@skelm/pi 0.3.4 → 0.3.5

package/README.md

@@ -1,12 +1,21 @@
 # @skelm/pi
 
-> Pi coding-agent backend for [skelm](https://github.com/scottgl9/skelm) — drives [`@mariozechner/pi-coding-agent`](https://www.npmjs.com/package/@mariozechner/pi-coding-agent) over its JSONL RPC protocol with full permission enforcement.
+> Pi coding-agent backend for [skelm](https://github.com/scottgl9/skelm) — integrates [`@mariozechner/pi-coding-agent`](https://www.npmjs.com/package/@mariozechner/pi-coding-agent) with full permission enforcement.
 
 [![npm](https://img.shields.io/npm/v/@skelm/pi)](https://www.npmjs.com/package/@skelm/pi)
 
 Part of [skelm](https://github.com/scottgl9/skelm).
 
-Spawns `pi --mode rpc` per call and streams the response back over the documented JSONL protocol. Maps skelm's `AgentPermissions` onto Pi's permission flags so denied tools / hosts / filesystem writes fail at step start.
+Two backends are available:
+
+| | `createPiBackend` (RPC) | `createPiSdkBackend` (SDK) |
+|---|---|---|
+| **How it works** | Spawns `pi --mode rpc` per call | Uses `@mariozechner/pi-coding-agent` SDK directly |
+| **Tool enforcement** | Advisory (skelm intercepts after the fact) | Native (pi hard-enforces the allowlist) |
+| **System prompt** | Not controllable | Pi's default; `req.system` appended; optional full replace |
+| **Peer dependency** | `pi` CLI on `$PATH` | `@mariozechner/pi-coding-agent` installed |
+
+Use the **SDK backend** for new work — it gives you hard tool enforcement and real system prompt control. The RPC backend exists for environments where the SDK peer dependency can't be installed.
 
 ## Install
 
@@ -14,18 +23,29 @@ Spawns `pi --mode rpc` per call and streams the response back over the documente
 npm install @skelm/pi
 ```
 
-You need the `pi` CLI on `$PATH` (or set `command` in the backend options).
+**RPC backend** additionally requires the `pi` CLI on `$PATH`:
+
+```bash
+npm install -g @mariozechner/pi-coding-agent   # installs the `pi` binary
+```
+
+**SDK backend** additionally requires the SDK as a peer dependency:
 
-## Quick Start
+```bash
+npm install @mariozechner/pi-coding-agent
+```
+
+## SDK backend (recommended)
 
 ```ts
 import { agent, pipeline } from 'skelm'
-import { createPiBackend } from '@skelm/pi'
+import { createPiSdkBackend } from '@skelm/pi'
 
-const pi = createPiBackend({
-  command: 'pi',
-  model: 'qwen-3-coder-32b',
-  // ...
+const pi = createPiSdkBackend({
+  // All options are optional
+  cwd: './workspace',          // working directory; defaults to process.cwd()
+  timeout: 300_000,            // ms; default 5 min
+  maxConcurrent: 4,            // queued beyond this; 0 = unlimited
 })
 
 export default pipeline({
@@ -34,35 +54,118 @@ export default pipeline({
     agent({
       id: 'pi-step',
       backend: pi,
-      agentDef: './agents/coder',
+      prompt: 'Refactor the auth module to use async/await throughout.',
       permissions: {
-        allowedTools: ['edit', 'bash'],
-        fsRead:       ['./src'],
-        fsWrite:      ['./src'],
+        allowedExecutables: ['bash'],
+        fsRead:  ['./src'],
+        fsWrite: ['./src'],
       },
-      maxTurns: 8,
     }),
   ],
 })
 ```
 
-## What's exported
+### System prompt
+
+By default pi's coding-agent system prompt is kept active. `req.system` and skill blocks are appended after it.
+
+```ts
+// append step-level system context to pi's default prompt (default)
+agent({ system: 'Follow the project style guide.', ... })
+
+// replace pi's base prompt entirely (use sparingly)
+createPiSdkBackend({ systemPrompt: 'You are a TypeScript refactoring specialist.' })
+```
+
+### Sandbox defaults
+
+The SDK backend enables predictable sandboxing out of the box:
+
+| Option | Default | Reason |
+|---|---|---|
+| `noExtensions` | `true` | `.pi/extensions/` can register tools and intercept messages in ways skelm cannot audit |
+| `noSkills` | `true` | skelm injects skills itself; loading `.pi/skills/` would cause duplicates |
+| `noContextFiles` | `false` | `AGENTS.md` and `.pi/context/` are useful project context |
+
+Opt back in at the backend level:
+
+```ts
+createPiSdkBackend({
+  noExtensions: false,   // allow project extensions
+  noSkills: false,       // also load .pi/skills/ from cwd
+  noContextFiles: true,  // suppress cwd context files
+})
+```
+
+### Permission → tool mapping
+
+`derivePiToolAllowlist(policy)` translates a skelm `ResolvedPolicy` into pi's native tool names:
+
+| skelm permission | pi tools enabled |
+|---|---|
+| `allowedExecutables` has `bash` or `sh` | `bash` |
+| `fsRead.size > 0` | `read`, `grep`, `find`, `ls` |
+| `fsWrite.size > 0` | `write`, `edit` (+ read tools) |
+| policy `undefined` | no override — pi uses its defaults |
+| policy present, nothing granted | `noTools: 'all'` — all built-ins suppressed |
+
+### ⚠ Permission semantics differ from MCP-host backends
+
+The SDK backend trades skelm's per-call MCP enforcement for pi's process-level enforcement. Two consequences worth knowing:
+
+- **`bash` is all-or-nothing.** Pi has a single `bash` tool, not per-binary tools. If `allowedExecutables` contains `bash` or `sh`, the agent can run *any* binary. Per-binary filtering (e.g. allow `git` but not `rm`) is not enforced — pi has no hook for it. With backends that route through `@skelm/core`'s MCP host, `requestedExecutable()` does enforce per-binary at the call site.
+- **Filesystem paths are advisory.** `fsRead`/`fsWrite` paths unlock the *category* of filesystem tools, but pi's `read`/`write`/`grep`/`find`/`ls` tools can access anywhere the pi process has filesystem permission. They do not honour skelm's path allowlist.
