ultimate-pi 0.18.0 → 0.19.0

package/.pi/agents/harness/sentrux-steward.md

@@ -1,7 +1,5 @@
 ---
 description: Propose architecture.manifest.json changes from graphify evidence (read-only governance steward).
-tools: read, grep, find, ls, bash, submit_sentrux_manifest_proposal
-disallowed_tools: write, edit, ask_user, approve_plan, create_plan, subagent
 extensions: false
 thinking: high
 max_turns: 16

package/.pi/agents/harness/trace-librarian.md

@@ -1,6 +1,5 @@
 ---
 description: Harness trace librarian for run replay, artifact indexing, and forensics summaries.
-tools: read, grep, find, ls, submit_human_required
 extensions: false
 thinking: medium
 max_turns: 20

package/.pi/extensions/00-harness-project-control.ts

@@ -0,0 +1,133 @@
+/**
+ * harness-project-control — always-on enable/disable for harness governance.
+ *
+ * Writes `.pi/harness/project.json`, blocks workflow slash commands while disabled,
+ * and emits `harness-project-enabled:changed` so live TUI surfaces update immediately.
+ */
+
+import type {
+	ExtensionAPI,
+	ExtensionCommandContext,
+} from "@earendil-works/pi-coding-agent";
+import {
+	isHarnessProjectEnabled,
+	isHarnessWorkflowCommand,
+	readHarnessProjectConfig,
+	writeHarnessProjectEnabled,
+} from "../lib/harness-project-config.js";
+import { parseHarnessSlashInput } from "../lib/harness-run-context.js";
+
+function showCommandMessage(
+	pi: ExtensionAPI,
+	ctx: ExtensionCommandContext,
+	text: string,
+): void {
+	if (ctx.hasUI) {
+		ctx.ui.notify(text, "info");
+		return;
+	}
+	pi.sendMessage({
+		customType: "harness-project-control",
+		content: text,
+		display: true,
+	});
+}
+
+function formatStatus(projectRoot: string): string {
+	const config = readHarnessProjectConfig(projectRoot);
+	const env = process.env.HARNESS_ENABLED?.trim();
+	const lines = [
+		`Harness governance: ${config.enabled ? "enabled" : "disabled"}`,
+		`Config: .pi/harness/project.json`,
+	];
+	if (env) {
+		lines.push(`Env override: HARNESS_ENABLED=${env}`);
+	}
+	if (config.updated_at) {
+		lines.push(`Updated: ${config.updated_at}`);
+	}
+	if (!config.enabled) {
+		lines.push(
+			"Workflow commands (/harness-plan, /harness-run, …) are blocked until you run /harness-enable.",
+		);
+	} else {
+		lines.push("Run /harness-disable to turn governance off.");
+	}
+	return lines.join("\n");
+}
+
+export default function harnessProjectControl(pi: ExtensionAPI) {
+	pi.on("input", async (event) => {
+		if (event.source === "extension") {
+			return { action: "continue" as const };
+		}
+		const parsed = parseHarnessSlashInput(event.text);
+		if (!parsed || !isHarnessWorkflowCommand(parsed.command)) {
+			return { action: "continue" as const };
+		}
+		if (isHarnessProjectEnabled()) {
+			return { action: "continue" as const };
+		}
+		return {
+			action: "handled" as const,
+			message: [
+				`Harness governance is disabled — /${parsed.command} was not started.`,
+				"Run /harness-enable to restore the workflow command surface.",
+			].join("\n"),
+		};
+	});
+
+	pi.registerCommand("harness-enable", {
+		description: "Enable harness governance for this project",
+		handler: async (_args, ctx) => {
+			const projectRoot = process.cwd();
+			const config = writeHarnessProjectEnabled(projectRoot, true);
+			const effectiveConfig = readHarnessProjectConfig(projectRoot);
+			pi.events.emit("harness-project-enabled:changed", {
+				enabled: effectiveConfig.enabled,
+				projectRoot,
+				updated_at: config.updated_at,
+			});
+			showCommandMessage(
+				pi,
+				ctx,
+				[
+					"Harness governance enabled.",
+					`Wrote .pi/harness/project.json (enabled=true, updated ${config.updated_at}).`,
+					"Live TUI surfaces were refreshed.",
+				].join("\n"),
+			);
+		},
+	});
+
+	pi.registerCommand("harness-disable", {
+		description: "Disable harness governance for this project",
+		handler: async (_args, ctx) => {
+			const projectRoot = process.cwd();
+			const config = writeHarnessProjectEnabled(projectRoot, false);
+			const effectiveConfig = readHarnessProjectConfig(projectRoot);
+			pi.events.emit("harness-project-enabled:changed", {
+				enabled: effectiveConfig.enabled,
+				projectRoot,
+				updated_at: config.updated_at,
+			});
+			showCommandMessage(
+				pi,
+				ctx,
+				[
+					"Harness governance disabled.",
+					`Wrote .pi/harness/project.json (enabled=false, updated ${config.updated_at}).`,
+					"Workflow slash commands are blocked immediately.",
+					"Live TUI surfaces were refreshed.",
+				].join("\n"),
+			);
+		},
+	});
+
+	pi.registerCommand("harness-enabled-status", {
+		description: "Show whether harness governance is enabled for this project",
+		handler: async (_args, ctx) => {
+			showCommandMessage(pi, ctx, formatStatus(process.cwd()));
+		},
+	});
+}

