@agimon-ai/doompi-config 0.0.1-alpha.2 → 0.0.1-alpha.21

package/dist/types.d.cts

@@ -1,132 +1,2 @@
-//#region src/types.d.ts
-declare const DOOM_CONFIG_TYPES: {
-  readonly ConfigService: symbol;
-};
-type ProjectTrust = 'ask' | 'always' | 'never';
-type PlanningThinkingLevel = 'off' | 'minimal' | 'low' | 'medium' | 'high' | 'xhigh' | 'max';
-type VoiceEngine = 'auto' | 'whisper-cpp' | 'openai-whisper' | 'mlx-whisper';
-type VoiceTtsEngine = 'macos-say';
-interface PlanningAgentConfig {
-  model?: string;
-  thinking?: PlanningThinkingLevel;
-}
-interface PlanningModeConfig {
-  main?: PlanningAgentConfig;
-  subagents?: PlanningAgentConfig;
-  plansDirectory?: string;
-}
-interface EditorConfig {
-  command?: string;
-}
-interface VoiceModelConfig {
-  path?: string;
-  id?: string;
-}
-interface VoiceAdapterConfig {
-  binary?: string;
-  model: VoiceModelConfig;
-}
-interface VoiceTtsConfig {
-  engine: VoiceTtsEngine;
-  voice?: string;
-  rate?: number;
-}
-interface VoiceAutoCaptureConfig {
-  model: string;
-  startPhrases?: string[];
-  stopPhrases?: string[];
-  tts: VoiceTtsConfig;
-}
-interface ResolvedVoiceAutoCaptureConfig {
-  model: string;
-  startPhrases: string[];
-  stopPhrases: string[];
-  tts: VoiceTtsConfig;
-}
-interface VoiceConfig {
-  engine?: VoiceEngine;
-  language?: string;
-  recorder?: {
-    binary?: string;
-    device?: string;
-  };
-  adapters?: {
-    'whisper-cpp'?: VoiceAdapterConfig;
-    'openai-whisper'?: VoiceAdapterConfig;
-    'mlx-whisper'?: VoiceAdapterConfig;
-  };
-  autoCapture?: VoiceAutoCaptureConfig;
-}
-interface ResolvedVoiceConfig {
-  engine: VoiceEngine;
-  language: string;
-  recorder: {
-    binary?: string;
-    device: string;
-  };
-  adapters: NonNullable<VoiceConfig['adapters']>;
-  autoCapture?: ResolvedVoiceAutoCaptureConfig;
-}
-/**
- * The matrix a repository selects by default.
- *
- * Read by `doom-pi sync`, which pins it into the generated Pi config so a plain
- * `pi` session starts on the same matrix the repository declares. The launcher
- * keeps taking its selection from flags and the environment.
- */
-interface DoomSelectionConfig {
-  majorMode?: string;
-  domains?: string[];
-  profile?: string;
-}
-interface DoomConfig {
-  modes?: {
-    planning?: PlanningModeConfig;
-  };
-  projectTrust: ProjectTrust;
-  editor?: EditorConfig;
-  voice?: VoiceConfig;
-  selection?: DoomSelectionConfig;
-}
-interface PluginHookSource {
-  pluginRoot: string;
-  configPath: string;
-}
-interface HarnessState {
-  root?: string;
-  /** The one named major mode this session runs under. */
-  majorMode: string;
-  temporaryDirectory?: string;
-  domains: string[];
-  /** The layer components the major mode resolved to. */
-  layers: string[];
-  profile?: string;
-  profileEnvironment: Record<string, string>;
-  hookGroups?: string[];
-  skillDirectories: string[];
-  agentDirectories: string[];
-  additionalDirectories: string[];
-  childExtensions: string[];
-  pluginDirectories: string[];
-  pluginHooks: PluginHookSource[];
-  mcpConfigPath?: string;
-  personaFile?: string;
-  workflowExtension?: string;
-  allowProtectedWrites: boolean;
-  hooks: boolean;
-  agents: boolean;
-  mcp: boolean;
-}
-type DeepReadonly<TValue> = TValue extends ((...args: never[]) => unknown) ? TValue : TValue extends readonly (infer TItem)[] ? readonly DeepReadonly<TItem>[] : TValue extends object ? { readonly [TKey in keyof TValue]: DeepReadonly<TValue[TKey]>; } : TValue;
-type DoomHarnessContext = DeepReadonly<HarnessState>;
-interface DoomConfigContext {
-  readonly settings: DeepReadonly<DoomConfig>;
-  readonly harness: DoomHarnessContext;
-  readonly requiresRelaunch: boolean;
-}
-interface IDoomConfigService {
-  load(repoRoot: string, homeDirectory?: string): DoomConfig;
-}
-//#endregion
-export { DOOM_CONFIG_TYPES, DeepReadonly, DoomConfig, DoomConfigContext, DoomHarnessContext, DoomSelectionConfig, EditorConfig, HarnessState, IDoomConfigService, PlanningAgentConfig, PlanningModeConfig, PlanningThinkingLevel, PluginHookSource, ProjectTrust, ResolvedVoiceAutoCaptureConfig, ResolvedVoiceConfig, VoiceAdapterConfig, VoiceAutoCaptureConfig, VoiceConfig, VoiceEngine, VoiceModelConfig, VoiceTtsConfig, VoiceTtsEngine };
-//# sourceMappingURL=types.d.cts.map
+import { DOOM_CONFIG_TYPES, DeepReadonly, DoomConfig, DoomConfigContext, DoomHarnessContext, DoomSelectionConfig, EditorConfig, HarnessState, IDoomConfigService, PlanningAgentConfig, PlanningModeConfig, PlanningThinkingLevel, PluginHookSource, ProjectTrust, ResolvedVoiceAutoCaptureConfig, ResolvedVoiceConfig, VoiceAdapterConfig, VoiceAutoCaptureConfig, VoiceConfig, VoiceEngine, VoiceModelConfig, VoiceTtsConfig, VoiceTtsEngine } from "./types/config.cjs";
+export { DOOM_CONFIG_TYPES, type DeepReadonly, type DoomConfig, type DoomConfigContext, type DoomHarnessContext, type DoomSelectionConfig, type EditorConfig, type HarnessState, type IDoomConfigService, type PlanningAgentConfig, type PlanningModeConfig, type PlanningThinkingLevel, type PluginHookSource, type ProjectTrust, type ResolvedVoiceAutoCaptureConfig, type ResolvedVoiceConfig, type VoiceAdapterConfig, type VoiceAutoCaptureConfig, type VoiceConfig, type VoiceEngine, type VoiceModelConfig, type VoiceTtsConfig, type VoiceTtsEngine };

