@fro.bot/systematic 3.15.1 → 3.16.0

package/dist/{index-7cyxcwf5.js → index-ae6mhwth.js}

@@ -1,4 +1,311 @@
 // @bun
+// src/lib/validation.ts
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isPermissionSetting(value) {
+  return value === "ask" || value === "allow" || value === "deny";
+}
+function isToolsMap(value) {
+  if (!isRecord(value))
+    return false;
+  return Object.values(value).every((entry) => typeof entry === "boolean");
+}
+function isAgentMode(value) {
+  return value === "subagent" || value === "primary" || value === "all";
+}
+function extractSimplePermission(data, key) {
+  if (!(key in data))
+    return;
+  const value = data[key];
+  return isPermissionSetting(value) ? value : null;
+}
+function extractBashPermission(data) {
+  if (!("bash" in data))
+    return;
+  const bash = data.bash;
+  if (isPermissionSetting(bash))
+    return bash;
+  if (isRecord(bash)) {
+    const entries = Object.entries(bash);
+    if (entries.every(([, setting]) => isPermissionSetting(setting))) {
+      return Object.fromEntries(entries);
+    }
+  }
+  return null;
+}
+function buildPermissionObject(edit, bash, webfetch, doom_loop, external_directory, task, skill) {
+  const permission = {};
+  if (edit)
+    permission.edit = edit;
+  if (bash)
+    permission.bash = bash;
+  if (webfetch)
+    permission.webfetch = webfetch;
+  if (doom_loop)
+    permission.doom_loop = doom_loop;
+  if (external_directory)
+    permission.external_directory = external_directory;
+  if (task)
+    permission.task = task;
+  if (skill)
+    permission.skill = skill;
+  return Object.keys(permission).length > 0 ? permission : undefined;
+}
+function normalizePermission(value) {
+  if (!isRecord(value))
+    return;
+  const bash = extractBashPermission(value);
+  if (bash === null)
+    return;
+  const edit = extractSimplePermission(value, "edit");
+  if (edit === null)
+    return;
+  const webfetch = extractSimplePermission(value, "webfetch");
+  if (webfetch === null)
+    return;
+  const doom_loop = extractSimplePermission(value, "doom_loop");
+  if (doom_loop === null)
+    return;
+  const external_directory = extractSimplePermission(value, "external_directory");
+  if (external_directory === null)
+    return;
+  const task = extractSimplePermission(value, "task");
+  if (task === null)
+    return;
+  const skill = extractSimplePermission(value, "skill");
+  if (skill === null)
+    return;
+  return buildPermissionObject(edit, bash, webfetch, doom_loop, external_directory, task, skill);
+}
+function extractString(data, key, fallback = "") {
+  const value = data[key];
+  return typeof value === "string" ? value : fallback;
+}
+function extractNonEmptyString(data, key) {
+  const value = data[key];
+  if (typeof value !== "string")
+    return;
+  const trimmed = value.trim();
+  return trimmed !== "" ? trimmed : undefined;
+}
+function extractNumber(data, key) {
+  const value = data[key];
+  return typeof value === "number" ? value : undefined;
+}
+function extractBoolean(data, key) {
+  const value = data[key];
+  if (typeof value === "boolean")
+    return value;
+  if (typeof value === "string") {
+    const normalized = value.trim().toLowerCase();
+    if (normalized === "true")
+      return true;
+    if (normalized === "false")
+      return false;
+  }
+  return;
+}
+
+// src/lib/routing-resolver.ts
+function getOverlayValue(map, key) {
+  return map[key]?.value;
+}
+function toSourcedOverlayMap(map) {
+  const result = {};
+  if (!map)
+    return result;
+  for (const [key, value] of Object.entries(map)) {
+    result[key] = { value, sourcePath: "", keyPath: key };
+  }
+  return result;
+}
+function toSourcedPiSubagentsOverlays(map) {
+  return {
+    agents: toSourcedOverlayMap(map?.agents),
+    categories: toSourcedOverlayMap(map?.categories)
+  };
+}
+function lookupAgentOverlay(overlays, target) {
+  return getOverlayValue(overlays.agents, target.agentKey) ?? getOverlayValue(overlays.agents, `${target.category}/${target.agentKey}`);
+}
+function readBlockField(overlay, blockKey, field) {
+  if (overlay === undefined)
+    return;
+  const block = overlay[blockKey];
+  if (!isRecord(block))
+    return;
+  return block[field];
+}
+function readFlatField(overlay, field) {
+  if (overlay === undefined)
+    return;
+  return overlay[field];
+}
+function narrowModelValue(value) {
+  if (typeof value === "string")
+    return value;
+  if (value === null)
+    return null;
+  return;
+}
+function narrowQualifierValue(value) {
+  return typeof value === "string" ? value : undefined;
+}
+function resolveField(candidates) {
+  for (const candidate of candidates) {
+    if (candidate.value !== undefined) {
+      return { value: candidate.value, source: candidate.source };
+    }
+  }
+  return { value: undefined, source: undefined };
+}
+function resolveModel(agentOverlay, categoryOverlay, harness) {
+  const { value, source } = resolveField([
+    {
+      value: readBlockField(agentOverlay, harness, "model"),
+      source: { level: "agent", form: "block" }
+    },
+    {
+      value: readFlatField(agentOverlay, "model"),
+      source: { level: "agent", form: "flat" }
+    },
+    {
+      value: readBlockField(categoryOverlay, harness, "model"),
+      source: { level: "category", form: "block" }
+    },
+    {
+      value: readFlatField(categoryOverlay, "model"),
+      source: { level: "category", form: "flat" }
