@piagent/platform 1.48.4 → 1.49.0

package/docs-site/whats-new.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.48.4" title="v1.48.4 docs · VI"><span class="dot"></span>v1.48.4</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.49.0" title="v1.49.0 docs · VI"><span class="dot"></span>v1.49.0</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new" aria-current="page">Changelog</a>
@@ -108,7 +108,30 @@
 <div class="release-filter" role="toolbar" aria-label="Lọc theo loại thay đổi"><button type="button" data-filter-kind="all" aria-pressed="true">Tất cả</button><button type="button" data-filter-kind="new" aria-pressed="false">Mới</button><button type="button" data-filter-kind="improved" aria-pressed="false">Cải thiện</button><button type="button" data-filter-kind="fixed" aria-pressed="false">Sửa lỗi</button><button type="button" data-filter-kind="security" aria-pressed="false">Bảo mật</button></div>
 <section class="section releases" data-releases>
 <h2 id="latest" class="sr-only">Mới nhất</h2>
-<article class="release latest" id="v1-48-4" data-release>
+<article class="release latest" id="v1-49-0" data-release>
+  <div class="release-meta"><a class="release-version" href="#v1-49-0">v1.49.0</a><time class="release-date" datetime="2026-10-31">31/10/2026</time></div>
+  <div class="release-body">
+    <h3 data-toc-skip id="v1-49-0-title">Bạn chọn chạy bao nhiêu test</h3>
+    <p>Harness công ty không còn ép chạy cả bộ test sau một thay đổi nhỏ: bạn chọn chạy phần liên quan, toàn bộ hay không chạy.</p>
+    <ul class="release-items">
+      <li data-kind="improved"><span class="kind kind-improved">Cải thiện</span><span>Harness hỏi chạy bao nhiêu test ở cuối thay đổi, trước khi chạy cả bộ test và trước khi push, trên thẻ ở dashboard hoặc trong Terminal.</span></li>
+      <li data-kind="improved"><span class="kind kind-improved">Cải thiện</span><span>Bypass tự chạy test liên quan, không hỏi, nhưng vẫn hỏi trước push. Khi không có màn hình để hỏi thì không hỏi gì.</span></li>
+      <li data-kind="fixed"><span class="kind kind-fixed">Sửa lỗi</span><span>Khi chỉ chạy một phần test, lượt ghi rõ điều đó thay vì báo check đã pass.</span></li>
+    </ul>
+  </div>
+</article>
+<article class="release" id="v1-48-5" data-release>
+  <div class="release-meta"><a class="release-version" href="#v1-48-5">v1.48.5</a><time class="release-date" datetime="2026-10-31">31/10/2026</time></div>
+  <div class="release-body">
+    <h3 data-toc-skip id="v1-48-5-title">Task đang chạy vẫn dùng được tool khi Piagent được cập nhật</h3>
+    <p>Cập nhật Piagent khi task công ty đang chạy không còn làm hỏng tool: task chạy xong trên bản đã bắt đầu, rồi Terminal mới nạp bản mới.</p>
+    <ul class="release-items">
+      <li data-kind="fixed"><span class="kind kind-fixed">Sửa lỗi</span><span>Task công ty chạy trong lúc piagent-update không còn bị mọi tool báo managed-runtime-changed: sandbox chạy bản sao riêng, vẫn được kiểm tra, của đúng bản lúc bắt đầu.</span></li>
+      <li data-kind="fixed"><span class="kind kind-fixed">Sửa lỗi</span><span>Lượt không đọc được code không còn bị báo là đã đổi code, trừ khi thật sự có sửa file.</span></li>
+    </ul>
+  </div>
+</article>
+<article class="release" id="v1-48-4" data-release>
   <div class="release-meta"><a class="release-version" href="#v1-48-4">v1.48.4</a><time class="release-date" datetime="2026-10-30">30/10/2026</time></div>
   <div class="release-body">
     <h3 data-toc-skip id="v1-48-4-title">/reload không còn làm hỏng Terminal công ty; nạp bản mới không làm mất tin nhắn</h3>
@@ -396,38 +419,36 @@
     </ul>
   </div>
 </article>
-<article class="release" id="v1-43-4" data-release>
-  <div class="release-meta"><a class="release-version" href="#v1-43-4">v1.43.4</a><time class="release-date" datetime="2026-10-26">26/10/2026</time></div>
-  <div class="release-body">
-    <h3 data-toc-skip id="v1-43-4-title">Dev chọn workflow, harness hỗ trợ BE/FE theo project</h3>
-    <p>Cuộc trò chuyện công ty nhận diện project và kế thừa skill, plan, nguồn requirement của Dev, không ép thêm phương pháp mới. Giữ nguyên quyền hạn và cơ chế duyệt.</p>
-    <ul class="release-items">
-      <li data-kind="new"><span class="kind kind-new">Mới</span><span>Tự nhận diện repo/package FE, BE trong thư mục hội thoại và gợi ý checks phù hợp, làm mới theo task.</span></li>
-      <li data-kind="new"><span class="kind kind-new">Mới</span><span>Context workflow tùy chọn nhớ nguồn requirement, plan và tasks của công việc khi mở lại hội thoại, truyền chỉ đọc cho helper và hỗ trợ đổi hoặc xóa.</span></li>
-      <li data-kind="improved"><span class="kind kind-improved">Cải thiện</span><span>Lifecycle là hướng dẫn theo workflow và điểm dừng Dev chọn, không ép file spec hoặc tự tạo gate release. Skill được chọn không cấp quyền hay bỏ qua kiểm chứng, review và duyệt deploy.</span></li>
-      <li data-kind="fixed"><span class="kind kind-fixed">Sửa lỗi</span><span>Tải lịch sử kiểm tra lại vị trí cuộn và phản hồi khi cuộn lên, tránh sự kiện observer cũ tải thừa trang hoặc làm lịch sử ngừng tải.</span></li>
