@piagent/platform 1.37.1 → 1.38.1

package/packages/piagent-core/runtime/policy/source-mutation-guard-binding.ts

@@ -1,3 +1,8 @@
+import path from "node:path";
+import { reviewDigest } from "../inspection/review-state-contract.ts";
+import { sessionMutationObserver } from "../inspection/session-mutation-observer.ts";
+import { sessionAuthoredHunkRefs } from "../inspection/session-hunk-provenance.ts";
+import { inspectWorkspaceFile, workspacePathFlags } from "../../extensions/workspace-inspection.ts";
 import { randomBytes } from "node:crypto";
 import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
 
@@ -15,7 +20,8 @@ export type SourceMutationGuardBindings = {
 };
 
 export function createSourceMutationGuardBindings(policy: BasePolicy,
-  loadProfile: (ctx: ExtensionContext) => ProjectProfile): SourceMutationGuardBindings {
+  loadProfile: (ctx: ExtensionContext) => ProjectProfile,
+  writable?: (ctx: ExtensionContext, profile: ProjectProfile) => boolean): SourceMutationGuardBindings {
   const guardInstanceId = `guard.${randomBytes(32).toString("hex")}`, bindings = new Map<string, () => void>();
   const key = (ctx: ExtensionContext) => `${ctx.cwd}\0${ctx.sessionManager.getSessionId()}`;
   return {
@@ -24,7 +30,26 @@ export function createSourceMutationGuardBindings(policy: BasePolicy,
       bindings.set(bindingKey, piSourceMutationGuard.bind({ cwd: ctx.cwd, rawSessionId: ctx.sessionManager.getSessionId(), guardInstanceId,
         facts: () => {
           const task = activeSessionTask(ctx.cwd, ctx.sessionManager.getSessionId()) as TaskContract | undefined;
-          if (!task) return null;
+          if (!task) {
+            const profile = loadProfile(ctx), canWrite = writable?.(ctx, profile) === true;
+            const workspacePolicy = { policy: policy as unknown as Record<string, unknown>, profile: profile as unknown as Record<string, unknown>, readOnly: !canWrite };
+            const paths = effectiveProtectedPaths(policy, profile);
+            return { taskId: null, taskRunId: null, taskRevision: null, taskState: "none" as const, sessionBound: true, writable: canWrite,
+              controlRevision: reviewDigest({ guardInstanceId, sessionId: ctx.sessionManager.getSessionId(), canWrite, paths }), idle: ctx.isIdle(),
+              isProtectedPath: (file: string) => { const flags = workspacePathFlags(file, workspacePolicy); return flags.protected || flags.readOnly; },
+              sessionObservation: file => sessionMutationObserver.current(ctx.cwd, ctx.sessionManager.getSessionId(), file, workspacePolicy),
+              sessionReverted: (authority, before, committed) => {
+                const relative = path.relative(ctx.cwd, path.resolve(authority.repoRoot, authority.repoPath)).split(path.sep).join("/");
+                sessionMutationObserver.reverted(ctx.cwd, ctx.sessionManager.getSessionId(), relative, before, committed, workspacePolicy);
+              },
+              sessionHunkRefs: authority => {
+                const relative = path.relative(ctx.cwd, path.resolve(authority.repoRoot, authority.repoPath)).split(path.sep).join("/");
+                const observation = sessionMutationObserver.current(ctx.cwd, ctx.sessionManager.getSessionId(), relative, workspacePolicy);
+                if (!observation) return [];
+                const current = inspectWorkspaceFile(ctx.cwd, relative, workspacePolicy);
+                return current.content === null ? [] : sessionAuthoredHunkRefs(observation, current.content, authority.patchAuthority);
+              } };
+          }
           const control = inspectTaskControlState(ctx.cwd, task);
           const taskState = task.trace.outcome !== "pending" || control.state === "terminal" ? "terminal"
             : control.state === "active" ? "active" : "unknown";

package/packages/piagent-core/runtime/policy/source-mutation-guard.ts

@@ -1,3 +1,4 @@
+import type { SessionMutationObservation } from "../inspection/session-mutation-observer.ts";
 import fs from "node:fs";
 import path from "node:path";
 
@@ -19,11 +20,16 @@ const DIGEST = /^sha256:[a-f0-9]{64}$/;
 const WORKSPACE = /^wt-content-v2:[a-f0-9]{64}$/;
 
 export type SourceMutationGuardFacts = {
-  taskId: string;
-  taskRunId: string;
-  taskRevision: string;
+  taskId: string | null;
+  taskRunId: string | null;
+  taskRevision: string | null;
   controlRevision: string;
-  taskState: "active" | "terminal" | "unknown";
+  taskState: "active" | "terminal" | "unknown" | "none";
+  sessionBound?: boolean;
+  writable?: boolean;
+  sessionObservation?(path: string): SessionMutationObservation | null;
+  sessionReverted?(authority: SourceRevertAuthority, beforeDigest: string, committedDigest: string): void;
+  sessionHunkRefs?(authority: SourceRevertAuthority): string[];
   idle: boolean;
   isProtectedPath(projectRelativePath: string): boolean;
 };
@@ -42,8 +48,8 @@ export type SourceMutationGuardRequest = {
 };
 export type SourceRevertGuardRequest = {
   cwd: string; rawSessionId: string;
-  identity: { projectRef: string; runtimeInstanceId: string; sessionRef: string; taskId: string; taskRunId: string };
-  action: "source.revert"; expectedTaskRevision: string; expectedControlRevision: string; expectedIndexPreimage: string;
+  identity: { projectRef: string; runtimeInstanceId: string; sessionRef: string; taskId: string | null; taskRunId: string | null };
+  action: "source.revert"; expectedTaskRevision: string | null; expectedControlRevision: string; expectedIndexPreimage: string;
   expectedWorkspacePreimage: string; previewRef: string; confirmedPreviewDigest: string; authority: SourceRevertAuthority;
 };
 
@@ -84,10 +90,22 @@ export class PiSourceMutationGuard {
   available(cwd: string, rawSessionId: string): boolean {
     try {
       const binding = this.#bindings.get(bindingKey(cwd, rawSessionId)), facts = binding?.facts();
-      return Boolean(facts && facts.taskState === "active" && facts.idle);
+      return Boolean(facts && (facts.taskState === "active" || facts.sessionBound === true && facts.taskState === "none" && facts.writable === true) && facts.idle);
     } catch { return false; }
   }
 
+  sessionObservation(cwd: string, rawSessionId: string, file: string): SessionMutationObservation | null {
+    try { const facts = this.#bindings.get(bindingKey(cwd, rawSessionId))?.facts();
+      return facts?.sessionBound === true ? facts.sessionObservation?.(file) ?? null : null;
+    } catch { return null; }
+  }
+
+  sessionControlRevision(cwd: string, rawSessionId: string): string | null {
+    try { const facts = this.#bindings.get(bindingKey(cwd, rawSessionId))?.facts();
+      return facts?.sessionBound === true && facts.taskState === "none" ? facts.controlRevision : null;
+    } catch { return null; }
+  }
+
   async execute(request: SourceMutationGuardRequest): Promise<SourceIndexTransactionResult> {
     let binding: Binding | undefined;
     try { binding = this.#bindings.get(bindingKey(request.cwd, request.rawSessionId)); }
@@ -96,7 +114,7 @@ export class PiSourceMutationGuard {
     const recheck = (): boolean => {
       try {
         const facts = binding!.facts();
-        return Boolean(facts && facts.taskState === "active" && facts.idle
+        return Boolean(this.#bindings.get(bindingKey(request.cwd, request.rawSessionId)) === binding && facts && facts.taskState === "active" && facts.idle
           && facts.taskId === request.identity.taskId && facts.taskRunId === request.identity.taskRunId
           && facts.taskRevision === request.expectedTaskRevision && facts.controlRevision === request.expectedControlRevision
           && this.#pathsAllowed(binding!, facts, request.authority));
@@ -116,15 +134,26 @@ export class PiSourceMutationGuard {
     const recheck = (): boolean => {
       try {
         const facts = binding!.facts(), target = request.authority.target;
-        return Boolean(facts && facts.taskState === "active" && facts.idle && Date.now() <= Date.parse(target.expiresAt)
+        const sessionBound = request.identity.taskId === null && request.identity.taskRunId === null && request.expectedTaskRevision === null;
+        const active = sessionBound ? facts?.sessionBound === true && facts.taskState === "none" && facts.writable === true : facts?.taskState === "active";
+        const pathsAllowed = facts && this.#pathsAllowed(binding!, facts, { repoRoot: request.authority.repoRoot, repoPaths: [request.authority.repoPath] });
+        const authored = sessionBound && pathsAllowed ? facts?.sessionHunkRefs?.(request.authority) ?? [] : [];
+        const selected = target.hunkRefs.length ? target.hunkRefs : request.authority.patchAuthority.hunks.map(hunk => hunk.hunkRef);
+        return Boolean(this.#bindings.get(bindingKey(request.cwd, request.rawSessionId)) === binding && facts && active && pathsAllowed
+          && (!sessionBound || selected.length > 0 && selected.every(ref => authored.includes(ref))) && facts.idle && Date.now() <= Date.parse(target.expiresAt)
           && facts.taskId === request.identity.taskId && facts.taskRunId === request.identity.taskRunId
           && facts.taskRevision === request.expectedTaskRevision && facts.controlRevision === request.expectedControlRevision
           && this.#pathsAllowed(binding!, facts, { repoRoot: request.authority.repoRoot, repoPaths: [request.authority.repoPath] }));
       } catch { return false; }
     };
     if (!recheck()) return revertRejected(request, "mutation-guard-precondition-stale");
+    const relative = path.relative(binding.cwd, path.resolve(request.authority.repoRoot, request.authority.repoPath)).split(path.sep).join("/");
+    const before = binding.facts()?.sessionObservation?.(relative);
     return executeGuardedSourceWorktreeRevert({ authority: request.authority, expectedIndexPreimage: request.expectedIndexPreimage,
-      expectedWorkspacePreimage: request.expectedWorkspacePreimage, recheck });
+      expectedWorkspacePreimage: request.expectedWorkspacePreimage, recheck, onCommitted: digest => {
+        try { if (before && this.#bindings.get(bindingKey(request.cwd, request.rawSessionId)) === binding)
+          binding.facts()?.sessionReverted?.(request.authority, before.currentDigest, digest); } catch { /* Lost observation only disables further review. */ }
+      } });
   }
 
