@rivet-dev/pi 0.1.0

package/dist/sandbox.js

@@ -0,0 +1,185 @@
+import { posix } from "node:path";
+import { createBashToolDefinition, createEditToolDefinition, createFindToolDefinition, createGrepToolDefinition, createLsToolDefinition, createReadToolDefinition, createWriteToolDefinition, } from "@earendil-works/pi-coding-agent";
+const MAX_FIND_RESULTS = 1_000;
+const MAX_GREP_MATCHES = 1_000;
+const MAX_GREP_OUTPUT_BYTES = 512 * 1024;
+const IGNORED_DIRECTORIES = [".git", "node_modules"];
+/**
+ * Builds Pi's seven built-in coding tools with every file and shell operation
+ * routed into the sandbox. Passed as `customTools`, they replace the built-in
+ * tools of the same names.
+ */
+export function createSandboxTools(sandbox) {
+    const root = normalizeRoot(sandbox.cwd);
+    const resolvePath = (path) => resolveSandboxPath(root, path);
+    const access = async (path) => {
+        const resolved = resolvePath(path);
+        if (!(await sandbox.exists(resolved))) {
+            throw new Error(`Path not found: ${resolved}`);
+        }
+    };
+    const readFile = async (path) => Buffer.from(await sandbox.readFile(resolvePath(path)));
+    const writeFile = (path, content) => sandbox.writeFile(resolvePath(path), content);
+    const read = createReadToolDefinition(root, {
+        operations: {
+            access,
+            readFile,
+            detectImageMimeType: async (path) => imageMimeType(path),
+        },
+    });
+    const write = createWriteToolDefinition(root, {
+        operations: {
+            writeFile,
+            mkdir: (path) => sandbox.mkdir(resolvePath(path)),
+        },
+    });
+    const edit = createEditToolDefinition(root, {
+        operations: { access, readFile, writeFile },
+    });
+    const bash = createBashToolDefinition(root, {
+        operations: createSandboxBashOperations(sandbox),
+    });
+    const ls = createLsToolDefinition(root, {
+        operations: {
+            exists: (path) => sandbox.exists(resolvePath(path)),
+            readdir: (path) => sandbox.readdir(resolvePath(path)),
+            stat: async (path) => {
+                const stat = await sandbox.stat(resolvePath(path));
+                return { isDirectory: () => stat.isDirectory };
+            },
+        },
+    });
+    const find = createFindToolDefinition(root, {
+        operations: {
+            exists: (path) => sandbox.exists(resolvePath(path)),
+            glob: async (pattern, searchDirectory, options) => {
+                const searchRoot = resolvePath(searchDirectory);
+                const result = await sandbox.exec(`find . -type f ${IGNORED_DIRECTORIES.map((directory) => `-not -path ${shellQuote(`*/${directory}/*`)}`).join(" ")}`, { cwd: searchRoot });
+                if (result.exitCode !== 0) {
+                    throw new Error(result.stderr.trim() || `find exited with ${result.exitCode}`);
+                }
+                return result.stdout
+                    .split("\n")
+                    .map(stripDotSlash)
+                    .filter((path) => path.length > 0 && matchesToolGlob(path, pattern))
+                    .slice(0, Math.min(options.limit, MAX_FIND_RESULTS));
+            },
+        },
+    });
+    const grepBase = createGrepToolDefinition(root);
+    const grep = {
+        ...grepBase,
+        execute: async (_toolCallId, params, signal) => {
+            const searchPath = resolvePath(params.path ?? ".");
+            const limit = Math.min(Math.max(1, params.limit ?? 100), MAX_GREP_MATCHES);
+            const args = ["-r", "-n", "-I", "-H"];
+            if (params.ignoreCase)
+                args.push("-i");
+            if (params.literal)
+                args.push("-F");
+            if (params.glob)
+                args.push(`--include=${params.glob}`);
+            if (params.context && params.context > 0) {
+                args.push("-C", String(Math.floor(params.context)));
+            }
+            for (const directory of IGNORED_DIRECTORIES) {
+                args.push(`--exclude-dir=${directory}`);
+            }
+            args.push("-e", params.pattern, "--", posix.relative(root, searchPath) || ".");
+            const result = await sandbox.exec(`grep ${args.map(shellQuote).join(" ")}`, {
+                cwd: root,
+                signal,
+            });
+            if (result.exitCode !== 0 && result.exitCode !== 1) {
+                throw new Error(result.stderr.trim() || `grep exited with ${result.exitCode}`);
+            }
+            const lines = result.stdout.replace(/\n$/, "").split("\n");
+            const matched = lines[0] === "" ? [] : lines.map(stripDotSlash);
