pi-background-tasks 0.9.0 → 1.0.3

package/docs/tools/fusion_investigate.md

@@ -0,0 +1,116 @@
+---
+doc_id: tools/fusion_investigate
+audience: agent
+mode: mixed
+review_policy: contract
+stability: stable
+covers_surfaces: [tool:fusion_investigate]
+covers_sources: []
+---
+# `fusion_investigate`
+
+<!-- pi-docs:begin name="tool-contract-fusion_investigate" generator="scripts/docs/generate.mjs" -->
+- Label: **Fusion Investigate**
+- Source: `src/fusion-extension.ts:1049`
+- Description: Run a five-model Fusion investigation from a structured, self-contained objective/background/deliverable. Candidate children run in clean bounded read-only contexts.
+- Root schema: `object`; additionalProperties: `false`
+
+| Field | Required | Type | Description | Constraints |
+| --- | --- | --- | --- | --- |
+| `background` | yes | `string[]` | Array of non-empty strings. Runtime normalization trims every item. |  |
+| `constraints` | no | `string[]` | Array of non-empty strings. Runtime normalization trims every item. |  |
+| `deliverable` | yes | `string` | Non-empty string. Runtime normalization trims and rejects whitespace-only text. | minLength 1 |
+| `objective` | yes | `string` | Non-empty string. Runtime normalization trims and rejects whitespace-only text. | minLength 1 |
+| `scope` | no | `string[]` | Array of non-empty strings. Runtime normalization trims every item. |  |
+
+<details>
+<summary>Normalized TypeBox contract</summary>
+
+
+```json
+{
+  "additionalProperties": false,
+  "properties": {
+    "background": {
+      "description": "Array of non-empty strings. Runtime normalization trims every item.",
+      "items": {
+        "description": "Non-empty string. Runtime normalization trims and rejects whitespace-only text.",
+        "minLength": 1,
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "constraints": {
+      "description": "Array of non-empty strings. Runtime normalization trims every item.",
+      "items": {
+        "description": "Non-empty string. Runtime normalization trims and rejects whitespace-only text.",
+        "minLength": 1,
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "deliverable": {
+      "description": "Non-empty string. Runtime normalization trims and rejects whitespace-only text.",
+      "minLength": 1,
+      "type": "string"
+    },
+    "objective": {
+      "description": "Non-empty string. Runtime normalization trims and rejects whitespace-only text.",
+      "minLength": 1,
+      "type": "string"
+    },
+    "scope": {
+      "description": "Array of non-empty strings. Runtime normalization trims every item.",
+      "items": {
+        "description": "Non-empty string. Runtime normalization trims and rejects whitespace-only text.",
+        "minLength": 1,
+        "type": "string"
+      },
+      "type": "array"
+    }
+  },
+  "required": [
+    "background",
+    "deliverable",
+    "objective"
+  ],
+  "type": "object"
+}
+```
+
+</details>
+<!-- pi-docs:end name="tool-contract-fusion_investigate" -->
+
+Fixed-purpose public Fusion tool for bounded read-only repository investigation.
+
+## Signature
+
+```ts
+fusion_investigate({
+  objective: string,
+  background: string[],
+  deliverable: string,
+  scope?: string[],
+  constraints?: string[]
+})
+```
+
+The schema is closed. `objective`, `background`, and `deliverable` are required; every string trims to non-blank text. Optional `scope` and `constraints` normalize to `[]` when omitted. Unknown keys are rejected. There is no public capability or mode argument.
+
+## Context and tools
+
+Investigate uses clean-task canonical input (`pi-background-tasks.fusion-input.v5`) with policy `fusion-clean-task-v1`. Children receive only `workflow`, `cwd`, `request`, and clean context. They do **not** receive the parent transcript, parent system prompt, conversation projection, omission ledger, or hidden tool payloads.
+
+Candidate children run with the fixed inspect policy: `read`, `grep`, `find`, and `ls` only, with built-in tools disabled and Fusion/background/write/shell tools denied. Evaluator, evaluator-repair, and merger run with no tools.
+
+## Execution model
+
+Three inspect candidates independently re-derive repository facts, a blind evaluator compares anonymous candidate answers, and a merger synthesizes the final answer. One evaluator-repair child is run only when the first evaluator response is invalid JSON or fails the evaluation schema.
+
+## Failure behavior
+
+Malformed structured input fails before child creation. Prompt-budget failures name the blocking stage and remediation. Tool-enabled children must produce a sealed tool-call audit; missing, partial, unsealed, non-contiguous, over-budget, or non-allowlisted tool traces fail loudly.
+
+## Related
+
+- Behavioral owner/troubleshooting: [`../subsystems/fusion.md`](../subsystems/fusion.md)

