zob-harness 0.2.0 → 0.3.0

package/.pi/extensions/zob-harness/src/{autonomy-readiness.ts → domains/autonomy/autonomy-readiness.ts}

@@ -2,15 +2,15 @@ import { existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSy
 import { join } from "node:path";
 
 import { buildAutonomousRuntimeDryRun, validateAutonomousReadOnlySmokeRunArtifacts, validateAutonomousRuntimeDryRunArtifacts } from "./autonomous-runtime.js";
-import { buildCapabilityIndex } from "./capabilities.js";
-import { buildContextGbrainReadinessAudit } from "./context-gbrain.js";
-import { loadFactoryDefinition, loadFactoryInputManifest, validateFactoryStages } from "./factory/validation.js";
-import { validateStrictGoalSpecAnchor } from "./goal.js";
-import { validateDelegationWriteScope } from "./safety.js";
-import { sha256 } from "./utils/hashing.js";
-import { parseJsonFile } from "./utils/json.js";
-import { safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { buildCapabilityIndex } from "../delegation/capabilities.js";
+import { buildContextGbrainReadinessAudit } from "../context/context-gbrain.js";
+import { loadFactoryDefinition, loadFactoryInputManifest, validateFactoryStages } from "../factory/validation.js";
+import { validateStrictGoalSpecAnchor } from "../goal/goal.js";
+import { validateDelegationWriteScope } from "../governance/safety.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { parseJsonFile } from "../../core/utils/json.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export interface AutonomyReadinessAuditInput {
   run_id?: string;
@@ -43,16 +43,16 @@ const REGISTERED_FACTORY_SOURCE_FINGERPRINT_BASE_FILES = [
   ".pi/model-routing.json",
   ".pi/extensions/zob-harness/index.ts",
   ".pi/extensions/zob-harness/src/runtime/tools-factory.ts",
-  ".pi/extensions/zob-harness/src/budget-policy.ts",
-  ".pi/extensions/zob-harness/src/model-routing.ts",
-  ".pi/extensions/zob-harness/src/schemas.ts",
+  ".pi/extensions/zob-harness/src/domains/governance/budget-policy.ts",
+  ".pi/extensions/zob-harness/src/domains/models/model-routing.ts",
+  ".pi/extensions/zob-harness/src/runtime/schemas.ts",
   ".pi/extensions/zob-harness/src/types.ts",
-  ".pi/extensions/zob-harness/src/telemetry.ts",
-  ".pi/extensions/zob-harness/src/factory/run.ts",
-  ".pi/extensions/zob-harness/src/factory/agentic-plan.ts",
-  ".pi/extensions/zob-harness/src/factory/validation.ts",
-  ".pi/extensions/zob-harness/src/child-runner.ts",
-  ".pi/extensions/zob-harness/src/output-contracts.ts",
+  ".pi/extensions/zob-harness/src/domains/telemetry/telemetry.ts",
+  ".pi/extensions/zob-harness/src/domains/factory/run.ts",
+  ".pi/extensions/zob-harness/src/domains/factory/agentic-plan.ts",
+  ".pi/extensions/zob-harness/src/domains/factory/validation.ts",
+  ".pi/extensions/zob-harness/src/domains/delegation/child-runner.ts",
+  ".pi/extensions/zob-harness/src/domains/delegation/output-contracts.ts",
 ];
 
 function uniqueSorted(items: string[]): string[] {

package/.pi/extensions/zob-harness/src/{daemon-policy.ts → domains/autonomy/daemon-policy.ts}

@@ -1,12 +1,12 @@
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
-import { READ_ONLY_QUEUE_JOB_TYPES } from "./queue.js";
-import type { ChildStopCondition } from "./types.js";
-import { sha256 } from "./utils/hashing.js";
-import { parseJsonFile } from "./utils/json.js";
-import { safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { READ_ONLY_QUEUE_JOB_TYPES } from "../telemetry/queue.js";
+import type { ChildStopCondition } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { parseJsonFile } from "../../core/utils/json.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export interface DaemonPolicyReadinessAuditInput {
   run_id?: string;

package/.pi/extensions/zob-harness/src/{daemon-readiness.ts → domains/autonomy/daemon-readiness.ts}

