@bastani/atomic 0.9.57 → 0.9.58-alpha.1

package/CHANGELOG.md

@@ -2,6 +2,58 @@
 
 ## [Unreleased]
 
+## [0.9.58] - 2026-11-01
+
+Task heartbeats, stage chats that work on local workers, and a local worker pool that holds up under load.
+
+- **Task heartbeats:** a background shell or subagent that keeps running now reports to its chat every 15 minutes, so the model catches stuck or runaway tasks without you stepping in. Change the cadence per call with `heartbeatMs` or for every task with the `tasks.heartbeatMs` setting, and see each task's cadence in `/tasks` ([#4141](https://github.com/bastani-inc/atomic/pull/4141))
+- **Stage chats on local workers:** a stage whose session has not started reads as queued instead of running, and opens once it has. Its chat completes `/skill:` commands, runs `/compact` and `!` commands, and `/tasks` lists, opens and stops the stage's agents and shells, as in an in-process stage chat ([#4137](https://github.com/bastani-inc/atomic/pull/4137), [#4139](https://github.com/bastani-inc/atomic/pull/4139), [#4140](https://github.com/bastani-inc/atomic/pull/4140))
+- **A local worker pool that holds up under load:** reloading workflows or starting other runs no longer fails a running root's children with `Stale lease for run <id>`, a busy machine no longer fails stages on delivery or lease errors, `/workflow pause` pauses a root's stages even while its own steps run, and an overloaded machine starts stages one at a time, tunable with `workflows.localWorkers.maxLoadPerCpu` ([#4138](https://github.com/bastani-inc/atomic/pull/4138), [#4145](https://github.com/bastani-inc/atomic/pull/4145), [#4146](https://github.com/bastani-inc/atomic/pull/4146))
+- **Resuming pooled runs:** a root that runs children on local workers resumes from a new process, including one paused or failed by 0.9.57, and runs again the children that failed on a pool fault instead of replaying the failure ([#4146](https://github.com/bastani-inc/atomic/pull/4146))
+- **Stopped tasks finish:** a shell stopped with `kill`, from `/tasks` or with Esc no longer stays "stopping" in the Tasks indicator forever; it ends as failed with the resource that could not be cleaned up ([#4142](https://github.com/bastani-inc/atomic/pull/4142))
+- **Quieter PDF fetches:** pdf.js font warnings such as `Warning: TT: undefined function: 32` no longer print over the terminal UI when a PDF is fetched ([#4136](https://github.com/bastani-inc/atomic/pull/4136))
+
+### Added
+
+- `createSessionSkillAutocompleteProvider` also completes from a `SessionCommandCatalog`, the plain-data skill command list of a session that runs in another process (captured there with `getSessionCommandCatalog`), and shows a pending catalog's loading notice instead of an unavailable warning.
+- `TaskInspector` and `ChatSessionHost` read tasks through a `TaskViewSource` (`ownerTaskViewSource(store)` for a session's own task store), so a host can show `/tasks` for a session that runs in another process through the new `getTaskSource` option.
+- Added task heartbeats: a background shell or subagent that keeps running sends its chat a periodic `♥ Task heartbeat` notice, every 15 minutes by default like workflow heartbeats, so the model can catch runaway shells, stale subagents and hung tool calls without you stepping in. Each notice gives the task's elapsed time and when it last produced output or activity, a shell's last output lines, and a subagent's current tool call and turn, tool-call and token counts, then asks the model to let a progressing task run or to inspect, steer or stop one that is stuck, never relaunching a duplicate. Only running tasks heartbeat; tasks due together share one notice, a chat never has more than one unread heartbeat, and missed intervals are not replayed. Set `heartbeatMs` on a `bash` or `powershell` call (or `subagent`) to change one task's cadence, `0` to turn it off, or `tasks.heartbeatMs` in settings to change the default; `/tasks` shows each running task's cadence. Workflow stages on local workers heartbeat into their own stage chat the same way. See [Task heartbeats](https://github.com/bastani-inc/atomic/blob/main/packages/coding-agent/docs/background-tasks.md#task-heartbeats).
+
+### Fixed
+
+- Workflow roots that run children on local workers (`workflows.localWorkers`) keep their children running when the session is busy. Reloading workflows and starting other runs in the same session could delay the root's lease renewal past the pool's 90-second window, after which every running child, and every child started later, failed with `Stale lease for run <id>` while the root kept running. The pool now waits for the late renewal, each run renews its lease independently, and a renewal that briefly fails is retried. Roots that never run a pooled `ctx.workflow` child no longer start an idle pool coordinator process. ([#4138](https://github.com/bastani-inc/atomic/pull/4138))