   #validRequest(request: SourceMutationGuardRequest): boolean {
@@ -150,9 +179,10 @@ export class PiSourceMutationGuard {
   #validRevertRequest(request: SourceRevertGuardRequest): boolean {
     try { validateSourceRevertTarget(request.authority.target); } catch { return false; }
     const target = request.authority.target;
+    const sessionBound = request.identity.taskId === null && request.identity.taskRunId === null && request.expectedTaskRevision === null;
     return request.action === "source.revert" && REF.test(request.identity.projectRef) && REF.test(request.identity.runtimeInstanceId)
-      && REF.test(request.identity.sessionRef) && REF.test(request.identity.taskId) && REF.test(request.identity.taskRunId)
-      && REVISION.test(request.expectedTaskRevision) && REVISION.test(request.expectedControlRevision)
+      && REF.test(request.identity.sessionRef) && (sessionBound || REF.test(request.identity.taskId!) && REF.test(request.identity.taskRunId!) && REVISION.test(request.expectedTaskRevision!))
+      && REVISION.test(request.expectedControlRevision)
       && DIGEST.test(request.expectedIndexPreimage) && WORKSPACE.test(request.expectedWorkspacePreimage)
       && REF.test(request.previewRef) && DIGEST.test(request.confirmedPreviewDigest)
       && request.previewRef === target.previewRef && request.confirmedPreviewDigest === target.confirmedPreviewDigest

package/packages/piagent-core/runtime/policy/source-worktree-transaction.ts

@@ -40,7 +40,7 @@ async function gitDirectory(repoRoot: string): Promise<string> {
   if (!path.isAbsolute(candidate) || !stat.isDirectory() || stat.isSymbolicLink()) throw new Error("git-directory-invalid");
   return resolved;
 }
-async function restoreWholeFile(authority: SourceRevertAuthority, recheck: () => Promise<boolean>): Promise<void> {
+async function restoreWholeFile(authority: SourceRevertAuthority, recheck: () => Promise<boolean>): Promise<string> {
   const bytes = await runReadOnlyGit(authority.repoRoot, ["cat-file", "blob", authority.indexObject], { maxBytes: 16 * 1024 * 1024 });
   const target = path.resolve(authority.repoRoot, authority.repoPath), parent = fs.realpathSync.native(path.dirname(target));
   if (parent !== path.dirname(target) || !target.startsWith(`${authority.repoRoot}${path.sep}`)) throw new Error("revert-target-unsafe");
@@ -52,8 +52,9 @@ async function restoreWholeFile(authority: SourceRevertAuthority, recheck: () =>
   try { if (!await recheck()) throw new Error("revert-preimage-stale"); fs.renameSync(temporary, target); }
   finally { fs.rmSync(temporary, { force: true }); }
   const actual = fs.readFileSync(target); if (!actual.equals(bytes)) throw new Error("revert-postcondition-failed");
+  return createHash("sha256").update(bytes).digest("hex");
 }
-type PreparedSelectedHunk = { stagingPath: string; target: string; initialMode: number };
+type PreparedSelectedHunk = { stagingPath: string; target: string; initialMode: number; contentDigest: string };
 function inside(root: string, candidate: string): boolean {
   const relative = path.relative(root, candidate);
   return relative === "" || relative !== ".." && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative);
@@ -101,7 +102,7 @@ async function prepareSelectedHunk(authority: SourceRevertAuthority, hunkRef: st
       fs.fchmodSync(stagingDescriptor, result.mode & 0o777);
       fs.fsyncSync(stagingDescriptor);
     } finally { fs.closeSync(stagingDescriptor); }
-    return { stagingPath, target, initialMode: current.mode & 0o777 };
+    return { stagingPath, target, initialMode: current.mode & 0o777, contentDigest: createHash("sha256").update(candidate).digest("hex") };
   } catch (error) {
     cleanupStagingFile(stagingPath);
     throw error;
@@ -109,8 +110,11 @@ async function prepareSelectedHunk(authority: SourceRevertAuthority, hunkRef: st
 }
 
 export async function executeGuardedSourceWorktreeRevert(options: { authority: SourceRevertAuthority; expectedIndexPreimage: string;
-  expectedWorkspacePreimage: string; recheck(): boolean; timeoutMs?: number }): Promise<SourceIndexTransactionResult> {
+  expectedWorkspacePreimage: string; recheck(): boolean; onCommitted?(contentDigest: string): void; timeoutMs?: number }): Promise<SourceIndexTransactionResult> {
   const before = { beforeIndexPreimage: options.expectedIndexPreimage, beforeWorkspacePreimage: options.expectedWorkspacePreimage };
+  const observeCommitted = (digest: string) => {
+    try { options.onCommitted?.(digest); } catch { /* Observation failure must not change the file transaction outcome. */ }
+  };
   let lockPath = "", ownsLock = false, committed = false;
   try {
     const gitDir = await gitDirectory(options.authority.repoRoot), lockName = createHash("sha256").update(options.authority.repoPath).digest("hex");
@@ -141,8 +145,9 @@ export async function executeGuardedSourceWorktreeRevert(options: { authority: S
           return result({ state: "rejected", reasonCode: "mutation-preimage-stale", ...before,
             afterIndexPreimage: null, afterWorkspacePreimage: null });
         fs.renameSync(prepared.stagingPath, prepared.target);
+        observeCommitted(prepared.contentDigest);
       } finally { cleanupStagingFile(prepared.stagingPath); }
-    } else await restoreWholeFile(options.authority, finalRecheck);
+    } else { const digest = await restoreWholeFile(options.authority, finalRecheck); observeCommitted(digest); }
     committed = true;
     const afterIndexPreimage = await collectIndexPreimage(options.authority.repoRoot);
     const afterWorkspacePreimage = collectSelectedWorkspacePreimage(options.authority.repoRoot, [options.authority.repoPath]);

