@piagent/platform 1.5.4 → 1.5.5

package/CHANGELOG.md

@@ -4,6 +4,25 @@ This file records release-facing changes for Pi Agent Platform. Copy the relevan
 
 ## Unreleased
 
+## v1.5.5 - 2026-08-21
+
+### WebUI command execution hotfix
+
+- Fixed provider tool-call identifiers containing characters outside the
+  public WebUI reference alphabet. Gateway approvals now bind those opaque
+  identifiers to private deterministic references instead of falling back to
+  a terminal confirmation that does not exist in WebUI.
+- Prevented search commands such as `rg` and `grep` from being mistaken for
+  migration execution merely because their search arguments contain
+  `migrate`. Real migration commands still require explicit confirmation.
+- Made Stop cancel the exact pending approval before aborting the model
+  operation, so a session cannot remain stuck waiting for an approval after
+  the user stops it. Gateway approval failures now deny immediately rather
+  than waiting indefinitely.
+- Corrected activity reporting so a tool call remains requested until native
+  execution actually starts, and strengthened Dashboard restart to wait for
+  the previous process to exit instead of silently reusing a hung instance.
+
 ## v1.5.4 - 2026-08-20
 
 ### WebUI workflow hotfix

package/README.md

@@ -359,7 +359,7 @@ This repository intentionally excludes:
 
 ## Maturity
 
-The current package version is read from package metadata and release tags. Personal machines may follow the unpinned package source when accepting ongoing updates; production/team quickstarts and committed project settings should pin an explicit tag such as `v1.5.4` or a reviewed commit.
+The current package version is read from package metadata and release tags. Personal machines may follow the unpinned package source when accepting ongoing updates; production/team quickstarts and committed project settings should pin an explicit tag such as `v1.5.5` or a reviewed commit.
 
 Ready for:
 

package/README.vi.md

@@ -164,7 +164,7 @@ chỉ validate kế hoạch, không dùng quota.
 
 Gate này chạy architecture check, test, typecheck, capability validation, runtime smoke và docs consistency trước khi release.
 
-Bản phát hành hiện tại là `v1.5.4`. Với team hoặc production, hãy pin tag này
+Bản phát hành hiện tại là `v1.5.5`. Với team hoặc production, hãy pin tag này
 hoặc một commit đã review thay vì dựa vào nguồn package không cố định.
 
 ## Security

package/catalog/capabilities.json

@@ -26,8 +26,8 @@
           "path": "evals/scenarios/capability-resolution.json"
         },
         {
-          "byteSize": 6232,
-          "digest": "sha256:a2c44a910a440e972579c2a2ec372ee15cfb73b63b27d01c1e3a053c176d11bf",
+          "byteSize": 6271,
+          "digest": "sha256:90dafc5b6c0bd555b932d89b10785b9eb50104ed22dcb06cfb8a2d306cc26d2f",
           "id": "base-policy",
           "kind": "policies",
           "path": "packages/piagent-core/policies/base-policy.json"

package/docs/command-reference-vietnamese.md

@@ -502,8 +502,8 @@ Các lệnh này chạy ngoài Pi.
 | Command | Dùng khi nào |
 |---|---|
 | `npm install -g --ignore-scripts @earendil-works/pi-coding-agent@0.84.1` | Cài Pi CLI tương thích với release hiện tại. |
-| `npm install -g --ignore-scripts @piagent/platform@1.5.4` | Cài terminal helper `piagent-*` từ release tag hiện tại. |
-| `pi install git:github.com/Vt-mmm/piagent@v1.5.4` | Cài pinned release khi cần reproducible team setup. |
+| `npm install -g --ignore-scripts @piagent/platform@1.5.5` | Cài terminal helper `piagent-*` từ release tag hiện tại. |
+| `pi install git:github.com/Vt-mmm/piagent@v1.5.5` | Cài pinned release khi cần reproducible team setup. |
 | `pi install git:github.com/Vt-mmm/piagent` | Cài latest package platform cho máy cá nhân/sandbox. |
 | `piagent-update --check` | Báo version hiện tại vs version sẽ lên cho cả ba thành phần; không cài gì. |
 | `piagent-update` | Full update global một lệnh cho cả máy: Pi host → npm-global helper → Pi package, đúng thứ tự release yêu cầu. |

package/docs/distribution-standard.md

@@ -15,9 +15,9 @@ Repo này phải chạy được cho nhiều project/domain khác nhau. Vì vậ
 
 | Use case | Package source |
 |---|---|
-| Team pinned release | `git:github.com/Vt-mmm/piagent@v1.5.4` |
+| Team pinned release | `git:github.com/Vt-mmm/piagent@v1.5.5` |
 | Personal/sandbox dev | `git:github.com/Vt-mmm/piagent` |
-| Registry distribution | `npm:@piagent/platform@1.5.4` |
+| Registry distribution | `npm:@piagent/platform@1.5.5` |
 | Enterprise npm (fork under another scope) | `npm:@your-scope/platform@x.y.z` |
 | Local platform dev | `/path/to/piagent` |
 
