pi2dsh 0.13.3 → 0.14.0

package/dist/index.d.mts

@@ -1,6 +1,6 @@
 
 import { a as PackageIdentity, i as GeneratedRuntimeManifest, n as CompatibilityLevel, o as ResolvedPiPackage, r as CompatibilityReport, s as ResourceInventory, t as CompatibilityFinding } from "./types-B9VBF8le.mjs";
-import { applyPiHost, applyPreparedPiHost, manifestForInstalled, preparePiHost } from "./host.mjs";
+import { PreparedPiHostPackage, applyPiHost, applyPreparedPiHost, manifestForInstalled, preparePiHost } from "./host.mjs";
 import { Context } from "@deepseek-ai/cordis";
 //#region src/engine.d.ts
 interface EngineConfig {
@@ -33,8 +33,38 @@ declare function discoverProfilePiPackages(profileRoot: string, options?: {
   exclude?: string[];
   warn?: (message: string) => void;
 }): Promise<DiscoveredPackage[]>;
-/** Discover a surface-owned, pre-publication Agent setup event from direct dependencies. */
-declare function discoverAgentSetupEvent(profileRoot: string): Promise<string | undefined>;
+/**
+ * The single mount path on every DSH surface: one Pi runtime per root Agent.
+ *
+ * Pi instantiates its extensions once per session; DSH's twin of that scope is
+ * the Agent with its public `agent.ctx` ("contributions are agent-local,
+ * unwind on disposal"). Mounting is driven purely by official core seams, so
+ * the same semantics hold on the TUI, web, headless, ACP and config-declared
+ * agents alike:
+ *
+ *   - `agent/created` fires on every publication path before the loop can run
+ *     a first turn; it eagerly starts that agent's mount.
+ *   - `system-prompt/assemble` (awaited waterfall, runs in every step's
+ *     preStep) gates the assembly on the mount and patches the pre-waterfall
+ *     tools snapshot from the official scoped projection `tools.schemas()` —
+ *     stock DSH collects `assembly.tools` before dispatching the waterfall,
+ *     so a mount that lands during the wait would otherwise miss turn one.
+ *   - `tools/pre-execute` (awaited waterfall) closes the same window for
+ *     direct executions that bypass assembly.
+ *
+ * `agent/session-start` deliberately is NOT the trigger: DSH documents it as a
+ * veto-less notification that cannot gate startup. The waterfalls above are
+ * the officially awaited seams, and the exact pattern of registering onto a
+ * foreign agent's ctx from a lifecycle event is what DSH's own schedule
+ * plugin ships.
+ *
+ * A mount failure never takes the Agent down: the agent keeps running as a
+ * plain DSH agent, the failure is reported loudly once, and only the Pi
+ * packages are missing — the capability-gap discipline, not a rollback.
+ */
+declare function installAgentScopedMounts(ctx: Context, preparedPackages: Promise<readonly PreparedPiHostPackage[]>, report: {
+  warn(message: string): void;
+}): void;
 /** Cordis plugin surface: `dsh plugin add pi2dsh` mounts this. */
 declare const name = "pi2dsh";
 declare const inject: string[];
@@ -114,5 +144,5 @@ declare function resolvePiPackage(source: string, cwd?: string): Promise<Resolve
  */
 declare function analyzePackage(pkg: ResolvedPiPackage): Promise<CompatibilityReport>;
 //#endregion
-export { API_RULES, CONTEXT_RULES, type CompatibilityFinding, type CompatibilityLevel, type CompatibilityReport, EVENT_RULES, type EngineConfig, type GeneratedRuntimeManifest, HOST_IMPORT_RULES, PI_AI_PACKAGES, PI_CODING_AGENT_PACKAGES, PI_TUI_PACKAGES, type PackageIdentity, type ResolvedPiPackage, type ResourceInventory, UI_CONTEXT_RULES, analyzePackage, apply, applyPiHost, applyPreparedPiHost, collectPiMcpServers, convertPiMcpConfig, discoverAgentSetupEvent, discoverProfilePiPackages, findProfileRoot, inject, manifestForInstalled, name, preparePiHost, renderMcpPatch, resolvePiPackage, ruleForApi, ruleForContextProperty, ruleForEvent, ruleForHostImport, ruleForUiContextProperty };
+export { API_RULES, CONTEXT_RULES, type CompatibilityFinding, type CompatibilityLevel, type CompatibilityReport, EVENT_RULES, type EngineConfig, type GeneratedRuntimeManifest, HOST_IMPORT_RULES, PI_AI_PACKAGES, PI_CODING_AGENT_PACKAGES, PI_TUI_PACKAGES, type PackageIdentity, type ResolvedPiPackage, type ResourceInventory, UI_CONTEXT_RULES, analyzePackage, apply, applyPiHost, applyPreparedPiHost, collectPiMcpServers, convertPiMcpConfig, discoverProfilePiPackages, findProfileRoot, inject, installAgentScopedMounts, manifestForInstalled, name, preparePiHost, renderMcpPatch, resolvePiPackage, ruleForApi, ruleForContextProperty, ruleForEvent, ruleForHostImport, ruleForUiContextProperty };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../src/engine.ts","../src/compatibility.ts","../src/mcp-config.ts","../src/source.ts","../src/index.ts"],"mappings":";;;;;UA6BiB;;EAEf;;EAEA;;;;;;;;EAQA,2BAA2B;;;iBAIb,gBAAgB;UAUtB;EACR;EACA;;;;;;;;iBAyBoB,0BACpB,qBACA;EAAW;EAAoB,QAAQ;IACtC,QAAQ;;iBA2CW,wBAAwB,sBAAsB;;cAsBvD;cACA;iBAES,MAAM,KAAK,SAAS,SAAQ,eAAoB;;;UCvJ5D;EACR,OAAO;EACP;;EAEA;;;;;;;;;UAUQ,oBAAoB;EAC5B;;cAQW;cAKA;cAKA;cAWA,mBAAmB,SAAS,eAAe,SAAS,eAAe;cAoNnE,eAAe,SAAS,eAAe;cA4BvC,kBAAkB,SAAS,eAAe;cA+B1C,WAAW,SAAS,eAAe;cA6InC,aAAa,SAAS,eAAe;iBAgHlC,WAAW,iBAAiB;iBAI5B,aAAa,gBAAgB;iBAO7B,kBAAkB,qBAAqB,uBAAuB;iBAS9D,uBAAuB,mBAAmB;iBAI1C,yBAAyB,mBAAmB;;;KCrkBvD,gBAAgB;UAEJ;EACf;EACA;EACA;EACA;EACA;EACA,MAAM;EACN;EACA;EACA,UAAU;EACV;;UAGe;EACf;EACA;;UAGe;EACf,SAAS;EACT,SAAS;EACT,UAAU;EACV;;iBA6Cc,oBAAoB,aAAa;EAA8B,SAAS,YAAY;EAAc;;iBAoElG,mBAAmB,aAAa,wBAA4B;;iBAsD5D,eAAe,QAAQ;;;iBC5EjB,iBAAiB,gBAAgB,eAAsB,QAAQ;;;;;;;;iBChH/D,eAAe,KAAK,oBAAoB,QAAQ"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/engine.ts","../src/compatibility.ts","../src/mcp-config.ts","../src/source.ts","../src/index.ts"],"mappings":";;;;;UA6BiB;;EAEf;;EAEA;;;;;;;;EAQA,2BAA2B;;;iBAIb,gBAAgB;UAUtB;EACR;EACA;;;;;;;;iBAyBoB,0BACpB,qBACA;EAAW;EAAoB,QAAQ;IACtC,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA6FK,yBACd,KAAK,SACL,kBAAkB,iBAAiB,0BACnC;EAAU,KAAK;;;cAmGJ;cACA;iBAES,MAAM,KAAK,SAAS,SAAQ,eAAoB;;;UCzR5D;EACR,OAAO;EACP;;EAEA;;;;;;;;;UAUQ,oBAAoB;EAC5B;;cAQW;cAKA;cAKA;cAYA,mBAAmB,SAAS,eAAe,SAAS,eAAe;cA+NnE,eAAe,SAAS,eAAe;cA4BvC,kBAAkB,SAAS,eAAe;cA+B1C,WAAW,SAAS,eAAe;cA6InC,aAAa,SAAS,eAAe;iBAgHlC,WAAW,iBAAiB;iBAI5B,aAAa,gBAAgB;iBAO7B,kBAAkB,qBAAqB,uBAAuB;iBAS9D,uBAAuB,mBAAmB;iBAI1C,yBAAyB,mBAAmB;;;KCjlBvD,gBAAgB;UAEJ;EACf;EACA;EACA;EACA;EACA;EACA,MAAM;EACN;EACA;EACA,UAAU;EACV;;UAGe;EACf;EACA;;UAGe;EACf,SAAS;EACT,SAAS;EACT,UAAU;EACV;;iBA6Cc,oBAAoB,aAAa;EAA8B,SAAS,YAAY;EAAc;;iBAoElG,mBAAmB,aAAa,wBAA4B;;iBAsD5D,eAAe,QAAQ;;;iBC5EjB,iBAAiB,gBAAgB,eAAsB,QAAQ;;;;;;;;iBChH/D,eAAe,KAAK,oBAAoB,QAAQ"}

package/dist/index.mjs

@@ -1,8 +1,8 @@
 
-import { r as registerVisionCompanions } from "./runtime-Dd2KhoX-.mjs";
+import { r as registerVisionCompanions } from "./runtime-Bb9Bfk4M.mjs";
 import { t as resolvePiPackage } from "./source-0sA5z08z.mjs";
 import { applyPiHost, applyPreparedPiHost, manifestForInstalled, preparePiHost } from "./host.mjs";
-import { a as PI_AI_PACKAGES, c as UI_CONTEXT_RULES, d as ruleForEvent, f as ruleForHostImport, i as HOST_IMPORT_RULES, l as ruleForApi, n as CONTEXT_RULES, o as PI_CODING_AGENT_PACKAGES, p as ruleForUiContextProperty, r as EVENT_RULES, s as PI_TUI_PACKAGES, t as API_RULES, u as ruleForContextProperty } from "./compatibility-Bz6ZXA7F.mjs";
+import { a as PI_AI_PACKAGES, c as UI_CONTEXT_RULES, d as ruleForEvent, f as ruleForHostImport, i as HOST_IMPORT_RULES, l as ruleForApi, n as CONTEXT_RULES, o as PI_CODING_AGENT_PACKAGES, p as ruleForUiContextProperty, r as EVENT_RULES, s as PI_TUI_PACKAGES, t as API_RULES, u as ruleForContextProperty } from "./compatibility-CP2tpyhg.mjs";
 import { n as convertPiMcpConfig, r as renderMcpPatch, t as collectPiMcpServers } from "./mcp-config-jmzbgdHa.mjs";
 import { readFile } from "node:fs/promises";
 import { existsSync } from "node:fs";
@@ -73,19 +73,98 @@ async function discoverProfilePiPackages(profileRoot, options = {}) {
 	}
 	return discovered;
 }
-/** Discover a surface-owned, pre-publication Agent setup event from direct dependencies. */
-async function discoverAgentSetupEvent(profileRoot) {
-	const manifest = await readProfileManifest(profileRoot);
-	const bundles = new Set(manifest.dsh?.profile?.bundles ?? []);
-	for (const name of Object.keys(manifest.dependencies ?? {})) {
-		if (!bundles.has(name)) continue;
-		const dir = resolveDependencyDir(profileRoot, name);
-		if (dir === void 0) continue;
+/**
+* The single mount path on every DSH surface: one Pi runtime per root Agent.