+- A stopped shell no longer stays **stopping** in the Tasks indicator below the prompt forever (for example `Tasks  3 local agents running · 3 stopping · /tasks`). When a shell stopped with `kill`, from `/tasks`, by Esc on a foreground command, or by its timeout left a process outside its process group holding its output open (a daemon or a `setsid` or detached child), Atomic killed the command's process group but could not confirm cleanup, and the task never reached a final state. It now ends within a few seconds as failed with `CleanupUnconfirmed: Stop requested (<cause>); cleanup unconfirmed: <resource>`, and the indicator counts only tasks that are still stopping. A stopped subagent whose cleanup fails also ends instead of staying stopping. ([#4142](https://github.com/bastani-inc/atomic/pull/4142))
+- Workflow stages on local workers (`workflows.localWorkers`) survive a heavily loaded machine. A slow startup delivery of queued Intercom messages no longer fails stages with `Worker exited before delivery acknowledgement`, a work lease that ran out only because renewals were processed late no longer fails or replays children (`Stale work lease`, `Stale resource admission attempt`), and a pool fault that reaches a running child replays it instead of failing its stage. Stages that do fail on a pool fault are recorded with that fault as a recoverable failure, and resume runs them again. ([#4145](https://github.com/bastani-inc/atomic/pull/4145))
+- `/workflow pause` pauses a root's stages on local workers even while the root's own steps run, instead of reporting `No active stages to pause`, and pause or resume no longer fails with `Worker control acknowledgement unresolved` on a busy machine; the result says how many stages have not confirmed the pause yet. ([#4145](https://github.com/bastani-inc/atomic/pull/4145))
+- Resuming a workflow root that runs children on local workers, including one paused or failed by 0.9.57, runs again the children an earlier process failed on a fault of the pool itself instead of replaying their failure, and a paused root with durable progress says it can be resumed from a new process. ([#4146](https://github.com/bastani-inc/atomic/pull/4146))
+- On an overloaded machine, stages of workflow children on local workers start one at a time, at most one every 5 seconds, instead of all at once while earlier ones are still starting. Tune or turn off with `workflows.localWorkers.maxLoadPerCpu` (default `3`, `0` off). ([#4146](https://github.com/bastani-inc/atomic/pull/4146))
+
+## [0.9.58-alpha.1] - 2026-11-01
+
+Task heartbeats, stage chats that work on local workers, and a local worker pool that holds up under load.
+
+- **Task heartbeats:** a background shell or subagent that keeps running now reports to its chat every 15 minutes, so the model catches stuck or runaway tasks without you stepping in. Change the cadence per call with `heartbeatMs` or for every task with the `tasks.heartbeatMs` setting, and see each task's cadence in `/tasks` ([#4141](https://github.com/bastani-inc/atomic/pull/4141))
+- **Stage chats on local workers:** a stage whose session has not started reads as queued instead of running, and opens once it has. Its chat completes `/skill:` commands, runs `/compact` and `!` commands, and `/tasks` lists, opens and stops the stage's agents and shells, as in an in-process stage chat ([#4137](https://github.com/bastani-inc/atomic/pull/4137), [#4139](https://github.com/bastani-inc/atomic/pull/4139), [#4140](https://github.com/bastani-inc/atomic/pull/4140))
+- **A local worker pool that holds up under load:** reloading workflows or starting other runs no longer fails a running root's children with `Stale lease for run <id>`, a busy machine no longer fails stages on delivery or lease errors, `/workflow pause` pauses a root's stages even while its own steps run, and an overloaded machine starts stages one at a time, tunable with `workflows.localWorkers.maxLoadPerCpu` ([#4138](https://github.com/bastani-inc/atomic/pull/4138), [#4145](https://github.com/bastani-inc/atomic/pull/4145), [#4146](https://github.com/bastani-inc/atomic/pull/4146))
+- **Resuming pooled runs:** a root that runs children on local workers resumes from a new process, including one paused or failed by 0.9.57, and runs again the children that failed on a pool fault instead of replaying the failure ([#4146](https://github.com/bastani-inc/atomic/pull/4146))
+- **Stopped tasks finish:** a shell stopped with `kill`, from `/tasks` or with Esc no longer stays "stopping" in the Tasks indicator forever; it ends as failed with the resource that could not be cleaned up ([#4142](https://github.com/bastani-inc/atomic/pull/4142))
+- **Quieter PDF fetches:** pdf.js font warnings such as `Warning: TT: undefined function: 32` no longer print over the terminal UI when a PDF is fetched ([#4136](https://github.com/bastani-inc/atomic/pull/4136))
+
+### Added
+
