@sagentlab/navarch-runtime 0.1.79 → 0.1.81

package/README.md

@@ -941,3 +941,40 @@ over the project's session model for the selected adapter only; switching agent
 types does not reuse another adapter's pin. Reconnect without `--model` to return
 to project-controlled model selection. Older identities without a model keep
 using the control-plane execution policy.
+
+
+### Pi on your own machine
+
+Select **Pi (local)** in Connect an agent, or set `NAVARCH_AGENT=pi-local`
+and `NAVARCH_RUNTIMES=pi-local`. Use a current Pi CLI with native MCP support
+and Node.js 22.19 or newer. Host mode requires `NAVARCH_WORKTREE_GUARD=off`:
+Pi's shell tools do not enforce the runtime's worktree boundary. The UI's
+connect and supervise commands include this opt-out. Use a dedicated worker.
+Docker is not advertised for this adapter yet.
+
+The initial model is `qwen3.8-flash-next-iq2_xs`, served by a local
+OpenAI-compatible endpoint at `http://127.0.0.1:8080/v1`. Start that model server
+separately. Set `NAVARCH_PI_LOCAL_BASE_URL` in the worker environment for a
+different endpoint (for example, Ollama's `http://127.0.0.1:11434/v1`).
+`NAVARCH_PI_BIN` overrides the executable; `NAVARCH_PI_EXTRA_ARGS` adds CLI
+arguments. `--model` at connect pins this machine's model as for other agents.
+
+Bare model IDs first resolve a unique matching model in the operator's catalog;
+ambiguous matches require an explicit `provider/model`. Without a match, they
+use the generated `local` provider. Setting `NAVARCH_PI_LOCAL_BASE_URL` explicitly
+selects that generated provider. Exact `provider/model`
+references use the machine's existing Pi catalog and credentials from
+`~/.pi/agent/models.json` and `auth.json` (or `PI_CODING_AGENT_DIR`). Run
+`pi --list-models` to inspect that catalog. The UI puts the local default first
+and labels public cloud suggestions by provider; suggestions do not imply
+credentials or access. Custom model IDs remain editable.
+
+Per-session configuration lives in a temporary agent directory, including
+Navarch's authenticated `mcp.json`. Pi runs without persisted sessions,
+automatically loaded extensions, skills, or project configuration. Temporary
+configuration is removed at exit. Hosted Pi keeps its separate `pi` runtime,
+DeepSeek provider, and billing policy; local sessions use `pi-local` and the
+project's `pi_local_model` policy.
+
+Pi CLI and model configuration reference:
+https://github.com/earendil-works/pi/tree/main/packages/coding-agent/docs

package/dist/adapters/index.cjs

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.runQoderAdapter = exports.qoderAdapter = exports.runAcpAdapter = exports.acpAdapter = exports.runPiAdapter = exports.piAdapter = exports.runOpenCodeAdapter = exports.openCodeAdapter = exports.runGeminiAdapter = exports.geminiAdapter = exports.runCodexAdapter = exports.codexAdapter = exports.runClaudeCodeAdapter = exports.claudeCodeAdapter = void 0;
+exports.runQoderAdapter = exports.qoderAdapter = exports.runAcpAdapter = exports.acpAdapter = exports.runPiAdapter = exports.piAdapter = exports.runLocalPiAdapter = exports.localPiAdapter = exports.runOpenCodeAdapter = exports.openCodeAdapter = exports.runGeminiAdapter = exports.geminiAdapter = exports.runCodexAdapter = exports.codexAdapter = exports.runClaudeCodeAdapter = exports.claudeCodeAdapter = void 0;
 exports.selectAdapter = selectAdapter;
 const claude_cjs_1 = require("./claude.cjs");
 Object.defineProperty(exports, "claudeCodeAdapter", { enumerable: true, get: function () { return claude_cjs_1.claudeCodeAdapter; } });
@@ -14,6 +14,9 @@ Object.defineProperty(exports, "runGeminiAdapter", { enumerable: true, get: func
 const opencode_cjs_1 = require("./opencode.cjs");
 Object.defineProperty(exports, "openCodeAdapter", { enumerable: true, get: function () { return opencode_cjs_1.openCodeAdapter; } });
 Object.defineProperty(exports, "runOpenCodeAdapter", { enumerable: true, get: function () { return opencode_cjs_1.runOpenCodeAdapter; } });
+const pi_local_cjs_1 = require("./pi-local.cjs");
+Object.defineProperty(exports, "localPiAdapter", { enumerable: true, get: function () { return pi_local_cjs_1.localPiAdapter; } });
+Object.defineProperty(exports, "runLocalPiAdapter", { enumerable: true, get: function () { return pi_local_cjs_1.runLocalPiAdapter; } });
 const pi_cjs_1 = require("./pi.cjs");
 Object.defineProperty(exports, "piAdapter", { enumerable: true, get: function () { return pi_cjs_1.piAdapter; } });
 Object.defineProperty(exports, "runPiAdapter", { enumerable: true, get: function () { return pi_cjs_1.runPiAdapter; } });
@@ -44,6 +47,8 @@ function selectAdapter(agentType) {
             return qoder_cjs_1.qoderAdapter;
         case "claude-code":
             return claude_cjs_1.claudeCodeAdapter;
+        case "pi-local":
+            return pi_local_cjs_1.localPiAdapter;
         case "pi":
             // Managed hosted runtime (#885): reachable only on a managed runner
             // executing a `runtime: "pi"` claim — config.cts never produces "pi"

