@fro.bot/systematic 3.5.2 → 3.5.4

package/ATTRIBUTIONS.md

@@ -71,10 +71,10 @@ SOFTWARE.
 
 ## pbakaus/impeccable — Apache 2.0
 
-**Source repository:** [https://github.com/pbakaus/impeccable](https://github.com/pbakaus/impeccable)  
-**Pinned commit:** `642f03d5a10eb3deb91bd511241e387e23b9aa39`  
-**License:** Apache 2.0  
-**Copyright:** Paul Bakaus  
+**Source repository:** [https://github.com/pbakaus/impeccable](https://github.com/pbakaus/impeccable)
+**Pinned commit:** `642f03d5a10eb3deb91bd511241e387e23b9aa39`
+**License:** Apache 2.0
+**Copyright:** Paul Bakaus
 
 ### Files derived
 
@@ -272,7 +272,7 @@ The following is the full Apache License, Version 2.0 text, reproduced here in c
 ## vercel-labs/agent-browser — Apache-2.0
 
 **Source repository:** [`vercel-labs/agent-browser`](https://github.com/vercel-labs/agent-browser)
-**Pinned version:** `v0.33.0` (npm `agent-browser@0.33.0`)
+**Pinned version:** `v0.33.1` (npm `agent-browser@0.33.1`)
 **License:** Apache-2.0
 **Copyright:** Copyright 2025 Vercel Inc.
 
@@ -289,14 +289,14 @@ Vendored verbatim from the pinned npm package (`node_modules/agent-browser/skill
 Refresh is **automated** via the pinned `devDependency` + `agent-browser:build` regeneration + `agent-browser:drift` CI gate:
 
 1. Renovate opens a version-bump PR when upstream releases a new `agent-browser` version.
-2. The `postUpgradeTasks` in `renovate.json5` runs `bun run agent-browser:build`, which regenerates `skills/agent-browser/SKILL.md` from the newly pinned version and lands the updated stub in the same PR.
+2. The `postUpgradeTasks` in `renovate.json5` runs `bun run postupgrade` (which runs `bun run agent-browser:build`), which regenerates `skills/agent-browser/SKILL.md` from the newly pinned version and lands the updated stub in the same PR.
 3. The CI `agent-browser:drift` step verifies the committed file matches the pinned package and fails the PR if it does not.
 
 This is fully automated — no human adaptation pass is required, in contrast to `obra/superpowers` which is manually refreshed because its content is hand-adapted on each bump.
 
 ### Upstream Apache-2.0 license text
 
-The following is the full Apache License, Version 2.0 text from `agent-browser@0.33.0`, reproduced here in compliance with the license's notice requirements:
+The following is the full Apache License, Version 2.0 text from `agent-browser@0.33.1`, reproduced here in compliance with the license's notice requirements:
 
 ```
                                  Apache License

package/dist/index.js

@@ -1309,6 +1309,15 @@ var DEFAULT_LIMITS = {
   maxTotalFileBytes: 16777216,
   maxPathBytes: 4096
 };
+var UNTRACKED_FILES_ARGS = [
+  "ls-files",
+  "--others",
+  "--exclude-standard",
+  "--full-name",
+  "-z",
+  "--",
+  ":/"
+];
 function unavailable(result) {
   return { status: "unavailable", reasonCode: result.reasonCode };
 }
@@ -1420,15 +1429,15 @@ function runCommand(runner, args2, cwd, limits) {
   }
   return { status: "ok", output: { stdout: result.stdout } };
 }
-function readRevision(runner, root, limits) {
-  const branch = runCommand(runner, ["symbolic-ref", "--short", "HEAD"], root, limits);
+function readRevision(runner, context, limits) {
+  const branch = runCommand(runner, ["symbolic-ref", "--short", "HEAD"], context.commandDirectory, limits);
   if (branch.status === "error" && branch.reasonCode !== "command-failed") {
     return branch;
   }
   const branchValue = branch.status === "ok" ? branch.output.stdout.trim() : "detached";
   let head;
   try {
-    head = runner(["rev-parse", "--verify", "HEAD"], root, limits.maxCommandOutputBytes, limits.maxCommandTimeoutMs);
+    head = runner(["rev-parse", "--verify", "HEAD"], context.commandDirectory, limits.maxCommandOutputBytes, limits.maxCommandTimeoutMs);
   } catch {
     return { status: "error", reasonCode: "command-failed" };
   }
@@ -1439,7 +1448,7 @@ function readRevision(runner, root, limits) {