package/packages/piagent-core/runtime/policy/workspace-write-authority.ts

@@ -0,0 +1,51 @@
+import fs from "node:fs";
+import { randomUUID } from "node:crypto";
+import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
+import type { BasePolicy, ProjectProfile } from "../../extensions/guard-types.js";
+import type { WorkspacePolicy } from "../../extensions/workspace-inspection.ts";
+import { WorkspaceWriteError, writeWorkspaceFile, type WorkspaceWriteInput } from "../../extensions/workspace-write.ts";
+
+type Binding = { owner: string; policy(): WorkspacePolicy };
+const key = (cwd: string, sessionId: string) => `${fs.realpathSync(cwd)}\0${sessionId}`;
+
+// Gateway writes use the live guard's permission resolver, including its
+// environment/session overrides. A persisted UI message is not authority.
+export class WorkspaceWriteAuthority {
+  readonly #bindings = new Map<string, Binding>();
+  bind(cwd: string, sessionId: string, binding: Binding): () => void {
+    const identity = key(cwd, sessionId); this.#bindings.set(identity, binding);
+    return () => { if (this.#bindings.get(identity)?.owner === binding.owner) this.#bindings.delete(identity); };
+  }
+  writable(cwd: string, sessionId: string): boolean {
+    try { const policy = this.#bindings.get(key(cwd, sessionId))?.policy(); return !!policy && !policy.readOnly; }
+    catch { return false; }
+  }
+  write(cwd: string, sessionId: string, input: WorkspaceWriteInput) {
+    const policy = this.#bindings.get(key(cwd, sessionId))?.policy();
+    if (!policy || policy.readOnly) throw new WorkspaceWriteError("read-only");
+    return writeWorkspaceFile(cwd, input, policy);
+  }
+}
+// Pi loads extensions through its TS loader, while Gateway uses native ESM.
+// Share the live binding across those module instances, as source mutation does.
+const AUTHORITY_KEY = Symbol.for("piagent.webui.workspace-write-authority.v1");
+const root = globalThis as typeof globalThis & { [AUTHORITY_KEY]?: WorkspaceWriteAuthority };
+export const workspaceWriteAuthority = root[AUTHORITY_KEY] ??= new WorkspaceWriteAuthority();
+
+export function createWorkspaceWriteAuthorityBindings(policy: BasePolicy, loadProfile: (ctx: ExtensionContext) => ProjectProfile,
+  writable: (ctx: ExtensionContext, profile: ProjectProfile) => boolean) {
+  const owner = randomUUID(), bindings = new Map<string, () => void>();
+  return {
+    bind(ctx: ExtensionContext) {
+      const sessionId = ctx.sessionManager.getSessionId(), identity = key(ctx.cwd, sessionId);
+      bindings.get(identity)?.();
+      bindings.set(identity, workspaceWriteAuthority.bind(ctx.cwd, sessionId, { owner, policy: () => {
+        const profile = loadProfile(ctx);
+        return { policy: policy as unknown as Record<string, unknown>, profile: profile as unknown as Record<string, unknown>, readOnly: !writable(ctx, profile) };
+      } }));
+    },
+    unbind(ctx: ExtensionContext) {
+      const identity = key(ctx.cwd, ctx.sessionManager.getSessionId()); bindings.get(identity)?.(); bindings.delete(identity);
+    }
+  };
+}

package/packages/piagent-core/runtime/process-owner.mjs

@@ -0,0 +1,20 @@
+import { execFileSync } from 'node:child_process';
+import os from 'node:os';
+
+// Whether the process that wrote a lock or a capture at `since` (ms) still
+// holds it. A live process number alone is not enough: after a reboot, or
+// once the number is reused, an unrelated process would hold the lock forever.
+// So the owner must have started before the record and after the last boot.
+export function ownerAlive(pid, since, { now = Date.now(), uptime = os.uptime(), started = processStart } = {}) {
+  try { process.kill(pid, 0); } catch (error) { if (error.code === 'ESRCH') return false; throw error; }
+  if (since < now - uptime * 1000) return false;
+  const start = started(pid);
+  return start === null || start <= since + 1000;
+}
+function processStart(pid) {
+  try {
+    const text = execFileSync('/bin/ps', ['-o', 'lstart=', '-p', String(pid)], { encoding: 'utf8', timeout: 2000, env: { ...process.env, LC_ALL: 'C' } }).trim();
+    const value = Date.parse(text);
+    return Number.isFinite(value) ? value : null;
+  } catch { return null; }
+}

package/packages/piagent-core/runtime/process-tree-watch.mjs

@@ -0,0 +1,46 @@
+import { execFileSync } from 'node:child_process';
+
+const INTERVAL = 2000;
+function table() {
+  try {
+    return execFileSync('/bin/ps', ['-axo', 'pid=,ppid='], { encoding: 'utf8', timeout: 2000, maxBuffer: 4 * 1024 * 1024 })
+      .trim().split('\n').map(line => line.trim().split(/\s+/).map(Number));
+  } catch { return []; }
+}
+const tree = (rows, root) => {
+  const found = new Set(), queue = [root];
+  for (const parent of queue) for (const [pid, ppid] of rows) if (ppid === parent && pid > 1 && pid !== process.pid && !found.has(pid)) { found.add(pid); queue.push(pid); }
+  return found;
+};
+const signal = (pid, name) => { try { process.kill(pid, name); } catch { /* already gone */ } };
+
+// A shell's background job (`sleep 300 &`, then `exit`) leaves the shell's
+// process group, and once the shell ends it is re-parented to init and no
+// longer in its tree. The tree is therefore watched while the shell runs, so
+// such jobs stop with their terminal. A watched process is signalled only
+// while it is still orphaned (parent 1) or still under the root, never after
+// its number was reused by an unrelated process.
+export class ProcessTreeWatch {
+  #roots = new Map();
+  #timer = null;
+  watch(root) {
+    this.#roots.set(root, new Set());
+    this.#timer ??= setInterval(() => this.#scan(), INTERVAL);
+    this.#timer.unref?.();
+  }
+  #scan(rows = table()) {
+    for (const [root, seen] of this.#roots) for (const pid of tree(rows, root)) if (seen.size < 4096) seen.add(pid);
+    return rows;
+  }
+  async stop(root) {
+    const seen = this.#roots.get(root); if (!seen) return;
+    const rows = this.#scan(), current = tree(rows, root), parents = new Map(rows.map(([pid, ppid]) => [pid, ppid]));
+    this.#roots.delete(root);
+    if (!this.#roots.size) { clearInterval(this.#timer); this.#timer = null; }
+    const targets = [...seen].filter(pid => current.has(pid) || parents.get(pid) === 1);
+    for (const pid of targets) signal(pid, 'SIGTERM');
+    if (!targets.length) return;
+    await new Promise(resolve => setTimeout(resolve, 100));
+    for (const pid of targets) signal(pid, 'SIGKILL');
+  }
+}

package/packages/piagent-core/runtime/quality/model-mutation-proof.ts

@@ -2,6 +2,8 @@ import crypto from "node:crypto";
 import fs from "node:fs";
 import path from "node:path";
 
+export type MutationProofReader = (cwd: string, file: string) => { content: string; digest: string } | undefined;
+
 const MAX_PROOF_FILE_BYTES = 4 * 1024 * 1024;
 
 export type ModelMutationProof = {
@@ -106,7 +108,7 @@ function patchStrings(input: Record<string, unknown>): string[] {
   return Object.values(input).filter((value): value is string => typeof value === "string" && value.includes("*** "));
 }
 
-function patchProof(cwd: string, input: Record<string, unknown>, targets: string[], proof: ModelMutationProof): void {
+function patchProof(cwd: string, input: Record<string, unknown>, targets: string[], proof: ModelMutationProof, read: MutationProofReader): void {
   for (const patch of patchStrings(input)) {
     const lines = patch.replace(/\r\n/g, "\n").split("\n");
     for (let index = 0; index < lines.length; index += 1) {
@@ -127,7 +129,7 @@ function patchProof(cwd: string, input: Record<string, unknown>, targets: string
         continue;
       }
       proof.replacePaths.push(file);
-      const before = stableFile(cwd, file);
+      const before = read(cwd, file);
       if (!before) continue;
       proof.preContentDigests[file] = before.digest;
       const projected = applyPatchHunks(before.content, section);
@@ -140,7 +142,8 @@ export function expectedModelMutationProof(
   cwd: string,
   toolName: string,
   input: Record<string, unknown>,
-  targetPaths: string[]
+  targetPaths: string[],
+  read: MutationProofReader = stableFile
 ): ModelMutationProof {
   const targets = [...new Set(targetPaths)];
   const proof: ModelMutationProof = { expectedContentDigests: {}, preContentDigests: {}, fullContentPaths: [], replacePaths: [] };
@@ -153,13 +156,13 @@ export function expectedModelMutationProof(
     rememberFullContent(targets[0], [input.content]);
   } else if (toolName === "edit" && targets.length === 1) {
     proof.replacePaths.push(targets[0]);
-    const before = stableFile(cwd, targets[0]);
+    const before = read(cwd, targets[0]);
     const edits = inputEdits(input);
     if (before) proof.preContentDigests[targets[0]] = before.digest;
     const projected = before && edits ? applyUniqueReplacements(before.content, edits) : undefined;
     if (projected !== undefined) proof.expectedContentDigests[targets[0]] = [contentDigest(projected)];
   } else if (toolName === "apply_patch") {
-    patchProof(cwd, input, targets, proof);
+    patchProof(cwd, input, targets, proof, read);
   }
   proof.fullContentPaths = [...new Set(proof.fullContentPaths)].sort();
   proof.replacePaths = [...new Set(proof.replacePaths)].sort();

package/packages/piagent-core/runtime/registration/permission-commands.ts

@@ -49,7 +49,7 @@ export function registerPermissionCommands(pi: ExtensionAPI, deps: Record<string
   function emitCurrentPermissionStatus(ctx: ExtensionContext): void {
     const profile = loadProfileFromContext(ctx);
     const permissionProfile = resolvePermissionProfile(profile, policy, permissionOverrideFromContext(ctx));
-    ctx.ui.notify(`Piagent permission profile: ${permissionProfile.mode}`, permissionProfile.mode === "trusted-full-access" ? "warning" : "info");
+    ctx.ui.notify(`Piagent permission profile: ${permissionProfile.mode}`, ["trusted-full-access", "bypass"].includes(permissionProfile.mode) ? "warning" : "info");
     emitPermissionStatus(ctx, permissionProfile);
   }
 
