@rosetears/aili-pi 0.1.6 → 0.1.8

package/extensions/zentui/config.ts

@@ -213,7 +213,8 @@ export const FOOTER_FORMAT_ALIASES: Record<string, string> = {
 	separator: "sep",
 };
 
-export const configPath = join(getAgentDir(), "rem-cyberdeck-zentui.json");
+export const configPath = join(getAgentDir(), "rose-cyberdeck-zentui.json");
+export const legacyConfigPath = join(getAgentDir(), "rem-cyberdeck-zentui.json");
 
 export const defaultConfig: PolishedTuiConfig = {
 	projectRefreshIntervalMs: 60_000,
@@ -252,7 +253,7 @@ export const defaultConfig: PolishedTuiConfig = {
 		os: "#F7EEF8",
 		editorAccent: "bold #88B8FF",
 		editorPrompt: "bold #88B8FF",
-		editorBorder: "sakura-macaron-gradient",
+		editorBorder: "rose-cyberdeck-gradient",
 		editorModel: "bold #88B8FF",
 		editorProvider: "#B8BEDD",
 		editorThinking: "#BCA7FF",
@@ -405,7 +406,8 @@ function stringValue(record: Record<string, unknown>, key: string): string | und
 
 function colorValue(record: Record<string, unknown>, key: string): string | undefined {
 	const value = stringValue(record, key);
-	if (key === "editorBorder" && value === "sakura-macaron-gradient") return value;
+	if (key === "editorBorder" && value === "rose-cyberdeck-gradient") return value;
+	if (key === "editorBorder" && value === "sakura-macaron-gradient") return "rose-cyberdeck-gradient";
 	return value !== undefined && isSupportedColorSpec(value) ? value : undefined;
 }
 
@@ -821,10 +823,10 @@ export function getExtensionStatusColorMode(
 	return config.extensionStatuses.colorModes[key] ?? DEFAULT_EXTENSION_STATUS_COLOR_MODE;
 }
 
-export function loadConfig(): PolishedTuiConfig {
+export function loadConfig(path = configPath, legacyPath = legacyConfigPath): PolishedTuiConfig {
 	try {
-		if (!existsSync(configPath)) return mergeConfig({});
-		return mergeConfig(JSON.parse(readFileSync(configPath, "utf8")));
+		const selected = existsSync(path) ? path : existsSync(legacyPath) ? legacyPath : undefined;
+		return selected ? mergeConfig(JSON.parse(readFileSync(selected, "utf8"))) : mergeConfig({});
 	} catch {
 		return mergeConfig({});
 	}

package/extensions/zentui/gradient.ts

@@ -2,13 +2,14 @@ import { truncateToWidth, visibleWidth } from "@earendil-works/pi-tui";
 
 export type RGB = readonly [number, number, number];
 
-export const SAKURA_MACARON_GRADIENT = "sakura-macaron-gradient";
-export const SAKURA_MACARON_STOPS: readonly RGB[] = [
-	[242, 167, 198], // sakura pink  #F2A7C6
-	[252, 201, 185], // sakura-iro   #FCC9B9
-	[239, 195, 230], // petal        #EFC3E6
-	[199, 184, 245], // lavender     #C7B8F5
-	[159, 211, 242], // sky macaron  #9FD3F2
+export const ROSE_GRADIENT = "rose-cyberdeck-gradient";
+export const ROSE_GRADIENT_STOPS: readonly RGB[] = [
+  [199, 91, 122], // brand Rose #C75B7A
+  [232, 167, 184], // soft Rose  #E8A7B8
+  [188, 167, 255], // violet     #BCA7FF
+  [136, 184, 255], // blue       #88B8FF
+  [125, 228, 255], // cyan       #7DE4FF
+  [214, 244, 255], // ice        #D6F4FF
 ];
 
 const RESET = "\x1b[0m";
@@ -16,55 +17,44 @@ const GRADIENT_CACHE_LIMIT = 128;
 const gradientCache = new Map<string, string>();
 
 function mix(from: RGB, to: RGB, amount: number): RGB {
-	const t = Math.max(0, Math.min(1, amount));
-	return [
-		Math.round(from[0] + (to[0] - from[0]) * t),
-		Math.round(from[1] + (to[1] - from[1]) * t),
-		Math.round(from[2] + (to[2] - from[2]) * t),
-	];
+  const t = Math.max(0, Math.min(1, amount));
+  return [
+    Math.round(from[0] + (to[0] - from[0]) * t),
+    Math.round(from[1] + (to[1] - from[1]) * t),
+    Math.round(from[2] + (to[2] - from[2]) * t),
+  ];
 }
 
