pi-crew 0.9.50 → 0.9.52

package/src/runtime/zombie-scanner.ts

@@ -1,298 +0,0 @@
-/**
- * zombie-scanner.ts — safely detect orphaned pi-crew sub-agent processes.
- *
- * LESSON (learned the hard way): a heuristic like "old `pi` process + high RSS +
- * orphaned (ppid=1/bash)" will match a user's interactive MAIN session just as
- * readily as a real zombie. The result is a live main session being killed by
- * accident. This module replaces that heuristic with an authoritative signal.
- *
- * Authoritative marker (set by buildPiWorkerArgs on every child-pi spawn):
- *   - argv:   `--crew-subagent` is the first positional arg
- *   - env:    `PI_CREW_KIND=subagent` is the machine-readable signal
- *
- * A process is a "pi-crew sub-agent" ONLY IF it carries `PI_CREW_KIND=subagent`
- * in its environment. The user's main `pi` session NEVER has this var, so it can
- * never be matched here — by construction.
- *
- * A sub-agent is a "zombie" ONLY IF its `PI_CREW_PARENT_PID` points at a PID that
- * is no longer alive (parent crashed/exited without reaping the child). A sub-agent
- * whose parent is still running is NOT a zombie — it's a legitimate in-flight task.
- *
- * This module is READ-ONLY. It never kills anything. The caller (doctor --zombies)
- * prints the list and asks for explicit confirmation before any kill.
- */
-
-import * as fs from "node:fs";
-
-export interface ZombieSubagent {
-	pid: number;
-	ppid: number;
-	/** PID recorded in PI_CREW_PARENT_PID (may differ from ppid if re-parented to init/bash). */
-	crewParentPid: number;
-	/** Whether the recorded crew parent PID is still alive. */
-	parentAlive: boolean;
-	role: string | undefined;
-	rssKb: number;
-	elapsedSec: number | undefined;
-	cmd: string;
-}
-
-export interface ZombieScanResult {
-	zombies: ZombieSubagent[];
-	/** Sub-agents whose parent is still alive — shown for transparency, never killed. */
-	live: ZombieSubagent[];
-	/** Errors encountered while scanning (per-pid). Never aborts the whole scan. */
-	errors: string[];
-}
-
-/** Read /proc/<pid>/environ as a key=value record. Returns {} if unreadable. */
-function readProcEnviron(pid: number): Record<string, string> {
-	try {
-		// /proc/<pid>/environ is NUL-separated key=value pairs.
-		const raw = fs.readFileSync(`/proc/${pid}/environ`, "utf-8");
-		const out: Record<string, string> = {};
-		for (const entry of raw.split("\0")) {
-			const eq = entry.indexOf("=");
-			if (eq > 0) out[entry.slice(0, eq)] = entry.slice(eq + 1);
-		}
-		return out;
-	} catch {
-		return {};
-	}
-}
-
-/** Read /proc/<pid>/stat to get ppid + elapsed. Returns undefined if unreadable. */
-function readProcStat(pid: number): { ppid: number; elapsedSec: number | undefined } | undefined {
-	try {
-		const stat = fs.readFileSync(`/proc/${pid}/stat`, "utf-8");
-		// stat format: pid (comm) state ppid ... starttime ...
-		// comm may contain spaces/parens, so parse from the LAST ')' backwards.
-		const closeParen = stat.lastIndexOf(")");
-		if (closeParen < 0) return undefined;
-		const rest = stat
-			.slice(closeParen + 2)
-			.trim()
-			.split(/\s+/);
-		// rest[0] = state, rest[1] = ppid
-		const ppid = Number.parseInt(rest[1] ?? "", 10);
-		// starttime (clock ticks since boot) is field 22 in the full stat → index 19 in `rest`
-		const starttimeTicksRaw = Number.parseInt(rest[19] ?? "", 10);
-		const starttimeTicks = Number.isFinite(starttimeTicksRaw) ? starttimeTicksRaw : undefined;
-		const elapsedSec = computeElapsedSec(starttimeTicks);
-		return { ppid: Number.isFinite(ppid) ? ppid : 0, elapsedSec };
-	} catch {
-		return undefined;
-	}
-}
-
-function computeElapsedSec(starttimeTicks: number | undefined): number | undefined {
-	if (starttimeTicks === undefined || !Number.isFinite(starttimeTicks)) return undefined;
-	try {
-		// Linux CLK_TCK is virtually always 100 (sysconf(_SC_CLK_TCK)). Reading it
-		// portably from Node requires a native addon; hardcoding 100 matches every
-		// mainstream Linux distro and keeps this dependency-free.
