@fro.bot/systematic 3.4.1 → 3.5.1

package/dist/{index-0vm17gwv.js → index-1mb4baxr.js}

@@ -16206,6 +16206,58 @@ var CategoryOverlaySchema = exports_external.object({
   description: "Per-category configuration overlay (same fields as agent minus disable)",
   examples: [{ model: "anthropic/claude-opus-4-7", temperature: 0.1 }]
 });
+var piSubagentsThinkingSchema = exports_external.enum(["off", "minimal", "low", "medium", "high", "xhigh", "max"]).meta({
+  description: "pi-subagents reasoning effort level for exported persona frontmatter",
+  examples: ["off", "medium", "high"]
+});
+var piSubagentsMaxTurnsSchema = exports_external.number().int().nonnegative().meta({
+  description: "pi-subagents maximum turns for a delegated persona (0 = unlimited)",
+  examples: [0, 10, 25]
+});
+var piSubagentsToolsSchema = exports_external.string().min(1).meta({
+  description: "pi-subagents comma-selector tool string (built-ins, */all/none, or extension selectors)",
+  examples: ["*", "read,grep,glob", "none"]
+});
+var piSubagentsSkillsSchema = exports_external.union([exports_external.literal(true), exports_external.string().min(1)]).meta({
+  description: "pi-subagents skills selector: true (all) or a comma-separated list of skill names",
+  examples: [true, "ce:plan,ce:review"]
+});
+var PiSubagentsAgentOverlaySchema = exports_external.object({
+  thinking: trustProtected(piSubagentsThinkingSchema).optional(),
+  max_turns: trustAny(piSubagentsMaxTurnsSchema).optional(),
+  tools: trustProtected(piSubagentsToolsSchema).optional(),
+  skills: trustProtected(piSubagentsSkillsSchema).optional()
+}).strict().meta({
+  description: "Per-agent pi-subagents export overlay (Pi-native fields only; no model)",
+  examples: [{ thinking: "high", max_turns: 10 }]
+});
+var PiSubagentsCategoryOverlaySchema = PiSubagentsAgentOverlaySchema.meta({
+  description: "Per-category pi-subagents export overlay (Pi-native fields only; no model)",
+  examples: [{ thinking: "medium" }]
+});
+var PiSubagentsSchema = exports_external.object({
+  categories: exports_external.record(exports_external.string(), PiSubagentsCategoryOverlaySchema).default({}).meta({
+    description: "Per-category pi-subagents export overlays keyed by category name",
+    examples: [{ research: { thinking: "high" } }, {}]
+  }),
+  agents: exports_external.record(exports_external.string(), PiSubagentsAgentOverlaySchema).default({}).meta({
+    description: "Per-agent pi-subagents export overlays keyed by bundled agent name",
+    examples: [{ "repo-research-analyst": { max_turns: 10 } }, {}]
+  })
+}).strict().default({ categories: {}, agents: {} }).meta({
+  description: "Pi-native pi-subagents export field overlays (thinking, max_turns, tools, skills). Category values apply first; per-agent values override. No model field \u2014 model stays in the categories/agents overlay.",
+  examples: [
+    {
+      categories: { research: { thinking: "high" } },
+      agents: { "repo-research-analyst": { max_turns: 10 } }
+    }
+  ]
+});
+var PI_SUBAGENTS_PROTECTED_FIELDS = [
+  "thinking",
+  "tools",
+  "skills"
+];
 var BootstrapSchema = exports_external.object({
   enabled: exports_external.boolean().default(true).meta({
     description: "Enable bootstrap prompt injection into every conversation",
@@ -16276,6 +16328,7 @@ function createSystematicConfigSchema(opts) {
       ]
     }),
     workflow_guard: WorkflowGuardSchema,
+    pi_subagents: PiSubagentsSchema,
     skills_as_commands: exports_external.boolean().default(true).meta({
       description: "Register skills discovered from user/project skill directories (OpenCode config and other agent-harness-standard locations) as slash commands. Default true.",
       examples: [true, false]