package/docs/tools/fusion_reason.md

@@ -0,0 +1,75 @@
+---
+doc_id: tools/fusion_reason
+audience: agent
+mode: mixed
+review_policy: contract
+stability: stable
+covers_surfaces: [tool:fusion_reason]
+covers_sources: []
+---
+# `fusion_reason`
+
+<!-- pi-docs:begin name="tool-contract-fusion_reason" generator="scripts/docs/generate.mjs" -->
+- Label: **Fusion Reason**
+- Source: `src/fusion-extension.ts:1032`
+- Description: Run a five-model Fusion reason workflow. Candidate children receive the reason projection and no tools; evaluator and merger also run without tools.
+- Root schema: `object`; additionalProperties: `false`
+
+| Field | Required | Type | Description | Constraints |
+| --- | --- | --- | --- | --- |
+| `prompt` | yes | `string` | Reasoning request. Candidate children run without tools over the reason workflow's projected conversation context. | minLength 1 |
+
+<details>
+<summary>Normalized TypeBox contract</summary>
+
+
+```json
+{
+  "additionalProperties": false,
+  "properties": {
+    "prompt": {
+      "description": "Reasoning request. Candidate children run without tools over the reason workflow's projected conversation context.",
+      "minLength": 1,
+      "type": "string"
+    }
+  },
+  "required": [
+    "prompt"
+  ],
+  "type": "object"
+}
+```
+
+</details>
+<!-- pi-docs:end name="tool-contract-fusion_reason" -->
+
+Fixed-purpose public Fusion tool for self-contained no-tool reasoning.
+
+## Signature
+
+```ts
+fusion_reason({ prompt: string })
+```
+
+The schema is closed: `prompt` is required, must trim to non-blank text, and no other keys are accepted. There is no public `capability`, mode, provider, model, or tool-policy argument.
+
+## Context and tools
+
+`fusion_reason` receives a versioned session-projection input (`pi-background-tasks.fusion-input.v5`): visible user/assistant text is retained verbatim, while assistant thinking and tool traffic are replaced by deterministic omission receipts and a local omission ledger artifact. Tool-call invocations exclude the active Fusion tool-call leaf and sibling calls from the projected branch.
+
+Candidate children run with `--no-tools`. The blind evaluator, conditional evaluator-repair, and merger also run with `--no-tools` by stage policy.
+
+## Execution model
+
+A successful run starts three candidate children, then a blind evaluator, then a merger. If the evaluator output is not valid closed-schema JSON, Fusion performs one evaluator-repair attempt and revalidates. Do not assume exactly five child calls: repair, preflight refusal, cancellation, spawn retry, and failures change the observed attempt count.
+
+The tool result returns the merger's exact text directly, with `details` containing the Fusion result metadata and `usage` cloning the complete Pi `Usage` object including all cost fields.
+
+## Limitations
+
+Omitted tool payloads are not available to children. Restate required facts from prior tool output inside `prompt` before calling.
+
+## Related
+
+- Command shorthand: [`../commands/fusion.md`](../commands/fusion.md)
+- Behavioral owner/troubleshooting: [`../subsystems/fusion.md`](../subsystems/fusion.md)

