codiedev 0.10.0-beta.5 → 0.10.0-beta.7

package/dist/hook.js

@@ -53,15 +53,11 @@ const selfUpdate_1 = require("./selfUpdate");
 const version_1 = require("./version");
 const sync_1 = require("./packs/sync");
 const captureLog_1 = require("./captureLog");
-const security_1 = require("./security");
-const securitySession_1 = require("./securitySession");
-const securityPolicy_1 = require("./securityPolicy");
 const subagents_1 = require("./subagents");
-const securityFeature_1 = require("./securityFeature");
-const securityInventory_1 = require("./securityInventory");
 const captureExclusions_1 = require("./captureExclusions");
 const cursorHooks_1 = require("./cursorHooks");
 const copilotHooks_1 = require("./copilotHooks");
+const piHooks_1 = require("./piHooks");
 function buildDiscoveryContext(skills) {
     if (skills.length === 0)
         return null;
@@ -321,131 +317,6 @@ function postJsonForResponse(url, body, bearerToken, timeoutMs) {
         req.end();
     });
 }
-async function runSecurityHook(hookInput, phase, source, uploadTelemetry = true) {
-    const config = (0, utils_1.readConfig)();
-    if (!config || !(0, securityFeature_1.isAgentSecurityEnabled)(config))
-        return false;
-    const policy = (0, securityPolicy_1.readEndpointSecurityPolicy)(undefined, undefined, config.companyId);
-    const sessionId = hookInput.session_id ?? hookInput.sessionId;
-    const sessionSignal = phase === "pre" ? (0, securitySession_1.readSessionSecuritySignal)(sessionId) : undefined;
-    const localDecision = (0, security_1.evaluateToolSecurity)(hookInput, phase, policy, source, sessionSignal);
-    if (phase === "post" && (0, security_1.securityInputHasSensitivePath)(hookInput)) {
-        (0, securitySession_1.recordSensitiveReadSignal)(sessionId);
-    }
-    const event = (0, security_1.buildSecurityWorkflowEvent)(hookInput, phase, source);
-    if (event) {
-        event.localDecision = localDecision.action;
-        event.localCategory = localDecision.category;
-    }
-    if (localDecision.action === "block" && phase === "pre") {
-        (0, captureLog_1.appendCaptureLog)({
-            stage: "security",
-            sessionId: hookInput.session_id ?? hookInput.sessionId ?? "unknown",
-            outcome: "ok",
-            detail: `phase=${phase} localDecision=block category=${localDecision.category}`,
-        });
-        if (uploadTelemetry)
-            dispatchSecurityEventUpload(event);
-        const response = source === "cursor"
-            ? (0, cursorHooks_1.cursorPreToolBlockResponse)(localDecision.reason ?? "Codie blocked this action")
-            : source === "copilot"
-                ? (0, copilotHooks_1.copilotPreToolBlockResponse)(localDecision.reason ?? "Codie blocked this action")
-                : {
-                    hookSpecificOutput: {
-                        hookEventName: "PreToolUse",
-                        permissionDecision: "deny",
-                        permissionDecisionReason: localDecision.reason,
-                    },
-                };
-        process.stdout.write(JSON.stringify(response));
-        return true;
-    }
-    if (event && uploadTelemetry)
-        dispatchSecurityEventUpload(event);
-    return false;
-}
-function runPromptSecurityHook(hookInput, source, uploadTelemetry = true) {
-    const config = (0, utils_1.readConfig)();
-    if (!config || !(0, securityFeature_1.isAgentSecurityEnabled)(config))
-        return false;
-    const decision = (0, security_1.evaluatePromptSecurity)(hookInput.prompt, (0, securityPolicy_1.readEndpointSecurityPolicy)(undefined, undefined, config.companyId), source);
-    if (decision.action !== "block")
-        return false;
