@rosetears/aili-pi 0.1.5 → 0.1.7

package/README.md

@@ -51,27 +51,29 @@ That command creates or updates only the AILI marker block in `~/.pi/agent/APPEN
 
 ## Rem Cyberdeck
 
-The package supplies the `rem-cyberdeck` theme plus three additional Pi Extensions: a Rem header, matrix animation, and Zentui footer/editor surface. They are derived from `pi-sakura-cyberdeck` at revision `165a1f8011a12a58a6409b56b8a6c0416cd9b589` under MIT; see `THIRD_PARTY_NOTICES.md` and `notices/pi-sakura-cyberdeck-NOTICE.txt`.
+The package supplies the dark `rem-cyberdeck` theme plus three additional Pi Extensions: a Rem header, Sakura Matrix animation, and Zentui footer/editor surface. Select it through Pi's `/settings` theme selector or set `"theme": "rem-cyberdeck"` in `~/.pi/agent/settings.json`. The visual extensions are derived from `pi-sakura-cyberdeck` at revision `165a1f8011a12a58a6409b56b8a6c0416cd9b589` under MIT; see `THIRD_PARTY_NOTICES.md` and `notices/pi-sakura-cyberdeck-NOTICE.txt`.
 
-Zentui enables its experimental fixed-bottom editor by default when the installed Pi TUI exposes the required private layout capabilities. If capability detection or installation fails, it keeps Pi's native editor and emits a warning. The feature uses the terminal alternate screen; its default mouse scrolling can interfere with terminal text selection and tmux scrollback. Use Zentui's `/zentui` settings to disable the fixed editor or mouse scrolling.
+Matrix keeps the pinned sparse waterfall rhythm and default `density=0.65`, while bounded ultra-wide tracks are spread across the complete terminal-cell width instead of truncating to a left prefix. `/sakura-matrix status` reports its settings; use `/sakura-matrix density <0.45-0.95>` for an explicit density preference. The `✦ REASONING` trail uses the same pinned Sakura pastel gradient.
+
+Zentui enables its experimental fixed-bottom editor by default when the installed Pi TUI exposes the required private layout capabilities. If capability detection or installation fails, it keeps Pi's native editor and emits a warning. The feature uses the terminal alternate screen; its default mouse scrolling can interfere with terminal text selection and tmux scrollback. Use Zentui's `/zentui` settings to disable the fixed editor or mouse scrolling. Zentui hides `pi-cache-stats` by default so the one canonical Codex weekly quota remains visible; explicitly re-enabled cache stats follow quota in the bounded footer.
 
 ## Commands and modes
 
 - `/ideate`, `/define`, `/build`, `/ship`: the four AILI delivery modes.
 - `/local-review`: a standalone local audit, not a fifth lifecycle mode.
 - `/aili-doctor` or `/aili-doctor --json`: human or machine-readable health evidence.
-- `/perm`: upstream `pi-permission-modes` control for `Default`, `Plan`, `Build`, and `YOLO`.
+- `/perm`: the revision-bound `pi-permission-modes@2.2.0` adaptation controls `Default`, `Plan`, `Build`, and `YOLO`.
 - `Alt+M`: upstream mode-cycle shortcut.
 - `/aili-install-global-resources`: explicit installation/update of marker-owned global ROSE and AILI-role resources.
 
-`pi-permission-modes` owns mode persistence, prompts, and sandbox behavior. A Linux disposable fixture verified its stock Build profile through installed Bubblewrap, while an incompatible Git-worktree fixture visibly fell back to confirmation. This is not an isolation guarantee. `YOLO` is an upstream unrestricted mode and must be treated accordingly.
+The `pi-permission-modes@2.2.0` baseline owns mode persistence, prompts, and sandbox behavior. AILI carries one hash-locked matcher adaptation so `*` and `?` also match line terminators; this prevents multiline Bash/heredoc text from falling through YOLO's `"*": "allow"` rule while retaining custom ask/deny and fail-closed fallback behavior across every pattern-map surface. A Linux disposable fixture verified the stock Build profile through installed Bubblewrap, while an incompatible Git-worktree fixture visibly fell back to confirmation. This is not an isolation guarantee. `YOLO` remains an unrestricted, unsandboxed mode and must be treated accordingly.
 
 ## Native integrations and side effects
 
 - `pi-web-access@0.13.0` provides its complete upstream web-search, content-fetch, curator, clone/PDF/video, and bundled-skill surface. Its provider fallback, network traffic, config/credential paths, clone cache, temporary curator service, downloads, and optional browser-cookie access are upstream behavior; inspect its tool requests and configuration before use.
-- `pi-quota-status@0.3.0` is enabled by default. It may maintain `~/.pi/agent/pi-quota-status/state.json`; `/quota config` creates its configuration template.
-- `pi-permission-modes@2.2.0` provides the permission UI and sandbox degradation behavior above. AILI does not retain `/aili-mode` or `Ctrl+Shift+Alt+A` as competing controls.
-- `@agwab/pi-subagent@0.4.8` owns the generic `subagent` tool, child spawn, cancellation, durable run/artifact lifecycle, bounded parallel fan-out, async actions, worktrees, external `cwd`, and sandbox options. The 19 `aili.<role>` profiles are optional named agents; generic or agentless runs do not use an AILI-only result schema. AILI injects an immutable credential-path guard; child Pi processes load the ambient AILI `pi-permission-modes` registration exactly once. The upstream runner excludes recursive `subagent` exposure inside workers.
+- `pi-quota-status@0.3.0` is enabled by default. It may maintain `~/.pi/agent/pi-quota-status/state.json`; `/quota config` creates its configuration template. Zentui displays exactly one weekly value as `codex <percent> <reset>`, preferring explicit `Wk` data and treating the dependency's current `5h`-labeled primary value only as a compatibility fallback when weekly is absent.
+- `pi-permission-modes@2.2.0` provides the permission UI and sandbox degradation behavior above through AILI's exact-source adaptation. The only semantic source change is line-terminator-safe shared glob matching; `upstream/pi-permission-modes.lock.json` records the baseline and adapted hashes. AILI does not retain `/aili-mode` or `Ctrl+Shift+Alt+A` as competing controls.
+- `@agwab/pi-subagent@0.4.8` owns the generic `subagent` tool, child spawn, cancellation, durable run/artifact lifecycle, bounded parallel fan-out, async actions, worktrees, external `cwd`, and sandbox options. On Pi 0.81.1, AILI routes ordinary omitted/`auto` calls to `headless` because the pinned inline runner calls removed SDK factories; explicit `inline` stops before model startup with a compatibility diagnostic. Explicit `headless`/`tmux`, visible auto, sandbox auto, lifecycle actions, and caller options remain upstream paths. A mixed parallel auto call that combines visible tasks with ordinary uncontained tasks is rejected rather than silently sending one class through broken inline. The 19 `aili.<role>` profiles are optional named agents; generic or agentless runs do not use an AILI-only result schema. AILI also adds a bounded requested `Agent:`/`Agents:` heading and an immutable credential-path guard. The upstream runner excludes recursive `subagent` exposure inside workers.
 - `pi-cache-optimizer@2.6.18` provides `/cache-optimizer`, provider cache diagnostics, cache statistics, and prompt-cache optimization. It may maintain `~/.pi/agent/pi-cache-optimizer-stats.json`; `/cache-optimizer fix` is interactive and is the only command that may propose editing `models.json`.
 - `pi-markdown-preview@0.10.1` provides `/preview`, `/preview-browser`, `/preview-pdf`, `/preview-clear-cache`, and the `preview_export` tool. Terminal/browser previews require a Chromium executable; PDF export additionally requires Pandoc and a LaTeX engine.
 - `@narumitw/pi-lsp@0.25.0` provides language-agnostic `lsp_diagnostics`, `lsp_fix`, and `/lsp`. It supports routes for C/C++, Python, CSS/SCSS, JavaScript/TypeScript, Go, Rust, Java, Kotlin, Bash, YAML, Terraform, and other languages. It does not download language servers; install the required commands separately and configure project routes in `.pi/pi-lsp.json` or user routes in `~/.pi/agent/pi-lsp.json`.
@@ -91,7 +93,7 @@ When unavailable, runtime and doctor output use explicit `SKIP`/`WARN` results a
 
