zob-harness 0.2.0 → 0.3.1

package/.pi/extensions/zob-harness/src/{zagents.ts → domains/coms/zagents.ts}

@@ -1,10 +1,11 @@
 import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { basename, join, relative, resolve } from "node:path";
 
+import type { ModeName } from "../../core/types/core.js";
 import { safeZpeerAlias, safeZpeerRoomId } from "./coms-v2/zpeer.js";
-import { parseJsonFile } from "./utils/json.js";
-import { isSafeArtifactName } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { parseJsonFile } from "../../core/utils/json.js";
+import { isSafeArtifactName } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 const ZAGENTS_DIR = ".pi/zagents";
 const ZTEAMS_DIR = ".pi/zteams";
@@ -12,6 +13,7 @@ const ZAGENT_PROMPTS_DIR = ".pi/zagents/prompts";
 const ZAGENT_SCHEMA_ID = "zob.zagent.v1";
 const ZTEAM_SCHEMA_ID = "zob.zteam.v1";
 const SAFE_ID_PATTERN = /^[a-zA-Z0-9][a-zA-Z0-9_.-]{0,79}$/;
+const ZAGENT_MODE_NAMES = new Set<ModeName>(["explore", "plan", "implement", "oracle", "factory", "orchestrator", "vanilla"]);
 
 export const ZAGENT_MANIFEST_SCHEMA = {
   schema: ZAGENT_SCHEMA_ID,
@@ -65,6 +67,7 @@ export interface ZAgentManifest {
   communicationPolicy?: ZAgentCommunicationPolicy;
   contextRefs?: ZAgentContextRefInput[];
   model?: string;
+  defaultMode?: ModeName;
   tools?: string[];
   metadata?: Record<string, unknown>;
   localOnly: true;
@@ -269,6 +272,19 @@ function validateRoomBindings(rooms: ZAgentRoomRef[] | undefined, label: string)
   return errors;
 }
 
+
+function safePiModelPattern(value: string | undefined): string | undefined {
+  const trimmed = value?.trim();
+  if (!trimmed || trimmed.length > 160) return undefined;
+  if (trimmed.includes("\0") || trimmed.includes("\n") || trimmed.includes("\r") || trimmed.includes("..")) return undefined;
+  if (trimmed.startsWith("/") || trimmed.startsWith("~")) return undefined;
+  return /^[a-zA-Z0-9._:/+@-]+$/.test(trimmed) ? trimmed : undefined;
+}
+
+function isZagentModeName(value: unknown): value is ModeName {
+  return typeof value === "string" && ZAGENT_MODE_NAMES.has(value as ModeName);
+}
+
 function validateCommunicationPolicy(policy: unknown, label: string): string[] {
   const errors: string[] = [];
   if (policy === undefined) return errors;
@@ -305,6 +321,7 @@ function isZAgentManifest(value: unknown): value is ZAgentManifest {
     && isCommunicationPolicy(value.communicationPolicy)
     && (value.contextRefs === undefined || (Array.isArray(value.contextRefs) && value.contextRefs.every(isContextRef)))
     && (value.model === undefined || typeof value.model === "string")
+    && (value.defaultMode === undefined || isZagentModeName(value.defaultMode))
     && (value.tools === undefined || isStringArray(value.tools))
     && (value.metadata === undefined || isRecord(value.metadata))
     && value.localOnly === true
@@ -371,6 +388,12 @@ export function validateZagentManifest(repoRoot: string, manifest: unknown, mani
   errors.push(...validateRoomBindings(rooms, "zagent.rooms"));
   errors.push(...validateActiveRoom(manifest.activeRoom, bindings, "zagent"));
   errors.push(...validateCommunicationPolicy(manifest.communicationPolicy, "zagent.communicationPolicy"));
+  if (typeof manifest.model === "string" && safePiModelPattern(manifest.model) !== manifest.model.trim()) {
+    errors.push(`zagent.model must be a safe Pi --model pattern: ${manifest.model}`);
+  }
+  if (manifest.defaultMode !== undefined && !isZagentModeName(manifest.defaultMode)) {
+    errors.push(`zagent.defaultMode must be one of ${[...ZAGENT_MODE_NAMES].join(",")}: ${String(manifest.defaultMode)}`);
+  }
   if (typeof manifest.promptRef === "string") {
     const prompt = resolveZagentPromptRef(repoRoot, manifest.promptRef);
     errors.push(...prompt.errors);
@@ -476,6 +499,64 @@ export function listZteamManifests(repoRoot: string): ZTeamLoaded[] {
   return listJsonFiles(projectZteamsDir(repoRoot)).map((path) => loadZteamManifest(repoRoot, basename(path, ".json")));
 }
 
