@piagent/platform 1.43.6 → 1.44.1

package/packages/piagent-webui/dist/client/assets/workspace-api-D8sJkiZB.js

@@ -0,0 +1 @@
+import{o as e}from"./bootstrap-CedkNtRG.js";async function t(t,n,r,i){let a=new URLSearchParams({path:r}),o=await fetch(`/api/v1/sessions/${encodeURIComponent(t)}/inspection/workspace/${n}?${a}`,{credentials:`same-origin`,headers:{Accept:`application/json`},signal:i});if(o.status===401&&e(),!o.ok)throw Error(`workspace-read-failed`);return await o.json()}var n=(e,n,r)=>t(e,`tree`,n,r),r=(e,n,r)=>t(e,`file`,n,r),i=(e,n,r)=>t(e,`media`,n,r);async function a(t,n,r){let i=await fetch(`/api/v1/sessions/${encodeURIComponent(t)}/inspection/workspace/paths?${new URLSearchParams({query:n})}`,{credentials:`same-origin`,headers:{Accept:`application/json`},signal:r});if(i.status===401&&e(),!i.ok)throw Error(`workspace-read-failed`);return await i.json()}async function o(t,n,r){let i=await fetch(`/api/v1/sessions/${encodeURIComponent(t)}/inspection/workspace/search?${new URLSearchParams({query:n})}`,{credentials:`same-origin`,headers:{Accept:`application/json`},signal:r});if(i.status===401&&e(),!i.ok)throw Error(`workspace-read-failed`);return await i.json()}export{o as a,n as i,i as n,a as r,r as t};

package/packages/piagent-webui/dist/client/assets/workspace-navigation-DkVobhwg.js

@@ -0,0 +1 @@
+import{r as e}from"./rolldown-runtime-hePW80VL.js";import{Bt as t,Dn as n,Fn as r,It as i}from"./vendor-CSDKB7mU.js";import{i as a,n as o}from"./ui-preferences-0waeSO-S.js";import{h as s}from"./api-BQS4Dtrr.js";var c=e(r(),1);function l(e,t=1){let n=/^(.+?)(?::(\d+)(?::\d+)?)?$/.exec(e.replace(/^@/,``)),r=n?.[1];return!r||r.length>4096||/^[~/]/.test(r)||/[\\\x00-\x1f\x7f:]/.test(r)||r.split(`/`).some(e=>!e||e===`.`||e===`..`)?null:{path:r,line:Math.max(1,Math.min(1e6,Number(n?.[2])||t||1))}}function u(e){let t=e.trim();if(!t||t.length>4096||/^(?:https?|mailto|data|javascript):/i.test(t)||t.startsWith(`#`))return null;if(/^file:/i.test(t))try{t=new URL(t).pathname}catch{return null}try{t=decodeURIComponent(t)}catch{}let n=/#L(\d+)(?:-L?\d+)?$/.exec(t),r=n?Number(n[1]):void 0;if(n&&(t=t.slice(0,n.index)),t=t.replace(/^\.\//,``),t.startsWith(`/`)){let e=/^(\/.+?)(?::(\d+)(?::\d+)?)?$/.exec(t),n=e?.[1]??``;return!n||/[\x00-\x1f\x7f]/.test(n)||n.split(`/`).slice(1).some(e=>!e||e===`.`||e===`..`)?null:{path:n,line:Math.max(1,Math.min(1e6,r??(Number(e?.[2])||1))),absolute:!0}}let i=l(t,r);return i?{...i,absolute:!1}:null}var d=n(),f=`piagent-workspace-open`;async function p(e,t){let n=(await s(e)).roots.find(e=>e.source===`project`&&t.startsWith(`${e.path.replace(/\/+$/,``)}/`));return n?t.slice(n.path.replace(/\/+$/,``).length+1):null}var m=(0,c.createContext)(null);function h({sessionRef:e,onOpen:t,children:n}){let r=n=>{t(),window.dispatchEvent(new CustomEvent(f,{detail:{sessionRef:e,...n}}))};return(0,d.jsx)(m.Provider,{value:e?t=>{if(!(`absolute`in t)||!t.absolute){r({path:t.path,line:t.line});return}p(e,t.path).then(e=>{e&&r({path:e,line:t.line})},()=>void 0)}:null,children:n})}function g({path:e,line:n,children:r}){let i=(0,c.useContext)(m),{locale:s}=a(),u=l(e,n);return!i||!u?r?(0,d.jsx)(d.Fragment,{children:r}):null:(0,d.jsx)(t,{size:`small`,onClick:()=>i(u),sx:{textTransform:`none`,verticalAlign:`baseline`},children:r??o(s,`Mở trong editor`,`Open in editor`)})}function _({link:e,children:t}){let n=(0,c.useContext)(m),{locale:r}=a();return n?(0,d.jsx)(i,{component:`button`,type:`button`,underline:`hover`,onClick:()=>n(e),title:o(r,`Mở ${e.path}`,`Open ${e.path}`),sx:{font:`inherit`,verticalAlign:`baseline`,textAlign:`left`},children:t}):(0,d.jsx)(d.Fragment,{children:t})}function v({children:e}){return(0,d.jsx)(d.Fragment,{children:c.Children.map(e,e=>typeof e==`string`?e.split(/((?<![\w@])@[\w./-]+\.[\w]+(?::\d+)?)/g).map((e,t)=>e.startsWith(`@`)&&l(e)?(0,d.jsx)(g,{path:e,children:e},t):e):e)})}export{h as a,v as i,g as n,u as o,_ as r,l as s,f as t};

