Fix Pi Captain intake delivery

Author: kimikon

.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
     {
       "name": "kimiflow",
       "description": "Active-session feature, bug-fix & release loop for Claude Code with full/grill/plan/build/quick/review/audit/fix/release modes, compact intent clarification, adaptive discovery, autonomous verified local commits, audited project release profiles, code-review ensembles, project intelligence, repo docs, local findings, memory, Obsidian, and Vault support. Replies in your language.",
-      "version": "0.2.39",
+      "version": "0.2.40",
       "author": {
         "name": "kimikon"
       },

.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "kimiflow",
   "description": "Active-session feature, bug-fix & release loop for Claude Code with full/grill/plan/build/quick/review/audit/fix/release modes, compact intent clarification, adaptive discovery, autonomous verified local commits, audited project release profiles, code-review ensembles, project intelligence, repo docs, local findings, memory, Obsidian, and Vault support. Replies in your language.",
-  "version": "0.2.39",
+  "version": "0.2.40",
   "license": "MIT",
   "author": {
     "name": "kimikon"

.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "kimiflow",
-  "version": "0.2.39",
+  "version": "0.2.40",
   "description": "Calm context-aware Kimiflow launcher and active-session feature/fix/release loop for Codex with natural mode aliases, safe workspace preflight, red/green, autonomous recovery, audited project release profiles, code-review, memory, Obsidian, and Vault gates.",
   "author": {
     "name": "kimikon",

CHANGELOG.md

@@ -6,6 +6,19 @@ Notable changes to **kimiflow**. Versions track `.claude-plugin/plugin.json`.
 
 _No unreleased changes._
 
+## 0.2.40
+
+The Pi Captain intake-delivery reliability patch.
+
+### Fixed
+
+- Pi workers now remove the exact internal Kimiflow transport envelope before forwarding a Captain reply to
+  Active Run, so an accepted final product contract writes its durable intake receipt instead of asking again.
+- Calm mode hides every reserved Kimiflow transport-envelope version while the worker rejects unsupported or
+  malformed versions explicitly, preventing internal transport text from leaking into the visible worker UI.
+- The Pi transport tests now exercise the real Python envelope generator against the real JavaScript worker
+  parser and verify the chat-to-final-contract receipt path, closing the test-double gap that missed this bug.
+
 ## 0.2.39
 
 The single-authority Pi lifecycle simplification release.

COMPATIBILITY.md

@@ -6,7 +6,7 @@ subagent contracts. If a host moves one of these primitives, parts of kimiflow c
 kimiflow concretely uses, what breaks if it changes, and a smoke checklist to run at each version bump.
 
 **Last verified against:** Claude Code **2.1.202** · Codex CLI **0.142.5** · Pi **0.83.0** · kimiflow
-**0.2.39** · 2026-08-01.
+**0.2.40** · 2026-08-01.
 
 > **0.x expectation.** These primitives are NOT a stable public contract. Treat breakage as *expected*
 > across Claude Code or Codex minor versions until a version is explicitly pinned — keep the README's

hooks/kimiflow_core/tests/test_active_run.py

@@ -219,6 +219,51 @@ def test_contract4_schema2_final_correction_does_not_confirm(self):
         self.assertEqual(receipt["action"], "confirmed")
         self.assertEqual(receipt["stage"], "final")
 
+    def test_pi_chat_prompt_records_the_final_contract_receipt(self):
+        run_rel = ".kimiflow/schema2-pi-chat"
+        run_dir = os.path.join(self.root, run_rel)
+        os.makedirs(run_dir)
+        scope = self.schema2_scope()
+        final = self.schema2_final()
+        with open(os.path.join(run_dir, "INTAKE.md"), "w", encoding="utf-8") as handle:
+            handle.write(scope)
+        scope_intake = active_run.parse_intake_document(scope, 4, 1, "de")
+        with open(os.path.join(run_dir, "INTAKE-RECEIPT-1.json"), "w", encoding="utf-8") as handle:
+            json.dump({
+                "schema_version": 2,
+                "contract": 4,
+                "round": 1,
+                "stage": "scope",
+                "action": "scope_ready",
+                "request": "INTAKE.md",
+                "request_digest": "sha256:" + hashlib.sha256(scope.encode("utf-8")).hexdigest(),
+                "contract_digest": active_run.structured_intake_digest(scope_intake),
+                "user_language": "de",
+                "channel": "chat",
+                "responded_at": "2026-07-31T12:00:00Z",
+            }, handle)
+        with open(os.path.join(run_dir, "INTAKE-2.md"), "w", encoding="utf-8") as handle:
+            handle.write(final)
+        active = self.schema2_active(run_rel, 2, final)
+        active["host"] = "pi"
+        active["owner"] = {"host": "pi", "session_id": "pi-worker-00000001"}
+        active_run.write_active(self.root, active)
+
+        payload = json.dumps({
+            "cwd": self.root,
+            "session_id": "pi-worker-00000001",
+            "prompt": "Vertrag bestätigen",
+        })
+        with mock.patch.dict(os.environ, {"KIMIFLOW_HOST": "pi"}):
+            rc, _ = run_main(["prompt-context"], stdin_text=payload)
+
+        self.assertEqual(rc, 0)
+        self.assertFalse(active_run.load_active(self.root).get("awaiting_user", False))
+        with open(os.path.join(run_dir, "INTAKE-RECEIPT-2.json"), encoding="utf-8") as handle:
+            receipt = json.load(handle)
+        self.assertEqual(receipt["action"], "confirmed")
+        self.assertEqual(receipt["channel"], "chat")
+
     def test_contract4_schema2_rejects_language_drift(self):
         run_rel = ".kimiflow/schema2-language"
         run_dir = os.path.join(self.root, run_rel)

