pi-crew 0.9.51 → 0.9.53

package/src/runtime/model-fallback.ts

@@ -1,409 +0,0 @@
-import * as fs from "node:fs";
-import * as os from "node:os";
-import * as path from "node:path";
-import { errors } from "../errors.ts";
-import { fuzzyResolveModelId } from "./model-resolver.ts";
-import { checkModelScope } from "./model-scope.ts";
-
-export interface AvailableModelInfo {
-	provider: string;
-	id: string;
-	fullId: string;
-}
-
-export interface ModelAttemptSummary {
-	model: string;
-	success: boolean;
-	exitCode?: number | null;
-	error?: string;
-}
-
-export interface ModelLike {
-	provider?: unknown;
-	id?: unknown;
-}
-
-export interface ModelRegistryLike {
-	getAvailable?: () => unknown[];
-	getAll?: () => unknown[];
-}
-
-interface PiSettingsLike {
-	defaultProvider?: unknown;
-	defaultModel?: unknown;
-}
-
-interface PiModelsJsonLike {
-	providers?: unknown;
-}
-
-interface PiProviderConfigLike {
-	models?: unknown;
-	modelOverrides?: unknown;
-}
-
-function modelInfoFromUnknown(value: unknown): AvailableModelInfo | undefined {
-	if (!value || typeof value !== "object" || Array.isArray(value)) return undefined;
-	const record = value as ModelLike;
-	if (typeof record.provider !== "string" || typeof record.id !== "string") return undefined;
-	return {
-		provider: record.provider,
-		id: record.id,
-		fullId: `${record.provider}/${record.id}`,
-	};
-}
-
-export function availableModelInfosFromRegistry(registry: unknown): AvailableModelInfo[] | undefined {
-	if (!registry || typeof registry !== "object" || Array.isArray(registry)) return undefined;
-	const candidate = registry as ModelRegistryLike;
-	const raw =
-		typeof candidate.getAvailable === "function"
-			? candidate.getAvailable()
-			: typeof candidate.getAll === "function"
-				? candidate.getAll()
-				: undefined;
-	if (!Array.isArray(raw)) return undefined;
-	return raw.map(modelInfoFromUnknown).filter((entry): entry is AvailableModelInfo => entry !== undefined);
-}
-
-export function modelStringFromUnknown(model: unknown): string | undefined {
-	return modelInfoFromUnknown(model)?.fullId;
-}
-
-function uniqueModelInfos(models: AvailableModelInfo[]): AvailableModelInfo[] {
-	const seen = new Set<string>();
-	return models.filter((model) => {
-		if (seen.has(model.fullId)) return false;
-		seen.add(model.fullId);
-		return true;
-	});
-}
-
-function readJsonObject(filePath: string): Record<string, unknown> | undefined {
-	try {
-		if (!fs.existsSync(filePath)) return undefined;
-		const parsed = JSON.parse(fs.readFileSync(filePath, "utf-8"));
-		return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? (parsed as Record<string, unknown>) : undefined;
-	} catch {
-		return undefined;
-	}
-}
-
-function piAgentDir(): string {
-	const envDir = process.env.PI_CODING_AGENT_DIR?.trim();
-	if (envDir) {
-		if (envDir === "~") return os.homedir();
-		if (envDir.startsWith("~/")) return path.join(os.homedir(), envDir.slice(2));
-		return envDir;
-	}
-	return path.join(os.homedir(), ".pi", "agent");
-}
-
-function settingsModelInfo(settings: PiSettingsLike | undefined): AvailableModelInfo | undefined {
-	if (typeof settings?.defaultProvider !== "string" || typeof settings.defaultModel !== "string") return undefined;
-	return {
-		provider: settings.defaultProvider,
-		id: settings.defaultModel,
-		fullId: `${settings.defaultProvider}/${settings.defaultModel}`,
-	};
-}
-
-function modelsJsonInfos(modelsJson: PiModelsJsonLike | undefined): AvailableModelInfo[] {
-	if (!modelsJson?.providers || typeof modelsJson.providers !== "object" || Array.isArray(modelsJson.providers)) return [];
-	const infos: AvailableModelInfo[] = [];
-	for (const [provider, rawConfig] of Object.entries(modelsJson.providers as Record<string, unknown>)) {
-		if (!rawConfig || typeof rawConfig !== "object" || Array.isArray(rawConfig)) continue;
