@piagent/platform 1.50.0 → 1.51.1

package/packages/piagent-core/managed/tool-boundary.mjs

@@ -21,7 +21,7 @@ import { proxyEnvironment } from './package-proxy.mjs';
 import { startBoundaryPackageProxy } from './boundary-package-proxy.mjs';
 import { SourceRevertRequests } from './source-revert-requests.mjs';
 import { BWRAP, bubblewrapArgs, credentialFiles, referenceFolders } from './linux-sandbox.mjs';
-import { agentWatchDataDirectory } from './store.mjs';
+import { agentWatchDataDirectory } from './store.mjs'; import { spawnOnHost } from './host-command.mjs';
 const TOOL_NAMES = Object.freeze(['read', 'bash', 'edit', 'write', 'grep', 'find', 'ls']);
 const MAX_WIRE_BYTES = 12 * 1024 * 1024;
 const workerPath = fileURLToPath(new URL('./tool-worker.mjs', import.meta.url));
@@ -369,9 +369,9 @@ export class ManagedToolBoundary {
     if (Buffer.byteLength(message) > MAX_WIRE_BYTES) throw new Error('managed-tool-input-too-large');
     return await new Promise((resolve, reject) => {
       guard?.();
-      const [sandbox, sandboxArgs] = this.linux ? [BWRAP, this.bubblewrap(network, docker)]
+      const [sandbox, sandboxArgs] = this.unsandboxed?.() ? [null, []] : this.linux ? [BWRAP, this.bubblewrap(network, docker)]
         : ['/usr/bin/sandbox-exec', ['-p', docker ? this.dockerProfile : network ? this.networkProfile : isolated ? this.isolatedProfile : this.profile]];
-      const child = spawn(sandbox, [...sandboxArgs, this.node, this.workerPath, this.sdkPath, this.cwd], {
+      const child = spawn(sandbox ?? this.node, [...sandboxArgs, ...(sandbox ? [this.node] : []), this.workerPath, this.sdkPath, this.cwd], {
         cwd: this.cwd, detached: true, stdio: ['pipe', 'pipe', 'pipe'],
         env: docker ? this.environment.docker : network ? this.environment.network : this.environment.offline,
       });
@@ -455,7 +455,7 @@ export class ManagedToolBoundary {
   // A process the agent keeps running across turns (background-process.mjs):
   // the plain command sandbox and environment, marked as this conversation's
   // background process instead of the turn's, so stopStrays leaves it.
-  async spawnBackground(command, key) { return this.spawnSandboxed(['/bin/bash', '-c', command], key); }
+  async spawnBackground(command, key) { return this.unsandboxed?.() ? { child: spawnOnHost(command, this.cwd, this.userHome), isolated: false } : this.spawnSandboxed(['/bin/bash', '-c', command], key); }
   // `argv` in the plain command sandbox; stdin 'pipe' for a process that
   // answers requests (ts-diagnostics.mjs).
   async spawnSandboxed(argv, key, { stdin = 'ignore' } = {}) {

package/packages/piagent-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@piagent/core",
-  "version": "1.50.0",
+  "version": "1.51.1",
   "type": "module",
   "private": true,
   "license": "MIT",

package/packages/piagent-core/policies/base-policy.json

@@ -94,7 +94,8 @@
       "read-only",
       "workspace-write",
       "trusted-full-access",
-      "bypass"
+      "bypass",
+      "always-bypass"
     ]
   },
   "execPolicy": {

package/packages/piagent-core/runtime/hooks/session-start-hook.ts

@@ -319,6 +319,9 @@ export function registerSessionStartHook(pi: ExtensionAPI, dependencies: Session
     if (permissionProfile.mode === "trusted-full-access") {
       ctx.ui.notify("Piagent permission profile trusted-full-access is active; protected paths, secret redaction, and destructive/external confirmations remain enforced.", "warning");
     }
+    if (permissionProfile.mode === "always-bypass") {
+      ctx.ui.notify("Warning: Piagent always bypass is active, by your decision. Only committing and pushing code and removing a critical path (rm -rf ~) are asked; deploys, MCP, network and credentials run. The project's autoDeny rules, output redaction and /undo checkpoints remain.", "warning");
+    }
     if (permissionProfile.mode === "bypass") {
       ctx.ui.notify("Piagent bypass is active: the work runs without confirmation, protected-path or policy gates in this personal session. The handoff (push, PR, publish, deploy, remote tools, MCP writes) is still asked; output redaction and /undo checkpoints remain.", "warning");
     }