     return { status: "error", reasonCode: "command-output-limit" };
   }
   const headValue = head.status === 0 ? head.stdout.trim() : "unborn";
-  const inside = runCommand(runner, ["rev-parse", "--is-inside-work-tree"], root, limits);
+  const inside = runCommand(runner, ["rev-parse", "--is-inside-work-tree"], context.commandDirectory, limits);
   if (inside.status === "error")
     return inside;
   return {
@@ -1454,8 +1463,8 @@ function readRevision(runner, root, limits) {
 function isEnoent(error) {
   return error !== null && typeof error === "object" && "code" in error && error.code === "ENOENT";
 }
-function appendSubmoduleFact(hash, runner, root, relativePath, limits, totalBytes) {
-  const submodule = runCommand(runner, ["-C", relativePath, "rev-parse", "--verify", "HEAD"], root, limits);
+function appendSubmoduleFact(hash, runner, submodulePath, relativePath, limits, totalBytes) {
+  const submodule = runCommand(runner, ["rev-parse", "--verify", "HEAD"], submodulePath, limits);
   if (submodule.status === "error")
     return submodule;
   const revision = submodule.output.stdout.trim();
@@ -1512,9 +1521,9 @@ function appendRegularFact(hash, fileReader, absolutePath, relativePath, stat, l
   hash.update("\x00");
   return { status: "ok", totalBytes: totalBytes + content.byteLength };
 }
-function appendFileFactV2(hash, runner, fileReader, symlinkReader, statReader, root, entry, limits, totalBytes) {
+function appendFileFactV2(hash, runner, fileReader, symlinkReader, statReader, context, entry, limits, totalBytes) {
   const { mode, relativePath } = entry;
-  const absolutePath = safePath(root, relativePath);
+  const absolutePath = safePath(context.worktreeRoot, relativePath);
   if (!absolutePath || outputBytes(relativePath) > limits.maxPathBytes) {
     return { status: "error", reasonCode: "file-read-failed" };
   }
@@ -1525,20 +1534,20 @@ function appendFileFactV2(hash, runner, fileReader, symlinkReader, statReader, r
     return isEnoent(error) ? { status: "ok", totalBytes } : { status: "error", reasonCode: "file-read-failed" };
   }
   if (mode === "160000")
-    return appendSubmoduleFact(hash, runner, root, relativePath, limits, totalBytes);
+    return appendSubmoduleFact(hash, runner, absolutePath, relativePath, limits, totalBytes);
   if (stat.isSymbolicLink) {
     return appendSymlinkFact(hash, symlinkReader, absolutePath, relativePath, limits, totalBytes);
   }
   return appendRegularFact(hash, fileReader, absolutePath, relativePath, stat, limits, totalBytes);
 }
-function readWorktreeRevisionV2(runner, fileReader, symlinkReader, statReader, root, limits) {
-  const tracked = runCommand(runner, ["ls-files", "-z"], root, limits);
+function readWorktreeRevisionV2(runner, fileReader, symlinkReader, statReader, context, limits) {
+  const tracked = runCommand(runner, ["ls-files", "--full-name", "-z", "--", ":/"], context.commandDirectory, limits);
   if (tracked.status === "error")
     return tracked;
-  const staged = runCommand(runner, ["ls-files", "--stage", "-z"], root, limits);
+  const staged = runCommand(runner, ["ls-files", "--stage", "--full-name", "-z", "--", ":/"], context.commandDirectory, limits);
   if (staged.status === "error")
     return staged;
-  const untracked = runCommand(runner, ["ls-files", "--others", "--exclude-standard", "-z"], root, limits);
+  const untracked = runCommand(runner, UNTRACKED_FILES_ARGS, context.commandDirectory, limits);
   if (untracked.status === "error")
     return untracked;
   const stageEntries = parseStageEntries(staged.output.stdout, limits.maxPathBytes);
@@ -1558,17 +1567,17 @@ function readWorktreeRevisionV2(runner, fileReader, symlinkReader, statReader, r
   hash.update("systematic:opencode-observer:worktree:v2\x00");
   let totalBytes = 0;
   for (const relativePath of paths) {
