@maxiaochao/pi-toolkit 0.13.3 → 0.13.5

package/CHANGELOG.md

@@ -1,3 +1,13 @@
+## 2026-10-22 - v0.13.5
+
+- herdr-subagents v0.7.4: preserve Codex patch editing in child allowlists and hide the parent shortcut footer hint
+- Herdr Subagents: hide the child parent-navigation footer hint while keeping `Alt+P`, `/parent`, and other extensions' editor status.
+- Herdr Subagents: permit `apply_patch` in edit-capable child CLI allowlists so editor switching does not remove the only active editing tool; preserve read-only limits and native fallback.
+
+## 2026-10-22 - v0.13.4
+
+- herdr-subagents v0.7.3: keep Persona selection lists concise
+
 ## 2026-10-21 - v0.13.3
 
 - codex-edit v0.2.0: persist personal routing rules in the Pi agent directory across package updates
@@ -9,6 +19,7 @@
 
 ## Unreleased
 
+- Herdr Subagents: show only Persona names and descriptions in model-facing selection lists, preserving diagnostics and detailed user-facing inspection.
 - Make Agent Team user-invoked only through `/skill:agent-team`, hidden from automatic model selection.
 - Add `npm run release:check -- vX.Y.Z` to wait for GitHub publication and verify exact npm versions, remote tags, integrity, and all tarball contents against the release commit, including coordinated child releases.
 

package/README.md

@@ -42,7 +42,9 @@ Each child README owns its feature description, motivation or upstream alignment
 
 Codex Edit personal routing rules belong in `~/.pi/agent/codex-edit.json`, not inside `node_modules`. User fields override bundled defaults; `models` replaces the complete default list. The file survives package updates and is shared by parent sessions and explicitly configured subagents using the same agent directory. Use `/reload` after editing it, and start new subagents. See [Codex Edit configuration](packages/codex-edit/README.md#configuration).
 
-Herdr Subagents tasks require an explicit `agent` Persona; no default `worker` is selected. Choose `reviewer` for independent reviews of proposals, designs, documents, implementations, or analysis; `explorer` for codebase investigation; `worker` for file-changing work; and `analyst` for charter-defined agent-team roles. See [built-in Personas](packages/herdr-subagents/README.md#built-in-personas) for selection guidance and the distinction between parent-facing descriptions and child instructions. Personas can opt into local extension files or npm/git Pi packages through `extensions`. Set top-level `defaultExtensions` in `~/.pi/agent/herdr-subagents.json` (or project `.pi/herdr-subagents.json`) to share a fallback list; Persona-specific lists take precedence, and `[]` clears inherited sources. This uses native Pi package semantics: package-provided skills, prompt templates, and themes may also load, and `--no-skills` does not exclude explicitly selected package skills. See the [extension-source contract](packages/herdr-subagents/README.md#explicit-extension-sources-and-pi-packages) for precedence, isolation, and examples. The [real Herdr smoke test](packages/herdr-subagents/TESTING.md) preserves the configured analyst model and explicit authentication extensions while isolating unrelated settings.
+Child panes keep `Alt+P` and `/parent` navigation without a persistent shortcut footer hint. Editor status remains owned by the loaded editor extension.
+
+Herdr Subagents tasks require an explicit `agent` Persona; no default `worker` is selected. Choose `reviewer` for independent reviews of proposals, designs, documents, implementations, or analysis; `explorer` for codebase investigation; `worker` for file-changing work; and `analyst` for charter-defined agent-team roles. Control `list` returns names and descriptions for selection, plus configuration diagnostics when present; use `/herdr-subagents agents` and `settings` for detailed configuration. See [built-in Personas](packages/herdr-subagents/README.md#built-in-personas) for selection guidance and the distinction between parent-facing descriptions and child instructions. Personas can opt into local extension files or npm/git Pi packages through `extensions`. Set top-level `defaultExtensions` in `~/.pi/agent/herdr-subagents.json` (or project `.pi/herdr-subagents.json`) to share a fallback list; Persona-specific lists take precedence, and `[]` clears inherited sources. This uses native Pi package semantics: package-provided skills, prompt templates, and themes may also load, and `--no-skills` does not exclude explicitly selected package skills. See the [extension-source contract](packages/herdr-subagents/README.md#explicit-extension-sources-and-pi-packages) for precedence, isolation, and examples. The [real Herdr smoke test](packages/herdr-subagents/TESTING.md) preserves the configured analyst model and explicit authentication extensions while isolating unrelated settings.
 
