@piagent/platform 1.43.9 → 1.44.2

package/packages/piagent-core/managed/session.mjs

@@ -25,8 +25,9 @@ import { memberTurn } from './continuation.mjs';
 import { workflowPolicy, repositoryChecks, sessionPlanTool, currentPlan, workflowPrompt, RunProcess, completionGate, pendingBaseline, pendingPaths, pendingHead, processEditTools } from './workflow.mjs';
 import { workflowContextTool, workflowContextExtension } from './workflow-context.mjs';
 import { beforeDelegate } from './objections.mjs';
-import { HELPER_CALLS, HELPER_ROLES, helperRoles, helperPrompt, webPrompt, delegateDescription } from './helper-roles.mjs'; import { delegateParameters, delegateArgs, SPEC_PROMPT } from './helper-settlement.mjs';
+import { HELPER_CALLS, HELPER_ROLES, helperRoles, helperPrompt, webPrompt, delegateDescription, mainWebLookups, limitedWebTools } from './helper-roles.mjs'; import { delegateParameters, delegateArgs, SPEC_PROMPT } from './helper-settlement.mjs';
 import { loadAgentResources } from './agent-skills.mjs';
+import { loadPiagentThemes } from '../runtime/terminal/terminal-style.mjs';
 import { restorePermission, recordBypass, permissionSetter } from './permission.mjs';
 import { commandTools, servicesPrompt } from './command-tools.mjs'; import { attachMemory, memoryToolsFor, openRound, closeRound, prepareMemoryContext, trackMemoryLessons } from './memory.mjs';
 
@@ -113,9 +114,9 @@ export class ManagedSession {
     self.wrapStreams(self.modelRuntime, 'main');
     const customTools = processEditTools(self, self.boundary.tools(api));
     customTools.push(fetchOriginTool(self));
-    // With a research helper the web is its work: search results and pages
-    // are read on its cheaper model, not in the main agent's context.
+    // With a research helper the web is its work (pages read on its cheaper model), beyond the Harness's few quick lookups.
     if (!helperRoles(manifest).includes('research')) customTools.push(...self.webTools(self.modelRuntime, 'main'));
+    else if (mainWebLookups(manifest)) customTools.push(...limitedWebTools(self.webTools(self.modelRuntime, 'main'), () => self.run, mainWebLookups(manifest)));
     // Commands with network, and with Docker when this machine has an engine.
     customTools.push(...commandTools(self));
     // Every helper role passes the tool's schema: Pi fixes a tool's schema
@@ -134,8 +135,8 @@ export class ManagedSession {
     const agentsFiles = projectInstructions(self.cwd, self.boundary.repositoryTop);
     self.checks = repositoryChecks(agentsFiles, self.cwd, self.boundary.repositoryTop);
     // The Harness workflow (possibly changed on a later enrollment) adds its process to the prompt.
-    const loader = managedResourceLoader(api, { systemPrompt: () => BASE_PROMPT + referencePrompt(self.boundary.userHome) + TEST_PROMPT + servicesPrompt(self.boundary) + webPrompt(helperRoles(manifest)) + helperPrompt(helperRoles(self.manifest)) + workflowPrompt(workflowPolicy(self.manifest), self.checks), agentsFiles,
-      skills: self.resources.skills, prompts: self.resources.prompts, ...await inlineExtensions(api, sdk, self.cwd,
+    const loader = managedResourceLoader(api, { systemPrompt: () => BASE_PROMPT + referencePrompt(self.boundary.userHome) + TEST_PROMPT + servicesPrompt(self.boundary) + webPrompt(helperRoles(manifest), mainWebLookups(manifest)) + helperPrompt(helperRoles(self.manifest)) + workflowPrompt(workflowPolicy(self.manifest), self.checks), agentsFiles,
+      skills: self.resources.skills, prompts: self.resources.prompts, themes: terminalExtensions.length ? await loadPiagentThemes(sdk) : [], ...await inlineExtensions(api, sdk, self.cwd,
         [...terminalExtensions, workflowContextExtension(self.cwd, () => self.session.sessionManager)]) });
     const settings = api.SettingsManager.inMemory({ retry: { enabled: false, provider: { maxRetries: 0 } }, cacheWarming: 'off', enableInstallTelemetry: false, enableAnalytics: false, enableSkillCommands: true });
     const manager = sessionManager ?? api.SessionManager.inMemory(self.cwd); attachMemory(self, manager, agentDir, g => verifyGrant(g, self.manifest, 'main')); self.studioLink = new StudioLink({ origin: self.origin, agentDir, notify: event => self.notify(event), ui: () => self.session?.extensionRunner?.getUIContext?.() });

package/packages/piagent-core/managed/workflow.mjs

@@ -5,6 +5,7 @@ import { failureCode } from '../runtime/managed-failure.mjs';
 import { TsDiagnostics } from './ts-diagnostics.mjs';
 import { checkpointsOf } from './checkpoints.mjs';
 import { discoverDeliveryContext } from './delivery-context.mjs';
+import { LANE_LIMITS, patchStats, changeLane, lanePolicy } from './risk-lanes.mjs';
 
