@oai404iao/pi-subagent 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 oai404iao
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/LICENSES/DeepSeek-Harness-MIT.txt

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 DeepSeek
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,357 @@
+# @oai404iao/pi-subagent
+
+Durable, continuable subagents for [Pi](https://github.com/earendil-works/pi-mono).
+The design independently adapts the
+[DeepSeek Harness subagent seam](https://github.com/deepseek-ai/deepseek-harness/tree/4d03472cd098dc48a630e526ca620f4f37f18a0e/docs/subsystems)
+to Pi's extension and SDK APIs.
+
+Compatibility: Pi 0.84.2 or newer; tested against 0.84.2.
+
+> npm identity: `@oai404iao/pi-subagent`. Once the selected version is
+> available on npm, install it from npm; use a local checkout before its
+> bootstrap or when testing unreleased source.
+
+## Features
+
+- **Named providers**
+  - `spawn`: fresh child with no parent conversation
+  - `fork`: one-shot child seeded through the parent's latest completed turn
+- **Two lifecycles**
+  - foreground one-shot runs return the child's final answer
+  - background continuable runs return a child session id immediately
+- **Foreground-only policy** that removes background scheduling and lifecycle controls
+- **Independent context and session** for every child
+- **Bundled presets without filesystem writes by default**, with opt-in
+  materialization, backup, and replacement
+- **Durable descriptors and lineage** stored in child JSONL sessions
+- **Cold resume** through `send_message`
+- **Control plane** with listing and interruption
+- **Child-to-parent `report` channel** for continuable children
+- **Nested delegation** with an absolute persisted depth limit
+- **Dynamic agent-name enums** generated from the effective user/project catalog
+- **Parallel-safe delegation**: multiple `subagent` calls in one assistant message may overlap
+- **Composable tool ceilings** that preserve model/extension tool decisions
+- **Usage accounting, streaming progress, output caps, and custom TUI rendering**
+
+Children run through Pi's SDK in the same Node.js process, but each owns a separate `AgentSession`, context window, session file, tool selection, and extension runtime.
+
+## Install
+
+When the selected version is available on npm:
+
+```bash
+pi install npm:@oai404iao/pi-subagent
+```
+
+Before its npm bootstrap, or for an unreleased local checkout:
+
+```bash
+pi install /absolute/path/to/pi-extensions/pi-subagent
+```
+
+Restart Pi or run `/reload`.
+
+For a temporary test:
+
+```bash
+pi -e /absolute/path/to/pi-extensions/pi-subagent
+```
+
+This implementation targets Pi `0.84.2`.
+
+## Model-facing tools
+
+| Tool | Behavior |
+| --- | --- |
+| `subagent` | Starts a fresh child. Background continuable mode is the default unless configured otherwise; foreground-only mode always waits for the answer. |
+| `subagent_fork` | Starts a foreground one-shot child with the parent's completed-turn history. The in-flight tool turn is excluded. |
+| `send_message` | Sends the next FIFO turn to a direct continuable child; cold-resumes a persisted child when background execution is enabled. |
+| `interrupt_agent` | Requests cancellation of a live descendant's current turn without deleting its session. Active only when background execution is enabled. |
+| `list_agents` | Lists direct children or all descendants as `running`, `idle`, or `ready`. Active only when background execution is enabled. |
+| `report` | Child-only return channel. Installed automatically in continuable children. |
+
+The `/subagents` command shows the effective scheduling mode, available agent definitions,
+and the current descendant catalog.
+
+At session startup, the `agent` parameter on `subagent` and `subagent_fork` is registered
+as an enum of the effective catalog. Nested delegation tools receive an activation-scoped
+enum. If the effective catalog is empty, both delegation tools are inactive. Run `/reload`
+after adding, removing, or renaming an agent definition so the session schema is refreshed.
+
+### Typical prompts
+
+```text
+Start scout and reviewer as independent background subagents, then continue inspecting the failing tests.
+```
+
+```text
+Use subagent_fork with planner to plan the change using our completed discussion.
+```
+
+```text
+List my subagents, then send the scout a follow-up asking for exact call sites.
+```
+
+Pi executes sibling tool calls in parallel, so this package deliberately accepts one delegation per `subagent` call instead of embedding a separate `tasks` array.
+
+## Agent definitions
+
+The package includes `scout`, `planner`, `reviewer`, and `worker`. By default,
+these bundled definitions are read directly from the package. Startup does
+**not** create, replace, remove, or back up files in the Pi agent directory.
+`/subagents` reports those defaults as `(bundled)`.
+
+User and project definitions can override the same names without modifying
+package files. Runtime locations and precedence are:
+
+1. bundled package definitions
+2. `<Pi agent dir>/agents/*.md`
+3. nearest trusted `.pi/agents/*.md`
+
+Project definitions replace user and bundled definitions with the same name
+when project scope is enabled. Project agents are disabled by the default
+`agentScope: "user"`. Setting the scope to `project` explicitly selects only
+project definitions; `both` loads bundled definitions, user overrides, then
+project overrides.
+
+When upgrading from a version that synchronized presets by default, unchanged
+previously managed files are recognized read-only and do not shadow newer
+package defaults. Edited managed files remain user overrides. The default
+never deletes or rewrites those existing files.
