@qodeca/xezar 0.13.0 → 0.14.0

package/README.md

@@ -19,8 +19,9 @@ your phone, working your backlog while you're away.
 
 [A look inside](#a-look-inside) · [What xezar does best](#what-xezar-does-best) · [What it solves](#what-it-solves) · [Who it's for](#who-its-for) · [Quick start](#quick-start) · [How it works](#how-it-works) · [Core concepts](#core-concepts) · [Cockpit tour](#cockpit-tour) · [Agent backends](#coding-agent-backends) · [Remote access](#remote-access-host-xezar-on-a-server)
 
+[![CI](https://github.com/qodeca/xezar/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/qodeca/xezar/actions/workflows/ci.yml)
 [![npm](https://img.shields.io/npm/v/@qodeca/xezar?color=cb3837&logo=npm)](https://www.npmjs.com/package/@qodeca/xezar)
-[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
+[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://github.com/qodeca/xezar/blob/main/LICENSE)
 ![Node 20+](https://img.shields.io/badge/Node-20%2B-339933)
 ![TypeScript 7.x](https://img.shields.io/badge/TypeScript-7.x-3178c6)
 ![Zero config](https://img.shields.io/badge/config-zero-success)
@@ -28,6 +29,10 @@ your phone, working your backlog while you're away.
 