@@ -27,7 +27,7 @@ Latest tiện cho máy cá nhân muốn nhận cập nhật nhanh. Pin tag/commi
 
 | Channel | Command | Target | Policy |
 |---|---|---|---|
-| `stable` | `bash scripts/install-global.sh --stable` | Helper release tag resolved to commit SHA, currently `v1.5.4` | Install the Pi package matching the helper. |
+| `stable` | `bash scripts/install-global.sh --stable` | Helper release tag resolved to commit SHA, currently `v1.5.5` | Install the Pi package matching the helper. |
 | `exact` | `bash scripts/install-global.sh --version vX.Y.Z --resolve-tag` | Requested tag resolved to commit SHA | Pi-package-only rollout, rollback, and incident recovery. |
 | `dev` | `bash scripts/install-global.sh --dev` | Moving Git source | Personal/sandbox only; do not commit into project settings. |
 | `local` | `bash scripts/install-global.sh --local` | Current checkout path | Platform development only. |
@@ -54,7 +54,7 @@ Root `package.json` có `pi` manifest trỏ tới:
 Do đó team có thể:
 
 ```bash
-pi install git:github.com/Vt-mmm/piagent@v1.5.4
+pi install git:github.com/Vt-mmm/piagent@v1.5.5
 ```
 
 Không cần biết internal folder `packages/piagent-core`. Source không pin chỉ dành cho personal/sandbox như bảng channel ở trên.
@@ -66,12 +66,12 @@ Team nên install global package một lần:
 ```bash
 node --version  # >= 22.19.0
 npm install -g --ignore-scripts @earendil-works/pi-coding-agent@0.84.1
-npm install -g --ignore-scripts @piagent/platform@1.5.4
+npm install -g --ignore-scripts @piagent/platform@1.5.5
 piagent-install --stable --dry-run
 piagent-install --stable
 ```
 
-`pi install git:github.com/Vt-mmm/piagent@v1.5.4` vẫn hợp lệ nếu chỉ cần cài Pi package. Lệnh đó không tự tạo các binary terminal `piagent-*`; muốn có helper global thì dùng `npm install -g --ignore-scripts @piagent/platform@1.5.4`.
+`pi install git:github.com/Vt-mmm/piagent@v1.5.5` vẫn hợp lệ nếu chỉ cần cài Pi package. Lệnh đó không tự tạo các binary terminal `piagent-*`; muốn có helper global thì dùng `npm install -g --ignore-scripts @piagent/platform@1.5.5`.
 
 Support matrix hiện tại: macOS Apple Silicon + Bash và Linux x64 + Bash đã được verify; macOS Intel + Bash và Linux ARM64 + Bash là supported target cần chạy smoke trước rollout; native Windows chưa phải target rollout team; WSL2 experimental. Chi tiết và version runtime nằm trong [release/install policy](release-install-policy.md).
 
@@ -121,7 +121,7 @@ Nếu muốn commit sẵn `.pi/piagent-profile.json` vào repo hoặc bootstrap
 ```bash
 bash scripts/setup.sh /path/to/project \
   --profile be-readonly-fe \
-  --package-source git:github.com/Vt-mmm/piagent@v1.5.4 \
+  --package-source git:github.com/Vt-mmm/piagent@v1.5.5 \
   --mcp-preset core \
   --subagents-preset safe
 ```

package/docs/languages.json

@@ -21,8 +21,8 @@
       "en": "README.md",
       "vi": "README.vi.md",
       "consistentAt": {
-        "en": "3d9082674ded9179175a10bb86a4a1c922faa269",
-        "vi": "5c396247582381eafe741042fc4259982a527381"
+        "en": "1c890fe5b2a1f53f074b54f90d4610b5ed648242",
+        "vi": "6b7a18e5f6f18012a4d96a70b5e2815299629b05"
       }
     },
     {

package/docs/operator-manual-vietnamese.md

@@ -19,12 +19,12 @@ Support matrix release hiện tại: macOS Apple Silicon + Bash và Linux x64 +
 ```bash
 node --version  # >= 22.19.0
 npm install -g --ignore-scripts @earendil-works/pi-coding-agent@0.84.1
-npm install -g --ignore-scripts @piagent/platform@1.5.4
+npm install -g --ignore-scripts @piagent/platform@1.5.5
 piagent-install --stable --dry-run
 piagent-install --stable
 ```
 
-Khi seed `.pi/settings.json` cho team/repo cần audit lặp lại, giữ package source dạng pinned tag như `git:github.com/Vt-mmm/piagent@v1.5.4`. Máy cá nhân có thể dùng `git:github.com/Vt-mmm/piagent` để theo latest.
+Khi seed `.pi/settings.json` cho team/repo cần audit lặp lại, giữ package source dạng pinned tag như `git:github.com/Vt-mmm/piagent@v1.5.5`. Máy cá nhân có thể dùng `git:github.com/Vt-mmm/piagent` để theo latest.
 
