@oisin-ee/oisinpi 0.7.1 → 0.8.0

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # @oisin-ee/oisinpi
 
+## 0.8.0
+
+### Patch Changes
+
+- Updated dependencies [[`50877ec`](https://github.com/oisin-ee/oisinpi/commit/50877ec0f9bba71b7f70d8bf8d3754191ac73364)]:
+  - @oisin-ee/pi-todo@0.8.0
+  - @oisin-ee/pi-prewalk@0.8.0
+  - @oisin-ee/pi-guardrails@0.8.0
+
+## 0.7.2
+
+### Patch Changes
+
+- Updated dependencies [[`f31e9a6`](https://github.com/oisin-ee/oisinpi/commit/f31e9a6043d5b7cbe351540b51f87eadf85c9af3)]:
+  - @oisin-ee/pi-guardrails@0.7.2
+  - @oisin-ee/pi-prewalk@0.7.2
+  - @oisin-ee/pi-todo@0.7.2
+
 ## 0.7.1
 
 ### Patch Changes

package/README.md

@@ -15,11 +15,11 @@ pi install npm:@oisin-ee/oisinpi
 The collection bundles the three packages in its tarball and adds no code. No member imports another, so each one also
 installs by itself.
 
-pi-wrangle is not in the collection. Install it on its own, at the same version as the `wrangle` binary
-([oisin-ee/wrangle](https://github.com/oisin-ee/wrangle)):
+pi-dogsled is not in the collection. Install it on its own, at the same version as the `dogsled` binary
+([oisin-ee/dogsled](https://github.com/oisin-ee/dogsled)):
 
 ```bash
-pi install npm:@oisin-ee/pi-wrangle@<wrangle version>
+pi install npm:@oisin-ee/pi-dogsled@<dogsled version>
 ```
 
-When pi-wrangle is active, its work widget hosts pi-todo's view. Without it, pi-todo keeps its own widget.
+When pi-dogsled is active, its work widget hosts pi-todo's view. Without it, pi-todo keeps its own widget.

package/node_modules/@oisin-ee/pi-guardrails/README.md

@@ -6,7 +6,7 @@ Agent guardrails for [pi](https://pi.dev), Claude Code, and Codex. One set of po
   under `.worktrees/`, no on-the-fly identity.
 - **Wait gate:** no `sleep`, `watch`, follow flags, `--wait`/`--watch`, or wait subcommands. Start long work in the
   background instead.
-- **Agent typing:** no `herdr agent prompt` or `pane send-*` into another agent's terminal. Use `wrangle send`.
+- **Agent typing:** no `herdr agent prompt` or `pane send-*` into another agent's terminal. Use `dogsled send`. For prompt answers, only `herdr agent send-keys` accepts `# dogsled: answer-prompt`; each use is recorded.
 - **GitOps:** no imperative `kubectl`, `helm`, `argocd`, or `nix` mutations, and no `fsck`/`mkfs`.
 - **Generated paths:** no hand-edits of lockfiles or generated files.
 

