ultimate-pi 0.12.0 → 0.13.1

package/.pi/extensions/lib/harness-subagents-bridge.ts

@@ -12,6 +12,7 @@ import {
 	type HarnessSubagentsOptions,
 	type SpawnAuthForward,
 } from "../../../vendor/pi-subagents/src/subagents.js";
+import { refreshHarnessCocoindexIndex } from "./harness-cocoindex-refresh.js";
 import { captureHarnessEvent } from "./harness-posthog.js";
 import {
 	checkHarnessSpawnBudget,
@@ -32,37 +33,6 @@ import {
 const spawnBudget = createSpawnBudgetState();
 let lastSessionId = "harness";
 
-function maskApiKey(key: string | undefined): string | undefined {
-	if (!key) return undefined;
-	if (key.length <= 12) return "***";
-	return `${key.slice(0, 7)}…${key.slice(-4)}`;
-}
-
-// #region agent log
-function agentDebugLog(
-	hypothesisId: string,
-	location: string,
-	message: string,
-	data: Record<string, unknown>,
-): void {
-	fetch("http://127.0.0.1:7928/ingest/a5d40896-34cb-4f12-97db-df7ada0b22f0", {
-		method: "POST",
-		headers: {
-			"Content-Type": "application/json",
-			"X-Debug-Session-Id": "e762d5",
-		},
-		body: JSON.stringify({
-			sessionId: "e762d5",
-			hypothesisId,
-			location,
-			message,
-			data,
-			timestamp: Date.now(),
-		}),
-	}).catch(() => {});
-}
-// #endregion
-
 async function resolveHarnessSpawnAuth(
 	ctx: ExtensionContext,
 	agent: AgentConfig,
@@ -72,43 +42,11 @@ async function resolveHarnessSpawnAuth(
 		: undefined;
 	const concrete = resolveConcreteSubagentModel(ctx.cwd, parentModel, agent);
 	if (!concrete) {
-		// #region agent log
-		agentDebugLog(
-			"D",
-			"harness-subagents-bridge.ts:resolveHarnessSpawnAuth",
-			"no concrete model",
-			{
-				agent: agent.name,
-				agentModel: agent.model,
-				parentModel: parentModel
-					? `${parentModel.provider}/${parentModel.id}`
-					: undefined,
-			},
-		);
-		// #endregion
 		return undefined;
 	}
 	const apiKey = await ctx.modelRegistry.getApiKeyForProvider(
 		concrete.provider,
 	);
-	// #region agent log
-	agentDebugLog(
-		"F",
-		"harness-subagents-bridge.ts:resolveHarnessSpawnAuth",
-		"concrete subprocess auth",
-		{
-			agent: agent.name,
-			parentModel: parentModel
-				? `${parentModel.provider}/${parentModel.id}`
-				: undefined,
-			concreteModel: concrete.modelRef,
-			routerProfile: concrete.routerProfile,
-			routerTier: concrete.routerTier,
-			apiKey: maskApiKey(apiKey),
-			usable: isUsableApiKey(apiKey),
-		},
-	);
-	// #endregion
 	if (!isUsableApiKey(apiKey)) return undefined;
 	return {
 		provider: concrete.provider,
@@ -145,6 +83,14 @@ export function createHarnessSubagentsExtension(
 				if (!pre.ok) {
 					return { ok: false, message: pre.message };
 				}
+				if (phase === "plan" || phase === "execute") {
+					const refreshMsg = refreshHarnessCocoindexIndex(ctx.cwd);
+					if (refreshMsg?.includes("continuing")) {
+						// warn-only path; do not block spawn
+					} else if (refreshMsg) {
+						return { ok: false, message: refreshMsg };
+					}
+				}
 			}
 			return { ok: true };
 		},

package/.pi/harness/docs/adrs/0033-parent-orchestrated-planning.md

@@ -19,7 +19,7 @@
 ### Positive
 
 - Full plan visible in parent session; editor `plan-review.md` path surfaced from parent.
-- Specialized scouts (graphify, ast-grep, ck) run in parallel with clear JSON contracts.
+- Specialized scouts (graphify, ast-grep, cocoindex `ccc`) run in parallel with clear JSON contracts.
 - Pre-approval adversary separate from post-run `harness/adversary`.
 
