@rivet-dev/pi 0.1.0

package/dist/models.js

@@ -0,0 +1,111 @@
+import { ModelRuntime, } from "@earendil-works/pi-coding-agent";
+import { UserError } from "rivetkit";
+/**
+ * Creates the model runtime for one actor generation. It never reads Pi's
+ * `~/.pi/agent/auth.json` or `models.json`; credentials come from `apiKeys`,
+ * then `credentials`, then the server environment.
+ */
+export async function createActorModelRuntime(options, credentials) {
+    const runtime = await ModelRuntime.create({ credentials, modelsPath: null });
+    for (const [providerId, config] of Object.entries(options.providers ?? {})) {
+        runtime.registerProvider(providerId, config);
+    }
+    for (const [providerId, apiKey] of Object.entries(options.apiKeys ?? {})) {
+        await runtime.setRuntimeApiKey(providerId, apiKey);
+    }
+    await runtime.refresh({ allowNetwork: false });
+    return runtime;
+}
+/** A credential store that holds nothing and refuses writes. */
+export const emptyCredentialStore = {
+    read: async () => undefined,
+    list: async () => [],
+    modify: async (providerId, fn) => {
+        const next = await fn(undefined);
+        if (next !== undefined) {
+            throw new Error(`pi actor has no credential storage for ${providerId}; configure pi({ credentials })`);
+        }
+        return undefined;
+    },
+    delete: async () => { },
+};
+/** The models a client may switch to: `scopedModels`, or only `model`. */
+function allowedModels(options) {
+    return options.scopedModels ?? (options.model ? [options.model] : []);
+}
+function isAllowed(options, provider, modelId) {
+    return allowedModels(options).includes(`${provider}/${modelId}`);
+}
+/** Looks up a `provider/modelId` in the actor's catalog. */
+function catalogModel(runtime, name) {
+    const slash = name.indexOf("/");
+    const model = slash > 0 ? runtime.getModel(name.slice(0, slash), name.slice(slash + 1)) : undefined;
+    if (!model) {
+        throw new Error(`pi() model ${name} is not in Pi's model catalog; add it with providers`);
+    }
+    return model;
+}
+/**
+ * The model a session opens with: the model saved in the session when it is
+ * still allowed, otherwise the configured default. Undefined lets Pi choose,
+ * which only happens when no model is configured.
+ */
+export function openingModel(options, runtime, saved) {
+    if (saved && isAllowed(options, saved.provider, saved.modelId)) {
+        const model = runtime.getModel(saved.provider, saved.modelId);
+        if (model)
+            return model;
+    }
+    const fallback = options.model ?? allowedModels(options)[0];
+    return fallback ? catalogModel(runtime, fallback) : undefined;
+}
+/** Allowed models that have a credential, for a client's model picker. */
+export function availableModels(options, session) {
+    return session.modelRuntime
+        .getAvailableSnapshot()
+        .filter((model) => isAllowed(options, model.provider, model.id))
+        .map((model) => ({
+        provider: model.provider,
+        id: model.id,
+        name: model.name,
+        reasoning: model.reasoning,
+        input: model.input,
+        contextWindow: model.contextWindow,
+        maxTokens: model.maxTokens,
+    }));
+}
+/** Throws `model_unavailable` when the session's model has no credential, for example after a logout. */
+export function requireCredential(session) {
+    const model = session.model;
+    if (!model)
+        return;
+    const available = session.modelRuntime
+        .getAvailableSnapshot()
+        .some((candidate) => candidate.provider === model.provider && candidate.id === model.id);
+    if (!available) {
+        throw new UserError(`No credential is configured for ${model.provider}/${model.id}.`, {
+            code: "model_unavailable",
+        });
+    }
+}
+/**
+ * Switches the session to an allowed model. The model object comes from the
+ * runtime's catalog, so a client can never choose the URL a key is sent to.
