@coreplane/switchboard 1.223.0 → 1.225.0

package/dist/cli.js

@@ -11448,6 +11448,41 @@ var init_config3 = __esm({
   }
 });
 
+// ../../src/providers/types.ts
+function toolResultText(content) {
+  if (typeof content === "string") return content;
+  return content.map((p) => {
+    if (p.type === "text") return p.text;
+    if (p.type === "image") return `[image ${p.mediaType}, ${base64Bytes(p.data)} bytes]`;
+    return `[document ${p.name ?? "document"} (${p.mediaType}), ${base64Bytes(p.data)} bytes]`;
+  }).join("\n");
+}
+function capToolResultContent(content, cap = MAX_TOOL_RESULT_CHARS) {
+  const capText = (text) => text.length > cap ? `${text.slice(0, cap)}
+\u2026[tool result truncated: ${text.length - cap} of ${text.length} characters cut \u2014 ask for a narrower slice]` : text;
+  if (typeof content === "string") return capText(content);
+  return content.map((p) => p.type === "text" ? { ...p, text: capText(p.text) } : p);
+}
+function base64Bytes(b64) {
+  const padding = b64.endsWith("==") ? 2 : b64.endsWith("=") ? 1 : 0;
+  return Math.floor(b64.length * 3 / 4) - padding;
+}
+function parseModelRef(ref) {
+  const i = ref.indexOf("/");
+  if (i === -1) {
+    throw new Error(`Model "${ref}" must be qualified as "<provider>/<model>", e.g. "anthropic/claude-opus-5"`);
+  }
+  return { provider: ref.slice(0, i), model: ref.slice(i + 1) };
+}
+var MAX_TOOL_RESULT_CHARS, ANTHROPIC_API_KEY_ENV;
+var init_types2 = __esm({
+  "../../src/providers/types.ts"() {
+    "use strict";
+    MAX_TOOL_RESULT_CHARS = 12e4;
+    ANTHROPIC_API_KEY_ENV = "ANTHROPIC_API_KEY";
+  }
+});
+
 // ../../src/providers/anthropic.ts
 import Anthropic from "@anthropic-ai/sdk";
 function anthropicApiKey(providers, secrets) {
@@ -11568,12 +11603,12 @@ function usageFromAnthropic(u) {
   if (typeof o.cache_creation_input_tokens === "number") usage.cacheWriteTokens = o.cache_creation_input_tokens;
   return usage;
 }
-var ANTHROPIC_API_KEY_ENV, AnthropicProvider, EPHEMERAL, CACHEABLE_BLOCKS;
+var AnthropicProvider, EPHEMERAL, CACHEABLE_BLOCKS;
 var init_anthropic = __esm({
   "../../src/providers/anthropic.ts"() {
     "use strict";
     init_secrets2();
-    ANTHROPIC_API_KEY_ENV = "ANTHROPIC_API_KEY";
+    init_types2();
     AnthropicProvider = class {
       name;
       client;
@@ -11671,6 +11706,8 @@ function parseCostsConfig(raw) {
   const r = raw;
   if (typeof r.cloudflareAccountId !== "string" || !r.cloudflareAccountId)
     throw new Error("costs.cloudflareAccountId is required");
+  if (r.cloudflareAccountName !== void 0 && typeof r.cloudflareAccountName !== "string")
+    throw new Error("costs.cloudflareAccountName must be a string when given");
   if (!r.groups || typeof r.groups !== "object")
     throw new Error("costs.groups must be a mapping of group \u2192 { workers, containerApps }");
   const groups = {};
@@ -11693,6 +11730,7 @@ function parseCostsConfig(raw) {
   }
   return {
     cloudflareAccountId: r.cloudflareAccountId,
+    ...typeof r.cloudflareAccountName === "string" && r.cloudflareAccountName ? { cloudflareAccountName: r.cloudflareAccountName } : {},
     cloudflareTokenEnv: typeof r.cloudflareTokenEnv === "string" ? r.cloudflareTokenEnv : DEFAULT_CF_TOKEN_ENV,
     anthropicAdminKeyEnv: typeof r.anthropicAdminKeyEnv === "string" ? r.anthropicAdminKeyEnv : DEFAULT_ANTHROPIC_ADMIN_ENV,
     groups
@@ -11772,7 +11810,7 @@ function eachDay(range) {
   for (let d = range.from; d <= range.to; d = addDays2(d, 1)) out.push(d);
   return out;
 }
-function buildCostReport(group, cfg, usage, llm, range) {
+function buildCostReport(group, cfg, usage, llm, range, meta) {
   const attribution = attributionOf(cfg, usage);
   const workers = new Set(cfg.workers);
   const namespaces = attribution.durableObjectNamespaces;
@@ -11890,7 +11928,12 @@ function buildCostReport(group, cfg, usage, llm, range) {
     llmAvailable: llm !== null && !!cfg.anthropicWorkspaceId,
     days,
     totals: { cloudUsd, llmUsd, total: cloudUsd + llmUsd, byResource },
-    account: { cloudUsd: accountCloudUsd },
