opensec-pi-subagents 0.20.1 → 0.20.2

package/CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.20.2] - 2026-10-16
+
+### Changed
+
+- **Every project is trusted again by default**, as before 0.20.1: subagents load a project's `.pi` extensions and settings, and the extension uses its agents, skills, workflows and `subagents.json`, whatever Pi decided for the folder. To follow Pi's project trust decision instead (0.20.1's behaviour), set `"projectTrust": "pi"` in the global `~/.pi/agent/subagents.json`.
+
 ## [0.20.1] - 2026-10-16
 
 ### Fixed

package/README.md

@@ -115,10 +115,11 @@ locations are those of `@tintinweb/pi-subagents`.
 
 Based on `@tintinweb/pi-subagents` 0.19:
 
+- **0.20.2:** every project is trusted by default, as before 0.20.1. To have subagents follow Pi's project trust decision, set `"projectTrust": "pi"` in `~/.pi/agent/subagents.json`.
 - **0.20.1:**
   - Resume works for as long as an agent's session file exists, not 10 minutes, and after a restart; worktree agents resume in their worktree; `max_turns` and the tool watchdog apply to resumed runs.
   - An agent whose tool ignores a stop is still stopped and frees its slot; three ways to crash Pi are fixed.
-  - Subagents follow Pi's trust decision for a project folder; Explore and Plan are read-only by their tools (`read`, `grep`, `find`, `ls`).
+  - Explore and Plan are read-only by their tools (`read`, `grep`, `find`, `ls`).
   - Worktree cleanup no longer loses ignored output, nested repositories or stashes; timed-out gates end their whole process tree.
   - Much less work per frame: one refresh timer that stops while idle, an incremental transcript viewer, a widget that formats only the rows it shows.
 - **Tool time limits:** `bash` calls of subagents and of the main agent get `toolTimeoutSeconds` (default 1200 s), and a watchdog stops other hung tools.

package/dist-bun/core.cjs

@@ -77,17 +77,17 @@ var __esm = (fn, res, err) => () => {
 
 // pi-host:@earendil-works/pi-coding-agent
 var require_pi_coding_agent = __commonJS(function(exports2, module2) {
-  module2.exports = globalThis[Symbol.for("opensec-pi-subagents@0.20.1:host-modules")]("@earendil-works/pi-coding-agent");
+  module2.exports = globalThis[Symbol.for("opensec-pi-subagents@0.20.2:host-modules")]("@earendil-works/pi-coding-agent");
 });
 
 // pi-host:@earendil-works/pi-tui
 var require_pi_tui = __commonJS(function(exports2, module2) {
-  module2.exports = globalThis[Symbol.for("opensec-pi-subagents@0.20.1:host-modules")]("@earendil-works/pi-tui");
+  module2.exports = globalThis[Symbol.for("opensec-pi-subagents@0.20.2:host-modules")]("@earendil-works/pi-tui");
 });
 
 // pi-host:@sinclair/typebox
 var require_typebox = __commonJS(function(exports2, module2) {
-  module2.exports = globalThis[Symbol.for("opensec-pi-subagents@0.20.1:host-modules")]("@sinclair/typebox");
+  module2.exports = globalThis[Symbol.for("opensec-pi-subagents@0.20.2:host-modules")]("@sinclair/typebox");
 });
 
 // src/abortable.ts
@@ -2158,8 +2158,222 @@ var init_nested_tools = __esm(() => {
   NESTED_TOOL_NAMES = ["Agent", "get_subagent_result", "steer_subagent"];
 });
 