 </div>
 
+> **Project status: early.** xezar is 0.x and moves fast. This repository opened on 2026-09-07; the
+> code is older and shipped before under the name Cezar. Expect rough edges, and expect breaking
+> changes in minor releases – each one is called out in the [CHANGELOG](https://github.com/qodeca/xezar/blob/main/CHANGELOG.md).
+
 ---
 
 ```bash
@@ -46,10 +51,10 @@ Click any thumbnail for the full-size screenshot.
 
 | Orchestrate parallel agents | Watch a run live | Parallel variants |
 |:--:|:--:|:--:|
-| [![The Tasks view — parallel runs, a queue with positions, per-run cost and peak memory, and a variants compare card](docs/screenshots/task-view.png)](docs/screenshots/task-view.png) | [![A running task streaming agent text, tool calls and screenshots live](docs/screenshots/live-run.png)](docs/screenshots/live-run.png) | [![Two competing variants of the same task compared side by side — pick the winner](docs/screenshots/variants-compare.png)](docs/screenshots/variants-compare.png) |
+| [![The Tasks view — parallel runs, a queue with positions, per-run cost and peak memory, and a variants compare card](https://raw.githubusercontent.com/qodeca/xezar/main/docs/screenshots/task-view.png)](https://raw.githubusercontent.com/qodeca/xezar/main/docs/screenshots/task-view.png) | [![A running task streaming agent text, tool calls and screenshots live](https://raw.githubusercontent.com/qodeca/xezar/main/docs/screenshots/live-run.png)](https://raw.githubusercontent.com/qodeca/xezar/main/docs/screenshots/live-run.png) | [![Two competing variants of the same task compared side by side — pick the winner](https://raw.githubusercontent.com/qodeca/xezar/main/docs/screenshots/variants-compare.png)](https://raw.githubusercontent.com/qodeca/xezar/main/docs/screenshots/variants-compare.png) |
 | *Run and queue many tasks at once — each in its own worktree — with live status, cost and peak memory per run.* | *Every step, tool call, token and screenshot — streamed as it happens.* | *Run a task ×2/×3 in isolated worktrees, compare the diffs, keep one.* |
 | **Workflow builder** | **GitHub, one click away** | **Skills + fire-and-forget** |
-| [![The workflow builder — drag skills into an ordered chain of agent steps and shell checks](docs/screenshots/workflow-builder.png)](docs/screenshots/workflow-builder.png) | [![The GitHub tab — hand an open issue to the agent with a workflow and skills](docs/screenshots/github-issues.png)](docs/screenshots/github-issues.png) | [![The task composer — pick a skill playbook and flip the Autonomous flag to run unattended](docs/screenshots/skills-autonomous.png)](docs/screenshots/skills-autonomous.png) |
+| [![The workflow builder — drag skills into an ordered chain of agent steps and shell checks](https://raw.githubusercontent.com/qodeca/xezar/main/docs/screenshots/workflow-builder.png)](https://raw.githubusercontent.com/qodeca/xezar/main/docs/screenshots/workflow-builder.png) | [![The GitHub tab — hand an open issue to the agent with a workflow and skills](https://raw.githubusercontent.com/qodeca/xezar/main/docs/screenshots/github-issues.png)](https://raw.githubusercontent.com/qodeca/xezar/main/docs/screenshots/github-issues.png) | [![The task composer — pick a skill playbook and flip the Autonomous flag to run unattended](https://raw.githubusercontent.com/qodeca/xezar/main/docs/screenshots/skills-autonomous.png)](https://raw.githubusercontent.com/qodeca/xezar/main/docs/screenshots/skills-autonomous.png) |
 | *Stitch skills and shell checks into a reusable YAML chain, no code.* | *Open issues and PRs via your `gh` — run the agent straight on an issue.* | *Pick a Markdown skill and flip **Autonomous** — the run never stops to ask, so you can walk away.* |
 
 ---
@@ -113,7 +118,7 @@ and an orchestrator keeps a whole queue of them moving.
   Take it over interactively in one click (`claude --resume <id>`), or continue it
   in-process from the cockpit.
 - 🔀 **Locked into one agent vendor.** Most tools wed you to a single CLI. xezar
-  drives **Claude Code, Codex and OpenCode (experimental)** through one runner seam — set a
+  drives **Claude Code, Codex, OpenCode and pi (the last two experimental)** through one runner seam — set a
   default, pick a backend per task, or mix them inside one workflow (implement
   with one agent, review with another) — and through **OpenCode** you can point
   a run at **open-source or local models**, not just the big vendors. See
@@ -147,8 +152,9 @@ and an orchestrator keeps a whole queue of them moving.
 
 **Prerequisites:** Node 20+, at least one logged-in agent CLI — the
 [`claude` CLI](https://github.com/anthropics/claude-code) (Pro/Max subscription),
-the [`codex` CLI](https://github.com/openai/codex), or
-[OpenCode](https://opencode.ai) — and, optionally, `git` and the `gh` CLI.
+the [`codex` CLI](https://github.com/openai/codex),
+[OpenCode](https://opencode.ai), or [pi](https://github.com/badlogic/pi-mono) —
+and, optionally, `git` and the `gh` CLI.
 
 Install it once, then run it in any repo:
 
@@ -192,8 +198,8 @@ To upgrade later: `npm install -g @qodeca/xezar@latest`.
 
 You describe a task. xezar runs it as a **workflow** — an ordered list of agent
 steps and shell checks — shelling out to your locally installed agent CLI
-(Claude Code by default; Codex and OpenCode are drop-in alternatives, per task
-or per step). In a git repo each task gets its own worktree by default — switch
+(Claude Code by default; Codex, OpenCode and pi are drop-in alternatives, per
+task or per step). In a git repo each task gets its own worktree by default — switch
 the composer's **Worktree** toggle off to run in the repo working tree (under
 xezar's repository-root lease), and a non-git directory runs in place. A git
 task that asks for a worktree it cannot create stops as `failed`; it never falls
@@ -259,7 +265,7 @@ Three words, no jargon — **task**, **skill**, **chain**:
   AI draft a chain for your task that you review, trim and start. The built-in
   `quick-task` (one agent step) works with zero setup.
 
-Five moves that make the cockpit worth the browser tab:
+Six moves that make the cockpit worth the browser tab:
 
 - 🗃️ **Queue + orchestration.** Start as many tasks as you like: xezar runs up to
   `maxParallel` at once across every project (default **2**; a non-git directory
@@ -316,7 +322,7 @@ Nine views, one browser window, all live over Server-Sent Events (seven by defau
 | **Automations** | **Opt-in** (`XEZ_AUTOMATIONS=1`; hidden by default). Scheduled GitHub watches: each automation polls on its own interval and launches a task when its bounded filter matches. Test a filter before enabling it, and read the per-check log. |
 | **Skills** | Local skills plus the team skills repo, with a rendered body + prompt preview. Refresh pulls the latest from the remote. |
 | **Workflows** | Build a chain by drag-ordering skills, save it as portable YAML, import/export, or delete. Built-ins always come back. |
-| **Settings** | Appearance (dark/light theme, accent, density), agent backends, notifications, and the skills catalog. |
+| **Settings** | Appearance (dark/light theme, accent, density), agent backends and their own config files, agent accounts, notifications, machine resources, projects, and skill-update checks. |
 
 The cockpit is a React app served pre-built from the package — running `xezar`
 needs no dev server on your machine — with a dark/light
@@ -373,10 +379,11 @@ These read and write `~/.xezar/config.json` directly, so they work with the
 server stopped, and `XEZ_HOME` selects which workspace they operate on.
 
 Settings split along the same line: **General** (the project's folder, its
-registry facts, its parallel-task ceiling, and Remove), **Agents**,
-**Worktrees**, **Bookmarklets**, **Prompt templates** and **MCP** describe one
-repo and live under `/p/<projectId>/settings`; **Appearance**,
-**Notifications**, **Resources**, **Projects** and **Keyboard** are yours or the
+registry facts, its parallel-task ceiling, and Remove), **Agents**, **Agent
+config** (each agent's own settings, MCP and memory files), **Worktrees**,
+**Bookmarklets** and **Prompt templates** describe one repo and live under
+`/p/<projectId>/settings`; **Appearance**, **Notifications**, **Resources**,
+**Skills** (update checks), **Agent accounts** and **Projects** are yours or the
 machine's and live at `/settings/global`.
 
 ### Grouping connected repositories: tags and the All tasks page
@@ -453,7 +460,7 @@ segment.
 
 ## Workflow format
 
-See [project layout and legacy migration](docs/project-layout.md) for directory precedence and the offline migration command.
+See [project layout and legacy migration](https://github.com/qodeca/xezar/blob/main/docs/project-layout.md) for directory precedence and the offline migration command.
 
 A workflow is a small YAML file in `.xezar/workflows/`:
 
@@ -546,9 +553,10 @@ Useful environment variables:
 | `XEZ_AUTOSAVE=1` | Re-enable the periodic (90 s) autosave commit in task worktrees. Off by default (#471) — turn-end and pre-PR flushes always run, so branches still end complete. Every autosave names its trigger in the commit subject (`xezar autosave (periodic)` vs `(turn end)` / `(run finalize)` / `(pre-PR)`), so the flushes you keep are distinguishable from the timer you disabled. |
 | `XEZ_CLAUDE_BIN=/path/to/claude` | Override which `claude` binary is used. |