package/packages/piagent-core/runtime/policy/critical-removal.mjs

@@ -0,0 +1,122 @@
+// What Always bypass asks about besides commit and push: an rm or rmdir whose
+// target is a critical path, by the rules of Claude's bypassPermissions
+// (permission-modes, "Critical paths" and "The mounted drive prompt"). A text
+// check, not a boundary: other commands and scripts can delete these paths too.
+import fs from 'node:fs';
+import path from 'node:path';
+import { evaluateExecPolicyCore } from '../../extensions/policy-core.js';
+import { astCommands } from '../../extensions/shell-ast.js';
+import { executable } from './handoff-policy.mjs';
+
+const TOP_LEVEL = new Set(['bin', 'boot', 'dev', 'etc', 'home', 'lib', 'lib64', 'media', 'mnt', 'opt', 'proc', 'root', 'run', 'sbin', 'srv', 'sys', 'tmp', 'usr', 'var', 'Applications', 'Library', 'System', 'Users', 'Volumes', 'private']);
+const DIRECTORY_PRINTER = /(?:^|[\s;&|(])([A-Za-z_]\w*)=["']?(?:\$\(|`)\s*(?:pwd|git\s+rev-parse\s+--show-toplevel|dirname\b|realpath\b)/g;
+const MOUNTED = [/^\/Volumes\/[^/]+(\/[^/]+)?$/, /^\/System\/Volumes(\/[^/]+){0,2}$/, /^\/media\/[^/]+(\/[^/]+){0,2}$/, /^\/run\/media(\/[^/]+){0,3}$/, /^\/mnt\/[^/]+$/, /^\/mnt\/[A-Za-z]\/[^/]+$/];
+const DYNAMIC = /\$(?:\(…\)|[A-Za-z_@*#?!\d]\w*)/;
+const onlyDynamic = /^\$(?:\(…\)|[A-Za-z_@*#?!\d]\w*)$/;
+
+// On Windows the checks below see one spelling of a path: `D:\\a\\B`, `d:/a/b` and
+// Git Bash's `/d/a/b` are all `/d:/a/b`.
+function comparable(value) {
+  if (process.platform !== 'win32') return value;
+  return value.replace(/\\/g, '/').toLowerCase().replace(/^\/?([a-z]):?(?=\/|$)/, (_, drive) => `/${drive}:`);
+}
+
+// `{/,}` is `/` by the time it runs.
+function expanded(word) {
+  const brace = /^(.*?)\{([^{}]*,[^{}]*)\}(.*)$/.exec(word);
+  return brace ? brace[2].split(',').flatMap(part => expanded(brace[1] + part + brace[3])) : [word];
+}
+function parseTargets(args) {
+  const targets = []; let recursive = false, options = true;
+  for (const arg of args) {
+    if (options && arg === '--') options = false;
+    else if (options && arg.startsWith('-') && arg !== '-') recursive ||= arg === '--recursive' || (!arg.startsWith('--') && /[rR]/.test(arg));
+    else targets.push(arg);
+  }
+  return { targets, recursive };
+}
+
+function isCritical(target, cwd, home) {
+  if (target === '/' || path.posix.dirname(target) === '/') return true;
+  return target === home || target === cwd || cwd.startsWith(`${target}/`);
+}
+
+// Why this one target needs the member, or null.
+function targetReason(raw, { cwd, project, home, recursive, guarded, printers, singleQuotedScript, afterCd }) {
+  const DANGER = text => `Dangerous rm operation on critical path: ${text}`;
+  if (/^\\+$/.test(raw)) return DANGER(raw);
+  let word = raw.replace(/^~(?=\/|$)/, home).replace(/\$\{?HOME\}?(?=\/|$)/, home).replace(/\$\{?PWD\}?(?=\/|$)/, cwd);
+  if (/^~/.test(word)) return DANGER(raw);
+  for (const name of printers) if (new RegExp(`\\$${name}(?:\\b|/|$)`).test(word)) return `Dangerous rm operation: ${raw} comes from a directory-printing substitution`;
+  const dynamic = DYNAMIC.exec(word);
+  if (dynamic) {
+    const name = dynamic[0].slice(1), positional = /^[@*\d#]/.test(name);
+    if (onlyDynamic.test(word) && word.includes('(…)') && recursive) return `Dangerous rm operation: ${raw} is only the output of a command`;
+    const under = /^\$[^/]*\/(\*(\/\*)*\/?)?$/.test(word), glob = under && !(guarded.has(name) || (positional && singleQuotedScript));
+    if (glob) return `Dangerous rm operation: ${raw} removes from the filesystem root when the variable is empty`;
+    if (/^\$[^/]+\/[^/]+$/.test(word) && TOP_LEVEL.has(word.split('/')[1]) && !guarded.has(name)) return DANGER(`${raw} (/${word.split('/')[1]} when the variable is empty)`);
+    const before = word.slice(0, dynamic.index);
+    // A trailing substitution: the path that remains when it expands empty.
+    if (word.slice(dynamic.index) === dynamic[0] && before.startsWith('/') && isCritical(path.posix.resolve(comparable(before)), cwd, home)) return DANGER(raw);
+    return null;
+  }
+  const glob = /\/?\*\/?$/.test(word) || word === '*';
+  if (glob && (/\*\/(\*\/?)?$/.test(word) || (afterCd && !word.startsWith('/')))) return `Dangerous rm operation: ${raw} cannot be checked before the command runs`;
+  const literal = word.replace(/\/?\*$/, '') || (word.startsWith('/') ? '/' : '.');
+  const resolved = path.posix.resolve(cwd, comparable(literal));
+  if (isCritical(resolved, cwd, home) || isCritical(resolved, project, home)) return DANGER(raw);
+  if ((recursive || glob) && MOUNTED.some(rule => rule.test(resolved))) return `Dangerous rm operation on mounted drive path: ${raw}`;
+  return null;
+}
+
+// Why this command must be asked about in Always bypass, or null.
+export function criticalRemovalReason(command, options) {
+  const cwd = comparable(options.cwd), home = comparable(options.home);
+  const text = String(command), commands = astCommands(text);
+  if (commands === null) return /\b(rm|rmdir)\b/.test(text) ? 'Dangerous rm operation not ruled out: the shell may read this command differently than it was parsed' : null;
+  const guarded = new Set([...text.matchAll(/\$\{([A-Za-z_]\w*):\?/g)].map(match => match[1]));
+  const printers = new Set([...text.matchAll(DIRECTORY_PRINTER)].map(match => match[1]));
+  const singleQuotedScript = /\s-[a-z]*c\s+'/.test(text);
+  let base = cwd, afterCd = false;
+  for (const { words } of commands) {
+    const [name, ...args] = executable(words), program = String(name ?? '').split('/').pop();
+    if (program === 'cd') {
+      afterCd = true;
+      if (args[0] && !DYNAMIC.test(args[0])) base = path.posix.resolve(base, comparable(args[0].replace(/^~(?=\/|$)/, home)));
+      continue;
+    }
+    if (program !== 'rm' && program !== 'rmdir') continue;
+    const { targets, recursive } = parseTargets(args);
+    for (const target of targets.flatMap(expanded)) {
+      const reason = targetReason(target, { cwd: base, project: cwd, home, recursive, guarded, printers, singleQuotedScript, afterCd });
+      if (reason) return reason;
+    }
+  }
+  return null;
+}
+
+// A project's own refusals (profile `autoDeny`) in a company session, as a deny
+// rule holds in every mode: the reason, or null.
+export function projectDenyReason(command, cwd) {
+  let profile;
+  try { profile = JSON.parse(fs.readFileSync(path.join(cwd, '.pi', 'piagent-profile.json'), 'utf8')); } catch { return null; }
+  const rules = (Array.isArray(profile?.autoDeny) ? profile.autoDeny : []).filter(rule => typeof rule?.pattern === 'string' && rule.pattern.trim())
+    .map((rule, index) => ({ id: `auto-deny-${index + 1}`, action: 'forbid', match: rule.match ?? 'contains', value: rule.pattern, reason: String(rule.reason ?? "Refused by this project's autoDeny rule") }));
+  if (!rules.length) return null;
+  const refused = evaluateExecPolicyCore(String(command), { policy: { execPolicy: { defaultMode: 'enforce', bannedPrefixSuggestions: [], rules } }, mode: 'enforce' });
+  return refused.decision === 'forbid' ? refused.reasons[0] ?? 'Refused by this project' : null;
+}
+
+// Claude's time limit: two minutes, then a denial that lets the work go on; after
+// three unanswered prompts, denied at once until the member sends a message.
+export const REMOVAL_TTL_MS = 120_000;
+export const REMOVAL_EXPIRED = 'the member did not answer within two minutes, so this removal did not run. Carry on with the rest of the work: name the exact paths to remove instead, or leave the removal to the member and say so.';
+const unanswered = new Map();
+const memberMessages = manager => (manager?.getEntries?.() ?? []).filter(entry => entry.type === 'message' && entry.message?.role === 'user').length;
+const current = (id, manager) => {
+  const turn = memberMessages(manager), held = unanswered.get(id);
+  if (held?.turn === turn) return held;
+  const fresh = { turn, count: 0 }; unanswered.set(id, fresh); return fresh;
+};
+export const removalsHeld = (id, manager) => current(id, manager).count >= 3;
+export const noteRemovalExpired = (id, manager) => { current(id, manager).count += 1; };

