@piagent/platform 1.3.1 → 1.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +39 -0
- package/README.md +3 -3
- package/architecture/layers.json +96 -1
- package/docs/README.md +1 -0
- package/docs/architecture.md +1 -0
- package/docs/authority-manifest.md +1 -0
- package/docs/auto-delegation-policy.md +1 -0
- package/docs/capability-packs.md +1 -0
- package/docs/command-reference-vietnamese.md +5 -4
- package/docs/context-engine.md +1 -0
- package/docs/context-window-policy.md +1 -0
- package/docs/distribution-standard.md +8 -7
- package/docs/herdr-workflow.md +1 -0
- package/docs/mcp-and-tools.md +14 -9
- package/docs/memory-policy.md +1 -0
- package/docs/model-options.md +1 -0
- package/docs/oauth-providers.md +1 -0
- package/docs/operator-manual-vietnamese.md +15 -12
- package/docs/package-architecture-notes.md +1 -0
- package/docs/project-adapters.md +1 -0
- package/docs/project-onboarding.md +1 -0
- package/docs/publishing-for-teams.md +1 -0
- package/docs/quality-benchmark.md +1 -0
- package/docs/quickstart-vietnamese.md +3 -2
- package/docs/release-install-policy.md +7 -6
- package/docs/runtime-harness-standard.md +1 -0
- package/docs/runtime-policy-design.md +1 -0
- package/docs/runtime-quality-baseline.md +1 -0
- package/docs/security-redaction-benchmark.md +1 -0
- package/docs/security-threat-model.md +2 -1
- package/docs/subagent-orchestration-capabilities.md +1 -0
- package/docs/subagents-and-multiagent.md +1 -0
- package/docs/task-implementation-contract.md +1 -0
- package/docs/task-lifecycle-vietnamese.md +1 -0
- package/docs/team-onboarding.md +3 -2
- package/docs/third-party-neutrality.md +26 -0
- package/docs/usage-observability.md +1 -0
- package/docs/vercel-docs-site.md +1 -0
- package/docs/workflow-recipes.md +1 -0
- package/docs-site/architecture.html +1 -1
- package/docs-site/benchmark.html +1 -1
- package/docs-site/commands.html +1 -1
- package/docs-site/context-engine.html +1 -1
- package/docs-site/en/architecture.html +1 -1
- package/docs-site/en/benchmark.html +1 -1
- package/docs-site/en/commands.html +1 -1
- package/docs-site/en/context-engine.html +1 -1
- package/docs-site/en/index.html +1 -1
- package/docs-site/en/mcp-approval.html +1 -1
- package/docs-site/en/mcp-auth.html +1 -1
- package/docs-site/en/mcp-servers.html +1 -1
- package/docs-site/en/mcp.html +1 -1
- package/docs-site/en/permissions.html +1 -1
- package/docs-site/en/profiles.html +1 -1
- package/docs-site/en/quickstart.html +1 -1
- package/docs-site/en/runtime.html +1 -1
- package/docs-site/en/scope.html +1 -1
- package/docs-site/en/security.html +1 -1
- package/docs-site/en/team.html +1 -1
- package/docs-site/en/whats-new.html +1 -1
- package/docs-site/en/workflows.html +1 -1
- package/docs-site/index.html +1 -1
- package/docs-site/mcp-approval.html +1 -1
- package/docs-site/mcp-auth.html +1 -1
- package/docs-site/mcp-servers.html +1 -1
- package/docs-site/mcp.html +1 -1
- package/docs-site/permissions.html +1 -1
- package/docs-site/profiles.html +1 -1
- package/docs-site/quickstart.html +1 -1
- package/docs-site/runtime.html +1 -1
- package/docs-site/scope.html +1 -1
- package/docs-site/security.html +1 -1
- package/docs-site/team.html +1 -1
- package/docs-site/whats-new.html +1 -1
- package/docs-site/workflows.html +1 -1
- package/evals/fixtures/mutation-provenance-record.invalid.json +17 -0
- package/evals/fixtures/mutation-provenance-record.valid.json +27 -0
- package/evals/fixtures/piagent-webui/approval-v1.invalid.json +54 -0
- package/evals/fixtures/piagent-webui/approval-v1.valid.json +58 -0
- package/evals/fixtures/piagent-webui/attachment-v1.invalid.json +25 -0
- package/evals/fixtures/piagent-webui/attachment-v1.valid.json +25 -0
- package/evals/fixtures/piagent-webui/capabilities-v1.invalid.json +51 -0
- package/evals/fixtures/piagent-webui/capabilities-v1.valid.json +122 -0
- package/evals/fixtures/piagent-webui/commit-summary-v1.invalid.json +10 -0
- package/evals/fixtures/piagent-webui/commit-summary-v1.valid.json +25 -0
- package/evals/fixtures/piagent-webui/control-command-v1.invalid.json +37 -0
- package/evals/fixtures/piagent-webui/control-command-v1.valid.json +35 -0
- package/evals/fixtures/piagent-webui/diff-v1.invalid.json +13 -0
- package/evals/fixtures/piagent-webui/diff-v1.valid.json +141 -0
- package/evals/fixtures/piagent-webui/gateway-capabilities-v1.invalid.json +35 -0
- package/evals/fixtures/piagent-webui/gateway-capabilities-v1.valid.json +35 -0
- package/evals/fixtures/piagent-webui/gateway-protocol-v1.invalid.json +14 -0
- package/evals/fixtures/piagent-webui/gateway-protocol-v1.valid.json +14 -0
- package/evals/fixtures/piagent-webui/handoff-history-v1.invalid.json +16 -0
- package/evals/fixtures/piagent-webui/handoff-history-v1.valid.json +16 -0
- package/evals/fixtures/piagent-webui/model-catalog-v1.invalid.json +31 -0
- package/evals/fixtures/piagent-webui/model-catalog-v1.valid.json +43 -0
- package/evals/fixtures/piagent-webui/queue-v1.invalid.json +29 -0
- package/evals/fixtures/piagent-webui/queue-v1.valid.json +44 -0
- package/evals/fixtures/piagent-webui/recovery-history-v1.invalid.json +17 -0
- package/evals/fixtures/piagent-webui/recovery-history-v1.valid.json +20 -0
- package/evals/fixtures/piagent-webui/release-monitor-v1.invalid.json +12 -0
- package/evals/fixtures/piagent-webui/release-monitor-v1.valid.json +29 -0
- package/evals/fixtures/piagent-webui/review-state-v1.invalid.json +25 -0
- package/evals/fixtures/piagent-webui/review-state-v1.valid.json +38 -0
- package/evals/fixtures/piagent-webui/runtime-event-v2.invalid.json +49 -0
- package/evals/fixtures/piagent-webui/runtime-event-v2.valid.json +49 -0
- package/evals/fixtures/piagent-webui/session-catalog-v1.invalid.json +17 -0
- package/evals/fixtures/piagent-webui/session-catalog-v1.valid.json +58 -0
- package/evals/fixtures/piagent-webui/session-command-v1.invalid.json +19 -0
- package/evals/fixtures/piagent-webui/session-command-v1.valid.json +19 -0
- package/evals/fixtures/piagent-webui/snapshot-v1.invalid.json +5 -0
- package/evals/fixtures/piagent-webui/snapshot-v1.valid.json +191 -0
- package/evals/fixtures/piagent-webui/source-change-v1.invalid.json +57 -0
- package/evals/fixtures/piagent-webui/source-change-v1.valid.json +98 -0
- package/evals/fixtures/piagent-webui/source-mutation-v1.invalid.json +19 -0
- package/evals/fixtures/piagent-webui/source-mutation-v1.valid.json +38 -0
- package/evals/fixtures/piagent-webui/source-revert-v1.invalid.json +20 -0
- package/evals/fixtures/piagent-webui/source-revert-v1.valid.json +62 -0
- package/evals/fixtures/piagent-webui/subagent-tree-v1.invalid.json +26 -0
- package/evals/fixtures/piagent-webui/subagent-tree-v1.valid.json +39 -0
- package/evals/fixtures/piagent-webui/task-index-v1.invalid.json +15 -0
- package/evals/fixtures/piagent-webui/task-index-v1.valid.json +15 -0
- package/evals/fixtures/piagent-webui/task-timeline-v1.invalid.json +14 -0
- package/evals/fixtures/piagent-webui/task-timeline-v1.valid.json +16 -0
- package/evals/fixtures/piagent-webui/transcript-v1.invalid.json +35 -0
- package/evals/fixtures/piagent-webui/transcript-v1.valid.json +55 -0
- package/evals/fixtures/task-baseline-manifest.invalid.json +16 -0
- package/evals/fixtures/task-baseline-manifest.valid.json +41 -0
- package/evals/fixtures/verifier-file-snapshot.invalid.json +21 -0
- package/evals/fixtures/verifier-file-snapshot.valid.json +21 -0
- package/package.json +30 -3
- package/packages/piagent-core/benchmark/benchmark-candidate.d.ts +1 -0
- package/packages/piagent-core/benchmark/benchmark-forensics.d.ts +1 -0
- package/packages/piagent-core/benchmark/benchmark-ledger.d.ts +4 -0
- package/packages/piagent-core/benchmark/benchmark-record-validation.d.ts +1 -0
- package/packages/piagent-core/benchmark/benchmark-runtime.d.ts +1 -0
- package/packages/piagent-core/capabilities/capability-core.js +2 -2
- package/packages/piagent-core/capabilities/runtime-integrity.js +143 -0
- package/packages/piagent-core/extensions/piagent-guard.ts +62 -37
- package/packages/piagent-core/extensions/redaction-core.d.ts +2 -0
- package/packages/piagent-core/extensions/task-journal.js +30 -1
- package/packages/piagent-core/extensions/task-state.js +33 -36
- package/packages/piagent-core/mcp/mcp-server-catalog.js +5 -5
- package/packages/piagent-core/package.json +1 -1
- package/packages/piagent-core/runtime/hooks/session-start-hook.ts +2 -2
- package/packages/piagent-core/runtime/hooks/tool-call-hook.ts +5 -2
- package/packages/piagent-core/runtime/hooks/tool-result-hook.ts +20 -19
- package/packages/piagent-core/runtime/hooks/tool-result-metadata.ts +13 -0
- package/packages/piagent-core/runtime/input/chat-images.ts +2 -2
- package/packages/piagent-core/runtime/inspection/activity-event-adapter.ts +94 -0
- package/packages/piagent-core/runtime/inspection/approval-broker.ts +318 -0
- package/packages/piagent-core/runtime/inspection/commit-summary-projection.ts +59 -0
- package/packages/piagent-core/runtime/inspection/context-telemetry-inspection.ts +37 -0
- package/packages/piagent-core/runtime/inspection/criteria-links.ts +295 -0
- package/packages/piagent-core/runtime/inspection/diff-projection.ts +499 -0
- package/packages/piagent-core/runtime/inspection/git-filter-safety.ts +38 -0
- package/packages/piagent-core/runtime/inspection/git-numstat-adapter.ts +71 -0
- package/packages/piagent-core/runtime/inspection/git-status-adapter.ts +493 -0
- package/packages/piagent-core/runtime/inspection/git-tree-adapter.ts +108 -0
- package/packages/piagent-core/runtime/inspection/mcp-control.ts +10 -0
- package/packages/piagent-core/runtime/inspection/mutation-provenance-contract.ts +131 -0
- package/packages/piagent-core/runtime/inspection/mutation-provenance-recorder.ts +48 -0
- package/packages/piagent-core/runtime/inspection/mutation-provenance-store.ts +161 -0
- package/packages/piagent-core/runtime/inspection/project-runtime-inspection.ts +36 -0
- package/packages/piagent-core/runtime/inspection/review-state-contract.ts +108 -0
- package/packages/piagent-core/runtime/inspection/review-state-projection.ts +93 -0
- package/packages/piagent-core/runtime/inspection/review-state-store.ts +112 -0
- package/packages/piagent-core/runtime/inspection/runtime-event-store.ts +262 -0
- package/packages/piagent-core/runtime/inspection/same-process-bridge-proof.ts +103 -0
- package/packages/piagent-core/runtime/inspection/source-change-projection.ts +471 -0
- package/packages/piagent-core/runtime/inspection/source-evidence-contract.ts +139 -0
- package/packages/piagent-core/runtime/inspection/source-evidence-store.ts +315 -0
- package/packages/piagent-core/runtime/inspection/source-handoff-store.ts +70 -0
- package/packages/piagent-core/runtime/inspection/source-inspection-plan.ts +34 -0
- package/packages/piagent-core/runtime/inspection/source-mutation-projection.ts +164 -0
- package/packages/piagent-core/runtime/inspection/source-mutation-store.ts +168 -0
- package/packages/piagent-core/runtime/inspection/source-open-target.ts +38 -0
- package/packages/piagent-core/runtime/inspection/source-revert-projection.ts +147 -0
- package/packages/piagent-core/runtime/inspection/task-baseline-start-capture.ts +22 -0
- package/packages/piagent-core/runtime/inspection/task-compaction-history.ts +160 -0
- package/packages/piagent-core/runtime/inspection/task-control-journal.ts +131 -0
- package/packages/piagent-core/runtime/inspection/task-handoff-history.ts +95 -0
- package/packages/piagent-core/runtime/inspection/task-provenance-projection.ts +60 -0
- package/packages/piagent-core/runtime/inspection/task-recovery-timeline.ts +88 -0
- package/packages/piagent-core/runtime/inspection/task-run-index.ts +87 -0
- package/packages/piagent-core/runtime/inspection/task-source-projection.ts +401 -0
- package/packages/piagent-core/runtime/inspection/task-subagent-tree.ts +101 -0
- package/packages/piagent-core/runtime/inspection/text-diff.ts +60 -0
- package/packages/piagent-core/runtime/inspection/verifier-snapshot-contract.ts +114 -0
- package/packages/piagent-core/runtime/inspection/verifier-snapshot-store.ts +189 -0
- package/packages/piagent-core/runtime/inspection/webui-snapshot.ts +320 -0
- package/packages/piagent-core/runtime/inspection/workspace-file-reader.ts +132 -0
- package/packages/piagent-core/runtime/inspection/workspace-source-projection.ts +96 -0
- package/packages/piagent-core/runtime/inspection/zero-turn-conformance.ts +175 -0
- package/packages/piagent-core/runtime/orchestration/owned-work-budget.ts +68 -4
- package/packages/piagent-core/runtime/policy/source-index-transaction.ts +173 -0