-      <li data-kind="fixed"><span class="kind kind-fixed">Sửa lỗi</span><span>Review chạy được ở thư mục chứa nhiều repo: mỗi file thay đổi được review trong repo của nó, file ngoài repo được ghi rõ là không review.</span></li>
-    </ul>
-  </div>
-</article>
-<article class="release" id="v1-43-3" data-release>
-  <div class="release-meta"><a class="release-version" href="#v1-43-3">v1.43.3</a><time class="release-date" datetime="2026-10-26">26/10/2026</time></div>
-  <div class="release-body">
-    <h3 data-toc-skip id="v1-43-3-title">Dev chọn workflow, harness hỗ trợ BE/FE theo project <span class="tag">không phát hành</span></h3>
-    <p>Đã tag nhưng chưa publish: E2E lịch sử WebUI trên Linux phát hiện race giữa scroll và observer. Thay bằng 1.43.4.</p>
-    <ul class="release-items">
-      <li data-kind="new"><span class="kind kind-new">Mới</span><span>Tự nhận diện repo/package FE, BE trong thư mục hội thoại và gợi ý checks phù hợp, làm mới theo task.</span></li>
-      <li data-kind="new"><span class="kind kind-new">Mới</span><span>Context workflow tùy chọn nhớ nguồn requirement, plan và tasks của công việc khi mở lại hội thoại, truyền chỉ đọc cho helper và hỗ trợ đổi hoặc xóa.</span></li>
-      <li data-kind="improved"><span class="kind kind-improved">Cải thiện</span><span>Lifecycle là hướng dẫn theo workflow và điểm dừng Dev chọn, không ép file spec hoặc tự tạo gate release. Skill được chọn không cấp quyền hay bỏ qua kiểm chứng, review và duyệt deploy.</span></li>
-    </ul>
-  </div>
-</article>
 </section>
 <section class="section archive">
   <h2 id="archive">Các bản trước</h2>
   <p class="section-lead">Bản cũ hơn, gom theo tháng. Mở một tháng để xem từng thay đổi.</p>
   <details class="release-archive">
-    <summary><span>Tháng 10/2026</span><span class="archive-count">67</span></summary>
+    <summary><span>Tháng 10/2026</span><span class="archive-count">69</span></summary>
+    <div class="archive-row" id="v1-43-4">
+      <div class="archive-head"><a class="release-version" href="#v1-43-4">v1.43.4</a> <span class="release-date">26/10/2026</span></div>
+      <div class="archive-body">
+        <p><strong>Dev chọn workflow, harness hỗ trợ BE/FE theo project</strong> — Cuộc trò chuyện công ty nhận diện project và kế thừa skill, plan, nguồn requirement của Dev, không ép thêm phương pháp mới. Giữ nguyên quyền hạn và cơ chế duyệt.</p>
+        <ul class="release-items">
+        <li data-kind="new"><span class="kind kind-new">Mới</span><span>Tự nhận diện repo/package FE, BE trong thư mục hội thoại và gợi ý checks phù hợp, làm mới theo task.</span></li>
+        <li data-kind="new"><span class="kind kind-new">Mới</span><span>Context workflow tùy chọn nhớ nguồn requirement, plan và tasks của công việc khi mở lại hội thoại, truyền chỉ đọc cho helper và hỗ trợ đổi hoặc xóa.</span></li>
+        <li data-kind="improved"><span class="kind kind-improved">Cải thiện</span><span>Lifecycle là hướng dẫn theo workflow và điểm dừng Dev chọn, không ép file spec hoặc tự tạo gate release. Skill được chọn không cấp quyền hay bỏ qua kiểm chứng, review và duyệt deploy.</span></li>
+        <li data-kind="fixed"><span class="kind kind-fixed">Sửa lỗi</span><span>Tải lịch sử kiểm tra lại vị trí cuộn và phản hồi khi cuộn lên, tránh sự kiện observer cũ tải thừa trang hoặc làm lịch sử ngừng tải.</span></li>
+        <li data-kind="fixed"><span class="kind kind-fixed">Sửa lỗi</span><span>Review chạy được ở thư mục chứa nhiều repo: mỗi file thay đổi được review trong repo của nó, file ngoài repo được ghi rõ là không review.</span></li>
+        </ul>
+      </div>
+    </div>
+    <div class="archive-row" id="v1-43-3">
+      <div class="archive-head"><a class="release-version" href="#v1-43-3">v1.43.3</a> <span class="release-date">26/10/2026</span></div>
+      <div class="archive-body">
+        <p><strong>Dev chọn workflow, harness hỗ trợ BE/FE theo project</strong> <span class="tag">không phát hành</span> — Đã tag nhưng chưa publish: E2E lịch sử WebUI trên Linux phát hiện race giữa scroll và observer. Thay bằng 1.43.4.</p>
+        <ul class="release-items">
+        <li data-kind="new"><span class="kind kind-new">Mới</span><span>Tự nhận diện repo/package FE, BE trong thư mục hội thoại và gợi ý checks phù hợp, làm mới theo task.</span></li>
+        <li data-kind="new"><span class="kind kind-new">Mới</span><span>Context workflow tùy chọn nhớ nguồn requirement, plan và tasks của công việc khi mở lại hội thoại, truyền chỉ đọc cho helper và hỗ trợ đổi hoặc xóa.</span></li>
+        <li data-kind="improved"><span class="kind kind-improved">Cải thiện</span><span>Lifecycle là hướng dẫn theo workflow và điểm dừng Dev chọn, không ép file spec hoặc tự tạo gate release. Skill được chọn không cấp quyền hay bỏ qua kiểm chứng, review và duyệt deploy.</span></li>
+        </ul>
+      </div>
+    </div>
     <div class="archive-row" id="v1-43-2">
       <div class="archive-head"><a class="release-version" href="#v1-43-2">v1.43.2</a> <span class="release-date">26/10/2026</span></div>
       <div class="archive-body">

