ultimate-pi 0.3.0 → 0.3.1

package/.pi/extensions/policy-gate.ts

@@ -178,6 +178,24 @@ export default function policyGate(pi: ExtensionAPI) {
 	pi.on("before_agent_start", async (event) => {
 		const bootstrapPrompt = isBootstrapPrompt(event.prompt);
 		const abortSignal = hasAbortSignal(event.prompt);
+
+		// /harness-setup instructions mention `harness-plan` (e.g. gh label text). That
+		// substring must not force inferPhase() to "plan" or bootstrap stays blocked.
+		if (bootstrapPrompt) {
+			state.phase = "execute";
+			state.approvedPlan = true;
+			state.planId = null;
+			state.budgetBypass = true;
+			state.aborted = false;
+			state.abortReason = null;
+			state.abortedAt = null;
+			state.updatedAt = nowIso();
+			pi.appendEntry("harness-policy-state", state);
+			return {
+				systemPrompt: `${event.systemPrompt}\n\n[PolicyGate]\nPhase=${state.phase}; ApprovedPlan=${state.approvedPlan}; PlanId=${state.planId ?? "none"}; Aborted=${state.aborted}; Bootstrap=harness-setup.`,
+			};
+		}
+
 		if (abortSignal) {
 			state.phase = "plan";
 			state.approvedPlan = false;

package/.pi/extensions/provider-payload-sanitize.ts

@@ -0,0 +1,66 @@
+/**
+ * Strip provider-specific fields from LLM request payloads before HTTP send.
+ *
+ * Strict OpenAI-compatible gateways return 400 when assistant history includes
+ * a top-level `reasoning` key (Cursor/thinking transcripts). Pi builds clean
+ * chat params; this is a safety net for any extra fields that slip through.
+ */
+
+import type {
+	BeforeProviderRequestEvent,
+	ExtensionAPI,
+} from "@mariozechner/pi-coding-agent";
+
+const CHAT_MESSAGE_EXTRA_KEYS = [
+	"reasoning",
+	"reasoning_text",
+	"chain_of_thought",
+	"chainOfThought",
+	"thinking",
+	"thought",
+] as const;
+
+function stripExtraChatFields(message: unknown): unknown {
+	if (
+		message === null ||
+		typeof message !== "object" ||
+		Array.isArray(message)
+	) {
+		return message;
+	}
+	const m = message as Record<string, unknown>;
+	if (typeof m.role !== "string") {
+		return message;
+	}
+	let touched = false;
+	const next = { ...m };
+	for (const k of CHAT_MESSAGE_EXTRA_KEYS) {
+		if (k in next) {
+			delete next[k];
+			touched = true;
+		}
+	}
+	return touched ? next : message;
+}
+
+function sanitizePayload(payload: unknown): unknown {
+	if (payload === null || typeof payload !== "object") {
+		return payload;
+	}
+	const body = payload as Record<string, unknown>;
+	const rawMessages = body.messages;
+	if (Array.isArray(rawMessages)) {
+		const messages = rawMessages.map(stripExtraChatFields);
+		if (messages.some((m, i) => m !== rawMessages[i])) {
+			return { ...body, messages };
+		}
+	}
+
+	return payload;
+}
+
+export default function providerPayloadSanitize(pi: ExtensionAPI) {
+	pi.on("before_provider_request", (event: BeforeProviderRequestEvent) => {
+		return sanitizePayload(event.payload);
+	});
+}

