@piewf/cli 3.4.2

package/dist/src/doctor.d.ts

@@ -0,0 +1,67 @@
+import { type AgentResourcePolicy, type WorkflowCatalogModelAlias, type WorkflowExtensionMetadata, type WorkflowFunction, type WorkflowSettings, type WorkflowSettingsSources } from "pi-extensible-workflows";
+import { type WorkflowRegistryApi } from "pi-extensible-workflows";
+export type DoctorSeverity = "error" | "warning";
+export interface DoctorDiagnostic {
+    severity: DoctorSeverity;
+    code: string;
+    message: string;
+    source?: string;
+    hint?: string;
+}
+export interface DoctorRole {
+    name: string;
+    path: string;
+    scope: "extension" | "global" | "project";
+    active: boolean;
+    overrides?: string;
+    overriddenBy?: string;
+    extension?: WorkflowExtensionMetadata;
+}
+export interface DoctorFunction {
+    name: string;
+    description: string;
+    valid: boolean;
+}
+export interface DoctorTrust {
+    required: boolean;
+    trusted: boolean;
+    source: string;
+}
+export interface DoctorPiState {
+    trust: DoctorTrust;
+    activeTools: readonly string[];
+    knownModels: readonly string[];
+    availableModels: readonly string[];
+    extensionErrors: readonly {
+        path?: string;
+        message: string;
+    }[];
+    extensions?: readonly string[];
+    skills?: readonly string[];
+    functions: Readonly<Record<string, WorkflowFunction>>;
+}
+export interface DoctorReport {
+    cwd: string;
+    agentDir: string;
+    settingsPath: string;
+    settings: Readonly<WorkflowSettings>;
+    settingsSources: WorkflowSettingsSources;
+    trust: DoctorTrust;
+    activeTools: readonly string[];
+    roles: readonly DoctorRole[];
+    functions: readonly DoctorFunction[];
+    resourcePolicy: AgentResourcePolicy;
+    modelAliases: readonly WorkflowCatalogModelAlias[];
+    diagnostics: readonly DoctorDiagnostic[];
+}
+export interface DoctorOptions {
+    cwd?: string;
+    agentDir?: string;
+    settingsPath?: string;
+    discoverPi?: (cwd: string, agentDir: string) => Promise<DoctorPiState>;
+    activeTools?: readonly string[];
+    registry?: WorkflowRegistryApi;
+}
+export declare function doctor(options?: DoctorOptions): Promise<DoctorReport>;
+export declare function doctorExitCode(report: DoctorReport): 0 | 1;
+export declare function formatDoctorReport(report: DoctorReport): string;

package/dist/src/doctor.js

@@ -0,0 +1,397 @@
+import { readFileSync, readdirSync, realpathSync } from "node:fs";
+import { basename, dirname, extname, join, resolve } from "node:path";
+import { InMemoryCredentialStore } from "@earendil-works/pi-ai";
+import { ModelRuntime, createAgentSessionFromServices, createAgentSessionServices, getAgentDir, hasTrustRequiringProjectResources, SessionManager, SettingsManager, } from "@earendil-works/pi-coding-agent";
+import { DEFAULT_SETTINGS, loadSettings, resolveAgentResourcePolicy, resolveWorkflowSettings, resolveModelReference, parseThinking, parseRoleMarkdown, registeredWorkflowFunctions, registeredWorkflowRoleDirectoryRegistrations, workflowRoleDirectories, workflowProjectSettingsPath, workflowSettingsPath, } from "pi-extensible-workflows";
+import { loadingRegistry } from "pi-extensible-workflows";
+import { disabledResources, unmatchedResourcePatterns } from "pi-extensible-workflows";
+const THINKING_HINT = "Use off, minimal, low, medium, high, xhigh, or max.";
+function canonical(path) {
+    const absolute = resolve(path);
+    try {
+        return realpathSync(absolute);
+    }
+    catch {
+        return absolute;
+    }
+}
+function isDynamicModelAlias(value, aliases) {
+    const match = /^([^/\s:]+)(?::([^\s]+))?$/.exec(value);
+    const name = match?.[1];
+    return Boolean(name && (match[2] === undefined || parseThinking(match[2]) !== undefined) && aliases.has(name));
+}
+async function readCredentials(agentDir) {
+    const credentials = new InMemoryCredentialStore();
+    try {
+        const parsed = JSON.parse(readFileSync(join(agentDir, "auth.json"), "utf8"));
+        if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed))
+            throw new Error("Pi auth.json must be an object");
+        await Promise.all(Object.entries(parsed).map(([provider, credential]) => credentials.modify(provider, async () => credential)));
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+    return credentials;
