@piagent/platform 1.48.1 → 1.48.3

package/packages/piagent-core/managed/review-snapshot-worker.mjs

@@ -27,12 +27,40 @@ function repositoryOf(file) {
   for (let dir = path.posix.dirname(file); dir !== '.'; dir = path.posix.dirname(dir)) if (fs.existsSync(path.join(dir, '.git'))) return dir;
   return null;
 }
+// The repositories below a folder that is none itself (clones side by side),
+// relative to the folder. A repository's own folders are not searched.
+const SEARCH_DEPTH = 3, MAX_REPOSITORIES = 64, NOT_SEARCHED = new Set(['node_modules', 'vendor', 'dist', 'build', 'target']);
+function childRepositories() {
+  const found = [];
+  const search = (dir, depth) => {
+    let entries; try { entries = fs.readdirSync(dir || '.', { withFileTypes: true }); } catch { return; }
+    for (const entry of entries.sort((a, b) => a.name < b.name ? -1 : 1)) {
+      if (!entry.isDirectory() || entry.name.startsWith('.') || NOT_SEARCHED.has(entry.name) || found.length >= MAX_REPOSITORIES) continue;
+      const child = dir ? `${dir}/${entry.name}` : entry.name;
+      if (fs.existsSync(path.join(child, '.git'))) found.push(child);
+      else if (depth < SEARCH_DEPTH) search(child, depth + 1);
+    }
+  };
+  search('', 1);
+  return found;
+}
+const repoGit = (repository, args) => git(['-C', repository, ...args]);
+const repoHead = repository => { try { return repoGit(repository, ['rev-parse', '--verify', '-q', 'HEAD^{commit}']).trim(); } catch { return ''; } };
 const mode = process.argv[2];
 // The arguments after the mode: a scope file, then the commit the patch starts
 // from (the turn's starting HEAD; commits made since are part of the change).
 // While HEAD has not moved, the patch is the plain one against HEAD.
 const head = () => { try { return git(['rev-parse', '--verify', '-q', 'HEAD^{commit}']).trim(); } catch { return ''; } };
 if (mode === 'head') { process.stdout.write(head() || 'none'); process.exit(0); }
+// "heads": where each repository below the folder stands, so a commit made
+// during the turn stays part of its change, as `base` does in one repository.
+if (mode === 'heads') {
+  const heads = insideWorkTree() ? {} : Object.fromEntries(childRepositories().map(r => [r, repoHead(r)]).filter(([, sha]) => sha));
+  const name = `heads-${randomUUID()}.json`, data = Buffer.from(JSON.stringify(heads));
+  fs.writeFileSync(path.join(os.tmpdir(), name), data, { mode: 0o600, flag: 'wx' });
+  process.stdout.write(`${sha256(data)} ${data.length} ${name}`);
+  process.exit(0);
+}
 // "since <ref>": the commit a reference names, when HEAD descends from it (a
 // review of the commits made since); "branch-base": where this branch left
 // the default branch (or, on it, its upstream), when commits came since.
@@ -53,19 +81,29 @@ if (mode === 'branch-base') {
 }
 const extra = process.argv.slice(3), given = extra.find(a => /^[0-9a-f]{40}([0-9a-f]{24})?$/.test(a));
 const base = given && given !== head() ? given : 'HEAD';
+// `bases-….json` (from "heads"): the commit each repository below the folder
+// started the turn on; a repository not named is compared with its HEAD.
+const basesName = extra.find(a => a.startsWith('bases-'));
+if (basesName !== undefined && !/^bases-[0-9a-f-]{36}\.json$/.test(basesName)) throw Error('review-scope-invalid');
+const bases = basesName ? JSON.parse(fs.readFileSync(path.join(os.tmpdir(), basesName), 'utf8')) : {};
+const baseOf = repository => /^[0-9a-f]{40}([0-9a-f]{24})?$/.test(bases[repository] ?? '') ? bases[repository] : 'HEAD';
 // "files": what each changed or new file holds now (a hash, "deleted"), so
 // the runtime can tell which files one conversation's command changed.
 if (mode === 'files') {
-  const changed = git(['diff', '--name-only', '--no-renames', '--relative', '-z', base, '--', '.']).split('\0').filter(Boolean);
-  const fresh = git(['ls-files', '--others', '--exclude-standard', '-z']).split('\0').filter(Boolean);
-  if (changed.length + fresh.length > MAX_UNTRACKED * 4) throw Error('review-untracked-limit');
+  // In a folder of several repositories each one answers for its own files,
+  // named from the folder. Without this a command's changes there have no
+  // owner and a review of them cannot run (seen 2026-10-30: `not_git`).
+  const repositories = insideWorkTree() ? [] : childRepositories();
+  const listed = (run, from, prefix) => [...run(['diff', '--name-only', '--no-renames', '--relative', '-z', from, '--', '.']).split('\0'), ...run(['ls-files', '--others', '--exclude-standard', '-z']).split('\0')].filter(Boolean).map(name => prefix + name);
+  const all = repositories.length ? repositories.flatMap(r => { try { return listed(args => repoGit(r, args), baseOf(r), `${r}/`); } catch { return []; } }) : listed(git, base, '');
+  if (all.length > MAX_UNTRACKED * 4) throw Error('review-untracked-limit');
   const print = name => {
     let stat; try { stat = fs.lstatSync(name); } catch { return 'deleted'; }
     if (stat.isSymbolicLink()) return 'link:' + sha256(fs.readlinkSync(name));
     if (stat.isDirectory()) return 'dir:' + sha256(fs.readdirSync(name).sort().join('\0'));
     return stat.size > HASHED_FILE ? `size:${stat.size}:${stat.mtimeMs}` : sha256(fs.readFileSync(name)) + ':' + (stat.mode & 0o777);
   };
-  const files = Object.fromEntries([...new Set([...changed, ...fresh])].sort().map(name => [name, print(name)]));
+  const files = Object.fromEntries([...new Set(all)].sort().map(name => [name, print(name)]));
   const name = `files-${randomUUID()}.json`, data = Buffer.from(JSON.stringify(files));
   fs.writeFileSync(path.join(os.tmpdir(), name), data, { mode: 0o600, flag: 'wx' });
   process.stdout.write(`${sha256(data)} ${data.length} ${name}`);
@@ -73,20 +111,23 @@ if (mode === 'files') {
 }
 // A scope (a file the runtime wrote in this boundary's temporary directory):
 // only these paths, the ones this conversation changed, make the patch.