+// src/settings.ts
+function sanitize(raw) {
+  if (!raw || typeof raw !== "object")
+    return {};
+  const r = raw;
+  const out = {};
+  if (Number.isInteger(r.maxConcurrent) && r.maxConcurrent >= 1 && r.maxConcurrent <= MAX_CONCURRENT_CEILING) {
+    out.maxConcurrent = r.maxConcurrent;
+  }
+  if (Number.isInteger(r.maxConcurrentForeground) && r.maxConcurrentForeground >= 0 && r.maxConcurrentForeground <= MAX_CONCURRENT_CEILING) {
+    out.maxConcurrentForeground = r.maxConcurrentForeground;
+  }
+  if (Number.isInteger(r.defaultMaxTurns) && r.defaultMaxTurns >= 0 && r.defaultMaxTurns <= MAX_TURNS_CEILING) {
+    out.defaultMaxTurns = r.defaultMaxTurns;
+  }
+  if (Number.isInteger(r.graceTurns) && r.graceTurns >= 1 && r.graceTurns <= GRACE_TURNS_CEILING) {
+    out.graceTurns = r.graceTurns;
+  }
+  if (Number.isInteger(r.toolTimeoutSeconds) && r.toolTimeoutSeconds >= 0 && r.toolTimeoutSeconds <= TOOL_TIMEOUT_CEILING) {
+    out.toolTimeoutSeconds = r.toolTimeoutSeconds;
+  }
+  if (Number.isInteger(r.maxSubagentDepth) && r.maxSubagentDepth >= 0 && r.maxSubagentDepth <= SUBAGENT_DEPTH_CEILING) {
+    out.maxSubagentDepth = r.maxSubagentDepth;
+  }
+  if (typeof r.defaultJoinMode === "string" && VALID_JOIN_MODES.has(r.defaultJoinMode)) {
+    out.defaultJoinMode = r.defaultJoinMode;
+  }
+  if (typeof r.backgroundByDefault === "boolean") {
+    out.backgroundByDefault = r.backgroundByDefault;
+  }
+  if (typeof r.schedulingEnabled === "boolean") {
+    out.schedulingEnabled = r.schedulingEnabled;
+  }
+  if (typeof r.scopeModels === "boolean") {
+    out.scopeModels = r.scopeModels;
+  }
+  if (typeof r.strictAgentFiles === "boolean") {
+    out.strictAgentFiles = r.strictAgentFiles;
+  }
+  if (r.projectTrust === "full" || r.projectTrust === "pi") {
+    out.projectTrust = r.projectTrust;
+  }
+  if (typeof r.disableDefaultAgents === "boolean") {
+    out.disableDefaultAgents = r.disableDefaultAgents;
+  }
+  if (typeof r.toolDescriptionMode === "string" && VALID_TOOL_DESCRIPTION_MODES.has(r.toolDescriptionMode)) {
+    out.toolDescriptionMode = r.toolDescriptionMode;
+  }
+  if (typeof r.fleetView === "boolean") {
+    out.fleetView = r.fleetView;
+  }
+  if (typeof r.agentMentions === "boolean") {
+    out.agentMentions = r.agentMentions ? "model" : "off";
+  } else if (typeof r.agentMentions === "string" && VALID_AGENT_MENTION_MODES.has(r.agentMentions)) {
+    out.agentMentions = r.agentMentions;
+  }
+  if (typeof r.rememberAgents === "boolean") {
+    out.rememberAgents = r.rememberAgents;
+  }
+  if (typeof r.widgetMode === "string" && VALID_WIDGET_MODES.has(r.widgetMode)) {
+    out.widgetMode = r.widgetMode;
+  }
+  if (typeof r.outputTranscript === "boolean") {
+    out.outputTranscript = r.outputTranscript;
+  }
+  if (typeof r.worktreeIsolation === "boolean") {
+    out.worktreeIsolation = r.worktreeIsolation;
+  }
+  if (typeof r.reportUsage === "boolean") {
+    out.reportUsage = r.reportUsage;
+  }
+  if (typeof r.showCost === "boolean") {
+    out.showCost = r.showCost;
+  }
+  if (typeof r.showModel === "boolean") {
+    out.showModel = r.showModel;
+  }
+  if (typeof r.viewerMarkdown === "string" && VALID_VIEWER_MARKDOWN_MODES.has(r.viewerMarkdown)) {
+    out.viewerMarkdown = r.viewerMarkdown;
+  }
+  if (typeof r.workflowsEnabled === "boolean") {
+    out.workflowsEnabled = r.workflowsEnabled;
+  }
+  if (r.fallbackSubagent === false) {
+    out.fallbackSubagent = NO_FALLBACK;
+  } else if (typeof r.fallbackSubagent === "string" && r.fallbackSubagent.trim()) {
+    out.fallbackSubagent = r.fallbackSubagent.trim();
+  }
+  return out;
+}
+function globalPath() {
+  return import_node_path9.join(import_pi_coding_agent7.getAgentDir(), "subagents.json");
+}
+function projectPath(cwd) {
+  return import_node_path9.join(cwd, ".pi", "subagents.json");
+}
+function readSettingsFile(path) {
+  if (!import_node_fs8.existsSync(path))
+    return {};
+  try {
+    return readParsedSettings(path);
+  } catch (err) {
+    const reason = err instanceof Error ? err.message : String(err);
+    console.warn(`[pi-subagents] Ignoring malformed settings at ${path}: ${reason}`);
+    return {};
+  }
+}
+function globalProjectTrustMode() {
+  return readSettingsFile(globalPath()).projectTrust ?? "full";
+}
+function loadSettings(cwd = process.cwd(), project = true) {
+  return { ...readSettingsFile(globalPath()), ...project ? readSettingsFile(projectPath(cwd)) : {} };
+}
+function saveSettings(s, cwd = process.cwd()) {
+  const path = projectPath(cwd);
+  try {
+    import_node_fs8.mkdirSync(import_node_path9.dirname(path), { recursive: true });
+    import_node_fs8.writeFileSync(path, JSON.stringify(s, null, 2), "utf-8");
+    return true;
+  } catch {
+    return false;
+  }
+}
+function applySettings(s, appliers) {
+  if (typeof s.maxConcurrent === "number")
+    appliers.setMaxConcurrent(s.maxConcurrent);
+  if (typeof s.maxConcurrentForeground === "number") {
+    appliers.setMaxConcurrentForeground(s.maxConcurrentForeground);
+  }
+  if (typeof s.defaultMaxTurns === "number")
+    appliers.setDefaultMaxTurns(s.defaultMaxTurns);
+  if (typeof s.graceTurns === "number")
+    appliers.setGraceTurns(s.graceTurns);
+  if (typeof s.toolTimeoutSeconds === "number")
+    appliers.setToolTimeoutSeconds(s.toolTimeoutSeconds);
+  if (typeof s.maxSubagentDepth === "number")
+    appliers.setMaxSubagentDepth(s.maxSubagentDepth);
+  if (typeof s.fallbackSubagent === "string")
+    appliers.setFallbackSubagent(s.fallbackSubagent);
+  if (s.defaultJoinMode)
+    appliers.setDefaultJoinMode(s.defaultJoinMode);
+  if (typeof s.backgroundByDefault === "boolean")
+    appliers.setBackgroundByDefault(s.backgroundByDefault);
+  if (typeof s.schedulingEnabled === "boolean")
+    appliers.setSchedulingEnabled(s.schedulingEnabled);
+  if (typeof s.scopeModels === "boolean")
+    appliers.setScopeModels(s.scopeModels);
+  if (typeof s.strictAgentFiles === "boolean")
+    appliers.setStrictAgentFiles(s.strictAgentFiles);
+  if (typeof s.disableDefaultAgents === "boolean")
+    appliers.setDisableDefaultAgents(s.disableDefaultAgents);
+  if (s.toolDescriptionMode)
+    appliers.setToolDescriptionMode(s.toolDescriptionMode);
+  if (typeof s.fleetView === "boolean")
+    appliers.setFleetView(s.fleetView);
+  if (s.agentMentions)
+    appliers.setAgentMentions(s.agentMentions);
+  if (typeof s.rememberAgents === "boolean")
+    appliers.setRememberAgents(s.rememberAgents);
+  if (s.widgetMode)
+    appliers.setWidgetMode(s.widgetMode);
+  if (typeof s.outputTranscript === "boolean")
+    appliers.setOutputTranscript(s.outputTranscript);
+  if (typeof s.worktreeIsolation === "boolean")
+    appliers.setWorktreeIsolation(s.worktreeIsolation);
+  if (typeof s.reportUsage === "boolean")
+    appliers.setReportUsage(s.reportUsage);
+  if (typeof s.showCost === "boolean")
+    appliers.setShowCost(s.showCost);
+  if (typeof s.showModel === "boolean")
+    appliers.setShowModel(s.showModel);
+  if (s.viewerMarkdown)
+    appliers.setViewerMarkdown(s.viewerMarkdown);
+  if (typeof s.workflowsEnabled === "boolean")
+    appliers.setWorkflowsEnabled(s.workflowsEnabled);
+}
+function persistToastFor(successMsg, persisted) {
+  return persisted ? { message: successMsg, level: "info" } : { message: `${successMsg} (session only; failed to persist)`, level: "warning" };
+}
+function applyAndEmitLoaded(appliers, emit, cwd = process.cwd(), project = true) {
+  const settings = loadSettings(cwd, project);
+  applySettings(settings, appliers);
+  emit("subagents:settings_loaded", { settings });
+  return settings;
+}
+function saveAndEmitChanged(snapshot, successMsg, emit, cwd = process.cwd()) {
+  const persisted = saveSettings(snapshot, cwd);
+  emit("subagents:settings_changed", { settings: snapshot, persisted });
+  return persistToastFor(successMsg, persisted);
+}
+var import_node_fs8, import_node_path9, import_pi_coding_agent7, VALID_JOIN_MODES, VALID_TOOL_DESCRIPTION_MODES, VALID_WIDGET_MODES, VALID_VIEWER_MARKDOWN_MODES, VALID_AGENT_MENTION_MODES, MAX_CONCURRENT_CEILING = 1024, MAX_TURNS_CEILING = 1e4, GRACE_TURNS_CEILING = 1000, TOOL_TIMEOUT_CEILING = 86400, SUBAGENT_DEPTH_CEILING = 16, readParsedSettings;
+var init_settings = __esm(() => {
+  init_agent_types();
+  init_discovery_cache();
+  import_node_fs8 = require("fs");
+  import_node_path9 = require("path");
+  import_pi_coding_agent7 = __toESM(require_pi_coding_agent());
+  VALID_JOIN_MODES = new Set(["async", "group", "smart"]);
+  VALID_TOOL_DESCRIPTION_MODES = new Set(["full", "compact", "custom"]);
+  VALID_WIDGET_MODES = new Set(["all", "background", "off"]);
+  VALID_VIEWER_MARKDOWN_MODES = new Set(["off", "assistant", "all"]);
+  VALID_AGENT_MENTION_MODES = new Set(["model", "direct", "off"]);
+  readParsedSettings = createDiscoveryCache((path) => sanitize(JSON.parse(import_node_fs8.readFileSync(path, "utf-8"))), 64);
+});
+
 // src/project-trust.ts
+function followsPiTrust() {
+  try {
+    return globalProjectTrustMode() === "pi";
+  } catch {
+    return false;
+  }
+}
 function isProjectTrustedBy(ctx) {
+  if (!followsPiTrust())
+    return true;
   if (typeof ctx?.isProjectTrusted !== "function")
     return true;
   try {
@@ -2169,14 +2383,16 @@ function isProjectTrustedBy(ctx) {
   }
 }
 function savedDecision(cwd) {
-  return new import_pi_coding_agent7.ProjectTrustStore(import_pi_coding_agent7.getAgentDir()).get(cwd);
+  return new import_pi_coding_agent8.ProjectTrustStore(import_pi_coding_agent8.getAgentDir()).get(cwd);
 }
 function defaultTrustIsAlways(cwd) {
-  return import_pi_coding_agent7.SettingsManager.create(cwd, import_pi_coding_agent7.getAgentDir(), { projectTrusted: false }).getDefaultProjectTrust() === "always";
+  return import_pi_coding_agent8.SettingsManager.create(cwd, import_pi_coding_agent8.getAgentDir(), { projectTrusted: false }).getDefaultProjectTrust() === "always";
 }
 function predictProjectTrust(cwd) {
+  if (!followsPiTrust())
+    return true;
   try {
-    if (!import_pi_coding_agent7.hasTrustRequiringProjectResources(cwd))
+    if (!import_pi_coding_agent8.hasTrustRequiringProjectResources(cwd))
       return true;
     const saved = savedDecision(cwd);
     if (saved !== null)
@@ -2187,17 +2403,20 @@ function predictProjectTrust(cwd) {
   }
 }
 function isProjectCodeTrusted(trusted, cwd) {
+  if (!followsPiTrust())
+    return true;
   if (!trusted)
     return false;
   try {
-    return import_pi_coding_agent7.hasTrustRequiringProjectResources(cwd) || savedDecision(cwd) === true || defaultTrustIsAlways(cwd);
+    return import_pi_coding_agent8.hasTrustRequiringProjectResources(cwd) || savedDecision(cwd) === true || defaultTrustIsAlways(cwd);
   } catch {
     return false;
   }
 }
-var import_pi_coding_agent7;
+var import_pi_coding_agent8;
 var init_project_trust = __esm(() => {
-  import_pi_coding_agent7 = __toESM(require_pi_coding_agent());
+  init_settings();
+  import_pi_coding_agent8 = __toESM(require_pi_coding_agent());
 });
 
