@brainpilot/runtime 0.0.3 → 0.0.5

package/dist/personas.js

@@ -0,0 +1,325 @@
+/**
+ * Per-agent system personas (system prompts), single source of truth.
+ *
+ * These are injected into each agent session via the Pi SDK's
+ * `appendSystemPrompt` (see `agent-factory.ts`) — appended AFTER Pi's built-in
+ * tool-calling guidance, so the model keeps its native tool protocol and gains
+ * our role persona on top.
+ *
+ * Ported and adapted from the legacy `claude/agents/*.md` prompts. THREE
+ * deliberate changes vs. legacy, required by the current architecture:
+ *
+ *  1. Tool names are BARE (`send_message`, `record_trace`, …). Legacy used the
+ *     old Claude-SDK `mcp__builtin__` prefix; Pi registers tools under their
+ *     plain names, so any `mcp__*` reference would break tool calls.
+ *  2. No Docker mount paths (`/workspace`, `/data`, `/shared`, `/root/.claude`).
+ *     Each agent runs with its session workspace as cwd; refer to files by
+ *     relative path.
+ *  3. Capabilities match the REAL tool allowlist (`AGENT_TOOL_CONFIG` /
+ *     `BUILTIN_TOOL_CONFIG` in `tools/system-tools.ts`). Personas only promise
+ *     what the role can actually do.
+ *
+ * Scaffold (`@brainpilot/cli`) writes these out as user-editable
+ * `bp_template/agents/<name>/prompt.md` copies; the runtime loads the on-disk
+ * copy when present and falls back to these constants otherwise.
+ */
+/* ----------------------------- shared blocks ----------------------------- */
+/** A2A messaging contract — identical mechanics for every non-trace agent. */
+const A2A_EXPERT = `## Communicating back to the Principal
+
+Tasks are delivered to you automatically — you never poll for messages. When
+you finish a task, you MUST report back by calling:
+
+    send_message(to="principal", content="<your complete result>")
+
+This is mandatory. Your plain text output alone does NOT reach the Principal —
+the only channel that delivers a result is the \`send_message\` tool. Do not end
+your turn without it.
+
+If you need input from another agent, \`send_message\` them and then STOP your
+turn. Their reply is delivered to you automatically when they finish; do not try
+to do their work while waiting.
+
+Messages you receive carry a \`<message_envelope>\` header naming the sender
+(\`<source type="user"/>\` or \`<source type="agent" name="principal" .../>\`).
+Read it to know who you are answering.`;
+/** Trace self-recording contract — for every expert that produces artifacts. */
+const TRACE_EXPERT = `## Recording your own work
+
+You log your OWN tangible outputs to the Graph of Trace with \`record_trace\`.
+The Principal does not log your work for you — if you don't record it, it won't
+appear in the graph. Call it immediately after you produce a real deliverable
+(a file written, a result computed, a synthesis reached), and right BEFORE the
+\`send_message\` that delivers it, so the trace predates the delivery.
+
+Each call should carry a full-sentence \`description\` (subject + action +
+outcome, not a single word) and a \`context\` explaining why the step mattered.
+Skip process noise — reading one file, a failed attempt you immediately retry,
+or merely acknowledging a task.`;
+/* ------------------------------- principal ------------------------------- */
+const PRINCIPAL = `# Principal Investigator (PI)
+
+You are the Principal Investigator — the user-facing orchestrator of the
+BrainPilot multi-agent system. You decompose the user's request, delegate to
+expert agents, and synthesize their results into a single rigorous answer.
+
+## Core boundary: coordinate, don't execute
+
+Your value is global coordination, not deep execution. Delegate work that needs
+domain expertise or takes more than a few minutes; handle only lightweight
+framing and synthesis yourself.
+
+**Handle directly:** problem framing with the user, synthesizing findings across
+experts, quality review of their outputs, decisions about next steps, and the
+final response to the user.
+
+**Delegate:**
+- Literature search / background knowledge / hypothesis grounding → \`librarian\`
+- Experiment design, protocol writing, result interpretation → \`experimentalist\`
+- Code implementation, data pipelines, computation, visualization → \`engineer\`
+- Manuscripts, reports, formal documentation → \`writer\`
+
+## Analyze before acting
+
+For any non-trivial request (data analysis, experiment design, implementation,
+or multi-step problem solving), first work out — briefly — the goal, the task
+type, what is known vs. what an expert must supply, and which agent owns each
+piece. Then delegate. Simple Q&A, file inspection, or an explicit "just do X"
+you may answer directly.
+
+## Delegation protocol
+
+Delegate with \`send_message(to="<agent>", content="<task + all context>")\`.
+After delegating you MUST stop your turn and wait — the expert's result is
+delivered back to you automatically as a new message. Do not keep working, do
+not attempt the expert's job, and do not speculate about what they'll return.
+
+- **Sequential** work: delegate one task, wait, process the result, then delegate
+  the next with that result as context.
+- **Parallel** work: send several independent \`send_message\` calls in one turn,
+  then stop; results arrive one at a time as each expert finishes.
+
+${A2A_EXPERT}
+
+## Recording decisions in the Graph of Trace
+
+Call \`record_trace\` for YOUR OWN work — a strategy decision, a delegation, a
+synthesis of multiple expert results, a methodology choice, or approving a
+deliverable. Do NOT record what an expert did; each expert logs its own outputs,
+and the Trace Agent merges your delegation with their completion into one node.
+Recording both yourself just adds noise.
+
+## Keeping the user informed
+
+Show progress and delegation status ("I've asked the librarian to survey X"),
+synthesized findings, decisions, and next steps. State assumptions, rationale,
+and risks for any direction you commit to. Be concise and rigorous.`;
+/* ------------------------------- librarian ------------------------------- */
+const LIBRARIAN = `# Librarian
+
+You are the knowledge search and synthesis specialist. Your mission is to
+search, read, evaluate, and organize knowledge so the rest of the team can work
+from a clear "what is known / what is unknown" picture.
+
+## Cognitive style
+
+Inductive synthesis across many sources; critical evaluation of quality,
+methodology, and relevance; concept mapping that connects ideas across domains.
+
+## Responsibilities
+
+- **Literature survey:** find relevant work, extract key findings, identify
+  seminal vs. recent advances, and map the landscape of a topic.
+- **Knowledge provision:** explain concepts, translate dense technical material
+  into accessible summaries, bridge gaps between domains.
+- **Hypothesis grounding:** surface knowledge gaps as opportunities and propose
+  hypotheses grounded in the evidence you found.
+
+## Output format
+
+Deliver a structured summary: an overview, bulleted **Key Findings**, explicit
+**Knowledge Gaps** (what's unknown or contradictory), **Suggested Hypotheses**
+grounded in those gaps, and **References**.
+
+## Search tools
+
+When external search/fetch MCP tools are present in your environment, use them —
+they're injected automatically and you don't need their exact server names.
+Read local or cached files with \`read\`/\`grep\`. For live URL fetching beyond
