@av-pi-studio/server 0.0.92 → 0.0.94

package/dist/agent/providers/pi/agent.js

@@ -18,6 +18,7 @@ export const PI_CAPABILITIES = {
     supportsReasoningStream: true,
     supportsToolInvocations: true,
     supportsSteering: true,
+    supportsExtensionUi: true,
 };
 /** Build Pi argv, appending (never replacing) the system prompt and optional `--mcp-config`. */
 export function buildPiArgs(base, opts) {
@@ -41,12 +42,54 @@ function modelIdFrom(model) {
         return rec.name;
     return undefined;
 }
+/** Dialog methods block for a client answer; every other extension UI method is fire-and-forget
+ * (docs/rpc.md § Extension UI Protocol). The single place the blocking set is encoded — a future Pi
+ * release that adds a method only ever touches this constant. */
+const DIALOG_METHODS = new Set(["select", "confirm", "input", "editor"]);
+/**
+ * Translate a raw Pi `extension_ui_request` event onto the provider-neutral UI channel
+ * (features/extension-ui-rpc.md § Provider contract extension). All Pi-specific knowledge — which
+ * methods block, surface-key namespacing, clear-by-omission, the `timeout` field name — lives here;
+ * nothing above this adapter learns Pi's vocabulary.
+ *
+ * Surface-key namespacing is mandatory, not cosmetic: Pi's own docs reuse the same key
+ * (`"my-ext"`) for both `statusKey` and `widgetKey` (rpc.md:1273,1289) because the natural pattern
+ * is an extension naming everything after itself. Un-namespaced, a status tick would silently
+ * delete that extension's own widget.
+ */
+function translateUiRequest(rec) {
+    const { type: _type, id, method, ...payload } = rec;
+    const methodName = method;
+    let surfaceKey;
+    let removed = false;
+    if (methodName === "setStatus") {
+        surfaceKey = `status:${rec.statusKey}`;
+        removed = rec.statusText === undefined;
+    }
+    else if (methodName === "setWidget") {
+        surfaceKey = `widget:${rec.widgetKey}`;
+        removed = rec.widgetLines === undefined;
+    }
+    else if (methodName === "setTitle") {
+        surfaceKey = "title";
+    }
+    return {
+        requestId: id,
+        method: methodName,
+        expectsResponse: DIALOG_METHODS.has(methodName),
+        payload,
+        ...(surfaceKey !== undefined ? { surfaceKey } : {}),
+        ...(removed ? { removed: true } : {}),
+        ...(typeof rec.timeout === "number" ? { timeoutMs: rec.timeout } : {}),
+    };
+}
 class PiAgentSession {
     transport;
     provider;
     id = randomUUID();
     capabilities = PI_CAPABILITIES;
     subscribers = new Set();
+    uiSubscribers = new Set();
     history = [];
     eventMapper = createPiEventMapper();
     modes = [];
@@ -59,17 +102,13 @@ class PiAgentSession {
         this.mode = opts.config.modeId ?? null;
         this.sessionFile = opts.sessionFile;
         transport.onEvent((raw) => {
-            // Auto-respond to extension UI dialogs so the agent never blocks waiting on a client that
-            // isn't wired for them (POC). Safe default: cancel (extension receives undefined/false).
             const rec = raw;
             if (rec?.type === "extension_ui_request") {
-                const method = rec.method;
-                if (method === "select" ||
-                    method === "confirm" ||
-                    method === "input" ||
-                    method === "editor") {
-                    this.transport.notify("extension_ui_response", { id: rec.id, cancelled: true });
-                }
+                // Forward to the daemon's UI channel — write no response here; the daemon answers, or
+                // nobody does (features/extension-ui-rpc.md § Behavior & algorithms).
+                const req = translateUiRequest(rec);
+                for (const cb of this.uiSubscribers)
+                    cb(req);
                 return;
             }
             const event = this.eventMapper.map(raw);
@@ -238,6 +277,15 @@ class PiAgentSession {
         this.transport.notify("respond_to_permission", { requestId, response });
         return Promise.resolve();
     }
+    onUiRequest(cb) {
+        this.uiSubscribers.add(cb);
+        return () => this.uiSubscribers.delete(cb);
+    }
+    /** Body spread first, `id` stamped last — a response containing an `id`/`type` key cannot
+     *  redirect which dialog it resolves (features/extension-ui-rpc.md § Public contract). */
+    respondToUi(providerRequestId, response) {
+        this.transport.notify("extension_ui_response", { ...response, id: providerRequestId });
+    }
     describePersistence() {
         return {
             provider: this.provider,