-const scopeName = extra.find(a => a !== given);
+const scopeName = extra.find(a => a !== given && a !== basesName);
 if (scopeName !== undefined && !/^scope-[0-9a-f-]{36}\.json$/.test(scopeName)) throw Error('review-scope-invalid');
 const scope = scopeName ? new Set(JSON.parse(fs.readFileSync(path.join(os.tmpdir(), scopeName), 'utf8'))) : null;
 if (scope && [...scope].some(p => typeof p !== 'string' || !p || path.isAbsolute(p) || p.split('/').includes('..'))) throw Error('review-scope-invalid');
 // A folder that is not a repository but holds several (clones side by side):
 // each changed path is diffed in the repository that holds it, against that
 // repository's HEAD, with its paths kept relative to the folder. A path no
-// repository holds is named, not read. With no scope there is nothing to
-// tell which repositories to read: the folder is not a Git repository.
+// repository holds is named, not read. With no scope, every repository's
+// changes make the patch; a conversation with no change yet has an empty one.
 const repositories = [], outside = [];
 let patch = '', paths;
-if (scope && scope.size && !insideWorkTree()) {
+const several = insideWorkTree() ? [] : childRepositories();
+if (scope && !scope.size && several.length) paths = [];
+else if ((scope ? scope.size : several.length) && !insideWorkTree()) {
   const groups = new Map();
-  for (const file of [...scope].sort()) {
+  if (!scope) for (const repository of several) groups.set(repository, ['.']);
+  for (const file of [...(scope ?? [])].sort()) {
     const repository = repositoryOf(file);
     if (repository === null) { outside.push(file); continue; }
     if (!groups.has(repository)) groups.set(repository, []);
@@ -95,9 +136,9 @@ if (scope && scope.size && !insideWorkTree()) {
   if (!groups.size) throw Error('managed-review-patch-unreadable: not a git repository');
   paths = [];
   for (const [repository, files] of groups) {
-    const spec = files.map(p => ':(literal)' + p), run = args => git(['-C', repository, ...args]);
+    const spec = files.map(p => p === '.' ? '.' : ':(literal)' + p), run = args => repoGit(repository, args);
     repositories.push(repository);
-    patch += run(['diff', '--binary', '--no-ext-diff', '--no-textconv', '--no-renames', `--src-prefix=a/${repository}/`, `--dst-prefix=b/${repository}/`, 'HEAD', '--', ...spec]);
+    patch += run(['diff', '--binary', '--no-ext-diff', '--no-textconv', '--no-renames', `--src-prefix=a/${repository}/`, `--dst-prefix=b/${repository}/`, baseOf(repository), '--', ...spec]);
     paths.push(...run(['ls-files', '--others', '--exclude-standard', '-z', '--', ...spec]).split('\0').filter(Boolean).map(p => `${repository}/${p}`));
   }
   paths.sort();

package/packages/piagent-core/managed/session.mjs

@@ -20,7 +20,7 @@ import { runHelper } from './helper-run.mjs';
 import { askTool } from './member-questions.mjs';
 import { setTimeout as sleep } from 'node:timers/promises';
 import { stageCompaction, compactEarly, backOffFailedCompaction, trackCompaction, boundRequestImages } from './compaction.mjs';
-import { readPatchDigest, readPatchSnapshot, readChangedFiles, readHead } from './patch-snapshot.mjs';
+import { readPatchDigest, readPatchSnapshot, readChangedFiles, readHead, readRepositoryHeads } from './patch-snapshot.mjs';
 import { memberTurn } from './continuation.mjs';
 import { workflowPolicy, repositoryChecks, sessionPlanTool, currentPlan, workflowPrompt, RunProcess, completionGate, pendingBaseline, pendingPaths, pendingHead, processEditTools } from './workflow.mjs';
 import { workflowContextTool, workflowContextExtension } from './workflow-context.mjs';
@@ -29,13 +29,13 @@ import { HELPER_CALLS, HELPER_ROLES, helperRoles, helperPrompt, webPrompt, deleg
 import { loadAgentResources } from './agent-skills.mjs';
 import { loadPiagentThemes } from '../runtime/terminal/terminal-style.mjs';
 import { restorePermission, recordBypass, permissionSetter } from './permission.mjs';
-import { commandTools, servicesPrompt } from './command-tools.mjs'; import { attachMemory, memoryToolsFor, openRound, closeRound, prepareMemoryContext, trackMemoryLessons } from './memory.mjs';
+import { commandTools, servicesPrompt } from './command-tools.mjs'; import { waiveChecksTool } from './check-waiver.mjs'; import { attachMemory, memoryToolsFor, openRound, closeRound, prepareMemoryContext, trackMemoryLessons } from './memory.mjs';
 
 const PROVIDER = 'agent_watch_managed';
 export const HELPER_BEAT_MS = 60_000;
 // Who the agent is: the model account may put another product's name in an
 // earlier system line; the member is talking to Piagent.
