@code-yeongyu/senpi 2026.8.28 → 2026.8.30-2

package/docs/rpc.md

@@ -57,15 +57,42 @@ every open session, each tagged with its routing `sessionId`. Correlated respons
 only to the connection that issued the command. This lets a non-owner observe a foreign turn without requiring a
 separate subscription protocol.
 
+### Session auto-titling
+
+Auto-generated session titles are on by default only for interactive launches. RPC hosts opt in with
+`--auto-title-sessions`:
+
+```bash
+senpi --mode rpc --multi-session --auto-title-sessions
+```
+
+With the flag, every session the host opens (classic or multi-session) generates a title from its first user prompt and
+publishes it to clients through the existing `session_info_changed` event; no new command or event is involved. Sessions
+resumed with existing context messages are never retitled, with or without the flag.
+
 Startup: `senpi --mode rpc --multi-session` → NO default session is constructed (no default `AgentSessionRuntime`, no default extension/watcher load). Classic `senpi --mode rpc` is byte-identical to today. Mode is fixed at process start; there is no runtime transition.
 
 ### Interactive sessions and shared-host opt-out
 
 Interactive launches use the shared RPC host by default when a persisted session is available. A cold start takes approximately 1.3 seconds on the first launch; warm attachment to an existing compatible host is fast. To use the local runtime directly for a launch, set `SENPI_DISABLE_SHARED_HOST=1`. This uses the same local fallback runtime and does not change RPC socket behavior for other clients.
 
+### Session replacement
+
+A replacement (`new_session`, `switch_session`, `fork`) responds as soon as the swap is committed; the derived-surface refresh that rebinds extensions continues afterwards. That refresh does not disturb work the client starts against the committed session: tool activation performed while extensions are still binding no longer cancels an in-flight compaction or invalidates its context. `loaded_surfaces_changed` is emitted only when the surface digest actually changes, so it is NOT a settle barrier clients can wait on.
+
+#### Replacement identity event
+
+When `new_session`, `switch_session`, or `fork` swaps the live session - including replacements an extension drives, which a client never issued - every attached connection receives:
+
+```json
+{ "type": "session_replaced", "durableSessionId": "…", "sessionFile": "…", "cwd": "…", "sessionName": "…" }
+```
+
+The command response reports only `{ cancelled }`, so this event is the only push channel carrying the new identity. The identity is `durableSessionId`, never `sessionId`: top-level `sessionId` is reserved for the per-connection routing handle that multi-session hosts tag every record with, and that tag is applied last, so reusing the key would overwrite the identity the event exists to deliver. Classic mode emits the event untagged.
+
 ### Shared host lifecycle (cold start + idle exit)
 
-The lifecycle supervisor is also available to bundled/rebranded runtimes through the hidden internal launch route `--internal-rpc-host-supervisor`. This route is wire-invisible and intended only for desktop launchers: it receives the public socket, ownership directory, and the runtime command/arguments to wrap, then runs the same `host-lifecycle.ts` implementation used by `ensureHost()`. Normal CLI modes do not use or advertise this route.
+The lifecycle supervisor is also available to bundled/rebranded runtimes through the hidden internal launch route `--internal-rpc-host-supervisor`. This route is wire-invisible and intended only for desktop launchers: it receives the public socket, ownership directory, and the runtime command/arguments to wrap, then runs the same `host-lifecycle.ts` implementation used by `ensureHost()`. Normal CLI modes do not use or advertise this route. Compiled standalone binaries also re-enter themselves through this route automatically: a bun executable always boots its embedded entrypoint, so the script-path re-entry used under a JS runtime would be parsed as CLI arguments (`Unknown option: --socket`) and the host could never start.
 
