@piagent/platform 1.8.0 → 1.9.1

package/docs-site/content/ecosystem.html

@@ -0,0 +1,144 @@
+<section class="section">
+  <p class="section-kicker">Toàn cảnh</p>
+  <h2 id="toan-canh">Một dashboard, hai cách dùng model</h2>
+  <p class="section-lead">Piagent chạy trên máy từng thành viên. Ở chế độ cá nhân, nó dùng tài khoản model của chính bạn. Ở chế độ công ty, nó đi qua Agent Watch trên máy bạn và Agent Studio của công ty: công ty giữ key, chọn model và đặt quy trình kiểm tra cho cả team.</p>
+  <figure class="diagram">
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1120 560" role="img" aria-labelledby="eco-title eco-desc" class="eco-diagram">
+  <title id="eco-title">Hệ sinh thái Piagent</title>
+  <desc id="eco-desc">Máy của thành viên chạy Piagent (Terminal và Dashboard) với guard kiểm tra mọi tool call. Chế độ cá nhân gọi thẳng model bằng tài khoản riêng. Chế độ công ty đi qua Agent Watch giữ key trong Keychain và Agent Studio của công ty, nơi chọn model và Harness cho từng lượt.</desc>
+  <defs>
+    <marker id="eco-arrow" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse"><path d="M0 0 L10 5 L0 10 z" fill="#8be9c8"/></marker>
+    <marker id="eco-arrow-lime" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse"><path d="M0 0 L10 5 L0 10 z" fill="#d8ff7a"/></marker>
+  </defs>
+  <style>
+    .eco-box { fill: #101114; stroke: #2c2f37; stroke-width: 1.5; }
+    .eco-zone { fill: rgba(255,255,255,0.015); stroke: #24262d; stroke-width: 1.2; stroke-dasharray: 6 6; }
+    .eco-h { fill: #f4f4ef; font: 600 17px "Be Vietnam Pro", system-ui, sans-serif; }
+    .eco-t { fill: #a4a6ad; font: 400 13.5px "Be Vietnam Pro", system-ui, sans-serif; }
+    .eco-k { fill: #71747d; font: 600 12px "Be Vietnam Pro", system-ui, sans-serif; letter-spacing: .12em; text-transform: uppercase; }
+    .eco-chip { fill: rgba(216,255,122,0.08); stroke: rgba(216,255,122,0.35); }
+    .eco-chip-t { fill: #d8ff7a; font: 600 12.5px "JetBrains Mono", ui-monospace, monospace; }
+    .eco-line { stroke: #8be9c8; stroke-width: 1.8; fill: none; }
+    .eco-line-lime { stroke: #d8ff7a; stroke-width: 1.8; fill: none; stroke-dasharray: 7 6; }
+    .eco-label { fill: #8be9c8; font: 500 12.5px "Be Vietnam Pro", system-ui, sans-serif; }
+    .eco-label-lime { fill: #d8ff7a; font: 500 12.5px "Be Vietnam Pro", system-ui, sans-serif; }
+  </style>
+  <rect class="eco-zone" x="16" y="16" width="420" height="528" rx="22"/>
+  <text class="eco-k" x="40" y="48">Máy của thành viên</text>
+  <rect class="eco-box" x="40" y="68" width="372" height="96" rx="16"/>
+  <text class="eco-h" x="62" y="102">Piagent · Terminal và Dashboard</text>
+  <text class="eco-t" x="62" y="128">Nói việc bằng lời thường; cùng một lịch sử</text>
+  <text class="eco-t" x="62" y="148">trong Terminal (pi) và trình duyệt.</text>
+  <rect class="eco-box" x="40" y="184" width="372" height="116" rx="16"/>
+  <text class="eco-h" x="62" y="218">Guard</text>
+  <text class="eco-t" x="62" y="244">Kiểm tra mọi tool call: file bảo vệ, profile</text>
+  <text class="eco-t" x="62" y="264">quyền, file quá lớn, sửa trên bản đã cũ;</text>
+  <text class="eco-t" x="62" y="284">push, publish, lệnh có mạng chờ bạn duyệt.</text>
+  <rect class="eco-box" x="40" y="320" width="372" height="96" rx="16"/>
+  <text class="eco-h" x="62" y="354">Sandbox của chế độ công ty</text>
+  <text class="eco-t" x="62" y="380">Lệnh chạy không mạng, không đọc Keychain,</text>
+  <text class="eco-t" x="62" y="400">.env hay SSH key; mạng chỉ mở theo lần duyệt.</text>
+  <rect class="eco-chip" x="40" y="440" width="176" height="34" rx="17"/>
+  <text class="eco-chip-t" x="58" y="462">piagent dashboard</text>
+  <rect class="eco-chip" x="226" y="440" width="186" height="34" rx="17"/>
+  <text class="eco-chip-t" x="244" y="462">piagent studio --web</text>
+  <rect class="eco-chip" x="40" y="486" width="76" height="34" rx="17"/>
+  <text class="eco-chip-t" x="64" y="508">pi</text>
+  <rect class="eco-chip" x="126" y="486" width="186" height="34" rx="17"/>
+  <text class="eco-chip-t" x="144" y="508">piagent-doctor</text>
+  <rect class="eco-box" x="500" y="68" width="250" height="96" rx="18"/>
+  <text class="eco-h" x="522" y="102">Model cá nhân</text>
+  <text class="eco-t" x="522" y="128">Đăng nhập bằng tài khoản</text>
+  <text class="eco-t" x="522" y="148">riêng: Codex, Claude, Copilot…</text>
+  <rect class="eco-box" x="500" y="184" width="250" height="232" rx="18"/>
+  <text class="eco-k" x="522" y="216">Ứng dụng macOS</text>
+  <text class="eco-h" x="522" y="244">Agent Watch</text>
+  <text class="eco-t" x="522" y="272">Giữ key công ty trong</text>
+  <text class="eco-t" x="522" y="292">Keychain; nhập cấu hình</text>
+  <text class="eco-t" x="522" y="312">cho Piagent; cấp quyền</text>
+  <text class="eco-t" x="522" y="332">ngắn hạn cho từng lượt.</text>
+  <text class="eco-t" x="522" y="364">Model không bao giờ thấy</text>
+  <text class="eco-t" x="522" y="384">key.</text>
+  <rect class="eco-zone" x="800" y="16" width="304" height="528" rx="22"/>
+  <text class="eco-k" x="824" y="48">Máy chủ công ty</text>
+  <rect class="eco-box" x="824" y="68" width="256" height="300" rx="18"/>
+  <text class="eco-h" x="846" y="102">Agent Studio</text>
+  <text class="eco-t" x="846" y="132">Thành viên, key, ngân sách</text>
+  <text class="eco-t" x="846" y="152">và usage theo ngày.</text>
+  <text class="eco-t" x="846" y="186">Harness của team:</text>
+  <text class="eco-label-lime" x="846" y="210">kế hoạch · check · review</text>
