@duckmind/dm-linux-x64 0.65.5 → 0.65.6

package/extensions/dm-mcp-adapter/ui-session.js

@@ -77,6 +77,18 @@ async function openInBrowser(state, url, signal) {
     return message;
   }
 }
+async function openInOrcaBrowser(url, signal) {
+  throwIfAborted(signal);
+  await new Promise((resolve, reject) => {
+    execFile("orca", ["goto", "--url", url], { timeout: 1e4, signal }, (error) => {
+      if (error) {
+        reject(error instanceof Error ? error : new Error(String(error)));
+      } else {
+        resolve();
+      }
+    });
+  });
+}
 function isRemoteSession() {
   return Boolean(process.env.SSH_CONNECTION || process.env.SSH_TTY);
 }
@@ -352,7 +364,6 @@ ${update.summary}` }],
       windowOpen = false;
       state.ui?.notify(`MCP UI window suppressed (MCP_UI_VIEWER=${viewerPref}). Open manually: ${handle.url}
 ` + `If this session is remote, run ssh -L ${handle.port}:127.0.0.1:${handle.port} -L ${handle.proxyPort}:127.0.0.1:${handle.proxyPort} <this-host> first.`, "info");
-      log.info("Suppressing MCP UI window (MCP_UI_VIEWER=" + viewerPref + ")", { url: handle.url });
     } else {
       const remoteLikely = remoteByEnv || await hasActiveRemoteLogin();
       const emitRemoteHint = async (openError, openedOnHost = false) => {
@@ -365,32 +376,17 @@ ${update.summary}` }],
           openedOnHost
         }), openError === null ? "info" : "warning");
       };
-      const glimpseDetected = !remoteByEnv && isGlimpseAvailable();
-      const useGlimpse = !remoteByEnv && (viewerPref === "glimpse" || viewerPref !== "browser" && glimpseDetected);
-      if (useGlimpse) {
+      if (viewerPref === "orca") {
         try {
-          const glimpseHtml = `<!DOCTYPE html><html><head><meta charset="utf-8"><style>body{margin:0;padding:0;width:100vw;height:100vh;overflow:hidden}iframe{width:100%;height:100%;border:none}</style></head><body><iframe src="${handle.url}"></iframe></body></html>`;
-          const glimpseWindow = await openGlimpseWindow(glimpseHtml, {
-            title: `MCP · ${request.serverName} · ${request.toolName}`,
-            width: 1000,
-            height: 800,
-            onClosed: () => {
-              if (active)
-                handle.close("glimpse-closed");
-            }
-          });
-          if (state.owner?.isActive() === false || runtimeSignal.aborted) {
-            glimpseWindow.close();
-            throwIfAborted(runtimeSignal);
-            throw new Error("MCP Glimpse window became stale before registration");
-          }
-          activeGlimpseWindow = glimpseWindow;
-          viewer = "glimpse";
+          await openInOrcaBrowser(handle.url, runtimeSignal);
           if (remoteLikely) {
             await emitRemoteHint(null, true);
           }
+          viewer = "orca";
         } catch (error) {
-          log.debug("Glimpse unavailable, using browser", {
+          if (isAbortError(error, runtimeSignal))
+            throw error;
+          log.debug("Orca browser failed, using fallback", {
             error: error instanceof Error ? error.message : String(error)
           });
           const openError = await openInBrowser(state, handle.url, runtimeSignal);
@@ -400,9 +396,45 @@ ${update.summary}` }],
           viewer = "browser";
         }
       } else {
-        const openError = await openInBrowser(state, handle.url, runtimeSignal);
-        if (openError !== null || remoteLikely) {
-          await emitRemoteHint(openError);
+        const glimpseDetected = !remoteByEnv && isGlimpseAvailable();
+        const useGlimpse = !remoteByEnv && (viewerPref === "glimpse" || viewerPref !== "browser" && glimpseDetected);
+        if (useGlimpse) {
+          try {
+            const glimpseHtml = `<!DOCTYPE html><html><head><meta charset="utf-8"><style>body{margin:0;padding:0;width:100vw;height:100vh;overflow:hidden}iframe{width:100%;height:100%;border:none}</style></head><body><iframe src="${handle.url}"></iframe></body></html>`;
+            const glimpseWindow = await openGlimpseWindow(glimpseHtml, {
+              title: `MCP · ${request.serverName} · ${request.toolName}`,
+              width: 1000,
+              height: 800,
+              onClosed: () => {
+                if (active)
+                  handle.close("glimpse-closed");
+              }
+            });
+            if (state.owner?.isActive() === false || runtimeSignal.aborted) {
+              glimpseWindow.close();
+              throwIfAborted(runtimeSignal);
+              throw new Error("MCP Glimpse window became stale before registration");
+            }
+            activeGlimpseWindow = glimpseWindow;
+            viewer = "glimpse";
+            if (remoteLikely) {
+              await emitRemoteHint(null, true);
+            }
+          } catch (error) {
+            log.debug("Glimpse unavailable, using browser", {
+              error: error instanceof Error ? error.message : String(error)
+            });
+            const openError = await openInBrowser(state, handle.url, runtimeSignal);
+            if (openError !== null || remoteLikely) {
+              await emitRemoteHint(openError);
+            }
+            viewer = "browser";
+          }
+        } else {
+          const openError = await openInBrowser(state, handle.url, runtimeSignal);
+          if (openError !== null || remoteLikely) {
+            await emitRemoteHint(openError);
+          }
         }
       }
     }

