@davidorex/pi-agent-dispatch 0.32.0 → 0.33.0

package/CHANGELOG.md

@@ -4,6 +4,14 @@ All notable changes to this package are documented here. Format follows [Keep a
 
 ## [Unreleased]
 
+## [0.33.0] - 2026-07-08
+
+- Bundled agent-spec RESOLUTION from a fresh substrate: both dispatch loaders supply pi-workflows' bundled `agents/` directory as the LAST search tier (via `dispatchLoadContext(cwd)` in `dispatch-loader.ts`, consuming pi-workflows' `./bundled-dirs` subpath export); resolution order ahead of it is unchanged (substrate `agents/`, then `~/.pi/agent/agents/`, then bundled), so a local or user spec of the same name still wins. pi-behavior-monitors' classifier specs remain deliberately off this path (monitor-scoped via that package's own loader).
+- Bundled specs now also COMPILE and acquire a MODEL on the dispatch path, completing fresh-substrate dispatchability through `call-agent` and `run-work-order-loop`: (1) template resolution — both dispatch entry points build their template env with `builtinDir = bundledTemplateDir()`, so a bundled spec's task/system templates resolve against the bundled pi-jit-agents `templates/` tier rather than rendering empty (the bundled `phase-author` spec's task-template reference was also corrected upstream to resolve there). (2) model resolution (`resolveDispatchModel`, `dispatch-model.ts`, mirroring the workflow executor's precedence per the derived dispatch model-policy decision): spec model → substrate `model-config` `by_role[role]` → `model-config` `default`. `run-work-order-loop` subprocess dispatch treats a still-unresolved model as "let pi pick its own default" (the `--model` flag is omitted and pi resolves the model itself inside the subprocess); in-process `call-agent`, which must resolve a concrete model + auth before it can call, throws an informed error naming the `model-config` block as the remedy when no model resolves.
+- The work-order loop now clamps the dispatched agent's tool grant to the work-order's declared `scope.operations`: after composing the grant (`agentGrant ∩ spec.tools`) the loop intersects it with `scope.operations`, and that clamped set becomes the subprocess `--tools` allowlist — so the dispatched agent can never exceed the operations the work-order itself authorizes, regardless of the caller's `agent_grant` (e.g. a caller grant of `[write, bash]` under a work-order `scope.operations` of `[write]` dispatches with `--tools write`; `bash` is dropped). When `scope.operations` is absent or empty the composed grant is passed through unchanged. The loop also now validates the dispatch input (`{ work_order_id }`) against the work-order's declared `input_contract` (an inline JSON Schema, checked via pi-context's canonical AJV validator) before spawning the subprocess; a contract violation throws a descriptive error naming the work-order id, and an absent contract is a no-op pass-through.
+- The work-order loop now dispatches its `target_agent` as a `pi` subprocess (`pi --mode json -p <task> --tools <grant> --model <spec>`, the same mechanism workflow steps use) instead of the in-process `executeAgent` primitive. `executeAgent` binds no executable tools — it only passes a phantom output-schema tool — so a dispatched agent granted `[write, bash]` previously received zero tools and could not act, and every work-order requiring a side-effect failed its real-check. The composed capability grant (`agentGrant ∩ spec.tools`, the dispatch-boundary capability clamp) now becomes the subprocess `--tools` allowlist (an empty grant emits `--no-tools`), so a dispatched agent has real, callable tools. Subprocess dispatch (`subprocess-dispatch.ts`, `runPiSubprocess` + testable `buildDispatchArgs`) carries a default timeout with SIGTERM→SIGKILL grace, cancellation-signal support, an `@tmpfile` prompt for long prompts, and a bounded stdout collector; a nonzero exit, timeout, or empty assistant output throws a descriptive error. Verified end to end: a work-order whose agent must write a file completes with the file written and its runtime-demo real-check passing.
+- The work-order loop now reports `final_status: "aborted-non-interactive"` when a real-check fails in a non-interactive context (`ctx.hasUI === false`): it checks `ctx.hasUI` before prompting and does not call `ctx.ui.confirm`, so an environment default is no longer mislabeled as `aborted-by-human`. Interactive aborts (a human answering the confirm `false`) still report `aborted-by-human`.
+
 ## [0.32.0] - 2026-07-05
 
 - `resolveOperationVocabulary` reads the active substrate's `config.json` through pi-context's migration-aware loader instead of a raw parse: a config whose `schema_version` lags the bundled schema is walked forward through the registered chain before its `tool_operations` overrides apply, so the vocabulary can never diverge from the shape `loadConfig` sees. The fail-safe contract is unchanged — any load failure (absent, unparsable, unresolvable version, invalid) yields `TOOL_OPERATION_DEFAULTS`.

package/README.md

@@ -27,6 +27,15 @@ Tool grants are operation-granular. Defaults are EMPTY. At each dispatch the gra
 
 The `run-work-order-loop` tool consolidates the orchestrator's prior per-iteration chain (call-agent → run-real-checks → on-pass commit-attested → on-fail decide-to-retry) into one Pi call. Every gate the prior chain enforced — capability composition at the call boundary, deterministic real-check verdict, writer-attestation footer, human-OK retry at the iteration boundary via `ctx.ui.confirm` — fires from inside the wrapped library. No path bypasses them.
 
+## Dispatch resolution tiers
+
+Both dispatch entry points (`call-agent`, `run-work-order-loop`) resolve an agent for dispatch across layered searches, so a fresh substrate with no local files can resolve and compile the bundled agent set from the bundled tiers while a local or user copy of the same name still wins. (Compiling and dispatching are distinct: `call-agent` additionally requires a resolvable model — see the **Model** axis — so on a fresh substrate with no `model-config`, a bundled spec that carries no `model` compiles but `call-agent` still errors for want of a model; `run-work-order-loop` omits `--model` and lets the subprocess pick its default.)
+
+- **Agent spec** — `<contextDir>/agents/` → `~/.pi/agent/agents/` → bundled pi-workflows `agents/`.
+- **Templates** (the spec's task/system prompt bodies) — a relative template ref is first absolutized at parse when an adjacent file exists (or, for a spec matched from the bundled tier, when a package-root sibling file exists); otherwise it stays a bare name resolved through the Nunjucks loader's tiers: `<contextDir>/templates/` → `~/.pi/agent/templates/` → bundled pi-jit-agents `templates/`.
+- **Output schema** (the spec's `output.schema`) — a `block:<name>` sentinel resolves to the active substrate's `<contextDir>/schemas/<name>.schema.json`; a relative path is resolved at parse against the spec's own directory first, then — for a spec matched from the bundled tier only — the spec directory's PARENT (the package-root sibling `schemas/` dir the bundled `agents/`+`schemas/` layout uses), absolutized to the first that exists on disk. The parent-sibling probe is bundled-tier-only, so a local/user spec's relative ref never absolutizes onto a same-basename substrate block schema or user-config sibling. Unlike templates, an output-schema ref gets no downstream loader-tier search — a relative ref that resolves at neither probe stays a bare name whose read fails loudly when the phantom validation tool is built.
+- **Model** — the spec's own `model` → substrate `model-config` `by_role[role]` → `model-config` `default`. When none resolves, subprocess dispatch (`run-work-order-loop`) omits `--model` and pi picks its own default inside the subprocess; in-process dispatch (`call-agent`), which must resolve a concrete model + auth before it can call, instead requires a spec or `model-config` model and errors otherwise.
+
 ## Canonical rules
 
 - Harness-confined orchestrator (positive + negative clauses).

package/dist/call-agent-tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"call-agent-tool.d.ts","sourceRoot":"","sources":["../src/call-agent-tool.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAErG,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AASlH;;;;;;;GAOG;AACH,eAAO,MAAM,UAAU,EAAE;IAAE,YAAY,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,eAAe,KAAK,OAAO,CAAC,cAAc,CAAC,CAAA;CAEzG,CAAC;AAEF,eAAO,MAAM,aAAa;;;;;;;;;;;;yBAuBX,MAAM,UACX;QACP,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,OAAO,CAAC;QACf,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;KACpB,UACO,WAAW,aACR,uBAAuB,OAC7B,gBAAgB,GACnB,OAAO,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;CAgD3C,CAAC"}
+{"version":3,"file":"call-agent-tool.d.ts","sourceRoot":"","sources":["../src/call-agent-tool.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAErG,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAWlH;;;;;;;GAOG;AACH,eAAO,MAAM,UAAU,EAAE;IAAE,YAAY,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,eAAe,KAAK,OAAO,CAAC,cAAc,CAAC,CAAA;CAEzG,CAAC;AAEF,eAAO,MAAM,aAAa;;;;;;;;;;;;yBAwBX,MAAM,UACX;QACP,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,OAAO,CAAC;QACf,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;KACpB,UACO,WAAW,aACR,uBAAuB,OAC7B,gBAAgB,GACnB,OAAO,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;CAuD3C,CAAC"}

