@piagent/platform 1.48.3 → 1.48.5

package/docs-site/whats-new.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.48.3" title="v1.48.3 docs · VI"><span class="dot"></span>v1.48.3</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.48.5" title="v1.48.5 docs · VI"><span class="dot"></span>v1.48.5</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new" aria-current="page">Changelog</a>
@@ -108,7 +108,30 @@
 <div class="release-filter" role="toolbar" aria-label="Lọc theo loại thay đổi"><button type="button" data-filter-kind="all" aria-pressed="true">Tất cả</button><button type="button" data-filter-kind="new" aria-pressed="false">Mới</button><button type="button" data-filter-kind="improved" aria-pressed="false">Cải thiện</button><button type="button" data-filter-kind="fixed" aria-pressed="false">Sửa lỗi</button><button type="button" data-filter-kind="security" aria-pressed="false">Bảo mật</button></div>
 <section class="section releases" data-releases>
 <h2 id="latest" class="sr-only">Mới nhất</h2>
-<article class="release latest" id="v1-48-3" data-release>
+<article class="release latest" id="v1-48-5" data-release>
+  <div class="release-meta"><a class="release-version" href="#v1-48-5">v1.48.5</a><time class="release-date" datetime="2026-10-31">31/10/2026</time></div>
+  <div class="release-body">
+    <h3 data-toc-skip id="v1-48-5-title">Task đang chạy vẫn dùng được tool khi Piagent được cập nhật</h3>
+    <p>Cập nhật Piagent khi task công ty đang chạy không còn làm hỏng tool: task chạy xong trên bản đã bắt đầu, rồi Terminal mới nạp bản mới.</p>
+    <ul class="release-items">
+      <li data-kind="fixed"><span class="kind kind-fixed">Sửa lỗi</span><span>Task công ty chạy trong lúc piagent-update không còn bị mọi tool báo managed-runtime-changed: sandbox chạy bản sao riêng, vẫn được kiểm tra, của đúng bản lúc bắt đầu.</span></li>
+      <li data-kind="fixed"><span class="kind kind-fixed">Sửa lỗi</span><span>Lượt không đọc được code không còn bị báo là đã đổi code, trừ khi thật sự có sửa file.</span></li>
+    </ul>
+  </div>
+</article>
+<article class="release" id="v1-48-4" data-release>
+  <div class="release-meta"><a class="release-version" href="#v1-48-4">v1.48.4</a><time class="release-date" datetime="2026-10-30">30/10/2026</time></div>
+  <div class="release-body">
+    <h3 data-toc-skip id="v1-48-4-title">/reload không còn làm hỏng Terminal công ty; nạp bản mới không làm mất tin nhắn</h3>
+    <p>Tool vẫn chạy sau /reload trong piagent studio, bản cập nhật yêu cầu trước /reload vẫn được nạp, và Terminal chờ lúc rảnh hẳn mới nạp bản mới.</p>
+    <ul class="release-items">
+      <li data-kind="fixed"><span class="kind kind-fixed">Sửa lỗi</span><span>/reload trong piagent studio không còn làm hỏng cuộc trò chuyện: trước đây tool báo lỗi ctx cũ sau lệnh này.</span></li>
+      <li data-kind="fixed"><span class="kind kind-fixed">Sửa lỗi</span><span>Tin nhắn gõ ngay sau khi bấm Esc không còn bị mất: Terminal chỉ nạp bản mới sau 10 giây rảnh liên tục và ô nhập trống.</span></li>
+      <li data-kind="fixed"><span class="kind kind-fixed">Sửa lỗi</span><span>Bản cập nhật yêu cầu trước /reload vẫn được nạp, và yêu cầu đã nạp không làm Terminal nạp lại lần nữa.</span></li>
+    </ul>
+  </div>
+</article>
+<article class="release" id="v1-48-3" data-release>
   <div class="release-meta"><a class="release-version" href="#v1-48-3">v1.48.3</a><time class="release-date" datetime="2026-10-30">30/10/2026</time></div>
   <div class="release-body">
     <h3 data-toc-skip id="v1-48-3-title">Agent gửi thẳng hình và file vào chat; review chạy được trong thư mục nhiều repo</h3>
@@ -398,36 +421,34 @@
     </ul>
   </div>
 </article>
-<article class="release" id="v1-43-3" data-release>
-  <div class="release-meta"><a class="release-version" href="#v1-43-3">v1.43.3</a><time class="release-date" datetime="2026-10-26">26/10/2026</time></div>
-  <div class="release-body">
-    <h3 data-toc-skip id="v1-43-3-title">Dev chọn workflow, harness hỗ trợ BE/FE theo project <span class="tag">không phát hành</span></h3>
-    <p>Đã tag nhưng chưa publish: E2E lịch sử WebUI trên Linux phát hiện race giữa scroll và observer. Thay bằng 1.43.4.</p>
-    <ul class="release-items">
-      <li data-kind="new"><span class="kind kind-new">Mới</span><span>Tự nhận diện repo/package FE, BE trong thư mục hội thoại và gợi ý checks phù hợp, làm mới theo task.</span></li>
-      <li data-kind="new"><span class="kind kind-new">Mới</span><span>Context workflow tùy chọn nhớ nguồn requirement, plan và tasks của công việc khi mở lại hội thoại, truyền chỉ đọc cho helper và hỗ trợ đổi hoặc xóa.</span></li>