package/.pi/extensions/00-posthog-network-bootstrap.ts

@@ -2,7 +2,7 @@
  * Load before other extensions: IPv4-first fetch for *.posthog.com (@posthog/pi uses global fetch).
  */
 
-import { installPostHogFetchPatch } from "./lib/posthog-client.js";
+import { installPostHogFetchPatch } from "../lib/posthog-client.js";
 
 installPostHogFetchPatch();
 

package/.pi/extensions/agt-kill-switch.ts

@@ -0,0 +1,57 @@
+/**
+ * AGT kill switch — arms on harness-abort and repeated policy denies (ADR 0047).
+ */
+
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import { KillSwitch } from "@microsoft/agent-governance-sdk";
+import { isHarnessProjectEnabled } from "../lib/harness-project-config.js";
+import {
+	hasHarnessAbortSignal,
+	userVisiblePromptSlice,
+} from "../lib/harness-run-context.js";
+
+const killSwitch = new KillSwitch({ enabled: true });
+
+import { recordHarnessPolicyDeny } from "../lib/agt/kill-switch-state.js";
+
+export function getHarnessKillSwitch(): KillSwitch {
+	return killSwitch;
+}
+
+export function recordHarnessPolicyDenyForKillSwitch(sessionId: string): void {
+	const n = recordHarnessPolicyDeny(sessionId);
+	if (n >= 5) {
+		void killSwitch.kill(sessionId, {
+			reason: "Repeated harness policy denials",
+		});
+	}
+}
+
+export default function agtKillSwitch(pi: ExtensionAPI) {
+	if (!isHarnessProjectEnabled()) return;
+
+	pi.on("before_agent_start", async (event, ctx) => {
+		const prompt = userVisiblePromptSlice(event.prompt);
+		if (hasHarnessAbortSignal(prompt)) {
+			const sessionId = ctx.sessionManager.getSessionId();
+			await killSwitch.kill(sessionId, {
+				reason: "harness-abort command",
+			});
+		}
+		return undefined;
+	});
+
+	pi.on("tool_call", async (_event, ctx) => {
+		const sessionId = ctx.sessionManager.getSessionId();
+		const history = killSwitch.getHistory();
+		const armed = history.some((h) => h.agentId === sessionId);
+		if (armed) {
+			return {
+				block: true,
+				reason:
+					"agt-kill-switch: harness session halted after abort or repeated policy breaches.",
+			};
+		}
+		return undefined;
+	});
+}

package/.pi/extensions/agt-prompt-guard.ts

@@ -0,0 +1,32 @@
+/**
+ * AGT PromptDefense heuristics on harness slash commands (ADR 0047).
+ */
+
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import { PromptDefenseEvaluator } from "@microsoft/agent-governance-sdk";
+import { isHarnessProjectEnabled } from "../lib/harness-project-config.js";
+import { userVisiblePromptSlice } from "../lib/harness-run-context.js";
+
+const evaluator = new PromptDefenseEvaluator({ minGrade: "D" });
+
+export default function agtPromptGuard(pi: ExtensionAPI) {
+	if (!isHarnessProjectEnabled()) return;
+
+	pi.on("before_agent_start", async (event) => {
+		const prompt = userVisiblePromptSlice(event.prompt);
+		if (!prompt.trim()) return undefined;
+		if (!/\/harness-/.test(prompt)) return undefined;
+
+		const report = evaluator.evaluate(prompt);
+		if (report.isBlocking("D")) {
+			return {
+				message: {
+					customType: "harness-policy-violation",
+					display: true,
+					content: `agt-prompt-guard: prompt defense grade ${report.grade} (${report.score}). Missing defenses: ${report.missing.join(", ") || "see findings"}.`,
+				},
+			};
+		}
+		return undefined;
+	});
+}