+}
+function savedTrust(cwd, agentDir) {
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(join(agentDir, "trust.json"), "utf8"));
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    }
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed))
+        throw new Error("Pi trust.json must be an object");
+    let current = canonical(cwd);
+    while (current !== dirname(current)) {
+        const value = parsed[current];
+        if (value === true || value === false)
+            return value;
+        current = dirname(current);
+    }
+    const value = parsed[current];
+    return value === true || value === false ? value : undefined;
+}
+async function discoverPi(cwd, agentDir) {
+    const required = hasTrustRequiringProjectResources(cwd);
+    const settingsManager = SettingsManager.create(cwd, agentDir, { projectTrusted: false });
+    const saved = required ? savedTrust(cwd, agentDir) : true;
+    const fallback = settingsManager.getDefaultProjectTrust();
+    const trusted = !required || saved !== undefined ? Boolean(saved) : fallback === "always";
+    const source = !required ? "no trust-gated project resources" : saved !== undefined ? "saved Pi trust decision" : `headless defaultProjectTrust=${fallback}`;
+    const previousOffline = process.env.PI_OFFLINE;
+    process.env.PI_OFFLINE = "1";
+    try {
+        const modelRuntime = await ModelRuntime.create({ credentials: await readCredentials(agentDir), modelsPath: join(agentDir, "models.json") });
+        const services = await createAgentSessionServices({
+            cwd,
+            agentDir,
+            settingsManager,
+            modelRuntime,
+            resourceLoaderOptions: { noPromptTemplates: true, noThemes: true, noContextFiles: true },
+            resourceLoaderReloadOptions: { resolveProjectTrust: async () => trusted },
+        });
+        const allModels = services.modelRuntime.getModels();
+        const availableModels = await services.modelRuntime.getAvailable();
+        const model = availableModels[0] ?? allModels[0];
+        if (!model)
+            throw new Error("Pi has no models registered");
+        const { session } = await createAgentSessionFromServices({ services, sessionManager: SessionManager.inMemory(), model });
+        const activeTools = session.agent.state.tools.map(({ name }) => name).filter((name) => name !== "workflow" && name !== "workflow_respond" && name !== "workflow_catalog");
+        const extensions = services.resourceLoader.getExtensions();
+        const skills = services.resourceLoader.getSkills().skills;
+        return {
+            trust: { required, trusted, source },
+            activeTools,
+            knownModels: allModels.map(({ provider, id }) => `${provider}/${id}`),
+            availableModels: availableModels.map(({ provider, id }) => `${provider}/${id}`),
+            extensions: extensions.extensions.map(({ resolvedPath }) => resolvedPath),
+            skills: skills.map(({ name }) => name),
+            extensionErrors: [
+                ...extensions.errors.map(({ path, error }) => ({ path, message: error })),
+                ...services.diagnostics.filter(({ type }) => type === "error").map(({ message }) => ({ message })),
+            ],
+            functions: registeredWorkflowFunctions(),
+        };
+    }
+    finally {
+        if (previousOffline === undefined)
+            delete process.env.PI_OFFLINE;
+        else
+            process.env.PI_OFFLINE = previousOffline;
+    }
+}
+function roleFiles(dir) {
+    try {
+        return readdirSync(dir, { withFileTypes: true }).filter((entry) => entry.isFile() && extname(entry.name) === ".md").map((entry) => join(dir, entry.name)).sort();
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return [];
+        throw error;
+    }
+}
+function roleFilesFrom(dirs) {
+    const paths = dirs.flatMap((dir) => roleFiles(dir));
+    return [...new Map(paths.map((path) => [basename(path, ".md"), path])).values()].sort();
+}
+function extensionLabel(extension) { return `Extension "${extension.headline}" (${extension.version})`; }
+function scanExtensionRoleFiles(registrations) {
+    const files = [];
+    const empty = [];
+    const errors = [];
+    for (const registration of registrations) {
+        try {
