@piagent/platform 1.8.0 → 1.9.0

package/scripts/build-docs-site.mjs

@@ -55,19 +55,25 @@ const NAV = [
         href: "/",
         nav: "Overview",
         title: "Pi Agent Platform",
-        lead: "Nền tảng dùng lại cho nhiều dự án: cài đặt, profile, quyền chạy, MCP, bảo mật và workflow trong một tài liệu."
+        lead: "Coding agent cho cả team: một dashboard cho Terminal và trình duyệt, model cá nhân hoặc của công ty, guard kiểm tra mọi tool call."
+      },
+      {
+        slug: "ecosystem",
+        nav: "Hệ sinh thái",
+        title: "Piagent, Agent Watch và Agent Studio",
+        lead: "Một dashboard, hai cách dùng model: tài khoản của bạn, hoặc model của công ty qua Agent Watch và Agent Studio, với Harness tự kiểm tra từng lượt."
       },
       {
         slug: "quickstart",
         nav: "Quickstart",
         title: "Step by step cho thành viên mới",
-        lead: "Hai lệnh để cài, rồi mở repo, chọn profile, bật quyền phù hợp, chạy task, và verify bằng bằng chứng thật trước khi handoff."
+        lead: "Hai lệnh để cài, mở repo, chọn profile và quyền, rồi giao việc bằng lời thường; guard kiểm tra từng tool call."
       },
       {
         slug: "whats-new",
         nav: "Có gì mới",
-        title: "Luồng task an toàn hơn, ít thao tác tay hơn",
-        lead: "Product stabilization bổ sung runtime truth, trajectory, recovery, helper policy, activity inspector và completion receipt fail-closed mà không phá workflow cũ."
+        title: "Bản 1.9.0: nói việc bằng lời, Harness của team kiểm tra",
+        lead: "Bỏ task contract và lệnh workflow. Chế độ công ty tự yêu cầu check và review; nút Dừng, lệnh có mạng theo lần duyệt và thẻ duyệt dễ đọc hơn."
       },
       {
         slug: "scope",
@@ -102,7 +108,7 @@ const NAV = [
         slug: "workflows",
         nav: "Workflows",
         title: "Workflow thay đổi thế nào sau update",
-        lead: "Workflow launcher cũ vẫn giữ nguyên. Runtime lifecycle và live inspector chạy tự động; command mới chỉ giúp quan sát preflight, diff, tiến độ, receipt, hiệu suất và orchestration policy."
+        lead: "Từ bản 1.9.0 không còn launcher workflow: nói việc cần làm bằng lời thường. Các command xem thêm chỉ để quan sát và không bao giờ mở lượt model."
       }
     ]
   },
@@ -142,7 +148,7 @@ const NAV = [
         slug: "security",
         nav: "Security model",
         title: "Policy enforcement layer, không phải OS sandbox",
-        lead: "Platform ưu tiên fail-closed trong bề mặt tool được kiểm soát: khi lock sai, profile sai hoặc bằng chứng thiếu thì chặn, không đoán."
+        lead: "Platform ưu tiên fail-closed trong bề mặt tool được kiểm soát: khi lock sai, profile sai hoặc quyền không đủ thì chặn, không đoán."
       },
       {
         slug: "architecture",
@@ -182,17 +188,22 @@ const EN_PAGE_COPY = {
   index: {
     nav: "Overview",
     title: "Pi Agent Platform",
-    lead: "Reusable infrastructure for multiple projects: installation, profiles, permissions, MCP, security, and workflows in one place."
+    lead: "A coding agent for the whole team: one dashboard for Terminal and the browser, personal or company models, and a guard that checks every tool call."
+  },
+  ecosystem: {
+    nav: "Ecosystem",
+    title: "Piagent, Agent Watch and Agent Studio",
+    lead: "One dashboard, two ways to use models: your own account, or the company's models through Agent Watch and Agent Studio, with a Harness that checks every turn."
   },
   quickstart: {
     nav: "Quickstart",
     title: "Step by step for new team members",
-    lead: "Install with two commands, open a repository, select its profile and permission mode, run a task, and verify real evidence before handoff."
+    lead: "Install with two commands, open a repository, choose its profile and permissions, then ask in plain language; the guard checks every tool call."
   },
   "whats-new": {
     nav: "What’s new",
-    title: "Safer task flow with less manual coordination",
-    lead: "Product stabilization adds runtime truth, trajectories, recovery, helper policy, an activity inspector, and fail-closed completion receipts without breaking existing workflows."
+    title: "1.9.0: ask in plain language, the team's Harness checks",
+    lead: "The task contract and workflow commands are gone. Company mode asks for checks and a review on its own; Stop, network commands on approval and clearer approval cards."
   },
   scope: {
     nav: "Platform scope",
@@ -217,7 +228,7 @@ const EN_PAGE_COPY = {
   workflows: {
     nav: "Workflows",
     title: "How workflows change after the update",
-    lead: "Existing workflow launchers stay unchanged. The runtime lifecycle and live inspector update automatically, while commands expose preflight, diffs, progress, receipts, efficiency, and orchestration policy."
+    lead: "Since 1.9.0 there are no workflow launchers: say what you need in plain language. The optional inspection commands only observe and never start a model turn."
   },
   mcp: {
     nav: "MCP overview",
@@ -242,7 +253,7 @@ const EN_PAGE_COPY = {
   security: {
     nav: "Security model",
     title: "Policy enforcement, not an OS sandbox",
-    lead: "Controlled tool surfaces fail closed when profiles, integrity locks, permissions, or verification evidence are invalid."
+    lead: "Controlled tool surfaces fail closed when profiles, integrity locks or permissions are invalid."
   },
   architecture: {
     nav: "Architecture",