+            const selected = matched.slice(0, limit);
+            let output = selected.join("\n");
+            let linesTruncated = false;
+            if (Buffer.byteLength(output) > MAX_GREP_OUTPUT_BYTES) {
+                output = Buffer.from(output).subarray(0, MAX_GREP_OUTPUT_BYTES).toString();
+                linesTruncated = true;
+            }
+            const details = {};
+            if (matched.length > selected.length)
+                details.matchLimitReached = limit;
+            if (linesTruncated)
+                details.linesTruncated = true;
+            return {
+                content: [{ type: "text", text: output || "No matches found" }],
+                details: Object.keys(details).length > 0 ? details : undefined,
+            };
+        },
+    };
+    return [read, bash, edit, write, grep, find, ls];
+}
+/**
+ * Command execution for Pi's bash tool and `executeBash`, inside the sandbox.
+ * Follows Pi's `BashOperations` contract: `timeout` is in seconds, and abort
+ * and timeout reject with `aborted` and `timeout:<seconds>`.
+ *
+ * Pi passes the actor host's environment as `options.env`. It is not
+ * forwarded, because it holds the host's provider keys; commands run with the
+ * sandbox's own environment.
+ */
+export function createSandboxBashOperations(sandbox) {
+    const root = normalizeRoot(sandbox.cwd);
+    return {
+        async exec(command, requestedCwd, options) {
+            const result = await sandbox.exec(command, {
+                cwd: resolveSandboxPath(root, requestedCwd),
+                timeoutMs: options.timeout === undefined ? undefined : options.timeout * 1000,
+                signal: options.signal,
+                onData: (chunk) => options.onData(Buffer.from(chunk)),
+            });
+            if (result.timedOut) {
+                throw new Error(`timeout:${options.timeout}`);
+            }
+            return { exitCode: result.exitCode };
+        },
+    };
+}
+/** Resolves `path` against `root` and rejects anything outside it. */
+export function resolveSandboxPath(root, path) {
+    const normalizedRoot = normalizeRoot(root);
+    const resolved = posix.resolve(normalizedRoot, path);
+    const prefix = normalizedRoot === "/" ? "/" : `${normalizedRoot}/`;
+    if (resolved !== normalizedRoot && !resolved.startsWith(prefix)) {
+        throw new Error(`Path escapes the sandbox working directory: ${path}`);
+    }
+    return resolved;
+}
+function normalizeRoot(path) {
+    if (!posix.isAbsolute(path)) {
+        throw new Error(`sandbox cwd must be an absolute POSIX path, received ${path}`);
+    }
+    return posix.normalize(path);
+}
+/** Pi's find semantics: a pattern without a slash matches the file name at any depth. */
+function matchesToolGlob(relativePath, pattern) {
+    if (pattern.includes("/")) {
+        return (posix.matchesGlob(relativePath, pattern) ||
+            posix.matchesGlob(relativePath, `**/${pattern}`));
+    }
+    return posix.matchesGlob(posix.basename(relativePath), pattern);
+}
+function stripDotSlash(path) {
+    return path.startsWith("./") ? path.slice(2) : path;
+}
+function imageMimeType(path) {
+    const extension = posix.extname(path).toLowerCase();
+    return {
+        ".bmp": "image/bmp",
+        ".gif": "image/gif",
+        ".jpeg": "image/jpeg",
+        ".jpg": "image/jpeg",
+        ".png": "image/png",
+        ".webp": "image/webp",
+    }[extension];
+}
+function shellQuote(value) {
+    return `'${value.replaceAll("'", `'"'"'`)}'`;
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAEN,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,GAIzB,MAAM,iCAAiC,CAAC;AAGzC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,qBAAqB,GAAG,GAAG,GAAG,IAAI,CAAC;AACzC,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAErD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CACjC,OAAgB;IAEhB,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;QACrC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;QAChD,CAAC;IACF,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE,CACvC,MAAM,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,EAAE,CACnD,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IAE/C,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,EAAE;QAC3C,UAAU,EAAE;YACX,MAAM;YACN,QAAQ;YACR,mBAAmB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC;SACxD;KACD,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,EAAE;QAC7C,UAAU,EAAE;YACX,SAAS;YACT,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;SACjD;KACD,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,EAAE;QAC3C,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE;KAC3C,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