@prjct.app/pi-signals 0.1.0 → 0.1.2

package/CHANGELOG.md

@@ -1,3 +1,12 @@
+## 0.1.2 (2026-10-09)
+
+- No system-prompt rule. signal_report no longer asks every session to watch Pi and extensions; its description says what it records and when to inspect targets first.
+
+## 0.1.1 (2026-10-07)
+
+- Bind the standalone npm CLI to the Pi host's public SDK peers, which Pi intentionally omits from extension installs. Record the host location on session start and use the same bootstrap for scheduled runs.
+- Reject repair candidates that changed their base through an agent-created commit before coordinator verification.
+
 ## 0.1.0 (2026-10-07)
 
 - Capture latency regressions, crashes and concrete response-quality regressions in global `.prjct/shared/signals/signals.sqlite`, with original evidence, versions and model/reasoning provenance.

package/README.md

@@ -13,10 +13,12 @@ The MVP retains verified commits and branches locally. It does **not** create Gi
 ## Installation
 
 ```sh
-pi install npm:@prjct.app/pi-signals@0.1.0
+pi install npm:@prjct.app/pi-signals@0.1.1
 ```
 
-Node >=22.19 and Pi >=1.0.4 are required. The CLI is shipped inside the npm package; no source checkout or development loader is required. SDKs are peer dependencies and privacy protection comes from the independent `@prjct.app/pi-secrets` dependency. Existing sessions load the extension on an idle `/reload`; installation does not restart them.
+Node >=22.19 and Pi >=1.0.4 are required. The CLI is shipped inside the npm package; no source checkout or development loader is required. SDKs are peer dependencies and privacy protection comes from the independent `@prjct.app/pi-secrets` dependency. Existing sessions load the extension on an idle `/reload`; installation does not restart them. On session start the extension records Pi's public SDK location in `host.json` so the standalone CLI uses the host-provided peers. Before the first Pi load, `PI_SIGNALS_SDK_ROOT` can explicitly supply that installed SDK directory.
+
+Pi's private npm bin directory may not be on your shell PATH. In that case use `~/.pi/agent/npm/node_modules/.bin/pi-signals` (adjust for `PI_CODING_AGENT_DIR`). The scheduler records the absolute npm entry point and does not depend on a PATH alias.
 
 ## Agent tools and commands
 

package/bin/cli.mjs

@@ -0,0 +1,23 @@
+#!/usr/bin/env node
+import { registerHooks } from 'node:module';
+import { readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+// Pi omits its SDK peers when installing extension packages. Bind those peers to
+// the engine that loaded the extension, using normal Node resolution from its root.
+const peers = new Set(['@earendil-works/pi-coding-agent', '@earendil-works/pi-ai', 'typebox']);
+try {
+  const root = process.env.PI_SIGNALS_SDK_ROOT ?? JSON.parse(readFileSync(join(process.env.PRJCT_HOME ?? join(homedir(), '.prjct'), 'shared/signals/host.json'), 'utf8')).packageDir;
+  const manifest = JSON.parse(readFileSync(join(root, 'package.json'), 'utf8'));
+  if (manifest.name !== '@earendil-works/pi-coding-agent') throw new Error('Expected the installed Pi SDK package');
+  const parentURL = pathToFileURL(join(root, 'package.json')).href;
+  registerHooks({ resolve(specifier, context, nextResolve) {
+    return nextResolve(specifier, peers.has(specifier) ? { ...context, parentURL } : context);
+  } });
+} catch {
+  console.error('Load pi-signals in Pi once, or set PI_SIGNALS_SDK_ROOT to the installed Pi SDK package directory.');
+  process.exit(1);
+}
+await import('../dist/cli.mjs');

package/dist/cli.mjs

@@ -923,6 +923,7 @@ ${JSON.stringify({ issue })}`,
   });
   if (!state.fix) return blocked("No structured repair candidate was provided.");
   if (!repo.tests.length) return blocked("No trusted package validation commands are configured.");
+  if (await must(path, ["git", "rev-parse", "HEAD"], signal) !== base) return blocked("The agent changed the candidate base before verification; no precommitted changes are accepted.");
   const fix = state.fix;
   const baselinePath = join6(stateDir(), "worktrees", `baseline-${issue.id.slice(0, 12)}-${Date.now()}`);
   await must(repo.path, ["git", "worktree", "add", "--detach", baselinePath, base], signal);
@@ -1109,7 +1110,7 @@ import { fileURLToPath } from "node:url";
 async function main() {
   const [action = "status", argument] = process.argv.slice(2);
   if (action === "schedule" && argument === "install") {
-    return (await Promise.resolve().then(() => (init_scheduler(), scheduler_exports))).installSchedule(fileURLToPath(import.meta.url));
+    return (await Promise.resolve().then(() => (init_scheduler(), scheduler_exports))).installSchedule(fileURLToPath(new URL("../bin/cli.mjs", import.meta.url)));
   }
   if (action === "once") {
     const controller = new AbortController();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prjct.app/pi-signals",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Local failure signals, daily agent-owned triage and verified repair candidates for Pi.",
   "type": "module",
   "license": "MIT",
@@ -28,7 +28,8 @@
     "README.md",
     "LICENSE",
     "CHANGELOG.md",
-    "dist"
+    "dist",
+    "bin"
   ],
   "dependencies": {
     "@prjct.app/pi-secrets": "^0.2.6"
@@ -52,9 +53,10 @@
     "test": "node --import ./tests/isolate.mjs --import tsx --test --test-concurrency=2 tests/*.test.ts",
     "check:package": "npm pack --dry-run --ignore-scripts",
     "build": "node scripts/build.mjs",
-    "prepack": "npm run build"
+    "prepack": "npm run build",
+    "pretest": "npm run build"
   },
   "bin": {
-    "pi-signals": "dist/cli.mjs"
+    "pi-signals": "bin/cli.mjs"
   }
 }

