@geohar/un-bien 0.7.0

package/dist/actions/handlers.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Model registry projection + the narrow SDK/ctx views the rpc command
+ * dispatch (`index.ts`) uses for `set_model` / `get_available_models` /
+ * `compact` / `new_session`.
+ *
+ * The former stock action handlers (session_compact/new/model_set/thinking_set/
+ * list_models) were retired when those app commands migrated to the rpc plane
+ * (dispatchRpcCommand). Only the shared model types + `wireFromModel` + the
+ * narrow ctx/pi/registry views the rpc handlers still take remain.
+ */
+import type { WireModel } from "../protocol/types.js";
+/**
+ * Structural subset of the SDK's `Model<Api>` interface (defined in
+ * `@earendil-works/pi-ai`, a transitive dep not re-exported by
+ * `@earendil-works/pi-coding-agent`'s main entry). Capturing just the fields we
+ * touch keeps this decoupled from the SDK's full Model surface.
+ */
+export interface SdkModelLike {
+    id: string;
+    name: string;
+    provider: string;
+    reasoning: boolean;
+    contextWindow: number;
+    /** Plan/30: accepted input modalities. The SDK's `Model.input` is
+     *  `("text" | "image")[]`; we read `includes("image")` for the `vision`
+     *  flag. Optional here so tests can omit it (treated as text-only). */
+    input?: ("text" | "image")[];
+}
+type Model<_TApi = unknown> = SdkModelLike;
+/**
+ * Narrow shape of the `ExtensionAPI` surface the rpc dispatch calls (setModel /
+ * setThinkingLevel). Lets the test layer stub just these.
+ */
+export interface ActionPi {
+    setModel(model: Model<any>): Promise<boolean>;
+    setThinkingLevel(level: import("../protocol/types.js").ThinkingLevel): void;
+}
+/**
+ * Narrow shape of the per-call context. Drawn from the union of
+ * `ExtensionContextActions` (compact, getModel) and
+ * `ExtensionCommandContextActions` (newSession). All fields optional so a
+ * missing method becomes a typed error instead of a runtime TypeError.
+ */
+export interface ActionCtx {
+    compact?: (options?: Record<string, unknown>) => void;
+    /**
+     * Starts a new session. `withSession` is the SDK's blessed hook for
+     * post-replacement work: it receives a FRESH, command-capable ctx bound to
+     * the new session. The SDK marks any ctx captured BEFORE this call stale, so
+     * callers must re-capture via `withSession` rather than reuse the old ctx.
+     */
+    newSession?: (options?: {
+        withSession?: (ctx: ActionCtx) => Promise<void>;
+    }) => Promise<{
+        cancelled: boolean;
+    }>;
+    getModel?: () => Model<any> | undefined;
+    /**
+     * Live session registry from Pi's extension ctx. Includes providers/models
+     * registered dynamically via `pi.registerProvider(...)`, unlike the fallback
+     * disk-backed registry un-bien can build on its own.
+     */
+    modelRegistry?: ActionModelRegistry;
+}
+/**
+ * Minimal shape of the registry surface. Maps 1:1 onto `ModelRegistry` but lets
+ * tests fake catalogs without instantiating the real one.
+ */
+export interface ActionModelRegistry {
+    refresh(): void;
+    getAvailable(): Model<any>[];
+    find(provider: string, modelId: string): Model<any> | undefined;
+}
+/** Project a SDK `Model<Api>` onto the wire schema. Shared by the rpc
+ *  `get_available_models` / `set_model` dispatch so both stay in lockstep. */
+export declare function wireFromModel(model: Model<any>): WireModel;
+export {};

package/dist/actions/handlers.js

@@ -0,0 +1,26 @@
+/**
+ * Model registry projection + the narrow SDK/ctx views the rpc command
+ * dispatch (`index.ts`) uses for `set_model` / `get_available_models` /
+ * `compact` / `new_session`.
+ *
+ * The former stock action handlers (session_compact/new/model_set/thinking_set/
+ * list_models) were retired when those app commands migrated to the rpc plane
+ * (dispatchRpcCommand). Only the shared model types + `wireFromModel` + the
+ * narrow ctx/pi/registry views the rpc handlers still take remain.
+ */
+/** Project a SDK `Model<Api>` onto the wire schema. Shared by the rpc
+ *  `get_available_models` / `set_model` dispatch so both stay in lockstep. */
+export function wireFromModel(model) {
+    return {
+        id: model.id,
+        name: model.name,
+        provider: model.provider,
+        reasoning: model.reasoning,
+        context_window: model.contextWindow,
+        // Plan/30: vision = model accepts image input. `Model.input` is
+        // `("text" | "image")[]` at runtime (confirmed against pi-ai). `?.` guards
+        // a fake/partial model in tests → treated as text-only.
+        vision: model.input?.includes("image") ?? false,
+    };
+}
+//# sourceMappingURL=handlers.js.map