 ### Negative

package/.pi/prompts/harness-plan.md

@@ -30,8 +30,9 @@ Read **harness-debate-plan** skill before Review Gate rounds.
 
 1. Use `subagent` with `agentScope: "both"` and parallel `tasks` where lanes are independent.
 2. Each `subagent` call blocks until subprocesses finish — batch parallel scouts in one `tasks` array.
-3. Cap: **12** harness subagent invocations per parent session (extension-enforced).
-4. Compact task text: embed `HarnessSpawnContext` JSON + lane-specific instructions only.
+3. Do **not** set `timeoutMs` unless the user explicitly requests a cap — subagents run until natural completion (optional backstop: `PI_SUBAGENT_TIMEOUT_MS`).
+4. Cap: **12** harness subagent invocations per parent session (extension-enforced).
+5. Compact task text: embed `HarnessSpawnContext` JSON + lane-specific instructions only.
 
 ## Step 0 — Parse `$ARGUMENTS`
 
@@ -44,19 +45,23 @@ Read **harness-debate-plan** skill before Review Gate rounds.
 
 Use `[HarnessActivePlan]` / `[HarnessRunContext]` only. On revise: preserve `plan_id` / `task_id`. Canonical paths: `plan-packet.yaml`, `research-brief.yaml`, `artifacts/*.yaml`.
 
+## Phase 0 — Semantic index (automatic)
+
+Do **not** run `ccc index` or `ccc search --refresh`. The harness runs incremental `ccc index` before subagent spawns. Proceed directly to Phase 1 scouts.
+
 ## Phase 1 — Parallel scouts
 
 ```json
 {
   "agentScope": "both",
   "tasks": [
-    { "agent": "harness/planning/scout-graphify", "task": "<HarnessSpawnContext + graphify lane>", "timeoutMs": 90000 },
-    { "agent": "harness/planning/scout-structure", "task": "<HarnessSpawnContext + structure lane>", "timeoutMs": 90000 }
+    { "agent": "harness/planning/scout-graphify", "task": "<HarnessSpawnContext + graphify lane>" },
+    { "agent": "harness/planning/scout-structure", "task": "<HarnessSpawnContext + structure lane>" }
   ]
 }
 ```
 
-Add `harness/planning/scout-semantic` to `tasks` unless `--quick`. Require graphify + structure success.
+Add `harness/planning/scout-semantic` to `tasks` unless `--quick`. Require graphify + structure success. Semantic lane uses `ccc search` only (see `scout-semantic` agent).
 
 ## Phase 2 & 3 — Decompose + hypothesis (parallel)
 

package/.pi/prompts/harness-setup.md

@@ -156,7 +156,7 @@ bash "$UP_PKG/.pi/scripts/harness-cli-verify.sh"
 
 **Required (script must exit 0):** scrapling + harness-web smoke, ctx7, biome, ast-grep (`sg`), sentrux (when harness manifest present).
 
-**Warnings allowed:** gh (if not authenticated), agent-browser (if OS libs need manual `sudo apt-get install`), ck (empty corpus on tiny repos).
+**Warnings allowed:** gh (if not authenticated), agent-browser (if OS libs need manual `sudo apt-get install`), cocoindex-code (empty corpus on tiny repos; first `[full]` install downloads local embedding model).
 
 If the script reports **agent-browser shared library errors** on Linux/WSL, run the fix it prints, then re-verify:
 
@@ -232,20 +232,24 @@ if [ ! -f .pi/harness/browser.json ]; then
 fi
 ```
 
-### 2.4 — ck-search (Semantic Code Search)
+### 2.4 — CocoIndex Code (semantic code search)
+
+Offline semantic search via [CocoIndex Code](https://cocoindex.io/cocoindex-code/) (`ccc`). **CLI only** — do not register `ccc mcp` in harness setup (MCP defaults to refresh-before-search and is slower).
 
