@vanillagreen/pi-claude-bridge 3.2.2 → 4.0.0

package/README.md

@@ -2,8 +2,8 @@
 
 Works with OAuth subscription, no API key, no errors.
 
-![Claude bridge demo response](https://raw.githubusercontent.com/vanillagreencom/vstack/main/pi-extensions/pi-claude-bridge/assets/bridge-demo.png)
-![Pi Claude settings panel](https://raw.githubusercontent.com/vanillagreencom/vstack/main/pi-extensions/pi-claude-bridge/assets/settings-panel.png)
+![Claude bridge demo response](https://raw.githubusercontent.com/vanillagreencom/kendex/main/pi-extensions/pi-claude-bridge/assets/bridge-demo.png)
+![Pi Claude settings panel](https://raw.githubusercontent.com/vanillagreencom/kendex/main/pi-extensions/pi-claude-bridge/assets/settings-panel.png)
 
 Run Claude Code as the `pi-claude` Pi provider while keeping Pi's tools and TUI.
 
@@ -33,11 +33,11 @@ Via [npm](https://www.npmjs.com/package/@vanillagreen/pi-claude-bridge):
 pi install npm:@vanillagreen/pi-claude-bridge
 ```
 
-Via [vstack](https://github.com/vanillagreencom/vstack):
+Via [kendex](https://github.com/vanillagreencom/kendex):
 
 ```bash
-cargo install --git https://github.com/vanillagreencom/vstack.git vstack
-vstack add vanillagreencom/vstack --pi-extension pi-claude-bridge --harness pi -y
+cargo install --git https://github.com/vanillagreencom/kendex.git kendex
+kendex add vanillagreencom/kendex --pi-extension pi-claude-bridge --harness pi -y
 ```
 
 Restart Pi after installation.
@@ -50,7 +50,7 @@ Extra Pi context is off by default. Enable per item in the extension manager whe
 
 ## Settings
 
-Open `/extensions:settings`; settings appear under the **Pi Claude** tab. Project settings in `.pi/settings.json` apply only after Pi marks the workspace trusted; before trust, vstack Pi extensions read user/global settings only. The bridge also reads `claude-bridge.json` (`~/.pi/agent/claude-bridge.json`, and `.pi/claude-bridge.json` in a trusted project). Settings the bridge takes from one of those files are shown with the file that supplies them, so the editor reports the value the bridge resolves rather than the default. Changing the setting in the editor writes Pi settings, which take precedence over `claude-bridge.json`.
+Open `/extensions:settings`; settings appear under the **Pi Claude** tab. Project settings in `.pi/settings.json` apply only after Pi marks the workspace trusted; before trust, kendex Pi extensions read user/global settings only. The bridge also reads `claude-bridge.json` (`~/.pi/agent/claude-bridge.json`, and `.pi/claude-bridge.json` in a trusted project). Settings the bridge takes from one of those files are shown with the file that supplies them, so the editor reports the value the bridge resolves rather than the default. Changing the setting in the editor writes Pi settings, which take precedence over `claude-bridge.json`.
 
 | Group | Setting | What it does |
 | --- | --- | --- |
@@ -80,7 +80,7 @@ Connector tools run inside Claude Code rather than in Pi, so Pi shows the model'
 
 `/pi-claude:connectors` lists the Claude account's installed claude.ai connectors by asking the account, not the model, so the answer is complete by construction.
 
-Extension-manager settings use flat package-scoped keys under `vstack.extensionManager.config["@vanillagreen/pi-claude-bridge"]` in `settings.json`. Legacy `claude-bridge.json` configuration nests these options under `provider` (prompt-context flags under `promptContext`); the flat keys are accepted there too. Environment variables work with either format. Connectors remain off by default so Pi owns tool execution.
+Extension-manager settings use flat package-scoped keys under `kendex.extensionManager.config["@vanillagreen/pi-claude-bridge"]` in `settings.json`. Legacy `claude-bridge.json` configuration nests these options under `provider` (prompt-context flags under `promptContext`); the flat keys are accepted there too. Environment variables work with either format. Connectors remain off by default so Pi owns tool execution.
 
 | Extension-manager key | Env var | Values | Default | What it does |
 | --- | --- | --- | --- | --- |

package/bundle/index.js

@@ -27046,7 +27046,7 @@ function diagDump(label, data) {
 
 // src/config.ts
 var PACKAGE_ID = "@vanillagreen/pi-claude-bridge";
-var EXTERNAL_CONFIG_RESOLVER_SYMBOL = /* @__PURE__ */ Symbol.for("vstack.pi.extension-config-resolver");
+var EXTERNAL_CONFIG_RESOLVER_SYMBOL = /* @__PURE__ */ Symbol.for("kendex.pi.extension-config-resolver");
 var VALID_EFFORT_LEVELS = /* @__PURE__ */ new Set(["low", "medium", "high", "xhigh", "max"]);
 function expandHome(input) {
   if (input === "~") return homedir();
@@ -27077,13 +27077,13 @@ function projectSettingsPath(cwd) {
   while (true) {
     const candidate = join3(current, ".pi", "settings.json");
     if (existsSync2(candidate)) return candidate;
-    if (existsSync2(join3(current, ".pi")) || existsSync2(join3(current, ".git")) || existsSync2(join3(current, ".vstack-lock.json"))) return candidate;
+    if (existsSync2(join3(current, ".pi")) || existsSync2(join3(current, ".git")) || existsSync2(join3(current, ".kendex-lock.json"))) return candidate;
     const parent = dirname2(current);
     if (parent === current) return join3(resolve2(cwd), ".pi", "settings.json");
     current = parent;
   }
 }
-var PROJECT_TRUST_SYMBOL = /* @__PURE__ */ Symbol.for("vstack.pi.project-trust");
+var PROJECT_TRUST_SYMBOL = /* @__PURE__ */ Symbol.for("kendex.pi.project-trust");
 function projectTrustRegistry() {
   const host = globalThis;
   const existing = host[PROJECT_TRUST_SYMBOL];
@@ -27130,7 +27130,7 @@ function readManagerConfig(cwd) {
     if (!existsSync2(path)) continue;
     try {
       const parsed = JSON.parse(readFileSync2(path, "utf8"));
-      const configRoot = asRecord(asRecord(asRecord(parsed?.vstack)?.extensionManager)?.config);
+      const configRoot = asRecord(asRecord(asRecord(parsed?.kendex)?.extensionManager)?.config);
       const config2 = asRecord(configRoot?.[PACKAGE_ID]);
       if (config2) mergeDeep(merged, path === userPath ? config2 : withoutUserScopeOnlyKeys(config2));
     } catch (error51) {
@@ -28118,7 +28118,7 @@ function extractAllToolResults(messages) {
 
 // src/request-lane.ts
 import { AsyncLocalStorage } from "node:async_hooks";
-var REQUEST_LANE_SYMBOL = /* @__PURE__ */ Symbol.for("vstack.pi.claude-bridge.request-lane.v1");
+var REQUEST_LANE_SYMBOL = /* @__PURE__ */ Symbol.for("kendex.pi.claude-bridge.request-lane.v1");
 function requestLaneStorage() {
   const host = globalThis;
   let storage = host[REQUEST_LANE_SYMBOL];
@@ -28262,7 +28262,7 @@ var QueryContext = class {
    *  set endToolUseTurn stamps from the turn's content. A forwarded id is one Pi
    *  will execute and answer; it must never be emitted again (a lagging stream
    *  replays the same tool_use into the NEXT turn, and per-message turnBlocks
-   *  dedup cannot see across turns — vstack#1469's duplicate executions), and a
+   *  dedup cannot see across turns — kendex#1469's duplicate executions), and a
    *  handler waiting on it must be left waiting at the stranded-handler drains.