package/packages/piagent-core/runtime/policy/handoff-policy.mjs

@@ -1,9 +1,9 @@
-// What every permission mode still asks about, Bypass included (owner,
-// 2026-10-29: "Bypass bypasses the work and stops at the handoff").
+// What every permission mode but Always bypass still asks about, Bypass
+// included (owner, 2026-10-29: "Bypass bypasses the work and stops at the handoff").
 //
 // handoffReason: the work leaves this machine. A push, a pull request or a
 // merge, a release, a package publish, a deploy, a registry push or login, a
-// remote shell, a cloud or cluster tool, an upload. Asked in every mode, in
+// remote shell, a cloud or cluster tool, an upload. Asked in these modes, in
 // personal and company sessions alike.
 // mustConfirm: the handoff plus what is destructive or irreversible here:
 // database migrations, deletes whose target is only known at run time,
@@ -50,7 +50,7 @@ function treeFindings(command) {
 // `bash -c`, substitutions and compound statements included).
 export const commandSegments = command => [...parse(command).segments, ...(astCommands(command) ?? []).map(({ words }) => ({ command: words.join(' '), words }))];
 
-function executable(words) {
+export function executable(words) {
   let current = stripWrapper(words);
   for (;;) {
     if (RUNNERS.has(current[0]) || (['pnpm', 'yarn'].includes(current[0]) && current[1] === 'dlx')) {
@@ -91,6 +91,25 @@ function segmentHandoff(words) {
   return null;
 }
 
+// What Always bypass still asks (owner, 2026-11-02): committing and pushing
+// code, and a merge, which pushes it on the server. The reason, or null.
+function segmentCode(words) {
+  const [name, ...args] = executable(words), sub = positional(args);
+  if (name === 'gh') return sub[0] === 'pr' && sub[1] === 'merge' ? 'gh pr merge pushes code' : null;
+  if (name !== 'git') return null;
+  if (words.some((word, index) => (word === '-c' && /^alias\./i.test(words[index + 1] ?? '')) || /^-calias\./i.test(word))) return 'git runs an alias defined in the command';
+  if (sub[0] === 'commit') return 'git commit records code';
+  if (sub[0] === 'push' || (['subtree', 'lfs'].includes(sub[0]) && sub[1] === 'push')) return 'git push sends code to a remote';
+  return null;
+}
+export function codeHandoffReason(command) {
+  for (const segment of [...parse(command).segments, ...treeFindings(command)]) {
+    const reason = segmentCode(segment.words);
+    if (reason) return reason;
+  }
+  return null;
+}
+
 // Why this command hands the work off (asked in every mode), or null.
 export async function handoffReason(command) {
   const result = parse(command);

package/packages/piagent-core/runtime/registration/permission-commands.ts

@@ -49,7 +49,7 @@ export function registerPermissionCommands(pi: ExtensionAPI, deps: Record<string
   function emitCurrentPermissionStatus(ctx: ExtensionContext): void {
     const profile = loadProfileFromContext(ctx);
     const permissionProfile = resolvePermissionProfile(profile, policy, permissionOverrideFromContext(ctx));
-    ctx.ui.notify(`Piagent permission profile: ${permissionProfile.mode}`, ["trusted-full-access", "bypass"].includes(permissionProfile.mode) ? "warning" : "info");
+    ctx.ui.notify(`Piagent permission profile: ${permissionProfile.mode}`, ["trusted-full-access", "bypass", "always-bypass"].includes(permissionProfile.mode) ? "warning" : "info");
     emitPermissionStatus(ctx, permissionProfile);
   }
 
