@mono-agent/agent-runtime 0.20.11 → 0.20.14

package/src/ai/runtime/session-liveness.js

@@ -1,8 +1,8 @@
 // @ts-check
 // Synchronous session-liveness primitives over a createSessionRegistry.
 //
-// A provider bridge owns session DURABILITY (pi keeps a Session transcript,
-// codex keeps an app-server thread); this kernel layer owns session LIVENESS —
+// The Pi bridge owns session DURABILITY by keeping a Session transcript; this
+// kernel layer owns session LIVENESS —
 // the concurrency claim that keeps two turns from driving one session at once.
 // The primitives here are deliberately SYNCHRONOUS: each does its registry
 // get -> check -> set in a single await-free span, so the "busy claim must be
@@ -11,8 +11,7 @@
 //
 // The registry stays the storage + idle-TTL + dispose fan-out layer (its
 // exports are unchanged, worklab-compatible); liveness only adds the claim /
-// reserve / release / adoptIfPresent seam that pi-native's session-lifecycle and
-// codex-app both consume.
+// reserve / release / adoptIfPresent seam that Pi's session lifecycle consumes.
 
 /**
  * @typedef {object} SessionRegistryLike

package/src/ai/runtime/sessions.js

@@ -1,8 +1,7 @@
 // Provider session registries.
 //
-// Bridges that support continuous provider sessions (codex-app keeps the
-// app-server subprocess + thread alive, pi-native keeps a pi Session
-// transcript) register their live sessions here, keyed by provider session id.
+// Pi keeps each continuous provider session as a live Session transcript and
+// registers it here under the provider session id.
 // The host
 // owns session lifetime policy (which conversation maps to which session,
 // when to resume, when to retire); these registries only make sure nothing
@@ -13,8 +12,8 @@
 // `createSessionRegistry` instances self-register in a module-level set so
 // the runtime surface can expose `syncSession(id)` / `refreshSession(id)` /
 // `disposeSession(id)` / `disposeAllSessions()`
-// without knowing which bridge owns the id. Provider session ids are unique
-// across bridges (codex thread ids, pi uuids), so fan-out dispose is safe.
+// without coupling the host-facing lifecycle surface to Pi's transcript
+// implementation. Pi session UUIDs are unique, so fan-out dispose is safe.
 
 const DEFAULT_IDLE_TIMEOUT_MS = 30 * 60 * 1000;
 

package/src/ai/runtime/tool-policy.js

@@ -2,8 +2,6 @@
 
 /** @type {"projected"} */
 export const TOOL_POLICY_PROJECTED = "projected";
-/** @type {"allow_all_only"} */
-export const TOOL_POLICY_ALLOW_ALL_ONLY = "allow_all_only";
 
 /**
  * True when a tool policy is semantically unrestricted.

package/src/ai/types.js

@@ -8,62 +8,22 @@
 // via `import('./types.js').X` JSDoc syntax from the other seam files, or
 // transitively through the package root's generated declarations.
 //
-// A few fields below use the `"literal" | (string & {})` shape (a "branded
-// string union"). This keeps the known literal values available for
-// IDE/editor autocomplete while still accepting any plain `string`, since
-// hosts validate the real vocabulary at runtime (parseRuntimeModelReference,
-// resolveRuntimeBridge) rather than at the type level — the type only
-// documents the values active runtimes currently produce.
-
 /**
- * @typedef {"claude" | "pi" | "codex" | "opencode" | "acp" | (string & {})} RuntimeSdkId
- * Canonical active runtime id. See ACTIVE_RUNTIME_KINDS (model-refs.js) for
- * the enforced-at-runtime vocabulary.
+ * @typedef {"pi"} RuntimeSdkId
+ * Runtime-result and telemetry label. Model references no longer carry this
+ * field because Pi is the sole runtime bridge.
  */
 
 /**
- * @typedef {"claude" | "claude-code" | "codex-app" | "opencode-app" | "pi" | "acp-stdio" | (string & {})} RuntimeBridgeId
- * Registry bridge id (distinct from RuntimeSdkId: a single sdk can be served
- * by more than one bridge, e.g. sdk "claude" is served by both the "claude"
- * SDK bridge and the "claude-code" CLI bridge). See
- * src/ai/runtime/registry.js's builtinBridgeSpecs.
+ * @typedef {"pi"} RuntimeBridgeId
+ * Registry bridge id. See src/ai/runtime/registry.js's builtinBridgeSpecs.
  */
 
