pi-vault-mind 0.8.0 → 0.8.3

package/dist/src/context-capture.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Context Capture — Layer 4 auto-trigger pi-context /acm.
+ *
+ * On extension load, auto-sends /acm to enable agentic context management.
+ * Injects context_checkpoint instructions into agent task prompts.
+ *
+ * Note: context_compact requires CommandCtx (only in main session, not
+ * subagent forks). Subagent forks use context_checkpoint and context_timeline.
+ */
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+/**
+ * Auto-send /acm on extension load to enable agentic context management
+ * for the Manager session.
+ */
+export declare function enableACM(pi: ExtensionAPI): void;
+/**
+ * Build context_checkpoint instructions to inject into a dispatch task prompt.
+ *
+ * Checkpoint naming convention: vault-mind-{role}-{dispatchId}-{phase}
+ * for audit traceability.
+ */
+export declare function buildCheckpointInstructions(role: string, dispatchId: string): string;

package/dist/src/context-capture.js

@@ -0,0 +1,41 @@
+/**
+ * Context Capture — Layer 4 auto-trigger pi-context /acm.
+ *
+ * On extension load, auto-sends /acm to enable agentic context management.
+ * Injects context_checkpoint instructions into agent task prompts.
+ *
+ * Note: context_compact requires CommandCtx (only in main session, not
+ * subagent forks). Subagent forks use context_checkpoint and context_timeline.
+ */
+// ── ACM auto-trigger ──────────────────────────────────────────────────────────
+/**
+ * Auto-send /acm on extension load to enable agentic context management
+ * for the Manager session.
+ */
+export function enableACM(pi) {
+    pi.sendUserMessage("/acm Enable agentic context management for this vault-mind session. " +
+        "Use context_checkpoint to mark major dispatch milestones. " +
+        "Use context_timeline to review progress. " +
+        "Use context_compact when context is full.", { deliverAs: "followUp" });
+}
+// ── Checkpoint instructions for agent task prompts ────────────────────────────
+/**
+ * Build context_checkpoint instructions to inject into a dispatch task prompt.
+ *
+ * Checkpoint naming convention: vault-mind-{role}-{dispatchId}-{phase}
+ * for audit traceability.
+ */
+export function buildCheckpointInstructions(role, dispatchId) {
+    return [
+        "## Context Management",
+        "Use context_checkpoint to mark major milestones in your work:",
+        "",
+        `- Start: context_checkpoint({ name: "vault-mind-${role}-${dispatchId}-start" })`,
+        `- After reading source: context_checkpoint({ name: "vault-mind-${role}-${dispatchId}-read" })`,
+        `- After executing tools: context_checkpoint({ name: "vault-mind-${role}-${dispatchId}-execute" })`,
+        `- Before writeback: context_checkpoint({ name: "vault-mind-${role}-${dispatchId}-writeback" })`,
+        "",
+        "Use context_timeline to review your progress at any point.",
+        "These checkpoints create an audit trail for the Agent/Journal/.",
+    ].join("\n");
+}

package/dist/src/discover-schema.d.ts

@@ -23,5 +23,5 @@ export declare const writeCollectionToConfig: (cwd: string, name: string, def: C
 export declare const runDiscoverSchema: (cwd: string, file: string, name?: string, sample?: number) => DiscoverSchemaResult;
 /** Register the `discover_schema` Pi tool. */
 export declare const registerDiscoverSchemaTool: (pi: ExtensionAPI) => void;
-/** Handler for the /wiki discover-schema slash command. */
+/** Handler for the /vm discover-schema slash command. */
 export declare const handleDiscoverSchema: (args: string, ctx: ExtensionContext) => Promise<void>;

