@qodeca/xezar 0.13.0 → 0.14.0

package/dist/mcp/adapters/opencode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode.js","sourceRoot":"","sources":["../../../src/mcp/adapters/opencode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAsB,MAAM,wBAAwB,CAAC;AAI9G;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAEH,mGAAmG;AACnG,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC;QACE,IAAI,EAAE,CAAC;QACP,KAAK,EAAE,yBAAyB;QAChC,MAAM,EAAE,aAAa;QACrB,MAAM,EAAE,8FAA8F;KACvG;IACD,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,gEAAgE,EAAE;IAC/H;QACE,IAAI,EAAE,CAAC;QACP,KAAK,EAAE,gBAAgB;QACvB,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,4FAA4F;KACrG;CACO,CAAC;AAWX,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACvC,OAAO,CAAkB;IAElC,YAAY,IAAyB,EAAE,OAAe;QACpD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,OAAO,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACtD,CAAC;CACF;AA0CD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAsC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAEvH,uEAAuE;AACvE,MAAM,YAAY,GAAG,GAAG,CAAC;AAEzB,MAAM,OAAO,uBAAuB;IACzB,KAAK,CAAyB;IAC9B,MAAM,CAAe;IACrB,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,iGAAiG;IACxF,UAAU,GAAG,IAAI,GAAG,EAAgB,CAAC;IAC9C,kGAAkG;IACzF,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,2DAA2D;IAClD,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnD,YAAY,GAAG,KAAK,CAAC;IACrB,+EAA+E;IAC/E,UAAU,GAAG,KAAK,CAAC;IACnB,QAAQ,CAA8B;IACtC,UAAU,CAAqB;IAC/B,KAAK,CAA4B;IACjC,UAAU,CAA8B;IACxC,SAAS,GAAG,CAAC,CAAC;IACL,OAAO,GAA4C,EAAE,CAAC;IACtD,QAAQ,GAAG,IAAI,GAAG,EAAc,CAAC;IAE1C,YAAY,IAA4B;QACtC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,QAAQ,GAAG,IAAI,uBAAuB,CACzC,WAAW,EACX,wLAAwL,CACzL,CAAC,OAAO,CAAC;QACZ,CAAC;IACH,CAAC;IAED,yGAAyG;IACzG,MAAM;QACJ,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc;YACjD,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YACnC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI;SAC3D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAuB,EAAE,MAAmB;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACrC,IAAI,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO;QAEjE,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC1C,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACxC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS;gBAAE,OAAO;QACnE,CAAC;QACD,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAgB;YAC1B,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YACtB,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,IAAI;SACvC,CAAC;QACF,MAAM,IAAI,GAAG;YACX,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACtE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe;YAClC,iGAAiG;YACjG,KAAK,EAAE,qBAAqB;YAC5B,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC;SAC7F,CAAC;QACF,0FAA0F;QAC1F,8FAA8F;QAC9F,oFAAoF;QACpF,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC5H,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QACxB,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACzC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI;gBAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,2BAA2B,MAAM,CAAC,SAAS,iEAAiE,CAAC,CAAC;QAC7K,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,+EAA+E;YAC/E,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,+GAA+G,CAAC,CAAC;QACvJ,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+CAA+C,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IAChF,CAAC;IAED,0FAA0F;IAC1F,KAAK,CAAC,SAAS,CAAC,MAAmB;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACrC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,mEAAmE;IACnE,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,cAAc;QACZ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QACjC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,IAAI,KAAK,WAAW;YAAE,MAAM,IAAI,uBAAuB,CAAC,WAAW,EAAE,IAAI,CAAC,QAAS,CAAC,OAAO,CAAC,CAAC;QAC3H,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,IAAyB,EAAE,OAAe;QAC/C,MAAM,KAAK,GAAG,IAAI,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iGAAiG;IACjG,MAAM,CAAC,MAAgC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACzD,OAAO,MAAM,CAAC,MAAM,CAClB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CACzH,CAAC;IACJ,CAAC;IAED,SAAS,CAAC,GAAW;QACnB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/B,wFAAwF;QACxF,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,yBAAyB;YAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC,CAAC;IACrH,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,aAAa,CAAC,MAAsB,EAAE,MAAmB;QAC7D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACxG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACzC,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,2BAA2B,MAAM,CAAC,SAAS,wDAAwD,CAAC,CAAC;QAC9I,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,MAAM,yBAAyB,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAwC,CAAC;QACjG,MAAM,SAAS,GAAG,OAAO,OAAO,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACzF,IAAI,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,KAAK,EAAE,CAAC;YACrF,MAAM,IAAI,CAAC,MAAM,CACf,eAAe,EACf,oBAAoB,MAAM,CAAC,SAAS,+FAA+F,CACpI,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,WAAW;YAAE,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;IACrF,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,MAAsB,EAAE,MAAmB;QAC5D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,kBAAkB,qBAAqB,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/I,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,MAAM,0BAA0B,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAY,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACjG,MAAM,IAAI,GAAG,IAAI,GAAG,EAAyB,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,OAAO,IAAI,QAA8F,EAAE,CAAC;YACrH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YAC1B,IAAI,IAAI,EAAE,IAAI,KAAK,WAAW,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAChG,IAAI,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,SAAS;YACpG,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAA6C,EAAE,CAAC;gBACzE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAC/C,IAAI,CAAC,MAAM;oBAAE,SAAS;gBACtB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI;oBAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;YACtC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC3B,CAAC;IAED,2FAA2F;IAC3F,KAAK,CAAC,cAAc,CAAC,MAAsB,EAAE,MAAmB;QAC9D,SAAS,CAAC;YACR,oGAAoG;YACpG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC5B,IAAI,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAAE,OAAO;YAChD,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC9H,