package/dist/actions/handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlers.js","sourceRoot":"","sources":["../../src/actions/handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAuEH;8EAC8E;AAC9E,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE,KAAK,CAAC,aAAa;QACnC,gEAAgE;QAChE,2EAA2E;QAC3E,wDAAwD;QACxD,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK;KAChD,CAAC;AACJ,CAAC"}

package/dist/actions/registry.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Plan/28 — ModelRegistry access for the action handlers.
+ *
+ * The host hands every extension a ready `ModelRegistry` on
+ * `ExtensionContext.modelRegistry` — the same instance `AgentSession` uses
+ * internally. That is the ONLY source we read.
+ *
+ * History (issue #112): this module used to build its own registry via
+ * `ModelRegistry.create(AuthStorage.create())`. Both factories were removed
+ * from `@earendil-works/pi-coding-agent` in pi 0.83, so the import crashed the
+ * whole pi process on the first `model_set`/`list_models` from the app
+ * (`undefined is not an object (evaluating 'AuthStorage.create')`, thrown from
+ * the WebSocket line handler). Reading the registry off the live ctx drops the
+ * dependency on that package's factory surface entirely, so a future breaking
+ * change there cannot crash the extension the same way again.
+ *
+ * Two hazards this handles:
+ *
+ * 1. A ctx captured before a session replacement/reload is **stale**, and even
+ *    *reading* `.modelRegistry` on it throws (`assertActive`). Every read is
+ *    wrapped.
+ * 2. There may be no live ctx at all (daemon boot, control channel). Rather
+ *    than throw from a WS callback — an uncaught exception that exits pi — we
+ *    fall back to the last registry that worked, then to a stub whose methods
+ *    never throw and report an empty catalog.
+ */
+import type { ActionModelRegistry } from "./handlers.js";
+/** Anything carrying the host registry — `ExtensionContext` and friends. */
+interface RegistryBearingCtx {
+    modelRegistry?: ActionModelRegistry;
+}
+/**
+ * Resolve the live host `ModelRegistry` from the most recent extension ctx.
+ * Falls back to the last one that worked, then to an inert stub.
+ */
+export declare function ensureModelRegistry(ctx?: RegistryBearingCtx | null): ActionModelRegistry;
+/** Test seam — drop the cached registry so tests can rebuild with fakes. */
+export declare function _resetModelRegistryForTests(): void;
+export {};

package/dist/actions/registry.js

@@ -0,0 +1,62 @@
+/**
+ * Plan/28 — ModelRegistry access for the action handlers.
+ *
+ * The host hands every extension a ready `ModelRegistry` on
+ * `ExtensionContext.modelRegistry` — the same instance `AgentSession` uses
+ * internally. That is the ONLY source we read.
+ *
+ * History (issue #112): this module used to build its own registry via
+ * `ModelRegistry.create(AuthStorage.create())`. Both factories were removed
+ * from `@earendil-works/pi-coding-agent` in pi 0.83, so the import crashed the
+ * whole pi process on the first `model_set`/`list_models` from the app
+ * (`undefined is not an object (evaluating 'AuthStorage.create')`, thrown from
+ * the WebSocket line handler). Reading the registry off the live ctx drops the
+ * dependency on that package's factory surface entirely, so a future breaking
+ * change there cannot crash the extension the same way again.
+ *
+ * Two hazards this handles:
+ *
+ * 1. A ctx captured before a session replacement/reload is **stale**, and even
+ *    *reading* `.modelRegistry` on it throws (`assertActive`). Every read is
+ *    wrapped.
+ * 2. There may be no live ctx at all (daemon boot, control channel). Rather
+ *    than throw from a WS callback — an uncaught exception that exits pi — we
+ *    fall back to the last registry that worked, then to a stub whose methods
+ *    never throw and report an empty catalog.
+ */
+let _lastGoodRegistry = null;
+/**
+ * Never-throwing empty catalog. Used only when no ctx has ever been seen —
+ * callers get an empty model list instead of a crashed agent.
+ */
+const _stubRegistry = {
+    refresh() { },
+    getAvailable() {
+        return [];
+    },
+    find() {
+        return undefined;
+    },
+};
+/**
+ * Resolve the live host `ModelRegistry` from the most recent extension ctx.
+ * Falls back to the last one that worked, then to an inert stub.
+ */
+export function ensureModelRegistry(ctx) {
+    try {
+        const live = ctx?.modelRegistry;
+        if (live) {
+            _lastGoodRegistry = live;
+            return live;
+        }
+    }
+    catch {
+        // stale ctx after session replacement — reading the property throws.
+    }
+    return _lastGoodRegistry ?? _stubRegistry;
+}
+/** Test seam — drop the cached registry so tests can rebuild with fakes. */
+export function _resetModelRegistryForTests() {
+    _lastGoodRegistry = null;
+}
+//# sourceMappingURL=registry.js.map