 ## Security boundary
 
-AILI injects a non-removable guard that denies standard Pi file-tool and parsed-bash access to credential, authentication, and private-key paths, including from an external `cwd`, a YOLO permission mode, or a caller-supplied child extension list. Child Pi processes load the ambient AILI `pi-permission-modes` registration exactly once, so vendor permission prompts and sandbox behavior remain active; headless confirmation requests fail closed. The guard does not make arbitrary third-party extension code safe: extensions remain trusted code and may have direct process authority. Neither AILI nor Pi provides a universal OS sandbox or containment: trusted extensions, user-authority processes, ambient network access, and filesystem races remain in the user trust domain. Inspect exact approval targets and do not put credentials in task text.
+AILI injects a non-removable guard that denies standard Pi file-tool and parsed-bash access to credential, authentication, and private-key paths, including from an external `cwd`, a YOLO permission mode, or a caller-supplied child extension list. Child Pi processes load the ambient AILI permission-mode registration exactly once, so adapted permission prompts and sandbox behavior remain active; headless confirmation requests fail closed. The guard does not make arbitrary third-party extension code safe: extensions remain trusted code and may have direct process authority. Neither AILI nor Pi provides a universal OS sandbox or containment: trusted extensions, user-authority processes, ambient network access, and filesystem races remain in the user trust domain. Inspect exact approval targets and do not put credentials in task text.
 
 Use `subagent` lifecycle actions (`status`, `logs`, `wait`, `interrupt`, `mark-background`, and `reconcile`) to inspect durable async work. Upstream fan-out is version-bounded rather than capped by AILI at two; background completion is not evidence until inspected. Subagents are a benefit-based way to improve execution efficiency and preserve the main agent's context: the main agent owns decisions, scope, integration, and final verification, while bounded discovery, implementation, testing, or other execution may be delegated when specialist, parallelism, or context-isolation benefits outweigh orchestration cost. Direct parent work remains valid when delegation has no clear net benefit; no subagent call is required to unlock file mutation. Provider/model behavior still depends on the configured Pi environment.
 
@@ -99,6 +101,7 @@ Use `subagent` lifecycle actions (`status`, `logs`, `wait`, `interrupt`, `mark-b
 
 - `upstream/aili-workflows.lock.json` pins the exact canonical 64-skill/471-file snapshot.
 - `upstream/opencode-global-agents.lock.json` pins the global AGENTS source revision/hash and documents its Pi-native derivation.
+- `upstream/pi-permission-modes.lock.json` pins the exact upstream and adapted permission runtime files and semantic diff.
 - `manifests/skill-compatibility.json` records one compatibility state per skill.
 - `manifests/roles.json` records the 19 generated Pi role profiles.
 - `manifests/provenance.json`, `manifests/sbom.json`, and `THIRD_PARTY_NOTICES.md` record adapted/reference sources and the exact npm lock inventory.
@@ -117,6 +120,9 @@ npm run validate:release
 - **Package install failure:** keep the reported Pi/AILI states distinct. Retry the printed `pi install` command after fixing the cause; do not automatically remove a pre-existing package.
 - **Doctor is non-pass:** inspect the exact `ERROR`, `WARN`, `SKIP`, or `UNVERIFIED` component. Missing optional packs are not core execution success.
 - **Permission shortcut does nothing:** use `/perm`; terminal multiplexers may consume `Alt+M`.
+- **YOLO still asks for multiline Bash:** confirm the loaded Package contains the adapted permission runtime with `npm run verify:permission-modes`; do not work around it by granting every distinct script for the session.
+- **Subagent reports the inline SDK `reading 'create'` failure:** omit `backend` or use `backend: "headless"`; explicit inline is unsupported for the pinned Pi 0.81.1 / subagent 0.4.8 pair.
+- **Sandboxed subagent cannot authenticate or reach its model:** `sandbox:true` is deny-all network, and model-backed sandbox calls must allow the exact provider endpoint while preserving credential protections. This is separate from default-backend compatibility.
 - **Global resources are non-pass:** run `/aili-install-global-resources` only after reviewing the exact `~/.pi/agent/` targets. A malformed marker or an unowned role collision intentionally leaves files unchanged.
 - **Offline use:** the installed Package embeds the pinned skills and does not fetch `aili-workflows` at runtime. Its Pi-managed npm lifecycle synchronizes only pre-existing same-name global skills from that embedded fixed snapshot. First-time Pi/package installation still requires the relevant package sources.
 

