@hecer/yoke 1.14.0 → 1.15.1

package/dist/retrofit/config.js

@@ -6,7 +6,16 @@ import { AgentSchema, PermissionProfileSchema } from '../agents/contracts.js';
 import { ProjectQualityDefaultsSchema } from '../quality/types.js';
 import { DEFAULT_OUTPUT_POLICY } from '../output/types.js';
 import { ToolActionSchema } from '../execution/actions.js';
+import { CodeIntelligenceModeSchema } from '../code-intelligence/contracts.js';
+export { CodeIntelligenceModeSchema };
 const CodeGraphSchema = z.enum(['graphify', 'serena']);
+const CodeIntelligenceProcessSchema = z.object({ command: z.string().min(1), args: z.array(z.string()).max(32).optional() });
+const CodeIntelligenceSchema = z.object({
+    mode: CodeIntelligenceModeSchema.default('off'), workspaceId: z.string().min(1).optional(),
+    graft: CodeIntelligenceProcessSchema.optional(), graphify: CodeIntelligenceProcessSchema.optional(), serena: CodeIntelligenceProcessSchema.optional(),
+    policy: z.object({ allowNetwork: z.boolean().default(false), excludePatterns: z.array(z.string().min(1)).max(100).default([]), maxFileBytes: z.number().int().positive().max(20_000_000).optional() }).optional(),
+    limits: z.object({ tokenBudget: z.number().int().min(128).max(16000).default(2400), timeoutMs: z.number().int().min(100).max(600000).default(10000), maxBytes: z.number().int().positive().max(10_000_000).default(2_000_000), maxBackends: z.number().int().min(1).max(3).default(3) }).optional(),
+});
 const SmokeFlowSchema = z.object({ name: z.string().min(1), path: z.string().min(1), landmark: z.string().optional() });
 const SmokeSchema = z.object({ baseUrl: z.string().min(1), flows: z.array(SmokeFlowSchema).min(1) });
 const OutputPolicySchema = z.object({
@@ -118,6 +127,7 @@ export const YokeConfigSchema = z.object({
         max: z.number().int().positive().default(4),
     }).optional(),
     codeGraph: CodeGraphSchema.optional(),
+    codeIntelligence: CodeIntelligenceSchema.optional(),
     smoke: SmokeSchema.optional(),
     quality: ProjectQualityDefaultsSchema.optional(),
     output: OutputPolicySchema.optional(),

package/dist/retrofit/gitignore.js

@@ -3,6 +3,7 @@ import { join } from 'node:path';
 export const YOKE_IGNORE_LINES = [
     '.yoke/worktrees/',
     '.yoke/backup/',
+    '.yoke/code-intelligence/',
     '.yoke/loop-status.json',
     '.yoke/loop.log',
     '.yoke/loop.lock',

package/dist/retrofit/plan.js

@@ -10,7 +10,7 @@ export function planClaudeRetrofit(canonDir, targetDir) {
     return planClaude(canonDir, targetDir);
 }
 export const PLANNERS = {
-    claude: (c, t, cg) => planClaude(c, t, undefined, cg),
+    claude: (c, t, cg, ci) => planClaude(c, t, undefined, cg, undefined, ci),
     codex: planCodex,
     gemini: planGemini,
     qwen: planQwen,
@@ -18,7 +18,7 @@ export const PLANNERS = {
     kilo: planKilo,
     pi: planPi,
 };
-export function planRetrofit(canonDir, targetDir, agents, codeGraph = 'graphify') {
+export function planRetrofit(canonDir, targetDir, agents, codeGraph = 'graphify', codeIntelligence = 'off') {
     const seen = new Set();
     const merged = [];
     for (const action of baseContextActions(canonDir)) {
@@ -26,7 +26,7 @@ export function planRetrofit(canonDir, targetDir, agents, codeGraph = 'graphify'
         merged.push(action);
     }
     for (const agent of agents) {
-        for (const action of PLANNERS[agent](canonDir, targetDir, codeGraph)) {
+        for (const action of PLANNERS[agent](canonDir, targetDir, codeGraph, codeIntelligence)) {
             if (seen.has(action.target))
                 continue;
             seen.add(action.target);

