@piagent/platform 1.37.1 → 1.38.1

package/evals/fixtures/piagent-webui/workspace-paths-v1.invalid.json

@@ -0,0 +1,24 @@
+{
+  "schemaVersion": 1,
+  "version": "piagent-webui-workspace-paths-v1",
+  "generatedAt": "2026-10-22T00:00:00.000Z",
+  "identity": {
+    "projectRef": "project_01",
+    "runtimeInstanceId": "runtime_01",
+    "sessionRef": "session_01",
+    "taskId": null,
+    "taskRunId": null,
+    "agentOperationId": null,
+    "toolCallId": null
+  },
+  "query": "hello",
+  "truncated": false,
+  "suggestions": [
+    {
+      "value": "hello.ts",
+      "label": "hello.ts",
+      "detail": "hello.ts",
+      "kind": "shell"
+    }
+  ]
+}

package/evals/fixtures/piagent-webui/workspace-paths-v1.valid.json

@@ -0,0 +1,24 @@
+{
+  "schemaVersion": 1,
+  "version": "piagent-webui-workspace-paths-v1",
+  "generatedAt": "2026-10-22T00:00:00.000Z",
+  "identity": {
+    "projectRef": "project_01",
+    "runtimeInstanceId": "runtime_01",
+    "sessionRef": "session_01",
+    "taskId": null,
+    "taskRunId": null,
+    "agentOperationId": null,
+    "toolCallId": null
+  },
+  "query": "hello",
+  "truncated": false,
+  "suggestions": [
+    {
+      "value": "hello.ts",
+      "label": "hello.ts",
+      "detail": "hello.ts",
+      "kind": "file"
+    }
+  ]
+}

package/evals/fixtures/piagent-webui/workspace-search-v1.invalid.json

@@ -0,0 +1,26 @@
+{
+  "schemaVersion": 1,
+  "version": "piagent-webui-workspace-search-v1",
+  "generatedAt": "2026-10-22T00:00:00.000Z",
+  "identity": {
+    "projectRef": "project_01",
+    "runtimeInstanceId": "runtime_01",
+    "sessionRef": "session_01",
+    "taskId": null,
+    "taskRunId": null,
+    "agentOperationId": null,
+    "toolCallId": null
+  },
+  "query": "hello",
+  "truncated": false,
+  "available": true,
+  "backend": "ripgrep",
+  "matches": [
+    {
+      "path": "hello.ts",
+      "line": 0,
+      "column": 3,
+      "preview": "  hello"
+    }
+  ]
+}

package/evals/fixtures/piagent-webui/workspace-search-v1.valid.json

@@ -0,0 +1,26 @@
+{
+  "schemaVersion": 1,
+  "version": "piagent-webui-workspace-search-v1",
+  "generatedAt": "2026-10-22T00:00:00.000Z",
+  "identity": {
+    "projectRef": "project_01",
+    "runtimeInstanceId": "runtime_01",
+    "sessionRef": "session_01",
+    "taskId": null,
+    "taskRunId": null,
+    "agentOperationId": null,
+    "toolCallId": null
+  },
+  "query": "hello",
+  "truncated": false,
+  "available": true,
+  "backend": "ripgrep",
+  "matches": [
+    {
+      "path": "hello.ts",
+      "line": 2,
+      "column": 3,
+      "preview": "  hello"
+    }
+  ]
+}

package/evals/fixtures/piagent-webui/workspace-tree-v1.invalid.json

@@ -0,0 +1,28 @@
+{
+  "schemaVersion": 1,
+  "version": "piagent-webui-workspace-tree-v1",
+  "generatedAt": "2026-10-22T00:00:00.000Z",
+  "identity": {
+    "projectRef": "project_01",
+    "runtimeInstanceId": "runtime_01",
+    "sessionRef": "session_01",
+    "taskId": null,
+    "taskRunId": null,
+    "agentOperationId": null,
+    "toolCallId": null
+  },
+  "path": "",
+  "entries": [
+    {
+      "name": "src",
+      "path": "src",
+      "kind": "directory",
+      "protected": false,
+      "readOnly": false,
+      "ignored": false
+    }
+  ],
+  "truncated": false,
+  "source": "git",
+  "unexpectedAuthority": true
+}