 function sampleGradient(position: number): RGB {
-	const stops = SAKURA_MACARON_STOPS;
-	const normalized = Math.max(0, Math.min(1, position));
-	const scaled = normalized * (stops.length - 1);
-	const index = Math.min(stops.length - 2, Math.floor(scaled));
-	const from = stops[index] ?? SAKURA_MACARON_STOPS[0] ?? [242, 167, 198];
-	const to = stops[index + 1] ?? from;
-	return mix(from, to, scaled - index);
+  const normalized = Math.max(0, Math.min(1, position));
+  const scaled = normalized * (ROSE_GRADIENT_STOPS.length - 1);
+  const index = Math.min(ROSE_GRADIENT_STOPS.length - 2, Math.floor(scaled));
+  const from = ROSE_GRADIENT_STOPS[index] ?? ROSE_GRADIENT_STOPS[0]!;
+  const to = ROSE_GRADIENT_STOPS[index + 1] ?? from;
+  return mix(from, to, scaled - index);
 }
 
 function foreground(color: RGB, text: string): string {
-	return `\x1b[38;2;${color[0]};${color[1]};${color[2]}m${text}`;
+  return `\x1b[38;2;${color[0]};${color[1]};${color[2]}m${text}`;
 }
 
-/** Render the stable Sakura → sky gradient used by the editor and sent prompts. */
-export function renderSakuraGradient(text: string): string {
-	const cached = gradientCache.get(text);
-	if (cached !== undefined) return cached;
-	const chars = [...text];
-	if (chars.length === 0) return text;
-	const span = Math.max(1, chars.length - 1);
-	const rendered = `${chars.map((char, index) => foreground(sampleGradient(index / span), char)).join("")}${RESET}`;
-	if (gradientCache.size >= GRADIENT_CACHE_LIMIT) {
-		gradientCache.delete(gradientCache.keys().next().value ?? "");
-	}
-	gradientCache.set(text, rendered);
-	return rendered;
+/** Render the stable Rose-to-ice gradient for Zentui chrome and markers. */
+export function renderRoseGradient(text: string): string {
+  const cached = gradientCache.get(text);
+  if (cached !== undefined) return cached;
+  const chars = [...text];
+  if (chars.length === 0) return text;
+  const span = Math.max(1, chars.length - 1);
+  const rendered = `${chars.map((char, index) => foreground(sampleGradient(index / span), char)).join("")}${RESET}`;
+  if (gradientCache.size >= GRADIENT_CACHE_LIMIT) gradientCache.delete(gradientCache.keys().next().value ?? "");
+  gradientCache.set(text, rendered);
+  return rendered;
 }
 
 /** Add symmetric colored side rails while preserving the terminal width contract. */
-export function renderBoxedLine(
-	line: string,
-	width: number,
-	leftRail: string,
-	rightRail: string,
-): string {
-	if (width <= 0) return "";
-	const leftWidth = visibleWidth(leftRail);
-	const rightWidth = visibleWidth(rightRail);
-	const innerWidth = Math.max(0, width - leftWidth - rightWidth);
-	const content = truncateToWidth(line, innerWidth, "");
-	const padding = " ".repeat(Math.max(0, innerWidth - visibleWidth(content)));
-	return truncateToWidth(`${leftRail}${content}${padding}${rightRail}`, width, "");
+export function renderBoxedLine(line: string, width: number, leftRail: string, rightRail: string): string {
+  if (width <= 0) return "";
+  const innerWidth = Math.max(0, width - visibleWidth(leftRail) - visibleWidth(rightRail));
+  const content = truncateToWidth(line, innerWidth, "");
+  return truncateToWidth(`${leftRail}${content}${" ".repeat(Math.max(0, innerWidth - visibleWidth(content)))}${rightRail}`, width, "");
 }

package/extensions/zentui/thinking-message.ts

@@ -1,6 +1,6 @@
 import { AssistantMessageComponent, type Theme } from "@earendil-works/pi-coding-agent";
 import { type Component, truncateToWidth, visibleWidth } from "@earendil-works/pi-tui";
-import { renderSakuraGradient } from "./gradient.js";
+import { renderRoseGradient } from "./gradient.js";
 import { installPrototypePatch } from "./prototype-patch-registry.js";
 