-      <li data-kind="improved"><span class="kind kind-improved">Cải thiện</span><span>Lifecycle là hướng dẫn theo workflow và điểm dừng Dev chọn, không ép file spec hoặc tự tạo gate release. Skill được chọn không cấp quyền hay bỏ qua kiểm chứng, review và duyệt deploy.</span></li>
-    </ul>
-  </div>
-</article>
-<article class="release" id="v1-43-2" data-release>
-  <div class="release-meta"><a class="release-version" href="#v1-43-2">v1.43.2</a><time class="release-date" datetime="2026-10-26">26/10/2026</time></div>
-  <div class="release-body">
-    <h3 data-toc-skip id="v1-43-2-title">Dev chọn workflow, harness hỗ trợ BE/FE theo project <span class="tag">không phát hành</span></h3>
-    <p>Đã tag nhưng chưa publish: wording prompt trùng chuỗi lệnh bị cấm trong test native session. Thay bằng 1.43.4.</p>
-    <ul class="release-items">
-      <li data-kind="new"><span class="kind kind-new">Mới</span><span>Tự nhận diện repo/package FE, BE trong thư mục hội thoại và gợi ý checks phù hợp, làm mới theo task.</span></li>
-      <li data-kind="new"><span class="kind kind-new">Mới</span><span>Context workflow tùy chọn nhớ nguồn requirement, plan và tasks của công việc khi mở lại hội thoại, truyền chỉ đọc cho helper và hỗ trợ đổi hoặc xóa.</span></li>
-      <li data-kind="improved"><span class="kind kind-improved">Cải thiện</span><span>Lifecycle là hướng dẫn theo workflow và điểm dừng Dev chọn, không ép file spec hoặc tự tạo gate release. Skill được chọn không cấp quyền hay bỏ qua kiểm chứng, review và duyệt deploy.</span></li>
-    </ul>
-  </div>
-</article>
 </section>
 <section class="section archive">
   <h2 id="archive">Các bản trước</h2>
   <p class="section-lead">Bản cũ hơn, gom theo tháng. Mở một tháng để xem từng thay đổi.</p>
   <details class="release-archive">
-    <summary><span>Tháng 10/2026</span><span class="archive-count">66</span></summary>
+    <summary><span>Tháng 10/2026</span><span class="archive-count">68</span></summary>
+    <div class="archive-row" id="v1-43-3">
+      <div class="archive-head"><a class="release-version" href="#v1-43-3">v1.43.3</a> <span class="release-date">26/10/2026</span></div>
+      <div class="archive-body">
+        <p><strong>Dev chọn workflow, harness hỗ trợ BE/FE theo project</strong> <span class="tag">không phát hành</span> — Đã tag nhưng chưa publish: E2E lịch sử WebUI trên Linux phát hiện race giữa scroll và observer. Thay bằng 1.43.4.</p>
+        <ul class="release-items">
+        <li data-kind="new"><span class="kind kind-new">Mới</span><span>Tự nhận diện repo/package FE, BE trong thư mục hội thoại và gợi ý checks phù hợp, làm mới theo task.</span></li>
+        <li data-kind="new"><span class="kind kind-new">Mới</span><span>Context workflow tùy chọn nhớ nguồn requirement, plan và tasks của công việc khi mở lại hội thoại, truyền chỉ đọc cho helper và hỗ trợ đổi hoặc xóa.</span></li>
+        <li data-kind="improved"><span class="kind kind-improved">Cải thiện</span><span>Lifecycle là hướng dẫn theo workflow và điểm dừng Dev chọn, không ép file spec hoặc tự tạo gate release. Skill được chọn không cấp quyền hay bỏ qua kiểm chứng, review và duyệt deploy.</span></li>
+        </ul>
+      </div>
+    </div>
+    <div class="archive-row" id="v1-43-2">
+      <div class="archive-head"><a class="release-version" href="#v1-43-2">v1.43.2</a> <span class="release-date">26/10/2026</span></div>
+      <div class="archive-body">
+        <p><strong>Dev chọn workflow, harness hỗ trợ BE/FE theo project</strong> <span class="tag">không phát hành</span> — Đã tag nhưng chưa publish: wording prompt trùng chuỗi lệnh bị cấm trong test native session. Thay bằng 1.43.4.</p>
+        <ul class="release-items">
+        <li data-kind="new"><span class="kind kind-new">Mới</span><span>Tự nhận diện repo/package FE, BE trong thư mục hội thoại và gợi ý checks phù hợp, làm mới theo task.</span></li>
+        <li data-kind="new"><span class="kind kind-new">Mới</span><span>Context workflow tùy chọn nhớ nguồn requirement, plan và tasks của công việc khi mở lại hội thoại, truyền chỉ đọc cho helper và hỗ trợ đổi hoặc xóa.</span></li>
+        <li data-kind="improved"><span class="kind kind-improved">Cải thiện</span><span>Lifecycle là hướng dẫn theo workflow và điểm dừng Dev chọn, không ép file spec hoặc tự tạo gate release. Skill được chọn không cấp quyền hay bỏ qua kiểm chứng, review và duyệt deploy.</span></li>
+        </ul>
+      </div>
+    </div>
     <div class="archive-row" id="v1-43-1">
       <div class="archive-head"><a class="release-version" href="#v1-43-1">v1.43.1</a> <span class="release-date">26/10/2026</span></div>
       <div class="archive-body">