    *  Query-scoped, never reset per message. */
   forwardedToolCallIds = /* @__PURE__ */ new Set();
@@ -28294,7 +28294,7 @@ var QueryContext = class {
    *  same reason: a late handler firing after resetToolTracking wiped the
    *  per-message records must still be able to exact-match the parked/queued
    *  result of ITS OWN call — without stored args the only fallback is
-   *  sole-same-name, which can hand it a LIVE sibling's id (vstack#1469). */
+   *  sole-same-name, which can hand it a LIVE sibling's id (kendex#1469). */
   queryToolArgs = /* @__PURE__ */ new Map();
   claimedToolCallIds = /* @__PURE__ */ new Set();
   deliveredToolResultIds = /* @__PURE__ */ new Set();
@@ -28310,7 +28310,7 @@ var QueryContext = class {
   committedOutput = false;
   /** True when this query holds NO claim on the module-level shared session
    *  record: a reentrant (subagent) query, or a foreign-conversation one-shot
-   *  (vstack#1001). Every shared-record mutation reachable from this context —
+   *  (kendex#1001). Every shared-record mutation reachable from this context —
    *  reportToolResultMismatch's needsRebuild/forceRotate mark, the cursor
    *  advances on the tool-result-delivery and orphaned-result paths — must
    *  no-op so the PARENT's record stays untouched. Assigned at fresh-query
@@ -28535,7 +28535,7 @@ var QueryContext = class {
    * mismatch report for the whole query (queued>0 with 0/0 counters and no tool
    * names) and forces a session rebuild per turn. But the boundary does NOT
    * prove the handler gave up — the SDK staggers handler invocations, and the
-   * 2026-08-17 deadlock session (vstack#1469) had three of five parallel
+   * 2026-08-17 deadlock session (kendex#1469) had three of five parallel
    * handlers fire after this reap destroyed their results. So the reap parks
    * instead of dropping: reports stay clean, and a late handler still gets its
    * real result through takeQueuedOrParkedResult.
@@ -28601,7 +28601,7 @@ var QueryContext = class {
     };
   }
 };
-var QUERY_LANES_SYMBOL = /* @__PURE__ */ Symbol.for("vstack.pi.claude-bridge.query-lanes.v1");
+var QUERY_LANES_SYMBOL = /* @__PURE__ */ Symbol.for("kendex.pi.claude-bridge.query-lanes.v1");
 function queryLaneStore() {
   const host = globalThis;
   let store = host[QUERY_LANES_SYMBOL];
@@ -28764,7 +28764,7 @@ function summarizeMissingToolNames(missing) {
 }
 
 // src/bridge-state.ts
-var SHARED_SESSION_LANES_SYMBOL = /* @__PURE__ */ Symbol.for("vstack.pi.claude-bridge.shared-session-lanes.v1");
+var SHARED_SESSION_LANES_SYMBOL = /* @__PURE__ */ Symbol.for("kendex.pi.claude-bridge.shared-session-lanes.v1");
 function sharedSessionLaneStore() {
   const host = globalThis;
   let store = host[SHARED_SESSION_LANES_SYMBOL];
@@ -28797,7 +28797,7 @@ function clearSharedSessionLanes() {
   store.sessions.clear();
   store.defaultSession = null;
 }
-var STARTED_LANES_SYMBOL = /* @__PURE__ */ Symbol.for("vstack.pi.claude-bridge.started-lanes.v1");
+var STARTED_LANES_SYMBOL = /* @__PURE__ */ Symbol.for("kendex.pi.claude-bridge.started-lanes.v1");
 function startedLaneStore() {
   const host = globalThis;
   let store = host[STARTED_LANES_SYMBOL];
@@ -44570,7 +44570,7 @@ import { homedir as homedir4 } from "node:os";
 import { join as join8 } from "node:path";
 
 // src/rate-limit.ts
-var RATE_LIMIT_AUTO_RESUME_EVENT = "vstack:rate-limit";
+var RATE_LIMIT_AUTO_RESUME_EVENT = "kendex:rate-limit";
 var RATE_LIMIT_TOKEN = "\x1B[31m[rate-limit]\x1B[39m";
 var USAGE_LIMIT_PREFIXES = Array.isArray(qO) ? qO : [];
 function coerceMessageText(value) {
@@ -44640,8 +44640,8 @@ function formatAllowedRateLimitWarning(info) {
 }
 
 // src/account-router.ts
-var CLAUDE_ACCOUNT_ROUTER_SYMBOL = /* @__PURE__ */ Symbol.for("vstack.pi.claude-account-router.v1");
-var CLAUDE_BRIDGE_ACCOUNT_HOST_SYMBOL = /* @__PURE__ */ Symbol.for("vstack.pi.claude-bridge.account-host.v1");
+var CLAUDE_ACCOUNT_ROUTER_SYMBOL = /* @__PURE__ */ Symbol.for("kendex.pi.claude-account-router.v1");
+var CLAUDE_BRIDGE_ACCOUNT_HOST_SYMBOL = /* @__PURE__ */ Symbol.for("kendex.pi.claude-bridge.account-host.v1");
 function resolveClaudeAccountRouter() {
   const host = globalThis;
   const candidate = host[CLAUDE_ACCOUNT_ROUTER_SYMBOL];
@@ -44920,7 +44920,7 @@ function restoreSharedSessionFromPi(ctx2) {
   });
   debug(`restoreSharedSession: restored ${persisted.sessionId.slice(0, 8)}, cursor=${cursor}, account=${accountProfileId ?? "default"}`);
 }
-var SCHEDULED_PERSISTENCE_SYMBOL = /* @__PURE__ */ Symbol.for("vstack.pi.claude-bridge.scheduled-persistence.v1");
+var SCHEDULED_PERSISTENCE_SYMBOL = /* @__PURE__ */ Symbol.for("kendex.pi.claude-bridge.scheduled-persistence.v1");
 function scheduledPersistenceTimers() {
   const host = globalThis;
   let store = host[SCHEDULED_PERSISTENCE_SYMBOL];
@@ -45037,7 +45037,7 @@ function verifyWrittenSession2(jsonlPath, expectedSessionId, expectedRecordCount
     safeNotify(
       `Session file issue: ${msg}
 cwd=${displayPath(cwd)} realpath=${displayPath(safeRealpath(cwd))}
-Please copy and paste this message into a new issue at https://github.com/vanillagreencom/vstack/issues/new` + (DEBUG ? ` and attach ${DEBUG_LOG_PATH}` : ` (rerun with CLAUDE_BRIDGE_DEBUG=1 to capture a debug log)`),
+Please copy and paste this message into a new issue at https://github.com/vanillagreencom/kendex/issues/new` + (DEBUG ? ` and attach ${DEBUG_LOG_PATH}` : ` (rerun with CLAUDE_BRIDGE_DEBUG=1 to capture a debug log)`),
       "warning"
     );
     diagDump("session_verify_fail", { msg, jsonlPath, cwd, realpath: safeRealpath(cwd), claudeConfigDir: claudeDir ?? null });
@@ -45818,7 +45818,7 @@ function commandCwd(ctx2) {
 }
 async function tryOpenExtensionManagerSettings(ctx2) {
   const host = globalThis;
-  const openQuickSettings = host[/* @__PURE__ */ Symbol.for("vstack.pi.extension-manager.open-quick-settings")];
+  const openQuickSettings = host[/* @__PURE__ */ Symbol.for("kendex.pi.extension-manager.open-quick-settings")];
   if (typeof openQuickSettings !== "function") return false;
   try {
     await openQuickSettings(ctx2, "@vanillagreen/pi-claude-bridge");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vanillagreen/pi-claude-bridge",
-  "version": "3.2.2",
+  "version": "4.0.0",
   "description": "Pi provider bridge that runs Claude Code through the Claude Agent SDK, with opt-in forwarding for Pi prompt context.",
   "type": "module",
   "keywords": [
@@ -15,9 +15,9 @@
     "extensions": [
       "./bundle/index.js"
     ],
-    "image": "https://raw.githubusercontent.com/vanillagreencom/vstack/main/pi-extensions/pi-claude-bridge/assets/bridge-demo.png"
+    "image": "https://raw.githubusercontent.com/vanillagreencom/kendex/main/pi-extensions/pi-claude-bridge/assets/bridge-demo.png"