@@ -16315,6 +16368,7 @@ var DEFAULT_CONFIG = {
   },
   agents: {},
   categories: {},
+  pi_subagents: { categories: {}, agents: {} },
   skills_as_commands: true
 };
 var SECURITY_OVERLAY_FIELDS2 = new Set(SECURITY_OVERLAY_FIELDS);
@@ -16473,16 +16527,18 @@ function mergeArraysUnique(arr1, arr2) {
       set2.add(item);
   return Array.from(set2);
 }
-function loadConfig(projectDir) {
-  return loadConfigWithSources(projectDir).config;
+function loadConfig(projectDir, options) {
+  return loadConfigWithSources(projectDir, options).config;
 }
-function loadConfigWithSources(projectDir) {
+function loadConfigWithSources(projectDir, options) {
+  const includeProject = options?.includeProject ?? true;
   const paths = getConfigPaths(projectDir);
   const userSource = loadConfigSource(paths.userConfig, "user");
-  const projectSource = loadConfigSource(paths.projectConfig, "project");
+  const projectSource = includeProject ? loadConfigSource(paths.projectConfig, "project") : null;
   const customSource = paths.customConfig ? loadConfigSource(paths.customConfig, "custom") : null;
   const sources = [userSource, projectSource, customSource].filter((source) => source !== null);
   const mergedOverlays = mergeOverlaySources(sources);
+  const mergedPiSubagentsOverlays = mergePiSubagentsOverlaySources(sources);
   const droppedCategories = Object.keys(mergedOverlays.categories).filter((name) => REMOVED_AGENT_CATEGORIES_SET.has(name));
   const warned = new Set;
   warnDroppedNames(droppedCategories, "categories", warned, "v3.0.0");
@@ -16511,6 +16567,10 @@ function loadConfigWithSources(projectDir) {
     },
     agents: overlayValues(overlays.agents),
     categories: overlayValues(overlays.categories),
+    pi_subagents: {
+      categories: overlayValues(mergedPiSubagentsOverlays.categories),
+      agents: overlayValues(mergedPiSubagentsOverlays.agents)
+    },
     skills_as_commands: customConfig?.skills_as_commands ?? projectConfig?.skills_as_commands ?? userConfig?.skills_as_commands ?? DEFAULT_CONFIG.skills_as_commands
   };
   const droppedSkills = computeDroppedNames(result.disabled_skills, CURRENT_SKILL_NAMES_SET);
@@ -16577,6 +16637,57 @@ function preserveSecurityFields(previous, next) {
   }
   return result;
 }
+var PI_SUBAGENTS_PROTECTED_FIELD_SET = new Set(PI_SUBAGENTS_PROTECTED_FIELDS);
+function mergePiSubagentsOverlaySources(sources) {
+  const result = {
+    agents: {},
+    categories: {}
+  };
+  for (const source of sources) {
+    mergePiSubagentsOverlayMap(result.agents, source, "agents");
+    mergePiSubagentsOverlayMap(result.categories, source, "categories");
+  }
+  return result;
+}
+function stripPiSubagentsProtectedFields(value) {
+  const result = {};
+  for (const [field, fieldValue] of Object.entries(value)) {
+    if (PI_SUBAGENTS_PROTECTED_FIELD_SET.has(field))
+      continue;
+    result[field] = fieldValue;
+  }
+  return result;
+}
+function preservePiSubagentsProtectedFields(previous, next) {
+  const result = { ...next };
+  for (const field of PI_SUBAGENTS_PROTECTED_FIELD_SET) {
+    if (Object.hasOwn(previous, field)) {
+      result[field] = previous[field];
+    }
+  }
+  return result;
+}
+function mergePiSubagentsOverlayMap(target, source, mapKey) {
+  const overlayMap = source.config.pi_subagents?.[mapKey];
+  if (overlayMap === undefined)
+    return;
+  if (!isRecord2(overlayMap)) {
+    throwInvalidOverlay(source.path, `pi_subagents.${mapKey}`);
+  }
+  for (const [key, rawValue] of Object.entries(overlayMap)) {
+    const keyPath = `pi_subagents.${mapKey}.${key}`;
+    if (!isRecord2(rawValue)) {
+      throwInvalidOverlay(source.path, keyPath);
+    }
+    const previous = target[key];