+    generatedAt: meta.generatedAt ?? systemClock(),
+    account: {
+      id: meta.accountId,
+      ...meta.accountName ? { name: meta.accountName } : {},
+      cloudUsd: accountCloudUsd
+    },
     attribution
   };
 }
@@ -11931,9 +11974,14 @@ function createCostsService(cfg, cloudflare, llm, now = () => new Date(systemClo
     async report(group, daysParam) {
       const g = cfg.groups[group];
       if (!g) throw new Error(`unknown cost group ${group}`);
-      const range = resolveRange(daysParam, now());
+      const at = now();
+      const range = resolveRange(daysParam, at);
       const [usage, llmRows] = await Promise.all([cloudflare.fetchUsage(range), llm.fetchDailyCost(range)]);
-      return buildCostReport(group, g, usage, llmRows, range);
+      return buildCostReport(group, g, usage, llmRows, range, {
+        accountId: cfg.cloudflareAccountId,
+        accountName: cfg.cloudflareAccountName,
+        generatedAt: at.getTime()
+      });
     }
   };
 }
@@ -16685,7 +16733,7 @@ var init_connect = __esm({
 
 // ../../src/mcp/types.ts
 var McpError;
-var init_types2 = __esm({
+var init_types3 = __esm({
   "../../src/mcp/types.ts"() {
     "use strict";
     McpError = class extends Error {
@@ -16780,7 +16828,7 @@ var MCP_PROTOCOL_VERSION, MCP_REQUEST_TIMEOUT_MS, MCP_MAX_RESPONSE_BYTES, MCP_MA
 var init_client = __esm({
   "../../src/mcp/client.ts"() {
     "use strict";
-    init_types2();
+    init_types3();
     MCP_PROTOCOL_VERSION = "2025-06-18";
     MCP_REQUEST_TIMEOUT_MS = 3e4;
     MCP_MAX_RESPONSE_BYTES = 2 * 1024 * 1024;
@@ -17495,7 +17543,7 @@ var init_bridge = __esm({
   "../../src/mcp/bridge.ts"() {
     "use strict";
     init_commandRegistry();
-    init_types2();
+    init_types3();
     init_classify();
     MCP_TOOL_NAME_MAX = 64;
     MCP_TOOL_PREFIX = "mcp__";
@@ -18527,40 +18575,6 @@ var init_mcp = __esm({
   }
 });
 
-// ../../src/providers/types.ts
-function toolResultText(content) {
-  if (typeof content === "string") return content;
-  return content.map((p) => {
-    if (p.type === "text") return p.text;
-    if (p.type === "image") return `[image ${p.mediaType}, ${base64Bytes(p.data)} bytes]`;
-    return `[document ${p.name ?? "document"} (${p.mediaType}), ${base64Bytes(p.data)} bytes]`;
-  }).join("\n");
-}
-function capToolResultContent(content, cap = MAX_TOOL_RESULT_CHARS) {
-  const capText = (text) => text.length > cap ? `${text.slice(0, cap)}
-\u2026[tool result truncated: ${text.length - cap} of ${text.length} characters cut \u2014 ask for a narrower slice]` : text;
-  if (typeof content === "string") return capText(content);
-  return content.map((p) => p.type === "text" ? { ...p, text: capText(p.text) } : p);
-}
-function base64Bytes(b64) {
-  const padding = b64.endsWith("==") ? 2 : b64.endsWith("=") ? 1 : 0;
-  return Math.floor(b64.length * 3 / 4) - padding;
-}
-function parseModelRef(ref) {
-  const i = ref.indexOf("/");
-  if (i === -1) {
-    throw new Error(`Model "${ref}" must be qualified as "<provider>/<model>", e.g. "anthropic/claude-opus-5"`);
-  }
-  return { provider: ref.slice(0, i), model: ref.slice(i + 1) };
-}
-var MAX_TOOL_RESULT_CHARS;
-var init_types3 = __esm({
-  "../../src/providers/types.ts"() {
-    "use strict";
-    MAX_TOOL_RESULT_CHARS = 12e4;
-  }
-});
-
 // ../../src/core/memory/scorer.ts
 function tokenize2(text) {
   return text.toLowerCase().match(/[a-z0-9]+/g) ?? [];
@@ -19383,7 +19397,7 @@ async function memoryContextBlock(organization, cfg, injected, query, userId, sc
 var init_memory = __esm({
   "../../src/core/memory/index.ts"() {
     "use strict";
-    init_types3();
+    init_types2();
     init_scorer();
     init_scope();
     init_stores();
@@ -22578,7 +22592,9 @@ function afterReply(deps, ctx) {
     scheduleReflection({
       cfg: deps.config.config.memory,
       store: deps.memory,
-      providers: deps.providers,
+      // The extractor's one call goes through pi's model library
+      // (harness-pi.md item 13), never the loop's own provider adapters.