 /**
  * @typedef {Object} RuntimeModelRef
- * @property {RuntimeSdkId} sdk           Canonical active runtime id.
+ * @property {string} provider            Pi provider id.
  * @property {string} model               Provider model id.
- * @property {string} [reference]         Original canonical model reference; always set by
- *                                         parseRuntimeModelReference, but router.js's chain
- *                                         shorthand accepts bare {sdk, model} refs without one.
- * @property {string} [provider]          Pi/OpenCode provider id when sdk === "pi" | "opencode".
- */
-
-/**
- * @typedef {Object} RuntimeNativeSubagentDefinition
- * One caller-defined Claude native `Task` profile. Codex collaboration-agent
- * definitions are owned by Codex and are not represented by this type.
- * @property {string} name
- * @property {string} [displayName]
- * @property {string} [description]
- * @property {string} [helperSystemPrompt]
- * @property {string} [instructions]
- * @property {ReadonlyArray<string>} [allowedTools]
- * @property {ReadonlyArray<string>} [disallowedTools]
- * @property {string | RuntimeModelRef} [modelRef]
- * @property {RuntimeModelRef} [model]
- * @property {string} [effort]
- * @property {Object<string, Object>} [mcpServers]
- * @property {Object} [mcpApps] App-owned exact-connection MCP Apps registry (Pi-native only).
- */
-
-/**
- * @typedef {Object} RuntimeNativeSubagentsOptions
- * Caller-defined native profiles are supported only by the Claude bridges.
- * Codex owns its collaboration agents; use `codexLoadProjectDocs` when those
- * agents should receive repository instructions.
- * @property {"claude"} provider
- * @property {ReadonlyArray<RuntimeNativeSubagentDefinition>} teammates
+ * @property {string} reference           Canonical `<provider>:<model>` reference.
  */
 
 /**
@@ -166,32 +126,6 @@
  * @returns {Promise<RuntimeToolLifecyclePersistence|undefined>}
  */
 
