@piagent/platform 1.1.5 → 1.1.7

package/schemas/project-profile.schema.json

@@ -6,19 +6,37 @@
   "required": [
     "schemaVersion",
     "projectId",
-    "displayName",
-    "mode",
-    "rootMarkers",
-    "protectedPaths",
-    "requiredContext",
-    "verifyCommands",
-    "mcpCapabilities"
+    "displayName"
   ],
+  "if": {
+    "required": [
+      "extends"
+    ]
+  },
+  "then": {
+    "description": "A profile that names an adapter stores identity plus overrides. Every policy field it omits comes from the installed adapter at runtime, so none of them are required here."
+  },
+  "else": {
+    "required": [
+      "mode",
+      "rootMarkers",
+      "protectedPaths",
+      "requiredContext",
+      "verifyCommands",
+      "mcpCapabilities"
+    ]
+  },
   "properties": {
     "schemaVersion": {
       "type": "integer",
       "const": 1
     },
+    "extends": {
+      "description": "Name of a built-in adapter under adapters/ in the installed platform. Its profile is the base; every other key in this file replaces the adapter's key of the same name.",
+      "type": "string",
+      "minLength": 1,
+      "pattern": "^[a-z0-9][a-z0-9-]*$"
+    },
     "projectId": {
       "type": "string",
       "minLength": 1,

package/scripts/capability-catalog.mjs

@@ -20,6 +20,10 @@ import {
   validateCapabilitySources,
   vendorRemoteSource
 } from "../packages/piagent-core/capabilities/capability-sources.js";
+import {
+  buildExtendingProfile,
+  resolveProjectProfileDocument
+} from "../packages/piagent-core/capabilities/project-profile.js";
 
 const platformRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
 const catalogPath = path.join(platformRoot, "catalog", "capabilities.json");
@@ -28,7 +32,7 @@ function usage() {
   process.stdout.write(`Usage:
   piagent-capabilities catalog [--check | --write]
   piagent-capabilities resolve --profile <profile.json> [--output <lock.json>] [--package-source <source>]
-  piagent-capabilities apply-profile --profile <source.json> --target <piagent-profile.json> [--package-source <source>] [--force]
+  piagent-capabilities apply-profile --profile <source.json> --target <piagent-profile.json> [--extends <adapter>] [--package-source <source>] [--force]
   piagent-capabilities doctor [--profile <profile.json>] [--lock <lock.json>] [--package-source <source>]
   piagent-capabilities vendor --profile <profile.json> [--source <name>]
   piagent-capabilities validate-source --package-source <source>
@@ -58,7 +62,7 @@ function parseArguments(values) {
       output.flags.set(value, true);
       continue;
     }
-    if (!["--profile", "--output", "--target", "--lock", "--file", "--package-source", "--source"].includes(value)) throw new CapabilityValidationError(`unknown option ${value}`);
+    if (!["--profile", "--extends", "--output", "--target", "--lock", "--file", "--package-source", "--source"].includes(value)) throw new CapabilityValidationError(`unknown option ${value}`);
     if (output.flags.has(value)) throw new CapabilityValidationError(`duplicate option ${value}`);
     const next = values[index + 1];
     if (!next || next.startsWith("--")) throw new CapabilityValidationError(`${value} requires a value`);
@@ -157,7 +161,7 @@ function runResolve(flags) {
 }
 
