@pi-unipi/unipi 2.20.5 → 3.0.0-alpha.0

package/CHANGELOG.md

@@ -6,6 +6,92 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+### Added
+
+- **kanboard: the v3 daemon and web UI** (`unipi-kanboard serve`). Single instance via `flock(daemon.lock)` (a second `serve` prints the running `daemon.json` and exits 0), binds `127.0.0.1` with `--port` or an OS-assigned port, writes `daemon.json` atomically, removes it on exit (SIGTERM/SIGINT/idle), and shuts down after `--idle-min` (default 10) with no SSE clients and no requests. A `notify` watcher on `projects/` bumps one revision per content change (access events ignored, bursts coalesced) and `GET /events?project=<slug>` streams it, so CLI and agent writes appear live. `status` reports the daemon + liveness, `stop` SIGTERMs it and waits ≤3s.
+
+- **kanboard: JSON API + server-rendered board UI.** `/api/health`, `/api/projects`, task list/show, and create/move/note/edit/link/unlink/order/duplicate — every handler calls the same library functions as the CLI, the actor is always `user`, and rule violations answer 4xx with the rule text (a move that needs a comment answers **409 + `needsComment`**). The UI is Topcoat 0.8.1 (pinned, `router/serve/view/sse/discover` only, no runtime/asset/tailwind): project picker, 7 lanes + Archive toggle, priority/dep/running/stale badges, quick-add, drag to move or reorder (comment modal on 409, toast + snap-back on refusal), card drawer with edit/deps/comment/activity and Duplicate/Cancel/Archive, EventSource live refresh — and no run button: work still starts only from a terminal.
+
+- **kanboard: `rust-toolchain.toml` + edition 2024** for the crate (Topcoat's `impl View` idiom requires it), CSS/JS inlined with `include_str!` so the binary stays self-contained.
+
+- **watchdog: jev watchdog for long-running tool calls.** New `@pi-unipi/watchdog` package (off by default, configurable in /unipi:settings → Watchdog). Every interval, jev judges whether a running bash tool call or background task is stuck or looping. Kills the process group (bash) or stops the task (bg_run) with the reason injected into the tool result or completion notification. Persistent processes (dev servers, watchers) are vetoed unless they're looping with errors. Configurable: interval, confidence, agreeing checks, action (kill/warn), per-kind toggles, otherTools (warn/abort-turn).
+
+- **utility: jev-judged skill exposure.** With many skills installed, `<available_skills>` bloats the system prompt. New `skills.mode` setting (`judged` default / `all` / `off`): on the session's first prompt jev (the long-horizon Decision model) scores every skill's relevance in ONE System One call; only relevant skills stay cataloged (sorted by relevance, capped at `skills.maxSkills`, threshold `skills.threshold`), the set is frozen per session and persisted via a custom session entry so the system prompt stays byte-identical on every later turn. `skills.recheck` (default on) announces newly relevant hidden skills on later prompts via a persisted message (never twice, max 5 per prompt). The old `skills.discovery` boolean migrates (`false` → `off`, `true` → `judged`).
+
+- **core: shared jev client** (`askJev`) — native typesafe `/v1/systemone` and OpenRouter `/api/alpha/decisions` transports with the judge's baseUrl/key/timeout rules; fail-open (null) on any error, missing key, or timeout. The long-horizon judge now uses it for its System One transports (chat-model fallback unchanged).
+
+- **workflow: permission modes.** Every tool call now passes a gate: `ask` · `auto` (default) · `full`. Read-only tools always run; writes inside the workspace run in auto/full; **dangerous** bash (`rm -rf`, `sudo`, `dd`/`mkfs`, `chmod -R`, `curl|sh`, `git push --force`, `git reset --hard`, `git clean -f`, `git branch -D`, `kill -9`/`pkill`, writes into `~/.ssh`/`~/.aws`/`/etc`, reads of `.env`/`id_rsa`/`*.pem`) always asks; anything else in auto is judged by **jev** (one Decision-model call: `safe` / `needs_approval` / `dangerous`) — `safe` above `jevConfidence` runs, otherwise it prompts. Saved allow/deny glob **rules** are checked first and deny wins in every mode. The prompt is Enter-friendly: `Allow once` (default) · `Always allow <pattern>` (saves a project rule) · `Deny` · `Deny with note…` (the note reaches the agent as the block reason). Without a UI nothing ever prompts: full behaviour, except deny rules and dangerous patterns, which are blocked with a reason. `/unipi:permission [ask|auto|full]` and `Alt+M` (cycles) set the mode; hub → **Permissions** renders mode/jevJudge/jevConfidence plus a clear-rules action showing the saved-rule count. `UNIPI_DEBUG_PERMISSION=1` logs every decision to `~/.unipi/logs/permission.log`.
+
+- **workflow: plan mode.** `/unipi:plan [on|off|view|approve]` (no argument toggles) or `Alt+P` turns the session read-only: the only writable file is `.unipi/plans/<YYYY-MM-DD>-<short-session-id>.md`, bash must be a read-only command (no jev), every other mutating tool is refused with `Plan mode is read-only. Write your plan to <path> and call plan_submit.` State is persisted in a session entry (resume keeps it, and the footer re-shows PLAN) and the mode reaches the model as appended messages — never the system prompt — so the provider prefix cache stays intact. `plan_submit` opens the approval prompt: `Approve & implement` (Enter) answers `Plan approved.` and queues the plan as the next user message with `Treat it as authoritative; do not re-plan.`; `Keep planning…` returns your feedback as the tool result; `Discard plan` turns the mode off.
+
+- **footer: PLAN badge + permission mode.** The top frame's right side shows a bold `PLAN` badge while plan mode is active and the permission mode just before the top-right corner (dim `auto`, accent `ask`, warning `full`). Narrow terminals drop the permission label first, then truncate.
+
+- **`@pi-unipi/skill-registry`** — new code-free package hosting the twenty bundled workflow skills (a future home for registry features).
+
+### Added
+