package/extensions/dm-mcp-adapter/utils.js

@@ -1,6 +1,45 @@
 import { spawnSync } from "node:child_process";
+import { existsSync, realpathSync } from "node:fs";
 import { homedir, platform } from "node:os";
-import { extname, isAbsolute, join } from "node:path";
+import { dirname, extname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import stripJsonComments from "strip-json-comments";
+export function parseJsonWithComments(raw) {
+  return JSON.parse(stripJsonComments(raw, { trailingCommas: true }));
+}
+export function resolveRealContainedPath(root, candidate, allowMissing = false) {
+  const contained = resolveContainedPath(root, candidate);
+  if (!contained)
+    return null;
+  const canonical = (path) => {
+    let existing = path;
+    while (allowMissing && !existsSync(existing)) {
+      const parent = dirname(existing);
+      if (parent === existing)
+        throw new Error("No existing path ancestor");
+      existing = parent;
+    }
+    return resolve(realpathSync(existing), relative(existing, path));
+  };
+  try {
+    return resolveContainedPath(canonical(root), canonical(contained));
+  } catch {
+    return null;
+  }
+}
+export function resolveContainedPath(root, candidate) {
+  const resolved = resolve(root, candidate);
+  const rel = relative(root, resolved);
+  return rel === "" || !rel.startsWith("..") && !rel.startsWith(sep) && !isAbsolute(rel) ? resolved : null;
+}
+export function stableStringify(value) {
+  if (value === null || typeof value !== "object")
+    return JSON.stringify(value) ?? "undefined";
+  if (Array.isArray(value)) {
+    return `[${value.map((item) => stableStringify(item)).join(",")}]`;
+  }
+  const object = value;
+  return `{${Object.keys(object).sort().map((key) => `${JSON.stringify(key)}:${stableStringify(object[key])}`).join(",")}}`;
+}
 async function execOpen(pi, target, browser, signal) {
   const os = platform();
   if (os === "darwin") {
@@ -43,16 +82,33 @@ export async function parallelLimit(items, limit, fn) {
   return results;
 }
 export function getConfigPathFromArgv() {
-  const idx = process.argv.indexOf("--mcp-config");
-  if (idx >= 0 && idx + 1 < process.argv.length) {
-    return process.argv[idx + 1];
+  let configPath;
+  for (let index = 2;index < process.argv.length; index++) {
+    const arg = process.argv[index];
+    if (arg === undefined)
+      continue;
+    if (arg === "--")
+      break;
+    if (arg === "--mcp-config") {
+      const value = process.argv[index + 1];
+      if (value !== undefined && !value.startsWith("-") && !value.startsWith("@")) {
+        configPath = value;
+        index++;
+      } else {
+        configPath = undefined;
+      }
+      continue;
+    }
+    if (arg.startsWith("--mcp-config=")) {
+      configPath = arg.slice("--mcp-config=".length);
+    }
   }