@@ -58,7 +58,7 @@ export function registerPermissionCommands(pi: ExtensionAPI, deps: Record<string
     const profile = loadProfileFromContext(ctx);
     const permissionProfile = resolvePermissionProfile(profile, policy, permissionOverrideFromContext(ctx));
     const isActive = permissionProfile.mode === mode && !permissionProfile.warning;
-    const level = !isActive || mode === "trusted-full-access" ? "warning" : "info";
+    const level = !isActive || mode === "trusted-full-access" || mode === "bypass" ? "warning" : "info";
     const message = isActive
       ? `Piagent permission profile set to ${mode} for this session.`
       : `Requested ${mode}, but active profile is ${permissionProfile.mode}.`;
@@ -67,6 +67,9 @@ export function registerPermissionCommands(pi: ExtensionAPI, deps: Record<string
     if (permissionProfile.mode === "trusted-full-access") {
       ctx.ui.notify("Trusted full access is active; protected paths, secret redaction, and destructive/external confirmations remain enforced.", "warning");
     }
+    if (permissionProfile.mode === "bypass") {
+      ctx.ui.notify("Bypass is active: nothing is asked or blocked in this personal session (deletes, pushes, protected paths included). Output redaction and /undo checkpoints remain. Company sessions keep their own rules.", "warning");
+    }
     emitPermissionStatus(ctx, permissionProfile);
     if (request.trim()) sendWorkflowFollowUp(request.trim());
   }
@@ -75,6 +78,7 @@ export function registerPermissionCommands(pi: ExtensionAPI, deps: Record<string
     if (["read", "readonly", "read-only", "ro"].includes(action)) return "read-only";
     if (["write", "workspace", "workspace-write", "ww"].includes(action)) return "workspace-write";
     if (["full", "full-access", "trusted", "trusted-full-access"].includes(action)) return "trusted-full-access";
+    if (["bypass", "yolo", "dangerously-bypass"].includes(action)) return "bypass";
     return undefined;
   }
 
@@ -86,6 +90,7 @@ export function registerPermissionCommands(pi: ExtensionAPI, deps: Record<string
         { value: "read-only", label: "Read-only", description: "Scout/review without writes" },
         { value: "workspace-write", label: "Workspace write", description: "Normal governed implementation mode" },
         { value: "full-access", label: "Full access", description: "Trusted local full access; guardrails still apply" },
+        { value: "bypass", label: "Bypass", description: "Nothing asked or blocked (personal sessions only); redaction and /undo remain" },
         { value: "help", label: "Help", description: "Show typed forms" }
       ], "status");
       if (chosen && chosen !== "help") {
@@ -99,6 +104,7 @@ export function registerPermissionCommands(pi: ExtensionAPI, deps: Record<string
         "read: /permission read-only",
         "write: /permission workspace-write",
         "full: /permission full-access",
+        "bypass: /permission bypass (personal; nothing asked or blocked)",
         "legacy: /piagent-permission"
       ].join("\n"));
       return;
@@ -114,6 +120,7 @@ export function registerPermissionCommands(pi: ExtensionAPI, deps: Record<string
         "read: /permission read-only",
         "write: /permission workspace-write",
         "full: /permission full-access",
+        "bypass: /permission bypass (personal; nothing asked or blocked)",
         "legacy: /piagent-permission"
       ].join("\n"));
       return;
@@ -174,5 +181,6 @@ export function registerPermissionCommands(pi: ExtensionAPI, deps: Record<string
   registerPermissionProfileCommand("workspace-write", "workspace-write", "Switch this session to workspace-write permission profile");
   registerPermissionProfileCommand("full-access", "trusted-full-access", "Switch this session to trusted full-access permission profile");
   registerPermissionProfileCommand("trusted-full-access", "trusted-full-access", "Alias for /full-access");
+  registerPermissionProfileCommand("bypass", "bypass", "Switch this personal session to bypass: nothing asked or blocked");
 
 }

package/packages/piagent-core/runtime/registration/task-evidence-tools.ts

@@ -208,7 +208,7 @@ export function registerTaskEvidenceTools(pi: ExtensionAPI, deps: Record<string,
       if (
         projectRelative
         && capabilityState.filesystemRead
-        && permissionProfile.mode !== "trusted-full-access"
+        && !["trusted-full-access", "bypass"].includes(permissionProfile.mode)
         && !matchesAnyPath(projectRelative, capabilityState.filesystemRead)
       ) {
         return {

package/packages/piagent-core/runtime/session/workspace-member-edits.d.mts

@@ -0,0 +1,7 @@
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+export const WORKSPACE_WRITE_ENTRY: "piagent-workspace-write";
+export function takeWorkspaceMemberEditNotice(manager: { getBranch(): any[] }): {
+  customType: string; display: boolean; content: string; details: { throughEntryId: string };
+} | null;
+export function workspaceMemberEditsSince(manager: { getEntries?(): any[] } | null | undefined, since: number): Set<string>;
+export function registerWorkspaceMemberEdits(pi: ExtensionAPI): void;

package/packages/piagent-core/runtime/session/workspace-member-edits.mjs

@@ -0,0 +1,41 @@
+export const WORKSPACE_WRITE_ENTRY = 'piagent-workspace-write';
+const NOTICE = 'piagent-member-edited';
+
+// Receipts contain paths/digests, never the member's file contents. Read the
+// current branch so a fork or rewind cannot deliver notes from another branch.
+export function takeWorkspaceMemberEditNotice(manager) {
+  const entries = manager.getBranch();
+  let start = 0;
+  for (let index = entries.length - 1; index >= 0; index--) {
+    if (entries[index].type !== 'custom_message' || entries[index].customType !== NOTICE) continue;
+    const through = entries.findIndex(entry => entry.id === entries[index].details?.throughEntryId);
+    if (through >= 0 && through < index) { start = through + 1; break; }
+  }
+  const edits = entries.slice(start).filter(entry => entry.type === 'custom' && entry.customType === WORKSPACE_WRITE_ENTRY
+    && entry.data?.phase === 'settled' && entry.data?.resultCode === 'saved');
+  const paths = [...new Set(edits.map(entry => entry.data.path)
+    .filter(value => typeof value === 'string' && value.length <= 4096 && !/[\x00-\x1f\x7f]/.test(value)))];
+  if (!paths.length) return null;
+  // Delivery itself acknowledges the receipts. A failed send leaves them
+  // pending; receipts appended during delivery remain for the next turn.
+  return { customType: NOTICE, display: true, details: { throughEntryId: edits.at(-1).id },
+    content: `Member edited ${paths.slice(0, 16).map(value => JSON.stringify(value.slice(0, 256))).join(', ')}${paths.length > 16 ? ` and ${paths.length - 16} more files` : ''}. Read their current contents before editing; earlier reads may be stale.` };
+}
+
+// Files the member saved from the workspace editor at or after `since` (ms).
+// Checkpoints treat them as the member's, never as part of an agent turn.
+export function workspaceMemberEditsSince(manager, since) {
+  const paths = new Set();
+  for (const entry of manager?.getEntries?.() ?? []) {
+    const data = entry.type === 'custom' && entry.customType === WORKSPACE_WRITE_ENTRY ? entry.data : null;
+    if (data?.phase === 'settled' && data.resultCode === 'saved' && typeof data.path === 'string' && Date.parse(data.settledAt) >= since) paths.add(data.path);
+  }
+  return paths;
+}
+
+export function registerWorkspaceMemberEdits(pi) {
+  pi.on('before_agent_start', (_event, ctx) => {
+    const message = takeWorkspaceMemberEditNotice(ctx.sessionManager);
+    if (message) return { message };
+  });
+}

package/packages/piagent-core/security/workspace-file-reader.ts

@@ -45,7 +45,8 @@ function sameFile(left: fs.Stats, right: fs.Stats): boolean {
 
 function openRegularFile(repoRoot: string, repoPath: string): { descriptor: number; stat: fs.Stats; candidate: SafeCandidate } {
   const candidate = safeCandidate(repoRoot, repoPath);
-  const descriptor = fs.openSync(candidate.absolute, fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW ?? 0));
+  // A non-regular entry (notably a FIFO) must reach the fstat refusal without blocking.
+  const descriptor = fs.openSync(candidate.absolute, fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW ?? 0) | (fs.constants.O_NONBLOCK ?? 0));
   try {
     const stat = fs.fstatSync(descriptor);
     if (!stat.isFile()) throw new WorkspaceReadError("not-file", "Workspace entry is not a regular file");