 Multiple standalone children may be installed together. `pi-openai-account-pool` may also be installed alongside the complete toolkit because the toolkit does not embed it. Every other child in the table above, including `pi-background-tasks`, is embedded, so a second install exposes the same resource twice.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@maxiaochao/pi-toolkit",
-  "version": "0.13.3",
+  "version": "0.13.5",
   "description": "Personal pi coding agent toolkit: background tasks, scheduler, /btw, /cache_export, apply_patch, browser automation, and bundled theme/skills.",
   "type": "module",
   "workspaces": [

package/packages/herdr-subagents/CHANGELOG.md

@@ -1,3 +1,14 @@
+## 2026-10-22 - v0.7.4
+
+- preserve Codex patch editing in child allowlists and hide the parent shortcut footer hint
+- Hide the child parent-navigation footer hint and clear its legacy status on reload, while retaining `Alt+P`, `/parent`, and editor/plugin status.
+- Permit `apply_patch` in the persistent CLI allowlist only for Personas that allow `edit`; test actual Pi startup selection, read-only limits and native fallback instead of relying on mocked tool lists or status labels.
+
+## 2026-10-22 - v0.7.3
+
+- keep Persona selection lists concise
+- Limit model-facing Persona listings and unknown-Persona suggestions to names and descriptions. Preserve configuration diagnostics, detailed result metadata, and the `/herdr-subagents agents` and `settings` inspection commands.
+
 ## 2026-10-21 - v0.7.2
 
 - clarify final answer submission through subagent_report

package/packages/herdr-subagents/README.md

@@ -48,6 +48,10 @@ The tools and command are registered only when Pi is running inside Herdr with a
 
 Each task starts a single-task interactive Pi process in its own Herdr pane. Herdr first confirms the interactive Pi is ready, then the prompt is delivered exactly once. Prompt acknowledgement never decides task completion. Panes remain ordinary Herdr panes: they can be focused and inspected while work is running or after it settles. An early-finishing child stays at the Pi UI while sibling tasks continue. After the whole run settles, cleanup closes an unfocused run tab immediately or waits for the user to leave a focused run tab.
 
+Use `Alt+P` or `/parent` in a child to focus its parent Agent pane. The shortcut has no persistent footer hint. Other extensions' status text, such as Codex Edit's `editor: apply_patch`, remains visible when those extensions are loaded and their editing tools are active. Changing Persona extensions does not change an already running child.
+
+For a Persona whose `tools` includes `edit`, the child CLI also permits `apply_patch` so a trusted editing extension can switch protocols. This does not load an extension or enable both editors by itself. Personas without `edit` do not receive this permission, and a child without a patch extension keeps native `edit`.
+
 Cleanup belongs to the Pi session that created the run. Starting a new Pi session never scans historical runs or closes their recorded Herdr tabs. If Pi terminates before shutdown cleanup runs, any surviving Subagent tab remains visible for explicit inspection or cleanup.
 
 ## Result protocol
@@ -119,7 +123,7 @@ A batch containing a write-capable Persona must explicitly or effectively use `c
 
 | Action | `runId` | Purpose |
 | --- | --- | --- |
-| `list` | Not accepted | List effective Personas, resolved options, and diagnostics. |
+| `list` | Not accepted | List Persona names and descriptions for task selection, plus configuration diagnostics when present. |
 | `status` | Required | Show one run and its task states. |
 | `history` | Not accepted | List durable project-local run history. |
 | `cancel` | Required | Cancel an active run. |
@@ -127,6 +131,8 @@ A batch containing a write-capable Persona must explicitly or effectively use `c
 
 Settled tasks are immutable. Follow-up work starts a new task or run; there is no resume/respond lifecycle.
 