- package/packages/piagent-core/runtime/policy/source-mutation-guard-binding.ts +42 -0
- package/packages/piagent-core/runtime/policy/source-mutation-guard.ts +184 -0
- package/packages/piagent-core/runtime/policy/source-worktree-transaction.ts +105 -0
- package/packages/piagent-core/runtime/product/activity-inspector-footer.ts +5 -3
- package/packages/piagent-core/runtime/product/activity-inspector.ts +85 -343
- package/packages/piagent-core/runtime/recovery/resume-state.ts +38 -1
- package/packages/piagent-core/runtime/registration/activity-inspector-command.ts +68 -14
- package/packages/piagent-core/runtime/registration/task-start-tool.ts +13 -14
- package/packages/piagent-core/runtime/session/model-authorship-state.ts +31 -3
- package/packages/piagent-core/runtime/session/runtime-state.ts +11 -1
- package/packages/piagent-webui/dist/client/assets/index-DjMntaK5.js +172 -0
- package/packages/piagent-webui/dist/client/assets/index-DwKCWbwd.css +1 -0
- package/packages/piagent-webui/dist/client/index.html +16 -0
- package/packages/piagent-webui/extension/attachment-store.ts +323 -0
- package/packages/piagent-webui/extension/held-message-queue.ts +311 -0
- package/packages/piagent-webui/extension/lifecycle-controller.ts +408 -0
- package/packages/piagent-webui/extension/lifecycle-event-adapter.ts +23 -0
- package/packages/piagent-webui/extension/piagent-webui.ts +470 -0
- package/packages/piagent-webui/extension/review-controller.ts +160 -0
- package/packages/piagent-webui/extension/same-session-bridge.ts +500 -0
- package/packages/piagent-webui/extension/session-options-controller.ts +281 -0
- package/packages/piagent-webui/extension/session-stream-adapter.ts +249 -0
- package/packages/piagent-webui/extension/source-mutation-controller.ts +215 -0
- package/packages/piagent-webui/extension/source-open-controller.ts +136 -0
- package/packages/piagent-webui/extension/source-revert-controller.ts +189 -0
- package/packages/piagent-webui/extension/terminal-session-adapter.ts +73 -0
- package/packages/piagent-webui/extension/vscode-handoff.ts +51 -0
- package/packages/piagent-webui/gateway/control-socket.ts +92 -0
- package/packages/piagent-webui/gateway/gateway-events.ts +60 -0
- package/packages/piagent-webui/gateway/gateway-protocol-service.ts +64 -0
- package/packages/piagent-webui/gateway/gateway-service.ts +215 -0
- package/packages/piagent-webui/gateway/gateway-session-stream.ts +110 -0
- package/packages/piagent-webui/gateway/mcp-auth-broker.ts +158 -0
- package/packages/piagent-webui/gateway/native-project-picker.ts +29 -0
- package/packages/piagent-webui/gateway/pi-host.ts +41 -0
- package/packages/piagent-webui/gateway/profile-state.ts +1 -0
- package/packages/piagent-webui/gateway/project-registry.ts +108 -0
- package/packages/piagent-webui/gateway/provider-auth-broker.ts +172 -0
- package/packages/piagent-webui/gateway/session-catalog.ts +128 -0
- package/packages/piagent-webui/gateway/session-command-controller.ts +237 -0
- package/packages/piagent-webui/gateway/session-command-store.ts +224 -0
- package/packages/piagent-webui/gateway/session-inspection-registry.ts +204 -0
- package/packages/piagent-webui/gateway/session-lease-store.ts +1 -0
- package/packages/piagent-webui/gateway/session-metadata-store.ts +152 -0
- package/packages/piagent-webui/gateway/session-runtime-supervisor.ts +485 -0
- package/packages/piagent-webui/ownership/gateway-runtime-context.ts +8 -0
- package/packages/piagent-webui/ownership/profile-state.ts +117 -0
- package/packages/piagent-webui/ownership/session-lease-store.ts +329 -0
- package/packages/piagent-webui/ownership/session-refs.ts +8 -0
- package/packages/piagent-webui/package.json +33 -0
- package/packages/piagent-webui/server/README.md +4 -0
- package/packages/piagent-webui/server/benchmark-release-monitor.ts +230 -0
- package/packages/piagent-webui/server/core-inspection-provider.ts +403 -0
- package/packages/piagent-webui/server/gateway-websocket.ts +143 -0
- package/packages/piagent-webui/server/http-security.ts +27 -0
- package/packages/piagent-webui/server/ipc-read-model-client.ts +89 -0
- package/packages/piagent-webui/server/loopback-server.ts +368 -0
- package/packages/piagent-webui/server/read-model-provider.ts +37 -0
- package/packages/piagent-webui/server/read-only-router.ts +105 -0
- package/packages/piagent-webui/server/session-auth.ts +88 -0
- package/packages/piagent-webui/server/sidecar-main.ts +86 -0
- package/packages/piagent-webui/server/sse-hub.ts +76 -0
- package/packages/piagent-webui/server/static-bundle.ts +40 -0
- package/packages/piagent-webui/server/transcript-projection.ts +110 -0
- package/schemas/mutation-provenance-record.schema.json +100 -0
- package/schemas/piagent-webui/approval-v1.schema.json +654 -0
- package/schemas/piagent-webui/attachment-v1.schema.json +267 -0
- package/schemas/piagent-webui/capabilities-v1.schema.json +729 -0
- package/schemas/piagent-webui/catalog-v1.json +240 -0
- package/schemas/piagent-webui/commit-summary-v1.schema.json +63 -0
- package/schemas/piagent-webui/common-v1.schema.json +479 -0
- package/schemas/piagent-webui/control-command-v1.schema.json +1780 -0
- package/schemas/piagent-webui/diff-v1.schema.json +826 -0
- package/schemas/piagent-webui/gateway-capabilities-v1.schema.json +136 -0
- package/schemas/piagent-webui/gateway-protocol-v1.schema.json +456 -0
- package/schemas/piagent-webui/handoff-history-v1.schema.json +92 -0
- package/schemas/piagent-webui/model-catalog-v1.schema.json +95 -0
- package/schemas/piagent-webui/queue-v1.schema.json +99 -0
- package/schemas/piagent-webui/recovery-history-v1.schema.json +144 -0
- package/schemas/piagent-webui/release-monitor-v1.schema.json +173 -0
- package/schemas/piagent-webui/review-state-v1.schema.json +206 -0
- package/schemas/piagent-webui/runtime-event-v2.schema.json +5206 -0
- package/schemas/piagent-webui/session-catalog-v1.schema.json +222 -0
- package/schemas/piagent-webui/session-command-v1.schema.json +390 -0
- package/schemas/piagent-webui/snapshot-v1.schema.json +2622 -0
- package/schemas/piagent-webui/source-change-v1.schema.json +763 -0
- package/schemas/piagent-webui/source-mutation-v1.schema.json +96 -0
- package/schemas/piagent-webui/source-revert-v1.schema.json +130 -0
- package/schemas/piagent-webui/subagent-tree-v1.schema.json +88 -0
- package/schemas/piagent-webui/task-index-v1.schema.json +74 -0
- package/schemas/piagent-webui/task-timeline-v1.schema.json +49 -0
- package/schemas/piagent-webui/transcript-v1.schema.json +243 -0
- package/schemas/task-baseline-manifest.schema.json +122 -0
- package/schemas/verifier-file-snapshot.schema.json +81 -0
- package/scripts/check-architecture.mjs +1 -0
- package/scripts/check-doc-languages.mjs +19 -2
- package/scripts/check-third-party-neutrality.mjs +43 -0
- package/scripts/install-global.sh +1 -1
- package/scripts/piagent-cli.mjs +17 -3
- package/scripts/piagent-dashboard.mjs +208 -0
- package/scripts/piagent-webui-launcher.mjs +121 -0
- package/scripts/typescript-loader.mjs +26 -1
- package/scripts/verify-local.sh +253 -0
- package/scripts/verify-release-identity.mjs +4 -1
|
@@ -0,0 +1 @@
|
|
|
1
|
+
:root{color:#f4f4ef;font-synthesis:none;text-rendering:optimizelegibility;--bg:#050505;--surface:#101114;--surface-strong:#15171b;--surface-2:#15171b;--line:#24262d;--line-strong:#343740;--text:#f4f4ef;--muted:#a4a6ad;--quiet:#898c95;--accent:#d8ff7a;--accent-soft:#d8ff7a1c;--blue:#8fa7ff;--amber:#ffd166;--warning:#ffd166;--red:#ff8f8f;--danger:#ff8f8f;--positive:#8be9c8;--page-glow:#8be9c81a;background:#050505;font-family:Inter,ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif}:root[data-piagent-color-mode=light]{color:#1c2018;--bg:#f5f6f0;--surface:#fff;--surface-strong:#f0f2eb;--surface-2:#f0f2eb;--line:#dfe2d8;--line-strong:#c8cdc0;--text:#1c2018;--muted:#62685c;--quiet:#6b7165;--accent:#627400;--accent-soft:#6274001a;--blue:#506db7;--amber:#9c6200;--warning:#9c6200;--red:#c43f4c;--danger:#c43f4c;--positive:#14775f;--page-glow:#d8ff7a33;background:#f5f6f0}*{box-sizing:border-box}html{background:var(--bg)}body{min-width:320px;min-height:100vh;color:var(--text);background:radial-gradient(circle at 62% -20%, var(--page-glow) 0, transparent 36rem), var(--bg);margin:0}button,input,select,textarea{font:inherit}strong,h1,h2,h3,p{overflow-wrap:anywhere}button:focus-visible,a:focus-visible,summary:focus-visible{outline:2px solid var(--accent);outline-offset:3px}.skip-link{z-index:100;color:#08130f;background:var(--accent);border-radius:7px;padding:9px 12px;font-size:11px;font-weight:800;position:fixed;top:8px;left:8px;transform:translateY(-160%)}.skip-link:focus{transform:translateY(0)}.app-shell{min-height:100vh}.topbar{z-index:10;-webkit-backdrop-filter:blur(20px);backdrop-filter:blur(20px);background:#090c12db;border-bottom:1px solid #354052b8;grid-template-columns:1fr minmax(220px,auto) 1fr;align-items:center;gap:24px;min-height:68px;padding:0 28px;display:grid;position:sticky;top:0}.brand,.session-title,.topbar-actions,.runtime-strip>div,.task-meta,.health-line{align-items:center;display:flex}.brand{gap:11px}.brand>div,.session-title{flex-direction:column;display:flex}.brand strong{letter-spacing:.01em;font-size:15px}.brand small,.session-title small{color:var(--quiet);letter-spacing:.04em;font-size:11px}.brand-mark{width:34px;height:34px;color:var(--accent);background:var(--accent-soft);border:1px solid #64e0b56b;border-radius:10px;place-items:center;font-family:Georgia,serif;font-size:21px;display:grid}.session-title{text-align:center;min-width:0}.session-title strong{text-overflow:ellipsis;white-space:nowrap;max-width:360px;font-size:13px;overflow:hidden}.topbar-actions{justify-content:flex-end;gap:10px}.read-only-badge{border:1px solid var(--line);color:var(--muted);text-transform:uppercase;letter-spacing:.08em;border-radius:7px;padding:5px 9px;font-size:11px;font-weight:700}.workspace{width:min(1460px,100% - 48px);margin:0 auto;padding:28px 0 64px}.runtime-strip{border:1px solid var(--line);background:#11161fb8;border-radius:13px;grid-template-columns:repeat(6,minmax(0,1fr));display:grid;overflow:hidden}.runtime-strip>div{border-right:1px solid var(--line);flex-direction:column;justify-content:center;align-items:flex-start;gap:7px;min-width:0;min-height:70px;padding:13px 16px}.runtime-strip>div:last-child{border-right:0}.runtime-strip span:first-child{color:var(--quiet);letter-spacing:.1em;text-transform:uppercase;font-size:10px;font-weight:800}.runtime-strip strong{color:#dfe6f2;text-overflow:ellipsis;white-space:nowrap;max-width:100%;font-size:13px;overflow:hidden}.content-grid{grid-template-columns:minmax(0,1fr) 290px;align-items:start;gap:18px;margin-top:18px;display:grid}.surface{border:1px solid var(--line);background:var(--surface);border-radius:15px;box-shadow:0 22px 60px #0000001f}.task-dashboard{padding:clamp(20px,3vw,34px)}.task-heading{grid-template-columns:minmax(0,1fr) auto;align-items:start;gap:24px;display:grid}.section-kicker{color:var(--accent);letter-spacing:.14em;text-transform:uppercase;margin:0 0 7px;font-size:10px;font-weight:800}.task-heading h2,.task-empty h2{color:#f2f5fa;letter-spacing:-.035em;max-width:900px;margin:0;font-size:clamp(23px,3vw,38px);font-weight:650;line-height:1.18}.task-meta{color:var(--muted);flex-wrap:wrap;gap:12px;margin-top:15px;font-size:12px}.task-meta>span:not(.status-pill){border-left:1px solid var(--line-strong);padding-left:12px}.progress-number{text-align:right;min-width:116px}.progress-number strong{color:var(--accent);letter-spacing:-.05em;font-size:32px;font-weight:650;display:block}.progress-number span{color:var(--muted);font-size:11px}.progress-track{background:#242b36;border-radius:9px;height:5px;margin:26px 0 30px;overflow:hidden}.progress-track span{border-radius:inherit;background:linear-gradient(90deg,#45c89b,#7ee6bd);height:100%;transition:width .25s;display:block;box-shadow:0 0 20px #64e0b552}.status-pill{color:#aab4c4;white-space:nowrap;align-items:center;gap:6px;width:-moz-fit-content;width:fit-content;min-width:0;font-size:11px;font-weight:700;line-height:1.2;display:inline-flex}.status-dot{width:6px;height:6px;box-shadow:0 0 0 3px color-mix(in srgb, currentColor 13%, transparent);background:currentColor;border-radius:50%;flex:none}.tone-positive{color:var(--accent)}.tone-warning{color:var(--amber)}.tone-danger{color:var(--red)}.tone-info{color:var(--blue)}.tone-neutral{color:#919cad}.criteria-heading{justify-content:space-between;align-items:baseline;gap:16px;margin-bottom:12px;display:flex}.criteria-heading h2{letter-spacing:.01em;margin:0;font-size:13px}.criteria-heading>span{color:var(--quiet);font-size:11px}.criteria-list{gap:8px;margin:0;padding:0;list-style:none;display:grid}.criterion-card{border:1px