} from "../../pi-embedded-helpers.js";

import { countActiveToolExecutions } from "../../pi-embedded-subscribe.handlers.tools.js";

import { subscribeEmbeddedPiSession } from "../../pi-embedded-subscribe.js";

import { isCoreToolResultMediaTrustedName } from "../../pi-embedded-subscribe.tools.js";

import { createPreparedEmbeddedPiSettingsManager } from "../../pi-project-settings.js";

import {

applyPiAutoCompactionGuard,

resolveEmbeddedAgentStreamFn,

};

function collectTrustedPluginLocalMediaToolNames(params: {

tools: Array<{ name?: string }>;

}): Set<string> {

const trusted = new Set<string>();

for (const tool of params.tools) {

const toolName = tool.name?.trim();

if (!toolName) {

continue;

}

const meta = getPluginToolMeta(tool as Parameters<typeof getPluginToolMeta>[0]);

if (meta?.trustedLocalMedia === true) {

trusted.add(toolName);

}

}

return trusted;

}

function collectTrustedLocalMediaToolNames(params: {

coreBuiltinToolNames: ReadonlySet<string>;

trustedPluginToolNames: ReadonlySet<string>;

}): Set<string> {

return new Set([

...[...params.coreBuiltinToolNames].filter((toolName) =>

isCoreToolResultMediaTrustedName(toolName),

),

...params.trustedPluginToolNames,

]);

}

const MAX_BTW_SNAPSHOT_MESSAGES = 100;

const TOOL_SEARCH_CONTROL_ALLOWLIST_NAMES = [

TOOL_SEARCH_CODE_MODE_TOOL_NAME,

modelApi: params.model.api,

model: params.model,

};

const pluginMetadataSnapshot = getCurrentPluginMetadataSnapshot({

config: params.config,

env: process.env,

workspaceDir: effectiveWorkspace,

});

const tools = normalizeAgentRuntimeTools({

runtimePlan: params.runtimePlan,

tools: toolsEnabled ? toolsRaw : [],

senderE164: params.senderE164,

warn: (message) => log.warn(message),

});

const trustedPluginLocalMediaToolNames = collectTrustedPluginLocalMediaToolNames({

tools: toolsEnabled ? [...toolsRaw, ...filteredBundledTools] : [],

});

const normalizedBundledTools =

filteredBundledTools.length > 0

? normalizeAgentRuntimeTools({

cwd: effectiveWorkspace,

agentDir,

cfg: params.config,

pluginMetadataSnapshot: getCurrentPluginMetadataSnapshot({

config: params.config,

env: process.env,

workspaceDir: effectiveWorkspace,

}),

pluginMetadataSnapshot,

contextTokenBudget: params.contextTokenBudget,

});

const piAutoCompactionGuardArgs = {

cfg: params.config,

agentId: sessionAgentId,

});

// Exact raw names of every tool registered for this run, including

// bundled/plugin tools. Used as the raw-name set for the trusted local

// MEDIA: passthrough gate: a normalized alias is not sufficient — the

// emitted tool name must match an exact registration of this run.

// Exact raw names of every tool registered for this run. This remains

// available for diagnostics; local MEDIA: trust is narrower below.

const builtinToolNames = new Set(

uncompactedEffectiveTools.flatMap((tool) => {

const name = (tool.name ?? "").trim();

isPluginTool: (tool) =>

Boolean(getPluginToolMeta(tool as Parameters<typeof getPluginToolMeta>[0])),

});

const trustedLocalMediaToolNames = collectTrustedLocalMediaToolNames({

coreBuiltinToolNames,

trustedPluginToolNames: trustedPluginLocalMediaToolNames,

});

const clientToolNameConflicts = findClientToolNameConflicts({

tools: clientTools ?? [],

existingToolNames: [...coreBuiltinToolNames, ...PI_RESERVED_TOOL_NAMES],

sessionId: params.sessionId,

agentId: sessionAgentId,

builtinToolNames,

trustedLocalMediaToolNames,

internalEvents: params.internalEvents,

}),

);