@themoltnet/pi-runtime 0.13.1 → 0.14.1

package/dist/index.d.ts

@@ -31,7 +31,7 @@ import { LoadSkillsResult } from '@earendil-works/pi-coding-agent';
 import { LsOperations } from '@earendil-works/pi-coding-agent';
 import { ManagedVm } from '@themoltnet/sandbox-gondolin';
 import { Model } from '@earendil-works/pi-ai';
-import { ModelRegistry } from '@earendil-works/pi-coding-agent';
+import { ModelRuntime } from '@earendil-works/pi-coding-agent';
 import { prepareBrokeredHttpSecrets } from '@themoltnet/sandbox-gondolin';
 import { Readable } from 'node:stream';
 import { ReadOperations } from '@earendil-works/pi-coding-agent';
@@ -158,8 +158,8 @@ declare interface BuildAgentSessionArgs {
     piAuthDir: string;
     /** Resolved pi model handle (provider + model id). */
     modelHandle: Model<Api>;
-    /** Registry that resolved modelHandle, including custom providers/auth. */
-    modelRegistry?: ModelRegistry;
+    /** Runtime that resolved modelHandle, including custom providers/auth. */
+    modelRuntime?: ModelRuntime;
     /** Optional runtime-profile thinking/reasoning level applied at session start. */
     thinkingLevel?: PiThinkingLevel | null;
     /** Optional runtime-profile sampling temperature applied to provider requests. */
@@ -306,6 +306,7 @@ export declare function createPiOtelExtension(options?: PiOtelOptions): (pi: Ext
 
 export declare function createPiRetryTriage(options: {
     model: Model<Api>;
+    modelRuntime?: ModelRuntime;
     thinkingLevel?: PiRetryTriageThinkingLevel | null;
     piAgentDir: string;
     timeoutMs?: number;
@@ -335,8 +336,8 @@ export declare interface CreateSubagentToolArgs {
     piAuthDir: string;
     /** Resolved pi model handle — subagents share it. */
     modelHandle: Model<Api>;
-    /** Registry that resolved modelHandle — subagents share it. */
-    modelRegistry?: ModelRegistry;
+    /** Runtime that resolved modelHandle — subagents share it. */
+    modelRuntime?: ModelRuntime;
     /** Runtime-profile thinking/reasoning level — subagents inherit it. */
     thinkingLevel?: PiThinkingLevel | null;
     /** Runtime-profile sampling temperature — subagents inherit it. */
@@ -1298,6 +1299,16 @@ export declare interface ResolvedGondolinTemplate {
 
 export declare function resolveHostExecBaseEnv(agentEnv: Readonly<Record<string, string | undefined>>): Set<string>;
 
+/**
+ * Resolve the exact runtime-profile model through Pi's custom-model registry.
+ *
+ * `getModel()` from pi-ai only knows generated built-in models. Runtime
+ * profiles commonly select providers declared in the active Pi directory's
+ * models.json, so an unresolved lookup must fail closed rather than letting
+ * createAgentSession silently choose the default from settings.json.
+ */
+export declare function resolveRuntimeProfileModel(piAuthDir: string, provider: string, modelId: string, runtimeProfileId?: string): Promise<RuntimeModelSelection>;
+
 /**
  * Resolve the session's tool policy at start-up.
  *
@@ -1399,6 +1410,15 @@ declare interface RuntimeInstructorToolPolicy {
     degraded: boolean;
 }
 
+export declare interface RuntimeModelSelection {
+    modelHandle: Model<Api>;
+    modelRuntime: ModelRuntime;
+}
+
+export declare class RuntimeProfileModelResolutionError extends Error {
+    constructor(message: string);
+}
+
 export { SandboxConfig }
 