,EAAE;QAC3C,UAAU,EAAE,2BAA2B,CAAC,OAAO,CAAC;KAChD,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,sBAAsB,CAAC,IAAI,EAAE;QACvC,UAAU,EAAE;YACX,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACnD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACrD,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACpB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;gBACnD,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAChD,CAAC;SACD;KACD,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,EAAE;QAC3C,UAAU,EAAE;YACX,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACnD,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE;gBACjD,MAAM,UAAU,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;gBAChD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAChC,kBAAkB,mBAAmB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,cAAc,UAAU,CAAC,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EACpH,EAAE,GAAG,EAAE,UAAU,EAAE,CACnB,CAAC;gBACF,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;oBAC3B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,oBAAoB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAChF,CAAC;gBACD,OAAO,MAAM,CAAC,MAAM;qBAClB,KAAK,CAAC,IAAI,CAAC;qBACX,GAAG,CAAC,aAAa,CAAC;qBAClB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;qBACnE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC;YACvD,CAAC;SACD;KACD,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG;QACZ,GAAG,QAAQ;QACX,OAAO,EAAE,KAAK,EACb,WAAmB,EACnB,MAAqB,EACrB,MAA+B,EAC9B,EAAE;YACH,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,gBAAgB,CAAC,CAAC;YAC3E,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACtC,IAAI,MAAM,CAAC,UAAU;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,MAAM,CAAC,OAAO;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,MAAM,CAAC,IAAI;gBAAE,IAAI,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACvD,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACrD,CAAC;YACD,KAAK,MAAM,SAAS,IAAI,mBAAmB,EAAE,CAAC;gBAC7C,IAAI,CAAC,IAAI,CAAC,iBAAiB,SAAS,EAAE,CAAC,CAAC;YACzC,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC;YAC/E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;gBAC3E,GAAG,EAAE,IAAI;gBACT,MAAM;aACN,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACpD,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,oBAAoB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACzC,IAAI,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,cAAc,GAAG,KAAK,CAAC;YAC3B,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,qBAAqB,EAAE,CAAC;gBACvD,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC3E,cAAc,GAAG,IAAI,CAAC;YACvB,CAAC;YACD,MAAM,OAAO,GAAoB,EAAE,CAAC;YACpC,IAAI,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM;gBAAE,OAAO,CAAC,iBAAiB,GAAG,KAAK,CAAC;YACxE,IAAI,cAAc;gBAAE,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;YAClD,OAAO;gBACN,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,kBAAkB,EAAE,CAAC;gBAC/D,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;aAC9D,CAAC;QACH,CAAC;KACmE,CAAC;IAEtE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,2BAA2B,CAAC,OAAgB;IAC3D,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxC,OAAO;QACN,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO;YACxC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE;gBAC1C,GAAG,EAAE,kBAAkB,CAAC,IAAI,EAAE,YAAY,CAAC;gBAC3C,SAAS,EAAE,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,GAAG,IAAI;gBAC7E,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aACrD,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,WAAW,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/C,CAAC;YACD,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,CAAC;KACD,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,IAAY;IAC5D,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,cAAc,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,cAAc,GAAG,CAAC;IACnE,IAAI,QAAQ,KAAK,cAAc,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IAClC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,wDAAwD,IAAI,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,yFAAyF;AACzF,SAAS,eAAe,CAAC,YAAoB,EAAE,OAAe;IAC7D,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,CACN,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC;YACxC,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,MAAM,OAAO,EAAE,CAAC,CAChD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IAClC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACpD,OAAO;QACN,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,YAAY;QACpB,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,YAAY;KACrB,CAAC,SAAS,CAAC,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAChC,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAC9C,CAAC"}

