@agimon-ai/po 0.0.0-alpha.2 → 0.0.0-alpha.21

package/docs/server/security.md

@@ -9,7 +9,7 @@ trusted owner account
   |
   +-- po-server
         +-- DirectHarnessRuntime
-        +-- configured extensions and server facets
+        +-- configured extensions and server plugins
         +-- session journal and in-process APIs
         +-- authenticated HTTP/WebSocket listener
   |
@@ -29,7 +29,7 @@ The design aims to:
 - keep the session token out of process arguments and application state sent to clients;
 - authenticate direct HTTP and `/api/ws` protocol access with a random capability;
 - load only the built `poServer` entries the scope's configuration selects, each confined to its package;
-- keep package handlers in process while isolating optional facet failures; and
+- keep package handlers in process while isolating optional package failures; and
 - preserve session history ownership so two runtimes cannot write the same journal concurrently.
 
 It does not attempt to:
@@ -45,7 +45,7 @@ It does not attempt to:
 | --------------------------- | ---------------------------------------------------------------------- | --------------------------------------------------------------------- |
 | HTTP and `/api/ws` listener | Loopback by default; token required except health                      | Owner, root, token holder, and any exposed reverse proxy              |
 | Listener token              | Read from a file and compared as a bearer capability                   | Caller creates and protects the file                                  |
-| Server facets               | Live composition, entries confined to their package, content URLs      | Repository configuration and installed package contents are trusted   |
+| Server plugins              | Live composition, entries confined to their package, content URLs      | Repository configuration and installed package contents are trusted   |
 | Session journal             | Explicit history ownership and v4 JSONL storage                        | Owner and any process able to access the session directory            |
 | Package APIs                | In-process registration and fixed route mounts                         | Handlers are trusted executable code                                  |
 | Direct harness              | Same-process runtime with configured working directory and environment | Command, configuration, repository, model providers, and dependencies |
@@ -66,9 +66,9 @@ A token authenticates the caller to the session. It is not a per-operation permi
 
 ## Package trust
 
-The server does not compile or discover package code while serving a request. When it admits a scope or starts a session, it composes that scope's configuration, reads the selected packages' `poServer` declarations, confines each built entry to its package, filters ownership and scope, and then imports and starts each eligible facet.
+The server does not compile or discover package code while serving a request. When it admits a scope or starts a session, it composes that scope's configuration, reads the selected packages' `poServer` declarations, confines each built entry to its package, filters ownership and scope, and then imports and installs each eligible server plugin.
 
-Required facet failures prevent readiness. Optional failures are reported and isolated. An import that times out or throws is not retried, and a failed entry never selects an alternate directory or legacy module set.
+Required package failures prevent readiness. Optional failures are reported and isolated. An import that times out or throws is not retried, and a failed entry never selects an alternate directory or legacy module set.
 
 Package handlers receive trusted process context, not automatic browser authorization. Validate bodies, bound reads and streams, constrain file paths to the intended scope, and do not return secrets merely because a request arrived with a valid server token.
 
@@ -80,15 +80,15 @@ Before putting the cockpit behind a tunnel, review the web package's pairing, or
 
 ## Data, replay, and diagnostics
 
-The session journal contains conversation and tool history according to the upstream v4 JSONL format. The runtime also keeps current transcript state, in-flight work, and bounded presentation events in process memory. Presentation history is limited to 1,024 events or 8 MiB and reports dropped events; current projections are retained separately. This supports reconnect recovery but is not a durable audit log.
+The session journal contains conversation and tool history in the pi-durable SQLite store. The runtime also keeps the in-progress assistant message and tool output (`live`) and bounded presentation events in process memory. Presentation history is limited to 1,024 events or 8 MiB and reports dropped events; current projections are retained separately. This supports reconnect recovery but is not a durable audit log.
 
-Server telemetry records lifecycle and coarse usage events. Its transcript aggregate omits message and tool content. This is a telemetry property, not a guarantee that clients, extensions, package APIs, or the harness do not log their own data.
+Server telemetry records lifecycle and coarse usage events. Its presentation and latency events carry frame types and durations, not message or tool content. This is a telemetry property, not a guarantee that clients, extensions, package APIs, or the harness do not log their own data.
 
