@piagent/platform 1.0.0

package/adapters/mobile/profile.json

@@ -0,0 +1,87 @@
+{
+  "schemaVersion": 1,
+  "projectId": "mobile-project",
+  "displayName": "Mobile Project",
+  "mode": "mobile",
+  "permissionProfile": "workspace-write",
+  "rootMarkers": [
+    "AGENTS.md",
+    "README.md",
+    "package.json",
+    "pubspec.yaml",
+    "android",
+    "ios"
+  ],
+  "protectedPaths": [
+    ".git/**",
+    "**/auth.json",
+    "**/.env",
+    "**/.env.*",
+    "**/*.keystore",
+    "**/*.jks",
+    "**/*.mobileprovision",
+    "**/*.p12",
+    "**/node_modules/**",
+    "**/build/**",
+    "**/.dart_tool/**"
+  ],
+  "requiredContext": [
+    "AGENTS.md",
+    ".pi/project-context.md",
+    "README.md"
+  ],
+  "taskModes": {
+    "readOnly": {
+      "tools": [
+        "read",
+        "grep",
+        "find",
+        "ls"
+      ]
+    },
+    "sourceWrite": {
+      "requiresPlan": true,
+      "requiresVerify": true
+    },
+    "releaseSigning": {
+      "requiresPlan": true,
+      "requiresVerify": true,
+      "requiresHumanGate": true
+    }
+  },
+  "verifyCommands": {
+    "docsOnly": [
+      "test -s README.md"
+    ],
+    "source": [
+      "if test -f package.json; then npm test --if-present; fi",
+      "if test -f pubspec.yaml && command -v flutter >/dev/null 2>&1; then flutter test; else echo 'flutter test skipped'; fi"
+    ]
+  },
+  "mcpCapabilities": [
+    "filesystem-readonly",
+    "filesystem-write",
+    "shell",
+    "github",
+    "browser",
+    "memory"
+  ],
+  "memory": {
+    "enabled": true,
+    "mode": "manual",
+    "scope": "project",
+    "summaryFile": ".pi/memory/memory_summary.md",
+    "handbookFile": ".pi/memory/MEMORY.md",
+    "localDir": ".pi/memory/local",
+    "readBeforeTask": true,
+    "writePolicy": "explicit-only",
+    "maxInjectedChars": 4000,
+    "externalPackages": []
+  },
+  "runtimePolicy": {
+    "execPolicy": "enforce",
+    "contextBudget": "enforce",
+    "toolRegistry": "advisory",
+    "finalGate": "enforce"
+  }
+}

package/adapters/node-typescript/profile.json

@@ -0,0 +1,76 @@
+{
+  "schemaVersion": 1,
+  "projectId": "node-typescript-project",
+  "displayName": "Node TypeScript Project",
+  "mode": "node-typescript",
+  "permissionProfile": "workspace-write",
+  "rootMarkers": [
+    "package.json",
+    "tsconfig.json"
+  ],
+  "protectedPaths": [
+    ".git/**",
+    "**/auth.json",
+    "**/.env",
+    "**/.env.*",
+    "**/node_modules/**",
+    "**/dist/**",
+    "**/coverage/**"
+  ],
+  "requiredContext": [
+    "AGENTS.md",
+    ".pi/project-context.md",
+    "README.md",
+    "package.json",
+    "tsconfig.json"
+  ],
+  "taskModes": {
+    "readOnly": {
+      "tools": [
+        "read",
+        "grep",
+        "find",
+        "ls"
+      ]
+    },
+    "sourceWrite": {
+      "requiresPlan": true,
+      "requiresVerify": true
+    }
+  },
+  "verifyCommands": {
+    "docsOnly": [
+      "test -s README.md"
+    ],
+    "source": [
+      "npm run type-check --if-present",
+      "npm run lint --if-present",
+      "npm test --if-present"
+    ]
+  },
+  "mcpCapabilities": [
+    "filesystem-readonly",
+    "filesystem-write",
+    "shell",
+    "github",
+    "memory"
+  ],
+  "memory": {
+    "enabled": true,
+    "mode": "manual",
+    "scope": "project",
+    "summaryFile": ".pi/memory/memory_summary.md",
+    "handbookFile": ".pi/memory/MEMORY.md",
+    "localDir": ".pi/memory/local",
+    "readBeforeTask": true,
+    "writePolicy": "explicit-only",
+    "maxInjectedChars": 4000,
+    "externalPackages": []
+  },
+  "runtimePolicy": {
+    "execPolicy": "enforce",
+    "contextBudget": "enforce",
+    "toolRegistry": "advisory",
+    "finalGate": "enforce"
+  }
+}

