@pasko70/pibo 2.1.1 → 2.2.1

package/dist/agent-runtimes/pi/portable-history.js

@@ -0,0 +1,99 @@
+function timestamp(createdAt) {
+    const parsed = Date.parse(createdAt);
+    return Number.isFinite(parsed) ? parsed : Date.now();
+}
+function textContent(entry) {
+    if (entry.type === "session_info")
+        return entry.name;
+    if (typeof entry.content === "string")
+        return entry.content;
+    return entry.content.flatMap((part) => {
+        if (part.type === "text" || part.type === "reasoning")
+            return [part.text];
+        return [];
+    }).join("\n");
+}
+function toolArguments(value) {
+    if (value && typeof value === "object" && !Array.isArray(value))
+        return value;
+    return value === undefined ? {} : { value };
+}
+function assistantMessage(entry) {
+    const content = [];
+    if (typeof entry.content === "string") {
+        if (entry.content)
+            content.push({ type: "text", text: entry.content });
+    }
+    else {
+        for (const part of entry.content) {
+            if (part.type === "text")
+                content.push({ type: "text", text: part.text });
+            if (part.type === "tool_call") {
+                content.push({
+                    type: "toolCall",
+                    id: part.toolCallId,
+                    name: part.toolName,
+                    arguments: toolArguments(part.input),
+                });
+            }
+        }
+    }
+    if (content.length === 0)
+        return undefined;
+    return {
+        role: "assistant",
+        content,
+        api: "openai-responses",
+        provider: "pibo-portable-history",
+        model: "portable-history",
+        usage: {
+            input: 0,
+            output: 0,
+            cacheRead: 0,
+            cacheWrite: 0,
+            totalTokens: 0,
+            cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 },
+        },
+        stopReason: content.some((part) => part.type === "toolCall") ? "toolUse" : "stop",
+        timestamp: timestamp(entry.createdAt),
+    };
+}
+function portableMessage(entry) {
+    if (entry.type === "session_info") {
+        return {
+            role: "user",
+            content: `[Pibo portable session information]\n${entry.name}`,
+            timestamp: timestamp(entry.createdAt),
+        };
+    }
+    if (entry.role === "assistant")
+        return assistantMessage(entry);
+    if (entry.role === "tool") {
+        return {
+            role: "toolResult",
+            toolCallId: entry.toolCallId ?? entry.id,
+            toolName: entry.toolName ?? "tool",
+            content: [{ type: "text", text: textContent(entry) }],
+            details: entry.result,
+            isError: entry.isError === true || entry.status === "error",
+            timestamp: timestamp(entry.createdAt),
+        };
+    }
+    const text = textContent(entry);
+    if (!text)
+        return undefined;
+    return {
+        role: "user",
+        content: entry.role === "system"
+            ? `[Pibo portable system context]\n${text}`
+            : text,
+        timestamp: timestamp(entry.createdAt),
+    };
+}
+export function importPortableHistoryIntoPi(sessionManager, history) {
+    for (const entry of history.entries) {
+        const message = portableMessage(entry);
+        if (message)
+            sessionManager.appendMessage(message);
+    }
+}

package/dist/agent-runtimes/pi/routed-session.js

@@ -959,7 +959,7 @@ export class RoutedSession {
     }
     async setModel(model) {
         this.assertActive();
-        const resolved = this.runtime.session.modelRegistry.find(model.provider, model.id);
+        const resolved = this.runtime.session.modelRuntime.getModel(model.provider, model.id);
         if (!resolved)
             throw new Error(`Unknown model ${model.provider}/${model.id}`);
         await this.runtime.session.setModel(resolved);