-    const result = appendFileFactV2(hash, runner, fileReader, symlinkReader, statReader, root, { relativePath, mode: modes.get(relativePath) ?? "" }, limits, totalBytes);
+    const result = appendFileFactV2(hash, runner, fileReader, symlinkReader, statReader, context, { relativePath, mode: modes.get(relativePath) ?? "" }, limits, totalBytes);
     if (result.status === "error")
       return result;
     totalBytes = result.totalBytes;
   }
   return { status: "ok", digest: hash.digest("hex") };
 }
-function readCommitClosure(runner, root, limits) {
+function readCommitClosure(runner, context, limits) {
   let diff;
   try {
-    diff = runner(["diff", "--quiet", "HEAD", "--", "."], root, limits.maxCommandOutputBytes, limits.maxCommandTimeoutMs);
+    diff = runner(["diff", "--quiet", "HEAD", "--", ":/"], context.commandDirectory, limits.maxCommandOutputBytes, limits.maxCommandTimeoutMs);
   } catch {
     return { status: "error", reasonCode: "command-failed" };
   }
@@ -1581,7 +1590,7 @@ function readCommitClosure(runner, root, limits) {
   if (diff.status !== 0 && diff.status !== 1) {
     return { status: "error", reasonCode: "command-failed" };
   }
-  const untracked = runCommand(runner, ["ls-files", "--others", "--exclude-standard", "-z"], root, limits);
+  const untracked = runCommand(runner, UNTRACKED_FILES_ARGS, context.commandDirectory, limits);
   if (untracked.status === "error")
     return untracked;
   return {
@@ -1765,8 +1774,8 @@ function readCheckReadback(runner, root, limits, pullRequest) {
   const state = checkState(parsedChecks.value, limits);
   return state === undefined ? { status: "unavailable", reasonCode: "remote-missing-field" } : remoteResultFromPullRequest(pullRequest, { checkState: state });
 }
-function readRemoteSnapshot(runner, operation, phase, root, limits) {
-  return operation === "push" ? readPushRemoteSnapshot(runner, phase, root, limits) : readRemotePullRequest(runner, operation, root, limits);
+function readRemoteSnapshot(runner, operation, phase, commandDirectory, limits) {
+  return operation === "push" ? readPushRemoteSnapshot(runner, phase, commandDirectory, limits) : readRemotePullRequest(runner, operation, commandDirectory, limits);
 }
 function createOpencodeOperationObserver(options) {
   const limits = mergeLimits(options.limits);
@@ -1801,13 +1810,17 @@ function createOpencodeOperationObserver(options) {
       if (root.length === 0 || outputBytes(root) > limits.maxPathBytes) {
         return { status: "unavailable", reasonCode: "target-unavailable" };
       }
-      const repository = readRevision(runner, root, limits);
+      const context = {
+        commandDirectory: targetDirectory,
+        worktreeRoot: root
+      };
+      const repository = readRevision(runner, context, limits);
       if (repository.status === "error")
         return unavailable(repository);
-      const worktree = readWorktreeRevisionV2(runner, fileReader, symlinkReader, statReader, root, limits);
+      const worktree = readWorktreeRevisionV2(runner, fileReader, symlinkReader, statReader, context, limits);
       if (worktree.status === "error")
         return unavailable(worktree);
-      const closure = readCommitClosure(runner, root, limits);
+      const closure = readCommitClosure(runner, context, limits);
       if (closure.status === "error")
         return unavailable(closure);
       return {
@@ -1829,7 +1842,7 @@ function createOpencodeOperationObserver(options) {
       if (root.length === 0 || outputBytes(root) > limits.maxPathBytes) {
         return { status: "unavailable", reasonCode: "target-unavailable" };
       }
-      return readRemoteSnapshot(remoteRunner, operation, phase, root, limits);
+      return readRemoteSnapshot(remoteRunner, operation, phase, targetDirectory, limits);
     }
   };
 }

package/dist/lib/agent-colors.d.ts

@@ -8,7 +8,7 @@
  * See anomalyco/opencode commits 2793502db / 96a534d8c for the
  * server-side schema (PR #346 / v2.9.2 history).