package/dist/src/discover-schema.js

@@ -148,7 +148,7 @@ export const registerDiscoverSchemaTool = (pi) => {
     pi.registerTool({
         name: "discover_schema",
         label: "Discover JSONL Schema",
-        description: "Infer the schema of an unconfigured .jsonl file by sampling its first N rows and register it as a wiki collection.",
+        description: "Infer the schema of an unconfigured .jsonl file by sampling its first N rows and register it as a collection.",
         promptSnippet: 'discover_schema(file="data/events.jsonl", name="events", sample=100)',
         promptGuidelines: [
             "Use when you have a .jsonl file that is not yet mapped in pi-vault-mind.config.json.",
@@ -184,11 +184,11 @@ export const registerDiscoverSchemaTool = (pi) => {
         },
     });
 };
-/** Parse CLI-style arguments for /wiki discover-schema. */
+/** Parse CLI-style arguments for /vm discover-schema. */
 const parseDiscoverSchemaArgs = (args) => {
     const tokens = args.trim().split(/\s+/).filter(Boolean);
     if (tokens.length === 0) {
-        return { error: "Usage: /wiki discover-schema <file> [--name <collection>] [--sample <n>]" };
+        return { error: "Usage: /vm discover-schema <file> [--name <collection>] [--sample <n>]" };
     }
     let file;
     let name;
@@ -223,7 +223,7 @@ const parseDiscoverSchemaArgs = (args) => {
     }
     return { file, name, sample };
 };
-/** Handler for the /wiki discover-schema slash command. */
+/** Handler for the /vm discover-schema slash command. */
 export const handleDiscoverSchema = async (args, ctx) => {
     const parsed = parseDiscoverSchemaArgs(args);
     if (parsed.error) {

package/dist/src/embed-queue.d.ts

@@ -24,7 +24,7 @@
  *
  *   ROUTING POLICY (yours to own, not baked in here):
  *     - append / ingest / bulk → coalescer.embed(text, "document")   [debounced]
- *     - interactive wiki_search → coalescer.embedImmediate(query, "query")
+ *     - interactive vm_search → coalescer.embedImmediate(query, "query")
  *       (latency-sensitive; bypasses the debounce)
  *
  *   It is provider-agnostic: `embedFn` can wrap modal, ollama, or transformers —

package/dist/src/embed-queue.js

@@ -24,7 +24,7 @@
  *
  *   ROUTING POLICY (yours to own, not baked in here):
  *     - append / ingest / bulk → coalescer.embed(text, "document")   [debounced]
- *     - interactive wiki_search → coalescer.embedImmediate(query, "query")
+ *     - interactive vm_search → coalescer.embedImmediate(query, "query")
  *       (latency-sensitive; bypasses the debounce)
  *
  *   It is provider-agnostic: `embedFn` can wrap modal, ollama, or transformers —

package/dist/src/engine.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Vault Mind Agent Engine — agent lifecycle manager.
+ *
+ * Adapted from microfactory's engine loop pattern. On extension load:
+ * 1. Discover .agent.md files via AgentLoader
+ * 2. Instantiate agents, register with MessageBus
+ * 3. Register agent identities with the bridge for tool gating
+ * 4. Run agent tick() loops concurrently
+ *
+ * Vendored patterns from kylebrodeur/pi-agent-bus and kylebrodeur/microfactory (MIT).
+ */
+import type { MessageBus } from "./agent-bus/MessageBus.js";
+import type { TaskQueue } from "./agent-bus/TaskQueue.js";
+import { type AgentIdentity } from "./bridge.js";
+import type { IdentityConfig } from "./types.js";
+/** Register all vault-mind agent types. Call once at extension load. */
+export declare function registerAgentTypes(): void;
+export interface EngineConfig {
+    /**
+     * Extra directory containing user .agent.md files (e.g. <vault>/.agents/).
+     * Bundled defaults from EXT_ROOT/agents/ are always loaded first.
+     * User files with the same id override bundled defaults.
+     * Optional — safe to omit.
+     */
+    agentsDir?: string;
+    /** Shared MessageBus for agent coordination. */
+    bus: MessageBus;
+    /** Shared TaskQueue for work distribution. */
+    taskQueue: TaskQueue;
+}
+export interface EngineState {
+    bus: MessageBus;
+    taskQueue: TaskQueue;
+    agents: import("./agent-bus/Agent.js").Agent[];
+    running: boolean;
+}
+/**
+ * Create and start the agent engine.
+ *
+ * Discovers .agent.md files, instantiates agents, registers identities
+ * with the bridge, and begins the tick loop.
+ */
+export declare function startEngine(config: EngineConfig): Promise<EngineState>;
+/** Stop the engine. */
+export declare function stopEngine(state: EngineState): void;
+/**
+ * Hard-coded last-resort identity profile for a role. Returns the baseline
+ * allowlist / write-scope / publish-bit used when no `identities` block is
+ * present in config. See P0 in `docs/plans/agent-identity-model.md`.
+ */
+export declare function buildIdentityFromRole(role: string, id: string): AgentIdentity;
+/**
+ * Merge identity layers (later wins): `base` ← `defaultProfile` ← `roleProfile`.
+ *
+ * Merges `allowedTools`, `writeCollections`, `canPublish`, `allowedVaultPaths`,
+ * `readCollections`, and `egressAllowlist`.
+ * Other `IdentityConfig` fields (`tokenRef`) are accepted in config for
+ * forward-compat but not applied here.
+ *
+ * Fields that are `undefined` in a layer are left untouched, so a config can
+ * override `writeCollections` alone without having to restate the full
+ * allowlist. `id` and `role` always come from `base` — config cannot rename
+ * an agent.
+ */
+export declare function mergeIdentityProfiles(base: AgentIdentity, defaultProfile: IdentityConfig | undefined, roleProfile: IdentityConfig | undefined): AgentIdentity;