package/docs/tools/fusion_research.md

@@ -0,0 +1,162 @@
+---
+doc_id: tools/fusion_research
+audience: agent
+mode: mixed
+review_policy: contract
+stability: stable
+covers_surfaces: [tool:fusion_research]
+covers_sources: []
+---
+# `fusion_research`
+
+<!-- pi-docs:begin name="tool-contract-fusion_research" generator="scripts/docs/generate.mjs" -->
+- Label: **Fusion Research**
+- Source: `src/fusion-extension.ts:1066`
+- Description: Run a five-model Fusion research workflow over explicitly supplied public http(s) URLs. Targeted URL fetch is not web search; fetched pages and URLs are untrusted.
+- Root schema: `object`; additionalProperties: `false`
+
+| Field | Required | Type | Description | Constraints |
+| --- | --- | --- | --- | --- |
+| `background` | yes | `string[]` | Array of non-empty strings. Runtime normalization trims every item. |  |
+| `constraints` | no | `string[]` | Array of non-empty strings. Runtime normalization trims every item. |  |
+| `deliverable` | yes | `string` | Non-empty string. Runtime normalization trims and rejects whitespace-only text. | minLength 1 |
+| `objective` | yes | `string` | Non-empty string. Runtime normalization trims and rejects whitespace-only text. | minLength 1 |
+| `scope` | no | `string[]` | Array of non-empty strings. Runtime normalization trims every item. |  |
+| `sources` | yes | `object[]` |  | minItems 1 |
+| `sources[].purpose` | yes | `string` | Non-empty string. Runtime normalization trims and rejects whitespace-only text. | minLength 1 |
+| `sources[].url` | yes | `string` | Public http(s) URL to fetch exactly; targeted URL fetch only, not web search. Do not include credentials, tokens, secrets, private data, or repository content in URLs. | minLength 1 |
+
+<details>
+<summary>Normalized TypeBox contract</summary>
+
+
+```json
+{
+  "additionalProperties": false,
+  "properties": {
+    "background": {
+      "description": "Array of non-empty strings. Runtime normalization trims every item.",
+      "items": {
+        "description": "Non-empty string. Runtime normalization trims and rejects whitespace-only text.",
+        "minLength": 1,
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "constraints": {
+      "description": "Array of non-empty strings. Runtime normalization trims every item.",
+      "items": {
+        "description": "Non-empty string. Runtime normalization trims and rejects whitespace-only text.",
+        "minLength": 1,
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "deliverable": {
+      "description": "Non-empty string. Runtime normalization trims and rejects whitespace-only text.",
+      "minLength": 1,
+      "type": "string"
+    },
+    "objective": {
+      "description": "Non-empty string. Runtime normalization trims and rejects whitespace-only text.",
+      "minLength": 1,
+      "type": "string"
+    },
+    "scope": {
+      "description": "Array of non-empty strings. Runtime normalization trims every item.",
+      "items": {
+        "description": "Non-empty string. Runtime normalization trims and rejects whitespace-only text.",
+        "minLength": 1,
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "sources": {
+      "items": {
+        "additionalProperties": false,
+        "properties": {
+          "purpose": {
+            "description": "Non-empty string. Runtime normalization trims and rejects whitespace-only text.",
+            "minLength": 1,
+            "type": "string"
+          },
+          "url": {
+            "description": "Public http(s) URL to fetch exactly; targeted URL fetch only, not web search. Do not include credentials, tokens, secrets, private data, or repository content in URLs.",
+            "minLength": 1,
+            "type": "string"
+          }
+        },
+        "required": [
+          "purpose",
+          "url"
+        ],
+        "type": "object"
+      },
+      "minItems": 1,
+      "type": "array"
+    }
+  },
+  "required": [
+    "background",
+    "deliverable",
+    "objective",
+    "sources"
+  ],
+  "type": "object"
+}
+```
+
+</details>
+<!-- pi-docs:end name="tool-contract-fusion_research" -->
+
+Fixed-purpose public Fusion tool for targeted caller-declared public URL fetch plus synthesis.
+
+## Signature
+
+```ts
+fusion_research({
+  objective: string,
+  background: string[],
+  deliverable: string,
+  scope?: string[],
+  constraints?: string[],
+  sources: Array<{ url: string, purpose: string }>
+})
+```
+
+The schema is closed. Required strings trim to non-blank text. Optional arrays normalize to `[]`. `sources` must be non-empty; each URL must be a canonical public `http(s)` URL with no credentials, and duplicate canonical URLs are rejected. There is no public capability or mode argument.
+
+## Not search
+
+Fusion research is **not web search**. It never discovers sources, queries a search engine, opens a browser, follows page-suggested links as instructions, reads PDFs through a PDF pipeline, caches pages, or applies a domain allowlist. The caller supplies the exact initial public URLs and the child may fetch only those declared canonical URLs through the private child-only `fusion_web_fetch` tool.
+
+## Context and tools
+
+Research uses clean-task canonical input with no parent transcript, parent system prompt, conversation projection, or omission ledger. Candidate children receive read-only file tools (`read`, `grep`, `find`, `ls`) plus `fusion_web_fetch`; evaluator, evaluator-repair, and merger receive no tools.
+
+This is an accepted read+network tradeoff: a research candidate can inspect repository files and perform network fetches to caller-declared public URLs in the same child process. Do not include credentials, tokens, secrets, private data, or repository content in URLs. The package blocks credential-bearing URLs and common private, loopback, metadata, and reserved targets, but the deny rules are not an exhaustive network sandbox. In particular, source declaration rejects literal Azure service virtual IP `168.63.129.16`, while the transport's DNS/redirect address classifier does not currently special-case a public hostname resolving to that address. Fetched content remains untrusted, and caller-declared URLs can still disclose access through remote logs or timing.
+
+## Fetch hygiene
+
+The private `fusion_web_fetch` schema is closed: `{url, extract?: 'text'|'markdown'}`; `extract` defaults to Markdown and there is no per-fetch prompt. The fetcher:
+
+- supports only absolute `http:` and `https:` URLs;
+- strips fragments, rejects credentials, and canonicalizes host/default port casing;
+- blocks localhost and known metadata hostnames plus enumerated private/reserved IPv4 and IPv6 ranges, IPv4-mapped IPv6, multicast, link-local, documentation, and similar non-public classes;
+- source-policy admission additionally rejects literal `168.63.129.16`, but DNS/redirect transport classification does not explicitly include that Azure service address;
+- vets every DNS answer against the transport classifier, pins the request to a vetted address, and verifies the response socket address;
+- follows at most five redirects, revalidating each hop;
+- accepts only HTML/XHTML, plain text, and Markdown content;
+- caps response bytes at 2 MiB and extracted output at 32 KiB;
+- uses a 60 second deadline;
+- strips script/style/noscript blocks and extracts text or Markdown with table preservation.
+
+Failures use typed error codes such as `invalid_url`, `unsupported_scheme`, `blocked_address`, `dns_failure`, `redirect_limit`, `redirect_blocked`, `response_too_large`, `unsupported_content_type`, `request_timeout`, `network_error`, `extraction_failed`, and `http_error`.
+
+## Audit
+
+Research candidates write sealed per-attempt tool-call logs. Logs persist tool names, byte counts, SHA-256 digests, status, duration, and fetch provenance (`url`/`final_url`/status/bytes/content hash for successful fetches; only a rejected URL hash for rejected fetches). Raw arguments, raw results, and page content are not written to the audit log.
+
+## Related
+
+- Behavioral owner/troubleshooting: [`../subsystems/fusion.md`](../subsystems/fusion.md)