package/packages/piagent-webui/dist/client/index.html

@@ -7,10 +7,10 @@
     <meta name="csp-nonce" content="__PIAGENT_CSP_NONCE__" />
     <meta name="piagent-webui-mode" content="__PIAGENT_WEBUI_MODE__" />
     <title>Piagent WebUI</title>
-    <script type="module" crossorigin src="/assets/index-CrpbZF1r.js"></script>
+    <script type="module" crossorigin src="/assets/index-BMQo9OEq.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-hePW80VL.js">
-    <link rel="modulepreload" crossorigin href="/assets/vendor-CA5pzJiI.js">
-    <link rel="modulepreload" crossorigin href="/assets/ui-preferences-Dy4qeODT.js">
+    <link rel="modulepreload" crossorigin href="/assets/vendor-CSDKB7mU.js">
+    <link rel="modulepreload" crossorigin href="/assets/ui-preferences-0waeSO-S.js">
     <link rel="stylesheet" crossorigin href="/assets/index-Dqb2hNan.css">
   </head>
   <body>

package/packages/piagent-webui/gateway/native-project-picker.ts

@@ -4,19 +4,31 @@ import path from "node:path";
 import { fileURLToPath } from "node:url";
 
 // `wsl`: the picker is Windows' own, run from WSL; its paths are converted.
-type PickerSpec = { executable: string; args: string[]; wsl?: boolean };
+// `base64`: each line is a UTF-8 path in base64, safe from code pages.
+type PickerSpec = { executable: string; args: string[]; wsl?: boolean; base64?: boolean };
 
 // Windows' folder dialog, through PowerShell (also from WSL, where Windows
-// programs run as they are). It prints the chosen folder; cancel exits 1.
+// programs run as they are). The Gateway runs detached, without a console or
+// the foreground: the dialog gets a topmost owner so it opens in front of the
+// browser, and the path is printed as base64 so a non-ASCII folder survives
+// the console's code page. Cancel exits 1; any PowerShell error exits 2.
 const WINDOWS_PICKER = [
-  "[Console]::OutputEncoding = [System.Text.Encoding]::UTF8",
-  "Add-Type -AssemblyName System.Windows.Forms",
+  "$ErrorActionPreference = 'Stop'",
+  "try { Add-Type -AssemblyName System.Windows.Forms",
+  "[System.Windows.Forms.Application]::EnableVisualStyles()",
+  "$owner = New-Object System.Windows.Forms.Form",
+  "$owner.TopMost = $true",
+  "$owner.ShowInTaskbar = $false",
   "$dialog = New-Object System.Windows.Forms.FolderBrowserDialog",
   "$dialog.Description = 'Choose a project folder for Piagent'",
-  "if ($dialog.ShowDialog() -eq [System.Windows.Forms.DialogResult]::OK) { [Console]::Out.WriteLine($dialog.SelectedPath); exit 0 } else { exit 1 }"
+  "$result = $dialog.ShowDialog($owner)",
+  "$owner.Dispose()",
+  "if ($result -ne [System.Windows.Forms.DialogResult]::OK) { exit 1 }",
+  "[Console]::Out.WriteLine([Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes($dialog.SelectedPath)))",
+  "exit 0 } catch { [Console]::Error.WriteLine($_.Exception.Message); exit 2 }"
 ].join("; ");
 const windowsPicker = (executable: string, wsl = false): PickerSpec =>
-  ({ executable, args: ["-NoProfile", "-NonInteractive", "-STA", "-Command", WINDOWS_PICKER], ...(wsl ? { wsl } : {}) });
+  ({ executable, args: ["-NoProfile", "-NonInteractive", "-STA", "-Command", WINDOWS_PICKER], base64: true, ...(wsl ? { wsl } : {}) });
 type PickerEnvironment = Readonly<Record<string, string | undefined>>;
 
 function executableOnPath(name: string, environment: PickerEnvironment): string | null {
@@ -67,35 +79,49 @@ export function nativeProjectPickerAvailable(options: { platform?: NodeJS.Platfo
   return resolveNativeProjectPicker(options) !== null;
 }
 
-function selectedFolders(stdout: string): string[] {
+function selectedFolders(stdout: string, base64 = false): string[] {
   const selected: string[] = [];
   for (const raw of stdout.split("\n")) {
-    const value = raw.trim(); if (!value) continue;
+    let value = raw.trim(); if (!value) continue;
+    if (base64) {
+      if (!/^[A-Za-z0-9+/]+={0,2}$/.test(value)) continue;
+      value = Buffer.from(value, "base64").toString("utf8");
+    }
     let candidate = value;
     if (value.startsWith("file:")) {
       try { candidate = fileURLToPath(value); } catch { continue; }
     }
-    if (candidate.includes("\0") || /[\u0001-\u001f\u007f]/.test(candidate) || selected.includes(candidate)) continue;
+    if (candidate.includes("\0") || /[\u0001-\u001f\u007f\ufffd]/.test(candidate) || selected.includes(candidate)) continue;
     selected.push(candidate);
     if (selected.length === 32) break;
   }
   return selected;
 }
 
