@preapexis/piexis 0.1.2

package/lib/task-worktree-policy.ts

@@ -0,0 +1,56 @@
+import { taskGit, disabledTaskFilters } from "./task-git.ts";
+import { lstat, readFile, realpath, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { basename, dirname, isAbsolute, relative, resolve } from "node:path";
+
+export type RecordedWorktree = { id: string; repository?: string; worktree?: string };
+
+type Marker = { version: 1; id: string; repository: string; worktree: string };
+
+function isWithin(child: string, parent: string) {
+  const value = relative(parent, child);
+  return value === "" || (!value.startsWith("..") && !isAbsolute(value));
+}
+
+async function git(args: string[], cwd: string): Promise<string> {
+  return (await taskGit(args, cwd)).trim();
+}
+
+async function commonGitDir(cwd: string) {
+  const value = await git(["rev-parse", "--git-common-dir"], cwd);
+  return realpath(isAbsolute(value) ? value : resolve(cwd, value));
+}
+
+export async function createWorktreeMarker(parent: string, task: Required<RecordedWorktree>) {
+  const marker: Marker = { version: 1, id: task.id, repository: await realpath(task.repository), worktree: task.worktree };
+  await writeFile(`${parent}/.piexis-task.json`, `${JSON.stringify(marker)}\n`, { mode: 0o600, flag: "wx" });
+}
+
+/** Reject corrupt metadata before any destructive worktree cleanup. */
+export async function validateTaskWorktree(task: RecordedWorktree): Promise<{ worktree: string; parent: string; dirty: boolean }> {
+  if (!task.worktree || !task.repository) throw new Error("Task has no recorded repository worktree.");
+  const parent = dirname(task.worktree);
+  if (basename(task.worktree) !== "worktree" || !basename(parent).startsWith("piexis-task-"))
+    throw new Error("Refusing to clean a worktree not created by Piexis.");
+  const [canonicalTmp, canonicalParent, canonicalRepository] = await Promise.all([realpath(tmpdir()), realpath(parent), realpath(task.repository)]);
+  if (!isWithin(canonicalParent, canonicalTmp)) throw new Error("Refusing to clean a worktree outside the system temporary directory.");
+  const markerPath = `${canonicalParent}/.piexis-task.json`;
+  let marker: Marker;
+  try { marker = JSON.parse(await readFile(markerPath, "utf8")); }
+  catch { throw new Error("Refusing to clean a worktree without a valid Piexis marker."); }
+  if (marker.version !== 1 || marker.id !== task.id || marker.worktree !== task.worktree || marker.repository !== canonicalRepository)
+    throw new Error("Refusing to clean a worktree whose Piexis marker does not match task metadata.");
+  const stat = await lstat(task.worktree);
+  if (!stat.isDirectory() || stat.isSymbolicLink()) throw new Error("Recorded worktree is not a normal directory.");
+  const worktree = await realpath(task.worktree);
+  if (worktree !== resolve(canonicalParent, "worktree")) throw new Error("Recorded worktree path does not match its Piexis task directory.");
+  const [topLevel, taskGitDir, repositoryGitDir] = await Promise.all([
+    git(["rev-parse", "--show-toplevel"], worktree).then(realpath),
+    commonGitDir(worktree),
+    commonGitDir(canonicalRepository)
+  ]);
+  if (topLevel !== worktree || taskGitDir !== repositoryGitDir)
+    throw new Error("Recorded path is not a Git worktree associated with the expected repository.");
+  const dirty = Boolean(await git([...await disabledTaskFilters(worktree), "status", "--porcelain"], worktree));
+  return { worktree, parent: canonicalParent, dirty };
+}

package/package.json

@@ -0,0 +1,51 @@
+{
+  "name": "@preapexis/piexis",
+  "version": "0.1.2",
+  "type": "module",
+  "description": "Extensions, skills, prompts, and themes for pi",
+  "keywords": [
+    "pi-package"
+  ],
+  "license": "MIT",
+  "engines": {
+    "node": ">=22.19.0"
+  },
+  "peerDependencies": {
+    "@earendil-works/pi-coding-agent": "*",
+    "@earendil-works/pi-tui": "*",
+    "typebox": "*"
+  },
+  "scripts": {
+    "test": "node --test tests/*.test.mjs",
+    "test:runtime": "node --test tests/runtime/*.test.mjs",
+    "check": "tsc --noEmit",
+    "eval:permissions": "node eval/permissions.mjs",
+    "test:sandbox": "PIEXIS_REQUIRE_SANDBOX=1 node --test tests/mode-sandbox.test.mjs"
+  },
+  "pi": {
+    "extensions": [
+      "./extensions/ask-question.ts",
+      "./extensions/background-tasks.ts",
+      "./extensions/glob.ts",
+      "./extensions/mode.ts",
+      "./extensions/ui.ts"
+    ],
+    "skills": [
+      "./skills"
+    ],
+    "prompts": [
+      "./prompts"
+    ],
+    "themes": [
+      "./themes"
+    ]
+  },
+  "dependencies": {
+    "@anthropic-ai/sandbox-runtime": "0.0.77",
+    "jiti": "2.6.1"
+  },
+  "devDependencies": {
+    "@types/node": "24.10.0",
+    "typescript": "5.9.3"
+  }
+}

package/prompts/commit.md

@@ -0,0 +1,7 @@
+---
+description: Write a concise, accurate commit message from the current Git changes
+---
+
+Review the current Git changes using `git status` and the relevant diff. Write one concise, clear commit message that accurately summarizes the overall change for other developers.
+
+Use Conventional Commits when appropriate (`type(scope): summary`). Do not invent details, mention unrelated files, or include a body unless it adds necessary context. Return only the commit message.