-const BASE_PROMPT = 'You are Piagent, the company coding assistant. If an earlier system line gives you another product name, that line belongs to the model account: when asked who you are, say you are Piagent, the company coding assistant. Work directly on the user request. Do not require task contracts or workflow commands. ' + UNTRUSTED_RULE + ' Never claim a stale review covers changed code. When the request leaves a decision open that changes the result and you cannot settle it from the code or a subagent, ask the member with ask_user before you act on a guess. To hand a file back to the member, keep it in the project and link it with its project path, such as [report.pdf](out/report.pdf) or [app.ts:42](src/app.ts:42): the web view opens that file (code at the line, images and documents as a preview).';
+const BASE_PROMPT = 'You are Piagent, the company coding assistant. If an earlier system line gives you another product name, that line belongs to the model account: when asked who you are, say you are Piagent, the company coding assistant. Work directly on the user request. Do not require task contracts or workflow commands. ' + UNTRUSTED_RULE + ' Never claim a stale review covers changed code. When the request leaves a decision open that changes the result and you cannot settle it from the code or a subagent, ask the member with ask_user before you act on a guess. To send the member a picture or a file in the chat, keep it in the project and write ![name](its/project/path) in your answer, such as ![Logo](design/logo.svg) or ![report.pdf](out/report.pdf): the web view draws a picture in place and shows any other file as a card to open or download; say the path too, for the Terminal. To point at code, link it, such as [app.ts:42](src/app.ts:42): the web view opens it at the line.';
 // Folders outside the project the member points to (an @ mention, a folder
 // they name) are readable for reference; the sandbox keeps them read-only.
 const referencePrompt = home => ` The member may point you to folders outside the project for reference (an @path mention or a folder they name): read them with read, ls, grep and find. They are read-only: changes go in the project only. In those tools ~ is the member's home folder (${home}); in bash ~ is a private empty folder, so use absolute paths there.`;
@@ -129,7 +129,7 @@ export class ManagedSession {
     if (roles.length) customTools.push({ name: 'delegate', label: 'Subagent', description: delegateDescription(roles) + SPEC_PROMPT,
       parameters: delegateParameters(), // the brief and its structured fields (helper-settlement.mjs)
       execute: (_id, args, signal) => self.delegate(delegateArgs(self, args), signal) });
-    customTools.push(sessionPlanTool(self), ...(roles.length ? [resolveTool(self)] : [])); // the objection ledger's decisions (ledger.mjs)
+    customTools.push(sessionPlanTool(self), waiveChecksTool(self), ...(roles.length ? [resolveTool(self)] : [])); // the member's waiver of checks (check-waiver.mjs), the objection ledger's decisions (ledger.mjs)
     // The member decides what the request leaves open: numbered options, or their own words.
     customTools.push(workflowContextTool(() => self.session.sessionManager));
     customTools.push(askTool(self), ...memoryToolsFor(self, agentDir)); // team memory's tools, once Studio answered memory here (memory.mjs)
@@ -264,7 +264,7 @@ export class ManagedSession {
           // during the turn is still its change.
           const pending = pendingBaseline(manager);
           self.ownPaths = new Set(pending !== null ? pendingPaths(manager) : []);
-          self.base = (pending !== null ? pendingHead(manager) : null) ?? await readHead(self.boundary);
+          self.base = (pending !== null ? pendingHead(manager) : null) ?? await readHead(self.boundary); self.repositoryBases = await readRepositoryHeads(self.boundary);
           self.run.startDigest = pending ?? await self.digest(); await openRound(self, manager, text); // sends what waited; a new conversation gets the team brief
         } catch (error) { self.preflight = describeFailure('main', failureText(error)); }
         self.activePrompt = true;
@@ -430,14 +430,14 @@ export class ManagedSession {
   // Whether this conversation changed code, and whether a check ran on it,
   // look only at the files it changed: another conversation (or the member)
   // changing other files in the same folder is not this run's change.
-  async changeDigest() { return readPatchDigest(this.boundary, this.ownPaths, this.base); }
+  async changeDigest() { return readPatchDigest(this.boundary, this.ownPaths, this.base, this.repositoryBases); }
   async folderDigest() { try { return await readPatchDigest(this.boundary); } catch { return null; } }
   // What a reviewer reads: this conversation's files; before it changed any,
   // the whole folder (the member's own changes, asked to be reviewed).
   reviewScope() { return this.ownPaths.size ? this.ownPaths : null; }
-  async patchSnapshot() { return readPatchSnapshot(this.boundary, this.reviewScope(), this.base); }
-  async patchDigest() { return readPatchDigest(this.boundary, this.reviewScope(), this.base); }
-  async changedFiles() { try { return await readChangedFiles(this.boundary, this.base); } catch { return null; } }
+  async patchSnapshot() { return readPatchSnapshot(this.boundary, this.reviewScope(), this.base, this.repositoryBases); }
+  async patchDigest() { return readPatchDigest(this.boundary, this.reviewScope(), this.base, this.repositoryBases); }
+  async changedFiles() { try { return await readChangedFiles(this.boundary, this.base, this.repositoryBases); } catch { return null; } }
   // A write or edit names its file; a command, the files it changed.
   claimPath(raw) {
     if (typeof raw !== 'string' || !raw) return;

package/packages/piagent-core/managed/workflow.mjs

@@ -1,7 +1,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { reviewUnavailableReason } from './patch-snapshot.mjs';
-import { failureCode } from '../runtime/managed-failure.mjs';
+import { failureCode, unnamedFailureText } from '../runtime/managed-failure.mjs';
 import { TsDiagnostics } from './ts-diagnostics.mjs';
 import { checkpointsOf } from './checkpoints.mjs';
 import { discoverDeliveryContext } from './delivery-context.mjs';
@@ -148,7 +148,7 @@ export function workflowPrompt(policy, checks) {
   if (policy.plan !== 'off') lines.push(`- Plan: for work with several steps keep a checklist with update_plan and update it as you go. When the member asks for several items (plans, files, tickets), put every item in the checklist and work through all of them; do not end your turn to report between items.${policy.plan === 'require' ? ' For a complex task, file edits are refused until a plan exists. A checklist left with pending steps sends you back to the next one until every step is completed or deferred: if you cannot go on without the member, ask with ask_user. Mark a step deferred only when the member asked to leave it for later or it is no longer needed; never mark completed a step you did not do.' : ''}`);
   if (policy.verify !== 'off') {
     const list = checks.commands.length ? `${checks.commands.map(c => '`' + c + '`').join(', ')}${checks.source === 'detected' ? ' (detected; the repository declares none in AGENTS.md "## Checks")' : ''}` : 'none declared: choose the tests, type check or build that cover the change';
-    lines.push(`- Verify: after changing code, run the repository checks that cover the change and fix failures before you finish. Repository checks: ${list}.${policy.verify === 'require' ? ' The turn does not end until a check has passed on the final code.' : ''}`);
+    lines.push(`- Verify: after changing code, run the repository checks that cover the change and fix failures before you finish. Repository checks: ${list}.${policy.verify === 'require' ? ' The turn does not end until a check has passed on the final code.' : ''} Only the member may skip the checks: when they ask to, call waive_checks with their words; never skip them on your own.`);
   }
   // What each severity asks: blocking is fixed or argued, major decided, minor only listed.
