@bingjiang0611/rotom 0.1.0-alpha.0

package/extensions/third-party/node_modules/pi-subagents/src/extension/tool-description.ts

@@ -0,0 +1,197 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import type { ExtensionConfig, ToolDescriptionMode } from "../shared/types.ts";
+import { getAgentDir, getProjectConfigDir } from "../shared/utils.ts";
+
+const CUSTOM_TOOL_DESCRIPTION_FILE = "subagent-tool-description.md";
+const CUSTOM_TOOL_DESCRIPTION_MAX_BYTES = 50 * 1024;
+
+export const DEFAULT_SUBAGENT_TOOL_DESCRIPTION = `Delegate to configured subagents. For execution, omit action and use {agent, task?} for one child or workflowScript for orchestration. For multi-step or parallel work, make exactly one top-level subagent call with workflowScript and async:true; launch children only inside that script and do not make another top-level call for them. Use runs.run('key',{agent,task}) for one child, await runs.all([{key:'a',agent:'reviewer',task:'...'},{key:'b',agent:'reviewer',task:'...'}]) for ordinary parallel children, and pass completed child results via .output. Use action only for management/control. Use guide or the pi-subagents skill for advanced workflow details.`;
+
+export const SUBAGENT_TOOL_PROMPT_SNIPPET = "Delegate to subagents; orchestrate in one workflowScript call.";
+
+export const SUBAGENT_TOOL_PROMPT_GUIDELINES = [
+	"Use subagent only when delegation is needed. Before executing, call { action: \"list\" } and run only executable, non-disabled agents.",
+	"Omit action for execution. Use { agent, task? } only for one child; use workflowScript for multi-step or parallel work.",
+	"workflowScript means exactly one top-level subagent tool call with async:true. Inside it, use runs.run/runs.all to launch children; do not make another top-level subagent call for those children.",
+	"For ordinary parallel work, use await runs.all([{key,agent,task}, ...]); do not read .output from unawaited runs.run launches. Stored runs.run promises are only for advanced rolling fanout and each must later be observed with direct await, Promise.race, or Promise.all.",
+	"Keep one writer per cwd/worktree unless writers run in isolated worktrees.",
+	"Use guide or the pi-subagents skill for advanced scheduling, missions, steering, and retention.",
+];
+
+export const SUBAGENT_SAFETY_GUIDANCE = `SAFETY-CRITICAL SUBAGENT GUIDANCE:
+• Use { action: "list" } before execution and only run executable/non-disabled agents.
+• Keep execution and management separate: omit action for structured single-child or workflowScript execution; use action only for management/control.
+• Async/background runs are the normal default unless config sets asyncByDefault:false; set async:true explicitly when async behavior matters. Use async:false only when the parent must block until completion. Async mode still shows progress. Final reviews and gate checks stay async; needing a result is not a blocking reason. After an async launch, continue independent work only until its next dependency barrier; consume the result before work that depends on it. Do not sleep or poll status just to wait; use subagent_wait only when the current request must finish in this turn.
+• Ordinary child subagents are not orchestrators. Only explicitly configured fanout children may use the child-safe subagent tool, still bounded by depth/session limits.
+• Oracle/advisor consultations should use supervisor dialogue for material unknowns when available; request one-shot only when desired.
+• Keep one writer for the same cwd/worktree. Use fresh-context read-only reviewers for independent review, then have the parent synthesize and apply fixes.
+• Async runs expose asyncId/asyncDir with status.json, events.jsonl, output logs, status via { action: "status", id }, and lifecycle diagnostics via { action: "debug.run", id }. Include output paths and residual risks when reporting results.`;
+
+export const FULL_SUBAGENT_TOOL_DESCRIPTION = `Run one child with { agent, task? }; use { workflowScript } for orchestration. Omit action for execution. Use action only for management/control actions.
+
+EXECUTION:
+• Before executing, use { action: "list" } and run only executable/non-disabled configured agents.
+• SINGLE CHILD: { agent:"worker", task:"..." }. This structured form starts exactly one child through the workflow runtime. Workflow-level fields such as model, context, cwd, worktree, output, budgets, acceptance, and async remain defaults for that child. Do not combine agent/task with action or workflowScript.