-  return;
+  return configPath;
 }
 export function interpolateEnvVars(value, environment = process.env) {
   return value.replace(/\$\{(\w+)\}/g, (_, name) => environment[name] ?? "").replace(/\$env:(\w+)/g, (_, name) => environment[name] ?? "").replace(/\{env:(\w+)\}/g, (_, name) => environment[name] ?? "");
 }
-function getMissingEnvVars(value, environment) {
+export function getMissingEnvVars(value, environment = process.env) {
   const missing = new Set;
   for (const match of value.matchAll(/\$\{(\w+)\}|\$env:(\w+)|\{env:(\w+)\}/g)) {
     const name = match[1] ?? match[2] ?? match[3];
@@ -144,11 +200,17 @@ export function resolveServerUrl(definition, environment = process.env) {
 export function resolveConfigPath(value, environment = process.env) {
   if (value === undefined)
     return;
-  const resolved = interpolateEnvVars(value, environment);
+  return expandHomePath(interpolateEnvVars(value, environment));
+}
+export function expandHomePath(value) {
+  if (value === undefined)
+    return;
+  const resolved = value;
   if (resolved === "~")
     return homedir();
-  if (resolved.startsWith("~/") || resolved.startsWith("~\\")) {
-    return join(homedir(), resolved.slice(2));
+  if (resolved.startsWith("~/") || platform() === "win32" && resolved.startsWith("~\\")) {
+    const suffix = platform() === "win32" ? resolved.slice(2).replace(/[\\/]/g, sep) : resolved.slice(2);
+    return join(homedir(), suffix);
   }
   return resolved;
 }
@@ -295,6 +357,19 @@ export function formatMcpStatus(config, message) {
     return;
   return `${config.settings?.showStatusIcon === false ? "MCP: " : "\uD83D\uDD0C MCP: "}${message}`;
 }
+export function formatMcpFooterStatus(config, enabledCount, disabledCount, connectedCount) {
+  if (enabledCount + disabledCount === 0 || config.settings?.mcpFooterStatus === "off")
+    return;
+  const footerStatus = config.settings?.mcpFooterStatus ?? "full";
+  if (footerStatus === "compact")
+    return `MCP ${connectedCount}/${enabledCount}`;
+  let status = `${enabledCount} ${enabledCount === 1 ? "server" : "servers"} enabled`;
+  if (connectedCount > 0)
+    status += ` (${connectedCount} connected)`;
+  if (disabledCount > 0)
+    status += ` (${disabledCount} disabled)`;
+  return formatMcpStatus(config, status);
+}
 export function extractToolUiStreamMode(toolMeta) {
   const uiMeta = toolMeta?.ui;
   if (!uiMeta || typeof uiMeta !== "object")

package/extensions/dm-ponytail/hooks/cursor-hooks.json

@@ -0,0 +1,17 @@
+{
+  "version": 1,
+  "hooks": {
+    "sessionStart": [
+      {
+        "command": "node \"PONYTAIL_DIR/hooks/ponytail-activate.js\"",
+        "timeout": 5
+      }
+    ],
+    "beforeSubmitPrompt": [
+      {
+        "command": "node \"PONYTAIL_DIR/hooks/ponytail-mode-tracker.js\"",
+        "timeout": 5
+      }
+    ]
+  }
+}