+- **kanboard: remote access with a token gate.** `unipi-kanboard serve --host <addr>` (default `127.0.0.1`); any non-loopback bind generates a 32-byte base64url token, stores `host`/`token` in `daemon.json`, and requires it on every request as `?t=<token>` (sets an `HttpOnly; SameSite=Strict` cookie and 303-redirects to the URL without it), the `kb_token` cookie, or `Authorization: Bearer <token>` — compared in constant time, 401 otherwise. `/api/health` stays open but hides the pid off-loopback, POSTs whose `Origin` disagrees with `Host` are refused in both modes, and loopback binds stay token-free. `/unipi:kanboard open [--host H] [--port N]` (completions: `127.0.0.1`, `0.0.0.0`, `tailscale` → `tailscale ip -4`) overrides the new `host`/`port` settings per invocation, prints every reachable URL with the token (hostname + non-internal IPv4s + tailnet address for a wildcard bind), the `ssh -N -L …` tunnel hint for loopback, and a loud "reachable from the network" warning; a daemon running on another binding is stopped and restarted (`restarted kanboard on 0.0.0.0:37473`).
+
+### Changed
+
+- **kanboard: platform binaries and packaging.** Five `@pi-unipi/kanboard-<platform>` packages (`linux-x64`, `linux-arm64`, `darwin-x64`, `darwin-arm64`, `win32-x64`) hang off `@pi-unipi/kanboard` as `optionalDependencies`, each with `os`/`cpu` gates so npm installs exactly one. `.github/workflows/kanboard-binaries.yml` builds them per target (Linux via musl → static-pie binaries, ~3.9 MB), runs tests + clippy on native targets, uploads one artifact per platform and, on a `v*` tag, attaches them to the GitHub release; npm publishing happens only when an `NPM_TOKEN` secret exists (there is none today), and `npm run publish:kanboard` **skips any platform package whose `bin/` is empty** with a loud warning and a non-zero exit. `ci.yml` now also runs `cargo test` + `cargo clippy -D warnings` for `crates/kanboard`. A local, offline packaging proof lives in `scripts/test-kanboard-packaging.mjs` (pack both packages, lay them out as `node_modules`, resolve through `src/bin.ts`, run `--version`).
+- **kanboard: one unparseable task file no longer takes the board offline.** The store loads tolerantly — a file that fails validation is skipped (never partially trusted) and reported as `problems: [{file, line, error}]` by `list --json` and the API (`{tasks, problems}`); writing to a broken file answers `UNI-5 is unreadable: <message> (line N); run unipi-kanboard validate --fix`; the board page shows a red "N task file(s) need repair" banner and still renders everything else; `claim-next` ignores broken files.
+- **workflow: the agent's board CLI no longer prompts in auto mode.** A simple command whose program is `unipi-kanboard` and whose args carry `--actor agent` classifies as *kanboard CLI* and runs in `auto`/`full`; `ask` mode still asks, `--actor user|system` is never covered, compound commands keep the per-part rules, and plan mode does not inherit the allowance.
+
+### Changed (earlier)
+
+- **`@pi-unipi/kanboard` is now the v3 terminal client** for the Rust board: `/unipi:kanboard [open|onboard|add|work|stop|status]` with arg completions. `open` ensures the daemon (reuse a healthy one, else spawn `serve` detached) and prints the board URL; `onboard` is idempotent and reveals the skill; `add <text>` is quick capture into Backlog with no agent turn; `status` reports daemon, lane counts and the runner. Binary resolution: `UNIPI_KANBOARD_BIN` → `@pi-unipi/kanboard-<platform>-<arch>` → the dev build; nothing found means every command reports `kanboard binary unavailable for <platform>-<arch>` and does nothing else.
+- **kanboard: the task runner (`work`).** One job per session, with the runner owning the transitions agents may not write: `claim-next` → jev picks the mode (`direct`/`plan`/`goal`, null → direct, logged to `~/.unipi/logs/kanboard.log` under `UNIPI_DEBUG_KANBOARD=1`) → `set-run` → the task (title, body, last 10 activity entries, deps with status and last note, and the rules) goes to the agent as a user message. Run end releases to In Review with the last assistant text (≤500 chars); a task the agent blocked is respected and the loop continues; Esc releases to Todo with "interrupted by user" and stops; session shutdown releases to Todo. `plan` mode drives workflow's plan mode through the new `unipi:plan-enter`/`unipi:plan-exit` command runners (a discarded plan releases to Todo); `goal` mode starts a long-horizon goal through `unipi:goal-start`, records the goal id with `set-run --goal`, and reads completion from `unipi:goal-status`. Footer shows `▣ UNI-12 · direct`; the claim is persisted with `appendEntry` so a reload offers resume or release.
+- **kanboard: `skills/kanboard/SKILL.md`** teaches the CLI and the rules (never `--actor user`, never move to in_review/done, block with a comment to ask the user, file follow-ups in Backlog). `onboard`/`work` force-reveal it through the new `unipi:skills:reveal` event, which utility turns into the usual append-only reveal message — the system prompt stays untouched. Hub section "Kanboard" (namespace `kanboard`): `chainGate`, `continue`, `idleMin`, `port`, `archiveAfterDays` (sweep on session start), `openBrowser`, plus "Open board…" and "Stop daemon" actions.
+- **core: `callCommandRunner`** — call another module's registered runner and read its result (`registerCommandRunner` handlers may now take an `args` payload and return a value). Used by kanboard for plan/goal, and by the settings hub as before.
+
+
+- **kanboard: the Topcoat spike is retired** — its findings live on at `docs/research/2026-09-24-topcoat-spike.md`; Topcoat 0.8.1 is the adopted UI layer for the daemon.
+
+- **docs live in the project's `docs/` folder — the `.unipi/docs/` convention is gone.** Skills write to `docs/specs`, `docs/plans`, `docs/debug`, `docs/fix`, `docs/quick-work`, `docs/chore`, `docs/reviews`, `docs/generated` and `docs/research` in the project (creating the folder when it is missing), plan mode writes `docs/plans/<YYYY-MM-DD>-<short-session-id>.md`, and kanboard parses `docs/` (default `docsRoot`). `.unipi/` now holds runtime state only (config, sessions, ralph), nothing is created there eagerly, and `UNIPI_DIRS` + the eager docs-directory creation are removed. **Existing `.unipi/docs/` folders are left untouched — there is no automatic migration.**
+
+### Removed
+
+- **kanboard: the old htmx/Alpine board is gone** — `parser/`, `server/`, `ui/`, `commands.ts`, `types.ts` and the `kanboard-doctor` skill (with its autocomplete and core constants). The v3 board is the Rust binary plus the Topcoat UI inside it.
