@lucid-agents/pi-xgate 0.1.5 → 0.1.6

package/dist/taskmarket.js

@@ -0,0 +1,275 @@
+// Adapts TaskMarket's x402 payer to the xgate Pi transport. The payer package is private, so
+// this file declares the structural subset of its v1 contract (`@taskmarket/x402-payer`
+// `src/api.ts`, X402_PAYER_API_VERSION 1) that the adapter uses; TaskMarket injects its
+// instance. The payer owns the wallet, signer, rails, policy and journals: this adapter keeps
+// no payment state of its own.
+//
+// The payer's string unions may gain values without a version bump. Every type here accepts
+// unknown strings, and the adapter treats an unknown state as unverified.
+import { atomic, origin as checkOrigin, record, route as checkRoute, XgateError, } from "@lucid-agents/xgate-client/types";
+import { XgatePurchaseError, } from "./transport.js";
+const RESOLVED_CHARGES = ["none", "released", "settled", "manually_resolved"], RESOLVED_STATES = ["completed", "failed"];
+const CATALOG_BYTES = 2 * 1024 * 1024, REQUEST_BYTES = 8 * 1024 * 1024, CATALOG_DEADLINE_MS = 15000;
+/** Never sends the request again for an ID the payer has seen: `purchase` maps every non-verified outcome to a terminal error. */
+export function createTaskMarketTransport(options) {
+    const { payer } = options, base = checkOrigin(options.origin), fetcher = options.fetch ?? fetch;
+    if (payer.apiVersion !== 1)
+        throw new XgateError("unsupported_payer_api");
+    const channel = async (payment) => {
+        if (!options.balances || payment.rail.kind !== "session")
+            return;
+        try {
+            const matches = (await options.balances()).filter((b) => b.railId === payment.rail.id &&
+                b.network === payment.network &&
+                b.asset === payment.asset);
+            // Several sessions on one rail are not one channel; unlike balances are never summed.
+            if (matches.length !== 1)
+                return;
+            const b = matches[0];
+            return {
+                depositingAtomic: b.depositing,
+                lockedAtomic: b.locked,
+                chargedAtomic: b.charged,
+                pendingAtomic: b.pending,
+                refundableAtomic: b.refundable,
+            };
+        }
+        catch {
+            return; // Display only.
+        }
+    };
+    return {
+        async models(signal) {
+            const deadline = AbortSignal.timeout(CATALOG_DEADLINE_MS);
+            let response;
+            try {
+                response = await fetcher(base + "/v1/models", {
+                    signal: signal ? AbortSignal.any([signal, deadline]) : deadline,
+                    redirect: "error",
+                    cache: "no-store",
+                    credentials: "omit",
+                    referrerPolicy: "no-referrer",
+                    headers: { accept: "application/json" },
+                });
+            }
+            catch {
+                throw new XgateError("catalog_unavailable");
+            }
+            if (!response.ok) {
+                await response.body?.cancel().catch(() => { });
+                throw new XgateError("catalog_unavailable");
+            }
+            const v = parse(await bounded(response, CATALOG_BYTES));
+            if (!record(v) || !Array.isArray(v.data) || v.data.length > 128)
+                throw new XgateError("invalid_catalog");
+            return v.data
+                .filter((m) => record(m) &&
+                (options.models === undefined || options.models.includes(m.id)))
+                .map((m) => ({ ...m, xgate_origin: base }));
+        },
+        async purchase(invocation, signal, onResponse) {
+            checkRoute(invocation.route);
+            const body = new TextEncoder().encode(invocation.body);
+            if (body.byteLength === 0 || body.byteLength > REQUEST_BYTES)
+                throw new XgateError("invalid_invocation");
+            const id = invocation.id;
+            let result;
+            try {
+                result = await payer.request({
+                    apiVersion: 1,
+                    invocationId: id,
+                    url: base + invocation.route,
+                    method: "POST",
+                    // Application headers only: the payer owns every payment header.
+                    headers: {
+                        "content-type": "application/json",
+                        accept: "application/json",
+                    },
+                    body,
+                    limits: { maxRequestBodyBytes: REQUEST_BYTES },
+                    ...(options.allocationId !== undefined
+                        ? { allocationId: options.allocationId }
+                        : {}),
+                    ...(options.policyRuleId !== undefined
+                        ? { policyRuleId: options.policyRuleId }
+                        : {}),
+                    ...(options.nonInteractive !== undefined
+                        ? { nonInteractive: options.nonInteractive }
+                        : {}),
+                }, {
+                    ...(signal ? { signal } : {}),
+                    ...(options.confirmPayment
+                        ? { confirmPayment: options.confirmPayment }
+                        : {}),
+                });
+            }
+            catch (error) {
+                throw failure(error, id);
+            }
+            const payment = result.payment;
+            if (result.invocationId !== id || result.apiVersion !== 1)
+                throw new XgatePurchaseError("payer_result_mismatch", id, true, payment && display(payment));
+            // A paid xgate route never answers without a payment challenge.
+            if (!payment)
+                throw new XgatePurchaseError(result.response.status === 200
+                    ? "payment_missing"
+                    : "request_rejected", id, false);
+            const shown = display(payment);
+            if (payment.charge !== "settled" ||
+                typeof payment.settledAmount !== "string")