-		const ticksPerSec = 100;
-		// /proc/uptime: first field is seconds since boot.
-		const uptimeRaw = fs.readFileSync("/proc/uptime", "utf-8");
-		const uptimeSec = Number.parseFloat(uptimeRaw.split(" ")[0] ?? "");
-		if (!Number.isFinite(uptimeSec)) return undefined;
-		// starttime (ticks since boot) → process age in seconds = uptime - starttime/ticksPerSec.
-		const startAgeSec = starttimeTicks / ticksPerSec;
-		return Math.max(0, uptimeSec - startAgeSec);
-	} catch {
-		return undefined;
-	}
-}
-
-function isPidAlive(pid: number): boolean {
-	if (!Number.isFinite(pid) || pid <= 0) return false;
-	try {
-		// process.kill(pid, 0) throws if the pid is not alive (or not ours).
-		process.kill(pid, 0);
-		return true;
-	} catch {
-		return false;
-	}
-}
-
-function readProcCmdline(pid: number): string {
-	try {
-		// /proc/<pid>/cmdline is NUL-separated argv.
-		const raw = fs.readFileSync(`/proc/${pid}/cmdline`, "utf-8");
-		return raw.split("\0").filter(Boolean).join(" ").trim() || `pid ${pid}`;
-	} catch {
-		return `pid ${pid}`;
-	}
-}
-
-function readProcRssKb(pid: number): number {
-	try {
-		const status = fs.readFileSync(`/proc/${pid}/status`, "utf-8");
-		const match = status.match(/^VmRSS:\s+(\d+)\s+kB/m);
-		return match ? Number.parseInt(match[1] ?? "", 10) : 0;
-	} catch {
-		return 0;
-	}
-}
-
-/**
- * Enumerate candidate pi-crew sub-agent PIDs under the current uid.
- *
- * Reads /proc directly (Linux only) — no shelling out to pgrep/ps, so the
- * result is deterministic and unaffected by shell quoting or locale. On
- * non-Linux platforms the scanner returns an empty result with a note in
- * `errors` (zombie detection is best-effort; the doctor report still renders).
- */
-function listCandidatePids(): number[] {
-	if (process.platform !== "linux") return [];
-	const pids: number[] = [];
-	try {
-		for (const entry of fs.readdirSync("/proc")) {
-			if (/^\d+$/.test(entry)) pids.push(Number.parseInt(entry, 10));
-		}
-	} catch {
-		// /proc unreadable (e.g. sandboxed). Caller surfaces via errors[].
-	}
-	return pids;
-}
-
-/**
- * Scan for orphaned pi-crew sub-agent processes. READ-ONLY — never kills.
- *
- * Returns the full picture: zombies (parent dead), live (parent alive), and
- * any scan errors. Callers decide what to do with the result; this module
- * has no side effects.
- */
-export function scanZombieSubagents(): ZombieScanResult {
-	const result: ZombieScanResult = { zombies: [], live: [], errors: [] };
-	if (process.platform !== "linux") {
-		result.errors.push("zombie scan is Linux-only (/proc required); skipping on " + process.platform);
-		return result;
-	}
-
-	const myUid = tryGetUid();
-	for (const pid of listCandidatePids()) {
-		try {
-			// Cheap rejection first: only inspect processes we own (avoid scanning system procs).
-			if (myUid !== undefined && getProcUid(pid) !== myUid) continue;
-
-			const environ = readProcEnviron(pid);
-			// AUTHORITATIVE GATE: a process is a pi-crew sub-agent ONLY if it carries
-			// PI_CREW_KIND=subagent. The user's main session never sets this, so it can
-			// never be matched — this is the fix for accidentally killing main sessions.
