@vibesdotdev/integrations-pi 0.0.0-stage → 1.0.0-rc.0

package/LICENSE

@@ -0,0 +1,126 @@
+Business Source License 1.1
+
+Parameters
+
+Licensor:             VIBES DEV LLC
+Licensed Work:        @vibesdotdev/integrations-pi
+                      The Licensed Work is (c) 2026 VIBES DEV LLC.
+Additional Use Grant: In this grant, "Vibes Platform" means the hosted services VIBES DEV LLC
+                      operates at vibes.dev and its subdomains.
+
+                      You may make production use of the Licensed Work, including commercial
+                      use, subject to the limits below. Permitted production use includes:
+                      building, operating and selling your own applications, agents and services
+                      on or with the Vibes Platform; self-hosting the Licensed Work for use inside
+                      your own organization; and providing consulting, integration or development
+                      services to clients who build on the Vibes Platform.
+
+                      The production use permitted above does not include use that:
+
+                      (a) offers third parties a hosted, managed or embedded service that
+                          substitutes for the Vibes Platform or a material part of it (including
+                          agent hosting; fleet, sandbox or container provisioning; package
+                          registry; source hosting and continuous integration; and managed AI,
+                          storage, secrets or messaging), where the Licensed Work provides a
+                          material part of that service's value and that service earns more than
+                          US$1,000,000 in gross revenue in any twelve-month period;
+                      (b) sells, rents, sublicenses or white-labels the Licensed Work, or access
+                          to Vibes Platform functionality, as a product in its own right;
+                      (c) removes, disables or works around entitlement checks, usage metering,
+                          quotas or plan limits, or reaches Vibes Platform features the user's
+                          account is not entitled to;
+                      (d) scrapes, bulk-exports or harvests data or content from the Vibes
+                          Platform or its users other than through documented interfaces and
+                          within their terms, or uses outputs or data obtained from the Vibes
+                          Platform to train or improve a product that competes with it;
+                      (e) violates applicable law, infringes anyone's rights, commits fraud or
+                          deception, conducts unlawful surveillance or harassment, distributes
+                          malware, or accesses systems without authorization; or
+                      (f) violates applicable antitrust or competition law.
+
+                      A written permission from the Licensor extends this grant.
+Change Date:          Four years from the date the Licensed Work is published.
+Change License:       MIT
+
+For information about alternative licensing arrangements for the Licensed Work,
+contact VIBES DEV LLC through https://vibes.dev.
+
+Notice
+
+The Business Source License (this document, or the "License") is not an Open
+Source license. However, the Licensed Work will eventually be made available
+under an Open Source License, as stated in this License.
+
+-----------------------------------------------------------------------------
+
+Business Source License 1.1
+
+License text copyright © 2017 MariaDB Corporation Ab, All Rights Reserved.
+"Business Source License" is a trademark of MariaDB Corporation Ab.
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative
+works, redistribute, and make non-production use of the Licensed Work. The
+Licensor may make an Additional Use Grant, above, permitting limited
+production use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly
+available distribution of a specific version of the Licensed Work under this
+License, whichever comes first, the Licensor hereby grants you rights under
+the terms of the Change License, and the rights granted in the paragraph
+above terminate.
+
+If your use of the Licensed Work does not comply with the requirements
+currently in effect as described in this License, you must purchase a
+commercial license from the Licensor, its affiliated entities, or authorized
+resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative works
+of the Licensed Work, are subject to this License. This License applies
+separately for each version of the Licensed Work and the Change Date may vary
+for each version of the Licensed Work released by Licensor.
+
+You must conspicuously display this License on each original or modified copy
+of the Licensed Work. If you receive the Licensed Work in original or
+modified form from a third party, the terms and conditions set forth in this
+License apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will automatically
+terminate your rights under this License for the current and all other
+versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of
+Licensor or its affiliates (provided that you may use a trademark or logo of
+Licensor as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
+AN “AS IS” BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
+EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
+TITLE.
+
+MariaDB hereby grants you permission to use this License’s text to license
+your works, and to refer to it using the trademark “Business Source License”,
+as long as you comply with the Covenants of Licensor below.
+
+Covenants of Licensor
+
+In consideration of the right to use this License’s text and the “Business
+Source License” name and trademark, Licensor covenants to MariaDB, and to all
+other recipients of the licensed work to be provided by Licensor:
+
+1. To specify as the Change License the GPL Version 2.0 or any later version,
+   or a license that is compatible with GPL Version 2.0 or a later version,
+   where “compatible” means that software provided under the Change License can
+   be included in a program with software provided under GPL Version 2.0 or a
+   later version. Licensor may specify additional Change Licenses without
+   limitation.