package/dist/call-agent-tool.js

@@ -8,9 +8,11 @@
 import { createAgentLoader } from "@davidorex/pi-jit-agents/agent-spec";
 import { compileAgent } from "@davidorex/pi-jit-agents/compile";
 import { executeAgent as canonicalExecuteAgent } from "@davidorex/pi-jit-agents/runtime";
-import { createTemplateEnv } from "@davidorex/pi-jit-agents/template";
+import { bundledTemplateDir, createTemplateEnv } from "@davidorex/pi-jit-agents/template";
 import { Type } from "@earendil-works/pi-ai";
 import { composeToolGrant } from "./capability-composer.js";
+import { dispatchLoadContext } from "./dispatch-loader.js";
+import { resolveDispatchModel } from "./dispatch-model.js";
 function parseModelSpec(spec) {
     const slashIndex = spec.indexOf("/");
     if (slashIndex !== -1)
@@ -35,7 +37,7 @@ export const callAgentTool = {
     promptSnippet: "Dispatch a typed sub-agent with scoped capability grant.",
     parameters: Type.Object({
         spec_name: Type.String({
-            description: "Name of the agent spec to load (resolves to <name>.agent.yaml in the agents tier).",
+            description: "Name of the agent spec to load (resolves to <name>.agent.yaml searched across the substrate agents/ dir, then ~/.pi/agent/agents/, then the bundled pi-workflows agents).",
         }),
         input: Type.Unknown({ description: "Typed input passed to the agent's compileAgent context." }),
         parent_grant: Type.Optional(Type.Array(Type.String(), { description: "The caller's own tool grant. Default-empty." })),
@@ -45,16 +47,21 @@ export const callAgentTool = {
         max_tokens: Type.Optional(Type.Number({ description: "Max tokens for the LLM call. Defaults to 1024." })),
     }),
     async execute(_toolCallId, params, signal, _onUpdate, ctx) {
-        // 1. Load spec via jit-agents canonical loader
-        const loadAgent = createAgentLoader({ cwd: ctx.cwd });
+        // 1. Load spec via jit-agents canonical loader (builtin tier = bundled pi-workflows agents/)
+        const loadAgent = createAgentLoader(dispatchLoadContext(ctx.cwd));
         const spec = loadAgent(params.spec_name);
-        // 2. Compile spec with input
-        const env = createTemplateEnv({ cwd: ctx.cwd });
+        // 2. Compile spec with input (builtinDir = bundled pi-jit-agents templates/,
+        // so a bundled spec's task/system templates resolve without a local copy)
+        const env = createTemplateEnv({ cwd: ctx.cwd, builtinDir: bundledTemplateDir() });
         const compiled = compileAgent(spec, { env, input: params.input, cwd: ctx.cwd });
-        // 3. Resolve model + auth via ExtensionContext.modelRegistry
-        const modelSpec = compiled.model ?? spec.model;
+        // 3. Resolve model + auth via ExtensionContext.modelRegistry. Precedence
+        // (DEC-0023): compiled/spec model → model-config by_role[role] → default.
+        // In-process dispatch has no pi subprocess to fall through to, so a still-null
+        // resolution is an informed throw naming the model-config block as the remedy.
+        const modelSpec = compiled.model ?? spec.model ?? resolveDispatchModel(ctx.cwd, spec);
         if (!modelSpec) {
-            throw new Error(`call-agent: agent '${params.spec_name}' has no model specified.`);
+            throw new Error(`call-agent: agent '${params.spec_name}' has no model — declare one on the spec, ` +
+                `or add a matching entry to the substrate's model-config block (by_role['${spec.role ?? ""}'] or default).`);
         }
         const { provider, modelId } = parseModelSpec(modelSpec);
         const model = ctx.modelRegistry.find(provider, modelId);

package/dist/call-agent-tool.js.map

@@ -1 +1 @@
-{"version":3,"file":"call-agent-tool.js","sourceRoot":"","sources":["../src/call-agent-tool.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,YAAY,IAAI,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAGtE,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAE7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D,SAAS,cAAc,CAAC,IAAY;IACnC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,UAAU,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,CAAC;IAC3G,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACjD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,UAAU,GAAwF;IAC9G,YAAY,EAAE,qBAAqB;CACnC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG;IAC5B,IAAI,EAAE,YAAY;IAClB,KAAK,EAAE,YAAY;IACnB,WAAW,EACV,0SAA0S;IAC3S,aAAa,EAAE,0DAA0D;IACzE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;QACvB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,WAAW,EAAE,oFAAoF;SACjG,CAAC;QACF,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,yDAAyD,EAAE,CAAC;QAC/F,YAAY,EAAE,IAAI,CAAC,QAAQ,CAC1B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,6CAA6C,EAAE,CAAC,CACzF;QACD,eAAe,EAAE,IAAI,CAAC,QAAQ,CAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE;YACzB,WAAW,EACV,0GAA0G;SAC3G,CAAC,CACF;QACD,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gDAAgD,EAAE,CAAC,CAAC;KACzG,CAAC;IACF,KAAK,CAAC,OAAO,CACZ,WAAmB,EACnB,MAMC,EACD,MAAmB,EACnB,SAAkC,EAClC,GAAqB;QAErB,+CAA+C;QAC/C,MAAM,SAAS,GAAG,iBAAiB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEzC,6BAA6B;QAC7B,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QAEhF,6DAA6D;QAC7D,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;QAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,SAAS,2BAA2B,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,sBAAsB,SAAS,2CAA2C,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;QACjH,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,2CAA2C,SAAS,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,wEAAwE;QACxE,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;QAEpF,yFAAyF;QACzF,MAAM,QAAQ,GAAoB;YACjC,KAAK,EAAE,KAAmB;YAC1B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE;YAChE,WAAW,EAAE,aAAa;YAC1B,SAAS,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;YACpC,MAAM;SACN,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAEjE,OAAO;YACN,OAAO,EAAE,MAAM;YACf,OAAO,EAAE;gBACR;oBACC,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,qBAAqB,MAAM,CAAC,SAAS,aAAa,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,OAAO,MAAM,CAAC,MAAM,EAAE;iBAChI;aACD;SACD,CAAC;IACH,CAAC;CACD,CAAC"}
+{"version":3,"file":"call-agent-tool.js","sourceRoot":"","sources":["../src/call-agent-tool.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,YAAY,IAAI,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAG1F,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAE7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,SAAS,cAAc,CAAC,IAAY;IACnC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,UAAU,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,CAAC;IAC3G,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACjD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,UAAU,GAAwF;IAC9G,YAAY,EAAE,qBAAqB;CACnC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG;IAC5B,IAAI,EAAE,YAAY;IAClB,KAAK,EAAE,YAAY;IACnB,WAAW,EACV,0SAA0S;IAC3S,aAAa,EAAE,0DAA0D;IACzE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;QACvB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,WAAW,EACV,2KAA2K;SAC5K,CAAC;QACF,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,yDAAyD,EAAE,CAAC;QAC/F,YAAY,EAAE,IAAI,CAAC,QAAQ,CAC1B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,6CAA6C,EAAE,CAAC,CACzF;QACD,eAAe,EAAE,IAAI,CAAC,QAAQ,CAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE;YACzB,WAAW,EACV,0GAA0G;SAC3G,CAAC,CACF;QACD,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gDAAgD,EAAE,CAAC,CAAC;KACzG,CAAC;IACF,KAAK,CAAC,OAAO,CACZ,WAAmB,EACnB,MAMC,EACD,MAAmB,EACnB,SAAkC,EAClC,GAAqB;QAErB,6FAA6F;QAC7F,MAAM,SAAS,GAAG,iBAAiB,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEzC,6EAA6E;QAC7E,0EAA0E;QAC1E,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,UAAU,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QAEhF,yEAAyE;QACzE,0EAA0E;QAC1E,+EAA+E;QAC/E,+EAA+E;QAC/E,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,oBAAoB,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtF,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACd,sBAAsB,MAAM,CAAC,SAAS,4CAA4C;gBACjF,2EAA2E,IAAI,CAAC,IAAI,IAAI,EAAE,iBAAiB,CAC5G,CAAC;QACH,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,sBAAsB,SAAS,2CAA2C,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;QACjH,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,2CAA2C,SAAS,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,wEAAwE;QACxE,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;QAEpF,yFAAyF;QACzF,MAAM,QAAQ,GAAoB;YACjC,KAAK,EAAE,KAAmB;YAC1B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE;YAChE,WAAW,EAAE,aAAa;YAC1B,SAAS,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;YACpC,MAAM;SACN,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAEjE,OAAO;YACN,OAAO,EAAE,MAAM;YACf,OAAO,EAAE;gBACR;oBACC,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,qBAAqB,MAAM,CAAC,SAAS,aAAa,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,OAAO,MAAM,CAAC,MAAM,EAAE;iBAChI;aACD;SACD,CAAC;IACH,CAAC;CACD,CAAC"}