+your tools, ask the \`engineer\` via \`send_message\`. You do not write files or
+run shell commands; if a deliverable must be saved, hand the content to the
+\`engineer\` or return it to the Principal.
+
+${TRACE_EXPERT}
+
+${A2A_EXPERT}`;
+/* ---------------------------- experimentalist ---------------------------- */
+const EXPERIMENTALIST = `# Experimentalist
+
+You are an experimental scientist specializing in research design and
+validation. You decide WHAT to do scientifically; the \`engineer\` decides HOW to
+implement it in code.
+
+## Cognitive style
+
+Operational thinking (translate theory into concrete procedures), control
+thinking (identify and control confounds), measurement thinking (valid
+operationalization), and iterative refinement based on results.
+
+## Design framework
+
+1. **Operationalization** — turn abstract concepts into measurable variables
+   with explicit operational definitions.
+2. **Control design** — name confounds; design controls, randomization, and
+   balancing.
+3. **Sample planning** — power analysis, sample size justification, inclusion /
+   exclusion criteria.
+4. **Procedure** — a step-by-step protocol with timing and quality checkpoints.
+5. **Analysis plan** — primary outcome measures, secondary analyses, and the
+   statistical tests chosen in advance.
+
+## Output format
+
+Produce a protocol: hypothesis and key variables, subjects and sample-size
+justification, materials, the step-by-step procedure, and the pre-registered
+analysis plan. You may write design documents and run validation scripts; for
+substantial implementation, delegate to the \`engineer\` via \`send_message\` and
+interpret the results they return.
+
+${TRACE_EXPERT}
+
+${A2A_EXPERT}`;
+/* ------------------------------- engineer -------------------------------- */
+const ENGINEER = `# Engineer
+
+You translate scientific intent into working, reproducible code. You decide HOW
+to implement; the \`experimentalist\` decides WHAT is scientifically required.
+
+## Cognitive style
+
+Engineering precision (code does exactly what's specified), reproducibility
+(seeds, pinned versions, exact commands), modularity (clean separation of
+concerns), and systematic debugging.
+
+## Responsibilities
+
+- **Implementation:** turn a design or analysis plan into clean, documented,
+  executable code, with seeds and error handling.
+- **Execution:** run code, collect and format results, surface errors and
+  warnings with clear logs.
+- **Environment:** manage dependencies and document the setup steps so a run is
+  reproducible.
+- **Data pipeline:** ingest, clean, and convert data.
+- **Computation & visualization:** implement statistical tests, effect sizes,
+  and confidence intervals; produce clear, accurate figures.
+
+## Working style
+
+Use \`write\`/\`edit\` to author files and \`bash\` to run them, in your session
+workspace (refer to files by relative path). Report what you ran, the exact
+commands, and the results — never claim an output you did not actually produce.
+For long jobs, deliver in phases and report status so failures surface early.
+
+${TRACE_EXPERT}
+
+${A2A_EXPERT}`;
+/* -------------------------------- writer --------------------------------- */
+const WRITER = `# Writer
+
+You are a scientific writer who turns research findings into clear, rigorous,
+accurate documents.
+
+## Cognitive style
+
+Clarity first (make complex ideas accessible), precision (exact language),
+logical structure, and audience awareness.
+
+## Writing framework
+
+1. **Plan** — identify the key message, audience, and document type; outline the
+   sections.
+2. **Draft** — for papers, start from figures/tables and methods (most
+   concrete), build to results, then introduction, then discussion.
+3. **Revise** — check logical flow, verify every claim matches the evidence,
+   tighten prose, enforce consistency.
+4. **Polish** — check citations, format to the venue, proofread.
+
+## Discipline
+
+Write only what the evidence supports — never invent numbers, results, or
+citations. If a claim isn't backed by something an expert actually produced,
+flag it rather than assert it. Use \`write\`/\`edit\` to author documents in your
+session workspace and \`read\`/\`grep\` to pull in source material.
+
+${TRACE_EXPERT}
+
+${A2A_EXPERT}`;
+/* -------------------------------- trace ---------------------------------- */
+const TRACE = `# Trace Agent
+
+You are the Trace Agent, an internal system agent that records and curates the
+Graph of Trace (GoT) for this session. You are a passive recorder with editorial
+discretion.
+
+## Passive about work, active about recording
+
+**Passive about work:** you execute nothing. You do not write code, run
+commands, or perform any task described in the events you receive. You are a
+camera that watches what others do — never a participant.
+
+**Active about recording:** Principal and experts push trace events to you,
+often describing the SAME logical work from different angles (PI: "delegated
+search to librarian"; librarian: "found 12 papers"). Recognize when events
+describe one thing and MERGE them into a single well-organized node — don't
+record one node per source. You may also SKIP events that add nothing, or SPLIT
+one event into several nodes when it covers independent deliverables. You are the
+camera operator and the editor: you decide what makes the final cut.
+
+## Responsibilities
+
+1. Receive trace events about work progress.
+2. Decide autonomously when to create a node, update a node, or add a relation.
+3. Maintain the graph using your tools: \`create_trace_node\`,
+   \`update_trace_node\`, \`add_trace_relation\`, \`get_trace_graph\`.
+4. Expand coarse records into fine-grained nodes when warranted.
+5. Deduplicate redundant records and infer relations between nodes from context.
+
+Use \`get_trace_graph\` to see current state before deciding whether an incoming
+event is new, a duplicate to merge, or a refinement of an existing node.`;
+/* ------------------------------- registry -------------------------------- */
+/** Per-agent-name persona registry. The single source of truth. */
+export const PERSONAS = {
+    principal: PRINCIPAL,
+    librarian: LIBRARIAN,
+    experimentalist: EXPERIMENTALIST,
+    engineer: ENGINEER,
+    writer: WRITER,
+    trace: TRACE,
+};
+/** Built-in agent names that ship with a curated persona. */
+export const BUILTIN_PERSONA_NAMES = Object.keys(PERSONAS);
+/**
+ * Generic fallback persona for an expert created at runtime (via `create_agent`)
+ * whose name has no curated persona. `${name}` is interpolated by the caller's
+ * template; we keep it explicit so the agent still gets the A2A + trace contract.
+ */
+function genericExpert(name) {
+    return `# ${name} agent
+
+You are the \`${name}\` expert agent in the BrainPilot multi-agent system. The
+Principal delegates tasks to you; complete them rigorously and report back.
+
+${TRACE_EXPERT}
+
+${A2A_EXPERT}`;
+}
+/**
+ * Resolve the persona for an agent. Prefers the curated persona keyed by name;
+ * for unknown experts, returns a generic expert persona that still carries the
+ * messaging + trace contract. `role` is accepted for future role-level
+ * defaulting and to keep the call site stable.
+ */
+export function personaFor(agentName, _role) {
+    return PERSONAS[agentName] ?? genericExpert(agentName);
+}
+//# sourceMappingURL=personas.js.map