package/dist/types.d.mts

@@ -1,132 +1,2 @@
-//#region src/types.d.ts
-declare const DOOM_CONFIG_TYPES: {
-  readonly ConfigService: symbol;
-};
-type ProjectTrust = 'ask' | 'always' | 'never';
-type PlanningThinkingLevel = 'off' | 'minimal' | 'low' | 'medium' | 'high' | 'xhigh' | 'max';
-type VoiceEngine = 'auto' | 'whisper-cpp' | 'openai-whisper' | 'mlx-whisper';
-type VoiceTtsEngine = 'macos-say';
-interface PlanningAgentConfig {
-  model?: string;
-  thinking?: PlanningThinkingLevel;
-}
-interface PlanningModeConfig {
-  main?: PlanningAgentConfig;
-  subagents?: PlanningAgentConfig;
-  plansDirectory?: string;
-}
-interface EditorConfig {
-  command?: string;
-}
-interface VoiceModelConfig {
-  path?: string;
-  id?: string;
-}
-interface VoiceAdapterConfig {
-  binary?: string;
-  model: VoiceModelConfig;
-}
-interface VoiceTtsConfig {
-  engine: VoiceTtsEngine;
-  voice?: string;
-  rate?: number;
-}
-interface VoiceAutoCaptureConfig {
-  model: string;
-  startPhrases?: string[];
-  stopPhrases?: string[];
-  tts: VoiceTtsConfig;
-}
-interface ResolvedVoiceAutoCaptureConfig {
-  model: string;
-  startPhrases: string[];
-  stopPhrases: string[];
-  tts: VoiceTtsConfig;
-}
-interface VoiceConfig {
-  engine?: VoiceEngine;
-  language?: string;
-  recorder?: {
-    binary?: string;
-    device?: string;
-  };
-  adapters?: {
-    'whisper-cpp'?: VoiceAdapterConfig;
-    'openai-whisper'?: VoiceAdapterConfig;
-    'mlx-whisper'?: VoiceAdapterConfig;
-  };
-  autoCapture?: VoiceAutoCaptureConfig;
-}
-interface ResolvedVoiceConfig {
-  engine: VoiceEngine;
-  language: string;
-  recorder: {
-    binary?: string;
-    device: string;
-  };
-  adapters: NonNullable<VoiceConfig['adapters']>;
-  autoCapture?: ResolvedVoiceAutoCaptureConfig;
-}
-/**
- * The matrix a repository selects by default.
- *
- * Read by `doom-pi sync`, which pins it into the generated Pi config so a plain
- * `pi` session starts on the same matrix the repository declares. The launcher
- * keeps taking its selection from flags and the environment.
- */
-interface DoomSelectionConfig {
-  majorMode?: string;
-  domains?: string[];
-  profile?: string;
-}
-interface DoomConfig {
-  modes?: {
-    planning?: PlanningModeConfig;
-  };
-  projectTrust: ProjectTrust;
-  editor?: EditorConfig;
-  voice?: VoiceConfig;
-  selection?: DoomSelectionConfig;
-}
-interface PluginHookSource {
-  pluginRoot: string;
-  configPath: string;
-}
-interface HarnessState {
-  root?: string;
-  /** The one named major mode this session runs under. */
-  majorMode: string;
-  temporaryDirectory?: string;
-  domains: string[];
-  /** The layer components the major mode resolved to. */
-  layers: string[];
-  profile?: string;
-  profileEnvironment: Record<string, string>;
-  hookGroups?: string[];
-  skillDirectories: string[];
-  agentDirectories: string[];
-  additionalDirectories: string[];
-  childExtensions: string[];
-  pluginDirectories: string[];
-  pluginHooks: PluginHookSource[];
-  mcpConfigPath?: string;
-  personaFile?: string;
-  workflowExtension?: string;
-  allowProtectedWrites: boolean;
-  hooks: boolean;
-  agents: boolean;
-  mcp: boolean;
-}
-type DeepReadonly<TValue> = TValue extends ((...args: never[]) => unknown) ? TValue : TValue extends readonly (infer TItem)[] ? readonly DeepReadonly<TItem>[] : TValue extends object ? { readonly [TKey in keyof TValue]: DeepReadonly<TValue[TKey]>; } : TValue;
-type DoomHarnessContext = DeepReadonly<HarnessState>;
-interface DoomConfigContext {
-  readonly settings: DeepReadonly<DoomConfig>;
-  readonly harness: DoomHarnessContext;
-  readonly requiresRelaunch: boolean;
-}
-interface IDoomConfigService {
-  load(repoRoot: string, homeDirectory?: string): DoomConfig;
-}
-//#endregion
-export { DOOM_CONFIG_TYPES, DeepReadonly, DoomConfig, DoomConfigContext, DoomHarnessContext, DoomSelectionConfig, EditorConfig, HarnessState, IDoomConfigService, PlanningAgentConfig, PlanningModeConfig, PlanningThinkingLevel, PluginHookSource, ProjectTrust, ResolvedVoiceAutoCaptureConfig, ResolvedVoiceConfig, VoiceAdapterConfig, VoiceAutoCaptureConfig, VoiceConfig, VoiceEngine, VoiceModelConfig, VoiceTtsConfig, VoiceTtsEngine };
-//# sourceMappingURL=types.d.mts.map
+import { DOOM_CONFIG_TYPES, DeepReadonly, DoomConfig, DoomConfigContext, DoomHarnessContext, DoomSelectionConfig, EditorConfig, HarnessState, IDoomConfigService, PlanningAgentConfig, PlanningModeConfig, PlanningThinkingLevel, PluginHookSource, ProjectTrust, ResolvedVoiceAutoCaptureConfig, ResolvedVoiceConfig, VoiceAdapterConfig, VoiceAutoCaptureConfig, VoiceConfig, VoiceEngine, VoiceModelConfig, VoiceTtsConfig, VoiceTtsEngine } from "./types/config.mjs";
+export { DOOM_CONFIG_TYPES, type DeepReadonly, type DoomConfig, type DoomConfigContext, type DoomHarnessContext, type DoomSelectionConfig, type EditorConfig, type HarnessState, type IDoomConfigService, type PlanningAgentConfig, type PlanningModeConfig, type PlanningThinkingLevel, type PluginHookSource, type ProjectTrust, type ResolvedVoiceAutoCaptureConfig, type ResolvedVoiceConfig, type VoiceAdapterConfig, type VoiceAutoCaptureConfig, type VoiceConfig, type VoiceEngine, type VoiceModelConfig, type VoiceTtsConfig, type VoiceTtsEngine };