@@ -1,14 +1,14 @@
 import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
-import { evaluateBudgetPreflightDryRun } from "./chronicle.js";
+import { evaluateBudgetPreflightDryRun } from "../telemetry/chronicle.js";
 import { validateDaemonPolicyConfig } from "./daemon-policy.js";
-import { evaluateModelRoutingDryRun } from "./model-routing.js";
-import { buildQueueDashboardSummary, ensureQueueDirs, READ_ONLY_QUEUE_JOB_TYPES, validateReadOnlyQueueJob } from "./queue.js";
-import { sha256 } from "./utils/hashing.js";
-import { parseJsonFile } from "./utils/json.js";
-import { safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { evaluateModelRoutingDryRun } from "../models/model-routing.js";
+import { buildQueueDashboardSummary, ensureQueueDirs, READ_ONLY_QUEUE_JOB_TYPES, validateReadOnlyQueueJob } from "../telemetry/queue.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { parseJsonFile } from "../../core/utils/json.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export interface DaemonReadinessDryRunInput {
   run_id?: string;

package/.pi/extensions/zob-harness/src/{daemon-runtime.ts → domains/autonomy/daemon-runtime.ts}

@@ -1,6 +1,6 @@
 import type { InteractiveAutonomyMode, InteractiveLaunchAuthorization, MissionReadinessReport } from "./interactive-autonomy.js";
-import type { RuntimeGoal, RuntimeGoalStatus } from "./goal-runtime.js";
-import type { GoalTodoNode, GoalTodoState, GoalTodoStatus } from "./goal-todos.js";
+import type { RuntimeGoal, RuntimeGoalStatus } from "../../runtime/goal-runtime.js";
+import type { GoalTodoNode, GoalTodoState, GoalTodoStatus } from "../goal/goal-todos.js";
 
 export const DAEMON_RUNTIME_STATUSES = [
   "off",

package/.pi/extensions/zob-harness/src/{full-autonomy-test.ts → domains/autonomy/full-autonomy-test.ts}

@@ -1,10 +1,10 @@
 import { mkdirSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
-import { loadFactorySelectorCandidates, selectFactoryForDemands, type FactorySelectorResult } from "./factory-selector.js";
-import { buildControlledWorkerPoolPlan, evaluateLaunchAuthorizedApplyGate, type ControlledWorkerPoolPlan, type LaunchAuthorizedApplyGate } from "./launch-apply.js";
-import { sha256 } from "./utils/hashing.js";
-import { safeFileStem } from "./utils/paths.js";
+import { loadFactorySelectorCandidates, selectFactoryForDemands, type FactorySelectorResult } from "../factory/factory-selector.js";
+import { buildControlledWorkerPoolPlan, evaluateLaunchAuthorizedApplyGate, type ControlledWorkerPoolPlan, type LaunchAuthorizedApplyGate } from "../governance/launch-apply.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { safeFileStem } from "../../core/utils/paths.js";
 
 export interface FullAutonomyTestInput {
   runId?: string;

package/.pi/extensions/zob-harness/src/{interactive-autonomy.ts → domains/autonomy/interactive-autonomy.ts}

@@ -1,8 +1,8 @@
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 
-import { sha256 } from "./utils/hashing.js";
-import { isRecord } from "./utils/records.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export const INTERACTIVE_AUTONOMY_MODES = ["off", "open", "controlled", "adaptive"] as const;
 export type InteractiveAutonomyMode = typeof INTERACTIVE_AUTONOMY_MODES[number];

package/.pi/extensions/zob-harness/src/{compute-profile.ts → domains/compute/compute-profile.ts}

@@ -1,9 +1,9 @@
 import { existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
 import { basename, extname, join, relative, resolve } from "node:path";
 
-import { sha256 } from "./utils/hashing.js";
-import { resolveRepoPath, safeFileStem, safeRunId } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { resolveRepoPath, safeFileStem, safeRunId } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export type ComputeRequestedProfile = "auto" | "low" | "medium" | "high" | "xhigh" | "max";
 export type ComputeEffectiveProfile = Exclude<ComputeRequestedProfile, "auto">;

package/.pi/extensions/zob-harness/src/{compute-workflow-shape.ts → domains/compute/compute-workflow-shape.ts}

