pi-crew 0.3.7 → 0.3.9

package/src/runtime/task-packet.ts

@@ -2,6 +2,51 @@ import * as path from "node:path";
 import type { TeamRunManifest, TaskPacket, TaskScope, VerificationContract } from "../state/types.ts";
 import type { WorkflowStep } from "../workflows/workflow-config.ts";
 
+// ═══════════════════════════════════════════════════════════════════════════
+// SEC-007 Fix: Workflow Step Task Sanitization
+// Context provided by workers comes from workflow definitions that could
+// be user-controlled. Sanitize task text to prevent injection.
+// See: SECURITY-ISSUES.md SEC-007
+// ═══════════════════════════════════════════════════════════════════════════
+
+
+/**
+ * Sanitize workflow step task text to reduce injection risk.
+ *
+ * The task text is used as a prompt for worker agents. In a multi-tenant
+ * or shared workflow scenario, malicious workflow definitions could
+ * embed injection instructions.
+ *
+ * Sanitization:
+ * - Strip zero-width Unicode characters
+ * - Strip known prompt injection directive patterns
+ * - Strip base64/hex encoded payloads
+ * - Collapse excessive whitespace
+ */
+export function sanitizeTaskText(task: string): string {
+	let sanitized = task;
+
+	// 1. Strip zero-width and invisible Unicode characters
+	sanitized = sanitized.replace(/[\u200B-\u200F\u2028-\u202F\u2060-\u206F\uFEFF]/g, "");
+
+	// 2. Strip known prompt injection directive patterns
+	sanitized = sanitized.replace(
+		/^\s*(?:SYSTEM|INSTRUCTION|IGNORE(?:\s+ALL)?\s+INSTRUCTIONS|OVERRIDE|YOUR\s+ROLE\s+IS|MALICIOUS)\s*:.*$/gim,
+		""
+	);
+
+	// 3. Strip base64/hex encoded command payloads
+	sanitized = sanitized.replace(/\b(?:base64|base32|hex)\s*['":]\s*([A-Za-z0-9+\/=]{16,})/gi, "[encoded-redacted]");
+
+	// 4. Strip embedded instruction patterns in brackets
+	sanitized = sanitized.replace(/\[(?:SYSTEM|INSTRUCTION|OVERRIDE)\s*:[^\]]*\]/gi, "");
+
+	// 5. Collapse multiple blank lines
+	sanitized = sanitized.replace(/\n{3,}/g, "\n\n");
+
+	return sanitized.trim();
+}
+
 export interface BuildTaskPacketInput {
 	manifest: TeamRunManifest;
 	step: WorkflowStep;
@@ -34,8 +79,10 @@ export function buildTaskPacket(input: BuildTaskPacketInput): TaskPacket {
 	const scope = inferTaskScope(input.step);
 	const reads = input.step.reads === false ? [] : input.step.reads ?? [];
 	const scopePath = reads.length === 1 ? reads[0] : reads.length > 1 ? reads.join(", ") : undefined;
+	// SEC-007: Sanitize task text before inserting into task packet
+	const sanitizedTask = sanitizeTaskText(input.step.task);
 	return {
-		objective: input.step.task.replaceAll("{goal}", input.manifest.goal),
+		objective: sanitizedTask.replaceAll("{goal}", input.manifest.goal),
 		scope,
 		scopePath,
 		repo: path.basename(input.manifest.cwd) || input.manifest.cwd,

package/src/runtime/task-runner.ts

@@ -829,8 +829,13 @@ export async function runTeamTask(
 		// _yieldResult: preserved for future use — yield completion contract not yet wired to task.result
 		let _yieldResult: YieldResult | undefined;
 		let noYield = false;
+		// Child-process workers do not have a submit_result tool — the yield contract
+		// only applies to live-session workers where submit_result is injected by the
+		// runtime. Skipping yield detection for child-process prevents every child
+		// worker from incorrectly being marked needs_attention.
 		const yieldEnabled =
-			input.runtimeConfig?.yield?.enabled ?? DEFAULT_YIELD_CONFIG.enabled;
+			runtimeKind !== "child-process" &&
+			(input.runtimeConfig?.yield?.enabled ?? DEFAULT_YIELD_CONFIG.enabled);
 		if (yieldEnabled && collectedJsonEvents.length > 0) {
 			if (hasYieldInOutput(collectedJsonEvents)) {
 				const yieldEvent = collectedJsonEvents.find((e) =>