 ## Operating posture
 
 1. Create the token under an owner-only directory.
 2. Keep the session journal, installed packages, and the Po home build directory private.
-3. Treat repository configuration, model providers, extensions, and server facets as executable inputs.
+3. Treat repository configuration, model providers, extensions, and server plugins as executable inputs.
 4. Bind direct servers to loopback unless an authenticated TLS boundary is already in place.
 5. Use Po Web's documented controls for browser and remote access.
 6. Rotate the token by replacing the file while the server is stopped.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agimon-ai/po",
-  "version": "0.0.0-alpha.2",
+  "version": "0.0.0-alpha.21",
   "description": "Opinionated, composable agent harness for scoped tools, skills, MCP servers, and developer workflows.",
   "keywords": [
     "agent-harness",
@@ -24,8 +24,8 @@
     "directory": "packages/cli/po"
   },
   "bin": {
-    "doom-runner": "./dist/bin/doomRunner.mjs",
     "po": "./dist/bin/cli.mjs",
+    "po-runner": "./dist/bin/poRunner.mjs",
     "po-server": "./dist/bin/serve.mjs"
   },
   "files": [
@@ -50,10 +50,10 @@
       "import": "./dist/bin/cli.mjs",
       "require": "./dist/bin/cli.cjs"
     },
-    "./bin/doomRunner": {
-      "types": "./dist/bin/doomRunner.d.mts",
-      "import": "./dist/bin/doomRunner.mjs",
-      "require": "./dist/bin/doomRunner.cjs"
+    "./bin/poRunner": {
+      "types": "./dist/bin/poRunner.d.mts",
+      "import": "./dist/bin/poRunner.mjs",
+      "require": "./dist/bin/poRunner.cjs"
     },
     "./cli": {
       "types": "./dist/cli.d.mts",
@@ -212,59 +212,56 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
-    "@agimon-ai/log-sink-mcp": "0.30.12",
-    "@agimon-ai/po-autostop": "0.0.0-alpha.2",
-    "@agimon-ai/po-cache": "0.0.0-alpha.2",
-    "@agimon-ai/po-config": "0.0.0-alpha.2",
-    "@agimon-ai/po-core": "0.0.0-alpha.2",
-    "@agimon-ai/po-domain": "0.0.0-alpha.2",
-    "@agimon-ai/po-major-mode": "0.0.0-alpha.2",
-    "@agimon-ai/po-minor-mode": "0.0.0-alpha.2",
-    "@agimon-ai/po-notification": "0.0.0-alpha.2",
-    "@agimon-ai/po-profile": "0.0.0-alpha.2",
-    "@agimon-ai/po-session": "0.0.0-alpha.2",
-    "@agimon-ai/po-skill": "0.0.0-alpha.2",
-    "@agimon-ai/po-telemetry": "0.0.0-alpha.2",
-    "@agimon-ai/po-ui": "0.0.0-alpha.2",
-    "@agimon-ai/po-web-components": "0.0.0-alpha.2",
-    "@agimon-ai/po-web-security": "0.0.0-alpha.2",
-    "@deepseek-ai/cordis": "4.0.4",
-    "@earendil-works/chord": "1.0.2",
-    "@earendil-works/pi-agent-core": "1.2.0",
-    "@earendil-works/pi-coding-agent": "1.2.0",
-    "@earendil-works/pi-protocol": "1.0.2",
-    "@earendil-works/pi-server": "1.0.2",
-    "@hono/node-server": "2.1.3",
+    "@agimon-ai/po-artifact": "0.0.0-alpha.19",
+    "@agimon-ai/po-autostop": "0.0.0-alpha.20",
+    "@agimon-ai/po-cache": "0.0.0-alpha.20",
+    "@agimon-ai/po-config": "0.0.0-alpha.20",
+    "@agimon-ai/po-core": "0.0.0-alpha.20",
+    "@agimon-ai/po-domain": "0.0.0-alpha.20",
+    "@agimon-ai/po-logsink": "0.0.1-alpha.2",
+    "@agimon-ai/po-major-mode": "0.0.0-alpha.20",
+    "@agimon-ai/po-minor-mode": "0.0.0-alpha.20",
+    "@agimon-ai/po-notification": "0.0.0-alpha.20",
+    "@agimon-ai/po-profile": "0.0.0-alpha.20",
+    "@agimon-ai/po-session": "0.0.0-alpha.20",
+    "@agimon-ai/po-skill": "0.0.0-alpha.20",
+    "@agimon-ai/po-telemetry": "0.0.0-alpha.20",
+    "@agimon-ai/po-ui": "0.0.0-alpha.20",
+    "@agimon-ai/po-web-components": "0.0.0-alpha.20",
+    "@agimon-ai/po-web-security": "0.0.0-alpha.20",
+    "@deepseek-ai/cordis": "4.0.5",
+    "@earendil-works/pi-agent-core": "1.3.0",
+    "@earendil-works/pi-coding-agent": "1.3.0",
+    "@hono/node-server": "2.1.5",
     "@simplewebauthn/server": "^14.0.3",
     "@tailwindcss/vite": "4.3.3",
-    "@vitejs/plugin-react": "6.1.1",
+    "@vitejs/plugin-react": "6.1.2",
     "cross-spawn": "7.0.6",
     "gpt-tokenizer": "4.0.0",
-    "hono": "4.13.12",
+    "hono": "4.13.8",
     "minimatch": "10.2.6",
-    "protobufjs": "8.8.0",
-    "rolldown": "1.2.12",
+    "protobufjs": "8.8.1",
+    "rolldown": "1.2.13",
     "tailwindcss": "4.3.3",
-    "typebox": "1.3.34",
-    "vite": "8.3.2",
+    "typebox": "1.3.37",
+    "vite": "8.3.4",
     "ws": "8.22.0",
     "yaml": "2.9.1"
   },
   "devDependencies": {
-    "@agimon-ai/po-runner": "0.0.0-alpha.2",
-    "@agimon-ai/vibe-lint-plugin-doom-cli": "0.0.0-alpha.2",
-    "@earendil-works/pi-ai": "1.2.0",
-    "@earendil-works/pi-client": "1.0.2",
+    "@agimon-ai/po-runner": "0.0.0-alpha.20",
+    "@agimon-ai/vibe-lint-plugin-po-cli": "0.0.0-alpha.20",
+    "@earendil-works/pi-ai": "1.3.0",
     "@modelcontextprotocol/ext-apps": "2.0.3",
-    "@modelcontextprotocol/server": "2.2.0",
-    "@playwright/test": "1.63.0",
+    "@modelcontextprotocol/server": "2.3.1",
+    "@playwright/test": "^1.64.0",
     "@types/cross-spawn": "6.0.6",
-    "@types/node": "26.6.4",
+    "@types/node": "26.6.5",
     "@types/ws": "8.18.2",
-    "@vitest/coverage-v8": "5.0.3",
-    "tsdown": "0.23.0",
+    "@vitest/coverage-v8": "5.0.4",
+    "tsdown": "0.23.1",
     "typescript": "7.0.2",
-    "vitest": "5.0.3"
+    "vitest": "5.0.4"
   },
   "engines": {
     "node": ">=24"