@@ -1,7 +1,7 @@
 import { existsSync, readFileSync } from "node:fs";
-import { sha256 } from "./utils/hashing.js";
-import { resolveRepoPath } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { resolveRepoPath } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 import { resolveComputeProfile, type ComputeDomain, type ComputeEffectiveProfile, type ComputePreviewInput, type ComputeRequestedProfile } from "./compute-profile.js";
 
 export interface ComputeWorkflowShapeInput extends ComputePreviewInput {

package/.pi/extensions/zob-harness/src/domains/coms/AGENTS.md

@@ -0,0 +1,21 @@
+# Coms domain guardrail
+
+## Scope
+
+- Hash-only/local communication domains, Mission Control metadata, governed request extraction, topology-facing coms helpers, and coms-v2 compatibility.
+
+## MUST DO
+
+- Preserve hash-only/body-free ledgers, stale/offline peer blockers, bounded awaits, and topology guards.
+- Keep Goal Room parent-visible as canonical for coordination decisions.
+
+## MUST NOT
+
+- Do not persist raw prompts, outputs, rationale, diffs, patches, or message bodies.
+- Do not introduce hidden worker-to-worker direct chat or network transport.
+- Do not import from `index.ts` or `index.js`.
+
+## Validation
+
+- `npm run check -- --pretty false`.
+- `npm run smoke:harness` plus coms-specific smoke if coms transport paths move.

package/.pi/extensions/zob-harness/src/{coms-v2 → domains/coms/coms-v2}/envelope.ts

@@ -1,5 +1,5 @@
-import { sha256 } from "../utils/hashing.js";
-import { isRecord } from "../utils/records.js";
+import { sha256 } from "../../../core/utils/hashing.js";
+import { isRecord } from "../../../core/utils/records.js";
 
 const FORBIDDEN_PERSISTED_KEYS = new Set(["body", "task", "prompt", "output", "content", "message", "rationale", "text", "diff", "patch"]);
 const ENVELOPE_TYPES = new Set(["ping", "pong", "prompt", "ack", "response", "error"]);

package/.pi/extensions/zob-harness/src/{coms-v2 → domains/coms/coms-v2}/identity.ts

@@ -1,8 +1,8 @@
 import { basename } from "node:path";
 
-import type { TeamDefinition, TeamLead, TeamWorker } from "../types.js";
-import { sha256 } from "../utils/hashing.js";
-import { safeFileStem } from "../utils/paths.js";
+import type { TeamDefinition, TeamLead, TeamWorker } from "../../../types.js";
+import { sha256 } from "../../../core/utils/hashing.js";
+import { safeFileStem } from "../../../core/utils/paths.js";
 import type { ZobComsV2Policy, ZobLivePeerCard, ZobLiveRoleType } from "./types.js";
 
 const PROCESS_STARTED_AT = new Date().toISOString();

package/.pi/extensions/zob-harness/src/{coms-v2 → domains/coms/coms-v2}/ledger-bridge.ts

@@ -1,5 +1,5 @@
-import type { TeamDefinition } from "../types.js";
-import { appendZobComsMessage, replyZobComsMessage, transitionZobComsStatus } from "../topology/coms.js";
+import type { TeamDefinition } from "../../../types.js";
+import { appendZobComsMessage, replyZobComsMessage, transitionZobComsStatus } from "../../topology/coms.js";
 import type { ZobLiveEnvelope } from "./envelope.js";
 
 export function appendLiveSendRequestedRef(repoRoot: string, definition: TeamDefinition, envelope: ZobLiveEnvelope): Record<string, unknown> {

package/.pi/extensions/zob-harness/src/{coms-v2 → domains/coms/coms-v2}/local-transport.ts

@@ -3,7 +3,7 @@ import { tmpdir } from "node:os";
 import { dirname, join } from "node:path";
 import { createConnection, createServer, type Server, type Socket } from "node:net";
 
-import { safeFileStem } from "../utils/paths.js";
+import { safeFileStem } from "../../../core/utils/paths.js";
 import { buildZobLiveErrorEnvelope, parseZobLiveEnvelopeLine, validateZobLiveEnvelope, type ZobLiveEnvelope } from "./envelope.js";
 
 export interface ZobLocalTransportServer {

package/.pi/extensions/zob-harness/src/{coms-v2 → domains/coms/coms-v2}/policy.ts

@@ -1,9 +1,9 @@
 import { join } from "node:path";
 
 import type { ZobComsTranscriptMode, ZobComsTranscriptRetentionClass, ZobComsTransportMode, ZobComsV2Policy } from "./types.js";
-import { sha256 } from "../utils/hashing.js";
-import { readJsonObjectIfPresent } from "../utils/json.js";
-import { isRecord } from "../utils/records.js";
+import { sha256 } from "../../../core/utils/hashing.js";
+import { readJsonObjectIfPresent } from "../../../core/utils/json.js";
+import { isRecord } from "../../../core/utils/records.js";
 
 const TRANSPORT_POLICY_RELATIVE_PATH = ".pi/mission-control/zob_coms_transport.json";
 const MODES = new Set<ZobComsTransportMode>(["off", "observe_only", "required_local", "required_network", "break_glass_ledger_only"]);

package/.pi/extensions/zob-harness/src/{coms-v2 → domains/coms/coms-v2}/presence.ts