+  <text class="eco-t" x="846" y="244">Chọn model cho từng vai:</text>
+  <text class="eco-label-lime" x="846" y="268">main · research · review</text>
+  <text class="eco-t" x="846" y="302">Mỗi vai một model riêng,</text>
+  <text class="eco-t" x="846" y="322">thinking theo Harness.</text>
+  <rect class="eco-box" x="824" y="392" width="256" height="128" rx="18"/>
+  <text class="eco-h" x="846" y="426">Model của công ty</text>
+  <text class="eco-t" x="846" y="454">Claude, GPT, DeepSeek, Kimi,</text>
+  <text class="eco-t" x="846" y="474">GLM, Qwen… qua key công ty;</text>
+  <text class="eco-t" x="846" y="494">key chỉ nằm trên máy chủ.</text>
+  <path class="eco-line" d="M412 300 L 500 300" marker-end="url(#eco-arrow)"/>
+  <text class="eco-label" x="424" y="290">công ty</text>
+  <path class="eco-line" d="M750 300 C 790 300, 790 220, 824 220" marker-end="url(#eco-arrow)"/>
+  <text class="eco-label" x="748" y="348">lượt có hạn</text>
+  <path class="eco-line" d="M952 368 L952 392" marker-end="url(#eco-arrow)"/>
+  <path class="eco-line-lime" d="M412 116 L 500 116" marker-end="url(#eco-arrow-lime)"/>
+  <text class="eco-label-lime" x="420" y="106">cá nhân</text>
+</svg>
+    <figcaption class="diagram-hint">Vuốt ngang để xem hết sơ đồ.</figcaption>
+  </figure>
+</section>
+
+<section class="section">
+  <p class="section-kicker">Thành phần</p>
+  <h2 id="thanh-phan">Mỗi phần làm một việc</h2>
+  <div class="grid cols-2">
+    <article class="card">
+      <h3 id="piagent">Piagent</h3>
+      <p>Coding agent trong Terminal (<span class="inline-code">pi</span>) và trên trình duyệt (<span class="inline-code">piagent dashboard</span>). Hai nơi dùng chung lịch sử: bắt đầu ở Terminal, xem tiếp trên trình duyệt.</p>
+    </article>
+    <article class="card">
+      <h3 id="guard">Guard</h3>
+      <p>Kiểm tra từng tool call trước khi chạy: file bảo vệ như <span class="inline-code">.env</span>, profile quyền, file quá lớn, sửa trên bản đã cũ. Push, publish và lệnh có mạng chờ bạn duyệt đúng một lần.</p>
+    </article>
+    <article class="card">
+      <h3 id="agent-watch">Agent Watch</h3>
+      <p>Ứng dụng macOS giữ key công ty trong Keychain và nhập cấu hình cho Piagent. Mỗi lượt nhận quyền ngắn hạn; model và các lệnh không bao giờ đọc được key.</p>
+    </article>
+    <article class="card">
+      <h3 id="agent-studio">Agent Studio</h3>
+      <p>Máy chủ của công ty: thành viên, key, ngân sách, usage theo ngày và Harness của team. Studio chọn model cho từng vai (main, research, review) và mức suy luận.</p>
+    </article>
+  </div>
+</section>
+
+<section class="section">
+  <p class="section-kicker">Một lượt ở chế độ công ty</p>
+  <h2 id="mot-luot">Từ tin nhắn tới "Check đã qua · Review không có lỗi chặn"</h2>
+  <div class="steps">
+    <article class="step"><div><h3>Bạn nhắn việc cần làm</h3><p>Viết như nói với đồng nghiệp, chọn model <span class="inline-code">agent-watch-auto</span> trong nhóm Công ty.</p></div></article>
+    <article class="step"><div><h3>Studio cấp một lượt</h3><p>Agent Watch xin quyền ngắn hạn; Studio chọn model cho agent chính theo Harness của team.</p></div></article>
+    <article class="step"><div><h3>Agent làm trong sandbox</h3><p>Đọc, sửa và chạy lệnh trong project, không có mạng. Cần mạng thì xin bạn duyệt đúng một lệnh.</p></div></article>
+    <article class="step"><div><h3>Harness kiểm tra</h3><p>Chưa có check nào qua trên code cuối thì yêu cầu chạy; rồi một subagent review bản sửa. Lỗi chặn được gửi lại cho agent, tối đa số vòng team đặt.</p></div></article>
+    <article class="step"><div><h3>Kết quả ghi dưới câu trả lời</h3><p>Ví dụ "Check đã qua trên code cuối · Review không có lỗi chặn". Bạn có thể Dừng bất cứ lúc nào và Tiếp tục sau.</p></div></article>
+  </div>
+  <figure class="shot">
+    <img src="/assets/shots/company-review-running.jpg" alt="Đang review: thanh trên ghi Subagent 1/2, nút Dừng vẫn còn" loading="lazy" width="1600" height="1000">
+    <figcaption>Lúc review đang chạy: thanh trên ghi Subagent 1/2, cột Workspace ghi 1/2 đang chạy, nút Dừng vẫn hoạt động.</figcaption>
+  </figure>
+</section>
+
+<section class="section">
+  <p class="section-kicker">Chọn chế độ</p>
+  <h2 id="chon-che-do">Khi nào dùng cá nhân, khi nào dùng công ty</h2>
+  <div class="table-wrap"><table>
+    <thead><tr><th></th><th>Cá nhân</th><th>Công ty</th></tr></thead>
+    <tbody>
+      <tr><td>Model</td><td>Tài khoản bạn đăng nhập (Codex, Claude, Copilot…)</td><td>Model công ty chọn trong Studio, theo vai</td></tr>
+      <tr><td>Key</td><td>Do Pi quản lý trên máy bạn</td><td>Nằm trên máy chủ và trong Keychain, không vào project</td></tr>
+      <tr><td>Kiểm tra</td><td>Guard; bạn quyết định khi nào chạy test</td><td>Guard, sandbox, và Harness tự yêu cầu check, review</td></tr>
+      <tr><td>Mạng khi chạy lệnh</td><td>Như trên máy bạn; push và publish chờ duyệt</td><td>Tắt; mở cho đúng một lệnh khi bạn duyệt</td></tr>
+      <tr><td>Chi phí</td><td>Theo gói của bạn</td><td>Theo ngân sách công ty, xem usage trong Studio</td></tr>
+    </tbody>
+  </table></div>
+  <div class="callout ok-callout"><strong>Bắt đầu</strong><p>Cá nhân: cài theo <a href="/quickstart">Quickstart</a> rồi chạy <span class="inline-code">piagent dashboard</span>. Công ty: mở Agent Watch, tab Studio, kết nối key và nhập cấu hình cho Piagent; model <span class="inline-code">agent-watch-auto</span> sẽ có trong nhóm Công ty.</p></div>
+</section>