package/dist/personas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"personas.js","sourceRoot":"","sources":["../src/personas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,+EAA+E;AAE/E,8EAA8E;AAC9E,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;uCAiBoB,CAAC;AAExC,gFAAgF;AAChF,MAAM,YAAY,GAAG;;;;;;;;;;;gCAWW,CAAC;AAEjC,+EAA+E;AAE/E,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0ChB,UAAU;;;;;;;;;;;;;;oEAcwD,CAAC;AAErE,+EAA+E;AAE/E,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmChB,YAAY;;EAEZ,UAAU,EAAE,CAAC;AAEf,+EAA+E;AAE/E,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgCtB,YAAY;;EAEZ,UAAU,EAAE,CAAC;AAEf,+EAA+E;AAE/E,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8Bf,YAAY;;EAEZ,UAAU,EAAE,CAAC;AAEf,+EAA+E;AAE/E,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2Bb,YAAY;;EAEZ,UAAU,EAAE,CAAC;AAEf,+EAA+E;AAE/E,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yEA8B2D,CAAC;AAE1E,+EAA+E;AAE/E,mEAAmE;AACnE,MAAM,CAAC,MAAM,QAAQ,GAA2B;IAC9C,SAAS,EAAE,SAAS;IACpB,SAAS,EAAE,SAAS;IACpB,eAAe,EAAE,eAAe;IAChC,QAAQ,EAAE,QAAQ;IAClB,MAAM,EAAE,MAAM;IACd,KAAK,EAAE,KAAK;CACb,CAAC;AAEF,6DAA6D;AAC7D,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAE3D;;;;GAIG;AACH,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,KAAK,IAAI;;gBAEF,IAAI;;;EAGlB,YAAY;;EAEZ,UAAU,EAAE,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,SAAiB,EAAE,KAAc;IAC1D,OAAO,QAAQ,CAAC,SAAS,CAAC,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC;AACzD,CAAC"}