 | `XEZ_CODEX_BIN=/path/to/codex` | Override which `codex` binary is used. |
+| `XEZ_CODEX_REASONING=concise` | The reasoning summary Codex is asked for on each turn: `auto` (the default, so the reasoning thread is visible), `concise`, `detailed`, or `none` to opt out. An unrecognised value falls back to `auto`. |
 | `XEZ_OPENCODE_BIN=/path/to/opencode` | Override which `opencode` binary is used. |
 | `XEZ_PI_BIN=/path/to/pi` | Override which `pi` binary is used. |
-| `CLAUDE_CONFIG_DIR`, `CODEX_HOME` | The agents' **own** variables, honoured where the vendor documents one. Setting one moves that agent's **default account** — the config folder xezar discovers, credentials included. A *second* login of the same CLI is deliberately not an environment setting, since one process-wide value cannot differ per project: add it under **Settings → Agent accounts** and pick it per project. |
+| `CLAUDE_CONFIG_DIR`, `CODEX_HOME`, `PI_CODING_AGENT_DIR` | The agents' **own** variables, honoured where the vendor documents one. Setting one moves that agent's **default account** — the config folder xezar discovers, credentials included. pi's variable moves its whole `~/.pi/agent` (settings, models **and** `auth.json`), which is why pi can carry accounts and OpenCode cannot; re-verified against pi 0.85.1 on 2026-09-12. A *second* login of the same CLI is deliberately not an environment setting, since one process-wide value cannot differ per project: add it under **Settings → Agent accounts** and pick it per project. |
 | `OPENCODE_CONFIG_DIR` | Where xezar looks for OpenCode's config, ahead of `$XDG_CONFIG_HOME/opencode` (default `~/.config/opencode`). Config **only** — OpenCode keeps credentials in `~/.local/share/opencode`, so this moves settings without moving the account, which is why OpenCode cannot carry Agent accounts. |
 | `XEZ_BROWSE_ROOT=~/` | Default root for **Add project → Open local folder…**. The picker cannot navigate above it; a saved workspace value overrides the environment default and must name an existing folder. |
 | `XEZ_PROJECTS_DIR=~/xezar/projects` | Default destination for **Clone from GitHub**. Saved workspace settings override it, and missing directories are created recursively. |
@@ -568,7 +576,7 @@ Useful environment variables:
 | `XEZ_TITLE_UPDATES=0` | Turn off the live task-title refresh (namer re-runs on each turn end). The Settings → Agents toggle overrides this default. |
 | `XEZ_AUTONAME=0` | Disable ALL LLM task naming (creation + live) — titles stay heuristic (`437: /om-auto-review-pr`). Under `XEZ_DRY_RUN=1` naming is already off unless forced with `XEZ_AUTONAME=1`. |
 | `XEZ_REVIEW_GATE=1` | Turn ON the optional diff-first review gate (#489): a successful, non-autonomous run with changes parks at `review` (Accept / Send back / Draft PR) instead of finishing. Off by default — changed runs settle to `done` with the diff left in the worktree. Only `1` enables. The Settings → Agents toggle overrides this; autonomous runs always skip it. |
-| `XEZ_NO_BANNER=1` | Skip the `open-mercato/skills` banner on `xezar serve` startup. (The cockpit no longer shows a banner — its skills now live on the Skills page's Manage panel — so this env var is the terminal banner's only switch.) |
+| `XEZ_NO_BANNER=1` | Skip the `open-mercato/skills` banner on `xezar serve` startup. That is the default team skills repository — a separate, maintained repository, not a leftover of the rename from Cezar. (The cockpit no longer shows a banner — its skills now live on the Skills page's Manage panel — so this env var is the terminal banner's only switch.) |
 | `VITE_XEZ_API_BASE=http://localhost:4321` | **Build time only**, and only when the cockpit bundle is deployed apart from the service it talks to. Empty (the default) means "the origin that served this page", which is right for both normal cases: the CLI serves the bundle itself, and `npm run dev` proxies `/api` to the local service. A deployment that must be configured without a rebuild can put `<meta name="xez-api-base" content="…">` in the served HTML instead, which wins over this. |
 
 ### Troubleshooting: the agent's shell returns nothing
@@ -623,16 +631,17 @@ On startup xezar probes which CLIs are installed and the cockpit only offers
 the backends it found — install any one of the four and you're operational.
 
 **Models come from your own machine.** The model picker does not ship a list of
-vendor releases that goes stale between xezar versions. For Claude, Codex and
-OpenCode xezar asks the CLI on your host what *it* currently offers (Claude
-Code's `list_models` control request; the Codex app-server's `model/list`;
-`opencode models`) and shows exactly that, in that order — so a model your
-account gained yesterday is selectable today with no xezar release, and one your
-provider retired stops being offered. Discovery is read-only, costs no tokens,
-and is cached briefly in memory. If the CLI is missing, logged out, too old or
-slow, the picker quietly falls back to that runner's built-in entries (`auto`
-plus Claude's tier aliases) and says so in a status row; `pi`, which has no
-host-local catalog yet, always shows its built-in entries. `auto` — send no
+vendor releases that goes stale between xezar versions. For each backend xezar
+reads what *your host* currently offers — Claude Code's `list_models` control
+request, the Codex app-server's `model/list`, `opencode models`, and for pi its
+own `models.json` and `settings.json` (in `~/.pi/agent`, or wherever
+`PI_CODING_AGENT_DIR` points) — and shows exactly that, in
+that order, so a model your account gained yesterday is selectable today with no
+xezar release, and one your provider retired stops being offered. Discovery is
+read-only, costs no tokens, and is cached briefly in memory. If a CLI is
+missing, logged out, too old or slow — or pi has no providers configured yet —
+the picker quietly falls back to that runner's built-in entries (`auto` plus
+Claude's tier aliases) and says so in a status row. `auto` — send no
 model at all and let the CLI decide — is always available, and a model you
 pinned by hand stays selectable even when it is no longer advertised.
 
@@ -688,8 +697,8 @@ happens per task and per step, not inside a variant group.
 
 The seam is deliberately small: a backend is one class implementing the
 `AgentRunner` interface (`packages/xezar/src/core/agent-runner.ts`) that turns a prompt into
-a stream of normalized events. Other CLIs — pi, aider, whatever ships next —
-can slot in the same way.
+a stream of normalized events. `pi` was added exactly that way; other CLIs —
+aider, whatever ships next — can slot into the same seam.
 
 ---
 
@@ -726,15 +735,15 @@ xezar server-install --platform ubuntu-vps \
 `--bind-host` is only needed when the proxy runs in a **container** (Traefik
 can't reach the host's loopback); a host-installed proxy uses the `127.0.0.1`
 default. In this mode **your proxy must enforce authentication** — xezar has
-none of its own. [Details →](docs/server-install/ubuntu-vps.md#the-box-already-has-a-reverse-proxy-dokploy-coolify-caddy)
+none of its own. [Details →](https://github.com/qodeca/xezar/blob/main/docs/server-install/ubuntu-vps.md#the-box-already-has-a-reverse-proxy-dokploy-coolify-caddy)
 
 | Provider | `--platform` | Public front | Guide |
 |----------|--------------|--------------|-------|
-| Ubuntu / Debian VPS | `ubuntu-vps` | nginx + Let's Encrypt HTTPS, htpasswd login, systemd | [Step-by-step →](docs/server-install/ubuntu-vps.md) |
-| Ubuntu + existing proxy | `ubuntu-vps --external-proxy` | your Dokploy/Traefik/Caddy front; xezar ships the service only | [Step-by-step →](docs/server-install/ubuntu-vps.md#the-box-already-has-a-reverse-proxy-dokploy-coolify-caddy) |
-| macOS + ngrok | `macosx-ngrok` | ngrok tunnel + `--basic-auth`, launchd | [Step-by-step →](docs/server-install/macosx-ngrok.md) |
+| Ubuntu / Debian VPS | `ubuntu-vps` | nginx + Let's Encrypt HTTPS, htpasswd login, systemd | [Step-by-step →](https://github.com/qodeca/xezar/blob/main/docs/server-install/ubuntu-vps.md) |
+| Ubuntu + existing proxy | `ubuntu-vps --external-proxy` | your Dokploy/Traefik/Caddy front; xezar ships the service only | [Step-by-step →](https://github.com/qodeca/xezar/blob/main/docs/server-install/ubuntu-vps.md#the-box-already-has-a-reverse-proxy-dokploy-coolify-caddy) |
+| macOS + ngrok | `macosx-ngrok` | ngrok tunnel + `--basic-auth`, launchd | [Step-by-step →](https://github.com/qodeca/xezar/blob/main/docs/server-install/macosx-ngrok.md) |
 
-See the **[Remote access overview](docs/server-install/README.md)** for how it
+See the **[Remote access overview](https://github.com/qodeca/xezar/blob/main/docs/server-install/README.md)** for how it
 works and how to redeploy new versions.
 
 ---
@@ -748,6 +757,7 @@ never blocks startup):
 ```jsonc
 {
   "skillsRepos": [{ "repo": "open-mercato/skills", "ref": "main" }], // team skills; [] disables
+  // open-mercato/skills is a separate, maintained skills repository, not a leftover of the Cezar rename.
   // Team-skill repos are code-trusted: a skill body becomes an agent system prompt.
   // Only owner/name, https/ssh URLs, or local paths (`/abs`, `./rel`, `~/dir`,
   // `C:\dir`) are accepted — no ext::/fd:: transport helpers. Write a relative
@@ -795,7 +805,7 @@ the workspace ceiling for runs in that repo.
 ### Editing the agents' own config (Settings → Agent config)
 