-/** @typedef {"uniform"|"per-route-native"} RuntimeRouteSafetyMode */
-
-/**
- * @typedef {"mono-agent-monotonic"|"disabled"|"mono-agent-srt"|"mono-agent-srt-unsafe-host-fallback"|"provider-native"|"codex-native"|"unsupported"} RuntimeRouteSandboxContract
- * Fixed telemetry vocabulary for a route's sandbox posture. The
- * `mono-agent-srt-unsafe-host-fallback` describes a policy that prefers SRT but
- * explicitly permits host execution if unavailable; it does not claim which
- * branch ran for a particular command.
- */
-
-/**
- * @typedef {"mono-agent-monotonic"|"mono-agent-policy"|"provider-representable"|"exact-allow-all"|"unsupported"} RuntimeRouteToolsContract
- * `exact-allow-all` is a stable telemetry token. It describes an effective
- * unrestricted contract, including mixed allowlists that contain `"*"`;
- * it does not require the literal one-element array `["*"]`.
- */
-
-/**
- * @typedef {Object} RuntimeRouteSafetyContract
- * Bounded, credential-free description of the sandbox/tool contract applied
- * to one fallback route.
- * @property {RuntimeRouteSafetyMode} mode
- * @property {RuntimeRouteSandboxContract} sandbox
- * @property {RuntimeRouteToolsContract} tools
- */
-
 /**
  * @typedef {Object} RuntimeObserver
  * Per-call or host-level observer merged by createObserverHub (ai/observer.js).
@@ -254,10 +188,8 @@
  * @typedef {Object} RuntimeRunOptions
  * The options object a host passes to `createRuntime(host).run(systemPrompt, options)`.
  * @property {RuntimeModelRef} model                     Resolved model reference; see parseRuntimeModelReference.
- * @property {"sdk"|"cli"|"acp"} [executionMode]       "sdk" (default), "cli", or "acp"; selects which bridge variant handles the model.
  * @property {string} [sessionId]                         Host conversation/session key for resumable bridges.
  * @property {string} [providerSessionId]                 Provider-owned resume id for resumable bridges.
- * @property {typeof import("@anthropic-ai/claude-agent-sdk").query} [claudeAgentQuery] Advanced programmatic/test seam for the Claude SDK route; omitted runs use the runtime's pinned SDK query implementation.
  * @property {boolean} [sessionKeepAlive]                 Keep resumable provider state alive after the turn.
  * @property {number} [sessionIdleTimeoutMs]              Idle TTL for resumable provider state.
  * @property {AsyncIterable<{body: string, id?: string, receivedAt?: string, acknowledge?: () => void, reject?: (error?: unknown) => void}>} [liveInput] Stream of in-flight user messages for steering an active run. Providers acknowledge only after accepting a message into the active turn.
@@ -266,7 +198,6 @@
  * @property {RuntimeToolLifecycleSink} [toolLifecycleSink] Awaited host-owned incremental lifecycle persistence boundary.
  * @property {ReadonlyArray<Object>} [messages]
  * @property {string} [effort]
- * @property {boolean} [fastMode]
  * @property {string} [cwd]
  * @property {Object<string, Object>} [mcpServers]
  * @property {ReadonlyArray<{name: string, description?: string}>} [skills] Skills disclosed to this run, as `{name, description}`. Non-empty makes `supports_skills` a routing requirement (see router.js), so a chain entry that lacks it is skipped.
@@ -285,36 +216,14 @@
  * @property {RuntimeToolLimits} [toolLimits] Typed per-run tool-output limits (supported replacement for the deprecated `settings` tool keys).
  * @property {RuntimeCompactionPolicy} [compaction] Typed per-run compaction policy (supported replacement for the deprecated `settings` compaction keys).
  * @property {RuntimePromptOverrides} [prompts] Per-run prompt-fragment overrides (run wins over the host default).
- * @property {import('./providers/acp-client.js').AcpClientHostOptions["resolveAcpProfile"]} [resolveAcpProfile] Per-run ACP profile resolver; wins over the host default.
- * @property {import('./providers/acp-client.js').AcpClientHostOptions["onAcpInteractionRequest"]} [onAcpInteractionRequest] Per-run ACP permission/elicitation callback; wins over the host default.
- * @property {Uint8Array} [acpSessionTokenKey] Host-owned 32-byte key for confidential authenticated ACP session handles. Required for every ACP task run.
  * @property {{backend?: "auto"|"searxng"|"codex"|"keyless", endpoint?: string, codex?: {model?: string}}} [webSearchConfig] Run-scoped WebSearch backend configuration.
  * @property {{render?: "never"|"auto", browserCommand?: string}} [webFetchConfig] Run-scoped WebFetch extraction/render configuration.
  * @property {"sequential"|"safe-parallel"} [piToolExecutionMode] Pi built-in tool scheduling mode. Safe parallelism is the default.
  * @property {"one-at-a-time"|"all"} [piToolParallelismMode] DEPRECATED. Compatibility alias mapped to piToolExecutionMode.
  * @property {Object} [settings] DEPRECATED. Legacy flat settings bag; consumed only as a per-group FALLBACK when the corresponding typed object (`toolLimits` / `compaction`) is absent. Consuming any key emits one `deprecated_settings_option` runtime_warning per run. Migrate via resolveRuntimePolicies (@mono-agent/runtime-adapter).
- * @property {ReadonlyArray<"user" | "project" | "local">} [settingSources] Claude Agent SDK only. Filesystem
- *   settings the SDK may load for this run. Omitted/empty disables user, project, and local sources, including their
- *   CLAUDE.md, hooks, plugins, and on-disk agent profiles. Anthropic managed settings remain in force and may still
- *   configure hooks or plugins; this option is not a managed-policy bypass. Each opted-in source may execute configured
- *   hooks and plugins, so enable only trusted settings and avoid these sources in an untrusted checkout. Include
- *   `"project"`/`"user"` to let the native `Task` tool discover `.claude/agents` definitions. Unrecognized entries are
- *   dropped. The Claude Code CLI bridge does not take this option: that binary performs its own settings discovery and
- *   mono-agent passes no `--setting-sources`, so a CLI run already reads the host config regardless of this value.
- * @property {boolean} [codexLoadProjectDocs] Codex app-server only. Omitted/false starts the managed app-server with
- *   `project_doc_max_bytes=0`, preventing automatic repository-instruction discovery. True restores Codex's native
- *   project-doc loading defaults. An explicit `codexAppServerArgs` array wins over this convenience option.
- * @property {boolean} [codexSandboxNetworkAccess] Codex app-server only, code-only. Strict `true` enables native
- *   network access for plan/read-only and default/acceptEdits/workspace-write turns; omitted or any other runtime
- *   value denies it. No-tool probes always deny network access, and bypass/danger-full-access remains unchanged. This
- *   is unrelated to `RuntimeRunOptions.sandboxPolicy`, which controls mono-agent's own sandbox and is not consumed by
- *   Codex's provider-owned tool loop. Default/acceptEdits workspace-write plus network true grants repository read and
- *   network egress in the same turn; prefer plan when only read-only browsing is needed.
- * @property {RuntimeNativeSubagentsOptions} [nativeSubagents] Caller-defined Claude native `Task` profiles. Direct
- *   Codex owns its collaboration agents and rejects configured teammate definitions; `codexLoadProjectDocs` controls
- *   whether Codex loads repository instructions for its own agents.
  * @property {RuntimeSubagentsOptions} [subagents] In-process `Agent` built-in: profiles, caps, and the nested-run callback.
  * @property {import('../agent/tools/shared/process-jobs.js').ProcessJobsController} [processJobs] Pi-native-only structural process-job controller. When absent, Exec/Bash schemas and foreground behavior are unchanged.
+ * @property {import('../agent/tools/shared/monitors.js').MonitorsController} [monitors] Pi-native-only structural monitor controller. When absent, the Monitor and MonitorStop tools are not registered at all.
  * @property {Object} [diagnosticsSeed] Set by createRouterRuntime (ai/runtime/router.js) with a `resume_snapshot` when
  *   failing over mid-chain; a host-level coordinator may relay it forward (see agent/transcript.js), not read by any
  *   bridge in this package today.
@@ -325,7 +234,7 @@
 