@@ -58,7 +58,7 @@ export function registerPermissionCommands(pi: ExtensionAPI, deps: Record<string
     const profile = loadProfileFromContext(ctx);
     const permissionProfile = resolvePermissionProfile(profile, policy, permissionOverrideFromContext(ctx));
     const isActive = permissionProfile.mode === mode && !permissionProfile.warning;
-    const level = !isActive || mode === "trusted-full-access" || mode === "bypass" ? "warning" : "info";
+    const level = !isActive || mode === "trusted-full-access" || mode === "bypass" || mode === "always-bypass" ? "warning" : "info";
     const message = isActive
       ? `Piagent permission profile set to ${mode} for this session.`
       : `Requested ${mode}, but active profile is ${permissionProfile.mode}.`;
@@ -67,6 +67,9 @@ export function registerPermissionCommands(pi: ExtensionAPI, deps: Record<string
     if (permissionProfile.mode === "trusted-full-access") {
       ctx.ui.notify("Trusted full access is active; protected paths, secret redaction, and destructive and handoff confirmations remain enforced.", "warning");
     }
+    if (permissionProfile.mode === "always-bypass") {
+      ctx.ui.notify("Warning: Always bypass is active, by your decision. Network, MCP, files, deploys and credentials run without asking; only committing and pushing code and removing a critical path (rm -rf ~) are asked. The project's autoDeny rules, output redaction and /undo remain.", "warning");
+    }
     if (permissionProfile.mode === "bypass") {
       ctx.ui.notify("Bypass is active: the work is not asked about or blocked in this personal session (deletes and protected paths included). The handoff (push, PR, publish, deploy, remote tools, MCP writes) is still asked; output redaction and /undo checkpoints remain. Company sessions keep their own rules.", "warning");
     }
@@ -78,6 +81,7 @@ export function registerPermissionCommands(pi: ExtensionAPI, deps: Record<string
     if (["read", "readonly", "read-only", "ro"].includes(action)) return "read-only";
     if (["write", "workspace", "workspace-write", "ww"].includes(action)) return "workspace-write";
     if (["full", "full-access", "trusted", "trusted-full-access"].includes(action)) return "trusted-full-access";
+    if (["always-bypass", "always"].includes(action)) return "always-bypass";
     if (["bypass", "yolo", "dangerously-bypass"].includes(action)) return "bypass";
     return undefined;
   }
@@ -90,7 +94,8 @@ export function registerPermissionCommands(pi: ExtensionAPI, deps: Record<string
         { value: "read-only", label: "Read-only", description: "Scout/review without writes" },
         { value: "workspace-write", label: "Workspace write", description: "Normal governed implementation mode" },
         { value: "full-access", label: "Full access", description: "Trusted local full access; guardrails still apply" },
-        { value: "bypass", label: "Bypass", description: "Nothing asked or blocked (personal sessions only); redaction and /undo remain" },
+        { value: "bypass", label: "Bypass", description: "The work is not asked or blocked (personal sessions only); the handoff is still asked" },
+        { value: "always-bypass", label: "Always bypass", description: "Warning: nothing asked except commit, push and rm on a critical path" },
         { value: "help", label: "Help", description: "Show typed forms" }
       ], "status");
       if (chosen && chosen !== "help") {
@@ -104,7 +109,8 @@ export function registerPermissionCommands(pi: ExtensionAPI, deps: Record<string
         "read: /permission read-only",
         "write: /permission workspace-write",
         "full: /permission full-access",
-        "bypass: /permission bypass (personal; nothing asked or blocked)",
+        "bypass: /permission bypass (personal; the handoff is still asked)",
+        "always: /permission always-bypass (only commit, push and rm on a critical path are asked)",
         "legacy: /piagent-permission"
       ].join("\n"));
       return;
@@ -120,7 +126,8 @@ export function registerPermissionCommands(pi: ExtensionAPI, deps: Record<string
         "read: /permission read-only",
         "write: /permission workspace-write",
         "full: /permission full-access",
-        "bypass: /permission bypass (personal; nothing asked or blocked)",
+        "bypass: /permission bypass (personal; the handoff is still asked)",
+        "always: /permission always-bypass (only commit, push and rm on a critical path are asked)",
         "legacy: /piagent-permission"
       ].join("\n"));
       return;
@@ -181,6 +188,7 @@ export function registerPermissionCommands(pi: ExtensionAPI, deps: Record<string
   registerPermissionProfileCommand("workspace-write", "workspace-write", "Switch this session to workspace-write permission profile");
   registerPermissionProfileCommand("full-access", "trusted-full-access", "Switch this session to trusted full-access permission profile");
   registerPermissionProfileCommand("trusted-full-access", "trusted-full-access", "Alias for /full-access");
-  registerPermissionProfileCommand("bypass", "bypass", "Switch this personal session to bypass: nothing asked or blocked");
+  registerPermissionProfileCommand("bypass", "bypass", "Switch this personal session to bypass: the handoff is still asked");
+  registerPermissionProfileCommand("always-bypass", "always-bypass", "Switch this session to always bypass: only commit, push and rm on a critical path are asked");
 
 }

package/packages/piagent-core/runtime/registration/task-evidence-tools.ts

@@ -208,7 +208,7 @@ export function registerTaskEvidenceTools(pi: ExtensionAPI, deps: Record<string,
       if (
         projectRelative
         && capabilityState.filesystemRead
-        && !["trusted-full-access", "bypass"].includes(permissionProfile.mode)
+        && !["trusted-full-access", "bypass", "always-bypass"].includes(permissionProfile.mode)
         && !matchesAnyPath(projectRelative, capabilityState.filesystemRead)
       ) {
         return {

package/packages/piagent-webui/dist/client/assets/{ActivityPanel-CmjxPmNT.js → ActivityPanel-DeeJLOYx.js}