package/.pi/extensions/budget-guard.ts

@@ -12,6 +12,7 @@ import {
 	isHarnessBudgetEnforceOn,
 	shouldEmitBlockingBudgetExhausted,
 } from "../lib/harness-budget-enforce.js";
+import { isHarnessProjectEnabled } from "../lib/harness-project-config.js";
 import { getRunIdFromSession } from "../lib/harness-run-context.js";
 
 type HarnessPhase = "plan" | "execute" | "evaluate" | "adversary" | "merge";
@@ -203,6 +204,7 @@ async function emitBudgetEvent(
 const debouncedSoftLimit = new Map<string, boolean>();
 
 export default function budgetGuard(pi: ExtensionAPI) {
+	if (!isHarnessProjectEnabled()) return;
 	pi.on("tool_call", async (_event, ctx) => {
 		const policy = getPolicyContext(ctx);
 		if (policy.phase === null || policy.budgetBypass) return undefined;

package/.pi/extensions/custom-footer.ts

@@ -8,7 +8,6 @@
 import type {
 	ExtensionAPI,
 	ExtensionContext,
-	ThemeColor,
 } from "@earendil-works/pi-coding-agent";
 import type { TUI } from "@earendil-works/pi-tui";
 import {
@@ -17,56 +16,7 @@ import {
 	truncateToWidth,
 	visibleWidth,
 } from "@earendil-works/pi-tui";
-
-// ── router decision reader ──────────────────────────────────────────
-
-/** Extract last routing decision from model-router session entries. */
-function readRouterDecision(ctx: ExtensionContext): {
-	targetProvider: string;
-	targetModelId: string;
-	thinking: string;
-	profile: string;
-	enabled: boolean;
-} | null {
-	try {
-		const entries = ctx.sessionManager.getEntries();
-		for (let i = entries.length - 1; i >= 0; i--) {
-			const e = entries[i];
-			if (
-				e.type === "custom" &&
-				(e as any).customType === "router-state" &&
-				(e as any).data
-			) {
-				const data = (e as any).data;
-				const d = data.lastDecision;
-				if (d?.targetProvider && d?.targetModelId) {
-					return {
-						targetProvider: d.targetProvider,
-						targetModelId: d.targetModelId,
-						thinking: d.thinking,
-						profile: data.selectedProfile ?? d.profile,
-						enabled: data.enabled ?? true,
-					};
-				}
-			}
-		}
-	} catch {
-		// session not ready
-	}
-	return null;
-}
-
-// ── profile colors ────────────────────────────────────────────────
-
-const PROFILE_COLORS: Record<string, ThemeColor> = {
-	auto: "accent",
-	cheap: "success",
-	deep: "toolTitle",
-};
-
-function profileColor(profile: string): ThemeColor {
-	return PROFILE_COLORS[profile] ?? "muted";
-}
+import { getLSPService } from "../lib/harness-lens/clients/lsp/index.js";
 
 // ── token formatting ──────────────────────────────────────────────
 
@@ -145,20 +95,6 @@ function modelInfo(ctx: ExtensionContext): ModelInfo {
 	const m = ctx.model;
 	if (!m) return { id: "no-model", provider: "unknown", reasoning: false };
 
-	// Router provider — extract actual model from routing decision
-	if (m.provider === "router") {
-		const decision = readRouterDecision(ctx);
-		if (decision) {
-			return {
-				id: decision.targetModelId,
-				provider: decision.targetProvider,
-				reasoning: true,
-			};
-		}
-		// No decision yet — show profile name so user knows router is active
-		return { id: m.id, provider: "router", reasoning: m.reasoning };
-	}
-
 	return { id: m.id, provider: m.provider, reasoning: m.reasoning };
 }
 