 // The process layer of the company harness: a plan for multi-step work, the
 // repository's checks after a code change, an independent review of the patch.
@@ -17,7 +18,7 @@ export function workflowPolicy(manifest) {
   const mode = value => MODES.includes(value) ? value : 'suggest';
   const loops = Number.isInteger(w.max_fix_loops) && w.max_fix_loops >= 0 && w.max_fix_loops <= 3 ? w.max_fix_loops : 2;
   // A review needs a review helper; without one in the Harness it is off.
-  return { plan: mode(w.plan), verify: mode(w.verify), review: config.review ? mode(w.review) : 'off', maxFixLoops: loops };
+  return { plan: mode(w.plan), verify: mode(w.verify), review: config.review ? mode(w.review) : 'off', maxFixLoops: loops, lanes: w.lanes !== false };
 }
 
 // Checks come from the repository: a "## Checks" section in AGENTS.md (code
@@ -150,6 +151,10 @@ export function workflowPrompt(policy, checks) {
   }
   if (policy.review !== 'off') lines.push(policy.review === 'require' ? '- Review: the harness reviews the final patch with an independent reviewer; blocking findings come back to you to fix, or to answer when a finding is wrong: the reviewer then judges your answer, and a disagreement that remains goes to the member.'
     : '- Review: before you finish a code change, ask the review helper (delegate role "review") to review the patch, then fix blocking findings.');
+  if (policy.lanes && (policy.verify !== 'off' || policy.review !== 'off')) {
+    const L = LANE_LIMITS;
+    lines.push(`- Size: the process follows the size of your change. A small change (at most ${L.tinyFiles} files and ${L.tinyLines} changed lines, no migration, auth, security, CI, dependency or AGENTS.md file) ends after its checks, without a review: do not ask for one. A risky change (a complex request, one of those files, more than ${L.riskyFiles} files or ${L.riskyLines} lines) must pass the checks${policy.review !== 'off' ? ' and the harness review' : ''} even where they are only suggested.`);
+  }
   return lines.length ? `\n\nProcess for code changes (company Harness):\n${lines.join('\n')}\n${process.platform === 'darwin' ? 'End-to-end and UI checks run in bash with the project\'s Playwright (@playwright/test; add it with npm when the project lacks it) and the browsers installed on this Mac, against a server the test or start_process starts; while a local proxy listens they need run_with_network. When Playwright\'s browsers are missing, ask with run_on_host to run `npx playwright install chromium`.' : 'End-to-end tests that start a local server and a browser run through run_with_network, which the user approves.'} If a check cannot run because the machine lacks something (a runtime such as a JDK, Docker, a database or another service, the network), do not stop there: request the approval that makes it run (run_with_network, run_with_docker, start_docker, or run_on_host to install what is missing) or ask the member with ask_user; never install or start anything without that approval.\nA command stops after 10 minutes and anything left running in the background stops when the turn ends: run the checks that cover your change first and a long suite in parts, not in the background.${process.platform === 'darwin' ? ' A dev server, watcher or local service you need across turns runs with start_process (read it with process_output, stop it with stop_process).' : ''}` : '';
 }
 
