pi-daddy 0.43.0 → 0.44.0

package/dist/advisors/settings.js

@@ -1,99 +0,0 @@
-/**
- * Whether an advisor is on, and which one (ADR-0077).
- *
- * **Default off, and only the environment can turn it on.** An advisor sends a description of the caller's
- * situation to a third party, so enabling one is `PI_DADDY_ADVISOR=jev` plus a key — both outside the workspace,
- * both stripped from every child.
- *
- * 0.34.0 read the enable from `.pi/pi-daddy/settings.json` and that was wrong for the reason `grant-store.ts`
- * states about the same file: it is writable by any child holding `tool:write`, so it is "the reviewable record of
- * the decision, not the thing the enforcer reads". A grant lives outside the workspace precisely so a child cannot
- * widen the next session's ceiling; an advisor switch a child could flip would make the operator's next session
- * ship its own description to a third party, which is the same self-defeating shape. The settings block may still
- * NARROW — a shorter timeout, or `enabled: false` to turn an advisor off for one project — and can never turn one
- * on, choose its model, or lengthen its bound. A model is a destination rather than a narrowing, so `model` in the
- * block is refused with a message naming `PI_DADDY_ADVISOR_MODEL`, and a timeout is clamped to the default rather
- * than trusted. Malformed configuration disables the advisor and says so: a typo must not be a way to enable anything.
- *
- * **Not a dashboard toggle**, which is what the programme originally sketched. The dashboard is a read-only
- * renderer in a separate process that "never affects enforcement" (ADR-0036), and a control there that wrote to
- * settings would be the first thing it ever wrote. Turning an advisor on is an operator decision that belongs in
- * the reviewable file; `/grants` reports what is in force. That is a deliberate departure from the roadmap line.
- *
- * The key is never in the settings file either, because that file is committed and an API key must not be.
- */
-// Spelled once, in the kernel's table, so this layer cannot drift from the list `childEnv` refuses to write.
-export { ENV_ADVISOR_KEY as ADVISOR_KEY_ENV } from "../kernel/env-names.js";
-import { ENV_ADVISOR, ENV_ADVISOR_KEY, ENV_ADVISOR_MODEL, ENV_ADVISOR_TASK_EGRESS } from "../kernel/env-names.js";
-import { DEFAULT_ADVICE_TIMEOUT_MS } from "./advisor.js";
-export { ENV_ADVISOR_MODEL, ENV_ADVISOR_TASK_EGRESS } from "../kernel/env-names.js";
-export { ENV_ADVISOR } from "../kernel/env-names.js";
-export const ADVISOR_OFF = Object.freeze({ enabled: false, decider: "none", taskEgress: "digest" });
-/**
- * Read the `advisor` block of a project settings file. Absent is off; malformed is off WITH a reason.
- *
- * The reason matters more than it looks: an operator who wrote `"enabeld": true` and got silence would conclude the
- * feature does not work, and an operator who wrote it and got an advisor anyway would have a third party reading
- * their session without having successfully asked for it. Both are worse than a sentence naming the field.
- */
-export function advisorSettingsFrom(raw, env = process.env) {
-    // The environment decides WHETHER, before the workspace is consulted at all. A settings file that asks for an
-    // advisor nobody enabled is not a configuration error; it is simply a project that would use one if the operator
-    // turned it on, so it is reported rather than refused.
-    const requested = env[ENV_ADVISOR]?.trim();
-    if (!requested)
-        return ADVISOR_OFF;
-    if (requested !== "jev")
-        return { ...ADVISOR_OFF, refusal: `${ENV_ADVISOR}=${requested} names no advisor this release knows` };
-    const block = raw === undefined || raw === null ? {} : raw;
-    if (typeof block !== "object" || Array.isArray(block))
-        return { ...ADVISOR_OFF, refusal: "settings.advisor must be an object; no advisor is enabled" };
-    const fields = block;
-    // `model` stays KNOWN so the refusal below can say why it is refused, rather than reporting it as a typo.
-    const unknownKeys = Object.keys(fields).filter((key) => !["enabled", "decider", "model", "timeoutMs"].includes(key));
-    // Key names are echoed back, and this file is workspace-writable: a key containing an escape sequence or a
-    // newline would otherwise forge lines in the `/grants` panel, which is a trust surface. Review measured a forged
-    // `grant tool:*` line. Sanitised and truncated before it reaches any renderer.