 Hosts started through `ensureHost()` are wrapped by a lifecycle supervisor that owns the public socket and spawns the
 real RPC host on a private internal hop. The policy lives in `<agentDir>/rpc-host-daemon/settings.json`:
@@ -831,9 +858,11 @@ Response:
 Load a different session file. Can be cancelled by a `session_before_switch` extension event handler.
 
 ```json
-{"type": "switch_session", "sessionPath": "/path/to/session.jsonl"}
+{"type": "switch_session", "sessionPath": "/path/to/session.jsonl", "cwdOverride": "/path/to/project"}
 ```
 
+`cwdOverride` is optional. When supplied, the replacement session and its cwd-bound settings and runtime state are rebuilt for that directory instead of using the session file's stored cwd. The host also resolves `projectTrusted` from its saved project trust store for the replacement cwd; an absent or false decision keeps project-scoped settings and resources disabled.
+
 Response:
 ```json
 {"type": "response", "command": "switch_session", "success": true, "data": {"cancelled": false}}
@@ -1237,6 +1266,30 @@ Emitted when an extension calls `pi.rpc.emit(name, data)` and the client adverti
 the specific event name before applying it. In multi-session mode the record also includes the
 routing `sessionId`; delivery preserves the owning session and per-session event order.
 
+The terminal builtin emits `terminal_monitor_state` on this path whenever the active monitor set
+changes. `data` is `{ activeCount, monitors }`, where each monitor entry has `id`, `description`,
+`paused`, and `startedAtMs`. The matching in-process `pi.events` channel is unchanged and is not
+forwarded. Clients receive the wire record only when they advertise the `extension_events`
+capability:
+
+```json
+{
+  "type": "extension_event",
+  "name": "terminal_monitor_state",
+  "data": {
+    "activeCount": 1,
+    "monitors": [
+      {
+        "id": "bash_1",
+        "description": "watch checks",
+        "paused": false,
+        "startedAtMs": 1710000000000
+      }
+    ]
+  }
+}
+```
+
 ### agent_start
 
 Emitted when the agent begins processing a prompt.

package/docs/settings.md

@@ -399,6 +399,8 @@ Windows paths in JSON must use forward slashes or escaped backslashes:
 | Setting | Type | Default | Description |
 |---------|------|---------|-------------|
 | `defaultTools` | string[] | - | Built-in tools enabled initially. When omitted, Pi uses its standard defaults |
+| `experimental.bashEvalOnly` | boolean | `false` | Route `bash` and `powershell` through eval cells only; the tools leave the model's direct tool list |
+| `experimental.workflowEvalOnly` | boolean | `false` | Route the workflow (dag) tool through eval cells only; the tool leaves the model direct tool list |
 
 `defaultTools` selects the built-in tools enabled at startup. Extension and SDK custom tools remain enabled. Available built-ins are `read`, `bash`, `powershell`, `edit`, `write`, `grep`, `find`, and `ls`:
 
@@ -418,6 +420,38 @@ On Windows, select `powershell` instead of `bash`, or include both:
 
 An empty array starts with no built-in tools while preserving extension and SDK custom tools. `--tools` replaces this behavior with a strict allowlist for all tools, `--no-tools` disables all tools, and `--no-builtin-tools` disables the built-in defaults. `--exclude-tools` filters the resulting list. A project `defaultTools` array replaces the global array.
 
+With `experimental.bashEvalOnly` enabled, the `bash` and `powershell` tools disappear from the model's direct tool list and run only inside eval cells:
+
+```json
+{
+  "experimental": {
+    "bashEvalOnly": true
+  }
+}
+```
+
+```js
+const { output } = await tool.bash({ command: "ls -la" });
+```
+
+Hooks and permission checks apply unchanged to shell commands run this way. If the model hallucinates a direct `bash` or `powershell` call anyway, the call returns a hint redirecting it to an eval cell. When the `eval` tool is unavailable (codemode not loaded), the policy auto-disables and both tools stay on the direct tool list, so shell access is never lost.
+
+With `experimental.workflowEvalOnly` enabled, the `workflow` (dag) tool disappears from the model's direct tool list and runs only inside eval cells:
+
+```json
+{
+  "experimental": {
+    "workflowEvalOnly": true
+  }
+}
+```
+
+```js
+const snapshot = await tool.workflow({ action: "snapshot", run_id });
+```
+
+Hooks and permission checks apply unchanged to workflow operations run this way. When the `eval` tool is unavailable (codemode not loaded), the policy auto-disables and the workflow tool stays on the direct tool list, so workflow access is never lost.
+
 ### Sessions
 
 | Setting | Type | Default | Description |

package/docs/windows.md

@@ -30,6 +30,8 @@ Or enable both while comparing behavior:
 
 The `!` and `!!` editor commands still use Bash.
 
+With `experimental.bashEvalOnly` enabled, both `bash` and `powershell` run only inside eval cells; see [Settings](settings.md#tools).
+
 ## Custom Bash Path
 