package/adapters/python/profile.json

@@ -0,0 +1,75 @@
+{
+  "schemaVersion": 1,
+  "projectId": "python-project",
+  "displayName": "Python Project",
+  "mode": "python",
+  "permissionProfile": "workspace-write",
+  "rootMarkers": [
+    "pyproject.toml",
+    "README.md"
+  ],
+  "protectedPaths": [
+    ".git/**",
+    "**/auth.json",
+    "**/.env",
+    "**/.env.*",
+    "**/.venv/**",
+    "**/__pycache__/**",
+    "**/.pytest_cache/**",
+    "**/dist/**",
+    "**/build/**"
+  ],
+  "requiredContext": [
+    "AGENTS.md",
+    ".pi/project-context.md",
+    "README.md",
+    "pyproject.toml"
+  ],
+  "taskModes": {
+    "readOnly": {
+      "tools": [
+        "read",
+        "grep",
+        "find",
+        "ls"
+      ]
+    },
+    "sourceWrite": {
+      "requiresPlan": true,
+      "requiresVerify": true
+    }
+  },
+  "verifyCommands": {
+    "docsOnly": [
+      "test -s README.md"
+    ],
+    "source": [
+      "uv run pytest"
+    ]
+  },
+  "mcpCapabilities": [
+    "filesystem-readonly",
+    "filesystem-write",
+    "shell",
+    "github",
+    "memory"
+  ],
+  "memory": {
+    "enabled": true,
+    "mode": "manual",
+    "scope": "project",
+    "summaryFile": ".pi/memory/memory_summary.md",
+    "handbookFile": ".pi/memory/MEMORY.md",
+    "localDir": ".pi/memory/local",
+    "readBeforeTask": true,
+    "writePolicy": "explicit-only",
+    "maxInjectedChars": 4000,
+    "externalPackages": []
+  },
+  "runtimePolicy": {
+    "execPolicy": "enforce",
+    "contextBudget": "enforce",
+    "toolRegistry": "advisory",
+    "finalGate": "enforce"
+  }
+}