   const severities = ' Blocking findings: fix them, or reject one with resolve_objection and the reviewer judges your reason; a disagreement that remains goes to the member. Major findings: fix them or reject them with resolve_objection; no new review follows. Minor findings are listed for the member and need nothing.';
@@ -350,7 +350,7 @@ export async function completionGate(managed, run, signal) {
       // The member declined the approval a check needed (a JDK, Docker, the
       // network): asking again would only repeat the same answer.
       if (policy.verify === 'require' && !run.verified && run.approvalDeclined && run.fixLoops > 0) verifyGaveUp = true;
-      if (policy.verify === 'require' && !run.verified && !run.docsOnly && !verifyGaveUp) {
+      if (policy.verify === 'require' && !run.verified && !run.docsOnly && !verifyGaveUp && run.waivedDigest !== digest) {
         run.fixLoops += 1;
         const list = run.checks.commands.length ? run.checks.commands.map(c => '`' + c + '`').join(', ') : 'the tests, type check or build that cover the change';
         await send(`Harness process check: code changed in this turn, but no check has passed on the current code. Run the checks that cover your change (${list}) and fix what fails. If a check cannot run because the machine lacks something (a runtime such as a JDK, Docker, a database or another service, the network), request the approval that makes it run (run_with_network, run_with_docker, start_docker, run_on_host) or ask the member with ask_user, then run it; install or start nothing without that approval. If it fails for a reason unrelated to your change, say so plainly.`,
@@ -367,8 +367,9 @@ export async function completionGate(managed, run, signal) {
         try { await managed.delegate({ role: 'review', task: brief }, signal, { harness: true }); }
         catch (error) {
           run.reviewUnavailable = !stopped(); run.reviewUnavailableReason = reviewUnavailableReason(error?.message); interrupted = stopped();
-          // Why the review could not run, as a code only (the report says "failed").
-          if (run.reviewUnavailable) try { session.sessionManager.appendCustomEntry('agent-watch-failure-detail', { role: 'review', code: failureCode(error?.message) }); } catch { /* the report still says it */ }
+          // Why the review could not run: its code, and the redacted words of a
+          // failure no code names (the report says only "failed").
+          if (run.reviewUnavailable) try { session.sessionManager.appendCustomEntry('agent-watch-failure-detail', { role: 'review', code: failureCode(error?.message), ...(unnamedFailureText(error?.message) ? { detail: unnamedFailureText(error?.message) } : {}) }); } catch { /* the report still says it */ }
           break;
         } finally { managed.reviewFocus = null; }
         continue;
@@ -441,8 +442,8 @@ export async function completionGate(managed, run, signal) {
   if (!run.changed && !run.disputes.length && !ledgerOf(run).length) return;
   const finalPlan = currentPlan(session.sessionManager), planOpen = run.planUpdated ? finalPlan?.plan?.filter(p => p.status === 'pending' || p.status === 'in_progress').length ?? 0 : 0;
   const status = { verified: run.verified, reviewed: run.reviewed, blockingOpen: run.blockingOpen, checks: run.checksRun, fixLoops: run.fixLoops,
-    ...(planOpen ? { planOpen } : {}), ...(run.planSkipped ? { planSkipped: true } : {}), ...(run.disputes.length ? { disputes: run.disputes.length } : {}), ...(run.changed ? {} : { unchanged: true }) };
-  const words = [...(run.changed ? [run.verified ? 'a check passed on the final code' : policy.verify === 'off' ? null : run.docsOnly ? 'only documentation changed: no check needed' : 'no check passed on the final code',
+    ...(planOpen ? { planOpen } : {}), ...(run.planSkipped ? { planSkipped: true } : {}), ...(!run.verified && run.waivedDigest === digest ? { checksWaived: true } : {}), ...(run.disputes.length ? { disputes: run.disputes.length } : {}), ...(run.changed ? {} : { unchanged: true }) };
+  const words = [...(run.changed ? [run.verified ? 'a check passed on the final code' : policy.verify === 'off' ? null : run.docsOnly ? 'only documentation changed: no check needed' : run.waivedDigest === digest ? 'no check passed on the final code: the member waived the checks' : 'no check passed on the final code',
     run.reviewed ? (run.blockingOpen ? `review: ${run.blockingOpen} blocking issue(s) still open` : 'review: no blocking issue') : policy.review === 'off' ? null : run.reviewUnavailable ? `review could not run (${run.reviewUnavailableReason})` : 'not reviewed',
     run.planSkipped ? 'code was changed before the required plan existed' : null, planOpen ? `plan: ${planOpen} step(s) not completed` : null] : []),
     run.disputes.length ? `${run.disputes.length} disagreement(s) between the main agent and a subagent go to the member` : null, ledgerWords(run)].filter(Boolean);

package/packages/piagent-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@piagent/core",
-  "version": "1.48.1",
+  "version": "1.48.3",
   "type": "module",
   "private": true,
   "license": "MIT",

package/packages/piagent-core/runtime/update/terminal-reload.mjs

@@ -0,0 +1,122 @@
+// Every open Terminal moves to a new Piagent release without being closed.