-    if (unknownKeys.length > 0)
-        return {
-            ...ADVISOR_OFF,
-            refusal: `settings.advisor has unknown field(s) ${unknownKeys
-                .map((key) => key.replace(/[^\w.-]/g, "?").slice(0, 40))
-                .join(", ")}`,
-        };
-    // A project may switch it OFF; it may never switch it on, which is why `true` is not read. Anything that is not
-    // exactly `true` disables: `"false"`, `0` and `null` used to leave the advisor ON with no word said, which is
-    // rule 8 inverted — the one control this file retains failing open.
-    if (fields.enabled !== undefined && fields.enabled !== true)
-        return { ...ADVISOR_OFF, refusal: "settings.advisor.enabled is not true for this project" };
-    if (fields.decider !== undefined && fields.decider !== "jev")
-        return { ...ADVISOR_OFF, refusal: `settings.advisor.decider must be "jev"; no advisor is enabled` };
-    // **A model is a DESTINATION, not a narrowing.** Letting this workspace-writable file choose it would let a child
-    // holding `tool:write` point the operator's next session at a generative model of its choosing, billed to the
-    // operator's key — the same self-defeating shape this release moved the enable switch to close, one step
-    // sideways. Review measured it. The model comes from the environment or not at all.
-    if (fields.model !== undefined)
-        return { ...ADVISOR_OFF, refusal: `settings.advisor.model is not a narrowing; set ${ENV_ADVISOR_MODEL} instead` };
-    if (fields.timeoutMs !== undefined &&
-        (!Number.isInteger(fields.timeoutMs) || fields.timeoutMs < 1 || fields.timeoutMs > 30_000))
-        return { ...ADVISOR_OFF, refusal: "settings.advisor.timeoutMs must be an integer between 1 and 30000" };
-    const model = env[ENV_ADVISOR_MODEL]?.trim();
-    const key = env[ENV_ADVISOR_KEY]?.trim();
-    if (!key)
-        return {
-            ...ADVISOR_OFF,
-            refusal: `settings.advisor is enabled but ${ENV_ADVISOR_KEY} is not set; no advisor is enabled`,
-        };
-    return {
-        enabled: true,
-        decider: "jev",
-        taskEgress: env[ENV_ADVISOR_TASK_EGRESS]?.trim() === "raw" ? "raw" : "digest",
-        ...(model ? { model } : {}),
-        // Clamped, never raised: a longer bound is not a narrowing either, and a child-writable 30s would be a stall on
-        // every delegation.
-        ...(fields.timeoutMs !== undefined
-            ? { timeoutMs: Math.min(fields.timeoutMs, DEFAULT_ADVICE_TIMEOUT_MS) }
-            : {}),
-    };
-}
-//# sourceMappingURL=settings.js.map

package/dist/advisors/settings.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../src/advisors/settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,6GAA6G;AAC7G,OAAO,EAAE,eAAe,IAAI,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAClH,OAAO,EAAE,yBAAyB,EAAuB,MAAM,cAAc,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACpF,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAcrD,MAAM,CAAC,MAAM,WAAW,GAAoB,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;AAErH;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY,EAAE,MAAyB,OAAO,CAAC,GAAG;IACpF,8GAA8G;IAC9G,iHAAiH;IACjH,uDAAuD;IACvD,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,SAAS;QAAE,OAAO,WAAW,CAAC;IACnC,IAAI,SAAS,KAAK,KAAK;QACrB,OAAO,EAAE,GAAG,WAAW,EAAE,OAAO,EAAE,GAAG,WAAW,IAAI,SAAS,sCAAsC,EAAE,CAAC;IAExG,MAAM,KAAK,GAAG,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACnD,OAAO,EAAE,GAAG,WAAW,EAAE,OAAO,EAAE,2DAA2D,EAAE,CAAC;IAClG,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,0GAA0G;IAC1G,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACrH,2GAA2G;IAC3G,iHAAiH;IACjH,+EAA+E;IAC/E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QACxB,OAAO;YACL,GAAG,WAAW;YACd,OAAO,EAAE,yCAAyC,WAAW;iBAC1D,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;iBACvD,IAAI,CAAC,IAAI,CAAC,EAAE;SAChB,CAAC;IACJ,gHAAgH;IAChH,8GAA8G;IAC9G,oEAAoE;IACpE,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;QACzD,OAAO,EAAE,GAAG,WAAW,EAAE,OAAO,EAAE,uDAAuD,EAAE,CAAC;IAC9F,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK;QAC1D,OAAO,EAAE,GAAG,WAAW,EAAE,OAAO,EAAE,+DAA+D,EAAE,CAAC;IACtG,kHAAkH;IAClH,8GAA8G;IAC9G,yGAAyG;IACzG,oFAAoF;IACpF,IAAK,MAAkC,CAAC,KAAK,KAAK,SAAS;QACzD,OAAO,EAAE,GAAG,WAAW,EAAE,OAAO,EAAE