 ```bash
-if ! command -v ck &>/dev/null || [ "$FORCE" = "true" ]; then
-	npm install -g @beaconbay/ck-search
-fi
+command -v uv &>/dev/null || curl -LsSf https://astral.sh/uv/install.sh | sh
+export PATH="$HOME/.local/bin:$PATH"
+uv tool install 'cocoindex-code[full]'   # or: pipx install 'cocoindex-code[full]'
+bash "$UP_PKG/.pi/scripts/harness-cocoindex-bootstrap.sh"
+# Rebuild index: bash "$UP_PKG/.pi/scripts/harness-cocoindex-bootstrap.sh" --force
+ccc status
 ```
 
-Verify: `ck --version`
+**Indexing before scouts is automatic:** `harness-subagents` runs incremental `ccc index` before plan/execute subagent batches. Agents use `ccc search` only.
 
-Register as MCP server (if Claude MCP available):
-```bash
-claude mcp list 2>/dev/null && claude mcp add ck-search -s user -- ck --serve || echo "MCP not available — ck will be used as CLI only"
-```
+**First install:** `[full]` pulls sentence-transformers + torch (~hundreds of MB–1GB+). Run bootstrap once; do not run `ccc index` inside scouts.
+
+Verify: `ccc doctor` and `ccc search --limit 3 "export function"` (no `--refresh`).
 
 ### 2.5 — biome (Lint + Format Gate)
 
@@ -666,7 +670,7 @@ Output summary table:
 | scrapling / harness-web | ✓/✗ | Auth: yes/no |
 | ctx7 | ✓/✗ | Login: yes/no |
 | agent-browser | ✓/✗ | Config: .pi/harness/browser.json |
-| ck-search | ✓/✗ | MCP: registered/CLI-only |
+| cocoindex-code | ✓/✗ | `ccc status`; index auto-refreshed before harness scouts |
 | biome | ✓/✗ | Project config: found/default |
 | ast-grep | ✓/✗ | AST-aware code search (`sg`)
 | gh CLI | ✓/✗ | Auth: yes/no |

package/.pi/scripts/README.md

@@ -21,6 +21,7 @@ From **Typescript extensions**, use `resolveHarnessScript()` / `getHarnessPackag
 | Action | Command |
 |--------|---------|
 | Graphify bootstrap | `bash "$UP_PKG/.pi/scripts/harness-graphify-bootstrap.sh"` |
+| CocoIndex Code bootstrap | `bash "$UP_PKG/.pi/scripts/harness-cocoindex-bootstrap.sh"` |
 | CLI tool install + smoke tests | `bash "$UP_PKG/.pi/scripts/harness-cli-verify.sh"` |
 | Deterministic harness checks | `node "$UP_PKG/.pi/scripts/harness-verify.mjs"` |
 | Sentrux rules bootstrap (harness-setup) | `node "$UP_PKG/.pi/scripts/harness-sentrux-bootstrap.mjs"` |

package/.pi/scripts/harness-cli-verify.sh

@@ -231,22 +231,32 @@ verify_ctx7() {
 	fi
 }
 
-verify_ck() {
-	log "[ck-search]"
-	npm_global_install "@beaconbay/ck-search" "ck" || { fail "ck-search npm install"; return; }
-	if ! ck --version &>/dev/null; then
-		fail "ck --version failed"
+verify_cocoindex() {
+	log "[cocoindex-code]"
+	local _bootstrap
+	_bootstrap="$(cd "$(dirname "${BASH_SOURCE[0]:-$0}")" && pwd)/harness-cocoindex-bootstrap.sh"
+	if [ ! -f "$_bootstrap" ]; then
+		fail "harness-cocoindex-bootstrap.sh missing"
 		return
 	fi
-	# Fast grep-mode smoke (no embedding model download)
-	local ck_target="."
-	[ -d .pi ] && ck_target=".pi"
-	if ck -l 1 "export" "$ck_target" 2>/dev/null | head -1 | grep -q .; then
-		pass "ck $(ck --version 2>/dev/null | head -1)"
-	elif ck --status "$ck_target" 2>/dev/null | head -1 | grep -q .; then
-		pass "ck $(ck --version 2>/dev/null | head -1) (index status ok)"
+	if [ "$FORCE" = true ]; then
+		bash "$_bootstrap" --force || { fail "cocoindex bootstrap --force"; return; }
+	else
+		bash "$_bootstrap" || { fail "cocoindex bootstrap"; return; }
+	fi
+	if ! command -v ccc &>/dev/null; then
+		fail "ccc not on PATH after bootstrap"
+		return
+	fi
+	if ! ccc doctor &>/dev/null; then
+		warn "ccc doctor reported issues (daemon/model/SQLite)"
+	fi
+	if ccc search --limit 3 "export function" 2>/dev/null | head -1 | grep -qE '\.(ts|js|py|md)|\[|score|path'; then
+		pass "cocoindex-code (ccc search smoke)"