@@ -1 +1 @@
-import{n as e,r as t}from"./rolldown-runtime-hePW80VL.js";import{An as n,Rn as r}from"./vendor-DNZbaWhT.js";import{i,n as a}from"./ui-preferences-OfS30-ZV.js";import{B as o,K as s,x as c}from"./api-BQS4Dtrr.js";import{c as l}from"./view-model-CWNiS4JN.js";var u=t(r(),1);function d(e,t=`vi`){let n=e.state===`running`?`running`:e.state===`failed`?`failed`:`passed`,r=n===`running`?t===`vi`?`đang chạy`:`running`:n===`failed`?t===`vi`?`thất bại`:`failed`:t===`vi`?`hoàn tất`:`completed`,i=e.startedAt??e.finishedAt??``;return{activityRef:`live.${e.toolCallRef}`,kind:[`bash`,`shell`,`exec`].includes(e.toolLabel)?`command`:`tool`,state:n,label:`${e.agent?`${e.agent} · `:``}${e.toolLabel} ${r}`,preview:e.detail??e.fileLabel??(t===`vi`?`Cập nhật trực tiếp từ Gateway`:`Live update from the Gateway`),toolCallId:e.toolCallRef,toolName:e.toolLabel,commandDigest:null,logRef:null,exitCode:null,exitCodeExact:!1,startedAt:i,finishedAt:n===`running`?null:e.finishedAt??i}}function f(e,t=`vi`){let n=e.state===`failed`?t===`vi`?`Lượt chạy gặp lỗi`:`Operation failed`:e.state===`blocked`?t===`vi`?`Lượt chạy bị chặn`:`Operation blocked`:e.state===`aborted`?t===`vi`?`Lượt chạy đã dừng`:`Operation stopped`:t===`vi`?`Chưa xác định kết quả lượt chạy`:`Operation outcome unknown`;return{activityRef:e.activityRef,kind:`system`,state:e.state,label:n,preview:e.reasonCode,toolCallId:null,toolName:null,commandDigest:null,logRef:null,exitCode:null,exitCodeExact:!1,startedAt:e.settledAt,finishedAt:e.settledAt}}function p(e,t,n,r=`vi`,i){let a=[...e,...t],o=new Set(a.map(e=>e.activityRef)),s=n.filter(e=>!o.has(e.activityRef)).map(e=>f(e,r));if(i===void 0)return{rows:[...e,...s,...t],terminalCount:s.length,runningCount:e.length};let c=i.filter(e=>e.state===`running`).map(e=>d(e,r));return{rows:[...c,...s,...t],terminalCount:s.length,runningCount:c.length}}function m(e,t=`vi`){return e.state===`passed`&&/ recovered$/i.test(e.label)?t===`vi`?`Đã khôi phục`:`Recovered`:e.state===`passed`&&/ warning$/i.test(e.label)?t===`vi`?`Đã xử lý cảnh báo`:`Handled warning`:e.state===`passed`&&e.exitCodeExact?`Pass · exit ${e.exitCode??0}`:e.state===`failed`&&e.exitCodeExact?`Fail · exit ${e.exitCode??`?`}`:e.state===`blocked`?`Blocked`:e.state===`aborted`?t===`vi`?`Đã dừng`:`Stopped`:e.state===`unknown`?t===`vi`?`Chưa xác định`:`Unknown`:e.state===`failed`?t===`vi`?`Thất bại`:`Failed`:e.state===`running`?t===`vi`?`Đang chạy`:`Running`:e.state.replaceAll(`-`,` `)}function h(e,t=`vi`){let n=Date.parse(e.startedAt),r=e.finishedAt?Date.parse(e.finishedAt):Date.now();if(!Number.isFinite(n)||!Number.isFinite(r)||r<n)return t===`vi`?`Thời gian chưa xác định`:`Unknown duration`;let i=Math.round((r-n)/1e3);return i<60?`${i}s`:`${Math.floor(i/60)}m ${i%60}s`}function g(e,t=[]){let n=new Map([[`main`,{agent:`main`,steps:[],total:0}]]),r=e=>{let t=n.get(e);if(t)return t;let r={agent:e,steps:[],total:0};return n.set(e,r),r};for(let t of e){if(t.helperRun){let e=r(t.helperRun.agent);e.total+=t.helperRun.total,e.steps.push(...t.helperRun.steps.map((e,n)=>({key:`${t.messageRef}:${n}`,toolName:e.toolName,target:e.target,state:`completed`,at:e.at})));continue}if(t.role!==`assistant`)continue;let e=r(`main`);for(let n of t.toolCalls)e.total+=1,e.steps.push({key:`${t.messageRef}:${n.toolCallRef}`,toolName:n.toolName,target:n.summary?.target??n.summary?.detail??null,state:n.state===`failed`||n.result?.isError?`failed`:`completed`,at:t.recordedAt})}for(let e of t){if(!e.agent||e.state===`running`)continue;let t=r(e.agent);t.total+=1,t.steps.push({key:e.toolCallRef,toolName:e.toolLabel,target:e.detail??null,state:e.state,at:e.startedAt??``})}for(let e of n.values())e.steps.sort((e,t)=>t.at.localeCompare(e.at));return[...n.values()].filter(e=>e.steps.length>0)}var _=n();function v(e,t){return e===`main`?a(t,`Main agent`,`Main agent`):`Subagent ${e}`}function y(e,t){let n=new Date(e);return Number.isFinite(n.getTime())?n.toLocaleTimeString(t===`vi`?`vi-VN`:`en-US`,{hour:`2-digit`,minute:`2-digit`,second:`2-digit`}):``}var b=5e3;function x({sessionRef:e,running:t,live:n,locale:r,empty:i}){let[o,c]=(0,u.useState)([]);(0,u.useEffect)(()=>{let n=new AbortController,r=()=>void s(e,null,200,n.signal).then(e=>c(e.items)).catch(()=>void 0);r();let i=t?window.setInterval(r,b):void 0;return()=>{n.abort(),i&&window.clearInterval(i)}},[e,t]);let d=(0,u.useMemo)(()=>g(o,n),[o,n]);return d.length?