 xezar picks *which* agent runs; **Settings → Agent config** lets you edit *how* it
-behaves — the raw config files Claude, Codex and OpenCode read for settings,
+behaves — the raw config files Claude, Codex, OpenCode and pi read for settings,
 MCP, and memory. In the multi-project cockpit the section is project-scoped:
 repo-relative files resolve from the selected project's root, while user-scope
 files continue to resolve from the agent's home.
@@ -805,6 +815,13 @@ files reach task worktrees after commit; Claude's gitignored personal layer is
 seeded into each run's worktree. Editing is a local-machine capability, so a
 hosted cockpit (`XEZ_REMOTE=1`) is read-only and never serves home-file contents.
 
+Only files whose whole contents are safe to hand back are listed. pi keeps its
+credentials (`auth.json`) and its custom-provider catalogue with the API keys in
+it (`models.json`) in the same folder as its settings, and neither is editable
+here or anywhere else in the cockpit. pi's MCP files are listed because the
+`pi-mcp-adapter` extension reads them — pi itself reads no MCP config, which is
+what **Settings → MCP connection** walks you through installing.
+
 ---
 
 ## Local development
@@ -823,8 +840,9 @@ cd xezar
 npm install
 ```
 
-**3. Build** — compiles the api-client and the server (`tsc → packages/xezar/dist/`) and the cockpit
-(`vite build → packages/xezar/web/dist/`), then runs the pack gate:
+**3. Build** — compiles the server (`tsc → packages/xezar/dist/`), folds the
+contract into `dist/contract/` so the published tarball resolves it, and builds
+the cockpit (`vite build → packages/xezar/web/dist/`), then runs the pack gate:
 
 ```bash
 npm run build
@@ -889,7 +907,10 @@ npm run test:e2e     # real-browser cockpit suite (agent-browser)
 Coverage is measured separately, and is not part of the validation gate:
 `npm run test:coverage` runs the vitest suites under the v8 provider and writes line and branch
 numbers to `.local/coverage/`. The behaviour-led gap analysis built from it lives in
-[docs/testing/coverage-gaps.md](docs/testing/coverage-gaps.md).
+[docs/testing/coverage-gaps.md](https://github.com/qodeca/xezar/blob/main/docs/testing/coverage-gaps.md).
+The MCP server is the one scope held to a floor: `npm run test:coverage:mcp` measures it alone
+and fails any file under 80 % lines or branches – see
+[SDLC.md § The MCP test floor](https://github.com/qodeca/xezar/blob/main/SDLC.md#the-mcp-test-floor).
 
 The stack is deliberately small: **TypeScript** (strict, ESM), **Hono** + SSE for
 the server, **Zod** at every boundary, **YAML** for workflows, and a **React 19 +
@@ -897,8 +918,20 @@ Vite + Tailwind v4 + shadcn/ui** cockpit shipped pre-built in `packages/xezar/we
 published package carries the built app, so `npx` users never run a bundler.
 Every module is meant to be read in one sitting.
 