-export function pickNativeProjectFolders(): Promise<string[]> {
-  const picker = resolveNativeProjectPicker();
+type RunPicker = (executable: string, args: string[], options: { timeout: number; maxBuffer: number; windowsHide: boolean },
+  callback: (error: Error | null, stdout: string) => void) => unknown;
+type ToWslPath = (windowsPath: string) => string;
+
+// The folders the operator chose. `run` and `toWslPath` stand in for the
+// process spawns in tests.
+export function pickNativeProjectFolders(options: { picker?: PickerSpec | null; run?: RunPicker; toWslPath?: ToWslPath } = {}): Promise<string[]> {
+  const picker = options.picker === undefined ? resolveNativeProjectPicker() : options.picker;
   if (!picker) return Promise.reject(new Error("native-project-picker-unavailable"));
+  const run = options.run ?? (execFile as unknown as RunPicker);
+  const toWslPath = options.toWslPath ?? ((folder) => execFileSync("wslpath", ["-u", folder], { encoding: "utf8", timeout: 5000 }).trim());
   return new Promise((resolve, reject) => {
-    execFile(picker.executable, picker.args, { timeout: 5 * 60_000, maxBuffer: 64 * 1024 }, (error, stdout) => {
+    // windowsHide: no console window of its own next to the dialog; closing
+    // that window used to kill the picker.
+    run(picker.executable, picker.args, { timeout: 5 * 60_000, maxBuffer: 64 * 1024, windowsHide: true }, (error, stdout) => {
       if (error) {
         const exitCode = typeof (error as NodeJS.ErrnoException & { code?: unknown }).code === "number"
           ? (error as unknown as { code: number }).code : null;
         reject(new Error(exitCode === 1 ? "project-import-cancelled" : "project-import-picker-failed")); return;
       }
-      let selected = selectedFolders(stdout.replace(/\r/g, ""));
+      let selected = selectedFolders(String(stdout).replace(/\r/g, ""), picker.base64);
       // C:\Users\me\shop, as seen from WSL: /mnt/c/Users/me/shop.
       if (picker.wsl) selected = selected.flatMap((folder) => {
-        try { return [execFileSync("wslpath", ["-u", folder], { encoding: "utf8", timeout: 5000 }).trim()]; } catch { return []; }
+        try { return [toWslPath(folder)]; } catch { return []; }
       });
       if (!selected.length) { reject(new Error("project-import-cancelled")); return; }
       resolve(selected);

package/packages/piagent-webui/gateway/pi-host.ts

@@ -4,6 +4,7 @@ import os from "node:os";
 import path from "node:path";
 import { createRequire } from "node:module";
 import { pathToFileURL } from "node:url";
+import { privateHostRoot } from "../../piagent-core/managed/pi-host.mjs";
 
 const require = createRequire(import.meta.url);
 
@@ -73,8 +74,19 @@ export function installedPiHostRoot(): string {
   throw new Error("pi-host-unavailable");
 }
 
+// The host of the pinned release: the installed one when it is that release,
+// else Piagent's private copy, kept beside a member's own newer Pi
+// (packages/piagent-core/managed/pi-host.mjs).
+export function pinnedPiHostRoot(expectedVersion: string): string {
+  const own = privateHostRoot(expectedVersion) as string | null;
+  let root: string;
+  try { root = installedPiHostRoot(); } catch (error) { if (own) return own; throw error; }
+  try { if ((JSON.parse(fs.readFileSync(path.join(root, "package.json"), "utf8")) as { version?: string }).version === expectedVersion) return root; } catch { /* unreadable: the private copy, if any */ }
+  return own ?? root;
+}
+
 export async function loadPinnedPiHost(expectedVersion: string): Promise<any> {
-  const root = installedPiHostRoot();
+  const root = pinnedPiHostRoot(expectedVersion);
   const actual = JSON.parse(fs.readFileSync(path.join(root, "package.json"), "utf8")) as { version?: string };
   if (actual.version !== expectedVersion) throw new Error("pi-host-version-mismatch");
   return await import(pathToFileURL(path.join(root, "dist", "index.js")).href);

package/packages/piagent-webui/server/workspace-read-routes.ts

@@ -1,12 +1,12 @@
 import { WorkspaceReadError } from "../../piagent-core/security/workspace-file-reader.ts";
 
-export type WorkspaceRead = (kind: "tree" | "file" | "paths" | "search", path: string) => unknown | Promise<unknown>;
+export type WorkspaceRead = (kind: "tree" | "file" | "media" | "paths" | "search", path: string) => unknown | Promise<unknown>;
 export type WorkspaceRouteResult = { handled: false } | { handled: true; status: number; value: unknown };
 
 // Authentication and company forwarding belong to the session router. This
 // parser accepts only project-relative paths, including an empty tree root.
 export async function routeWorkspaceRead(url: URL, read?: WorkspaceRead): Promise<WorkspaceRouteResult> {
-  const match = /^\/api\/v1\/workspace\/(tree|file|paths|search)$/.exec(url.pathname);
+  const match = /^\/api\/v1\/workspace\/(tree|file|media|paths|search)$/.exec(url.pathname);
   if (!match) return { handled: false };
   const refused = (status: number, code: string): WorkspaceRouteResult => ({ handled: true, status, value: { error: { code } } });
   if (!read) return refused(503, "workspace-unavailable");
@@ -19,7 +19,7 @@ export async function routeWorkspaceRead(url: URL, read?: WorkspaceRead): Promis
     || (parameter === "path" && (relative ? relative.split("/").some(part => !part || part === "." || part === "..") : match[1] !== "tree"))) {
     return refused(400, "workspace-path-invalid");
   }
-  try { return { handled: true, status: 200, value: await read(match[1] as "tree" | "file" | "paths" | "search", relative) }; }
+  try { return { handled: true, status: 200, value: await read(match[1] as "tree" | "file" | "media" | "paths" | "search", relative) }; }
   catch (error) {
     if (error instanceof WorkspaceReadError) return refused(error.code === "changed-during-read" ? 409 : 400, error.code);
     const code = (error as NodeJS.ErrnoException)?.code;