package/docs-site/content/en/architecture.html

@@ -21,7 +21,7 @@
   </div>
   <div class="grid cols-3">
     <article class="card"><h3>Context planner</h3><p><span class="inline-code">runtime/context/adaptive-planner.ts</span> chooses budget, retrieval lane, code inclusion, and a plan receipt from phase, context pressure, model capability, and thinking level.</p></article>
-    <article class="card"><h3>Task journal</h3><p><span class="inline-code">extensions/task-journal.js</span> records start, progress, mutation, verifier, and completion checkpoints. Resume trusts the task contract first; retention compaction preserves hash anchors.</p></article>
+    <article class="card"><h3>Earlier task history</h3><p><span class="inline-code">extensions/task-journal.js</span> still reads checkpoints of tasks created before 1.9.0 for review; new sessions no longer write tasks.</p></article>
     <article class="card"><h3>Repository memory</h3><p><span class="inline-code">extensions/repository-memory.js</span> stores only cited, expiring facts and rejects raw prompts, outputs, OAuth material, API keys, and secrets. Hints use only unused context-plan budget.</p></article>
     <article class="card"><h3>Model capability</h3><p><span class="inline-code">runtime/model/capabilities.ts</span> reads model family, context window, and thinking level as budget signals without switching providers or requiring API keys.</p></article>
     <article class="card"><h3>Verification intelligence</h3><p><span class="inline-code">extensions/verification-intelligence.js</span> classifies failures and chooses a targeted verifier from task scope; mixed frontend/backend scope uses the full source verifier.</p></article>

package/docs-site/content/en/benchmark.html

@@ -1,3 +1,8 @@
+<div class="callout">
+  <strong>Historical figures</strong>
+  <p>This measurement ran on v1.6.0, when sessions still used the task contract and workflow commands. Release 1.9.0 works from plain-language requests and has not been measured again; do not read the figures below as 1.9.0 results.</p>
+</div>
+
 <section class="benchmark-summary" aria-labelledby="benchmark-verdict">
   <div class="benchmark-verdict">
     <div>