 /**
  * @typedef {RuntimeRunOptions
- *   & Pick<AgentRuntimeHostOptions, "resolveCustomPricing" | "resolvePiApiKey" | "resolveAcpProfile" | "onAcpInteractionRequest" | "acpSessionTokenKey" | "persistArtifact" | "onCompactionRecorded" | "onToolApprovalRequest" | "toolRiskTiers" | "approvalDefaultRiskTier" | "approvalTimeoutMs" | "approvalAlwaysAllowTools">
+ *   & Pick<AgentRuntimeHostOptions, "resolveCustomPricing" | "resolvePiApiKey" | "persistArtifact" | "onCompactionRecorded" | "onToolApprovalRequest" | "toolRiskTiers" | "approvalDefaultRiskTier" | "approvalTimeoutMs" | "approvalAlwaysAllowTools">
  *   & {runtimeBrand: import('../runtime-brand.js').RuntimeBrand, toolContext?: import('../agent/tools/shared/tool-context.js').ToolContext, observerHub: {emit: (event: RuntimeEvent) => void, flush: () => Promise<void>}}
  * } RuntimeRequest
  * The request shape a bridge's `execute(systemPrompt, req)` receives as its
@@ -407,8 +316,7 @@
  * @property {Array<Object>} [runtimeWarnings]
  * @property {Object} [diagnostics]
  * @property {Object} [capabilitiesUsed]
- * @property {Array<{model: RuntimeModelRef, failureKind: (string|null), requestId?: (string|null), retryableSubkind?: (string|null), retryIndex?: number, requirements?: Object, routeSafety?: RuntimeRouteSafetyMode, safetyContract?: RuntimeRouteSafetyContract}>} [failoverHistory] Set by createRouterRuntime (ai/runtime/router.js) on every failed/skipped attempt.
- * @property {Array<{attemptIndex: number, model: RuntimeModelRef, routeSafety: RuntimeRouteSafetyMode, safetyContract: RuntimeRouteSafetyContract, status: string}>} [routeSafetyHistory] Bounded route-safety audit emitted by createRouterRuntime.
+ * @property {Array<{model: RuntimeModelRef, failureKind: (string|null), requestId?: (string|null), retryableSubkind?: (string|null), retryIndex?: number, requirements?: Object}>} [failoverHistory] Set by createRouterRuntime (ai/runtime/router.js) on every failed/skipped attempt.
  */
 
 /**
@@ -428,8 +336,7 @@
  * @property {boolean} [supports_builtin_tools]
  * @property {boolean} [supports_live_input]
  * @property {boolean} [supports_native_subagents] Whether the bridge exposes provider-native subagent surfaces and
- *   normalized activity. This does not imply it accepts caller-defined `nativeSubagents`: Codex owns its collaboration
- *   agents, while only the Claude bridges project caller-defined profiles.
+ *   normalized activity. In-process delegation is the `Agent` tool, configured by the host.
  * @property {boolean} [supports_request_tool_environment]
  * @property {boolean} [supports_fast_mode]
  * @property {"projected"|"allow_all_only"} [tool_policy] Whether the bridge can
@@ -508,11 +415,8 @@
  * @property {RuntimePromptOverrides} [prompts] Host-level prompt-fragment override defaults; a per-run `options.prompts` field wins over these (see resolvePrompts, runtime.js).
  * @property {ReadonlyArray<*>} [observers] Observer instances (see RuntimeObserver); loose because observer.js is not a kernel seam file.
  * @property {*} [runtimeBrand] See resolveRuntimeBrand (runtime-brand.js); accepts a partial RuntimeBrand.
- * @property {(parsed: {sdk: (string|null), provider?: string, model: string}) => (import('./cost.js').NormalizedPricing|null)} [resolveCustomPricing] See resolvePricing (ai/cost.js).
+ * @property {(parsed: {provider: string, model: string}) => (import('./cost.js').NormalizedPricing|null)} [resolveCustomPricing] See resolvePricing (ai/cost.js).
  * @property {import('../pi-auth.js').PiApiKeyResolver} [resolvePiApiKey] See createPiOAuthApiKeyResolver (pi-auth.js) for a ready-made implementation.
- * @property {import('./providers/acp-client.js').AcpClientHostOptions["resolveAcpProfile"]} [resolveAcpProfile] Default ACP profile resolver; a per-run callback wins.
- * @property {import('./providers/acp-client.js').AcpClientHostOptions["onAcpInteractionRequest"]} [onAcpInteractionRequest] Default ACP interaction callback; a per-run callback wins.
- * @property {Uint8Array} [acpSessionTokenKey] Default host-owned 32-byte key for confidential authenticated ACP session handles.
  * @property {(artifact: {filename: string, buffer: Buffer, toolName: string, toolUseId: (string|null)}) => (string|null)} [persistArtifact]
  * @property {(record: CompactionRecordedPayload) => void} [onCompactionRecorded]
  * @property {(payload: ApprovalRequestPayload) => Promise<ApprovalDecision>} [onToolApprovalRequest]

package/src/index.js

@@ -18,12 +18,6 @@ export {
   DEFAULT_RUNTIME_BRAND,
   resolveRuntimeBrand,
 } from "./runtime-brand.js";
-export {
-  CLAUDE_SDK_CATALOG_VERSION,
-  discoverClaudeSdkModels,
-  normalizeClaudeSdkCatalog,
-  normalizeClaudeSdkModelId,
-} from "./ai/providers/claude-sdk-discovery.js";
 
 export * from "./ai/index.js";
 export * from "./agent/index.js";