package/dist/types.mjs

@@ -1,2 +1 @@
-const e={ConfigService:Symbol.for(`DoomConfig:ConfigService`)};export{e as DOOM_CONFIG_TYPES};
-//# sourceMappingURL=types.mjs.map
+import{DOOM_CONFIG_TYPES as e}from"./types/config.mjs";export{e as DOOM_CONFIG_TYPES};

package/llms.txt

@@ -0,0 +1,9 @@
+# Doom Pi Config
+
+Package-owned guidance for Doom Pi's four configuration files and typed session context.
+
+## Resources
+
+- [Package README](./README.md): Loading, precedence, domains, profiles, package layers, and public APIs.
+- [Doom Pi Config skill](./skills/doom-pi-config/SKILL.md): Operational guidance for changing modes, domains, profiles, and runtime settings.
+- [Configuration contract](./skills/doom-pi-config/references/config-contract.md): Authoritative file roles, merge rules, validation boundaries, and verification commands.

package/package.json

@@ -1,13 +1,24 @@
 {
   "name": "@agimon-ai/doompi-config",
-  "version": "0.0.1-alpha.2",
+  "version": "0.0.1-alpha.21",
   "description": "Shared Doom configuration loading and dependency injection",
+  "keywords": [
+    "ai",
+    "coding-agent",
+    "developer-tools",
+    "doompi",
+    "pi-package"
+  ],
   "homepage": "https://agimon.ai",
   "license": "MIT",
   "author": "Vuong Ngo",
   "files": [
     "dist",
-    "skills"
+    "llms.txt",
+    "README.md",
+    "skills/doom-pi-config/SKILL.md",
+    "skills/doom-pi-config/agents/openai.yaml",
+    "skills/doom-pi-config/references/config-contract.md"
   ],
   "type": "module",
   "main": "./dist/index.cjs",
@@ -119,10 +130,11 @@
     "inversify": "8.2.1",
     "reflect-metadata": "0.2.2",
     "yaml": "2.9.0",
-    "@agimon-ai/doompi-telemetry": "0.0.1-alpha.2"
+    "@agimon-ai/doompi-extension-contracts": "0.0.1-alpha.21",
+    "@agimon-ai/doompi-telemetry": "0.0.1-alpha.21"
   },
   "devDependencies": {
-    "@earendil-works/pi-coding-agent": "0.84.1",
+    "@earendil-works/pi-coding-agent": "0.84.2",
     "@types/node": "26.1.1",
     "@vitest/coverage-v8": "4.1.10",
     "tsdown": "0.22.14",
@@ -130,14 +142,14 @@
     "vitest": "4.1.10"
   },
   "peerDependencies": {
-    "@earendil-works/pi-coding-agent": "0.84.1"
+    "@earendil-works/pi-coding-agent": "0.84.2"
   },
   "engines": {
     "node": ">=22.19.0"
   },
   "pi": {
     "extensions": [
-      "./dist/extensions/pi.mjs"
+      "./dist/extensions/doom.mjs"
     ]
   },
   "scripts": {

package/skills/doom-pi-config/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: doom-pi-config
-description: Configure and evolve Doom Pi major modes, layers, domains, profiles, and typed session configuration. Use for changes to .doom/modes.yaml, .doom/domains.yaml, .doom/profiles.yaml, .doom/hooks.yaml, their ~/.pi/.doom global counterparts, the @agimon-ai/doompi-config package, matrix switching commands, or requireDoomConfigContext consumers.
+description: Configure and evolve Doom Pi runtime settings, major modes, layers, domains, profiles, and typed session configuration. Use for changes to .doom/config.yaml, .doom/modes.yaml, .doom/domains.yaml, .doom/profiles.yaml, their ~/.pi/.doom global counterparts, the @agimon-ai/doompi-config package, matrix switching commands, or requireDoomConfigContext consumers.
 ---
 
 # Doom Pi Config
@@ -18,8 +18,11 @@ Treat major modes, domains, and profiles as separate axes:
 3. Consume resolved session state through requireDoomConfigContext(ctx).harness.
 4. Keep process.env only as the parent-to-child transport and live-switch write boundary.
 5. After a matrix mutation, append a Doom config selection entry and call ctx.reload().
-6. Write each plugin path in .doom/domains.yaml in full, relative to the config that declares it (repo root, or ~/.pi/.doom for the global copy).
-7. Verify with Doom Config tests, Doom Pi tests, typecheck, ./pi.sh --domains <names> --explain, and an actual session smoke.
+6. Name plugins once under `plugins.entries`, or add a declaring-source-relative folder under `plugins.roots`; make domains reference catalog names, never path-like `plugins/foo` strings.
+7. Keep automatic folder discovery to direct-child plugins. Use an explicit entry for a deeper plugin path or a Git/npm source.
+8. Add declaring-source-relative persona folders under `profiles.roots`; a root is one profile or a direct-child container, never a recursive search.
+9. Use `profiles.entries` when a profile needs an explicit persona path or string environment defaults; explicit entries override discovery.
+10. Verify with Doom Config tests, DoomPi tests, typecheck, the built CLI's `--domains <names> --explain`, and an actual session smoke.
 