package/src/cli.ts

@@ -6,7 +6,7 @@ import { SignalStore } from './store.ts';
 async function main() {
   const [action = 'status', argument] = process.argv.slice(2);
   if (action === 'schedule' && argument === 'install') {
-    return (await import('./scheduler.ts')).installSchedule(fileURLToPath(import.meta.url));
+    return (await import('./scheduler.ts')).installSchedule(fileURLToPath(new URL('../bin/cli.mjs', import.meta.url)));
   }
   if (action === 'once') {
     const controller = new AbortController();

package/src/host.ts

@@ -0,0 +1,15 @@
+import { mkdirSync, readFileSync, writeFileSync, renameSync } from 'node:fs';
+import { join } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { getPackageDir, VERSION } from '@earendil-works/pi-coding-agent';
+import { stateDir } from './config.ts';
+
+/** Record only the host's public SDK location, never credentials or model data. */
+export function rememberHost() {
+  const root = stateDir(), file = join(root, 'host.json');
+  const value = JSON.stringify({ packageDir: getPackageDir(), version: VERSION }) + '\n';
+  try { if (readFileSync(file, 'utf8') === value) return; } catch { /* First load. */ }
+  mkdirSync(root, { recursive: true, mode: 0o700 });
+  const temporary = join(root, `host-${randomUUID()}.tmp`);
+  writeFileSync(temporary, value, { mode: 0o600 }); renameSync(temporary, file);
+}

package/src/index.ts

@@ -4,6 +4,7 @@ import { config, targets, databasePath } from './config.ts';
 import { hideLocalPaths, prepareReport } from './report.ts';
 import { InspectSchema, OBSERVATION, ReportSchema } from './schema.ts';
 import { SignalStore } from './store.ts';
+import { rememberHost } from './host.ts';
 
 const defaults = { config, targets, protect: protectOutboundData, databasePath };
 export type SignalsDependencies = Partial<typeof defaults>;
@@ -11,6 +12,7 @@ const result = (value: unknown) => ({ content: [{ type: 'text' as const, text: J
 const page = <T>(rows: T[], offset: number) => ({ items: rows.slice(0, 20), nextOffset: rows.length > 20 ? offset + 20 : null });
 export function installSignals(pi: ExtensionAPI, dependencies: SignalsDependencies = {}) {
   const deps = { ...defaults, ...dependencies };
+  pi.on('session_start', () => { try { rememberHost(); } catch { /* A host path hint must not interrupt an active session. */ } });
   const catalog = (ctx: ExtensionContext) => {
     const settings = deps.config();
     if (!settings.enabled) throw new Error('Signals is disabled by global configuration.');
@@ -18,8 +20,8 @@ export function installSignals(pi: ExtensionAPI, dependencies: SignalsDependenci
   };
   pi.registerTool({
     name: 'signal_report', label: 'Record failure signal',
-    description: 'Record a local issue in the global .prjct database for an installed extension or Pi: latency regression, crash, or concrete response-quality regression. Supply a stable defect signature, exact session evidence, reproduction steps, expected and actual behavior. No GitHub or model request occurs during capture.',
-    promptGuidelines: ['When you detect a latency regression, crash, or concrete response-quality regression in Pi or an installed extension, record minimal evidence with signal_report, then continue the original task. Use signal_inspect for targets. Detection is a signal, not proof of causality; the active agent and later triage decide.'],
+    // No promptGuidelines: a system-prompt rule asked every session to watch Pi, whatever the task.
+    description: 'Record a local issue in the global .prjct database for an installed extension or Pi: latency regression, crash, or concrete response-quality regression. Supply a stable defect signature, exact session evidence, reproduction steps, expected and actual behavior. Find targets with signal_inspect first; a detection is a signal, not proof of causality. No GitHub or model request occurs during capture; afterwards, continue the original task.',
     parameters: ReportSchema,
     async execute(_id, input, _signal, _update, ctx) {
       const target = catalog(ctx).find(target => target.id === input.target);

package/src/repair.ts

@@ -32,6 +32,7 @@ export async function repair(issue: LocalIssue, repo: Repository, path: string,
   });
   if (!state.fix) return blocked('No structured repair candidate was provided.');
   if (!repo.tests.length) return blocked('No trusted package validation commands are configured.');
+  if (await must(path, ['git', 'rev-parse', 'HEAD'], signal) !== base) return blocked('The agent changed the candidate base before verification; no precommitted changes are accepted.');
   const fix = state.fix;
   const baselinePath = join(stateDir(), 'worktrees', `baseline-${issue.id.slice(0, 12)}-${Date.now()}`);
   await must(repo.path, ['git', 'worktree', 'add', '--detach', baselinePath, base], signal);