 ```json

package/node_modules/@code-yeongyu/senpi-codemode/CHANGELOG.md

@@ -12,6 +12,80 @@
 
 ### Removed
 
+## [2026.8.30-2] - 2026-08-30
+
+### Breaking Changes
+
+### Added
+
+### Changed
+
+### Fixed
+
+### Removed
+
+## [2026.8.30] - 2026-08-30
+
+### Breaking Changes
+
+### Added
+
+### Changed
+
+- The eval prompt's dependency-graph section is now `<workflow>` and states its contract directly:
+  define the workflow spec in code, one node per logically distinct step, rather than hand-authoring
+  the graph as a single opaque call.
+
+### Fixed
+
+- The JavaScript kernel persistence transform no longer truncates declarations whose multi-line
+  initializers contain interior `//` comments (previously emitted unparseable code such as
+  `globalThis["jobs"] = {;`, failing cells with `Unexpected token ';'. Expected a property name.`),
+  and no longer re-evaluates comment-bearing initializers when persisting bindings — such
+  declarations are kept verbatim and their bindings persisted by reference.
+- Last-expression capture no longer inserts `return` before continuation lines (`else`/`catch`/`finally`
+  clauses and leading-`.`/operator method-chain lines), and now scans template literals (including
+  nested templates in interpolations), regexes, and comments with the same literal-aware scanner as
+  the persistence transform — fixing `return else …`, `return .replace(…)`, and mid-argument
+  `return )` corruption of valid cells.
+- Last-expression capture now follows real ASI statement semantics: a parenthesized/bracketed/template
+  line after a closed block starts a new statement (echo restored), expressions split after a trailing
+  operator or `await` stay one statement, tagged templates split across lines invoke the tag, regexes
+  directly after a control-structure condition no longer desync the scanner, and labeled final
+  statements are left uncaptured instead of emitting invalid `return label: …`.
+- Destructuring patterns carrying interior line comments now persist their bindings, and declarations
+  with a dangling trailing comma are left untransformed so the original syntax error surfaces instead
+  of being silently "repaired".
+- Rewritten destructuring assignments are emitted with a leading defensive semicolon so they can no
+  longer ASI-merge into a preceding unterminated expression statement as a bogus call
+  (`foo()\n({…} = …)` previously became `foo()({…} = …)`).
+
+### Removed
+
+## [2026.8.29] - 2026-08-29
+
+### Breaking Changes
+
+### Added
+
+### Changed
+
+### Fixed
+
+### Removed
+
+## [2026.8.28-2] - 2026-08-28
+
+### Breaking Changes
+
+### Added
+
+### Changed
+
+### Fixed
+
+### Removed
+
 ## [2026.8.28] - 2026-08-28
 
 ### Breaking Changes

package/node_modules/@code-yeongyu/senpi-codemode/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@code-yeongyu/senpi-codemode",
-	"version": "2026.8.28",
+	"version": "2026.8.30-2",
 	"private": true,
 	"description": "Source-only senpi extension package for codemode evaluation tools",
 	"type": "module",
@@ -31,14 +31,14 @@
 	},
 	"dependencies": {
 		"@babel/parser": "8.0.4",
-		"@earendil-works/pi-ai": "npm:@code-yeongyu/senpi-ai@2026.8.28",
+		"@earendil-works/pi-ai": "npm:@code-yeongyu/senpi-ai@2026.8.30-2",
 		"typebox": "1.3.18"
 	},
 	"peerDependencies": {
-		"@code-yeongyu/senpi": "2026.8.28"
+		"@code-yeongyu/senpi": "2026.8.30-2"
 	},
 	"devDependencies": {
-		"@code-yeongyu/senpi": "2026.8.28"
+		"@code-yeongyu/senpi": "2026.8.30-2"
 	},
 	"keywords": [
 		"senpi",

package/node_modules/@code-yeongyu/senpi-codemode/src/kernels/js/worker-indirect-eval.js