package/src/schema/config-schema.ts

@@ -113,6 +113,7 @@ export const PiTeamsReliabilityConfigSchema = Type.Object({
 	}, { additionalProperties: false })),
 	autoRecover: Type.Optional(Type.Boolean()),
 	deadletterThreshold: Type.Optional(Type.Integer({ minimum: 1 })),
+	cleanupOrphanedTempDirs: Type.Optional(Type.Boolean()),
 }, { additionalProperties: false });
 
 export const PiTeamsOtlpConfigSchema = Type.Object({

package/src/schema/team-tool-schema.ts

@@ -1,10 +1,15 @@
 import { Type } from "@sinclair/typebox";
 
 const SkillOverride = Type.Unsafe({
-	description: "Skill name(s) to add to role/default skills, an array of skill names, or false to disable all injected skills for this run.",
+	description:
+		"Skill name(s) to add to role/default skills, an array of skill names, or false to disable all injected skills for this run.",
 	anyOf: [
 		{ type: "string", maxLength: 2048 },
-		{ type: "array", maxItems: 32, items: { type: "string", maxLength: 80 } },
+		{
+			type: "array",
+			maxItems: 32,
+			items: { type: "string", maxLength: 80 },
+		},
 		{ type: "boolean" },
 	],
 });
@@ -16,85 +21,208 @@ const FreeformConfig = Type.Unsafe({
 });
 