package/dist/src/engine.js

@@ -0,0 +1,244 @@
+/**
+ * Vault Mind Agent Engine — agent lifecycle manager.
+ *
+ * Adapted from microfactory's engine loop pattern. On extension load:
+ * 1. Discover .agent.md files via AgentLoader
+ * 2. Instantiate agents, register with MessageBus
+ * 3. Register agent identities with the bridge for tool gating
+ * 4. Run agent tick() loops concurrently
+ *
+ * Vendored patterns from kylebrodeur/pi-agent-bus and kylebrodeur/microfactory (MIT).
+ */
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { AgentLoader } from "./agent-bus/AgentLoader.js";
+import { AgentRegistry } from "./agent-bus/AgentRegistry.js";
+import { AgentModelProvider } from "./agent-bus/LLMProvider.js";
+import { BroadcasterAgent, HeavyLifterAgent, ManagerAgent, MinerAgent } from "./agents/index.js";
+import { registerAgentIdentity } from "./bridge.js";
+import { EXT_ROOT, loadConfig, resolveVaultFolder } from "./utils.js";
+// ── Agent registry setup ─────────────────────────────────────────────────────
+/** Register all vault-mind agent types. Call once at extension load. */
+export function registerAgentTypes() {
+    AgentRegistry.register("HeavyLifterAgent", HeavyLifterAgent);
+    AgentRegistry.register("MinerAgent", MinerAgent);
+    AgentRegistry.register("BroadcasterAgent", BroadcasterAgent);
+    AgentRegistry.register("ManagerAgent", ManagerAgent);
+}
+/**
+ * Create and start the agent engine.
+ *
+ * Discovers .agent.md files, instantiates agents, registers identities
+ * with the bridge, and begins the tick loop.
+ */
+export async function startEngine(config) {
+    registerAgentTypes();
+    // Load config early — needed by llmProviderFactory for model/baseUrl defaults
+    const cfg = loadConfig(process.cwd());
+    const llmProviderFactory = async (_provider, _model) => {
+        // Use AgentModelProvider for real LLM access. Model comes from the agent's
+        // .agent.md frontmatter (llm_model field) or falls back to the agentLLM
+        // config — vault-mind agents need a reasoning model, not a dummy.
+        const agentLLM = cfg.vaultMind.agentLLM ?? {};
+        const model = _model && _model !== "none" ? _model : agentLLM.model;
+        const remoteUrl = agentLLM.remoteUrl || "http://127.0.0.1:11434/v1";
+        return new AgentModelProvider({
+            model,
+            remoteUrl,
+            localUrl: agentLLM.localUrl,
+            temperature: 0.1,
+        });
+    };
+    // 1. Always load bundled defaults from EXT_ROOT/agents/
+    const bundledDir = path.join(EXT_ROOT, "agents");
+    const bundledLoader = new AgentLoader({
+        agentsDirectory: bundledDir,
+        bus: config.bus,
+        llmProviderFactory,
+    });
+    const bundledAgents = await bundledLoader.loadAgents();
+    const agentMap = new Map(bundledAgents.map((a) => [a.config.id, a]));
+    // 2. Optionally load user overrides from <vault>/.agents/
+    const userDir = config.agentsDir ?? path.join(process.cwd(), ".agents");
+    if (fs.existsSync(userDir)) {
+        const userLoader = new AgentLoader({
+            agentsDirectory: userDir,
+            bus: config.bus,
+            llmProviderFactory,
+        });
+        const userAgents = await userLoader.loadAgents();
+        // User files with the same id override bundled defaults
+        for (const agent of userAgents) {
+            agentMap.set(agent.config.id, agent);
+        }
+    }
+    const agents = Array.from(agentMap.values());
+    // Set task queue on each agent (not passed via constructor — AgentLoader
+    // creates agents with (config, bus, llm?) signature)
+    for (const agent of agents) {
+        if ("setTaskQueue" in agent) {
+            agent.setTaskQueue(config.taskQueue);
+        }
+    }
+    // Register each agent's identity with the bridge for tool gating.
+    // Per-role identity profiles can be overridden via the user's vault config
+    // (`identities.defaultProfile` baseline + `identities.roles[role]` per-role);
+    // absent config means the hard-coded `buildIdentityFromRole` map applies.
+    const identitiesCfg = cfg.vaultMind.identities ?? {};
+    const presentationsFolder = resolveVaultFolder(cfg.vaultMind, "presentations");
+    for (const agent of agents) {
+        const base = buildIdentityFromRole(agent.config.role, agent.config.id);
+        if (base.role === "broadcaster") {
+            base.allowedVaultPaths = [`${presentationsFolder}/`];
+        }
+        const identity = mergeIdentityProfiles(base, identitiesCfg.defaultProfile, identitiesCfg.roles?.[agent.config.role]);
+        registerAgentIdentity(identity);
+    }
+    // Start tick loop — agents are event-driven, tick is a no-op heartbeat
+    const state = {
+        bus: config.bus,
+        taskQueue: config.taskQueue,
+        agents,
+        running: true,
+    };