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAsB,EAAE,MAAmB;QACxD,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACzD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,CAAC;YAC7C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC;YACzC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC;SACxC,CAAC,CAAC;QACH,MAAM,GAAG,GAAI,MAAyD,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3F,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QAC3D,MAAM,UAAU,GAAG,CAAC,IAAa,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAA4B,EAAE,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9I,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAsB,EAAE,IAAY,EAAE,MAAmB;QACnE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,MAAM,QAAQ,IAAI,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAsB,EAAE,MAAsB,EAAE,IAAY,EAAE,MAAmB,EAAE,IAAc;QAC3G,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACtF,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;gBAC5B,MAAM;gBACN,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACtD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;aAC/G,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,GAAG,CAAC;YAC7D,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,0BAA0B,MAAM,CAAC,OAAO,8EAA8E,CAAC,CAAC;QAClK,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CAAC,MAAmB;QACjC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QACxB,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACpE,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACzB,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACzC,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,MAAM,uBAAuB,CAAC,CAAC;YAC/E,CAAC;YACD,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,KAAK,CAAC,CAAC;QACnD,CAAC,CAAC,EAAE,CAAC;QACL,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;QACpB,MAAM,MAAM,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YAC9C,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;gBAC1B,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;gBACvB,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAA+C,EAAE,KAAsB;QACrF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI;oBAAE,MAAM;gBAChB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClD,IAAI,GAAW,CAAC;gBAChB,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;oBACnC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;oBAC/B,MAAM,IAAI,GAAG,KAAK;yBACf,KAAK,CAAC,IAAI,CAAC;yBACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;yBAC1C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;yBACxC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACd,IAAI,IAAI;wBAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;QAClE,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;gBAC9B,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;gBACvB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;YAC9B,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ;gBAAE,IAAI,EAAE,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,IAAY;QACnB,IAAI,KAAoB,CAAC;QACzB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC5C,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,YAAY;YAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC7D,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,iGAAiG;IACjG,YAAY,CAAC,KAAoB;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QACjC,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAgG,CAAC;YACpH,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC/C,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;gBAAE,OAAO;YAClG,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YACnD,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO;YAChC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YACxC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,KAAK,CAAC,IAA+E,CAAC;YACnG,IAAI,IAAI,EAAE,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;gBAAE,OAAO;YACnH,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACpD,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO;YAChC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,UAAkB;QACzB,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,UAAU,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,kFAAkF;QACpF,CAAC;IACH,CAAC;IAED,qGAAqG;IACrG,UAAU,CAAC,IAAY,EAAE,KAAwC,EAAE,MAAmB;QACpF,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,KAAK,GAAG,GAAS,EAAE;gBACvB,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAClD,IAAI,EAAE,CAAC;oBACP,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;oBAC9C,OAAO;gBACT,CAAC;gBACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBACzF,IAAI,EAAE,CAAC;oBACP,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC;YACF,MAAM,IAAI,GAAG,GAAS,EAAE;gBACtB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC7C,CAAC,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACzB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,KAAK,EAAE,CAAC;QACV,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,iFAAiF;AACjF,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IACnD,cAAc;IACd,gBAAgB;IAChB,oBAAoB;IACpB,kBAAkB;IAClB,mBAAmB;CACpB,CAAC,CAAC;AAEH,SAAS,YAAY,CAAC,KAAoB;IACxC,OAAO,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC;AACrC,CAAC;AAED,SAAS,MAAM,CAAC,GAA0C;IACxD,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,SAAS,CAAC,MAAmB;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,YAAY,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,MAAM,MAAM,GAAG,KAAyC,CAAC;IACzD,IAAI,MAAM,EAAE,MAAM,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IACpI,MAAM,KAAK,GAAG,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;AAClG,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACpC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3D,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,QAAuB,EAAE,IAA8B;IACpF,MAAM,KAAK,GAAG;QACZ,4BAA4B;QAC5B,0BAA0B,QAAQ,CAAC,SAAS,2GAA2G;KACxJ,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,uBAAuB,IAAI,CAAC,MAAM,kBAAkB,CAAC,CAAC;QACjE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,YAAY,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1I,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CACR,QAAQ,QAAQ,CAAC,QAAQ,CAAC,OAAO,qBAAqB,QAAQ,CAAC,QAAQ,CAAC,SAAS,IAAI,MAAM,YAAY,QAAQ,CAAC,QAAQ,CAAC,SAAS,IAAI,CACvI,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,oHAAoH,CAAC,CAAC;IACjI,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/mcp/adapters/pi-link.d.ts

@@ -0,0 +1,102 @@
+import { type Socket } from 'node:net';
+import { z } from 'zod';
+import type { PiRpcLink } from './pi.ts';
+/**
+ * The thing that was missing (#330 WP2, QA round two): something that PRODUCES a `PiRpcLink`.