@@ -1,4 +1,4 @@
-import { sha256 } from "../utils/hashing.js";
+import { sha256 } from "../../../core/utils/hashing.js";
 import { readZobLiveRegistrySnapshot } from "./registry.js";
 import { readZobComsV2Policy } from "./policy.js";
 import type { ZobLivePeerCard, ZobLivePresenceSummary } from "./types.js";

package/.pi/extensions/zob-harness/src/{coms-v2 → domains/coms/coms-v2}/registry.ts

@@ -2,9 +2,9 @@ import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 
-import { loadTeamDefinition, validateTeamDefinition } from "../topology/teams.js";
-import { isRecord } from "../utils/records.js";
-import { safeFileStem } from "../utils/paths.js";
+import { loadTeamDefinition, validateTeamDefinition } from "../../topology/teams.js";
+import { isRecord } from "../../../core/utils/records.js";
+import { safeFileStem } from "../../../core/utils/paths.js";
 import { buildCurrentZobLivePeerCard, buildZobComsProjectId } from "./identity.js";
 import { readZobComsV2Policy, zobComsRegistryEnabled } from "./policy.js";
 import type { ZobLivePeerCard, ZobLivePeerStatus, ZobLiveRegistrySnapshot } from "./types.js";

package/.pi/extensions/zob-harness/src/{coms-v2 → domains/coms/coms-v2}/response-capture.ts

@@ -1,4 +1,4 @@
-import { sha256 } from "../utils/hashing.js";
+import { sha256 } from "../../../core/utils/hashing.js";
 import { buildZobLiveEnvelope, type ZobLiveEnvelope } from "./envelope.js";
 
 export interface ZobLiveResponseCapture {

package/.pi/extensions/zob-harness/src/{coms-v2 → domains/coms/coms-v2}/transcript-capture.ts

@@ -2,8 +2,8 @@ import { mkdirSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
 import type { ZobComsTranscriptCapturePolicy } from "./types.js";
-import { sha256 } from "../utils/hashing.js";
-import { safeFileStem } from "../utils/paths.js";
+import { sha256 } from "../../../core/utils/hashing.js";
+import { safeFileStem } from "../../../core/utils/paths.js";
 
 export type ZobComsRedactedCaptureKind = "live_prompt" | "live_response" | "live_exchange";
 

package/.pi/extensions/zob-harness/src/{coms-v2 → domains/coms/coms-v2}/zpeer-profile.ts

@@ -4,9 +4,9 @@ import { join } from "node:path";
 
 import { buildZobComsProjectId } from "./identity.js";
 import type { ZobLivePeerCard, ZpeerRoomMembership } from "./types.js";
-import { sha256 } from "../utils/hashing.js";
-import { isRecord } from "../utils/records.js";
-import { safeFileStem } from "../utils/paths.js";
+import { sha256 } from "../../../core/utils/hashing.js";
+import { isRecord } from "../../../core/utils/records.js";
+import { safeFileStem } from "../../../core/utils/paths.js";
 
 const PROFILE_SCHEMA = "zob.zpeer-local-profile.v1";
 const NEW_CARRYOVER_SCHEMA = "zob.zpeer-new-carryover.v1";

package/.pi/extensions/zob-harness/src/{coms-v2 → domains/coms/coms-v2}/zpeer.ts

@@ -6,10 +6,10 @@ import { buildZobLiveEnvelope } from "./envelope.js";
 import { sendZobLocalEnvelope } from "./local-transport.js";
 import { readZobLiveRegistryAllProjectsSnapshot, writeZobLivePeerCard, writeZobLivePeerCardToProjectId } from "./registry.js";
 import type { ZobLivePeerCard, ZobLivePeerStatus, ZpeerRoomMembership, ZpeerRoomMembershipRole } from "./types.js";
-import { validateZobComsEdge } from "../topology/coms.js";
-import { loadTeamDefinition, validateTeamDefinition } from "../topology/teams.js";
+import { validateZobComsEdge } from "../../topology/coms.js";
+import { loadTeamDefinition, validateTeamDefinition } from "../../topology/teams.js";
 import { loadZteamManifest, zteamAllowsZpeerContact } from "../zagents.js";
-import { sha256 } from "../utils/hashing.js";
+import { sha256 } from "../../../core/utils/hashing.js";
 
 const DEFAULT_ROOM_ID = "default";
 const ALIAS_PATTERN = /^[a-zA-Z][a-zA-Z0-9_-]{1,31}$/;

package/.pi/extensions/zob-harness/src/{mission-control.ts → domains/coms/mission-control.ts}

