@hadooppei/hwcode 0.1.0 → 0.2.0

package/.pi/extensions/cwd.ts

@@ -7,7 +7,7 @@ import { createLocalBashOperations } from "@earendil-works/pi-coding-agent";
 
 import {
 	canonicalizeDirectory,
-	findChainedDirectoryChange,
+	clearWorkingDirectoryState,
 	getActiveWorkflowRoot,
 	getWorkingDirectory,
 	getWorkingDirectoryState,
@@ -20,9 +20,8 @@ import {
 	type WorkingDirectoryState,
 	WORKING_DIRECTORY_STATE_TYPE,
 } from "../lib/working-directory.ts";
-
-const FILE_PATH_TOOLS = new Set(["read", "write", "edit", "grep", "find", "ls"]);
-const OPTIONAL_PATH_TOOLS = new Set(["grep", "find", "ls"]);
+import { isPathInsideRoot } from "../lib/workflow-guard.ts";
+import { FILE_PATH_TOOLS, OPTIONAL_PATH_TOOLS } from "../lib/workspace/access-policy.ts";
 
 interface ChangeResult {
 	state?: WorkingDirectoryState;
@@ -60,7 +59,7 @@ export default function workingDirectoryExtension(pi: ExtensionAPI) {
 			} catch {
 				// The workflow guard will handle a missing locked root separately.
 			}
-			if (target !== canonicalWorkflowRoot) {
+			if (!isPathInsideRoot(canonicalWorkflowRoot, target)) {
 				return {
 					error: `The active HWCode workflow locks this session to ${workflowRoot}. Start a new session before switching to ${target}.`,
 				};
@@ -119,7 +118,7 @@ export default function workingDirectoryExtension(pi: ExtensionAPI) {
 			`\nCurrent working directory: ${cwd}`,
 		);
 		return {
-			systemPrompt: `${prompt}\nA leading shell \`cd\` changes the persistent working directory for this session. All relative shell and built-in file-tool paths resolve from the current working directory.`,
+			systemPrompt: `${prompt}\nOnly a leading shell \`cd\` changes the persistent working directory for this session. Conditional or later \`cd\` commands remain local to that shell process. All relative shell and built-in file-tool paths resolve from the current execution directory. Changing it does not reload Pi project resources; start a new session from another project when its AGENTS.md, settings, or skills must be loaded.`,
 		};
 	});
 
@@ -127,7 +126,7 @@ export default function workingDirectoryExtension(pi: ExtensionAPI) {
 		const input = event.input as Record<string, unknown>;
 		if (event.toolName === "bash" && typeof input.command === "string") {
 			const executionCwd = getWorkingDirectory(ctx.sessionManager);
-			const change = findChainedDirectoryChange(input.command);
+			const change = parseLeadingDirectoryChange(input.command);
 			if (change) {
 				const result = changeDirectory(change.argument, ctx);
 				if (result.error) return { block: true, reason: result.error };
@@ -149,7 +148,7 @@ export default function workingDirectoryExtension(pi: ExtensionAPI) {
 
 	pi.on("user_bash", (event, ctx) => {
 		const executionCwd = getWorkingDirectory(ctx.sessionManager);
-		const change = findChainedDirectoryChange(event.command);
+		const change = parseLeadingDirectoryChange(event.command);
 		if (change) {
 			const result = changeDirectory(change.argument, ctx);
 			if (result.error) {
@@ -162,7 +161,7 @@ export default function workingDirectoryExtension(pi: ExtensionAPI) {
 					},
 				};
 			}
-			if (change.standalone) {
+			if (!change.remainder) {
 				return {
 					result: {
 						output: `${result.state!.cwd}\n`,
@@ -185,4 +184,8 @@ export default function workingDirectoryExtension(pi: ExtensionAPI) {
 		};
 		return { operations };
 	});
+
+	pi.on("session_shutdown", (_event, ctx) => {
+		clearWorkingDirectoryState(ctx.sessionManager);
+	});
 }

package/.pi/extensions/model-providers.ts

@@ -1,6 +1,3 @@
-import { existsSync, readFileSync } from "node:fs";
-import { dirname, join, resolve } from "node:path";
-import { fileURLToPath } from "node:url";
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 import type {
   ApiKeyCredential,
@@ -11,145 +8,35 @@ import type {
 } from "@earendil-works/pi-ai";
 import { stream, streamSimple } from "@earendil-works/pi-ai/compat";
 