package/docs-site/windows.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.48.4" title="v1.48.4 docs · VI"><span class="dot"></span>v1.48.4</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.49.0" title="v1.49.0 docs · VI"><span class="dot"></span>v1.49.0</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/docs-site/workflows.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.48.4" title="v1.48.4 docs · VI"><span class="dot"></span>v1.48.4</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.49.0" title="v1.49.0 docs · VI"><span class="dot"></span>v1.49.0</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/evals/private-holdout-v1/public-exposure.v2.json

@@ -256,8 +256,8 @@
     },
     {
       "path": "tests",
-      "fileCount": 643,
-      "sha256": "ee1cd916b71678c7f3b2eda3f9b90d0661b636c81634fb3cfbd18372b2b53ba6"
+      "fileCount": 647,
+      "sha256": "0ec8e3ca46f9a7ef8b44de7f1a31330f63a12e388205e4419530a8bed9cb82be"
     }
   ],
   "custodianComparisonRules": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@piagent/platform",
-  "version": "1.48.4",
+  "version": "1.49.0",
   "license": "MIT",
   "publishConfig": {
     "access": "public",

package/packages/piagent-core/managed/check-questions.mjs

@@ -0,0 +1,133 @@
+import { randomUUID } from 'node:crypto';
+import { memberQuestions } from './member-questions.mjs';
+import { effectivePermission } from './permission.mjs';
+
+// How much to test is the member's decision: a one-line fix should not cost a
+// thirty-minute suite. The harness asks at the end of a change, before a whole
+// suite and before a push, on the dashboard card or in the Terminal. Bypass skips
+// the questions about the work (it runs the tests that cover the change) but not
+// the one before a push. With no screen nobody can answer: nothing is asked.
+
+// How much of the suite a test command covers: 'partial' (a filter, one file, one
+// package), 'suite' (the whole test command) or null when it runs no tests.
+const VERSION_ONLY = /(?:^|\s)(?:--version|-V|--help)(?:\s|$)/;
+const FILTERED = /(?:^|\s)(?:-k|-t|--grep|--testNamePattern|--test-name-pattern|--filter|--only|--testPathPattern)(?:[\s=]|$)|\bgo\s+test\b.*\s-run[\s=]|\bpytest\b.*\s::|\.only\b/;
+const TEST_RUNNER = /\b(npm|pnpm|yarn|bun)\s+(run\s+)?test(:\S+)?(?=\s|$)|\bnode\s+--test\b|\b(vitest|jest|mocha|pytest|rspec|phpunit)\b|\bplaywright\s+test\b|\bpython3?\s+-m\s+(pytest|unittest)\b|\b(go|cargo|swift|dotnet|deno)\s+test\b|\bmake\s+test\b|\bxcodebuild\b.*\btest\b|\b(gradle|gradlew|mvn|mvnw)\b.*\b(test|verify)\b/;
+// Test commands start a command: `npm install -D vitest` or `rm jest.config.ts` only name one.
+const TEST_START = new RegExp(`^(?:${TEST_RUNNER.source})`);
+const LAUNCHER = /^(?:\w+=\S*\s+|time\s+|nohup\s+|timeout\s+\S+\s+|npx\s+(?:-\S+\s+)*|bunx\s+|pnpm\s+(?:exec|dlx)\s+|uv\s+run\s+|poetry\s+run\s+|yarn\s+(?=jest|vitest|mocha|playwright)|node_modules\/\.bin\/|\.\/)+/;
+const partsOf = bare => bare.split(/\s*(?:\|\|?|&&|;)\s*/).map(part => part.replace(/\s\d*>.*$/, '').trim());
+const NOT_TESTS = /\b(lint|typecheck|type-check|tsc|eslint|biome|ruff|mypy|pyright|vet|clippy|format|build)\b/;
+const TARGET_FLAG = /^(-p|--package|-w|--workspace|--tests)$|^(-Dtest=|-only-testing:|--workspace=|--package=)/;
+const VALUE_FLAG = /^(-c|--config|--reporter|--project|--workers|--timeout|--rootDir|--root|-f|--file|-o|--output)$/;
+// A file or folder named on the command line; a flag's own value names none.
+const targetsPart = args => args.some((a, i) => {
+  if (TARGET_FLAG.test(a)) return true;
+  if (a.startsWith('-') || VALUE_FLAG.test(args[i - 1] ?? '') || a.includes('*') || a.endsWith('...')) return false;
+  return a.includes('/') || /\.(test|spec)\.\w+$|_test\.\w+$|^test_\w+\.\w+$/.test(a);
+});
+// What a command runs, without the text it merely quotes (a commit message, an echo).
+const unquoted = text => text.replace(/"[^"]*"|'[^']*'/g, '""');
+export function checkScope(command, declared = []) {
+  const text = String(command ?? '').replace(/\s+/g, ' ').trim();
+  if (!text || /^(echo|printf|grep|rg|cat|sed|awk|head|tail|less|git|ls|find)\b/.test(text) || VERSION_ONLY.test(text) || /--collect-only/.test(text)) return null;
+  const bare = unquoted(text);
+  for (const part of partsOf(bare)) {
+    const own = part.replace(LAUNCHER, ''), runner = own.match(TEST_START);
+    if (!runner) continue;
+    if (FILTERED.test(own)) return 'partial';
+    return !declared.includes(text) && targetsPart(own.slice(runner[0].length).split(' ').filter(Boolean)) ? 'partial' : 'suite';
+  }
+  // A script the repository declares: it cannot be narrowed from here.
+  const named = declared.find(d => partsOf(bare).some(part => part.startsWith(unquoted(d))));
+  return named && !NOT_TESTS.test(named) ? 'suite' : null;
+}
+// The member's own words asking for the whole suite: nothing to ask them then.
+const RUN_ALL = String.raw`(?:full|all(?:\s+the)?|whole(?:\s+the)?|entire(?:\s+the)?|the\s+(?:full|whole|entire))`;
+const FULL_WORDS = new RegExp([
+  String.raw`(?:^|\s)(?:run|rerun|execute)\s+${RUN_ALL}\s+(?:tests?|suite|checks?)(?:\s|$|[.,!?])`,
+  String.raw`(?:^|\s)(?:chạy|chay)(?:\s+lại)?\s+(?:full|toàn bộ|toan bo|tất cả|tat ca|hết|het)(?:\s+các)?\s+(?:tests?|suite|kiểm thử|kiểm tra)`,
+  String.raw`(?:^|\s)(?:chạy|chay)(?:\s+lại)?\s+tests?\s+(?:full|toàn bộ|toan bo|tất cả|tat ca|hết|het)`,
+].join('|'), 'i');
+const NOT_WORDS = /(không|khong|đừng|chưa|\bno\b|\bnot\b|don't|skip|bỏ qua)[^.!?\n]{0,24}$/i;
+export function asksFullChecks(text) {
+  const value = String(text ?? ''), hit = value.match(FULL_WORDS);