  */
-export declare const OPENCODE_AGENT_COLOR_TOKENS: readonly ["primary", "secondary", "accent", "success", "warning", "error", "info"];
+export declare const OPENCODE_AGENT_COLOR_TOKENS: readonly ['primary', 'secondary', 'accent', 'success', 'warning', 'error', 'info'];
 /**
  * Check whether a value is a valid agent color — either a hex literal
  * (`#RRGGBB`) or a named token from `OPENCODE_AGENT_COLOR_TOKENS`.

package/dist/lib/agent-resolver.d.ts

@@ -20,7 +20,7 @@ export declare function resolveAgent(catalog: AgentCatalogEntry[], name: string)
  */
 export declare function renderAgentCatalogCompact(catalog: AgentCatalogEntry[]): string;
 /** Pi built-in read-only tool names used as the default allowlist. */
-export declare const DEFAULT_READONLY_TOOLS: readonly ["read", "grep", "find", "ls"];
+export declare const DEFAULT_READONLY_TOOLS: readonly ['read', 'grep', 'find', 'ls'];
 export interface ResolvedToolAllowlist {
     tools: string[];
 }

package/dist/lib/bundled-names.d.ts

@@ -1,5 +1,5 @@
-export declare const BUNDLED_AGENT_NAMES: readonly ["adversarial-document-reviewer", "adversarial-reviewer", "agent-native-reviewer", "api-contract-reviewer", "architecture-strategist", "best-practices-researcher", "bug-reproduction-validator", "cli-readiness-reviewer", "code-simplicity-reviewer", "coherence-reviewer", "correctness-reviewer", "data-migrations-reviewer", "deployment-verification-agent", "design-iterator", "design-lens-reviewer", "feasibility-reviewer", "framework-docs-researcher", "git-history-analyzer", "issue-intelligence-analyst", "kieran-typescript-reviewer", "learnings-researcher", "maintainability-reviewer", "pattern-recognition-specialist", "performance-reviewer", "pr-comment-resolver", "previous-comments-reviewer", "product-lens-reviewer", "project-standards-reviewer", "reliability-reviewer", "repo-research-analyst", "scope-guardian-reviewer", "security-lens-reviewer", "security-reviewer", "slack-researcher", "spec-flow-analyzer", "systematic-implementer", "testing-reviewer"];
-export declare const BUNDLED_AGENT_QUALIFIED_IDS: readonly ["design/design-iterator", "document-review/adversarial-document-reviewer", "document-review/coherence-reviewer", "document-review/design-lens-reviewer", "document-review/feasibility-reviewer", "document-review/product-lens-reviewer", "document-review/scope-guardian-reviewer", "document-review/security-lens-reviewer", "research/best-practices-researcher", "research/framework-docs-researcher", "research/git-history-analyzer", "research/issue-intelligence-analyst", "research/learnings-researcher", "research/repo-research-analyst", "research/slack-researcher", "review/adversarial-reviewer", "review/agent-native-reviewer", "review/api-contract-reviewer", "review/architecture-strategist", "review/cli-readiness-reviewer", "review/code-simplicity-reviewer", "review/correctness-reviewer", "review/data-migrations-reviewer", "review/deployment-verification-agent", "review/kieran-typescript-reviewer", "review/maintainability-reviewer", "review/pattern-recognition-specialist", "review/performance-reviewer", "review/previous-comments-reviewer", "review/project-standards-reviewer", "review/reliability-reviewer", "review/security-reviewer", "review/testing-reviewer", "workflow/bug-reproduction-validator", "workflow/pr-comment-resolver", "workflow/spec-flow-analyzer", "workflow/systematic-implementer"];