+*
+* Pi instantiates its extensions once per session; DSH's twin of that scope is
+* the Agent with its public `agent.ctx` ("contributions are agent-local,
+* unwind on disposal"). Mounting is driven purely by official core seams, so
+* the same semantics hold on the TUI, web, headless, ACP and config-declared
+* agents alike:
+*
+*   - `agent/created` fires on every publication path before the loop can run
+*     a first turn; it eagerly starts that agent's mount.
+*   - `system-prompt/assemble` (awaited waterfall, runs in every step's
+*     preStep) gates the assembly on the mount and patches the pre-waterfall
+*     tools snapshot from the official scoped projection `tools.schemas()` —
+*     stock DSH collects `assembly.tools` before dispatching the waterfall,
+*     so a mount that lands during the wait would otherwise miss turn one.
+*   - `tools/pre-execute` (awaited waterfall) closes the same window for
+*     direct executions that bypass assembly.
+*
+* `agent/session-start` deliberately is NOT the trigger: DSH documents it as a
+* veto-less notification that cannot gate startup. The waterfalls above are
+* the officially awaited seams, and the exact pattern of registering onto a
+* foreign agent's ctx from a lifecycle event is what DSH's own schedule
+* plugin ships.
+*
+* A mount failure never takes the Agent down: the agent keeps running as a
+* plain DSH agent, the failure is reported loudly once, and only the Pi
+* packages are missing — the capability-gap discipline, not a rollback.
+*/
+function installAgentScopedMounts(ctx, preparedPackages, report) {
+	const host = ctx;
+	const mounts = /* @__PURE__ */ new WeakMap();
+	const registry = () => {
 		try {
-			const event = JSON.parse(await readFile(join(dir, "package.json"), "utf8")).dshTui?.agentSetupEvent;
-			if (typeof event === "string" && event.length > 0) return event;
-		} catch {}
-	}
+			return host.get?.("agents");
+		} catch {
+			return;
+		}
+	};
+	const isRootAgent = (agent) => {
+		const agents = registry();
+		const roots = agents?.roots;
+		if (typeof roots !== "function") return true;
+		try {
+			return roots.call(agents).includes(agent);
+		} catch {
+			return true;
+		}
+	};
+	const ensureMount = (agent) => {
+		let mount = mounts.get(agent);
+		if (mount === void 0) {
+			const started = { ready: Promise.resolve() };
+			started.ready = preparedPackages.then(async (prepared) => {
+				if (prepared.length === 0) return;
+				try {
+					await applyPreparedPiHost(agent.ctx, prepared, agent);
+				} catch (error) {
+					started.failure = error instanceof Error ? error.message : String(error);
+					report.warn(`[pi2dsh engine] Pi packages failed to mount for this agent; it continues without them: ${started.failure}`);
+				}
+			});
+			mounts.set(agent, started);
+			mount = started;
+		}
+		return mount;
+	};
+	host.on("agent/created", ((payload) => {
+		if (isRootAgent(payload.agent)) ensureMount(payload.agent);
+	}));
+	host.on("system-prompt/assemble", (async (assembly, context, next) => {
+		const agent = context.agent;
+		if (agent !== void 0 && isRootAgent(agent)) {
+			await ensureMount(agent).ready;
+			const schemas = host.tools?.schemas;
+			if (typeof schemas === "function") {
+				const present = new Set(assembly.tools.map((tool) => tool.name));
+				for (const schema of schemas.call(host.tools, agent)) if (!present.has(schema.name)) assembly.tools.push(schema);
+			}
+		}
+		return next();
+	}));
+	host.on("tools/pre-execute", (async (exec, next) => {
+		if (exec.agent !== void 0 && isRootAgent(exec.agent)) await ensureMount(exec.agent).ready;
+		return next();
+	}));
+	preparedPackages.then(() => {
+		const agents = registry();
+		const roots = agents?.roots;
+		if (typeof roots !== "function") return;
+		for (const agent of roots.call(agents)) ensureMount(agent);
+	});
 }
 /** Cordis plugin surface: `dsh plugin add pi2dsh` mounts this. */
 const name = "pi2dsh";
@@ -108,14 +187,13 @@ async function apply(ctx, config = {}) {
 	const baseUrl = ctx.baseUrl;
 	const profileRoot = (baseUrl !== void 0 ? findProfileRoot(fileURLToPath(new URL(".", baseUrl))) : void 0) ?? findProfileRoot(dirname(fileURLToPath(import.meta.url)));
 	if (profileRoot === void 0) throw new Error("pi2dsh engine: no DSH profile root (cordis.yml + package.json) above the installed engine — is pi2dsh installed via `dsh plugin add pi2dsh`?");
-	const packages = Array.isArray(config.packages) && config.packages.length > 0 ? config.packages.map((name) => ({ name })) : await discoverProfilePiPackages(profileRoot, {
-		...Array.isArray(config.exclude) ? { exclude: config.exclude } : {},
-		warn
-	});
+	let resolvePrepared;
+	installAgentScopedMounts(ctx, new Promise((resolve) => {
+		resolvePrepared = resolve;
+	}), { warn });
 	registerVisionCompanions(ctx, config.visionCompanions);
-	let prepared;
-	if (packages.length === 0) {
-		prepared = [{
+	try {
+		await applyPreparedPiHost(ctx, [{
 			name: "pi2dsh-builtins",
 			rootUrl: new URL(".", import.meta.url),
 			manifest: {
@@ -129,20 +207,24 @@ async function apply(ctx, config = {}) {
 				skillDirs: [],
 				prompts: []
 			}
-		}];
-		info("[pi2dsh engine] no Pi packages installed in this profile yet — add one with: dsh plugin --profile <p> add <pi-package>");
-	} else {
+		}]);
+		const packages = Array.isArray(config.packages) && config.packages.length > 0 ? config.packages.map((name) => ({ name })) : await discoverProfilePiPackages(profileRoot, {
+			...Array.isArray(config.exclude) ? { exclude: config.exclude } : {},
+			warn
+		});
+		if (packages.length === 0) {
+			info("[pi2dsh engine] no Pi packages installed in this profile yet — add one with: dsh plugin --profile <p> add <pi-package>");
+			resolvePrepared([]);
+			return;
+		}
 		info(`[pi2dsh engine] preparing ${packages.length} Pi package(s): ${packages.map((pkg) => pkg.name).join(", ")}`);
-		prepared = await preparePiHost({ packages: packages.map((pkg) => ({ name: pkg.name })) }, join(profileRoot, "package.json"));
+		const prepared = await preparePiHost({ packages: packages.map((pkg) => ({ name: pkg.name })) }, join(profileRoot, "package.json"));
+		await applyPreparedPiHost(ctx, prepared, void 0, { hostAnchor: true });
+		resolvePrepared(prepared);
+	} catch (error) {
+		resolvePrepared([]);
+		throw error;
 	}
-	const agentSetupEvent = await discoverAgentSetupEvent(profileRoot);
-	if (agentSetupEvent === void 0) {
-		await applyPreparedPiHost(ctx, prepared);
-		return;
-	}
-	ctx.on(agentSetupEvent, async ({ agent, agentCtx }) => {
-		await applyPreparedPiHost(agentCtx, prepared, agent);
-	});
 }
 //#endregion
 //#region src/index.ts
@@ -152,10 +234,10 @@ async function apply(ctx, config = {}) {
 * @returns the compatibility report.