package/adapters/web-frontend/profile.json

@@ -0,0 +1,101 @@
+{
+  "schemaVersion": 1,
+  "projectId": "web-frontend",
+  "displayName": "Web Frontend Project",
+  "mode": "web-frontend",
+  "permissionProfile": "workspace-write",
+  "rootMarkers": [
+    "AGENTS.md",
+    "package.json"
+  ],
+  "protectedPaths": [
+    ".git/**",
+    "**/auth.json",
+    "**/.env",
+    "**/.env.*",
+    "**/node_modules/**",
+    "**/dist/**",
+    "**/.next/**"
+  ],
+  "requiredContext": [
+    "AGENTS.md",
+    ".pi/project-context.md",
+    "README.md",
+    "package.json"
+  ],
+  "taskModes": {
+    "readOnly": {
+      "tools": [
+        "read",
+        "grep",
+        "find",
+        "ls"
+      ]
+    },
+    "sourceWrite": {
+      "requiresPlan": true,
+      "requiresVerify": true
+    }
+  },
+  "verifyCommands": {
+    "docsOnly": [
+      "test -s README.md"
+    ],
+    "source": [
+      "npm run type-check",
+      "npm run lint",
+      "npm test"
+    ],
+    "runtime": [
+      "npm run test:e2e"
+    ]
+  },
+  "mcpCapabilities": [
+    "filesystem-readonly",
+    "filesystem-write",
+    "shell",
+    "github",
+    "browser",
+    "memory"
+  ],
+  "capabilityPacks": [
+    {
+      "name": "web-delivery",
+      "version": "0.1.1"
+    }
+  ],
+  "capabilityPolicy": {
+    "allowedOwners": [
+      "platform-maintainers"
+    ],
+    "allowedLifecycles": [
+      "experimental"
+    ],
+    "allowedFilesystemRead": [
+      "**/*"
+    ],
+    "allowedFilesystemWrite": [
+      "**/*"
+    ],
+    "allowedNetworkDomains": [],
+    "allowedExternalActions": []
+  },
+  "memory": {
+    "enabled": true,
+    "mode": "manual",
+    "scope": "project",
+    "summaryFile": ".pi/memory/memory_summary.md",
+    "handbookFile": ".pi/memory/MEMORY.md",
+    "localDir": ".pi/memory/local",
+    "readBeforeTask": true,
+    "writePolicy": "explicit-only",
+    "maxInjectedChars": 4000,
+    "externalPackages": []
+  },
+  "runtimePolicy": {
+    "execPolicy": "enforce",
+    "contextBudget": "enforce",
+    "toolRegistry": "advisory",
+    "finalGate": "enforce"
+  }
+}