package/dist/daemon/bootstrap.js

@@ -25,6 +25,8 @@ import { createPasswordAuth, resolvePasswordHash } from "../auth/password-auth.j
 import { expandHome } from "../files/resolve-path.js";
 import { loadConfig } from "../config/daemon-config.js";
 import { createDaemonLogger } from "../logging/logger.js";
+import { registerAgentUiHandlers } from "../agent/agent-ui/agent-ui-rpc.js";
+import { AgentUiService } from "../agent/agent-ui/agent-ui-service.js";
 import { AgentManager } from "../agent/agent-manager.js";
 import { AgentService, getTimeline } from "../agent/agent-service.js";
 import { SessionOperationsService } from "../agent/session-operations.js";
@@ -32,6 +34,10 @@ import { SlashCommandOperationsService } from "../agent/slash-command-operations
 import { registerTimelineHandler } from "../agent/timeline-rpc.js";
 import { PermissionService } from "../agent/permissions.js";
 import { ProviderRegistry, resolveProviderClient } from "../agent/provider-registry.js";
+import { resolvePiAuthPaths } from "../agent/pi-home.js";
+import { createPiAuthRuntime } from "../agent/provider-auth/pi-auth-runtime.js";
+import { ProviderAuthService } from "../agent/provider-auth/provider-auth-service.js";
+import { registerProviderAuthHandlers } from "../agent/provider-auth/provider-auth-rpc.js";
 import { saveAgent, loadAllAgents } from "../persistence/entity-stores.js";
 import { FileExplorerService } from "../files/file-explorer.js";
 import { FileTransferService } from "../files/file-transfer.js";
@@ -173,12 +179,6 @@ export function startDaemon(opts) {
     });
     // ── Real provider resolution (pi spawns `pi --mode rpc`; mock is opt-in) ─────
     const resolveClient = (provider) => resolveProviderClient(provider, config, { logger });
-    // ── Disk-persisted agent manager (recovers agents on boot) ───────────────────
-    const manager = new AgentManager({
-        home,
-        saveAgent: (record) => saveAgent(home, record),
-        loadAllAgents: () => loadAllAgents(home),
-    });
     // ── Broadcast helper ─────────────────────────────────────────────────────────
     // See `wrapSessionEnvelope` above for the full rationale.
     const broadcast = (sessions, message) => {
@@ -196,13 +196,26 @@ export function startDaemon(opts) {
     const relayCapabilityStore = createInMemoryCapabilityStore();
     const sessionsHolder = { sessions: [] };
     const getActiveSessions = () => [...sessionsHolder.sessions, ...relaySessions];
+    // ── Extension UI bridge (features/extension-ui-rpc.md) — constructed before the manager so
+    // `onSessionAttached` below can close over it.
+    const agentUiService = new AgentUiService({ broadcast, getActiveSessions, logger });
+    // ── Disk-persisted agent manager (recovers agents on boot) ───────────────────
+    const manager = new AgentManager({
+        home,
+        saveAgent: (record) => saveAgent(home, record),
+        loadAllAgents: () => loadAllAgents(home),
+        onSessionAttached: (agentId, session) => agentUiService.attach(agentId, session),
+        logger,
+    });
     // Forward archive/delete lifecycle events to every connected client (multi-tab/multi-client
     // sync) — `agent_update` for status changes is already broadcast per-call-site; these two are
-    // manager-internal and only reach clients via this subscription.
+    // manager-internal and only reach clients via this subscription. Also sweeps the extension-UI
+    // bridge: every pending dialog and retained surface for the agent is cancelled/dropped.
     manager.subscribe((event) => {
         if (event.type === "agent_archived" || event.type === "agent_deleted") {
             logger.info({ agentId: event.agentId }, event.type.replace("_", " "));
             broadcast(getActiveSessions(), { type: "session", message: event });
+            agentUiService.sweep(event.agentId, "aborted");
         }
     });
     const registry = new HandlerRegistry(logger);
@@ -226,6 +239,7 @@ export function startDaemon(opts) {
     registerTimelineHandler(registry, { manager, resolveClient });
     const permissionService = new PermissionService({ manager, broadcast });
     permissionService.registerHandlers(registry, getActiveSessions);
+    registerAgentUiHandlers(registry, { service: agentUiService, logger });
     // ── Directory listing (agents) ────────────────────────────────────────────────
     registry.register("list_agents_request", (ctx) => ({
         type: "list_agents_response",
@@ -393,6 +407,15 @@ export function startDaemon(opts) {
     const fileWatchService = new FileWatchService({ logger });
     registerFileWatchHandlers(registry, { fileWatchService, subscriptions, logger });
     registerExtensionsHandlers(registry, { service: extensionsService, logger: extensionsLogger });
+    // ── Provider auth: remote-driven Pi login flows (sprint-055) ─────────────────
+    const providerAuthLogger = logger.child({ component: "provider-auth" });
+    const providerAuthRuntime = createPiAuthRuntime(resolvePiAuthPaths(config));
+    const providerAuthService = new ProviderAuthService({
+        runtime: providerAuthRuntime,
+        logger: providerAuthLogger,
+        subscriptions,
+    });
+    registerProviderAuthHandlers(registry, { providerAuthService, logger: providerAuthLogger });
     // Simple file diff RPC for the POC UI (returns unified diff for a single file). Untracked
     // (brand-new) files have no git-tracked "before" state, so a plain `git diff` against them is
     // always empty — git only diffs a path once it's in the index or committed. Fall back to

