pi-background-tasks 2.5.0 → 2.6.0

package/docs/operations/configuration.md

@@ -11,6 +11,45 @@ covers_sources: []
 
 This page lists operator-facing configuration found in source. It intentionally does not invent undocumented environment variables.
 
+## Capability and dock selection
+
+Configuration is read before any package registration on each extension activation and is re-read by a real Pi `/reload`. Invalid input throws a bounded `pi_bg_config_invalid` error; it never partially activates a requested subset or falls back to defaults.
+
+| Variable | Default | Accepted values and effect |
+|---|---|---|
+| `PI_BG_FEATURES` | `process,delegate,fusion,attested,attribution` | A comma-separated set of exact lowercase, unique tokens from `process`, `delegate`, `fusion`, `attested`, `attribution`. Whitespace, blanks, duplicates, unknown values, and omission of mandatory `process` are errors. |
+| `PI_BG_DOCK_SHORTCUT` | `shift+down` | Exactly `shift+down`, `ctrl+alt+b`, or `off`. Only the selected literal key is registered; `off` registers no dock shortcut. |
+
+Capabilities are independent except for the derived result surface:
+
+- `process` is mandatory and owns ordinary process commands/tools, the task UI/renderer, footer, and EventBus service.
+- `delegate` registers `bg_delegate`.
+- `fusion` registers `/fusion`, `/fusion-models`, the four `fusion_*` tools, and its result renderer.
+- `attested` registers `bg_run_pi_attested`.
+- `attribution` registers ambient parent-session Anthropic provider/hooks and `/claude-cache`.
+- `bg_result` is not a feature token. It is registered exactly once when `delegate` or `fusion` is enabled, and is absent when neither producer is enabled.
+
+Disabled package tools, commands, renderers, and shortcuts are absent from registration and discovery. Pi's registry rebuild drops stale active names that have no current definition; the package does not deactivate an unrelated extension tool merely because its name matches a disabled capability. `/tasks` and `/bg-tasks` are always available. With the dock shortcut off, the footer advertises `/tasks`; the alternate footer hint is `CtrlAltB`. `Ctrl+Alt+C` remains the terminal-dependent `/bg-clear` fallback in every configuration.
+
+Ambient attribution selection does not weaken package-owned isolated Anthropic children. Delegate, Fusion, and attested child argv always loads `extensions/anthropic-attribution-child.ts` before the child guard/governor, regardless of the parent `attribution` token.
+
+These flags select functionality only. They do not claim to reduce cold-start import cost; deferred loading and performance measurement are separate work.
+
+## Initialized-host SDK contract
+
+Normal Pi TUI, RPC, print, and JSON modes provide lifecycle bindings that initialize post-bind package resources and cause `session_start` to run after reload. An SDK host must call `bindExtensions()` with at least one binding Pi counts (UI context, command-context actions, shutdown handling, or `onError`). With only `{}` or `{ mode: "print" }`, the first explicit bind initializes resources, but `reload()` does not emit the rebuilt runner's `session_start`; the host must explicitly bind again after every `reload()`.
+
+Bare `createAgentSession()` without `bindExtensions()` leaves ambient attribution, `/claude-cache`, its lifecycle hooks/owner claim, and session-start context services uninitialized. This remains a host API blocker pending a guaranteed post-bind/reload callback or owner-token provider registration; the package does not use a private fallback. It also means an opted shell cannot be claimed after an empty/mode-only SDK reload unless the embedder explicitly binds again. Direct `AgentSession.dispose()` invalidates without `session_shutdown`; extension-bearing SDK hosts must use `AgentSessionRuntime.dispose()` or another awaited host shutdown path. The generated availability tables describe this initialized-host contract and are not a pre-bind availability guarantee.
+
+## Opt-in reload survival
+
+Reload survival is a per-launch field/flag, not a global environment setting:
+
+- `bg_run({ isAgent:false, surviveReload:true, ... })`
+- `/bg --survive-reload ...`
+
+Omitted/false keeps default kill-on-reload behavior. Survival is supported only for ordinary shell tasks across a real same-process Pi reload with the exact session id and canonical cwd. Agent, managed, delegate, Fusion, attested, EventBus-v1, new/resume/fork/clone/quit, crash, and process-restart paths do not opt in. The live execution retains its launch-time shell policy, timeout deadline, output cap, and cumulative bytes even if environment/config changes before reload; a dock rerun is new work and uses current configuration.
+
 ## Update check
 
 At `session_start`, the extension performs a one-shot, time-boxed npm latest-version lookup. Failures are offline-safe: the footer simply shows no update segment.
@@ -27,7 +66,18 @@ At `session_start`, the extension performs a one-shot, time-boxed npm latest-ver
 
 ### POSIX
 
-For ordinary `bg_run` and `/bg` shell commands, non-Windows platforms use `SHELL` when it is set, otherwise `/bin/sh`.
+The policy is resolved once per extension activation. Changing these variables takes effect on the next Pi start or `/reload`, not midway through an activation.
+
+| Variable | Effect |
+|---|---|
+| `PI_BG_POSIX_SHELL=inherit` | Default. Preserve the existing behavior: use non-empty `SHELL`, otherwise `/bin/sh`, with `-c`. |
+| `PI_BG_POSIX_SHELL=bash` | Select Bash explicitly. Check executable `/bin/bash` first, then `bash` in `PATH` order; fail if unavailable. |
+| `PI_BG_POSIX_SHELL=sh` | Select sh explicitly. Check executable `/bin/sh` first, then `sh` in `PATH` order; fail if unavailable. |
+| `PI_BG_POSIX_SHELL_PATH=<absolute-file>` | Optional only with `bash` or `sh`. The target must be a regular executable file. Invalid, empty, relative, or unavailable paths fail without search fallback. |
+
+Executable paths are structured spawn arguments, not interpolated command text. Bash and sh receive `-c`, never `-lc`; selecting them does not implicitly load login-shell startup files. For explicit search, `/bin` wins over `PATH`; relative `PATH` directories are resolved at activation so task cwd changes cannot retarget the selected executable.
+
+In `inherit` mode, known Bourne-family names are reported as POSIX-compatible, `bash` is reported as Bash, and Nu/fish/csh/unknown names are reported as `user-non-posix`. The inherited executable itself is intentionally not validated or replaced, preserving compatibility. Before each agent run, guidance reports the exact resolved executable/dialect/args. A non-POSIX inherited shell receives explicit `PI_BG_POSIX_SHELL=bash` remediation.
 
 ### Windows
 
@@ -39,7 +89,7 @@ Windows defaults to `cmd.exe`/`ComSpec`. The generic `SHELL` variable is ignored
 | `PI_BG_SHELL=bash` | Use POSIX-style `bash -c` on Windows. |
 | `PI_BG_SHELL_PATH=<absolute .exe/.com>` | Explicit shell path; requires `PI_BG_SHELL`. |
 
-Invalid Windows shell settings fail loudly instead of falling back. `bash` is invoked with `-c`, not `-lc`.
+Invalid Windows shell settings fail loudly instead of falling back. `bash` is invoked with `-c`, not `-lc`. `PI_BG_POSIX_SHELL` and `PI_BG_POSIX_SHELL_PATH` are ignored on Windows, even when present, so they cannot change existing cmd/Bash/ComSpec selection or structured argv behavior.
 