,kDAAkD,iBAAiB,UAAU,EAAE,CAAC;IACpH,IACE,MAAM,CAAC,SAAS,KAAK,SAAS;QAC9B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,IAAK,MAAM,CAAC,SAAoB,GAAG,CAAC,IAAK,MAAM,CAAC,SAAoB,GAAG,MAAM,CAAC;QAElH,OAAO,EAAE,GAAG,WAAW,EAAE,OAAO,EAAE,mEAAmE,EAAE,CAAC;IAC1G,MAAM,KAAK,GAAG,GAAG,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC7C,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,GAAG;QACN,OAAO;YACL,GAAG,WAAW;YACd,OAAO,EAAE,mCAAmC,eAAe,oCAAoC;SAChG,CAAC;IACJ,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,KAAK;QACd,UAAU,EAAE,GAAG,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;QAC7E,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,gHAAgH;QAChH,oBAAoB;QACpB,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS;YAChC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAmB,EAAE,yBAAyB,CAAC,EAAE;YAChF,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC"}

package/dist/governance/episode-cost-gate.d.ts

@@ -1,31 +0,0 @@
-export declare const DEFAULT_EPISODE_COST_CEILING = 5;
-export type EpisodeCostGateAnswer = {
-    cost: number;
-    ceiling: number;
-    outcome: "continued";
-    newCeiling: number;
-} | {
-    cost: number;
-    ceiling: number;
-    outcome: "stopped";
-};
-export interface EpisodeCostGateHooks {
-    warn(message: string): void;
-    pause?(): Promise<unknown> | unknown;
-    ask?(): Promise<number | null>;
-    resume?(): Promise<unknown> | unknown;
-    stop?(): Promise<unknown> | unknown;
-    gate(event: EpisodeCostGateAnswer): Promise<unknown> | unknown;
-}
-export declare function episodeCostCeilingFromSettings(value: unknown): number;
-export declare class EpisodeCostGate {
-    #private;
-    constructor(ceiling: number);
-    get ceiling(): number;
-    get cost(): number;
-    setCeiling(ceiling: number): void;
-    seedCost(executionId: string, cost: number): void;
-    observe(executionId: string, cost: number | undefined, terminal: boolean, hooks: EpisodeCostGateHooks): Promise<"continue" | "stop">;
-}
-export declare function loadEpisodeCosts(path: string, episodeId: string): Promise<Map<string, number>>;
-//# sourceMappingURL=episode-cost-gate.d.ts.map

package/dist/governance/episode-cost-gate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"episode-cost-gate.d.ts","sourceRoot":"","sources":["../../src/governance/episode-cost-gate.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAE9C,MAAM,MAAM,qBAAqB,GAC7B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,CAAA;CAAE,CAAC;AAE1D,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACrC,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/B,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACtC,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACpC,IAAI,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CAChE;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAMrE;AAED,qBAAa,eAAe;;gBAOd,OAAO,EAAE,MAAM;IAI3B,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAIjC,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAI3C,OAAO,CACX,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,QAAQ,EAAE,OAAO,EACjB,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC;CA8ChC;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAoBpG"}

package/dist/governance/episode-cost-gate.js

@@ -1,112 +0,0 @@
-/** Per-episode cost threshold state shared by every child started by one session. */
-import { readFile } from "node:fs/promises";
-import { readRecords } from "./record.js";
-export const DEFAULT_EPISODE_COST_CEILING = 5;
-export function episodeCostCeilingFromSettings(value) {
-    if (!value || typeof value !== "object" || Array.isArray(value))
-        return DEFAULT_EPISODE_COST_CEILING;
-    const ceiling = value.episodeCostCeiling;
-    return typeof ceiling === "number" && Number.isFinite(ceiling) && ceiling > 0
-        ? ceiling
-        : DEFAULT_EPISODE_COST_CEILING;
-}
-export class EpisodeCostGate {
-    #ceiling;
-    #costs = new Map();
-    #warned = false;
-    #usageWarning = false;
-    #decision;
-    constructor(ceiling) {
-        this.#ceiling = ceiling;
-    }
-    get ceiling() {
-        return this.#ceiling;
-    }
-    get cost() {
-        return [...this.#costs.values()].reduce((sum, value) => sum + value, 0);
-    }
-    setCeiling(ceiling) {
-        if (Number.isFinite(ceiling) && ceiling > 0 && !this.#decision)