(0,_.jsx)(`div`,{className:`agent-activity-log`,children:d.map(e=>(0,_.jsxs)(`details`,{open:e.agent===`main`||t,className:`agent-activity-group`,children:[(0,_.jsxs)(`summary`,{children:[(0,_.jsx)(`strong`,{children:v(e.agent,r)}),` `,(0,_.jsxs)(`span`,{children:[e.total,` `,a(r,`lần gọi`,`calls`)]}),e.total>e.steps.length&&(0,_.jsxs)(`span`,{children:[` · `,a(r,`hiện ${e.steps.length} gần nhất`,`showing the latest ${e.steps.length}`)]})]}),e.steps.map(e=>(0,_.jsxs)(`article`,{className:`activity-row`,children:[(0,_.jsx)(`span`,{className:`activity-state tone-${l(e.state)}`,"aria-label":e.state}),(0,_.jsxs)(`div`,{className:`activity-copy`,children:[(0,_.jsx)(`div`,{children:(0,_.jsx)(`strong`,{children:e.toolName})}),e.target&&(0,_.jsx)(`p`,{children:e.target})]}),(0,_.jsx)(`div`,{className:`activity-result`,children:(0,_.jsx)(`span`,{children:y(e.at,r)})})]},e.key))]},e.agent))}):i?(0,_.jsx)(`div`,{className:`activity-empty`,children:i}):null}var S=e({ActivityPanel:()=>w});function C({activity:e,preview:t,onPreview:n,locale:r}){return(0,_.jsxs)(`article`,{className:`activity-row`,children:[(0,_.jsx)(`span`,{className:`activity-state tone-${l(e.state)}`,"aria-label":e.state}),(0,_.jsxs)(`div`,{className:`activity-copy`,children:[(0,_.jsxs)(`div`,{children:[(0,_.jsx)(`strong`,{children:e.label}),(0,_.jsx)(`span`,{children:e.kind})]}),(0,_.jsx)(`p`,{children:e.preview||a(r,`Không có mô tả ngắn`,`No short description`)}),t&&(0,_.jsxs)(`div`,{className:`log-preview ${t.state===`error`?`error-state`:``}`,children:[t.state===`loading`?a(r,`Đang tải log ngắn…`,`Loading log preview…`):t.state===`error`?a(r,`Log preview không còn sẵn sàng.`,`Log preview is no longer available.`):t.value?.preview??`${a(r,`Không có nội dung log`,`No log content`)} · ${t.value?.reasonCode??`unavailable`}`,t.value?.truncated&&(0,_.jsx)(`small`,{children:a(r,`Preview đã được rút gọn`,`Preview truncated`)})]})]}),(0,_.jsxs)(`div`,{className:`activity-result`,children:[(0,_.jsx)(`strong`,{children:m(e,r)}),(0,_.jsx)(`span`,{children:h(e,r)}),e.logRef&&n&&(0,_.jsx)(`button`,{type:`button`,onClick:n,"aria-expanded":!!t,children:t?a(r,`Ẩn log`,`Hide log`):a(r,`Xem log`,`View log`)})]})]})}function w({snapshot:e,sessionRef:t,terminalActivities:n=[],liveActivities:r}){let{locale:s}=i(),[l,d]=(0,u.useState)({}),f=e?.activity.running??[],m=e?.activity.recent??[],{rows:h,terminalCount:g,runningCount:v}=p(f,m,n,s,r),y=e=>{if(l[e.activityRef]){d(t=>({...t,[e.activityRef]:void 0}));return}d(t=>({...t,[e.activityRef]:{state:`loading`}})),(t?o(t,e.activityRef):c(e.activityRef)).then(t=>d(n=>({...n,[e.activityRef]:{state:`ready`,value:t}}))).catch(()=>d(t=>({...t,[e.activityRef]:{state:`error`}})))};return(0,_.jsxs)(`section`,{className:`activity-panel surface`,"aria-labelledby":`activity-title`,children:[(0,_.jsxs)(`header`,{className:`panel-heading`,children:[(0,_.jsxs)(`div`,{children:[(0,_.jsx)(`p`,{className:`section-kicker`,children:`Activity`}),(0,_.jsx)(`h2`,{id:`activity-title`,children:a(s,`Tool, command và kết quả lượt chạy`,`Tools, commands, and operation outcomes`)})]}),(0,_.jsxs)(`div`,{children:[(0,_.jsxs)(`span`,{className:`running-count`,children:[v,` `,a(s,`đang chạy`,`running`)]}),(0,_.jsxs)(`span`,{children:[m.length+g,` `,a(s,`gần đây`,`recent`)]})]})]}),(0,_.jsxs)(`div`,{className:`activity-list`,children:[h.map(e=>(0,_.jsx)(C,{activity:e,preview:l[e.activityRef],onPreview:e.logRef?()=>y(e):void 0,locale:s},e.activityRef)),t&&(0,_.jsx)(x,{sessionRef:t,running:!!r,live:r,locale:s,empty:h.length===0?a(s,`Chưa có tool, command hoặc kết quả lượt chạy nào trong timeline hiện tại.`,`No tools, commands, or operation outcomes in the current timeline.`):void 0}),h.length===0&&!t&&(0,_.jsx)(`div`,{className:`activity-empty`,children:a(s,`Chưa có tool, command hoặc kết quả lượt chạy nào trong timeline hiện tại.`,`No tools, commands, or operation outcomes in the current timeline.`)})]}),e?.activity.page.truncated&&(0,_.jsx)(`footer`,{className:`panel-footnote`,children:a(s,`Timeline đã được rút gọn theo giới hạn local.`,`The timeline was truncated to local limits.`)})]})}export{S as n,w as t};