-    (0, captureLog_1.appendCaptureLog)({
-        stage: "security",
-        sessionId: hookInput.session_id ?? hookInput.sessionId ?? "unknown",
-        outcome: "ok",
-        detail: `phase=prompt localDecision=block category=${decision.category} telemetry=${uploadTelemetry ? "enabled" : "suppressed"} cwd=${hookInput.cwd ?? "unknown"}`,
-    });
-    if (uploadTelemetry) {
-        dispatchSecurityEventUpload((0, security_1.buildBlockedSecurityPromptEvent)(hookInput, source, decision.category ?? "secret_in_prompt"));
-    }
-    if (source !== "copilot") {
-        const response = source === "cursor"
-            ? (0, cursorHooks_1.cursorPromptBlockResponse)(decision.reason ?? "Codie blocked this prompt")
-            : { decision: "block", reason: decision.reason };
-        process.stdout.write(JSON.stringify(response));
-    }
-    return true;
-}
-function dispatchAllowedPromptSecurityEvent(hookInput, source) {
-    const config = (0, utils_1.readConfig)();
-    if (!config || !(0, securityFeature_1.isAgentSecurityEnabled)(config))
-        return;
-    const event = (0, security_1.buildSecurityPromptEvent)(hookInput, source, Date.now, (0, securityPolicy_1.readEndpointSecurityPolicy)(undefined, undefined, config.companyId));
-    if (event)
-        dispatchSecurityEventUpload(event);
-}
-function dispatchSecurityEventUpload(event) {
-    if (!event || !(0, securityFeature_1.isAgentSecurityEnabled)((0, utils_1.readConfig)()))
-        return;
-    try {
-        const child = (0, child_process_1.spawn)(process.execPath, [process.argv[1], "security-upload"], {
-            detached: true,
-            stdio: ["pipe", "ignore", "ignore"],
-        });
-        child.stdin?.end(JSON.stringify(event));
-        child.unref();
-    }
-    catch {
-    }
-}
-async function runSecurityEventUpload() {
-    const config = (0, utils_1.readConfig)();
-    if (!config || !(0, securityFeature_1.isAgentSecurityEnabled)(config))
-        return;
-    const startedAt = Date.now();
-    try {
-        const raw = await readStdin();
-        const event = JSON.parse(raw);
-        const cachedPolicy = (0, securityPolicy_1.readEndpointSecurityPolicy)(undefined, undefined, config.companyId);
-        const eventWithEndpoint = (0, security_1.withEndpointIdentity)(event, {
-            endpointId: config.deviceId,
-            endpointName: config.deviceName,
-            cliVersion: version_1.CLI_VERSION,
-            securityRuntimeVersion: security_1.SECURITY_RUNTIME_VERSION,
-            securityPolicyVersion: cachedPolicy?.policyVersion,
-        });
-        const result = await postJsonForResponse(`${config.backendUrl}/api/cli/securityEvent`, { ...eventWithEndpoint }, config.token, 5_000);
-        if (result?.policy?.schemaVersion === 1) {
-            (0, securityPolicy_1.writeEndpointSecurityPolicy)(result.policy, undefined, undefined, config.companyId);
-        }
-        (0, captureLog_1.appendCaptureLog)({
-            stage: "security",
-            sessionId: event.sessionId,
-            outcome: "ok",
-            detail: `phase=${event.phase} elapsedMs=${Date.now() - startedAt} verdict=${String(result?.verdict ?? "unknown")}`,
-        });
-    }
-    catch (err) {
-        (0, captureLog_1.appendCaptureLog)({
-            stage: "security",
-            sessionId: "upload",
-            outcome: "ERROR",
-            detail: `elapsedMs=${Date.now() - startedAt} ${err.message}`,
-        });
-    }
-}
 function postBytes(url, bytes, contentType) {
     return new Promise((resolve, reject) => {
         const parsed = new URL(url);
@@ -502,6 +373,8 @@ function resolveMode(arg) {
         return "copilot";
