zob-harness 0.2.0 → 0.3.0

package/.pi/extensions/zob-harness/src/{prompt-packs.ts → domains/delegation/prompt-packs.ts}

@@ -1,10 +1,10 @@
 import { existsSync } from "node:fs";
 
-import { DEFAULT_RULES } from "./constants.js";
+import { DEFAULT_RULES } from "../../core/constants.js";
 import { validateOutputContractId } from "./output-contracts.js";
-import { sha256 } from "./utils/hashing.js";
-import { pathMatches, resolveRepoPath } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { pathMatches, resolveRepoPath } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export type PromptPackRole = "orchestrator" | "factory-selector" | "worker-implementer" | "oracle";
 

package/.pi/extensions/zob-harness/src/domains/factory/AGENTS.md

@@ -0,0 +1,21 @@
+# Factory domain compatibility guardrail
+
+## Scope
+
+- Future home for factory selector and compatibility wrappers around `src/factory/**`.
+- Existing `src/factory/AGENTS.md` remains authoritative for factory run/quarantine internals until those files move.
+
+## MUST DO
+
+- Preserve smoke/pilot/batch/DONE sentinel behavior, plan-only posture, oracle review requirements, and artifact names.
+- Keep factory runtime registration in `src/runtime/**`.
+
+## MUST NOT
+
+- Do not auto-activate factory quarantine or skip oracle gates.
+- Do not import from `index.ts` or `index.js`.
+
+## Validation
+
+- `npm run check -- --pretty false`.
+- `npm run smoke:harness` after factory moves.

package/.pi/extensions/zob-harness/src/{factory → domains/factory}/agentic-plan.ts

@@ -1,4 +1,4 @@
-import type { FactoryDefinition, FactoryInputManifest, FactoryManifestItem } from "../types.js";
+import type { FactoryDefinition, FactoryInputManifest, FactoryManifestItem } from "../../types.js";
 
 function detectCanonicalPatterns(text: string): string[] {
   const patterns = new Set<string>();

package/.pi/extensions/zob-harness/src/{factory-selector.ts → domains/factory/factory-selector.ts}

@@ -1,10 +1,10 @@
 import { existsSync, readdirSync, readFileSync } from "node:fs";
 import { basename, join } from "node:path";
 
-import { sha256 } from "./utils/hashing.js";
-import { safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
-import { readableZobResourcePaths } from "./utils/resources.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
+import { readableZobResourcePaths } from "../../core/utils/resources.js";
 
 export type FactoryDemandSignal = "code_review" | "budget_preflight" | "roadmap_lots" | "opencode_patterns" | "project_dna" | "factory_forge";
 export type FactorySelectionStatus = "existing_factory_selected" | "factory_forge_quarantine_recommended" | "no_factory_available";

package/.pi/extensions/zob-harness/src/{factory → domains/factory}/quarantine.ts

@@ -1,11 +1,11 @@
 import { appendFileSync, copyFileSync, existsSync, lstatSync, mkdirSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
-import type { FactoryQuarantineActivateInput, FactoryQuarantineActivateResult, FactoryQuarantineReviewInput, FactoryQuarantineReviewResult, FactoryQuarantineVerifyActivationInput, FactoryQuarantineVerifyActivationResult, FactoryRunResult } from "../types.js";
-import { sha256Hex } from "../utils/hashing.js";
-import { parseJsonFile, readJsonlRecords } from "../utils/json.js";
-import { safeFileStem } from "../utils/paths.js";
-import { isRecord } from "../utils/records.js";
+import type { FactoryQuarantineActivateInput, FactoryQuarantineActivateResult, FactoryQuarantineReviewInput, FactoryQuarantineReviewResult, FactoryQuarantineVerifyActivationInput, FactoryQuarantineVerifyActivationResult, FactoryRunResult } from "../../types.js";
+import { sha256Hex } from "../../core/utils/hashing.js";
+import { parseJsonFile, readJsonlRecords } from "../../core/utils/json.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 import { runFactoryRun } from "./run.js";
 
 export function runFactoryQuarantineReview(repoRoot: string, input: FactoryQuarantineReviewInput): FactoryQuarantineReviewResult {