package/scripts/check-public-wording.mjs

@@ -7,10 +7,10 @@ const root = path.resolve(import.meta.dirname, "..");
 const surfaces = ["README.md", "docs", "docs-site/content", "scripts/build-docs-site.mjs",
   "packages/piagent-core/README.md", "packages/piagent-core/prompts", "packages/piagent-core/mcp",
   "packages/piagent-core/extensions", "packages/piagent-core/runtime", "templates/project/AGENTS.md"];
-// Explicit reviewed research records, never a marker supplied by arbitrary docs.
-const researchRecords = new Set(["docs/piagent-core-improvement-plan.md",
-  "docs/piagent-core-reasoning-research-2026-09-06.md", "docs/piagent-core-research-sources-2026-09-06.json"]);
 const sourceNames = ["Codex CLI", "Claude CLI", "Claude Code"];
+// Other agent products and projects. Public text describes a technique in its
+// own words and names none of them; whole words only ("declined" is not one).
+const otherAgents = /\b(?:Aider|SWE-agent|OpenHands|Oh My Pi|oh-my-pi|OpenClaw|OpenClaude|LangGraph|LangChain|Windsurf|Cline|Roo Code|Kilo Code|autoresearch)\b/g;
 const prohibited = ["platform-migration", "codex-migration", "codex-parity", "benchmark-parity",
   "harness-migration", "agent-stuff", "mitsuhiko", "claude mcp", "codex mcp",
   "Codex-inspired", "Codex-grade", "Pi vs Codex", "vs Claude", "reference repo",
@@ -18,9 +18,8 @@ const prohibited = ["platform-migration", "codex-migration", "codex-parity", "be
 const escaped = value => value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 
 export function publicWordingViolations(file, text) {
-  const terms = researchRecords.has(file) ? prohibited : [...prohibited, ...sourceNames];
-  const pattern = new RegExp(terms.map(escaped).join("|"), "gi");
-  return [...text.matchAll(pattern)].map(match => ({ file,
+  const pattern = new RegExp([...prohibited, ...sourceNames].map(escaped).join("|"), "gi");
+  return [...text.matchAll(pattern), ...text.matchAll(otherAgents)].sort((a, b) => a.index - b.index).map(match => ({ file,
     line: text.slice(0, match.index).split("\n").length, keyword: match[0] }));
 }
 

package/scripts/check-runtime-advisories.mjs

@@ -4,9 +4,11 @@
 //
 // The rule is "no moderate, high, or critical advisory in the pinned Pi host
 // and add-on tree".
-// There is deliberately no advisory allowlist. A supported host release must
-// audit clean at these severities; changing that policy requires changing this
-// gate and its tests explicitly.
+// The only exceptions are listed in runtime-advisory-exceptions.json, each an
+// owner decision for one advisory at one package path in the tree, with a day
+// it stops applying. The same advisory anywhere else, any other advisory, and
+// an exception past its day all block. Its tests check every entry.
+import fs from "node:fs";
 
 function readStdin() {
   return new Promise((resolve, reject) => {
@@ -43,7 +45,11 @@ if (report.auditReportVersion !== 2) {
   process.exit(1);
 }
 
-const blocking = [];
+const { exceptions } = JSON.parse(fs.readFileSync(new URL("./runtime-advisory-exceptions.json", import.meta.url), "utf8"));
+// A test seam for the day exceptions are judged on; the gate uses today (UTC).
+const today = process.env.PIAGENT_ADVISORY_TODAY ?? new Date().toISOString().slice(0, 10);
+
+const blocking = [], accepted = [];
 for (const [name, vulnerability] of Object.entries(report.vulnerabilities ?? {})) {
   if (!["moderate", "high", "critical"].includes(vulnerability.severity)) continue;
   const ids = advisoryIdsFor(vulnerability);
@@ -51,13 +57,22 @@ for (const [name, vulnerability] of Object.entries(report.vulnerabilities ?? {})
     blocking.push({ name, severity: vulnerability.severity, id: "(no advisory id)" });
     continue;
   }
+  const nodes = Array.isArray(vulnerability.nodes) ? vulnerability.nodes : [];
   for (const id of ids) {
-    blocking.push({ name, severity: vulnerability.severity, id });
+    const exception = exceptions.find((entry) => entry.id === id && entry.package === name
+      && nodes.length > 0 && nodes.every((node) => node === entry.node));
+    if (exception && today <= exception.until) accepted.push({ name, severity: vulnerability.severity, id, exception });
+    else blocking.push({ name, severity: vulnerability.severity, id, expired: exception?.until });
   }
 }
 