+
+### Opt-in managed preset synchronization
+
+Set `syncBundledAgents: true` only if you explicitly want the package to
+materialize its bundled definitions into:
+
+```text
+<Pi agent dir>/agents/*.md
+```
+
+With that opt-in, runtime discovery uses the managed user files rather than
+reading package copies directly, and `/subagents` reports built-ins as
+`(user)`. Synchronization behavior is then:
+
+1. **First startup:** missing presets are installed. A different pre-existing same-name file
+   is backed up before the bundled version replaces it.
+2. **Ordinary restart of the same release:** user edits are preserved.
+3. **Plugin update:** differing user presets are backed up, then replaced with the new
+   bundled versions. A bundled prompt hash change also triggers this refresh even if the
+   package version was not bumped.
+4. **Retired preset:** a formerly bundled name is backed up and removed so an obsolete
+   prompt does not remain silently active.
+5. Files whose names were never managed bundled presets are left untouched.
+
+Synchronization holds a cross-process lock, then preflights and stages the whole update
+before changing agent files. If a commit fails, it rolls back already-applied changes and
+fails extension startup rather than falling back to package prompts. Same-name symbolic
+links are preserved as symbolic links inside the backup directory before the user path is
+replaced. An invalid synchronization manifest is copied to a timestamped `.corrupt-*` file
+and startup fails closed until the manifest is repaired or deliberately removed.
+
+Synchronization state and backups live at:
+
+```text
+<Pi agent dir>/.pi-subagent/agents-manifest.json
+<Pi agent dir>/.pi-subagent/backups/<timestamp>-to-<version>/*.md
+```
+
+The startup notification reports installed/updated files and exact backup
+paths. To restore a customization after an update, copy its backup over the
+corresponding user agent file; later startups of that same plugin release
+preserve the restored edit.
+
+Add or edit user agents as Markdown files with YAML frontmatter:
+
+```markdown
+---
+name: security-reviewer
+description: Review authentication and authorization changes
+tools: read, grep, find, ls, bash
+model: openai/gpt-5.4
+thinking: high
+---
+
+Review the delegated change. Report concrete security defects with exact paths.
+```
+
+Frontmatter:
+
+| Key | Required | Meaning |
+| --- | --- | --- |
+| `name` | yes | Stable tool-visible name. |
+| `description` | yes | Short catalog description. |
+| `tools` | no | Comma-separated hard ceiling; use `none` for no ordinary tools, `$mutation` for the active mutation implementation, or omit to preserve the child runtime's active tools. |
+| `model` | no | `provider/model` or an unambiguous model id; omitted means inherit the parent model. |
+| `thinking` | no | `off`, `minimal`, `low`, `medium`, `high`, `xhigh`, or `max`. |
+
+For continuable children, `report` is retained even when the agent has a tool allowlist.
+
+### Tool policy and inherited extensions
+
+An explicit `tools` list is a **maximum permission ceiling**, not an instruction to
+blindly activate every registered tool:
+
+1. Pi builds the child registry from only the listed tools and runtime-mandatory controls.
+2. Inherited extensions run their `session_start` handlers and select tools for the child model.
+3. The agent allowlist narrows that active set. A registered but extension-disabled explicit
+   tool fails loud instead of being re-enabled.
+
+The foreground-only runtime policy is applied after this composition and removes background
+lifecycle controls even when an agent definition names them.
+
+The reserved logical tool `$mutation` lets one definition work with both standard Pi and
+model-specific tool extensions:
+
+- if an inherited extension leaves `apply_patch` active, `$mutation` resolves to `apply_patch`;
+- otherwise it resolves to the active built-in `edit` and/or `write` tools;
+- if no mutation implementation is active, child creation fails before the first model request.
+
+The bundled `worker` uses `$mutation`. For example, to use
+`@oai404iao/pi-codex-minimal-tools` inside workers:
+
+```json
+{
+  "inheritExtensions": true
+}
+```
+
+The Codex extension may then select `apply_patch` and suppress `edit`/`write`; the
+subagent ceiling preserves that decision. Tools injected by other extensions but not named
+by the agent remain unavailable. Unknown logical names beginning with `$` are rejected.
+
+Omitting `tools` intentionally opts out of a hard ceiling and preserves the effective tool
+set chosen by Pi and inherited extensions. This is more permissive than an explicit list.
+
+## Configuration
+
+Configuration is loaded from:
+
+1. `<Pi agent dir>/subagent.json`
+2. nearest trusted `.pi/subagent.json` (project overrides)
+
+See [`config.example.json`](config.example.json) and [`config.schema.json`](config.schema.json).
+
+```json
+{
+  "$schema": "/path/to/pi-subagent/config.schema.json",
+  "agentScope": "user",
+  "syncBundledAgents": false,
+  "maxDepth": 3,
+  "enableRunInBackground": true,
+  "defaultBackground": true,
+  "reportDelivery": "wakeup",
+  "inheritExtensions": false,
+  "maxOutputBytes": 51200
+}
+```
+
+| Setting | Default | Meaning |
+| --- | --- | --- |
+| `agentScope` | `user` | Select user definitions, project definitions, or user definitions followed by project overrides. |
+| `syncBundledAgents` | `false` | **User-level config only.** Opt in to writing managed bundled presets into `<Pi agent dir>/agents`. `true` may install, replace, retire, and back up those files. |
+| `maxDepth` | `3` | Absolute delegation depth; a top-level Pi session is depth 0. |
