ultimate-pi 0.6.1 → 0.8.0

package/.pi/extensions/harness-telemetry.ts

@@ -8,7 +8,7 @@
  */
 
 import { createHash } from "node:crypto";
-import type { ExtensionAPI } from "@mariozechner/pi-coding-agent";
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 import {
 	captureHarnessEvent,
 	type HarnessPostHogEventName,

package/.pi/extensions/harness-web-guard.ts

@@ -2,7 +2,7 @@
  * harness-web-guard — block bash that bypasses web_search / web_fetch tools.
  */
 
-import type { ExtensionAPI } from "@mariozechner/pi-coding-agent";
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 
 const BLOCK_REASON =
 	"harness-web-guard: use web_search (SERP) or web_fetch (page content) instead of raw curl/wget/firecrawl/scrapling fetch. " +

package/.pi/extensions/harness-web-tools.ts

@@ -2,7 +2,7 @@
  * harness-web-tools — web_search + web_fetch pi tools wrapping harness-web.py.
  */
 
-import type { ExtensionAPI } from "@mariozechner/pi-coding-agent";
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 import { Type } from "@sinclair/typebox";
 import {
 	harnessWebContextLine,

package/.pi/extensions/lib/ask-user/dialog.ts

@@ -1,11 +1,11 @@
-import type { ExtensionUIContext } from "@mariozechner/pi-coding-agent";
+import type { ExtensionUIContext } from "@earendil-works/pi-coding-agent";
 import {
 	Editor,
 	type EditorTheme,
 	Key,
 	matchesKey,
 	truncateToWidth,
-} from "@mariozechner/pi-tui";
+} from "@earendil-works/pi-tui";
 import type { AskResponse, DialogResult, ValidatedAskParams } from "./types.js";
 
 type DisplayOption = {

package/.pi/extensions/lib/ask-user/fallback.ts

@@ -1,4 +1,4 @@
-import type { ExtensionUIContext } from "@mariozechner/pi-coding-agent";
+import type { ExtensionUIContext } from "@earendil-works/pi-coding-agent";
 import type { DialogResult, ValidatedAskParams } from "./types.js";
 
 export async function runAskFallback(

package/.pi/extensions/lib/ask-user/render.ts

@@ -1,9 +1,9 @@
-import type { AgentToolResult } from "@mariozechner/pi-agent-core";
+import type { AgentToolResult } from "@earendil-works/pi-agent-core";
 import type {
 	Theme,
 	ToolRenderResultOptions,
-} from "@mariozechner/pi-coding-agent";
-import { Text } from "@mariozechner/pi-tui";
+} from "@earendil-works/pi-coding-agent";
+import { Text } from "@earendil-works/pi-tui";
 import type { AskToolDetails } from "./types.js";
 
 export function renderAskCall(

package/.pi/extensions/lib/harness-subagents/agent-loader.ts

@@ -5,7 +5,7 @@
 import { createHash } from "node:crypto";
 import { type Dirent, existsSync, readdirSync, readFileSync } from "node:fs";
 import { join, relative } from "node:path";
-import { getAgentDir } from "@mariozechner/pi-coding-agent";
+import { getAgentDir } from "@earendil-works/pi-coding-agent";
 import { parseAgentMarkdown } from "./agent-parser.js";
 import type { AgentConfig } from "./vendored/types.js";
 

package/.pi/extensions/lib/harness-subagents/agent-parser.ts

@@ -2,7 +2,7 @@
  * Parse harness agent .md files into AgentConfig (path id = posix relative path).
  */
 
-import { parseFrontmatter } from "@mariozechner/pi-coding-agent";
+import { parseFrontmatter } from "@earendil-works/pi-coding-agent";
 import { BUILTIN_TOOL_NAMES } from "./vendored/agent-types.js";
 import type {
 	AgentConfig,

package/.pi/extensions/lib/harness-subagents/blackboard-tool.ts

@@ -2,7 +2,7 @@
  * Orchestrator blackboard tool (list/read/query/wait/delete).
  */
 