 ## Output and log caps
 
@@ -57,14 +107,17 @@ Bounded logs are for context safety; they point to the full local output file wh
 |---|---|
 | `PI_BG_DISABLE_PI_TELEMETRY=1` | Do not wrap shell commands that appear to launch `pi -p ...` or `pi --mode json ...` when `isAgent:true`. Raw stdout is preserved. |
 
-Telemetry wrapping is best-effort and task-owned. Missing telemetry is reported as unavailable, never as zero. Under Windows `cmd`, safe interception is unavailable and the command is left unchanged.
+Telemetry wrapping is best-effort and task-owned. Missing telemetry is reported as unavailable, never as zero. Wrapping requires a resolved shell with compatible POSIX function syntax. Under Windows `cmd` or an inherited Nu/fish/csh/unknown shell, safe interception is unavailable, the command is left unchanged, and task metadata records the reason.
 
 ## Global Anthropic attribution and caching
 
-Normal package installation loads the package-owned Anthropic attribution/sanitization extension before the background-task extension. Non-Anthropic sessions are unchanged. Anthropic sessions require Pi's subscription OAuth route; the provider refuses metered Anthropic credentials and reads `userID` plus `oauthAccount.accountUuid` from `~/.claude.json` without writing it.
+Normal package installation loads the feature-aware ambient Anthropic entrypoint before the background-task entrypoint. With the default `attribution` capability it installs the package-owned attribution/sanitization provider after Pi binds the session provider runtime; without that capability it registers no parent provider, hooks, or `/claude-cache` command. Installation must succeed immediately before ownership is published. Shutdown restores the captured public host registration only if the package's exact installation token is still current, so preexisting and later dynamic host providers are preserved without name-wide deletion. Non-Anthropic routes are not rewritten; a non-target provider using `anthropic-messages` passes its host-owned model, legacy or normalized transcript context, endpoint, authentication, and options directly to the matching host SDK adapter. The adapter's stream/events/results are returned without reconstruction, preserving callbacks, live partial identity, optional fields, tool metadata, usage, and terminal error semantics. Anthropic sessions require Pi's subscription OAuth route and refuse metered Anthropic credentials.
+
+The account loader reads `userID` plus `oauthAccount.accountUuid` without writing the selected file. Precedence is an explicit absolute argument to the exported loader (programmatic/test use), then `PI_ANTHROPIC_ACCOUNT_CONFIG_PATH`, then `~/.claude.json`. The operator variable must name a non-empty absolute file path; relative/empty paths, unreadable or invalid JSON, and missing/blank required fields fail loudly. No alternate Claude directory variable is inferred. Package-owned Fusion, delegate, and attested children inherit this variable through their normal environment copies; account contents are neither copied to environment variables nor logged.
 
 | Variable/command | Effect |
 |---|---|
+| `PI_ANTHROPIC_ACCOUNT_CONFIG_PATH=<absolute-file>` | Read Anthropic attribution account fields from this file instead of `~/.claude.json`. |
 | `PI_CACHE_RETENTION=long` | Default to one-hour Anthropic cache breakpoints where the model supports them. This is the package default when unset. |
 | `PI_CACHE_RETENTION=short` | Default to ordinary ephemeral cache breakpoints without a one-hour TTL. |
 | `PI_CACHE_RETENTION=none` | Do not add default cache breakpoints. Explicit call-level policy remains authoritative. |
@@ -91,7 +144,7 @@ Use `/fusion-models` in TUI mode to configure five slots:
 
 Missing config means all five slots are `$current`. Config entries are qualified `provider/model` selections or `$current`; malformed config, stale explicit models, unavailable current models, and concurrent selector conflicts fail loudly before child inference.
 
-Fusion accepts frontier-model routes only through Pi Anthropic or Codex subscription OAuth where `ModelRegistry.isUsingOAuth` confirms the route. Metered frontier API-key/base-URL paths are rejected before child creation, and relevant metered environment variables are stripped from Fusion children. Anthropic children explicitly load the same package-owned global attribution/sanitization extension because Fusion disables ambient extension discovery. Missing or malformed attribution data fails loudly before Anthropic transport. Its subscription request policy is 200K, so Fusion clamps Anthropic budget capacity to 200K even when Pi's model catalog advertises a larger context.
+Fusion accepts frontier-model routes only through Pi Anthropic or Codex subscription OAuth where `ModelRegistry.isUsingOAuth` confirms the route. Metered frontier API-key/base-URL paths are rejected before child creation, and relevant metered environment variables are stripped from Fusion children. Anthropic children explicitly load the package-owned always-on child attribution/sanitization entrypoint because Fusion disables ambient extension discovery. This child safety path is independent of the parent ambient `attribution` capability. Missing or malformed attribution data fails loudly before Anthropic transport. Its subscription request policy is 200K, so Fusion clamps Anthropic budget capacity to 200K even when Pi's model catalog advertises a larger context.
 