 Never cache resolved configuration at module scope. Context snapshots must be immutable and recreated after reload or session replacement.
 

package/skills/doom-pi-config/references/config-contract.md

@@ -2,12 +2,126 @@
 
 ## Sources
 
-- `.doom/modes.yaml` defines layers and the major modes built from them. A layer may contribute extension entry names, package extension specifiers, and hook group IDs. A major mode is a named set of layers, and a session runs under exactly one.
-- `.doom/domains.yaml` defines content bundles. A domain may contribute whole plugins or filtered plugin parts, an MCP allowlist, and shared-skill behavior. Aliases expand to domain names. Its optional `defaultDomains` array selects any number of domains when neither flags nor `DOOMPI_DOMAINS` names them.
-- `.doom/profiles.yaml` defines personas and environment defaults. Each persona path must remain inside `agents/`.
-- Every `.doom` document is read from `~/.pi/.doom/` first and `<repoRoot>/.doom/` second; a repository entry replaces the global one of the same name. Relative paths inside a document resolve against the config that declares it: the repository root, or `~/.pi/.doom` for the global copy.
+- `.doom/config.yaml` defines runtime settings such as project trust, editor integration, planning, and voice behavior.
+- `.doom/modes.yaml` defines layers and the major modes built from them. A layer may contribute extension entry names, package extension specifiers, and hook group IDs. Each major mode has a human-readable `description` and an ordered `layers` array, and a session runs under exactly one mode.
+- `.doom/domains.yaml` defines a named plugin catalog and content bundles. A domain may contribute whole plugins or filtered plugin parts, an MCP allowlist, and shared-skill behavior. Aliases expand to domain names. Its optional `defaultDomains` array selects any number of domains when neither flags nor `DOOMPI_DOMAINS` names them.
+- `.doom/profiles.yaml` defines a named profile catalog. Roots discover persona folders, while explicit entries can attach environment defaults.
+- Each of these four documents is read from `~/.pi/.doom/` first and `<repoRoot>/.doom/` second; a repository entry replaces the global one of the same name. Relative paths inside a document resolve against the config that declares it: the repository root, or `~/.pi/.doom` for the global copy.
 
-Parsing and resolution belong to `@agimon-ai/doompi-config` (`majorModes.ts`), `domains.ts`, and `profiles.ts`. Environment transport belongs to `harnessState.ts`. Pi context integration belongs to `piContext.ts`.
+Parsing and resolution belong to `@agimon-ai/doompi-config` (`config.ts`, `majorModes.ts`, `domains.ts`, and `profiles.ts`). Environment transport belongs to `harnessState.ts`. Pi context integration belongs to `piContext.ts`.
+
+## Major mode definitions
+
+`doompi init` emits rich major-mode mappings:
+
+```yaml
+layers:
+  guardrails:
+    extensions: [repositoryHooks, ./extensions/project-policy.ts]
+  team:
+    packages: ['@agimon-ai/doompi-team']
+defaultMajorMode: copilot
+majorMode:
+  copilot:
+    description: General-purpose coding mode with delegation.
+    layers: [guardrails, team]
+```
+
+Bare `extensions` values select DoomPi built-ins. Path-like values beginning with `./` or
+`../`, plus absolute paths, load Pi-compatible local scripts or extension directories.
+They resolve from the repository root in project config and from `~/.pi/.doom` in global
+config. Keep npm package specifiers and package-owned configuration under `packages`.
+Path-like `packages` remain supported for compatibility with unpublished Pi packages.
+
+Home and repository `layers` and `majorMode` records merge by name. Distinct names from both files remain available; a same-named repository entry replaces the complete home entry. Legacy array entries such as `copilot: [team]` are still accepted and normalized with a generated description, but new configuration should use the rich mapping emitted by `doompi init`.
+
+## Domain plugin catalog
+
+```yaml
+defaultDomains: [default]
+plugins:
+  roots: [plugins, ../shared-plugins]
+  entries:
+    local-tool:
+      source: local
+      path: vendor/local-tool
+    remote-tool:
+      source: url
+      url: https://github.com/acme/plugin-repository.git
+      path: plugins/remote-tool
+      ref: main
+      # sha: optional immutable commit
+    package-tool:
+      source: npm
+      package: '@acme/package-tool'
+      version: 1.2.3
+      # registry: https://registry.npmjs.org
+
+domains:
+  default:
+    description: Default repository tools.
+    plugins:
+      - local-tool
+      - name: remote-tool
+        skills: [typescript]
+        agents: [reviewer]
+        hooks: false
+        mcp: true
+aliases: {}
+```
+
+A configured root can identify a supported marketplace manifest, one plugin root, or a
+container whose direct-child folders are plugins. Do not recursively discover nested plugin
+folders. The plugin ID is its manifest `name`, falling back to the directory name. A domain
+must use that ID; legacy path-like references such as `plugins/foo` are rejected.
+
+DoomPi automatically checks personal and repository Codex marketplace layouts. It does not
+inspect Codex's private cache. Marketplace plugin names are always qualified as
+`plugin@marketplace`; an explicit entry may deliberately override that qualified ID. Invalid
+automatic entries become diagnostics, while malformed explicit entries and unknown domain
+references are fatal.
+
+The personal file loads before the repository file. Roots from both layers accumulate in
+source order. Explicit entries, domains, and aliases merge by name, with a repository value
+replacing the personal value. Every relative root and local path remains relative to its own
+declaring file.
+
+Git and npm entries are materialized by DoomPi into `~/.pi/.doom/plugin-cache`. Cache identity
+includes the full source descriptor, and an existing cache is reused without refreshing a
+mutable ref or unpinned package. Prefer a Git SHA or exact npm version; change the descriptor
+(or remove its cache directory) to refresh deliberately. `--plugin-dir` stays session-local and
+is not written into the catalog.
+
+## Profile catalog
+
+```yaml
+profiles:
+  roots: [agents/acme, ../shared-personas]
+  entries:
+    writer:
+      persona: agents/special/writer
+      env:
+        BRAND: acme
+        TONE: concise
+```
+
+A configured root may itself be a profile, or it may be a container whose direct-child
+directories are profiles. A directory qualifies when it directly contains `profile.md`,
+`SOUL.md`, or `AGENTS.md`. Its directory name becomes the profile name and its discovered
+environment is empty. Discovery does not recurse: use another root or an explicit entry for
+a deeper directory.
+
+Home roots are inspected before repository roots and resolve against their declaring config.
+Later roots replace an earlier discovered profile of the same name. Explicit entries override
+discoveries; named entries merge home first and repository last. An explicit persona must be
+relative to its declaring config and stay within either `agents/` or a profile root declared
+in that same file. Persona directory and file symlinks may not escape those boundaries.
+
+DoomPi concatenates non-empty `profile.md`, `SOUL.md`, and `AGENTS.md` content in that order.
+Sync freshness includes final discovered profile identities, environment defaults, and persona
+file content. Already exported environment values win over profile defaults. The legacy flat
+form—profile names directly under `profiles`—remains accepted, but new and generated
+configuration should use `profiles.roots` and `profiles.entries`.
 