-type ModelInput = "text" | "image";
-type OpenAIModel = Model<"openai-completions">;
-
-interface ConfiguredModel {
-  id: string;
-  name?: string;
-  reasoning?: boolean;
-  input?: ModelInput[];
-  contextWindow?: number;
-  maxTokens?: number;
-}
-
-interface ModelDefaults {
-  reasoning?: boolean;
-  input?: ModelInput[];
-  contextWindow?: number;
-  maxTokens?: number;
-}
-
-interface LoginConfig {
-  enabled: true;
-  promptBaseUrl?: boolean;
-  promptApiKey?: boolean;
-  apiKeyRequired?: boolean;
-  catalogPath?: string;
-  timeoutMs?: number;
-}
-
-interface ModelProviderConfig {
-  id: string;
-  name?: string;
-  baseUrl?: string;
-  baseUrlEnv?: string;
-  apiKeyEnv?: string;
-  login?: LoginConfig;
-  modelDefaults?: ModelDefaults;
-  models?: ConfiguredModel[];
-}
+import {
+  DEFAULT_CONTEXT_POLICY,
+  loadContextPolicy,
+  resolveContextWindow,
+  type ContextPolicy,
+} from "../lib/context-policy.ts";
+import {
+  isPositiveNumber,
+  isRecord,
+  loadModelProvidersConfig,
+  normalizeBaseUrl,
+  type ModelInput,
+  type ModelProviderConfig,
+} from "../lib/models/provider-config.ts";
 
-interface ModelProvidersConfig {
-  providers: ModelProviderConfig[];
-}
+type OpenAIModel = Model<"openai-completions">;
 
 interface RemoteModel {
   id: string;
   name?: string;
   input?: ModelInput[];
+  contextWindow?: number;
 }
 
-const BUNDLED_CONFIG_PATH = join(dirname(fileURLToPath(import.meta.url)), "..", "model-providers.json");
 const CREDENTIAL_BASE_URL = "BASE_URL";
-const DEFAULT_CONTEXT_WINDOW = 32768;
 const DEFAULT_MAX_TOKENS = 8192;
 const DEFAULT_CATALOG_PATH = "models";
 const DEFAULT_TIMEOUT_MS = 15000;
 