package/evals/fixtures/piagent-webui/workspace-tree-v1.valid.json

@@ -0,0 +1,27 @@
+{
+  "schemaVersion": 1,
+  "version": "piagent-webui-workspace-tree-v1",
+  "generatedAt": "2026-10-22T00:00:00.000Z",
+  "identity": {
+    "projectRef": "project_01",
+    "runtimeInstanceId": "runtime_01",
+    "sessionRef": "session_01",
+    "taskId": null,
+    "taskRunId": null,
+    "agentOperationId": null,
+    "toolCallId": null
+  },
+  "path": "",
+  "entries": [
+    {
+      "name": "src",
+      "path": "src",
+      "kind": "directory",
+      "protected": false,
+      "readOnly": false,
+      "ignored": false
+    }
+  ],
+  "truncated": false,
+  "source": "git"
+}

package/evals/fixtures/piagent-webui/workspace-write-v1.invalid.json

@@ -0,0 +1,19 @@
+{
+  "schemaVersion": 1,
+  "version": "piagent-webui-workspace-write-v1",
+  "messageType": "state",
+  "identity": {
+    "projectRef": "project_01",
+    "runtimeInstanceId": "runtime_01",
+    "sessionRef": "session_01",
+    "taskId": null,
+    "taskRunId": null,
+    "agentOperationId": null,
+    "toolCallId": null
+  },
+  "revisions": {
+    "workspaceRevision": "workspace.0"
+  },
+  "writable": "yes",
+  "agentRunning": false
+}

package/evals/fixtures/piagent-webui/workspace-write-v1.valid.json

@@ -0,0 +1,19 @@
+{
+  "schemaVersion": 1,
+  "version": "piagent-webui-workspace-write-v1",
+  "messageType": "state",
+  "identity": {
+    "projectRef": "project_01",
+    "runtimeInstanceId": "runtime_01",
+    "sessionRef": "session_01",
+    "taskId": null,
+    "taskRunId": null,
+    "agentOperationId": null,
+    "toolCallId": null
+  },
+  "revisions": {
+    "workspaceRevision": "workspace.0"
+  },
+  "writable": true,
+  "agentRunning": false
+}

package/evals/long-task-soak-v1/README.md

@@ -28,6 +28,7 @@ the deterministic lifecycle evidence lives in `evals/long-horizon-v1` and the
 node evals/long-task-soak-v1/runner.mjs --list
 node evals/long-task-soak-v1/runner.mjs --self-check            # oracles: fail on the fixture, pass on the reference
 node evals/long-task-soak-v1/runner.mjs --surface webui --scenario autonomous-node-inventory
+node evals/long-task-soak-v1/runner.mjs --surface webui --scenario ide-editor-terminal
 node evals/long-task-soak-v1/runner.mjs --surface both --category business,third-party --repeat 2
 ```
 
@@ -35,6 +36,16 @@ Runs go to `~/piagent-soak/runs/<time>/<scenario>-<surface>-<n>/` (`project/`,
 `events.jsonl`, `result.json`); reports to `~/piagent-soak/reports/` as JSON
 and Markdown. `--work-root` moves both.
 
+`ide-editor-terminal` requires a working company terminal (qualified on Linux;
+macOS Seatbelt reports unavailable). After the first agent turn, the member reads
+README through the workspace API, saves an appended note with its exact digest,
+and verifies the saved bytes through the same API. It then opens a real terminal
+over the authenticated Gateway WebSocket, runs `npm test`, observes its numeric
+exit status and closes the terminal. Missing, rejected, uncertain or unfinished
+member actions fail the scenario even if the agent's hidden oracle passes.
+These are editor/terminal protocol operations, not browser rendering coverage;
+the browser workflows are qualified separately. No host shell fallback is used.
+
 ## Verdicts
 
 - `smooth`: the checks pass and the member never had to push.
@@ -77,6 +88,12 @@ the scenario's decisions need, each counted as a push); per run:
 }
 ```
 