   },
-  "vstack": {
+  "kendex": {
     "extensionManager": {
       "displayName": "Pi Claude",
       "settings": [
@@ -168,12 +168,12 @@
   ],
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/vanillagreencom/vstack.git",
+    "url": "git+https://github.com/vanillagreencom/kendex.git",
     "directory": "pi-extensions/pi-claude-bridge"
   },
-  "homepage": "https://github.com/vanillagreencom/vstack/tree/main/pi-extensions/pi-claude-bridge",
+  "homepage": "https://github.com/vanillagreencom/kendex/tree/main/pi-extensions/pi-claude-bridge",
   "bugs": {
-    "url": "https://github.com/vanillagreencom/vstack/issues"
+    "url": "https://github.com/vanillagreencom/kendex/issues"
   },
   "author": "vanillagreen",
   "publishConfig": {

package/src/account-router.ts

@@ -13,8 +13,8 @@ import { join } from "node:path";
 import { debug } from "./debug.js";
 import { resetTimestampMs } from "./rate-limit.js";
 
-export const CLAUDE_ACCOUNT_ROUTER_SYMBOL = Symbol.for("vstack.pi.claude-account-router.v1");
-export const CLAUDE_BRIDGE_ACCOUNT_HOST_SYMBOL = Symbol.for("vstack.pi.claude-bridge.account-host.v1");
+export const CLAUDE_ACCOUNT_ROUTER_SYMBOL = Symbol.for("kendex.pi.claude-account-router.v1");
+export const CLAUDE_BRIDGE_ACCOUNT_HOST_SYMBOL = Symbol.for("kendex.pi.claude-bridge.account-host.v1");
 
 export interface ClaudeAccountRoute {
 	profileId: string;

package/src/assistant-stream.ts

@@ -88,7 +88,7 @@ const TOOL_USE_END_GRACE_MS = 1500;
 
 /** End the current pi stream as a tool_use turn boundary. Safe to call when the
  *  turn already ended (no-op). Every end path funnels here, so this is where
- *  two invariants are enforced by construction (vstack#1469): a block still
+ *  two invariants are enforced by construction (kendex#1469): a block still
  *  carrying partialJson never ships — Pi executes the done message's content,
  *  and truncated arguments must never execute — and every call that DOES ship
  *  is stamped forwarded so no lagging replay can dispatch it again. */
@@ -105,7 +105,7 @@ export function endToolUseTurn(c: QueryContext): void {
 	}
 	// Every tool call Pi is about to execute from this turn is owed a result and
 	// must never be dispatched again: a lagging stream replays the same tool_use
-	// into the NEXT turn, whose per-message dedup cannot see it (vstack#1469).
+	// into the NEXT turn, whose per-message dedup cannot see it (kendex#1469).
 	for (const block of c.turnOutput.content as Array<{ type?: string; id?: unknown }>) {
 		if (block?.type === "toolCall" && typeof block.id === "string") c.forwardedToolCallIds.add(block.id);
 	}
@@ -148,7 +148,7 @@ export function scheduleToolUseTurnEnd(c: QueryContext, action: () => void, sour
  * entries would start poisoning mismatch reports — but it does NOT prove the
  * handler gave up: the SDK staggers handler invocations, and in the 2026-08-17
  * deadlock session three of five parallel handlers fired after this point
- * (vstack#1469). Parked results stay consumable through
+ * (kendex#1469). Parked results stay consumable through
  * takeQueuedOrParkedResult; one that is never consumed belongs to a call the
  * SDK abandoned client-side (permission denial), which is exactly what the
  * notice describes.
@@ -187,7 +187,7 @@ export const FINALIZE_MAX_REARMS = 3;
  *  so end the pi stream like the `message_stop` path — with this handler's
  *  schema-validated arguments, never a partial parse — after settling every
  *  sibling whose handler has fired and giving a merely-lagging stream up to
- *  FINALIZE_MAX_REARMS extra grace periods for the rest (vstack#1469).
+ *  FINALIZE_MAX_REARMS extra grace periods for the rest (kendex#1469).
  *
  *  The dead-stream guard is a backstop: the grace timer's own stream-identity
  *  check means this normally never runs after the turn ended. The primary
@@ -205,7 +205,7 @@ export function finalizeToolUseTurnFromMcpInvocation(
 		// be answered — the yield that could have replayed its call was consumed
 		// against a null stream, and the dead-mark below suppresses any replay
 		// that has not happened yet. Failing it now is what turns the observed
-		// multi-hour session deadlock into one retryable error (vstack#1469).
+		// multi-hour session deadlock into one retryable error (kendex#1469).
 		if (failStrandedToolCall(queryCtx, toolCallId)) {
 			debug(`mcp handler: ${toolName} [${toolCallId}] stranded — turn ended before its call reached Pi; resolved with error`);
 			diagDump("tool_handler_stranded", { toolCallId, toolName, site: "finalize-no-stream" });
@@ -221,7 +221,7 @@ export function finalizeToolUseTurnFromMcpInvocation(
 			// with the COMPLETE schema-validated input, so the handler's copy is
 			// authoritative — the streamed partial JSON is by definition behind it.
 			// Settling from the partial is what forwarded `{}`-argument calls that
-			// Pi then executed and errored (vstack#1469), exactly the divergence
+			// Pi then executed and errored (kendex#1469), exactly the divergence
 			// the synthesize branch below never had.
 			block.arguments = mappedArgs;
 			queryCtx.updateToolCallArgs(block.id, block.arguments);
@@ -355,7 +355,7 @@ export function processStreamEvent(
 			if (typeof streamedId === "string" && (c.forwardedToolCallIds.has(streamedId) || c.deadToolCallIds.has(streamedId))) {
 				// A lagging stream replaying a call Pi already executed — or one whose
 				// handler was already failed as stranded — into a later turn. Mirroring
-				// it would make Pi dispatch it a second time (vstack#1469).
+				// it would make Pi dispatch it a second time (kendex#1469).
 				c.suppressedStreamIndexes.add(event.index);
 				debug(`processStreamEvent: tool_use ${streamedId} already ${c.forwardedToolCallIds.has(streamedId) ? "forwarded" : "dead"} — suppressing duplicate stream block`);
 				return;
@@ -364,7 +364,7 @@ export function processStreamEvent(
 				// Same turn, same id: the completed-message yield beat the stream (its
 				// block is already recorded with complete arguments). A second
 				// partialJson copy would ship the id twice in one done message — and
-				// if its stop never arrives, ship it truncated (vstack#1469).
+				// if its stop never arrives, ship it truncated (kendex#1469).
 				c.suppressedStreamIndexes.add(event.index);
 				debug(`processStreamEvent: tool_use ${streamedId} already recorded in this turn — suppressing duplicate stream block`);
 				return;
@@ -494,7 +494,7 @@ function appendMissingToolUsesFromAssistant(
 	// array of a turnOutput that endToolUseTurn already handed Pi BY REFERENCE
 	// in its done event, so a push here appends calls into a delivered message
 	// behind Pi's back — whether Pi's dispatch enumerates before or after the
-	// push is a microtask race (vstack#1469).