package/dist/dispatch-loader.d.ts

@@ -0,0 +1,26 @@
+/**
+ * dispatch-loader — the dispatch-side builtin agent tier (FGAP-127).
+ *
+ * Both dispatch entry points (call-agent, run-work-order-loop) build their
+ * pi-jit-agents `createAgentLoader` LoadContext here so the bundled
+ * pi-workflows `agents/` directory (26 shipped specs, e.g. `investigator`)
+ * becomes the LAST search tier: the active substrate's `<contextDir>/agents/`
+ * and the user tier (`~/.pi/agent/agents/`) still win on name collision.
+ *
+ * This is only the agent-spec RESOLUTION tier. A bundled spec also has to
+ * COMPILE from a fresh substrate: both entry points build their template env
+ * with `builtinDir = bundledTemplateDir()` so a bundled spec's task/system
+ * templates resolve against the bundled pi-jit-agents `templates/` tier (no
+ * local copy needed). Model resolution then follows the derived dispatch-model
+ * precedence (DEC-0023, `dispatch-model.ts`): spec → model-config `by_role` →
+ * `default`. work-order subprocess dispatch treats a still-null model as
+ * "let pi pick its own default" (no `--model` passed); in-process call-agent —
+ * which must resolve a concrete model + auth before it can call — keeps an
+ * informed throw naming the model-config block as the remedy.
+ *
+ * pi-behavior-monitors' classifier specs are deliberately NOT on this path —
+ * they are monitor-scoped, resolved via that package's own loader.
+ */
+import type { LoadContext } from "@davidorex/pi-jit-agents/types";
+export declare function dispatchLoadContext(cwd: string): LoadContext;
+//# sourceMappingURL=dispatch-loader.d.ts.map

package/dist/dispatch-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch-loader.d.ts","sourceRoot":"","sources":["../src/dispatch-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAGlE,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAE5D"}

package/dist/dispatch-loader.js

@@ -0,0 +1,28 @@
+/**
+ * dispatch-loader — the dispatch-side builtin agent tier (FGAP-127).
+ *
+ * Both dispatch entry points (call-agent, run-work-order-loop) build their
+ * pi-jit-agents `createAgentLoader` LoadContext here so the bundled
+ * pi-workflows `agents/` directory (26 shipped specs, e.g. `investigator`)
+ * becomes the LAST search tier: the active substrate's `<contextDir>/agents/`
+ * and the user tier (`~/.pi/agent/agents/`) still win on name collision.
+ *
+ * This is only the agent-spec RESOLUTION tier. A bundled spec also has to
+ * COMPILE from a fresh substrate: both entry points build their template env
+ * with `builtinDir = bundledTemplateDir()` so a bundled spec's task/system
+ * templates resolve against the bundled pi-jit-agents `templates/` tier (no
+ * local copy needed). Model resolution then follows the derived dispatch-model
+ * precedence (DEC-0023, `dispatch-model.ts`): spec → model-config `by_role` →
+ * `default`. work-order subprocess dispatch treats a still-null model as
+ * "let pi pick its own default" (no `--model` passed); in-process call-agent —
+ * which must resolve a concrete model + auth before it can call — keeps an
+ * informed throw naming the model-config block as the remedy.
+ *
+ * pi-behavior-monitors' classifier specs are deliberately NOT on this path —
+ * they are monitor-scoped, resolved via that package's own loader.
+ */
+import { bundledDir } from "@davidorex/pi-workflows/bundled-dirs";
+export function dispatchLoadContext(cwd) {
+    return { cwd, builtinDir: bundledDir("agents") };
+}
+//# sourceMappingURL=dispatch-loader.js.map

package/dist/dispatch-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch-loader.js","sourceRoot":"","sources":["../src/dispatch-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,sCAAsC,CAAC;AAElE,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC9C,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;AAClD,CAAC"}

package/dist/dispatch-model.d.ts

@@ -0,0 +1,31 @@
+/**
+ * dispatch-model — derived dispatch-model resolution (DEC-0023).
+ *
+ * Mirrors the workflow executor's model-precedence policy at the agent-dispatch
+ * boundary: an agent spec that names no `model` of its own falls back to the
+ * active substrate's `model-config` block — first a per-role assignment
+ * (`by_role[role]`), then the block's `default`. This is the same precedence
+ * `packages/pi-workflows/src/dispatch.ts` (buildArgs) applies to workflow steps,
+ * lifted here so a bundled spec (which carries no model) can be dispatched
+ * without every caller hard-coding a model.
+ *
+ * The two dispatch entry points consume the resolved value differently, by
+ * design:
+ *   - subprocess dispatch (work-order loop) treats a `null` result as "let pi
+ *     pick its own default": no `--model` flag is passed and pi resolves the
+ *     model from the operator's own configuration inside the subprocess.
+ *   - in-process dispatch (call-agent, which must resolve a concrete model +
+ *     auth through the ExtensionContext.modelRegistry before it can call) keeps
+ *     an informed throw when the resolution is still `null` — there is no pi
+ *     subprocess to fall through to.
+ *
+ * `model-config` is read through pi-context's `readBlock`, which THROWS when the
+ * block is absent; a missing/broken block is a fall-through, not an error, so
+ * the read is wrapped in try/catch-to-`undefined` (the same handling the
+ * workflow executor applies at `workflow-executor.ts`'s model-config load).
+ */
+export declare function resolveDispatchModel(cwd: string, spec: {
+    model?: string;
+    role?: string;
+}): string | null;
+//# sourceMappingURL=dispatch-model.d.ts.map

package/dist/dispatch-model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch-model.d.ts","sourceRoot":"","sources":["../src/dispatch-model.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AASH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAAG,IAAI,CAYxG"}

package/dist/dispatch-model.js

@@ -0,0 +1,41 @@
+/**
+ * dispatch-model — derived dispatch-model resolution (DEC-0023).
+ *
+ * Mirrors the workflow executor's model-precedence policy at the agent-dispatch
+ * boundary: an agent spec that names no `model` of its own falls back to the
+ * active substrate's `model-config` block — first a per-role assignment
+ * (`by_role[role]`), then the block's `default`. This is the same precedence
+ * `packages/pi-workflows/src/dispatch.ts` (buildArgs) applies to workflow steps,
+ * lifted here so a bundled spec (which carries no model) can be dispatched
+ * without every caller hard-coding a model.
+ *
+ * The two dispatch entry points consume the resolved value differently, by
+ * design:
+ *   - subprocess dispatch (work-order loop) treats a `null` result as "let pi
+ *     pick its own default": no `--model` flag is passed and pi resolves the
+ *     model from the operator's own configuration inside the subprocess.
+ *   - in-process dispatch (call-agent, which must resolve a concrete model +
+ *     auth through the ExtensionContext.modelRegistry before it can call) keeps
+ *     an informed throw when the resolution is still `null` — there is no pi
+ *     subprocess to fall through to.
+ *
+ * `model-config` is read through pi-context's `readBlock`, which THROWS when the
+ * block is absent; a missing/broken block is a fall-through, not an error, so
+ * the read is wrapped in try/catch-to-`undefined` (the same handling the
+ * workflow executor applies at `workflow-executor.ts`'s model-config load).
+ */
+import { readBlock } from "@davidorex/pi-context/block-api";
+export function resolveDispatchModel(cwd, spec) {
+    if (spec.model)
+        return spec.model;
+    let modelConfig;
+    try {
+        modelConfig = readBlock(cwd, "model-config");
+    }
+    catch {
+        /* no model-config block — nothing to fall back to */
+    }
+    const byRole = spec.role ? modelConfig?.by_role?.[spec.role] : undefined;
+    return byRole ?? modelConfig?.default ?? null;
+}
+//# sourceMappingURL=dispatch-model.js.map

package/dist/dispatch-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch-model.js","sourceRoot":"","sources":["../src/dispatch-model.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAO5D,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,IAAuC;IACxF,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IAElC,IAAI,WAAoC,CAAC;IACzC,IAAI,CAAC;QACJ,WAAW,GAAG,SAAS,CAAC,GAAG,EAAE,cAAc,CAAgB,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACR,qDAAqD;IACtD,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,OAAO,MAAM,IAAI,WAAW,EAAE,OAAO,IAAI,IAAI,CAAC;AAC/C,CAAC"}

