pi-session-query

This module is primarily a local JSONL session query/summarization tool, but it also functions as a Python “query runner” by executing caller-supplied code via exec() in an unsandboxed environment. While there is no direct evidence of covert malware in the fragment itself (no network/exfiltration logic, no file corruption, no obvious credential theft), the exec sink makes the package highly risky in any supply-chain or automation scenario where an attacker could influence the provided script/inline code/stdin or otherwise affect what code gets executed. Optional toon_format import adds additional behavioral variability but is not shown to be malicious within this file.