+- `createSessionSkillAutocompleteProvider` also completes from a `SessionCommandCatalog`, the plain-data skill command list of a session that runs in another process (captured there with `getSessionCommandCatalog`), and shows a pending catalog's loading notice instead of an unavailable warning.
+- `TaskInspector` and `ChatSessionHost` read tasks through a `TaskViewSource` (`ownerTaskViewSource(store)` for a session's own task store), so a host can show `/tasks` for a session that runs in another process through the new `getTaskSource` option.
+- Added task heartbeats: a background shell or subagent that keeps running sends its chat a periodic `♥ Task heartbeat` notice, every 15 minutes by default like workflow heartbeats, so the model can catch runaway shells, stale subagents and hung tool calls without you stepping in. Each notice gives the task's elapsed time and when it last produced output or activity, a shell's last output lines, and a subagent's current tool call and turn, tool-call and token counts, then asks the model to let a progressing task run or to inspect, steer or stop one that is stuck, never relaunching a duplicate. Only running tasks heartbeat; tasks due together share one notice, a chat never has more than one unread heartbeat, and missed intervals are not replayed. Set `heartbeatMs` on a `bash` or `powershell` call (or `subagent`) to change one task's cadence, `0` to turn it off, or `tasks.heartbeatMs` in settings to change the default; `/tasks` shows each running task's cadence. Workflow stages on local workers heartbeat into their own stage chat the same way. See [Task heartbeats](https://github.com/bastani-inc/atomic/blob/main/packages/coding-agent/docs/background-tasks.md#task-heartbeats).
+
+### Fixed
+
+- Workflow roots that run children on local workers (`workflows.localWorkers`) keep their children running when the session is busy. Reloading workflows and starting other runs in the same session could delay the root's lease renewal past the pool's 90-second window, after which every running child, and every child started later, failed with `Stale lease for run <id>` while the root kept running. The pool now waits for the late renewal, each run renews its lease independently, and a renewal that briefly fails is retried. Roots that never run a pooled `ctx.workflow` child no longer start an idle pool coordinator process. ([#4138](https://github.com/bastani-inc/atomic/pull/4138))
+- A stopped shell no longer stays **stopping** in the Tasks indicator below the prompt forever (for example `Tasks  3 local agents running · 3 stopping · /tasks`). When a shell stopped with `kill`, from `/tasks`, by Esc on a foreground command, or by its timeout left a process outside its process group holding its output open (a daemon or a `setsid` or detached child), Atomic killed the command's process group but could not confirm cleanup, and the task never reached a final state. It now ends within a few seconds as failed with `CleanupUnconfirmed: Stop requested (<cause>); cleanup unconfirmed: <resource>`, and the indicator counts only tasks that are still stopping. A stopped subagent whose cleanup fails also ends instead of staying stopping. ([#4142](https://github.com/bastani-inc/atomic/pull/4142))
+- Workflow stages on local workers (`workflows.localWorkers`) survive a heavily loaded machine. A slow startup delivery of queued Intercom messages no longer fails stages with `Worker exited before delivery acknowledgement`, a work lease that ran out only because renewals were processed late no longer fails or replays children (`Stale work lease`, `Stale resource admission attempt`), and a pool fault that reaches a running child replays it instead of failing its stage. Stages that do fail on a pool fault are recorded with that fault as a recoverable failure, and resume runs them again. ([#4145](https://github.com/bastani-inc/atomic/pull/4145))
+- `/workflow pause` pauses a root's stages on local workers even while the root's own steps run, instead of reporting `No active stages to pause`, and pause or resume no longer fails with `Worker control acknowledgement unresolved` on a busy machine; the result says how many stages have not confirmed the pause yet. ([#4145](https://github.com/bastani-inc/atomic/pull/4145))
+- Resuming a workflow root that runs children on local workers, including one paused or failed by 0.9.57, runs again the children an earlier process failed on a fault of the pool itself instead of replaying their failure, and a paused root with durable progress says it can be resumed from a new process. ([#4146](https://github.com/bastani-inc/atomic/pull/4146))
+- On an overloaded machine, stages of workflow children on local workers start one at a time, at most one every 5 seconds, instead of all at once while earlier ones are still starting. Tune or turn off with `workflows.localWorkers.maxLoadPerCpu` (default `3`, `0` off). ([#4146](https://github.com/bastani-inc/atomic/pull/4146))
+
 ## [0.9.57] - 2026-10-31
 