 ## Fusion Claude prompt caching
 

package/docs/operations/releasing.md

@@ -23,6 +23,7 @@ Current observed standalone git tags stop at `v0.6.0`. Do not advertise or certi
 Run from the `pi-background-tasks` package root in an isolated environment. These are release-candidate checks, not tag certification:
 
 ```bash
+npm run build:runtime
 npm run typecheck
 npm run test:type-safety
 npm run test:unit
@@ -51,8 +52,9 @@ Live evidence (`npx tsx scripts/delegate-live-run.ts`) is release-time and perfo
 
 Use `npm pack --dry-run --json` output as the payload source of truth. Verify at minimum:
 
-- `extensions/anthropic-attribution.ts` and `extensions/background-tasks.ts` are included as the ordered Pi entrypoints;
-- runtime `src/` files needed by both entrypoints are included;
+- `dist/extensions/anthropic-attribution.js` and `dist/extensions/background-tasks.js` are the ordered Pi entrypoints;
+- the complete compiled `dist/` runtime closure, source maps, copied hook-contract evidence, and minimal `dist/package.json` are included;
+- authoritative `extensions/` and runtime `src/` sources remain included for public source/API compatibility;
 - `docs/`, `README.md`, `TESTING.md`, `TEST_PLAN.md`, `PUBLISHING.md`, `BACKGROUND-TASKS-INSTRUCTIONS.md`, `THIRD_PARTY_NOTICES.md`, root `logo.png`, and `LICENSE` are included per current `package.json.files`;
 - tests, scripts, node_modules, local `.pi/` artifacts, generated evidence not meant for runtime, and nested tarballs are excluded;
 - TypeBox remains a Pi-provided peer and no private/nested runtime TypeBox copy is bundled;

package/docs/operations/testing.md

@@ -24,12 +24,21 @@ CI=1
 
 Never point tests at the user's real `~/.pi/agent`.
 
+## Trustworthy package-verification controls
+
+Package source guards are compiler-driven rather than text-only:
+
+- `test:type-safety` parses TypeScript syntax trees to reject explicit `any` types, directly nested/double assertions (including intervening parentheses and type-transparent `satisfies` expressions), and production non-null expressions while ignoring inert words in comments, strings, templates, and regular expressions. TypeScript-recognized `@ts-ignore`, `@ts-expect-error`, and `@ts-nocheck` comments remain forbidden. The double-assertion rule is deliberately syntactic: assertions separated through an identifier are not treated as directly nested, so validated `unknown` boundaries remain legal; this is not a whole-program type-soundness proof.
+- `test:package` separates syntax-wide discovery of self-contained file-URL `pathname` hazards from bounded, flow-sensitive provenance. Static strings and static-head templates are classified by the WHATWG URL parser, including leading C0/space preprocessing and TAB/CR/LF removal; absolute first arguments override bases, while `./` and `../` template heads use the explicit base. The flow layer tracks distinct normal, break, continue, return, and explicit-throw completions, runs `finally` for every incoming completion, and covers direct/computed access plus declaration, assignment, and statically known `for...of` destructuring. Exact static keys distinguish lowercase `import.meta['url']` from uppercase intrinsic `globalThis['URL']`, with compiler symbols retaining lexical shadowing controls. Any explicitly traced may-file branch is rejected. An unknown dynamic first value remains unknown, but when a base is explicit it also retains that base's possible provenance because the value may be relative; known absolute HTTP(S) values still ignore file bases. The guard does not execute calls, infer implicit exceptions or interprocedural/later-closure effects, or model heap mutation and proxies, so it is a conservative source-policy check rather than a complete JavaScript dataflow proof.
+- The packed-consumer test starts with a separate empty-cache negative control. It archives the already-published files of the real installed production dependency closure through npm's bundled portable `tar` API, without entering npm's directory-pack lifecycle, then exposes only those inputs through a loopback fixture registry and seeds a fresh task-owned npm cache. An executable task-owned `prepack`/`prepare`/`postpack` sentinel characterizes npm 10.9.3's unsafe `--ignore-scripts` prepare behavior and npm 11.13.0's denial, while the fixture path executes no hook, preserves script-bearing manifest bytes, and leaves source hashes unchanged. npm receives explicit task-owned user and global config files, runs from task-owned projects with empty project config, hard-sets `GIT_ALLOW_PROTOCOL=file`, and uses absolute archive/pack/install inputs. A configuration-only hostile scoped-registry control proves ambient global/project precedence cannot divert preparation; it sends no hostile request. The registry is stopped before the tarball is installed with `--offline`; the test loads Turndown and its Domino transitive dependency. It never reads the user's npm cache or config, and absent closure inputs fail loudly.
+
 ## Current package scripts
 
 From current `package.json`:
 
 | Lane | Script | Meaning |
 |---|---|---|
+| Runtime build | `npm run build:runtime` | Compile authoritative extension/runtime TypeScript into the shipped `dist/` JavaScript closure. |
 | Typecheck | `npm run typecheck` | `tsc --noEmit`. |
 | Type safety package tests | `npm run test:type-safety` | Package/type-safety tests. |
 | Unit | `npm run test:unit` | Pure/unit coverage, including durable fs, budgets, projection, Fusion/delegate core. |
@@ -52,8 +61,21 @@ From current `package.json`:
 | Docs attestation | `npm run docs:attest/record -- <doc_id> --reviewer <identity-after-semantic-review> --verdict PASS --notes <review-notes>` | Computes hashes and records an explicit semantic PASS receipt after review; `npm run docs:attest` is an alias and still needs args. |
 | Docs unit/package gate | `npm run test:docs` | Docs-gate unit/package tests. |
 | Payload check | `npm run payload:check` | Package payload policy check. |
+| Cold-load benchmark | `node scripts/benchmark-cold-load.mjs --root "$PWD" --runtime <source|compiled> --label <label> --output <owned.json> --samples 30 --scratch <owned-dir>` | Fresh-process source or compiled-distribution load and first-use distributions; evidence only, never a CI timing threshold. |