-		const config = rawConfig as PiProviderConfigLike;
-		if (Array.isArray(config.models)) {
-			for (const rawModel of config.models) {
-				if (!rawModel || typeof rawModel !== "object" || Array.isArray(rawModel)) continue;
-				const id = (rawModel as { id?: unknown }).id;
-				if (typeof id === "string") infos.push({ provider, id, fullId: `${provider}/${id}` });
-			}
-		}
-		if (config.modelOverrides && typeof config.modelOverrides === "object" && !Array.isArray(config.modelOverrides)) {
-			for (const id of Object.keys(config.modelOverrides)) infos.push({ provider, id, fullId: `${provider}/${id}` });
-		}
-	}
-	return infos;
-}
-
-export function configuredModelInfosFromPiConfig(cwd?: string): AvailableModelInfo[] {
-	const agentDir = piAgentDir();
-	const globalSettings = readJsonObject(path.join(agentDir, "settings.json")) as PiSettingsLike | undefined;
-	const projectSettings = cwd ? (readJsonObject(path.join(cwd, ".pi", "settings.json")) as PiSettingsLike | undefined) : undefined;
-	const effectiveSettings = {
-		...(globalSettings ?? {}),
-		...(projectSettings ?? {}),
-	};
-	const defaultModel = settingsModelInfo(effectiveSettings);
-	return uniqueModelInfos([
-		...(defaultModel ? [defaultModel] : []),
-		...modelsJsonInfos(readJsonObject(path.join(agentDir, "models.json")) as PiModelsJsonLike | undefined),
-	]);
-}
-
-export function splitThinkingSuffix(model: string): {
-	baseModel: string;
-	thinkingSuffix: string;
-} {
-	const colonIdx = model.lastIndexOf(":");
-	if (colonIdx === -1) return { baseModel: model, thinkingSuffix: "" };
-	return {
-		baseModel: model.substring(0, colonIdx),
-		thinkingSuffix: model.substring(colonIdx),
-	};
-}
-
-export function resolveModelCandidate(
-	model: string | undefined,
-	availableModels: AvailableModelInfo[] | undefined,
-	preferredProvider?: string,
-): string | undefined {
-	if (!model) return undefined;
-	if (model.includes("/")) return model;
-	if (!availableModels || availableModels.length === 0) return model;
-
-	const { baseModel, thinkingSuffix } = splitThinkingSuffix(model);
-	const matches = availableModels.filter((entry) => entry.id === baseModel);
-	if (preferredProvider) {
-		const preferredMatch = matches.find((entry) => entry.provider === preferredProvider);
-		if (preferredMatch) return `${preferredMatch.fullId}${thinkingSuffix}`;
-	}
-	// When multiple providers share the same model id, return the raw model string.
-	// Callers should use the preferredProvider hint via resolveModelCandidate.
-	if (matches.length !== 1) {
-		// Fuzzy fallback: try to resolve via partial name matching
-		const fuzzy = fuzzyResolveModelId(baseModel, availableModels);
-		if (fuzzy) return `${fuzzy}${thinkingSuffix}`;
-		return model;
-	}
-	return `${matches[0]!.fullId}${thinkingSuffix}`;
-}
-
-const RETRYABLE_MODEL_FAILURE_PATTERNS = [
-	/rate.?limit/i,
-	/too many requests/i,
-	/\b429\b/,
-	/rate_limit_error/i,
-	/quota/i,
-	/provider.*unavailable/i,
-	/model.*unavailable/i,
-	/model.*disabled/i,
-	/model.*not found/i,
-	/unknown model/i,
-	/overloaded/i,
-	/service unavailable/i,
-	/temporar(?:ily)? unavailable/i,
-	/connection refused/i,
-	/fetch failed/i,
-	/network error/i,
-	/socket hang up/i,
-	/upstream/i,
-	/timed? out/i,
-	/timeout/i,
-	/\b502\b/,
-	/\b503\b/,
-	/\b504\b/,
-	//
-	// Provider-side 5xx / generic api_error. The pi-core retry layer already
-	// retries these (agent-session.ts matches `500|server error|internal error`),
-	// but the pi-crew MODEL FALLBACK layer must ALSO treat them as retryable so
-	// that when the provider is hard-down across all 3 provider retries, we fail
-	// over to the next configured model instead of giving up. Reported case
-	// (2026-06-17): `500 {"type":"error","error":{"type":"api_error",
-	// "message":"unknown error, 999 (1000)"}}` — a transient provider outage that
-	// should trigger the fallback chain, not abort.