@@ -258,20 +258,22 @@ function rewriteDeclaration(code, declarationStart, start, end, keyword) {
 	const preserveDeclaration = source.includes("//") || source.includes("/*");
 	for (const [segmentStart, segmentEnd] of splitDeclarators(code, start, end)) {
 		const segment = code.slice(segmentStart, segmentEnd);
-		if (!segment.trim()) continue;
+		if (!segment.trim()) return undefined;
 		const initializerStart = findTopLevelEquals(segment);
 		if (initializerStart < 0 && keyword === "const") return undefined;
 		const pattern = trimPattern(initializerStart < 0 ? segment : segment.slice(0, initializerStart));
 		const bindings = [];
 		collectPatternNames(pattern, bindings);
 		if (bindings.length === 0) return undefined;
+		if (preserveDeclaration) {
+			for (const name of bindings) assignments.push(`globalThis[${JSON.stringify(name)}] = ${name};`);
+			continue;
+		}
 		const target = rewriteBindingPattern(pattern);
 		if (target === undefined) return undefined;
 		const initializer = initializerStart < 0 ? "undefined" : segment.slice(initializerStart + 1).trim();
-		const [assignmentInitializer, comment] = splitTrailingLineComment(initializer);
-		const assignmentComment = preserveDeclaration ? "" : comment;
 		assignments.push(
-			`${target.startsWith("{") || target.startsWith("[") ? `(${target} = ${assignmentInitializer})` : `${target} = ${assignmentInitializer}`};${assignmentComment}`,
+			`${target.startsWith("{") || target.startsWith("[") ? `;(${target} = ${initializer})` : `${target} = ${initializer}`};`,
 		);
 	}
 	if (assignments.length === 0) return undefined;
@@ -408,6 +410,7 @@ function splitDeclarators(code, start, end) {
 		if (!/\s/u.test(char)) canStartRegex = isExpressionOperator(char) || char === "(" || char === "[" || char === "{";
 	}
 	if (segmentStart < end && code.slice(segmentStart, end).trim() !== ";") ranges.push([segmentStart, end - (code[end - 1] === ";" ? 1 : 0)]);
+	else if (ranges.length > 0 && code.slice(segmentStart, end).trim() !== ";") ranges.push([end, end]);
 	return ranges;
 }
 