+    // Heartbeat: periodically tick all agents
+    const tickInterval = setInterval(() => {
+        if (!state.running) {
+            clearInterval(tickInterval);
+            return;
+        }
+        for (const agent of state.agents) {
+            void agent.tick().catch((err) => {
+                console.error(`[Engine] Agent ${agent.config.id} tick error:`, err);
+            });
+        }
+    }, 5000);
+    return state;
+}
+/** Stop the engine. */
+export function stopEngine(state) {
+    state.running = false;
+}
+// ── Identity builder ─────────────────────────────────────────────────────────
+/**
+ * Hard-coded last-resort identity profile for a role. Returns the baseline
+ * allowlist / write-scope / publish-bit used when no `identities` block is
+ * present in config. See P0 in `docs/plans/agent-identity-model.md`.
+ */
+export function buildIdentityFromRole(role, id) {
+    switch (role) {
+        case "heavy-lifter":
+            return {
+                id,
+                role,
+                allowedTools: [
+                    "read",
+                    "write",
+                    "edit",
+                    "grep",
+                    "find",
+                    "ls",
+                    "bash",
+                    "vm_search",
+                    "vm_fts_search",
+                ],
+                writeCollections: [],
+                canPublish: false,
+            };
+        case "miner":
+            return {
+                id,
+                role,
+                allowedTools: [
+                    "read",
+                    "write",
+                    "edit",
+                    "grep",
+                    "find",
+                    "ls",
+                    "vm_search",
+                    "vm_fts_search",
+                    "vm_append",
+                ],
+                writeCollections: ["main", "research"],
+                canPublish: false,
+            };
+        case "broadcaster":
+            return {
+                id,
+                role,
+                allowedTools: ["read", "write", "edit", "vm_search", "vm_fts_search"],
+                writeCollections: [],
+                canPublish: false,
+            };
+        case "manager":
+            return {
+                id,
+                role,
+                allowedTools: [
+                    "read",
+                    "write",
+                    "edit",
+                    "grep",
+                    "find",
+                    "ls",
+                    "vm_search",
+                    "vm_fts_search",
+                    "vm_append",
+                    "vm_sync",
+                    "vm_promote",
+                    "vm_query",
+                    "vm_configure",
+                    "vm_describe",
+                    "vm_stats",
+                    "vm_export",
+                    "vm_ingest",
+                    "vm_status",
+                    "vm_graph_query",
+                ],
+                writeCollections: ["main", "research", "presentations"],
+                canPublish: true,
+            };
+        default:
+            return {
+                id,
+                role,
+                allowedTools: ["read", "vm_search", "vm_fts_search"],
+                writeCollections: [],
+                canPublish: false,
+            };
+    }
+}
+/**
+ * Merge identity layers (later wins): `base` ← `defaultProfile` ← `roleProfile`.
+ *
+ * Merges `allowedTools`, `writeCollections`, `canPublish`, `allowedVaultPaths`,
+ * `readCollections`, and `egressAllowlist`.
+ * Other `IdentityConfig` fields (`tokenRef`) are accepted in config for
+ * forward-compat but not applied here.
+ *
+ * Fields that are `undefined` in a layer are left untouched, so a config can
+ * override `writeCollections` alone without having to restate the full
+ * allowlist. `id` and `role` always come from `base` — config cannot rename
+ * an agent.
+ */
+export function mergeIdentityProfiles(base, defaultProfile, roleProfile) {
+    const merged = { ...base };
+    for (const layer of [defaultProfile, roleProfile]) {
+        if (!layer)
+            continue;
+        if (layer.allowedTools !== undefined)
+            merged.allowedTools = layer.allowedTools;
+        if (layer.writeCollections !== undefined)
+            merged.writeCollections = layer.writeCollections;
+        if (layer.canPublish !== undefined)
+            merged.canPublish = layer.canPublish;
+        if (layer.allowedVaultPaths !== undefined)
+            merged.allowedVaultPaths = layer.allowedVaultPaths;
+        if (layer.egressAllowlist !== undefined)
+            merged.egressAllowlist = layer.egressAllowlist;
+        if (layer.readCollections !== undefined)
+            merged.readCollections = layer.readCollections;
+    }
+    return merged;
+}

