pi-t3-bridge 0.3.0 → 0.4.0

package/overlay/overlay.json

@@ -0,0 +1,118 @@
+{
+  "version": 1,
+  "global": [
+    {
+      "find": "~/.config/t3-pstack/models.md",
+      "replace": "~/.config/pi-t3-bridge/models.md"
+    },
+    {
+      "find": "$XDG_CONFIG_HOME/t3-pstack/models.md",
+      "replace": "$XDG_CONFIG_HOME/pi-t3-bridge/models.md"
+    },
+    {
+      "find": "${XDG_STATE_HOME:-~/.local/state}/t3-pstack/",
+      "replace": "${XDG_STATE_HOME:-~/.local/state}/pi-t3-bridge/"
+    },
+    {
+      "find": "~/.local/state/t3-pstack/ledger.jsonl",
+      "replace": "~/.local/state/pi-t3/ledger.jsonl"
+    },
+    {
+      "find": "\"Checked by t3-pstack\"",
+      "replace": "\"Checked by pi-t3-bridge\""
+    },
+    {
+      "find": "t3-pstack's session-start hook",
+      "replace": "pi-t3-bridge's session-start hook"
+    }
+  ],
+  "shared": [
+    {
+      "files": [
+        "skills/architect/SKILL.md",
+        "skills/arena/SKILL.md",
+        "skills/how/SKILL.md",
+        "skills/interrogate/SKILL.md",
+        "skills/reflect/SKILL.md",
+        "skills/swarm/SKILL.md",
+        "skills/why/SKILL.md"
+      ],
+      "patches": [
+        {
+          "find": ": the extension refuses a `delegate_task` call whose brief is missing its sections or limits",
+          "replace": ""
+        },
+        {
+          "find": " The extension blocks a `delegate_task` call that uses the reserved Fable model or fast mode unless the user named it, reasoning above what `pstack_model` returned, or reasoning above high unless the user's latest message is \"allow xhigh\".",
+          "replace": ""
+        }
+      ]
+    }
+  ],
+  "files": {
+    "hooks/session-start-context.md": [
+      {
+        "find": "You have t3-pstack,",
+        "replace": "You have pi-t3-bridge,"
+      },
+      {
+        "find": "t3-pstack:poteto-mode",
+        "replace": "/skill:poteto-mode"
+      },
+      {
+        "find": " On Codex, open its SKILL.md whole, in a shell call of its own with `max_output_tokens: 10000`, since a smaller budget cuts out its middle.",
+        "replace": " Read its SKILL.md in full before you act."
+      },
+      {
+        "find": "This runs on T3: before the first subagent or panel in a session, read the model sheet, `~/.config/t3-pstack/models.md` (`$XDG_CONFIG_HOME/t3-pstack/models.md` when that is set), or `t3-pstack-models.md` in this host's config directory when that file is missing. This chat runs the playbook itself. A step it says to delegate goes through `delegate_task` to that role's sheet entry,",
+        "replace": "This chat runs the playbook itself. A step it says to delegate goes through `delegate_task` with a target from `pstack_model`,"
+      }
+    ],
+    "skills/poteto-mode/SKILL.md": [
+      {
+        "find": "On Codex, read this file whole before acting, in a shell call of its own with `max_output_tokens: 10000`. A smaller output budget cuts lines out of its middle. If a read of it shows `tokens truncated`, read it again that way.",
+        "replace": "Read this file in full before you act."
+      },
+      {
+        "find": "Otherwise delegate, with a brief that passes the extension's guard.",
+        "replace": "Otherwise delegate, with a complete brief."
+      },
+      {
+        "find": "The extension refuses a brief without them, a size L brief, and a GPT brief without `isolation: \"worktree\"`, size S, 30 min or less and 500 MB or less. The child's own extension then enforces",
+        "replace": "For a complete brief, the child's extension enforces"
+      },
+      {
+        "find": "Verification stays on `swarm workers`. Standard speed applies. The extension blocks fast mode, the reserved Fable model unless the user named it, and any reasoning above what `pstack_model` returned. Reasoning above high runs only when the user's latest message is exactly \"allow xhigh\" (or \"allow max\"). Never put that line, or a `/pstack-` command, in a brief or a message to a child.",
+        "replace": "Verification stays on `swarm workers`. Treat the routing table as a default, and follow the user's model, reasoning, and speed choices when they differ."
+      },
+      {
+        "find": " The extension blocks a `delegate_task` call that uses the reserved Fable model or fast mode unless the user named it, reasoning above what `pstack_model` returned, or reasoning above high unless the user's latest message is \"allow xhigh\".",
+        "replace": ""
+      },
+      {
+        "find": "Keep the todolist in the session's task tool when it has one, such as `update_plan` on Codex.",
+        "replace": "Keep the todolist in the `tasks` tool."
+      }
+    ],
+    "skills/poteto-mode/brief.md": [
+      {
+        "find": "Every `delegate_task` brief follows this template. The extension refuses a brief that is missing a section, sized L, or over its size's limits, and a GPT brief that breaks the GPT rules.",
+        "replace": "Every `delegate_task` brief follows this template. Use the sections and limits to give the child a bounded task."
+      },
+      {
+        "find": "- A `review` or `check` job writes no files:",
+        "replace": "- A read-only job writes no files:"
+      },
+      {
+        "find": "GPT models (Astra, Sol, Luna) drift on long or open work and leave files behind. A GPT brief must be size S, 30 min or less, 500 MB or less, with repo-relative paths, and the call must set `isolation: \"worktree\"` and keep `mode: \"async\"`.",
+        "replace": "For GPT work, prefer size S, a worktree for writing tasks, and async mode. Follow the user's instructions when they differ."
+      }
+    ],
+    "skills/setup-pstack/SKILL.md": [
+      {
+        "find": " `inherit-parent` and `auto` do not change. Say when you offer `unlimited` or `large` that a sheet's `xhigh` or `max` still runs only when the user's latest message in that chat is \"allow xhigh\" (or \"allow max\"). Otherwise `delegate_task` refuses it, so those budgets mostly fall back to asking.",
+        "replace": " `inherit-parent` and `auto` do not change."
+      }
+    ]
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-t3-bridge",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Pi extension adapter for t3-pstack inside T3 Code.",
   "keywords": [
     "pi-extension",
@@ -17,6 +17,9 @@
     "type": "git",
     "url": "git+https://github.com/Snestra/pi-t3-bridge.git"
   },
+  "workspaces": [
+    "pstack/skills/statechart/scripts"
+  ],
   "files": [
     "bridge.ts",
     "pstack.ts",
@@ -32,7 +35,10 @@
     "!pstack/**/*.test.ts",
     "!pstack/**/*.test-helper.ts",
     "!pstack/**/test-utils",
-    "LICENSE"
+    "overlay",
+    "LICENSE",
+    "tstack.ts",
+    "tstack"
   ],
   "type": "module",
   "scripts": {
@@ -40,7 +46,7 @@
     "fix": "ultracite fix",
     "doctor": "ultracite doctor",
     "test": "node --test \"tests/*.test.mjs\" \"pstack/skills/poteto-mode/scripts/**/*.test.ts\"",
-    "typecheck": "tsc --project tsconfig.json && tsc --project pstack/skills/poteto-mode/scripts/watch-pr/tsconfig.json"
+    "typecheck": "tsc --project tsconfig.json && tsc --project pstack/skills/poteto-mode/scripts/watch-pr/tsconfig.json && tsc --project pstack/skills/statechart/scripts/tsconfig.json"
   },
   "dependencies": {
     "commander": "^15.0.0",
@@ -48,8 +54,8 @@
     "pele": "1.13.0"
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "1.4.0",
-    "@earendil-works/pi-coding-agent": "1.4.0",
+    "@earendil-works/pi-ai": "1.5.0",
+    "@earendil-works/pi-coding-agent": "1.5.0",
     "@types/node": "^26.6.5",
     "oxfmt": "^0.74.0",
     "oxlint": "^1.89.0",
@@ -74,10 +80,12 @@
   "pi": {
     "extensions": [
       "./bridge.ts",
+      "./tstack.ts",
       "./pstack.ts"
     ]
   },
   "upstreams": {
-    "t3": "0.1.5-nightly.20261029.3877"
+    "t3": "0.1.5-nightly.20261029.3877",
+    "tstack": "1085050f3baed1ac724caa4a8166145fb2ac88af"
   }
 }