-            this.#ceiling = ceiling;
-    }
-    seedCost(executionId, cost) {
-        if (Number.isFinite(cost) && cost >= 0)
-            this.#costs.set(executionId, cost);
-    }
-    async observe(executionId, cost, terminal, hooks) {
-        if (cost === undefined) {
-            if (terminal && !this.#usageWarning) {
-                this.#usageWarning = true;
-                hooks.warn("pi-daddy: provider reported no token usage; the episode cost gate cannot fire");
-            }
-            return "continue";
-        }
-        this.#costs.set(executionId, cost);
-        const total = [...this.#costs.values()].reduce((sum, value) => sum + value, 0);
-        if (!this.#warned && total >= this.#ceiling / 2) {
-            this.#warned = true;
-            hooks.warn(`pi-daddy: episode cost reached 50% of the $${this.#ceiling} ceiling`);
-        }
-        if (total <= this.#ceiling)
-            return "continue";
-        if (this.#decision) {
-            const decision = await this.#decision;
-            if (decision === "stop")
-                await hooks.stop?.();
-            return decision;
-        }
-        this.#decision = this.#decide(total, hooks);
-        return this.#decision;
-    }
-    async #decide(cost, hooks) {
-        await hooks.pause?.();
-        const answer = await hooks.ask?.();
-        if (answer !== undefined && answer !== null && Number.isFinite(answer) && answer > cost) {
-            const prior = this.#ceiling;
-            this.#ceiling = answer;
-            try {
-                await hooks.gate({ cost, ceiling: prior, outcome: "continued", newCeiling: answer });
-            }
-            catch (error) {
-                await hooks.stop?.();
-                throw error;
-            }
-            await hooks.resume?.();
-            return "continue";
-        }
-        try {
-            await hooks.gate({ cost, ceiling: this.#ceiling, outcome: "stopped" });
-        }
-        finally {
-            await hooks.stop?.();
-        }
-        return "stop";
-    }
-}
-export async function loadEpisodeCosts(path, episodeId) {
-    try {
-        const parsed = readRecords(await readFile(path, "utf8"));
-        if (parsed.damage)
-            return new Map();
-        const costs = new Map();
-        for (const record of parsed.records) {
-            const body = record.body;
-            if (body?.event !== "child_lifecycle" || body.episodeId !== episodeId)
-                continue;
-            if (body.state !== "completed" && body.state !== "failed")
-                continue;
-            const usage = body.usage;
-            const cost = usage?.cost?.total;
-            if (typeof body.executionId === "string" && typeof cost === "number" && Number.isFinite(cost) && cost >= 0) {
-                costs.set(body.executionId, cost);
-            }
-        }
-        return costs;
-    }
-    catch (error) {
-        if (error.code === "ENOENT")
-            return new Map();
-        throw error;
-    }
-}
-//# sourceMappingURL=episode-cost-gate.js.map

package/dist/governance/episode-cost-gate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"episode-cost-gate.js","sourceRoot":"","sources":["../../src/governance/episode-cost-gate.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC;AAe9C,MAAM,UAAU,8BAA8B,CAAC,KAAc;IAC3D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,4BAA4B,CAAC;IACrG,MAAM,OAAO,GAAI,KAAiC,CAAC,kBAAkB,CAAC;IACtE,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC;QAC3E,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,4BAA4B,CAAC;AACnC,CAAC;AAED,MAAM,OAAO,eAAe;IAC1B,QAAQ,CAAS;IACjB,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnC,OAAO,GAAG,KAAK,CAAC;IAChB,aAAa,GAAG,KAAK,CAAC;IACtB,SAAS,CAAgC;IAEzC,YAAY,OAAe;QACzB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,UAAU,CAAC,OAAe;QACxB,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1F,CAAC;IAED,QAAQ,CAAC,WAAmB,EAAE,IAAY;QACxC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,OAAO,CACX,WAAmB,EACnB,IAAwB,EACxB,QAAiB,EACjB,KAA2B;QAE3B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;gBACpC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;YAC9F,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,KAAK,