codiedev 0.9.70 → 0.9.72

package/dist/captureSignals.js

@@ -110,6 +110,10 @@ function parseCaptureSignals(content, source) {
         // whether the user or the agent invoked it.
         if (e.type === "copilot.skill_invoked")
             addSkill(invocations, e.skill);
+        // pi (normalized): a `/skill:name` expansion or the agent reading a
+        // listed skill's SKILL.md, which is how pi runs skills.
+        if (e.type === "pi.skill_invoked")
+            addSkill(invocations, e.skill);
         if (e.type === "copilot.usage_summary") {
             if (typeof e.premiumRequests === "number" && e.premiumRequests >= 0)
                 premiumRequests = e.premiumRequests;

package/dist/cli.js

@@ -44,7 +44,7 @@ Codiedev CLI
 
 Connect:
   codiedev connect                       Link Claude Code / Codex / Cursor /
-                                         GitHub Copilot to your org
+                                         GitHub Copilot / pi to your org
   codiedev doctor                        Verify your setup after connecting
 
 Harness:
@@ -85,7 +85,7 @@ Messaging:
 
 Starter packs:
   codiedev pack list                     Packs assigned to your team
-  codiedev pack install [slug] [--harness claude,codex,copilot,cursor,codie]
+  codiedev pack install [slug] [--harness claude,codex,copilot,cursor,codie,pi]
                        [--dry-run] [--json]
                                          Install a pack (or all) into every
                                          detected tool
@@ -164,6 +164,8 @@ codiedev connect — link your agent CLI to Codiedev
     - ~/.cursor/hooks.json hooks         (session, prompt, security, capture)
     - ~/.cursor/rules/codiedev.mdc       (teaches Cursor the commands)
     - ~/.copilot/hooks/codiedev.json     (GitHub Copilot: VS Code + CLI capture)
+    - ~/.pi/agent/extensions/codiedev.ts (pi: session, prompt, security, capture)
+    - ~/.pi/agent/AGENTS.md              (teaches pi the commands)
 
   Re-run anytime to swap accounts or refresh the instruction block.
 

package/dist/codie.js

@@ -58,6 +58,7 @@ const codieRuntimeInstall_1 = require("./codieRuntimeInstall");
 const upgradeNudge_1 = require("./upgradeNudge");
 const codie_1 = require("./packs/codie");
 const paths_1 = require("./packs/paths");
+const managedPi_1 = require("./managedPi");
 // How long to let the gateway finish booking the last request before asking
 // what the session cost.
 const USAGE_SETTLE_MS = 1200;
@@ -187,6 +188,30 @@ async function main() {
     }
     const gatewayUrl = process.env.CODIEDEV_GATEWAY_URL || "https://gateway.codiedev.com/api/v1";
     const catalog = await (0, codieLauncher_1.fetchApprovedCatalog)({ baseUrl: gatewayUrl, key });
+    // `codie --pi [args]`: pi instead of the OpenCode engine, on the same
+    // approved catalog and gateway key (see managedPi.ts).
+    if (process.argv[2] === "--pi") {
+        let skillPaths = [];
+        try {
+            const approved = new Set(catalog.map((model) => (0, codieLauncher_1.bareModel)(model.id)).filter(Boolean));
+            skillPaths = (0, codie_1.codiePackConfig)((0, paths_1.packsRoot)(), { approvedModels: approved, catalog }).skillPaths;
+        }
+        catch (error) {
+            console.error(`codie: skipping starter packs (${error instanceof Error ? error.message : error})`);
+        }
+        try {
+            process.exitCode = (0, managedPi_1.runManagedPi)({
+                args: process.argv.slice(3), key, gatewayUrl, catalog, stateDir: (0, configDir_1.codiedevStateDir)(), skillPaths,
+                // This release line has no Agent Security hooks.
+                agentSecurityEnabled: false,
+            });
+        }
+        catch (error) {
+            console.error(`codie: ${error instanceof Error ? error.message : String(error)}`);
+            process.exitCode = error instanceof managedPi_1.ManagedPiArgError ? 2 : 1;
+        }
+        return;
+    }
     const parsed = (0, codieLauncher_1.parseCodieArgs)(process.argv.slice(2));
     if (parsed.args.length === 1 && parsed.args[0] === "models") {
         console.log("Codiedev approved models\n");