package/dist/retrofit/planners/claude.js

@@ -22,7 +22,7 @@ This project uses the Yoke harness. Baseline instructions:
 ${rtkNote ? `\n${rtkNote}\n` : ''}${composeNote ? `\n${composeNote}\n` : ''}
 ${PRESERVE_SCAFFOLD}
 `;
-export function planClaude(canonDir, targetDir, wslAvailable = hasWsl(), codeGraph = 'graphify', gstackDetected = detectGstack(targetDir)) {
+export function planClaude(canonDir, targetDir, wslAvailable = hasWsl(), codeGraph = 'graphify', gstackDetected = detectGstack(targetDir), codeIntelligence = 'off') {
     const manifest = loadManifest(join(canonDir, 'manifest.yaml'));
     const actions = [];
     for (const skill of manifest.skills) {
@@ -45,8 +45,8 @@ export function planClaude(canonDir, targetDir, wslAvailable = hasWsl(), codeGra
     actions.push({
         kind: 'write',
         target: '.mcp.json',
-        content: JSON.stringify({ mcpServers: mcpServers(codeGraph) }, null, 2) + '\n',
-        reason: 'MCP servers (code-graph + playwright)',
+        content: JSON.stringify({ mcpServers: mcpServers(codeGraph, codeIntelligence, targetDir) }, null, 2) + '\n',
+        reason: codeIntelligence === 'off' ? 'MCP servers (code-graph + playwright)' : 'Yoke code-intelligence facade + playwright',
     });
     if (rtkHookable) {
         actions.push({

package/dist/retrofit/planners/codex.js

@@ -3,8 +3,8 @@ import { join } from 'node:path';
 import { loadManifest } from '../../canon/manifest.js';
 import { mcpServers, rtkInstruction } from '../tools.js';
 import { skillPackageActions } from '../skill-actions.js';
-function tomlMcp(codeGraph) {
-    const servers = mcpServers(codeGraph);
+function tomlMcp(codeGraph, codeIntelligence, targetDir) {
+    const servers = mcpServers(codeGraph, codeIntelligence, targetDir);
     // Codex reads MCP servers from ~/.codex/config.toml. This project-level file is a
     // ready-to-merge snippet; users append these blocks to their global config.
     return Object.entries(servers)
@@ -14,7 +14,7 @@ function tomlMcp(codeGraph) {
     })
         .join('\n');
 }
-export function planCodex(canonDir, _targetDir, codeGraph = 'graphify') {
+export function planCodex(canonDir, targetDir, codeGraph = 'graphify', codeIntelligence = 'off') {
     const manifest = loadManifest(join(canonDir, 'manifest.yaml'));
     const baseline = readFileSync(join(canonDir, 'AGENTS.md'), 'utf8');
     const actions = manifest.skills.flatMap(skill => skillPackageActions(canonDir, skill, 'codex'));
@@ -32,8 +32,8 @@ export function planCodex(canonDir, _targetDir, codeGraph = 'graphify') {
     }, {
         kind: 'write',
         target: '.codex/config.toml',
-        content: `# Yoke project configuration. Codex loads this in trusted repositories.\n\n[features]\nhooks = true\n\n${tomlMcp(codeGraph)}`,
-        reason: 'MCP servers (code-graph + playwright)',
+        content: `# Yoke project configuration. Codex loads this in trusted repositories.\n\n[features]\nhooks = true\n\n${tomlMcp(codeGraph, codeIntelligence, targetDir)}`,
+        reason: codeIntelligence === 'off' ? 'MCP servers (code-graph + playwright)' : 'Yoke code-intelligence facade + playwright',
     }, {
         kind: 'write',
         target: '.codex/hooks.json',