+- **workflow: the twenty workflow slash commands** — `unipi:brainstorm`, `unipi:work`, `unipi:review-work`, `unipi:consolidate`, `unipi:worktree-create`/`-list`/`-merge`, `unipi:consultant`, `unipi:quick-work`, `unipi:gather-context`, `unipi:document`, `unipi:scan-issues`, `unipi:auto`, `unipi:debug`, `unipi:fix`, `unipi:quick-fix`, `unipi:research`, `unipi:chore-create`/`-execute`, plus the old `unipi:plan` pipeline and its per-command tool sandboxes. Replaced by **plan mode** and **permission modes**; their skills moved to the new `@pi-unipi/skill-registry` package (still loadable via `/skill:<name>`, still visible to jev skill judging). `@pi-unipi/workflow` keeps its name and now hosts plan/permission enforcement.
+
+- **core: the workflow sandbox module** (`sandbox.ts`) — tool-access levels existed only to back the removed workflow commands. Call-time enforcement is now the permission gate in `@pi-unipi/workflow`.
+
+- **Legacy per-module settings commands — use `/unipi:settings`.** Every settings overlay absorbed into the unified hub; only interactive wizards/tools remain as overlays:
+  - `unipi:updater-settings` — check interval + auto-update were already in the hub (Updater group).
+  - `unipi:ask-user-settings` — tool + format toggles already in the hub (Ask User group).
+  - `unipi:stash-settings` — chordKey/tabInsertKey enums (with hint + keybinding validator) in the hub; config/registration moved to `input-shortcuts/src/settings.ts`.
+  - `unipi:badge-settings` + `unipi:util-settings` — badge fields already in the hub; disabling the badge still hides it live (hub `onChanged`).
+  - `unipi:skills-settings` — `unipi.skills.discovery` migrated into the utility namespace (one-time import); the gate now reads the engine.
+  - `unipi:bg-settings` — master toggle/defaults already in the hub; orphan `maxOutputBytes` added.
+  - `unipi:image-settings` — `recognize.systemPrompt` added to the hub schema; generate.model presets + recognize image-input capability replace the dialog/model selector.
+  - `unipi:web-settings` — provider pages already in the hub; `browser`/`os`/`includeReplies` enums added.
+  - `unipi:info-settings` — absorbed as a dynamic "Groups & stats…" page (live from the group registry) + "Group order" reorder field.
+  - `unipi:footer-settings` — absorbed: separator + zoneSeparator enums, dynamic "Segments…" page (per-group and per-segment visibility). Zone Headers was a non-functional stub in the old overlay and was not absorbed.
+  - `unipi:compact-settings` — absorbed: per-strategy mode enums, Auto (%-trigger) section, Pipeline toggles, and "Apply preset" action rows (precise/balanced/thorough/lean). `/unipi:compact-preset` (CLI args) is kept.
+  - `unipi:notify-settings` — absorbed: "Events…" page (enable + platform multiselect per event), defaultPlatforms/silence/renotify fields, per-platform "Setup & test…" wizard actions, and a "Send test notification" action. `/unipi:notify-recap-model` keeps the recap selector overlay.
+  - `unipi:memory-settings` — absorbed:
+  - `unipi:badge-name` / `unipi:badge-gen` / `unipi:badge-toggle` — hub Badge group: "Show name badge" field + "Set session name…" / "Generate session name" actions.
+  - `unipi:notify-set-gotify` / `unipi:notify-set-tg` / `unipi:notify-set-ntfy` / `unipi:notify-test` / `unipi:notify-recap-model` — hub Notify group: per-platform "Setup & test…" actions, "Send test notification" action, and the `recap.model` field.
+  - `unipi:compact-preset` — hub Compactor › Presets action rows (precise/balanced/thorough/lean).
+  - `unipi:mcp-add` / `unipi:mcp-settings` / `unipi:mcp-sync` / `unipi:mcp-reload` — hub MCP group: "Configure MCP servers…", "Add server…", "Sync catalog…", "Reload servers…" actions.
+  - `unipi:fusion-preset` — hub Fusion group: "Edit fusion presets…" action.
+  - `unipi:web-cache-clear` — hub Web API group: "Clear web cache…" action (with confirm). provider none/inherit/openrouter/custom with per-provider model presets + baseUrl, and a "Re-embed all memories…" action (confirm + progress toast).
+
+## [3.0.0-alpha.0] — 2026-09-20
+
+### Changed
+
+- **Pi SDK 0.84 → 0.86.** All `@earendil-works/{pi-coding-agent,pi-ai,pi-tui,pi-agent-core}` peer dependencies bump from `^0.84.0` to `^0.86.0` (installs 0.86.1). Two 0.86 breaking changes touched unipi:
+  - `ToolCall.arguments` / `ToolResultMessage.details` are now JSON-strict (`JsonValue` values). The background-tasks scripted test providers dropped their local `Record<PropertyKey, unknown>` alias and import pi-ai's `JsonObject` instead; production code needed no changes.
+  - Raw pi-ai API adapters (`pi-ai/api/*`) now require a normalized `TranscriptContext` — a raw `Context` passed to them silently loses its `systemPrompt` and `tools`. The `tests/prefix-provider-payload.test.js` harness normalizes via `normalizeContext()` (`@earendil-works/pi-ai/utils/transcript`) before invoking the openai-completions adapter. No unipi production code calls raw adapters (all model calls flow through pi's extension API, which normalizes internally).
+  - Not adopted yet, but relevant to v3: native prompt-cache warming, transcript-aware prompt/tool updates with cached-prefix preservation, per-model compaction budgets, `ctx.modelRegistry.stream()`, deferred tool loading (`ToolSearch`).
+- `core`, `updater`: **prerelease-aware version comparison.** `compareVersions` in `@pi-unipi/core` previously split on `.` and `-` and compared only the numeric triple, discarding prerelease identifiers entirely — `3.0.0`, `3.0.0-alpha.0` and `3.0.0-alpha.9` all compared equal, so an alpha-channel install would never be prompted when `3.0.0` graduated to stable, and `3.0.0-alpha.10` never looked newer than `3.0.0-alpha.9`. The comparison now orders prerelease identifiers by semver §11 precedence (release > prerelease, numeric ids numerically and below alphanumeric ones). `updater`'s `getNewerVersions` also gains channel discipline: a stable install (npm `latest`) is never offered prerelease changelog entries, while a prerelease install sees every entry newer than itself.
+
+### Added
+
+- **Prerelease channel.** The v3 branch publishes as `3.0.0-alpha.N` under npm dist-tags (`--tag alpha`), leaving `latest` on the 2.x line. `scripts/sync-pins.mjs` now accepts prerelease versions, and the full-release chore documents the prerelease rules (never omit `--tag` on a prerelease, fresh suffix per publish, graduation moves `latest`).
+
 ## [2.20.5] — 2026-09-19
 