package/extensions/dm-ponytail/hooks/ponytail-activate.js

@@ -5,8 +5,11 @@ const { getDefaultMode, getClaudeDir, isShellSafe } = require("./ponytail-config
 const { getPonytailInstructions } = require("./ponytail-instructions");
 const {
   clearMode,
+  cursorRuleNotice,
+  cursorRulePath,
   isCodex,
   isCopilot,
+  isCursor,
   setMode,
   writeHookOutput
 } = require("./ponytail-runtime");
@@ -15,15 +18,24 @@ const settingsPath = path.join(claudeDir, "settings.json");
 const mode = getDefaultMode();
 if (mode === "off") {
   clearMode();
-  const hookOutput = isCodex || isCopilot ? "" : "OK";
+  const hookOutput = isCodex || isCopilot || isCursor ? "" : "OK";
   writeHookOutput("SessionStart", "off", hookOutput);
   process.exit(0);
 }
+if (isCursor) {
+  const rule = cursorRulePath();
+  if (rule) {
+    try {
+      writeHookOutput("SessionStart", mode, cursorRuleNotice(rule));
+    } catch (e) {}
+    process.exit(0);
+  }
+}
 try {
   setMode(mode);
 } catch (e) {}
 let output = getPonytailInstructions(mode);
-if (!isCodex && !isCopilot)
+if (!isCodex && !isCopilot && !isCursor)
   try {
     let hasStatusline = false;
     if (fs.existsSync(settingsPath)) {

package/extensions/dm-ponytail/hooks/ponytail-mode-tracker.js

@@ -1,5 +1,14 @@
 const { getDefaultMode, isDeactivationCommand, writeDefaultMode } = require("./ponytail-config");
-const { clearMode, isQoder, readMode, setMode, writeHookOutput } = require("./ponytail-runtime");
+const {
+  clearMode,
+  cursorRuleNotice,
+  cursorRulePath,
+  isCursor,
+  isQoder,
+  readMode,
+  setMode,
+  writeHookOutput
+} = require("./ponytail-runtime");
 const { getPonytailInstructions } = require("./ponytail-instructions");
 let input = "";
 let done = false;
@@ -10,6 +19,13 @@ function finish() {
   try {
     const data = JSON.parse(input.replace(/^\uFEFF/, ""));
     const prompt = (data.prompt || "").trim().toLowerCase();
+    if (isCursor && (/^[/@$]ponytail/.test(prompt) || isDeactivationCommand(prompt))) {
+      const rule = cursorRulePath();
+      if (rule) {
+        writeHookOutput("UserPromptSubmit", readMode() || "off", cursorRuleNotice(rule));
+        return;
+      }
+    }
     let modeSwitched = false;
     let deactivated = false;
     if (/^[/@$]ponytail/.test(prompt)) {
@@ -50,7 +66,10 @@ function finish() {
         setMode(mode);
         modeSwitched = true;
         if (!isQoder) {
-          writeHookOutput("UserPromptSubmit", mode, "PONYTAIL MODE CHANGED — level: " + mode);
+          const header = "PONYTAIL MODE CHANGED — level: " + mode;
+          writeHookOutput("UserPromptSubmit", mode, isCursor ? header + `
+
+` + getPonytailInstructions(mode) : header);
         }
       } else if (mode === "off") {
         clearMode();