 export const TeamToolParams = Type.Object({
-	action: Type.Optional(Type.Union([
-		Type.Literal("run"),
-		Type.Literal("parallel"),
-		Type.Literal("plan"),
-		Type.Literal("status"),
-		Type.Literal("list"),
-		Type.Literal("get"),
-		Type.Literal("cancel"),
-		Type.Literal("retry"),
-		Type.Literal("resume"),
-		Type.Literal("respond"),
-		Type.Literal("create"),
-		Type.Literal("update"),
-		Type.Literal("delete"),
-		Type.Literal("doctor"),
-		Type.Literal("cleanup"),
-		Type.Literal("events"),
-		Type.Literal("artifacts"),
-		Type.Literal("worktrees"),
-		Type.Literal("forget"),
-		Type.Literal("summary"),
-		Type.Literal("prune"),
-		Type.Literal("export"),
-		Type.Literal("import"),
-		Type.Literal("imports"),
-		Type.Literal("help"),
-		Type.Literal("validate"),
-		Type.Literal("config"),
-		Type.Literal("init"),
-		Type.Literal("recommend"),
-		Type.Literal("autonomy"),
-		Type.Literal("api"),
-		Type.Literal("settings"),
-		Type.Literal("steer"),
-	], { description: "Team action. Defaults to 'list' when omitted." })),
-	resource: Type.Optional(Type.Union([
-		Type.Literal("agent"),
-		Type.Literal("team"),
-		Type.Literal("workflow"),
-	], { description: "Resource kind for get/create/update/delete/list. Defaults to all for list." })),
-	team: Type.Optional(Type.String({ description: "Team name, e.g. default or implementation." })),
-	workflow: Type.Optional(Type.String({ description: "Workflow name, e.g. default or review." })),
-	role: Type.Optional(Type.String({ description: "Role name to run directly within a team." })),
-	agent: Type.Optional(Type.String({ description: "Agent name to inspect or run directly." })),
-	goal: Type.Optional(Type.String({ description: "High-level objective for a team run." })),
-	task: Type.Optional(Type.String({ description: "Concrete task text for direct role/agent execution." })),
-	runId: Type.Optional(Type.String({ description: "Run ID for status, cancel, or resume." })),
-	taskId: Type.Optional(Type.String({ description: "Task ID for respond action." })),
-	message: Type.Optional(Type.String({ description: "Message for respond action." })),
-	async: Type.Optional(Type.Boolean({ description: "Run in background when execution support is enabled." })),
-	workspaceMode: Type.Optional(Type.Union([
-		Type.Literal("single"),
-		Type.Literal("worktree"),
-	], { description: "Workspace isolation mode. Worktree mode is planned after MVP." })),
-	context: Type.Optional(Type.Union([
-		Type.Literal("fresh"),
-		Type.Literal("fork"),
-	], { description: "Child context mode for workers." })),
-	cwd: Type.Optional(Type.String({ description: "Working directory override." })),
-	model: Type.Optional(Type.String({ description: "Model override for direct runs." })),
+	action: Type.Optional(
+		Type.Union(
+			[
+				Type.Literal("run"),
+				Type.Literal("parallel"),
+				Type.Literal("plan"),
+				Type.Literal("status"),
+				Type.Literal("wait"),
+				Type.Literal("list"),
+				Type.Literal("get"),
+				Type.Literal("cancel"),
+				Type.Literal("retry"),
+				Type.Literal("resume"),
+				Type.Literal("respond"),
+				Type.Literal("create"),
+				Type.Literal("update"),
+				Type.Literal("delete"),
+				Type.Literal("doctor"),
+				Type.Literal("cleanup"),
+				Type.Literal("events"),
+				Type.Literal("artifacts"),
+				Type.Literal("worktrees"),
+				Type.Literal("forget"),
+				Type.Literal("summary"),
+				Type.Literal("prune"),
+				Type.Literal("export"),
+				Type.Literal("import"),
+				Type.Literal("imports"),
+				Type.Literal("help"),
+				Type.Literal("validate"),
+				Type.Literal("config"),
+				Type.Literal("init"),
+				Type.Literal("recommend"),
+				Type.Literal("autonomy"),
+				Type.Literal("api"),
+				Type.Literal("settings"),
+				Type.Literal("steer"),
+				Type.Literal("health"),
+			],
+			{ description: "Team action. Defaults to 'list' when omitted." },
+		),
+	),
+	resource: Type.Optional(
+		Type.Union(
+			[
+				Type.Literal("agent"),
+				Type.Literal("team"),
+				Type.Literal("workflow"),
+			],
+			{
+				description:
+					"Resource kind for get/create/update/delete/list. Defaults to all for list.",
+			},
+		),
+	),
+	team: Type.Optional(
+		Type.String({
+			description: "Team name, e.g. default or implementation.",
+		}),
+	),
+	workflow: Type.Optional(
+		Type.String({ description: "Workflow name, e.g. default or review." }),
+	),
+	role: Type.Optional(
+		Type.String({
+			description: "Role name to run directly within a team.",
+		}),
+	),
+	agent: Type.Optional(
+		Type.String({ description: "Agent name to inspect or run directly." }),
+	),
+	goal: Type.Optional(
+		Type.String({ description: "High-level objective for a team run." }),
+	),
+	task: Type.Optional(
+		Type.String({
+			description: "Concrete task text for direct role/agent execution.",
+		}),
+	),
+	runId: Type.Optional(
+		Type.String({ description: "Run ID for status, cancel, or resume." }),
+	),
+	taskId: Type.Optional(
+		Type.String({ description: "Task ID for respond action." }),
+	),
+	message: Type.Optional(
+		Type.String({ description: "Message for respond action." }),
+	),
+	async: Type.Optional(
+		Type.Boolean({
+			description: "Run in background when execution support is enabled.",
+		}),
+	),
+	workspaceMode: Type.Optional(
+		Type.Union([Type.Literal("single"), Type.Literal("worktree")], {
+			description:
+				"Workspace isolation mode. Worktree mode is planned after MVP.",
+		}),
+	),
+	context: Type.Optional(
+		Type.Union([Type.Literal("fresh"), Type.Literal("fork")], {
+			description: "Child context mode for workers.",
+		}),
+	),
+	cwd: Type.Optional(
+		Type.String({ description: "Working directory override." }),
+	),
+	model: Type.Optional(
+		Type.String({ description: "Model override for direct runs." }),
+	),
 	skill: Type.Optional(SkillOverride),
-	scope: Type.Optional(Type.Union([
-		Type.Literal("user"),
-		Type.Literal("project"),
-		Type.Literal("both"),
-	], { description: "Resource scope for discovery or management." })),
+	scope: Type.Optional(
+		Type.Union(
+			[
+				Type.Literal("user"),
+				Type.Literal("project"),
+				Type.Literal("both"),
+			],
+			{ description: "Resource scope for discovery or management." },
+		),
+	),
 	config: Type.Optional(FreeformConfig),
-	dryRun: Type.Optional(Type.Boolean({ description: "Preview a management mutation without writing files." })),
-	confirm: Type.Optional(Type.Boolean({ description: "Required for destructive management actions." })),
-	force: Type.Optional(Type.Boolean({ description: "Override reference checks for destructive management actions." })),
-	keep: Type.Optional(Type.Integer({ minimum: 0, description: "Number of finished runs to keep for prune." })),
-	updateReferences: Type.Optional(Type.Boolean({ description: "When renaming agents or workflows, update team references in the same project/user scope." })),
-	replyTo: Type.Optional(Type.String({ description: "ID of the original mailbox message this is a reply to." })),
-	replyFrom: Type.Optional(Type.String({ description: "Task ID sending the reply." })),
-	replyDeadline: Type.Optional(Type.Integer({ description: "Ms epoch deadline for a reply." })),
+	dryRun: Type.Optional(
+		Type.Boolean({
+			description: "Preview a management mutation without writing files.",
+		}),
+	),
+	confirm: Type.Optional(
+		Type.Boolean({
+			description: "Required for destructive management actions.",
+		}),
+	),
+	force: Type.Optional(
+		Type.Boolean({
+			description:
+				"Override reference checks for destructive management actions.",
+		}),
+	),
+	keep: Type.Optional(
+		Type.Integer({
+			minimum: 0,
+			description: "Number of finished runs to keep for prune.",
+		}),
+	),
+	updateReferences: Type.Optional(
+		Type.Boolean({
+			description:
+				"When renaming agents or workflows, update team references in the same project/user scope.",
+		}),
+	),
+	replyTo: Type.Optional(
+		Type.String({
+			description:
+				"ID of the original mailbox message this is a reply to.",
+		}),
+	),
+	replyFrom: Type.Optional(
+		Type.String({ description: "Task ID sending the reply." }),
+	),
+	replyDeadline: Type.Optional(
+		Type.Integer({ description: "Ms epoch deadline for a reply." }),
+	),
 });
 