+            const entries = readdirSync(registration.path, { withFileTypes: true });
+            const roleFiles = entries.filter((entry) => entry.isFile() && extname(entry.name) === ".md");
+            if (!roleFiles.length)
+                empty.push(registration);
+            for (const entry of roleFiles)
+                files.push({ name: basename(entry.name, ".md"), path: join(registration.path, entry.name), directory: registration.path, extension: registration.extension });
+        }
+        catch (error) {
+            errors.push({ registration, error });
+        }
+    }
+    files.sort((left, right) => left.name.localeCompare(right.name) || left.path.localeCompare(right.path));
+    return { files, empty, errors };
+}
+function roleProvenance(source) {
+    return source ? `${extensionLabel(source.extension)} role directory "${source.directory}"` : "Role";
+}
+function diagnostic(severity, code, message, source, hint) {
+    return { severity, code, message, ...(source ? { source } : {}), ...(hint ? { hint } : {}) };
+}
+function emptyResourcePolicy(globalSettingsPath, cwd, projectTrusted) {
+    const empty = { skills: [], extensions: [] };
+    return { globalSettingsPath, projectSettingsPath: workflowProjectSettingsPath(cwd), projectTrusted, global: empty, project: empty, effective: empty, unmatchedSkills: [], unmatchedExtensions: [] };
+}
+function validateModel(value, known, available, source, diagnostics, aliases, dynamicAliases, settingsPath) {
+    if (isDynamicModelAlias(value, dynamicAliases))
+        return;
+    try {
+        const parsed = resolveModelReference(value, aliases, known, settingsPath);
+        const name = `${parsed.provider}/${parsed.model}`;
+        if (!known.has(name) || !available.has(name))
+            diagnostics.push(diagnostic("warning", "MODEL_UNAVAILABLE", `Model is valid-shaped but unavailable: ${name}`, source));
+    }
+    catch (error) {
+        diagnostics.push(diagnostic("error", "MODEL_INVALID", error.message, source, error.message.includes("thinking") ? THINKING_HINT : "Use provider/model or provider/model:thinking."));
+    }
+}
+function inspectRole(path, activeTools, knownModels, availableModels, diagnostics, aliases, dynamicAliases, settingsPath, source) {
+    let definition;
+    try {
+        definition = parseRoleMarkdown(readFileSync(path, "utf8"), true, path);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        diagnostics.push(diagnostic("error", "ROLE_FRONTMATTER", source ? `${roleProvenance(source)} contains invalid role at "${path}": ${message}` : message, path, "Fix the role YAML frontmatter."));
+        return undefined;
+    }
+    const body = definition.prompt ?? "";
+    if (body.trim() === "")
+        diagnostics.push(diagnostic("warning", "ROLE_BODY_EMPTY", "Role body is empty", path));
+    if (Buffer.byteLength(body) > 50 * 1024)
+        diagnostics.push(diagnostic("warning", "ROLE_BODY_LARGE", "Role body exceeds 50KB", path));
+    if (/{{\s*[^{}]+\s*}}/.test(body))
+        diagnostics.push(diagnostic("warning", "ROLE_PLACEHOLDER", "Role body contains an unsupported placeholder-looking token", path));
+    if (definition.model)
+        validateModel(definition.model, knownModels, availableModels, path, diagnostics, aliases, dynamicAliases, settingsPath);
+    for (const tool of definition.tools ?? [])
+        if (!activeTools.has(tool))
+            diagnostics.push(diagnostic("error", "ROLE_TOOL_INACTIVE", `Tool is unknown or inactive: ${tool}`, path, "Use a tool listed under Active tools or enable its Pi extension."));
+    return definition;
+}
+function matchResourcePolicy(policy, pi) {
+    const extensions = [...new Set((pi.extensions ?? []).map(canonical))];
+    const skills = [...new Set(pi.skills ?? [])];
+    return { ...policy, excludedSkills: disabledResources(policy.effective.skills, skills), excludedExtensions: disabledResources(policy.effective.extensions, extensions), unmatchedSkills: unmatchedResourcePatterns(policy.effective.skills, skills), unmatchedExtensions: unmatchedResourcePatterns(policy.effective.extensions, extensions) };
+}
+function resourcePolicySource(settingsSource) { return settingsSource; }
+export async function doctor(options = {}) {
+    const cwd = canonical(options.cwd ?? process.cwd());
+    const agentDir = canonical(options.agentDir ?? getAgentDir());