 */
 async function analyzePackage(pkg) {
-	const { analyzePackage: run } = await import("./analyzer-DBtUYKI1.mjs");
+	const { analyzePackage: run } = await import("./analyzer-DPZ8LzSt.mjs");
 	return run(pkg);
 }
 //#endregion
-export { API_RULES, CONTEXT_RULES, EVENT_RULES, HOST_IMPORT_RULES, PI_AI_PACKAGES, PI_CODING_AGENT_PACKAGES, PI_TUI_PACKAGES, UI_CONTEXT_RULES, analyzePackage, apply, applyPiHost, applyPreparedPiHost, collectPiMcpServers, convertPiMcpConfig, discoverAgentSetupEvent, discoverProfilePiPackages, findProfileRoot, inject, manifestForInstalled, name, preparePiHost, renderMcpPatch, resolvePiPackage, ruleForApi, ruleForContextProperty, ruleForEvent, ruleForHostImport, ruleForUiContextProperty };
+export { API_RULES, CONTEXT_RULES, EVENT_RULES, HOST_IMPORT_RULES, PI_AI_PACKAGES, PI_CODING_AGENT_PACKAGES, PI_TUI_PACKAGES, UI_CONTEXT_RULES, analyzePackage, apply, applyPiHost, applyPreparedPiHost, collectPiMcpServers, convertPiMcpConfig, discoverProfilePiPackages, findProfileRoot, inject, installAgentScopedMounts, manifestForInstalled, name, preparePiHost, renderMcpPatch, resolvePiPackage, ruleForApi, ruleForContextProperty, ruleForEvent, ruleForHostImport, ruleForUiContextProperty };
 
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../src/engine.ts","../src/index.ts"],"sourcesContent":["// The pi2dsh engine: ONE installed copy of the bridge that mounts every Pi\n// package the user has added to their DSH profile.\n//\n//   dsh plugin --profile p add pi2dsh              ← the engine (this plugin)\n//   dsh plugin --profile p add @kassing/pi-vision  ← plain npm dependency\n//   dsh plugin --profile p add pi-vision-tool      ← plain npm dependency\n//\n// DSH's plugin manager records only packages that declare `dsh.bundle` as\n// profile layers; everything else stays an ordinary dependency (\"a plain\n// library is fine\"). The engine reads the profile manifest's DIRECT\n// dependencies — every entry there was an explicit `dsh plugin add` — and\n// mounts each package that identifies as a Pi package, all through one\n// bridge instance: one model ledger, one command space, one upgrade unit.\n//\n// Discovery is manifest-driven, never a node_modules scan (the lesson from\n// Prettier 3 dropping directory-based plugin discovery): the dependency list\n// is the user's explicit intent, and package identification uses the same\n// Pi markers `resolvePiPackage` has always used (the `pi` manifest field,\n// with Pi's directory conventions as fallback).\n\nimport { readFile } from 'node:fs/promises'\nimport { existsSync } from 'node:fs'\nimport { dirname, join } from 'node:path'\nimport { fileURLToPath } from 'node:url'\nimport type { Context } from '@deepseek-ai/cordis'\nimport { applyPreparedPiHost, preparePiHost, type PreparedPiHostPackage } from './host.js'\nimport { registerVisionCompanions } from './runtime.js'\nimport { resolvePiPackage } from './source.js'\n\nexport interface EngineConfig {\n  /** Mount exactly these packages (skips discovery). */\n  packages?: string[]\n  /** Never mount these packages even when discovered. */\n  exclude?: string[]\n  /**\n   * Image-admission companion routes. Default: AUTOMATIC — every text-only\n   * llm route gets a \\`<route>-vision\\` companion that admits pasted images\n   * (a mounted vision extension analyzes them; without one the image is\n   * materialized to a file any image-capable tool can read). \\`false\\`\n   * turns companions off; an explicit \\`{ <route>: [modelIds] }\\` narrows.\n   */\n  visionCompanions?: false | Record<string, readonly string[]>\n}\n\n/** Locate the DSH profile root: the nearest ancestor holding cordis.yml. */\nexport function findProfileRoot(start: string): string | undefined {\n  let dir = start\n  for (;;) {\n    if (existsSync(join(dir, 'cordis.yml')) && existsSync(join(dir, 'package.json'))) return dir\n    const parent = dirname(dir)\n    if (parent === dir) return undefined\n    dir = parent\n  }\n}\n\ninterface DiscoveredPackage {\n  name: string\n  dir: string\n}\n\ninterface ProfileManifest {\n  dependencies?: Record<string, string>\n  dsh?: { profile?: { bundles?: string[] } }\n}\n\nasync function readProfileManifest(profileRoot: string): Promise<ProfileManifest> {\n  return JSON.parse(await readFile(join(profileRoot, 'package.json'), 'utf8')) as ProfileManifest\n}\n\nfunction resolveDependencyDir(profileRoot: string, name: string): string | undefined {\n  // Direct dependencies of the profile live under its node_modules by name\n  // (pnpm links them there); resolving by path needs no exports gymnastics.\n  const dir = join(profileRoot, 'node_modules', name)\n  return existsSync(join(dir, 'package.json')) ? dir : undefined\n}\n\n/**\n * The profile's direct dependencies that identify as Pi packages: not the\n * engine itself, not a `dsh.bundle` (those are DSH plugins, not Pi\n * packages), carrying either Pi's `pi` manifest field or extension sources\n * under Pi's directory conventions.\n */\nexport async function discoverProfilePiPackages(\n  profileRoot: string,\n  options: { exclude?: string[], warn?: (message: string) => void } = {},\n): Promise<DiscoveredPackage[]> {\n  const warn = options.warn ?? (() => {})\n  const excluded = new Set(options.exclude ?? [])\n  const manifest = await readProfileManifest(profileRoot)\n  const discovered: DiscoveredPackage[] = []\n  for (const name of Object.keys(manifest.dependencies ?? {})) {\n    if (name === 'pi2dsh' || excluded.has(name)) continue\n    const dir = resolveDependencyDir(profileRoot, name)\n    if (dir === undefined) {\n      warn(`[pi2dsh engine] dependency ${JSON.stringify(name)} is not installed under the profile; skipping`)\n      continue\n    }\n    let packageJson: Record<string, unknown>\n    try {\n      packageJson = JSON.parse(await readFile(join(dir, 'package.json'), 'utf8')) as Record<string, unknown>\n    } catch (error) {\n      warn(`[pi2dsh engine] cannot read ${name}/package.json (${error instanceof Error ? error.message : String(error)}); skipping`)\n      continue\n    }\n    // A dsh.bundle-declaring package is a DSH plugin layer, never a Pi package.\n    if ((packageJson.dsh as { bundle?: unknown } | undefined)?.bundle !== undefined) continue\n    if (packageJson.pi !== undefined && typeof packageJson.pi === 'object') {\n      discovered.push({ name, dir })\n      continue\n    }\n    // No `pi` field: fall back to Pi's directory conventions via the same\n    // resolver every other mount path uses (a package with zero extension\n    // sources is a plain library and stays unmounted).\n    try {\n      const pkg = await resolvePiPackage(dir)\n      try {\n        if (pkg.resources.extensions.length > 0) discovered.push({ name, dir })\n      } finally {\n        await pkg.dispose()\n      }\n    } catch {\n      // Not resolvable as a Pi package — a plain library.