+	elif ccc status 2>/dev/null | head -1 | grep -q .; then
+		pass "cocoindex-code (index present; search empty on tiny corpus)"
 	else
-		warn "ck installed but smoke search empty"
+		warn "cocoindex installed but smoke search empty — first [full] install downloads local embedding model"
 	fi
 }
 
@@ -335,7 +345,7 @@ log ""
 verify_scrapling
 verify_ctx7
 verify_agent_browser
-verify_ck
+verify_cocoindex
 verify_biome
 verify_sg
 verify_gh

package/.pi/scripts/harness-cocoindex-bootstrap.sh

@@ -0,0 +1,182 @@
+#!/usr/bin/env bash
+# harness-cocoindex-bootstrap — install CocoIndex Code (ccc), seed settings, build index.
+# Non-interactive (no `ccc init` prompts). Used by harness-cli-verify and /harness-setup.
+
+set -euo pipefail
+
+FORCE=false
+for arg in "$@"; do
+	case "$arg" in
+	--force) FORCE=true ;;
+	-h | --help)
+		echo "Usage: $0 [--force]"
+		echo "  --force   rebuild index even when cocoindex.db exists"
+		exit 0
+		;;
+	*)
+		echo "Unknown argument: $arg" >&2
+		exit 2
+		;;
+	esac
+done
+
+export PATH="${HOME}/.local/bin:${PATH}"
+
+log() { printf '%s\n' "$*"; }
+die() { printf 'error: %s\n' "$*" >&2; exit 1; }
+
+ROOT="$(pwd)"
+
+if ! python3 --version 2>/dev/null | grep -qE 'Python 3\.(1[0-9]|[2-9][0-9])'; then
+	die "Python 3.10+ required (got: $(python3 --version 2>/dev/null || echo missing))"
+fi
+log "✓ Python 3.10+"
+
+cocoindex_installed() {
+	command -v ccc &>/dev/null && return 0
+	command -v uv &>/dev/null && uv tool list 2>/dev/null | grep -qE '(^|[[:space:]])cocoindex-code([[:space:]]|$)' && return 0
+	return 1
+}
+
+install_cocoindex() {
+	if command -v uv &>/dev/null; then
+		log "Installing cocoindex-code[full] via uv tool..."
+		uv tool install 'cocoindex-code[full]'
+	elif command -v pipx &>/dev/null; then
+		log "Installing cocoindex-code[full] via pipx..."
+		pipx install 'cocoindex-code[full]'
+	else
+		die "Need uv or pipx to install cocoindex-code[full]"
+	fi
+	export PATH="${HOME}/.local/bin:${PATH}"
+	command -v ccc &>/dev/null || die "ccc not on PATH after install"
+}
+
+if ! cocoindex_installed; then
+	install_cocoindex
+fi
+command -v ccc &>/dev/null || die "ccc CLI not found"
+log "✓ ccc ($(command -v ccc))"
+
+CCC_BIN="$(command -v ccc)"
+CCC_PYTHON=""
+if [ -f "$CCC_BIN" ]; then
+	CCC_PYTHON="$(sed -n '1s/^#!//p' "$CCC_BIN" | tr -d '\r')"
+fi
+if [ -z "$CCC_PYTHON" ] || [ ! -x "$CCC_PYTHON" ]; then
+	CCC_VENV="$(cd "$(dirname "$CCC_BIN")/.." && pwd)"
+	CCC_PYTHON="$CCC_VENV/bin/python"
+fi
+if [ ! -x "$CCC_PYTHON" ]; then
+	CCC_PYTHON="$(command -v python3)"
+fi
+
+# Seed global + project settings and merge harness exclude_patterns (non-interactive).
+"$CCC_PYTHON" - <<'PY'
+from __future__ import annotations
+
+import os
+import sys
+from pathlib import Path
+
+try:
+    import yaml
+except ImportError:
+    print("error: PyYAML required for harness cocoindex bootstrap", file=sys.stderr)
+    sys.exit(1)
+
+ROOT = Path(os.environ.get("HARNESS_COCOINDEX_ROOT", ".")).resolve()
+SETTINGS_DIR = ROOT / ".cocoindex_code"
+PROJECT_SETTINGS = SETTINGS_DIR / "settings.yml"
+USER_DIR = Path.home() / ".cocoindex_code"
+USER_SETTINGS = USER_DIR / "global_settings.yml"
+
+HARNESS_EXCLUDES = [
+    "graphify-out/**",
+    "raw/**",
+    ".raw/**",
+    ".pi/wiki-search/**",
+    "vendor/**",
+    "node_modules/**",
+    "**/graph.html",
+    "**/*.jsonl",
+    ".cursor/**",
+]
+
+DEFAULT_GLOBAL = {
+    "embedding": {
+        "provider": "sentence-transformers",
+        "model": "Snowflake/snowflake-arctic-embed-xs",
+    }
+}
+
+
+def load_yaml(path: Path) -> dict:
+    if not path.is_file():
+        return {}
+    data = yaml.safe_load(path.read_text(encoding="utf-8"))
+    return data if isinstance(data, dict) else {}
