@rosetears/aili-pi 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Rosetears contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,109 @@
+# AILI for Pi
+
+`@rosetears/aili-pi` is a Pi Package that adds ROSE delivery routing, five workflow prompts, a pinned AILI skill snapshot, native Pi integrations, and diagnostics to the official `pi` CLI. It does not replace or fork Pi.
+
+## Requirements
+
+- Linux
+- Node.js 22.19.0 or newer
+- Pi 0.81.1 or newer with the Package and Extension APIs used by this release
+
+macOS and native Windows are not supported by this bootstrap and fail before installation mutation. Theme, TUI, and font resources are deferred to a separate change.
+
+## Install
+
+Run the repository bootstrap:
+
+```sh
+./install.sh
+```
+
+If Pi is absent, the script downloads only `https://pi.dev/install.sh` over HTTPS and executes it with your user authority. The upstream “latest installer” is trusted through ordinary TLS because no accepted checksum/signature mechanism is currently available. Review that boundary before use in a sensitive environment.
+
+The script preserves an existing compatible Pi by default. To request Pi's own self-update first:
+
+```sh
+./install.sh --update-pi
+```
+
+Equivalent package lifecycle commands:
+
+```sh
+pi install npm:@rosetears/aili-pi@latest
+pi list
+pi update npm:@rosetears/aili-pi
+pi remove npm:@rosetears/aili-pi
+```
+
+Removal is destructive for this Package. It does not remove Pi and must not be presented as rollback when replacing a pre-existing AILI installation.
+
+### Explicit global resources
+
+The package does not write global AILI resources during extension load. After reviewing the target, explicitly run:
+
+```text
+/aili-install-global-resources
+```
+
+That command creates or updates only the AILI marker block in `~/.pi/agent/APPEND_SYSTEM.md` and installs the 19 packaged profiles at `~/.pi/agent/agents/aili/`. It preserves unrelated prompt content, rejects malformed markers or an unowned profile collision, and reports stale profiles without pruning them.
+
+## Commands and modes
+
+- `/ideate`, `/define`, `/build`, `/ship`: the four AILI delivery modes.
+- `/local-review`: a standalone local audit, not a fifth lifecycle mode.
+- `/aili-doctor` or `/aili-doctor --json`: human or machine-readable health evidence.
+- `/perm`: upstream `pi-permission-modes` control for `Default`, `Plan`, `Build`, and `YOLO`.
+- `Alt+M`: upstream mode-cycle shortcut.
+- `/aili-install-global-resources`: explicit installation/update of marker-owned global ROSE and AILI-role resources.
+
+`pi-permission-modes` owns mode persistence, prompts, and sandbox behavior. A Linux disposable fixture verified its stock Build profile through installed Bubblewrap, while an incompatible Git-worktree fixture visibly fell back to confirmation. This is not an isolation guarantee. `YOLO` is an upstream unrestricted mode and must be treated accordingly.
+
+## Native integrations and side effects
+
+- `pi-web-access@0.13.0` provides its complete upstream web-search, content-fetch, curator, clone/PDF/video, and bundled-skill surface. Its provider fallback, network traffic, config/credential paths, clone cache, temporary curator service, downloads, and optional browser-cookie access are upstream behavior; inspect its tool requests and configuration before use.
+- `pi-quota-status@0.3.0` is enabled by default. It may maintain `~/.pi/agent/pi-quota-status/state.json`; `/quota config` creates its configuration template.
+- `pi-permission-modes@2.2.0` provides the permission UI and sandbox degradation behavior above. AILI does not retain `/aili-mode` or `Ctrl+Shift+Alt+A` as competing controls.
+- `@agwab/pi-subagent@0.4.8` owns child spawn, cancellation, JSONL handling, and artifacts. AILI adds only role/tool/path policy projection, a two-child ceiling, and structured-result normalization. AILI children do not expose resume, worktree, background, recursive dispatch, or automatic retry.
+
+## Optional capability packs
+
+The core package does not install optional providers automatically.
+
+- `web-research`: public web retrieval and source verification.
+- `browser-qa`: browser-rendered inspection.
+- `artifact-runtime`: durable artifacts and format transformations.
+- `project-memory`: project-local durable memory after a separate project contract.
+
+When unavailable, runtime and doctor output use explicit `SKIP`/`WARN` results and must not claim the work ran. Enable guidance and side effects are recorded in `manifests/capabilities.json`.
+
+## Security boundary
+
+AILI adds role/tool/path projection and structured-result redaction around the native integrations. Vendor permission and sandbox behavior remains vendor-owned. Neither AILI nor Pi provides a universal OS sandbox: trusted extensions, user-authority processes, ambient network access, and filesystem races remain in the user trust domain. Inspect exact approval targets and do not put credentials in task text.
+
+Child roles are fresh, single-use processes with no resume, chaining, background continuation, recursive delegation, or automatic retry. At most two child processes run concurrently. Output and diagnostics are bounded and redacted; provider/model behavior still depends on the configured Pi environment.
+
+## Provenance and reproducibility
+
+- `upstream/aili-workflows.lock.json` pins the exact canonical 64-skill/471-file snapshot.
+- `manifests/skill-compatibility.json` records one compatibility state per skill.
+- `manifests/roles.json` records the 19 generated Pi role profiles.
+- `manifests/provenance.json`, `manifests/sbom.json`, and `THIRD_PARTY_NOTICES.md` record adapted/reference sources and the exact npm lock inventory.
+
+Verify generated artifacts with:
+
+```sh
+npm run validate:generated
+npm run validate:provenance
+npm run validate:release
+```
+
+## Troubleshooting
+
+- **Unsupported Pi version/API:** update Pi explicitly, then rerun the bootstrap. The script fails before AILI mutation when preflight cannot prove compatibility.
+- **Package install failure:** keep the reported Pi/AILI states distinct. Retry the printed `pi install` command after fixing the cause; do not automatically remove a pre-existing package.
+- **Doctor is non-pass:** inspect the exact `ERROR`, `WARN`, `SKIP`, or `UNVERIFIED` component. Missing optional packs are not core execution success.
+- **Permission shortcut does nothing:** use `/perm`; terminal multiplexers may consume `Alt+M`.
+- **Global resources are non-pass:** run `/aili-install-global-resources` only after reviewing the exact `~/.pi/agent/` targets. A malformed marker or an unowned role collision intentionally leaves files unchanged.
+- **Offline use:** the installed Package embeds the pinned skills and does not fetch `aili-workflows` at runtime. First-time Pi/package installation still requires the relevant package sources.
+
+See `THIRD_PARTY_NOTICES.md` for source and license details. No official endorsement by the Pi maintainers is claimed.

