pi-session-mcp 0.8.3 → 0.12.0

package/docs/evaluation/extension-functions-2026-10-17/bridges/run.mjs

@@ -0,0 +1,36 @@
+import {spawn} from 'node:child_process';
+import {mkdtemp,mkdir,readFile,readdir,writeFile,rm} from 'node:fs/promises';
+import {randomUUID,createHash} from 'node:crypto';
+import {homedir} from 'node:os';
+import {dirname,join,resolve} from 'node:path';
+import {fileURLToPath} from 'node:url';
+const mode=process.argv[2];
+if(!['web','openwiki'].includes(mode))throw Error('mode_required');
+const repo=process.cwd(),here=dirname(fileURLToPath(import.meta.url));
+const {sourceBinding}=await import(new URL('../../../..'+'/.profile-eval/eval/profiles/files.js',import.meta.url));
+const source=await sourceBinding(repo),startedAt=new Date().toISOString();
+if(source.digest!=='sha256:a4524626851448908b8d21ecbd7248c9956ce830406e81c45fda46c8eb6fffc5')throw Error('source_binding_changed');
+const harness=[];for(const name of ['run.mjs','worker.mjs','guard.mjs'])harness.push({path:name,sha256:createHash('sha256').update(await readFile(join(here,name))).digest('hex')});
+const id='extension-functions-bridges-'+randomUUID(),out=join(repo,'eval/results',id);
+await mkdir(out,{mode:0o700});await writeFile(join(out,'.owner'),id,{flag:'wx',mode:0o600});
+const scope=await mkdtemp('/tmp/pi-functions-');await writeFile(join(scope,'.owner'),id,{mode:0o600});
+const child=spawn(process.execPath,[join(here,'worker.mjs'),mode],{cwd:repo,detached:true,stdio:['ignore','pipe','pipe'],env:{HOME:scope,PATH:dirname(process.execPath)+':/usr/bin:/bin',EXT_FUNCTION_SCOPE:scope,EXT_FUNCTION_OWNER:id,EXT_FUNCTION_INSTALLED_AGENT:join(homedir(),'.pi/agent'),EXT_FUNCTION_KIND:mode,DO_NOT_TRACK:'1',OPENWIKI_TELEMETRY_DISABLED:'1'}});
+let stdout='',stderrDebug='',stderrBytes=0,overflow=false,timedOut=false,escalation;
+const signal=s=>{try{process.kill(-child.pid,s);}catch(e){if(e.code!=='ESRCH')throw e;}};
+const timer=setTimeout(()=>{timedOut=true;signal('SIGTERM');escalation=setTimeout(()=>signal('SIGKILL'),1000);},60000);
+child.stdout.on('data',b=>{if(Buffer.byteLength(stdout)+b.length>65536){overflow=true;signal('SIGKILL');}else if(!overflow)stdout+=b;});
+child.stderr.on('data',b=>{stderrBytes+=b.length;if(stderrDebug.length<4096)stderrDebug+=b.toString();});
+const terminal=await new Promise(r=>{child.once('error',()=>r({code:null,signal:null,spawn_error:true}));child.once('close',(code,signal)=>r({code,signal}));});
+clearTimeout(timer);if(escalation)clearTimeout(escalation);
+async function groupEmpty(){for(const pid of await readdir('/proc')){if(!/^\d+$/.test(pid))continue;try{const stat=await readFile('/proc/'+pid+'/stat','utf8'),f=stat.slice(stat.lastIndexOf(')')+2).trim().split(/\s+/);if(Number(f[2])===child.pid&&!['Z','X'].includes(f[0]))return false;}catch(e){if(e.code!=='ENOENT'&&e.code!=='ESRCH')return false;}}return true;}
+let gone=await groupEmpty();if(!gone){signal('SIGTERM');await new Promise(r=>setTimeout(r,100));signal('SIGKILL');await new Promise(r=>setTimeout(r,100));gone=await groupEmpty();}
+let receipt;try{receipt=JSON.parse(stdout.trim());}catch{receipt={status:'FAIL',code:'missing_sanitized_receipt'};}
+let removed=false;if(gone&&await readFile(join(scope,'.owner'),'utf8')===id){await rm(scope,{recursive:true});removed=true;}
+const supervisor={worker_exit_code:terminal.code,worker_signal:terminal.signal,timed_out:timedOut,output_overflow:overflow,stderr_bytes_discarded:stderrBytes,process_group_empty:gone,owned_scope_removed:removed};
+if(terminal.code!==0||timedOut||overflow||!gone||!removed)receipt.status='FAIL';
+if(receipt.status==='FAIL')receipt.sanitized_stderr=stderrDebug.replaceAll(scope,'<owned-scope>').replaceAll(repo,'<eval-repo>').replace(/\/home\/[^\s\"')]+/g,'<host-path>').replace(/file:\/\/[^\s)]+/g,'<module>').slice(0,4096);
+receipt.source_binding=source;receipt.started_at=startedAt;receipt.ended_at=new Date().toISOString();receipt.harness=harness;
+receipt.supervisor=supervisor;receipt.scope_id=id;
+await writeFile(join(out,'result.json'),JSON.stringify(receipt,null,2)+'\n',{flag:'wx',mode:0o600});
+process.stdout.write(JSON.stringify({mode,status:receipt.status,scope_id:id,cases:receipt.cases,supervisor})+'\n');
+if(receipt.status==='FAIL')process.exitCode=1;

package/docs/evaluation/extension-functions-2026-10-17/bridges/web-final.json

@@ -0,0 +1,99 @@
+{
+  "kind": "actual-extension-functional-probe",
+  "package": "pi-web-access@0.41.0",