package/docs-site/windows.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.48.3" title="v1.48.3 docs · VI"><span class="dot"></span>v1.48.3</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.48.5" title="v1.48.5 docs · VI"><span class="dot"></span>v1.48.5</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/docs-site/workflows.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.48.3" title="v1.48.3 docs · VI"><span class="dot"></span>v1.48.3</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.48.5" title="v1.48.5 docs · VI"><span class="dot"></span>v1.48.5</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/evals/private-holdout-v1/public-exposure.v2.json

@@ -256,8 +256,8 @@
     },
     {
       "path": "tests",
-      "fileCount": 643,
-      "sha256": "1356b4a7b5dce44794b08a4b483941b90da597ed9d7b126c1b875fd58d6e25ff"
+      "fileCount": 644,
+      "sha256": "789b3bf1850c8e31f08a737575ba3f0c67f45f6f1913c665c350f07f85ed9c20"
     }
   ],
   "custodianComparisonRules": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@piagent/platform",
-  "version": "1.48.3",
+  "version": "1.48.5",
   "license": "MIT",
   "publishConfig": {
     "access": "public",

package/packages/piagent-core/managed/review-snapshot-request.mjs

@@ -1,6 +1,8 @@
 import { fileURLToPath } from 'node:url';
 
 const worker = fileURLToPath(new URL('./review-snapshot-worker.mjs', import.meta.url));
+// The session's own copy of the worker (runtime-snapshot.mjs).
+const workerOf = boundary => boundary.runtimeFile?.('review-snapshot-worker.mjs') ?? worker;
 const requests = new WeakSet();
 const quote = value => "'" + value.replaceAll("'", "'\"'\"'") + "'";
 
@@ -9,7 +11,7 @@ const quote = value => "'" + value.replaceAll("'", "'\"'\"'") + "'";
 export function invokeReviewSnapshot(boundary, mode, extra = []) {
   if (!['head', 'heads', 'since', 'branch-base', 'digest', 'file', 'files'].includes(mode)
     || !Array.isArray(extra) || extra.some(value => typeof value !== 'string')) throw Error('review-request-invalid');
-  const args = Object.freeze({ command: [process.execPath, worker, mode, ...extra].map(quote).join(' '), timeout: 60 });
+  const args = Object.freeze({ command: [process.execPath, workerOf(boundary), mode, ...extra].map(quote).join(' '), timeout: 60 });
   requests.add(args);
   return boundary.invoke('bash', args);
 }