+                throw new XgatePurchaseError("payment_unverified", id, true, shown);
+            shown.chargedAtomic = payment.settledAmount;
+            try {
+                if (atomic(payment.settledAmount) > atomic(payment.authorizedAmount))
+                    throw new XgateError("charge_over_authorization");
+            }
+            catch {
+                throw new XgatePurchaseError("invalid_settlement", id, true, shown);
+            }
+            const r = result.response, h = r.headers;
+            // Charged, so not pending, but the content is unusable.
+            if (r.status !== 200 ||
+                !/^application\/json\b/i.test(r.contentType) ||
+                h["x-inference-privacy"] !== "anonymous" ||
+                h["x-result-retention"] !== "none" ||
+                !h["cache-control"]?.includes("no-store"))
+                throw new XgatePurchaseError("response_rejected", id, false, shown);
+            let value;
+            try {
+                value = parse(r.body);
+            }
+            catch {
+                throw new XgatePurchaseError("invalid_response", id, false, shown);
+            }
+            if (!record(value) ||
+                typeof value.id !== "string" ||
+                value.result_replay_available !== undefined)
+                throw new XgatePurchaseError("invalid_response", id, false, shown);
+            const head = {
+                status: r.status,
+                headers: { "content-type": r.contentType, "cache-control": "no-store" },
+            };
+            try {
+                await onResponse?.(head);
+            }
+            catch {
+                throw new XgatePurchaseError("response_hook_failed", id, false, shown);
+            }
+            const balance = await channel(payment);
+            if (balance)
+                shown.channel = balance;
+            return {
+                body: value,
+                settlement: {
+                    chargedAtomic: payment.settledAmount,
+                    reference: payment.transaction ?? payment.commitment ?? payment.paymentId,
+                },
+                purchase: payment.commitment ?? payment.paymentId,
+                payment: shown,
+            };
+        },
+        async status() {
+            return {
+                transport: "taskmarket",
+                origin: base,
+                ...(options.balances
+                    ? {
+                        balances: (await options.balances()).map((b) => ({
+                            rail: b.railId,
+                            network: b.network,
+                            asset: b.asset,
+                            depositingAtomic: b.depositing,
+                            lockedAtomic: b.locked,
+                            chargedAtomic: b.charged,
+                            pendingAtomic: b.pending,
+                            refundableAtomic: b.refundable,
+                        })),
+                    }
+                    : {}),
+            };
+        },
+        async reconcile(invocationId) {
+            const s = await payer.reconcile(invocationId);
+            return {
+                invocationId: s.invocationId,
+                state: s.state,
+                charge: s.charge,
+                uncertain: s.uncertain,
+                ...(s.errorCode ? { errorCode: s.errorCode } : {}),
+                ...(s.payment ? { payment: display(s.payment) } : {}),
+            };
+        },
+    };
+}
+function display(p) {
+    return {
+        network: p.network,
+        scheme: p.scheme,
+        asset: p.asset,
+        payTo: p.payTo,
+        rail: p.rail.kind,
+        authorizedAtomic: p.authorizedAmount,
+        ...(p.charge === "settled" && p.settledAmount !== undefined
+            ? { chargedAtomic: p.settledAmount }
+            : {}),
+        status: p.charge,
+        ...((p.transaction ?? p.commitment)
+            ? { reference: p.transaction ?? p.commitment }
+            : {}),
+    };
+}
+/**
+ * Maps a payer rejection. Only the stable code crosses into Pi; the payer's message may carry
+ * URLs or server text. A rejection that does not state `pending: false` counts as pending.
+ */
+function failure(error, id) {
+    const e = error;
+    const code = typeof e?.code === "string" && /^[a-z0-9_]{1,64}$/.test(e.code)
+        ? e.code
+        : "payer_failed";
+    // A duplicate never sends again, but its recorded invocation may still be unresolved: only a
+    // positively resolved record counts as not pending.
+    const recorded = e?.invocation;
+    const pending = e?.pending !== false ||
+        (recorded !== undefined &&
+            !(recorded.uncertain === false &&
+                RESOLVED_CHARGES.includes(recorded.charge) &&
+                RESOLVED_STATES.includes(recorded.state)));
+    const summary = e?.invocation?.payment;
+    return new XgatePurchaseError(code, id, pending, record(summary) ? display(summary) : undefined);
+}
+async function bounded(response, limit) {
+    if (!response.body)
+        throw new XgateError("invalid_catalog");
+    const reader = response.body.getReader(), chunks = [];
+    let length = 0;
+    try {
+        for (;;) {
+            const part = await reader.read();
+            if (part.done)
+                break;
+            length += part.value.byteLength;
+            if (length > limit)
+                throw new XgateError("catalog_bound");
+            chunks.push(part.value);
+        }
+    }
+    catch (error) {
+        await reader.cancel().catch(() => { });
+        throw error instanceof XgateError
+            ? error
+            : new XgateError("catalog_unavailable");
+    }
+    finally {
+        reader.releaseLock();
+    }
+    return Buffer.concat(chunks, length);
+}
+function parse(bytes) {
+    try {
+        return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
+    }
+    catch {
+        throw new XgateError("invalid_response");
+    }
+}