+for (const entry of accepted) {
+  console.log(`ACCEPTED: ${entry.severity} advisory ${entry.id} in ${entry.name} at ${entry.exception.node} until ${entry.exception.until} (owner decision ${entry.exception.decided})`);
+}
+
 const failures = blocking.map(
   (entry) => `${entry.severity} advisory ${entry.id} in ${entry.name} blocks the supported runtime`
+    + (entry.expired ? ` (its exception ended ${entry.expired})` : "")
 );
 
 if (failures.length > 0) {
@@ -67,4 +82,6 @@ if (failures.length > 0) {
 }
 
 const counts = report.metadata?.vulnerabilities ?? {};
-console.log(`PASS: no moderate, high, or critical advisory (${counts.moderate ?? 0} moderate, ${counts.high ?? 0} high, ${counts.critical ?? 0} critical)`);
+console.log(accepted.length
+  ? `PASS: no unaccepted moderate, high, or critical advisory (${accepted.length} accepted, each until its end day)`
+  : `PASS: no moderate, high, or critical advisory (${counts.moderate ?? 0} moderate, ${counts.high ?? 0} high, ${counts.critical ?? 0} critical)`);

package/scripts/claude-model-additions.mjs

@@ -0,0 +1,33 @@
+import fs from "node:fs";
+import path from "node:path";
+
+const additions = JSON.parse(fs.readFileSync(new URL("../catalog/claude-model-additions.json", import.meta.url), "utf8"));
+const object = value => value !== null && typeof value === "object" && !Array.isArray(value);
+
+// Explicit model-scope setup only. Keep existing models, endpoints and auth;
+// this metadata is not evidence that an account has access to a model.
+export function prepareClaudeModelAdditions(file) {
+  if (fs.existsSync(file) && (!fs.lstatSync(file).isFile() || fs.lstatSync(file).isSymbolicLink())) throw new Error("Unsafe model configuration path");
+  const before = fs.existsSync(file) ? fs.readFileSync(file, "utf8") : null;
+  const data = before === null ? {} : JSON.parse(before);
+  if (!object(data) || (data.providers !== undefined && !object(data.providers))) throw new Error("Unsupported model configuration");
+  data.providers ??= {};
+  const provider = data.providers.anthropic ?? {};
+  if (!object(provider) || (provider.models !== undefined && !Array.isArray(provider.models))) throw new Error("Unsupported Anthropic model configuration");
+  // A custom endpoint is controlled by its operator; Studio supplies its own catalog.
+  if (provider.baseUrl && provider.baseUrl !== "https://api.anthropic.com") return null;
+  const models = provider.models ?? [];
+  const missing = additions.models.filter(model => !models.some(existing => existing.id === model.id));
+  if (missing.length === 0) return null;
+  data.providers.anthropic = { ...provider, models: [...models, ...missing] };
+  return { apply() {
+    const current = fs.existsSync(file) ? fs.readFileSync(file, "utf8") : null;
+    if (current !== before) throw new Error("Model configuration changed during setup");
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    const temporary = `${file}.piagent-${process.pid}`;
+    try {
+      fs.writeFileSync(temporary, `${JSON.stringify(data, null, 2)}\n`, { mode: 0o600, flag: "wx" });
+      fs.renameSync(temporary, file);
+    } finally { if (fs.existsSync(temporary)) fs.unlinkSync(temporary); }
+  } };
+}

package/scripts/configure-model-scope.sh

@@ -12,6 +12,8 @@ Options:
                                      Default model (default: openai-codex/gpt-6-sol:high)
   --settings <path>                  Pi settings file (default: ~/.pi/agent/settings.json)
   --dry-run                          Print resulting settings JSON without writing
+  --prune                            Only remove enabledModels patterns that match no model
+                                     Pi knows (Pi warns about each on every start); keep the rest
   -h, --help
 
 Purpose:
@@ -33,6 +35,7 @@ PRESET="full"
 DEFAULT_MODEL="openai-codex/gpt-6-sol:high"
 SETTINGS_PATH="${PI_CODING_AGENT_DIR:-"${HOME}/.pi/agent"}/settings.json"
 DRY_RUN=false
+PRUNE=false
 