package/.pi/extensions/zob-harness/src/{factory → domains/factory}/run.ts

@@ -1,11 +1,11 @@
 import { appendFileSync, existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
-import { resolveComputeProfile } from "../compute-profile.js";
-import { writeFactoryTelemetrySummary } from "../telemetry.js";
-import type { FactoryAdaptiveDispatchGate, FactoryDefinition, FactoryInputManifest, FactoryManifestItem, FactoryRunInput, FactoryRunResult } from "../types.js";
-import { sha256 } from "../utils/hashing.js";
-import { resolveRepoPath, safeFileStem, safeRunId } from "../utils/paths.js";
+import { resolveComputeProfile } from "../compute/compute-profile.js";
+import { writeFactoryTelemetrySummary } from "../telemetry/telemetry.js";
+import type { FactoryAdaptiveDispatchGate, FactoryDefinition, FactoryInputManifest, FactoryManifestItem, FactoryRunInput, FactoryRunResult } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { resolveRepoPath, safeFileStem, safeRunId } from "../../core/utils/paths.js";
 import { buildFactoryAgenticPlan, detectCanonicalPatterns } from "./agentic-plan.js";
 import { buildInitialAdaptiveDelegationGovernorState, normalizeAdaptiveDelegationPolicy } from "../orchestration/adaptive-delegation.js";
 import { FACTORY_PHASE_SENTINELS, factoryPhaseSentinelForMode, loadFactoryDefinition, loadFactoryInputManifest, loadFactoryOracleReview, normalizeFactoryAdaptiveDispatchGate, summarizeFactoryOracleReview, validateFactoryRunInputs } from "./validation.js";

package/.pi/extensions/zob-harness/src/{factory → domains/factory}/validation.ts

@@ -1,17 +1,17 @@
 import { existsSync } from "node:fs";
 import { join } from "node:path";
 
-import { loadProjectAgents } from "../agents.js";
-import { DEFAULT_RULES } from "../constants.js";
-import { validateOutputContractId } from "../output-contracts.js";
+import { loadProjectAgents } from "../delegation/agents.js";
+import { DEFAULT_RULES } from "../../core/constants.js";
+import { validateOutputContractId } from "../delegation/output-contracts.js";
 import { normalizeAdaptiveDelegationPolicy, validateAdaptiveDelegationPolicy } from "../orchestration/adaptive-delegation.js";
-import { validateToolList } from "../safety.js";
-import type { FactoryAdaptiveDispatchGate, FactoryAdaptiveDispatchGateInput, FactoryDefinition, FactoryExecutionMode, FactoryInputManifest, FactoryManifestItem, FactoryOracleReview, FactoryRunInput, FactoryStage } from "../types.js";
-import { sha256 } from "../utils/hashing.js";
-import { parseJsonFile } from "../utils/json.js";
-import { isSafeArtifactName, pathMatches, resolveRepoPath, safeFileStem } from "../utils/paths.js";
-import { isRecord } from "../utils/records.js";
-import { readableZobResourcePath } from "../utils/resources.js";
+import { validateToolList } from "../governance/safety.js";
+import type { FactoryAdaptiveDispatchGate, FactoryAdaptiveDispatchGateInput, FactoryDefinition, FactoryExecutionMode, FactoryInputManifest, FactoryManifestItem, FactoryOracleReview, FactoryRunInput, FactoryStage } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { parseJsonFile } from "../../core/utils/json.js";
+import { isSafeArtifactName, pathMatches, resolveRepoPath, safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
+import { readableZobResourcePath } from "../../core/utils/resources.js";
 
 function isFactoryManifestItem(value: unknown): value is FactoryManifestItem {
   return isRecord(value) && typeof value.id === "string" && typeof value.path === "string";

package/.pi/extensions/zob-harness/src/domains/git/AGENTS.md

@@ -0,0 +1,20 @@
+# Git domain guardrail
+
+## Scope
+
+- Governed zcommit/git policy helpers and child dirty-path tracking.
+
+## MUST DO
+
+- Preserve `/zcommit` governance, explicit user-request requirement, no direct global staging, owned-path tracking, and policy smoke expectations.
+
+## MUST NOT
+
+- Do not introduce direct `git commit`, `git push`, `git tag`, force push, `git add .`, or `git add -A` behavior.
+- Do not import from `index.ts` or `index.js`.
+
+## Validation
+
+- `npm run check -- --pretty false`.
+- `npm run smoke:git-ops` after git helper moves.
+- `npm run smoke:harness` if runtime-facing behavior moves.