+export interface ZAgentResolvedTeamMembership {
+  teamId: string;
+  alias?: string;
+  role?: string;
+  rooms: ZAgentRoomBinding[];
+}
+
+function zteamMemberMatchesZagent(member: ZTeamMemberManifest | ZTeamAgentManifest, zagentId: string): boolean {
+  return zteamMemberAgentId(member) === zagentId;
+}
+
+export function resolveZagentTeamMemberships(repoRoot: string, zagentId: string): ZAgentResolvedTeamMembership[] {
+  const memberships: ZAgentResolvedTeamMembership[] = [];
+  for (const loaded of listZteamManifests(repoRoot)) {
+    if (loaded.errors.length > 0) continue;
+    const teamRooms = normalizeZagentRoomBindings(loaded.manifest.rooms, loaded.manifest.defaultRoom, loaded.manifest.activeRoom);
+    const members = [...(loaded.manifest.members ?? []), ...(loaded.manifest.agents ?? [])];
+    for (const member of members) {
+      if (!zteamMemberMatchesZagent(member, zagentId)) continue;
+      const memberRooms = zteamMemberRooms(member, loaded.manifest.defaultRoom);
+      const rooms = memberRooms.length > 0 ? memberRooms : teamRooms;
+      memberships.push({
+        teamId: loaded.manifest.id,
+        alias: member.alias,
+        role: member.role,
+        rooms,
+      });
+    }
+  }
+  return memberships;
+}
+
+export function resolveZagentRuntimeRoomBindings(repoRoot: string, manifest: ZAgentManifest): { rooms: ZAgentRoomBinding[]; teamIds: string[] } {
+  const byRoom = new Map<string, ZAgentRoomBinding>();
+  const pushRoom = (room: ZAgentRoomBinding, defaults: { alias?: string; role?: string } = {}): void => {
+    const id = safeZpeerRoomId(room.id);
+    if (!id) return;
+    const existing = byRoom.get(id);
+    byRoom.set(id, {
+      ...existing,
+      ...room,
+      id,
+      alias: existing?.alias ?? room.alias ?? defaults.alias,
+      role: existing?.role ?? room.role ?? defaults.role,
+      active: existing?.active === true || room.active === true,
+    });
+  };
+
+  for (const room of normalizeZagentRoomBindings(manifest.rooms, manifest.defaultRoom, manifest.activeRoom)) pushRoom(room, { alias: manifest.alias });
+  const teamIds = new Set<string>(manifest.team ? [manifest.team] : []);
+  for (const membership of resolveZagentTeamMemberships(repoRoot, manifest.id)) {
+    teamIds.add(membership.teamId);
+    for (const room of membership.rooms) pushRoom(room, { alias: membership.alias ?? manifest.alias, role: membership.role });
+  }
+  const rooms = [...byRoom.values()];
+  return { rooms, teamIds: [...teamIds] };
+}
+
 function policyAllowsZpeerContact(policy: ZAgentCommunicationPolicy | undefined, roomId?: string, alias?: string): boolean {
   if (!policy) return true;
   if (policy.zpeerContact === false || policy.allowZpeerContact === false) return false;
@@ -507,10 +588,11 @@ export function formatZagentList(agents: ZAgentLoaded[]): string {
     const alias = manifest.alias ? ` @${manifest.alias}` : "";
     const role = manifest.role ? ` role=${manifest.role}` : "";
     const team = manifest.team ? ` team=${manifest.team}` : "";
+    const mode = manifest.defaultMode ? ` defaultMode=${manifest.defaultMode}` : "";
     const rooms = normalizeZagentRoomBindings(manifest.rooms, manifest.defaultRoom, manifest.activeRoom);
     const roomText = rooms.length ? ` rooms=${rooms.map((room) => `${room.id}${room.active ? "*" : ""}`).join(",")}` : "";
     const status = errors.length === 0 ? "ok" : `errors=${errors.length}`;
-    return `- ${manifest.id}${alias} [${status}]${team}${role}${roomText}${relPrompt} path=${relPath}`;
+    return `- ${manifest.id}${alias} [${status}]${team}${role}${mode}${roomText}${relPrompt} path=${relPath}`;
   }).join("\n");
 }
 

