instar 1.3.342 → 1.3.344

package/dist/providers/adapters/pi-cli/transport/piSpawn.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Spawn helper for the pi CLI.
+ *
+ * Mirrors gemini-cli/transport/geminiSpawn.ts (process-level, framework-
+ * agnostic structure) but encodes the pi-specific credential boundary and the
+ * canonical one-shot argv.
+ *
+ * The argv (`buildPiOneShotArgv`) and the JSONL event-stream facts the
+ * one-shot parser depends on were verified HANDS-ON in the P0.1 eval (pi
+ * 0.78.1, docs/specs/_drafts/pi-eval-report.md) — they are ground truth, not
+ * inferred from docs.
+ *
+ * stdin discipline: like gemini, the binary may read stdin; without an
+ * explicit EOF it can hang waiting for input. `spawn` + an immediate
+ * `child.stdin.end()` defeats this (harmless and defensive regardless).
+ *
+ * Output-byte cap: captured stdout + stderr are hard-capped at
+ * `maxOutputBytes` and the result is flagged `truncated` — a runaway/looping
+ * child can never OOM the supervising process.
+ */
+/** Default output cap: 8 MiB per stream. A one-shot final message is tiny;
+ *  the cap only fires on a runaway/looping child. */
+export declare const DEFAULT_MAX_OUTPUT_BYTES: number;
+/**
+ * The canonical one-shot argv — pinned, no ambiguity. EVAL-VERIFIED (pi
+ * 0.78.1, P0.1):
+ *
+ *   pi -p --mode json --no-session --offline [--model <pattern>] <prompt>
+ *
+ * - `-p` is pi's one-shot/print entrypoint.
+ * - `--mode json` emits the typed JSONL event stream on stdout (the format
+ *   `oneShotCompletion.ts` parses for the assistant `message_end`).
+ * - `--no-session` keeps the call stateless — no session file is written
+ *   (one-shot has nothing to resume).
+ * - `--offline` blocks the first-boot binary fetch (pi otherwise pulls `fd` +
+ *   `ripgrep` from GitHub on first run — eval caveat 2); a one-shot text
+ *   completion needs neither.
+ * - `--model <pattern>` is appended only when a model is configured; when
+ *   omitted, pi's OWN configured default provider/model applies.
+ * - The prompt is the SOLE trailing POSITIONAL — exactly ONE argv element. A
+ *   leading-dash prompt (`"--help me"`, `"-y do X"`) can NEVER be re-parsed as
+ *   a flag because it is the last element AND all flags precede it (same
+ *   argument-injection hardening note as gemini's `-p <prompt>`).
+ */
+export declare function buildPiOneShotArgv(model: string | undefined, prompt: string): string[];
+/**
+ * Provider billing-capable vars UNCONDITIONALLY deleted from the child env,
+ * regardless of allowlist contents. Any of these present could silently route
+ * pi onto a billed API key instead of its auth.json subscription / models.json
+ * custom-provider path. A false-negative (silent billing) is asymmetrically
+ * costly, so the delete is unconditional.
+ */
+export declare const PI_BILLING_ENV_VARS: readonly ["ANTHROPIC_API_KEY", "CLAUDE_CODE_OAUTH_TOKEN", "OPENAI_API_KEY", "GEMINI_API_KEY", "GOOGLE_API_KEY", "XAI_API_KEY", "GROQ_API_KEY", "OPENROUTER_API_KEY"];
+/**
+ * Build the env for a `pi` child process per the no-API-keys rule. Constructs
+ * an explicit allowlist (variables not listed are dropped), then
+ * UNCONDITIONALLY hard-deletes every billing-capable provider var and clears
+ * `CLAUDECODE` (the Claude-Code session marker — pi must not believe it is
+ * running inside a Claude Code session).
+ */
+export declare function buildPiChildEnv(parentEnv?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+export interface PiSpawnResult {
+    exitCode: number | null;
+    stdout: string;
+    stderr: string;
+    /** True when stdout OR stderr capture hit the byte cap and was truncated. */
+    truncated: boolean;
+}
+export interface SpawnPiOptions {
+    timeoutMs: number;
+    env: NodeJS.ProcessEnv;
+    signal?: AbortSignal;
+    /** Hard cap on captured stdout/stderr bytes (each stream). */
+    maxOutputBytes?: number;
+}
+/**
+ * Spawn `pi` with the given argv and wait for completion.