package/dist/storage.d.ts

@@ -0,0 +1,39 @@
+import type { FileEntry, SessionEntry, SessionHeader, SettingsManager } from "@earendil-works/pi-coding-agent";
+import type { RawAccess } from "rivetkit/db";
+export type PiDatabase = Pick<RawAccess, "execute">;
+export type PiSettings = ReturnType<SettingsManager["getGlobalSettings"]>;
+/** A Pi session as stored in the actor's SQLite database. */
+export interface StoredPiSession {
+    sessionId: string;
+    cwd: string;
+    header: SessionHeader;
+    entries: SessionEntry[];
+    settings: PiSettings | undefined;
+}
+/**
+ * The sandbox a Pi actor's tools run in. It is stored on its own row, written
+ * as soon as the provider creates it, so a failed first start never loses it.
+ */
+export interface StoredSandbox {
+    provider: string;
+    id: string;
+}
+/**
+ * One row per Pi session entry, inserted as Pi appends them. The rows are Pi's
+ * own JSON, so `SessionManager.inMemory(cwd, { id }, [header, ...entries])`
+ * restores the session and Pi migrates old entry versions itself.
+ */
+export declare const migratePiTables: (db: import("rivetkit/unstable/migrations").MigrationDatabase) => Promise<void>;
+export declare function loadPiSession(db: PiDatabase): Promise<StoredPiSession | undefined>;
+export declare function createPiSession(db: PiDatabase, session: {
+    header: SessionHeader;
+    cwd: string;
+    settings: PiSettings;
+}): Promise<void>;
+export declare function loadPiSandbox(db: PiDatabase): Promise<StoredSandbox | undefined>;
+export declare function savePiSandbox(db: PiDatabase, sandbox: StoredSandbox): Promise<void>;
+export declare function appendPiEntry(db: PiDatabase, entry: SessionEntry): Promise<void>;
+export declare function savePiSettings(db: PiDatabase, settings: PiSettings): Promise<void>;
+/** Builds the entry list `SessionManager.inMemory` expects: header first. */
+export declare function toFileEntries(stored: StoredPiSession): FileEntry[];
+//# sourceMappingURL=storage.d.ts.map

package/dist/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,SAAS,EACT,YAAY,EACZ,aAAa,EACb,eAAe,EACf,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAG7C,MAAM,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AAEpD,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAE1E,6DAA6D;AAC7D,MAAM,WAAW,eAAe;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,QAAQ,EAAE,UAAU,GAAG,SAAS,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;CACX;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,iFAiC1B,CAAC;AAEH,wBAAsB,aAAa,CAClC,EAAE,EAAE,UAAU,GACZ,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CA6BtC;AAED,wBAAsB,eAAe,CACpC,EAAE,EAAE,UAAU,EACd,OAAO,EAAE;IACR,MAAM,EAAE,aAAa,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,UAAU,CAAC;CACrB,GACC,OAAO,CAAC,IAAI,CAAC,CAaf;AAED,wBAAsB,aAAa,CAClC,EAAE,EAAE,UAAU,GACZ,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAMpC;AAED,wBAAsB,aAAa,CAClC,EAAE,EAAE,UAAU,EACd,OAAO,EAAE,aAAa,GACpB,OAAO,CAAC,IAAI,CAAC,CAWf;AAED,wBAAsB,aAAa,CAClC,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,wBAAsB,cAAc,CACnC,EAAE,EAAE,UAAU,EACd,QAAQ,EAAE,UAAU,GAClB,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,MAAM,EAAE,eAAe,GAAG,SAAS,EAAE,CAElE"}