package/dist/agent-runtimes/pi/runtime.js

@@ -1,6 +1,7 @@
+import { realpathSync } from "node:fs";
 import { readFile } from "node:fs/promises";
 import { isAbsolute, resolve } from "node:path";
-import { AuthStorage, createAgentSessionFromServices, createAgentSessionRuntime, createAgentSessionServices, createBashToolDefinition, getAgentDir, InteractiveMode, SessionManager, } from "@earendil-works/pi-coding-agent";
+import { createAgentSessionFromServices, createAgentSessionRuntime, createAgentSessionServices, createBashToolDefinition, getAgentDir, InteractiveMode, ModelRegistry, SessionManager, } from "@earendil-works/pi-coding-agent";
 import { DEFAULT_BUILTIN_TOOL_NAMES, InitialSessionContext, } from "../../core/profiles.js";
 import { loadPiboModelDefaults, selectRequestedModelProfile, selectRequestedThinkingLevel } from "../../core/model-defaults.js";
 import { createDefaultPiboProfile } from "../../core/default-profile.js";
@@ -81,13 +82,26 @@ function createSessionContextFile(context) {
         ].join("\n"),
     };
 }
+function contextFileIdentity(path) {
+    if (path.includes("://"))
+        return path;
+    let canonical;
+    try {
+        canonical = realpathSync(path);
+    }
+    catch {
+        canonical = resolve(path);
+    }
+    return process.platform === "win32" ? canonical.toLowerCase() : canonical;
+}
 function mergeContextFiles(base, additional) {
     const seen = new Set();
     const merged = [];
     for (const contextFile of [...base, ...additional]) {
-        if (seen.has(contextFile.path))
+        const identity = contextFileIdentity(contextFile.path);
+        if (seen.has(identity))
             continue;
-        seen.add(contextFile.path);
+        seen.add(identity);
         merged.push(contextFile);
     }
     return merged;
@@ -178,12 +192,11 @@ export async function createPiboRuntime(options = {}) {
     const profile = options.profile ?? createDefaultPiboProfile();
     const agentDir = getAgentDir();
     const sessionManager = await createSessionManager(cwd, profile, options.persistSession !== false);
-    const authStorage = AuthStorage.create();
     const createRuntime = async ({ cwd: runtimeCwd, agentDir: runtimeAgentDir, sessionManager: runtimeSessionManager, sessionStartEvent, }) => {
         const contextGuardRecovery = createPiboAssistantContextGuardRecovery();
         const resourceContextFiles = options.resources?.getContextContributions()
-            .flatMap((contribution) => contribution.content === undefined ? [] : [{
-                path: contribution.path ?? contribution.sourcePath ?? contribution.materializedPath ?? contribution.id,
+            .flatMap((contribution) => contribution.content === undefined || contribution.nativeDiscovered ? [] : [{
+                path: contribution.sourcePath ?? contribution.path ?? contribution.materializedPath ?? contribution.id,
                 content: contribution.content,
             }]);
         const contextFiles = resourceContextFiles ?? await loadContextFiles(runtimeCwd, profile.contextFiles);
@@ -200,7 +213,7 @@ export async function createPiboRuntime(options = {}) {
         const services = await createAgentSessionServices({
             cwd: runtimeCwd,
             agentDir: runtimeAgentDir,
-            authStorage,
+            modelRuntime: options.modelRuntime,
             resourceLoaderOptions: {
                 ...piPackageOptions.resourceLoaderOptions,
                 additionalSkillPaths: skillPaths,
@@ -223,10 +236,11 @@ export async function createPiboRuntime(options = {}) {
         });
