@rosetears/aili-pi 0.1.9 → 0.1.10

package/roles/test-coverage-reviewer.md

@@ -2,6 +2,11 @@
 name: test-coverage-reviewer
 description: Read-only QA reviewer for test coverage adequacy. Use when a diff, package, or release needs coverage-gap review, untested-path identification, or verification sufficiency analysis without writing tests.
 tools: read,grep,find,ls
+spawns: []
+blocking: false
+aili-profile-version: 2
+aili-runtime-adapter-version: 2
+aili-source-kind: canonical-adapter
 aili-source-revision: 7eb35f357ad489f5841ee10dac1e44549c1bdb76
 ---
 
@@ -9,7 +14,7 @@ aili-source-revision: 7eb35f357ad489f5841ee10dac1e44549c1bdb76
 
 ## Role
 
-You are a bounded, single-use Pi child role. Complete the supplied assignment once, return one terminal result or failure, and never resume this context. Your result is evidence for ROSE or the user, not final authority.
+You are a bounded persistent Pi Agent role. Work only on the supplied assignment or follow-up turn within the same stable Agent identity. Your result is evidence for ROSE or the user, not final authority.
 
 ## Goal
 
@@ -41,7 +46,7 @@ Stop when permission is missing, the requested scope conflicts with repository r
 
 ## Pi adapter contract
 
-You run once in a fresh `pi --mode json --no-session` child. Recursive AILI task dispatch is unavailable.
-Use only the tools exposed by the Pi process. The task packet and parent policy may narrow this profile and never broaden it.
+You run in a parent-scoped persistent official Pi Agent session. Each turn has one supplied assignment or follow-up; an idle session may park and later revive with its retained transcript.
+Child Agent spawning is disabled for this specialized profile. Use only the effective tools exposed by the parent/role/capability/policy intersection; a task packet may narrow and never broaden them.
 Return exactly one JSON object with keys `status`, `summary`, `evidence`, `changedFiles`, `verification`, `blockers`, `risks`, and `confidence`.
 Do not include credentials, raw environment variables, authentication-store content, or unbounded command output.

package/roles/test-engineer.md

@@ -2,6 +2,11 @@
 name: test-engineer
 description: QA engineer specialized in test strategy, test writing, test execution, CLI/browser verification, verification logs, and coverage analysis. Use for designing test suites, writing tests for existing code, executing test plans, or evaluating test quality.
 tools: read,write,edit
+spawns: []
+blocking: false
+aili-profile-version: 2
+aili-runtime-adapter-version: 2
+aili-source-kind: canonical-adapter
 aili-source-revision: 7eb35f357ad489f5841ee10dac1e44549c1bdb76
 ---
 
@@ -9,7 +14,7 @@ aili-source-revision: 7eb35f357ad489f5841ee10dac1e44549c1bdb76
 
 ## Role
 
-You are a bounded, single-use Pi child role. Complete the supplied assignment once, return one terminal result or failure, and never resume this context. Your result is evidence for ROSE or the user, not final authority.
+You are a bounded persistent Pi Agent role. Work only on the supplied assignment or follow-up turn within the same stable Agent identity. Your result is evidence for ROSE or the user, not final authority.
 
 ## Goal
 
@@ -42,7 +47,7 @@ Stop when permission is missing, the requested scope conflicts with repository r
 
 ## Pi adapter contract
 
-You run once in a fresh `pi --mode json --no-session` child. Recursive AILI task dispatch is unavailable.
-Use only the tools exposed by the Pi process. The task packet and parent policy may narrow this profile and never broaden it.
+You run in a parent-scoped persistent official Pi Agent session. Each turn has one supplied assignment or follow-up; an idle session may park and later revive with its retained transcript.
+Child Agent spawning is disabled for this specialized profile. Use only the effective tools exposed by the parent/role/capability/policy intersection; a task packet may narrow and never broaden them.
 Return exactly one JSON object with keys `status`, `summary`, `evidence`, `changedFiles`, `verification`, `blockers`, `risks`, and `confidence`.
 Do not include credentials, raw environment variables, authentication-store content, or unbounded command output.