+    }
+  ]);
+  const narrowedValue = narrowModelValue(value);
+  return {
+    value: narrowedValue,
+    source: narrowedValue === undefined ? undefined : source
+  };
+}
+var OPENCODE_MODEL_VARIANT_LAYERS = [
+  { level: "agent", form: "block" },
+  { level: "agent", form: "flat" },
+  { level: "category", form: "block" },
+  { level: "category", form: "flat" }
+];
+function readOpencodeLayerField(agentOverlay, categoryOverlay, layer, field) {
+  const overlay = layer.level === "agent" ? agentOverlay : categoryOverlay;
+  return layer.form === "block" ? readBlockField(overlay, "opencode", field) : readFlatField(overlay, field);
+}
+function resolveOpencodeModelAndVariant(agentOverlay, categoryOverlay) {
+  const modelLayerIndex = OPENCODE_MODEL_VARIANT_LAYERS.findIndex((layer) => readOpencodeLayerField(agentOverlay, categoryOverlay, layer, "model") !== undefined);
+  const rawModel = modelLayerIndex === -1 ? undefined : readOpencodeLayerField(agentOverlay, categoryOverlay, OPENCODE_MODEL_VARIANT_LAYERS[modelLayerIndex], "model");
+  const model = narrowModelValue(rawModel);
+  const hasModel = model !== undefined;
+  const modelSource = hasModel ? OPENCODE_MODEL_VARIANT_LAYERS[modelLayerIndex] : undefined;
+  let qualifier;
+  let qualifierSource;
+  if (model !== null) {
+    const eligibleLayerCount = hasModel ? modelLayerIndex + 1 : OPENCODE_MODEL_VARIANT_LAYERS.length;
+    for (let i = 0;i < eligibleLayerCount; i++) {
+      const layer = OPENCODE_MODEL_VARIANT_LAYERS[i];
+      const narrowed = narrowQualifierValue(readOpencodeLayerField(agentOverlay, categoryOverlay, layer, "variant"));
+      if (narrowed !== undefined) {
+        qualifier = narrowed;
+        qualifierSource = layer;
+        break;
+      }
+    }
+  }
+  return { model, modelSource, qualifier, qualifierSource };
+}
+function resolvePiThinking(agentOverlay, categoryOverlay, piSubagentsOverlays, target) {
+  const blockResolution = resolveField([
+    {
+      value: readBlockField(agentOverlay, "pi", "thinking"),
+      source: { level: "agent", form: "block" }
+    },
+    {
+      value: readBlockField(categoryOverlay, "pi", "thinking"),
+      source: { level: "category", form: "block" }
+    }
+  ]);
+  const legacyAgentThinking = getOverlayValue(piSubagentsOverlays.agents, target.agentKey)?.thinking;
+  const legacyCategoryThinking = getOverlayValue(piSubagentsOverlays.categories, target.category)?.thinking;
+  const legacyValue = legacyAgentThinking !== undefined ? legacyAgentThinking : legacyCategoryThinking;
+  const legacyPresent = legacyValue !== undefined;
+  const narrowedBlockValue = narrowQualifierValue(blockResolution.value);
+  if (narrowedBlockValue !== undefined) {
+    return {
+      value: narrowedBlockValue,
+      source: blockResolution.source,
+      legacyPresent
+    };
+  }
+  const narrowedLegacyValue = narrowQualifierValue(legacyValue);
+  if (narrowedLegacyValue !== undefined) {
+    return {
+      value: narrowedLegacyValue,
+      source: {
+        level: legacyAgentThinking !== undefined ? "agent" : "category",
+        form: "legacy-pi-subagents"
+      },
+      legacyPresent
+    };
+  }
+  return { value: undefined, source: undefined, legacyPresent };
+}
+function resolveRouting(input) {
+  const { overlays, piSubagentsOverlays, target, harness } = input;
+  const agentOverlay = lookupAgentOverlay(overlays, target);
+  const categoryOverlay = getOverlayValue(overlays.categories, target.category);
+  if (harness === "opencode") {
+    const resolution = resolveOpencodeModelAndVariant(agentOverlay, categoryOverlay);
+    return {
+      model: resolution.model,
+      qualifier: resolution.qualifier,
+      source: {
+        model: resolution.modelSource,
+        qualifier: resolution.qualifierSource
+      },
+      legacyPiSubagentsThinkingPresent: false,
+      harness
+    };
+  }
+  const modelResolution = resolveModel(agentOverlay, categoryOverlay, harness);
+  const qualifierResolution = resolvePiThinking(agentOverlay, categoryOverlay, piSubagentsOverlays, target);
+  return {
+    model: modelResolution.value,
+    qualifier: qualifierResolution.value,
+    source: {
+      model: modelResolution.source,
+      qualifier: qualifierResolution.source
+    },
+    legacyPiSubagentsThinkingPresent: qualifierResolution.legacyPresent,
+    harness
+  };
+}
+function qualifierResolvesWithoutModel(resolution) {
+  if (resolution.harness !== "opencode")
+    return false;
+  return resolution.qualifier !== undefined && resolution.model === undefined;
+}
+function formatWrittenLegacyPiSubagentsThinkingWarning(scope, key) {
+  const writtenPath = `pi_subagents.${scope}.${key}.thinking`;
+  const replacementPath = `${scope}.${key}.pi.thinking`;
+  return `[systematic] ${writtenPath} is deprecated; set ${replacementPath} instead. The legacy value is ` + "honoured only when the new location is unset, and support for it will be removed in a future release.";
+}
+function collectWrittenLegacyPiSubagentsThinkingWarnings(piSubagentsOverlays) {
+  const warnings = [];
+  for (const scope of ["agents", "categories"]) {
+    for (const [key, overlay] of Object.entries(piSubagentsOverlays[scope])) {
+      if (!isRecord(overlay.value) || !Object.hasOwn(overlay.value, "thinking")) {
+        continue;
+      }
+      warnings.push(formatWrittenLegacyPiSubagentsThinkingWarning(scope, key));