solid var(--line);background:#090c1257;border-radius:11px;grid-template-columns:38px minmax(0,1fr) auto;align-items:center;gap:14px;min-height:72px;padding:12px 15px;display:grid}.criterion-index{border:1px solid color-mix(in srgb, currentColor 28%, transparent);background:color-mix(in srgb, currentColor 7%, transparent);border-radius:9px;place-items:center;width:32px;height:32px;font-size:10px;font-weight:800;display:grid}.criterion-copy{min-width:0}.criterion-copy>div{align-items:center;gap:9px;display:flex}.criterion-copy p{color:#dce3ed;margin:0;font-size:13px;line-height:1.45}.criterion-copy small{color:var(--quiet);margin-top:4px;font-size:10px;display:block}.critical-tag{color:var(--amber);letter-spacing:.08em;text-transform:uppercase;border:1px solid #efba633d;border-radius:4px;flex:none;padding:3px 6px;font-size:8px;font-weight:800}.blocker{background:#ff7f8612;border:1px solid #ff7f8640;border-radius:9px;grid-template-columns:auto 1fr;gap:14px;margin:-9px 0 24px;padding:12px 14px;display:grid}.blocker span{color:var(--red);text-transform:uppercase;font-size:10px;font-weight:800}.blocker p{color:#e6c3c6;margin:0;font-size:12px}.work-plan{border-top:1px solid var(--line);color:var(--muted);margin-top:16px;padding-top:15px}.work-plan summary{cursor:pointer;font-size:12px;font-weight:700}.work-plan ol{gap:9px;margin:14px 0 0;padding:0;list-style:none;display:grid}.work-plan li{grid-template-columns:100px 1fr;align-items:center;gap:12px;font-size:12px;display:grid}.context-rail{gap:18px;display:grid}.compact-panel{padding:18px}.compact-panel dl{margin:0}.compact-panel dl>div{border-bottom:1px solid var(--line);justify-content:space-between;align-items:center;gap:16px;min-height:39px;display:flex}.compact-panel dl>div:last-child{border-bottom:0}.compact-panel dt{color:var(--muted);font-size:11px}.compact-panel dd{color:#d9e0eb;text-overflow:ellipsis;white-space:nowrap;max-width:170px;margin:0;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:10px;overflow:hidden}.health-line{justify-content:space-between;gap:12px}.health-line>span{color:var(--quiet);font-size:10px}.health-issue{border-top:1px solid var(--line);color:var(--muted);margin:13px 0 0;padding-top:12px;font-size:11px;line-height:1.5}.task-empty{grid-template-columns:auto minmax(0,620px);place-content:center;gap:24px;min-height:420px;padding:48px;display:grid}.task-empty .empty-mark{width:64px;height:64px;color:var(--accent);background:var(--accent-soft);border:1px solid #64e0b547;border-radius:18px;place-items:center;font-family:Georgia,serif;font-size:38px;display:grid}.task-empty p:last-child{color:var(--muted);margin:13px 0 0;font-size:13px;line-height:1.6}.chat-panel{margin-top:18px;overflow:hidden}.chat-heading{border-bottom:1px solid var(--line);justify-content:space-between;align-items:center;gap:20px;min-height:78px;padding:17px 22px;display:flex}.chat-heading h2{letter-spacing:-.02em;margin:0;font-size:18px}.chat-heading>div:last-child{color:var(--quiet);align-items:center;gap:12px;font-size:10px;display:flex}.chat-read-state{color:var(--amber);background:#efba630f;border:1px solid #efba633b;border-radius:7px;padding:5px 8px}.chat-body{overscroll-behavior:contain;background:#090c1238;gap:11px;max-height:620px;padding:18px 20px;display:grid;overflow:auto}.chat-empty{color:var(--quiet);text-align:center;margin:0;padding:28px;font-size:11px}.load-older{border:1px solid var(--line);color:var(--muted);background:var(--surface);cursor:pointer;border-radius:7px;justify-self:center;padding:6px 10px;font-size:10px}.chat-message{border:1px solid var(--line);background:#111720;border-radius:11px;width:min(82%,900px);padding:12px 14px}.chat-message>div{justify-content:space-between;align-items:center;gap:12px;display:flex}.chat-message strong{color:#e3e9f2;letter-spacing:.04em;text-transform:uppercase;font-size:10px}.chat-message time,.chat-message small{color:var(--quiet);font-size:9px}.chat-message p{color:#cbd3df;white-space:pre-wrap;margin:7px 0 0;font-size:12px;line-height:1.6}.chat-message small{color:var(--amber);margin-top:7px;display:block}.chat-user{background:#75a7ff12;border-color:#75a7ff38;justify-self:end}.chat-assistant{justify-self:start}.chat-streaming{box-shadow:inset 2px 0 var(--accent);border-color:#64e0b542}.stream-indicator{color:var(--accent);font-size:9px}.chat-tool-live,.chat-tool-result{border:1px solid var(--line);width:-moz-fit-content;width:fit-content;max-width:82%;color:var(--quiet);background:#0d1219;border-radius:8px;align-items:center;gap:9px;padding:8px 11px;font-size:9px;display:flex}.chat-tool-live strong,.chat-tool-result strong{color:#bac4d2;font-family:ui-monospace,monospace;font-size:10px}.tool-spinner{border:1px solid var(--blue);border-right-color:#0000;border-radius:50%;width:7px;height:7px;animation:.8s linear infinite spin}.held-queue{border-top:1px solid var(--line);background:#efba6309;padding:12px 16px}.held-queue-heading{justify-content:space-between;align-items:center;gap:12px;margin-bottom:8px;display:flex}.held-queue-heading strong{color:#dce3ed;letter-spacing:.04em;text-transform:uppercase;font-size:10px}.held-queue-heading span{color:var(--amber);font-size:9px}.held-queue ol{gap:7px;max-height:260px;margin:0;padding:0;list-style:none;display:grid;overflow:auto}.held-queue li{border:1px solid var(--line);background:#0d1219;border-radius:8px;grid-template-columns:minmax(0,1fr) auto;gap:7px 12px;padding:9px 10px;display:grid}.held-queue li[data-state=quarantined]{border-color:#efba6340}.held-queue p{color:#c4cdd9;text-overflow:ellipsis;white-space:nowrap;margin:0;font-size:10px;line-height:1.45;overflow:hidden}.held-queue textarea{resize:vertical;border:1px solid var(--line);color:#dce3ed;background:#090d13;border-radius:7px;min-width:0;padding:8px 9px;font-size:10px}.held-queue li>div{align-items:start;gap:5px;display:flex}.held-queue button{border:1px solid var(--line);color:var(--muted);background:var(--surface);cursor:pointer;border-radius:6px;padding:4px 7px;font-size:9px}.held-queue button:disabled{cursor:not-allowed;opacity:.45}.held-queue small{color:var(--amber);grid-column:1/-1;font-size:8px}.chat-composer-preview{border-top:1px solid var(--line);background:#10151d;grid-template-columns:minmax(0,1fr) auto;gap:10px;padding:14px 16px;display:grid}.attachment-list{flex-wrap:wrap;grid-column:1/-1;gap:7px;margin:0;padding:0;list-style:none;display:flex}.attachment-list li{background:#75a7ff0f;border:1px solid #75a7ff38;border-radius:8px;align-items:center;gap:8px;max-width:260px;padding:7px 8px;display:flex}.attachment-list span{flex-direction:column;min-width:0;display:flex}.attachment-list strong{color:#dce3ed;text-overflow:ellipsis;white-space:nowrap;font-size:9px;overflow:hidden}.attachment-list small{color:var(--quiet);font-size:8px}.attachment-list button{min-width:0;padding:3px 6px;font-size:8px}.chat-composer-preview textarea{resize:none;border:1px solid var(--line);color:var(--quiet);background:#0b0f15;border-radius:9px;padding:10px 12px;font-size:11px}.chat-composer-preview button{border:1px solid var(--line);min-width:76px;color:var(--quiet);background:var(--surface-strong);border-radius:9px}.composer-actions{grid-template-columns:repeat(2,minmax(76px,auto));gap:6px;display:grid}.composer-actions .interrupt-send{color:var(--amber);grid-column:1/-1}.attachment-picker{border:1px solid var(--line);width:-moz-fit-content;width:fit-content;color:var(--blue);cursor:pointer;border-radius:8px;align-items:center;padding:6px 9px;font-size:9px;display:inline-flex}.attachment-picker.disabled{cursor:not-allowed;opacity:.45}.attachment-picker input{opacity:0;width:1px;height:1px;position:absolute;overflow:hidden}.chat-composer-preview>small{color:var(--muted);grid-column:1/-1;font-size:9px}@keyframes spin{to{transform:rotate(360deg)}}.source-workspace{margin-top:0;overflow:hidden}.source-heading{border-bottom:1px solid var(--line);justify-content:space-between;align-items:center;gap:18px;min-height:82px;padding:18px 22px;display:flex}.source-heading h2{letter-spacing:-.02em;margin:0;font-size:18px}.source-heading>span{color:var(--quiet);letter-spacing:.06em;text-transform:uppercase;font-size:10px;font-weight:700}.source-tabs{border-bottom:1px solid var(--line);background:#090c1252;min-width:0;padding:0 14px;display:flex}.source-tabs button{min-width:0;color:var(--muted);cursor:pointer;background:0 0;border:0;border-bottom:2px solid #0000;align-items:center;gap:9px;padding:14px 15px 12px;font-size:11px;display:flex}.source-tabs button:hover{color:#dce3ed}.source-tabs button[aria-selected=true]{border-bottom-color:var(--accent);color:var(--accent)}.source-tabs button b{min-width:20px;color:inherit;background:color-mix(in srgb, currentColor 10%, transparent);text-align:center;border-radius:8px;padding:2px 6px;font-size:9px}.source-body{grid-template-columns:minmax(248px,304px) minmax(0,1fr);min-height:480px;display:grid}.file-panel{border-right:1px solid var(--line);background:color-mix(in srgb, var(--bg) 72%, var(--surface));min-width:0}.file-panel-meta{border-bottom:1px solid var(--line);min-height:42px;color:var(--muted);justify-content:space-between;align-items:center;gap:14px;padding:0 14px;font-size:10px;display:flex}.file-panel-meta small{color:var(--quiet);letter-spacing:.08em;text-transform:uppercase;font-weight:800}.file-list{overscroll-behavior:contain;max-height:620px;overflow:auto}.file-group-label{min-height:28px;color:var(--quiet);align-items:center;gap:6px;padding:5px 10px 3px}.file-group-label svg{width:14px;height:14px}.file-group-label span{min-width:0;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:9px;font-weight:700}.file-row{width:100%;min-height:54px;color:inherit;cursor:pointer;text-align:left;background:0 0;border:0;border-radius:7px;grid-template-columns:26px minmax(0,1fr) auto;align-items:center;gap:9px;margin:0;padding:8px 9px;display:grid}.file-row:hover{background:#75a7ff0d}.file-row[data-selected=true]{box-shadow:inset 2px 0 var(--accent);background:#64e0b513}.file-status{border:1px solid var(--line-strong);width:23px;height:23px;color:var(--muted);border-radius:6px;place-items:center;font-family:ui-monospace,monospace;font-size:10px;font-weight:900;display:grid}.status-A,.status-U{color:var(--accent);border-color:#64e0b54d}.status-M,.status-R{color:var(--blue);border-color:#75a7ff4d}.status-D,.status-C{color:var(--red);border-color:#ff7f864d}.file-name{flex-direction:column;min-width:0;display:flex}.file-name strong{color:var(--text);text-overflow:ellipsis;white-space:nowrap;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:11px;font-weight:600;overflow:hidden}.file-name small,.file-provenance,.file-evidence{color:var(--quiet);text-overflow:ellipsis;white-space:nowrap;font-size:9px;overflow:hidden}.file-provenance,.file-evidence{display:none}.file-stats{color:var(--muted);white-space:nowrap;font-family:ui-monospace,monospace;font-size:9px}.files-empty,.diff-empty{min-height:220px;color:var(--quiet);text-align:center;place-items:center;padding:28px;font-size:12px;display:grid}.diff-empty{background:repeating-linear-gradient(-45deg,#0000,#0000 13px,#ffffff03 13px 14px);min-height:100%}.error-state{color:var(--red)}.diff-viewer{background:var(--surface);min-width:0;overflow:auto}.diff-toolbar{border-bottom:1px solid var(--line);background:var(--surface);justify-content:space-between;align-items:center;gap:15px;min-height:55px;padding:9px 13px;display:flex}.diff-toolbar>div:first-child{align-items:center;gap:10px;min-width:0;display:flex}.diff-actions{align-items:center;gap:10px;display:flex}.review-state{color:var(--quiet);align-items:center;gap:8px;font-size:9px;display:flex}.review-state>span{white-space:nowrap}.review-state button{border:1px solid var(--line);color:#d8e1ee;background:#18202b;border-radius:7px;min-height:28px;padding:0 9px;font-size:9px}.review-state button:disabled{cursor:not-allowed;opacity:.45}.review-reviewed>span{color:var(--accent)}.review-stale>span{color:var(--amber)}.source-mutation-preview{color:#aeb9c8;align-items:center;gap:8px;max-width:290px;font-size:9px;display:flex}.source-mutation-preview>span{text-overflow:ellipsis;white-space:nowrap;overflow:hidden}.source-mutation-preview button{color:#b8ead5;background:#42c2921a;border:1px solid #42c29266;border-radius:7px;flex:none;min-height:28px;padding:0 10px;font-size:9px;font-weight:750}.source-mutation-preview button:disabled{cursor:not-allowed;opacity:.45}.source-revert-preview{color:#d3b29a;align-items:center;gap:8px;max-width:290px;font-size:9px;display:flex}.source-revert-preview>span{text-overflow:ellipsis;white-space:nowrap;overflow:hidden}.source-revert-preview