+    const value = source.trust === "project" ? preservePiSubagentsProtectedFields(previous?.value ?? {}, stripPiSubagentsProtectedFields(rawValue)) : rawValue;
+    target[key] = {
+      value,
+      sourcePath: source.path,
+      keyPath
+    };
+  }
+}
 function overlayValues(overlays) {
   const result = {};
   for (const [key, overlay] of Object.entries(overlays)) {

package/dist/index.js

@@ -15,7 +15,7 @@ import {
   loadConfigWithSources,
   parseFrontmatter,
   walkDir
-} from "./index-0vm17gwv.js";
+} from "./index-1mb4baxr.js";
 
 // src/index.ts
 import { createHash as createHash5 } from "crypto";
@@ -3320,9 +3320,20 @@ function applyUnitStart(marker, epoch, context) {
     return;
   }
   if (current.unitId === marker.unitId) {
-    if (!sameUnitDeclaration(current, marker))
+    if (current.state === "completed")
+      return "out-of-order";
+    if (!sameUnitDeclaration(current, marker) && unitHasMintedEvidence(current, context)) {
+      return "out-of-order";
+    }
+    if (sameUnitDeclaration(current, marker) && current.transitionDigest !== marker.transitionDigest) {
       return "conflicting-marker";
-    return current.state === "completed" ? "out-of-order" : "conflicting-marker";
+    }
+    if (!unitDeclarationExtends(current, marker))
+      return "conflicting-marker";
+    if (sameUnitDeclaration(current, marker))
+      return;
+    context.progression = { epoch, unit: snapshot };
+    return;
   }
   if (current.state !== "completed")
     return "out-of-order";
@@ -3346,9 +3357,26 @@ function applyUnitComplete(marker, epoch, context) {
   };
   return;
 }
+function unitHasMintedEvidence(current, context) {
+  return [...context.mintByReceipt.values()].some((envelope) => envelope.canonical.epochDigest === current.epochDigest && envelope.canonical.unitDigest === current.unitDigest);
+}
 function sameUnitDeclaration(current, marker) {
   return current.epochDigest === marker.epochDigest && current.unitDigest === marker.unitDigest && current.family === marker.family && JSON.stringify(current.requiredOperations) === JSON.stringify(marker.requiredOperations) && JSON.stringify(current.resourceScopes) === JSON.stringify(marker.resourceScopes);
 }
+function unitDeclarationExtends(current, marker) {
+  if (current.epochDigest !== marker.epochDigest || current.unitDigest !== marker.unitDigest || current.family !== marker.family) {
+    return false;
+  }
+  const nextOperations = new Set(marker.requiredOperations);
+  if (current.requiredOperations.some((operation) => !nextOperations.has(operation))) {
+    return false;
+  }
+  const nextScopes = new Map(marker.resourceScopes.map((scope) => [
+    scope.operation,
+    scope.resourceIdentity
+  ]));
+  return [...current.resourceScopes].every((scope) => nextScopes.get(scope.operation) === scope.resourceIdentity);
+}
 function foldProgressionMarker(marker, context) {
   return marker.target === "epoch" ? applyEpochProgression(marker, context) : applyUnitProgression(marker, context);
 }
@@ -8473,7 +8501,11 @@ function cloneUnit(unit) {
     requiredOperations: unit.requiredOperations,
     requiredResourceOperations: Object.freeze([
       ...unit.declaredResourceOperations
-    ])
+    ]),
+    resourceScopes: Object.freeze([...unit.resourceScopes].map(([operation, resourceIdentity]) => ({
+      operation,
+      resourceIdentity
+    })))
   });
 }
 function familyForSkill(skill) {
@@ -8900,6 +8932,13 @@ function createWorkflowGuard(options) {
       return "receipt-mismatch";
     return context.worktreeIdentity !== currentWorktreeIdentity ? "receipt-mismatch" : undefined;
   }
+  function currentOperationContext() {
+    return Object.freeze({
+      workspaceIdentity: currentWorkspaceIdentity,
+      ...currentRepositoryIdentity === undefined ? {} : { repositoryIdentity: currentRepositoryIdentity },