-	//
-	// `api_error` is the OpenAI-compatible generic error type (vs rate_limit_error
-	// / overloaded_error / etc.) and almost always means a transient server fault.
-	//
-	// `unknown error` is the body of the generic message; `internal`/`server`
-	// catch the common phrasings. `\b500\b`/`\b501\b` catch the HTTP status in
-	// the rendered error string.
-	/\b500\b/,
-	/\b501\b/,
-	/api_error/i,
-	/unknown error/i,
-	/internal(?:_server)?[ _]error/i,
-	/server error/i,
-	/bad gateway/i,
-	//
-	// Broader retryable patterns (added 2026-06-25, FIX 2):
-	// - `/provider[_ ]?error/i`: OpenAI-compatible "Provider error" generic fault.
-	// - `/context[_ ]?length[_ ]?exceeded/i`: "context_length_exceeded" from
-	//   OpenAI/Anthropic — when the configured model is the bottleneck, a
-	//   different model in the fallback chain may have a larger window.
-	// - `/safety/i`: Anthropic safety blocks — typically retryable on a
-	//   different model in the fallback chain.
-	// - `/is[_ ]?overloaded/i`: alias to the existing `/overloaded/i` pattern
-	//   to catch phrasings like "upstream is overloaded".
-	// - `/\b408\b/`: HTTP 408 Request Timeout — transient, provider-side.
-	//
-	// Intentionally NOT added: `/bad_request/` — can mean bad input (e.g.
-	// invalid schema), which is non-retryable.
-	/provider[_ ]?error/i,
-	/context[_ ]?length[_ ]?exceeded/i,
-	/safety/i,
-	/is[_ ]?overloaded/i,
-	/\b408\b/,
-];
-
-// These patterns indicate auth/key/billing issues that will never succeed on retry.
-const NON_RETRYABLE_MODEL_FAILURE_PATTERNS = [
-	/auth(?:entication)?/i,
-	/unauthori[sz]ed/i,
-	/forbidden/i,
-	/api key/i,
-	/token expired/i,
-	/invalid key/i,
-	/billing/i,
-	/credit/i,
-];
-
-export function isRetryableModelFailure(error: string | undefined): boolean {
-	if (!error) return false;
-	// Auth / billing / invalid-key failures will never succeed on retry.
-	if (NON_RETRYABLE_MODEL_FAILURE_PATTERNS.some((pattern) => pattern.test(error))) return false;
-	return RETRYABLE_MODEL_FAILURE_PATTERNS.some((pattern) => pattern.test(error));
-}
-
-export function formatModelAttemptNote(attempt: ModelAttemptSummary, nextModel?: string): string {
-	const failure = attempt.error?.trim() || `exit ${attempt.exitCode ?? 1}`;
-	return nextModel
-		? `[fallback] ${attempt.model} failed: ${failure}. Retrying with ${nextModel}.`
-		: `[fallback] ${attempt.model} failed: ${failure}.`;
-}
-
-export function buildModelCandidates(
-	primaryModel: string | undefined,
-	fallbackModels: string[] | undefined,
-	availableModels: AvailableModelInfo[] | undefined,
-	preferredProvider?: string,
-): string[] {
-	const seen = new Set<string>();
-	const candidates: string[] = [];
-	for (const raw of [primaryModel, ...(fallbackModels ?? [])]) {
-		if (!raw) continue;
-		const normalized = resolveModelCandidate(raw.trim(), availableModels, preferredProvider);
-		if (!normalized || seen.has(normalized)) continue;
-		seen.add(normalized);
-		candidates.push(normalized);
-	}
-	return candidates;
-}
-
-function isAvailableModel(model: string, availableModels: AvailableModelInfo[] | undefined): boolean {
-	if (!availableModels || availableModels.length === 0) return true;
-	const { baseModel } = splitThinkingSuffix(model);
-	if (baseModel.includes("/")) return availableModels.some((entry) => entry.fullId === baseModel);
-	if (availableModels.some((entry) => entry.id === baseModel)) return true;
-	const fuzzy = fuzzyResolveModelId(baseModel, availableModels);
-	return fuzzy !== undefined;
-}
-
-export interface ConfiguredModelRouting {
-	requested?: string;
-	candidates: string[];
-	reason?: string;
-	/**
-	 * F7 scope gate verdict. Populated when the caller passed `scopeModelsPatterns`.