package/.pi/prompts/harness-setup.md

@@ -59,6 +59,10 @@ Run from the **project root** (the external repo root, not ultimate-pi unless th
 ```bash
 mkdir -p ./raw .pi/harness/specs .pi/harness/runs .pi/harness/incidents .pi/harness/debates
 
+# Copy JSON schemas + specs README from the package so plan-packet.schema.json exists
+# in the target repo immediately (before graphify or policy-gated planning).
+node "$UP_PKG/.pi/scripts/harness-seed-project-contracts.mjs" "$(pwd)"
+
 # Bundled with ultimate-pi harness; $UP_PKG is set in Step 0
 bash "$UP_PKG/.pi/scripts/harness-graphify-bootstrap.sh"
 # Developing ultimate-pi from repo root: UP_PKG="$(pwd)" then same command

package/.pi/scripts/harness-seed-project-contracts.mjs

@@ -0,0 +1,49 @@
+#!/usr/bin/env node
+/**
+ * Copy harness JSON contracts (and specs README) from the installed ultimate-pi
+ * package into the current project. External repos get `.pi/harness/specs/` before
+ * graphify or /harness-plan so paths like plan-packet.schema.json resolve locally.
+ *
+ * Usage:
+ *   node "$UP_PKG/.pi/scripts/harness-seed-project-contracts.mjs" [PROJECT_ROOT]
+ *
+ * PROJECT_ROOT defaults to process.cwd(). Package root is derived from this file
+ * (the script always lives under the shipped ultimate-pi package).
+ */
+
+import { copyFile, mkdir, readdir } from "node:fs/promises";
+import { join, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const SCRIPT_DIR = dirname(fileURLToPath(import.meta.url));
+const UP_PKG = join(SCRIPT_DIR, "..", "..");
+const SPEC_SRC = join(UP_PKG, ".pi", "harness", "specs");
+
+const projectRoot = process.argv[2] || process.cwd();
+const specDest = join(projectRoot, ".pi", "harness", "specs");
+
+async function main() {
+	const names = await readdir(SPEC_SRC);
+	const toCopy = names.filter(
+		(n) => n.endsWith(".schema.json") || n === "README.md",
+	);
+	if (toCopy.length === 0) {
+		console.error(
+			"harness-seed-project-contracts: no schema files under",
+			SPEC_SRC,
+		);
+		process.exit(1);
+	}
+	await mkdir(specDest, { recursive: true });
+	for (const name of toCopy) {
+		await copyFile(join(SPEC_SRC, name), join(specDest, name));
+	}
+	console.log(
+		`harness-seed-project-contracts: copied ${toCopy.length} file(s) -> ${specDest}`,
+	);
+}
+
+main().catch((err) => {
+	console.error(err);
+	process.exit(1);
+});

package/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 All notable changes to this project are documented in this file.
 
+## [v0.3.1] — 2026-05-15
+
+### 🐛 Fixes
+
+- **External `/harness-setup`**: policy gate no longer forces **plan** phase because the setup doc mentions `harness-plan` (e.g. `gh label create "harness-plan"`).
+- **Harness specs in consumer repos**: copy `*.schema.json` and specs `README` from the package via `harness-seed-project-contracts.mjs` as part of setup (so `plan-packet.schema.json` exists before planning).
+- **Strict LLM gateways**: new `provider-payload-sanitize` extension removes disallowed top-level fields (`reasoning`, etc.) from `messages` before provider requests (avoids 400 “Extra inputs … reasoning” on some OpenAI-compatible APIs).
+
 ## [v0.3.0] — 2026-05-15
 
 ### 📦 Release

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "ultimate-pi",
-	"version": "0.3.0",
+	"version": "0.3.1",
 	"description": "Ultimate AI coding harness for pi.dev — extensible skills, Obsidian wiki knowledge layer, compressed context, deterministic output",
 	"keywords": [
 		"pi-package",
@@ -75,7 +75,7 @@
 		"@mariozechner/pi-coding-agent": "*"
 	},
 	"scripts": {
-		"check:ts": "tsc --noEmit --target ES2023 --lib ES2023 --moduleResolution nodenext --module nodenext --skipLibCheck .pi/extensions/dotenv-loader.ts .pi/extensions/lib/posthog-node.d.ts .pi/extensions/lib/harness-posthog.ts .pi/extensions/lib/harness-paths.ts .pi/extensions/pi-model-router-harness.ts .pi/extensions/harness-telemetry.ts .pi/extensions/trace-recorder.ts .pi/extensions/observation-bus.ts .pi/extensions/drift-monitor.ts .pi/extensions/sentrux-rules-sync.ts .pi/extensions/custom-header.ts",
+		"check:ts": "tsc --noEmit --target ES2023 --lib ES2023 --moduleResolution nodenext --module nodenext --skipLibCheck .pi/extensions/dotenv-loader.ts .pi/extensions/lib/posthog-node.d.ts .pi/extensions/lib/harness-posthog.ts .pi/extensions/lib/harness-paths.ts .pi/extensions/pi-model-router-harness.ts .pi/extensions/provider-payload-sanitize.ts .pi/extensions/harness-telemetry.ts .pi/extensions/trace-recorder.ts .pi/extensions/observation-bus.ts .pi/extensions/drift-monitor.ts .pi/extensions/sentrux-rules-sync.ts .pi/extensions/custom-header.ts",
 		"vendor:sync-router": "bash .pi/scripts/vendor-sync-pi-model-router.sh",
 		"lint": "biome check",
 		"lint:fix": "biome check --fix",