+	// push is a microtask race (kendex#1469).
 	const streamLive = Boolean(c.currentPiStream && c.turnOutput);
 	let sawToolUse = false;
 	for (const block of assistantMsg.content) {
@@ -511,7 +511,7 @@ function appendMissingToolUsesFromAssistant(
 		if (existingIdx < 0 && (c.forwardedToolCallIds.has(block.id) || c.deadToolCallIds.has(block.id))) {
 			// Completed-message replay of a call Pi already executed in an earlier
 			// turn (or one already failed as stranded). Not a live Pi turn boundary:
-			// sawToolUse stays false for it, and no block is emitted (vstack#1469).
+			// sawToolUse stays false for it, and no block is emitted (kendex#1469).
 			debug(`assistant message: tool_use ${block.id} already ${c.forwardedToolCallIds.has(block.id) ? "forwarded" : "dead"} — skipping duplicate`);
 			continue;
 		}
@@ -665,7 +665,7 @@ export function processAssistantMessage(message: SDKMessage, model: Model<any>,
 				// handler was already failed as stranded). This exact path produced
 				// the observed duplicate dispatches: the completed-message yield lands
 				// in the callback AFTER a grace finalize already ended the call's
-				// turn, and per-message dedup cannot see across turns (vstack#1469).
+				// turn, and per-message dedup cannot see across turns (kendex#1469).
 				// Not recorded either — a forwarded call must not be claimable again.
 				debug(`processAssistantMessage fallback: tool_use ${block.id} already ${c.forwardedToolCallIds.has(block.id) ? "forwarded" : "dead"} — skipping duplicate`);
 				continue;

package/src/bridge-commands.ts

@@ -17,7 +17,7 @@ function commandCwd(ctx: unknown): string {
 
 async function tryOpenExtensionManagerSettings(ctx: { ui: ExtensionUIContext }): Promise<boolean> {
 	const host = globalThis as unknown as Record<PropertyKey, unknown>;
-	const openQuickSettings = host[Symbol.for("vstack.pi.extension-manager.open-quick-settings")];
+	const openQuickSettings = host[Symbol.for("kendex.pi.extension-manager.open-quick-settings")];
 	if (typeof openQuickSettings !== "function") return false;
 	try {
 		await (openQuickSettings as (ctx: unknown, hint?: string) => Promise<void>)(ctx, "@vanillagreen/pi-claude-bridge");
@@ -35,7 +35,7 @@ function showBridgeStatus(ctx: { ui: ExtensionUIContext; cwd?: string }): void {
 	].join("\n"), "info");
 }
 
-// Deterministic connector enumeration for the host app (vstack#838). Reports the
+// Deterministic connector enumeration for the host app (kendex#838). Reports the
 // failure reason rather than an empty list, so "no connectors" and "could not
 // check" stay distinguishable.
 async function reportConnectorInventory(ctx: {

package/src/bridge-state.ts

@@ -23,7 +23,7 @@ export interface SessionState {
 	// never rewrite those opening messages — compact/tree-nav mutations set
 	// needsRebuild instead — so a component mismatch marks a FOREIGN
 	// conversation (a subagent-shaped query arriving while the parent is idle,
-	// vstack#1001) that must run as a clean one-shot without touching this
+	// kendex#1001) that must run as a clean one-shot without touching this
 	// record. The user component must always match; the assistant component is
 	// compared only when BOTH sides carry one, so a record stamped on turn 1
 	// (no assistant yet) still matches its own grown conversation and upgrades
@@ -56,7 +56,7 @@ interface SharedSessionLaneStoreV1 {
 	sessions: Map<string, SessionState | null>;
 }
 
-const SHARED_SESSION_LANES_SYMBOL = Symbol.for("vstack.pi.claude-bridge.shared-session-lanes.v1");
+const SHARED_SESSION_LANES_SYMBOL = Symbol.for("kendex.pi.claude-bridge.shared-session-lanes.v1");
 
 function sharedSessionLaneStore(): SharedSessionLaneStoreV1 {
 	const host = globalThis as Record<symbol, unknown>;
@@ -107,7 +107,7 @@ export function clearSharedSessionLanes(): void {
 // registry above because session_start and session_shutdown can reach different
 // module instances (`/reload` mid-session, a child agent's own copy) and both
 // must see the same entry.
-const STARTED_LANES_SYMBOL = Symbol.for("vstack.pi.claude-bridge.started-lanes.v1");
+const STARTED_LANES_SYMBOL = Symbol.for("kendex.pi.claude-bridge.started-lanes.v1");
 
 function startedLaneStore(): WeakMap<object, string> {
 	const host = globalThis as Record<symbol, unknown>;
@@ -242,7 +242,7 @@ export function reportToolResultMismatch(
 		queryCtx.reportedToolResultMismatch = true;
 		// The single choke point every mismatch path funnels through (abort,
 		// unmatched result, stream-idle, teardown). A context with no claim on
-		// the shared record (reentrant subagent or foreign one-shot, vstack#1001)
+		// the shared record (reentrant subagent or foreign one-shot, kendex#1001)
 		// still gets the full diagnostics below, but its unresolved tool state is
 		// its own — marking the PARENT's record needsRebuild/forceRotate here
 		// would flush the parent's prompt cache for a query that never touched

package/src/config.ts

@@ -1,5 +1,5 @@
 // User-facing extension config. Legacy config is loaded from
-// ~/.pi/agent/claude-bridge.json and .pi/claude-bridge.json. vstack extension
+// ~/.pi/agent/claude-bridge.json and .pi/claude-bridge.json. kendex extension
 // manager config is loaded from settings.json and overrides legacy files in
 // normal Pi sessions. Isolated embedding hosts consume only the authoritative
 // user claude-bridge.json and never read extension-manager settings.
@@ -13,11 +13,11 @@ import { debug } from "./debug.js";
 export const PACKAGE_ID = "@vanillagreen/pi-claude-bridge";
 
 /**
- * Registry the vstack extension manager reads to display the value an
+ * Registry the kendex extension manager reads to display the value an
  * extension actually resolves for a manifest key, for extensions whose config
  * has channels the manager does not own. Keyed by package id.
  */
-const EXTERNAL_CONFIG_RESOLVER_SYMBOL = Symbol.for("vstack.pi.extension-config-resolver");
+const EXTERNAL_CONFIG_RESOLVER_SYMBOL = Symbol.for("kendex.pi.extension-config-resolver");
 
 export type BridgeEffortLevel = "low" | "medium" | "high" | "xhigh" | "max";
 
@@ -138,14 +138,14 @@ function projectSettingsPath(cwd: string): string {
 	while (true) {
 		const candidate = join(current, ".pi", "settings.json");
 		if (existsSync(candidate)) return candidate;
-		if (existsSync(join(current, ".pi")) || existsSync(join(current, ".git")) || existsSync(join(current, ".vstack-lock.json"))) return candidate;
+		if (existsSync(join(current, ".pi")) || existsSync(join(current, ".git")) || existsSync(join(current, ".kendex-lock.json"))) return candidate;
 		const parent = dirname(current);
 		if (parent === current) return join(resolve(cwd), ".pi", "settings.json");
 		current = parent;
 	}
 }
 
-const PROJECT_TRUST_SYMBOL = Symbol.for("vstack.pi.project-trust");
+const PROJECT_TRUST_SYMBOL = Symbol.for("kendex.pi.project-trust");
 
 interface ProjectTrustRegistry {
 	projectSettings?: Map<string, boolean>;
@@ -212,7 +212,7 @@ function readManagerConfig(cwd: string): SettingsRecord {
 		if (!existsSync(path)) continue;
 		try {
 			const parsed = JSON.parse(readFileSync(path, "utf8"));
-			const configRoot = asRecord(asRecord(asRecord(parsed?.vstack)?.extensionManager)?.config);
+			const configRoot = asRecord(asRecord(asRecord(parsed?.kendex)?.extensionManager)?.config);
 			const config = asRecord(configRoot?.[PACKAGE_ID]);
 			if (config) mergeDeep(merged, path === userPath ? config : withoutUserScopeOnlyKeys(config));
 		} catch (error) {

package/src/connector-cache.ts

@@ -1,4 +1,4 @@
-// Cross-PROCESS cache of the connector inventory (vstack#870).