package/extensions/dm-ponytail/hooks/ponytail-runtime.js

@@ -11,6 +11,7 @@ function isVsCodeCopilotRoot(pluginRoot) {
 const isCopilot = Boolean(process.env.COPILOT_PLUGIN_DATA) || isVsCodeCopilotRoot(process.env.CLAUDE_PLUGIN_ROOT);
 const isCodex = !isCopilot && Boolean(process.env.PLUGIN_DATA);
 const isQoder = !isCopilot && !isCodex && Boolean(process.env.QODER_SESSION_ID);
+const isCursor = !isCopilot && !isCodex && !isQoder && Boolean(process.env.CURSOR_VERSION);
 let stateDir = getClaudeDir();
 if (isCodex)
   stateDir = process.env.PLUGIN_DATA;
@@ -18,6 +19,8 @@ if (isCopilot)
   stateDir = process.env.COPILOT_PLUGIN_DATA || getClaudeDir();
 if (isQoder)
   stateDir = path.join(os.homedir(), ".qoder");
+if (isCursor)
+  stateDir = path.join(os.homedir(), ".cursor");
 const statePath = path.join(stateDir, STATE_FILE);
 function setMode(mode) {
   fs.mkdirSync(path.dirname(statePath), { recursive: true });
@@ -35,6 +38,14 @@ function readMode() {
     return null;
   }
 }
+function cursorRulePath() {
+  const root = process.env.CURSOR_PROJECT_DIR || process.cwd();
+  const rule = path.join(root, ".cursor", "rules", "ponytail.mdc");
+  return fs.existsSync(rule) ? rule : null;
+}
+function cursorRuleNotice(rule) {
+  return "PONYTAIL: the always-on Cursor rule " + rule + " is active in this workspace and " + "already carries the ponytail ruleset, so the ponytail hooks injected nothing further. " + 'Mode switching (/ponytail lite|full|ultra|off, "stop ponytail") is unavailable while ' + "that rule exists. When the user tries to switch or turn off ponytail, tell them to " + "delete that rule so hooks.json can manage the level.";
+}
 function writeHookOutput(event, mode, context = "") {
   if (isCopilot) {
     process.stdout.write(JSON.stringify(event === "SessionStart" && context ? { additionalContext: context } : {}));
@@ -62,6 +73,15 @@ function writeHookOutput(event, mode, context = "") {
     process.stdout.write(JSON.stringify(output));
     return;
   }
+  if (isCursor) {
+    if (!context)
+      return;
+    const output = { additional_context: context };
+    if (event === "UserPromptSubmit")
+      output.continue = true;
+    process.stdout.write(JSON.stringify(output));
+    return;
+  }
   if (event === "SubagentStart") {
     process.stdout.write(JSON.stringify({ hookSpecificOutput: { hookEventName: event, additionalContext: context } }));
     return;
@@ -70,8 +90,11 @@ function writeHookOutput(event, mode, context = "") {
 }
 module.exports = {
   clearMode,
+  cursorRuleNotice,
+  cursorRulePath,
   isCodex,
   isCopilot,
+  isCursor,
   isQoder,
   readMode,
   setMode,

package/extensions/dm-ponytail/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dm-ponytail",
-  "version": "4.9.0",
+  "version": "4.10.0",
   "description": "DM extension that applies Ponytail's full minimal-code mode by default",
   "type": "commonjs",
   "keywords": [

package/extensions/dm-subagents/agents/claude-code-writer.md

@@ -1,6 +1,7 @@
 ---
 name: claude-code-writer
 description: Explicit file-writing Claude Code CLI mode; requires local authentication and trusted user settings/hooks
+acceptanceRole: writer
 runner:
   type: external-cli
   adapter: claude-code-writer

package/extensions/dm-subagents/agents/codex-exec-writer.md

@@ -1,6 +1,7 @@
 ---
 name: codex-exec-writer
 description: Explicit workspace-writing one-shot execution through the installed Codex CLI
+acceptanceRole: writer
 runner:
   type: external-cli
   adapter: codex-exec-writer

package/extensions/dm-subagents/agents/cursor-agent-writer.md

@@ -1,6 +1,7 @@
 ---
 name: cursor-agent-writer
 description: Explicit workspace-writing one-shot execution through the installed Cursor CLI
+acceptanceRole: writer
 runner:
   type: external-cli
   adapter: cursor-agent-writer