+
+
+def save_yaml(path: Path, data: dict) -> None:
+    path.parent.mkdir(parents=True, exist_ok=True)
+    path.write_text(yaml.safe_dump(data, default_flow_style=False), encoding="utf-8")
+
+
+# Global settings (offline embeddings — no LiteLLM prompt).
+if not USER_SETTINGS.is_file():
+    save_yaml(USER_SETTINGS, DEFAULT_GLOBAL)
+    print(f"Created {USER_SETTINGS}")
+
+# Project settings — minimal file with merged excludes only.
+project = load_yaml(PROJECT_SETTINGS)
+excludes = list(project.get("exclude_patterns") or [])
+seen = set(excludes)
+for pat in HARNESS_EXCLUDES:
+    if pat not in seen:
+        excludes.append(pat)
+        seen.add(pat)
+project["exclude_patterns"] = excludes
+save_yaml(PROJECT_SETTINGS, project)
+print(f"Ensured project settings: {PROJECT_SETTINGS}")
+
+# .gitignore entry (mirror ccc init behavior).
+gitignore = ROOT / ".gitignore"
+entry = "/.cocoindex_code/"
+comment = "# CocoIndex Code (ccc)"
+if (ROOT / ".git").is_dir() and gitignore.is_file():
+    lines = gitignore.read_text(encoding="utf-8").splitlines()
+    if entry not in lines:
+        content = gitignore.read_text(encoding="utf-8")
+        if content and not content.endswith("\n"):
+            content += "\n"
+        content += f"{comment}\n{entry}\n"
+        gitignore.write_text(content, encoding="utf-8")
+elif (ROOT / ".git").is_dir():
+    gitignore.write_text(f"{comment}\n{entry}\n", encoding="utf-8")
+PY
+
+NEED_INDEX=true
+if [ "$FORCE" = false ] && [ -f ".cocoindex_code/cocoindex.db" ]; then
+	NEED_INDEX=false
+	log "✓ Existing cocoindex.db (use --force to rebuild)"
+fi
+
+if [ "$NEED_INDEX" = true ] || [ "$FORCE" = true ]; then
+	log "Building semantic code index (ccc index)..."
+	ccc index
+fi
+
+if ccc doctor 2>/dev/null; then
+	log "✓ ccc doctor"
+else
+	log "! ccc doctor reported issues (see output above)"
+fi
+
+if ccc status 2>/dev/null | head -5; then
+	log "✓ ccc status"
+else
+	log "! ccc status unavailable"
+fi
+
+log "CocoIndex output: .cocoindex_code/"

package/.pi/scripts/harness-verify.mjs

@@ -202,6 +202,16 @@ async function main() {
 	if (!(await fileExists(runCtxLib))) fail("missing lib/harness-run-context.ts");
 	ok("lib/harness-run-context.ts");
 
+	const pkgJson = JSON.parse(
+		await readFile(join(ROOT, "package.json"), "utf-8"),
+	);
+	if (!pkgJson.files?.includes("vendor/pi-subagents")) {
+		fail(
+			'package.json "files" must include vendor/pi-subagents (npm publish ships subagents vendor)',
+		);
+	}
+	ok('package.json files includes vendor/pi-subagents');
+
 	const subagentsVendor = join(
 		ROOT,
 		"vendor",

package/.pi/skills/ast-grep/SKILL.md

@@ -23,7 +23,7 @@ Verifies with `sg --version`.
 | Task | Tool | Why |
 |------|------|-----|
 | Find code by structure/pattern | **ast-grep** (`sg`) | AST-aware — knows what is a function call vs a string |
-| Find code by concept/meaning | graphify / ck | Semantic search, knowledge graph |
+| Find code by concept/meaning | graphify / `ccc search` | Architecture (graphify) vs implementation chunks (`ccc`) |
 | Find exact literal string | `grep` | Only tool for non-code files or exact byte match |
 | Explore architecture | graphify | Call graph, community detection |
 
@@ -319,7 +319,7 @@ Need to find code
   ├─ Structural pattern (function calls, imports, classes)? → sg -p 'pattern'
   ├─ Rewrite/codemod needed? → sg -p 'old' --rewrite 'new'
   ├─ Project-wide lint rule? → sg scan (with sgconfig.yml)
-  ├─ Conceptual/semantic search? → graphify query or ck --hybrid
+  ├─ Conceptual/semantic search? → graphify query (architecture) or ccc search (implementation)
   ├─ Explore architecture? → graphify
   └─ Exact literal string in non-code? → grep
 ```