 ## Typed context
 
@@ -36,8 +150,9 @@ Never mutate `config.harness`. Never cache `readHarnessState()` or resolved mani
 ## Verification
 
 ```sh
-pnpm nx test-unit @agimon-ai/doompi-config
+pnpm nx test @agimon-ai/doompi-config
 pnpm nx typecheck @agimon-ai/doompi-config
-pnpm nx test-unit @agimon-ai/doompi
-./pi.sh --domains development --explain
+pnpm nx test @agimon-ai/doompi
+pnpm nx build @agimon-ai/doompi
+pnpm --filter @agimon-ai/doompi exec doompi --domains development --explain
 ```

package/dist/atomicJson.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"atomicJson.cjs","names":["path","randomUUID"],"sources":["../src/atomicJson.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\n/**\n * Private atomic JSON writes.\n *\n * Write to a uniquely named temporary file in the destination directory, then\n * rename onto the target. Rename is atomic within a filesystem, so a reader\n * sees either the previous file or the complete new one and never a partial\n * write. The temporary name carries the pid and a random suffix, so two\n * processes writing the same target cannot collide on it.\n *\n * This prevents torn reads. It does NOT prevent lost updates: two writers doing\n * read-modify-write still clobber each other, because the rename only publishes\n * what the caller already computed. Harness state avoids that by giving every\n * process a file it owns rather than by locking.\n *\n * AVOID:\n * - Treating this as a lock\n * - Leaving the temporary file behind when the write fails\n */\n\nconst PRIVATE_FILE_MODE = 0o600;\nconst PRIVATE_DIRECTORY_MODE = 0o700;\nconst TEMPORARY_SUFFIX = '.tmp';\n\n/** Writes JSON readable by its owner only, replacing the target atomically. */\nexport function writePrivateAtomicJson(filePath: string, value: unknown): void {\n  fs.mkdirSync(path.dirname(filePath), { mode: PRIVATE_DIRECTORY_MODE, recursive: true });\n  const temporaryPath = `${filePath}.${process.pid}.${randomUUID()}${TEMPORARY_SUFFIX}`;\n  try {\n    fs.writeFileSync(temporaryPath, `${JSON.stringify(value, null, 2)}\\n`, { mode: PRIVATE_FILE_MODE });\n    fs.renameSync(temporaryPath, filePath);\n  } catch (error) {\n    fs.rmSync(temporaryPath, { force: true });\n    throw error;\n  }\n}\n"],"mappings":"0OA4BA,SAAgB,EAAuB,EAAkB,EAAsB,CAC7E,EAAA,QAAG,UAAUA,EAAAA,QAAK,QAAQ,CAAQ,EAAG,CAAE,KAAM,IAAwB,UAAW,EAAK,CAAC,EACtF,IAAM,EAAgB,GAAG,EAAS,GAAG,QAAQ,IAAI,IAAA,EAAGC,EAAAA,WAAAA,CAAW,QAC/D,GAAI,CACF,EAAA,QAAG,cAAc,EAAe,GAAG,KAAK,UAAU,EAAO,KAAM,CAAC,EAAE,IAAK,CAAE,KAAM,GAAkB,CAAC,EAClG,EAAA,QAAG,WAAW,EAAe,CAAQ,CACvC,OAAS,EAAO,CAEd,MADA,EAAA,QAAG,OAAO,EAAe,CAAE,MAAO,EAAK,CAAC,EAClC,CACR,CACF"}

package/dist/atomicJson.d.cts.map

@@ -1 +0,0 @@
-{"version":3,"file":"atomicJson.d.cts","names":[],"sources":["../src/atomicJson.ts"],"mappings":";;iBA4BgB,uBAAuB,kBAAkB"}

package/dist/atomicJson.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"atomicJson.d.mts","names":[],"sources":["../src/atomicJson.ts"],"mappings":";;iBA4BgB,uBAAuB,kBAAkB"}