 ### Changed

package/dist/builtin/intercom/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bastani/intercom",
-  "version": "0.9.57",
+  "version": "0.9.58-alpha.1",
   "private": true,
   "description": "Atomic extension providing a private coordination channel between parent and child agent sessions. Fork of: https://github.com/nicobailon/pi-intercom",
   "contributors": [

package/dist/builtin/mcp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bastani/mcp",
-  "version": "0.9.57",
+  "version": "0.9.58-alpha.1",
   "private": true,
   "description": "Atomic's pi-compatible MCP integration for server connections, OAuth, tools, resources, and terminal management.",
   "contributors": [

package/dist/builtin/subagents/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 ## [Unreleased]
 
+## [0.9.58] - 2026-11-01
+
+### Added
+
+- Running subagents now send the parent periodic task heartbeats (every 15 minutes by default) with their current tool call, time since their last activity, and turn, tool-call and token counts. Set `heartbeatMs` on a `subagent` call, or on a `tasks` entry, to change a child's cadence; `0` turns it off.
+
+## [0.9.58-alpha.1] - 2026-11-01
+
+### Added
+
+- Running subagents now send the parent periodic task heartbeats (every 15 minutes by default) with their current tool call, time since their last activity, and turn, tool-call and token counts. Set `heartbeatMs` on a `subagent` call, or on a `tasks` entry, to change a child's cadence; `0` turns it off.
+
 ## [0.9.57] - 2026-10-31
 
 Desktop computer use moves from Cua Driver to agent-desktop.

package/dist/builtin/subagents/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bastani/subagents",
-  "version": "0.9.57",
+  "version": "0.9.58-alpha.1",
   "private": true,
   "description": "Atomic extension for delegating tasks to subagents with parallel execution. Fork of: https://github.com/nicobailon/pi-subagents",
   "contributors": [

package/dist/builtin/subagents/src/extension/index.bundle.mjs

@@ -10820,6 +10820,7 @@ ${launch.message}` : input.task,
       },
       wait: { kind: "background" },
       runtime: input.runtime,
+      ...input.heartbeatMs === undefined ? {} : { heartbeatMs: input.heartbeatMs },
       onTerminal: launch.onTerminal,
       ...input.schedule ? { schedule: input.schedule } : {},
       ...input.outputText ? { outputText: input.outputText } : {},
@@ -10834,7 +10835,8 @@ ${launch.message}` : input.task,
     agent: input.agent,
     task: input.intentTask ?? input.task,
     cwd: input.options.cwd ?? input.cwd,
-    ...input.options.modelRoute ? { routerSelection: input.options.modelRoute.routerSelection } : {}
+    ...input.options.modelRoute ? { routerSelection: input.options.modelRoute.routerSelection } : {},
+    ...input.heartbeatMs === undefined ? {} : { heartbeatMs: input.heartbeatMs }
   }, input.operation ?? `${input.options.runId}:${input.options.index ?? 0}`, (context) => {
     dispatched = true;
     queuedChildren.delete(context.ref.taskId);
@@ -11182,6 +11184,7 @@ async function runForegroundParallelTasks(input) {
         options: runOptions,
         runtime: input.runtime,
         wait: input.wait,
+        ...(task.heartbeatMs ?? input.heartbeatMs) === undefined ? {} : { heartbeatMs: task.heartbeatMs ?? input.heartbeatMs },
         schedule,
         onTerminal: (child) => {
           terminalChild = child;
@@ -15334,6 +15337,9 @@ async function recordReportedGoneSubagentChildren(pi, outcomes) {
   }
 }
 
+// dist/builtin/subagents/src/runs/foreground/subagent-executor.ts
+import { validateTaskHeartbeatMs } from "@bastani/atomic";
+
 // dist/builtin/subagents/src/agents/agent-management.ts
 import * as fs15 from "node:fs";
 import * as path16 from "node:path";
@@ -16257,7 +16263,8 @@ function topLevelSingleTask(item) {
     ...item.params.modelConstraints !== undefined ? { modelConstraints: item.params.modelConstraints } : {},
     ...item.params.taskNeeds !== undefined ? { taskNeeds: item.params.taskNeeds } : {},
     ...item.params.skill !== undefined ? { skill: item.params.skill } : {},
-    ...item.params.group !== undefined ? { group: item.params.group } : {}
+    ...item.params.group !== undefined ? { group: item.params.group } : {},
+    ...item.params.heartbeatMs !== undefined ? { heartbeatMs: item.params.heartbeatMs } : {}
   };
 }
 function existingParallelTask(item, task) {
@@ -16266,7 +16273,8 @@ function existingParallelTask(item, task) {
     ...task,
     cwd: originatingTaskCwd(callCwd, task.cwd),
     [BURST_TASK_DISCOVERY_CWD]: callCwd,
-    ...task.group === undefined && item.params.group !== undefined ? { group: item.params.group } : {}
+    ...task.group === undefined && item.params.group !== undefined ? { group: item.params.group } : {},
+    ...task.heartbeatMs === undefined && item.params.heartbeatMs !== undefined ? { heartbeatMs: item.params.heartbeatMs } : {}
   };
 }
 function mergeBurst(items) {
@@ -16992,6 +17000,7 @@ async function runParallelPath(data, deps) {
     const detachedNotificationScope = { orchestrationContext: ctx.orchestrationContext };
     const results = await runForegroundParallelTasks({
       wait: params.wait,
+      ...params.heartbeatMs === undefined ? {} : { heartbeatMs: params.heartbeatMs },
       schedule: params[BURST_EXECUTION_SCHEDULE],
       onDetachedExit: (index, result) => {
         if (workflowStageAcceptsDetachedNotification(detachedNotificationScope)) {
@@ -17340,6 +17349,7 @@ async function runSinglePath(data, deps) {
         intentTask: handoffTaskContext,
         options: runOptions,
         wait: params.wait,
+        ...params.heartbeatMs === undefined ? {} : { heartbeatMs: params.heartbeatMs },
         schedule: params[BURST_EXECUTION_SCHEDULE],
         runtime: deps.runtime,
         recordChild: createSubagentChildRecordSink(deps.pi, ctx),
@@ -17926,6 +17936,22 @@ function inferExecutionMode(params) {
     return "parallel";
   return "single";
 }
+function invalidHeartbeatResult(params) {
+  try {
+    if (params.heartbeatMs !== undefined)
+      validateTaskHeartbeatMs(params.heartbeatMs);
+    for (const [index, task] of (params.tasks ?? []).entries())
+      if (task.heartbeatMs !== undefined)
+        validateTaskHeartbeatMs(task.heartbeatMs, `tasks[${index}].heartbeatMs`);
+    return;
+  } catch (error) {
+    return {
+      content: [{ type: "text", text: error instanceof Error ? error.message : String(error) }],
+      isError: true,
+      details: { mode: inferExecutionMode(params), results: [] }
+    };
+  }
+}
 function duplicateSubagentCallResult(params) {
   return {
     content: [
@@ -17999,7 +18025,7 @@ function createSubagentExecutor(rawDeps) {
     duplicateResult: duplicateSubagentCallResult
   });
   return {
-    execute: (id, params, signal, onUpdate, ctx) => params.action ? execute(id, params, signal, onUpdate, ctx) : executeWithBurstCollection(id, params, signal, onUpdate, ctx)
+    execute: async (id, params, signal, onUpdate, ctx) => params.action ? execute(id, params, signal, onUpdate, ctx) : invalidHeartbeatResult(params) ?? executeWithBurstCollection(id, params, signal, onUpdate, ctx)
   };
 }
 