         runtimeSettingsManager = services.settingsManager;
         applyPiboRuntimeRetryDefaults(services.settingsManager, options.retryDefaults);
-        registerOpenAiGpt56Models(services.modelRegistry);
-        registerMiniMaxProvider(services.modelRegistry);
-        registerGlmProvider(services.modelRegistry);
-        registerQwenTokenPlanProvider(services.modelRegistry);
+        const modelRegistry = new ModelRegistry(services.modelRuntime);
+        registerOpenAiGpt56Models(modelRegistry);
+        registerMiniMaxProvider(modelRegistry);
+        registerGlmProvider(modelRegistry);
+        registerQwenTokenPlanProvider(modelRegistry);
         const ownsLocalRuntimeRegistry = options.runtimeToolController === undefined && profile.tools.some(isEnabledRuntimeTool);
         const localRuntimeRegistry = ownsLocalRuntimeRegistry ? new RuntimeSessionRegistry({ cwd: runtimeCwd }) : undefined;
         const runtimeToolController = options.runtimeToolController
@@ -286,7 +300,7 @@ export async function createPiboRuntime(options = {}) {
             services,
             sessionManager: runtimeSessionManager,
             sessionStartEvent,
-            model: resolveProfileModel(profile, services, runtimeCwd, modelDefaults, options.activeModel),
+            model: resolveProfileModel(profile, modelRegistry, runtimeCwd, modelDefaults, options.activeModel),
             thinkingLevel: options.thinkingLevel ?? selectRequestedThinkingLevel(profile, modelDefaults),
             customTools,
             noTools: profile.builtinTools === "disabled" ? "builtin" : undefined,
@@ -355,15 +369,15 @@ function mergePriorAfterToolCallResult(context, prior) {
         },
     };
 }
-function resolveProfileModel(profile, services, cwd, modelDefaults, activeModel) {
+function resolveProfileModel(profile, modelRegistry, cwd, modelDefaults, activeModel) {
     const requestedModel = activeModel ? { ...activeModel } : selectRequestedModelProfile(profile, modelDefaults ?? loadPiboModelDefaults(cwd));
     if (!requestedModel)
         return undefined;
-    const model = services.modelRegistry.find(requestedModel.provider, requestedModel.id);
+    const model = modelRegistry.find(requestedModel.provider, requestedModel.id);
     if (!model) {
         throw new Error(`Profile "${profile.profileName}" requests unknown model ${requestedModel.provider}/${requestedModel.id}.`);
     }
-    if (!services.modelRegistry.hasConfiguredAuth(model)) {
+    if (!modelRegistry.hasConfiguredAuth(model)) {
         throw new Error(`Profile "${profile.profileName}" requires configured auth for ${requestedModel.provider}/${requestedModel.id}.`);
     }
     return model;
@@ -386,6 +400,7 @@ export async function inspectPiboProfile(options = {}) {
         builtinTools: profile.builtinTools,
         builtinToolNames: profile.builtinToolNames,
         autoContextFiles: profile.autoContextFiles,
+        nativeSubagents: profile.nativeSubagents,
         toolPackages: profile.toolPackages,
     });
     const hasEnabledSubagents = profile.subagents.some((subagent) => subagent.enabled !== false);
@@ -432,6 +447,7 @@ export async function inspectPiboProfile(options = {}) {
             builtinTools: profile.builtinTools,
             builtinToolNames: [...profile.builtinToolNames],
             autoContextFiles: profile.autoContextFiles,
+            nativeSubagents: profile.nativeSubagents,
             toolPackages: { ...profile.toolPackages },
             skills: resourceLoader.getSkills().skills.map((skill) => ({
                 name: skill.name,