-	 * - `inScope: true` → the resolved model is inside the allowlist (or no allowlist).
-	 * - `inScope: false, source: "caller"` → caller override is out-of-scope; the
-	 *   function throws `errors.modelOutOfScope` (hard error before spawn) UNLESS
-	 *   the caller marked it as a frontmatter override (`isFrontmatterOverride: true`),
-	 *   in which case the verdict is returned for the caller to log as a warning.
-	 */
-	scopeVerdict?: import("./model-scope.ts").ModelScopeCheck;
-}
-
-export function buildConfiguredModelRouting(input: {
-	overrideModel?: string;
-	stepModel?: string;
-	teamRoleModel?: string;
-	agentModel?: string;
-	fallbackModels?: string[];
-	parentModel?: unknown;
-	modelRegistry?: unknown;
-	cwd?: string;
-	/**
-	 * F7: when set, enforce the enabledModels allowlist. Caller-supplied out-of-
-	 * scope models throw `errors.modelOutOfScope`; frontmatter-pinned out-of-scope
-	 * models are returned as a `scopeVerdict` for the caller to log.
-	 */
-	scopeModelsPatterns?: string[];
-	/**
-	 * F7: when true, the `overrideModel` (if any) is treated as a frontmatter
-	 * (agent) override rather than a per-spawn caller override — out-of-scope
-	 * is a warning, not a hard error. Used when the agent config is the
-	 * authoritative source.
-	 */
-	isFrontmatterOverride?: boolean;
-}): ConfiguredModelRouting {
-	const registryModels = availableModelInfosFromRegistry(input.modelRegistry);
-	const configModels = configuredModelInfosFromPiConfig(input.cwd);
-	const availableModels =
-		registryModels && registryModels.length > 0 ? registryModels : configModels.length > 0 ? configModels : registryModels;
-	const parentModel = modelStringFromUnknown(input.parentModel);
-	const preferredProvider = parentModel?.split("/")[0] ?? availableModels?.[0]?.provider;
-	// B3: Parent model inheritance — when agent has no model specified,
-	// inherit from parent session model before falling back to defaults.
-	const effectiveAgentModel = input.agentModel?.trim() ? input.agentModel : parentModel;
-	const requested = [input.overrideModel, input.stepModel, input.teamRoleModel, effectiveAgentModel].find((model): model is string =>
-		Boolean(model?.trim()),
-	);
-	if (availableModels && availableModels.length === 0)
-		return {
-			requested,
-			candidates: [],
-			reason: "no configured Pi models available",
-		};
-	const rawModels = availableModels
-		? [
-				input.overrideModel,
-				input.stepModel,
-				input.teamRoleModel,
-				effectiveAgentModel,
-				...(input.fallbackModels ?? []),
-				...availableModels.map((model) => model.fullId),
-			]
-		: [input.overrideModel, input.stepModel, input.teamRoleModel, effectiveAgentModel, ...(input.fallbackModels ?? []), parentModel];
-	// Fix (Round 18): when an agent has `model: false` (frontmatter) the
-	// inherited `parentModel` (= session chính's model, e.g. minimax-M3) IS the
-	// desired primary. It must NOT be filtered out by isAvailableModel — which
-	// only knows about models from models.json / registry, NOT builtin Pi models.
-	// Pin the inherited parentModel at index 0 regardless of availability.