package/dist/subprocess-dispatch.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Subprocess dispatch for the work-order loop (FGAP-124).
+ *
+ * The work-order loop's target agent must ACT — write files, run bash — not
+ * merely produce structured output. pi-jit-agents `executeAgent` is a
+ * single-turn completion primitive that binds NO executable tools (it only
+ * ever passes a phantom output-schema tool; `compiled.tools` feeds the
+ * the grant clamp but is never materialized as callable tools). So an
+ * agent granted [write,bash] through that path receives zero tools and every
+ * real work-order fails.
+ *
+ * Real tool execution lives only in a `pi` subprocess — the same mechanism
+ * pi-workflows uses in production (`packages/pi-workflows/src/dispatch.ts`).
+ * This module mirrors that proven pattern, focused to what the work-order
+ * loop needs: build args, spawn `pi --mode json`, stream NDJSON stdout,
+ * collect the final assistant text + usage, with timeout + cancellation.
+ *
+ * pi-jit-agents stays the classify / structured-output primitive per JI-021;
+ * the acting-agent dispatch is a subprocess.
+ */
+/** Default per-dispatch timeout (10 min) — an acting agent may build/test/write. */
+export declare const DEFAULT_DISPATCH_TIMEOUT_MS = 600000;
+export interface DispatchArgsParams {
+    /**
+     * Model spec string passed straight to `--model` (supports
+     * `provider/id[:thinking]`). Optional: when omitted the `--model` flag is not
+     * emitted at all, so pi resolves its own default model inside the subprocess
+     * (the fall-through the dispatch-model resolution takes when neither the spec
+     * nor the model-config block names a model — DEC-0023).
+     */
+    model?: string;
+    /** Composed tool grant (already intersected at the dispatch boundary). */
+    tools: string[];
+    /**
+     * Prompt argument value — either the literal prompt text or `@<tmpfile>`
+     * for long prompts (the caller decides and rewrites this before spawn).
+     */
+    promptArg: string;
+}
+/**
+ * Pure arg construction for the `pi` subprocess. Extracted so the exact CLI
+ * surface (mode, model, tools, prompt) is unit-testable without spawning.
+ *
+ * An EMPTY tool grant emits `--no-tools`, not an absent flag: a cleared grant
+ * means "no executable tools" (default-empty), whereas omitting
+ * `--tools` would let pi enable its full default tool set.
+ */
+export declare function buildDispatchArgs({ model, tools, promptArg }: DispatchArgsParams): string[];
+export interface SubprocessDispatchResult {
+    /** Concatenated assistant text across turns (final channel of the run). */
+    text: string;
+    /** The last assistant message object seen on the NDJSON stream (raw). */
+    lastAssistantMessage: unknown;
+    usage: {
+        input: number;
+        output: number;
+        cacheRead: number;
+        cacheWrite: number;
+        cost: number;
+    };
+    exitCode: number | null;
+    stderr: string;
+    timedOut: boolean;
+}
+export interface RunPiSubprocessOptions {
+    cwd: string;
+    /** Model spec; when omitted pi resolves its own default inside the subprocess. */
+    model?: string;
+    tools: string[];
+    prompt: string;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+}
+/**
+ * Spawn `pi` in JSON mode, stream NDJSON stdout, and collect the final
+ * assistant text + usage. Auth + model resolution are pi's own responsibility
+ * inside the subprocess (it loads the operator's auth.json) — no DispatchContext
+ * auth is threaded here.
+ */
+export declare function runPiSubprocess(options: RunPiSubprocessOptions): Promise<SubprocessDispatchResult>;
+//# sourceMappingURL=subprocess-dispatch.d.ts.map

package/dist/subprocess-dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subprocess-dispatch.d.ts","sourceRoot":"","sources":["../src/subprocess-dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAUH,oFAAoF;AACpF,eAAO,MAAM,2BAA2B,SAAU,CAAC;AAWnD,MAAM,WAAW,kBAAkB;IAClC;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,kBAAkB,GAAG,MAAM,EAAE,CAU3F;AAED,MAAM,WAAW,wBAAwB;IACxC,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,oBAAoB,EAAE,OAAO,CAAC;IAC9B,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9F,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;CAClB;AAaD,MAAM,WAAW,sBAAsB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAsIxG"}

package/dist/subprocess-dispatch.js

@@ -0,0 +1,206 @@
+/**
+ * Subprocess dispatch for the work-order loop (FGAP-124).
+ *
+ * The work-order loop's target agent must ACT — write files, run bash — not
+ * merely produce structured output. pi-jit-agents `executeAgent` is a
+ * single-turn completion primitive that binds NO executable tools (it only
+ * ever passes a phantom output-schema tool; `compiled.tools` feeds the
+ * the grant clamp but is never materialized as callable tools). So an
+ * agent granted [write,bash] through that path receives zero tools and every
+ * real work-order fails.
+ *
+ * Real tool execution lives only in a `pi` subprocess — the same mechanism
+ * pi-workflows uses in production (`packages/pi-workflows/src/dispatch.ts`).
+ * This module mirrors that proven pattern, focused to what the work-order
+ * loop needs: build args, spawn `pi --mode json`, stream NDJSON stdout,
+ * collect the final assistant text + usage, with timeout + cancellation.
+ *
+ * pi-jit-agents stays the classify / structured-output primitive per JI-021;
+ * the acting-agent dispatch is a subprocess.
+ */
+import { spawn } from "node:child_process";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+/** Grace period between SIGTERM and SIGKILL when terminating the subprocess. */
+const SIGKILL_GRACE_MS = 5000;
+/** Default per-dispatch timeout (10 min) — an acting agent may build/test/write. */
+export const DEFAULT_DISPATCH_TIMEOUT_MS = 600_000;
+/**
+ * Prompt length threshold (chars) for switching to `@file` argument passing.
+ * Mirrors pi-workflows dispatch — avoids OS argv length limits with headroom.
+ */
+const PROMPT_ARG_LIMIT = 8000;
+/** Maximum stdout buffer size (10 MB) to bound memory from a runaway subprocess. */
+const MAX_STDOUT_BYTES = 10 * 1024 * 1024;
+/**
+ * Pure arg construction for the `pi` subprocess. Extracted so the exact CLI
+ * surface (mode, model, tools, prompt) is unit-testable without spawning.
+ *
+ * An EMPTY tool grant emits `--no-tools`, not an absent flag: a cleared grant
+ * means "no executable tools" (default-empty), whereas omitting
+ * `--tools` would let pi enable its full default tool set.
+ */
+export function buildDispatchArgs({ model, tools, promptArg }) {
+    const args = ["--mode", "json"];
+    if (model)
+        args.push("--model", model);
+    if (tools.length > 0) {
+        args.push("--tools", tools.join(","));
+    }
+    else {
+        args.push("--no-tools");
+    }
+    args.push("-p", promptArg);
+    return args;
+}
+function extractText(content) {
+    if (!content || !Array.isArray(content))
+        return "";
+    const parts = [];
+    for (const part of content) {
+        if (part && typeof part === "object" && "type" in part && part.type === "text" && "text" in part) {
+            parts.push(String(part.text));
+        }
+    }
+    return parts.join("");
+}
+/**
+ * Spawn `pi` in JSON mode, stream NDJSON stdout, and collect the final
+ * assistant text + usage. Auth + model resolution are pi's own responsibility
+ * inside the subprocess (it loads the operator's auth.json) — no DispatchContext
+ * auth is threaded here.
+ */
+export async function runPiSubprocess(options) {
+    const timeoutMs = options.timeoutMs ?? DEFAULT_DISPATCH_TIMEOUT_MS;
+    // Long prompts go to a temp file passed as `-p @<file>`.
+    let tmpDir = null;
+    let promptArg = options.prompt;
+    if (options.prompt.length > PROMPT_ARG_LIMIT) {
+        tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "pi-wo-"));
+        const promptFile = path.join(tmpDir, "prompt.md");
+        fs.writeFileSync(promptFile, options.prompt, { mode: 0o600 });
+        promptArg = `@${promptFile}`;
+    }
+    const args = buildDispatchArgs({ model: options.model, tools: options.tools, promptArg });
+    const proc = spawn("pi", args, {
+        cwd: options.cwd,
+        env: process.env,
+        stdio: ["ignore", "pipe", "pipe"],
+    });
+    // Cancellation
+    if (options.signal) {
+        const kill = () => {
+            proc.kill("SIGTERM");
+            setTimeout(() => {
+                if (!proc.killed)
+                    proc.kill("SIGKILL");
+            }, SIGKILL_GRACE_MS);
+        };
+        if (options.signal.aborted)
+            kill();
+        else
+            options.signal.addEventListener("abort", kill, { once: true });
+    }
+    // Timeout: SIGTERM after deadline, SIGKILL after grace
+    let timedOut = false;
+    let killTimer;
+    const timeoutTimer = setTimeout(() => {
+        timedOut = true;
+        proc.kill("SIGTERM");
+        killTimer = setTimeout(() => {
+            if (!proc.killed)
+                proc.kill("SIGKILL");
+        }, SIGKILL_GRACE_MS);
+    }, timeoutMs);
+    const usage = { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, cost: 0 };
+    const textParts = [];
+    let lastAssistantMessage;
+    let stderrBuf = "";
+    function processEvent(evt) {
+        if (evt.type === "message_end" && evt.message && evt.message.role === "assistant") {
+            lastAssistantMessage = evt.message;
+            const u = evt.message.usage;
+            if (u) {
+                usage.input += u.input || 0;
+                usage.output += u.output || 0;
+                usage.cacheRead += u.cacheRead || 0;
+                usage.cacheWrite += u.cacheWrite || 0;
+                usage.cost += u.cost?.total || 0;
+            }
+            const text = extractText(evt.message.content);
+            if (text)
+                textParts.push(text);
+        }
+    }
+    let buf = "";
+    let bufBytes = 0;
+    let stdoutTruncated = false;
+    proc.stdout?.on("data", (chunk) => {
+        bufBytes += chunk.length;
+        if (bufBytes > MAX_STDOUT_BYTES) {
+            if (!stdoutTruncated) {
+                stdoutTruncated = true;
+                if (buf.trim()) {
+                    try {
+                        processEvent(JSON.parse(buf));
+                    }
+                    catch {
+                        // incomplete trailing line — discard
+                    }
+                    buf = "";
+                }
+            }
+            return;
+        }
+        buf += chunk.toString();
+        const lines = buf.split("\n");
+        buf = lines.pop() || "";
+        for (const line of lines) {
+            if (!line.trim())
+                continue;
+            try {
+                processEvent(JSON.parse(line));
+            }
+            catch {
+                // non-JSON line — skip
+            }
+        }
+    });
+    proc.stderr?.on("data", (chunk) => {
+        stderrBuf += chunk.toString();
+    });
+    const exitCode = await new Promise((resolve) => {
+        proc.on("close", (code) => {
+            if (buf.trim()) {
+                try {
+                    processEvent(JSON.parse(buf));
+                }
+                catch {
+                    // skip unparseable remainder
+                }
+            }
+            resolve(code);
+        });
+    });
+    clearTimeout(timeoutTimer);
+    if (killTimer)
+        clearTimeout(killTimer);
+    if (tmpDir) {
+        try {
+            fs.rmSync(tmpDir, { recursive: true, force: true });
+        }
+        catch {
+            // best-effort cleanup
+        }
+    }
+    return {
+        text: textParts.join("\n"),
+        lastAssistantMessage,
+        usage,
+        exitCode,
+        stderr: stderrBuf.trim(),
+        timedOut,
+    };
+}
+//# sourceMappingURL=subprocess-dispatch.js.map