package/extensions/dm-subagents/agents/evidence-auditor.md

@@ -0,0 +1,34 @@
+---
+name: evidence-auditor
+description: Independent evidence reviewer for checking whether important research claims are supported by their sources
+tools: read, web_search, fetch_content, get_search_content, source_check
+thinking: high
+systemPromptMode: replace
+inheritProjectContext: true
+inheritSkills: false
+---
+
+You are an evidence-auditing subagent.
+
+Given research findings or a brief produced by another agent, independently audit the evidence behind the small set of claims that could change the conclusion. Do not redo the original research or treat a supplied citation as proof. A URL is not evidence by itself: inspect the underlying source for material claims.
+
+Working rules:
+- Identify the decision-critical claims and prioritize claims that materially affect the recommendation or conclusion. Do not audit trivial details.
+- Distinguish evidence, source interpretation, and inference. Check whether the source actually supports the researcher's wording and level of certainty.
+- Prefer original, official, authoritative, and directly relevant sources. Flag material stale, weak, secondary, or circular sourcing.
+- Use `source_check` for important, disputed, surprising, or decision-relevant claims. It can return `supported`, `contradicted`, `unclear`, or `missing-evidence` assessments, source-quality hints, content hashes, and exact passage citations. Treat its result as validation evidence, not as a reason to skip inspecting the source.
+- Use `fetch_content` to inspect cited source pages and `get_search_content` to retrieve bounded slices of stored search or source-check content. Use `web_search` only for targeted follow-up searches needed to verify or challenge a material claim.
+- Record contradictions between claims or sources instead of silently resolving them. Preserve uncertainty when evidence is incomplete or conflicting.
+- Keep verification bounded. Report the material claims audited and any important claims left unverified; do not restart the entire research process.
+
+Output a concise audit with these sections:
+
+1. Verified claims
+2. Contradicted claims
+3. Weak / unclear / unsupported claims
+4. Material source-quality concerns
+5. Missing evidence
+6. Material contradictions
+7. Implications for the original conclusion
+
+For each material claim, include the claim, status (`supported`, `contradicted`, `unclear`, or `missing evidence`), relevant source(s), short reasoning, and confidence where useful. Explicitly label interpretation or inference. Say when no material issues were found.

package/extensions/dm-subagents/agents/researcher.md

@@ -1,7 +1,7 @@
 ---
 name: researcher
 description: Autonomous web researcher — searches, evaluates, and synthesizes a focused research brief
-tools: read, write, web_search, fetch_content, get_search_content
+tools: read, write, web_search, fetch_content, get_search_content, source_check
 thinking: medium
 systemPromptMode: replace
 inheritProjectContext: true
@@ -16,12 +16,15 @@ Given a question or topic, run focused web research and produce a concise, well-
 
 Working rules:
 - Break the problem into 2-4 distinct research angles.
-- Use `web_search` with `queries` so the search covers multiple angles instead of one generic query.
-- Use `workflow: "none"` unless the task explicitly needs the interactive curator.
-- Read the search results first. Then fetch full content only for the most promising source URLs.
-- Prefer primary sources, official docs, specs, benchmarks, and direct evidence over commentary.
-- Drop stale, redundant, or SEO-heavy sources.
-- If the first search pass leaves important gaps, search again with tighter follow-up queries.
+- Use `web_search` with `queries` so the search covers multiple angles instead of one generic query. Use `workflow: "none"` unless the task explicitly needs the interactive curator.
+- Treat search-result summaries as discovery aids, not final evidence for important claims. Fetch the original source when a claim is important, disputed, surprising, or decision-relevant.
+- Prefer primary, official, authoritative, or directly relevant sources. Keep a smaller set of strong sources rather than many weak or redundant ones; reject stale, redundant, or SEO-heavy sources, and flag stale evidence when freshness materially affects the answer.
+- Use `source_check` against fetched source content for decision-critical or disputed claims, benchmark/performance claims, pricing/licensing claims, security claims, and wording that could materially affect a recommendation. Do not use it for every trivial fact.
+- `source_check` must be registered by the loaded provider before launch. If a registered `source_check` call fails, continue by fetching and inspecting the original source directly, and disclose the validation limitation rather than failing the research run.
+- Label direct evidence, source interpretation, and researcher inference distinctly. Never present an inference as if the source stated it directly.
+- Record contradictions instead of silently resolving them. Record missing evidence when a claim cannot be verified.
+- Never invent dates, quotations, citations, or unsupported precision.
+- Stay bounded: if the first pass leaves a decision-relevant gap, run a tighter follow-up search; then report remaining uncertainty and stop.
 
