[FRFlo]

Summary

• Add an opt-in persistent Executor client channel for cloud and self-hosted endpoints, with binding-token propagation, reconnect/rebind, and session lifecycle handling.
• Expose bounded workspace capabilities and bridge configured MCP tools, resources, and prompts through pi-mcp-adapter session events.
• Reject cloud WebSocket URLs outside the configured Executor origin; validate opened workspace files before reading and preserve path and secret restrictions.

Dependencies and related work

• Depends on pi-mcp-adapter#857 for the client bridge: feat(mcp): add client-channel bridge nicobailon/pi-mcp-adapter#857
• Implements client support for Executor#2313: feat(mcp): add persistent client channels UsefulSoftwareCo/executor#2313

Verification

• bun test ./test/client-channel.test.ts — 9 passed.
• bun run typecheck — passed.
• bun run lint — passed with 0 warnings and errors.
• Targeted oxfmt check — passed for changed files.
• Repository-wide fmt:check still reports formatting issues in 17 unrelated files; no unrelated formatting changes are included.