package/packages/piagent-core/managed/runtime-snapshot.mjs

@@ -0,0 +1,63 @@
+// The code a company session's sandbox runs, kept apart from the install.
+//
+// A session pins the hash of its workers and refuses every tool when one
+// changes. piagent-update rewrites the install in place, so a task running
+// across an update lost all its tools (managed-runtime-changed) while a helper
+// started afterwards worked. A session now runs its workers from a private
+// copy named by their content: an update leaves it alone, the pins keep
+// guarding it, and the next process takes a copy of the new release.
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { createHash, randomUUID } from 'node:crypto';
+
+const KEEP_MS = 30 * 24 * 60 * 60 * 1000;
+const hash = file => createHash('sha256').update(fs.readFileSync(file)).digest('hex');
+const cacheRoot = home => path.join(home, process.platform === 'darwin' ? 'Library/Caches/Piagent/runtime' : '.cache/piagent/runtime');
+
+function runtimeFiles(source) {
+  const files = fs.readdirSync(source, { withFileTypes: true }).filter(entry => entry.isFile() && entry.name.endsWith('.mjs')).map(entry => entry.name);
+  const walk = relative => {
+    let entries;
+    try { entries = fs.readdirSync(path.join(source, relative), { withFileTypes: true }); } catch { return; }
+    for (const entry of entries) {
+      const name = path.join(relative, entry.name);
+      if (entry.isDirectory()) walk(name); else if (entry.isFile()) files.push(name);
+    }
+  };
+  walk(path.join('dist', 'workspace'));
+  return files.sort();
+}
+
+const intact = (directory, listing) => listing.every(([file, digest]) => { try { return hash(path.join(directory, file)) === digest; } catch { return false; } });
+
+// The copy of `source` under the member's cache folder; an old one is removed
+// once no process has asked for it for a month.
+export function snapshotRuntime(source, { home = os.homedir(), now = Date.now() } = {}) {
+  const listing = runtimeFiles(source).map(file => [file, hash(path.join(source, file))]);
+  const id = createHash('sha256').update(JSON.stringify(listing)).digest('hex').slice(0, 32);
+  const root = cacheRoot(home), target = path.join(root, id);
+  fs.mkdirSync(root, { recursive: true, mode: 0o700 });
+  if (!intact(target, listing)) {
+    const building = path.join(root, `.${id}.${randomUUID()}`);
+    try {
+      for (const [file] of listing) {
+        fs.mkdirSync(path.dirname(path.join(building, file)), { recursive: true, mode: 0o700 });
+        fs.copyFileSync(path.join(source, file), path.join(building, file));
+        fs.chmodSync(path.join(building, file), 0o400);
+      }
+      // Without it the workspace worker's .js files would load as CommonJS.
+      fs.writeFileSync(path.join(building, 'package.json'), '{"type":"module"}\n', { mode: 0o400 });
+      fs.rmSync(target, { recursive: true, force: true });
+      // Another session may have built the same copy meanwhile.
+      try { fs.renameSync(building, target); } catch (error) { if (!intact(target, listing)) throw error; }
+    } finally { fs.rmSync(building, { recursive: true, force: true }); }
+  }
+  fs.utimesSync(target, new Date(now), new Date(now));
+  for (const entry of fs.readdirSync(root, { withFileTypes: true })) {
+    if (!entry.isDirectory() || entry.name === id) continue;
+    const old = path.join(root, entry.name);
+    try { if (now - fs.statSync(old).mtimeMs > KEEP_MS) fs.rmSync(old, { recursive: true, force: true }); } catch { /* another session removes it */ }
+  }
+  return fs.realpathSync(target);
+}

package/packages/piagent-core/managed/terminal-boundary.mjs

@@ -9,18 +9,19 @@ import { companyTerminalRuntime } from './terminal-runtime.mjs';
 import { terminalChannel } from './terminal-channel.mjs';
 import { SEATBELT_TERMINAL_RULES, seatbeltTerminal } from './terminal-seatbelt.mjs';
 