+
+If you need per-binary or per-path enforcement, use the MCP-host backends (claude-code, opencode) and route privileged operations through MCP servers that skelm can intercept. Use the pi SDK backend when you accept process-level sandboxing — typically when running pi inside an isolated workspace (ephemeral cwd, OS sandbox, container) where pi's full filesystem and shell access is already bounded.
+
+## RPC backend
+
+```ts
+import { createPiBackend } from '@skelm/pi'
+
+const pi = createPiBackend({
+  command: 'pi',               // path to binary; default: 'pi' on $PATH
+  provider: 'anthropic',       // pi provider name; omit for pi's default
+  model: 'claude-opus-4-5',    // model id; omit for pi's default
+  cwd: './workspace',
+  timeout: 300_000,
+  maxConcurrent: 4,
+})
+```
+
+The RPC backend spawns one `pi --mode rpc` process per call and streams the response over the JSONL protocol. Tool enforcement is advisory — skelm maps `AgentPermissions` to pi's permission flags but cannot intercept individual tool calls after dispatch.
+
+## Skills
+
+Both backends support skelm skills. Declare them on the `agent()` step:
+
+```ts
+agent({
+  id: 'implement',
+  backend: pi,
+  skills: ['code-review', 'style-guide'],
+  prompt: 'Implement the feature.',
+})
+```
+
+Skills are injected into the system prompt via `formatSkillBlock` (includes the skill's description, compatibility, and allowed-tools metadata before the body).
+
+## Exports
 
 ```ts
-export {
-  createPiBackend,
-  PiBackendError,
-  PiBackendAuthenticationError,
-  PiBackendRateLimitError,
-  PiBackendTimeoutError,
-} from './backend.js'
-export { createPiBackendFromConfig } from './factory.js'
-export { PiProvider, createPiProvider } from './provider.js'
-export { PiRpcClient } from './rpc-client.js'
-
-export type { PiBackendOptions } from './types.js'
-export type { PiBackendConfig } from './factory.js'
-export type { PiRpcClientOptions, PiRpcResponse } from './rpc-client.js'
+// RPC backend
+export { createPiBackend, PiBackendError, PiBackendAuthenticationError,
+         PiBackendRateLimitError, PiBackendTimeoutError } from '@skelm/pi'
+export { createPiBackendFromConfig } from '@skelm/pi'
+export { PiProvider, createPiProvider } from '@skelm/pi'
+export { PiRpcClient } from '@skelm/pi'
+export type { PiBackendOptions, PiBackendConfig, PiRpcClientOptions, PiRpcResponse } from '@skelm/pi'
+
+// SDK backend
+export { createPiSdkBackend, derivePiToolAllowlist, PiSdkBackendError,
+         PiSdkBackendAuthenticationError, PiSdkBackendTimeoutError } from '@skelm/pi'
+export { PiSdkClient } from '@skelm/pi'
+export type { PiSdkBackendOptions, PiSdkClientOptions, PiSdkResponse } from '@skelm/pi'
 ```
 
 ## Stability

package/dist/backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../src/backend.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAKV,YAAY,EACb,MAAM,aAAa,CAAA;AAEpB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAElD,gDAAgD;AAChD,qBAAa,cAAe,SAAQ,KAAK;aAInB,KAAK,CAAC,EAAE,OAAO;IAHnC,SAAkB,IAAI,oBAAmB;gBAEvC,OAAO,EAAE,MAAM,EACG,KAAK,CAAC,EAAE,OAAO,YAAA;CAIpC;AAED,qBAAa,4BAA6B,SAAQ,cAAc;CAAG;AACnE,qBAAa,uBAAwB,SAAQ,cAAc;CAAG;AAC9D,qBAAa,qBAAsB,SAAQ,cAAc;CAAG;AAE5D;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,GAAE,gBAAqB,GAAG,YAAY,CAqF5E"}
+{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../src/backend.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAKV,YAAY,EACb,MAAM,aAAa,CAAA;AAEpB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAElD,gDAAgD;AAChD,qBAAa,cAAe,SAAQ,KAAK;aAInB,KAAK,CAAC,EAAE,OAAO;IAHnC,SAAkB,IAAI,oBAAmB;gBAEvC,OAAO,EAAE,MAAM,EACG,KAAK,CAAC,EAAE,OAAO,YAAA;CAIpC;AAED,qBAAa,4BAA6B,SAAQ,cAAc;CAAG;AACnE,qBAAa,uBAAwB,SAAQ,cAAc;CAAG;AAC9D,qBAAa,qBAAsB,SAAQ,cAAc;CAAG;AAE5D;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,GAAE,gBAAqB,GAAG,YAAY,CAsF5E"}

package/dist/backend.js

@@ -6,6 +6,7 @@
 //
 // Pi does NOT speak ACP; this backend uses the native pi RPC protocol
 // documented in @mariozechner/pi-coding-agent/docs/rpc.md.
+import { formatSkillBlock } from '@skelm/core';
 import { PiRpcClient } from './rpc-client.js';
 /** Custom error types exposed from @skelm/pi */
 export class PiBackendError extends Error {
@@ -36,7 +37,7 @@ export function createPiBackend(options = {}) {
         streaming: true,
         sessionLifecycle: true,
         mcp: false, // pi manages its own tools; no external MCP wiring
-        skills: false,
+        skills: true,
         modelSelection: options.model !== undefined,
         toolPermissions: 'native', // pi enforces its own tool permissions
     };
@@ -75,7 +76,8 @@ export function createPiBackend(options = {}) {
             context.signal.addEventListener('abort', onAbort, { once: true });
             try {
                 await client.start();
-                const prompt = buildPrompt(request);
+                const skillBodies = await loadSkillBodies(request, context);
+                const prompt = buildPrompt(request, skillBodies);
                 const result = await client.prompt(prompt, options.timeout ?? 300_000);
                 return {
                     text: result.text,
@@ -111,10 +113,26 @@ export function createPiBackend(options = {}) {
  * Build the prompt string sent to pi, incorporating system prompt and
  * any multi-turn context from the request.