package/.pi/extensions/zob-harness/src/domains/context/AGENTS.md

@@ -0,0 +1,20 @@
+# Context domain guardrail
+
+## Scope
+
+- Context/GBrain readiness, context scope validation, and writeback proposal helpers.
+
+## MUST DO
+
+- Preserve bounded context, citations, forbidden-source checks, and proposal-only writeback semantics.
+- Keep raw conversation/prompt bodies out of persisted metadata.
+
+## MUST NOT
+
+- Do not import/embed/sync/write to external knowledge backends by moving code.
+- Do not import from `index.ts` or `index.js`.
+
+## Validation
+
+- `npm run check -- --pretty false`.
+- Run context readiness checks when context behavior moves.

package/.pi/extensions/zob-harness/src/{context-gbrain.ts → domains/context/context-gbrain.ts}

@@ -1,9 +1,9 @@
 import { existsSync, mkdirSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
-import { sha256 } from "./utils/hashing.js";
-import { safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 const FORBIDDEN_CONTEXT_BODY_KEYS = new Set(["body", "task", "prompt", "output", "content", "message", "diff", "patch", "rawConversation", "conversationHistory"]);
 const CONTEXT_SCOPE_MAX_TOKENS_CAP = 8000;
@@ -416,7 +416,7 @@ export function buildContextGbrainReadinessAudit(repoRoot: string, input: { runI
     runId: String(scope.runId),
     observedProblemHash: sha256("context readiness observed problem"),
     newPatternHash: sha256("context readiness writeback pattern"),
-    evidenceRefs: ["docs/AUTONOMOUS_SUPER_FACTORY_GOAL.md", ".pi/extensions/zob-harness/src/context-gbrain.ts"],
+    evidenceRefs: ["docs/AUTONOMOUS_SUPER_FACTORY_GOAL.md", ".pi/extensions/zob-harness/src/domains/context/context-gbrain.ts"],
     recommendedArtifact: ".pi/context/writeback-proposals.jsonl",
   });
   const forbiddenScope = { ...scope, allowedSources: ["zob-harness-docs", "raw-conversation-history"], forbiddenSources: ["raw-conversation-history", ".env"] };

package/.pi/extensions/zob-harness/src/domains/delegation/AGENTS.md

@@ -0,0 +1,21 @@
+# Delegation domain guardrail
+
+## Scope
+
+- Agent discovery, child runner support, output contracts, delegation schemas, and child-output gates.
+
+## MUST DO
+
+- Preserve six-part contract validation, child output contract ids, output gate behavior, model override checks, and path policy enforcement.
+- Keep child prompt/output bodies out of persisted ledgers unless existing policy explicitly allows a redacted/hash-only artifact.
+
+## MUST NOT
+
+- Do not rename specialist agents, output contract ids, gate markers, or failure-kind strings.
+- Do not loosen write-scope, cwd, allowed_paths, forbidden_paths, or secret protections.
+- Do not import from `index.ts` or `index.js`.
+
+## Validation
+
+- `npm run check -- --pretty false`.
+- `npm run smoke:harness` after child-runner, output-contract, safety-adjacent, or runtime-facing moves.

package/.pi/extensions/zob-harness/src/{agents.ts → domains/delegation/agents.ts}

@@ -1,8 +1,8 @@
 import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { basename, join } from "node:path";
 import { getAgentDir } from "@earendil-works/pi-coding-agent";
-import type { AgentScope, HarnessAgent } from "./types.js";
-import { readableZobResourcePaths } from "./utils/resources.js";
+import type { AgentScope, HarnessAgent } from "../../types.js";
+import { readableZobResourcePaths } from "../../core/utils/resources.js";
 
 function parseFrontmatter(raw: string): { frontmatter: Record<string, string>; body: string } {
   if (!raw.startsWith("---\n")) return { frontmatter: {}, body: raw };

package/.pi/extensions/zob-harness/src/{capabilities.ts → domains/delegation/capabilities.ts}

