@rosetears/aili-pi 0.1.8 → 0.1.10

package/README.md

@@ -53,7 +53,7 @@ That command creates or updates only the AILI marker block in `~/.pi/agent/APPEN
 
 The package supplies the dark `rose-cyberdeck` theme plus three additional Pi Extensions: a Rose header, Rose Shimmer + four-row Rose Code Rain working surface, and Zentui footer/editor surface. Select it through Pi's `/settings` theme selector or set `"theme": "rose-cyberdeck"` in `~/.pi/agent/settings.json`. The visual extensions are adapted from `pi-sakura-cyberdeck` at revision `165a1f8011a12a58a6409b56b8a6c0416cd9b589` under MIT; see `THIRD_PARTY_NOTICES.md` and `notices/pi-sakura-cyberdeck-NOTICE.txt`.
 
-Rose Code Rain retains the pinned sparse waterfall geometry and default `density=0.65`, while bounded ultra-wide tracks are spread across the complete terminal-cell width instead of truncating to a left prefix. `/rose-matrix status` reports its settings; use `/rose-matrix density <0.45-0.95>` or `/rose-matrix appearance <auto|dark|light>` for explicit preferences. `/sakura-matrix` remains a deprecated compatibility alias. The `✦ REASONING` trail uses the Rose-to-ice gradient.
+Rose Code Rain uses the original sparse, fixed-column waterfall geometry: `density` selects even-cell tracks, at most 96 tracks span ultra-wide terminals, and each track falls vertically with a randomized tail and gap. The default 12 FPS cadence and 8–16 rows/second fall speed sit between the released and dense-preview profiles. `/rose-matrix status`, `/rose-matrix fps <8-18>`, `/rose-matrix density <0.45-0.95>`, and `/rose-matrix appearance <auto|dark|light>` change active preferences. `/sakura-matrix` remains a deprecated compatibility alias. Header, rain, frames, footer, and editor use the Rose six-color system: Blue, Ice, Cyan, Violet, Rose, and Soft Rose.
 
 ### Migrating from Rem/Sakura names
 
@@ -77,7 +77,7 @@ The `pi-permission-modes@2.2.0` baseline owns mode persistence, prompts, and san
 - `pi-web-access@0.13.0` provides its complete upstream web-search, content-fetch, curator, clone/PDF/video, and bundled-skill surface. Its provider fallback, network traffic, config/credential paths, clone cache, temporary curator service, downloads, and optional browser-cookie access are upstream behavior; inspect its tool requests and configuration before use.
 - `pi-quota-status@0.3.0` is enabled by default. It may maintain `~/.pi/agent/pi-quota-status/state.json`; `/quota config` creates its configuration template. Zentui displays exactly one weekly value as `codex <percent> <reset>`, preferring explicit `Wk` data and treating the dependency's current `5h`-labeled primary value only as a compatibility fallback when weekly is absent.
 - `pi-permission-modes@2.2.0` provides the permission UI and sandbox degradation behavior above through AILI's exact-source adaptation. The only semantic source change is line-terminator-safe shared glob matching; `upstream/pi-permission-modes.lock.json` records the baseline and adapted hashes. AILI does not retain `/aili-mode` or `Ctrl+Shift+Alt+A` as competing controls.
-- `@agwab/pi-subagent@0.4.8` owns the generic `subagent` tool, child spawn, cancellation, durable run/artifact lifecycle, bounded parallel fan-out, async actions, worktrees, external `cwd`, and sandbox options. On Pi 0.81.1, AILI routes ordinary omitted/`auto` calls to `headless` because the pinned inline runner calls removed SDK factories; explicit `inline` stops before model startup with a compatibility diagnostic. Explicit `headless`/`tmux`, visible auto, sandbox auto, lifecycle actions, and caller options remain upstream paths. A mixed parallel auto call that combines visible tasks with ordinary uncontained tasks is rejected rather than silently sending one class through broken inline. The 19 `aili.<role>` profiles are optional named agents; generic or agentless runs do not use an AILI-only result schema. AILI also adds a bounded requested `Agent:`/`Agents:` heading and an immutable credential-path guard. The upstream runner excludes recursive `subagent` exposure inside workers.
+- AILI owns the public `task`/`hub` persistent Agent framework. `task` creates parent-scoped official Pi child sessions using 19 specialized `aili.*` selectors or `general`; top-level work is async by default, supports bounded batch scheduling, and returns stable Agent/job/turn IDs plus `agent://` and `history://` references. `hub` provides list/send/wait/inbox/output/history/jobs/cancel/model operations, park/revive, durable delivery, and owner/descendant scoping. No `subagent` compatibility alias or run/attempt backend selector remains. See [`docs/persistent-agents.md`](docs/persistent-agents.md).
 - `pi-cache-optimizer@2.6.18` provides `/cache-optimizer`, provider cache diagnostics, cache statistics, and prompt-cache optimization. It may maintain `~/.pi/agent/pi-cache-optimizer-stats.json`; `/cache-optimizer fix` is interactive and is the only command that may propose editing `models.json`.
 - `pi-markdown-preview@0.10.1` provides `/preview`, `/preview-browser`, `/preview-pdf`, `/preview-clear-cache`, and the `preview_export` tool. Terminal/browser previews require a Chromium executable; PDF export additionally requires Pandoc and a LaTeX engine.
 - `@narumitw/pi-lsp@0.25.0` provides language-agnostic `lsp_diagnostics`, `lsp_fix`, and `/lsp`. It supports routes for C/C++, Python, CSS/SCSS, JavaScript/TypeScript, Go, Rust, Java, Kotlin, Bash, YAML, Terraform, and other languages. It does not download language servers; install the required commands separately and configure project routes in `.pi/pi-lsp.json` or user routes in `~/.pi/agent/pi-lsp.json`.
@@ -97,9 +97,9 @@ When unavailable, runtime and doctor output use explicit `SKIP`/`WARN` results a
 