-const worker = fileURLToPath(new URL('./terminal-worker.mjs', import.meta.url));
+const installedWorker = fileURLToPath(new URL('./terminal-worker.mjs', import.meta.url));
 const hash = file => createHash('sha256').update(fs.readFileSync(file)).digest('hex');
 const inside = (file, root) => file === root || file.startsWith(root + path.sep);
 const dimensions = ({ cols, rows }) => Number.isInteger(cols) && cols >= 2 && cols <= 500 && Number.isInteger(rows) && rows >= 1 && rows <= 200;
 
 export class BoundaryTerminals {
-  #boundary; #runtime; #workerDigest; #entries = new Map(); #closed = false;
+  #boundary; #runtime; #worker; #workerDigest; #entries = new Map(); #closed = false;
   reasonCode = null;
   constructor(boundary) {
     this.#boundary = boundary;
     try {
       this.#runtime = companyTerminalRuntime();
+      const worker = this.#worker = boundary.runtimeFile?.('terminal-worker.mjs') ?? installedWorker; // the session's own copy (runtime-snapshot.mjs)
       if (inside(this.#runtime.root, boundary.cwd) || inside(worker, boundary.cwd)) throw Error('managed-terminal-runtime-overlap');
       this.#workerDigest = hash(worker);
     } catch (error) { this.reasonCode = /^managed-terminal-/.test(error.message) ? error.message : 'managed-terminal-runtime-invalid'; }
@@ -33,6 +34,7 @@ export class BoundaryTerminals {
     if (!dimensions(size)) throw Error('managed-terminal-invalid-size');
     if (this.#entries.size >= 4) throw Error('managed-terminal-limit');
     this.#runtime.assertCurrent();
+    const worker = this.#worker;
     if (hash(worker) !== this.#workerDigest) throw Error('managed-terminal-runtime-changed');
     for (const [file, digest] of boundary.pins) if (hash(file) !== digest) throw Error('managed-runtime-changed');
     const temporary = fs.realpathSync(fs.mkdtempSync(path.join(os.tmpdir(), 'piagent-terminal-')));

package/packages/piagent-core/managed/tool-boundary.mjs

@@ -3,7 +3,7 @@ import { SessionMutationObservations } from "./session-mutation-observations.mjs
 import { BoundaryTerminals } from './terminal-boundary.mjs';
 import { ToolFreshness } from './tool-freshness.mjs';
 import { BoundaryQueue } from './boundary-queue.mjs';
-import { workspaceWorkerPins, verifyWorkspaceWorker } from './workspace-worker-pins.mjs';
+import { workspaceWorkerPins, verifyWorkspaceWorker } from './workspace-worker-pins.mjs'; import { snapshotRuntime } from './runtime-snapshot.mjs';
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
@@ -202,7 +202,7 @@ export class ManagedToolBoundary {
   get sourceControlRevision() { return this.#sourceRequests.revision; }
   source(request, binding) { return this.invoke("workspace", this.#sourceRequests.request(request, binding)); }
   #mutationObservations = new SessionMutationObservations();
-  mutationObservation(file) { return this.#mutationObservations.get(file); }
+  mutationObservation(file) { return this.#mutationObservations.get(file); } runtimeFile(name) { return path.join(this.runtimeRoot, name); }
   #children = new Set();
   #closed = false;
   // readOnly: the project cannot be written. commands: bash is offered all
@@ -214,16 +214,16 @@ export class ManagedToolBoundary {
     if (process.platform !== 'darwin' && !(this.linux && BWRAP)) throw new Error('managed-sandbox-unavailable');
     this.cwd = fs.realpathSync(cwd); this.sdkRoot = fs.realpathSync(sdkRoot);
     this.node = fs.realpathSync(node);
-    this.runtimeRoot = fs.realpathSync(path.dirname(workerPath));
+    this.sourceRoot = fs.realpathSync(path.dirname(workerPath)); this.runtimeRoot = snapshotRuntime(this.sourceRoot, { home: home ?? os.homedir() }); this.workerPath = this.runtimeFile('tool-worker.mjs'); // an update leaves a running session's workers alone
     this.workspacePins = workspaceWorkerPins(this.runtimeRoot);
     this.sdkPath = path.join(this.sdkRoot, 'dist/index.js');
     this.git = managedGit();
     if (JSON.parse(fs.readFileSync(path.join(this.sdkRoot, 'package.json'), 'utf8')).version !== PI_HOST_VERSION) throw new Error('managed-sdk-version-unqualified');
     const workerModules = ['review-snapshot-worker.mjs', 'tool-freshness.mjs', 'search-fallback.mjs', 'sandbox-diagnostic.mjs', 'ts-diagnostics-server.mjs', 'workspace-worker-pins.mjs'].map(name => path.join(this.runtimeRoot, name));
-    this.pins = new Map([this.node, this.git, workerPath, ...workerModules, this.sdkPath].map(file => [file, hash(file)]));
+    this.pins = new Map([this.node, this.git, this.workerPath, ...workerModules, this.sdkPath].map(file => [file, hash(file)]));
     const userHome = fs.realpathSync(home ?? os.homedir());
-    if ([userHome, '/', this.sdkRoot, this.runtimeRoot].includes(this.cwd)
-      || [this.sdkRoot,this.runtimeRoot,this.node,this.git,...['/opt/homebrew/bin/gh','/usr/local/bin/gh'].filter(p=>fs.existsSync(p)).map(p=>fs.realpathSync(p))].some(p=>inside(p,this.cwd))) throw new Error('managed-project-overlaps-runtime');
+    if ([userHome, '/', this.sdkRoot, this.runtimeRoot, this.sourceRoot].includes(this.cwd)
+      || [this.sdkRoot,this.runtimeRoot,this.sourceRoot,this.node,this.git,...['/opt/homebrew/bin/gh','/usr/local/bin/gh'].filter(p=>fs.existsSync(p)).map(p=>fs.realpathSync(p))].some(p=>inside(p,this.cwd))) throw new Error('managed-project-overlaps-runtime');
     this.temporary = fs.realpathSync(fs.mkdtempSync(path.join(os.tmpdir(), 'piagent-tools-')));
     fs.chmodSync(this.temporary, 0o700);
     this.home = path.join(this.temporary, 'home'); fs.mkdirSync(this.home, { mode: 0o700 });
@@ -371,7 +371,7 @@ export class ManagedToolBoundary {
       guard?.();
       const [sandbox, sandboxArgs] = this.linux ? [BWRAP, this.bubblewrap(network, docker)]
         : ['/usr/bin/sandbox-exec', ['-p', docker ? this.dockerProfile : network ? this.networkProfile : isolated ? this.isolatedProfile : this.profile]];
-      const child = spawn(sandbox, [...sandboxArgs, this.node, workerPath, this.sdkPath, this.cwd], {
+      const child = spawn(sandbox, [...sandboxArgs, this.node, this.workerPath, this.sdkPath, this.cwd], {
         cwd: this.cwd, detached: true, stdio: ['pipe', 'pipe', 'pipe'],
         env: docker ? this.environment.docker : network ? this.environment.network : this.environment.offline,
       });