+    }
+  }
+  return warnings;
+}
+
 // src/lib/config.ts
 import fs from "fs";
 import os from "os";
@@ -7301,17 +7608,30 @@ function trustAny(schema) {
 function trustProtected(schema) {
   return schema.meta({ trust: "project-or-higher" });
 }
-function enforceVariantHasExplicitModel(overlay, ctx) {
-  if (overlay.variant === undefined)
-    return;
-  if (typeof overlay.model === "string")
-    return;
-  ctx.addIssue({
-    code: "custom",
-    path: ["variant"],
-    message: "variant requires a non-null model in the same overlay; remove variant or set model explicitly"
-  });
-}
+var piSubagentsThinkingSchema = _enum(["off", "minimal", "low", "medium", "high", "xhigh", "max"]).meta({
+  description: "pi-subagents reasoning effort level for exported persona frontmatter",
+  examples: ["off", "medium", "high"]
+});
+var OpencodeHarnessBlockSchema = object({
+  model: trustProtected(modelSchema).optional(),
+  variant: trustProtected(variantSchema).optional()
+}).strict().meta({
+  description: "OpenCode-specific routing block. When present, model/variant here override the flat model/variant fields for OpenCode only; the flat fields remain the harness-neutral default and still apply to Pi. `variant` is bound to whichever layer supplies `model`: it is used only from that layer or a more specific one, and is dropped when a more specific layer sets (or nulls) `model` without repeating the variant. A `variant` with no `model` anywhere in the merged overlay is a config-load error raised by the routing resolver, not a parse-time error.",
+  examples: [
+    { model: "anthropic/claude-opus-4-7", variant: "v2" },
+    { model: null }
+  ]
+});
+var PiHarnessBlockSchema = object({
+  model: trustProtected(modelSchema).optional(),
+  thinking: trustProtected(piSubagentsThinkingSchema).optional()
+}).strict().meta({
+  description: "Pi-specific routing block. When present, model/thinking here override the flat model field and the legacy `pi_subagents.<name>.thinking` value for Pi only; the flat model field remains the harness-neutral default and still applies to OpenCode. Unlike OpenCode's `variant`, `thinking` is independent of `model`: it applies to whatever model the delegate ends up running, including one inherited from the parent session, so `thinking` with no `model` anywhere in the merged overlay is valid and never a config-load error.",
+  examples: [
+    { model: "anthropic/claude-opus-4-7", thinking: "high" },
+    { model: null }
+  ]
+});
 var AgentOverlaySchema = object({
   model: trustProtected(modelSchema).optional(),
   variant: trustProtected(variantSchema).optional(),
@@ -7323,14 +7643,20 @@ var AgentOverlaySchema = object({
   hidden: hiddenSchema.optional(),
   disable: disableSchema.optional(),
   skills: trustProtected(skillsSchema).optional(),
-  permission: trustProtected(permissionSchema).optional()
-}).strict().superRefine(enforceVariantHasExplicitModel).meta({
+  permission: trustProtected(permissionSchema).optional(),
+  opencode: trustProtected(OpencodeHarnessBlockSchema).optional(),
+  pi: trustProtected(PiHarnessBlockSchema).optional()
+}).strict().meta({
   description: "Per-agent configuration overlay",
   examples: [
     {
       model: "anthropic/claude-opus-4-7",
       temperature: 0.1,
       mode: "subagent"
+    },
+    {
+      opencode: { model: "anthropic/claude-opus-4-7", variant: "v2" },
+      pi: { model: "anthropic/claude-opus-4-7", thinking: "high" }
     }
   ]
 });
@@ -7344,14 +7670,56 @@ var CategoryOverlaySchema = object({
   steps: stepsSchema.optional(),
   hidden: hiddenSchema.optional(),
   skills: trustProtected(skillsSchema).optional(),
-  permission: trustProtected(permissionSchema).optional()
-}).strict().superRefine(enforceVariantHasExplicitModel).meta({
+  permission: trustProtected(permissionSchema).optional(),
+  opencode: trustProtected(OpencodeHarnessBlockSchema).optional(),
+  pi: trustProtected(PiHarnessBlockSchema).optional()
+}).strict().meta({
   description: "Per-category configuration overlay (same fields as agent minus disable)",
-  examples: [{ model: "anthropic/claude-opus-4-7", temperature: 0.1 }]
+  examples: [
+    { model: "anthropic/claude-opus-4-7", temperature: 0.1 },
+    { opencode: { variant: "v2" }, pi: { thinking: "high" } }
+  ]
 });
-var piSubagentsThinkingSchema = _enum(["off", "minimal", "low", "medium", "high", "xhigh", "max"]).meta({
-  description: "pi-subagents reasoning effort level for exported persona frontmatter",
-  examples: ["off", "medium", "high"]
+var ProfileOverlaySchema = object({
+  model: trustProtected(modelSchema).optional(),
+  variant: trustProtected(variantSchema).optional(),
+  temperature: trustAny(temperatureSchema).optional(),
+  top_p: trustAny(topPSchema).optional(),
+  opencode: trustProtected(OpencodeHarnessBlockSchema).optional(),
+  pi: trustProtected(PiHarnessBlockSchema).optional()
+}).strict().meta({
+  description: "Routing-only overlay fields permitted inside a named profile bundle entry: model, variant, temperature, top_p, and the opencode/pi harness blocks. Non-routing fields (permission, skills, mode, hidden, disable, steps, color) are rejected.",
+  examples: [
+    { model: "anthropic/claude-opus-4-7" },
+    { opencode: { variant: "v2" }, pi: { thinking: "high" } }
+  ]
+});
+function createProfileBundleSchema(agentNames, qualifiedAgentIds) {
+  return object({