+• WORKFLOW SCRIPT: { workflowScript: "return runs.run('main', {agent:'worker', task:'...'})" }. Use stable-key runs.run for one child and await runs.all([{key,agent,task}, ...]) for ordinary parallel children; do not read .output from unawaited runs.run launches. Stored runs.run promises are only for advanced rolling fanout and each must later be observed with direct await, Promise.race, or Promise.all. Ordinary JavaScript provides sequence, branching, filtering, retries, and aggregation. workflowScript is an ordinary JavaScript statement body, so use an explicit return for a useful result. Use top-level await, plain helper functions, or explicit Promise chains; nested async function, arrow, and method helpers are rejected. For task text with Markdown fences or shell blocks, build quoted lines instead of nesting raw template literals: \`const task=["Run:","\`\`\`bash","npm test","\`\`\`"].join("\\n")\`. Scripts normally start async unless config sets asyncByDefault:false; set async:true explicitly when async behavior matters. Pass async:false only when the parent must block until completion, never for final reviews or gates. Same-repo blocking workflows default to a live in-chat card; explicit live-card requires same-repository async:false, so async workflows should omit chatProgress or use auto/off. Workflow-level child controls default onto each runs.run launch, and explicit child fields override them. Use {action:"children.list"} to list recent retained workflow children with resumable/not-resumable reasons. Resume only rows reported resumable. For a simple follow-up or implementation challenge, use {action:"resume", id:"run-id", message:"..."}. Resume keeps the stored agent/model/tool contract. If no resumable child is listed, launch a same-role fallback challenge and label it as fallback. Inside workflowScript, continue one with runs.run(key, {resume:"run-id", task:"follow-up"}); workflow resumes wait for completed output, and loops must continue from each latest returned runId. Await runs.steer(key, message, {mode?, index?, ackTimeoutMs?}) to guide a prior keyed child without exposing its run id; receipts are queued, delivered, missed, or failed. Always await or return runs.steer. For repository mutation lanes, set worktree:true on the workflow or individual runs.run/runs.all item for managed isolation; each parallel child gets a separate worktree and handoff artifact. A workflow usageBudget is enforced once across the workflow. Available globals are runs.run, runs.all, runs.steer, runs.status, runs.ref/refs, emit, console, and standard JavaScript only. Workflows get async state.get(key) and state.set(key, JSONValue) through their automatic or explicit mission; mission:false workflows do not have a state global. Scripts cannot access filesystem, shell, arbitrary Pi tools, or host globals.
+• Sequential example: { workflowScript: "const a = await runs.run('analyze', {agent:'agent-a', task:'Analyze the request'}); return (await runs.run('plan', {agent:'agent-b', task:'Plan from: '+a.output})).output" }
+• Parallel example: { workflowScript: "const [a,b] = await runs.all([{key:'correctness',agent:'agent-a',task:'Review correctness'},{key:'tests',agent:'agent-b',task:'Review tests'}]); return {correctness:a.output,tests:b.output}" }
+• Optional context is "fresh" or "fork". Explicit context wins. When omitted, config defaultSubagentContext wins over agent defaultContext. timeoutMs/maxRuntimeMs apply to foreground and async workflows; foreground workflows default to 30 minutes and async workflows have no default timeout. Omit acceptance for reviewer/read-only calls; evidence levels end at verified, and acceptance.review.required requests independent writer review.
+• Durable mission attachment is automatic by default. Use missionId to attach an existing mission, mission:{...} to override auto-create, or mission:false for ephemeral work. A mission object needs exactly one non-empty title or summary; objective and labels are optional. goal may only be true and requires budget:{tokens}.
+
+MANAGEMENT / CONTROL (use action; omit execution fields):
+• list, get, models, guide, children.list, create, update, delete, eject, disable, enable, reset, status, debug.run, doctor, grant-spawn-budget, worktree.discard, refine/refine.show/refine.rollback, mission.create/list/show/update/resolve-decision/attach-run/close, inspector.open/status/close, project.open/status/close, and watchdog actions remain available. Use {action:"guide", topic:"overview"} for packaged current-version help; topics are overview, workflows, agents, missions, observability, tool-reference, configuration, models, watchdog, and extension-api.
+• status, interrupt, stop, resume, and steer manage live or persisted runs. Use status view:"fleet" for an overview or view:"transcript" with id and optional index to tail output.
+• Create durable project schedules with { action:"schedule.create", id?, name?, at:"+10m" | ISO, workflowScript:"return runs.run('main', {agent:'worker', task:'...'})" } or { every:"6h", workflowScript:"..." }. Manage them with schedule.list/show/history/pause/resume/run/run-due/delete. This first slice supports fixed intervals; calendar schedules and schedule mission attachment are deferred.
+
+${SUBAGENT_SAFETY_GUIDANCE}`;
+
+export const COMPACT_SUBAGENT_TOOL_DESCRIPTION = `Run one child with { agent, task? }; use { workflowScript } for orchestration. Omit action for execution. Use action only for management/control actions.
+
+EXECUTE:
+• Call { action:"list" } first and use only executable/non-disabled agents.
+• SINGLE {agent:"worker",task:"..."} starts exactly one child through the workflow runtime. Workflow-level fields remain child defaults. Do not combine agent/task with action or workflowScript.