 Nếu đang ở source checkout của platform, dùng helper theo channel để preview trước khi đổi:
 
@@ -100,7 +100,7 @@ install package once
 
 ```bash
 npm install -g --ignore-scripts @earendil-works/pi-coding-agent@0.84.1
-npm install -g --ignore-scripts @piagent/platform@1.5.4
+npm install -g --ignore-scripts @piagent/platform@1.5.5
 piagent-install --stable --dry-run
 piagent-install --stable
 ```
@@ -283,7 +283,7 @@ Không phải daily default. Dùng khi muốn tạo sẵn `.pi` files cho projec
 bash /path/to/piagent/scripts/setup.sh /path/to/project \
   --project-only \
   --profile auto \
-  --package-source git:github.com/Vt-mmm/piagent@v1.5.4 \
+  --package-source git:github.com/Vt-mmm/piagent@v1.5.5 \
   --mcp-preset core \
   --subagents-preset safe
 ```
@@ -1042,8 +1042,8 @@ Watchdog là optional adversarial reviewer ở cuối turn, không bật mặc
 
 | Command | Dùng để |
 |---|---|
-| `npm install -g --ignore-scripts @piagent/platform@1.5.4` | Cài terminal helper `piagent-*` từ release tag hiện tại. |
-| `pi install git:github.com/Vt-mmm/piagent@v1.5.4` | Install pinned release cho reproducible team setup. |
+| `npm install -g --ignore-scripts @piagent/platform@1.5.5` | Cài terminal helper `piagent-*` từ release tag hiện tại. |
+| `pi install git:github.com/Vt-mmm/piagent@v1.5.5` | Install pinned release cho reproducible team setup. |
 | `pi install git:github.com/Vt-mmm/piagent` | Install latest platform package cho máy cá nhân/sandbox. |
 | Cài exact Pi host của release, rồi `npm install -g --ignore-scripts @piagent/platform@X.Y.Z` và `piagent-install --stable` | Full update: đồng bộ host, terminal helper và Pi package. Mỗi release pin một Pi host chính xác; lấy đúng version của release đang cài trong [release/install policy](release-install-policy.md). |
 | Cài exact Pi host ghi trong release cũ, rồi helper `vPREVIOUS` và `piagent-install --stable` | Full rollback; đánh giá lại dependency findings của host cũ trước khi hạ version. |
@@ -1155,7 +1155,7 @@ Mở lại Pi session sau khi install.
 Cài lại terminal helper đúng release rồi kiểm tra `PATH`:
 
 ```bash
-npm install -g --ignore-scripts @piagent/platform@1.5.4
+npm install -g --ignore-scripts @piagent/platform@1.5.5
 command -v piagent-install
 ```
 

package/docs/publishing-for-teams.md

@@ -98,6 +98,10 @@ pi install /path/to/piagent
   Inspector; projection Task Changes / Working Tree / Staged có bounded diff,
   provenance và enforce protected path; session lease bền, recovery khi restart
   hoặc owner cũ treo, doctor có repair tường minh.
+- `1.5.5`: hotfix WebUI command execution — approval nhận đúng opaque tool-call
+  ID, lệnh tìm kiếm không còn bị nhận nhầm thành migration, Stop hủy approval
+  đang chờ, activity chỉ báo running sau khi command thật sự chạy, và restart
+  không tái sử dụng process treo.
 - `1.5.4`: hotfix WebUI giữ ownership qua workflow dispatch bất đồng bộ, không
   còn báo `session-command-effect-unknown` giả; session đã tạo được tự đồng bộ
   mà không gửi lại, và transcript không lặp tin workflow sau khi persisted.

package/docs/release-install-policy.md

@@ -11,7 +11,7 @@ This file is the canonical install, update, rollback, and release checklist. Oth
 
 All supported environments require Node.js `>=22.19.0` and Pi Coding Agent `0.84.1`. The Pi host is installed as a Node CLI; Pi Agent Platform still defines its own release matrix because the terminal helpers and shell policy rely on Bash/POSIX behavior.
 
-| Surface | Status for v1.5.4 | Rollout guidance |
+| Surface | Status for v1.5.5 | Rollout guidance |
 |---|---|---|
 | macOS Apple Silicon (`darwin/arm64`) + Bash | Verified for this release. | Safe default for team rollout after normal project smoke tests. |
 | Linux x64 + Bash | Verified in GitHub Actions. | Safe default for CI/server usage after normal project smoke tests. |
@@ -106,7 +106,7 @@ These three components are versioned independently. A full install, update, or r
 
 | Channel | Source shape | Mutability | Use when |
 |---|---|---:|---|
-| `stable` | `git:github.com/Vt-mmm/piagent@<resolved-commit-sha>` from `v1.5.4` | Fixed after resolution | Default for team rollout. |
+| `stable` | `git:github.com/Vt-mmm/piagent@<resolved-commit-sha>` from `v1.5.5` | Fixed after resolution | Default for team rollout. |
 | `exact` | Tag, reviewed commit, or a tag resolved with `--resolve-tag` | Fixed when using a commit SHA | Pi-package-only roll forward, rollback, or reproduction. |
 | `dev` | `git:github.com/Vt-mmm/piagent` | Moving | Personal machine or sandbox only. |
 | `local` | `/path/to/piagent` | Local workspace | Platform development and dry-run validation. |
@@ -126,7 +126,7 @@ Use this flow when the team needs both terminal commands and the Pi package:
 ```bash
 node --version  # >= 22.19.0
 npm install -g --ignore-scripts @earendil-works/pi-coding-agent@0.84.1
-npm install -g --ignore-scripts @piagent/platform@1.5.4
+npm install -g --ignore-scripts @piagent/platform@1.5.5
 piagent-install --stable --dry-run
 piagent-install --stable
 ```
@@ -134,8 +134,8 @@ piagent-install --stable
 The stable preview and apply output includes:
 