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,64 @@
+# Third-Party Notices
+
+This distribution is MIT-licensed. The following adapted sources and locked development/runtime dependencies retain their own license terms.
+
+## aili-workflows
+
+- Status: adapted
+- Source: https://github.com/Rosetears520/aili-workflows.git
+- Revision: 7eb35f357ad489f5841ee10dac1e44549c1bdb76
+- Version: 0.2.7
+- License: MIT
+- Source files: upstream/aili-workflows.lock.json#files (471 exact skill files), manifests/roles.json#records[].sourcePath (19 exact role source files)
+- Reused symbols/patterns: 64 canonical skill bodies and owned assets, 19 child-role prompt bodies
+- Local changes: skills/** is an exact byte-for-byte snapshot with no semantic overlay; role prompts are generated as Pi frontmatter with explicit tool/capability ceilings and structured output
+
+## @agwab/pi-subagent
+
+- Status: dependency
+- Source: https://github.com/AgwaB/pi-subagent.git
+- Revision: daa7b83819116a62008ad17aa65fcd50fefbafd0
+- Version: 0.4.8
+- License: MIT
+- Source files: src/api.ts, src/runners/headless-model.ts, src/artifacts/result.ts
+- Reused symbols/patterns: runSubagent API, headless lifecycle, artifact envelope
+- Local changes: AILI calls the pinned API through a thin role/path/tool policy adapter; no upstream source is copied
+
+## pi-permission-modes
+
+- Status: dependency
+- Source: https://github.com/wynainfo/pi-permission-modes.git
+- Revision: 23d65d10a53b67043cae42322acf9044d6edb196
+- Version: 2.2.0
+- License: MIT
+- Source files: src/index.ts, permission-mode.defaults.json
+- Reused symbols/patterns: Default/Plan/Build/YOLO, /perm, Alt+M, sandbox degradation
+- Local changes: AILI initializes the pinned upstream extension and does not retain a competing AILI mode command or shortcut
+
+## pi-quota-status
+
+- Status: dependency
+- Source: https://github.com/hafiezul/pi-quota-status.git
+- Revision: 742b3e40b88fbf3d5dcd9d39af96d37bd26bb436
+- Version: 0.3.0
+- License: MIT
+- Source files: src/index.ts, src/paths.ts
+- Reused symbols/patterns: quota footer, /quota, global state maintenance
+- Local changes: AILI initializes the pinned upstream extension; upstream owns quota polling and state files
+
+## pi-web-access
+
+- Status: dependency
+- Source: https://github.com/ttttmr/pi-web-access.git
+- Revision: npm:0.13.0
+- Version: 0.13.0
+- License: MIT
+- Source files: index.ts, skills/
+- Reused symbols/patterns: web_search, fetch_content, get_search_content, curator and bundled librarian skill
+- Local changes: AILI initializes the complete pinned upstream surface through its sole Extension entry; no upstream source is copied
+
+## npm dependency inventory
+
+The exact 350-entry package-lock inventory, versions, integrity values, dependency scope, and declared licenses is recorded in `manifests/sbom.json`.
+
+Runtime dependencies are initialized through the single AILI Extension entry; no third-party source tree is copied into this package.