+ *
+ * `adapters/pi.ts` was complete, tested and evidenced, and never constructed in production, because
+ * `piReactionTarget` builds an adapter only from a live link and nothing in the repository made one.
+ * This module is that producer, and `leader-delivery.ts` is its caller.
+ *
+ * ## Why a socket the EXTENSION opens, rather than one xezar opens
+ *
+ * pi's RPC is stdio-only and spawn-only — no port, no socket, no attach (`pi --help` and
+ * `docs/rpc.md` on 0.85.1, re-confirmed twice) — and xezar starts no agent process for a leader
+ * (owner decision on #311). So the only way into a pi the PERSON runs is from inside it: a pi
+ * extension, which may call `pi.sendUserMessage(…)` — documented "Always triggers a turn" — and
+ * which runs unsandboxed and may therefore open a socket (`docs/security.md` § No Built-in Sandbox;
+ * the already-required `pi-mcp-adapter` opens one today).
+ *
+ * Given that, the extension is the side that has an address to offer, so IT listens and xezar dials.
+ * Three things follow, all of them deliberate:
+ *
+ *  - **xezar opens no new listener.** § Zero config asks that a feature widening exposure be opt-in;
+ *    dialling a socket that only exists because the person installed and ran the extension is
+ *    demand-driven by construction. Nothing listens on xezar's side, so there is nothing to secure.
+ *  - **It is the same shape as OpenCode.** `attach` names a session the person runs. For OpenCode
+ *    that address is a URL they paste; for pi it is a descriptor the extension writes into the
+ *    project's own data directory, so the person pastes nothing (§ Zero config: discover it).
+ *  - **Absent means exactly today's behaviour.** No extension, no descriptor, no link — and
+ *    `piReactionTarget` answers with the recoverable `pi-not-addressable` blocker, unchanged. This
+ *    module can only ever ADD a working path; it can never take the old one away.
+ *
+ * ## Trust
+ *
+ * The descriptor is read ONLY from the project's own `dataDir`, which is xezar's own state directory
+ * (`<repo>/.local/xezar`, gitignored, written by this service). A socket path is taken from it and
+ * dialled; nothing else in the file reaches a decision. That is the same trust the MCP connection
+ * file already has, in the same directory, and it is why the path is never accepted from a request.
+ *
+ * Keeping other local accounts OFF that socket is the extension's job, not this file's, and an
+ * earlier version of this comment claimed it wrongly: it said the socket "lives in a directory only
+ * this user can enter", which on Linux with no `TMPDIR` was `/tmp` at mode `1777` and was false (QA
+ * on #358). The extension now creates its own `0700` directory and puts the socket inside — the
+ * DIRECTORY is the portable guard, because Linux enforces permissions on a Unix socket and macOS and
+ * the BSDs do not. See `scripts/pi-leader-extension.ts` § `makePrivateSocketDir`.
+ */
+/** Additive changes keep version 1 (N-08); an incompatible one bumps it. */
+export declare const PI_LEADER_SCHEMA_VERSION = 1;
+export declare const PI_LEADER_FILE = "pi-leader.json";
+/**
+ * What the extension writes once its socket really listens, so the file never names nothing — the
+ * same ordering rule D-04 gives the MCP connection file. No secret: which socket the peer reached is
+ * the binding (D-01 § 6), and the socket lives in a directory only this user can enter.
+ */
+export declare const piLeaderDescriptorSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    session: z.ZodObject<{
+        pid: z.ZodNumber;
+        startedAt: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    endpoint: z.ZodObject<{
+        socket: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type PiLeaderDescriptor = z.infer<typeof piLeaderDescriptorSchema>;
+export declare function piLeaderPath(dataDir: string): string;
+/**
+ * Read the descriptor, or say why there is none. Never throws: every failure is a reason a person
+ * can act on, because this runs on the `attach` path and the answer is shown to them.
+ */
+export declare function readPiLeaderDescriptor(dataDir: string): {
+    ok: true;
+    descriptor: PiLeaderDescriptor;
+} | {
+    ok: false;
+    reason: string;
+};
+export interface PiLeaderLink extends PiRpcLink {
+    /** Hang up. The pi process and its session belong to the person; only this socket is dropped. */
+    close(): void;
+}
+export interface ConnectPiLeaderOptions {
+    /** How long one command may wait for its `response` before it is treated as lost. */
+    readonly requestTimeoutMs?: number;
+    readonly warn?: (message: string) => void;
+}
+/**
+ * Dial the extension's socket and present it as a `PiRpcLink`.
+ *
+ * The wire is pi's OWN RPC vocabulary — `{id, type:'prompt'|'steer'|'get_state'|'get_messages'}` out,
+ * `{type:'response', id, success, data}` and pi's event frames back — so the adapter above is
+ * unchanged by this file existing, and a future transport can replace it without touching either.
+ * Framing follows `docs/rpc.md`: split on `\n` only, tolerate a trailing `\r`, and never a generic
+ * line reader (Node's `readline` also splits on U+2028/U+2029, which are legal inside JSON strings).
+ */
+export declare function connectPiLeaderLink(descriptor: PiLeaderDescriptor, opts?: ConnectPiLeaderOptions): PiLeaderLink;
+/**
+ * The half that has nothing to do with `node:net`, so a test can drive it with a pair of pipes and
+ * still exercise the real framing, the real correlation and the real close semantics.
