@oldflag2333333/pi-subagent 0.1.1 → 0.1.3

package/README.md

@@ -8,7 +8,7 @@ A **profile** defines a specialist's instructions, tools, and optional skills or
 
 ## Install
 
-You need **Node.js 22.19+**, **[Pi](https://pi.dev) 1.0.4+**, and **Herdr**. To launch specialists, run Pi inside a Herdr workspace with the `herdr` command available.
+You need **Node.js 22.19+**, **[Pi](https://pi.dev) 1.2.0+**, and **Herdr**. To launch specialists, run Pi inside a Herdr workspace with the `herdr` command available.
 
 ```bash
 pi install npm:@oldflag2333333/pi-subagent
@@ -117,9 +117,28 @@ Add these fields to `config.json` as needed:
 | `"model": "provider/model-id"` | Choose a model available in your Pi configuration. |
 | `"thinkingLevel": "high"` | Request a thinking level supported by the selected model. |
 | `"skills": ["skill-name", "./path/to/SKILL.md"]` | Include installed skills or paths relative to the profile. |
+| `"extensions": ["npm:pi-model-calibration", "./hooks.ts"]` | Explicitly load extra extensions in Subs, including prompt/event plugins that provide no tools. |
 
 For a persistent specialist started with `/sub:reviewer`, invoking the command again from the same saved Main session resumes it after closure. A different Main session gets its own specialist. Manual-only profiles are not available for Pi to delegate on its own.
 
+### Sub extension allowlist
+
+Add this to the profile's `config.json`, for example:
+
+```json
+"extensions": ["npm:pi-model-calibration"]
+```
+
+Entries accept Pi's npm, `git:`, HTTP(S) repository URLs, `builtin:` identifiers, and local extension files or package directories. Relative local paths resolve from the **configuration file's directory**; absolute paths and `~/` work too. Missing local paths fail startup; repeated entries load once. Package specs are resolved by Pi in the Sub and may download or install packages, never while Main reads the profile.
+
+`npm:` / `git:` entries use Pi's temporary package cache; a globally installed package may not be present there. For offline use, list the installed entry file directly, for example `"extensions": ["~/.pi/agent/npm/node_modules/pi-model-calibration/index.ts"]`, to avoid another download.
+
+Omitting the field or using `[]` loads no extra plugins. Subs still use `--no-extensions`: only communication/Herdr integration, normal MCP support, selected tools' extension dependencies, and this allowlist load explicitly. Other Main plugins are not inherited. Project profiles still require project trust; same-named overrides replace rather than merge allowlists.
+
+This field controls **Sub launches only**; it does not dynamically load extensions in the current process started with `pi --profile`. Use Pi's `-e` or normal extension configuration for that case. Loading an extension does not automatically add its tools to the profile's `tools`; custom non-MCP tools must still be available in Main.
+
+Extensions can execute code, read context, and change prompts. **This is not a sandbox**; list only trusted plugins. After editing, reload Main and close/reopen affected Subs. For `model-calibration`, its rules must also match the Sub's selected model before calibration text is injected.
+
 ### Profile-specific skills
 
 Put skills inside the profile directory to load them only when that profile is selected. No `skills` field is needed:
@@ -157,7 +176,7 @@ Close any orphaned Sub tabs before cleaning; the command only deletes files. Pro
 
 ## Things to know
 
-Messages use custom inbox cards. An idle receiver also gets a short user-role wake prompt to preserve its profile instructions. See [messaging behavior and the Pi wake workaround](docs/messaging.md).
+Messages use custom inbox cards and Pi’s native run preparation, without extra user-role wake messages. See [messaging behavior](docs/messaging.md).
 
 - **Herdr is required for Subs.** There is no headless fallback. Up to four Subs can be open at once, and Subs cannot delegate further.
 - **Profiles are not a sandbox.** Subs run as your OS user. A read-only role is not a filesystem permission boundary.
@@ -165,7 +184,7 @@ Messages use custom inbox cards. An idle receiver also gets a short user-role wa
 - **Subs have separate conversations.** They receive their task, profile, and normal project context—not Main's chat history. Include the details they need in the task.
 - **Reloading Main does not close Subs.** Close tabs you no longer need. Hard crashes may require manual cleanup.
 
-If a profile is missing or fails to start, run `/profiles` first. Check its directory/name match, project trust, and any referenced tools or skills. If Herdr is unavailable, confirm Pi is running inside a Herdr workspace.
+If a profile is missing or fails to start, run `/profiles` first. Check its directory/name match, project trust, and any referenced tools, skills, or extensions. If Herdr is unavailable, confirm Pi is running inside a Herdr workspace.
 
 To hide or show Pi Subagent Subs in Herdr's Agents panel, see the optional [Herdr companion plugin](herdr-plugin/README.md).
 

package/README.zh-CN.md

@@ -8,7 +8,7 @@
 
 ## 安装
 
-需要 **Node.js 22.19+**、**[Pi](https://pi.dev) 1.0.4+** 和 **Herdr**。启动助手时，Pi 必须运行在 Herdr 工作区中，并且能调用 `herdr` 命令。
+需要 **Node.js 22.19+**、**[Pi](https://pi.dev) 1.2.0+** 和 **Herdr**。启动助手时，Pi 必须运行在 Herdr 工作区中，并且能调用 `herdr` 命令。
 