package/dist/retrofit/planners/gemini.js

@@ -8,7 +8,7 @@ import { skillPackageActions } from '../skill-actions.js';
 function tomlString(s) {
     return '"""\n' + s.replace(/\\/g, '\\\\').replace(/"""/g, '\\"\\"\\"') + '\n"""';
 }
-export function planGemini(canonDir, _targetDir, codeGraph = 'graphify') {
+export function planGemini(canonDir, targetDir, codeGraph = 'graphify', codeIntelligence = 'off') {
     const manifest = loadManifest(join(canonDir, 'manifest.yaml'));
     const actions = [];
     // GEMINI.md: baseline + instruction for commands outside the rewrite hook.
@@ -56,7 +56,7 @@ export function planGemini(canonDir, _targetDir, codeGraph = 'graphify') {
         target: '.gemini/settings.json',
         merge: true,
         content: JSON.stringify({
-            mcpServers: mcpServers(codeGraph),
+            mcpServers: mcpServers(codeGraph, codeIntelligence, targetDir),
             context: { fileName: ['AGENTS.md', 'GEMINI.md'] },
             hooks: { BeforeTool: [{ matcher: '^run_shell_command$', hooks: [{ name: 'yoke-rtk', type: 'command', command: 'node .gemini/hooks/gemini-rtk-hook.mjs' }] }] },
         }, null, 2) + '\n',

package/dist/retrofit/planners/kilo.js

@@ -15,7 +15,7 @@ permission:
 
 Review the observed diff and test evidence. Do not modify files. Return only actionable findings grounded in evidence.
 `;
-export function planKilo(canonDir, _targetDir, codeGraph = 'graphify') {
+export function planKilo(canonDir, targetDir, codeGraph = 'graphify', codeIntelligence = 'off') {
     const manifest = loadManifest(join(canonDir, 'manifest.yaml'));
     const baseline = readFileSync(join(canonDir, 'AGENTS.md'), 'utf8');
     const actions = manifest.skills.flatMap(skill => skillPackageActions(canonDir, skill, 'kilo'));
@@ -31,7 +31,7 @@ export function planKilo(canonDir, _targetDir, codeGraph = 'graphify') {
         content: JSON.stringify({
             $schema: 'https://app.kilo.ai/config.json',
             instructions: ['AGENTS.md', '.yoke/context/*.md'],
-            mcp: openCodeMcpServers(codeGraph),
+            mcp: openCodeMcpServers(codeGraph, codeIntelligence, targetDir),
         }, null, 2) + '\n',
         reason: 'Kilo instructions + MCP servers',
     }, {

package/dist/retrofit/planners/opencode.js

@@ -15,7 +15,7 @@ tools:
 
 Review the observed diff and test evidence. Do not modify files. Return only actionable findings grounded in evidence.
 `;
-export function planOpenCode(canonDir, _targetDir, codeGraph = 'graphify') {
+export function planOpenCode(canonDir, targetDir, codeGraph = 'graphify', codeIntelligence = 'off') {
     const manifest = loadManifest(join(canonDir, 'manifest.yaml'));
     const baseline = readFileSync(join(canonDir, 'AGENTS.md'), 'utf8');
     const actions = manifest.skills.flatMap(skill => skillPackageActions(canonDir, skill, 'opencode'));
@@ -31,7 +31,7 @@ export function planOpenCode(canonDir, _targetDir, codeGraph = 'graphify') {
         content: JSON.stringify({
             $schema: 'https://opencode.ai/config.json',
             instructions: ['AGENTS.md', '.yoke/context/*.md'],
-            mcp: openCodeMcpServers(codeGraph),
+            mcp: openCodeMcpServers(codeGraph, codeIntelligence, targetDir),
         }, null, 2) + '\n',
         reason: 'OpenCode instructions + MCP servers',
     }, {

package/dist/retrofit/planners/pi.js

@@ -4,7 +4,7 @@ import { loadManifest } from '../../canon/manifest.js';
 import { rtkInstruction } from '../tools.js';
 import { PRESERVE_SCAFFOLD } from '../preserve.js';
 import { skillPackageActions } from '../skill-actions.js';
-export function planPi(canonDir, _targetDir, _codeGraph = 'graphify') {
+export function planPi(canonDir, _targetDir, _codeGraph = 'graphify', _codeIntelligence = 'off') {
     const manifest = loadManifest(join(canonDir, 'manifest.yaml'));
     const baseline = readFileSync(join(canonDir, 'AGENTS.md'), 'utf8');
     const actions = manifest.skills.flatMap(skill => skillPackageActions(canonDir, skill, 'pi'));
@@ -17,7 +17,7 @@ export function planPi(canonDir, _targetDir, _codeGraph = 'graphify') {
         kind: 'write',
         target: '.pi/settings.json',
         merge: true,
-        content: JSON.stringify({ skills: ['.pi/skills'] }, null, 2) + '\n',
+        content: JSON.stringify({ skills: ['./skills'] }, null, 2) + '\n',
         reason: 'Pi project skill discovery',
     });
     return actions;