package/dist/subprocess-dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subprocess-dispatch.js","sourceRoot":"","sources":["../src/subprocess-dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,gFAAgF;AAChF,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAE9B,oFAAoF;AACpF,MAAM,CAAC,MAAM,2BAA2B,GAAG,OAAO,CAAC;AAEnD;;;GAGG;AACH,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAE9B,oFAAoF;AACpF,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAoB1C;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAsB;IAChF,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,CAAC;SAAM,CAAC;QACP,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC3B,OAAO,IAAI,CAAC;AACb,CAAC;AAaD,SAAS,WAAW,CAAC,OAAgB;IACpC,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IACnD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YAClG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAE,IAA0B,CAAC,IAAI,CAAC,CAAC,CAAC;QACtD,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACvB,CAAC;AAYD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAA+B;IACpE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,2BAA2B,CAAC;IAEnE,yDAAyD;IACzD,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IAC/B,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAC9C,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAClD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9D,SAAS,GAAG,IAAI,UAAU,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,IAAI,GAAG,iBAAiB,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAE1F,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE;QAC9B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KACjC,CAAC,CAAC;IAEH,eAAe;IACf,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,GAAG,EAAE;YACjB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACrB,UAAU,CAAC,GAAG,EAAE;gBACf,IAAI,CAAC,IAAI,CAAC,MAAM;oBAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxC,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACtB,CAAC,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;YAAE,IAAI,EAAE,CAAC;;YAC9B,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,uDAAuD;IACvD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,SAAoD,CAAC;IACzD,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;QACpC,QAAQ,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAC3B,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACtB,CAAC,EAAE,SAAS,CAAC,CAAC;IAEd,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC5E,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,oBAA6B,CAAC;IAClC,IAAI,SAAS,GAAG,EAAE,CAAC;IAEnB,SAAS,YAAY,CAAC,GAAyD;QAC9E,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACnF,oBAAoB,GAAG,GAAG,CAAC,OAAO,CAAC;YACnC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,KAEV,CAAC;YACb,IAAI,CAAC,EAAE,CAAC;gBACP,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;gBAC5B,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;gBAC9B,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC;gBACpC,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC;gBACtC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC;YAClC,CAAC;YACD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,IAAI;gBAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;IACF,CAAC;IAED,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACzC,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC;QACzB,IAAI,QAAQ,GAAG,gBAAgB,EAAE,CAAC;YACjC,IAAI,CAAC,eAAe,EAAE,CAAC;gBACtB,eAAe,GAAG,IAAI,CAAC;gBACvB,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;oBAChB,IAAI,CAAC;wBACJ,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC/B,CAAC;oBAAC,MAAM,CAAC;wBACR,qCAAqC;oBACtC,CAAC;oBACD,GAAG,GAAG,EAAE,CAAC;gBACV,CAAC;YACF,CAAC;YACD,OAAO;QACR,CAAC;QACD,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9B,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QACxB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAS;YAC3B,IAAI,CAAC;gBACJ,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACR,uBAAuB;YACxB,CAAC;QACF,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACzC,SAAS,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;QAC7D,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;gBAChB,IAAI,CAAC;oBACJ,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACR,6BAA6B;gBAC9B,CAAC;YACF,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,YAAY,CAAC,YAAY,CAAC,CAAC;IAC3B,IAAI,SAAS;QAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC;YACJ,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACR,sBAAsB;QACvB,CAAC;IACF,CAAC;IAED,OAAO;QACN,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1B,oBAAoB;QACpB,KAAK;QACL,QAAQ;QACR,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE;QACxB,QAAQ;KACR,CAAC;AACH,CAAC"}

package/dist/work-order-loop.d.ts

@@ -5,10 +5,12 @@
  * drives the end-to-end loop the work-order encodes:
  *
  *   for iteration in 0..max_iterations:
- *     1. dispatch the work-order's target_agent via the jit-agents library
- *        (DEC-0044 narrowed; pi-jit-agents stays a library import per JI-021).
+ *     1. dispatch the work-order's target_agent as a `pi` subprocess (FGAP-124
+ *        — the only path that binds real, callable tools; pi-jit-agents'
+ *        executeAgent binds none). pi-jit-agents stays the classify /
+ *        structured-output library primitive per JI-021.
  *     2. run the work-order's real_check_criteria via runRealChecks
- *        (deterministic verdict per DEC-0018 + DEC-0047 clause 5 — never the
+ *        (deterministic verdict — never the
  *        executing agent's self-report).
  *     3. on pass: commit-attested with writer-identity footer; final_status
  *        = "completed".
@@ -21,10 +23,10 @@
  * / commit-attested per iteration.
  *
  * Per DEC-0014 the orchestrator-side composite is the only authorized
- * driver of this loop; per FEAT-005 the agent_grant the orchestrator
+ * driver of this loop; the agent_grant the orchestrator
  * passes is composed (intersected) at the call-agent dispatch boundary.
  */
-import type { CompiledAgent, DispatchContext, JitAgentResult } from "@davidorex/pi-jit-agents/types";
+import type { JitAgentResult } from "@davidorex/pi-jit-agents/types";
 import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
 import { type AttestedCommitResult, attestedCommit as canonicalAttestedCommit } from "./attested-commit.js";
 import { runRealChecks as canonicalRunRealChecks, type RealCheckCriteria, type RealCheckResult } from "./real-check-runner.js";
@@ -41,7 +43,7 @@ export interface WorkOrderIteration {
 export interface WorkOrderLoopResult {
     work_order_id: string;
     iterations: WorkOrderIteration[];
-    final_status: "completed" | "failed" | "aborted-by-human";
+    final_status: "completed" | "failed" | "aborted-by-human" | "aborted-non-interactive";
     commit_sha?: string;
     total_duration_ms: number;
 }
@@ -59,21 +61,39 @@ interface WorkOrderRecord {
         directories?: string[];
         operations?: string[];
     };
+    input_contract?: Record<string, unknown>;
 }
+/**
+ * Clamp a composed tool grant to the operations the work-order's `scope`
+ * declares. The work-order's declared operation scope is the outer bound —
+ * the dispatched agent can never exceed the operations the work-order itself
+ * authorizes, regardless of the caller's agent_grant. When the work-order
+ * declares no `scope.operations` (absent or empty array), the composed grant
+ * is returned unchanged.
+ */
+export declare function clampToScope(composedGrant: string[], operations?: string[]): string[];
+/**
+ * Validate a work-order dispatch input against the work-order's declared
+ * `input_contract` (an inline JSON Schema). Reuses the canonical pi-context
+ * AJV validator (shared instance / strictness / formats) rather than standing
+ * up a parallel validator. On a contract violation THROWS an error naming the
+ * work-order id and the AJV error detail (the loop surfaces thrown errors);
+ * when no contract is declared this is a no-op pass-through.
+ */
+export declare function validateWorkOrderInput(input: Record<string, unknown>, contract: Record<string, unknown> | undefined, workOrderId: string): void;
 /**
  * Internal indirection — tests substitute these to short-circuit the
- * jit-agents / real-check / commit paths. Production code path never
+ * subprocess dispatch / real-check / commit paths. Production code path never
  * reassigns; the same indirection pattern as call-agent-tool._internals.
  */
 type DispatchTargetAgent = (cwd: string, wo: WorkOrderRecord, agentGrant: string[], ctx: ExtensionContext) => Promise<JitAgentResult>;
 export declare const _internals: {
-    executeAgent: (c: CompiledAgent, d: DispatchContext) => Promise<JitAgentResult>;
     runRealChecks: typeof canonicalRunRealChecks;
     attestedCommit: typeof canonicalAttestedCommit;
     /**
-     * Tests reassign this to short-circuit the model/auth resolution +
-     * jit-agents compile/dispatch chain. Production code path runs the
-     * default canonical implementation.
+     * Tests reassign this to short-circuit the spec compile + `pi` subprocess
+     * dispatch chain. Production code path runs the default canonical
+     * implementation below.
      */
     dispatchTargetAgent: DispatchTargetAgent | undefined;
 };