button,.hunk-header .revert-action{color:#f3b4b8;background:#ff7f8617;border:1px solid #ff7f8661;border-radius:7px;flex:none;min-height:28px;padding:0 10px;font-size:9px;font-weight:750}.source-revert-preview button:disabled{cursor:not-allowed;opacity:.45}.source-open-action button{color:#c2d5f8;white-space:nowrap;background:#75a7ff1a;border:1px solid #75a7ff61;border-radius:7px;min-height:28px;padding:0 10px;font-size:9px;font-weight:750}.source-open-action button:disabled{cursor:wait;opacity:.55}.source-open-status{color:#bfd1f2;background:#75a7ff14;border-bottom:1px solid #75a7ff38;padding:8px 14px;font-size:10px}.commit-summary-panel{border-bottom:1px solid var(--line);background:linear-gradient(120deg,#42c29214,#75a7ff0d);grid-template-columns:minmax(230px,.8fr) minmax(300px,1.5fr);align-items:start;gap:18px;padding:14px 16px;display:grid}.commit-summary-panel h3{color:#edf2f7;margin:1px 0 4px;font-size:14px}.commit-summary-panel>div>span{color:var(--quiet);font-size:9px}.commit-summary-panel>button{color:#b8ead5;background:#42c2921a;border:1px solid #42c29266;border-radius:8px;justify-self:start;min-height:32px;padding:0 12px;font-size:10px;font-weight:750}.commit-summary-output{background:#070a0f8c;border:1px solid #75a7ff33;border-radius:9px;gap:5px;padding:10px 12px;display:grid}.commit-summary-output>strong{color:#edf2f7;font:700 12px ui-monospace,monospace}.commit-summary-output>code{color:#aeb9c8;white-space:pre-wrap;font-size:9px}.commit-summary-output>div{flex-wrap:wrap;gap:7px;margin-top:4px;display:flex}.commit-summary-output button{border:1px solid var(--line);color:#d8e1ee;background:#18202b;border-radius:7px;min-height:28px;padding:0 10px;font-size:9px}.commit-summary-output button:last-child{color:#efd19e;background:#ecb35b17;border-color:#ecb35b59}.commit-summary-status{color:#bfd1f2;grid-column:1/-1;margin:0;font-size:10px}.model-summary-dialog{border-color:#ecb35b57}.review-error{color:#f2b0b4;background:#ff687414;border-bottom:1px solid #ff68743d;padding:8px 14px;font-size:10px}.source-revert-error{color:#f2b0b4;background:#ff687414;border-top:1px solid #ff68743d;padding:9px 14px;font-size:10px}.diff-toolbar strong{color:#e3e9f2;text-overflow:ellipsis;white-space:nowrap;font-family:ui-monospace,monospace;font-size:11px;overflow:hidden}.access-badge{text-transform:uppercase;font-size:9px;font-weight:800}.mode-switch{border:1px solid var(--line);background:var(--bg);border-radius:7px;padding:2px;display:flex}.mode-switch button{color:var(--quiet);cursor:pointer;background:0 0;border:0;border-radius:5px;padding:5px 8px;font-size:9px}.mode-switch button[aria-pressed=true]{color:#e5ebf4;background:var(--surface-strong)}.mode-switch .MuiToggleButton-root.Mui-selected{color:#eef3f8;background:#293241;box-shadow:inset 0 0 0 1px #75a7ff4d}.diff-context{border-bottom:1px solid var(--line);min-height:37px;color:var(--quiet);align-items:center;gap:14px;padding:0 14px;font-size:9px;display:flex}.diff-context .additions{color:var(--accent);margin-left:auto}.diff-context .deletions{color:var(--red)}.diff-hunk{min-width:0;overflow:auto}.hunk-header{color:var(--blue);background:#75a7ff12;border-bottom:1px solid #75a7ff24;justify-content:space-between;align-items:center;gap:12px;padding:6px 12px;font-family:ui-monospace,monospace;font-size:9px;display:flex;position:sticky;left:0}.hunk-header button{color:#bcd0f5;background:#75a7ff1a;border:1px solid #75a7ff57;border-radius:6px;min-height:25px;padding:0 9px;font:700 9px Inter,sans-serif}.hunk-header button:disabled{cursor:not-allowed;opacity:.45}.hunk-actions{align-items:center;gap:6px;display:inline-flex}.dialog-backdrop{z-index:80;-webkit-backdrop-filter:blur(6px);backdrop-filter:blur(6px);background:#030508c2;place-items:center;padding:20px;display:grid;position:fixed;inset:0}.confirm-dialog{background:#151a23;border:1px solid #ff7f8652;border-radius:15px;width:min(520px,100%);padding:24px;box-shadow:0 30px 100px #00000094}.confirm-dialog h3{color:#f1f4f8;margin:0;font-size:21px}.confirm-dialog>p:not(.section-kicker){color:#cbd3de;margin:14px 0;font-size:12px;line-height:1.65}.confirm-dialog code{color:#e6bdc0}.revert-diff{border:1px solid var(--line);background:#0c1016;border-radius:9px;max-height:min(300px,42vh);margin:14px 0;overflow:auto}.revert-diff section>div{color:#9bb9ec;background:#182130;padding:6px 9px;font:9px ui-monospace,monospace;position:sticky;top:0}.revert-line{white-space:pre-wrap;min-height:19px;padding:2px 9px;font:10px/1.5 ui-monospace,monospace;display:block;color:#b9c3d0!important}.revert-line b{width:14px;color:inherit;display:inline-block}.revert-added{background:#42c29214;color:#a7e1c9!important}.revert-deleted{background:#ff687414;color:#efafb3!important}.revert-meta{color:#8b96a8!important}.revert-safety{background:#efba630f;border:1px solid #efba6338;border-radius:9px;gap:5px;padding:12px;display:grid}.revert-safety strong{color:#efd19e;font-size:11px}.revert-safety span{color:#a99c87;font-size:10px}.confirm-actions{justify-content:flex-end;gap:9px;margin-top:20px;display:flex}.confirm-actions button{border:1px solid var(--line-strong);color:#cbd3df;background:#1b222d;border-radius:8px;min-height:34px;padding:0 14px;font-size:11px;font-weight:750}.confirm-actions .danger-action{color:#ffd2d5;background:#ff7f8621;border-color:#ff7f866b}.confirm-actions button:disabled{cursor:not-allowed;opacity:.48}.diff-line{grid-template-columns:42px 42px 18px minmax(500px,1fr);min-width:max-content;min-height:21px;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:10px;line-height:21px;display:grid}.diff-line>span{color:#566173;text-align:right;-webkit-user-select:none;user-select:none;padding:0 7px}.diff-line b{color:var(--quiet);text-align:center;-webkit-user-select:none;user-select:none}.diff-line code,.split-line code{color:#bdc6d3;white-space:pre;padding:0 8px}.syntax-keyword{color:#c8a5ff;font-weight:650}.syntax-string{color:#a8d98b}.syntax-number{color:#efbd78}.syntax-comment{color:#778294;font-style:italic}.syntax-literal{color:#81b7ff}.syntax-property{color:#8ed8cf}.diff-added{background:#42c2921a}.diff-added code,.diff-added b{color:#a7e6ca}.diff-deleted{background:#ff68741a}.diff-deleted code,.diff-deleted b{color:#f2b0b4}.split-line{border-bottom:1px solid #242c394d;grid-template-columns:42px minmax(350px,1fr) 42px minmax(350px,1fr);min-width:860px;min-height:21px;font-family:ui-monospace,monospace;font-size:10px;line-height:21px;display:grid}.split-line>span{color:#566173;text-align:right;border-right:1px solid #242c39b3;padding:0 7px}.split-line code:nth-child(2){border-right:1px solid var(--line)}.unchanged-region{border-block:1px solid var(--line);color:var(--quiet);text-align:center;background:#10151d;padding:7px 12px;font-size:9px}.diff-fallback{border:1px solid var(--line);color:var(--muted);background:var(--surface);border-radius:9px;gap:6px;margin:18px;padding:16px;font-size:11px;display:grid}.diff-fallback strong{color:var(--amber);text-transform:uppercase;font-size:10px}.activity-panel{margin-top:18px;overflow:hidden}.panel-heading{border-bottom:1px solid var(--line);justify-content:space-between;align-items:center;gap:18px;min-height:82px;padding:18px 22px;display:flex}.panel-heading h2{letter-spacing:-.02em;margin:0;font-size:18px}.panel-heading>div:last-child{color:var(--quiet);align-items:center;gap:14px;font-size:10px;display:flex}.running-count{color:var(--blue)}.activity-list{display:grid}.activity-row{border-bottom:1px solid var(--line);background:#090c1233;grid-template-columns:10px minmax(0,1fr) 150px;align-items:start;gap:14px;padding:15px 18px;display:grid}.activity-row:last-child{border-bottom:0}.activity-state{width:7px;height:7px;box-shadow:0 0 0 4px color-mix(in srgb, currentColor 10%, transparent);background:currentColor;border-radius:50%;margin-top:5px}.activity-copy{min-width:0}.activity-copy>div{align-items:center;gap:9px;display:flex}.activity-copy strong{color:#dce3ed;font-size:12px}.activity-copy>div>span{border:1px solid var(--line);color:var(--quiet);letter-spacing:.06em;text-transform:uppercase;border-radius:4px;padding:2px 5px;font-size:8px;font-weight:800}.activity-copy>p{color:var(--muted);text-overflow:ellipsis;white-space:nowrap;margin:4px 0 0;font-family:ui-monospace,monospace;font-size:10px;line-height:1.45;overflow:hidden}.activity-result{text-align:right;grid-template-columns:1fr auto;align-items:center;gap:4px 9px;display:grid}.activity-result strong{color:#c9d1dd;font-size:10px}.activity-result>span{color:var(--quiet);font-family:ui-monospace,monospace;font-size:9px}.activity-result button{color:var(--blue);cursor:pointer;background:0 0;border:0;grid-column:1/-1;justify-self:end;padding:2px 0;font-size:9px}.log-preview{border:1px solid var(--line);color:#aeb8c7;white-space:pre-wrap;background:#090d13;border-radius:7px;margin-top:10px;padding:10px 12px;font-family:ui-monospace,monospace;font-size:9px;line-height:1.55}.log-preview small{color:var(--amber);margin-top:5px;display:block}.activity-empty{min-height:150px;color:var(--quiet);place-items:center;padding:24px;font-size:11px;display:grid}.panel-footnote{border-top:1px solid var(--line);color:var(--quiet);text-align:center;padding:9px 18px;font-size:9px}.evidence-section{margin-top:34px}.section-title-row{justify-content:space-between;align-items:end;gap:24px;margin-bottom:14px;padding:0 3px;display:flex}.section-title-row h2{letter-spacing:-.025em;margin:0;font-size:20px}.section-title-row>span{max-width:440px;color:var(--muted);text-align:right;text-overflow:ellipsis;white-space:nowrap;font-size:10px;overflow:hidden}.evidence-grid{grid-template-columns:repeat(4,minmax(0,1fr));gap:12px;display:grid}.evidence-card{min-width:0;min-height:250px;padding:18px}.evidence-card h3{color:#e1e7f0;min-height:38px;margin:0 0 16px;font-size:14px;line-height:1.35}.evidence-list{margin:0}.evidence-list>div{border-bottom:1px solid var(--line);grid-template-columns:88px minmax(0,1fr);align-items:center;gap:8px;min-height:38px;display:grid}.evidence-list>div:last-child{border-bottom:0}.evidence-list dt,.budget-grid dt{color:var(--quiet);font-size:9px}.evidence-list dd{color:var(--muted);text-align:right;text-overflow:ellipsis;white-space:nowrap;margin:0;font-family:ui-monospace,monospace;font-size:9px;overflow:hidden}.context-meter{background:#28303c;border-radius:4px;height:4px;margin:-3px 0 12px;overflow:hidden}.context-meter span{border-radius:inherit;background:linear-gradient(90deg, var(--blue), var(--accent));height:100%;display:block}.budget-grid{grid-template-columns:repeat(3,1fr);gap:7px;margin:0;display:grid}.budget-grid>div{border:1px solid var(--line);background:#090c1259;border-radius:8px;padding:12px 8px}.budget-grid dt{margin-bottom:5px}.budget-grid dd{color:#dbe2ec;margin:0;font-family:ui-monospace,monospace;font-size:12px}.card-note,.card-empty{color:var(--quiet);margin:14px 0 0;font-size:10px;line-height:1.5}.handoff-copy>p{color:var(--muted);margin:0 0 13px;font-size:11px;line-height:1.55}.handoff-blocker,.next-action{background:#ff7f860d;border:1px solid #ff7f8638;border-radius:7px;gap:4px;margin-top:9px;padding:9px 10px;display:grid}.next-action{background:#64e0b50d;border-color:#64e0b533}.handoff-blocker strong,.next-action strong{color:var(--red);letter-spacing:.08em;text-transform:uppercase;font-size:8px}.next-action strong{color:var(--accent)}.handoff-blocker span,.next-action span{color:#b7c0ce;font-size:10px;line-height:1.4}.loading-shell{width:min(560px,100% - 40px);margin:0 auto;padding-top:22vh}.loading-shell .brand-mark{border-radius:14px;width:48px;height:48px;margin-bottom:25px;font-size:29px}.loading-shell h1{color:#f0f3f8;letter-spacing:-.045em;margin:0;font-size:clamp(30px,6vw,50px);line-height:1.05}.loading-shell>p:not(.section-kicker){max-width:460px;color:var(--muted);margin:18px 0 22px;font-size:14px;line-height:1.6}.session-options{grid-template-columns:minmax(220px,.75fr) minmax(420px,1.25fr);gap:22px;padding:20px;display:grid}.session-options-copy h2{color:#edf1f7;margin:2px 0 8px;font-size:16px}.session-options-copy>p:last-child{max-width:520px;color:var(--quiet);margin:0;font-size:10px;line-height:1.55}.session-options-controls{grid-template-columns:minmax(0,1.4fr) minmax(130px,.6fr);align-items:end;gap:10px;display:grid}.session-options-controls>label:not(.effect-ack){color:var(--quiet);gap:5px;font-size:9px;display:grid}.session-options-controls select{border:1px solid var(--line);color:#e4e9f1;background:#121821;border-radius:7px;width:100%;min-height:36px;padding:0 