+      providers: deps.completions,
       runModelRef: resolved.modelRef,
       gate: { toolCalls, historyTurns: history.length, agentName: resolved.agentName },
       threadKey: msg.threadKey,
@@ -25123,7 +25139,7 @@ var init_resolve = __esm({
     init_registry();
     init_profile();
     init_directives();
-    init_types3();
+    init_types2();
     init_factory();
     init_githubRepoProbe();
     init_repoContext();
@@ -28206,7 +28222,7 @@ async function routeRequest(deps, ctx) {
     if (deps.routeModel) model = deps.routeModel;
     else {
       const ref = parseModelRef(modelRef2);
-      model = providerRouteModel(deps.providers.get(ref.provider), ref.model, {
+      model = providerRouteModel(deps.completions.get(ref.provider), ref.model, {
         ...cfg.routing?.answer ? { answer: cfg.routing.answer } : {}
       });
     }
@@ -28276,7 +28292,7 @@ var init_route = __esm({
     init_registry();
     init_workspace();
     init_config2();
-    init_types3();
+    init_types2();
     init_redact();
     init_statusCardFrame();
     init_spawn();
@@ -28883,7 +28899,7 @@ var MAX_CONSECUTIVE_INFRA_FAILURES, HardStopError, HARD_STOP_MESSAGE, wrapUpNote
 var init_runner = __esm({
   "../../src/runner.ts"() {
     "use strict";
-    init_types3();
+    init_types2();
     init_runEvents();
     init_threadAdmission();
     init_executor();
@@ -30673,7 +30689,7 @@ var init_provision = __esm({
     init_resident();
     init_memory();
     init_runBearers();
-    init_types3();
+    init_types2();
     init_skills2();
     init_source();
     init_configAwareness();
@@ -31681,7 +31697,7 @@ var init_bridge2 = __esm({
         return this.answerText ?? this.heldAnswer;
       }
       observe(event) {
-        const out = { replies: [], settled: false, turnEnded: false };
+        const out = { replies: [], settled: false };
         const disposition = PI_EVENT_DISPOSITION[event.type];
         if (disposition === void 0) {
           this.note("harness_error", `pi emitted an event kind this build does not know: ${redactAndCap(event.type, 80)}`);
@@ -31698,9 +31714,6 @@ var init_bridge2 = __esm({
           case "agent_settled":
             out.settled = true;
             break;
-          case "turn_end":
-            out.turnEnded = true;
-            break;
           case "message_start":
             if (isRecord3(event.message) && event.message.role === "assistant") this.assistantStartedAt = this.deps.clock();
             break;
@@ -31893,6 +31906,7 @@ var init_bridge2 = __esm({
 });
 
 // ../../src/core/harness/pi/mirror.ts
+import { isDeepStrictEqual } from "node:util";
 function partsOf2(content) {
   if (typeof content === "string") return [{ type: "text", text: content }];
   if (!Array.isArray(content)) return [];
@@ -32042,11 +32056,14 @@ var init_mirror = __esm({
       constructor(deps) {
         this.deps = deps;
         this.idx = deps.seedLength;
+        this.mirroredTail = deps.mirroredTail;
       }
       deps;
       idx;
       pendingUser = [];
-      seedEchoed = false;
+      /** pi is about to echo the seed's prompt as a user message (see `expectSeedEcho`). */
+      seedEchoPending = false;
+      mirroredTail;
       iteration = 0;
       /** The highest ledger inbox seq folded in so far (run-history item 40). */
       inboxConsumedSeq = 0;
@@ -32054,19 +32071,43 @@ var init_mirror = __esm({
       get wired() {
         return this.deps.onStep !== void 0;
       }
+      /** pi answered the seed's prompt: the first user message without results
+       *  that follows is its echo — the seed, on the ledger already — and is not
+       *  written twice. A continue prompt (harness-pi item 8) expects none: its
+       *  echo is a turn the model was told, folded in like a steer's text. */
+      expectSeedEcho() {
+        this.seedEchoPending = true;
+      }
+      /** The row about to be written, against the transcript's tail — compared
+       *  once, with the first row the mirror meets: equal means the ledger holds
+       *  it already (read again, harness-pi item 8), together with the results
+       *  pending before it, which were its step's user turn. */
+      alreadyHeld(row) {
+        const tail = this.mirroredTail;
+        if (tail === void 0) return false;
+        this.mirroredTail = void 0;
+        if (!isDeepStrictEqual(row, tail)) return false;
+        this.pendingUser = [];
+        return true;
+      }
+      /** Feeds one finished message; answers whether the ledger now holds
+       *  everything up to it — a step written, or an assistant turn found already
+       *  there — so the harness can move the row's offset past it. A result or a