+    const settingsPath = canonical(options.settingsPath ?? workflowSettingsPath(agentDir));
+    const diagnostics = [];
+    let settings = DEFAULT_SETTINGS;
+    try {
+        settings = loadSettings(settingsPath);
+    }
+    catch (error) {
+        diagnostics.push(diagnostic("error", "SETTINGS_INVALID", error.message, settingsPath, "Fix or remove the invalid workflow settings file."));
+    }
+    let settingsSources = { concurrency: settingsPath, modelAliases: settingsPath, disabledAgentResources: settingsPath };
+    const projectSettingsPath = workflowProjectSettingsPath(cwd);
+    let pi;
+    try {
+        pi = await (options.discoverPi ?? discoverPi)(cwd, agentDir);
+    }
+    catch (error) {
+        diagnostics.push(diagnostic("error", "PI_DISCOVERY", `Pi headless discovery failed: ${error.message}`, undefined, "Open and trust the project in Pi, fix extension errors, then rerun doctor."));
+        pi = { trust: { required: false, trusted: false, source: "discovery failed" }, activeTools: [], knownModels: [], availableModels: [], extensionErrors: [], functions: {} };
+    }
+    if (options.activeTools)
+        pi = { ...pi, activeTools: options.activeTools.filter((tool) => tool !== "workflow" && tool !== "workflow_respond" && tool !== "workflow_catalog") };
+    if (pi.trust.required && !pi.trust.trusted)
+        diagnostics.push(diagnostic("warning", "PROJECT_UNTRUSTED", "Pi project resources are inactive because the project is not trusted", cwd, "Open this project in Pi, choose Trust, then rerun doctor."));
+    for (const error of pi.extensionErrors)
+        diagnostics.push(diagnostic("error", "EXTENSION_LOAD", error.message, error.path, "Fix or disable the failing Pi extension."));
+    try {
+        const resolved = resolveWorkflowSettings(cwd, pi.trust.trusted, settingsPath);
+        settings = resolved.effective;
+        settingsSources = resolved.sources;
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        const source = message.includes(projectSettingsPath) ? projectSettingsPath : settingsPath;
+        if (!diagnostics.some(({ code, source: itemSource }) => code === "SETTINGS_INVALID" && itemSource === source))
+            diagnostics.push(diagnostic("error", "SETTINGS_INVALID", message, source, "Fix or remove the invalid workflow settings file."));
+    }
+    let resourcePolicy;
+    try {
+        resourcePolicy = matchResourcePolicy(resolveAgentResourcePolicy(cwd, pi.trust.trusted, settingsPath), pi);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        const source = message.includes(projectSettingsPath) ? projectSettingsPath : settingsPath;
+        if (!diagnostics.some(({ code, source: itemSource }) => code === "SETTINGS_INVALID" && itemSource === source))
+            diagnostics.push(diagnostic("error", "SETTINGS_INVALID", message, source, "Fix or remove the invalid workflow settings file."));
+        resourcePolicy = emptyResourcePolicy(settingsPath, cwd, pi.trust.trusted);
+    }
+    for (const skill of resourcePolicy.unmatchedSkills)
+        diagnostics.push(diagnostic("warning", "AGENT_RESOURCE_UNMATCHED", `Disabled skill selector currently matches no discovered skill: ${skill}`, `${resourcePolicySource(settingsSources.disabledAgentResources)}.disabledAgentResources.skills`));
+    for (const extension of resourcePolicy.unmatchedExtensions)
+        diagnostics.push(diagnostic("warning", "AGENT_RESOURCE_UNMATCHED", `Disabled extension selector currently matches no discovered extension source: ${extension}`, `${resourcePolicySource(settingsSources.disabledAgentResources)}.disabledAgentResources.extensions`));
+    const activeTools = new Set(pi.activeTools);
+    const knownModels = new Set(pi.knownModels);
+    const availableModels = new Set(pi.availableModels);
+    const aliases = settings.modelAliases ?? {};
+    const registry = options.registry ?? loadingRegistry();
+    const registeredModelAliases = registry.modelAliases();
+    const dynamicAliases = new Set(registeredModelAliases.map(({ name }) => name).filter((name) => !Object.prototype.hasOwnProperty.call(aliases, name)));
+    const modelAliases = [
+        ...Object.keys(aliases).map((name) => ({ name, kind: "static", provenance: settingsSources.modelAliases })),