package/THIRD_PARTY_NOTICES.md

@@ -20,20 +20,20 @@ This distribution is MIT-licensed. The following adapted sources and locked deve
 - Revision: daa7b83819116a62008ad17aa65fcd50fefbafd0
 - Version: 0.4.8
 - License: MIT
-- Source files: src/api.ts, src/runners/headless-model.ts, src/artifacts/result.ts
-- Reused symbols/patterns: runSubagent API, headless lifecycle, artifact envelope
-- Local changes: AILI registers the full pinned upstream subagent tool schema, injects a non-removable credential guard, and relies on the ambient AILI pi-permission-modes registration exactly once in each child; no upstream source is copied
+- Source files: src/index.ts, src/api.ts, src/runners/headless-model.ts, src/artifacts/result.ts
+- Reused symbols/patterns: subagent tool renderCall, runSubagent API, headless lifecycle, artifact envelope
+- Local changes: AILI registers the full pinned upstream subagent tool schema, prepends a sanitized bounded requested-Agent heading, injects a non-removable credential guard, normalizes ordinary omitted/auto runs to headless for the Pi 0.81.1 compatibility window, and rejects explicit inline before model startup; no upstream source is copied
 
 ## pi-permission-modes
 
-- Status: dependency
+- Status: adapted
 - Source: https://github.com/wynainfo/pi-permission-modes.git
 - Revision: 23d65d10a53b67043cae42322acf9044d6edb196
 - Version: 2.2.0
 - License: MIT
-- Source files: src/index.ts, permission-mode.defaults.json
-- Reused symbols/patterns: Default/Plan/Build/YOLO, /perm, Alt+M, sandbox degradation
-- Local changes: AILI initializes the pinned upstream extension and does not retain a competing AILI mode command or shortcut
+- Source files: src/vendor/pi-permission-modes/index.ts, src/vendor/pi-permission-modes/resolve.ts, upstream/pi-permission-modes.lock.json, licenses/pi-permission-modes-MIT.txt
+- Reused symbols/patterns: Default/Plan/Build/YOLO, /perm, Alt+M, shared permission pattern matcher, sandbox degradation
+- Local changes: AILI's generated adapted entry redirects unchanged sibling modules to the exact 2.2.0 dependency; the owned resolve.ts compiles permission globs with RegExp dotAll so * and ? include ECMAScript line terminators; the exact upstream and adapted files are hash-locked and drift-checked
 
 ## pi-quota-status
 
@@ -42,9 +42,9 @@ This distribution is MIT-licensed. The following adapted sources and locked deve
 - Revision: 742b3e40b88fbf3d5dcd9d39af96d37bd26bb436
 - Version: 0.3.0
 - License: MIT
-- Source files: src/index.ts, src/paths.ts
-- Reused symbols/patterns: quota footer, /quota, global state maintenance
-- Local changes: AILI initializes the pinned upstream extension; upstream owns quota polling and state files; Zentui relabels the displayed 5h prefix as codex and Wk as 7d without changing quota data
+- Source files: src/index.ts, src/subscription.ts, src/format.ts, src/paths.ts
+- Reused symbols/patterns: quota footer, Codex subscription windows, /quota, global state maintenance
+- Local changes: AILI initializes the pinned upstream extension; upstream owns quota polling and state files; Zentui shows one canonical weekly segment as codex, preferring explicit Wk and using the dependency's legacy-mislabeled 5h primary only as fallback, without changing selected percentage or reset data
 
 ## pi-web-access
 
@@ -66,7 +66,7 @@ This distribution is MIT-licensed. The following adapted sources and locked deve
 - License: MIT
 - Source files: index.ts
 - Reused symbols/patterns: default Extension, /cache-optimizer, cache statistics, prompt cache hooks
-- Local changes: AILI initializes the pinned upstream extension through its single Extension entry; no upstream source is copied
+- Local changes: AILI initializes the pinned upstream extension through its single Extension entry; Zentui defaults its pi-cache-stats footer placement off while leaving cache commands and collection unchanged; no upstream source is copied
 
 ## pi-markdown-preview
 
@@ -99,10 +99,10 @@ This distribution is MIT-licensed. The following adapted sources and locked deve
 - License: MIT
 - Source files: extensions/header/index.ts, extensions/matrix/index.ts, extensions/zentui/**
 - Reused symbols/patterns: header, matrix animation, Zentui footer, fixed editor compositor
-- Local changes: registered as three additional Pi Package Extensions; header avatar loads the supplied Rem asset; Zentui palette values use the Rem palette while the Matrix animation retains the upstream Sakura palette; relative import specifiers and session lifecycle event are adapted for this package's NodeNext TypeScript contract
+- Local changes: registered as three additional Pi Package Extensions; header avatar loads the supplied Rem asset; Zentui shell palette uses Rem while Matrix and the reasoning trail retain the upstream Sakura palette; overflowing Matrix tracks are sampled deterministically across the complete terminal width while retaining the 96-track budget and ordinary-width behavior; relative import specifiers and session lifecycle event are adapted for this package's NodeNext TypeScript contract
 
 ## npm dependency inventory
 
 The exact 424-entry package-lock inventory, versions, integrity values, dependency scope, and declared licenses is recorded in `manifests/sbom.json`.
 