  */
-function buildPrompt(req) {
+async function loadSkillBodies(req, ctx) {
+    if (!req.skills || req.skills.length === 0 || !ctx.loadSkill)
+        return [];
+    const bodies = [];
+    for (const skillId of req.skills) {
+        const skill = await ctx.loadSkill(skillId);
+        if (skill !== null)
+            bodies.push(formatSkillBlock(skill));
+    }
+    return bodies;
+}
+function buildPrompt(req, skillBodies = []) {
     const parts = [];
+    const systemParts = [];
     if (req.system)
-        parts.push(`[System: ${req.system}]`);
+        systemParts.push(req.system);
+    for (const body of skillBodies)
+        systemParts.push(body);
+    if (systemParts.length > 0)
+        parts.push(`[System: ${systemParts.join('\n\n---\n\n')}]`);
     parts.push(req.prompt);
     return parts.join('\n\n');
 }

package/dist/backend.js.map

@@ -1 +1 @@
-{"version":3,"file":"backend.js","sourceRoot":"","sources":["../src/backend.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,EAAE;AACF,wEAAwE;AACxE,iEAAiE;AACjE,+DAA+D;AAC/D,EAAE;AACF,sEAAsE;AACtE,2DAA2D;AAS3D,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAG7C,gDAAgD;AAChD,MAAM,OAAO,cAAe,SAAQ,KAAK;IAInB;IAHF,IAAI,GAAG,gBAAgB,CAAA;IACzC,YACE,OAAe,EACG,KAAe;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAA;QAFI,UAAK,GAAL,KAAK,CAAU;IAGnC,CAAC;CACF;AAED,MAAM,OAAO,4BAA6B,SAAQ,cAAc;CAAG;AACnE,MAAM,OAAO,uBAAwB,SAAQ,cAAc;CAAG;AAC9D,MAAM,OAAO,qBAAsB,SAAQ,cAAc;CAAG;AAE5D;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,UAA4B,EAAE;IAC5D,MAAM,YAAY,GAAwB;QACxC,MAAM,EAAE,KAAK,EAAE,gEAAgE;QAC/E,SAAS,EAAE,IAAI;QACf,gBAAgB,EAAE,IAAI;QACtB,GAAG,EAAE,KAAK,EAAE,mDAAmD;QAC/D,MAAM,EAAE,KAAK;QACb,cAAc,EAAE,OAAO,CAAC,KAAK,KAAK,SAAS;QAC3C,eAAe,EAAE,QAAQ,EAAE,uCAAuC;KACnE,CAAA;IAED,2DAA2D;IAC3D,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,CAAA;IAChD,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,MAAM,KAAK,GAAsB,EAAE,CAAA;IAEnC,MAAM,OAAO,GAAG,GAAkB,EAAE;QAClC,IAAI,aAAa,KAAK,CAAC,IAAI,MAAM,GAAG,aAAa,EAAE,CAAC;YAClD,MAAM,EAAE,CAAA;YACR,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;QAC1B,CAAC;QACD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IAC5D,CAAC,CAAA;IAED,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA;QAC1B,IAAI,IAAI;YAAE,IAAI,EAAE,CAAA;;YACX,MAAM,EAAE,CAAA;IACf,CAAC,CAAA;IAED,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,IAAI;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,iBAAiB;QACzC,YAAY;QAEZ,KAAK,CAAC,GAAG,CAAC,OAAqB,EAAE,OAAuB;YACtD,MAAM,OAAO,EAAE,CAAA;YAEf,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC;gBAC7B,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;gBAChC,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrE,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;gBAC5D,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;gBACtF,cAAc,EAAE,KAAK;aACtB,CAAC,CAAA;YAEF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACpD,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YAEjE,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;gBAEpB,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;gBACnC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,CAAA;gBAEtE,OAAO;oBACL,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI;wBAChC,KAAK,EAAE;4BACL,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW;4BACrC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY;yBACxC;qBACF,CAAC;iBACH,CAAA;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;oBACzB,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACrE,MAAM,IAAI,4BAA4B,CACpC,iGAAiG,EACjG,GAAG,CACJ,CAAA;oBACH,CAAC;oBACD,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;wBACtC,MAAM,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;oBACnD,CAAC;gBACH,CAAC;gBACD,MAAM,IAAI,cAAc,CAAC,8BAA+B,GAAa,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAA;YACvF,CAAC;oBAAS,CAAC;gBACT,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;gBACpD,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;gBACnB,OAAO,EAAE,CAAA;YACX,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,GAAiB;IACpC,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,GAAG,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA;IACrD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACtB,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AAC3B,CAAC"}
+{"version":3,"file":"backend.js","sourceRoot":"","sources":["../src/backend.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,EAAE;AACF,wEAAwE;AACxE,iEAAiE;AACjE,+DAA+D;AAC/D,EAAE;AACF,sEAAsE;AACtE,2DAA2D;AAE3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAQ9C,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAG7C,gDAAgD;AAChD,MAAM,OAAO,cAAe,SAAQ,KAAK;IAInB;IAHF,IAAI,GAAG,gBAAgB,CAAA;IACzC,YACE,OAAe,EACG,KAAe;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAA;QAFI,UAAK,GAAL,KAAK,CAAU;IAGnC,CAAC;CACF;AAED,MAAM,OAAO,4BAA6B,SAAQ,cAAc;CAAG;AACnE,MAAM,OAAO,uBAAwB,SAAQ,cAAc;CAAG;AAC9D,MAAM,OAAO,qBAAsB,SAAQ,cAAc;CAAG;AAE5D;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,UAA4B,EAAE;IAC5D,MAAM,YAAY,GAAwB;QACxC,MAAM,EAAE,KAAK,EAAE,gEAAgE;QAC/E,SAAS,EAAE,IAAI;QACf,gBAAgB,EAAE,IAAI;QACtB,GAAG,EAAE,KAAK,EAAE,mDAAmD;QAC/D,MAAM,EAAE,IAAI;QACZ,cAAc,EAAE,OAAO,CAAC,KAAK,KAAK,SAAS;QAC3C,eAAe,EAAE,QAAQ,EAAE,uCAAuC;KACnE,CAAA;IAED,2DAA2D;IAC3D,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,CAAA;IAChD,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,MAAM,KAAK,GAAsB,EAAE,CAAA;IAEnC,MAAM,OAAO,GAAG,GAAkB,EAAE;QAClC,IAAI,aAAa,KAAK,CAAC,IAAI,MAAM,GAAG,aAAa,EAAE,CAAC;YAClD,MAAM,EAAE,CAAA;YACR,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;QAC1B,CAAC;QACD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IAC5D,CAAC,CAAA;IAED,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA;QAC1B,IAAI,IAAI;YAAE,IAAI,EAAE,CAAA;;YACX,MAAM,EAAE,CAAA;IACf,CAAC,CAAA;IAED,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,IAAI;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,iBAAiB;QACzC,YAAY;QAEZ,KAAK,CAAC,GAAG,CAAC,OAAqB,EAAE,OAAuB;YACtD,MAAM,OAAO,EAAE,CAAA;YAEf,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC;gBAC7B,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;gBAChC,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrE,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;gBAC5D,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;gBACtF,cAAc,EAAE,KAAK;aACtB,CAAC,CAAA;YAEF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACpD,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YAEjE,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;gBAEpB,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;gBAC3D,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;gBAChD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,CAAA;gBAEtE,OAAO;oBACL,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI;wBAChC,KAAK,EAAE;4BACL,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW;4BACrC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY;yBACxC;qBACF,CAAC;iBACH,CAAA;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;oBACzB,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACrE,MAAM,IAAI,4BAA4B,CACpC,iGAAiG,EACjG,GAAG,CACJ,CAAA;oBACH,CAAC;oBACD,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;wBACtC,MAAM,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;oBACnD,CAAC;gBACH,CAAC;gBACD,MAAM,IAAI,cAAc,CAAC,8BAA+B,GAAa,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAA;YACvF,CAAC;oBAAS,CAAC;gBACT,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;gBACpD,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;gBACnB,OAAO,EAAE,CAAA;YACX,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,eAAe,CAAC,GAAiB,EAAE,GAAmB;IACnE,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO,EAAE,CAAA;IACvE,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAC1C,IAAI,KAAK,KAAK,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAA;IAC1D,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,WAAW,CAAC,GAAiB,EAAE,cAAwB,EAAE;IAChE,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,MAAM,WAAW,GAAa,EAAE,CAAA;IAChC,IAAI,GAAG,CAAC,MAAM;QAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC5C,KAAK,MAAM,IAAI,IAAI,WAAW;QAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACtD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;IACtF,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACtB,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AAC3B,CAAC"}

package/dist/index.d.ts

@@ -9,7 +9,10 @@ export { createPiBackend, PiBackendError, PiBackendAuthenticationError, PiBacken
 export { createPiBackendFromConfig } from './factory.js';
 export { PiProvider, createPiProvider } from './provider.js';
 export { PiRpcClient } from './rpc-client.js';
-export type { PiBackendOptions } from './types.js';
+export { createPiSdkBackend, derivePiToolAllowlist, PiSdkBackendError, PiSdkBackendAuthenticationError, PiSdkBackendTimeoutError, } from './sdk-backend.js';
+export { PiSdkClient } from './sdk-client.js';
+export type { PiBackendOptions, PiSdkBackendOptions } from './types.js';
 export type { PiBackendConfig } from './factory.js';
 export type { PiRpcClientOptions, PiRpcResponse } from './rpc-client.js';
+export type { PiSdkClientOptions, PiSdkResponse } from './sdk-client.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,eAAe,EACf,cAAc,EACd,4BAA4B,EAC5B,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC7C,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAClD,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AACnD,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,eAAe,EACf,cAAc,EACd,4BAA4B,EAC5B,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,EACjB,+BAA+B,EAC/B,wBAAwB,GACzB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC7C,YAAY,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AACvE,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AACnD,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AACxE,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA"}

package/dist/index.js

@@ -9,4 +9,6 @@ export { createPiBackend, PiBackendError, PiBackendAuthenticationError, PiBacken
 export { createPiBackendFromConfig } from './factory.js';
 export { PiProvider, createPiProvider } from './provider.js';
 export { PiRpcClient } from './rpc-client.js';
+export { createPiSdkBackend, derivePiToolAllowlist, PiSdkBackendError, PiSdkBackendAuthenticationError, PiSdkBackendTimeoutError, } from './sdk-backend.js';
+export { PiSdkClient } from './sdk-client.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,eAAe,EACf,cAAc,EACd,4BAA4B,EAC5B,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,eAAe,EACf,cAAc,EACd,4BAA4B,EAC5B,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,EACjB,+BAA+B,EAC/B,wBAAwB,GACzB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA"}

package/dist/sdk-backend.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Pi coding agent SDK backend for skelm.
+ *
+ * Unlike the RPC backend (which spawns `pi --mode rpc` and cannot intercept
+ * individual tool calls), this backend uses the pi SDK directly, allowing
+ * skelm to pass a hard tool allowlist that pi enforces natively.
+ *
+ * System prompt strategy:
+ *   By default pi's coding-agent system prompt is kept active. req.system
+ *   and skill blocks are appended after it so the agent has full context.
+ *   Set options.systemPrompt to replace pi's base prompt entirely.
+ *
+ * Permission → tool mapping:
+ *   allowedExecutables contains 'bash' or 'sh'  → 'bash'
+ *   fsRead.size > 0                              → 'read', 'grep', 'find', 'ls'
+ *   fsWrite.size > 0                             → 'write', 'edit'
+ *   undefined policy                             → no override (pi defaults)
+ */
+import type { ResolvedPolicy, SkelmBackend } from '@skelm/core';
+import type { PiSdkBackendOptions } from './types.js';
+export declare class PiSdkBackendError extends Error {
+    readonly cause?: unknown | undefined;
+    readonly name = "PiSdkBackendError";
+    constructor(message: string, cause?: unknown | undefined);
+}
+export declare class PiSdkBackendAuthenticationError extends PiSdkBackendError {
+}
+export declare class PiSdkBackendTimeoutError extends PiSdkBackendError {
+}
+/**
+ * Create a pi coding agent backend using the pi SDK.
+ *
+ * This backend builds an explicit tool allowlist from the skelm permission
+ * policy so pi itself enforces which tools the agent may use. This provides
+ * native enforcement rather than the advisory enforcement of the RPC backend.
+ */
+export declare function createPiSdkBackend(options?: PiSdkBackendOptions): SkelmBackend;
+/**
+ * Derive a pi tool allowlist from a skelm permission policy.
+ *
+ * Returns `undefined` when no policy is set (pi uses its defaults).
+ * Returns a string[] (possibly empty) when a policy is present.