 ## Security boundary
 
-AILI injects a non-removable guard that denies standard Pi file-tool and parsed-bash access to credential, authentication, and private-key paths, including from an external `cwd`, a YOLO permission mode, or a caller-supplied child extension list. Child Pi processes load the ambient AILI permission-mode registration exactly once, so adapted permission prompts and sandbox behavior remain active; headless confirmation requests fail closed. The guard does not make arbitrary third-party extension code safe: extensions remain trusted code and may have direct process authority. Neither AILI nor Pi provides a universal OS sandbox or containment: trusted extensions, user-authority processes, ambient network access, and filesystem races remain in the user trust domain. Inspect exact approval targets and do not put credentials in task text.
+AILI applies a non-removable in-process child guard before tool approval. It denies credential, authentication, and private-key paths/material; intersects parent-active tools with role/call ceilings; and routes each `ask` decision back to the parent UI. In sandbox-required modes, child Bash reuses the initialized `pi-permission-modes` SandboxManager through a child-cwd-specific Bash definition; if that executor is unavailable or the child is in an incompatible Git worktree, Bash fails closed rather than running unsandboxed. Parent task acceptance is not blanket child authorization. The guard does not make arbitrary trusted extension code safe, and neither AILI nor Pi claims a universal OS sandbox. Inspect exact approval targets and do not put credentials in task text.
 
-Use `subagent` lifecycle actions (`status`, `logs`, `wait`, `interrupt`, `mark-background`, and `reconcile`) to inspect durable async work. Upstream fan-out is version-bounded rather than capped by AILI at two; background completion is not evidence until inspected. Subagents are a benefit-based way to improve execution efficiency and preserve the main agent's context: the main agent owns decisions, scope, integration, and final verification, while bounded discovery, implementation, testing, or other execution may be delegated when specialist, parallelism, or context-isolation benefits outweigh orchestration cost. Direct parent work remains valid when delegation has no clear net benefit; no subagent call is required to unlock file mutation. Provider/model behavior still depends on the configured Pi environment.
+Use `hub jobs`, `hub wait`, `hub output`, and `hub history` to inspect durable asynchronous work. At most 32 top-level turns run concurrently; nested work is synchronous and depth-bounded. Persistent Agents are a benefit-based way to improve execution efficiency and preserve parent context, while the main agent retains decisions, integration, and final verification. Direct parent work remains valid when delegation has no clear net benefit; no Agent call is required to unlock mutation. Provider/model behavior still depends on the configured Pi environment.
 
 ## Provenance and reproducibility
 
@@ -107,7 +107,7 @@ Use `subagent` lifecycle actions (`status`, `logs`, `wait`, `interrupt`, `mark-b
 - `upstream/opencode-global-agents.lock.json` pins the global AGENTS source revision/hash and documents its Pi-native derivation.
 - `upstream/pi-permission-modes.lock.json` pins the exact upstream and adapted permission runtime files and semantic diff.
 - `manifests/skill-compatibility.json` records one compatibility state per skill.
-- `manifests/roles.json` records the 19 generated Pi role profiles.
+- `manifests/roles.json` records 19 generated specialized profiles plus the AILI-owned `general` profile.
 - `manifests/provenance.json`, `manifests/sbom.json`, and `THIRD_PARTY_NOTICES.md` record adapted/reference sources and the exact npm lock inventory.
 
 Verify generated artifacts with:
@@ -125,8 +125,8 @@ npm run validate:release
 - **Doctor is non-pass:** inspect the exact `ERROR`, `WARN`, `SKIP`, or `UNVERIFIED` component. Missing optional packs are not core execution success.
 - **Permission shortcut does nothing:** use `/perm`; terminal multiplexers may consume `Alt+M`.
 - **YOLO still asks for multiline Bash:** confirm the loaded Package contains the adapted permission runtime with `npm run verify:permission-modes`; do not work around it by granting every distinct script for the session.
-- **Subagent reports the inline SDK `reading 'create'` failure:** omit `backend` or use `backend: "headless"`; explicit inline is unsupported for the pinned Pi 0.81.1 / subagent 0.4.8 pair.
-- **Sandboxed subagent cannot authenticate or reach its model:** `sandbox:true` is deny-all network, and model-backed sandbox calls must allow the exact provider endpoint while preserving credential protections. This is separate from default-backend compatibility.
+- **Persistent task says the parent Session is not durable:** start/save a normal Pi session first; Agents require a parent JSONL so their sidecar can be scoped exactly.
+- **Child Bash is denied in a sandbox-required mode:** inspect `/sandbox` for dependency/platform readiness. AILI deliberately denies instead of running unsandboxed when the parent SandboxManager is unavailable or when an isolated Git worktree uses a `.git` file that Bubblewrap cannot bind safely.
 - **Global resources are non-pass:** run `/aili-install-global-resources` only after reviewing the exact `~/.pi/agent/` targets. A malformed marker or an unowned role collision intentionally leaves files unchanged.
 - **Offline use:** the installed Package embeds the pinned skills and does not fetch `aili-workflows` at runtime. Its Pi-managed npm lifecycle synchronizes only pre-existing same-name global skills from that embedded fixed snapshot. First-time Pi/package installation still requires the relevant package sources.
 