 ```bash
 pi install npm:@oldflag2333333/pi-subagent
@@ -117,9 +117,28 @@ pi --profile reviewer
 | `"model": "provider/model-id"` | 指定 Pi 配置中可用的模型。 |
 | `"thinkingLevel": "high"` | 请求所选模型支持的思考级别。 |
 | `"skills": ["skill-name", "./path/to/SKILL.md"]` | 加载已安装的技能，或使用相对于角色配置的路径。 |
+| `"extensions": ["npm:pi-model-calibration", "./hooks.ts"]` | 为子助手显式加载额外扩展，包括不提供工具的提示词或事件插件。 |
 
 通过 `/sub:reviewer` 启动的持久化助手，在关闭后，可以从同一个已保存的主会话中再次执行该命令来恢复。不同的主会话各自拥有独立的助手。设置为手动调用的角色不能由 Pi 自行委派。
 
+### 子助手扩展白名单
+
+在角色的 `config.json` 中添加，例如：
+
+```json
+"extensions": ["npm:pi-model-calibration"]
+```
+
+支持 Pi 的 npm、`git:`、HTTP(S) 仓库地址、`builtin:` 标识，以及本地扩展文件或包目录。本地相对路径以 **配置文件所在目录** 为基准，也支持绝对路径和 `~/`。本地路径不存在时，启动会报错；重复条目只加载一次。包来源交给子助手中的 Pi 解析，可能触发下载或安装，不会在主 Pi 读取角色配置时执行。
+
+`npm:` / `git:` 条目使用 Pi 的临时包缓存，已全局安装的包不一定在该缓存中；离线使用时，可直接列出已安装的入口文件，例如 `"extensions": ["~/.pi/agent/npm/node_modules/pi-model-calibration/index.ts"]`，避免重新下载。
+
+不配置或设置 `[]` 时，不额外加载插件。子助手仍使用 `--no-extensions`：只显式加载通信与 Herdr 集成、常规 MCP 支持、角色工具依赖的扩展，以及此白名单，不会自动继承主 Pi 的其他插件。项目角色仍须经过项目信任，同名角色覆盖时不会合并白名单。
+
+这个字段只控制 **Sub 启动**，不会给使用 `pi --profile` 的当前进程动态加载扩展；该场景仍需使用 Pi 的 `-e` 或常规扩展配置。扩展的加载不会自动将其工具加入角色的 `tools`；自定义非 MCP 工具仍须在主 Pi 中可用。
+
+扩展可以执行代码、读取上下文并修改提示词，**白名单不是沙箱**，只添加你信任的插件。修改后重载主 Pi，并关闭、重新打开相关子助手。对于 `model-calibration`，加载后还需其规则匹配子助手所选模型才会注入校准提示词。
+
 ### 角色专属技能
 