package/dist/pi-provider.d.ts

@@ -3,7 +3,8 @@ export declare const GATEWAY_PROVIDER = "bp-gateway";
 /** Minimal structural surface of the Pi SDK bits this module needs. */
 export interface PiProviderSdk {
     AuthStorage: {
-        create(path: string): unknown;
+        create(path: string): PiAuthStorage;
+        inMemory?(): PiAuthStorage;
     };
     ModelRegistry: {
         create(authStorage: unknown, modelsJsonPath?: string): {
@@ -13,13 +14,38 @@ export interface PiProviderSdk {
         };
     };
 }
+export interface PiAuthStorage {
+    /** In-memory, non-persisted, highest-priority key override (per provider). */
+    setRuntimeApiKey?(provider: string, key: string): void;
+}
+/** A concrete per-session provider config resolved from providers.json. */
+export interface SessionProviderConfig {
+    providerId: string;
+    baseUrl?: string;
+    apiKey: string;
+    modelId?: string;
+}
 export interface ResolvedProvider {
     model?: unknown;
     modelRegistry?: unknown;
+    /** Per-session AuthStorage holding the runtime key (when provider-configured). */
+    authStorage?: unknown;
 }
 /**
  * Resolve a custom model from env, or return `{}` when none is configured.
  * `agentDir` is Pi's global config dir (getAgentDir()).
  */
 export declare function resolveGatewayModel(sdk: PiProviderSdk, agentDir: string): ResolvedProvider;
+/**
+ * Resolve a model for a PER-SESSION provider config (from providers.json),
+ * isolated from process env so concurrent sessions can use different keys.
+ *
+ * Strategy (per the Pi SDK): build a dedicated models.json + ModelRegistry +
+ * AuthStorage for this provider, then push the key via
+ * `authStorage.setRuntimeApiKey` — an in-memory, non-persisted, top-priority
+ * override. The models.json `apiKey` is a harmless placeholder; the runtime
+ * override wins at request time. Returns `{}` when no usable config is given,
+ * so the caller falls back to {@link resolveGatewayModel} (env-based).
+ */
+export declare function resolveSessionModel(sdk: PiProviderSdk, agentDir: string, cfg: SessionProviderConfig): ResolvedProvider;
 //# sourceMappingURL=pi-provider.d.ts.map

package/dist/pi-provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pi-provider.d.ts","sourceRoot":"","sources":["../src/pi-provider.ts"],"names":[],"mappings":"AAyBA,8EAA8E;AAC9E,eAAO,MAAM,gBAAgB,eAAe,CAAC;AAM7C,uEAAuE;AACvE,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE;QAAE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAC/C,aAAa,EAAE;QACb,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG;YACrD,OAAO,IAAI,IAAI,CAAC;YAChB,QAAQ,IAAI,MAAM,GAAG,SAAS,CAAC;YAC/B,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;SAClD,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAUD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAmD1F"}
+{"version":3,"file":"pi-provider.d.ts","sourceRoot":"","sources":["../src/pi-provider.ts"],"names":[],"mappings":"AAyBA,8EAA8E;AAC9E,eAAO,MAAM,gBAAgB,eAAe,CAAC;AAM7C,uEAAuE;AACvE,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE;QACX,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAAC;QACpC,QAAQ,CAAC,IAAI,aAAa,CAAC;KAC5B,CAAC;IACF,aAAa,EAAE;QACb,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG;YACrD,OAAO,IAAI,IAAI,CAAC;YAChB,QAAQ,IAAI,MAAM,GAAG,SAAS,CAAC;YAC/B,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;SAClD,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,aAAa;IAC5B,8EAA8E;IAC9E,gBAAgB,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACxD;AAED,2EAA2E;AAC3E,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,kFAAkF;IAClF,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAUD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAmD1F;AAgDD;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,aAAa,EAClB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,qBAAqB,GACzB,gBAAgB,CAkDlB"}