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,8CAA8C,IAAI,CAAC,QAAQ,UAAU,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,KAAK,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,UAAU,CAAC;QAC9C,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;YACtC,IAAI,QAAQ,KAAK,MAAM;gBAAE,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAC9C,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,KAA2B;QACrD,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC;QACnC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,IAAI,EAAE,CAAC;YACxF,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC5B,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;YACvF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBACrB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACvB,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACzE,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QACvB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,SAAiB;IACpE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,MAAM;YAAE,OAAO,IAAI,GAAG,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QACxC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,MAAM,CAAC,IAA+B,CAAC;YACpD,IAAI,IAAI,EAAE,KAAK,KAAK,iBAAiB,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;gBAAE,SAAS;YAChF,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;gBAAE,SAAS;YACpE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAmD,CAAC;YACvE,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC;YAChC,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;gBAC3G,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,GAAG,EAAE,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/extensions/advisor-session.ts

@@ -1,67 +0,0 @@
-/**
- * Build the session's advisor from its committed settings (ADR-0077).
- *
- * Composition, because everything here is I/O or policy the layers must not hold: reading the settings file,
- * reaching for the key in the environment, and writing the `advice` record to the ledger. The advisors layer does
- * none of that — it is handed a decider and a recorder.
- *
- * An advisor with no ledger records nothing and still answers. That is deliberate and worth saying: the ledger is
- * opt-in (ADR-0037), and making advice conditional on it would mean an ungoverned session behaved differently from
- * a governed one for reasons that have nothing to do with the advisor.
- */
-import { createAdvisor, type AdviceRecord, type Advisor } from "../src/advisors/advisor.ts";
-import { nullDecider } from "../src/advisors/decider.ts";
-import { jevDecider } from "../src/advisors/jev.ts";
-import { ADVISOR_KEY_ENV, advisorSettingsFrom, type AdvisorSettings } from "../src/advisors/settings.ts";
-import { appendRecord } from "../src/governance/record.ts";
-
-export interface AdvisorSession {
-  readonly settings: AdvisorSettings;
-  readonly advisor: Advisor;
-  /**
-   * Which decider was actually constructed — `"none"` or `"jev"`.
-   *
-   * Exposed because a test asserting only `settings` could not tell: review measured that removing the key check
-   * here left every test green, since the disabled wrapper returns before touching the decider. A named breaking
-   * change that does not break the test is decoration (AGENTS.md).
-   */
-  readonly deciderName: string;
-}
-
-export function createAdvisorSession(input: {
-  /** The `advisor` block of `.pi/pi-daddy/settings.json`, or undefined when there is none. */
-  block: unknown;
-  ledgerPath?: string;
-  env?: NodeJS.ProcessEnv;
-  episodeId?: string;
-}): AdvisorSession {
-  const env = input.env ?? process.env;
-  const settings = advisorSettingsFrom(input.block, env);
-  const record = async (entry: AdviceRecord): Promise<void> => {
-    if (!input.ledgerPath) return;
-    // Never strict: advice is an observation beside a decision that has already been taken, so a ledger failure
-    // must not change what the caller does — `execute-child`'s rule for a terminal lifecycle append.
-    await appendRecord(input.ledgerPath, "advice", entry).catch(() => undefined);
-  };
-  const decider =
-    settings.enabled && settings.decider === "jev"
-      ? jevDecider({
-          // Trimmed for the reason `settings` trims when validating: a key exported with a trailing newline
-          // passed validation and was then sent verbatim.