-function isRecord(value: unknown): value is Record<string, unknown> {
-  return typeof value === "object" && value !== null;
-}
-
-function isPositiveNumber(value: unknown): value is number {
-  return typeof value === "number" && Number.isFinite(value) && value > 0;
-}
-
-function normalizeBaseUrl(value: string): string {
-  const url = new URL(value.trim());
-  if (url.protocol !== "http:" && url.protocol !== "https:") {
-    throw new Error("Provider base URL must use http or https");
-  }
-  url.hash = "";
-  url.search = "";
-  return url.toString().replace(/\/$/u, "");
-}
-
-function validateModel(providerId: string, model: ConfiguredModel): void {
-  if (!model.id?.trim()) {
-    throw new Error(`Provider "${providerId}" contains a model without an id`);
-  }
-  if (model.input?.some((input) => input !== "text" && input !== "image")) {
-    throw new Error(`Model "${model.id}" has an unsupported input type`);
-  }
-  if (model.contextWindow !== undefined && !isPositiveNumber(model.contextWindow)) {
-    throw new Error(`Model "${model.id}" has an invalid contextWindow`);
-  }
-  if (model.maxTokens !== undefined && !isPositiveNumber(model.maxTokens)) {
-    throw new Error(`Model "${model.id}" has an invalid maxTokens`);
-  }
-}
-
-function loadConfig(): ModelProvidersConfig {
-  const projectConfigPath = resolve(process.cwd(), ".pi/model-providers.json");
-  const profileConfigPath = process.env.HWCODE_PROFILE_DIR
-    ? join(process.env.HWCODE_PROFILE_DIR, "model-providers.json")
-    : BUNDLED_CONFIG_PATH;
-  const configPath = existsSync(projectConfigPath) ? projectConfigPath : profileConfigPath;
-  const config = JSON.parse(readFileSync(configPath, "utf8")) as ModelProvidersConfig;
-  if (!Array.isArray(config.providers) || config.providers.length === 0) {
-    throw new Error(`${configPath} must contain a non-empty providers array`);
-  }
-
-  const providerIds = new Set<string>();
-  for (const provider of config.providers) {
-    if (!provider.id?.trim()) {
-      throw new Error(`${configPath} contains a provider without an id`);
-    }
-    if (providerIds.has(provider.id)) {
-      throw new Error(`${configPath} contains duplicate provider id "${provider.id}"`);
-    }
-    providerIds.add(provider.id);
-
-    if (provider.baseUrl) normalizeBaseUrl(provider.baseUrl);
-    if (!provider.login?.enabled && !provider.baseUrl?.trim()) {
-      throw new Error(`Static provider "${provider.id}" requires baseUrl`);
-    }
-    if (!provider.login?.enabled && (!Array.isArray(provider.models) || provider.models.length === 0)) {
-      throw new Error(`Static provider "${provider.id}" must contain at least one model`);
-    }
-    if (provider.login?.enabled && provider.login.promptBaseUrl === false && !provider.baseUrl?.trim()) {
-      throw new Error(`Login provider "${provider.id}" requires baseUrl when promptBaseUrl is false`);
-    }
-    if (provider.login?.catalogPath !== undefined && !provider.login.catalogPath.trim()) {
-      throw new Error(`Login provider "${provider.id}" has an empty catalogPath`);
-    }
-    if (provider.login?.timeoutMs !== undefined && !isPositiveNumber(provider.login.timeoutMs)) {
-      throw new Error(`Login provider "${provider.id}" has an invalid timeoutMs`);
-    }
-
-    const modelIds = new Set<string>();
-    for (const model of provider.models ?? []) {
-      validateModel(provider.id, model);
-      if (modelIds.has(model.id)) {
-        throw new Error(`Provider "${provider.id}" contains duplicate model id "${model.id}"`);
-      }
-      modelIds.add(model.id);
-    }
-  }
-
-  return config;
-}
 
 function compatibility() {
   return {
@@ -165,10 +52,15 @@ function toPiModel(
   provider: ModelProviderConfig,
   baseUrl: string,
   remote: RemoteModel,
+  contextPolicy: ContextPolicy,
 ): OpenAIModel {
   const override = provider.models?.find((model) => model.id === remote.id);
   const defaults = provider.modelDefaults;
-  const contextWindow = override?.contextWindow ?? defaults?.contextWindow ?? DEFAULT_CONTEXT_WINDOW;
+  const contextWindow = resolveContextWindow(
+    override?.contextWindow ?? defaults?.contextWindow,
+    remote.contextWindow,
+    contextPolicy,
+  );
   const maxTokens = override?.maxTokens ?? defaults?.maxTokens ?? DEFAULT_MAX_TOKENS;
 
   return {
@@ -196,6 +88,22 @@ function remoteInput(model: Record<string, unknown>): ModelInput[] | undefined {
   return input;
 }
 