     if (arg === "capture-opencode" || arg === "capture-opencode-final")
         return "opencode";
+    if (arg === "capture-pi" || arg === "capture-pi-final")
+        return "pi";
     if (arg === "capture-desktop" || arg === "capture-desktop-final")
         return "desktop";
     return "claude-code";
@@ -542,17 +415,6 @@ async function main() {
         }
         process.exit(0);
     }
-    if (process.argv[2] === "security-inventory-upload") {
-        const config = (0, utils_1.readConfig)();
-        if (config && (0, securityFeature_1.isAgentSecurityEnabled)(config)) {
-            const inventory = (0, securityInventory_1.buildSecurityInventory)({ workspace: process.argv[3] || process.cwd() });
-            try {
-                await (0, securityInventory_1.uploadSecurityInventory)(inventory, config);
-            }
-            catch { }
-        }
-        process.exit(0);
-    }
     if (process.argv[2] === "backup-upload") {
         const { runBackupUpload } = await Promise.resolve().then(() => __importStar(require("./backup/run")));
         await runBackupUpload(process.argv[3]);
@@ -577,10 +439,6 @@ async function main() {
         }
         process.exit(0);
     }
-    if (process.argv[2] === "security-upload") {
-        await runSecurityEventUpload();
-        process.exit(0);
-    }
     if (process.argv[2] === "self-update") {
         await (0, selfUpdate_1.runSelfUpdate)(process.argv[1]);
         process.exit(0);
@@ -588,6 +446,7 @@ async function main() {
     const migrated = process.env.CODIEDEV_VIA_LAUNCHER ? [] : (0, utils_1.migrateHooksToLauncher)();
     if (migrated.length === 0)
         (0, selfUpdate_1.maybeSpawnSelfUpdate)(process.argv[1]);
+    (0, selfUpdate_1.maybeRefreshInstructions)();
     let hookInput = {};
     try {
         const raw = await readStdin();
@@ -603,54 +462,26 @@ async function main() {
     catch {
         process.exit(0);
     }
-    const captureIgnored = (0, captureExclusions_1.shouldIgnoreCaptureInput)((0, utils_1.readConfig)(), hookInput);
-    const securityCommand = process.argv[2] ?? "";
-    const securityMatch = securityCommand.match(/^security-(pre|post|failure)(?:-(codex|cursor|codie|copilot))?$/);
-    if (securityMatch) {
-        const source = securityMatch[2] === "codex"
-            ? "codex"
-            : securityMatch[2] === "cursor"
-                ? "cursor"
-                : securityMatch[2] === "codie"
-                    ? "codie-harness"
-                    : securityMatch[2] === "copilot"
-                        ? "copilot"
-                        : "claude-code";
-        const calls = hookInput.copilotToolCalls;
-        const inputs = calls?.length
-            ? calls.map((call) => ({ ...hookInput, tool_name: call.name, tool_input: call.input, tool_use_id: call.id }))
-            : [hookInput];
-        for (const input of inputs) {
-            if (await runSecurityHook(input, securityMatch[1], source, !captureIgnored))
-                break;
-        }
+    if (process.argv[2]?.startsWith("security-"))
         process.exit(0);
-    }
+    const captureIgnored = (0, captureExclusions_1.shouldIgnoreCaptureInput)((0, utils_1.readConfig)(), hookInput);
     const promptCommand = process.argv[2] ?? "";
-    if (promptCommand === "security-prompt-cursor") {
-        if (runPromptSecurityHook(hookInput, "cursor", !captureIgnored))
-            return;
-        if (captureIgnored)
-            return;
-        dispatchAllowedPromptSecurityEvent(hookInput, "cursor");
-        process.exit(0);
-    }
     if (process.argv[2] === "discover" ||
         process.argv[2] === "discover-codex" ||
         process.argv[2] === "discover-codie" ||