package/docs/tools/fusion_validate.md

@@ -0,0 +1,206 @@
+---
+doc_id: tools/fusion_validate
+audience: agent
+mode: mixed
+review_policy: contract
+stability: stable
+covers_surfaces: [tool:fusion_validate]
+covers_sources: []
+---
+# `fusion_validate`
+
+<!-- pi-docs:begin name="tool-contract-fusion_validate" generator="scripts/docs/generate.mjs" -->
+- Label: **Fusion Validate**
+- Source: `src/fusion-extension.ts:1084`
+- Description: Run an advisory, read-only Fusion validation review from a structured contract. It is not a build/test/lint substitute and never modifies files.
+- Root schema: `object`; additionalProperties: `false`
+
+| Field | Required | Type | Description | Constraints |
+| --- | --- | --- | --- | --- |
+| `acceptanceCriteria` | yes | `string[]` |  | minItems 1 |
+| `background` | yes | `string[]` | Array of non-empty strings. Runtime normalization trims every item. |  |
+| `changeSummary` | yes | `string` | Non-empty string. Runtime normalization trims and rejects whitespace-only text. | minLength 1 |
+| `exclusions` | no | `string[]` | Array of non-empty strings. Runtime normalization trims every item. |  |
+| `knownLimitations` | no | `string[]` | Array of non-empty strings. Runtime normalization trims every item. |  |
+| `objective` | yes | `string` | Non-empty string. Runtime normalization trims and rejects whitespace-only text. | minLength 1 |
+| `scope` | yes | `string[]` |  | minItems 1 |
+| `verification` | yes | `object` |  | additionalProperties: false |
+| `verification.evidence` | no | `object[]` |  |  |
+| `verification.evidence[].check` | yes | `string` | Non-empty string. Runtime normalization trims and rejects whitespace-only text. | minLength 1 |
+| `verification.evidence[].outcome` | yes | `string` | Non-empty string. Runtime normalization trims and rejects whitespace-only text. | minLength 1 |
+| `verification.reason` | no | `string` | Non-empty string. Runtime normalization trims and rejects whitespace-only text. | minLength 1 |
+| `verification.status` | yes | `string` | Google-compatible enum. Use 'provided' only with evidence; use 'not_run' only with reason and no evidence. | enum `provided` \| `not_run` |
+
+<details>
+<summary>Normalized TypeBox contract</summary>
+
+
+```json
+{
+  "additionalProperties": false,
+  "properties": {
+    "acceptanceCriteria": {
+      "items": {
+        "description": "Non-empty string. Runtime normalization trims and rejects whitespace-only text.",
+        "minLength": 1,
+        "type": "string"
+      },
+      "minItems": 1,
+      "type": "array"
+    },
+    "background": {
+      "description": "Array of non-empty strings. Runtime normalization trims every item.",
+      "items": {
+        "description": "Non-empty string. Runtime normalization trims and rejects whitespace-only text.",
+        "minLength": 1,
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "changeSummary": {
+      "description": "Non-empty string. Runtime normalization trims and rejects whitespace-only text.",
+      "minLength": 1,
+      "type": "string"
+    },
+    "exclusions": {
+      "description": "Array of non-empty strings. Runtime normalization trims every item.",
+      "items": {
+        "description": "Non-empty string. Runtime normalization trims and rejects whitespace-only text.",
+        "minLength": 1,
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "knownLimitations": {
+      "description": "Array of non-empty strings. Runtime normalization trims every item.",
+      "items": {
+        "description": "Non-empty string. Runtime normalization trims and rejects whitespace-only text.",
+        "minLength": 1,
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "objective": {
+      "description": "Non-empty string. Runtime normalization trims and rejects whitespace-only text.",
+      "minLength": 1,
+      "type": "string"
+    },
+    "scope": {
+      "items": {
+        "description": "Non-empty string. Runtime normalization trims and rejects whitespace-only text.",
+        "minLength": 1,
+        "type": "string"
+      },
+      "minItems": 1,
+      "type": "array"
+    },
+    "verification": {
+      "additionalProperties": false,
+      "properties": {
+        "evidence": {