@@ -241,7 +246,9 @@ export class RunProcess {
       // claims verify marked failed, and where the harness last sent the
       // agent back (to read its answer and see whether the code moved).
       objections: [], disputes: [], verifyFails: [], claimsAsked: false, claimsAt: null, claimsRechecked: false, claimsDone: false,
-      sentAt: null, sentDigest: null, rejudged: false, reviewSettled: false, objectionsAsked: false });
+      sentAt: null, sentDigest: null, rejudged: false, reviewSettled: false, objectionsAsked: false,
+      // The patch's risk lane (workflow.lanes) and the main agent's own web lookups.
+      lane: null, laneStats: null, laneDigest: null, webLookups: 0 });
   }
   // Plan "require" on a complex task that has no plan yet.
   planMissing(plan) {
@@ -299,7 +306,18 @@ export class RunProcess {
 // A finding, a failed claim or an objection to a brief is the agent's to fix
 // or answer; the same disagreement a second time goes to the member.
 export async function completionGate(managed, run, signal) {
-  const session = managed.session, policy = run.policy;
+  const session = managed.session, configured = run.policy;
+  let policy = configured;
+  // The lane of the patch as it is now, read again only when it changed.
+  const laneOf = async digest => {
+    if (!configured.lanes) return configured;
+    if (run.laneDigest === null || run.laneDigest !== digest) {
+      let stats = null;
+      try { stats = patchStats(await managed.patchSnapshot?.()); } catch { /* unreadable: standard */ }
+      run.lane = changeLane(stats, run); run.laneStats = stats ? { files: stats.files, lines: stats.lines } : null; run.laneDigest = digest;
+    }
+    return lanePolicy(configured, run.lane);
+  };
   const digestOf = async () => { try { return await (managed.changeDigest ?? managed.patchDigest).call(managed); } catch { return null; } };
   const reviewDigestOf = async () => { try { return await managed.patchDigest(); } catch { return null; } };
   const stopped = () => signal?.aborted || ['aborted', 'error'].includes(session.messages.findLast(m => m.role === 'assistant')?.stopReason);
@@ -316,6 +334,7 @@ export async function completionGate(managed, run, signal) {
     // A check that passed still counts when the turn was cut off after it.
     if (run.changed) run.verified = run.verifiedOn(digest);
     run.docsOnly = run.changed && onlyNonCode(managed.ownPaths);
+    policy = run.changed ? await laneOf(digest) : configured;
     if (stopped()) { interrupted = run.changed; break; }
     if (run.changed) {
       const reviewDigest = managed.review ? await reviewDigestOf() : null;
@@ -424,7 +443,8 @@ export async function completionGate(managed, run, signal) {
     run.planSkipped ? 'code was changed before the required plan existed' : null, planOpen ? `plan: ${planOpen} step(s) not completed` : null] : []),
     run.disputes.length ? `${run.disputes.length} disagreement(s) between the main agent and a subagent go to the member` : null].filter(Boolean);
   await session.sendCustomMessage({ customType: 'agent-watch-process', content: `Process status for this turn: ${run.changed ? 'code changed' : 'no code changed'}; ${words.join('; ') || 'no process step configured'}.`, display: true,
-    details: { phase: 'final', outcome: run.outcome, ...status, ...(run.reviewUnavailable ? { reviewUnavailable: run.reviewUnavailableReason } : {}), policy: { verify: policy.verify, review: policy.review } } }, { triggerTurn: false });
+    details: { phase: 'final', outcome: run.outcome, ...status, ...(run.reviewUnavailable ? { reviewUnavailable: run.reviewUnavailableReason } : {}), policy: { verify: policy.verify, review: policy.review },
+      ...(configured.lanes && run.lane ? { lane: run.lane, ...(run.laneStats ? { size: run.laneStats } : {}) } : {}) } }, { triggerTurn: false });
 }
 
 // The run's process sees each edit and command: plan guard before, check

package/packages/piagent-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@piagent/core",
-  "version": "1.43.9",
+  "version": "1.44.2",
   "type": "module",
   "private": true,
   "license": "MIT",

package/packages/piagent-core/runtime/resources/plugin-skills.mjs

@@ -2,7 +2,8 @@ import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 
-// Skills and commands a member installed as Claude or Codex plugins
+// Skills and commands a member installed as Claude or Codex plugins, or added
+// to Piagent as a skill source
 // (superpowers, a team's own marketplace…). Each agent keeps them in its plugin
 // cache, not in ~/.claude/skills or ~/.codex/skills, so they are found here:
 // the plugins the agent records as installed, the newest version of each, and
@@ -119,9 +120,37 @@ function codexPlugins(home) {
   return found.filter(Boolean);
 }
 
-// The member's plugins, Claude's first, at most MAX_PLUGINS. A plugin
-// that cannot be read is left out; it never keeps a conversation from opening.
+// Skill repositories the member added with `piagent skills add` (for example
+// mattpocock/skills), each kept at the commit it was added at under
+// ~/.piagent/skill-sources and listed in ~/.piagent/skill-sources.json
+// (scripts/skill-sources.mjs). A repository that ships a Claude or Codex
+// plugin manifest is read through it, so only the skills it publishes load.
+export function skillSourcesRoot(home = os.homedir()) {
+  return path.join(home, '.piagent', 'skill-sources');
+}
+export function skillSourcesIndex(home = os.homedir()) {
+  return path.join(home, '.piagent', 'skill-sources.json');
+}
+function piagentSources(home) {
+  const sources = readJson(skillSourcesIndex(home))?.sources;
+  if (!Array.isArray(sources)) return [];
+  const root = folder(skillSourcesRoot(home));
+  if (!root) return [];
+  return sources.filter((entry) => entry && typeof entry.path === 'string' && entry.enabled !== false).map((entry) => {
+    const dir = folder(path.resolve(root, entry.path));
+    return dir && inside(dir, root) ? skillSourcePlugin(dir, entry.name || entry.repo) : null;
+  }).filter(Boolean);
+}
+// One source's copy read as a plugin: through its Claude or Codex manifest when it has one.
+export function skillSourcePlugin(dir, name) {
+  const manifestDir = fs.existsSync(path.join(dir, '.claude-plugin', 'plugin.json')) ? '.claude-plugin' : '.codex-plugin';
+  return plugin(dir, 'piagent', name, manifestDir);
+}
+
+// The member's plugins, Claude's first, then Codex's and the skill sources
+// added to Piagent, at most MAX_PLUGINS. A plugin that cannot be read is left
+// out; it never keeps a conversation from opening.
 export function memberPlugins({ home = os.homedir(), projects = [] } = {}) {
   const read = (load) => { try { return load(); } catch { return []; } };
-  return [...read(() => claudePlugins(home, projects)), ...read(() => codexPlugins(home))].slice(0, MAX_PLUGINS);
+  return [...read(() => claudePlugins(home, projects)), ...read(() => codexPlugins(home)), ...read(() => piagentSources(home))].slice(0, MAX_PLUGINS);
 }