 | Release version check | `npm run release:check-version` | Tag-only version sanity; requires explicit `GITHUB_REF_TYPE=tag`/`GITHUB_REF_NAME=v$VERSION` and never publishes. |
 
+### Cold-load measurement discipline
+
+The cold-load driver starts a new Node process for every sample and gives each worker isolated project, agent, session, HOME, and temporary roots with offline/telemetry suppression. It records raw samples plus median, p90, median absolute deviation, minimum, and maximum for direct delegate/Fusion facade imports; no-extension, process-only, and default-full real SDK loading; first delegate/Fusion launch and subtype result verification with deterministic fake children; and first model-selector invocation with mocked UI. One warm-up is excluded and at least 30 measured samples are expected for comparative evidence.
+
+Here, **cold** means a fresh process and empty JavaScript/Jiti module cache. It does not mean a flushed filesystem cache. Baseline and candidate must use the same driver and worker bytes, Node/Pi/dependency tree, host, features, and root conditions. If worktree limits force sequential baseline-then-candidate collection rather than simultaneous AB/BA, record that host-drift risk; do not fabricate interleaving. There is no machine-specific pass threshold.
+
+The benchmark requires an explicit `--runtime source|compiled` choice. Published package entrypoints select the compiled JavaScript distribution, while source mode remains an authoritative development control. Process-only startup no longer statically imports delegate/Fusion facades, dock UI, the attribution transport, or attested execution; enabled registrations still load their lightweight facade before the extension factory resolves. Neither mode supports a native-Windows or vendor compiled-Bun timing claim without separate runs.
+
+The package gate separately walks literal deferred imports, verifies every source target, builds its compiled counterpart, and requires the complete `dist/` closure in the tarball. A packed-copy regression then removes one verifier/producer module from an otherwise real tarball: package startup and immediate inventory still work, the first producer invocation fails with the bounded module-specific error, and no delegate artifact is created. This characterizes damaged payload behavior without weakening the real payload-closure check.
+
+Lazy lifecycle SDK coverage deliberately blocks Fusion cleanup while asserting the shared synchronous fence has already closed delegate, result, command/UI, and both Fusion lanes. A real `AgentSession.reload()` control lets production delegate preparation finish a complete artifact tree before returning, then proves the unregistered transaction is rolled back with no starter or residual run bytes. A separate claim race proves shutdown cannot consume Fusion usage without a successful retrieval, and a registered-task control proves rollback never deletes registry-owned artifacts.
+
 Do not run full/default/root suites for documentation-only edits unless the operator explicitly asks. If the operator restricts verification to focused checks, report that `docs:verify`/attestation were not run.
 
 ## Evidence that must be preserved

package/docs/operations/troubleshooting.md

@@ -17,11 +17,15 @@ Start from the symptom, verify the source-owned doc, then apply the remediation.
 | EventBus says service unavailable before `session_start` | Extension API is installed but no session context exists | Start/await Pi session startup; do not fabricate a context. |
 | Terminal event arrives unexpectedly early in a consumer | Consumer is not waiting for the `run` response before correlating task id, or an older implementation lacks the gate | Bind response first; current API gates terminal publication for `run`/`kill`. See `docs/api/eventbus-v1.md`. |
 | `bg_run` starts but logs are bounded/truncated | `bg_logs` is model-visible and capped by design | Read the full output file path from the notice only when operator-approved; do not increase model-visible logs casually. |
-| Output cap terminates a task | `PI_BG_MAX_OUTPUT_BYTES` cap reached | Inspect full command behavior; raise cap only deliberately for that run environment. The task failure is intentional safety. |
+| Output cap terminates a task | `PI_BG_MAX_OUTPUT_BYTES` cap reached | Inspect full command behavior; raise cap only deliberately for a later launch. A survivor keeps its launch-time cap and cumulative bytes across reload. |
+| `pi_bg_survive_reload_invalid` or `pi_bg_survive_reload_requires_non_agent` | Survival value/command grammar is malformed, or an agent task requested survival | Use a boolean `bg_run.surviveReload`, or one bare leading `/bg --survive-reload`, only with `isAgent:false`. Validation is intentionally before artifacts/spawn. |
+| `pi_bg_reload_owner_unavailable` after SDK reload | New runner received no counted `session_start` (common with `{}` or mode-only binding), or launch occurred before binding | Bind at least one counted SDK service, or explicitly bind again after reload. Normal TUI/RPC/print/JSON modes already do this. |
+| `pi_bg_reload_owner_activation_conflict`, `pi_bg_reload_owner_stale_claim`, or protocol incompatibility | Duplicate package activation, stale lease/claim, identity mismatch, or incompatible owner under the global symbol | Do not adopt task JSON/PIDs or overwrite owner state. Remove the duplicate/incompatible activation and let the fixed old handoff deadline clean up. |
+| `pi_bg_reload_handoff_expired` | No compatible same-process reload activation claimed an opted live execution within 30 seconds | Inspect extension/config load errors. The owner stops the retained tree and records truthful failure; it does not claim crash/restart survival. |
 | `PI_BG_SHELL` or `PI_BG_SHELL_PATH` error on Windows | Windows shell selection is closed and path-validated | Use `PI_BG_SHELL=cmd` or `bash`; if setting `PI_BG_SHELL_PATH`, provide an absolute `.exe`/`.com`. See `docs/subsystems/child-launch-durability-and-safety.md`. |
 | `pi_executable_resolution_failed` | Windows Pi package bin cannot be resolved/validated | Reinstall/repair Pi package; do not fall back to shell PATH shims. |
 | `pi_command_line_too_long` | Rendered Windows command line exceeds 32,767 UTF-16 units | Move large payload to stdin/artifact path; do not truncate argv. |