-import { defineTool, type ExtensionAPI } from "@mariozechner/pi-coding-agent";
+import { defineTool, type ExtensionAPI } from "@earendil-works/pi-coding-agent";
 import { Type } from "@sinclair/typebox";
 import type { Blackboard } from "./blackboard.js";
 import type { BlackboardQuery } from "./types-blackboard.js";

package/.pi/extensions/lib/harness-subagents/harness-subagent-policy.ts

@@ -0,0 +1,134 @@
+/**
+ * Per-agent tool policy for harness/* subagents (defense in depth with frontmatter).
+ */
+
+import {
+	evaluateSubagentToolCall,
+	type ToolCallDecision,
+} from "./spawn-policy.js";
+
+export type HarnessAgentKind =
+	| "planner"
+	| "executor"
+	| "evaluator"
+	| "adversary"
+	| "tie_breaker"
+	| "meta"
+	| "trace"
+	| "incident"
+	| "other";
+
+const MUTATING_TOOLS = new Set(["write", "edit"]);
+
+const BASH_MUTATION_PATTERNS = [
+	/\brm\s+-/i,
+	/\bmv\s+/i,
+	/\bcp\s+/i,
+	/\btouch\s+/i,
+	/\bmkdir\s+/i,
+	/\btee\s+/i,
+	/\bgit\s+(add|commit|push|reset|checkout|merge|rebase|cherry-pick|apply)\b/i,
+	/\bnpm\s+(install|uninstall|ci)\b/i,
+	/\bpnpm\s+(add|install|remove)\b/i,
+	/\byarn\s+(add|install|remove)\b/i,
+	/\bsed\s+-i\b/i,
+	/\bperl\s+-i\b/i,
+];
+
+const READ_ONLY_KINDS = new Set<HarnessAgentKind>([
+	"planner",
+	"evaluator",
+	"adversary",
+	"tie_breaker",
+	"trace",
+	"incident",
+	"meta",
+]);
+
+export function classifyHarnessAgent(agentType: string): HarnessAgentKind {
+	const id = agentType.replace(/^harness\//, "");
+	switch (id) {
+		case "planner":
+			return "planner";
+		case "executor":
+			return "executor";
+		case "evaluator":
+			return "evaluator";
+		case "adversary":
+			return "adversary";
+		case "tie-breaker":
+			return "tie_breaker";
+		case "meta-optimizer":
+			return "meta";
+		case "trace-librarian":
+			return "trace";
+		case "incident-recorder":
+			return "incident";
+		default:
+			return agentType.startsWith("harness/") ? "other" : "other";
+	}
+}
+
+function isMutatingBash(command: string): boolean {
+	return BASH_MUTATION_PATTERNS.some((pattern) => pattern.test(command));
+}
+
+export function isHarnessPackageAgent(agentType: string): boolean {
+	return agentType.startsWith("harness/");
+}
+
+export function evaluateHarnessSubagentToolCall(
+	toolName: string,
+	input: Record<string, unknown> | undefined,
+	agentType: string,
+): ToolCallDecision {
+	const base = evaluateSubagentToolCall(toolName);
+	if (base.action === "block") {
+		return base;
+	}
+
+	if (!isHarnessPackageAgent(agentType)) {
+		return { action: "allow" };
+	}
+
+	const kind = classifyHarnessAgent(agentType);
+	if (!READ_ONLY_KINDS.has(kind)) {
+		return { action: "allow" };
+	}
+
+	if (MUTATING_TOOLS.has(toolName)) {
+		return {
+			action: "block",
+			reason: `harness-subagent-policy: ${toolName} blocked for harness/${kind} (read-only phase agent).`,
+		};
+	}
+
+	if (toolName === "bash") {
+		const command = String(input?.command ?? "");
+		if (command && isMutatingBash(command)) {
+			return {
+				action: "block",
+				reason: `harness-subagent-policy: mutating bash blocked for harness/${kind}.`,
+			};
+		}
+	}
+
+	return { action: "allow" };
+}
+
+/** Policy phase hint seeded into subagent system prompt appendix when extensions load policy-gate. */
+export function harnessSubagentPhaseHint(agentType: string): string | null {
+	const kind = classifyHarnessAgent(agentType);
+	switch (kind) {
+		case "planner":
+			return "plan";
+		case "executor":
+			return "execute";
+		case "evaluator":
+			return "evaluate";
+		case "adversary":
+			return "adversary";
+		default:
+			return null;
+	}
+}