package/packages/piagent-core/runtime/terminal/terminal-style.d.mts

@@ -0,0 +1,7 @@
+export const THEMES_DIR: string;
+export function piagentThemeFiles(dir?: string): string[];
+export function loadPiagentThemes(sdkRoot: string, dir?: string): Promise<unknown[]>;
+export function readStyle(home?: string): string | null;
+export function writeStyle(name: string, home?: string): void;
+export function styleChoices(ui: unknown): { name: string; label: string }[];
+export function registerStyleCommand(pi: unknown, options?: { remember?: boolean; home?: string }): void;

package/packages/piagent-core/runtime/terminal/terminal-style.mjs

@@ -0,0 +1,99 @@
+// The Terminal's look, chosen by the member: /style lists Pi's own themes
+// (system, dark, light) and Piagent's (packages/piagent-core/themes), shows
+// the one picked at once and keeps it. Personal Pi keeps it in its own
+// settings (`theme`), as /settings → Theme does. The company Terminal runs
+// with settings in memory, so its choice is kept in ~/.pi beside the other
+// Terminal state and put back when a conversation opens.
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+
+export const THEMES_DIR = fileURLToPath(new URL("../../themes", import.meta.url));
+const STYLE_FILE = "piagent-terminal-style.json";
+// The dashboard's own runtime UI draws its own page: no Terminal theme there.
+const GATEWAY_UI = Symbol.for("piagent.webui.gateway-runtime-ui.v1");
+
+// What each style is for, in the member's words; Pi's own are listed first.
+const DESCRIPTIONS = {
+  system: "theo màu của terminal (mặc định của Pi)",
+  dark: "nền tối của Pi",
+  light: "nền sáng của Pi",
+  "piagent-ocean": "nền tối, xanh biển dịu mắt cho phiên dài",
+  "piagent-paper": "nền sáng, tông giấy ấm",
+  "piagent-contrast": "tương phản cao, cho phòng sáng hoặc máy chiếu",
+  "piagent-focus": "gần như đơn sắc, một màu nhấn hổ phách",
+};
+
+export function piagentThemeFiles(dir = THEMES_DIR) {
+  try { return fs.readdirSync(dir).filter((name) => name.endsWith(".json")).sort().map((name) => path.join(dir, name)); }
+  catch { return []; }
+}
+
+// Piagent's themes loaded with the host's own loader, for a runtime that
+// supplies its own resources (the company Terminal). One that does not load
+// on this host is left out.
+export async function loadPiagentThemes(sdkRoot, dir = THEMES_DIR) {
+  let loader;
+  try { loader = await import(pathToFileURL(path.join(sdkRoot, "dist", "modes", "interactive", "theme", "theme.js")).href); }
+  catch { return []; }
+  const themes = [];
+  for (const file of piagentThemeFiles(dir)) {
+    try { themes.push(loader.loadThemeFromPath(file)); } catch { /* another host's schema */ }
+  }
+  return themes;
+}
+
+const styleFile = (home) => path.join(home ?? os.homedir(), ".pi", STYLE_FILE);
+export function readStyle(home) {
+  try { const name = JSON.parse(fs.readFileSync(styleFile(home), "utf8"))?.theme; return typeof name === "string" && name ? name : null; }
+  catch { return null; }
+}
+export function writeStyle(name, home) {
+  const file = styleFile(home);
+  fs.mkdirSync(path.dirname(file), { recursive: true });
+  fs.writeFileSync(file, `${JSON.stringify({ theme: name })}\n`, { mode: 0o600 });
+}
+
+// The styles to offer: Pi's built-ins and every loaded theme, each once.
+export function styleChoices(ui) {
+  const names = [...new Set(["system", "dark", "light", ...(ui?.getAllThemes?.() ?? []).map((item) => item?.name).filter(Boolean)])];
+  return names.map((name) => ({ name, label: DESCRIPTIONS[name] ? `${name} — ${DESCRIPTIONS[name]}` : name }));
+}
+
+// remember: true where Pi does not keep the setting itself (company Terminal).
+export function registerStyleCommand(pi, { remember = false, home } = {}) {
+  const apply = (ctx, name) => {
+    const result = ctx.ui.setTheme(name);
+    if (!result?.success) return result?.error ?? "unknown";
+    if (remember) writeStyle(name, home);
+    return null;
+  };
+  if (remember) {
+    pi.on("session_start", async (_event, ctx) => {
+      if (!ctx.hasUI || ctx.ui?.[GATEWAY_UI]) return;
+      const saved = readStyle(home);
+      if (saved && ctx.ui.theme?.name !== saved) ctx.ui.setTheme?.(saved);
+    });
+  }
+  pi.registerCommand("style", {
+    description: "Chọn giao diện (theme) của Terminal: /style để chọn trong danh sách, /style <tên> để đổi ngay",
+    getArgumentCompletions: (prefix) => {
+      const typed = String(prefix ?? "").trim();
+      return Object.keys(DESCRIPTIONS).filter((name) => name !== typed && name.startsWith(typed)).map((value) => ({ value, label: value }));
+    },
+    handler: async (args, ctx) => {
+      if (!ctx.hasUI || ctx.ui?.[GATEWAY_UI] || typeof ctx.ui?.setTheme !== "function") { ctx.ui?.notify?.("/style chỉ dùng trong Terminal.", "info"); return; }
+      const choices = styleChoices(ctx.ui), current = ctx.ui.theme?.name;
+      let name = String(args ?? "").trim();
+      if (!name) {
+        const picked = await ctx.ui.select(`Giao diện Terminal (đang: ${current ?? "system"})`, choices.map((item) => item.label));
+        if (!picked) return;
+        name = choices.find((item) => item.label === picked)?.name ?? picked;
+      }
+      if (!choices.some((item) => item.name === name)) { ctx.ui.notify(`Không có giao diện "${name}". Có: ${choices.map((item) => item.name).join(", ")}.`, "warning"); return; }
+      const error = apply(ctx, name);
+      ctx.ui.notify(error ? `Không đổi được giao diện: ${error}` : `Đã đổi giao diện sang ${name}.`, error ? "error" : "info");
+    },
+  });
+}