+  "package_files": [
+    {
+      "path": "package.json",
+      "sha256": "c5ccc33fe7241a28d1a32f6a633dae06b6a23e4fb3b841b0527e148d66d21ee7"
+    },
+    {
+      "path": "dist/mcp-cli.js",
+      "sha256": "2eae8d7b75b02f9df03b9334c5c0b4df5b53ef08536c69f8baea8757b829bd71"
+    }
+  ],
+  "node": "24.22.0",
+  "cases": [
+    {
+      "id": "pi-extension-resolver-gate",
+      "status": "PASS",
+      "expected_blocker": "directory_manifest_entry",
+      "pi_profile_status": "BLOCKED"
+    },
+    {
+      "id": "standalone-mcp-tool-discovery",
+      "status": "PASS",
+      "tools": [
+        "web_search",
+        "fetch_content",
+        "get_search_content",
+        "source_check"
+      ]
+    },
+    {
+      "id": "standalone-raw-fetch-owned-http",
+      "status": "PASS",
+      "canary_preserved": true
+    },
+    {
+      "id": "standalone-stored-content-search",
+      "status": "PASS",
+      "original_content_retrieved": true
+    },
+    {
+      "id": "standalone-invalid-fetch-rejected",
+      "status": "PASS"
+    },
+    {
+      "id": "standalone-model-answer-mode-rejected",
+      "status": "PASS"
+    }
+  ],
+  "model_prompts_submitted": 0,
+  "provider_calls": 0,
+  "integration": "Standalone MCP functional path; production Pi extension loading remains BLOCKED.",
+  "status": "PASS",
+  "cleanup": "PASS",
+  "guards": {
+    "network_allowed": 1,
+    "network_denied": 0,
+    "git_allowed": 0,
+    "children_allowed": 1,
+    "children_denied": 0
+  },
+  "diagnostics": [],
+  "limits": [
+    "No model prompt or paid provider request.",
+    "JavaScript network/child guards are instrumentation, not OS containment.",
+    "Only named synthetic function cases are qualified; model quality and production use remain unproven."
+  ],
+  "source_binding": {
+    "commit": "406dae7e6b99aa5715960490e869bd3fc668cca2",
+    "digest": "sha256:a4524626851448908b8d21ecbd7248c9956ce830406e81c45fda46c8eb6fffc5"
+  },
+  "started_at": "2026-10-17T13:35:28.891Z",
+  "ended_at": "2026-10-17T13:35:29.926Z",
+  "harness": [
+    {
+      "path": "run.mjs",
+      "sha256": "21fb7b96d8df277f75926f6848154a10717d59db722be33539704ea4f2f0470e"
+    },
+    {
+      "path": "worker.mjs",
+      "sha256": "3f7299cb8972ee268cf6fd2b187b0cdde21ff53b4d1132b69d5d19e21c3b450f"
+    },
+    {
+      "path": "guard.mjs",
+      "sha256": "cb1fd997320e858f5beab49c5796858ce194b026c21d73a04384543cd859fec9"
+    }
+  ],
+  "supervisor": {
+    "worker_exit_code": 0,
+    "worker_signal": null,
+    "timed_out": false,
+    "output_overflow": false,
+    "stderr_bytes_discarded": 0,
+    "process_group_empty": true,
+    "owned_scope_removed": true
+  },
+  "scope_id": "extension-functions-bridges-d582757d-2859-4683-8310-ec158bf6d551"
+}

package/docs/evaluation/extension-functions-2026-10-17/bridges/worker.mjs

@@ -0,0 +1,102 @@
+import assert from 'node:assert/strict';
+import {createHash} from 'node:crypto';
+import {cp,mkdir,readFile,readdir,writeFile,symlink} from 'node:fs/promises';
+import {join,resolve} from 'node:path';
+import {pathToFileURL} from 'node:url';
+import {execFile} from 'node:child_process';
+import {promisify} from 'node:util';
+import http from 'node:http';
+const repo=process.cwd(),scope=process.env.EXT_FUNCTION_SCOPE,mode=process.argv[2];
+const workspace=join(scope,'workspace'),agent=join(scope,'agent'),installed=process.env.EXT_FUNCTION_INSTALLED_AGENT;
+const packageName=mode==='web'?'pi-web-access':mode==='openwiki'?'openwiki':'pi-cursor-sdk';
+const root=join(installed,'npm/node_modules',packageName);
+const metadata=JSON.parse(await readFile(join(root,'package.json'),'utf8'));
+assert.equal(metadata.version,mode==='web'?'0.41.0':'0.7.2');
+const packageFiles=[];for(const path of ['package.json',...(mode==='web'?['dist/mcp-cli.js']:['dist/integrations/pi/openwiki.js','dist/cli/cli.js'])])packageFiles.push({path,sha256:createHash('sha256').update(await readFile(join(root,path))).digest('hex')});
+const cases=[],diagnostics=[];
+let activeCase='setup',handle,client,transport,webServer,session,guard;
+const record=(id,details={})=>cases.push({id,status:'PASS',...details});
+let receipt={kind:'actual-extension-functional-probe',package:packageName+'@'+metadata.version,package_files:packageFiles,node:process.versions.node,cases,model_prompts_submitted:0,provider_calls:0};
+try{
+ await mkdir(workspace,{recursive:true});await mkdir(agent);