+The model-facing `list` text does not expand tools, skills, extensions, models, thinking levels, or configuration sources. Describe routing-relevant capabilities and constraints in each Persona's description. Use `/herdr-subagents agents` and `/herdr-subagents settings` for detailed configuration; full resolved data remains in the tool result's `details` metadata.
+
 ### Slash command
 
 `/herdr-subagents` supports:

package/packages/herdr-subagents/TESTING.md

@@ -9,7 +9,8 @@ npm test --workspace @maxiaochao/pi-herdr-subagents
 It verifies:
 
 - global/project `defaultExtensions` replacement, trimming, source attribution, Persona JSON/Markdown precedence, explicit empty-list clearing, invalid-value diagnostics, and per-call reloads;
-- resolved defaults in control listings, settings output, and child CLI arguments while preserving mandatory extensions;
+- concise Persona names/descriptions in model-facing listings and unknown-Persona errors, including empty lists and visible configuration diagnostics;
+- resolved defaults in control result metadata, settings output, and child CLI arguments while preserving mandatory extensions;
 - strict serial start order at concurrency one;
 - bounded read-only parallelism;
 - ordered results despite concurrent completion;
@@ -28,6 +29,8 @@ It verifies:
 - immutable terminal task records;
 - idempotent duplicate reports and rejection of conflicting replacements;
 - keeping a settled child alive for focus-aware cleanup instead of force-exiting its TUI;
+- clearing the legacy parent shortcut footer hint while preserving other extension status, with `Alt+P` and `/parent` still focusing the exact parent pane;
+- adding `apply_patch` to the child CLI allowlist only when the Persona permits `edit`;
 - preserving the configured smoke model, thinking level, and authentication extensions while isolating unrelated settings;
 - project-over-global smoke configuration, explicit extension clearing, model overrides, and local-source paths after moving to a temporary directory.
 
@@ -39,6 +42,8 @@ Run extension source loading. The direct-Pi fixture resolves global `defaultExte
 npm run load-test --workspace @maxiaochao/pi-herdr-subagents
 ```
 
+The native CLI fixture also exercises an extension that switches `edit` to `apply_patch`. It checks the final active tools, not just status text: writable children retain the selected patch tool, read-only/no-editor children do not gain it, and children without the patch extension retain native `edit`. This deterministic probe does not call a model or test Codex Edit's parser.
+
 Run the real Herdr smoke test from a Herdr session:
 
 ```sh

package/packages/herdr-subagents/extensions/subagent-report.ts

@@ -96,7 +96,8 @@ export default function (pi: ExtensionAPI) {
 		async handler(ctx) { await returnToParent(pi, ctx); },
 	});
 	pi.on("session_start", async (_event, ctx) => {
-		if (process.env[PARENT_PANE_ENV]?.trim()) ctx.ui.setStatus("herdr-subagents-parent", `${RETURN_SHORTCUT} parent`);
+		// Remove the legacy hint on reload without touching editor/plugin status.
+		ctx.ui.setStatus("herdr-subagents-parent", undefined);
 	});
 	pi.registerTool({
 		name: "subagent_report",

package/packages/herdr-subagents/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@maxiaochao/pi-herdr-subagents",
-  "version": "0.7.2",
+  "version": "0.7.4",
   "description": "Run inspectable interactive Pi subagent batches through Herdr.",
   "type": "module",
   "keywords": [

package/packages/herdr-subagents/src/live-agent.ts

@@ -42,8 +42,11 @@ export function childPiArgs(task: LiveTaskRecord, systemPromptFile: string): str
 	for (const extension of task.extensions ?? []) args.push("--extension", extension);
 	if (task.model) args.push("--model", task.model);
 	if (task.thinking) args.push("--thinking", task.thinking);
-	if (task.tools?.length) args.push("--tools", [...new Set([...task.tools, "codemode", "subagent_report"])].join(","));
-	else args.push("--tools", "+codemode");
+	if (task.tools?.length) {
+		// Pi keeps this allowlist after startup, including editor protocol switches.
+		const editorTools = task.tools.includes("edit") ? ["apply_patch"] : [];
+		args.push("--tools", [...new Set([...task.tools, ...editorTools, "codemode", "subagent_report"])].join(","));
+	} else args.push("--tools", "+codemode");
 	for (const skill of task.skills ?? []) args.push("--skill", skill);
 	return args;
 }

package/packages/herdr-subagents/src/tool.ts

@@ -60,10 +60,7 @@ export function listText(discovery: SubagentConfiguration): string {
 	const lines = ["Available Herdr Subagents personas:"];
 	if (discovery.personas.length === 0) lines.push("- (none)");
 	for (const agent of discovery.personas) {
-		const model = agent.model ?? "unresolved";
-		const tools = agent.tools?.join(", ") ?? "Pi default built-in tools";
-		const skills = agent.skills.join(", ") || "none";
-		lines.push(`- ${agent.name}: ${agent.description} (source: ${agent.source}; access: ${agent.access}; model: ${model} [${agent.modelSource}]; thinking: ${agent.thinking ?? "default"}; tools: ${tools}; skills: ${skills}; extensions: ${agent.extensions.join(", ") || "none"} [${agent.extensionsSource}])`);
+		lines.push(`- ${agent.name}: ${agent.description}`);
 	}
 	if (discovery.diagnostics.length > 0) {
 		lines.push("", "Persona diagnostics:", ...discovery.diagnostics.map((diagnostic) => `- ${diagnostic}`));

