@pasko70/pibo 1.16.6 → 2.0.0

package/dist/debug/trace.js

@@ -1,5 +1,8 @@
+import { dirname, join } from "node:path";
 import { buildTraceView } from "../apps/chat/trace.js";
-import { normalizeSessionErrorDetails } from "../core/session-errors.js";
+import { storedPiboEventFromV2Row } from "../apps/chat/data/chat-data-mappers.js";
+import { PayloadStore } from "../data/payload-store.js";
+import { createDefaultPiboPluginRegistry } from "../plugins/builtin.js";
 import { compareTraceNodes } from "../shared/trace-nodes.js";
 import { openReadOnlyDebugDatabase, withStorePath } from "./sql.js";
 import { formatNextCommands } from "./next-commands.js";
@@ -15,19 +18,50 @@ export async function inspectDebugTrace(piboSessionId, stores, options = {}) {
         const sessionRow = sessionsDb.prepare("SELECT * FROM sessions WHERE id = ?").get(piboSessionId);
         if (!sessionRow)
             throw new Error(`Pibo session "${piboSessionId}" not found`);
-        const session = sessionFromRow(sessionRow);
-        const sessions = sessionsDb.prepare("SELECT * FROM sessions").all().map(sessionFromRow);
+        const binding = readRuntimeBindingForTrace(sessionsDb, sessionRow);
+        const session = { ...sessionFromRow(sessionRow), runtimeBinding: binding };
+        const sessions = sessionsDb.prepare("SELECT * FROM sessions").all().map((row) => ({
+            ...sessionFromRow(row),
+            runtimeBinding: readRuntimeBindingForTrace(sessionsDb, row),
+        }));
         const adapterIssues = [];
-        const events = tableExists(chatDb, "event_log")
-            ? chatDb
-                .prepare("SELECT stream_id, session_id, session_sequence, event_id, type, created_at, preview_text, attributes_json FROM event_log WHERE session_id = ? ORDER BY stream_id ASC")
-                .all(piboSessionId).map((row) => eventFromRow(row, adapterIssues)).filter((event) => event !== undefined)
+        const payloadStore = tableExists(chatDb, "payloads")
+            ? new PayloadStore(chatDb, join(dirname(stores.chat.path), "payloads"))
+            : undefined;
+        const eventRows = tableExists(chatDb, "event_log")
+            ? chatDb.prepare("SELECT * FROM event_log WHERE session_id = ? ORDER BY stream_id ASC").all(piboSessionId)
             : [];
+        const events = eventRows.map((row) => {
+            const event = storedPiboEventFromV2Row(row, payloadStore);
+            if (event && (row.type === "assistant_delta" || row.type === "thinking_delta") && !nonEmptyEventText(event.payload)) {
+                adapterIssues.push({
+                    severity: "warning",
+                    code: "missing_delta_text",
+                    nodeId: row.event_id ?? String(row.stream_id),
+                    message: `Persisted ${row.type} event has no readable text payload.`,
+                });
+            }
+            return event;
+        }).filter((event) => event !== undefined);
+        const productHistory = readProductHistoryEntries(chatDb, payloadStore, piboSessionId);
+        let nativeHistoryEntries = [];
+        let nativeHistoryInspection;
+        if (options.nativeHistory || (events.length === 0 && productHistory.length === 0)) {
+            const native = await readDebugNativeHistory(binding, session.workspace ?? process.cwd(), adapterIssues);
+            nativeHistoryEntries = native?.entries ?? [];
+            nativeHistoryInspection = native?.inspection;
+        }
+        const historyEntries = nativeHistoryEntries.length ? nativeHistoryEntries : productHistory;
+        const historySource = nativeHistoryEntries.length
+            ? "native"
+            : productHistory.length ? "product" : "events";
         const sessionStatus = resolveDebugTraceSessionStatus(sessionRow.status, events.map((event) => event.type));
         const view = await buildTraceView({
             session,
             sessions,
             events,
+            historyEntries,
+            historyInspection: nativeHistoryInspection,
             status: sessionStatus.status,
         });
         const rows = flattenTraceNodes(view.nodes);
@@ -36,6 +70,11 @@ export async function inspectDebugTrace(piboSessionId, stores, options = {}) {
         return {
             piboSessionId: view.piboSessionId,
             piSessionId: view.piSessionId,
+            runtimeInstanceId: binding?.runtimeInstanceId,
+            runtimeAdapterId: binding?.adapterId,
+            nativeSessionId: binding?.nativeSessionId,
+            runtimeBindingState: binding?.state,
+            historySource,
             title: view.title,
             status: statusSummary.status,
             statusSource: sessionStatus.source,
@@ -72,6 +111,11 @@ export function formatDebugTrace(result, options = {}) {
     const lines = [
         `piboSessionId: ${result.piboSessionId}`,
         `piSessionId: ${result.piSessionId}`,
+        ...(result.runtimeInstanceId ? [`runtimeInstanceId: ${result.runtimeInstanceId}`] : []),
+        ...(result.runtimeAdapterId ? [`runtimeAdapterId: ${result.runtimeAdapterId}`] : []),
+        ...(result.nativeSessionId ? [`nativeSessionId: ${result.nativeSessionId}`] : []),