@@ -501,51 +504,9 @@ function applyTextEdits(code, edits) {
 	return output;
 }
 
-function splitTrailingLineComment(source) {
-	let canStartRegex = true;
-	for (let index = 0; index < source.length; index += 1) {
-		const char = source[index];
-		const next = source[index + 1];
-		if (char === "/" && next === "/") return [source.slice(0, index).trimEnd(), source.slice(index)];
-		if (char === "/" && next === "*") {
-			index = skipBlockComment(source, index) - 1;
-			continue;
-		}
-		if (char === "'" || char === '"') {
-			index = skipQuotedLiteral(source, index) - 1;
-			canStartRegex = false;
-			continue;
-		}
-		if (char === "`") {
-			index = skipTemplateLiteral(source, index) - 1;
-			canStartRegex = false;
-			continue;
-		}
-		if (char === "/" && canStartRegex) {
-			index = skipRegexLiteral(source, index) - 1;
-			canStartRegex = false;
-			continue;
-		}
-		if (isIdentifierStart(char)) {
-			const end = readIdentifier(source, index);
-			canStartRegex = REGEX_PREFIX_KEYWORDS.has(source.slice(index, end));
-			index = end - 1;
-			continue;
-		}
-		if (isDecimalDigit(char)) {
-			index = skipNumberLiteral(source, index) - 1;
-			canStartRegex = false;
-			continue;
-		}
-		if (!/\s/u.test(char)) canStartRegex = isExpressionOperator(char) || char === "(" || char === "[" || char === "{";
-	}
-	return [source, ""];
-}
-
 function trimPattern(source) {
 	let start = 0;
-	let end = source.length;
-	while (start < end) {
+	while (start < source.length) {
 		if (/\s/u.test(source[start])) {
 			start += 1;
 			continue;
@@ -560,12 +521,30 @@ function trimPattern(source) {
 		}
 		break;
 	}
-	while (true) {
-		while (end > start && /\s/u.test(source[end - 1])) end -= 1;
-		if (end < start + 2 || source.slice(end - 2, end) !== "*/") break;
-		const commentStart = source.lastIndexOf("/*", end - 2);
-		if (commentStart < start) break;
-		end = commentStart;
+	let end = start;
+	for (let index = start; index < source.length; index += 1) {
+		const char = source[index];
+		const next = source[index + 1];
+		if (/\s/u.test(char)) continue;
+		if (char === "/" && next === "/") {
+			index = skipLineComment(source, index) - 1;
+			continue;
+		}
+		if (char === "/" && next === "*") {
+			index = skipBlockComment(source, index) - 1;
+			continue;
+		}
+		if (char === "'" || char === '"') {
+			index = skipQuotedLiteral(source, index) - 1;
+			end = index + 1;
+			continue;
+		}
+		if (char === "`") {
+			index = skipTemplateLiteral(source, index) - 1;
+			end = index + 1;
+			continue;
+		}
+		end = index + 1;
 	}
 	return source.slice(start, end);
 }
@@ -733,66 +712,136 @@ function captureLastExpression(code) {
 	return `${head}return ${tail.replace(/;+$/u, "")};`;
 }
 
+const LABEL_PREFIX_RE = /^[\p{ID_Start}$_][\p{ID_Continue}\u200c\u200d$]*\s*:/u;
+
 function isStatementOnly(source) {
-	return /^(?:const|let|var|if|for|while|switch|try|catch|finally|class|function|import|export|throw|return|do|break|continue|debugger)\b/u.test(
-		source,
-	);
+	if (
+		/^(?:const|let|var|if|for|while|switch|try|catch|finally|class|function|import|export|throw|return|do|break|continue|debugger)\b/u.test(
+			source,
+		)
+	)
+		return true;
+	return LABEL_PREFIX_RE.test(source);
 }
 