package/extensions/index.ts

@@ -0,0 +1,6 @@
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import { registerAiliRuntime } from "../src/runtime/index.js";
+
+export default async function ailiPi(pi: ExtensionAPI): Promise<void> {
+  await registerAiliRuntime(pi);
+}

package/install.sh

@@ -0,0 +1,5 @@
+#!/bin/sh
+set -eu
+
+SCRIPT_DIR=$(CDPATH= cd "$(dirname "$0")" && pwd -P)
+exec sh "$SCRIPT_DIR/scripts/bootstrap.sh" "$@"

package/manifests/adapter-evidence.json

@@ -0,0 +1,45 @@
+{
+  "schemaVersion": 1,
+  "records": [
+    {
+      "capability": "repo.read",
+      "status": "native",
+      "owner": "@earendil-works/pi-coding-agent@0.81.1",
+      "sourceRevision": "7eb35f357ad489f5841ee10dac1e44549c1bdb76",
+      "verification": [
+        "vitest run tests/integration/extension-load.test.ts",
+        "vitest run tests/unit/permissions.test.ts"
+      ],
+      "artifacts": [
+        { "path": "package-lock.json", "sha256": "9198e65c8343ddc8eccc5533b4ac5707c482b7e19d6e2724d2a6839150ca7c4f" },
+        { "path": "tests/integration/extension-load.test.ts", "sha256": "1e27e98a557d6d4f77e21f945052d7ec3283564b8df84594cbf0169d4912c828" },
+        { "path": "tests/unit/permissions.test.ts", "sha256": "8c12d4c3fc37e8cefbc5e8c56bea0a74dd04ac2541383c36b4fd6f04b38798bd" }
+      ]
+    },
+    {
+      "capability": "subagent.dispatch",
+      "status": "adapted",
+      "owner": "src/runtime/subagents.ts",
+      "sourceRevision": "7eb35f357ad489f5841ee10dac1e44549c1bdb76",
+      "verification": [
+        "npm run verify:roles",
+        "vitest run tests/unit/roles.test.ts tests/unit/subagents.test.ts",
+        "vitest run tests/unit/permissions.test.ts",
+        "AILI_LIVE_SUBAGENT_PROBE=static npx vitest run tests/integration/live-subagent.test.ts",
+        "AILI_LIVE_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts"
+      ],
+      "artifacts": [
+        { "path": "src/runtime/subagents.ts", "sha256": "e0fa58c32cc052c938e9817be69059f7fbceaf1718a6446d6395c8d0abdd2789" },
+        { "path": "src/runtime/child-guard.ts", "sha256": "687d238a1ef24f215b11e967d1d56b172569c334294278186df2dee02b54a543" },
+        { "path": "src/runtime/permissions.ts", "sha256": "20c4404d893cc30733fde5a69fb4f6cf1458f08cae18ab8c8095127b6ef27dc9" },
+        { "path": "tests/unit/subagents.test.ts", "sha256": "3028298f7e392dfb7bffc119de0a8c00f252618f1c18f4fa17f392e003773653" },
+        { "path": "tests/unit/child-guard.test.ts", "sha256": "6319952f5dd3eab025788f155bdb558317ebca7f686a2373c90a3c0f15f4dbcb" },
+        { "path": "tests/unit/permissions.test.ts", "sha256": "8c12d4c3fc37e8cefbc5e8c56bea0a74dd04ac2541383c36b4fd6f04b38798bd" },
+        { "path": "tests/unit/roles.test.ts", "sha256": "72b61af16ff66506aaaceac28c92d8b3756741e3c4df0544686b3d4940215b57" },
+        { "path": "scripts/sync-roles.ts", "sha256": "a0abb655b7df270019a674b56a38bbadcfe3d6dc2599b17c04a2584f32c2d532" },
+        { "path": "tests/integration/live-subagent.test.ts", "sha256": "dd4f546e2f2f04e6f8a9c0577320a7538089af6a319b5de4f10a36c891c81339" },
+        { "path": "manifests/live-verification.json", "sha256": "6a4d6defd2d01c6a65acd558aeb1d1aa8c828777edd4273005aa9ff4392c7bd1" }
+      ]
+    }
+  ]
+}