\n    }\n  }\n  return discovered\n}\n\n/** Discover a surface-owned, pre-publication Agent setup event from direct dependencies. */\nexport async function discoverAgentSetupEvent(profileRoot: string): Promise<string | undefined> {\n  const manifest = await readProfileManifest(profileRoot)\n  const bundles = new Set(manifest.dsh?.profile?.bundles ?? [])\n  for (const name of Object.keys(manifest.dependencies ?? {})) {\n    if (!bundles.has(name)) continue\n    const dir = resolveDependencyDir(profileRoot, name)\n    if (dir === undefined) continue\n    try {\n      const dependency = JSON.parse(await readFile(join(dir, 'package.json'), 'utf8')) as {\n        dshTui?: { agentSetupEvent?: unknown }\n      }\n      const event = dependency.dshTui?.agentSetupEvent\n      if (typeof event === 'string' && event.length > 0) return event\n    } catch {\n      // Package discovery already reports unreadable direct dependencies. A\n      // surface capability probe only decides between scoped and legacy mount.\n    }\n  }\n  return undefined\n}\n\n/** Cordis plugin surface: `dsh plugin add pi2dsh` mounts this. */\nexport const name = 'pi2dsh'\nexport const inject = ['tools', 'systemPrompt', 'commands', 'skills']\n\nexport async function apply(ctx: Context, config: EngineConfig = {}): Promise<void> {\n  // Same emission as the runtime's logger helper: the cordis logger AND the\n  // console — profile logger levels must never hide what the engine mounted.\n  const log = (ctx as unknown as { logger?: { info?(m: string): void, warn?(m: string): void } }).logger\n  const warn = (message: string): void => { log?.warn?.(message); console.warn(message) }\n  const info = (message: string): void => { log?.info?.(message); console.log(message) }\n\n  // The loader resolves plugins against the profile's baseUrl; that IS the\n  // profile root. The ancestor walk from the installed engine is the\n  // fallback for compositions without a loader (tests, hand-built hosts).\n  const baseUrl = (ctx as unknown as { baseUrl?: string }).baseUrl\n  const profileRoot = (baseUrl !== undefined ? findProfileRoot(fileURLToPath(new URL('.', baseUrl))) : undefined)\n    ?? findProfileRoot(dirname(fileURLToPath(import.meta.url)))\n  if (profileRoot === undefined) {\n    throw new Error('pi2dsh engine: no DSH profile root (cordis.yml + package.json) above the installed engine — is pi2dsh installed via `dsh plugin add pi2dsh`?')\n  }\n\n  const packages = Array.isArray(config.packages) && config.packages.length > 0\n    ? config.packages.map(name => ({ name }))\n    : await discoverProfilePiPackages(profileRoot, {\n        ...(Array.isArray(config.exclude) ? { exclude: config.exclude } : {}),\n        warn,\n      })\n  registerVisionCompanions(ctx, config.visionCompanions)\n  let prepared: PreparedPiHostPackage[]\n  if (packages.length === 0) {\n    // The host itself owns Pi's built-in provider directory and `/login`.\n    // Mount an empty internal package so those host-level capabilities exist\n    // even before the user installs their first community Pi package. Calling\n    // registerVisionCompanions alone here left a fresh engine unable to run\n    // `/login openai-codex`: DSH treated the unknown slash line as a model\n    // prompt and failed on the unrelated default provider credential.\n    prepared = [{\n      name: 'pi2dsh-builtins',\n      rootUrl: new URL('.', import.meta.url),\n      manifest: {\n        schemaVersion: 1,\n        package: { name: 'pi2dsh-builtins', version: '0.0.0', source: 'engine' },\n        extensions: [],\n        skillDirs: [],\n        prompts: [],\n      },\n    }]\n    info('[pi2dsh engine] no Pi packages installed in this profile yet — add one with: dsh plugin --profile <p> add <pi-package>')\n  } else {\n    info(`[pi2dsh engine] preparing ${packages.length} Pi package(s): ${packages.map(pkg => pkg.name).join(', ')}`)\n    prepared = await preparePiHost(\n      { packages: packages.map(pkg => ({ name: pkg.name })) },\n      join(profileRoot, 'package.json'),\n    )\n  }\n\n  const agentSetupEvent = await discoverAgentSetupEvent(profileRoot)\n  if (agentSetupEvent === undefined) {\n    // Web, headless and older TUI surfaces do not expose a pre-publication\n    // contributor seam. Preserve pi2dsh's established host-scoped behavior on\n    // those products; the per-Agent path below is an additive surface\n    // capability, never a regression for existing profiles.\n    await applyPreparedPiHost(ctx, prepared)\n    return\n  }\n\n  // dsh-TUI runs this serial event from its existing agents.create/resume\n  // setup callback, after preset composition and before DSH publishes the\n  // Agent. Every Agent therefore receives fresh Pi extension instances and\n  // owns their effects through its agentCtx; stock DSH Core needs no patch.\n  ;(ctx as unknown as {\n    on(name: string, listener: (payload: { agent: Record<string, unknown>, agentCtx: Context }) => Promise<void>): () => void\n  }).on(agentSetupEvent, async ({ agent, agentCtx }) => {\n    await applyPreparedPiHost(agentCtx, prepared, agent)\n  })\n}\n","// Engine surface: `dsh plugin add pi2dsh` resolves this entry as a cordis\n// plugin (named exports, no default — a default export would make the\n// loader discard the function-plugin namespace).\nexport { apply, inject, name, discoverAgentSetupEvent, discoverProfilePiPackages, findProfileRoot, type EngineConfig } from './engine.js'\n\n// The CLI-only analysis surface loads lazily: its static-analysis dependency\n// (the 23 MB typescript compiler, an optional peer) must never be pulled\n// into a profile that installs the ENGINE. The dynamic import below keeps\n// the analyzer in its own chunk, off the engine's load path.\nimport type { CompatibilityReport, ResolvedPiPackage } from './types.js'\n\n/**\n * Static compatibility analysis of one resolved Pi package (CLI `inspect`).\n * @param pkg - the resolved package.\n * @returns the compatibility report.