+ */
+export declare function wrapPiLeaderSocket(socket: Socket, opts?: ConnectPiLeaderOptions): PiLeaderLink;

package/dist/mcp/adapters/pi-link.js

@@ -0,0 +1,235 @@
+import { createConnection } from 'node:net';
+import { readFileSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+import { z } from 'zod';
+/**
+ * The thing that was missing (#330 WP2, QA round two): something that PRODUCES a `PiRpcLink`.
+ *
+ * `adapters/pi.ts` was complete, tested and evidenced, and never constructed in production, because
+ * `piReactionTarget` builds an adapter only from a live link and nothing in the repository made one.
+ * This module is that producer, and `leader-delivery.ts` is its caller.
+ *
+ * ## Why a socket the EXTENSION opens, rather than one xezar opens
+ *
+ * pi's RPC is stdio-only and spawn-only — no port, no socket, no attach (`pi --help` and
+ * `docs/rpc.md` on 0.85.1, re-confirmed twice) — and xezar starts no agent process for a leader
+ * (owner decision on #311). So the only way into a pi the PERSON runs is from inside it: a pi
+ * extension, which may call `pi.sendUserMessage(…)` — documented "Always triggers a turn" — and
+ * which runs unsandboxed and may therefore open a socket (`docs/security.md` § No Built-in Sandbox;
+ * the already-required `pi-mcp-adapter` opens one today).
+ *
+ * Given that, the extension is the side that has an address to offer, so IT listens and xezar dials.
+ * Three things follow, all of them deliberate:
+ *
+ *  - **xezar opens no new listener.** § Zero config asks that a feature widening exposure be opt-in;
+ *    dialling a socket that only exists because the person installed and ran the extension is
+ *    demand-driven by construction. Nothing listens on xezar's side, so there is nothing to secure.
+ *  - **It is the same shape as OpenCode.** `attach` names a session the person runs. For OpenCode
+ *    that address is a URL they paste; for pi it is a descriptor the extension writes into the
+ *    project's own data directory, so the person pastes nothing (§ Zero config: discover it).
+ *  - **Absent means exactly today's behaviour.** No extension, no descriptor, no link — and
+ *    `piReactionTarget` answers with the recoverable `pi-not-addressable` blocker, unchanged. This
+ *    module can only ever ADD a working path; it can never take the old one away.
+ *
+ * ## Trust
+ *
+ * The descriptor is read ONLY from the project's own `dataDir`, which is xezar's own state directory
+ * (`<repo>/.local/xezar`, gitignored, written by this service). A socket path is taken from it and
+ * dialled; nothing else in the file reaches a decision. That is the same trust the MCP connection
+ * file already has, in the same directory, and it is why the path is never accepted from a request.
+ *
+ * Keeping other local accounts OFF that socket is the extension's job, not this file's, and an
+ * earlier version of this comment claimed it wrongly: it said the socket "lives in a directory only
+ * this user can enter", which on Linux with no `TMPDIR` was `/tmp` at mode `1777` and was false (QA
+ * on #358). The extension now creates its own `0700` directory and puts the socket inside — the
+ * DIRECTORY is the portable guard, because Linux enforces permissions on a Unix socket and macOS and
+ * the BSDs do not. See `scripts/pi-leader-extension.ts` § `makePrivateSocketDir`.
+ */
+/** Additive changes keep version 1 (N-08); an incompatible one bumps it. */
+export const PI_LEADER_SCHEMA_VERSION = 1;
+export const PI_LEADER_FILE = 'pi-leader.json';
+/**
+ * What the extension writes once its socket really listens, so the file never names nothing — the
+ * same ordering rule D-04 gives the MCP connection file. No secret: which socket the peer reached is
+ * the binding (D-01 § 6), and the socket lives in a directory only this user can enter.
+ */
+export const piLeaderDescriptorSchema = z.object({
+    schemaVersion: z.literal(PI_LEADER_SCHEMA_VERSION),
+    session: z.object({
+        pid: z.number().int().positive(),
+        startedAt: z.string(),
+        /** pi's own session id, for the cockpit to show. Never the identity anything trusts. */
+        sessionId: z.string().max(200).optional(),
+    }),
+    endpoint: z.object({ socket: z.string().min(1).max(1024) }),
+});
+export function piLeaderPath(dataDir) {
+    return join(dataDir, PI_LEADER_FILE);
+}
+/**
+ * Read the descriptor, or say why there is none. Never throws: every failure is a reason a person
+ * can act on, because this runs on the `attach` path and the answer is shown to them.
+ */
+export function readPiLeaderDescriptor(dataDir) {
+    let raw;
+    try {
+        raw = readFileSync(piLeaderPath(dataDir), 'utf8');
+    }
+    catch {
+        return { ok: false, reason: 'no pi leader has announced itself to this project' };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return { ok: false, reason: `${PI_LEADER_FILE} is not valid JSON` };
+    }
+    const result = piLeaderDescriptorSchema.safeParse(parsed);
+    if (!result.success)
+        return { ok: false, reason: `${PI_LEADER_FILE} is not a descriptor this xezar understands` };
+    // A descriptor whose socket is gone is a pi that exited without cleaning up. Say that, rather than
+    // letting the dial fail with an errno the person cannot read.