+// Cross-PROCESS cache of the connector inventory (kendex#870).
 //
 // #868 primes the inventory at provider registration, but the fetch takes ~1.5s
 // while the first query is built at ~0.5-0.8s, so turn 1 of a cold sidecar goes
@@ -18,7 +18,7 @@
 // wrong-version cache returns undefined and the caller falls back to today's
 // behaviour — the same fail-open contract as the inventory call itself.
 //
-// The ON-DISK FORMAT HAS AN EXTERNAL READER (vstack#892). drovr quarantines this
+// The ON-DISK FORMAT HAS AN EXTERNAL READER (kendex#892). drovr quarantines this
 // bundle to its sidecar process, so rather than calling `listAccountConnectors`
 // in-process it re-implements the reader half — path
 // `<piUserDir()>/connector-cache/<sha256(CLAUDE_CONFIG_DIR).hex[0..16]>.json`,

package/src/connector-inventory.ts

@@ -5,7 +5,7 @@
 // nothing in the result distinguishes "these are the connectors" from "these are
 // the connectors the search happened to return this time". Downstream then stored
 // that lower bound as authoritative, so an account with Slack attached could
-// report an inventory without Slack and no failure signal (vstack#838).
+// report an inventory without Slack and no failure signal (kendex#838).
 //
 // This module asks the account instead of the model. Verified live against a
 // personal claude_max org: the endpoint is POST (a GET returns 405) and each
@@ -23,7 +23,7 @@
 // conservatively — it under-reported, which fails safe). They are now separately
 // observable and can legitimately disagree: a correct `complete: true` inventory
 // can name Slack while `mcp__claude_ai_Slack__*` is not yet callable in this
-// process (vstack#832). Treat an inventory as NECESSARY BUT NOT SUFFICIENT for
+// process (kendex#832). Treat an inventory as NECESSARY BUT NOT SUFFICIENT for
 // availability and keep an attach-time check on the call path; do not derive
 // "can I call this tool right now" from this result.
 //

package/src/connector-runtime.ts

@@ -1,5 +1,5 @@
 // Connector prime/snapshot host: the per-credential-scope inventory cache the
-// query path reads synchronously (vstack#832/#870). Extracted from index.ts —
+// query path reads synchronously (kendex#832/#870). Extracted from index.ts —
 // this is process-lifetime runtime state, not provider streaming logic.
 //
 // Connector declarations for the query path, cached per credential scope. The
@@ -124,7 +124,7 @@ export function primeConnectorServers(claudeConfigDir?: string, overrides: Prime
 			connectorServerFailureAt.delete(key);
 			// Persist so the NEXT cold process has this synchronously. Priming always
 			// loses the race against turn 1 in its own process; a cache written by an
-			// earlier run is the only thing turn 1 can read in time (vstack#870).
+			// earlier run is the only thing turn 1 can read in time (kendex#870).
 			if (writeCachedConnectors(inventory.connectors, key)) {
 				debug(`connectors: cached ${inventory.connectors.length} entries`);
 			}
@@ -148,7 +148,7 @@ export function connectorServersSnapshot(claudeConfigDir?: string): Record<strin
 	primeConnectorServers(claudeConfigDir);
 	// Fall back to the previous run's inventory, read synchronously. This is the
 	// only thing that can populate turn 1 of a cold process, because priming
-	// cannot finish before the first query is built (vstack#870).
+	// cannot finish before the first query is built (kendex#870).
 	const cached = readCachedConnectors(key);
 	if (!cached) return {};
 	const servers = connectorMcpServers({ ok: true, complete: true, connectors: cached });

package/src/connectors.ts

@@ -57,7 +57,7 @@ export function connectorsEnabledFor(config?: Config): boolean {
 // isolation (no sources), which drops the connectors even with
 // ENABLE_CLAUDEAI_MCP_SERVERS=1. So connectors mode must pass SOME source list.
 //
-// It must be `["user"]` and nothing more (vstack#990). Connector state lives in
+// It must be `["user"]` and nothing more (kendex#990). Connector state lives in
 // USER scope — the account's config dir (CLAUDE_CONFIG_DIR for managed router
 // profiles) — so user scope is sufficient for connectors to surface. Claude
 // Code settings files can also carry an `env` map and `apiKeyHelper`; including
@@ -98,7 +98,7 @@ export const CLAUDE_AI_CONNECTOR_TOOL_PATTERNS = [
 	"mcp__claude_ai_Atlassian__*",
 ];
 
-// --- The SDK's two-name trap for built-in tools (vstack#1007, vstack#1011) ---
+// --- The SDK's two-name trap for built-in tools (kendex#1007, kendex#1011) ---
 //
 // The CLI gives some built-ins TWO spellings, and which one you see depends on
 // which SURFACE the name crosses:
@@ -118,9 +118,9 @@ export const CLAUDE_AI_CONNECTOR_TOOL_PATTERNS = [
 // This map declares each alias pair ONCE; every delivered-side membership set
 // derives its spellings from it instead of hand-copying names. Both prior
 // instances of the trap were exactly that hand-copy: CHILD_INTERNAL_TOOLS held
-// request-side spellings that no stream name ever matched (vstack#1007), and
+// request-side spellings that no stream name ever matched (kendex#1007), and
 // the connectors allowlist hook DENIED the two discovery tools it exists to
-// permit (vstack#1011). Delivered-side sets accept BOTH spellings, so a CLI
+// permit (kendex#1011). Delivered-side sets accept BOTH spellings, so a CLI
 // version that drops the aliasing cannot reintroduce the bug in either
 // direction.
 const SDK_TOOL_ALIASES: Record<string, string> = {
@@ -150,7 +150,7 @@ export const CONNECTOR_DISCOVERY_TOOLS = ["ToolSearch", "ListMcpResources", "Rea
 // each entry, derived from SDK_TOOL_ALIASES. A PreToolUse hook's `tool_name`
 // carries the canonical spelling (`ListMcpResourcesTool`), so testing the
 // request-side list directly made the fail-closed allowlist hook DENY the two
-// resource tools it exists to permit (vstack#1011).
+// resource tools it exists to permit (kendex#1011).
 const CONNECTOR_DISCOVERY_TOOL_NAMES = new Set(CONNECTOR_DISCOVERY_TOOLS.flatMap(deliveredSpellings));
 
 // --- Connector WRITE tool control (read-inline / write-by-approval) ---
@@ -243,7 +243,7 @@ function connectorNameWords(segment: string): string[] {
 // exact tool id (the CLI matcher only supports exact ids or a whole-server glob).