 ### Fixed
@@ -896,3 +982,4 @@ Startup went from **23.1s to 0.75s** — 31× faster, and within ~0.7s of bare `
 ### Changed
 - Compactor commands need `unipi:` prefix
 - Footer icon style now configurable
+

package/README.md

@@ -1,3 +1,5 @@
+<p align="center"><img src="docs/assets/unipi-logo.png" width="200" alt="UniPi"></p>
+
 # Unipi
 
 23 workspace packages that turn Pi into a full development workstation. Structured workflows, persistent memory, parallel agents, web research, notifications, context management, command autocomplete, and a live status bar — all wired together through a shared event system.
@@ -9,13 +11,13 @@ pi install npm:@pi-unipi/unipi
 
 ## Requirements
 
-- **Pi (`@earendil-works/pi-coding-agent`) `^0.84.0`** — Unipi 2.9.0 tracks the Pi 0.84 SDK (extension event map incl. `agent_settled`, `ModelRuntime` session options, kitty-protocol keyboard handling). Older Pi releases (0.80–0.83) still load most extensions, but npm will flag the peer dependency mismatch; pin `@pi-unipi/*@<2.9.0` if you must stay on an older Pi.
+- **Pi (`@earendil-works/pi-coding-agent`) `^0.86.0`** — Unipi 3.0.0-alpha tracks the Pi 0.86 SDK (JSON-strict `ToolCall.arguments` / `ToolResultMessage.details`, `TranscriptContext` custom-provider inputs, native prompt-cache warming, per-model compaction budgets, `ctx.modelRegistry.stream()`). Older Pi releases (0.80–0.85) still load most extensions, but npm will flag the peer dependency mismatch; pin `@pi-unipi/*@<3.0.0` if you must stay on an older Pi.
 
 ## What You Get
 
-**[Workflow](./packages/workflow/README.md)** — 20 commands that take ideas to shipped code. Brainstorm, plan, execute in worktrees, review, consolidate. The agent follows skill files step by step.
+**[Workflow](./packages/workflow/README.md)** — **plan mode** (`/unipi:plan`, `Alt+P`) and **permission modes** (`ask` · `auto` · `full`). Plan mode makes a session read-only except for its plan file; auto mode lets jev judge ambiguous bash before it runs. The twenty workflow skills moved to [@pi-unipi/skill-registry](./packages/skill-registry/README.md).
 