package/.pi/extensions/zob-harness/src/{git-ops.ts → domains/git/git-ops.ts}

@@ -3,7 +3,7 @@ import { relative, resolve } from "node:path";
 import { createHash } from "node:crypto";
 import { execFileSync } from "node:child_process";
 
-import { pathMatches } from "./utils/paths.js";
+import { pathMatches } from "../../core/utils/paths.js";
 
 export type ZcommitToggleState = "on" | "off";
 
@@ -665,13 +665,13 @@ export function formatZcommitPlan(plan: ZcommitPlan): string {
 }
 
 function cachedNames(repoRoot: string): string[] {
-  const stdout = runGit(repoRoot, ["diff", "--cached", "--name-only", "-z"]);
+  const stdout = runGit(repoRoot, ["diff", "--cached", "--no-renames", "--name-only", "-z"]);
   return stdout.split("\0").filter(Boolean).sort();
 }
 
 function cachedPatch(repoRoot: string, paths: string[]): string {
   if (paths.length === 0) return "";
-  return runGit(repoRoot, ["diff", "--cached", "--binary", "--", ...paths]);
+  return runGit(repoRoot, ["diff", "--cached", "--no-renames", "--binary", "--", ...paths]);
 }
 
 function restoreCachedPaths(repoRoot: string, paths: string[], preAddPatch: string): void {

package/.pi/extensions/zob-harness/src/domains/goal/AGENTS.md

@@ -0,0 +1,22 @@
+# Goal domain guardrail
+
+## Scope
+
+- Goal parsing, runtime goal state, goal TODO graph, TODO imports, and goal-room reducer logic.
+
+## MUST DO
+
+- Preserve parent-owned TODO claim semantics, oracle/no_ship gates, TODO statuses, action names, diagnostics, and evidence refs.
+- Preserve runtime goal statuses, activation mode defaults, continuation semantics, and branch restore behavior.
+- Keep public exports reachable from `index.ts`.
+
+## MUST NOT
+
+- Do not accept delegated claims without parent-owned evidence/oracle gates.
+- Do not bypass goal completion proposal or oracle requirements.
+- Do not import from `index.ts` or `index.js`.
+
+## Validation
+
+- `npm run check -- --pretty false`.
+- `npm run smoke:harness` after TODO or runtime-goal moves.

package/.pi/extensions/zob-harness/src/{goal-room.ts → domains/goal/goal-room.ts}

@@ -1,13 +1,13 @@
 import { appendFileSync, mkdirSync } from "node:fs";
 import { join } from "node:path";
 
-import { DEFAULT_RULES } from "./constants.js";
-import type { TeamDefinition } from "./types.js";
-import { sha256 } from "./utils/hashing.js";
-import { readJsonl } from "./utils/json.js";
-import { pathMatches } from "./utils/paths.js";
-import { newRunId, resolveRepoPath, safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { DEFAULT_RULES } from "../../core/constants.js";
+import type { TeamDefinition } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { readJsonl } from "../../core/utils/json.js";
+import { pathMatches } from "../../core/utils/paths.js";
+import { newRunId, resolveRepoPath, safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export type GoalRoomMessageKind = "QUESTION" | "ANSWER" | "FINDING" | "ACTION_TAKEN" | "ARTIFACT_READY" | "TODO_CLAIM" | "BLOCKER" | "RISK" | "NO_SHIP_ALERT" | "CONTEXT_REQUEST" | "SPLIT_REQUEST" | "DELEGATION_REQUEST" | "ORACLE_REQUEST" | "OWNER_CHANGE_REQUEST" | "OWNER_CHANGE_DECISION" | "HANDOFF" | "DECISION" | "STATUS_UPDATE";
 export type GoalRoomAudience = "all" | "parent" | "lead" | "oracle" | "worker";

package/.pi/extensions/zob-harness/src/{goal-todo-imports.ts → domains/goal/goal-todo-imports.ts}