package/roles/web-performance-auditor.md

@@ -2,6 +2,11 @@
 name: web-performance-auditor
 description: Web performance engineer focused on Core Web Vitals, loading, rendering, and network optimization. Use for performance-focused audits, CWV analysis, and identifying structural performance anti-patterns in web applications.
 tools: read,grep,find,ls
+spawns: []
+blocking: false
+aili-profile-version: 2
+aili-runtime-adapter-version: 2
+aili-source-kind: canonical-adapter
 aili-source-revision: 7eb35f357ad489f5841ee10dac1e44549c1bdb76
 ---
 
@@ -9,7 +14,7 @@ aili-source-revision: 7eb35f357ad489f5841ee10dac1e44549c1bdb76
 
 ## Role
 
-You are a bounded, single-use Pi child role. Complete the supplied assignment once, return one terminal result or failure, and never resume this context. Your result is evidence for ROSE or the user, not final authority.
+You are a bounded persistent Pi Agent role. Work only on the supplied assignment or follow-up turn within the same stable Agent identity. Your result is evidence for ROSE or the user, not final authority.
 
 ## Goal
 
@@ -41,7 +46,7 @@ Stop when permission is missing, the requested scope conflicts with repository r
 
 ## Pi adapter contract
 
-You run once in a fresh `pi --mode json --no-session` child. Recursive AILI task dispatch is unavailable.
-Use only the tools exposed by the Pi process. The task packet and parent policy may narrow this profile and never broaden it.
+You run in a parent-scoped persistent official Pi Agent session. Each turn has one supplied assignment or follow-up; an idle session may park and later revive with its retained transcript.
+Child Agent spawning is disabled for this specialized profile. Use only the effective tools exposed by the parent/role/capability/policy intersection; a task packet may narrow and never broaden them.
 Return exactly one JSON object with keys `status`, `summary`, `evidence`, `changedFiles`, `verification`, `blockers`, `risks`, and `confidence`.
 Do not include credentials, raw environment variables, authentication-store content, or unbounded command output.

package/roles/web-researcher.md

@@ -2,6 +2,11 @@
 name: web-researcher
 description: Read-only public web research subagent. Uses web search/fetch for current official documentation, public repositories, releases, package metadata, compatibility, and deprecation evidence; never reads local files, edits, runs commands, or delegates.
 tools: []
+spawns: []
+blocking: false
+aili-profile-version: 2
+aili-runtime-adapter-version: 2
+aili-source-kind: canonical-adapter
 aili-source-revision: 7eb35f357ad489f5841ee10dac1e44549c1bdb76
 ---
 
@@ -9,7 +14,7 @@ aili-source-revision: 7eb35f357ad489f5841ee10dac1e44549c1bdb76
 
 ## Role
 
-You are a bounded, single-use Pi child role. Complete the supplied assignment once, return one terminal result or failure, and never resume this context. Your result is evidence for ROSE or the user, not final authority.
+You are a bounded persistent Pi Agent role. Work only on the supplied assignment or follow-up turn within the same stable Agent identity. Your result is evidence for ROSE or the user, not final authority.
 
 ## Goal
 
@@ -41,7 +46,7 @@ Stop when permission is missing, the requested scope conflicts with repository r
 
 ## Pi adapter contract
 
-You run once in a fresh `pi --mode json --no-session` child. Recursive AILI task dispatch is unavailable.
-Use only the tools exposed by the Pi process. The task packet and parent policy may narrow this profile and never broaden it.
+You run in a parent-scoped persistent official Pi Agent session. Each turn has one supplied assignment or follow-up; an idle session may park and later revive with its retained transcript.
+Child Agent spawning is disabled for this specialized profile. Use only the effective tools exposed by the parent/role/capability/policy intersection; a task packet may narrow and never broaden them.
 Return exactly one JSON object with keys `status`, `summary`, `evidence`, `changedFiles`, `verification`, `blockers`, `risks`, and `confidence`.
 Do not include credentials, raw environment variables, authentication-store content, or unbounded command output.

package/scripts/sync-roles.ts

@@ -1,23 +1,28 @@
 import { createHash } from "node:crypto";
 import { execFile as execFileCallback } from "node:child_process";
-import { promisify } from "node:util";
 import { lstat, readdir, readFile, writeFile } from "node:fs/promises";
 import { basename, join, resolve } from "node:path";
+import { promisify } from "node:util";
 
 const ROOT = resolve(import.meta.dirname, "..");
 const ROLES_DIR = join(ROOT, "roles");
 const MANIFEST_PATH = join(ROOT, "manifests", "roles.json");
 const SOURCE_COMMIT = "7eb35f357ad489f5841ee10dac1e44549c1bdb76";
 const SOURCE_REPOSITORY = "https://github.com/Rosetears520/aili-workflows.git";
+const PROFILE_VERSION = 2;
+const RUNTIME_ADAPTER_VERSION = 2;
 const execFile = promisify(execFileCallback);
 