 //
 // PUBLIC CONTRACT — this list and `isConnectorWriteTool` have downstream
-// dependents that gate real user-facing approvals on them (vstack#892):
+// dependents that gate real user-facing approvals on them (kendex#892):
 //
 //   memsira  routes connector writes through its own gated approval flow
 //   drovr    keeps its chat sidecar permanently write-`deny` and runs an
@@ -330,7 +330,7 @@ export function isConnectorTool(name: string | undefined): boolean {
 // processStreamEvent/processAssistantMessage read. Stream names are a
 // DELIVERED surface (see SDK_TOOL_ALIASES): the two MCP-resource built-ins'
 // request-side spellings used to sit in this set and never matched anything
-// (vstack#1007). If an aliased name is ever added here, derive its spellings
+// (kendex#1007). If an aliased name is ever added here, derive its spellings
 // via deliveredSpellings rather than hand-copying them.
 //
 // The MCP-resource tools are now EXCLUDED deliberately, under BOTH spellings:
@@ -338,14 +338,14 @@ export function isConnectorTool(name: string | undefined): boolean {
 // audit it through the Pi mirror (an out-of-process sidecar has no view of the
 // bridge's own connector-call entries or the child transcript), so it stays
 // mirrored into Pi. Do not re-add either spelling without revisiting that
-// decision in vstack#1007. The allowlist hook is what lets those calls run at
-// all — see isAllowlistedConnectorSessionTool (vstack#1011).
+// decision in kendex#1007. The allowlist hook is what lets those calls run at
+// all — see isAllowlistedConnectorSessionTool (kendex#1011).
 const CHILD_INTERNAL_TOOLS = new Set(["ToolSearch", "ScheduleWakeup"]);
 
 /**
  * True for a Claude Code built-in meta-tool the child resolves in-process.
  *
- * Mirroring one into the Pi stream (vstack#980) made Pi's agent loop dispatch a
+ * Mirroring one into the Pi stream (kendex#980) made Pi's agent loop dispatch a
  * tool it does not have and deliver an error result for an id no MCP handler
  * ever claimed. The result queued in `pendingResults` until the reaper dropped
  * it — one "dropped 1 tool result(s) whose handler never matched (ToolSearch)"
@@ -381,7 +381,7 @@ export function isChildInternalTool(name: string | undefined): boolean {
  *    how a lie in a mirror becomes a lie in the conversation of record.
  *
  * 2. Claude Code's own in-process meta-tools (`isChildInternalTool`), which the
- *    child resolves without any dispatcher at all (vstack#980).
+ *    child resolves without any dispatcher at all (kendex#980).
  *
  * Takes the RAW SDK tool name, before `mapToolName` — child-executed names have
  * no Pi-side counterpart, so mapping them is meaningless. Accepts a missing
@@ -507,7 +507,7 @@ export function connectorWriteDenyHook(): HookCallback {
 // stay PRODUCT-NEUTRAL: this is shared source and every consuming app shows it.
 // Naming one host told a different app's model to use a product it has never
 // heard of, which is confusing at exactly the moment someone is debugging a
-// refused write (vstack#892). Each host describes its own approval flow in its
+// refused write (kendex#892). Each host describes its own approval flow in its
 // own prompt; this string only has to say that one exists.
 function connectorWriteDenyOutput(toolName: string) {
 	return {
@@ -534,7 +534,7 @@ function connectorWriteDenyOutput(toolName: string) {
 // This is a DELIVERED-side check — `name` is a hook's `input.tool_name`, which
 // carries the canonical spelling — so membership is tested against
 // CONNECTOR_DISCOVERY_TOOL_NAMES (both spellings), not the request-side list
-// (vstack#1011). That also carries vstack#1007's mirroring decision: the
+// (kendex#1011). That also carries kendex#1007's mirroring decision: the
 // MCP-resource tools are deliberately NOT child-internal so every resource
 // read mirrors into Pi as the consumers' audit surface — a mirror that can
 // only exist if this allowlist lets the call execute. Denying the canonical
@@ -669,7 +669,7 @@ export function toolIsolationForQuery(connectorsEnabled: boolean, writeMode: Con
 /**
  * Explicit `mcpServers` declarations for the account's CONNECTED connectors.
  *
- * Why this exists (vstack#832): claude.ai connectors load async and non-blocking,
+ * Why this exists (kendex#832): claude.ai connectors load async and non-blocking,
  * and the turn-1 tool manifest is built at +410-665ms — roughly 300ms BEFORE the
  * CLI has even fetched the connector list. The model therefore composes its first
  * answer against a manifest containing no connectors and says it has no access,

package/src/index.ts

@@ -239,18 +239,18 @@ export interface DeferredUserReplayPlan {
 	// with no image blocks).
 	prompt: string | null;
 	// Present when the run carries image blocks — the replay must send these
-	// (via wrapPromptStream) or the images are silently lost (vstack#993).
+	// (via wrapPromptStream) or the images are silently lost (kendex#993).
 	blocks: ContentBlockParam[] | null;
 }
 
 /** Plan replay of user messages pi injected mid-query (steer drain, followUp).
  *  Captures the ENTIRE trailing consecutive user run, not just the last
- *  message — dropping the earlier ones was silent input loss (vstack#967) —
+ *  message — dropping the earlier ones was silent input loss (kendex#967) —
  *  but never walks below `capturedThrough`, the position an earlier callback
  *  of the SAME query already captured (or deliberately held at, for an
  *  all-empty run). Without that lower bound a second mid-query steer re-planned
  *  the whole run from scratch and the first steer was queued — and delivered to
- *  Claude — twice (vstack#1009). */
+ *  Claude — twice (kendex#1009). */
 export function planDeferredUserReplay(messages: Context["messages"], capturedThrough = 0): DeferredUserReplayPlan {
 	let runStart = messages.length;
 	while (runStart > capturedThrough && messages[runStart - 1]?.role === "user") runStart--;
@@ -502,7 +502,7 @@ function applyProviderRegistration(trigger: string): void {
 	debug(`${trigger}: native registration upsert, credentialed=${credentialed} (module=${moduleInstanceId})`);
 	// Start the connector inventory now, not on the first turn: the query path
 	// can only read a synchronous snapshot, so priming here is what gets the
-	// declarations in place before turn 1 (vstack#832). Fire and forget —
+	// declarations in place before turn 1 (kendex#832). Fire and forget —
 	// registration must not wait on the network. Primes the DEFAULT credential
 	// scope only; managed profiles are primed per request in their own scope.
 	if (hasClaudeCredentials() && connectorsEnabledFor(loadConfig(process.cwd()))) primeConnectorServers();
@@ -619,7 +619,7 @@ function streamClaudeAgentSdkInLane(model: Model<any>, context: Context, options
 		if (queryCtx.pendingToolCalls.size > 0) {
 			// A waiting handler whose call never reached Pi can never be answered —
 			// fail it now with a retryable error instead of letting the SDK await it
-			// forever (the 2026-08-17 five-and-a-half-hour deadlock, vstack#1469).
+			// forever (the 2026-08-17 five-and-a-half-hour deadlock, kendex#1469).
 			// Forwarded-but-unanswered handlers stay: steer-split batches legitimately
 			// deliver their results in a later callback.
 			const stranded = drainStrandedToolCalls(queryCtx);
@@ -646,7 +646,7 @@ function streamClaudeAgentSdkInLane(model: Model<any>, context: Context, options
 		// so we save them for replay as continuation queries after consumeQuery ends.