+    try {
+        if (!statSync(result.data.endpoint.socket).isSocket()) {
+            return { ok: false, reason: 'the pi leader socket named in ' + PI_LEADER_FILE + ' is not a socket' };
+        }
+    }
+    catch {
+        return { ok: false, reason: 'the pi leader that wrote ' + PI_LEADER_FILE + ' is gone (its socket no longer exists)' };
+    }
+    return { ok: true, descriptor: result.data };
+}
+/** One line is one JSON value, LF-delimited — pi's own RPC framing (`docs/rpc.md` § Framing). */
+const MAX_LINE_BYTES = 1_000_000;
+const DEFAULT_REQUEST_TIMEOUT_MS = 30_000;
+/**
+ * Dial the extension's socket and present it as a `PiRpcLink`.
+ *
+ * The wire is pi's OWN RPC vocabulary — `{id, type:'prompt'|'steer'|'get_state'|'get_messages'}` out,
+ * `{type:'response', id, success, data}` and pi's event frames back — so the adapter above is
+ * unchanged by this file existing, and a future transport can replace it without touching either.
+ * Framing follows `docs/rpc.md`: split on `\n` only, tolerate a trailing `\r`, and never a generic
+ * line reader (Node's `readline` also splits on U+2028/U+2029, which are legal inside JSON strings).
+ */
+export function connectPiLeaderLink(descriptor, opts = {}) {
+    const socket = createConnection({ path: descriptor.endpoint.socket });
+    socket.setNoDelay(true);
+    socket.setEncoding('utf8');
+    return wrapPiLeaderSocket(socket, opts);
+}
+/**
+ * The half that has nothing to do with `node:net`, so a test can drive it with a pair of pipes and
+ * still exercise the real framing, the real correlation and the real close semantics.
+ */
+export function wrapPiLeaderSocket(socket, opts = {}) {
+    const timeoutMs = opts.requestTimeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;
+    const listeners = new Set();
+    const pending = new Map();
+    let closed = false;
+    let nextId = 0;
+    let buffer = '';
+    const failAll = (err) => {
+        for (const [, entry] of pending) {
+            clearTimeout(entry.timer);
+            entry.reject(err);
+        }
+        pending.clear();
+    };
+    const shutdown = (err) => {
+        if (closed)
+            return;
+        closed = true;
+        failAll(err);
+        listeners.clear();
+        socket.destroy();
+    };
+    socket.on('data', (chunk) => {
+        buffer += chunk;
+        // A peer that never sends a newline must not grow this without bound.
+        if (buffer.length > MAX_LINE_BYTES) {
+            shutdown(new Error('the pi leader sent a line longer than the protocol allows'));
+            return;
+        }
+        let nl;
+        while ((nl = buffer.indexOf('\n')) >= 0) {
+            const line = buffer.slice(0, nl).replace(/\r$/, '');
+            buffer = buffer.slice(nl + 1);
+            if (!line.trim())
+                continue;
+            let value;
+            try {
+                value = JSON.parse(line);
+            }
+            catch {
+                // One unreadable line is not a reason to drop a working leader; pi's own clients skip it.
+                opts.warn?.('[xez] a line from the pi leader was not JSON and was ignored');
+                continue;
+            }
+            if (typeof value !== 'object' || value === null)
+                continue;
+            const message = value;
+            const id = typeof message.id === 'string' ? message.id : undefined;
+            if (message.type === 'response' && id !== undefined) {
+                const entry = pending.get(id);
+                if (entry) {
+                    pending.delete(id);
+                    clearTimeout(entry.timer);
+                    entry.resolve({
+                        success: message.success === true,
+                        ...(isRecord(message.data) ? { data: message.data } : {}),
+                        ...(message.error === undefined ? {} : { error: message.error }),
+                    });
+                }
+                continue;
+            }
+            // Everything else is one of pi's events, passed through untouched: this file knows the
+            // framing, and `adapters/pi.ts` alone knows what the events MEAN.
+            for (const listener of [...listeners])
+                listener(message);
+        }
+    });
+    socket.on('error', (err) => shutdown(err));
+    socket.on('close', () => shutdown(new Error('the pi leader closed its connection to xezar')));
+    return {
+        get closed() {
+            return closed || socket.destroyed;
+        },
+        subscribe(listener) {
+            listeners.add(listener);
+            return () => listeners.delete(listener);
+        },
+        async request(command) {
+            if (closed || socket.destroyed)
+                throw new Error('the pi leader link is closed');
+            const id = `xez-${++nextId}`;
+            return await new Promise((resolve, reject) => {
+                const timer = setTimeout(() => {
+                    pending.delete(id);
+                    // Deliberately a REJECT, not a failed response: "we do not know whether pi saw it" and
+                    // "pi refused it" are different answers, and the adapter treats only the first as
+                    // uncertain and re-reads the conversation before it decides (`#uncertain`).
+                    reject(new Error('the pi leader did not answer in time'));
+                }, timeoutMs);
+                // `unref` so a hung leader can never hold the process open at shutdown.