\n */\nexport async function analyzePackage(pkg: ResolvedPiPackage): Promise<CompatibilityReport> {\n  const { analyzePackage: run } = await import('./analyzer.js')\n  return run(pkg)\n}\n\nexport {\n  API_RULES,\n  CONTEXT_RULES,\n  EVENT_RULES,\n  HOST_IMPORT_RULES,\n  PI_AI_PACKAGES,\n  PI_CODING_AGENT_PACKAGES,\n  PI_TUI_PACKAGES,\n  UI_CONTEXT_RULES,\n  ruleForApi,\n  ruleForContextProperty,\n  ruleForEvent,\n  ruleForHostImport,\n  ruleForUiContextProperty,\n} from './compatibility.js'\nexport { applyPiHost, applyPreparedPiHost, manifestForInstalled, preparePiHost } from './host.js'\nexport { collectPiMcpServers, convertPiMcpConfig, renderMcpPatch } from './mcp-config.js'\nexport { resolvePiPackage } from './source.js'\nexport type * from './types.js'\n"],"mappings":";;;;;;;;;;;;AA6CA,SAAgB,gBAAgB,OAAmC;CACjE,IAAI,MAAM;CACV,SAAS;EACP,IAAI,WAAW,KAAK,KAAK,YAAY,CAAC,KAAK,WAAW,KAAK,KAAK,cAAc,CAAC,GAAG,OAAO;EACzF,MAAM,SAAS,QAAQ,GAAG;EAC1B,IAAI,WAAW,KAAK,OAAO,KAAA;EAC3B,MAAM;CACR;AACF;AAYA,eAAe,oBAAoB,aAA+C;CAChF,OAAO,KAAK,MAAM,MAAM,SAAS,KAAK,aAAa,cAAc,GAAG,MAAM,CAAC;AAC7E;AAEA,SAAS,qBAAqB,aAAqB,MAAkC;CAGnF,MAAM,MAAM,KAAK,aAAa,gBAAgB,IAAI;CAClD,OAAO,WAAW,KAAK,KAAK,cAAc,CAAC,IAAI,MAAM,KAAA;AACvD;;;;;;;AAQA,eAAsB,0BACpB,aACA,UAAoE,CAAC,GACvC;CAC9B,MAAM,OAAO,QAAQ,eAAe,CAAC;CACrC,MAAM,WAAW,IAAI,IAAI,QAAQ,WAAW,CAAC,CAAC;CAC9C,MAAM,WAAW,MAAM,oBAAoB,WAAW;CACtD,MAAM,aAAkC,CAAC;CACzC,KAAK,MAAM,QAAQ,OAAO,KAAK,SAAS,gBAAgB,CAAC,CAAC,GAAG;EAC3D,IAAI,SAAS,YAAY,SAAS,IAAI,IAAI,GAAG;EAC7C,MAAM,MAAM,qBAAqB,aAAa,IAAI;EAClD,IAAI,QAAQ,KAAA,GAAW;GACrB,KAAK,8BAA8B,KAAK,UAAU,IAAI,EAAE,8CAA8C;GACtG;EACF;EACA,IAAI;EACJ,IAAI;GACF,cAAc,KAAK,MAAM,MAAM,SAAS,KAAK,KAAK,cAAc,GAAG,MAAM,CAAC;EAC5E,SAAS,OAAO;GACd,KAAK,+BAA+B,KAAK,iBAAiB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,YAAY;GAC7H;EACF;EAEA,IAAK,YAAY,KAA0C,WAAW,KAAA,GAAW;EACjF,IAAI,YAAY,OAAO,KAAA,KAAa,OAAO,YAAY,OAAO,UAAU;GACtE,WAAW,KAAK;IAAE;IAAM;GAAI,CAAC;GAC7B;EACF;EAIA,IAAI;GACF,MAAM,MAAM,MAAM,iBAAiB,GAAG;GACtC,IAAI;IACF,IAAI,IAAI,UAAU,WAAW,SAAS,GAAG,WAAW,KAAK;KAAE;KAAM;IAAI,CAAC;GACxE,UAAU;IACR,MAAM,IAAI,QAAQ;GACpB;EACF,QAAQ,CAER;CACF;CACA,OAAO;AACT;;AAGA,eAAsB,wBAAwB,aAAkD;CAC9F,MAAM,WAAW,MAAM,oBAAoB,WAAW;CACtD,MAAM,UAAU,IAAI,IAAI,SAAS,KAAK,SAAS,WAAW,CAAC,CAAC;CAC5D,KAAK,MAAM,QAAQ,OAAO,KAAK,SAAS,gBAAgB,CAAC,CAAC,GAAG;EAC3D,IAAI,CAAC,QAAQ,IAAI,IAAI,GAAG;EACxB,MAAM,MAAM,qBAAqB,aAAa,IAAI;EAClD,IAAI,QAAQ,KAAA,GAAW;EACvB,IAAI;GAIF,MAAM,QAHa,KAAK,MAAM,MAAM,SAAS,KAAK,KAAK,cAAc,GAAG,MAAM,CAGvD,CAAC,CAAC,QAAQ;GACjC,IAAI,OAAO,UAAU,YAAY,MAAM,SAAS,GAAG,OAAO;EAC5D,QAAQ,CAGR;CACF;AAEF;;AAGA,MAAa,OAAO;AACpB,MAAa,SAAS;CAAC;CAAS;CAAgB;CAAY;AAAQ;AAEpE,eAAsB,MAAM,KAAc,SAAuB,CAAC,GAAkB;CAGlF,MAAM,MAAO,IAAmF;CAChG,MAAM,QAAQ,YAA0B;EAAE,KAAK,OAAO,OAAO;EAAG,QAAQ,KAAK,OAAO;CAAE;CACtF,MAAM,QAAQ,YAA0B;EAAE,KAAK,OAAO,OAAO;EAAG,QAAQ,IAAI,OAAO;CAAE;CAKrF,MAAM,UAAW,IAAwC;CACzD,MAAM,eAAe,YAAY,KAAA,IAAY,gBAAgB,cAAc,IAAI,IAAI,KAAK,OAAO,CAAC,CAAC,IAAI,KAAA,MAChG,gBAAgB,QAAQ,cAAc,YAAY,GAAG,CAAC,CAAC;CAC5D,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,8IAA8I;CAGhK,MAAM,WAAW,MAAM,QAAQ,OAAO,QAAQ,KAAK,OAAO,SAAS,SAAS,IACxE,OAAO,SAAS,KAAI,UAAS,EAAE,KAAK,EAAE,IACtC,MAAM,0BAA0B,aAAa;EAC3C,GAAI,MAAM,QAAQ,OAAO,OAAO,IAAI,EAAE,SAAS,OAAO,QAAQ,IAAI,CAAC;EACnE;CACF,CAAC;CACL,yBAAyB,KAAK,OAAO,gBAAgB;CACrD,IAAI;CACJ,IAAI,SAAS,WAAW,GAAG;EAOzB,WAAW,CAAC;GACV,MAAM;GACN,SAAS,IAAI,IAAI,KAAK,YAAY,GAAG;GACrC,UAAU;IACR,eAAe;IACf,SAAS;KAAE,MAAM;KAAmB,SAAS;KAAS,QAAQ;IAAS;IACvE,YAAY,CAAC;IACb,WAAW,CAAC;IACZ,SAAS,CAAC;GACZ;EACF,CAAC;EACD,KAAK,wHAAwH;CAC/H,OAAO;EACL,KAAK,6BAA6B,SAAS,OAAO,kBAAkB,SAAS,KAAI,QAAO,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG;EAC9G,WAAW,MAAM,cACf,EAAE,UAAU,SAAS,KAAI,SAAQ,EAAE,MAAM,IAAI,KAAK,EAAE,EAAE,GACtD,KAAK,aAAa,cAAc,CAClC;CACF;CAEA,MAAM,kBAAkB,MAAM,wBAAwB,WAAW;CACjE,IAAI,oBAAoB,KAAA,GAAW;EAKjC,MAAM,oBAAoB,KAAK,QAAQ;EACvC;CACF;CAMC,IAEE,GAAG,iBAAiB,OAAO,EAAE,OAAO,eAAe;EACpD,MAAM,oBAAoB,UAAU,UAAU,KAAK;CACrD,CAAC;AACH;;;;;;;;AChNA,eAAsB,eAAe,KAAsD;CACzF,MAAM,EAAE,gBAAgB,QAAQ,MAAM,OAAO;CAC7C,OAAO,IAAI,GAAG;AAChB"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../src/engine.ts","../src/index.ts"],"sourcesContent":["// The pi2dsh engine: ONE installed copy of the bridge that mounts every Pi\n// package the user has added to their DSH profile.\n//\n//   dsh plugin --profile p add pi2dsh              ← the engine (this plugin)\n//   dsh plugin --profile p add @kassing/pi-vision  ← plain npm dependency\n//   dsh plugin --profile p add pi-vision-tool      ← plain npm dependency\n//\n// DSH's plugin manager records only packages that declare `dsh.bundle` as\n// profile layers; everything else stays an ordinary dependency (\"a plain\n// library is fine\"). The engine reads the profile manifest's DIRECT\n// dependencies — every entry there was an explicit `dsh plugin add` — and\n// mounts each package that identifies as a Pi package, all through one\n// bridge instance: one model ledger, one command space, one upgrade unit.\n//\n// Discovery is manifest-driven, never a node_modules scan (the lesson from\n// Prettier 3 dropping directory-based plugin discovery): the dependency list\n// is the user's explicit intent, and package identification uses the same\n// Pi markers `resolvePiPackage` has always used (the `pi` manifest field,\n// with Pi's directory conventions as fallback).\n\nimport { readFile } from 'node:fs/promises'\nimport { existsSync } from 'node:fs'\nimport { dirname, join } from 'node:path'\nimport { fileURLToPath } from 'node:url'\nimport type { Context } from '@deepseek-ai/cordis'\nimport { applyPreparedPiHost, preparePiHost, type PreparedPiHostPackage } from './host.js'\nimport { registerVisionCompanions } from './runtime.js'\nimport { resolvePiPackage } from './source.js'\n\nexport interface EngineConfig {\n  /** Mount exactly these packages (skips discovery). */\n  packages?: string[]\n  /** Never mount these packages even when discovered. */\n  exclude?: string[]\n  /**\n   * Image-admission companion routes. Default: AUTOMATIC — every text-only\n   * llm route gets a \\`<route>-vision\\` companion that admits pasted images\n   * (a mounted vision extension analyzes them; without one the image is\n   * materialized to a file any image-capable tool can read). \\`false\\`\n   * turns companions off; an explicit \\`{ <route>: [modelIds] }\\` narrows.\n   */\n  visionCompanions?: false | Record<string, readonly string[]>\n}\n\n/** Locate the DSH profile root: the nearest ancestor holding cordis.yml. */\nexport function findProfileRoot(start: string): string | undefined {\n  let dir = start\n  for (;;) {\n    if (existsSync(join(dir, 'cordis.yml')) && existsSync(join(dir, 'package.json'))) return dir\n    const parent = dirname(dir)\n    if (parent === dir) return undefined\n    dir = parent\n  }\n}\n\ninterface DiscoveredPackage {\n  name: string\n  dir: string\n}\n\ninterface ProfileManifest {\n  dependencies?: Record<string, string>\n  dsh?: { profile?: { bundles?: string[] } }\n}\n\nasync function readProfileManifest(profileRoot: string): Promise<ProfileManifest> {\n  return JSON.parse(await readFile(join(profileRoot, 'package.json'), 'utf8')) as ProfileManifest\n}\n\nfunction resolveDependencyDir(profileRoot: string, name: string): string | undefined {\n  // Direct dependencies of the profile live under its node_modules by name\n  // (pnpm links them there); resolving by path needs no exports gymnastics.\n  const dir = join(profileRoot, 'node_modules', name)\n  return existsSync(join(dir, 'package.json')) ? dir : undefined\n}\n\n/**\n * The profile's direct dependencies that identify as Pi packages: not the\n * engine itself, not a `dsh.bundle` (those are DSH plugins, not Pi\n * packages), carrying either Pi's `pi` manifest field or extension sources\n * under Pi's directory conventions.