-const ROLE_NAMES = [
+const SPECIALIZED_ROLE_NAMES = [
   "agent-evaluator", "ai-regression-scout", "browser-qa-runner", "code-reviewer",
   "code-scout", "convergence-reviewer", "doc-researcher", "e2e-artifact-runner",
   "implementer", "opensource-sanitizer", "plan-auditor", "pr-test-analyzer",
   "security-auditor", "silent-failure-reviewer", "spec-miner", "test-coverage-reviewer",
   "test-engineer", "web-performance-auditor", "web-researcher",
 ] as const;
+const SPECIALIZED_SELECTORS = SPECIALIZED_ROLE_NAMES.map((name) => `aili.${name}`);
+const BUNDLED_NAMES = [...SPECIALIZED_ROLE_NAMES, "general"] as const;
+const BUNDLED_SELECTORS = [...SPECIALIZED_SELECTORS, "general"];
 
 const OPTIONAL: Record<string, string[]> = {
   "browser-qa-runner": ["browser.qa"],
@@ -40,13 +45,21 @@ const KNOWN_SOURCE_PERMISSION_KEYS = new Set([
 
 interface RoleRecord {
   name: string;
+  selector: string;
   description: string;
   profilePath: string;
   profileHash: string;
-  sourcePath: string;
+  profileVersion: 2;
+  runtimeAdapterVersion: 2;
+  sourceKind: "canonical-adapter" | "aili-owned";
+  sourcePath: string | null;
   sourceHash: string;
   tools: string[];
+  toolPolicy: "static" | "inherit-parent";
   capabilities: string[];
+  spawns: string[];
+  blocking: boolean;
+  model?: string;
   status: "adapted" | "optional" | "blocked";
   compatibilityReason: string;
   sourceFrontmatterDisposition: Record<string, string>;
@@ -96,27 +109,109 @@ function translatedPolicy(source: string): { tools: string[]; blocked: boolean;
   };
 }
 
-function profileContent(name: string, description: string, tools: string[], body: string): string {
+function profileFrontmatter(args: {
+  name: string;
+  description: string;
+  tools: string[];
+  spawns: string[];
+  sourceRevision: string;
+  sourceKind: RoleRecord["sourceKind"];
+}): string[] {
+  return [
+    "---",
+    `name: ${args.name}`,
+    `description: ${args.description}`,
+    `tools: ${args.tools.join(",") || "[]"}`,
+    `spawns: ${args.spawns.join(",") || "[]"}`,
+    "blocking: false",
+    `aili-profile-version: ${PROFILE_VERSION}`,
+    `aili-runtime-adapter-version: ${RUNTIME_ADAPTER_VERSION}`,
+    `aili-source-kind: ${args.sourceKind}`,
+    `aili-source-revision: ${args.sourceRevision}`,
+    "---",
+  ];
+}
+
+function specializedProfileContent(name: string, description: string, tools: string[], body: string): string {
   const adaptedBody = body
     .replaceAll("OpenCode subagent", "Pi child role")
     .replaceAll("OpenCode", "Pi")
     .replaceAll("Task tool", "AILI task capability")
+    .replace(
+      "You are a bounded, single-use Pi child role. Complete the supplied assignment once, return one terminal result or failure, and never resume this context.",
+      "You are a bounded persistent Pi Agent role. Work only on the supplied assignment or follow-up turn within the same stable Agent identity.",
+    )
     .replace(/## Output\n[\s\S]*?(?=\n## Stop)/, "## Output\n\nReturn exactly one JSON object with keys `status`, `summary`, `evidence`, `changedFiles`, `verification`, `blockers`, `risks`, and `confidence`.");
   return [
-    "---",
-    `name: ${name}`,
-    `description: ${description}`,
-    `tools: ${tools.join(",") || "[]"}`,
-    `aili-source-revision: ${SOURCE_COMMIT}`,
-    "---",
+    ...profileFrontmatter({
+      name,
+      description,
+      tools,
+      spawns: [],
+      sourceRevision: SOURCE_COMMIT,
+      sourceKind: "canonical-adapter",
+    }),
     "",
     adaptedBody,
     "",
     "## Pi adapter contract",
     "",
-    "You run once in a fresh `pi --mode json --no-session` child. Recursive AILI task dispatch is unavailable.",
-    "Use only the tools exposed by the Pi process. The task packet and parent policy may narrow this profile and never broaden it.",
+    "You run in a parent-scoped persistent official Pi Agent session. Each turn has one supplied assignment or follow-up; an idle session may park and later revive with its retained transcript.",
+    "Child Agent spawning is disabled for this specialized profile. Use only the effective tools exposed by the parent/role/capability/policy intersection; a task packet may narrow and never broaden them.",
+    "Return exactly one JSON object with keys `status`, `summary`, `evidence`, `changedFiles`, `verification`, `blockers`, `risks`, and `confidence`.",
+    "Do not include credentials, raw environment variables, authentication-store content, or unbounded command output.",
+    "",
+  ].join("\n");
+}
+
+function generalProfileContent(): string {
+  const description = "General persistent Agent for focused delegated work using the parent's current active tool ceiling and explicit spawn policy.";
+  return [
+    ...profileFrontmatter({
+      name: "general",
+      description,
+      tools: [],
+      spawns: SPECIALIZED_SELECTORS,
+      sourceRevision: "aili-owned-general-v1",
+      sourceKind: "aili-owned",
+    }),
+    "",
+    "# General Agent",
+    "",
+    "## Role",
+    "",
+    "You are AILI's general persistent worker Agent. Complete the current delegated assignment and retain relevant context for later follow-up turns under the same stable Agent identity.",
+    "",
+    "## Goal",
+    "",
+    "Deliver the requested bounded outcome using only the effective tools inherited from the parent and only the specialized child roles allowed by the runtime spawn policy.",
+    "",
+    "## Success criteria",
+    "",
+    "- Stay focused on the supplied task and explicit context.",
+    "- Use tools only when they materially advance the task.",
+    "- Delegate only to an allowed non-self specialized role when it has clear benefit.",
+    "- Return concise, evidence-grounded results and preserve unresolved blockers.",
+    "",
+    "## Constraints",
+    "",
+    "- Parent permissions, active tools, project trust, credential guards, recursion depth, and workspace policy always apply and can only narrow authority.",
+    "- Do not infer access to the parent's conversation history beyond explicit task/context and trusted resources.",
+    "- Do not write persistent configuration, delete history, or perform external/destructive operations without the required user confirmation.",
+    "- Never claim a child task, tool call, verification, or delivery succeeded without evidence.",
+    "",
+    "## Output",
+    "",