+ for(const d of ['config','cache','data'])await mkdir(join(scope,d));
+ process.env.HOME=scope;process.env.PI_CODING_AGENT_DIR=agent;
+ process.env.XDG_CONFIG_HOME=join(scope,'config');process.env.XDG_CACHE_HOME=join(scope,'cache');process.env.XDG_DATA_HOME=join(scope,'data');
+ process.env.DO_NOT_TRACK='1';process.env.OPENWIKI_TELEMETRY_DISABLED='1';
+ const source='export function fixtureCatalog() { return "FIXTURE_CATALOG_CANARY_71"; }\n';
+ await mkdir(join(workspace,'src'));await writeFile(join(workspace,'src/catalog.js'),source);
+ await writeFile(join(workspace,'README.md'),'Synthetic fixture catalog. No external systems.\n');
+ const git=promisify(execFile),gitEnv={...process.env,GIT_CONFIG_NOSYSTEM:'1',GIT_CONFIG_GLOBAL:'/dev/null',GIT_CONFIG_COUNT:'1',GIT_CONFIG_KEY_0:'core.hooksPath',GIT_CONFIG_VALUE_0:'/dev/null'};
+ for(const args of [['init','-q'],['add','README.md','src/catalog.js'],['-c','user.name=Fixture','-c','user.email=fixture@example.invalid','commit','-q','-m','synthetic-fixture']])await git('/usr/bin/git',args,{cwd:workspace,env:gitEnv,timeout:3000});
+ process.chdir(workspace);
+ process.env.EXT_FUNCTION_CHILD_ENTRY=mode==='web'?join(root,'dist/mcp-cli.js'):join(root,'dist/cli/cli.js');
+ process.env.EXT_FUNCTION_ALLOW_CHILD='1';
+ if(mode==='web'){
+  await mkdir(join(scope,'.pi'),{recursive:true});await writeFile(join(scope,'.pi/web-search.json'),JSON.stringify({ssrf:{allowRanges:['127.0.0.1/32']}}));
+  const text='Synthetic page title\nWEB_FETCH_CANARY_429\n'+('The quick brown fixture fox.\n'.repeat(20));
+  webServer=http.createServer((req,res)=>{res.writeHead(200,{'content-type':'text/plain; charset=utf-8'});res.end(text);});
+  await new Promise(r=>webServer.listen(0,'127.0.0.1',r));
+  process.env.EXT_FUNCTION_HTTP_PORT=String(webServer.address().port);
+ }
+ await import('./guard.mjs');
+ const {installStdoutGuard}=await import(pathToFileURL(join(repo,'.profile-eval/src/stdout-guard.js')));
+ guard=installStdoutGuard({report:()=>{}});
+ const {resolvePiExtension}=await import(pathToFileURL(join(repo,'.profile-eval/src/pi-extensions.js')));
+ const {parseExtensionSpec}=await import(pathToFileURL(join(repo,'.profile-eval/src/extension-spec.js')));
+ if(mode==='web'){
+  activeCase='pi-extension-resolver-gate';
+  let code;
+  try{await resolvePiExtension(parseExtensionSpec('npm:pi-web-access@0.41.0'),{agentDir:installed});}catch(e){code=e.code;}
+  assert.equal(code,'extension_load_failed');record(activeCase,{expected_blocker:'directory_manifest_entry',pi_profile_status:'BLOCKED'});
+  const {Client}=await import('@modelcontextprotocol/client');const {StdioClientTransport}=await import('@modelcontextprotocol/client/stdio');
+  client=new Client({name:'extension-function-fixture',version:'1.0.0'});
+  transport=new StdioClientTransport({command:process.execPath,args:[process.env.EXT_FUNCTION_CHILD_ENTRY],stderr:'pipe'});
+  transport.stderr?.on('data',()=>{});
+  await client.connect(transport,{timeout:15000});
+  const tools=(await client.listTools()).tools.map(t=>t.name);assert.ok(tools.includes('fetch_content')&&tools.includes('get_search_content'));record('standalone-mcp-tool-discovery',{tools});
+  const call=(name,args)=>client.callTool({name,arguments:args},{timeout:15000});
+  const value=r=>(r.content??[]).filter(x=>x.type==='text').map(x=>x.text).join('\n');
+  activeCase='standalone-raw-fetch-owned-http';
+  const url='http://127.0.0.1:'+process.env.EXT_FUNCTION_HTTP_PORT+'/fixture.txt';
+  const fetched=await call('fetch_content',{url,mode:'raw'});assert.ok(!fetched.isError);assert.ok(value(fetched).includes('WEB_FETCH_CANARY_429'));
+  const match=value(fetched).match(/(?:responseId|Response ID|ResponseId)["\s:]+([a-zA-Z0-9_-]+)/i);assert.ok(match,'response_id_not_found');record(activeCase,{canary_preserved:true});
+  activeCase='standalone-stored-content-search';
+  const stored=await call('get_search_content',{responseId:match[1],urlIndex:0,findText:'WEB_FETCH_CANARY_429'});assert.ok(!stored.isError);assert.ok(value(stored).includes('WEB_FETCH_CANARY_429'));record(activeCase,{original_content_retrieved:true});
+  activeCase='standalone-invalid-fetch-rejected';const invalid=await call('fetch_content',{mode:'raw'});assert.equal(invalid.isError,true);record(activeCase);
+  activeCase='standalone-model-answer-mode-rejected';const answer=await call('fetch_content',{url,mode:'answer'});assert.equal(answer.isError,true);record(activeCase);