+                timer.unref?.();
+                pending.set(id, { resolve, reject, timer });
+                try {
+                    socket.write(`${JSON.stringify({ ...command, id })}\n`);
+                }
+                catch (err) {
+                    pending.delete(id);
+                    clearTimeout(timer);
+                    reject(err instanceof Error ? err : new Error(String(err)));
+                }
+            });
+        },
+        close() {
+            shutdown(new Error('xezar closed the pi leader link'));
+        },
+    };
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=pi-link.js.map

package/dist/mcp/adapters/pi-link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi-link.js","sourceRoot":"","sources":["../../../src/mcp/adapters/pi-link.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAe,MAAM,UAAU,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE1C,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAE/C;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;IAClD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,wFAAwF;QACxF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KAC1C,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;CAC5D,CAAC,CAAC;AAGH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,OAAO,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mDAAmD,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,cAAc,oBAAoB,EAAE,CAAC;IACtE,CAAC;IACD,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,cAAc,6CAA6C,EAAE,CAAC;IAClH,mGAAmG;IACnG,8DAA8D;IAC9D,IAAI,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;YACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,GAAG,cAAc,GAAG,kBAAkB,EAAE,CAAC;QACvG,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,GAAG,cAAc,GAAG,wCAAwC,EAAE,CAAC;IACxH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAC/C,CAAC;AAED,iGAAiG;AACjG,MAAM,cAAc,GAAG,SAAS,CAAC;AAajC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAE1C;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAA8B,EAAE,IAAI,GAA2B,EAAE;IACnG,MAAM,MAAM,GAAW,gBAAgB,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9E,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACxB,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3B,OAAO,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,IAAI,GAA2B,EAAE;IAClF,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;IACtE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAI,GAAG,EAA4G,CAAC;IACpI,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,MAAM,OAAO,GAAG,CAAC,GAAU,EAAQ,EAAE;QACnC,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;YAChC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,GAAU,EAAQ,EAAE;QACpC,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,GAAG,IAAI,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,CAAC;QACb,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC,CAAC;IAEF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QAClC,MAAM,IAAI,KAAK,CAAC;QAChB,sEAAsE;QACtE,IAAI,MAAM,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC,CAAC;YACjF,OAAO;QACT,CAAC;QACD,IAAI,EAAU,CAAC;QACf,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACpD,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAS;YAC3B,IAAI,KAAc,CAAC;YACnB,IAAI,CAAC;gBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,0FAA0F;gBAC1F,IAAI,CAAC,IAAI,EAAE,CAAC,8DAA8D,CAAC,CAAC;gBAC5E,SAAS;YACX,CAAC;YACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;gBAAE,SAAS;YAC1D,MAAM,OAAO,GAAG,KAAqB,CAAC;YACtC,MAAM,EAAE,GAAG,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACnE,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;gBACpD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC9B,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACnB,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAC1B,KAAK,CAAC,OAAO,CAAC;wBACZ,OAAO,EAAE,OAAO,CAAC,OAAO,KAAK,IAAI;wBACjC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACzD,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;qBACjE,CAAC,CAAC;gBACL,CAAC;gBACD,SAAS;YACX,CAAC;YACD,uFAAuF;YACvF,kEAAkE;YAClE,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,SAAS,CAAC;gBAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAClD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC,CAAC,CAAC;IAE9F,OAAO;QACL,IAAI,MAAM;YACR,OAAO,MAAM,IAAI,MAAM,CAAC,SAAS,CAAC;QACpC,CAAC;QACD,SAAS,CAAC,QAAQ;YAChB,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAChF,MAAM,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC;YAC7B,OAAO,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC5B,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACnB,uFAAuF;oBACvF,kFAAkF;oBAClF,4EAA4E;oBAC5E,MAAM,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC;gBAC5D,CAAC,EAAE,SAAS,CAAC,CAAC;gBACd,wEAAwE;gBACxE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC5C,IAAI,CAAC;oBACH,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC1D,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACnB,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK;YACH,QAAQ,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;QACzD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/mcp/adapters/pi.d.ts

@@ -0,0 +1,188 @@
+import { type McpJournalRow } from '../../contract/index.js';
+import type { EventDispatch, ReactionAdapter } from '../event-controller.ts';
+/**
+ * The pi reaction adapter (#330 WP2, Phase 6 of #67): the client-specific half the non-model event
+ * controller (#107, `event-controller.ts`) hands significant events to, for a leader running in pi.
+ * The runtime evidence is `docs/features/mcp-server/mcp-adapter-evidence-pi.md` (second half); every
+ * behavioural claim below names the scenario that measured it against pi 0.85.1.
+ *
+ * A CONTROL ADAPTER, NOT A RUNNER. It implements `ReactionAdapter` and adds no backend: it starts no
+ * process, owns no session, writes no file and reads no environment variable. `core/pi-runner.ts` is
+ * the implementation anchor for speaking pi's RPC (same protocol, `docs/rpc.md`); it is not evidence
+ * that this event flow works — the evidence record is. No pi type leaves this file: the controller
+ * sees `deliver` and `heartbeat`, and the rest of xezar sees `PiReactionTarget`.
+ *
+ * THE DELIVERY HIERARCHY (requirements § 12), in order and not reorderable:
+ *  1. Native mechanism — NOT ADOPTED. The bridge advertises tools only and sends no notification,
+ *     and against a stub that did, `notifications/resources/updated` and `notifications/message`
+ *     started no pi turn (#330 run A; D-05 § 4 for the other three). pi sends no `resources/subscribe`.
+ *  2. The official programmatic session interface — ADOPTED: pi's RPC `prompt` when pi is idle, and
+ *     `steer` when it is busy. Executed on this host (scenario `rpc-probe`): an idle `prompt` put the
+ *     text into the conversation and the very next model request carried it; a plain `prompt` sent
+ *     during a turn was REFUSED (`Agent is already processing. Specify streamingBehavior …`); the
+ *     same text sent as `steer` was queued, delivered when the running turn's tool calls finished,
+ *     and carried by the following model request. The running turn was not cut short.