-Runtime dependencies are initialized through the single AILI Extension entry; no third-party source tree is copied into this package.
+Runtime dependencies are initialized through the single AILI Extension entry. Package-owned third-party adaptations are copied only where their provenance sourceFiles explicitly name repository paths.

package/extensions/matrix/index.ts

@@ -6,7 +6,7 @@ import type { ExtensionAPI, ExtensionContext } from "@earendil-works/pi-coding-a
 const WIDGET_KEY = "sakura-matrix-engine";
 const CONFIG_PATH = join(homedir(), ".pi", "agent", "sakura-cyberdeck-matrix.json");
 const RESET = "\x1b[0m";
-const GLYPHS = [..."0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZｱｲｳｴｵｶｷｸｹｺｻｼｽｾｿﾀﾁﾂﾃﾄﾅﾆﾇﾈﾉﾊﾋﾌﾍﾎﾏﾐﾑﾒﾓﾗﾘﾙﾚﾛﾜﾝ"];
+export const SAKURA_MATRIX_GLYPHS = [..."0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZｱｲｳｴｵｶｷｸｹｺｻｼｽｾｿﾀﾁﾂﾃﾄﾅﾆﾇﾈﾉﾊﾋﾌﾍﾎﾏﾐﾑﾒﾓﾗﾘﾙﾚﾛﾜﾝ"];
 const BG: RGB = [20, 17, 26];
 const TEXT: RGB = [247, 238, 248];
 const CANDY: readonly RGB[] = [
@@ -18,6 +18,7 @@ const CANDY: readonly RGB[] = [
   [174, 229, 197], // mint
 ];
 const WORKING_INDICATOR = "◆";
+const MAX_DROPS = 96;
 const PHASE_MESSAGES: Record<Phase, string> = {
   thinking: "Weaving the next move…",
   working: "Composing the response…",
@@ -106,7 +107,16 @@ function stableGlyph(seed: number, row: number, timeSlice: number): string {
   let hash = Math.imul(seed ^ (row + 17), 0x45d9f3b);
   hash = Math.imul(hash ^ timeSlice, 0x45d9f3b);
   hash ^= hash >>> 16;
-  return GLYPHS[Math.abs(hash) % GLYPHS.length] ?? "0";
+  return SAKURA_MATRIX_GLYPHS[Math.abs(hash) % SAKURA_MATRIX_GLYPHS.length] ?? "0";
+}
+
+function selectBoundedColumns(columns: readonly number[]): number[] {
+  if (columns.length <= MAX_DROPS) return [...columns];
+  const lastIndex = columns.length - 1;
+  return Array.from({ length: MAX_DROPS }, (_, index) => {
+    const sourceIndex = Math.round((index * lastIndex) / (MAX_DROPS - 1));
+    return columns[sourceIndex] ?? 0;
+  });
 }
 
 export function createDrops(width: number, density: number, height: number): Drop[] {
@@ -114,7 +124,7 @@ export function createDrops(width: number, density: number, height: number): Dro
   const columns = Array.from({ length: Math.ceil(width / 2) }, (_, index) => index * 2);
   const active = columns.filter(() => random() < density);
   const selected = active.length >= 8 ? active : columns.slice(0, Math.min(columns.length, 8));
-  return selected.slice(0, 96).map((x, index) => {
+  return selectBoundedColumns(selected).map((x, index) => {
     const length = 3 + Math.floor(random() * 5);
     const gap = 1 + Math.floor(random() * 5);
     const cycle = height + length + gap;

package/extensions/zentui/config.ts

@@ -301,6 +301,7 @@ export const defaultConfig: PolishedTuiConfig = {
 	extensionStatuses: {
 		defaultPlacement: "right",
 		placements: {
+			"pi-cache-stats": "off",
 			"pi-quota-status": "right",
 			"dual-subscription-quota": "left",
 			"codex-goal": "middle",
@@ -793,8 +794,14 @@ export function mergeConfig(parsed: unknown): PolishedTuiConfig {
 		gitMetrics,
 		extensionStatuses: {
 			defaultPlacement: extensionStatuses.defaultPlacement,
-			placements: { ...extensionStatuses.placements },
-			colorModes: { ...extensionStatuses.colorModes },
+			placements: {
+				...defaultConfig.extensionStatuses.placements,
+				...extensionStatuses.placements,
+			},
+			colorModes: {
+				...defaultConfig.extensionStatuses.colorModes,
+				...extensionStatuses.colorModes,
+			},
 		},
 		fixedEditor,
 	};

package/extensions/zentui/extension-status.ts

@@ -21,8 +21,18 @@ export type ExtensionStatusSegmentsByPlacement = {
 
 const safeSgrPattern = /\x1b\[[0-9;:]*m/g;
 const sgrPlaceholderPattern = /__ZENTUI_SGR_(\d+)__/g;
+const quotaSegmentSeparatorPattern = /\s+·\s+/;
+const quotaWeeklyLabelPattern = /^(?:wk|weekly|7d)\b/i;
+const quotaLegacyLabelPattern = /^5h\b/i;
+const quotaDisplayLabelPattern = /^((?:\x1b\[[0-9;:]*m)*)\s*(?:wk|weekly|7d|5h)\b/i;
+
+function statusPriority(key: string): number {
+	return key === "pi-quota-status" ? 0 : 1;
+}
 
 function compareKeys(a: ExtensionStatusSegment, b: ExtensionStatusSegment): number {
+	const priorityDifference = statusPriority(a.key) - statusPriority(b.key);
+	if (priorityDifference !== 0) return priorityDifference;
 	return a.key < b.key ? -1 : a.key > b.key ? 1 : 0;
 }
 
@@ -42,9 +52,23 @@ function hasVisibleStatusText(value: string): boolean {
 	return sanitizeExtensionStatusText(value).length > 0;
 }
 
+function quotaSegmentLabel(segment: string): "weekly" | "legacy" | undefined {
+	const plain = normalizeStatusWhitespace(stripVTControlCharacters(segment));
+	if (quotaWeeklyLabelPattern.test(plain)) return "weekly";
+	if (quotaLegacyLabelPattern.test(plain)) return "legacy";
+	return undefined;
+}
+
 function formatQuotaWindowLabel(key: string, text: string): string {
 	if (key !== "pi-quota-status") return text;
-	return text.replace(/\b5h\b/g, "codex").replace(/\bWk\b/g, "7d");
+	const segments = text.split(quotaSegmentSeparatorPattern);
+	const selected =
+		segments.find((segment) => quotaSegmentLabel(segment) === "weekly") ??
+		segments.find((segment) => quotaSegmentLabel(segment) === "legacy");
+	if (!selected) return text;
+	return selected.replace(quotaDisplayLabelPattern, (_match, sgrPrefix: string) =>
+		`${sgrPrefix}codex`,
+	);
 }
 
 export function sanitizeExtensionStatusOriginalText(value: string): string {

package/extensions/zentui/gradient.ts

@@ -4,11 +4,11 @@ export type RGB = readonly [number, number, number];
 
