@xzzpig/pi-openspec-x 0.2.0 → 0.2.1

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.2.1
+
+- Support Pi 1.2+ custom-message wakeups in child report handlers. A wakeup
+  retains the current user-dispatch attempt without allowing an unverified
+  message to authorize a report; a new user dispatch creates a fresh attempt.
+- Include the extension's generated public type declaration in the package.
+
 ## 0.2.0
 
 Child report tools are now scoped to the subagents that own them, and the

package/dist/public.d.ts

@@ -0,0 +1,48 @@
+import { ExtensionAPI } from '@earendil-works/pi-coding-agent';
+
+/**
+ * pi-openspec-x extension entry point.
+ *
+ * pi-sandbox is probed lazily through a dynamic import (dependencies.ts): on
+ * success the three opsx sandbox profiles (D4: opsx-planner / opsx-agent /
+ * opsx-reviewer) are registered into pi-sandbox's runtime registry — in-memory
+ * for the session lifetime, never written to a user's sandbox.json, a
+ * user-defined same-name profile always keeping priority. On failure the
+ * reason is recorded as dependency state and the extension continues: the
+ * official-track skills and every other capability keep working, and a later
+ * request for a restricted mode is refused with a typed
+ * OpsxDependencyMissingError (fail-closed) instead of the extension (or the
+ * official track) dying at load time.
+ *
+ * Registers the resources_discover handler, which:
+ * - generates (and caches, keyed by CLI version) the official-track
+ *   openspec-* skills under `<agentDir>/cache/pi-openspec-x/skills/` and
+ *   exposes the directory to pi via `skillPaths`;
+ * - warns once per project when static `<cwd>/.pi/skills/openspec-*`
+ *   directories collide with the generated skills.
+ *
+ * Registers the session_start handler that clears a stale `active_agent`
+ * identity left in the session file by an earlier session (pi-agent-role's
+ * semantics; see mode.ts).
+ *
+ * Registers the three child reporting tools (report_gap_analysis,
+ * report_plan_review, report_work) through the role-specific child-only
+ * extensions declared in agents.ts (design D1): each tool is registered into
+ * its own subagent's process and never into the main session, so the parent's
+ * tool declaration and prompt rules stay free of them.
+ *
+ * pi-subagents is probed the same lazy way: on success the four opsx
+ * subagents (opsx-gap-analysis / opsx-plan-review / opsx-worker / opsx-reviewer) are
+ * registered into pi-subagents' runtime registry via the owner's event bus
+ * (D3). A missing pi-subagents costs only the enhanced flow's subagents —
+ * the official track and direct main-session implementation are unaffected.
+ * Because the owner listener only exists once pi-subagents has loaded (load
+ * order between extensions is not guaranteed), a failed init-time attempt is
+ * retried on session_start.
+ *
+ * Missing openspec CLI: no skills are registered and no error escapes — a
+ * one-time notice is sent instead.
+ */
+declare function piOpenspecX(pi: ExtensionAPI): Promise<void>;
+
+export { piOpenspecX as default };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xzzpig/pi-openspec-x",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "OpenSpec workflow for the pi coding agent: spec-driven planning and implementation via dedicated subagents, sandboxed /opsx:plan and /opsx:implement commands.",
   "keywords": [
     "pi-package",
@@ -25,6 +25,7 @@
   "files": [
     "index.ts",
     "src",
+    "dist",
     "README.md",
     "CHANGELOG.md",
     "LICENSE",
@@ -43,13 +44,16 @@
     "@xzzpig/pi-subagents": "*"
   },
   "devDependencies": {
-    "@earendil-works/pi-coding-agent": "1.0.0",
+    "@earendil-works/pi-coding-agent": "1.1.0",
     "@types/node": "24.12.4",
+    "rollup": "^4.62.2",
+    "rollup-plugin-dts": "^6.4.1",
     "typescript": "5.9.3",
     "vitest": "4.1.8"
   },
   "scripts": {
     "test": "vitest run",
-    "typecheck": "tsc --noEmit"
+    "typecheck": "tsc --noEmit",
+    "build:types": "rollup -c rollup.dts.config.mjs"
   }
 }

package/src/child-report-reader.ts

@@ -12,12 +12,12 @@
  * ingestion; it never adds a model-fillable parameter, and the parent
  * re-validates `report` against the original tool schema.
  *
- * The attempt is the anti-forgery anchor: `before_agent_start` records a fresh
- * random `attemptId` plus the SHA-256 of the actual prompt in a
- * `pi-openspec-x/child-report-attempt:v1` session entry. A report is only
- * attributable to the turn whose attempt it names, so a resumed child that
- * reuses the same session file cannot smuggle an earlier run's report into the
- * current dispatch.
+ * The attempt is the anti-forgery anchor: for each user dispatch,
+ * `before_agent_start` records a fresh random `attemptId` plus the SHA-256 of
+ * the actual prompt in a `pi-openspec-x/child-report-attempt:v1` session entry.
+ * A report is attributable only to the dispatch whose attempt it names, so a
+ * resumed child that reuses the same session file cannot smuggle an earlier
+ * run's report into the current dispatch.
  *
  * Deliberately NOT here: any reading of pi-subagents' private `AsyncStatus`
  * or lifecycle constants (design D3). This module declares the minimal v3
@@ -164,9 +164,9 @@ export function beginChildReportAttempt(
 /** Human-readable refusal text for a report that cannot be attributed. */
 export function attemptUnavailableMessage(agent: string): string {
   return (
-    `Report rejected: no child report attempt is recorded for ${agent} in this turn. ` +
+    `Report rejected: no child report attempt is recorded for ${agent} in this dispatch. ` +
     `The parent cannot attribute this report to a verified run, so it would be ignored; ` +
-    `the attempt entry is written by this extension at the start of every turn.`
+    `the attempt entry is written by this extension at the start of each user dispatch.`
   );
 }
 
@@ -175,7 +175,7 @@ export function attemptUnavailableMessage(agent: string): string {
  *
  * The wrapped tool keeps the original name, schema, confirmation text and
  * `sequential` execution mode; only `details` changes into the envelope. When
- * the current turn has no persisted attempt, the call fails explicitly instead
+ * the current dispatch has no persisted attempt, the call fails explicitly instead
  * of returning a report the parent would have to discard.
  */
 export function registerChildReportTool(
@@ -185,6 +185,13 @@ export function registerChildReportTool(
   let current: ChildReportAttemptOutcome | undefined;
 
   pi.on("before_agent_start", (event: BeforeAgentStartEvent, ctx) => {
+    // Pi 1.2+ also fires this hook when a custom message wakes the same child.
+    // It is not a new user dispatch: keep its existing attempt, or continue to
+    // reject reports if no dispatch has been recorded. Pi 1.1 never fired this
+    // hook for such a wake and has no messageType field.
+    if ("messageType" in event && event.messageType === "custom") return;
+    current = undefined;
+    if (!("prompt" in event) || typeof event.prompt !== "string") return;
     current = beginChildReportAttempt(pi, ctx, {
       agent: options.agent,
       prompt: event.prompt,