pi-daddy 0.28.0 → 0.32.0

package/extensions/stored-grant-session.ts

@@ -4,10 +4,10 @@ import {
   projectLedgerPath,
   type GrantStoreRefusalReason,
   type StoredGrant,
-} from "../src/grant-store.ts";
-import { WILDCARD } from "../src/pi-tools.ts";
-import { parseList } from "../src/propagation.ts";
-import type { Capability } from "../src/resolve.ts";
+} from "../src/governance/grant-store.ts";
+import { WILDCARD } from "../src/kernel/pi-tools.ts";
+import { parseList } from "../src/kernel/propagation.ts";
+import type { Capability } from "../src/kernel/resolve.ts";
 
 export interface StoredGrantSessionState {
   stored?: StoredGrant;
@@ -26,7 +26,7 @@ export function storedGrantSessionState(grantRaw: string | undefined, cwd: strin
     ...(stored ? { stored } : {}),
     ...(refusal ? { refusal } : {}),
     governed: grantRaw !== undefined || stored !== undefined || refusal !== undefined,
-    inherited: grantRaw !== undefined ? parseList(grantRaw) : stored?.grant ?? (refusal ? [] : [WILDCARD]),
+    inherited: grantRaw !== undefined ? parseList(grantRaw) : (stored?.grant ?? (refusal ? [] : [WILDCARD])),
     // Invalid state authorises only a refusal line at this conventional path; no child can start from it.
     defaultLedger: stored?.projectLedger || refusal ? projectLedgerPath(cwd) : undefined,
   };

package/extensions/tripwire.ts

@@ -39,6 +39,6 @@ export function tripwireReason(toolName: string): string {
     `hold whatever that extension decided, with no grant, no depth bound and no ledger entry. ` +
     `Use \`delegate\` for a single sub-agent, or \`delegate_all\` to run several CONCURRENTLY — that is the ` +
     `governed equivalent of a parallel or chained spawn, and it is what to reach for when independent tasks ` +
-    `can proceed at the same time. If you meant to run ungoverned, unset PI_GRANTS_GRANT.`
+    `can proceed at the same time. If you meant to run ungoverned, unset PI_DADDY_GRANT.`
   );
 }

package/extensions/workspace-runtime.ts

@@ -1,22 +1,21 @@
-import type { CorrelationMetadata } from "../src/correlation.ts";
-import type { Capability } from "../src/resolve.ts";
+import type { CorrelationMetadata } from "../src/kernel/correlation.ts";
+import type { Capability } from "../src/kernel/resolve.ts";
+import { appendLedgerEvent, buildWorkspaceLeaseEvent } from "../src/governance/ledger.ts";
+import { GovernanceRefusal, refusal, type StructuredRefusal } from "../src/kernel/refusals.ts";
 import {
-  appendLedgerEvent,
-  buildWorkspaceLeaseEvent,
-} from "../src/ledger.ts";
-import { GovernanceRefusal, refusal, type StructuredRefusal } from "../src/refusals.ts";
-import {
-  acquireWorkspaceLease,
-  defaultWorkspaceLeaseDir,
   ENV_WORKSPACE_REGISTRY,
   loadWorkspaceRegistry,
   resolveWorkspace,
   type ValidatedWorkspace,
   type WorkspaceAccess,
+} from "../src/kernel/workspace.ts";
+import {
+  acquireWorkspaceLease,
+  defaultWorkspaceLeaseDir,
   type WorkspaceLease,
   leaseAcquisitionOutcome,
   type LeaseReleaseOutcome,
-} from "../src/workspace.ts";
+} from "../src/governance/workspace-lease.ts";
 