package/dist/retrofit/planners/qwen.js

@@ -8,7 +8,7 @@ import { skillPackageActions } from '../skill-actions.js';
 function tomlString(s) {
     return '"""\n' + s.replace(/\\/g, '\\\\').replace(/"""/g, '\\"\\"\\"') + '\n"""';
 }
-export function planQwen(canonDir, _targetDir, codeGraph = 'graphify') {
+export function planQwen(canonDir, targetDir, codeGraph = 'graphify', codeIntelligence = 'off') {
     const manifest = loadManifest(join(canonDir, 'manifest.yaml'));
     const actions = [];
     // QWEN.md: baseline + instruction for commands outside the rewrite hook.
@@ -56,7 +56,7 @@ export function planQwen(canonDir, _targetDir, codeGraph = 'graphify') {
         target: '.qwen/settings.json',
         merge: true,
         content: JSON.stringify({
-            mcpServers: mcpServers(codeGraph),
+            mcpServers: mcpServers(codeGraph, codeIntelligence, targetDir),
             context: { fileName: ['AGENTS.md', 'QWEN.md'] },
             hooks: { PreToolUse: [{ matcher: '^run_shell_command$', hooks: [{ name: 'yoke-rtk', type: 'command', command: 'node .qwen/hooks/qwen-rtk-hook.mjs' }] }] },
         }, null, 2) + '\n',

package/dist/retrofit/skill-actions.js

@@ -52,7 +52,7 @@ export function skillPackageActions(canonDir, skill, provider) {
         .map(file => ({
         kind: 'write',
         target: `${roots[provider]}/${skill.id}/${file.relativePath}`,
-        content: (provider === 'claude' || provider === 'qwen') && skill.invocation === 'manual' && file.relativePath === 'SKILL.md'
+        content: (provider === 'claude' || provider === 'qwen' || provider === 'pi') && skill.invocation === 'manual' && file.relativePath === 'SKILL.md'
             ? manualClaudeSkill(file.content, skill)
             : portableContent(file),
         executable: file.executable,

package/dist/retrofit/tools.js

@@ -8,15 +8,17 @@ const CODE_GRAPH_SERVERS = {
         args: ['start-mcp-server', '--open-web-dashboard', 'false'],
     },
 };
-export function mcpServers(codeGraph = 'graphify') {
-    return {
-        [codeGraph]: CODE_GRAPH_SERVERS[codeGraph],
-        playwright: { command: 'npx', args: ['@playwright/mcp@latest'] },
-    };
+export function mcpServers(codeGraph = 'graphify', codeIntelligence = 'off', targetDir = '.') {
+    if (codeIntelligence !== 'off')
+        return {
+            'code-intelligence': { command: 'yoke', args: ['code-intelligence-server', `--workspace=${targetDir}`, `--mode=${codeIntelligence}`] },
+            playwright: { command: 'npx', args: ['@playwright/mcp@latest'] },
+        };
+    return { [codeGraph]: CODE_GRAPH_SERVERS[codeGraph], playwright: { command: 'npx', args: ['@playwright/mcp@latest'] } };
 }
 /** OpenCode-family CLIs use an object with a local command array, not Claude's mcpServers shape. */
-export function openCodeMcpServers(codeGraph = 'graphify') {
-    return Object.fromEntries(Object.entries(mcpServers(codeGraph)).map(([name, server]) => [name, {
+export function openCodeMcpServers(codeGraph = 'graphify', codeIntelligence = 'off', targetDir = '.') {
+    return Object.fromEntries(Object.entries(mcpServers(codeGraph, codeIntelligence, targetDir)).map(([name, server]) => [name, {
             type: 'local',
             command: [server.command, ...server.args],
             enabled: true,