+       *  steer's text waits in memory for the next step, and the answer is no. */
       async onMessage(message3, turn) {
-        if (!this.deps.onStep) return;
+        if (!this.deps.onStep) return false;
         const chat = chatMessageOf(message3);
-        if (!chat) return;
-        if (chat.content.length === 0) return;
+        if (!chat) return false;
+        if (chat.content.length === 0) return false;
         if (chat.role === "user") {
-          if (!this.seedEchoed && !chat.content.some((p) => p.type === "tool_result")) {
-            this.seedEchoed = true;
-            return;
+          if (this.seedEchoPending && !chat.content.some((p) => p.type === "tool_result")) {
+            this.seedEchoPending = false;
+            return false;
           }
           this.pendingUser.push(...chat.content);
-          return;
+          return false;
         }
+        if (this.alreadyHeld({ turn: chat })) return true;
         const turns = [];
         if (this.pendingUser.length > 0) turns.push({ role: "user", content: this.pendingUser });
         this.pendingUser = [];
@@ -32083,13 +32124,16 @@ var init_mirror = __esm({
         };
         this.idx += turns.length;
         await this.deps.onStep(report2);
+        return true;
       }
       /** pi compacted (session-log item 6): the results pending since the last
        *  assistant turn go as the user turn they would have been, the entry as the
        *  row after them — its own step with nothing in flight, so the log holds
-       *  the summary where pi wrote it and the index moves past it. */
+       *  the summary where pi wrote it and the index moves past it. Answers as
+       *  `onMessage` does: the ledger holds everything up to the entry. */
       async onCompaction(entry, turn) {
-        if (!this.deps.onStep) return;
+        if (!this.deps.onStep) return false;
+        if (this.alreadyHeld({ compaction: entry })) return true;
         const turns = [];
         if (this.pendingUser.length > 0) turns.push({ role: "user", content: this.pendingUser });
         this.pendingUser = [];
@@ -32105,6 +32149,7 @@ var init_mirror = __esm({
         };
         this.idx += turns.length + 1;
         await this.deps.onStep(report2);
+        return true;
       }
     };
   }
@@ -32121,11 +32166,16 @@ var init_transport = __esm({
       constructor(deps) {
         this.deps = deps;
         this.offset = deps.offset ?? 0;
+        this.consumedOffset = this.offset;
         this.lines = this.read();
       }
       deps;
-      /** The byte the next read starts at — the re-attach fact. */
+      /** The byte the next read starts at: the read position, moved by whole chunks. */
       offset;
+      /** The boundary after the record last handed out, moved by records: where a
+       *  reader that has seen everything so far continues from — the harness's
+       *  re-attach fact, taken when nothing handed out is left unwritten. */
+      consumedOffset;
       /** pi was found dead while the harness still listened. */
       exited = false;
       closed = false;
@@ -32178,11 +32228,15 @@ var init_transport = __esm({
       /** Complete lines out of the buffered bytes; the partial tail waits for more. */
       *split(chunk) {
         this.buffer = Buffer.concat([this.buffer, Buffer.from(chunk)]);
+        const base = this.offset - this.buffer.length;
         let start3 = 0;
         for (let i = this.buffer.indexOf(NEWLINE, start3); i >= 0; i = this.buffer.indexOf(NEWLINE, start3)) {
           let line3 = this.buffer.subarray(start3, i).toString("utf8");
           if (line3.endsWith("\r")) line3 = line3.slice(0, -1);
-          if (line3.length > 0) yield line3;
+          if (line3.length > 0) {
+            this.consumedOffset = base + i + 1;
+            yield line3;
+          }
           start3 = i + 1;
         }
         this.buffer = this.buffer.subarray(start3);
@@ -32192,6 +32246,7 @@ var init_transport = __esm({
 });
 
 // ../../src/core/harness/pi/harness.ts
+import { randomUUID as randomUUID2 } from "node:crypto";
 function piHarnessFactsOf(value) {
   if (typeof value !== "object" || value === null) return void 0;
   const v = value;
@@ -32252,6 +32307,13 @@ function settlementResults(settlements) {
     }))
   };
 }
+function ledgerTailOf(resume) {
+  if (!resume) return void 0;
+  const closing = resume.compactions?.filter((c) => c.before === resume.messages.length).at(-1);
+  if (closing) return { compaction: closing.entry };
+  const last = resume.messages.at(-1);
+  return last?.role === "assistant" ? { turn: last } : void 0;
+}
 function settlementAnswer(s) {
   return { content: [{ type: "text", text: settlementText(s) }], isError: true };