     "Return exactly one JSON object with keys `status`, `summary`, `evidence`, `changedFiles`, `verification`, `blockers`, `risks`, and `confidence`.",
+    "",
+    "## Stop",
+    "",
+    "Stop when the assignment is complete, a material decision or permission is missing, required evidence is unavailable, or continuing would exceed the accepted task boundary.",
+    "",
+    "## Pi adapter contract",
+    "",
+    "You run in a parent-scoped persistent official Pi Agent session. Each turn has one supplied assignment or follow-up; an idle session may park and later revive with its retained transcript.",
+    "Use only the effective parent-active/capability/policy tool intersection. The runtime may expose `task` only for allowed non-self specialized selectors and within the accepted depth ceiling.",
     "Do not include credentials, raw environment variables, authentication-store content, or unbounded command output.",
     "",
   ].join("\n");
@@ -132,8 +227,9 @@ async function generate(sourceRoot: string): Promise<void> {
   if (commit !== SOURCE_COMMIT) throw new Error(`source revision mismatch: ${commit}`);
   if (origin !== SOURCE_REPOSITORY) throw new Error(`source origin mismatch: ${origin}`);
   if (status !== "") throw new Error("source worktree must be clean");
+
   const records: RoleRecord[] = [];
-  for (const name of ROLE_NAMES) {
+  for (const name of SPECIALIZED_ROLE_NAMES) {
     const sourcePath = join(sourceRoot, "agents", `${name}.md`);
     if ((await lstat(sourcePath)).isSymbolicLink()) throw new Error(`${name}: source role must not be a symlink`);
     const source = await readFile(sourcePath, "utf8");
@@ -143,59 +239,125 @@ async function generate(sourceRoot: string): Promise<void> {
     if (name === "web-researcher") tools.length = 0;
     const capabilities = ["repo.read", ...(tools.some((tool) => tool === "write" || tool === "edit") ? ["repo.write"] : []), ...(OPTIONAL[name] ?? [])];
     if (name === "web-researcher") capabilities.splice(0, 1);
-    const profile = profileContent(name, description, tools, body);
+    const profile = specializedProfileContent(name, description, tools, body);
     await writeFile(join(ROLES_DIR, `${name}.md`), profile, "utf8");
     records.push({
       name,
+      selector: `aili.${name}`,
       description,
       profilePath: `roles/${name}.md`,
       profileHash: hash(profile),
+      profileVersion: PROFILE_VERSION,
+      runtimeAdapterVersion: RUNTIME_ADAPTER_VERSION,
+      sourceKind: "canonical-adapter",
       sourcePath: `agents/${name}.md`,
       sourceHash: hash(source),
       tools,
+      toolPolicy: "static",
       capabilities,
+      spawns: [],
+      blocking: false,
       status: OPTIONAL[name] ? "optional" : policy.blocked ? "blocked" : "adapted",
       compatibilityReason: OPTIONAL[name] ? `Optional capabilities are required: ${OPTIONAL[name].join(", ")}.` : policy.reason,
       sourceFrontmatterDisposition: {
-        mode: "replaced by fresh Pi child-process execution",
+        mode: "translated into a parent-scoped persistent official Pi Agent session",
         hidden: "not interpreted by Pi",
         permission: "translated into the explicit Pi tool/capability ceiling; source YAML is never executed",
       },
     });
   }
+
+  const general = generalProfileContent();
+  await writeFile(join(ROLES_DIR, "general.md"), general, "utf8");
+  records.push({
+    name: "general",
+    selector: "general",
+    description: "General persistent Agent for focused delegated work using the parent's current active tool ceiling and explicit spawn policy.",
+    profilePath: "roles/general.md",
+    profileHash: hash(general),
+    profileVersion: PROFILE_VERSION,
+    runtimeAdapterVersion: RUNTIME_ADAPTER_VERSION,
+    sourceKind: "aili-owned",
+    sourcePath: null,
+    sourceHash: hash(general),
+    tools: [],
+    toolPolicy: "inherit-parent",
+    capabilities: ["parent.active"],
+    spawns: SPECIALIZED_SELECTORS,
+    blocking: false,
+    status: "adapted",
+    compatibilityReason: "AILI-owned OMP-inspired general worker; effective tools inherit and can only narrow the parent active ceiling.",
+    sourceFrontmatterDisposition: {
+      mode: "AILI-owned persistent Agent profile",
+      hidden: "not applicable",
+      permission: "runtime parent-active/capability/policy intersection",
+    },
+  });
+
   await writeFile(MANIFEST_PATH, `${JSON.stringify({
-    schemaVersion: 1,
+    schemaVersion: 2,
+    runtimeAdapterVersion: RUNTIME_ADAPTER_VERSION,
     source: { repository: SOURCE_REPOSITORY, commit: SOURCE_COMMIT },
+    bundledSelectors: BUNDLED_SELECTORS,
     outputContract: ["status", "summary", "evidence", "changedFiles", "verification", "blockers", "risks", "confidence"],
+    turnAuditFields: ["selector", "profileHash", "sourceHash", "profileVersion", "runtimeAdapterVersion", "effectiveTools", "provider", "model", "thinking"],
     records,
   }, null, 2)}\n`, "utf8");
 }
 