package/src/prompts/po-author-extension/SKILL.md

@@ -9,7 +9,7 @@ Build the smallest extension that owns one clear capability and follows the host
 
 ## Choose the environment
 
-- Inside the Po monorepo, read `AGENTS.md` and `templates/doom-extension/scaffold.yaml` before writing. Use the canonical `scaffold-doom-extension` definition when it fits, then keep only the folders the capability needs.
+- Inside the Po monorepo, read `AGENTS.md` and `templates/po-extension/scaffold.yaml` before writing. Use the canonical `scaffold-po-extension` definition when it fits, then keep only the folders the capability needs.
 - Outside the monorepo, create the equivalent public ESM package manually and depend on published Po foundation packages. Never publish `workspace:*` ranges.
 
 Choose the package tier from the capability, not convenience:

package/src/prompts/po-author-extension/references/extension-contract.md

@@ -7,9 +7,9 @@ Use this reference when creating a new extension or checking an existing package
 Inside this monorepo:
 
 - Choose the package tier before scaffolding.
-- Keep Doom-to-Doom dependencies as `workspace:*`.
+- Keep Po-to-Po dependencies as `workspace:*`.
 - Use the repository-pinned published versions for Cordis, Pi, Vibe-Lint, and other foundation packages.
-- Set `sourceTemplate` to `doom-extension` and follow the package's inherited Vibe-Lint rules.
+- Set `sourceTemplate` to `po-extension` and follow the package's inherited Vibe-Lint rules.
 
 Outside this monorepo:
 