@@ -19709,6 +19735,12 @@ var MaxOutputSchema = Type.Object({
   bytes: Type.Optional(Type.Number()),
   lines: Type.Optional(Type.Number())
 }, { additionalProperties: false });
+function heartbeatSchema(scope) {
+  return Type.Number({
+    minimum: 0,
+    description: `Heartbeat cadence in ms for ${scope} while it runs (default 15 min; 0 disables; min 60000).`
+  });
+}
 var GroupSchema = Type.Union([Type.String(), Type.Boolean()], {
   description: "Intercom group for spawned children. A named string joins that group; boolean `true` or the trimmed, case-insensitive string sentinel `true`/`auto` auto-generates one shared UUID group per parallel set. The names `true` and `auto` are reserved; use a different literal group name. Defaults to the current session/stage's group. Only applied when the child has intercom access; contact_supervisor still reaches the supervisor across groups."
 });
@@ -19727,7 +19759,8 @@ var TaskItem = Type.Object({
   modelConstraints: Type.Optional(ModelConstraintsSchema),
   taskNeeds: Type.Optional(TaskNeedsSchema),
   skill: Type.Optional(SkillOverride),
-  group: Type.Optional(GroupSchema)
+  group: Type.Optional(GroupSchema),
+  heartbeatMs: Type.Optional(heartbeatSchema("this task"))
 });
 var ControlOverrides = Type.Object({
   enabled: Type.Optional(Type.Boolean({ description: "Enable/disable subagent control attention tracking for this run" })),
@@ -19764,6 +19797,7 @@ var SubagentParams = Type.Object({
     budgetMs: Type.Optional(Type.Number({ description: "Foreground wait budget in milliseconds (kind='foreground' only)." }))
   }, { additionalProperties: false })),
   budgetMs: Type.Optional(Type.Number({ description: "Foreground wait budget in milliseconds." })),
+  heartbeatMs: Type.Optional(heartbeatSchema("each child; a task's own wins")),
   agent: Type.Optional(Type.String({ description: "Agent name (SINGLE mode) or target for management get/update/delete" })),
   task: Type.Optional(Type.String({ description: "Task (SINGLE mode, optional for self-contained agents)" })),
   action: Type.Optional(Type.String({

package/dist/builtin/web-access/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+## [0.9.58] - 2026-11-01
+
+### Fixed
+
+- PDF text extraction no longer prints pdf.js font warnings such as `Warning: TT: undefined function: 32` over the interactive terminal UI when fetching PDFs with unusual embedded fonts. Extraction errors are still reported.
+
+## [0.9.58-alpha.1] - 2026-11-01
+
+### Fixed
+
+- PDF text extraction no longer prints pdf.js font warnings such as `Warning: TT: undefined function: 32` over the interactive terminal UI when fetching PDFs with unusual embedded fonts. Extraction errors are still reported.
+
 ## [0.9.52] - 2026-10-29
 