 async function verify(): Promise<void> {
-  const manifest = JSON.parse(await readFile(MANIFEST_PATH, "utf8")) as { schemaVersion: number; records: RoleRecord[] };
+  const manifest = JSON.parse(await readFile(MANIFEST_PATH, "utf8")) as {
+    schemaVersion: number;
+    runtimeAdapterVersion: number;
+    source: { repository: string; commit: string };
+    bundledSelectors: string[];
+    turnAuditFields: string[];
+    records: RoleRecord[];
+  };
   const errors: string[] = [];
-  if (manifest.schemaVersion !== 1) errors.push("roles manifest schemaVersion must be 1");
-  const expected = new Set(ROLE_NAMES);
+  if (manifest.schemaVersion !== 2) errors.push("roles manifest schemaVersion must be 2");
+  if (manifest.runtimeAdapterVersion !== RUNTIME_ADAPTER_VERSION) errors.push("roles runtimeAdapterVersion mismatch");
+  if (manifest.source?.repository !== SOURCE_REPOSITORY || manifest.source?.commit !== SOURCE_COMMIT) errors.push("roles source provenance mismatch");
+  if (JSON.stringify(manifest.bundledSelectors) !== JSON.stringify(BUNDLED_SELECTORS)) errors.push("bundled selector inventory mismatch");
+  if (JSON.stringify(manifest.turnAuditFields) !== JSON.stringify(["selector", "profileHash", "sourceHash", "profileVersion", "runtimeAdapterVersion", "effectiveTools", "provider", "model", "thinking"])) errors.push("turn audit field inventory mismatch");
+  const expected = new Set(BUNDLED_NAMES);
   const seen = new Set<string>();
+  const selectors = new Set<string>();
   for (const role of manifest.records ?? []) {
-    if (!expected.has(role.name as typeof ROLE_NAMES[number])) errors.push(`${role.name}: unexpected role`);
+    if (!expected.has(role.name as typeof BUNDLED_NAMES[number])) errors.push(`${role.name}: unexpected role`);
     if (seen.has(role.name)) errors.push(`${role.name}: duplicate role`);
+    if (selectors.has(role.selector)) errors.push(`${role.selector}: duplicate selector`);
     seen.add(role.name);
+    selectors.add(role.selector);
+    if (role.profilePath !== `roles/${role.name}.md`) errors.push(`${role.name}: invalid profile path`);
     const content = await readFile(join(ROOT, role.profilePath), "utf8").catch(() => "");
     if (!content) errors.push(`${role.name}: missing profile`);
     else {
       if (hash(content) !== role.profileHash) errors.push(`${role.name}: profile hash drift`);
-      if (content.includes("OpenCode subagent") || content.includes(".agents/skills/") || /^\s*permission:/m.test(content)) errors.push(`${role.name}: unsupported OpenCode semantics remain active`);
+      if (content.includes("OpenCode subagent") || content.includes("single-use") || content.includes("--no-session") || content.includes("Recursive AILI task dispatch is unavailable")) errors.push(`${role.name}: obsolete runtime adapter wording remains`);
+      if (!content.includes("parent-scoped persistent official Pi Agent session")) errors.push(`${role.name}: persistent adapter contract missing`);
       if (!content.includes("Return exactly one JSON object")) errors.push(`${role.name}: output contract missing`);
     }
-    if (!Array.isArray(role.tools) || !Array.isArray(role.capabilities)) errors.push(`${role.name}: invalid policy arrays`);
+    if (role.profileVersion !== PROFILE_VERSION || role.runtimeAdapterVersion !== RUNTIME_ADAPTER_VERSION) errors.push(`${role.name}: profile/runtime version mismatch`);
+    if (!Array.isArray(role.tools) || !Array.isArray(role.capabilities) || !Array.isArray(role.spawns)) errors.push(`${role.name}: invalid policy arrays`);
+    if (role.blocking !== false) errors.push(`${role.name}: unexpected blocking policy`);
     if (!role.compatibilityReason) errors.push(`${role.name}: compatibility reason missing`);
     if (role.status !== "adapted" && role.status !== "optional" && role.status !== "blocked") errors.push(`${role.name}: invalid compatibility status`);
+    if (role.name === "general") {
+      if (role.selector !== "general" || role.toolPolicy !== "inherit-parent") errors.push("general: selector/tool policy mismatch");
+      if (JSON.stringify(role.spawns) !== JSON.stringify(SPECIALIZED_SELECTORS)) errors.push("general: spawn inventory mismatch");
+      if (role.sourceKind !== "aili-owned" || role.sourcePath !== null) errors.push("general: source ownership mismatch");
+      if (content && role.sourceHash !== hash(content)) errors.push("general: source hash mismatch");
+    } else {
+      if (role.selector !== `aili.${role.name}` || role.toolPolicy !== "static") errors.push(`${role.name}: selector/tool policy mismatch`);
+      if (role.spawns.length !== 0) errors.push(`${role.name}: specialized spawns must be empty`);
+      if (role.sourceKind !== "canonical-adapter" || role.sourcePath !== `agents/${role.name}.md`) errors.push(`${role.name}: source ownership mismatch`);
+    }
   }
   for (const name of expected) if (!seen.has(name)) errors.push(`${name}: missing role`);
   const files = (await readdir(ROLES_DIR)).filter((name) => name.endsWith(".md")).sort();
-  const expectedFiles = ROLE_NAMES.map((name) => `${name}.md`).sort();
-  if (JSON.stringify(files) !== JSON.stringify(expectedFiles)) errors.push(`role file inventory mismatch: ${files.length}/19`);
+  const expectedFiles = BUNDLED_NAMES.map((name) => `${name}.md`).sort();
+  if (JSON.stringify(files) !== JSON.stringify(expectedFiles)) errors.push(`role file inventory mismatch: ${files.length}/20`);
   if (errors.length > 0) throw new Error(errors.join("\n"));
   console.log(`Role profiles verified: ${manifest.records.length}`);
 }