package/dist/transport.d.ts

@@ -0,0 +1,72 @@
+import { XgateError, type Invocation, type PurchaseResult } from "@lucid-agents/xgate-client/types";
+/** Response metadata safe to show Pi's `onResponse` hook: never payment or status credentials. */
+export interface XgateResponseHead {
+    status: number;
+    headers: Record<string, string>;
+}
+/**
+ * Rail-neutral payment terms and status for display. Pi shows them; it never selects or
+ * configures a rail. Amounts are unsigned integer strings in the asset's smallest unit, and
+ * amounts of different assets are never combined.
+ */
+export interface XgatePayment {
+    /** CAIP-2 network, e.g. `eip155:8453`. */
+    network: string;
+    /** Payment scheme as the payee advertised it, e.g. `batch-settlement`, `exact`, `session`. */
+    scheme: string;
+    asset: string;
+    payTo?: string;
+    /** Rail shape: `per-request` or `session` today; other values may appear. */
+    rail?: string;
+    /** Most this invocation could be charged. */
+    authorizedAtomic: string;
+    /** Verified charge, once known. */
+    chargedAtomic?: string;
+    /** `settled`, `pending`, `amount_unknown`, `released`, ...; anything but `settled` is unverified. */
+    status: string;
+    /** Settlement transaction or payee commitment, when one exists. */
+    reference?: string;
+    /** Session-rail balance after this payment, when the host reports one. */
+    channel?: XgateChannelBalance;
+}
+export interface XgateChannelBalance {
+    depositingAtomic: string;
+    lockedAtomic: string;
+    chargedAtomic: string;
+    pendingAtomic: string;
+    refundableAtomic: string;
+}
+export interface XgatePurchaseResult extends PurchaseResult {
+    payment?: XgatePayment;
+}
+/**
+ * A purchase that ended without a verified result. `pending` is true when money may have moved
+ * and the outcome is unknown: the invocation must be reconciled, never retried.
+ */
+export declare class XgatePurchaseError extends XgateError {
+    readonly invocationId: string;
+    readonly pending: boolean;
+    readonly payment?: XgatePayment;
+    constructor(code: string, invocationId: string, pending: boolean, payment?: XgatePayment);
+}
+/**
+ * Moves one frozen Pi request to xgate and returns the verified result. The provider owns
+ * catalog qualification, codecs and the invocation ID; the transport owns payment.
+ *
+ * `purchase` sends at most one paid submission per `Invocation.id`, never retries a paid
+ * request, and never pays again for an ID it has seen: a repeated ID rejects. It resolves
+ * only with a verified result and rejects on every other outcome, preferably with an
+ * `XgatePurchaseError` stating whether the payment is pending. `BrokerClient` is the
+ * standalone implementation.
+ */
+export interface XgateTransport {
+    /** Current router catalog rows. Called before every paid invocation. */
+    models(signal?: AbortSignal): Promise<unknown[]>;
+    purchase(invocation: Invocation, signal?: AbortSignal, onResponse?: (response: XgateResponseHead) => Promise<void>): Promise<XgatePurchaseResult>;
+    /** Optional `/xgate status` and `/xgate budget` view. */
+    status?(signal?: AbortSignal): Promise<unknown>;
+    /** Optional `/xgate receipts` view. */
+    receipts?(signal?: AbortSignal): Promise<unknown>;
+    /** Optional `/xgate reconcile <invocation ID>`. Never resends the request. */
+    reconcile?(invocationId: string, signal?: AbortSignal): Promise<unknown>;
+}