package/src/runtime.js

@@ -5,14 +5,11 @@
 // per-instance `ToolContext` (agent/tools/shared/tool-context.js) that this
 // runtime instance threads to every bridge call via `options.toolContext`
 // instead of a process-global, and returns a `.run(systemPrompt, options)`
-// method that resolves the right provider bridge based on `options.model` +
-// `options.executionMode`.
+// method that resolves the Pi provider bridge based on `options.model`.
 //
-// The runtime registry contains a static table for the six built-in bridges
-// (ACP, Claude SDK/CLI, Pi-native, Codex app-server, OpenCode app-server) and lazily imports
-// the matching implementation only when a run selects it. Hosts that need finer
-// control can keep using the named exports (resolveRuntimeBridge,
-// generateClaudeResponse, etc.) directly.
+// The runtime registry lazily imports the Pi implementation only when a run
+// selects it. Hosts that need finer control can keep using the named exports
+// directly.
 //
 // Return shape from `.run()`:
 //   { text, structuredResult, structuredResultSource, events, usage,
@@ -51,12 +48,13 @@ import { createToolLifecycleEventGate } from "./ai/tool-lifecycle.js";
  * @typedef {import('./ai/types.js').RuntimeResult} RuntimeResult
  */
 
+// Host-integration callbacks bound onto every request. This list is the runtime
+// half of the `Pick<AgentRuntimeHostOptions, ...>` clause in the `RuntimeRequest`
+// typedef (ai/types.js) -- the two must stay identical, or hosts get keys the
+// declared request shape does not admit.
 const HOST_KEYS = [
   "resolveCustomPricing",
   "resolvePiApiKey",
-  "resolveAcpProfile",
-  "onAcpInteractionRequest",
-  "acpSessionTokenKey",
   "persistArtifact",
   "onCompactionRecorded",
   "onToolApprovalRequest",
@@ -177,7 +175,6 @@ export function createRuntime(host = {}) {
     ...(request.skills === undefined ? {} : { skills: request.skills }),
     ...(request.skillsRoot === undefined ? {} : { skillsRoot: request.skillsRoot }),
     ...(request.toolEnvironment === undefined ? {} : { toolEnvironment: request.toolEnvironment }),
-    ...(request.executionMode === undefined ? {} : { executionMode: request.executionMode }),
     ...(request.cwd === undefined ? {} : { cwd: request.cwd }),
     // A profile that pins effort — declared or authored at call time — means it
     // on this path too; dropping it would silently run the child at the
@@ -203,10 +200,8 @@ export function createRuntime(host = {}) {
      */
     async run(systemPrompt, options = {}) {
       if (!options.model) throw new Error("createRuntime.run requires options.model");
-      const executionMode = typeof options.executionMode === "string" ? options.executionMode : "sdk";
       const bridge = await resolveRuntimeBridge(options.model, {
         liveInput: !!options.liveInput,
-        executionMode,
       });
       const callObservers = Array.isArray(options.observers) ? options.observers : [];
       const hub = createObserverHub({
@@ -243,7 +238,6 @@ export function createRuntime(host = {}) {
           // (spread reads the parameter's declared — Partial — type); re-assert
           // the already-validated model so the request satisfies RuntimeRequest.
           model: options.model,
-          executionMode,
           runtimeBrand,
           toolContext: runToolContext,
           observerHub: hub,

package/types/agent/tools/agent-tool.d.ts

@@ -38,12 +38,11 @@ export function subagentUsageForRun(subagents: any, parentRunId: string | undefi
  * Build the `Agent` tool, or null when subagents are unavailable for this run.
  *
  * @param {RuntimeSubagentsOptions|null|undefined} subagents
- * @param {{model?: *, executionMode?: string, cwd?: string, parentRunId?: string, sandboxPolicy?: *, sandboxEngine?: *, skills?: {name: string, description?: string}[], skillsRoot?: string, toolEnvironment?: *, onEvent?: (event: *) => void}} [context]
+ * @param {{model?: *, cwd?: string, parentRunId?: string, sandboxPolicy?: *, sandboxEngine?: *, skills?: {name: string, description?: string}[], skillsRoot?: string, toolEnvironment?: *, onEvent?: (event: *) => void}} [context]
  * @returns {*|null}
  */
 export function createAgentTool(subagents: RuntimeSubagentsOptions | null | undefined, context?: {
     model?: any;
-    executionMode?: string;
     cwd?: string;
     parentRunId?: string;
     sandboxPolicy?: any;

package/types/agent/tools/codex-subscription-search.d.ts

@@ -28,4 +28,4 @@ export function searchCodexSubscription(query: string, options?: {
 /** Test hook for process-shared broker state. */
 export function __resetCodexSubscriptionSearchForTests(): Promise<void>;
 export const DEFAULT_CODEX_SEARCH_MODEL: "gpt-5.6-luna";
-import { createCodexAppServerClient } from "../../ai/providers/codex-app.js";
+import { createCodexAppServerClient } from "../../ai/providers/codex/app-server-client.js";

package/types/agent/tools/index.d.ts

@@ -7,6 +7,7 @@ export { createWebToolController } from "./web-controller.js";
 export { resolveRgPath } from "./shared/ripgrep.js";
 export { bashToolImpl, bashToolRun, normalizeBackgroundBashTimeoutMs, normalizeBackgroundTimeoutMs, normalizeBashTimeoutMs, normalizeProcessTimeoutMs } from "./bash.js";
 export { execToolImpl, execToolRun } from "./exec.js";
+export { DEFAULT_MONITOR_TIMEOUT_MS, MIN_MONITOR_TIMEOUT_MS, monitorStopToolRun, monitorToolRun, normalizeMonitorTimeoutMs } from "./monitor.js";
 export { webFetchToolImpl, performWebFetch } from "./web-fetch.js";
 export { webSearchToolImpl, performWebSearch } from "./web-search.js";
 export { DEFAULT_CODEX_SEARCH_MODEL, inspectCodexSubscriptionSearch, searchCodexSubscription } from "./codex-subscription-search.js";

