAAO;QACL,IAAI,EAAE,EAAE,UAAU,EAAE,2BAA2B,CAAC,KAAK,CAAC,EAAE;QACxD,IAAI,EAAE,EAAE,UAAU,EAAE,2BAA2B,CAAC,KAAK,CAAC,EAAE;QACxD,KAAK,EAAE,EAAE,UAAU,EAAE,4BAA4B,CAAC,KAAK,CAAC,EAAE;QAC1D,IAAI,EAAE,EAAE,UAAU,EAAE,2BAA2B,CAAC,KAAK,CAAC,EAAE;QACxD,IAAI,EAAE,EAAE,UAAU,EAAE,2BAA2B,CAAC,KAAK,CAAC,EAAE;QACxD,EAAE,EAAE,EAAE,UAAU,EAAE,yBAAyB,CAAC,KAAK,CAAC,EAAE;KACrD,CAAC;AACJ,CAAC;AAED,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,qDAAqD,EAAE,CAAC;IACzF,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,mCAAmC,EAAE,CAAC,CAAC;CAC5F,CAAC,CAAC;AAEH,MAAM,UAAU,iCAAiC,CAAC,GAAW,EAAE,OAA+B;IAC5F,OAAO,UAAU,CAAiC;QAChD,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,iHAAiH;QAC9H,aAAa,EAAE,wCAAwC;QACvD,gBAAgB,EAAE,CAAC,+EAA+E,CAAC;QACnG,UAAU,EAAE,YAAY;QACxB,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM;YACvC,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;YACnE,MAAM,gBAAgB,GAAG,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC;YAClH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;YACjF,MAAM,GAAG,GAAG,+BAA+B,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC/E,OAAO,gBAAgB,CAAC;gBACtB,gBAAgB;gBAChB,oBAAoB,EAAE,oBAAoB,EAAE;gBAC5C,GAAG;gBACH,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,SAAS;gBACT,GAAG;gBACH,MAAM;aACP,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAyB;IAC5D,OAAO;QACL,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAClF,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KAC1G,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAyB;IAC5D,OAAO;QACL,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAClF,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;QACtG,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KAC3H,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CAAC,KAAyB;IAC7D,OAAO;QACL,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;QACtG,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;KACzG,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAyB;IAC1D,OAAO;QACL,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;YAC7B,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;gBACvC,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAC1E,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;KACjF,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAyB;IAC5D,OAAO;QACL,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QACvG,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;KAC3F,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAyB;IAC5D,OAAO;QACL,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;YAC7B,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;gBACvC,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;KACnI,CAAC;AACJ,CAAC;AASD,SAAS,wBAAwB,CAAC,GAAW;IAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO;QACL,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI;QACzB,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;YACnC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC;YACjC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC9C,qBAAqB,CAAC,aAAa,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC7D,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;YACnC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC;YACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC5C,qBAAqB,CAAC,aAAa,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC7D,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAC1C,qBAAqB,CAAC,aAAa,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC/D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAC;gBACzC,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,QAAQ,CAAC,CAAC;gBACrD,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC1C,qBAAqB,CAAC,aAAa,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;YACjE,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,eAAe,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;YACtC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC;YACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC5C,qBAAqB,CAAC,aAAa,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,QAAQ,CAAC,CAAC;YACrD,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC1C,qBAAqB,CAAC,aAAa,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;YAC/D,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC;AAYD,KAAK,UAAU,gBAAgB,CAAC,OAAgC;IAC9D,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,gCAAgC,CAAC;QAClD,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;QAClD,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,aAAa;QACb,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,aAAa,EAAE,MAAM,uBAAuB,EAAE;KAC/C,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAClJ,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,KAAY,EAAE,EAAE;YAC5B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,IAAmB,EAAE,EAAE;YACrC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,MAAM,MAAM,GAAG,kBAAkB,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACjH,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,2BAA2B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YAC7E,