 export interface TeamToolParamsValue {
-	action?: "run" | "parallel" | "plan" | "status" | "list" | "get" | "cancel" | "retry" | "resume" | "respond" | "create" | "update" | "delete" | "doctor" | "cleanup" | "events" | "artifacts" | "worktrees" | "forget" | "summary" | "prune" | "export" | "import" | "imports" | "help" | "validate" | "config" | "init" | "recommend" | "autonomy" | "api" | "settings" | "steer";
+	action?:
+		| "run"
+		| "parallel"
+		| "plan"
+		| "status"
+		| "wait"
+		| "list"
+		| "get"
+		| "cancel"
+		| "retry"
+		| "resume"
+		| "respond"
+		| "create"
+		| "update"
+		| "delete"
+		| "doctor"
+		| "cleanup"
+		| "events"
+		| "artifacts"
+		| "worktrees"
+		| "forget"
+		| "summary"
+		| "prune"
+		| "export"
+		| "import"
+		| "imports"
+		| "help"
+		| "validate"
+		| "config"
+		| "init"
+		| "recommend"
+		| "autonomy"
+		| "api"
+		| "settings"
+		| "steer"
+		| "invalidate"
+		| "health";
 	resource?: "agent" | "team" | "workflow";
 	team?: string;
 	workflow?: string;

package/src/state/state-store.ts

@@ -1,7 +1,8 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
 import type { TeamRunManifest, TeamTaskState } from "./types.ts";
-import { canTransitionRunStatus } from "./contracts.ts";
+import { canTransitionRunStatus, isTerminalRunStatus } from "./contracts.ts";
+import { unregisterActiveRun } from "./active-run-registry.ts";
 import { atomicWriteJson, atomicWriteJsonAsync, atomicWriteJsonCoalesced, readJsonFile } from "./atomic-write.ts";
 import { appendEvent } from "./event-log.ts";
 import { DEFAULT_CACHE, DEFAULT_PATHS } from "../config/defaults.ts";
@@ -244,6 +245,13 @@ export function updateRunStatus(manifest: TeamRunManifest, status: TeamRunManife
 	}
 	const updated: TeamRunManifest = { ...manifest, status, updatedAt: new Date().toISOString(), summary: summary ?? manifest.summary };
 	saveRunManifest(updated);
+	// Unregister from active-run-index when run reaches a terminal status.
+	// Without this, stale entries accumulate (e.g. integration tests in /tmp) and
+	// Pi UI shows ghost "queued" runs that are actually completed/failed/cancelled.
+	// Note: "blocked" is excluded because blocked runs can be unblocked later.
+	if (status === "completed" || status === "failed" || status === "cancelled") {
+		try { unregisterActiveRun(updated.runId); } catch { /* non-critical */ }
+	}
 	appendEvent(updated.eventsPath, {
 		type: `run.${status}`,
 		runId: updated.runId,