package/docs-site/content/en/commands.html

@@ -2,8 +2,8 @@
   <div class="grid cols-2">
     <article class="card">
       <h3 id="session-basics">Session basics</h3>
-      <div class="tag-list"><span class="tag">/login</span><span class="tag">/model</span><span class="tag">/commands</span><span class="tag">/piagent-status</span><span class="tag">/piagent-inspector</span><span class="tag">/piagent-orchestration</span><span class="tag">/usage</span><span class="tag">/usage efficiency</span><span class="tag">/task-preflight</span><span class="tag">/context preflight</span><span class="tag">/name</span><span class="tag">/fresh</span><span class="tag">/session</span></div>
-      <p>Set up a session, select a model, inspect profile, usage, or orchestration state, and decide whether a large task needs a fresh session.</p>
+      <div class="tag-list"><span class="tag">/login</span><span class="tag">/model</span><span class="tag">/piagent-status</span><span class="tag">/piagent-inspector</span><span class="tag">/piagent-orchestration</span><span class="tag">/usage</span><span class="tag">/usage efficiency</span><span class="tag">/task-preflight</span><span class="tag">/context preflight</span><span class="tag">/name</span><span class="tag">/new</span><span class="tag">/session</span></div>
+      <p>Set up a session, select a model, inspect profile, usage, or orchestration state, and decide whether large work needs a new session (<span class="inline-code">/new</span>).</p>
     </article>
     <article class="card">
       <h3 id="project-profile">Project profile</h3>
@@ -11,19 +11,19 @@
       <p>Apply a profile directly or use a deterministic selector for the profile and tech stack. Output stays compact and does not require model interpretation.</p>
     </article>
     <article class="card">
-      <h3 id="implementation-workflow">Implementation workflow</h3>
-      <div class="tag-list"><span class="tag">/workflow</span><span class="tag">/workflow task</span><span class="tag">/workflow plan</span><span class="tag">/workflow review</span><span class="tag">/workflow scout</span><span class="tag">/workflow discuss</span></div>
-      <p>Packages context loading, task contracts, implementation, verification evidence, and final handoff.</p>
+      <h3 id="implementation-workflow">Assigning work</h3>
+      <div class="tag-list"><span class="tag">plain language</span><span class="tag">read-only, do not edit</span><span class="tag">plan first</span><span class="tag">review the diff</span></div>
+      <p>Since 1.9.0 there is no <span class="inline-code">/workflow</span>, <span class="inline-code">/task</span> or task contract: say what you need in plain language; the guard checks every tool call.</p>
     </article>
     <article class="card">
       <h3 id="git-handoff">Git handoff</h3>
-      <div class="tag-list"><span class="tag">/workflow commit</span><span class="tag">/workflow pr</span><span class="tag">git status</span><span class="tag">git diff</span></div>
-      <p>There is no <span class="inline-code">/git</span> namespace. Commit and PR flows use workflow guards; pushes and broad staging such as <span class="inline-code">git add -A</span> require confirmation.</p>
+      <div class="tag-list"><span class="tag">commit in plain language</span><span class="tag">draft PR in plain language</span><span class="tag">git status</span><span class="tag">git diff</span></div>
+      <p>There is no <span class="inline-code">/git</span> namespace. Commits and PRs are ordinary requests; pushes, GitHub writes and broad staging such as <span class="inline-code">git add -A</span> require confirmation.</p>
     </article>
     <article class="card">
-      <h3 id="fresh-sessions">Fresh sessions</h3>
-      <div class="tag-list"><span class="tag">/fresh task</span><span class="tag">/fresh scout</span><span class="tag">/fresh be-to-fe</span></div>
-      <p>Start a clean workflow when the current context is heavy or belongs to a different task.</p>
+      <h3 id="fresh-sessions">New sessions</h3>
+      <div class="tag-list"><span class="tag">/new</span><span class="tag">/compact</span></div>
+      <p>Start a clean session when the current context is heavy or belongs to different work (<span class="inline-code">/fresh</span> was retired in 1.9.0).</p>
     </article>
     <article class="card">
       <h3 id="mcp">MCP</h3>
@@ -49,9 +49,9 @@
       <p>Inspect intent, risk, scope, runtime, solver route, phases, tool and helper recommendations, backend, approvals, and blockers before starting.</p>
     </article>
     <article class="command-card">
-      <header><span>Live task status</span><button class="clip-btn" data-clip="/piagent-status">Copy</button></header>
+      <header><span>Session status</span><button class="clip-btn" data-clip="/piagent-status">Copy</button></header>
       <pre><code>/piagent-status</code></pre>
-      <p>Read the Task Contract, checkpoints, verifier evidence, recovery, helpers, resume state, and terminal receipt. Approval requires the current-tree hard completion gate to pass.</p>
+      <p>The session's profile, guard, runtime and model. It changes no file, reruns no check and starts no model turn.</p>
     </article>
     <article class="command-card">
       <header><span>Activity, diff, and context</span><button class="clip-btn" data-clip="/piagent-inspector">Copy</button></header>
@@ -71,6 +71,23 @@
   </div>
   <div class="callout">
     <strong>Sourced diffs, no token estimates.</strong>
-    <p>The footer panel uses observed task files for fast updates; the <span class="inline-code">files</span> view computes the exact snapshot delta and marks <span class="inline-code">mixed-working-tree</span> when a task touches a file that was already dirty. Pi exposes model usage by turn and session, so per-built-in-tool tokens remain unavailable.</p>
+    <p>The footer panel uses the files observed in the session for fast updates; the <span class="inline-code">files</span> view computes the exact snapshot delta and marks <span class="inline-code">mixed-working-tree</span> when a turn touches a file that was already dirty. Pi exposes model usage by turn and session, so per-built-in-tool tokens remain unavailable.</p>
+  </div>
+</section>
+
+<section class="section">
+  <p class="section-kicker">Optional skills and packages</p>
+  <h2 id="skills-and-packages">Audit test quality, run experiment loops</h2>
+  <div class="command-grid">
+    <article class="command-card">
+      <header><span>Test audit</span><button class="clip-btn" data-clip="/skill:test-audit audit the tests of the billing module">Copy</button></header>
+      <pre><code>/skill:test-audit audit the tests of the billing module</code></pre>
+      <p>The <span class="inline-code">test-audit</span> skill ships with Piagent: it stops new tests that protect no behavior and finds duplicated tests, tests tied to the implementation, and code that exists only for tests. The agent uses it when writing or changing tests; run the command to sweep a whole area.</p>
+    </article>
+    <article class="command-card">
+      <header><span>Experiment loop</span><button class="clip-btn" data-clip="git switch -c experiment/test-speed">Copy</button></header>
+      <pre><code>git switch -c experiment/test-speed</code></pre>
+      <p>If you add a package with an automatic experiment loop (<span class="inline-code">run_experiment</span>, <span class="inline-code">log_experiment</span>): the guard checks each experiment command like any shell command, and lets the loop run only on an <span class="inline-code">experiment/</span> branch or a worktree of its own, started with nothing uncommitted, because every dropped idea erases all uncommitted changes.</p>
+    </article>
   </div>
 </section>