 		// The cursor may only advance over messages actually captured for replay:
 		// claiming Claude owns a user message that was never deferred is permanent
-		// silent input loss (vstack#967 — only the LAST of several trailing user
+		// silent input loss (kendex#967 — only the LAST of several trailing user
 		// messages was captured while the cursor skipped them all).
 		let capturedThrough = context.messages.length;
 		if (lastMsgRole === "user") {
@@ -654,13 +654,13 @@ function streamClaudeAgentSdkInLane(model: Model<any>, context: Context, options
 			// Math.max-advances with every callback's capturedThrough below), so a
 			// second steer callback only queues messages BEYOND what the first one
 			// already owns — re-planning the whole trailing run queued the earlier
-			// steer twice (vstack#1009). latestCursor, not the shared record's
+			// steer twice (kendex#1009). latestCursor, not the shared record's
 			// cursor, deliberately: it lives on this QueryContext, so it is correct
 			// for reentrant and detached foreign queries too, whose contexts the
-			// shared cursor does not index (vstack#1001).
+			// shared cursor does not index (kendex#1001).
 			const replay = planDeferredUserReplay(context.messages, queryCtx.latestCursor);
 			// Image-only runs have no usable text but must still replay — capture
-			// whenever EITHER form has content (vstack#993).
+			// whenever EITHER form has content (kendex#993).
 			if (replay.prompt || replay.blocks) {
 				ctx().deferredUserMessages.push({ text: replay.prompt ?? "", blocks: replay.blocks ?? undefined });
 				debug(`provider: deferred ${replay.userMessageCount} user message(s) for replay after query${replay.blocks ? ` (${replay.blocks.length} blocks incl. images)` : ""}: ${(replay.prompt ?? "[image-only]").slice(0, 60)}`);
@@ -683,7 +683,7 @@ function streamClaudeAgentSdkInLane(model: Model<any>, context: Context, options
 		// The stackDepth guard covers a pushed subagent context; the detached
 		// flag covers a foreign one-shot on the top-level ctx, whose GROWN
 		// mid-query context could otherwise out-length the parent's cursor and
-		// advance it past history Claude never saw (vstack#1001); Math.max
+		// advance it past history Claude never saw (kendex#1001); Math.max
 		// remains the backstop for a legacy-record foreign context the
 		// fingerprint guard could not classify.
 		const activeSession = getSharedSession();
@@ -702,7 +702,7 @@ function streamClaudeAgentSdkInLane(model: Model<any>, context: Context, options
 		debug(`provider: orphaned tool result after abort, emitting end_turn`);
 		// The detached flag deliberately survives query end: an orphaned result
 		// from a foreign one-shot indexes ITS conversation, and writing that
-		// length here would move (even shrink) the parent's cursor (vstack#1001).
+		// length here would move (even shrink) the parent's cursor (kendex#1001).
 		const activeSession = getSharedSession();
 		if (activeSession && stackDepth() === 0 && !ctx().detachedFromSharedSession) setSharedSession({ ...activeSession, cursor: context.messages.length });
 		const c = ctx();  // capture current context for the microtask
@@ -883,7 +883,7 @@ function streamClaudeAgentSdkInLane(model: Model<any>, context: Context, options
 	const { sessionId: resumeSessionId, promptStart } = syncResult;
 	// A FOREIGN-conversation query (conversation-fingerprint mismatch against
 	// the shared record — a subagent-shaped request arriving while the parent
-	// is IDLE, vstack#1001) also runs as a clean one-shot and gets the same
+	// is IDLE, kendex#1001) also runs as a clean one-shot and gets the same
 	// hands-off treatment as a reentrant one below: never persist over the
 	// module-level record, never mark it for rebuild. The flag also rides the
 	// QueryContext so the mismatch/abort/teardown paths that mutate the record
@@ -967,7 +967,7 @@ function streamClaudeAgentSdkInLane(model: Model<any>, context: Context, options
 	// A reentrant (subagent) query must never write the module-level shared
 	// session: its completion/failure handlers would overwrite the PARENT's
 	// record with the child's session id and cursor. A foreign-conversation
-	// one-shot (vstack#1001) has exactly the same non-claim on the record.
+	// one-shot (kendex#1001) has exactly the same non-claim on the record.
 	const persistSession = (next: SessionState | null): void => {
 		if (isReentrant || foreignContext) return;
 		setSharedSession(next && conversationFp ? { conversationFingerprint: conversationFp, ...next } : next);
@@ -1235,7 +1235,7 @@ function streamClaudeAgentSdkInLane(model: Model<any>, context: Context, options
 
 					const contOptions = { ...queryOptions, resume: resumeId, ...makeCliDebugOptions("continuation") };
 					// Runs carrying image blocks replay as blocks (wrapPromptStream) so
-					// the images survive; text-only runs stay plain strings (vstack#993).
+					// the images survive; text-only runs stay plain strings (kendex#993).
 					const contQuery = sdkQueryFactory({ prompt: steer.blocks ? wrapPromptStream(steer.blocks) : steer.text, options: contOptions });
 					abortCtx.activeQuery = contQuery;
 

package/src/query-options.ts

@@ -83,7 +83,7 @@ export function buildClaudeQueryOptions(input: BuildClaudeQueryOptionsInput): Bu
 	const connectorWriteMode = connectorWriteModeFor(bridgeConfig);
 	// Declare the account's connected connectors explicitly so `alwaysLoad` can
 	// hold startup until they attach — otherwise the turn-1 manifest is built
-	// before the CLI has fetched them (vstack#832).
+	// before the CLI has fetched them (kendex#832).
 	const connectorServers = enableCloudMcp ? connectorServersSnapshot(accountScope.claudeConfigDir) : {};
 	const appendSystemPrompt = providerSettings.appendSystemPrompt !== false;
 	const agentsAppend = appendSystemPrompt ? extractAgentsAppend() : undefined;
@@ -98,7 +98,7 @@ export function buildClaudeQueryOptions(input: BuildClaudeQueryOptionsInput): Bu
 	// ignores auto-discovered filesystem MCP servers while Pi owns tool execution.
 	// Connectors mode needs settings resolution ON but restricted to USER scope
 	// only — project/local settings files can smuggle `env`/`apiKeyHelper` from
-	// a hostile checkout (vstack#990). Full rationale on settingSourcesForQuery.
+	// a hostile checkout (kendex#990). Full rationale on settingSourcesForQuery.
 	const settingSources: SettingSource[] | undefined = settingSourcesForQuery(
 		enableCloudMcp, appendSystemPrompt, providerSettings.settingSources);
 	const strictMcpConfigEnabled = !appendSystemPrompt && providerSettings.strictMcpConfig !== false;

package/src/query-state.ts

@@ -16,7 +16,7 @@ import { currentRequestLaneId } from "./request-lane.js";
  *  `text` is the joined text form (previews, and the replay prompt when no
  *  image blocks were captured). `blocks` is present when the run carried
  *  images — the replay must send the blocks or the images are silently lost
- *  (vstack#993). */
+ *  (kendex#993). */
 export interface DeferredUserMessage {
 	text: string;
 	blocks?: ContentBlockParam[];
@@ -40,7 +40,7 @@ export interface PendingToolCall {
 	/** The MCP invocation's schema-validated arguments. The SDK hands the handler
 	 *  the COMPLETE input, so this is the authoritative copy — the grace-timer
 	 *  finalize settles a still-partial streamed block from here instead of from
-	 *  its truncated partial JSON (vstack#1469: a `{}` settle made Pi execute
+	 *  its truncated partial JSON (kendex#1469: a `{}` settle made Pi execute
 	 *  empty-argument calls). */
 	args: Record<string, unknown>;
 	/** `QueryContext.callbackGeneration` at registration. A handler from an older
@@ -106,7 +106,7 @@ export function strandedToolCallResult(): McpResult {
  *  forwarded (Pi owes it a result — steer-split deliveries arrive turns later)
  *  or nothing is waiting. Marks the id dead so a lagging stream replay can
  *  never forward it AFTER the model was told it failed — that late forward
- *  would execute the call a second time behind the model's back (vstack#1469).