package/src/teams/discover-teams.ts

@@ -107,7 +107,8 @@ export function discoverTeams(cwd: string): TeamDiscoveryResult {
 	};
 }
 
-export function allTeams(discovery: TeamDiscoveryResult): TeamConfig[] {
+export function allTeams(discovery: TeamDiscoveryResult | undefined): TeamConfig[] {
+	if (!discovery) return [];
 	const byName = new Map<string, TeamConfig>();
 	for (const team of [...discovery.project, ...discovery.builtin, ...discovery.user]) {
 		byName.set(team.name, team);

package/src/ui/run-event-bus.ts

@@ -11,7 +11,8 @@ export type RunEventType =
 	| "run_started"
 	| "run_completed"
 	| "run_blocked"
-	| "run_cancelled";
+	| "run_cancelled"
+	| "run.cache_invalidated";
 
 /** Typed channel names for category-based event subscription. */
 export type EventChannel =

package/src/ui/settings-overlay.ts

@@ -85,6 +85,7 @@ const SETTINGS: SettingDef[] = [
 	{ id: "notifierIntervalMs", label: "Notifier Interval", type: "number", tab: "advanced", description: "Async run notifier check interval in ms." },
 	{ id: "reliability.autoRetry", label: "Auto Retry", type: "boolean", tab: "advanced", description: "Automatically retry failed tasks." },
 	{ id: "reliability.autoRecover", label: "Auto Recover", type: "boolean", tab: "advanced", description: "Automatically recover from crashes." },
+	{ id: "reliability.cleanupOrphanedTempDirs", label: "Cleanup Orphaned Temp Dirs", type: "boolean", tab: "advanced", description: "Remove /tmp/pi-crew-* directories after reconciliation (1h age threshold)." },
 	{ id: "telemetry.enabled", label: "Telemetry", type: "boolean", tab: "advanced", description: "Enable telemetry collection." },
 	{ id: "notifications.enabled", label: "Notifications", type: "boolean", tab: "advanced", description: "Enable run notifications." },
 ];
@@ -124,6 +125,7 @@ const EFFECTIVE_DEFAULTS: Record<string, unknown> = {
 	"notifierIntervalMs": 5000,
 	"reliability.autoRetry": false,
 	"reliability.autoRecover": false,
+	"reliability.cleanupOrphanedTempDirs": true,
 	"telemetry.enabled": false,
 	"notifications.enabled": false,
 };

package/src/workflows/discover-workflows.ts

@@ -123,6 +123,9 @@ function readWorkflowDir(dir: string, source: ResourceSource): WorkflowConfig[]
 }
 
 export function discoverWorkflows(cwd: string): WorkflowDiscoveryResult {
+	if (!cwd || typeof cwd !== "string") {
+		return { builtin: [], user: [], project: [] };
+	}
 	return {
 		builtin: readWorkflowDir(path.join(packageRoot(), "workflows"), "builtin"),
 		user: readWorkflowDir(path.join(userPiRoot(), "workflows"), "user"),
@@ -130,7 +133,8 @@ export function discoverWorkflows(cwd: string): WorkflowDiscoveryResult {
 	};
 }
 
-export function allWorkflows(discovery: WorkflowDiscoveryResult): WorkflowConfig[] {
+export function allWorkflows(discovery: WorkflowDiscoveryResult | undefined): WorkflowConfig[] {
+	if (!discovery) return [];
 	const byName = new Map<string, WorkflowConfig>();
 	for (const workflow of [...discovery.project, ...discovery.builtin, ...discovery.user]) {
 		byName.set(workflow.name, workflow);