 type Cleanup = () => void;
@@ -121,14 +121,14 @@ class ThinkingTrailComponent implements Component {
 		const theme = this.getTheme();
 		if (!theme) return rawLines;
 		const count = theme.fg("muted", ` · ${stepCount} ${stepCount === 1 ? "STEP" : "STEPS"}`);
-		const title = `${renderSakuraGradient("✦ REASONING")}${count}`;
+		const title = `${renderRoseGradient("✦ REASONING")}${count}`;
 		let currentStep = 0;
 		const body = rows.map(({ line, step }) => {
 			if (step) currentStep += 1;
 			const isLastStep = currentStep === stepCount;
 			const branchText = step ? (isLastStep ? "╰─ " : "├─ ") : isLastStep ? "   " : "│  ";
 			const branch = theme.fg("thinkingXhigh", branchText);
-			const marker = step ? renderSakuraGradient("◇ ") : "  ";
+			const marker = step ? renderRoseGradient("◇ ") : "  ";
 			return truncateToWidth(`${branch}${marker}${line}`, width, "");
 		});
 

package/extensions/zentui/tool-execution.ts

@@ -1,6 +1,6 @@
 import { type Theme, ToolExecutionComponent } from "@earendil-works/pi-coding-agent";
 import { visibleWidth } from "@earendil-works/pi-tui";
-import { renderBoxedLine, renderSakuraGradient } from "./gradient.js";
+import { renderBoxedLine, renderRoseGradient } from "./gradient.js";
 import { installPrototypePatch } from "./prototype-patch-registry.js";
 
 const SETTLED_CACHE_MAX_LINES = 80;
@@ -141,17 +141,17 @@ export function installToolExecutionStyle(getTheme: () => Theme | undefined): Cl
 				if (blank !== undefined) prefix.push(blank);
 			}
 			const label = fitBorderLabel(statusLabel(runtime), width);
-			const top = renderSakuraGradient(label);
+			const top = renderRoseGradient(label);
 			// Keep only the status rail slightly heavier. State is expressed in the
-			// native macaron palette rather than traffic-light red/green: lavender
-			// while running, sky blue when complete, and Sakura pink when failed.
+			// Rose palette rather than traffic-light red/green: violet while running,
+			// ice blue when complete, and Rose when failed.
 			const leftRail = pending
 				? theme.fg("thinkingXhigh", "┃ ")
 				: runtime.result?.isError
 					? theme.fg("accent", "┃ ")
 					: theme.fg("syntaxFunction", "┃ ");
-			const rightRail = renderSakuraGradient(" │");
-			const bottom = renderSakuraGradient(bottomBorder(width));
+			const rightRail = renderRoseGradient(" │");
+			const bottom = renderRoseGradient(bottomBorder(width));
 
 			const boxed = [
 				...prefix,

package/extensions/zentui/ui.ts

@@ -10,7 +10,7 @@ import {
 } from "@earendil-works/pi-tui";
 import type { PolishedTuiConfig } from "./config.js";
 import { formatTimeLabel } from "./format.js";
-import { renderSakuraGradient, SAKURA_MACARON_GRADIENT } from "./gradient.js";
+import { renderRoseGradient, ROSE_GRADIENT } from "./gradient.js";
 import {
 	EDITOR_ACCENT_FALLBACK,
 	EDITOR_BORDER_FALLBACK,
@@ -83,8 +83,8 @@ export function renderEditorFrameBorder(
 	uiTheme: Theme,
 	colorSource: PolishedTuiConfig["colorSources"]["editor"],
 ): string {
-	if (config.colors.editorBorder === SAKURA_MACARON_GRADIENT) {
-		return renderSakuraGradient(text);
+	if (config.colors.editorBorder === ROSE_GRADIENT) {
+		return renderRoseGradient(text);
 	}
 	return renderStyleForSourceOrFallback(
 		uiTheme,

package/licenses/pi-permission-modes-MIT.txt

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Nico Merz
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/manifests/adapter-evidence.json

