jorgex-pi 0.8.30 → 0.8.31

package/README.md

@@ -132,7 +132,7 @@ Context7 uses the canonical endpoint `https://mcp.context7.com/mcp`. `CONTEXT7_A
 
 The runner's `status` and `doctor` commands report whether Context7 configuration permits registration; `available` does not mean that an HTTP handshake has occurred. `sync` fails closed on a Context7 conflict and does not modify MCP configuration. At `session_start`, JorgeX registers Context7 and strict DevTools through the external adapter's runtime event bus; it does not create a bundled adapter or fallback factory. Missing, duplicate, malformed, unreadable, or conflicting official setup fails closed with a remediation to run `engram setup pi` and correct the external configuration.
 
-When a compatible Stack projection provides `PI_CODING_AGENT_DIR/jorgex-pi/devtools.v1.json`, the bridge validates that optional handoff and registers strict DevTools through the external adapter. The handoff must contain only `schemaVersion: 1`, `enabled: true`, an absolute executable command and the canonical `dlx chrome-devtools-mcp@1.6.0 --isolated --redact-network-headers --no-performance-crux --no-usage-statistics` arguments. Pi reads it at bootstrap and never edits it; Stack owns its lifecycle. DevTools is advertised only when that managed handoff is valid and the external adapter accepts the registration. The registration is lazy/proxy (`directTools: false`); `MCP_DIRECT_TOOLS` is not used. Changing or removing the handoff requires reloading Pi because registration is created once per session.
+When a compatible Stack projection provides `PI_CODING_AGENT_DIR/jorgex-pi/devtools.v1.json`, the bridge validates that optional handoff and registers strict DevTools through the external adapter. The handoff must contain only `schemaVersion: 1`, `enabled: true`, an absolute executable command, and `dlx chrome-devtools-mcp@<exact-stable-version> --isolated --redact-network-headers --no-performance-crux --no-usage-statistics`. Pi accepts only an exact stable semver in the package argument, reads the handoff at bootstrap, and never edits it; Stack owns its lifecycle. This Pi consumer validates the handoff shape, executable path, version form, and privacy flags; it does not download, checksum, or authenticate the DevTools binary. DevTools is advertised only when that managed handoff is valid and the external adapter accepts the registration. The registration is lazy/proxy (`directTools: false`); `MCP_DIRECT_TOOLS` is not used. Changing or removing the handoff requires reloading Pi because registration is created once per session.
 
 The official setup owns the Engram binary, database, and memories. Pi only validates the external configuration needed for the session and never installs, updates, removes, or takes ownership of that state. Child environment handling is provider/runtime-owned; JorgeX defines no environment allowlist. Provider-managed `gentle-engram` hooks may automatically persist session, prompt, and compaction context; JorgeX does not own or configure those hooks.
 