+ */
+export async function switchModel(options, session, provider, modelId) {
+    if (!isAllowed(options, provider, modelId)) {
+        throw new UserError(`Model ${provider}/${modelId} is not allowed for this agent.`, {
+            code: "model_not_allowed",
+        });
+    }
+    const model = session.modelRuntime
+        .getAvailableSnapshot()
+        .find((candidate) => candidate.provider === provider && candidate.id === modelId);
+    if (!model) {
+        throw new UserError(`No credential is configured for ${provider}/${modelId}.`, {
+            code: "model_unavailable",
+        });
+    }
+    await session.setModel(model);
+}
+//# sourceMappingURL=models.js.map

package/dist/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../src/models.ts"],"names":[],"mappings":"AAAA,OAAO,EAGN,YAAY,GACZ,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAsDrC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,OAA4C,EAC5C,WAA8B;IAE9B,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5E,OAAO,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IACD,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1E,MAAM,OAAO,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACtD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;IAC3B,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;IACpB,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE;QAChC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACd,0CAA0C,UAAU,iCAAiC,CACrF,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;CACtB,CAAC;AAEF,0EAA0E;AAC1E,SAAS,aAAa,CAAC,OAAyB;IAC/C,OAAO,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,SAAS,CAAC,OAAyB,EAAE,QAAgB,EAAE,OAAe;IAC9E,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,QAAQ,IAAI,OAAO,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,4DAA4D;AAC5D,SAAS,YAAY,CAAC,OAAqB,EAAE,IAAY;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpG,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,sDAAsD,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC3B,OAAyB,EACzB,OAAqB,EACrB,KAAmD;IAEnD,IAAI,KAAK,IAAI,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IACzB,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,OAAO,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,eAAe,CAC9B,OAAyB,EACzB,OAAqB;IAErB,OAAO,OAAO,CAAC,YAAY;SACzB,oBAAoB,EAAE;SACtB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;SAC/D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC1B,CAAC,CAAC,CAAC;AACN,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,iBAAiB,CAAC,OAAqB;IACtD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY;SACpC,oBAAoB,EAAE;SACtB,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1F,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,IAAI,SAAS,CAAC,mCAAmC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,GAAG,EAAE;YACrF,IAAI,EAAE,mBAAmB;SACzB,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAChC,OAAyB,EACzB,OAAqB,EACrB,QAAgB,EAChB,OAAe;IAEf,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,SAAS,CAAC,SAAS,QAAQ,IAAI,OAAO,iCAAiC,EAAE;YAClF,IAAI,EAAE,mBAAmB;SACzB,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY;SAChC,oBAAoB,EAAE;SACtB,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,QAAQ,IAAI,SAAS,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;IACnF,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,SAAS,CAAC,mCAAmC,QAAQ,IAAI,OAAO,GAAG,EAAE;YAC9E,IAAI,EAAE,mBAAmB;SACzB,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC"}

package/dist/runtime.d.ts

@@ -0,0 +1,64 @@
+import { type AgentSession, type BashOperations, type CreateAgentSessionOptions, SettingsManager } from "@earendil-works/pi-coding-agent";
+import type { Sandbox, SandboxProvider } from "@rivet-dev/sandbox-adapter";
+import type { ActorContext } from "rivetkit";
+import type { DatabaseProvider, RawAccess } from "rivetkit/db";
+import { SourceCredentialStore } from "./credentials.js";
+import { type PiModelOptions } from "./models.js";
+import { type PiSettings } from "./storage.js";
+export type PiDatabaseProvider = DatabaseProvider<RawAccess>;
+/** The actor context shape every Pi helper works against. */
+export type PiContext = ActorContext<any, any, any, any, any, PiDatabaseProvider, any, any>;
+/** Pi options accepted by `pi()` on top of ordinary actor config. */
+export interface PiSessionOptions extends Omit<CreateAgentSessionOptions, "sessionManager" | "settingsManager" | "modelRuntime" | "model" | "scopedModels">, PiModelOptions {
+    /** Initial Pi settings for a brand-new session. Later changes persist per actor. */
+    settings?: Partial<PiSettings>;
+    /**
+     * Runs Pi's built-in file and shell tools in a sandbox. Without one, Pi has
+     * no file or shell tools and only the `customTools` passed in.