package/dist/transport.js

@@ -0,0 +1,21 @@
+import { XgateError, } from "@lucid-agents/xgate-client/types";
+/**
+ * A purchase that ended without a verified result. `pending` is true when money may have moved
+ * and the outcome is unknown: the invocation must be reconciled, never retried.
+ */
+export class XgatePurchaseError extends XgateError {
+    invocationId;
+    pending;
+    payment;
+    constructor(code, invocationId, pending, payment) {
+        super(code);
+        this.name = "XgatePurchaseError";
+        this.message = pending
+            ? `Xgate: ${code}. The payment outcome is unknown; do not retry. Reconcile it before another purchase.`
+            : `Xgate: ${code}. Inspect the payment status before another purchase.`;
+        this.invocationId = invocationId;
+        this.pending = pending;
+        if (payment)
+            this.payment = payment;
+    }
+}

package/package.json

@@ -1,7 +1,18 @@
 {
   "name": "@lucid-agents/pi-xgate",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./extension": {
+      "types": "./dist/extension.d.ts",
+      "default": "./dist/extension.js"
+    },
+    "./package.json": "./package.json"
+  },
   "keywords": [
     "pi-package",
     "xgate",
@@ -15,16 +26,17 @@
     ]
   },
   "files": [
+    "dist",
     "src",
     "README.md",
     "LICENSE"
   ],
   "dependencies": {
-    "@lucid-agents/xgate-client": "0.1.5"
+    "@lucid-agents/xgate-client": "0.1.6"
   },
   "peerDependencies": {
-    "@earendil-works/pi-ai": "1.1.0",
-    "@earendil-works/pi-coding-agent": "1.1.0"
+    "@earendil-works/pi-ai": "0.85.1 || 1.1.0",
+    "@earendil-works/pi-coding-agent": "0.85.1 || 1.1.0"
   },
   "engines": {
     "node": ">=24.19 <25"
@@ -44,10 +56,10 @@
     "registry": "https://registry.npmjs.org"
   },
   "license": "MIT",
-  "gitHead": "2c12308686701f39f95093c5984d014c0ec83d26",
+  "gitHead": "f26a9cdf35db07e8aa6b6ad7c6408884aa283ebc",
   "xgateRelease": {
-    "version": "v0.1.5",
-    "sourceSha": "2c12308686701f39f95093c5984d014c0ec83d26",
-    "candidateId": "rc-2c1230868670-37853927676-1"
+    "version": "v0.1.6",
+    "sourceSha": "f26a9cdf35db07e8aa6b6ad7c6408884aa283ebc",
+    "candidateId": "rc-f26a9cdf35db-38096296216-1"
   }
 }