 # A flag whose value is missing swallows the next flag instead. `--settings
 # --dry-run` used to set the settings path to the string "--dry-run", leave
@@ -68,6 +71,10 @@ while [[ $# -gt 0 ]]; do
       DRY_RUN=true
       shift
       ;;
+    --prune)
+      PRUNE=true
+      shift
+      ;;
     -h|--help)
       usage
       exit 0
@@ -80,6 +87,13 @@ while [[ $# -gt 0 ]]; do
   esac
 done
 
+if [[ "$PRUNE" == true ]]; then
+  if [[ "$DRY_RUN" == true ]]; then
+    exec node "$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/model-scope-prune.mjs" --settings "$SETTINGS_PATH"
+  fi
+  exec node "$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/model-scope-prune.mjs" --settings "$SETTINGS_PATH" --fix
+fi
+
 case "$PRESET" in
   full|codex|claude) ;;
   *)
@@ -88,17 +102,17 @@ case "$PRESET" in
     ;;
 esac
 
-node --input-type=module - "$SETTINGS_PATH" "$PRESET" "$DEFAULT_MODEL" "$DRY_RUN" <<'NODE'
+PIAGENT_SCOPE_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)" node --input-type=module - "$SETTINGS_PATH" "$PRESET" "$DEFAULT_MODEL" "$DRY_RUN" <<'NODE'
 import fs from "node:fs";
 import path from "node:path";
+import { pathToFileURL } from "node:url";
+const { prepareClaudeModelAdditions } = await import(pathToFileURL(process.env.PIAGENT_SCOPE_ROOT + "/scripts/claude-model-additions.mjs"));
 
 const [settingsPath, preset, defaultModelInput, dryRunRaw] = process.argv.slice(2);
 const dryRun = dryRunRaw === "true";
 
 const codexModels = [
   "openai-codex/gpt-5.3-codex-spark:minimal",
-  "openai-codex/gpt-5.4-mini:minimal",
-  "openai-codex/gpt-5.4:xhigh",
   "openai-codex/gpt-5.5:high",
   "openai-codex/gpt-5.6-luna:medium",
   "openai-codex/gpt-5.6-terra:high",
@@ -115,6 +129,8 @@ const claudeModels = [
   "anthropic/claude-sonnet-4-5:high",
   "anthropic/claude-sonnet-4-6:max",
   "anthropic/claude-sonnet-5:xhigh",
+  "anthropic/claude-sonnet-5-5:high",
+  "anthropic/claude-opus-5-5:high",
   "anthropic/claude-opus-4-5:xhigh",
   "anthropic/claude-opus-4-6:max",
   "anthropic/claude-opus-4-7:xhigh",
@@ -141,21 +157,29 @@ function parseDefaultModel(input) {
 }
 
 const parsedDefault = parseDefaultModel(defaultModelInput);
-const settings = fs.existsSync(settingsPath)
-  ? JSON.parse(fs.readFileSync(settingsPath, "utf8"))
-  : {};
+const settingsBefore = fs.existsSync(settingsPath) ? fs.readFileSync(settingsPath, "utf8") : null;
+const settings = settingsBefore === null ? {} : JSON.parse(settingsBefore);
 
 settings.defaultProvider = parsedDefault.provider;
 settings.defaultModel = parsedDefault.model;
 settings.defaultThinkingLevel = parsedDefault.thinking;
 settings.enabledModels = enabledModels;
 
+const catalogEdit = preset === "codex" ? null : prepareClaudeModelAdditions(path.join(path.dirname(settingsPath), "models.json"));
 const output = `${JSON.stringify(settings, null, 2)}\n`;
 if (dryRun) {
   process.stdout.write(output);
 } else {
   fs.mkdirSync(path.dirname(settingsPath), { recursive: true });
   fs.writeFileSync(settingsPath, output);
+  try { if (catalogEdit) catalogEdit.apply(); }
+  catch (error) {
+    if (fs.readFileSync(settingsPath, "utf8") === output) {
+      if (settingsBefore === null) fs.unlinkSync(settingsPath);
+      else fs.writeFileSync(settingsPath, settingsBefore);
+    }
+    throw error;
+  }
   console.log(`Configured Pi model scope: ${settingsPath}`);
   console.log(`  preset: ${preset}`);
   console.log(`  default: ${parsedDefault.provider}/${parsedDefault.model}:${parsedDefault.thinking}`);

package/scripts/configure-subagents.sh

@@ -27,7 +27,7 @@ After installing/configuring:
   pi
   /subagents-doctor
   /subagents-models
-  # Piagent stays parent-direct unless runtime evidence proves >=30% net token saving.
+  # Piagent delegates useful bounded read-only work without a token-saving threshold.
 USAGE
 }
 