+
+2. To either: (a) specify an additional grant of rights to use that does not
+   impose any additional restriction on the right granted in this License, as
+   the Additional Use Grant; or (b) insert the text “None”.
+
+3. To specify a Change Date.
+
+4. Not to modify this License in any other way.

package/REFERENCE.md

@@ -0,0 +1,284 @@
+# Pi extension reference
+
+> **Scope.** This document describes what **Pi** can express, read from Pi's own
+> extension documentation and the `ExtensionAPI` declaration it names. The Vibes
+> side — what this package projects, and the decisions behind it — is
+> [`./src/extension/SPEC.md`](./src/extension/SPEC.md). The runtime side is the
+> workspace's `RUNTIME-REFERENCE.md`, regenerated by `vibes runtime export` from
+> the workspace root (this package's checkout is four levels below it, so the link
+> is not relative here). Host census across every harness:
+> [`external/REFERENCE.md`](../../../framework/external/REFERENCE.md).
+
+What a Vibes extension can do inside Pi, per Pi's own extension documentation
+and the `ExtensionAPI` declaration in
+`packages/coding-agent/src/core/extensions/types.ts`.
+
+Source of truth: [Pi extensions documentation][pi-ext] and the `types.ts` it
+names. This document describes **the host's** capabilities. What Vibes maps onto
+them is [`./src/extension/SPEC.md`](./src/extension/SPEC.md); what Vibes can
+offer is the workspace's `RUNTIME-REFERENCE.md`.
+
+Compatibility target: Pi 0.85.x, whose TUI primitives are vendored as
+`@earendil-works/pi-tui@0.85.1`.
+
+[pi-ext]: https://github.com/badlogic/pi-mono/blob/main/packages/coding-agent/docs/extensions.md
+
+## An extension is a default-exported factory
+
+An extension module exports a default factory receiving `ExtensionAPI`. It may
+be synchronous or asynchronous; Pi awaits an async factory before startup
+continues, so an async factory is the right place to fetch configuration or
+register providers needed during startup.
+
+```ts
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+export default function (pi: ExtensionAPI) {
+  pi.registerCommand("hello", {
+    description: "Show a greeting",
+    handler: async (name, ctx) => { ctx.ui.notify(`Hello, ${name || "world"}!`, "info"); },
+  });
+}
+```
+
+Pi loads `.ts` directly through `jiti`; no build step is required for a local
+extension. Extensions live in a user or project extensions directory, as a single
+file or a directory with an `index.ts` entry point.
+
+**Lifecycle.** Do not start processes, sockets, watchers or timers in the factory:
+some invocations load extensions without starting a session. Start long-lived
+resources from `session_start`, and release them in an idempotent
+`session_shutdown`. A run proceeds `input` and `before_agent_start` → model,
+message and tool events → `agent_end`; retries, compaction or queued work may
+continue afterwards.
+
+## `ExtensionAPI`: everything an extension can call
+
+### Events
+
+`pi.on(event, handler)` returns an unsubscribe function. Handlers run in
+extension load and registration order. Some events notify; others transform data,
+replace results, or cancel an operation.
+
+**Startup and resources**
+
+| Event | Payload | Can do |
+| --- | --- | --- |
+| `project_trust` | `{ cwd }` | Decide trust: `yes`, `no`, `undecided`, optionally remember. Personal and explicit CLI extensions only; runs before project extensions load |
+| `resources_discover` | `{ cwd, reason }` | Contribute `skillPaths`, `promptPaths`, `themePaths` |
+| `mcp_servers_change` | `{ servers }` | Observe servers extensions registered |
+
+**Session**
+
+| Event | Payload | Can do |
+| --- | --- | --- |
+| `session_start` | `{ reason: startup\|reload\|new\|resume\|fork, previousSessionFile? }` | Bind a session; the point where a runtime boots |
+| `session_info_changed` | `{ name }` | Observe the session name |
+| `session_before_switch` | `{ reason, targetSessionFile? }` | Cancel the switch |
+| `session_before_fork` | `{ entryId, position }` | Cancel the fork |
+| `session_before_compact` | `{ preparation, branchEntries, reason, willRetry, signal }` | Cancel or customize compaction |
+| `session_compact` | `{ compactionEntry, fromExtension, reason, willRetry }` | Observe success |
+| `session_compact_failed` | `{ reason, errorMessage?, aborted, willRetry, fromExtension }` | Observe failure |
+| `session_shutdown` | `{ reason: quit\|reload\|new\|resume\|fork, targetSessionFile? }` | Release resources; idempotent |
+| `session_tree` | `{ newLeafId, oldLeafId, summaryEntry?, fromExtension? }` | Observe tree navigation |