package/packages/piagent-webui/server/workspace-reader.ts

@@ -1,6 +1,6 @@
 import { searchWorkspace } from "../../piagent-core/extensions/workspace-search.ts";
 import { loadProjectContextIndexPolicy } from "../../piagent-core/extensions/workspace-policy.js";
-import { inspectWorkspaceFile, inspectWorkspaceTree, inspectWorkspacePaths } from "../../piagent-core/extensions/workspace-inspection.ts";
+import { inspectWorkspaceFile, inspectWorkspaceMedia, inspectWorkspaceTree, inspectWorkspacePaths } from "../../piagent-core/extensions/workspace-inspection.ts";
 import { inspectWorkspaceEntry } from "../../piagent-core/security/workspace-file-reader.ts";
 import type { WorkspaceRead } from "./workspace-read-routes.ts";
 
@@ -16,7 +16,7 @@ export function personalWorkspaceReader(options: {
     } catch (error) { if ((error as NodeJS.ErrnoException).code !== "ENOENT") throw error; }
     const { policy, profile } = loadProjectContextIndexPolicy(options.packageRoot, options.cwd);
     const context = { policy, profile, readOnly: profile.permissionProfile === "read-only" };
-    const value = kind === "search" ? await searchWorkspace(options.cwd, relative, context) : kind === "paths" ? await inspectWorkspacePaths(options.cwd, relative, context) : kind === "tree" ? inspectWorkspaceTree(options.cwd, relative, context) : inspectWorkspaceFile(options.cwd, relative, context);
+    const value = kind === "search" ? await searchWorkspace(options.cwd, relative, context) : kind === "paths" ? await inspectWorkspacePaths(options.cwd, relative, context) : kind === "tree" ? inspectWorkspaceTree(options.cwd, relative, context) : kind === "media" ? inspectWorkspaceMedia(options.cwd, relative, context) : inspectWorkspaceFile(options.cwd, relative, context);
     return { schemaVersion: 1, version: `piagent-webui-workspace-${kind}-v1`, generatedAt: new Date().toISOString(),
       identity: await options.identity(), ...value };
   };

package/schemas/piagent-webui/catalog-v1.json

@@ -290,6 +290,15 @@
       "supported": true,
       "current": true
     },
+    {
+      "name": "workspace-media-v1",
+      "file": "workspace-media-v1.schema.json",
+      "id": "https://piagent.io.vn/schemas/piagent-webui/workspace-media-v1.schema.json",
+      "documentVersion": 1,
+      "role": "read-model",
+      "supported": true,
+      "current": true
+    },
     {
       "name": "workspace-paths-v1",
       "file": "workspace-paths-v1.schema.json",

package/schemas/piagent-webui/workspace-media-v1.schema.json

@@ -0,0 +1,63 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://piagent.io.vn/schemas/piagent-webui/workspace-media-v1.schema.json",
+  "title": "Piagent WebUI workspace media v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "version",
+    "generatedAt",
+    "identity",
+    "path",
+    "mime",
+    "data",
+    "reasonCode"
+  ],
+  "properties": {
+    "schemaVersion": {
+      "const": 1
+    },
+    "version": {
+      "const": "piagent-webui-workspace-media-v1"
+    },
+    "generatedAt": {
+      "$ref": "common-v1.schema.json#/$defs/timestamp"
+    },
+    "identity": {
+      "$ref": "common-v1.schema.json#/$defs/identity"
+    },
+    "path": {
+      "type": "string",
+      "maxLength": 4096
+    },
+    "mime": {
+      "enum": [
+        "image/png",
+        "image/jpeg",
+        "image/gif",
+        "image/webp",
+        "image/bmp",
+        "image/x-icon",
+        "image/avif",
+        null
+      ]
+    },
+    "data": {
+      "type": [
+        "string",
+        "null"
+      ],
+      "maxLength": 11184812,
+      "contentEncoding": "base64"
+    },
+    "reasonCode": {
+      "enum": [
+        "protected",
+        "unsupported",
+        "oversized",
+        null
+      ]
+    }
+  }
+}

package/scripts/company-terminal.mjs

@@ -9,6 +9,7 @@ import { execFile } from 'node:child_process';
 import { pathToFileURL } from 'node:url';
 