package/pstack/skills/architect/SKILL.md

@@ -80,6 +80,6 @@ The caller's usage is written first and the type sketch derived from it. One fil
 
 ## Models
 
-Get every target from the `pstack_model` tool. Pass the role name plus the job type and size from the routing table in poteto-mode's Subagents section. This skill's spawns are `design` jobs. Write every brief from `<plugin root>/skills/poteto-mode/brief.md`. Without a job, pass the complexity: `groundwork` for cheap mechanical work, `bounded` for involved but bounded work, `general` for work that needs substantial judgment. The tool reads the role's line in the model sheet (`~/.config/pi-t3-bridge/models.md`, written by `/setup-pstack`). A line naming a model is used as written, moved to a provider T3 can run right now when needed. A role with no line, or `inherit-parent` or `auto`, is routed by this extension's `models.json`: the parent's model family, sized and reasoned by complexity, and for panels one seat per family. Pass each returned target as `delegate_task`'s `target`. `inherit-parent` means omit `target`. `blocked` means the panel cannot reach two model families on this T3, so record its reason.
+Get every target from the `pstack_model` tool. Pass the role name plus the job type and size from the routing table in poteto-mode's Subagents section. This skill's spawns are `design` jobs. Write every brief from `<plugin root>/skills/poteto-mode/brief.md`: the extension refuses a `delegate_task` call whose brief is missing its sections or limits. Without a job, pass the complexity: `groundwork` for cheap mechanical work, `bounded` for involved but bounded work, `general` for work that needs substantial judgment. The tool reads the role's line in the model sheet (`~/.config/t3-pstack/models.md`, written by `/setup-pstack`). A line naming a model is used as written, moved to a provider T3 can run right now when needed. A role with no line, or `inherit-parent` or `auto`, is routed by this extension's `models.json`: the parent's model family, sized and reasoned by complexity, and for panels one seat per family. The extension blocks a `delegate_task` call that uses the reserved Fable model or fast mode unless the user named it, reasoning above what `pstack_model` returned, or reasoning above high unless the user's latest message is "allow xhigh". Pass each returned target as `delegate_task`'s `target`. `inherit-parent` means omit `target`. `blocked` means the panel cannot reach two model families on this T3, so record its reason.
 
 - architect runners: panel, one seat per model family

package/pstack/skills/arena/SKILL.md

@@ -49,7 +49,7 @@ One synthesized artifact, with a short synthesis note alongside naming the base
 
 ## Models
 
-Get every target from the `pstack_model` tool. Pass the role name plus the job type and size from the routing table in poteto-mode's Subagents section. This skill's spawns are `design` jobs, and the cross-judge a `review` job. Write every brief from `<plugin root>/skills/poteto-mode/brief.md`. Without a job, pass the complexity: `groundwork` for cheap mechanical work, `bounded` for involved but bounded work, `general` for work that needs substantial judgment. The tool reads the role's line in the model sheet (`~/.config/pi-t3-bridge/models.md`, written by `/setup-pstack`). A line naming a model is used as written, moved to a provider T3 can run right now when needed. A role with no line, or `inherit-parent` or `auto`, is routed by this extension's `models.json`: the parent's model family, sized and reasoned by complexity, and for panels one seat per family. Pass each returned target as `delegate_task`'s `target`. `inherit-parent` means omit `target`. `blocked` means the panel cannot reach two model families on this T3, so record its reason.
+Get every target from the `pstack_model` tool. Pass the role name plus the job type and size from the routing table in poteto-mode's Subagents section. This skill's spawns are `design` jobs, and the cross-judge a `review` job. Write every brief from `<plugin root>/skills/poteto-mode/brief.md`: the extension refuses a `delegate_task` call whose brief is missing its sections or limits. Without a job, pass the complexity: `groundwork` for cheap mechanical work, `bounded` for involved but bounded work, `general` for work that needs substantial judgment. The tool reads the role's line in the model sheet (`~/.config/t3-pstack/models.md`, written by `/setup-pstack`). A line naming a model is used as written, moved to a provider T3 can run right now when needed. A role with no line, or `inherit-parent` or `auto`, is routed by this extension's `models.json`: the parent's model family, sized and reasoned by complexity, and for panels one seat per family. The extension blocks a `delegate_task` call that uses the reserved Fable model or fast mode unless the user named it, reasoning above what `pstack_model` returned, or reasoning above high unless the user's latest message is "allow xhigh". Pass each returned target as `delegate_task`'s `target`. `inherit-parent` means omit `target`. `blocked` means the panel cannot reach two model families on this T3, so record its reason.
 