@@ -3,7 +3,7 @@ import { join } from "node:path";
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 
 import { addGoalTodo, completeGoalTodo, type GoalTodoNode, type GoalTodoOwner } from "./goal-todos.js";
-import type { HarnessRuntimeState } from "./runtime/state.js";
+import type { HarnessRuntimeState } from "../../runtime/state.js";
 
 export interface GoalTodoImportResult {
   kind: "factory" | "orchestration" | "chain";

package/.pi/extensions/zob-harness/src/{goal-todo-types.ts → domains/goal/goal-todo-types.ts}

@@ -1,4 +1,4 @@
-import type { ZcommitChildChangedPathRef } from "./git-ops.js";
+import type { ZcommitChildChangedPathRef } from "../git/git-ops.js";
 
 export type GoalTodoStatus = "planned" | "ready" | "in_progress" | "delegated" | "claim_returned" | "needs_review" | "needs_oracle" | "needs_user" | "blocked" | "done" | "skipped";
 export type GoalTodoOwner = "agent" | "user" | "oracle" | "subagent" | "factory" | "orchestration";

package/.pi/extensions/zob-harness/src/{goal-todos.ts → domains/goal/goal-todos.ts}

@@ -1,7 +1,7 @@
 import { randomUUID } from "node:crypto";
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 
-import type { HarnessRuntimeState } from "./runtime/state.js";
+import type { HarnessRuntimeState } from "../../runtime/state.js";
 import type {
   AddGoalTodoInput,
   GoalRoomTodoReducerDecision,
@@ -32,9 +32,9 @@ import type {
   TodoClaimValidationResult,
   TodoSplitRequest,
 } from "./goal-todo-types.js";
-import { recordZcommitOwnedPaths, type ZcommitChildChangedPathRef } from "./git-ops.js";
-import { sha256 } from "./utils/hashing.js";
-import { isRecord } from "./utils/records.js";
+import { recordZcommitOwnedPaths, type ZcommitChildChangedPathRef } from "../git/git-ops.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export const ZOB_GOAL_TODO_ENTRY_TYPE = "zob-goal-todo";
 

package/.pi/extensions/zob-harness/src/{goal.ts → domains/goal/goal.ts}

@@ -1,4 +1,4 @@
-import type { BillableJobIntake, BudgetSidecar, GoalState } from "./types.js";
+import type { BillableJobIntake, BudgetSidecar, GoalState } from "../../types.js";
 
 export type StrictGoalSpecAnchorKind = "active_goal" | "orchestrate_run" | "factory_run" | "delegate_write" | "quarantine";
 

package/.pi/extensions/zob-harness/src/domains/governance/AGENTS.md

@@ -0,0 +1,21 @@
+# Governance domain guardrail
+
+## Scope
+
+- Safety policy, rules, budget gates, sandbox metadata, workspace claims, worker pools, and merge queue records.
+
+## MUST DO
+
+- Preserve path policy, secret protection, no destructive behavior, parent-owned merge/apply semantics, and hash-only metadata.
+- Keep sandbox/apply helpers proposal-only unless the original gated path explicitly required approval.
+
+## MUST NOT
+
+- Do not introduce auto-apply, direct git commit/push, hidden worker chat, or raw body persistence.
+- Do not weaken allowed_paths/forbidden_paths validation.
+- Do not import from `index.ts` or `index.js`.
+
+## Validation
+
+- `npm run check -- --pretty false`.
+- `npm run smoke:harness` after safety, sandbox, workspace, worker-pool, or merge-queue moves.

package/.pi/extensions/zob-harness/src/{budget-policy.ts → domains/governance/budget-policy.ts}