+//
+// `piagent reload` (and `piagent-update` once it installed a release) writes
+// one request file. Each Terminal started before that request takes it when it
+// is idle: no run going, nothing queued, nothing typed in the editor. A run in
+// progress is never cut: the footer says the reload waits, and it happens when
+// the run settles. How a Terminal reloads is its own: the personal Terminal
+// runs Pi's /reload (Piagent's extensions are read again from disk), the
+// company Terminal starts again in place on the same conversation, since its
+// company code is loaded once per process.
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+
+const REQUEST_FILE = "piagent-reload.json";
+const POLL_MS = 2_000;
+const STATUS_KEY = "piagent-reload";
+
+const requestPath = (home) => path.join(home ?? os.homedir(), ".pi", REQUEST_FILE);
+
+export function requestTerminalReload({ home, version = null, piHost = null, now = Date.now() } = {}) {
+  const file = requestPath(home);
+  fs.mkdirSync(path.dirname(file), { recursive: true });
+  const temporary = `${file}.${process.pid}.tmp`;
+  fs.writeFileSync(temporary, `${JSON.stringify({ version, piHost, at: now })}\n`, { mode: 0o600 });
+  fs.renameSync(temporary, file);
+  return { version, piHost, at: now };
+}
+
+export function readReloadRequest(home) {
+  try {
+    const value = JSON.parse(fs.readFileSync(requestPath(home), "utf8"));
+    if (!Number.isFinite(value?.at)) return null;
+    return { at: value.at, version: typeof value.version === "string" ? value.version : null, piHost: typeof value.piHost === "string" ? value.piHost : null };
+  } catch { return null; }
+}
+
+// Whether this Terminal may reload now without losing anything the member did.
+function idle(ctx) {
+  try {
+    if (typeof ctx?.isIdle === "function" && !ctx.isIdle()) return false;
+    if (typeof ctx?.hasPendingMessages === "function" && ctx.hasPendingMessages()) return false;
+    const typed = typeof ctx?.ui?.getEditorText === "function" ? ctx.ui.getEditorText() : "";
+    return !String(typed ?? "").trim();
+  } catch { return false; }
+}
+
+// `apply(ctx, request)` reloads this Terminal; it runs at most once per
+// process. Only Terminals with a UI take requests: scripted runs keep theirs.
+export function watchTerminalReload(pi, { apply, home, startedAt = Date.now(), pollMs = POLL_MS }) {
+  let ctx = null, applied = false, waiting = false, timer = null;
+  // A ctx kept from an earlier session (replaced, reloaded) throws on any use:
+  // a check that meets one does nothing, and the next session_start brings a new one.
+  const check = async () => {
+    let request;
+    try {
+      if (applied || !ctx?.hasUI) return;
+      request = readReloadRequest(home);
+      if (!request || request.at <= startedAt) return;
+      if (!idle(ctx)) {
+        if (!waiting) { waiting = true; ctx.ui?.setStatus?.(STATUS_KEY, `⟳ Nạp Piagent${request.version ? ` ${request.version}` : " mới"} khi xong lượt này`); }
+        return;
+      }
+      applied = true;
+      ctx.ui?.setStatus?.(STATUS_KEY, undefined);
+    } catch { return; }
+    try { await apply(ctx, request); }
+    catch (error) {
+      applied = false;
+      try { ctx.ui?.notify?.(`Chưa nạp được Piagent mới: ${error instanceof Error ? error.message : String(error)}`, "warning"); } catch { /* the session is gone */ }
+    }
+  };
+  const keep = (_event, next) => { ctx = next; };
+  pi.on("session_start", (event, next) => {
+    keep(event, next);
+    if (!timer) { timer = setInterval(() => { void check(); }, pollMs); timer.unref?.(); }
+  });
+  pi.on("agent_start", keep);
+  // The moment a run settles is the moment a waiting reload can happen.
+  pi.on("agent_settled", (event, next) => { keep(event, next); setTimeout(() => { void check(); }, 300).unref?.(); });
+  pi.on("session_shutdown", () => { if (timer) clearInterval(timer); timer = null; ctx = null; });
+  return { check };
+}
+
+// The personal Terminal: Pi's /reload reads Piagent's extensions again from
+// disk and keeps the conversation. A request naming another Pi host than the
+// one running cannot be met that way: the member is told to open it again.
+const RELOADED_FROM = "PIAGENT_RELOADED_FROM";
+// The Pi this process runs: the package of the CLI that started it.
+function runningPiVersion() {
+  try {
+    for (let dir = path.dirname(fs.realpathSync(process.argv[1])), depth = 0; depth < 6; depth += 1, dir = path.dirname(dir)) {
+      try { const manifest = JSON.parse(fs.readFileSync(path.join(dir, "package.json"), "utf8")); if (manifest.name === "@earendil-works/pi-coding-agent") return manifest.version; } catch { /* keep walking up */ }
+    }
+  } catch { /* unknown */ }
+  return null;
+}
+export function registerPersonalTerminalReload(pi, { installed, home = undefined }) {
+  pi.registerCommand("piagent-reload", { description: "Nạp lại Piagent (bản vừa cập nhật) mà không đóng Terminal",
+    handler: async (_args, ctx) => {
+      await ctx.waitForIdle();
+      process.env[RELOADED_FROM] = installed ?? "?";
+      await ctx.reload();
+    } });
+  pi.on("session_start", (_event, ctx) => {
+    const from = process.env[RELOADED_FROM];
+    if (from === undefined) return;
+    delete process.env[RELOADED_FROM];
+    // Said once the reloaded Terminal has drawn itself: a notice during the reload is lost.