 import { registerTerminalUpdateOffer } from '../packages/piagent-core/runtime/update/terminal-update-offer.mjs';
+import { registerStyleCommand } from '../packages/piagent-core/runtime/terminal/terminal-style.mjs';
 import { parseFailure } from '../packages/piagent-core/runtime/managed-failure.mjs';
 import { checkpointsOf } from '../packages/piagent-core/managed/checkpoints.mjs';
 import { bypassAllowed, effectivePermission } from '../packages/piagent-core/managed/permission.mjs';
@@ -59,7 +60,7 @@ export function memoryResultLines(text, expanded = false) {
 const branchOf = (cwd) => new Promise((resolve) => execFile('git', ['-C', cwd, 'rev-parse', '--abbrev-ref', 'HEAD'], { timeout: 3000 },
   (error, out) => resolve(error ? null : String(out).trim() || null)));
 export const HELP_TEXT = [
-  'Cuộc trò chuyện công ty: /undo hoàn tác file lượt trước đã sửa · /bypass on|full|off|status quyền của cuộc trò chuyện · /fast on|off|status (khi Harness cho phép) · /skill:<tên> hoặc /<lệnh> của bạn và của project.',
+  'Cuộc trò chuyện công ty: /undo hoàn tác file lượt trước đã sửa · /bypass on|full|off|status quyền của cuộc trò chuyện · /fast on|off|status (khi Harness cho phép) · /style giao diện Terminal · /skill:<tên> hoặc /<lệnh> của bạn và của project.',
   'Pi: /session thông tin cuộc trò chuyện · /resume mở cuộc trò chuyện công ty khác · /new cuộc mới · /compact nén ngữ cảnh · /tree, /fork nhánh · /name đặt tên · /copy, /export · /hotkeys toàn bộ phím tắt · /quit thoát.',
   'Phím: ! <lệnh> chạy shell · Esc dừng lượt đang chạy · Ctrl+C xoá ô nhập, hai lần để thoát · Ctrl+O xem thêm.',
   'Mở lại sau: piagent studio --project <thư mục>, rồi /resume. Đừng mở cuộc trò chuyện công ty bằng pi cá nhân.',
@@ -112,7 +113,7 @@ export function companyCommandText(name, summary = {}) {
     case 'login': case 'logout': return 'Cuộc trò chuyện công ty dùng tài khoản AI của team qua Agent Watch: không cần /login hay /logout. Tài khoản và API key cá nhân chỉ dùng trong pi cá nhân.';
     case 'model': case 'scoped-models': return `Model do Harness của team quyết định${main}; Terminal không chọn model. ${ADMIN}`;
     case 'thinking': return `Mức suy luận do Harness của team quyết định${main}. ${ADMIN}`;
-    case 'settings': return `Cài đặt của cuộc trò chuyện công ty (compaction, retry…) do Harness quyết định. Phím tắt: /hotkeys. ${ADMIN}`;
+    case 'settings': return `Cài đặt của cuộc trò chuyện công ty (compaction, retry…) do Harness quyết định. Giao diện Terminal: /style. Phím tắt: /hotkeys. ${ADMIN}`;
     default: return null;
   }
 }
@@ -288,6 +289,9 @@ export function companyTerminalExtension({ managed, packageRoot, sdkRoot, bindin
     registerTerminalUpdateOffer(pi, { installed, packageRoot, restart: 'piagent studio',
       afterUpdate: () => bindingChanged() ? 'Bản mới đổi trình khởi chạy công ty: Agent Watch tự cập nhật cấu hình (cần Agent Watch đang chạy); piagent studio chờ việc này khi mở lại.' : null });
 
+    // The member's pick of look (/style); /settings is not offered here.
+    registerStyleCommand(pi, { remember: true });
+
     // Ask first or Bypass, kept with the conversation like the dashboard's switch.
     const showPermission = (ctx) => { const mode = managed() ? effectivePermission(managed()) : null; ctx.ui?.setStatus?.(PERMISSION_STATUS, mode && mode !== 'workspace-write' ? PERMISSION_NAME[mode] : undefined); };
     pi.on('session_start', async (_event, ctx) => showPermission(ctx));

package/scripts/install-global.sh

@@ -701,7 +701,19 @@ else
   if [[ "$pi_version_output" =~ ([0-9]+\.[0-9]+\.[0-9]+([+-][0-9A-Za-z.-]+)?) ]]; then
     current_pi_version="${BASH_REMATCH[1]}"
   fi
-  if [[ "$current_pi_version" != "$EXPECTED_PI_VERSION" ]]; then
+  pi_host_plan="$(node --input-type=module -e 'const { hostPlan } = await import(process.argv[1]); process.stdout.write(hostPlan(process.argv[2] || null));' "$PLATFORM_ROOT/packages/piagent-core/managed/pi-host.mjs" "$current_pi_version")"
+  if [[ "$pi_host_plan" == "private" ]]; then
+    # The member's own, newer pi stays: it loads the Piagent package as any Pi
+    # package, and company sessions and `piagent pi` run the private pinned host.
+    echo "NOTE: your pi $current_pi_version stays as it is; Piagent is qualified on Pi $EXPECTED_PI_VERSION." >&2
+    pi_host_args=(ensure --force)
+    [[ "$DRY_RUN" == true ]] && pi_host_args+=(--dry-run)
+    if ! node "$PLATFORM_ROOT/scripts/pi-host.mjs" "${pi_host_args[@]}" >&2; then
+      echo "FAIL: could not install the private Pi $EXPECTED_PI_VERSION." >&2
+      exit 1
+    fi
+    echo "NOTE: run \`piagent pi\` for the qualified release; \`pi\` ($current_pi_version) loads Piagent too, unqualified." >&2
+  elif [[ "$current_pi_version" != "$EXPECTED_PI_VERSION" ]]; then
     echo "FAIL: Pi Coding Agent $EXPECTED_PI_VERSION is required; found ${current_pi_version:-${pi_version_output:-unknown}}." >&2
     echo "Install the supported host with: npm install -g --ignore-scripts @earendil-works/pi-coding-agent@$EXPECTED_PI_VERSION" >&2
     exit 1