 function runApplyProfile(flags) {
-  assertAllowedFlags(flags, new Set(["--profile", "--target", "--package-source", "--force"]));
+  assertAllowedFlags(flags, new Set(["--profile", "--extends", "--target", "--package-source", "--force"]));
   const source = requireExistingFile(flags.get("--profile"), "--profile");
   const targetValue = flags.get("--target");
   if (!targetValue) throw new CapabilityValidationError("--target is required");
@@ -166,17 +170,27 @@ function runApplyProfile(flags) {
   const parent = fs.realpathSync(path.dirname(target));
   const normalizedTarget = path.join(parent, path.basename(target));
   if (fs.existsSync(normalizedTarget) && !flags.has("--force")) throw new CapabilityValidationError("target profile already exists; pass --force to replace it");
-  const profile = readJson(source);
+  const adapter = readJson(source);
+  const base = flags.get("--extends");
+  // With --extends the project records which adapter it follows and keeps only
+  // its own identity, so a later platform correction reaches it. Without it the
+  // source document is copied whole, which is what a caller supplying its own
+  // profile file wants.
+  const stored = base === undefined
+    ? adapter
+    : buildExtendingProfile(base, adapter.projectId, adapter.displayName);
+  const profile = resolveProjectProfileDocument(platformRoot, stored).profile;
   const packageSource = flags.get("--package-source") ?? "workspace";
   const lock = resolveCapabilityProfileDocument(platformRoot, profile, {
     profileFile: path.basename(normalizedTarget),
+    storedProfile: stored,
     packageSource,
     extraRoots: profile.capabilitySources === undefined
       ? undefined
       : resolveCapabilitySourceRoots(projectRootForProfile(normalizedTarget), profile.capabilitySources)
   });
   const lockTarget = path.join(parent, "piagent-profile.lock.json");
-  writeProfileLockAtomic(normalizedTarget, profile, lockTarget, lock);
+  writeProfileLockAtomic(normalizedTarget, stored, lockTarget, lock);
   process.stdout.write(`${JSON.stringify({ ok: true, profile: normalizedTarget, lock: lockTarget, packs: lock.packs.length })}\n`);
 }
 
@@ -210,11 +224,18 @@ function runDoctor(flags) {
       const verification = verifyCapabilityLock(platformRoot, profile, readJson(lockFile), { packageSource, extraRoots });
       report.lock = {
         path: lockFile,
-        current: verification.ok,
+        current: verification.status === "current",
+        status: verification.status,
+        reasons: verification.reasons,
         expectedDigest: verification.expectedDigest,
         actualDigest: verification.actualDigest
       };
-      if (!verification.ok) throw new CapabilityValidationError("capability lock is stale or has been modified");
+      // A re-pinnable lock is behind the installed build but grants exactly what
+      // it agreed to, so it is reported rather than treated as a failure. The
+      // guard rewrites it on the next session.
+      if (verification.status === "blocked") {
+        throw new CapabilityValidationError(`capability lock no longer matches what the project agreed to: ${verification.reasons.join("; ")}`);
+      }
     }
   } else if (flags.has("--lock")) {
     throw new CapabilityValidationError("--lock requires --profile");

package/scripts/init-project.sh

@@ -102,97 +102,20 @@ fi
 
 PROJECT_PATH="$(cd "$PROJECT_PATH" && pwd)"
 