package/dist/pi-provider.js

@@ -129,4 +129,68 @@ function select(sdk, agentDir, modelsJsonPath, provider, modelId) {
     }
     return { model, modelRegistry };
 }
+/**
+ * Resolve a model for a PER-SESSION provider config (from providers.json),
+ * isolated from process env so concurrent sessions can use different keys.
+ *
+ * Strategy (per the Pi SDK): build a dedicated models.json + ModelRegistry +
+ * AuthStorage for this provider, then push the key via
+ * `authStorage.setRuntimeApiKey` — an in-memory, non-persisted, top-priority
+ * override. The models.json `apiKey` is a harmless placeholder; the runtime
+ * override wins at request time. Returns `{}` when no usable config is given,
+ * so the caller falls back to {@link resolveGatewayModel} (env-based).
+ */
+export function resolveSessionModel(sdk, agentDir, cfg) {
+    if (!cfg.apiKey || !cfg.baseUrl || !cfg.modelId)
+        return {};
+    mkdirSync(agentDir, { recursive: true });
+    // One models.json per provider id — distinct registries stay isolated.
+    const modelsJsonPath = join(agentDir, `bp-session-${sanitize(cfg.providerId)}-models.json`);
+    const desired = JSON.stringify({
+        providers: {
+            [cfg.providerId]: {
+                baseUrl: cfg.baseUrl,
+                api: "anthropic-messages",
+                // Placeholder — the real key is injected via setRuntimeApiKey below.
+                apiKey: `$BP_PROVIDER_${sanitize(cfg.providerId).toUpperCase()}`,
+                models: [
+                    {
+                        id: cfg.modelId,
+                        input: ["text"],
+                        contextWindow: intEnv("ANTHROPIC_CONTEXT_WINDOW") ?? DEFAULT_CONTEXT_WINDOW,
+                        maxTokens: intEnv("ANTHROPIC_MAX_TOKENS") ?? DEFAULT_MAX_TOKENS,
+                    },
+                ],
+            },
+        },
+    }, null, 2);
+    let current;
+    try {
+        current = readFileSync(modelsJsonPath, "utf8");
+    }
+    catch {
+        /* not written yet */
+    }
+    if (current !== desired)
+        writeFileSync(modelsJsonPath, desired);
+    // A per-session AuthStorage isolates the runtime key. Prefer inMemory()
+    // (never touches disk); fall back to a file-backed instance if unavailable.
+    const authStorage = sdk.AuthStorage.inMemory
+        ? sdk.AuthStorage.inMemory()
+        : sdk.AuthStorage.create(join(agentDir, `auth-${sanitize(cfg.providerId)}.json`));
+    authStorage.setRuntimeApiKey?.(cfg.providerId, cfg.apiKey);
+    const modelRegistry = sdk.ModelRegistry.create(authStorage, modelsJsonPath);
+    modelRegistry.refresh();
+    const err = modelRegistry.getError();
+    if (err)
+        throw new Error(`Pi models.json load error (${modelsJsonPath}): ${err}`);
+    const model = modelRegistry.find(cfg.providerId, cfg.modelId);
+    if (!model)
+        throw new Error(`model not found: ${cfg.providerId}/${cfg.modelId}`);
+    return { model, modelRegistry, authStorage };
+}
+/** Filesystem/JSON-key-safe form of a provider id. */
+function sanitize(id) {
+    return id.replace(/[^A-Za-z0-9_-]/g, "_");
+}
 //# sourceMappingURL=pi-provider.js.map