package/dist/src/events.js

@@ -8,7 +8,7 @@ import { ensureDir, getPiContextConfig, hasPiContextTools, loadConfig } from "./
 export const handleBeforeAgentStart = async (pi, event, ctx) => {
     const cfg = loadConfig(ctx.cwd);
     const activeCollection = getActiveCollection(ctx.cwd);
-    let additions = `\n\n[Active Collection Context]\nThe currently active collection is "${activeCollection}". When using append_wiki or running queries, prefer this collection as the target unless specified otherwise.\n`;
+    let additions = `\n\n[Active Collection Context]\nThe currently active collection is "${activeCollection}". When using vm_append or running queries, prefer this collection as the target unless specified otherwise.\n`;
     // 1. Standard injector matching
     for (const ij of cfg.injectors) {
         const regex = new RegExp(ij.regex, "i");

package/dist/src/graph.d.ts

@@ -1,3 +1,3 @@
-import type { WikiConfig } from "./types.js";
-export declare const graphUpsert: (dataDir: string, cfg: WikiConfig, entry: Record<string, string>) => Promise<void>;
-export declare const queryGraph: (dataDir: string, cfg: WikiConfig, entityQuery: string, depth: number) => Promise<unknown>;
+import type { VaultMindConfig } from "./types.js";
+export declare const graphUpsert: (dataDir: string, cfg: VaultMindConfig, entry: Record<string, string>) => Promise<void>;
+export declare const queryGraph: (dataDir: string, cfg: VaultMindConfig, entityQuery: string, depth: number) => Promise<unknown>;

package/dist/src/identity-injector.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Identity Injector — Layer 3 system prompt boundary contract.
+ *
+ * Hooks pi.on("before_agent_start") to inject a hardened system prompt
+ * per role stating capability boundaries as a contract. Pattern adapted
+ * from pi-guideline-loader (kylebrodeur/pi-guideline-loader, MIT).
+ */
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+/**
+ * Register the identity injector on a pi ExtensionAPI.
+ *
+ * On every before_agent_start event, detects the current role and injects
+ * the corresponding boundary prompt into the system prompt.
+ */
+export declare function registerIdentityInjector(pi: ExtensionAPI): void;