-**[Ralph](./packages/ralph/README.md)** — Long-running loops that persist across sessions. Start a task, iterate through checklist items, resume after crashes. Progress tracked, state saved.
+**[Long-Horizon](./packages/long-horizon/)** — Mode-gated long-horizon execution: `/goal` (one objective until verifiably true, propose+verify), `/ralph` (task-file iteration loops), `/swarm` (independent fan-out + synthesis), `/graph` (dependent multi-step work). A TypeSafe jev prompt judge routes each turn; one automation owner per session with park/resume; runaway-guard steering; token/turn/stall budgets.
 
 **[Memory](./packages/memory/README.md)** — SQLite + vector search stores facts, preferences, and decisions. Project-scoped and global. The agent remembers what you told it last week.
 
@@ -43,12 +45,8 @@ pi install npm:@pi-unipi/unipi
 
 **[Ask User](./packages/ask-user/README.md)** — Structured input for decision gates. Single-select, multi-select, freeform. The agent asks instead of guessing.
 
-**[Milestone](./packages/milestone/README.md)** — Track project goals across workflow cycles. MILESTONES.md stays in sync with specs, plans, and completed work.
-
 **[Kanboard](./packages/kanboard/README.md)** — Web UI and TUI overlay for kanban boards. Parses all workflow documents into cards with progress indicators.
 
-**[Trajectory](./packages/trajectory/README.md)** — Live localhost session inspector. Explore turns, reasoning, tool payloads/results, timing, token/cache usage, and compactions for the current session.
-
 **[Info Screen](./packages/info-screen/README.md)** — Dashboard overlay showing module status, tools, and custom data groups.
 
 **[Utility](./packages/utility/README.md)** — Environment info, diagnostics, cleanup, name badge, and Shiki-powered diff rendering.
@@ -90,27 +88,31 @@ Coexists triggers enhance behavior when packages are installed together. Workflo
 
 | Category | Prefix | Examples |
 |----------|--------|----------|
-| Workflow | `/unipi:` | brainstorm, plan, work, review-work, consolidate, quick-work, debug, fix |
-| Ralph | `/unipi:ralph` | start, stop, resume, status |
+| Workflow | `/unipi:` | plan (plan mode), permission (permission modes) |
+| Kanboard | `/unipi:` | kanboard (board: capture, work runner, web UI) |
+| Long-Horizon | `/unipi:goal`, `/unipi:ralph`, `/unipi:swarm`, `/unipi:graph` | <prompt>, start, stop, status, resume, clear |
 | Memory | `/unipi:memory-` | process, search, consolidate, forget |
-| Compactor | `/unipi:` | lossless-compact, session-recall, compact-stats, compact-settings, compact-preset, compact-help |
+| Compactor | `/unipi:` | lossless-compact, session-recall, compact-stats, compact-preset, compact-help |
 | Notify | `/unipi:notify-` | settings, test, set-tg, set-ntfy |
 | MCP | `/unipi:mcp-` | add, settings, sync, status |
 | Web | `/unipi:web-` | settings, cache-clear |
 | BTW | `/unipi:btw` | question, btw-new, btw-tangent, btw-inject, btw-summarize |
 | Utility | `/unipi:` | env, doctor, status, cleanup, badge-name |
-| Milestone | `/unipi:milestone-` | onboard, update |
 | Kanboard | `/unipi:kanboard` | toggle, doctor |
-| Trajectory | `/unipi:trajectory` | open the live current-session inspector |
 | Footer | `/unipi:footer` | toggle, settings |
-| Updater | `/unipi:` | readme, changelog, updater-settings |
+| Watchdog | `/unipi:settings` | jev judges long-running tools; kills or warns when stuck |
+| Updater | `/unipi:` | readme, changelog |
 | Info | `/unipi:info` | dashboard, settings |
 