-export declare const BUNDLED_SKILL_NAMES: readonly ["agent-browser", "agent-native-architecture", "agent-native-audit", "ce:brainstorm", "ce:compound", "ce:compound-refresh", "ce:ideate", "ce:plan", "ce:review", "ce:work", "compound-docs", "deepen-plan", "deploy-docs", "document-review", "frontend-design", "git-clean-gone-branches", "git-commit", "git-commit-push-pr", "git-worktree", "lfg", "onboarding", "orchestrating-subagents", "report-bug-ce", "reproduce-bug", "resolve-pr-feedback", "slfg", "test-browser", "test-driven-development", "todos", "using-systematic", "writing-skills"];
+export declare const BUNDLED_AGENT_NAMES: readonly ['adversarial-document-reviewer', 'adversarial-reviewer', 'agent-native-reviewer', 'api-contract-reviewer', 'architecture-strategist', 'best-practices-researcher', 'bug-reproduction-validator', 'cli-readiness-reviewer', 'code-simplicity-reviewer', 'coherence-reviewer', 'correctness-reviewer', 'data-migrations-reviewer', 'deployment-verification-agent', 'design-iterator', 'design-lens-reviewer', 'feasibility-reviewer', 'framework-docs-researcher', 'git-history-analyzer', 'issue-intelligence-analyst', 'kieran-typescript-reviewer', 'learnings-researcher', 'maintainability-reviewer', 'pattern-recognition-specialist', 'performance-reviewer', 'pr-comment-resolver', 'previous-comments-reviewer', 'product-lens-reviewer', 'project-standards-reviewer', 'reliability-reviewer', 'repo-research-analyst', 'scope-guardian-reviewer', 'security-lens-reviewer', 'security-reviewer', 'slack-researcher', 'spec-flow-analyzer', 'systematic-implementer', 'testing-reviewer'];
+export declare const BUNDLED_AGENT_QUALIFIED_IDS: readonly ['design/design-iterator', 'document-review/adversarial-document-reviewer', 'document-review/coherence-reviewer', 'document-review/design-lens-reviewer', 'document-review/feasibility-reviewer', 'document-review/product-lens-reviewer', 'document-review/scope-guardian-reviewer', 'document-review/security-lens-reviewer', 'research/best-practices-researcher', 'research/framework-docs-researcher', 'research/git-history-analyzer', 'research/issue-intelligence-analyst', 'research/learnings-researcher', 'research/repo-research-analyst', 'research/slack-researcher', 'review/adversarial-reviewer', 'review/agent-native-reviewer', 'review/api-contract-reviewer', 'review/architecture-strategist', 'review/cli-readiness-reviewer', 'review/code-simplicity-reviewer', 'review/correctness-reviewer', 'review/data-migrations-reviewer', 'review/deployment-verification-agent', 'review/kieran-typescript-reviewer', 'review/maintainability-reviewer', 'review/pattern-recognition-specialist', 'review/performance-reviewer', 'review/previous-comments-reviewer', 'review/project-standards-reviewer', 'review/reliability-reviewer', 'review/security-reviewer', 'review/testing-reviewer', 'workflow/bug-reproduction-validator', 'workflow/pr-comment-resolver', 'workflow/spec-flow-analyzer', 'workflow/systematic-implementer'];
+export declare const BUNDLED_SKILL_NAMES: readonly ['agent-browser', 'agent-native-architecture', 'agent-native-audit', 'ce:brainstorm', 'ce:compound', 'ce:compound-refresh', 'ce:ideate', 'ce:plan', 'ce:review', 'ce:work', 'compound-docs', 'deepen-plan', 'deploy-docs', 'document-review', 'frontend-design', 'git-clean-gone-branches', 'git-commit', 'git-commit-push-pr', 'git-worktree', 'lfg', 'onboarding', 'orchestrating-subagents', 'report-bug-ce', 'reproduce-bug', 'resolve-pr-feedback', 'slfg', 'test-browser', 'test-driven-development', 'todos', 'using-systematic', 'writing-skills'];