package/dist/commands/doctor.js

@@ -47,6 +47,7 @@ const upgradeNudge_1 = require("../upgradeNudge");
 const captureReadiness_1 = require("../captureReadiness");
 const captureLog_1 = require("../captureLog");
 const copilotInstallation_1 = require("../copilotInstallation");
+const piHooks_1 = require("../piHooks");
 const harnessDirs_1 = require("../harnessDirs");
 const CLAUDE_DIR = (0, harnessDirs_1.claudeConfigDir)();
 const CLAUDE_SETTINGS_PATH = path.join(CLAUDE_DIR, "settings.json");
@@ -496,6 +497,16 @@ async function runDoctor(_args) {
     else {
         checks.push({ name: "GitHub Copilot", status: "warn", detail: "not installed on this machine" });
     }
+    if ((0, utils_1.piInstalled)()) {
+        const extension = (0, piHooks_1.inspectPiExtension)();
+        checks.push({ name: "pi capture extension", status: extension.status === "pass" ? "pass" : "fail", detail: extension.detail });
+        checks.push({ name: "pi agent instructions",
+            status: hasCodiedevInstructions((0, utils_1.piInstructionsPath)()) ? "pass" : "fail",
+            detail: hasCodiedevInstructions((0, utils_1.piInstructionsPath)()) ? (0, harnessDirs_1.displayPath)((0, utils_1.piInstructionsPath)()) : "missing — re-run `codiedev connect`" });
+    }
+    else {
+        checks.push({ name: "pi", status: "warn", detail: "not installed on this machine" });
+    }
     report(checks);
     const failures = checks.filter((c) => c.status === "fail");
     if (failures.length > 0) {