@@ -190,8 +126,17 @@ function pathLabel(
 
 // ── extension ─────────────────────────────────────────────────────
 
+function lspAlive(): boolean {
+	try {
+		return getLSPService().getAliveClientCount() > 0;
+	} catch {
+		return false;
+	}
+}
+
 export default function customFooter(pi: ExtensionAPI) {
 	let unsubBranch: (() => void) | null = null;
+	let lspInvalidateTimer: ReturnType<typeof setInterval> | null = null;
 
 	const state: {
 		tui: TUI | null;
@@ -204,8 +149,6 @@ export default function customFooter(pi: ExtensionAPI) {
 		modelProvider: string;
 		modelReasoning: boolean;
 		thinkingLevel: string | null;
-		routerProfile: string | null;
-		routerActive: boolean;
 		branch: string | null;
 	} = {
 		tui: null,
@@ -218,8 +161,6 @@ export default function customFooter(pi: ExtensionAPI) {
 		modelProvider: "…",
 		modelReasoning: false,
 		thinkingLevel: null,
-		routerProfile: null,
-		routerActive: false,
 		branch: null,
 	};
 
@@ -235,17 +176,7 @@ export default function customFooter(pi: ExtensionAPI) {
 		state.modelProvider = mi.provider;
 		state.modelReasoning = mi.reasoning;
 
-		// When router active, use thinking from the routing decision
-		if (ctx.model?.provider === "router") {
-			const routerDecision = readRouterDecision(ctx);
-			state.thinkingLevel = routerDecision?.thinking ?? pi.getThinkingLevel();
-			state.routerProfile = routerDecision?.profile ?? ctx.model?.id;
-			state.routerActive = routerDecision?.enabled ?? true;
-		} else {
-			state.thinkingLevel = pi.getThinkingLevel();
-			state.routerProfile = null;
-			state.routerActive = false;
-		}
+		state.thinkingLevel = pi.getThinkingLevel();
 	}
 
 	pi.on("session_start", (_event, ctx) => {
@@ -258,6 +189,10 @@ export default function customFooter(pi: ExtensionAPI) {
 				unsubBranch();
 				unsubBranch = null;
 			}
+			if (lspInvalidateTimer) {
+				clearInterval(lspInvalidateTimer);
+				lspInvalidateTimer = null;
+			}
 
 			state.tui = tui;
 			state.branch = footerData.getGitBranch();
@@ -274,12 +209,19 @@ export default function customFooter(pi: ExtensionAPI) {
 			state.box = box;
 			state.textLine = textLine;
 
+			lspInvalidateTimer = setInterval(invalidate, 2000);
+			lspInvalidateTimer.unref?.();
+
 			return {
 				dispose() {
 					if (unsubBranch) {
 						unsubBranch();
 						unsubBranch = null;
 					}
+					if (lspInvalidateTimer) {
+						clearInterval(lspInvalidateTimer);
+						lspInvalidateTimer = null;
+					}
 					state.tui = null;
 					state.box = null;
 					state.textLine = null;
@@ -328,59 +270,39 @@ export default function customFooter(pi: ExtensionAPI) {
 					const tl = thinkingLabel(state.thinkingLevel, state.modelReasoning);
 					const modelDisplay = tl ? `${state.modelId} ${tl}` : state.modelId;
 
-					// Colorize: router profile gets mode color, model gets thinking color
-					const rightStr = state.routerActive
-						? (() => {
-								const pColor = profileColor(state.routerProfile ?? "router");
-								const profileStr = theme.fg(
-									pColor,
-									state.routerProfile ?? "router",
-								);
-								const thinkingColorFn = theme.getThinkingBorderColor(
-									(state.thinkingLevel as any) ?? "medium",
-								);
-								const modelStr = thinkingColorFn(modelDisplay);
-								return `${profileStr} • ${modelStr}`;
-							})()
-						: `${state.modelProvider} • ${modelDisplay}`;
+					const lspActive = lspAlive();
+					const lspIndicator = theme.fg(
+						lspActive ? "success" : "error",
+						lspActive ? "LSP✓" : "LSP×",
+					);
+					const rightStr = `${state.modelProvider} • ${modelDisplay}`;
 
 					// ── compose single line ──
 					const colLeft = leftStr;
-					const finalRight = state.routerActive ? rightStr : dim(rightStr);
+					const contextDisplay = `${lspIndicator} ${barFull}`;
+					const finalRight = dim(rightStr);
 					const lw = visibleWidth(colLeft);
 					const rw = visibleWidth(finalRight);
-					const bw = visibleWidth(barFull);
+					const cw = visibleWidth(contextDisplay);
 					const gap = 2;
 
