@hcflabs/pi-subagent 27.10.8 → 28.0.0

package/extensions/workflow.ts

@@ -33,6 +33,11 @@ const AccessSchema = StringEnum(DIRECT_ACCESS, { description: ACCESS_GUIDANCE })
 const DryRunSchema = Type.Boolean({ description: "Optional. When true, run every launch validation and return the resolved plan without starting workers, saving state, or reserving the checkout." });
 const ContinueFromSchema = Type.String({ pattern: "^D[1-9][0-9]*\\.[1-9][0-9]*$", description: "Optional direct worker reference such as D7.1. Continues that finished worker's Pi session in a new tab with this task; role must equal the recorded Role." });
 
+const RepoSchema = Type.String({
+	minLength: 1,
+	description: "Optional Repository target: a child Git repository as a path relative to the Pi working directory, such as team/service. The worker runs there, and admission reserves that checkout. A task value overrides the request value. Omit it to use the Pi working directory. Use subagent_repos to list targets.",
+});
+
 const PathsSchema = Type.Array(Type.String({ minLength: 1 }), {
 	minItems: 1,
 	maxItems: 32,
@@ -46,6 +51,7 @@ export const DelegationSchema = Type.Object({
 	access: AccessSchema,
 	paths: Type.Optional(PathsSchema),
 	continueFrom: Type.Optional(ContinueFromSchema),
+	repo: Type.Optional(RepoSchema),
 	kind: Type.Optional(DirectKindSchema),
 	model: Type.Optional(ModelSchema),
 	modelClass: Type.Optional(ModelClassSchema),
@@ -59,6 +65,7 @@ export const DirectWorkflowSchema = Type.Object({
 	access: Type.Optional(AccessSchema),
 	paths: Type.Optional(PathsSchema),
 	continueFrom: Type.Optional(ContinueFromSchema),
+	repo: Type.Optional(RepoSchema),
 	kind: Type.Optional(DirectKindSchema),
 	model: Type.Optional(ModelSchema),
 	modelClass: Type.Optional(ModelClassSchema),
@@ -114,8 +121,18 @@ function normalizePaths(value: Static<typeof DelegationSchema>, path: string): s
 	});
 }
 
-function normalizeDelegation(value: Static<typeof DelegationSchema>, path: string): Delegation {
+/** Check the selector shape here. Admission and launch resolve it against the Pi working directory. */
+function normalizeRepo(value: string, path: string): string {
+	const normalized = text(value, path);
+	if (/[\u0000-\u001f\u007f-\u009f]/.test(normalized) || normalized.startsWith("/") || normalized.split(/[\\/]/).includes("..")) {
+		throw new Error(`${path} must be a relative path without control characters or .. components.`);
+	}
+	return normalized;
+}
+
+function normalizeDelegation(value: Static<typeof DelegationSchema>, path: string, requestRepo?: string): Delegation {
 	const paths = normalizePaths(value, path);
+	const repo = value.repo === undefined ? requestRepo : normalizeRepo(value.repo, `${path}.repo`);
 	return {
 		role: text(value.role, `${path}.role`),
 		name: normalizeTaskName(value.name, `${path}.name`),
@@ -123,6 +140,7 @@ function normalizeDelegation(value: Static<typeof DelegationSchema>, path: strin
 		access: value.access,
 		...(paths === undefined ? {} : { paths }),
 		...(value.continueFrom === undefined ? {} : { continueFrom: value.continueFrom }),
+		...(repo === undefined ? {} : { repo }),
 		kind: "text",
 		...(value.model === undefined ? {} : { model: text(value.model, `${path}.model`) }),
 		...(value.modelClass === undefined ? {} : { modelClass: value.modelClass }),
@@ -164,9 +182,10 @@ export function parseWorkflow(value: unknown): ParsedWorkflow {
 	if (!mode) throw new Error("direct workflow must select exactly one of single, tasks, or chain.");
 	const input = value as DirectInput;
 	if (mode === "single" && !hasDelegation(input)) throw new Error("direct workflow requires role, name, task, and access.");
+	const repo = input.repo === undefined ? undefined : normalizeRepo(input.repo, "workflow.repo");
 	const workflow: ParsedWorkflow = mode === "single" ? { mode, delegations: [normalizeDelegation(input as Static<typeof DelegationSchema>, "workflow")] }
-		: mode === "parallel" ? { mode, delegations: input.tasks!.map((item, index) => normalizeDelegation(item, `tasks[${index}]`)) }
-		: { mode, delegations: input.chain!.map((item, index) => normalizeDelegation(item, `chain[${index}]`)) };
+		: mode === "parallel" ? { mode, delegations: input.tasks!.map((item, index) => normalizeDelegation(item, `tasks[${index}]`, repo)) }
+		: { mode, delegations: input.chain!.map((item, index) => normalizeDelegation(item, `chain[${index}]`, repo)) };
 	const continued = workflow.delegations.flatMap(({ continueFrom }) => continueFrom === undefined ? [] : [continueFrom]);
 	if (new Set(continued).size !== continued.length) throw new Error("A direct request may continue each worker at most once.");
 	return workflow;
@@ -175,6 +194,9 @@ export function parseWorkflow(value: unknown): ParsedWorkflow {
 /** A direct request is a writer request when any task declares write access. */
 export const writesCheckout = (workflow: ParsedWorkflow): boolean => workflow.delegations.some(({ access }) => access === "write");
 