package/scripts/explain-command.mjs

@@ -67,19 +67,18 @@ function parseArgs(argv) {
 // What the operator should do next. The guard states 74 refusals and only three
 // of them say this, which is why a denial so often ends the conversation.
 const REMEDY = {
-  "protected-path": "Use an approved context projection if one is available. Direct access requires the operator to change the protected-path policy; task scope alone does not override it.",
+  "protected-path": "This path is protected because it can hold credentials. Open it yourself or share the non-secret part; only the operator can change the protected-path policy, and no request or scope overrides it.",
   "protected-glob": "Name the file you mean instead of a pattern; a pattern is refused when any name it can match is protected.",
   "resolved-protected": "The path resolves to a protected file through a link or a parent directory. Use the real path you intend.",
   "unresolved": "Write the path out, or put the expansion in its own argument, so the guard can see what is being opened.",
   "exec-policy": "This is refused by an exec-policy rule, not by a path. Change the command, or ask the operator to run it.",
-  "runtime-required": "Run the command through the current Pi session. Only that runtime owns the Task Contract, scope, permission, lifecycle, approval, and budget facts needed for a final decision."
+  "runtime-required": "Run the command through the current Pi session. Only that runtime owns the permission, approval, and budget facts needed for a final decision."
 };
 
+// Task contracts, task scope and task lifecycle control were retired on
+// 2026-09-30; the live guard no longer applies them.
 const RUNTIME_GATES = [
-  "task-contract",
-  "task-scope",
   "permission-profile",
-  "lifecycle-control",
   "approval-state",
   "context-budget"
 ];
@@ -144,7 +143,7 @@ function explain(command, protectedPaths, policy, cwd) {
     staticDecision,
     reason: staticDecision === "confirm"
       ? `Static preflight requires confirmation (${exec.reasons.join("; ")}), but the live runtime may still block it.`
-      : "Static preflight found no refusal. A final decision requires live session and task state.",
+      : "Static preflight found no refusal. A final decision requires live session state.",
     remainingGates: RUNTIME_GATES,
     steps, exec
   };

package/scripts/model-scope-prune.mjs

@@ -0,0 +1,75 @@
+#!/usr/bin/env node
+// Patterns in Pi's enabledModels that match no model Pi knows. Pi prints
+// "Warning: No models match pattern" for each one on every start, and a model
+// that left the catalog never comes back by itself. Matching uses Pi's own
+// resolver over every model Pi knows (built-in and models.json), signed in or
+// not, so a provider that is only signed out keeps its patterns.
+//
+// Usage: model-scope-prune.mjs [--settings <path>] [--fix] [--json]
+import fs from "node:fs";
+import path from "node:path";
+import { execFileSync } from "node:child_process";
+import { pathToFileURL } from "node:url";
+
+// The Pi install `pi` runs from.
+export function piPackageRoot(environment = process.env) {
+  try {
+    const bin = execFileSync("/usr/bin/which", ["pi"], { encoding: "utf8", env: environment }).trim();
+    let dir = path.dirname(fs.realpathSync(bin));
+    for (let depth = 0; depth < 4; depth += 1, dir = path.dirname(dir)) {
+      const manifest = path.join(dir, "package.json");
+      if (fs.existsSync(manifest) && JSON.parse(fs.readFileSync(manifest, "utf8")).name === "@earendil-works/pi-coding-agent") return dir;
+    }
+  } catch { /* no pi on PATH */ }
+  return null;
+}
+
+// Every model Pi knows, without network or credentials.
+export async function knownModels(piRoot, agentDir) {
+  const { ModelRuntime } = await import(pathToFileURL(path.join(piRoot, "dist/core/model-runtime.js")).href);
+  const { InMemoryCredentialStore } = await import(pathToFileURL(path.join(piRoot, "dist/index.js")).href).catch(() => ({}));
+  const previous = process.env.PI_OFFLINE; process.env.PI_OFFLINE = "1";
+  try {
+    const runtime = await ModelRuntime.create({ refreshOnCreate: false, modelsPath: path.join(agentDir, "models.json"),
+      ...(InMemoryCredentialStore ? { credentials: new InMemoryCredentialStore() } : {}) });
+    return runtime.getProviders().flatMap((provider) => runtime.getModels(provider.id ?? provider));
+  } finally { if (previous === undefined) delete process.env.PI_OFFLINE; else process.env.PI_OFFLINE = previous; }
+}
+
+export async function stalePatterns(patterns, models, piRoot) {
+  const { resolveModelScopeFromModels } = await import(pathToFileURL(path.join(piRoot, "dist/core/model-resolver.js")).href);
+  const { diagnostics } = resolveModelScopeFromModels(patterns, models);
+  return [...new Set(diagnostics.filter((item) => item.code === "no-match").map((item) => item.pattern))];
+}
+
+// Removes only the stale patterns; everything else in the file stays as written.
+export function pruneSettings(settingsPath, stale) {
+  const text = fs.readFileSync(settingsPath, "utf8"), settings = JSON.parse(text);
+  const kept = settings.enabledModels.filter((pattern) => !stale.includes(pattern));
+  const next = `${JSON.stringify({ ...settings, enabledModels: kept }, null, 2)}\n`;
+  const temporary = `${settingsPath}.${process.pid}.tmp`;
+  fs.writeFileSync(temporary, next, { mode: fs.statSync(settingsPath).mode & 0o777 });
+  fs.renameSync(temporary, settingsPath);
+  return kept.length;
+}
+
+if (process.argv[1] && path.resolve(process.argv[1]) === path.resolve(new URL(import.meta.url).pathname)) {
+  const args = process.argv.slice(2), at = args.indexOf("--settings");
+  const agentDir = process.env.PI_CODING_AGENT_DIR || path.join(process.env.HOME ?? "", ".pi", "agent");
+  const settingsPath = at >= 0 && args[at + 1] ? path.resolve(args[at + 1]) : path.join(agentDir, "settings.json");
+  const json = args.includes("--json"), fix = args.includes("--fix");
+  const out = (value, text) => process.stdout.write(json ? `${JSON.stringify(value)}\n` : `${text}\n`);
+  const settings = fs.existsSync(settingsPath) ? JSON.parse(fs.readFileSync(settingsPath, "utf8")) : {};
+  const patterns = Array.isArray(settings.enabledModels) ? settings.enabledModels.filter((item) => typeof item === "string") : [];
+  const piRoot = piPackageRoot();
+  if (!piRoot) { out({ status: "unavailable", reason: "pi-not-found" }, "Pi is not on PATH; nothing checked."); process.exit(0); }
+  if (patterns.length === 0) { out({ status: "ok", stale: [] }, "enabledModels is empty; nothing to prune."); process.exit(0); }
+  const stale = await stalePatterns(patterns, await knownModels(piRoot, path.dirname(settingsPath)), piRoot);
+  if (stale.length === 0) { out({ status: "ok", stale: [] }, `All ${patterns.length} enabledModels patterns match a model Pi knows.`); process.exit(0); }
+  if (!fix) {
+    out({ status: "stale", stale }, `${stale.length} enabledModels pattern(s) match no model Pi knows:\n${stale.map((item) => `  - ${item}`).join("\n")}\nRun with --fix to remove only these.`);
+    process.exit(0);
+  }
+  const kept = pruneSettings(settingsPath, stale);
+  out({ status: "pruned", stale, kept }, `Removed ${stale.length} pattern(s) from ${settingsPath}; ${kept} kept.`);
+}