package/manifests/capabilities.json

@@ -0,0 +1,124 @@
+{
+  "schemaVersion": 1,
+  "providers": [
+    "pi-core",
+    "aili-core",
+    "pi-web-access",
+    "pi-quota-status",
+    "pi-permission-modes",
+    "@agwab/pi-subagent",
+    "optional-pack:web-research",
+    "optional-pack:browser-qa",
+    "optional-pack:artifact-runtime"
+  ],
+  "capabilities": [
+    {
+      "id": "repo.read",
+      "provider": "pi-core",
+      "adapterOwner": "pi-core",
+      "platforms": ["linux"],
+      "class": "required",
+      "risk": { "secret": "none", "network": "none", "sideEffect": "read-only" },
+      "probe": { "id": "pi.tools.read", "kind": "runtime-api", "timeoutMs": 1000 },
+      "dependentSkills": { "source": "manifests/skill-compatibility.json", "capability": "repo.read" }
+    },
+    {
+      "id": "repo.write",
+      "provider": "pi-permission-modes",
+      "adapterOwner": "pi-permission-modes@2.2.0",
+      "platforms": ["linux"],
+      "class": "required",
+      "risk": { "secret": "possible", "network": "none", "sideEffect": "local-write" },
+      "probe": { "id": "aili.permissions.write", "kind": "runtime-component", "timeoutMs": 1000 },
+      "dependentSkills": { "source": "manifests/skill-compatibility.json", "capability": "repo.write" }
+    },
+    {
+      "id": "subagent.dispatch",
+      "provider": "@agwab/pi-subagent",
+      "adapterOwner": "aili thin policy adapter over @agwab/pi-subagent/api@0.4.8",
+      "platforms": ["linux"],
+      "class": "required",
+      "risk": { "secret": "possible", "network": "provider-dependent", "sideEffect": "delegated" },
+      "probe": { "id": "aili.roles.dispatch", "kind": "runtime-component", "timeoutMs": 1000 },
+      "dependentSkills": { "source": "manifests/skill-compatibility.json", "capability": "subagent.dispatch" }
+    },
+    {
+      "id": "memory.project",
+      "provider": "aili-core",
+      "adapterOwner": "project-memory",
+      "platforms": ["linux"],
+      "class": "optional",
+      "risk": { "secret": "possible", "network": "none", "sideEffect": "local-write" },
+      "probe": { "id": "aili.memory.project", "kind": "optional-pack", "timeoutMs": 1000 },
+      "dependentSkills": { "source": "manifests/skill-compatibility.json", "capability": "memory.project" },
+      "optionalPack": {
+        "id": "project-memory",
+        "missingBehavior": "Durable project memory is unavailable.",
+        "enableGuidance": "Enable only after a project-local memory contract is accepted.",
+        "sideEffects": ["project-local database writes"],
+        "futureOwner": "aili-pi"
+      }
+    },
+    {
+      "id": "web.fetch",
+      "provider": "pi-web-access",
+      "adapterOwner": "pi-web-access@0.13.0",
+      "platforms": ["linux"],
+      "class": "required",
+      "risk": { "secret": "possible", "network": "provider-dependent", "sideEffect": "external-read-local-cache-and-process" },
+      "probe": { "id": "pi-web-access.extension", "kind": "extension-load", "timeoutMs": 1000 },
+      "dependentSkills": { "source": "manifests/skill-compatibility.json", "capability": "web.fetch" }
+    },
+    {
+      "id": "browser.qa",
+      "provider": "optional-pack:browser-qa",
+      "adapterOwner": "optional-pack:browser-qa",
+      "platforms": ["linux"],
+      "class": "optional",
+      "risk": { "secret": "possible", "network": "possible", "sideEffect": "browser-process" },
+      "probe": { "id": "pack.browser-qa", "kind": "optional-pack", "timeoutMs": 1000 },