-					if (lw + gap + bw + gap + rw <= innerW) {
-						const pad = innerW - lw - gap - bw - gap - rw;
+					if (lw + gap + cw + gap + rw <= innerW) {
+						const pad = innerW - lw - gap - cw - gap - rw;
 						const line =
 							colLeft +
 							" ".repeat(gap + pad) +
-							barFull +
+							contextDisplay +
 							" ".repeat(gap) +
 							finalRight;
 						textLine.setText(truncateToWidth(line, innerW));
 					} else {
-						// Priority: keep bar visible, keep left (cwd) intact, truncate modelId first
+						// Priority: keep LSP + context bar visible, keep left (cwd) intact, truncate modelId first
 						const tlNow = thinkingLabel(
 							state.thinkingLevel,
 							state.modelReasoning,
 						);
-						const thinkingColorFn = theme.getThinkingBorderColor(
-							(state.thinkingLevel as any) ?? "medium",
-						);
 						const buildRight = (mid: string) => {
 							const modelPart = tlNow ? `${mid} ${tlNow}` : mid;
-							if (state.routerActive) {
-								const pColor = profileColor(state.routerProfile ?? "router");
-								const profileStr = theme.fg(
-									pColor,
-									state.routerProfile ?? "router",
-								);
-								const modelStr = thinkingColorFn(modelPart);
-								return `${profileStr} • ${modelStr}`;
-							}
 							const parts: string[] = [state.modelProvider];
 							if (modelPart) parts.push(modelPart);
 							return dim(parts.join(" • "));
@@ -392,25 +314,25 @@ export default function customFooter(pi: ExtensionAPI) {
 
 						while (
 							truncMid.length > 0 &&
-							lw + gap + bw + gap + rwNow > innerW
+							lw + gap + cw + gap + rwNow > innerW
 						) {
 							truncMid = truncMid.slice(0, -1);
 							dimR = buildRight(truncMid);
 							rwNow = visibleWidth(dimR);
 						}
 
-						if (lw + gap + bw + gap + rwNow <= innerW) {
-							const pad = innerW - lw - gap - bw - gap - rwNow;
+						if (lw + gap + cw + gap + rwNow <= innerW) {
+							const pad = innerW - lw - gap - cw - gap - rwNow;
 							const line =
 								colLeft +
 								" ".repeat(gap + pad) +
-								barFull +
+								contextDisplay +
 								" ".repeat(gap) +
 								dimR;
 							textLine.setText(truncateToWidth(line, innerW));
 						} else {
 							// ModelId gone, still overflows: truncate leftStr
-							const avail = innerW - bw - rwNow - gap - gap;
+							const avail = innerW - cw - rwNow - gap - gap;
 							if (avail < 1) {
 								textLine.setText(truncateToWidth(dimR, innerW));
 							} else {
@@ -418,7 +340,7 @@ export default function customFooter(pi: ExtensionAPI) {
 								const line =
 									truncLeft +
 									" ".repeat(gap) +
-									barFull +
+									contextDisplay +
 									" ".repeat(gap) +
 									dimR;
 								textLine.setText(truncateToWidth(line, innerW));
@@ -442,32 +364,11 @@ export default function customFooter(pi: ExtensionAPI) {
 	});
 
 	// Track model changes
-	pi.on("model_select", (event, ctx) => {
-		if (event.model?.provider === "router") {
-			const routerDecision = readRouterDecision(ctx);
-			if (routerDecision) {
-				state.modelId = routerDecision.targetModelId;
-				state.modelProvider = routerDecision.targetProvider;
-				state.modelReasoning = true;
-				state.thinkingLevel = routerDecision.thinking;
-				state.routerProfile = routerDecision.profile;
-				state.routerActive = routerDecision.enabled;
-			} else {
-				state.modelId = event.model.id ?? "…";
-				state.modelProvider = "router";
-				state.modelReasoning = event.model?.reasoning ?? false;
-				state.thinkingLevel = pi.getThinkingLevel();
-				state.routerProfile = event.model.id;
-				state.routerActive = true;
-			}
-		} else {
-			state.modelId = event.model?.id ?? "…";
-			state.modelProvider = event.model?.provider ?? "…";
-			state.modelReasoning = event.model?.reasoning ?? false;
-			state.thinkingLevel = pi.getThinkingLevel();
-			state.routerProfile = null;
-			state.routerActive = false;
-		}
+	pi.on("model_select", (event) => {
+		state.modelId = event.model?.id ?? "…";
+		state.modelProvider = event.model?.provider ?? "…";
+		state.modelReasoning = event.model?.reasoning ?? false;
+		state.thinkingLevel = pi.getThinkingLevel();
 		invalidate();
 	});
 

package/.pi/extensions/custom-header.ts

@@ -9,7 +9,7 @@
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 import { truncateToWidth } from "@earendil-works/pi-tui";
 import * as JimpModule from "jimp";
-import { resolveHarnessAsset } from "./lib/harness-paths.js";
+import { resolveHarnessAsset } from "../lib/harness-paths.js";
 