@@ -3,12 +3,12 @@ import { basename, join, relative } from "node:path";
 
 import { discoverAgents } from "./agents.js";
 import { getOutputContractDefinitions } from "./output-contracts.js";
-import { loadChainDefinition, listChainDefinitions } from "./topology/chains.js";
-import { sha256 } from "./utils/hashing.js";
-import { parseJsonFile } from "./utils/json.js";
-import { safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
-import { readableZobResourcePath, readableZobResourcePaths } from "./utils/resources.js";
+import { loadChainDefinition, listChainDefinitions } from "../topology/chains.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { parseJsonFile } from "../../core/utils/json.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
+import { readableZobResourcePath, readableZobResourcePaths } from "../../core/utils/resources.js";
 
 export interface ReuseScoutInput {
   query: string;

package/.pi/extensions/zob-harness/src/{child-runner.ts → domains/delegation/child-runner.ts}

@@ -6,15 +6,15 @@ import { join } from "node:path";
 import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
 
 import { discoverAgents } from "./agents.js";
-import { SUPERVISED_READONLY_CHILD_TOOLS } from "./constants.js";
-import { validateExplicitModelOverride } from "./model-availability.js";
+import { SUPERVISED_READONLY_CHILD_TOOLS } from "../../core/constants.js";
+import { validateExplicitModelOverride } from "../models/model-availability.js";
 import { applyChildGates } from "./output-contracts.js";
-import { buildChildEnv } from "./safety.js";
-import { updateUsage, usageEmpty } from "./telemetry.js";
-import type { ChildResult, ChildThinkingLevel, HarnessAgent, SupervisedReadonlyDispatchContract, SupervisedReadonlyDispatcher } from "./types.js";
-import { sha256 } from "./utils/hashing.js";
-import { safeFileStem } from "./utils/paths.js";
-import { parseJsonLine, textFromMessage } from "./utils/records.js";
+import { buildChildEnv } from "../governance/safety.js";
+import { updateUsage, usageEmpty } from "../telemetry/telemetry.js";
+import type { ChildResult, ChildThinkingLevel, HarnessAgent, SupervisedReadonlyDispatchContract, SupervisedReadonlyDispatcher } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { parseJsonLine, textFromMessage } from "../../core/utils/records.js";
 
 function getPiInvocation(args: string[]): { command: string; args: string[] } {
   const currentScript = process.argv[1];

package/.pi/extensions/zob-harness/src/{output-contracts.ts → domains/delegation/output-contracts.ts}

@@ -1,7 +1,7 @@
 import { existsSync, readFileSync, statSync } from "node:fs";
 import { extname, resolve, sep } from "node:path";
 
-import type { ChildResult, OutputContract, OutputRequirement } from "./types.js";
+import type { ChildResult, OutputContract, OutputRequirement } from "../../types.js";
 
 const COMMON_OUTPUT_REQUIREMENTS: OutputRequirement[] = [
   {

package/.pi/extensions/zob-harness/src/{prompt-packs.ts → domains/delegation/prompt-packs.ts}

@@ -1,10 +1,10 @@
 import { existsSync } from "node:fs";
 
-import { DEFAULT_RULES } from "./constants.js";
+import { DEFAULT_RULES } from "../../core/constants.js";
 import { validateOutputContractId } from "./output-contracts.js";
-import { sha256 } from "./utils/hashing.js";
-import { pathMatches, resolveRepoPath } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { pathMatches, resolveRepoPath } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export type PromptPackRole = "orchestrator" | "factory-selector" | "worker-implementer" | "oracle";
 

package/.pi/extensions/zob-harness/src/domains/factory/AGENTS.md

@@ -0,0 +1,21 @@
+# Factory domain compatibility guardrail
+
+## Scope
+
+- Future home for factory selector and compatibility wrappers around `src/factory/**`.
+- Existing `src/factory/AGENTS.md` remains authoritative for factory run/quarantine internals until those files move.
+
+## MUST DO
+
+- Preserve smoke/pilot/batch/DONE sentinel behavior, plan-only posture, oracle review requirements, and artifact names.
+- Keep factory runtime registration in `src/runtime/**`.
+
+## MUST NOT
+
+- Do not auto-activate factory quarantine or skip oracle gates.
+- Do not import from `index.ts` or `index.js`.
+
+## Validation
+
+- `npm run check -- --pretty false`.
+- `npm run smoke:harness` after factory moves.