+WebUI scenarios can also use ordered actions after a settled turn:
+`{ "when": { "turns": 1 }, "do": "editor_save", "path": "README.md", "append": "\nMember note.\n" }`
+and `{ "when": { "turns": 1 }, "do": "terminal_test", "command": "npm test", "timeoutSec": 120, "expectedExitCode": 0 }`.
+They run in listed order before oracle judging. The RPC terminal surface does
+not implement these member workspace operations and fails them explicitly.
+
 A fixture is `fixtures/<name>/` with `project/` (what the member's repository
 holds), `fixture.json` (`setup` commands such as dependency installs,
 `protect`ed files), one or more hidden overlays (acceptance tests the agent

package/evals/long-task-soak-v1/lib/session-loop.mjs

@@ -24,12 +24,13 @@ export async function playScenario({ scenario, surface, prepared, runDir }) {
   const budget = { maxMinutes: 120, maxNudges: 3, stallMinutes: 15, ...(scenario.budget ?? {}) };
   const persona = new Persona(scenario), started = Date.now(), log = fs.createWriteStream(path.join(runDir, 'events.jsonl'));
   const stats = { turns: 0, toolCalls: 0, toolErrors: 0, providerRetries: 0, compactions: 0, capacityWaits: 0, assistantMessages: 0,
-    nudges: 0, stalls: 0, crashes: 0, restarts: 0, memberStops: 0, steers: 0, questions: 0, proseAnswers: 0, approvals: 0, inputTokens: 0, outputTokens: 0 };
+    nudges: 0, stalls: 0, crashes: 0, restarts: 0, memberStops: 0, steers: 0, questions: 0, proseAnswers: 0, approvals: 0, inputTokens: 0, outputTokens: 0, workspaceActions: 0 };
   const turns = [], defects = [], actions = (scenario.userActions ?? []).map(a => ({ ...a, fired: false }));
   const record = (type, data = {}) => log.write(JSON.stringify({ t: Date.now() - started, type, ...data }) + '\n');
   let lastActivity = Date.now(), pendingAction = null;
 
   const due = a => !a.fired && ((a.when?.toolCalls != null && stats.toolCalls >= a.when.toolCalls)
+    || (a.when?.turns != null && stats.turns >= a.when.turns)
     || (a.when?.minutes != null && Date.now() - started >= a.when.minutes * MINUTE));
   const hooks = {
     onEvent(e) {
@@ -73,7 +74,16 @@ export async function playScenario({ scenario, surface, prepared, runDir }) {
         if (restarted === 'reopened') return { resume: action.text ?? persona.afterStall() };
         if (!restarted) record('member_action_unsupported', { do: action.do });
       }
-    } catch (error) { record('member_action_failed', { do: action.do, error: String(error?.message ?? error) }); }
+      else if (['editor_save', 'terminal_test'].includes(action.do)) {
+        if (!surface.memberAction) throw Error('workspace-actions-require-webui');
+        const result = await surface.memberAction(action);
+        action.completed = true; stats.workspaceActions++;
+        record('member_action_completed', { do: action.do, ...result });
+      }
+    } catch (error) {
+      record('member_action_failed', { do: action.do, error: String(error?.message ?? error) });
+      if (['editor_save', 'terminal_test'].includes(action.do)) defects.push({ defect: 'workspace_action_failed', action: action.do });
+    }
     return null;
   }
 