+      ...currentWorktreeIdentity === undefined ? {} : { worktreeIdentity: currentWorktreeIdentity }
+    });
+  }
   function resourceBeforeReason(input, unit) {
     if (!operationUsesResource(input.operation))
       return;
@@ -9591,9 +9630,10 @@ function createWorkflowGuard(options) {
     }
     return;
   }
-  function mergeResourceScopes(trustedPolicy, modelScopes) {
-    const result = new Map(runtimeScopes);
-    for (const scopes of [trustedPolicy.resourceScopes, modelScopes]) {
+  function mergeResourceScopes(trustedPolicy, modelScopes, existingScopes) {
+    const result = new Map(existingScopes ?? runtimeScopes);
+    const scopesToMerge = existingScopes ? [runtimeScopes, trustedPolicy.resourceScopes, modelScopes] : [trustedPolicy.resourceScopes, modelScopes];
+    for (const scopes of scopesToMerge) {
       for (const [operation, resource] of scopes) {
         const existing = result.get(operation);
         if (existing && existing !== resource)
@@ -9603,22 +9643,71 @@ function createWorkflowGuard(options) {
     }
     return result;
   }
-  function requiredOperationsFor(trustedPolicy, model, resourceScopes) {
+  function requiredOperationsFor(trustedPolicy, model, resourceScopes, existingOperations = []) {
     return Object.freeze([
       ...new Set([
         ...MANDATORY_OPERATIONS,
         ...runtimeRequired,
+        ...existingOperations,
         ...trustedPolicy.expectedOperations,
         ...model.expectedOperations,
         ...resourceScopes.keys()
       ])
     ]);
   }
+  function resourceIdentitiesMatchUnit(unit) {
+    const expected = new Map(runtimeScopes);
+    for (const [operation, resource] of unit.resourceScopes) {
+      expected.set(operation, resource);
+    }
+    if (currentResourceIdentities.size !== expected.size)
+      return false;
+    for (const [operation, resource] of expected) {
+      if (currentResourceIdentities.get(operation) !== resource)
+        return false;
+    }
+    return true;
+  }
+  function pristineActiveUnit(unit) {
+    return unit.evidence.size === 0 && unit.issues.size === 0 && unit.staleReceiptIds.size === 0 && unit.recoveredReceiptIds.size === 0 && unit.operationStates.size === 0 && unit.ledgerContexts.size === 0 && globalIssue === undefined && transitionsByCall.size === 0 && terminalOperationCalls.size === 0 && currentResourceRevisionIdentities.size === 0 && currentPullRequestFingerprint === undefined && currentWorkspaceIdentity === initialWorkspaceIdentity && currentRepositoryIdentity === initialRepositoryIdentity && currentWorktreeIdentity === initialWorktreeIdentity && resourceIdentitiesMatchUnit(unit);
+  }
+  function declarationChanged(unit, requiredOperations, resourceScopes) {
+    if (JSON.stringify(unit.requiredOperations) !== JSON.stringify(requiredOperations)) {
+      return true;
+    }
+    if (unit.resourceScopes.size !== resourceScopes.size)
+      return true;
+    for (const [operation, resource] of resourceScopes) {
+      if (unit.resourceScopes.get(operation) !== resource)
+        return true;
+    }
+    return false;
+  }
+  function startActiveUnit(parsed, trustedPolicy, unit) {
+    if (!pristineActiveUnit(unit)) {
+      return { status: "rejected", reasonCode: "unit-active" };
+    }
+    const resourceScopes = mergeResourceScopes(trustedPolicy, parsed.resourceScopes, unit.resourceScopes);
+    if (!resourceScopes) {
+      return { status: "rejected", reasonCode: "runtime-scope-conflict" };
+    }
+    const requiredOperations = requiredOperationsFor(trustedPolicy, parsed, resourceScopes, unit.requiredOperations);
+    if (!declarationChanged(unit, requiredOperations, resourceScopes)) {
+      return { status: "rejected", reasonCode: "unit-active" };