-| Terminal metadata/output durability failure | Fsync/close/metadata write failed | Treat terminal state as failed; inspect `DurableFileError` operation/path/cause. See `docs/subsystems/child-launch-durability-and-safety.md`. |
+| Terminal metadata/output durability failure | Fsync/close/metadata write failed | Treat terminal state as failed; inspect `DurableFileError` operation/path/cause. Same-process reload does not strengthen ordinary `.output` crash durability. See `docs/subsystems/child-launch-durability-and-safety.md`. |
 | Delegate refuses with `delegate_hook_contract_unsupported` | Current Pi hook behavior does not match committed evidence | Re-run the hook characterization gate during release work and re-review the guard; do not weaken the guard. See `docs/operations/testing.md`. |
 | Delegate refuses with `route_unresolved` or `route_capacity_unknown` | Requested/default route unavailable or lacks usable context window | Pin an available provider/model with declared context window; no substitute route is selected. |
 | Delegate refuses with `seed_budget_exceeded` | Exact child prompt plus system prompt exceeds allowed input under the backed route-family policy or conservative fallback | Use a larger-context subscription route, delegate earlier, or reduce visible parent text. Nothing was clipped. |

package/docs/read-before-edit.md

@@ -15,19 +15,24 @@ Every production file under `src/**` and `extensions/**` has exactly one primary
 
 | Source | Primary behavioral owner |
 | --- | --- |
+| `extensions/anthropic-attribution-child.ts` | [subsystems/anthropic-attribution](./subsystems/anthropic-attribution.md) |
 | `extensions/anthropic-attribution.ts` | [subsystems/anthropic-attribution](./subsystems/anthropic-attribution.md) |
 | `extensions/background-tasks.ts` | [subsystems/host-ui-and-telemetry](./subsystems/host-ui-and-telemetry.md) |
 | `extensions/delegate-child.ts` | [subsystems/delegation](./subsystems/delegation.md) |
 | `extensions/fusion-child.ts` | [subsystems/fusion](./subsystems/fusion.md) |
 | `src/core/anthropic-attribution-path.ts` | [subsystems/anthropic-attribution](./subsystems/anthropic-attribution.md) |
 | `src/core/anthropic-attribution.ts` | [subsystems/anthropic-attribution](./subsystems/anthropic-attribution.md) |
+| `src/core/attested-pi-contract.ts` | [subsystems/attested-pi-runs](./subsystems/attested-pi-runs.md) |
 | `src/core/attested-pi-run.ts` | [subsystems/attested-pi-runs](./subsystems/attested-pi-runs.md) |
+| `src/core/canonical-json.ts` | [subsystems/child-launch-durability-and-safety](./subsystems/child-launch-durability-and-safety.md) |
 | `src/core/common.ts` | [subsystems/background-task-runtime](./subsystems/background-task-runtime.md) |
+| `src/core/config.ts` | [subsystems/host-ui-and-telemetry](./subsystems/host-ui-and-telemetry.md) |
 | `src/core/context/parent-snapshot.ts` | [concepts/context-projection-and-budgeting](./concepts/context-projection-and-budgeting.md) |
 | `src/core/context/token-budget.ts` | [concepts/context-projection-and-budgeting](./concepts/context-projection-and-budgeting.md) |
 | `src/core/context/visible-conversation-v2.ts` | [concepts/context-projection-and-budgeting](./concepts/context-projection-and-budgeting.md) |
 | `src/core/delegate/artifacts.ts` | [subsystems/delegation](./subsystems/delegation.md) |
 | `src/core/delegate/budget.ts` | [subsystems/delegation](./subsystems/delegation.md) |
+| `src/core/delegate/facade-contract.ts` | [subsystems/delegation](./subsystems/delegation.md) |
 | `src/core/delegate/hook-contract-evidence.json` | [subsystems/delegation](./subsystems/delegation.md) |
 | `src/core/delegate/hook-contract.ts` | [subsystems/delegation](./subsystems/delegation.md) |
 | `src/core/delegate/launch.ts` | [subsystems/delegation](./subsystems/delegation.md) |
@@ -45,6 +50,7 @@ Every production file under `src/**` and `extensions/**` has exactly one primary
 | `src/core/fusion/config.ts` | [subsystems/fusion](./subsystems/fusion.md) |
 | `src/core/fusion/context.ts` | [subsystems/fusion](./subsystems/fusion.md) |
 | `src/core/fusion/evaluation.ts` | [subsystems/fusion](./subsystems/fusion.md) |
+| `src/core/fusion/facade-contract.ts` | [subsystems/fusion](./subsystems/fusion.md) |
 | `src/core/fusion/orchestrator.ts` | [subsystems/fusion](./subsystems/fusion.md) |
 | `src/core/fusion/output-contract.ts` | [subsystems/fusion](./subsystems/fusion.md) |
 | `src/core/fusion/pi-child.ts` | [subsystems/fusion](./subsystems/fusion.md) |
@@ -54,8 +60,12 @@ Every production file under `src/**` and `extensions/**` has exactly one primary
 | `src/core/fusion/types.ts` | [subsystems/fusion](./subsystems/fusion.md) |
 | `src/core/fusion/web-fetch.ts` | [subsystems/fusion](./subsystems/fusion.md) |
 | `src/core/fusion/workflows.ts` | [subsystems/fusion](./subsystems/fusion.md) |
+| `src/core/lazy-module.ts` | [subsystems/delegation](./subsystems/delegation.md) |
 | `src/core/pi-launch.ts` | [subsystems/child-launch-durability-and-safety](./subsystems/child-launch-durability-and-safety.md) |
 | `src/core/registry.ts` | [subsystems/background-task-runtime](./subsystems/background-task-runtime.md) |
+| `src/core/reload-shell-owner.ts` | [subsystems/background-task-runtime](./subsystems/background-task-runtime.md) |
+| `src/core/shell-policy.ts` | [subsystems/background-task-runtime](./subsystems/background-task-runtime.md) |
+| `src/core/task-durable.ts` | [subsystems/child-launch-durability-and-safety](./subsystems/child-launch-durability-and-safety.md) |
 | `src/core/update-check.ts` | [subsystems/host-ui-and-telemetry](./subsystems/host-ui-and-telemetry.md) |
 | `src/core/windows-taskkill.ts` | [subsystems/background-task-runtime](./subsystems/background-task-runtime.md) |
 | `src/delegate-child-extension.ts` | [subsystems/delegation](./subsystems/delegation.md) |
@@ -68,34 +78,37 @@ Every production file under `src/**` and `extensions/**` has exactly one primary
 
 ## Public surfaces
 
-- `command:bg`
-- `command:bg-clear`
-- `command:bg-tasks`
-- `command:bg-update`
-- `command:claude-cache`
-- `command:fusion`
-- `command:fusion-models`
-- `command:jobs`
-- `command:kill`
-- `command:logs`
-- `command:tasks`
-- `eventbus:background-task-v1`
-- `renderer:background-task-notification`
-- `renderer:fusion-result`
-- `shortcut:ctrl+alt+c`
-- `shortcut:shift+down`
-- `tool:bg_delegate`
-- `tool:bg_kill`