 export type BundledAgentName = (typeof BUNDLED_AGENT_NAMES)[number];
 export type BundledSkillName = (typeof BUNDLED_SKILL_NAMES)[number];

package/dist/lib/config-schema.d.ts

@@ -16,9 +16,9 @@
 import { z } from 'zod';
 export declare const WorkflowGuardSchema: z.ZodDefault<z.ZodObject<{
     mode: z.ZodDefault<z.ZodEnum<{
+        disabled: "disabled";
         observe: "observe";
         protected: "protected";
-        disabled: "disabled";
     }>>;
     debug: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strict>>;
@@ -28,30 +28,30 @@ export declare const AgentOverlaySchema: z.ZodObject<{
     temperature: z.ZodOptional<z.ZodNumber>;
     top_p: z.ZodOptional<z.ZodNumber>;
     mode: z.ZodOptional<z.ZodEnum<{
-        subagent: "subagent";
-        primary: "primary";
         all: "all";
+        primary: "primary";
+        subagent: "subagent";
     }>>;
     color: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+        accent: "accent";
+        error: "error";
+        info: "info";
         primary: "primary";
         secondary: "secondary";
-        accent: "accent";
         success: "success";
         warning: "warning";
-        error: "error";
-        info: "info";
     }>, z.ZodString]>>;
     steps: z.ZodOptional<z.ZodNumber>;
     hidden: z.ZodOptional<z.ZodBoolean>;
     disable: z.ZodOptional<z.ZodBoolean>;
     skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
     permission: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodEnum<{
-        ask: "ask";
         allow: "allow";
+        ask: "ask";
         deny: "deny";
     }>, z.ZodRecord<z.ZodString, z.ZodEnum<{
-        ask: "ask";
         allow: "allow";
+        ask: "ask";
         deny: "deny";
     }>>]>>>;
 }, z.core.$strict>;
@@ -61,41 +61,41 @@ export declare const CategoryOverlaySchema: z.ZodObject<{
     temperature: z.ZodOptional<z.ZodNumber>;
     top_p: z.ZodOptional<z.ZodNumber>;
     mode: z.ZodOptional<z.ZodEnum<{
-        subagent: "subagent";
-        primary: "primary";
         all: "all";
+        primary: "primary";
+        subagent: "subagent";
     }>>;
     color: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+        accent: "accent";
+        error: "error";
+        info: "info";
         primary: "primary";
         secondary: "secondary";
-        accent: "accent";
         success: "success";
         warning: "warning";
-        error: "error";
-        info: "info";
     }>, z.ZodString]>>;
     steps: z.ZodOptional<z.ZodNumber>;
     hidden: z.ZodOptional<z.ZodBoolean>;
     skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
     permission: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodEnum<{
-        ask: "ask";
         allow: "allow";
+        ask: "ask";
         deny: "deny";
     }>, z.ZodRecord<z.ZodString, z.ZodEnum<{
-        ask: "ask";
         allow: "allow";
+        ask: "ask";
         deny: "deny";
     }>>]>>>;
 }, z.core.$strict>;
 export declare const PiSubagentsAgentOverlaySchema: z.ZodObject<{
     thinking: z.ZodOptional<z.ZodEnum<{
-        off: "off";
-        minimal: "minimal";
+        high: "high";
         low: "low";
+        max: "max";
         medium: "medium";
-        high: "high";
+        minimal: "minimal";
+        off: "off";
         xhigh: "xhigh";
-        max: "max";
     }>>;
     max_turns: z.ZodOptional<z.ZodNumber>;
     tools: z.ZodOptional<z.ZodString>;
@@ -103,13 +103,13 @@ export declare const PiSubagentsAgentOverlaySchema: z.ZodObject<{
