fix(pi): contain startup extension failures before continued work

[nullStack65]

Pi reports a failed before_agent_start hook while continuing the prompt without its system-prompt override. This explicitly adopts the original OMP03233/4a40 three-file Mac WIP at 9ba3a54 (original bytes and hashes preserved) and contains active-turn startup failures: block protected enqueue, abort Pi, terminate the owned process if abort fails, and preserve the nonretryable terminal cause through queued retry/compaction recovery. Successful session switches reset admission; ordinary diagnostics and recovery remain supported.

Normal CI initially could not assign the inherited Blacksmith runners. The CI files now use the fork’s already accepted hosted-runner/APT policy while retaining every V2 job, step, shard, permission and timeout. CI then exposed the existing ACP Registry test mismatch: the base schema exposes rootSessionReplacement as a fourth visible field, but its test expected three. The minimal test correction preserves that setting and verifies its switch defaults to off for older configs. It changes no production ACP behavior.

Validation: independent native GPT-6-Luna source and CI-policy reviews pass; independent review of the final ACP repair passes. All 65 focused Pi cases and 11 focused settings cases pass, as does web typechecking. The previous exact-head CI passed Check, all server shards (5392 passed/11 skipped), Rust, release smoke and mobile checks; its only failure was the now-corrected ACP expectation. Fresh normal CI 37713105223 on e1872d47247bfc42dbe650d475929b1188d962d5 passed every job: Check, all three server shards (5392 passed/11 skipped), Test (web unit5305 passed/0 failed), Rust, release smoke and mobile checks. Normal rebase merge landed at 8c67a99f42888f76914c8ebc19486e754095e009; the landed tree equals the tested head and the four-commit range has no merge commits. No manual CI rerun, check weakening, hook bypass, backup stash or unrelated source change occurred.

The prior fresh cloud server pack produced 23 files: 12 emitted JavaScript syntax checks and emitted CLI --help passed. OMP 18.2.4 native source and read-only Mac binary identity establish the extension-error/abort contract. This proves containment, not zero inference before abort. The existing Cursor SDK bun:sqlite build warning remains. Cloud CLI startup proof is separate from installed loading.

Source is landed on the existing fork-held V2 feature base; PR1’s architecture decision, main and upstream submission remain separate. Main release20 must not wait for this unrelated V2 WIP. Its existing candidate/install sequencing is unchanged and does not contain this adapter. Exact installed OMP acceptance needs a candidate that actually includes the source and ENV’s current identity, expected-old fences, ownership and no-backup rollback plan. No release dispatch or host mutation occurred here. Original Mac WIP remains unchanged; unknown012d/7393/53791 remain UNKNOWN without replay. PR301 remains with its existing owner.

Implementation and verification: Codex cloud Sol outcome owner, native GPT-6-Luna implementation, and a separate native GPT-6-Luna independent review. Original WIP was adopted rather than recreated.

[github-actions]

Thread transfer impact

⚠️ The latest CI run did not produce a thread transfer result for e1872d4.

This comment will update automatically after the next completed run.

[nullStack65]

CLOUD STANDARDS OMP03233/4a40 — terminal execution result and custody receipt.