 // src/prompts.ts
@@ -2287,12 +2506,12 @@ function loadSkillContent(name, cwd, project) {
   }
   const roots = [
     ...project ? [
-      import_node_path9.join(cwd, ".pi", "skills"),
-      import_node_path9.join(cwd, ".agents", "skills")
+      import_node_path10.join(cwd, ".pi", "skills"),
+      import_node_path10.join(cwd, ".agents", "skills")
     ] : [],
-    import_node_path9.join(import_pi_coding_agent8.getAgentDir(), "skills"),
-    import_node_path9.join(import_node_os4.homedir(), ".agents", "skills"),
-    import_node_path9.join(import_node_os4.homedir(), ".pi", "skills")
+    import_node_path10.join(import_pi_coding_agent9.getAgentDir(), "skills"),
+    import_node_path10.join(import_node_os4.homedir(), ".agents", "skills"),
+    import_node_path10.join(import_node_os4.homedir(), ".pi", "skills")
   ];
   for (const root of roots) {
     const content = findInRoot(root, name);
@@ -2304,13 +2523,13 @@ function loadSkillContent(name, cwd, project) {
 function findInRoot(root, name) {
   if (isSymlink(root))
     return;
-  const flat = safeReadFile(import_node_path9.join(root, `${name}.md`))?.trim();
+  const flat = safeReadFile(import_node_path10.join(root, `${name}.md`))?.trim();
   if (flat !== undefined)
     return flat;
   return findSkillDirectory(root, name);
 }
 function findSkillDirectory(root, name) {
-  if (!import_node_fs8.existsSync(root))
+  if (!import_node_fs9.existsSync(root))
     return;
   const queue = [root];
   while (queue.length > 0) {
@@ -2319,7 +2538,7 @@ function findSkillDirectory(root, name) {
       continue;
     let entries;
     try {
-      entries = import_node_fs8.readdirSync(current, { withFileTypes: true });
+      entries = import_node_fs9.readdirSync(current, { withFileTypes: true });
     } catch {
       continue;
     }
@@ -2329,9 +2548,9 @@ function findSkillDirectory(root, name) {
         continue;
       if (entry.name.startsWith(".") || entry.name === "node_modules")
         continue;
-      const path = import_node_path9.join(current, entry.name);
-      const skillMd = import_node_path9.join(path, "SKILL.md");
-      const isSkillDir = import_node_fs8.existsSync(skillMd);
+      const path = import_node_path10.join(current, entry.name);
+      const skillMd = import_node_path10.join(path, "SKILL.md");
+      const isSkillDir = import_node_fs9.existsSync(skillMd);
       if (isSkillDir) {
         if (entry.name === name) {
           const content = safeReadFile(skillMd)?.trim();
@@ -2345,13 +2564,13 @@ function findSkillDirectory(root, name) {
   }
   return;
 }
-var import_node_fs8, import_node_os4, import_node_path9, import_pi_coding_agent8;
+var import_node_fs9, import_node_os4, import_node_path10, import_pi_coding_agent9;
 var init_skill_loader = __esm(() => {
   init_memory();
-  import_node_fs8 = require("fs");
+  import_node_fs9 = require("fs");
   import_node_os4 = require("os");
-  import_node_path9 = require("path");
-  import_pi_coding_agent8 = __toESM(require_pi_coding_agent());
+  import_node_path10 = require("path");
+  import_pi_coding_agent9 = __toESM(require_pi_coding_agent());
 });
 
 // src/structured-output.ts
@@ -2359,7 +2578,7 @@ function createStructuredCapture() {
   return { called: false };
 }
 function createStructuredOutputTool(compiled, capture) {
-  return import_pi_coding_agent9.defineTool({
+  return import_pi_coding_agent10.defineTool({
     name: STRUCTURED_OUTPUT_TOOL_NAME,
     label: "Structured Output",
     description: "Report your final answer. Call this exactly once, with the complete result, and put everything the " + "caller needs inside the arguments \u2014 text written outside this call is discarded. If a call is " + "rejected for not matching the schema, fix the reported fields and call it again.",
@@ -2406,35 +2625,35 @@ function structuredRetryPrompt(capture) {
 