-          apiKey: env[ADVISOR_KEY_ENV]?.trim() ?? "",
-          ...(settings.model ? { model: settings.model } : {}),
-        })
-      : nullDecider;
-  return {
-    settings,
-    deciderName: decider.name,
-    advisor: createAdvisor({
-      decider,
-      record,
-      enabled: settings.enabled,
-      taskEgress: settings.taskEgress,
-      ...(input.episodeId ? { episodeId: input.episodeId } : {}),
-      ...(settings.timeoutMs ? { timeoutMs: settings.timeoutMs } : {}),
-    }),
-  };
-}

package/extensions/effort-advice.ts

@@ -1,112 +0,0 @@
-/**
- * The first decision point that consults an advisor (ADR-0077, roadmap PR 8): how hard a child should think.
- *
- * **Why this one.** It is the shape the boundary was designed for. The options are not invented by the advisor —
- * they are the thinking levels this session's own model reports it supports (`supportedModelEfforts`), so the
- * advisor picks among things the caller already had, which is the entire permitted verb list. It touches no
- * capability, no gate and no grant: the worst an advisor can do here is make a child think harder or less hard
- * than a human would have chosen, and the ledger says it did.
- *
- * **Only when the caller said nothing.** An explicit `thinking` on the call is the operator's or the model's own
- * choice and is never second-guessed; advice fills a blank, it does not overrule. With no advisor, no key, no
- * answer, a timeout or an unrecognised response, the blank stays blank and the child is spawned exactly as it is
- * today — which is the property that keeps advisors optional rather than load-bearing.
- */
-import { supportedModelEfforts } from "../src/kernel/model-preflight.ts";
-import type { Advisor } from "../src/advisors/advisor.ts";
-import { resolvedModelOf, type ResolvedDefinitionRuntime } from "./definition-runtime.ts";
-
-/** What pi's resolved catalogue entry carries that decides which efforts exist. */
-interface ResolvedModel {
-  reasoning: boolean;
-  thinkingLevelMap?: Partial<Record<string, string | null>>;
-}
-
-export const EFFORT_PURPOSE = "child-effort";
-
-export async function adviseEffort(input: {
-  /** The session, read here rather than passed as an advisor: an argument can be severed and nothing notices. */
-  session: { advisorSession: { advisor: Advisor } };
-  /** Absent means the caller chose one; nothing is asked and nothing is recorded. */
-  requested?: string;
-  /**
-   * The model the CHILD will run on, `provider/id`, not the session's.
-   *
-   * Review measured the first version reading the parent session's model while the child was spawned on
-   * `spec.model`: the levels offered then came from a model the child would never use, and pi clamps rather than
-   * refuses, so the effect was a silently shifted effort rather than a loud failure.
-   */
-  model?: string;
-  registry: { find(provider: string, modelId: string): unknown };
-  task: string;
-  executionId?: string;
-  agent?: string;
-  fallback?: ResolvedDefinitionRuntime;
-  signal?: AbortSignal;
-}): Promise<string | undefined> {
-  const advisor = input.session.advisorSession.advisor;
-  const slash = input.model === undefined ? -1 : input.model.indexOf("/");
-  if (input.requested !== undefined || slash <= 0) return input.requested;
-  const resolved = input.registry.find(input.model!.slice(0, slash), input.model!.slice(slash + 1)) as
-    ResolvedModel | undefined;
-  if (!resolved) return undefined;
-  const levels = supportedModelEfforts(resolved);
-  // One option is not a choice, and a model with no reasoning has exactly one. Asking would spend a call and a
-  // ledger line to be told the only thing that could be said.
-  if (levels.length < 2) return undefined;
-
-  const task = advisor.task(input.task);
-  const advice = await advisor.ask(
-    EFFORT_PURPOSE,
-    {
-      // Raw text is a separate opt-in from enabling the advisor. By default `advisor.task` returns only structural
-      // facts; raw mode preserves the prior request, including the definition name.
-      state: { task, ...(typeof task === "string" && input.agent ? { definition: input.agent } : {}) },
-      questions: {
-        effort: {
-          kind: "choice",
-          instructions:
-            "How much reasoning effort does this task need? Choose the cheapest level that would still do it well.",
-          options: Object.fromEntries(levels.map((level) => [level, effortDescription(level)])),
-        },
-      },
-    },
-    input.signal,
-    input.executionId,
-    (result) => {
-      const answer = result?.answers.effort;
-      const advised = answer?.kind === "choice" && (levels as readonly string[]).includes(answer.value);
-      return {
-        resolvedModel: resolvedModelOf(input.fallback?.model ?? input.model),
-        modelSource: input.fallback?.modelSource ?? "pi",
-        thinkingLevel: advised ? answer.value : (input.fallback?.thinking ?? null),
-        thinkingSource: advised ? "advisor" : (input.fallback?.thinkingSource ?? "pi"),
-      };
-    },
-  );
-  const chosen = advice?.answers.effort;
-  // Belt and braces: `parseAnswer` already refuses a choice outside the options it was given, so this can only
-  // fire if a future decider is written that does not. An effort the model does not support would be refused by
-  // pi in the child, after the spawn, which is a worse place to find out.