-package_has_any() {
-  local project="$1"
-  local pattern="$2"
-  [[ -f "$project/package.json" ]] && grep -Eiq "$pattern" "$project/package.json"
-}
-
+# Profile detection lives in packages/piagent-core/extensions/project-shape.js so
+# that this script and the runtime `piagent_profile_options` tool recommend the
+# same profile. They used to hold separate copies of the rules and drifted apart.
 detect_profile() {
   local project="$1"
-  local has_package=false
-  local frontend=false
-  local backend=false
-  local data=false
-  local mobile=false
-  local devops=false
-  local infra=false
-  local docs=false
-
-  [[ -f "$project/package.json" ]] && has_package=true
-
-  if [[ -f "$project/pubspec.yaml" ]] || { [[ -d "$project/android" ]] && [[ -d "$project/ios" ]]; }; then
-    mobile=true
-  fi
-
-  if [[ -f "$project/dbt_project.yml" ]] || [[ -f "$project/dvc.yaml" ]] || [[ -d "$project/notebooks" ]] || [[ -d "$project/data" ]]; then
-    data=true
-  fi
-
-  if [[ -f "$project/Dockerfile" ]] || [[ -f "$project/docker-compose.yml" ]] || [[ -f "$project/compose.yml" ]] || [[ -f "$project/compose.yaml" ]] || [[ -d "$project/terraform" ]] || [[ -d "$project/infra" ]] || [[ -d "$project/k8s" ]] || [[ -d "$project/helm" ]]; then
-    infra=true
-    devops=true
-  elif [[ -d "$project/.github/workflows" ]]; then
-    devops=true
-  fi
-
-  if [[ -d "$project/docs" ]] || [[ -f "$project/mkdocs.yml" ]] || [[ -f "$project/mint.json" ]] || [[ -f "$project/docusaurus.config.js" ]]; then
-    docs=true
-  fi
-
-  if [[ "$has_package" == true ]]; then
-    if [[ -d "$project/frontend" ]] || [[ -d "$project/apps/web" ]] || [[ -d "$project/apps/frontend" ]]; then
-      frontend=true
-    fi
-
-    if [[ -d "$project/backend" ]] || [[ -d "$project/apps/api" ]] || [[ -d "$project/apps/server" ]]; then
-      backend=true
-    fi
-
-    if package_has_any "$project" '"(next|react|vite|vue|svelte|astro|@angular/core|remix)"' \
-      || [[ -f "$project/next.config.js" ]] || [[ -f "$project/next.config.mjs" ]] || [[ -f "$project/next.config.ts" ]] \
-      || [[ -f "$project/vite.config.js" ]] || [[ -f "$project/vite.config.ts" ]] \
-      || [[ -d "$project/src/app" ]] || [[ -d "$project/pages" ]] || [[ -d "$project/public" ]]; then
-      frontend=true
-    fi
-
-    if package_has_any "$project" '"(@nestjs|express|fastify|hono|koa|apollo-server|graphql-yoga|prisma|typeorm|sequelize|drizzle-orm)"' \
-      || [[ -f "$project/nest-cli.json" ]] || [[ -d "$project/prisma" ]] || [[ -d "$project/src/server" ]] || [[ -d "$project/src/api" ]]; then
-      backend=true
-    fi
-  fi
-
-  if [[ -f "$project/pom.xml" ]] || [[ -f "$project/build.gradle" ]] || [[ -f "$project/build.gradle.kts" ]] || [[ -d "$project/src/main/java" ]] || [[ -d "$project/src/main/kotlin" ]]; then
-    backend=true
-  fi
-
-  if [[ -f "$project/pyproject.toml" ]] && grep -Eiq "(fastapi|flask|django|litestar|starlite)" "$project/pyproject.toml"; then
-    backend=true
-  fi
-
-  if [[ "$mobile" == true ]]; then
-    printf '%s\n' "mobile"
-  elif [[ "$frontend" == true && "$backend" == true ]]; then
-    printf '%s\n' "fullstack"
-  elif [[ "$frontend" == true ]]; then
-    printf '%s\n' "web-frontend"
-  elif [[ "$backend" == true ]]; then
-    printf '%s\n' "backend-api"
-  elif [[ "$data" == true ]]; then
-    printf '%s\n' "data"
-  elif [[ -f "$project/pyproject.toml" ]]; then
-    printf '%s\n' "python"
-  elif [[ "$has_package" == true && -f "$project/tsconfig.json" ]]; then
-    printf '%s\n' "node-typescript"
-  elif [[ "$infra" == true ]]; then
-    printf '%s\n' "devops"
-  elif [[ "$docs" == true ]]; then
-    printf '%s\n' "docs"
-  elif [[ "$devops" == true ]]; then
-    printf '%s\n' "devops"
-  else
-    printf '%s\n' "generic"
-  fi
+  node --input-type=module - "$PLATFORM_ROOT" "$project" <<'NODE'
+import path from "node:path";
+import { pathToFileURL } from "node:url";
+
+const [platformRoot, project] = process.argv.slice(2);
+const modulePath = path.join(platformRoot, "packages/piagent-core/extensions/project-shape.js");
+const { detectProfileName } = await import(pathToFileURL(modulePath).href);
+process.stdout.write(`${detectProfileName(project).name}\n`);
+NODE
 }
 