+          "items": {
+            "additionalProperties": false,
+            "properties": {
+              "check": {
+                "description": "Non-empty string. Runtime normalization trims and rejects whitespace-only text.",
+                "minLength": 1,
+                "type": "string"
+              },
+              "outcome": {
+                "description": "Non-empty string. Runtime normalization trims and rejects whitespace-only text.",
+                "minLength": 1,
+                "type": "string"
+              }
+            },
+            "required": [
+              "check",
+              "outcome"
+            ],
+            "type": "object"
+          },
+          "type": "array"
+        },
+        "reason": {
+          "description": "Non-empty string. Runtime normalization trims and rejects whitespace-only text.",
+          "minLength": 1,
+          "type": "string"
+        },
+        "status": {
+          "description": "Google-compatible enum. Use 'provided' only with evidence; use 'not_run' only with reason and no evidence.",
+          "enum": [
+            "provided",
+            "not_run"
+          ],
+          "type": "string"
+        }
+      },
+      "required": [
+        "status"
+      ],
+      "type": "object"
+    }
+  },
+  "required": [
+    "acceptanceCriteria",
+    "background",
+    "changeSummary",
+    "objective",
+    "scope",
+    "verification"
+  ],
+  "type": "object"
+}
+```
+
+</details>
+<!-- pi-docs:end name="tool-contract-fusion_validate" -->
+
+Fixed-purpose public Fusion tool for advisory read-only validation of completed work.
+
+## Signature
+
+```ts
+fusion_validate({
+  objective: string,
+  background: string[],
+  changeSummary: string,
+  scope: string[],
+  acceptanceCriteria: string[],
+  verification: {
+    status: 'provided' | 'not_run',
+    evidence?: Array<{ check: string, outcome: string }>,
+    reason?: string
+  },
+  knownLimitations?: string[],
+  exclusions?: string[]
+})
+```
+
+The schema is closed. `scope` and `acceptanceCriteria` must be non-empty arrays. Optional `knownLimitations` and `exclusions` normalize to `[]`. Legacy `{prompt}` calls fail with an actionable migration error. There is no public capability or mode argument.
+
+## Verification cross-field contract
+
+`verification` is intentionally strict:
+
+- `status: 'provided'` requires non-empty `evidence:[{check,outcome}]` and forbids `reason`.
+- `status: 'not_run'` requires `reason` and forbids non-empty evidence.
+
+The enum strings are Google-compatible and the runtime enforces the cross-field contract after schema preparation.
+
+## Context and tools
+
+Validate uses clean-task canonical input with no parent transcript, parent system prompt, conversation projection, or omission ledger. Candidate reviewers always use the inspect policy (`read`, `grep`, `find`, `ls`) so they can verify the repository as it exists. Evaluator, evaluator-repair, and merger always run with no tools.
+
+## Validation workflow
+
+Each candidate must return closed JSON (`pi-background-tasks.fusion-validation-candidate.v1`) listing findings, verified statements, and limitations. The host assigns stable source finding ids after anonymization. The blind evaluator must copy the host-assigned source findings exactly into `validation_accounting`, then account for every source finding exactly once as included or excluded. Included decisions require a group; excluded decisions forbid a group. Groups must exactly match included decisions.
+
+After the no-tool merger child runs, the host renders the final validation report from validated accounting so included findings are preserved, duplicate groups are merged deterministically, excluded findings are listed only as exclusions, and candidate labels/source ids are sanitized from rationale text.
+
+## Advisory limitation
+
+`fusion_validate` never modifies files, never runs builds/tests/linters/security scanners, and does not gate anything. It is an advisory read-only review. Supply real verification evidence when available, and state known limitations/exclusions explicitly.
+
+## Related
+
+- Behavioral owner/troubleshooting: [`../subsystems/fusion.md`](../subsystems/fusion.md)