package/docs-site/content/en/ecosystem.html

@@ -0,0 +1,144 @@
+<section class="section">
+  <p class="section-kicker">The whole picture</p>
+  <h2 id="overview">One dashboard, two ways to use models</h2>
+  <p class="section-lead">Piagent runs on each member's machine. In personal mode it uses your own model account. In company mode it goes through Agent Watch on your Mac and the company's Agent Studio: the company holds the keys, chooses the models and sets the checks for the whole team.</p>
+  <figure class="diagram">
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1120 560" role="img" aria-labelledby="eco-title eco-desc" class="eco-diagram">
+  <title id="eco-title">The Piagent ecosystem</title>
+  <desc id="eco-desc">Each member's machine runs Piagent (Terminal and Dashboard) with a guard that checks every tool call. Personal mode calls models with the member's own account. Company mode goes through Agent Watch, which keeps the key in Keychain, and the company's Agent Studio, which picks the models and the Harness for every turn.</desc>
+  <defs>
+    <marker id="eco-arrow" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse"><path d="M0 0 L10 5 L0 10 z" fill="#8be9c8"/></marker>
+    <marker id="eco-arrow-lime" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse"><path d="M0 0 L10 5 L0 10 z" fill="#d8ff7a"/></marker>
+  </defs>
+  <style>
+    .eco-box { fill: #101114; stroke: #2c2f37; stroke-width: 1.5; }
+    .eco-zone { fill: rgba(255,255,255,0.015); stroke: #24262d; stroke-width: 1.2; stroke-dasharray: 6 6; }
+    .eco-h { fill: #f4f4ef; font: 600 17px "Be Vietnam Pro", system-ui, sans-serif; }
+    .eco-t { fill: #a4a6ad; font: 400 13.5px "Be Vietnam Pro", system-ui, sans-serif; }
+    .eco-k { fill: #71747d; font: 600 12px "Be Vietnam Pro", system-ui, sans-serif; letter-spacing: .12em; text-transform: uppercase; }
+    .eco-chip { fill: rgba(216,255,122,0.08); stroke: rgba(216,255,122,0.35); }
+    .eco-chip-t { fill: #d8ff7a; font: 600 12.5px "JetBrains Mono", ui-monospace, monospace; }
+    .eco-line { stroke: #8be9c8; stroke-width: 1.8; fill: none; }
+    .eco-line-lime { stroke: #d8ff7a; stroke-width: 1.8; fill: none; stroke-dasharray: 7 6; }
+    .eco-label { fill: #8be9c8; font: 500 12.5px "Be Vietnam Pro", system-ui, sans-serif; }
+    .eco-label-lime { fill: #d8ff7a; font: 500 12.5px "Be Vietnam Pro", system-ui, sans-serif; }
+  </style>
+  <rect class="eco-zone" x="16" y="16" width="420" height="528" rx="22"/>
+  <text class="eco-k" x="40" y="48">Member's machine</text>
+  <rect class="eco-box" x="40" y="68" width="372" height="96" rx="16"/>
+  <text class="eco-h" x="62" y="102">Piagent · Terminal and Dashboard</text>
+  <text class="eco-t" x="62" y="128">Ask in plain language; one history</text>
+  <text class="eco-t" x="62" y="148">in Terminal (pi) and the browser.</text>
+  <rect class="eco-box" x="40" y="184" width="372" height="116" rx="16"/>
+  <text class="eco-h" x="62" y="218">Guard</text>
+  <text class="eco-t" x="62" y="244">Checks every tool call: protected files,</text>
+  <text class="eco-t" x="62" y="264">permissions, oversized files, stale edits;</text>
+  <text class="eco-t" x="62" y="284">push, publish, network wait for approval.</text>
+  <rect class="eco-box" x="40" y="320" width="372" height="96" rx="16"/>
+  <text class="eco-h" x="62" y="354">Company-mode sandbox</text>
+  <text class="eco-t" x="62" y="380">Commands run without network, Keychain,</text>
+  <text class="eco-t" x="62" y="400">.env or SSH keys; network per approval.</text>
+  <rect class="eco-chip" x="40" y="440" width="176" height="34" rx="17"/>
+  <text class="eco-chip-t" x="58" y="462">piagent dashboard</text>
+  <rect class="eco-chip" x="226" y="440" width="186" height="34" rx="17"/>
+  <text class="eco-chip-t" x="244" y="462">piagent studio --web</text>
+  <rect class="eco-chip" x="40" y="486" width="76" height="34" rx="17"/>
+  <text class="eco-chip-t" x="64" y="508">pi</text>
+  <rect class="eco-chip" x="126" y="486" width="186" height="34" rx="17"/>
+  <text class="eco-chip-t" x="144" y="508">piagent-doctor</text>
+  <rect class="eco-box" x="500" y="68" width="250" height="96" rx="18"/>
+  <text class="eco-h" x="522" y="102">Personal models</text>
+  <text class="eco-t" x="522" y="128">Signed in with your own</text>
+  <text class="eco-t" x="522" y="148">account: Codex, Claude, Copilot…</text>
+  <rect class="eco-box" x="500" y="184" width="250" height="232" rx="18"/>
+  <text class="eco-k" x="522" y="216">macOS app</text>
+  <text class="eco-h" x="522" y="244">Agent Watch</text>
+  <text class="eco-t" x="522" y="272">Keeps the company key in</text>
+  <text class="eco-t" x="522" y="292">Keychain; imports the</text>
+  <text class="eco-t" x="522" y="312">configuration for Piagent;</text>
+  <text class="eco-t" x="522" y="332">short-lived authority per turn.</text>
+  <text class="eco-t" x="522" y="364">The model never sees</text>
+  <text class="eco-t" x="522" y="384">the key.</text>
+  <rect class="eco-zone" x="800" y="16" width="304" height="528" rx="22"/>
+  <text class="eco-k" x="824" y="48">Company server</text>
+  <rect class="eco-box" x="824" y="68" width="256" height="300" rx="18"/>
+  <text class="eco-h" x="846" y="102">Agent Studio</text>
+  <text class="eco-t" x="846" y="132">Members, keys, budgets</text>
+  <text class="eco-t" x="846" y="152">and daily usage.</text>
+  <text class="eco-t" x="846" y="186">The team's Harness:</text>
+  <text class="eco-label-lime" x="846" y="210">plan · checks · review</text>
+  <text class="eco-t" x="846" y="244">A model for each role:</text>