+| `enableRunInBackground` | `true` | Enable continuable background children and their model-facing lifecycle controls. Set `false` for strict foreground-only mode. |
+| `defaultBackground` | `true` | Default scheduling for fresh `subagent` calls when background execution is enabled. |
+| `reportDelivery` | `wakeup` | `wakeup` starts/queues a parent turn; `quiet` waits for the parent's next turn. |
+| `inheritExtensions` | `false` | Load other Pi extensions in child runtimes. This package filters itself out; explicit agent tool ceilings still apply. |
+| `maxOutputBytes` | `51200` | Cap for parent-visible foreground output, reports, and settlement notices. Full output remains in the child session. |
+
+Invalid configuration and unknown child tool names fail loud before the child's first model request.
+
+### Foreground-only mode
+
+```json
+{
+  "enableRunInBackground": false
+}
+```
+
+In this mode:
+
+- `subagent` always waits for the child's final answer, even when `defaultBackground` is `true`;
+- `run_in_background` is removed from the model-facing schema at session startup;
+- a forced `run_in_background: true` call is rejected before a child is created;
+- nested subagents inherit the foreground-only policy through the durable runtime snapshot;
+- `send_message`, `interrupt_agent`, and `list_agents` are removed from the active
+  model tool set, including inside nested children;
+- sibling foreground calls may still execute in parallel in one assistant message.
+
+`subagent_fork` is already foreground-only and is unchanged. The `/subagents` command
+remains available for human inspection of historical children, but persisted continuable
+children cannot be resumed until background execution is re-enabled. Run `/reload` or
+restart Pi after changing this setting so the active tool set and displayed schema are
+refreshed.
+
+## Lifecycle
+
+```text
+parent AgentSession
+  └─ subagent tool
+      └─ provider (spawn | fork)
+          └─ child Session + pi-subagent/descriptor
+              └─ optional live Activation (AgentSessionRuntime)
+                  ├─ one or more FIFO turns
+                  └─ owned continuable descendants
+```
+
+### One-shot
+
+The caller waits for one isolated child run. Only the child's last non-empty assistant output enters the parent tool result. The runtime is disposed on every path; the child session remains available as a trace when persistence is enabled.
+
+### Continuable
+
+The start tool resolves at prompt preflight acceptance and returns the stable child session id. When an activation settles:
+
+1. the runtime sends the parent a settlement notice with the stop reason and closing message;
+2. the child runtime is disposed once its owned descendants are done;
+3. its persistent session becomes `ready`;
+4. `send_message` can cold-resume that same session for another FIFO turn.
+
+A child can explicitly call `report` before settlement. Reports and settlement notices are separate by design.
+
+### Fork boundary
+
+The parent is executing a tool when `subagent_fork` starts, so its current assistant/tool-result sequence is incomplete. The provider copies only through the latest assistant message whose stop reason is not `toolUse`. This avoids seeding an invalid unbalanced tool turn.
+
+## Security
+
+- Extensions and subagents run with the user's OS permissions.
+- Opt-in `syncBundledAgents: true` synchronizes bundled presets into the user
+  agent directory and may create backups under
+  `<Pi agent dir>/.pi-subagent/backups`. The default does not write these
+  paths.
+- Project-local agents are repository-controlled prompts. They are loaded only when the project is trusted and configuration enables project scope.
+- `inheritExtensions` is disabled by default because loading an extension in a child executes its code and may duplicate external side effects.
+- Explicit agent tool lists are enforced as registry ceilings, but this controls model visibility and execution composition rather than providing an OS sandbox.
+- A child may send content only to its recorded direct parent through `report`; `send_message` likewise requires direct-parent identity.
+
+## Current limitations
+
+- Activations and ownership are process-local; there is no cross-process lease or durable mailbox.
+- Pi does not expose stable inbox message ids, so control acknowledgements return the child id rather than a delivery id.
+- A process crash can lose a prompt accepted just before Pi writes it to the child JSONL; there is no durable mailbox for accepted-but-unlogged work.
+- `interrupt_agent` is fire-and-return and relies on Pi's current `AgentSession.abort()` queue behavior.
+- The fork provider is intentionally one-shot.
+- Structured-output delegation is not implemented yet.
+- Continuable starts require a persisted parent session; ephemeral (`--no-session`) parents can use foreground one-shot delegation only.
+- `subagent_fork` needs a persisted parent to copy completed history; before the first completed turn its safe prefix is empty and it behaves like a fresh child.
+- The extension currently uses Pi's `ModelRegistry` compatibility facade to recover the active `ModelRuntime`; this is why the package pins its tested Pi generation.
+
+## Development
+
+```bash
+npm install
+npm run check
+```
+
+The test suite includes provider-boundary, descriptor, configuration, discovery, extension-load, foreground-run, background-settlement, and cold-resume coverage with a scripted local model.
+
+## License and publication status
+
+MIT © 2026 oai404iao. See [LICENSE](LICENSE) and
+[THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md).
+
+Managed global-preset synchronization is opt-in through
+`syncBundledAgents: true`; the default reads bundled definitions without
+writing user files.