-  if (!chosen || chosen.kind !== "choice" || !(levels as readonly string[]).includes(chosen.value)) return undefined;
-  return chosen.value;
-}
-
-function effortDescription(level: string): string {
-  switch (level) {
-    case "off":
-      return "No reasoning. Mechanical work: a rename, a formatting pass, reading one file back.";
-    case "minimal":
-      return "Almost none. A single obvious step with no choice in it.";
-    case "low":
-      return "A little. One decision, or a change confined to one file.";
-    case "medium":
-      return "Ordinary. Several steps, or a change that has to fit existing code.";
-    case "high":
-      return "Substantial. Design choices, or work across several files that must stay consistent.";
-    case "xhigh":
-      return "Very high. A subtle problem where the obvious approach is likely to be wrong.";
-    default:
-      return "The most this model can do. Reserve it for work that has defeated a lesser effort.";
-  }
-}

package/extensions/pruning-advice.ts

@@ -1,133 +0,0 @@
-/**
- * The second decision point: which of the parent's turns a `pruned` handoff actually carries (ADR-0077).
- *
- * The deterministic rule keeps the last few turns plus older ones naming the given files. That rule is honest and
- * its recall is unmeasured — it is a proxy for "what matters here", not an answer. An advisor can judge the turns
- * against the task the child is about to be given, which the rule cannot see.
- *
- * **It can only take turns away.** The candidates are exactly what `selectPrunedTurns` produced; the advisor is
- * asked one boolean per candidate and the ids it kept are handed back. Staging then intersects those ids with the
- * candidates again, so even a selector that invented an id, returned one from another session, or returned every
- * id in existence cannot put a turn in front of a child that the rule did not already offer. Narrowing is the only
- * verb available, which is what makes this advice rather than authority.
- *
- * With no advisor, no answer, a timeout or an unrecognised response, nothing is returned and the rule's own
- * selection stands — the same "identical to today" property the effort decision point has.
- */
-import { selectPrunedTurns, type ContextRequest } from "../src/kernel/context-handoff.ts";
-import type { AdviceAttribution, Advisor } from "../src/advisors/advisor.ts";
-import type { Question } from "../src/advisors/decider.ts";
-
-export const PRUNING_PURPOSE = "handoff-pruning";
-
-/**
- * How many candidates may be judged. One question per turn, and a decision a human is waiting on should not carry
- * an unbounded number of them. Beyond this the OLDEST candidates go unjudged and are kept, which is the safe
- * direction: an unjudged turn is never dropped, so the advisor can still only narrow.
- */
-export const MAX_JUDGED_TURNS = 12;
-
-/** Just enough of the parent's session for the rule; the same shape `context-staging` reduces entries to. */
-export interface ParentTurnSource {
-  getEntries(): Array<{ id: string; type: string }>;
-}
-
-export async function advisePruning(input: {
-  session: { advisorSession: { advisor: Advisor }; parentSession?: ParentTurnSource };
-  granted: ContextRequest;
-  task: string;
-  executionId?: string;
-  /** The current delegation call, excluded from advisor input because its arguments contain the raw task. */
-  toolCallId?: string;
-  attribution?: AdviceAttribution;
-  signal?: AbortSignal;
-}): Promise<string[] | undefined> {
-  if (input.granted.mode !== "pruned" || !input.session.parentSession) return undefined;
-  const all = turnsOf(input.session.parentSession);
-  const candidates = selectPrunedTurns(all, {
-    ...(input.granted.turns !== undefined ? { turns: input.granted.turns } : {}),
-    ...(input.granted.files !== undefined ? { files: input.granted.files } : {}),
-  }).kept;
-  const privateIds = new Set(
-    input.toolCallId ? all.filter((turn) => turn.toolCallIds.includes(input.toolCallId!)).map((turn) => turn.id) : [],
-  );
-  const privateCandidates = candidates.filter((turn) => privateIds.has(turn.id));
-  const candidatesForAdvice = candidates.filter((turn) => !privateCandidates.includes(turn));
-  if (candidatesForAdvice.length < 2) return undefined;
-  // **Judge the MOST RECENT candidates, and keep the rest unjudged.** This was `> MAX_JUDGED_TURNS` → give up
-  // entirely, which was fine while the rule offered six turns and became a silent feature death the moment
-  // `DEFAULT_CONTEXT_TURNS` rose to 20: every default request would have exceeded the bound, so the pruning
-  // decision point shipped in 0.35.0 would never have fired again. Found while raising the default, which is
-  // the only reason it was found at all.