package/dist/adapters/pi-local.cjs

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.localPiAdapter = void 0;
+exports.runLocalPiAdapter = runLocalPiAdapter;
+const pi_cjs_1 = require("./pi.cjs");
+/** BYO Pi: native MCP, operator provider catalog, and a local OpenAI-compatible default. */
+async function runLocalPiAdapter(options) {
+    if (options.dockerExec)
+        throw new Error("Pi (local) requires host mode");
+    if (options.signal?.aborted)
+        return { exitCode: null, timedOut: false, killedByLeaseLoss: true, stdout: "", stderr: "" };
+    const model = options.model ?? "qwen3.8-flash-next-iq2_xs";
+    const args = ["--mode", "json", "--no-session", "--no-extensions", "--no-skills", "--no-approve", ...options.extraArgs,
+        "--model", model.includes("/") ? model : `local/${model}`];
+    if (options.reasoningEffort)
+        args.push("--thinking", options.reasoningEffort === "max" ? "xhigh" : options.reasoningEffort);
+    args.push("-p", options.prompt);
+    return (0, pi_cjs_1.attachPiOutput)(await (0, pi_cjs_1.runOnHost)(options, args, true));
+}
+exports.localPiAdapter = { agentType: "pi-local", run: runLocalPiAdapter };

package/dist/adapters/pi.cjs

@@ -8,7 +8,9 @@ exports.buildHostedPiBudgetExtension = buildHostedPiBudgetExtension;
 exports.resolveHostedPiModel = resolveHostedPiModel;
 exports.buildPiProviderConfig = buildPiProviderConfig;
 exports.parsePiJsonEvents = parsePiJsonEvents;
+exports.attachPiOutput = attachPiOutput;
 exports.runPiAdapter = runPiAdapter;
+exports.runOnHost = runOnHost;
 const node_child_process_1 = require("node:child_process");
 const node_fs_1 = require("node:fs");
 const node_os_1 = __importDefault(require("node:os"));
@@ -163,10 +165,20 @@ function attachPiOutput(result) {
     let costUsd;
     let sawUsage = false;
     let reportText = "";
+    let terminalError;
     for (const event of events) {
         const message = event.message;
+        if (event.type === "error") {
+            terminalError = typeof event.error === "string" ? event.error :
+                typeof event.errorMessage === "string" ? event.errorMessage : "Pi provider error";
+        }
         if (event.type !== "message_end" || !message || message.role !== "assistant")
             continue;
+        // Pi can settle an exhausted provider retry with process exit code zero.
+        // A later successful assistant message supersedes a recovered error.
+        terminalError = message.stopReason === "error" || message.errorMessage
+            ? typeof message.errorMessage === "string" ? message.errorMessage : "Pi provider error"
+            : undefined;
         const text = extractText(message.content);
         if (text.trim())
             reportText = text.trim();
@@ -191,6 +203,9 @@ function attachPiOutput(result) {
     }
     return {
         ...result,
+        ...(terminalError && result.exitCode === 0 && !result.timedOut && !result.killedByLeaseLoss
+            ? { exitCode: 1, stderr: `${result.stderr}${result.stderr ? "\n" : ""}Pi provider failed: ${terminalError}` }
+            : {}),
         ...(sawUsage
             ? {
                 // AdapterResult semantics: tokensIn folds every input category
@@ -245,18 +260,61 @@ async function runPiAdapter(options) {
         : await runOnHost(options, args);
     return attachPiOutput(raw);
 }
-async function runOnHost(options, args) {
-    // Isolated agent dir so the generated provider config never touches (or
-    // reads) an operator's ~/.pi configuration/credentials.
+async function runOnHost(options, args, local = false) {
+    // Hosted sessions never read operator auth; BYO sessions copy only provider
+    // config and credentials. Both paths clean up their isolated agent directory.
     const agentDir = await node_fs_1.promises.mkdtemp(node_path_1.default.join(node_os_1.default.tmpdir(), "navarch-pi-agent-"));