 Call ${STRUCTURED_OUTPUT_TOOL_NAME} now with your complete final answer. Do not reply with prose.`;
 }
-var import_pi_coding_agent9, STRUCTURED_OUTPUT_TOOL_NAME = "StructuredOutput";
+var import_pi_coding_agent10, STRUCTURED_OUTPUT_TOOL_NAME = "StructuredOutput";
 var init_structured_output = __esm(() => {
-  import_pi_coding_agent9 = __toESM(require_pi_coding_agent());
+  import_pi_coding_agent10 = __toESM(require_pi_coding_agent());
 });
 
 // src/agent-runner.ts
 function extensionCanonicalName(extPath) {
-  const base = import_node_path10.basename(extPath);
-  const name = base === "index.ts" || base === "index.js" ? import_node_path10.basename(import_node_path10.dirname(extPath)) : base.replace(/\.(ts|js)$/, "");
+  const base = import_node_path11.basename(extPath);
+  const name = base === "index.ts" || base === "index.js" ? import_node_path11.basename(import_node_path11.dirname(extPath)) : base.replace(/\.(ts|js)$/, "");
   return name.toLowerCase();
 }
 function extensionPackageName(extPath) {
-  const entry = import_node_path10.resolve(extPath);
-  let dir = import_node_path10.dirname(extPath);
+  const entry = import_node_path11.resolve(extPath);
+  let dir = import_node_path11.dirname(extPath);
   for (;; ) {
-    if (import_node_path10.basename(dir) === "node_modules")
+    if (import_node_path11.basename(dir) === "node_modules")
       return;
     let pkg;
     try {
-      pkg = JSON.parse(import_node_fs9.readFileSync(import_node_path10.join(dir, "package.json"), "utf-8"));
+      pkg = JSON.parse(import_node_fs10.readFileSync(import_node_path11.join(dir, "package.json"), "utf-8"));
     } catch {
-      const parent = import_node_path10.dirname(dir);
+      const parent = import_node_path11.dirname(dir);
       if (parent === dir)
         return;
       dir = parent;
       continue;
     }
     const entries = pkg.pi?.extensions;
-    if (typeof pkg.name === "string" && Array.isArray(entries) && entries.some((e) => typeof e === "string" && import_node_path10.resolve(dir, e) === entry)) {
+    if (typeof pkg.name === "string" && Array.isArray(entries) && entries.some((e) => typeof e === "string" && import_node_path11.resolve(dir, e) === entry)) {
       const short = pkg.name.startsWith("@") ? pkg.name.slice(pkg.name.indexOf("/") + 1) : pkg.name;
       return short.toLowerCase();
     }
@@ -2470,7 +2689,7 @@ function parseExtensionsSpec(entries, cwd) {
     if (p === "~" || p.startsWith("~/") || p.startsWith("~\\")) {
       p = import_node_os5.homedir() + p.slice(1);
     }
-    const abs = import_node_path10.isAbsolute(p) ? p : import_node_path10.resolve(cwd, p);
+    const abs = import_node_path11.isAbsolute(p) ? p : import_node_path11.resolve(cwd, p);
     paths.push(abs);
     names.add(extensionCanonicalName(abs));
   }
@@ -2604,7 +2823,7 @@ function getToolTimeoutSeconds() {
   return toolTimeoutSeconds;
 }
 function setToolTimeoutSeconds(n) {
-  toolTimeoutSeconds = Math.min(TOOL_TIMEOUT_CEILING, Math.max(0, Math.floor(n)));
+  toolTimeoutSeconds = Math.min(TOOL_TIMEOUT_CEILING2, Math.max(0, Math.floor(n)));
 }
 function formatDuration(seconds) {
   if (seconds < 120)
@@ -2754,10 +2973,10 @@ function resolveConfiguredSessionDir(sessionDir, cwd) {
   if (!sessionDir)
     return;
   if (sessionDir === "~" || sessionDir.startsWith("~/"))
-    return import_node_path10.resolve(import_node_os5.homedir(), sessionDir.slice(2));
-  if (import_node_path10.isAbsolute(sessionDir))
+    return import_node_path11.resolve(import_node_os5.homedir(), sessionDir.slice(2));
+  if (import_node_path11.isAbsolute(sessionDir))
     return sessionDir;
-  return import_node_path10.resolve(cwd, sessionDir);
+  return import_node_path11.resolve(cwd, sessionDir);
 }
 async function runAgent(ctx, type, prompt, options) {
   const config = getConfig(type);
@@ -2810,12 +3029,12 @@ async function runAgent(ctx, type, prompt, options) {
     systemPrompt = buildAgentPrompt({ ...fallback, name: type }, effectiveCwd, env, parentSystemPrompt, extras);
   }
   const noSkills = skills === false || Array.isArray(skills);
-  const agentDir = import_pi_coding_agent10.getAgentDir();
+  const agentDir = import_pi_coding_agent11.getAgentDir();
   const { extNames, narrowing } = parseExtSelectors(options.isolated ? [] : agentConfig?.extSelectors ?? []);
   const noExtensions = extensions === false;
   let extensionEntries = Array.isArray(extensions) ? extensions : undefined;
   if (extensionEntries && agentConfig?.source === "project" && extensionEntries.some(isExtensionPathEntry)) {
-    const projectRoot = agentConfig.sourcePath ? import_node_path10.dirname(import_node_path10.dirname(import_node_path10.dirname(agentConfig.sourcePath))) : configCwd;
+    const projectRoot = agentConfig.sourcePath ? import_node_path11.dirname(import_node_path11.dirname(import_node_path11.dirname(agentConfig.sourcePath))) : configCwd;
     if (!isProjectCodeTrusted(projectTrusted, projectRoot)) {
       for (const entry of extensionEntries.filter(isExtensionPathEntry)) {
         options.onToolActivity?.({
@@ -2848,8 +3067,8 @@ async function runAgent(ctx, type, prompt, options) {
     };
   };
   const toolScopeGuard = noExtensions ? undefined : createToolScopeGuard();
-  const settingsManager = import_pi_coding_agent10.SettingsManager.create(configCwd, agentDir, { projectTrusted });
-  const loader = new import_pi_coding_agent10.DefaultResourceLoader({
+  const settingsManager = import_pi_coding_agent11.SettingsManager.create(configCwd, agentDir, { projectTrusted });
+  const loader = new import_pi_coding_agent11.DefaultResourceLoader({
     cwd: configCwd,
     agentDir,
     settingsManager,
@@ -2960,9 +3179,9 @@ async function runAgent(ctx, type, prompt, options) {
   const configuredSessionDir = resolveConfiguredSessionDir(agentConfig?.sessionDir, effectiveCwd);
   const defaultSessionDir = process.env.PI_CODING_AGENT_SESSION_DIR ?? settingsManager.getSessionDir?.();
   const persistSession = agentConfig?.persistSession ?? rememberAgents;
-  const sessionManager = options.resumeSessionFile ? import_pi_coding_agent10.SessionManager.open(options.resumeSessionFile, configuredSessionDir ?? defaultSessionDir) : persistSession ? import_pi_coding_agent10.SessionManager.create(effectiveCwd, configuredSessionDir ?? defaultSessionDir, {
+  const sessionManager = options.resumeSessionFile ? import_pi_coding_agent11.SessionManager.open(options.resumeSessionFile, configuredSessionDir ?? defaultSessionDir) : persistSession ? import_pi_coding_agent11.SessionManager.create(effectiveCwd, configuredSessionDir ?? defaultSessionDir, {
     parentSession: ctx.sessionManager?.getSessionFile?.()
-  }) : import_pi_coding_agent10.SessionManager.inMemory(effectiveCwd);
+  }) : import_pi_coding_agent11.SessionManager.inMemory(effectiveCwd);
   const parentModelRuntime = ctx.modelRegistry.runtime;
   const sessionOpts = {
     cwd: effectiveCwd,
@@ -2982,7 +3201,7 @@ async function runAgent(ctx, type, prompt, options) {
   if (thinkingLevel) {
     sessionOpts.thinkingLevel = thinkingLevel;
   }
-  const { session } = await runInChildSessionContext(() => import_pi_coding_agent10.createAgentSession(sessionOpts));
+  const { session } = await runInChildSessionContext(() => import_pi_coding_agent11.createAgentSession(sessionOpts));
   const baseSessionName = agentConfig?.name ?? type;
   session.setSessionName(options.agentId ? `${baseSessionName}#${options.agentId.slice(0, 8)}` : baseSessionName);
   await session.bindExtensions({
@@ -3175,7 +3394,7 @@ ${toolCalls.join(`
 