-- `tool:bg_logs`
-- `tool:bg_result`
-- `tool:bg_run`
-- `tool:bg_run_pi_attested`
-- `tool:bg_status`
-- `tool:fusion_investigate`
-- `tool:fusion_reason`
-- `tool:fusion_research`
-- `tool:fusion_validate`
-- `workflow:investigate`
-- `workflow:reason`
-- `workflow:research`
-- `workflow:validate`
+| Surface | Availability | Default |
+| --- | --- | --- |
+| `command:bg` | `always` | yes |
+| `command:bg-clear` | `always` | yes |
+| `command:bg-tasks` | `always` | yes |
+| `command:bg-update` | `always` | yes |
+| `command:claude-cache` | `feature:attribution` | yes |
+| `command:fusion` | `feature:fusion` | yes |
+| `command:fusion-models` | `feature:fusion` | yes |
+| `command:jobs` | `always` | yes |
+| `command:kill` | `always` | yes |
+| `command:logs` | `always` | yes |
+| `command:tasks` | `always` | yes |
+| `tool:bg_delegate` | `feature:delegate` | yes |
+| `tool:bg_kill` | `always` | yes |
+| `tool:bg_logs` | `always` | yes |
+| `tool:bg_result` | `any(feature:delegate,feature:fusion)` | yes |
+| `tool:bg_run` | `always` | yes |
+| `tool:bg_run_pi_attested` | `feature:attested` | yes |
+| `tool:bg_status` | `always` | yes |
+| `tool:fusion_investigate` | `feature:fusion` | yes |
+| `tool:fusion_reason` | `feature:fusion` | yes |
+| `tool:fusion_research` | `feature:fusion` | yes |
+| `tool:fusion_validate` | `feature:fusion` | yes |
+| `shortcut:ctrl+alt+b` | `dock:ctrl+alt+b` | no |
+| `shortcut:ctrl+alt+c` | `always` | yes |
+| `shortcut:shift+down` | `dock:shift+down` | yes |
+| `renderer:background-task-notification` | `always` | yes |
+| `renderer:fusion-result` | `feature:fusion` | yes |
+| `eventbus:background-task-v1` | `always` | yes |
+| `workflow:investigate` | `feature:fusion` | yes |
+| `workflow:reason` | `feature:fusion` | yes |
+| `workflow:research` | `feature:fusion` | yes |
+| `workflow:validate` | `feature:fusion` | yes |

package/docs/reference/runtime-contracts.md

@@ -12,13 +12,42 @@ covers_sources: []
 This generated registry lists production environment-variable references, runtime paths/artifacts, schema identifiers, and status vocabularies extracted from package source. It intentionally excludes incidental source-code literals such as package metadata import paths.
 
 <!-- pi-docs:begin name="runtime-contracts" generator="scripts/docs/generate.mjs" -->
+### Configuration variants
+
+
+```json
+{
+  "default_dock_shortcut": "shift+down",
+  "default_features": [
+    "process",
+    "delegate",
+    "fusion",
+    "attested",
+    "attribution"
+  ],
+  "dock_shortcut_values": [
+    "shift+down",
+    "ctrl+alt+b",
+    "off"
+  ],
+  "feature_values": [
+    "process",
+    "delegate",
+    "fusion",
+    "attested",
+    "attribution"
+  ],
+  "source": "src/core/config.ts"
+}
+```
+
 ### Environment variable references
 
 | Name | Access | Provenance |
 | --- | --- | --- |
-| `ANTHROPIC_API_KEY` | remove | `src/core/attested-pi-run.ts:135`<br>`src/core/fusion/pi-child.ts:100` |
+| `ANTHROPIC_API_KEY` | remove | `src/core/attested-pi-run.ts:248`<br>`src/core/fusion/pi-child.ts:100` |
 | `ANTHROPIC_AUTH_TOKEN` | remove | `src/core/fusion/pi-child.ts:100` |
-| `ANTHROPIC_BASE_URL` | remove | `src/core/attested-pi-run.ts:135`<br>`src/core/fusion/pi-child.ts:100` |
+| `ANTHROPIC_BASE_URL` | remove | `src/core/attested-pi-run.ts:248`<br>`src/core/fusion/pi-child.ts:100` |
 | `AZURE_OPENAI_AD_TOKEN` | remove | `src/core/fusion/pi-child.ts:100` |
 | `AZURE_OPENAI_API_KEY` | remove | `src/core/fusion/pi-child.ts:100` |
 | `AZURE_OPENAI_API_VERSION` | remove | `src/core/fusion/pi-child.ts:100` |
@@ -26,43 +55,48 @@ This generated registry lists production environment-variable references, runtim
 | `AZURE_OPENAI_DEPLOYMENT_NAME_MAP` | remove | `src/core/fusion/pi-child.ts:100` |
 | `AZURE_OPENAI_ENDPOINT` | remove | `src/core/fusion/pi-child.ts:100` |
 | `AZURE_OPENAI_RESOURCE_NAME` | remove | `src/core/fusion/pi-child.ts:100` |
-| `ComSpec` | read | `src/core/common.ts:726`<br>`src/core/common.ts:737` |
-| `OPENAI_API_KEY` | remove | `src/core/attested-pi-run.ts:135`<br>`src/core/fusion/pi-child.ts:100` |
-| `OPENAI_BASE_URL` | remove | `src/core/attested-pi-run.ts:135`<br>`src/core/fusion/pi-child.ts:100` |
-| `OPENROUTER_API_KEY` | remove | `src/core/attested-pi-run.ts:135`<br>`src/core/fusion/pi-child.ts:100` |
-| `OPENROUTER_BASE_URL` | remove | `src/core/attested-pi-run.ts:135`<br>`src/core/fusion/pi-child.ts:100` |
-| `path` | read | `src/core/common.ts:681` |
-| `Path` | read | `src/core/common.ts:681` |
-| `PATH` | read | `src/core/common.ts:681` |
-| `PI_API_BASE_URL` | remove | `src/core/attested-pi-run.ts:135`<br>`src/core/fusion/pi-child.ts:100` |
-| `PI_API_KEY` | remove | `src/core/attested-pi-run.ts:135`<br>`src/core/fusion/pi-child.ts:100` |
-| `PI_AUTH_FILE` | remove | `src/core/attested-pi-run.ts:135`<br>`src/core/fusion/pi-child.ts:100` |
+| `ComSpec` | read | `src/core/common.ts:1047`<br>`src/core/common.ts:1065` |
+| `OPENAI_API_KEY` | remove | `src/core/attested-pi-run.ts:248`<br>`src/core/fusion/pi-child.ts:100` |
+| `OPENAI_BASE_URL` | remove | `src/core/attested-pi-run.ts:248`<br>`src/core/fusion/pi-child.ts:100` |
+| `OPENROUTER_API_KEY` | remove | `src/core/attested-pi-run.ts:248`<br>`src/core/fusion/pi-child.ts:100` |
+| `OPENROUTER_BASE_URL` | remove | `src/core/attested-pi-run.ts:248`<br>`src/core/fusion/pi-child.ts:100` |
+| `path` | read | `src/core/common.ts:963` |
+| `Path` | read | `src/core/common.ts:963` |
+| `PATH` | read | `src/core/common.ts:1017`<br>`src/core/common.ts:963`<br>`src/core/pi-launch.ts:425` |
+| `PI_ANTHROPIC_ACCOUNT_CONFIG_PATH` | read | `src/core/anthropic-attribution.ts:893` |
+| `PI_API_BASE_URL` | remove | `src/core/attested-pi-run.ts:248`<br>`src/core/fusion/pi-child.ts:100` |
+| `PI_API_KEY` | remove | `src/core/attested-pi-run.ts:248`<br>`src/core/fusion/pi-child.ts:100` |
+| `PI_AUTH_FILE` | remove | `src/core/attested-pi-run.ts:248`<br>`src/core/fusion/pi-child.ts:100` |
 | `PI_BG_DELEGATE_ARTIFACT_DIR` | read, write | `src/core/delegate/launch.ts:353`<br>`src/delegate-child-extension.ts:384` |
 | `PI_BG_DELEGATE_LAUNCH_NONCE` | read, write | `src/core/delegate/launch.ts:357`<br>`src/delegate-child-extension.ts:388` |
 | `PI_BG_DELEGATE_SEED_PATH` | read, write | `src/core/delegate/launch.ts:354`<br>`src/delegate-child-extension.ts:385` |