@@ -5,14 +5,14 @@ import { buildZobLivePresenceSummary, redactZobLivePeerForMissionControl } from
 import { readZobComsV2Policy } from "./coms-v2/policy.js";
 import { zpeerMembershipsForPeer } from "./coms-v2/zpeer.js";
 import { readZobLiveRegistrySnapshot } from "./coms-v2/registry.js";
-import { buildQueueDashboardSummary } from "./queue.js";
-import type { TeamDefinition } from "./types.js";
-import { summarizePromotionCandidates } from "./promotion/candidate.js";
-import { buildZobComsMessage, listZobComsMessages, validateZobComsEdge, validateZobComsMessage } from "./topology/coms.js";
-import { sha256 } from "./utils/hashing.js";
-import { readJsonl, readJsonObjectIfPresent } from "./utils/json.js";
-import { safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { buildQueueDashboardSummary } from "../telemetry/queue.js";
+import type { TeamDefinition } from "../../types.js";
+import { summarizePromotionCandidates } from "../promotion/candidate.js";
+import { buildZobComsMessage, listZobComsMessages, validateZobComsEdge, validateZobComsMessage } from "../topology/coms.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { readJsonl, readJsonObjectIfPresent } from "../../core/utils/json.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export const MISSION_CONTROL_COMMANDS = ["pause", "resume", "reprioritize", "request_context", "request_oracle", "stop", "approve", "replan"] as const;
 

package/.pi/extensions/zob-harness/src/{zagents.ts → domains/coms/zagents.ts}

@@ -1,10 +1,11 @@
 import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { basename, join, relative, resolve } from "node:path";
 
+import type { ModeName } from "../../core/types/core.js";
 import { safeZpeerAlias, safeZpeerRoomId } from "./coms-v2/zpeer.js";
-import { parseJsonFile } from "./utils/json.js";
-import { isSafeArtifactName } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { parseJsonFile } from "../../core/utils/json.js";
+import { isSafeArtifactName } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 const ZAGENTS_DIR = ".pi/zagents";
 const ZTEAMS_DIR = ".pi/zteams";
@@ -12,6 +13,7 @@ const ZAGENT_PROMPTS_DIR = ".pi/zagents/prompts";
 const ZAGENT_SCHEMA_ID = "zob.zagent.v1";
 const ZTEAM_SCHEMA_ID = "zob.zteam.v1";
 const SAFE_ID_PATTERN = /^[a-zA-Z0-9][a-zA-Z0-9_.-]{0,79}$/;
+const ZAGENT_MODE_NAMES = new Set<ModeName>(["explore", "plan", "implement", "oracle", "factory", "orchestrator", "vanilla"]);
 
 export const ZAGENT_MANIFEST_SCHEMA = {
   schema: ZAGENT_SCHEMA_ID,
@@ -65,6 +67,7 @@ export interface ZAgentManifest {
   communicationPolicy?: ZAgentCommunicationPolicy;
   contextRefs?: ZAgentContextRefInput[];
   model?: string;
+  defaultMode?: ModeName;
   tools?: string[];
   metadata?: Record<string, unknown>;
   localOnly: true;
@@ -269,6 +272,19 @@ function validateRoomBindings(rooms: ZAgentRoomRef[] | undefined, label: string)
   return errors;
 }
 