package/scripts/phase-tools-evaluation.mjs

@@ -106,13 +106,16 @@ for (const [name, tool] of tools) {
 }
 const duplicateDescriptions = [...descriptions.values()].filter((names) => names.length > 1);
 const replay = lanes.map(replayLane);
+// The task contract was retired on 2026-09-30: these evidence tools are no longer
+// registered, so no phase may offer them and the runtime keeps only its hooks.
+const p2BaselineRetired = lanes.every((lane) => lane.p2.every((name) => !tools.has(name)));
 const runtimeOwnedEvidenceTools = ["piagent_context_record", "piagent_verify_record", "piagent_task_gate_check", "piagent_trace_record"];
 const checks = [
   { id: "read-only-no-direct-mutator", passed: phaseRows.filter((row) => row.lane === "read-only").every((row) => row.piagentTools.every((tool) => !PIAGENT_MUTATION_CAPABLE_TOOLS.has(tool)) && row.requiredHostTools.every((tool) => !["edit", "write", "apply_patch"].includes(tool))) },
   { id: "review-carrier-checked-shell-retained", passed: phaseRows.filter((row) => row.phase === "review").every((row) => row.piagentTools.every((tool) => !PIAGENT_MUTATION_CAPABLE_TOOLS.has(tool)) && row.requiredHostTools.includes("bash") && row.requiredHostTools.every((tool) => !["edit", "write", "apply_patch"].includes(tool))) },
   { id: "verify-surface-complete", passed: phaseRows.filter((row) => row.phase === "verify").every((row) => row.requiredHostTools.includes("bash") && runtimeOwnedEvidenceTools.every((tool) => !row.piagentTools.includes(tool))) },
   { id: "handoff-surface-complete", passed: phaseRows.filter((row) => row.phase === "handoff").every((row) => row.requiredHostTools.includes("read") && runtimeOwnedEvidenceTools.every((tool) => !row.piagentTools.includes(tool))) },
-  { id: "runtime-evidence-surface-complete", passed: runtimeOwnedEvidenceTools.every((tool) => tools.has(tool)) && ["tool_result", "message_end"].every((hook) => hooks.has(hook)) },
+  { id: "retired-evidence-tools-absent", passed: runtimeOwnedEvidenceTools.every((tool) => !tools.has(tool)) && ["tool_result", "message_end"].every((hook) => hooks.has(hook)) },
   { id: "high-risk-review-retained", passed: lanes.find((lane) => lane.id === "high-risk").phases.includes("review") },
   { id: "duplicate-descriptions-zero", passed: duplicateDescriptions.length === 0 },
   { id: "trajectory-replay-100-percent", passed: replay.every((item) => item.deterministic && item.finalPhase === "terminal") }
@@ -202,9 +205,11 @@ const report = {
   evaluatedTurns: phaseRows.length,
   p2WeightedSchemaBytes: p2WeightedBytes,
   phaseWeightedSchemaBytes: phaseWeightedBytes,
-  schemaReduction: Number(reduction.toFixed(4)),
-  schemaReductionPercent: Number((reduction * 100).toFixed(2)),
-  schemaReductionSemantics: "counterfactual-intended-surface-only",
+  // Every P2 baseline tool was retired with the task contract, so there is no
+  // baseline left to compare against; null says so instead of a meaningless ratio.
+  schemaReduction: p2BaselineRetired ? null : Number(reduction.toFixed(4)),
+  schemaReductionPercent: p2BaselineRetired ? null : Number((reduction * 100).toFixed(2)),
+  schemaReductionSemantics: p2BaselineRetired ? "counterfactual-baseline-retired" : "counterfactual-intended-surface-only",
   runtimeContract: { strict: strictContract, shadow: shadowContract },
   duplicateDescriptions,
   missingToolEvents: checks.filter((check) => !check.passed && check.id.includes("surface")).length,