+• SCRIPT {workflowScript:"return runs.run('main', {agent:'worker', task:'...'})"}. Use stable-key runs.run for one child and await runs.all([{key,agent,task}, ...]) for ordinary parallel work; do not read .output from unawaited runs.run launches. Stored runs.run promises are only for advanced rolling fanout and each must later be observed with direct await, Promise.race, or Promise.all. Await runs.steer(key,message,options?) to guide a prior keyed child; it returns queued, delivered, missed, or failed and never accepts a raw run id. Always await or return steering calls. Use {action:"children.list"} for recent retained workflow children and resume only rows reported resumable. Use {action:"resume",id:"run-id",message:"..."} for a simple follow-up or challenge; resume keeps the stored agent/model/tool contract. If none is resumable, launch a same-role fallback challenge and label it as fallback. Inside workflowScript use runs.run(key,{resume:"run-id",task:"follow-up"}) when the script must wait for completion and continue from the latest returned runId. Workflows get async state.get/state.set through their automatic or explicit mission; mission:false does not. Scripts are ordinary JavaScript statement bodies; use explicit return for a useful result. Use top-level await, plain helper functions, or explicit Promise chains; nested async function, arrow, and method helpers are rejected. For task text with Markdown fences or shell blocks, build quoted lines instead of nesting raw template literals: \`const task=["Run:","\`\`\`bash","npm test","\`\`\`"].join("\\n")\`. Use JavaScript for sequence, branching, retries, and aggregation. For repository mutation lanes, use worktree:true on the workflow or runs.run/runs.all item for managed isolation. Scripts normally start async unless config sets asyncByDefault:false; set async:true explicitly when async behavior matters. async:false blocks the parent until completion and auto-enables a same-repo live chat card unless chatProgress is off; explicit live-card requires same-repository async:false, so async workflows should omit chatProgress or use auto/off.
+• Example: {workflowScript:"const [a,b]=await runs.all([{key:'a',agent:'agent-a',task:'Implement A',worktree:true},{key:'b',agent:'agent-b',task:'Implement B',worktree:true}]); return [a.output,b.output]"}
+• context can be fresh or fork. Explicit context wins; omitted context follows defaultSubagentContext before agent defaultContext. timeoutMs/maxRuntimeMs apply to foreground and async workflows; foreground workflows default to 30 minutes and async workflows have no default timeout. Omit acceptance for reviewer/read-only calls.
+
+MANAGE / CONTROL:
+• Use action without execution fields for list/get/models/guide/authoring, refine/refine.show/refine.rollback, mission, watchdog, status, interrupt, stop, resume, steer, script-only scheduling, diagnostics, and other management actions. guide reads shipped current-version docs by topic.
+• A mission object needs exactly one non-empty title or summary; objective and labels are optional. goal may only be true and requires budget:{tokens}.
+
+ASYNC / SAFETY:
+• Omitted async follows asyncByDefault config; set async:true explicitly when async behavior matters. Continue independent work only until its next dependency barrier; consume the result before work that depends on it. Do not sleep or poll merely to wait; use subagent_wait only when this turn must receive results.
+• Ordinary children are not orchestrators. Keep one writer per cwd/worktree and use fresh read-only reviewers for independent checks.
+• Oracle/advisor consultations use available supervisor dialogue for material unknowns; request one-shot when desired.
+• Status and artifacts live under asyncId/asyncDir with status.json, events.jsonl, output logs, and {action:"status",id:"..."}.`;
+
+
+function isToolDescriptionMode(value: unknown): value is ToolDescriptionMode {
+	return value === "full" || value === "compact" || value === "custom";
+}
+
+function warn(options: ToolDescriptionOptions | undefined, message: string): void {
+	(options?.warn ?? console.warn)(`[pi-subagents] ${message}`);
+}
+
+export interface ToolDescriptionOptions {
+	cwd?: string;
+	agentDir?: string;
+	warn?: (message: string) => void;
+}
+
+export interface SubagentToolPromptMetadata {
+	promptSnippet?: string;
+	promptGuidelines?: string[];
+}
+
+export function buildSubagentToolPromptMetadata(config: Pick<ExtensionConfig, "toolDescriptionMode"> = {}): SubagentToolPromptMetadata {
+	if (config.toolDescriptionMode !== undefined) return {};
+	return {
+		promptSnippet: SUBAGENT_TOOL_PROMPT_SNIPPET,
+		promptGuidelines: SUBAGENT_TOOL_PROMPT_GUIDELINES,
+	};
+}
+
+export function resolveToolDescriptionMode(config: Pick<ExtensionConfig, "toolDescriptionMode">, options?: ToolDescriptionOptions): ToolDescriptionMode {
+	const mode = config.toolDescriptionMode;