+What lives where under `docs/`, and who each part is for, is mapped in
+[docs/README.md](https://github.com/qodeca/xezar/blob/main/docs/README.md). `docs/features/` is the internal engineering and decision
+record, not a user guide.
+
+---
+
+## Contributing
+
+Bug reports, ideas and pull requests are welcome. [CONTRIBUTING.md](https://github.com/qodeca/xezar/blob/main/CONTRIBUTING.md) is the short path
+from a change to a merged pull request. Report security problems privately, as described in
+[SECURITY.md](https://github.com/qodeca/xezar/blob/main/SECURITY.md).
+
 ---
 
 ## License
 
-**MIT** © Patryk Lewczuk — full text in [LICENSE](LICENSE).
+**MIT** © Patryk Lewczuk — full text in [LICENSE](https://github.com/qodeca/xezar/blob/main/LICENSE).

package/dist/agent-config/account-identity.d.ts

@@ -6,7 +6,8 @@ import type { ProviderId } from '../core/provider-auth.ts';
  * This is the second place vendor knowledge lives about an agent's home, beside
  * `catalog.ts` (which config FILES exist) and `core/agent-profiles.ts` (which env var relocates
  * the home). This one knows where each agent writes its own identity. Facts verified against the
- * files on disk 2026-07-29; re-verify before changing them.
+ * files on disk 2026-07-29, and the pi row against pi 0.85.1 on 2026-09-12 (#329); re-verify
+ * before changing them.
  *
  * ## Two rules that are not negotiable
  *
@@ -34,11 +35,4 @@ export interface AccountIdentity {
     reason?: string;
     fields: AccountIdentityField[];
 }
-/**
- * What this account is logged in as, or an honest reason there is nothing to show.
- *
- * Never throws. OpenCode answers "unsupported": its credentials live in a SQLite DB outside the
- * config dir (see `core/agent-profiles.ts`), so there is nothing in a config folder to read — and
- * guessing from the default login would attribute one account's identity to another.
- */
 export declare function readAccountIdentity(provider: ProviderId, configDir: string): Promise<AccountIdentity>;

package/dist/agent-config/account-identity.js

@@ -94,6 +94,41 @@ async function readCodexIdentity(configDir) {
         ? { available: true, fields }
         : { available: false, reason: NOT_SIGNED_IN, fields: [] };
 }
+/**
+ * pi keeps its login in `auth.json` INSIDE the agent dir — that is the fact #329 is about, and it
+ * is why pi can carry an account at all. But the file holds no account identity: it is
+ * `Record<providerId, Credential>`, and a `Credential` is `{type: 'api_key', key?, env?}` or
+ * `{type: 'oauth', refresh, access, expires}` — no email, no name, no plan anywhere in it
+ * (pi 0.85.1, `dist/core/auth-storage.d.ts` plus `@earendil-works/pi-ai` `dist/auth/types.d.ts`,
+ * read on 2026-09-12).
+ *
+ * What the file DOES carry is what pi-ai itself labels "non-secret credential metadata for
+ * account/status enumeration": which model providers this account is logged in to, and by which
+ * method. That is the thing that tells two pi accounts apart, so that is what this shows — the
+ * map's KEYS and each entry's `type`, both by name. `key`, `access`, `refresh` and `env` are
+ * never read, and the value is rebuilt from scratch rather than forwarded.
+ *
+ * A fresh pi writes `auth.json` as `{}` before any login (observed, #329), so an empty map is the
+ * ordinary not-signed-in case and not a parse failure.
+ */
+async function readPiIdentity(configDir) {
+    const auth = await readJsonCapped(join(configDir, 'auth.json'));
+    if (auth === null)
+        return { available: false, reason: NOT_SIGNED_IN, fields: [] };
+    const logins = [];
+    for (const [providerId, credential] of Object.entries(auth)) {
+        const name = text(providerId);
+        if (name === undefined || !credential || typeof credential !== 'object')
+            continue;
+        const type = credential.type;
+        const method = type === 'oauth' ? 'OAuth' : type === 'api_key' ? 'API key' : undefined;
+        logins.push(method === undefined ? name : `${name} (${method})`);
+    }
+    logins.sort();
+    return logins.length > 0
+        ? { available: true, fields: [{ label: 'Signed in to', value: logins.join(', ') }] }
+        : { available: false, reason: NOT_SIGNED_IN, fields: [] };
+}
 /** A JWT's payload claims, or null when it is not a readable three-part token. */
 function decodeJwtClaims(token) {
     const parts = token.split('.');
@@ -110,19 +145,28 @@ function decodeJwtClaims(token) {
 /**
  * What this account is logged in as, or an honest reason there is nothing to show.
  *
- * Never throws. OpenCode answers "unsupported": its credentials live in a SQLite DB outside the
- * config dir (see `core/agent-profiles.ts`), so there is nothing in a config folder to read — and
- * guessing from the default login would attribute one account's identity to another.
+ * Never throws. An exhaustive `Record<ProviderId, …>` rather than a chain of `if`s, and that is
+ * the fix rather than the style: the chain this replaced fell through to OpenCode's refusal for
+ * ANY provider it did not name, so a pi account's "Show details" answered with a sentence about
+ * OpenCode — a provider the user had not asked about, and a claim that is false of pi, whose
+ * login really is inside its config folder (#329, 2026-09-12). Each provider now answers in its
+ * own words, and a fifth provider is a compile error instead of a borrowed refusal.
+ *
+ * Only OpenCode is genuinely unreadable: its credentials live outside the config dir (see
+ * `core/agent-profiles.ts`), so there is nothing in a config folder to read — and guessing from
+ * the default login would attribute one account's identity to another.
  */
-export async function readAccountIdentity(provider, configDir) {
-    if (provider === 'claude')
-        return readClaudeIdentity(configDir);
-    if (provider === 'codex')
-        return readCodexIdentity(configDir);
-    return {
+const READ_IDENTITY = {
+    claude: readClaudeIdentity,
+    codex: readCodexIdentity,
+    pi: readPiIdentity,
+    opencode: async () => ({
         available: false,
         reason: 'OpenCode keeps its login outside its config folder, so xezar cannot read it.',
         fields: [],
-    };
+    }),
+};
+export async function readAccountIdentity(provider, configDir) {
+    return READ_IDENTITY[provider](configDir);
 }
 //# sourceMappingURL=account-identity.js.map