+        ...registeredModelAliases.map(({ name, version, headline, extensionDescription }) => ({ name, kind: "dynamic", provenance: `extension: ${headline}`, version, headline, extensionDescription })),
+    ].sort((left, right) => left.name.localeCompare(right.name) || left.kind.localeCompare(right.kind));
+    const roles = [];
+    const definitions = new Map();
+    const extensionScan = scanExtensionRoleFiles(registeredWorkflowRoleDirectoryRegistrations());
+    for (const { registration, error } of extensionScan.errors) {
+        const message = error instanceof Error ? error.message : String(error);
+        diagnostics.push(diagnostic("error", "ROLE_DIRECTORY", `${extensionLabel(registration.extension)} role directory "${registration.path}" could not be scanned: ${message}`, registration.path, "Fix or remove the registered role directory."));
+    }
+    for (const registration of extensionScan.empty)
+        diagnostics.push(diagnostic("warning", "ROLE_DIRECTORY_EMPTY", `${extensionLabel(registration.extension)} role directory "${registration.path}" contains no .md role files`, registration.path, "Add packaged role files or remove the directory registration."));
+    const extensionFilesByName = new Map();
+    for (const file of extensionScan.files)
+        extensionFilesByName.set(file.name, [...(extensionFilesByName.get(file.name) ?? []), file]);
+    const duplicateExtensionNames = new Set();
+    for (const [name, matches] of extensionFilesByName)
+        if (matches.length > 1) {
+            duplicateExtensionNames.add(name);
+            diagnostics.push(diagnostic("error", "ROLE_DUPLICATE", `Duplicate extension role "${name}": ${matches.map(({ path, directory, extension }) => `${extensionLabel(extension)} role directory "${directory}" (${path})`).join("; ")}`, matches[0]?.path, "Keep one extension role with this name; global and project roles may override packaged defaults."));
+        }
+    const extensionPaths = new Map();
+    for (const file of extensionScan.files) {
+        roles.push({ name: file.name, path: file.path, scope: "extension", active: true, extension: file.extension });
+        const definition = inspectRole(file.path, activeTools, knownModels, availableModels, diagnostics, aliases, dynamicAliases, settingsPath, { directory: file.directory, extension: file.extension });
+        if (duplicateExtensionNames.has(file.name))
+            continue;
+        extensionPaths.set(file.name, file.path);
+        if (definition)
+            definitions.set(file.name, definition);
+    }
+    const globalPaths = new Map();
+    const globalRoleDirs = workflowRoleDirectories(agentDir);
+    for (const path of roleFilesFrom(globalRoleDirs)) {
+        const name = basename(path, ".md");
+        const extensionPath = extensionPaths.get(name);
+        roles.push({ name, path, scope: "global", active: true, ...(extensionPath ? { overrides: extensionPath } : {}) });
+        globalPaths.set(name, path);
+        if (extensionPath) {
+            const extension = roles.find((role) => role.path === extensionPath);
+            if (extension) {
+                extension.active = false;
+                extension.overriddenBy = path;
+            }
+        }
+        const definition = inspectRole(path, activeTools, knownModels, availableModels, diagnostics, aliases, dynamicAliases, settingsPath);
+        if (definition)
+            definitions.set(name, definition);
+        else
+            definitions.delete(name);
+    }
+    for (const path of roleFilesFrom([join(cwd, ".pi", "pi-extensible-workflows", "roles")])) {
+        const name = basename(path, ".md");
+        const globalPath = globalPaths.get(name);
+        const extensionPath = extensionPaths.get(name);
+        const overriddenPath = globalPath ?? extensionPath;
+        const active = pi.trust.trusted;
+        roles.push({ name, path, scope: "project", active, ...(active && overriddenPath ? { overrides: overriddenPath } : {}) });
+        if (!active)
+            continue;
+        if (globalPath) {
+            const global = roles.find((role) => role.path === globalPath);
+            if (global) {
+                global.active = false;
+                global.overriddenBy = path;
+            }
+        }
+        else if (extensionPath) {
+            const extension = roles.find((role) => role.path === extensionPath);