package/.pi/extensions/zob-harness/src/{factory → domains/factory}/agentic-plan.ts

@@ -1,4 +1,4 @@
-import type { FactoryDefinition, FactoryInputManifest, FactoryManifestItem } from "../types.js";
+import type { FactoryDefinition, FactoryInputManifest, FactoryManifestItem } from "../../types.js";
 
 function detectCanonicalPatterns(text: string): string[] {
   const patterns = new Set<string>();

package/.pi/extensions/zob-harness/src/{factory-selector.ts → domains/factory/factory-selector.ts}

@@ -1,10 +1,10 @@
 import { existsSync, readdirSync, readFileSync } from "node:fs";
 import { basename, join } from "node:path";
 
-import { sha256 } from "./utils/hashing.js";
-import { safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
-import { readableZobResourcePaths } from "./utils/resources.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
+import { readableZobResourcePaths } from "../../core/utils/resources.js";
 
 export type FactoryDemandSignal = "code_review" | "budget_preflight" | "roadmap_lots" | "opencode_patterns" | "project_dna" | "factory_forge";
 export type FactorySelectionStatus = "existing_factory_selected" | "factory_forge_quarantine_recommended" | "no_factory_available";

package/.pi/extensions/zob-harness/src/{factory → domains/factory}/quarantine.ts

@@ -1,11 +1,11 @@
 import { appendFileSync, copyFileSync, existsSync, lstatSync, mkdirSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
-import type { FactoryQuarantineActivateInput, FactoryQuarantineActivateResult, FactoryQuarantineReviewInput, FactoryQuarantineReviewResult, FactoryQuarantineVerifyActivationInput, FactoryQuarantineVerifyActivationResult, FactoryRunResult } from "../types.js";
-import { sha256Hex } from "../utils/hashing.js";
-import { parseJsonFile, readJsonlRecords } from "../utils/json.js";
-import { safeFileStem } from "../utils/paths.js";
-import { isRecord } from "../utils/records.js";
+import type { FactoryQuarantineActivateInput, FactoryQuarantineActivateResult, FactoryQuarantineReviewInput, FactoryQuarantineReviewResult, FactoryQuarantineVerifyActivationInput, FactoryQuarantineVerifyActivationResult, FactoryRunResult } from "../../types.js";
+import { sha256Hex } from "../../core/utils/hashing.js";
+import { parseJsonFile, readJsonlRecords } from "../../core/utils/json.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 import { runFactoryRun } from "./run.js";
 
 export function runFactoryQuarantineReview(repoRoot: string, input: FactoryQuarantineReviewInput): FactoryQuarantineReviewResult {

package/.pi/extensions/zob-harness/src/{factory → domains/factory}/run.ts

@@ -1,11 +1,11 @@
 import { appendFileSync, existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
-import { resolveComputeProfile } from "../compute-profile.js";
-import { writeFactoryTelemetrySummary } from "../telemetry.js";
-import type { FactoryAdaptiveDispatchGate, FactoryDefinition, FactoryInputManifest, FactoryManifestItem, FactoryRunInput, FactoryRunResult } from "../types.js";
-import { sha256 } from "../utils/hashing.js";
-import { resolveRepoPath, safeFileStem, safeRunId } from "../utils/paths.js";
+import { resolveComputeProfile } from "../compute/compute-profile.js";
+import { writeFactoryTelemetrySummary } from "../telemetry/telemetry.js";
+import type { FactoryAdaptiveDispatchGate, FactoryDefinition, FactoryInputManifest, FactoryManifestItem, FactoryRunInput, FactoryRunResult } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { resolveRepoPath, safeFileStem, safeRunId } from "../../core/utils/paths.js";
 import { buildFactoryAgenticPlan, detectCanonicalPatterns } from "./agentic-plan.js";
 import { buildInitialAdaptiveDelegationGovernorState, normalizeAdaptiveDelegationPolicy } from "../orchestration/adaptive-delegation.js";
 import { FACTORY_PHASE_SENTINELS, factoryPhaseSentinelForMode, loadFactoryDefinition, loadFactoryInputManifest, loadFactoryOracleReview, normalizeFactoryAdaptiveDispatchGate, summarizeFactoryOracleReview, validateFactoryRunInputs } from "./validation.js";

package/.pi/extensions/zob-harness/src/{factory → domains/factory}/validation.ts

@@ -1,17 +1,17 @@
 import { existsSync } from "node:fs";
 import { join } from "node:path";
 