10px}.effect-ack{color:#b9c1cd;grid-column:1/-1;align-items:flex-start;gap:8px;font-size:10px;line-height:1.4;display:flex}.effect-ack input{accent-color:var(--accent);margin-top:1px}.session-option-actions{grid-column:1/-1;gap:8px;display:flex}.session-option-actions button{border:1px solid var(--line);color:#dbe2ec;background:#1a222d;border-radius:7px;min-height:34px;padding:0 13px}.session-option-actions button:disabled{opacity:.42}.session-options-controls>small{color:var(--quiet);grid-column:1/-1;font-size:9px}.session-options-unavailable{color:var(--quiet);flex-direction:column;justify-content:center;gap:5px;font-size:10px;display:flex}.session-options-unavailable strong{color:#d7dde7;font-size:12px}.lifecycle-panel{grid-template-columns:minmax(260px,1fr) minmax(150px,auto) minmax(360px,auto);align-items:center;gap:20px;margin-top:18px;padding:18px 20px;display:grid}.lifecycle-copy h2{color:#edf1f7;margin:2px 0 7px;font-size:16px}.lifecycle-copy>p:last-child{max-width:620px;color:var(--quiet);margin:0;font-size:10px;line-height:1.55}.lifecycle-state{border-left:1px solid var(--line);gap:4px;min-width:150px;padding-left:18px;display:grid}.lifecycle-state>span{color:var(--quiet);text-transform:uppercase;font-size:9px;font-weight:800}.lifecycle-state strong{color:#e5eaf2;font-size:12px}.lifecycle-state small{color:var(--quiet);font-size:9px}.lifecycle-actions{flex-wrap:wrap;justify-content:flex-end;gap:8px;display:flex}.lifecycle-actions button{cursor:pointer;border-radius:7px;min-height:36px;padding:0 13px;font-size:10px;font-weight:750}.lifecycle-actions button:disabled{cursor:not-allowed;opacity:.4}.primary-action{color:#07130f;background:var(--accent);border:1px solid #3cae88}.lifecycle-result{border-radius:7px;grid-column:1/-1;margin:-6px 0 0;padding:9px 11px;font-size:10px;line-height:1.45}.lifecycle-result.result-ok{color:#bcebd9;background:#64e0b512}.lifecycle-result.result-warning{color:#efd09b;background:#efba6314}.approval-stack{gap:12px;display:grid}.approval-card{background:linear-gradient(135deg,#412518eb,#19181bf5);border:1px solid #70462e;border-radius:13px;padding:20px;overflow:hidden;box-shadow:0 16px 42px #00000038}.approval-card.risk-critical,.approval-card.risk-high{border-color:#9d4d3f}.approval-card>header,.approval-card>footer{justify-content:space-between;align-items:center;gap:12px;display:flex}.approval-card h2{color:#fff1e7;margin:2px 0 0;font-size:18px}.approval-risk{color:#ffbd91;text-transform:uppercase;border:1px solid #ffad7c59;border-radius:999px;padding:5px 9px;font-size:10px;font-weight:800}.approval-reason{color:#f1d8c7;margin:13px 0;font-size:12px;line-height:1.55}.approval-preview{color:#f3e7df;white-space:pre-wrap;word-break:break-word;background:#141316;border:1px solid #ffffff17;border-radius:8px;max-height:180px;margin:0 0 14px;padding:12px;font:11px/1.55 ui-monospace,SFMono-Regular,Menlo,monospace;overflow:auto}.approval-facts{grid-template-columns:repeat(3,minmax(0,1fr));gap:8px;margin:0 0 13px;display:grid}.approval-facts>div{background:#ffffff09;border-radius:7px;min-width:0;padding:9px}.approval-facts dt{color:#bca393;text-transform:uppercase;font-size:9px;font-weight:800}.approval-facts dd{color:#f0e7e1;text-overflow:ellipsis;margin:4px 0 0;font-size:10px;overflow:hidden}.approval-targets,.approval-consequences{color:#d9c8bc;font-size:10px;line-height:1.55}.approval-targets ul{margin:6px 0 12px;padding-left:18px}.approval-consequences{grid-template-columns:1fr 1fr;gap:10px;margin:12px 0;display:grid}.approval-consequences p{background:#ffffff09;border-radius:7px;margin:0;padding:10px}.approval-card>footer{justify-content:flex-end;padding-top:4px}.approval-card button{border-radius:7px;min-height:36px;padding:0 14px;font-weight:750}.secondary-action{border:1px solid var(--line);color:#dbe2ec;background:#1a222d}.danger-action{color:#fff5ee;background:#8f3e31;border:1px solid #c56b52}.approval-card button:disabled{cursor:wait;opacity:.48}.task-run-index,.release-monitor{margin-top:18px;overflow:hidden}.release-monitor .source-heading button{border:1px solid var(--line);color:var(--text);background:var(--surface-2);border-radius:8px;padding:8px 12px}.release-monitor .source-heading button:disabled{opacity:.55}.release-monitor-grid{border-top:1px solid var(--line);grid-template-columns:minmax(0,1.15fr) minmax(320px,.85fr);display:grid}.release-monitor-column+.release-monitor-column{border-left:1px solid var(--line)}.release-monitor-column>header{border-bottom:1px solid var(--line);justify-content:space-between;align-items:center;gap:14px;padding:16px 20px;display:flex}.release-monitor-column h3{margin:2px 0 0}.benchmark-run-card{border-bottom:1px solid var(--line);padding:14px 20px}.benchmark-run-card>div:first-child{justify-content:space-between;align-items:center;gap:12px;display:flex}.benchmark-run-card small{color:var(--muted);margin-top:4px;display:block}.benchmark-run-facts{color:var(--muted);flex-wrap:wrap;gap:8px 18px;margin-top:9px;font-size:12px;display:flex}.release-readiness-facts{margin:0;padding:4px 20px 12px}.release-readiness-facts>div{border-bottom:1px solid var(--line);justify-content:space-between;align-items:center;gap:16px;padding:10px 0;display:flex}.release-readiness-facts dt{color:var(--muted)}.release-readiness-facts dd{text-align:right;margin:0}.release-blockers{border:1px solid color-mix(in srgb, var(--warning) 35%, var(--line));background:color-mix(in srgb, var(--warning) 7%, transparent);border-radius:8px;margin:0 20px 14px;padding:12px 14px}.release-blockers ul{color:var(--muted);margin:8px 0 0;padding-left:18px}.release-blockers li+li{margin-top:5px}.task-index-controls{border-bottom:1px solid var(--line);gap:8px;padding:0 20px 16px;display:flex}.task-index-controls button{border:1px solid var(--line);color:var(--muted);background:var(--surface-2);border-radius:999px;padding:7px 12px}.task-index-controls button[aria-pressed=true]{color:var(--text);border-color:var(--accent);background:color-mix(in srgb, var(--accent) 15%, var(--surface-2))}.task-run-list{display:grid}.task-run-card{border-bottom:1px solid var(--line);grid-template-columns:minmax(0,1fr) auto;align-items:center;gap:18px;padding:15px 20px;display:grid}.task-run-card[data-active=true]{box-shadow:inset 3px 0 var(--accent);background:color-mix(in srgb, var(--accent) 5%, transparent)}.task-run-card[data-selected=true]{outline:1px solid var(--accent);outline-offset:-1px}.task-run-main{min-width:0}.task-run-main>div{align-items:center;gap:9px;display:flex}.task-run-main strong,.task-run-main small{text-overflow:ellipsis;white-space:nowrap;display:block;overflow:hidden}.task-run-main small,.task-run-meta{color:var(--muted)}.active-run-tag{border:1px solid var(--accent);color:var(--accent);border-radius:999px;padding:2px 7px;font-size:11px}.task-run-meta{justify-content:flex-end;align-items:center;gap:12px;font-size:12px;display:flex}.task-index-empty,.task-index-warning{color:var(--muted);margin:0;padding:18px 20px}.task-index-warning{border-top:1px solid var(--line);color:var(--warning)}.task-run-meta button{border:1px solid var(--line);color:var(--text);background:var(--surface-2);border-radius:7px;padding:6px 9px}.task-run-meta button[aria-pressed=true]{border-color:var(--accent);color:var(--accent)}.task-timeline{border-top:1px solid var(--line)}.task-timeline>header{border-bottom:1px solid var(--line);justify-content:space-between;align-items:center;gap:16px;padding:18px 20px;display:flex}.task-timeline h3{margin:2px 0 0}.timeline-continuity{color:var(--muted);border-bottom:1px solid var(--line);flex-wrap:wrap;gap:10px 24px;padding:12px 20px;display:flex}.timeline-events{margin:0;padding:0;list-style:none}.timeline-events li{border-bottom:1px solid var(--line);grid-template-columns:12px minmax(0,1fr) auto;align-items:start;gap:12px;padding:13px 20px;display:grid}.timeline-events small,.timeline-events p{color:var(--muted);margin:3px 0 0;display:block}.timeline-dot{background:var(--muted);border-radius:999px;width:9px;height:9px;margin-top:5px}.timeline-dot.tone-positive{background:var(--positive)}.timeline-dot.tone-warning{background:var(--warning)}.timeline-dot.tone-danger{background:var(--danger)}.timeline-dot.tone-info{background:var(--accent)}.recovery-summary{grid-template-columns:repeat(4,minmax(0,1fr));display:grid}.retained-content-note{color:var(--muted);border-bottom:1px solid var(--line);margin:0;padding:10px 20px;font-size:12px}.next-action-card{border-bottom:1px solid var(--line);background:color-mix(in srgb, var(--accent) 7%, transparent);grid-template-columns:minmax(180px,.45fr) 1fr auto;align-items:center;gap:18px;padding:16px 20px;display:grid}.next-action-card span,.next-action-card strong{display:block}.next-action-card span,.next-action-card p,.next-action-card small{color:var(--muted)}.next-action-card p{margin:0}.handoff-summary{grid-template-columns:repeat(4,minmax(0,1fr));display:grid}.workspace-stack>.surface,.workspace-view>.surface,.workspace-stack>.evidence-section,.workspace-view>.evidence-section{margin-top:0}:root[data-piagent-color-mode=light] .task-heading h2,:root[data-piagent-color-mode=light] .task-empty h2,:root[data-piagent-color-mode=light] .criterion-copy p,:root[data-piagent-color-mode=light] .compact-panel dd,:root[data-piagent-color-mode=light] .chat-heading h2,:root[data-piagent-color-mode=light] .chat-message strong,:root[data-piagent-color-mode=light] .chat-message p,:root[data-piagent-color-mode=light] .attachment-list strong,:root[data-piagent-color-mode=light] .diff-toolbar strong,:root[data-piagent-color-mode=light] .activity-copy strong,:root[data-piagent-color-mode=light] .activity-result strong,:root[data-piagent-color-mode=light] .evidence-card h3,:root[data-piagent-color-mode=light] .budget-grid dd,:root[data-piagent-color-mode=light] .session-options-copy h2,:root[data-piagent-color-mode=light] .session-options-unavailable strong,:root[data-piagent-color-mode=light] .lifecycle-copy h2,:root[data-piagent-color-mode=light] .lifecycle-state strong{color:var(--text)}:root[data-piagent-color-mode=light] .chat-body,:root[data-piagent-color-mode=light] .activity-row{background:#62740006}:root[data-piagent-color-mode=light] .source-tabs{background:#f8f9f4}:root[data-piagent-color-mode=light] .source-tabs button:hover{color:var(--text)}:root[data-piagent-color-mode=light] .chat-message,:root[data-piagent-color-mode=light] .chat-tool-live,:root[data-piagent-color-mode=light] .chat-tool-result,:root[data-piagent-color-mode=light] .held-queue li,:root[data-piagent-color-mode=light] .log-preview{color:var(--text);background:#fafbf7}:root[data-piagent-color-mode=light] .chat-user{background:#506db712}:root[data-piagent-color-mode=light] .chat-composer-preview,:root[data-piagent-color-mode=light] .unchanged-region{background:#f7f8f3}:root[data-piagent-color-mode=light] .chat-composer-preview textarea,:root[data-piagent-color-mode=light] .session-options-controls select{color:var(--text);background:#fff}:root[data-piagent-color-mode=light] .review-state button,:root[data-piagent-color-mode=light] .commit-summary-output button,:root[data-piagent-color-mode=light] .confirm-actions button,:root[data-piagent-color-mode=light] .session-option-actions button{color:var(--text);background:var(--surface-strong)}:root[data-piagent-color-mode=light] .commit-summary-panel h3,:root[data-piagent-color-mode=light] .commit-summary-output>strong{color:var(--text)}:root[data-piagent-color-mode=light] .commit-summary-output{background:#ffffffbf}:root[data-piagent-color-mode=light] .diff-line code,:root[data-piagent-color-mode=light] .split-line code{color:#3f443a}:root[data-piagent-color-mode=light] .diff-line>span,:root[data-piagent-color-mode=light] .split-line>span{color:#92988d}:root[data-piagent-color-mode=light] .syntax-keyword{color:#6e3bb2}:root[data-piagent-color-mode=light] .syntax-string{color:#317040}:root[data-piagent-color-mode=light] .syntax-number{color:#9b5a12}:root[data-piagent-color-mode=light] .syntax-comment{color:#7b8176}:root[data-piagent-color-mode=light] .syntax-literal{color:#235fa8}:root[data-piagent-color-mode=light] .syntax-property{color:#176f69}:root[data-piagent-color-mode=light] .mode-switch .MuiToggleButton-root.Mui-selected{color:#1c2018;background:#e8ecdf}:root[data-piagent-color-mode=light] .diff-added{background:#14775f1a}:root[data-piagent-color-mode=light] .diff-added code,:root[data-piagent-color-mode=light] .diff-added b{color:#0a654e}:root[data-piagent-color-mode=light] .diff-deleted{background:#c43f4c1a}:root[data-piagent-color-mode=light] .diff-deleted code,:root[data-piagent-color-mode=light] .diff-deleted