package/packages/piagent-core/managed/ts-diagnostics.mjs

@@ -21,7 +21,7 @@ export class TsDiagnostics {
     if (this.#child) return this.#child;
     if (this.#starts >= RESTARTS) { this.#off = true; return null; }
     this.#starts += 1;
-    const { child } = await this.boundary.spawnSandboxed([this.boundary.node, SERVER, this.boundary.cwd], randomUUID(), { stdin: 'pipe' });
+    const { child } = await this.boundary.spawnSandboxed([this.boundary.node, this.boundary.runtimeFile?.('ts-diagnostics-server.mjs') ?? SERVER, this.boundary.cwd], randomUUID(), { stdin: 'pipe' });
     child.stdout.on('data', chunk => {
       this.#buffer += chunk.toString('utf8');
       for (let at; (at = this.#buffer.indexOf('\n')) >= 0;) {

package/packages/piagent-core/managed/workflow.mjs

@@ -273,6 +273,7 @@ export class RunProcess {
     this.unplannedChange = true; this.planSkipped = true;
   }
   async afterTool(name, args, ok, digestOf) {
+    if (['write', 'edit'].includes(name) && ok) this.edited = true;
     if (name === 'bash' && isCheckCommand(args?.command, this.checks.commands)) {
       this.checksRun += 1; if (!ok) this.checksFailed += 1;
       this.lastCheck = { ok, digest: await digestOf(), mutations: this.mutations };
@@ -334,7 +335,7 @@ export async function completionGate(managed, run, signal) {
   let digest = null, interrupted = false, verifyGaveUp = false;
   for (let step = 0; step < 16; step += 1) {
     digest = await digestOf();
-    run.changed = run.startDigest !== null && digest !== null ? digest !== run.startDigest : run.mutations > 0;
+    run.changed = run.startDigest !== null && digest !== null ? digest !== run.startDigest : run.startDigest !== null ? run.edited === true : run.mutations > 0; // code that cannot be read now: only a real edit says it changed
     // A check that passed still counts when the turn was cut off after it.
     if (run.changed) run.verified = run.verifiedOn(digest);
     run.docsOnly = run.changed && onlyNonCode(managed.ownPaths);