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACrG,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,CAAC,IAAI,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,KAAK,CAAC,oCAAoC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACrF,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,KAAK,CAAC,IAAI,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC;QAEF,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,IAAI,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,IAAI,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;;gBACtF,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,uBAAuB;IACpC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;QAC/E,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YACxC,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC,CAAC;IACJ,OAAO,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,MAAc;IACjD,IAAI,OAAO,GAAG,MAAM,CAAC;IACrB,SAAS,CAAC;QACR,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YACtC,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,MAAM,KAAK,OAAO;gBAAE,MAAM,KAAK,CAAC;YACpC,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB;IAC3B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC9G,OAAO,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;AAC9E,CAAC;AAED,SAAS,qBAAqB,CAAC,aAAqB,EAAE,MAAc,EAAE,YAAoB;IACxF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACtD,IAAI,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO;IAC1F,MAAM,IAAI,KAAK,CAAC,6CAA6C,YAAY,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,UAAkB,EAAE,OAAe,EAAE,KAAa,EAAE,KAAyB;IAC5G,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACnE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,GAAW,EAAE,OAA4D,EAAE,OAAiB,EAAE,KAAa,EAAE,KAAyB;IACtK,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK;QAAE,OAAO;IACpC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACtF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;YAAE,SAAS;QACrE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAClE,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK;YAAE,OAAO;QACpC,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,eAAe,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9D,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACnH,OAAO,CAAC,YAAY,EAAE,QAAQ,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;AACpH,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe;IAC1C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5B,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,MAAM,IAAI,IAAI,CAAC;YACf,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,MAAM,IAAI,OAAO,CAAC;QACpB,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,MAAM,IAAI,MAAM,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,YAAY,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,IAAI,MAAM,GAAG,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AACnG,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,IAAY;IACvD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;AAC/F,CAAC;AAED,SAAS,SAAS,CAAI,KAAoB;IACxC,OAAO,KAAK,KAAK,SAAS,CAAC;AAC7B,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC;IACrB,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,sBAAsB,CAAC;AACxD,CAAC"}

package/dist/server/sessions/managementPermissionSystem.js

@@ -0,0 +1,92 @@
+import { createHash } from "node:crypto";
+import { mkdir, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+export const PI_PERMISSION_SYSTEM_POLICY_AGENT_DIR = "PI_PERMISSION_SYSTEM_POLICY_AGENT_DIR";
+const MANAGEMENT_AGENT_TOOL_NAMES = ["read", "write", "edit", "ls", "grep", "find", "python"];
+const ALWAYS_DENIED_TOOL_NAMES = [
+    "bash",
+    "shell",
+    "terminal",
+    "terminal-command-runs",
+    "powershell",
+    "pwsh",
+    "mcp",
+    "http",
+    "webfetch",
+    "websearch",
+];
+export function createManagementPermissionSystemPolicy(context) {
+    const tools = { "*": "deny" };
+    for (const tool of managementAgentToolNames(context))
+        tools[tool] = "allow";
+    for (const tool of managementDeniedToolNames(context))
+        tools[tool] = "deny";
+    return {
+        defaultPolicy: {
+            tools: "deny",
+            bash: "deny",
+            mcp: "deny",
+            skills: "deny",
+            special: "deny",
+        },
+        tools,
+        bash: { "*": "deny" },
+        mcp: { "*": "deny" },
+        skills: { "*": "deny" },
+        special: {
+            doom_loop: "deny",
+            external_directory: "deny",
+        },
+    };
+}
+export function managementAgentToolNames(context) {
+    const denied = new Set([...ALWAYS_DENIED_TOOL_NAMES, ...(context.tools?.deny ?? [])]);
+    const safeTools = MANAGEMENT_AGENT_TOOL_NAMES.filter((tool) => !denied.has(tool));
+    const allowed = context.tools?.allow;
+    if (allowed === undefined || allowed.length === 0)
+        return [...safeTools];
+    return safeTools.filter((tool) => allowed.includes(tool));
+}
+export async function writeManagementPermissionSystemPolicy(agentDir, cwd, context) {