+  return !!hit && !NOT_WORDS.test(value.slice(0, hit.index));
+}
+// A push the harness can see; handoff-policy still asks for its own approval.
+export const isGitPush = command => /(^|[\s;&|(])git\s+(?:(?:-C|-c)\s+\S+\s+|--\S+\s+)*push\b/.test(unquoted(String(command ?? '')));
+
+const PART = 'Chỉ chạy phần liên quan', KEEP = 'Giữ kết quả phần đã chạy', FULL = 'Chạy toàn bộ', NONE = 'Không chạy lúc này';
+const PUSH_FULL = 'Chạy toàn bộ rồi mới push', PUSH_NOW = 'Push luôn, không chạy thêm';
+const GATEWAY_UI = Symbol.for('piagent.webui.gateway-runtime-ui.v1');
+
+// The screen to ask on: the dashboard's card, else the Terminal. The turn's end
+// has no tool context, so the Terminal comes from the extension runner there.
+function surfaceOf(self, ctx) {
+  const sessionId = self.session?.sessionManager?.getSessionId?.();
+  if (sessionId && memberQuestions.hasSurface(sessionId)) return { sessionId };
+  const runner = self.session?.extensionRunner, ui = ctx ? ctx.hasUI && ctx.ui : runner?.hasUI?.() && runner.getUIContext?.();
+  return ui?.select && !ui[GATEWAY_UI] ? { ui } : null;
+}
+// The label picked, { other } for the member's own words, undefined for no answer (Esc, stopped).
+async function ask(surface, question, labels, signal) {
+  if (surface.ui) return surface.ui.select(question, labels, { signal });
+  const questions = [{ header: 'Test', question, options: labels.map(label => ({ label, description: '' })), multiSelect: false }];
+  const answer = await memberQuestions.ask({ sessionId: surface.sessionId, toolCallId: `check-scope-${randomUUID()}`, questions, signal }).catch(() => null);
+  if (!answer || answer.skipped) return undefined;
+  const { selected, other } = answer.answers[0];
+  return other ? { other } : labels[selected[0]];
+}
+
+// At the end of a change: { choice: 'partial' | 'full' | 'skip', words? }, or null
+// when nobody can answer. No answer takes the cheap choice: the status says only part ran.
+export async function askCheckScope(self, { partPassed = false, signal } = {}) {
+  const surface = surfaceOf(self);
+  if (!surface) return null;
+  if (effectivePermission(self) === 'bypass') return { choice: 'partial' };
+  const part = partPassed ? KEEP : PART;
+  const picked = await ask(surface, partPassed ? 'Code đã đổi, phần test liên quan đã pass. Có chạy toàn bộ test không?' : 'Code đã đổi, chưa chạy test. Chạy phần nào?', [part, FULL, NONE], signal);
+  if (signal?.aborted) return null;
+  if (picked?.other) return { choice: 'partial', words: picked.other };
+  return { choice: picked === FULL ? 'full' : picked === NONE ? 'skip' : 'partial' };
+}
+
+const PARTIAL_REASON = 'managed-check-scope: the member chose to run only the tests that cover the change. Run one file, a filter or one package, not the whole suite. If this project has no way to run part of it, say so and repeat the command: the member is asked.';
+const BYPASS_REASON = 'managed-check-scope: run the tests that cover the change (one file, a filter, one package). A whole-suite run needs the member to ask for it, or their answer before a push. If this project has no way to run part of it, say so and repeat the command.';
+const PUSH_REASON = 'managed-check-scope: the member wants the whole suite before this push. Run it, fix what fails, then push.';
+const STOPPED_REASON = 'managed-check-scope: the member did not answer whether to push now. Do not push; say so and let them decide.';
+const WORDS_REASON = words => `managed-check-scope: this command did not run. The member answered about testing: "${String(words).slice(0, 500)}". Follow that.`;
+
+// Before a whole suite or a push: returns to let it run, throws to send the agent another way.
+export async function beforeCheckOrPush(self, command, ctx, signal) {
+  const run = self.run;
+  if (!run || run.policy?.verify === 'off') return;
+  // Calls sent together wait for one answer: the next one sees it.
+  const turn = (run.scopeQuestion ?? Promise.resolve()).then(() => holdOrLet(self, run, command, ctx, signal));
+  run.scopeQuestion = turn.catch(() => {});
+  return turn;
+}
+async function holdOrLet(self, run, command, ctx, signal) {
+  const push = isGitPush(command);
+  if (!push && (checkScope(command, run.checks.commands) !== 'suite' || run.fullAsked || run.scopeChoice === 'full')) return;
+  const surface = surfaceOf(self, ctx);
+  if (!surface) return;
+  if (push) {
+    const now = await self.digest();
+    if (run.suitePassedOn(now) || (run.pushAllowedOn !== undefined && run.pushAllowedOn === now)) return;
+    const picked = await ask(surface, 'Sắp push code nhưng toàn bộ test chưa pass trên code này. Làm gì?', [PUSH_FULL, PUSH_NOW], signal);
+    if (picked === PUSH_NOW) { run.pushAllowedOn = now; return; }
+    if (picked?.other) throw Error(WORDS_REASON(picked.other));
+    if (picked !== PUSH_FULL) throw Error(STOPPED_REASON);
+    run.scopeChoice = 'full';
+    throw Error(PUSH_REASON);
+  }
+  // Sent another way once; the same command again means the part did not do: the member decides (Bypass: it runs).
+  const held = run.scopeHeld ??= new Set(), again = held.has(command); held.add(command);
+  if (effectivePermission(self) === 'bypass') { if (again) return; throw Error(BYPASS_REASON); }
+  if (run.scopeChoice === 'partial' && !again) throw Error(PARTIAL_REASON);
+  const picked = await ask(surface, `Agent muốn chạy toàn bộ test: ${String(command).slice(0, 160)}`, [PART, FULL], signal);
+  if (picked === FULL) { run.scopeChoice = 'full'; return; }
+  run.scopeChoice = 'partial';
+  throw Error(picked?.other ? WORDS_REASON(picked.other) : PARTIAL_REASON);
+}