package/dist/commands/pack.d.ts

@@ -51,4 +51,4 @@ export declare function runExport(config: CodiedevConfig, args: PackArgs): Promi
     commit?: string;
 }>;
 export declare function runApply(config: CodiedevConfig, args: PackArgs): Promise<Record<string, unknown>>;
-export declare const PACK_HELP = "Usage:\n  codiedev pack list                     Packs assigned to your team\n  codiedev pack install [slug] [--harness claude,codex,copilot,cursor,codie] [--dry-run] [--json] [--quiet]\n                                         Install one pack, or every pack that applies\n  codiedev pack status [--json]          Installed packs and whether they're up to date\n  codiedev pack export <slug> --out <dir> [--git] [--manifest]\n                                         Write the pack as a Claude-format plugin folder plus\n                                         .claude-plugin/marketplace.json (commit it for CI).\n                                         --git inits the folder and commits; --manifest writes\n                                         an editable <slug>.pack.md instead\n  codiedev pack apply <pack.md>          Create or update a pack from a pack.md\n\nCursor: packs are copied to ~/.cursor/plugins/local/codiedev-<slug>/. A Cursor\nteam admin can disable \"user local plugin imports\"; then Cursor ignores them.\n\nAuto-update: session starts run `codiedev pack install --quiet` in the background\nabout once an hour. Opt out with CODIEDEV_PACK_AUTOSYNC=0.\n\nHooks for specific skills only: codiedev hook-gate --skills a,b --cmd-b64 <base64url of the command>\n(the pack editor writes this; the command runs via /bin/sh, or cmd.exe on Windows)\n\nCI: set CODIEDEV_TOKEN to a pack CI key (cdvci_\u2026, from the pack's page in the portal).\nNo `codiedev connect` or config file is needed. CI mode (a cdvci_ key, or CI=true)\nnever auto-syncs, reports or prunes, installs the one pack the key can see, defaults\n--harness to claude when it's on PATH, and exits non-zero unless every requested tool\ngot the pack. Skills from a pack are /<pack-slug>:<skill> in Claude Code.\n\n  GitLab CI (.gitlab-ci.yml; add CODIEDEV_TOKEN and ANTHROPIC_API_KEY as masked\n  CI/CD variables):\n    pack-scan:\n      image: node:22\n      script:\n        - npm i -g codiedev @anthropic-ai/claude-code\n        - codiedev pack install --harness claude\n        - claude -p \"/platform-starter:healthcare-scan\" --output-format text\n\n  GitHub Actions (repository secrets CODIEDEV_TOKEN and ANTHROPIC_API_KEY):\n    - uses: actions/setup-node@v4\n      with: { node-version: 22 }\n    - run: npm i -g codiedev @anthropic-ai/claude-code\n    - run: codiedev pack install --harness claude\n      env:\n        CODIEDEV_TOKEN: ${{ secrets.CODIEDEV_TOKEN }}\n    - run: claude -p \"/platform-starter:healthcare-scan\" --output-format text\n      env:\n        ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}\n\n  Or vendor the plugin into the repo instead of installing at build time:\n    codiedev pack export <slug> --out .codiedev/packs";
+export declare const PACK_HELP = "Usage:\n  codiedev pack list                     Packs assigned to your team\n  codiedev pack install [slug] [--harness claude,codex,copilot,cursor,codie,pi] [--dry-run] [--json] [--quiet]\n                                         Install one pack, or every pack that applies\n  codiedev pack status [--json]          Installed packs and whether they're up to date\n  codiedev pack export <slug> --out <dir> [--git] [--manifest]\n                                         Write the pack as a Claude-format plugin folder plus\n                                         .claude-plugin/marketplace.json (commit it for CI).\n                                         --git inits the folder and commits; --manifest writes\n                                         an editable <slug>.pack.md instead\n  codiedev pack apply <pack.md>          Create or update a pack from a pack.md\n\nCursor: packs are copied to ~/.cursor/plugins/local/codiedev-<slug>/. A Cursor\nteam admin can disable \"user local plugin imports\"; then Cursor ignores them.\n\nAuto-update: session starts run `codiedev pack install --quiet` in the background\nabout once an hour. Opt out with CODIEDEV_PACK_AUTOSYNC=0.\n\nHooks for specific skills only: codiedev hook-gate --skills a,b --cmd-b64 <base64url of the command>\n(the pack editor writes this; the command runs via /bin/sh, or cmd.exe on Windows)\n\nCI: set CODIEDEV_TOKEN to a pack CI key (cdvci_\u2026, from the pack's page in the portal).\nNo `codiedev connect` or config file is needed. CI mode (a cdvci_ key, or CI=true)\nnever auto-syncs, reports or prunes, installs the one pack the key can see, defaults\n--harness to claude when it's on PATH, and exits non-zero unless every requested tool\ngot the pack. Skills from a pack are /<pack-slug>:<skill> in Claude Code.\n\n  GitLab CI (.gitlab-ci.yml; add CODIEDEV_TOKEN and ANTHROPIC_API_KEY as masked\n  CI/CD variables):\n    pack-scan:\n      image: node:22\n      script:\n        - npm i -g codiedev @anthropic-ai/claude-code\n        - codiedev pack install --harness claude\n        - claude -p \"/platform-starter:healthcare-scan\" --output-format text\n\n  GitHub Actions (repository secrets CODIEDEV_TOKEN and ANTHROPIC_API_KEY):\n    - uses: actions/setup-node@v4\n      with: { node-version: 22 }\n    - run: npm i -g codiedev @anthropic-ai/claude-code\n    - run: codiedev pack install --harness claude\n      env:\n        CODIEDEV_TOKEN: ${{ secrets.CODIEDEV_TOKEN }}\n    - run: claude -p \"/platform-starter:healthcare-scan\" --output-format text\n      env:\n        ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}\n\n  Or vendor the plugin into the repo instead of installing at build time:\n    codiedev pack export <slug> --out .codiedev/packs";