+
+function safePiModelPattern(value: string | undefined): string | undefined {
+  const trimmed = value?.trim();
+  if (!trimmed || trimmed.length > 160) return undefined;
+  if (trimmed.includes("\0") || trimmed.includes("\n") || trimmed.includes("\r") || trimmed.includes("..")) return undefined;
+  if (trimmed.startsWith("/") || trimmed.startsWith("~")) return undefined;
+  return /^[a-zA-Z0-9._:/+@-]+$/.test(trimmed) ? trimmed : undefined;
+}
+
+function isZagentModeName(value: unknown): value is ModeName {
+  return typeof value === "string" && ZAGENT_MODE_NAMES.has(value as ModeName);
+}
+
 function validateCommunicationPolicy(policy: unknown, label: string): string[] {
   const errors: string[] = [];
   if (policy === undefined) return errors;
@@ -305,6 +321,7 @@ function isZAgentManifest(value: unknown): value is ZAgentManifest {
     && isCommunicationPolicy(value.communicationPolicy)
     && (value.contextRefs === undefined || (Array.isArray(value.contextRefs) && value.contextRefs.every(isContextRef)))
     && (value.model === undefined || typeof value.model === "string")
+    && (value.defaultMode === undefined || isZagentModeName(value.defaultMode))
     && (value.tools === undefined || isStringArray(value.tools))
     && (value.metadata === undefined || isRecord(value.metadata))
     && value.localOnly === true
@@ -371,6 +388,12 @@ export function validateZagentManifest(repoRoot: string, manifest: unknown, mani
   errors.push(...validateRoomBindings(rooms, "zagent.rooms"));
   errors.push(...validateActiveRoom(manifest.activeRoom, bindings, "zagent"));
   errors.push(...validateCommunicationPolicy(manifest.communicationPolicy, "zagent.communicationPolicy"));
+  if (typeof manifest.model === "string" && safePiModelPattern(manifest.model) !== manifest.model.trim()) {
+    errors.push(`zagent.model must be a safe Pi --model pattern: ${manifest.model}`);
+  }
+  if (manifest.defaultMode !== undefined && !isZagentModeName(manifest.defaultMode)) {
+    errors.push(`zagent.defaultMode must be one of ${[...ZAGENT_MODE_NAMES].join(",")}: ${String(manifest.defaultMode)}`);
+  }
   if (typeof manifest.promptRef === "string") {
     const prompt = resolveZagentPromptRef(repoRoot, manifest.promptRef);
     errors.push(...prompt.errors);
@@ -476,6 +499,64 @@ export function listZteamManifests(repoRoot: string): ZTeamLoaded[] {
   return listJsonFiles(projectZteamsDir(repoRoot)).map((path) => loadZteamManifest(repoRoot, basename(path, ".json")));
 }
 
+export interface ZAgentResolvedTeamMembership {
+  teamId: string;
+  alias?: string;
+  role?: string;
+  rooms: ZAgentRoomBinding[];
+}
+
+function zteamMemberMatchesZagent(member: ZTeamMemberManifest | ZTeamAgentManifest, zagentId: string): boolean {
+  return zteamMemberAgentId(member) === zagentId;
+}
+
+export function resolveZagentTeamMemberships(repoRoot: string, zagentId: string): ZAgentResolvedTeamMembership[] {
+  const memberships: ZAgentResolvedTeamMembership[] = [];
+  for (const loaded of listZteamManifests(repoRoot)) {
+    if (loaded.errors.length > 0) continue;
+    const teamRooms = normalizeZagentRoomBindings(loaded.manifest.rooms, loaded.manifest.defaultRoom, loaded.manifest.activeRoom);
+    const members = [...(loaded.manifest.members ?? []), ...(loaded.manifest.agents ?? [])];
+    for (const member of members) {
+      if (!zteamMemberMatchesZagent(member, zagentId)) continue;
+      const memberRooms = zteamMemberRooms(member, loaded.manifest.defaultRoom);
+      const rooms = memberRooms.length > 0 ? memberRooms : teamRooms;
+      memberships.push({
+        teamId: loaded.manifest.id,
+        alias: member.alias,
+        role: member.role,
+        rooms,
+      });
+    }
+  }
+  return memberships;
+}
+
+export function resolveZagentRuntimeRoomBindings(repoRoot: string, manifest: ZAgentManifest): { rooms: ZAgentRoomBinding[]; teamIds: string[] } {
+  const byRoom = new Map<string, ZAgentRoomBinding>();
+  const pushRoom = (room: ZAgentRoomBinding, defaults: { alias?: string; role?: string } = {}): void => {
+    const id = safeZpeerRoomId(room.id);
+    if (!id) return;
+    const existing = byRoom.get(id);
+    byRoom.set(id, {
+      ...existing,
+      ...room,
+      id,
+      alias: existing?.alias ?? room.alias ?? defaults.alias,
+      role: existing?.role ?? room.role ?? defaults.role,
+      active: existing?.active === true || room.active === true,
+    });
+  };
+
+  for (const room of normalizeZagentRoomBindings(manifest.rooms, manifest.defaultRoom, manifest.activeRoom)) pushRoom(room, { alias: manifest.alias });
+  const teamIds = new Set<string>(manifest.team ? [manifest.team] : []);
+  for (const membership of resolveZagentTeamMemberships(repoRoot, manifest.id)) {
+    teamIds.add(membership.teamId);
+    for (const room of membership.rooms) pushRoom(room, { alias: membership.alias ?? manifest.alias, role: membership.role });
+  }
+  const rooms = [...byRoom.values()];
+  return { rooms, teamIds: [...teamIds] };
+}
+
 function policyAllowsZpeerContact(policy: ZAgentCommunicationPolicy | undefined, roomId?: string, alias?: string): boolean {
   if (!policy) return true;
   if (policy.zpeerContact === false || policy.allowZpeerContact === false) return false;
@@ -507,10 +588,11 @@ export function formatZagentList(agents: ZAgentLoaded[]): string {
     const alias = manifest.alias ? ` @${manifest.alias}` : "";
     const role = manifest.role ? ` role=${manifest.role}` : "";
     const team = manifest.team ? ` team=${manifest.team}` : "";
+    const mode = manifest.defaultMode ? ` defaultMode=${manifest.defaultMode}` : "";
     const rooms = normalizeZagentRoomBindings(manifest.rooms, manifest.defaultRoom, manifest.activeRoom);
     const roomText = rooms.length ? ` rooms=${rooms.map((room) => `${room.id}${room.active ? "*" : ""}`).join(",")}` : "";
     const status = errors.length === 0 ? "ok" : `errors=${errors.length}`;
-    return `- ${manifest.id}${alias} [${status}]${team}${role}${roomText}${relPrompt} path=${relPath}`;
+    return `- ${manifest.id}${alias} [${status}]${team}${role}${mode}${roomText}${relPrompt} path=${relPath}`;
   }).join("\n");
 }
 