-			if (environ.PI_CREW_KIND !== "subagent") continue;
-
-			const crewParentPid = Number.parseInt(environ.PI_CREW_PARENT_PID ?? "", 10);
-			const stat = readProcStat(pid);
-			const entry: ZombieSubagent = {
-				pid,
-				ppid: stat?.ppid ?? 0,
-				crewParentPid: Number.isFinite(crewParentPid) ? crewParentPid : 0,
-				parentAlive: Number.isFinite(crewParentPid) && isPidAlive(crewParentPid),
-				role: environ.PI_CREW_ROLE,
-				rssKb: readProcRssKb(pid),
-				elapsedSec: stat?.elapsedSec,
-				cmd: readProcCmdline(pid),
-			};
-
-			if (entry.parentAlive) {
-				result.live.push(entry);
-			} else {
-				result.zombies.push(entry);
-			}
-		} catch (error) {
-			// Race: process may have exited between readdir and read. Don't abort the scan.
-			result.errors.push(`pid ${pid}: ${error instanceof Error ? error.message : String(error)}`);
-		}
-	}
-
-	// Sort: zombies first by descending RSS (biggest leaks first), live by pid.
-	result.zombies.sort((a, b) => b.rssKb - a.rssKb);
-	result.live.sort((a, b) => a.pid - b.pid);
-	return result;
-}
-
-function tryGetUid(): number | undefined {
-	try {
-		return process.getuid?.();
-	} catch {
-		return undefined;
-	}
-}
-
-function getProcUid(pid: number): number | undefined {
-	try {
-		// /proc/<pid>/status has Uid: <real> <eff> <sav> <fs>
-		const status = fs.readFileSync(`/proc/${pid}/status`, "utf-8");
-		const match = status.match(/^Uid:\s+(\d+)/m);
-		return match ? Number.parseInt(match[1] ?? "", 10) : undefined;
-	} catch {
-		return undefined;
-	}
-}
-
-/**
- * Render a ZombieScanResult as human-readable text for the doctor report.
- * Explicitly labels main-session safety and never suggests killing live parents.
- */
-export function formatZombieReport(scan: ZombieScanResult): string {
-	const lines: string[] = [];
-	lines.push("## Zombie sub-agent scan (read-only — nothing killed)");
-	lines.push("");
-	lines.push(`Sub-agents identified by PI_CREW_KIND=subagent marker. Main sessions (no marker) are never listed.`);
-	lines.push("");
-
-	if (scan.zombies.length === 0 && scan.live.length === 0) {
-		lines.push("No pi-crew sub-agent processes found.");
-		if (scan.errors.length > 0) {
-			lines.push("");
-			lines.push(`Scan notes (${scan.errors.length}):`);
-			for (const err of scan.errors.slice(0, 5)) lines.push(`  - ${err}`);
-		}
-		return lines.join("\n");
-	}
-
-	if (scan.zombies.length > 0) {
-		lines.push(`### Zombies — parent dead (${scan.zombies.length})`);
-		lines.push("These sub-agents are orphaned. Safe to kill after review:");
-		lines.push("");
-		lines.push("  PID       PARENT  RSS       ROLE          CMD");
-		for (const z of scan.zombies) {
-			lines.push(
-				`  ${String(z.pid).padEnd(9)}${String(z.crewParentPid).padEnd(8)}${formatRss(z.rssKb).padEnd(10)}${(z.role ?? "?").padEnd(14)}${z.cmd.slice(0, 60)}`,
-			);
-		}
-		lines.push("");
-	}
-
-	if (scan.live.length > 0) {
-		lines.push(`### Live — parent still running (${scan.live.length})`);
-		lines.push("NOT zombies. Do not kill (parent PID is alive and may still reap them).");
-		lines.push("");
-		lines.push("  PID       PARENT  RSS       ROLE          CMD");
-		for (const l of scan.live) {
-			lines.push(
-				`  ${String(l.pid).padEnd(9)}${String(l.crewParentPid).padEnd(8)}${formatRss(l.rssKb).padEnd(10)}${(l.role ?? "?").padEnd(14)}${l.cmd.slice(0, 60)}`,
-			);
-		}
-		lines.push("");
-	}
-
-	if (scan.errors.length > 0) {
-		lines.push(`Scan errors (${scan.errors.length}, first 5 shown):`);
-		for (const err of scan.errors.slice(0, 5)) lines.push(`  - ${err}`);
-		lines.push("");
-	}
-
-	lines.push("To kill a zombie: `kill <PID>` (the OS will reap it). This tool never kills.");
-	return lines.join("\n");
-}
-
-function formatRss(kb: number): string {
-	if (kb >= 1024 * 1024) return `${(kb / 1024 / 1024).toFixed(1)}G`;
-	if (kb >= 1024) return `${(kb / 1024).toFixed(0)}M`;
-	return `${kb}K`;
-}
-
-// Re-export for tests + callers that want to inspect proc helpers in isolation.