 将技能放在角色目录中，就只会在选中该角色时加载，无需填写 `skills` 字段：
@@ -157,7 +176,7 @@ reviewer/
 
 ## 使用须知
 
-助手间消息保留自定义收件卡片。接收方空闲时，会额外出现一条简短的用户角色唤醒消息，以确保角色指令正常加载。详见[消息机制与 Pi 唤醒问题的绕过方案](docs/messaging.md)。
+助手间消息使用自定义收件卡片，由 Pi 原生处理启动准备，不再添加用户角色唤醒消息。详见[消息机制](docs/messaging.md)。
 
 - **子助手依赖 Herdr。** 不支持无界面后台运行；最多同时打开四个子助手，子助手不能继续委派。
 - **角色配置不是沙箱。** 子助手以你的系统用户身份运行，配置“只读角色”不等于限制文件系统权限。
@@ -165,7 +184,7 @@ reviewer/
 - **子助手拥有独立对话。** 它会收到任务、角色配置和常规项目上下文，但不会收到主对话的聊天记录。请在任务中提供必要信息。
 - **重载主 Pi 不会关闭子助手。** 不再需要时请关闭标签页；异常崩溃后可能需要手动清理。
 
-如果找不到角色或启动失败，先运行 `/profiles`，检查目录名与 `name` 是否一致、项目是否受信任，以及引用的工具和技能是否可用。如果提示 Herdr 不可用，请确认 Pi 正在 Herdr 工作区内运行。
+如果找不到角色或启动失败，先运行 `/profiles`，检查目录名与 `name` 是否一致、项目是否受信任，以及引用的工具、技能和扩展是否可用。如果提示 Herdr 不可用，请确认 Pi 正在 Herdr 工作区内运行。
 
 如需在 Herdr 的 Agents 面板中隐藏或显示 Pi Subagent 子助手，可安装可选的 [Herdr 配套插件](herdr-plugin/README.md)（英文说明）。
 

package/docs/messaging.md

@@ -1,28 +1,17 @@
 # Message delivery and rendering
 
-Main ↔ Sub messages remain custom inbox cards. Delivery uses the same `parentWake` wrapper in both directions:
+Pi Subagent requires **Pi 1.2.0 or newer**. Main ↔ Sub messages use `pi.sendMessage()` with `deliverAs: "followUp"` and `triggerTurn: true` in both directions:
 
-- **Busy receiver:** `pi.sendMessage()` with `deliverAs: "followUp"` and `triggerTurn: true`, using Pi's native queue.
-- **Idle receiver:** append the card with `pi.sendMessage(..., { triggerTurn: false })`, then start the run with a short, fixed `pi.sendUserMessage(..., { deliverAs: "steer" })` prompt. This goes through normal input preparation and `before_agent_start`.
+- **Busy receiver:** Pi queues the custom message behind its current work.
+- **Idle receiver:** Pi prepares and starts the run, including `before_agent_start`, the tool loadout, and prompt sections. The event has `messageType: "custom"`, with the starting `message` rather than a user `prompt`.
 
-The wake is a real, visible user-role message added by the extension, not a duplicate of the peer's message. It only asks the receiving agent to process its inbox within its existing task and authority. Peer text stays in the custom card and is never submitted as executable slash-command input.
+There are no synthetic user-role wake messages, version fallbacks, or patches to Pi internals. Custom messages do not pass through user-input processing or execute peer text as slash commands or templates.
 