package/dist/apps/chat/agent-profiles.js

@@ -55,6 +55,7 @@ function createCustomAgentBuilder(agent) {
         .withBuiltinTools(agent.builtinTools)
         .withBuiltinToolNames(agent.builtinToolNames)
         .withAutoContextFiles(agent.autoContextFiles)
+        .withNativeSubagents(agent.nativeSubagents)
         .withMcpServers(agent.mcpServers)
         .withPiPackages(agent.piPackages.map((id) => ({ id })))
         .withToolPackages({ runControl: agent.runControl, goalControl: agent.goalControl ?? true });

package/dist/apps/chat/agent-store.js

@@ -18,6 +18,7 @@ export function previewCustomAgentCreate(input, options = {}) {
         description: input.description,
         runtimeInstanceId: sanitizeRuntimeInstanceId(input.runtimeInstanceId),
         runtimeOptions: cloneRuntimeOptions(input.runtimeOptions),
+        nativeSubagents: sanitizeBoolean(input.nativeSubagents),
         nativeTools: [...(input.nativeTools ?? [])],
         skills: [...(input.skills ?? [])],
         contextFiles: [...(input.contextFiles ?? [])],
@@ -34,7 +35,7 @@ export function previewCustomAgentCreate(input, options = {}) {
         subagentFast: sanitizeBoolean(input.subagentFast),
         builtinTools: input.builtinTools ?? "default",
         builtinToolNames: sanitizeBuiltinToolNames(input.builtinToolNames),
-        autoContextFiles: input.autoContextFiles ?? true,
+        autoContextFiles: sanitizeBoolean(input.autoContextFiles) ?? true,
         runControl: input.runControl ?? false,
         goalControl: input.goalControl ?? true,
         createdAt: now,
@@ -50,6 +51,7 @@ export function previewCustomAgentUpdate(existing, input, options = {}) {
         description: input.description === undefined ? existing.description : input.description,
         runtimeInstanceId: input.runtimeInstanceId === undefined ? existing.runtimeInstanceId : sanitizeRuntimeInstanceId(input.runtimeInstanceId),
         runtimeOptions: input.runtimeOptions === undefined ? existing.runtimeOptions : cloneRuntimeOptions(input.runtimeOptions),
+        nativeSubagents: input.nativeSubagents === undefined ? existing.nativeSubagents : sanitizeBoolean(input.nativeSubagents),
         nativeTools: input.nativeTools ? [...input.nativeTools] : existing.nativeTools,
         skills: input.skills ? [...input.skills] : existing.skills,
         contextFiles: input.contextFiles ? [...input.contextFiles] : existing.contextFiles,
@@ -66,7 +68,9 @@ export function previewCustomAgentUpdate(existing, input, options = {}) {
         subagentFast: input.subagentFast === undefined ? existing.subagentFast : sanitizeBoolean(input.subagentFast),
         builtinTools: input.builtinTools ?? existing.builtinTools,
         builtinToolNames: input.builtinToolNames ? sanitizeBuiltinToolNames(input.builtinToolNames) : existing.builtinToolNames,
-        autoContextFiles: input.autoContextFiles ?? existing.autoContextFiles,
+        autoContextFiles: input.autoContextFiles === undefined
+            ? existing.autoContextFiles
+            : sanitizeBoolean(input.autoContextFiles) ?? true,
         runControl: input.runControl ?? existing.runControl,
         goalControl: input.goalControl ?? existing.goalControl,
         updatedAt: options.now ?? new Date().toISOString(),
@@ -91,6 +95,7 @@ export class CustomAgentStore {
 				description TEXT,
 				runtime_instance_id TEXT NOT NULL DEFAULT 'pi',
 				runtime_options_json TEXT NOT NULL DEFAULT '{}',
+				native_subagents INTEGER,
 				native_tools_json TEXT NOT NULL,
 				skills_json TEXT NOT NULL,
 				context_files_json TEXT NOT NULL,
@@ -119,6 +124,7 @@ export class CustomAgentStore {
         this.migrateProfileAliasTable();
         this.migrateArchivedAtColumn();
         this.migrateAutoContextFilesColumn();
+        this.migrateNativeSubagentsColumn();