package/packages/piagent-core/themes/piagent-contrast.json

@@ -0,0 +1,78 @@
+{
+	"$schema": "https://pi.dev/schemas/theme.schema.json",
+	"name": "piagent-contrast",
+	"appearance": "dark",
+	"vars": {
+		"text": "okhsl(0 0% 98%)",
+		"muted": "okhsl(230 8% 80%)",
+		"violet": "okhsl(295 80% 75%)",
+		"blue": "okhsl(220 85% 75%)",
+		"green": "okhsl(150 85% 72%)",
+		"red": "okhsl(20 95% 70%)",
+		"yellow": "okhsl(85 100% 75%)",
+		"blueBg": "okhsl(230 60% 20%)"
+	},
+	"colors": {
+		"accent": "violet",
+		"border": "okhsl(231 66% 71%)",
+		"borderAccent": "okhsl(295 61% 70%)",
+		"borderMuted": "okhsl(229 9% 59%)",
+		"success": "green",
+		"error": "red",
+		"warning": "yellow",
+		"muted": "muted",
+		"dim": "okhsl(229 9% 62%)",
+		"text": "text",
+		"thinkingText": "okhsl(226 8% 71%)",
+		"selectedBg": "blueBg",
+		"scrollbarTrack": "okhsl(237 8% 39%)",
+		"scrollbarThumb": "okhsl(232 8% 71%)",
+		"searchMatchBg": "okhsl(53 59% 30%)",
+		"searchMatchText": "muted",
+		"userMessageBg": "blueBg",
+		"userMessageText": "text",
+		"customMessageBg": "okhsl(295 48% 30%)",
+		"customMessageText": "muted",
+		"customMessageLabel": "violet",
+		"toolPendingBg": "okhsl(229 6% 30%)",
+		"toolSuccessBg": "okhsl(158 53% 31%)",
+		"toolErrorBg": "okhsl(19 62% 31%)",
+		"toolTitle": "text",
+		"toolOutput": "muted",
+		"mdHeading": "yellow",
+		"mdLink": "blue",
+		"mdLinkUrl": "muted",
+		"mdCode": "violet",
+		"mdCodeBlock": "green",
+		"mdCodeBlockBorder": "muted",
+		"mdQuote": "muted",
+		"mdQuoteBorder": "muted",
+		"mdHr": "muted",
+		"mdListBullet": "violet",
+		"toolDiffAdded": "green",
+		"toolDiffRemoved": "red",
+		"toolDiffContext": "muted",
+		"syntaxComment": "muted",
+		"syntaxKeyword": "blue",
+		"syntaxFunction": "yellow",
+		"syntaxVariable": "okhsl(202 67% 73%)",
+		"syntaxString": "okhsl(52 77% 73%)",
+		"syntaxNumber": "green",
+		"syntaxType": "violet",
+		"syntaxOperator": "muted",
+		"syntaxPunctuation": "muted",
+		"thinkingOff": "okhsl(229 9% 55%)",
+		"thinkingMinimal": "okhsl(232 23% 58%)",
+		"thinkingLow": "okhsl(232 52% 60%)",
+		"thinkingMedium": "okhsl(263 68% 62%)",
+		"thinkingHigh": "okhsl(295 84% 65%)",
+		"thinkingXhigh": "okhsl(337 93% 67%)",
+		"thinkingMax": "okhsl(20 100% 69%)",
+		"bashMode": "okhsl(159 74% 71%)"
+	},
+	"export": {
+		"pageBg": "okhsl(262 16% 22%)",
+		"cardBg": "okhsl(264 15% 25%)",
+		"infoBg": "okhsl(53 59% 30%)"
+	}
+}