@@ -104,6 +114,10 @@ export async function playScenario({ scenario, surface, prepared, runDir }) {
       const turn = await turnEnd();
       stats.turns++; finalTurn = turn;
       const action = pendingAction ? await pendingAction : null; pendingAction = null;
+      // Ordered member work at a settled turn must finish before oracle judging.
+      for (const next of actions.filter(a => ['editor_save', 'terminal_test'].includes(a.do) && due(a))) {
+        next.fired = true; await fire(next);
+      }
       if (turn.crashed) {
         stats.crashes++; record('crash', { detail: turn.error });
         if (!(await surface.restart().catch(() => false))) { defects.push({ turn: stats.turns, defect: 'process_crashed_unrecoverable' }); break; }
@@ -156,7 +170,9 @@ export async function playScenario({ scenario, surface, prepared, runDir }) {
   for (const file of touched) defects.push({ defect: 'protected_file_changed', file });
   for (const id of notAsked) defects.push({ defect: 'business_decision_not_asked', decision: id });
   if (scenario.questionsExpected === false) for (const q of persona.unexpected) defects.push({ defect: 'unneeded_question', question: q.slice(0, 200) });
-  const pass = phasesDone === phases.length && oracle.pass && touched.length === 0;
+  const workspaceActionsComplete = actions.filter(a => ['editor_save', 'terminal_test'].includes(a.do)).every(a => a.completed);
+  if (!workspaceActionsComplete) defects.push({ defect: 'workspace_actions_incomplete' });
+  const pass = phasesDone === phases.length && oracle.pass && touched.length === 0 && workspaceActionsComplete;
   return {
     scenario: scenario.id, pass, verdict: verdict({ pass, ...stats, maxNudges: budget.maxNudges }),
     minutes: +((Date.now() - started) / MINUTE).toFixed(1), phases: `${phasesDone}/${phases.length}`, stats, defects, turns, oracle,

package/evals/long-task-soak-v1/scenarios/ide-editor-terminal.json

@@ -0,0 +1,19 @@
+{
+  "id": "ide-editor-terminal",
+  "title": "Member saves a document through the editor API and runs the project tests in the company terminal",
+  "category": ["ide", "autonomous", "long-horizon"],
+  "language": "vi",
+  "fixture": "node-inventory",
+  "requires": ["git"],
+  "prompt": "Làm toàn bộ SPEC.md cho thư viện kho-hang: cài đặt đủ 9 mục trong src/, viết test từng mục trong test/, chạy npm test đến khi qua hết. Đặc tả đã đủ, không cần hỏi lại, cứ làm đến xong. Sau lượt này anh sẽ mở README.md trong editor, lưu ghi chú của anh và tự chạy npm test trong terminal của WebUI.",
+  "questionsExpected": false,
+  "decisions": [],
+  "approvals": "allow",
+  "userActions": [
+    { "when": { "turns": 1 }, "do": "editor_save", "path": "README.md", "append": "\nMember reviewed this project in the Session Hub editor.\n" },
+    { "when": { "turns": 1 }, "do": "terminal_test", "command": "npm test", "timeoutSec": 120, "expectedExitCode": 0 }
+  ],
+  "budget": { "maxMinutes": 60, "maxNudges": 3, "stallMinutes": 12 },
+  "oracle": { "hidden": "hidden", "checks": [{ "name": "spec acceptance", "run": "node --test 'test/*.test.js'", "timeoutSec": 300 }] },
+  "reference": "reference"
+}

package/evals/long-task-soak-v1/surfaces/webui-gateway.mjs

@@ -2,6 +2,7 @@ import { spawn } from 'node:child_process';
 import { randomUUID } from 'node:crypto';
 import { WebSocket } from 'ws';
 import { piagentEnv } from '../lib/workspace.mjs';
+import { editWorkspace, runTerminal } from './workspace-actions.mjs';
 