         this.migrateMcpServersColumn();
         this.migrateRuntimeColumns();
         this.migratePiPackagesColumn();
@@ -170,6 +176,7 @@ export class CustomAgentStore {
 					description = ?,
 					runtime_instance_id = ?,
 					runtime_options_json = ?,
+					native_subagents = ?,
 					native_tools_json = ?,
 					skills_json = ?,
 					context_files_json = ?,
@@ -192,7 +199,7 @@ export class CustomAgentStore {
 					updated_at = ?
 				WHERE id = ?
 			`)
-            .run(updated.profileName, updated.displayName, updated.description ?? null, updated.runtimeInstanceId, JSON.stringify(updated.runtimeOptions), JSON.stringify(updated.nativeTools), JSON.stringify(updated.skills), JSON.stringify(updated.contextFiles), JSON.stringify(sanitizeSubagents(updated.subagents)), JSON.stringify(updated.mcpServers), JSON.stringify(updated.piPackages), updated.mainModel ? JSON.stringify(updated.mainModel) : null, updated.subagentModel ? JSON.stringify(updated.subagentModel) : null, updated.thinkingLevel ?? null, updated.mainThinkingLevel ?? null, updated.subagentThinkingLevel ?? null, serializeBoolean(updated.fast), serializeBoolean(updated.mainFast), serializeBoolean(updated.subagentFast), updated.builtinTools, JSON.stringify(updated.builtinToolNames), updated.autoContextFiles ? 1 : 0, updated.runControl ? 1 : 0, updated.goalControl ? 1 : 0, updated.updatedAt, id);
+            .run(updated.profileName, updated.displayName, updated.description ?? null, updated.runtimeInstanceId, JSON.stringify(updated.runtimeOptions), serializeBoolean(updated.nativeSubagents), JSON.stringify(updated.nativeTools), JSON.stringify(updated.skills), JSON.stringify(updated.contextFiles), JSON.stringify(sanitizeSubagents(updated.subagents)), JSON.stringify(updated.mcpServers), JSON.stringify(updated.piPackages), updated.mainModel ? JSON.stringify(updated.mainModel) : null, updated.subagentModel ? JSON.stringify(updated.subagentModel) : null, updated.thinkingLevel ?? null, updated.mainThinkingLevel ?? null, updated.subagentThinkingLevel ?? null, serializeBoolean(updated.fast), serializeBoolean(updated.mainFast), serializeBoolean(updated.subagentFast), updated.builtinTools, JSON.stringify(updated.builtinToolNames), updated.autoContextFiles ? 1 : 0, updated.runControl ? 1 : 0, updated.goalControl ? 1 : 0, updated.updatedAt, id);
         return this.get(id);
     }
     setArchived(id, archived) {
@@ -224,6 +231,7 @@ export class CustomAgentStore {
 					description,
 					runtime_instance_id,
 					runtime_options_json,
+					native_subagents,
 					native_tools_json,
 					skills_json,
 					context_files_json,
@@ -246,9 +254,9 @@ export class CustomAgentStore {
 					created_at,
 					updated_at,
 					archived_at
-				) VALUES (${Array.from({ length: 28 }, () => "?").join(", ")})
+				) VALUES (${Array.from({ length: 29 }, () => "?").join(", ")})
 			`)
-            .run(agent.id, agent.profileName, agent.displayName, agent.description ?? null, agent.runtimeInstanceId, JSON.stringify(agent.runtimeOptions), JSON.stringify(agent.nativeTools), JSON.stringify(agent.skills), JSON.stringify(agent.contextFiles), JSON.stringify(sanitizeSubagents(agent.subagents)), JSON.stringify(agent.mcpServers), JSON.stringify(agent.piPackages), agent.mainModel ? JSON.stringify(agent.mainModel) : null, agent.subagentModel ? JSON.stringify(agent.subagentModel) : null, agent.thinkingLevel ?? null, agent.mainThinkingLevel ?? null, agent.subagentThinkingLevel ?? null, serializeBoolean(agent.fast), serializeBoolean(agent.mainFast), serializeBoolean(agent.subagentFast), agent.builtinTools, JSON.stringify(agent.builtinToolNames), agent.autoContextFiles ? 1 : 0, agent.runControl ? 1 : 0, agent.goalControl ? 1 : 0, agent.createdAt, agent.updatedAt, agent.archivedAt ?? null);