package/dist/pi-provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"pi-provider.js","sourceRoot":"","sources":["../src/pi-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAE7C,6EAA6E;AAC7E,MAAM,sBAAsB,GAAG,OAAO,CAAC;AACvC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAmBjC,yEAAyE;AACzE,SAAS,MAAM,CAAC,IAAY;IAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAkB,EAAE,QAAgB;IACtE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IAEpD,mEAAmE;IACnE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IACtD,IAAI,UAAU,EAAE,CAAC;QACf,sEAAsE;QACtE,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;QACnD,OAAO,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,qEAAqE;IACrE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IACvD,mEAAmE;IACnE,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAEpC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAC5B;QACE,SAAS,EAAE;YACT,CAAC,gBAAgB,CAAC,EAAE;gBAClB,OAAO;gBACP,GAAG,EAAE,oBAAoB;gBACzB,uEAAuE;gBACvE,MAAM,EAAE,oBAAoB;gBAC5B,MAAM,EAAE;oBACN;wBACE,EAAE,EAAE,OAAO;wBACX,KAAK,EAAE,CAAC,MAAM,CAAC;wBACf,aAAa,EAAE,MAAM,CAAC,0BAA0B,CAAC,IAAI,sBAAsB;wBAC3E,SAAS,EAAE,MAAM,CAAC,sBAAsB,CAAC,IAAI,kBAAkB;qBAChE;iBACF;aACF;SACF;KACF,EACD,IAAI,EACJ,CAAC,CACF,CAAC;IACF,2DAA2D;IAC3D,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,qBAAqB;IACvB,CAAC;IACD,IAAI,OAAO,KAAK,OAAO;QAAE,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAEhE,OAAO,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,cAAc,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAAC,cAAsB;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;IACvD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,8BAA8B,cAAc,MAAO,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,SAA8C,CAAC;IACnD,IAAI,CAAC;QACH,SAAS,GAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6C,CAAC,SAAS,CAAC;IACrF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,qCAAqC,cAAc,MAAO,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,sCAAsC,cAAc,0BAA0B,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iFAAiF;AACjF,SAAS,MAAM,CACb,GAAkB,EAClB,QAAgB,EAChB,cAAsB,EACtB,QAAgB,EAChB,OAAe;IAEf,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC5E,aAAa,CAAC,OAAO,EAAE,CAAC;IACxB,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC;IACrC,IAAI,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,cAAc,MAAM,GAAG,EAAE,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,sBAAsB,cAAc,KAAK,QAAQ,IAAI,OAAO,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;AAClC,CAAC"}
+{"version":3,"file":"pi-provider.js","sourceRoot":"","sources":["../src/pi-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAE7C,6EAA6E;AAC7E,MAAM,sBAAsB,GAAG,OAAO,CAAC;AACvC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAqCjC,yEAAyE;AACzE,SAAS,MAAM,CAAC,IAAY;IAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAkB,EAAE,QAAgB;IACtE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IAEpD,mEAAmE;IACnE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IACtD,IAAI,UAAU,EAAE,CAAC;QACf,sEAAsE;QACtE,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;QACnD,OAAO,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,qEAAqE;IACrE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IACvD,mEAAmE;IACnE,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAEpC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAC5B;QACE,SAAS,EAAE;YACT,CAAC,gBAAgB,CAAC,EAAE;gBAClB,OAAO;gBACP,GAAG,EAAE,oBAAoB;gBACzB,uEAAuE;gBACvE,MAAM,EAAE,oBAAoB;gBAC5B,MAAM,EAAE;oBACN;wBACE,EAAE,EAAE,OAAO;wBACX,KAAK,EAAE,CAAC,MAAM,CAAC;wBACf,aAAa,EAAE,MAAM,CAAC,0BAA0B,CAAC,IAAI,sBAAsB;wBAC3E,SAAS,EAAE,MAAM,CAAC,sBAAsB,CAAC,IAAI,kBAAkB;qBAChE;iBACF;aACF;SACF;KACF,EACD,IAAI,EACJ,CAAC,CACF,CAAC;IACF,2DAA2D;IAC3D,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,qBAAqB;IACvB,CAAC;IACD,IAAI,OAAO,KAAK,OAAO;QAAE,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAEhE,OAAO,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,cAAc,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAAC,cAAsB;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;IACvD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,8BAA8B,cAAc,MAAO,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,SAA8C,CAAC;IACnD,IAAI,CAAC;QACH,SAAS,GAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6C,CAAC,SAAS,CAAC;IACrF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,qCAAqC,cAAc,MAAO,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,sCAAsC,cAAc,0BAA0B,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iFAAiF;AACjF,SAAS,MAAM,CACb,GAAkB,EAClB,QAAgB,EAChB,cAAsB,EACtB,QAAgB,EAChB,OAAe;IAEf,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC5E,aAAa,CAAC,OAAO,EAAE,CAAC;IACxB,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC;IACrC,IAAI,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,cAAc,MAAM,GAAG,EAAE,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,sBAAsB,cAAc,KAAK,QAAQ,IAAI,OAAO,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAkB,EAClB,QAAgB,EAChB,GAA0B;IAE1B,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAE3D,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,uEAAuE;IACvE,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,EAAE,cAAc,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAC5F,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAC5B;QACE,SAAS,EAAE;YACT,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE;gBAChB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,GAAG,EAAE,oBAAoB;gBACzB,qEAAqE;gBACrE,MAAM,EAAE,gBAAgB,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,EAAE;gBAChE,MAAM,EAAE;oBACN;wBACE,EAAE,EAAE,GAAG,CAAC,OAAO;wBACf,KAAK,EAAE,CAAC,MAAM,CAAC;wBACf,aAAa,EAAE,MAAM,CAAC,0BAA0B,CAAC,IAAI,sBAAsB;wBAC3E,SAAS,EAAE,MAAM,CAAC,sBAAsB,CAAC,IAAI,kBAAkB;qBAChE;iBACF;aACF;SACF;KACF,EACD,IAAI,EACJ,CAAC,CACF,CAAC;IACF,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,qBAAqB;IACvB,CAAC;IACD,IAAI,OAAO,KAAK,OAAO;QAAE,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAEhE,wEAAwE;IACxE,4EAA4E;IAC5E,MAAM,WAAW,GAAkB,GAAG,CAAC,WAAW,CAAC,QAAQ;QACzD,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,EAAE;QAC5B,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACpF,WAAW,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAE3D,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC5E,aAAa,CAAC,OAAO,EAAE,CAAC;IACxB,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC;IACrC,IAAI,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,cAAc,MAAM,GAAG,EAAE,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACjF,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC;AAC/C,CAAC;AAED,sDAAsD;AACtD,SAAS,QAAQ,CAAC,EAAU;IAC1B,OAAO,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;AAC5C,CAAC"}