+    const policyAgentDir = join(agentDir, "management-embed", "permission-system", safePathSegment(context.user.rootUserId), createHash("sha256").update(cwd).digest("hex").slice(0, 16));
+    await mkdir(policyAgentDir, { recursive: true });
+    await writeFile(join(policyAgentDir, "pi-permissions.jsonc"), `${JSON.stringify(createManagementPermissionSystemPolicy(context), null, 2)}\n`, "utf8");
+    return policyAgentDir;
+}
+let runtimeEnvironmentQueue = Promise.resolve();
+export async function withRuntimeCreationEnvironment(env, action) {
+    const previousQueue = runtimeEnvironmentQueue;
+    let releaseQueue = () => undefined;
+    runtimeEnvironmentQueue = new Promise((resolve) => {
+        releaseQueue = resolve;
+    });
+    await previousQueue;
+    const previousValues = new Map();
+    for (const [key, value] of Object.entries(env)) {
+        previousValues.set(key, process.env[key]);
+        if (value === undefined)
+            Reflect.deleteProperty(process.env, key);
+        else
+            process.env[key] = value;
+    }
+    try {
+        return await action();
+    }
+    finally {
+        for (const [key, value] of previousValues) {
+            if (value === undefined)
+                Reflect.deleteProperty(process.env, key);
+            else
+                process.env[key] = value;
+        }
+        releaseQueue();
+    }
+}
+function managementDeniedToolNames(context) {
+    return [...ALWAYS_DENIED_TOOL_NAMES, ...(context.tools?.deny ?? [])];
+}
+function safePathSegment(value) {
+    const safe = value.trim().replace(/[^a-zA-Z0-9._-]+/gu, "-").replace(/^-+|-+$/gu, "");
+    return safe === "" ? "user" : safe.slice(0, 80);
+}
+//# sourceMappingURL=managementPermissionSystem.js.map

package/dist/server/sessions/managementPermissionSystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managementPermissionSystem.js","sourceRoot":"","sources":["../../../src/server/sessions/managementPermissionSystem.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,CAAC,MAAM,qCAAqC,GAAG,uCAAuC,CAAC;AAE7F,MAAM,2BAA2B,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAC;AACvG,MAAM,wBAAwB,GAAG;IAC/B,MAAM;IACN,OAAO;IACP,UAAU;IACV,uBAAuB;IACvB,YAAY;IACZ,MAAM;IACN,KAAK;IACL,MAAM;IACN,UAAU;IACV,WAAW;CACH,CAAC;AAsBX,MAAM,UAAU,sCAAsC,CAAC,OAA+B;IACpF,MAAM,KAAK,GAAoC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IAC/D,KAAK,MAAM,IAAI,IAAI,wBAAwB,CAAC,OAAO,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;IAC5E,KAAK,MAAM,IAAI,IAAI,yBAAyB,CAAC,OAAO,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;IAE5E,OAAO;QACL,aAAa,EAAE;YACb,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,MAAM;YACX,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,MAAM;SAChB;QACD,KAAK;QACL,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;QACrB,GAAG,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;QACpB,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;QACvB,OAAO,EAAE;YACP,SAAS,EAAE,MAAM;YACjB,kBAAkB,EAAE,MAAM;SAC3B;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAA+B;IACtE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,wBAAwB,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACtF,MAAM,SAAS,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;IACrC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC;IACzE,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qCAAqC,CAAC,QAAgB,EAAE,GAAW,EAAE,OAA+B;IACxH,MAAM,cAAc,GAAG,IAAI,CACzB,QAAQ,EACR,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EACxC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAC5D,CAAC;IACF,MAAM,KAAK,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,MAAM,SAAS,CAAC,IAAI,CAAC,cAAc,EAAE,sBAAsB,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,sCAAsC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvJ,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,IAAI,uBAAuB,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;AAEhD,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAI,GAAuC,EAAE,MAAwB;IACvH,MAAM,aAAa,GAAG,uBAAuB,CAAC;IAC9C,IAAI,YAAY,GAAe,GAAG,EAAE,CAAC,SAAS,CAAC;IAC/C,uBAAuB,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACtD,YAAY,GAAG,OAAO,CAAC;IACzB,CAAC,CAAC,CAAC;IACH,MAAM,aAAa,CAAC;IAEpB,MAAM,cAAc,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC7D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;;YAC7D,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAChC,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,EAAE,CAAC;IACxB,CAAC;YAAS,CAAC;QACT,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,cAAc,EAAE,CAAC;YAC1C,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;;gBAC7D,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAChC,CAAC;QACD,YAAY,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,OAA+B;IAChE,OAAO,CAAC,GAAG,wBAAwB,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACtF,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClD,CAAC"}

package/dist/server/sessions/piSessionService.js

@@ -1,5 +1,6 @@
 import { readFile, writeFile } from "node:fs/promises";