package/scripts/pi-host.mjs

@@ -0,0 +1,109 @@
+#!/usr/bin/env node
+// The Pi host Piagent runs on, when the member keeps a Pi of their own.
+//
+// Piagent pins one Pi release (package.json peerDependencies). A member who
+// already uses Pi may run a newer one: setup used to replace it with the
+// pinned release. Now theirs stays as it is, and the pinned release is
+// installed privately (packages/piagent-core/managed/pi-host.mjs); company
+// sessions and the dashboard run it, and `piagent pi` opens it for personal use.
+//
+//   pi-host.mjs status [--json]      the pinned host, the `pi` on PATH, the private copy
+//   pi-host.mjs ensure [--dry-run]   install the private copy when PATH has another Pi
+//   pi-host.mjs root                 the host root Piagent runs (empty when none)
+//   pi-host.mjs run [-- args]        run Pi on the pinned host
+import { spawn, spawnSync } from 'node:child_process';
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { PI_HOST_VERSION, hostCli, hostPlan, installPrivateHost, privateHostRoot } from '../packages/piagent-core/managed/pi-host.mjs';
+
+const HOST_NAME = '@earendil-works/pi-coding-agent';
+
+function usage() {
+  return `Usage:
+  piagent pi [pi arguments]        Run Pi ${PI_HOST_VERSION} (the release Piagent is qualified on)
+  piagent pi-host status [--json]  Show the pinned host, your own pi and the private copy
+  piagent pi-host ensure [--dry-run]
+                                   Install the pinned host privately when your pi is another release
+`;
+}
+
+// The `pi` on PATH: its package root and version, or nulls.
+export function pathHost(env = process.env, { probe = true } = {}) {
+  for (const dir of (env.PATH ?? '').split(path.delimiter)) {
+    if (!path.isAbsolute(dir)) continue;
+    let root;
+    try { root = path.dirname(fs.realpathSync(path.join(dir, process.platform === 'win32' ? 'pi.cmd' : 'pi'))); } catch { continue; }
+    for (let depth = 0; depth < 4; depth += 1, root = path.dirname(root)) {
+      try {
+        const manifest = JSON.parse(fs.readFileSync(path.join(root, 'package.json'), 'utf8'));
+        if (manifest.name === HOST_NAME) return { root, version: manifest.version ?? null };
+      } catch { /* keep walking up */ }
+    }
+  }
+  if (!probe) return { root: null, version: null };
+  // A `pi` that is not an npm package (a standalone build): ask it.
+  const output = spawnSync('pi', ['--version'], { encoding: 'utf8', timeout: 5_000, shell: process.platform === 'win32' });
+  const version = output.status === 0 ? /(\d+\.\d+\.\d+(?:[+-][0-9A-Za-z.-]+)?)/.exec(output.stdout)?.[1] ?? null : null;
+  return { root: null, version };
+}
+
+// The host Piagent runs: the `pi` on PATH when it is the pinned release, else
+// the private copy, else (not installed yet) whatever PATH has.
+export function activeHostRoot({ env = process.env, home } = {}) {
+  const own = pathHost(env, { probe: false });
+  if (own.root && own.version === PI_HOST_VERSION) return own.root;
+  return privateHostRoot(PI_HOST_VERSION, home) ?? own.root;
+}
+
+export function status({ env = process.env, home } = {}) {
+  const own = pathHost(env), privateRoot = privateHostRoot(PI_HOST_VERSION, home);
+  return { pinned: PI_HOST_VERSION, own: own.version, ownRoot: own.root, privateRoot, plan: hostPlan(own.version), active: activeHostRoot({ env, home }) };
+}
+
+function describe(report) {
+  const lines = [`Piagent runs on Pi ${report.pinned}.`];
+  if (!report.own) lines.push('No `pi` on PATH.');
+  else if (report.plan === 'current') lines.push(`Your pi is ${report.own}: the same release, used as it is.`);
+  else if (report.plan === 'private') lines.push(`Your pi is ${report.own}: kept as it is. Company sessions and \`piagent pi\` use a private Pi ${report.pinned}.`);
+  else lines.push(`Your pi is ${report.own}: older than ${report.pinned}; piagent-setup updates it.`);
+  lines.push(report.privateRoot ? `Private copy: ${report.privateRoot}` : 'Private copy: not installed');
+  return lines.join('\n');
+}
+
+async function main(argv) {
+  const [command, ...rest] = argv;
+  if ([undefined, 'help', '--help', '-h'].includes(command)) { process.stdout.write(usage()); return 0; }
+  if (command === 'status') {
+    const report = status();
+    process.stdout.write(rest.includes('--json') ? `${JSON.stringify(report, null, 2)}\n` : `${describe(report)}\n`);
+    return 0;
+  }
+  if (command === 'root') { process.stdout.write(`${activeHostRoot() ?? ''}\n`); return 0; }
+  if (command === 'ensure') {
+    const report = status(), dryRun = rest.includes('--dry-run');
+    if (report.plan !== 'private' && !rest.includes('--force')) { process.stdout.write(`${describe(report)}\n`); return 0; }
+    try {
+      const root = installPrivateHost({ dryRun, log: (line) => process.stdout.write(`${line}\n`) });
+      process.stdout.write(`${dryRun ? 'DRY RUN: ' : ''}Pi ${PI_HOST_VERSION} for Piagent: ${root}\n`);
+      if (report.own) process.stdout.write(`Your pi ${report.own} is unchanged.\n`);
+      return 0;
+    } catch (error) { process.stderr.write(`FAIL: ${error.message}\n`); return 1; }
+  }
+  if (command === 'run') {
+    const args = rest[0] === '--' ? rest.slice(1) : rest;
+    const root = activeHostRoot();
+    if (!root || JSON.parse(fs.readFileSync(path.join(root, 'package.json'), 'utf8')).version !== PI_HOST_VERSION) {
+      process.stderr.write(`FAIL: Pi ${PI_HOST_VERSION} is not installed for Piagent. Run: piagent pi-host ensure --force\n`);
+      return 1;
+    }
+    const child = spawn(process.execPath, [hostCli(root), ...args], { stdio: 'inherit' });
+    for (const signal of ['SIGTERM', 'SIGHUP']) process.on(signal, () => { try { child.kill(signal); } catch { /* gone */ } });
+    process.on('SIGINT', () => {});
+    return await new Promise((resolve) => child.once('exit', (code, signal) => resolve(signal ? 1 : code ?? 1)));
+  }
+  process.stderr.write(usage());
+  return 2;
+}
+
+if (process.argv[1] && fs.realpathSync(process.argv[1]) === fileURLToPath(import.meta.url)) process.exitCode = await main(process.argv.slice(2));