+ */
+export declare function derivePiToolAllowlist(policy: ResolvedPolicy | undefined): string[] | undefined;
+//# sourceMappingURL=sdk-backend.d.ts.map

package/dist/sdk-backend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-backend.d.ts","sourceRoot":"","sources":["../src/sdk-backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAKV,cAAc,EACd,YAAY,EACb,MAAM,aAAa,CAAA;AAEpB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAErD,qBAAa,iBAAkB,SAAQ,KAAK;aAItB,KAAK,CAAC,EAAE,OAAO;IAHnC,SAAkB,IAAI,uBAAsB;gBAE1C,OAAO,EAAE,MAAM,EACG,KAAK,CAAC,EAAE,OAAO,YAAA;CAIpC;AAED,qBAAa,+BAAgC,SAAQ,iBAAiB;CAAG;AACzE,qBAAa,wBAAyB,SAAQ,iBAAiB;CAAG;AAElE;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,mBAAwB,GAAG,YAAY,CA6FlF;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,GAAG,MAAM,EAAE,GAAG,SAAS,CAsB9F"}

package/dist/sdk-backend.js

@@ -0,0 +1,174 @@
+/**
+ * Pi coding agent SDK backend for skelm.
+ *
+ * Unlike the RPC backend (which spawns `pi --mode rpc` and cannot intercept
+ * individual tool calls), this backend uses the pi SDK directly, allowing
+ * skelm to pass a hard tool allowlist that pi enforces natively.
+ *
+ * System prompt strategy:
+ *   By default pi's coding-agent system prompt is kept active. req.system
+ *   and skill blocks are appended after it so the agent has full context.
+ *   Set options.systemPrompt to replace pi's base prompt entirely.
+ *
+ * Permission → tool mapping:
+ *   allowedExecutables contains 'bash' or 'sh'  → 'bash'
+ *   fsRead.size > 0                              → 'read', 'grep', 'find', 'ls'
+ *   fsWrite.size > 0                             → 'write', 'edit'
+ *   undefined policy                             → no override (pi defaults)
+ */
+import { formatSkillBlock } from '@skelm/core';
+import { PiSdkClient } from './sdk-client.js';
+export class PiSdkBackendError extends Error {
+    cause;
+    name = 'PiSdkBackendError';
+    constructor(message, cause) {
+        super(message);
+        this.cause = cause;
+    }
+}
+export class PiSdkBackendAuthenticationError extends PiSdkBackendError {
+}
+export class PiSdkBackendTimeoutError extends PiSdkBackendError {
+}
+/**
+ * Create a pi coding agent backend using the pi SDK.
+ *
+ * This backend builds an explicit tool allowlist from the skelm permission
+ * policy so pi itself enforces which tools the agent may use. This provides
+ * native enforcement rather than the advisory enforcement of the RPC backend.
+ */
+export function createPiSdkBackend(options = {}) {
+    const capabilities = {
+        prompt: false,
+        streaming: true,
+        sessionLifecycle: true,
+        mcp: false,
+        skills: true,
+        modelSelection: false,
+        toolPermissions: 'native',
+    };
+    const maxConcurrent = options.maxConcurrent ?? 4;
+    let active = 0;
+    const queue = [];
+    const acquire = () => {
+        if (maxConcurrent === 0 || active < maxConcurrent) {
+            active++;
+            return Promise.resolve();
+        }
+        return new Promise((resolve) => queue.push(resolve));
+    };
+    const release = () => {
+        const next = queue.shift();
+        if (next)
+            next();
+        else
+            active--;
+    };
+    return {
+        id: options.id ?? 'pi-sdk',
+        label: options.label ?? 'Pi Coding Agent (SDK)',
+        capabilities,
+        async run(request, context) {
+            await acquire();
+            try {
+                const policy = context.permissions ?? request.permissions;
+                const toolAllowlist = derivePiToolAllowlist(policy);
+                const skillBodies = await loadSkillBodies(request, context);
+                const systemContent = buildSystemContent(options.systemPrompt, request, skillBodies);
+                const cwd = request.cwd ?? options.cwd;
+                const client = new PiSdkClient({
+                    ...(cwd !== undefined && { cwd }),
+                    ...(toolAllowlist !== undefined && { tools: toolAllowlist }),
+                    ...(policy !== undefined && toolAllowlist?.length === 0 && { noTools: 'all' }),
+                    ...(options.noExtensions !== undefined && { noExtensions: options.noExtensions }),
+                    ...(options.noSkills !== undefined && { noSkills: options.noSkills }),
+                    ...(options.noContextFiles !== undefined && { noContextFiles: options.noContextFiles }),
+                    // System prompt: inject content and indicate whether to replace pi's base
+                    ...(systemContent !== undefined && {
+                        system: systemContent,
+                        replaceSystemPrompt: options.systemPrompt !== undefined,
+                    }),
+                });
+                const result = await client.prompt(request.prompt, context.signal, options.timeout ?? 300_000);
+                return {
+                    text: result.text,
+                    stopReason: result.stopReason,
+                    ...(result.usage !== undefined && {
+                        usage: {
+                            inputTokens: result.usage.inputTokens,
+                            outputTokens: result.usage.outputTokens,
+                        },
+                    }),
+                };
+            }
+            catch (err) {
+                if (err instanceof Error) {
+                    if (err.message.includes('ENOENT') || err.message.includes('not installed')) {
+                        throw new PiSdkBackendAuthenticationError('pi SDK not available. Install it: npm install @mariozechner/pi-coding-agent', err);
+                    }
+                    if (err.message.includes('timed out')) {
+                        throw new PiSdkBackendTimeoutError(err.message, err);
+                    }
+                }
+                throw new PiSdkBackendError(`pi SDK agent execution failed: ${err.message}`, err);
+            }
+            finally {
+                release();
+            }
+        },
+    };
+}
+/**
+ * Derive a pi tool allowlist from a skelm permission policy.
+ *
+ * Returns `undefined` when no policy is set (pi uses its defaults).
+ * Returns a string[] (possibly empty) when a policy is present.
+ */
+export function derivePiToolAllowlist(policy) {
+    if (policy === undefined)
+        return undefined;
+    const allowed = [];
+    const execs = policy.allowedExecutables;
+    if (execs.has('bash') || execs.has('sh')) {
+        allowed.push('bash');
+    }
+    const fsRead = policy.fsRead;
+    if (fsRead instanceof Set ? fsRead.size > 0 : Array.isArray(fsRead) && fsRead.length > 0) {
+        allowed.push('read', 'grep', 'find', 'ls');
+    }
+    const fsWrite = policy.fsWrite;
+    if (fsWrite instanceof Set ? fsWrite.size > 0 : Array.isArray(fsWrite) && fsWrite.length > 0) {
+        if (!allowed.includes('read'))
+            allowed.push('read', 'grep', 'find', 'ls');
+        allowed.push('write', 'edit');
+    }
+    return allowed;
+}
+/**
+ * Assemble the system content to inject into pi's system prompt.