@@ -1,12 +1,12 @@
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
-import { evaluateBudgetPreflightDryRun } from "./chronicle.js";
-import type { BudgetPreflightDryRunCaps, FactoryRunBudgetInput } from "./types.js";
-import { sha256 } from "./utils/hashing.js";
-import { parseJsonFile } from "./utils/json.js";
-import { safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { evaluateBudgetPreflightDryRun } from "../telemetry/chronicle.js";
+import type { BudgetPreflightDryRunCaps, FactoryRunBudgetInput } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { parseJsonFile } from "../../core/utils/json.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 const FORBIDDEN_BUDGET_BODY_KEYS = new Set(["task", "prompt", "output", "body", "content"]);
 const REQUIRED_CAP_KEYS: Array<keyof BudgetPreflightDryRunCaps> = ["maxCostUsd", "maxRuns", "maxDurationMs", "maxParallelChildren"];

package/.pi/extensions/zob-harness/src/{governed-requests.ts → domains/governance/governed-requests.ts}

@@ -1,10 +1,10 @@
-import { DEFAULT_RULES } from "./constants.js";
-import { appendGoalRoomMessage } from "./goal-room.js";
-import type { TeamDefinition } from "./types.js";
-import { sha256 } from "./utils/hashing.js";
-import { pathMatches } from "./utils/paths.js";
-import { resolveRepoPath, safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { DEFAULT_RULES } from "../../core/constants.js";
+import { appendGoalRoomMessage } from "../goal/goal-room.js";
+import type { TeamDefinition } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { pathMatches } from "../../core/utils/paths.js";
+import { resolveRepoPath, safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export type GovernedRequestKind = "DELEGATION_REQUEST" | "ORACLE_REQUEST" | "CONTEXT_REQUEST" | "OWNER_CHANGE_REQUEST";
 export type GovernedRequestPriority = "low" | "normal" | "high" | "critical";

package/.pi/extensions/zob-harness/src/{launch-apply.ts → domains/governance/launch-apply.ts}

@@ -1,7 +1,7 @@
-import { DEFAULT_RULES } from "./constants.js";
-import { sha256 } from "./utils/hashing.js";
-import { pathMatches, resolveRepoPath, safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { DEFAULT_RULES } from "../../core/constants.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { pathMatches, resolveRepoPath, safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export type WorkerPoolLaneKind = "context" | "factory" | "implement" | "qa" | "oracle";
 export type ApplyGateStatus = "eligible_not_applied" | "blocked";

package/.pi/extensions/zob-harness/src/{merge-queue.ts → domains/governance/merge-queue.ts}

@@ -1,12 +1,12 @@
 import { appendFileSync, mkdirSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
-import { DEFAULT_RULES } from "./constants.js";
-import type { TeamDefinition } from "./types.js";
-import { sha256 } from "./utils/hashing.js";
-import { readJsonl } from "./utils/json.js";
-import { pathMatches, resolveRepoPath, safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { DEFAULT_RULES } from "../../core/constants.js";
+import type { TeamDefinition } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { readJsonl } from "../../core/utils/json.js";
+import { pathMatches, resolveRepoPath, safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export type MergeCandidatePriority = "low" | "normal" | "high" | "critical";
 export type MergeCandidateRisk = "low" | "medium" | "high";

package/.pi/extensions/zob-harness/src/{rules.ts → domains/governance/rules.ts}

@@ -1,9 +1,9 @@
 import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { basename, join } from "node:path";
 
-import type { ModeName, RuleEnforcementLevel, RuleOracleRequirement, RulePack, RuleResolution, RuleResolverInput } from "./types.js";
-import { pathMatches, safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import type { ModeName, RuleEnforcementLevel, RuleOracleRequirement, RulePack, RuleResolution, RuleResolverInput } from "../../types.js";
+import { pathMatches, safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 const RULE_PACK_SCHEMA = "zob.rule-pack.v1";
 const RULE_RESOLUTION_SCHEMA = "zob.rule-resolution.v1";
@@ -12,11 +12,11 @@ const MODE_NAMES = new Set<ModeName>(["explore", "plan", "implement", "oracle",
 const ENFORCEMENT_LEVELS = new Set<RuleEnforcementLevel>(["advisory", "warn", "preflight_fail", "block", "no_ship", "human_approval"]);
 