+const CONTROL_PAREN_KEYWORDS = new Set(["catch", "for", "if", "switch", "while", "with"]);
+
 function findLastTopLevelStatementStart(code) {
 	let start = 0;
 	let round = 0;
 	let square = 0;
 	let curly = 0;
-	let quote = "";
-	let escaped = false;
-	let lineComment = false;
-	let blockComment = false;
+	let canStartRegex = true;
+	let lastSignificant = "";
+	let pendingControlParen = false;
+	const controlParens = [];
 	for (let index = 0; index < code.length; index += 1) {
 		const char = code[index];
 		const next = code[index + 1];
-		if (lineComment) {
-			if (char === "\n") lineComment = false;
+		if (char === "/" && next === "/") {
+			index = skipLineComment(code, index) - 1;
 			continue;
 		}
-		if (blockComment) {
-			if (char === "*" && next === "/") {
-				blockComment = false;
-				index += 1;
-			}
+		if (char === "/" && next === "*") {
+			index = skipBlockComment(code, index) - 1;
 			continue;
 		}
-		if (quote) {
-			if (escaped) {
-				escaped = false;
-			} else if (char === "\\") {
-				escaped = true;
-			} else if (char === quote) {
-				quote = "";
-			}
+		if (char === "'" || char === '"' || char === "`") {
+			index = (char === "`" ? skipTemplateLiteral(code, index) : skipQuotedLiteral(code, index)) - 1;
+			canStartRegex = false;
+			lastSignificant = char;
+			pendingControlParen = false;
 			continue;
 		}
-		if (char === "/" && next === "/") {
-			lineComment = true;
-			index += 1;
+		if (char === "/" && canStartRegex) {
+			index = skipRegexLiteral(code, index) - 1;
+			canStartRegex = false;
+			lastSignificant = char;
+			pendingControlParen = false;
 			continue;
 		}
-		if (char === "/" && next === "*") {
-			blockComment = true;
-			index += 1;
+		if (isIdentifierStart(char)) {
+			const end = readIdentifier(code, index);
+			const token = code.slice(index, end);
+			canStartRegex = REGEX_PREFIX_KEYWORDS.has(token);
+			pendingControlParen = CONTROL_PAREN_KEYWORDS.has(token);
+			lastSignificant = code[end - 1];
+			index = end - 1;
 			continue;
 		}
-		if (char === "'" || char === '"' || char === "`") {
-			quote = char;
+		if (isDecimalDigit(char)) {
+			index = skipNumberLiteral(code, index) - 1;
+			canStartRegex = false;
+			lastSignificant = char;
+			pendingControlParen = false;
 			continue;
 		}
-		if (char === "(") round += 1;
-		else if (char === ")") round -= 1;
-		else if (char === "[") square += 1;
-		else if (char === "]") square -= 1;
-		else if (char === "{") curly += 1;
-		else if (char === "}") curly -= 1;
-		else if ((char === ";" || char === "\n") && round === 0 && square === 0 && curly === 0) start = index + 1;
+		if (char === "(") {
+			round += 1;
+			controlParens.push(pendingControlParen);
+			pendingControlParen = false;
+			canStartRegex = true;
+			lastSignificant = char;
+			continue;
+		}
+		if (char === ")") {
+			round = Math.max(0, round - 1);
+			canStartRegex = controlParens.pop() === true;
+			lastSignificant = char;
+			continue;
+		}
+		if (char === "[" || char === "{") {
+			if (char === "[") square += 1;
+			else curly += 1;
+			canStartRegex = true;
+			lastSignificant = char;
+			pendingControlParen = false;
+			continue;
+		}
+		if (char === "]" || char === "}") {
+			if (char === "]") square = Math.max(0, square - 1);
+			else curly = Math.max(0, curly - 1);
+			canStartRegex = false;
+			lastSignificant = char;
+			pendingControlParen = false;
+			continue;
+		}
+		if (char === ";" && round === 0 && square === 0 && curly === 0) {
+			const nextIndex = nextSignificantIndex(code, index + 1);
+			if (nextIndex < code.length && !isContinuationKeyword(code, nextIndex)) start = nextIndex;
+			canStartRegex = true;
+			lastSignificant = char;
+			pendingControlParen = false;
+			continue;
+		}
+		if (isLineTerminator(char) && round === 0 && square === 0 && curly === 0) {
+			if (!canStartRegex) {
+				const nextIndex = nextSignificantIndex(code, index + 1);
+				if (nextIndex < code.length && !isStatementContinuation(code, nextIndex, lastSignificant)) start = nextIndex;
+			}
+			canStartRegex = true;
+			continue;
+		}
+		if (!/\s/u.test(char)) {
+			canStartRegex = isExpressionOperator(char) || char === ",";
+			lastSignificant = char;
+			pendingControlParen = false;
+		}
 	}
 	return start;
 }
+
+const STATEMENT_CONTINUATION_KEYWORDS = new Set(["catch", "else", "finally"]);
+
+function isContinuationKeyword(code, index) {
+	if (!isIdentifierStart(code[index])) return false;
+	return STATEMENT_CONTINUATION_KEYWORDS.has(code.slice(index, readIdentifier(code, index)));
+}
+
+function isStatementContinuation(code, index, previousChar) {
+	const char = code[index];
+	if (char === "(" || char === "[" || char === "`") return previousChar !== "}" && previousChar !== "";
+	if (char === "!" || char === "~") return false;
+	if (char !== undefined && isDeclarationContinuation(char)) return true;
+	return isContinuationKeyword(code, index);
+}