+function remoteContextWindow(model: Record<string, unknown>): number | undefined {
+  const architecture = isRecord(model.architecture) ? model.architecture : undefined;
+  for (const value of [
+    model.context_window,
+    model.context_length,
+    model.max_context_length,
+    model.max_model_len,
+    model.n_ctx,
+    architecture?.context_window,
+    architecture?.context_length,
+  ]) {
+    if (isPositiveNumber(value)) return Math.floor(value);
+  }
+  return undefined;
+}
+
 function parseRemoteModels(payload: unknown): RemoteModel[] {
   const entries = Array.isArray(payload)
     ? payload
@@ -215,6 +123,7 @@ function parseRemoteModels(payload: unknown): RemoteModel[] {
       id,
       name: typeof entry.name === "string" && entry.name.trim() ? entry.name.trim() : undefined,
       input: remoteInput(entry),
+      contextWindow: remoteContextWindow(entry),
     });
   }
 
@@ -235,6 +144,7 @@ async function discoverModels(
   baseUrl: string,
   apiKey: string | undefined,
   signal: AbortSignal,
+  contextPolicy: ContextPolicy,
 ): Promise<OpenAIModel[]> {
   const login = provider.login;
   if (!login) throw new Error(`Provider "${provider.id}" has no login configuration`);
@@ -259,7 +169,7 @@ async function discoverModels(
     throw new Error(`Model discovery failed with HTTP ${response.status}${detail ? `: ${detail}` : ""}`);
   }
 
-  return parseRemoteModels(payload).map((model) => toPiModel(provider, baseUrl, model));
+  return parseRemoteModels(payload).map((model) => toPiModel(provider, baseUrl, model, contextPolicy));
 }
 
 async function environmentValue(name: string | undefined): Promise<string | undefined> {
@@ -287,7 +197,11 @@ async function configuredBaseUrl(
   return provider.baseUrl ? normalizeBaseUrl(provider.baseUrl) : undefined;
 }
 
-function registerStaticProvider(pi: ExtensionAPI, config: ModelProviderConfig): void {
+function registerStaticProvider(
+  pi: ExtensionAPI,
+  config: ModelProviderConfig,
+  contextPolicy: ContextPolicy,
+): void {
   const baseUrl = normalizeBaseUrl(config.baseUrl!);
   const apiKey = config.apiKeyEnv
     ? process.env[config.apiKeyEnv]?.trim() || "local"
@@ -299,21 +213,32 @@ function registerStaticProvider(pi: ExtensionAPI, config: ModelProviderConfig):
     api: "openai-completions",
     apiKey,
     compat: compatibility(),
-    models: (config.models ?? []).map((model) => ({
-      id: model.id,
-      name: model.name ?? model.id,
-      reasoning: model.reasoning ?? config.modelDefaults?.reasoning ?? false,
-      input: model.input ?? config.modelDefaults?.input ?? ["text"],
-      contextWindow: model.contextWindow ?? config.modelDefaults?.contextWindow ?? DEFAULT_CONTEXT_WINDOW,
-      maxTokens: model.maxTokens ?? config.modelDefaults?.maxTokens ?? DEFAULT_MAX_TOKENS,
-      cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
-    })),
+    models: (config.models ?? []).map((model) => {
+      const contextWindow = resolveContextWindow(
+        model.contextWindow ?? config.modelDefaults?.contextWindow,
+        undefined,
+        contextPolicy,
+      );
+      return {
+        id: model.id,
+        name: model.name ?? model.id,
+        reasoning: model.reasoning ?? config.modelDefaults?.reasoning ?? false,
+        input: model.input ?? config.modelDefaults?.input ?? ["text"],
+        contextWindow,
+        maxTokens: Math.min(
+          model.maxTokens ?? config.modelDefaults?.maxTokens ?? DEFAULT_MAX_TOKENS,
+          contextWindow,
+        ),
+        cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
+      };
+    }),
   });
 }
 
 async function loginAndDiscover(
   config: ModelProviderConfig,
   interaction: ProviderAuthInteraction,
+  contextPolicy: ContextPolicy,
 ): Promise<{ credential: ApiKeyCredential; models: OpenAIModel[] }> {
   const login = config.login!;
   try {
@@ -343,7 +268,7 @@ async function loginAndDiscover(
     }
 