+ *
+ * - Closes stdin immediately (pi may otherwise block waiting for EOF).
+ * - SIGTERM→SIGKILL on timeout (2s grace), AbortSignal handling.
+ * - Bounds captured stdout/stderr at `maxOutputBytes` (default 8 MiB),
+ *   killing the child and flagging `truncated` once the cap is exceeded.
+ * - The caller fails only on a non-zero exit code; benign startup stderr lines
+ *   are not treated as failures.
+ */
+export declare function spawnPiAndWait(binary: string, args: string[], options: SpawnPiOptions): Promise<PiSpawnResult>;
+//# sourceMappingURL=piSpawn.d.ts.map

package/dist/providers/adapters/pi-cli/transport/piSpawn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"piSpawn.d.ts","sourceRoot":"","sources":["../../../../../src/providers/adapters/pi-cli/transport/piSpawn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH;qDACqD;AACrD,eAAO,MAAM,wBAAwB,QAAkB,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAUtF;AAyCD;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,sKAStB,CAAC;AAEX;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,SAAS,GAAE,MAAM,CAAC,UAAwB,GACzC,MAAM,CAAC,UAAU,CAoBnB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,8DAA8D;IAC9D,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,aAAa,CAAC,CAsGxB"}

package/dist/providers/adapters/pi-cli/transport/piSpawn.js

@@ -0,0 +1,242 @@
+/**
+ * Spawn helper for the pi CLI.
+ *
+ * Mirrors gemini-cli/transport/geminiSpawn.ts (process-level, framework-
+ * agnostic structure) but encodes the pi-specific credential boundary and the
+ * canonical one-shot argv.
+ *
+ * The argv (`buildPiOneShotArgv`) and the JSONL event-stream facts the
+ * one-shot parser depends on were verified HANDS-ON in the P0.1 eval (pi
+ * 0.78.1, docs/specs/_drafts/pi-eval-report.md) — they are ground truth, not
+ * inferred from docs.
+ *
+ * stdin discipline: like gemini, the binary may read stdin; without an
+ * explicit EOF it can hang waiting for input. `spawn` + an immediate
+ * `child.stdin.end()` defeats this (harmless and defensive regardless).
+ *
+ * Output-byte cap: captured stdout + stderr are hard-capped at
+ * `maxOutputBytes` and the result is flagged `truncated` — a runaway/looping
+ * child can never OOM the supervising process.
+ */
+import { spawn } from 'node:child_process';
+/** Default output cap: 8 MiB per stream. A one-shot final message is tiny;
+ *  the cap only fires on a runaway/looping child. */
+export const DEFAULT_MAX_OUTPUT_BYTES = 8 * 1024 * 1024;
+/**
+ * The canonical one-shot argv — pinned, no ambiguity. EVAL-VERIFIED (pi
+ * 0.78.1, P0.1):
+ *
+ *   pi -p --mode json --no-session --offline [--model <pattern>] <prompt>
+ *
+ * - `-p` is pi's one-shot/print entrypoint.
+ * - `--mode json` emits the typed JSONL event stream on stdout (the format
+ *   `oneShotCompletion.ts` parses for the assistant `message_end`).
+ * - `--no-session` keeps the call stateless — no session file is written
+ *   (one-shot has nothing to resume).
+ * - `--offline` blocks the first-boot binary fetch (pi otherwise pulls `fd` +
+ *   `ripgrep` from GitHub on first run — eval caveat 2); a one-shot text
+ *   completion needs neither.
+ * - `--model <pattern>` is appended only when a model is configured; when
+ *   omitted, pi's OWN configured default provider/model applies.
+ * - The prompt is the SOLE trailing POSITIONAL — exactly ONE argv element. A
+ *   leading-dash prompt (`"--help me"`, `"-y do X"`) can NEVER be re-parsed as
+ *   a flag because it is the last element AND all flags precede it (same
+ *   argument-injection hardening note as gemini's `-p <prompt>`).
+ */
+export function buildPiOneShotArgv(model, prompt) {
+    return [
+        '-p',
+        '--mode',
+        'json',
+        '--no-session',
+        '--offline',
+        ...(model ? ['--model', model] : []),
+        prompt,
+    ];
+}
+/**
+ * Env allowlist for pi child processes — the no-API-keys rule.