@@ -11,7 +11,7 @@
         "vitest run tests/unit/runtime.test.ts"
       ],
       "artifacts": [
-        { "path": "package-lock.json", "sha256": "b1356fd5c37f5e69387fb7d4acaeb3777c8d117f3906e51def4d5f8918b7391e" },
+        { "path": "package-lock.json", "sha256": "a9e5a3e4d1076b3179dd8cca5ef89f9fddc838e0acf9abcc1f42daf2a90ddafb" },
         { "path": "tests/integration/extension-load.test.ts", "sha256": "f2fdceb965f55bc481acc6457eee5cac9499dac08e8c3d17ca60efd07f13e96c" },
         { "path": "tests/unit/runtime.test.ts", "sha256": "9e99920e7e16529f109771d659f611c9fa580941a5dbf924b2d9d117dd3adeee" }
       ]
@@ -24,21 +24,22 @@
       "verification": [
         "npm run verify:roles",
         "vitest run tests/unit/roles.test.ts tests/unit/subagents.test.ts",
-        "vitest run tests/integration/generic-permission.test.ts",
-        "AILI_LIVE_SUBAGENT_PROBE=static npx vitest run tests/integration/live-subagent.test.ts",
-        "AILI_LIVE_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts"
+        "vitest run tests/integration/generic-subagent.test.ts tests/integration/generic-permission.test.ts",
+        "AILI_LIVE_GENERIC_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts",
+        "AILI_LIVE_CREDENTIAL_GUARD_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts"
       ],
       "artifacts": [
-        { "path": "src/runtime/subagents.ts", "sha256": "4fa3ca548e2d2038410f0c9a3a2e41c5137ebf2dff7987d3e0be6e62bb9f6412" },
+        { "path": "src/runtime/subagents.ts", "sha256": "9f09e0e8a380d026d82b0842f2c687da2f3529b43a7ef6d1a6aad47d71190d48" },
         { "path": "src/runtime/child-guard.ts", "sha256": "9da3c1d80805fd76bbf7a7fd253dff44f0756439fdee039bd7d7fd30766329e1" },
         { "path": "src/runtime/credential-guard.ts", "sha256": "01d76ff0a9a2a0a08a2d2e52b6ed050d925df5e5bea1e6194130e00bfe22cde3" },
-        { "path": "tests/unit/subagents.test.ts", "sha256": "93602a401e058d1870922b213f8f0a00dc35e869a704b0c551442d3d8454054a" },
+        { "path": "tests/unit/subagents.test.ts", "sha256": "16fc1fbd1759befeed03a2428294c28d662022622c61a6444e23b365dc7447aa" },
         { "path": "tests/unit/child-guard.test.ts", "sha256": "b187d6d84cd0829ae5474e133b4df911a80b75b9e89622b8543a1c5894be4974" },
-        { "path": "tests/integration/generic-permission.test.ts", "sha256": "1e113af5b5cce59f365bc12a1735e1aa269c0a739fe6fc7aa4c9131818869ce5" },
+        { "path": "tests/integration/generic-permission.test.ts", "sha256": "90cc4ee67098f671dddac495d5e2cd5dc2c50131297fd04f0d72a1ca44217f24" },
+        { "path": "tests/integration/generic-subagent.test.ts", "sha256": "a13f8564bdd1bd735f9313d2ad71511a47c939dd6351f2f460771cb48a7fc80b" },
         { "path": "tests/unit/roles.test.ts", "sha256": "72b61af16ff66506aaaceac28c92d8b3756741e3c4df0544686b3d4940215b57" },
         { "path": "scripts/sync-roles.ts", "sha256": "a4fd66c95d91ebd92f0b1c6164a84809c4b5a1bf1e185dbdd61af23688dd2d9c" },
-        { "path": "tests/integration/live-subagent.test.ts", "sha256": "46a907526890c4cd4a4e1d768fca51173c9a0c3db37ac83ba57db23d54d7f339" },
-        { "path": "manifests/live-verification.json", "sha256": "4080de48114ef5aea3a5cc201e3b704acf65833c5dee64c38cd9b41f44740c04" }
+        { "path": "tests/integration/live-subagent.test.ts", "sha256": "b88750f74b203cdbdb9d0e453e16f720ff4d8e4591ca140e0a3c7e1d8428868c" },
+        { "path": "manifests/live-verification.json", "sha256": "f5c80dfb2fb989b43af3b7460510b0a546cc05f8ff9e671c3e9284384c33d95b" }
       ]
     }
   ]