b{color:#a02734}:root[data-piagent-color-mode=light] .confirm-dialog{color:var(--text);background:#fff}:root[data-piagent-color-mode=light] .confirm-dialog h3,:root[data-piagent-color-mode=light] .confirm-dialog>p:not(.section-kicker){color:var(--text)}:root[data-piagent-color-mode=light] .revert-diff{background:#f8f9f4}:root[data-piagent-color-mode=light] .approval-card{color:#3f2b20;background:linear-gradient(135deg,#fff7ef,#fff);border-color:#d7b18f}:root[data-piagent-color-mode=light] .approval-card h2,:root[data-piagent-color-mode=light] .approval-preview,:root[data-piagent-color-mode=light] .approval-facts dd{color:#3f2b20}:root[data-piagent-color-mode=light] .approval-preview{background:#fffaf5}:root[data-piagent-color-mode=light] .approval-reason,:root[data-piagent-color-mode=light] .approval-targets,:root[data-piagent-color-mode=light] .approval-consequences{color:#6d4d3c}@media (max-width:1080px){.lifecycle-panel{grid-template-columns:1fr auto}.lifecycle-actions{grid-column:1/-1;justify-content:flex-start}.lifecycle-result{grid-column:1/-1}.runtime-strip{grid-template-columns:repeat(3,1fr)}.runtime-strip>div:nth-child(3){border-right:0}.runtime-strip>div:nth-child(-n+3){border-bottom:1px solid var(--line)}.content-grid{grid-template-columns:1fr}.context-rail,.evidence-grid{grid-template-columns:repeat(2,1fr)}}@media (max-width:899px){.source-body{grid-template-columns:1fr}.file-panel{border-right:0;border-bottom:1px solid var(--line)}.file-list{max-height:300px}.diff-empty{min-height:300px}}@media (max-width:720px){.release-monitor-grid{grid-template-columns:1fr}.release-monitor-column+.release-monitor-column{border-left:0;border-top:1px solid var(--line)}.recovery-summary{grid-template-columns:repeat(2,minmax(0,1fr))}.handoff-summary,.next-action-card,.commit-summary-panel,.approval-facts,.approval-consequences{grid-template-columns:1fr}.approval-card>header,.approval-card>footer{flex-direction:column;align-items:flex-start}.approval-card>footer button{width:100%}.session-options,.session-options-controls{grid-template-columns:1fr}.effect-ack,.session-option-actions,.session-options-controls>small{grid-column:1}.lifecycle-panel{grid-template-columns:1fr;align-items:stretch}.lifecycle-state{border-left:0;padding:0}.lifecycle-actions{grid-column:1}.lifecycle-actions button{flex:150px}.lifecycle-result{grid-column:1}.topbar{grid-template-columns:1fr auto;min-height:60px;padding:0 16px}.session-title,.read-only-badge{display:none}.workspace{width:min(100% - 24px,1460px);padding-top:12px}.runtime-strip{grid-template-columns:repeat(2,1fr)}.runtime-strip>div{border-bottom:1px solid var(--line);min-height:62px;padding:11px}.runtime-strip>div:nth-child(2n){border-right:0}.runtime-strip>div:nth-last-child(-n+2){border-bottom:0}.task-dashboard{padding:19px 14px}.chat-heading{flex-direction:column;align-items:flex-start;padding:15px}.chat-heading>div:last-child{flex-direction:column;align-items:flex-start}.chat-body{padding:13px}.chat-message{width:94%}.chat-composer-preview,.task-heading{grid-template-columns:1fr}.progress-number{text-align:left;align-items:baseline;gap:10px;display:flex}.progress-number strong{font-size:25px}.progress-track{margin:18px 0 24px}.criterion-card{grid-template-columns:32px minmax(0,1fr);gap:10px}.criterion-card>.status-pill{grid-column:2}.criterion-copy>div{flex-direction:column;align-items:flex-start;gap:5px}.context-rail{grid-template-columns:1fr}.task-empty{grid-template-columns:1fr;min-height:340px;padding:28px 22px}.source-tabs{padding:0 8px;overflow-x:auto}.source-tabs button{flex:none}.source-heading{padding:16px}.source-heading>span,.file-provenance,.file-evidence{display:none}.file-row{grid-template-columns:26px minmax(0,1fr) auto}.diff-toolbar{flex-direction:column;align-items:flex-start}.panel-heading{flex-direction:column;align-items:flex-start;padding:16px}.activity-row{grid-template-columns:10px minmax(0,1fr)}.activity-result{text-align:left;grid-column:2;grid-template-columns:auto auto 1fr}.activity-result button{grid-column:auto;justify-self:end}.section-title-row{flex-direction:column;align-items:flex-start;gap:8px}.section-title-row>span{text-align:left;max-width:100%}.evidence-grid{grid-template-columns:1fr}.evidence-card{min-height:auto}.task-run-card{grid-template-columns:1fr;gap:9px}.task-run-meta{flex-wrap:wrap;justify-content:flex-start}}@media (prefers-reduced-motion:reduce){*,:before,:after{scroll-behavior:auto!important;transition:none!important;animation:none!important}}@media (forced-colors:active){.status-dot,.activity-state,.progress-track span,.context-meter span{forced-color-adjust:none;background:highlight}.file-row[data-selected=true],.source-tabs button[aria-selected=true]{outline:2px solid highlight}}
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
<!doctype html>
|
|
2
|
+
<html lang="vi">
|
|
3
|
+
<head>
|
|
4
|
+
<meta charset="UTF-8" />
|
|
5
|
+
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
|
6
|
+
<meta name="color-scheme" content="dark" />
|
|
7
|
+
<meta name="csp-nonce" content="__PIAGENT_CSP_NONCE__" />
|
|
8
|
+
<meta name="piagent-webui-mode" content="__PIAGENT_WEBUI_MODE__" />
|
|
9
|
+
<title>Piagent WebUI</title>
|
|
10
|
+
<script type="module" crossorigin src="/assets/index-DjMntaK5.js"></script>
|
|
11
|
+
<link rel="stylesheet" crossorigin href="/assets/index-DwKCWbwd.css">
|
|
12
|
+
</head>
|
|
13
|
+
<body>
|
|
14
|
+
<div id="root"></div>
|
|
15
|
+
</body>
|
|
16
|
+
</html>
|
|
@@ -0,0 +1,323 @@
|
|
|
1
|
+
import { createHash, randomBytes } from "node:crypto";
|
|
2
|
+
import fs from "node:fs";
|
|
3
|
+
import os from "node:os";
|
|
4
|
+
import path from "node:path";
|
|
5
|
+
|
|
6
|
+
import { redactSensitiveText } from "../../piagent-core/extensions/redaction-core.js";
|
|
7
|
+
import { supportedChatImageMimeType } from "../../piagent-core/runtime/input/chat-images.ts";
|
|
8
|
+
import type { BridgeIdentity, BridgeSnapshot } from "./same-session-bridge.ts";
|
|
9
|
+
|
|
10
|
+
export const ATTACHMENT_LIMITS = {
|
|
11
|
+
countPerMessage: 4,
|
|
12
|
+
imageBytes: 8 * 1024 * 1024,
|
|
13
|
+
textBytes: 256 * 1024,
|
|
14
|
+
totalBytesPerMessage: 16 * 1024 * 1024,
|
|
15
|
+
runtimeCount: 64,
|
|
16
|
+
runtimeBytes: 64 * 1024 * 1024,
|
|
17
|
+
ttlMs: 10 * 60_000
|
|
18
|
+
} as const;
|
|
19
|
+
|
|
20
|
+
const IMAGE_MIMES = new Set(["image/png", "image/jpeg", "image/gif", "image/webp", "image/bmp"]);
|
|
21
|
+
const TEXT_MIMES = new Set(["text/plain", "text/markdown", "application/json"]);
|
|
22
|
+
const REF = /^[A-Za-z0-9][A-Za-z0-9._~-]{0,159}$/;
|
|
23
|
+
const PUBLIC_REF = /^[A-Za-z0-9][A-Za-z0-9._:@~-]{0,159}$/;
|
|
24
|
+
const REVISION = /^[A-Za-z0-9][A-Za-z0-9._:~-]{0,159}$/;
|
|
25
|
+
const IDEMPOTENCY = /^[A-Za-z0-9._~-]{32,128}$/;
|
|
26
|
+
const BASE64 = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/;
|
|
27
|
+
const OWNED_FILE = /^[a-f0-9]{48}\.bin$/;
|
|
28
|
+
|
|
29
|
+
type StoredAttachment = Attachment & {
|
|
30
|
+
projectRef: string;
|
|
31
|
+
runtimeInstanceId: string;
|
|
32
|
+
sessionRef: string;
|
|
33
|
+
absolutePath: string;
|
|
34
|
+
device: number;
|
|
35
|
+
inode: number;
|
|
36
|
+
};
|
|
37
|
+
type Attachment = { attachmentRef: string; messageRequestId: string; displayName: string; kind: "file" | "image";
|
|
38
|
+
mimeType: string; sizeBytes: number; expiresAt: string };
|
|
39
|
+
type StageCommand = { schemaVersion: 1; version: "piagent-webui-attachment-v1"; messageType: "stage-command"; commandId: string;
|
|
40
|
+
idempotencyKey: string; requestedAt: string; expiresAt: string; identity: BridgeIdentity; expectedRuntimeRevision: string;
|
|
41
|
+
messageRequestId: string; file: { displayName: string; declaredMimeType: string; dataBase64: string } };
|
|
42
|
+
type StageResultCode = "staged" | "invalid-command" | "identity-mismatch" | "stale-revision" | "expired" | "unsupported-type"
|
|
43
|
+
| "invalid-content" | "limit-exceeded" | "storage-unavailable" | "idempotency-payload-mismatch" | "capability-unavailable";
|
|
44
|
+
export type StageReceipt = { schemaVersion: 1; version: "piagent-webui-attachment-v1"; messageType: "stage-receipt"; commandId: string;
|
|
45
|
+
identity: BridgeIdentity; phase: "settled" | "rejected"; resultCode: StageResultCode; requestedAt: string; settledAt: string;
|
|
46
|
+
deduplicated: boolean; attachment: Attachment | null; error: { code: string; message: string; retryable: boolean } | null };
|
|
47
|
+
type DiscardCommand = Omit<StageCommand, "messageType" | "file"> & { messageType: "discard-command"; attachmentRef: string };
|
|
48
|
+
export type DiscardReceipt = Omit<StageReceipt, "messageType" | "resultCode" | "attachment"> & { messageType: "discard-receipt";
|
|
49
|
+
resultCode: "discarded" | "invalid-command" | "identity-mismatch" | "stale-revision" | "expired" | "attachment-unavailable"
|
|
50
|
+
| "idempotency-payload-mismatch" | "capability-unavailable"; attachmentRef: string | null };
|
|
51
|
+
type CachedStage = { fingerprint: string; receipt: StageReceipt; expiresAt: number };
|
|
52
|
+
type TextContent = { type: "text"; text: string };
|
|
53
|
+
type ImageContent = { type: "image"; data: string; mimeType: string };
|
|
54
|
+
export type PreparedAttachments = { content: string | Array<TextContent | ImageContent>; observedText: string };
|
|
55
|
+
|
|
56
|
+
function exactKeys(value: unknown, expected: string[]): boolean {
|
|
57
|
+
return Boolean(value && typeof value === "object" && !Array.isArray(value)
|
|
58
|
+
&& JSON.stringify(Object.keys(value as Record<string, unknown>).sort()) === JSON.stringify([...expected].sort()));
|
|
59
|
+
}
|
|
60
|
+
function timestamp(value: unknown): value is string {
|
|
61
|
+
if (typeof value !== "string" || !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(value)) return false;
|
|
62
|
+
const parsed = Date.parse(value);
|
|
63
|
+
return Number.isFinite(parsed) && new Date(parsed).toISOString() === value;
|
|
64
|
+
}
|
|
65
|
+
function validIdentity(value: unknown): value is BridgeIdentity {
|
|
66
|
+
if (!exactKeys(value, ["projectRef", "runtimeInstanceId", "sessionRef", "taskId", "taskRunId", "agentOperationId", "toolCallId"])) return false;
|
|
67
|
+
const item = value as BridgeIdentity;
|
|
68
|
+
return [item.projectRef, item.runtimeInstanceId, item.sessionRef].every((part) => typeof part === "string" && REF.test(part))
|
|
69
|
+
&& (item.taskId === null || typeof item.taskId === "string" && PUBLIC_REF.test(item.taskId))
|
|
70
|
+
&& (item.taskRunId === null || typeof item.taskRunId === "string" && PUBLIC_REF.test(item.taskRunId))
|
|
71
|
+
&& (item.taskRunId === null || item.taskId !== null)
|
|
72
|
+
&& (item.agentOperationId === null || typeof item.agentOperationId === "string" && REF.test(item.agentOperationId))
|
|
73
|
+
&& item.toolCallId === null;
|
|
74
|
+
}
|
|
75
|
+
function sameIdentity(left: BridgeIdentity, right: BridgeIdentity): boolean {
|
|
76
|
+
return left.projectRef === right.projectRef && left.runtimeInstanceId === right.runtimeInstanceId && left.sessionRef === right.sessionRef
|
|
77
|
+
&& left.taskId === right.taskId && left.taskRunId === right.taskRunId && left.agentOperationId === right.agentOperationId && left.toolCallId === right.toolCallId;
|
|
78
|
+
}
|
|
79
|
+
function fingerprint(command: unknown): string {
|
|
80
|
+
return createHash("sha256").update(JSON.stringify(command)).digest("hex");
|
|
81
|
+
}
|
|
82
|
+
function safeName(value: unknown): string {
|
|
83
|
+
const basename = path.basename(String(value ?? "attachment").replace(/[\\/]/g, "_"));
|
|
84
|
+
return redactSensitiveText(basename).text.replace(/[\u0000-\u001F\u007F]/g, " ").replace(/\s+/g, " ").trim().slice(0, 160) || "attachment";
|
|
85
|
+
}
|
|
86
|
+
function errorMessage(code: StageReceipt["resultCode"]): string {
|
|
87
|
+
const messages: Partial<Record<StageReceipt["resultCode"], string>> = {
|
|
88
|
+
"invalid-command": "The attachment command is invalid.", "identity-mismatch": "The attachment targets a different Pi session.",
|
|
89
|
+
"stale-revision": "The Pi session changed before the attachment was staged.", expired: "The attachment command expired.",
|
|
90
|
+
"unsupported-type": "This file type is not supported.", "invalid-content": "The selected file content is invalid.",
|
|
91
|
+
"limit-exceeded": "The attachment limit was exceeded.", "storage-unavailable": "Private attachment storage is unavailable.",
|
|
92
|
+
"idempotency-payload-mismatch": "This upload key was already used for different content.",
|
|
93
|
+
"capability-unavailable": "The active Pi model cannot accept this attachment."