@@ -89,7 +89,7 @@ import { createReviewService } from '../../../../../services/review';
 export default defineCommand(() => createReviewCommand(createReviewService()));
 ```
 
-Use `defineCommand` for portable commands, `defineTool` for portable tools, `definePiTool` for native Pi capabilities, and the matching typed helper for every other surface. The generated server facet and browser plugin group routed declarations by scope. Use an `extra.<target>.ts` escape hatch only when a legacy contribution object cannot be represented without changing behavior.
+Use `defineCommand` for portable commands, `defineTool` for portable tools, `definePiTool` for native Pi capabilities, and the matching typed helper for every other surface. The generated server plugin and browser plugin group routed declarations by scope. Use an `extra.<target>.ts` escape hatch only when a legacy contribution object cannot be represented without changing behavior.
 
 The package build is convention-driven:
 
@@ -104,7 +104,7 @@ Generated `pi.ts`, `server.ts`, and `web.ts` entries live under ignored `generat
 
 Factories may return a promise. The helper waits for the declaration, mounts service contributions, registers capabilities, and awaits `onStart`. Shutdown aborts the instance signal, waits for startup to settle, awaits `onStop`, releases registrations in reverse order, then awaits `onDispose`. `onStop` runs once the start stage has been reached, including when `onStart` is absent or fails. Registration failures still release acquired handles and call accepted `onDispose`. Cleanup is idempotent and all cleanup stages run even when one fails.
 
-Hooks receive one typed context. Factories construct state; `onStart` begins external work. Use `onStop` to stop and drain it, and `onDispose` for final instance resources. Omit unused hooks and let the helper own registration cleanup. Do not manually connect the Cordis host, call another facet's `apply`, or register a second shutdown wrapper.
+Hooks receive one typed context. Factories construct state; `onStart` begins external work. Use `onStop` to stop and drain it, and `onDispose` for final instance resources. Omit unused hooks and let the helper own registration cleanup. Do not manually connect the Cordis host, call another plugin's `apply`, or register a second shutdown wrapper.
 
 Use arrays for fixed tools and minor modes. Pi supports typed `PiToolCollection` and `PiMinorModeCollection` with `snapshot()` and `subscribe(listener)` when availability changes while mounted. Helpers own subscriptions, cancel withdrawn tools, detach withdrawn mode owners, and follow optional provider replacement. A new tool declaration with the same name replaces the implementation and aborts old invocations. Removed tools retain an unavailable native wrapper.
 