+	if (mode === undefined) return "full";
+	if (isToolDescriptionMode(mode)) return mode;
+	warn(options, `Ignoring invalid toolDescriptionMode ${JSON.stringify(mode)}; expected "full", "compact", or "custom".`);
+	return "full";
+}
+
+function customDescriptionPaths(options?: ToolDescriptionOptions): string[] {
+	const cwd = options?.cwd ?? process.cwd();
+	const agentDir = options?.agentDir ?? getAgentDir();
+	return [
+		path.join(getProjectConfigDir(cwd), CUSTOM_TOOL_DESCRIPTION_FILE),
+		path.join(agentDir, CUSTOM_TOOL_DESCRIPTION_FILE),
+	];
+}
+
+function renderCustomTemplate(template: string, options?: ToolDescriptionOptions): string {
+	const cwd = options?.cwd ?? process.cwd();
+	const agentDir = options?.agentDir ?? getAgentDir();
+	const projectConfigDir = getProjectConfigDir(cwd);
+	const variables: Record<string, () => string> = {
+		fullDescription: () => FULL_SUBAGENT_TOOL_DESCRIPTION,
+		full: () => FULL_SUBAGENT_TOOL_DESCRIPTION,
+		compactDescription: () => COMPACT_SUBAGENT_TOOL_DESCRIPTION,
+		compact: () => COMPACT_SUBAGENT_TOOL_DESCRIPTION,
+		safetyGuidance: () => SUBAGENT_SAFETY_GUIDANCE,
+		safety: () => SUBAGENT_SAFETY_GUIDANCE,
+		agentDir: () => agentDir,
+		projectConfigDir: () => projectConfigDir,
+	};
+	return template.replace(/\{\{(\w+)\}\}/g, (raw, name: string) => {
+		const replacement = variables[name];
+		if (replacement) return replacement();
+		warn(options, `${CUSTOM_TOOL_DESCRIPTION_FILE}: unknown placeholder ${raw} left unchanged.`);
+		return raw;
+	});
+}
+
+function loadCustomToolDescription(options?: ToolDescriptionOptions): string | undefined {
+	for (const filePath of customDescriptionPaths(options)) {
+		let stat: fs.Stats;
+		try {
+			stat = fs.statSync(filePath);
+		} catch (error) {
+			if (typeof error === "object" && error !== null && "code" in error && (error as NodeJS.ErrnoException).code === "ENOENT") continue;
+			warn(options, `Failed to inspect custom tool description '${filePath}': ${error instanceof Error ? error.message : String(error)}`);
+			continue;
+		}
+		if (!stat.isFile()) {
+			warn(options, `Ignoring custom tool description '${filePath}' because it is not a file.`);
+			continue;
+		}
+		if (stat.size > CUSTOM_TOOL_DESCRIPTION_MAX_BYTES) {
+			warn(options, `Ignoring custom tool description '${filePath}' because it is larger than ${CUSTOM_TOOL_DESCRIPTION_MAX_BYTES} bytes.`);
+			continue;
+		}
+		try {
+			const template = fs.readFileSync(filePath, "utf-8").trim();
+			if (!template) {
+				warn(options, `Ignoring empty custom tool description '${filePath}'.`);
+				continue;
+			}
+			const rendered = renderCustomTemplate(template, options).trim();
+			if (!rendered) {
+				warn(options, `Ignoring custom tool description '${filePath}' because it rendered empty.`);
+				continue;
+			}
+			return rendered;
+		} catch (error) {
+			warn(options, `Failed to read custom tool description '${filePath}': ${error instanceof Error ? error.message : String(error)}`);
+		}
+	}
+	return undefined;
+}
+
+function withMandatorySafetyGuidance(description: string): string {
+	const customDescription = description
+		.split(SUBAGENT_SAFETY_GUIDANCE)
+		.map((part) => part.trim())
+		.filter(Boolean)
+		.join("\n\n");
+	return customDescription
+		? `${customDescription}\n\n${SUBAGENT_SAFETY_GUIDANCE}`
+		: SUBAGENT_SAFETY_GUIDANCE;
+}
+
+export function buildSubagentToolDescription(config: Pick<ExtensionConfig, "toolDescriptionMode"> = {}, options?: ToolDescriptionOptions): string {
+	if (config.toolDescriptionMode === undefined) return DEFAULT_SUBAGENT_TOOL_DESCRIPTION;
+	const mode = resolveToolDescriptionMode(config, options);
+	let description: string;
+	if (mode === "compact") description = COMPACT_SUBAGENT_TOOL_DESCRIPTION;
+	else if (mode === "custom") {
+		const custom = loadCustomToolDescription(options);
+		if (custom) description = withMandatorySafetyGuidance(custom);
+		else {
+			warn(options, `${CUSTOM_TOOL_DESCRIPTION_FILE} was not found or valid for toolDescriptionMode "custom"; using full description.`);
+			description = FULL_SUBAGENT_TOOL_DESCRIPTION;
+		}
+	} else description = FULL_SUBAGENT_TOOL_DESCRIPTION;
+	return description;
+}

package/extensions/third-party/node_modules/pi-subagents/src/inspectors/herdr/actions.ts

@@ -0,0 +1,234 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { fileURLToPath } from "node:url";
+import type { AgentToolResult } from "@earendil-works/pi-agent-core";
+import { readMissionBinding } from "../../missions/lifecycle.ts";
+import { listMissions, missionRecordPath, resolveMissionStoreLocation } from "../../missions/store.ts";
+import type { MissionStoreConfig } from "../../missions/types.ts";
+import { resolveAuthorityDecision, type AuthorityPolicyConfig } from "../../policy/authority.ts";
+import { writeAtomicJson } from "../../shared/atomic-json.ts";