package/dist/actions/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/actions/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AASH,IAAI,iBAAiB,GAA+B,IAAI,CAAC;AAEzD;;;GAGG;AACH,MAAM,aAAa,GAAwB;IACzC,OAAO,KAAI,CAAC;IACZ,YAAY;QACV,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAA+B;IAE/B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,EAAE,aAAa,CAAC;QAChC,IAAI,IAAI,EAAE,CAAC;YACT,iBAAiB,GAAG,IAAI,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;IACD,OAAO,iBAAiB,IAAI,aAAa,CAAC;AAC5C,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,2BAA2B;IACzC,iBAAiB,GAAG,IAAI,CAAC;AAC3B,CAAC"}

package/dist/bin/supervisord.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/bin/supervisord.js

@@ -0,0 +1,86 @@
+#!/usr/bin/env node
+/**
+ * `pi-supervisord` — long-running daemon supervisor.
+ *
+ * Entry point of the `pi-supervisord` binary (plan/26 W2). Run by
+ * systemd/launchd in production, or directly during dev:
+ *
+ *   pnpm build
+ *   node dist/bin/supervisord.js
+ *
+ * Once running, it:
+ *   - Reads `~/.pi/un-bien/daemons.json`
+ *   - Spawns `pi --mode rpc -e <un-bien/dist/index.js>` per entry
+ *   - Listens on `~/.pi/un-bien/supervisor.sock` for CLI control requests
+ *   - Restarts crashed children with exponential backoff
+ *
+ * Exits cleanly on SIGTERM/SIGINT (used by `unbien uninstall`).
+ */
+import { fileURLToPath } from "node:url";
+import { dirname, join } from "node:path";
+import { Supervisor, SupervisorAlreadyRunningError, } from "../daemon/supervisor.js";
+const HELP_TEXT = `pi-supervisord — Remote Pi daemon supervisor
+
+Usage: pi-supervisord
+
+Runs the long-lived supervisor: reads ~/.pi/un-bien/daemons.json, spawns one
+\`pi --mode rpc\` child per entry, and listens on ~/.pi/un-bien/supervisor.sock
+for control requests from the \`un-bien\` CLI.
+
+This binary takes NO arguments — it is normally launched by systemd/launchd
+(via \`unbien install\`), not by hand. Manage the fleet with:
+  unbien daemon start | stop | restart | status
+  unbien daemons
+
+Options:
+  -h, --help      Show this help and exit
+  -v, --version   Print version and exit
+`;
+async function main() {
+    // Guard: any stray argument used to fall through and start a FULL
+    // supervisor (a `pi-supervisord --help` once ran for days). Handle the
+    // conventional flags explicitly and reject unknown args instead of
+    // silently spawning the daemon fleet.
+    const args = process.argv.slice(2);
+    if (args.includes("-h") || args.includes("--help")) {
+        process.stdout.write(HELP_TEXT);
+        return;
+    }
+    if (args.includes("-v") || args.includes("--version")) {
+        process.stdout.write("pi-supervisord (un-bien)\n");
+        return;
+    }
+    if (args.length > 0) {
+        process.stderr.write(`pi-supervisord: unexpected argument(s): ${args.join(" ")}\n` +
+            "This binary takes no arguments. Run `pi-supervisord --help`.\n");
+        process.exit(2);
+    }
+    // The supervisor needs to point each spawned Pi at the extension
+    // entry it's bundled with. We're at `dist/bin/supervisord.js` after
+    // build; the extension is the sibling `dist/index.js`.
+    const here = fileURLToPath(import.meta.url);
+    const distRoot = dirname(dirname(here)); // dist/bin → dist
+    const extensionPath = join(distRoot, "index.js");
+    const supervisor = new Supervisor({ extensionPath });
+    await supervisor.start();
+    process.stderr.write(`[pi-supervisord] up — UDS: ~/.pi/un-bien/supervisor.sock, extension: ${extensionPath}\n`);
+    const shutdown = async (signal) => {
+        process.stderr.write(`[pi-supervisord] received ${signal}, shutting down\n`);
+        await supervisor.stop();
+        process.exit(0);
+    };
+    process.on("SIGTERM", () => void shutdown("SIGTERM"));
+    process.on("SIGINT", () => void shutdown("SIGINT"));
+}
+main().catch((err) => {
+    // "Already running" is a normal, expected condition (systemd/launchd may
+    // race a manual start, or the user double-launches) — not a crash. Report
+    // it calmly and exit 0 so service managers don't flag a failure loop.
+    if (err instanceof SupervisorAlreadyRunningError) {
+        process.stderr.write(`[pi-supervisord] ${err.message}\n`);
+        process.exit(0);
+    }
+    process.stderr.write(`[pi-supervisord] fatal: ${String(err)}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=supervisord.js.map