package/dist/bin/doomRunner.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"doomRunner.cjs","names":["findRepositoryRoot","consumerPackageEntry","pathToFileURL","existsSync","realpathSync","fileURLToPath"],"sources":["../../src/bin/doomRunner.ts"],"sourcesContent":["#!/usr/bin/env node\n\n/**\n * CLI Entry Point for doom-runner\n *\n * The Runner package is selectable, so this compatibility executable resolves\n * it from the active repository instead of retaining it in Po's dependency\n * closure. The Runner package's own entry only self-invokes when it is argv[1],\n * which it is not once this shim imports it by absolute path.\n */\n\nimport './agentDirectory';\nimport { existsSync, realpathSync } from 'node:fs';\nimport { fileURLToPath, pathToFileURL } from 'node:url';\n\nimport { consumerPackageEntry } from '@agimon-ai/po-core/moduleResolution';\n\nimport { findRepositoryRoot } from '../composition/repository';\n\nconst RUNNER_CLI_EXPORT = '@agimon-ai/po-runner/bin/cli';\n\ninterface RunnerCliModule {\n  readonly main?: unknown;\n}\n\nexport async function main(argv: readonly string[] = process.argv.slice(2)): Promise<number> {\n  let repoRoot: string;\n  try {\n    repoRoot = findRepositoryRoot(process.cwd());\n  } catch (error) {\n    throw new Error('doom-runner must be invoked inside a configured repository.', { cause: error });\n  }\n  const entry = consumerPackageEntry(RUNNER_CLI_EXPORT, repoRoot);\n  if (!entry) {\n    throw new Error(\n      'Doom Runner is not installed for this repository. Add @agimon-ai/po-runner to .po/modes.yaml and run po sync.',\n    );\n  }\n  const loaded = (await import(pathToFileURL(entry).href)) as RunnerCliModule;\n  if (typeof loaded.main !== 'function') {\n    throw new Error(`${RUNNER_CLI_EXPORT} does not export a callable main function.`);\n  }\n  return (loaded.main as (args: readonly string[]) => Promise<number>)(argv);\n}\n\nif (\n  process.argv[1] &&\n  existsSync(process.argv[1]) &&\n  realpathSync(fileURLToPath(import.meta.url)) === realpathSync(process.argv[1])\n) {\n  main().then(\n    (exitCode) => {\n      process.exitCode = exitCode;\n    },\n    (error: unknown) => {\n      const message = error instanceof Error ? error.message : String(error);\n      process.stderr.write(`[doom-runner] ${message}\\n`);\n      process.exitCode = 1;\n    },\n  );\n}\n"],"mappings":";;;;;;;;AAmBA,MAAM,oBAAoB;AAM1B,eAAsB,KAAK,OAA0B,QAAQ,KAAK,MAAM,CAAC,GAAoB;CAC3F,IAAI;CACJ,IAAI;EACF,WAAWA,cAAAA,mBAAmB,QAAQ,IAAI,CAAC;CAC7C,SAAS,OAAO;EACd,MAAM,IAAI,MAAM,+DAA+D,EAAE,OAAO,MAAM,CAAC;CACjG;CACA,MAAM,SAAA,GAAQC,oCAAAA,qBAAAA,CAAqB,mBAAmB,QAAQ;CAC9D,IAAI,CAAC,OACH,MAAM,IAAI,MACR,+GACF;CAEF,MAAM,SAAU,MAAM,QAAA,GAAOC,SAAAA,cAAAA,CAAc,KAAK,CAAC,CAAC;CAClD,IAAI,OAAO,OAAO,SAAS,YACzB,MAAM,IAAI,MAAM,GAAG,kBAAkB,2CAA2C;CAElF,OAAQ,OAAO,KAAsD,IAAI;AAC3E;AAEA,IACE,QAAQ,KAAK,OAAA,GACbC,QAAAA,WAAAA,CAAW,QAAQ,KAAK,EAAE,MAAA,GAC1BC,QAAAA,aAAAA,EAAAA,GAAaC,SAAAA,cAAAA,CAAAA,QAAAA,KAAAA,CAAAA,CAAAA,cAAAA,UAAAA,CAAAA,CAAAA,IAA6B,CAAC,OAAA,GAAMD,QAAAA,aAAAA,CAAa,QAAQ,KAAK,EAAE,GAE7E,KAAK,CAAC,CAAC,MACJ,aAAa;CACZ,QAAQ,WAAW;AACrB,IACC,UAAmB;CAClB,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;CACrE,QAAQ,OAAO,MAAM,iBAAiB,QAAQ,GAAG;CACjD,QAAQ,WAAW;AACrB,CACF"}