+            .run(agent.id, agent.profileName, agent.displayName, agent.description ?? null, agent.runtimeInstanceId, JSON.stringify(agent.runtimeOptions), serializeBoolean(agent.nativeSubagents), JSON.stringify(agent.nativeTools), JSON.stringify(agent.skills), JSON.stringify(agent.contextFiles), JSON.stringify(sanitizeSubagents(agent.subagents)), JSON.stringify(agent.mcpServers), JSON.stringify(agent.piPackages), agent.mainModel ? JSON.stringify(agent.mainModel) : null, agent.subagentModel ? JSON.stringify(agent.subagentModel) : null, agent.thinkingLevel ?? null, agent.mainThinkingLevel ?? null, agent.subagentThinkingLevel ?? null, serializeBoolean(agent.fast), serializeBoolean(agent.mainFast), serializeBoolean(agent.subagentFast), agent.builtinTools, JSON.stringify(agent.builtinToolNames), agent.autoContextFiles ? 1 : 0, agent.runControl ? 1 : 0, agent.goalControl ? 1 : 0, agent.createdAt, agent.updatedAt, agent.archivedAt ?? null);
     }
     requireProfileNameAvailable(profileName, currentId) {
         const row = this.db.prepare("SELECT id FROM chat_agents WHERE profile_name = ?").get(profileName);
@@ -347,11 +355,15 @@ export class CustomAgentStore {
         }
     }
     migrateAutoContextFilesColumn() {
-        const columns = new Set(this.db.prepare("PRAGMA table_info(chat_agents)").all().map((column) => column.name));
-        if (!columns.has("auto_context_files")) {
+        if (!this.tableColumns().has("auto_context_files")) {
             this.db.prepare("ALTER TABLE chat_agents ADD COLUMN auto_context_files INTEGER NOT NULL DEFAULT 1").run();
         }
     }
+    migrateNativeSubagentsColumn() {
+        if (!this.tableColumns().has("native_subagents")) {
+            this.db.prepare("ALTER TABLE chat_agents ADD COLUMN native_subagents INTEGER").run();
+        }
+    }
     migrateMcpServersColumn() {
         const columns = new Set(this.db.prepare("PRAGMA table_info(chat_agents)").all().map((column) => column.name));
         if (!columns.has("mcp_servers_json")) {
@@ -564,6 +576,7 @@ function agentFromRow(row, profileAliases) {
         description: row.description ?? undefined,
         runtimeInstanceId: sanitizeRuntimeInstanceId(row.runtime_instance_id),
         runtimeOptions: parseRuntimeOptions(row.runtime_options_json),
+        nativeSubagents: parseBoolean(row.native_subagents),
         nativeTools: parseStringArray(row.native_tools_json),
         skills: parseStringArray(row.skills_json),
         contextFiles: parseStringArray(row.context_files_json),
@@ -669,12 +682,13 @@ function parseModelProfile(value) {
     }
 }
 function sanitizeModelProfile(value) {
-    if (!value)
+    if (!value || typeof value !== "object" || Array.isArray(value))
         return undefined;
-    if (typeof value.provider !== "string" || typeof value.id !== "string")
+    const candidate = value;
+    if (typeof candidate.provider !== "string" || typeof candidate.id !== "string")
         return undefined;
-    const provider = value.provider.trim();
-    const id = value.id.trim();
+    const provider = candidate.provider.trim();
+    const id = candidate.id.trim();
     if (!provider || !id)
         return undefined;
     return { provider, id };
@@ -692,6 +706,12 @@ function sanitizeSubagents(value) {
         };
         if (typeof candidate.description === "string")
             subagent.description = candidate.description;
+        const model = sanitizeModelProfile(candidate.model);
+        if (model)
+            subagent.model = model;
+        const thinkingLevel = sanitizeThinkingLevel(candidate.thinkingLevel);
+        if (thinkingLevel)
+            subagent.thinkingLevel = thinkingLevel;
         if (typeof candidate.timeoutMs === "number")
             subagent.timeoutMs = candidate.timeoutMs;
         if (typeof candidate.maxDepth === "number")