+    agents: object(Object.fromEntries([...agentNames, ...qualifiedAgentIds].map((name) => [
+      name,
+      ProfileOverlaySchema.optional()
+    ]))).strict().optional().meta({
+      description: "Per-agent routing overlays for this profile, keyed by bundled agent name (bare or qualified category/name), using the same routing-only field set as every profile entry. Unknown keys are rejected with a Zod parse error, exactly like the top-level `agents` field.",
+      examples: [{ "correctness-reviewer": { model: "openai/gpt-5" } }]
+    }),
+    categories: record(string(), ProfileOverlaySchema).optional().meta({
+      description: "Per-category routing overlays for this profile, keyed by category name, using the same routing-only field set as every profile entry.",
+      examples: [{ review: { model: "anthropic/claude-opus-4-7" } }]
+    })
+  }).strict().meta({
+    description: "A named routing-only overlay bundle. Entries under agents/categories have the same shape as the top-level agents/categories overlays, restricted to routing fields.",
+    examples: [
+      {
+        agents: { fixer: { model: "anthropic/claude-opus-4-7" } },
+        categories: { review: { pi: { thinking: "high" } } }
+      }
+    ]
+  });
+}
+var profileSchema = string().min(1).nullable().optional().meta({
+  description: "Selects a named entry from this source's profiles map as the routing overlay bundle to apply. null explicitly selects the base config (no profile), which still wins over a lower-priority source's selection. Omitting the field entirely defers the decision to a lower-priority source.",
+  examples: ["personal", null]
 });
 var piSubagentsMaxTurnsSchema = number().int().nonnegative().meta({
   description: "pi-subagents maximum turns for a delegated persona (0 = unlimited)",
@@ -7444,6 +7812,18 @@ function createSystematicConfigSchema(opts) {
       description: "Per-category configuration overlays keyed by category name",
       examples: [{ review: { model: "anthropic/claude-opus-4-7" } }, {}]
     }),
+    profiles: record(string(), createProfileBundleSchema(agentNames, qualifiedAgentIds)).default({}).meta({
+      description: "Named routing-only overlay bundles, selectable by name via the profile field. Only valid in user config or OPENCODE_CONFIG_DIR config \u2014 a project config may select a profile but may not define this field.",
+      examples: [
+        {
+          personal: {
+            agents: { "correctness-reviewer": { model: "openai/gpt-5" } }
+          }
+        },
+        {}
+      ]
+    }),
+    profile: profileSchema,
     disabled_skills: array(_enum([...skillNames, ...removedSkillNames])).default([]).meta({
       description: "Array of bundled skill names to disable globally. Unknown skill names are rejected at parse time.",
       examples: [["ce:plan", "ce:review"]]
@@ -7494,7 +7874,9 @@ var SECURITY_OVERLAY_FIELDS = [
   "model",
   "variant",
   "skills",
-  "permission"
+  "permission",
+  "opencode",
+  "pi"
 ];
 
 // src/lib/config.ts
@@ -7526,22 +7908,42 @@ var PROTECTED_OVERLAY_FIELD_PATHS = {
     model: "agents.*.model",
     permission: "agents.*.permission",
     skills: "agents.*.skills",
-    variant: "agents.*.variant"
+    variant: "agents.*.variant",
+    opencode: "agents.*.opencode",
+    pi: "agents.*.pi"
   },
   categories: {
     model: "categories.*.model",
     permission: "categories.*.permission",
     skills: "categories.*.skills",
-    variant: "categories.*.variant"
+    variant: "categories.*.variant",
+    opencode: "categories.*.opencode",
+    pi: "categories.*.pi"
   }
 };
-var PROJECT_PROTECTED_FIELDS = new Set(["workflow_guard"]);
+var PROJECT_PROTECTED_FIELDS = new Set(["workflow_guard", "profiles"]);
 var CURRENT_SKILL_NAMES_SET = new Set(BUNDLED_SKILL_NAMES);
 var CURRENT_AGENT_NAMES_SET = new Set([
   ...BUNDLED_AGENT_NAMES,
   ...BUNDLED_AGENT_QUALIFIED_IDS
 ]);
 var REMOVED_AGENT_CATEGORIES_SET = new Set(REMOVED_BUNDLED_AGENT_CATEGORIES);
+var BUNDLED_AGENT_CATEGORY_BY_KEY = new Map(BUNDLED_AGENT_QUALIFIED_IDS.map((qualifiedId) => {
+  const separatorIndex = qualifiedId.indexOf("/");
+  return [
+    qualifiedId.slice(separatorIndex + 1),
+    qualifiedId.slice(0, separatorIndex)
+  ];
+}));
+var BUNDLED_AGENT_KEYS_BY_CATEGORY = (() => {
+  const byCategory = new Map;
+  for (const [agentKey, category] of BUNDLED_AGENT_CATEGORY_BY_KEY) {
+    const existing = byCategory.get(category) ?? [];
+    existing.push(agentKey);
+    byCategory.set(category, existing);
+  }
+  return byCategory;
+})();
 function computeDroppedNames(names, allowedSet) {
   return names.filter((n) => !allowedSet.has(n));
 }
@@ -7602,24 +8004,37 @@ function formatUnrecognizedKeysHint(badKeys, topField) {
   const joined = badKeys.map((k) => `'${k}'`).join(", ");
   return `Unrecognized keys ${joined} in \`${topField}\`. These must be bundled names. See ${TYPED_VALIDATION_DOCS_URL} for the full list of valid names.`;
 }
+function formatProfileAgentUnrecognizedKeysHint(badKeys, profileName) {
+  const prefixed = badKeys.map((k) => `profiles.${profileName}.agents.${k}`);
+  const isAre = prefixed.length === 1 ? "is not a bundled agent" : "are not bundled agents";
+  return `${prefixed.join(", ")} ${isAre}. See ${TYPED_VALIDATION_DOCS_URL} for the full list of valid names.`;
+}
+function enrichProfileAgentUnrecognizedKeysIssue(issue) {