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,27 @@
+# Third-party notices
+
+## DeepSeek Harness design reference
+
+`@oai404iao/pi-subagent` independently implements Pi extension and SDK
+integration. It adapts high-level subagent design concepts—named spawn/fork
+providers, isolated child sessions, continuable children, and model-facing
+control tools—from the public
+[DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) subagent
+documentation at revision
+[`4d03472cd098dc48a630e526ca620f4f37f18a0e`](https://github.com/deepseek-ai/deepseek-harness/commit/4d03472cd098dc48a630e526ca620f4f37f18a0e).
+
+No DeepSeek Harness source file is included in this package. The local
+implementation has different runtime APIs, persistence format, provider
+boundary, and test fixtures.
+
+DeepSeek Harness is MIT-licensed:
+
+```text
+Copyright (c) 2026 DeepSeek
+```
+
+The verified upstream license snapshot is preserved in
+[`LICENSES/DeepSeek-Harness-MIT.txt`](LICENSES/DeepSeek-Harness-MIT.txt).
+The immutable revision, blob identifiers, raw URLs, and SHA-256 checksums for
+the source document and license are recorded in
+[`provenance/deepseek-harness-4d03472.json`](provenance/deepseek-harness-4d03472.json).

package/agents/planner.md

@@ -0,0 +1,8 @@
+---
+name: planner
+description: Turn repository evidence into an implementation plan
+tools: read, grep, find, ls
+thinking: high
+---
+
+Produce a concrete implementation plan grounded in the repository. Identify files to change, interfaces, lifecycle and error paths, and focused verification. Do not edit files. Prefer the smallest coherent design.