package/node_modules/@code-yeongyu/senpi-codemode/src/prompt/eval-prompt.ts

@@ -163,7 +163,7 @@ tool_schema(name?) → dict
 completion(prompt, model?="default", system?=None, schema?=None) → str | dict
     Oneshot, stateless (no history/tools). \`model\`: \`"smol"\` fast | \`"default"\` session | \`"slow"\` most capable. \`schema\` (JSON-Schema) → structured output, parsed object.
 {{#if spawns}}agent(prompt, agent?="{{spawnDefaultAgent}}", model?=None, label?=None, schema?=None, handle?=False) → str | dict
-    Run a subagent → final output. \`agent\` picks another discovered agent; omit it to use \`{{spawnDefaultAgent}}\`. \`schema\` as in completion(). Background via \`local://\` files named in the prompt. \`handle\` → DAG node dict { text, output, handle: \`agent://<id>\`, id, agent } (parsed under \`data\` when \`schema\` set).
+    Run a subagent → final output. \`agent\` picks another discovered agent; omit it to use \`{{spawnDefaultAgent}}\`. \`schema\` as in completion(). Background via \`local://\` files named in the prompt. \`handle\` → workflow node dict { text, output, handle: \`agent://<id>\`, id, agent } (parsed under \`data\` when \`schema\` set).
 {{#if js}}    JS: options are ONE trailing object — agent(prompt, { agent, schema, handle }).
 {{/if}}{{/if}}parallel(thunks) → list
     Thunks through a bounded pool (wide as a \`task\` batch — don't pre-shrink), input order kept; returns when all finish, a throwing thunk propagates.
@@ -176,14 +176,14 @@ phase(title) → None
 \`\`\`
 </prelude>
 {{#if spawns}}
-<dag>
-Pipe handles through stage helpers to build a dependency graph — acyclic waves:
+<workflow>
+Define the workflow spec IN CODE: partition the work into logically distinct steps, one node per step, then wire them as acyclic waves — never hand-author the graph as a single opaque call.
 - **Name nodes.** Capture each \`agent(…, {{#if py}}handle=True{{/if}}{{#if js}}{ handle: true }{{/if}}{{#if jl}}handle=true{{/if}})\` result; carries \`handle\` (\`agent://<id>\`) + \`output\`.
 - **Wire edges by reference.** Put an upstream node's \`handle\`/\`output\` in the dependent stage's prompt — large transcript never re-inlined. Bulk: \`write("local://<name>.md", …)\`, pass the URI.
 - **\`pipeline(items, *stages)\` = staged waves**, barrier between stages (every item clears stage N before any enters N+1). **\`parallel(thunks)\` = one wave** of independent nodes.
 - **Isolate failure.** A raising node re-raises the lowest-index error, aborts its wave; wrap risky nodes in try/except so a failure degrades only its dependent subtree, independent branches finish.
 - **Acyclic only.** A node never waits on its own descendant.
-</dag>
+</workflow>
 {{/if}}
 