+  if (issue.code !== "unrecognized_keys" || issue.path[0] !== "profiles" || issue.path[2] !== "agents" || typeof issue.path[1] !== "string") {
+    return null;
+  }
+  const hint = formatProfileAgentUnrecognizedKeysHint(issue.keys, issue.path[1]);
+  return { ...issue, message: hint };
+}
+function enrichTopLevelTypedKeyIssue(issue, rawInput) {
+  const topField = issue.path[0];
+  if (typeof topField !== "string" || !TYPED_KEY_FIELDS.has(topField)) {
+    return null;
+  }
+  if (issue.code === "unrecognized_keys") {
+    const hint = formatUnrecognizedKeysHint(issue.keys, topField);
+    return { ...issue, message: hint };
+  }
+  if (issue.code === "invalid_value" && (topField === "disabled_agents" || topField === "disabled_skills")) {
+    const badValue = resolveValueAtPath(rawInput, issue.path);
+    const kind = topField === "disabled_agents" ? "agent" : "skill";
+    const hint = typeof badValue === "string" ? `Unrecognized ${kind} name '${badValue}' in \`${topField}\`. This must be a bundled name. See ${TYPED_VALIDATION_DOCS_URL} for the full list of valid names.` : `Invalid value in \`${topField}\`. See ${TYPED_VALIDATION_DOCS_URL} for the full list of valid names.`;
+    return { ...issue, message: hint };
+  }
+  return null;
+}
 function enrichUnrecognizedKeyIssues(issues, rawInput) {
-  return issues.map((issue) => {
-    const topField = issue.path[0];
-    if (typeof topField !== "string" || !TYPED_KEY_FIELDS.has(topField)) {
-      return issue;
-    }
-    if (issue.code === "unrecognized_keys") {
-      const hint = formatUnrecognizedKeysHint(issue.keys, topField);
-      return { ...issue, message: hint };
-    }
-    if (issue.code === "invalid_value" && (topField === "disabled_agents" || topField === "disabled_skills")) {
-      const badValue = resolveValueAtPath(rawInput, issue.path);
-      const kind = topField === "disabled_agents" ? "agent" : "skill";
-      const hint = typeof badValue === "string" ? `Unrecognized ${kind} name '${badValue}' in \`${topField}\`. This must be a bundled name. See ${TYPED_VALIDATION_DOCS_URL} for the full list of valid names.` : `Invalid value in \`${topField}\`. See ${TYPED_VALIDATION_DOCS_URL} for the full list of valid names.`;
-      return { ...issue, message: hint };
-    }
-    return issue;
-  });
+  return issues.map((issue) => enrichProfileAgentUnrecognizedKeysIssue(issue) ?? enrichTopLevelTypedKeyIssue(issue, rawInput) ?? issue);
 }
 function resolveValueAtPath(root, path2) {
   let current = root;
@@ -7677,6 +8092,7 @@ function loadConfigSource(filePath, trust, invalidSource) {
     return {
       metadata: { kind: trust, presence: "present" },
       source: {
+        kind: "file",
         canonicalPath: resolveConfigSourcePath(filePath),
         config,
         path: filePath,
@@ -7729,6 +8145,13 @@ function collectProjectProtectedFields(rawConfig, trust) {
         sourceKind: "project"
       }
     ] : [],
+    ...Object.hasOwn(rawConfig, "profiles") ? [
+      {
+        fieldPath: "profiles",
+        outcome: "blocked",
+        sourceKind: "project"
+      }
+    ] : [],
     ...collectOverlayProtectedFields(rawConfig.agents, "agents"),
     ...collectOverlayProtectedFields(rawConfig.categories, "categories")
   ];
@@ -7765,6 +8188,92 @@ function mergeArraysUnique(arr1, arr2) {
       set.add(item);
   return Array.from(set);
 }
+var PROFILE_DOCS_URL = "https://fro.bot/systematic/reference/configuration#profiles";
+var NO_PROFILE_SELECTION = {
+  activeProfile: null,
+  profileSelectorSource: null,
+  profileFallback: null,
+  bundle: null,
+  bundleSource: null
+};
+function resolveProfileSelector(input) {
+  const candidates = [
+    ["custom", input.customConfig?.profile],
+    ["project", input.projectConfig?.profile],
+    ["user", input.userConfig?.profile]
+  ];
+  for (const [source, value] of candidates) {
+    if (value !== undefined)
+      return { value, source };
+  }
+  return null;
+}
+function lookupProfileBundle(input, name) {
+  if (input.customSource) {
+    const bundle = input.customSource.config.profiles?.[name];
+    if (bundle !== undefined) {
+      return { bundle, definingSource: input.customSource };
+    }
+  }
+  if (input.userSource) {
+    const bundle = input.userSource.config.profiles?.[name];
+    if (bundle !== undefined) {
+      return { bundle, definingSource: input.userSource };
+    }
+  }
+  return;
+}
+function trustedDefaultProfileName(input) {
+  const userDefault = input.userConfig?.profile;
+  return typeof userDefault === "string" ? userDefault : undefined;
+}
+function resolveActiveProfile(input) {
+  const selection = resolveProfileSelector(input);
+  if (selection === null)
+    return NO_PROFILE_SELECTION;
+  if (selection.value === null) {
+    return {
+      activeProfile: null,
+      profileSelectorSource: selection.source,
+      profileFallback: null,
+      bundle: null,
+      bundleSource: null
+    };
+  }
+  const requested = selection.value;
+  const requestedLookup = lookupProfileBundle(input, requested);
+  if (requestedLookup !== undefined) {
+    return {
+      activeProfile: requested,
+      profileSelectorSource: selection.source,
+      profileFallback: null,
+      bundle: requestedLookup.bundle,
+      bundleSource: requestedLookup.definingSource
+    };
+  }
+  const trustedDefault = trustedDefaultProfileName(input);
+  const fallbackLookup = trustedDefault !== undefined && trustedDefault !== requested ? lookupProfileBundle(input, trustedDefault) : undefined;