-	const parentModelRaw = effectiveAgentModel?.trim() || undefined;
-	const configuredModels = rawModels
-		.filter((model): model is string => Boolean(model?.trim()))
-		.filter((model, idx) => {
-			if (parentModelRaw && idx === 0 && model.trim() === parentModelRaw) return true;
-			return isAvailableModel(model.trim(), availableModels);
-		});
-	const candidates = buildModelCandidates(configuredModels[0], configuredModels.slice(1), availableModels, preferredProvider);
-	const reason =
-		requested && candidates[0] && resolveModelCandidate(requested, availableModels, preferredProvider) !== candidates[0]
-			? "requested model unavailable; selected configured Pi fallback"
-			: candidates.length > 1
-				? "configured Pi fallback chain"
-				: undefined;
-	// F7 scope gate: when `scopeModelsPatterns` is configured, check the
-	// resolved model. Caller-supplied (override/step/team role) out-of-scope
-	// is a HARD ERROR (we surface it via the verdict AND throw, so spawn aborts
-	// before any cost is incurred). Frontmatter-pinned out-of-scope is a
-	// WARNING returned on the verdict for the caller to log.
-	let scopeVerdict: ConfiguredModelRouting["scopeVerdict"];
-	if (input.scopeModelsPatterns && input.scopeModelsPatterns.length > 0) {
-		const resolved = candidates[0] ?? requested;
-		const source = input.overrideModel ? "caller" : input.agentModel ? "frontmatter" : "resolved";
-		scopeVerdict = checkModelScope(resolved, input.scopeModelsPatterns, source);
-		if (!scopeVerdict.inScope && source === "caller" && !input.isFrontmatterOverride) {
-			throw errors.modelOutOfScope(resolved ?? "", input.scopeModelsPatterns);
-		}
-	}
-	return { requested, candidates, reason, scopeVerdict };
-}
-
-export function buildConfiguredModelCandidates(input: Parameters<typeof buildConfiguredModelRouting>[0]): string[] {
-	return buildConfiguredModelRouting(input).candidates;
-}

package/src/runtime/model-resolver.ts

@@ -1,126 +0,0 @@
-export interface ModelEntry {
-	id: string;
-	name: string;
-	provider: string;
-}
-
-/**
- * Core Model interface representing a resolved model instance.
- * Used by resolveModel return type to ensure proper typing.
- */
-export interface Model {
-	id: string;
-	name?: string;
-	provider?: string;
-	// Allow additional properties from the registry
-	[key: string]: unknown;
-}
-
-export interface ModelRegistry {
-	find(provider: string, modelId: string): Model | undefined;
-	getAll(): Model[];
-	getAvailable?(): Model[];
-}
-
-/**
- * Resolve a model string to a Model instance.
- * Exact match first ("provider/modelId"), then fuzzy match.
- * Returns Model on success, error message string on failure.
- */
-export function resolveModel(input: string, registry: ModelRegistry): Model | string {
-	const all = (registry.getAvailable?.() ?? registry.getAll()) as ModelEntry[];
-	const availableSet = new Set(all.map((m) => `${m.provider}/${m.id}`.toLowerCase()));
-
-	// Exact match
-	const slashIdx = input.indexOf("/");
-	if (slashIdx !== -1) {
-		const provider = input.slice(0, slashIdx);
-		const modelId = input.slice(slashIdx + 1);
-		if (availableSet.has(input.toLowerCase())) {
-			const found = registry.find(provider, modelId);
-			if (found) return found;
-		}
-	}
-
-	// Fuzzy match
-	const query = input.toLowerCase();
-	let bestMatch: ModelEntry | undefined;
-	let bestScore = 0;
-
-	for (const m of all) {
-		const id = m.id.toLowerCase();
-		const name = m.name.toLowerCase();
-		const full = `${m.provider}/${m.id}`.toLowerCase();
-
-		let score = 0;
-		if (id === query || full === query) {
-			score = 100;
-		} else if (id.includes(query) || full.includes(query)) {
-			score = 60 + (query.length / id.length) * 30;
-		} else if (name.includes(query)) {
-			score = 40 + (query.length / name.length) * 20;
-		} else if (
-			query.split(/[\s\-/]+/).every((part) => id.includes(part) || name.includes(part) || m.provider.toLowerCase().includes(part))
-		) {
-			score = 20;
-		}
-
-		if (score > bestScore) {
-			bestScore = score;
-			bestMatch = m;
-		}
-	}
-
-	if (bestMatch && bestScore >= 20) {
-		const found = registry.find(bestMatch.provider, bestMatch.id);
-		if (found) return found;
-	}
-
-	const modelList = all
-		.map((m) => `  ${m.provider}/${m.id}`)
-		.sort()
-		.join("\n");
-	return `Model not found: "${input}".\n\nAvailable models:\n${modelList}`;
-}
-
-export interface SimpleModelEntry {
-	id: string;
-	name?: string;
-	provider: string;
-}
-
-/**
- * Fuzzy-match a model query against a flat list of available models.