+    const text = from === installed ? `Đã nạp lại Piagent ${installed}.` : `Đã nạp Piagent ${installed} (trước đó ${from}).`;
+    setTimeout(() => { try { ctx.ui?.notify?.(text, "info"); } catch { /* the Terminal closed meanwhile */ } }, 300).unref?.();
+  });
+  watchTerminalReload(pi, { home, apply: async (ctx, request) => {
+    if (ctx.mode !== "tui") return;
+    const VERSION = runningPiVersion();
+    if (request.piHost && VERSION && request.piHost !== VERSION) {
+      ctx.ui.notify(`Piagent ${request.version ?? "mới"} chạy trên Pi ${request.piHost}, Terminal này đang dùng Pi ${VERSION}: thoát rồi mở lại \`piagent\` để dùng bản mới.`, "warning");
+      return;
+    }
+    await pi.sendUserMessage("/piagent-reload", { expandPromptTemplates: true });
+  } });
+}

package/packages/piagent-core/runtime/update/terminal-update-offer.mjs

@@ -88,7 +88,7 @@ export function registerTerminalUpdateOffer(pi, { installed, packageRoot, restar
     if (!result.ok) { ctx.ui.notify(`Chưa cập nhật được Piagent. Chi tiết trong ${result.log}. Có thể chạy \`piagent-update\` trong terminal.`, "error"); return; }
     updated = version; status(undefined);
     const extra = afterUpdate();
-    ctx.ui.notify(`Đã cập nhật Piagent ${installed} → ${version}. Thoát rồi mở lại \`${restart}\` để dùng bản mới.${extra ? ` ${extra}` : ""}`, "info");
+    ctx.ui.notify(`Đã cập nhật Piagent ${installed} → ${version}. Terminal này tự nạp bản mới khi rảnh và giữ nguyên cuộc trò chuyện (hoặc thoát rồi mở lại \`${restart}\`).${extra ? ` ${extra}` : ""}`, "info");
   };
   const offer = async (ctx, { force = false } = {}) => {
     if (asking || updated || !ctx?.hasUI || ctx.ui?.[GATEWAY_UI] || !ctx.ui?.select) return;

package/packages/piagent-webui/dist/client/assets/{ActivityPanel-DxQ3_dyT.js → ActivityPanel-Bv-jc1s3.js}

@@ -1 +1 @@
-import{n as e,r as t}from"./rolldown-runtime-hePW80VL.js";import{Dn as n,Fn as r}from"./vendor-CSDKB7mU.js";import{i,n as a}from"./ui-preferences-0waeSO-S.js";import{B as o,x as s}from"./api-BQS4Dtrr.js";import{c}from"./view-model-CWNiS4JN.js";var l=t(r(),1);function u(e,t=`vi`){let n=e.state===`running`?`running`:e.state===`failed`?`failed`:`passed`,r=n===`running`?t===`vi`?`đang chạy`:`running`:n===`failed`?t===`vi`?`thất bại`:`failed`:t===`vi`?`hoàn tất`:`completed`,i=e.startedAt??e.finishedAt??``;return{activityRef:`live.${e.toolCallRef}`,kind:[`bash`,`shell`,`exec`].includes(e.toolLabel)?`command`:`tool`,state:n,label:`${e.toolLabel} ${r}`,preview:t===`vi`?`Cập nhật trực tiếp từ Gateway`:`Live update from the Gateway`,toolCallId:e.toolCallRef,toolName:e.toolLabel,commandDigest:null,logRef:null,exitCode:null,exitCodeExact:!1,startedAt:i,finishedAt:n===`running`?null:e.finishedAt??i}}function d(e,t=`vi`){let n=e.state===`failed`?t===`vi`?`Lượt chạy gặp lỗi`:`Operation failed`:e.state===`blocked`?t===`vi`?`Lượt chạy bị chặn`:`Operation blocked`:e.state===`aborted`?t===`vi`?`Lượt chạy đã dừng`:`Operation stopped`:t===`vi`?`Chưa xác định kết quả lượt chạy`:`Operation outcome unknown`;return{activityRef:e.activityRef,kind:`system`,state:e.state,label:n,preview:e.reasonCode,toolCallId:null,toolName:null,commandDigest:null,logRef:null,exitCode:null,exitCodeExact:!1,startedAt:e.settledAt,finishedAt:e.settledAt}}function f(e,t,n,r=`vi`,i){let a=[...e,...t],o=new Set(a.map(e=>e.activityRef)),s=n.filter(e=>!o.has(e.activityRef)).map(e=>d(e,r));if(i===void 0)return{rows:[...e,...s,...t],terminalCount:s.length,runningCount:e.length};let c=i.filter(e=>e.state===`running`).map(e=>u(e,r));return{rows:[...c,...s,...t],terminalCount:s.length,runningCount:c.length}}function p(e,t=`vi`){return e.state===`passed`&&/ recovered$/i.test(e.label)?t===`vi`?`Đã khôi phục`:`Recovered`:e.state===`passed`&&/ warning$/i.test(e.label)?t===`vi`?`Đã xử lý cảnh báo`:`Handled warning`:e.state===`passed`&&e.exitCodeExact?`Pass · exit ${e.exitCode??0}`:e.state===`failed`&&e.exitCodeExact?`Fail · exit ${e.exitCode??`?`}`:e.state===`blocked`?`Blocked`:e.state===`aborted`?t===`vi`?`Đã dừng`:`Stopped`:e.state===`unknown`?t===`vi`?`Chưa xác định`:`Unknown`:e.state===`failed`?t===`vi`?`Thất bại`:`Failed`:e.state===`running`?t===`vi`?`Đang chạy`:`Running`:e.state.replaceAll(`-`,` `)}function m(e,t=`vi`){let n=Date.parse(e.startedAt),r=e.finishedAt?Date.parse(e.finishedAt):Date.now();if(!Number.isFinite(n)||!Number.isFinite(r)||r<n)return t===`vi`?