 `);
 }
-var import_node_fs9, import_node_os5, import_node_path10, import_pi_coding_agent10, SUBAGENT_TOOL_NAMES, EXCLUDED_TOOL_NAMES, TOOL_SCOPE_GUARD_NAME = "subagent-tool-scope", TOOL_SCOPE_GUARD_PATH, defaultMaxTurns, rememberAgents = true, graceTurns = 5, toolTimeoutSeconds = 1200, TOOL_TIMEOUT_CEILING = 86400, watchdogTiming, MAX_TOOL_RECOVERIES = 3, WATCHDOG_EXEMPT_TOOLS;
+var import_node_fs10, import_node_os5, import_node_path11, import_pi_coding_agent11, SUBAGENT_TOOL_NAMES, EXCLUDED_TOOL_NAMES, TOOL_SCOPE_GUARD_NAME = "subagent-tool-scope", TOOL_SCOPE_GUARD_PATH, defaultMaxTurns, rememberAgents = true, graceTurns = 5, toolTimeoutSeconds = 1200, TOOL_TIMEOUT_CEILING2 = 86400, watchdogTiming, MAX_TOOL_RECOVERIES = 3, WATCHDOG_EXEMPT_TOOLS;
 var init_agent_runner = __esm(() => {
   init_agent_types();
   init_child_context();
@@ -3186,10 +3405,10 @@ var init_agent_runner = __esm(() => {
   init_project_trust();
   init_skill_loader();
   init_structured_output();
-  import_node_fs9 = require("fs");
+  import_node_fs10 = require("fs");
   import_node_os5 = require("os");
-  import_node_path10 = require("path");
-  import_pi_coding_agent10 = __toESM(require_pi_coding_agent());
+  import_node_path11 = require("path");
+  import_pi_coding_agent11 = __toESM(require_pi_coding_agent());
   SUBAGENT_TOOL_NAMES = {
     AGENT: "Agent",
     WORKFLOW: "SubagentWorkflow",
@@ -3255,33 +3474,33 @@ var init_mention = __esm(() => {
 
 // src/session-file.ts
 function sessionFileProblem(path) {
-  if (!import_node_fs10.existsSync(path))
+  if (!import_node_fs11.existsSync(path))
     return `its session file is gone (${path})`;
   try {
-    if (import_node_fs10.statSync(path).size === 0)
+    if (import_node_fs11.statSync(path).size === 0)
       return `its session file is empty (${path})`;
-    import_pi_coding_agent11.SessionManager.open(path);
+    import_pi_coding_agent12.SessionManager.open(path);
   } catch (err) {
     return `its session file cannot be read: ${err instanceof Error ? err.message : String(err)}`;
   }
   return;
 }
-var import_node_fs10, import_pi_coding_agent11;
+var import_node_fs11, import_pi_coding_agent12;
 var init_session_file = __esm(() => {
-  import_node_fs10 = require("fs");
-  import_pi_coding_agent11 = __toESM(require_pi_coding_agent());
+  import_node_fs11 = require("fs");
+  import_pi_coding_agent12 = __toESM(require_pi_coding_agent());
 });
 
 // src/agent-manager.ts
 function assertValidSpawnCwd(cwd) {
   if (cwd == null)
     return;
-  if (typeof cwd !== "string" || !import_node_path11.isAbsolute(cwd)) {
+  if (typeof cwd !== "string" || !import_node_path12.isAbsolute(cwd)) {
     throw new Error(`SpawnOptions.cwd must be an absolute path: "${String(cwd)}"`);
   }
   let isDirectory = false;
   try {
-    isDirectory = import_node_fs11.statSync(cwd).isDirectory();
+    isDirectory = import_node_fs12.statSync(cwd).isDirectory();
   } catch {
     throw new Error(`SpawnOptions.cwd does not exist: "${cwd}"`);
   }
@@ -4114,7 +4333,7 @@ class AgentManager {
     }
     const problem = sessionFileProblem(entry.sessionFile);
     if (problem) {
-      if (!import_node_fs11.existsSync(entry.sessionFile))
+      if (!import_node_fs12.existsSync(entry.sessionFile))
         this.tombstones.delete(entry.id);
       throw new Error(`Cannot resume agent ${entry.id}: ${problem}.`);
     }
@@ -4172,7 +4391,7 @@ class AgentManager {
   }
   async prepareResume(record, options) {
     const worktree = record.worktree;
-    if (worktree?.path && !import_node_fs11.existsSync(worktree.path)) {
+    if (worktree?.path && !import_node_fs12.existsSync(worktree.path)) {
       if (!isWorktreeIsolationEnabled()) {
         throw new Error(`Cannot resume agent ${record.id}: it ran in a git worktree, and worktree isolation is turned off in this project.`);
       }
@@ -4189,7 +4408,7 @@ class AgentManager {
   async finishResumedWorktree(record) {
     const pi = this.pi;
     const repo = record.baseCwd;
-    if (!record.worktree?.path || !pi || !repo || !import_node_fs11.existsSync(record.worktree.path))
+    if (!record.worktree?.path || !pi || !repo || !import_node_fs12.existsSync(record.worktree.path))
       return;
     const prior = record.worktreeResult;
     try {
@@ -4526,7 +4745,7 @@ class AgentManager {
     await Promise.all(sessions.map((session) => shutdownChildSession(session)));
   }
 }
-var import_node_crypto, import_node_fs11, import_node_path11, DEFAULT_MAX_CONCURRENT = 10, DEFAULT_MAX_CONCURRENT_FOREGROUND = 0, MAX_TOMBSTONES = 100, CHILD_SHUTDOWN_TIMEOUT_MS = 3000, DEFAULT_STOP_GRACE_MS = 20000, INLINE_STOP_WAIT_MS = 3000, DEFAULT_SESSION_RELEASE_MS = 60000;
+var import_node_crypto, import_node_fs12, import_node_path12, DEFAULT_MAX_CONCURRENT = 10, DEFAULT_MAX_CONCURRENT_FOREGROUND = 0, MAX_TOMBSTONES = 100, CHILD_SHUTDOWN_TIMEOUT_MS = 3000, DEFAULT_STOP_GRACE_MS = 20000, INLINE_STOP_WAIT_MS = 3000, DEFAULT_SESSION_RELEASE_MS = 60000;
 var init_agent_manager = __esm(() => {
   init_agent_runner();
   init_mention();
@@ -4534,8 +4753,8 @@ var init_agent_manager = __esm(() => {
   init_usage();
   init_worktree();
   import_node_crypto = require("crypto");
-  import_node_fs11 = require("fs");
-  import_node_path11 = require("path");
+  import_node_fs12 = require("fs");
+  import_node_path12 = require("path");
 });
 
