pi-mono/packages/server
Christian Klotz 305c014dcc
fix: make session authentication transport-specific (#7551)
Set the initial protocol version to 1 and remove bearer authentication from framed messages. Require transports to establish authorized connections.
2026-08-03 16:40:00 +03:00
..
src fix: make session authentication transport-specific (#7551) 2026-08-03 16:40:00 +03:00
test fix: make session authentication transport-specific (#7551) 2026-08-03 16:40:00 +03:00
CHANGELOG.md docs: remove contributor changelog entries 2026-08-01 02:06:46 +03:00
package.json test(server): consolidate reusable test infrastructure 2026-07-31 17:59:17 +03:00
README.md fix: make session authentication transport-specific (#7551) 2026-08-03 16:40:00 +03:00
tsconfig.build.json chore: rename orchestrator to server (#6898) 2026-07-21 13:32:42 +02:00
tsconfig.test.json feat(server): add composable protocol server 2026-07-31 17:32:29 +03:00
vitest.config.ts feat(server): add composable protocol server 2026-07-31 17:32:29 +03:00

@earendil-works/pi-server

Experimental. This package is under active development and may change or be removed without notice. Its CLI, APIs, and behavior are not yet stable.

Server package for pi.

CLI

server --help

Session server core

The package also exports the new PiServer session server. This API is additive while the legacy child-process supervisor and server CLI are migrated.

import type { PiSessionBackend } from "@earendil-works/pi-server";
import { createUnixServer } from "@earendil-works/pi-server/unix";

const backend: PiSessionBackend = {
  async listSessions() {
    return storage.listSessions();
  },
  async listModels() {
    return modelRegistry.listModels();
  },
  async createSession(options) {
    return storage.createAndOpen(options);
  },
  async openSession(sessionId) {
    return storage.open(sessionId);
  },
};

const server = createUnixServer(backend, {
  path: "/tmp/pi/server.sock",
});
await server.start();

PiServer composes transport listeners through the PiServerListener interface. Each listener must complete any transport-specific authentication and authorization before passing a connection to PiServer. For example, a WebSocket listener can validate credentials during the HTTP upgrade, while the Unix listener relies on socket filesystem permissions. The Unix submodule exports the createUnixListener() building block and createUnixServer() preset, keeping the common case concise without coupling the primary server to Unix sockets. The listener uses length-prefixed CBOR messages from @earendil-works/pi-protocol. It does not yet replace the legacy JSONL IPC control plane, child-process supervisor, standalone server CLI, or Radius presence integration.

Transport testing

Custom transports can use @earendil-works/pi-server/testing for deterministic protocol conformance tests. It exports createTestServer(), TestSessionBackend, ProtocolTestClient, and the transport-neutral WireChannel contract. connectUnixTestClient() is provided for Unix transport tests.

pi-ai protocol bridge

@earendil-works/pi-ai domain objects and @earendil-works/pi-protocol wire DTOs remain independent. This package owns their boundary and exports toProtocolModelMetadata(), toProtocolAssistantMessage(), toProtocolUserMessage(), and toProtocolToolResultMessage().

The adapters reject invalid tool inputs, identifiers, timestamps, and mismatched tool results; toProtocolToolResultMessage() requires the original ToolCall so it can verify the association and convert its arguments itself. Diagnostic details are explicitly sanitized. Closed pi-ai unions are mapped exhaustively, and compile-time field manifests enumerate current pi-ai properties so additions require an explicit review. The protocol mirrors pi-ai vocabulary such as toolCall and toolUse where the semantics are identical. Protocol schemas enforce consistent lifecycle states, and tests encode adapter output through the runtime schemas so incompatible changes fail in the bridging package.

Legacy server migration

The existing IPC, supervisor, process management, persistence, and Radius modules remain available during migration. The new Unix session protocol supersedes the legacy socket framing and RPC proxy only after the coding-agent backend and CLI replacement have landed. Radius is presence and registration infrastructure, not a transport, and requires a separate integration with the new server lifecycle before the legacy supervisor can be removed.