 | `PI_BG_DELEGATE_SEED_SHA256` | read, write | `src/core/delegate/launch.ts:355`<br>`src/delegate-child-extension.ts:386` |
 | `PI_BG_DELEGATE_TASK_ID` | read, write | `src/core/delegate/launch.ts:356`<br>`src/delegate-child-extension.ts:387` |
-| `PI_BG_DISABLE_PI_TELEMETRY` | read | `src/core/registry.ts:195` |
-| `PI_BG_DISABLE_UPDATE_CHECK` | read | `src/extension.ts:455` |
-| `PI_BG_MAX_OUTPUT_BYTES` | read | `src/core/registry.ts:69` |
-| `PI_BG_REGISTRY_URL` | read | `src/extension.ts:464` |
-| `PI_BG_SHELL` | read | `src/core/common.ts:722` |
-| `PI_BG_SHELL_PATH` | read | `src/core/common.ts:723` |
-| `PI_CACHE_RETENTION` | read, write | `src/core/anthropic-attribution.ts:635`<br>`src/core/anthropic-attribution.ts:646`<br>`src/core/fusion/claude-cache.ts:57`<br>`src/core/fusion/pi-child.ts:273`<br>`src/core/fusion/pi-child.ts:274` |
+| `PI_BG_DISABLE_PI_TELEMETRY` | read | `src/core/registry.ts:271` |
+| `PI_BG_DISABLE_UPDATE_CHECK` | read | `src/extension.ts:656` |
+| `PI_BG_DOCK_SHORTCUT` | read | `src/core/config.ts:113` |
+| `PI_BG_FEATURES` | read | `src/core/config.ts:112` |
+| `PI_BG_MAX_OUTPUT_BYTES` | read | `src/core/registry.ts:78` |
+| `PI_BG_POSIX_SHELL` | read | `src/core/common.ts:1085` |
+| `PI_BG_POSIX_SHELL_PATH` | read | `src/core/common.ts:1095` |
+| `PI_BG_REGISTRY_URL` | read | `src/extension.ts:665` |
+| `PI_BG_SHELL` | read | `src/core/common.ts:1042` |
+| `PI_BG_SHELL_PATH` | read | `src/core/common.ts:1043` |
+| `PI_CACHE_RETENTION` | read, write | `src/core/anthropic-attribution.ts:658`<br>`src/core/anthropic-attribution.ts:669`<br>`src/core/fusion/claude-cache.ts:57`<br>`src/core/fusion/pi-child.ts:273`<br>`src/core/fusion/pi-child.ts:274` |
 | `PI_FUSION_CANDIDATE_OUTPUT_RECOVERY_PATH` | read, remove, write | `src/core/fusion/pi-child.ts:100`<br>`src/core/fusion/pi-child.ts:1879`<br>`src/fusion-child-extension.ts:599` |
 | `PI_FUSION_RESEARCH_ENABLED` | read, remove, write | `src/core/fusion/pi-child.ts:100`<br>`src/core/fusion/pi-child.ts:1902`<br>`src/fusion-child-extension.ts:608` |
 | `PI_FUSION_SOURCE_POLICY_PATH` | read, remove, write | `src/core/fusion/pi-child.ts:100`<br>`src/core/fusion/pi-child.ts:1903`<br>`src/fusion-child-extension.ts:555` |
 | `PI_FUSION_SOURCE_POLICY_SHA256` | read, remove, write | `src/core/fusion/pi-child.ts:100`<br>`src/core/fusion/pi-child.ts:1904`<br>`src/fusion-child-extension.ts:556` |
 | `PI_FUSION_TOOL_CALL_LOG_PATH` | read, remove, write | `src/core/fusion/pi-child.ts:100`<br>`src/core/fusion/pi-child.ts:1891`<br>`src/fusion-child-extension.ts:598` |
 | `PI_MODEL` | remove | `src/core/delegate/launch.ts:330`<br>`src/core/fusion/pi-child.ts:100` |
-| `PI_OFFLINE` | read | `src/extension.ts:456` |
+| `PI_OFFLINE` | read | `src/extension.ts:657` |
 | `PI_PROVIDER` | remove | `src/core/delegate/launch.ts:330`<br>`src/core/fusion/pi-child.ts:100` |
 | `PI_REASONING_LEVEL` | remove | `src/core/delegate/launch.ts:330`<br>`src/core/fusion/pi-child.ts:100` |
 | `PI_SESSION_FILE` | remove | `src/core/delegate/launch.ts:330`<br>`src/core/fusion/pi-child.ts:100` |
 | `PI_SESSION_ID` | remove | `src/core/delegate/launch.ts:330`<br>`src/core/fusion/pi-child.ts:100` |
 | `PI_SKIP_VERSION_CHECK` | write | `src/core/delegate/launch.ts:352`<br>`src/core/fusion/pi-child.ts:272` |
-| `PIPELINE_ANTHROPIC_ATTRIBUTION_AUDIT_PATH` | read | `src/core/anthropic-attribution.ts:1124` |
-| `SHELL` | read | `src/core/common.ts:718` |
+| `PIPELINE_ANTHROPIC_ATTRIBUTION_AUDIT_PATH` | read | `src/core/anthropic-attribution.ts:1170` |
+| `SHELL` | read | `src/core/common.ts:1102` |
 | `SystemRoot` | read | `src/core/windows-taskkill.ts:96` |
 | `WINDIR` | read | `src/core/windows-taskkill.ts:101` |
 
@@ -70,7 +104,7 @@ This generated registry lists production environment-variable references, runtim
 
 | Kind | Path/artifact | Provenance |
 | --- | --- | --- |
-| config | `fusion-models.json` | `src/core/fusion/config.ts:21` |
+| config | `fusion-models.json` | `src/core/fusion/config.ts:22` |
 | delegate-artifact | `budget-plan.json` | `src/core/delegate/artifacts.ts:44` |
 | delegate-artifact | `child-prompt.txt` | `src/core/delegate/artifacts.ts:48` |
 | delegate-artifact | `context-omission-ledger.json` | `src/core/delegate/artifacts.ts:43` |
@@ -80,49 +114,49 @@ This generated registry lists production environment-variable references, runtim
 | delegate-artifact | `result.json` | `src/core/delegate/result-package.ts:28` |
 | delegate-artifact | `seed.json` | `src/core/delegate/artifacts.ts:42` |
 | delegate-artifact | `spill/<receipt-named-file>` | `src/core/delegate/artifacts.ts:54` |
-| directory | `.pi/delegate/<session-id>-<pid>/<task-id>/` | `src/core/delegate/artifacts.ts:160` |
-| directory | `.pi/fusion/<session-id>-<pid>/<run-id>/` | `src/core/fusion/artifacts.ts:563` |
-| directory | `.pi/tasks/<session-id>-<pid>/` | `src/core/registry.ts:784` |
+| directory | `.pi/delegate/<session-id>-<pid>/<task-id>/` | `src/core/delegate/artifacts.ts:161` |
+| directory | `.pi/fusion/<session-id>-<pid>/<run-id>/` | `src/core/fusion/artifacts.ts:568` |
+| directory | `.pi/tasks/<session-id>-<pid>/` | `src/core/registry.ts:1266` |
 | fusion-artifact | `<attempt-prefix> = candidate-<slot>.attempt-<n> \| evaluation.attempt-<n> \| merge.attempt-<n>` | `src/core/fusion/artifacts.ts:248` |
 | fusion-artifact | `<attempt-prefix>.calibration-violation.json` | `src/core/fusion/artifacts.ts:263` |
-| fusion-artifact | `<attempt-prefix>.events.jsonl` | `src/core/fusion/artifacts.ts:804` |
-| fusion-artifact | `<attempt-prefix>.prompt.txt` | `src/core/fusion/artifacts.ts:803` |
-| fusion-artifact | `<attempt-prefix>.stderr.txt` | `src/core/fusion/artifacts.ts:805` |
-| fusion-artifact | `blind-candidates.json` | `src/core/fusion/artifacts.ts:708` |
-| fusion-artifact | `budget-plan.json` | `src/core/fusion/artifacts.ts:704` |
+| fusion-artifact | `<attempt-prefix>.events.jsonl` | `src/core/fusion/artifacts.ts:805` |
+| fusion-artifact | `<attempt-prefix>.prompt.txt` | `src/core/fusion/artifacts.ts:804` |
+| fusion-artifact | `<attempt-prefix>.stderr.txt` | `src/core/fusion/artifacts.ts:806` |
+| fusion-artifact | `blind-candidates.json` | `src/core/fusion/artifacts.ts:713` |
+| fusion-artifact | `budget-plan.json` | `src/core/fusion/artifacts.ts:709` |