package/packages/piagent-webui/dist/client/assets/Alert-DXF8-XqE.js

@@ -0,0 +1 @@
+import{r as e}from"./rolldown-runtime-hePW80VL.js";import{U as t,b as n,d as r,f as i,u as a}from"./useTheme-_ESOj7MI.js";import{A as o,C as s,D as c,E as l,N as u,S as d,T as f,_ as p,a as m,i as h,o as g,p as _,w as v}from"./ui-preferences-DiddStu0.js";import{r as y}from"./Typography-DMZL1kLS.js";var b=e(t(),1),x=n(),S=b.createContext();function C({value:e,...t}){return(0,x.jsx)(S.Provider,{value:e??!0,...t})}var w=()=>b.useContext(S)??!1;function T(e){return typeof e==`string`}function E(e,t=166){let n;function r(...r){clearTimeout(n),n=setTimeout(()=>{e.apply(this,r)},t)}return r.clear=()=>{clearTimeout(n)},r}function D(e){return e&&e.ownerDocument||document}function O(e){return D(e).defaultView||window}var k=u,A=D;function j(e){let t=e.activeElement;for(;t?.shadowRoot?.activeElement!=null;)t=t.shadowRoot.activeElement;return t}var ee=j;function M(e,t,n){return e===void 0||T(e)?t:{...t,ownerState:{...t.ownerState,...n}}}function N(e,t,n){return typeof e==`function`?e(t,n):e}function P(e,t){let n=e.charCodeAt(2);return e[0]===`o`&&e[1]===`n`&&n>=65&&n<=90&&typeof t==`function`}function F(e){if(e===void 0)return{};let t={};for(let n of Object.keys(e))P(n,e[n])&&(t[n]=e[n]);return t}function I(e){if(e===void 0)return{};let t={};return Object.keys(e).filter(t=>!(t.match(/^on[A-Z]/)&&typeof e[t]==`function`)).forEach(n=>{t[n]=e[n]}),t}function te(e){let{getSlotProps:t,additionalProps:n,externalSlotProps:r,externalForwardedProps:a,className:o}=e;if(!t){let e=i(n?.className,o,a?.className,r?.className),t={...n?.style,...a?.style,...r?.style},s={...n,...a,...r};return e.length>0&&(s.className=e),Object.keys(t).length>0&&(s.style=t),{props:s,internalRef:void 0}}let s=F({...a,...r}),c=I(r),l=I(a),u=t(s),d=i(u?.className,n?.className,o,a?.className,r?.className),f={...u?.style,...n?.style,...a?.style,...r?.style},p={...u,...n,...l,...c};return d.length>0&&(p.className=d),Object.keys(f).length>0&&(p.style=f),{props:p,internalRef:u.ref}}function L(e,t){let{className:n,elementType:r,ownerState:i,externalForwardedProps:a,internalForwardedProps:o,shouldForwardComponentProp:s=!1,...c}=t,{component:l,slots:u={[e]:void 0},slotProps:d={[e]:void 0},...p}=a,m=u[e]||r,h=N(d[e],i),{props:{component:g,..._},internalRef:v}=te({className:n,...c,externalForwardedProps:e===`root`?p:void 0,externalSlotProps:h}),y=f(v,h?.ref,t.ref),b=e===`root`?g||l:g;return[m,M(m,{...e===`root`&&!l&&!u[e]&&o,...e!==`root`&&!u[e]&&o,..._,...b&&!s&&{as:b},...b&&s&&{component:b},ref:y},i)]}function ne(e){return r(`MuiSvgIcon`,e)}a(`MuiSvgIcon`,[`root`,`colorPrimary`,`colorSecondary`,`colorAction`,`colorError`,`colorDisabled`,`fontSizeInherit`,`fontSizeSmall`,`fontSizeMedium`,`fontSizeLarge`]);var re=e=>{let{color:t,fontSize:n,classes:r}=e,i={root:[`root`,t!==`inherit`&&`color${d(t)}`,`fontSize${d(n)}`]};return o(i,ne,r)},ie=c(`svg`,{name:`MuiSvgIcon`,slot:`Root`,overridesResolver:(e,t)=>{let{ownerState:n}=e;return[t.root,n.color!==`inherit`&&t[`color${d(n.color)}`],t[`fontSize${d(n.fontSize)}`]]}})(s(({theme:e})=>({userSelect:`none`,width:`1em`,height:`1em`,display:`inline-block`,flexShrink:0,...p(e,`fill`,{duration:(e.vars??e).transitions?.duration?.shorter}),variants:[{props:e=>!e.hasSvgAsChild,style:{fill:`currentColor`}},{props:{fontSize:`inherit`},style:{fontSize:`inherit`}},{props:{fontSize:`small`},style:{fontSize:e.typography?.pxToRem?.(20)||`1.25rem`}},{props:{fontSize:`medium`},style:{fontSize:e.typography?.pxToRem?.(24)||`1.5rem`}},{props:{fontSize:`large`},style:{fontSize:e.typography?.pxToRem?.(35)||`2.1875rem`}},...Object.entries((e.vars??e).palette).filter(([,e])=>e&&e.main).map(([t])=>({props:{color:t},style:{color:(e.vars??e).palette?.[t]?.main}})),{props:{color:`action`},style:{color:(e.vars??e).palette?.action?.active}},{props:{color:`disabled`},style:{color:(e.vars??e).palette?.action?.disabled}},{props:{color:`inherit`},style:{color:void 0}}]}))),R=b.forwardRef(function(e,t){let n=l({props:e,name:`MuiSvgIcon`}),{children:r,className:a,color:o=`inherit`,component:s=`svg`,fontSize:c=`medium`,htmlColor:u,inheritViewBox:d=!1,titleAccess:f,viewBox:p=`0 0 24 24`,...m}=n,h=b.isValidElement(r)&&r.type===`svg`,g={...n,color:o,component:s,fontSize:c,instanceFontSize:e.fontSize,inheritViewBox:d,viewBox:p,hasSvgAsChild:h},_={};d||(_.viewBox=p);let v=re(g);return(0,x.jsxs)(ie,{as:s,className:i(v.root,a),focusable:`false`,color:u,"aria-hidden":!f||void 0,role:f?`img`:void 0,ref:t,..._,...m,...h&&r.props,ownerState:g,children:[h?r.props.children:r,f?(0,x.jsx)(`title`,{children:f}):null]})});R.muiName=`SvgIcon`;function z(e,t){function n(t,n){return(0,x.jsx)(R,{"data-testid":void 0,ref:n,...t,children:e})}return n.muiName=R.muiName,b.memo(b.forwardRef(n))}function B(e,t){if(!e||!t)return!1;if(e.contains(t))return!0;let n=t.getRootNode?.();if(n&&n instanceof ShadowRoot){let n=t;for(;n;){if(e===n)return!0;n=n.parentNode??n.host??null}}return!1}var ae=B;function V(e,t){typeof e==`function`?e(t):e&&(e.current=t)}var oe=E,se=O;function ce(e){return r(`MuiIconButton`,e)}var H=a(`MuiIconButton`,[`root`,`disabled`,`colorInherit`,`colorPrimary`,`colorSecondary`,`colorError`,`colorInfo`,`colorSuccess`,`colorWarning`,`edgeStart`,`edgeEnd`,`sizeSmall`,`sizeMedium`,`sizeLarge`,`loading`,`loadingIndicator`,`loadingWrapper`]),le=e=>{let{classes:t,disabled:n,color:r,edge:i,size:a,loading:s}=e,c={root:[`root`,s&&`loading`,n&&`disabled`,r!=="default"&&`color${d(r)}`,i&&`edge${d(i)}`,`size${d(a)}`],loadingIndicator:[`loadingIndicator`],loadingWrapper:[`loadingWrapper`]};return o(c,ce,t)},ue=c(g,{name:`MuiIconButton`,slot:`Root`,overridesResolver:(e,t)=>{let{ownerState:n}=e;return[t.root,n.loading&&t.loading,n.color!