 ## Agent Tools (Brief)
 
 | Tool | Package | What It Does |
 |------|---------|--------------|
-| `ralph_start` / `ralph_done` | ralph | Loop control |
+| `create_goal` / `get_goal` / `update_goal` | long-horizon | Goal propose+verify lifecycle |
+| `todowrite` | long-horizon | Visible session plan |
+| `ralph_done` / `loop_status` | long-horizon | Loop iteration + progress |
+| `swarm_report` / `swarm_status` / `swarm_yield` | long-horizon | Fan-out supervision |
+| `update_agent_graph` / `graph_output` / `view_agent_graph` | long-horizon | Dependent work graph |
 | `spawn_helper` / `get_helper_result` | subagents | Parallel agents |
 | `memory_store` / `memory_search` / `memory_delete` | memory | Memory CRUD |
 | `web_search` / `multi_web_content_read` / `web_llm_summarize` | web-api | Web research |
@@ -138,8 +140,9 @@ npm run typecheck
 unipi/
 ├── packages/
 │   ├── core/           # Shared constants, events, utilities
-│   ├── workflow/       # 20 skill-based commands
-│   ├── ralph/          # Iterative loops
+│   ├── workflow/       # plan mode + permission modes
+│   ├── skill-registry/  # bundled workflow skills (no code yet)
+│   ├── long-horizon/  # /goal /ralph /swarm /graph mode-gated execution
 │   ├── memory/         # SQLite + vector search
 │   ├── compactor/      # Context engine
 │   ├── subagents/      # Parallel execution
@@ -152,16 +155,15 @@ unipi/
 │   ├── footer/         # Status bar
 │   ├── btw/            # Side conversations
 │   ├── ask-user/       # Structured input
-│   ├── milestone/      # Goal tracking
 │   ├── kanboard/       # Kanban visualization
-│   ├── trajectory/     # Live session trajectory inspector
 │   ├── info-screen/    # Dashboard overlay
 │   ├── utility/        # Diagnostics, diff rendering
 │   ├── updater/        # Auto-update, browsers
 │   ├── input-shortcuts/ # Keyboard shortcuts
 │   ├── autocomplete/   # Enhanced command autocomplete
 │   └── unipi/          # Umbrella package
-├── .unipi/             # Runtime data (specs, plans, worktrees)
+├── docs/               # Project documentation (specs, plans, fixes, …)
+├── .unipi/             # Runtime data (config, sessions, ralph)
 └── CHANGELOG.md
 ```
 

package/docs/prefix-cache-architecture.md

@@ -31,7 +31,6 @@ This matrix reflects UniPi source and Pi 0.84.1 APIs as audited for the v2.5.x r
 | Surface | Status | Ownership and behavior |
 |---|---|---|
 | Ralph iteration state | Fixed | Hidden `unipi-ralph-loop-reminder` tail snapshots; no system-prompt mutation. |
-| Milestone state | Fixed | Workspace-qualified, compaction-aware `unipi-milestone-snapshot` messages append only when state changes. |
 | Workflow sandbox | Fixed | Stable tool schemas; `tool_call` blocks disallowed execution; active/inactive snapshots supersede prior state. |
 | Memory reminders | Fixed | First-turn and retrospective reminders are tail messages. |
 | Compactor resume | Fixed | One-shot hidden resume context extends the post-compaction epoch. Snapshot rendering is deterministic for fixed stored events. |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/unipi",
-  "version": "2.20.5",
+  "version": "3.0.0-alpha.0",
   "description": "All-in-one extension suite for Pi coding agent",
   "type": "module",
   "license": "MIT",
@@ -28,7 +28,8 @@
     "prepublishOnly": "npm run build",
     "publish:all": "npm publish --workspaces --access public",
     "test": "npx tsx --test tests/*.test.js packages/memory/tests/*.test.ts && npm test --workspaces --if-present",
-    "typecheck": "npx tsc --noEmit --skipLibCheck"
+    "typecheck": "npx tsc --noEmit --skipLibCheck",
+    "publish:kanboard": "node scripts/publish-kanboard-platforms.mjs"
   },
   "files": [
     "CHANGELOG.md",
@@ -58,8 +59,7 @@
       "packages/unipi/bundled.js"
     ],
     "skills": [
-      "packages/workflow/skills",
-      "packages/ralph/SKILL.md",
+      "packages/skill-registry/skills",
       "packages/memory/skills",
       "packages/btw/skills",
       "packages/ask-user/skills",
@@ -67,7 +67,6 @@
       "packages/utility/skills",
       "packages/compactor/skills",
       "packages/notify/skills",
-      "packages/milestone/skills",
       "packages/kanboard/skills",
       "packages/updater/skills",
       "packages/image/skills",
@@ -78,41 +77,39 @@
     ]
   },
   "peerDependencies": {
-    "@earendil-works/pi-ai": "^0.84.0",
-    "@earendil-works/pi-coding-agent": "^0.84.0",
-    "@earendil-works/pi-tui": "^0.84.0",
+    "@earendil-works/pi-ai": "^0.86.0",
+    "@earendil-works/pi-coding-agent": "^0.86.0",
+    "@earendil-works/pi-tui": "^0.86.0",
     "typebox": "^1.1.38"
   },
   "dependencies": {
-    "@pi-unipi/ask-user": "2.20.5",
-    "@pi-unipi/background-tasks": "2.20.5",
-    "@pi-unipi/btw": "2.20.5",
-    "@pi-unipi/command-enchantment": "2.20.5",
-    "@pi-unipi/compactor": "2.20.5",
-    "@pi-unipi/core": "2.20.5",
-    "@pi-unipi/footer": "2.20.5",
-    "@pi-unipi/image": "2.20.5",
-    "@pi-unipi/fusion": "2.20.5",
-    "@pi-unipi/info-screen": "2.20.5",
-    "@pi-unipi/input-shortcuts": "2.20.5",
-    "@pi-unipi/kanboard": "2.20.5",
-    "@pi-unipi/mcp": "2.20.5",
-    "@pi-unipi/memory": "2.20.5",
-    "@pi-unipi/milestone": "2.20.5",
-    "@pi-unipi/notify": "2.20.5",
-    "@pi-unipi/ralph": "2.20.5",