package/dist/commands/pack.js

@@ -93,7 +93,7 @@ function ciHarnesses(args, env, home) {
 }
 const USAGE = `Usage:
   codiedev pack list                     Packs assigned to your team
-  codiedev pack install [slug] [--harness claude,codex,copilot,cursor,codie] [--dry-run] [--json] [--quiet]
+  codiedev pack install [slug] [--harness claude,codex,copilot,cursor,codie,pi] [--dry-run] [--json] [--quiet]
                                          Install one pack, or every pack that applies
   codiedev pack status [--json]          Installed packs and whether they're up to date
   codiedev pack export <slug> --out <dir> [--git] [--manifest]

package/dist/connect.js

@@ -274,11 +274,13 @@ async function runConnect(args = []) {
     const hasCursor = (0, utils_1.cursorInstalled)();
     const hasOpenCode = (0, utils_1.openCodeInstalled)();
     const hasCopilot = (0, utils_1.copilotInstalled)();
+    const hasPi = (0, utils_1.piInstalled)();
     (0, shared_1.recordInstallEvent)(config, { step: "detect", target: "claude-code", ok: hasClaude });
     (0, shared_1.recordInstallEvent)(config, { step: "detect", target: "codex", ok: hasCodex });
     (0, shared_1.recordInstallEvent)(config, { step: "detect", target: "cursor", ok: hasCursor });
     (0, shared_1.recordInstallEvent)(config, { step: "detect", target: "opencode", ok: hasOpenCode });
     (0, shared_1.recordInstallEvent)(config, { step: "detect", target: "copilot", ok: hasCopilot });
+    (0, shared_1.recordInstallEvent)(config, { step: "detect", target: "pi", ok: hasPi });
     const installed = [];
     // Machine-readable target keys reported back to the backend via
     // /api/cli/markInstalled so the portal's "Connected" state reflects
@@ -323,6 +325,12 @@ async function runConnect(args = []) {
         runInstall("copilot-hook", () => (0, utils_1.installCopilotHook)(), `GitHub Copilot (VS Code + CLI) sessionStart + agentStop backup + sessionEnd capture hooks (${(0, utils_1.copilotHooksPath)()})`, "copilot-hook");
         runInstall("copilot-instructions", utils_1.installCopilotInstructions, "GitHub Copilot CLI team artifact instructions", "copilot-instructions");
     }
+    // Staged like OpenCode's adapter: dormant until pi starts, so installing pi
+    // later needs no second `connect`.
+    runInstall("pi-extension", () => (0, utils_1.installPiExtension)(), `pi session start + prompt guard + capture extension (${(0, harnessDirs_1.displayPath)((0, utils_1.piExtensionPath)())})`, "pi-extension");
+    if (hasPi) {
+        runInstall("pi-instructions", utils_1.installPiInstructions, `pi agent instructions (${(0, harnessDirs_1.displayPath)((0, utils_1.piInstructionsPath)())})`, "pi-instructions");
+    }
     // Always stage the adapter. It is dormant until OpenCode starts, which lets
     // a user connect Claude Code today and install the Codie harness tomorrow
     // without needing a second setup ritual.
@@ -349,7 +357,7 @@ async function runConnect(args = []) {
             });
         }
     }
-    if (!hasClaude && !hasCodex && !hasCursor && !hasOpenCode && !hasCopilot) {
+    if (!hasClaude && !hasCodex && !hasCursor && !hasOpenCode && !hasCopilot && !hasPi) {
         console.warn("\nNo existing AI client detected; the Codie/OpenCode adapter is ready for a later install.");
         console.warn("If you just installed Claude Code, launch it once (so ~/.claude is created),");
         console.warn("then re-run `npx codiedev connect` to wire up the capture hook.");