+     */
+    sandbox?: SandboxProvider;
+}
+/** One open Pi session for a live actor generation. */
+export interface PiSession {
+    session: AgentSession;
+    settingsManager: SettingsManager;
+    cwd: string;
+    sandbox: ConnectedSandbox | undefined;
+    /** Command execution for `executeBash`. Undefined when there is no sandbox. */
+    bashOperations: BashOperations | undefined;
+    /** JSON of the settings last written to SQLite, to skip no-op writes. */
+    persistedSettings: string;
+    /** Entries (header excluded) already written to SQLite, in Pi's append order. */
+    persistedEntryCount: number;
+    /** The application's credentials, when `pi({ credentials })` is set. */
+    credentials: SourceCredentialStore | undefined;
+}
+/** The sandbox a session's tools run in for this actor generation. */
+export interface ConnectedSandbox {
+    provider: SandboxProvider;
+    id: string;
+    sandbox: Sandbox;
+}
+/** Per-actor-generation runtime state, stored on `c.vars` under `PI_RUNTIME`. */
+export interface PiRuntime {
+    ready?: Promise<PiSession>;
+    /** Serializes SQLite entry writes so entries keep their append order. Never rejects. */
+    writes: Promise<void>;
+}
+export declare const PI_RUNTIME: unique symbol;
+export declare function createPiRuntime(): PiRuntime;
+export declare function piRuntime(c: PiContext): PiRuntime;
+/** Returns the actor's Pi session, opening it from SQLite on first use. */
+export declare function ensurePiSession(c: PiContext, options: PiSessionOptions): Promise<PiSession>;
+/**
+ * Queues entries appended since the last flush and writes Pi's mutable settings
+ * when they changed. Called after every action and on shutdown.
+ */
+export declare function persistPiState(c: PiContext, handle: PiSession): Promise<void>;
+/**
+ * Stops the Pi session for this actor generation: aborts any run, lets
+ * extensions shut down, and flushes settings and entries. Then suspends the
+ * sandbox on sleep, or destroys it on destroy.
+ */
+export declare function closePiSession(c: PiContext, options: PiSessionOptions, reason: "sleep" | "destroy"): Promise<void>;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AACA,OAAO,EACN,KAAK,YAAY,EAEjB,KAAK,cAAc,EAEnB,KAAK,yBAAyB,EAI9B,eAAe,EACf,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAIN,KAAK,cAAc,EACnB,MAAM,aAAa,CAAC;AAErB,OAAO,EAKN,KAAK,UAAU,EAKf,MAAM,cAAc,CAAC;AAEtB,MAAM,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;AAE7D,6DAA6D;AAC7D,MAAM,MAAM,SAAS,GAAG,YAAY,CACnC,GAAG,EACH,GAAG,EACH,GAAG,EACH,GAAG,EACH,GAAG,EACH,kBAAkB,EAClB,GAAG,EACH,GAAG,CACH,CAAC;AAEF,qEAAqE;AACrE,MAAM,WAAW,gBAChB,SAAQ,IAAI,CACV,yBAAyB,EACzB,gBAAgB,GAAG,iBAAiB,GAAG,cAAc,GAAG,OAAO,GAAG,cAAc,CAChF,EACD,cAAc;IACf,oFAAoF;IACpF,QAAQ,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/B;;;OAGG;IACH,OAAO,CAAC,EAAE,eAAe,CAAC;CAC1B;AAED,uDAAuD;AACvD,MAAM,WAAW,SAAS;IACzB,OAAO,EAAE,YAAY,CAAC;IACtB,eAAe,EAAE,eAAe,CAAC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACtC,+EAA+E;IAC/E,cAAc,EAAE,cAAc,GAAG,SAAS,CAAC;IAC3C,yEAAyE;IACzE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iFAAiF;IACjF,mBAAmB,EAAE,MAAM,CAAC;IAC5B,wEAAwE;IACxE,WAAW,EAAE,qBAAqB,GAAG,SAAS,CAAC;CAC/C;AAED,sEAAsE;AACtE,MAAM,WAAW,gBAAgB;IAChC,QAAQ,EAAE,eAAe,CAAC;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;CACjB;AAED,iFAAiF;AACjF,MAAM,WAAW,SAAS;IACzB,KAAK,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3B,wFAAwF