+
+**Agent and turn**
+
+| Event | Payload | Can do |
+| --- | --- | --- |
+| `context` | `{ messages }` | Transform conversation messages. Pi restores prompt and tool state afterwards |
+| `context_with_system` | `{ messages }` | Own the **complete** transcript, system messages included. Keep a system message at index 0 |
+| `before_agent_start` | `{ prompt, images?, systemPrompt, systemPromptOptions }` | Mutate prompt sections; return `{ message? }`, or `{ systemPrompt }` to replace the whole prompt for that run |
+| `agent_start` / `agent_end` | `{}` / `{ messages }` | Observe the loop |
+| `agent_before_settle` | boundary state | Append entries and request **one** continuation by returning `{ entries?, continue: true }`. Guard against loops |
+| `agent_settled` | `{ aborted }` | Final, notification-only |
+| `turn_start` | `{ turnIndex, timestamp }` | Observe turn start |
+| `turn_end` | `{ turnIndex, message, toolResults, messageEntryId, toolResultEntryIds }` | Same boundary shape as `agent_before_settle` |
+| `ui_prompt_start` / `ui_prompt_end` | `{ reason, kind, title? }` | Observe blocking UI |
+
+**Message and tool execution**
+
+| Event | Payload | Can do |
+| --- | --- | --- |
+| `message_start` / `message_update` / `message_end` | message | Observe; `message_end` may **replace** the finalized message, keeping its role |
+| `tool_execution_start` | `{ toolCallId, toolName, args, parentToolCallId? }` | Observe |
+| `tool_execution_update` | `{ toolCallId, toolName, partialResult, parentToolCallId? }` | Observe partial output |
+| `tool_execution_end` | `{ toolCallId, toolName, result, isError, durationMs?, parentToolCallId? }` | Observe completion |
+| `tool_call` | typed per built-in, or `{ toolName, input }` | Mutate `event.input` **in place**, or block by returning `{ block: true, reason? }`. `terminate: true` skips follow-up |
+| `tool_result` | typed per built-in | Return `{ content?, details?, structuredContent?, isError?, usage? }`. Redacting `content` should replace `structuredContent` too |
+
+**Model and provider**
+
+| Event | Payload | Can do |
+| --- | --- | --- |
+| `model_select` | `{ model, previousModel, source: set\|cycle\|restore }` | Observe |
+| `thinking_level_select` | `{ level, previousLevel }` | Observe |
+| `before_provider_request` | `{ payload }` | Replace the provider payload |
+| `before_provider_headers` | `{ headers }` | Mutate headers **in place**; `null` deletes a header. Return value ignored |
+| `after_provider_response` | `{ status, headers }` | Observe |
+| `provider_stream_event` | `{ provider, api, model, data }` | Observe each parsed stream event before normalization. Read-only, awaited in stream order, not persisted |
+
+**User input and shell**
+
+| Event | Payload | Can do |
+| --- | --- | --- |
+| `user_bash` | `{ command, excludeFromContext, cwd }` | Handle: return `{ operations }` to execute, or `{ result }` to answer. `undefined` passes through |
+| `input` | `{ text, images?, source, streamingBehavior? }` | Return `{ action: 'continue' \| 'transform' \| 'handled' }` |
+| `cache_warming_decision` | cache warmer event | Override with `{ action: 'warm' }` or `{ action: 'stop' }`; last handler wins |
+
+### Registration
+
+| Method | Signature | What it does |
+| --- | --- | --- |
+| `registerTool` | `(tool: ToolDefinition) => void` | Add a model-callable tool |
+| `registerCommand` | `(name, { description?, handler }) => void` | Add a `/` command |
+| `registerShortcut` | `(KeyId, { description?, handler }) => void` | Add a keyboard shortcut |
+| `registerFlag` | `(name, { type: 'boolean' \| 'string', default?, description? }) => void` | Add a CLI flag |
+| `getFlag` | `(name) => boolean \| string \| undefined` | Read a registered flag |
+| `registerProvider` | `(Provider)` or `(name, ProviderConfig)` | Add a model provider |
+| `unregisterProvider` | `(name) => void` | Remove one |
+| `registerVirtualModel` | `(definition)` | Add a model router |
+| `unregisterVirtualModel` | `(provider, id) => void` | Remove one |
+| `registerMcpServer` | `(name, McpServerConfig) => void` | Add an MCP server |
+| `unregisterMcpServer` | `(name) => void` | Remove one and close it |
+| `getMcpServers` | `() => RegisteredMcpServer[]` | List servers extensions registered |
+| `registerMessageRenderer` | `(customType, renderer) => void` | Render a `CustomMessageEntry` |
+| `registerEntryRenderer` | `(customType, renderer) => void` | Render a `CustomEntry` (not sent to the model) |
+| `registerMarkdownTransformer` | `(transformer) => void` | Transform user/assistant markdown before rendering |