 - arena runners: panel, one seat per model family
 - arena cross-judge pool: panel, one seat per model family

package/pstack/skills/how/SKILL.md

@@ -37,7 +37,7 @@ The explanation uses the sections defined in `references/explainer-prompt.md`, d
 
 ## Models
 
-Get every target from the `pstack_model` tool. Pass the role name plus the job type and size from the routing table in poteto-mode's Subagents section. This skill's spawns are `research` jobs, size S or M. Write every brief from `<plugin root>/skills/poteto-mode/brief.md`. Without a job, pass the complexity: `groundwork` for cheap mechanical work, `bounded` for involved but bounded work, `general` for work that needs substantial judgment. The tool reads the role's line in the model sheet (`~/.config/pi-t3-bridge/models.md`, written by `/setup-pstack`). A line naming a model is used as written, moved to a provider T3 can run right now when needed. A role with no line, or `inherit-parent` or `auto`, is routed by this extension's `models.json`: the parent's model family, sized and reasoned by complexity, and for panels one seat per family. Pass each returned target as `delegate_task`'s `target`. `inherit-parent` means omit `target`. `blocked` means the panel cannot reach two model families on this T3, so record its reason.
+Get every target from the `pstack_model` tool. Pass the role name plus the job type and size from the routing table in poteto-mode's Subagents section. This skill's spawns are `research` jobs, size S or M. Write every brief from `<plugin root>/skills/poteto-mode/brief.md`: the extension refuses a `delegate_task` call whose brief is missing its sections or limits. Without a job, pass the complexity: `groundwork` for cheap mechanical work, `bounded` for involved but bounded work, `general` for work that needs substantial judgment. The tool reads the role's line in the model sheet (`~/.config/t3-pstack/models.md`, written by `/setup-pstack`). A line naming a model is used as written, moved to a provider T3 can run right now when needed. A role with no line, or `inherit-parent` or `auto`, is routed by this extension's `models.json`: the parent's model family, sized and reasoned by complexity, and for panels one seat per family. The extension blocks a `delegate_task` call that uses the reserved Fable model or fast mode unless the user named it, reasoning above what `pstack_model` returned, or reasoning above high unless the user's latest message is "allow xhigh". Pass each returned target as `delegate_task`'s `target`. `inherit-parent` means omit `target`. `blocked` means the panel cannot reach two model families on this T3, so record its reason.
 
 - how explorer: one target
 - how explainer: one target

package/pstack/skills/interrogate/SKILL.md

@@ -32,6 +32,6 @@ Skip arena Phases C, D, and E. Adversaries find different failures, so the verdi
 
 ## Models
 
-Get every target from the `pstack_model` tool. Pass the role name plus the job type and size from the routing table in poteto-mode's Subagents section. This skill's spawns are `review` jobs, size S or M. Write every brief from `<plugin root>/skills/poteto-mode/brief.md`. Without a job, pass the complexity: `groundwork` for cheap mechanical work, `bounded` for involved but bounded work, `general` for work that needs substantial judgment. The tool reads the role's line in the model sheet (`~/.config/pi-t3-bridge/models.md`, written by `/setup-pstack`). A line naming a model is used as written, moved to a provider T3 can run right now when needed. A role with no line, or `inherit-parent` or `auto`, is routed by this extension's `models.json`: the parent's model family, sized and reasoned by complexity, and for panels one seat per family. Pass each returned target as `delegate_task`'s `target`. `inherit-parent` means omit `target`. `blocked` means the panel cannot reach two model families on this T3, so record its reason.
+Get every target from the `pstack_model` tool. Pass the role name plus the job type and size from the routing table in poteto-mode's Subagents section. This skill's spawns are `review` jobs, size S or M. Write every brief from `<plugin root>/skills/poteto-mode/brief.md`: the extension refuses a `delegate_task` call whose brief is missing its sections or limits. Without a job, pass the complexity: `groundwork` for cheap mechanical work, `bounded` for involved but bounded work, `general` for work that needs substantial judgment. The tool reads the role's line in the model sheet (`~/.config/t3-pstack/models.md`, written by `/setup-pstack`). A line naming a model is used as written, moved to a provider T3 can run right now when needed. A role with no line, or `inherit-parent` or `auto`, is routed by this extension's `models.json`: the parent's model family, sized and reasoned by complexity, and for panels one seat per family. The extension blocks a `delegate_task` call that uses the reserved Fable model or fast mode unless the user named it, reasoning above what `pstack_model` returned, or reasoning above high unless the user's latest message is "allow xhigh". Pass each returned target as `delegate_task`'s `target`. `inherit-parent` means omit `target`. `blocked` means the panel cannot reach two model families on this T3, so record its reason.
 
 - interrogate reviewers: panel, one seat per model family

package/pstack/skills/poteto-help/SKILL.md

@@ -24,7 +24,7 @@ Infer the need from the message and the conversation. A named situation, such as
 
 Check the state that changes the answer, and mention it only when it does:
 
-- No model sheet (`~/.config/pi-t3-bridge/models.md`, see `/setup-pstack`) means `/setup-pstack` hasn't run for this user, so every role uses its default model.
+- No model sheet (`~/.config/t3-pstack/models.md`, see `/setup-pstack`) means `/setup-pstack` hasn't run for this user, so every role uses its default model.
 - No `verify-*` skill or other app harness in the project means agents have no scripted way to drive the app. Mention `/create-verification-skill` when the question is about proving a change works.
 - No formal verification skill in the project means no property is checked past what tests reach. Mention `/create-formal-verification-skill` when the question is about a race, an invariant, or another case tests rarely hit. When one exists and the code it covers changed after the commit it records as last in sync, mention `/maintain-formal-verification-skill` if the question touches that code.
 

package/pstack/skills/poteto-mode/SKILL.md

@@ -94,13 +94,13 @@ Read the leaf skill in full for any principle you apply. Each entry names when i
 
 **Brief any subagent you spawn inside a playbook step as a `poteto-agent`** (code-writing delegates, ad-hoc helpers). The chat that receives `/poteto-mode` runs the playbook. Never spawn a `poteto-agent` to run the playbook itself. Routed workflow skills (`how`, `why`, `interrogate`, `reflect`, `swarm`) set their own brief and role for diverse-model review. Respect what the skill prescribes, don't override to `poteto-agent`.
 