-        process.argv[2] === "discover-copilot") {
+        process.argv[2] === "discover-copilot" ||
+        process.argv[2] === "discover-pi") {
         const source = promptCommand === "discover-codex"
             ? "codex"
             : promptCommand === "discover-codie"
                 ? "codie-harness"
                 : promptCommand === "discover-copilot"
                     ? "copilot"
-                    : "claude-code";
-        if (runPromptSecurityHook(hookInput, source, !captureIgnored))
-            return;
+                    : promptCommand === "discover-pi"
+                        ? "pi"
+                        : "claude-code";
         if (captureIgnored)
             return;
-        dispatchAllowedPromptSecurityEvent(hookInput, source);
         if (source === "codex")
             await runCodexLimitSweep(hookInput.session_id);
         if (source === "codex")
@@ -693,19 +524,10 @@ async function main() {
     if (process.argv[2] === "session-start" ||
         process.argv[2] === "session-start-cursor" ||
         process.argv[2] === "session-start-copilot" ||
-        process.argv[2] === "session-start-opencode") {
-        if ((0, securityFeature_1.isAgentSecurityEnabled)((0, utils_1.readConfig)()) && (0, securityInventory_1.securityInventoryDue)()) {
-            try {
-                const child = (0, child_process_1.spawn)(process.execPath, [process.argv[1], "security-inventory-upload", hookInput.cwd || process.cwd()], {
-                    detached: true,
-                    stdio: "ignore",
-                });
-                child.unref();
-            }
-            catch { }
-        }
+        process.argv[2] === "session-start-opencode" ||
+        process.argv[2] === "session-start-pi") {
         (0, sync_1.maybeSpawnPackSync)({ connected: Boolean((0, utils_1.readConfig)()), cli: path.join(__dirname, "cli.js") });
-        const packNag = process.argv[2] === "session-start-opencode" ? null : (0, sync_1.packNagLine)();
+        const packNag = process.argv[2] === "session-start-opencode" || process.argv[2] === "session-start-pi" ? null : (0, sync_1.packNagLine)();
         if (packNag && process.argv[2] === "session-start")
             process.stdout.write(`${packNag}\n`);
         await runSessionStart(hookInput, process.argv[2] === "session-start-opencode"
@@ -714,7 +536,9 @@ async function main() {
                 ? "cursor"
                 : process.argv[2] === "session-start-copilot"
                     ? "copilot"
-                    : "claude-code");
+                    : process.argv[2] === "session-start-pi"
+                        ? "pi"
+                        : "claude-code");
         if ((0, utils_1.readConfig)() && (process.argv[2] === "session-start-cursor" || process.argv[2] === "session-start-copilot")) {
             const source = process.argv[2] === "session-start-cursor" ? "cursor" : "copilot";
             const { TEAM_SKILL_CONTEXT, teamSkillSessionOutput } = await Promise.resolve().then(() => __importStar(require("./teamSkillContext")));
@@ -731,11 +555,16 @@ async function main() {
     else if ((process.argv[2] ?? "").endsWith("-copilot")) {
         (0, utils_1.ensureCopilotCodiedevHooksInstalled)();
     }
+    else if (/-pi(?:-final)?$/.test(process.argv[2] ?? "")) {
+        (0, utils_1.ensurePiExtensionInstalled)();
+    }
     else {
         (0, utils_1.ensureAllCodiedevHooksInstalled)();
     }
     if (process.argv[2] === "capture-codex")
         (0, utils_1.ensureCodexLimitHookInstalled)();
+    if (/-opencode(?:-final)?$/.test(process.argv[2] ?? ""))
+        (0, utils_1.ensureOpenCodePluginCurrent)();
     const { session_id, transcript_path, cwd, workspace_roots } = hookInput;