+  <text class="eco-label-lime" x="846" y="268">main · research · review</text>
+  <text class="eco-t" x="846" y="302">Each role its own model,</text>
+  <text class="eco-t" x="846" y="322">reasoning set by the Harness.</text>
+  <rect class="eco-box" x="824" y="392" width="256" height="128" rx="18"/>
+  <text class="eco-h" x="846" y="426">Company models</text>
+  <text class="eco-t" x="846" y="454">Claude, GPT, DeepSeek, Kimi,</text>
+  <text class="eco-t" x="846" y="474">GLM, Qwen… on company keys;</text>
+  <text class="eco-t" x="846" y="494">keys stay on the server.</text>
+  <path class="eco-line" d="M412 300 L 500 300" marker-end="url(#eco-arrow)"/>
+  <text class="eco-label" x="424" y="290">company</text>
+  <path class="eco-line" d="M750 300 C 790 300, 790 220, 824 220" marker-end="url(#eco-arrow)"/>
+  <text class="eco-label" x="748" y="348">one turn</text>
+  <path class="eco-line" d="M952 368 L952 392" marker-end="url(#eco-arrow)"/>
+  <path class="eco-line-lime" d="M412 116 L 500 116" marker-end="url(#eco-arrow-lime)"/>
+  <text class="eco-label-lime" x="420" y="106">personal</text>
+</svg>
+    <figcaption class="diagram-hint">Swipe sideways to see the whole diagram.</figcaption>
+  </figure>
+</section>
+
+<section class="section">
+  <p class="section-kicker">Parts</p>
+  <h2 id="parts">Each part does one job</h2>
+  <div class="grid cols-2">
+    <article class="card">
+      <h3 id="piagent">Piagent</h3>
+      <p>The coding agent in Terminal (<span class="inline-code">pi</span>) and in the browser (<span class="inline-code">piagent dashboard</span>). Both share one history: start in Terminal, follow it in the browser.</p>
+    </article>
+    <article class="card">
+      <h3 id="guard">Guard</h3>
+      <p>Checks every tool call before it runs: protected files such as <span class="inline-code">.env</span>, permission profiles, oversized files, edits on a stale read. Push, publish and network commands wait for your one-time approval.</p>
+    </article>
+    <article class="card">
+      <h3 id="agent-watch">Agent Watch</h3>
+      <p>A macOS app that keeps the company key in Keychain and imports the configuration for Piagent. Each turn gets short-lived authority; the model and its commands never read the key.</p>
+    </article>
+    <article class="card">
+      <h3 id="agent-studio">Agent Studio</h3>
+      <p>The company server: members, keys, budgets, daily usage and the team's Harness. Studio picks the model for each role (main, research, review) and the reasoning level.</p>
+    </article>
+  </div>
+</section>
+
+<section class="section">
+  <p class="section-kicker">One company turn</p>
+  <h2 id="one-turn">From a message to "A check passed · Review found no blocking issue"</h2>
+  <div class="steps">
+    <article class="step"><div><h3>You write the request</h3><p>In plain language, with <span class="inline-code">agent-watch-auto</span> from the Company group.</p></div></article>
+    <article class="step"><div><h3>Studio grants one run</h3><p>Agent Watch asks for short-lived authority; Studio picks the main agent's model from the team's Harness.</p></div></article>
+    <article class="step"><div><h3>The agent works in a sandbox</h3><p>It reads, edits and runs commands in the project without network. When a command needs the internet it asks you to approve that one command.</p></div></article>
+    <article class="step"><div><h3>The Harness checks</h3><p>If no check passed on the final code it asks for one; then a subagent reviews the change. Blocking findings go back to the agent, up to the rounds the team set.</p></div></article>
+    <article class="step"><div><h3>The outcome sits under the answer</h3><p>For example "A check passed on the final code · Review found no blocking issue". Stop at any time and Continue later.</p></div></article>
+  </div>
+  <figure class="shot">
+    <img src="/assets/shots/company-review-running.jpg" alt="During the review: the header shows Subagent 1/2 and Stop is still available" loading="lazy" width="1600" height="1000">
+    <figcaption>While the review runs: the header shows Subagent 1/2, the Workspace column shows 1/2 running, and Stop still works.</figcaption>
+  </figure>
+</section>
+
+<section class="section">
+  <p class="section-kicker">Choosing a mode</p>
+  <h2 id="choose">When to use personal, when to use company</h2>
+  <div class="table-wrap"><table>
+    <thead><tr><th></th><th>Personal</th><th>Company</th></tr></thead>
+    <tbody>
+      <tr><td>Models</td><td>The account you signed in with (Codex, Claude, Copilot…)</td><td>Chosen by the company in Studio, per role</td></tr>
+      <tr><td>Keys</td><td>Managed by Pi on your machine</td><td>On the server and in Keychain, never in the project</td></tr>
+      <tr><td>Checks</td><td>The guard; you decide when to run tests</td><td>The guard, the sandbox, and the Harness asking for checks and a review</td></tr>
+      <tr><td>Network for commands</td><td>As on your machine; push and publish wait for approval</td><td>Off; opened for one command when you approve it</td></tr>
+      <tr><td>Cost</td><td>Your plan</td><td>The company budget, with usage in Studio</td></tr>
+    </tbody>
+  </table></div>
+  <div class="callout ok-callout"><strong>Getting started</strong><p>Personal: install with the <a href="/en/quickstart">Quickstart</a>, then run <span class="inline-code">piagent dashboard</span>. Company: open Agent Watch, the Studio tab, connect the key and import the configuration for Piagent; <span class="inline-code">agent-watch-auto</span> then appears in the Company group.</p></div>
+</section>