 ## Delivery guarantees
 
 - `content` carries the peer message and routing instructions; `details` carries rendering and receipt metadata and is not sent to the model.
 - Custom cards retain their title, collapsed/expanded rendering, and saved-session rendering.
-- A message file is removed only after its receipt appears in the receiving session. Legacy user-message receipts remain recognized.
-- An idle burst shares one wake while that wake is starting. Reservations survive `/reload`, are scoped to the receiving session, and clear on `agent_start` or non-reload shutdown.
-- If a wake never starts, a later idle delivery can request another wake after ten seconds. The deadline does not create a timer or promise autonomous retry after an input hook handles the wake.
-- A synchronous wake failure keeps the message file retryable; retrying does not append the custom card again. Pi's fire-and-forget extension API does not expose asynchronous prompt failures as delivery receipts.
+- A message file is removed only after its receipt appears in the receiving session. Existing user-message receipts remain recognized to avoid redelivery of saved messages; this is data compatibility, not support for older Pi runtimes.
+- In-flight message IDs prevent duplicate submission. Synchronous submission failures leave the file retryable. Pi owns run preparation and queueing; the plugin does not keep a separate wake reservation or retry timer.
 
-## Why the workaround exists
-
-Pi 1.0.4 and 1.1.0 have an idle custom-message wake path that bypasses `before_agent_start` and can drop profile prompt sections:
-
-- [#5581: custom-message starts bypass run preparation](https://github.com/earendil-works/pi/issues/5581)
-- [#10267: contributed prompt sections are dropped](https://github.com/earendil-works/pi/issues/10267)
-
-The implementation adapts [nicobailon/pi-subagents' parentWake](https://github.com/nicobailon/pi-subagents/blob/0c33ec7cb26ed1db270d72e746c3c975be880aeb/src/shared/parent-wake.ts), with retries for synchronous wake failures. Attribution and the MIT license are in [third-party notices](third-party-notices.md).
-
-Real Pi SDK tests cover the first idle wake, subsequent turns, busy follow-ups, and reload. The previous upstream TODO is now a required passing regression test. This workaround does not patch Pi internals or claim to fix unrelated retry/resume paths in Pi itself.
+Pi 1.2.0 includes the native custom-message preparation fix in [#10739](https://github.com/earendil-works/pi/pull/10739), resolving [#5581](https://github.com/earendil-works/pi/issues/5581) and [#10267](https://github.com/earendil-works/pi/issues/10267). Real SDK regression tests require profile sections to remain present on the first idle delivery, subsequent turns, busy follow-ups, and after reload. No upstream TODO or workaround is retained.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oldflag2333333/pi-subagent",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Reusable specialist profiles and independent sub-agents for Pi",
   "type": "module",
   "license": "MIT",
@@ -45,15 +45,15 @@
   "peerDependencies": {
     "@earendil-works/pi-agent-core": "*",
     "@earendil-works/pi-ai": "*",
-    "@earendil-works/pi-coding-agent": ">=1.0.4",
+    "@earendil-works/pi-coding-agent": ">=1.2.0",
     "@earendil-works/pi-tui": "*",
     "typebox": "*"
   },
   "devDependencies": {
-    "@earendil-works/pi-agent-core": "^1.0.4",
-    "@earendil-works/pi-ai": "^1.0.4",
-    "@earendil-works/pi-coding-agent": "^1.0.4",
-    "@earendil-works/pi-tui": "^1.0.4",
+    "@earendil-works/pi-agent-core": "^1.2.0",
+    "@earendil-works/pi-ai": "^1.2.0",
+    "@earendil-works/pi-coding-agent": "^1.2.0",
+    "@earendil-works/pi-tui": "^1.2.0",
     "@types/node": "^22.15.0",
     "@types/semver": "^7.8.0",
     "semver": "^7.8.5",

package/src/inbox-state.ts

@@ -2,7 +2,6 @@ import type { ExtensionAPI, ExtensionContext } from "@earendil-works/pi-coding-a
 import { MESSAGE_TYPE, type TalkDirection } from "./channel.js";
 import type { DelegateManifest, TalkMessage } from "./types.js";
 import { readTalkReceipt } from "./talk-message.js";
-import { parentWakeFor } from "./parent-wake.js";
 