 /** The resolved allow-set + enforcement mode for a runtime session. */

package/dist/index.js

@@ -9,7 +9,7 @@ import { mkdir, realpath, stat } from "node:fs/promises";
 import path, { isAbsolute, join, relative, resolve, sep } from "node:path";
 import { pipeline } from "node:stream/promises";
 import { Type as Type$1 } from "@earendil-works/pi-ai";
-import { AuthStorage, DEFAULT_MAX_BYTES, DefaultResourceLoader, ModelRegistry, SessionManager, createAgentSession, createBashToolDefinition, createEditToolDefinition, createFindToolDefinition, createGrepToolDefinition, createLsToolDefinition, createReadToolDefinition, createSyntheticSourceInfo, createWriteToolDefinition, defineTool, formatSize, parseFrontmatter, truncateHead, truncateLine } from "@earendil-works/pi-coding-agent";
+import { DEFAULT_MAX_BYTES, DefaultResourceLoader, ModelRuntime, SessionManager, createAgentSession, createBashToolDefinition, createEditToolDefinition, createFindToolDefinition, createGrepToolDefinition, createLsToolDefinition, createReadToolDefinition, createSyntheticSourceInfo, createWriteToolDefinition, defineTool, formatSize, parseFrontmatter, truncateHead, truncateLine } from "@earendil-works/pi-coding-agent";
 import { sha256 } from "@noble/hashes/sha2";
 import { base32 } from "multiformats/bases/base32";
 import { CID } from "multiformats/cid";
@@ -1506,7 +1506,7 @@ async function buildAgentSession(args) {
 		agentDir: args.piAuthDir,
 		cwd: args.cwdPath,
 		model: args.modelHandle,
-		...args.modelRegistry ? { modelRegistry: args.modelRegistry } : {},
+		...args.modelRuntime ? { modelRuntime: args.modelRuntime } : {},
 		thinkingLevel: args.thinkingLevel ?? void 0,
 		tools: args.tools,
 		customTools: args.customTools,
@@ -4281,20 +4281,22 @@ var RuntimeProfileModelResolutionError = class extends Error {
 * models.json, so an unresolved lookup must fail closed rather than letting
 * createAgentSession silently choose the default from settings.json.
 */
-function resolveRuntimeProfileModel(piAuthDir, provider, modelId, runtimeProfileId) {
-	const authStorage = AuthStorage.create(join(piAuthDir, "auth.json"));
+async function resolveRuntimeProfileModel(piAuthDir, provider, modelId, runtimeProfileId) {
 	const modelsPath = join(piAuthDir, "models.json");
-	const modelRegistry = ModelRegistry.create(authStorage, modelsPath);
-	const modelHandle = modelRegistry.find(provider, modelId);
+	const modelRuntime = await ModelRuntime.create({
+		authPath: join(piAuthDir, "auth.json"),
+		modelsPath
+	});
+	const modelHandle = modelRuntime.getModel(provider, modelId);
 	if (!modelHandle) {
-		const registryError = modelRegistry.getError();
+		const registryError = modelRuntime.getError();
 		const detail = registryError ? ` Registry error: ${registryError}` : "";
-		const alternatives = modelRegistry.getAvailable().slice(0, 8).map((model) => `${model.provider}/${model.id}`);
+		const alternatives = modelRuntime.getModels().slice(0, 8).map((model) => `${model.provider}/${model.id}`);
 		throw new RuntimeProfileModelResolutionError(`${runtimeProfileId ? `Runtime profile "${runtimeProfileId}"` : "Runtime profile"} model "${provider}/${modelId}" was not found in ${modelsPath}; refusing Pi default-model fallback.` + (alternatives.length > 0 ? ` Available models include: ${alternatives.join(", ")}.` : "") + detail);
 	}
 	return {
 		modelHandle,
-		modelRegistry
+		modelRuntime
 	};
 }
 //#endregion
@@ -4346,6 +4348,7 @@ function createPiRetryTriage(options) {
 			agentDir: options.piAgentDir,
 			cwd,
 			model: options.model,
+			...options.modelRuntime ? { modelRuntime: options.modelRuntime } : {},
 			thinkingLevel: options.thinkingLevel ?? void 0,
 			customTools: [capture.tool],
 			sessionManager,
@@ -4876,7 +4879,7 @@ function createSubagentTool(args) {
 					cwdPath: args.cwdPath ?? args.mountPath,
 					piAuthDir: args.piAuthDir,
 					modelHandle: args.modelHandle,
-					modelRegistry: args.modelRegistry,
+					modelRuntime: args.modelRuntime,
 					thinkingLevel: args.thinkingLevel,
 					temperature: args.temperature,
 					topP: args.topP,
@@ -6359,7 +6362,7 @@ async function executePiTask(claimedTask, reporter, opts) {
 				})
 			});
 			const piAuthDir = resolvePiCodingAgentDir();