 ### Fixed

package/dist/builtin/web-access/index.bundle.mjs

@@ -72560,7 +72560,7 @@ async function extractPDFToMarkdown(buffer, url, options = {}) {
     filename
   } = options;
   const safeMaxPages = Number.isFinite(maxPages) ? Math.max(1, Math.floor(maxPages)) : DEFAULT_MAX_PAGES;
-  const pdf = await getDocumentProxy(new Uint8Array(buffer));
+  const pdf = await getDocumentProxy(new Uint8Array(buffer), { verbosity: PDF_JS_VERBOSITY_ERRORS });
   const metadata = await pdf.getMetadata();
   const metadataInfo = metadata.info && typeof metadata.info === "object" ? metadata.info : null;
   const metaTitle = typeof metadataInfo?.Title === "string" ? metadataInfo.Title : undefined;
@@ -72650,7 +72650,7 @@ function isPDF(url, contentType) {
     return false;
   }
 }
-var DEFAULT_MAX_PAGES = 100, DEFAULT_OUTPUT_DIR;
+var DEFAULT_MAX_PAGES = 100, PDF_JS_VERBOSITY_ERRORS = 0, DEFAULT_OUTPUT_DIR;
 var init_pdf_extract = __esm(() => {
   init_dist();
   DEFAULT_OUTPUT_DIR = join4(homedir4(), "Downloads");

package/dist/builtin/web-access/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bastani/web-access",
-  "version": "0.9.57",
+  "version": "0.9.58-alpha.1",
   "private": true,
   "description": "Atomic extension for web search, URL fetching, GitHub repo cloning, PDF/video extraction. Fork of: https://github.com/nicobailon/pi-web-access",
   "contributors": [

package/dist/builtin/workflows/CHANGELOG.md

@@ -6,6 +6,48 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 
 ## [Unreleased]
 