package/scripts/piagent-cli.mjs

@@ -26,7 +26,9 @@ const scriptByCommand = {
   "piagent-context": "scripts/context-engine.mjs",
   "piagent-explain": "scripts/explain-command.mjs",
   "piagent-webui": "scripts/piagent-webui-launcher.mjs",
-  "piagent-dashboard": "scripts/piagent-dashboard.mjs"
+  "piagent-dashboard": "scripts/piagent-dashboard.mjs",
+  "piagent-pi-host": "scripts/pi-host.mjs",
+  "piagent-skills": "scripts/skill-sources.mjs"
 };
 
 const packageRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
@@ -42,6 +44,10 @@ if (invokedAs === "piagent") {
   } else if (subcommand === "dashboard") {
     script = "scripts/piagent-dashboard.mjs";
     forwardedArgs = forwardedArgs.slice(1);
+  } else if (subcommand === "pi") {
+    // Pi itself, on the release Piagent is qualified on, whatever `pi` the member keeps.
+    script = "scripts/pi-host.mjs";
+    forwardedArgs = ["run", "--", ...forwardedArgs.slice(1)];
   } else if (subcommand === "explain") {
     script = "scripts/explain-command.mjs";
     forwardedArgs = forwardedArgs.slice(1);
@@ -64,6 +70,9 @@ if (invokedAs === "piagent") {
     console.log("Commands:");
     console.log("  dashboard   Open and manage the local session hub");
     console.log("  studio      Open the managed company agent imported by Agent Watch");
+    console.log("  pi          Run Pi on the release Piagent is qualified on (your own pi stays as it is)");
+    console.log("  pi-host     Show or install the Pi host Piagent runs");
+    console.log("  skills      Add, list or remove skill sources such as mattpocock/skills");
     console.log("  explain     Say why the guard would allow or block a shell command");
     console.log("  approve-verification  Preview or approve an independent verification plan");
     console.log("  select-verification   Preview reusable contracts for exact task criteria");
@@ -95,8 +104,10 @@ function benchmarkSourceRoot() {
   process.exit(1);
 }
 
-// The Pi host this member runs: the `pi` found on PATH, as its package root.
-function piHost() {
+// The Pi host this member runs: the `pi` on PATH when it is the pinned release,
+// else Piagent's private copy (a member keeping a newer Pi of their own).
+async function piHost() {
+  try { return (await import("./pi-host.mjs")).activeHostRoot(); } catch { /* the `pi` on PATH, below */ }
   for (const dir of (process.env.PATH ?? "").split(path.delimiter)) {
     if (!path.isAbsolute(dir)) continue;
     let root;
@@ -113,7 +124,7 @@ function piHost() {
 // entrypoint, the Node running it and the Pi host. Source checkouts never
 // register, and a failure here never blocks the command. Asking for help or the
 // version changes nothing in the operator's agent directory.
-function recordRuntime() {
+async function recordRuntime() {
   try {
     if (forwardedArgs.some((value) => ["--help", "-h", "--version", "-v"].includes(value))) return;
     if (!packageRoot.split(path.sep).includes("node_modules")) return;
@@ -129,7 +140,7 @@ function recordRuntime() {
       version: JSON.parse(fs.readFileSync(path.join(packageRoot, "package.json"), "utf8")).version,
       entrypoint: fs.realpathSync(path.join(packageRoot, "scripts", "piagent-studio.mjs")),
       node: fs.realpathSync(process.execPath),
-      pi_sdk_root: piHost()
+      pi_sdk_root: await piHost()
     }, null, 2)}\n`;
     const file = path.join(agentDir, "piagent-runtime.json");
     try { if (fs.readFileSync(file, "utf8") === body) return; } catch { /* first run */ }
@@ -138,7 +149,7 @@ function recordRuntime() {
     fs.renameSync(temporary, file);
   } catch { /* optional: Agent Watch falls back to known install locations */ }
 }
-recordRuntime();
+await recordRuntime();
 
 const sourceRoot = invokedAs === "piagent-benchmark" ? benchmarkSourceRoot() : packageRoot;
 const target = path.join(sourceRoot, script);

package/scripts/piagent-dashboard.mjs

@@ -7,7 +7,7 @@ import { fileURLToPath, pathToFileURL } from "node:url";
 
 import { requestGatewayControl } from "../packages/piagent-webui/gateway/control-socket.ts";
 import { browserCommand } from "../packages/piagent-core/runtime/host/browser-opener.mjs";
-import { installedPiHostRoot } from "../packages/piagent-webui/gateway/pi-host.ts";
+import { pinnedPiHostRoot } from "../packages/piagent-webui/gateway/pi-host.ts";
 import { gatewayProfileState, profileRef, readGatewayDescriptor, readOrCreateCatalogKey,
   removeGatewayDescriptor } from "../packages/piagent-webui/gateway/profile-state.ts";
 import { startPiagentGateway } from "../packages/piagent-webui/gateway/gateway-service.ts";
@@ -266,7 +266,7 @@ async function main() {
     const key = readOrCreateCatalogKey(state), descriptor = readGatewayDescriptor(state);
     let actual = null;
     try {
-      const hostRoot = installedPiHostRoot();
+      const hostRoot = pinnedPiHostRoot(expectedPiVersion);
       actual = JSON.parse(fs.readFileSync(path.join(hostRoot, "package.json"), "utf8")).version;
     } catch { /* reported as a failed check below */ }
     let health = null;