 }, z.core.$strict>;
 export declare const PiSubagentsCategoryOverlaySchema: z.ZodObject<{
     thinking: z.ZodOptional<z.ZodEnum<{
-        off: "off";
-        minimal: "minimal";
+        high: "high";
         low: "low";
+        max: "max";
         medium: "medium";
-        high: "high";
+        minimal: "minimal";
+        off: "off";
         xhigh: "xhigh";
-        max: "max";
     }>>;
     max_turns: z.ZodOptional<z.ZodNumber>;
     tools: z.ZodOptional<z.ZodString>;
@@ -118,13 +118,13 @@ export declare const PiSubagentsCategoryOverlaySchema: z.ZodObject<{
 export declare const PiSubagentsSchema: z.ZodDefault<z.ZodObject<{
     categories: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
         thinking: z.ZodOptional<z.ZodEnum<{
-            off: "off";
-            minimal: "minimal";
+            high: "high";
             low: "low";
+            max: "max";
             medium: "medium";
-            high: "high";
+            minimal: "minimal";
+            off: "off";
             xhigh: "xhigh";
-            max: "max";
         }>>;
         max_turns: z.ZodOptional<z.ZodNumber>;
         tools: z.ZodOptional<z.ZodString>;
@@ -132,13 +132,13 @@ export declare const PiSubagentsSchema: z.ZodDefault<z.ZodObject<{
     }, z.core.$strict>>>;
     agents: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
         thinking: z.ZodOptional<z.ZodEnum<{
-            off: "off";
-            minimal: "minimal";
+            high: "high";
             low: "low";
+            max: "max";
             medium: "medium";
-            high: "high";
+            minimal: "minimal";
+            off: "off";
             xhigh: "xhigh";
-            max: "max";
         }>>;
         max_turns: z.ZodOptional<z.ZodNumber>;
         tools: z.ZodOptional<z.ZodString>;

package/dist/lib/config.d.ts

@@ -64,10 +64,10 @@ export interface LoadConfigOptions {
 export declare function loadConfig(projectDir: string, options?: LoadConfigOptions): SystematicConfig;
 export declare function loadConfigWithSources(projectDir: string, options?: LoadConfigOptions): SourceAwareConfigResult;
 export declare function getConfigPaths(projectDir: string): {
-    customConfig?: string | undefined;
-    customDir?: string | undefined;
     userConfig: string;
     projectConfig: string;
     userDir: string;
     projectDir: string;
+    customConfig?: string | undefined;
+    customDir?: string | undefined;
 };

package/dist/lib/pi-delegate-tool.d.ts

@@ -5,7 +5,7 @@ import { type AgentCatalogEntry } from './agent-resolver.js';
 /** Fixed, non-configurable delegation bounds (LOCKED). */
 export declare const MAX_DELEGATE_TURNS = 20;
 export declare const DELEGATE_TOOL_NAME = "systematic_delegate";
-export declare const DELEGATE_EXECUTION_MODE: "sequential";
+export declare const DELEGATE_EXECUTION_MODE: 'sequential';
 export type DelegateOutcome = 'completed' | 'turn_limit' | 'aborted' | 'failed';
 /** The parent session's model, narrowed to always-defined (validated before use). */
 export type DelegateParentModel = NonNullable<ExtensionContext['model']>;

package/dist/lib/question-attestation.d.ts

@@ -1,4 +1,4 @@
-export declare const CANONICAL_QUESTION_WORDING: "Confirm the requested guarded transition.";
+export declare const CANONICAL_QUESTION_WORDING: 'Confirm the requested guarded transition.';
 export type QuestionPurpose = 'transition' | 'session-disablement';