package/src/runtime/doctor.ts

@@ -1,10 +1,10 @@
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 import { readFile } from "node:fs/promises";
 import { detectLifecycleConflicts } from "./conflicts.js";
-import { loadRegistry, validateProvenance, validateRegistry } from "./registry.js";
+import { loadRegistry, validateLiveVerification, validateProvenance, validateRegistry } from "./registry.js";
 import { inspectGlobalResources } from "./global-resources.js";
 import { nativeIntegrationDiagnostics } from "./native-integrations.js";
-import { subagentDiagnostics } from "./subagents.js";
+import { validateRoleProfiles } from "./roles.js";
 
 export type DoctorStatus = "PASS" | "WARN" | "SKIP" | "ERROR" | "UNVERIFIED";
 
@@ -24,23 +24,23 @@ const ROOT = new URL("../../", import.meta.url);
 
 export async function runDoctor(
   pi: Pick<ExtensionAPI, "getCommands">,
-  options: { platform?: NodeJS.Platform } = {},
+  options: { platform?: NodeJS.Platform; home?: string } = {},
 ): Promise<DoctorReport> {
   const results: DoctorResult[] = [];
   try {
     const packageJson = JSON.parse(await readFile(new URL("package.json", ROOT), "utf8")) as {
       version?: string;
       engines?: { node?: string };
-      pi?: { extensions?: string[]; prompts?: string[]; skills?: string[] };
+      pi?: { extensions?: string[]; prompts?: string[]; skills?: string[]; themes?: string[] };
     };
     const dependencies = (packageJson as { dependencies?: Record<string, string> }).dependencies ?? {};
-    const expectedDependencies = ["@agwab/pi-subagent@0.4.8", "pi-permission-modes@2.2.0", "pi-quota-status@0.3.0", "pi-web-access@0.13.0"];
+    const expectedDependencies = ["pi-permission-modes@2.2.0", "pi-quota-status@0.3.0", "pi-web-access@0.13.0"];
     const dependencyState = expectedDependencies.every((entry) => {
       const separator = entry.lastIndexOf("@");
       return dependencies[entry.slice(0, separator)] === entry.slice(separator + 1);
     });
     results.push({ id: "package", status: dependencyState ? "PASS" : "ERROR", evidence: `version=${packageJson.version ?? "unverified"}; node=${packageJson.engines?.node ?? "unverified"}; native_dependencies=${dependencyState ? "exact" : "drift"}` });
-    const resources = [...(packageJson.pi?.extensions ?? []), ...(packageJson.pi?.prompts ?? []), ...(packageJson.pi?.skills ?? [])];
+    const resources = [...(packageJson.pi?.extensions ?? []), ...(packageJson.pi?.prompts ?? []), ...(packageJson.pi?.skills ?? []), ...(packageJson.pi?.themes ?? [])];
     results.push({ id: "package.resources", status: resources.length === 11 ? "PASS" : "ERROR", evidence: `declared=${resources.length}` });
   } catch (error) {
     results.push({ id: "package", status: "ERROR", evidence: boundedError(error) });
@@ -55,7 +55,8 @@ export async function runDoctor(
     results.push({ id: "skill.snapshot", status: "ERROR", evidence: boundedError(error) });
   }
 
-  const conflicts = detectLifecycleConflicts(pi.getCommands());
+  const commands = pi.getCommands();
+  const conflicts = detectLifecycleConflicts(commands);
   results.push({ id: "rose.prompts", status: conflicts.length === 0 ? "PASS" : "ERROR", evidence: conflicts.length === 0 ? "five lifecycle/review prompts have unique ownership" : `conflicts=${conflicts.map((item) => item.name).join(",")}` });
 
   try {
@@ -68,11 +69,38 @@ export async function runDoctor(
     results.push({ id: "capability.registry", status: "ERROR", evidence: boundedError(error) });
   }
 