package/scripts/runtime-advisory-exceptions.json

@@ -24,6 +24,46 @@
       "decided": "2026-10-24",
       "until": "2026-11-07",
       "reason": "Subresource Integrity check bypassed with a non-lowercase algorithm token; Pi does not fetch with integrity metadata. Pinned by the Pi host as above; fixed in undici 8.12.2."
+    },
+    {
+      "id": "GHSA-4w7w-5xrc-9h26",
+      "package": "undici",
+      "node": "node_modules/undici",
+      "decided": "2026-10-28",
+      "until": "2026-11-07",
+      "reason": "Cache poisoning and cross-user disclosure through cross-origin redirects in undici's cache; Pi does not share an HTTP cache between users. Pinned by the Pi host as above (8.10.2 in 1.3.0 and 1.4.0); fixed in undici 8.12.2."
+    },
+    {
+      "id": "GHSA-2m5v-pch6-74hx",
+      "package": "undici",
+      "node": "node_modules/undici",
+      "decided": "2026-10-28",
+      "until": "2026-11-07",
+      "reason": "TLS certificate validation bypassed when an Agent drops its tls options; affects callers that pass custom tls settings to an undici Agent. Pinned by the Pi host as above; fixed in undici 8.12.2. Owner accepted on 2026-10-28 to keep releases going; revisit as soon as a Pi host carries undici >= 8.12.2."
+    },
+    {
+      "id": "GHSA-qrxm-fqhp-jwvm",
+      "package": "undici",
+      "node": "node_modules/undici",
+      "decided": "2026-10-28",
+      "until": "2026-11-07",
+      "reason": "Denial of service through a TLS 1.2 certificate-changing renegotiation by a hostile server; no data exposure. Pinned by the Pi host as above; fixed in undici 8.12.2."
+    },
+    {
+      "id": "GHSA-9fm3-97px-rjf6",
+      "package": "undici",
+      "node": "node_modules/undici",
+      "decided": "2026-10-28",
+      "until": "2026-11-07",
+      "reason": "Denial of service from unbounded automatic PONG buffering in the WebSocket client fed by a hostile server; no data exposure. Pinned by the Pi host as above; fixed in undici 8.12.2."
+    },
+    {
+      "id": "GHSA-55wc-3pg8-jfw6",
+      "package": "undici",
+      "node": "node_modules/undici",
+      "decided": "2026-10-28",
+      "until": "2026-11-07",
+      "reason": "Denial of service from an unhandled exception in the decompress interceptor; no data exposure. Pinned by the Pi host as above; fixed in undici 8.12.2."
     }
   ]
 }

package/scripts/setup.sh

@@ -80,6 +80,7 @@ CONFIGURE_MODEL_SCOPE=true
 MODEL_SCOPE_PRESET="full"
 DEFAULT_MODEL="openai-codex/gpt-6-sol:high"
 AUTO_INSTALL_PI=true
+PI_HOST_PRIVATE=false
 FORCE_PROFILE=false
 FORCE_SETTINGS=false
 SKIP_AGENTS=false
@@ -347,6 +348,19 @@ ensure_pi_cli() {
     if [[ "$current_version" == "$expected_pi_version" ]]; then
       return
     fi
+    # A newer pi is the member's own: it stays, and the pinned host is
+    # installed privately beside it (scripts/pi-host.mjs).
+    if [[ -n "$current_version" ]] && [[ "$(node -e 'const [a,b]=process.argv.slice(1).map(v=>v.split(/[+-]/)[0].split(".").map(Number)); for (let i=0;i<3;i++) if (a[i]!==b[i]) { process.stdout.write(a[i]>b[i]?"newer":"older"); process.exit(0); } process.stdout.write("same");' "$current_version" "$expected_pi_version")" == "newer" ]]; then
+      echo "Pi CLI $current_version is your own and stays as it is; Piagent runs on a private Pi $expected_pi_version."
+      local ensure_args=(ensure --force)
+      [[ "$DRY_RUN" == true ]] && ensure_args+=(--dry-run)
+      if ! node "$PLATFORM_ROOT/scripts/pi-host.mjs" "${ensure_args[@]}"; then
+        echo "FAIL: could not install the private Pi $expected_pi_version." >&2
+        exit 1
+      fi
+      PI_HOST_PRIVATE=true
+      return
+    fi
     if [[ "$AUTO_INSTALL_PI" == false ]]; then
       echo "FAIL: Pi Coding Agent $expected_pi_version is required; found ${current_version:-${current_output:-unknown}}. Remove --no-install-pi or upgrade it manually." >&2
       exit 1
@@ -490,7 +504,11 @@ echo "Next:"
 if [[ "$DO_PROJECT" == true ]]; then
   echo "  cd \"$PROJECT_PATH\""
 fi
-echo "  pi"
+if [[ "$PI_HOST_PRIVATE" == true ]]; then
+  echo "  piagent pi         # Pi $(node -p 'require(process.argv[1]).peerDependencies["@earendil-works/pi-coding-agent"]' "$PLATFORM_ROOT/package.json"), the release Piagent is qualified on; your own pi also loads Piagent"
+else
+  echo "  pi"
+fi
 echo "  /login             # first time only"
 if [[ "$DO_PROJECT" == true ]]; then
   echo "  /model             # or Ctrl+L: select provider/model from Pi selector"