package/packages/piagent-core/themes/piagent-focus.json

@@ -0,0 +1,78 @@
+{
+	"$schema": "https://pi.dev/schemas/theme.schema.json",
+	"name": "piagent-focus",
+	"appearance": "dark",
+	"vars": {
+		"text": "okhsl(60 4% 88%)",
+		"muted": "okhsl(60 3% 64%)",
+		"violet": "okhsl(70 80% 70%)",
+		"blue": "okhsl(60 10% 78%)",
+		"green": "okhsl(140 30% 66%)",
+		"red": "okhsl(25 60% 66%)",
+		"yellow": "okhsl(70 80% 70%)",
+		"blueBg": "okhsl(60 6% 22%)"
+	},
+	"colors": {
+		"accent": "violet",
+		"border": "okhsl(231 14% 65%)",
+		"borderAccent": "okhsl(295 13% 64%)",
+		"borderMuted": "okhsl(229 2% 53%)",
+		"success": "green",
+		"error": "red",
+		"warning": "yellow",
+		"muted": "muted",
+		"dim": "okhsl(229 2% 56%)",
+		"text": "text",
+		"thinkingText": "okhsl(226 2% 65%)",
+		"selectedBg": "blueBg",
+		"scrollbarTrack": "okhsl(237 2% 33%)",
+		"scrollbarThumb": "okhsl(232 2% 65%)",
+		"searchMatchBg": "okhsl(53 13% 24%)",
+		"searchMatchText": "muted",
+		"userMessageBg": "blueBg",
+		"userMessageText": "text",
+		"customMessageBg": "okhsl(295 10% 24%)",
+		"customMessageText": "muted",
+		"customMessageLabel": "violet",
+		"toolPendingBg": "okhsl(229 1% 24%)",
+		"toolSuccessBg": "okhsl(158 12% 25%)",
+		"toolErrorBg": "okhsl(19 14% 25%)",
+		"toolTitle": "text",
+		"toolOutput": "muted",
+		"mdHeading": "yellow",
+		"mdLink": "blue",
+		"mdLinkUrl": "muted",
+		"mdCode": "violet",
+		"mdCodeBlock": "green",
+		"mdCodeBlockBorder": "muted",
+		"mdQuote": "muted",
+		"mdQuoteBorder": "muted",
+		"mdHr": "muted",
+		"mdListBullet": "violet",
+		"toolDiffAdded": "green",
+		"toolDiffRemoved": "red",
+		"toolDiffContext": "muted",
+		"syntaxComment": "muted",
+		"syntaxKeyword": "blue",
+		"syntaxFunction": "yellow",
+		"syntaxVariable": "okhsl(202 14% 67%)",
+		"syntaxString": "okhsl(52 17% 67%)",
+		"syntaxNumber": "green",
+		"syntaxType": "violet",
+		"syntaxOperator": "muted",
+		"syntaxPunctuation": "muted",
+		"thinkingOff": "okhsl(229 2% 49%)",
+		"thinkingMinimal": "okhsl(232 5% 52%)",
+		"thinkingLow": "okhsl(232 11% 54%)",
+		"thinkingMedium": "okhsl(263 15% 56%)",
+		"thinkingHigh": "okhsl(295 18% 59%)",
+		"thinkingXhigh": "okhsl(337 20% 61%)",
+		"thinkingMax": "okhsl(20 25% 63%)",
+		"bashMode": "okhsl(159 16% 65%)"
+	},
+	"export": {
+		"pageBg": "okhsl(262 4% 16%)",
+		"cardBg": "okhsl(264 3% 19%)",
+		"infoBg": "okhsl(53 13% 24%)"
+	}
+}