`Thời gian chưa xác định`:`Unknown duration`;let i=Math.round((r-n)/1e3);return i<60?`${i}s`:`${Math.floor(i/60)}m ${i%60}s`}var h=e({ActivityPanel:()=>v}),g=n();function _({activity:e,preview:t,onPreview:n,locale:r}){return(0,g.jsxs)(`article`,{className:`activity-row`,children:[(0,g.jsx)(`span`,{className:`activity-state tone-${c(e.state)}`,"aria-label":e.state}),(0,g.jsxs)(`div`,{className:`activity-copy`,children:[(0,g.jsxs)(`div`,{children:[(0,g.jsx)(`strong`,{children:e.label}),(0,g.jsx)(`span`,{children:e.kind})]}),(0,g.jsx)(`p`,{children:e.preview||a(r,`Không có mô tả ngắn`,`No short description`)}),t&&(0,g.jsxs)(`div`,{className:`log-preview ${t.state===`error`?`error-state`:``}`,children:[t.state===`loading`?a(r,`Đang tải log ngắn…`,`Loading log preview…`):t.state===`error`?a(r,`Log preview không còn sẵn sàng.`,`Log preview is no longer available.`):t.value?.preview??`${a(r,`Không có nội dung log`,`No log content`)} · ${t.value?.reasonCode??`unavailable`}`,t.value?.truncated&&(0,g.jsx)(`small`,{children:a(r,`Preview đã được rút gọn`,`Preview truncated`)})]})]}),(0,g.jsxs)(`div`,{className:`activity-result`,children:[(0,g.jsx)(`strong`,{children:p(e,r)}),(0,g.jsx)(`span`,{children:m(e,r)}),e.logRef&&n&&(0,g.jsx)(`button`,{type:`button`,onClick:n,"aria-expanded":!!t,children:t?a(r,`Ẩn log`,`Hide log`):a(r,`Xem log`,`View log`)})]})]})}function v({snapshot:e,sessionRef:t,terminalActivities:n=[],liveActivities:r}){let{locale:c}=i(),[u,d]=(0,l.useState)({}),p=e?.activity.running??[],m=e?.activity.recent??[],{rows:h,terminalCount:v,runningCount:y}=f(p,m,n,c,r),b=e=>{if(u[e.activityRef]){d(t=>({...t,[e.activityRef]:void 0}));return}d(t=>({...t,[e.activityRef]:{state:`loading`}})),(t?o(t,e.activityRef):s(e.activityRef)).then(t=>d(n=>({...n,[e.activityRef]:{state:`ready`,value:t}}))).catch(()=>d(t=>({...t,[e.activityRef]:{state:`error`}})))};return(0,g.jsxs)(`section`,{className:`activity-panel surface`,"aria-labelledby":`activity-title`,children:[(0,g.jsxs)(`header`,{className:`panel-heading`,children:[(0,g.jsxs)(`div`,{children:[(0,g.jsx)(`p`,{className:`section-kicker`,children:`Activity`}),(0,g.jsx)(`h2`,{id:`activity-title`,children:a(c,`Tool, command và kết quả lượt chạy`,`Tools, commands, and operation outcomes`)})]}),(0,g.jsxs)(`div`,{children:[(0,g.jsxs)(`span`,{className:`running-count`,children:[y,` `,a(c,`đang chạy`,`running`)]}),(0,g.jsxs)(`span`,{children:[m.length+v,` `,a(c,`gần đây`,`recent`)]})]})]}),(0,g.jsxs)(`div`,{className:`activity-list`,children:[h.map(e=>(0,g.jsx)(_,{activity:e,preview:u[e.activityRef],onPreview:e.logRef?()=>b(e):void 0,locale:c},e.activityRef)),h.length===0&&(0,g.jsx)(`div`,{className:`activity-empty`,children:a(c,`Chưa có tool, command hoặc kết quả lượt chạy nào trong timeline hiện tại.`,`No tools, commands, or operation outcomes in the current timeline.`)})]}),e?.activity.page.truncated&&(0,g.jsx)(`footer`,{className:`panel-footnote`,children:a(c,`Timeline đã được rút gọn theo giới hạn local.`,`The timeline was truncated to local limits.`)})]})}export{h as n,v as t};
+import{n as e,r as t}from"./rolldown-runtime-hePW80VL.js";import{An as n,Rn as r}from"./vendor-DNZbaWhT.js";import{i,n as a}from"./ui-preferences-OfS30-ZV.js";import{B as o,x as s}from"./api-BQS4Dtrr.js";import{c}from"./view-model-CWNiS4JN.js";var l=t(r(),1);function u(e,t=`vi`){let n=e.state===`running`?`running`:e.state===`failed`?`failed`:`passed`,r=n===`running`?t===`vi`?`đang chạy`:`running`:n===`failed`?t===`vi`?`thất bại`:`failed`:t===`vi`?`hoàn tất`:`completed`,i=e.startedAt??e.finishedAt??``;return{activityRef:`live.${e.toolCallRef}`,kind:[`bash`,`shell`,`exec`].includes(e.toolLabel)?`command`:`tool`,state:n,label:`${e.toolLabel} ${r}`,preview:t===`vi`?`Cập nhật trực tiếp từ Gateway`:`Live update from the Gateway`,toolCallId:e.toolCallRef,toolName:e.toolLabel,commandDigest:null,logRef:null,exitCode:null,exitCodeExact:!1,startedAt:i,finishedAt:n===`running`?null:e.finishedAt??i}}function d(e,t=`vi`){let n=e.state===`failed`?t===`vi`?`Lượt chạy gặp lỗi`:`Operation failed`:e.state===`blocked`?t===`vi`?`Lượt chạy bị chặn`:`Operation blocked`:e.state===`aborted`?t===`vi`?`Lượt chạy đã dừng`:`Operation stopped`:t===`vi`?