package/dist/atomicJson.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"atomicJson.mjs","names":[],"sources":["../src/atomicJson.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\n/**\n * Private atomic JSON writes.\n *\n * Write to a uniquely named temporary file in the destination directory, then\n * rename onto the target. Rename is atomic within a filesystem, so a reader\n * sees either the previous file or the complete new one and never a partial\n * write. The temporary name carries the pid and a random suffix, so two\n * processes writing the same target cannot collide on it.\n *\n * This prevents torn reads. It does NOT prevent lost updates: two writers doing\n * read-modify-write still clobber each other, because the rename only publishes\n * what the caller already computed. Harness state avoids that by giving every\n * process a file it owns rather than by locking.\n *\n * AVOID:\n * - Treating this as a lock\n * - Leaving the temporary file behind when the write fails\n */\n\nconst PRIVATE_FILE_MODE = 0o600;\nconst PRIVATE_DIRECTORY_MODE = 0o700;\nconst TEMPORARY_SUFFIX = '.tmp';\n\n/** Writes JSON readable by its owner only, replacing the target atomically. */\nexport function writePrivateAtomicJson(filePath: string, value: unknown): void {\n  fs.mkdirSync(path.dirname(filePath), { mode: PRIVATE_DIRECTORY_MODE, recursive: true });\n  const temporaryPath = `${filePath}.${process.pid}.${randomUUID()}${TEMPORARY_SUFFIX}`;\n  try {\n    fs.writeFileSync(temporaryPath, `${JSON.stringify(value, null, 2)}\\n`, { mode: PRIVATE_FILE_MODE });\n    fs.renameSync(temporaryPath, filePath);\n  } catch (error) {\n    fs.rmSync(temporaryPath, { force: true });\n    throw error;\n  }\n}\n"],"mappings":"yFA4BA,SAAgB,EAAuB,EAAkB,EAAsB,CAC7E,EAAG,UAAU,EAAK,QAAQ,CAAQ,EAAG,CAAE,KAAM,IAAwB,UAAW,EAAK,CAAC,EACtF,IAAM,EAAgB,GAAG,EAAS,GAAG,QAAQ,IAAI,GAAG,EAAW,QAC/D,GAAI,CACF,EAAG,cAAc,EAAe,GAAG,KAAK,UAAU,EAAO,KAAM,CAAC,EAAE,IAAK,CAAE,KAAM,GAAkB,CAAC,EAClG,EAAG,WAAW,EAAe,CAAQ,CACvC,OAAS,EAAO,CAEd,MADA,EAAG,OAAO,EAAe,CAAE,MAAO,EAAK,CAAC,EAClC,CACR,CACF"}

package/dist/config/piConfig.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"piConfig.cjs","names":["fs","os","getAgentDir","path","CONFIG_DIR_NAME"],"sources":["../../src/config/piConfig.ts"],"sourcesContent":["import fs from 'node:fs';\nimport os from 'node:os';\nimport path from 'node:path';\nimport { CONFIG_DIR_NAME, getAgentDir } from '@earendil-works/pi-coding-agent';\nimport type { PiConfig, PiConfigLoadOptions, PiConfigPaths } from './schema.ts';\n\nconst SETTINGS_FILE_NAME = 'settings.json';\nconst LEGACY_CONFIG_DIR_NAME = 'pi';\n\nfunction isObject(value: unknown): value is PiConfig {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction mergeConfig(base: PiConfig, override: PiConfig): PiConfig {\n  const result: PiConfig = { ...base };\n  for (const [key, value] of Object.entries(override)) {\n    const current = result[key];\n    result[key] = isObject(current) && isObject(value) ? mergeConfig(current, value) : value;\n  }\n  return result;\n}\n\nfunction readConfig(filePath: string): PiConfig {\n  if (!fs.existsSync(filePath)) return {};\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(fs.readFileSync(filePath, 'utf8'));\n  } catch (error) {\n    throw new Error(`Could not parse Pi settings at ${filePath}`, { cause: error });\n  }\n  if (!isObject(parsed)) throw