|
|
94
|
+
};
|
|
95
|
+
return messages[code] ?? "The attachment could not be staged.";
|
|
96
|
+
}
|
|
97
|
+
|
|
98
|
+
export class AttachmentStore {
|
|
99
|
+
readonly #runtimeInstanceId: string;
|
|
100
|
+
readonly #bridgeSnapshot: () => BridgeSnapshot;
|
|
101
|
+
readonly #modelSupportsImages: () => boolean;
|
|
102
|
+
readonly #now: () => Date;
|
|
103
|
+
#directory: string;
|
|
104
|
+
readonly #directoryDevice: number;
|
|
105
|
+
readonly #directoryInode: number;
|
|
106
|
+
readonly #records = new Map<string, StoredAttachment>();
|
|
107
|
+
readonly #cache = new Map<string, CachedStage>();
|
|
108
|
+
readonly #discardCache = new Map<string, { fingerprint: string; receipt: DiscardReceipt; expiresAt: number }>();
|
|
109
|
+
#closed = false;
|
|
110
|
+
|
|
111
|
+
constructor(options: { runtimeInstanceId: string; bridgeSnapshot: () => BridgeSnapshot; modelSupportsImages: () => boolean;
|
|
112
|
+
now?: () => Date; tempRoot?: string }) {
|
|
113
|
+
if (!REF.test(options.runtimeInstanceId)) throw new Error("webui-attachment-runtime-invalid");
|
|
114
|
+
this.#runtimeInstanceId = options.runtimeInstanceId; this.#bridgeSnapshot = options.bridgeSnapshot;
|
|
115
|
+
this.#modelSupportsImages = options.modelSupportsImages; this.#now = options.now ?? (() => new Date());
|
|
116
|
+
const parent = path.resolve(options.tempRoot ?? os.tmpdir());
|
|
117
|
+
this.#directory = fs.mkdtempSync(path.join(parent, "piagent-webui-attachments-"));
|
|
118
|
+
fs.chmodSync(this.#directory, 0o700);
|
|
119
|
+
const inspected = fs.lstatSync(this.#directory);
|
|
120
|
+
if (!inspected.isDirectory() || inspected.isSymbolicLink() || (inspected.mode & 0o077) !== 0) throw new Error("webui-attachment-storage-unsafe");
|
|
121
|
+
this.#directoryDevice = inspected.dev; this.#directoryInode = inspected.ino;
|
|
122
|
+
}
|
|
123
|
+
|
|
124
|
+
capability(): { kinds: Array<"file" | "image">; mimeTypes: string[] } {
|
|
125
|
+
const image = this.#modelSupportsImages();
|
|
126
|
+
return { kinds: image ? ["file", "image"] : ["file"], mimeTypes: [...TEXT_MIMES, ...(image ? IMAGE_MIMES : [])].sort() };
|
|
127
|
+
}
|
|
128
|
+
|
|
129
|
+
stage(input: unknown): StageReceipt {
|
|
130
|
+
const now = this.#now(); this.#cleanup(now.getTime());
|
|
131
|
+
const snapshot = this.#bridgeSnapshot(), command = input as StageCommand;
|
|
132
|
+
const invalid = this.#validate(command);
|
|
133
|
+
if (invalid) return this.#reject(command, snapshot, "invalid-command", invalid, now);
|
|
134
|
+
const key = command.idempotencyKey, found = this.#cache.get(key), commandFingerprint = fingerprint(command);
|
|
135
|
+
if (found) {
|
|
136
|
+
if (found.fingerprint !== commandFingerprint) return this.#reject(command, snapshot, "idempotency-payload-mismatch", null, now);
|
|
137
|
+
return { ...structuredClone(found.receipt), deduplicated: true };
|
|
138
|
+
}
|
|
139
|
+
if (this.#closed || snapshot.state !== "ready" || snapshot.taskState === "terminal" || !snapshot.identity || !snapshot.revisions)
|
|
140
|
+
return this.#reject(command, snapshot, "capability-unavailable", "attachment-store-not-ready", now);
|
|
141
|
+
if (Date.parse(command.requestedAt) > now.getTime() + 30_000) return this.#reject(command, snapshot, "invalid-command", "requested-at-in-future", now);
|
|
142
|
+
if (now.getTime() > Date.parse(command.expiresAt)) return this.#reject(command, snapshot, "expired", null, now);
|
|
143
|
+
if (!sameIdentity(command.identity, snapshot.identity)) return this.#reject(command, snapshot, "identity-mismatch", null, now);
|
|
144
|
+
if (command.expectedRuntimeRevision !== snapshot.revisions.runtimeRevision) return this.#reject(command, snapshot, "stale-revision", null, now);
|
|
145
|
+
|
|
146
|
+
let bytes: Buffer;
|
|
147
|
+
try { bytes = Buffer.from(command.file.dataBase64, "base64"); }
|
|
148
|
+
catch { return this.#reject(command, snapshot, "invalid-content", "base64-decode-failed", now); }
|
|
149
|
+
if (bytes.length < 1 || bytes.toString("base64") !== command.file.dataBase64) return this.#reject(command, snapshot, "invalid-content", "base64-noncanonical", now);
|
|
150
|
+
const declared = command.file.declaredMimeType, image = IMAGE_MIMES.has(declared), text = TEXT_MIMES.has(declared);
|
|
151
|
+
if (!image && !text) return this.#reject(command, snapshot, "unsupported-type", null, now);
|
|
152
|
+
let mimeType = declared;
|
|
153
|
+
if (image) {
|
|
154
|
+
if (!this.#modelSupportsImages()) return this.#reject(command, snapshot, "capability-unavailable", "model-image-input-unavailable", now);
|
|
155
|
+
const detected = supportedChatImageMimeType(bytes);
|
|
156
|
+
if (!detected || detected !== declared) return this.#reject(command, snapshot, "invalid-content", "image-mime-mismatch", now);
|
|
157
|
+
mimeType = detected;
|
|
158
|
+
if (bytes.length > ATTACHMENT_LIMITS.imageBytes) return this.#reject(command, snapshot, "limit-exceeded", "image-size-limit", now);
|
|
159
|
+
} else {
|
|
160
|
+
if (bytes.length > ATTACHMENT_LIMITS.textBytes) return this.#reject(command, snapshot, "limit-exceeded", "text-size-limit", now);
|
|
161
|
+
try {
|
|
162
|
+
const decoded = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
|
|
163
|
+
if (decoded.includes("\0")) throw new Error("nul");
|
|
164
|
+
if (declared === "application/json") JSON.parse(decoded);
|
|
165
|
+
} catch { return this.#reject(command, snapshot, "invalid-content", "text-content-invalid", now); }
|
|
166
|
+
}
|
|
167
|
+
const messageRecords = [...this.#records.values()].filter((item) => item.sessionRef === snapshot.identity!.sessionRef
|
|
168
|
+
&& item.messageRequestId === command.messageRequestId);
|
|
169
|
+
if (messageRecords.length >= ATTACHMENT_LIMITS.countPerMessage
|
|
170
|
+
|| messageRecords.reduce((sum, item) => sum + item.sizeBytes, 0) + bytes.length > ATTACHMENT_LIMITS.totalBytesPerMessage
|
|
171
|
+
|| this.#records.size >= ATTACHMENT_LIMITS.runtimeCount
|
|
172
|
+
|| [...this.#records.values()].reduce((sum, item) => sum + item.sizeBytes, 0) + bytes.length > ATTACHMENT_LIMITS.runtimeBytes)
|
|
173
|
+
return this.#reject(command, snapshot, "limit-exceeded", "attachment-capacity-limit", now);
|
|
174
|
+
const attachmentRef = `attachment.${randomBytes(24).toString("hex")}`, filename = `${randomBytes(24).toString("hex")}.bin`;
|
|
175
|
+
const absolutePath = path.join(this.#directory, filename), expiresAt = new Date(now.getTime() + ATTACHMENT_LIMITS.ttlMs).toISOString();
|
|
176
|
+
try {
|
|
177
|
+
if (!this.#safeDirectory()) throw new Error("unsafe-directory");
|
|
178
|
+
const descriptor = fs.openSync(absolutePath, fs.constants.O_WRONLY | fs.constants.O_CREAT | fs.constants.O_EXCL | (fs.constants.O_NOFOLLOW ?? 0), 0o600);
|
|
179
|
+
try { fs.writeFileSync(descriptor, bytes); fs.fsyncSync(descriptor); fs.fchmodSync(descriptor, 0o600); }
|
|
180
|
+
finally { fs.closeSync(descriptor); }
|
|
181
|
+
const inspected = fs.lstatSync(absolutePath);
|
|
182
|
+
if (!inspected.isFile() || inspected.isSymbolicLink() || inspected.size !== bytes.length || (inspected.mode & 0o077) !== 0) throw new Error("unsafe-file");
|
|
183
|
+
const attachment = { attachmentRef, messageRequestId: command.messageRequestId, displayName: safeName(command.file.displayName),
|
|
184
|
+
kind: image ? "image" as const : "file" as const, mimeType, sizeBytes: bytes.length, expiresAt };
|
|
185
|
+
this.#records.set(attachmentRef, { ...attachment, projectRef: snapshot.identity.projectRef, runtimeInstanceId: snapshot.identity.runtimeInstanceId,
|
|
186
|
+
sessionRef: snapshot.identity.sessionRef, absolutePath, device: inspected.dev, inode: inspected.ino });
|
|
187
|
+
const receipt = this.#receipt(command, snapshot.identity, "settled", "staged", attachment, null, now, false);
|
|
188
|
+
this.#cache.set(key, { fingerprint: commandFingerprint, receipt: structuredClone(receipt), expiresAt: Date.parse(expiresAt) });
|
|
189
|
+
return receipt;
|
|
190
|
+
} catch {
|
|
191
|
+
this.#deleteOwnedPath(absolutePath); return this.#reject(command, snapshot, "storage-unavailable", null, now);
|
|
192
|
+
}
|
|
193
|
+
}
|
|
194
|
+
|
|
195
|
+
execute(input: unknown): StageReceipt | DiscardReceipt {
|
|
196
|
+
return (input as { messageType?: unknown })?.messageType === "discard-command" ? this.discard(input) : this.stage(input);
|
|
197
|
+
}
|
|
198
|
+
|
|
199
|
+
discard(input: unknown): DiscardReceipt {
|
|
200
|
+
const now = this.#now(); this.#cleanup(now.getTime()); const snapshot = this.#bridgeSnapshot(), command = input as DiscardCommand;
|
|
201
|
+
const reject = (code: Exclude<DiscardReceipt["resultCode"], "discarded">, reason: string = code): DiscardReceipt => ({ schemaVersion: 1,
|
|
202
|
+
version: "piagent-webui-attachment-v1", messageType: "discard-receipt", commandId: typeof command?.commandId === "string" && REF.test(command.commandId)
|
|
203
|
+
? command.commandId : `attachment-command.${createHash("sha256").update(reason).digest("hex")}`, identity: structuredClone(snapshot.identity ?? {
|
|
204
|
+
projectRef: `project.${"0".repeat(64)}`, runtimeInstanceId: this.#runtimeInstanceId, sessionRef: `session.${"0".repeat(64)}`,
|
|
205
|
+
taskId: null, taskRunId: null, agentOperationId: null, toolCallId: null }), phase: "rejected", resultCode: code,
|
|
206
|
+
requestedAt: timestamp(command?.requestedAt) ? command.requestedAt : now.toISOString(), settledAt: now.toISOString(), deduplicated: false,
|
|
207
|
+
attachmentRef: null, error: { code: reason, message: errorMessage(code === "attachment-unavailable" ? "capability-unavailable" : code as StageResultCode), retryable: false } });
|
|
208
|
+
if (!command || !exactKeys(command, ["schemaVersion", "version", "messageType", "commandId", "idempotencyKey", "requestedAt", "expiresAt", "identity",
|
|
209
|
+
"expectedRuntimeRevision", "messageRequestId", "attachmentRef"]) || command.schemaVersion !== 1 || command.version !== "piagent-webui-attachment-v1"
|
|
210
|
+
|| command.messageType !== "discard-command" || !REF.test(command.commandId) || !IDEMPOTENCY.test(command.idempotencyKey) || !timestamp(command.requestedAt)
|
|
211
|
+
|| !timestamp(command.expiresAt) || Date.parse(command.requestedAt) > Date.parse(command.expiresAt) || Date.parse(command.expiresAt) - Date.parse(command.requestedAt) > 300_000
|
|
