gentle-pi 0.10.7 → 0.10.8

package/assets/agents/jd-fix-agent.md

@@ -1,7 +1,13 @@
 ---
 name: jd-fix-agent
 description: Judgment Day surgical fix agent for confirmed findings. Can edit code and run focused tests.
-tools: read, grep, glob, edit, write, bash
+tools:
+  - read
+  - grep
+  - glob
+  - edit
+  - write
+  - bash
 ---
 
 You are the Judgment Day fix agent for Gentle AI.

package/assets/agents/jd-judge-a.md

@@ -1,7 +1,11 @@
 ---
 name: jd-judge-a
 description: Judgment Day blind adversarial reviewer A. Read-only; reports findings and does not fix code.
-tools: read, grep, glob, bash
+tools:
+  - read
+  - grep
+  - glob
+  - bash
 ---
 
 You are Judgment Day judge A for Gentle AI.

package/assets/agents/jd-judge-b.md

@@ -1,7 +1,11 @@
 ---
 name: jd-judge-b
 description: Judgment Day blind adversarial reviewer B. Read-only; independently reports findings and does not fix code.
-tools: read, grep, glob, bash
+tools:
+  - read
+  - grep
+  - glob
+  - bash
 ---
 
 You are Judgment Day judge B for Gentle AI.

package/assets/agents/review-readability.md

@@ -1,7 +1,11 @@
 ---
 name: review-readability
 description: R2 Readability reviewer — naming, complexity, intention, maintainability, review size, and context clarity.
-tools: read, grep, glob, bash
+tools:
+  - read
+  - grep
+  - glob
+  - bash
 ---
 
 You are **R2 Readability**, a read-only reviewer. Find clarity problems; do not fix them.

package/assets/agents/review-reliability.md

@@ -1,7 +1,11 @@
 ---
 name: review-reliability
 description: R3 Reliability reviewer — behavior-first tests, coverage value, edge cases, determinism, contracts, and regressions.
-tools: read, grep, glob, bash
+tools:
+  - read
+  - grep
+  - glob
+  - bash
 ---
 
 You are **R3 Reliability**, a read-only reviewer. Find test and behavior risks; do not fix them.

package/assets/agents/review-resilience.md

@@ -1,7 +1,11 @@
 ---
 name: review-resilience
 description: R4 Resilience reviewer — fallbacks, retry/backoff, graceful degradation, observability, load, rollback, and SLO risks.
-tools: read, grep, glob, bash
+tools:
+  - read
+  - grep
+  - glob
+  - bash
 ---
 
 You are **R4 Resilience**, a read-only reviewer. Find operational failure risks; do not fix them.

package/assets/agents/review-risk.md

@@ -1,7 +1,11 @@
 ---
 name: review-risk
 description: R1 Risk reviewer — security, privilege boundaries, data exposure, dependency risks, and merge-blocking vulnerabilities.
-tools: read, grep, glob, bash
+tools:
+  - read
+  - grep
+  - glob
+  - bash
 ---
 
 You are **R1 Risk**, a read-only reviewer. Find security risks; do not fix them.

package/assets/agents/sdd-apply.md

@@ -1,7 +1,17 @@
 ---
 name: sdd-apply
 description: Implement SDD tasks with strict TDD evidence and review workload guard.
-tools: read, grep, glob, edit, write, bash, mem_search, mem_get_observation, mem_save, mem_update
+tools:
+  - read
+  - grep
+  - glob
+  - edit
+  - write
+  - bash
+  - mem_search
+  - mem_get_observation
+  - mem_save
+  - mem_update
 ---
 
 You are the SDD apply executor for Gentle AI.

package/assets/agents/sdd-archive.md

@@ -1,7 +1,16 @@
 ---
 name: sdd-archive
 description: Archive a verified SDD change into OpenSpec source specs.
-tools: read, grep, glob, write, edit, bash, mem_search, mem_get_observation, mem_save
+tools:
+  - read
+  - grep
+  - glob
+  - write
+  - edit
+  - bash
+  - mem_search
+  - mem_get_observation
+  - mem_save
 ---
 