     const launch = (0, launchContext_1.hookLaunch)(process.argv[2], hookInput, {
         copilotClientName: process.argv[2]?.endsWith("-copilot")
@@ -745,7 +574,7 @@ async function main() {
     const workspaceRoot = workspace_roots && workspace_roots.length > 0
         ? workspace_roots[0]
         : cwd || process.cwd();
-    if (process.argv[2] === "backup" || process.argv[2] === "backup-cursor" || process.argv[2] === "backup-copilot") {
+    if (process.argv[2] === "backup" || process.argv[2] === "backup-cursor" || process.argv[2] === "backup-copilot" || process.argv[2] === "backup-pi") {
         if (transcript_path && !(0, utils_1.isCodexRolloutPath)(transcript_path)) {
             try {
                 (0, utils_1.dispatchCaptureFinish)({
@@ -753,7 +582,9 @@ async function main() {
                         ? "capture-cursor"
                         : process.argv[2] === "backup-copilot"
                             ? "capture-copilot"
-                            : "capture",
+                            : process.argv[2] === "backup-pi"
+                                ? "capture-pi"
+                                : "capture",
                     session_id,
                     transcript_path,
                     cwd,
@@ -878,7 +709,10 @@ async function runCaptureFinishInner(input, config, session_id, transcript_path,
         transcriptContent = normalized.content;
         copilotSubagents = normalized.subagents.count > 0 ? normalized.subagents : undefined;
     }
-    if (mode === "cursor" || mode === "copilot") {
+    else if (parserMode === "pi") {
+        transcriptContent = (0, piHooks_1.normalizePiTranscript)(transcriptContent);
+    }
+    if (mode === "cursor" || mode === "copilot" || mode === "pi") {
         try {
             await (0, limitEventReporter_1.reportTranscriptLimitEvent)({ config, source: mode, sessionId: session_id, transcript: transcriptContent });
         }
@@ -902,7 +736,9 @@ async function runCaptureFinishInner(input, config, session_id, transcript_path,
         ? "empty-cursor-transcript"
         : parserMode === "copilot" && (0, copilotHooks_1.isCopilotTranscriptEmpty)(rawTranscriptContent)
             ? "empty-copilot-transcript"
-            : null;
+            : parserMode === "pi" && (0, piHooks_1.isPiTranscriptEmpty)(rawTranscriptContent)
+                ? "empty-pi-transcript"
+                : null;
     if (emptyReason) {
         (0, captureLog_1.appendCaptureLog)({
             stage: "capture-finish",

package/dist/limitEventReporter.js

@@ -76,7 +76,7 @@ function postLimitEvent(config, payload, timeoutMs = 5_000) {
 async function reportTranscriptLimitEvent(args) {
     const parse = args.source === "codex"
         ? limitEvent_1.parseCodexLimitEventFromTranscript
-        : args.source === "cursor" || args.source === "copilot" ? limitEvent_1.parseNativeLimitEventFromTranscript : limitEvent_1.parseLimitEventFromTranscript;
+        : args.source === "cursor" || args.source === "copilot" || args.source === "pi" ? limitEvent_1.parseNativeLimitEventFromTranscript : limitEvent_1.parseLimitEventFromTranscript;
     const parsed = parse(args.transcript);
     if (!parsed && !args.emitMinimalOnMiss)
         return false;

package/dist/managedPi.js

@@ -0,0 +1,240 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ManagedPiArgError = exports.GUARD_SOURCE = exports.BLOCKED_BASE_URL = exports.CAPTURE_FILE = exports.GUARD_FILE = exports.PI_PROVIDER_ENV = exports.PI_PROVIDER_ID = void 0;
+exports.managedPiAgentDir = managedPiAgentDir;
+exports.piProviderConfig = piProviderConfig;
+exports.prepareManagedPiDir = prepareManagedPiDir;