package/dist/daemon/dev-bootstrap.d.ts

@@ -1,4 +1,5 @@
 import type { Server as HttpServer } from "node:http";
+import { AgentManager } from "../agent/agent-manager.js";
 import { type Logger } from "../logging/logger.js";
 export interface DevBootstrapOptions {
     host: string;
@@ -19,6 +20,11 @@ export interface DevBootstrapHandle {
     httpServer: HttpServer;
     serverId: string;
     logger: Logger;
+    /** Exposed for tests only (e.g. sprint-066/task-004's daemon-level extension-UI test): lets a
+     *  test reach a created agent's live `MockAgentSession` to script a UI dialog via
+     *  `emitUiRequest` — there is no WS RPC for that, by design (a real Pi process is what would
+     *  normally emit these). Not part of the RPC surface. */
+    manager: AgentManager;
     close(): Promise<void>;
 }
 export declare function startDevDaemon(opts: DevBootstrapOptions): DevBootstrapHandle;

package/dist/daemon/dev-bootstrap.js

@@ -13,6 +13,8 @@ import { expandHome } from "../files/resolve-path.js";
 import { createHttpServer } from "../http/http-server.js";
 import { createWebSocketServer } from "../ws/ws-server.js";
 import { HandlerRegistry, routeTextFrame } from "../ws/router.js";
+import { registerAgentUiHandlers } from "../agent/agent-ui/agent-ui-rpc.js";
+import { AgentUiService } from "../agent/agent-ui/agent-ui-service.js";
 import { AgentManager } from "../agent/agent-manager.js";
 import { AgentService } from "../agent/agent-service.js";
 import { SessionOperationsService } from "../agent/session-operations.js";
@@ -28,19 +30,6 @@ import { wrapSessionEnvelope } from "./bootstrap.js";
 export function startDevDaemon(opts) {
     const serverId = opts.serverId ?? randomUUID();
     const logger = opts.logger ?? createDaemonLogger(undefined);
-    // ── In-memory agent manager (no disk persistence in dev mode) ──────────────
-    const agentsById = new Map();
-    const manager = new AgentManager({
-        home: "/tmp/pi-studio-dev",
-        saveAgent: async (record) => {
-            agentsById.set(record.id, record);
-        },
-        loadAllAgents: async () => [...agentsById.values()],
-        deleteAgent: async (_cwd, id) => agentsById.delete(id),
-    });
-    // ── Provider resolution: mock only in dev ───────────────────────────────────
-    const mockClient = createMockClient({ turnDelayMs: opts.mockTurnDelayMs });
-    const resolveClient = (_provider) => mockClient;
     // ── Broadcast helper ─────────────────────────────────────────────────────────
     // See `bootstrap.ts`'s `wrapSessionEnvelope` for the full rationale.
     const broadcast = (sessions, message) => {
@@ -58,11 +47,34 @@ export function startDevDaemon(opts) {
     // mutable holder so they can be registered before the WS server exists.
     const sessionsHolder = { sessions: [] };
     const getActiveSessions = () => sessionsHolder.sessions;
+    // ── Extension UI bridge (features/extension-ui-rpc.md) — constructed before the manager so
+    // `onSessionAttached` below can close over it. Registered here (unlike production-only
+    // `provider_auth`/`file_watch`): the mock provider is this family's designated producer, and the
+    // dev daemon is mock-only, so a UI family unexercisable here would be untestable exactly where a
+    // sibling UI scope needs to develop against it.
+    const agentUiService = new AgentUiService({ broadcast, getActiveSessions, logger });
+    // ── In-memory agent manager (no disk persistence in dev mode) ──────────────
+    const agentsById = new Map();
+    const manager = new AgentManager({
+        home: "/tmp/pi-studio-dev",
+        saveAgent: async (record) => {
+            agentsById.set(record.id, record);
+        },
+        loadAllAgents: async () => [...agentsById.values()],
+        deleteAgent: async (_cwd, id) => agentsById.delete(id),
+        onSessionAttached: (agentId, session) => agentUiService.attach(agentId, session),
+        logger,
+    });
+    // ── Provider resolution: mock only in dev ───────────────────────────────────
+    const mockClient = createMockClient({ turnDelayMs: opts.mockTurnDelayMs });
+    const resolveClient = (_provider) => mockClient;
     // Forward archive/delete lifecycle events to every connected client (see bootstrap.ts's
-    // production twin for the full rationale).
+    // production twin for the full rationale). Also sweeps the extension-UI bridge: every pending
+    // dialog and retained surface for the agent is cancelled/dropped on archive or delete.
     manager.subscribe((event) => {
         if (event.type === "agent_archived" || event.type === "agent_deleted") {
             broadcast(getActiveSessions(), { type: "session", message: event });
+            agentUiService.sweep(event.agentId, "aborted");
         }
     });
     // ── Handler registry ────────────────────────────────────────────────────────
@@ -86,6 +98,7 @@ export function startDevDaemon(opts) {
     registerTimelineHandler(registry, { manager, resolveClient });
     const permissionService = new PermissionService({ manager, broadcast });
     permissionService.registerHandlers(registry, getActiveSessions);
+    registerAgentUiHandlers(registry, { service: agentUiService, logger });
     // ── list_agents_request: minimal directory listing (not in scope elsewhere) ─
     registry.register("list_agents_request", (ctx) => {
         const agents = manager.list().map((m) => ({
@@ -289,6 +302,7 @@ export function startDevDaemon(opts) {
         httpServer,
         serverId,
         logger,
+        manager,
         close: async () => {
             logger.info("dev daemon shutting down");
             await wsHandle.close();