+        ...(result.runtimeBindingState ? [`runtimeBindingState: ${result.runtimeBindingState}`] : []),
+        `historySource: ${result.historySource}`,
         `title: ${result.title}`,
         `status: ${result.status}`,
         `statusSource: ${result.statusSource}`,
@@ -290,7 +334,7 @@ function formatOrderKey(node) {
 function sessionFromRow(row) {
     return {
         id: row.id,
-        piSessionId: row.pi_session_id,
+        piSessionId: row.pi_session_id ?? "",
         channel: row.channel,
         kind: row.kind,
         profile: row.profile,
@@ -303,87 +347,121 @@ function sessionFromRow(row) {
         updatedAt: row.updated_at,
     };
 }
-function eventFromRow(row, issues) {
-    const payload = outputPayloadFromV2Row(row);
-    if (!payload)
+function readProductHistoryEntries(db, payloadStore, piboSessionId) {
+    if (!tableExists(db, "chat_messages"))
+        return [];
+    const rows = db.prepare(`
+		SELECT m.*, e.session_sequence AS event_sequence
+		FROM chat_messages m
+		LEFT JOIN event_log e ON e.stream_id = m.source_stream_id
+		WHERE m.session_id = ? AND m.role IN ('user', 'assistant', 'system')
+		ORDER BY m.sequence ASC
+		LIMIT 2000
+	`).all(piboSessionId);
+    return rows.flatMap((row) => {
+        const role = row.role === "user" || row.role === "assistant" || row.role === "system" ? row.role : undefined;
+        if (!role)
+            return [];
+        const attributes = parseObject(row.attributes_json);
+        let content = typeof attributes.inlineText === "string" ? attributes.inlineText : row.content_preview ?? "";
+        if (row.content_payload_ref && payloadStore) {
+            try {
+                content = payloadStore.readPayloadText(row.content_payload_ref);
+            }
+            catch {
+                // Keep the bounded preview and let trace checks report any missing event payload separately.
+            }
+        }
+        return [{
+                id: `product:${row.id}`,
+                type: "message",
+                source: "product",
+                createdAt: row.created_at,
+                sequence: row.event_sequence ?? row.sequence,
+                turnId: row.turn_id ?? undefined,
+                role,
+                content,
+                assistantIndex: numberAttribute(attributes, "assistantIndex"),
+                contentIndex: numberAttribute(attributes, "contentIndex"),
+                status: row.status === "running" || row.status === "streaming"
+                    ? "running"
+                    : row.status === "error" || row.status === "failed" ? "error" : "complete",
+            }];
+    });
+}
+async function readDebugNativeHistory(binding, workspace, issues) {
+    if (!binding)
         return undefined;
-    if ((row.type === "assistant_delta" || row.type === "thinking_delta") && !nonEmptyEventText(payload)) {
+    const registry = createDefaultPiboPluginRegistry();
+    const adapter = registry.getAgentRuntimeAdapter(binding.runtimeInstanceId);
+    if (!adapter?.descriptor.capabilities.maintenance.history || !adapter.readHistory) {
         issues.push({
             severity: "warning",
-            code: "missing_delta_text",
-            nodeId: row.event_id ?? String(row.stream_id),
-            message: `Persisted ${row.type} event has no readable text payload.`,
+            code: "runtime_history_provider_unavailable",
+            message: `Runtime instance "${binding.runtimeInstanceId}" has no locally registered history provider.`,
         });
+        return undefined;
     }
-    return {
-        id: String(row.stream_id),
-        piboSessionId: row.session_id ?? undefined,
-        eventSequence: row.session_sequence ?? undefined,
-        eventId: row.event_id ?? undefined,
-        streamId: row.stream_id,
-        type: row.type,
-        createdAt: row.created_at,
-        payload,
-    };
-}
-function outputPayloadFromV2Row(row) {
-    const attributes = parseObject(row.attributes_json);
-    const inlinePayload = attributes.inlinePayload;
-    if (inlinePayload && typeof inlinePayload === "object" && !Array.isArray(inlinePayload) && typeof inlinePayload.type === "string") {
-        return inlinePayload;
+    try {
+        return await adapter.readHistory({ binding, workspace, limit: 500 });
     }
-    const piboSessionId = row.session_id;
-    if (!piboSessionId)
+    catch (error) {
+        issues.push({
+            severity: "warning",
+            code: "runtime_history_read_failed",
+            message: redactRuntimeHistoryError(error),
+        });
         return undefined;
-    const base = { piboSessionId, eventId: row.event_id ?? undefined };
-    if (row.type === "assistant_message")
-        return compactObject({ ...base, type: "assistant_message", text: row.preview_text ?? "" });
-    if (row.type === "assistant_delta")
-        return compactObject({ ...base, type: "assistant_delta", text: inlineTextPayload(inlinePayload) ?? row.preview_text ?? "" });
-    if (row.type === "message_started")
-        return compactObject({ ...base, type: "message_started", text: row.preview_text ?? "" });
-    if (row.type === "message_finished")
-        return compactObject({ ...base, type: "message_finished" });