 export interface DelegationWorkspaceSpec {
   workspace_id: string;
@@ -27,7 +26,7 @@ export interface DelegationWorkspaceSpec {
  * Tools that cannot change a worktree.
  *
  * **`tool:delegate` is deliberately NOT here, and that is a scope decision.** It was added, and it was true of
- * the capability and false of the code: a routed child's cwd IS the leased root, `PI_GRANTS_LEDGER` was
+ * the capability and false of the code: a routed child's cwd IS the leased root, `PI_DADDY_LEDGER` was
  * passed through relative (`init` scaffolds `.pi/grants.jsonl`), and a `read` lease takes no kernel lock — so
  * two delegating children classified `read` both created `.pi/` in one worktree and neither excluded the
  * other. Making `tool:delegate` non-writing requires first making every child-inherited path absolute, and
@@ -75,19 +74,21 @@ export async function prepareDelegationWorkspace(input: {
   ledgerPath?: string;
 }): Promise<PreparedWorkspace> {
   if (input.correlation?.workspace_id && input.correlation.workspace_id !== input.spec.workspace_id) {
-    throw new GovernanceRefusal(refusal(
-      "APPROVAL_SCOPE_MISMATCH",
-      `correlation workspace ${input.correlation.workspace_id} does not match requested workspace ${input.spec.workspace_id}`,
-      { workspace_id: input.spec.workspace_id },
-    ));
+    throw new GovernanceRefusal(
+      refusal(
+        "APPROVAL_SCOPE_MISMATCH",
+        `correlation workspace ${input.correlation.workspace_id} does not match requested workspace ${input.spec.workspace_id}`,
+        { workspace_id: input.spec.workspace_id },
+      ),
+    );
   }
   const registryPath = process.env[ENV_WORKSPACE_REGISTRY];
   if (!registryPath) {
-    throw new GovernanceRefusal(refusal(
-      "WORKSPACE_NOT_REGISTERED",
-      `${ENV_WORKSPACE_REGISTRY} is required when a delegation names a workspace`,
-      { workspace_id: input.spec.workspace_id },
-    ));
+    throw new GovernanceRefusal(
+      refusal("WORKSPACE_NOT_REGISTERED", `${ENV_WORKSPACE_REGISTRY} is required when a delegation names a workspace`, {
+        workspace_id: input.spec.workspace_id,
+      }),
+    );
   }
   const workspace = await resolveWorkspace(await loadWorkspaceRegistry(registryPath), input.spec.workspace_id);
   let lease: WorkspaceLease | undefined;
@@ -122,9 +123,10 @@ export async function prepareDelegationWorkspace(input: {
     // A load-bearing ledger failure can happen after the kernel lock was acquired. Release before trying
     // to record the refusal, or this live parent would strand its own writer lease until process exit.
     await lease?.release("setup-failed");
-    const structured: StructuredRefusal = error instanceof GovernanceRefusal
-      ? { code: error.code, message: error.message, ...(error.details ? { details: error.details } : {}) }
-      : refusal("WORKSPACE_LEASE_STALE", `workspace lease failed (${String(error)})`);
+    const structured: StructuredRefusal =
+      error instanceof GovernanceRefusal
+        ? { code: error.code, message: error.message, ...(error.details ? { details: error.details } : {}) }
+        : refusal("WORKSPACE_LEASE_STALE", `workspace lease failed (${String(error)})`);
     if (input.ledgerPath) {
       await appendLedgerEvent(
         { path: input.ledgerPath, strict: true },