+exports.managedPiEnv = managedPiEnv;
+exports.managedPiArgs = managedPiArgs;
+exports.runManagedPi = runManagedPi;
+const child_process_1 = require("child_process");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const codieLauncher_1 = require("./codieLauncher");
+const piRuntime_1 = require("./piRuntime");
+const utils_1 = require("./utils");
+exports.PI_PROVIDER_ID = "codiedev";
+exports.PI_PROVIDER_ENV = [
+    "ANTHROPIC_API_KEY", "ANTHROPIC_OAUTH_TOKEN", "OPENAI_API_KEY", "AZURE_OPENAI_API_KEY",
+    "AZURE_OPENAI_BASE_URL", "AZURE_OPENAI_RESOURCE_NAME", "DEEPSEEK_API_KEY", "GEMINI_API_KEY",
+    "GROQ_API_KEY", "CEREBRAS_API_KEY", "XAI_API_KEY", "FIREWORKS_API_KEY", "OPENROUTER_API_KEY",
+    "AI_GATEWAY_API_KEY", "ZAI_API_KEY", "MISTRAL_API_KEY", "MINIMAX_API_KEY", "MOONSHOT_API_KEY",
+    "OPENCODE_API_KEY", "KIMI_API_KEY", "CLOUDFLARE_API_KEY", "XIAOMI_API_KEY",
+    "XIAOMI_TOKEN_PLAN_CN_API_KEY", "XIAOMI_TOKEN_PLAN_AMS_API_KEY", "XIAOMI_TOKEN_PLAN_SGP_API_KEY",
+    "AWS_PROFILE", "AWS_ACCESS_KEY_ID", "AWS_SECRET_ACCESS_KEY", "AWS_SESSION_TOKEN",
+    "AWS_BEARER_TOKEN_BEDROCK", "GOOGLE_APPLICATION_CREDENTIALS", "GOOGLE_CLOUD_API_KEY",
+    "COPILOT_GITHUB_TOKEN",
+];
+const BLOCKED_SUBCOMMANDS = new Set(["install", "remove", "uninstall", "config"]);
+exports.GUARD_FILE = "codie-guard.ts";
+exports.CAPTURE_FILE = "codiedev-capture.ts";
+exports.BLOCKED_BASE_URL = "http://127.0.0.1:9/blocked-by-codiedev";
+exports.GUARD_SOURCE = `// Written by Codiedev on every \`codie --pi\` launch. Edits are overwritten.
+import { execFileSync } from "node:child_process";
+import { getProviders } from "@mariozechner/pi-ai";
+
+const PROVIDER = ${JSON.stringify(exports.PI_PROVIDER_ID)};
+const BLOCKED = ${JSON.stringify(exports.BLOCKED_BASE_URL)};
+const ours = (m) => Boolean(m && m.provider === PROVIDER);
+const label = (m) => (m ? m.provider + "/" + m.id : "that model");
+// pi runs a header value starting with "!" as a shell command, so no value
+// may start with one; branch and skill names are user-controlled.
+const clean = (v, max) => String(v ?? "").replace(/[\\r\\n]/g, "").trim().replace(/^!+/, "").slice(0, max);
+const git = (cwd, args) => { try { return execFileSync("git", args, { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 1500 }).trim(); } catch { return ""; } };
+
+export default function (pi) {
+  for (const p of getProviders()) if (p !== PROVIDER) pi.registerProvider(p, { baseUrl: BLOCKED });
+
+  let last;
+  const skills = new Set();
+  const fallback = (ctx) => last ?? ctx.modelRegistry.getAll().find(ours);
+  const pin = async (model, ctx) => {
+    const back = fallback(ctx);
+    if (back) await pi.setModel(back);
+    if (ctx.hasUI) ctx.ui.notify("codie: " + label(model) + " isn't a Codiedev-approved model" + (back ? "; using " + back.id : "") + ".", "warning");
+  };
+  const tag = (ctx) => {
+    const headers = {};
+    const session = clean(ctx.sessionManager?.getSessionId?.(), 200);
+    if (session) headers["X-Codiedev-Session-Id"] = session;
+    const repo = clean(git(ctx.cwd, ["remote", "get-url", "origin"]).replace(/\\/\\/[^/@]*@/, "//"), 2048);
+    if (repo) headers["X-Codiedev-Repo-Url"] = repo;
+    const branch = clean(git(ctx.cwd, ["branch", "--show-current"]), 200);
+    if (branch) headers["X-Codiedev-Branch"] = branch;
+    const sha = clean(git(ctx.cwd, ["rev-parse", "HEAD"]), 40);
+    if (/^[0-9a-f]{7,40}$/i.test(sha)) headers["X-Codiedev-Head-Sha"] = sha;
+    const list = clean([...skills].join(","), 4096);
+    if (list) headers["X-Codiedev-Skills-Used"] = list;
+    // pi replaces the provider's whole request config here, so the key name
+    // goes with the headers every time.