new Error(`Pi settings at ${filePath} must be a JSON object`);\n  return parsed;\n}\n\nfunction readConfigPaths(paths: readonly string[]): PiConfig {\n  return paths.reduce<PiConfig>((config, filePath) => mergeConfig(config, readConfig(filePath)), {});\n}\n\nfunction projectIsTrusted(value: PiConfigLoadOptions['isProjectTrusted']): boolean {\n  return typeof value === 'function' ? value() : value;\n}\n\nexport function piConfigPaths(\n  repoRoot: string,\n  homeDirectory = os.homedir(),\n  agentDirectory = homeDirectory === os.homedir() ? getAgentDir() : path.join(homeDirectory, CONFIG_DIR_NAME, 'agent'),\n): PiConfigPaths {\n  return {\n    canonicalUser: path.join(agentDirectory, SETTINGS_FILE_NAME),\n    canonicalProject: path.join(repoRoot, CONFIG_DIR_NAME, SETTINGS_FILE_NAME),\n    legacyUser: [path.join(homeDirectory, CONFIG_DIR_NAME, SETTINGS_FILE_NAME)],\n    legacyProject: [path.join(repoRoot, LEGACY_CONFIG_DIR_NAME, SETTINGS_FILE_NAME)],\n  };\n}\n\nexport function loadPiConfig(options: PiConfigLoadOptions): PiConfig {\n  const paths = piConfigPaths(options.repoRoot, options.homeDirectory);\n  const userPaths = [...paths.legacyUser, ...(options.userConfigPaths ?? []), paths.canonicalUser];\n  const projectPaths = [...paths.legacyProject, ...(options.projectConfigPaths ?? []), paths.canonicalProject];\n  const defaults = options.defaults ?? {};\n  const user = readConfigPaths(userPaths);\n  const trustedProject = projectIsTrusted(options.isProjectTrusted) ? readConfigPaths(projectPaths) : {};\n  return [\n    defaults,\n    user,\n    options.overlay ?? {},\n    trustedProject,\n    options.environment ?? {},\n    options.cli ?? {},\n    options.programmatic ?? {},\n  ].reduce(mergeConfig, {});\n}\n"],"mappings":"ySAMA,MAAM,EAAqB,gBAG3B,SAAS,EAAS,EAAmC,CACnD,OAAO,OAAO,GAAU,YAAY,GAAkB,CAAC,MAAM,QAAQ,CAAK,CAC5E,CAEA,SAAS,EAAY,EAAgB,EAA8B,CACjE,IAAM,EAAmB,CAAE,GAAG,CAAK,EACnC,IAAK,GAAM,CAAC,EAAK,KAAU,OAAO,QAAQ,CAAQ,EAAG,CACnD,IAAM,EAAU,EAAO,GACvB,EAAO,GAAO,EAAS,CAAO,GAAK,EAAS,CAAK,EAAI,EAAY,EAAS,CAAK,EAAI,CACrF,CACA,OAAO,CACT,CAEA,SAAS,EAAW,EAA4B,CAC9C,GAAI,CAACA,EAAAA,QAAG,WAAW,CAAQ,EAAG,MAAO,CAAC,EACtC,IAAI,EACJ,GAAI,CACF,EAAS,KAAK,MAAMA,EAAAA,QAAG,aAAa,EAAU,MAAM,CAAC,CACvD,OAAS,EAAO,CACd,MAAU,MAAM,kCAAkC,IAAY,CAAE,MAAO,CAAM,CAAC,CAChF,CACA,GAAI,CAAC,EAAS,CAAM,EAAG,MAAU,MAAM,kBAAkB,EAAS,uBAAuB,EACzF,OAAO,CACT,CAEA,SAAS,EAAgB,EAAoC,CAC3D,OAAO,EAAM,QAAkB,EAAQ,IAAa,EAAY,EAAQ,EAAW,CAAQ,CAAC,EAAG,CAAC,CAAC,CACnG,CAEA,SAAS,EAAiB,EAAyD,CACjF,OAAO,OAAO,GAAU,WAAa,EAAM,EAAI,CACjD,CAEA,SAAgB,EACd,EACA,EAAgBC,EAAAA,QAAG,QAAQ,EAC3B,EAAiB,IAAkBA,EAAAA,QAAG,QAAQ,GAAA,EAAIC,EAAAA,YAAAA,CAAY,EAAIC,EAAAA,QAAK,KAAK,EAAeC,EAAAA,gBAAiB,OAAO,EACpG,CACf,MAAO,CACL,cAAeD,EAAAA,QAAK,KAAK,EAAgB,CAAkB,EAC3D,iBAAkBA,EAAAA,QAAK,KAAK,EAAUC,EAAAA,gBAAiB,CAAkB,EACzE,WAAY,CAACD,EAAAA,QAAK,KAAK,EAAeC,EAAAA,gBAAiB,CAAkB,CAAC,EAC1E,cAAe,CAACD,EAAAA,QAAK,KAAK,EAAU,KAAwB,CAAkB,CAAC,CACjF,CACF,CAEA,SAAgB,EAAa,EAAwC,CACnE,IAAM,EAAQ,EAAc,EAAQ,SAAU,EAAQ,aAAa,EAC7D,EAAY,CAAC,GAAG,EAAM,WAAY,GAAI,EAAQ,iBAAmB,CAAC,EAAI,EAAM,aAAa,EACzF,EAAe,CAAC,GAAG,EAAM,cAAe,GAAI,EAAQ,oBAAsB,CAAC,EAAI,EAAM,gBAAgB,EACrG,EAAW,EAAQ,UAAY,CAAC,EAChC,EAAO,EAAgB,CAAS,EAChC,EAAiB,EAAiB,EAAQ,gBAAgB,EAAI,EAAgB,CAAY,EAAI,CAAC,EACrG,MAAO,CACL,EACA,EACA,EAAQ,SAAW,CAAC,EACpB,EACA,EAAQ,aAAe,CAAC,EACxB,EAAQ,KAAO,CAAC,EAChB,EAAQ,cAAgB,CAAC,CAC3B,CAAC,CAAC,OAAO,EAAa,CAAC,CAAC,CAC1B"}