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pi-background-tasks",
-  "version": "0.9.0",
-  "description": "Pi extension package for background shell tasks plus five-model fusion brainstorming and validation: bg_run tools, bg_delegate, /bg commands, /fusion, fusion_brainstorm, fusion_validate, model selector UI, bounded logs, kill/timeout safety, and completion wakeups.",
+  "version": "1.0.3",
+  "description": "Pi extension for durable background shell tasks, read-only delegated agents, local attested Pi runs, and fixed-purpose Fusion workflows through child Pi processes.",
   "type": "module",
   "license": "ISC",
   "author": "Ismail <ismailsalikhodjaev@gmail.com>",
@@ -16,9 +16,15 @@
     "coding-agent",
     "shell",
     "tasks",
+    "delegate",
+    "attestation",
     "fusion",
-    "brainstorm",
-    "multi-model"
+    "reason",
+    "investigate",
+    "research",
+    "multi-model",
+    "task-manager",
+    "pi-dev"
   ],
   "homepage": "https://github.com/ismailsaleekh/pi-background-tasks#readme",
   "repository": {
@@ -35,7 +41,10 @@
     "TESTING.md",
     "TEST_PLAN.md",
     "PUBLISHING.md",
-    "LICENSE"
+    "LICENSE",
+    "docs/",
+    "BACKGROUND-TASKS-INSTRUCTIONS.md",
+    "logo.png"
   ],
   "scripts": {
     "typecheck": "tsc --noEmit",
@@ -56,9 +65,18 @@
     "lint": "cd ../.. && npm run quality:ts:lint",
     "format:check": "cd ../.. && npm run quality:ts:format",
     "test:compat": "tsx scripts/test-compat.ts",
-    "test:hook-contract": "tsx --test --test-concurrency=1 tests/scripted-provider/pi-hook-contract.test.ts"
+    "test:hook-contract": "tsx --test --test-concurrency=1 tests/scripted-provider/pi-hook-contract.test.ts",
+    "docs:generate": "node scripts/docs/generate.mjs",
+    "docs:verify": "node scripts/docs/verify.mjs",
+    "docs:attest/record": "node scripts/docs/attest.mjs",
+    "docs:attest": "npm run docs:attest/record",
+    "test:docs": "tsx --test tests/unit/docs-gate.test.ts tests/package/docs-contract.test.ts",
+    "payload:check": "node scripts/check-package-payload.mjs",
+    "release:check-version": "node scripts/check-release-version.mjs",
+    "prepack": "npm run docs:verify && npm run payload:check"
   },
   "pi": {
+    "image": "https://raw.githubusercontent.com/ismailsaleekh/pi-background-tasks/main/logo.png",
     "extensions": [
       "./extensions/background-tasks.ts"
     ]
@@ -72,7 +90,6 @@
     "@earendil-works/pi-ai": "^0.83.0",
     "@earendil-works/pi-coding-agent": "^0.83.0",
     "@earendil-works/pi-tui": "^0.83.0",
-    "@ravshansbox/pi-anthropic-sps": "github:ravshansbox/pi-anthropic-sps",
     "@types/node": "^24.0.0",
     "@types/turndown": "5.0.6",
     "tsx": "^4.19.0",
@@ -83,6 +100,7 @@
     "node": ">=22.19.0"
   },
   "dependencies": {
+    "@ravshansbox/pi-anthropic-sps": "https://codeload.github.com/ravshansbox/pi-anthropic-sps/tar.gz/17409b5615f0ec0625776bc5434f92f2c55e3fd0",
     "turndown": "7.2.4"
   }
 }