package/dist/apps/chat/chat-files.js

@@ -1,9 +1,10 @@
-import { createReadStream, existsSync, mkdirSync, statSync, writeFileSync } from "node:fs";
+import { createReadStream, existsSync, mkdirSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { basename, extname, isAbsolute, relative, resolve } from "node:path";
-import os from "node:os";
 import { Readable } from "node:stream";
+import { piboHomePath } from "../../core/pibo-home.js";
+import { protectPrivateDirectorySync, protectPrivateFileSync } from "../../core/private-path.js";
 import { PiboWebHttpError } from "../../web/http.js";
-export const CHAT_UPLOAD_DIR = resolve(os.homedir(), ".pibo", "uploads");
+export const CHAT_UPLOAD_DIR = piboHomePath("uploads");
 const CHAT_FILE_ATTACHMENT_LIMIT = 10;
 export function prepareChatFileAttachments(input) {
     const paths = normalizeChatFileAttachmentPaths(input.attachmentPaths);
@@ -18,6 +19,11 @@ export function prepareChatFileAttachments(input) {
         messageText: modelContext ? `${input.messageText.trimEnd()}\n\n${modelContext}` : input.messageText,
     };
 }
+export function ensurePrivateChatUploadDirectory() {
+    mkdirSync(CHAT_UPLOAD_DIR, { recursive: true, mode: 0o700 });
+    protectPrivateDirectorySync(CHAT_UPLOAD_DIR);
+    return CHAT_UPLOAD_DIR;
+}
 export async function saveUploadedChatFiles(request) {
     const form = await request.formData();
     const files = [];
@@ -27,7 +33,7 @@ export async function saveUploadedChatFiles(request) {
     }
     if (!files.length)
         throw new PiboWebHttpError("No files were uploaded", 400);
-    mkdirSync(CHAT_UPLOAD_DIR, { recursive: true });
+    ensurePrivateChatUploadDirectory();
     const saved = [];
     for (const file of files) {
         const name = sanitizeUploadFilename(file.name);
@@ -77,7 +83,7 @@ function normalizeChatFileAttachmentPaths(value) {
         if (absolutePath.length > 4096)
             throw new PiboWebHttpError("uploaded file path is too long", 400);
         if (!isPathInsideUploadDir(absolutePath))
-            throw new PiboWebHttpError("Attached uploads must be under ~/.pibo/uploads", 400);
+            throw new PiboWebHttpError("Attached uploads must be under the configured Pibo uploads directory", 400);
         if (!seen.has(absolutePath)) {
             seen.add(absolutePath);
             paths.push(absolutePath);
@@ -131,7 +137,14 @@ function writeUploadedChatFile(filename, bytes) {
     for (let index = 0; index < 10_000; index += 1) {
         const targetPath = uploadPathForIndex(filename, index);
         try {
-            writeFileSync(targetPath, bytes, { flag: "wx" });
+            writeFileSync(targetPath, bytes, { flag: "wx", mode: 0o600 });
+            try {
+                protectPrivateFileSync(targetPath);
+            }
+            catch (error) {
+                rmSync(targetPath, { force: true });
+                throw error;
+            }
             return targetPath;
         }
         catch (error) {