package/node_modules/@oisin-ee/pi-guardrails/dist/policies/shell.js

@@ -27,7 +27,7 @@ export const SHELL_MSG = {
     branch: "git-gate: blocked creating or resetting a branch. Per rules/30-safety-and-delivery.md, create new branches with " +
         "git worktree add -b <branch> .worktrees/<name> [<commit-ish>], or with git branch/switch -c/checkout -b " +
         "inside an agent-owned linked worktree. For a delegated child's branch, run " +
-        "`wrangle place --branch <branch> --base origin/main` instead (rules/20-delegation.md). " +
+        "`dogsled place --branch <branch> --base origin/main` instead (rules/20-delegation.md). " +
         "Forced branch resets (-B, -C, -f) are never allowed.",
     clean: 'git-gate: blocked "git clean -f" which permanently deletes untracked files. Per rules/30-safety-and-delivery.md, ' +
         'never discard work on your own — preview with "git clean -n" or ask the user.',
@@ -51,13 +51,13 @@ export const SHELL_MSG = {
         "unrelated working-tree changes can be lost or conflict on restore. Use a worktree or ask the user.",
     worktree: "git-gate: blocked creating a worktree outside repo-local .worktrees/. Per rules/30-safety-and-delivery.md, " +
         "worktrees must use git worktree add [-b <branch>] .worktrees/<name> [<commit-ish>]. For a delegated child's " +
-        "worktree, run `wrangle place --branch <branch> --base origin/main` instead (rules/20-delegation.md).",
+        "worktree, run `dogsled place --branch <branch> --base origin/main` instead (rules/20-delegation.md).",
 };
 export const TYPING_MSG = "agent-typing: blocked typing into another agent's terminal. Typed text lands in the user's draft and mixes " +
-    "with it. Message the agent through its wrangle inbox instead: the `send` tool (mcp__wrangle__send) or " +
-    "`wrangle send <name-or-pane> --message <text>`. To answer a prompt dialog in another pane with keys, add " +
-    "`# wrangle: answer-prompt` to `herdr agent send-keys`; each such use is recorded.";
-const ANSWER_PROMPT = /#\s*wrangle:\s*answer-prompt\b/u, HERDR_VALUE_OPTIONS = new Set(["--session", "--machine", "--remote"]), PANE_TYPING = new Set(["send-text", "send-keys", "send-input"]);
+    "with it. Message the agent through its dogsled inbox instead: the `send` tool (mcp__dogsled__send) or " +
+    "`dogsled send <name-or-pane> --message <text>`. To answer a prompt dialog in another pane with keys, add " +
+    "`# dogsled: answer-prompt` to `herdr agent send-keys`; each such use is recorded.";
+const ANSWER_PROMPT = /#\s*dogsled:\s*answer-prompt\b/u, HERDR_VALUE_OPTIONS = new Set(["--session", "--machine", "--remote"]), PANE_TYPING = new Set(["send-text", "send-keys", "send-input"]);
 // The herdr subcommand words after global options, through env, timeout, and shell wrappers.
 function herdrWords(inputWords) {
     const words = [...inputWords];
@@ -124,7 +124,7 @@ function shellPieces(words) {
 }
 // Typing into another agent's terminal: `herdr agent prompt`, `herdr agent send-keys`, and
 // `herdr pane send-text|send-keys|send-input` aimed at a pane that runs an agent. `agent send-keys` with
-// `# wrangle: answer-prompt` on the command line is allowed and recorded. The caller's own pane is not
+// `# dogsled: answer-prompt` on the command line is allowed and recorded. The caller's own pane is not
 // Another agent's. `isAgent` is the pane lookup; the second argument is the cwd every classifier receives.
 export function classifyAgentTyping(command, cwd = process.cwd(), isAgent = paneRunsAgent, self = process.env["HERDR_PANE_ID"]) {
     const marked = typeof command === "string" && ANSWER_PROMPT.test(command);
@@ -177,8 +177,8 @@ export const IMPERATIVE_MSG = {
 };
 export const WAIT_MSG = "wait-gate: blocked a command that waits instead of working (sleep, watch, a follow flag, a --watch or --wait " +
     "flag, or a wait subcommand). Never hold a tool call to wait, and never re-read a log to check progress. " +
-    "For long work in pi, use Wrangle `run` (mcp__wrangle__run) and continue other work. " +
-    "Use `read` (mcp__wrangle__read) for output and `stop` (mcp__wrangle__stop) to cancel the job. " +
+    "For long work in pi, use Dogsled `run` (mcp__dogsled__run) and continue other work. " +
+    "Use `read` (mcp__dogsled__read) for output and `stop` (mcp__dogsled__stop) to cancel the job. " +
     "Start long work so the host reports its exit: in Claude Code, `run_in_background` " +
     "or Monitor (the exit arrives as a message); in Codex, exec_command, then empty write_stdin calls, which " +
     "return when the process exits. " +