+    }
+    unit.requiredOperations = requiredOperations;
+    unit.declaredResourceOperations = Object.freeze([...resourceScopes.keys()]);
+    unit.resourceScopes = resourceScopes;
+    for (const [operation, resource] of resourceScopes) {
+      currentResourceIdentities.set(operation, resource);
+    }
+    return { status: "started", unit: cloneUnit(unit) };
+  }
   function startParsedUnit(parsed, trustedPolicy) {
     if (!epoch)
       return { status: "rejected", reasonCode: "no-active-epoch" };
     if (epoch.unit?.status === "active") {
-      return { status: "rejected", reasonCode: "unit-active" };
+      return startActiveUnit(parsed, trustedPolicy, epoch.unit);
     }
     const resourceScopes = mergeResourceScopes(trustedPolicy, parsed.resourceScopes);
     if (!resourceScopes) {
@@ -9706,7 +9795,7 @@ function createWorkflowGuard(options) {
       reasonCode: existing.state === "abandoned" ? "abandoned-transition" : "transition-terminal"
     };
   }
-  async function processOperation(input, parsed, unit) {
+  async function processOperation(input, parsed, unit, trustedClassification) {
     if (!unit.requiredOperations.includes(parsed.operation)) {
       markTerminalOperation(parsed, input);
       return { status: "rejected", reasonCode: "operation-not-required" };
@@ -9725,7 +9814,7 @@ function createWorkflowGuard(options) {
     if (prepared.status !== "prepared") {
       return prepared.reasonCode === "call-context-conflict" ? { status: "rejected", reasonCode: "call-context-conflict" } : { status: "rejected", reasonCode: "rejected-operation" };
     }
-    const classification = await classifyPreparedOperation(parsed, input, unit);
+    const classification = trustedClassification ?? await classifyPreparedOperation(parsed, input, unit);
     return classification ? finalizeOperation(parsed, input, unit, classification) : { status: "rejected", reasonCode: "guard-unavailable" };
   }
   function rejectParsedOperation(parsed, input, unit, reasonCode) {
@@ -10231,12 +10320,44 @@ function createWorkflowGuard(options) {
       }
       return processOperation(input, parsed, epoch.unit);
     },
+    async observeTrustedRecoveredOperation(input) {
+      const modeResult = evidenceModeResult();
+      if (modeResult)
+        return modeResult;
+      if (!epoch)
+        return { status: "rejected", reasonCode: "no-active-epoch" };
+      if (!epoch.unit)
+        return { status: "rejected", reasonCode: "no-active-unit" };
+      if (epoch.unit.status === "completed") {
+        return { status: "rejected", reasonCode: "unit-completed" };
+      }
+      const terminalResult = terminalOperationResult(input);
+      if (terminalResult)
+        return terminalResult;
+      const parsed = parseReceiptOperationObservation(input);
+      if (!parsed) {
+        markTerminalOperation(undefined, input);
+        return recordGlobalEvidenceIssue("invalid-receipt");
+      }
+      const classification = {
+        outcome: "accepted",
+        category: parsed.operation,
+        attribution: "runtime-verified",
+        result: "success",
+        sideEffect: parsed.operation === "verification" || parsed.operation === "check-readback" || parsed.operation === "review-readback" ? "not-required" : "required",
+        reasonCode: "recognized-command"
+      };
+      return processOperation(input, parsed, epoch.unit, classification);
+    },
     observeReadback(input) {
       const parsed = parseReadback(input);
       if (!parsed)
         return { status: "rejected", reasonCode: "invalid-receipt" };
       return observeRevision(parsed, epoch?.unit);
     },
+    currentOperationContext() {
+      return currentOperationContext();
+    },