 ```text
-currentRelease: v1.5.4 (helper package version)
-tag: v1.5.4
+currentRelease: v1.5.5 (helper package version)
+tag: v1.5.5
 resolvedCommit: <40-char-sha>
 source: git:github.com/Vt-mmm/piagent@<40-char-sha>
 ```
@@ -152,7 +152,7 @@ bash scripts/install-global.sh --stable
 Use this only when terminal commands are not needed:
 
 ```bash
-pi install git:github.com/Vt-mmm/piagent@v1.5.4
+pi install git:github.com/Vt-mmm/piagent@v1.5.5
 ```
 
 Direct `pi install` does not create `piagent-*` commands on `PATH`.

package/docs/security-threat-model.md

@@ -25,7 +25,7 @@ This document covers the packaged guard, project profiles, capability locks, ins
 - The operator, operating-system account, Pi host, and explicitly trusted project repository are trusted to execute code.
 - Project-local Pi resources are loaded only after Pi project trust or an explicit operator override.
 - A human remains available to approve destructive and external-provider actions.
-- Supported release verification covers macOS Apple Silicon + Bash, Linux x64 + Bash, Node.js `>=22.19.0`, and the exact Pi host version declared by the release. macOS Intel + Bash and Linux ARM64 + Bash are supported targets that need local smoke verification before broad rollout. Native Windows is not a team-rollout target for v1.5.4, and WSL2 is experimental/unverified.
+- Supported release verification covers macOS Apple Silicon + Bash, Linux x64 + Bash, Node.js `>=22.19.0`, and the exact Pi host version declared by the release. macOS Intel + Bash and Linux ARM64 + Bash are supported targets that need local smoke verification before broad rollout. Native Windows is not a team-rollout target for v1.5.5, and WSL2 is experimental/unverified.
 - Registry, GitHub, model-provider, MCP-provider, and Vercel controls are external dependencies. Their account security and platform guarantees are not replaced by this repository.
 
 ## Threat actors and failure modes

package/docs/team-onboarding.md

@@ -10,7 +10,7 @@ Một thành viên mới không cần biết local path của maintainer. Luồn
 ```bash
 node --version  # >= 22.19.0
 npm install -g --ignore-scripts @earendil-works/pi-coding-agent@0.84.1
-npm install -g --ignore-scripts @piagent/platform@1.5.4
+npm install -g --ignore-scripts @piagent/platform@1.5.5
 piagent-install --stable
 cd /path/to/project
 pi
@@ -44,7 +44,7 @@ Mặc định team dùng stable helper:
 ```bash
 node --version  # >= 22.19.0
 npm install -g --ignore-scripts @earendil-works/pi-coding-agent@0.84.1
-npm install -g --ignore-scripts @piagent/platform@1.5.4
+npm install -g --ignore-scripts @piagent/platform@1.5.5
 piagent-install --stable --dry-run
 piagent-install --stable
 ```

package/docs-site/architecture.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/architecture" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/architecture" hreflang="en" lang="en">EN</a>

package/docs-site/benchmark.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/benchmark" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/benchmark" hreflang="en" lang="en">EN</a>

package/docs-site/commands.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/commands" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/commands" hreflang="en" lang="en">EN</a>

package/docs-site/context-engine.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/context-engine" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/context-engine" hreflang="en" lang="en">EN</a>

package/docs-site/en/architecture.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/architecture" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/architecture" hreflang="en" lang="en" aria-current="true">EN</a>

package/docs-site/en/benchmark.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/benchmark" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/benchmark" hreflang="en" lang="en" aria-current="true">EN</a>

package/docs-site/en/commands.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/commands" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/commands" hreflang="en" lang="en" aria-current="true">EN</a>

package/docs-site/en/context-engine.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/context-engine" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/context-engine" hreflang="en" lang="en" aria-current="true">EN</a>

