pi-harness-delegate 0.1.0 → 0.2.0

package/extensions/templates.ts

@@ -4,163 +4,180 @@ import { join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import type { NormalizedPermission } from './harnesses/types.ts';
 
-export type PermissionMode =
-	| 'plan'
-	| 'acceptEdits'
-	| 'bypassPermissions'
-	| 'dontAsk'
-	| 'auto'
-	| 'manual';
+export type PermissionMode = 'plan' | 'acceptEdits' | 'bypassPermissions' | 'dontAsk' | 'auto' | 'manual';
 
 const PERMISSION_MODES = new Set<PermissionMode>([
-	'plan',
-	'acceptEdits',
-	'bypassPermissions',
-	'dontAsk',
-	'auto',
-	'manual',
+  'plan',
+  'acceptEdits',
+  'bypassPermissions',
+  'dontAsk',
+  'auto',
+  'manual',
 ]);
 
 export interface DelegateTemplate {
-	name: string;
-	description: string;
-	permission: NormalizedPermission;
-	/** Native harness permission string if user used escape hatch. */
-	nativePermission?: string;
-	/** Legacy raw permissionMode for transcript compat. */
-	permissionMode: PermissionMode;
-	model?: string;
-	maxBudgetUsd?: number;
-	skill?: string;
-	defaultTask?: string;
-	defaultScope?: string;
-	prompt: string;
-	harness?: string;
+  name: string;
+  description: string;
+  permission: NormalizedPermission;
+  /** Native harness permission string if user used escape hatch. */
+  nativePermission?: string;
+  /** Legacy raw permissionMode for transcript compat. */
+  permissionMode: PermissionMode;
+  model?: string;
+  maxBudgetUsd?: number;
+  skill?: string;
+  defaultTask?: string;
+  defaultScope?: string;
+  prompt: string;
+  harness?: string;
 }
 
-export function normalizePermission(raw: string | undefined, fallbackMode: string | undefined): { permission: NormalizedPermission; nativePermission?: string; permissionMode: PermissionMode } {
-	// Prefer normalized permission
-	if (raw) {
-		const lower = raw.trim().toLowerCase();
-		if (lower === 'readonly' || lower === 'read-only' || lower === 'read_only') return { permission: 'readonly', permissionMode: 'plan' };
-		if (lower === 'edit' || lower === 'acceptEdits' || lower === 'accept-edits') return { permission: 'edit', permissionMode: 'acceptEdits' };
-		if (lower === 'danger' || lower === 'bypassPermissions' || lower === 'danger-full-access' || lower === 'danger_full_access') return { permission: 'danger', permissionMode: 'bypassPermissions' };
-		// Unknown native — treat as native escape hatch
-		return { permission: 'edit', nativePermission: raw.trim(), permissionMode: 'acceptEdits' };
-	}
-	// Legacy permissionMode mapping
-	if (fallbackMode && PERMISSION_MODES.has(fallbackMode as PermissionMode)) {
-		const m = fallbackMode as PermissionMode;
-		if (m === 'plan') return { permission: 'readonly', permissionMode: m };
-		if (m === 'bypassPermissions') return { permission: 'danger', permissionMode: m };
-		return { permission: 'edit', permissionMode: m };
-	}
-	return { permission: 'edit', permissionMode: 'acceptEdits' };
+export function normalizePermission(
+  raw: string | undefined,
+  fallbackMode: string | undefined,
+): { permission: NormalizedPermission; nativePermission?: string; permissionMode: PermissionMode } {
+  // Prefer normalized permission
+  if (raw) {
+    const lower = raw.trim().toLowerCase();
+    if (lower === 'readonly' || lower === 'read-only' || lower === 'read_only')
+      return { permission: 'readonly', permissionMode: 'plan' };
+    if (lower === 'edit' || lower === 'acceptEdits' || lower === 'accept-edits')
+      return { permission: 'edit', permissionMode: 'acceptEdits' };
+    if (
+      lower === 'danger' ||
+      lower === 'bypassPermissions' ||
+      lower === 'danger-full-access' ||
+      lower === 'danger_full_access'
+    )
+      return { permission: 'danger', permissionMode: 'bypassPermissions' };
+    // Unknown native — treat as native escape hatch
+    return { permission: 'edit', nativePermission: raw.trim(), permissionMode: 'acceptEdits' };
+  }
+  // Legacy permissionMode mapping
+  if (fallbackMode && PERMISSION_MODES.has(fallbackMode as PermissionMode)) {
+    const m = fallbackMode as PermissionMode;
+    if (m === 'plan') return { permission: 'readonly', permissionMode: m };
+    if (m === 'bypassPermissions') return { permission: 'danger', permissionMode: m };
+    return { permission: 'edit', permissionMode: m };
+  }
+  return { permission: 'edit', permissionMode: 'acceptEdits' };
 }
 