package/herdr-plugin/herdr-plugin.toml

@@ -14,5 +14,5 @@ command = [
   "node",
   "--input-type=module",
   "-e",
-  "import('node:url').then(({ pathToFileURL }) => import(pathToFileURL(process.env.HERDR_PLUGIN_ROOT + '/../dist/dashboard-cli.js').href)).then(m => m.runDashboard()).catch(e => { console.error(e); process.exitCode = 1; })"
+  "import('node:url').then(({ pathToFileURL }) => import(pathToFileURL(process.env.HERDR_PLUGIN_ROOT + '/../dist/products/dashboard-cli.js').href)).then(m => m.runDashboard()).catch(e => { console.error(e); process.exitCode = 1; })"
 ]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-daddy",
-  "version": "0.28.0",
+  "version": "0.32.0",
   "description": "Capability governance for pi sub-agents: spawn Agent Skills (SKILL.md) definitions whose allowed-tools becomes a grant that can only narrow going down a delegation tree, enforced by pi's own --tools allowlist, with an append-only ledger.",
   "keywords": [
     "pi-package",
@@ -29,214 +29,11 @@
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
     },
-    "./resolve": {
-      "types": "./dist/resolve.d.ts",
-      "default": "./dist/resolve.js"
-    },
-    "./ledger": {
-      "types": "./dist/ledger.d.ts",
-      "default": "./dist/ledger.js"
-    },
-    "./work-setup": { "types": "./dist/work-setup.d.ts", "default": "./dist/work-setup.js" },
-    "./work-command": { "types": "./dist/work-command.d.ts", "default": "./dist/work-command.js" },
-    "./work-run": { "types": "./dist/work-run.d.ts", "default": "./dist/work-run.js" },
-    "./work-policy-registry": { "types": "./dist/work-policy-registry.d.ts", "default": "./dist/work-policy-registry.js" },
-    "./factory-registry": { "types": "./dist/factory-registry.d.ts", "default": "./dist/factory-registry.js" },
-    "./learning-connection": { "types": "./dist/learning-connection.d.ts", "default": "./dist/learning-connection.js" },
-    "./work-ledger": {
-      "types": "./dist/work-ledger.d.ts",
-      "default": "./dist/work-ledger.js"
-    },
-    "./factory-order": {
-      "types": "./dist/factory-order.d.ts",
-      "default": "./dist/factory-order.js"
-    },
-    "./experiment": {
-      "types": "./dist/experiment.d.ts",
-      "default": "./dist/experiment.js"
-    },
-    "./dashboard-harness": {
-      "types": "./dist/dashboard-harness.d.ts",
-      "default": "./dist/dashboard-harness.js"
-    },
-    "./daily-dashboard-host": {
-      "types": "./dist/daily-dashboard-host.d.ts",
-      "default": "./dist/daily-dashboard-host.js"
-    },
-    "./dashboard-host": {
-      "types": "./dist/dashboard-host.d.ts",
-      "default": "./dist/dashboard-host.js"
-    },
-    "./dashboard-host-transport": {
-      "types": "./dist/dashboard-host-transport.d.ts",
-      "default": "./dist/dashboard-host-transport.js"
-    },
-    "./debrief-host": {
-      "types": "./dist/debrief-host.d.ts",
-      "default": "./dist/debrief-host.js"
-    },
-    "./contracts/debrief/v2/*": "./contracts/debrief/v2/*",
-    "./debrief": {
-      "types": "./dist/debrief.d.ts",
-      "default": "./dist/debrief.js"
-    },
-    "./daily-view": {
-      "types": "./dist/daily-view.d.ts",
-      "default": "./dist/daily-view.js"
-    },
-    "./intent-control": {
-      "types": "./dist/intent-control.d.ts",
-      "default": "./dist/intent-control.js"
-    },
-    "./dispatch-control": {
-      "types": "./dist/dispatch-control.d.ts",
-      "default": "./dist/dispatch-control.js"
-    },
-    "./resource-budget": {
-      "types": "./dist/resource-budget.d.ts",
-      "default": "./dist/resource-budget.js"
-    },
-    "./producer-ipc": {
-      "types": "./dist/producer-ipc.d.ts",
-      "default": "./dist/producer-ipc.js"
-    },
-    "./effect-profile": {
-      "types": "./dist/effect-profile.d.ts",
-      "default": "./dist/effect-profile.js"
-    },
-    "./measured-session": {
-      "types": "./dist/measured-session.d.ts",
-      "default": "./dist/measured-session.js"
-    },
-    "./measured-order": {
-      "types": "./dist/measured-order.d.ts",
-      "default": "./dist/measured-order.js"
-    },
-    "./execution-retention": {
-      "types": "./dist/execution-retention.d.ts",
-      "default": "./dist/execution-retention.js"
-    },
-    "./spawn": {
-      "types": "./dist/spawn.d.ts",
-      "default": "./dist/spawn.js"
-    },
-    "./delegate": {
-      "types": "./dist/delegate.d.ts",
-      "default": "./dist/delegate.js"
-    },
-    "./catalog": {
-      "types": "./dist/catalog.d.ts",
-      "default": "./dist/catalog.js"
-    },
-    "./propagation": {
-      "types": "./dist/propagation.d.ts",
-      "default": "./dist/propagation.js"
-    },
-    "./definitions": {
-      "types": "./dist/definitions.d.ts",
-      "default": "./dist/definitions.js"
-    },
-    "./fanout": {
-      "types": "./dist/fanout.d.ts",
-      "default": "./dist/fanout.js"
-    },
-    "./pi-tools": {
-      "types": "./dist/pi-tools.d.ts",
-      "default": "./dist/pi-tools.js"
-    },