     status() {
       return projection();
     },
@@ -11156,6 +11277,7 @@ function createSessionRuntime(options) {
     const rollupKey = `${host.sessionID}:${host.callID}:${childSessionID}`;
     if (rolledUpChildren.has(rollupKey))
       return;
+    const parentBefore = guard.currentOperationContext();
     const children = await options.hostReadback.listChildren(host.sessionID);
     if (!children.some((child) => child.sessionId === childSessionID && child.parentID === host.sessionID)) {
       markUnavailable();
@@ -11203,18 +11325,27 @@ function createSessionRuntime(options) {
     const currentStatus = guard.status();
     if (!currentStatus.epoch || !currentStatus.unit)
       return;
-    const expectedWorkspace = ledger.digestIdentity("workspace", options.workspaceIdentity);
-    const expectedRepository = ledger.digestIdentity("repository", options.repositoryIdentity ?? current.snapshot.repositoryRevisionDigest);
-    const expectedWorktree = ledger.digestIdentity("worktree", options.worktreeIdentity ?? current.snapshot.worktreeRevisionDigest);
-    let minted = false;
+    const expectedWorkspace = childLedger.digestIdentity("workspace", parentBefore.workspaceIdentity);
+    const expectedRepository = childLedger.digestIdentity("repository", current.snapshot.repositoryRevisionDigest);
+    const expectedWorktree = childLedger.digestIdentity("worktree", current.snapshot.worktreeRevisionDigest);
+    const candidates = [];
     for (const childReceipt of recovered.receipts) {
       const operation = childReceipt.canonical.operation;
       if (!localOperation(operation))
         continue;
-      if (childReceipt.canonical.workspaceDigest !== expectedWorkspace || childReceipt.canonical.repositoryDigest !== expectedRepository || childReceipt.canonical.worktreeDigest !== expectedWorktree) {
+      if (childReceipt.canonical.workspaceDigest !== expectedWorkspace) {
         markUnavailable();
         return;
       }
+      if (childReceipt.canonical.repositoryDigest !== expectedRepository || childReceipt.canonical.worktreeDigest !== expectedWorktree) {
+        continue;
+      }
+      candidates.push(childReceipt);
+    }
+    let minted = false;
+    for (const childReceipt of candidates) {
+      const operation = childReceipt.canonical.operation;
+      const parentContext = guard.currentOperationContext();
       const callID = `task-${host.callID}-${childReceipt.canonical.receiptId}`;
       const observation = {
         callId: callID,
@@ -11223,12 +11354,12 @@ function createSessionRuntime(options) {
         context: {
           epochId: currentStatus.epoch.epochId,
           unitId: currentStatus.unit.unitId,
-          workspaceIdentity: options.workspaceIdentity,
-          repositoryIdentity: operation === "commit" ? options.repositoryIdentity ?? current.snapshot.repositoryRevisionDigest : current.snapshot.repositoryRevisionDigest,
-          worktreeIdentity: operation === "implementation" ? options.worktreeIdentity ?? current.snapshot.worktreeRevisionDigest : current.snapshot.worktreeRevisionDigest
+          workspaceIdentity: parentContext.workspaceIdentity,
+          ...parentContext.repositoryIdentity ? { repositoryIdentity: parentContext.repositoryIdentity } : {},
+          ...parentContext.worktreeIdentity ? { worktreeIdentity: parentContext.worktreeIdentity } : {}
         },
         after: {
-          workspaceIdentity: options.workspaceIdentity,
+          workspaceIdentity: parentContext.workspaceIdentity,
           repositoryIdentity: current.snapshot.repositoryRevisionDigest,
           worktreeIdentity: current.snapshot.worktreeRevisionDigest
         },
@@ -11238,7 +11369,7 @@ function createSessionRuntime(options) {
           noOp: false