+ *
+ * Pi authenticates via its OWN `~/.pi/agent/auth.json` (subscription OAuth) or
+ * `~/.pi/agent/models.json` (custom-provider keys). HOME is passed through so
+ * pi can find those files; PATH so it can run its tools. A billing-capable
+ * provider key inherited from the parent process could silently route spend
+ * onto an API account — the exact leak class the no-API-keys rule forbids. So
+ * this is an explicit ALLOWLIST (anything not listed is dropped) PLUS an
+ * unconditional hard-delete of every billing var below.
+ */
+const PI_ENV_ALLOWLIST = [
+    // Filesystem / user identity — HOME is load-bearing: pi reads
+    // ~/.pi/agent/auth.json + models.json relative to it.
+    'HOME',
+    'USER',
+    'LOGNAME',
+    // Subprocess execution
+    'PATH',
+    'SHELL',
+    'TMPDIR',
+    // Locale
+    'LANG',
+    'LANGUAGE',
+    'LC_ALL',
+    'LC_CTYPE',
+    'LC_MESSAGES',
+    // Terminal sizing
+    'COLUMNS',
+    'LINES',
+    'ROWS',
+    'TERM',
+    // XDG base-dir conventions
+    'XDG_CONFIG_HOME',
+    'XDG_DATA_HOME',
+    'XDG_CACHE_HOME',
+    'XDG_STATE_HOME',
+];
+/**
+ * Provider billing-capable vars UNCONDITIONALLY deleted from the child env,
+ * regardless of allowlist contents. Any of these present could silently route
+ * pi onto a billed API key instead of its auth.json subscription / models.json
+ * custom-provider path. A false-negative (silent billing) is asymmetrically
+ * costly, so the delete is unconditional.
+ */
+export const PI_BILLING_ENV_VARS = [
+    'ANTHROPIC_API_KEY',
+    'CLAUDE_CODE_OAUTH_TOKEN',
+    'OPENAI_API_KEY',
+    'GEMINI_API_KEY',
+    'GOOGLE_API_KEY',
+    'XAI_API_KEY',
+    'GROQ_API_KEY',
+    'OPENROUTER_API_KEY',
+];
+/**
+ * Build the env for a `pi` child process per the no-API-keys rule. Constructs
+ * an explicit allowlist (variables not listed are dropped), then
+ * UNCONDITIONALLY hard-deletes every billing-capable provider var and clears
+ * `CLAUDECODE` (the Claude-Code session marker — pi must not believe it is
+ * running inside a Claude Code session).
+ */
+export function buildPiChildEnv(parentEnv = process.env) {
+    const env = {};
+    for (const key of PI_ENV_ALLOWLIST) {
+        const value = parentEnv[key];
+        if (value !== undefined) {
+            env[key] = value;
+        }
+    }
+    // Unconditional hard-delete — belt-and-suspenders against any allowlist
+    // expansion mistake AND any value that slipped through. Never billed.
+    for (const key of PI_BILLING_ENV_VARS) {
+        delete env[key];
+    }
+    // Pi must not inherit the Claude Code session marker.
+    delete env['CLAUDECODE'];
+    return env;
+}
+/**
+ * Spawn `pi` with the given argv and wait for completion.
+ *
+ * - Closes stdin immediately (pi may otherwise block waiting for EOF).
+ * - SIGTERM→SIGKILL on timeout (2s grace), AbortSignal handling.
+ * - Bounds captured stdout/stderr at `maxOutputBytes` (default 8 MiB),
+ *   killing the child and flagging `truncated` once the cap is exceeded.
+ * - The caller fails only on a non-zero exit code; benign startup stderr lines
+ *   are not treated as failures.
+ */
+export async function spawnPiAndWait(binary, args, options) {
+    const maxBytes = options.maxOutputBytes ?? DEFAULT_MAX_OUTPUT_BYTES;
+    return new Promise((resolve, reject) => {
+        const child = spawn(binary, args, {
+            env: options.env,
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        const stdoutChunks = [];
+        const stderrChunks = [];
+        let stdoutBytes = 0;
+        let stderrBytes = 0;
+        let truncated = false;
+        let timedOut = false;
+        let aborted = false;
+        const timer = setTimeout(() => {
+            timedOut = true;
+            child.kill('SIGTERM');
+            setTimeout(() => child.kill('SIGKILL'), 2000).unref();
+        }, options.timeoutMs);
+        timer.unref();
+        const onAbort = () => {
+            aborted = true;
+            child.kill('SIGTERM');
+        };
+        options.signal?.addEventListener('abort', onAbort, { once: true });
+        const capTriggered = () => {
+            if (truncated)
+                return;
+            truncated = true;
+            // Stop the runaway child once either stream hits the cap. Best-effort.