package/types/agent/tools/monitor.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Normalize `timeout_ms` for a monitor. Unlike Bash there is no
+ * seconds-vs-milliseconds heuristic — this field is new, so it is exact
+ * milliseconds only. `undefined`/invalid falls back to the documented default;
+ * the host's own ceiling clamps the result on its side and reports what it
+ * actually granted.
+ */
+export function normalizeMonitorTimeoutMs(value: any, fallback?: number): number;
+/**
+ * Structured Monitor execution used by the Pi bridge.
+ *
+ * Command preparation is deliberately byte-identical to Bash: the same
+ * `/bin/bash --noprofile --norc -c` shape, the same workdir rules, the same
+ * cleaned startup environment, and the same sandbox `prepareCommand` seam. A
+ * monitor must never be a way to run a command Bash could not.
+ *
+ * @param {{command?: string, description?: string, timeout_ms?: number, persistent?: boolean, workdir?: string}} params
+ * @param {{signal?: AbortSignal, sandboxPolicy?: any, sandboxEngine?: any, ctx?: any, monitorsController?: import("./shared/monitors.js").MonitorsController}} [options]
+ */
+export function monitorToolRun({ command, description, timeout_ms, persistent, workdir }: {
+    command?: string;
+    description?: string;
+    timeout_ms?: number;
+    persistent?: boolean;
+    workdir?: string;
+}, { sandboxPolicy, sandboxEngine, ctx, monitorsController }?: {
+    signal?: AbortSignal;
+    sandboxPolicy?: any;
+    sandboxEngine?: any;
+    ctx?: any;
+    monitorsController?: import("./shared/monitors.js").MonitorsController;
+}): Promise<any>;
+/**
+ * @param {{monitor_id?: string}} params
+ * @param {{monitorsController?: import("./shared/monitors.js").MonitorsController}} [options]
+ */
+export function monitorStopToolRun({ monitor_id }: {
+    monitor_id?: string;
+}, { monitorsController }?: {
+    monitorsController?: import("./shared/monitors.js").MonitorsController;
+}): Promise<any>;
+/** Claude-Code-compatible defaults: 5 minutes, never below one second. */
+export const DEFAULT_MONITOR_TIMEOUT_MS: 300000;
+export const MIN_MONITOR_TIMEOUT_MS: 1000;

package/types/agent/tools/pi-bridge.d.ts

@@ -35,9 +35,9 @@ export function createStructuredOutputTool(outputSchema: any, onStructuredOutput
 };
 /**
  * @param {any} allowedTools
- * @param {{disallowedTools?: any[], skillNames?: any[], skills?: any[], skillsRoot?: any, dataDir?: any, cwd?: any, onEvent?: (event: any) => void, toolLimits?: any, persistArtifact?: any, onTruncate?: any, toolPayloadMaxBytes?: number, imageInlineMaxBytes?: any, toolPolicy?: any, sandboxPolicy?: any, sandboxEngine?: any, approvalManager?: any, approvalModel?: any, nodeReplController?: any, webController?: any, processJobsController?: any, toolExecutionMode?: "sequential"|"safe-parallel", subagents?: any, subagentContext?: any, ctx?: any}} [options]
+ * @param {{disallowedTools?: any[], skillNames?: any[], skills?: any[], skillsRoot?: any, dataDir?: any, cwd?: any, onEvent?: (event: any) => void, toolLimits?: any, persistArtifact?: any, onTruncate?: any, toolPayloadMaxBytes?: number, imageInlineMaxBytes?: any, toolPolicy?: any, sandboxPolicy?: any, sandboxEngine?: any, approvalManager?: any, approvalModel?: any, nodeReplController?: any, webController?: any, processJobsController?: any, monitorsController?: any, toolExecutionMode?: "sequential"|"safe-parallel", subagents?: any, subagentContext?: any, ctx?: any}} [options]
  */
-export function getPiBuiltinTools(allowedTools: any, { disallowedTools, skillNames, skills, skillsRoot, dataDir, cwd, onEvent, toolLimits, persistArtifact, onTruncate, toolPayloadMaxBytes, imageInlineMaxBytes, toolPolicy, sandboxPolicy, sandboxEngine, approvalManager, approvalModel, nodeReplController, webController, processJobsController, subagents, subagentContext, toolExecutionMode, ctx, }?: {
+export function getPiBuiltinTools(allowedTools: any, { disallowedTools, skillNames, skills, skillsRoot, dataDir, cwd, onEvent, toolLimits, persistArtifact, onTruncate, toolPayloadMaxBytes, imageInlineMaxBytes, toolPolicy, sandboxPolicy, sandboxEngine, approvalManager, approvalModel, nodeReplController, webController, processJobsController, monitorsController, subagents, subagentContext, toolExecutionMode, ctx, }?: {
     disallowedTools?: any[];
     skillNames?: any[];
     skills?: any[];
@@ -58,6 +58,7 @@ export function getPiBuiltinTools(allowedTools: any, { disallowedTools, skillNam
     nodeReplController?: any;
     webController?: any;
     processJobsController?: any;
+    monitorsController?: any;
     toolExecutionMode?: "sequential" | "safe-parallel";
     subagents?: any;
     subagentContext?: any;