`Chưa xác định kết quả lượt chạy`:`Operation outcome unknown`;return{activityRef:e.activityRef,kind:`system`,state:e.state,label:n,preview:e.reasonCode,toolCallId:null,toolName:null,commandDigest:null,logRef:null,exitCode:null,exitCodeExact:!1,startedAt:e.settledAt,finishedAt:e.settledAt}}function f(e,t,n,r=`vi`,i){let a=[...e,...t],o=new Set(a.map(e=>e.activityRef)),s=n.filter(e=>!o.has(e.activityRef)).map(e=>d(e,r));if(i===void 0)return{rows:[...e,...s,...t],terminalCount:s.length,runningCount:e.length};let c=i.filter(e=>e.state===`running`).map(e=>u(e,r));return{rows:[...c,...s,...t],terminalCount:s.length,runningCount:c.length}}function p(e,t=`vi`){return e.state===`passed`&&/ recovered$/i.test(e.label)?t===`vi`?`Đã khôi phục`:`Recovered`:e.state===`passed`&&/ warning$/i.test(e.label)?t===`vi`?`Đã xử lý cảnh báo`:`Handled warning`:e.state===`passed`&&e.exitCodeExact?`Pass · exit ${e.exitCode??0}`:e.state===`failed`&&e.exitCodeExact?`Fail · exit ${e.exitCode??`?`}`:e.state===`blocked`?`Blocked`:e.state===`aborted`?t===`vi`?`Đã dừng`:`Stopped`:e.state===`unknown`?t===`vi`?`Chưa xác định`:`Unknown`:e.state===`failed`?t===`vi`?`Thất bại`:`Failed`:e.state===`running`?t===`vi`?`Đang chạy`:`Running`:e.state.replaceAll(`-`,` `)}function m(e,t=`vi`){let n=Date.parse(e.startedAt),r=e.finishedAt?Date.parse(e.finishedAt):Date.now();if(!Number.isFinite(n)||!Number.isFinite(r)||r<n)return t===`vi`?`Thời gian chưa xác định`:`Unknown duration`;let i=Math.round((r-n)/1e3);return i<60?`${i}s`:`${Math.floor(i/60)}m ${i%60}s`}var h=e({ActivityPanel:()=>v}),g=n();function _({activity:e,preview:t,onPreview:n,locale:r}){return(0,g.jsxs)(`article`,{className:`activity-row`,children:[(0,g.jsx)(`span`,{className:`activity-state tone-${c(e.state)}`,"aria-label":e.state}),(0,g.jsxs)(`div`,{className:`activity-copy`,children:[(0,g.jsxs)(`div`,{children:[(0,g.jsx)(`strong`,{children:e.label}),(0,g.jsx)(`span`,{children:e.kind})]}),(0,g.jsx)(`p`,{children:e.preview||a(r,`Không có mô tả ngắn`,`No short description`)}),t&&(0,g.jsxs)(`div`,{className:`log-preview ${t.state===`error`?`error-state`:``}`,children:[t.state===`loading`?a(r,`Đang tải log ngắn…`,`Loading log preview…`):t.state===`error`?a(r,`Log preview không còn sẵn sàng.`,`Log preview is no longer available.`):t.value?.preview??`${a(r,`Không có nội dung log`,`No log content`)} · ${t.value?.reasonCode??`unavailable`}`,t.value?.truncated&&(0,g.jsx)(`small`,{children:a(r,`Preview đã được rút gọn`,`Preview truncated`)})]})]}),(0,g.jsxs)(`div`,{className:`activity-result`,children:[(0,g.jsx)(`strong`,{children:p(e,r)}),(0,g.jsx)(`span`,{children:m(e,r)}),e.logRef&&n&&(0,g.jsx)(`button`,{type:`button`,onClick:n,"aria-expanded":!!t,children:t?a(r,`Ẩn log`,`Hide log`):a(r,`Xem log`,`View log`)})]})]})}function v({snapshot:e,sessionRef:t,terminalActivities:n=[],liveActivities:r}){let{locale:c}=i(),[u,d]=(0,l.useState)({}),p=e?.activity.running??[],m=e?.activity.recent??[],{rows:h,terminalCount:v,runningCount:y}=f(p,m,n,c,r),b=e=>{if(u[e.activityRef]){d(t=>({...t,[e.activityRef]:void 0}));return}d(t=>({...t,[e.activityRef]:{state:`loading`}})),(t?o(t,e.activityRef):s(e.activityRef)).then(t=>d(n=>({...n,[e.activityRef]:{state:`ready`,value:t}}))).catch(()=>d(t=>({...t,[e.activityRef]:{state:`error`}})))};return(0,g.jsxs)(`section`,{className:`activity-panel surface`,"aria-labelledby":`activity-title`,children:[(0,g.jsxs)(`header`,{className:`panel-heading`,children:[(0,g.jsxs)(`div`,{children:[(0,g.jsx)(`p`,{className:`section-kicker`,children:`Activity`}),(0,g.jsx)(`h2`,{id:`activity-title`,children:a(c,`Tool, command và kết quả lượt chạy`,`Tools, commands, and operation outcomes`)})]}),(0,g.jsxs)(`div`,{children:[(0,g.jsxs)(`span`,{className:`running-count`,children:[y,` `,a(c,`đang chạy`,`running`)]}),(0,g.jsxs)(`span`,{children:[m.length+v,` `,a(c,`gần đây`,`recent`)]})]})]}),(0,g.jsxs)(`div`,{className:`activity-list`,children:[h.map(e=>(0,g.jsx)(_,{activity:e,preview:u[e.activityRef],onPreview:e.logRef?()=>b(e):void 0,locale:c},e.activityRef)),h.length===0&&(0,g.jsx)(`div`,{className:`activity-empty`,children:a(c,`Chưa có tool, command hoặc kết quả lượt chạy nào trong timeline hiện tại.`,`No tools, commands, or operation outcomes in the current timeline.`)})]}),e?.activity.page.truncated&&(0,g.jsx)(`footer`,{className:`panel-footnote`,children:a(c,`Timeline đã được rút gọn theo giới hạn local.`,`The timeline was truncated to local limits.`)})]})}export{h as n,v as t};