-    "./run-herdr": {
-      "types": "./dist/run-herdr.d.ts",
-      "default": "./dist/run-herdr.js"
-    },
-    "./herdr-poll": {
-      "types": "./dist/herdr-poll.d.ts",
-      "default": "./dist/herdr-poll.js"
-    },
-    "./herdr-cli": {
-      "types": "./dist/herdr-cli.d.ts",
-      "default": "./dist/herdr-cli.js"
-    },
-    "./executor": {
-      "types": "./dist/executor.d.ts",
-      "default": "./dist/executor.js"
-    },
-    "./progress": {
-      "types": "./dist/progress.d.ts",
-      "default": "./dist/progress.js"
-    },
-    "./chain": {
-      "types": "./dist/chain.d.ts",
-      "default": "./dist/chain.js"
-    },
-    "./run-child": {
-      "types": "./dist/run-child.d.ts",
-      "default": "./dist/run-child.js"
-    },
-    "./approval": {
-      "types": "./dist/approval.d.ts",
-      "default": "./dist/approval.js"
-    },
-    "./approval-store": {
-      "types": "./dist/approval-store.d.ts",
-      "default": "./dist/approval-store.js"
-    },
-    "./approval-prompt": {
-      "types": "./dist/approval-prompt.d.ts",
-      "default": "./dist/approval-prompt.js"
-    },
-    "./init": {
-      "types": "./dist/init.d.ts",
-      "default": "./dist/init.js"
-    },
-    "./skill-packages": {
-      "types": "./dist/skill-packages.d.ts",
-      "default": "./dist/skill-packages.js"
-    },
-    "./correlation": {
-      "types": "./dist/correlation.d.ts",
-      "default": "./dist/correlation.js"
-    },
-    "./refusals": {
-      "types": "./dist/refusals.d.ts",
-      "default": "./dist/refusals.js"
-    },
-    "./workspace": {
-      "types": "./dist/workspace.d.ts",
-      "default": "./dist/workspace.js"
-    },
-    "./check-runner": {
-      "types": "./dist/check-runner.d.ts",
-      "default": "./dist/check-runner.js"
-    },
-    "./dashboard-projection": {
-      "types": "./dist/dashboard-projection.d.ts",
-      "default": "./dist/dashboard-projection.js"
-    },
-    "./dashboard-render": {
-      "types": "./dist/dashboard-render.d.ts",
-      "default": "./dist/dashboard-render.js"
-    },
-    "./contracts/factory-order/v1/*": "./contracts/factory-order/v1/*",
-    "./contracts/experiment/v1/*": "./contracts/experiment/v1/*",
-    "./contracts/producer-ipc/v1/*": "./contracts/producer-ipc/v1/*",
-    "./contracts/debrief/v1/*": "./contracts/debrief/v1/*",
-    "./contracts/intent-control/v2/request.schema.json": "./contracts/intent-control/v2/request.schema.json",
-    "./contracts/intent-control/v1/request.schema.json": "./contracts/intent-control/v1/request.schema.json",
-    "./contracts/dispatch-control/v1/request.schema.json": "./contracts/dispatch-control/v1/request.schema.json",
-    "./contracts/daily-view/v1/fixtures/*": "./contracts/daily-view/v1/fixtures/*",
-    "./contracts/daily-view/v1/p03/projection.schema.json": "./contracts/daily-view/v1/p03/projection.schema.json",
-    "./contracts/execution-retention/v2/manifest.schema.json": "./contracts/execution-retention/v2/manifest.schema.json",
-    "./contracts/execution-retention/v2/fixtures/*": "./contracts/execution-retention/v2/fixtures/*",
-    "./contracts/ledger/v4/ledger-event.schema.json": "./contracts/ledger/v4/ledger-event.schema.json",
-    "./contracts/ledger/v4/fixtures/*.json": "./contracts/ledger/v4/fixtures/*.json",
-    "./contracts/ledger/v3/ledger-event.schema.json": "./contracts/ledger/v3/ledger-event.schema.json",
-    "./contracts/ledger/v3/fixtures/*.json": "./contracts/ledger/v3/fixtures/*.json",
-    "./contracts/ledger/v2/ledger-event.schema.json": "./contracts/ledger/v2/ledger-event.schema.json",
-    "./contracts/ledger/v2/fixtures/*.json": "./contracts/ledger/v2/fixtures/*.json"
+    "./contracts/*": "./contracts/*"
   },
   "bin": {
     "pi-daddy": "./dist/cli.js",
-    "pi-daddy-dashboard": "./dist/dashboard-cli.js"
+    "pi-daddy-dashboard": "./dist/products/dashboard-cli.js"
   },
   "files": [
     "dist",
@@ -247,8 +44,6 @@
     "THIRD_PARTY_LICENSES",
     "THIRD_PARTY_NOTICES.md",
     "README.md",
-    "PRODUCT-GUIDE.md",
-    "REQUIREMENTS.md",
     "CHANGELOG.md",
     "LICENSE"
   ],
@@ -256,11 +51,9 @@
     "build": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\" && tsc -p tsconfig.json",
     "typecheck": "tsc -p tsconfig.check.json",
     "test": "node scripts/unit-tests.ts",
-    "test:dashboard-pty": "if [ \"$(uname -s)\" = Linux ]; then python3 test/dashboard-cli-pty.py; else echo 'dashboard PTY probe requires Unix pty/Unix sockets'; fi",
     "test:integration": "node --test test-integration/*.it.ts",
     "test:integration:ci": "node --test test-integration/approval.it.ts test-integration/governance.it.ts test-integration/activity.it.ts",
-    "contracts:generate": "node scripts/generate-ledger-v3-contract.ts",
-    "contracts:generate:v4": "node scripts/generate-ledger-v4-contract.ts contracts/ledger/v4",
+    "contracts:generate": "node scripts/generate-ledger-record-contract.ts",
     "prepack": "npm run build",
     "test:smoke": "node scripts/smoke-installed.mjs"
   },