 // src/ui/refresh-ticker.ts
@@ -5569,7 +5788,7 @@ var init_conversation_viewer = __esm(() => {
 
 // pi-host:typebox/value
 var require_value = __commonJS(function(exports2, module2) {
-  module2.exports = globalThis[Symbol.for("opensec-pi-subagents@0.20.1:host-modules")]("typebox/value");
+  module2.exports = globalThis[Symbol.for("opensec-pi-subagents@0.20.2:host-modules")]("typebox/value");
 });
 
 // src/index.ts
@@ -5935,7 +6154,7 @@ init_mention();
 // src/mention-clone.ts
 init_child_context();
 init_mention();
-var import_pi_coding_agent12 = __toESM(require_pi_coding_agent());
+var import_pi_coding_agent13 = __toESM(require_pi_coding_agent());
 async function runMentionClone(opts) {
   const { ctx, type, message, agentTool, signal: stop, onUsage } = opts;
   if (stop?.aborted)
@@ -5962,11 +6181,11 @@ async function runMentionClone(opts) {
   stop?.addEventListener("abort", onStop, { once: true });
   try {
     const parentModelRuntime = ctx.modelRegistry.runtime;
-    const conversation = import_pi_coding_agent12.buildSessionContext(ctx.sessionManager.getEntries(), ctx.sessionManager.getLeafId());
+    const conversation = import_pi_coding_agent13.buildSessionContext(ctx.sessionManager.getEntries(), ctx.sessionManager.getLeafId());
     const thinkingLevel = ctx.thinkingLevel;
-    const created = await runInChildSessionContext(() => import_pi_coding_agent12.createAgentSession({
+    const created = await runInChildSessionContext(() => import_pi_coding_agent13.createAgentSession({
       cwd: ctx.cwd,
-      sessionManager: import_pi_coding_agent12.SessionManager.inMemory(ctx.cwd, undefined, ctx.sessionManager.getBranch?.() ?? []),
+      sessionManager: import_pi_coding_agent13.SessionManager.inMemory(ctx.cwd, undefined, ctx.sessionManager.getBranch?.() ?? []),
       model: ctx.model,
       ...thinkingLevel && { thinkingLevel },
       modelRegistry: ctx.modelRegistry,
@@ -7246,8 +7465,8 @@ class SubagentScheduler {
 }
 
 // src/schedule-store.ts
-var import_node_fs12 = require("fs");
-var import_node_path12 = require("path");
+var import_node_fs13 = require("fs");
+var import_node_path13 = require("path");
 var LOCK_RETRY_MS = 50;
 var DEFAULT_LOCK_WAIT_MS = 5000;
 var LOCK_STALE_MS = 30000;
@@ -7262,16 +7481,16 @@ function isProcessRunning(pid) {
 function tryAcquireLock(lockPath) {
   for (let i = 0;i < 3; i++) {
     try {
-      import_node_fs12.writeFileSync(lockPath, `${process.pid}`, { flag: "wx" });
+      import_node_fs13.writeFileSync(lockPath, `${process.pid}`, { flag: "wx" });
       return true;
     } catch (e) {
       if (e.code !== "EEXIST")
         throw e;
       try {
-        const pid = parseInt(import_node_fs12.readFileSync(lockPath, "utf-8"), 10);
-        const age = Date.now() - import_node_fs12.statSync(lockPath).mtimeMs;
+        const pid = parseInt(import_node_fs13.readFileSync(lockPath, "utf-8"), 10);
+        const age = Date.now() - import_node_fs13.statSync(lockPath).mtimeMs;
         if (!pid || !isProcessRunning(pid) || age > LOCK_STALE_MS) {
-          import_node_fs12.unlinkSync(lockPath);
+          import_node_fs13.unlinkSync(lockPath);
           continue;
         }
       } catch {
@@ -7284,11 +7503,11 @@ function tryAcquireLock(lockPath) {
 }
 function releaseLock(lockPath) {
   try {
-    import_node_fs12.unlinkSync(lockPath);
+    import_node_fs13.unlinkSync(lockPath);
   } catch {}
 }
 function resolveStorePath(cwd, sessionId) {
-  return import_node_path12.join(cwd, ".pi", "subagent-schedules", `${sessionId}.json`);
+  return import_node_path13.join(cwd, ".pi", "subagent-schedules", `${sessionId}.json`);
 }
 
 class ScheduleStore {
@@ -7305,18 +7524,18 @@ class ScheduleStore {
     this.load();
   }
   ensureDir() {
-    import_node_fs12.mkdirSync(import_node_path12.dirname(this.filePath), { recursive: true });
+    import_node_fs13.mkdirSync(import_node_path13.dirname(this.filePath), { recursive: true });
   }
   load() {
-    if (!import_node_fs12.existsSync(this.filePath))
+    if (!import_node_fs13.existsSync(this.filePath))
       return;
     let data;
     try {
-      data = JSON.parse(import_node_fs12.readFileSync(this.filePath, "utf-8"));
+      data = JSON.parse(import_node_fs13.readFileSync(this.filePath, "utf-8"));
     } catch (err) {
       const backup = `${this.filePath}.corrupt`;
       try {
-        import_node_fs12.renameSync(this.filePath, backup);
+        import_node_fs13.renameSync(this.filePath, backup);
         console.warn(`[pi-subagents] Schedule file ${this.filePath} is not valid JSON (${err instanceof Error ? err.message : String(err)}); moved it to ${backup}.`);
       } catch (moveErr) {
         console.warn(`[pi-subagents] Schedule file ${this.filePath} is not valid JSON and could not be moved aside:`, moveErr);
@@ -7330,8 +7549,8 @@ class ScheduleStore {
   save() {
     const data = { version: 1, jobs: [...this.jobs.values()] };
     const tmp = this.filePath + ".tmp";
-    import_node_fs12.writeFileSync(tmp, JSON.stringify(data, null, 2));
-    import_node_fs12.renameSync(tmp, this.filePath);
+    import_node_fs13.writeFileSync(tmp, JSON.stringify(data, null, 2));
+    import_node_fs13.renameSync(tmp, this.filePath);
   }
   underLock(fn) {
     try {
@@ -7415,214 +7634,17 @@ class ScheduleStore {
     return this.withLock(() => this.jobs.delete(id));
   }
   deleteFileIfEmpty() {
-    if (this.jobs.size === 0 && import_node_fs12.existsSync(this.filePath)) {
+    if (this.jobs.size === 0 && import_node_fs13.existsSync(this.filePath)) {
       try {
-        import_node_fs12.unlinkSync(this.filePath);
+        import_node_fs13.unlinkSync(this.filePath);
       } catch {}
     }
   }
 }
 