+      "dependentSkills": { "source": "manifests/skill-compatibility.json", "capability": "browser.qa" },
+      "optionalPack": {
+        "id": "browser-qa",
+        "missingBehavior": "Browser-rendered behavior cannot be inspected.",
+        "enableGuidance": "Install a separately accepted browser QA provider and browser runtime.",
+        "sideEffects": ["browser installation", "browser process", "possible network access"],
+        "futureOwner": "provider adapter"
+      }
+    },
+    {
+      "id": "artifact.store",
+      "provider": "optional-pack:artifact-runtime",
+      "adapterOwner": "optional-pack:artifact-runtime",
+      "platforms": ["linux"],
+      "class": "optional",
+      "risk": { "secret": "possible", "network": "none", "sideEffect": "local-write" },
+      "probe": { "id": "pack.artifact-runtime.store", "kind": "optional-pack", "timeoutMs": 1000 },
+      "dependentSkills": { "source": "manifests/skill-compatibility.json", "capability": "artifact.store" },
+      "optionalPack": {
+        "id": "artifact-runtime",
+        "missingBehavior": "Durable artifact storage is unavailable.",
+        "enableGuidance": "Install only the artifact provider required by the accepted task.",
+        "sideEffects": ["local files", "possible toolchain installation"],
+        "futureOwner": "artifact provider adapter"
+      }
+    },
+    {
+      "id": "artifact.transform",
+      "provider": "optional-pack:artifact-runtime",
+      "adapterOwner": "optional-pack:artifact-runtime",
+      "platforms": ["linux"],
+      "class": "optional",
+      "risk": { "secret": "possible", "network": "possible", "sideEffect": "process-and-write" },
+      "probe": { "id": "pack.artifact-runtime.transform", "kind": "optional-pack", "timeoutMs": 1000 },
+      "dependentSkills": { "source": "manifests/skill-compatibility.json", "capability": "artifact.transform" },
+      "optionalPack": {
+        "id": "artifact-runtime",
+        "missingBehavior": "Format-specific artifact transformation is unavailable.",
+        "enableGuidance": "Install only the formatter/toolchain required by the accepted task.",
+        "sideEffects": ["process execution", "local files", "possible downloads"],
+        "futureOwner": "artifact provider adapter"
+      }
+    }
+  ]
+}

package/manifests/live-verification.json

@@ -0,0 +1,26 @@
+{
+  "schemaVersion": 1,
+  "platform": "linux",
+  "piVersion": "0.81.1",
+  "status": "passed",
+  "approvedScope": "fresh code-scout child; read-only package.json boundary; no project mutation; four separately approved provider attempts, with the latest passing after legacy permission-runtime removal refreshed the adapter binding",
+  "probes": [
+    {
+      "id": "native-subagent-api-fixture",
+      "command": "npx vitest run tests/unit/subagents.test.ts",
+      "status": "passed"
+    },
+    {
+      "id": "code-scout-read-package",
+      "command": "AILI_LIVE_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts",
+      "status": "passed",
+      "changedFiles": 0
+    }
+  ],
+  "implementation": {
+    "src/runtime/subagents.ts": "260429148e4b15db5a3dcc470d22c2661ffc7037de28bb227ba68262ec8be88c",
+    "tests/unit/subagents.test.ts": "48691168ca18e6a7038590a1ec348927e2328ed2009f0129138aef2dec715dcd",
+    "tests/integration/live-subagent.test.ts": "8ca54fafe77b8a58c36207ac0f72340188a70ce125871a6630cdb2b934629fd5"
+  },
+  "credentialHandling": "Existing Pi authentication was used by Pi; AILI did not copy, print, or modify authentication files."
+}