-**Do it yourself, or delegate.** Do the work in this chat when any of these holds: you can't write an acceptance command that fails on wrong work (judgment, a design choice, prose for the user, a call only the user can make); the brief would take longer than the work (one file, under about 15 minutes or 50 changed lines); the work needs context from this chat that isn't in a file yet; you are checking a child's result; or a child already failed the same task twice, so the third attempt is yours or a split into smaller tasks. Otherwise delegate, with a complete brief.
+**Do it yourself, or delegate.** Do the work in this chat when any of these holds: you can't write an acceptance command that fails on wrong work (judgment, a design choice, prose for the user, a call only the user can make); the brief would take longer than the work (one file, under about 15 minutes or 50 changed lines); the work needs context from this chat that isn't in a file yet; you are checking a child's result; or a child already failed the same task twice, so the third attempt is yours or a split into smaller tasks. Otherwise delegate, with a brief that passes the extension's guard.
 
-**Every brief follows `<plugin root>/skills/poteto-mode/brief.md`.** It has a header with the job type, size (S or M), time limit and disk limit, then Goal, Acceptance command, Files you may write, Non-goals, Context, Stop conditions and Report. For a complete brief, the child's extension enforces the file list, a write sandbox, the time and disk limits, and red before green, and appends a report block written from commands it ran. Check a result by running its acceptance command, `git status --porcelain` against the file list, and `du -sk` yourself. Never judge a result by rereading the work.
+**Every brief follows `<plugin root>/skills/poteto-mode/brief.md`.** It has a header with the job type, size (S or M), time limit and disk limit, then Goal, Acceptance command, Files you may write, Non-goals, Context, Stop conditions and Report. The extension refuses a brief without them, a size L brief, and a GPT brief without `isolation: "worktree"`, size S, 30 min or less and 500 MB or less. The child's own extension then enforces the file list, a write sandbox, the time and disk limits, and red before green, and appends a report block written from commands it ran. Check a result by running its acceptance command, `git status --porcelain` against the file list, and `du -sk` yourself. Never judge a result by rereading the work.
 
 **Defaults for every `delegate_task` call.** `mode: "async"` (a steer or resume of a running child, a `t3_thread_send`, gets no `t3_thread_wait` either, because a waiting call holds your turn while other reports wait), full tool access (a read-only child gets "inspect only, change no file" in its brief), file pointers not inlined context, a `target` from `pstack_model` per job (see [Models](#models)). Code delegates tier by job type and size from the routing table: the hardest changes (cross-cutting design, gnarly concurrency, subtle algorithms) are job `hard`, and trivial mechanical edits are job `mechanical`. Per-role lines in the model sheet that `/setup-pstack` writes override these defaults and the model choices in the routed skills (`how`, `why`, `arena`, `swarm`, `architect`, `interrogate`, `reflect`). A role with no line keeps its default, and a role line of `inherit-parent` or `auto` runs that role on the parent chat model (omit `target`). Each code playbook's configured model comes from its line (`feature, refactoring`, `bug-fix`, `perf-issue`, or `hillclimb`), and the hardest changes read `hardest tasks`. Prose and judgment read `judgment and prose`.
 
-**Match the model to the job.** Before each spawn, call `pstack_model` with the role, the job type and the size. The routing table picks the tier, model and reasoning, routes around accounts that are out of usage, and keeps a panel's families diverse. Verification stays on `swarm workers`. Treat the routing table as a default, and follow the user's model, reasoning, and speed choices when they differ.
+**Match the model to the job.** Before each spawn, call `pstack_model` with the role, the job type and the size. The routing table picks the tier, model and reasoning, routes around accounts that are out of usage, and keeps a panel's families diverse. Verification stays on `swarm workers`. Standard speed applies. The extension blocks fast mode, the reserved Fable model unless the user named it, and any reasoning above what `pstack_model` returned. Reasoning above high runs only when the user's latest message is exactly "allow xhigh" (or "allow max"). Never put that line, or a `/pstack-` command, in a brief or a message to a child.
 
 | Job | S | M |
 |---|---|---|
@@ -176,7 +176,7 @@ A large or cross-cutting effort (a migration across many call sites, an ambitiou
 
 ## Models
 
-Get every target from the `pstack_model` tool. Pass the role name, the job type and the size from the routing table under [Subagents](#subagents). Without a job, pass the complexity instead: `groundwork` for cheap mechanical work, `bounded` for involved but bounded work, `general` for work that needs substantial judgment. The tool reads the role's line in the model sheet (`~/.config/pi-t3-bridge/models.md`, written by `/setup-pstack`). A line naming a model is used as written, moved to a provider T3 can run right now when needed. When that line names no reasoning level, the job's complexity sets it, as for routed roles. A role with no line, or `inherit-parent` or `auto`, is routed by this extension's `models.json`: the parent's model family, sized and reasoned by complexity, and for panels one seat per family. Pass each returned target as `delegate_task`'s `target`. `inherit-parent` means omit `target`. `blocked` means the panel cannot reach two model families on this T3, so record its reason.
+Get every target from the `pstack_model` tool. Pass the role name, the job type and the size from the routing table under [Subagents](#subagents). Without a job, pass the complexity instead: `groundwork` for cheap mechanical work, `bounded` for involved but bounded work, `general` for work that needs substantial judgment. The tool reads the role's line in the model sheet (`~/.config/t3-pstack/models.md`, written by `/setup-pstack`). A line naming a model is used as written, moved to a provider T3 can run right now when needed. When that line names no reasoning level, the job's complexity sets it, as for routed roles. A role with no line, or `inherit-parent` or `auto`, is routed by this extension's `models.json`: the parent's model family, sized and reasoned by complexity, and for panels one seat per family. The extension blocks a `delegate_task` call that uses the reserved Fable model or fast mode unless the user named it, reasoning above what `pstack_model` returned, or reasoning above high unless the user's latest message is "allow xhigh". Pass each returned target as `delegate_task`'s `target`. `inherit-parent` means omit `target`. `blocked` means the panel cannot reach two model families on this T3, so record its reason.
 