package/dist/setup/command.js

@@ -75,6 +75,7 @@ export async function runSetup(targetDir, opts = {}) {
                 ? detected.agents
                 : modelProviders.length ? ['qwen'] : [host ?? 'claude'];
     const defaultGraph = opts.codeGraph ?? existing?.codeGraph ?? 'graphify';
+    const defaultCodeIntelligence = opts.codeIntelligence ?? existing?.codeIntelligence?.mode ?? 'off';
     const defaultLoop = opts.loop ?? existing?.loop.enabled ?? true;
     const defaultRunner = opts.runner ?? existing?.runner?.agent ?? (host && defaultAgents.includes(host) ? host : defaultAgents[0] ?? host ?? 'claude');
     const defaultPolicy = opts.decisionPolicy ?? existing?.loop.decisionPolicy ?? (existing?.loop.onAmbiguity === 'abort' ? 'critical' : 'auto');
@@ -90,6 +91,7 @@ export async function runSetup(targetDir, opts = {}) {
     try {
         let agents = defaultAgents;
         let codeGraph = defaultGraph;
+        let codeIntelligence = defaultCodeIntelligence;
         let loop = defaultLoop;
         let runner = defaultRunner;
         let decisionPolicy = defaultPolicy;
@@ -112,7 +114,7 @@ export async function runSetup(targetDir, opts = {}) {
             agents = [...agents, 'qwen'];
         if (!agents.includes(runner))
             agents = [...agents, runner];
-        const code = runRetrofit(targetDir, { loop, agents, codeGraph, host });
+        const code = runRetrofit(targetDir, { loop, agents, codeGraph, codeIntelligence, host });
         if (code !== 0)
             return code;
         applyActions(presetActions, targetDir, { backupDir: join(targetDir, '.yoke', 'backups', `model-presets-${Date.now()}`) });