package/docs-site/en/index.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/" hreflang="en" lang="en" aria-current="true">EN</a>

package/docs-site/en/mcp-approval.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/mcp-approval" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/mcp-approval" hreflang="en" lang="en" aria-current="true">EN</a>

package/docs-site/en/mcp-auth.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/mcp-auth" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/mcp-auth" hreflang="en" lang="en" aria-current="true">EN</a>

package/docs-site/en/mcp-servers.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/mcp-servers" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/mcp-servers" hreflang="en" lang="en" aria-current="true">EN</a>

package/docs-site/en/mcp.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/mcp" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/mcp" hreflang="en" lang="en" aria-current="true">EN</a>

package/docs-site/en/permissions.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/permissions" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/permissions" hreflang="en" lang="en" aria-current="true">EN</a>

package/docs-site/en/profiles.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/profiles" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/profiles" hreflang="en" lang="en" aria-current="true">EN</a>

package/docs-site/en/quickstart.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/quickstart" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/quickstart" hreflang="en" lang="en" aria-current="true">EN</a>

package/docs-site/en/runtime.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/runtime" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/runtime" hreflang="en" lang="en" aria-current="true">EN</a>

package/docs-site/en/scope.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/scope" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/scope" hreflang="en" lang="en" aria-current="true">EN</a>

package/docs-site/en/security.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/security" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/security" hreflang="en" lang="en" aria-current="true">EN</a>

package/docs-site/en/team.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/team" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/team" hreflang="en" lang="en" aria-current="true">EN</a>

package/docs-site/en/whats-new.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/whats-new" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/whats-new" hreflang="en" lang="en" aria-current="true">EN</a>

package/docs-site/en/workflows.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/workflows" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/workflows" hreflang="en" lang="en" aria-current="true">EN</a>

package/docs-site/index.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/" hreflang="en" lang="en">EN</a>

package/docs-site/mcp-approval.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/mcp-approval" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/mcp-approval" hreflang="en" lang="en">EN</a>

package/docs-site/mcp-auth.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/mcp-auth" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/mcp-auth" hreflang="en" lang="en">EN</a>

package/docs-site/mcp-servers.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/mcp-servers" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/mcp-servers" hreflang="en" lang="en">EN</a>

package/docs-site/mcp.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/mcp" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/mcp" hreflang="en" lang="en">EN</a>

package/docs-site/permissions.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/permissions" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/permissions" hreflang="en" lang="en">EN</a>

package/docs-site/profiles.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/profiles" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/profiles" hreflang="en" lang="en">EN</a>

package/docs-site/quickstart.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/quickstart" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/quickstart" hreflang="en" lang="en">EN</a>

package/docs-site/runtime.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/runtime" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/runtime" hreflang="en" lang="en">EN</a>

package/docs-site/scope.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/scope" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/scope" hreflang="en" lang="en">EN</a>

package/docs-site/security.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/security" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/security" hreflang="en" lang="en">EN</a>

package/docs-site/team.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/team" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/team" hreflang="en" lang="en">EN</a>

package/docs-site/whats-new.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/whats-new" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/whats-new" hreflang="en" lang="en">EN</a>

package/docs-site/workflows.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.5.4 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.5 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/workflows" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/workflows" hreflang="en" lang="en">EN</a>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@piagent/platform",
-  "version": "1.5.4",
+  "version": "1.5.5",
   "license": "MIT",
   "publishConfig": {
     "access": "public",

package/packages/piagent-core/extensions/guard-types.ts

@@ -446,6 +446,7 @@ export type CommandRule = {
   id: string;
   action: "allow" | "prompt" | "forbid";
   match: "prefix" | "contains" | "regex";
+  ignoreSearchArguments?: boolean;
   value: string | string[];
   reason: string;
 };

package/packages/piagent-core/extensions/piagent-guard.ts

@@ -90,7 +90,7 @@ import { completeTaskDigestRefresh } from "./task-digest-migration.js";
 import { WORKING_TREE_DIGEST_ALGORITHM, isCurrentWorkingTreeDigest, workingTreeObservation, workingTreeSnapshotUsesCurrentAlgorithm } from "./working-tree-digest.js";
 import { appendJsonlBounded } from "./state-retention.js";
 import { ensurePrivateStateDirectory, resolveLocalStatePath } from "./local-state-path.js";
-import { piApprovalBroker, type ApprovalActionDraft } from "../runtime/inspection/approval-broker.ts";
+import { piApprovalBroker, type ApprovalActionDraft, type ApprovalUnavailableFallback } from "../runtime/inspection/approval-broker.ts";
 import { inspectTaskControlState } from "../runtime/inspection/task-control-journal.ts";
 import { createSourceMutationGuardBindings } from "../runtime/policy/source-mutation-guard-binding.ts";
 import {
@@ -1090,6 +1090,20 @@ function isPlainRecord(value: unknown): value is Record<string, unknown> {
   return prototype === Object.prototype || prototype === null;
 }
 