 type ReadonlySessionManager = ExtensionContext["sessionManager"];
 interface PendingTalk {
@@ -69,7 +68,6 @@ export function bindInboxEvents(pi: ExtensionAPI, getContext: () => ExtensionCon
 	pi.on("agent_start", () => {
 		const ctx = getContext();
 		if (!ctx) return;
-		parentWakeFor(pi, ctx).agentStarted();
 		const value = state(ctx);
 		value.runSerial++;
 		value.aborted = ctx.signal?.aborted === true;
@@ -78,10 +76,6 @@ export function bindInboxEvents(pi: ExtensionAPI, getContext: () => ExtensionCon
 		ctx.signal?.addEventListener("abort", () => { if (value.runSerial === runSerial) value.aborted = true; }, { once: true });
 		wakePending();
 	});
-	pi.on("session_shutdown", (event, ctx) => {
-		// Use the event context: manager shutdown may already have cleared its active context.
-		parentWakeFor(pi, ctx).sessionShutdown(event.reason);
-	});
 	pi.on("agent_end", (event) => {
 		const ctx = getContext();
 		if (!ctx) return;

package/src/profiles/loader.ts

@@ -26,6 +26,7 @@ const ALLOWED_KEYS = new Set([
 	"invocation",
 	"tools",
 	"skills",
+	"extensions",
 	"instructions",
 ]);
 
@@ -48,6 +49,7 @@ function parseProfile(value: unknown, expectedName: string): ProfileDefinition {
 	}
 	if (!stringArray(value.tools, 128) || value.tools.length === 0) throw new Error("tools must be a non-empty string array with at most 128 entries");
 	if (value.skills !== undefined && !stringArray(value.skills, 128)) throw new Error("skills must be a string array with at most 128 entries");
+	if (value.extensions !== undefined && !stringArray(value.extensions, 128)) throw new Error("extensions must be a string array with at most 128 entries");
 	if (value.sessionPersistence !== undefined && value.sessionPersistence !== "ephemeral" && value.sessionPersistence !== "persistent") {
 		throw new Error("sessionPersistence must be 'ephemeral' or 'persistent'");
 	}
@@ -76,6 +78,7 @@ function parseProfile(value: unknown, expectedName: string): ProfileDefinition {
 			? { sessionPersistence: value.sessionPersistence }
 			: {}),
 		...(Array.isArray(value.skills) ? { skills: [...new Set(value.skills as string[])] } : {}),
+		...(Array.isArray(value.extensions) ? { extensions: [...new Set((value.extensions as string[]).map((entry) => entry.trim()))] } : {}),
 		...(typeof value.instructions === "string" ? { instructions: value.instructions } : {}),
 	};
 }
@@ -294,6 +297,23 @@ function discoverProfileSkills(profile: LoadedProfile): string[] {
 	return skills;
 }
 
+function resolveExtension(reference: string, profile: LoadedProfile): string {
+	// Pi resolves package and built-in specs in the Sub process. Do not install
+	// packages or execute extension code while reading profiles in Main.
+	if (/^(?:npm:|git:|https?:\/\/|builtin:)/.test(reference)) return reference;
+	const resolved = path.resolve(path.dirname(profile.sourcePath), expandHome(reference));
+	let stat: fs.Stats;
+	try {
+		stat = fs.statSync(resolved);
+	} catch {
+		throw new Error(`Profile '${profile.name}' extension is missing or unreadable: ${resolved}.`);
+	}
+	if (!stat.isFile() && !stat.isDirectory()) {
+		throw new Error(`Profile '${profile.name}' has an unsupported extension path: ${resolved}.`);
+	}
+	return resolved;
+}
+
 export function resolveProfile(name: string, cwd: string, includeProject: boolean, options: { agentOnly?: boolean } = {}): ResolvedProfile {
 	const catalog = loadProfiles(cwd, includeProject);
 	const invalid = catalog.diagnostics.map((item) => `${item.path}: ${item.message}`);
@@ -320,6 +340,6 @@ export function resolveProfile(name: string, cwd: string, includeProject: boolea
 	return {
 		...profile,
 		resolvedSkills,
-		resolvedExtensions: [],
+		resolvedExtensions: [...new Set((profile.extensions ?? []).map((extension) => resolveExtension(extension, profile)))],
 	};
 }