package/.pi/extensions/zob-harness/src/domains/context/AGENTS.md

@@ -0,0 +1,20 @@
+# Context domain guardrail
+
+## Scope
+
+- Context/GBrain readiness, context scope validation, and writeback proposal helpers.
+
+## MUST DO
+
+- Preserve bounded context, citations, forbidden-source checks, and proposal-only writeback semantics.
+- Keep raw conversation/prompt bodies out of persisted metadata.
+
+## MUST NOT
+
+- Do not import/embed/sync/write to external knowledge backends by moving code.
+- Do not import from `index.ts` or `index.js`.
+
+## Validation
+
+- `npm run check -- --pretty false`.
+- Run context readiness checks when context behavior moves.

package/.pi/extensions/zob-harness/src/{context-gbrain.ts → domains/context/context-gbrain.ts}

@@ -1,9 +1,9 @@
 import { existsSync, mkdirSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
-import { sha256 } from "./utils/hashing.js";
-import { safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 const FORBIDDEN_CONTEXT_BODY_KEYS = new Set(["body", "task", "prompt", "output", "content", "message", "diff", "patch", "rawConversation", "conversationHistory"]);
 const CONTEXT_SCOPE_MAX_TOKENS_CAP = 8000;
@@ -416,7 +416,7 @@ export function buildContextGbrainReadinessAudit(repoRoot: string, input: { runI
     runId: String(scope.runId),
     observedProblemHash: sha256("context readiness observed problem"),
     newPatternHash: sha256("context readiness writeback pattern"),
-    evidenceRefs: ["docs/AUTONOMOUS_SUPER_FACTORY_GOAL.md", ".pi/extensions/zob-harness/src/context-gbrain.ts"],
+    evidenceRefs: ["docs/AUTONOMOUS_SUPER_FACTORY_GOAL.md", ".pi/extensions/zob-harness/src/domains/context/context-gbrain.ts"],
     recommendedArtifact: ".pi/context/writeback-proposals.jsonl",
   });
   const forbiddenScope = { ...scope, allowedSources: ["zob-harness-docs", "raw-conversation-history"], forbiddenSources: ["raw-conversation-history", ".env"] };