package/dist/agent-config/account-identity.js.map

@@ -1 +1 @@
-{"version":3,"file":"account-identity.js","sourceRoot":"","sources":["../../src/agent-config/account-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAwClD,iGAAiG;AACjG,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjC,MAAM,aAAa,GAAG,kDAAkD,CAAC;AACzE,MAAM,UAAU,GAAG,wCAAwC,CAAC;AAE5D,6FAA6F;AAC7F,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,GAAG,CAAC,MAAM,GAAG,QAAQ;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,wGAAwG;AACxG,SAAS,IAAI,CAAC,KAAc;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,sDAAsD;AACtD,SAAS,IAAI,CAAC,MAA8B,EAAE,KAAa,EAAE,KAAc;IACzE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACjD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;IACnE,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACnF,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC;IACnC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,CAAC,GAAG,OAAkC,CAAC;IAC7C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACzC,uFAAuF;IACvF,mFAAmF;IACnF,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC;QACtB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE;QAC7B,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,iBAAiB,CAAC,SAAiB;IAChD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;IAChE,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAClF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAClD,CAAC,CAAE,MAAkC,CAAC,QAAQ;QAC9C,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,6BAA6B,CAAC,CAAC;QACrD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAG,MAAkC,CAAC,iBAAiB,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IACD,wFAAwF;IACxF,qEAAqE;IACrE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,IAAI,IAAI,CAAC,cAAc,KAAK,EAAE,EAAE,CAAC;QACjG,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC7E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC;QACtB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE;QAC7B,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAC9D,CAAC;AAED,kFAAkF;AAClF,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACxF,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAoB,EACpB,SAAiB;IAEjB,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC9D,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,8EAA8E;QACtF,MAAM,EAAE,EAAE;KACX,CAAC;AACJ,CAAC"}
+{"version":3,"file":"account-identity.js","sourceRoot":"","sources":["../../src/agent-config/account-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAyClD,iGAAiG;AACjG,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjC,MAAM,aAAa,GAAG,kDAAkD,CAAC;AACzE,MAAM,UAAU,GAAG,wCAAwC,CAAC;AAE5D,6FAA6F;AAC7F,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,GAAG,CAAC,MAAM,GAAG,QAAQ;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,wGAAwG;AACxG,SAAS,IAAI,CAAC,KAAc;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,sDAAsD;AACtD,SAAS,IAAI,CAAC,MAA8B,EAAE,KAAa,EAAE,KAAc;IACzE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACjD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;IACnE,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACnF,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC;IACnC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,CAAC,GAAG,OAAkC,CAAC;IAC7C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACzC,uFAAuF;IACvF,mFAAmF;IACnF,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC;QACtB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE;QAC7B,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,iBAAiB,CAAC,SAAiB;IAChD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;IAChE,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAClF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAClD,CAAC,CAAE,MAAkC,CAAC,QAAQ;QAC9C,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,6BAA6B,CAAC,CAAC;QACrD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAG,MAAkC,CAAC,iBAAiB,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IACD,wFAAwF;IACxF,qEAAqE;IACrE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,IAAI,IAAI,CAAC,cAAc,KAAK,EAAE,EAAE,CAAC;QACjG,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC7E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC;QACtB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE;QAC7B,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,KAAK,UAAU,cAAc,CAAC,SAAiB;IAC7C,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;IAChE,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAClF,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ;YAAE,SAAS;QAClF,MAAM,IAAI,GAAI,UAAsC,CAAC,IAAI,CAAC;QAC1D,MAAM,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,MAAM,GAAG,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,CAAC,IAAI,EAAE,CAAC;IACd,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC;QACtB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QACpF,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAC9D,CAAC;AAED,kFAAkF;AAClF,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACxF,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,aAAa,GAAwE;IACzF,MAAM,EAAE,kBAAkB;IAC1B,KAAK,EAAE,iBAAiB;IACxB,EAAE,EAAE,cAAc;IAClB,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACrB,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,8EAA8E;QACtF,MAAM,EAAE,EAAE;KACX,CAAC;CACH,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAoB,EACpB,SAAiB;IAEjB,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC;AAC5C,CAAC"}