+ *
+ * When systemBase is set it replaces pi's prompt; req.system and skills are
+ * always appended so the agent has the step's context regardless of mode.
+ */
+function buildSystemContent(systemBase, req, skillBodies) {
+    const parts = [];
+    if (systemBase !== undefined)
+        parts.push(systemBase);
+    if (req.system)
+        parts.push(req.system);
+    for (const body of skillBodies)
+        parts.push(body);
+    return parts.length > 0 ? parts.join('\n\n---\n\n') : undefined;
+}
+async function loadSkillBodies(req, ctx) {
+    if (!req.skills || req.skills.length === 0 || !ctx.loadSkill)
+        return [];
+    const bodies = [];
+    for (const skillId of req.skills) {
+        const skill = await ctx.loadSkill(skillId);
+        if (skill !== null)
+            bodies.push(formatSkillBlock(skill));
+    }
+    return bodies;
+}
+//# sourceMappingURL=sdk-backend.js.map

package/dist/sdk-backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-backend.js","sourceRoot":"","sources":["../src/sdk-backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAS9C,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAG7C,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAItB;IAHF,IAAI,GAAG,mBAAmB,CAAA;IAC5C,YACE,OAAe,EACG,KAAe;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAA;QAFI,UAAK,GAAL,KAAK,CAAU;IAGnC,CAAC;CACF;AAED,MAAM,OAAO,+BAAgC,SAAQ,iBAAiB;CAAG;AACzE,MAAM,OAAO,wBAAyB,SAAQ,iBAAiB;CAAG;AAElE;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAA+B,EAAE;IAClE,MAAM,YAAY,GAAwB;QACxC,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,IAAI;QACf,gBAAgB,EAAE,IAAI;QACtB,GAAG,EAAE,KAAK;QACV,MAAM,EAAE,IAAI;QACZ,cAAc,EAAE,KAAK;QACrB,eAAe,EAAE,QAAQ;KAC1B,CAAA;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,CAAA;IAChD,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,MAAM,KAAK,GAAsB,EAAE,CAAA;IAEnC,MAAM,OAAO,GAAG,GAAkB,EAAE;QAClC,IAAI,aAAa,KAAK,CAAC,IAAI,MAAM,GAAG,aAAa,EAAE,CAAC;YAClD,MAAM,EAAE,CAAA;YACR,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;QAC1B,CAAC;QACD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IAC5D,CAAC,CAAA;IAED,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA;QAC1B,IAAI,IAAI;YAAE,IAAI,EAAE,CAAA;;YACX,MAAM,EAAE,CAAA;IACf,CAAC,CAAA;IAED,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,QAAQ;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,uBAAuB;QAC/C,YAAY;QAEZ,KAAK,CAAC,GAAG,CAAC,OAAqB,EAAE,OAAuB;YACtD,MAAM,OAAO,EAAE,CAAA;YAEf,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW,CAAA;gBACzD,MAAM,aAAa,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAA;gBAEnD,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;gBAC3D,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,EAAE,WAAW,CAAC,CAAA;gBAEpF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;gBACtC,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC;oBAC7B,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,CAAC;oBACjC,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;oBAC5D,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,aAAa,EAAE,MAAM,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAc,EAAE,CAAC;oBACvF,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;oBACjF,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;oBACrE,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;oBACvF,0EAA0E;oBAC1E,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI;wBACjC,MAAM,EAAE,aAAa;wBACrB,mBAAmB,EAAE,OAAO,CAAC,YAAY,KAAK,SAAS;qBACxD,CAAC;iBACH,CAAC,CAAA;gBAEF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAChC,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,OAAO,IAAI,OAAO,CAC3B,CAAA;gBAED,OAAO;oBACL,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI;wBAChC,KAAK,EAAE;4BACL,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW;4BACrC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY;yBACxC;qBACF,CAAC;iBACH,CAAA;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;oBACzB,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;wBAC5E,MAAM,IAAI,+BAA+B,CACvC,6EAA6E,EAC7E,GAAG,CACJ,CAAA;oBACH,CAAC;oBACD,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;wBACtC,MAAM,IAAI,wBAAwB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;oBACtD,CAAC;gBACH,CAAC;gBACD,MAAM,IAAI,iBAAiB,CAAC,kCAAmC,GAAa,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAA;YAC9F,CAAC;oBAAS,CAAC;gBACT,OAAO,EAAE,CAAA;YACX,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAkC;IACtE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAE1C,MAAM,OAAO,GAAa,EAAE,CAAA;IAE5B,MAAM,KAAK,GAAG,MAAM,CAAC,kBAAkB,CAAA;IACvC,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACtB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC5B,IAAI,MAAM,YAAY,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzF,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IAC5C,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;IAC9B,IAAI,OAAO,YAAY,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7F,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QACzE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAC/B,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CACzB,UAA8B,EAC9B,GAAiB,EACjB,WAAqB;IAErB,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,UAAU,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACpD,IAAI,GAAG,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACtC,KAAK,MAAM,IAAI,IAAI,WAAW;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACjE,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAiB,EAAE,GAAmB;IACnE,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO,EAAE,CAAA;IACvE,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAC1C,IAAI,KAAK,KAAK,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAA;IAC1D,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/sdk-client.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Thin wrapper around the pi coding agent SDK for programmatic use.
+ *
+ * Uses createAgentSessionServices + createAgentSessionFromServices so we can
+ * pass resource-loader options (system prompt, skill/extension suppression)
+ * that createAgentSession does not expose directly.
+ */
+export interface PiSdkClientOptions {
+    /** Working directory for pi's project-local discovery. Default: process.cwd() */
+    cwd?: string;
+    /**
+     * Allowlist of tool names enabled for this session.
+     * When omitted pi enables its default built-in tools (bash, read, edit, write).
+     * When provided, only the listed names are active.
+     */
+    tools?: string[];
+    /** Suppress built-in tools when no allowlist covers them. */
+    noTools?: 'all' | 'builtin';
+    /**
+     * Content injected into pi's system prompt.
+     * When replaceSystemPrompt is false (default), appended after pi's base prompt.
+     * When replaceSystemPrompt is true, replaces pi's base prompt entirely.