 You are the SDD archive executor for Gentle AI.

package/assets/agents/sdd-design.md

@@ -1,7 +1,15 @@
 ---
 name: sdd-design
 description: Design the technical approach for an SDD change.
-tools: read, grep, glob, write, edit, mem_search, mem_get_observation, mem_save
+tools:
+  - read
+  - grep
+  - glob
+  - write
+  - edit
+  - mem_search
+  - mem_get_observation
+  - mem_save
 ---
 
 You are the SDD design executor for Gentle AI.

package/assets/agents/sdd-explore.md

@@ -1,7 +1,12 @@
 ---
 name: sdd-explore
 description: Explore an SDD change idea before proposal.
-tools: read, grep, glob, webfetch, mem_save
+tools:
+  - read
+  - grep
+  - glob
+  - webfetch
+  - mem_save
 ---
 
 You are the SDD explore executor for Gentle AI.

package/assets/agents/sdd-init.md

@@ -2,7 +2,16 @@
 name: sdd-init
 description: Initialize project SDD context, testing capabilities, and skill registry.
 model: openai-codex/gpt-5.3-codex
-tools: read, grep, glob, write, bash, mem_search, mem_get_observation, mem_save, mem_update
+tools:
+  - read
+  - grep
+  - glob
+  - write
+  - bash
+  - mem_search
+  - mem_get_observation
+  - mem_save
+  - mem_update
 ---
 
 You are the SDD init executor for Gentle AI.

package/assets/agents/sdd-onboard.md

@@ -1,7 +1,17 @@
 ---
 name: sdd-onboard
 description: Guide a user through a complete SDD cycle on a small real project change.
-tools: read, grep, glob, write, edit, bash, mem_search, mem_get_observation, mem_save, mem_update
+tools:
+  - read
+  - grep
+  - glob
+  - write
+  - edit
+  - bash
+  - mem_search
+  - mem_get_observation
+  - mem_save
+  - mem_update
 ---
 
 You are the SDD onboard executor for Gentle AI.

package/assets/agents/sdd-proposal.md

@@ -1,7 +1,15 @@
 ---
 name: sdd-proposal
 description: Write an SDD proposal for an approved change idea.
-tools: read, grep, glob, write, edit, mem_search, mem_get_observation, mem_save
+tools:
+  - read
+  - grep
+  - glob
+  - write
+  - edit
+  - mem_search
+  - mem_get_observation
+  - mem_save
 ---
 
 You are the SDD proposal executor for Gentle AI.

package/assets/agents/sdd-spec.md

@@ -1,7 +1,15 @@
 ---
 name: sdd-spec
 description: Write SDD delta specs with requirements and scenarios.
-tools: read, grep, glob, write, edit, mem_search, mem_get_observation, mem_save
+tools:
+  - read
+  - grep
+  - glob
+  - write
+  - edit
+  - mem_search
+  - mem_get_observation
+  - mem_save
 ---
 
 You are the SDD spec executor for Gentle AI.

package/assets/agents/sdd-status.md

@@ -1,7 +1,13 @@
 ---
 name: sdd-status
 description: Show read-only structured SDD status for an active change.
-tools: read, grep, glob, bash, mem_search, mem_get_observation
+tools:
+  - read
+  - grep
+  - glob
+  - bash
+  - mem_search
+  - mem_get_observation
 ---
 
 You are the SDD status executor for Gentle AI.

package/assets/agents/sdd-sync.md

@@ -1,7 +1,17 @@
 ---
 name: sdd-sync
 description: Sync verified SDD delta specs into OpenSpec canonical specs without archiving the change.
-tools: read, grep, glob, write, edit, bash, mem_search, mem_get_observation, mem_save, mem_update
+tools:
+  - read
+  - grep
+  - glob
+  - write
+  - edit
+  - bash
+  - mem_search
+  - mem_get_observation
+  - mem_save
+  - mem_update
 ---
 