=="default"&&t[`color${d(n.color)}`],n.edge&&t[`edge${d(n.edge)}`],t[`size${d(n.size)}`]]}})(s(({theme:e})=>({textAlign:`center`,flex:`0 0 auto`,fontSize:e.typography.pxToRem(24),padding:8,borderRadius:`50%`,color:(e.vars||e).palette.action.active,...p(e,`background-color`,{duration:e.transitions.duration.shortest}),variants:[{props:e=>!e.disableRipple,style:{"--IconButton-hoverBg":e.alpha((e.vars||e).palette.action.active,(e.vars||e).palette.action.hoverOpacity),"&:hover":{backgroundColor:`var(--IconButton-hoverBg)`,"@media (hover: none)":{backgroundColor:`transparent`}}}},{props:{edge:`start`},style:{marginLeft:-12}},{props:{edge:`start`,size:`small`},style:{marginLeft:-3}},{props:{edge:`end`},style:{marginRight:-12}},{props:{edge:`end`,size:`small`},style:{marginRight:-3}}]})),s(({theme:e})=>({variants:[{props:{color:`inherit`},style:{color:`inherit`}},...Object.entries(e.palette).filter(_()).map(([t])=>({props:{color:t},style:{color:(e.vars||e).palette[t].main,"--IconButton-hoverBg":e.alpha((e.vars||e).palette[t].main,(e.vars||e).palette.action.hoverOpacity)}})),{props:{size:`small`},style:{padding:5,fontSize:e.typography.pxToRem(18)}},{props:{size:`large`},style:{padding:12,fontSize:e.typography.pxToRem(28)}}],[`&.${H.disabled}`]:{backgroundColor:`transparent`,color:(e.vars||e).palette.action.disabled},[`&.${H.loading}`]:{color:`transparent`}}))),de=c(`span`,{name:`MuiIconButton`,slot:`LoadingIndicator`})(({theme:e})=>({display:`none`,position:`absolute`,visibility:`visible`,top:`50%`,left:`50%`,transform:`translate(-50%, -50%)`,color:(e.vars||e).palette.action.disabled,variants:[{props:{loading:!0},style:{display:`flex`}}]})),U=b.forwardRef(function(e,t){let n=l({props:e,name:`MuiIconButton`}),{edge:r=!1,children:a,className:o,color:s=`default`,disabled:c=!1,disableFocusRipple:u=!1,size:d=`medium`,id:f,loading:p=null,loadingIndicator:g,..._}=n,v=h(f),y=g??(0,x.jsx)(m,{"aria-labelledby":v,color:`inherit`,size:16}),b={...n,edge:r,color:s,disabled:c,disableFocusRipple:u,loading:p,loadingIndicator:y,size:d},S=le(b);return(0,x.jsxs)(ue,{id:p?v:f,className:i(S.root,o),centerRipple:!0,internalNativeButton:!0,focusRipple:!u,disabled:c||p,ref:t,..._,ownerState:b,children:[typeof p==`boolean`&&(0,x.jsx)(`span`,{className:S.loadingWrapper,style:{display:`contents`},children:(0,x.jsx)(de,{className:S.loadingIndicator,ownerState:b,children:p&&y})}),a]})}),W=b.createContext(void 0);function G(){let e=b.useContext(W);if(e===void 0)throw Error(`MUI: RovingTabIndexContext is missing. Roving tab index items must be placed within a roving tab index provider.`);return e}var fe=Object.is;function pe(e,t){if(e===t)return!0;if(!(e instanceof Object)||!(t instanceof Object))return!1;let n=0,r=0;for(let r in e)if(n+=1,!fe(e[r],t[r])||!(r in t))return!1;for(let e in t)r+=1;return n===r}var me=[`ArrowRight`,`ArrowLeft`,`ArrowUp`,`ArrowDown`,`Home`,`End`];function he(e){let{activeItemId:t,getDefaultActiveItemId:n,orientation:r,isRtl:i=!1,isItemFocusable:a=Ce,wrap:o=!0}=e,[s,c]=b.useState(t),[l,u]=b.useState(t),d=s;t!==l&&(u(t),t!==void 0&&t!==s&&(d=t,c(t)));let f=b.useRef(null),p=b.useRef(new Map),[m,h]=b.useState(0),g=b.useMemo(()=>X(p.current),[m]),_=K(d,g,a,n),y=b.useRef(_);y.current=_;let x=b.useCallback(()=>{let e=X(p.current);return ye(e,K(y.current,e,a,n))},[n,a]),S=b.useCallback(()=>p.current,[]),C=v(e=>{pe(p.current.get(e.id)??null,e)||(p.current.set(e.id,e),h(e=>e+1))}),w=v(e=>{p.current.delete(e)&&h(e=>e+1)}),T=v(e=>{c(e)}),E=b.useCallback(e=>y.current===e,[]),O=b.useCallback((e,t,n,r)=>{let i=J(Z(p.current),e,t,n,r??a);return i?(i.element?.focus(),c(i.id),i):null},[a]),k=b.useCallback((e,t,n)=>({onFocus:e=>{t?.(e);let n=Z(p.current),r=xe(n,e.target);r!==-1&&c(n[r].id)},onKeyDown:e=>{if(n?.(e),e.defaultPrevented||e.altKey||e.shiftKey||e.ctrlKey||e.metaKey||!me.includes(e.key))return;let t=r===`horizontal`?`ArrowLeft`:`ArrowUp`,a=r===`horizontal`?`ArrowRight`:`ArrowDown`;r===`horizontal`&&i&&(t=`ArrowRight`,a=`ArrowLeft`);let s=Z(p.current),c=j(D(f.current)),l=c===f.current,u=q(s,c,y.current),d=`next`;switch(e.key){case t:d=`previous`,e.preventDefault(),l&&(u=s.length);break;case a:e.preventDefault(),l&&(u=-1);break;case`Home`:e.preventDefault(),u=-1;break;case`End`:e.preventDefault(),d=`previous`,u=s.length;break;default:return}O(u,d,o)},ref:Te(e,e=>{f.current=e})}),[O,i,r,o]),A=b.useCallback(e=>{let t=Z(p.current),n=j(D(f.current)),r=n===f.current?-1:q(t,n,y.current);return O(r,`next`,!0,e)?.id??null},[O]);return b.useMemo(()=>({activeItemId:_,focusNext:A,getActiveItem:x,getContainerProps:k,getItemMap:S,isItemActive:E,registerItem:C,setActiveItemId:T,unregisterItem:w}),[_,A,x,k,S,E,C,T,w])}function ge(e){let{activeItemId:t,registerItem:n,unregisterItem:r}=G(),i=b.useRef(null),a=b.useMemo(()=>({disabled:e.disabled??!1,element:null,focusableWhenDisabled:e.focusableWhenDisabled??!1,id:e.id,selected:e.selected??!1,textValue:e.textValue}),[e.disabled,e.focusableWhenDisabled,e.id,e.selected,e.textValue]),o=b.useRef(a);o.current=a;let s=b.useCallback(t=>{if(i.current=t,t==null){queueMicrotask(()=>{i.current??r(e.id)});return}n({...o.current,element:t})},[e.id,n,r]),c=f(e.ref,s);return u(()=>{i.current&&n({...a,element:i.current})},[a,n]),u(()=>{let t=e.id;return()=>{r(t)}},[e.id,r]),{ref:c,tabIndex:t===e.id?0:-1}}function K(e,t,n,r){return e==null?ve(t,n,r):_e(e,t,n)}function _e(e,t,n){let r=be(t,e);return r===-1?Y(t,n):n(t[r])?t[r].id:J(t,r,`next`,!1,n)?.id??null}function ve(e,t,n){let r=n?.(e);if(r!=null){let n=ye(e,r);if(n&&t(n))return n.id}return Y(e,t)}function q(e,t,n){if(t){let n=xe(e,t);if(n!==-1)return n}return be(e,n)}function J(e,t,n,r,i){let a=e.length-1;if(a===-1)return null;let o=!1,s=Se(t,a,n,r),c=s;for(;s!==-1;){if(s===c){if(o)return null;o=!0}let t=e[s];if(!t||!i(t))s=Se(s,a,n,r);else return t}return null}function Y(e,t){return e.find(e=>t(e))?.id??null}function ye(e,t){return t==null?null:e.find(e=>e.id===t)??null}function be(e,t){return t==null?