212
|
+
|| !validIdentity(command.identity) || !REVISION.test(command.expectedRuntimeRevision) || !REF.test(command.messageRequestId) || !REF.test(command.attachmentRef)) return reject("invalid-command");
|
|
213
|
+
const found = this.#discardCache.get(command.idempotencyKey), commandFingerprint = fingerprint(command);
|
|
214
|
+
if (found) return found.fingerprint === commandFingerprint ? { ...structuredClone(found.receipt), deduplicated: true } : reject("idempotency-payload-mismatch");
|
|
215
|
+
if (this.#closed || snapshot.state !== "ready" || !snapshot.identity || !snapshot.revisions) return reject("capability-unavailable");
|
|
216
|
+
if (Date.parse(command.requestedAt) > now.getTime() + 30_000) return reject("invalid-command", "requested-at-in-future");
|
|
217
|
+
if (now.getTime() > Date.parse(command.expiresAt)) return reject("expired");
|
|
218
|
+
if (!sameIdentity(command.identity, snapshot.identity)) return reject("identity-mismatch");
|
|
219
|
+
if (command.expectedRuntimeRevision !== snapshot.revisions.runtimeRevision) return reject("stale-revision");
|
|
220
|
+
const record = this.#records.get(command.attachmentRef);
|
|
221
|
+
if (!record || record.messageRequestId !== command.messageRequestId || record.sessionRef !== snapshot.identity.sessionRef) return reject("attachment-unavailable");
|
|
222
|
+
this.#consume(record);
|
|
223
|
+
const receipt = { schemaVersion: 1, version: "piagent-webui-attachment-v1", messageType: "discard-receipt", commandId: command.commandId,
|
|
224
|
+
identity: structuredClone(snapshot.identity), phase: "settled", resultCode: "discarded", requestedAt: command.requestedAt,
|
|
225
|
+
settledAt: now.toISOString(), deduplicated: false, attachmentRef: command.attachmentRef, error: null } satisfies DiscardReceipt;
|
|
226
|
+
this.#discardCache.set(command.idempotencyKey, { fingerprint: commandFingerprint, receipt: structuredClone(receipt), expiresAt: Date.parse(command.expiresAt) });
|
|
227
|
+
return receipt;
|
|
228
|
+
}
|
|
229
|
+
|
|
230
|
+
claim(refs: string[], messageRequestId: string, identity: BridgeIdentity, text: string): PreparedAttachments {
|
|
231
|
+
const now = this.#now().getTime(); this.#cleanup(now);
|
|
232
|
+
if (this.#closed || refs.length < 1 || refs.length > ATTACHMENT_LIMITS.countPerMessage || new Set(refs).size !== refs.length)
|
|
233
|
+
throw new Error("attachment-reference-invalid");
|
|
234
|
+
const records = refs.map((ref) => this.#records.get(ref));
|
|
235
|
+
if (records.some((record) => !record)) throw new Error("attachment-reference-unavailable");
|
|
236
|
+
const exact = records as StoredAttachment[];
|
|
237
|
+
if (exact.some((record) => record.messageRequestId !== messageRequestId || record.projectRef !== identity.projectRef
|
|
238
|
+
|| record.runtimeInstanceId !== identity.runtimeInstanceId || record.sessionRef !== identity.sessionRef || Date.parse(record.expiresAt) < now)
|
|
239
|
+
|| exact.reduce((sum, record) => sum + record.sizeBytes, 0) > ATTACHMENT_LIMITS.totalBytesPerMessage) throw new Error("attachment-authority-mismatch");
|
|
240
|
+
if (exact.some((record) => record.kind === "image") && !this.#modelSupportsImages()) throw new Error("model-image-input-unavailable");
|
|
241
|
+
const content: Array<TextContent | ImageContent> = [{ type: "text", text }], observedTexts = [text];
|
|
242
|
+
try {
|
|
243
|
+
for (const record of exact) {
|
|
244
|
+
const bytes = this.#readOwned(record);
|
|
245
|
+
if (record.kind === "image") content.push({ type: "image", data: bytes.toString("base64"), mimeType: record.mimeType });
|
|
246
|
+
else {
|
|
247
|
+
const body = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
|
|
248
|
+
const attachmentText = `[Attached file: ${record.displayName} (${record.mimeType}, ${record.sizeBytes} bytes)]\n${body}\n[End attached file]`;
|
|
249
|
+
content.push({ type: "text", text: attachmentText }); observedTexts.push(attachmentText);
|
|
250
|
+
}
|
|
251
|
+
}
|
|
252
|
+
} catch (error) {
|
|
253
|
+
exact.forEach((record) => this.#consume(record)); throw error;
|
|
254
|
+
}
|
|
255
|
+
exact.forEach((record) => this.#consume(record));
|
|
256
|
+
return { content, observedText: observedTexts.join("\n") };
|
|
257
|
+
}
|
|
258
|
+
|
|
259
|
+
close(): void {
|
|
260
|
+
if (this.#closed) return; this.#closed = true;
|
|
261
|
+
for (const record of this.#records.values()) this.#deleteOwnedPath(record.absolutePath);
|
|
262
|
+
this.#records.clear(); this.#cache.clear(); this.#discardCache.clear();
|
|
263
|
+
try { if (this.#safeDirectory()) fs.rmdirSync(this.#directory); } catch { /* never recurse beyond files owned by this store */ }
|
|
264
|
+
}
|
|
265
|
+
|
|
266
|
+
reset(): void {
|
|
267
|
+
for (const record of this.#records.values()) this.#deleteOwnedPath(record.absolutePath);
|
|
268
|
+
this.#records.clear(); this.#cache.clear(); this.#discardCache.clear();
|
|
269
|
+
}
|
|
270
|
+
|
|
271
|
+
#validate(command: StageCommand): string | null {
|
|
272
|
+
if (!command || typeof command !== "object" || command.schemaVersion !== 1 || command.version !== "piagent-webui-attachment-v1"
|
|
273
|
+
|| command.messageType !== "stage-command" || !exactKeys(command, ["schemaVersion", "version", "messageType", "commandId", "idempotencyKey", "requestedAt", "expiresAt", "identity", "expectedRuntimeRevision", "messageRequestId", "file"])) return "unsupported-command-shape";
|
|
274
|
+
if (!REF.test(command.commandId) || !IDEMPOTENCY.test(command.idempotencyKey) || !timestamp(command.requestedAt) || !timestamp(command.expiresAt)
|
|
275
|
+
|| Date.parse(command.requestedAt) > Date.parse(command.expiresAt) || Date.parse(command.expiresAt) - Date.parse(command.requestedAt) > 300_000
|
|
276
|
+
|| !validIdentity(command.identity) || !REVISION.test(command.expectedRuntimeRevision) || !REF.test(command.messageRequestId)) return "invalid-command-metadata";
|
|
277
|
+
if (!exactKeys(command.file, ["displayName", "declaredMimeType", "dataBase64"]) || typeof command.file.displayName !== "string"
|
|
278
|
+
|| command.file.displayName.length < 1 || command.file.displayName.length > 255 || /[\u0000-\u001F\u007F/\\]/.test(command.file.displayName)
|
|
279
|
+
|| typeof command.file.declaredMimeType !== "string" || typeof command.file.dataBase64 !== "string"
|
|
280
|
+
|| command.file.dataBase64.length < 4 || command.file.dataBase64.length > 11_184_812 || !BASE64.test(command.file.dataBase64)) return "invalid-file-payload";
|
|
281
|
+
return null;
|
|
282
|
+
}
|
|
283
|
+
|
|
284
|
+
#receipt(command: Partial<StageCommand>, identity: BridgeIdentity, phase: StageReceipt["phase"], resultCode: StageReceipt["resultCode"],
|
|
285
|
+
attachment: Attachment | null, reason: string | null, now: Date, deduplicated: boolean): StageReceipt {
|
|
286
|
+
return { schemaVersion: 1, version: "piagent-webui-attachment-v1", messageType: "stage-receipt",
|
|
287
|
+
commandId: typeof command.commandId === "string" && REF.test(command.commandId) ? command.commandId : `attachment-command.${createHash("sha256").update(reason ?? resultCode).digest("hex")}`,
|
|
288
|
+
identity: structuredClone(identity), phase, resultCode, requestedAt: timestamp(command.requestedAt) ? command.requestedAt : now.toISOString(),
|
|
289
|
+
settledAt: now.toISOString(), deduplicated, attachment, error: phase === "rejected" ? { code: reason ?? resultCode,
|
|
290
|
+
message: errorMessage(resultCode), retryable: resultCode === "storage-unavailable" } : null };
|
|
291
|
+
}
|
|
292
|
+
#reject(command: Partial<StageCommand>, snapshot: BridgeSnapshot, code: Exclude<StageReceipt["resultCode"], "staged">,
|
|
293
|
+
reason: string | null, now: Date): StageReceipt {
|
|
294
|
+
const identity = snapshot.identity ?? { projectRef: `project.${"0".repeat(64)}`, runtimeInstanceId: this.#runtimeInstanceId,
|
|
295
|
+
sessionRef: `session.${"0".repeat(64)}`, taskId: null, taskRunId: null, agentOperationId: null, toolCallId: null };
|
|
296
|
+
return this.#receipt(command, identity, "rejected", code, null, reason, now, false);
|
|
297
|
+
}
|
|
298
|
+
#readOwned(record: StoredAttachment): Buffer {
|
|
299
|
+
if (!this.#safeDirectory() || path.dirname(record.absolutePath) !== this.#directory || !OWNED_FILE.test(path.basename(record.absolutePath))) throw new Error("attachment-storage-boundary");
|
|
300
|
+
const descriptor = fs.openSync(record.absolutePath, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW);
|
|
301
|
+
try {
|
|
302
|
+
const inspected = fs.fstatSync(descriptor);
|
|
303
|
+
if (!inspected.isFile() || inspected.dev !== record.device || inspected.ino !== record.inode || inspected.size !== record.sizeBytes) throw new Error("attachment-file-changed");
|
|
304
|
+
const bytes = Buffer.alloc(inspected.size); let offset = 0;
|
|
305
|
+
while (offset < bytes.length) { const read = fs.readSync(descriptor, bytes, offset, bytes.length - offset, offset); if (read <= 0) break; offset += read; }
|
|
306
|
+
if (offset !== bytes.length) throw new Error("attachment-file-short-read"); return bytes;
|
|
307
|
+
} finally { fs.closeSync(descriptor); }
|
|
308
|
+
}
|
|
309
|
+
#consume(record: StoredAttachment): void { this.#records.delete(record.attachmentRef); this.#deleteOwnedPath(record.absolutePath); }
|
|
310
|
+
#deleteOwnedPath(target: string): void {
|
|
311
|
+
if (!this.#safeDirectory() || path.dirname(target) !== this.#directory || !OWNED_FILE.test(path.basename(target))) return;
|
|
312
|
+
try { fs.unlinkSync(target); } catch { /* cleanup is bounded and best-effort */ }
|
|
313
|
+
}
|
|
314
|
+
#safeDirectory(): boolean {
|
|
315
|
+
try { const current = fs.lstatSync(this.#directory); return current.isDirectory() && !current.isSymbolicLink()
|
|
316
|
+
&& current.dev === this.#directoryDevice && current.ino === this.#directoryInode && (current.mode & 0o077) === 0; } catch { return false; }
|
|
317
|
+
}
|
|
318
|
+
#cleanup(now: number): void {
|
|
319
|
+
for (const record of this.#records.values()) if (Date.parse(record.expiresAt) <= now) this.#consume(record);
|
|
320
|
+
for (const [key, cached] of this.#cache) if (cached.expiresAt <= now) this.#cache.delete(key);
|
|
321
|
+
for (const [key, cached] of this.#discardCache) if (cached.expiresAt <= now) this.#discardCache.delete(key);
|
|
322
|
+
}
|
|
323
|
+
}
|