+     */
+    system?: string;
+    /**
+     * When true, system replaces pi's base system prompt instead of appending.
+     * Default: false — pi's coding-agent prompt stays active; system is appended.
+     */
+    replaceSystemPrompt?: boolean;
+    /**
+     * Disable pi's built-in skill loading from .pi/skills/ directories.
+     * Default: true — skelm injects skills itself via formatSkillBlock; loading
+     * pi's own skills would cause duplicates.
+     */
+    noSkills?: boolean;
+    /**
+     * Disable pi's extension loading from .pi/extensions/.
+     * Default: true — extensions can register additional tools and modify behaviour
+     * in ways skelm cannot audit; disable by default for predictable sandboxing.
+     */
+    noExtensions?: boolean;
+    /**
+     * Disable pi's cwd context file discovery (AGENTS.md, .pi/context/).
+     * Default: false — project context files are useful and safe.
+     */
+    noContextFiles?: boolean;
+}
+export interface PiSdkResponse {
+    text: string;
+    stopReason: 'stop' | 'length' | 'toolUse' | 'error' | 'aborted';
+    usage?: {
+        inputTokens: number;
+        outputTokens: number;
+    };
+}
+export declare class PiSdkClient {
+    private readonly opts;
+    constructor(opts?: PiSdkClientOptions);
+    prompt(text: string, signal?: AbortSignal, timeoutMs?: number): Promise<PiSdkResponse>;
+    private _run;
+}
+//# sourceMappingURL=sdk-client.d.ts.map

package/dist/sdk-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-client.d.ts","sourceRoot":"","sources":["../src/sdk-client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,kBAAkB;IACjC,iFAAiF;IACjF,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,KAAK,GAAG,SAAS,CAAA;IAC3B;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAA;IAC/D,KAAK,CAAC,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAA;CACtD;AAED,qBAAa,WAAW;IACV,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,GAAE,kBAAuB;IAEpD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,SAAS,SAAU,GAAG,OAAO,CAAC,aAAa,CAAC;IA4C7F,OAAO,CAAC,IAAI;CAuEb"}

package/dist/sdk-client.js

@@ -0,0 +1,107 @@
+/**
+ * Thin wrapper around the pi coding agent SDK for programmatic use.
+ *
+ * Uses createAgentSessionServices + createAgentSessionFromServices so we can
+ * pass resource-loader options (system prompt, skill/extension suppression)
+ * that createAgentSession does not expose directly.
+ */
+export class PiSdkClient {
+    opts;
+    constructor(opts = {}) {
+        this.opts = opts;
+    }
+    async prompt(text, signal, timeoutMs = 300_000) {
+        // Dynamic import keeps @mariozechner/pi-coding-agent optional at runtime
+        const pi = await import('@mariozechner/pi-coding-agent').catch(() => {
+            throw new Error('pi SDK not installed. Add @mariozechner/pi-coding-agent to your project: npm install @mariozechner/pi-coding-agent');
+        });
+        const { createAgentSessionServices, createAgentSessionFromServices, SessionManager } = pi;
+        const cwd = this.opts.cwd ?? process.cwd();
+        const systemPromptOverride = this.opts.system !== undefined
+            ? (base) => this.opts.replaceSystemPrompt
+                ? this.opts.system
+                : [base, this.opts.system].filter(Boolean).join('\n\n')
+            : undefined;
+        const services = await createAgentSessionServices({
+            cwd,
+            resourceLoaderOptions: {
+                noSkills: this.opts.noSkills ?? true,
+                noExtensions: this.opts.noExtensions ?? true,
+                ...(this.opts.noContextFiles && { noContextFiles: true }),
+                ...(systemPromptOverride !== undefined && { systemPromptOverride }),
+            },
+        });
+        const { session } = await createAgentSessionFromServices({
+            services,
+            sessionManager: SessionManager.inMemory(),
+            ...(this.opts.tools !== undefined && { tools: this.opts.tools }),
+            ...(this.opts.noTools !== undefined && { noTools: this.opts.noTools }),
+        });
+        try {
+            return await this._run(session, text, signal, timeoutMs);
+        }
+        finally {
+            session.dispose();
+        }
+    }
+    _run(session, text, signal, timeoutMs) {
+        return new Promise((resolve, reject) => {
+            let settled = false;
+            const settle = (fn) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(timer);
+                signal?.removeEventListener('abort', onAbort);
+                fn();
+            };
+            const timer = setTimeout(() => {
+                settle(() => {
+                    session.abort().catch(() => { });
+                    reject(new Error(`pi agent timed out after ${timeoutMs}ms`));
+                });
+            }, timeoutMs);
+            const onAbort = () => {
+                settle(() => {
+                    session.abort().catch(() => { });
+                    reject(new Error('pi agent aborted'));
+                });
+            };
+            if (signal?.aborted) {
+                clearTimeout(timer);
+                reject(new Error('pi agent aborted'));
+                return;
+            }
+            signal?.addEventListener('abort', onAbort, { once: true });
+            const unsub = session.subscribe((event) => {
+                if (event.type === 'agent_end') {
+                    unsub();
+                    settle(() => {
+                        const assistantMsg = [...event.messages].reverse().find((m) => m.role === 'assistant');
+                        if (!assistantMsg || assistantMsg.role !== 'assistant') {
+                            resolve({ text: '', stopReason: 'stop' });
+                            return;
+                        }
+                        const text = assistantMsg.content
+                            .filter((c) => c.type === 'text')
+                            .map((c) => c.text)
+                            .join('');
+                        resolve({
+                            text,
+                            stopReason: assistantMsg.stopReason,
+                            usage: {
+                                inputTokens: assistantMsg.usage.input,
+                                outputTokens: assistantMsg.usage.output,
+                            },
+                        });
+                    });
+                }
+            });
+            session.prompt(text).catch((err) => {
+                unsub();
+                settle(() => reject(err));
+            });
+        });
+    }
+}
+//# sourceMappingURL=sdk-client.js.map