+ *  3. Terminal text input — REFUSED. Tier 2 works, and nothing here simulates a keystroke.
+ *
+ * WHOSE PI PROCESS. Only one whose RPC the CALLER already owns, handed in as `PiRpcLink`. This
+ * adapter never spawns pi, because xezar starts no agent process for a leader (owner decision on
+ * #311), and it never opens a transport of its own.
+ *
+ * WHO CONSTRUCTS IT, AND FROM WHAT. `LeaderDelivery.#piTarget()`, on
+ * `{action:'attach', client:'pi'}`. It gets the link from `adapters/pi-link.ts`, which reads the
+ * descriptor xezar's pi leader extension writes into the project's data directory and dials the
+ * socket named there. pi's own RPC is stdio-only and spawn-only — no port, no socket, no attach
+ * (`pi --help`, `docs/rpc.md` on 0.85.1) — so the address cannot come from outside pi; it comes from
+ * INSIDE it, where `ExtensionAPI.sendUserMessage` ("Always triggers a turn") can be reached. Nothing
+ * xezar can send over MCP starts a pi turn, so that extension is the only route, and it is the one
+ * taken (`scripts/pi-leader-extension.ts`, evidence record § "A-19 for pi: CLOSED").
+ *
+ * WITH NO EXTENSION RUNNING there is no descriptor and no link, and `piReactionTarget()` answers with
+ * the recoverable `pi-not-addressable` blocker naming why — the same standing a Claude Code or Codex
+ * session in a terminal has (`leader-delivery.ts`): the rows stay in the journal and the leader reads
+ * them with `leader_events`. Push delivery to pi is opt-in, and absent is the pre-extension behaviour
+ * unchanged.
+ *
+ * DELIVERY IS NOT REACTION (F-20, D-05 § 6.6). `deliver` resolves once pi ANSWERED the `prompt` or
+ * `steer` with `success: true`: the client application has the rows. The reaction is reported
+ * separately through `onReaction`, and only when pi says so — the submission's own text appearing as
+ * a `user` message in the conversation (`message_start`/`message_end`). Measured: pi emits that
+ * message immediately before the model request that carries it, for an idle `prompt` and for a
+ * steered message alike, and never for one that is still sitting in the steering queue. It is
+ * therefore observed, never inferred from the `response`.
+ *
+ * SAFETY RULES, each measured against pi 0.85.1:
+ *  - Role instruction on EVERY submission. pi keeps no system prompt in its session file, so a
+ *    resumed session loses `--append-system-prompt` (evidence record, prompt persistence: FAIL). The
+ *    adapter does not start pi and cannot pass that flag, so it carries xezar's own role text in the
+ *    message it sends, every time. It is xezar's text, never read from a project file the leader can
+ *    edit (§ 12). Prompt text is still not enforcement.
+ *  - Never into a running turn as a plain `prompt`. pi refuses it outright, so the adapter sends
+ *    `steer` when pi is busy AND falls back to `steer` when a `prompt` is refused anyway. That
+ *    fallback covers only ONE direction of a stale `busy`, and an earlier version of this comment
+ *    claimed it covered both (QA on #358). The other direction — believed busy, really idle — is
+ *    TRANSPORT-DEPENDENT, and an earlier version of this comment stated the worse half as though it
+ *    were the only half (QA on #358, finding 2). Both halves, measured in one run against real pi
+ *    0.85.1 (`idle-steer-result.json`, M1/M2):
+ *      · Over the leader extension, WHICH IS THE ONLY TRANSPORT ANYTHING IN PRODUCTION USES — the
+ *        one `PiRpcLink` is built by `LeaderDelivery.#piTarget()` from `pi-link.ts`, which dials the
+ *        extension's socket — an idle `steer` REACHES THE MODEL AT ONCE: `success: true`, one model
+ *        request carrying the text, `pendingMessageCount` still 0. The extension turns `steer` into
+ *        `sendUserMessage(text, { deliverAs: 'steer' })`, and `deliverAs` only chooses how a message
+ *        enters a turn that is already RUNNING; with pi idle it starts one.
+ *      · Over pi's raw stdio RPC, which xezar never speaks (it starts no pi and has no other way in),
+ *        the same command is accepted and PARKED: zero model requests, `pendingMessageCount` 0 -> 1,
+ *        and the text waits for the person's next turn.
+ *    So parking is not a property of this feature, and the confirmation below is not what saves it
+ *    from one. The confirmation stays anyway, and is cheap: it is one `get_state` that makes the
+ *    adapter correct over a transport that parks, and `success` is acceptance and never hand-over on
+ *    any transport. A steer this adapter cannot confirm reached the model is never reported as handed
+ *    over, so the controller hands the row over again. See `#submit`.
+ *  - Never two turns for one row. Rows already submitted are skipped: from memory within this
+ *    adapter's life, and from pi's own conversation (`get_messages`, the marker this adapter writes
+ *    into its text) on the first delivery and after any attempt whose answer was lost — so a
+ *    restart, or a lost response, does not ask the model twice.
+ *  - Never a second leader. It speaks only to the link it was given, and creates nothing.