package/CHANGELOG.md

@@ -4,6 +4,22 @@ All notable changes to this project are documented in this file.
 
 ## [Unreleased]
 
+## [v0.13.1] — 2026-05-18
+
+### 🔧 Chores
+
+- Consolidate vendored `ccc` skill under `.agents/skills/ccc`; remove redundant `cocoindex-search`, `ck-search`, and duplicate Obsidian skills from the package.
+
+## [v0.13.0] — 2026-05-18
+
+### ✨ Features
+
+- **CocoIndex Code:** replace `@beaconbay/ck-search` with offline `ccc` semantic search; `harness-cocoindex-bootstrap.sh`, pre-scout incremental index in `harness-subagents-bridge`, vendored `/skill:ccc`, `cocoindex-search` skill, and `ck-search` deprecation stub.
+
+### 🔧 Chores
+
+- Harness excludes for `graphify-out/`, `vendor/`, `raw/`, etc. in `.cocoindex_code/settings.yml`; `.gitignore` tracks `.cocoindex_code/`.
+
 ## [v0.12.0] — 2026-05-18
 
 ### ✨ Features

package/THIRD_PARTY_NOTICES.md

@@ -22,3 +22,10 @@
 - **License:** MIT ([vendor/pi-subagents/LICENSE](vendor/pi-subagents/LICENSE))  
 - **Pinned revision:** See [vendor/pi-subagents/UPSTREAM_PIN.md](vendor/pi-subagents/UPSTREAM_PIN.md)  
 - ultimate-pi loads it from [`vendor/pi-subagents`](vendor/pi-subagents) via [`.pi/extensions/harness-subagents.ts`](.pi/extensions/harness-subagents.ts) with harness discovery, spawn gates, and subprocess env. Maintainer refresh: `npm run vendor:sync-subagents`.
+
+## CocoIndex Code (CLI + skill)
+
+- **Project:** https://github.com/cocoindex-io/cocoindex-code  
+- **License:** Apache-2.0  
+- **Install:** `uv tool install 'cocoindex-code[full]'` (see `/harness-setup` §2.4)  
+- ultimate-pi vendors the upstream agent skill at [`.agents/skills/ccc/`](.agents/skills/ccc/) and bootstraps indexes via [`.pi/scripts/harness-cocoindex-bootstrap.sh`](.pi/scripts/harness-cocoindex-bootstrap.sh). Replaces deprecated `@beaconbay/ck-search`.