+| `registerToolRenderer` | `(resolver) => void` | Choose how tool calls are drawn, including unregistered tools |
+
+### Session control
+
+| Method | Signature | What it does |
+| --- | --- | --- |
+| `getActiveTools` | `() => string[]` | Names declared to the model |
+| `setActiveTools` | `(names) => void` | Change the active set |
+| `getAllTools` | `() => ToolInfo[]` | Every configured tool, with exposure, namespace, annotations |
+| `getCommands` | `() => SlashCommandInfo[]` | Slash commands in this session |
+| `getSettings` | `() => Settings` | Effective merged settings |
+| `setModel` | `(model) => Promise<boolean>` | Switch model |
+| `getThinkingLevel` / `setThinkingLevel` | | Read or set thinking level |
+| `setSessionName` / `getSessionName` | `(name?) => void / string \| undefined` | Session display name |
+| `setLabel` | `(entryId, label \| undefined) => void` | Bookmark an entry |
+
+### Messages and state
+
+| Method | Signature | What it does |
+| --- | --- | --- |
+| `sendUserMessage` | `(content, { deliverAs?, expandPromptTemplates? })` | Send a user message to the session |
+| `sendMessage` | `(message, { triggerTurn?, deliverAs? })` | Send a custom message |
+| `appendEntry` | `(entry)` | Persist state that is **not** sent to the model |
+| `exec` | `(command, args, options?) => Promise<ExecResult>` | Execute a shell command |
+| `events` | shared bus | Communicate with other extensions |
+
+Where state belongs: branch-following tool state goes in the tool result's
+`details`; durable data excluded from context goes through `appendEntry`;
+model-visible custom content goes through `sendMessage`; anything outside one
+session goes to external storage.
+
+## Tool definitions
+
+```ts
+interface ToolDefinition<TParams, TDetails, TState> {
+  name: string; label: string; description: string;
+  promptSnippet?: string;          // one line in the "Available tools" prompt section
+  promptGuidelines?: string[];      // bullets appended when the tool is active
+  parameters: TParams;              // TypeBox schema
+  outputSchema?: TSchema;           // JSON Schema of structuredContent
+  constrainedSampling?: false | ConstrainedSamplingConfig;
+  renderShell?: "default" | "self";
+  exposure?: "direct" | "model-only" | "codemode" | "deferred" | "hidden";
+  namespace?: { name, description?, instructions? };
+  annotations?: { readOnlyHint?, destructiveHint?, idempotentHint?, openWorldHint? };
+  defaultActive?: boolean;
+  executionMode?: "sequential" | "parallel";
+  prepareArguments?: (args: unknown) => Static<TParams>;
+  prepareLoadout?: (loadout: ToolLoadout) => ToolLoadoutChanges | undefined;
+  execute(toolCallId, params, signal, onUpdate, ctx): Promise<AgentToolResult<TDetails>>;
+  renderCall?(args, theme, context): Component;
+  renderResult?(result, options, theme, context): Component;
+}
+```
+
+### Tool exposure — how the model reaches a tool
+
+| Exposure | Declared to the model | Callable by other tools | Activated on registration |
+| --- | --- | --- | --- |
+| `direct` (default) | while active | while active | yes |
+| `model-only` | while active | never | yes |
+| `codemode` | only if activated explicitly | always | no |
+| `deferred` | only if activated explicitly | always; **not** listed by codemode, findable via `tool_search` | no |
+| `hidden` | never | never | no |
+
+This is the mechanism that lets a Vibes projection register 127 tools without
+spending 127 tool schemas of prompt budget: register everything as `codemode`,
+activate only the discovery tools, and let `tool_search` add tools on demand.
+
+### Nested tool calls
+
+`ctx.executeTool(name, args, { signal?, onUpdate? })` runs another tool through
+the same validation, hooks and permission checks as a model-issued call. It
+never rejects for tool failure: unknown tools, validation errors, blocked calls
+and thrown errors all come back as `isError: true`. Nested calls do not appear
+in the transcript; a bounded `nestedCalls` record is kept on the calling tool's
+result.
+
+## Contexts
+
+`ExtensionContext` is available to every handler: `ui`, `mode`, `hasUI`, `cwd`,
+`sessionManager`, `modelRegistry`, `model`, `scopedModels`, `thinkingLevel`,
+`isIdle()`, `isProjectTrusted()`, `signal`, `abort()`, `hasPendingMessages()`,
+`shutdown()`, `getContextUsage()`, `compact()`, `getSystemPrompt()`.
+
+`ExtensionToolContext` adds `tools` and `executeTool`.
+`ExtensionCommandContext` adds `getSystemPromptOptions()`, `waitForIdle()`,
+`newSession()`, `fork()`, `navigateTree()`, `switchSession()`, `reload()`.