package/packages/piagent-core/managed/command-tools.mjs

@@ -1,4 +1,5 @@
 import { spawn } from 'node:child_process';
+import { beforeCheckOrPush } from './check-questions.mjs';
 import { asksOnlyHandoff, broadAccess, effectivePermission, networkConfirmation } from './permission.mjs';
 import { handoffReason } from '../runtime/policy/handoff-policy.mjs';
 import { engineAlive, engineLauncher } from './container-engine.mjs';
@@ -105,6 +106,7 @@ function commandTool(self, kind) {
       if (memberOnly) throw Error(MEMBER_ONLY(memberOnly));
       const notSimulator = kind === 'simulator' ? simulatorCommandReason(args.command, self.cwd) : null;
       if (notSimulator) throw Error(`managed-simulator-command: ${notSimulator}.`);
+      if (kind !== 'simulator') await beforeCheckOrPush(self, args.command, ctx, signal); // how much to test, before the command's own approval
       const confirm = await spec.confirm(self, args.command);
       if (confirm !== null) {
         const why = confirm === 'ask' ? null : stillAsks(self, confirm), handoff = await handoffReason(args.command);

package/packages/piagent-core/managed/helper-run.mjs

@@ -144,7 +144,7 @@ async function answerUnder(managed, key, task, signal, harness, snapshot, parts,
     (managed.jobTitles ??= new WeakMap()).set(runtime, jobTitle(task, title));
     const setup = HELPER_SETUP[role], memory = helperMemoryTools(managed, () => grant, renew);
     boundary = new ManagedToolBoundary({ cwd: managed.cwd, sdkRoot: managed.sdk, protectedRoots: managed.protectedRoots, readOnly: true, commands: setup.commands });
-    const checks = role === 'verify' ? `\n\nRepository checks: ${managed.checks.commands.length ? managed.checks.commands.map(c => '`' + c + '`').join(', ') : 'none declared or detected; choose the tests, type check or build that cover the claims'}.` : '';
+    const checks = role === 'verify' ? `\n\nRepository checks: ${managed.checks.commands.length ? managed.checks.commands.map(c => '`' + c + '`').join(', ') : 'none declared or detected; choose the tests, type check or build that cover the claims'}.${managed.run?.fullAsked || managed.run?.scopeChoice === 'full' ? '' : ' Run only the tests that cover the claims: the member decides about a whole-suite run.'}` : '';
     // One helper session answers the brief (with one part of the patch for a
     // review in parts); its reply and tokens. A helper runs at its role's
     // level from Studio (fixed by the Harness, or its main agent's).