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "ultimate-pi",
-	"version": "0.12.0",
+	"version": "0.13.1",
 	"description": "Ultimate AI coding harness for pi.dev — extensible skills, Obsidian wiki knowledge layer, compressed context, deterministic output",
 	"keywords": [
 		"pi-package",
@@ -67,13 +67,14 @@
 		"README.md",
 		"THIRD_PARTY_NOTICES.md",
 		"vendor/pi-model-router",
+		"vendor/pi-subagents",
 		"vendor/pi-vcc"
 	],
 	"peerDependencies": {
 		"@earendil-works/pi-coding-agent": "*"
 	},
 	"scripts": {
-		"check:ts": "tsc --noEmit --target ES2023 --lib ES2023 --moduleResolution nodenext --module nodenext --skipLibCheck .pi/extensions/custom-system-prompt.ts .pi/lib/harness-run-context.ts .pi/lib/harness-ui-state.ts .pi/extensions/harness-run-context.ts .pi/extensions/lib/harness-vcc-settings.ts .pi/extensions/dotenv-loader.ts .pi/extensions/lib/posthog-node.d.ts .pi/extensions/lib/harness-posthog.ts .pi/extensions/lib/harness-paths.ts .pi/extensions/pi-model-router-harness.ts .pi/extensions/provider-payload-sanitize.ts .pi/extensions/harness-telemetry.ts .pi/extensions/harness-ask-user.ts .pi/extensions/harness-plan-approval.ts .pi/extensions/lib/ask-user/schema.ts .pi/extensions/lib/ask-user/types.ts .pi/extensions/lib/ask-user/validate.ts .pi/extensions/lib/ask-user/dialog.ts .pi/extensions/lib/ask-user/fallback.ts .pi/extensions/lib/ask-user/render.ts .pi/extensions/lib/plan-approval/types.ts .pi/extensions/lib/plan-approval/schema.ts .pi/extensions/lib/plan-approval/validate.ts .pi/extensions/lib/plan-approval/format-plan.ts .pi/extensions/lib/plan-approval/dialog.ts .pi/extensions/lib/plan-approval/fallback.ts .pi/extensions/lib/plan-approval/render.ts .pi/extensions/lib/plan-approval/create-plan.ts .pi/extensions/harness-subagents.ts .pi/extensions/lib/harness-subagents-bridge.ts .pi/extensions/lib/harness-subagent-auth.ts .pi/extensions/lib/harness-subagent-policy.ts .pi/extensions/lib/harness-subagent-precheck.ts .pi/extensions/lib/harness-spawn-budget.ts .pi/extensions/lib/spawn-policy.ts vendor/pi-subagents/src/agents.ts vendor/pi-subagents/src/subagents.ts .pi/extensions/trace-recorder.ts .pi/extensions/observation-bus.ts .pi/extensions/drift-monitor.ts .pi/extensions/policy-gate.ts .pi/extensions/budget-guard.ts .pi/extensions/debate-orchestrator.ts .pi/extensions/harness-live-widget.ts .pi/extensions/sentrux-rules-sync.ts .pi/extensions/custom-header.ts .pi/extensions/harness-web-tools.ts .pi/extensions/harness-web-guard.ts .pi/extensions/lib/harness-web/run-cli.ts",