+function approvalUnavailableFallback(ctx: Pick<ExtensionContext, "ui">): ApprovalUnavailableFallback {
+  // The symbol is a cross-package runtime marker, not an import, so piagent-core
+  // remains independent of the WebUI package. A Gateway has no interactive
+  // terminal behind `ctx.ui.confirm`; if brokering is unavailable it must fail
+  // closed immediately instead of awaiting an impossible terminal response.
+  try {
+    return Reflect.get(ctx.ui as object, Symbol.for("piagent.webui.gateway-runtime-ui.v1")) === true
+      ? "deny"
+      : "terminal-confirm";
+  } catch {
+    return "terminal-confirm";
+  }
+}
+
 function evaluatePathLikeToolAccess(
   cwd: string,
   toolName: string,
@@ -4596,7 +4610,7 @@ export default function piagentGuard(pi: ExtensionAPI) {
     });
     if (phaseMutationDecision) return phaseMutationDecision;
     if (pendingHumanApproval && !sessionTask) {
-      const approval = await piApprovalBroker.request({ cwd: ctx.cwd, rawSessionId: ctx.sessionManager.getSessionId(), toolCallId: String(event.toolCallId), expectedTask: null, action: { ...pendingHumanApproval.action, preconditionClass: "runtime-only", treePrecondition: null }, terminalConfirm: () => ctx.ui.confirm(pendingHumanApproval!.prompt, pendingHumanApproval!.title) });
+      const approval = await piApprovalBroker.request({ cwd: ctx.cwd, rawSessionId: ctx.sessionManager.getSessionId(), toolCallId: String(event.toolCallId), expectedTask: null, action: { ...pendingHumanApproval.action, preconditionClass: "runtime-only", treePrecondition: null }, terminalConfirm: () => ctx.ui.confirm(pendingHumanApproval!.prompt, pendingHumanApproval!.title), unavailableFallback: approvalUnavailableFallback(ctx) });
       if (!approval.allowed) return { block: true, reason: pendingHumanApproval.action.kind === "external-provider-action" && !SHELL_TOOL_NAMES.has(event.toolName) ? `User denied external provider action: ${event.toolName}` : `User denied command: ${pendingHumanApproval.action.reason}` };
       pendingHumanApproval = null;
     }
@@ -4659,6 +4673,7 @@ export default function piagentGuard(pi: ExtensionAPI) {
         : { workspaceRevision: `workspace-rev.${crypto.createHash("sha256").update(currentTreeDigest).digest("hex")}`, indexRevision: null, preimageDigest: currentTreeDigest };
       const approval = await piApprovalBroker.request({ cwd: ctx.cwd, rawSessionId: ctx.sessionManager.getSessionId(), toolCallId: String(event.toolCallId), expectedTask: sessionTask ? { taskId: sessionTask.taskId, taskRunId: sessionTask.taskRunId } : null,
         action: { ...pendingHumanApproval.action, treePrecondition }, terminalConfirm: () => ctx.ui.confirm(pendingHumanApproval!.prompt, pendingHumanApproval!.title),
+        unavailableFallback: approvalUnavailableFallback(ctx),
         recheck: () => !treePrecondition || (() => { const current = workingTreeSnapshot(ctx.cwd);
           return !workingTreeSnapshotHasUnavailableEvidence(current) && workingTreeEvidenceDigest(current) === treePrecondition.preimageDigest; })() });
       if (!approval.allowed) return { block: true, reason: pendingHumanApproval.action.kind === "external-provider-action" && !SHELL_TOOL_NAMES.has(event.toolName) ? `User denied external provider action: ${event.toolName}` : `User denied command: ${pendingHumanApproval.action.reason}` };

package/packages/piagent-core/extensions/policy-core.js

@@ -664,7 +664,7 @@ function commandRuleMatches(rule, segment, words) {
     return arrayStartsWith(words, prefix);
   }
   const raw = Array.isArray(rule.value) ? rule.value.join(" ") : rule.value;
-  if (rule.match === "contains") return segment.toLowerCase().includes(raw.toLowerCase());
+  if (rule.match === "contains") return !(rule.ignoreSearchArguments && ["grep", "egrep", "fgrep", "rg"].includes(commandBasename(stripWrapper(words)[0] ?? ""))) && segment.toLowerCase().includes(raw.toLowerCase());
   try {
     return new RegExp(raw, "i").test(segment);
   } catch {

package/packages/piagent-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@piagent/core",
-  "version": "1.5.4",
+  "version": "1.5.5",
   "type": "module",
   "private": true,
   "license": "MIT",

package/packages/piagent-core/policies/base-policy.json

@@ -99,6 +99,7 @@
         "id": "prompt-database-migration",
         "action": "prompt",
         "match": "contains",
+        "ignoreSearchArguments": true,
         "value": "migrate",
         "reason": "Database migrations require explicit human confirmation."
       }