+  if (fallbackLookup !== undefined && trustedDefault !== undefined) {
+    input.warningSink(`[systematic] profile "${requested}" (selected by ${selection.source} config) is not defined in \`profiles\`; falling back to your default profile "${trustedDefault}". See ${PROFILE_DOCS_URL} for how to define a profile.`);
+    return {
+      activeProfile: trustedDefault,
+      profileSelectorSource: selection.source,
+      profileFallback: { requested, usedDefault: trustedDefault },
+      bundle: fallbackLookup.bundle,
+      bundleSource: fallbackLookup.definingSource
+    };
+  }
+  const sourceNote = selection.source === "user" ? "" : ` (selected by ${selection.source} config)`;
+  const alsoMissingNote = trustedDefault !== undefined && trustedDefault !== requested ? ` Your default profile "${trustedDefault}" is also not defined in \`profiles\`.` : trustedDefault === undefined ? " No default profile is configured (`profile` in your user config)." : "";
+  input.warningSink(`[systematic] profile "${requested}"${sourceNote} is not defined in \`profiles\`; using base configuration (no profile).${alsoMissingNote} See ${PROFILE_DOCS_URL} for how to define a profile.`);
+  return {
+    activeProfile: null,
+    profileSelectorSource: selection.source,
+    profileFallback: { requested, usedDefault: null },
+    bundle: null,
+    bundleSource: null
+  };
+}
 function loadConfig(projectDir, options) {
   return loadConfigWithSources(projectDir, options).config;
 }
@@ -7786,22 +8295,53 @@ function loadConfigWithSources(projectDir, options) {
   const projectSource = project.source;
   const customSource = custom.source;
   const sources = [userSource, projectSource, customSource].filter((source) => source !== null);
-  const mergedOverlays = mergeOverlaySources(sources);
+  const userConfig = userSource?.config;
+  const projectConfig = projectSource?.config;
+  const customConfig = customSource?.config;
+  const warned = new Set;
+  if (projectSource?.protectedFields.some((field) => field.fieldPath === "profiles")) {
+    warningSink(`[systematic] \`profiles\` in project config (${projectSource.path}) is only valid in user config or OPENCODE_CONFIG_DIR config and has been ignored. Its bundles are not selectable even if this project also sets \`profile\`.`);
+  }
+  assertAllProfileBundlesAreValid(userConfig, customConfig);
+  const profileSelection = resolveActiveProfile({
+    userConfig,
+    userSource,
+    projectConfig,
+    customConfig,
+    customSource,
+    warningSink
+  });
+  const profileEntry = profileSelection.bundle && profileSelection.bundleSource && typeof profileSelection.activeProfile === "string" ? {
+    kind: "profile-bundle",
+    canonicalPath: profileSelection.bundleSource.canonicalPath,
+    path: profileSelection.bundleSource.path,
+    config: {
+      agents: profileSelection.bundle.agents,
+      categories: profileSelection.bundle.categories
+    },
+    protectedFields: [],
+    profileName: profileSelection.activeProfile
+  } : null;
+  const overlaySources = [
+    userSource,
+    profileEntry,
+    projectSource,
+    customSource
+  ].filter((source) => source !== null);
+  const mergedOverlays = mergeOverlaySources(overlaySources);
   const mergedPiSubagentsOverlays = mergePiSubagentsOverlaySources(sources);
   const droppedCategories = Object.keys(mergedOverlays.categories).filter((name) => REMOVED_AGENT_CATEGORIES_SET.has(name));
-  const warned = new Set;
   warnDroppedNames(droppedCategories, "categories", warned, "v3.0.0", warningSink);
   const droppedCategorySet = new Set(droppedCategories);
   const overlays = droppedCategorySet.size === 0 ? mergedOverlays : {
     ...mergedOverlays,
     categories: Object.fromEntries(Object.entries(mergedOverlays.categories).filter(([key]) => !droppedCategorySet.has(key)))
   };
-  const userConfig = userSource?.config;
-  const projectConfig = projectSource?.config;
-  const customConfig = customSource?.config;
+  const mergedDisabledAgents = mergeArraysUnique(mergeArraysUnique(mergeArraysUnique(DEFAULT_CONFIG.disabled_agents, userConfig?.disabled_agents), projectConfig?.disabled_agents), customConfig?.disabled_agents);
+  assertRoutingInvariants(overlays, mergedPiSubagentsOverlays, new Set(mergedDisabledAgents), warningSink);
   const result = {
     disabled_skills: mergeArraysUnique(mergeArraysUnique(mergeArraysUnique(DEFAULT_CONFIG.disabled_skills, userConfig?.disabled_skills), projectConfig?.disabled_skills), customConfig?.disabled_skills),
-    disabled_agents: mergeArraysUnique(mergeArraysUnique(mergeArraysUnique(DEFAULT_CONFIG.disabled_agents, userConfig?.disabled_agents), projectConfig?.disabled_agents), customConfig?.disabled_agents),
+    disabled_agents: mergedDisabledAgents,
     disabled_commands: mergeArraysUnique(mergeArraysUnique(mergeArraysUnique(DEFAULT_CONFIG.disabled_commands, userConfig?.disabled_commands), projectConfig?.disabled_commands), customConfig?.disabled_commands),
     bootstrap: {
       ...DEFAULT_CONFIG.bootstrap,
@@ -7837,11 +8377,13 @@ function loadConfigWithSources(projectDir, options) {
     config: effectiveConfig,
     metadata: buildConfigObservationMetadata({
       custom: custom.metadata,
+      profileSelection,
       project: project.metadata,
       sources,
       user: user.metadata
     }),
-    overlays
+    overlays,