+  receipt.integration='Standalone MCP functional path; production Pi extension loading remains BLOCKED.';
+ }else if(mode==='openwiki'){
+  await cp(join(repo,'test/fixtures/pi-extension-fixture'),join(agent,'npm/node_modules/pi-extension-fixture'),{recursive:true,errorOnExist:true});
+  const {SdkPiSessionAdapter}=await import(pathToFileURL(join(repo,'.profile-eval/src/sdk-pi-adapter.js')));
+  const {ModelRuntime,createAgentSessionServices,createAgentSessionFromServices,createAgentSessionRuntime}=await import('@earendil-works/pi-coding-agent');
+  const adapter=new SdkPiSessionAdapter({modelRuntimeFactory:()=>ModelRuntime.create({refreshOnCreate:false,allowModelNetwork:false,modelsPath:null,authPath:join(scope,'absent-auth.json'),modelsStorePath:join(scope,'absent-models.json')}),resolveExtension:s=>resolvePiExtension(s,{agentDir:s.name==='pi-extension-fixture'?agent:installed}),extensionSdk:{createServices:createAgentSessionServices,createSessionFromServices:createAgentSessionFromServices,createRuntime:async(factory,options)=>{const runtime=await createAgentSessionRuntime(factory,options);session=runtime.session;return runtime;}},diagnosticSink:x=>diagnostics.push({code:x.code,stage:x.stage})});
+  activeCase='pi-sdk-openwiki-bind';
+  handle=await adapter.create({cwd:workspace,executionProfile:{alias:'function-openwiki',permissionProfile:'coding',provider:'fixture-ext',model:'fixture-ext-model',thinkingLevel:'off',extensions:[parseExtensionSpec('npm:pi-extension-fixture@1.0.0'),parseExtensionSpec('npm:openwiki@0.7.2')],skills:[]}});record(activeCase);
+  async function call(name,args){const tool=session.getToolDefinition(name);assert.ok(tool);const id='synthetic-'+name;const result=await tool.execute(id,args,AbortSignal.timeout(15000),undefined,session.extensionRunner.createToolContext(id,undefined));const text=result.content.filter(x=>x.type==='text').map(x=>x.text).join('\n');try{return JSON.parse(text);}catch{return result.details;}}
+  activeCase='relative-root-rejected';await assert.rejects(()=>call('openwiki_begin',{root:'relative',mode:'init',language:'en'}));record(activeCase);
+  activeCase='begin-owned-repository';const begin=await call('openwiki_begin',{root:workspace,mode:'init',language:'en'});assert.equal(begin.status,'active');assert.equal(begin.phase,'planning');assert.ok(begin.runId);record(activeCase);
+  const plan={runId:begin.runId,pages:[{path:'openwiki/quickstart.md',title:'Quickstart',purpose:'Explain the synthetic catalog behavior',seedPaths:['src/catalog.js']}]};
+  activeCase='accept-and-repeat-canonical-plan';const planned=await call('openwiki_submit_plan',plan);assert.equal(planned.status,'accepted');assert.equal(planned.totalPages,1);assert.equal((await call('openwiki_submit_plan',plan)).status,'accepted');record(activeCase);
+  activeCase='different-plan-rejected';await assert.rejects(()=>call('openwiki_submit_plan',{...plan,pages:[{...plan.pages[0],title:'Changed'}]}));record(activeCase);
+  activeCase='next-page-queued';const next=await call('openwiki_next_page',{runId:begin.runId});assert.equal(next.status,'pending');assert.equal(next.job.path,'/openwiki/quickstart.md');record(activeCase);
+  activeCase='inspect-pending-claims';const inspected=await call('openwiki_inspect_page_claims',{runId:begin.runId,jobId:next.job.id});assert.equal(inspected.page,'/openwiki/quickstart.md');assert.deepEqual(inspected.claims,[]);record(activeCase);
+  activeCase='premature-finish-rejected';await assert.rejects(()=>call('openwiki_finish',{runId:begin.runId}));record(activeCase);
+  activeCase='missing-page-submission-rejected';await assert.rejects(()=>call('openwiki_submit_page',{runId:begin.runId,jobId:next.job.id,claims:[]}));record(activeCase);
+  activeCase='submit-grounded-written-page';await mkdir(join(workspace,'openwiki'),{recursive:true});await writeFile(join(workspace,'openwiki/quickstart.md'),'# Quickstart\n\nThe catalog returns FIXTURE_CATALOG_CANARY_71.\n');
+  const submitted=await call('openwiki_submit_page',{runId:begin.runId,jobId:next.job.id,claims:[{statement:'The catalog returns FIXTURE_CATALOG_CANARY_71.',evidence:[{resource:'repo://src/catalog.js#L1'}]}]});assert.equal(submitted.status,'complete');record(activeCase);
+  activeCase='queue-completion';assert.equal((await call('openwiki_next_page',{runId:begin.runId})).status,'complete');record(activeCase);