- * Returns the best-match fullId (provider/id) or undefined.
- */
-export function fuzzyResolveModelId(input: string, models: SimpleModelEntry[]): string | undefined {
-	const query = input.toLowerCase();
-	let bestMatch: SimpleModelEntry | undefined;
-	let bestScore = 0;
-
-	for (const m of models) {
-		const id = m.id.toLowerCase();
-		const name = (m.name ?? "").toLowerCase();
-		const full = `${m.provider}/${m.id}`.toLowerCase();
-
-		let score = 0;
-		if (id === query || full === query) {
-			score = 100;
-		} else if (id.includes(query) || full.includes(query)) {
-			score = 60 + (query.length / id.length) * 30;
-		} else if (name.includes(query)) {
-			score = 40 + (query.length / (name.length || 1)) * 20;
-		} else if (
-			query.split(/[\s\-/]+/).every((part) => id.includes(part) || name.includes(part) || m.provider.toLowerCase().includes(part))
-		) {
-			score = 20;
-		}
-
-		if (score > bestScore) {
-			bestScore = score;
-			bestMatch = m;
-		}
-	}
-
-	return bestMatch && bestScore >= 20 ? `${bestMatch.provider}/${bestMatch.id}` : undefined;
-}

package/src/runtime/model-scope.ts

@@ -1,158 +0,0 @@
-/**
- * model-scope.ts — Opt-in model-scope enforcement (F7).
- *
- * When `runtime.reliability.scopeModels` is enabled, subagent model choices
- * that fall outside the user's pi `enabledModels` allowlist are flagged:
- *   - Caller-supplied (per-spawn override / step / team role) out-of-scope
- *     → HARD ERROR to orchestrator (fail fast before spawn).
- *   - Frontmatter-pinned (AgentConfig.model) out-of-scope
- *     → WARNING + runs anyway (frontmatter is authoritative; the agent
- *     author made a deliberate choice).
- *
- * Pattern semantics match pi's `--models` CLI / `enabledModels` allowlist:
- *   - `"anthropic/claude-opus-4-5"` — exact match (case-insensitive).
- *   - `"claude-*"`, `"*sonnet*"`, `"github-copilot/*"` — glob (single `*`).
- *   - Any other string — case-insensitive substring fallback (pi's
- *     `tryMatchModel` behavior, model-resolver.ts).
- *
- * This module is pure (no I/O, no globals). Reading the actual
- * `enabledModels` from pi's settings is the caller's job (instantiate
- * `SettingsManager.create(cwd, agentDir).getEnabledModels()`).
- *
- * The toggle itself lives in `config/defaults.ts` (`reliability.scopeModels`,
- * default `false` = opt-in, fully back-compat).
- */
-
-export type ModelScopeSource = "caller" | "frontmatter" | "resolved" | "fallback";
-
-export interface ModelScopeCheck {
-	/** True when the model is in scope, or no allowlist is configured. */
-	inScope: boolean;
-	/** What the model came from. Informational; the gate decision lives in `enforce`. */
-	source: ModelScopeSource;
-	/** The model id that was checked. */
-	model: string;
-	/** The pattern(s) that matched, or undefined when no allowlist was configured. */
-	matchedPattern?: string;
-	/** Human-readable reason for out-of-scope (caller-facing when rejected). */
-	reason?: string;
-}
-
-/**
- * Convert a glob pattern with `*` wildcards into a RegExp.
- * Escape all regex meta-characters except `*`, which becomes `.*`.
- * Anchored (^...$) and case-insensitive.
