@caupulican/pi-adaptative 0.94.0 → 0.95.0

package/CHANGELOG.md

@@ -1,3 +1,58 @@
+## [0.95.0] - 2026-08-22
+
+### Breaking Changes
+
+- Removed tmux standing dispatch grants and the public `workerDelegation.writePaths` setting. Workers now receive one immutable launch profile; an omitted path inherits machine-wide project access and an explicit path narrows the worker.
+- Native delegated workers are leaf agents. Fresh nested delegation is rejected, and worker profiles no longer expose recursive-agent limits.
+- Replaced delegated `readPaths`/`writePaths` and task-profile resource/budget overrides with focused model, thinking-level, path, and tool controls that can only inherit or narrow the foreground authority.
+- Renamed delegated query-only memory retrieval from `memory` to `memory_read`; the raw root `memory` tool is no longer valid in worker profiles.
+
+### Added
+
+- Added lightweight worker profile controls for model, thinking level, path, and tools, with exact model-pin conflict handling and inherited foreground defaults.
+- Added fresh, worker-safe adapters for bounded artifact retrieval, toolkit scripts, skill search/read, and skill audits without sharing foreground extension/session instances.
+- Added a root-only, default-on reflection cue consumed inside the orchestrator's next ordinary provider turn, with audited automatic application for safe additive memory and skill writes.
+
+### Changed
+
+- Collapsed the remaining worker, background-tool, worktree, and process-supervision messages into one-line TUI activity summaries, with one in-place thinking/working lane and compact verification identifiers.
+- Made native and tmux workers autonomous by default: routine dispatch needs no grant, Pi workers inherit compatible parent tools and resources, and managed tmux panes receive their initial task only after capture is armed.
+- Made the foreground cost guard an explicit opt-in; legacy positive thresholds remain dormant until enabled.
+- Goal completion now refuses every open task step, active goal-owned worker or tool task, cited unfinished tool task, and active pipeline.
+- Moved automatic reflection into the current root session with no isolated/background model request; automatic background Auto Learn launches are disabled while explicit `/auto-learn run` remains available.
+
+### Fixed
+
+- Prevented duplicate or stale background terminal wakes by rechecking durable observation and goal ownership at the provider boundary.
+- Prevented OKF organization from matching or deleting a substring of a hot-memory fact; exact removal now occurs under the managed memory lock.
+- Isolated default AgentSession test storage from the real user agent directory.
+- Made tmux deadline handling terminate the owned pane, while dismiss only detaches supervision.
+- Rejected every fresh-only model, thinking, path, tool, profile, or fork override when reusing a persistent worker instead of silently ignoring it.
+- Blocked direct `run_process` argv access to worker-private auth, session, settings, and memory paths while preserving ordinary machine-wide project access.
+- Bounded and made cancellable worker skill audits, and rejected explicit profiles whose requested worker adapter is not active instead of silently narrowing them.
+- Moved provider tool-guideline budget diagnostics out of the chat renderer and into `/context` diagnostics.
+- Dismissed pending current-session reflection cues and refreshed the root prompt synchronously when reflection is disabled, preventing stale learning work from resurfacing after re-enable.
+- Bounded reflection response scanning, accepted writes, memory and skill fields, automatic overlap audits, and `skillify` draft bodies; truncated automatic promotion audits now fail closed.
+- Omitted raw root memory tools and prompt snapshots from child sessions; managed workers receive memory only through the bounded, source-labeled query broker.
+- Corrected platform-aware machine-root resolution and case-insensitive drive deduplication so Windows multi-drive workers retain machine-wide authority without global reservation serialization.
+- Routed bundled tmux extension dependencies through the embedded package runtime so compiled Bun releases load the manager without missing `dist/core` modules.
+
+## [0.94.1] - 2026-08-21
+
+### Added
+
+- Added orchestrator-owned project OKF organization with proactive local recall, bounded read-only worker queries, and loss-safe audited rollback.
+
+### Changed
+
+- Unified foreground tools, background tasks, and delegated workers under compact `Performed N actions` activity counters with details available through Ctrl+T.
+
+### Fixed
+
+- Suppressed already-observed background completions and late duplicate parent wakes while retaining durable terminal handoffs for explicit verification.
+- Kept reflection and durable memory lifecycle writes exclusive to the main orchestrator, including managed-worker and Auto Learn subprocesses.
+- Isolated project OKF records and rejected unsafe paths, symlink traversal, oversized fields, conflicting overwrites, and stale rollback deletion.
+
 ## [0.94.0] - 2026-08-21
 