package/types/agent/tools/shared/bash-environment.d.ts

@@ -0,0 +1,4 @@
+export function cleanBashEnvironment(sourceEnv?: NodeJS.ProcessEnv): {
+    BASH_ENV: string;
+    ENV: string;
+};

package/types/agent/tools/shared/monitors.d.ts

@@ -0,0 +1,83 @@
+/**
+ * Kernel-local structural controller seam. The typed public interface lives in
+ * runtime-adapter; this package deliberately has no workspace dependencies.
+ *
+ * @typedef {Object} MonitorsController
+ * @property {(request: {
+ *   prepared: import("../../sandbox-seam.js").PreparedSandboxCommand,
+ *   summary: string,
+ *   description: string,
+ *   timeoutMs?: number,
+ *   persistent?: boolean,
+ *   launch: (options?: {timeoutMs?: number, onStdout?: (chunk: Buffer) => void, onStderr?: (chunk: Buffer) => void}) => ReturnType<typeof startPreparedProcess>,
+ * }) => Promise<{monitorId: string, state: "starting"|"running", startedAt: string, maxRuntimeMs: number, persistent: boolean}>} start
+ * @property {(monitorId: string) => Promise<{monitorId: string, state: string, stopped: boolean}>} stop
+ */
+/**
+ * Transfer one prepared watch command to the injected host controller. From the
+ * instant `start()` is invoked, the controller owns cleanup on every path.
+ *
+ * @param {{
+ *   controller: MonitorsController,
+ *   prepared: import("../../sandbox-seam.js").PreparedSandboxCommand,
+ *   summary: string,
+ *   description: string,
+ *   timeoutMs?: number,
+ *   persistent?: boolean,
+ *   startedAt: number,
+ *   failed: (text: string, code: string, startedAt: number) => any,
+ * }} input
+ */
+export function handOffMonitor({ controller, prepared, summary, description, timeoutMs, persistent, startedAt, failed, }: {
+    controller: MonitorsController;
+    prepared: import("../../sandbox-seam.js").PreparedSandboxCommand;
+    summary: string;
+    description: string;
+    timeoutMs?: number;
+    persistent?: boolean;
+    startedAt: number;
+    failed: (text: string, code: string, startedAt: number) => any;
+}): Promise<any>;
+/**
+ * Stop one monitor by id. Idempotent: stopping an already-terminal monitor is a
+ * success that reports the state it settled in, never an error, so a model that
+ * re-issues a stop after a terminal wake is not pushed into a retry loop.
+ *
+ * @param {{controller: MonitorsController, monitorId: unknown, startedAt: number, failed: (text: string, code: string, startedAt: number) => any}} input
+ */
+export function handOffMonitorStop({ controller, monitorId, startedAt, failed }: {
+    controller: MonitorsController;
+    monitorId: unknown;
+    startedAt: number;
+    failed: (text: string, code: string, startedAt: number) => any;
+}): Promise<any>;
+/**
+ * Kernel-local structural controller seam. The typed public interface lives in
+ * runtime-adapter; this package deliberately has no workspace dependencies.
+ */
+export type MonitorsController = {
+    start: (request: {
+        prepared: import("../../sandbox-seam.js").PreparedSandboxCommand;
+        summary: string;
+        description: string;
+        timeoutMs?: number;
+        persistent?: boolean;
+        launch: (options?: {
+            timeoutMs?: number;
+            onStdout?: (chunk: Buffer) => void;
+            onStderr?: (chunk: Buffer) => void;
+        }) => ReturnType<typeof startPreparedProcess>;
+    }) => Promise<{
+        monitorId: string;
+        state: "starting" | "running";
+        startedAt: string;
+        maxRuntimeMs: number;
+        persistent: boolean;
+    }>;
+    stop: (monitorId: string) => Promise<{
+        monitorId: string;
+        state: string;
+        stopped: boolean;
+    }>;
+};
+import { startPreparedProcess } from "./process-runner.js";