package/dist/daemon/index.d.ts

@@ -13,4 +13,5 @@ export declare function createDaemonRuntimeInfo(input?: {
     mode?: "production" | "development";
 }): DaemonRuntimeInfo;
 export * from "./bootstrap.js";
+export * from "./dev-bootstrap.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/daemon/index.js

@@ -20,4 +20,8 @@ export function createDaemonRuntimeInfo(input = {}) {
 }
 // Production daemon bootstrap: startDaemon(), DaemonOptions, DaemonHandle, wrapSessionEnvelope().
 export * from "./bootstrap.js";
+// Dev daemon bootstrap (mock provider, in-memory): reachable from outside the package so
+// cross-package E2E (e.g. packages/cli's extension-UI SDK test, sprint-067/task-004) can host a
+// real dev daemon without a second, duplicated bootstrap.
+export * from "./dev-bootstrap.js";
 //# sourceMappingURL=index.js.map

package/dist/extensions/curated-packs.js

@@ -14,6 +14,9 @@ export const CURATED_PACKS = {
             { source: "npm:pi-web-access", addedIn: "0.0.73" },
             // Powerline-style status bar.
             { source: "npm:pi-powerline-footer", addedIn: "0.0.73" },
+            // Structured questionnaire tool: typed multiple-choice/free-text prompts instead of the
+            // model guessing when it lacks information it should ask for.
+            { source: "npm:@juicesharp/rpiv-ask-user-question", addedIn: "0.0.93" },
         ],
     },
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@av-pi-studio/server",
-  "version": "0.0.92",
+  "version": "0.0.94",
   "bin": {
     "pi-studio-daemon": "dist/daemon/main.js"
   },
@@ -24,9 +24,9 @@
     "clean": "rm -rf dist *.tsbuildinfo"
   },
   "dependencies": {
-    "@av-pi-studio/highlight": "^0.0.92",
-    "@av-pi-studio/protocol": "^0.0.92",
-    "@av-pi-studio/relay": "^0.0.92",
+    "@av-pi-studio/highlight": "^0.0.94",
+    "@av-pi-studio/protocol": "^0.0.94",
+    "@av-pi-studio/relay": "^0.0.94",
     "@earendil-works/pi-coding-agent": "^0.84.1",
     "@xterm/headless": "^6.0.0",
     "bcryptjs": "^3.0.3",