 Search strategy:
 - direct answer query
@@ -37,16 +40,23 @@ Output format:
 2-3 sentence direct answer.
 
 ## Findings
-Numbered findings with inline source citations.
-1. **Finding** — explanation. [Source](url)
-2. **Finding** — explanation. [Source](url)
+Numbered, concise findings. For each decision-relevant finding include:
+1. **Claim:** the finding. **Sources:** [Source](url). **Support:** direct evidence | interpretation. **Confidence:** high | medium | low.
+
+Label any researcher inference explicitly in the explanation.
+
+## Contradictions
+Contradictory or disputed evidence, with sources. Say "None found" when applicable.
+
+## Missing evidence
+Unverified claims and unresolved questions.
 
 ## Sources
 - Kept: Source Title (url) — why it matters
-- Dropped: Source Title — why it was excluded
+- Rejected/deprioritized: Source Title — short reason
 
-## Gaps
-What could not be answered confidently. Suggested next steps.
+## Next steps
+Only the most useful follow-up research.
 
 ## Supervisor coordination
 If runtime bridge instructions identify a safe supervisor target and you are blocked or need a decision, use `contact_supervisor` with `reason: "need_decision"` and wait for the reply. Use `reason: "progress_update"` only for meaningful progress or unexpected discoveries that change the plan. Do not send routine completion handoffs; return the completed research brief normally.

package/extensions/dm-subagents/agents/reviewer.md

@@ -1,7 +1,7 @@
 ---
 name: reviewer
 description: Versatile review specialist for code diffs, plans, proposed solutions, codebase health, and PR/issue validation
-tools: read, grep, find, ls
+tools: read, grep, find, ls, watchdog_diff, contact_supervisor
 thinking: high
 systemPromptMode: replace
 inheritProjectContext: true
@@ -53,7 +53,8 @@ Review a PR or issue by understanding the context, then verifying:
 - Start from the exact diff and named source seam for code-behavior review. Use specific source, symbol, type, method, and path searches for discovery. Use broad or unscoped `grep` only when exhaustive verification is required, such as checking call sites, imports, removed names, or absence of a pattern.
 - Read the relevant files first. Read plan and progress when the task supplies them.
 - Repo-local `progress.md` files are allowed scratch/memory files. Do not flag them as repo noise, delete them, or ask to remove them just because they are untracked. If they appear in a coding repo, they should remain untracked and be covered by `.gitignore`.
-- Do not use shell commands or write files. Report any test or Git command that a supervisor must run.
+- Use `watchdog_diff` to inspect the bounded staged and unstaged working-tree delta against reviewer-launch `HEAD`, plus the bounded untracked-path inventory. It does not inspect committed ranges; when a task asks for one, require a supplied artifact or report that limitation rather than claiming the commit was reviewed.
+- Do not use shell commands, mutate the repository, or request general Git access. Report any test command that a supervisor must run.
 - Do not invent issues. Only report problems you can justify from evidence.
 - Prefer small corrective edits over broad rewrites.
 - If everything looks good, say so plainly.
@@ -79,8 +80,9 @@ Structure your findings clearly:
 When reviewing code, cite file paths and line numbers. When reviewing plans, cite specific sections and assumptions.
 
 Filter findings by evidence, not by severity. Report only concrete current issues
-that are caused or made reachable by the target diff, and support each one with
-source proof, a test or repro, or a contract contradiction. Use P0 for issues
+within the named review target, and support each one with source proof, a test
+or repro, or a contract contradiction. For a diff review, require that the issue
+is caused or made reachable by that diff. Use P0 for issues
 that block merge, P1 for issues that should be fixed before release, and P2 for
 report-only notes. Say exactly `No issues found.` when nothing qualifies.
 