package/catalog/capabilities.json

@@ -0,0 +1,206 @@
+{
+  "coreApiVersion": 1,
+  "packs": [
+    {
+      "activation": {
+        "mode": "profile",
+        "profiles": [
+          "generic",
+          "platform-development"
+        ],
+        "triggers": []
+      },
+      "artifacts": [
+        {
+          "byteSize": 1901,
+          "digest": "sha256:4cf593f5ae8d2806d5d1262ea31f7814e087b0d599e66fc064467b8c22a6a075",
+          "id": "generic",
+          "kind": "adapters",
+          "path": "adapters/generic/profile.json"
+        },
+        {
+          "byteSize": 1134,
+          "digest": "sha256:8e3bbe4c8ab19ab46f02e02b0763b78fa4784160b11210b7350a35730b02ee81",
+          "id": "capability-resolution",
+          "kind": "evals",
+          "path": "evals/scenarios/capability-resolution.json"
+        },
+        {
+          "byteSize": 6146,
+          "digest": "sha256:a7a975b99ed2f45881d110582fb6990c500f7e081f865230bf9e4ae242cdd81e",
+          "id": "base-policy",
+          "kind": "policies",
+          "path": "packages/piagent-core/policies/base-policy.json"
+        },
+        {
+          "byteSize": 1746,
+          "digest": "sha256:e18426ee2b4ac2b9bb089789f146b43f1e0c2c5001327860ed583eb14cc08df7",
+          "id": "commit",
+          "kind": "prompts",
+          "path": "packages/piagent-core/prompts/commit.md"
+        },
+        {
+          "byteSize": 1601,
+          "digest": "sha256:bd00d48ba9272a721f58b406944917e5f4a44162c621d722bb5e9c8528f87eb5",
+          "id": "plan",
+          "kind": "prompts",
+          "path": "packages/piagent-core/prompts/plan.md"
+        },
+        {
+          "byteSize": 1532,
+          "digest": "sha256:bd66fccbdf9f1f9a518aab4b9bc9bb001f0ec3b0f35d52a64229dbd31d8dd8a0",
+          "id": "pr",
+          "kind": "prompts",
+          "path": "packages/piagent-core/prompts/pr.md"
+        },
+        {
+          "byteSize": 1528,
+          "digest": "sha256:046b91dd920eed4da920132e4f563fedd0a73603a206896a078536a75906335c",
+          "id": "review",
+          "kind": "prompts",
+          "path": "packages/piagent-core/prompts/review.md"
+        },
+        {
+          "byteSize": 4834,
+          "digest": "sha256:1e20fdfbf55ec71ec6f7a780aaf567556329571dcb1774831570e143e9d2b114",
+          "id": "task",
+          "kind": "prompts",
+          "path": "packages/piagent-core/prompts/task.md"
+        },
+        {
+          "byteSize": 1790,
+          "digest": "sha256:1f4262cf53cf527ea1b5f89a938f3aafb5006e1b091ad49132d810c13489db2c",
+          "id": "bounded-change",
+          "kind": "recipes",
+          "path": "packs/engineering-base/recipes/bounded-change.json"
+        },
+        {
+          "byteSize": 1356,
+          "digest": "sha256:8ee63773b66386fb1e278e178842d4bd2a725b73d60e1114529df4aa3bc628f4",
+          "id": "piagent-ops",
+          "kind": "skills",
+          "path": "packages/piagent-core/skills/piagent-ops/SKILL.md"
+        },
+        {
+          "byteSize": 1690,
+          "digest": "sha256:5916fcab12154317430cb40eb7861b807b07911835653a8eae7d3ca79a562e77",
+          "id": "piagent-planner",
+          "kind": "subagents",
+          "path": "packages/piagent-core/subagents/piagent-planner.md"
+        },
+        {
+          "byteSize": 1601,
+          "digest": "sha256:be1ec2282db3038717c1e66e91e3890b8d0d665fed039c903cc1e4a3c427f69e",
+          "id": "piagent-reviewer",
+          "kind": "subagents",
+          "path": "packages/piagent-core/subagents/piagent-reviewer.md"
+        },
+        {
+          "byteSize": 1244,
+          "digest": "sha256:ef11c88d37d4d2f760c9bd5fe66e7b4ce81cb5f2afd2dc1ce9df62749554dbe3",
+          "id": "piagent-scout",
+          "kind": "subagents",
+          "path": "packages/piagent-core/subagents/piagent-scout.md"
+        },
+        {
+          "byteSize": 1731,
+          "digest": "sha256:551b9722940b9e2ebd9053fcf520ebf22e7478f7286615683776e9d989bb7d89",
+          "id": "piagent-worker",
+          "kind": "subagents",
+          "path": "packages/piagent-core/subagents/piagent-worker.md"
+        }
+      ],
+      "dependencies": [],
+      "description": "Core engineering workflow, policy, verification, and task coordination capabilities.",
+      "digest": "sha256:b9671f0c2da79012b8638c98459d5bbe9e444fd39fdabe17f54477ec18cc9fdf",
+      "license": "MIT",
+      "lifecycle": "experimental",
+      "name": "engineering-base",
+      "origin": "workspace",
+      "owner": "platform-maintainers",
+      "permissions": {
+        "capabilities": [
+          "filesystem-readonly",
+          "filesystem-write",
+          "memory",
+          "shell"
+        ],
+        "externalActions": [],
+        "filesystemRead": [
+          "**/*"
+        ],
+        "filesystemWrite": [
+          "**/*"
+        ],
+        "networkDomains": []
+      },
+      "source": "workspace",
+      "tags": [
+        "engineering",
+        "governance"
+      ],
+      "version": "0.1.1"
+    },
+    {
+      "activation": {
+        "mode": "profile",
+        "profiles": [
+          "web-frontend"
+        ],
+        "triggers": []
+      },
+      "artifacts": [
+        {
+          "byteSize": 1950,
+          "digest": "sha256:84ac29dcbe0c692070be302707424ea16130a5938cff309c5d7755204b6c2dc1",
+          "id": "web-frontend",
+          "kind": "adapters",
+          "path": "adapters/web-frontend/profile.json"
+        },
+        {
+          "byteSize": 1276,
+          "digest": "sha256:96959d1f93a01c8e100d0ab72d1b820046491ba6220bc1361263c3258e2224c5",
+          "id": "verified-web-change",
+          "kind": "recipes",
+          "path": "packs/web-delivery/recipes/verified-web-change.json"
+        }
+      ],
+      "dependencies": [
+        {
+          "name": "engineering-base",
+          "version": "0.1.1"
+        }
+      ],
+      "description": "Web application delivery capabilities with browser-assisted verification.",
+      "digest": "sha256:b5a74b3ef869fe777a870b4b450ae9dc91d30e3370ce369a03d939abef8606cf",
+      "license": "MIT",
+      "lifecycle": "experimental",
+      "name": "web-delivery",
+      "origin": "workspace",
+      "owner": "platform-maintainers",
+      "permissions": {
+        "capabilities": [
+          "browser",
+          "filesystem-readonly",
+          "filesystem-write",
+          "shell"
+        ],
+        "externalActions": [],
+        "filesystemRead": [
+          "**/*"
+        ],
+        "filesystemWrite": [
+          "**/*"
+        ],
+        "networkDomains": []
+      },
+      "source": "workspace",
+      "tags": [
+        "frontend",
+        "web"
+      ],
+      "version": "0.1.1"
+    }
+  ],
+  "schemaVersion": 1
+}