- */
-export function patternToRegExp(pattern: string): RegExp {
-	const escaped = pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&");
-	return new RegExp(`${escaped.replace(/\*/g, ".*")}`, "i");
-}
-
-/**
- * Does a model id match a single allowlist pattern?
- * Semantics (in order):
- *   1. Exact case-insensitive match.
- *   2. Glob match (pattern contains `*`).
- *   3. Case-insensitive substring match (pi's fallback).
- * Returns true on first hit; false otherwise.
- */
-export function matchesModelPattern(modelId: string, pattern: string): boolean {
-	if (!modelId || !pattern) return false;
-	const id = modelId.trim();
-	const pat = pattern.trim();
-	if (!id || !pat) return false;
-	if (id.toLowerCase() === pat.toLowerCase()) return true;
-	if (pat.includes("*")) {
-		try {
-			return patternToRegExp(pat).test(id);
-		} catch {
-			return false;
-		}
-	}
-	return id.toLowerCase().includes(pat.toLowerCase());
-}
-
-/**
- * Is the model id accepted by ANY of the allowlist patterns?
- * Returns false when patterns is empty/undefined (caller treats as "no scope").
- */
-export function isModelInScope(modelId: string | undefined, patterns: readonly string[] | undefined): boolean {
-	if (!modelId || !patterns || patterns.length === 0) return false;
-	return patterns.some((p) => matchesModelPattern(modelId, p));
-}
-
-/**
- * Check a model against the allowlist and return a verdict.
- * Returns `inScope: true` with no `reason` when no allowlist is configured
- * (so callers can no-op cleanly).
- */
-export function checkModelScope(
-	modelId: string | undefined,
-	patterns: readonly string[] | undefined,
-	source: ModelScopeSource,
-): ModelScopeCheck {
-	if (!modelId) {
-		return {
-			inScope: true,
-			source,
-			model: "",
-			reason: "no model specified",
-		};
-	}
-	if (!patterns || patterns.length === 0) {
-		// No allowlist → not enforcing. The toggle is opt-in; the user hasn't
-		// configured `enabledModels` so there is nothing to enforce against.
-		return { inScope: true, source, model: modelId };
-	}
-	for (const pattern of patterns) {
-		if (matchesModelPattern(modelId, pattern)) {
-			return {
-				inScope: true,
-				source,
-				model: modelId,
-				matchedPattern: pattern,
-			};
-		}
-	}
-	return {
-		inScope: false,
-		source,
-		model: modelId,
-		reason: `model "${modelId}" is not in enabledModels allowlist (${patterns.join(", ")})`,
-	};
-}
-
-/**
- * Read the user's `enabledModels` allowlist from pi's SettingsManager.
- * Returns an empty array when the SettingsManager export is unavailable, the
- * allowlist is unset, or any error occurs (best-effort, never throws). The
- * caller should still gate on `runtime.reliability.scopeModels` — an empty
- * patterns array is a no-op (nothing to enforce against).
- *
- * @internal Only the runtime spawn layers should call this. Pure module: pure
- * function over a cwd + optional agentDir.
- */
-export async function readEnabledModelsPatterns(cwd: string, agentDir?: string): Promise<string[]> {
-	try {
-		// Match the pattern live-session-runtime.ts:428 uses to bridge to pi's
-		// SDK. SettingsManager is dynamically imported because the module
-		// shape differs across pi versions; the create() factory is the
-		// canonical, version-stable entry point.
-		// LAZY: defer dynamic import of @earendil-works/pi-coding-agent to its call site.
-		const mod = await import("@earendil-works/pi-coding-agent" as string).catch(() => null);
-		if (!mod) return [];
-		const SettingsManagerCtor = (
-			mod as {
-				SettingsManager?: {
-					create?: (cwd: string, agentDir?: string) => { getEnabledModels?: () => string[] | undefined };
-				};
-			}
-		).SettingsManager;
-		if (!SettingsManagerCtor?.create) return [];
-		const sm = SettingsManagerCtor.create(cwd, agentDir);
-		const patterns = sm.getEnabledModels?.();
-		return Array.isArray(patterns) ? patterns : [];
-	} catch {
-		return [];
-	}
-}