package/manifests/live-verification.json

@@ -1,32 +1,40 @@
 {
-  "schemaVersion": 1,
+  "schemaVersion": 2,
   "platform": "linux",
   "piVersion": "0.81.1",
+  "subagentVersion": "0.4.8",
   "status": "passed",
-  "approvedScope": "generic agentless headless children; one read-only repository package.json probe and one disposable external .env denial probe; no business-file mutation, bash, worktree, sandbox, or global-home access; only approved temporary run artifacts were created and removed",
+  "approvedScope": "On 2026-07-24, the user authorized two bounded live probes after repository-local compatibility verification: an omitted-backend, agentless child restricted to reading package.json, and an explicit-headless credential guard child restricted to a disposable .env sentinel. Both probes used only their declared temporary artifact roots and completed without business-file changes.",
   "probes": [
     {
       "id": "generic-subagent-fixtures",
       "command": "npx vitest run tests/unit/subagents.test.ts tests/integration/generic-subagent.test.ts",
-      "status": "passed"
+      "status": "passed",
+      "changedFiles": 0,
+      "backendRequest": "matrix",
+      "resolvedBackend": "headless"
     },
     {
-      "id": "generic-agentless-read-package",
+      "id": "generic-agentless-default-path",
       "command": "AILI_LIVE_GENERIC_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts",
       "status": "passed",
-      "changedFiles": 0
+      "changedFiles": 0,
+      "backendRequest": "omitted",
+      "resolvedBackend": "headless"
     },
     {
-      "id": "generic-credential-guard",
+      "id": "generic-credential-guard-explicit-headless",
       "command": "AILI_LIVE_CREDENTIAL_GUARD_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts",
       "status": "passed",
-      "changedFiles": 0
+      "changedFiles": 0,
+      "backendRequest": "explicit-headless",
+      "resolvedBackend": "headless"
     }
   ],
   "implementation": {
-    "src/runtime/subagents.ts": "4fa3ca548e2d2038410f0c9a3a2e41c5137ebf2dff7987d3e0be6e62bb9f6412",
-    "tests/unit/subagents.test.ts": "93602a401e058d1870922b213f8f0a00dc35e869a704b0c551442d3d8454054a",
-    "tests/integration/live-subagent.test.ts": "46a907526890c4cd4a4e1d768fca51173c9a0c3db37ac83ba57db23d54d7f339"
+    "src/runtime/subagents.ts": "9f09e0e8a380d026d82b0842f2c687da2f3529b43a7ef6d1a6aad47d71190d48",
+    "tests/unit/subagents.test.ts": "16fc1fbd1759befeed03a2428294c28d662022622c61a6444e23b365dc7447aa",
+    "tests/integration/live-subagent.test.ts": "b88750f74b203cdbdb9d0e453e16f720ff4d8e4591ca140e0a3c7e1d8428868c"
   },
-  "credentialHandling": "Existing Pi authentication was used by Pi; AILI did not copy, print, or modify authentication files."
+  "credentialHandling": "The explicit-headless credential guard probe used only a disposable .env sentinel. It completed with changedFiles=0; the sentinel was absent from the model-visible result and every temporary artifact before cleanup."
 }

package/manifests/provenance.json

@@ -30,8 +30,8 @@
       "status": "dependency",
       "sourceFiles": ["src/index.ts", "src/api.ts", "src/runners/headless-model.ts", "src/artifacts/result.ts"],
       "symbols": ["subagent tool renderCall", "runSubagent API", "headless lifecycle", "artifact envelope"],
-      "localChanges": ["AILI registers the full pinned upstream subagent tool schema, prepends a sanitized bounded requested-Agent heading to upstream run-call rendering, injects a non-removable credential guard, and relies on the ambient AILI pi-permission-modes registration exactly once in each child; no upstream source is copied"],
-      "verification": ["tests/unit/subagents.test.ts", "tests/integration/package-runtime.test.ts"]
+      "localChanges": ["AILI registers the full pinned upstream subagent tool schema, prepends a sanitized bounded requested-Agent heading, injects a non-removable credential guard, normalizes ordinary omitted/auto runs to headless for the Pi 0.81.1 compatibility window, and rejects explicit inline before model startup; no upstream source is copied"],
+      "verification": ["tests/unit/subagents.test.ts", "tests/integration/generic-subagent.test.ts", "tests/integration/live-subagent.test.ts", "tests/integration/package-runtime.test.ts"]
     },
     {
       "name": "pi-permission-modes",
@@ -39,11 +39,11 @@
       "revision": "23d65d10a53b67043cae42322acf9044d6edb196",
       "version": "2.2.0",
       "license": "MIT",
-      "status": "dependency",
-      "sourceFiles": ["src/index.ts", "permission-mode.defaults.json"],
-      "symbols": ["Default/Plan/Build/YOLO", "/perm", "Alt+M", "sandbox degradation"],
-      "localChanges": ["AILI initializes the pinned upstream extension and does not retain a competing AILI mode command or shortcut"],
-      "verification": ["tests/unit/runtime.test.ts", "tests/integration/extension-load.test.ts"]
+      "status": "adapted",
+      "sourceFiles": ["src/vendor/pi-permission-modes/index.ts", "src/vendor/pi-permission-modes/resolve.ts", "upstream/pi-permission-modes.lock.json", "licenses/pi-permission-modes-MIT.txt"],
+      "symbols": ["Default/Plan/Build/YOLO", "/perm", "Alt+M", "shared permission pattern matcher", "sandbox degradation"],
+      "localChanges": ["AILI's generated adapted entry redirects unchanged sibling modules to the exact 2.2.0 dependency", "the owned resolve.ts compiles permission globs with RegExp dotAll so * and ? include ECMAScript line terminators", "the exact upstream and adapted files are hash-locked and drift-checked"],
+      "verification": ["npm run verify:permission-modes", "tests/unit/permission-patterns.test.ts", "tests/integration/permission-modes.test.ts", "tests/integration/extension-load.test.ts"]
     },
     {
       "name": "pi-quota-status",
@@ -113,7 +113,7 @@
       "status": "adapted",
       "sourceFiles": ["extensions/header/index.ts", "extensions/matrix/index.ts", "extensions/zentui/**"],
       "symbols": ["header", "matrix animation", "Zentui footer", "fixed editor compositor"],
-      "localChanges": ["registered as three additional Pi Package Extensions", "header avatar loads the supplied Rem asset", "Zentui shell palette uses Rem while Matrix and the reasoning trail retain the upstream Sakura palette", "overflowing Matrix tracks are sampled deterministically across the complete terminal width while retaining the 96-track budget and ordinary-width behavior", "relative import specifiers and session lifecycle event are adapted for this package's NodeNext TypeScript contract"],
+      "localChanges": ["registered as three additional Pi Package Extensions", "Rose header loads a package-owned renamed artwork asset without changing upstream identity", "Rose Shimmer, Rose Code Rain, and Zentui use the Rose-owned palette and gradient", "overflowing Matrix tracks remain deterministic across the complete terminal width with the 96-track budget, while each rain row receives a structural blank-row repair", "relative import specifiers and session lifecycle event are adapted for this package's NodeNext TypeScript contract"],
       "verification": ["tests/unit/matrix.test.ts", "tests/unit/zentui-gradient.test.ts", "npm run typecheck", "npm test", "npm pack --dry-run --json"]
     }
   ]