-import { AuthStorage, createAgentSessionFromServices, createAgentSessionRuntime, createAgentSessionServices, createBashToolDefinition, createEditToolDefinition, createFindToolDefinition, createGrepToolDefinition, createLsToolDefinition, createReadToolDefinition, createWriteToolDefinition, defineTool, getAgentDir, ModelRegistry, SessionManager, } from "@earendil-works/pi-coding-agent";
+import { basename, dirname, isAbsolute, relative, resolve } from "node:path";
+import { AuthStorage, createAgentSessionFromServices, createAgentSessionRuntime, createAgentSessionServices, createEditToolDefinition, createFindToolDefinition, createGrepToolDefinition, createLsToolDefinition, createReadToolDefinition, createWriteToolDefinition, defineTool, getAgentDir, ModelRegistry, SessionManager, } from "@earendil-works/pi-coding-agent";
 import { pageMessagesAtSafeBoundary } from "./messagePaging.js";
 import { BUILTIN_COMMANDS } from "./builtinCommands.js";
 import { SessionCommandService } from "./sessionCommandService.js";
@@ -14,7 +15,8 @@ import { cwdPathsEqual } from "../workingDirectory.js";
 import { createSpawnSessionToolDefinition } from "./spawnSessionTool.js";
 import { createSubsessionToolDefinitions } from "./spawnSubsessionTool.js";
 import { buildTranscriptView } from "./subsessionTranscript.js";
-import { createManagedAgentToolOptions } from "./managementAgentTools.js";
+import { createManagedAgentToolOptions, createManagedPythonToolDefinition } from "./managementAgentTools.js";
+import { PI_PERMISSION_SYSTEM_POLICY_AGENT_DIR, managementAgentToolNames, withRuntimeCreationEnvironment, writeManagementPermissionSystemPolicy } from "./managementPermissionSystem.js";
 import { archiveCandidateFromActiveSession, archiveCandidateFromArchivedRecord, archiveCandidateFromListEntry, archiveInputFromActiveSession, archiveInputFromCandidate, archiveInputFromListEntry, clientSessionFromArchivedRecord, compareArchivedRecords, } from "./sessionArchiveMapping.js";
 import { getBoolean, getProperty, getString, toClientEvent } from "./sessionUiEvents.js";
 const noopLogger = { info() { } };
@@ -60,6 +62,26 @@ function parsePromptStreamingBehavior(value) {
         return value;
     throw new Error('Prompt streamingBehavior must be "steer" or "followUp"');
 }
+const GLOBAL_AGENT_CONTEXT_FILE_NAMES = new Set(["AGENTS.md", "AGENTS.MD", "CLAUDE.md", "CLAUDE.MD"]);
+export function filterManagedGlobalContextFiles(cwd, agentDir, base) {
+    return {
+        agentsFiles: base.agentsFiles.filter((file) => {
+            const filename = basename(file.path);
+            if (!GLOBAL_AGENT_CONTEXT_FILE_NAMES.has(filename))
+                return true;
+            const fileDir = dirname(file.path);
+            if (cwdPathsEqual(fileDir, agentDir))
+                return false;
+            return pathInsideOrEqual(cwd, fileDir);
+        }),
+    };
+}
+function pathInsideOrEqual(parent, child) {
+    const normalizedParent = resolve(parent);
+    const normalizedChild = resolve(child);
+    const childRelativePath = relative(normalizedParent, normalizedChild);
+    return childRelativePath === "" || (!childRelativePath.startsWith("..") && !isAbsolute(childRelativePath));
+}
 function defaultCreateAgentRuntime(createRuntime, options) {
     if (!(options.sessionManager instanceof SessionManager))
         throw new Error("Default runtime creation requires an SDK SessionManager");
@@ -70,10 +92,17 @@ function defaultCreateAgentRuntime(createRuntime, options) {
 }
 function createDefaultRuntimeFactory(authStorage, modelRegistry, spawn, subsessions) {
     return async ({ cwd, agentDir, sessionManager, sessionStartEvent, managementContext }) => {
+        if (managementContext !== undefined) {
+            return createManagementRuntimeFactory(authStorage, modelRegistry, spawn, subsessions, managementContext)({
+                cwd,
+                agentDir,
+                sessionManager,
+                ...(sessionStartEvent === undefined ? {} : { sessionStartEvent }),
+            });
+        }
         const services = await createAgentSessionServices({ cwd, agentDir, authStorage, modelRegistry });
-        const managedToolOptions = managementContext === undefined ? undefined : createManagedAgentToolOptions(cwd, managementContext);
         const customTools = [
-            ...managedAgentToolDefinitions(cwd, managedToolOptions),
+            ...managedAgentToolDefinitions(cwd),
             ...(spawn === undefined ? [] : [defineTool(createSpawnSessionToolDefinition(cwd, { spawn }))]),
             ...(subsessions === undefined ? [] : createSubsessionToolDefinitions(cwd, subsessions).map((tool) => defineTool(tool))),
         ];
@@ -82,18 +111,48 @@ function createDefaultRuntimeFactory(authStorage, modelRegistry, spawn, subsessi
             sessionManager,
             ...(sessionStartEvent === undefined ? {} : { sessionStartEvent }),
             customTools,
-            ...(managedToolOptions === undefined ? {} : { noTools: "builtin" }),
         };
         const result = await createAgentSessionFromServices(options);