 /** Parse a template file: frontmatter (---\nkey: value\n---) + markdown body. */
 export function parseTemplate(text: string): DelegateTemplate | null {
-	const m = /^---\n([\s\S]*?)\n---\n?([\s\S]*)$/.exec(text.trimStart());
-	if (!m) return null;
-
-	const meta: Record<string, string> = {};
-	for (const line of m[1].split('\n')) {
-		const i = line.indexOf(':');
-		if (i <= 0) continue;
-		meta[line.slice(0, i).trim()] = line.slice(i + 1).trim();
-	}
-
-	const name = meta.name?.trim();
-	if (!name) return null;
-
-	const permRaw = meta.permission?.trim();
-	const permModeRaw = meta.permissionMode?.trim() ?? meta.sandbox?.trim();
-	const norm = normalizePermission(permRaw, permModeRaw);
-
-	const budget = meta.maxBudgetUsd ? Number(meta.maxBudgetUsd) : NaN;
-
-	return {
-		name,
-		description: meta.description ?? '',
-		permission: norm.permission,
-		nativePermission: norm.nativePermission,
-		permissionMode: norm.permissionMode,
-		model: meta.model || undefined,
-		maxBudgetUsd: Number.isFinite(budget) && budget > 0 ? budget : undefined,
-		skill: meta.skill || undefined,
-		defaultTask: meta.defaultTask || undefined,
-		defaultScope: meta.defaultScope || undefined,
-		prompt: m[2].trim(),
-		harness: meta.harness || undefined,
-	};
+  const m = /^---\n([\s\S]*?)\n---\n?([\s\S]*)$/.exec(text.trimStart());
+  if (!m) return null;
+
+  const meta: Record<string, string> = {};
+  for (const line of m[1].split('\n')) {
+    const i = line.indexOf(':');
+    if (i <= 0) continue;
+    meta[line.slice(0, i).trim()] = line.slice(i + 1).trim();
+  }
+
+  const name = meta.name?.trim();
+  if (!name) return null;
+
+  const permRaw = meta.permission?.trim();
+  const permModeRaw = meta.permissionMode?.trim() ?? meta.sandbox?.trim();
+  const norm = normalizePermission(permRaw, permModeRaw);
+
+  const budget = meta.maxBudgetUsd ? Number(meta.maxBudgetUsd) : NaN;
+
+  return {
+    name,
+    description: meta.description ?? '',
+    permission: norm.permission,
+    nativePermission: norm.nativePermission,
+    permissionMode: norm.permissionMode,
+    model: meta.model || undefined,
+    maxBudgetUsd: Number.isFinite(budget) && budget > 0 ? budget : undefined,
+    skill: meta.skill || undefined,
+    defaultTask: meta.defaultTask || undefined,
+    defaultScope: meta.defaultScope || undefined,
+    prompt: m[2].trim(),
+    harness: meta.harness || undefined,
+  };
 }
 