package/src/profiles/tool-sources.ts

@@ -16,7 +16,8 @@ interface ToolSource {
 
 export function resolveToolExtensions(profile: ResolvedProfile, tools: ToolSource[]): ResolvedProfile {
 	const available = new Map(tools.map((tool) => [tool.name, tool]));
-	const extensionPaths = new Set<string>();
+	// Keep explicitly allowlisted event-only extensions alongside tool providers.
+	const extensionPaths = new Set<string>(profile.resolvedExtensions);
 	for (const name of profile.tools) {
 		// Native MCP connects asynchronously; do not require its tools in Main yet.
 		if (isMcpTool(name)) continue;

package/src/profiles/types.ts

@@ -13,6 +13,8 @@ export interface ProfileDefinition {
 	invocation?: ProfileInvocation;
 	tools: string[];
 	skills?: string[];
+	/** Additional extensions explicitly loaded in Subs, not inherited from Main. */
+	extensions?: string[];
 	instructions?: string;
 }
 

package/src/talk-delivery.ts

@@ -2,7 +2,6 @@ import type { ExtensionAPI, ExtensionContext } from "@earendil-works/pi-coding-a
 import { MESSAGE_TYPE, removeTalk, type TalkDirection } from "./channel.js";
 import type { DelegateManifest, TalkMessage } from "./types.js";
 import { readTalkReceipt } from "./talk-message.js";
-import { parentWakeFor } from "./parent-wake.js";
 import { canUseNativeQueue, forgetTalk, markTalkQueued, rememberTalk } from "./inbox-state.js";
 
 function hasReceipt(ctx: ExtensionContext, direction: TalkDirection, runId: string, messageId: string): boolean {
@@ -27,7 +26,6 @@ export function deliverTalk(
 	content: string,
 ): "acknowledged" | "waiting" | "sent" {
 	if (hasReceipt(ctx, direction, manifest.runId, message.id)) {
-		if (!parentWakeFor(pi, ctx).retryFailedWake()) return "waiting";
 		forgetTalk(ctx, direction, manifest.runId, message.id);
 		removeTalk(channelDir, direction, message.id);
 		return "acknowledged";
@@ -39,9 +37,8 @@ export function deliverTalk(
 	try {
 		// Pi owns waiting behind current work, not Pi Subagent. In-flight IDs prevent
 		// repeated file notifications from submitting the same follow-up twice.
-		// Keep peer content in the custom inbox card. Idle runs use a separate,
-		// fixed user wake so Pi assembles the profile sections through its input pipeline.
-		parentWakeFor(pi, ctx).sendMessage({
+		// Pi 1.2+ prepares idle custom-message runs and preserves their prompt sections.
+		pi.sendMessage({
 			customType: MESSAGE_TYPE,
 			content,
 			display: true,

package/docs/third-party-notices.md

@@ -1,25 +0,0 @@
-# Third-party notices
-
-`src/parent-wake.ts` adapts the parent wake workaround from [nicobailon/pi-subagents](https://github.com/nicobailon/pi-subagents/blob/0c33ec7cb26ed1db270d72e746c3c975be880aeb/src/shared/parent-wake.ts).
-
-## pi-subagents — MIT License
-
-Copyright (c) 2026 Nico Bailon
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.