 // The company WebUI (Agent Watch Auto) used the way the browser app uses it:
 // the launch link's capability for a cookie and CSRF token, the Gateway
@@ -12,7 +13,13 @@ const PROTOCOL = { schemaVersion: 1, version: 'piagent-gateway-protocol-v1' };
 const wait = ms => new Promise(r => setTimeout(r, ms));
 
 export class WebUiSurface {
-  constructor({ piagent = 'piagent' } = {}) { this.piagent = piagent; this.pending = new Map(); this.answered = new Set(); }
+  constructor({ piagent = 'piagent' } = {}) { this.piagent = piagent; this.pending = new Map(); this.answered = new Set(); this.terminalListeners = new Set(); }
+  onTerminal(listener) { this.terminalListeners.add(listener); return () => this.terminalListeners.delete(listener); }
+  memberAction(action) {
+    if (action.do === 'editor_save') return editWorkspace(this, action);
+    if (action.do === 'terminal_test') return runTerminal(this, action);
+    throw Error('unsupported-workspace-action');
+  }
 
   // `--web` prints the launch link; when no company Gateway runs yet it starts
   // one and keeps serving it, so read the link without waiting for an exit
@@ -64,6 +71,10 @@ export class WebUiSurface {
       ws.on('open', () => ws.send(JSON.stringify({ ...PROTOCOL, messageType: 'connect', clientRef: 'soak_member', minimumProtocol: 1, maximumProtocol: 1, lastEventSequence: null, catalogRevision: null })));
       ws.on('message', data => {
         let frame; try { frame = JSON.parse(String(data)); } catch { return; }
+        if (frame.version === 'piagent-terminal-v1') {
+          for (const listener of this.terminalListeners) listener(frame);
+          return;
+        }
         if (frame.messageType === 'hello') { clearTimeout(timer); resolve(ws); return; }
         if (frame.messageType === 'response') {
           const p = this.pending.get(frame.requestId); if (!p) return; this.pending.delete(frame.requestId);
@@ -77,11 +88,15 @@ export class WebUiSurface {
   }
 
   #request(command) {
+    return this.gatewayRequest('sessions.command', { command });
+  }
+
+  gatewayRequest(method, params) {
     const requestId = opaque('request');
     return new Promise((resolve, reject) => {
       const timer = setTimeout(() => { this.pending.delete(requestId); reject(Error('gateway command timeout')); }, 60_000);
       this.pending.set(requestId, { resolve: v => { clearTimeout(timer); resolve(v); }, reject: e => { clearTimeout(timer); reject(e); } });
-      this.ws.send(JSON.stringify({ ...PROTOCOL, messageType: 'request', requestId, method: 'sessions.command', params: { command } }));
+      this.ws.send(JSON.stringify({ ...PROTOCOL, messageType: 'request', requestId, method, params }));
     });
   }
 