package/node_modules/@oisin-ee/pi-guardrails/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oisin-ee/pi-guardrails",
-  "version": "0.7.1",
+  "version": "0.8.0",
   "description": "Agent guardrails for pi, Claude Code, and Codex: Git safety, no waiting, no typing into other agents, GitOps-only clusters.",
   "keywords": [
     "claude-code",

package/node_modules/@oisin-ee/pi-guardrails/src/pi/tool-timeouts.ts

@@ -41,8 +41,8 @@ export function codeWaitViolation(
   }
   return CODE_WAITS.some((pattern) => pattern.test(code))
     ? "wait-gate: blocked a sleep or timer wait in sandbox code. Never hold a tool call to wait. Start long work with " +
-        "Wrangle `run` (mcp__wrangle__run) and continue other work. Use `read` (mcp__wrangle__read) for output " +
-        "and `stop` (mcp__wrangle__stop) to cancel the job."
+        "Dogsled `run` (mcp__dogsled__run) and continue other work. Use `read` (mcp__dogsled__read) for output " +
+        "and `stop` (mcp__dogsled__stop) to cancel the job."
     : null;
 }
 
@@ -62,8 +62,8 @@ function limitMessage(
   return (
     `timeout-gate: blocked ${toolName} ${field}=${value}. The ${field} unit is ${unit === "s" ? "seconds" : "milliseconds"} ` +
     `and the limit is ${max} (${MAX_TIMEOUT_SECONDS / 60} minutes).${unitHint} ` +
-    "For a longer job, start it with Wrangle `run` (mcp__wrangle__run) and continue other work. " +
-    "Use `read` (mcp__wrangle__read) for output and `stop` (mcp__wrangle__stop) to cancel the job. " +
+    "For a longer job, start it with Dogsled `run` (mcp__dogsled__run) and continue other work. " +
+    "Use `read` (mcp__dogsled__read) for output and `stop` (mcp__dogsled__stop) to cancel the job. " +
     "For CI, use the ci_find and ci_watch tools."
   );
 }

package/node_modules/@oisin-ee/pi-guardrails/src/policies/shell.ts

@@ -42,7 +42,7 @@ export const SHELL_MSG = {
     "git-gate: blocked creating or resetting a branch. Per rules/30-safety-and-delivery.md, create new branches with " +
     "git worktree add -b <branch> .worktrees/<name> [<commit-ish>], or with git branch/switch -c/checkout -b " +
     "inside an agent-owned linked worktree. For a delegated child's branch, run " +
-    "`wrangle place --branch <branch> --base origin/main` instead (rules/20-delegation.md). " +
+    "`dogsled place --branch <branch> --base origin/main` instead (rules/20-delegation.md). " +
     "Forced branch resets (-B, -C, -f) are never allowed.",
   clean:
     'git-gate: blocked "git clean -f" which permanently deletes untracked files. Per rules/30-safety-and-delivery.md, ' +
@@ -74,16 +74,16 @@ export const SHELL_MSG = {
   worktree:
     "git-gate: blocked creating a worktree outside repo-local .worktrees/. Per rules/30-safety-and-delivery.md, " +
     "worktrees must use git worktree add [-b <branch>] .worktrees/<name> [<commit-ish>]. For a delegated child's " +
-    "worktree, run `wrangle place --branch <branch> --base origin/main` instead (rules/20-delegation.md).",
+    "worktree, run `dogsled place --branch <branch> --base origin/main` instead (rules/20-delegation.md).",
 };
 
 export const TYPING_MSG =
   "agent-typing: blocked typing into another agent's terminal. Typed text lands in the user's draft and mixes " +
-  "with it. Message the agent through its wrangle inbox instead: the `send` tool (mcp__wrangle__send) or " +
-  "`wrangle send <name-or-pane> --message <text>`. To answer a prompt dialog in another pane with keys, add " +
-  "`# wrangle: answer-prompt` to `herdr agent send-keys`; each such use is recorded.";
+  "with it. Message the agent through its dogsled inbox instead: the `send` tool (mcp__dogsled__send) or " +
+  "`dogsled send <name-or-pane> --message <text>`. To answer a prompt dialog in another pane with keys, add " +
+  "`# dogsled: answer-prompt` to `herdr agent send-keys`; each such use is recorded.";
 