-    if (row.type === "thinking_started")
-        return compactObject({ ...base, type: "thinking_started" });
-    if (row.type === "thinking_delta")
-        return compactObject({ ...base, type: "thinking_delta", text: inlineTextPayload(inlinePayload) ?? row.preview_text ?? "" });
-    if (row.type === "thinking_finished")
-        return compactObject({ ...base, type: "thinking_finished", text: row.preview_text ?? "" });
-    if (row.type === "tool_call")
-        return compactObject({ ...base, type: "tool_call", toolCallId: stringAttribute(attributes, "toolCallId") ?? row.event_id ?? `tool_${row.stream_id}`, toolName: row.preview_text ?? stringAttribute(attributes, "toolName") ?? "tool", args: inlinePayload ?? null, argsComplete: booleanAttribute(attributes, "argsComplete") ?? true });
-    if (row.type === "tool_execution_started")
-        return compactObject({ ...base, type: "tool_execution_started", toolCallId: stringAttribute(attributes, "toolCallId") ?? row.event_id ?? `tool_${row.stream_id}`, toolName: row.preview_text ?? stringAttribute(attributes, "toolName") ?? "tool", args: inlinePayload ?? null });
-    if (row.type === "tool_execution_updated")
-        return compactObject({ ...base, type: "tool_execution_updated", toolCallId: stringAttribute(attributes, "toolCallId") ?? row.event_id ?? `tool_${row.stream_id}`, toolName: row.preview_text ?? stringAttribute(attributes, "toolName") ?? "tool", args: null, partialResult: inlinePayload ?? null });
-    if (row.type === "tool_execution_finished")
-        return compactObject({ ...base, type: "tool_execution_finished", toolCallId: stringAttribute(attributes, "toolCallId") ?? row.event_id ?? `tool_${row.stream_id}`, toolName: row.preview_text ?? stringAttribute(attributes, "toolName") ?? "tool", result: inlinePayload ?? null, isError: booleanAttribute(attributes, "isError") ?? false });
-    if (row.type === "session_error") {
-        const error = stringAttribute(attributes, "error") ?? row.preview_text ?? "Error";
-        return compactObject({ ...base, type: "session_error", error, errorDetails: normalizeSessionErrorDetails(error, isRecord(attributes.errorDetails) ? attributes.errorDetails : undefined) });
     }
-    return compactObject({ ...base, type: row.type });
-}
-function inlineTextPayload(value) {
-    return typeof value === "string" ? value : undefined;
-}
-function nonEmptyEventText(event) {
-    const text = event.text;
-    return typeof text === "string" && text.length > 0;
 }
-function stringAttribute(attributes, key) {
-    const value = attributes[key];
-    return typeof value === "string" ? value : undefined;
+function readRuntimeBindingForTrace(db, session) {
+    if (!tableExists(db, "session_runtime_bindings")) {
+        return {
+            piboSessionId: session.id,
+            runtimeInstanceId: "pi",
+            adapterId: "pi",
+            nativeSessionId: session.pi_session_id ?? undefined,
+            state: session.pi_session_id ? "bound" : "unbound",
+            protocol: "pi-sdk",
+            metadata: { source: "legacy-synthesized" },
+            revision: 1,
+            createdAt: session.created_at,
+            updatedAt: session.updated_at,
+        };
+    }
+    const row = db.prepare("SELECT * FROM session_runtime_bindings WHERE pibo_session_id = ?").get(session.id);
+    if (!row)
+        return undefined;
+    const locator = parseObject(row.locator_json);
+    return {
+        piboSessionId: row.pibo_session_id,
+        runtimeInstanceId: row.runtime_instance_id,
+        adapterId: row.runtime_adapter_id,
+        nativeSessionId: row.native_session_id ?? undefined,
+        state: row.binding_state,
+        protocol: row.protocol ?? undefined,
+        protocolVersion: row.protocol_version ?? undefined,
+        adapterVersion: row.adapter_version ?? undefined,
+        locator: typeof locator.kind === "string" ? locator : undefined,
+        metadata: parseObject(row.metadata_json),
+        revision: row.revision,
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+    };
 }
-function booleanAttribute(attributes, key) {
+function numberAttribute(attributes, key) {
     const value = attributes[key];
-    return typeof value === "boolean" ? value : undefined;
+    return typeof value === "number" && Number.isFinite(value) ? value : undefined;
 }
-function isRecord(value) {
-    return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+function nonEmptyEventText(event) {
+    const text = event && typeof event === "object" ? event.text : undefined;
+    return typeof text === "string" && text.length > 0;
 }
-function compactObject(value) {
-    return Object.fromEntries(Object.entries(value).filter(([, item]) => item !== undefined));
+function redactRuntimeHistoryError(error) {
+    return (error instanceof Error ? error.message : String(error))
+        .replace(/(bearer|token|secret|password|api[_-]?key)\s*[:=]\s*[^\s,;]+/gi, "$1=[redacted]")
+        .replace(/\/\/[^\s/@:]+:[^\s/@]+@/g, "//[redacted]@")
+        .slice(0, 500);
 }
 function tableExists(db, table) {
     const row = db.prepare("SELECT name FROM sqlite_schema WHERE type = 'table' AND name = ?").get(table);