 const PROFILE_PATHS: Array<{ profile: string; patterns: string[] }> = [
-  { profile: "factory-engineer", patterns: [".pi/extensions/zob-harness/src/factory/**", ".pi/factories/**", "reports/factory-runs/**"] },
-  { profile: "orchestration-engineer", patterns: [".pi/extensions/zob-harness/src/orchestration/**", ".pi/extensions/zob-harness/src/topology/**", ".pi/teams/**", ".pi/orchestrations/**", "reports/orchestrations/**"] },
+  { profile: "factory-engineer", patterns: [".pi/extensions/zob-harness/src/domains/factory/**", ".pi/factories/**", "reports/factory-runs/**"] },
+  { profile: "orchestration-engineer", patterns: [".pi/extensions/zob-harness/src/domains/orchestration/**", ".pi/extensions/zob-harness/src/domains/topology/**", ".pi/teams/**", ".pi/orchestrations/**", "reports/orchestrations/**"] },
   { profile: "prompt-ops", patterns: [".pi/agents/**", ".pi/prompts/**", ".pi/skills/**", ".pi/output-contracts/**", ".pi/chains/**"] },
-  { profile: "sandbox-engineer", patterns: ["reports/sandbox-runs/**", ".pi/extensions/zob-harness/src/safety.ts", ".pi/extensions/zob-harness/src/child-runner.ts"] },
-  { profile: "runtime-maintainer", patterns: [".pi/extensions/zob-harness/index.ts", ".pi/extensions/zob-harness/src/runtime/**", ".pi/extensions/zob-harness/src/schemas.ts", ".pi/extensions/zob-harness/src/types.ts", ".pi/extensions/zob-harness/src/rules.ts"] },
+  { profile: "sandbox-engineer", patterns: ["reports/sandbox-runs/**", ".pi/extensions/zob-harness/src/domains/governance/safety.ts", ".pi/extensions/zob-harness/src/domains/delegation/child-runner.ts"] },
+  { profile: "runtime-maintainer", patterns: [".pi/extensions/zob-harness/index.ts", ".pi/extensions/zob-harness/src/runtime/**", ".pi/extensions/zob-harness/src/runtime/schemas.ts", ".pi/extensions/zob-harness/src/types.ts", ".pi/extensions/zob-harness/src/domains/governance/rules.ts"] },
   { profile: "docs-maintainer", patterns: ["docs/**", "README.md", "AGENTS.md"] },
 ];
 

package/.pi/extensions/zob-harness/src/{safety.ts → domains/governance/safety.ts}

@@ -2,9 +2,9 @@ import { existsSync, readFileSync } from "node:fs";
 import { join, resolve } from "node:path";
 import { getAgentDir } from "@earendil-works/pi-coding-agent";
 
-import { DEFAULT_RULES } from "./constants.js";
-import type { BudgetSidecar, DamageRules, HarnessAgent } from "./types.js";
-import { expandHome, pathMatches } from "./utils/paths.js";
+import { DEFAULT_RULES } from "../../core/constants.js";
+import type { BudgetSidecar, DamageRules, HarnessAgent } from "../../types.js";
+import { expandHome, pathMatches } from "../../core/utils/paths.js";
 
 function loadDamageRules(cwd: string): DamageRules {
   const candidates = [join(cwd, ".pi", "damage-control-rules.json"), join(getAgentDir(), "damage-control-rules.json")];

package/.pi/extensions/zob-harness/src/{sandbox.ts → domains/governance/sandbox.ts}

@@ -1,12 +1,12 @@
 import { appendFileSync, existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 
-import { DEFAULT_RULES } from "./constants.js";
+import { DEFAULT_RULES } from "../../core/constants.js";
 import { createDiffGateResult, createRollbackMetadata, createSandboxMetadata, validateRuntimeWritePolicy } from "./safety.js";
-import { sha256 } from "./utils/hashing.js";
-import { parseJsonFile } from "./utils/json.js";
-import { pathMatches, resolveRepoPath, safeFileStem, safeRunId } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { parseJsonFile } from "../../core/utils/json.js";
+import { pathMatches, resolveRepoPath, safeFileStem, safeRunId } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export type SandboxWriteAction = "create" | "update";
 

package/.pi/extensions/zob-harness/src/{worker-pool.ts → domains/governance/worker-pool.ts}