+            if (extension) {
+                extension.active = false;
+                extension.overriddenBy = path;
+            }
+        }
+        const definition = inspectRole(path, activeTools, knownModels, availableModels, diagnostics, aliases, dynamicAliases, settingsPath);
+        if (definition)
+            definitions.set(name, definition);
+        else
+            definitions.delete(name);
+    }
+    const functions = [];
+    for (const [name, fn] of Object.entries(pi.functions).sort(([left], [right]) => left.localeCompare(right))) {
+        functions.push({ name, description: fn.description, valid: true });
+    }
+    const severityOrder = { error: 0, warning: 1 };
+    diagnostics.sort((left, right) => severityOrder[left.severity] - severityOrder[right.severity] || (left.source ?? "").localeCompare(right.source ?? "") || left.code.localeCompare(right.code) || left.message.localeCompare(right.message));
+    roles.sort((left, right) => left.name.localeCompare(right.name) || left.scope.localeCompare(right.scope));
+    return { cwd, agentDir, settingsPath, settings, settingsSources, trust: pi.trust, activeTools: [...activeTools].sort(), roles, functions, modelAliases, resourcePolicy, diagnostics };
+}
+function count(report, severity) { return report.diagnostics.filter((item) => item.severity === severity).length; }
+export function doctorExitCode(report) { return count(report, "error") > 0 ? 1 : 0; }
+export function formatDoctorReport(report) {
+    const lines = [
+        "# pi-extensible-workflows doctor",
+        "",
+        "## Environment",
+        `- CWD: \`${report.cwd}\``,
+        `- Agent dir: \`${report.agentDir}\``,
+        `- Global workflow settings: \`${report.settingsPath}\``,
+        `- Project workflow settings: \`${report.resourcePolicy.projectSettingsPath}\` (${report.resourcePolicy.projectTrusted ? "trusted" : "ignored: project untrusted"})`,
+        `- Effective setting sources: concurrency=\`${report.settingsSources.concurrency}\`, modelAliases=\`${report.settingsSources.modelAliases}\`, disabledAgentResources=\`${report.settingsSources.disabledAgentResources}\``,
+        `- Limits: concurrency=${String(report.settings.concurrency)}`,
+        "",
+        "## Trust/resources",
+        `- [${report.trust.trusted ? "ok" : "warning"}] ${report.trust.source}`,
+        "",
+        "## Agent resource exclusions",
+        `- Global settings: \`${report.resourcePolicy.globalSettingsPath}\``,
+        `- Global skills: ${report.resourcePolicy.global.skills.join(", ") || "(none)"}`,
+        `- Global extensions: ${report.resourcePolicy.global.extensions.join(", ") || "(none)"}`,
+        `- Project settings: \`${report.resourcePolicy.projectSettingsPath}\` (${report.resourcePolicy.projectTrusted ? "trusted" : "ignored: project untrusted"})`,
+        `- Project skills: ${report.resourcePolicy.project.skills.join(", ") || "(none)"}`,
+        `- Project extensions: ${report.resourcePolicy.project.extensions.join(", ") || "(none)"}`,
+        `- Effective skills: ${report.resourcePolicy.effective.skills.join(", ") || "(none)"}`,
+        `- Effective extensions: ${report.resourcePolicy.effective.extensions.join(", ") || "(none)"}`,
+        `- Excluded skills: ${report.resourcePolicy.excludedSkills?.join(", ") || "(none)"}`,
+        `- Excluded extensions: ${report.resourcePolicy.excludedExtensions?.join(", ") || "(none)"}`,
+        `- Unmatched skills: ${report.resourcePolicy.unmatchedSkills.join(", ") || "(none)"}`,
+        `- Unmatched extensions: ${report.resourcePolicy.unmatchedExtensions.join(", ") || "(none)"}`,
+        "",
+        "## Active tools",
+        ...(report.activeTools.length ? report.activeTools.map((tool) => `- \`${tool}\``) : ["- None resolved"]),
+        "",
+        "## Roles",
+        ...(report.roles.length ? report.roles.map((role) => `- \`${role.name}\` (${role.scope}, ${role.active ? "active" : role.overriddenBy ? `overridden by ${role.overriddenBy}` : "inactive: project untrusted"}) - \`${role.path}\`${role.extension ? `; ${extensionLabel(role.extension)} role directory "${dirname(role.path)}"` : ""}${role.overrides ? `; overrides \`${role.overrides}\`` : ""}`) : ["- None found"]),
+        "",
+        "## Model aliases",