package/packages/piagent-core/managed/repository-checks.mjs

@@ -0,0 +1,80 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { discoverDeliveryContext } from './delivery-context.mjs';
+
+// Checks come from the repository: a "## Checks" section in AGENTS.md (code
+// block lines or `command` bullets), else what its manifests imply.
+const HEADING = /^#{1,6}\s+(checks?|verification|kiểm tra)\s*$/i;
+export function declaredChecks(agentsFiles = []) {
+  const out = [];
+  for (const file of agentsFiles) {
+    let inside = false, fence = false;
+    for (const line of String(file.content ?? '').split('\n')) {
+      if (!fence && /^#{1,6}\s/.test(line)) { inside = HEADING.test(line.trim()); continue; }
+      if (!inside) continue;
+      if (/^\s*(```|~~~)/.test(line)) { fence = !fence; continue; }
+      const command = (fence ? line : line.match(/^\s*[-*]\s+`([^`]+)`/)?.[1] ?? '').trim();
+      if (command && !command.startsWith('#') && command.length <= 200 && !out.includes(command) && out.length < 10) out.push(command);
+    }
+  }
+  return out;
+}
+export function detectedChecks(dir) {
+  const has = name => { try { const s = fs.lstatSync(path.join(dir, name)); return s.isFile() && s.size <= 1024 * 1024; } catch { return false; } };
+  const out = [];
+  if (has('package.json')) {
+    try {
+      const scripts = JSON.parse(fs.readFileSync(path.join(dir, 'package.json'), 'utf8')).scripts ?? {};
+      const runner = has('pnpm-lock.yaml') ? 'pnpm' : has('yarn.lock') ? 'yarn' : has('bun.lock') || has('bun.lockb') ? 'bun' : 'npm';
+      for (const name of ['typecheck', 'type-check', 'lint', 'test', 'test:unit', 'test:integration', 'test:api', 'test:contract', 'test:e2e']) if (typeof scripts[name] === 'string') out.push(name === 'test' && runner === 'npm' ? 'npm test' : `${runner} run ${name}`);
+    } catch { /* not JSON: nothing implied */ }
+  }
+  if (has('go.mod')) out.push('go vet ./...', 'go test ./...');
+  if (has('Package.swift')) out.push('swift build', 'swift test');
+  if (has('Cargo.toml')) out.push('cargo check', 'cargo test');
+  if (has('pyproject.toml') || has('pytest.ini')) out.push(has('uv.lock') ? 'uv run pytest' : 'pytest');
+  if (has('pom.xml')) out.push(has('mvnw') ? './mvnw verify' : 'mvn verify');
+  if (has('build.gradle') || has('build.gradle.kts')) out.push(has('gradlew') ? './gradlew test' : 'gradle test');
+  return out.slice(0, 16);
+}
+export function repositoryChecks(agentsFiles, cwd, top = cwd) {
+  const declared = declaredChecks(agentsFiles);
+  if (declared.length) return { source: 'agents', commands: declared };
+  const detected = detectedChecks(cwd);
+  // Include package/repository-local checks even when the workspace root has a
+  // lint command. These are candidates, not a request to test unrelated repos.
+  const quote = value => "'" + value.replaceAll("'", "'\\''") + "'";
+  const nested = discoverDeliveryContext(cwd).units.filter(unit => unit.path !== '.').flatMap(unit =>
+    detectedChecks(path.join(cwd, unit.path)).map(command => `cd ${quote(unit.path)} && ${command}`));
+  const commands = [...new Set([...detected, ...nested])].slice(0, 64);
+  return { source: 'detected', commands: commands.length || cwd === top ? commands : detectedChecks(top) };
+}
+// A command that verifies code: a declared check, or a known test, type,
+// lint or build runner. Text tools that merely mention one do not count.
+const RUNNER = /\b(npm|pnpm|yarn|bun)\s+(run\s+)?(test|lint|typecheck|type-check|check|build|verify)\b|\bnode\s+--test\b|\b(tsc|vitest|jest|eslint|biome|ruff|mypy|pyright|pytest|rspec|phpunit)\b|\bplaywright\s+test\b|\bpython3?\s+-m\s+(pytest|unittest|mypy)\b|\bgo\s+(test|vet|build)\b|\bcargo\s+(test|check|clippy|build)\b|\bswift\s+(test|build)\b|\bxcodebuild\b.*\b(test|build)\b|\bmake\s+(test|check|lint)\b|\b(gradle|gradlew|mvn|mvnw)\b.*\b(test|check|verify|compile|package|build)\b|\bdotnet\s+(test|build)\b|\bdeno\s+(test|check|lint)\b/;
+// Files no check covers: documentation, pictures and documents,
+// and Spec Kit's .specify/ state. A turn that changed only these changed no
+// code: no check is required of it (one is still reported if it ran).
+const NON_CODE = /\.(md|mdx|markdown|rst|adoc|asciidoc|org|png|jpe?g|gif|webp|bmp|ico|pdf|docx?|xlsx?|pptx?|odt|ods|odp|rtf)$/i;
+export function nonCodePath(file) {
+  const name = String(file ?? '').replaceAll('\\', '/');
+  return !!name && (NON_CODE.test(name) || /(^|\/)\.specify\//.test(name) || /(^|\/)(LICENSE|NOTICE|AUTHORS|CODEOWNERS)$/.test(name));
+}
+export const onlyNonCode = paths => { const list = [...(paths ?? [])]; return list.length > 0 && list.every(nonCodePath); };
+
+// A command that only reads: each part starts with a reading tool and nothing
+// is written to a file. Anything else may change files. Git may name the
+// repository first (git -C <folder>): a workspace folder holding several
+// repositories is read that way.
+const GIT_READ = String.raw`git(\s+(-C\s+('[^']*'|"[^"]*"|\S+)|-c\s+\S+|--no-pager))*\s+(status|diff|log|show|branch|ls-files|rev-parse|rev-list|blame|describe|shortlog|cat-file|for-each-ref|reflog(?!\s+(expire|delete))|remote(\s+(-v|--verbose|show|get-url)\b|$))`;
+const READER = new RegExp(String.raw`^(ls|cat|head|tail|wc|grep|egrep|rg|find|fd|sed|awk|cut|sort|uniq|tr|echo|printf|pwd|which|stat|file|du|df|tree|jq|diff|cmp|basename|dirname|realpath|date|true|cd|${GIT_READ})(\b|$)`);
+export function isReadOnlyCommand(command) {
+  const text = String(command ?? '').trim();
+  if (!text || />(?!>|\s*&\d|\s*\/dev\/null)|\btee\b|\bsed\s+(-[a-zA-Z]*i|--in-place)|\s-(delete|exec|execdir|fprint|ok)\b|\bxargs\b|\$\(|`/.test(text)) return false;
+  return text.split(/&&|\|\||;|\||\n/).every(part => !part.trim() || READER.test(part.trim()));
+}
+export function isCheckCommand(command, declared = []) {
+  const text = String(command ?? '').replace(/\s+/g, ' ').trim();
+  if (!text || /^(echo|printf|grep|rg|cat|sed|awk|head|tail|less|git|ls|find)\b/.test(text)) return false;
+  return declared.some(d => text.includes(d)) || RUNNER.test(text);
+}

package/packages/piagent-core/managed/review-snapshot-request.mjs

@@ -1,6 +1,8 @@
 import { fileURLToPath } from 'node:url';
 
 const worker = fileURLToPath(new URL('./review-snapshot-worker.mjs', import.meta.url));
+// The session's own copy of the worker (runtime-snapshot.mjs).
+const workerOf = boundary => boundary.runtimeFile?.('review-snapshot-worker.mjs') ?? worker;
 const requests = new WeakSet();
 const quote = value => "'" + value.replaceAll("'", "'\"'\"'") + "'";
 