-const ANSWER_PROMPT = /#\s*wrangle:\s*answer-prompt\b/u,
+const ANSWER_PROMPT = /#\s*dogsled:\s*answer-prompt\b/u,
   HERDR_VALUE_OPTIONS: ReadonlySet<string> = new Set(["--session", "--machine", "--remote"]),
   PANE_TYPING: ReadonlySet<string> = new Set(["send-text", "send-keys", "send-input"]);
 
@@ -161,7 +161,7 @@ function shellPieces(words: Words): string | null {
 
 // Typing into another agent's terminal: `herdr agent prompt`, `herdr agent send-keys`, and
 // `herdr pane send-text|send-keys|send-input` aimed at a pane that runs an agent. `agent send-keys` with
-// `# wrangle: answer-prompt` on the command line is allowed and recorded. The caller's own pane is not
+// `# dogsled: answer-prompt` on the command line is allowed and recorded. The caller's own pane is not
 // Another agent's. `isAgent` is the pane lookup; the second argument is the cwd every classifier receives.
 export function classifyAgentTyping(
   command: Command,
@@ -229,8 +229,8 @@ export const IMPERATIVE_MSG = {
 export const WAIT_MSG =
   "wait-gate: blocked a command that waits instead of working (sleep, watch, a follow flag, a --watch or --wait " +
   "flag, or a wait subcommand). Never hold a tool call to wait, and never re-read a log to check progress. " +
-  "For long work in pi, use Wrangle `run` (mcp__wrangle__run) and continue other work. " +
-  "Use `read` (mcp__wrangle__read) for output and `stop` (mcp__wrangle__stop) to cancel the job. " +
+  "For long work in pi, use Dogsled `run` (mcp__dogsled__run) and continue other work. " +
+  "Use `read` (mcp__dogsled__read) for output and `stop` (mcp__dogsled__stop) to cancel the job. " +
   "Start long work so the host reports its exit: in Claude Code, `run_in_background` " +
   "or Monitor (the exit arrives as a message); in Codex, exec_command, then empty write_stdin calls, which " +
   "return when the process exits. " +

package/node_modules/@oisin-ee/pi-prewalk/README.md

@@ -1,6 +1,7 @@
 # @oisin-ee/pi-prewalk
 
-Prewalk starts with the active planner model. After the planning nudge, a successful `todo` call opens the handoff gate.
+Prewalk starts with the active planner model. After the planning nudge, validated local task activation opens the handoff gate.
+Without the task-provider capability, a successful `todo` call opens the gate instead. Imported workers need no bookkeeping call.
 The first subsequent `edit` or `write` result switches the session to the target model, even if that result failed.
 Nested calls through codemode also count. Without a callable `todo` tool, the gate is open.
 
@@ -27,7 +28,7 @@ The startup flags are `--prewalk`, `--no-prewalk`, and `--prewalk-into provider/
 Do not combine `--no-prewalk` with either arming flag.
 Flags affect only the startup session. New sessions use `enabled` from config. Resumed sessions do not arm automatically.
 
-For a wrangle child, add `"pi_args": ["--prewalk-into", "alias/luna"]` to its profile.
+For a dogsled child, add `"pi_args": ["--prewalk-into", "alias/luna"]` to its profile.
 To suppress configured prewalk for that child, use `"pi_args": ["--no-prewalk"]`.
 