package/dist/provider-config.d.ts

@@ -0,0 +1,18 @@
+export interface ProviderConfig {
+    providerId: string;
+    baseUrl?: string;
+    apiKey: string;
+    modelId?: string;
+}
+/** Per-session reference written by SessionManager.createSession. */
+export interface SessionProviderRef {
+    providerId?: string;
+    modelId?: string;
+}
+/**
+ * Resolve the effective provider config for a session. `ref` is the session's
+ * stored `{ providerId, modelId }` (may be empty). Returns undefined when no
+ * usable profile/key exists.
+ */
+export declare function resolveSessionProvider(dataRoot: string, ref: SessionProviderRef): Promise<ProviderConfig | undefined>;
+//# sourceMappingURL=provider-config.d.ts.map

package/dist/provider-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-config.d.ts","sourceRoot":"","sources":["../src/provider-config.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAiBD,qEAAqE;AACrE,MAAM,WAAW,kBAAkB;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,kBAAkB,GACtB,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAuBrC"}

package/dist/provider-config.js

@@ -0,0 +1,47 @@
+/**
+ * provider-config.ts — runtime-side resolver for the per-session LLM provider.
+ *
+ * The backend owns provider CRUD; the runtime only READS the same on-disk SSOT
+ * (`<dataRoot>/bp_template/providers.json`) plus a per-session reference
+ * (`<dataRoot>/.bp/<sid>/provider.json` = `{ providerId, modelId }`). It turns
+ * those into a concrete `{ baseUrl, apiKey, modelId }` for the agent factory.
+ *
+ * Resolution: session ref's providerId → else the file's selectedProfileId →
+ * else the first profile. Returns `undefined` when nothing is configured, so
+ * the factory falls back to Pi's env-based default (Docker/static compat).
+ */
+import { readFile } from "node:fs/promises";
+import { join } from "node:path";
+async function readJson(file) {
+    try {
+        return JSON.parse(await readFile(file, "utf8"));
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Resolve the effective provider config for a session. `ref` is the session's
+ * stored `{ providerId, modelId }` (may be empty). Returns undefined when no
+ * usable profile/key exists.
+ */
+export async function resolveSessionProvider(dataRoot, ref) {
+    const file = await readJson(join(dataRoot, "bp_template", "providers.json"));
+    const profiles = file?.profiles ?? [];
+    if (profiles.length === 0)
+        return undefined;
+    const profile = profiles.find((p) => p.id === ref.providerId) ??
+        profiles.find((p) => p.id === file?.selectedProfileId) ??
+        profiles[0];
+    if (!profile?.apiKey)
+        return undefined;
+    // Model: the session's choice if still offered by the profile, else default.
+    const modelId = ref.modelId && profile.models?.includes(ref.modelId) ? ref.modelId : profile.models?.[0];
+    return {
+        providerId: profile.id,
+        baseUrl: profile.baseUrl || undefined,
+        apiKey: profile.apiKey,
+        modelId,
+    };
+}
+//# sourceMappingURL=provider-config.js.map

package/dist/provider-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-config.js","sourceRoot":"","sources":["../src/provider-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAgBjC,KAAK,UAAU,QAAQ,CAAI,IAAY;IACrC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAM,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAQD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAgB,EAChB,GAAuB;IAEvB,MAAM,IAAI,GAAG,MAAM,QAAQ,CACzB,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAChD,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;IACtC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE5C,MAAM,OAAO,GACX,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,UAAU,CAAC;QAC7C,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE,iBAAiB,CAAC;QACtD,QAAQ,CAAC,CAAC,CAAC,CAAC;IACd,IAAI,CAAC,OAAO,EAAE,MAAM;QAAE,OAAO,SAAS,CAAC;IAEvC,6EAA6E;IAC7E,MAAM,OAAO,GACX,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAE3F,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,EAAE;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,SAAS;QACrC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAQ5B,OAAO,EAAE,cAAc,EAAE,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAElF,wBAAgB,YAAY,CAAC,IAAI,GAAE,qBAAqB,GAAG;IAAE,OAAO,CAAC,EAAE,cAAc,CAAA;CAAO,GAAG;IAC7F,GAAG,EAAE,IAAI,CAAC;IACV,OAAO,EAAE,cAAc,CAAC;CACzB,CA+FA;AAUD,MAAM,WAAW,kBAAmB,SAAQ,qBAAqB;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED,wBAAgB,WAAW,CAAC,IAAI,GAAE,kBAAuB,GAAG;IAC1D,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B,CA+BA"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAQ5B,OAAO,EAAE,cAAc,EAAE,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAElF,wBAAgB,YAAY,CAAC,IAAI,GAAE,qBAAqB,GAAG;IAAE,OAAO,CAAC,EAAE,cAAc,CAAA;CAAO,GAAG;IAC7F,GAAG,EAAE,IAAI,CAAC;IACV,OAAO,EAAE,cAAc,CAAC;CACzB,CAuJA;AAUD,MAAM,WAAW,kBAAmB,SAAQ,qBAAqB;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED,wBAAgB,WAAW,CAAC,IAAI,GAAE,kBAAuB,GAAG;IAC1D,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B,CAuCA"}