\n */\nexport async function discoverProfilePiPackages(\n  profileRoot: string,\n  options: { exclude?: string[], warn?: (message: string) => void } = {},\n): Promise<DiscoveredPackage[]> {\n  const warn = options.warn ?? (() => {})\n  const excluded = new Set(options.exclude ?? [])\n  const manifest = await readProfileManifest(profileRoot)\n  const discovered: DiscoveredPackage[] = []\n  for (const name of Object.keys(manifest.dependencies ?? {})) {\n    if (name === 'pi2dsh' || excluded.has(name)) continue\n    const dir = resolveDependencyDir(profileRoot, name)\n    if (dir === undefined) {\n      warn(`[pi2dsh engine] dependency ${JSON.stringify(name)} is not installed under the profile; skipping`)\n      continue\n    }\n    let packageJson: Record<string, unknown>\n    try {\n      packageJson = JSON.parse(await readFile(join(dir, 'package.json'), 'utf8')) as Record<string, unknown>\n    } catch (error) {\n      warn(`[pi2dsh engine] cannot read ${name}/package.json (${error instanceof Error ? error.message : String(error)}); skipping`)\n      continue\n    }\n    // A dsh.bundle-declaring package is a DSH plugin layer, never a Pi package.\n    if ((packageJson.dsh as { bundle?: unknown } | undefined)?.bundle !== undefined) continue\n    if (packageJson.pi !== undefined && typeof packageJson.pi === 'object') {\n      discovered.push({ name, dir })\n      continue\n    }\n    // No `pi` field: fall back to Pi's directory conventions via the same\n    // resolver every other mount path uses (a package with zero extension\n    // sources is a plain library and stays unmounted).\n    try {\n      const pkg = await resolvePiPackage(dir)\n      try {\n        if (pkg.resources.extensions.length > 0) discovered.push({ name, dir })\n      } finally {\n        await pkg.dispose()\n      }\n    } catch {\n      // Not resolvable as a Pi package — a plain library.\n    }\n  }\n  return discovered\n}\n\ninterface AgentScopedMount {\n  ready: Promise<void>\n  /** Set when the mount failed; the agent then runs as a plain DSH agent. */\n  failure?: string\n}\n\n/** The loose shapes of the official DSH seams this file consumes. */\ninterface AgentLike {\n  ctx: Context\n}\ninterface EngineHostContext {\n  /** Un-injected reflection access (the ctx.get('loader') idiom): the engine\n   * must not hard-depend on the agent registry — compositions without one\n   * (bare test hosts) simply have no agents to mount for. */\n  get?(name: string): unknown\n  tools?: { schemas?(scope: unknown): Array<{ name: string }> }\n  on(name: string, listener: (...args: never[]) => unknown): () => void\n}\ninterface AgentRegistryLike {\n  roots?(): AgentLike[]\n}\n\n/**\n * The single mount path on every DSH surface: one Pi runtime per root Agent.\n *\n * Pi instantiates its extensions once per session; DSH's twin of that scope is\n * the Agent with its public `agent.ctx` (\"contributions are agent-local,\n * unwind on disposal\"). Mounting is driven purely by official core seams, so\n * the same semantics hold on the TUI, web, headless, ACP and config-declared\n * agents alike:\n *\n *   - `agent/created` fires on every publication path before the loop can run\n *     a first turn; it eagerly starts that agent's mount.\n *   - `system-prompt/assemble` (awaited waterfall, runs in every step's\n *     preStep) gates the assembly on the mount and patches the pre-waterfall\n *     tools snapshot from the official scoped projection `tools.schemas()` —\n *     stock DSH collects `assembly.tools` before dispatching the waterfall,\n *     so a mount that lands during the wait would otherwise miss turn one.\n *   - `tools/pre-execute` (awaited waterfall) closes the same window for\n *     direct executions that bypass assembly.\n *\n * `agent/session-start` deliberately is NOT the trigger: DSH documents it as a\n * veto-less notification that cannot gate startup. The waterfalls above are\n * the officially awaited seams, and the exact pattern of registering onto a\n * foreign agent's ctx from a lifecycle event is what DSH's own schedule\n * plugin ships.\n *\n * A mount failure never takes the Agent down: the agent keeps running as a\n * plain DSH agent, the failure is reported loudly once, and only the Pi\n * packages are missing — the capability-gap discipline, not a rollback.\n */\nexport function installAgentScopedMounts(\n  ctx: Context,\n  preparedPackages: Promise<readonly PreparedPiHostPackage[]>,\n  report: { warn(message: string): void },\n): void {\n  const host = ctx as unknown as EngineHostContext\n  const mounts = new WeakMap<object, AgentScopedMount>()\n\n  const registry = (): AgentRegistryLike | undefined => {\n    try {\n      return host.get?.('agents') as AgentRegistryLike | undefined\n    } catch {\n      return undefined\n    }\n  }\n\n  const isRootAgent = (agent: object): boolean => {\n    // Subagents keep Pi's own sub-session semantics through the session\n    // bridge; only runtime roots receive a Pi runtime (the same distinction\n    // DSH's schedule plugin draws via agents.roots()).\n    const agents = registry()\n    const roots = agents?.roots\n    if (typeof roots !== 'function') return true\n    try {\n      return (roots.call(agents) as unknown[]).includes(agent)\n    } catch {\n      return true\n    }\n  }\n\n  const ensureMount = (agent: AgentLike): AgentScopedMount => {\n    let mount = mounts.get(agent)\n    if (mount === undefined) {\n      const started: AgentScopedMount = { ready: Promise.resolve() }\n      started.ready = preparedPackages.then(async prepared => {\n        if (prepared.length === 0) return\n        try {\n          await applyPreparedPiHost(agent.ctx, prepared, agent as unknown as Record<string, unknown>)\n        } catch (error) {\n          // Loud, once per agent; the gates resolve so the plain DSH agent\n          // keeps working. Faking success is forbidden — the message names\n          // what is missing.\n          started.failure = error instanceof Error ? error.message : String(error)\n          report.warn(`[pi2dsh engine] Pi packages failed to mount for this agent; it continues without them: ${started.failure}`)\n        }\n      })\n      mounts.set(agent, started)\n      mount = started\n    }\n    return mount\n  }\n\n  // Eager start on publication. `agent/created` reaches host-level listeners\n  // on every create/resume/config path, before the loop can open a turn.\n  host.on('agent/created', ((payload: { agent: AgentLike }) => {\n    if (isRootAgent(payload.agent)) ensureMount(payload.agent)\n  }) as never)\n\n  // Correctness boundary #1: no prompt assembly for a root agent proceeds\n  // before its Pi runtime is mounted, and the tools snapshot taken before\n  // this waterfall is reconciled against the official scoped projection.\n  host.on('system-prompt/assemble', (async (\n    assembly: { tools: Array<{ name: string }> },\n    context: { agent?: AgentLike },\n    next: () => Promise<unknown>,\n  ) => {\n    const agent = context.agent\n    if (agent !