+import{n as e,r as t}from"./rolldown-runtime-hePW80VL.js";import{An as n,Rn as r}from"./vendor-DNZbaWhT.js";import{i,n as a}from"./ui-preferences-OfS30-ZV.js";import{B as o,K as s,x as c}from"./api-BQS4Dtrr.js";import{u as l}from"./view-model-BrdSO09E.js";var u=t(r(),1);function d(e,t=`vi`){let n=e.state===`running`?`running`:e.state===`failed`?`failed`:`passed`,r=n===`running`?t===`vi`?`đang chạy`:`running`:n===`failed`?t===`vi`?`thất bại`:`failed`:t===`vi`?`hoàn tất`:`completed`,i=e.startedAt??e.finishedAt??``;return{activityRef:`live.${e.toolCallRef}`,kind:[`bash`,`shell`,`exec`].includes(e.toolLabel)?`command`:`tool`,state:n,label:`${e.agent?`${e.agent} · `:``}${e.toolLabel} ${r}`,preview:e.detail??e.fileLabel??(t===`vi`?`Cập nhật trực tiếp từ Gateway`:`Live update from the Gateway`),toolCallId:e.toolCallRef,toolName:e.toolLabel,commandDigest:null,logRef:null,exitCode:null,exitCodeExact:!1,startedAt:i,finishedAt:n===`running`?null:e.finishedAt??i}}function f(e,t=`vi`){let n=e.state===`failed`?t===`vi`?`Lượt chạy gặp lỗi`:`Operation failed`:e.state===`blocked`?t===`vi`?`Lượt chạy bị chặn`:`Operation blocked`:e.state===`aborted`?t===`vi`?`Lượt chạy đã dừng`:`Operation stopped`:t===`vi`?`Chưa xác định kết quả lượt chạy`:`Operation outcome unknown`;return{activityRef:e.activityRef,kind:`system`,state:e.state,label:n,preview:e.reasonCode,toolCallId:null,toolName:null,commandDigest:null,logRef:null,exitCode:null,exitCodeExact:!1,startedAt:e.settledAt,finishedAt:e.settledAt}}function p(e,t,n,r=`vi`,i){let a=[...e,...t],o=new Set(a.map(e=>e.activityRef)),s=n.filter(e=>!o.has(e.activityRef)).map(e=>f(e,r));if(i===void 0)return{rows:[...e,...s,...t],terminalCount:s.length,runningCount:e.length};let c=i.filter(e=>e.state===`running`).map(e=>d(e,r));return{rows:[...c,...s,...t],terminalCount:s.length,runningCount:c.length}}function m(e,t=`vi`){return e.state===`passed`&&/ recovered$/i.test(e.label)?t===`vi`?`Đã khôi phục`:`Recovered`:e.state===`passed`&&/ warning$/i.test(e.label)?t===`vi`?`Đã xử lý cảnh báo`:`Handled warning`:e.state===`passed`&&e.exitCodeExact?`Pass · exit ${e.exitCode??0}`:e.state===`failed`&&e.exitCodeExact?`Fail · exit ${e.exitCode??`?`}`:e.state===`blocked`?`Blocked`:e.state===`aborted`?t===`vi`?`Đã dừng`:`Stopped`:e.state===`unknown`?t===`vi`?`Chưa xác định`:`Unknown`:e.state===`failed`?t===`vi`?`Thất bại`:`Failed`:e.state===`running`?t===`vi`?`Đang chạy`:`Running`:e.state.replaceAll(`-`,` `)}function h(e,t=`vi`){let n=Date.parse(e.startedAt),r=e.finishedAt?Date.parse(e.finishedAt):Date.now();if(!Number.isFinite(n)||!Number.isFinite(r)||r<n)return t===`vi`?`Thời gian chưa xác định`:`Unknown duration`;let i=Math.round((r-n)/1e3);return i<60?`${i}s`:`${Math.floor(i/60)}m ${i%60}s`}function g(e,t=[]){let n=new Map([[`main`,{agent:`main`,steps:[],total:0}]]),r=e=>{let t=n.get(e);if(t)return t;let r={agent:e,steps:[],total:0};return n.set(e,r),r};for(let t of e){if(t.helperRun){let e=r(t.helperRun.agent);e.total+=t.helperRun.total,e.steps.push(...t.helperRun.steps.map((e,n)=>({key:`${t.messageRef}:${n}`,toolName:e.toolName,target:e.target,state:`completed`,at:e.at})));continue}if(t.role!==`assistant`)continue;let e=r(`main`);for(let n of t.toolCalls)e.total+=1,e.steps.push({key:`${t.messageRef}:${n.toolCallRef}`,toolName:n.toolName,target:n.summary?.target??n.summary?.detail??null,state:n.state===`failed`||n.result?.isError?`failed`:`completed`,at:t.recordedAt})}for(let e of t){if(!e.agent||e.state===`running`)continue;let t=r(e.agent);t.total+=1,t.steps.push({key:e.toolCallRef,toolName:e.toolLabel,target:e.detail??null,state:e.state,at:e.startedAt??``})}for(let e of n.values())e.steps.sort((e,t)=>t.at.localeCompare(e.at));return[...n.values()].filter(e=>e.steps.length>0)}var _=n();function v(e,t){return e===`main`?a(t,`Main agent`,`Main agent`):`Subagent ${e}`}function y(e,t){let n=new Date(e);return Number.isFinite(n.getTime())?n.toLocaleTimeString(t===`vi`?`vi-VN`:`en-US`,{hour:`2-digit`,minute:`2-digit`,second:`2-digit`}):``}var b=5e3;function x({sessionRef:e,running:t,live:n,locale:r,empty:i}){let[o,c]=(0,u.useState)([]);(0,u.useEffect)(()=>{let n=new AbortController,r=()=>void s(e,null,200,n.signal).then(e=>c(e.items)).catch(()=>void 0);r();let i=t?window.setInterval(r,b):void 0;return()=>{n.abort(),i&&window.clearInterval(i)}},[e,t]);let d=(0,u.useMemo)(()=>g(o,n),[o,n]);return d.length?