         }
       };
-      const result = await guard.observeOperation(observation);
+      const result = await guard.observeTrustedRecoveredOperation(observation);
       if (result.status === "accepted") {
         const receipt = receiptForOperation(callID, operation);
         if (receipt)
@@ -11433,13 +11564,21 @@ function createSessionRuntime(options) {
     }
     return result;
   }
+  function progressionResourceScopes(unit) {
+    return [...unit.resourceScopes].sort((first, second) => first.operation.localeCompare(second.operation)).map((scope) => ({
+      operation: scope.operation,
+      resourceIdentity: ledger.digestIdentity("resource", scope.resourceIdentity)
+    }));
+  }
   function writeStartResult(output, result) {
     if (!isRecord7(output))
       return;
+    const existingMetadata = isRecord7(output.metadata) ? output.metadata : {};
     if (result.status === "started") {
       output.title = "Workflow unit started";
       output.output = JSON.stringify({ status: "started" });
       output.metadata = {
+        ...existingMetadata,
         ...metadata2(),
         workflowGuard: { status: "started" }
       };
@@ -11452,6 +11591,7 @@ function createSessionRuntime(options) {
       reasonCode
     });
     output.metadata = {
+      ...existingMetadata,
       ...metadata2(),
       workflowGuard: {
         status: "rejected",
@@ -11783,7 +11923,7 @@ function createSessionRuntime(options) {
         unitId: status.unit.unitId,
         family: status.epoch.family,
         requiredOperations: status.unit.requiredOperations,
-        resourceScopes: [],
+        resourceScopes: progressionResourceScopes(status.unit),
         state: "started",
         transitionDigest: ledger.digestIdentity("call", host.callID)
       }));
@@ -11840,7 +11980,7 @@ function createSessionRuntime(options) {
         unitId: unit.unitId,
         family: epoch.family,
         requiredOperations: unit.requiredOperations,
-        resourceScopes: [],
+        resourceScopes: progressionResourceScopes(unit),
         state: "started",
         transitionDigest: ledger.digestIdentity("call", host.callID)
       }));
@@ -12205,9 +12345,10 @@ function createSessionRuntime(options) {
     const marker = projectReceiptMintMarker(receipt, ledger.getSessionSalt());
     if (!marker)
       return;
+    const existing = output.metadata[SYSTEMATIC_WORKFLOW_RECEIPT_METADATA_KEY];
     output.metadata = {
       ...output.metadata,
-      [SYSTEMATIC_WORKFLOW_RECEIPT_METADATA_KEY]: marker
+      [SYSTEMATIC_WORKFLOW_RECEIPT_METADATA_KEY]: existing ? Array.isArray(existing) ? [...existing, marker] : [existing, marker] : marker
     };
   }
   function mergeProgressionMarker(output, marker) {

package/dist/lib/config-schema.d.ts

@@ -87,6 +87,72 @@ export declare const CategoryOverlaySchema: z.ZodObject<{
         deny: "deny";
     }>>]>>>;
 }, z.core.$strict>;
+export declare const PiSubagentsAgentOverlaySchema: z.ZodObject<{
+    thinking: z.ZodOptional<z.ZodEnum<{
+        off: "off";
+        minimal: "minimal";
+        low: "low";
+        medium: "medium";
+        high: "high";
+        xhigh: "xhigh";
+        max: "max";
+    }>>;
+    max_turns: z.ZodOptional<z.ZodNumber>;
+    tools: z.ZodOptional<z.ZodString>;
+    skills: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<true>, z.ZodString]>>;
+}, z.core.$strict>;
+export declare const PiSubagentsCategoryOverlaySchema: z.ZodObject<{
+    thinking: z.ZodOptional<z.ZodEnum<{
+        off: "off";
+        minimal: "minimal";
+        low: "low";
+        medium: "medium";
+        high: "high";
+        xhigh: "xhigh";
+        max: "max";
+    }>>;
+    max_turns: z.ZodOptional<z.ZodNumber>;
+    tools: z.ZodOptional<z.ZodString>;