 }
@@ -32296,10 +32358,12 @@ async function runPiHarness(deps, run2) {
     };
   }
   bridge.turns = run2.resume?.turn ?? 0;
+  const tail = ledgerTailOf(run2.resume);
   const mirror = new PiMirror({
     onStep: run2.onStep,
-    seedLength: run2.resume?.messages.length ?? run2.messages.length,
-    remainingMs: () => deadline - now()
+    seedLength: run2.resume ? run2.resume.messages.length + (run2.resume.compactions?.length ?? 0) : run2.messages.length,
+    remainingMs: () => deadline - now(),
+    ...tail ? { mirroredTail: tail } : {}
   });
   mirror.inboxConsumedSeq = run2.resume?.inboxConsumedSeq ?? 0;
   let writeUp;
@@ -32336,12 +32400,17 @@ async function runPiHarness(deps, run2) {
   let pid;
   let transport;
   let facts2;
+  let mirrored = 0;
   const save = () => {
     if (facts2) {
-      if (transport) facts2 = { ...facts2, logOffset: transport.offset };
+      facts2 = { ...facts2, logOffset: mirrored };
       run2.saveFacts?.(facts2);
     }
   };
+  const held = () => {
+    if (transport) mirrored = transport.consumedOffset;
+    save();
+  };
   let catchingUp = false;
   try {
     const recorded = run2.resume?.facts;
@@ -32368,13 +32437,14 @@ async function runPiHarness(deps, run2) {
     if (reattached && recorded && paths !== void 0) {
       pid = recorded.pid;
       facts2 = { ...recorded, ...recorded.container === void 0 && here !== void 0 ? { container: here } : {} };
+      mirrored = recorded.logOffset;
       transport = new PiRpcTransport({
         container,
         paths,
         pid,
         pollMs: deps.pollMs ?? 750,
         sleep: deps.sleep,
-        offset: recorded.logOffset
+        offset: mirrored
       });
       catchingUp = true;
       const inFlight = run2.resume?.settlements.length ?? 0;
@@ -32452,12 +32522,15 @@ async function runPiHarness(deps, run2) {
       save();
       transport = new PiRpcTransport({ container, paths, pid, pollMs: deps.pollMs ?? 750, sleep: deps.sleep });
     }
-    transport.send({ id: "retry", type: "set_auto_retry", enabled: false });
-    transport.send({ id: "state", type: "get_state" });
+    const stamp = `${now()}-${randomUUID2().slice(0, 8)}`;
+    const ids = { retry: `retry:${stamp}`, state: `state:${stamp}`, prompt: `prompt:${stamp}` };
+    const continuing = reattached || run2.resume !== void 0;
+    transport.send({ id: ids.retry, type: "set_auto_retry", enabled: false });
+    transport.send({ id: ids.state, type: "get_state" });
     if (reattached)
-      transport.send({ id: "prompt", type: "prompt", message: CONTINUE_PROMPT, streamingBehavior: "steer" });
-    else if (run2.resume) transport.send({ id: "prompt", type: "prompt", message: CONTINUE_PROMPT });
-    else transport.send({ id: "prompt", type: "prompt", ...promptOf(run2.messages) });
+      transport.send({ id: ids.prompt, type: "prompt", message: CONTINUE_PROMPT, streamingBehavior: "steer" });
+    else if (run2.resume) transport.send({ id: ids.prompt, type: "prompt", message: CONTINUE_PROMPT });
+    else transport.send({ id: ids.prompt, type: "prompt", ...promptOf(run2.messages) });
     let warned = false;
     let settled = false;
     let stopMode;
@@ -32575,19 +32648,20 @@ ${stagedLine}` : prompt,
       }
       if (obs.response) {
         const r = obs.response;
-        if (r.id === "state" && r.success === true && typeof r.data?.sessionFile === "string") {
+        if (r.id === ids.state && r.success === true && typeof r.data?.sessionFile === "string") {
           const data = r.data;
           facts2 = { ...facts2 ?? { pid, logOffset: 0, root: paths.dir }, sessionFile: String(data.sessionFile) };
           save();
         }
-        if (r.id === "prompt") {
+        if (r.id === ids.prompt) {
           catchingUp = false;
           if (r.success === false) throw new PromptRefused(String(r.error ?? "no reason"));
+          if (!continuing) mirror.expectSeedEcho();
         }
       }
-      if (obs.message) await mirror.onMessage(obs.message, bridge.turns);
+      if (obs.message && await mirror.onMessage(obs.message, bridge.turns)) held();
       if (obs.compaction) {
-        await mirror.onCompaction(obs.compaction, bridge.turns);
+        if (await mirror.onCompaction(obs.compaction, bridge.turns)) held();
         if (!writeUp && !hardStopped && !catchingUp) {
           let notepad;
           let unavailable = false;
@@ -32608,7 +32682,6 @@ ${stagedLine}` : prompt,
           note("harness_error", `a model call failed while the bot was away (${obs.providerError}); continuing`);
         else providerError = obs.providerError;
       }
-      if (obs.turnEnded) save();
       if (obs.settled && !catchingUp) {