 export const SAKURA_MACARON_GRADIENT = "sakura-macaron-gradient";
 export const SAKURA_MACARON_STOPS: readonly RGB[] = [
-	[136, 184, 255], // sakura pink  #88B8FF
-	[125, 228, 255], // sakura-iro   #7DE4FF
-	[188, 167, 255], // petal        #BCA7FF
-	[188, 167, 255], // lavender     #BCA7FF
-	[125, 228, 255], // sky macaron  #7DE4FF
+	[242, 167, 198], // sakura pink  #F2A7C6
+	[252, 201, 185], // sakura-iro   #FCC9B9
+	[239, 195, 230], // petal        #EFC3E6
+	[199, 184, 245], // lavender     #C7B8F5
+	[159, 211, 242], // sky macaron  #9FD3F2
 ];
 
 const RESET = "\x1b[0m";
@@ -29,7 +29,7 @@ function sampleGradient(position: number): RGB {
 	const normalized = Math.max(0, Math.min(1, position));
 	const scaled = normalized * (stops.length - 1);
 	const index = Math.min(stops.length - 2, Math.floor(scaled));
-	const from = stops[index] ?? SAKURA_MACARON_STOPS[0] ?? [136, 184, 255];
+	const from = stops[index] ?? SAKURA_MACARON_STOPS[0] ?? [242, 167, 198];
 	const to = stops[index + 1] ?? from;
 	return mix(from, to, scaled - index);
 }

package/licenses/pi-permission-modes-MIT.txt

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Nico Merz
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/manifests/adapter-evidence.json

@@ -11,7 +11,7 @@
         "vitest run tests/unit/runtime.test.ts"
       ],
       "artifacts": [
-        { "path": "package-lock.json", "sha256": "13a5c034edf3b61af5256471163522fe44171c4dfedf4a85d915c4c442e53c56" },
+        { "path": "package-lock.json", "sha256": "a9e5a3e4d1076b3179dd8cca5ef89f9fddc838e0acf9abcc1f42daf2a90ddafb" },
         { "path": "tests/integration/extension-load.test.ts", "sha256": "f2fdceb965f55bc481acc6457eee5cac9499dac08e8c3d17ca60efd07f13e96c" },
         { "path": "tests/unit/runtime.test.ts", "sha256": "9e99920e7e16529f109771d659f611c9fa580941a5dbf924b2d9d117dd3adeee" }
       ]
@@ -24,21 +24,22 @@
       "verification": [
         "npm run verify:roles",
         "vitest run tests/unit/roles.test.ts tests/unit/subagents.test.ts",
-        "vitest run tests/integration/generic-permission.test.ts",
-        "AILI_LIVE_SUBAGENT_PROBE=static npx vitest run tests/integration/live-subagent.test.ts",
-        "AILI_LIVE_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts"
+        "vitest run tests/integration/generic-subagent.test.ts tests/integration/generic-permission.test.ts",
+        "AILI_LIVE_GENERIC_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts",
+        "AILI_LIVE_CREDENTIAL_GUARD_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts"
       ],
       "artifacts": [
-        { "path": "src/runtime/subagents.ts", "sha256": "b33e0ab1dba44212ada389fcca98774d98220396ead94951dee073df54784b0a" },
+        { "path": "src/runtime/subagents.ts", "sha256": "9f09e0e8a380d026d82b0842f2c687da2f3529b43a7ef6d1a6aad47d71190d48" },
         { "path": "src/runtime/child-guard.ts", "sha256": "9da3c1d80805fd76bbf7a7fd253dff44f0756439fdee039bd7d7fd30766329e1" },
         { "path": "src/runtime/credential-guard.ts", "sha256": "01d76ff0a9a2a0a08a2d2e52b6ed050d925df5e5bea1e6194130e00bfe22cde3" },
-        { "path": "tests/unit/subagents.test.ts", "sha256": "6ae824df46b3ae5b8744bcdef144372281cfca7a4b752ac26fd2d70f0b6cdc6c" },
+        { "path": "tests/unit/subagents.test.ts", "sha256": "16fc1fbd1759befeed03a2428294c28d662022622c61a6444e23b365dc7447aa" },
         { "path": "tests/unit/child-guard.test.ts", "sha256": "b187d6d84cd0829ae5474e133b4df911a80b75b9e89622b8543a1c5894be4974" },
-        { "path": "tests/integration/generic-permission.test.ts", "sha256": "1e113af5b5cce59f365bc12a1735e1aa269c0a739fe6fc7aa4c9131818869ce5" },
+        { "path": "tests/integration/generic-permission.test.ts", "sha256": "90cc4ee67098f671dddac495d5e2cd5dc2c50131297fd04f0d72a1ca44217f24" },
+        { "path": "tests/integration/generic-subagent.test.ts", "sha256": "a13f8564bdd1bd735f9313d2ad71511a47c939dd6351f2f460771cb48a7fc80b" },
         { "path": "tests/unit/roles.test.ts", "sha256": "72b61af16ff66506aaaceac28c92d8b3756741e3c4df0544686b3d4940215b57" },
         { "path": "scripts/sync-roles.ts", "sha256": "a4fd66c95d91ebd92f0b1c6164a84809c4b5a1bf1e185dbdd61af23688dd2d9c" },
-        { "path": "tests/integration/live-subagent.test.ts", "sha256": "46a907526890c4cd4a4e1d768fca51173c9a0c3db37ac83ba57db23d54d7f339" },
-        { "path": "manifests/live-verification.json", "sha256": "18cb0a6a0558f17c11b4ee890a8af07f7b1ba9960084eb4e7235610730c34066" }
+        { "path": "tests/integration/live-subagent.test.ts", "sha256": "b88750f74b203cdbdb9d0e453e16f720ff4d8e4591ca140e0a3c7e1d8428868c" },
+        { "path": "manifests/live-verification.json", "sha256": "f5c80dfb2fb989b43af3b7460510b0a546cc05f8ff9e671c3e9284384c33d95b" }
       ]
     }
   ]