 ## State and context

package/node_modules/@oisin-ee/pi-prewalk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oisin-ee/pi-prewalk",
-  "version": "0.7.1",
+  "version": "0.8.0",
   "description": "A one-shot planner-to-executor handoff for pi, with branch-backed Rust rules.",
   "keywords": [
     "pi-extension",

package/node_modules/@oisin-ee/pi-prewalk/src/adapter.ts

@@ -4,6 +4,7 @@ import type { BoundaryResult, SessionBoundaryDraft } from "@earendil-works/pi-co
 import type { Context, Files, Host } from "./ports.ts";
 import { branchRecords, calls } from "./branch.ts";
 import type { CallEvidence } from "./branch.ts";
+import { activeTask } from "./tasks.ts";
 import { decide } from "./wasm.ts";
 
 /**
@@ -117,6 +118,7 @@ class Adapter {
           todo.exposure === "deferred" ||
           this.#pi.getActiveTools().includes("todo"));
     return {
+      active_unit: activeTask(this.#pi.events),
       available: ctx.modelRegistry
         .getAvailable()
         .map((candidate) => `${candidate.provider}/${candidate.id}`),

package/node_modules/@oisin-ee/pi-prewalk/src/generated/prewalk_core.d.ts

@@ -55,6 +55,10 @@ export interface Facts {
      * Is todo callable (directly or through codemode)?
      */
     todo: boolean;
+    /**
+     * Current provider activation; absent preserves the legacy successful-todo rule.
+     */
+    active_unit?: boolean | undefined;
     /**
      * Todo source identity for status.
      */

package/node_modules/@oisin-ee/pi-prewalk/src/ports.ts

@@ -12,7 +12,7 @@ type Host = Pick<
   | "getThinkingLevel"
   | "setThinkingLevel"
   | "setModel"
->;
+> & { readonly events: Readonly<ExtensionAPI["events"]> };
 /** Read-only pi facts. */
 interface Context {
   readonly cwd: string;

package/node_modules/@oisin-ee/pi-prewalk/src/tasks.ts

@@ -0,0 +1,48 @@
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+
+interface ActiveProvider {
+  readonly active: () => unknown;
+}
+
+/**
+ * Validates only the capability method this consumer needs.
+ * @param {unknown} value Capability response.
+ * @returns {boolean} Whether the active query is callable.
+ */
+const isProvider = (value: unknown): value is ActiveProvider =>
+    typeof value === "object" &&
+    value !== null &&
+    "active" in value &&
+    typeof value.active === "function",
+  /**
+   * Queries current activation without loading todo or interpreting its snapshots.
+   * @param {Readonly<ExtensionAPI["events"]>} events Extension capability bus.
+   * @returns {boolean | undefined} Activation, or unavailable legacy capability.
+   */
+  activeTask = (events: Readonly<ExtensionAPI["events"]>): boolean | undefined => {
+    const replies: unknown[] = [];
+    events.emit("oisin.tasks.acquire.v1", {
+      reply: (provider: unknown): void => {
+        replies.push(provider);
+      },
+      version: 1,
+    });
+    const [provider] = replies,
+      one = 1;
+    if (replies.length !== one || !isProvider(provider)) {
+      return undefined;
+    }
+    const result: unknown = provider.active();
+    if (
+      typeof result !== "object" ||
+      result === null ||
+      !("ok" in result) ||
+      result.ok !== true ||
+      !("value" in result)
+    ) {
+      return undefined;
+    }
+    return result.value !== null && result.value !== undefined;
+  };
+
+export { activeTask };

package/node_modules/@oisin-ee/pi-todo/README.md

@@ -82,14 +82,14 @@ Outside the terminal UI, `/todos` prints the list instead.
 
 ## Shared work display
 
-When a compatible pi-wrangle extension is active, its work widget replaces the standalone todo widget.
-Tasks remain on the current Pi session branch. Wrangle receives a read-only presentation capability through `pi.events`.
-Pi-todo owns the renderer in both standalone and shared views. Wrangle hosts it above the editor without opening a popup.
+When a compatible pi-dogsled extension is active, its work widget replaces the standalone todo widget.
+Tasks remain on the current Pi session branch. Dogsled receives a read-only presentation capability through `pi.events`.
+Pi-todo owns the renderer in both standalone and shared views. Dogsled hosts it above the editor without opening a popup.
 Alt+J/K scrolls the hosted rows. Alt+I toggles their expansion. Ordinary editor keys remain unchanged.
 `/todos` and Alt+T request the shared Todos view. `/todos list` still prints the full list.
 When shared presentation ends, the standalone widget returns without changing task state.
 