-			const { modelHandle, modelRegistry } = resolveRuntimeProfileModel(piAuthDir, opts.provider, opts.model, opts.runtimeProfileId);
+			const { modelHandle, modelRuntime } = await resolveRuntimeProfileModel(piAuthDir, opts.provider, opts.model, opts.runtimeProfileId);
 			const injectedSkills = injectedContext.skills;
 			const toolPolicyExtensions = [];
 			let resolvedToolPolicy;
@@ -6513,7 +6516,7 @@ async function executePiTask(claimedTask, reporter, opts) {
 					cwdPath,
 					piAuthDir,
 					modelHandle,
-					modelRegistry,
+					modelRuntime,
 					thinkingLevel: opts.thinkingLevel,
 					temperature: opts.temperature,
 					topP: opts.topP,
@@ -6550,7 +6553,7 @@ async function executePiTask(claimedTask, reporter, opts) {
 				cwdPath,
 				piAuthDir,
 				modelHandle,
-				modelRegistry,
+				modelRuntime,
 				thinkingLevel: opts.thinkingLevel,
 				temperature: opts.temperature,
 				topP: opts.topP,
@@ -7477,4 +7480,4 @@ function describeToolErrorMessage(result) {
 	}
 }
 //#endregion
-export { BrokeredHttpSecretBoundaryError, DEFAULT_BROKERED_HTTP_SECRET_RESOLUTION_TIMEOUT_MS, GONDOLIN_BASE_EXECUTABLES, GONDOLIN_TOOL_NAMES, GUEST_ALLOWED_SIGNERS_PATH, GUEST_GITCONFIG_PATH, GUEST_SIGNER_SOCKET, GondolinVmRetiredError, GuestEnvironmentBoundaryError, HOST_EXEC_DEFAULT_BASE_ENV, MOLTNET_TOOL_NAMES, PI_EXECUTOR_MANIFEST_VERSION, PI_RUNTIME_DEFINITION_VERSION, PiBrokeredHttpSecretResolutionError, activateAgentEnv, agentSigningCapability, assertGuestEnvironmentBoundary, assertHostAuthenticatedGuestEnvironment, buildAgentSession, buildPiExecutorManifest, buildRuntimeKernel, buildWorkspaceMountInstructions, createGondolinBashOps, createGondolinEditOps, createGondolinFindOps, createGondolinLsOps, createGondolinReadOps, createGondolinToolDefinitions, createGondolinToolLifecycle, createGondolinWriteOps, createMoltNetTools, createPiOtelExtension, createPiRetryTriage, createPiTaskExecutor, createSubagentTool, createToolPolicyExtension, decideForEvent, decideToolCall, defineGondolinTemplate, definePiBrokeredHttpSecret, definePiExtension, definePiRuntime, definePiTool, enabledPiToolNames, ensureSnapshot, executeGondolinGrep, executePiTask, filterModelVisibleTools, findMainWorktree, guardGondolinToolDefinitions, injectRuntimeContext as injectTaskContext, isKernelTool, isResolvedPathInsideRoot, isToolVisible, loadCredentials, materializePiBrokeredHttpSecrets, materializePiExtensions, materializePiTools, normalizeRetryTriageResult, prepareBrokeredHttpSecrets, redactRetryTriageSecrets, resolveHostExecBaseEnv, resolveSessionToolPolicy, resolveTaskWorktreePath, resumeVm, toGuestPath };
+export { BrokeredHttpSecretBoundaryError, DEFAULT_BROKERED_HTTP_SECRET_RESOLUTION_TIMEOUT_MS, GONDOLIN_BASE_EXECUTABLES, GONDOLIN_TOOL_NAMES, GUEST_ALLOWED_SIGNERS_PATH, GUEST_GITCONFIG_PATH, GUEST_SIGNER_SOCKET, GondolinVmRetiredError, GuestEnvironmentBoundaryError, HOST_EXEC_DEFAULT_BASE_ENV, MOLTNET_TOOL_NAMES, PI_EXECUTOR_MANIFEST_VERSION, PI_RUNTIME_DEFINITION_VERSION, PiBrokeredHttpSecretResolutionError, RuntimeProfileModelResolutionError, activateAgentEnv, agentSigningCapability, assertGuestEnvironmentBoundary, assertHostAuthenticatedGuestEnvironment, buildAgentSession, buildPiExecutorManifest, buildRuntimeKernel, buildWorkspaceMountInstructions, createGondolinBashOps, createGondolinEditOps, createGondolinFindOps, createGondolinLsOps, createGondolinReadOps, createGondolinToolDefinitions, createGondolinToolLifecycle, createGondolinWriteOps, createMoltNetTools, createPiOtelExtension, createPiRetryTriage, createPiTaskExecutor, createSubagentTool, createToolPolicyExtension, decideForEvent, decideToolCall, defineGondolinTemplate, definePiBrokeredHttpSecret, definePiExtension, definePiRuntime, definePiTool, enabledPiToolNames, ensureSnapshot, executeGondolinGrep, executePiTask, filterModelVisibleTools, findMainWorktree, guardGondolinToolDefinitions, injectRuntimeContext as injectTaskContext, isKernelTool, isResolvedPathInsideRoot, isToolVisible, loadCredentials, materializePiBrokeredHttpSecrets, materializePiExtensions, materializePiTools, normalizeRetryTriageResult, prepareBrokeredHttpSecrets, redactRetryTriageSecrets, resolveHostExecBaseEnv, resolveRuntimeProfileModel, resolveSessionToolPolicy, resolveTaskWorktreePath, resumeVm, toGuestPath };