package/types/agent/tools/shared/process-runner.d.ts

@@ -28,7 +28,15 @@ export function runPreparedProcess(commandSpec: {
  * descendant in the owned group is still alive.
  *
  * @param {{command: string, args?: string[], cwd?: string, env?: Record<string, string|undefined>}} commandSpec
- * @param {{timeoutMs?: number, signal?: AbortSignal, maxBufferBytes?: number, input?: string|Buffer, waitForProcessGroup?: boolean, exactEnvironment?: boolean, onStdout?: (chunk: Buffer) => void, onStderr?: (chunk: Buffer) => void}} [options]
+ * `outputMode` selects how output is handled. "buffer" (default) accumulates it
+ * under `maxBufferBytes` and terminates the process when that bound is crossed —
+ * the right contract for a job whose whole output is the result. "stream" hands
+ * every chunk to `onStdout`/`onStderr` and stores NEITHER, so an indefinitely
+ * long watch is never killed for producing output and the caller owns the only
+ * copy. Buffering stderr as well would hand a streaming caller two overlapping
+ * views of it: the runner's bounded PREFIX plus the caller's own tail.
+ *
+ * @param {{timeoutMs?: number, signal?: AbortSignal, maxBufferBytes?: number, input?: string|Buffer, waitForProcessGroup?: boolean, exactEnvironment?: boolean, outputMode?: "buffer"|"stream", onStdout?: (chunk: Buffer) => void, onStderr?: (chunk: Buffer) => void}} [options]
  * For process jobs, `release()` is the persistence fence: the target cannot
  * spawn until the host has durably recorded the returned ownership metadata.
  * Foreground handles expose a harmless no-op release for one structural shape.
@@ -40,13 +48,14 @@ export function startPreparedProcess(commandSpec: {
     args?: string[];
     cwd?: string;
     env?: Record<string, string | undefined>;
-}, { timeoutMs, signal, maxBufferBytes, input, waitForProcessGroup, exactEnvironment, onStdout, onStderr, }?: {
+}, { timeoutMs, signal, maxBufferBytes, input, waitForProcessGroup, exactEnvironment, outputMode, onStdout, onStderr, }?: {
     timeoutMs?: number;
     signal?: AbortSignal;
     maxBufferBytes?: number;
     input?: string | Buffer;
     waitForProcessGroup?: boolean;
     exactEnvironment?: boolean;
+    outputMode?: "buffer" | "stream";
     onStdout?: (chunk: Buffer) => void;
     onStderr?: (chunk: Buffer) => void;
 }): {

package/types/ai/cost.d.ts

@@ -29,8 +29,7 @@ export function estimateCost({ resolveCustomPricing, model, inputTokens, outputT
     cacheCreationTokens?: number;
 }): number | null;
 export type ParsedModelReference = {
-    sdk: string | null;
-    provider?: string;
+    provider: string;
     model: string;
 };
 export type NormalizedPricing = {

package/types/ai/index.d.ts

@@ -1,10 +1,7 @@
 export * from "./runtime/model-refs.js";
 export * from "./runtime/registry.js";
-export * from "./providers/acp-public.js";
+export * from "./pi-interop.js";
 export { createSessionRegistry, disposeAllProviderSessions, disposeProviderSession, invalidateProviderSession, refreshProviderSession, syncProviderSession } from "./runtime/sessions.js";
 export { createMetricsObserver, createObserverHub } from "./observer.js";
 export { generatePiNativeResponse, piNativeRuntimeBridge } from "./providers/pi-native.js";
-export { generateAcpResponse, acpRuntimeBridge } from "./providers/acp.js";
-export { getPiBuiltinModel, listPiBuiltinModels, loginPiOAuth, reasoningLevelsForPiModel, resolvePiOAuthApiKey } from "./pi-interop.js";
-export { CLAUDE_SDK_CATALOG_VERSION, createClaudeSdkDiscoveryIsolation, curatedClaudeSdkModels, discoverClaudeSdkModels, normalizeClaudeSdkCatalog, normalizeClaudeSdkModelId } from "./providers/claude-sdk-discovery.js";
 export { buildCapabilitiesUsed, toolCompactionAppliedFromWarnings, UNKNOWN_CAPABILITY } from "./runtime/capabilities-used.js";

package/types/ai/pi-interop.d.ts

@@ -13,6 +13,22 @@ export function listPiBuiltinModels(providerId: string): PiBuiltinModelSnapshot[
  * @returns {PiBuiltinModelSnapshot|undefined}
  */
 export function getPiBuiltinModel(providerId: string, modelId: string): PiBuiltinModelSnapshot | undefined;
+/**
+ * List defensive snapshots of Pi's static built-in providers (id + display
+ * label). The dynamic "radius" gateway is deliberately excluded: it has no
+ * static catalog and must not be advertised as a browsable provider.
+ *
+ * @returns {PiBuiltinProviderSnapshot[]}
+ */
+export function listPiBuiltinProviders(): PiBuiltinProviderSnapshot[];
+/**
+ * Describe one static Pi built-in provider by id, or `undefined` for unknown
+ * ids (including the dynamic "radius" gateway).
+ *
+ * @param {string} providerId
+ * @returns {PiBuiltinProviderSnapshot|undefined}
+ */
+export function describePiBuiltinProvider(providerId: string): PiBuiltinProviderSnapshot | undefined;
 /**
  * Translate Pi's model-native thinking levels to mono-agent effort spelling.
  *
@@ -78,6 +94,10 @@ export type PiBuiltinModelSnapshot = {
     [key: string]: any;
 };
 export type PiReasoningLevel = "none" | "minimal" | "low" | "medium" | "high" | "xhigh" | "max";
+export type PiBuiltinProviderSnapshot = {
+    id: string;
+    label: string;
+};
 export type PiOAuthCredentialsSnapshot = {
     refresh: string;
     access: string;