-    await node_fs_1.promises.writeFile(node_path_1.default.join(agentDir, "models.json"), buildPiProviderConfig(), { mode: 0o600 });
-    const budgetExtensionPath = node_path_1.default.join(agentDir, BUDGET_EXTENSION_NAME);
-    await node_fs_1.promises.writeFile(budgetExtensionPath, buildHostedPiBudgetExtension(), {
-        mode: 0o600,
-    });
-    const env = { ...options.env, PI_CODING_AGENT_DIR: agentDir };
-    const boundedArgs = withBudgetExtension(args, budgetExtensionPath);
     try {
+        if (local) {
+            const sourceDir = options.env.PI_CODING_AGENT_DIR ?? process.env.PI_CODING_AGENT_DIR ?? node_path_1.default.join(node_os_1.default.homedir(), ".pi", "agent");
+            for (const name of ["models.json", "auth.json"]) {
+                try {
+                    await node_fs_1.promises.copyFile(node_path_1.default.join(sourceDir, name), node_path_1.default.join(agentDir, name));
+                    await node_fs_1.promises.chmod(node_path_1.default.join(agentDir, name), 0o600);
+                }
+                catch (error) {
+                    if (error.code !== "ENOENT")
+                        throw error;
+                }
+            }
+            const model = options.model ?? "qwen3.8-flash-next-iq2_xs";
+            if (!model.includes("/")) {
+                const configPath = node_path_1.default.join(agentDir, "models.json");
+                const config = JSON.parse(await node_fs_1.promises.readFile(configPath, "utf8").catch(() => "{}"));
+                config.providers ??= {};
+                const endpointOverride = options.env.NAVARCH_PI_LOCAL_BASE_URL ?? process.env.NAVARCH_PI_LOCAL_BASE_URL;
+                const matches = endpointOverride ? [] : Object.entries(config.providers).filter(([, provider]) => provider.models?.some((entry) => entry.id === model)).map(([name]) => name);
+                if (matches.length > 1)
+                    throw new Error(`Pi model ${model} matches multiple providers; select an explicit provider/model.`);
+                if (matches.length === 1) {
+                    args = [...args];
+                    args[args.lastIndexOf("--model") + 1] = `${matches[0]}/${model}`;
+                }
+                else {
+                    // Without a catalog match, retain the default local endpoint behavior.
+                    config.providers.local = {
+                        baseUrl: endpointOverride ?? "http://127.0.0.1:8080/v1",
+                        api: "openai-completions", apiKey: "local",
+                        models: [{ id: model, reasoning: false, input: ["text"], cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 } }],
+                    };
+                    await node_fs_1.promises.writeFile(configPath, JSON.stringify(config), { mode: 0o600 });
+                }
+            }
+            if (options.mcpConfigPath) {
+                await node_fs_1.promises.copyFile(options.mcpConfigPath, node_path_1.default.join(agentDir, "mcp.json"));
+                await node_fs_1.promises.chmod(node_path_1.default.join(agentDir, "mcp.json"), 0o600);
+            }
+        }
+        else {
+            await node_fs_1.promises.writeFile(node_path_1.default.join(agentDir, "models.json"), buildPiProviderConfig(), { mode: 0o600 });
+        }
+        const budgetExtensionPath = node_path_1.default.join(agentDir, BUDGET_EXTENSION_NAME);
+        if (!local)
+            await node_fs_1.promises.writeFile(budgetExtensionPath, buildHostedPiBudgetExtension(), {
+                mode: 0o600,
+            });
+        const env = { ...options.env, PI_CODING_AGENT_DIR: agentDir };
+        const boundedArgs = local ? args : withBudgetExtension(args, budgetExtensionPath);
         return await new Promise((resolve) => {
             let stdout = "";
             let stderr = "";