package/packages/herdr-subagents/tests/config.mjs

@@ -4,7 +4,7 @@ import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { loadSubagentConfiguration } from "../src/config.ts";
 import { childPiArgs } from "../src/live-agent.ts";
-import { executeHerdrSubagentsControl } from "../src/tool.ts";
+import { executeHerdrSubagentsControl, listText } from "../src/tool.ts";
 
 const root = mkdtempSync(join(tmpdir(), "herdr-default-extensions-"));
 const agents = join(root, "agents");
@@ -88,7 +88,18 @@ try {
 	const response = await executeHerdrSubagentsControl({ action: "list" }, undefined, undefined, { cwd: root }, { agentsDirectory: agents, configurationPaths: paths });
 	assert.deepEqual(response.details.agents.find(({ name }) => name === "plain").extensions, ["./updated.ts"]);
 	assert.deepEqual(response.details.settings.defaultExtensions, ["./updated.ts"]);
-	assert.match(response.content[0].text, /extensions: \.\/updated\.ts \[project\]/);
+	const expectedListing = [
+		"Available Herdr Subagents personas:",
+		"- cleared: Configuration fixture",
+		"- pinned: Configuration fixture",
+		"- plain: Configuration fixture",
+	].join("\n");
+	assert.equal(response.content[0].text, expectedListing, "Model-facing listings must contain only Persona names and descriptions");
+	assert.equal(listText({ ...configuration, personas: [] }), "Available Herdr Subagents personas:\n- (none)");
+	write(paths.projectConfig, { defaultExtensions: "./invalid.ts" });
+	const diagnosed = await executeHerdrSubagentsControl({ action: "list" }, undefined, undefined, { cwd: root }, { agentsDirectory: agents, configurationPaths: paths });
+	assert.equal(diagnosed.content[0].text, `${expectedListing}\n\nPersona diagnostics:\n- project defaultExtensions must be an array of non-empty strings`, "Concise listings must still surface invalid configuration");
+	assert.deepEqual(diagnosed.details.diagnostics, ["project defaultExtensions must be an array of non-empty strings"]);
 	write(paths.projectConfig, { defaultExtensions: [] });
 	const cleared = persona(load());
 	assert.deepEqual(cleared.extensions, []);
@@ -98,6 +109,14 @@ try {
 	assert.ok(!clearedArgs.includes("./updated.ts"));
 	assert.deepEqual(selected.extensions, ["./updated.ts"]);
 	console.log("PASS defaults reach child arguments and control listings, reload per call, and preserve mandatory extensions");
+
+	const editorArgs = childPiArgs({ id: "editor", sessionFile: join(root, "editor.jsonl"), tools: ["read", "edit", "write"] }, join(root, "system.md"));
+	assert.deepEqual(editorArgs[editorArgs.indexOf("--tools") + 1].split(","), ["read", "edit", "write", "apply_patch", "codemode", "subagent_report"]);
+	const readonlyArgs = childPiArgs({ id: "readonly", sessionFile: join(root, "readonly.jsonl"), tools: ["read", "bash"] }, join(root, "system.md"));
+	assert.ok(!readonlyArgs[readonlyArgs.indexOf("--tools") + 1].split(",").includes("apply_patch"));
+	console.log("PASS edit-capable children allow the patch editor without adding it to read-only tool lists");
+
+	console.log("PASS concise Persona listings preserve diagnostics and detailed metadata; defaults reach child arguments and reload per call");
 } finally {
 	rmSync(root, { recursive: true, force: true });
 }

package/packages/herdr-subagents/tests/core-state-machine.mjs

@@ -142,7 +142,7 @@ async function run(tasks, concurrency, herdr = fakeHerdr(), signal) {
 	assert.match(laterMissing.content[0].text, /tasks\[1\]\.agent.*required/);
 	const unknown = await execute({ tasks: [{ ...missing, agent: "unknown-persona" }] });
 	assert.equal(unknown.isError, true);
-	assert.match(unknown.content[0].text, /Unknown persona 'unknown-persona'/);
+	assert.equal(unknown.content[0].text, `Unknown persona 'unknown-persona'.\n\n${listed.content[0].text}`, "Unknown-Persona errors must reuse the concise selection list");
 	assert.deepEqual(herdr.starts, [], "Invalid requests must not start an Agent");
 	assert.equal(existsSync(join(root, ".pi", "herdr-subagents", "runs")), false, "Invalid requests must not create run records");
 