package/dist/bin/supervisord.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisord.js","sourceRoot":"","sources":["../../src/bin/supervisord.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,UAAU,EACV,6BAA6B,GAC9B,MAAM,yBAAyB,CAAC;AAEjC,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;CAgBjB,CAAC;AAEF,KAAK,UAAU,IAAI;IACjB,kEAAkE;IAClE,uEAAuE;IACvE,mEAAmE;IACnE,sCAAsC;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO;IACT,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2CAA2C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI;YAC3D,gEAAgE,CACnE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,iEAAiE;IACjE,oEAAoE;IACpE,uDAAuD;IACvD,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,kBAAkB;IAC3D,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAEjD,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;IACrD,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;IACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wEAAwE,aAAa,IAAI,CAC1F,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6BAA6B,MAAM,mBAAmB,CACvD,CAAC;QACF,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,yEAAyE;IACzE,0EAA0E;IAC1E,sEAAsE;IACtE,IAAI,GAAG,YAAY,6BAA6B,EAAE,CAAC;QACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;QAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,84 @@
+export type UnBienConfig = {
+    relay?: string;
+    /**
+     * Debug prefs. Fields here gate the file-based diagnostic logs (see
+     * `session/debug_log.ts` and `panel_bridge.ts`). Read from config — NOT env —
+     * because the fork usually runs detached and doesn't inherit a shell's env, so
+     * a persisted config field is the only reliable enable switch. Absent/false by
+     * default: no logging.
+     */
+    debug?: {
+        envelope?: boolean;
+        panels?: boolean;
+    };
+    /**
+     * Machine-wide fallback defaults for a session's LOCAL config (the per-cwd
+     * `.pi/un-bien/config.json`). A field here applies to every cwd that does
+     * not set it via the inline `UNBIEN_DIRECT_CONFIG` env or its own file, so
+     * you can pin `auto_start_relay` once — beside `relay` — instead of dropping a
+     * file into every repo. See `session/local_config.ts`. Absent by default, so
+     * omitting it preserves the historical per-cwd-only behaviour exactly.
+     */
+    defaults?: {
+        auto_start_relay?: boolean;
+    };
+};
+export declare function loadConfig(): UnBienConfig;
+export declare function saveConfig(patch: Partial<UnBienConfig>): void;
+export type RelayResolution = {
+    url: string;
+    source: "env" | "config";
+} | {
+    url: null;
+    source: "unset";
+};
+/**
+ * Resolves the effective relay URL in **canonical http(s):// form**.
+ *
+ * Precedence:
+ *   1. `UNBIEN_RELAY` env var (ops/CI escape hatch)
+ *   2. `relay` field in the global config
+ *      (`<PI_CODING_AGENT_DIR|~/.pi>/extensions/un-bien.json`, set via
+ *      `/unbien set-relay`)
+ *
+ * There is NO built-in default. When neither is set, `url` is null and
+ * `source` is `"unset"` — callers MUST refuse to connect and prompt the user
+ * to configure a relay (un-bien ships pointing at nobody's infrastructure).
+ *
+ * Any ws(s):// values found (legacy configs or env overrides) are coerced
+ * to http(s):// defensively — the canonical form across the codebase is
+ * http(s)://, and the transport layer converts to ws(s):// at WS-open time.
+ */
+export declare function resolveRelayUrl(): RelayResolution;
+/**
+ * Strict validator for **user-provided** relay URLs (via `/unbien
+ * set-relay` or `/unbien relay url`).
+ *
+ * Only accepts `http://` and `https://`. `ws://`/`wss://` are deliberately
+ * **rejected** — the canonical form stored in config is http(s):// and the
+ * extension converts to ws(s):// internally when opening the WebSocket.
+ * Forcing a single scheme at the user boundary avoids two-form drift.
+ */
+export declare function isValidRelayUrl(url: string): boolean;
+/**
+ * Returns true if the URL uses ws:// or wss:// scheme — for emitting a
+ * targeted error message when the user pastes a WebSocket URL by mistake.
+ */
+export declare function isWebSocketScheme(url: string): boolean;
+/**
+ * Converts an http(s):// URL to the corresponding ws(s):// form. Used by
+ * the transport layer right before opening the WebSocket — config storage
+ * and the mesh HTTP client both stay on http(s)://.
+ *
+ *   https://host  → wss://host
+ *   http://host   → ws://host
+ *   ws(s)://host  → pass-through (defensive — env overrides or legacy
+ *                   configs may still carry ws(s)://)
+ */
+export declare function toWebSocketUrl(url: string): string;
+/**
+ * Inverse of `toWebSocketUrl`. Used by `resolveRelayUrl` to coerce any
+ * ws(s):// values back to canonical http(s):// before returning them to
+ * the rest of the codebase.
+ */
+export declare function toHttpUrl(url: string): string;