package/manifests/live-verification.json

@@ -1,32 +1,40 @@
 {
-  "schemaVersion": 1,
+  "schemaVersion": 2,
   "platform": "linux",
   "piVersion": "0.81.1",
+  "subagentVersion": "0.4.8",
   "status": "passed",
-  "approvedScope": "generic agentless headless child; read-only package.json boundary; no business-file mutation, bash, worktree, sandbox, external cwd, or global-home access; only approved temporary run artifacts were created and removed",
+  "approvedScope": "On 2026-07-24, the user authorized two bounded live probes after repository-local compatibility verification: an omitted-backend, agentless child restricted to reading package.json, and an explicit-headless credential guard child restricted to a disposable .env sentinel. Both probes used only their declared temporary artifact roots and completed without business-file changes.",
   "probes": [
     {
       "id": "generic-subagent-fixtures",
       "command": "npx vitest run tests/unit/subagents.test.ts tests/integration/generic-subagent.test.ts",
-      "status": "passed"
+      "status": "passed",
+      "changedFiles": 0,
+      "backendRequest": "matrix",
+      "resolvedBackend": "headless"
     },
     {
-      "id": "generic-agentless-read-package",
+      "id": "generic-agentless-default-path",
       "command": "AILI_LIVE_GENERIC_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts",
       "status": "passed",
-      "changedFiles": 0
+      "changedFiles": 0,
+      "backendRequest": "omitted",
+      "resolvedBackend": "headless"
     },
     {
-      "id": "generic-credential-guard",
+      "id": "generic-credential-guard-explicit-headless",
       "command": "AILI_LIVE_CREDENTIAL_GUARD_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts",
       "status": "passed",
-      "changedFiles": 0
+      "changedFiles": 0,
+      "backendRequest": "explicit-headless",
+      "resolvedBackend": "headless"
     }
   ],
   "implementation": {
-    "src/runtime/subagents.ts": "b33e0ab1dba44212ada389fcca98774d98220396ead94951dee073df54784b0a",
-    "tests/unit/subagents.test.ts": "6ae824df46b3ae5b8744bcdef144372281cfca7a4b752ac26fd2d70f0b6cdc6c",
-    "tests/integration/live-subagent.test.ts": "46a907526890c4cd4a4e1d768fca51173c9a0c3db37ac83ba57db23d54d7f339"
+    "src/runtime/subagents.ts": "9f09e0e8a380d026d82b0842f2c687da2f3529b43a7ef6d1a6aad47d71190d48",
+    "tests/unit/subagents.test.ts": "16fc1fbd1759befeed03a2428294c28d662022622c61a6444e23b365dc7447aa",
+    "tests/integration/live-subagent.test.ts": "b88750f74b203cdbdb9d0e453e16f720ff4d8e4591ca140e0a3c7e1d8428868c"
   },
-  "credentialHandling": "Existing Pi authentication was used by Pi; AILI did not copy, print, or modify authentication files."
+  "credentialHandling": "The explicit-headless credential guard probe used only a disposable .env sentinel. It completed with changedFiles=0; the sentinel was absent from the model-visible result and every temporary artifact before cleanup."
 }

package/manifests/provenance.json

@@ -28,10 +28,10 @@
       "version": "0.4.8",
       "license": "MIT",
       "status": "dependency",
-      "sourceFiles": ["src/api.ts", "src/runners/headless-model.ts", "src/artifacts/result.ts"],
-      "symbols": ["runSubagent API", "headless lifecycle", "artifact envelope"],
-      "localChanges": ["AILI registers the full pinned upstream subagent tool schema, injects a non-removable credential guard, and relies on the ambient AILI pi-permission-modes registration exactly once in each child; no upstream source is copied"],
-      "verification": ["tests/unit/subagents.test.ts", "tests/integration/package-runtime.test.ts"]
+      "sourceFiles": ["src/index.ts", "src/api.ts", "src/runners/headless-model.ts", "src/artifacts/result.ts"],
+      "symbols": ["subagent tool renderCall", "runSubagent API", "headless lifecycle", "artifact envelope"],
+      "localChanges": ["AILI registers the full pinned upstream subagent tool schema, prepends a sanitized bounded requested-Agent heading, injects a non-removable credential guard, normalizes ordinary omitted/auto runs to headless for the Pi 0.81.1 compatibility window, and rejects explicit inline before model startup; no upstream source is copied"],
+      "verification": ["tests/unit/subagents.test.ts", "tests/integration/generic-subagent.test.ts", "tests/integration/live-subagent.test.ts", "tests/integration/package-runtime.test.ts"]
     },
     {
       "name": "pi-permission-modes",
@@ -39,11 +39,11 @@
       "revision": "23d65d10a53b67043cae42322acf9044d6edb196",
       "version": "2.2.0",
       "license": "MIT",
-      "status": "dependency",
-      "sourceFiles": ["src/index.ts", "permission-mode.defaults.json"],
-      "symbols": ["Default/Plan/Build/YOLO", "/perm", "Alt+M", "sandbox degradation"],
-      "localChanges": ["AILI initializes the pinned upstream extension and does not retain a competing AILI mode command or shortcut"],
-      "verification": ["tests/unit/runtime.test.ts", "tests/integration/extension-load.test.ts"]
+      "status": "adapted",
+      "sourceFiles": ["src/vendor/pi-permission-modes/index.ts", "src/vendor/pi-permission-modes/resolve.ts", "upstream/pi-permission-modes.lock.json", "licenses/pi-permission-modes-MIT.txt"],
+      "symbols": ["Default/Plan/Build/YOLO", "/perm", "Alt+M", "shared permission pattern matcher", "sandbox degradation"],
+      "localChanges": ["AILI's generated adapted entry redirects unchanged sibling modules to the exact 2.2.0 dependency", "the owned resolve.ts compiles permission globs with RegExp dotAll so * and ? include ECMAScript line terminators", "the exact upstream and adapted files are hash-locked and drift-checked"],
+      "verification": ["npm run verify:permission-modes", "tests/unit/permission-patterns.test.ts", "tests/integration/permission-modes.test.ts", "tests/integration/extension-load.test.ts"]
     },
     {
       "name": "pi-quota-status",
@@ -52,10 +52,10 @@
       "version": "0.3.0",
       "license": "MIT",
       "status": "dependency",
-      "sourceFiles": ["src/index.ts", "src/paths.ts"],
-      "symbols": ["quota footer", "/quota", "global state maintenance"],
-      "localChanges": ["AILI initializes the pinned upstream extension; upstream owns quota polling and state files; Zentui relabels the displayed 5h prefix as codex and Wk as 7d without changing quota data"],
-      "verification": ["tests/unit/runtime.test.ts", "tests/integration/extension-load.test.ts"]
+      "sourceFiles": ["src/index.ts", "src/subscription.ts", "src/format.ts", "src/paths.ts"],
+      "symbols": ["quota footer", "Codex subscription windows", "/quota", "global state maintenance"],
+      "localChanges": ["AILI initializes the pinned upstream extension; upstream owns quota polling and state files; Zentui shows one canonical weekly segment as codex, preferring explicit Wk and using the dependency's legacy-mislabeled 5h primary only as fallback, without changing selected percentage or reset data"],
+      "verification": ["tests/unit/extension-status.test.ts", "tests/unit/runtime.test.ts", "tests/integration/extension-load.test.ts"]
     },
     {
       "name": "pi-web-access",
@@ -78,8 +78,8 @@
       "status": "dependency",
       "sourceFiles": ["index.ts"],
       "symbols": ["default Extension", "/cache-optimizer", "cache statistics", "prompt cache hooks"],
-      "localChanges": ["AILI initializes the pinned upstream extension through its single Extension entry; no upstream source is copied"],
-      "verification": ["tests/unit/runtime.test.ts", "tests/integration/package-runtime.test.ts", "npm pack --dry-run --json"]
+      "localChanges": ["AILI initializes the pinned upstream extension through its single Extension entry; Zentui defaults its pi-cache-stats footer placement off while leaving cache commands and collection unchanged; no upstream source is copied"],
+      "verification": ["tests/unit/runtime.test.ts", "tests/unit/extension-status.test.ts", "tests/integration/package-runtime.test.ts", "npm pack --dry-run --json"]
     },
     {
       "name": "pi-markdown-preview",
@@ -113,8 +113,8 @@
       "status": "adapted",
       "sourceFiles": ["extensions/header/index.ts", "extensions/matrix/index.ts", "extensions/zentui/**"],
       "symbols": ["header", "matrix animation", "Zentui footer", "fixed editor compositor"],
-      "localChanges": ["registered as three additional Pi Package Extensions", "header avatar loads the supplied Rem asset", "Zentui palette values use the Rem palette while the Matrix animation retains the upstream Sakura palette", "relative import specifiers and session lifecycle event are adapted for this package's NodeNext TypeScript contract"],
-      "verification": ["npm run typecheck", "npm test", "npm pack --dry-run --json"]
+      "localChanges": ["registered as three additional Pi Package Extensions", "header avatar loads the supplied Rem asset", "Zentui shell palette uses Rem while Matrix and the reasoning trail retain the upstream Sakura palette", "overflowing Matrix tracks are sampled deterministically across the complete terminal width while retaining the 96-track budget and ordinary-width behavior", "relative import specifiers and session lifecycle event are adapted for this package's NodeNext TypeScript contract"],
+      "verification": ["tests/unit/matrix.test.ts", "tests/unit/zentui-gradient.test.ts", "npm run typecheck", "npm test", "npm pack --dry-run --json"]
     }
   ]
 }