+        ...(report.modelAliases.length ? report.modelAliases.map((alias) => `- [${alias.kind}] \`${alias.name}\`${alias.kind === "static" ? ` -> ${report.settings.modelAliases?.[alias.name] ?? "(unresolved)"}` : ""} (${alias.provenance})`) : ["- None registered"]),
+        "",
+        "## Reusable functions",
+        ...(report.functions.length ? report.functions.map((fn) => `- [${fn.valid ? "ok" : "error"}] \`${fn.name}\` - ${fn.description}`) : ["- None registered"]),
+        "",
+        "## Diagnostics",
+        ...(report.diagnostics.length ? report.diagnostics.map((item) => `- [${item.severity}] ${item.code}${item.source ? ` \`${item.source}\`` : ""}: ${item.message}${item.hint ? ` Fix: ${item.hint}` : ""}`) : ["- [ok] No diagnostics"]),
+        "",
+        "## Summary",
+        `- ${String(count(report, "error"))} error(s), ${String(count(report, "warning"))} warning(s)`,
+    ];
+    return `${lines.join("\n")}\n`;
+}

package/dist/src/session-inspector.d.ts

@@ -0,0 +1,82 @@
+import { type SessionEntry, type SessionInfo } from "@earendil-works/pi-coding-agent";
+import { type AgentSetupSummary, type ModelSpec, type StaticWorkflowCall } from "pi-extensible-workflows";
+import { type PersistedRun, type RunSummary } from "pi-extensible-workflows/persistence";
+export interface ModelUsage {
+    model: string;
+    cost: number;
+}
+export interface AttemptReport {
+    attempt: number;
+    prompt: string;
+    model: string;
+    thinking?: ModelSpec["thinking"];
+    cost: number;
+    models: readonly ModelUsage[];
+    error?: string;
+    setup?: AgentSetupSummary;
+}
+export interface AgentReport {
+    name: string;
+    label?: string;
+    state: string;
+    role?: string;
+    requestedModel?: string;
+    model: string;
+    thinking?: ModelSpec["thinking"];
+    cost: number;
+    attempts: readonly AttemptReport[];
+    setup?: AgentSetupSummary;
+}
+export interface WorkflowReport {
+    name: string;
+    description?: string;
+    status: string;
+    runId?: string;
+    script?: string;
+    calls: readonly StaticWorkflowCall[];
+    parseError?: string;
+    cost: number;
+    models: readonly ModelUsage[];
+    agents: readonly AgentReport[];
+    budget?: PersistedRun["budget"];
+    budgetVersion?: number;
+    usage?: PersistedRun["usage"];
+    budgetEvents?: PersistedRun["budgetEvents"];
+    events?: readonly {
+        type: string;
+        message: string;
+    }[];
+}
+export interface SessionReport {
+    id: string;
+    cwd: string;
+    path: string;
+    cost: number;
+    models: readonly ModelUsage[];
+    workflows: readonly WorkflowReport[];
+    totalCost: number;
+    totalModels: readonly ModelUsage[];
+}
+export interface InspectorViewState {
+    view: "list" | "detail" | "script";
+    selected: number;
+    scroll: number;
+}
+export type InspectMode = "tui" | "json" | "summary";
+export interface PersistedSessionSummary {
+    schemaVersion: 1;
+    cwd: string;
+    sessionId: string;
+    runs: readonly RunSummary[];
+}
+export declare function transcriptLines(entries: readonly SessionEntry[]): string[];
+export declare function transcriptFileLines(path: string): string[];
+export declare function matchSession(query: string, sessions: readonly SessionInfo[]): SessionInfo;
+export declare function loadSessionReport(path: string, home?: string): Promise<SessionReport>;
+export declare function renderInspector(report: SessionReport, state: InspectorViewState, width?: number, height?: number, highlighter?: (script: string) => string[]): string[];
+export declare function loadPersistedSessionSummary(cwd: string, sessionId: string, home?: string, failedOnly?: boolean): Promise<PersistedSessionSummary>;
+export declare function loadPersistedSummaries(cwd: string, sessionId: string | undefined, home?: string, failedOnly?: boolean): Promise<readonly PersistedSessionSummary[]>;
+export declare function formatPersistedRunSummary(summary: RunSummary, sessionId?: string): string;
+export declare function showSessionInspector(report: SessionReport): Promise<void>;
+export declare function resolveSession(query: string, sessionDir?: string | undefined): Promise<SessionInfo>;
+export declare function runSessionInspector(sessionId?: string, mode?: InspectMode, cwd?: string, home?: string, write?: (text: string) => void, failedOnly?: boolean): Promise<void>;