-export const __test = { readProcEnviron, isPidAlive, computeElapsedSec };

package/src/schema/config-schema.ts

@@ -1,327 +0,0 @@
-import { Type } from "@sinclair/typebox";
-
-export {
-	type ValidationFinding,
-	type ValidationMode,
-	type ValidationOutcome,
-	type ValidationSeverity,
-	validateWithSeverity,
-} from "./validation-types.ts";
-
-export const PiTeamsAutonomyProfileSchema = Type.Union([
-	Type.Literal("manual"),
-	Type.Literal("suggested"),
-	Type.Literal("assisted"),
-	Type.Literal("aggressive"),
-]);
-
-export const PiTeamsAutonomousConfigSchema = Type.Object(
-	{
-		profile: Type.Optional(PiTeamsAutonomyProfileSchema),
-		enabled: Type.Optional(Type.Boolean()),
-		injectPolicy: Type.Optional(Type.Boolean()),
-		preferAsyncForLongTasks: Type.Optional(Type.Boolean()),
-		allowWorktreeSuggestion: Type.Optional(Type.Boolean()),
-		magicKeywords: Type.Optional(Type.Record(Type.String({ minLength: 1 }), Type.Array(Type.String({ minLength: 1 })))),
-	},
-	{ additionalProperties: false },
-);
-
-export const PiTeamsLimitsConfigSchema = Type.Object(
-	{
-		maxConcurrentWorkers: Type.Optional(Type.Integer({ minimum: 1 })),
-		allowUnboundedConcurrency: Type.Optional(Type.Boolean()),
-		maxTaskDepth: Type.Optional(Type.Integer({ minimum: 1 })),
-		maxChildrenPerTask: Type.Optional(Type.Integer({ minimum: 1 })),
-		maxRunMinutes: Type.Optional(Type.Integer({ minimum: 1 })),
-		maxRetriesPerTask: Type.Optional(Type.Integer({ minimum: 1 })),
-		maxTasksPerRun: Type.Optional(Type.Integer({ minimum: 1 })),
-		heartbeatStaleMs: Type.Optional(Type.Integer({ minimum: 1 })),
-		serializeOnPathOverlap: Type.Optional(Type.Boolean()),
-	},
-	{ additionalProperties: false },
-);
-
-export const PiTeamsRuntimeConfigSchema = Type.Object(
-	{
-		mode: Type.Optional(
-			Type.Union([Type.Literal("auto"), Type.Literal("scaffold"), Type.Literal("child-process"), Type.Literal("live-session")]),
-		),
-		preferLiveSession: Type.Optional(Type.Boolean()),
-		allowChildProcessFallback: Type.Optional(Type.Boolean()),
-		maxTurns: Type.Optional(Type.Integer({ minimum: 1 })),
-		graceTurns: Type.Optional(Type.Integer({ minimum: 1 })),
-		taskTimeoutMs: Type.Optional(Type.Integer({ minimum: 1 })),
-		inheritContext: Type.Optional(Type.Boolean()),
-		promptMode: Type.Optional(Type.Union([Type.Literal("replace"), Type.Literal("append")])),
-		groupJoin: Type.Optional(Type.Union([Type.Literal("off"), Type.Literal("group"), Type.Literal("smart")])),
-		groupJoinAckTimeoutMs: Type.Optional(Type.Integer({ minimum: 1 })),
-		requirePlanApproval: Type.Optional(Type.Boolean()),
-		completionMutationGuard: Type.Optional(Type.Union([Type.Literal("off"), Type.Literal("warn"), Type.Literal("fail")])),
-		effectivenessGuard: Type.Optional(
-			Type.Union([Type.Literal("off"), Type.Literal("warn"), Type.Literal("block"), Type.Literal("fail")]),
-		),
-		yield: Type.Optional(
-			Type.Object(
-				{
-					enabled: Type.Optional(Type.Boolean()),
-					maxReminders: Type.Optional(Type.Integer({ minimum: 0 })),
-					reminderPrompt: Type.Optional(Type.String({ maxLength: 1000 })),
-				},
-				{ additionalProperties: false },
-			),
-		),
-		excludeContextBash: Type.Optional(Type.Boolean()),
-		isolationPolicy: Type.Optional(
-			Type.Object(
-				{
-					isolatedRoles: Type.Optional(Type.Array(Type.String({ minLength: 1 }))),