package/dist/config/piConfig.d.cts.map

@@ -1 +0,0 @@
-{"version":3,"file":"piConfig.d.cts","names":[],"sources":["../../src/config/piConfig.ts"],"mappings":";;iBA0CgB,cACd,kBACA,wBACA,0BACC;iBASa,aAAa,SAAS,sBAAsB"}

package/dist/config/piConfig.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"piConfig.d.mts","names":[],"sources":["../../src/config/piConfig.ts"],"mappings":";;iBA0CgB,cACd,kBACA,wBACA,0BACC;iBASa,aAAa,SAAS,sBAAsB"}

package/dist/config/piConfig.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"piConfig.mjs","names":[],"sources":["../../src/config/piConfig.ts"],"sourcesContent":["import fs from 'node:fs';\nimport os from 'node:os';\nimport path from 'node:path';\nimport { CONFIG_DIR_NAME, getAgentDir } from '@earendil-works/pi-coding-agent';\nimport type { PiConfig, PiConfigLoadOptions, PiConfigPaths } from './schema.ts';\n\nconst SETTINGS_FILE_NAME = 'settings.json';\nconst LEGACY_CONFIG_DIR_NAME = 'pi';\n\nfunction isObject(value: unknown): value is PiConfig {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction mergeConfig(base: PiConfig, override: PiConfig): PiConfig {\n  const result: PiConfig = { ...base };\n  for (const [key, value] of Object.entries(override)) {\n    const current = result[key];\n    result[key] = isObject(current) && isObject(value) ? mergeConfig(current, value) : value;\n  }\n  return result;\n}\n\nfunction readConfig(filePath: string): PiConfig {\n  if (!fs.existsSync(filePath)) return {};\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(fs.readFileSync(filePath, 'utf8'));\n  } catch (error) {\n    throw new Error(`Could not parse Pi settings at ${filePath}`, { cause: error });\n  }\n  if (!isObject(parsed)) throw new Error(`Pi settings at ${filePath} must be a JSON object`);\n  return parsed;\n}\n\nfunction readConfigPaths(paths: readonly string[]): PiConfig {\n  return paths.reduce<PiConfig>((config, filePath) => mergeConfig(config, readConfig(filePath)), {});\n}\n\nfunction projectIsTrusted(value: PiConfigLoadOptions['isProjectTrusted']): boolean {\n  return typeof value === 'function' ? value() : value;\n}\n\nexport function piConfigPaths(\n  repoRoot: string,\n  homeDirectory = os.homedir(),\n  agentDirectory = homeDirectory === os.homedir() ? getAgentDir() : path.join(homeDirectory, CONFIG_DIR_NAME, 'agent'),\n): PiConfigPaths {\n  return {\n    canonicalUser: path.join(agentDirectory, SETTINGS_FILE_NAME),\n    canonicalProject: path.join(repoRoot, CONFIG_DIR_NAME, SETTINGS_FILE_NAME),\n    legacyUser: [path.join(homeDirectory, CONFIG_DIR_NAME, SETTINGS_FILE_NAME)],\n    legacyProject: [path.join(repoRoot, LEGACY_CONFIG_DIR_NAME, SETTINGS_FILE_NAME)],\n  };\n}\n\nexport function loadPiConfig(options: PiConfigLoadOptions): PiConfig {\n  const paths = piConfigPaths(options.repoRoot, options.homeDirectory);\n  const userPaths = [...paths.legacyUser, ...(options.userConfigPaths ?? []), paths.canonicalUser];\n  const projectPaths = [...paths.legacyProject, ...(options.projectConfigPaths ?? []), paths.canonicalProject];\n  const defaults = options.defaults ?? {};\n  const user = readConfigPaths(userPaths);\n  const trustedProject = projectIsTrusted(options.isProjectTrusted) ? readConfigPaths(projectPaths) : {};\n  return [\n    defaults,\n    user,\n    options.overlay ?? {},\n    trustedProject,\n    options.environment ?? {},\n    options.cli ?? {},\n    options.programmatic ?? {},\n  ].reduce(mergeConfig, {});\n}\n"],"mappings":"0JAMA,MAAM,EAAqB,gBAG3B,SAAS,EAAS,EAAmC,CACnD,OAAO,OAAO,GAAU,YAAY,GAAkB,CAAC,MAAM,QAAQ,CAAK,CAC5E,CAEA,SAAS,EAAY,EAAgB,EAA8B,CACjE,IAAM,EAAmB,CAAE,GAAG,CAAK,EACnC,IAAK,GAAM,CAAC,EAAK,KAAU,OAAO,QAAQ,CAAQ,EAAG,CACnD,IAAM,EAAU,EAAO,GACvB,EAAO,GAAO,EAAS,CAAO,GAAK,EAAS,CAAK,EAAI,EAAY,EAAS,CAAK,EAAI,CACrF,CACA,OAAO,CACT,CAEA,SAAS,EAAW,EAA4B,CAC9C,GAAI,CAAC,EAAG,WAAW,CAAQ,EAAG,MAAO,CAAC,EACtC,IAAI,EACJ,GAAI,CACF,EAAS,KAAK,MAAM,EAAG,aAAa,EAAU,MAAM,CAAC,CACvD,OAAS,EAAO,CACd,MAAU,MAAM,kCAAkC,IAAY,CAAE,MAAO,CAAM,CAAC,CAChF,CACA,GAAI,CAAC,EAAS,CAAM,EAAG,MAAU,MAAM,kBAAkB,EAAS,uBAAuB,EACzF,OAAO,CACT,CAEA,SAAS,EAAgB,EAAoC,CAC3D,OAAO,EAAM,QAAkB,EAAQ,IAAa,EAAY,EAAQ,EAAW,CAAQ,CAAC,EAAG,CAAC,CAAC,CACnG,CAEA,SAAS,EAAiB,EAAyD,CACjF,OAAO,OAAO,GAAU,WAAa,EAAM,EAAI,CACjD,CAEA,SAAgB,EACd,EACA,EAAgB,EAAG,QAAQ,EAC3B,EAAiB,IAAkB,EAAG,QAAQ,EAAI,EAAY,EAAI,EAAK,KAAK,EAAe,EAAiB,OAAO,EACpG,CACf,MAAO,CACL,cAAe,EAAK,KAAK,EAAgB,CAAkB,EAC3D,iBAAkB,EAAK,KAAK,EAAU,EAAiB,CAAkB,EACzE,WAAY,CAAC,EAAK,KAAK,EAAe,EAAiB,CAAkB,CAAC,EAC1E,cAAe,CAAC,EAAK,KAAK,EAAU,KAAwB,CAAkB,CAAC,CACjF,CACF,CAEA,SAAgB,EAAa,EAAwC,CACnE,IAAM,EAAQ,EAAc,EAAQ,SAAU,EAAQ,aAAa,EAC7D,EAAY,CAAC,GAAG,EAAM,WAAY,GAAI,EAAQ,iBAAmB,CAAC,EAAI,EAAM,aAAa,EACzF,EAAe,CAAC,GAAG,EAAM,cAAe,GAAI,EAAQ,oBAAsB,CAAC,EAAI,EAAM,gBAAgB,EACrG,EAAW,EAAQ,UAAY,CAAC,EAChC,EAAO,EAAgB,CAAS,EAChC,EAAiB,EAAiB,EAAQ,gBAAgB,EAAI,EAAgB,CAAY,EAAI,CAAC,EACrG,MAAO,CACL,EACA,EACA,EAAQ,SAAW,CAAC,EACpB,EACA,EAAQ,aAAe,CAAC,EACxB,EAAQ,KAAO,CAAC,EAChB,EAAQ,cAAgB,CAAC,CAC3B,CAAC,CAAC,OAAO,EAAa,CAAC,CAAC,CAC1B"}

package/dist/config/schema.d.cts.map

@@ -1 +0,0 @@
-{"version":3,"file":"schema.d.cts","names":[],"sources":["../../src/config/schema.ts"],"mappings":";KAAY,WAAW;UAEN;EACf;;UAGe;EACf;EACA;EACA;EACA;;UAGe;EACf;EACA;EACA,WAAW;EACX,UAAU;EACV;EACA;EACA,eAAe;EACf,cAAc;EACd,MAAM;EACN;;UAGe;EACf,WAAW;EACX,eAAe;EACf,cAAc;EACd,MAAM;EACN"}

package/dist/config/schema.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"schema.d.mts","names":[],"sources":["../../src/config/schema.ts"],"mappings":";KAAY,WAAW;UAEN;EACf;;UAGe;EACf;EACA;EACA;EACA;;UAGe;EACf;EACA;EACA,WAAW;EACX,UAAU;EACV;EACA;EACA,eAAe;EACf,cAAc;EACd,MAAM;EACN;;UAGe;EACf,WAAW;EACX,eAAe;EACf,cAAc;EACd,MAAM;EACN"}