+    piSubagentsOverlays: mergedPiSubagentsOverlays
   };
 }
 function buildConfigObservationMetadata(summary) {
@@ -7878,7 +8420,10 @@ function buildConfigObservationMetadata(summary) {
   return {
     authorities: sortAuthorities(authorities),
     protectedFields: sortProtectedFields(protectedFields),
-    sources
+    sources,
+    activeProfile: summary.profileSelection.activeProfile,
+    profileSelectorSource: summary.profileSelection.profileSelectorSource,
+    profileFallback: summary.profileSelection.profileFallback
   };
 }
 function dedupeSourceMetadata(metadata, sourcePaths) {
@@ -7904,6 +8449,75 @@ function sortAuthorities(authorities) {
 function sortProtectedFields(fields) {
   return [...fields].sort((left, right) => left.fieldPath === right.fieldPath ? left.sourceKind.localeCompare(right.sourceKind) : left.fieldPath.localeCompare(right.fieldPath));
 }
+function collectRoutingTargets(overlays, disabledAgents = new Set) {
+  const targets = new Map;
+  const isDisabled = (agentKey, category) => {
+    const qualifiedId = `${category}/${agentKey}`;
+    if (disabledAgents.has(agentKey) || disabledAgents.has(qualifiedId)) {
+      return true;
+    }
+    const overlay = overlays.agents[agentKey]?.value ?? overlays.agents[qualifiedId]?.value;
+    return overlay?.disable === true;
+  };
+  const addTarget = (agentKey, category) => {
+    if (isDisabled(agentKey, category))
+      return;
+    targets.set(`${category}/${agentKey}`, { agentKey, category });
+  };
+  for (const rawKey of Object.keys(overlays.agents)) {
+    const separatorIndex = rawKey.indexOf("/");
+    if (separatorIndex === -1) {
+      const category = BUNDLED_AGENT_CATEGORY_BY_KEY.get(rawKey);
+      if (category !== undefined)
+        addTarget(rawKey, category);
+      continue;
+    }
+    const category = rawKey.slice(0, separatorIndex);
+    const agentKey = rawKey.slice(separatorIndex + 1);
+    if (BUNDLED_AGENT_CATEGORY_BY_KEY.get(agentKey) === category) {
+      addTarget(agentKey, category);
+    }
+  }
+  for (const categoryKey of Object.keys(overlays.categories)) {
+    const agentKeys = BUNDLED_AGENT_KEYS_BY_CATEGORY.get(categoryKey);
+    if (agentKeys === undefined)
+      continue;
+    for (const agentKey of agentKeys)
+      addTarget(agentKey, categoryKey);
+  }
+  return Array.from(targets.values());
+}
+function assertProfileBundleCategoryKeysAreBundledCategories(profileName, bundle) {
+  for (const categoryKey of Object.keys(bundle.categories ?? {})) {
+    if (!BUNDLED_AGENT_KEYS_BY_CATEGORY.has(categoryKey)) {
+      throw new Error(`Invalid Systematic config: profiles.${profileName}.categories.${categoryKey} is not a bundled agent category. Valid categories: ${Array.from(BUNDLED_AGENT_KEYS_BY_CATEGORY.keys()).join(", ")}`);
+    }
+  }
+}
+function assertAllProfileBundlesAreValid(userConfig, customConfig) {
+  for (const config of [userConfig, customConfig]) {
+    for (const [profileName, bundle] of Object.entries(config?.profiles ?? {})) {
+      assertProfileBundleCategoryKeysAreBundledCategories(profileName, bundle);
+    }
+  }
+}
+function assertRoutingInvariants(overlays, piSubagentsOverlays, disabledAgents, warningSink) {
+  const targets = collectRoutingTargets(overlays, disabledAgents);
+  for (const target of targets) {
+    const resolution = resolveRouting({
+      overlays,
+      piSubagentsOverlays,
+      target,
+      harness: "opencode"
+    });
+    if (qualifierResolvesWithoutModel(resolution)) {
+      throw new Error(`Invalid Systematic config: agents.${target.agentKey}.variant resolves to "${resolution.qualifier}" on the opencode harness, but no model resolves for agents.${target.agentKey} on opencode at any layer (agent, category, block, or flat). Set a model at the same layer or a lower one, or remove the qualifier.`);
+    }
+  }
+  for (const warning of collectWrittenLegacyPiSubagentsThinkingWarnings(piSubagentsOverlays)) {
+    warningSink(warning);
+  }
+}
 function mergeOverlaySources(sources) {
   const result = {
     agents: {},
@@ -7923,15 +8537,15 @@ function mergeOverlayMap(target, source, mapKey) {
     throwInvalidOverlay(source.path, mapKey);
   }
   for (const [key, value] of Object.entries(overlayMap)) {
-    const keyPath = `${mapKey}.${key}`;
+    const keyPath = source.kind === "profile-bundle" ? `profiles.${source.profileName}.${mapKey}.${key}` : `${mapKey}.${key}`;
     if (!isRecord2(value)) {
       throwInvalidOverlay(source.path, keyPath);
     }
-    if (source.trust === "project") {
+    if (source.kind === "file" && source.trust === "project") {
       rejectProjectSecurityOverlay(source.path, keyPath, value);
     }
     const previous = target[key];
-    const nextValue = source.trust === "project" && previous ? preserveSecurityFields(previous.value, value) : value;
+    const nextValue = resolveOverlayEntryValue(previous?.value, value, source);
     target[key] = {
       value: nextValue,
       sourcePath: source.path,
@@ -7939,6 +8553,16 @@ function mergeOverlayMap(target, source, mapKey) {
     };
   }
 }
+function resolveOverlayEntryValue(previous, next, source) {
+  if (!previous)
+    return next;
+  if (source.kind === "profile-bundle") {
+    return mergeProfileOverlayValue(previous, next);
+  }
+  if (source.trust === "project")
+    return preserveSecurityFields(previous, next);
+  return next;
+}