package/agents/reviewer.md

@@ -0,0 +1,8 @@
+---
+name: reviewer
+description: Review changes for correctness, regressions, and missing tests
+tools: read, grep, find, ls, bash
+thinking: high
+---
+
+Review the requested change as a critical code reviewer. Inspect relevant source and tests, prioritize concrete defects over style preferences, and report findings by severity with exact paths and actionable fixes. Do not edit files.

package/agents/scout.md

@@ -0,0 +1,8 @@
+---
+name: scout
+description: Fast read-only codebase reconnaissance with compressed findings
+tools: read, grep, find, ls, bash
+thinking: low
+---
+
+Explore the repository narrowly and quickly. Find the files, symbols, dependencies, and constraints needed by the delegated task. Do not edit files. Return concise findings with exact paths and call out uncertainty.

package/agents/worker.md

@@ -0,0 +1,8 @@
+---
+name: worker
+description: General-purpose implementation agent with coding tools
+tools: read, grep, find, ls, bash, $mutation, subagent, subagent_fork, send_message, interrupt_agent, list_agents
+thinking: high
+---
+
+Implement the delegated task end to end. Inspect before editing, keep changes scoped, follow repository instructions, and run focused verification. Report changed files, checks run, and any remaining limitation.

package/config.example.json

@@ -0,0 +1,11 @@
+{
+  "$schema": "./config.schema.json",
+  "agentScope": "user",
+  "syncBundledAgents": false,
+  "maxDepth": 3,
+  "enableRunInBackground": true,
+  "defaultBackground": true,
+  "reportDelivery": "wakeup",
+  "inheritExtensions": false,
+  "maxOutputBytes": 51200
+}

package/config.schema.json

@@ -0,0 +1,61 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "urn:pi:pi-subagent:config",
+  "title": "pi-subagent configuration",
+  "description": "Global or project-local configuration for the pi-subagent extension.",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "$schema": {
+      "type": "string",
+      "description": "Path or URL to this schema.",
+      "default": "./config.schema.json"
+    },
+    "agentScope": {
+      "type": "string",
+      "enum": ["user", "project", "both"],
+      "description": "Select user definitions, project definitions, or user definitions followed by project overrides.",
+      "default": "user"
+    },
+    "syncBundledAgents": {
+      "type": "boolean",
+      "description": "User-level configuration only. Opt in to materializing bundled presets under the Pi agent directory. When true, startup may install, replace, retire, and back up managed agent files; when false, bundled definitions are read directly without writing user files.",
+      "default": false
+    },
+    "maxDepth": {
+      "type": "integer",
+      "minimum": 0,
+      "maximum": 9007199254740991,
+      "description": "Absolute delegation depth. A top-level Pi session has depth 0.",
+      "default": 3
+    },
+    "enableRunInBackground": {
+      "type": "boolean",
+      "description": "Enable continuable background children and their model-facing lifecycle controls. Set false for strict foreground-only mode.",
+      "default": true
+    },
+    "defaultBackground": {
+      "type": "boolean",
+      "description": "Default run mode for the fresh spawn provider when background execution is enabled. Ignored in foreground-only mode.",
+      "default": true
+    },
+    "reportDelivery": {
+      "type": "string",
+      "enum": ["wakeup", "quiet"],
+      "description": "Whether child reports trigger a parent turn or wait for the parent's next turn.",
+      "default": "wakeup"
+    },
+    "inheritExtensions": {
+      "type": "boolean",
+      "description": "Load the parent's other Pi extensions in child runtimes. pi-subagent itself is filtered out and explicit agent tool ceilings still apply.",
+      "default": false
+    },
+    "maxOutputBytes": {
+      "type": "integer",
+      "minimum": 1024,
+      "maximum": 1048576,
+      "description": "Maximum child output inserted into a parent tool result, report, or settlement notice.",
+      "default": 51200
+    }
+  }
+}