package/THIRD_PARTY_NOTICES.md

@@ -13,17 +13,6 @@ This distribution is MIT-licensed. The following adapted sources and locked deve
 - Reused symbols/patterns: 64 canonical skill bodies and owned assets, 19 child-role prompt bodies
 - Local changes: skills/** is an exact byte-for-byte snapshot with no semantic overlay; role prompts are generated as Pi frontmatter with explicit tool/capability ceilings and structured output; templates/APPEND_SYSTEM.md is a Pi-native governance derivation of the pinned global AGENTS template, with OpenCode-only control planes excluded
 
-## @agwab/pi-subagent
-
-- Status: dependency
-- Source: https://github.com/AgwaB/pi-subagent.git
-- Revision: daa7b83819116a62008ad17aa65fcd50fefbafd0
-- Version: 0.4.8
-- License: MIT
-- Source files: src/index.ts, src/api.ts, src/runners/headless-model.ts, src/artifacts/result.ts
-- Reused symbols/patterns: subagent tool renderCall, runSubagent API, headless lifecycle, artifact envelope
-- Local changes: AILI registers the full pinned upstream subagent tool schema, prepends a sanitized bounded requested-Agent heading, injects a non-removable credential guard, normalizes ordinary omitted/auto runs to headless for the Pi 0.81.1 compatibility window, and rejects explicit inline before model startup; no upstream source is copied
-
 ## pi-permission-modes
 
 - Status: adapted
@@ -101,8 +90,19 @@ This distribution is MIT-licensed. The following adapted sources and locked deve
 - Reused symbols/patterns: header, matrix animation, Zentui footer, fixed editor compositor
 - Local changes: registered as three additional Pi Package Extensions; Rose header loads a package-owned renamed artwork asset without changing upstream identity; Rose Shimmer, Rose Code Rain, and Zentui use the Rose-owned palette and gradient; overflowing Matrix tracks remain deterministic across the complete terminal width with the 96-track budget, while each rain row receives a structural blank-row repair; relative import specifiers and session lifecycle event are adapted for this package's NodeNext TypeScript contract
 
+## Oh My Pi reference
+
+- Status: reference-only
+- Source: https://github.com/can1357/oh-my-pi.git
+- Revision: 59619623e1eeb7c290649eeaf3a269284ce8adef
+- Version: 17.1.3
+- License: MIT
+- Source files: none copied
+- Reused symbols/patterns: none
+- Local changes: none
+
 ## npm dependency inventory
 
-The exact 424-entry package-lock inventory, versions, integrity values, dependency scope, and declared licenses is recorded in `manifests/sbom.json`.
+The exact 419-entry package-lock inventory, versions, integrity values, dependency scope, and declared licenses is recorded in `manifests/sbom.json`.
 
 Runtime dependencies are initialized through the single AILI Extension entry. Package-owned third-party adaptations are copied only where their provenance sourceFiles explicitly name repository paths.