+
+The command-only operations are command-only because calling them from a
+lifecycle handler can deadlock the runtime.
+
+## UI
+
+`ctx.ui` provides: `select`, `confirm`, `input`, `editor`, `custom`, `notify`,
+`setStatus`, `setWorkingMessage`, `setWorkingVisible`, `setWorkingIndicator`,
+`setHiddenThinkingLabel`, `setWidget`, `setFooter`, `setHeader`, `setTitle`,
+`pasteToEditor`, `setEditorText`, `getEditorText`, `addAutocompleteProvider`,
+`setEditorComponent`, `getEditorComponent`, `theme`, `getAllThemes`,
+`getTheme`, `setTheme`, `getToolsExpanded`, `setToolsExpanded`, and
+`onTerminalInput`.
+
+Extensions load in four modes: `tui`, `rpc`, `json`, `print`. Only `tui` has the
+full terminal UI; `rpc` can forward supported dialogs but not custom components;
+`json` and `print` have no UI at all. Guard terminal-only behaviour with
+`ctx.mode === 'tui'` and use `ctx.hasUI` for what `tui` and `rpc` share.
+
+## What a Vibes runtime offers to map onto this
+
+| Vibes kind | Pi surface | Notes |
+| --- | --- | --- |
+| `tools/tool` | `registerTool` | One tool per descriptor; canonical id projected to a provider-safe name |
+| `cli/command` | `registerCommand` | One command per descriptor; the handler executes it in the runtime |
+| `prompts/manifest` | `before_agent_start` | Mutate prompt sections, or replace `systemPrompt` for the run |
+| `ai/provider` | `registerProvider`, `registerVirtualModel` | Provider identity and routing |
+| `ai/model` | `setModel`, `scopedModels` | Model selection, not a catalog |
+| `agents` | — | No roster surface; see below |
+| `runtime/event` | `pi.on(...)` | Vibes events into Pi's lifecycle |
+| `cli/command` | `registerCommand` | One command per descriptor |
+
+### Why `ai/model` and `agents` have no surface here
+
+Pi exposes **model selection, not a model catalog**. `setModel(model)` switches
+the session's model and `scopedModels` is a read-only snapshot of what `--models`
+already scoped; neither is a place to publish a registry. A Vibes `ai/model`
+descriptor therefore has nowhere to go: Pi's provider list is the union of what
+its own packages and `mcp.json` contribute, not something an extension declares.
+
+`agents` is the same shape of absence. An extension can register a flag or a
+command, but there is no API that enumerates or selects agents, so a Vibes roster
+has no surface to project into. Both kinds are queryable from the runtime — a host
+that grows a catalog surface can map them then.
+
+### Pi built-ins a projection must not shadow
+
+`read`, `bash`, `edit`, `write`, `grep`, `find`, `ls`. Pi tool names must match
+`[a-zA-Z0-9_-]+` for providers such as Bedrock, so a canonical dotted id is
+projected to underscores: `workspace-fs` → `workspace_fs`.

package/dist/extension/active-tools.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Pi only sends *active* tool schemas to the model. Registering the live
+ * catalog is required; activating all 100+ schemas overflows host context
+ * windows. Discovery tools stay active; search results are added additively.
+ */
+import { type PiCatalogEntry } from '../harness/pi-naming.ts';
+/** Capability-bridge tools the model should see on the first request. */
+export declare const PI_INITIAL_TOOL_IDS: readonly ["tool-search", "tool-help", "tool-call", "workspace-fs", "session"];
+export type PiActiveToolHost = {
+    getActiveTools?: () => string[];
+    setActiveTools?: (names: string[]) => void;
+};
+export declare function initialPiToolNames(entries: readonly PiCatalogEntry[]): string[];
+export declare function restrictPiToolsToDiscovery(pi: PiActiveToolHost, entries: readonly PiCatalogEntry[]): string[] | undefined;
+export declare function piNamesFromSearchOutput(text: string, idToName: ReadonlyMap<string, string>): string[];
+export declare function activatePiSearchHits(pi: PiActiveToolHost, text: string, idToName: ReadonlyMap<string, string>): string[];
+//# sourceMappingURL=active-tools.d.ts.map

package/dist/extension/active-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"active-tools.d.ts","sourceRoot":"","sources":["../../src/extension/active-tools.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAgB,KAAK,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE5E,yEAAyE;AACzE,eAAO,MAAM,mBAAmB,+EAAgF,CAAC;AAEjH,MAAM,MAAM,gBAAgB,GAAG;IAC9B,cAAc,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC;IAChC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;CAC3C,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,GAAG,MAAM,EAAE,CAG/E;AAED,wBAAgB,0BAA0B,CACzC,EAAE,EAAE,gBAAgB,EACpB,OAAO,EAAE,SAAS,cAAc,EAAE,GAChC,MAAM,EAAE,GAAG,SAAS,CAQtB;AAED,wBAAgB,uBAAuB,CACtC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GACnC,MAAM,EAAE,CAOV;AAED,wBAAgB,oBAAoB,CACnC,EAAE,EAAE,gBAAgB,EACpB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GACnC,MAAM,EAAE,CASV"}

package/dist/extension/active-tools.js

@@ -0,0 +1,47 @@
+/**
+ * Pi only sends *active* tool schemas to the model. Registering the live
+ * catalog is required; activating all 100+ schemas overflows host context
+ * windows. Discovery tools stay active; search results are added additively.