package/dist/pi-config.d.ts

@@ -0,0 +1,53 @@
+export declare interface WriteMultiProviderPiConfigInput extends WritePiConfigBase {
+    /** Provider registry keyed by Pi provider id. */
+    providers: Readonly<Record<string, WritePiProviderInput>>;
+    provider?: never;
+    model?: never;
+    baseUrl?: never;
+    apiKeyEnvRef?: never;
+}
+
+/**
+ * Write Pi `models.json` + `settings.json`. Eval callers use the single-provider
+ * form so scores stay attributable; serve callers may supply many providers.
+ */
+export declare function writePiConfig(input: WritePiConfigInput): void;
+
+declare interface WritePiConfigBase {
+    /** `PI_CODING_AGENT_DIR` — where `models.json` + `settings.json` land. */
+    piDir: string;
+    /** Overrides or extends the generated settings document. */
+    settings?: Readonly<Record<string, unknown>>;
+}
+
+export declare type WritePiConfigInput = WriteSingleProviderPiConfigInput | WriteMultiProviderPiConfigInput;
+
+export declare interface WritePiProviderInput {
+    /** Pi provider API kind, e.g. `openai-completions`. */
+    api: string;
+    /** Provider base URL. */
+    baseUrl: string;
+    /** Model ids exposed by this provider. */
+    models: readonly string[];
+    /** Optional Pi environment placeholder, e.g. `$OLLAMA_API_KEY`. */
+    apiKeyEnvRef?: string;
+}
+
+export declare interface WriteSingleProviderPiConfigInput extends WritePiConfigBase {
+    /** Pi provider id, e.g. `ollama-cloud`. */
+    provider: string;
+    /** Pi model id, e.g. `qwen3-coder:480b-cloud`. */
+    model: string;
+    /**
+     * OpenAI-completions base URL for the provider. Defaults to Ollama Cloud.
+     */
+    baseUrl?: string;
+    /**
+     * Env-var reference (with `$`) holding the provider API key. Defaults to
+     * `$OLLAMA_API_KEY`.
+     */
+    apiKeyEnvRef?: string;
+    providers?: never;
+}
+
+export { }