package/dist/src/identity-injector.js

@@ -0,0 +1,102 @@
+/**
+ * Identity Injector — Layer 3 system prompt boundary contract.
+ *
+ * Hooks pi.on("before_agent_start") to inject a hardened system prompt
+ * per role stating capability boundaries as a contract. Pattern adapted
+ * from pi-guideline-loader (kylebrodeur/pi-guideline-loader, MIT).
+ */
+// ── Per-role boundary prompts ────────────────────────────────────────────────
+const BOUNDARY_PROMPTS = {
+    "heavy-lifter": [
+        "--- IDENTITY BOUNDARY: Heavy-Lifter ---",
+        "You are the Heavy-Lifter agent. Your capability boundary:",
+        "- You MAY: read files, write files, edit files, run bash commands, search with grep/find/ls.",
+        "- You MUST NOT: write to the durable knowledge store (vm_append, vm_sync are disabled).",
+        "  Route all findings to the Miner for storage.",
+        "- You MUST NOT: spawn sub-agents.",
+        "- You MUST NOT: publish to the human-facing vault.",
+        "- All bash commands run in an isolated worktree. Do not modify files outside it.",
+        "------------------------------------------",
+    ].join("\n"),
+    miner: [
+        "--- IDENTITY BOUNDARY: Miner ---",
+        "You are the Miner agent. Your capability boundary:",
+        "- You MAY: read files, write files, edit files, search with grep/find/ls.",
+        "- You MAY: append to collections 'main' and 'research' via vm_append.",
+        "- You MUST NOT: run bash commands.",
+        "- You MUST NOT: publish to the human-facing vault (vm_sync is disabled).",
+        "- You MUST NOT: spawn sub-agents.",
+        "------------------------------------------",
+    ].join("\n"),
+    broadcaster: [
+        "--- IDENTITY BOUNDARY: Broadcaster ---",
+        "You are the Broadcaster agent. Your capability boundary:",
+        "- You MAY: read files, write files, edit files.",
+        "- You MAY: search collections via vm_search, vm_fts_search.",
+        "- You MUST NOT: run bash commands, grep, or find.",
+        "- You MUST NOT: write to the durable knowledge store.",
+        "- You MUST NOT: publish or spawn sub-agents.",
+        "- Write output only under Agent/Presentations/.",
+        "------------------------------------------",
+    ].join("\n"),
+    manager: [
+        "--- IDENTITY BOUNDARY: Manager ---",
+        "You are the Manager agent. Your capability boundary:",
+        "- You MAY: all vm_* tools, read, write, edit, grep, find, ls.",
+        "- You MAY: write to any collection.",
+        "- You MAY: publish to the human-facing vault via vm_sync.",
+        "- You MAY: dispatch sub-agents.",
+        "- You MUST NOT: run bash commands.",
+        "------------------------------------------",
+    ].join("\n"),
+};
+// ── Role detection ────────────────────────────────────────────────────────────
+/**
+ * Detect the current agent's role from a before_agent_start event.
+ *
+ * PRIMARY signal — event.systemPromptOptions.skills:
+ *   pi loads `--agent vault-mind-{role}` as a named Skill (Skill.name == "vault-mind-{role}").
+ *   Exact name match is structural and immune to prose false-positives.
+ *
+ * FALLBACK signal — system prompt XML:
+ *   Only when no matching skill is present. Matches only the machine-generated
+ *   `<name>vault-mind-{role}</name>` element emitted by formatSkillsForPrompt()
+ *   inside <available_skills> — not any free-text prose mention of the role name.
+ *
+ * Returns undefined for any non-vault-mind session; no injection occurs.
+ */
+function detectRole(event) {
+    // PRIMARY: exact skill name match — most reliable, no prose false-positive risk.
+    const skills = event.systemPromptOptions.skills;
+    if (skills) {
+        for (const skill of skills) {
+            const m = skill.name.match(/^vault-mind-(heavy-lifter|miner|broadcaster|manager)$/i);
+            if (m)
+                return m[1].toLowerCase();
+        }
+    }
+    // FALLBACK: only the assembled system prompt is available — match the XML
+    // <name> token produced by formatSkillsForPrompt(), not free prose.
+    const m = event.systemPrompt.match(/<name>vault-mind-(heavy-lifter|miner|broadcaster|manager)<\/name>/i);
+    return m?.[1]?.toLowerCase();
+}
+// ── Injector ──────────────────────────────────────────────────────────────────
+/**
+ * Register the identity injector on a pi ExtensionAPI.
+ *
+ * On every before_agent_start event, detects the current role and injects
+ * the corresponding boundary prompt into the system prompt.
+ */
+export function registerIdentityInjector(pi) {
+    pi.on("before_agent_start", async (event) => {
+        const role = detectRole(event);
+        if (!role)
+            return;
+        const boundaryPrompt = BOUNDARY_PROMPTS[role];
+        if (!boundaryPrompt)
+            return;
+        return {
+            systemPrompt: `${event.systemPrompt}\n\n${boundaryPrompt}`,
+        };
+    });
+}