+ *
+ * AGENTS.md / #329: `PI_CODING_AGENT_DIR` relocates pi's home and its credentials. This module reads
+ * no environment variable and sets none, and imports neither `node:fs` nor `node:child_process` —
+ * the test file asserts all three.
+ */
+/** One line pi writes on its RPC stdout: a `response` to a command, or an event. */
+export interface PiRpcMessage {
+    readonly type?: unknown;
+    readonly [key: string]: unknown;
+}
+/** pi's answer to one command (`docs/rpc.md`): `success` is acceptance, not the turn's outcome. */
+export interface PiRpcResponse {
+    readonly success: boolean;
+    readonly data?: Record<string, unknown>;
+    readonly error?: unknown;
+}
+/**
+ * pi's RPC as this adapter uses it: a JSONL command in, pi's event stream out, over a process the
+ * CALLER owns. Deliberately transport-free — the adapter never learns whether the stdio behind it is
+ * a pipe, a socket or a test double, which is what keeps `node:child_process` out of this file.
+ */
+export interface PiRpcLink {
+    /** Send one command and resolve with pi's `response` frame for it. Rejects if it cannot be sent. */
+    request(command: Record<string, unknown>): Promise<PiRpcResponse>;
+    /** Every line pi writes. Returns the unsubscribe. */
+    subscribe(listener: (message: PiRpcMessage) => void): () => void;
+    readonly closed: boolean;
+}
+export type PiBlockerCode = 'pi-not-addressable' | 'pi-session-closed' | 'pi-refused' | 'pi-steer-parked';
+/** Why no event can reach pi right now. Always recoverable: nothing is lost while it holds. */
+export interface PiBlocker {
+    readonly code: PiBlockerCode;
+    readonly recoverable: true;
+    readonly message: string;
+    readonly fix: string;
+}
+export declare class PiDeliveryBlocked extends Error {
+    readonly blocker: PiBlocker;
+    constructor(code: PiBlockerCode, message: string, fix: string);
+}
+/** Where a project's leader events go in pi: a live RPC link, or a stated blocker. Never neither. */
+export type PiReactionTarget = {
+    readonly kind: 'rpc';
+    readonly adapter: PiReactionAdapter;
+} | {
+    readonly kind: 'blocked';
+    readonly blocker: PiBlocker;
+};
+export interface PiReactionAdapterOptions {
+    /** The pi RPC session this adapter speaks to. The caller owns it; this adapter never opens one. */
+    link: PiRpcLink;
+    /** The bound project. A dispatch for any other project is refused, never delivered. */
+    projectId: string;
+    /** xezar's role instruction, carried in every submission (§ 12: the leader cannot edit it). */
+    roleInstruction: string;
+    /** The reaction half of F-20: called once a model request really carried rows up to `journalSeq`. */
+    onReaction?: (journalSeq: number) => void;
+    /** The F-13 echo guard (D-05 § 6.3): true for an operation this leader has outstanding. */
+    isOwnOperation?: (operationId: string) => boolean;
+}
+/** What `status()` says: the route in use, or the blocker holding delivery. For the cockpit. */
+export interface PiAdapterStatus {
+    readonly route: 'rpc-prompt' | 'blocked';
+    readonly blocker?: PiBlocker;
+    readonly submittedRows: number;
+    readonly turnsAwaited: number;
+}
+export declare class PiReactionAdapter implements ReactionAdapter {
+    #private;
+    readonly projectId: string;
+    constructor(opts: PiReactionAdapterOptions);
+    status(): PiAdapterStatus;
+    deliver(dispatch: EventDispatch, signal: AbortSignal): Promise<{
+        handedThrough: number | null;
+    }>;
+    /** Non-model liveness (N-06): pi's own session metadata. Starts no turn and reaches no model. */
+    heartbeat(signal: AbortSignal): Promise<void>;
+    /** Stop listening. The pi process and its session belong to whoever opened the link. */
+    close(): void;
+}
+/**
+ * Where a project's leader events go in pi. A live `link`: delivered through it. Absent or closed: a
+ * recoverable blocker the cockpit can show, naming WHY there is no link, because since `pi-link.ts`
+ * exists that is an answerable question — the leader extension is not running, or the pi that wrote
+ * the descriptor is gone — rather than the flat "pi has no address" it used to be. The rows stay in
+ * the journal either way, and the leader reads them with `leader_events`.
+ */
+export declare function piReactionTarget(opts: Omit<PiReactionAdapterOptions, 'link'> & {
+    link?: PiRpcLink;
+    unreachable?: string;
+}): PiReactionTarget;
+/**
+ * The text a pi leader receives for one dispatch. Pure: the same inputs always render the same text.
+ *
+ * It names xezar as the source and says what it is not, before any row — an event must never read as
+ * the user's instruction or approval (§ 12). The role instruction rides along because pi keeps no
+ * system prompt in a resumed session. Each row's summary is quoted as data, so text inside a summary
+ * cannot pose as the adapter's own framing; rows are the journal's own summaries, already scrubbed of
+ * secrets (F-15), never a payload. The marker line is how a later look at pi's conversation
+ * recognises this submission — `<eventId>@<ts>` per row, because `journalSeq` restarts in a recreated
+ * journal and the pair does not.
+ */
+export declare function renderPiDispatch(dispatch: EventDispatch, rows: readonly McpJournalRow[], roleInstruction: string, marker: string): string;