+  activeCase='finish-written-wiki';const finished=await call('openwiki_finish',{runId:begin.runId});assert.equal(finished.status,'complete');assert.notEqual(finished.sourceChanged,true);assert.ok((await readFile(join(workspace,'openwiki/quickstart.md'),'utf8')).includes('FIXTURE_CATALOG_CANARY_71'));record(activeCase);
+  activeCase='finished-run-rejected';await assert.rejects(()=>call('openwiki_next_page',{runId:begin.runId}));record(activeCase);
+  assert.equal(await readFile(join(workspace,'src/catalog.js'),'utf8'),source);record('original-source-preserved');
+  receipt.integration='Actual registered Pi tool definitions -> real OpenWiki stdio MCP child -> synthetic repository writer lifecycle.';
+ }else throw Error('cursor_probe_not_configured');
+ receipt.status='PASS';
+}catch(e){receipt.status='FAIL';receipt.failure={case:activeCase,code:typeof e.code==='string'?e.code:e.name??'probe_failed',message:String(e.message).replaceAll(scope,'<owned-scope>').replaceAll(repo,'<eval-repo>').replaceAll(installed,'<installed-agent>').replace(/\/home\/[^\s\"')]+/g,'<host-path>').slice(0,1200)};}
+finally{
+ try{if(client)await client.close();if(transport)await transport.close();if(handle)await handle.dispose();if(webServer)await new Promise(r=>webServer.close(r));receipt.cleanup='PASS';}catch{receipt.cleanup='FAIL';receipt.status='FAIL';}
+ const counters=[];for(const f of await readdir(scope))if(/^guard-\d+\.json$/.test(f))counters.push(JSON.parse(await readFile(join(scope,f),'utf8')));
+ receipt.guards=counters.reduce((a,b)=>Object.fromEntries(Object.keys(b).map(k=>[k,(a[k]??0)+b[k]])),{});
+ receipt.diagnostics=diagnostics;receipt.limits=['No model prompt or paid provider request.','JavaScript network/child guards are instrumentation, not OS containment.','Only named synthetic function cases are qualified; model quality and production use remain unproven.'];
+ if(guard)guard.transportStdout.write(JSON.stringify(receipt)+'\n');else process.stdout.write(JSON.stringify(receipt)+'\n');
+ if(receipt.status==='FAIL')process.exitCode=1;
+}

package/docs/evaluation/extension-functions-2026-10-17/cache/README.md

@@ -0,0 +1,21 @@
+# Pi Cache Optimizer Functional Checks
+
+Date: 2026-10-17. Package: `pi-cache-optimizer@2.9.3`, loaded from the isolated evaluation prefix under Node 24.22.0. The package had already been installed there with lifecycle scripts disabled and its registry integrity checked in the earlier installation record.
+
+The published `index.ts` entrypoint was imported with the Pi SDK's bundled `jiti` loader. The candidate's real default extension function registered hooks and a command on a synthetic `ExtensionAPI` harness; the harness then invoked those registered callbacks with fresh fixture contexts. The SDK was imported from its public package root. The context uses the public `sessionManager.getSessionId()` contract. No private extension state or session handle was accessed.
+
+| Check | Result | Evidence |
+|---|---|---|
+| OpenAI-compatible `before_provider_request`: adds an opaque, bounded session cache key, returns a copy, preserves other fields, and leaves input untouched | PASS | `payload-openai` |
+| `openai-codex-responses` bypass: returns no mutation and leaves input untouched | PASS | `payload-codex-bypass` |
+| Zero-priced and unknown-priced `cache_warming_decision`: with Pi cache warming set to `off` and the extension's zero-price override disabled, both return no warming action | PASS | `warming-disabled-zero`, `warming-disabled-unknown` |
+| Headless `/cache-optimizer fix prompt-cache` and `/cache-optimizer rollback`: both explain that UI confirmation is required, make no files, and request no confirmation UI | PASS | `commands-headless` |
+| Synthetic assistant usage through the registered request, response, and `message_end` hooks: persists local cache counters; prompt/response marker text is absent from persisted JSON | PASS | `stats-synthetic` |
+
+All six final attempts completed cleanup. Each recorded zero network attempts and zero child-process attempts. Temporary homes and workspaces were removed after their child processes exited. The runner supervises each case in its own process group, sends TERM at 15 seconds, and escalates to KILL after two seconds. Failed harness attempts are preserved alongside the successful attempts; the final evidence manifest below is the corrected run after fixing fixture bootstrapping, an overly strict statistics assertion, and the model fixture needed to reach the documented headless-fix branch.