package/dist/sdk-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-client.js","sourceRoot":"","sources":["../src/sdk-client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAiDH,MAAM,OAAO,WAAW;IACO;IAA7B,YAA6B,OAA2B,EAAE;QAA7B,SAAI,GAAJ,IAAI,CAAyB;IAAG,CAAC;IAE9D,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,MAAoB,EAAE,SAAS,GAAG,OAAO;QAClE,yEAAyE;QACzE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAClE,MAAM,IAAI,KAAK,CACb,oHAAoH,CACrH,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,cAAc,EAAE,GAAG,EAAE,CAAA;QAEzF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;QAE1C,MAAM,oBAAoB,GACxB,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS;YAC5B,CAAC,CAAC,CAAC,IAAwB,EAAsB,EAAE,CAC/C,IAAI,CAAC,IAAI,CAAC,mBAAmB;gBAC3B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;gBAClB,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;YAC7D,CAAC,CAAC,SAAS,CAAA;QAEf,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC;YAChD,GAAG;YACH,qBAAqB,EAAE;gBACrB,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI;gBACpC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI;gBAC5C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;gBACzD,GAAG,CAAC,oBAAoB,KAAK,SAAS,IAAI,EAAE,oBAAoB,EAAE,CAAC;aACpE;SACF,CAAC,CAAA;QAEF,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,8BAA8B,CAAC;YACvD,QAAQ;YACR,cAAc,EAAE,cAAc,CAAC,QAAQ,EAAE;YACzC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;SACvE,CAAC,CAAA;QAEF,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;QAC1D,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,OAAO,EAAE,CAAA;QACnB,CAAC;IACH,CAAC;IAEO,IAAI,CACV,OAA6D,EAC7D,IAAY,EACZ,MAA+B,EAC/B,SAAiB;QAEjB,OAAO,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACpD,IAAI,OAAO,GAAG,KAAK,CAAA;YACnB,MAAM,MAAM,GAAG,CAAC,EAAc,EAAE,EAAE;gBAChC,IAAI,OAAO;oBAAE,OAAM;gBACnB,OAAO,GAAG,IAAI,CAAA;gBACd,YAAY,CAAC,KAAK,CAAC,CAAA;gBACnB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;gBAC7C,EAAE,EAAE,CAAA;YACN,CAAC,CAAA;YAED,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,MAAM,CAAC,GAAG,EAAE;oBACV,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;oBAC/B,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,SAAS,IAAI,CAAC,CAAC,CAAA;gBAC9D,CAAC,CAAC,CAAA;YACJ,CAAC,EAAE,SAAS,CAAC,CAAA;YAEb,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,MAAM,CAAC,GAAG,EAAE;oBACV,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;oBAC/B,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAA;gBACvC,CAAC,CAAC,CAAA;YACJ,CAAC,CAAA;YAED,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,YAAY,CAAC,KAAK,CAAC,CAAA;gBACnB,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAA;gBACrC,OAAM;YACR,CAAC;YACD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YAE1D,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;gBACxC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAC/B,KAAK,EAAE,CAAA;oBACP,MAAM,CAAC,GAAG,EAAE;wBACV,MAAM,YAAY,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAA;wBAEtF,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;4BACvD,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAA;4BACzC,OAAM;wBACR,CAAC;wBAED,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO;6BAC9B,MAAM,CAAC,CAAC,CAAC,EAAuC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;6BACrE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;6BAClB,IAAI,CAAC,EAAE,CAAC,CAAA;wBAEX,OAAO,CAAC;4BACN,IAAI;4BACJ,UAAU,EAAE,YAAY,CAAC,UAAyC;4BAClE,KAAK,EAAE;gCACL,WAAW,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK;gCACrC,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM;6BACxC;yBACF,CAAC,CAAA;oBACJ,CAAC,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBAC1C,KAAK,EAAE,CAAA;gBACP,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;YAC3B,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;CACF"}

package/dist/types.d.ts

@@ -1,6 +1,44 @@
 /**
  * Types for @skelm/pi - Pi coding agent backend
  */
+export interface PiSdkBackendOptions {
+    /** Backend id (default: 'pi-sdk') */
+    id?: string;
+    /** Human-readable label */
+    label?: string;
+    /** Working directory for pi's project-local discovery */
+    cwd?: string;
+    /** Request timeout in ms (default: 300_000 = 5 min) */
+    timeout?: number;
+    /**
+     * Maximum simultaneous pi sessions. Defaults to 4. Set to 0 for unlimited.
+     * Excess calls are queued until a slot opens.
+     */
+    maxConcurrent?: number;
+    /**
+     * Replace pi's coding-agent system prompt with a custom base.
+     * When omitted, pi's default prompt is kept and req.system / skills are
+     * appended after it.
+     */
+    systemPrompt?: string;
+    /**
+     * Disable pi's extension loading from .pi/extensions/.
+     * Default: true — extensions can expand the tool surface in ways skelm
+     * cannot audit; disabled by default for predictable sandboxing.
+     */
+    noExtensions?: boolean;
+    /**
+     * Disable pi's built-in skill loading from .pi/skills/.
+     * Default: true — skelm injects skills itself; loading pi's own skills
+     * would cause duplicates.
+     */
+    noSkills?: boolean;
+    /**
+     * Disable pi's cwd context file discovery (AGENTS.md, .pi/context/).
+     * Default: false — project context files are useful and safe.
+     */
+    noContextFiles?: boolean;
+}
 export interface PiBackendOptions {
     /** Backend id (default: 'pi') */
     id?: string;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,iCAAiC;IACjC,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,2BAA2B;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,2CAA2C;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,mBAAmB;IAClC,qCAAqC;IACrC,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,2BAA2B;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,yDAAyD;IACzD,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,iCAAiC;IACjC,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,2BAA2B;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,2CAA2C;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skelm/pi",
-  "version": "0.3.4",
+  "version": "0.3.5",
   "description": "Pi coding-agent backend for skelm with full permission enforcement",
   "license": "MIT",
   "author": "Scott Glover <scottgl@gmail.com>",
@@ -44,12 +44,18 @@
     "test:watch": "vitest",
     "clean": "rm -rf dist"
   },
-  "dependencies": {},
   "peerDependencies": {
-    "@skelm/core": "^0.3.4"
+    "@mariozechner/pi-coding-agent": ">=0.73.0",
+    "@skelm/core": "^0.3.5"
+  },
+  "peerDependenciesMeta": {
+    "@mariozechner/pi-coding-agent": {
+      "optional": true
+    }
   },
   "devDependencies": {
-    "@skelm/core": "^0.3.4",
+    "@mariozechner/pi-coding-agent": "^0.73.0",
+    "@skelm/core": "^0.3.5",
     "@types/node": "^20.10.0",
     "typescript": "^5.3.0",
     "vitest": "^1.0.0"