package/manifests/sbom.json

@@ -3,7 +3,7 @@
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "name": "@rosetears/aili-pi-0.0.0-development",
-  "documentNamespace": "https://github.com/Rosetears520/aili-pi/sbom/13a5c034edf3b61af5256471163522fe",
+  "documentNamespace": "https://github.com/Rosetears520/aili-pi/sbom/a9e5a3e4d1076b3179dd8cca5ef89f9f",
   "creationInfo": {
     "creators": [
       "Tool: @rosetears/aili-pi scripts/generate-provenance.ts"
@@ -43,7 +43,7 @@
       "licenseDeclared": "MIT",
       "checksums": [],
       "primaryPackagePurpose": "SOURCE",
-      "comment": "revision=daa7b83819116a62008ad17aa65fcd50fefbafd0; files=src/api.ts, src/runners/headless-model.ts, src/artifacts/result.ts; symbols=runSubagent API, headless lifecycle, artifact envelope; local changes=AILI registers the full pinned upstream subagent tool schema, injects a non-removable credential guard, and relies on the ambient AILI pi-permission-modes registration exactly once in each child; no upstream source is copied"
+      "comment": "revision=daa7b83819116a62008ad17aa65fcd50fefbafd0; files=src/index.ts, src/api.ts, src/runners/headless-model.ts, src/artifacts/result.ts; symbols=subagent tool renderCall, runSubagent API, headless lifecycle, artifact envelope; local changes=AILI registers the full pinned upstream subagent tool schema, prepends a sanitized bounded requested-Agent heading, injects a non-removable credential guard, normalizes ordinary omitted/auto runs to headless for the Pi 0.81.1 compatibility window, and rejects explicit inline before model startup; no upstream source is copied"
     },
     {
       "SPDXID": "SPDXRef-source-pi-permission-modes-9b38b384cd",
@@ -55,7 +55,7 @@
       "licenseDeclared": "MIT",
       "checksums": [],
       "primaryPackagePurpose": "SOURCE",
-      "comment": "revision=23d65d10a53b67043cae42322acf9044d6edb196; files=src/index.ts, permission-mode.defaults.json; symbols=Default/Plan/Build/YOLO, /perm, Alt+M, sandbox degradation; local changes=AILI initializes the pinned upstream extension and does not retain a competing AILI mode command or shortcut"
+      "comment": "revision=23d65d10a53b67043cae42322acf9044d6edb196; files=src/vendor/pi-permission-modes/index.ts, src/vendor/pi-permission-modes/resolve.ts, upstream/pi-permission-modes.lock.json, licenses/pi-permission-modes-MIT.txt; symbols=Default/Plan/Build/YOLO, /perm, Alt+M, shared permission pattern matcher, sandbox degradation; local changes=AILI's generated adapted entry redirects unchanged sibling modules to the exact 2.2.0 dependency | the owned resolve.ts compiles permission globs with RegExp dotAll so * and ? include ECMAScript line terminators | the exact upstream and adapted files are hash-locked and drift-checked"
     },
     {
       "SPDXID": "SPDXRef-source-pi-quota-status-63ccce8956",
@@ -67,7 +67,7 @@
       "licenseDeclared": "MIT",
       "checksums": [],
       "primaryPackagePurpose": "SOURCE",
-      "comment": "revision=742b3e40b88fbf3d5dcd9d39af96d37bd26bb436; files=src/index.ts, src/paths.ts; symbols=quota footer, /quota, global state maintenance; local changes=AILI initializes the pinned upstream extension; upstream owns quota polling and state files; Zentui relabels the displayed 5h prefix as codex and Wk as 7d without changing quota data"
+      "comment": "revision=742b3e40b88fbf3d5dcd9d39af96d37bd26bb436; files=src/index.ts, src/subscription.ts, src/format.ts, src/paths.ts; symbols=quota footer, Codex subscription windows, /quota, global state maintenance; local changes=AILI initializes the pinned upstream extension; upstream owns quota polling and state files; Zentui shows one canonical weekly segment as codex, preferring explicit Wk and using the dependency's legacy-mislabeled 5h primary only as fallback, without changing selected percentage or reset data"
     },
     {
       "SPDXID": "SPDXRef-source-pi-web-access-7a2e6bb486",
@@ -91,7 +91,7 @@
       "licenseDeclared": "MIT",
       "checksums": [],
       "primaryPackagePurpose": "SOURCE",
-      "comment": "revision=npm:2.6.18; files=index.ts; symbols=default Extension, /cache-optimizer, cache statistics, prompt cache hooks; local changes=AILI initializes the pinned upstream extension through its single Extension entry; no upstream source is copied"
+      "comment": "revision=npm:2.6.18; files=index.ts; symbols=default Extension, /cache-optimizer, cache statistics, prompt cache hooks; local changes=AILI initializes the pinned upstream extension through its single Extension entry; Zentui defaults its pi-cache-stats footer placement off while leaving cache commands and collection unchanged; no upstream source is copied"
     },
     {
       "SPDXID": "SPDXRef-source-pi-markdown-preview-43f49610ac",
@@ -126,7 +126,7 @@
       "licenseDeclared": "MIT",
       "checksums": [],
       "primaryPackagePurpose": "SOURCE",
-      "comment": "revision=165a1f8011a12a58a6409b56b8a6c0416cd9b589; files=extensions/header/index.ts, extensions/matrix/index.ts, extensions/zentui/**; symbols=header, matrix animation, Zentui footer, fixed editor compositor; local changes=registered as three additional Pi Package Extensions | header avatar loads the supplied Rem asset | Zentui palette values use the Rem palette while the Matrix animation retains the upstream Sakura palette | relative import specifiers and session lifecycle event are adapted for this package's NodeNext TypeScript contract"
+      "comment": "revision=165a1f8011a12a58a6409b56b8a6c0416cd9b589; files=extensions/header/index.ts, extensions/matrix/index.ts, extensions/zentui/**; symbols=header, matrix animation, Zentui footer, fixed editor compositor; local changes=registered as three additional Pi Package Extensions | header avatar loads the supplied Rem asset | Zentui shell palette uses Rem while Matrix and the reasoning trail retain the upstream Sakura palette | overflowing Matrix tracks are sampled deterministically across the complete terminal width while retaining the 96-track budget and ordinary-width behavior | relative import specifiers and session lifecycle event are adapted for this package's NodeNext TypeScript contract"
     },
     {
       "SPDXID": "SPDXRef-node-modules-agent-base-e28bede7a2",