 - feature, refactoring: one target
 - bug-fix: one target

package/pstack/skills/poteto-mode/brief.md

@@ -1,6 +1,6 @@
 # Delegation brief
 
-Every `delegate_task` brief follows this template. Use the sections and limits to give the child a bounded task. A persona line ("Read `<plugin root>/agents/<name>.md` in full and act as it says") may come before `# Task:`.
+Every `delegate_task` brief follows this template. The extension refuses a brief that is missing a section, sized L, or over its size's limits, and a GPT brief that breaks the GPT rules. A persona line ("Read `<plugin root>/agents/<name>.md` in full and act as it says") may come before `# Task:`.
 
 Fill each `<...>`. Keep the headings exactly as written.
 
@@ -53,7 +53,7 @@ ISSUES or BLOCKED: one line each with file:line and the command that shows it
 
 - For `mechanical`, `implement` and `hard` jobs it must fail before the change. The child's extension runs it first. If it already passes, the child stops with BLOCKED, because the command checks nothing.
 - It must fail on wrong work, not only on a crash. A script that compares nothing and exits 0 is not an acceptance command. Pass the arguments it needs, and assert on its output when it prints a verdict.
-- A read-only job writes no files: list `- none` under "Files you may write". Its acceptance command checks the report exists or reruns the commands under review.
+- A `review` or `check` job writes no files: list `- none` under "Files you may write". Its acceptance command checks the report exists or reruns the commands under review.
 - Allow the tool caches the command needs. A brief that forbids `~/.cache/uv` stops `uv sync`.
 
 ## What the child's extension enforces
@@ -63,8 +63,8 @@ The child's own pstack extension reads this brief from its first message and enf
 - Every shell command runs in a macOS sandbox that can write only to the workdir, its git directory, the tool caches and the system temp folder.
 - `write` and `edit` only touch the listed files and `.scratch/`.
 - Shell timeouts stop at the time limit. After it, or past the disk limit, every tool is refused and the child can only report.
-- When the child ends its turn, the extension reruns the acceptance command, `git status` and `du`, and appends a "Checked by pi-t3-bridge" block with the real exit codes and STATUS. It also writes a ledger line to `~/.local/state/pi-t3/ledger.jsonl`.
+- When the child ends its turn, the extension reruns the acceptance command, `git status` and `du`, and appends a "Checked by t3-pstack" block with the real exit codes and STATUS. It also writes a ledger line to `~/.local/state/t3-pstack/ledger.jsonl`.
 
 ## GPT rules
 
-For GPT work, prefer size S, a worktree for writing tasks, and async mode. Follow the user's instructions when they differ.
+GPT models (Astra, Sol, Luna) drift on long or open work and leave files behind. A GPT brief must be size S, 30 min or less, 500 MB or less, with repo-relative paths, and the call must set `isolation: "worktree"` and keep `mode: "async"`.

package/pstack/skills/poteto-mode/playbooks/autopilot-full.md

@@ -9,7 +9,7 @@ A verdict covers one patch and green CI covers one head. Step 4 runs a full swar
 
    Open the PR early so CI and bots run alongside the work. The code is ready only after the slop-strip (the **deslop** skill, `/deslop`) and the `/no-comments` pass, so the full swarm runs on finished code. Then rebase onto current trunk and report the code-ready head before self-proof, so verification runs on the base the patch lands on. Report every later head, and merge-ready once self-proof, CI, and babysit are done. Fix rounds stay on that base unless trunk conflicts, breaks CI, or lands a known concurrent change to the same files, because each rebase restarts CI. Run the repo's checks for the touched paths on the committed head before the code-ready push and before a later push that needs a verifier.
 
-   Assume the owner's session dies. Soon after starting, push and start a decision trail in the root's store, `${XDG_STATE_HOME:-~/.local/state}/pi-t3-bridge/` (T3 names no agent store), per the **show-me-your-work** skill, then push each finished unit before you start the next. Whoever spawns a subagent records its id, state, and a stuck-after runtime from past runs of its kind in that store, so the root can probe it if the parent dies. Force-push only your own branch, with `--force-with-lease` pinned to the SHA you last pushed or took over, and on any push you did not make, stop and report to the root.
+   Assume the owner's session dies. Soon after starting, push and start a decision trail in the root's store, `${XDG_STATE_HOME:-~/.local/state}/t3-pstack/` (T3 names no agent store), per the **show-me-your-work** skill, then push each finished unit before you start the next. Whoever spawns a subagent records its id, state, and a stuck-after runtime from past runs of its kind in that store, so the root can probe it if the parent dies. Force-push only your own branch, with `--force-with-lease` pinned to the SHA you last pushed or took over, and on any push you did not make, stop and report to the root.
 3. **Run owners in parallel off trunk, never stacked,** so each PR lands on its own.
 4. **Swarm-verify once.** A full swarm runs once, at the code-ready head. Another full swarm runs only for new behavior, a redesign, or a large new diff. A rebase, a merge-conflict resolution, or a minor fix gets a single verifier at the new head, and a wording-only change gets none. Fan out independent verifiers at the code-ready SHA per the **swarm** skill, as `delegate_task` children assigned round-robin over the `interrogate reviewers` entries, so the lanes span model families. They re-run the gates, prove the load-bearing behavior live on the real surface through its control skill (see poteto-mode's Non-negotiables) or a named driver, and audit the diff. The verdict is not clean without the live lane, or before you audit the merge-ready report's receipts, because no lane trusts a claim it has not checked.
 

package/pstack/skills/poteto-mode/playbooks/orchestrate.md

@@ -2,7 +2,7 @@
 
 **You run the program, never the code. Decide which agent does each piece of work, then check what each one produces.** For a standing project handed to one coordinator chat: multi-day, many stacked PRs, dozens to hundreds of subagents, few human turns. One task driven to a predicate is Autonomous run. One ambitious run that needs a bespoke workflow is figure-it-out. Work that one agent could finish inside the session's budget is not a program.
 