package/dist/config.js

@@ -0,0 +1,115 @@
+import fs from "node:fs";
+import path from "node:path";
+import { unbienConfigHome } from "./paths.js";
+// Resolved at call time via `unbienConfigHome()` — the global config is a pi
+// extension config at `<PI_CODING_AGENT_DIR|~/.pi>/extensions/un-bien.json`.
+// See paths.ts.
+const configDir = () => unbienConfigHome();
+const configFile = () => path.join(unbienConfigHome(), "un-bien.json");
+export function loadConfig() {
+    try {
+        const raw = fs.readFileSync(configFile(), "utf8");
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== "object")
+            return {};
+        return parsed;
+    }
+    catch {
+        return {};
+    }
+}
+export function saveConfig(patch) {
+    fs.mkdirSync(configDir(), { recursive: true });
+    const current = loadConfig();
+    const next = { ...current, ...patch };
+    fs.writeFileSync(configFile(), JSON.stringify(next, null, 2));
+}
+/**
+ * Resolves the effective relay URL in **canonical http(s):// form**.
+ *
+ * Precedence:
+ *   1. `UNBIEN_RELAY` env var (ops/CI escape hatch)
+ *   2. `relay` field in the global config
+ *      (`<PI_CODING_AGENT_DIR|~/.pi>/extensions/un-bien.json`, set via
+ *      `/unbien set-relay`)
+ *
+ * There is NO built-in default. When neither is set, `url` is null and
+ * `source` is `"unset"` — callers MUST refuse to connect and prompt the user
+ * to configure a relay (un-bien ships pointing at nobody's infrastructure).
+ *
+ * Any ws(s):// values found (legacy configs or env overrides) are coerced
+ * to http(s):// defensively — the canonical form across the codebase is
+ * http(s)://, and the transport layer converts to ws(s):// at WS-open time.
+ */
+export function resolveRelayUrl() {
+    const env = process.env["UNBIEN_RELAY"];
+    if (env && env.length > 0)
+        return { url: toHttpUrl(env), source: "env" };
+    const cfg = loadConfig();
+    if (cfg.relay && cfg.relay.length > 0)
+        return { url: toHttpUrl(cfg.relay), source: "config" };
+    return { url: null, source: "unset" };
+}
+/**
+ * Strict validator for **user-provided** relay URLs (via `/unbien
+ * set-relay` or `/unbien relay url`).
+ *
+ * Only accepts `http://` and `https://`. `ws://`/`wss://` are deliberately
+ * **rejected** — the canonical form stored in config is http(s):// and the
+ * extension converts to ws(s):// internally when opening the WebSocket.
+ * Forcing a single scheme at the user boundary avoids two-form drift.
+ */
+export function isValidRelayUrl(url) {
+    if (!url)
+        return false;
+    const lower = url.toLowerCase();
+    if (!lower.startsWith("http://") && !lower.startsWith("https://"))
+        return false;
+    try {
+        new URL(url);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Returns true if the URL uses ws:// or wss:// scheme — for emitting a
+ * targeted error message when the user pastes a WebSocket URL by mistake.
+ */
+export function isWebSocketScheme(url) {
+    const lower = url.toLowerCase();
+    return lower.startsWith("ws://") || lower.startsWith("wss://");
+}
+/**
+ * Converts an http(s):// URL to the corresponding ws(s):// form. Used by