package/extensions/dm-subagents/agents/scout.md

@@ -1,7 +1,7 @@
 ---
 name: scout
 description: Fast codebase recon that returns compressed context for handoff
-tools: read, grep, find, ls, bash, write
+tools: read, grep, find, ls, bash, write, contact_supervisor
 thinking: low
 systemPromptMode: replace
 inheritProjectContext: true

package/extensions/dm-subagents/agents/worker.md

@@ -2,12 +2,13 @@
 name: worker
 description: Implementation agent for normal tasks and approved oracle handoffs
 aliases: developer, coder, implementer, develop
+acceptanceRole: writer
 thinking: high
 systemPromptMode: replace
 inheritProjectContext: true
 inheritSkills: false
 tools: read, grep, find, ls, bash, edit, write, contact_supervisor
-defaultContext: fork
+defaultContext: fresh
 defaultReads: context.md, plan.md
 defaultProgress: true
 ---
@@ -16,7 +17,7 @@ You are `worker`: the implementation subagent.
 
 You are the single writer thread. Your job is to execute the assigned task or approved direction with narrow, coherent edits. The main agent and user remain the decision authority.
 
-Use the provided tools directly. First read the inherited context, supplied files, plan, task paths, and named seams. Then implement carefully and minimally. Use broad search only to verify or expand from that starting point.
+Use the provided tools directly. First read the provided context, supplied files, plan, task paths, and named seams. Then implement carefully and minimally. Use broad search only to verify or expand from that starting point.
 
 The builtin worker uses a strict tool allowlist. It does not inherit ambient extension tools from the parent session. To use an extension tool, configure a custom agent with the tool name explicitly listed in `tools` and load its provider through `extensions` or `subagentOnlyExtensions`.
 

package/extensions/dm-subagents/index.js

@@ -1,4 +1,5 @@
-const registerParentExtension = process.env.DM_SUBAGENT_CHILD === "1" ? undefined : (await import("./src/extension/index.js")).default;
+import { HERDR_PI_MODE_ENV } from "./src/runs/shared/herdr-dm-protocol.js";
+const registerExtension = process.env[HERDR_PI_MODE_ENV] === "1" ? (await import("./src/extension/herdr-dm-bridge.js")).default : process.env.DM_SUBAGENT_CHILD === "1" ? undefined : (await import("./src/extension/index.js")).default;
 export default function registerSubagentExtension(dm) {
-  registerParentExtension?.(dm);
+  registerExtension?.(dm);
 }

package/extensions/dm-subagents/inspector-runner.mjs

@@ -1,10 +1,10 @@
 import { createJiti } from "jiti";
 const jiti = createJiti(import.meta.url);
-const { runInspector } = await jiti.import("./src/inspectors/herdr/inspector-runner.js");
+const { runInspector } = await jiti.import("./src/inspectors/inspector-runner.js");
 try {
   runInspector();
 } catch (cause) {
-  process.stderr.write(`Herdr inspector failed: ${cause instanceof Error ? cause.message : String(cause)}
+  process.stderr.write(`Inspector failed: ${cause instanceof Error ? cause.message : String(cause)}
 `);
   process.exitCode = 1;
 }

package/extensions/dm-subagents/install.mjs

@@ -3,7 +3,7 @@ import * as fs from "node:fs";
 import * as path from "node:path";
 import * as os from "node:os";
 const EXTENSION_DIR = path.join(os.homedir(), ".dm", "agent", "extensions", "subagent");
-const REPO_URL = "https://github.com/nicobailon/dm-subagents.git";
+const REPO_URL = "https://github.com/nicobailon/pi-subagents.git";
 const args = process.argv.slice(2);
 const isRemove = args.includes("--remove") || args.includes("-r");
 const isHelp = args.includes("--help") || args.includes("-h");
@@ -69,7 +69,6 @@ console.log(`
 The extension is now available in dm. Tools added:
   • subagent - Delegate tasks to agents and inspect run status
   • bg_wait - Wait for background/provider/detached work without native completion notifications
-    (subagent_wait remains a deprecated compatibility alias)
 
 Documentation: ${EXTENSION_DIR}/README.md
 `);