 ### Breaking Changes

package/dist/bundled-resources/extensions/tmux-agent-manager/README.md

@@ -19,13 +19,15 @@ Important actions:
 - `list_templates` / `show_template` — inspect reusable owner templates.
 - `workspace_plan` — dry-run a tmux session/pane layout.
 - `launch_workspace` — launch panes immediately; pass `dryRun:true` only when a preview is useful.
-- `fire_task` — open provider CLIs in tmux panes, inject prompts, stream pane output through event-driven DONE/BLOCKED watchers, write result files, and wake the parent with a bounded terminal handoff.
+- `fire_task` — create provider panes, arm event-driven DONE/BLOCKED capture, then atomically start each CLI with its initial task, write result files, and wake the parent with a bounded terminal handoff.
 - `send_followup` — re-inject a fresh prompt into an already-live job's pane (default: primary agent; `agentId` targets another) without relaunching. Re-arms the completion watcher for a new turn with a unique per-turn marker pair and reuses the same event-driven handoff.
-- `dismiss` — stop tracking a job (no more re-arming/handoffs) without killing its tmux session; the pane keeps running.
+- `dismiss` — detach completion capture and stop tracking a job without killing its tmux session; the pane keeps running and the old deadline no longer owns it.
 - `job_status`, `list_jobs`, `set_variable`, `list_variables` — inspect and steer managed jobs.
 - `stop_job`, `stop_session` — dry-run/confirmed tmux cleanup.
 - `notify`, `set_status`, `clear_status` — tmux UI/status metadata.
-- `grant_dispatch`, `revoke_grant` — create/end a standing approval grant that lets `fire_task`/`send_followup` dispatch unattended within its bounds (agent, budget, optional goal/tool/path scope). See Safety below.
+
+Tmux availability is detected automatically for each action. `guard` remains a diagnostic action, not a
+required launch handshake.
 
 At session start, live tmux sessions are reconciled against this session's own job records: a session
 that vanished while its job was not yet terminal is marked orphaned (informational only, nothing is
@@ -51,7 +53,8 @@ tmux_agent_manager({
 })
 ```
 
-Custom commands are CLI-start commands, not non-interactive `--print` runners:
+Custom commands are interactive CLI-start commands that accept the initial prompt as their final
+positional argument, not non-interactive `--print` runners:
 
 ```ts
 tmux_agent_manager({
@@ -67,15 +70,31 @@ tmux_agent_manager({
 
 ## Safety
 
-A real (non-`dryRun`) `fire_task`/`send_followup` launch is approval-gated: it requires either a
-standing grant (`grant_dispatch` — interactively confirmed, or authorized via the `--allow-tmux-dispatch`
-flag when no UI is attached) or a one-shot interactive approval. With neither available, the launch is
-refused, never silent. A grant-covered `pi` child launches with a restricted profile (`--tools`/
-`--resource-profile` or `--no-extensions --no-skills`, plus a scoped `--append-system-prompt` naming the
-grant and its hard stops) pushed into the child's own launch configuration — this is not an in-process
-sandbox, and non-`pi` agents are bounded only at the launch layer; their internal tool-loop behavior is
-that CLI's own responsibility. Grant budget (`maxLaunches`, expiry) is enforced; any advisory USD figure
-or self-reported worker usage is a claim to review, never a hard cross-process cap.
+Real `fire_task` and `send_followup` actions run autonomously without a CLI allow flag or UI confirmation.
+Before any pane, watcher, prompt, or job artifact is created, `fire_task` derives one
+immutable internal execution profile for every worker and durably reserves its managed lane. Omitted
+tool and thinking fields inherit the orchestrator's eligible worker surface. Omitted `path` uses the
+normal process cwd while inheriting the host-derived full-machine scope except private harness paths;
+an explicit `path` sets the worker cwd and enforces that workspace for Pi's structured filesystem tools.
+
+For a `pi` worker, `tools`, `resourceProfile`, `thinkingLevel`, and `worktreeLane` are rendered into Pi
+CLI flags. The shared worker ceiling removes memory and agent-launching/root-owned controls while
+keeping eligible execution tools such as Python, and a scoped system prompt requires autonomous work
+inside the assigned profile.
+When `resourceProfile` is omitted, a one-shot profile inherits the parent's effective resources; an
+explicit value overrides it. Pi's structured read/write/edit/search tools hard-deny private harness
+roots and honor an explicit workspace path. Bash/Python remain explicit host-trust boundaries with
+OS-visible filesystem access; the profile does not claim process sandboxing.
+Those four overrides are rejected for non-Pi providers because an external CLI owns its own tool,
+thinking, and workspace controls; use that provider's native options in `command`. A non-Pi `path`
+changes cwd only. Its durable profile truthfully records a machine-wide host-trusted process instead of
+projecting the parent's Pi tool list. Cooperative usage reports remain advisory claims, never hard
+cross-process billing limits.
+
+Capture is armed before the initial provider command starts. The prompt file is passed with that same
+command (`--prompt-interactive` for Agy), eliminating the startup keystroke race. A deadline first
+persists the terminal timeout and then terminates the owned tmux pane so a timed-out CLI cannot keep
+spending resources in the background.
 