package/manifests/sbom.json

@@ -3,7 +3,7 @@
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "name": "@rosetears/aili-pi-0.0.0-development",
-  "documentNamespace": "https://github.com/Rosetears520/aili-pi/sbom/b1356fd5c37f5e69387fb7d4acaeb377",
+  "documentNamespace": "https://github.com/Rosetears520/aili-pi/sbom/4a5b950286a6867acf10e709f49f1448",
   "creationInfo": {
     "creators": [
       "Tool: @rosetears/aili-pi scripts/generate-provenance.ts"
@@ -43,7 +43,7 @@
       "licenseDeclared": "MIT",
       "checksums": [],
       "primaryPackagePurpose": "SOURCE",
-      "comment": "revision=daa7b83819116a62008ad17aa65fcd50fefbafd0; files=src/index.ts, src/api.ts, src/runners/headless-model.ts, src/artifacts/result.ts; symbols=subagent tool renderCall, runSubagent API, headless lifecycle, artifact envelope; local changes=AILI registers the full pinned upstream subagent tool schema, prepends a sanitized bounded requested-Agent heading to upstream run-call rendering, injects a non-removable credential guard, and relies on the ambient AILI pi-permission-modes registration exactly once in each child; no upstream source is copied"
+      "comment": "revision=daa7b83819116a62008ad17aa65fcd50fefbafd0; files=src/index.ts, src/api.ts, src/runners/headless-model.ts, src/artifacts/result.ts; symbols=subagent tool renderCall, runSubagent API, headless lifecycle, artifact envelope; local changes=AILI registers the full pinned upstream subagent tool schema, prepends a sanitized bounded requested-Agent heading, injects a non-removable credential guard, normalizes ordinary omitted/auto runs to headless for the Pi 0.81.1 compatibility window, and rejects explicit inline before model startup; no upstream source is copied"
     },
     {
       "SPDXID": "SPDXRef-source-pi-permission-modes-9b38b384cd",
@@ -55,7 +55,7 @@
       "licenseDeclared": "MIT",
       "checksums": [],
       "primaryPackagePurpose": "SOURCE",
-      "comment": "revision=23d65d10a53b67043cae42322acf9044d6edb196; files=src/index.ts, permission-mode.defaults.json; symbols=Default/Plan/Build/YOLO, /perm, Alt+M, sandbox degradation; local changes=AILI initializes the pinned upstream extension and does not retain a competing AILI mode command or shortcut"
+      "comment": "revision=23d65d10a53b67043cae42322acf9044d6edb196; files=src/vendor/pi-permission-modes/index.ts, src/vendor/pi-permission-modes/resolve.ts, upstream/pi-permission-modes.lock.json, licenses/pi-permission-modes-MIT.txt; symbols=Default/Plan/Build/YOLO, /perm, Alt+M, shared permission pattern matcher, sandbox degradation; local changes=AILI's generated adapted entry redirects unchanged sibling modules to the exact 2.2.0 dependency | the owned resolve.ts compiles permission globs with RegExp dotAll so * and ? include ECMAScript line terminators | the exact upstream and adapted files are hash-locked and drift-checked"
     },
     {
       "SPDXID": "SPDXRef-source-pi-quota-status-63ccce8956",
@@ -126,7 +126,7 @@
       "licenseDeclared": "MIT",
       "checksums": [],
       "primaryPackagePurpose": "SOURCE",
-      "comment": "revision=165a1f8011a12a58a6409b56b8a6c0416cd9b589; files=extensions/header/index.ts, extensions/matrix/index.ts, extensions/zentui/**; symbols=header, matrix animation, Zentui footer, fixed editor compositor; local changes=registered as three additional Pi Package Extensions | header avatar loads the supplied Rem asset | Zentui shell palette uses Rem while Matrix and the reasoning trail retain the upstream Sakura palette | overflowing Matrix tracks are sampled deterministically across the complete terminal width while retaining the 96-track budget and ordinary-width behavior | relative import specifiers and session lifecycle event are adapted for this package's NodeNext TypeScript contract"
+      "comment": "revision=165a1f8011a12a58a6409b56b8a6c0416cd9b589; files=extensions/header/index.ts, extensions/matrix/index.ts, extensions/zentui/**; symbols=header, matrix animation, Zentui footer, fixed editor compositor; local changes=registered as three additional Pi Package Extensions | Rose header loads a package-owned renamed artwork asset without changing upstream identity | Rose Shimmer, Rose Code Rain, and Zentui use the Rose-owned palette and gradient | overflowing Matrix tracks remain deterministic across the complete terminal width with the 96-track budget, while each rain row receives a structural blank-row repair | relative import specifiers and session lifecycle event are adapted for this package's NodeNext TypeScript contract"
     },
     {
       "SPDXID": "SPDXRef-node-modules-agent-base-e28bede7a2",