+ */
+import { PiJsonTextSchema, PiSearchResultSchema } from "../schemas/extension.js";
+import { toPiToolName } from "../harness/pi-naming.js";
+/** Capability-bridge tools the model should see on the first request. */
+export const PI_INITIAL_TOOL_IDS = ['tool-search', 'tool-help', 'tool-call', 'workspace-fs', 'session'];
+export function initialPiToolNames(entries) {
+    const wanted = new Set(PI_INITIAL_TOOL_IDS);
+    return entries.filter((entry) => wanted.has(entry.id)).map((entry) => entry.name);
+}
+export function restrictPiToolsToDiscovery(pi, entries) {
+    const discovery = initialPiToolNames(entries);
+    if (discovery.length === 0 || !pi.setActiveTools || !pi.getActiveTools)
+        return undefined;
+    const vibes = new Set(entries.map((entry) => entry.name));
+    const kept = pi.getActiveTools().filter((name) => !vibes.has(name));
+    const next = [...new Set([...kept, ...discovery])];
+    pi.setActiveTools(next);
+    return next;
+}
+export function piNamesFromSearchOutput(text, idToName) {
+    const json = PiJsonTextSchema.safeParse(text);
+    if (!json.success)
+        return [];
+    const result = PiSearchResultSchema.safeParse(json.data);
+    if (!result.success)
+        return [];
+    const names = result.data.matches.map(({ toolId }) => idToName.get(toolId) ?? toPiToolName(toolId));
+    return names;
+}
+export function activatePiSearchHits(pi, text, idToName) {
+    if (!pi.setActiveTools || !pi.getActiveTools)
+        return [];
+    const hits = piNamesFromSearchOutput(text, idToName);
+    if (hits.length === 0)
+        return [];
+    const active = pi.getActiveTools();
+    const added = hits.filter((name) => !active.includes(name));
+    if (added.length === 0)
+        return [];
+    pi.setActiveTools([...new Set([...active, ...added])]);
+    return added;
+}
+//# sourceMappingURL=active-tools.js.map

package/dist/extension/active-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"active-tools.js","sourceRoot":"","sources":["../../src/extension/active-tools.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,YAAY,EAAuB,MAAM,yBAAyB,CAAC;AAE5E,yEAAyE;AACzE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,SAAS,CAAU,CAAC;AAOjH,MAAM,UAAU,kBAAkB,CAAC,OAAkC;IACpE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS,mBAAmB,CAAC,CAAC;IACpD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,0BAA0B,CACzC,EAAoB,EACpB,OAAkC;IAElC,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,IAAI,CAAC,EAAE,CAAC,cAAc;QAAE,OAAO,SAAS,CAAC;IACzF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IACnD,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IACxB,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,UAAU,uBAAuB,CACtC,IAAY,EACZ,QAAqC;IAErC,MAAM,IAAI,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAC,MAAM,EAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IAClG,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,UAAU,oBAAoB,CACnC,EAAoB,EACpB,IAAY,EACZ,QAAqC;IAErC,IAAI,CAAC,EAAE,CAAC,cAAc,IAAI,CAAC,EAAE,CAAC,cAAc;QAAE,OAAO,EAAE,CAAC;IACxD,MAAM,IAAI,GAAG,uBAAuB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACrD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,EAAE,CAAC,cAAc,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO,KAAK,CAAC;AACd,CAAC"}

package/dist/extension/approvals.d.ts

@@ -0,0 +1,26 @@
+import { BaseRuntimeClient } from '@vibesdotdev/kernel/client';
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import type { RuntimePath } from '@vibesdotdev/paths';
+import { type PiObject, type PiJson, type ApprovalScope, type ApprovalPosture } from '../schemas/extension.ts';
+export type { ApprovalScope, ApprovalPosture } from '../schemas/extension.ts';
+export type ApprovalNotifier = {
+    notify?(message: string, type?: 'info' | 'warning' | 'error'): void;
+};
+export declare function approvalPosture(env: Readonly<Record<string, string | undefined>>, notifier?: ApprovalNotifier): ApprovalPosture;
+export declare function dangerReason(toolName: string, action: string, input: PiObject | undefined, cwd: string, workspaceRoot: string | undefined, paths: RuntimePath): string | undefined;
+/** Pi-specific grants are owned by the resolving runtime and never shared across workspaces. */
+export declare class ApprovalMemory extends BaseRuntimeClient {