-import { loadProjectAgents } from "../agents.js";
-import { DEFAULT_RULES } from "../constants.js";
-import { validateOutputContractId } from "../output-contracts.js";
+import { loadProjectAgents } from "../delegation/agents.js";
+import { DEFAULT_RULES } from "../../core/constants.js";
+import { validateOutputContractId } from "../delegation/output-contracts.js";
 import { normalizeAdaptiveDelegationPolicy, validateAdaptiveDelegationPolicy } from "../orchestration/adaptive-delegation.js";
-import { validateToolList } from "../safety.js";
-import type { FactoryAdaptiveDispatchGate, FactoryAdaptiveDispatchGateInput, FactoryDefinition, FactoryExecutionMode, FactoryInputManifest, FactoryManifestItem, FactoryOracleReview, FactoryRunInput, FactoryStage } from "../types.js";
-import { sha256 } from "../utils/hashing.js";
-import { parseJsonFile } from "../utils/json.js";
-import { isSafeArtifactName, pathMatches, resolveRepoPath, safeFileStem } from "../utils/paths.js";
-import { isRecord } from "../utils/records.js";
-import { readableZobResourcePath } from "../utils/resources.js";
+import { validateToolList } from "../governance/safety.js";
+import type { FactoryAdaptiveDispatchGate, FactoryAdaptiveDispatchGateInput, FactoryDefinition, FactoryExecutionMode, FactoryInputManifest, FactoryManifestItem, FactoryOracleReview, FactoryRunInput, FactoryStage } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { parseJsonFile } from "../../core/utils/json.js";
+import { isSafeArtifactName, pathMatches, resolveRepoPath, safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
+import { readableZobResourcePath } from "../../core/utils/resources.js";
 
 function isFactoryManifestItem(value: unknown): value is FactoryManifestItem {
   return isRecord(value) && typeof value.id === "string" && typeof value.path === "string";

package/.pi/extensions/zob-harness/src/domains/git/AGENTS.md

@@ -0,0 +1,20 @@
+# Git domain guardrail
+
+## Scope
+
+- Governed zcommit/git policy helpers and child dirty-path tracking.
+
+## MUST DO
+
+- Preserve `/zcommit` governance, explicit user-request requirement, no direct global staging, owned-path tracking, and policy smoke expectations.
+
+## MUST NOT
+
+- Do not introduce direct `git commit`, `git push`, `git tag`, force push, `git add .`, or `git add -A` behavior.
+- Do not import from `index.ts` or `index.js`.
+
+## Validation
+
+- `npm run check -- --pretty false`.
+- `npm run smoke:git-ops` after git helper moves.
+- `npm run smoke:harness` if runtime-facing behavior moves.

package/.pi/extensions/zob-harness/src/{git-ops.ts → domains/git/git-ops.ts}

@@ -3,7 +3,7 @@ import { relative, resolve } from "node:path";
 import { createHash } from "node:crypto";
 import { execFileSync } from "node:child_process";
 
-import { pathMatches } from "./utils/paths.js";
+import { pathMatches } from "../../core/utils/paths.js";
 
 export type ZcommitToggleState = "on" | "off";
 
@@ -665,13 +665,13 @@ export function formatZcommitPlan(plan: ZcommitPlan): string {
 }
 
 function cachedNames(repoRoot: string): string[] {
-  const stdout = runGit(repoRoot, ["diff", "--cached", "--name-only", "-z"]);
+  const stdout = runGit(repoRoot, ["diff", "--cached", "--no-renames", "--name-only", "-z"]);
   return stdout.split("\0").filter(Boolean).sort();
 }
 
 function cachedPatch(repoRoot: string, paths: string[]): string {
   if (paths.length === 0) return "";
-  return runGit(repoRoot, ["diff", "--cached", "--binary", "--", ...paths]);
+  return runGit(repoRoot, ["diff", "--cached", "--no-renames", "--binary", "--", ...paths]);
 }
 