         settled = true;
         break;
@@ -32622,8 +32695,8 @@ ${stagedLine}` : prompt,
     }
     if (bypass) throw bypass;
     if (!settled) {
-      const tail = await container.tail(paths.errLog, 2e3);
-      throw new Error(`pi exited before the run settled${tail.trim() ? `: ${redactAndCap(tail.trim(), 400)}` : ""}`);
+      const tail2 = await container.tail(paths.errLog, 2e3);
+      throw new Error(`pi exited before the run settled${tail2.trim() ? `: ${redactAndCap(tail2.trim(), 400)}` : ""}`);
     }
     if (providerError !== void 0) throw new Error(`the model call failed: ${providerError}`);
     const text = bridge.answer() ?? "";
@@ -33949,7 +34022,7 @@ var init_runLoop = __esm({
     "use strict";
     init_profile();
     init_runner();
-    init_types3();
+    init_types2();
     init_workspace();
     init_select();
     init_botHostContainer();
@@ -36787,8 +36860,8 @@ var init_types5 = __esm({
 });
 
 // ../../src/core/runLedger/writeThrough.ts
-import { randomUUID as randomUUID2 } from "node:crypto";
-function mintGeneration(now = Date.now, random = randomUUID2) {
+import { randomUUID as randomUUID3 } from "node:crypto";
+function mintGeneration(now = Date.now, random = randomUUID3) {
   const stamp = new Date(now()).toISOString().replace(/[-:]/g, "").replace(/\.\d{3}Z$/, "Z");
   const gen = `${stamp}-${random().replace(/-/g, "").slice(0, 8)}`;
   if (!GEN_PATTERN.test(gen)) throw new Error(`minted generation ${gen} does not match GEN_PATTERN`);
@@ -37510,7 +37583,7 @@ var OpenAICompatProvider;
 var init_openaiCompat = __esm({
   "../../src/providers/openaiCompat.ts"() {
     "use strict";
-    init_types3();
+    init_types2();
     init_secrets2();
     OpenAICompatProvider = class {
       name;
@@ -37618,6 +37691,241 @@ var init_registry3 = __esm({
   }
 });
 
+// ../../src/core/harness/piAi.ts
+import { anthropicMessagesApi } from "@earendil-works/pi-ai/api/anthropic-messages.lazy";
+import { openAICompletionsApi } from "@earendil-works/pi-ai/api/openai-completions.lazy";
+function piApiFor(type) {
+  return type === "anthropic" ? "anthropic-messages" : "openai-completions";
+}
+function piStreamOptions(api, req, key) {
+  const shared = {
+    ...key !== void 0 ? { apiKey: key } : { apiKey: "unused", headers: { Authorization: null } },
+    maxTokens: req.maxTokens,
+    ...req.signal ? { signal: req.signal } : {},
+    cacheRetention: req.cacheTtl === "1h" ? "long" : "short"
+  };
+  if (!req.toolChoice) return shared;
+  return api === "anthropic-messages" ? { ...shared, toolChoice: { type: "tool", name: req.toolChoice.name } } : { ...shared, toolChoice: { type: "function", function: { name: req.toolChoice.name } } };
+}
+function toPiContext(req, model, clock3) {
+  const callNames = /* @__PURE__ */ new Map();
+  const messages = [];
+  for (const turn of req.messages) {
+    if (turn.role === "assistant") {
+      for (const part of turn.content) if (part.type === "tool_use") callNames.set(part.id, part.name);
+      messages.push(assistantMessage(turn, model, clock3()));
+    } else {
+      messages.push(...userMessages(turn, callNames, clock3()));
+    }
+  }
+  const tools = req.tools?.map((t) => ({
+    name: t.name,
+    description: t.description,
+    parameters: t.inputSchema
+  }));
+  return {
+    ...req.system !== void 0 ? { systemPrompt: req.system } : {},
+    messages,
+    ...tools && tools.length > 0 ? { tools } : {}
+  };
+}
+function assistantMessage(turn, model, timestamp) {
+  const content = [];
+  for (const part of turn.content) {
+    if (part.type === "text") content.push({ type: "text", text: part.text });
+    else if (part.type === "tool_use")
+      content.push({ type: "toolCall", id: part.id, name: part.name, arguments: argumentsOf(part.input) });
+    else if (part.type === "thinking")
+      content.push({ type: "thinking", thinking: part.thinking, thinkingSignature: part.signature });
+    else if (part.type === "redacted_thinking")
+      content.push({ type: "thinking", thinking: "", thinkingSignature: part.data, redacted: true });
+  }
+  return {
+    role: "assistant",
+    content,
+    api: model.api,
+    provider: model.provider,
+    model: model.id,
+    usage: { ...ZERO_USAGE, cost: { ...ZERO_USAGE.cost } },
+    stopReason: content.some((p) => p.type === "toolCall") ? "toolUse" : "stop",
+    timestamp
+  };
+}
+function argumentsOf(input) {
+  return typeof input === "object" && input !== null && !Array.isArray(input) ? input : {};
+}
+function userMessages(turn, callNames, timestamp) {
+  const out = [];
+  const rest = [];
+  for (const part of turn.content) {
+    if (part.type === "tool_result") {
+      const result = {
+        role: "toolResult",