-  const staticSubagents = await subagentDiagnostics();
-  results.push({ id: "roles.subagents", ...staticSubagents });
+  try {
+    const [profileErrors, liveErrors] = await Promise.all([
+      validateRoleProfiles(),
+      validateLiveVerification(),
+      ...[
+        "src/runtime/persistent-agents/runtime.ts",
+        "src/runtime/persistent-agents/storage.ts",
+        "src/runtime/persistent-agents/task-coordinator.ts",
+        "src/runtime/persistent-agents/hub.ts",
+        "src/runtime/persistent-agents/output-delivery.ts",
+      ].map((path) => readFile(new URL(path, ROOT), "utf8")),
+    ]);
+    results.push({
+      id: "roles.agents",
+      status: profileErrors.length === 0 ? "PASS" : "ERROR",
+      evidence: profileErrors.length === 0 ? "profiles=20; selectors=19 specialized + general" : profileErrors.slice(0, 3).join("; "),
+    });
+    results.push({
+      id: "agent.framework",
+      status: profileErrors.length === 0 && liveErrors.length === 0 ? "PASS" : profileErrors.length > 0 ? "ERROR" : "UNVERIFIED",
+      evidence: profileErrors.length > 0
+        ? `public runtime registered but profile validation failed: ${profileErrors.slice(0, 3).join("; ")}`
+        : liveErrors.length > 0
+          ? `public tools=task,hub; legacy subagent absent; ${liveErrors.slice(0, 2).join("; ")}`
+          : "public tools=task,hub; legacy subagent absent; deterministic and authorized provider/sandbox/external-workspace gates pass",
+    });
+  } catch (error) {
+    results.push({ id: "agent.framework", status: "ERROR", evidence: boundedError(error) });
+  }
   results.push({ id: "permission.native", ...nativeIntegrationDiagnostics(pi.getCommands()) });
   try {
-    const global = await inspectGlobalResources();
+    const global = await inspectGlobalResources(options.home);
     const ready = global.appendSystem === "installed" && global.roles.missing.length === 0;
     results.push({ id: "global.resources", status: ready ? "PASS" : "UNVERIFIED", evidence: `append=${global.appendSystem}; roles=${global.roles.installed}/${global.roles.expected}; stale=${global.roles.stale.length}; path=${global.roleDirectory}` });
   } catch (error) {

package/src/runtime/global-resources.ts

@@ -55,7 +55,11 @@ async function requireRealDirectory(path: string): Promise<void> {
 }
 
 async function expectedRoles(): Promise<RoleProfile[]> {
-  return await loadRoleProfiles();
+  // The 19 specialized profiles retain their existing global `aili.<role>`
+  // installation surface. `general` is owned by the new internal task runtime;
+  // installing it under agents/aili would create the forbidden `aili.general`
+  // alias.
+  return (await loadRoleProfiles()).filter((role) => role.selector !== "general");
 }
 
 export async function inspectGlobalResources(home = homedir()): Promise<GlobalResourceReport> {

package/src/runtime/index.ts

@@ -2,14 +2,14 @@ import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 import type { RuntimeComponent } from "./contracts.js";
 import { registerRoseContext } from "./rose-context.js";
 import { registerDoctor } from "./doctor.js";
-import { registerSubagent } from "./subagents.js";
+import { registerPersistentAgentRuntime } from "./persistent-agents/production.js";
 import { registerNativeIntegrations } from "./native-integrations.js";
 import { registerGlobalResourceCommand } from "./global-resources.js";
 
 export const runtimeComponents: readonly RuntimeComponent[] = [
   { id: "rose-context", availability: "available", register: registerRoseContext },
   { id: "lifecycle-routing", availability: "available" },
-  { id: "task-runtime", availability: "available", register: registerSubagent },
+  { id: "task-runtime", availability: "available", register: registerPersistentAgentRuntime },
   { id: "native-integrations", availability: "available", register: registerNativeIntegrations },
   { id: "global-resources", availability: "available", register: registerGlobalResourceCommand },
   { id: "capability-registry", availability: "available" },