package/manifests/skill-compatibility.json

@@ -801,9 +801,9 @@
         "snapshot-hash:verified",
         "npm run verify:roles",
         "vitest run tests/unit/roles.test.ts tests/unit/subagents.test.ts",
-        "vitest run tests/integration/generic-permission.test.ts",
-        "AILI_LIVE_SUBAGENT_PROBE=static npx vitest run tests/integration/live-subagent.test.ts",
-        "AILI_LIVE_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts"
+        "vitest run tests/integration/generic-subagent.test.ts tests/integration/generic-permission.test.ts",
+        "AILI_LIVE_GENERIC_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts",
+        "AILI_LIVE_CREDENTIAL_GUARD_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts"
       ],
       "status": "adapted",
       "reason": "Required capabilities are covered by verified Pi adapter evidence: subagent.dispatch.",
@@ -4311,9 +4311,9 @@
         "snapshot-hash:verified",
         "npm run verify:roles",
         "vitest run tests/unit/roles.test.ts tests/unit/subagents.test.ts",
-        "vitest run tests/integration/generic-permission.test.ts",
-        "AILI_LIVE_SUBAGENT_PROBE=static npx vitest run tests/integration/live-subagent.test.ts",
-        "AILI_LIVE_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts"
+        "vitest run tests/integration/generic-subagent.test.ts tests/integration/generic-permission.test.ts",
+        "AILI_LIVE_GENERIC_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts",
+        "AILI_LIVE_CREDENTIAL_GUARD_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts"
       ],
       "status": "adapted",
       "reason": "Required capabilities are covered by verified Pi adapter evidence: subagent.dispatch.",
@@ -5596,9 +5596,9 @@
         "snapshot-hash:verified",
         "npm run verify:roles",
         "vitest run tests/unit/roles.test.ts tests/unit/subagents.test.ts",
-        "vitest run tests/integration/generic-permission.test.ts",
-        "AILI_LIVE_SUBAGENT_PROBE=static npx vitest run tests/integration/live-subagent.test.ts",
-        "AILI_LIVE_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts"
+        "vitest run tests/integration/generic-subagent.test.ts tests/integration/generic-permission.test.ts",
+        "AILI_LIVE_GENERIC_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts",
+        "AILI_LIVE_CREDENTIAL_GUARD_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts"
       ],
       "status": "adapted",
       "reason": "Required capabilities are covered by verified Pi adapter evidence: subagent.dispatch.",
@@ -6416,9 +6416,9 @@
         "snapshot-hash:verified",
         "npm run verify:roles",
         "vitest run tests/unit/roles.test.ts tests/unit/subagents.test.ts",
-        "vitest run tests/integration/generic-permission.test.ts",
-        "AILI_LIVE_SUBAGENT_PROBE=static npx vitest run tests/integration/live-subagent.test.ts",
-        "AILI_LIVE_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts"
+        "vitest run tests/integration/generic-subagent.test.ts tests/integration/generic-permission.test.ts",
+        "AILI_LIVE_GENERIC_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts",
+        "AILI_LIVE_CREDENTIAL_GUARD_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts"
       ],
       "status": "adapted",
       "reason": "Required capabilities are covered by verified Pi adapter evidence: subagent.dispatch.",