     interaction.notify({ type: "progress", message: `Discovering models from ${baseUrl}` });
-    const models = await discoverModels(config, baseUrl, apiKey, interaction.signal);
+    const models = await discoverModels(config, baseUrl, apiKey, interaction.signal, contextPolicy);
     interaction.notify({ type: "info", message: `Found ${models.length} model${models.length === 1 ? "" : "s"}.` });
 
     return {
@@ -362,7 +287,10 @@ async function loginAndDiscover(
   }
 }
 
-function createLoginProvider(config: ModelProviderConfig): Provider<"openai-completions"> {
+function createLoginProvider(
+  config: ModelProviderConfig,
+  contextPolicy: ContextPolicy,
+): Provider<"openai-completions"> {
   const login = config.login!;
   const displayName = config.name ?? config.id;
   let models: OpenAIModel[] = config.baseUrl
@@ -370,12 +298,15 @@ function createLoginProvider(config: ModelProviderConfig): Provider<"openai-comp
       config,
       normalizeBaseUrl(config.baseUrl!),
       { id: model.id, name: model.name, input: model.input },
+      contextPolicy,
     ))
     : [];
 
   const ambientApiKey = () => environmentValue(config.apiKeyEnv);
   const ambientBaseUrl = () => environmentValue(config.baseUrlEnv);
-  const hasAmbientConfiguration = async () => Boolean(await ambientApiKey() || await ambientBaseUrl());
+  const hasAmbientConfiguration = async () => Boolean(
+    config.baseUrl || await ambientApiKey() || await ambientBaseUrl()
+  );
 
   return {
     id: config.id,
@@ -385,7 +316,7 @@ function createLoginProvider(config: ModelProviderConfig): Provider<"openai-comp
       apiKey: {
         name: `${displayName} credentials`,
         login: async (interaction: ProviderAuthInteraction) => {
-          const result = await loginAndDiscover(config, interaction);
+          const result = await loginAndDiscover(config, interaction, contextPolicy);
           models = result.models;
           return result.credential;
         },
@@ -416,7 +347,12 @@ function createLoginProvider(config: ModelProviderConfig): Provider<"openai-comp
       if (context.stored) {
         const restored = context.stored.models.filter(
           (model): model is OpenAIModel => model.provider === config.id && model.api === "openai-completions",
-        );
+        ).map((model) => {
+          const configured = config.models?.find((item) => item.id === model.id)?.contextWindow
+            ?? config.modelDefaults?.contextWindow;
+          const contextWindow = resolveContextWindow(configured, model.contextWindow, contextPolicy);
+          return { ...model, contextWindow, maxTokens: Math.min(model.maxTokens, contextWindow) };
+        });
         if (!await context.publish({ update: () => { models = restored; } })) return;
       }
       if (!context.allowNetwork || context.signal.aborted) return;
@@ -430,7 +366,7 @@ function createLoginProvider(config: ModelProviderConfig): Provider<"openai-comp
       const apiKey = credential?.key ?? await ambientApiKey();
       if (!baseUrl || (login.apiKeyRequired && !apiKey)) return;
 
-      const refreshed = await discoverModels(config, baseUrl, apiKey, context.signal);
+      const refreshed = await discoverModels(config, baseUrl, apiKey, context.signal, contextPolicy);
       await context.publish({
         persist: { models: refreshed, checkedAt: Date.now() },
         update: () => { models = refreshed; },
@@ -442,9 +378,15 @@ function createLoginProvider(config: ModelProviderConfig): Provider<"openai-comp
 }
 
 export default function modelProvidersExtension(pi: ExtensionAPI) {
-  const config = loadConfig();
+  const config = loadModelProvidersConfig();
+  let contextPolicy = { ...DEFAULT_CONTEXT_POLICY };
+  try {
+    contextPolicy = loadContextPolicy(process.cwd());
+  } catch {
+    // The context extension reports malformed settings in the UI. Providers stay usable with safe defaults.
+  }
   for (const provider of config.providers) {
-    if (provider.login?.enabled) pi.registerProvider(createLoginProvider(provider));
-    else registerStaticProvider(pi, provider);
+    if (provider.login?.enabled) pi.registerProvider(createLoginProvider(provider, contextPolicy));
+    else registerStaticProvider(pi, provider, contextPolicy);
   }
 }