== undefined && isRootAgent(agent)) {\n      await ensureMount(agent).ready\n      const schemas = host.tools?.schemas\n      if (typeof schemas === 'function') {\n        const present = new Set(assembly.tools.map(tool => tool.name))\n        for (const schema of schemas.call(host.tools, agent)) {\n          if (!present.has(schema.name)) assembly.tools.push(schema)\n        }\n      }\n    }\n    return next()\n  }) as never)\n\n  // Correctness boundary #2: tool execution for a root agent waits for the\n  // same mount (serially awaited by the tool runtime before dispatch).\n  host.on('tools/pre-execute', (async (\n    exec: { agent?: AgentLike },\n    next: () => Promise<unknown>,\n  ) => {\n    if (exec.agent !== undefined && isRootAgent(exec.agent)) await ensureMount(exec.agent).ready\n    return next()\n  }) as never)\n\n  // Backfill: agents published before this plugin finished loading (a surface\n  // that skips the official await-the-loader pattern DSH's headless runner\n  // uses). Their next assembly still passes the gates above.\n  void preparedPackages.then(() => {\n    const agents = registry()\n    const roots = agents?.roots\n    if (typeof roots !== 'function') return\n    for (const agent of roots.call(agents)) ensureMount(agent)\n  })\n}\n\n/** Cordis plugin surface: `dsh plugin add pi2dsh` mounts this. */\nexport const name = 'pi2dsh'\nexport const inject = ['tools', 'systemPrompt', 'commands', 'skills']\n\nexport async function apply(ctx: Context, config: EngineConfig = {}): Promise<void> {\n  // Same emission as the runtime's logger helper: the cordis logger AND the\n  // console — profile logger levels must never hide what the engine mounted.\n  const log = (ctx as unknown as { logger?: { info?(m: string): void, warn?(m: string): void } }).logger\n  const warn = (message: string): void => { log?.warn?.(message); console.warn(message) }\n  const info = (message: string): void => { log?.info?.(message); console.log(message) }\n\n  // The loader resolves plugins against the profile's baseUrl; that IS the\n  // profile root. The ancestor walk from the installed engine is the\n  // fallback for compositions without a loader (tests, hand-built hosts).\n  const baseUrl = (ctx as unknown as { baseUrl?: string }).baseUrl\n  const profileRoot = (baseUrl !== undefined ? findProfileRoot(fileURLToPath(new URL('.', baseUrl))) : undefined)\n    ?? findProfileRoot(dirname(fileURLToPath(import.meta.url)))\n  if (profileRoot === undefined) {\n    throw new Error('pi2dsh engine: no DSH profile root (cordis.yml + package.json) above the installed engine — is pi2dsh installed via `dsh plugin add pi2dsh`?')\n  }\n\n  // The single mount path, before any await: gates and lifecycle listeners\n  // must exist the moment a surface can publish its first Agent. Package\n  // preparation resolves behind this promise; the gates hold each agent's\n  // first assembly until its own mount lands.\n  let resolvePrepared!: (prepared: readonly PreparedPiHostPackage[]) => void\n  const preparedPackages = new Promise<readonly PreparedPiHostPackage[]>(resolve => {\n    resolvePrepared = resolve\n  })\n  installAgentScopedMounts(ctx, preparedPackages, { warn })\n\n  registerVisionCompanions(ctx, config.visionCompanions)\n\n  try {\n    // The host half, mounted exactly once regardless of packages or agents:\n    // Pi's built-in provider directory, `/login`, and credential recovery.\n    // Without it a fresh engine cannot run `/login openai-codex`: DSH treats\n    // the unknown slash line as a model prompt and fails on the unrelated\n    // default provider credential. Community packages join the same\n    // SharedHostState (keyed on ctx.root), so host-level resources stay\n    // single-instance no matter which agent scope mounts them.\n    await applyPreparedPiHost(ctx, [{\n      name: 'pi2dsh-builtins',\n      rootUrl: new URL('.', import.meta.url),\n      manifest: {\n        schemaVersion: 1,\n        package: { name: 'pi2dsh-builtins', version: '0.0.0', source: 'engine' },\n        extensions: [],\n        skillDirs: [],\n        prompts: [],\n      },\n    }])\n\n    const packages = Array.isArray(config.packages) && config.packages.length > 0\n      ? config.packages.map(name => ({ name }))\n      : await discoverProfilePiPackages(profileRoot, {\n          ...(Array.isArray(config.exclude) ? { exclude: config.exclude } : {}),\n          warn,\n        })\n    if (packages.length === 0) {\n      info('[pi2dsh engine] no Pi packages installed in this profile yet — add one with: dsh plugin --profile <p> add <pi-package>')\n      resolvePrepared([])\n      return\n    }\n    info(`[pi2dsh engine] preparing ${packages.length} Pi package(s): ${packages.map(pkg => pkg.name).join(', ')}`)\n    const prepared = await preparePiHost(\n      { packages: packages.map(pkg => ({ name: pkg.name })) },\n      join(profileRoot, 'package.json'),\n    )\n    // Host anchors, before the per-Agent gates open: every package's\n    // HOST-level contributions (provider routes, OAuth accounts, /login,\n    // credential recovery, companions, skills) exist from engine apply — a\n    // surface with zero live Agents (web at boot) still advertises them, the\n    // first Agent's model resolution finds its routes, and routes survive\n    // Agent churn. Anchors serve no Agent; sessions belong to the per-Agent\n    // instances the gates mount.\n    await applyPreparedPiHost(ctx, prepared, undefined, { hostAnchor: true })\n    resolvePrepared(prepared)\n  } catch (error) {\n    // The gates must never hang on a failed preparation; agents keep running\n    // as plain DSH agents while the engine failure propagates loudly.\n    resolvePrepared([])\n    throw error\n  }\n}\n","// Engine surface: `dsh plugin add pi2dsh` resolves this entry as a cordis\n// plugin (named exports, no default — a default export would make the\n// loader discard the function-plugin namespace).\nexport { apply, inject, name, discoverProfilePiPackages, findProfileRoot, installAgentScopedMounts, type EngineConfig } from './engine.js'\n\n// The CLI-only analysis surface loads lazily: its static-analysis dependency\n// (the 23 MB typescript compiler, an optional peer) must never be pulled\n// into a profile that installs the ENGINE. The dynamic import below keeps\n// the analyzer in its own chunk, off the engine's load path.\nimport type { CompatibilityReport, ResolvedPiPackage } from './types.js'\n\n/**\n * Static compatibility analysis of one resolved Pi package (CLI `inspect`).\n * @param pkg - the resolved package.\n * @returns the compatibility report.