-1:e.findIndex(e=>e.id===t)}function xe(e,t){return t?e.findIndex(e=>e.element===t||e.element?.contains(t)):-1}function X(e){let t=Array.from(e.values());if(t.every(e=>e.element==null))return t;let n=t.filter(Q).sort((e,t)=>we(e.element,t.element)),r=t.filter(e=>!Q(e));return[...n,...r]}function Z(e){return X(e).filter(Q)}function Se(e,t,n,r=!0){return n===`next`?e===t?r?0:-1:e+1:e===0?r?t:-1:e-1}function Ce(e){return e.element?e.focusableWhenDisabled?!0:!e.disabled&&!e.element.hasAttribute(`disabled`)&&e.element.getAttribute(`aria-disabled`)!==`true`&&e.element.hasAttribute(`tabindex`):!1}function Q(e){return e.element!=null&&e.element.isConnected}function we(e,t){if(e===t)return 0;let n=e.compareDocumentPosition(t);return n&Node.DOCUMENT_POSITION_FOLLOWING||n&Node.DOCUMENT_POSITION_CONTAINED_BY?-1:n&Node.DOCUMENT_POSITION_PRECEDING||n&Node.DOCUMENT_POSITION_CONTAINS?1:0}function Te(...e){return t=>{e.forEach(e=>{V(e??null,t)})}}function Ee(e){let{elementType:t,externalSlotProps:n,ownerState:r,skipResolvingSlotProps:i=!1,...a}=e,o=i?{}:N(n,r),{props:s,internalRef:c}=te({...a,externalSlotProps:o}),l=f(c,o?.ref,e.additionalProps?.ref);return M(t,{...s,ref:l},r)}function De(e){return r(`MuiAlert`,e)}var Oe=a(`MuiAlert`,[`root`,`action`,`icon`,`message`,`filled`,`colorSuccess`,`colorInfo`,`colorWarning`,`colorError`,`outlined`,`standard`]),ke=z((0,x.jsx)(`path`,{d:`M20,12A8,8 0 0,1 12,20A8,8 0 0,1 4,12A8,8 0 0,1 12,4C12.76,4 13.5,4.11 14.2, 4.31L15.77,2.74C14.61,2.26 13.34,2 12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0, 0 22,12M7.91,10.08L6.5,11.5L11,16L21,6L19.59,4.58L11,13.17L7.91,10.08Z`}),`SuccessOutlined`),Ae=z((0,x.jsx)(`path`,{d:`M12 5.99L19.53 19H4.47L12 5.99M12 2L1 21h22L12 2zm1 14h-2v2h2v-2zm0-6h-2v4h2v-4z`}),`ReportProblemOutlined`),je=z((0,x.jsx)(`path`,{d:`M11 15h2v2h-2zm0-8h2v6h-2zm.99-5C6.47 2 2 6.48 2 12s4.47 10 9.99 10C17.52 22 22 17.52 22 12S17.52 2 11.99 2zM12 20c-4.42 0-8-3.58-8-8s3.58-8 8-8 8 3.58 8 8-3.58 8-8 8z`}),`ErrorOutline`),Me=z((0,x.jsx)(`path`,{d:`M11,9H13V7H11M12,20C7.59,20 4,16.41 4,12C4,7.59 7.59,4 12,4C16.41,4 20,7.59 20, 12C20,16.41 16.41,20 12,20M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10, 10 0 0,0 12,2M11,17H13V11H11V17Z`}),`InfoOutlined`),Ne=z((0,x.jsx)(`path`,{d:`M19 6.41L17.59 5 12 10.59 6.41 5 5 6.41 10.59 12 5 17.59 6.41 19 12 13.41 17.59 19 19 17.59 13.41 12z`}),`Close`),Pe=e=>{let{variant:t,color:n,severity:r,classes:i}=e,a={root:[`root`,`color${d(n||r)}`,`${t}`],icon:[`icon`],message:[`message`],action:[`action`]};return o(a,De,i)},Fe=c(y,{name:`MuiAlert`,slot:`Root`,overridesResolver:(e,t)=>{let{ownerState:n}=e;return[t.root,t[n.variant]]}})(s(({theme:e})=>{let t=e.palette.mode===`light`?e.darken:e.lighten,n=e.palette.mode===`light`?e.lighten:e.darken;return{...e.typography.body2,backgroundColor:`transparent`,display:`flex`,padding:`6px 16px`,variants:[...Object.entries(e.palette).filter(_([`light`])).map(([r])=>({props:{colorSeverity:r,variant:`standard`},style:{color:e.vars?e.vars.palette.Alert[`${r}Color`]:t(e.palette[r].light,.6),backgroundColor:e.vars?e.vars.palette.Alert[`${r}StandardBg`]:n(e.palette[r].light,.9),[`& .${Oe.icon}`]:e.vars?{color:e.vars.palette.Alert[`${r}IconColor`]}:{color:e.palette[r].main}}})),...Object.entries(e.palette).filter(_([`light`])).map(([n])=>({props:{colorSeverity:n,variant:`outlined`},style:{color:e.vars?e.vars.palette.Alert[`${n}Color`]:t(e.palette[n].light,.6),border:`1px solid ${(e.vars||e).palette[n].light}`,[`& .${Oe.icon}`]:e.vars?{color:e.vars.palette.Alert[`${n}IconColor`]}:{color:e.palette[n].main}}})),...Object.entries(e.palette).filter(_([`dark`])).map(([t])=>({props:{colorSeverity:t,variant:`filled`},style:{fontWeight:e.typography.fontWeightMedium,...e.vars?{color:e.vars.palette.Alert[`${t}FilledColor`],backgroundColor:e.vars.palette.Alert[`${t}FilledBg`]}:{backgroundColor:e.palette.mode===`dark`?e.palette[t].dark:e.palette[t].main,color:e.palette.getContrastText(e.palette[t].main)}}}))]}})),Ie=c(`div`,{name:`MuiAlert`,slot:`Icon`})({marginRight:12,padding:`7px 0`,display:`flex`,fontSize:22,opacity:.9}),Le=c(`div`,{name:`MuiAlert`,slot:`Message`})({padding:`8px 0`,minWidth:0,overflow:`auto`}),Re=c(`div`,{name:`MuiAlert`,slot:`Action`})({display:`flex`,alignItems:`flex-start`,padding:`4px 0 0 16px`,marginLeft:`auto`,marginRight:-8}),$={success:(0,x.jsx)(ke,{fontSize:`inherit`}),warning:(0,x.jsx)(Ae,{fontSize:`inherit`}),error:(0,x.jsx)(je,{fontSize:`inherit`}),info:(0,x.jsx)(Me,{fontSize:`inherit`})},ze=b.forwardRef(function(e,t){let n=l({props:e,name:`MuiAlert`}),{action:r,children:a,className:o,closeText:s=`Close`,color:c,icon:u,iconMapping:d=$,onClose:f,role:p=`alert`,severity:m=`success`,slotProps:h={},slots:g={},variant:_=`standard`,...v}=n,y={...n,color:c,severity:m,variant:_,colorSeverity:c||m},b=Pe(y),S={slots:g,slotProps:h},[C,w]=L(`root`,{ref:t,shouldForwardComponentProp:!0,className:i(b.root,o),elementType:Fe,externalForwardedProps:{...S,...v},ownerState:y,additionalProps:{role:p,elevation:0}}),[T,E]=L(`icon`,{className:b.icon,elementType:Ie,externalForwardedProps:S,ownerState:y}),[D,O]=L(`message`,{className:b.message,elementType:Le,externalForwardedProps:S,ownerState:y}),[k,A]=L(`action`,{className:b.action,elementType:Re,externalForwardedProps:S,ownerState:y}),[j,ee]=L(`closeButton`,{elementType:U,externalForwardedProps:S,ownerState:y}),[M,N]=L(`closeIcon`,{elementType:Ne,externalForwardedProps:S,ownerState:y});return(0,x.jsxs)(C,{...w,children:[u===!1?null:(0,x.jsx)(T,{...E,children:u||d[m]||$[m]}),(0,x.jsx)(D,{...O,children:a}),r==null?null:(0,x.jsx)(k,{...A,children:r}),r==null&&f?(0,x.jsx)(k,{...A,children:(0,x.jsx)(j,{size:`small`,"aria-label":s,title:s,color:`inherit`,onClick:f,...ee,children:(0,x.jsx)(M,{fontSize:`small`,...N})})}):null]})});export{D as C,w as D,C as E,O as S,T,F as _,he as a,A as b,U as c,V as d,ae as f,L as g,R as h,ge as i,se as l,z as m,Ee as n,W as o,B as p,Ce as r,G as s,ze as t,oe as u,P as v,E as w,k as x,ee as y};