;IACxF,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAED,eAAO,MAAM,UAAU,EAAE,OAAO,MAA4C,CAAC;AAE7E,wBAAgB,eAAe,IAAI,SAAS,CAE3C;AAED,wBAAgB,SAAS,CAAC,CAAC,EAAE,SAAS,GAAG,SAAS,CAUjD;AAED,2EAA2E;AAC3E,wBAAgB,eAAe,CAC9B,CAAC,EAAE,SAAS,EACZ,OAAO,EAAE,gBAAgB,GACvB,OAAO,CAAC,SAAS,CAAC,CASpB;AAqOD;;;GAGG;AACH,wBAAsB,cAAc,CACnC,CAAC,EAAE,SAAS,EACZ,MAAM,EAAE,SAAS,GACf,OAAO,CAAC,IAAI,CAAC,CAOf;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CACnC,CAAC,EAAE,SAAS,EACZ,OAAO,EAAE,gBAAgB,EACzB,MAAM,EAAE,OAAO,GAAG,SAAS,GACzB,OAAO,CAAC,IAAI,CAAC,CA+Cf"}

package/dist/runtime.js

@@ -0,0 +1,287 @@
+import { isAbsolute } from "node:path";
+import { createAgentSession, DefaultResourceLoader, getAgentDir, SessionManager, SettingsManager, } from "@earendil-works/pi-coding-agent";
+import { SourceCredentialStore } from "./credentials.js";
+import { createActorModelRuntime, emptyCredentialStore, openingModel, } from "./models.js";
+import { createSandboxBashOperations, createSandboxTools } from "./sandbox.js";
+import { appendPiEntry, createPiSession, loadPiSandbox, loadPiSession, savePiSandbox, savePiSettings, toFileEntries, } from "./storage.js";
+export const PI_RUNTIME = Symbol.for("@rivet-dev/pi/runtime");
+export function createPiRuntime() {
+    return { writes: Promise.resolve() };
+}
+export function piRuntime(c) {
+    const runtime = c.vars?.[PI_RUNTIME];
+    if (!runtime) {
+        throw new Error("pi() runtime state is missing from actor vars; this actor was not created with pi()");
+    }
+    return runtime;
+}
+/** Returns the actor's Pi session, opening it from SQLite on first use. */
+export function ensurePiSession(c, options) {
+    const runtime = piRuntime(c);
+    if (!runtime.ready) {
+        runtime.ready = openPiSession(c, runtime, options).catch((error) => {
+            runtime.ready = undefined;
+            throw error;
+        });
+    }
+    return runtime.ready;
+}
+/** Pi's built-in tools, which all run on the actor host. */
+const PI_BUILT_IN_TOOLS = ["read", "bash", "powershell", "edit", "write", "grep", "find", "ls"];
+async function openPiSession(c, runtime, options) {
+    const { settings, sandbox: sandboxProvider, providers, apiKeys, model, scopedModels, credentials: credentialSource, ...sessionOptions } = options;
+    const stored = await loadPiSession(c.db);
+    const connected = sandboxProvider
+        ? await connectSandbox(c, sandboxProvider)
+        : undefined;
+    const sandbox = connected?.sandbox;
+    const cwd = sandbox?.cwd ?? stored?.cwd ?? sessionOptions.cwd ?? process.cwd();
+    if (!isAbsolute(cwd)) {
+        throw new Error(`pi() cwd must be an absolute path, received ${cwd}`);
+    }
+    if (stored && stored.cwd !== cwd) {
+        c.log.warn({
+            msg: "pi session cwd changed since it was stored",
+            storedCwd: stored.cwd,
+            cwd,
+        });
+    }
+    const settingsManager = SettingsManager.inMemory(stored?.settings ?? settings ?? {});
+    const sessionManager = stored
+        ? SessionManager.inMemory(cwd, undefined, toFileEntries(stored))
+        : SessionManager.inMemory(cwd);
+    const credentials = credentialSource
+        ? new SourceCredentialStore(credentialSource(c))
+        : undefined;
+    const modelRuntime = await createActorModelRuntime({ providers, apiKeys }, credentials ?? emptyCredentialStore);
+    const resourceLoader = sessionOptions.resourceLoader ??