package/scripts/piagent-cli.mjs

@@ -36,7 +36,10 @@ let script = scriptByCommand[invokedAs];
 
 if (invokedAs === "piagent") {
   const subcommand = forwardedArgs[0];
-  if (subcommand === "dashboard") {
+  if (subcommand === "studio") {
+    script = "scripts/piagent-studio.mjs";
+    forwardedArgs = forwardedArgs.slice(1);
+  } else if (subcommand === "dashboard") {
     script = "scripts/piagent-dashboard.mjs";
     forwardedArgs = forwardedArgs.slice(1);
   } else if (subcommand === "explain") {
@@ -56,6 +59,7 @@ if (invokedAs === "piagent") {
     console.log("");
     console.log("Commands:");
     console.log("  dashboard   Open and manage the local session hub");
+    console.log("  studio      Open the managed company agent imported by Agent Watch");
     console.log("  explain     Say why the guard would allow or block a shell command");
     console.log("  approve-verification  Preview or approve an independent verification plan");
     console.log("  select-verification   Preview reusable contracts for exact task criteria");
@@ -87,6 +91,51 @@ function benchmarkSourceRoot() {
   process.exit(1);
 }
 
+// The Pi host this member runs: the `pi` found on PATH, as its package root.
+function piHost() {
+  for (const dir of (process.env.PATH ?? "").split(path.delimiter)) {
+    if (!path.isAbsolute(dir)) continue;
+    let root;
+    try { root = path.dirname(fs.realpathSync(path.join(dir, "pi"))); } catch { continue; }
+    for (let depth = 0; depth < 4; depth += 1, root = path.dirname(root)) {
+      try { if (JSON.parse(fs.readFileSync(path.join(root, "package.json"), "utf8")).name === "@earendil-works/pi-coding-agent") return root; } catch { /* keep walking up */ }
+    }
+  }
+  return null;
+}
+
+// Agent Watch binds the company runtime to the Piagent this member actually
+// runs (nvm, Volta, Homebrew, a custom npm prefix…): record the installed
+// entrypoint, the Node running it and the Pi host. Source checkouts never
+// register, and a failure here never blocks the command. Asking for help or the
+// version changes nothing in the operator's agent directory.
+function recordRuntime() {
+  try {
+    if (forwardedArgs.some((value) => ["--help", "-h", "--version", "-v"].includes(value))) return;
+    if (!packageRoot.split(path.sep).includes("node_modules")) return;
+    // An install under the OS temporary directory (a packaging test, a scratch
+    // prefix) is about to disappear; recording it would point Agent Watch at
+    // an entrypoint that no longer exists.
+    const osTemp = fs.realpathSync.native(os.tmpdir()), installRoot = fs.realpathSync.native(packageRoot);
+    if (installRoot === osTemp || installRoot.startsWith(`${osTemp}${path.sep}`)) return;
+    const agentDir = path.resolve(process.env.PI_CODING_AGENT_DIR || path.join(os.homedir(), ".pi", "agent"));
+    if (!fs.statSync(agentDir).isDirectory()) return;
+    const body = `${JSON.stringify({
+      schema_version: 1,
+      version: JSON.parse(fs.readFileSync(path.join(packageRoot, "package.json"), "utf8")).version,
+      entrypoint: fs.realpathSync(path.join(packageRoot, "scripts", "piagent-studio.mjs")),
+      node: fs.realpathSync(process.execPath),
+      pi_sdk_root: piHost()
+    }, null, 2)}\n`;
+    const file = path.join(agentDir, "piagent-runtime.json");
+    try { if (fs.readFileSync(file, "utf8") === body) return; } catch { /* first run */ }
+    const temporary = `${file}.${process.pid}.tmp`;
+    fs.writeFileSync(temporary, body, { mode: 0o600 });
+    fs.renameSync(temporary, file);
+  } catch { /* optional: Agent Watch falls back to known install locations */ }
+}
+recordRuntime();
+
 const sourceRoot = invokedAs === "piagent-benchmark" ? benchmarkSourceRoot() : packageRoot;
 const target = path.join(sourceRoot, script);
 const runner = target.endsWith(".mjs") ? process.execPath : "bash";
@@ -95,7 +144,7 @@ const runnerArgs = target.endsWith(".mjs")
   : [target];
 const child = spawn(runner, [...runnerArgs, ...forwardedArgs], {
   cwd: process.cwd(),
-  env: process.env,
+  env: script === "scripts/piagent-studio.mjs" ? { PATH: "/usr/bin:/bin", HOME: os.homedir(), TERM: process.env.TERM || "xterm-256color", LANG: "en_US.UTF-8" } : process.env,
   stdio: "inherit"
 });
 