package/evals/long-task-soak-v1/surfaces/workspace-actions.mjs

@@ -0,0 +1,95 @@
+import { createHash, randomUUID } from 'node:crypto';
+
+const canonical = value => Array.isArray(value) ? `[${value.map(canonical).join(',')}]`
+  : value && typeof value === 'object' ? `{${Object.entries(value).sort(([a], [b]) => a.localeCompare(b))
+    .map(([key, item]) => `${JSON.stringify(key)}:${canonical(item)}`).join(',')}}` : JSON.stringify(value);
+const digest = value => `sha256:${createHash('sha256').update(value).digest('hex')}`;
+const requireThat = (condition, reason) => { if (!condition) throw Error(reason); };
+const wait = ms => new Promise(resolve => setTimeout(resolve, ms));
+
+function command(state, action, version, payload) {
+  const now = Date.now(), identity = state.identity, expectedRevisions = state.revisions;
+  return { schemaVersion: 1, version, messageType: 'command', action, identity, expectedRevisions, payload,
+    commandId: randomUUID(), idempotencyKey: randomUUID(), requestedAt: new Date(now).toISOString(),
+    expiresAt: new Date(now + 60000).toISOString(), actionDigest: digest(canonical({ action, identity, expectedRevisions, payload })) };
+}
+
+function correlated(receipt, sent) {
+  requireThat(receipt?.schemaVersion === 1 && receipt.version === sent.version && receipt.messageType === 'receipt'
+    && receipt.commandId === sent.commandId && receipt.action === sent.action && receipt.actionDigest === sent.actionDigest
+    && canonical(receipt.identity) === canonical(sent.identity), 'member-action-receipt-mismatch');
+  requireThat(receipt.phase === 'settled', `member-action-${receipt.phase ?? 'invalid'}:${receipt.resultCode ?? receipt.reasonCode ?? 'unknown'}`);
+}
+
+// These are member operations through the same authenticated Gateway routes as
+// the editor and terminal. No host filesystem or shell shortcut qualifies them.
+export async function editWorkspace(surface, action) {
+  requireThat(surface.sessionRef && typeof action.path === 'string' && typeof action.append === 'string', 'editor-action-invalid');
+  const base = `/api/v1/sessions/${encodeURIComponent(surface.sessionRef)}`;
+  const readPath = `${base}/inspection/workspace/file?${new URLSearchParams({ path: action.path })}`;
+  const before = await surface.http('GET', readPath);
+  requireThat(before.status === 200 && typeof before.value?.content === 'string' && typeof before.value.digest === 'string'
+    && !before.value.protected && !before.value.readOnly && !before.value.binary && !before.value.oversized, 'editor-file-unavailable');
+  const state = await surface.http('GET', `${base}/workspace/write`);
+  requireThat(state.status === 200 && state.value?.writable, 'editor-write-unavailable');
+  const content = before.value.content + action.append;
+  const sent = command(state.value, 'workspace.write', 'piagent-webui-workspace-write-v1',
+    { path: action.path, content, expectedDigest: before.value.digest });
+  const result = await surface.http('POST', `${base}/workspace/write`, sent);
+  requireThat(result.status === 200, `editor-write-http:${result.status}`);
+  correlated(result.value, sent);
+  requireThat(result.value.idempotencyKeyDigest === digest(sent.idempotencyKey) && result.value.resultCode === 'saved'
+    && result.value.path === action.path, 'editor-write-not-saved');
+  const after = await surface.http('GET', readPath);
+  requireThat(after.status === 200 && after.value?.content === content && after.value.digest === result.value.digest,
+    'editor-save-readback-mismatch');
+  return { path: action.path, digest: result.value.digest };
+}
+
+export async function runTerminal(surface, action) {
+  requireThat(surface.sessionRef && typeof action.command === 'string' && action.command.length > 0
+    && action.command.length <= 12000, 'terminal-action-invalid');
+  const timeout = Number(action.timeoutSec ?? 120);
+  requireThat(Number.isFinite(timeout) && timeout > 0 && timeout <= 600, 'terminal-action-timeout-invalid');
+  const buffers = new Map();
+  const unsubscribe = surface.onTerminal(message => {
+    if (message.messageType !== 'output' || message.identity?.sessionRef !== surface.sessionRef) return;
+    if (!buffers.has(message.terminalRef) && buffers.size >= 4) return;
+    buffers.set(message.terminalRef, ((buffers.get(message.terminalRef) ?? '') + message.data).slice(-65536));
+  });
+  const execute = async payload => {
+    const state = await surface.gatewayRequest('terminals.state', { sessionRef: surface.sessionRef, csrfToken: surface.csrf });
+    requireThat(state?.messageType === 'state' && state.available && state.identity?.sessionRef === surface.sessionRef,
+      `terminal-unavailable:${state?.reasonCode ?? 'invalid-state'}`);
+    const sent = command(state, 'terminal.command', 'piagent-terminal-v1', payload);
+    const receipt = await surface.gatewayRequest('terminals.command', { command: sent, csrfToken: surface.csrf });
+    correlated(receipt, sent);
+    requireThat(receipt.idempotencyKey === sent.idempotencyKey, 'terminal-idempotency-mismatch');
+    return receipt;
+  };
+  let terminalRef;
+  try {
+    const opened = await execute({ kind: 'open', cols: 100, rows: 30 });
+    terminalRef = opened.terminalRef;
+    requireThat(typeof terminalRef === 'string', 'terminal-open-missing-reference');
+    const marker = `SOAK_${randomUUID().replaceAll('-', '')}`;
+    // The shell echoes a format string, never the marker followed by a numeric
+    // status; only execution can produce the completion witness.
+    await execute({ kind: 'input', terminalRef,
+      data: `( ${action.command} ); soak_status=$?; printf '\\n%s:%s\\n' '${marker}' "$soak_status"\n` });
+    const deadline = Date.now() + timeout * 1000;
+    while (Date.now() < deadline) {
+      const match = buffers.get(terminalRef)?.match(new RegExp(`${marker}:(\\d+)`));
+      if (match) {
+        const exitCode = Number(match[1]);
+        requireThat(exitCode === (action.expectedExitCode ?? 0), `terminal-command-exit:${exitCode}`);
+        return { exitCode };
+      }
+      await wait(50);
+    }
+    throw Error('terminal-command-completion-timeout');
+  } finally {
+    try { if (terminalRef) await execute({ kind: 'close', terminalRef }); }
+    finally { unsubscribe(); }
+  }
+}