 function loadDir(dir: string, out: Map<string, DelegateTemplate>): void {
-	if (!existsSync(dir)) return;
-	for (const f of readdirSync(dir)) {
-		if (!f.endsWith('.md')) continue;
-		try {
-			const t = parseTemplate(readFileSync(join(dir, f), 'utf8'));
-			if (t) out.set(t.name, t);
-		} catch {
-			// skip unreadable files
-		}
-	}
+  if (!existsSync(dir)) return;
+  for (const f of readdirSync(dir)) {
+    if (!f.endsWith('.md')) continue;
+    try {
+      const t = parseTemplate(readFileSync(join(dir, f), 'utf8'));
+      if (t) out.set(t.name, t);
+    } catch {
+      // skip unreadable files
+    }
+  }
 }
 
 export function builtinTemplatesDir(): string {
-	return fileURLToPath(new URL('../templates/', import.meta.url));
+  return fileURLToPath(new URL('../templates/', import.meta.url));
 }
 
 export function builtinHarnessTemplatesDir(harness: string): string {
-	return fileURLToPath(new URL(`../templates/${harness}/`, import.meta.url));
+  return fileURLToPath(new URL(`../templates/${harness}/`, import.meta.url));
 }
 
 export function sharedTemplatesDir(): string {
-	return fileURLToPath(new URL('../templates/shared/', import.meta.url));
+  return fileURLToPath(new URL('../templates/shared/', import.meta.url));
 }
 
 export function userTemplatesDir(harness?: string): string {
-	const dir = process.env.PI_CODING_AGENT_DIR ?? join(homedir(), '.pi', 'agent');
-	if (harness) return join(dir, 'delegate', 'templates', harness);
-	return join(dir, 'delegate', 'templates');
+  const dir = process.env.PI_CODING_AGENT_DIR ?? join(homedir(), '.pi', 'agent');
+  if (harness) return join(dir, 'delegate', 'templates', harness);
+  return join(dir, 'delegate', 'templates');
 }
 
 export function projectTemplatesDir(cwd: string, harness?: string): string {
-	if (harness) return join(cwd, '.pi', 'delegate', 'templates', harness);
-	return join(cwd, '.pi', 'delegate', 'templates');
+  if (harness) return join(cwd, '.pi', 'delegate', 'templates', harness);
+  return join(cwd, '.pi', 'delegate', 'templates');
+}
+
+/** Minimal trust gate for project-local templates — untrusted clones must not override builtins. */
+function isTrusted(cwd: string): boolean {
+  if (process.env.PI_TRUSTED === '1' || process.env.PI_DELEGATE_TRUSTED === '1') return true;
+  try {
+    return readFileSync(join(cwd, '.pi', 'trusted'), 'utf8').trim() === '1';
+  } catch {
+    return false;
+  }
 }
 
 /** Legacy dirs for compat */
 function legacyUserTemplatesDir(): string {
-	const dir = process.env.PI_CODING_AGENT_DIR ?? join(homedir(), '.pi', 'agent');
-	return join(dir, 'claude-delegate', 'templates');
+  const dir = process.env.PI_CODING_AGENT_DIR ?? join(homedir(), '.pi', 'agent');
+  return join(dir, 'claude-delegate', 'templates');
 }
 function legacyProjectTemplatesDir(cwd: string): string {
-	return join(cwd, '.pi', 'claude-delegate', 'templates');
+  return join(cwd, '.pi', 'claude-delegate', 'templates');
 }
 