-// src/settings.ts
-init_agent_types();
-init_discovery_cache();
-var import_node_fs13 = require("fs");
-var import_node_path13 = require("path");
-var import_pi_coding_agent13 = __toESM(require_pi_coding_agent());
-var VALID_JOIN_MODES = new Set(["async", "group", "smart"]);
-var VALID_TOOL_DESCRIPTION_MODES = new Set(["full", "compact", "custom"]);
-var VALID_WIDGET_MODES = new Set(["all", "background", "off"]);
-var VALID_VIEWER_MARKDOWN_MODES = new Set(["off", "assistant", "all"]);
-var VALID_AGENT_MENTION_MODES = new Set(["model", "direct", "off"]);
-var MAX_CONCURRENT_CEILING = 1024;
-var MAX_TURNS_CEILING = 1e4;
-var GRACE_TURNS_CEILING = 1000;
-var TOOL_TIMEOUT_CEILING2 = 86400;
-var SUBAGENT_DEPTH_CEILING = 16;
-function sanitize(raw) {
-  if (!raw || typeof raw !== "object")
-    return {};
-  const r = raw;
-  const out = {};
-  if (Number.isInteger(r.maxConcurrent) && r.maxConcurrent >= 1 && r.maxConcurrent <= MAX_CONCURRENT_CEILING) {
-    out.maxConcurrent = r.maxConcurrent;
-  }
-  if (Number.isInteger(r.maxConcurrentForeground) && r.maxConcurrentForeground >= 0 && r.maxConcurrentForeground <= MAX_CONCURRENT_CEILING) {
-    out.maxConcurrentForeground = r.maxConcurrentForeground;
-  }
-  if (Number.isInteger(r.defaultMaxTurns) && r.defaultMaxTurns >= 0 && r.defaultMaxTurns <= MAX_TURNS_CEILING) {
-    out.defaultMaxTurns = r.defaultMaxTurns;
-  }
-  if (Number.isInteger(r.graceTurns) && r.graceTurns >= 1 && r.graceTurns <= GRACE_TURNS_CEILING) {
-    out.graceTurns = r.graceTurns;
-  }
-  if (Number.isInteger(r.toolTimeoutSeconds) && r.toolTimeoutSeconds >= 0 && r.toolTimeoutSeconds <= TOOL_TIMEOUT_CEILING2) {
-    out.toolTimeoutSeconds = r.toolTimeoutSeconds;
-  }
-  if (Number.isInteger(r.maxSubagentDepth) && r.maxSubagentDepth >= 0 && r.maxSubagentDepth <= SUBAGENT_DEPTH_CEILING) {
-    out.maxSubagentDepth = r.maxSubagentDepth;
-  }
-  if (typeof r.defaultJoinMode === "string" && VALID_JOIN_MODES.has(r.defaultJoinMode)) {
-    out.defaultJoinMode = r.defaultJoinMode;
-  }
-  if (typeof r.backgroundByDefault === "boolean") {
-    out.backgroundByDefault = r.backgroundByDefault;
-  }
-  if (typeof r.schedulingEnabled === "boolean") {
-    out.schedulingEnabled = r.schedulingEnabled;
-  }
-  if (typeof r.scopeModels === "boolean") {
-    out.scopeModels = r.scopeModels;
-  }
-  if (typeof r.strictAgentFiles === "boolean") {
-    out.strictAgentFiles = r.strictAgentFiles;
-  }
-  if (typeof r.disableDefaultAgents === "boolean") {
-    out.disableDefaultAgents = r.disableDefaultAgents;
-  }
-  if (typeof r.toolDescriptionMode === "string" && VALID_TOOL_DESCRIPTION_MODES.has(r.toolDescriptionMode)) {
-    out.toolDescriptionMode = r.toolDescriptionMode;
-  }
-  if (typeof r.fleetView === "boolean") {
-    out.fleetView = r.fleetView;
-  }
-  if (typeof r.agentMentions === "boolean") {
-    out.agentMentions = r.agentMentions ? "model" : "off";
-  } else if (typeof r.agentMentions === "string" && VALID_AGENT_MENTION_MODES.has(r.agentMentions)) {
-    out.agentMentions = r.agentMentions;
-  }
-  if (typeof r.rememberAgents === "boolean") {
-    out.rememberAgents = r.rememberAgents;
-  }
-  if (typeof r.widgetMode === "string" && VALID_WIDGET_MODES.has(r.widgetMode)) {
-    out.widgetMode = r.widgetMode;
-  }
-  if (typeof r.outputTranscript === "boolean") {
-    out.outputTranscript = r.outputTranscript;
-  }
-  if (typeof r.worktreeIsolation === "boolean") {
-    out.worktreeIsolation = r.worktreeIsolation;
-  }
-  if (typeof r.reportUsage === "boolean") {
-    out.reportUsage = r.reportUsage;
-  }
-  if (typeof r.showCost === "boolean") {
-    out.showCost = r.showCost;
-  }
-  if (typeof r.showModel === "boolean") {
-    out.showModel = r.showModel;
-  }
-  if (typeof r.viewerMarkdown === "string" && VALID_VIEWER_MARKDOWN_MODES.has(r.viewerMarkdown)) {
-    out.viewerMarkdown = r.viewerMarkdown;
-  }
-  if (typeof r.workflowsEnabled === "boolean") {
-    out.workflowsEnabled = r.workflowsEnabled;
-  }
-  if (r.fallbackSubagent === false) {
-    out.fallbackSubagent = NO_FALLBACK;
-  } else if (typeof r.fallbackSubagent === "string" && r.fallbackSubagent.trim()) {
-    out.fallbackSubagent = r.fallbackSubagent.trim();
-  }
-  return out;
-}
-function globalPath() {
-  return import_node_path13.join(import_pi_coding_agent13.getAgentDir(), "subagents.json");
-}
-function projectPath(cwd) {
-  return import_node_path13.join(cwd, ".pi", "subagents.json");
-}
-var readParsedSettings = createDiscoveryCache((path) => sanitize(JSON.parse(import_node_fs13.readFileSync(path, "utf-8"))), 64);
-function readSettingsFile(path) {
-  if (!import_node_fs13.existsSync(path))
-    return {};
-  try {
-    return readParsedSettings(path);
-  } catch (err) {
-    const reason = err instanceof Error ? err.message : String(err);
-    console.warn(`[pi-subagents] Ignoring malformed settings at ${path}: ${reason}`);
-    return {};
-  }
-}
-function loadSettings(cwd = process.cwd(), project = true) {
-  return { ...readSettingsFile(globalPath()), ...project ? readSettingsFile(projectPath(cwd)) : {} };
-}
-function saveSettings(s, cwd = process.cwd()) {
-  const path = projectPath(cwd);
-  try {
-    import_node_fs13.mkdirSync(import_node_path13.dirname(path), { recursive: true });
-    import_node_fs13.writeFileSync(path, JSON.stringify(s, null, 2), "utf-8");
-    return true;
-  } catch {
-    return false;
-  }
-}
-function applySettings(s, appliers) {
-  if (typeof s.maxConcurrent === "number")
-    appliers.setMaxConcurrent(s.maxConcurrent);
-  if (typeof s.maxConcurrentForeground === "number") {
-    appliers.setMaxConcurrentForeground(s.maxConcurrentForeground);
-  }
-  if (typeof s.defaultMaxTurns === "number")
-    appliers.setDefaultMaxTurns(s.defaultMaxTurns);
-  if (typeof s.graceTurns === "number")
-    appliers.setGraceTurns(s.graceTurns);
-  if (typeof s.toolTimeoutSeconds === "number")
-    appliers.setToolTimeoutSeconds(s.toolTimeoutSeconds);
-  if (typeof s.maxSubagentDepth === "number")
-    appliers.setMaxSubagentDepth(s.maxSubagentDepth);
-  if (typeof s.fallbackSubagent === "string")
-    appliers.setFallbackSubagent(s.fallbackSubagent);
-  if (s.defaultJoinMode)
-    appliers.setDefaultJoinMode(s.defaultJoinMode);
-  if (typeof s.backgroundByDefault === "boolean")
-    appliers.setBackgroundByDefault(s.backgroundByDefault);
-  if (typeof s.schedulingEnabled === "boolean")
-    appliers.setSchedulingEnabled(s.schedulingEnabled);
-  if (typeof s.scopeModels === "boolean")
-    appliers.setScopeModels(s.scopeModels);
-  if (typeof s.strictAgentFiles === "boolean")
-    appliers.setStrictAgentFiles(s.strictAgentFiles);
-  if (typeof s.disableDefaultAgents === "boolean")
-    appliers.setDisableDefaultAgents(s.disableDefaultAgents);
-  if (s.toolDescriptionMode)
-    appliers.setToolDescriptionMode(s.toolDescriptionMode);
-  if (typeof s.fleetView === "boolean")
-    appliers.setFleetView(s.fleetView);
-  if (s.agentMentions)
-    appliers.setAgentMentions(s.agentMentions);
-  if (typeof s.rememberAgents === "boolean")
-    appliers.setRememberAgents(s.rememberAgents);
-  if (s.widgetMode)
-    appliers.setWidgetMode(s.widgetMode);
-  if (typeof s.outputTranscript === "boolean")
-    appliers.setOutputTranscript(s.outputTranscript);
-  if (typeof s.worktreeIsolation === "boolean")
-    appliers.setWorktreeIsolation(s.worktreeIsolation);
-  if (typeof s.reportUsage === "boolean")
-    appliers.setReportUsage(s.reportUsage);
-  if (typeof s.showCost === "boolean")
-    appliers.setShowCost(s.showCost);
-  if (typeof s.showModel === "boolean")
-    appliers.setShowModel(s.showModel);
-  if (s.viewerMarkdown)
-    appliers.setViewerMarkdown(s.viewerMarkdown);
-  if (typeof s.workflowsEnabled === "boolean")
-    appliers.setWorkflowsEnabled(s.workflowsEnabled);
-}
-function persistToastFor(successMsg, persisted) {
-  return persisted ? { message: successMsg, level: "info" } : { message: `${successMsg} (session only; failed to persist)`, level: "warning" };
-}
-function applyAndEmitLoaded(appliers, emit, cwd = process.cwd(), project = true) {
-  const settings = loadSettings(cwd, project);
-  applySettings(settings, appliers);
-  emit("subagents:settings_loaded", { settings });
-  return settings;
-}
-function saveAndEmitChanged(snapshot, successMsg, emit, cwd = process.cwd()) {
-  const persisted = saveSettings(snapshot, cwd);
-  emit("subagents:settings_changed", { settings: snapshot, persisted });
-  return persistToastFor(successMsg, persisted);
-}
+// src/index.ts
+init_settings();
+
 // src/ui/agent-mention.ts
 init_mention();
 function mentionRoster(manager, types, displayNameOf = (type) => type) {