-    "@pi-unipi/subagents": "2.20.5",
-    "@pi-unipi/trajectory": "2.20.5",
-    "@pi-unipi/updater": "2.20.5",
-    "@pi-unipi/utility": "2.20.5",
-    "@pi-unipi/web-api": "2.20.5",
-    "@pi-unipi/workflow": "2.20.5"
+    "@pi-unipi/ask-user": "3.0.0-alpha.0",
+    "@pi-unipi/background-tasks": "3.0.0-alpha.0",
+    "@pi-unipi/btw": "3.0.0-alpha.0",
+    "@pi-unipi/command-enchantment": "3.0.0-alpha.0",
+    "@pi-unipi/compactor": "3.0.0-alpha.0",
+    "@pi-unipi/core": "3.0.0-alpha.0",
+    "@pi-unipi/footer": "3.0.0-alpha.0",
+    "@pi-unipi/image": "3.0.0-alpha.0",
+    "@pi-unipi/fusion": "3.0.0-alpha.0",
+    "@pi-unipi/info-screen": "3.0.0-alpha.0",
+    "@pi-unipi/input-shortcuts": "3.0.0-alpha.0",
+    "@pi-unipi/kanboard": "3.0.0-alpha.0",
+    "@pi-unipi/mcp": "3.0.0-alpha.0",
+    "@pi-unipi/memory": "3.0.0-alpha.0",
+    "@pi-unipi/notify": "3.0.0-alpha.0",
+    "@pi-unipi/skill-registry": "3.0.0-alpha.0",
+    "@pi-unipi/subagents": "3.0.0-alpha.0",
+    "@pi-unipi/updater": "3.0.0-alpha.0",
+    "@pi-unipi/utility": "3.0.0-alpha.0",
+    "@pi-unipi/web-api": "3.0.0-alpha.0",
+    "@pi-unipi/workflow": "3.0.0-alpha.0"
   },
   "devDependencies": {
-    "@earendil-works/pi-agent-core": "^0.84.0",
-    "@earendil-works/pi-ai": "^0.84.0",
-    "@earendil-works/pi-coding-agent": "^0.84.0",
-    "@earendil-works/pi-tui": "^0.84.0",
+    "@earendil-works/pi-agent-core": "^0.86.0",
+    "@earendil-works/pi-ai": "^0.86.0",
+    "@earendil-works/pi-coding-agent": "^0.86.0",
+    "@earendil-works/pi-tui": "^0.86.0",
     "@types/better-sqlite3": "^9.6.0",
     "@types/node": "^25.6.0",
     "diff": "^7.0.0",

package/packages/ask-user/README.md

@@ -55,7 +55,7 @@ ask_user({
       label: "Proceed to work",
       value: "work",
       action: "new_session",
-      prefill: "/unipi:work specs:2026-05-06-feature-plan.md",
+      prefill: "the implementation step specs:2026-05-06-feature-plan.md",
     },
     { label: "Done for now", value: "done", action: "end_turn" },
   ],

package/packages/ask-user/config.ts

@@ -5,9 +5,7 @@
  * under the "unipi.askUser" key.
  */
 
-import { readFileSync, writeFileSync, existsSync } from "node:fs";
-import { join } from "node:path";
-import { homedir } from "node:os";
+import { getSettings, registerSettings, setSettings } from "@pi-unipi/core";
 
 /** Ask-user settings */
 export interface AskUserSettings {
@@ -37,13 +35,7 @@ export const DEFAULT_SETTINGS: AskUserSettings = {
   notifyOnAsk: true,
 };
 
-/** Settings path */
-const SETTINGS_PATH = join(homedir(), ".pi", "agent", "settings.json");
 
-/** Settings key within settings.json */
-const SETTINGS_KEY = "unipi";
-
-/** Cached settings */
 let cachedSettings: AskUserSettings | null = null;
 
 /**
@@ -53,46 +45,42 @@ function isRecord(value: unknown): value is Record<string, unknown> {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
-/**
- * Read the full settings file.
- */
-function readSettingsFile(): Record<string, unknown> {
-  if (!existsSync(SETTINGS_PATH)) return {};
-  try {
-    const parsed = JSON.parse(readFileSync(SETTINGS_PATH, "utf-8"));
-    return isRecord(parsed) ? parsed : {};
-  } catch {
-    return {};
-  }
-}
-
-/**
- * Write the full settings file.
- */
-function writeSettingsFile(data: Record<string, unknown>): void {
-  const dir = require("node:path").dirname(SETTINGS_PATH);
-  if (!existsSync(dir)) {
-    require("node:fs").mkdirSync(dir, { recursive: true });
-  }
-  writeFileSync(SETTINGS_PATH, JSON.stringify(data, null, 2) + "\n", "utf-8");
-}
-
 /**
  * Get ask-user settings from settings.json.
  */
+// Registered with the unified settings hub. The engine's migration imports
+// the legacy ~/.pi/agent/settings.json unipi.askUser block once automatically.
+registerSettings({
+  namespace: "ask-user",
+  label: "Ask User",
+  defaults: DEFAULT_SETTINGS as unknown as Record<string, unknown>,
+  schema: [
+    {
+      title: "Tool",
+      fields: [
+        { key: "enabled", type: "boolean", label: "Enable ask_user tool", description: "Allow the agent to ask structured questions" },
+        { key: "notifyOnAsk", type: "boolean", label: "Notify on ask", description: "Send a notification when the agent pauses to ask" },
+      ],
+    },
+    {
+      title: "Allowed formats",
+      fields: [
+        { key: "allowedFormats.singleSelect", type: "boolean", label: "Single-select", description: "Questions with one correct answer" },
+        { key: "allowedFormats.multiSelect", type: "boolean", label: "Multi-select", description: "Questions with several answers" },
+        { key: "allowedFormats.freeform", type: "boolean", label: "Freeform", description: "Plain text input" },
+      ],
+    },
+  ],
+});
+
 export function getAskUserSettings(): AskUserSettings {
   if (cachedSettings) return cachedSettings;
-
-  const settings = readSettingsFile();
-  const unipi = settings[SETTINGS_KEY];
-
-  if (!isRecord(unipi) || !isRecord(unipi.askUser)) {
+  const askUser = getSettings("ask-user", process.cwd()) as Record<string, unknown>;
+  if (!isRecord(askUser)) {
     cachedSettings = { ...DEFAULT_SETTINGS };
     return cachedSettings;
   }
 
-  const askUser = unipi.askUser as Record<string, unknown>;
-