 /** Legacy root < shared < harness builtins < legacyUser < user < user/harness < legacyProject < project < project/harness (later wins). */
 export function loadTemplates(cwd: string, harnessName?: string): Map<string, DelegateTemplate> {
-	const out = new Map<string, DelegateTemplate>();
-	const harness = harnessName ?? 'claude';
-	// legacy root builtins (templates/*.md) lowest — for migration from pi-claude-delegate
-	loadDir(builtinTemplatesDir(), out);
-	// shared canonical bodies
-	loadDir(sharedTemplatesDir(), out);
-	// harness-specific builtins override shared
-	loadDir(builtinHarnessTemplatesDir(harness), out);
-	// user globals: legacy before new so new wins
-	loadDir(legacyUserTemplatesDir(), out);
-	loadDir(userTemplatesDir(), out);
-	loadDir(userTemplatesDir(harness), out);
-	// project locals: legacy before new so new wins
-	loadDir(legacyProjectTemplatesDir(cwd), out);
-	loadDir(projectTemplatesDir(cwd), out);
-	loadDir(projectTemplatesDir(cwd, harness), out);
-	return out;
+  const out = new Map<string, DelegateTemplate>();
+  const harness = harnessName ?? 'claude';
+  // legacy root builtins (templates/*.md) lowest — for migration from pi-claude-delegate
+  loadDir(builtinTemplatesDir(), out);
+  // shared canonical bodies
+  loadDir(sharedTemplatesDir(), out);
+  // harness-specific builtins override shared
+  loadDir(builtinHarnessTemplatesDir(harness), out);
+  // user globals: legacy before new so new wins
+  loadDir(legacyUserTemplatesDir(), out);
+  loadDir(userTemplatesDir(), out);
+  loadDir(userTemplatesDir(harness), out);
+  // project locals: legacy before new so new wins — only if trusted
+  if (isTrusted(cwd)) {
+    loadDir(legacyProjectTemplatesDir(cwd), out);
+    loadDir(projectTemplatesDir(cwd), out);
+    loadDir(projectTemplatesDir(cwd, harness), out);
+  }
+  return out;
 }
 
 export function loadAllTemplates(cwd: string): Map<string, DelegateTemplate> {
-	return loadTemplates(cwd);
+  return loadTemplates(cwd);
 }

package/extensions/usage.ts

@@ -1,11 +1,11 @@
 import type { Usage } from '@earendil-works/pi-ai';
 
 export interface HarnessUsage {
-	inputTokens: number;
-	outputTokens: number;
-	cacheCreationInputTokens: number;
-	cacheReadInputTokens: number;
-	totalCostUsd: number;
+  inputTokens: number;
+  outputTokens: number;
+  cacheCreationInputTokens: number;
+  cacheReadInputTokens: number;
+  totalCostUsd: number;
 }
 
 export type ClaudeUsage = HarnessUsage;
@@ -15,26 +15,26 @@ export type ClaudeUsage = HarnessUsage;
  * in the pi footer token/cost stats and /session totals.
  */
 export function mapHarnessUsage(u: HarnessUsage): Usage {
-	const input = u.inputTokens + u.cacheCreationInputTokens;
-	const cacheRead = u.cacheReadInputTokens;
-	const output = u.outputTokens;
-	const totalTokens = input + output + cacheRead;
-	return {
-		input,
-		output,
-		cacheRead,
-		cacheWrite: 0,
-		totalTokens,
-		cost: {
-			input: 0,
-			output: 0,
-			cacheRead: 0,
-			cacheWrite: 0,
-			total: u.totalCostUsd,
-		},
-	};
+  const input = u.inputTokens + u.cacheCreationInputTokens;
+  const cacheRead = u.cacheReadInputTokens;
+  const output = u.outputTokens;
+  const totalTokens = input + output + cacheRead;
+  return {
+    input,
+    output,
+    cacheRead,
+    cacheWrite: 0,
+    totalTokens,
+    cost: {
+      input: 0,
+      output: 0,
+      cacheRead: 0,
+      cacheWrite: 0,
+      total: u.totalCostUsd,
+    },
+  };
 }
 
 export function mapClaudeUsage(u: ClaudeUsage): Usage {
-	return mapHarnessUsage(u);
+  return mapHarnessUsage(u);
 }