package/dist/agent-config/catalog.d.ts

@@ -9,7 +9,44 @@ import type { RunnerId } from '../core/agent-runner.ts';
  * and what the docs say; an unknown file is not shown rather than guessed at.
  * A raw editor cannot drift on a vendor's *schema*; it can drift on *paths and
  * precedence strings*, so every entry carries a `docsUrl` and this table is the
- * single maintenance surface. Facts verified against primary docs 2026-07-16.
+ * single maintenance surface. Facts verified against primary docs 2026-07-16;
+ * the pi block against the docs shipped with pi 0.85.1 on 2026-09-12 (#330 WP4).
+ *
+ * WHAT MAY GO IN THIS TABLE AT ALL. An entry is a file the API hands to a caller
+ * verbatim and writes back verbatim, so a file that can hold a credential is not
+ * eligible however useful editing it would be (F-15: no secret in a tool
+ * response). Two files in pi's home are excluded for exactly that reason and
+ * must stay excluded:
+ *
+ *   - `auth.json` — pi's stored provider credentials.
+ *   - `models.json` — pi's custom-provider catalogue. `apiKey` is OPTIONAL on a
+ *     provider entry (`apiKey?: string`, `custom-provider.md`) and its value may
+ *     be an `$ENV_VAR` reference or a `!command` rather than a literal, so "this
+ *     file always holds a secret" would be too strong a claim. The exclusion does
+ *     not rest on that claim: on a real 0.85.1 home here, a provider entry carries
+ *     a literal `apiKey` (`providers.<id>.apiKey`, mode `0600`, checked
+ *     2026-09-12), so the file is credential-BEARING in practice, and a catalog
+ *     entry hands a file over WHOLE. #152's model discovery reads the same file
+ *     and deliberately touches only `name`, `models[].id` and `models[].name`
+ *     (`core/pi-model-catalog.ts`); that is the shape a reader of this file needs.
+ *     Wanting a model editor is not a reason to catalog it.
+ *
+ * The same directory holds more than those two, and none of the rest may become
+ * an entry either. On a real 0.85.1 home, checked 2026-09-12: pi's own rotation
+ * copies `models.json.bak-<timestamp>` (mode `0600`, carrying the same literal
+ * `apiKey` as the file they copy) and `settings.json.bak-*` (mode `0644`, no
+ * `apiKey` observed), plus `models-store.json` (mode `0600`). They are
+ * unreachable today for a structural reason worth keeping: every `resolve` below
+ * is a fixed `join` of known segments, so the catalog never globs and never lists
+ * a directory, and a file becomes reachable only by being written into this table
+ * by hand. Rotation copies are the trap that makes this worth stating — excluding
+ * `models.json` by name would not exclude `models.json.bak-20260910-114604`.
+ *
+ * `mcp.json` IS eligible on the same terms as the three MCP files already here:
+ * an MCP server definition can carry a token in `env`/`headers`, and Claude's
+ * `.mcp.json`, Codex's `[mcp_servers]` and OpenCode's `"mcp"` key have always
+ * been in this table with that property. A user typing a secret into a config
+ * file is not the same risk as xezar cataloging a file whose PURPOSE is secrets.
  */
 export type ConfigFormat = 'json' | 'jsonc' | 'toml' | 'markdown';
 export type ConfigScope = 'user' | 'project' | 'local';
@@ -29,13 +66,18 @@ export interface AgentHomePaths {
     /** `$XDG_CONFIG_HOME/opencode` or `~/.config/opencode` */
     opencodeConfig: string;
     /**
-     * `~/.pi/agent` — pi's whole per-user directory (`models.json`, `settings.json`, and the
-     * `auth.json` xezar never reads). No vendor variable relocates it (verified against pi 0.85.1,
-     * 2026-09-10), which is why this slot carries no `env.` alternative the way the three above do.
+     * `$PI_CODING_AGENT_DIR` or `~/.pi/agent` — pi's whole per-user directory (`models.json`,
+     * `settings.json`, and `auth.json`, which `account-identity.ts` reads for its non-secret
+     * credential metadata and nothing else). The variable IS documented and the binary does read
+     * it (re-verified against pi 0.85.1, 2026-09-12, #329); the note that used to sit here denying
+     * it was wrong, and dated 2026-09-10.
      *
-     * `CONFIG_FILES` lists no pi entry yet, so nothing in the raw config editor resolves through
-     * this slot today; model discovery (#152) does, and it lives here so pi's home is derived in
-     * the one place every other agent's is.
+     * `CONFIG_FILES` resolves `pi.user.settings`, `pi.user.mcp` and `pi.user.memory` through this
+     * slot (#330 WP4), which is also what makes a pi ACCOUNT's files resolve inside the account's
+     * folder: `accountFiles` in `server/server.ts` patches this slot via `accountHomePatch`. Model
+     * discovery (#152) reads the same slot. It lives here so pi's home is derived in the one place
+     * every other agent's is. `auth.json` and `models.json` sit in this dir and are deliberately
+     * NOT catalog entries — see the file header.
      */
     pi: string;
 }