package/scripts/piagent-dashboard.mjs

@@ -10,6 +10,7 @@ import { installedPiHostRoot } from "../packages/piagent-webui/gateway/pi-host.t
 import { gatewayProfileState, profileRef, readGatewayDescriptor, readOrCreateCatalogKey,
   removeGatewayDescriptor } from "../packages/piagent-webui/gateway/profile-state.ts";
 import { startPiagentGateway } from "../packages/piagent-webui/gateway/gateway-service.ts";
+import { agentWatchCompanyConnector } from "../packages/piagent-webui/gateway/managed-launch.ts";
 
 const packageRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
 const packageJson = JSON.parse(fs.readFileSync(path.join(packageRoot, "package.json"), "utf8"));
@@ -111,9 +112,9 @@ async function control(action, timeoutMs = 1_500) {
   return await requestGatewayControl(state.controlSocket, { action }, timeoutMs);
 }
 
-async function currentLaunchUrl() {
+async function currentLaunchUrl(timeoutMs) {
   try {
-    const response = await control("issue-launch-url");
+    const response = await control("issue-launch-url", timeoutMs);
     if (response.ok && response.value && typeof response.value === "object"
       && typeof response.value.launchUrl === "string") return response.value.launchUrl;
   } catch {
@@ -122,6 +123,26 @@ async function currentLaunchUrl() {
   return null;
 }
 
+// A Gateway that is alive but busy answers late. Starting another one beside
+// it left two Gateways on the same conversations, the first unreachable and
+// still serving its pages, so the running one is waited for instead.
+async function waitForRunningGateway(timeoutMs = 30_000) {
+  const running = readGatewayDescriptor(gatewayProfileState(agentDir));
+  if (!running || !processAlive(running.pid)) return null;
+  const deadline = Date.now() + timeoutMs;
+  while (Date.now() < deadline && processAlive(running.pid)) {
+    try {
+      const response = await control("issue-launch-url", 5_000);
+      if (response.ok && typeof response.value?.launchUrl === "string") return response.value.launchUrl;
+    } catch (error) {
+      // Nothing listens on its socket: the process is not a Gateway anymore.
+      if (!(error instanceof Error) || error.message !== "gateway-control-timeout") return null;
+    }
+  }
+  if (!processAlive(running.pid)) return null;
+  throw new Error("gateway-busy\nThe Gateway is running but did not answer within 30s. Try again, or run `piagent dashboard restart`.");
+}
+
 async function waitForGatewayStopped(previous, timeoutMs = 8_000) {
   const deadline = Date.now() + timeoutMs;
   while (Date.now() < deadline) {
@@ -134,7 +155,7 @@ async function waitForGatewayStopped(previous, timeoutMs = 8_000) {
 }
 
 async function ensureStarted() {
-  const existing = await currentLaunchUrl();
+  const existing = await currentLaunchUrl() ?? await waitForRunningGateway();
   if (existing) return existing;
   const effectiveAgentDir = path.resolve(agentDir ?? process.env.PI_CODING_AGENT_DIR ?? path.join(os.homedir(), ".pi", "agent"));
   const state = gatewayProfileState(effectiveAgentDir);
@@ -168,7 +189,9 @@ async function ensureStarted() {
 }
 
 async function serve() {
-  const gateway = await startPiagentGateway({ packageRoot, expectedPiVersion, agentDir });
+  // Company sessions come from the Agent Watch binding in this Pi folder.
+  const piAgentDir = path.resolve(agentDir ?? process.env.PI_CODING_AGENT_DIR ?? path.join(os.homedir(), ".pi", "agent"));
+  const gateway = await startPiagentGateway({ packageRoot, expectedPiVersion, agentDir, company: agentWatchCompanyConnector(piAgentDir) });
   const shutdown = () => { void gateway.close(); };
   process.once("SIGINT", shutdown);
   process.once("SIGTERM", shutdown);