package/evals/private-holdout-v1/public-exposure.v2.json

@@ -256,8 +256,8 @@
     },
     {
       "path": "tests",
-      "fileCount": 570,
-      "sha256": "49831d3854e0342c89dc2e8dc28aaa0b9a0e6ae7870e1ab5c7ab003fee12e787"
+      "fileCount": 619,
+      "sha256": "837b457b95e2aee754b713263ed5bafed0ce1ef3dcff8035b47b43e4f65d3cbe"
     }
   ],
   "custodianComparisonRules": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@piagent/platform",
-  "version": "1.37.1",
+  "version": "1.38.1",
   "license": "MIT",
   "publishConfig": {
     "access": "public",
@@ -66,7 +66,8 @@
     "schemas/",
     "scripts/",
     "templates/",
-    "types/"
+    "types/",
+    "packages/piagent-core/managed/dist/workspace/"
   ],
   "bin": {
     "piagent": "scripts/piagent-cli.mjs",
@@ -154,7 +155,7 @@
   ],
   "scripts": {
     "verify": "bash scripts/verify-local.sh",
-    "test": "PIAGENT_NO_UPDATE_CHECK=1 node --test --test-force-exit tests/*.test.mjs",
+    "test": "PIAGENT_NO_UPDATE_CHECK=1 node --test --test-concurrency=2 --test-force-exit tests/*.test.mjs",
     "test:webui:e2e": "playwright test --config playwright.webui.config.mjs",
     "test:policy": "node --test tests/policy-core.test.mjs",
     "test:golden": "node --test tests/golden-enforcement.test.mjs",
@@ -192,5 +193,8 @@
   },
   "engines": {
     "node": ">=22.19.0"
+  },
+  "optionalDependencies": {
+    "@lydell/node-pty": "1.2.0-beta.15"
   }
 }

package/packages/piagent-core/extensions/fallback-base-policy.ts

@@ -31,7 +31,7 @@ export function fallbackBasePolicy(
     defaultRequiredContext: ["AGENTS.md", "README.md"],
     permissionProfiles: {
       defaultMode: "workspace-write",
-      allowedModes: ["read-only", "workspace-write", "trusted-full-access"]
+      allowedModes: ["read-only", "workspace-write", "trusted-full-access", "bypass"]
     },
     execPolicy: {
       defaultMode: "enforce",

package/packages/piagent-core/extensions/guard-types.ts

@@ -322,7 +322,9 @@ export type ResolvedOrchestrationPolicy = {
   rules: string[];
 };
 
-export type PermissionProfileMode = "read-only" | "workspace-write" | "trusted-full-access";
+// "bypass": personal sessions only; no Piagent gate asks or blocks (as Codex's
+// --dangerously-bypass-approvals-and-sandbox). Output redaction and turn checkpoints still run.
+export type PermissionProfileMode = "read-only" | "workspace-write" | "trusted-full-access" | "bypass";
 
 export type PermissionProfilesConfig = {
   defaultMode?: PermissionProfileMode;