package/dist/bin/doomRunner.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"doomRunner.d.mts","names":[],"sources":["../../src/bin/doomRunner.ts"],"mappings":";wBAyBsB,KAAK,2BAAkD"}

package/dist/bin/doomRunner.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"doomRunner.mjs","names":[],"sources":["../../src/bin/doomRunner.ts"],"sourcesContent":["#!/usr/bin/env node\n\n/**\n * CLI Entry Point for doom-runner\n *\n * The Runner package is selectable, so this compatibility executable resolves\n * it from the active repository instead of retaining it in Po's dependency\n * closure. The Runner package's own entry only self-invokes when it is argv[1],\n * which it is not once this shim imports it by absolute path.\n */\n\nimport './agentDirectory';\nimport { existsSync, realpathSync } from 'node:fs';\nimport { fileURLToPath, pathToFileURL } from 'node:url';\n\nimport { consumerPackageEntry } from '@agimon-ai/po-core/moduleResolution';\n\nimport { findRepositoryRoot } from '../composition/repository';\n\nconst RUNNER_CLI_EXPORT = '@agimon-ai/po-runner/bin/cli';\n\ninterface RunnerCliModule {\n  readonly main?: unknown;\n}\n\nexport async function main(argv: readonly string[] = process.argv.slice(2)): Promise<number> {\n  let repoRoot: string;\n  try {\n    repoRoot = findRepositoryRoot(process.cwd());\n  } catch (error) {\n    throw new Error('doom-runner must be invoked inside a configured repository.', { cause: error });\n  }\n  const entry = consumerPackageEntry(RUNNER_CLI_EXPORT, repoRoot);\n  if (!entry) {\n    throw new Error(\n      'Doom Runner is not installed for this repository. Add @agimon-ai/po-runner to .po/modes.yaml and run po sync.',\n    );\n  }\n  const loaded = (await import(pathToFileURL(entry).href)) as RunnerCliModule;\n  if (typeof loaded.main !== 'function') {\n    throw new Error(`${RUNNER_CLI_EXPORT} does not export a callable main function.`);\n  }\n  return (loaded.main as (args: readonly string[]) => Promise<number>)(argv);\n}\n\nif (\n  process.argv[1] &&\n  existsSync(process.argv[1]) &&\n  realpathSync(fileURLToPath(import.meta.url)) === realpathSync(process.argv[1])\n) {\n  main().then(\n    (exitCode) => {\n      process.exitCode = exitCode;\n    },\n    (error: unknown) => {\n      const message = error instanceof Error ? error.message : String(error);\n      process.stderr.write(`[doom-runner] ${message}\\n`);\n      process.exitCode = 1;\n    },\n  );\n}\n"],"mappings":";;;;;;;AAmBA,MAAM,oBAAoB;AAM1B,eAAsB,KAAK,OAA0B,QAAQ,KAAK,MAAM,CAAC,GAAoB;CAC3F,IAAI;CACJ,IAAI;EACF,WAAW,mBAAmB,QAAQ,IAAI,CAAC;CAC7C,SAAS,OAAO;EACd,MAAM,IAAI,MAAM,+DAA+D,EAAE,OAAO,MAAM,CAAC;CACjG;CACA,MAAM,QAAQ,qBAAqB,mBAAmB,QAAQ;CAC9D,IAAI,CAAC,OACH,MAAM,IAAI,MACR,+GACF;CAEF,MAAM,SAAU,MAAM,OAAO,cAAc,KAAK,CAAC,CAAC;CAClD,IAAI,OAAO,OAAO,SAAS,YACzB,MAAM,IAAI,MAAM,GAAG,kBAAkB,2CAA2C;CAElF,OAAQ,OAAO,KAAsD,IAAI;AAC3E;AAEA,IACE,QAAQ,KAAK,MACb,WAAW,QAAQ,KAAK,EAAE,KAC1B,aAAa,cAAc,YAAY,GAAG,CAAC,MAAM,aAAa,QAAQ,KAAK,EAAE,GAE7E,KAAK,CAAC,CAAC,MACJ,aAAa;CACZ,QAAQ,WAAW;AACrB,IACC,UAAmB;CAClB,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;CACrE,QAAQ,OAAO,MAAM,iBAAiB,QAAQ,GAAG;CACjD,QAAQ,WAAW;AACrB,CACF"}