package/docs/persistent-agents.md

@@ -0,0 +1,114 @@
+# Persistent Agents (`task` and `hub`)
+
+> **Availability:** The AILI-owned runtime is the public orchestration surface. The package registers `task` and `hub` and does not register a legacy `subagent` alias. Deterministic tests plus authorized real-provider, child-sandbox, and disposable external-workspace lifecycle probes are release-bound evidence.
+
+## Agent selectors
+
+The canonical catalog contains exactly 20 selectors:
+
+- `general` (the default when `agent` is omitted)
+- `aili.agent-evaluator`
+- `aili.ai-regression-scout`
+- `aili.browser-qa-runner`
+- `aili.code-reviewer`
+- `aili.code-scout`
+- `aili.convergence-reviewer`
+- `aili.doc-researcher`
+- `aili.e2e-artifact-runner`
+- `aili.implementer`
+- `aili.opensource-sanitizer`
+- `aili.plan-auditor`
+- `aili.pr-test-analyzer`
+- `aili.security-auditor`
+- `aili.silent-failure-reviewer`
+- `aili.spec-miner`
+- `aili.test-coverage-reviewer`
+- `aili.test-engineer`
+- `aili.web-performance-auditor`
+- `aili.web-researcher`
+
+`aili.general`, `task` as a selector, and unknown selectors are invalid. The 19 specialized profiles keep their own complete role prompt and cannot spawn children. `general` may synchronously spawn an allowed non-self specialized Agent below the configured depth ceiling.
+
+## Creating Agents with `task`
+
+A flat request creates one new stable Agent:
+
+```json
+{
+  "task": "Inspect the parser and report evidence",
+  "agent": "aili.code-scout",
+  "name": "ParserScout",
+  "async": false,
+  "tools": ["read", "grep"],
+  "workspace": "shared",
+  "writeScope": { "paths": [], "resources": [] }
+}
+```
+
+A batch validates every item before creating any Agent:
+
+```json
+{
+  "context": "Use the accepted plan at plan/accepted.md",
+  "tasks": [
+    { "task": "Inspect storage", "agent": "aili.code-scout" },
+    { "task": "Implement the accepted fix", "agent": "aili.implementer", "workspace": "auto", "writeScope": { "paths": ["src/storage"], "resources": [] } }
+  ]
+}
+```
+
+Per-item fields are `task`, `context`, `agent`, `name`, `model`, `async`, `tools`, `workspace`, `writeScope`, and `cwd`. Unknown fields fail validation. `blocking` is profile-only internal metadata, not a `task` field; callers must use `async:false` to wait synchronously.
+
+Every item creates a new Agent. Reusing `name: "Scout"` allocates `Scout`, `Scout-2`, and so on; it never resumes the first Agent. Follow-up work uses `hub send` with the allocated Agent ID. Nested IDs are parent-prefixed, such as `general.code-scout`.
+
+Top-level non-blocking roles default to async. `async:false`, an internally blocking role profile, and all child-to-grandchild calls are synchronous. One parent allows at most 32 active turns; excess jobs remain in durable FIFO order. AILI sets no Agent-turn wall-clock or assistant-request budget (`0`/unlimited), but provider watchdogs, tool timeouts, permissions, the 32-turn semaphore, process shutdown, and manual cancellation still apply. Background work does not survive the Pi process.
+
+## Managing Agents with `hub`
+
+`hub` actions are:
+
+- `list` — active Agents (and optionally released disk-backed identities)
+- `send` — running safe-boundary steer, idle new turn, or parked revive/new turn
+- `wait` — bounded wait over owned job/message IDs
+- `inbox` — peek or drain failed-live-handoff mail
+- `output` / `history` — bounded disk reads
+- `jobs` — owned job state
+- `cancel` — hard-cancel a job or release an idle/parked identity without deleting history
+- `model` — query or request model override operations
+
+Only failed live handoff enters the durable mailbox. Each Agent keeps at most 100 messages; the 101st is rejected while the existing 100 remain. Successful messages have durable receipts for de-duplication.
+
+Running, idle, parked, and aborted Agents never run two concurrent turns under one identity. An aborted Agent cannot revive. Process loss records a running turn as `interrupted`, a queued job as `unexecuted`, and never automatically replays either.
+
+## Output, history, and retention
+
+Complete raw output is stored at the parent-owned `<agent-id>.md`; the official Pi child conversation remains an independent Session JSONL. Tool results return at most 500,000 bytes and 5,000 lines, while parent completion previews are capped at 5,000 characters with explicit truncation metadata.
+
+Use `agent://<agent-id>` and `history://<agent-id>` as stable references. `hub output/history` resolves them with `offset` and `limit`, including after an Agent is released.
+
+Child history cannot be deleted independently. It follows the parent session. Forks start with an empty Agent registry and never copy/control old child artifacts. Confirmed AILI parent deletion can cascade its owned sidecar; official Pi 0.81.1 built-in Ctrl+D/archive has no sidecar hook, so doctor keeps that host gap visible and orphaned sidecars are preserved for reconciliation.
+
+## Models
+
+Each turn resolves in this order:
+
+1. one-shot `task.model`
+2. stable Agent instance override
+3. trusted project role override
+4. user-global role override
+5. profile frontmatter model
+6. official parent fallback
+
+An explicit unknown, unavailable, unauthenticated, or incompatible model fails at its source layer and does not fall through. One-shot values never change configuration. Direct users can run `/aili-agent-model <global|project|instance> <selector|agent-id> <provider/model|clear> [thinking]`; model-facing persistent requests through `hub model` require a fresh interactive confirmation every time. Project model configuration is ignored and cannot be written before project trust is active.
+
+## Workspaces and permissions
+
+`workspace:auto` keeps disjoint known scopes shared and isolates known path overlap. Shared resources such as ports/databases cannot be isolated by a Git worktree and therefore conflict visibly. An undeclared scope defaults to shared with a best-effort diagnostic; observable second conflicting writes are blocked with isolated-retry guidance.
+
+Isolation projects the current dirty tracked/untracked baseline into a disposable worktree, returns child-only patch/branch evidence, never auto-merges, and checks that the main workspace stayed unchanged. After cleanup, history/output remain readable but that Agent cannot revive.
+
+Effective tools are always an intersection of parent-active tools, child-loadable definitions, role/capability ceilings, hard guards, and per-call narrowing. Child `task`/`hub` definitions are AILI-owned bridges, never reused parent coordinator definitions. In sandbox-required permission modes, child Bash reuses the parent-initialized `pi-permission-modes` SandboxManager with a child-cwd-specific filesystem profile; missing/degraded sandbox state and incompatible Git-worktree metadata deny Bash instead of falling back unsandboxed. Credential/auth/private-key material is denied before approval and excluded from messages/output/artifacts. Background asks suspend only that job and return to the parent UI; no UI, rejection, cancellation, shutdown, or bridge loss denies and settles the request.
+
+## Legacy data
+
+Legacy `.pi/agent/runs/`, existing Pi sessions, user configuration, and unrelated Agent sidecars are not migrated, reinterpreted, or deleted by the replacement runtime. Rollback preserves both legacy runs and new sidecars.