package/src/parent-wake.ts

@@ -1,86 +0,0 @@
-// Adapted from nicobailon/pi-subagents (MIT), src/shared/parent-wake.ts.
-// Copyright (c) 2026 Nico Bailon. See docs/third-party-notices.md.
-import type { ExtensionAPI, ExtensionContext } from "@earendil-works/pi-coding-agent";
-
-// Shared by Main and Sub. Peer content stays in the custom message, never in this prompt.
-export const PARENT_WAKE_TEXT = "Process the new Pi Subagent inbox messages above and continue the task already authorized for this session. Follow your profile and communication protocol. Do not infer new user authorization.";
-export const WAKE_PENDING_MS = 10_000;
-
-type WakeContext = Pick<ExtensionContext, "isIdle" | "sessionManager">;
-type WakeReservation = { sessionId: string; sentAt?: number; failed?: boolean };
-const reservationsSymbol = Symbol.for("pi-subagent.parent-wake-reservations.v1");
-const wakeGlobal = globalThis as typeof globalThis & { [reservationsSymbol]?: WeakMap<object, WakeReservation> };
-const reservations = wakeGlobal[reservationsSymbol] ?? (wakeGlobal[reservationsSymbol] = new WeakMap<object, WakeReservation>());
-
-export interface ParentWake {
-	sendMessage(...args: Parameters<ExtensionAPI["sendMessage"]>): void;
-	/** A custom receipt alone must not acknowledge a synchronously failed wake. */
-	retryFailedWake(): boolean;
-	bindSession(ctx: WakeContext): void;
-	agentStarted(): void;
-	sessionShutdown(reason: string | undefined): void;
-}
-
-export function createParentWake(pi: Pick<ExtensionAPI, "sendMessage" | "sendUserMessage">, now: () => number = Date.now): ParentWake {
-	let ctx: WakeContext;
-	let reservation: WakeReservation = { sessionId: "" };
-	const wake = () => {
-		if (reservation.sentAt !== undefined && now() - reservation.sentAt < WAKE_PENDING_MS) return;
-		reservation.sentAt = now();
-		try {
-			// Steer safely queues the wake if another prompt starts a run first.
-			pi.sendUserMessage(PARENT_WAKE_TEXT, { deliverAs: "steer" });
-			reservation.failed = false;
-		} catch (error) {
-			reservation.sentAt = undefined;
-			reservation.failed = true;
-			throw error;
-		}
-	};
-	return {
-		sendMessage(message, options) {
-			if (options?.triggerTurn !== true || !ctx.isIdle()) {
-				pi.sendMessage(message, options);
-				return;
-			}
-			// Pi's idle custom-message wake bypasses before_agent_start (#5581/#10267).
-			// Retain custom rendering but use native user-input preparation to start the run.
-			pi.sendMessage(message, { triggerTurn: false });
-			wake();
-		},
-		retryFailedWake() {
-			if (!reservation.failed) return true;
-			if (!ctx.isIdle()) return false;
-			wake();
-			return true;
-		},
-		bindSession(context) {
-			ctx = context;
-			const sessionId = context.sessionManager.getSessionId();
-			const retained = reservations.get(context.sessionManager);
-			reservation = retained?.sessionId === sessionId ? retained : { sessionId };
-			reservations.set(context.sessionManager, reservation);
-		},
-		agentStarted() {
-			reservation.sentAt = undefined;
-			reservation.failed = false;
-		},
-		sessionShutdown(reason) {
-			if (reason !== "reload") {
-				reservation.sentAt = undefined;
-				reservation.failed = false;
-			}
-		},
-	};
-}
-
-const runtimes = new WeakMap<ExtensionAPI, ParentWake>();
-export function parentWakeFor(pi: ExtensionAPI, ctx: WakeContext): ParentWake {
-	let wake = runtimes.get(pi);
-	if (!wake) {
-		wake = createParentWake(pi);
-		runtimes.set(pi, wake);
-	}
-	wake.bindSession(ctx);
-	return wake;
-}