+import { DIRS, type Details, type SubagentState } from "../../shared/types.ts";
+import { readStatus } from "../../shared/utils.ts";
+import { resolveSubagentRunId } from "../../runs/background/run-id-resolver.ts";
+import { resolveNodeExecutable } from "../../shared/node-executable.ts";
+import { createHerdrClient, detectHerdr, type HerdrClient, type HerdrErrorCode, type HerdrResult } from "./client.ts";
+import { formatShellCommand } from "./shell-command.ts";
+
+export const HERDR_INSPECTOR_ACTIONS = ["inspector.open", "inspector.status", "inspector.close"] as const;
+export type HerdrInspectorAction = typeof HERDR_INSPECTOR_ACTIONS[number];
+
+export interface HerdrInspectorBinding {
+	schemaVersion: 1;
+	kind: "herdr-inspector";
+	runId: string;
+	asyncDir: string;
+	childIndex?: number;
+	missionId?: string;
+	missionPath?: string;
+	paneId: string;
+	openedAt: string;
+	lastFocusedAt?: string;
+	herdrVersion?: string;
+	command: string;
+}
+
+interface InspectorParams {
+	id?: string;
+	runId?: string;
+	dir?: string;
+	index?: number;
+	focus?: boolean;
+}
+
+interface InspectorDeps {
+	state?: SubagentState;
+	asyncDirRoot?: string;
+	resultsDir?: string;
+	client?: HerdrClient;
+	missions?: MissionStoreConfig;
+	authorityPolicy?: AuthorityPolicyConfig;
+	sessionRoots?: string[];
+	cwd: string;
+	signal?: AbortSignal;
+	now?: () => Date;
+	runnerPath?: string;
+}
+
+function result(text: string, isError = false): AgentToolResult<Details> {
+	return { content: [{ type: "text", text }], ...(isError ? { isError: true } : {}), details: { mode: "management", results: [] } };
+}
+
+function formatHerdrError(input: { code: HerdrErrorCode; message: string }): string {
+	return `Herdr inspector error (${input.code}): ${input.message}`;
+}
+
+function bindingPath(asyncDir: string, index?: number): string {
+	return path.join(asyncDir, "inspectors", `herdr${index === undefined ? "" : `-${index}`}.json`);
+}
+
+function parseBinding(value: unknown): HerdrInspectorBinding | undefined {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return undefined;
+	const input = value as Partial<HerdrInspectorBinding>;
+	if (input.schemaVersion !== 1 || input.kind !== "herdr-inspector") return undefined;
+	if (typeof input.runId !== "string" || typeof input.asyncDir !== "string" || typeof input.paneId !== "string" || typeof input.openedAt !== "string" || typeof input.command !== "string") return undefined;
+	if (input.childIndex !== undefined && (!Number.isInteger(input.childIndex) || input.childIndex < 0)) return undefined;
+	return input as HerdrInspectorBinding;
+}
+
+export function readHerdrInspectorBinding(asyncDir: string, index?: number): HerdrInspectorBinding | undefined {
+	try { return parseBinding(JSON.parse(fs.readFileSync(bindingPath(asyncDir, index), "utf-8"))); } catch { return undefined; }
+}
+
+function extractPaneId(value: unknown): string | undefined {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return undefined;
+	const record = value as Record<string, unknown>;
+	const pane = record.pane && typeof record.pane === "object" && !Array.isArray(record.pane) ? record.pane as Record<string, unknown> : record;
+	for (const key of ["pane_id", "paneId", "id"]) if (typeof pane[key] === "string") return pane[key];
+	return undefined;
+}
+
+function inspectorCommand(input: { runnerPath: string; asyncDir: string; runId: string; index?: number; missionPath?: string; allowSteer: boolean; allowStop: boolean; sessionRoots: string[] }): string {
+	const args = [input.runnerPath, "--async-dir", input.asyncDir, "--run-id", input.runId, "--allow-steer", String(input.allowSteer), "--allow-stop", String(input.allowStop), "--session-roots", JSON.stringify(input.sessionRoots)];
+	if (input.index !== undefined) args.push("--index", String(input.index));
+	if (input.missionPath) args.push("--mission-path", input.missionPath);
+	return formatShellCommand(resolveNodeExecutable(), args);
+}
+
+function missionForRun(asyncDir: string, cwd: string, config: MissionStoreConfig | undefined, runId: string): { id: string; path: string } | undefined {
+	try {
+		const binding = readMissionBinding(asyncDir);
+		if (binding) return { id: binding.missionId, path: missionRecordPath(binding.location, binding.missionId) };
+		const location = resolveMissionStoreLocation({ projectRoot: cwd, ...(config ? { config } : {}) });
+		const mission = listMissions(location).records.find((record) => record.runs.some((run) => run.runId === runId));
+		return mission ? { id: mission.id, path: missionRecordPath(location, mission.id) } : undefined;
+	} catch {
+		return undefined;
+	}
+}
+
+function pathWithin(base: string, candidate: string): boolean {
+	const resolvedBase = path.resolve(base);
+	const resolvedCandidate = path.resolve(candidate);
+	return resolvedCandidate === resolvedBase || resolvedCandidate.startsWith(`${resolvedBase}${path.sep}`);
+}
+