         return { ...result, services, diagnostics: services.diagnostics };
     };
 }
+function createManagementRuntimeFactory(authStorage, modelRegistry, spawn, subsessions, managementContext) {
+    return async ({ cwd, agentDir, sessionManager, sessionStartEvent }) => {
+        const policyAgentDir = await writeManagementPermissionSystemPolicy(agentDir, cwd, managementContext);
+        return withRuntimeCreationEnvironment({ [PI_PERMISSION_SYSTEM_POLICY_AGENT_DIR]: policyAgentDir }, async () => {
+            const services = await createAgentSessionServices({
+                cwd,
+                agentDir,
+                authStorage,
+                modelRegistry,
+                resourceLoaderOptions: {
+                    agentsFilesOverride: (base) => filterManagedGlobalContextFiles(cwd, agentDir, base),
+                },
+            });
+            const managedToolOptions = createManagedAgentToolOptions(cwd);
+            const customTools = [
+                ...managedAgentToolDefinitions(cwd, managedToolOptions),
+                createManagedPythonToolDefinition(cwd, managementContext),
+                ...(spawn === undefined ? [] : [defineTool(createSpawnSessionToolDefinition(cwd, { spawn }))]),
+                ...(subsessions === undefined ? [] : createSubsessionToolDefinitions(cwd, subsessions).map((tool) => defineTool(tool))),
+            ];
+            const options = {
+                services,
+                sessionManager,
+                ...(sessionStartEvent === undefined ? {} : { sessionStartEvent }),
+                customTools,
+                tools: managementAgentToolNames(managementContext),
+            };
+            const result = await createAgentSessionFromServices(options);
+            return { ...result, services, diagnostics: services.diagnostics };
+        });
+    };
+}
 function managedAgentToolDefinitions(cwd, options) {
     if (options === undefined)
         return [createPiWebEditToolDefinition(cwd)];
     return [
         defineTool(createReadToolDefinition(cwd, options.read)),
-        defineTool(createBashToolDefinition(cwd, options.bash)),
         createPiWebEditToolDefinition(cwd, options.edit),
         defineTool(createWriteToolDefinition(cwd, options.write)),
         defineTool(createGrepToolDefinition(cwd, options.grep)),
@@ -378,9 +437,9 @@ export class PiSessionService {
             : session.modelRegistry.getAvailable();
         return models.map(modelToClientModel);
     }
-    async setModel(ref, provider, modelId) {
+    async setModel(ref, provider, modelId, managementContext) {
         await this.assertWritable(ref);
-        const session = await this.getOrOpen(ref);
+        const session = await this.getOrOpen(ref, managementContext);
         session.modelRegistry.refresh();
         const candidates = session.scopedModels.length > 0
             ? session.scopedModels.map((scoped) => scoped.model)
@@ -394,9 +453,9 @@ export class PiSessionService {
         this.publishStatus(session);
         return this.statusFromSession(session);
     }
-    async cycleModel(ref, direction) {
+    async cycleModel(ref, direction, managementContext) {
         await this.assertWritable(ref);
-        const session = await this.getOrOpen(ref);
+        const session = await this.getOrOpen(ref, managementContext);
         const result = await session.cycleModel(direction);
         if (result === undefined)
             throw new Error(session.scopedModels.length > 0 ? "作用域内只有一个模型" : "只有一个可用模型");
@@ -404,13 +463,13 @@ export class PiSessionService {
         this.publishStatus(session);
         return this.statusFromSession(session);
     }
-    async availableThinkingLevels(ref) {
-        const session = await this.getOrOpen(ref);
+    async availableThinkingLevels(ref, managementContext) {
+        const session = await this.getOrOpen(ref, managementContext);
         return session.getAvailableThinkingLevels();
     }
-    async setThinkingLevel(ref, level) {
+    async setThinkingLevel(ref, level, managementContext) {
         await this.assertWritable(ref);
-        const session = await this.getOrOpen(ref);
+        const session = await this.getOrOpen(ref, managementContext);
         // pi owns the valid set; validate against the session's live levels rather
         // than a hardcoded union so this stays correct if pi changes the set.
         const available = session.getAvailableThinkingLevels();
@@ -422,9 +481,9 @@ export class PiSessionService {
         this.publishStatus(session);
         return this.statusFromSession(session);
     }
-    async cycleThinkingLevel(ref) {
+    async cycleThinkingLevel(ref, managementContext) {
         await this.assertWritable(ref);
-        const session = await this.getOrOpen(ref);
+        const session = await this.getOrOpen(ref, managementContext);
         const level = session.cycleThinkingLevel();
         if (level === undefined)
             throw new Error("当前模型不支持思考");