package/src/codec.ts

@@ -1,13 +1,14 @@
-import {
-  collapseSystemMessages,
-  getCurrentSystemPrompt,
-  getCurrentTools,
-  type AssistantMessage,
-  type Model,
-  type SimpleStreamOptions,
-  type TranscriptContext,
-  type Usage,
-  type ThinkingLevelMap,
+import * as pi from "@earendil-works/pi-ai";
+import type {
+  AssistantMessage,
+  Context,
+  Message,
+  Model,
+  SimpleStreamOptions,
+  Tool,
+  TranscriptContext,
+  Usage,
+  ThinkingLevelMap,
 } from "@earendil-works/pi-ai";
 import { XgateError, type Route } from "@lucid-agents/xgate-client/types";
 import capabilities from "./generated/openai-model-capabilities.json" with { type: "json" };
@@ -155,6 +156,45 @@ export function catalogEntries(rows: any[]): Entry[] {
   }
   return entries;
 }
+/**
+ * Pi 1.1 passes a normalized transcript; Pi 0.85 passes `systemPrompt` and `tools` beside the
+ * messages. Structural, so published types do not name a type only one Pi version has.
+ */
+export type PiContext = {
+  messages: Message[];
+  systemPrompt?: string;
+  tools?: Tool[];
+};
+type Turn = Exclude<Message, { role: "system" }>;
+export function transcript(context: PiContext): {
+  system: string;
+  tools: Tool[];
+  messages: Turn[];
+} {
+  const legacy = "systemPrompt" in context || "tools" in context;
+  if (typeof pi.collapseSystemMessages !== "function") {
+    need(
+      !context.messages.some((m) => m.role === "system"),
+      "unsupported_context",
+    );
+    const raw = context as Context;
+    return {
+      system: raw.systemPrompt ?? "",
+      tools: raw.tools ?? [],
+      messages: raw.messages as Turn[],
+    };
+  }
+  const collapsed = pi.collapseSystemMessages(
+    legacy
+      ? pi.normalizeContext(context as Context)
+      : (context as TranscriptContext),
+  );
+  return {
+    system: pi.getCurrentSystemPrompt(collapsed.messages),
+    tools: pi.getCurrentTools(collapsed.messages),
+    messages: collapsed.messages.filter((m): m is Turn => m.role !== "system"),
+  };
+}
 function text(content: any): string {
   if (typeof content === "string") return content;
   need(
@@ -187,7 +227,7 @@ function validateTools(tools: any[], anthropic: boolean): void {
 }
 export function encode(
   entry: Entry,
-  context: TranscriptContext,
+  context: PiContext,
   options: SimpleStreamOptions = {},
 ): any {
   need(
@@ -205,9 +245,7 @@ export function encode(
     "unsupported_sampling",
   );
   const anthropic = entry.route.endsWith("/messages"),
-    collapsed = collapseSystemMessages(context),
-    system = getCurrentSystemPrompt(collapsed.messages),
-    tools = getCurrentTools(collapsed.messages);
+    { system, tools, messages } = transcript(context);
   validateTools(tools, anthropic);
   const max = options.maxTokens ?? Math.min(4096, entry.model.maxTokens);
   need(
@@ -234,8 +272,7 @@ export function encode(
     else history.push({ role, content });
   };
   if (!anthropic && system) history.push({ role: "system", content: system });
-  for (const message of collapsed.messages) {
-    if (message.role === "system") continue;
+  for (const message of messages) {
     if (message.role === "user") {
       const value = text(message.content);
       if (anthropic) append("user", [{ type: "text", text: value }]);