package/packages/piagent-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@piagent/core",
-  "version": "1.48.3",
+  "version": "1.48.5",
   "type": "module",
   "private": true,
   "license": "MIT",

package/packages/piagent-core/runtime/update/terminal-reload.mjs

@@ -2,9 +2,9 @@
 //
 // `piagent reload` (and `piagent-update` once it installed a release) writes
 // one request file. Each Terminal started before that request takes it when it
-// is idle: no run going, nothing queued, nothing typed in the editor. A run in
-// progress is never cut: the footer says the reload waits, and it happens when
-// the run settles. How a Terminal reloads is its own: the personal Terminal
+// is idle: no run going, nothing queued, nothing typed in the editor, and quiet
+// for a moment. A run in progress is never cut: the footer says the reload
+// waits, and it happens once the run has settled. How a Terminal reloads is its own: the personal Terminal
 // runs Pi's /reload (Piagent's extensions are read again from disk), the
 // company Terminal starts again in place on the same conversation, since its
 // company code is loaded once per process.
@@ -14,7 +14,15 @@ import path from "node:path";
 
 const REQUEST_FILE = "piagent-reload.json";
 const POLL_MS = 2_000;
+// A member who stops a run with Esc usually types the next message right away:
+// a Terminal that starts again in that moment loses what they type.
+const QUIET_MS = 10_000;
 const STATUS_KEY = "piagent-reload";
+// Per process, not per extension runtime: /reload runs this module again, and a
+// request sent before it (the company Terminal's /reload loads no company code)
+// must still be taken, while one already taken must not reload twice.
+const APPLIED_AT = "PIAGENT_RELOAD_APPLIED_AT";
+const processStartedAt = () => Date.now() - process.uptime() * 1000;
 
 const requestPath = (home) => path.join(home ?? os.homedir(), ".pi", REQUEST_FILE);
 
@@ -47,8 +55,8 @@ function idle(ctx) {
 
 // `apply(ctx, request)` reloads this Terminal; it runs at most once per
 // process. Only Terminals with a UI take requests: scripted runs keep theirs.
-export function watchTerminalReload(pi, { apply, home, startedAt = Date.now(), pollMs = POLL_MS }) {
-  let ctx = null, applied = false, waiting = false, timer = null;
+export function watchTerminalReload(pi, { apply, home, startedAt = processStartedAt(), pollMs = POLL_MS, quietMs = QUIET_MS }) {
+  let ctx = null, applied = false, waiting = false, timer = null, busyAt = 0;
   // A ctx kept from an earlier session (replaced, reloaded) throws on any use:
   // a check that meets one does nothing, and the next session_start brings a new one.
   const check = async () => {
@@ -56,17 +64,19 @@ export function watchTerminalReload(pi, { apply, home, startedAt = Date.now(), p
     try {
       if (applied || !ctx?.hasUI) return;
       request = readReloadRequest(home);
-      if (!request || request.at <= startedAt) return;
-      if (!idle(ctx)) {
-        if (!waiting) { waiting = true; ctx.ui?.setStatus?.(STATUS_KEY, `⟳ Nạp Piagent${request.version ? ` ${request.version}` : " mới"} khi xong lượt này`); }
+      if (!request || request.at <= Math.max(startedAt, Number(process.env[APPLIED_AT]) || 0)) return;
+      const quiet = idle(ctx);
+      if (!quiet) busyAt = Date.now();
+      if (!quiet || Date.now() - busyAt < quietMs) {
+        if (!waiting) { waiting = true; ctx.ui?.setStatus?.(STATUS_KEY, `⟳ Nạp Piagent${request.version ? ` ${request.version}` : " mới"} khi rảnh`); }
         return;
       }
-      applied = true;
+      applied = true; process.env[APPLIED_AT] = String(request.at);
       ctx.ui?.setStatus?.(STATUS_KEY, undefined);
     } catch { return; }
     try { await apply(ctx, request); }
     catch (error) {
-      applied = false;
+      applied = false; delete process.env[APPLIED_AT];
       try { ctx.ui?.notify?.(`Chưa nạp được Piagent mới: ${error instanceof Error ? error.message : String(error)}`, "warning"); } catch { /* the session is gone */ }
     }
   };
@@ -75,9 +85,9 @@ export function watchTerminalReload(pi, { apply, home, startedAt = Date.now(), p
     keep(event, next);
     if (!timer) { timer = setInterval(() => { void check(); }, pollMs); timer.unref?.(); }
   });
-  pi.on("agent_start", keep);
-  // The moment a run settles is the moment a waiting reload can happen.
-  pi.on("agent_settled", (event, next) => { keep(event, next); setTimeout(() => { void check(); }, 300).unref?.(); });
+  pi.on("agent_start", (event, next) => { keep(event, next); busyAt = Date.now(); });
+  // The next check after the quiet time takes a request that waits.
+  pi.on("agent_settled", (event, next) => { keep(event, next); busyAt = Date.now(); });
   pi.on("session_shutdown", () => { if (timer) clearInterval(timer); timer = null; ctx = null; });
   return { check };
 }