package/extensions/matrix/index.ts

@@ -22,11 +22,12 @@ const SHIMMER_STEP_MS = 120;
 const TOOL_GRADIENT: readonly RGB[] = [[188, 167, 255], [125, 228, 255]];
 
 export const ROSE_MATRIX_GLYPHS = [..."0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZｱｲｳｴｵｶｷｸｹｺｻｼｽｾｿﾀﾁﾂﾃﾄﾅﾆﾇﾈﾉﾊﾋﾌﾍﾎﾏﾐﾑﾒﾓﾗﾘﾙﾚﾛﾜﾝ"];
+/** The six user-selected rain colors, assigned by the exact weights below. */
 export const ROSE_RAIN_PALETTE: readonly RGB[] = [
-  [136, 184, 255], [125, 228, 255], [214, 244, 255], [136, 184, 255],
-  [125, 228, 255], [214, 244, 255], [136, 184, 255], [125, 228, 255],
-  [214, 244, 255], [136, 184, 255], [199, 91, 122], [232, 167, 184],
+  [136, 184, 255], [214, 244, 255], [125, 228, 255],
+  [188, 167, 255], [199, 91, 122], [232, 167, 184],
 ];
+export const ROSE_RAIN_WEIGHTS = { blue: 50, ice: 20, cyan: 15, violet: 8, rose: 4, roseSoft: 3 } as const;
 export const ROSE_SHIMMER_INDICATOR = ["·", "✢", "✳", "✶", "✻", "✽", "✻", "✶", "✳", "✢"] as const;
 
 type RGB = readonly [number, number, number];
@@ -45,6 +46,7 @@ export interface MatrixConfig {
 }
 
 export interface Drop {
+  /** Fixed terminal-cell column; vertical motion never changes this value. */
   x: number;
   offset: number;
   speed: number;
@@ -59,7 +61,7 @@ type ConfigLoadResult = { config: MatrixConfig; migrated: boolean; warning?: str
 const DEFAULT_CONFIG: MatrixConfig = {
   version: 2,
   enabled: true,
-  fps: 10,
+  fps: 12,
   density: 0.65,
   height: 4,
   appearance: "auto",
@@ -204,6 +206,19 @@ function selectBoundedColumns(columns: readonly number[]): number[] {
   return Array.from({ length: MAX_DROPS }, (_, index) => columns[Math.round((index * lastIndex) / (MAX_DROPS - 1))] ?? 0);
 }
 
+/** Exact 50/20/15/8/4/3 distribution over each deterministic 100-track cycle. */
+export function roseRainColor(index: number): RGB {
+  // A coprime stride distributes all weights through the 96-track ceiling,
+  // instead of leaving the final Rose/Soft Rose buckets unreachable.
+  const bucket = (((index * 37) % 100) + 100) % 100;
+  if (bucket < 50) return ROSE_RAIN_PALETTE[0]!;
+  if (bucket < 70) return ROSE_RAIN_PALETTE[1]!;
+  if (bucket < 85) return ROSE_RAIN_PALETTE[2]!;
+  if (bucket < 93) return ROSE_RAIN_PALETTE[3]!;
+  if (bucket < 97) return ROSE_RAIN_PALETTE[4]!;
+  return ROSE_RAIN_PALETTE[5]!;
+}
+
 export function createDrops(width: number, density: number, height = 4): Drop[] {
   const random = mulberry32((width * 2654435761) ^ 0x53414b55);
   const columns = Array.from({ length: Math.ceil(width / 2) }, (_, index) => index * 2);
@@ -216,11 +231,12 @@ export function createDrops(width: number, density: number, height = 4): Drop[]
     return {
       x,
       offset: random() * cycle,
-      speed: 5.5 + random() * 7.5,
+      // Between the released waterfall (5.5–13) and dense preview (18).
+      speed: 8 + random() * 8,
       length,
       gap,
       seed: Math.floor(random() * 0x7fffffff) ^ (index * 7919),
-      color: ROSE_RAIN_PALETTE[index % ROSE_RAIN_PALETTE.length] ?? ROSE_RAIN_PALETTE[0]!,
+      color: roseRainColor(index),
     };
   });
 }
@@ -229,8 +245,8 @@ function appearanceColor(color: RGB, appearance: ResolvedAppearance): RGB {
   if (appearance === "dark") return color;
   if (color[0] === 199 && color[1] === 91) return LIGHT.indicator;
   if (color[0] === 232 && color[1] === 167) return [168, 69, 95];
-  if (color[0] === 214) return [78, 120, 129];
-  if (color[1] === 228) return [78, 120, 129];
+  if (color[0] === 188 && color[1] === 167) return [119, 106, 151];
+  if (color[0] === 214 || color[1] === 228) return [78, 120, 129];
   return LIGHT.base;
 }
 