-					defaultRuntime: Type.Optional(Type.Union([Type.Literal("live-session"), Type.Literal("child-process")])),
-				},
-				{ additionalProperties: false },
-			),
-		),
-	},
-	{ additionalProperties: false },
-);
-
-export const PiTeamsControlConfigSchema = Type.Object(
-	{
-		enabled: Type.Optional(Type.Boolean()),
-		needsAttentionAfterMs: Type.Optional(Type.Integer({ minimum: 1 })),
-	},
-	{ additionalProperties: false },
-);
-
-export const PiTeamsWorktreeConfigSchema = Type.Object(
-	{
-		setupHook: Type.Optional(Type.String({ minLength: 1 })),
-		setupHookTimeoutMs: Type.Optional(Type.Integer({ minimum: 1 })),
-		linkNodeModules: Type.Optional(Type.Boolean()),
-		seedPaths: Type.Optional(Type.Array(Type.String({ minLength: 1 }))),
-	},
-	{ additionalProperties: false },
-);
-
-/**
- * Goal-wrap config (RFC v0.5 vision: apply `goal` completion-guarantee to builtin workflows).
- * Per-workflow toggle. When enabled, a builtin workflow runs as the WORKER TURN inside a
- * goal loop (worker → judge → feedback → redo until achieved / maxTurns / budget / stuck).
- * Default OFF — opt-in per workflow. Only applies to builtin workflows that have a clear
- * 'done' condition (implementation, fast-fix). Read-only workflows (review, research) are
- * not goal-wrappable.
- */
-export const GoalWrapWorkflowConfigSchema = Type.Object(
-	{
-		enabled: Type.Optional(Type.Boolean()),
-		maxTurns: Type.Optional(Type.Integer({ minimum: 1, maximum: 50 })),
-		evaluatorModel: Type.Optional(Type.String({ minLength: 1 })),
-		verification: Type.Optional(
-			Type.Object(
-				{
-					commands: Type.Array(Type.String({ minLength: 1 })),
-					mode: Type.Optional(Type.Literal("text-only")),
-				},
-				{ additionalProperties: false },
-			),
-		),
-		budgetTotal: Type.Optional(Type.Integer({ minimum: 1000 })),
-		budgetUnlimited: Type.Optional(Type.Boolean()),
-	},
-	{ additionalProperties: false },
-);
-
-export const PiTeamsGoalWrapConfigSchema = Type.Record(Type.String({ minLength: 1 }), GoalWrapWorkflowConfigSchema);
-
-export const AgentOverrideSchema = Type.Object(
-	{
-		disabled: Type.Optional(Type.Boolean()),
-		model: Type.Optional(Type.Union([Type.String({ minLength: 1 }), Type.Literal(false)])),
-		fallbackModels: Type.Optional(Type.Union([Type.Array(Type.String({ minLength: 1 })), Type.Literal(false)])),
-		thinking: Type.Optional(Type.Union([Type.String({ minLength: 1 }), Type.Literal(false)])),
-		tools: Type.Optional(Type.Union([Type.Array(Type.String({ minLength: 1 })), Type.Literal(false)])),
-		skills: Type.Optional(Type.Union([Type.Array(Type.String({ minLength: 1 })), Type.Literal(false)])),
-	},
-	{ additionalProperties: false },
-);
-
-export const PiTeamsAgentsConfigSchema = Type.Object(
-	{
-		disableBuiltins: Type.Optional(Type.Boolean()),
-		overrides: Type.Optional(Type.Record(Type.String({ minLength: 1 }), AgentOverrideSchema)),
-	},
-	{ additionalProperties: false },
-);
-
-export const PiTeamsToolsConfigSchema = Type.Object(
-	{
-		enableClaudeStyleAliases: Type.Optional(Type.Boolean()),
-		enableSteer: Type.Optional(Type.Boolean()),
-		terminateOnForeground: Type.Optional(Type.Boolean()),
-	},
-	{ additionalProperties: false },
-);
-
-export const PiTeamsTelemetryConfigSchema = Type.Object(
-	{