+    skills: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<true>, z.ZodString]>>;
+}, z.core.$strict>;
+export declare const PiSubagentsSchema: z.ZodDefault<z.ZodObject<{
+    categories: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        thinking: z.ZodOptional<z.ZodEnum<{
+            off: "off";
+            minimal: "minimal";
+            low: "low";
+            medium: "medium";
+            high: "high";
+            xhigh: "xhigh";
+            max: "max";
+        }>>;
+        max_turns: z.ZodOptional<z.ZodNumber>;
+        tools: z.ZodOptional<z.ZodString>;
+        skills: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<true>, z.ZodString]>>;
+    }, z.core.$strict>>>;
+    agents: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        thinking: z.ZodOptional<z.ZodEnum<{
+            off: "off";
+            minimal: "minimal";
+            low: "low";
+            medium: "medium";
+            high: "high";
+            xhigh: "xhigh";
+            max: "max";
+        }>>;
+        max_turns: z.ZodOptional<z.ZodNumber>;
+        tools: z.ZodOptional<z.ZodString>;
+        skills: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<true>, z.ZodString]>>;
+    }, z.core.$strict>>>;
+}, z.core.$strict>>;
+/**
+ * Fields in PiSubagentsAgentOverlaySchema/PiSubagentsCategoryOverlaySchema that
+ * require a project-or-higher trust source. Project config cannot grant
+ * `thinking`, `tools`, or `skills` to an exported persona; `max_turns` is
+ * trust-any. Mirrors the hand-coded `PI_SUBAGENTS_PROTECTED_FIELDS` set in
+ * `src/lib/config.ts`.
+ */
+export declare const PI_SUBAGENTS_PROTECTED_FIELDS: readonly string[];
 export declare const BootstrapSchema: z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
     file: z.ZodOptional<z.ZodString>;

package/dist/lib/config.d.ts

@@ -22,6 +22,10 @@ export interface SourceAwareConfigResult {
     config: SystematicConfig;
     overlays: SourcedOverlayConfigMap;
 }
+export interface PiSubagentsOverlayMap {
+    categories?: OverlayConfigMap;
+    agents?: OverlayConfigMap;
+}
 export interface SystematicConfig {
     disabled_skills: string[];
     disabled_agents: string[];
@@ -30,6 +34,7 @@ export interface SystematicConfig {
     workflow_guard: WorkflowGuardConfig;
     agents?: OverlayConfigMap;
     categories?: OverlayConfigMap;
+    pi_subagents?: PiSubagentsOverlayMap;
     skills_as_commands: boolean;
 }
 export declare const DEFAULT_CONFIG: SystematicConfig;
@@ -47,8 +52,17 @@ export declare function computeDroppedNames(names: readonly string[], allowedSet
  * Passing a fresh set per load ensures no cross-load suppression.
  */
 export declare function warnDroppedNames(dropped: string[], field: string, warned: Set<string>, removalVersion?: string): void;
-export declare function loadConfig(projectDir: string): SystematicConfig;
-export declare function loadConfigWithSources(projectDir: string): SourceAwareConfigResult;
+export interface LoadConfigOptions {
+    /**
+     * When false, the project-level config source (`<cwd>/.opencode/systematic.json`)
+     * is not loaded at all — not merged, not trust-stripped, entirely absent from
+     * the source chain. Used by global-scoped pi-subagents export so it never
+     * absorbs cwd project overlays (plan R7/R19). Defaults to true.
+     */
+    includeProject?: boolean;
+}
+export declare function loadConfig(projectDir: string, options?: LoadConfigOptions): SystematicConfig;
+export declare function loadConfigWithSources(projectDir: string, options?: LoadConfigOptions): SourceAwareConfigResult;
 export declare function getConfigPaths(projectDir: string): {
     customConfig?: string | undefined;
     customDir?: string | undefined;