   const enabled = typeof askUser.enabled === "boolean" ? askUser.enabled : DEFAULT_SETTINGS.enabled;
 
   let allowedFormats = DEFAULT_SETTINGS.allowedFormats;
@@ -115,19 +103,7 @@ export function getAskUserSettings(): AskUserSettings {
  * Save ask-user settings to settings.json.
  */
 export function saveAskUserSettings(settings: AskUserSettings): void {
-  const file = readSettingsFile();
-
-  if (!isRecord(file[SETTINGS_KEY])) {
-    file[SETTINGS_KEY] = {};
-  }
-
-  (file[SETTINGS_KEY] as Record<string, unknown>).askUser = {
-    enabled: settings.enabled,
-    allowedFormats: settings.allowedFormats,
-    notifyOnAsk: settings.notifyOnAsk,
-  };
-
-  writeSettingsFile(file);
+  setSettings("ask-user", settings as unknown as Record<string, unknown>, "global", process.cwd());
   cachedSettings = settings;
 }
 

package/packages/ask-user/index.ts

@@ -16,23 +16,21 @@ import {
   getPackageVersion,
 } from "@pi-unipi/core";
 import { registerAskUserTools } from "./tools.js";
-import { registerAskUserCommands } from "./commands.js";
 
 /** Package version */
 const VERSION = getPackageVersion(dirname(fileURLToPath(import.meta.url)));
 
 export default function (pi: ExtensionAPI) {
 
-  // Register tools and commands
+  // Register tools
   registerAskUserTools(pi);
-  registerAskUserCommands(pi);
 
   // Session lifecycle — announce module
   pi.on("session_start", async () => {
     emitEvent(pi, UNIPI_EVENTS.MODULE_READY, {
       name: MODULES.ASK_USER,
       version: VERSION,
-      commands: ["unipi:ask-user-settings"],
+      commands: [],
       tools: [ASK_USER_TOOLS.ASK],
     });
   });

package/packages/ask-user/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@pi-unipi/ask-user",
-  "version": "2.20.5",
-  "description": "Structured user input tool for Pi coding agent — single-select, multi-select, freeform",
+  "version": "3.0.0-alpha.0",
+  "description": "Structured user input tool for Pi coding agent \u2014 single-select, multi-select, freeform",
   "type": "module",
   "main": "index.ts",
   "license": "MIT",
@@ -40,11 +40,11 @@
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/core": "2.20.5"
+    "@pi-unipi/core": "3.0.0-alpha.0"
   },
   "peerDependencies": {
-    "@earendil-works/pi-coding-agent": "^0.84.0",
-    "@earendil-works/pi-tui": "^0.84.0",
+    "@earendil-works/pi-coding-agent": "^0.86.0",
+    "@earendil-works/pi-tui": "^0.86.0",
     "typebox": "^1.1.38"
   },
   "pi": {

package/packages/ask-user/skills/ask-user/SKILL.md

@@ -161,4 +161,4 @@ When a user selects a `new_session` option, a secondary launcher overlay appears
 | ▶ Run directly | Queues/submits the prefill immediately as a follow-up message, without compaction |
 | ✕ Cancel | Cancels the session launch; no prefill is queued |
 
-The prefill can be a slash command (for example `/unipi:work specs:...`) or any non-empty message. If automatic delivery fails, ask_user places the prefill in the editor and warns the user to press Enter. This two-step flow lets the user manage context window usage before starting a new task while avoiding unnecessary LLM follow-up in the old session.
+The prefill can be a slash command (for example `the implementation step specs:...`) or any non-empty message. If automatic delivery fails, ask_user places the prefill in the editor and warns the user to press Enter. This two-step flow lets the user manage context window usage before starting a new task while avoiding unnecessary LLM follow-up in the old session.

package/packages/autocomplete/README.md

@@ -9,9 +9,9 @@ Command Enchantment has no user commands. It improves the editor autocomplete ex
 ## What It Does
 
 - Groups `/unipi:*` commands by package so workflow, memory, web, footer, and other commands are visually distinct.
-- Shows full command values like `unipi:brainstorm` while replacing Pi source tags with concise package tags like `[workflow]`.
+- Shows full command values like `unipi:permission` while replacing Pi source tags with concise package tags like `[workflow]`.
 - Sorts matches in predictable tiers: exact Unipi matches first, then other Unipi matches, then system commands.
-- Preserves dynamic argument completions from command providers, including workflow document and worktree suggestions.
+- Preserves dynamic argument completions from command providers (per-command `getArgumentCompletions`).
 - Ships an audit test that checks registered Unipi commands are represented in the autocomplete registry and have descriptions.
 
 ## Development Checks

package/packages/autocomplete/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@pi-unipi/command-enchantment",
-  "version": "2.20.5",
-  "description": "Enhanced TUI autocomplete for /unipi:* commands — colored, sorted, and grouped by package",
+  "version": "3.0.0-alpha.0",
+  "description": "Enhanced TUI autocomplete for /unipi:* commands \u2014 colored, sorted, and grouped by package",
   "type": "module",
   "main": "src/index.ts",
   "license": "MIT",
@@ -29,8 +29,8 @@
     "!src/**/*.test.ts"
   ],
   "peerDependencies": {
-    "@earendil-works/pi-coding-agent": "^0.84.0",
-    "@earendil-works/pi-tui": "^0.84.0"
+    "@earendil-works/pi-coding-agent": "^0.86.0",
+    "@earendil-works/pi-tui": "^0.86.0"
   },
   "scripts": {
     "test": "vitest run"