-  //
-  // Judging a SUBSET is still only narrowing — an unjudged turn is kept, never dropped — so the attenuation
-  // property is untouched. The recent end is judged because that is where the rule's own recall is
-  // concentrated, and because a turn adjacent to the task is the one a wrong answer costs most.
-  const unjudged = candidatesForAdvice.slice(0, Math.max(0, candidatesForAdvice.length - MAX_JUDGED_TURNS));
-  const judged = candidatesForAdvice.slice(unjudged.length);
-
-  const task = input.session.advisorSession.advisor.task(input.task);
-  const taskDescription = typeof task === "string" ? task.slice(0, 2000) : JSON.stringify(task);
-  const questions: Record<string, Question> = {};
-  for (const [index, turn] of judged.entries())
-    questions[`turn${index}`] = {
-      kind: "noul",
-      // Both bounded: the task is embedded once per candidate, so an unbounded task became a request twelve times
-      // its size, on a two-second budget and the operator's key.
-      instructions: `Would a sub-agent doing this task be helped by seeing this part of the parent's session?\n\nTASK: ${taskDescription}\n\nPART:\n${turn.text.slice(0, 2000)}`,
-      whenTrue: "It bears on the task: a decision, a constraint, a fact the task depends on.",
-      whenFalse: "It does not: unrelated work, chatter, or something the task already states.",
-    };
-
-  const advice = await input.session.advisorSession.advisor.ask(
-    PRUNING_PURPOSE,
-    // The state is empty: everything the advisor needs is already in the questions, and a question carries the
-    // task and one turn rather than the whole session. Nothing here is recorded — `createAdvisor` writes keys.
-    { state: {}, questions },
-    input.signal,
-    input.executionId,
-    input.attribution,
-  );
-  if (!advice) return undefined;
-  // Every candidate or none. A response missing eleven of twelve answers would otherwise read as "drop eleven",
-  // which is a narrowing nobody asked for rather than the "unrecognised response means no advice" contract.
-  if (judged.some((_, index) => advice.answers[`turn${index}`]?.kind !== "noul")) return undefined;
-  const kept = [
-    ...privateCandidates.map((turn) => turn.id),
-    ...unjudged.map((turn) => turn.id),
-    ...judged.filter((_, index) => (advice.answers[`turn${index}`] as { value: boolean }).value).map((turn) => turn.id),
-  ];
-  // An advisor that drops everything is answering a different question from the one that was asked; the rule's
-  // selection stands rather than handing a child a handoff with nothing in it.
-  return kept.length === 0 ? undefined : kept;
-}
-
-function turnsOf(session: ParentTurnSource): Array<{ id: string; text: string; toolCallIds: string[] }> {
-  try {
-    return session
-      .getEntries()
-      .filter((entry) => entry.type === "message")
-      .map((entry) => {
-        const message = (entry as { message?: unknown }).message ?? entry;
-        const content =
-          typeof message === "object" && message !== null && Array.isArray((message as { content?: unknown }).content)
-            ? (message as { content: unknown[] }).content
-            : [];
-        return {
-          id: entry.id,
-          text: JSON.stringify(message),
-          toolCallIds: content
-            .filter(
-              (part): part is { type: "toolCall"; id: string } =>
-                typeof part === "object" &&
-                part !== null &&
-                (part as { type?: unknown }).type === "toolCall" &&
-                typeof (part as { id?: unknown }).id === "string",
-            )
-            .map((part) => part.id),
-        };
-      });
-  } catch {
-    return [];
-  }
-}