+        (await isolatedResourceLoader(cwd, sessionOptions.agentDir, settingsManager));
+    const { session, modelFallbackMessage } = await createAgentSession({
+        ...sessionOptions,
+        cwd,
+        modelRuntime,
+        model: openingModel({ model, scopedModels }, modelRuntime, sessionManager.buildSessionContext().model),
+        settingsManager,
+        sessionManager,
+        resourceLoader,
+        customTools: sandbox
+            ? [...(sessionOptions.customTools ?? []), ...createSandboxTools(sandbox)]
+            : sessionOptions.customTools,
+        excludeTools: [
+            ...new Set([
+                ...(sessionOptions.excludeTools ?? []),
+                ...(sandbox ? ["powershell"] : PI_BUILT_IN_TOOLS),
+            ]),
+        ],
+    });
+    if (modelFallbackMessage) {
+        c.log.warn({ msg: "pi model fallback", detail: modelFallbackMessage });
+    }
+    const handle = {
+        session,
+        settingsManager,
+        cwd,
+        sandbox: connected,
+        bashOperations: sandbox ? createSandboxBashOperations(sandbox) : undefined,
+        persistedSettings: JSON.stringify(settingsManager.getGlobalSettings()),
+        persistedEntryCount: stored?.entries.length ?? 0,
+        credentials,
+    };
+    if (!stored) {
+        const header = sessionManager.getHeader();
+        if (!header) {
+            throw new Error("Pi did not create a session header");
+        }
+        await createPiSession(c.db, {
+            header,
+            cwd,
+            settings: JSON.parse(handle.persistedSettings),
+        });
+    }
+    await flushPiEntries(c, runtime, handle);
+    session.subscribe((event) => {
+        broadcastSessionEvent(c, event);
+        if (!isStreamingDelta(event)) {
+            flushPiEntries(c, runtime, handle).catch((error) => {
+                c.log.error({
+                    msg: "pi session entry write failed, retrying on the next flush",
+                    error,
+                });
+            });
+        }
+    });
+    c.log.info({
+        msg: "pi session opened",
+        sessionId: session.sessionId,
+        restored: stored !== undefined,
+        entryCount: sessionManager.getEntries().length,
+        messageCount: session.messages.length,
+    });
+    return handle;
+}
+/**
+ * Connects to the actor's sandbox, creating one when none is stored or the
+ * provider reports the stored one no longer exists. A new sandbox id is saved
+ * as soon as `create` returns, so a failure later in the start reuses it. Any
+ * other connect failure is thrown, so a temporary outage never replaces a
+ * sandbox.
+ */
+async function connectSandbox(c, provider) {
+    const existing = await loadPiSandbox(c.db);
+    if (existing && existing.provider !== provider.name) {
+        throw new Error(`pi sandbox was created by provider ${existing.provider}, but the actor now uses ${provider.name}`);
+    }
+    if (existing) {
+        const sandbox = await provider.connect(c, existing.id);
+        if (sandbox)
+            return { provider, id: existing.id, sandbox };
+        c.log.warn({
+            msg: "pi sandbox no longer exists, creating a new one; files from the previous sandbox are lost",
+            provider: provider.name,
+            sandboxId: existing.id,
+        });
+    }
+    const id = await provider.create(c);
+    await savePiSandbox(c.db, { provider: provider.name, id });
+    const sandbox = await provider.connect(c, id);
+    if (!sandbox) {
+        throw new Error(`pi sandbox ${provider.name}/${id} was not found right after it was created`);
+    }
+    return { provider, id, sandbox };
+}
+/**
+ * Pi's resource discovery reads the actor host's filesystem and loads host
+ * code as extensions. Extensions, skills, prompt templates, context files, and
+ * themes stay off unless the developer passes a loader.
+ */
+async function isolatedResourceLoader(cwd, agentDir, settingsManager) {
+    const loader = new DefaultResourceLoader({
+        cwd,
+        agentDir: agentDir ?? getAgentDir(),
+        settingsManager,
+        noExtensions: true,
+        noSkills: true,
+        noPromptTemplates: true,
+        noContextFiles: true,
+        noThemes: true,
+    });
+    await loader.reload();
+    return loader;
+}
+/** Token and output deltas never append entries, so they skip the entry diff. */
+function isStreamingDelta(event) {
+    return (event.type === "message_update" ||
+        event.type === "tool_execution_update" ||
+        event.type === "bash_execution_update");
+}
+/**
+ * Writes every entry Pi appended since the last successful write, in append
+ * order. The count only advances after an insert succeeds, so a failed write
+ * is retried by the next flush. Returns the write so actions can await it.
+ */
+function flushPiEntries(c, runtime, handle) {
+    const write = runtime.writes.then(async () => {
+        const entries = handle.session.sessionManager.getEntries();
+        while (handle.persistedEntryCount < entries.length) {
+            await appendPiEntry(c.db, entries[handle.persistedEntryCount]);
+            handle.persistedEntryCount += 1;
+        }
+    });
+    runtime.writes = write.catch(() => { });
+    return write;
+}
+function broadcastSessionEvent(c, event) {
+    try {
+        c.broadcast("event", event);
+    }
+    catch (error) {
+        if (isActorStoppingError(error))
+            return;
+        c.log.error({ msg: "failed to broadcast pi session event", error });
+    }
+}
+function isActorStoppingError(error) {
+    if (!error || typeof error !== "object")
+        return false;
+    const candidate = error;
+    return candidate.group === "actor" && candidate.code === "stopping";
+}
+/**
+ * Queues entries appended since the last flush and writes Pi's mutable settings
+ * when they changed. Called after every action and on shutdown.