package/packages/piagent-webui/dist/client/assets/Button-DZJosXQi.js

@@ -0,0 +1 @@
+import{r as e}from"./rolldown-runtime-hePW80VL.js";import{U as t,b as n,d as r,f as i,u as a}from"./useTheme-_ESOj7MI.js";import{A as o,C as s,D as c,E as l,O as u,P as d,S as f,_ as p,a as m,i as h,o as g,p as _}from"./ui-preferences-DiddStu0.js";var v=e(t(),1);function y(e){return r(`MuiButton`,e)}var b=a(`MuiButton`,`root.text.outlined.contained.disableElevation.focusVisible.disabled.colorInherit.colorPrimary.colorSecondary.colorSuccess.colorError.colorInfo.colorWarning.sizeMedium.sizeSmall.sizeLarge.fullWidth.startIcon.endIcon.icon.loading.loadingWrapper.loadingIconPlaceholder.loadingIndicator.loadingPositionCenter.loadingPositionStart.loadingPositionEnd`.split(`.`)),x=v.createContext({}),S=v.createContext(void 0),C=n(),w=e=>{let{color:t,disableElevation:n,fullWidth:r,size:i,variant:a,loading:s,loadingPosition:c,classes:l}=e,u={root:[`root`,s&&`loading`,a,`size${f(i)}`,`color${f(t)}`,n&&`disableElevation`,r&&`fullWidth`,s&&`loadingPosition${f(c)}`],startIcon:[`icon`,`startIcon`],endIcon:[`icon`,`endIcon`],loadingIndicator:[`loadingIndicator`],loadingWrapper:[`loadingWrapper`]},d=o(u,y,l);return{...l,...d}},T=[{props:{size:`small`},style:{"& > *:nth-of-type(1)":{fontSize:18}}},{props:{size:`medium`},style:{"& > *:nth-of-type(1)":{fontSize:20}}},{props:{size:`large`},style:{"& > *:nth-of-type(1)":{fontSize:22}}}],E=c(g,{shouldForwardProp:e=>u(e)||e===`classes`,name:`MuiButton`,slot:`Root`,overridesResolver:(e,t)=>{let{ownerState:n}=e;return[t.root,t[n.variant],t[`size${f(n.size)}`],n.color===`inherit`&&t.colorInherit,n.disableElevation&&t.disableElevation,n.fullWidth&&t.fullWidth,n.loading&&t.loading]}})(s(({theme:e})=>{let t=e.palette.mode===`light`?e.palette.grey[300]:e.palette.grey[800],n=e.palette.mode===`light`?e.palette.grey.A100:e.palette.grey[700];return{...e.typography.button,minWidth:64,padding:`6px 16px`,border:0,borderRadius:(e.vars||e).shape.borderRadius,...p(e,[`background-color`,`box-shadow`,`border-color`,`color`],{duration:e.transitions.duration.short}),"&:hover":{textDecoration:`none`},[`&.${b.disabled}`]:{color:(e.vars||e).palette.action.disabled},variants:[{props:{variant:`contained`},style:{color:`var(--variant-containedColor)`,backgroundColor:`var(--variant-containedBg)`,boxShadow:(e.vars||e).shadows[2],"&:hover":{boxShadow:(e.vars||e).shadows[4],"@media (hover: none)":{boxShadow:(e.vars||e).shadows[2]}},"&:active":{boxShadow:(e.vars||e).shadows[8]},[`&.${b.focusVisible}`]:{boxShadow:(e.vars||e).shadows[6]},[`&.${b.disabled}`]:{color:(e.vars||e).palette.action.disabled,boxShadow:(e.vars||e).shadows[0],backgroundColor:(e.vars||e).palette.action.disabledBackground}}},{props:{variant:`outlined`},style:{padding:`5px 15px`,border:`1px solid currentColor`,borderColor:`var(--variant-outlinedBorder, currentColor)`,backgroundColor:`var(--variant-outlinedBg)`,color:`var(--variant-outlinedColor)`,[`&.${b.disabled}`]:{border:`1px solid ${(e.vars||e).palette.action.disabledBackground}`}}},{props:{variant:`text`},style:{padding:`6px 8px`,color:`var(--variant-textColor)`,backgroundColor:`var(--variant-textBg)`}},...Object.entries(e.palette).filter(_()).map(([t])=>({props:{color:t},style:{"--variant-textColor":(e.vars||e).palette[t].main,"--variant-outlinedColor":(e.vars||e).palette[t].main,"--variant-outlinedBorder":e.alpha((e.vars||e).palette[t].main,.5),"--variant-containedColor":(e.vars||e).palette[t].contrastText,"--variant-containedBg":(e.vars||e).palette[t].main,"@media (hover: hover)":{"&:hover":{"--variant-containedBg":(e.vars||e).palette[t].dark,"--variant-textBg":e.alpha((e.vars||e).palette[t].main,(e.vars||e).palette.action.hoverOpacity),"--variant-outlinedBorder":(e.vars||e).palette[t].main,"--variant-outlinedBg":e.alpha((e.vars||e).palette[t].main,(e.vars||e).palette.action.hoverOpacity)}}}})),{props:{color:`inherit`},style:{color:`inherit`,borderColor:`currentColor`,"--variant-containedBg":e.vars?e.vars.palette.Button.inheritContainedBg:t,"@media (hover: hover)":{"&:hover":{"--variant-containedBg":e.vars?e.vars.palette.Button.inheritContainedHoverBg:n,"--variant-textBg":e.alpha((e.vars||e).palette.text.primary,(e.vars||e).palette.action.hoverOpacity),"--variant-outlinedBg":e.alpha((e.vars||e).palette.text.primary,(e.vars||e).palette.action.hoverOpacity)}}}},{props:{size:`small`,variant:`text`},style:{padding:`4px 5px`,fontSize:e.typography.pxToRem(13)}},{props:{size:`large`,variant:`text`},style:{padding:`8px 11px`,fontSize:e.typography.pxToRem(15)}},{props:{size:`small`,variant:`outlined`},style:{padding:`3px 9px`,fontSize:e.typography.pxToRem(13)}},{props:{size:`large`,variant:`outlined`},style:{padding:`7px 21px`,fontSize:e.typography.pxToRem(15)}},{props:{size:`small`,variant:`contained`},style:{padding:`4px 10px`,fontSize:e.typography.pxToRem(13)}},{props:{size:`large`,variant:`contained`},style:{padding:`8px 22px`,fontSize:e.typography.pxToRem(15)}},{props:{disableElevation:!0},style:{boxShadow:`none`,"&:hover":{boxShadow:`none`},[`&.${b.focusVisible}`]:{boxShadow:`none`},"&:active":{boxShadow:`none`},[`&.${b.disabled}`]:{boxShadow:`none`}}},{props:{fullWidth:!0},style:{width:`100%`}},{props:{loadingPosition:`center`},style:{...p(e,[`background-color`,`box-shadow`,`border-color`],{duration:e.transitions.duration.short}),[`&.${b.loading}`]:{color:`transparent`}}}]}})),D=c(`span`,{name:`MuiButton`,slot:`StartIcon`,overridesResolver:(e,t)=>{let{ownerState:n}=e;return[t.startIcon,n.loading&&t.startIconLoadingStart]}})(({theme:e})=>({display:`inherit`,alignItems:`center`,marginRight:8,marginLeft:-4,"&::before":{content:`"\\200b"`,width:0,overflow:`hidden`},variants:[{props:{size:`small`},style:{marginLeft:-2}},{props:{loadingPosition:`start`,loading:!0},style:{...p(e,[`opacity`],{duration:e.transitions.duration.short}),opacity:0}},{props:{loadingPosition:`start`,loading:!0,fullWidth:!0},style:{marginRight:-8}},...T]})),O=c(`span`,{name:`MuiButton`,slot:`EndIcon`,overridesResolver:(e,t)=>{let{ownerState:n}=e;return[t.endIcon,n.loading&&t.endIconLoadingEnd]}})(({theme:e})=>({display:`inherit`,marginRight:-4,marginLeft:8,variants:[{props:{size:`small`},style:{marginRight:-2}},{props:{loadingPosition:`end`,loading:!0},style:{...p(e,[`opacity`],{duration:e.transitions.duration.short}),opacity:0}},{props:{loadingPosition:`end`,loading:!0,fullWidth:!0},style:{marginLeft:-8}},...T]})),k=c(`span`,{name:`MuiButton`,slot:`LoadingIndicator`})(({theme:e})=>({display:`none`,position:`absolute`,visibility:`visible`,variants:[{props:{loading:!0},style:{display:`flex`}},{props:{loadingPosition:`start`},style:{left:14}},{props:{loadingPosition:`start`,size:`small`},style:{left:10}},{props:{variant:`text`,loadingPosition:`start`},style:{left:6}},{props:{loadingPosition:`center`},style:{left:`50%`,transform:`translate(-50%)`,color:(e.vars||e).palette.action.disabled}},{props:{loadingPosition:`end`},style:{right:14}},{props:{loadingPosition:`end`,size:`small`},style:{right:10}},{props:{variant:`text`,loadingPosition:`end`},style:{right:6}},{props:{loadingPosition:`start`,fullWidth:!0},style:{position:`relative`,left:-10}},{props:{loadingPosition:`end`,fullWidth:!0},style:{position:`relative`,right:-10}}]})),A=c(`span`,{name:`MuiButton`,slot:`LoadingIconPlaceholder`})({display:`inline-block`,width:`1em`,height:`1em`}),j=v.forwardRef(function(e,t){let n=v.useContext(x),r=v.useContext(S),a=d(n,e),o=l({props:a,name:`MuiButton`}),{children:s,color:c=`primary`,component:u=`button`,className:f,disabled:p=!1,disableElevation:g=!1,disableFocusRipple:_=!1,endIcon:y,focusVisibleClassName:b,fullWidth:T=!1,id:j,loading:M=null,loadingIndicator:N,loadingPosition:P=`center`,size:F=`medium`,startIcon:I,type:L,variant:R=`text`,...z}=o,B=h(j),V=N??(0,C.jsx)(m,{"aria-labelledby":B,color:`inherit`,size:16}),H={...o,color:c,component:u,disabled:p,disableElevation:g,disableFocusRipple:_,fullWidth:T,loading:M,loadingIndicator:V,loadingPosition:P,size:F,type:L,variant:R},U=w(H),W=(I||M&&P===`start`)&&(0,C.jsx)(D,{className:U.startIcon,ownerState:H,children:I||(0,C.jsx)(A,{className:U.loadingIconPlaceholder,ownerState:H})}),G=(y||M&&P===`end`)&&(0,C.jsx)(O,{className:U.endIcon,ownerState:H,children:y||(0,C.jsx)(A,{className:U.loadingIconPlaceholder,ownerState:H})}),K=r||``,q=typeof M==`boolean`?(0,C.jsx)(`span`,{className:U.loadingWrapper,style:{display:`contents`},children:M&&(0,C.jsx)(k,{className:U.loadingIndicator,ownerState:H,children:V})}):null,{root:J,...Y}=U;return(0,C.jsxs)(E,{ownerState:H,className:i(n.className,U.root,f,K),component:u,disabled:p||M,focusRipple:!_,focusVisibleClassName:i(U.focusVisible,b),ref:t,internalNativeButton:!0,type:L,id:M?B:j,...z,classes:Y,children:[W,P!==`end`&&q,s,P===`end`&&q,G]})});export{j as t};