+        toolCallId: part.toolUseId,
+        toolName: callNames.get(part.toolUseId) ?? part.toolUseId,
+        content: toolResultParts(part.content),
+        isError: part.isError === true,
+        timestamp
+      };
+      out.push(result);
+    } else {
+      const visible = visiblePart(part);
+      if (visible) rest.push(visible);
+    }
+  }
+  if (rest.length > 0) out.push({ role: "user", content: rest, timestamp });
+  return out;
+}
+function toolResultParts(content) {
+  if (typeof content === "string") return [{ type: "text", text: content }];
+  return content.map((part) => visiblePart(part)).filter((p) => p !== void 0);
+}
+function visiblePart(part) {
+  switch (part.type) {
+    case "text":
+      return { type: "text", text: part.text };
+    case "image":
+      return { type: "image", data: part.data, mimeType: part.mediaType };
+    case "document":
+      return {
+        type: "text",
+        text: `
+
+[attached file: ${part.name ?? "document"} (${part.mediaType}); not supported by this provider]
+`
+      };
+    default:
+      return void 0;
+  }
+}
+function fromPiMessage(message3, provider) {
+  if (message3.stopReason === "error" || message3.stopReason === "aborted") {
+    throw new Error(`Provider "${provider}" (${message3.model}): ${message3.errorMessage ?? "the model call failed"}`);
+  }
+  const content = [];
+  for (const part of message3.content) {
+    if (part.type === "text") content.push({ type: "text", text: part.text });
+    else if (part.type === "toolCall")
+      content.push({ type: "tool_use", id: part.id, name: part.name, input: part.arguments });
+    else if (part.type === "thinking") {
+      content.push(
+        part.redacted ? { type: "redacted_thinking", data: part.thinkingSignature ?? "" } : { type: "thinking", thinking: part.thinking, signature: part.thinkingSignature ?? "" }
+      );
+    }
+  }
+  return { content, stopReason: STOP_REASONS[message3.stopReason] ?? "other", usage: usageOf(message3.usage) };
+}
+function usageOf(usage) {
+  return {
+    inputTokens: usage.input,
+    outputTokens: usage.output,
+    cacheReadTokens: usage.cacheRead,
+    cacheWriteTokens: usage.cacheWrite
+  };
+}
+var ANTHROPIC_BASE_URL, ZERO_RATES, ZERO_USAGE, CONTEXT_WINDOW, PiAiProviders, PiAiProvider, STOP_REASONS;
+var init_piAi = __esm({
+  "../../src/core/harness/piAi.ts"() {
+    "use strict";
+    init_types2();
+    init_secrets2();
+    init_clock();
+    ANTHROPIC_BASE_URL = "https://api.anthropic.com";
+    ZERO_RATES = { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 };
+    ZERO_USAGE = { ...ZERO_RATES, totalTokens: 0, cost: { ...ZERO_RATES, total: 0 } };
+    CONTEXT_WINDOW = 2e5;
+    PiAiProviders = class {
+      providers = /* @__PURE__ */ new Map();
+      constructor(configs, opts = {}) {
+        for (const [name, cfg] of Object.entries(configs)) this.providers.set(name, new PiAiProvider(name, cfg, opts));
+      }
+      get(name) {
+        const provider = this.providers.get(name);
+        if (!provider) {
+          throw new Error(`Unknown provider "${name}". Configured providers: ${[...this.providers.keys()].join(", ")}`);
+        }
+        return provider;
+      }
+      names() {
+        return [...this.providers.keys()];
+      }
+    };
+    PiAiProvider = class {
+      name;
+      api;
+      baseUrl;
+      keyEnv;
+      secrets;
+      clock;
+      scripted;
+      fetchImpl;
+      streams;
+      constructor(name, cfg, opts = {}) {
+        this.name = name;
+        this.api = piApiFor(cfg.type);
+        if (cfg.type === "openai-compatible" && !cfg.baseUrl) {
+          throw new Error(`Provider "${name}": openai-compatible providers require baseUrl`);
+        }
+        this.baseUrl = (cfg.baseUrl ?? ANTHROPIC_BASE_URL).replace(/\/+$/, "");
+        this.keyEnv = cfg.apiKeyEnv ?? (cfg.type === "anthropic" ? ANTHROPIC_API_KEY_ENV : void 0);
+        this.secrets = opts.secrets ?? processSecrets;
+        this.clock = opts.clock ?? systemClock;
+        this.scripted = opts.apis?.[this.api];
+        this.fetchImpl = opts.fetch;
+      }
+      /** The model pi is handed for one request: the block as its provider, the
+       *  request's output cap as its own, no thinking (neither caller asks for
+       *  any), text and images in, the zero rate card. */
+      model(id, maxTokens) {
+        return {
+          id,
+          name: id,
+          api: this.api,
+          provider: this.name,
+          baseUrl: this.baseUrl,
+          reasoning: false,
+          input: ["text", "image"],
+          cost: { ...ZERO_RATES },
+          contextWindow: CONTEXT_WINDOW,
+          maxTokens
+        };
+      }