package/dist/storage.js

@@ -0,0 +1,87 @@
+import { migrations } from "rivetkit/unstable/migrations";
+/**
+ * One row per Pi session entry, inserted as Pi appends them. The rows are Pi's
+ * own JSON, so `SessionManager.inMemory(cwd, { id }, [header, ...entries])`
+ * restores the session and Pi migrates old entry versions itself.
+ */
+export const migratePiTables = migrations({
+    tableName: "pi_schema_version",
+    migrations: [
+        {
+            version: 1,
+            sql: `
+				CREATE TABLE pi_session (
+					singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
+					session_id TEXT NOT NULL CHECK (length(session_id) > 0),
+					cwd TEXT NOT NULL CHECK (substr(cwd, 1, 1) = '/'),
+					header_json TEXT NOT NULL CHECK (json_valid(header_json)),
+					settings_json TEXT CHECK (
+						settings_json IS NULL OR json_valid(settings_json)
+					),
+					created_at INTEGER NOT NULL,
+					updated_at INTEGER NOT NULL
+				) STRICT;
+
+				CREATE TABLE pi_sandbox (
+					singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
+					provider TEXT NOT NULL,
+					sandbox_id TEXT NOT NULL,
+					created_at INTEGER NOT NULL
+				) STRICT;
+
+				CREATE TABLE pi_entry (
+					seq INTEGER PRIMARY KEY,
+					entry_id TEXT NOT NULL UNIQUE,
+					entry_json TEXT NOT NULL CHECK (json_valid(entry_json))
+				) STRICT;
+			`,
+        },
+    ],
+});
+export async function loadPiSession(db) {
+    const rows = await db.execute(`SELECT session_id, cwd, header_json, settings_json
+		 FROM pi_session
+		 WHERE singleton = 1`);
+    const row = rows[0];
+    if (!row)
+        return undefined;
+    const entryRows = await db.execute(`SELECT entry_json FROM pi_entry ORDER BY seq`);
+    return {
+        sessionId: row.session_id,
+        cwd: row.cwd,
+        header: JSON.parse(row.header_json),
+        entries: entryRows.map((entry) => JSON.parse(entry.entry_json)),
+        settings: row.settings_json === null
+            ? undefined
+            : JSON.parse(row.settings_json),
+    };
+}
+export async function createPiSession(db, session) {
+    const now = Date.now();
+    await db.execute(`INSERT INTO pi_session (
+			singleton, session_id, cwd, header_json, settings_json, created_at, updated_at
+		 ) VALUES (1, ?, ?, ?, ?, ?, ?)`, session.header.id, session.cwd, JSON.stringify(session.header), JSON.stringify(session.settings), now, now);
+}
+export async function loadPiSandbox(db) {
+    const rows = await db.execute(`SELECT provider, sandbox_id FROM pi_sandbox WHERE singleton = 1`);
+    const row = rows[0];
+    return row && { provider: row.provider, id: row.sandbox_id };
+}
+export async function savePiSandbox(db, sandbox) {
+    await db.execute(`INSERT INTO pi_sandbox (singleton, provider, sandbox_id, created_at) VALUES (1, ?, ?, ?)
+		 ON CONFLICT (singleton) DO UPDATE SET
+			provider = excluded.provider,
+			sandbox_id = excluded.sandbox_id,
+			created_at = excluded.created_at`, sandbox.provider, sandbox.id, Date.now());
+}
+export async function appendPiEntry(db, entry) {
+    await db.execute(`INSERT OR IGNORE INTO pi_entry (entry_id, entry_json) VALUES (?, ?)`, entry.id, JSON.stringify(entry));
+}
+export async function savePiSettings(db, settings) {
+    await db.execute(`UPDATE pi_session SET settings_json = ?, updated_at = ? WHERE singleton = 1`, JSON.stringify(settings), Date.now());
+}
+/** Builds the entry list `SessionManager.inMemory` expects: header first. */
+export function toFileEntries(stored) {
+    return [stored.header, ...stored.entries];
+}
+//# sourceMappingURL=storage.js.map

package/dist/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAwB1D;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,UAAU,CAAC;IACzC,SAAS,EAAE,mBAAmB;IAC9B,UAAU,EAAE;QACX;YACC,OAAO,EAAE,CAAC;YACV,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;IAyBJ;SACD;KACD;CACD,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,EAAc;IAEd,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAM5B;;uBAEqB,CACrB,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAE3B,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,OAAO,CACjC,8CAA8C,CAC9C,CAAC;IACF,OAAO;QACN,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAkB;QACpD,OAAO,EAAE,SAAS,CAAC,GAAG,CACrB,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAiB,CACvD;QACD,QAAQ,EACP,GAAG,CAAC,aAAa,KAAK,IAAI;YACzB,CAAC,CAAC,SAAS;YACX,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAgB;KACjD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,EAAc,EACd,OAIC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,EAAE,CAAC,OAAO,CACf;;kCAEgC,EAChC,OAAO,CAAC,MAAM,CAAC,EAAE,EACjB,OAAO,CAAC,GAAG,EACX,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAC9B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAChC,GAAG,EACH,GAAG,CACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,EAAc;IAEd,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAC5B,iEAAiE,CACjE,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,OAAO,GAAG,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,EAAc,EACd,OAAsB;IAEtB,MAAM,EAAE,CAAC,OAAO,CACf;;;;oCAIkC,EAClC,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,EAAE,EACV,IAAI,CAAC,GAAG,EAAE,CACV,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,EAAc,EACd,KAAmB;IAEnB,MAAM,EAAE,CAAC,OAAO,CACf,qEAAqE,EACrE,KAAK,CAAC,EAAE,EACR,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CACrB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,EAAc,EACd,QAAoB;IAEpB,MAAM,EAAE,CAAC,OAAO,CACf,6EAA6E,EAC7E,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EACxB,IAAI,CAAC,GAAG,EAAE,CACV,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,aAAa,CAAC,MAAuB;IACpD,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC"}