 export type QuestionAnswerClassification = 'affirmative' | 'non-affirmative';
 export type QuestionAttestationReasonCode = 'already-bound' | 'already-consumed' | 'already-disabled' | 'call-session-mismatch' | 'challenge-expired' | 'challenge-consumed' | 'invalid-input' | 'no-attestation' | 'non-affirmative' | 'rejected' | 'replay' | 'scope-mismatch' | 'substitution' | 'unknown-challenge' | 'unknown-request';

package/dist/lib/skills.d.ts

@@ -28,7 +28,7 @@ export interface SkillInfo {
     argumentHint?: string;
     allowedTools?: string;
 }
-export declare const SKILL_FRONTMATTER_FIELDS: readonly ["name", "description", "argument-hint", "disable-model-invocation", "allowed-tools", "license", "compatibility", "metadata", "user-invocable", "agent", "model", "context", "subtask"];
+export declare const SKILL_FRONTMATTER_FIELDS: readonly ['name', 'description', 'argument-hint', 'disable-model-invocation', 'allowed-tools', 'license', 'compatibility', 'metadata', 'user-invocable', 'agent', 'model', 'context', 'subtask'];
 /**
  * Parse skill frontmatter from already-read file content. Split out from
  * `extractFrontmatter` so callers that also need the body (e.g. discovered-skill

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fro.bot/systematic",
-  "version": "3.5.2",
+  "version": "3.5.4",
   "description": "Compound-engineering loops for OpenCode, Pi, and Claude Code",
   "type": "module",
   "homepage": "https://fro.bot/systematic",
@@ -55,6 +55,7 @@
     "registry:drift": "bun scripts/generate-registry.ts --check",
     "registry:validate": "bun scripts/build-registry.ts --validate-only",
     "claude-code:build": "bun scripts/build-claude-code-plugin.ts",
+    "postupgrade": "bun run build && bun run agent-browser:build",
     "prepublishOnly": "bun run build && bun run schema:generate"
   },
   "keywords": [
@@ -92,14 +93,14 @@
   "devDependencies": {
     "@biomejs/biome": "2.5.6",
     "@earendil-works/pi-coding-agent": "0.80.10",
-    "@opencode-ai/plugin": "1.18.8",
-    "@opencode-ai/sdk": "1.18.8",
+    "@opencode-ai/plugin": "1.18.9",
+    "@opencode-ai/sdk": "1.18.9",
     "@semantic-release/exec": "7.1.0",
     "@tintinweb/pi-subagents": "0.14.3",
     "@types/bun": "latest",
     "@types/js-yaml": "4.0.9",
-    "@types/node": "24.13.3",
-    "agent-browser": "0.33.0",
+    "@types/node": "26.1.2",
+    "agent-browser": "0.33.1",
     "ajv": "8.20.0",
     "ajv-formats": "3.0.1",
     "conventional-changelog-conventionalcommits": "9.3.1",
@@ -108,7 +109,7 @@
     "semantic-release": "25.0.8",
     "semantic-release-export-data": "1.2.0",
     "typebox": "1.3.8",
-    "typescript": "6.0.3"
+    "typescript": "7.0.2"
   },
   "dependencies": {
     "js-yaml": "^4.1.1",

package/skills/using-systematic/SKILL.md

@@ -113,3 +113,5 @@ The four capabilities are subagent delegation, blocking user interaction, task t
 The bootstrap inlines the active harness profile naming the exact mechanisms for this session—consult it.
 
 When a mechanism is unavailable, present numbered options in chat and wait for questions, maintain a visible list for task tracking, and dispatch delegation sequentially or do the work inline.
+
+Check the workflow guard availability once per execution unit. If the guard reports `unavailable` or `guard-unavailable`, treat it as terminal for that unit: do not retry `systematic_workflow_start` or `systematic_workflow_complete`. Use the documented unguarded fallback only when authorized, and report the unavailable state once.