@@ -287,6 +287,44 @@ assert.throws(() => applyTaskStatus(terminal, "running"), /terminal tasks are im
 	const notifications = [];
 	await configuredCommands.get("herdr-subagents").handler("settings", { cwd: lifecycleRoot, ui: { notify(message) { notifications.push(message); } } });
 	assert.match(notifications[0], /defaultExtensions=\[\] \(project\)/, "Settings must show empty defaults and their source");
+	await configuredCommands.get("herdr-subagents").handler("agents", { cwd: lifecycleRoot, ui: { notify(message) { notifications.push(message); } } });
+	assert.match(notifications[1], /: (?:package|global|project), (?:read|write), model=.*thinking=.*tools=.*skills=.*extensions=/, "User-facing inspection must retain detailed configuration fields");
+}
+
+{
+	const previousParent = process.env.PI_HERDR_SUBAGENTS_PARENT_PANE_ID;
+	process.env.PI_HERDR_SUBAGENTS_PARENT_PANE_ID = "test-workspace:parent";
+	const handlers = new Map();
+	const commands = new Map();
+	const shortcuts = new Map();
+	const calls = [];
+	const statuses = new Map([
+		["herdr-subagents-parent", "alt+p parent"],
+		["codex-edit", "editor: apply_patch"],
+	]);
+	const ctx = { ui: { notify() {}, setStatus(key, value) { statuses.set(key, value); } } };
+	try {
+		registerSubagentReport({
+			registerTool() {},
+			registerCommand(name, command) { commands.set(name, command); },
+			registerShortcut(key, shortcut) { shortcuts.set(key, shortcut); },
+			on(name, handler) { handlers.set(name, handler); },
+			events: { on() {} },
+			async exec(command, args) { calls.push([command, args]); return { code: 0, stdout: "", stderr: "" }; },
+		});
+		await handlers.get("session_start")({}, ctx);
+		assert.equal(statuses.get("herdr-subagents-parent"), undefined, "child startup clears the old parent shortcut hint");
+		assert.equal(statuses.get("codex-edit"), "editor: apply_patch", "child navigation must not overwrite editor status");
+		await commands.get("parent").handler("", ctx);
+		await shortcuts.get("alt+p").handler(ctx);
+		assert.deepEqual(calls, [
+			["herdr", ["agent", "focus", "test-workspace:parent"]],
+			["herdr", ["agent", "focus", "test-workspace:parent"]],
+		], "the parent command and shortcut must remain functional without a footer hint");
+	} finally {
+		if (previousParent === undefined) delete process.env.PI_HERDR_SUBAGENTS_PARENT_PANE_ID;
+		else process.env.PI_HERDR_SUBAGENTS_PARENT_PANE_ID = previousParent;
+	}
 }
 