package/packages/piagent-core/runtime/inspection/activity-event-adapter.ts

@@ -54,7 +54,11 @@ export function adaptActivityTelemetryEvent(input: ActivityEventAdapterInput): R
   const activityType = hasOperation ? "tool" : ["bash", "shell", "exec"].includes(toolName) ? "command" : "other";
   const failed = eventName === "tool_result" && (event.isError === true || typeof event.exitCode === "number" && event.exitCode !== 0);
   const blocked = eventName === "tool_decision";
-  const state = eventName === "tool_call" ? "started" : blocked ? "blocked" : failed ? "failed" : "finished";
+  // `tool_call` is emitted before policy authorization. Calling it "started"
+  // made the Dashboard claim a command was running while it was still waiting
+  // for (or had failed to obtain) permission. Native Gateway
+  // `tool_execution_start` remains the authoritative running boundary.
+  const state = eventName === "tool_call" ? "requested" : blocked ? "blocked" : failed ? "failed" : "finished";
   const kind = `activity.${state}`;
   const previewValue = blocked ? event.reason : event.command ?? event.targetPath ?? event.toolName;
   const preview = safeText(previewValue, 4000);

package/packages/piagent-core/runtime/inspection/approval-broker.ts

@@ -42,6 +42,7 @@ type Pending = { request: Request; resolve(value: ApprovalGuardDecision): void;
 export type ApprovalBrokerEvent = { kind: "requested" | "resolved" | "expired" | "cancelled"; approvalRef: string; request?: Request; receipt?: Receipt };
 export type ApprovalGuardDecision = { allowed: boolean; brokered: boolean; receipt: Receipt | null;
   consume(): boolean; cancel(reasonCode?: string): void };
+export type ApprovalUnavailableFallback = "terminal-confirm" | "deny";
 
 function canonical(value: unknown): string {
   if (Array.isArray(value)) return `[${value.map(canonical).join(",")}]`;
@@ -60,6 +61,10 @@ function exactKeys(value: unknown, keys: string[]): boolean {
 function ref(prefix: string, secret: Buffer, value: unknown): string {
   return `${prefix}.${createHmac("sha256", secret).update(canonical(value)).digest("hex")}`;
 }
+function providerRef(prefix: string, secret: Buffer, value: string): string | null {
+  if (!value) return null;
+  return REF.test(value) ? value : ref(prefix, secret, value);
+}
 function digest(secret: Buffer, value: unknown): string { return `sha256:${createHmac("sha256", secret).update(canonical(value)).digest("hex")}`; }
 function safe(value: unknown, maximum: number): { text: string; redacted: boolean; truncated: boolean } {
   const raw = String(value ?? ""); const redacted = redactSensitiveText(raw);
@@ -104,6 +109,13 @@ export class PiApprovalBroker {
     return targets.length;
   }
 
+  cancelForOperation(cwd: string, rawSessionId: string, agentOperationId: string, reason = "operation-aborted"): number {
+    const binding = this.#bindings.get(key(cwd, rawSessionId)); if (!binding) return 0;
+    const targets = [...binding.pending.entries()].filter(([, pending]) => pending.request.identity.agentOperationId === agentOperationId);
+    for (const [approvalRef] of targets) this.#cancelPending(binding, approvalRef, reason, "runtime-control", "cancelled");
+    return targets.length;
+  }
+
   projection(cwd: string, rawSessionId: string): { revision: string | null; summary: Record<string, unknown> } {
     const binding = this.#bindings.get(key(cwd, rawSessionId));
     if (!binding) return { revision: null, summary: { state: "unknown", pending: [], recent: [],
@@ -123,22 +135,29 @@ export class PiApprovalBroker {
   }
 