+    pi.registerProvider(PROVIDER, { apiKey: "CODIEDEV_GATEWAY_KEY", headers });
+  };
+
+  pi.on("session_start", async (_event, ctx) => {
+    skills.clear();
+    for (const m of ctx.modelRegistry.getAll()) if (!ours(m)) pi.registerProvider(m.provider, { baseUrl: BLOCKED });
+    if (ours(ctx.model)) last = ctx.model;
+    else await pin(ctx.model, ctx);
+    tag(ctx);
+  });
+  pi.on("model_select", async (event, ctx) => {
+    if (ours(event.model)) last = event.model;
+    else await pin(event.model, ctx);
+  });
+  pi.on("input", async (event) => {
+    const m = String(event?.text ?? "").match(/^\\/skill:([a-z0-9][a-z0-9_.:-]{0,119})(?:\\s|$)/i);
+    if (m && skills.size < 50) skills.add(m[1]);
+  });
+  pi.on("tool_result", async (event) => {
+    const p = String(event?.input?.path ?? "").replace(/\\\\/g, "/").match(/\\/([a-z0-9][a-z0-9_.:-]{0,119})\\/SKILL\\.md$/i);
+    if (event?.toolName === "read" && !event.isError && p && skills.size < 50) skills.add(p[1]);
+  });
+  // Before every model call in the turn: the agent may have switched branch.
+  pi.on("turn_start", async (_event, ctx) => tag(ctx));
+  pi.on("before_provider_request", (_event, ctx) => {
+    // Belt and braces: the request is already headed for BLOCKED.
+    if (!ours(ctx.model)) ctx.abort();
+  });
+}
+`;
+function managedPiAgentDir(stateDir) {
+    return path.join(stateDir, "managed", "pi", "agent");
+}
+function piProviderConfig(gatewayUrl, catalog) {
+    return {
+        baseUrl: gatewayUrl.replace(/\/+$/, ""),
+        api: "openai-completions",
+        apiKey: "CODIEDEV_GATEWAY_KEY",
+        compat: { supportsDeveloperRole: false, supportsReasoningEffort: false },
+        models: catalog.map((model) => ({
+            id: (0, codieLauncher_1.bareModel)(model.id),
+            name: model.name || (0, codieLauncher_1.bareModel)(model.id),
+            ...(model.limit ? { contextWindow: model.limit.context, maxTokens: model.limit.output } : {}),
+            ...(model.cost ? { cost: { input: model.cost.input, output: model.cost.output, cacheRead: 0, cacheWrite: 0 } } : {}),
+        })),
+    };
+}
+function writeJsonAtomic(file, value) {
+    const tmp = `${file}.${process.pid}.tmp`;
+    fs.writeFileSync(tmp, JSON.stringify(value, null, 2) + "\n", { mode: 0o600 });
+    fs.renameSync(tmp, file);
+}
+function prepareManagedPiDir(opts) {
+    const { agentDir, gatewayUrl, catalog } = opts;
+    if (!catalog.length)
+        throw new Error("No company-approved models were returned by Codiedev");
+    const ids = catalog.map((model) => (0, codieLauncher_1.bareModel)(model.id));
+    const requested = (0, codieLauncher_1.bareModel)(opts.model ?? "");
+    if (requested && !ids.includes(requested)) {
+        throw new Error(`Primary agent model is not approved for this Codiedev account: ${requested}`);
+    }
+    fs.mkdirSync(agentDir, { recursive: true, mode: 0o700 });
+    writeJsonAtomic(path.join(agentDir, "models.json"), { providers: { [exports.PI_PROVIDER_ID]: piProviderConfig(gatewayUrl, catalog) } });
+    writeJsonAtomic(path.join(agentDir, "settings.json"), {
+        defaultProvider: exports.PI_PROVIDER_ID,
+        defaultModel: requested || ids[0],
+        enabledModels: ids.map((id) => `${exports.PI_PROVIDER_ID}/${id}`),
+        packages: [],
+        extensions: [],