-Run it with your own tools. Spawn workers with `delegate_task`. Keep the program's state in `${XDG_STATE_HOME:-~/.local/state}/pi-t3-bridge/orchestrate/<project-slug>/`, with the tracker in its `notes.md`. Watch each PR with `watch_pull_request` when this thread has it. It wakes this thread on failed checks, passed required checks, new comments or reviews, and conflicts. Call no scripts, run no polling loops, and never relay messages or status between agents.
+Run it with your own tools. Spawn workers with `delegate_task`. Keep the program's state in `${XDG_STATE_HOME:-~/.local/state}/t3-pstack/orchestrate/<project-slug>/`, with the tracker in its `notes.md`. Watch each PR with `watch_pull_request` when this thread has it. It wakes this thread on failed checks, passed required checks, new comments or reviews, and conflicts. Call no scripts, run no polling loops, and never relay messages or status between agents.
 
 #### Topology
 

package/pstack/skills/reflect/SKILL.md

@@ -80,7 +80,7 @@ Short list, no preamble:
 
 ## Models
 
-Get every target from the `pstack_model` tool. Pass the role name plus the job type and size from the routing table in poteto-mode's Subagents section. This skill's spawns are `research` jobs for tooling and `review` jobs for judgment. Write every brief from `<plugin root>/skills/poteto-mode/brief.md`. Without a job, pass the complexity: `groundwork` for cheap mechanical work, `bounded` for involved but bounded work, `general` for work that needs substantial judgment. The tool reads the role's line in the model sheet (`~/.config/pi-t3-bridge/models.md`, written by `/setup-pstack`). A line naming a model is used as written, moved to a provider T3 can run right now when needed. A role with no line, or `inherit-parent` or `auto`, is routed by this extension's `models.json`: the parent's model family, sized and reasoned by complexity, and for panels one seat per family. Pass each returned target as `delegate_task`'s `target`. `inherit-parent` means omit `target`. `blocked` means the panel cannot reach two model families on this T3, so record its reason.
+Get every target from the `pstack_model` tool. Pass the role name plus the job type and size from the routing table in poteto-mode's Subagents section. This skill's spawns are `research` jobs for tooling and `review` jobs for judgment. Write every brief from `<plugin root>/skills/poteto-mode/brief.md`: the extension refuses a `delegate_task` call whose brief is missing its sections or limits. Without a job, pass the complexity: `groundwork` for cheap mechanical work, `bounded` for involved but bounded work, `general` for work that needs substantial judgment. The tool reads the role's line in the model sheet (`~/.config/t3-pstack/models.md`, written by `/setup-pstack`). A line naming a model is used as written, moved to a provider T3 can run right now when needed. A role with no line, or `inherit-parent` or `auto`, is routed by this extension's `models.json`: the parent's model family, sized and reasoned by complexity, and for panels one seat per family. The extension blocks a `delegate_task` call that uses the reserved Fable model or fast mode unless the user named it, reasoning above what `pstack_model` returned, or reasoning above high unless the user's latest message is "allow xhigh". Pass each returned target as `delegate_task`'s `target`. `inherit-parent` means omit `target`. `blocked` means the panel cannot reach two model families on this T3, so record its reason.
 
 - reflect tooling: one target
 - reflect judgment, divergent, synthesizer: one target

package/pstack/skills/setup-pstack/SKILL.md

@@ -5,7 +5,7 @@ description: Configure which T3 provider and model pstack uses per role and at w
 
 # Setup pstack
 
-Write the model sheet, `~/.config/pi-t3-bridge/models.md` (`$XDG_CONFIG_HOME/pi-t3-bridge/models.md` when that is set), one per machine. It sets pstack's T3 provider and model per role, and every pstack skill reads it before it dispatches.
+Write the model sheet, `~/.config/t3-pstack/models.md` (`$XDG_CONFIG_HOME/t3-pstack/models.md` when that is set), one per machine. It sets pstack's T3 provider and model per role, and every pstack skill reads it before it dispatches.
 
 ## Steps
 
@@ -26,11 +26,11 @@ The default role-to-target mapping is the sheet shape in step 5 below. If the sh
 - `medium - high reasoning`
 - `small - medium reasoning`
 
-**(b) Apply it.** Build the working table from the defaults, and on a re-run keep any role you changed by provider, list, or alias (`inherit-parent`, `auto`). `unlimited`, `large`, and `small` set the reasoning option of every entry, panel entries included, to `max`, `xhigh`, or `medium`. `medium` writes no reasoning option, so `pstack_model` sets `low`, `medium`, or `high` from each job's complexity. Use the option ID that provider lists. If the provider does not offer that value, use its highest value at or below the target, else mark the role as needing a choice. So Grok, whose reasoning tops out at `xhigh`, stays at `xhigh` under `unlimited`. `inherit-parent` and `auto` do not change.
+**(b) Apply it.** Build the working table from the defaults, and on a re-run keep any role you changed by provider, list, or alias (`inherit-parent`, `auto`). `unlimited`, `large`, and `small` set the reasoning option of every entry, panel entries included, to `max`, `xhigh`, or `medium`. `medium` writes no reasoning option, so `pstack_model` sets `low`, `medium`, or `high` from each job's complexity. Use the option ID that provider lists. If the provider does not offer that value, use its highest value at or below the target, else mark the role as needing a choice. So Grok, whose reasoning tops out at `xhigh`, stays at `xhigh` under `unlimited`. `inherit-parent` and `auto` do not change. Say when you offer `unlimited` or `large` that a sheet's `xhigh` or `max` still runs only when the user's latest message in that chat is "allow xhigh" (or "allow max"). Otherwise `delegate_task` refuses it, so those budgets mostly fall back to asking.
 
 **(c) Show the roles and confirm.** Show every role with its entry, marking any target not in the detected set as needing a choice. Also list each line step 2 dropped. Ask whether to accept as-is or change specific roles, offering the detected targets plus `inherit-parent` and `auto` (both mean: this role runs on the parent chat's model) as the options. For panel roles (`arena runners`, `architect runners`, `interrogate reviewers`) the value is a list, and one subagent runs per entry, alias entries included, so the list length sets the count. A panel needs at least two model families among its targets. A model's family is the first segment of its ID's last `/` part, such as `claude`, `gpt`, or `grok`. `arena cross-judge pool` is also a list, but Arena runs one judge. It tries only values from a family other than the parent's. Among those it tries first the ones whose model ran fewer candidates, and list order decides among values that ran as many, so order it by preference. An `inherit-parent` or `auto` value never judges. `swarm workers` is the default target for every worker unless a race or comparison assigns another per arm.
 