\n */\nexport async function analyzePackage(pkg: ResolvedPiPackage): Promise<CompatibilityReport> {\n  const { analyzePackage: run } = await import('./analyzer.js')\n  return run(pkg)\n}\n\nexport {\n  API_RULES,\n  CONTEXT_RULES,\n  EVENT_RULES,\n  HOST_IMPORT_RULES,\n  PI_AI_PACKAGES,\n  PI_CODING_AGENT_PACKAGES,\n  PI_TUI_PACKAGES,\n  UI_CONTEXT_RULES,\n  ruleForApi,\n  ruleForContextProperty,\n  ruleForEvent,\n  ruleForHostImport,\n  ruleForUiContextProperty,\n} from './compatibility.js'\nexport { applyPiHost, applyPreparedPiHost, manifestForInstalled, preparePiHost } from './host.js'\nexport { collectPiMcpServers, convertPiMcpConfig, renderMcpPatch } from './mcp-config.js'\nexport { resolvePiPackage } from './source.js'\nexport type * from './types.js'\n"],"mappings":";;;;;;;;;;;;AA6CA,SAAgB,gBAAgB,OAAmC;CACjE,IAAI,MAAM;CACV,SAAS;EACP,IAAI,WAAW,KAAK,KAAK,YAAY,CAAC,KAAK,WAAW,KAAK,KAAK,cAAc,CAAC,GAAG,OAAO;EACzF,MAAM,SAAS,QAAQ,GAAG;EAC1B,IAAI,WAAW,KAAK,OAAO,KAAA;EAC3B,MAAM;CACR;AACF;AAYA,eAAe,oBAAoB,aAA+C;CAChF,OAAO,KAAK,MAAM,MAAM,SAAS,KAAK,aAAa,cAAc,GAAG,MAAM,CAAC;AAC7E;AAEA,SAAS,qBAAqB,aAAqB,MAAkC;CAGnF,MAAM,MAAM,KAAK,aAAa,gBAAgB,IAAI;CAClD,OAAO,WAAW,KAAK,KAAK,cAAc,CAAC,IAAI,MAAM,KAAA;AACvD;;;;;;;AAQA,eAAsB,0BACpB,aACA,UAAoE,CAAC,GACvC;CAC9B,MAAM,OAAO,QAAQ,eAAe,CAAC;CACrC,MAAM,WAAW,IAAI,IAAI,QAAQ,WAAW,CAAC,CAAC;CAC9C,MAAM,WAAW,MAAM,oBAAoB,WAAW;CACtD,MAAM,aAAkC,CAAC;CACzC,KAAK,MAAM,QAAQ,OAAO,KAAK,SAAS,gBAAgB,CAAC,CAAC,GAAG;EAC3D,IAAI,SAAS,YAAY,SAAS,IAAI,IAAI,GAAG;EAC7C,MAAM,MAAM,qBAAqB,aAAa,IAAI;EAClD,IAAI,QAAQ,KAAA,GAAW;GACrB,KAAK,8BAA8B,KAAK,UAAU,IAAI,EAAE,8CAA8C;GACtG;EACF;EACA,IAAI;EACJ,IAAI;GACF,cAAc,KAAK,MAAM,MAAM,SAAS,KAAK,KAAK,cAAc,GAAG,MAAM,CAAC;EAC5E,SAAS,OAAO;GACd,KAAK,+BAA+B,KAAK,iBAAiB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,YAAY;GAC7H;EACF;EAEA,IAAK,YAAY,KAA0C,WAAW,KAAA,GAAW;EACjF,IAAI,YAAY,OAAO,KAAA,KAAa,OAAO,YAAY,OAAO,UAAU;GACtE,WAAW,KAAK;IAAE;IAAM;GAAI,CAAC;GAC7B;EACF;EAIA,IAAI;GACF,MAAM,MAAM,MAAM,iBAAiB,GAAG;GACtC,IAAI;IACF,IAAI,IAAI,UAAU,WAAW,SAAS,GAAG,WAAW,KAAK;KAAE;KAAM;IAAI,CAAC;GACxE,UAAU;IACR,MAAM,IAAI,QAAQ;GACpB;EACF,QAAQ,CAER;CACF;CACA,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqDA,SAAgB,yBACd,KACA,kBACA,QACM;CACN,MAAM,OAAO;CACb,MAAM,yBAAS,IAAI,QAAkC;CAErD,MAAM,iBAAgD;EACpD,IAAI;GACF,OAAO,KAAK,MAAM,QAAQ;EAC5B,QAAQ;GACN;EACF;CACF;CAEA,MAAM,eAAe,UAA2B;EAI9C,MAAM,SAAS,SAAS;EACxB,MAAM,QAAQ,QAAQ;EACtB,IAAI,OAAO,UAAU,YAAY,OAAO;EACxC,IAAI;GACF,OAAQ,MAAM,KAAK,MAAM,CAAC,CAAe,SAAS,KAAK;EACzD,QAAQ;GACN,OAAO;EACT;CACF;CAEA,MAAM,eAAe,UAAuC;EAC1D,IAAI,QAAQ,OAAO,IAAI,KAAK;EAC5B,IAAI,UAAU,KAAA,GAAW;GACvB,MAAM,UAA4B,EAAE,OAAO,QAAQ,QAAQ,EAAE;GAC7D,QAAQ,QAAQ,iBAAiB,KAAK,OAAM,aAAY;IACtD,IAAI,SAAS,WAAW,GAAG;IAC3B,IAAI;KACF,MAAM,oBAAoB,MAAM,KAAK,UAAU,KAA2C;IAC5F,SAAS,OAAO;KAId,QAAQ,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;KACvE,OAAO,KAAK,0FAA0F,QAAQ,SAAS;IACzH;GACF,CAAC;GACD,OAAO,IAAI,OAAO,OAAO;GACzB,QAAQ;EACV;EACA,OAAO;CACT;CAIA,KAAK,GAAG,mBAAmB,YAAkC;EAC3D,IAAI,YAAY,QAAQ,KAAK,GAAG,YAAY,QAAQ,KAAK;CAC3D,EAAW;CAKX,KAAK,GAAG,2BAA2B,OACjC,UACA,SACA,SACG;EACH,MAAM,QAAQ,QAAQ;EACtB,IAAI,UAAU,KAAA,KAAa,YAAY,KAAK,GAAG;GAC7C,MAAM,YAAY,KAAK,CAAC,CAAC;GACzB,MAAM,UAAU,KAAK,OAAO;GAC5B,IAAI,OAAO,YAAY,YAAY;IACjC,MAAM,UAAU,IAAI,IAAI,SAAS,MAAM,KAAI,SAAQ,KAAK,IAAI,CAAC;IAC7D,KAAK,MAAM,UAAU,QAAQ,KAAK,KAAK,OAAO,KAAK,GACjD,IAAI,CAAC,QAAQ,IAAI,OAAO,IAAI,GAAG,SAAS,MAAM,KAAK,MAAM;GAE7D;EACF;EACA,OAAO,KAAK;CACd,EAAW;CAIX,KAAK,GAAG,sBAAsB,OAC5B,MACA,SACG;EACH,IAAI,KAAK,UAAU,KAAA,KAAa,YAAY,KAAK,KAAK,GAAG,MAAM,YAAY,KAAK,KAAK,CAAC,CAAC;EACvF,OAAO,KAAK;CACd,EAAW;CAKX,iBAAsB,WAAW;EAC/B,MAAM,SAAS,SAAS;EACxB,MAAM,QAAQ,QAAQ;EACtB,IAAI,OAAO,UAAU,YAAY;EACjC,KAAK,MAAM,SAAS,MAAM,KAAK,MAAM,GAAG,YAAY,KAAK;CAC3D,CAAC;AACH;;AAGA,MAAa,OAAO;AACpB,MAAa,SAAS;CAAC;CAAS;CAAgB;CAAY;AAAQ;AAEpE,eAAsB,MAAM,KAAc,SAAuB,CAAC,GAAkB;CAGlF,MAAM,MAAO,IAAmF;CAChG,MAAM,QAAQ,YAA0B;EAAE,KAAK,OAAO,OAAO;EAAG,QAAQ,KAAK,OAAO;CAAE;CACtF,MAAM,QAAQ,YAA0B;EAAE,KAAK,OAAO,OAAO;EAAG,QAAQ,IAAI,OAAO;CAAE;CAKrF,MAAM,UAAW,IAAwC;CACzD,MAAM,eAAe,YAAY,KAAA,IAAY,gBAAgB,cAAc,IAAI,IAAI,KAAK,OAAO,CAAC,CAAC,IAAI,KAAA,MAChG,gBAAgB,QAAQ,cAAc,YAAY,GAAG,CAAC,CAAC;CAC5D,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,8IAA8I;CAOhK,IAAI;CAIJ,yBAAyB,KAAK,IAHD,SAA0C,YAAW;EAChF,kBAAkB;CACpB,CAC6C,GAAG,EAAE,KAAK,CAAC;CAExD,yBAAyB,KAAK,OAAO,gBAAgB;CAErD,IAAI;EAQF,MAAM,oBAAoB,KAAK,CAAC;GAC9B,MAAM;GACN,SAAS,IAAI,IAAI,KAAK,YAAY,GAAG;GACrC,UAAU;IACR,eAAe;IACf,SAAS;KAAE,MAAM;KAAmB,SAAS;KAAS,QAAQ;IAAS;IACvE,YAAY,CAAC;IACb,WAAW,CAAC;IACZ,SAAS,CAAC;GACZ;EACF,CAAC,CAAC;EAEF,MAAM,WAAW,MAAM,QAAQ,OAAO,QAAQ,KAAK,OAAO,SAAS,SAAS,IACxE,OAAO,SAAS,KAAI,UAAS,EAAE,KAAK,EAAE,IACtC,MAAM,0BAA0B,aAAa;GAC3C,GAAI,MAAM,QAAQ,OAAO,OAAO,IAAI,EAAE,SAAS,OAAO,QAAQ,IAAI,CAAC;GACnE;EACF,CAAC;EACL,IAAI,SAAS,WAAW,GAAG;GACzB,KAAK,wHAAwH;GAC7H,gBAAgB,CAAC,CAAC;GAClB;EACF;EACA,KAAK,6BAA6B,SAAS,OAAO,kBAAkB,SAAS,KAAI,QAAO,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG;EAC9G,MAAM,WAAW,MAAM,cACrB,EAAE,UAAU,SAAS,KAAI,SAAQ,EAAE,MAAM,IAAI,KAAK,EAAE,EAAE,GACtD,KAAK,aAAa,cAAc,CAClC;EAQA,MAAM,oBAAoB,KAAK,UAAU,KAAA,GAAW,EAAE,YAAY,KAAK,CAAC;EACxE,gBAAgB,QAAQ;CAC1B,SAAS,OAAO;EAGd,gBAAgB,CAAC,CAAC;EAClB,MAAM;CACR;AACF;;;;;;;;AC3VA,eAAsB,eAAe,KAAsD;CACzF,MAAM,EAAE,gBAAgB,QAAQ,MAAM,OAAO;CAC7C,OAAO,IAAI,GAAG;AAChB"}

package/dist/{pi-ai-Dh7HUxbt.mjs → pi-ai-DpqiLdPA.mjs}

@@ -3046,7 +3046,12 @@ const bedrockConverseStreamApi = () => lazyApi(async () => await importNodeOnlyA
 const piMessagesApi = () => lazyApi(() => import("./pi-messages-D61G2tgs.mjs"));
 //#endregion
 //#region src/compat/pi-ai.ts
-/** Pi's standard stored-key → ordered environment fallback auth helper. */
+/**
+* Pi's standard stored-key → ordered environment fallback auth helper.
+* Semantics copied unchanged from Pi 0.84.1
+* (`packages/ai/src/auth/helpers.ts`, commit
+* 6f707eb36064e82af9c1320a7634f4dfad21049b).
+*/
 function envApiKeyAuth(name, envVars) {
 	return {
 		name,
@@ -3236,4 +3241,4 @@ function StringEnum(values, options = {}) {
 //#endregion
 export { isContextOverflow as $, stream as A, openAICompletionsApi as B, loadAnthropicOAuth as C, modelsAreEqual as D, loadOpenAICodexOAuth as E, googleVertexApi as F, openaiCodexOAuth as G, kimiCodingOAuth as H, googleGenerativeAIApi as I, ModelsError as J, generatePKCE as K, azureOpenAIResponsesApi as L, piMessagesApi as M, bedrockConverseStreamApi as N, registerApiProvider as O, mistralConversationsApi as P, AssistantMessageEventStream as Q, openAICodexResponsesApi as R, getSupportedThinkingLevels as S, loadKimiCodingOAuth as T, githubCopilotOAuth as U, anthropicMessagesApi as V, anthropicOAuth as W, lazyApi$1 as X, createProvider as Y, lazyStream$1 as Z, getBuiltinProviders as _, __runWithPiAiLlmBridge as a, getProvider as b, builtinProviders as c, contentText as d, isRecoverableLength as et, envApiKeyAuth as f, getBuiltinModels as g, getBuiltinModel as h, __getPiAiLlmBridge as i, unregisterApiProviders as j, registerProvider as k, clampThinkingLevel as l, getApiProviders as m, Type$1 as n, retryAssistantCall as nt, __runWithPiAiRuntime as o, getApiProvider as p, pollOAuthDeviceCodeFlow as q, __createPiAiRuntimeRegistry as r, uuidv7 as rt, __setPiAiLlmBridge as s, StringEnum as t, isRetryableAssistantError as tt, complete as u, getModel as v, loadGitHubCopilotOAuth as w, getProviders as x, getModels as y, openAIResponsesApi as z };
 
-//# sourceMappingURL=pi-ai-Dh7HUxbt.mjs.map
+//# sourceMappingURL=pi-ai-DpqiLdPA.mjs.map