package/prompts/init.md

@@ -0,0 +1,66 @@
+---
+description: Create or improve concise, repository-backed AGENTS.md guidance
+argument-hint: "[focus or constraints]"
+---
+
+Initialize agent guidance in `./AGENTS.md` for the current project. Inspect first, then make the smallest justified change. The result should help a future agent work correctly without repeating your investigation.
+
+## Optional user guidance
+
+$ARGUMENTS
+
+## 1. Establish scope and safety
+
+- Target the current directory. Do not silently switch to a Git ancestor, nested package, or another worktree.
+- Check the working-tree status when Git is available. Preserve unrelated changes, staged work, and intentional deletions; do not reset, clean, stage, or commit anything. If `AGENTS.md` is marked deleted and the user's intent is unclear, ask before recreating it.
+- Only create or edit `AGENTS.md`. Do not repair source, tests, manifests, or other documentation as part of this task.
+- Respect the active permission mode. In Plan/read-only mode, report the proposed changes instead of writing. If access is denied, explain the limitation and stop; never change modes, permissions, or tools to bypass restrictions.
+
+## 2. Inspect selectively
+
+Read the minimum evidence needed to produce reliable guidance:
+
+- Existing `AGENTS.md` in the current directory and applicable parent directories.
+- Other applicable project guidance, such as `CLAUDE.md`, `GEMINI.md`, `.github/copilot-instructions.md`, scoped instruction files, and repository rule files. Honor instruction priority and scope; do not copy another agent's tool-specific instructions or treat bundled examples and skills as universal repository rules.
+- The project README, package/build manifests, relevant tool configuration, and CI workflows when present.
+- A small representative sample of source files and tests that demonstrates architecture, conventions, and validation workflows. Follow relevant references rather than reading every file.
+
+Exclude secrets, credential files, dependency/vendor directories, generated output, build artifacts, caches, unrelated worktrees, and unrelated large files. Do not dump environment variables or broad configuration directories. Git history may clarify missing guidance, but historical files are not evidence that a command or implementation still exists.
+
+## 3. Distill useful project guidance
+
+Include only sections that are supported and useful:
+
+- **Overview and layout:** what the project does, major modules, and the few paths an agent needs to navigate it.
+- **Commands:** exact setup, build, lint, type-check, format, and test commands found in repository configuration or documentation. Include required working directories or prerequisites when documented. Identify the package manager from repository evidence, not preference.
+- **Conventions:** language/tooling choices and non-obvious patterns demonstrated by source or explicit standards.
+- **Constraints:** important architecture, security, generated-code, dependency, CI, and contribution rules.
+
+Prefer short bullets and copyable commands over an exhaustive file inventory, generic coding advice, or copied README content. Do not duplicate applicable parent guidance unless a local clarification is necessary. Omit unsupported sections instead of filling them with guesses.
+
+## 4. Reconcile evidence and preserve intent
+
+- Preserve valid instructions and user-authored content. Make targeted additions or corrections; replace the whole file only when it is clearly obsolete or invalid. Leave an already sufficient file unchanged.
+- Distinguish intended rules from implemented behavior. If documentation and code disagree, do not silently weaken a security or contribution requirement, or present an unimplemented guarantee as fact. Record consequential discrepancies and flag unresolved conflicts.
+- Check that referenced paths, scripts, and test targets exist. A declared script is not proof that its dependencies or tests are available; an absent CI workflow is not evidence of CI coverage.
+- Never invent commands, conventions, directory roles, security guarantees, or workflow requirements. Do not describe deleted files or historical test coverage as current.
+- Keep transient checkout details and this run's inspection log in the final report, unless a caveat is needed in `AGENTS.md` to prevent an incorrect command or unsafe assumption.
+
+## 5. Review without unnecessary execution
+
+This is documentation work. Inspect commands without executing them by default. Do not install dependencies or run deployment, publishing, migration, destructive, or other side-effecting commands merely to verify guidance.
+
+Before finishing:
+
+- Review the resulting file and diff for accuracy, contradictions, unnecessary duplication, and accidental disclosure.
+- Confirm that your edits are limited to `AGENTS.md` and unrelated working-tree changes remain untouched.
+- Distinguish commands discovered from checks actually executed. Never claim a check passed unless you ran it successfully; skipped or empty test runs do not establish coverage or security.
+
+## 6. Report briefly
+
+State:
+
+- Whether `AGENTS.md` was created, updated, left unchanged, or blocked.
+- The main guidance added or corrected.
+- Which existing guidance files were considered.
+- Important uncertainties, stale or missing tooling, and checks run or explicitly not run.

package/prompts/summary.md

@@ -0,0 +1,14 @@
+---
+description: Summarize the current session concisely
+---
+
+Review the entire current session and produce a concise, plain-language summary.
+
+Include only:
+- **Done:** completed work and important outcomes
+- **Decisions:** key choices or conclusions
+- **Open:** unresolved issues, blockers, or unanswered questions
+- **Next:** suggested next steps, if any
+- **Prompts:** the exact number of user-authored prompts/messages in this session
+
+Use short bullets. Omit empty sections. Do not invent details or count assistant/tool messages as prompts.

package/skills/claude-api/LICENSE.txt

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 Anthropic, PBC.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.