 function restoreCachedPaths(repoRoot: string, paths: string[], preAddPatch: string): void {

package/.pi/extensions/zob-harness/src/domains/goal/AGENTS.md

@@ -0,0 +1,22 @@
+# Goal domain guardrail
+
+## Scope
+
+- Goal parsing, runtime goal state, goal TODO graph, TODO imports, and goal-room reducer logic.
+
+## MUST DO
+
+- Preserve parent-owned TODO claim semantics, oracle/no_ship gates, TODO statuses, action names, diagnostics, and evidence refs.
+- Preserve runtime goal statuses, activation mode defaults, continuation semantics, and branch restore behavior.
+- Keep public exports reachable from `index.ts`.
+
+## MUST NOT
+
+- Do not accept delegated claims without parent-owned evidence/oracle gates.
+- Do not bypass goal completion proposal or oracle requirements.
+- Do not import from `index.ts` or `index.js`.
+
+## Validation
+
+- `npm run check -- --pretty false`.
+- `npm run smoke:harness` after TODO or runtime-goal moves.

package/.pi/extensions/zob-harness/src/{goal-room.ts → domains/goal/goal-room.ts}

@@ -1,13 +1,13 @@
 import { appendFileSync, mkdirSync } from "node:fs";
 import { join } from "node:path";
 
-import { DEFAULT_RULES } from "./constants.js";
-import type { TeamDefinition } from "./types.js";
-import { sha256 } from "./utils/hashing.js";
-import { readJsonl } from "./utils/json.js";
-import { pathMatches } from "./utils/paths.js";
-import { newRunId, resolveRepoPath, safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { DEFAULT_RULES } from "../../core/constants.js";
+import type { TeamDefinition } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { readJsonl } from "../../core/utils/json.js";
+import { pathMatches } from "../../core/utils/paths.js";
+import { newRunId, resolveRepoPath, safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export type GoalRoomMessageKind = "QUESTION" | "ANSWER" | "FINDING" | "ACTION_TAKEN" | "ARTIFACT_READY" | "TODO_CLAIM" | "BLOCKER" | "RISK" | "NO_SHIP_ALERT" | "CONTEXT_REQUEST" | "SPLIT_REQUEST" | "DELEGATION_REQUEST" | "ORACLE_REQUEST" | "OWNER_CHANGE_REQUEST" | "OWNER_CHANGE_DECISION" | "HANDOFF" | "DECISION" | "STATUS_UPDATE";
 export type GoalRoomAudience = "all" | "parent" | "lead" | "oracle" | "worker";

package/.pi/extensions/zob-harness/src/{goal-todo-imports.ts → domains/goal/goal-todo-imports.ts}

@@ -3,7 +3,7 @@ import { join } from "node:path";
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 
 import { addGoalTodo, completeGoalTodo, type GoalTodoNode, type GoalTodoOwner } from "./goal-todos.js";
-import type { HarnessRuntimeState } from "./runtime/state.js";
+import type { HarnessRuntimeState } from "../../runtime/state.js";
 
 export interface GoalTodoImportResult {
   kind: "factory" | "orchestration" | "chain";

package/.pi/extensions/zob-harness/src/{goal-todo-types.ts → domains/goal/goal-todo-types.ts}

@@ -1,4 +1,4 @@
-import type { ZcommitChildChangedPathRef } from "./git-ops.js";
+import type { ZcommitChildChangedPathRef } from "../git/git-ops.js";
 
 export type GoalTodoStatus = "planned" | "ready" | "in_progress" | "delegated" | "claim_returned" | "needs_review" | "needs_oracle" | "needs_user" | "blocked" | "done" | "skipped";
 export type GoalTodoOwner = "agent" | "user" | "oracle" | "subagent" | "factory" | "orchestration";

package/.pi/extensions/zob-harness/src/{goal-todos.ts → domains/goal/goal-todos.ts}