+
+The final independently reviewed run is [`cache-function-evidence-2026-10-17T13-42-18-175Z-215330e7-06a6-4666-af9c-2ecb214d8d71.json`](cache-function-evidence-2026-10-17T13-42-18-175Z-215330e7-06a6-4666-af9c-2ecb214d8d71.json), SHA-256 `8029fe14ab04d2de80a75977e50c01ca05b8be2e1090ee407ef67debfb3d4122`. All six receipts observe child close, an empty process group and removal of their marked temporary home before publication. The earlier PASS manifests are superseded for final qualification: review corrected an internal SDK import to the public package root, enabled cache keys equally in both API cases, supplied the actual prompt marker to the statistics case, counted confirmation requests, removed unrelated debug-directory deletion and added supervisor cleanup checks. The corrected six-case run passes. Original attempt records remain unchanged.
+
+Runnable source is archived here in `runner.mjs` and `probe.mjs`. Prerequisite: Node.js 24.22.0 and the earlier isolated exact package installation. From the repository root, run `node docs/evaluation/extension-functions-2026-10-17/cache/runner.mjs`; it creates a fresh UUID-owned ignored result directory and a new evidence manifest. `PI_FUNCTION_NPM_ROOT` can identify an equivalent existing package prefix. [Archived receipt copies](receipt-archive.json) preserve exact original bytes and hashes.
+
+This qualifies selected extension behavior against registered hooks using a fixture host. It does not measure cache-hit savings or prompt quality, exercise a real provider/model request, or qualify Pi's internal cache scheduler as a whole. The payload has no model-generated prompt or response, and the usage counters are synthetic. No live API calls or credentials were used.

package/docs/evaluation/extension-functions-2026-10-17/cache/cache-function-evidence-2026-10-17T13-30-31-440Z-b1a47f88-8d86-4238-9ef8-af890d9ba74b.json

@@ -0,0 +1,129 @@
+{
+  "schema": "pi-cache-optimizer-function-evidence.v1",
+  "package": "pi-cache-optimizer@2.9.3",
+  "source": "isolated package prefix; real published index.ts entrypoint, real Pi SDK root export",
+  "created_at": "2026-10-17T13:30:31.440Z",
+  "scope": "provider-free functional checks; no prompt/model/provider requests",
+  "attempts": [
+    {
+      "schema": "pi-cache-optimizer-function-attempt.v1",
+      "attempt_id": "ce05c94a-0df1-499b-a3a4-1e5ff2a4296a",
+      "package": "pi-cache-optimizer@2.9.3",
+      "case": "payload-openai",
+      "node": "24.22.0",
+      "outcome": "HARNESS_ERROR",
+      "exit_code": 1,
+      "cleanup": "UNKNOWN",
+      "checks": [],
+      "network_attempts": null,
+      "child_process_attempts": null,
+      "changed_files": [],
+      "stdout_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderr_sha256": "f3188881c8a981c1bf34f4235572e7c9995044dc79b13f6cb2ab9e4eced10286",
+      "stderr_class": "nonempty-redacted",
+      "stderr_bytes": 1009,
+      "receipt": "attempts/payload-openai-ce05c94a-0df1-499b-a3a4-1e5ff2a4296a.json",
+      "receipt_sha256": "d444551cecf96273e5e1e9434aa2cf69c9920ed56b25b9345d0abab92a137c5a"
+    },
+    {
+      "schema": "pi-cache-optimizer-function-attempt.v1",
+      "attempt_id": "e2952978-43c7-4c45-bf6f-732d0b8e5dec",
+      "package": "pi-cache-optimizer@2.9.3",
+      "case": "payload-codex-bypass",
+      "node": "24.22.0",
+      "outcome": "HARNESS_ERROR",
+      "exit_code": 1,
+      "cleanup": "UNKNOWN",
+      "checks": [],
+      "network_attempts": null,
+      "child_process_attempts": null,
+      "changed_files": [],
+      "stdout_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderr_sha256": "f3188881c8a981c1bf34f4235572e7c9995044dc79b13f6cb2ab9e4eced10286",
+      "stderr_class": "nonempty-redacted",
+      "stderr_bytes": 1009,
+      "receipt": "attempts/payload-codex-bypass-e2952978-43c7-4c45-bf6f-732d0b8e5dec.json",
+      "receipt_sha256": "1e25aa4a0e7bc4b7a57206f7bd214df32f4e3cce3937fb1180b1e11d2bffdbc5"
+    },
+    {
+      "schema": "pi-cache-optimizer-function-attempt.v1",
+      "attempt_id": "08f18f92-7674-4caf-a839-953b0d9495e3",
+      "package": "pi-cache-optimizer@2.9.3",
+      "case": "warming-disabled-zero",
+      "node": "24.22.0",
+      "outcome": "HARNESS_ERROR",
+      "exit_code": 1,
+      "cleanup": "UNKNOWN",
+      "checks": [],
+      "network_attempts": null,