+            child.kill('SIGTERM');
+            setTimeout(() => child.kill('SIGKILL'), 2000).unref();
+        };
+        child.stdout.on('data', (b) => {
+            // Any data arriving once the cap is already full means we are dropping
+            // output → flag truncated (covers the exact-boundary case where the
+            // previous chunk landed us precisely AT the cap).
+            if (stdoutBytes >= maxBytes) {
+                capTriggered();
+                return;
+            }
+            const remaining = maxBytes - stdoutBytes;
+            if (b.length > remaining) {
+                stdoutChunks.push(b.subarray(0, remaining));
+                stdoutBytes = maxBytes;
+                capTriggered();
+            }
+            else {
+                stdoutChunks.push(b);
+                stdoutBytes += b.length;
+            }
+        });
+        child.stderr.on('data', (b) => {
+            if (stderrBytes >= maxBytes) {
+                capTriggered();
+                return;
+            }
+            const remaining = maxBytes - stderrBytes;
+            if (b.length > remaining) {
+                stderrChunks.push(b.subarray(0, remaining));
+                stderrBytes = maxBytes;
+                capTriggered();
+            }
+            else {
+                stderrChunks.push(b);
+                stderrBytes += b.length;
+            }
+        });
+        child.on('error', (err) => {
+            clearTimeout(timer);
+            options.signal?.removeEventListener('abort', onAbort);
+            reject(err);
+        });
+        child.on('close', (code) => {
+            clearTimeout(timer);
+            options.signal?.removeEventListener('abort', onAbort);
+            const stdout = Buffer.concat(stdoutChunks).toString('utf-8');
+            const stderr = Buffer.concat(stderrChunks).toString('utf-8');
+            if (aborted) {
+                const e = new Error('Aborted');
+                e.name = 'AbortError';
+                return reject(e);
+            }
+            if (timedOut) {
+                const e = new Error(`Pi timed out after ${options.timeoutMs}ms`);
+                e.signal = 'SIGTERM';
+                e.killed = true;
+                e.stderr = stderr;
+                return reject(e);
+            }
+            resolve({ exitCode: code, stdout, stderr, truncated });
+        });
+        // Close stdin immediately so pi doesn't wait for input.
+        child.stdin.end();
+    });
+}
+//# sourceMappingURL=piSpawn.js.map

package/dist/providers/adapters/pi-cli/transport/piSpawn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"piSpawn.js","sourceRoot":"","sources":["../../../../../src/providers/adapters/pi-cli/transport/piSpawn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C;qDACqD;AACrD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAyB,EAAE,MAAc;IAC1E,OAAO;QACL,IAAI;QACJ,QAAQ;QACR,MAAM;QACN,cAAc;QACd,WAAW;QACX,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,gBAAgB,GAAG;IACvB,8DAA8D;IAC9D,sDAAsD;IACtD,MAAM;IACN,MAAM;IACN,SAAS;IACT,uBAAuB;IACvB,MAAM;IACN,OAAO;IACP,QAAQ;IACR,SAAS;IACT,MAAM;IACN,UAAU;IACV,QAAQ;IACR,UAAU;IACV,aAAa;IACb,kBAAkB;IAClB,SAAS;IACT,OAAO;IACP,MAAM;IACN,MAAM;IACN,2BAA2B;IAC3B,iBAAiB;IACjB,eAAe;IACf,gBAAgB;IAChB,gBAAgB;CACR,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,mBAAmB;IACnB,yBAAyB;IACzB,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,aAAa;IACb,cAAc;IACd,oBAAoB;CACZ,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,YAA+B,OAAO,CAAC,GAAG;IAE1C,MAAM,GAAG,GAAsB,EAAE,CAAC;IAElC,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACnB,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,sEAAsE;IACtE,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACtC,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,sDAAsD;IACtD,OAAO,GAAG,CAAC,YAAY,CAAC,CAAC;IAEzB,OAAO,GAAG,CAAC;AACb,CAAC;AAkBD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,IAAc,EACd,OAAuB;IAEvB,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;IAEpE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE;YAChC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QAEH,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACxD,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACtB,KAAK,CAAC,KAAK,EAAE,CAAC;QAEd,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,OAAO,GAAG,IAAI,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,CAAC;QACF,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnE,MAAM,YAAY,GAAG,GAAG,EAAE;YACxB,IAAI,SAAS;gBAAE,OAAO;YACtB,SAAS,GAAG,IAAI,CAAC;YACjB,uEAAuE;YACvE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACxD,CAAC,CAAC;QAEF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACpC,uEAAuE;YACvE,oEAAoE;YACpE,kDAAkD;YAClD,IAAI,WAAW,IAAI,QAAQ,EAAE,CAAC;gBAC5B,YAAY,EAAE,CAAC;gBACf,OAAO;YACT,CAAC;YACD,MAAM,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC;YACzC,IAAI,CAAC,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;gBACzB,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;gBAC5C,WAAW,GAAG,QAAQ,CAAC;gBACvB,YAAY,EAAE,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACrB,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC;YAC1B,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACpC,IAAI,WAAW,IAAI,QAAQ,EAAE,CAAC;gBAC5B,YAAY,EAAE,CAAC;gBACf,OAAO;YACT,CAAC;YACD,MAAM,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC;YACzC,IAAI,CAAC,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;gBACzB,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;gBAC5C,WAAW,GAAG,QAAQ,CAAC;gBACvB,YAAY,EAAE,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACrB,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC;YAC1B,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtD,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC7D,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,CAAC,GAA8B,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC1D,CAAC,CAAC,IAAI,GAAG,YAAY,CAAC;gBACtB,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;YACnB,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,CAAC,GAAmE,IAAI,KAAK,CACjF,sBAAsB,OAAO,CAAC,SAAS,IAAI,CAC5C,CAAC;gBACF,CAAC,CAAC,MAAM,GAAG,SAAS,CAAC;gBACrB,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC;gBAChB,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC;gBAClB,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;YACnB,CAAC;YACD,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,wDAAwD;QACxD,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/providers/adapters/pi-cli/transport/rpcClient.d.ts

@@ -0,0 +1,103 @@
+/**
+ * PiRpcClient — typed client for pi's RPC mode (`pi --mode rpc`).
+ *
+ * Protocol (verified hands-on in the P0.1 eval, pi 0.78.1, and per upstream
+ * docs/rpc.md):
+ *   - Commands: one JSON object per line on stdin.
+ *   - Responses: `{"type":"response","command":…,"success":…,"id":…}` lines on
+ *     stdout, correlated by the optional `id` we attach to every command.
+ *   - Events: every other stdout line is an agent event (agent_start,
+ *     turn_start, message_update, tool_execution_start|update|end, turn_end,
+ *     agent_end, …), streamed asynchronously.
+ *
+ * FRAMING IS STRICT LF JSONL: split records on `\n` ONLY (tolerating a
+ * trailing `\r`). Node's `readline` is NOT protocol-compliant — it also
+ * splits on U+2028/U+2029, which are valid INSIDE JSON strings; using it
+ * would corrupt any record whose payload contains those code points. The
+ * splitter below buffers manually and is exported for direct unit testing.
+ *
+ * The subscription guard (policy.ts) is enforced by CALLERS at session/call
+ * construction — this client is the dumb pipe.
+ */
+/** A parsed pi RPC response line. */
+export interface PiRpcResponse {
+    id?: string;
+    type: 'response';
+    command: string;
+    success: boolean;
+    data?: unknown;
+    error?: string;
+}
+/** Any non-response pi event line (agent_start, message_update, …). */
+export interface PiRpcEvent {
+    type: string;
+    [key: string]: unknown;
+}
+/**
+ * Strict-LF JSONL splitter. Feed raw chunks; complete lines invoke `onLine`
+ * with the line content (trailing `\r` stripped, empty lines skipped).
+ * Returns a function to flush the trailing partial line (used at stream end).
+ *
+ * Exported for unit tests — the U+2028/U+2029-inside-string case is pinned
+ * there so a refactor to `readline` (which would break it) fails loudly.