 <critical>

package/node_modules/@earendil-works/pi-agent-core/dist/agent-loop.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-loop.d.ts","sourceRoot":"","sources":["../src/agent-loop.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAIN,KAAK,OAAO,EAEZ,WAAW,EAIX,MAAM,uBAAuB,CAAC;AAU/B,OAAO,KAAK,EACX,YAAY,EACZ,UAAU,EACV,eAAe,EAEf,YAAY,EACZ,SAAS,EACT,aAAa,EAEb,QAAQ,EACR,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAEzE;;;GAGG;AACH,wBAAgB,SAAS,CACxB,OAAO,EAAE,YAAY,EAAE,EACvB,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,QAAQ,EAAE,QAAQ,GAChB,WAAW,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC,CAiBzC;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAChC,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,QAAQ,EAAE,QAAQ,GAChB,WAAW,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC,CAwBzC;AAED,wBAAsB,YAAY,CACjC,OAAO,EAAE,YAAY,EAAE,EACvB,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,eAAe,EACvB,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,QAAQ,EAAE,QAAQ,GAChB,OAAO,CAAC,YAAY,EAAE,CAAC,CAgBzB;AAED,wBAAsB,oBAAoB,CACzC,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,eAAe,EACvB,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,QAAQ,EAAE,QAAQ,GAChB,OAAO,CAAC,YAAY,EAAE,CAAC,CAiBzB;AA6QD,uGAAuG;AACvG,wBAAsB,oBAAoB,CACzC,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,cAAc,GAAG,kBAAkB,CAAC,EAClE,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,OAAO,CAAC,CAgBlB;AA2lBD,MAAM,WAAW,qBAAqB;IACrC,QAAQ,EAAE,aAAa,CAAC;IACxB,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;CACd;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,GAAG,aAAa,CAYrG;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,GAAG,qBAAqB,CAOpG"}
+{"version":3,"file":"agent-loop.d.ts","sourceRoot":"","sources":["../src/agent-loop.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAIN,KAAK,OAAO,EAEZ,WAAW,EAIX,MAAM,uBAAuB,CAAC;AAU/B,OAAO,KAAK,EACX,YAAY,EACZ,UAAU,EACV,eAAe,EAEf,YAAY,EACZ,SAAS,EACT,aAAa,EAEb,QAAQ,EACR,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAEzE;;;GAGG;AACH,wBAAgB,SAAS,CACxB,OAAO,EAAE,YAAY,EAAE,EACvB,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,QAAQ,EAAE,QAAQ,GAChB,WAAW,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC,CAiBzC;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAChC,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,QAAQ,EAAE,QAAQ,GAChB,WAAW,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC,CAwBzC;AAED,wBAAsB,YAAY,CACjC,OAAO,EAAE,YAAY,EAAE,EACvB,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,eAAe,EACvB,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,QAAQ,EAAE,QAAQ,GAChB,OAAO,CAAC,YAAY,EAAE,CAAC,CAgBzB;AAED,wBAAsB,oBAAoB,CACzC,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,eAAe,EACvB,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,QAAQ,EAAE,QAAQ,GAChB,OAAO,CAAC,YAAY,EAAE,CAAC,CAiBzB;AA6QD,uGAAuG;AACvG,wBAAsB,oBAAoB,CACzC,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,cAAc,GAAG,kBAAkB,CAAC,EAClE,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,OAAO,CAAC,CAgBlB;AA+lBD,MAAM,WAAW,qBAAqB;IACrC,QAAQ,EAAE,aAAa,CAAC;IACxB,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;CACd;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,GAAG,aAAa,CAYrG;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,GAAG,qBAAqB,CAOpG"}

package/node_modules/@earendil-works/pi-agent-core/dist/agent-loop.js

@@ -517,6 +517,9 @@ const ABORTED = Symbol("aborted");
 function abortError(reason) {
     return reason instanceof Error ? reason : new Error("Request was aborted");
 }
+function closeAssistantIterator(iterator) {
+    void Promise.resolve(iterator.return?.()).catch(() => undefined);
+}
 function normalizeTimeoutMs(timeoutMs) {
     return typeof timeoutMs === "number" && Number.isFinite(timeoutMs) && timeoutMs > 0 ? timeoutMs : undefined;
 }
@@ -541,7 +544,7 @@ function createAssistantEventReader(iterator, timeoutMs, signal, onIdleTimeout,
     return {
         next: async () => {
             if (signal?.aborted) {
-                void iterator.return?.();
+                closeAssistantIterator(iterator);
                 return Promise.reject(abortError(signal.reason));
             }
             // The start bound applies only until the provider proves the request is
@@ -586,7 +589,7 @@ async function readNextAssistantEvent(iterator, idleTimeoutMs, makeTimeoutError,
                     return;
                 }
                 const error = makeTimeoutError(idleTimeoutMs);
-                void iterator.return?.();
+                closeAssistantIterator(iterator);
                 settle(() => reject(error));
                 // Abort after settling so the failure surfaces as an idle timeout,
                 // not as a generic abort, while the dead request still gets torn down.
@@ -597,7 +600,7 @@ async function readNextAssistantEvent(iterator, idleTimeoutMs, makeTimeoutError,
         const next = abortPromise ? Promise.race([iterator.next(), abortPromise]) : iterator.next();
         void next.then((result) => {
             if (result === ABORTED) {
-                void iterator.return?.();
+                closeAssistantIterator(iterator);
                 settle(() => reject(abortError(signal?.reason)));
                 return;
             }