+function herdrSessionRoots(target: { runId: string }, deps: InspectorDeps): string[] {
+	const roots = deps.sessionRoots ?? deps.state?.trustedSessionRoots ?? [];
+	const job = deps.state?.asyncJobs.get(target.runId) ?? deps.state?.fleetJobs?.get(target.runId);
+	return [...new Set([...roots, ...(job?.sessionRoot ? [job.sessionRoot] : [])])];
+}
+
+function isTrustedAsyncDir(asyncDir: string, deps: InspectorDeps): boolean {
+	try {
+		if (fs.lstatSync(asyncDir).isSymbolicLink() || !fs.statSync(asyncDir).isDirectory()) return false;
+		const realDir = fs.realpathSync(asyncDir);
+		const registered = [...(deps.state?.asyncJobs.values() ?? [])].some((job) => {
+			try { return fs.realpathSync(job.asyncDir) === realDir; } catch { return false; }
+		});
+		if (registered) return true;
+		const root = deps.asyncDirRoot ?? DIRS.async;
+		if (!fs.existsSync(root) || !pathWithin(root, asyncDir)) return false;
+		return pathWithin(fs.realpathSync(root), realDir);
+	} catch {
+		return false;
+	}
+}
+
+function resolveAsyncTarget(params: InspectorParams, deps: InspectorDeps): { runId: string; asyncDir: string } | { error: string } {
+	const requestedId = params.id ?? params.runId;
+	if (params.dir) {
+		const asyncDir = path.resolve(params.dir);
+		if (!isTrustedAsyncDir(asyncDir, deps)) return { error: `Async run directory '${asyncDir}' is outside trusted run roots.` };
+		const status = readStatus(asyncDir);
+		if (!status) return { error: `No async run status found in '${asyncDir}'.` };
+		if (requestedId && requestedId !== status.runId && !status.runId.startsWith(requestedId)) return { error: `Run '${requestedId}' does not match status run '${status.runId}'.` };
+		return { runId: status.runId, asyncDir };
+	}
+	if (!requestedId) return { error: "Herdr inspector actions require id or dir." };
+	try {
+		const resolved = resolveSubagentRunId(requestedId, { state: deps.state, asyncDirRoot: deps.asyncDirRoot ?? DIRS.async, resultsDir: deps.resultsDir ?? DIRS.results });
+		if (!resolved) return { error: `No subagent run found for '${requestedId}'.` };
+		if (resolved.kind !== "async" || !resolved.location.asyncDir) return { error: `Run '${resolved.id}' is not an inspectable async run with lifecycle artifacts.` };
+		return { runId: resolved.id, asyncDir: resolved.location.asyncDir };
+	} catch (cause) {
+		return { error: cause instanceof Error ? cause.message : String(cause) };
+	}
+}
+
+async function paneExists(client: HerdrClient, paneId: string, signal?: AbortSignal): Promise<HerdrResult<unknown>> {
+	return client.run(["pane", "get", paneId], { timeoutMs: 5_000, signal });
+}
+
+export async function handleHerdrInspectorAction(action: HerdrInspectorAction, params: InspectorParams, deps: InspectorDeps): Promise<AgentToolResult<Details>> {
+	const target = resolveAsyncTarget(params, deps);
+	if ("error" in target) return result(target.error, true);
+	const status = readStatus(target.asyncDir);
+	if (!status) return result(`No lifecycle status exists for async run '${target.runId}'.`, true);
+	if (params.index !== undefined && (params.index < 0 || params.index >= (status.steps?.length ?? 0))) {
+		return result(`Async run '${target.runId}' has ${status.steps?.length ?? 0} children. Index ${params.index} is out of range.`, true);
+	}
+	const existing = readHerdrInspectorBinding(target.asyncDir, params.index);
+	const client = deps.client ?? createHerdrClient();
+
+	if (action === "inspector.status") {
+		if (!existing) return result(`No Herdr inspector binding exists for async run ${target.runId}${params.index === undefined ? "" : ` child ${params.index}`}.`);
+		const live = await paneExists(client, existing.paneId, deps.signal);
+		if (live.ok === false) return result(`${formatHerdrError(live.error)}\nBinding: ${bindingPath(target.asyncDir, params.index)}\nRun state remains authoritative: ${status.state}.`, true);
+		return result(`Herdr inspector ${existing.paneId} is open for async run ${target.runId}.\nRun state: ${status.state}\nBinding: ${bindingPath(target.asyncDir, params.index)}`);
+	}
+
+
+	if (action === "inspector.close") {
+		if (!existing) return result(`No Herdr inspector binding exists for async run ${target.runId}.`);
+		const closed = await client.run(["pane", "close", existing.paneId], { timeoutMs: 10_000, signal: deps.signal });
+		if (closed.ok === false && closed.error.code !== "NOT_FOUND" && closed.error.code !== "PANE_GONE") return result(formatHerdrError(closed.error), true);
+		fs.rmSync(bindingPath(target.asyncDir, params.index), { force: true });
+		return result(`Closed Herdr inspector pane ${existing.paneId} for async run ${target.runId}. The subagent run was not stopped.`);
+	}
+
+	const detected = await detectHerdr(client, deps.signal);
+	if (detected.ok === false) return result(formatHerdrError(detected.error), true);
+	if (existing) {
+		const live = await paneExists(client, existing.paneId, deps.signal);