package/extensions/zentui/config.ts

@@ -235,27 +235,27 @@ export const defaultConfig: PolishedTuiConfig = {
 		cwd: "bold #88B8FF",
 		gitBranch: "bold #BCA7FF",
 		gitStatus: "bold #D6F4FF",
-		contextNormal: "#8CE6C2",
-		contextWarning: "bold #F3CE83",
-		contextError: "bold #FF93B1",
+		contextNormal: "#7DE4FF",
+		contextWarning: "bold #BCA7FF",
+		contextError: "bold #C75B7A",
 		tokens: "#9DA9C8",
-		cost: "bold #8CE6C2",
+		cost: "bold #7DE4FF",
 		separator: "#64708F",
 		runtimePrefix: "#7DE4FF",
 		extensionStatus: "#BCA7FF",
-		sessionDuration: "#F3CE83",
+		sessionDuration: "#BCA7FF",
 		packageVersion: "#D6F4FF",
-		gitCommit: "#8CE6C2",
-		gitMetricsAdded: "#8CE6C2",
-		gitMetricsDeleted: "#FF93B1",
-		username: "#F3CE83",
-		time: "#F3CE83",
-		os: "#F7EEF8",
+		gitCommit: "#7DE4FF",
+		gitMetricsAdded: "#7DE4FF",
+		gitMetricsDeleted: "#C75B7A",
+		username: "#BCA7FF",
+		time: "#BCA7FF",
+		os: "#D6F4FF",
 		editorAccent: "bold #88B8FF",
 		editorPrompt: "bold #88B8FF",
 		editorBorder: "rose-cyberdeck-gradient",
 		editorModel: "bold #88B8FF",
-		editorProvider: "#B8BEDD",
+		editorProvider: "#D6F4FF",
 		editorThinking: "#BCA7FF",
 		editorThinkingMinimal: "#64708F",
 		editorThinkingLow: "#7DE4FF",
@@ -264,7 +264,7 @@ export const defaultConfig: PolishedTuiConfig = {
 		editorThinkingXhigh: "bold #BCA7FF",
 	},
 	colorSources: {
-		starship: "terminal",
+		starship: "theme",
 		editor: "terminal",
 		userMessages: "theme",
 	},

package/extensions/zentui/format.ts

@@ -288,6 +288,20 @@ export function buildContextLabel(ctx: ExtensionContext): string {
 	return formatContextPercentLabel(usage?.percent, contextWindow);
 }
 
+/**
+ * Normalize inherited Starship runtime hints into Rose-owned semantic colors.
+ * The source strings remain detection metadata; package rendering never emits
+ * their traffic-light or indexed terminal colors.
+ */
+export function roseRuntimeStyle(style: string): ColorSpec {
+	const normalized = style.toLowerCase();
+	if (/(?:red|202|208|orange)/.test(normalized)) return "rose";
+	if (/(?:yellow|purple|105|147)/.test(normalized)) return "violet";
+	if (/(?:white|149)/.test(normalized)) return "ice";
+	if (/(?:green|cyan|blue|0093a7)/.test(normalized)) return "cyan";
+	return "blue";
+}
+
 export function formatRuntimeSegment(
 	theme: Pick<Theme, "fg">,
 	runtime: RuntimeInfo | undefined,
@@ -298,7 +312,7 @@ export function formatRuntimeSegment(
 	if (!runtime) return "";
 	const symbol = resolveRuntimeSymbol(runtime.name, runtime.symbol, mode);
 	const label = runtime.version ? `${symbol} ${runtime.version}` : symbol;
-	return `${renderStyleForSource(theme, colorSource, prefixStyle, "via")} ${renderStyleForSource(theme, colorSource, runtime.style, label)}`;
+	return `${renderStyleForSource(theme, colorSource, prefixStyle, "via")} ${renderStyleForSource(theme, colorSource, roseRuntimeStyle(runtime.style), label)}`;
 }
 
 /**

package/extensions/zentui/gradient.ts

@@ -11,6 +11,10 @@ export const ROSE_GRADIENT_STOPS: readonly RGB[] = [
   [125, 228, 255], // cyan       #7DE4FF
   [214, 244, 255], // ice        #D6F4FF
 ];
+/** Completed tool frames use a cool, restrained completion gradient. */
+export const ROSE_TOOL_COMPLETE_STOPS: readonly RGB[] = [
+  [136, 184, 255], [125, 228, 255], [214, 244, 255],
+];
 
 const RESET = "\x1b[0m";
 const GRADIENT_CACHE_LIMIT = 128;
@@ -25,32 +29,37 @@ function mix(from: RGB, to: RGB, amount: number): RGB {
   ];
 }
 
-function sampleGradient(position: number): RGB {
-  const normalized = Math.max(0, Math.min(1, position));
-  const scaled = normalized * (ROSE_GRADIENT_STOPS.length - 1);
-  const index = Math.min(ROSE_GRADIENT_STOPS.length - 2, Math.floor(scaled));
-  const from = ROSE_GRADIENT_STOPS[index] ?? ROSE_GRADIENT_STOPS[0]!;
-  const to = ROSE_GRADIENT_STOPS[index + 1] ?? from;
-  return mix(from, to, scaled - index);
-}
-
 function foreground(color: RGB, text: string): string {
   return `\x1b[38;2;${color[0]};${color[1]};${color[2]}m${text}`;
 }
 