package/package.json

@@ -1,58 +1,71 @@
 {
-	"name": "pi-harness-delegate",
-	"version": "0.1.0",
-	"description": "Delegate work to any harness (Claude Code, Muse, OpenCode, Amp) from the pi coding agent — code reviews, plans, implementation, security audits, docs, or your own custom templates.",
-	"type": "module",
-	"files": [
-		"extensions",
-		"templates",
-		"README.md",
-		"LICENSE"
-	],
-	"keywords": [
-		"pi-package",
-		"pi",
-		"coding-agent",
-		"claude",
-		"codex",
-		"opencode",
-		"amp",
-		"delegate",
-		"subagent",
-		"code-review",
-		"harness"
-	],
-	"license": "MIT",
-	"author": "Jorge Barnaby",
-	"repository": {
-		"type": "git",
-		"url": "git+https://github.com/yorch/pi-harness-delegate.git"
-	},
-	"bugs": {
-		"url": "https://github.com/yorch/pi-harness-delegate/issues"
-	},
-	"scripts": {
-		"typecheck": "tsc --noEmit",
-		"test": "node --experimental-strip-types --test tests/**/*.test.ts"
-	},
-	"peerDependencies": {
-		"@earendil-works/pi-ai": "*",
-		"@earendil-works/pi-coding-agent": "*",
-		"@earendil-works/pi-tui": "*",
-		"typebox": "*"
-	},
-	"devDependencies": {
-		"@earendil-works/pi-ai": "^0.84.1",
-		"@earendil-works/pi-coding-agent": "^0.84.1",
-		"@earendil-works/pi-tui": "^0.84.1",
-		"@types/node": "24.x",
-		"typebox": "^1.3.7",
-		"typescript": "^5.9.0"
-	},
-	"pi": {
-		"extensions": [
-			"./extensions/index.ts"
-		],
-		"image": "https://raw.githubusercontent.com/yorch/pi-harness-delegate/main/docs/assets/claude-delegate-preview.png"
-	}
+  "name": "pi-harness-delegate",
+  "version": "0.2.0",
+  "description": "Delegate work to any harness (Claude Code, Muse, OpenCode, Amp) from the pi coding agent \u2014 code reviews, plans, implementation, security audits, docs, or your own custom templates.",
+  "type": "module",
+  "packageManager": "bun@1.3.14",
+  "engines": {
+    "node": "26.x"
+  },
+  "files": [
+    "extensions",
+    "templates",
+    "README.md",
+    "LICENSE"
+  ],
+  "keywords": [
+    "pi-package",
+    "pi",
+    "coding-agent",
+    "claude",
+    "codex",
+    "opencode",
+    "amp",
+    "delegate",
+    "subagent",
+    "code-review",
+    "harness"
+  ],
+  "license": "MIT",
+  "author": "Jorge Barnaby",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/yorch/pi-harness-delegate.git"
+  },
+  "bugs": {
+    "url": "https://github.com/yorch/pi-harness-delegate/issues"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "test": "bun test",
+    "lint": "biome check .",
+    "lint:fix": "biome check --write .",
+    "verify": "bun run lint && bun run typecheck && bun run test",
+    "changeset": "changeset",
+    "version-packages": "changeset version && bun install",
+    "release": "bun run verify && node scripts/check-packables.mjs && changeset publish"
+  },
+  "peerDependencies": {
+    "@earendil-works/pi-ai": "*",
+    "@earendil-works/pi-coding-agent": "*",
+    "@earendil-works/pi-tui": "*",
+    "typebox": "*"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "2.5.10",
+    "@changesets/changelog-github": "1.0.0",
+    "@changesets/cli": "3.0.1",
+    "@earendil-works/pi-ai": "0.84.3",
+    "@earendil-works/pi-coding-agent": "0.84.3",
+    "@earendil-works/pi-tui": "0.84.3",
+    "@types/node": "26.3.0",
+    "typebox": "1.3.18",
+    "typescript": "7.0.2"
+  },
+  "pi": {
+    "extensions": [
+      "./extensions/index.ts"
+    ],
+    "image": "https://raw.githubusercontent.com/yorch/pi-harness-delegate/main/docs/assets/claude-delegate-preview.png"
+  }
 }