package/dist/apps/chat/chat-request-normalizers.js

@@ -227,6 +227,13 @@ export function normalizeAutoContextFiles(value) {
         throw new PiboWebHttpError("autoContextFiles must be a boolean", 400);
     return value;
 }
+export function normalizeNativeSubagents(value) {
+    if (value === undefined || value === null)
+        return undefined;
+    if (typeof value !== "boolean")
+        throw new PiboWebHttpError("nativeSubagents must be a boolean", 400);
+    return value;
+}
 export function normalizeRunControl(value) {
     if (value === undefined)
         return false;
@@ -370,6 +377,12 @@ export function normalizeAgentSubagents(value) {
         const description = normalizeAgentDescription(raw.description);
         if (description)
             subagent.description = description;
+        const model = normalizeModelProfile(raw.model, "subagent model");
+        if (model)
+            subagent.model = model;
+        const thinkingLevel = normalizeThinkingLevel(raw.thinkingLevel, "subagent thinkingLevel");
+        if (thinkingLevel)
+            subagent.thinkingLevel = thinkingLevel;
         if (raw.timeoutMs !== undefined) {
             if (typeof raw.timeoutMs !== "number" || !Number.isFinite(raw.timeoutMs) || raw.timeoutMs <= 0) {
                 throw new PiboWebHttpError("subagent timeoutMs must be a positive number", 400);
@@ -650,6 +663,7 @@ export function createAgentInput(body) {
         description: normalizeAgentDescription(body.description),
         runtimeInstanceId: normalizeAgentRuntimeInstanceId(body.runtimeInstanceId),
         runtimeOptions: normalizeAgentRuntimeOptions(body.runtimeOptions),
+        nativeSubagents: normalizeNativeSubagents(body.nativeSubagents),
         nativeTools: normalizeNameArray(body.nativeTools, "nativeTools"),
         skills: normalizeNameArray(body.skills, "skills"),
         contextFiles: normalizeNameArray(body.contextFiles, "contextFiles"),
@@ -681,6 +695,11 @@ export function createAgentUpdate(body) {
         update.runtimeInstanceId = normalizeAgentRuntimeInstanceId(body.runtimeInstanceId);
     if (body.runtimeOptions !== undefined)
         update.runtimeOptions = normalizeAgentRuntimeOptions(body.runtimeOptions);
+    if (body.nativeSubagents !== undefined) {
+        update.nativeSubagents = body.nativeSubagents === null
+            ? null
+            : normalizeNativeSubagents(body.nativeSubagents);
+    }
     if (body.nativeTools !== undefined)
         update.nativeTools = normalizeNameArray(body.nativeTools, "nativeTools");
     if (body.skills !== undefined)

package/dist/apps/chat/trace.js

@@ -1,5 +1,6 @@
 import { createHash } from "node:crypto";
 import { PI_HISTORY_PAGE_MAX_BYTES, PI_HISTORY_SCAN_MAX_BYTES, PI_HISTORY_TAIL_MAX_BYTES, listPiHistorySessions, loadPiHistoryFastMetadata, loadPiHistoryMetadata, piSessionEntriesToAgentRuntimeHistoryEntries, readPiTranscriptHistoryPage, readPiTranscriptTailEntries, } from "../../agent-runtimes/pi/history.js";
+import { isPiboThinkingLevel } from "../../core/thinking.js";
 import { buildTraceViewFromEvents, traceNodesFromHistoryEntries } from "../../shared/trace-engine.js";
 import { isChatWebSessionArchived } from "./session-metadata.js";
 import { workflowSessionKindFromMetadata } from "../../sessions/workflow-session-kind.js";
@@ -26,6 +27,7 @@ export async function buildSessionNodes(sessions, indexItems, _cwd = process.cwd
             originId: session.originId,
             profile: session.profile,
             activeModel: session.activeModel,
+            initialThinkingLevel: thinkingLevelValue(session.metadata?.initialThinkingLevel),
             subagentName: stringValue(session.metadata?.subagentName),
             workflowSessionKind: workflowSessionKindFromMetadata(session.metadata),
             title: createSessionTitle(session, historyMetadataFromInspection(inspection)),
@@ -263,6 +265,9 @@ function historyMessageText(entry) {
 function stringValue(value) {
     return typeof value === "string" ? value : undefined;
 }
+function thinkingLevelValue(value) {
+    return typeof value === "string" && isPiboThinkingLevel(value) ? value : undefined;
+}
 // Pi compatibility exports. Normal Chat Web history resolves through the selected runtime adapter.
 export async function loadPiSessionMetadata(session, cwd = process.cwd()) {
     return await loadPiHistoryMetadata(session.runtimeBinding?.nativeSessionId ?? session.piSessionId, cwd);