 /** Render the stable Rose-to-ice gradient for Zentui chrome and markers. */
-export function renderRoseGradient(text: string): string {
-  const cached = gradientCache.get(text);
+function renderGradient(text: string, stops: readonly RGB[]): string {
+  const cacheKey = `${stops.flat().join(",")}:${text}`;
+  const cached = gradientCache.get(cacheKey);
   if (cached !== undefined) return cached;
   const chars = [...text];
   if (chars.length === 0) return text;
   const span = Math.max(1, chars.length - 1);
-  const rendered = `${chars.map((char, index) => foreground(sampleGradient(index / span), char)).join("")}${RESET}`;
+  const rendered = `${chars.map((char, index) => {
+    const position = Math.max(0, Math.min(1, index / span));
+    const scaled = position * (stops.length - 1);
+    const stop = Math.min(stops.length - 2, Math.floor(scaled));
+    return foreground(mix(stops[stop] ?? stops[0]!, stops[stop + 1] ?? stops[stop] ?? stops[0]!, scaled - stop), char);
+  }).join("")}${RESET}`;
   if (gradientCache.size >= GRADIENT_CACHE_LIMIT) gradientCache.delete(gradientCache.keys().next().value ?? "");
-  gradientCache.set(text, rendered);
+  gradientCache.set(cacheKey, rendered);
   return rendered;
 }
 
+export function renderRoseGradient(text: string): string {
+  return renderGradient(text, ROSE_GRADIENT_STOPS);
+}
+
+export function renderRoseToolCompleteGradient(text: string): string {
+  return renderGradient(text, ROSE_TOOL_COMPLETE_STOPS);
+}
+
 /** Add symmetric colored side rails while preserving the terminal width contract. */
 export function renderBoxedLine(line: string, width: number, leftRail: string, rightRail: string): string {
   if (width <= 0) return "";

package/extensions/zentui/tool-execution.ts

@@ -1,6 +1,6 @@
 import { type Theme, ToolExecutionComponent } from "@earendil-works/pi-coding-agent";
 import { visibleWidth } from "@earendil-works/pi-tui";
-import { renderBoxedLine, renderRoseGradient } from "./gradient.js";
+import { renderBoxedLine, renderRoseGradient, renderRoseToolCompleteGradient } from "./gradient.js";
 import { installPrototypePatch } from "./prototype-patch-registry.js";
 
 const SETTLED_CACHE_MAX_LINES = 80;
@@ -141,7 +141,10 @@ export function installToolExecutionStyle(getTheme: () => Theme | undefined): Cl
 				if (blank !== undefined) prefix.push(blank);
 			}
 			const label = fitBorderLabel(statusLabel(runtime), width);
-			const top = renderRoseGradient(label);
+			const completeGradient = !pending && !runtime.result?.isError
+				? renderRoseToolCompleteGradient
+				: renderRoseGradient;
+			const top = completeGradient(label);
 			// Keep only the status rail slightly heavier. State is expressed in the
 			// Rose palette rather than traffic-light red/green: violet while running,
 			// ice blue when complete, and Rose when failed.
@@ -150,8 +153,8 @@ export function installToolExecutionStyle(getTheme: () => Theme | undefined): Cl
 				: runtime.result?.isError
 					? theme.fg("accent", "┃ ")
 					: theme.fg("syntaxFunction", "┃ ");
-			const rightRail = renderRoseGradient(" │");
-			const bottom = renderRoseGradient(bottomBorder(width));
+			const rightRail = completeGradient(" │");
+			const bottom = completeGradient(bottomBorder(width));
 