+ * the transport layer right before opening the WebSocket — config storage
+ * and the mesh HTTP client both stay on http(s)://.
+ *
+ *   https://host  → wss://host
+ *   http://host   → ws://host
+ *   ws(s)://host  → pass-through (defensive — env overrides or legacy
+ *                   configs may still carry ws(s)://)
+ */
+export function toWebSocketUrl(url) {
+    const lower = url.toLowerCase();
+    if (lower.startsWith("https://"))
+        return "wss://" + url.slice("https://".length);
+    if (lower.startsWith("http://"))
+        return "ws://" + url.slice("http://".length);
+    return url;
+}
+/**
+ * Inverse of `toWebSocketUrl`. Used by `resolveRelayUrl` to coerce any
+ * ws(s):// values back to canonical http(s):// before returning them to
+ * the rest of the codebase.
+ */
+export function toHttpUrl(url) {
+    const lower = url.toLowerCase();
+    if (lower.startsWith("wss://"))
+        return "https://" + url.slice("wss://".length);
+    if (lower.startsWith("ws://"))
+        return "http://" + url.slice("ws://".length);
+    return url;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,6EAA6E;AAC7E,6EAA6E;AAC7E,gBAAgB;AAChB,MAAM,SAAS,GAAG,GAAW,EAAE,CAAC,gBAAgB,EAAE,CAAC;AACnD,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,cAAc,CAAC,CAAC;AAuB/E,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QACrD,OAAO,MAAsB,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAA4B;IACrD,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;IACtC,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAKD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACxC,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACzE,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QACnC,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACzD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;QAC/D,OAAO,KAAK,CAAC;IACf,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,OAAO,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;QAC9B,OAAO,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9E,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC5B,OAAO,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5E,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/daemon/client.d.ts

@@ -0,0 +1,20 @@
+import { type ControlReplyFor, type ControlRequest } from "./control_protocol.js";
+export declare class SupervisorOfflineError extends Error {
+    readonly sockPath: string;
+    constructor(sockPath: string);
+}
+/**
+ * Sends a single request and returns the typed reply data.
+ *
+ * Throws:
+ *   - `SupervisorOfflineError` when the supervisor isn't reachable.
+ *   - `Error` from `parseReply` when the reply line is malformed.
+ *   - The supervisor's own error string when `ok: false`.
+ */
+export declare function callSupervisor<Op extends ControlRequest["op"]>(req: Extract<ControlRequest, {
+    op: Op;
+}>): Promise<ControlReplyFor<Op>>;
+/** Returns true when the supervisor is reachable. Used by `/unbien
+ *  daemons` to decide whether to query runtime state or fall back to
+ *  registry-only listing. */
+export declare function supervisorOnline(): Promise<boolean>;