+ */
+export async function persistPiState(c, handle) {
+    await flushPiEntries(c, piRuntime(c), handle);
+    const settings = handle.settingsManager.getGlobalSettings();
+    const encoded = JSON.stringify(settings);
+    if (encoded === handle.persistedSettings)
+        return;
+    await savePiSettings(c.db, settings);
+    handle.persistedSettings = encoded;
+}
+/**
+ * Stops the Pi session for this actor generation: aborts any run, lets
+ * extensions shut down, and flushes settings and entries. Then suspends the
+ * sandbox on sleep, or destroys it on destroy.
+ */
+export async function closePiSession(c, options, reason) {
+    const runtime = piRuntime(c);
+    const ready = runtime.ready;
+    runtime.ready = undefined;
+    const errors = [];
+    let handle;
+    try {
+        handle = await ready;
+    }
+    catch {
+    }
+    if (handle) {
+        const open = handle;
+        await attempt(errors, () => open.session.abort());
+        await attempt(errors, async () => {
+            if (open.session.hasExtensionHandlers("session_shutdown")) {
+                await open.session.extensionRunner.emit({
+                    type: "session_shutdown",
+                    reason: "quit",
+                });
+            }
+        });
+        await attempt(errors, () => persistPiState(c, open));
+        open.session.dispose();
+        c.log.info({ msg: "pi session closed", sessionId: open.session.sessionId });
+    }
+    const provider = options.sandbox;
+    if (provider) {
+        await attempt(errors, async () => {
+            if (reason === "sleep") {
+                if (handle?.sandbox && provider.suspend) {
+                    await provider.suspend(c, handle.sandbox.id);
+                }
+                return;
+            }
+            const sandbox = handle?.sandbox ?? (await storedSandbox(c, provider));
+            if (sandbox && provider.destroy) {
+                await provider.destroy(c, sandbox.id);
+            }
+        });
+    }
+    if (errors.length === 1)
+        throw errors[0];
+    if (errors.length > 1) {
+        throw new AggregateError(errors, "pi session shutdown failed");
+    }
+}
+/** The stored sandbox, when it belongs to `provider`. */
+async function storedSandbox(c, provider) {
+    const sandbox = await loadPiSandbox(c.db);
+    return sandbox?.provider === provider.name ? sandbox : undefined;
+}
+async function attempt(errors, operation) {
+    try {
+        await operation();
+    }
+    catch (error) {
+        errors.push(error);
+    }
+}
+//# sourceMappingURL=runtime.js.map

package/dist/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAIN,kBAAkB,EAElB,qBAAqB,EACrB,WAAW,EACX,cAAc,EACd,eAAe,GACf,MAAM,iCAAiC,CAAC;AAIzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EACN,uBAAuB,EACvB,oBAAoB,EACpB,YAAY,GAEZ,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,2BAA2B,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,EACN,aAAa,EACb,eAAe,EACf,aAAa,EACb,aAAa,EAEb,aAAa,EACb,cAAc,EAEd,aAAa,GACb,MAAM,cAAc,CAAC;AA8DtB,MAAM,CAAC,MAAM,UAAU,GAAkB,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;AAE7E,MAAM,UAAU,eAAe;IAC9B,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,CAAY;IACrC,MAAM,OAAO,GAAI,CAAC,CAAC,IAA0D,EAAE,CAC9E,UAAU,CACV,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACd,qFAAqF,CACrF,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,eAAe,CAC9B,CAAY,EACZ,OAAyB;IAEzB,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YAClE,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC;YAC1B,MAAM,KAAK,CAAC;QACb,CAAC,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC;AACtB,CAAC;AAED,4DAA4D;AAC5D,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AAEhG,KAAK,UAAU,aAAa,CAC3B,CAAY,EACZ,OAAkB,EAClB,OAAyB;IAEzB,MAAM,EACL,QAAQ,EACR,OAAO,EAAE,eAAe,EACxB,SAAS,EACT,OAAO,EACP,KAAK,EACL,YAAY,EACZ,WAAW,EAAE,gBAAgB,EAC7B,GAAG,cAAc,EACjB,GAAG,OAAO,CAAC;IACZ,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,eAAe;QAChC,CAAC,CAAC,MAAM,cAAc,CAAC,CAAC,EAAE,eAAe,CAAC;QAC1C,CAAC,CAAC,SAAS,CAAC;IACb,MAAM,OAAO,GAAG,SAAS,EAAE,OAAO,CAAC;IACnC,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,MAAM,EAAE,GAAG,IAAI,cAAc,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/E,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,GAAG,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;QAClC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YACV,GAAG,EAAE,4CAA4C;YACjD,SAAS,EAAE,MAAM,CAAC,GAAG;YACrB,GAAG;SACH,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,eAAe,CAAC,QAAQ,CAC/C,MAAM,EAAE,QAAQ,IAAI,QAAQ,IAAI,EAAE,CAClC,CAAC;IACF,MAAM,cAAc,GAAG,MAAM;QAC5B,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QAChE,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,WAAW,GAAG,gBAAgB;QACnC,CAAC,CAAC,IAAI,qBAAqB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC,SAAS,CAAC;IACb,MAAM,YAAY,GAAG,MAAM,uBAAuB,CACjD,EAAE,SAAS,EAAE,OAAO,EAAE,EACtB,WAAW,IAAI,oBAAoB,CACnC,CAAC;IACF,MAAM,cAAc,GACnB,cAAc,CAAC,cAAc;QAC7B,CAAC,MAAM,sBAAsB,CAAC,GAAG,EAAE,cAAc,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC;IAE/E,MAAM,EAAE,OAAO,EAAE,oBAAoB,EAAE,GAAG,MAAM,kBAAkB,CAAC;QAClE,GAAG,cAAc;QACjB,GAAG;QACH,YAAY;QACZ,KAAK,EAAE,YAAY,CAClB,EAAE,KAAK,EAAE,YAAY,EAAE,EACvB,YAAY,EACZ,cAAc,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAC1C;QACD,eAAe;QACf,cAAc;QACd,cAAc;QACd,WAAW,EAAE,OAAO;YACnB,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACzE,CAAC,CAAC,cAAc,CAAC,WAAW;QAC7B,YAAY,EAAE;YACb,GAAG,IAAI,GAAG,CAAC;gBACV,GAAG,CAAC,cAAc,CAAC,YAAY,IAAI,EAAE,CAAC;gBACtC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC;aACjD,CAAC;SACF;KACD,CAAC,CAAC;IACH,IAAI,oBAAoB,EAAE,CAAC;QAC1B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,MAAM,GAAc;QACzB,OAAO;QACP,eAAe;QACf,GAAG;QACH,OAAO,EAAE,SAAS;QAClB,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QAC1E,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,iBAAiB,EAAE,CAAC;QACtE,mBAAmB,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC;QAChD,WAAW;KACX,CAAC;IAEF,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3B,MAAM;YACN,GAAG;YACH,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAe;SAC5D,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACzC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;QAC3B,qBAAqB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,cAAc,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBAC3D,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;oBACX,GAAG,EAAE,2DAA2D;oBAChE,KAAK;iBACL,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;QACJ,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QACV,GAAG,EAAE,mBAAmB;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,MAAM,KAAK,SAAS;QAC9B,UAAU,EAAE,cAAc,CAAC,UAAU,EAAE,CAAC,MAAM;QAC9C,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;KACrC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,cAAc,CAC5B,CAAY,EACZ,QAAyB;IAEzB,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3C,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACd,sCAAsC,QAAQ,CAAC,QAAQ,4BAA4B,QAAQ,CAAC,IAAI,EAAE,CAClG,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QACvD,IAAI,OAAO;YAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC;QAC3D,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YACV,GAAG,EAAE,2FAA2F;YAChG,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,SAAS,EAAE,QAAQ,CAAC,EAAE;SACtB,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,cAAc,QAAQ,CAAC,IAAI,IAAI,EAAE,2CAA2C,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,sBAAsB,CACpC,GAAW,EACX,QAA4B,EAC5B,eAAgC;IAEhC,MAAM,MAAM,GAAG,IAAI,qBAAqB,CAAC;QACxC,GAAG;QACH,QAAQ,EAAE,QAAQ,IAAI,WAAW,EAAE;QACnC,eAAe;QACf,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,IAAI;QACd,iBAAiB,EAAE,IAAI;QACvB,cAAc,EAAE,IAAI;QACpB,QAAQ,EAAE,IAAI;KACd,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACtB,OAAO,MAAM,CAAC;AACf,CAAC;AAED,iFAAiF;AACjF,SAAS,gBAAgB,CAAC,KAAwB;IACjD,OAAO,CACN,KAAK,CAAC,IAAI,KAAK,gBAAgB;QAC/B,KAAK,CAAC,IAAI,KAAK,uBAAuB;QACtC,KAAK,CAAC,IAAI,KAAK,uBAAuB,CACtC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CACtB,CAAY,EACZ,OAAkB,EAClB,MAAiB;IAEjB,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC;QAC3D,OAAO,MAAM,CAAC,mBAAmB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YACpD,MAAM,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAE,CAAC,CAAC;YAChE,MAAM,CAAC,mBAAmB,IAAI,CAAC,CAAC;QACjC,CAAC;IACF,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,qBAAqB,CAAC,CAAY,EAAE,KAAwB;IACpE,IAAI,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,oBAAoB,CAAC,KAAK,CAAC;YAAE,OAAO;QACxC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,sCAAsC,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;AACF,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC3C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,SAAS,GAAG,KAA4C,CAAC;IAC/D,OAAO,SAAS,CAAC,KAAK,KAAK,OAAO,IAAI,SAAS,CAAC,IAAI,KAAK,UAAU,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,CAAY,EACZ,MAAiB;IAEjB,MAAM,cAAc,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,CAAC,iBAAiB,EAAE,CAAC;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,OAAO,KAAK,MAAM,CAAC,iBAAiB;QAAE,OAAO;IACjD,MAAM,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IACrC,MAAM,CAAC,iBAAiB,GAAG,OAAO,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,CAAY,EACZ,OAAyB,EACzB,MAA2B;IAE3B,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC;IAC1B,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,IAAI,MAA6B,CAAC;IAClC,IAAI,CAAC;QACJ,MAAM,GAAG,MAAM,KAAK,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;IACT,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,CAAC;QACpB,MAAM,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAClD,MAAM,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;YAChC,IAAI,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC3D,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC;oBACvC,IAAI,EAAE,kBAAkB;oBACxB,MAAM,EAAE,MAAM;iBACd,CAAC,CAAC;YACJ,CAAC;QACF,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,IAAI,QAAQ,EAAE,CAAC;QACd,MAAM,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;YAChC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACxB,IAAI,MAAM,EAAE,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACzC,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAC9C,CAAC;gBACD,OAAO;YACR,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,CAAC,MAAM,aAAa,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;YACtE,IAAI,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACjC,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YACvC,CAAC;QACF,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;IAChE,CAAC;AACF,CAAC;AAED,yDAAyD;AACzD,KAAK,UAAU,aAAa,CAC3B,CAAY,EACZ,QAAyB;IAEzB,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1C,OAAO,OAAO,EAAE,QAAQ,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,OAAO,CACrB,MAAiB,EACjB,SAAqC;IAErC,IAAI,CAAC;QACJ,MAAM,SAAS,EAAE,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;AACF,CAAC"}

package/dist/sandbox.d.ts

@@ -0,0 +1,21 @@
+import { type BashOperations, type ToolDefinition } from "@earendil-works/pi-coding-agent";
+import type { Sandbox } from "@rivet-dev/sandbox-adapter";
+/**
+ * Builds Pi's seven built-in coding tools with every file and shell operation
+ * routed into the sandbox. Passed as `customTools`, they replace the built-in
+ * tools of the same names.
+ */
+export declare function createSandboxTools(sandbox: Sandbox): ToolDefinition<any, any, any>[];
+/**
+ * Command execution for Pi's bash tool and `executeBash`, inside the sandbox.
+ * Follows Pi's `BashOperations` contract: `timeout` is in seconds, and abort
+ * and timeout reject with `aborted` and `timeout:<seconds>`.
+ *
+ * Pi passes the actor host's environment as `options.env`. It is not
+ * forwarded, because it holds the host's provider keys; commands run with the
+ * sandbox's own environment.
+ */
+export declare function createSandboxBashOperations(sandbox: Sandbox): BashOperations;
+/** Resolves `path` against `root` and rejects anything outside it. */
+export declare function resolveSandboxPath(root: string, path: string): string;
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AACA,OAAO,EACN,KAAK,cAAc,EAUnB,KAAK,cAAc,EACnB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAO1D;;;;GAIG;AACH,wBAAgB,kBAAkB,CACjC,OAAO,EAAE,OAAO,GACd,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAgHjC;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,OAAO,GAAG,cAAc,CAgB5E;AAED,sEAAsE;AACtE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAQrE"}