-**(d) Ask about the session-start hook.** Ask whether pi-t3-bridge's session-start hook should keep telling new chats when to enter `/poteto-mode`. Write `session hook: on` or `session hook: off`.
+**(d) Ask about the session-start hook.** Ask whether t3-pstack's session-start hook should keep telling new chats when to enter `/poteto-mode`. Write `session hook: on` or `session hook: off`.
 
 ### 4. Validate
 

package/pstack/skills/statechart/scripts/run.ts

@@ -212,7 +212,7 @@ async function findTlc(cwd: string) {
   };
 }
 
-const exitClass = (status: number | null) =>
+const exitClass = (status: number | null): CheckResult["exit"] =>
   status === 0 ? 0 : status === 11 || status === 12 || status === 13 ? 1 : 2;
 
 const tail = (r: FileResult) => {

package/pstack/skills/swarm/SKILL.md

@@ -42,6 +42,6 @@ Return one consolidated in-chat report with a result table, issue one-liners, ga
 
 ## Models
 
-Get every target from the `pstack_model` tool. Pass the role name plus the job type and size from the routing table in poteto-mode's Subagents section. This skill's spawns are `check` jobs for verification workers and `implement` or `mechanical` jobs for build workers. Write every brief from `<plugin root>/skills/poteto-mode/brief.md`. Without a job, pass the complexity: `groundwork` for cheap mechanical work, `bounded` for involved but bounded work, `general` for work that needs substantial judgment. The tool reads the role's line in the model sheet (`~/.config/pi-t3-bridge/models.md`, written by `/setup-pstack`). A line naming a model is used as written, moved to a provider T3 can run right now when needed. A role with no line, or `inherit-parent` or `auto`, is routed by this extension's `models.json`: the parent's model family, sized and reasoned by complexity, and for panels one seat per family. Pass each returned target as `delegate_task`'s `target`. `inherit-parent` means omit `target`. `blocked` means the panel cannot reach two model families on this T3, so record its reason.
+Get every target from the `pstack_model` tool. Pass the role name plus the job type and size from the routing table in poteto-mode's Subagents section. This skill's spawns are `check` jobs for verification workers and `implement` or `mechanical` jobs for build workers. Write every brief from `<plugin root>/skills/poteto-mode/brief.md`: the extension refuses a `delegate_task` call whose brief is missing its sections or limits. Without a job, pass the complexity: `groundwork` for cheap mechanical work, `bounded` for involved but bounded work, `general` for work that needs substantial judgment. The tool reads the role's line in the model sheet (`~/.config/t3-pstack/models.md`, written by `/setup-pstack`). A line naming a model is used as written, moved to a provider T3 can run right now when needed. A role with no line, or `inherit-parent` or `auto`, is routed by this extension's `models.json`: the parent's model family, sized and reasoned by complexity, and for panels one seat per family. The extension blocks a `delegate_task` call that uses the reserved Fable model or fast mode unless the user named it, reasoning above what `pstack_model` returned, or reasoning above high unless the user's latest message is "allow xhigh". Pass each returned target as `delegate_task`'s `target`. `inherit-parent` means omit `target`. `blocked` means the panel cannot reach two model families on this T3, so record its reason.
 
 - swarm workers: one target

package/pstack/skills/why/SKILL.md

@@ -99,7 +99,7 @@ After Sources Consulted, if the user's `why` question is a precursor to changing
 
 ## Models
 
-Get every target from the `pstack_model` tool. Pass the role name plus the job type and size from the routing table in poteto-mode's Subagents section. This skill's spawns are `research` jobs for investigators and `hard` jobs for the synthesizer. Write every brief from `<plugin root>/skills/poteto-mode/brief.md`. Without a job, pass the complexity: `groundwork` for cheap mechanical work, `bounded` for involved but bounded work, `general` for work that needs substantial judgment. The tool reads the role's line in the model sheet (`~/.config/pi-t3-bridge/models.md`, written by `/setup-pstack`). A line naming a model is used as written, moved to a provider T3 can run right now when needed. A role with no line, or `inherit-parent` or `auto`, is routed by this extension's `models.json`: the parent's model family, sized and reasoned by complexity, and for panels one seat per family. Pass each returned target as `delegate_task`'s `target`. `inherit-parent` means omit `target`. `blocked` means the panel cannot reach two model families on this T3, so record its reason.
+Get every target from the `pstack_model` tool. Pass the role name plus the job type and size from the routing table in poteto-mode's Subagents section. This skill's spawns are `research` jobs for investigators and `hard` jobs for the synthesizer. Write every brief from `<plugin root>/skills/poteto-mode/brief.md`: the extension refuses a `delegate_task` call whose brief is missing its sections or limits. Without a job, pass the complexity: `groundwork` for cheap mechanical work, `bounded` for involved but bounded work, `general` for work that needs substantial judgment. The tool reads the role's line in the model sheet (`~/.config/t3-pstack/models.md`, written by `/setup-pstack`). A line naming a model is used as written, moved to a provider T3 can run right now when needed. A role with no line, or `inherit-parent` or `auto`, is routed by this extension's `models.json`: the parent's model family, sized and reasoned by complexity, and for panels one seat per family. The extension blocks a `delegate_task` call that uses the reserved Fable model or fast mode unless the user named it, reasoning above what `pstack_model` returned, or reasoning above high unless the user's latest message is "allow xhigh". Pass each returned target as `delegate_task`'s `target`. `inherit-parent` means omit `target`. `blocked` means the panel cannot reach two model families on this T3, so record its reason.
 