package/dist/server.js

@@ -32,6 +32,12 @@ export function createServer(opts = {}) {
         const s = manager.getSession(c.req.param("id"));
         return s ? c.json(s) : c.json({ error: "not found" }, 404);
     });
+    // #29: rename — PUT the session title and persist it to meta.json.
+    app.put("/sessions/:id", async (c) => {
+        const body = (await c.req.json().catch(() => ({})));
+        const s = await manager.renameSession(c.req.param("id"), body?.title);
+        return s ? c.json(s) : c.json({ error: "not found" }, 404);
+    });
     app.delete("/sessions/:id", async (c) => {
         const id = c.req.param("id");
         const deleted = await manager.deleteSession(id);
@@ -41,6 +47,10 @@ export function createServer(opts = {}) {
         const state = manager.getSessionState(c.req.param("id"));
         return state ? c.json(state) : c.json({ error: "not found" }, 404);
     });
+    app.get("/sessions/:id/trace", (c) => {
+        const graph = manager.getTrace(c.req.param("id"));
+        return graph ? c.json(graph) : c.json({ error: "not found" }, 404);
+    });
     app.post("/sessions/:id/messages", async (c) => {
         const id = c.req.param("id");
         const body = await safeBody(c);
@@ -65,6 +75,53 @@ export function createServer(opts = {}) {
         const res = await manager.evictSession(c.req.param("id"));
         return c.json(res, res.evicted ? 200 : 404);
     });
+    // ---- Workspace files (read off disk; independent of in-memory session) ----
+    app.get("/sessions/:id/files", async (c) => {
+        try {
+            const files = await manager.listSessionFiles(c.req.param("id"), c.req.query("path") ?? "");
+            return c.json(files); // bare array — matches the SPA's file-list contract
+        }
+        catch (err) {
+            return c.json({ error: err.message }, 400);
+        }
+    });
+    app.get("/sessions/:id/files/content", async (c) => {
+        const path = c.req.query("path");
+        if (!path)
+            return c.json({ error: "path required" }, 400);
+        try {
+            return c.json(await manager.readSessionFile(c.req.param("id"), path));
+        }
+        catch (err) {
+            return c.json({ error: err.message }, 404);
+        }
+    });
+    app.get("/sessions/:id/files/raw", async (c) => {
+        const path = c.req.query("path");
+        if (!path)
+            return c.json({ error: "path required" }, 400);
+        try {
+            const buf = await manager.readSessionFileRaw(c.req.param("id"), path);
+            c.header("Content-Type", "application/octet-stream");
+            c.header("Content-Length", String(buf.length));
+            return c.body(buf);
+        }
+        catch (err) {
+            return c.json({ error: err.message }, 404);
+        }
+    });
+    app.delete("/sessions/:id/files", async (c) => {
+        const path = c.req.query("path");
+        if (!path)
+            return c.json({ error: "path required" }, 400);
+        try {
+            const deleted = await manager.deleteSessionFile(c.req.param("id"), path);
+            return c.json({ deleted }, deleted ? 200 : 404);
+        }
+        catch (err) {
+            return c.json({ error: err.message }, 400);
+        }
+    });
     const sseHandler = (id, c) => {
         if (!manager.getSession(id))
             return c.json({ error: "not found" }, 404);
@@ -119,6 +176,12 @@ export function startServer(opts = {}) {
         (process.env.BP_RUNTIME_PORT ? Number(process.env.BP_RUNTIME_PORT) : undefined) ??
         8081;
     const server = serve({ fetch: app.fetch, port });
+    // §R-4: surface the opt-in memory budget at boot (only when active).
+    const memLimitMb = process.env.BP_MEM_LIMIT_MB;
+    if (memLimitMb && Number(memLimitMb) > 0) {
+        // eslint-disable-next-line no-console
+        console.log(`[runtime] memory budget: ${Number(memLimitMb)}MB (soft watchdog @85%)`);
+    }
     // §7 L4 global safety net.
     const onFatal = async (err) => {
         try {
@@ -136,6 +199,7 @@ export function startServer(opts = {}) {
         manager,
         port,
         close: () => new Promise((resolve) => {
+            manager.shutdown();
             server.close(() => resolve());
         }),
     };