package/.pi/extensions/lib/harness-subagents/vendored/agent-manager.ts

@@ -7,12 +7,12 @@
  */
 
 import { randomUUID } from "node:crypto";
-import type { Model } from "@mariozechner/pi-ai";
+import type { Model } from "@earendil-works/pi-ai";
 import type {
 	AgentSession,
 	ExtensionAPI,
 	ExtensionContext,
-} from "@mariozechner/pi-coding-agent";
+} from "@earendil-works/pi-coding-agent";
 import { resumeAgent, runAgent, type ToolActivity } from "./agent-runner.js";
 import type {
 	AgentInvocation,

package/.pi/extensions/lib/harness-subagents/vendored/agent-runner.ts

@@ -5,8 +5,8 @@
 import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
-import type { Model } from "@mariozechner/pi-ai";
-import type { ExtensionContext } from "@mariozechner/pi-coding-agent";
+import type { Model } from "@earendil-works/pi-ai";
+import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
 import {
 	type AgentSession,
 	type AgentSessionEvent,
@@ -16,8 +16,8 @@ import {
 	getAgentDir,
 	SessionManager,
 	SettingsManager,
-} from "@mariozechner/pi-coding-agent";
-import { evaluateSubagentToolCall } from "../spawn-policy.js";
+} from "@earendil-works/pi-coding-agent";
+import { evaluateHarnessSubagentToolCall } from "../harness-subagent-policy.js";
 import {
 	getAgentConfig,
 	getConfig,
@@ -331,7 +331,11 @@ export async function runAgent(
 	const extensionFactories: Array<(pi: ExtensionAPI) => void> = [
 		(pi) => {
 			pi.on("tool_call", (event) => {
-				const decision = evaluateSubagentToolCall(event.toolName);
+				const decision = evaluateHarnessSubagentToolCall(
+					event.toolName,
+					event.input as Record<string, unknown> | undefined,
+					type,
+				);
 				if (decision.action === "block") {
 					return { block: true, reason: decision.reason };
 				}

package/.pi/extensions/lib/harness-subagents/vendored/context.ts

@@ -2,7 +2,7 @@
  * context.ts — Extract parent conversation context for subagent inheritance.
  */
 
-import type { ExtensionContext } from "@mariozechner/pi-coding-agent";
+import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
 
 /** Extract text from a message content block array. */
 export function extractText(content: unknown[]): string {

package/.pi/extensions/lib/harness-subagents/vendored/env.ts

@@ -2,7 +2,7 @@
  * env.ts — Detect environment info (git, platform) for subagent system prompts.
  */
 
-import type { ExtensionAPI } from "@mariozechner/pi-coding-agent";
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 import type { EnvInfo } from "./types.js";
 
 export async function detectEnv(

package/.pi/extensions/lib/harness-subagents/vendored/index.ts

@@ -14,8 +14,8 @@ import {
 	type ExtensionCommandContext,
 	type ExtensionContext,
 	getAgentDir,
-} from "@mariozechner/pi-coding-agent";
-import { Text } from "@mariozechner/pi-tui";
+} from "@earendil-works/pi-coding-agent";
+import { Text } from "@earendil-works/pi-tui";
 import { Type } from "@sinclair/typebox";
 import { getDriftReport } from "../agent-manifest.js";
 import { Blackboard } from "../blackboard.js";

package/.pi/extensions/lib/harness-subagents/vendored/output-file.ts

@@ -11,7 +11,7 @@ import { join } from "node:path";
 import type {
 	AgentSession,
 	AgentSessionEvent,
-} from "@mariozechner/pi-coding-agent";
+} from "@earendil-works/pi-coding-agent";
 
 /**
  * Encode a cwd path as a filesystem-safe directory name. Handles:

package/.pi/extensions/lib/harness-subagents/vendored/schedule.ts

@@ -18,7 +18,7 @@
 import type {
 	ExtensionAPI,
 	ExtensionContext,
-} from "@mariozechner/pi-coding-agent";
+} from "@earendil-works/pi-coding-agent";
 import { Cron } from "croner";
 import { nanoid } from "nanoid";
 import type { AgentManager } from "./agent-manager.js";

package/.pi/extensions/lib/harness-subagents/vendored/settings.ts

@@ -4,7 +4,7 @@
 
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
-import { getAgentDir } from "@mariozechner/pi-coding-agent";
+import { getAgentDir } from "@earendil-works/pi-coding-agent";
 import type { JoinMode } from "./types.js";
 