package/dist/tracing.d.ts

@@ -0,0 +1,10 @@
+import type { AgentSession } from "@earendil-works/pi-coding-agent";
+/**
+ * Runs one Pi run inside an `invoke_agent pi` span, a child of the active span,
+ * which is the `prompt` action span when RivetKit tracing is on. The action
+ * span cannot show the outcome, because a model error does not reject the run,
+ * so this span records it with OpenTelemetry GenAI attributes. Prompt text,
+ * tool arguments, and tool results are not recorded.
+ */
+export declare function traceRun(session: AgentSession, actorId: string, run: () => Promise<void>): Promise<void>;
+//# sourceMappingURL=tracing.d.ts.map

package/dist/tracing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracing.d.ts","sourceRoot":"","sources":["../src/tracing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAGpE;;;;;;GAMG;AACH,wBAAsB,QAAQ,CAC7B,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GACtB,OAAO,CAAC,IAAI,CAAC,CA0Bf"}

package/dist/tracing.js

@@ -0,0 +1,39 @@
+import { context, SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
+/**
+ * Runs one Pi run inside an `invoke_agent pi` span, a child of the active span,
+ * which is the `prompt` action span when RivetKit tracing is on. The action
+ * span cannot show the outcome, because a model error does not reject the run,
+ * so this span records it with OpenTelemetry GenAI attributes. Prompt text,
+ * tool arguments, and tool results are not recorded.
+ */
+export async function traceRun(session, actorId, run) {
+    if (session.isStreaming)
+        return run();
+    const span = trace.getTracer("@rivet-dev/pi").startSpan("invoke_agent pi", {
+        kind: SpanKind.INTERNAL,
+        attributes: {
+            "gen_ai.operation.name": "invoke_agent",
+            "gen_ai.agent.name": "pi",
+            "gen_ai.conversation.id": session.sessionId,
+            "gen_ai.request.model": session.model?.id,
+            "rivet.actor.id": actorId,
+        },
+    });
+    try {
+        await context.with(trace.setSpan(context.active(), span), run);
+        const last = session.messages.findLast((message) => message.role === "assistant");
+        if (last?.role === "assistant" && last.stopReason === "error") {
+            span.setAttribute("error.type", "model_error");
+            span.setStatus({ code: SpanStatusCode.ERROR, message: last.errorMessage });
+        }
+    }
+    catch (error) {
+        span.setAttribute("error.type", "run_error");
+        span.setStatus({ code: SpanStatusCode.ERROR });
+        throw error;
+    }
+    finally {
+        span.end();
+    }
+}
+//# sourceMappingURL=tracing.js.map

package/dist/tracing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracing.js","sourceRoot":"","sources":["../src/tracing.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC7B,OAAqB,EACrB,OAAe,EACf,GAAwB;IAExB,IAAI,OAAO,CAAC,WAAW;QAAE,OAAO,GAAG,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC,iBAAiB,EAAE;QAC1E,IAAI,EAAE,QAAQ,CAAC,QAAQ;QACvB,UAAU,EAAE;YACX,uBAAuB,EAAE,cAAc;YACvC,mBAAmB,EAAE,IAAI;YACzB,wBAAwB,EAAE,OAAO,CAAC,SAAS;YAC3C,sBAAsB,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE;YACzC,gBAAgB,EAAE,OAAO;SACzB;KACD,CAAC,CAAC;IACH,IAAI,CAAC;QACJ,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;QAClF,IAAI,IAAI,EAAE,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YAC/D,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;YAC/C,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAC5E,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QAC7C,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/C,MAAM,KAAK,CAAC;IACb,CAAC;YAAS,CAAC;QACV,IAAI,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC;AACF,CAAC"}

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "@rivet-dev/pi",
+  "version": "0.1.0",
+  "description": "Run the Pi coding agent as a durable Rivet Actor",
+  "license": "Apache-2.0",
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "files": [
+    "dist",
+    "package.json"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "check-types": "tsc --noEmit",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "@earendil-works/pi-coding-agent": "1.0.0",
+    "@opentelemetry/api": "^1.1.0",
+    "@rivet-dev/sandbox-adapter": "0.1.0",
+    "rivetkit": "^2.3.22"
+  },
+  "devDependencies": {
+    "@earendil-works/pi-ai": "1.0.0",
+    "@opentelemetry/sdk-trace-node": "2.11.0",
+    "@types/node": "^24.0.0",
+    "typescript": "^5.9.2",
+    "vitest": "^3.2.4"
+  },
+  "engines": {
+    "node": ">=22.19.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/rivet-dev/rivet.git",
+    "directory": "integrations/pi"
+  }
+}