package/docs/AGENT-HARDENING-2026-09-16.md

@@ -0,0 +1,32 @@
+# Agent and skill hardening — 2026-09-16
+
+This is a bounded source/contract audit, not a guarantee of defect-free operation or a seven-provider model benchmark. Pi was already supported in 1.13.0. The npm release observed at the start of this audit was 1.15.0; the fixes below are included in the 1.15.1 release changeset.
+
+## Implemented fixes
+
+- Pi telemetry now sums finalized assistant messages across tool turns. Streaming snapshots, turn-end echoes and agent-end transcript replays are not double-counted. Model switches remain visible; missing turn measurements produce partial usage, not a complete total. Optional cost/cache fields are reported as full totals only when every finalized turn measures them. An interrupted unfinalized turn remains unknown.
+- Pi successful tool completions and OpenCode/Kilo completed tool envelopes reset the progress watchdog. Failed tools and streaming updates do not. Total, idle and progress budgets remain enforced; no timeout defaults were relaxed.
+- Structured results from Claude, Codex, Gemini, OpenCode and Kilo are rejected when followed by a terminal error. Pi errored/aborted assistant messages cannot supply a verdict. Claude child-agent events cannot masquerade as parent verdicts or parent usage. Qwen's existing parent/result handling remains in place.
+- OpenCode/Kilo conflicting effort/variant aliases fail before process launch; matching aliases produce one flag.
+- Pi settings use a skill path relative to `.pi/settings.json`. Manual-only skills receive Pi's native `disable-model-invocation` marker, just as Claude/Qwen already did.
+- Schedule estimation simulates typical/lower/upper per-story durations with dependency and write-conflict constraints. A sparse per-story sample no longer inherits stronger confidence from unrelated pooled samples. These are empirical scenarios, not calibrated probabilities or deadlines.
+- Eight missing supporting files are now packaged and linked: three delegation templates, a review template, three debugging guides and a testing anti-pattern guide. Shared instructions prohibit nested orchestration inside Yoke workers, explain host capability fallbacks, preserve acceptance/review gates, and distinguish budgets from time estimates. Removed unsupported claims about guaranteed subagent quality and fixed debugging speed/success rates.
+- The Code Intelligence coordinator unit test now replaces the separate sandbox adapter too, avoiding accidental real Serena startup. It checks an actual rename in the isolated transaction output, approval gating, and that the source project remains untouched (apply does not merge).
+
+## Compatibility and operation
+
+Existing projects can refresh the canonical skills with `yoke retrofit . --agent=all`, or select one harness. Inspect the merge-aware retrofit diff and backups. Existing custom skill paths remain user-owned; remove an obsolete `.pi/skills` settings entry only after confirming it is the old Yoke-generated entry. The correct settings-relative entry is `./skills`.
+
+Current Pi also requires project trust before loading project-local skills in headless runs. Trust is an explicit user decision, not something Yoke grants automatically. See [the harness guide](HARNESSES.md). Tool allowlists are not an OS sandbox: extensions and native configuration still require review.
+
+## Evidence and limits
+
+Final local validation: 1,281 tests passed, two platform-specific tests skipped, 140 test files passed. TypeScript lint/build, Canon validation, README metadata check and npm package dry run passed; npm audit reported zero vulnerabilities. A follow-up Canon run after the supporting-document additions passed (36 passed, one platform-specific skip). The subsequent release request targets 1.15.1; publication status is recorded by the matching GitHub release and npm registry, not inferred from these local checks.
+
+Regression cases were observed failing before their fixes, then passing in targeted runs. Coverage includes multi-turn/chunked Pi usage, missing measurements, model changes, terminal errors, effort conflicts, sparse timing samples, manual invocation and packaged templates. Canon validation scans all registered skill packages; the content audit focused on orchestration, execution and verification instructions, not a formal proof of every skill's behavior.
+
+The local Pi 0.85.1 CLI help confirms JSON mode, tool allowlists, provider/model/thinking selection and project-trust controls. Qwen and Kilo were not found on this machine's PATH. No paid/authenticated seven-agent task matrix, cross-platform native sandbox comparison, measured speedup or quality benchmark was performed. Faster feedback is a workflow recommendation, not a measured improvement claim. Existing full verification gates remain required.
+
+A read-only README provenance scan found no supported C2PA structure and completed the supported scan. Cryptographic verification and signer trust remain unknown because no conforming verifier/trust policy was supplied. Metadata privacy was unsupported for this text format. Proprietary keyed watermark detection was unavailable; no authorship conclusion follows. No marks were removed.
+
+Primary references: [Pi JSON mode](https://github.com/earendil-works/pi/blob/main/packages/coding-agent/docs/json.md), [Pi event types](https://github.com/earendil-works/pi/blob/main/packages/agent/src/types.ts), [Pi skills](https://github.com/earendil-works/pi/blob/main/packages/coding-agent/docs/skills.md), [OpenCode run implementation](https://github.com/anomalyco/opencode/blob/dev/packages/opencode/src/cli/cmd/run.ts).