package/dist/agent-config/catalog.js

@@ -6,6 +6,35 @@ const CODEX_CONFIG_DOCS = 'https://developers.openai.com/codex/config-reference'
 const CODEX_AGENTS_DOCS = 'https://developers.openai.com/codex/guides/agents-md';
 const OPENCODE_CONFIG_DOCS = 'https://opencode.ai/docs/config/';
 const OPENCODE_RULES_DOCS = 'https://opencode.ai/docs/rules/';
+/**
+ * pi ships its docs INSIDE the npm package (`docs/` in `@earendil-works/pi-coding-agent`) AND
+ * serves them at `pi.dev`. An earlier note here said it served no docs site, on the strength of
+ * `https://pi.dev/docs/settings` → 404; that URL shape was simply wrong. What is true, checked
+ * 2026-09-12: `https://pi.dev/docs` → 302 → `/docs/latest`, and `/docs/latest/settings` and
+ * `/docs/latest/usage` both answer 200 and contain the sentences quoted below, verbatim.
+ *
+ * These point at the vendor's own pages rather than at `github.com/.../blob/main/...`, which
+ * tracked a moving branch. `latest` moves too — pi publishes no version-pinned path
+ * (`/docs/0.85.1/settings` → 404, checked) — so the guard against silent drift is the date, not
+ * the URL: every quote below was taken from the docs shipped with pi **0.85.1** on 2026-09-12,
+ * and each was re-read in the npm package AND on the page above.
+ */
+const PI_SETTINGS_DOCS = 'https://pi.dev/docs/latest/settings';
+const PI_USAGE_DOCS = 'https://pi.dev/docs/latest/usage';
+/**
+ * pi core reads NO MCP config: MCP arrives through the third-party `pi-mcp-adapter` extension
+ * (#341/#343 shipped the cockpit's setup card for it), so the adapter's README is the vendor doc
+ * for these two files and pi's own docs never mention `mcp.json`. Verified against
+ * `pi-mcp-adapter@2.32.1` on 2026-09-12.
+ */
+const PI_MCP_DOCS = 'https://github.com/nicobailon/pi-mcp-adapter';
+/**
+ * The adapter's own ordering sentence and list, quoted rather than restated because the two pi MCP
+ * entries have to agree about it and a paraphrase in one of them would be the drift this table
+ * exists to prevent. It is also the sentence WP3's setup card (#343) built its “yours wins” claim
+ * on, so the two surfaces now quote one string.
+ */
+const PI_MCP_PRECEDENCE = '“Precedence is (later entries win): 1. ~/.config/mcp/mcp.json 2. ~/.agents/mcp.json 3. ~/.agents/mcp/mcp.json 4. <Pi agent dir>/mcp.json 5. .mcp.json 6. .pi/mcp.json”.';
 /**
  * The table. Order is presentation order: per runner, then user → project →
  * local so each scope ladder reads top (broad) to bottom (specific).
@@ -198,6 +227,84 @@ export const CONFIG_FILES = [
         precedence: 'Global rules. First match wins across scopes: if a project AGENTS.md exists, this global file is not read at all.',
         docsUrl: OPENCODE_RULES_DOCS,
     },
+    // ---- pi (#330 WP4) ----
+    // Two files pi itself reads (settings, context) and two the `pi-mcp-adapter` extension reads.
+    // Nothing else in `~/.pi/agent` is listed: `auth.json` and `models.json` both hold credentials
+    // (file header), and `models-store.json`, `mcp-cache.json`, `trust.json` and `sessions/` are
+    // pi's own runtime state rather than config a person edits.
+    //
+    // No pi entry carries `modelKey`/`modelPriority`, so `readNativeSettingsFiles('pi', …)` still
+    // finds nothing and `piModelSettingsStrategy` still reports "no native default". That is
+    // deliberate and is NOT an oversight to fix by adding the key: pi's model ids are
+    // `provider/model` composites (`core/pi-model-catalog.ts`, and `pi --model` is handed one),
+    // while its settings split the halves across `defaultProvider` and `defaultModel`, so
+    // `modelKey: 'defaultModel'` alone would report a bare half that `pi --model` does not name.
+    // And `.pi/settings.json` only applies in a folder pi has TRUSTED, a decision recorded in
+    // `~/.pi/agent/trust.json` that xezar does not read, so a project-scope model default would be
+    // a claim xezar cannot check. Wiring pi's native default is its own change: compose the two
+    // halves the way `model-settings/codex.ts` already does, and settle the trust question first.
+    {
+        id: 'pi.user.settings',
+        runners: ['pi'],
+        kind: 'settings',
+        scope: 'user',
+        resolve: (_repo, home) => join(home.pi, 'settings.json'),
+        label: '~/.pi/agent/settings.json',
+        format: 'json',
+        tracked: 'outside-repo',
+        precedence: 'Global (all projects). “Pi uses JSON settings files with project settings overriding global settings.” A project’s .pi/settings.json overrides this, but only in a folder pi has trusted; defaultProjectTrust and httpProxy are marked “Global setting only” and cannot be overridden at project scope.',
+        docsUrl: PI_SETTINGS_DOCS,
+    },
+    {
+        id: 'pi.project.settings',
+        runners: ['pi'],
+        kind: 'settings',
+        scope: 'project',
+        resolve: (repo) => join(repo, '.pi', 'settings.json'),
+        label: '.pi/settings.json',
+        format: 'json',
+        tracked: 'tracked',
+        precedence: 'Project (current directory), overriding the global file key by key. Read ONLY in a folder pi has trusted, and trust grants more than reading: “Trusting a project allows pi to load .pi/settings.json and .pi resources, install missing project packages, and execute project extensions.” Non-interactive runs (-p, --mode json, --mode rpc) never prompt, but they are not a blanket refusal: “Without an applicable saved trust decision, they use defaultProjectTrust from global settings: ask (default) and never ignore those project resources, while always trusts them.” So this file DOES apply in such a run when a saved decision in ~/.pi/agent/trust.json covers the folder or a parent, when defaultProjectTrust is “always”, or when the run passes --approve/-a (“Pass --approve/-a or --no-approve/-na to override project trust for one run.”). Runs read the committed copy.',
+        docsUrl: PI_SETTINGS_DOCS,
+    },
+    {
+        id: 'pi.user.mcp',
+        runners: ['pi'],
+        kind: 'mcp',
+        scope: 'user',
+        resolve: (_repo, home) => join(home.pi, 'mcp.json'),
+        label: '~/.pi/agent/mcp.json',
+        format: 'json',
+        tracked: 'outside-repo',
+        holdsMcp: true,
+        precedence: `Pi global override — 4th of six sources, so both project files beat it. ${PI_MCP_PRECEDENCE} Read by the pi-mcp-adapter extension, not by pi itself: with the extension not installed pi reads no MCP config at all.`,
+        docsUrl: PI_MCP_DOCS,
+    },
+    {
+        id: 'pi.project.mcp',
+        runners: ['pi'],
+        kind: 'mcp',
+        scope: 'project',
+        resolve: (repo) => join(repo, '.pi', 'mcp.json'),
+        label: '.pi/mcp.json',
+        format: 'json',
+        tracked: 'tracked',
+        holdsMcp: true,
+        precedence: `Pi project override — the HIGHEST of the six sources. ${PI_MCP_PRECEDENCE} Read by the pi-mcp-adapter extension, not by pi itself. Runs read the committed copy.`,
+        docsUrl: PI_MCP_DOCS,
+    },
+    {
+        id: 'pi.user.memory',
+        runners: ['pi'],
+        kind: 'memory',
+        scope: 'user',
+        resolve: (_repo, home) => join(home.pi, 'AGENTS.md'),
+        label: '~/.pi/agent/AGENTS.md',
+        format: 'markdown',
+        tracked: 'outside-repo',
+        precedence: 'Global instructions, loaded first and not replaced by a project file. pi’s docs give the sources as a list, so they are quoted as one — “Pi loads AGENTS.md or CLAUDE.md at startup from:” (1) “~/.pi/agent/AGENTS.md for global instructions”, (2) “parent directories, walking up from the current working directory”, (3) “the current directory”. Two qualifiers from the same page: a per-directory override — “If a directory contains AGENTS.override.md, Pi loads it instead of AGENTS.md or CLAUDE.md from that directory. Context files from other directories still layer normally.”, which is why a project’s override does not displace THIS file (an AGENTS.override.md in pi’s own home would) — and an off switch, “Disable loading with --no-context-files or -nc”, which skips every source including this one. xezar catalogs no AGENTS.override.md at any scope. pi therefore also reads this repo’s AGENTS.md and CLAUDE.md; those entries stay listed under the vendors whose precedence rules they carry.',
+        docsUrl: PI_USAGE_DOCS,
+    },
     // ---- Shared: <repo>/AGENTS.md is read by BOTH Codex and OpenCode ----
     {
         id: 'project.agents',