package/dist/gateway/server.js

@@ -128,6 +128,7 @@ async function createGatewaySessionStore(options) {
 export class PiboGatewayServer {
     options;
     pluginRegistry;
+    compatibilityRuntimeRegistry;
     runtimeInstanceId;
     sessionStore;
     ownsSessionStore = false;
@@ -142,6 +143,7 @@ export class PiboGatewayServer {
     constructor(options = {}) {
         this.options = options;
         this.pluginRegistry = options.pluginRegistry ?? createDefaultPiboPluginRegistry();
+        this.compatibilityRuntimeRegistry = options.pluginRegistry ? createDefaultPiboPluginRegistry() : undefined;
         this.runtimeInstanceId = options.runtimeInstanceId ?? `gateway:${process.pid}:${randomUUID()}`;
     }
     async start() {
@@ -320,15 +322,91 @@ export class PiboGatewayServer {
             createSession: (input) => {
                 const profile = resolvePiboProfileNameFromRegistryOrDefault(this.pluginRegistry, input.profile);
                 const profileContext = createPiboProfileFromRegistryOrDefault(this.pluginRegistry, profile);
+                const runtimeAdapter = this.pluginRegistry.getAgentRuntimeAdapter(profileContext.runtimeInstanceId)
+                    ?? this.compatibilityRuntimeRegistry?.getAgentRuntimeAdapter(profileContext.runtimeInstanceId);
+                if (!runtimeAdapter)
+                    throw new Error(`Unknown agent runtime instance "${profileContext.runtimeInstanceId}".`);
                 const activeModel = input.activeModel ?? selectRequestedModelProfile(profileContext, loadPiboModelDefaults());
-                return this.requireSessionStore().create({ ...input, profile, activeModel });
+                return this.requireSessionStore().create({
+                    ...input,
+                    profile,
+                    activeModel,
+                    runtimeBinding: input.runtimeBinding ?? {
+                        runtimeInstanceId: profileContext.runtimeInstanceId,
+                        adapterId: runtimeAdapter.descriptor.id,
+                        state: "unbound",
+                        protocol: runtimeAdapter.descriptor.protocol?.name,
+                    },
+                });
             },
             updateSession: (id, input) => this.requireSessionStore().update(id, input),
             setLiveSessionActiveModel: (id, model) => this.requireRouter().setLiveSessionActiveModel(id, model),
             reportSessionError: (id, error, options) => this.requireRouter().reportSessionError(id, error, options),
-            deleteSession: (id) => this.requireSessionStore().delete?.(id) ?? false,
+            deleteSession: async (id) => {
+                await this.requireRouter().disposeSession(id, "session deleted");
+                return this.requireSessionStore().delete?.(id) ?? false;
+            },
             findSessions: (input) => this.requireSessionStore().find(input),
             listSessions: () => this.requireSessionStore().list?.() ?? [],
+            getSessionRuntimeBinding: (piboSessionId) => this.requireRouter().getSessionRuntimeBinding(piboSessionId),
+            inspectSessionRuntimeHistory: async (piboSessionId) => {
+                const session = this.requireSessionStore().get(piboSessionId);
+                if (!session)
+                    throw new Error(`Pibo session "${piboSessionId}" was not found.`);
+                const binding = this.requireRouter().getSessionRuntimeBinding(piboSessionId) ?? session.runtimeBinding;
+                if (!binding)
+                    throw new Error(`Pibo session "${piboSessionId}" has no runtime binding.`);
+                const adapter = this.pluginRegistry.getAgentRuntimeAdapter(binding.runtimeInstanceId)
+                    ?? this.compatibilityRuntimeRegistry?.getAgentRuntimeAdapter(binding.runtimeInstanceId);
+                if (!adapter) {
+                    return {
+                        runtimeInstanceId: binding.runtimeInstanceId,
+                        adapterId: binding.adapterId,
+                        bindingState: binding.state,
+                        available: false,
+                        diagnostics: [{
+                                severity: "error",
+                                code: "runtime_history_instance_unavailable",