package/dist/work-order-loop.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"work-order-loop.d.ts","sourceRoot":"","sources":["../src/work-order-loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAOH,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAErG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,KAAK,oBAAoB,EAAE,cAAc,IAAI,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAE5G,OAAO,EACN,aAAa,IAAI,sBAAsB,EACvC,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,MAAM,wBAAwB,CAAC;AAEhC,qBAAa,sBAAuB,SAAQ,KAAK;gBACpC,WAAW,EAAE,MAAM;CAI/B;AAED,MAAM,WAAW,kBAAkB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;IACtB,iBAAiB,EAAE,eAAe,CAAC;IACnC,sBAAsB,CAAC,EAAE,oBAAoB,CAAC;IAC9C,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,YAAY,EAAE,WAAW,GAAG,QAAQ,GAAG,kBAAkB,CAAC;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,UAAU,eAAe;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,iBAAiB,CAAC;IACxC,KAAK,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CAC5E;AAQD;;;;GAIG;AACH,KAAK,mBAAmB,GAAG,CAC1B,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,eAAe,EACnB,UAAU,EAAE,MAAM,EAAE,EACpB,GAAG,EAAE,gBAAgB,KACjB,OAAO,CAAC,cAAc,CAAC,CAAC;AAE7B,eAAO,MAAM,UAAU;kBACiB,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,eAAe,KAAK,OAAO,CAAC,cAAc,CAAC;;;IAGxG;;;;OAIG;yBAC+B,mBAAmB,GAAG,SAAS;CACjE,CAAC;AAoCF,wBAAsB,gBAAgB,CACrC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,gBAAgB,GACnB,OAAO,CAAC,mBAAmB,CAAC,CAwE9B"}
+{"version":3,"file":"work-order-loop.d.ts","sourceRoot":"","sources":["../src/work-order-loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAOH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,KAAK,oBAAoB,EAAE,cAAc,IAAI,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAI5G,OAAO,EACN,aAAa,IAAI,sBAAsB,EACvC,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,MAAM,wBAAwB,CAAC;AAGhC,qBAAa,sBAAuB,SAAQ,KAAK;gBACpC,WAAW,EAAE,MAAM;CAI/B;AAED,MAAM,WAAW,kBAAkB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;IACtB,iBAAiB,EAAE,eAAe,CAAC;IACnC,sBAAsB,CAAC,EAAE,oBAAoB,CAAC;IAC9C,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,YAAY,EAAE,WAAW,GAAG,QAAQ,GAAG,kBAAkB,GAAG,yBAAyB,CAAC;IACtF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,UAAU,eAAe;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,iBAAiB,CAAC;IACxC,KAAK,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC5E,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAIrF;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACrC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC7C,WAAW,EAAE,MAAM,GACjB,IAAI,CAWN;AAED;;;;GAIG;AACH,KAAK,mBAAmB,GAAG,CAC1B,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,eAAe,EACnB,UAAU,EAAE,MAAM,EAAE,EACpB,GAAG,EAAE,gBAAgB,KACjB,OAAO,CAAC,cAAc,CAAC,CAAC;AAE7B,eAAO,MAAM,UAAU;;;IAGtB;;;;OAIG;yBAC+B,mBAAmB,GAAG,SAAS;CACjE,CAAC;AAwEF,wBAAsB,gBAAgB,CACrC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,gBAAgB,GACnB,OAAO,CAAC,mBAAmB,CAAC,CAiF9B"}