package/dist/daemon/client.js

@@ -0,0 +1,131 @@
+import { existsSync } from "node:fs";
+import { createConnection } from "node:net";
+import { encodeRequest, parseReply, } from "./control_protocol.js";
+import { getSupervisorSockPath } from "./supervisor.js";
+import { usesNamedPipe } from "../session/ipc.js";
+/**
+ * Tiny client for the `un-bien` CLI to call the supervisor over the
+ * `~/.pi/un-bien/supervisor.sock` UDS.
+ *
+ * Each call opens a fresh connection, sends one request line, reads one
+ * reply line, closes. No connection pooling — the CLI is short-lived,
+ * latency is dominated by the socket round-trip (<1ms).
+ *
+ * `SupervisorOfflineError` is the common error: thrown when the socket
+ * file is missing OR the connect fails (no listener). The CLI handler
+ * formats it as a friendly "Run `unbien install` first" message.
+ */
+const CONNECT_TIMEOUT_MS = 1000;
+const REPLY_TIMEOUT_MS = 5000;
+export class SupervisorOfflineError extends Error {
+    sockPath;
+    constructor(sockPath) {
+        super(`Supervisor is not running. UDS not responding at ${sockPath}.\n` +
+            "Run `unbien install` to set it up, or start it manually with `pi-supervisord`.");
+        this.sockPath = sockPath;
+        this.name = "SupervisorOfflineError";
+    }
+}
+/**
+ * Sends a single request and returns the typed reply data.
+ *
+ * Throws:
+ *   - `SupervisorOfflineError` when the supervisor isn't reachable.
+ *   - `Error` from `parseReply` when the reply line is malformed.
+ *   - The supervisor's own error string when `ok: false`.
+ */
+export async function callSupervisor(req) {
+    const sockPath = getSupervisorSockPath();
+    // POSIX fast-fail on a missing socket file. Windows pipes have no file —
+    // skip the check and let `_connect` fail fast if the pipe isn't there.
+    if (!usesNamedPipe() && !existsSync(sockPath))
+        throw new SupervisorOfflineError(sockPath);
+    const sock = await _connect(sockPath);
+    try {
+        sock.write(encodeRequest(req));
+        const line = await _readLine(sock);
+        const reply = parseReply(line);
+        if (!reply.ok)
+            throw new Error(reply.error);
+        return reply.data;
+    }
+    finally {
+        sock.destroy();
+    }
+}
+/** Returns true when the supervisor is reachable. Used by `/unbien
+ *  daemons` to decide whether to query runtime state or fall back to
+ *  registry-only listing. */
+export async function supervisorOnline() {
+    const sockPath = getSupervisorSockPath();
+    if (!usesNamedPipe() && !existsSync(sockPath))
+        return false;
+    try {
+        const sock = await _connect(sockPath);
+        sock.destroy();
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+// ── internals ───────────────────────────────────────────────────────────────
+function _connect(sockPath) {
+    return new Promise((resolve, reject) => {
+        const sock = createConnection({ path: sockPath });
+        let settled = false;
+        const timer = setTimeout(() => {
+            if (settled)
+                return;
+            settled = true;
+            sock.destroy();
+            reject(new SupervisorOfflineError(sockPath));
+        }, CONNECT_TIMEOUT_MS);
+        sock.once("connect", () => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            sock.setEncoding("utf8");
+            resolve(sock);
+        });
+        sock.once("error", () => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            reject(new SupervisorOfflineError(sockPath));
+        });
+    });
+}
+function _readLine(sock) {
+    return new Promise((resolve, reject) => {
+        let buf = "";
+        const timer = setTimeout(() => {
+            reject(new Error("supervisor reply timeout"));
+            sock.destroy();
+        }, REPLY_TIMEOUT_MS);
+        sock.on("data", (chunk) => {
+            buf += chunk;
+            const nl = buf.indexOf("\n");
+            if (nl >= 0) {
+                clearTimeout(timer);
+                resolve(buf.slice(0, nl));
+            }
+        });
+        sock.on("end", () => {
+            clearTimeout(timer);
+            const nl = buf.indexOf("\n");
+            if (nl >= 0)
+                return resolve(buf.slice(0, nl));
+            if (buf.length > 0)
+                return resolve(buf);
+            reject(new Error("supervisor closed connection without replying"));
+        });
+        sock.on("error", (err) => {
+            clearTimeout(timer);
+            reject(err);
+        });
+    });
+}
+//# sourceMappingURL=client.js.map