+                                message: `Agent runtime instance "${binding.runtimeInstanceId}" is not registered in this gateway.`,
+                            }],
+                    };
+                }
+                if (!adapter.descriptor.capabilities.maintenance.history || !adapter.inspectHistory) {
+                    return {
+                        runtimeInstanceId: binding.runtimeInstanceId,
+                        adapterId: binding.adapterId,
+                        bindingState: binding.state,
+                        available: false,
+                        diagnostics: [{
+                                severity: "warning",
+                                code: "runtime_history_unsupported",
+                                message: `Agent runtime instance "${binding.runtimeInstanceId}" does not provide native history inspection.`,
+                            }],
+                    };
+                }
+                return await adapter.inspectHistory({ binding, workspace: session.workspace ?? process.cwd() });
+            },
+            readSessionRuntimeHistory: async (piboSessionId, input = {}) => {
+                const session = this.requireSessionStore().get(piboSessionId);
+                if (!session)
+                    throw new Error(`Pibo session "${piboSessionId}" was not found.`);
+                const binding = this.requireRouter().getSessionRuntimeBinding(piboSessionId) ?? session.runtimeBinding;
+                if (!binding)
+                    throw new Error(`Pibo session "${piboSessionId}" has no runtime binding.`);
+                const adapter = this.pluginRegistry.getAgentRuntimeAdapter(binding.runtimeInstanceId)
+                    ?? this.compatibilityRuntimeRegistry?.getAgentRuntimeAdapter(binding.runtimeInstanceId);
+                if (!adapter?.descriptor.capabilities.maintenance.history || !adapter.readHistory) {
+                    throw new Error(`Agent runtime instance "${binding.runtimeInstanceId}" does not provide native history.`);
+                }
+                return await adapter.readHistory({
+                    binding,
+                    workspace: session.workspace ?? process.cwd(),
+                    cursor: input.cursor,
+                    beforeTimestamp: input.beforeTimestamp,
+                    limit: input.limit,
+                });
+            },
+            rebindSessionRuntime: (piboSessionId, input) => this.requireRouter().rebindSessionRuntime(piboSessionId, input),
             getSessionRuntimeStatus: (piboSessionId) => this.requireRouter().getSessionRuntimeStatus(piboSessionId),
             getSessionStatusSnapshot: (piboSessionId) => this.requireRouter().getSessionStatusSnapshot(piboSessionId),
             listSessionRuntimeStatuses: () => this.requireRouter().listSessionRuntimeStatuses(),
@@ -342,6 +420,13 @@ export class PiboGatewayServer {
             getProfiles: () => this.pluginRegistry.getProfileInfos(),
             createProfile: (name) => this.pluginRegistry.createProfile(name),
             getCapabilityCatalog: () => this.pluginRegistry.getCapabilityCatalog(),
+            inspectAgentRuntimeInstances: () => this.pluginRegistry.inspectAgentRuntimeInstances(),
+            getAgentRuntimeAuthStatus: (runtimeInstanceId) => this.requireRouter().getAgentRuntimeAuthStatus(runtimeInstanceId),
+            startAgentRuntimeAuth: (runtimeInstanceId, input) => this.requireRouter().startAgentRuntimeAuth(runtimeInstanceId, input),
+            completeAgentRuntimeAuth: (runtimeInstanceId, input) => this.requireRouter().completeAgentRuntimeAuth(runtimeInstanceId, input),
+            cancelAgentRuntimeAuth: (runtimeInstanceId, input) => this.requireRouter().cancelAgentRuntimeAuth(runtimeInstanceId, input),
+            logoutAgentRuntimeAuth: (runtimeInstanceId, input) => this.requireRouter().logoutAgentRuntimeAuth(runtimeInstanceId, input),
+            validateAgentRuntimeProfile: (profile, workspace) => this.pluginRegistry.validateAgentRuntimeProfile(profile, workspace),
             getLoopStopConditionDefinitions: () => this.pluginRegistry.getLoopStopConditionDefinitions(),
             getLoopStopConditionInfos: () => this.pluginRegistry.getLoopStopConditionInfos(),
             getRalphStopConditionDefinitions: () => this.pluginRegistry.getLoopStopConditionDefinitions(),

package/dist/gateway/tool.js

@@ -1,13 +1,13 @@
-import { Type } from "@earendil-works/pi-ai";
-import { defineTool } from "@earendil-works/pi-coding-agent";
+import { Type } from "typebox";
+import { definePiboTool } from "../tools/contract.js";
 import { sendGatewayMessageAndWaitForReply } from "./request.js";
 export function createPiboGatewaySendTool(sendGatewayMessage = sendGatewayMessageAndWaitForReply) {
-    return defineTool({
+    return definePiboTool({
         name: "pibo_gateway_send",
-        label: "Pibo Gateway Send",
+        title: "Pibo Gateway Send",
         description: "Send a message through the local pibo gateway to a target session and return the target assistant reply.",
         promptSnippet: "Send a message through the local pibo gateway to a target session and return the final assistant reply from that session.",
-        parameters: Type.Object({
+        inputSchema: Type.Object({
             piboSessionId: Type.String({ description: "Target Pibo gateway session id" }),
             message: Type.String({ description: "Message to enqueue for the target session" }),
         }),

package/dist/index.js

@@ -1,11 +1,29 @@
-export { createDefaultPiboProfile, createDefaultPiboPluginRegistry, createDefaultPiboPlugins, createGatewayProducerPiboPluginRegistry, createGatewayProducerPiboProfile, piboCorePlugin, piboGatewayProducerPlugin, } from "./plugins/builtin.js";
+export { createDefaultPiboProfile, createDefaultPiboPluginRegistry, createDefaultPiboPlugins, createGatewayProducerPiboPluginRegistry, createGatewayProducerPiboProfile, CODEX_NATIVE_PROFILE_NAME, CODEX_NATIVE_RUNTIME_INSTANCE_ID, piboCodexNativePlugin, piboCorePlugin, piboGatewayProducerPlugin, } from "./plugins/builtin.js";
 export { createPiboBetterAuthPlugin } from "./plugins/better-auth.js";
 export { createPiboChatWebPlugin } from "./plugins/chat-web.js";
 export { createPiboContextFilesPlugin } from "./plugins/context-files.js";
 export { createPiboWebHostPlugin } from "./plugins/web.js";
 export { createChatWebApp } from "./apps/chat/web-app.js";
 export { createBetterAuthService } from "./auth/better-auth.js";
-export { InitialSessionContext, InitialSessionContextBuilder, } from "./core/profiles.js";
+export { DEFAULT_AGENT_RUNTIME_INSTANCE_ID, InitialSessionContext, InitialSessionContextBuilder, normalizeToolProfile, } from "./core/profiles.js";
+export { AgentRuntimeAdapterRegistry } from "./agent-runtime/registry.js";
+export { validateAgentRuntimeProfileCapabilities } from "./agent-runtime/profile-validation.js";
+export { buildPortableRuntimeContextSnapshot, profileWithRuntimeInstance, uniqueRuntimeDiagnostics, } from "./agent-runtime/context-build.js";
+export { RuntimeRoutedSession } from "./agent-runtime/routed-session.js";
+export { PiboRuntimeResourceError, PiboRuntimeResourceService, } from "./agent-runtime/resource-service.js";
+export { assertAgentRuntimeSessionContract, validateAgentRuntimeSessionContract, } from "./agent-runtime/contract.js";
+export { AgentRuntimeBindingMissingError, AgentRuntimeContractError, AgentRuntimeCapabilityUnavailableError, AgentRuntimeRegistrationError, AgentRuntimeUnavailableError, } from "./agent-runtime/errors.js";
+export { createMinimalAgentRuntimeCapabilities, unsupportedAgentRuntimeCapability, validateAgentRuntimeCapabilities, } from "./agent-runtime/capabilities.js";
+export { PI_AGENT_RUNTIME_DRIVER, PI_AGENT_RUNTIME_CAPABILITIES, getPiAgentRuntimeCompatibilityHandle } from "./agent-runtimes/pi/adapter.js";
+export { inspectPiAgentRuntimeHistory, piSessionEntriesToAgentRuntimeHistoryEntries, readPiAgentRuntimeHistory, } from "./agent-runtimes/pi/history.js";
+export { compilePiboToolForPi, piboToolResultToPi } from "./agent-runtimes/pi/tool-compiler.js";
+export { definePiboTool, isPiboToolDefinition, normalizePiboToolDefinition, normalizePiboToolResult, } from "./tools/contract.js";
+export { PiboToolCredentialError, PiboToolCredentialRegistry, } from "./tools/credential-registry.js";
+export { PiboToolMcpBridge, PiboToolMcpBridgeAuthorizationError, } from "./tools/mcp-bridge.js";
+export { createPiboToolPayloadWriter } from "./tools/payload-writer.js";
+export { createPiboSessionToolDefinitions, isCodexBrowserToolProfile, isEnabledCodexBrowserToolProfile, isEnabledRuntimeToolProfile, isGeneratedPiboTool, isRuntimeToolProfile, } from "./tools/session-tool-set.js";
+export { piboStringEnum } from "./tools/schema.js";
+export { PiboPortableToolService } from "./tools/session-service.js";
 export { definePiboPlugin, PiboPluginRegistry } from "./plugins/registry.js";
 export { createPiboGatewayToolProfiles } from "./gateway/tool.js";
 export { createPiboRuntime, inspectPiboProfile, runPiboTui } from "./core/runtime.js";
@@ -20,6 +38,7 @@ export { createWebHostChannel, DEFAULT_WEB_CHANNEL_HOST, DEFAULT_WEB_CHANNEL_POR
 export { sendGatewayEvent, sendGatewayMessageAndWaitForReply } from "./gateway/request.js";
 export { createSubagentToolDefinitions, createSubagentToolName, } from "./subagents/tool.js";
 export { PiboSteeringUnavailableError } from "./core/events.js";
+export { RuntimeSessionBindingConflictError, RuntimeSessionBindingTransitionError, assertRuntimeSessionBindingTransition, createInitialRuntimeSessionBinding, createLegacyPiRuntimeSessionBinding, nextRuntimeSessionBinding, } from "./sessions/runtime-binding.js";
 export { InMemoryPiboSessionStore, createPiSessionId, createPiboSessionId, createPiboSession, } from "./sessions/store.js";
 export { runPiboCli } from "./cli.js";
 export { DEFAULT_PIBO_CONFIG_PATH, PIBO_CONFIG_KEYS, deletePiboConfigValue, getDefaultPiboConfigPath, getDisplayPiboConfigValue, getPiboConfigValue, isPiboConfigKeySecret, loadPiboConfig, redactPiboConfig, savePiboConfig, setPiboConfigValue, } from "./config/config.js";