+    private readonly session;
+    get cwd(): string;
+    get vibesHome(): string;
+    lookup(key: string): Promise<boolean>;
+    isApproved(tool: string, action?: string): Promise<boolean>;
+    clearSession(): void;
+    protected onDispose(): void;
+    grant(scope: ApprovalScope, key: string): Promise<void>;
+    workspaceGrants(): Promise<string[]>;
+    repoGrants(): Promise<string[]>;
+}
+export declare function getPiApprovalMemory(runtime: RuntimeRef): Promise<ApprovalMemory>;
+export declare function stableJson(value: PiJson): string;
+//# sourceMappingURL=approvals.d.ts.map

package/dist/extension/approvals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.d.ts","sourceRoot":"","sources":["../../src/extension/approvals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAuC,MAAM,4BAA4B,CAAC;AACpG,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EAEN,KAAK,QAAQ,EAAE,KAAK,MAAM,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EACpE,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE9E,MAAM,MAAM,gBAAgB,GAAG;IAAE,MAAM,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,IAAI,CAAA;CAAE,CAAC;AAEvG,wBAAgB,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,gBAAgB,GAAG,eAAe,CAK/H;AAcD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,CAYlL;AAED,gGAAgG;AAChG,qBAAa,cAAe,SAAQ,iBAAiB;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,IAAI,GAAG,IAAI,MAAM,CAIhB;IACD,IAAI,SAAS,IAAI,MAAM,CAAiD;IAClE,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKrC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAGjE,YAAY,IAAI,IAAI;cACD,SAAS,IAAI,IAAI;IAC9B,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBvD,eAAe,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IASpC,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;CAMrC;AACD,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,cAAc,CAAC,CAOtF;AACD,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEhD"}

package/dist/extension/approvals.js

@@ -0,0 +1,124 @@
+import { BaseRuntimeClient, getVibesClient, runtimeClientPlugin } from '@vibesdotdev/kernel/client';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { getRuntimePath, getPathRoots } from '@vibesdotdev/paths';
+import { resolveFileSystemAdapter } from '@vibesdotdev/filesystem';
+import { readPiText } from "../harness/runtime.js";
+import { PiActionInputSchema, PiWorkspaceGrantsSchema, PiRepoGrantsSchema } from "../schemas/extension.js";
+export function approvalPosture(env, notifier) {
+    const raw = (env.VIBES_PI_APPROVAL ?? 'smart').trim().toLowerCase();
+    if (raw === 'strict' || raw === 'off')
+        return raw;
+    if (raw !== 'smart')
+        notifier?.notify?.('Unknown VIBES_PI_APPROVAL; using smart.', 'warning');
+    return 'smart';
+}
+const DANGEROUS_ACTIONS = new Set(['deploy', 'publish', 'install', 'destroy']);
+const OUTSIDE_ACTIONS = new Set(['write', 'edit', 'delete', 'remove']);
+const BASH_DANGER_PATTERNS = [
+    [/\brm\s+(?:\S+\s+)*-\w*[rf]\w*\b/, 'rm with -r/-f'],
+    [/\bgit\s+push\b[^\n]*(?:--force\b|--force-with-lease\b|\s-f\b)/, 'git push --force'],
+    [/\bsudo\b/, 'sudo'],
+    [/\b(?:curl|wget)\b[^|\n]*\|\s*(?:sudo\s+)?(?:ba|z|k|da)?sh\b/, 'piped remote script']
+];
+function outside(paths, target, cwd) {
+    const rel = paths.relative(paths.resolve(cwd), paths.resolve(cwd, target));
+    return rel === '..' || rel.startsWith('../') || rel.startsWith('..\\') || paths.isAbsolute(rel);
+}
+export function dangerReason(toolName, action, input, cwd, workspaceRoot, paths) {
+    const fields = PiActionInputSchema.parse(input ?? {});
+    if (toolName === 'bash' || toolName === 'workspace_exec') {
+        for (const [pattern, label] of BASH_DANGER_PATTERNS)
+            if (pattern.test(fields.command ?? ''))
+                return label;
+    }
+    if (toolName === 'workspace_destroy' || DANGEROUS_ACTIONS.has(action))
+        return 'destructive or external action';
+    const target = fields.path ?? fields.file_path ?? fields.file ?? fields.destination ?? fields.target;
+    if (OUTSIDE_ACTIONS.has(action) && target) {
+        const root = workspaceRoot && !outside(paths, cwd, workspaceRoot) ? workspaceRoot : cwd;
+        if (outside(paths, target, root))
+            return 'path outside workspace';