@@ -1,13 +1,13 @@
 import { appendFileSync, existsSync, mkdirSync } from "node:fs";
 import { join } from "node:path";
 
-import { DEFAULT_RULES } from "./constants.js";
-import { appendGoalRoomMessage } from "./goal-room.js";
-import type { TeamDefinition } from "./types.js";
-import { sha256 } from "./utils/hashing.js";
-import { readJsonl } from "./utils/json.js";
-import { newRunId, pathMatches, resolveRepoPath, safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { DEFAULT_RULES } from "../../core/constants.js";
+import { appendGoalRoomMessage } from "../goal/goal-room.js";
+import type { TeamDefinition } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { readJsonl } from "../../core/utils/json.js";
+import { newRunId, pathMatches, resolveRepoPath, safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 import { listWorkspaceClaims, type WorkspaceClaimRecord } from "./workspace-claims.js";
 
 export type WorkerPoolCommunicationPolicyMode = "goal_room_only" | "goal_room_with_optional_live";

package/.pi/extensions/zob-harness/src/{workspace-claims.ts → domains/governance/workspace-claims.ts}

@@ -1,12 +1,12 @@
 import { appendFileSync, mkdirSync } from "node:fs";
 import { join } from "node:path";
 
-import { DEFAULT_RULES } from "./constants.js";
-import type { TeamDefinition } from "./types.js";
-import { sha256 } from "./utils/hashing.js";
-import { readJsonl } from "./utils/json.js";
-import { pathMatches, resolveRepoPath, safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { DEFAULT_RULES } from "../../core/constants.js";
+import type { TeamDefinition } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { readJsonl } from "../../core/utils/json.js";
+import { pathMatches, resolveRepoPath, safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export type WorkspaceClaimMode = "read" | "write";
 export type WorkspaceClaimStatus = "active" | "blocked_conflict";

package/.pi/extensions/zob-harness/src/domains/models/AGENTS.md

@@ -0,0 +1,20 @@
+# Models domain guardrail
+
+## Scope
+
+- Model routing, model availability validation, model catalog/economy helpers.
+
+## MUST DO
+
+- Preserve explicit model override validation and configured/runtime availability distinctions.
+- Keep budget and routing decisions evidence-backed.
+
+## MUST NOT
+
+- Do not treat desired/configured/catalogued models as runtime availability proof.
+- Do not import from `index.ts` or `index.js`.
+
+## Validation
+
+- `npm run check -- --pretty false`.
+- Run model catalog validation scripts when model policy files or helpers move.

package/.pi/extensions/zob-harness/src/{model-availability.ts → domains/models/model-availability.ts}

@@ -1,7 +1,7 @@
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 
-import { isRecord } from "./utils/records.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export type ExplicitModelOverrideValidation = {
   ok: boolean;

package/.pi/extensions/zob-harness/src/{model-routing.ts → domains/models/model-routing.ts}

@@ -1,12 +1,12 @@
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
-import { evaluateBudgetPreflightDryRun } from "./chronicle.js";
-import type { BudgetPreflightDryRunCaps, FactoryRunModelRoutingInput, ModeName } from "./types.js";
-import { sha256 } from "./utils/hashing.js";
-import { parseJsonFile } from "./utils/json.js";
-import { safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { evaluateBudgetPreflightDryRun } from "../telemetry/chronicle.js";
+import type { BudgetPreflightDryRunCaps, FactoryRunModelRoutingInput, ModeName } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { parseJsonFile } from "../../core/utils/json.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export type ModelRiskLevel = "low" | "medium" | "high";
 export type ModelClass = "cheap_scout" | "balanced_worker" | "strong_reasoning" | "strong_oracle" | "high_context";