package/dist/loops/tools.js

@@ -1,5 +1,6 @@
-import { StringEnum, Type } from '@earendil-works/pi-ai';
-import { defineTool } from '@earendil-works/pi-coding-agent';
+import { Type } from "typebox";
+import { piboStringEnum } from "../tools/schema.js";
+import { definePiboTool } from "../tools/contract.js";
 import { goalActiveTimeSeconds, goalCanStartNextTurn, goalElapsedWallClockSeconds, goalRemainingTokens } from './accounting.js';
 import { createDefaultPiboLoopStore } from './store.js';
 export const PIBO_GOAL_TOOL_NAMES = ['get_goal', 'create_goal', 'update_goal'];
@@ -101,12 +102,12 @@ async function withStore(options, action) {
     }
 }
 function createGetGoalTool(context, options) {
-    return defineTool({
+    return definePiboTool({
         name: 'get_goal',
-        label: 'Get Goal',
+        title: 'Get Goal',
         description: 'Get the current goal for this Pibo Session, including soft-budget risk, per-turn reserve, active agent time, and wall-clock elapsed time.',
         promptSnippet: 'Use get_goal when you need the authoritative persisted status or accounting for the current Pibo Session goal.',
-        parameters: Type.Object({}),
+        inputSchema: Type.Object({}),
         async execute() {
             try {
                 const { piboSessionId } = requireSessionContext(context);
@@ -122,12 +123,12 @@ function createGetGoalTool(context, options) {
     });
 }
 function createCreateGoalTool(context, options) {
-    return defineTool({
+    return definePiboTool({
         name: 'create_goal',
-        label: 'Create Goal',
+        title: 'Create Goal',
         description: 'Create an active persisted Goal Loop for this Pibo Session only when explicitly requested. Fails while this session already has an unfinished goal.',
         promptSnippet: 'Call create_goal only when the user or system explicitly requests a persistent goal. Do not infer a goal from an ordinary task.',
-        parameters: Type.Object({
+        inputSchema: Type.Object({
             objective: Type.String({ description: 'Concrete objective to pursue across automatic continuations.' }),
             token_budget: Type.Optional(Type.Number({ description: 'Optional soft token budget. Usage arrives after each model response, so the final turn can overshoot.' })),
             token_reserve: Type.Optional(Type.Number({ description: 'Optional non-negative minimum remaining tokens required before Pibo starts another turn.' })),
@@ -160,13 +161,13 @@ function createCreateGoalTool(context, options) {
     });
 }
 function createUpdateGoalTool(context, options) {
-    return defineTool({
+    return definePiboTool({
         name: 'update_goal',
-        label: 'Update Goal',
+        title: 'Update Goal',
         description: 'Mark the current goal complete or genuinely blocked. Complete requires verified achievement. Blocked requires the same impasse for at least three consecutive goal turns.',
         promptSnippet: 'Use update_goal only with status complete after a requirement-by-requirement completion audit, or blocked after the strict repeated-blocker audit.',
-        parameters: Type.Object({
-            status: StringEnum(['complete', 'blocked'], { description: 'Terminal status for the current goal.' }),
+        inputSchema: Type.Object({
+            status: piboStringEnum(['complete', 'blocked'], { description: 'Terminal status for the current goal.' }),
         }),
         async execute(_toolCallId, params) {
             try {