 resolve_profile_path() {
@@ -296,6 +219,13 @@ if [[ "$FORCE_PROFILE" == true || ! -f "$PROFILE_TARGET" ]]; then
     --target "$PROFILE_TARGET"
     --package-source "$PACKAGE_SOURCE"
   )
+  # A built-in adapter is referenced, not copied, so a later platform correction
+  # reaches this project. A caller supplying its own profile file still gets that
+  # file written whole.
+  if [[ "$PROFILE_PATH" == "$PLATFORM_ROOT/adapters/"*"/profile.json" ]]; then
+    adapter_name="${PROFILE_PATH#"$PLATFORM_ROOT/adapters/"}"
+    apply_profile_args+=(--extends "${adapter_name%/profile.json}")
+  fi
   if [[ "$FORCE_PROFILE" == true ]]; then
     apply_profile_args+=(--force)
   fi

package/scripts/install-global.sh

@@ -15,7 +15,7 @@ Package source examples:
   # Installs the stable tag after resolving it to a commit SHA.
 
   # Pin a specific release:
-  scripts/install-global.sh --version v1.1.5 --resolve-tag
+  scripts/install-global.sh --version v1.1.7 --resolve-tag
 
   # Preview the planned install/update without changing user config:
   scripts/install-global.sh --stable --dry-run
@@ -127,7 +127,7 @@ detect_runtime_surface() {
       printf 'native-windows/%s (not release-gated; terminal helpers require Bash semantics)' "$arch_name"
       ;;
     *)
-      printf '%s/%s (outside v1.1.5 release matrix)' "$os_name" "$arch_name"
+      printf '%s/%s (outside v1.1.7 release matrix)' "$os_name" "$arch_name"
       ;;
   esac
 }
@@ -135,7 +135,7 @@ detect_runtime_surface() {
 warn_runtime_surface_if_needed() {
   local surface="$1"
   case "$surface" in
-    *"supported target"*|*"experimental"*|*"not release-gated"*|*"outside v1.1.5 release matrix"*)
+    *"supported target"*|*"experimental"*|*"not release-gated"*|*"outside v1.1.7 release matrix"*)
       echo "WARN: runtime surface is $surface." >&2
       echo "WARN: For team rollout, run piagent-doctor plus the project smoke/verify suite on this machine before relying on it." >&2
       ;;

package/scripts/profile-doctor.sh

@@ -19,12 +19,22 @@ if [[ ! -f "$PROFILE_PATH" ]]; then
   exit 1
 fi
 
-node --input-type=module - "$PROJECT_PATH" "$PROFILE_PATH" <<'NODE'
+PLATFORM_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+
+node --input-type=module - "$PROJECT_PATH" "$PROFILE_PATH" "$PLATFORM_ROOT" <<'NODE'
 import fs from "node:fs";
 import path from "node:path";
+import { pathToFileURL } from "node:url";
+
+const [projectPath, profilePath, platformRoot] = process.argv.slice(2);
+const stored = JSON.parse(fs.readFileSync(profilePath, "utf8"));
 
-const [projectPath, profilePath] = process.argv.slice(2);
-const profile = JSON.parse(fs.readFileSync(profilePath, "utf8"));
+// A profile that names an adapter is checked as the document that will actually
+// be enforced, not as the few lines the project happens to store.
+const { resolveProjectProfileDocument } = await import(
+  pathToFileURL(path.join(platformRoot, "packages", "piagent-core", "capabilities", "project-profile.js")).href
+);
+const profile = resolveProjectProfileDocument(platformRoot, stored).profile;
 
 const errors = [];
 const warnings = [];

package/scripts/runtime-policy-smoke.sh

@@ -25,11 +25,20 @@ bash "$ROOT/scripts/profile-doctor.sh" "$PROJECT" >/dev/null
 bash "$ROOT/scripts/quality-benchmark.sh" "$PROJECT" --init >/dev/null
 bash "$ROOT/scripts/quality-benchmark.sh" "$PROJECT" --record --scenario smoke --surface pi --result pass --tokens 1 --verify "test -s README.md" >/dev/null
 