package/docs-site/content/en/index.html

@@ -1,8 +1,8 @@
 <section class="hero">
-  <p class="eyebrow">Team operating docs</p>
-  <h1>A reusable Pi runtime for every project.</h1>
+  <p class="eyebrow">Piagent 1.9.1</p>
+  <h1>A coding agent for the whole team, checked at every step.</h1>
   <p>
-    These docs bring installation, profiles, permissions, MCP, security, and workflows into one place. A new team member can find the right command, choose a safe mode, and understand the operating boundary without rebuilding the process in a prompt.
+    One dashboard for Terminal and the browser. Use models with your own account, or the company's models through Agent Watch and Agent Studio. The guard checks every tool call; in company mode the team's Harness asks for checks, has a subagent review the change and reports the outcome right under the answer.
   </p>
   <div class="owner-strip" aria-label="Project information">
     <span class="owner-label">Project links</span>
@@ -12,14 +12,24 @@
   </div>
   <div class="hero-actions">
     <a class="button primary" href="/en/quickstart">Get started</a>
-    <a class="button" href="/en/whats-new">What’s new</a>
+    <a class="button" href="/en/ecosystem">Ecosystem</a>
+    <a class="button" href="/en/whats-new">What’s new in 1.9.1</a>
     <a class="button" href="/en/commands">View commands</a>
-    <a class="button" href="/en/mcp">MCP</a>
   </div>
 </section>
 
 <section class="section">
-  <p class="section-kicker">Production V1 · v1.6.0 public regression evidence</p>
+  <p class="section-kicker">Release 1.9.0</p>
+  <h2 id="release-1-9-0">One company-mode turn</h2>
+  <p class="section-lead">You write the request. The agent reads, edits and runs the tests in a sandbox; a subagent reviews the change; the last line states the outcome. 13 of 13 live scenarios pass on the final install, and 27 of 27 browser tests.</p>
+  <figure class="shot">
+    <img src="/assets/shots/company-run-done.jpg" alt="Piagent dashboard: a company-mode turn with read, edit and test steps and the line A check passed on the final code, Review found no blocking issue" width="1600" height="1000">
+    <figcaption>The Piagent dashboard in company mode. See the whole picture in <a href="/en/ecosystem">Ecosystem</a> and every change in <a href="/en/whats-new">What’s new</a>.</figcaption>
+  </figure>
+</section>
+
+<section class="section">
+  <p class="section-kicker">Production V1 · historical evidence from v1.6.0</p>
   <h2 id="evidence">Measured, not asserted</h2>
   <p class="section-lead">Release-bound run <code>production-v1-20260824T040017Z-05b7cf</code> measured 108 sessions on GPT-5.6 Luna Medium at tag <code>v1.6.0</code>, exact commit <code>3bba8f0b3ff521bc2a355e1f6bef6d1bbdc09511</code>, with Piagent compared against <code>codex-cli</code>.</p>
 
@@ -79,14 +89,19 @@ piagent-setup</code></pre>
   <h2 id="where-to-start">Where to start</h2>
   <div class="card-grid">
     <a class="doc-card" href="/en/whats-new">
-      <span class="card-kicker">Product update</span>
+      <span class="card-kicker">Release 1.9.1</span>
       <h3>What’s new</h3>
-      <p>Runtime truth, task trajectories, recovery, helper policy, and fail-closed completion receipts — including what runs automatically and what is opt-in.</p>
+      <p>Scout and verify subagents and web search for every role through the search pool; earlier in 1.9.0: plain-language requests and the team's Harness.</p>
+    </a>
+    <a class="doc-card" href="/en/ecosystem">
+      <span class="card-kicker">Get started</span>
+      <h3>Ecosystem</h3>
+      <p>Piagent, Agent Watch and Agent Studio: what runs where, and when to use personal or company mode.</p>
     </a>
     <a class="doc-card" href="/en/quickstart">
       <span class="card-kicker">Get started</span>
       <h3>Quickstart</h3>
-      <p>Install, open a repository, onboard context, choose a profile and permission mode, run the first task, and verify before handoff.</p>
+      <p>Install, open a repository, choose its profile and permissions, then make the first request in plain language.</p>
     </a>
     <a class="doc-card" href="/en/scope">
       <span class="card-kicker">Get started</span>