 function rejectProjectSecurityOverlay(sourcePath, keyPath, value) {
   for (const field of SECURITY_OVERLAY_FIELDS) {
     if (Object.hasOwn(value, field)) {
@@ -7955,6 +8579,18 @@ function preserveSecurityFields(previous, next) {
   }
   return result;
 }
+var HARNESS_BLOCK_KEYS = ["opencode", "pi"];
+function mergeProfileOverlayValue(previous, next) {
+  const result = { ...previous, ...next };
+  for (const blockKey of HARNESS_BLOCK_KEYS) {
+    const previousBlock = previous[blockKey];
+    const nextBlock = next[blockKey];
+    if (isRecord2(previousBlock) && isRecord2(nextBlock)) {
+      result[blockKey] = { ...previousBlock, ...nextBlock };
+    }
+  }
+  return result;
+}
 var PI_SUBAGENTS_PROTECTED_FIELD_SET = new Set(PI_SUBAGENTS_PROTECTED_FIELDS);
 function mergePiSubagentsOverlaySources(sources) {
   const result = {
@@ -8057,114 +8693,6 @@ function parseFrontmatter(content) {
   }
 }
 
-// src/lib/validation.ts
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function isPermissionSetting(value) {
-  return value === "ask" || value === "allow" || value === "deny";
-}
-function isToolsMap(value) {
-  if (!isRecord(value))
-    return false;
-  return Object.values(value).every((entry) => typeof entry === "boolean");
-}
-function isAgentMode(value) {
-  return value === "subagent" || value === "primary" || value === "all";
-}
-function extractSimplePermission(data, key) {
-  if (!(key in data))
-    return;
-  const value = data[key];
-  return isPermissionSetting(value) ? value : null;
-}
-function extractBashPermission(data) {
-  if (!("bash" in data))
-    return;
-  const bash = data.bash;
-  if (isPermissionSetting(bash))
-    return bash;
-  if (isRecord(bash)) {
-    const entries = Object.entries(bash);
-    if (entries.every(([, setting]) => isPermissionSetting(setting))) {
-      return Object.fromEntries(entries);
-    }
-  }
-  return null;
-}
-function buildPermissionObject(edit, bash, webfetch, doom_loop, external_directory, task, skill) {
-  const permission = {};
-  if (edit)
-    permission.edit = edit;
-  if (bash)
-    permission.bash = bash;
-  if (webfetch)
-    permission.webfetch = webfetch;
-  if (doom_loop)
-    permission.doom_loop = doom_loop;
-  if (external_directory)
-    permission.external_directory = external_directory;
-  if (task)
-    permission.task = task;
-  if (skill)
-    permission.skill = skill;
-  return Object.keys(permission).length > 0 ? permission : undefined;
-}
-function normalizePermission(value) {
-  if (!isRecord(value))
-    return;
-  const bash = extractBashPermission(value);
-  if (bash === null)
-    return;
-  const edit = extractSimplePermission(value, "edit");
-  if (edit === null)
-    return;
-  const webfetch = extractSimplePermission(value, "webfetch");
-  if (webfetch === null)
-    return;
-  const doom_loop = extractSimplePermission(value, "doom_loop");
-  if (doom_loop === null)
-    return;
-  const external_directory = extractSimplePermission(value, "external_directory");
-  if (external_directory === null)
-    return;
-  const task = extractSimplePermission(value, "task");
-  if (task === null)
-    return;
-  const skill = extractSimplePermission(value, "skill");
-  if (skill === null)
-    return;
-  return buildPermissionObject(edit, bash, webfetch, doom_loop, external_directory, task, skill);
-}
-function extractString(data, key, fallback = "") {
-  const value = data[key];
-  return typeof value === "string" ? value : fallback;
-}
-function extractNonEmptyString(data, key) {
-  const value = data[key];
-  if (typeof value !== "string")
-    return;
-  const trimmed = value.trim();
-  return trimmed !== "" ? trimmed : undefined;
-}
-function extractNumber(data, key) {
-  const value = data[key];
-  return typeof value === "number" ? value : undefined;
-}
-function extractBoolean(data, key) {
-  const value = data[key];
-  if (typeof value === "boolean")
-    return value;
-  if (typeof value === "string") {
-    const normalized = value.trim().toLowerCase();
-    if (normalized === "true")
-      return true;
-    if (normalized === "false")
-      return false;
-  }
-  return;
-}
-
 // src/lib/walk-dir.ts
 import fs2 from "fs";
 import path2 from "path";
@@ -8483,4 +9011,4 @@ function discoverSkills(options) {
   return Array.from(byName.values());
 }
 
-export { parseFrontmatter, parse, parseTree, modify, applyEdits, _isoDateTime, _isoDate, _isoTime, _isoDuration, string, ZodISODateTime, ZodISODate, ZodISOTime, ZodISODuration, number, boolean, array, object, union, discriminatedUnion, record, _enum, literal, AgentOverlaySchema, CategoryOverlaySchema, loadConfig, loadConfigWithSources, getConfigPaths, isRecord, extractString, isDiscoverableMarkdown, findAgentsInDir, extractAgentFrontmatter, findCommandsInDir, extractCommandFrontmatter, findSkillsInDir, discoverSkills };
+export { parseFrontmatter, parse, parseTree, modify, applyEdits, _isoDateTime, _isoDate, _isoTime, _isoDuration, string, ZodISODateTime, ZodISODate, ZodISOTime, ZodISODuration, number, boolean, array, object, union, discriminatedUnion, record, _enum, literal, AgentOverlaySchema, CategoryOverlaySchema, isRecord, extractString, toSourcedPiSubagentsOverlays, resolveRouting, loadConfig, loadConfigWithSources, collectRoutingTargets, getConfigPaths, isDiscoverableMarkdown, findAgentsInDir, extractAgentFrontmatter, findCommandsInDir, extractCommandFrontmatter, findSkillsInDir, discoverSkills };