-node --input-type=module - "$PROJECT/.pi/piagent-profile.json" "$PROJECT/.pi/benchmarks/quality-runs.jsonl" <<'NODE'
+node --input-type=module - "$PROJECT/.pi/piagent-profile.json" "$PROJECT/.pi/benchmarks/quality-runs.jsonl" "$ROOT" <<'NODE'
 import fs from "node:fs";
+import path from "node:path";
+import { pathToFileURL } from "node:url";
 
-const [profilePath, benchmarkPath] = process.argv.slice(2);
-const profile = JSON.parse(fs.readFileSync(profilePath, "utf8"));
+const [profilePath, benchmarkPath, platformRoot] = process.argv.slice(2);
+const stored = JSON.parse(fs.readFileSync(profilePath, "utf8"));
+
+// A project that names an adapter stores identity and overrides only. The policy
+// the runtime enforces is the resolved document, so that is what gets checked.
+const { resolveProjectProfileDocument } = await import(
+  pathToFileURL(path.join(platformRoot, "packages", "piagent-core", "capabilities", "project-profile.js")).href
+);
+const profile = resolveProjectProfileDocument(platformRoot, stored).profile;
 for (const capability of ["filesystem-readonly", "filesystem-write", "shell", "memory"]) {
   if (!profile.mcpCapabilities.includes(capability)) {
     throw new Error(`missing capability ${capability}`);

package/scripts/team-doctor.sh

@@ -137,7 +137,7 @@ function runtimeMatrixStatus() {
     surface: `${platform}/${arch}`,
     status: "outside-release-matrix",
     teamRolloutReady: false,
-    note: "This runtime is outside the documented v1.1.5 support matrix."
+    note: "This runtime is outside the documented v1.1.7 support matrix."
   };
 }
 
@@ -313,7 +313,12 @@ if (foreignAgentConfig.length > 0) {
 const projectProfilePath = path.join(projectPath, ".pi", "piagent-profile.json");
 let projectProfile = null;
 if (fs.existsSync(projectProfilePath)) {
-  const profile = readJson(projectProfilePath);
+  // Check the document that will be enforced. A profile that names an adapter
+  // stores only its own identity and overrides.
+  const { resolveProjectProfileDocument } = await import(
+    pathToFileURL(path.join(platformRoot, "packages", "piagent-core", "capabilities", "project-profile.js")).href
+  );
+  const profile = resolveProjectProfileDocument(platformRoot, readJson(projectProfilePath)).profile;
   projectProfile = profile;
   for (const field of ["schemaVersion", "projectId", "displayName", "mode"]) {
     if (profile[field] === undefined || profile[field] === "") errors.push(`project profile missing ${field}`);
@@ -333,7 +338,11 @@ if (fs.existsSync(projectProfilePath)) {
       try {
         const lock = readJson(projectLockPath);
         const verification = verifyCapabilityLock(platformRoot, projectProfilePath, lock, { packageSource: projectPackageSource });
-        if (!verification.ok) errors.push("project capability lock is stale or does not match the configured package source");
+        if (verification.status === "blocked") {
+          errors.push(`project capability lock no longer matches what the project agreed to: ${verification.reasons.join("; ")}`);
+        } else if (verification.status === "repin") {
+          warnings.push(`project capability lock is behind the installed platform and will be re-pinned on the next Pi session (${verification.reasons.join("; ")})`);
+        }
       } catch (error) {
         errors.push(`project capability lock validation failed: ${error instanceof Error ? error.message : String(error)}`);
       }