package/dist/harnessDirs.d.ts

@@ -6,6 +6,9 @@ export declare function claudeUserConfigPath(env?: NodeJS.ProcessEnv, home?: str
 export declare function codexHome(env?: NodeJS.ProcessEnv, home?: string): string;
 /** OpenCode: `$XDG_CONFIG_HOME/opencode` or ~/.config/opencode. */
 export declare function openCodeConfigDir(env?: NodeJS.ProcessEnv, home?: string): string;
+/** pi: `$PI_CODING_AGENT_DIR` or ~/.pi/agent. Holds extensions/, skills/,
+ * sessions/ and the global AGENTS.md. */
+export declare function piAgentDir(env?: NodeJS.ProcessEnv, home?: string): string;
 /** `~`-abbreviated path for user-facing output. */
 export declare function displayPath(p: string, home?: string): string;
 export declare function claudeConfigDirInUse(dir?: string, exists?: (p: string) => boolean): boolean;

package/dist/harnessDirs.js

@@ -37,6 +37,7 @@ exports.claudeConfigDir = claudeConfigDir;
 exports.claudeUserConfigPath = claudeUserConfigPath;
 exports.codexHome = codexHome;
 exports.openCodeConfigDir = openCodeConfigDir;
+exports.piAgentDir = piAgentDir;
 exports.displayPath = displayPath;
 exports.claudeConfigDirInUse = claudeConfigDirInUse;
 exports.codexHomeInUse = codexHomeInUse;
@@ -72,6 +73,11 @@ function codexHome(env = process.env, home = os.homedir()) {
 function openCodeConfigDir(env = process.env, home = os.homedir()) {
     return path.join(override(env.XDG_CONFIG_HOME) ?? path.join(home, ".config"), "opencode");
 }
+/** pi: `$PI_CODING_AGENT_DIR` or ~/.pi/agent. Holds extensions/, skills/,
+ * sessions/ and the global AGENTS.md. */
+function piAgentDir(env = process.env, home = os.homedir()) {
+    return override(env.PI_CODING_AGENT_DIR) ?? path.join(home, ".pi", "agent");
+}
 /** `~`-abbreviated path for user-facing output. */
 function displayPath(p, home = os.homedir()) {
     return p === home || p.startsWith(home + path.sep) ? "~" + p.slice(home.length) : p;