 			const boxed = [
 				...prefix,

package/manifests/adapter-evidence.json

@@ -8,38 +8,71 @@
       "sourceRevision": "7eb35f357ad489f5841ee10dac1e44549c1bdb76",
       "verification": [
         "vitest run tests/integration/extension-load.test.ts",
-        "vitest run tests/unit/runtime.test.ts"
+        "vitest run tests/integration/persistent-agent-host-seams.test.ts"
       ],
       "artifacts": [
-        { "path": "package-lock.json", "sha256": "a9e5a3e4d1076b3179dd8cca5ef89f9fddc838e0acf9abcc1f42daf2a90ddafb" },
-        { "path": "tests/integration/extension-load.test.ts", "sha256": "f2fdceb965f55bc481acc6457eee5cac9499dac08e8c3d17ca60efd07f13e96c" },
-        { "path": "tests/unit/runtime.test.ts", "sha256": "9e99920e7e16529f109771d659f611c9fa580941a5dbf924b2d9d117dd3adeee" }
+        {
+          "path": "package-lock.json",
+          "sha256": "006a165d0b94cd75a0a8cfbcd54f588b5d87441699316fb128512748b5bfd857"
+        },
+        {
+          "path": "tests/integration/extension-load.test.ts",
+          "sha256": "f2fdceb965f55bc481acc6457eee5cac9499dac08e8c3d17ca60efd07f13e96c"
+        },
+        {
+          "path": "tests/integration/persistent-agent-host-seams.test.ts",
+          "sha256": "562ca1ce07e9d57861b48c210a8d10b1d8cbe3ffad7db6ac20ecb178f3beda36"
+        }
       ]
     },
     {
       "capability": "subagent.dispatch",
       "status": "adapted",
-      "owner": "src/runtime/subagents.ts",
+      "owner": "src/runtime/persistent-agents/production.ts",
       "sourceRevision": "7eb35f357ad489f5841ee10dac1e44549c1bdb76",
       "verification": [
         "npm run verify:roles",
-        "vitest run tests/unit/roles.test.ts tests/unit/subagents.test.ts",
-        "vitest run tests/integration/generic-subagent.test.ts tests/integration/generic-permission.test.ts",
-        "AILI_LIVE_GENERIC_SUBAGENT_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts",
-        "AILI_LIVE_CREDENTIAL_GUARD_PROBE=1 npx vitest run tests/integration/live-subagent.test.ts"
+        "vitest run tests/unit/persistent-agent-task.test.ts tests/unit/persistent-agent-hub.test.ts tests/unit/persistent-agent-policy.test.ts",
+        "vitest run tests/integration/persistent-agent-runtime.test.ts tests/integration/package-runtime.test.ts",
+        "npm run test:doctor"
       ],
       "artifacts": [
-        { "path": "src/runtime/subagents.ts", "sha256": "9f09e0e8a380d026d82b0842f2c687da2f3529b43a7ef6d1a6aad47d71190d48" },
-        { "path": "src/runtime/child-guard.ts", "sha256": "9da3c1d80805fd76bbf7a7fd253dff44f0756439fdee039bd7d7fd30766329e1" },
-        { "path": "src/runtime/credential-guard.ts", "sha256": "01d76ff0a9a2a0a08a2d2e52b6ed050d925df5e5bea1e6194130e00bfe22cde3" },
-        { "path": "tests/unit/subagents.test.ts", "sha256": "16fc1fbd1759befeed03a2428294c28d662022622c61a6444e23b365dc7447aa" },
-        { "path": "tests/unit/child-guard.test.ts", "sha256": "b187d6d84cd0829ae5474e133b4df911a80b75b9e89622b8543a1c5894be4974" },
-        { "path": "tests/integration/generic-permission.test.ts", "sha256": "90cc4ee67098f671dddac495d5e2cd5dc2c50131297fd04f0d72a1ca44217f24" },
-        { "path": "tests/integration/generic-subagent.test.ts", "sha256": "a13f8564bdd1bd735f9313d2ad71511a47c939dd6351f2f460771cb48a7fc80b" },
-        { "path": "tests/unit/roles.test.ts", "sha256": "72b61af16ff66506aaaceac28c92d8b3756741e3c4df0544686b3d4940215b57" },
-        { "path": "scripts/sync-roles.ts", "sha256": "a4fd66c95d91ebd92f0b1c6164a84809c4b5a1bf1e185dbdd61af23688dd2d9c" },
-        { "path": "tests/integration/live-subagent.test.ts", "sha256": "b88750f74b203cdbdb9d0e453e16f720ff4d8e4591ca140e0a3c7e1d8428868c" },
-        { "path": "manifests/live-verification.json", "sha256": "f5c80dfb2fb989b43af3b7460510b0a546cc05f8ff9e671c3e9284384c33d95b" }
+        {
+          "path": "src/runtime/persistent-agents/production.ts",
+          "sha256": "312ac2a3cd32b298550caedc09d74d97d279ef9380a7e03ca32a424b70121ee1"
+        },
+        {
+          "path": "src/runtime/persistent-agents/runtime.ts",
+          "sha256": "fbf90c6c4ba573b64bca98e775aeb036ba8f28788e3919d0beebe52c36ef58de"
+        },
+        {
+          "path": "src/runtime/persistent-agents/storage.ts",
+          "sha256": "cb33384792ca375fab62bf8529407c4e16e0e952fe7a28d0f1022f26ab7589d7"
+        },
+        {
+          "path": "src/runtime/persistent-agents/permission.ts",
+          "sha256": "48b30508491bca7fcd04d82b30d9dde1423499c2f02c014074c3f030c7ebd8ba"
+        },
+        {
+          "path": "tests/unit/persistent-agent-task.test.ts",
+          "sha256": "2562ff539e9f1cf756c2097beb9de09b0c28f33088c0f18fdbb91c978a898c3f"
+        },
+        {
+          "path": "tests/unit/persistent-agent-hub.test.ts",
+          "sha256": "8d90b71b4db40822b566d1807212ea20ed30d0a85706ee058d869736ccd0d306"
+        },
+        {
+          "path": "tests/unit/persistent-agent-policy.test.ts",
+          "sha256": "1a397beeef79d4553461314020fc91655ff1bbc88d1f23b76c1391ab1e78b8f8"
+        },
+        {
+          "path": "tests/integration/persistent-agent-runtime.test.ts",
+          "sha256": "50c930a4b72e5697f0931f0fcd9ff1a17a22b8dcd8f7e3ad51c255b6e454a2f9"
+        },
+        {
+          "path": "tests/integration/package-runtime.test.ts",
+          "sha256": "bc3659d12c416343b1c3bafffd3365a77fb342e6b5ac5e4d3abd8aaf9d608eea"
+        }
       ]
     }
   ]

package/manifests/capabilities.json

@@ -6,7 +6,7 @@
     "pi-web-access",
     "pi-quota-status",
     "pi-permission-modes",
-    "@agwab/pi-subagent",
+    "aili-persistent-agents",
     "optional-pack:web-research",
     "optional-pack:browser-qa",
     "optional-pack:artifact-runtime"
@@ -34,8 +34,8 @@
     },
     {
       "id": "subagent.dispatch",
-      "provider": "@agwab/pi-subagent",
-      "adapterOwner": "aili generic wrapper over @agwab/pi-subagent@0.4.8 with mandatory credential guard",
+      "provider": "aili-persistent-agents",
+      "adapterOwner": "src/runtime/persistent-agents/production.ts (AILI-owned task/hub with parent-scoped Pi sessions)",
       "platforms": ["linux"],
       "class": "required",
       "risk": { "secret": "possible", "network": "provider-dependent", "sideEffect": "delegated" },