+      /** One completion: the key revealed into pi's request options and nowhere
+       *  else, the request in pi's shape, pi's adapter on the wire, its final
+       *  message back in the vocabulary. A missing key fails here, by variable
+       *  name, before any request; a provider error or an abort is thrown with
+       *  pi's message — `route()` and `reflect()` catch either as they catch a
+       *  native adapter's throw. */
+      async complete(req) {
+        let key;
+        if (this.keyEnv !== void 0) {
+          const secret2 = this.secrets.named(this.keyEnv);
+          if (!secret2) throw new Error(`Provider "${this.name}": ${this.keyEnv} is not set`);
+          key = secret2.reveal();
+        }
+        const model = this.model(req.model, req.maxTokens);
+        const options = {
+          ...piStreamOptions(this.api, req, key),
+          ...this.fetchImpl ? { fetch: this.fetchImpl } : {}
+        };
+        const message3 = await this.api$().stream(model, toPiContext(req, model, this.clock), options).result();
+        return fromPiMessage(message3, this.name);
+      }
+      /** pi's implementation of this provider's API, loaded on the first call and
+       *  kept; a scripted one stands in for it in tests. */
+      api$() {
+        this.streams ??= this.scripted ?? (this.api === "anthropic-messages" ? anthropicMessagesApi() : openAICompletionsApi());
+        return this.streams;
+      }
+    };
+    STOP_REASONS = {
+      stop: "end_turn",
+      toolUse: "tool_use",
+      length: "max_tokens"
+    };
+  }
+});
+
 // ../../src/mcp/secretStore.ts
 import { existsSync as existsSync13, mkdirSync as mkdirSync9, readFileSync as readFileSync15, writeFileSync as writeFileSync8 } from "node:fs";
 import { dirname as dirname10, resolve as resolve10 } from "node:path";
@@ -37806,7 +38114,7 @@ var init_mcp2 = __esm({
     init_sealed();
     init_secretStore();
     init_service();
-    init_types2();
+    init_types3();
     init_registry2();
     init_client();
     init_fake();
@@ -39981,7 +40289,7 @@ var init_webShell = __esm({
     init_favicon();
     init_residentsModel();
     init_webSeed();
-    PAGE_CSP = "default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'";
+    PAGE_CSP = "default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; media-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'";
     FORM_PAGE_CSP = PAGE_CSP.replace("form-action 'none'", "form-action 'self'");
     WEB_HTML_HEADERS = {
       "content-type": "text/html; charset=utf-8",
@@ -42714,6 +43022,7 @@ var init_modelProxy = __esm({
     "use strict";
     init_anthropic();
     init_openaiCompat();
+    init_types2();
     init_http();
     ANTHROPIC_MESSAGES_PATH = "/v1/messages";
     OPENAI_CHAT_COMPLETIONS_PATH = "/v1/chat/completions";
@@ -43076,7 +43385,7 @@ var init_relay = __esm({
   "../../src/core/harness/pi/relay.ts"() {
     "use strict";
     init_tracingExecutor();
-    init_types3();
+    init_types2();
     init_awaitChildren();
     init_runEvents();
     init_toolRules();
@@ -44675,6 +44984,7 @@ async function runBot() {
   });
   console.log(`[capabilities] ${JSON.stringify(capabilities)}`);
   const providers = new ProviderRegistry(config.config.providers);
+  const completions = new PiAiProviders(config.config.providers);
   const skills = new BundledSkillStore(DEFAULT_SKILLS_DIR);
   let slackEmailLookup;
   const mcpWiring = buildMcp(config, processSecrets, {
@@ -44782,6 +45092,7 @@ async function runBot() {
   const deps = {
     config,
     providers,
+    completions,
     spanLog,
     runBearers,
     harness: {
@@ -45252,6 +45563,7 @@ var init_index = __esm({
     init_config2();
     init_capabilities();
     init_registry3();
+    init_piAi();
     init_slack();
     init_slackChannelDirectory();
     init_http();
@@ -45370,6 +45682,7 @@ init_memory();
 init_residentAdmin();
 init_residentFleet();
 init_registry3();
+init_piAi();
 init_skills2();
 init_mcp2();
 init_source();
@@ -45697,6 +46010,7 @@ async function main() {
   globalThis.console = new Console({ stdout: process.stderr, stderr: process.stderr });
   const { config, runStore } = await bot();
   const providers = new ProviderRegistry(config.config.providers);
+  const completions = new PiAiProviders(config.config.providers);
   const skills = new BundledSkillStore(DEFAULT_SKILLS_DIR);
   const capabilities = capabilitiesFrom(config.config, publicEnv(), processSecrets, {
     meatBinary: meatOnPath(publicEnv())
@@ -45713,6 +46027,7 @@ async function main() {
   const deps = {
     config,
     providers,
+    completions,
     capabilities,
     residentFleet,
     ...artifacts ? { artifacts } : {},