package/dist/mcp/agent-context.js

@@ -1,5 +1,5 @@
 import { readFile, writeFile } from 'node:fs/promises';
-import { ensureConfigExists, isHttpServer, loadConfig, } from './config.js';
+import { ensureConfigExists, isHttpServer, loadConfigUnresolved, } from './config.js';
 import { ErrorCode, formatCliError } from './errors.js';
 export const MCP_SERVER_DESCRIPTION_MAX_LENGTH = 480;
 export const ENABLED_MCP_SERVERS_CONTEXT_PATH = '.pibo/context/enabled-mcp-servers.md';
@@ -23,7 +23,7 @@ export function normalizeMcpServerDescription(value) {
 }
 export async function listMcpServerInfos(configPath) {
     try {
-        const config = await loadConfig(configPath);
+        const config = await loadConfigUnresolved(configPath);
         return Object.entries(config.mcpServers).map(([name, server]) => mcpServerInfoFromConfig(name, server));
     }
     catch (error) {
@@ -56,8 +56,17 @@ export async function setMcpServerDescription(serverName, descriptionInput, conf
 export async function getMcpAgentContextFile(selectedServerNames, configPath) {
     if (selectedServerNames.length === 0)
         return undefined;
-    const infos = await listMcpServerInfos(configPath);
-    const infosByName = new Map(infos.map((info) => [info.name, info]));
+    try {
+        return getMcpAgentContextFileFromConfig(selectedServerNames, await loadConfigUnresolved(configPath));
+    }
+    catch (error) {
+        if (error.message.includes('CONFIG_NOT_FOUND'))
+            return undefined;
+        throw error;
+    }
+}
+export function getMcpAgentContextFileFromConfig(selectedServerNames, config) {
+    const infosByName = new Map(Object.entries(config.mcpServers).map(([name, server]) => [name, mcpServerInfoFromConfig(name, server)]));
     const selected = selectedServerNames
         .map((name) => infosByName.get(name))
         .filter((info) => Boolean(info?.description));

package/dist/mcp/client.js

@@ -2,7 +2,7 @@
  * MCP Client - Connection management for MCP servers
  */
 import { Client } from '@modelcontextprotocol/sdk/client/index.js';
-import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js';
+import { getDefaultEnvironment, StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js';
 import { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js';
 import { debug, filterTools, getConcurrencyLimit, getMaxRetries, getRetryDelayMs, getTimeoutMs, isDaemonEnabled, isHttpServer, isToolAllowed, } from './config.js';
 import { cleanupOrphanedDaemons, getDaemonConnection, } from './daemon-client.js';
@@ -205,11 +205,15 @@ function createHttpTransport(config) {
  * Uses stderr: 'pipe' to capture server output for debugging
  */
 function createStdioTransport(config) {
-    // Merge process.env with config.env, filtering out undefined values
-    const mergedEnv = {};
-    for (const [key, value] of Object.entries(process.env)) {
-        if (value !== undefined) {
-            mergedEnv[key] = value;
+    // Runtime-generated MCP sessions inherit only the SDK's safe baseline plus
+    // explicit server env. Existing global CLI behavior remains compatible.
+    const mergedEnv = process.env.PIBO_MCP_ISOLATED_ENV === '1'
+        ? getDefaultEnvironment()
+        : {};
+    if (process.env.PIBO_MCP_ISOLATED_ENV !== '1') {
+        for (const [key, value] of Object.entries(process.env)) {
+            if (value !== undefined)
+                mergedEnv[key] = value;
         }
     }
     if (config.env) {

package/dist/mcp/config.js

@@ -401,7 +401,7 @@ function validateServerConfig(serverName, serverConfig) {
  * Load and merge MCP servers configuration.
  * More specific paths appear first and win server-name conflicts.
  */
-export async function loadConfig(explicitPath) {
+export async function loadConfigUnresolved(explicitPath) {
     const explicitOrEnvPath = explicitPath
         ? resolve(explicitPath)
         : process.env.MCP_CONFIG_PATH
@@ -426,7 +426,10 @@ export async function loadConfig(explicitPath) {
     for (const [serverName, serverConfig] of Object.entries(merged.mcpServers)) {
         validateServerConfig(serverName, serverConfig);
     }
-    return substituteEnvVarsInObject(merged);
+    return merged;
+}
+export async function loadConfig(explicitPath) {
+    return substituteEnvVarsInObject(await loadConfigUnresolved(explicitPath));
 }
 export async function getConfigSourceSummaries(explicitPath) {
     const summaries = [];