package/.pi/extensions/welcome.ts

@@ -1,13 +1,12 @@
-import { existsSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 import {
-  CONFIG_DIR_NAME,
   type ExtensionAPI,
   type ExtensionContext,
   type ThemeColor,
 } from "@earendil-works/pi-coding-agent";
 import { isThemeColor, renderPixelText } from "../lib/pixel-font.ts";
+import { loadReplacingResource } from "../lib/runtime/config.ts";
 import { shouldDismissWelcomeOnSubmit } from "../lib/welcome-input.ts";
 
 interface WelcomeConfig {
@@ -17,6 +16,8 @@ interface WelcomeConfig {
   subtitle: string;
   subtitleColor: ThemeColor;
   reservedRows: number;
+  logoScale: number;
+  verticalOffsetRows: number;
 }
 
 const DEFAULT_CONFIG: WelcomeConfig = {
@@ -26,15 +27,17 @@ const DEFAULT_CONFIG: WelcomeConfig = {
   subtitle: "Local AI Coding Workspace",
   subtitleColor: "muted",
   reservedRows: 8,
+  logoScale: 0.82,
+  verticalOffsetRows: 1,
 };
 
 function loadConfig(cwd: string): WelcomeConfig {
-  const projectPath = join(cwd, CONFIG_DIR_NAME, "welcome.json");
-  const profilePath = process.env.HWCODE_PROFILE_DIR
-    ? join(process.env.HWCODE_PROFILE_DIR, "welcome.json")
-    : join(dirname(fileURLToPath(import.meta.url)), "..", "welcome.json");
-  const path = existsSync(projectPath) ? projectPath : profilePath;
-  const raw = JSON.parse(readFileSync(path, "utf8")) as Partial<WelcomeConfig>;
+  const fallbackPath = join(dirname(fileURLToPath(import.meta.url)), "..", "welcome.json");
+  const raw = loadReplacingResource<Partial<WelcomeConfig> & Record<string, unknown>>(
+    cwd,
+    "welcome.json",
+    fallbackPath,
+  );
   const logo = raw.logo?.trim().toUpperCase() ?? DEFAULT_CONFIG.logo;
 
   if (!/^[A-Z]{1,6}$/.test(logo)) {
@@ -59,6 +62,14 @@ function loadConfig(cwd: string): WelcomeConfig {
       typeof raw.reservedRows === "number" && raw.reservedRows >= 5
         ? Math.floor(raw.reservedRows)
         : DEFAULT_CONFIG.reservedRows,
+    logoScale:
+      typeof raw.logoScale === "number" && raw.logoScale >= 0.5 && raw.logoScale <= 1
+        ? raw.logoScale
+        : DEFAULT_CONFIG.logoScale,
+    verticalOffsetRows:
+      typeof raw.verticalOffsetRows === "number" && raw.verticalOffsetRows >= -4 && raw.verticalOffsetRows <= 4
+        ? Math.trunc(raw.verticalOffsetRows)
+        : DEFAULT_CONFIG.verticalOffsetRows,
   };
 }
 
@@ -101,9 +112,14 @@ export default function welcomeExtension(pi: ExtensionAPI) {
             theme,
             width,
             Math.max(1, availableHeight - subtitleHeight),
+            config.logoScale,
           );
           const groupHeight = logo.height + subtitleHeight;
-          const topPadding = Math.max(0, Math.floor((availableHeight - groupHeight) / 2));
+          const centeredTop = Math.max(0, Math.floor((availableHeight - groupHeight) / 2));
+          const topPadding = Math.max(
+            0,
+            Math.min(availableHeight - groupHeight, centeredTop + config.verticalOffsetRows),
+          );
           const bottomPadding = Math.max(0, availableHeight - topPadding - groupHeight);
           const lines = [...Array<string>(topPadding).fill(""), ...logo.lines];