package/manifests/skill-compatibility.json

@@ -801,9 +801,9 @@
         "snapshot-hash:verified",
         "npm run verify:roles",
         "vitest run tests/unit/roles.test.ts tests/unit/subagents.test.ts",
-        "vitest run tests/integration/generic-permission.test.ts",
-        "AILI_LIVE_SUBAGENT_PROBE=static npx vitest run tests/integration/live-subagent.test.ts",
-        "AILI_LIVE_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts"
+        "vitest run tests/integration/generic-subagent.test.ts tests/integration/generic-permission.test.ts",
+        "AILI_LIVE_GENERIC_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts",
+        "AILI_LIVE_CREDENTIAL_GUARD_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts"
       ],
       "status": "adapted",
       "reason": "Required capabilities are covered by verified Pi adapter evidence: subagent.dispatch.",
@@ -4311,9 +4311,9 @@
         "snapshot-hash:verified",
         "npm run verify:roles",
         "vitest run tests/unit/roles.test.ts tests/unit/subagents.test.ts",
-        "vitest run tests/integration/generic-permission.test.ts",
-        "AILI_LIVE_SUBAGENT_PROBE=static npx vitest run tests/integration/live-subagent.test.ts",
-        "AILI_LIVE_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts"
+        "vitest run tests/integration/generic-subagent.test.ts tests/integration/generic-permission.test.ts",
+        "AILI_LIVE_GENERIC_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts",
+        "AILI_LIVE_CREDENTIAL_GUARD_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts"
       ],
       "status": "adapted",
       "reason": "Required capabilities are covered by verified Pi adapter evidence: subagent.dispatch.",
@@ -5596,9 +5596,9 @@
         "snapshot-hash:verified",
         "npm run verify:roles",
         "vitest run tests/unit/roles.test.ts tests/unit/subagents.test.ts",
-        "vitest run tests/integration/generic-permission.test.ts",
-        "AILI_LIVE_SUBAGENT_PROBE=static npx vitest run tests/integration/live-subagent.test.ts",
-        "AILI_LIVE_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts"
+        "vitest run tests/integration/generic-subagent.test.ts tests/integration/generic-permission.test.ts",
+        "AILI_LIVE_GENERIC_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts",
+        "AILI_LIVE_CREDENTIAL_GUARD_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts"
       ],
       "status": "adapted",
       "reason": "Required capabilities are covered by verified Pi adapter evidence: subagent.dispatch.",
@@ -6416,9 +6416,9 @@
         "snapshot-hash:verified",
         "npm run verify:roles",
         "vitest run tests/unit/roles.test.ts tests/unit/subagents.test.ts",
-        "vitest run tests/integration/generic-permission.test.ts",
-        "AILI_LIVE_SUBAGENT_PROBE=static npx vitest run tests/integration/live-subagent.test.ts",
-        "AILI_LIVE_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts"
+        "vitest run tests/integration/generic-subagent.test.ts tests/integration/generic-permission.test.ts",
+        "AILI_LIVE_GENERIC_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts",
+        "AILI_LIVE_CREDENTIAL_GUARD_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts"
       ],
       "status": "adapted",
       "reason": "Required capabilities are covered by verified Pi adapter evidence: subagent.dispatch.",