 You are the SDD sync executor for Gentle AI.

package/assets/agents/sdd-tasks.md

@@ -1,7 +1,15 @@
 ---
 name: sdd-tasks
 description: Break SDD design/specs into implementation tasks with review workload forecast.
-tools: read, grep, glob, write, edit, mem_search, mem_get_observation, mem_save
+tools:
+  - read
+  - grep
+  - glob
+  - write
+  - edit
+  - mem_search
+  - mem_get_observation
+  - mem_save
 ---
 
 You are the SDD tasks executor for Gentle AI.

package/assets/agents/sdd-verify.md

@@ -1,7 +1,16 @@
 ---
 name: sdd-verify
 description: Verify implementation against SDD specs, tasks, strict TDD evidence, and review workload boundaries.
-tools: read, grep, glob, bash, write, edit, mem_search, mem_get_observation, mem_save
+tools:
+  - read
+  - grep
+  - glob
+  - bash
+  - write
+  - edit
+  - mem_search
+  - mem_get_observation
+  - mem_save
 ---
 
 You are the SDD verify executor for Gentle AI.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gentle-pi",
-  "version": "0.10.7",
+  "version": "0.10.8",
   "description": "Turn Pi into el Gentleman: a senior-architect development harness with SDD/OpenSpec, subagents, strict TDD evidence, review guardrails, and skill discovery.",
   "license": "MIT",
   "type": "module",

package/tests/package-manifest.test.ts

@@ -1,5 +1,5 @@
 import assert from "node:assert/strict";
-import { existsSync, readFileSync } from "node:fs";
+import { existsSync, readdirSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import test from "node:test";
 import { fileURLToPath } from "node:url";
@@ -60,6 +60,42 @@ test("package manifest installs pi-pretty through a wrapper without bundling nat
 });
 
 
+function readAgentFrontmatter(file: string): string {
+	const source = readFileSync(file, "utf8");
+	const match = source.match(/^---\n([\s\S]*?)\n---/);
+	assert.ok(match, `${file} must have frontmatter`);
+	return match[1];
+}
+
+test("packaged agents use YAML list syntax for tool allowlists", () => {
+	const agentsDir = join(PACKAGE_ROOT, "assets", "agents");
+	const agentFiles = readdirSync(agentsDir).flatMap((entry) =>
+		entry.endsWith(".md") ? [join(agentsDir, entry)] : [],
+	);
+
+	assert.ok(agentFiles.length > 0, "gentle-pi must ship packaged agents");
+
+	for (const file of agentFiles) {
+		const frontmatter = readAgentFrontmatter(file);
+		assert.doesNotMatch(
+			frontmatter,
+			/^tools:\s*[^\n,]+(?:,\s*[^\n,]+)+$/m,
+			`${file} must not use comma-separated inline tools; pi-subagents expects a YAML list`,
+		);
+		assert.match(frontmatter, /^tools:\n(?: {2}- [\w-]+\n?)+/m, `${file} must declare tools as a YAML list`);
+	}
+});
+
+test("jd-fix-agent packaged allowlist includes write tools", () => {
+	const frontmatter = readAgentFrontmatter(
+		join(PACKAGE_ROOT, "assets", "agents", "jd-fix-agent.md"),
+	);
+
+	for (const tool of ["read", "edit", "write", "bash"]) {
+		assert.match(frontmatter, new RegExp(`^  - ${tool}$`, "m"));
+	}
+});
+
 test("pi-pretty wrapper uses real package path resolution for pnpm symlink installs", () => {
 	const wrapper = readFileSync(
 		join(PACKAGE_ROOT, "extensions", "pi-pretty.ts"),