package/dist/hook.js

@@ -59,6 +59,7 @@ const subagents_1 = require("./subagents");
 const captureExclusions_1 = require("./captureExclusions");
 const cursorHooks_1 = require("./cursorHooks");
 const copilotHooks_1 = require("./copilotHooks");
+const piHooks_1 = require("./piHooks");
 // Pure builder for the discovery additionalContext. Returns null when there are
 // no matches. The suggested `codiedev pull` command carries the EXACT top key
 // (e.g. "pr-push.md") rather than a "<key>" placeholder — otherwise agents
@@ -432,6 +433,8 @@ function resolveMode(arg) {
         return "copilot";
     if (arg === "capture-opencode" || arg === "capture-opencode-final")
         return "opencode";
+    if (arg === "capture-pi" || arg === "capture-pi-final")
+        return "pi";
     if (arg === "capture-desktop" || arg === "capture-desktop-final")
         return "desktop";
     return "claude-code";
@@ -594,7 +597,8 @@ async function main() {
     if (process.argv[2] === "discover" ||
         process.argv[2] === "discover-codex" ||
         process.argv[2] === "discover-codie" ||
-        process.argv[2] === "discover-copilot") {
+        process.argv[2] === "discover-copilot" ||
+        process.argv[2] === "discover-pi") {
         // A Codex block leaves no hook of its own, so this prompt is the first
         // chance to report it. Runs before runDiscover, which exits the process.
         if (process.argv[2] === "discover-codex") {
@@ -620,10 +624,11 @@ async function main() {
     if (process.argv[2] === "session-start" ||
         process.argv[2] === "session-start-cursor" ||
         process.argv[2] === "session-start-copilot" ||
-        process.argv[2] === "session-start-opencode") {
+        process.argv[2] === "session-start-opencode" ||
+        process.argv[2] === "session-start-pi") {
         // --- starter packs: hourly detached `pack install --quiet` + daily nudge ---
         (0, sync_1.maybeSpawnPackSync)({ connected: Boolean((0, utils_1.readConfig)()), cli: path.join(__dirname, "cli.js") });
-        const packNag = process.argv[2] === "session-start-opencode" ? null : (0, sync_1.packNagLine)();
+        const packNag = process.argv[2] === "session-start-opencode" || process.argv[2] === "session-start-pi" ? null : (0, sync_1.packNagLine)();
         // Claude Code adds SessionStart stdout to the session context.
         if (packNag && process.argv[2] === "session-start")
             process.stdout.write(`${packNag}\n`);
@@ -634,7 +639,9 @@ async function main() {
                 ? "cursor"
                 : process.argv[2] === "session-start-copilot"
                     ? "copilot"
-                    : "claude-code");
+                    : process.argv[2] === "session-start-pi"
+                        ? "pi"
+                        : "claude-code");
         if ((0, utils_1.readConfig)() && (process.argv[2] === "session-start-cursor" || process.argv[2] === "session-start-copilot")) {
             const source = process.argv[2] === "session-start-cursor" ? "cursor" : "copilot";
             const { TEAM_SKILL_CONTEXT, teamSkillSessionOutput } = await Promise.resolve().then(() => __importStar(require("./teamSkillContext")));
@@ -656,6 +663,9 @@ async function main() {
     else if ((process.argv[2] ?? "").endsWith("-copilot")) {
         (0, utils_1.ensureCopilotCodiedevHooksInstalled)();
     }
+    else if (/-pi(?:-final)?$/.test(process.argv[2] ?? "")) {
+        (0, utils_1.ensurePiExtensionInstalled)();
+    }
     else {
         (0, utils_1.ensureAllCodiedevHooksInstalled)();
     }
@@ -680,7 +690,7 @@ async function main() {
     // extension) where SessionEnd may never come — the silent zero-capture bug.
     // Same detached capture-finish child as SessionEnd, marked non-final so the
     // server renews the session lease instead of summarizing immediately.
-    if (process.argv[2] === "backup" || process.argv[2] === "backup-cursor" || process.argv[2] === "backup-copilot") {
+    if (process.argv[2] === "backup" || process.argv[2] === "backup-cursor" || process.argv[2] === "backup-copilot" || process.argv[2] === "backup-pi") {
         if (transcript_path && !(0, utils_1.isCodexRolloutPath)(transcript_path)) {
             try {
                 (0, utils_1.dispatchCaptureFinish)({
@@ -688,7 +698,9 @@ async function main() {
                         ? "capture-cursor"
                         : process.argv[2] === "backup-copilot"
                             ? "capture-copilot"
-                            : "capture",
+                            : process.argv[2] === "backup-pi"
+                                ? "capture-pi"
+                                : "capture",
                     session_id,
                     transcript_path,
                     cwd,
@@ -865,7 +877,10 @@ async function runCaptureFinishInner(input, config, session_id, transcript_path,
         transcriptContent = normalized.content;
         copilotSubagents = normalized.subagents.count > 0 ? normalized.subagents : undefined;
     }
-    if (mode === "cursor" || mode === "copilot") {
+    else if (parserMode === "pi") {
+        transcriptContent = (0, piHooks_1.normalizePiTranscript)(transcriptContent);
+    }
+    if (mode === "cursor" || mode === "copilot" || mode === "pi") {
         try {
             await (0, limitEventReporter_1.reportTranscriptLimitEvent)({ config, source: mode, sessionId: session_id, transcript: transcriptContent });
         }
@@ -906,7 +921,9 @@ async function runCaptureFinishInner(input, config, session_id, transcript_path,
         ? "empty-cursor-transcript"
         : parserMode === "copilot" && (0, copilotHooks_1.isCopilotTranscriptEmpty)(rawTranscriptContent)
             ? "empty-copilot-transcript"
-            : null;
+            : parserMode === "pi" && (0, piHooks_1.isPiTranscriptEmpty)(rawTranscriptContent)
+                ? "empty-pi-transcript"
+                : null;
     if (emptyReason) {
         (0, captureLog_1.appendCaptureLog)({
             stage: "capture-finish",