package/package.json

@@ -0,0 +1,88 @@
+{
+  "name": "@oai404iao/pi-subagent",
+  "version": "0.2.0",
+  "description": "Durable, continuable subagents for Pi with spawn/fork providers and lifecycle controls.",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/oai404iao/omp.git",
+    "directory": "pi-extensions/pi-subagent"
+  },
+  "homepage": "https://github.com/oai404iao/omp/tree/main/pi-extensions/pi-subagent#readme",
+  "bugs": {
+    "url": "https://github.com/oai404iao/omp/issues"
+  },
+  "type": "module",
+  "keywords": [
+    "pi-package",
+    "pi",
+    "pi-coding-agent",
+    "extension",
+    "subagent",
+    "multi-agent"
+  ],
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "pi": {
+    "extensions": [
+      "./src/index.ts"
+    ]
+  },
+  "peerDependencies": {
+    "@earendil-works/pi-agent-core": ">=0.84.2",
+    "@earendil-works/pi-ai": ">=0.84.2",
+    "@earendil-works/pi-coding-agent": ">=0.84.2",
+    "@earendil-works/pi-tui": ">=0.84.2",
+    "typebox": "*"
+  },
+  "devDependencies": {
+    "@earendil-works/pi-agent-core": "^0.84.2",
+    "@earendil-works/pi-ai": "^0.84.2",
+    "@earendil-works/pi-coding-agent": "^0.84.2",
+    "@earendil-works/pi-tui": "^0.84.2",
+    "@types/node": "^26.2.0",
+    "tsx": "^4.20.6",
+    "typebox": "^1.1.24",
+    "typescript": "^7.0.2"
+  },
+  "scripts": {
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "tsx --test tests/**/*.test.ts",
+    "check": "npm run typecheck && npm test"
+  },
+  "files": [
+    "agents/",
+    "LICENSES/",
+    "provenance/",
+    "src/",
+    "README.md",
+    "LICENSE",
+    "THIRD_PARTY_NOTICES.md",
+    "config.example.json",
+    "config.schema.json",
+    "package.json"
+  ],
+  "engines": {
+    "node": ">=22.19.0"
+  },
+  "peerDependenciesMeta": {
+    "@earendil-works/pi-agent-core": {
+      "optional": true
+    },
+    "@earendil-works/pi-ai": {
+      "optional": true
+    },
+    "@earendil-works/pi-coding-agent": {
+      "optional": true
+    },
+    "@earendil-works/pi-tui": {
+      "optional": true
+    },
+    "typebox": {
+      "optional": true
+    }
+  },
+  "gitHead": "ef42984c0e40ef1f26ead4b4c7d149b21280e66b"
+}

package/provenance/deepseek-harness-4d03472.json

@@ -0,0 +1,20 @@
+{
+  "schemaVersion": 1,
+  "upstream": {
+    "repository": "https://github.com/deepseek-ai/deepseek-harness",
+    "revision": "4d03472cd098dc48a630e526ca620f4f37f18a0e",
+    "commitUrl": "https://github.com/deepseek-ai/deepseek-harness/commit/4d03472cd098dc48a630e526ca620f4f37f18a0e"
+  },
+  "files": {
+    "LICENSE": {
+      "gitBlobSha": "c1f7a78e89e4e4dc7b86664c3b3c76eb5eee1785",
+      "sha256": "ebb4f09972aee8608be255debaf78451a68e95c290f55c240dec2ecfa16ea6be",
+      "rawUrl": "https://raw.githubusercontent.com/deepseek-ai/deepseek-harness/4d03472cd098dc48a630e526ca620f4f37f18a0e/LICENSE"
+    },
+    "docs/subsystems/subagent.md": {
+      "gitBlobSha": "9a21cecce9144c3aa4c268d753c0aeff5f3ac178",
+      "sha256": "f8210c06d7e21e3981946d84e1914a057728f07f9b291a5e2a4c2a62b645d685",
+      "rawUrl": "https://raw.githubusercontent.com/deepseek-ai/deepseek-harness/4d03472cd098dc48a630e526ca620f4f37f18a0e/docs/subsystems/subagent.md"
+    }
+  }
+}