@@ -1,7 +1,7 @@
 import { randomUUID } from "node:crypto";
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 
-import type { HarnessRuntimeState } from "./runtime/state.js";
+import type { HarnessRuntimeState } from "../../runtime/state.js";
 import type {
   AddGoalTodoInput,
   GoalRoomTodoReducerDecision,
@@ -32,9 +32,9 @@ import type {
   TodoClaimValidationResult,
   TodoSplitRequest,
 } from "./goal-todo-types.js";
-import { recordZcommitOwnedPaths, type ZcommitChildChangedPathRef } from "./git-ops.js";
-import { sha256 } from "./utils/hashing.js";
-import { isRecord } from "./utils/records.js";
+import { recordZcommitOwnedPaths, type ZcommitChildChangedPathRef } from "../git/git-ops.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export const ZOB_GOAL_TODO_ENTRY_TYPE = "zob-goal-todo";
 

package/.pi/extensions/zob-harness/src/{goal.ts → domains/goal/goal.ts}

@@ -1,4 +1,4 @@
-import type { BillableJobIntake, BudgetSidecar, GoalState } from "./types.js";
+import type { BillableJobIntake, BudgetSidecar, GoalState } from "../../types.js";
 
 export type StrictGoalSpecAnchorKind = "active_goal" | "orchestrate_run" | "factory_run" | "delegate_write" | "quarantine";
 

package/.pi/extensions/zob-harness/src/domains/governance/AGENTS.md

@@ -0,0 +1,21 @@
+# Governance domain guardrail
+
+## Scope
+
+- Safety policy, rules, budget gates, sandbox metadata, workspace claims, worker pools, and merge queue records.
+
+## MUST DO
+
+- Preserve path policy, secret protection, no destructive behavior, parent-owned merge/apply semantics, and hash-only metadata.
+- Keep sandbox/apply helpers proposal-only unless the original gated path explicitly required approval.
+
+## MUST NOT
+
+- Do not introduce auto-apply, direct git commit/push, hidden worker chat, or raw body persistence.
+- Do not weaken allowed_paths/forbidden_paths validation.
+- Do not import from `index.ts` or `index.js`.
+
+## Validation
+
+- `npm run check -- --pretty false`.
+- `npm run smoke:harness` after safety, sandbox, workspace, worker-pool, or merge-queue moves.

package/.pi/extensions/zob-harness/src/{budget-policy.ts → domains/governance/budget-policy.ts}

@@ -1,12 +1,12 @@
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
-import { evaluateBudgetPreflightDryRun } from "./chronicle.js";
-import type { BudgetPreflightDryRunCaps, FactoryRunBudgetInput } from "./types.js";
-import { sha256 } from "./utils/hashing.js";
-import { parseJsonFile } from "./utils/json.js";
-import { safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { evaluateBudgetPreflightDryRun } from "../telemetry/chronicle.js";
+import type { BudgetPreflightDryRunCaps, FactoryRunBudgetInput } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { parseJsonFile } from "../../core/utils/json.js";
+import { safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 const FORBIDDEN_BUDGET_BODY_KEYS = new Set(["task", "prompt", "output", "body", "content"]);
 const REQUIRED_CAP_KEYS: Array<keyof BudgetPreflightDryRunCaps> = ["maxCostUsd", "maxRuns", "maxDurationMs", "maxParallelChildren"];

package/.pi/extensions/zob-harness/src/{governed-requests.ts → domains/governance/governed-requests.ts}

@@ -1,10 +1,10 @@
-import { DEFAULT_RULES } from "./constants.js";
-import { appendGoalRoomMessage } from "./goal-room.js";
-import type { TeamDefinition } from "./types.js";
-import { sha256 } from "./utils/hashing.js";
-import { pathMatches } from "./utils/paths.js";
-import { resolveRepoPath, safeFileStem } from "./utils/paths.js";
-import { isRecord } from "./utils/records.js";
+import { DEFAULT_RULES } from "../../core/constants.js";
+import { appendGoalRoomMessage } from "../goal/goal-room.js";
+import type { TeamDefinition } from "../../types.js";
+import { sha256 } from "../../core/utils/hashing.js";
+import { pathMatches } from "../../core/utils/paths.js";
+import { resolveRepoPath, safeFileStem } from "../../core/utils/paths.js";
+import { isRecord } from "../../core/utils/records.js";
 
 export type GovernedRequestKind = "DELEGATION_REQUEST" | "ORACLE_REQUEST" | "CONTEXT_REQUEST" | "OWNER_CHANGE_REQUEST";
 export type GovernedRequestPriority = "low" | "normal" | "high" | "critical";