+## [0.9.58] - 2026-11-01
+
+### Added
+
+- `workflows.localWorkers.maxLoadPerCpu` (SDK `localWorkers.maxLoadPerCpu`): while the machine's load per CPU is above it, the stages of pooled children start one at a time, at most one every 5 seconds in the order they asked, instead of all at once while earlier ones are still starting. Running stages and their subagents and tool processes are not held. Default `3`; `0` turns it off. It is not saved with the root. ([#4146](https://github.com/bastani-inc/atomic/pull/4146))
+
+### Fixed
+
+- A message sent to a stage on a local worker (`workflows.localWorkers`) while its session was still starting no longer fails the stage with "generation closed before the stage finished; its tool calls were refused" when the stage has `fallbackModels`.
+- The chat of a stage on a local worker completes `/skill:` commands with that stage's skills, as an in-process stage chat does, instead of warning "Skill discovery unavailable: this stage host does not expose its session command metadata." While the stage's session is still starting, it says its skills are loading.
+- In the chat of a stage on a local worker, `/compact` compacts that stage's session and a `!` command runs on the worker in the stage's working directory, with its output streaming into the chat and Escape stopping it even while the pool is paused, as in the chat of an in-process stage. After `/compact` the open chat shows the compacted transcript. Before, `/compact` was sent to the model as plain text and a `!` command failed with "no live agent session on this stage". `/tasks` there lists the stage's agents and shells on its worker with their live status, opens their output and transcripts, sends them input and stops them, and the chat's task footer counts them, as in the chat of an in-process stage. An agent task's reply shows while it streams, tasks can be inspected and stopped while the pool is paused, and a stop that cannot reach the worker says so. Before, `/tasks` showed an empty list.
+- A stage on a local worker reads as queued, with what it is doing (`creating session 32s`), on its graph node, in the graph header, the stage list, `/workflow status` and the `workflow` tool's stage list until its session has started, instead of reading as running. Its chat says it is starting on its local worker instead of showing a blank transcript, streams the stage as soon as the session starts, and opens the live view by itself when the worker cannot serve one yet. A message sent meanwhile waits for the session instead of failing with "The connection to stage … was lost" and "1 message not delivered".
+- A root that runs children on local workers (`workflows.localWorkers`) no longer fails all of them with `Stale lease for run <id>` when its own process renews the root's lease late. A busy session, such as one that reloads its workflows and starts several other runs with in-process agent stages, could push the root's renewal past the pool's 90-second window. The pool treated that late renewal as a lost lease: it failed every running child, and every child the root started afterwards failed at once, while the root itself kept running. The pool now waits for the renewal and its workers keep their children; only a lease that was released or taken over by another holder ends them. Each run also renews its lease on its own, so a busy or blocked run no longer delays another run's renewal, and a renewal that fails without losing the lease, such as one that meets a briefly locked database, is retried on the next heartbeat instead of giving up the run. ([#4138](https://github.com/bastani-inc/atomic/pull/4138))
+- With `workflows.localWorkers` configured, a root starts its pool's coordinator process when it runs its first pooled `ctx.workflow` child, or when it resumes a pool that already ran. A root that only runs `ctx.task` stages and `ctx.tool` steps no longer starts one, so launching such runs no longer leaves an idle coordinator process for each of them. ([#4138](https://github.com/bastani-inc/atomic/pull/4138))
+- Stages on local workers (`workflows.localWorkers`) no longer fail with `Worker exited before delivery acknowledgement` while their worker is still running. On a busy machine a stage's startup delivery of queued Intercom messages could make no progress for a minute; the root then ended the worker's delivery request while the delivery kept going, and the next message reached a closed connection, failing the stage at `preparing message delivery` with an unknown, terminal failure. The delivery now keeps its connection to the worker until it finishes, and the stage still starts after a minute without progress, as an in-process stage does. ([#4145](https://github.com/bastani-inc/atomic/pull/4145))
+- A worker whose work lease ran out only because the machine was too busy to process its renewal in time keeps its child. Its next journal write, usage report or completion is no longer refused with `Stale work lease`, which ended the child's attempt and could fail the child as `killed`; a session it starts no longer fails with `Stale resource admission attempt`, and waits for the renewal instead. Only an attempt that recovery handed to another worker is refused. ([#4145](https://github.com/bastani-inc/atomic/pull/4145))
+- A fault of the pool itself that reaches a running pooled child, such as a journal write the database refused, replays the child from its last checkpoint (up to the usual three attempts) instead of failing its stage. A stage that does fail on a pool fault is classified with that fault as its failure code (`worker_lost`, `stale_work_lease`, …), recoverable and retryable, instead of `unknown`, and resume runs it again. A child whose attempt was fenced is no longer completed with the aborted run's result. ([#4145](https://github.com/bastani-inc/atomic/pull/4145))
+- A stage on a local worker that ended keeps the worker lease it ended under: its worker's later lease renewals for the child's other stages no longer show it as renewed after it ended. ([#4145](https://github.com/bastani-inc/atomic/pull/4145))
+- `/workflow pause <run>` and the `workflow` tool's `pause` pause a root's stages on local workers even while the root's own `ctx.tool` steps or in-process stages run, instead of reporting `No active stages to pause`. Pause, `pause --all` and resume no longer fail with `Worker control acknowledgement unresolved` when workers confirm slowly on a busy machine: the pause is recorded at once, workers pause their stages as they next check in, and the result says how many stages have not confirmed yet. ([#4145](https://github.com/bastani-inc/atomic/pull/4145))
+- Resuming a root that runs children on local workers runs again the children an earlier process failed on a fault of the pool itself (a stage that lost its worker's delivery or lease on a busy machine, recorded as `Worker exited before delivery acknowledgement`, `Stale work lease` or `Stale resource admission attempt`), instead of replaying their failure. This includes runs paused or failed by 0.9.57. Pausing a root whose children have durable progress now says it can be resumed from a new process once this one exits, instead of `Resume with /workflow resume on this live process … Cross-process resume requires durable checkpoint or pending prompt progress`. ([#4146](https://github.com/bastani-inc/atomic/pull/4146))
+
+## [0.9.58-alpha.1] - 2026-11-01
+
+### Added
+