package/packages/piagent-core/themes/piagent-ocean.json

@@ -0,0 +1,78 @@
+{
+	"$schema": "https://pi.dev/schemas/theme.schema.json",
+	"name": "piagent-ocean",
+	"appearance": "dark",
+	"vars": {
+		"text": "okhsl(200 8% 90%)",
+		"muted": "okhsl(200 10% 68%)",
+		"violet": "okhsl(185 70% 68%)",
+		"blue": "okhsl(215 70% 70%)",
+		"green": "okhsl(150 60% 68%)",
+		"red": "okhsl(15 75% 68%)",
+		"yellow": "okhsl(75 85% 70%)",
+		"blueBg": "okhsl(205 45% 22%)"
+	},
+	"colors": {
+		"accent": "violet",
+		"border": "okhsl(191 51% 65%)",
+		"borderAccent": "okhsl(255 48% 64%)",
+		"borderMuted": "okhsl(189 7% 53%)",
+		"success": "green",
+		"error": "red",
+		"warning": "yellow",
+		"muted": "muted",
+		"dim": "okhsl(189 7% 56%)",
+		"text": "text",
+		"thinkingText": "okhsl(186 6% 65%)",
+		"selectedBg": "blueBg",
+		"scrollbarTrack": "okhsl(197 6% 33%)",
+		"scrollbarThumb": "okhsl(192 6% 65%)",
+		"searchMatchBg": "okhsl(13 46% 24%)",
+		"searchMatchText": "muted",
+		"userMessageBg": "blueBg",
+		"userMessageText": "text",
+		"customMessageBg": "okhsl(255 38% 24%)",
+		"customMessageText": "muted",
+		"customMessageLabel": "violet",
+		"toolPendingBg": "okhsl(189 4% 24%)",
+		"toolSuccessBg": "okhsl(118 41% 25%)",
+		"toolErrorBg": "okhsl(339 49% 25%)",
+		"toolTitle": "text",
+		"toolOutput": "muted",
+		"mdHeading": "yellow",
+		"mdLink": "blue",
+		"mdLinkUrl": "muted",
+		"mdCode": "violet",
+		"mdCodeBlock": "green",
+		"mdCodeBlockBorder": "muted",
+		"mdQuote": "muted",
+		"mdQuoteBorder": "muted",
+		"mdHr": "muted",
+		"mdListBullet": "violet",
+		"toolDiffAdded": "green",
+		"toolDiffRemoved": "red",
+		"toolDiffContext": "muted",
+		"syntaxComment": "muted",
+		"syntaxKeyword": "blue",
+		"syntaxFunction": "yellow",
+		"syntaxVariable": "okhsl(162 52% 67%)",
+		"syntaxString": "okhsl(12 60% 67%)",
+		"syntaxNumber": "green",
+		"syntaxType": "violet",
+		"syntaxOperator": "muted",
+		"syntaxPunctuation": "muted",
+		"thinkingOff": "okhsl(189 7% 49%)",
+		"thinkingMinimal": "okhsl(192 18% 52%)",
+		"thinkingLow": "okhsl(192 40% 54%)",
+		"thinkingMedium": "okhsl(223 53% 56%)",
+		"thinkingHigh": "okhsl(255 66% 59%)",
+		"thinkingXhigh": "okhsl(297 73% 61%)",
+		"thinkingMax": "okhsl(340 89% 63%)",
+		"bashMode": "okhsl(119 58% 65%)"
+	},
+	"export": {
+		"pageBg": "okhsl(222 13% 16%)",
+		"cardBg": "okhsl(224 12% 19%)",
+		"infoBg": "okhsl(13 46% 24%)"
+	}
+}