 /** Shipped next to this extension in the npm package — not the host project's .pi dir. */
 const imagePath = resolveHarnessAsset(

package/.pi/extensions/custom-system-prompt.ts

@@ -15,7 +15,7 @@ import type {
 	ExtensionAPI,
 } from "@earendil-works/pi-coding-agent";
 import { formatSkillsForPrompt } from "@earendil-works/pi-coding-agent";
-import { resolveHarnessAsset } from "./lib/harness-paths.js";
+import { resolveHarnessAsset } from "../lib/harness-paths.js";
 
 // @ts-expect-error pi extensions run as ESM
 const MODULE_URL = import.meta.url;

package/.pi/extensions/debate-orchestrator.ts

@@ -6,19 +6,20 @@
 
 import { join } from "node:path";
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
-import { getRunIdFromSession } from "../lib/harness-run-context.js";
 import {
 	acceptDebateRound,
 	finalizeDebateConsensus,
 	openDebateBus,
 	parseRoundEnvelope,
-} from "./lib/debate-bus-core.js";
+} from "../lib/debate-bus-core.js";
 import {
 	getDebateState,
 	restoreDebateStateFromEntry,
-} from "./lib/debate-bus-state.js";
-import { normalizePlanDebateId } from "./lib/plan-debate-id.js";
-import { initPlanMessenger } from "./lib/plan-messenger.js";
+} from "../lib/debate-bus-state.js";
+import { isHarnessProjectEnabled } from "../lib/harness-project-config.js";
+import { getRunIdFromSession } from "../lib/harness-run-context.js";
+import { normalizePlanDebateId } from "../lib/plan-debate-id.js";
+import { initPlanMessenger } from "../lib/plan-messenger.js";
 
 function getRunId(ctx: {
 	sessionManager: { getEntries(): unknown[]; getSessionId(): string };
@@ -32,6 +33,7 @@ function getRunId(ctx: {
 }
 
 export default function debateOrchestrator(pi: ExtensionAPI) {
+	if (!isHarnessProjectEnabled()) return;
 	const hooks = {
 		appendEntry: (customType: string, data: unknown) =>
 			pi.appendEntry(customType, data),

package/.pi/extensions/harness-ask-user.ts

@@ -4,27 +4,27 @@
  */
 
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
-import { runAskDialog } from "./lib/ask-user/dialog.js";
-import { runAskFallback } from "./lib/ask-user/fallback.js";
-import { renderAskCall, renderAskResult } from "./lib/ask-user/render.js";
+import { runAskDialog } from "../lib/ask-user/dialog.js";
+import { runAskFallback } from "../lib/ask-user/fallback.js";
+import { renderAskCall, renderAskResult } from "../lib/ask-user/render.js";
 import {
 	AskUserParamsSchema,
 	PROMPT_GUIDELINES,
 	PROMPT_SNIPPET,
-} from "./lib/ask-user/schema.js";
-import type { AskUserParams, DialogResult } from "./lib/ask-user/types.js";
+} from "../lib/ask-user/schema.js";
+import type { AskUserParams, DialogResult } from "../lib/ask-user/types.js";
 import {
 	formatResultText,
 	toToolDetails,
 	validateAskParams,
-} from "./lib/ask-user/validate.js";
-import { claimExtensionLoad } from "./lib/extension-load-guard.js";
+} from "../lib/ask-user/validate.js";
+import { claimHarnessGovernanceLoad } from "../lib/extension-load-guard.js";
 
 // @ts-expect-error pi extensions run as ESM
 const MODULE_URL = import.meta.url;
 
 export default function harnessAskUser(pi: ExtensionAPI) {
-	if (!claimExtensionLoad("harness-ask-user", MODULE_URL)) return;
+	if (!claimHarnessGovernanceLoad("harness-ask-user", MODULE_URL)) return;
 	pi.registerTool({
 		name: "ask_user",
 		label: "Ask User",