package/.pi/extensions/zob-harness/src/domains/delegation/AGENTS.md

@@ -0,0 +1,21 @@
+# Delegation domain guardrail
+
+## Scope
+
+- Agent discovery, child runner support, output contracts, delegation schemas, and child-output gates.
+
+## MUST DO
+
+- Preserve six-part contract validation, child output contract ids, output gate behavior, model override checks, and path policy enforcement.
+- Keep child prompt/output bodies out of persisted ledgers unless existing policy explicitly allows a redacted/hash-only artifact.
+
+## MUST NOT
+
+- Do not rename specialist agents, output contract ids, gate markers, or failure-kind strings.
+- Do not loosen write-scope, cwd, allowed_paths, forbidden_paths, or secret protections.
+- Do not import from `index.ts` or `index.js`.
+
+## Validation
+
+- `npm run check -- --pretty false`.
+- `npm run smoke:harness` after child-runner, output-contract, safety-adjacent, or runtime-facing moves.

package/.pi/extensions/zob-harness/src/{agents.ts → domains/delegation/agents.ts}

@@ -1,8 +1,8 @@
 import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { basename, join } from "node:path";
 import { getAgentDir } from "@earendil-works/pi-coding-agent";
-import type { AgentScope, HarnessAgent } from "./types.js";
-import { readableZobResourcePaths } from "./utils/resources.js";
+import type { AgentScope, HarnessAgent } from "../../types.js";
+import { readableZobResourcePaths } from "../../core/utils/resources.js";
 
 function parseFrontmatter(raw: string): { frontmatter: Record<string, string>; body: string } {
   if (!raw.startsWith("---\n")) return { frontmatter: {}, body: raw };

package/.pi/extensions/zob-harness/src/{capabilities.ts → domains/delegation/capabilities.ts}

@@ -3,12 +3,12 @@ import { basename, join, relative } from "node:path";
 
 import { discoverAgents } from "./agents.js";
 import { getOutputContractDefinitions } from "./output-contracts.js";
-import { loadChainDefinition, listChainDefinitions } from "./topology/chains.js";
-import { sha256 } from "./utils/hashing.js";
-import { parseJsonFile } from "./utils/json.js";
-import { safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
-import { readableZobResourcePath, readableZobResourcePaths } from "./utils/resources.js";
+import { loadChainDefinition, listChainDefinitions } from "../topology/chains.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { parseJsonFile } from "../../core/utils/json.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
+import { readableZobResourcePath, readableZobResourcePaths } from "../../core/utils/resources.js";
 
 export interface ReuseScoutInput {
   query: string;

package/.pi/extensions/zob-harness/src/{child-runner.ts → domains/delegation/child-runner.ts}

@@ -6,15 +6,15 @@ import { join } from "node:path";
 import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
 
 import { discoverAgents } from "./agents.js";
-import { SUPERVISED_READONLY_CHILD_TOOLS } from "./constants.js";
-import { validateExplicitModelOverride } from "./model-availability.js";
+import { SUPERVISED_READONLY_CHILD_TOOLS } from "../../core/constants.js";
+import { validateExplicitModelOverride } from "../models/model-availability.js";
 import { applyChildGates } from "./output-contracts.js";
-import { buildChildEnv } from "./safety.js";
-import { updateUsage, usageEmpty } from "./telemetry.js";
-import type { ChildResult, ChildThinkingLevel, HarnessAgent, SupervisedReadonlyDispatchContract, SupervisedReadonlyDispatcher } from "./types.js";
-import { sha256 } from "./utils/hashing.js";
-import { safeFileStem } from "./utils/paths.js";
-import { parseJsonLine, textFromMessage } from "./utils/records.js";
+import { buildChildEnv } from "../governance/safety.js";
+import { updateUsage, usageEmpty } from "../telemetry/telemetry.js";
+import type { ChildResult, ChildThinkingLevel, HarnessAgent, SupervisedReadonlyDispatchContract, SupervisedReadonlyDispatcher } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { parseJsonLine, textFromMessage } from "../../core/utils/records.js";
 
 function getPiInvocation(args: string[]): { command: string; args: string[] } {
   const currentScript = process.argv[1];

package/.pi/extensions/zob-harness/src/{output-contracts.ts → domains/delegation/output-contracts.ts}

@@ -1,7 +1,7 @@
 import { existsSync, readFileSync, statSync } from "node:fs";
 import { extname, resolve, sep } from "node:path";
 
-import type { ChildResult, OutputContract, OutputRequirement } from "./types.js";
+import type { ChildResult, OutputContract, OutputRequirement } from "../../types.js";
 
 const COMMON_OUTPUT_REQUIREMENTS: OutputRequirement[] = [
   {