 - why investigators: one target
 - why synthesizer: one target

package/src/bridge/accounts.ts

@@ -1,10 +1,10 @@
-import { Type } from "@earendil-works/pi-ai";
-import type { Static } from "@earendil-works/pi-ai";
 import type {
   ExtensionAPI,
   ExtensionContext,
   ExtensionToolContext,
 } from "@earendil-works/pi-coding-agent";
+import { Type } from "typebox";
+import type { Static } from "typebox";
 import { Value } from "typebox/value";
 
 import { classifyFailure } from "./failures.ts";

package/src/bridge/ask.ts

@@ -1,11 +1,11 @@
-import { Type } from "@earendil-works/pi-ai";
-import type { Static } from "@earendil-works/pi-ai";
 import { defineTool } from "@earendil-works/pi-coding-agent";
 import type {
   ExtensionAPI,
   ExtensionUIContext,
   ExtensionUIDialogOptions,
 } from "@earendil-works/pi-coding-agent";
+import { Type } from "typebox";
+import type { Static } from "typebox";
 import { Value } from "typebox/value";
 
 import { registerUnlessTaken } from "./claim.ts";

package/src/bridge/bash-timeout.ts

@@ -1,5 +1,5 @@
-import { Type } from "@earendil-works/pi-ai";
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import { Type } from "typebox";
 import { Value } from "typebox/value";
 
 import { readConfig } from "./config.ts";

package/src/bridge/config.ts

@@ -2,9 +2,9 @@ import { readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import path from "node:path";
 
-import { Type } from "@earendil-works/pi-ai";
-import type { Static, TSchema } from "@earendil-works/pi-ai";
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import { Type } from "typebox";
+import type { Static, TSchema } from "typebox";
 import { Value } from "typebox/value";
 
 // The bridge's settings, one JSON file per machine. Each key is checked on its

package/src/bridge/plan.ts

@@ -1,9 +1,9 @@
-import { Type } from "@earendil-works/pi-ai";
 import { defineTool } from "@earendil-works/pi-coding-agent";
 import type {
   ExtensionAPI,
   ExtensionContext,
 } from "@earendil-works/pi-coding-agent";
+import { Type } from "typebox";
 
 import {
   escapeHtml,

package/src/bridge/resume.ts

@@ -1,9 +1,9 @@
-import { Type } from "@earendil-works/pi-ai";
-import type { Static } from "@earendil-works/pi-ai";
 import type {
   ExtensionAPI,
   ExtensionContext,
 } from "@earendil-works/pi-coding-agent";
+import { Type } from "typebox";
+import type { Static } from "typebox";
 import { Value } from "typebox/value";
 
 import type { Classified } from "./failures.ts";

package/src/bridge/state.ts

@@ -9,8 +9,8 @@ import {
 import { homedir } from "node:os";
 import path from "node:path";
 
-import { Type } from "@earendil-works/pi-ai";
-import type { Static } from "@earendil-works/pi-ai";
+import { Type } from "typebox";
+import type { Static } from "typebox";
 import { Value } from "typebox/value";
 
 // Machine-wide bridge state, shared by every Pi session: which model families

package/src/bridge/steer-judge.ts

@@ -1,14 +1,14 @@
 import { readFileSync } from "node:fs";
 import path from "node:path";
 
-import { Type } from "@earendil-works/pi-ai";
 import type {
   ClassifierBoolQuestion,
   ClassifierContext,
   JsonObject,
-  Static,
 } from "@earendil-works/pi-ai";
 import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
+import { Type } from "typebox";
+import type { Static } from "typebox";
 import { Value } from "typebox/value";
 
 import type { MastExcerpt, StopInput } from "./steer-transcript.ts";

package/src/bridge/steer-transcript.ts

@@ -1,5 +1,5 @@
-import { Type } from "@earendil-works/pi-ai";
 import type { SessionEntry } from "@earendil-works/pi-coding-agent";
+import { Type } from "typebox";
 import { Value } from "typebox/value";
 
 // Turns the session branch into the text the stop judge reads. The rendering

package/src/bridge/steer.ts

@@ -1,5 +1,4 @@
 import type { AssistantMessage } from "@earendil-works/pi-ai";
-import { Type } from "@earendil-works/pi-ai";
 import type {
   AgentBeforeSettleEvent,
   BoundaryResult,
@@ -7,6 +6,7 @@ import type {
   ExtensionContext,
   SessionEntry,
 } from "@earendil-works/pi-coding-agent";
+import { Type } from "typebox";
 import { Value } from "typebox/value";
 
 import { TERMINAL_STATUSES } from "./accounts.ts";

package/src/bridge/t3-json.ts

@@ -1,5 +1,5 @@
-import { Type } from "@earendil-works/pi-ai";
-import type { Static, TSchema } from "@earendil-works/pi-ai";
+import { Type } from "typebox";
+import type { Static, TSchema } from "typebox";
 import { Value } from "typebox/value";
 
 const ResultEnvelopeSchema = Type.Object({

package/src/bridge/tasks.ts

@@ -1,6 +1,6 @@
-import { Type } from "@earendil-works/pi-ai";
-import type { Static } from "@earendil-works/pi-ai";
 import { defineTool } from "@earendil-works/pi-coding-agent";
+import { Type } from "typebox";
+import type { Static } from "typebox";
 
 import {
   escapeHtml,

package/src/bridge/thread.ts

@@ -1,4 +1,4 @@
-import { Type } from "@earendil-works/pi-ai";
+import { Type } from "typebox";
 import { Value } from "typebox/value";
 
 import { callT3Tool, insideT3 } from "./t3-http.ts";

package/src/bridge/transcript.ts

@@ -1,10 +1,10 @@
-import { Type } from "@earendil-works/pi-ai";
-import type { Static } from "@earendil-works/pi-ai";
 import { defineTool } from "@earendil-works/pi-coding-agent";
 import type {
   ExtensionAPI,
   ExtensionContext,
 } from "@earendil-works/pi-coding-agent";
+import { Type } from "typebox";
+import type { Static } from "typebox";
 
 import { registerUnlessTaken } from "./claim.ts";
 

package/src/pstack/brief.ts

@@ -1,5 +1,5 @@
-import { Type } from "@earendil-works/pi-ai";
 import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
+import { Type } from "typebox";
 import { Value } from "typebox/value";
 
 // The child's extension reads its limits from the delegation brief

package/src/pstack/child.ts

@@ -4,11 +4,11 @@ import { homedir } from "node:os";
 import path from "node:path";
 import { promisify } from "node:util";
 
-import { Type } from "@earendil-works/pi-ai";
 import type {
   ExtensionAPI,
   ExtensionContext,
 } from "@earendil-works/pi-coding-agent";
+import { Type } from "typebox";
 import { Value } from "typebox/value";
 
 import { bashTimeoutSeconds } from "../bridge/bash-timeout.ts";