-		enabled: Type.Optional(Type.Boolean()),
-	},
-	{ additionalProperties: false },
-);
-
-export const PiTeamsPolicyConfigSchema = Type.Object(
-	{
-		requireIntentForDestructiveActions: Type.Optional(Type.Boolean()),
-		disabledCapabilities: Type.Optional(Type.Array(Type.String())),
-	},
-	{ additionalProperties: false },
-);
-
-export const PiTeamsNotificationsConfigSchema = Type.Object(
-	{
-		enabled: Type.Optional(Type.Boolean()),
-		severityFilter: Type.Optional(
-			Type.Array(Type.Union([Type.Literal("info"), Type.Literal("warning"), Type.Literal("error"), Type.Literal("critical")])),
-		),
-		dedupWindowMs: Type.Optional(Type.Integer({ minimum: 1000 })),
-		batchWindowMs: Type.Optional(Type.Integer({ minimum: 0 })),
-		quietHours: Type.Optional(Type.String({ pattern: "^\\d{2}:\\d{2}-\\d{2}:\\d{2}$" })),
-		sinkRetentionDays: Type.Optional(Type.Integer({ minimum: 1, maximum: 90 })),
-	},
-	{ additionalProperties: false },
-);
-
-export const PiTeamsObservabilityConfigSchema = Type.Object(
-	{
-		enabled: Type.Optional(Type.Boolean()),
-		pollIntervalMs: Type.Optional(Type.Integer({ minimum: 1000, maximum: 60000 })),
-		metricRetentionDays: Type.Optional(Type.Integer({ minimum: 1, maximum: 90 })),
-	},
-	{ additionalProperties: false },
-);
-
-export const PiTeamsReliabilityConfigSchema = Type.Object(
-	{
-		autoRetry: Type.Optional(Type.Boolean()),
-		retryPolicy: Type.Optional(
-			Type.Object(
-				{
-					maxAttempts: Type.Optional(Type.Integer({ minimum: 1, maximum: 10 })),
-					backoffMs: Type.Optional(Type.Integer({ minimum: 100, maximum: 60000 })),
-					jitterRatio: Type.Optional(Type.Number({ minimum: 0, maximum: 1 })),
-					exponentialFactor: Type.Optional(Type.Number({ minimum: 1, maximum: 5 })),
-					retryableErrors: Type.Optional(Type.Array(Type.String({ minLength: 1 }))),
-				},
-				{ additionalProperties: false },
-			),
-		),
-		autoRecover: Type.Optional(Type.Boolean()),
-		deadletterThreshold: Type.Optional(Type.Integer({ minimum: 1 })),
-		cleanupOrphanedTempDirs: Type.Optional(Type.Boolean()),
-		autoRepairIntervalMs: Type.Optional(Type.Integer({ minimum: 0 })),
-		forcePreflight: Type.Optional(Type.Boolean()),
-		ambientStatusInjection: Type.Optional(Type.Boolean()),
-		perWriteValidation: Type.Optional(Type.Boolean()),
-		scopeModels: Type.Optional(Type.Boolean()),
-	},
-	{ additionalProperties: false },
-);
-
-export const PiTeamsOtlpConfigSchema = Type.Object(
-	{
-		enabled: Type.Optional(Type.Boolean()),
-		endpoint: Type.Optional(
-			Type.String({
-				minLength: 1,
-				maxLength: 2048,
-				pattern: "^https?://",
-			}),
-		),
-		headers: Type.Optional(Type.Record(Type.String({ minLength: 1, maxLength: 256 }), Type.String({ maxLength: 4096 }))),
-		intervalMs: Type.Optional(Type.Integer({ minimum: 5000 })),
-	},
-	{ additionalProperties: false },
-);
-
-export const PiTeamsUiConfigSchema = Type.Object(
-	{
-		widgetPlacement: Type.Optional(Type.Union([Type.Literal("aboveEditor"), Type.Literal("belowEditor")])),
-		widgetMaxLines: Type.Optional(Type.Integer({ minimum: 1, maximum: 50 })),
-		powerbar: Type.Optional(Type.Boolean()),
-		dashboardPlacement: Type.Optional(Type.Union([Type.Literal("center"), Type.Literal("right")])),
-		dashboardWidth: Type.Optional(Type.Integer({ minimum: 32, maximum: 120 })),