(0,_.jsx)(`div`,{className:`agent-activity-log`,children:d.map(e=>(0,_.jsxs)(`details`,{open:e.agent===`main`||t,className:`agent-activity-group`,children:[(0,_.jsxs)(`summary`,{children:[(0,_.jsx)(`strong`,{children:v(e.agent,r)}),` `,(0,_.jsxs)(`span`,{children:[e.total,` `,a(r,`lần gọi`,`calls`)]}),e.total>e.steps.length&&(0,_.jsxs)(`span`,{children:[` · `,a(r,`hiện ${e.steps.length} gần nhất`,`showing the latest ${e.steps.length}`)]})]}),e.steps.map(e=>(0,_.jsxs)(`article`,{className:`activity-row`,children:[(0,_.jsx)(`span`,{className:`activity-state tone-${l(e.state)}`,"aria-label":e.state}),(0,_.jsxs)(`div`,{className:`activity-copy`,children:[(0,_.jsx)(`div`,{children:(0,_.jsx)(`strong`,{children:e.toolName})}),e.target&&(0,_.jsx)(`p`,{children:e.target})]}),(0,_.jsx)(`div`,{className:`activity-result`,children:(0,_.jsx)(`span`,{children:y(e.at,r)})})]},e.key))]},e.agent))}):i?(0,_.jsx)(`div`,{className:`activity-empty`,children:i}):null}var S=e({ActivityPanel:()=>w});function C({activity:e,preview:t,onPreview:n,locale:r}){return(0,_.jsxs)(`article`,{className:`activity-row`,children:[(0,_.jsx)(`span`,{className:`activity-state tone-${l(e.state)}`,"aria-label":e.state}),(0,_.jsxs)(`div`,{className:`activity-copy`,children:[(0,_.jsxs)(`div`,{children:[(0,_.jsx)(`strong`,{children:e.label}),(0,_.jsx)(`span`,{children:e.kind})]}),(0,_.jsx)(`p`,{children:e.preview||a(r,`Không có mô tả ngắn`,`No short description`)}),t&&(0,_.jsxs)(`div`,{className:`log-preview ${t.state===`error`?`error-state`:``}`,children:[t.state===`loading`?a(r,`Đang tải log ngắn…`,`Loading log preview…`):t.state===`error`?a(r,`Log preview không còn sẵn sàng.`,`Log preview is no longer available.`):t.value?.preview??`${a(r,`Không có nội dung log`,`No log content`)} · ${t.value?.reasonCode??`unavailable`}`,t.value?.truncated&&(0,_.jsx)(`small`,{children:a(r,`Preview đã được rút gọn`,`Preview truncated`)})]})]}),(0,_.jsxs)(`div`,{className:`activity-result`,children:[(0,_.jsx)(`strong`,{children:m(e,r)}),(0,_.jsx)(`span`,{children:h(e,r)}),e.logRef&&n&&(0,_.jsx)(`button`,{type:`button`,onClick:n,"aria-expanded":!!t,children:t?a(r,`Ẩn log`,`Hide log`):a(r,`Xem log`,`View log`)})]})]})}function w({snapshot:e,sessionRef:t,terminalActivities:n=[],liveActivities:r}){let{locale:s}=i(),[l,d]=(0,u.useState)({}),f=e?.activity.running??[],m=e?.activity.recent??[],{rows:h,terminalCount:g,runningCount:v}=p(f,m,n,s,r),y=e=>{if(l[e.activityRef]){d(t=>({...t,[e.activityRef]:void 0}));return}d(t=>({...t,[e.activityRef]:{state:`loading`}})),(t?o(t,e.activityRef):c(e.activityRef)).then(t=>d(n=>({...n,[e.activityRef]:{state:`ready`,value:t}}))).catch(()=>d(t=>({...t,[e.activityRef]:{state:`error`}})))};return(0,_.jsxs)(`section`,{className:`activity-panel surface`,"aria-labelledby":`activity-title`,children:[(0,_.jsxs)(`header`,{className:`panel-heading`,children:[(0,_.jsxs)(`div`,{children:[(0,_.jsx)(`p`,{className:`section-kicker`,children:`Activity`}),(0,_.jsx)(`h2`,{id:`activity-title`,children:a(s,`Tool, command và kết quả lượt chạy`,`Tools, commands, and operation outcomes`)})]}),(0,_.jsxs)(`div`,{children:[(0,_.jsxs)(`span`,{className:`running-count`,children:[v,` `,a(s,`đang chạy`,`running`)]}),(0,_.jsxs)(`span`,{children:[m.length+g,` `,a(s,`gần đây`,`recent`)]})]})]}),(0,_.jsxs)(`div`,{className:`activity-list`,children:[h.map(e=>(0,_.jsx)(C,{activity:e,preview:l[e.activityRef],onPreview:e.logRef?()=>y(e):void 0,locale:s},e.activityRef)),t&&(0,_.jsx)(x,{sessionRef:t,running:!!r,live:r,locale:s,empty:h.length===0?a(s,`Chưa có tool, command hoặc kết quả lượt chạy nào trong timeline hiện tại.`,`No tools, commands, or operation outcomes in the current timeline.`):void 0}),h.length===0&&!t&&(0,_.jsx)(`div`,{className:`activity-empty`,children:a(s,`Chưa có tool, command hoặc kết quả lượt chạy nào trong timeline hiện tại.`,`No tools, commands, or operation outcomes in the current timeline.`)})]}),e?.activity.page.truncated&&(0,_.jsx)(`footer`,{className:`panel-footnote`,children:a(s,`Timeline đã được rút gọn theo giới hạn local.`,`The timeline was truncated to local limits.`)})]})}export{S as n,w as t};