{
  "result": {
    "state": "EXACT_EXTERNAL_BOUNDARY_SOURCE_VERIFIED_DELIVERY_NOT_COMPLETE",
    "scope": "OMP03233/4a40 CLOUD residual owner; original Mac WIP adopted, preserved, hashed",
    "pr": "https://github.com/nullStack65/t3code/pull/27",
    "head": "359f25b05ecfcd29763a0bbf7e1c7b0ef4d70b56",
    "source_review": "Native GPT-6-Luna writer and independent reviewer PASS; 65 focused cases; active-turn abort/termination and sticky failure containment",
    "normal_ci": {
      "run": 37679808430,
      "url": "https://github.com/nullStack65/t3code/actions/runs/37679808430",
      "head": "359f25b05ecfcd29763a0bbf7e1c7b0ef4d70b56",
      "result": "FAIL inherited ACP baseline web expectation only",
      "passed_jobs": [
        "Check",
        "Test Server 1",
        "Test Server 2",
        "Test Server 3",
        "Rust",
        "Release Smoke",
        "Mobile Native Changes",
        "Mobile Native Static Analysis"
      ],
      "failed_job": "Test",
      "server_tests": {
        "passed": 5392,
        "skipped": 11
      },
      "failure": "apps/web/src/components/settings/ProviderSettingsForm.test.ts:59; rootSessionReplacement fourth visible field at base9ba; independently reproduced; unchanged inputs"
    },
    "custody": "CUSTODY.json",
    "status": "STATUS.json",
    "architecture_boundary": "PR1 draft at9ba; current main591 has no shipped Pi driver; no main or PR1 merge",
    "release_boundary": {
      "pr20": "MERGED existing owner",
      "candidate_run": 37646685913,
      "candidate_version": "0.0.44",
      "source": "59152d9d9d8fa363f03794ac2ed608ffa36779de",
      "manifest_sha256": "63a3c393af55b6e9c67ab170c80f8e6a2b138b67398225f5791ed383b49272ac",
      "owner_evidence": "Read PR20 current comments; full native/peer/rollback acceptance blocked existing disposable macOS account and authenticated Windows/WSL route",
      "omp_in_candidate": false
    },
    "host_boundary": "ENV mutation deferred to current trusted identity, expected-old fences, ownership and no-backup rollback plan; existing disposable Mac account/Windows route absent per release20 owner evidence",
    "installed_acceptance": "NOT COMPLETE; fresh cloud emitted CLI help is only startup proof",
    "liabilities": {
      "012d": "UNKNOWN retained; no retry",
      "7393": "UNKNOWN retained; local terminal does not establish provider terminal",
      "53791": "UNKNOWN retained; no retry"
    },
    "no_replay": true,
    "paid_api_requests": 0,
    "host_mutations": 0,
    "manual_ci_reruns": 0,
    "pr301": "untouched existing owner",
    "next_conditions": [
      "Existing ACP/settings source owner resolves exact base9ba test/schema mismatch; adopt supported current base and collect normalCI without check weakening",
      "Existing V2 PR1 architecture integration brings adapter onto production path; release20 owns fresh candidate containing exact accepted OMP source",
      "ENV current trusted identity/fences and supported disposable macOS account/authenticated Windows route plus no-backup rollback plan enable actual host acceptance"
    ]
  },
  "custody_receipt": {
    "packet_sha256": "a29e841417e7dcf23073b518657ab5a1def13491fe70d8a71f30a2eae239199c",
    "handoff_sha256": "5815867ebf28bdbafbeff6e7c674dfcd904b4fa768e05b6642aaa934f29727eb",
    "registry_sha256": "fe9fb1875b8edf08d1d9ca1a397825ef286ffdf0da1cba2e8d3bd6903509fde3",
    "original_hashes": {
      "apps/server/src/orchestration-v2/Adapters/PiAdapterV2.ts": "e2e16830144c06b928bb7a369217738c7c0dcea97f661170a1977b6124aa4291",
      "apps/server/src/orchestration-v2/Adapters/PiAdapterV2.test.ts": "cc896f5e2c043e532bd7a770fdca635229c267a8044ba2b740bcce8f6420514f",
      "apps/server/src/orchestration-v2/Adapters/PiRpc.ts": "915a7311099cfc5421527d6c90111e65778cb400468bdfe5c6b367bf5f784393"
    },
    "original_mac_preserved": {
      "all_original_hashes_match": true,
      "head": "9ba3a54d83c0fc4f8317ae605bd6a6a528213396",
      "uncommitted_paths": [
        "PiAdapterV2.ts",
        "PiAdapterV2.test.ts",
        "PiRpc.ts"
      ],
      "method": "Read via original device Remote Desktop Commander; exact stdout readback; no Mac source writes"
    },
    "cloud_final_hashes": {
      "PiAdapterV2.ts": "d6dfda77dbadd3f4288c5dc4586ca5d7b8e7889f2a053f57e85db2418e1fe554",
      "PiAdapterV2.test.ts": "979c07572c0920d68a989fa09da4b62efad0f7c6c1b3e6e0456b6213d0a8ae12",
      "PiRpc.ts": "915a7311099cfc5421527d6c90111e65778cb400468bdfe5c6b367bf5f784393"
    }
  },
  "evidence_location": "Cloud workspace /workspace/work/omp-adoption; requested projectless output path not present and /codex read-only in managed cloud environment. No local output artifact claimed."
}

[nullStack65]

CLOUD OMP continuation completed the inherited ACP repair and source landing.

• Minimal test repair: the already-visible rootSessionReplacement field is now expected and asserted to be a switch defaulting to false. No production behavior change. Independent native GPT-6-Luna review PASS; focused web11/11, Pi65/65 and web typecheck PASS.
• Fresh normal CI 37713105223 SUCCESS on exact head e1872d47247bfc42dbe650d475929b1188d962d5. All9 jobs passed, including Check and the previously failing Test. Server5392 passed/11 skipped; web unit5305 passed/0 failed. Other exact-head checks success or intentional skip; no pending/failing check, review or inline finding. Existing advisory thread-transfer bot lacked a report artifact; no report/receipt was invented.
• Normal rebase merge landed PR27 into its existing feature base at 8c67a99f42888f76914c8ebc19486e754095e009, using exact-head fencing and no bypass/settings change. Postmerge tree is byte-identical to tested head;0 merge commits in the4-commit landed range. Feature push does not trigger main-only pushCI; no redundant dispatch.
• PR1 remains OPEN/DRAFT at that feature head against 3d45b3056. Its architecture is not merged. Main remains 59152d9d9d8fa363f03794ac2ed608ffa36779de. Release20 main artifact/install sequencing must not wait on this V2 work; no release/install operation changed.
• Installed OMP loading remains unaccepted: current main/release20 candidate does not contain the V2 adapter. The precise next boundary is an eligible artifact containing this accepted source, followed by ENV-owned acceptance with current trusted identity, expected-old fences, ownership and a no-backup rollback plan. Source/greenCI/branch landing do not prove installation.

Original custody receipt and previous operation results above remain intact; original Mac WIP was not touched. Unknown012d/7393/53791 remain UNKNOWN without retry/replay. No duplicate worker/watcher, paid API route, local Mac build/model, host mutation, backup, secret copy, waived gate or new human reviewer. The two finite Luna workers completed; all CI operations collected terminal. STATUS/RESULT/CUSTODY and CI evidence updated in the existing cloud workspace.