-The [version 2 display contract](https://github.com/oisin-ee/wrangle/blob/main/docs/pi-work.md)
+The [version 2 display contract](https://github.com/oisin-ee/dogsled/blob/main/docs/pi-work.md)
 defines the snapshot request, acknowledgement, release, and read-only view events.
 Incompatible versions leave the standalone widget available. Rendering failures restore it without changing saved tasks.
 

package/node_modules/@oisin-ee/pi-todo/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oisin-ee/pi-todo",
-  "version": "0.7.1",
+  "version": "0.8.0",
   "description": "A todo tool for pi with a Rust core: one active task, state on the session branch.",
   "keywords": [
     "pi-extension",

package/node_modules/@oisin-ee/pi-todo/src/contract-fixture.ts

@@ -0,0 +1,103 @@
+import type { TodoParams, TodoSession } from "./tool.ts";
+import { STATE_ENTRY } from "./state.ts";
+import type { SessionEntry } from "@earendil-works/pi-coding-agent";
+import type { TodoList } from "./wasm.ts";
+import { runTodo } from "./tool.ts";
+
+interface Fixture {
+  readonly entries: SessionEntry[];
+  readonly session: TodoSession;
+  readonly call: (params: TodoParams) => TodoList;
+}
+
+/**
+ * Creates a branch-backed caller using the real tool and WASM core.
+ * @param {readonly unknown[]} snapshots Existing stored snapshots.
+ * @returns {Fixture} The tool caller and Pi append seam.
+ */
+const first = 0,
+  second = 1,
+  third = 2,
+  last = -1,
+  fixture = (snapshots: readonly unknown[] = []): Fixture => {
+    const entries = snapshots.map((data): SessionEntry => ({
+        customType: STATE_ENTRY,
+        data,
+        id: crypto.randomUUID(),
+        parentId: null,
+        timestamp: "2026-10-20T00:00:00Z",
+        type: "custom",
+      })),
+      session: TodoSession = {
+        append: (customType, data): void => {
+          entries.push({
+            customType,
+            data,
+            id: crypto.randomUUID(),
+            parentId: entries.at(last)?.id ?? null,
+            timestamp: "2026-10-20T00:00:00Z",
+            type: "custom",
+          });
+        },
+        branch: () => entries,
+        sessionId: "test-session",
+      };
+    return { call: (params) => runTodo(params, session).details, entries, session };
+  },
+  /**
+   * A complete self-assigned contract for deterministic behavior tests.
+   * @returns {NonNullable<TodoParams["contract"]>} Authored contract fields.
+   */
+  contract = (): NonNullable<TodoParams["contract"]> => ({
+    acceptance: {
+      argv: ["moon", "run", "todo-core:test"],
+      cwd: ".",
+      expected: "passes",
+      kind: "command",
+    },
+    assignment: { kind: "self" },
+    deliverable: "Executable task contracts",
+    dependsOn: [],
+    scope: { generates: [], owns: ["src/"], reads: ["README.md"], repositoryId: "oisinpi" },
+  }),
+  /**
+   * Returns the runtime ID from the first root in a tool result.
+   * @param {TodoList} list Real tool result.
+   * @returns {string} Runtime ID.
+   */
+  firstId = (list: TodoList): string => {
+    const id = list.tasks.at(first)?.unit?.reference.unitId;
+    if (id === undefined) {
+      throw new Error("Expected a runtime unit ID");
+    }
+    return id;
+  },
+  /**
+   * Requires a root identity at a known fixture position.
+   * @param {TodoList} list Tool result.
+   * @param {number} index Root position.
+   * @returns {string} Runtime ID.
+   */
+  rootId = (list: TodoList, index: number): string => {
+    const id = list.tasks.at(index)?.unit?.reference.unitId;
+    if (id === undefined) {
+      throw new Error("Expected root identity");
+    }
+    return id;
+  },
+  /**
+   * Requires a child identity from the first outcome.
+   * @param {TodoList} list Tool result.
+   * @param {number} index Child position.
+   * @returns {string} Runtime ID.
+   */
+  childId = (list: TodoList, index: number): string => {
+    const id = list.tasks.at(first)?.subtasks?.at(index)?.unit?.reference.unitId;
+    if (id === undefined) {
+      throw new Error("Expected child identity");
+    }
+    return id;
+  };
+
+export { childId, contract, first, firstId, fixture, last, rootId, second, third };
+export type { Fixture };