@@ -9,7 +11,7 @@ const quote = value => "'" + value.replaceAll("'", "'\"'\"'") + "'";
 export function invokeReviewSnapshot(boundary, mode, extra = []) {
   if (!['head', 'heads', 'since', 'branch-base', 'digest', 'file', 'files'].includes(mode)
     || !Array.isArray(extra) || extra.some(value => typeof value !== 'string')) throw Error('review-request-invalid');
-  const args = Object.freeze({ command: [process.execPath, worker, mode, ...extra].map(quote).join(' '), timeout: 60 });
+  const args = Object.freeze({ command: [process.execPath, workerOf(boundary), mode, ...extra].map(quote).join(' '), timeout: 60 });
   requests.add(args);
   return boundary.invoke('bash', args);
 }

package/packages/piagent-core/managed/runtime-snapshot.mjs

@@ -0,0 +1,63 @@
+// The code a company session's sandbox runs, kept apart from the install.
+//
+// A session pins the hash of its workers and refuses every tool when one
+// changes. piagent-update rewrites the install in place, so a task running
+// across an update lost all its tools (managed-runtime-changed) while a helper
+// started afterwards worked. A session now runs its workers from a private
+// copy named by their content: an update leaves it alone, the pins keep
+// guarding it, and the next process takes a copy of the new release.
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { createHash, randomUUID } from 'node:crypto';
+
+const KEEP_MS = 30 * 24 * 60 * 60 * 1000;
+const hash = file => createHash('sha256').update(fs.readFileSync(file)).digest('hex');
+const cacheRoot = home => path.join(home, process.platform === 'darwin' ? 'Library/Caches/Piagent/runtime' : '.cache/piagent/runtime');
+
+function runtimeFiles(source) {
+  const files = fs.readdirSync(source, { withFileTypes: true }).filter(entry => entry.isFile() && entry.name.endsWith('.mjs')).map(entry => entry.name);
+  const walk = relative => {
+    let entries;
+    try { entries = fs.readdirSync(path.join(source, relative), { withFileTypes: true }); } catch { return; }
+    for (const entry of entries) {
+      const name = path.join(relative, entry.name);
+      if (entry.isDirectory()) walk(name); else if (entry.isFile()) files.push(name);
+    }
+  };
+  walk(path.join('dist', 'workspace'));
+  return files.sort();
+}
+
+const intact = (directory, listing) => listing.every(([file, digest]) => { try { return hash(path.join(directory, file)) === digest; } catch { return false; } });
+
+// The copy of `source` under the member's cache folder; an old one is removed
+// once no process has asked for it for a month.
+export function snapshotRuntime(source, { home = os.homedir(), now = Date.now() } = {}) {
+  const listing = runtimeFiles(source).map(file => [file, hash(path.join(source, file))]);
+  const id = createHash('sha256').update(JSON.stringify(listing)).digest('hex').slice(0, 32);
+  const root = cacheRoot(home), target = path.join(root, id);
+  fs.mkdirSync(root, { recursive: true, mode: 0o700 });
+  if (!intact(target, listing)) {
+    const building = path.join(root, `.${id}.${randomUUID()}`);
+    try {
+      for (const [file] of listing) {
+        fs.mkdirSync(path.dirname(path.join(building, file)), { recursive: true, mode: 0o700 });
+        fs.copyFileSync(path.join(source, file), path.join(building, file));
+        fs.chmodSync(path.join(building, file), 0o400);
+      }
+      // Without it the workspace worker's .js files would load as CommonJS.
+      fs.writeFileSync(path.join(building, 'package.json'), '{"type":"module"}\n', { mode: 0o400 });
+      fs.rmSync(target, { recursive: true, force: true });
+      // Another session may have built the same copy meanwhile.
+      try { fs.renameSync(building, target); } catch (error) { if (!intact(target, listing)) throw error; }
+    } finally { fs.rmSync(building, { recursive: true, force: true }); }
+  }
+  fs.utimesSync(target, new Date(now), new Date(now));
+  for (const entry of fs.readdirSync(root, { withFileTypes: true })) {
+    if (!entry.isDirectory() || entry.name === id) continue;
+    const old = path.join(root, entry.name);
+    try { if (now - fs.statSync(old).mtimeMs > KEEP_MS) fs.rmSync(old, { recursive: true, force: true }); } catch { /* another session removes it */ }
+  }
+  return fs.realpathSync(target);
+}

package/packages/piagent-core/managed/terminal-boundary.mjs

@@ -9,18 +9,19 @@ import { companyTerminalRuntime } from './terminal-runtime.mjs';
 import { terminalChannel } from './terminal-channel.mjs';
 import { SEATBELT_TERMINAL_RULES, seatbeltTerminal } from './terminal-seatbelt.mjs';
 
-const worker = fileURLToPath(new URL('./terminal-worker.mjs', import.meta.url));
+const installedWorker = fileURLToPath(new URL('./terminal-worker.mjs', import.meta.url));
 const hash = file => createHash('sha256').update(fs.readFileSync(file)).digest('hex');
 const inside = (file, root) => file === root || file.startsWith(root + path.sep);
 const dimensions = ({ cols, rows }) => Number.isInteger(cols) && cols >= 2 && cols <= 500 && Number.isInteger(rows) && rows >= 1 && rows <= 200;
 
 export class BoundaryTerminals {
-  #boundary; #runtime; #workerDigest; #entries = new Map(); #closed = false;
+  #boundary; #runtime; #worker; #workerDigest; #entries = new Map(); #closed = false;
   reasonCode = null;
   constructor(boundary) {
     this.#boundary = boundary;
     try {
       this.#runtime = companyTerminalRuntime();
+      const worker = this.#worker = boundary.runtimeFile?.('terminal-worker.mjs') ?? installedWorker; // the session's own copy (runtime-snapshot.mjs)
       if (inside(this.#runtime.root, boundary.cwd) || inside(worker, boundary.cwd)) throw Error('managed-terminal-runtime-overlap');
       this.#workerDigest = hash(worker);
     } catch (error) { this.reasonCode = /^managed-terminal-/.test(error.message) ? error.message : 'managed-terminal-runtime-invalid'; }
@@ -33,6 +34,7 @@ export class BoundaryTerminals {
     if (!dimensions(size)) throw Error('managed-terminal-invalid-size');
     if (this.#entries.size >= 4) throw Error('managed-terminal-limit');
     this.#runtime.assertCurrent();
+    const worker = this.#worker;
     if (hash(worker) !== this.#workerDigest) throw Error('managed-terminal-runtime-changed');
     for (const [file, digest] of boundary.pins) if (hash(file) !== digest) throw Error('managed-runtime-changed');
     const temporary = fs.realpathSync(fs.mkdtempSync(path.join(os.tmpdir(), 'piagent-terminal-')));