   async request(input: { cwd: string; rawSessionId: string; toolCallId: string; action: ApprovalActionDraft;
-    expectedTask?: { taskId: string; taskRunId: string } | null; terminalConfirm(): Promise<boolean>; recheck?(): boolean; ttlMs?: number }): Promise<ApprovalGuardDecision> {
+    expectedTask?: { taskId: string; taskRunId: string } | null; terminalConfirm(): Promise<boolean>;
+    unavailableFallback?: ApprovalUnavailableFallback; recheck?(): boolean; ttlMs?: number }): Promise<ApprovalGuardDecision> {
     const binding = this.#bindings.get(key(input.cwd, input.rawSessionId));
     const authority = binding?.authority();
+    // Provider tool-call IDs are opaque. OpenAI Responses IDs, for example,
+    // can contain `|`, while public WebUI refs deliberately cannot. Rejecting
+    // the provider alphabet sent Gateway approvals into the terminal fallback,
+    // where no terminal exists. Keep the provider value private and bind the
+    // approval to a deterministic broker-local ref instead.
+    const toolCallId = binding ? providerRef("tool", binding.secret, input.toolCallId) : null;
     if (!binding || !authority || authority.taskState !== "active" || input.expectedTask && (authority.identity.taskId !== input.expectedTask.taskId || authority.identity.taskRunId !== input.expectedTask.taskRunId)
       || !REF.test(authority.identity.agentOperationId)
-      || !REF.test(input.toolCallId) || binding.pending.size >= MAX_PENDING) return this.#terminalOnly(input.terminalConfirm);
+      || !toolCallId || binding.pending.size >= MAX_PENDING) return this.#unavailable(input);
     const now = Date.now(), requestedAt = new Date(now).toISOString(), expiresAt = new Date(now + Math.min(Math.max(input.ttlMs ?? DEFAULT_TTL_MS, 5_000), DEFAULT_TTL_MS)).toISOString();
-    const approvalRef = ref("approval", binding.secret, [input.toolCallId, now, randomUUID()]);
+    const approvalRef = ref("approval", binding.secret, [toolCallId, now, randomUUID()]);
     const decisionToken = randomBytes(32).toString("base64url");
     const nextRevision = this.#nextRevision(binding, "requested", approvalRef);
-    const identity: Identity = { ...authority.identity, toolCallId: input.toolCallId };
+    const identity: Identity = { ...authority.identity, toolCallId };
     const action = this.#action(binding, input.action, input.cwd);
     const expectedRevisions: Revisions = { ...authority.revisions, approvalRevision: nextRevision,
       treePrecondition: input.action.preconditionClass === "runtime-only" ? null : input.action.treePrecondition ?? null };
     if ((input.action.preconditionClass !== "runtime-only" && !expectedRevisions.treePrecondition)
-      || !this.#validTree(expectedRevisions.treePrecondition)) return this.#terminalOnly(input.terminalConfirm);
+      || !this.#validTree(expectedRevisions.treePrecondition)) return this.#unavailable(input);
     const request: Request = { schemaVersion: 1, version: "piagent-webui-approval-v1", recordType: "request", approvalRef, decisionToken,
       identity, action, expectedRevisions, state: "waiting", requestedAt, expiresAt, executor: "pi-guard", directExecution: false };
     const result = new Promise<ApprovalGuardDecision>((resolve) => {
@@ -183,6 +202,11 @@ export class PiApprovalBroker {
       consume: () => false, cancel: () => undefined }));
   }
 
+  #unavailable(input: { terminalConfirm(): Promise<boolean>; unavailableFallback?: ApprovalUnavailableFallback }): Promise<ApprovalGuardDecision> {
+    if (input.unavailableFallback !== "deny") return this.#terminalOnly(input.terminalConfirm);
+    return Promise.resolve({ allowed: false, brokered: false, receipt: null, consume: () => false, cancel: () => undefined });
+  }
+
   #action(binding: Binding, draft: ApprovalActionDraft, cwd: string): Record<string, unknown> {
     const command = draft.commandPreview === null || draft.commandPreview === undefined ? null : safe(draft.commandPreview, 4_000);
     const parameter = safe(draft.parameterPreview ?? "No additional parameters", 4_000);

package/packages/piagent-webui/gateway/session-runtime-supervisor.ts

@@ -298,6 +298,10 @@ export class SessionRuntimeSupervisor {
     const active = this.#active.get(sessionRef), session = active?.runtime.session;
     if (!active || !session || active.operationRef !== operationRef) throw new Error("session-operation-conflict");
     const completion = active.completion;
+    // Extension hooks do not receive the Agent abort signal while awaiting a
+    // human approval. Resolve the exact operation's broker promise first so a
+    // stop request can reach the host instead of waiting for approval expiry.
+    piApprovalBroker.cancelForOperation(active.info.cwd, active.info.id, operationRef);
     await session.abort();
     if (clearQueued) session.clearQueue();
     await completion;

package/scripts/piagent-dashboard.mjs

@@ -122,6 +122,17 @@ async function currentLaunchUrl() {
   return null;
 }
 
+async function waitForGatewayStopped(previous, timeoutMs = 8_000) {
+  const deadline = Date.now() + timeoutMs;
+  while (Date.now() < deadline) {
+    const previousAlive = Boolean(previous && processAlive(previous.pid));
+    const liveUrl = await currentLaunchUrl();
+    if (!previousAlive && !liveUrl) return;
+    await new Promise((resolve) => setTimeout(resolve, 80));
+  }
+  throw new Error("gateway-restart-stop-timeout\nThe previous Gateway did not stop; restart refused to reuse the old process.");
+}
+
 async function ensureStarted() {
   const existing = await currentLaunchUrl();
   if (existing) return existing;
@@ -199,8 +210,9 @@ async function main() {
     return;
   }
   if (command === "restart") {
+    const previous = readGatewayDescriptor(gatewayProfileState(agentDir));
     try { await control("stop"); } catch { /* already stopped */ }
-    await new Promise((resolve) => setTimeout(resolve, 150));
+    await waitForGatewayStopped(previous);
     const launchUrl = await ensureStarted();
     output(json ? { state: "running", launchUrl } : launchUrl);
     openBrowser(launchUrl);