package/manifests/provenance.json

@@ -0,0 +1,71 @@
+{
+  "schemaVersion": 1,
+  "sources": [
+    {
+      "name": "aili-workflows",
+      "repository": "https://github.com/Rosetears520/aili-workflows.git",
+      "revision": "7eb35f357ad489f5841ee10dac1e44549c1bdb76",
+      "version": "0.2.7",
+      "license": "MIT",
+      "status": "adapted",
+      "sourceFiles": [
+        "upstream/aili-workflows.lock.json#files (471 exact skill files)",
+        "manifests/roles.json#records[].sourcePath (19 exact role source files)"
+      ],
+      "symbols": ["64 canonical skill bodies and owned assets", "19 child-role prompt bodies"],
+      "localChanges": [
+        "skills/** is an exact byte-for-byte snapshot with no semantic overlay",
+        "role prompts are generated as Pi frontmatter with explicit tool/capability ceilings and structured output"
+      ],
+      "verification": ["npm run verify:skills", "npm run verify:roles"]
+    },
+    {
+      "name": "@agwab/pi-subagent",
+      "repository": "https://github.com/AgwaB/pi-subagent.git",
+      "revision": "daa7b83819116a62008ad17aa65fcd50fefbafd0",
+      "version": "0.4.8",
+      "license": "MIT",
+      "status": "dependency",
+      "sourceFiles": ["src/api.ts", "src/runners/headless-model.ts", "src/artifacts/result.ts"],
+      "symbols": ["runSubagent API", "headless lifecycle", "artifact envelope"],
+      "localChanges": ["AILI calls the pinned API through a thin role/path/tool policy adapter; no upstream source is copied"],
+      "verification": ["tests/unit/subagents.test.ts", "tests/integration/extension-load.test.ts"]
+    },
+    {
+      "name": "pi-permission-modes",
+      "repository": "https://github.com/wynainfo/pi-permission-modes.git",
+      "revision": "23d65d10a53b67043cae42322acf9044d6edb196",
+      "version": "2.2.0",
+      "license": "MIT",
+      "status": "dependency",
+      "sourceFiles": ["src/index.ts", "permission-mode.defaults.json"],
+      "symbols": ["Default/Plan/Build/YOLO", "/perm", "Alt+M", "sandbox degradation"],
+      "localChanges": ["AILI initializes the pinned upstream extension and does not retain a competing AILI mode command or shortcut"],
+      "verification": ["tests/unit/runtime.test.ts", "tests/integration/extension-load.test.ts"]
+    },
+    {
+      "name": "pi-quota-status",
+      "repository": "https://github.com/hafiezul/pi-quota-status.git",
+      "revision": "742b3e40b88fbf3d5dcd9d39af96d37bd26bb436",
+      "version": "0.3.0",
+      "license": "MIT",
+      "status": "dependency",
+      "sourceFiles": ["src/index.ts", "src/paths.ts"],
+      "symbols": ["quota footer", "/quota", "global state maintenance"],
+      "localChanges": ["AILI initializes the pinned upstream extension; upstream owns quota polling and state files"],
+      "verification": ["tests/unit/runtime.test.ts", "tests/integration/extension-load.test.ts"]
+    },
+    {
+      "name": "pi-web-access",
+      "repository": "https://github.com/ttttmr/pi-web-access.git",
+      "revision": "npm:0.13.0",
+      "version": "0.13.0",
+      "license": "MIT",
+      "status": "dependency",
+      "sourceFiles": ["index.ts", "skills/"],
+      "symbols": ["web_search", "fetch_content", "get_search_content", "curator and bundled librarian skill"],
+      "localChanges": ["AILI initializes the complete pinned upstream surface through its sole Extension entry; no upstream source is copied"],
+      "verification": ["tests/unit/runtime.test.ts", "tests/integration/extension-load.test.ts"]
+    }
+  ]
+}