+ *  would execute the call a second time behind the model's back (kendex#1469).
  *  Returns true when a handler was failed. */
 export function failStrandedToolCall(queryCtx: QueryContext, id: string): boolean {
 	if (queryCtx.forwardedToolCallIds.has(id)) return false;
@@ -263,7 +263,7 @@ export class QueryContext {
 	 *  set endToolUseTurn stamps from the turn's content. A forwarded id is one Pi
 	 *  will execute and answer; it must never be emitted again (a lagging stream
 	 *  replays the same tool_use into the NEXT turn, and per-message turnBlocks
-	 *  dedup cannot see across turns — vstack#1469's duplicate executions), and a
+	 *  dedup cannot see across turns — kendex#1469's duplicate executions), and a
 	 *  handler waiting on it must be left waiting at the stranded-handler drains.
 	 *  Query-scoped, never reset per message. */
 	forwardedToolCallIds = new Set<string>();
@@ -295,7 +295,7 @@ export class QueryContext {
 	 *  same reason: a late handler firing after resetToolTracking wiped the
 	 *  per-message records must still be able to exact-match the parked/queued
 	 *  result of ITS OWN call — without stored args the only fallback is
-	 *  sole-same-name, which can hand it a LIVE sibling's id (vstack#1469). */
+	 *  sole-same-name, which can hand it a LIVE sibling's id (kendex#1469). */
 	queryToolArgs = new Map<string, Record<string, unknown>>();
 	claimedToolCallIds = new Set<string>();
 	deliveredToolResultIds = new Set<string>();
@@ -311,7 +311,7 @@ export class QueryContext {
 	committedOutput = false;
 	/** True when this query holds NO claim on the module-level shared session
 	 *  record: a reentrant (subagent) query, or a foreign-conversation one-shot
-	 *  (vstack#1001). Every shared-record mutation reachable from this context —
+	 *  (kendex#1001). Every shared-record mutation reachable from this context —
 	 *  reportToolResultMismatch's needsRebuild/forceRotate mark, the cursor
 	 *  advances on the tool-result-delivery and orphaned-result paths — must
 	 *  no-op so the PARENT's record stays untouched. Assigned at fresh-query
@@ -517,7 +517,7 @@ export class QueryContext {
 		// Ids whose RESULT already sits queued or parked. A handler can fire after
 		// the message boundary wiped the per-message records — by then Pi has
 		// executed its call and only these query-scoped stores still know it
-		// (vstack#1469: the boundary reap used to make such a handler error out
+		// (kendex#1469: the boundary reap used to make such a handler error out
 		// and the model re-run an already-executed side-effectful call). An
 		// exact-args match here outranks the live sole-same-name fallback below,
 		// so a late handler can never steal a live sibling's id while its own
@@ -586,7 +586,7 @@ export class QueryContext {
 	 * mismatch report for the whole query (queued>0 with 0/0 counters and no tool
 	 * names) and forces a session rebuild per turn. But the boundary does NOT
 	 * prove the handler gave up — the SDK staggers handler invocations, and the
-	 * 2026-08-17 deadlock session (vstack#1469) had three of five parallel
+	 * 2026-08-17 deadlock session (kendex#1469) had three of five parallel
 	 * handlers fire after this reap destroyed their results. So the reap parks
 	 * instead of dropping: reports stay clean, and a late handler still gets its
 	 * real result through takeQueuedOrParkedResult.
@@ -675,7 +675,7 @@ interface QueryLaneStoreV1 {
 	sessionLanes: Map<string, QueryLaneState>;
 }
 
-const QUERY_LANES_SYMBOL = Symbol.for("vstack.pi.claude-bridge.query-lanes.v1");
+const QUERY_LANES_SYMBOL = Symbol.for("kendex.pi.claude-bridge.query-lanes.v1");
 
 function queryLaneStore(): QueryLaneStoreV1 {
 	const host = globalThis as Record<symbol, unknown>;

package/src/rate-limit.ts

@@ -1,6 +1,6 @@
 import { USAGE_LIMIT_ERROR_PREFIXES } from "@anthropic-ai/claude-agent-sdk";
 
-export const RATE_LIMIT_AUTO_RESUME_EVENT = "vstack:rate-limit";
+export const RATE_LIMIT_AUTO_RESUME_EVENT = "kendex:rate-limit";
 export const RATE_LIMIT_TOKEN = "\x1b[31m[rate-limit]\x1b[39m";
 
 // The SDK export is @alpha — degrade to "no match" (pre-0.3.220 behavior) if a

package/src/request-lane.ts

@@ -10,7 +10,7 @@ import { AsyncLocalStorage } from "node:async_hooks";
  * keeps that identity attached to every promise, SDK iterator, and timer born
  * during the provider call without threading the id through every helper.
  */
-const REQUEST_LANE_SYMBOL = Symbol.for("vstack.pi.claude-bridge.request-lane.v1");
+const REQUEST_LANE_SYMBOL = Symbol.for("kendex.pi.claude-bridge.request-lane.v1");
 
 function requestLaneStorage(): AsyncLocalStorage<string> {
 	const host = globalThis as Record<symbol, unknown>;

package/src/session-persistence.ts

@@ -226,7 +226,7 @@ export function restoreSharedSessionFromPi(ctx: { sessionManager?: unknown; cwd?
 // instance can differ. Scheduling again for the same manager REPLACES the
 // pending timer: each fire appends the record's state as of its schedule and
 // restore reads the last marker, so the superseded entry is a stale duplicate.
-const SCHEDULED_PERSISTENCE_SYMBOL = Symbol.for("vstack.pi.claude-bridge.scheduled-persistence.v1");
+const SCHEDULED_PERSISTENCE_SYMBOL = Symbol.for("kendex.pi.claude-bridge.scheduled-persistence.v1");
 
 type PersistenceTimer = ReturnType<typeof setTimeout>;
 
@@ -438,7 +438,7 @@ function verifyWrittenSession(
 		safeNotify(
 			`Session file issue: ${msg}\n` +
 			`cwd=${displayPath(cwd)} realpath=${displayPath(safeRealpath(cwd))}\n` +
-			`Please copy and paste this message into a new issue at https://github.com/vanillagreencom/vstack/issues/new` +
+			`Please copy and paste this message into a new issue at https://github.com/vanillagreencom/kendex/issues/new` +
 			(DEBUG ? ` and attach ${DEBUG_LOG_PATH}` : ` (rerun with CLAUDE_BRIDGE_DEBUG=1 to capture a debug log)`),
 			"warning",
 		);
@@ -523,7 +523,7 @@ export function syncSharedSession(
 	);
 	const incomingFingerprint = conversationFingerprint(messages);
 
-	// FOREIGN-CONVERSATION guard (Case 6, vstack#1001). A subagent-shaped query
+	// FOREIGN-CONVERSATION guard (Case 6, kendex#1001). A subagent-shaped query
 	// arriving while the parent is IDLE is not reentrant, so it lands here as an
 	// outermost query. Without an identity check its short foreign context takes
 	// the REBUILD path — rewriting the PARENT's session file from foreign
@@ -568,7 +568,7 @@ export function syncSharedSession(
 			// Read the pre-update cursor first: setSharedSession reassigns the live
 			// binding, so comparing against sharedSession.cursor afterwards would
 			// always be equal and the "advanced past trailing assistant" debug
-			// branch could never print (vstack#993).
+			// branch could never print (kendex#993).
 			const cursorBeforeUpdate = sharedSession.cursor;
 			// A REUSE match proves identity, so the anchor may only strengthen here:
 			// a pre-3.1.1 record adopts it outright, and a turn-1 user-only anchor