package/node_modules/@oisin-ee/pi-todo/src/display.ts

@@ -41,8 +41,14 @@ const emptyCount = 0,
       active = list.tasks.flatMap((task) => [
         ...(task.status === "in_progress" ? [task.content] : []),
         ...(task.subtasks ?? [])
-          .filter((child: Readonly<Subtask>) => child.status === "in_progress")
-          .map((child: Readonly<Subtask>) => `${task.content} → ${child.content}`),
+          .filter(
+            (child: Readonly<Pick<Subtask, "content" | "status">>) =>
+              child.status === "in_progress",
+          )
+          .map(
+            (child: Readonly<Pick<Subtask, "content" | "status">>) =>
+              `${task.content} → ${child.content}`,
+          ),
       ]),
       current =
         active.length > emptyCount

package/node_modules/@oisin-ee/pi-todo/src/gate.ts

@@ -0,0 +1,79 @@
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import type { TaskProvider } from "./provider.ts";
+import { ownsTodo } from "./lifecycle.ts";
+
+/** Exact structured reads and workflow controls, never command-text inference. */
+const controls = new Set([
+    "ask",
+    "codemode",
+    "interview",
+    "todo",
+    "tool_search",
+    "read",
+    "ls",
+    "find",
+    "grep",
+    "hypa_read",
+    "hypa_ls",
+    "hypa_find",
+    "hypa_grep",
+    "web_search",
+    "web_fetch",
+    "lsp_diagnostics",
+    "ctx_search",
+    "ctx_stats",
+    "mcp__codebase_memory__search_graph",
+    "mcp__codebase_memory__get_code_snippet",
+    "mcp__codebase_memory__trace_path",
+    "mcp__codebase_memory__detect_changes",
+    "hindsight_search_knowledge_pages",
+    "hindsight_list_knowledge_pages",
+    "hindsight_read_knowledge_page",
+    "hindsight_reflect",
+    "hindsight_sync_status",
+    "hindsight_diagnose",
+    "hindsight_capture_initiative",
+    "mcp__dogsled__spawn",
+    "mcp__dogsled__send",
+    "mcp__dogsled__cancel",
+    "mcp__dogsled__close",
+    "mcp__dogsled__stop",
+    "mcp__dogsled__read",
+    "mcp__dogsled__status",
+    "mcp__dogsled__inbox",
+  ]),
+  /**
+   * Checks actual calls and leases execution-bearing calls.
+   * @param {Readonly<ExtensionAPI>} pi Runtime hooks and metadata.
+   * @param {Readonly<TaskProvider>} provider Task state and leases.
+   */
+  registerGate = (
+    pi: Readonly<Pick<ExtensionAPI, "on" | "getAllTools">>,
+    provider: Readonly<TaskProvider>,
+  ): void => {
+    pi.on("tool_call", (event: Readonly<{ toolName: string; toolCallId: string }>, ctx) => {
+      if (!ownsTodo(pi)) {
+        return { block: false };
+      }
+      provider.context(ctx);
+      if (controls.has(event.toolName)) {
+        return { block: false };
+      }
+      const active = provider.capability().active();
+      if (!active.ok || active.value === null) {
+        return {
+          block: true,
+          reason: active.ok
+            ? "Start a complete self-assigned leaf with todo before shell, code, mutation, or unknown tools."
+            : active.error.message,
+        };
+      }
+      provider.lease(event.toolCallId, active.value.ref);
+      return { block: false };
+    });
+    pi.on("tool_execution_end", (event: Readonly<{ toolCallId: string }>) => {
+      provider.release(event.toolCallId);
+    });
+  };
+
+export { registerGate };