autosk userspace sandbox library: worktreeSandbox() / dockerSandbox() an agent wraps its harness with, plus sandboxCleanupStep().

feature-dev (dev → review → docs → validator → accept) wired to @autosk/pi-agent roles and an @autosk/sandbox worktree + cleanup step.

autosk extension that drives `pi --mode rpc` as an agent (model/thinking/first_message, kickback loop, autosk_transit pi-tool bridge).

feature-dev-cc (dev → review → docs → validator → accept) wired to @autosk/claude-agent roles and an @autosk/sandbox worktree + cleanup step — use your Claude Code

autosk extension that drives Claude Code (`claude -p` headless stream-json) as an agent (kickback loop, an autosk MCP server for transit/task/comment).

Single-step workflow: merge the autosk-managed branch `autosk/<task-id>` into the project's CURRENT branch (non-isolated, fast-forward when possible).

Public extension-facing types for autoskd v2: Task / Session / Workflow / Agent / Isolation / AutoskAPI, pi-format transcript entries, and proto-v2 wire types.

pi extension exposing the autosk management tools (autosk_task / autosk_comment) for AI agents driving the autosk daemon.

autosk isolation provider: run agents inside a per-task Docker container with git worktree

Autosk agent backed by Codex CLI headless mode (codex exec --json).

pi extension that exposes the autosk management tools (task / comment / step) for AI agents.

feature-dev-docker — the @autosk/feature-dev (pi) cycle with every agent step running in a per-task dockerSandbox (ghcr.io/wierdbytes/pi-runtime), authenticated with the host ~/.pi.

Hybrid Claude+Codex TDD workflow for autosk: spec -> architect -> tester -> test-review (pair) -> dev -> review (pair) -> security -> finalizer -> accept -> cleanup.

Shipped autoskd v2 isolation provider: per-task git worktree isolation (worktreeIsolation()) attachable to any workflow.

Bare-minimum autosk agent: no overrides, pi runs with its user defaults.

gh-review — review a GitHub issue or PR (URL in the task title) with a pi agent in a per-task dockerSandbox and a READ-ONLY gh; review → accept (human) → cleanup → done.