package/docs/architecture.md

@@ -0,0 +1,64 @@
+# Kiến trúc Pi Agent Platform
+
+## Mục tiêu
+
+Tách phần agent platform khỏi từng project. Một core dùng chung, nhiều adapter tùy project.
+
+```text
+User machine
+├─ ~/.pi/agent/
+│  ├─ settings.json              user/global Pi settings
+│  ├─ auth.json                  OAuth token, không commit
+│  └─ mcp.json                   Pi global MCP override
+├─ ~/.config/mcp/mcp.json        shared global MCP config
+└─ <platform-repo>/
+   ├─ package.json               root Pi package manifest
+   ├─ packages/piagent-core   reusable Pi package internals
+   ├─ adapters/*/profile.json    project/domain profiles
+   └─ templates/project          files copied into target projects
+
+Any project
+├─ AGENTS.md                     project instructions
+├─ .mcp.json                     shared MCP config
+└─ .pi/
+   ├─ settings.json              project Pi settings
+   ├─ piagent-profile.json       project adapter
+   ├─ memory/                    project-scoped explicit memory
+   └─ mcp.json                   Pi project MCP override
+```
+
+## Layering
+
+| Layer | Scope | Commit? | Nội dung |
+|---|---|---:|---|
+| OAuth/auth | user machine | Không | `auth.json`, API token, trust state. |
+| Pi global settings | user machine | Không, chỉ template | provider/model, installed packages, telemetry/proxy. |
+| Piagent core | platform repo | Có | extension guard, prompt, skill, policy engine. |
+| Domain pack | platform repo | Có | frontend/backend/data profile chung. |
+| Project adapter | project repo hoặc platform repo | Có | paths, context, verify, MCP capabilities. |
+| Project memory | user/project machine | Không mặc định | `.pi/memory/MEMORY.md` và summary là private-by-default; team chỉ opt-in commit sau review/redaction. |
+
+## Luồng chạy
+
+1. User `cd <project>`.
+2. User chạy `pi`.
+3. Pi đọc global settings và package đã cài.
+4. Nếu project trusted, Pi đọc `.pi/settings.json` và `.pi/piagent-profile.json`.
+5. `piagent-core` extension intercept tool calls.
+6. Agent dùng prompts/skills, MCP registry, context policy, và memory policy.
+7. Memory được đọc/search như advisory context; source hiện tại vẫn là authority.
+8. Trước khi DONE, agent chạy verify theo profile.
+
+## Vì sao không hard-code vào prompt
+
+Prompt chỉ hướng dẫn model. Guard extension có thể block tool call trước khi chạy. Các rule nguy hiểm phải nằm trong policy/extension:
+
+- protected path
+- destructive bash
+- missing verify
+- unsupported MCP capability
+- credential handling
+
+## Project-specific examples
+
+Project đặc thù có thể có backend freeze, structure guide, experience contract, e2e gate. Những thứ này không được đưa vào core; hãy đặt profile riêng trong chính repo project.