+        skills: opts.skillPaths ?? [],
+        enableInstallTelemetry: false,
+    });
+    fs.rmSync(path.join(agentDir, "auth.json"), { force: true });
+    fs.rmSync(path.join(agentDir, "extensions"), { recursive: true, force: true });
+    const guard = path.join(agentDir, exports.GUARD_FILE);
+    fs.writeFileSync(guard, exports.GUARD_SOURCE, { mode: 0o600 });
+    const capture = path.join(agentDir, exports.CAPTURE_FILE);
+    fs.writeFileSync(capture, (0, utils_1.piExtensionSource)(), { mode: 0o600 });
+    return [guard, capture];
+}
+function managedPiEnv(env, agentDir, key, platform = process.platform) {
+    const blocked = new Set([...exports.PI_PROVIDER_ENV, "PI_CODING_AGENT_DIR"]);
+    const out = {};
+    for (const [k, v] of Object.entries(env)) {
+        if (blocked.has(platform === "win32" ? k.toUpperCase() : k))
+            continue;
+        out[k] = v;
+    }
+    out.PI_CODING_AGENT_DIR = agentDir;
+    out.PI_TELEMETRY = "0";
+    out.CODIEDEV_GATEWAY_KEY = key;
+    return out;
+}
+class ManagedPiArgError extends Error {
+}
+exports.ManagedPiArgError = ManagedPiArgError;
+function managedPiArgs(args, extensions) {
+    if (args.length && BLOCKED_SUBCOMMANDS.has(args[0])) {
+        throw new ManagedPiArgError(`\`pi ${args[0]}\` changes extension sources, which codie --pi manages. Ask your Codiedev admin to approve a package instead.`);
+    }
+    for (let i = 0; i < args.length; i++) {
+        const a = args[i];
+        if (a === "--")
+            break;
+        const [flag, inline] = a.startsWith("--") && a.includes("=") ? [a.slice(0, a.indexOf("=")), a.slice(a.indexOf("=") + 1)] : [a, undefined];
+        if (flag === "--api-key")
+            throw new ManagedPiArgError("--api-key isn't allowed in codie --pi: models come from Codiedev.");
+        if (flag === "-e" || flag === "--extension")
+            throw new ManagedPiArgError(`${flag} isn't allowed in codie --pi: extensions are managed by Codiedev.`);
+        if (flag === "--provider") {
+            const value = inline ?? args[i + 1];
+            if (value !== exports.PI_PROVIDER_ID)
+                throw new ManagedPiArgError(`--provider ${value ?? "(none)"} isn't allowed in codie --pi: only Codiedev-approved models are available.`);
+        }
+    }
+    return ["--no-extensions", ...extensions.flatMap((file) => ["-e", file]), ...args];
+}
+function runManagedPi(opts) {
+    const env = opts.env ?? process.env;
+    const agentDir = managedPiAgentDir(opts.stateDir);
+    const extensions = prepareManagedPiDir({
+        agentDir, gatewayUrl: opts.gatewayUrl, catalog: opts.catalog, model: env.CODIEDEV_MODEL,
+        skillPaths: opts.skillPaths,
+    });
+    const args = managedPiArgs(opts.args, extensions);
+    const bin = env.CODIEDEV_PI_BIN?.trim();
+    const [command, commandArgs] = bin
+        ? [bin, args]
+        : [process.execPath, [(opts.resolvePi ?? (() => (0, piRuntime_1.ensurePiRuntime)({ stateDir: opts.stateDir })))(), ...args]];
+    const result = (0, child_process_1.spawnSync)(command, commandArgs, {
+        stdio: "inherit",
+        env: managedPiEnv(env, agentDir, opts.key),
+        shell: Boolean(bin) && process.platform === "win32",
+    });
+    if (result.error)
+        throw result.error;
+    return result.status === null ? 1 : result.status;
+}