package/packages/piagent-core/themes/piagent-paper.json

@@ -0,0 +1,78 @@
+{
+	"$schema": "https://pi.dev/schemas/theme.schema.json",
+	"name": "piagent-paper",
+	"appearance": "light",
+	"vars": {
+		"text": "okhsl(40 10% 22%)",
+		"muted": "okhsl(40 8% 44%)",
+		"violet": "okhsl(330 55% 42%)",
+		"blue": "okhsl(225 65% 42%)",
+		"green": "okhsl(150 70% 36%)",
+		"red": "okhsl(25 85% 44%)",
+		"yellow": "okhsl(70 95% 40%)",
+		"blueBg": "okhsl(50 30% 90%)"
+	},
+	"colors": {
+		"accent": "violet",
+		"border": "okhsl(231 60% 55%)",
+		"borderAccent": "okhsl(295 53% 55%)",
+		"borderMuted": "okhsl(235 6% 66%)",
+		"success": "green",
+		"error": "red",
+		"warning": "yellow",
+		"muted": "muted",
+		"dim": "okhsl(229 6% 59%)",
+		"text": "text",
+		"thinkingText": "okhsl(234 7% 55%)",
+		"selectedBg": "blueBg",
+		"scrollbarTrack": "okhsl(248 3% 90%)",
+		"scrollbarThumb": "okhsl(226 6% 65%)",
+		"searchMatchBg": "okhsl(56 20% 91%)",
+		"searchMatchText": "muted",
+		"userMessageBg": "blueBg",
+		"userMessageText": "text",
+		"customMessageBg": "okhsl(295 22% 91%)",
+		"customMessageText": "muted",
+		"customMessageLabel": "violet",
+		"toolPendingBg": "okhsl(248 3% 91%)",
+		"toolSuccessBg": "okhsl(156 19% 91%)",
+		"toolErrorBg": "okhsl(24 21% 91%)",
+		"toolTitle": "text",
+		"toolOutput": "muted",
+		"mdHeading": "yellow",
+		"mdLink": "blue",
+		"mdLinkUrl": "muted",
+		"mdCode": "violet",
+		"mdCodeBlock": "green",
+		"mdCodeBlockBorder": "muted",
+		"mdQuote": "muted",
+		"mdQuoteBorder": "muted",
+		"mdHr": "muted",
+		"mdListBullet": "violet",
+		"toolDiffAdded": "green",
+		"toolDiffRemoved": "red",
+		"toolDiffContext": "muted",
+		"syntaxComment": "muted",
+		"syntaxKeyword": "blue",
+		"syntaxFunction": "yellow",
+		"syntaxVariable": "okhsl(203 66% 46%)",
+		"syntaxString": "okhsl(52 76% 46%)",
+		"syntaxNumber": "green",
+		"syntaxType": "violet",
+		"syntaxOperator": "muted",
+		"syntaxPunctuation": "muted",
+		"thinkingOff": "okhsl(223 4% 80%)",
+		"thinkingMinimal": "okhsl(229 13% 78%)",
+		"thinkingLow": "okhsl(232 30% 76%)",
+		"thinkingMedium": "okhsl(264 43% 74%)",
+		"thinkingHigh": "okhsl(295 56% 72%)",
+		"thinkingXhigh": "okhsl(337 67% 70%)",
+		"thinkingMax": "okhsl(20 88% 68%)",
+		"bashMode": "okhsl(159 67% 55%)"
+	},
+	"export": {
+		"pageBg": "okhsl(17 3% 94%)",
+		"cardBg": "okhsl(17 4% 97%)",
+		"infoBg": "okhsl(56 20% 91%)"
+	}
+}

package/packages/piagent-webui/gateway/pi-host.ts

@@ -4,6 +4,7 @@ import os from "node:os";
 import path from "node:path";
 import { createRequire } from "node:module";
 import { pathToFileURL } from "node:url";
+import { privateHostRoot } from "../../piagent-core/managed/pi-host.mjs";
 
 const require = createRequire(import.meta.url);
 
@@ -73,8 +74,19 @@ export function installedPiHostRoot(): string {
   throw new Error("pi-host-unavailable");
 }
 
+// The host of the pinned release: the installed one when it is that release,
+// else Piagent's private copy, kept beside a member's own newer Pi
+// (packages/piagent-core/managed/pi-host.mjs).
+export function pinnedPiHostRoot(expectedVersion: string): string {
+  const own = privateHostRoot(expectedVersion) as string | null;
+  let root: string;
+  try { root = installedPiHostRoot(); } catch (error) { if (own) return own; throw error; }
+  try { if ((JSON.parse(fs.readFileSync(path.join(root, "package.json"), "utf8")) as { version?: string }).version === expectedVersion) return root; } catch { /* unreadable: the private copy, if any */ }
+  return own ?? root;
+}
+
 export async function loadPinnedPiHost(expectedVersion: string): Promise<any> {
-  const root = installedPiHostRoot();
+  const root = pinnedPiHostRoot(expectedVersion);
   const actual = JSON.parse(fs.readFileSync(path.join(root, "package.json"), "utf8")) as { version?: string };
   if (actual.version !== expectedVersion) throw new Error("pi-host-version-mismatch");
   return await import(pathToFileURL(path.join(root, "dist", "index.js")).href);