+    }
+    return undefined;
+}
+/** Pi-specific grants are owned by the resolving runtime and never shared across workspaces. */
+export class ApprovalMemory extends BaseRuntimeClient {
+    session = new Set();
+    get cwd() {
+        const root = this.runtime.scope?.workspace?.root;
+        if (!root)
+            throw new CapabilityError('Pi approvals require a bound workspace.', 'UNAVAILABLE', { reason: 'pi-workspace-required' });
+        return root;
+    }
+    get vibesHome() { return getPathRoots(this.runtime).vibesHome; }
+    async lookup(key) {
+        const alt = key.includes('_') ? key.replaceAll('_', '-') : key.replaceAll('-', '_');
+        const grants = [...this.session, ...await this.workspaceGrants(), ...await this.repoGrants()];
+        return grants.includes(key) || grants.includes(alt);
+    }
+    async isApproved(tool, action) {
+        return await this.lookup('*') || await this.lookup(tool) || (action ? await this.lookup(tool + ':' + action) : false);
+    }
+    clearSession() { this.session.clear(); }
+    onDispose() { this.session.clear(); }
+    async grant(scope, key) {
+        const paths = await getRuntimePath(this.runtime);
+        const fs = await resolveFileSystemAdapter(this.runtime, { binding: false });
+        if (scope === 'session') {
+            this.session.add(key);
+            return;
+        }
+        const file = scope === 'workspace' ? paths.join(this.vibesHome, 'pi-approvals.json') : paths.join(this.cwd, '.pi', 'approvals.json');
+        const raw = await readPiText(fs, file);
+        let content;
+        if (scope === 'workspace') {
+            const grants = PiWorkspaceGrantsSchema.parse(raw === undefined ? {} : JSON.parse(raw));
+            grants[this.cwd] = [...new Set([...(grants[this.cwd] ?? []), key])].sort();
+            content = stableJson(grants);
+        }
+        else {
+            const grants = PiRepoGrantsSchema.parse(raw === undefined ? {} : JSON.parse(raw));
+            content = stableJson({ grants: [...new Set([...grants.grants, key])].sort() });
+        }
+        await fs.mkdir(paths.dirname(file), { recursive: true });
+        await fs.writeFile(file, content);
+        this.session.add(key);
+    }
+    async workspaceGrants() {
+        const paths = await getRuntimePath(this.runtime);
+        const fs = await resolveFileSystemAdapter(this.runtime, { binding: false });
+        const raw = await readPiText(fs, paths.join(this.vibesHome, 'pi-approvals.json'));
+        const grants = PiWorkspaceGrantsSchema.parse(raw === undefined ? {} : JSON.parse(raw));
+        if (grants[this.cwd])
+            return grants[this.cwd];
+        const parent = Object.keys(grants).filter(root => !outside(paths, this.cwd, root)).sort((a, b) => b.length - a.length)[0];
+        return parent ? grants[parent] ?? [] : [];
+    }
+    async repoGrants() {
+        const paths = await getRuntimePath(this.runtime);
+        const fs = await resolveFileSystemAdapter(this.runtime, { binding: false });
+        const raw = await readPiText(fs, paths.join(this.cwd, '.pi', 'approvals.json'));
+        return PiRepoGrantsSchema.parse(raw === undefined ? {} : JSON.parse(raw)).grants;
+    }
+}
+export async function getPiApprovalMemory(runtime) {
+    if (!runtime.hasKind('runtime/client'))
+        await runtime.registerPlugin(runtimeClientPlugin);
+    if (!runtime.query('runtime/client').withId('integrations-pi.approvals').descriptors().length) {
+        runtime.registerDescriptor('runtime/client', { kind: 'runtime/client', id: 'integrations-pi.approvals' });
+        runtime.registerLoader('runtime/client', 'integrations-pi.approvals', async () => ({ impl: ApprovalMemory }));
+    }
+    return getVibesClient('integrations-pi.approvals', runtime);
+}
+export function stableJson(value) {
+    return JSON.stringify(sortKeys(value), null, 2) + '\n';
+}
+function sortKeys(value) {
+    if (Array.isArray(value))
+        return [...value].sort();
+    if (value !== null && value instanceof Object) {
+        return Object.fromEntries(Object.entries(value).sort(([a], [b]) => a.localeCompare(b)).map(([key, item]) => [key, sortKeys(item)]));
+    }
+    return value;
+}
+//# sourceMappingURL=approvals.js.map