package/manifests/subagent-provenance.json

@@ -27,11 +27,21 @@
     },
     {
       "name": "@agwab/pi-subagent",
+      "version": "0.4.8",
       "revision": "daa7b83819116a62008ad17aa65fcd50fefbafd0",
       "license": "MIT",
-      "status": "reference-only",
-      "reusedPatterns": [],
-      "reason": "No community source code is copied or depended on in P5; accepted design evidence is retained for the P8 notice/SBOM audit."
+      "status": "dependency",
+      "reusedPatterns": [
+        "generic subagent tool schema and rendering",
+        "headless/tmux/inline backend and lifecycle envelopes",
+        "bounded parallel fan-out, worktree, sandbox, async, interrupt, and reconcile behavior"
+      ],
+      "localAdaptation": [
+        "ordinary omitted/auto runs use headless for the Pi 0.81.1 compatibility window",
+        "explicit incompatible inline requests fail before model startup",
+        "AILI injects the immutable credential guard and a bounded requested-Agent heading"
+      ],
+      "reason": "AILI depends on the exact package and applies a wrapper-only compatibility adaptation; no upstream source is copied."
     }
   ]
 }

package/notices/pi-sakura-cyberdeck-NOTICE.txt

@@ -2,6 +2,6 @@ This package includes a modified copy of pi-zentui by Luka.
 Original project: https://github.com/lmilojevicc/pi-zentui
 License: MIT. Full license text: licenses/pi-zentui-MIT.txt
 
-Modifications include the Rem shell palette, retained Sakura Matrix/reasoning
-palette, responsive bounded Matrix track selection, package-specific defaults,
-and package-specific configuration path.
+Modifications include Rose Cyberdeck branding, Rose Shimmer and Rose Code Rain,
+Rose Zentui gradients, responsive bounded Matrix track selection, package-specific
+defaults, and package-specific configuration paths.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rosetears/aili-pi",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "description": "AILI and ROSE distribution for official Pi",
   "type": "module",
   "license": "MIT",
@@ -50,7 +50,7 @@
       "./prompts/local-review.md"
     ],
     "themes": [
-      "./themes/rem-cyberdeck.json"
+      "./themes/rose-cyberdeck.json"
     ]
   },
   "engines": {
@@ -68,8 +68,10 @@
     "validate:roles": "npm run verify:roles",
     "sync:adapters": "node --experimental-strip-types scripts/apply-adapter-evidence.ts",
     "validate:compatibility": "node --experimental-strip-types scripts/apply-adapter-evidence.ts --verify",
-    "generate:provenance": "node --experimental-strip-types scripts/generate-provenance.ts",
-    "validate:provenance": "node --experimental-strip-types scripts/generate-provenance.ts --verify",
+    "sync:permission-modes": "node --experimental-strip-types scripts/sync-permission-modes.ts",
+    "verify:permission-modes": "node --experimental-strip-types scripts/sync-permission-modes.ts --verify",
+    "generate:provenance": "node --experimental-strip-types scripts/sync-permission-modes.ts --verify && node --experimental-strip-types scripts/generate-provenance.ts",
+    "validate:provenance": "node --experimental-strip-types scripts/sync-permission-modes.ts --verify && node --experimental-strip-types scripts/generate-provenance.ts --verify",
     "validate:capabilities": "node --experimental-strip-types scripts/validate-runtime.ts",
     "validate:release": "node --experimental-strip-types scripts/validate-runtime.ts --release",
     "test:doctor": "vitest run tests/unit/doctor.test.ts",

package/scripts/generate-provenance.ts

@@ -115,7 +115,7 @@ async function generate(): Promise<{ notices: string; sbom: object }> {
     "",
     `The exact ${packages.length}-entry package-lock inventory, versions, integrity values, dependency scope, and declared licenses is recorded in \`manifests/sbom.json\`.`,
     "",
-    "Runtime dependencies are initialized through the single AILI Extension entry; no third-party source tree is copied into this package.",
+    "Runtime dependencies are initialized through the single AILI Extension entry. Package-owned third-party adaptations are copied only where their provenance sourceFiles explicitly name repository paths.",
     "",
   ].join("\n");
   return { notices, sbom };