package/src/core/delegate/budget.ts

@@ -50,7 +50,7 @@ export const DELEGATE_MIN_CONTEXT_WINDOW_TOKENS =
 
 export const DELEGATE_DEFAULT_MAX_TURNS = 24;
 export const DELEGATE_DEFAULT_MAX_TOOL_CALLS = 120;
-export const DELEGATE_DEFAULT_TIMEOUT_SECONDS = 900;
+export const DELEGATE_DEFAULT_TIMEOUT_SECONDS = 1200;
 export const DELEGATE_MAX_TOOL_RESULT_BYTES = 64 * 1024;
 export const DELEGATE_MAX_TOTAL_TOOL_OUTPUT_BYTES = 64 * 1024 * 1024;
 export const DELEGATE_MAX_ANSWER_BYTES = 4 * 1024 * 1024;

package/src/core/delegate/launch.ts

@@ -220,8 +220,13 @@ export const DELEGATE_FORBIDDEN_TOOLS: readonly string[] = [
   'bg_delegate',
   'bg_result',
   'bg_kill',
+  'bg_status',
+  'bg_logs',
   'bg_run_pi_attested',
   'fusion_brainstorm',
+  'fusion_reason',
+  'fusion_investigate',
+  'fusion_research',
   'fusion_validate',
 ];