+      "child_process_attempts": null,
+      "changed_files": [],
+      "stdout_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderr_sha256": "f3188881c8a981c1bf34f4235572e7c9995044dc79b13f6cb2ab9e4eced10286",
+      "stderr_class": "nonempty-redacted",
+      "stderr_bytes": 1009,
+      "receipt": "attempts/warming-disabled-zero-08f18f92-7674-4caf-a839-953b0d9495e3.json",
+      "receipt_sha256": "a4a1bf55ee471b6269a4cf1a872fba4839a47d8304a338e2a3fdca43349f81de"
+    },
+    {
+      "schema": "pi-cache-optimizer-function-attempt.v1",
+      "attempt_id": "692f3746-48bf-4d32-8f71-f1512f58d179",
+      "package": "pi-cache-optimizer@2.9.3",
+      "case": "warming-disabled-unknown",
+      "node": "24.22.0",
+      "outcome": "HARNESS_ERROR",
+      "exit_code": 1,
+      "cleanup": "UNKNOWN",
+      "checks": [],
+      "network_attempts": null,
+      "child_process_attempts": null,
+      "changed_files": [],
+      "stdout_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderr_sha256": "f3188881c8a981c1bf34f4235572e7c9995044dc79b13f6cb2ab9e4eced10286",
+      "stderr_class": "nonempty-redacted",
+      "stderr_bytes": 1009,
+      "receipt": "attempts/warming-disabled-unknown-692f3746-48bf-4d32-8f71-f1512f58d179.json",
+      "receipt_sha256": "b498887ce3b0a24c0917be85f1caeaf3cdf060eed0d81f2c16b64bdbfd489212"
+    },
+    {
+      "schema": "pi-cache-optimizer-function-attempt.v1",
+      "attempt_id": "71859f49-7418-4e5d-a2ee-0763e6d086ce",
+      "package": "pi-cache-optimizer@2.9.3",
+      "case": "commands-headless",
+      "node": "24.22.0",
+      "outcome": "HARNESS_ERROR",
+      "exit_code": 1,
+      "cleanup": "UNKNOWN",
+      "checks": [],
+      "network_attempts": null,
+      "child_process_attempts": null,
+      "changed_files": [],
+      "stdout_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderr_sha256": "f3188881c8a981c1bf34f4235572e7c9995044dc79b13f6cb2ab9e4eced10286",
+      "stderr_class": "nonempty-redacted",
+      "stderr_bytes": 1009,
+      "receipt": "attempts/commands-headless-71859f49-7418-4e5d-a2ee-0763e6d086ce.json",
+      "receipt_sha256": "e300745e79f6863b2240ab2870204cc583eca060f1a18e5613238d9db6c22fe9"
+    },
+    {
+      "schema": "pi-cache-optimizer-function-attempt.v1",
+      "attempt_id": "061b42a1-b569-4d77-a013-8b29aff7ceb5",
+      "package": "pi-cache-optimizer@2.9.3",
+      "case": "stats-synthetic",
+      "node": "24.22.0",
+      "outcome": "HARNESS_ERROR",
+      "exit_code": 1,
+      "cleanup": "UNKNOWN",
+      "checks": [],
+      "network_attempts": null,
+      "child_process_attempts": null,
+      "changed_files": [],
+      "stdout_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderr_sha256": "f3188881c8a981c1bf34f4235572e7c9995044dc79b13f6cb2ab9e4eced10286",
+      "stderr_class": "nonempty-redacted",
+      "stderr_bytes": 1009,
+      "receipt": "attempts/stats-synthetic-061b42a1-b569-4d77-a013-8b29aff7ceb5.json",
+      "receipt_sha256": "f7af60b1655d7fb78d768377b957f0c753df25825752069dda742a3951720b78"
+    }
+  ]
+}

package/docs/evaluation/extension-functions-2026-10-17/cache/cache-function-evidence-2026-10-17T13-31-04-505Z-a3736add-73b8-4d77-8ea6-084ce8aa4599.json

@@ -0,0 +1,129 @@
+{
+  "schema": "pi-cache-optimizer-function-evidence.v1",
+  "package": "pi-cache-optimizer@2.9.3",
+  "source": "isolated package prefix; real published index.ts entrypoint, real Pi SDK root export",
+  "created_at": "2026-10-17T13:31:04.505Z",
+  "scope": "provider-free functional checks; no prompt/model/provider requests",
+  "attempts": [
+    {
+      "schema": "pi-cache-optimizer-function-attempt.v1",
+      "attempt_id": "9874a6ed-676f-47d8-903a-ac63b9d56ee2",
+      "package": "pi-cache-optimizer@2.9.3",
+      "case": "payload-openai",
+      "node": "24.22.0",
+      "outcome": "HARNESS_ERROR",
+      "exit_code": 1,
+      "cleanup": "UNKNOWN",
+      "checks": [],
+      "network_attempts": null,
+      "child_process_attempts": null,
+      "changed_files": [],
+      "stdout_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderr_sha256": "e74120570bcfc3413769ad93ac73a5c429ceab6ac6b27917c992a5185d20f892",
+      "stderr_class": "nonempty-redacted",
+      "stderr_bytes": 1076,
+      "receipt": "attempts/payload-openai-9874a6ed-676f-47d8-903a-ac63b9d56ee2.json",