package/.pi/extensions/zob-harness/src/domains/orchestration/AGENTS.md

@@ -0,0 +1,21 @@
+# Orchestration domain compatibility guardrail
+
+## Scope
+
+- Future home for orchestration domain files and compatibility wrappers around `src/orchestration/**`.
+- Existing `src/orchestration/AGENTS.md` remains authoritative for current internals until moved.
+
+## MUST DO
+
+- Preserve plan-only/read-only supervised semantics, parent-owned dispatch, room artifact names, and no child-spawns-child policy.
+
+## MUST NOT
+
+- Do not make plan-only flows produce completion sentinels.
+- Do not launch live children from supervised_readonly by moving code.
+- Do not import from `index.ts` or `index.js`.
+
+## Validation
+
+- `npm run check -- --pretty false`.
+- `npm run smoke:harness` after orchestration moves.

package/.pi/extensions/zob-harness/src/{orchestration → domains/orchestration}/adaptive-delegation.ts

@@ -1,10 +1,10 @@
 import { existsSync } from "node:fs";
 import { join } from "node:path";
 
-import { discoverAgents } from "../agents.js";
-import { DEFAULT_RULES, SUPERVISED_READONLY_CHILD_TOOLS } from "../constants.js";
-import { validateOutputContractId } from "../output-contracts.js";
-import { validateAllowedPathPolicy } from "../safety.js";
+import { discoverAgents } from "../delegation/agents.js";
+import { DEFAULT_RULES, SUPERVISED_READONLY_CHILD_TOOLS } from "../../core/constants.js";
+import { validateOutputContractId } from "../delegation/output-contracts.js";
+import { validateAllowedPathPolicy } from "../governance/safety.js";
 import type {
   AdaptiveDelegationGovernorState,
   AdaptiveDelegationPolicy,
@@ -17,10 +17,10 @@ import type {
   DelegationScore,
   GovernorDecision,
   ParentDispatchContract,
-} from "../types.js";
-import { sha256 } from "../utils/hashing.js";
-import { pathMatches } from "../utils/paths.js";
-import { isRecord } from "../utils/records.js";
+} from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { pathMatches } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 const ADAPTIVE_DELEGATION_SCHEMA = "zob.adaptive-delegation-policy.v1" as const;
 const GOVERNOR_STATE_SCHEMA = "zob.adaptive-delegation-governor-state.v1" as const;

package/.pi/extensions/zob-harness/src/{orchestration → domains/orchestration}/adaptive-workflow.ts

@@ -1,10 +1,10 @@
 import { existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 
-import type { AdaptiveDelegationPolicy, OrchestrateExecutionMode, OrchestrateRunInput, OrchestrationProfileDefinition, TeamDefinition, TeamRoleBase, TeamLead, TeamWorker } from "../types.js";
-import { sha256 } from "../utils/hashing.js";
-import { safeFileStem } from "../utils/paths.js";
-import { isRecord } from "../utils/records.js";
+import type { AdaptiveDelegationPolicy, OrchestrateExecutionMode, OrchestrateRunInput, OrchestrationProfileDefinition, TeamDefinition, TeamRoleBase, TeamLead, TeamWorker } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 const BODY_FREE_SCHEMA_VERSION = "v1";
 const GUIDANCE_SCAN_LIMIT = 200;

package/.pi/extensions/zob-harness/src/{orchestration → domains/orchestration}/lead-plan.ts

@@ -1,8 +1,8 @@
-import { loadProjectAgents } from "../agents.js";
-import { validateOutputContractId } from "../output-contracts.js";
-import { validateAllowedPathPolicy, validateDelegateTaskWriteScope, validateForbiddenPathPolicy, validateToolList } from "../safety.js";
-import { sha256 } from "../utils/hashing.js";
-import { isRecord } from "../utils/records.js";
+import { loadProjectAgents } from "../delegation/agents.js";
+import { validateOutputContractId } from "../delegation/output-contracts.js";
+import { validateAllowedPathPolicy, validateDelegateTaskWriteScope, validateForbiddenPathPolicy, validateToolList } from "../governance/safety.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export interface LeadPlanWorkerContract {
   worker_id: string;