 | fusion-artifact | `candidate-<slot>.attempt-<n>.response.md \| candidate-<slot>.attempt-<n>.response.partial.md` | `src/core/fusion/artifacts.ts:258` |
-| fusion-artifact | `candidate-<slot>.attempt-<n>.tool-calls.jsonl` | `src/core/fusion/artifacts.ts:623` |
+| fusion-artifact | `candidate-<slot>.attempt-<n>.tool-calls.jsonl` | `src/core/fusion/artifacts.ts:628` |
 | fusion-artifact | `candidate-<slot>.attempt-<n>.tool-calls.jsonl.seal.json` | `src/core/fusion/child-protocol.ts:22` |
-| fusion-artifact | `canonical-input.json` | `src/core/fusion/artifacts.ts:674` |
-| fusion-artifact | `context-omission-ledger.json` | `src/core/fusion/artifacts.ts:683` |
-| fusion-artifact | `error.json` | `src/core/fusion/artifacts.ts:733` |
+| fusion-artifact | `canonical-input.json` | `src/core/fusion/artifacts.ts:679` |
+| fusion-artifact | `context-omission-ledger.json` | `src/core/fusion/artifacts.ts:688` |
+| fusion-artifact | `error.json` | `src/core/fusion/artifacts.ts:738` |
 | fusion-artifact | `evaluation.attempt-<n>.response.txt \| evaluation.attempt-<n>.response.partial.txt` | `src/core/fusion/artifacts.ts:258` |
 | fusion-artifact | `evaluation.json` | `src/core/fusion/artifacts.ts:383` |
 | fusion-artifact | `merge.attempt-<n>.response.md \| merge.attempt-<n>.response.partial.md` | `src/core/fusion/artifacts.ts:258` |
 | fusion-artifact | `merged.md` | `src/core/fusion/artifacts.ts:387` |
-| fusion-artifact | `result.json` | `src/core/fusion/artifacts.ts:647` |
-| fusion-artifact | `source-policy.private.json` | `src/core/fusion/artifacts.ts:690` |
-| task-file | `.pi/tasks/<session-id>-<pid>/<task-id>.attestation.json` | `src/core/attested-pi-run.ts:592` |
-| task-file | `.pi/tasks/<session-id>-<pid>/<task-id>.json` | `src/core/registry.ts:812` |
-| task-file | `.pi/tasks/<session-id>-<pid>/<task-id>.output` | `src/core/registry.ts:811` |
-| task-file | `.pi/tasks/<session-id>-<pid>/<task-id>.pi-events.jsonl` | `src/core/attested-pi-run.ts:589` |
-| task-file | `.pi/tasks/<session-id>-<pid>/<task-id>.pi-telemetry-wrapper.cjs` | `src/core/attested-pi-run.ts:591` |
-| task-file | `.pi/tasks/<session-id>-<pid>/<task-id>.stderr` | `src/core/attested-pi-run.ts:590` |
+| fusion-artifact | `result.json` | `src/core/fusion/artifacts.ts:652` |
+| fusion-artifact | `source-policy.private.json` | `src/core/fusion/artifacts.ts:695` |
+| task-file | `.pi/tasks/<session-id>-<pid>/<task-id>.attestation.json` | `src/core/attested-pi-run.ts:979` |
+| task-file | `.pi/tasks/<session-id>-<pid>/<task-id>.json` | `src/core/registry.ts:1456` |
+| task-file | `.pi/tasks/<session-id>-<pid>/<task-id>.output` | `src/core/registry.ts:1455` |
+| task-file | `.pi/tasks/<session-id>-<pid>/<task-id>.pi-events.jsonl` | `src/core/attested-pi-run.ts:976` |
+| task-file | `.pi/tasks/<session-id>-<pid>/<task-id>.pi-telemetry-wrapper.cjs` | `src/core/attested-pi-run.ts:978` |
+| task-file | `.pi/tasks/<session-id>-<pid>/<task-id>.stderr` | `src/core/attested-pi-run.ts:977` |
 
 ### Schema identifiers
 
 | Schema | Provenance |
 | --- | --- |
-| `phase2.pi_task_attestation.v1` | `src/core/attested-pi-run.ts:20` |
+| `phase2.pi_task_attestation.v1` | `src/core/attested-pi-run.ts:39` |
 | `pi-background-tasks.delegate-budget-plan.v3` | `src/core/delegate/types.ts:21` |
 | `pi-background-tasks.delegate-child-terminal.v1` | `src/delegate-child-extension.ts:584` |
 | `pi-background-tasks.delegate-hook-contract.v1` | `src/core/delegate/hook-contract.ts:15` |
-| `pi-background-tasks.delegate-launch.v1` | `src/delegate-extension.ts:458` |
+| `pi-background-tasks.delegate-launch.v1` | `src/delegate-extension.ts:665` |
 | `pi-background-tasks.delegate-ledger.v1` | `src/core/delegate/types.ts:16` |
 | `pi-background-tasks.delegate-manifest.v2` | `src/core/delegate/types.ts:22` |
-| `pi-background-tasks.delegate-outcome.v1` | `src/core/delegate/runner.ts:228` |
+| `pi-background-tasks.delegate-outcome.v1` | `src/core/delegate/runner.ts:296` |
 | `pi-background-tasks.delegate-receipt.v1` | `src/core/delegate/types.ts:19` |
-| `pi-background-tasks.delegate-result-view.v1` | `src/delegate-extension.ts:734` |
+| `pi-background-tasks.delegate-result-view.v1` | `src/delegate-extension.ts:996` |
 | `pi-background-tasks.delegate-result.v1` | `src/core/delegate/types.ts:18` |
 | `pi-background-tasks.delegate-runtime-budget.v1` | `src/delegate-child-extension.ts:489` |
 | `pi-background-tasks.delegate-seed.v2` | `src/core/delegate/types.ts:15` |
@@ -143,13 +177,13 @@ This generated registry lists production environment-variable references, runtim
 | `pi-background-tasks.fusion-failure-summary.v1` | `src/core/fusion/types.ts:34` |
 | `pi-background-tasks.fusion-input.v4` | `src/core/fusion/types.ts:14` |
 | `pi-background-tasks.fusion-input.v5` | `src/core/fusion/types.ts:15` |
-| `pi-background-tasks.fusion-launch.v1` | `src/fusion-extension.ts:1125` |
+| `pi-background-tasks.fusion-launch.v1` | `src/fusion-extension.ts:1233` |
 | `pi-background-tasks.fusion-manifest.v3` | `src/core/fusion/types.ts:23` |
 | `pi-background-tasks.fusion-manifest.v4` | `src/core/fusion/types.ts:24` |
 | `pi-background-tasks.fusion-merge-input.v1` | `src/core/fusion/prompts.ts:336` |
 | `pi-background-tasks.fusion-models.v1` | `src/core/fusion/types.ts:13` |
-| `pi-background-tasks.fusion-progress.v1` | `src/fusion-extension.ts:59` |
-| `pi-background-tasks.fusion-result-view.v1` | `src/delegate-extension.ts:775` |
+| `pi-background-tasks.fusion-progress.v1` | `src/fusion-extension.ts:49` |
+| `pi-background-tasks.fusion-result-view.v1` | `src/delegate-extension.ts:1037` |
 | `pi-background-tasks.fusion-result.v4` | `src/core/fusion/types.ts:19` |
 | `pi-background-tasks.fusion-result.v5` | `src/core/fusion/types.ts:20` |
 | `pi-background-tasks.fusion-runtime-guard.v2` | `src/core/fusion/child-protocol.ts:24` |
@@ -159,6 +193,8 @@ This generated registry lists production environment-variable references, runtim
 | `pi-background-tasks.fusion-validation-candidate-contract-event.v1` | `src/core/fusion/types.ts:31` |
 | `pi-background-tasks.fusion-validation-candidate.v1` | `src/core/fusion/types.ts:18` |
 | `pi-background-tasks.input-token-calibration.v1` | `src/core/context/token-budget.ts:18` |
+| `pi-background-tasks.reload-shell-owner.v1` | `src/core/reload-shell-owner.ts:36` |
+| `pi-background-tasks.reload-shell.v1` | `src/core/reload-shell-owner.ts:996` |
 
 ### Status vocabularies