 export interface SubagentsSettings {

package/.pi/extensions/lib/harness-subagents/vendored/skill-loader.ts

@@ -22,7 +22,7 @@ import type { Dirent } from "node:fs";
 import { existsSync, readdirSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
-import { getAgentDir } from "@mariozechner/pi-coding-agent";
+import { getAgentDir } from "@earendil-works/pi-coding-agent";
 import { isSymlink, isUnsafeName, safeReadFile } from "./memory.js";
 
 export interface PreloadedSkill {

package/.pi/extensions/lib/harness-subagents/vendored/types.ts

@@ -2,8 +2,8 @@
  * types.ts — Type definitions for the subagent system.
  */
 
-import type { ThinkingLevel } from "@mariozechner/pi-agent-core";
-import type { AgentSession } from "@mariozechner/pi-coding-agent";
+import type { ThinkingLevel } from "@earendil-works/pi-agent-core";
+import type { AgentSession } from "@earendil-works/pi-coding-agent";
 import type { LifetimeUsage } from "./usage.js";
 
 export type { ThinkingLevel };

package/.pi/extensions/lib/harness-subagents/vendored/ui/agent-widget.ts

@@ -5,7 +5,7 @@
  * Uses the callback form of setWidget for themed rendering.
  */
 
-import { truncateToWidth } from "@mariozechner/pi-tui";
+import { truncateToWidth } from "@earendil-works/pi-tui";
 import type { AgentManager } from "../agent-manager.js";
 import { getConfig } from "../agent-types.js";
 import type { AgentInvocation, SubagentType } from "../types.js";

package/.pi/extensions/lib/harness-subagents/vendored/ui/conversation-viewer.ts

@@ -5,7 +5,7 @@
  * Subscribes to session events for real-time streaming updates.
  */
 
-import type { AgentSession } from "@mariozechner/pi-coding-agent";
+import type { AgentSession } from "@earendil-works/pi-coding-agent";
 import {
 	type Component,
 	matchesKey,
@@ -13,7 +13,7 @@ import {
 	truncateToWidth,
 	visibleWidth,
 	wrapTextWithAnsi,
-} from "@mariozechner/pi-tui";
+} from "@earendil-works/pi-tui";
 import { extractText } from "../context.js";
 import type { AgentRecord } from "../types.js";
 import { getLifetimeTotal, getSessionContextPercent } from "../usage.js";

package/.pi/extensions/lib/harness-subagents/vendored/ui/schedule-menu.ts

@@ -8,7 +8,7 @@
  * if real demand emerges.
  */
 
-import type { ExtensionCommandContext } from "@mariozechner/pi-coding-agent";
+import type { ExtensionCommandContext } from "@earendil-works/pi-coding-agent";
 import type { SubagentScheduler } from "../schedule.js";
 import type { ScheduledSubagent } from "../types.js";
 

package/.pi/extensions/observation-bus.ts

@@ -6,7 +6,8 @@
  */
 
 import { randomUUID } from "node:crypto";
-import type { ExtensionAPI } from "@mariozechner/pi-coding-agent";
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import { getRunIdFromSession } from "../lib/harness-run-context.js";
 
 type HarnessPhase = "plan" | "execute" | "evaluate" | "adversary" | "merge";
 type ObservationKind =
@@ -77,15 +78,12 @@ function nowIso(): string {
 function getRunId(ctx: {
 	sessionManager: { getEntries(): unknown[]; getSessionId(): string };
 }): string {
-	const entries = ctx.sessionManager.getEntries() as SessionEntryLike[];
-	for (let i = entries.length - 1; i >= 0; i--) {
-		const entry = entries[i];
-		if (entry.type !== "custom" || entry.customType !== "harness-trace-state")
-			continue;
-		const runId = entry.data?.run_id;
-		if (typeof runId === "string" && runId.length > 0) return runId;
-	}
-	return ctx.sessionManager.getSessionId();
+	return (
+		getRunIdFromSession(
+			ctx.sessionManager.getEntries(),
+			ctx.sessionManager.getSessionId(),
+		) ?? ctx.sessionManager.getSessionId()
+	);
 }
 
 export default function observationBus(pi: ExtensionAPI) {

package/.pi/extensions/pi-model-router-harness.ts

@@ -6,7 +6,7 @@
 
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
-import type { ExtensionAPI } from "@mariozechner/pi-coding-agent";
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 import vendorModelRouter from "../../vendor/pi-model-router/extensions/index.js";
 
 function isHarnessRouterReady(cwd: string): boolean {