@mjasnikovs/pi-task 0.42.0 → 0.42.1

package/dist/task/implementation-guards.d.ts

@@ -16,6 +16,10 @@ export declare function implementationGuardArmed(): boolean;
  * one altered byte is a new key and a clean slate on both counters.
  */
 export declare function blockedCallReason(toolName: string, count: number): string;
+/** Every file under the task dir is host-written. MEASURED: an mx5 implementer
+ *  wrote its report over TASK_AUTO_0001.md, and the run died on its front matter. */
+export declare function targetsTaskDir(toolName: string, input: unknown): boolean;
+export declare function taskDirWriteReason(): string;
 /** The reason on the final block, which also ends the turn. */
 export declare function terminalCallReason(): string;
 export declare function consumeGuardTermination(): boolean;

package/dist/task/implementation-guards.js

@@ -1,4 +1,5 @@
 import { LoopDetector, loopKey, LOOP_THRESHOLD, LOOP_WINDOW, MAX_LOOP_RESTARTS } from './loop-detector.js';
+import { TASKS_DIR_NAME } from './task-types.js';
 /**
  * Runaway guard for the IMPLEMENTATION TURN — the one model surface with none.
  *
@@ -81,6 +82,18 @@ export function blockedCallReason(toolName, count) {
     return (`Blocked: this is the ${count}th identical ${toolName} call in this turn. `
         + `Use what you already have, or do something different, then continue the task.`);
 }
+/** Every file under the task dir is host-written. MEASURED: an mx5 implementer
+ *  wrote its report over TASK_AUTO_0001.md, and the run died on its front matter. */
+export function targetsTaskDir(toolName, input) {
+    if (!MUTATING_TOOLS.has(toolName))
+        return false;
+    const target = input?.path;
+    return typeof target === 'string' && target.split(/[\\/]/).includes(TASKS_DIR_NAME);
+}
+export function taskDirWriteReason() {
+    return (`Blocked: ${TASKS_DIR_NAME}/ belongs to pi-task and is written only by the host. `
+        + `Put your report in your reply, not in a file, then continue the task.`);
+}
 /** The reason on the final block, which also ends the turn. */
 export function terminalCallReason() {
     return (`Blocked: this turn repeated one call past every warning, so it is being stopped `
@@ -120,6 +133,9 @@ export function registerImplementationGuards(pi) {
             if (state.terminating) {
                 return { block: true, terminate: true, reason: terminalCallReason() };
             }
+            if (targetsTaskDir(event.toolName, event.input)) {
+                return { block: true, reason: taskDirWriteReason() };
+            }
             const call = { name: event.toolName, args: event.input };
             const mutating = MUTATING_TOOLS.has(event.toolName);
             const hit = mutating ? state.edits.record(call) : state.loop.record(call);

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@mjasnikovs/pi-task",
-    "version": "0.42.0",
+    "version": "0.42.1",
     "description": "Deterministic task planning and spec-orchestration for local models — crash-safe /task pipelines with verify/enforce gates, a real-time remote web view, and web/docs/fetch/worker subagent tools.",
     "type": "module",
     "main": "./dist/index.js",