package/scripts/company-terminal.mjs

@@ -301,6 +301,7 @@ export function companyTerminalExtension({ managed, packageRoot, sdkRoot, bindin
   let tui;
   const components = async () => (tui ??= await import(pathToFileURL(require.resolve('@earendil-works/pi-tui')).href));
   const installed = (() => { try { return JSON.parse(fs.readFileSync(path.join(packageRoot, 'package.json'), 'utf8')).version; } catch { return undefined; } })();
+  let stopHearing = null;
 
   return async (pi) => {
     const { Box, Text } = await components();
@@ -426,11 +427,12 @@ export function companyTerminalExtension({ managed, packageRoot, sdkRoot, bindin
     });
     // How the member's message ended (finished, stopped with steps open,
     // failed, stopped), as the dashboard says it under the last answer.
-    let heard = null;
     pi.on('session_start', async (_event, ctx) => {
       const session = managed()?.session;
-      if (!session?.subscribe || heard === session) return;
-      heard = session;
+      if (!session?.subscribe) return;
+      // /reload runs this extension again on the same session: the listener of the
+      // runtime it replaces goes, or each event reaches a stale ctx and fails the run.
+      stopHearing?.();
       // The conversation can close while git answers (a client ends right after a turn): its ctx is then stale.
       const showBranch = async () => { try { const branch = await branchOf(managed()?.cwd ?? ctx.cwd); ctx.ui?.setStatus?.('agent-watch-branch', branch ? `⎇ ${branch}` : undefined); } catch { /* closed meanwhile */ } };
       ctx.ui?.setWorkingMessage?.(WORKING);
@@ -438,7 +440,7 @@ export function companyTerminalExtension({ managed, packageRoot, sdkRoot, bindin
       // The checklist and the subagents working now stay above the input (setWidget).
       const showPlan = () => ctx.ui?.setWidget?.('agent-watch-plan', planWidget(currentPlan(session.sessionManager)));
       showPlan();
-      session.subscribe((event) => {
+      const hear = (event) => {
         if (event?.type === 'tool_execution_end' && event.toolName === 'update_plan' || event?.type === 'agent_end') showPlan();
         if (event?.type === 'managed_helper_state') ctx.ui?.setWidget?.('agent-watch-helpers', helperLines(event.helpers));
         if (event?.type === 'managed_helpers') ctx.ui?.setStatus?.('agent-watch-helpers', event.active ? `Subagent ${event.active}/${event.maximum}` : undefined);
@@ -448,7 +450,10 @@ export function companyTerminalExtension({ managed, packageRoot, sdkRoot, bindin
         const copy = turnEndCopy(end, LOCALE), stats = turnStats(session.messages);
         ctx.ui?.notify?.(`${copy.title}. ${copy.text.replace('Bấm Tiếp tục', 'Gửi "tiếp tục"').replace('bấm Tiếp tục', 'gửi "tiếp tục"')}${stats ? `\n${stats}` : ''}`, copy.tone === 'success' ? 'info' : copy.tone === 'error' ? 'error' : copy.tone === 'warning' ? 'warning' : 'info');
         void showBranch();
-      });
+      };
+      // A session closing (a restart in place, /reload) can still report while its ctx is already stale.
+      const unsubscribe = session.subscribe((event) => { try { hear(event); } catch { /* the Terminal has moved on */ } });
+      stopHearing = unsubscribe;
     });
     pi.registerMessageRenderer('agent-watch-review-status', (_message, _options, theme) =>
       box('Review đã cũ: code đổi sau khi review. Chỉ cần review lại khi đã sửa lỗi blocking.', theme, 'warning'));