package/dist/work-order-loop.js

@@ -5,10 +5,12 @@
  * drives the end-to-end loop the work-order encodes:
  *
  *   for iteration in 0..max_iterations:
- *     1. dispatch the work-order's target_agent via the jit-agents library
- *        (DEC-0044 narrowed; pi-jit-agents stays a library import per JI-021).
+ *     1. dispatch the work-order's target_agent as a `pi` subprocess (FGAP-124
+ *        — the only path that binds real, callable tools; pi-jit-agents'
+ *        executeAgent binds none). pi-jit-agents stays the classify /
+ *        structured-output library primitive per JI-021.
  *     2. run the work-order's real_check_criteria via runRealChecks
- *        (deterministic verdict per DEC-0018 + DEC-0047 clause 5 — never the
+ *        (deterministic verdict — never the
  *        executing agent's self-report).
  *     3. on pass: commit-attested with writer-identity footer; final_status
  *        = "completed".
@@ -21,67 +23,127 @@
  * / commit-attested per iteration.
  *
  * Per DEC-0014 the orchestrator-side composite is the only authorized
- * driver of this loop; per FEAT-005 the agent_grant the orchestrator
+ * driver of this loop; the agent_grant the orchestrator
  * passes is composed (intersected) at the call-agent dispatch boundary.
  */
 import { readBlock } from "@davidorex/pi-context/block-api";
+import { validate } from "@davidorex/pi-context/schema-validator";
 import { createAgentLoader } from "@davidorex/pi-jit-agents/agent-spec";
 import { compileAgent } from "@davidorex/pi-jit-agents/compile";
-import { executeAgent as canonicalExecuteAgent } from "@davidorex/pi-jit-agents/runtime";
-import { createTemplateEnv } from "@davidorex/pi-jit-agents/template";
+import { bundledTemplateDir, createTemplateEnv } from "@davidorex/pi-jit-agents/template";
 import { attestedCommit as canonicalAttestedCommit } from "./attested-commit.js";
 import { composeToolGrant } from "./capability-composer.js";
+import { dispatchLoadContext } from "./dispatch-loader.js";
+import { resolveDispatchModel } from "./dispatch-model.js";
 import { runRealChecks as canonicalRunRealChecks, } from "./real-check-runner.js";
+import { runPiSubprocess } from "./subprocess-dispatch.js";
 export class WorkOrderNotFoundError extends Error {
     constructor(workOrderId) {
         super(`work-order-loop: work-order '${workOrderId}' not found in work-orders block`);
         this.name = "WorkOrderNotFoundError";
     }
 }
-function parseModelSpec(spec) {
-    const slashIndex = spec.indexOf("/");
-    if (slashIndex !== -1)
-        return { provider: spec.slice(0, slashIndex), modelId: spec.slice(slashIndex + 1) };
-    return { provider: "anthropic", modelId: spec };
+/**
+ * Clamp a composed tool grant to the operations the work-order's `scope`
+ * declares. The work-order's declared operation scope is the outer bound —
+ * the dispatched agent can never exceed the operations the work-order itself
+ * authorizes, regardless of the caller's agent_grant. When the work-order
+ * declares no `scope.operations` (absent or empty array), the composed grant
+ * is returned unchanged.
+ */
+export function clampToScope(composedGrant, operations) {
+    if (!operations || operations.length === 0)
+        return composedGrant;
+    const allowed = new Set(operations);
+    return composedGrant.filter((t) => allowed.has(t));
+}
+/**
+ * Validate a work-order dispatch input against the work-order's declared
+ * `input_contract` (an inline JSON Schema). Reuses the canonical pi-context
+ * AJV validator (shared instance / strictness / formats) rather than standing
+ * up a parallel validator. On a contract violation THROWS an error naming the
+ * work-order id and the AJV error detail (the loop surfaces thrown errors);
+ * when no contract is declared this is a no-op pass-through.
+ */
+export function validateWorkOrderInput(input, contract, workOrderId) {
+    if (!contract)
+        return;
+    try {
+        validate(contract, input, `work-order '${workOrderId}' input_contract`);
+    }
+    catch (err) {
+        throw new Error(`work-order-loop: dispatch input for work-order '${workOrderId}' violates its input_contract: ${err instanceof Error ? err.message : String(err)}`);
+    }
 }
 export const _internals = {
-    executeAgent: canonicalExecuteAgent,
     runRealChecks: canonicalRunRealChecks,
     attestedCommit: canonicalAttestedCommit,
     /**
-     * Tests reassign this to short-circuit the model/auth resolution +
-     * jit-agents compile/dispatch chain. Production code path runs the
-     * default canonical implementation.
+     * Tests reassign this to short-circuit the spec compile + `pi` subprocess
+     * dispatch chain. Production code path runs the default canonical
+     * implementation below.
      */
     dispatchTargetAgent: undefined,
 };
-async function dispatchTargetAgent(cwd, wo, agentGrant, ctx) {
-    const loadAgent = createAgentLoader({ cwd });
+/**
+ * Dispatch the work-order's target agent as a `pi` subprocess (FGAP-124).
+ *
+ * The subprocess is the ONLY execution path that binds real, callable tools —
+ * pi-jit-agents `executeAgent` binds none (it materializes only a phantom
+ * output-schema tool), so an agent granted [write,bash] through that library
+ * primitive can never act. We reuse pi-workflows' proven subprocess pattern:
+ * compile the spec for its rendered task prompt + model + tool grant, then
+ * spawn `pi --mode json --model <spec> --tools <composedGrant> -p <prompt>`
+ * in `cwd` and collect the final assistant output. pi resolves model + auth
+ * itself inside the subprocess (operator auth.json), so no DispatchContext
+ * auth is threaded — `ctx` is retained only to satisfy the seam signature.
+ */
+async function dispatchTargetAgent(cwd, wo, agentGrant, _ctx) {
+    const loadAgent = createAgentLoader(dispatchLoadContext(cwd));
     const spec = loadAgent(wo.target_agent);
-    const env = createTemplateEnv({ cwd });
-    const compiled = compileAgent(spec, { env, input: { work_order_id: wo.id }, cwd });
-    const modelSpec = compiled.model ?? spec.model;
-    if (!modelSpec) {
-        throw new Error(`work-order-loop: agent '${wo.target_agent}' has no model specified.`);
-    }
-    const { provider, modelId } = parseModelSpec(modelSpec);
-    const model = ctx.modelRegistry.find(provider, modelId);
-    if (!model) {
-        throw new Error(`work-order-loop: model '${modelSpec}' not found for agent '${wo.target_agent}'.`);
+    // builtinDir = bundled pi-jit-agents templates/, so a bundled spec's task/system
+    // templates resolve without a local copy.
+    const env = createTemplateEnv({ cwd, builtinDir: bundledTemplateDir() });
+    // Guard the dispatch input against the work-order's declared input_contract
+    // BEFORE compiling/spawning; a contract violation throws and the loop
+    // surfaces it (no subprocess is spawned on a bad input).
+    const input = { work_order_id: wo.id };
+    validateWorkOrderInput(input, wo.input_contract, wo.id);
+    const compiled = compileAgent(spec, { env, input, cwd });
+    // Model precedence (DEC-0023): compiled/spec model → model-config by_role[role]
+    // → default → null. A null result is NOT an error for subprocess dispatch — no
+    // `--model` is passed and pi resolves its own default inside the subprocess.
+    const modelSpec = compiled.model ?? spec.model ?? resolveDispatchModel(cwd, spec) ?? undefined;
+    // Intersect at dispatch boundary (parent ∩ requested = agentGrant ∩ spec.tools).
+    // The clamp now actually reaches execution: composedGrant becomes the
+    // subprocess `--tools` allowlist (empty grant → `--no-tools`).
+    const composedGrant = composeToolGrant(agentGrant, spec.tools);
+    // The work-order's declared operation scope is the outer bound — clamp the
+    // composed grant to wo.scope.operations so the dispatched agent can never
+    // exceed the operations the work-order itself authorizes, regardless of the
+    // caller's agent_grant. Absent/empty scope.operations → composedGrant
+    // unchanged.
+    const finalGrant = clampToScope(composedGrant, wo.scope?.operations);
+    const result = await runPiSubprocess({
+        cwd,
+        model: modelSpec,
+        tools: finalGrant,
+        prompt: compiled.taskPrompt,
+    });
+    if (result.exitCode !== 0 || result.timedOut) {
+        throw new Error(`work-order-loop: pi subprocess for agent '${wo.target_agent}' ` +
+            `${result.timedOut ? "timed out" : `exited with code ${result.exitCode}`}` +
+            `${result.stderr ? `: ${result.stderr}` : ""}`);
     }
-    const auth = await ctx.modelRegistry.getApiKeyAndHeaders(model);
-    if (!auth.ok) {
-        throw new Error(`work-order-loop: auth resolution failed for '${modelSpec}': ${auth.error}`);
+    if (!result.text) {
+        throw new Error(`work-order-loop: pi subprocess for agent '${wo.target_agent}' produced no assistant output ` +
+            `(exit ${result.exitCode})${result.stderr ? `: ${result.stderr}` : ""}`);
     }
-    // Intersect at dispatch boundary per FEAT-005 (parent ∩ requested = agentGrant ∩ spec.tools).
-    const composedGrant = composeToolGrant(agentGrant, spec.tools);
-    const dispatch = {
-        model: model,
-        auth: { apiKey: auth.apiKey ?? "", headers: auth.headers ?? {} },
-        parentGrant: composedGrant,
-        maxTokens: 1024,
+    return {
+        output: result.text,
+        raw: result.lastAssistantMessage,
+        usage: result.usage,
     };
-    return _internals.executeAgent(compiled, dispatch);
 }
 export async function runWorkOrderLoop(cwd, options, ctx) {
     const start = Date.now();
@@ -130,6 +192,15 @@ export async function runWorkOrderLoop(cwd, options, ctx) {
         // the loop will exit naturally as "failed" without asking the user
         // whether to retry past max_iterations.
         if (i < maxIterations - 1) {
+            // Non-interactive contexts have no human to ask. Do NOT call
+            // ctx.ui.confirm (which would return an environment default) and
+            // mislabel that default as a human decision. Mirror the auth-gate
+            // pattern (auth-gate.ts checks !ctx.hasUI first) and record the
+            // distinct "aborted-non-interactive" status.
+            if (ctx.hasUI === false) {
+                finalStatus = "aborted-non-interactive";
+                break;
+            }
             const failExcerpt = JSON.stringify(realCheck.details, null, 2).slice(0, 500);
             const proceed = await ctx.ui.confirm("Real-check failed", `Iteration ${i + 1}/${maxIterations} failed. Retry?\nFail-report: ${failExcerpt}`);
             if (!proceed) {