@@ -176,12 +176,12 @@ The optional Stack handoff is `PI_CODING_AGENT_DIR/jorgex-pi/playwright.v1.json`
 {
   "schemaVersion": 1,
   "enabled": true,
-  "version": "0.1.18",
+  "version": "<exact-stable-version>",
   "command": "/absolute/path/to/playwright-cli"
 }
 ```
 
-Pi accepts the handoff only when `schemaVersion` is `1`, `enabled` is `true`, `version` is exactly `0.1.18`, `command` is absolute and executable, and invoking that path with `--version` returns the pinned version. The resolver does not search `PATH`, inspect browser profiles, open a user session, or test whether a live browser can launch. Stack owns installation of the global CLI and Chromium, including browser readiness checks; the Pi capability check validates only the executable handoff.
+Pi accepts the handoff only when `schemaVersion` is `1`, `enabled` is `true`, `version` is an exact stable semver, `command` is absolute and executable, and invoking that path with `--version` returns exactly the handoff version. The resolver does not search `PATH`, inspect browser profiles, open a user session, or test whether a live browser can launch. Stack owns installation of the global CLI and Chromium, including browser readiness checks; the Pi capability check validates only the executable handoff and does not download, checksum, or authenticate the CLI binary.
 
 When the handoff is absent, malformed, or fails the version check, the capability stays hidden and the browser guidance is omitted. A manually written file that satisfies the same schema and executable/version checks is accepted; Pi does not authenticate its provenance. Once a valid handoff is present, Pi exposes the routing with the managed command path. The bootstrap resolves it in `before_agent_start` for each agent turn and does not rewrite it; changing or removing the file is re-evaluated on the next turn. The capability is advertised as `playwright-handoff-v1`; this resolver state does not certify live browser readiness. Its adoption is a separate Stack change and does not alter Pi's canonical snapshot or shared source commit.
 

package/contract/jorgex-pi.v1.json

@@ -2,8 +2,8 @@
   "schemaVersion": 1,
   "package": {
     "name": "jorgex-pi",
-    "version": "0.8.30",
-    "source": "npm:jorgex-pi@0.8.30"
+    "version": "0.8.31",
+    "source": "npm:jorgex-pi@0.8.31"
   },
   "pi": {
     "minimumVersion": "0.84.2",

package/extensions/mcp-engram.ts

@@ -17,9 +17,9 @@ export const RUNTIME_SNAPSHOT_VERSION = 1;
 export const CONTEXT7_URL = "https://mcp.context7.com/mcp";
 const OFFICIAL_ENGRAM_ARGS = ["mcp", "--tools=agent"];
 const DEVTOOLS_HANDOFF_RELATIVE_PATH = ["jorgex-pi", "devtools.v1.json"];
-const DEVTOOLS_HANDOFF_ARGS = [
-  "dlx",
-  "chrome-devtools-mcp@1.6.0",
+const DEVTOOLS_PACKAGE_PREFIX = "chrome-devtools-mcp@";
+const STABLE_EXACT_SEMVER = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/;
+const DEVTOOLS_FIXED_SUFFIX_ARGS = [
   "--isolated",
   "--redact-network-headers",
   "--no-performance-crux",
@@ -207,14 +207,27 @@ function readChromeDevToolsHandoff({ env, platform }) {
   if (!isExecutable(handoff.command, platform)) {
     throw new Error(`Chrome DevTools handoff command is not executable at ${handoffPath}`);
   }
-  if (!Array.isArray(handoff.args)
-    || handoff.args.length !== DEVTOOLS_HANDOFF_ARGS.length
-    || handoff.args.some((arg, index) => arg !== DEVTOOLS_HANDOFF_ARGS[index])) {
+  if (!isDevToolsArgs(handoff.args)) {
     throw new Error(`Chrome DevTools handoff has invalid arguments at ${handoffPath}`);
   }
   return { command: handoff.command, args: handoff.args };
 }
 
+function isDevToolsArgs(args) {
+  if (!Array.isArray(args) || args.length !== 6) return false;
+  if (args[0] !== "dlx" || !isDevToolsPackageArg(args[1])) return false;
+  return args.slice(2).every((arg, index) => arg === DEVTOOLS_FIXED_SUFFIX_ARGS[index]);
+}
+
+function isDevToolsPackageArg(arg) {
+  if (typeof arg !== "string" || !arg.startsWith(DEVTOOLS_PACKAGE_PREFIX)) return false;
+  return isStableExactVersion(arg.slice(DEVTOOLS_PACKAGE_PREFIX.length));
+}
+
+function isStableExactVersion(version) {
+  return typeof version === "string" && STABLE_EXACT_SEMVER.test(version);
+}
+
 export function resolveConfiguredEngramBinary({
   env = process.env,
   platform = process.platform,

package/extensions/playwright.ts

@@ -4,7 +4,7 @@ import { homedir } from "node:os";
 import { posix, win32 } from "node:path";
 
 const HANDOFF_RELATIVE_PATH = ["jorgex-pi", "playwright.v1.json"];
-const PLAYWRIGHT_VERSION = "0.1.18";
+const STABLE_EXACT_SEMVER = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/;
 const VERSION_TIMEOUT_MS = 5_000;
 const CONTROL_CHARACTERS = /[\u0000-\u001f\u007f]/;
 const WINDOWS_CMD_METACHARACTERS = /[&|<>()^%!"\r\n]/;
@@ -35,7 +35,7 @@ export function resolvePlaywrightCapability({
       ...(invocation.windowsVerbatimArguments ? { windowsVerbatimArguments: true } : {}),
       env: { ...env, NO_UPDATE_NOTIFIER: "1" },
     });
-    if (!isExpectedVersion(output)) return hiddenCapability();
+    if (!isExpectedVersion(output, handoff.version)) return hiddenCapability();
 
     return { status: "ready", commandPath: handoff.command };
   } catch {
@@ -60,10 +60,10 @@ function readHandoff(handoffPath, paths) {
   if (!isRecord(parsed)) return undefined;
   const keys = Object.keys(parsed).sort();
   if (keys.join("\0") !== ["command", "enabled", "schemaVersion", "version"].join("\0")) return undefined;
-  if (parsed.schemaVersion !== 1 || parsed.enabled !== true || parsed.version !== PLAYWRIGHT_VERSION) return undefined;
+  if (parsed.schemaVersion !== 1 || parsed.enabled !== true || !isStableExactVersion(parsed.version)) return undefined;
   if (typeof parsed.command !== "string" || CONTROL_CHARACTERS.test(parsed.command)) return undefined;
   if (!paths.isAbsolute(parsed.command)) return undefined;
-  return { command: parsed.command };
+  return { command: parsed.command, version: parsed.version };
 }
 
 function resolveDefaultAgentDir({ env, platform, paths }) {
@@ -97,8 +97,14 @@ function planExecutable(command, platform, env) {
   };
 }
 
-function isExpectedVersion(output) {
-  return /^(?:playwright-cli\s+)?0\.1\.18$/i.test(String(output).trim());
+function isExpectedVersion(output, version) {
+  const trimmed = String(output).trim();
+  const reported = /^playwright-cli\s+/i.test(trimmed) ? trimmed.replace(/^playwright-cli\s+/i, "") : trimmed;
+  return reported === version;
+}
+
+function isStableExactVersion(version) {
+  return typeof version === "string" && STABLE_EXACT_SEMVER.test(version);
 }
 
 function isExecutable(path, platform) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jorgex-pi",
-  "version": "0.8.30",
+  "version": "0.8.31",
   "description": "Pi-native runtime package for the JorgeX harness.",
   "license": "MIT",
   "repository": {