package/dist/pi-config.js

@@ -0,0 +1,38 @@
+import { writeFileSync } from "node:fs";
+import { join } from "node:path";
+//#region src/pi-config.ts
+/** Node-only writer used by daemon serve runs and live evals. */
+/**
+* Write Pi `models.json` + `settings.json`. Eval callers use the single-provider
+* form so scores stay attributable; serve callers may supply many providers.
+*/
+function writePiConfig(input) {
+	const multiProvider = "providers" in input && input.providers !== void 0;
+	const providers = multiProvider ? Object.fromEntries(Object.entries(input.providers).map(([id, provider]) => [id, {
+		api: provider.api,
+		...provider.apiKeyEnvRef ? { apiKey: provider.apiKeyEnvRef } : {},
+		baseUrl: provider.baseUrl,
+		models: provider.models.map((id) => ({ id }))
+	}])) : { [input.provider]: {
+		api: "openai-completions",
+		apiKey: input.apiKeyEnvRef ?? "$OLLAMA_API_KEY",
+		baseUrl: input.baseUrl ?? "https://ollama.com/v1",
+		models: [{ id: input.model }]
+	} };
+	writeFileSync(join(input.piDir, "models.json"), JSON.stringify({ providers }, null, 2) + "\n", "utf8");
+	const defaultSettings = multiProvider ? { enableInstallTelemetry: false } : {
+		defaultModel: input.model,
+		defaultProvider: input.provider,
+		enableInstallTelemetry: false,
+		enabledModels: [`${input.provider}/${input.model}`],
+		packages: ["npm:@themoltnet/pi-extension"],
+		transport: "sse",
+		treeFilterMode: "default"
+	};
+	writeFileSync(join(input.piDir, "settings.json"), JSON.stringify({
+		...defaultSettings,
+		...input.settings
+	}, null, 2) + "\n", "utf8");
+}
+//#endregion
+export { writePiConfig };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@themoltnet/pi-runtime",
-  "version": "0.13.1",
+  "version": "0.14.1",
   "license": "MIT",
   "type": "module",
   "description": "Composable MoltNet runtime kernel for Pi agents in Gondolin VMs",
@@ -16,6 +16,10 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
+    },
+    "./pi-config": {
+      "types": "./dist/pi-config.d.ts",
+      "import": "./dist/pi-config.js"
     }
   },
   "files": [
@@ -31,19 +35,19 @@
     "@opentelemetry/api": "^1.9.1",
     "multiformats": "^13.3.0",
     "typebox": "^1.2.8",
-    "@themoltnet/os-keyring": "0.3.0",
-    "@themoltnet/sdk": "0.139.0",
+    "@themoltnet/agent-runtime": "0.45.2",
     "@themoltnet/sandbox-gondolin": "0.5.1",
-    "@themoltnet/shell-command-analyzer": "0.3.0",
-    "@themoltnet/agent-runtime": "0.45.1"
+    "@themoltnet/os-keyring": "0.3.0",
+    "@themoltnet/sdk": "0.140.0",
+    "@themoltnet/shell-command-analyzer": "0.3.0"
   },
   "peerDependencies": {
-    "@earendil-works/pi-ai": "0.79.4",
-    "@earendil-works/pi-coding-agent": "0.79.4"
+    "@earendil-works/pi-ai": "0.84.4",
+    "@earendil-works/pi-coding-agent": "0.84.4"
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "0.79.4",
-    "@earendil-works/pi-coding-agent": "0.79.4",
+    "@earendil-works/pi-ai": "0.84.4",
+    "@earendil-works/pi-coding-agent": "0.84.4",
     "@opentelemetry/sdk-metrics": "^2.5.1",
     "@opentelemetry/sdk-trace-base": "^2.5.1",
     "@types/node": "^22.19.0",
@@ -52,10 +56,10 @@
     "vite": "^8.0.0",
     "vite-plugin-dts": "^4.5.4",
     "vitest": "^3.0.0",
-    "@moltnet/runtime-profiles": "0.1.0",
     "@moltnet/crypto-service": "0.1.0",
-    "@moltnet/tasks": "0.1.0",
-    "@moltnet/models": "0.1.0"
+    "@moltnet/models": "0.1.0",
+    "@moltnet/runtime-profiles": "0.1.0",
+    "@moltnet/tasks": "0.1.0"
   },
   "engines": {
     "node": ">=24"
@@ -77,6 +81,7 @@
   },
   "scripts": {
     "check:pack": "tsx ../../tools/src/check-pack.ts --package . && pnpm run smoke:pack",
-    "smoke:pack": "node scripts/smoke-packed-analyzer.mjs"
+    "smoke:pack": "node scripts/smoke-packed-analyzer.mjs",
+    "test": "vitest run --passWithNoTests"
   }
 }