package/packages/piagent-core/managed/tool-boundary.mjs

@@ -3,7 +3,7 @@ import { SessionMutationObservations } from "./session-mutation-observations.mjs
 import { BoundaryTerminals } from './terminal-boundary.mjs';
 import { ToolFreshness } from './tool-freshness.mjs';
 import { BoundaryQueue } from './boundary-queue.mjs';
-import { workspaceWorkerPins, verifyWorkspaceWorker } from './workspace-worker-pins.mjs';
+import { workspaceWorkerPins, verifyWorkspaceWorker } from './workspace-worker-pins.mjs'; import { snapshotRuntime } from './runtime-snapshot.mjs';
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
@@ -202,7 +202,7 @@ export class ManagedToolBoundary {
   get sourceControlRevision() { return this.#sourceRequests.revision; }
   source(request, binding) { return this.invoke("workspace", this.#sourceRequests.request(request, binding)); }
   #mutationObservations = new SessionMutationObservations();
-  mutationObservation(file) { return this.#mutationObservations.get(file); }
+  mutationObservation(file) { return this.#mutationObservations.get(file); } runtimeFile(name) { return path.join(this.runtimeRoot, name); }
   #children = new Set();
   #closed = false;
   // readOnly: the project cannot be written. commands: bash is offered all
@@ -214,16 +214,16 @@ export class ManagedToolBoundary {
     if (process.platform !== 'darwin' && !(this.linux && BWRAP)) throw new Error('managed-sandbox-unavailable');
     this.cwd = fs.realpathSync(cwd); this.sdkRoot = fs.realpathSync(sdkRoot);
     this.node = fs.realpathSync(node);
-    this.runtimeRoot = fs.realpathSync(path.dirname(workerPath));
+    this.sourceRoot = fs.realpathSync(path.dirname(workerPath)); this.runtimeRoot = snapshotRuntime(this.sourceRoot, { home: home ?? os.homedir() }); this.workerPath = this.runtimeFile('tool-worker.mjs'); // an update leaves a running session's workers alone
     this.workspacePins = workspaceWorkerPins(this.runtimeRoot);
     this.sdkPath = path.join(this.sdkRoot, 'dist/index.js');
     this.git = managedGit();
     if (JSON.parse(fs.readFileSync(path.join(this.sdkRoot, 'package.json'), 'utf8')).version !== PI_HOST_VERSION) throw new Error('managed-sdk-version-unqualified');
     const workerModules = ['review-snapshot-worker.mjs', 'tool-freshness.mjs', 'search-fallback.mjs', 'sandbox-diagnostic.mjs', 'ts-diagnostics-server.mjs', 'workspace-worker-pins.mjs'].map(name => path.join(this.runtimeRoot, name));
-    this.pins = new Map([this.node, this.git, workerPath, ...workerModules, this.sdkPath].map(file => [file, hash(file)]));
+    this.pins = new Map([this.node, this.git, this.workerPath, ...workerModules, this.sdkPath].map(file => [file, hash(file)]));
     const userHome = fs.realpathSync(home ?? os.homedir());
-    if ([userHome, '/', this.sdkRoot, this.runtimeRoot].includes(this.cwd)
-      || [this.sdkRoot,this.runtimeRoot,this.node,this.git,...['/opt/homebrew/bin/gh','/usr/local/bin/gh'].filter(p=>fs.existsSync(p)).map(p=>fs.realpathSync(p))].some(p=>inside(p,this.cwd))) throw new Error('managed-project-overlaps-runtime');
+    if ([userHome, '/', this.sdkRoot, this.runtimeRoot, this.sourceRoot].includes(this.cwd)
+      || [this.sdkRoot,this.runtimeRoot,this.sourceRoot,this.node,this.git,...['/opt/homebrew/bin/gh','/usr/local/bin/gh'].filter(p=>fs.existsSync(p)).map(p=>fs.realpathSync(p))].some(p=>inside(p,this.cwd))) throw new Error('managed-project-overlaps-runtime');
     this.temporary = fs.realpathSync(fs.mkdtempSync(path.join(os.tmpdir(), 'piagent-tools-')));
     fs.chmodSync(this.temporary, 0o700);
     this.home = path.join(this.temporary, 'home'); fs.mkdirSync(this.home, { mode: 0o700 });
@@ -371,7 +371,7 @@ export class ManagedToolBoundary {
       guard?.();
       const [sandbox, sandboxArgs] = this.linux ? [BWRAP, this.bubblewrap(network, docker)]
         : ['/usr/bin/sandbox-exec', ['-p', docker ? this.dockerProfile : network ? this.networkProfile : isolated ? this.isolatedProfile : this.profile]];
-      const child = spawn(sandbox, [...sandboxArgs, this.node, workerPath, this.sdkPath, this.cwd], {
+      const child = spawn(sandbox, [...sandboxArgs, this.node, this.workerPath, this.sdkPath, this.cwd], {
         cwd: this.cwd, detached: true, stdio: ['pipe', 'pipe', 'pipe'],
         env: docker ? this.environment.docker : network ? this.environment.network : this.environment.offline,
       });

package/packages/piagent-core/managed/ts-diagnostics.mjs

@@ -21,7 +21,7 @@ export class TsDiagnostics {
     if (this.#child) return this.#child;
     if (this.#starts >= RESTARTS) { this.#off = true; return null; }
     this.#starts += 1;
-    const { child } = await this.boundary.spawnSandboxed([this.boundary.node, SERVER, this.boundary.cwd], randomUUID(), { stdin: 'pipe' });
+    const { child } = await this.boundary.spawnSandboxed([this.boundary.node, this.boundary.runtimeFile?.('ts-diagnostics-server.mjs') ?? SERVER, this.boundary.cwd], randomUUID(), { stdin: 'pipe' });
     child.stdout.on('data', chunk => {
       this.#buffer += chunk.toString('utf8');
       for (let at; (at = this.#buffer.indexOf('\n')) >= 0;) {