package/dist/limitEventReporter.d.ts

@@ -1,5 +1,5 @@
 import { type LimitEvent } from "./limitEvent";
-export type LimitEventSource = "claude-code" | "codex" | "cursor" | "copilot";
+export type LimitEventSource = "claude-code" | "codex" | "cursor" | "copilot" | "pi";
 export type LimitEventPayload = LimitEvent & {
     source: LimitEventSource;
     sessionId?: string;

package/dist/limitEventReporter.js

@@ -76,7 +76,7 @@ function postLimitEvent(config, payload, timeoutMs = 5_000) {
 async function reportTranscriptLimitEvent(args) {
     const parse = args.source === "codex"
         ? limitEvent_1.parseCodexLimitEventFromTranscript
-        : args.source === "cursor" || args.source === "copilot" ? limitEvent_1.parseNativeLimitEventFromTranscript : limitEvent_1.parseLimitEventFromTranscript;
+        : args.source === "cursor" || args.source === "copilot" || args.source === "pi" ? limitEvent_1.parseNativeLimitEventFromTranscript : limitEvent_1.parseLimitEventFromTranscript;
     const parsed = parse(args.transcript);
     if (!parsed && !args.emitMinimalOnMiss)
         return false;

package/dist/managedPi.d.ts

@@ -0,0 +1,48 @@
+import { type CatalogModel } from "./codieLauncher";
+export declare const PI_PROVIDER_ID = "codiedev";
+/** Env vars pi reads provider credentials from (`pi --help`, pi 0.73). */
+export declare const PI_PROVIDER_ENV: string[];
+export declare const GUARD_FILE = "codie-guard.ts";
+export declare const CAPTURE_FILE = "codiedev-capture.ts";
+/** Where the guard points every other provider: a loopback port nothing
+ * listens on, so a request (and whatever key it carries) never leaves the
+ * machine. */
+export declare const BLOCKED_BASE_URL = "http://127.0.0.1:9/blocked-by-codiedev";
+/** The pi extension that keeps a managed session on Codiedev models and tags
+ * each gateway request with the session, repo and skills, so gateway billing
+ * joins the captured pi session (same headers as the OpenCode metadata
+ * plugin, assets/git-refs.mjs). */
+export declare const GUARD_SOURCE: string;
+export declare function managedPiAgentDir(stateDir: string): string;
+/** pi's models.json entry for the gateway. The key is read from
+ * CODIEDEV_GATEWAY_KEY at request time (pi resolves an env var name). */
+export declare function piProviderConfig(gatewayUrl: string, catalog: CatalogModel[]): Record<string, unknown>;
+/** Rewrite everything Codiedev owns in the managed agent dir. Sessions (and
+ * anything else pi keeps there) are left alone. Returns the extensions to load. */
+export declare function prepareManagedPiDir(opts: {
+    agentDir: string;
+    gatewayUrl: string;
+    catalog: CatalogModel[];
+    model?: string;
+    skillPaths?: string[];
+    agentSecurityEnabled: boolean;
+}): string[];
+/** The child env: no provider credentials, pi pointed at the managed dir. */
+export declare function managedPiEnv(env: NodeJS.ProcessEnv, agentDir: string, key: string, platform?: NodeJS.Platform): NodeJS.ProcessEnv;
+export declare class ManagedPiArgError extends Error {
+}
+/** Refuse what would bring other credentials or code into the session, then
+ * pin extension loading to the managed extensions. */
+export declare function managedPiArgs(args: string[], extensions: string[]): string[];
+export declare function runManagedPi(opts: {
+    args: string[];
+    key: string;
+    gatewayUrl: string;
+    catalog: CatalogModel[];
+    stateDir: string;
+    skillPaths?: string[];
+    agentSecurityEnabled: boolean;
+    env?: NodeJS.ProcessEnv;
+    /** Test seam: resolve the pi CLI entry without installing. */
+    resolvePi?: () => string;
+}): number;