+/** The Repository target of each task. `undefined` means the Pi working directory. */
+export const workflowRepos = (workflow: ParsedWorkflow): Array<string | undefined> => workflow.delegations.map(({ repo }) => repo);
+
 /** `dryRun` is a tool-call option, not part of the direct workflow or the durable isolated request. */
 export function parseDelegateTask(value: unknown): ParsedDelegateTask {
 	let dryRun = false;
@@ -185,6 +207,7 @@ export function parseDelegateTask(value: unknown): ParsedDelegateTask {
 		value = rest;
 	}
 	if (value && typeof value === "object" && !Array.isArray(value) && (value as { mode?: unknown }).mode === "isolated") {
+		if (Object.hasOwn(value, "repo")) throw new Error("mode isolated does not accept repo yet. Start Pi in the repository, or use mode direct.");
 		return { mode: "isolated", request: parseExecuteRequest(value), dryRun };
 	}
 	return { mode: "direct", workflow: parseWorkflow(value), dryRun };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hcflabs/pi-subagent",
-  "version": "27.10.8",
+  "version": "28.0.0",
   "description": "Delegate bounded direct work or durable checked isolated task graphs to Pi roles.",
   "keywords": [
     "pi-package",
@@ -74,6 +74,7 @@
     "@hcflabs/pi-herdr": "^0.5.0",
     "@hcflabs/pi-multi-codex": "^3.0.0",
     "@hcflabs/pi-process": "^0.2.0",
+    "@hcflabs/pi-repo": "^0.1.0",
     "@hcflabs/pi-task-models": "^9.0.0",
     "proper-lockfile": "^4.1.2"
   },

package/skills/pi-subagent/SKILL.md

@@ -30,7 +30,7 @@ To build on a finished direct worker, add `continueFrom` with its reference (suc
 
 # Isolated requests
 
-Give the request a unique ID and goal. Give each task a unique ID, kind, Role, model class, bounded requirements, deliverable, `dependsOn`, and `contextFrom`. Changesets require focused task checks, and a graph containing changesets requires final checks. The root must have a `package.json` test script; `pnpm test` is added to final checks if missing and runs against the combined tip before Main promotion. Text context may name only completed text tasks, preserves declared order, and implies a scheduling dependency; do not repeat an edge in `dependsOn` and `contextFrom`.
+Give the request a unique ID and goal. Give each task a unique ID, kind, Role, model class, bounded requirements, deliverable, `dependsOn`, and `contextFrom`. Changesets require focused task checks, and a graph containing changesets requires final checks. Admission adds the repository's Full suite to final checks if missing: the `repoSuites` config entry, `pnpm test` for a root `package.json` test script, or `make test` for a Makefile `test` target. The suite runs against the combined tip before Main promotion. If no suite exists, tell the user to add one or configure `repoSuites`. Text context may name only completed text tasks, preserves declared order, and implies a scheduling dependency; do not repeat an edge in `dependsOn` and `contextFrom`.
 
 Every changeset becomes ready automatically after preliminary checks pass. While a locally owned changeset task is actively working, the user may open `/subagent` to queue bounded same-worker revisions or withdraw all still-pending instructions into the native editor and submit one replacement. Cancellation after withdrawal leaves the originals removed; already-claimed instructions cannot be recalled. Each revision must produce a new clean commit and rerun preliminary checks. If a worker's turn ends with uncommitted changes, the runner sends it one commit reminder per attempt; this uses no correction, and a worktree still dirty afterwards needs attention. When no queued revision remains, the runner seals and durably records the exact ready candidate without waiting for sibling workers. There is no guaranteed post-completion editing window, and late follow-ups fail visibly.