package/dist/work-order-loop.js.map

@@ -1 +1 @@
-{"version":3,"file":"work-order-loop.js","sourceRoot":"","sources":["../src/work-order-loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,YAAY,IAAI,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAItE,OAAO,EAA6B,cAAc,IAAI,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC5G,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EACN,aAAa,IAAI,sBAAsB,GAGvC,MAAM,wBAAwB,CAAC;AAEhC,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAChD,YAAY,WAAmB;QAC9B,KAAK,CAAC,gCAAgC,WAAW,kCAAkC,CAAC,CAAC;QACrF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACtC,CAAC;CACD;AA+BD,SAAS,cAAc,CAAC,IAAY;IACnC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,UAAU,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,CAAC;IAC3G,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACjD,CAAC;AAcD,MAAM,CAAC,MAAM,UAAU,GAAG;IACzB,YAAY,EAAE,qBAA0F;IACxG,aAAa,EAAE,sBAAsB;IACrC,cAAc,EAAE,uBAAuB;IACvC;;;;OAIG;IACH,mBAAmB,EAAE,SAA4C;CACjE,CAAC;AAEF,KAAK,UAAU,mBAAmB,CACjC,GAAW,EACX,EAAmB,EACnB,UAAoB,EACpB,GAAqB;IAErB,MAAM,SAAS,GAAG,iBAAiB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACnF,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;IAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,2BAA2B,EAAE,CAAC,YAAY,2BAA2B,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,0BAA0B,EAAE,CAAC,YAAY,IAAI,CAAC,CAAC;IACpG,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAChE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,gDAAgD,SAAS,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,8FAA8F;IAC9F,MAAM,aAAa,GAAG,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAoB;QACjC,KAAK,EAAE,KAAmB;QAC1B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE;QAChE,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,IAAI;KACf,CAAC;IACF,OAAO,UAAU,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,GAAW,EACX,OAA6B,EAC7B,GAAqB;IAErB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,aAAa,GAAG,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC;IAElD,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,EAAE,aAAa,CAAuC,CAAC;IACjF,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IACxE,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,sBAAsB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAEjE,MAAM,UAAU,GAAyB,EAAE,CAAC;IAC5C,IAAI,WAAW,GAAwC,QAAQ,CAAC;IAChE,IAAI,SAA6B,CAAC;IAElC,MAAM,QAAQ,GAAG,UAAU,CAAC,mBAAmB,IAAI,mBAAmB,CAAC;IAEvE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,mBAAmB,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnH,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;YACpC,MAAM,aAAa,GAAG,mBAAmB,EAAE,CAAC,EAAE,gDAAgD,CAAC,GAAG,CAAC,IAAI,aAAa,GAAG,CAAC;YACxH,IAAI,MAAwC,CAAC;YAC7C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,GAAG,EAAE;oBAC7C,KAAK;oBACL,OAAO,EAAE,aAAa;oBACtB,QAAQ,EAAE,EAAE,CAAC,YAAY;oBACzB,aAAa,EAAE,EAAE,CAAC,EAAE;iBACpB,CAAC,CAAC;gBACH,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC;YAC/B,CAAC;YACD,UAAU,CAAC,IAAI,CAAC;gBACf,SAAS,EAAE,CAAC;gBACZ,YAAY,EAAE,WAAW,CAAC,MAAM;gBAChC,iBAAiB,EAAE,SAAS;gBAC5B,sBAAsB,EAAE,MAAM;gBAC9B,MAAM,EAAE,QAAQ;aAChB,CAAC,CAAC;YACH,WAAW,GAAG,WAAW,CAAC;YAC1B,MAAM;QACP,CAAC;QAED,UAAU,CAAC,IAAI,CAAC;YACf,SAAS,EAAE,CAAC;YACZ,YAAY,EAAE,WAAW,CAAC,MAAM;YAChC,iBAAiB,EAAE,SAAS;YAC5B,MAAM,EAAE,QAAQ;SAChB,CAAC,CAAC;QAEH,oEAAoE;QACpE,mEAAmE;QACnE,wCAAwC;QACxC,IAAI,CAAC,GAAG,aAAa,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC7E,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,OAAO,CACnC,mBAAmB,EACnB,aAAa,CAAC,GAAG,CAAC,IAAI,aAAa,iCAAiC,WAAW,EAAE,CACjF,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,WAAW,GAAG,kBAAkB,CAAC;gBACjC,MAAM;YACP,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO;QACN,aAAa,EAAE,EAAE,CAAC,EAAE;QACpB,UAAU;QACV,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,SAAS;QACrB,iBAAiB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;KACrC,CAAC;AACH,CAAC"}
+{"version":3,"file":"work-order-loop.js","sourceRoot":"","sources":["../src/work-order-loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,wCAAwC,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAG1F,OAAO,EAA6B,cAAc,IAAI,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC5G,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EACN,aAAa,IAAI,sBAAsB,GAGvC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAE3D,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAChD,YAAY,WAAmB;QAC9B,KAAK,CAAC,gCAAgC,WAAW,kCAAkC,CAAC,CAAC;QACrF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACtC,CAAC;CACD;AAgCD;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,aAAuB,EAAE,UAAqB;IAC1E,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACrC,KAA8B,EAC9B,QAA6C,EAC7C,WAAmB;IAEnB,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,IAAI,CAAC;QACJ,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,eAAe,WAAW,kBAAkB,CAAC,CAAC;IACzE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACd,mDAAmD,WAAW,kCAC7D,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAChD,EAAE,CACF,CAAC;IACH,CAAC;AACF,CAAC;AAcD,MAAM,CAAC,MAAM,UAAU,GAAG;IACzB,aAAa,EAAE,sBAAsB;IACrC,cAAc,EAAE,uBAAuB;IACvC;;;;OAIG;IACH,mBAAmB,EAAE,SAA4C;CACjE,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,mBAAmB,CACjC,GAAW,EACX,EAAmB,EACnB,UAAoB,EACpB,IAAsB;IAEtB,MAAM,SAAS,GAAG,iBAAiB,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;IACxC,iFAAiF;IACjF,0CAA0C;IAC1C,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACzE,4EAA4E;IAC5E,sEAAsE;IACtE,yDAAyD;IACzD,MAAM,KAAK,GAAG,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;IACvC,sBAAsB,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACzD,gFAAgF;IAChF,+EAA+E;IAC/E,6EAA6E;IAC7E,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,SAAS,CAAC;IAC/F,iFAAiF;IACjF,sEAAsE;IACtE,+DAA+D;IAC/D,MAAM,aAAa,GAAG,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,sEAAsE;IACtE,aAAa;IACb,MAAM,UAAU,GAAG,YAAY,CAAC,aAAa,EAAE,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;QACpC,GAAG;QACH,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,QAAQ,CAAC,UAAU;KAC3B,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACd,6CAA6C,EAAE,CAAC,YAAY,IAAI;YAC/D,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,oBAAoB,MAAM,CAAC,QAAQ,EAAE,EAAE;YAC1E,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/C,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACd,6CAA6C,EAAE,CAAC,YAAY,iCAAiC;YAC5F,SAAS,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACxE,CAAC;IACH,CAAC;IACD,OAAO;QACN,MAAM,EAAE,MAAM,CAAC,IAAI;QACnB,GAAG,EAAE,MAAM,CAAC,oBAAoB;QAChC,KAAK,EAAE,MAAM,CAAC,KAAK;KACU,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,GAAW,EACX,OAA6B,EAC7B,GAAqB;IAErB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,aAAa,GAAG,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC;IAElD,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,EAAE,aAAa,CAAuC,CAAC;IACjF,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IACxE,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,sBAAsB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAEjE,MAAM,UAAU,GAAyB,EAAE,CAAC;IAC5C,IAAI,WAAW,GAAwC,QAAQ,CAAC;IAChE,IAAI,SAA6B,CAAC;IAElC,MAAM,QAAQ,GAAG,UAAU,CAAC,mBAAmB,IAAI,mBAAmB,CAAC;IAEvE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,mBAAmB,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnH,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;YACpC,MAAM,aAAa,GAAG,mBAAmB,EAAE,CAAC,EAAE,gDAAgD,CAAC,GAAG,CAAC,IAAI,aAAa,GAAG,CAAC;YACxH,IAAI,MAAwC,CAAC;YAC7C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,GAAG,EAAE;oBAC7C,KAAK;oBACL,OAAO,EAAE,aAAa;oBACtB,QAAQ,EAAE,EAAE,CAAC,YAAY;oBACzB,aAAa,EAAE,EAAE,CAAC,EAAE;iBACpB,CAAC,CAAC;gBACH,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC;YAC/B,CAAC;YACD,UAAU,CAAC,IAAI,CAAC;gBACf,SAAS,EAAE,CAAC;gBACZ,YAAY,EAAE,WAAW,CAAC,MAAM;gBAChC,iBAAiB,EAAE,SAAS;gBAC5B,sBAAsB,EAAE,MAAM;gBAC9B,MAAM,EAAE,QAAQ;aAChB,CAAC,CAAC;YACH,WAAW,GAAG,WAAW,CAAC;YAC1B,MAAM;QACP,CAAC;QAED,UAAU,CAAC,IAAI,CAAC;YACf,SAAS,EAAE,CAAC;YACZ,YAAY,EAAE,WAAW,CAAC,MAAM;YAChC,iBAAiB,EAAE,SAAS;YAC5B,MAAM,EAAE,QAAQ;SAChB,CAAC,CAAC;QAEH,oEAAoE;QACpE,mEAAmE;QACnE,wCAAwC;QACxC,IAAI,CAAC,GAAG,aAAa,GAAG,CAAC,EAAE,CAAC;YAC3B,6DAA6D;YAC7D,iEAAiE;YACjE,kEAAkE;YAClE,gEAAgE;YAChE,6CAA6C;YAC7C,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBACzB,WAAW,GAAG,yBAAyB,CAAC;gBACxC,MAAM;YACP,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC7E,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,OAAO,CACnC,mBAAmB,EACnB,aAAa,CAAC,GAAG,CAAC,IAAI,aAAa,iCAAiC,WAAW,EAAE,CACjF,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,WAAW,GAAG,kBAAkB,CAAC;gBACjC,MAAM;YACP,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO;QACN,aAAa,EAAE,EAAE,CAAC,EAAE;QACpB,UAAU;QACV,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,SAAS;QACrB,iBAAiB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;KACrC,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@davidorex/pi-agent-dispatch",
-	"version": "0.32.0",
+	"version": "0.33.0",
 	"publishConfig": {
 		"access": "public"
 	},
@@ -42,13 +42,13 @@
 		"clean": "rm -rf dist",
 		"build": "rm -rf dist && tsc -p tsconfig.build.json",
 		"prepublishOnly": "npm run clean && npm run build",
-		"test": "tsx --test src/*.test.ts"
+		"test": "tsx --test --test-timeout=120000 src/*.test.ts"
 	},
 	"dependencies": {
-		"@davidorex/pi-behavior-monitors": "^0.32.0",
-		"@davidorex/pi-context": "^0.32.0",
-		"@davidorex/pi-jit-agents": "^0.32.0",
-		"@davidorex/pi-workflows": "^0.32.0",
+		"@davidorex/pi-behavior-monitors": "^0.33.0",
+		"@davidorex/pi-context": "^0.33.0",
+		"@davidorex/pi-jit-agents": "^0.33.0",
+		"@davidorex/pi-workflows": "^0.33.0",
 		"@earendil-works/pi-ai": "^0.75.4",
 		"@earendil-works/pi-coding-agent": "^0.75.4",
 		"yaml": "^2.7.1"

package/skills/pi-agent-dispatch/SKILL.md

@@ -29,7 +29,7 @@ Dispatch a privileged JIT-agent as a typed tool call. Loads the named .agent.yam
 
 | Parameter | Type | Required | Description |
 |-----------|------|----------|-------------|
-| `spec_name` | string | yes | Name of the agent spec to load (resolves to <name>.agent.yaml in the agents tier). |
+| `spec_name` | string | yes | Name of the agent spec to load (resolves to <name>.agent.yaml searched across the substrate agents/ dir, then ~/.pi/agent/agents/, then the bundled pi-workflows agents). |
 | `input` | unknown | yes | Typed input passed to the agent's compileAgent context. |
 | `parent_grant` | array | no | The caller's own tool grant. Default-empty. |
 | `requested_grant` | array | no | The grant requested for the dispatched sub-agent. Will be clamped to the intersection with parent_grant. |