+		if (live.ok) return result(`Herdr inspector pane ${existing.paneId} is already open for async run ${target.runId}.${params.focus ? " Herdr cannot refocus an arbitrary raw pane id; select it in the Herdr UI." : ""}`);
+	}
+	const splitArgs = ["pane", "split", "--current", "--direction", "right", "--cwd", status.cwd ?? deps.cwd];
+	splitArgs.push(params.focus === true ? "--focus" : "--no-focus");
+	const split = await client.run(splitArgs, { timeoutMs: 15_000, signal: deps.signal });
+	if (split.ok === false) return result(formatHerdrError(split.error), true);
+	const paneId = extractPaneId(split.data);
+	if (!paneId) return result("Herdr inspector error (PANE_GONE): pane split returned no pane id.", true);
+	const mission = missionForRun(target.asyncDir, deps.cwd, deps.missions, target.runId);
+	const runnerPath = deps.runnerPath ?? fileURLToPath(new URL("../../../inspector-runner.mjs", import.meta.url));
+	const command = inspectorCommand({
+		runnerPath,
+		asyncDir: target.asyncDir,
+		runId: target.runId,
+		index: params.index,
+		missionPath: mission?.path,
+		allowSteer: resolveAuthorityDecision({ action: "steerRun", policy: deps.authorityPolicy }) === "auto",
+		allowStop: resolveAuthorityDecision({ action: "stopRun", policy: deps.authorityPolicy }) === "auto",
+		sessionRoots: herdrSessionRoots(target, deps),
+	});
+	const started = await client.run(["pane", "run", paneId, command], { timeoutMs: 15_000, signal: deps.signal });
+	if (started.ok === false) {
+		await client.run(["pane", "close", paneId], { timeoutMs: 5_000 });
+		return result(formatHerdrError(started.error), true);
+	}
+	const now = (deps.now?.() ?? new Date()).toISOString();
+	const binding: HerdrInspectorBinding = {
+		schemaVersion: 1,
+		kind: "herdr-inspector",
+		runId: target.runId,
+		asyncDir: target.asyncDir,
+		...(params.index !== undefined ? { childIndex: params.index } : {}),
+		...(mission ? { missionId: mission.id, missionPath: mission.path } : {}),
+		paneId,
+		openedAt: now,
+		...(params.focus === true ? { lastFocusedAt: now } : {}),
+		herdrVersion: detected.data.versionText,
+		command,
+	};
+	writeAtomicJson(bindingPath(target.asyncDir, params.index), binding);
+	return result(`Opened read-only Herdr inspector pane ${paneId} for async run ${target.runId}. Closing the pane does not stop the run.\nControls inside the pane: steer <message>, stop, status.`);
+}

package/extensions/third-party/node_modules/pi-subagents/src/inspectors/herdr/client.ts

@@ -0,0 +1,130 @@
+import { spawn, type ChildProcess } from "node:child_process";
+
+export type HerdrErrorCode =
+	| "HERDR_UNAVAILABLE"
+	| "HERDR_UNSUPPORTED_VERSION"
+	| "PANE_GONE"
+	| "NOT_FOUND"
+	| "TIMEOUT"
+	| "VALIDATION_ERROR";
+
+export type HerdrResult<T> =
+	| { ok: true; data: T }
+	| { ok: false; error: { code: HerdrErrorCode; message: string; details?: unknown } };
+
+export interface HerdrClient {
+	run<T = unknown>(args: string[], options?: { timeoutMs?: number; signal?: AbortSignal; textOk?: boolean }): Promise<HerdrResult<T>>;
+}
+
+type SpawnHerdr = (command: string, args: readonly string[], options: { shell: false; windowsHide: true; env: NodeJS.ProcessEnv }) => ChildProcess;
+
+function error(code: HerdrErrorCode, message: string, details?: unknown): HerdrResult<never> {
+	return { ok: false, error: { code, message, ...(details !== undefined ? { details } : {}) } };
+}
+
+function parseLastJson(value: string): unknown | undefined {
+	const trimmed = value.trim();
+	if (!trimmed) return undefined;
+	try { return JSON.parse(trimmed) as unknown; } catch {}
+	for (const line of trimmed.split(/\r?\n/).reverse()) {
+		try { return JSON.parse(line) as unknown; } catch {}
+	}
+	return undefined;
+}
+
+function normalizeCode(raw: unknown): HerdrErrorCode {
+	const code = String(raw ?? "").toLowerCase();
+	if (code.includes("timeout") || code.includes("timed_out")) return "TIMEOUT";
+	if (code.includes("gone")) return "PANE_GONE";
+	if (code.includes("not_found") || code.includes("not-found") || code === "no_such_pane") return "NOT_FOUND";
+	return "VALIDATION_ERROR";
+}
+
+export function createHerdrClient(options: { bin?: string; spawn?: SpawnHerdr } = {}): HerdrClient {
+	const bin = options.bin ?? process.env.HERDR_BIN ?? "herdr";
+	const spawnImpl = options.spawn ?? spawn;
+	return {
+		run<T>(args: string[], runOptions: { timeoutMs?: number; signal?: AbortSignal; textOk?: boolean } = {}): Promise<HerdrResult<T>> {
+			return new Promise((resolve) => {
+				let child: ChildProcess;
+				try {
+					child = spawnImpl(bin, args, { shell: false, windowsHide: true, env: process.env });
+				} catch (cause) {
+					const code = (cause as NodeJS.ErrnoException | undefined)?.code;
+					resolve(error("HERDR_UNAVAILABLE", code === "ENOENT"
+						? "Herdr is not installed or is not on PATH. Install Herdr 0.7.5+ or set HERDR_BIN."