package/docs-site/content/en/quickstart.html

@@ -47,12 +47,11 @@ pi</code></pre>
 
     <article class="step">
       <div>
-        <h3 id="onboard-context">Onboard context</h3>
-        <p>Run this once in a new repository to record project context, verification matrices, and protected areas under <span class="inline-code">.pi/</span>. <span class="inline-code">/onboard</span> opens the menu and status; <span class="inline-code">run</span> launches the project-reading workflow.</p>
+        <h3 id="onboard-context">Let the agent read the project</h3>
+        <p>In a new repository, ask the agent to read the project (read-only) and record its project context under <span class="inline-code">.pi/</span>. No separate command: plain language is enough.</p>
         <div class="command-card">
-          <header><span>Onboard</span><button class="clip-btn" data-clip="/onboard&#10;/onboard run">Copy</button></header>
-          <pre><code>/onboard
-/onboard run</code></pre>
+          <header><span>Read the project</span><button class="clip-btn" data-clip="Inspect this project read-only and record its project context.">Copy</button></header>
+          <pre><code>Inspect this project read-only and record its project context.</code></pre>
         </div>
       </div>
     </article>
@@ -84,20 +83,19 @@ pi</code></pre>
     <article class="step">
       <div>
         <h3 id="run-workflow">Run a workflow</h3>
-        <p>Use the command that matches the intent so the agent does not spend context rediscovering the process. Start a fresh session for context-heavy work.</p>
+        <p>State the work and the intent (edit, read-only, plan first) in plain language. Start a new session with <span class="inline-code">/new</span> for context-heavy work.</p>
         <div class="command-card">
-          <header><span>Workflow</span><button class="clip-btn" data-clip="/workflow task Implement the requested bounded change.&#10;/workflow review current diff&#10;/fresh task Implement the requested bounded change.">Copy</button></header>
-          <pre><code>/workflow task Implement the requested bounded change.
-/workflow review current diff
-/fresh task Implement the requested bounded change.</code></pre>
+          <header><span>Assign work</span><button class="clip-btn" data-clip="Implement the requested change and run the project tests.&#10;Review the current diff. Read-only.">Copy</button></header>
+          <pre><code>Implement the requested change and run the project tests.
+Review the current diff. Read-only.</code></pre>
         </div>
       </div>
     </article>
 
     <article class="step">
       <div>
-        <h3 id="verify-before-handoff">Verify before handoff</h3>
-        <p>The final gate trusts only commands that actually ran, exited successfully, and matched the verification plan. After pinning or upgrading a version, run doctor in the project:</p>
+        <h3 id="verify-before-handoff">Check before you hand over</h3>
+        <p>Ask the agent to run the project's checks (tests, type check, build) and read the real output; in company mode the Harness asks for this itself. After pinning or upgrading a version, run doctor in the project:</p>
         <div class="command-card">
           <header><span>Doctor</span><button class="clip-btn" data-clip="piagent-doctor">Copy</button></header>
           <pre><code>piagent-doctor</code></pre>

package/docs-site/content/en/security.html

@@ -5,7 +5,7 @@
     <article class="card"><h3 id="secret-redaction">Secret redaction</h3><p>Text tool output passes through a redactor for provider tokens, secret keyword patterns, and common sensitive values. Current benchmarks are synthetic and internal; the model continues to evolve.</p></article>
     <article class="card"><h3 id="capability-lock">Capability lock</h3><p>Capability packs have digests and tamper detection. An invalid lock fails closed and never expands permissions automatically.</p></article>
     <article class="card"><h3 id="human-action-gate">Human-action gate</h3><p>Destructive or external-provider actions require explicit operator confirmation even in full-access mode. The gate covers direct tools, decoded MCP proxy calls, GitHub CLI writes, and non-GET HTTP shell forms.</p></article>
-    <article class="card"><h3 id="verify-evidence">Verification evidence</h3><p>A completed handoff requires observed bash results, not an unsupported statement that tests passed.</p></article>
+    <article class="card"><h3 id="verify-evidence">Real checks</h3><p>In company mode the Harness only counts a check that actually ran and passed on the final code; saying “tested” is not enough.</p></article>
   </div>
 
   <div class="callout">

package/docs-site/content/en/team.html

@@ -1,10 +1,10 @@
 <section class="section">
   <div class="split">
-    <article class="card"><h3 id="do">Do</h3><p>Run <span class="inline-code">/onboard run</span>, apply <span class="inline-code">/profile auto</span>, use <span class="inline-code">/workflow</span>, execute real verification, and state blockers clearly.</p></article>
+    <article class="card"><h3 id="do">Do</h3><p>Ask the agent to read the project and record its context, apply <span class="inline-code">/profile auto</span>, assign work in plain language, run real checks, and state blockers clearly.</p></article>
     <article class="card"><h3 id="avoid">Avoid</h3><p>Do not place tokens, authentication files, caches, sessions, private examples, or project-specific business logic in the public core package.</p></article>
   </div>
   <div class="callout ok-callout">
-    <strong>Handoff standard</strong>
+    <strong>The final answer</strong>
     <p>A final response should briefly state what changed, which verification ran, whether subagents were used, and which risks or next steps require review.</p>
   </div>
   <div class="callout">