-		dashboardLiveRefreshMs: Type.Optional(Type.Integer({ minimum: 250, maximum: 60000 })),
-		autoOpenDashboard: Type.Optional(Type.Boolean()),
-		autoOpenDashboardForForegroundRuns: Type.Optional(Type.Boolean()),
-		autoCloseDashboardMs: Type.Optional(Type.Integer({ minimum: 0 })),
-		showModel: Type.Optional(Type.Boolean()),
-		showTokens: Type.Optional(Type.Boolean()),
-		showTools: Type.Optional(Type.Boolean()),
-		transcriptTailBytes: Type.Optional(Type.Integer({ minimum: 1024, maximum: 50 * 1024 * 1024 })),
-		mascotStyle: Type.Optional(Type.Union([Type.Literal("cat"), Type.Literal("armin")])),
-		mascotEffect: Type.Optional(
-			Type.Union([
-				Type.Literal("random"),
-				Type.Literal("none"),
-				Type.Literal("typewriter"),
-				Type.Literal("scanline"),
-				Type.Literal("rain"),
-				Type.Literal("fade"),
-				Type.Literal("crt"),
-				Type.Literal("glitch"),
-				Type.Literal("dissolve"),
-			]),
-		),
-	},
-	{ additionalProperties: false },
-);
-
-/** Phase 0 inter-pi broker config schema. Numeric limits are bounded per
- *  the plan: pathHashLen 4..32, maxFrameBytes 1024..1048576 (default 256 KiB),
- *  outboundQueueCap 32..4096 (default 256). */
-export const CrewBrokerConfigSchema = Type.Object(
-	{
-		enabled: Type.Optional(Type.Boolean()),
-		pathHashLen: Type.Optional(Type.Integer({ minimum: 4, maximum: 32 })),
-		maxFrameBytes: Type.Optional(Type.Integer({ minimum: 1024, maximum: 1_048_576 })),
-		outboundQueueCap: Type.Optional(Type.Integer({ minimum: 32, maximum: 4096 })),
-	},
-	{ additionalProperties: false },
-);
-
-export const PiTeamsConfigSchema = Type.Object(
-	{
-		asyncByDefault: Type.Optional(Type.Boolean()),
-		executeWorkers: Type.Optional(Type.Boolean()),
-		notifierIntervalMs: Type.Optional(Type.Number({ minimum: 1000 })),
-		requireCleanWorktreeLeader: Type.Optional(Type.Boolean()),
-		ignoreMethod: Type.Optional(Type.Union([Type.Literal("gitignore"), Type.Literal("exclude")])),
-		autonomous: Type.Optional(PiTeamsAutonomousConfigSchema),
-		limits: Type.Optional(PiTeamsLimitsConfigSchema),
-		runtime: Type.Optional(PiTeamsRuntimeConfigSchema),
-		control: Type.Optional(PiTeamsControlConfigSchema),
-		worktree: Type.Optional(PiTeamsWorktreeConfigSchema),
-		goalWrap: Type.Optional(PiTeamsGoalWrapConfigSchema),
-		agents: Type.Optional(PiTeamsAgentsConfigSchema),
-		tools: Type.Optional(PiTeamsToolsConfigSchema),
-		telemetry: Type.Optional(PiTeamsTelemetryConfigSchema),
-		policy: Type.Optional(PiTeamsPolicyConfigSchema),
-		notifications: Type.Optional(PiTeamsNotificationsConfigSchema),
-		observability: Type.Optional(PiTeamsObservabilityConfigSchema),
-		reliability: Type.Optional(PiTeamsReliabilityConfigSchema),
-		otlp: Type.Optional(PiTeamsOtlpConfigSchema),
-		ui: Type.Optional(PiTeamsUiConfigSchema),
-		broker: Type.Optional(CrewBrokerConfigSchema),
-	},
-	{ additionalProperties: false },
-);
-
-import { validateWithSeverity as _validateWithSeverity, type ValidationMode, type ValidationOutcome } from "./validation-types.ts";
-
-/**
- * Convenience wrapper — validate a raw config value with severity-tagged findings.
- * Delegates to `validateWithSeverity` from validation-types.ts.
- */
-export function validateConfig(raw: unknown, mode?: ValidationMode): ValidationOutcome {
-	return _validateWithSeverity(raw, mode);
-}