+						: `Failed to start Herdr: ${cause instanceof Error ? cause.message : String(cause)}`));
+					return;
+				}
+				let stdout = "";
+				let stderr = "";
+				let settled = false;
+				const finish = (result: HerdrResult<T>) => {
+					if (settled) return;
+					settled = true;
+					clearTimeout(timer);
+					runOptions.signal?.removeEventListener("abort", abort);
+					resolve(result);
+				};
+				const abort = () => {
+					try { child.kill(); } catch {}
+					finish(error("TIMEOUT", `Herdr command '${args.join(" ")}' was aborted.`));
+				};
+				const timer = setTimeout(() => {
+					try { child.kill(); } catch {}
+					finish(error("TIMEOUT", `Herdr command '${args.join(" ")}' timed out after ${runOptions.timeoutMs ?? 15_000}ms.`));
+				}, runOptions.timeoutMs ?? 15_000);
+				timer.unref?.();
+				if (runOptions.signal?.aborted) abort();
+				else runOptions.signal?.addEventListener("abort", abort, { once: true });
+				child.stdout?.on("data", (chunk) => { stdout += chunk.toString(); });
+				child.stderr?.on("data", (chunk) => { stderr += chunk.toString(); });
+				child.on("error", (cause) => {
+					const code = (cause as NodeJS.ErrnoException).code;
+					finish(error("HERDR_UNAVAILABLE", code === "ENOENT"
+						? "Herdr is not installed or is not on PATH. Install Herdr 0.7.5+ or set HERDR_BIN."
+						: `Failed to run Herdr: ${cause.message}`));
+				});
+				child.on("close", (exitCode) => {
+					const parsed = parseLastJson(stdout) ?? (exitCode === 0 ? undefined : parseLastJson(stderr));
+					if (parsed && typeof parsed === "object" && !Array.isArray(parsed) && "error" in parsed) {
+						const raw = (parsed as { error?: { code?: unknown; message?: unknown } }).error;
+						finish(error(normalizeCode(raw?.code), String(raw?.message ?? "Herdr command failed."), raw));
+						return;
+					}
+					if (exitCode === 0) {
+						if (parsed !== undefined) {
+							const envelope = parsed as { result?: unknown };
+							finish({ ok: true, data: (envelope.result ?? parsed) as T });
+						} else if (runOptions.textOk) finish({ ok: true, data: stdout.trim() as T });
+						else finish({ ok: true, data: {} as T });
+						return;
+					}
+					const message = stderr.split(/\r?\n/).find((line) => line.trim())?.trim() ?? `Herdr exited with code ${exitCode}.`;
+					finish(error("VALIDATION_ERROR", message, { exitCode }));
+				});
+			});
+		},
+	};
+}
+
+export interface HerdrVersion { major: number; minor: number; patch: number }
+
+export function parseHerdrVersion(value: string): HerdrVersion | undefined {
+	const match = /(\d+)\.(\d+)\.(\d+)/.exec(value);
+	return match ? { major: Number(match[1]), minor: Number(match[2]), patch: Number(match[3]) } : undefined;
+}
+
+export function supportsRawPanes(version: HerdrVersion): boolean {
+	return version.major > 0 || version.minor > 7 || (version.minor === 7 && version.patch >= 5);
+}
+
+export async function detectHerdr(client: HerdrClient, signal?: AbortSignal): Promise<HerdrResult<{ version: HerdrVersion; versionText: string }>> {
+	const result = await client.run<string>(["--version"], { timeoutMs: 3_000, signal, textOk: true });
+	if (result.ok === false) return result;
+	const versionText = typeof result.data === "string" ? result.data : JSON.stringify(result.data);
+	const version = parseHerdrVersion(versionText);
+	if (!version) return error("VALIDATION_ERROR", `Could not parse the Herdr version from '${versionText}'.`);
+	if (!supportsRawPanes(version)) return error("HERDR_UNSUPPORTED_VERSION", `Herdr ${versionText} does not support raw inspector panes. Upgrade to Herdr 0.7.5 or newer.`);
+	return { ok: true, data: { version, versionText } };
+}