package/docs/CODE-INTELLIGENCE.md

@@ -0,0 +1,36 @@
+# Yoke Code Intelligence
+
+Yoke integrates Graphify, Graft and Serena as a federation. Their repositories are not merged into Yoke and their individual MCP tools are not published to agents. Yoke publishes one snapshot-bound facade with six tools:
+
+`code_context`, `code_symbol`, `code_trace`, `code_impact`, `code_edit_preview`, and `code_edit_apply`.
+
+## Enable it
+
+```sh
+yoke setup . --yes --code-intelligence=active
+# or, for an existing project:
+yoke retrofit . --code-intelligence=active
+```
+
+The default is `off`, which preserves the previous `codeGraph` behavior. `shadow` enables a read-only canary and keeps all edits blocked. `active` enables read operations and snapshot-bound edit previews. The generated host configuration exposes only Yoke's facade, so an agent cannot accidentally combine duplicate backend tools.
+
+## Backend roles and tested pins
+
+| Backend | Role | Launch command | Pin checked during integration |
+|---|---|---|---|
+| [Graft](https://github.com/trailhq/Graft) | structural code search, repo map, call graph | `graft mcp` | `05760b07abc0e427f5af8ad378889ee402c5afc6` / 0.17.0 |
+| [Graphify](https://github.com/Graphify-Labs/graphify) | architecture/document knowledge graph | `python -m graphify.serve` | `67f99bd0059dd1bac9e44382907ef9f10098b39f` / 0.9.56 |
+| [Serena](https://github.com/oraios/serena) | LSP symbols, references, implementations and semantic edits | `serena start-mcp-server --project-from-cwd --context codex` | `701e7c843f46c6a649203a488cece1bf19f1df90` / 1.7.1-dev |
+
+Install and pin these tools in the project or developer environment before enabling the facade. Yoke never installs `latest` during a task. Missing tools produce an explicit `partial` response with backend warnings and provenance; they are never interpreted as “no references”.
+
+## Safety contract
+
+- Every request is tied to a workspace and a content-addressed snapshot of committed and uncommitted, non-sensitive files.
+- Paths are workspace-relative; traversal, symlinks, `.env`/key material and policy-excluded paths are rejected.
+- Read calls are bounded by timeout and output budgets. Results carry backend, version, source path, content hash, resolution and freshness.
+- Edits run in a disposable Yoke sandbox. Preview writes a durable plan and diff but requires an approval record created by the Yoke control layer.
+- Apply rechecks the snapshot, plan expiry, plan hash, an exclusive transaction lock and idempotency. It produces a managed worktree and does not commit or merge; the existing Yoke loop and gates remain authoritative for integration.
+- Network access is not needed by the facade. Backend installation and any backend-specific network behavior remain an explicit environment concern.
+
+For a host that has no native MCP support (currently Pi), use the normal Yoke loop and bounded CLI/skill adapter. Yoke does not invent a second MCP transport for that host.

package/docs/HARNESSES.md

@@ -4,6 +4,10 @@ Yoke 1.13.0 adds first-class adapters for OpenCode, Kilo and Pi coding agent. Th
 
 This is a CLI integration, not an authentication bundle. Install the selected harness, log in or configure its API provider, and verify it independently before starting a Yoke loop.
 
+For current Pi installations, the official package is `@earendil-works/pi-coding-agent` (the executable remains `pi`). Pi support has existed since Yoke 1.13.0; no additional adapter is required.
+
+Pi project trust is separate from Yoke's permission profile. Current Pi ignores project-local settings and skills in headless mode unless the project is trusted. Review the project resources, open Pi interactively, use `/trust`, then restart before running Yoke. Yoke does not silently grant project trust or enable arbitrary project extensions. For isolated worktrees, review the applicable trust scope as well. See [Pi project trust](https://github.com/earendil-works/pi/blob/main/packages/coding-agent/README.md#project-trust).
+
 ## Setup and retrofit
 
 Select one of the new harnesses explicitly:
@@ -58,6 +62,8 @@ runner:
 
 This becomes `--provider openai --model gpt-5.6 --thinking high`. Pi calls `variant` and `reasoningEffort` the same underlying thinking-level selection; configuring both with different values is rejected.
 
+OpenCode and Kilo likewise map these two fields to a single `--variant`: matching values are emitted once and conflicting values are rejected before spawning a process.
+
 The same fields are available on routing workers and quality critic/repair roles. Routing evidence is keyed by harness, provider, model, reasoning effort and variant, so a model profile does not inherit another profile's success history.
 
 ## Permission profiles and honest limits

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "yoke",
-  "version": "1.14.0",
+  "version": "1.15.1",
   "description": "Cross-agent coding harness for seven supported CLIs: curated skill canon, mechanical safety gates, autonomous loop with proof artifacts. CLI: npm i -g @hecer/yoke",
   "contextFileName": "GEMINI-EXTENSION.md"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hecer/yoke",
-  "version": "1.14.0",
+  "version": "1.15.1",
   "description": "One harness, seven agents, zero trust in \"done\" — cross-agent coding harness for Claude Code, Codex CLI, Gemini CLI, Qwen Code, OpenCode, Kilo and Pi: one skill canon, mechanical safety gates, an autonomous loop with screenshot/video proofs.",
   "type": "module",
   "bin": {