hooks/test-pi-kimiflow-e2e.sh

@@ -125,10 +125,12 @@ env.update({
     "KIMIFLOW_SESSION_HOST": "pi",
     "KIMIFLOW_SESSION_ID": session,
 })
+prefix = "\u2063kimiflow:transport-v1\n"
+header = "Authoritative Kimiflow workflow_context:"
 delimiter = "\n\nTransport request:\n"
-if delimiter not in args[-1]:
+if not args[-1].startswith(prefix + header) or delimiter not in args[-1]:
     raise RuntimeError("Kimiflow transport wrapper is missing")
-transport_prompt = args[-1].split(delimiter, 1)[1]
+transport_prompt = args[-1][len(prefix):].split(delimiter, 1)[1]
 
 try:
     if "--prompt" in args or "--extension" not in args or "--no-extensions" not in args:

hosts/pi/extensions/calm.js

@@ -8,7 +8,7 @@ import {
   getKeybindings,
 } from "@earendil-works/pi-tui";
 
-const TRANSPORT_PREFIX = "\u2063kimiflow:transport-v1\n";
+const TRANSPORT_PREFIX_FAMILY = "\u2063kimiflow:transport-";
 const ASSISTANT_PATCH = Symbol.for("kimiflow:calm-assistant-layout:pi-0.83");
 const USER_PATCH = Symbol.for("kimiflow:calm-user-layout:pi-0.83");
 const TOOL_PATCH = Symbol.for("kimiflow:calm-operational-tools:pi-0.83");
@@ -60,7 +60,7 @@ function installOperationalToolLayout() {
 }
 
 export function operationalInput(text) {
-  return typeof text === "string" && text.startsWith(TRANSPORT_PREFIX);
+  return typeof text === "string" && text.startsWith(TRANSPORT_PREFIX_FAMILY);
 }
 
 function textOnly(content) {

hosts/pi/extensions/worker.js

@@ -29,6 +29,10 @@ import { TextDecoder } from "node:util";
 const IDENTITY = /^[A-Za-z0-9][A-Za-z0-9._:-]{7,127}$/;
 const WORKER = /^[A-Za-z0-9][A-Za-z0-9._-]{7,63}$/;
 const RUN = /^\.kimiflow\/(?!session(?:\/|$))(?!.*\/\.\.(?:\/|$))[A-Za-z0-9][A-Za-z0-9._/-]{0,254}$/;
+const TRANSPORT_PREFIX = "\u2063kimiflow:transport-v1\n";
+const TRANSPORT_PREFIX_FAMILY = "\u2063kimiflow:transport-";
+const WORKFLOW_CONTEXT_HEADER = "Authoritative Kimiflow workflow_context:";
+const TRANSPORT_REQUEST_DELIMITER = "\n\nTransport request:\n";
 const INTENT_DIGEST = /^sha256:[0-9a-f]{64}$/;
 const BRIDGE_ENV = "KIMIFLOW_PI_BRIDGE_BINDING";
 const ACTIVE_RUN_ENV = "KIMIFLOW_PI_ACTIVE_RUN";
@@ -1173,14 +1177,18 @@ export function forwardPromptContext(
       ?? context?.sessionId,
     "worker_session",
   );
-  const wrapper = "Authoritative Kimiflow workflow_context:";
-  const delimiter = "\n\nTransport request:\n";
   let prompt = event?.prompt;
-  if (typeof prompt === "string" && prompt.startsWith(wrapper)) {
-    const boundary = prompt.indexOf(delimiter);
-    if (boundary >= 0) {
-      prompt = prompt.slice(boundary + delimiter.length);
+  if (typeof prompt === "string" && prompt.startsWith(TRANSPORT_PREFIX_FAMILY)) {
+    if (!prompt.startsWith(TRANSPORT_PREFIX)) {
+      throw new Error("prompt_context_transport_unsupported");
     }
+    prompt = prompt.slice(TRANSPORT_PREFIX.length);
+    if (!prompt.startsWith(WORKFLOW_CONTEXT_HEADER)) {
+      throw new Error("prompt_context_transport_invalid");
+    }
+    const boundary = prompt.indexOf(TRANSPORT_REQUEST_DELIMITER);
+    if (boundary < 0) throw new Error("prompt_context_transport_invalid");
+    prompt = prompt.slice(boundary + TRANSPORT_REQUEST_DELIMITER.length);
   }
   if (typeof prompt !== "string" || Buffer.byteLength(prompt, "utf8") > MAX_TASK_BYTES) {
     throw new Error("prompt_context_invalid");

hosts/pi/tests/calm.test.mjs

@@ -91,6 +91,10 @@ assert.equal(
   operationalInput("\\u2063kimiflow:transport-v1\\nrequest"),
   true,
 );
+assert.equal(
+  operationalInput("\\u2063kimiflow:transport-v2\\nrequest"),
+  true,
+);
 assert.equal(operationalInput("kimiflow:transport-v1\\nrequest"), false);
 
 const tools = [];