@sweny-ai/core 0.1.146 → 0.1.148

package/dist/index.d.ts

@@ -31,8 +31,8 @@ export { resolveNodePermissions, buildNodePolicy } from "./node-policy.js";
 export type { ResolvedPermissions } from "./node-policy.js";
 export { applySafeOutputs, createEmitOutputTool, resolveActor, EMIT_OUTPUT_TOOL } from "./safe-outputs.js";
 export type { SafeOutputIntent, ActorInfo, WriteStageState } from "./safe-outputs.js";
-export { createHarness, claudeCompat, asClaude, policyGate, ClaudeCodeHarness, CodexHarness, SUPPORTED_AGENTS, } from "./harness/index.js";
-export type { AgentHarness, HarnessCapabilities, HarnessId, HarnessInfo, HarnessRunRequest, HarnessRunResult, NodePolicy, PolicyGateResult, PolicyWrappers, ToolClass, ClaudeCodeHarnessOptions, CodexHarnessOptions, } from "./harness/index.js";
+export { createHarness, claudeCompat, asClaude, policyGate, ClaudeCodeHarness, CodexHarness, PiHarness, SUPPORTED_AGENTS, } from "./harness/index.js";
+export type { AgentHarness, HarnessCapabilities, HarnessId, HarnessInfo, HarnessRunRequest, HarnessRunResult, NodePolicy, PolicyGateResult, PolicyWrappers, ToolClass, ClaudeCodeHarnessOptions, CodexHarnessOptions, PiHarnessOptions, } from "./harness/index.js";
 export { ClaudeClient, resolveAuthEnv } from "./harness/claude-code.js";
 export type { ClaudeClientOptions, SwenyAuthMode, ResolveAuthEnvOpts } from "./harness/claude-code.js";
 export { resolveExecutionModel } from "./model.js";

package/dist/index.js

@@ -30,8 +30,8 @@ export { execute, RouteEvaluationError } from "./executor.js";
 // Least-privilege nodes and safe outputs (#365)
 export { resolveNodePermissions, buildNodePolicy } from "./node-policy.js";
 export { applySafeOutputs, createEmitOutputTool, resolveActor, EMIT_OUTPUT_TOOL } from "./safe-outputs.js";
-// Agent harness (the seam) and its adapters: Claude Code and Codex
-export { createHarness, claudeCompat, asClaude, policyGate, ClaudeCodeHarness, CodexHarness, SUPPORTED_AGENTS, } from "./harness/index.js";
+// Agent harness (the seam) and its adapters: Claude Code, Codex and pi
+export { createHarness, claudeCompat, asClaude, policyGate, ClaudeCodeHarness, CodexHarness, PiHarness, SUPPORTED_AGENTS, } from "./harness/index.js";
 // Claude client (back-compat: ClaudeClient is ClaudeCodeHarness, @deprecated)
 export { ClaudeClient, resolveAuthEnv } from "./harness/claude-code.js";
 // Execution model resolution

package/dist/safe-outputs.d.ts

@@ -47,7 +47,7 @@ export declare function safeOutputsInstruction(declarations: SafeOutputDeclarati
 export interface ActorInfo {
     /** GitHub login of whoever triggered the run. */
     login?: string;
-    /** Author association of the event's comment, review, issue or PR author. */
+    /** Association verified for this login, or explicitly supplied by the trusted caller. */
     association?: string;
 }
 /** Who triggered this run: an explicit override, else GitHub Actions' env and event payload. */

package/dist/safe-outputs.js

@@ -129,13 +129,16 @@ export function safeOutputsInstruction(declarations) {
         "Requests outside these types or limits are refused. Do not claim a write happened; say what you requested.",
     ].join("\n");
 }
-function eventAssociation(path) {
-    if (!path)
+function eventAssociation(path, login) {
+    if (!path || !login)
         return undefined;
     try {
         const ev = JSON.parse(readFileSync(path, "utf-8"));
         for (const key of ["comment", "review", "issue", "pull_request"]) {
-            const a = ev?.[key]?.author_association;
+            const author = ev?.[key];
+            if (typeof author?.user?.login !== "string" || author.user.login.toLowerCase() !== login.toLowerCase())
+                continue;
+            const a = author.author_association;
             if (typeof a === "string" && a.length > 0)
                 return a;
         }
@@ -148,7 +151,7 @@ function eventAssociation(path) {
 /** Who triggered this run: an explicit override, else GitHub Actions' env and event payload. */
 export function resolveActor(env, override) {
     const login = override?.login ?? env.GITHUB_ACTOR ?? undefined;
-    const association = override?.association ?? eventAssociation(env.GITHUB_EVENT_PATH);
+    const association = override?.association ?? eventAssociation(env.GITHUB_EVENT_PATH, login);
     return { ...(login ? { login } : {}), ...(association ? { association } : {}) };
 }
 /** True when no trust list is declared, or the actor matches one. Unknown actor = untrusted. */
@@ -356,11 +359,37 @@ export async function applySafeOutputs(o) {
             refuse("title too long", at);
             continue;
         }
+        // A Linear comment's issue ID does not encode or enforce its declared team.
+        // Resolve it through the configured read tool and carry its immutable ID to
+        // the write. Missing lookup support or unverifiable membership fails closed.
+        let number = intent.number;
+        if (via === "linear" && type === "comment" && target) {
+            const lookup = o.skills.get(via)?.tools.find((t) => t.name === "linear_get_issue" && t.access === "read");
+            let issue;
+            try {
+                const result = await lookup?.handler({ id: number }, { config: o.config, logger: o.logger });
+                if (result && typeof result === "object") {
+                    issue = result.issue;
+                }
+            }
+            catch {
+                // A lookup error cannot authorize a write.
+            }
+            if (typeof issue?.id !== "string" || !issue.id || typeof issue.team?.id !== "string") {
+                refuse("cannot verify Linear issue team", at);
+                continue;
+            }
+            if (issue.team.id.toLowerCase() !== target.toLowerCase()) {
+                refuse("issue outside the declared team", at);
+                continue;
+            }
+            number = issue.id;
+        }
         const write = {
             type,
             via,
             ...(target ? { target } : {}),
-            ...(intent.number !== undefined ? { number: intent.number } : {}),
+            ...(number !== undefined ? { number } : {}),
             ...(title ? { title } : {}),
             ...(type !== "label" ? { body } : {}),
             ...(labels ? { labels } : {}),

package/dist/skills/linear.js

@@ -106,7 +106,7 @@ export const linear = {
               priority priorityLabel
               assignee { name email }
               labels { nodes { name } }
-              team { key name }
+              team { id key name }
               createdAt updatedAt
             }
           }`, { id: input.id }, ctx),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sweny-ai/core",
-  "version": "0.1.146",
+  "version": "0.1.148",
   "type": "module",
   "bin": {
     "sweny": "./dist/cli/main.js"