+- `workflows.localWorkers.maxLoadPerCpu` (SDK `localWorkers.maxLoadPerCpu`): while the machine's load per CPU is above it, the stages of pooled children start one at a time, at most one every 5 seconds in the order they asked, instead of all at once while earlier ones are still starting. Running stages and their subagents and tool processes are not held. Default `3`; `0` turns it off. It is not saved with the root. ([#4146](https://github.com/bastani-inc/atomic/pull/4146))
+
+### Fixed
+
+- A message sent to a stage on a local worker (`workflows.localWorkers`) while its session was still starting no longer fails the stage with "generation closed before the stage finished; its tool calls were refused" when the stage has `fallbackModels`.
+- The chat of a stage on a local worker completes `/skill:` commands with that stage's skills, as an in-process stage chat does, instead of warning "Skill discovery unavailable: this stage host does not expose its session command metadata." While the stage's session is still starting, it says its skills are loading.
+- In the chat of a stage on a local worker, `/compact` compacts that stage's session and a `!` command runs on the worker in the stage's working directory, with its output streaming into the chat and Escape stopping it even while the pool is paused, as in the chat of an in-process stage. After `/compact` the open chat shows the compacted transcript. Before, `/compact` was sent to the model as plain text and a `!` command failed with "no live agent session on this stage". `/tasks` there lists the stage's agents and shells on its worker with their live status, opens their output and transcripts, sends them input and stops them, and the chat's task footer counts them, as in the chat of an in-process stage. An agent task's reply shows while it streams, tasks can be inspected and stopped while the pool is paused, and a stop that cannot reach the worker says so. Before, `/tasks` showed an empty list.
+- A stage on a local worker reads as queued, with what it is doing (`creating session 32s`), on its graph node, in the graph header, the stage list, `/workflow status` and the `workflow` tool's stage list until its session has started, instead of reading as running. Its chat says it is starting on its local worker instead of showing a blank transcript, streams the stage as soon as the session starts, and opens the live view by itself when the worker cannot serve one yet. A message sent meanwhile waits for the session instead of failing with "The connection to stage … was lost" and "1 message not delivered".
+- A root that runs children on local workers (`workflows.localWorkers`) no longer fails all of them with `Stale lease for run <id>` when its own process renews the root's lease late. A busy session, such as one that reloads its workflows and starts several other runs with in-process agent stages, could push the root's renewal past the pool's 90-second window. The pool treated that late renewal as a lost lease: it failed every running child, and every child the root started afterwards failed at once, while the root itself kept running. The pool now waits for the renewal and its workers keep their children; only a lease that was released or taken over by another holder ends them. Each run also renews its lease on its own, so a busy or blocked run no longer delays another run's renewal, and a renewal that fails without losing the lease, such as one that meets a briefly locked database, is retried on the next heartbeat instead of giving up the run. ([#4138](https://github.com/bastani-inc/atomic/pull/4138))
+- With `workflows.localWorkers` configured, a root starts its pool's coordinator process when it runs its first pooled `ctx.workflow` child, or when it resumes a pool that already ran. A root that only runs `ctx.task` stages and `ctx.tool` steps no longer starts one, so launching such runs no longer leaves an idle coordinator process for each of them. ([#4138](https://github.com/bastani-inc/atomic/pull/4138))
+- Stages on local workers (`workflows.localWorkers`) no longer fail with `Worker exited before delivery acknowledgement` while their worker is still running. On a busy machine a stage's startup delivery of queued Intercom messages could make no progress for a minute; the root then ended the worker's delivery request while the delivery kept going, and the next message reached a closed connection, failing the stage at `preparing message delivery` with an unknown, terminal failure. The delivery now keeps its connection to the worker until it finishes, and the stage still starts after a minute without progress, as an in-process stage does. ([#4145](https://github.com/bastani-inc/atomic/pull/4145))
+- A worker whose work lease ran out only because the machine was too busy to process its renewal in time keeps its child. Its next journal write, usage report or completion is no longer refused with `Stale work lease`, which ended the child's attempt and could fail the child as `killed`; a session it starts no longer fails with `Stale resource admission attempt`, and waits for the renewal instead. Only an attempt that recovery handed to another worker is refused. ([#4145](https://github.com/bastani-inc/atomic/pull/4145))
+- A fault of the pool itself that reaches a running pooled child, such as a journal write the database refused, replays the child from its last checkpoint (up to the usual three attempts) instead of failing its stage. A stage that does fail on a pool fault is classified with that fault as its failure code (`worker_lost`, `stale_work_lease`, …), recoverable and retryable, instead of `unknown`, and resume runs it again. A child whose attempt was fenced is no longer completed with the aborted run's result. ([#4145](https://github.com/bastani-inc/atomic/pull/4145))
+- A stage on a local worker that ended keeps the worker lease it ended under: its worker's later lease renewals for the child's other stages no longer show it as renewed after it ended. ([#4145](https://github.com/bastani-inc/atomic/pull/4145))
+- `/workflow pause <run>` and the `workflow` tool's `pause` pause a root's stages on local workers even while the root's own `ctx.tool` steps or in-process stages run, instead of reporting `No active stages to pause`. Pause, `pause --all` and resume no longer fail with `Worker control acknowledgement unresolved` when workers confirm slowly on a busy machine: the pause is recorded at once, workers pause their stages as they next check in, and the result says how many stages have not confirmed yet. ([#4145](https://github.com/bastani-inc/atomic/pull/4145))
+- Resuming a root that runs children on local workers runs again the children an earlier process failed on a fault of the pool itself (a stage that lost its worker's delivery or lease on a busy machine, recorded as `Worker exited before delivery acknowledgement`, `Stale work lease` or `Stale resource admission attempt`), instead of replaying their failure. This includes runs paused or failed by 0.9.57. Pausing a root whose children have durable progress now says it can be resumed from a new process once this one exits, instead of `Resume with /workflow resume on this live process … Cross-process resume requires durable checkpoint or pending prompt progress`. ([#4146](https://github.com/bastani-inc/atomic/pull/4146))
+
 ## [0.9.57] - 2026-10-31
 
 ### Changed

package/dist/builtin/workflows/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bastani/workflows",
-  "version": "0.9.57",
+  "version": "0.9.58-alpha.1",
   "private": true,
   "description": "Atomic extension for multi-stage workflow authoring and execution.",
   "contributors": [