 Use `dryRun:true` when the task or provider choice is still ambiguous. Stop actions are destructive to running pane work, so they remain previews by default and require `confirm:"yes-tmux-stop"` for real cleanup.
 

package/dist/bundled-resources/extensions/tmux-agent-manager/index.d.ts

@@ -1,5 +1,6 @@
 import { type ExtensionAPI } from "@caupulican/pi-adaptative";
-import { type Provider } from "./dispatch-grant.ts";
+import type { ThinkingLevel } from "@caupulican/pi-agent-core";
+import { type Provider } from "./launch-profile.ts";
 export declare const piConfig: {
     tools: string[];
 };
@@ -26,6 +27,8 @@ type FireAgentPlan = {
     resultPath: string;
     paneId?: string;
     result?: AgentResult;
+    resourceProfile?: string;
+    thinkingLevel?: ThinkingLevel;
     /** Last turn dispatched to this agent's pane via fire_task (1) or send_followup (>=2). Absent means 1. */
     currentTurn?: number;
     /** Last turn whose terminal handoff was delivered to the parent. Absent means 0 (never notified). */
@@ -37,11 +40,11 @@ type FireAgentPlan = {
      * flags) and the dispatch-phase `reportManagedLane` call can both read it after `buildFireTaskPlan`. */
     worktreeLane?: string;
     /** Durable host-lifecycle metadata for the current turn. */
+    dispatchProfileId?: string;
     dispatchAuthorizationId?: string;
-    dispatchAuthorizationKind?: "standing-grant" | "one-shot-owner-approval" | "legacy-recovery";
+    dispatchAuthorizationKind?: "profile-derived" | "legacy-recovery";
     dispatchAllowedTools?: string[];
     dispatchWritePaths?: string[];
-    dispatchMaxCostUsd?: number;
     dispatchInstructions?: string;
     dispatchGoalId?: string;
     dispatchLeaseTtlMs?: number;
@@ -68,7 +71,7 @@ type FireTaskPlan = {
     currentTurn?: number;
     /** Set when session-level reconcile finds the tmux session gone while the job was not terminal. Informational only; nothing is ever killed to produce this state. */
     orphanedAt?: string;
-    /** Set by action=dismiss: the manager stops tracking/re-arming this job. The tmux session is left running. */
+    /** Set by action=dismiss after its pane watchers are detached. The tmux session is left running. */
     dismissedAt?: string;
 };
 /** The subset of FireTaskPlan the pane watcher generator actually reads — narrow on purpose so a

package/dist/bundled-resources/extensions/tmux-agent-manager/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/bundled-resources/extensions/tmux-agent-manager/index.ts"],"names":[],"mappings":"AAMA,OAAO,EACN,KAAK,YAAY,EAIjB,MAAM,2BAA2B,CAAC;AAInC,OAAO,EAmBN,KAAK,QAAQ,EAEb,MAAM,qBAAqB,CAAC;AAE7B,eAAO,MAAM,QAAQ;IAAK,KAAK;CAA0B,CAAC;AAsG1D,KAAK,WAAW,GAAG;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AACF,KAAK,aAAa,GAAG;IAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC;AACtF,KAAK,aAAa,GAAG;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,0GAA0G;IAC1G,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qGAAqG;IACrG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;yGACqG;IACrG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;4GACwG;IACxG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,yBAAyB,CAAC,EAAE,gBAAgB,GAAG,yBAAyB,GAAG,iBAAiB,CAAC;IAC7F,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AACF,KAAK,YAAY,GAAG;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,iGAAiG;IACjG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qKAAqK;IACrK,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8GAA8G;IAC9G,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AACF;;gFAEgF;AAChF,KAAK,kBAAkB,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,GAAG,aAAa,GAAG,iBAAiB,GAAG,QAAQ,CAAC,CAAC;AA2KlG,wBAAgB,2BAA2B,IAAI,MAAM,CAQpD;AA8YD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,kBAAkB,GAAG,MAAM,CA4GrE;AAmpCD,MAAM,CAAC,OAAO,UAAU,yBAAyB,CAAC,EAAE,EAAE,YAAY,QAkWjE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/bundled-resources/extensions/tmux-agent-manager/index.ts"],"names":[],"mappings":"AAMA,OAAO,EACN,KAAK,YAAY,EAOjB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAmB,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAGhF,OAAO,EAMN,KAAK,QAAQ,EAEb,MAAM,qBAAqB,CAAC;AAE7B,eAAO,MAAM,QAAQ;IAAK,KAAK;CAA0B,CAAC;AAyF1D,KAAK,WAAW,GAAG;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AACF,KAAK,aAAa,GAAG;IAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC;AACtF,KAAK,aAAa,GAAG;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,0GAA0G;IAC1G,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qGAAqG;IACrG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;yGACqG;IACrG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;4GACwG;IACxG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,yBAAyB,CAAC,EAAE,iBAAiB,GAAG,iBAAiB,CAAC;IAClE,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AACF,KAAK,YAAY,GAAG;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,iGAAiG;IACjG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qKAAqK;IACrK,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oGAAoG;IACpG,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AACF;;gFAEgF;AAChF,KAAK,kBAAkB,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,GAAG,aAAa,GAAG,iBAAiB,GAAG,QAAQ,CAAC,CAAC;AA6IlG,wBAAgB,2BAA2B,IAAI,MAAM,CAQpD;AAoaD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,kBAAkB,GAAG,MAAM,CAiHrE;AA6iCD,MAAM,CAAC,OAAO,UAAU,yBAAyB,CAAC,EAAE,EAAE,YAAY,QA+UjE"}