+ */
+export declare function createStrictLfSplitter(onLine: (line: string) => void): {
+    push: (chunk: string) => void;
+    flush: () => void;
+};
+export interface PiRpcClientOptions {
+    /** Absolute path to the pi binary. */
+    binaryPath: string;
+    /** pi `--model` pattern (`provider/id`). Callers must pass policy first. */
+    model?: string;
+    /** `--session-dir` (durable transcripts). */
+    sessionDir?: string;
+    /** `--session-id` (create-or-resume a deterministic session). */
+    sessionId?: string;
+    /** Run ephemeral (`--no-session`). */
+    noSession?: boolean;
+    /** Working directory for the pi process (tool execution cwd). */
+    cwd?: string;
+    /** Extra env on top of the hardened child env (tests use this). */
+    envOverrides?: Record<string, string>;
+}
+/**
+ * One spawned `pi --mode rpc` process. Create with `PiRpcClient.spawn()`,
+ * drive with the typed command methods, consume `events()`, then `close()`.
+ */
+export declare class PiRpcClient {
+    private readonly child;
+    private readonly pending;
+    private readonly eventQueue;
+    private eventWaiter;
+    private closed;
+    private exited;
+    private nextId;
+    static spawn(options: PiRpcClientOptions): PiRpcClient;
+    private constructor();
+    /** The underlying pid (HardKill primitive integration). */
+    get pid(): number | undefined;
+    get isExited(): boolean;
+    private onLine;
+    private enqueueEvent;
+    private wakeEventWaiter;
+    /** Send a raw command object (an `id` is attached automatically). */
+    request(command: Record<string, unknown>, timeoutMs?: number): Promise<PiRpcResponse>;
+    prompt(message: string, opts?: {
+        streamingBehavior?: 'steer' | 'followUp';
+    }): Promise<PiRpcResponse>;
+    steer(message: string): Promise<PiRpcResponse>;
+    followUp(message: string): Promise<PiRpcResponse>;
+    abort(): Promise<PiRpcResponse>;
+    getState(): Promise<PiRpcResponse>;
+    /**
+     * Async iterator over agent events (everything that isn't a correlated
+     * response). Ends when the process exits and the queue drains.
+     */
+    events(): AsyncGenerator<PiRpcEvent>;
+    /** End stdin, give pi a grace period, then escalate SIGTERM → SIGKILL. */
+    close(): Promise<void>;
+    /** Throw a typed error when spawn itself failed (no pid). */
+    assertSpawned(): void;
+}
+//# sourceMappingURL=rpcClient.d.ts.map

package/dist/providers/adapters/pi-cli/transport/rpcClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpcClient.d.ts","sourceRoot":"","sources":["../../../../../src/providers/adapters/pi-cli/transport/rpcClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAOH,qCAAqC;AACrC,MAAM,WAAW,aAAa;IAC5B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,uEAAuE;AACvE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG;IACtE,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9B,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB,CAqBA;AAED,MAAM,WAAW,kBAAkB;IACjC,sCAAsC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sCAAsC;IACtC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iEAAiE;IACjE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC;AAKD;;;GAGG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqF;IAC7G,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;IAC/C,OAAO,CAAC,WAAW,CAA6B;IAChD,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAAK;IAEnB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,kBAAkB,GAAG,WAAW;IActD,OAAO;IAkBP,2DAA2D;IAC3D,IAAI,GAAG,IAAI,MAAM,GAAG,SAAS,CAE5B;IAED,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED,OAAO,CAAC,MAAM;IA2Bd,OAAO,CAAC,YAAY;IAKpB,OAAO,CAAC,eAAe;IAMvB,qEAAqE;IACrE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,SAA6B,GAAG,OAAO,CAAC,aAAa,CAAC;IAezG,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,iBAAiB,CAAC,EAAE,OAAO,GAAG,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC;IAIpG,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAI9C,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAIjD,KAAK,IAAI,OAAO,CAAC,aAAa,CAAC;IAI/B,QAAQ,IAAI,OAAO,CAAC,aAAa,CAAC;IAIlC;;;OAGG;IACI,MAAM,IAAI,cAAc,CAAC,UAAU,CAAC;IAW3C,0EAA0E;IACpE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAuB5B,6DAA6D;IAC7D,aAAa,IAAI,IAAI;CAQtB"}