+      "receipt_sha256": "ea0c285d3c086a70ea3526ec75bce5c87a14d15b5816b29dd253737efa84a33c"
+    },
+    {
+      "schema": "pi-cache-optimizer-function-attempt.v1",
+      "attempt_id": "18ab7574-ddb6-41b0-aecf-4d6082234a82",
+      "package": "pi-cache-optimizer@2.9.3",
+      "case": "payload-codex-bypass",
+      "node": "24.22.0",
+      "outcome": "HARNESS_ERROR",
+      "exit_code": 1,
+      "cleanup": "UNKNOWN",
+      "checks": [],
+      "network_attempts": null,
+      "child_process_attempts": null,
+      "changed_files": [],
+      "stdout_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderr_sha256": "53db3a91b2b3886797da065eb417f64dca64f2ce6cada4716a0b1616d423c38c",
+      "stderr_class": "nonempty-redacted",
+      "stderr_bytes": 1076,
+      "receipt": "attempts/payload-codex-bypass-18ab7574-ddb6-41b0-aecf-4d6082234a82.json",
+      "receipt_sha256": "aeafc824148ec286cbcc8422325fdc8fb671b70a92021a934bd1f3d0fe4f6adc"
+    },
+    {
+      "schema": "pi-cache-optimizer-function-attempt.v1",
+      "attempt_id": "6097d3fe-b758-48fc-9d05-d0d8219ff467",
+      "package": "pi-cache-optimizer@2.9.3",
+      "case": "warming-disabled-zero",
+      "node": "24.22.0",
+      "outcome": "HARNESS_ERROR",
+      "exit_code": 1,
+      "cleanup": "UNKNOWN",
+      "checks": [],
+      "network_attempts": null,
+      "child_process_attempts": null,
+      "changed_files": [],
+      "stdout_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderr_sha256": "b1ef5222f4a9e84dc4c755bfbd6e6b40ddd188707495f25d4bed1ed0169e59ca",
+      "stderr_class": "nonempty-redacted",
+      "stderr_bytes": 1076,
+      "receipt": "attempts/warming-disabled-zero-6097d3fe-b758-48fc-9d05-d0d8219ff467.json",
+      "receipt_sha256": "3523504d22bf81884dafe5357107c9d66f5b41e1ec0308ea5bce040989bd53b4"
+    },
+    {
+      "schema": "pi-cache-optimizer-function-attempt.v1",
+      "attempt_id": "9ebf5607-c9b0-43ac-b12b-f4f980e5def3",
+      "package": "pi-cache-optimizer@2.9.3",
+      "case": "warming-disabled-unknown",
+      "node": "24.22.0",
+      "outcome": "HARNESS_ERROR",
+      "exit_code": 1,
+      "cleanup": "UNKNOWN",
+      "checks": [],
+      "network_attempts": null,
+      "child_process_attempts": null,
+      "changed_files": [],
+      "stdout_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderr_sha256": "319ec9ce503b8a22a702f2eea48562e9202719e30929d72e8e70afd984eb7711",
+      "stderr_class": "nonempty-redacted",
+      "stderr_bytes": 1076,
+      "receipt": "attempts/warming-disabled-unknown-9ebf5607-c9b0-43ac-b12b-f4f980e5def3.json",
+      "receipt_sha256": "0a20bb237cdb6cc4b2a4d5c8a296ddd9d96c07e8fb93fafe27939f69a1db8869"
+    },
+    {
+      "schema": "pi-cache-optimizer-function-attempt.v1",
+      "attempt_id": "477dc276-e0fe-476c-a11c-86119850ebe3",
+      "package": "pi-cache-optimizer@2.9.3",
+      "case": "commands-headless",
+      "node": "24.22.0",
+      "outcome": "HARNESS_ERROR",
+      "exit_code": 1,
+      "cleanup": "UNKNOWN",
+      "checks": [],
+      "network_attempts": null,
+      "child_process_attempts": null,
+      "changed_files": [],
+      "stdout_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderr_sha256": "c904938236b636eb9ce3a48ef4ec6f04409ee7bb047d93cd706ff7dd0d151e1d",
+      "stderr_class": "nonempty-redacted",
+      "stderr_bytes": 1076,
+      "receipt": "attempts/commands-headless-477dc276-e0fe-476c-a11c-86119850ebe3.json",
+      "receipt_sha256": "29ddf86cdfb073ac0f3a48b122e663585a636e27fa3a572cef97aa2886502199"
+    },
+    {
+      "schema": "pi-cache-optimizer-function-attempt.v1",
+      "attempt_id": "214a5132-fede-4dc4-a330-a2b4c3de9207",
+      "package": "pi-cache-optimizer@2.9.3",
+      "case": "stats-synthetic",
+      "node": "24.22.0",
+      "outcome": "HARNESS_ERROR",
+      "exit_code": 1,
+      "cleanup": "UNKNOWN",
+      "checks": [],
+      "network_attempts": null,
+      "child_process_attempts": null,
+      "changed_files": [],
+      "stdout_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderr_sha256": "b23fd5099cc9e955364188e9cf355ea9166963d2727fd4857beb3e56d4b6d3e3",
+      "stderr_class": "nonempty-redacted",
+      "stderr_bytes": 1076,
+      "receipt": "attempts/stats-synthetic-214a5132-fede-4dc4-a330-a2b4c3de9207.json",
+      "receipt_sha256": "8c65f4bc08a55a427601b9a902cd213adaf33fe22c321b2f03fa2e40778a0bff"
+    }
+  ]
+}