+		"check:ts": "tsc --noEmit --target ES2023 --lib ES2023 --moduleResolution nodenext --module nodenext --skipLibCheck .pi/extensions/custom-system-prompt.ts .pi/lib/harness-run-context.ts .pi/lib/harness-ui-state.ts .pi/extensions/harness-run-context.ts .pi/extensions/lib/harness-vcc-settings.ts .pi/extensions/dotenv-loader.ts .pi/extensions/lib/posthog-node.d.ts .pi/extensions/lib/harness-posthog.ts .pi/extensions/lib/harness-paths.ts .pi/extensions/pi-model-router-harness.ts .pi/extensions/provider-payload-sanitize.ts .pi/extensions/harness-telemetry.ts .pi/extensions/harness-ask-user.ts .pi/extensions/harness-plan-approval.ts .pi/extensions/lib/ask-user/schema.ts .pi/extensions/lib/ask-user/types.ts .pi/extensions/lib/ask-user/validate.ts .pi/extensions/lib/ask-user/dialog.ts .pi/extensions/lib/ask-user/fallback.ts .pi/extensions/lib/ask-user/render.ts .pi/extensions/lib/plan-approval/types.ts .pi/extensions/lib/plan-approval/schema.ts .pi/extensions/lib/plan-approval/validate.ts .pi/extensions/lib/plan-approval/format-plan.ts .pi/extensions/lib/plan-approval/dialog.ts .pi/extensions/lib/plan-approval/fallback.ts .pi/extensions/lib/plan-approval/render.ts .pi/extensions/lib/plan-approval/create-plan.ts .pi/extensions/harness-subagents.ts .pi/extensions/lib/harness-subagents-bridge.ts .pi/extensions/lib/harness-cocoindex-refresh.ts .pi/extensions/lib/harness-subagent-auth.ts .pi/extensions/lib/harness-subagent-policy.ts .pi/extensions/lib/harness-subagent-precheck.ts .pi/extensions/lib/harness-spawn-budget.ts .pi/extensions/lib/spawn-policy.ts vendor/pi-subagents/src/agents.ts vendor/pi-subagents/src/subagents.ts .pi/extensions/trace-recorder.ts .pi/extensions/observation-bus.ts .pi/extensions/drift-monitor.ts .pi/extensions/policy-gate.ts .pi/extensions/budget-guard.ts .pi/extensions/debate-orchestrator.ts .pi/extensions/harness-live-widget.ts .pi/extensions/sentrux-rules-sync.ts .pi/extensions/custom-header.ts .pi/extensions/harness-web-tools.ts .pi/extensions/harness-web-guard.ts .pi/extensions/lib/harness-web/run-cli.ts",
 		"vendor:sync-router": "bash .pi/scripts/vendor-sync-pi-model-router.sh",
 		"vendor:sync-vcc": "bash .pi/scripts/vendor-sync-pi-vcc.sh",
 		"vendor:sync-subagents": "bash .pi/scripts/vendor-sync-pi-subagents.sh",

package/vendor/pi-subagents/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 narumiruna
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/vendor/pi-subagents/UPSTREAM_PIN.md

@@ -0,0 +1,11 @@
+# Vendored `@narumitw/pi-subagents`
+
+- **Repository:** https://github.com/narumiruna/pi-extensions
+- **Directory:** `extensions/pi-subagents`
+- **Version:** 0.1.26
+- **Commit:** main @ 2026-05-18 (subagents.ts + agents.ts base)
+- **License:** MIT ([LICENSE](LICENSE))
+
+ultimate-pi extends upstream with recursive `$UP_PKG/.pi/agents/**` discovery, harness spawn gates, and subprocess env (`UP_PKG`, `PI_HARNESS_SUBPROCESS`).
+
+Refresh: `npm run vendor:sync-subagents`