 {

package/packages/herdr-subagents/tests/extension-sources-load.mjs

@@ -19,6 +19,15 @@ try {
 	}));
 	writeFileSync(join(packageDirectory, "extension.ts"), `export default function (pi) {
 		pi.registerCommand("package-extension", { description: "Package extension loaded", handler() {} });
+		pi.registerTool({
+			name: "apply_patch", label: "Patch editor probe", description: "Editing protocol selection probe",
+			parameters: { type: "object", properties: {}, additionalProperties: false },
+			async execute() { return { content: [], details: {} }; },
+		});
+		pi.on("session_start", () => {
+			const active = pi.getActiveTools();
+			if (active.includes("edit")) pi.setActiveTools([...active.filter((name) => name !== "edit"), "apply_patch"]);
+		});
 	}`);
 	writeFileSync(join(packageDirectory, "skills", "package-skill", "SKILL.md"), "---\nname: package-skill\ndescription: Package skill loading probe\n---\n# Probe\n");
 	writeFileSync(join(packageDirectory, "prompts", "package-prompt.md"), "Package prompt loading probe.");
@@ -58,6 +67,22 @@ try {
 	for (const command of ["file-extension", "package-extension", "skill:package-skill", "package-prompt", "parent"]) assert.ok(loaded.commands.includes(command), `Missing ${command}: ${JSON.stringify(loaded)}`);
 	assert.deepEqual([...loaded.tools].sort(), ["read", "subagent_report"]);
 	console.log("PASS real Pi loads defaultExtensions file and package sources, including package skills/prompts despite discovery flags, without broadening the direct-Pi tool allowlist");
+
+	for (const [id, tools, extensions, expected] of [
+		["patch-editor", ["read", "edit", "write"], analyst.extensions, ["read", "write", "apply_patch", "subagent_report"]],
+		["no-editor", ["read", "write"], analyst.extensions, ["read", "write", "subagent_report"]],
+		["native-editor", ["read", "edit", "write"], [fileExtension, probe], ["read", "edit", "write", "subagent_report"]],
+	]) {
+		const childArgs = childPiArgs({ id, sessionFile: join(root, `${id}.jsonl`), tools, extensions }, join(root, "system.md"));
+		const builtin = childArgs.indexOf("builtin:codemode");
+		childArgs.splice(builtin - 1, 2);
+		const child = spawnSync(process.env.PI_TEST_BINARY?.trim() || "pi", [...childArgs, "--offline"], { cwd: root, env, encoding: "utf8", timeout: 30_000 });
+		assert.equal(child.error, undefined, String(child.error));
+		assert.equal(child.status, 0, child.stderr || child.stdout);
+		const actual = JSON.parse(readFileSync(resultPath, "utf8"));
+		assert.deepEqual([...actual.tools].sort(), [...expected].sort(), `${id}: the real CLI must preserve the selected editing protocol`);
+	}
+	console.log("PASS real Pi CLI permits apply_patch for edit-capable children, preserves native fallback, and denies it to read-only/no-editor children");
 } finally {
 	rmSync(root, { recursive: true, force: true });
 }

package/packages/herdr-subagents/tests/run-tests.mjs

@@ -430,7 +430,7 @@ try {
 	await childEvents.get("session_start")?.({}, childContext);
 	await childCommands.get("parent")?.handler("", childContext);
 	await childShortcuts.get("alt+p")?.handler(childContext);
-	check("child command and shortcut return to the exact parent Agent pane", childExecCalls.length === 2 && childExecCalls.every(([command, args]) => command === "herdr" && args.join(",") === "agent,focus,w1:p-parent") && childStatuses.some(([, value]) => value.includes("alt+p")));
+	check("child command and shortcut return to the exact parent Agent pane without a footer hint", childExecCalls.length === 2 && childExecCalls.every(([command, args]) => command === "herdr" && args.join(",") === "agent,focus,w1:p-parent") && childStatuses.every(([, value]) => value === undefined));
 	const reportToolDirectory = join(root, "child-report-tool");
 	const reportAttemptId = "11111111-1111-4111-8111-111111111111";
 	mkdirSync(reportToolDirectory, { recursive: true });
@@ -661,7 +661,7 @@ try {
 	const extensionHistory = await listSubagentHistory(extensionRoot);
 	check("history exposes saved extension sources", JSON.stringify(extensionHistory[0]?.tasks[0]?.extensions) === JSON.stringify(extensionSources));
 	const extensionList = await executeHerdrSubagents({ action: "list" }, undefined, undefined, { cwd: extensionRoot }, extensionDependencies);
-	check("persona listing shows extension sources and their precedence", extensionList.content[0].text.includes("npm:@example/pi-tools@1.0.0") && extensionList.content[0].text.includes("project persona"));
+	check("persona listing keeps extension configuration in metadata only", !extensionList.content[0].text.includes("npm:@example/pi-tools@1.0.0") && extensionList.details.agents[0].extensionsSource === "project persona" && JSON.stringify(extensionList.details.agents[0].extensions) === JSON.stringify(extensionSources));
 	writeFileSync(extensionPaths.projectConfig, JSON.stringify({ personas: { routed: { extensions: [] } } }));
 	check("empty project extension list clears lower-precedence sources", extensionPersona()?.extensions?.length === 0 && extensionPersona()?.extensionsSource === "project persona");
 	const extensionResumeHerdr = fakeHerdr();