package/dist/config.cjs

@@ -25,6 +25,7 @@ exports.RUNTIME_AGENT_TYPES = [
     "opencode",
     "acp",
     "qoder",
+    "pi-local",
 ];
 function isRuntimeAgentType(value) {
     return typeof value === "string" && exports.RUNTIME_AGENT_TYPES.includes(value);
@@ -105,7 +106,12 @@ function loadRuntimeConfig(env = process.env) {
     // fails closed there (adapters/opencode.cts). Advertising it anyway meant
     // the machine claimed OpenCode tasks it could only fail, one lease at a
     // time; keep it out of the claim instead of discovering this per session.
-    const runnableRuntimes = requestedRuntimes.filter((runtime) => runtime !== "opencode" || !opencodeBlockedOnHost(sandboxMode, worktreeGuard));
+    const runnableRuntimes = requestedRuntimes.filter((runtime) => runtime === "pi-local"
+        ? sandboxMode === "host" && !worktreeGuard
+        : runtime !== "opencode" || !opencodeBlockedOnHost(sandboxMode, worktreeGuard));
+    if (requestedRuntimes.includes("pi-local") && runnableRuntimes.length === 0) {
+        throw new Error("Pi (local) requires NAVARCH_SANDBOX_MODE=host and NAVARCH_WORKTREE_GUARD=off");
+    }
     if (requestedRuntimes.includes("opencode") && runnableRuntimes.length === 0) {
         throw new Error(exports.OPENCODE_HOST_GUARD_MESSAGE);
     }
@@ -143,6 +149,8 @@ function loadRuntimeConfig(env = process.env) {
         opencodeExtraArgs: envList(env, "NAVARCH_OPENCODE_EXTRA_ARGS", []),
         acpBin: env.NAVARCH_ACP_BIN ?? "dsh",
         acpExtraArgs: envList(env, "NAVARCH_ACP_EXTRA_ARGS", ["--profile", "acp"]),
+        piBin: env.NAVARCH_PI_BIN ?? "pi",
+        piExtraArgs: envList(env, "NAVARCH_PI_EXTRA_ARGS", []),
         qoderBin: env.NAVARCH_QODER_BIN ?? "qoder",
         qoderExtraArgs: envList(env, "NAVARCH_QODER_EXTRA_ARGS", []),
         gitAuthorName: env.NAVARCH_GIT_AUTHOR_NAME ?? "sagentlab",

package/dist/session.cjs

@@ -46,9 +46,10 @@ function resolveSessionExecution(config, claimed) {
     const execution = claimed.context_bundle.execution ?? {
         profile: claimed.task.execution_profile ?? "standard",
         model: runtime === "codex" ? "gpt-6-astra"
-            : runtime === "gemini" ? "auto"
-                : runtime === "opencode" || runtime === "acp" || runtime === "qoder" ? "default"
-                    : "claude-opus-5-5",
+            : runtime === "pi-local" ? "qwen3.8-flash-next-iq2_xs"
+                : runtime === "gemini" ? "auto"
+                    : runtime === "opencode" || runtime === "acp" || runtime === "qoder" ? "default"
+                        : "claude-opus-5-5",
         reasoning_effort: "medium",
     };
     return {
@@ -865,6 +866,8 @@ function adapterCommand(config, runtime) {
             return { bin: config.opencodeBin, extraArgs: config.opencodeExtraArgs };
         case "acp":
             return { bin: config.acpBin, extraArgs: config.acpExtraArgs };
+        case "pi-local":
+            return { bin: config.piBin, extraArgs: config.piExtraArgs };
         case "qoder":
             return { bin: config.qoderBin, extraArgs: config.qoderExtraArgs };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sagentlab/navarch-runtime",
-  "version": "0.1.79",
+  "version": "0.1.81",
   "description": "Navarch machine-side session manager: claims delivery tasks and runs them through local coding agents.",
   "type": "commonjs",
   "license": "MIT",