package/dist-bun/index.js

@@ -16,7 +16,7 @@ const hostModules = {
   "@sinclair/typebox": host__sinclair_typebox,
   "typebox/value": host_typebox_value,
 };
-globalThis[Symbol.for("opensec-pi-subagents@0.20.1:host-modules")] = (id) => {
+globalThis[Symbol.for("opensec-pi-subagents@0.20.2:host-modules")] = (id) => {
   const mod = hostModules[id];
   if (mod === undefined) throw new Error(`opensec-pi-subagents: host module ${id} is not available`);
   return mod;

package/docs/workflows.md

@@ -124,7 +124,7 @@ A script you will run more than once belongs somewhere durable. Copy it out of t
 
 First hit wins, in that order, so a project file shadows a same-named global one.
 
-The two project locations are used only when Pi trusts the project to run its own code: the folder was trusted at Pi's prompt (or by `defaultProjectTrust`, or a CLI flag), or `/trust` recorded it. Pi trusts a folder without asking when it holds nothing Pi gates, and `.pi/workflows` is not gated, so a cloned repo that ships only workflows does not get them run by name until you run `/trust`. A refused name says so and runs nothing.
+With `"projectTrust": "pi"` in the global subagents.json (the default, `"full"`, uses them in every project), the two project locations are used only when Pi trusts the project to run its own code: the folder was trusted at Pi's prompt (or by `defaultProjectTrust`, or a CLI flag), or `/trust` recorded it. Pi trusts a folder without asking when it holds nothing Pi gates, and `.pi/workflows` is not gated, so a cloned repo that ships only workflows does not get them run by name until you run `/trust`. A refused name says so and runs nothing.
 
 The file must carry an `export const meta = { name, description }` declaration. Those are ordinary directories that may hold anything, so that declaration is what marks a file as a workflow — name something else and you are told it is not a workflow rather than getting a parse error from halfway through it. Nothing in the file is executed to decide that.
 
@@ -288,7 +288,7 @@ The child runs in the *same* worker and vm context under its own globals, so it
 |---|---|
 | An inline script, as run | `<tmp>/pi-subagents-<uid>/<encoded-cwd>/<session>/tasks/<run id>.workflow.js` |
 | The resume journal | the same directory, `<run id>.workflow.jsonl` |
-| Saved workflows | `.pi/workflows/` → `.agents/workflows/` → `<agent dir>/workflows/`, first hit wins (project locations only in a project trusted to run its code) |
+| Saved workflows | `.pi/workflows/` → `.agents/workflows/` → `<agent dir>/workflows/`, first hit wins (with `projectTrust: "pi"`, project locations only in a project trusted to run its code) |
 
 The first two are scratch: temp storage, wiped by a reboot or a temp sweep. Only the third is durable, and copying a script there is a manual step.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opensec-pi-subagents",
-  "version": "0.20.1",
+  "version": "0.20.2",
   "description": "OpenSec Subagents for Pi: specialized agents in separate sessions that inherit the parent's model and thinking level. Bun build, for Pi-Bolt.",
   "author": "OpenSec",
   "contributors": [