package/src/extension.ts

@@ -8,6 +8,15 @@ import { readFileSync, lstatSync, mkdirSync, writeFileSync } from "node:fs";
 import { dirname, isAbsolute, join } from "node:path";
 import { homedir } from "node:os";
 import { createXgateProvider } from "./provider.ts";
+import type { XgatePayment, XgateTransport } from "./transport.ts";
+export interface XgateExtensionOptions {
+  /**
+   * Host-managed transport, or a factory called on load and `/xgate refresh`. When set, the
+   * extension reads no broker configuration and `/xgate setup` is unavailable. Without it, the
+   * standalone `BrokerClient` from `XGATE_CONFIG` or `~/.pi/agent/xgate.json` is used.
+   */
+  transport?: XgateTransport | (() => XgateTransport | Promise<XgateTransport>);
+}
 function privateText(path: string, max = 8192): string {
   if (!isAbsolute(path)) throw new XgateError("absolute_config_path_required");
   const s = lstatSync(path);
@@ -20,25 +29,57 @@ function privateText(path: string, max = 8192): string {
     throw new XgateError("private_config_required");
   return readFileSync(path, "utf8").trim();
 }
-export default async function extension(pi: ExtensionAPI): Promise<void> {
+function standalone(configPath: string): BrokerClient {
+  const cfg = JSON.parse(privateText(configPath));
+  if (typeof cfg.url !== "string" || typeof cfg.tokenFile !== "string")
+    throw new XgateError("invalid_config");
+  return new BrokerClient(cfg.url, privateText(cfg.tokenFile, 128));
+}
+/** Rail-neutral: atomic units of the named asset; decimals are not assumed. */
+export function paymentStatus(p: XgatePayment): string {
+  const left = p.channel
+    ? `; channel ${p.channel.refundableAtomic} refundable`
+    : "";
+  return `xgate paid ${p.chargedAtomic ?? "?"}/${p.authorizedAtomic} ${p.asset} on ${p.network} (${p.scheme})${left}`;
+}
+/** Pi extension factory. The default export is the standalone wallet-broker extension. */
+export function createXgateExtension(
+  options: XgateExtensionOptions = {},
+): (pi: ExtensionAPI) => Promise<void> {
+  return (pi) => register(pi, options);
+}
+export default createXgateExtension();
+async function register(
+  pi: ExtensionAPI,
+  options: XgateExtensionOptions,
+): Promise<void> {
+  const injected = options.transport;
   const configPath =
     process.env.XGATE_CONFIG ?? join(homedir(), ".pi", "agent", "xgate.json");
-  let broker: BrokerClient | undefined;
+  let broker: XgateTransport | undefined;
   let context: ExtensionContext | undefined;
   const load = async () => {
-    const cfg = JSON.parse(privateText(configPath));
-    if (typeof cfg.url !== "string" || typeof cfg.tokenFile !== "string")
-      throw new XgateError("invalid_config");
-    const next = new BrokerClient(cfg.url, privateText(cfg.tokenFile, 128));
-    const provider = await createXgateProvider(
-      next,
-      () => context?.sessionManager.getSessionId() ?? "standalone",
-      (r) =>
+    const next =
+      injected === undefined
+        ? standalone(configPath)
+        : typeof injected === "function"
+          ? await injected()
+          : injected;
+    const provider = await createXgateProvider(next, {
+      sessionId: () => context?.sessionManager.getSessionId() ?? "standalone",
+      onPaid: (r) =>
         context?.ui.setStatus(
           "xgate",
-          `xgate paid ${(Number(r.settlement.chargedAtomic) / 1e6).toFixed(6)}`,
+          r.payment
+            ? paymentStatus(r.payment)
+            : `xgate paid ${(Number(r.settlement.chargedAtomic) / 1e6).toFixed(6)}`,
         ),
-    );
+      onPurchaseFailed: (f) =>
+        context?.ui.setStatus(
+          "xgate",
+          `xgate ${f.pending ? "unresolved" : "failed"}: ${f.invocationId}`,
+        ),
+    });
     pi.registerProvider(provider);
     broker = next;
   };
@@ -63,6 +104,8 @@ export default async function extension(pi: ExtensionAPI): Promise<void> {
       const [command, id] = args.trim().split(/\s+/);
       try {
         if (command === "setup") {
+          if (injected !== undefined)
+            throw new XgateError("transport_managed_by_host");
           if (!ctx.hasUI)
             throw new XgateError("configure_XGATE_CONFIG_for_headless_mode");
           const url = await ctx.ui.input(
@@ -97,11 +140,15 @@ export default async function extension(pi: ExtensionAPI): Promise<void> {
         if (!broker) throw new XgateError("wallet_not_configured");
         if (command === "reconcile") {
           if (!id) throw new XgateError("purchase_id_required");
+          if (!broker.reconcile)
+            throw new XgateError("unsupported_by_transport");
           const result = await broker.reconcile(id);
           ctx.ui.notify(JSON.stringify(result), "info");
           return;
         }
         if (command === "receipts") {
+          if (!broker.receipts)
+            throw new XgateError("unsupported_by_transport");
           ctx.ui.notify(
             JSON.stringify(await broker.receipts(), null, 2),
             "info",
@@ -109,6 +156,7 @@ export default async function extension(pi: ExtensionAPI): Promise<void> {
           return;
         }
         if (command === "status" || command === "budget" || !command) {
+          if (!broker.status) throw new XgateError("unsupported_by_transport");
           const status = await broker.status();
           ctx.ui.notify(JSON.stringify(status, null, 2), "info");
           return;