pi-better-harness 0.41.2 → 0.41.3

package/node_modules/pi-better-background-tasks/src/shared-operation-coordinator/src/validate.ts

@@ -11,6 +11,7 @@
  *    reference channels (`continuationNote`, `reason`, `summary`, `authorityRef`)
  *    that a caller could otherwise use to persist a secret.
  */
+import { isAbsolute } from "node:path";
 import { StoreError } from "./errors.ts";
 import type { EvidenceKind, OwnerIdentity, OwnerKind } from "./types.ts";
 
@@ -143,7 +144,8 @@ export function requirePath(field: string, value: unknown): string {
 /** Workspace binding: an absolute path that may contain spaces. */
 export function requireWorkspace(value: unknown): string {
     const workspace = assertPlainString("owner.workspace", value, TEXT_LIMITS.workspace).trim();
-    if (!workspace.startsWith("/")) fail("owner.workspace", "must be an absolute path");
+    // Platform-aware: a Windows workspace is "C:\...", which never starts with "/".
+    if (!isAbsolute(workspace)) fail("owner.workspace", "must be an absolute path");
     return workspace;
 }
 

package/node_modules/pi-better-background-tasks/src/shared-ssh-core/index.ts

@@ -90,6 +90,7 @@ export interface SshMuxControllerOptions extends ResolvedSshCommand {
   runner: RemoteRunner;
   sessionScope: string;
   controlPathRoot?: string;
+  platform?: NodeJS.Platform;
 }
 
 export interface SshMuxStatus {
@@ -101,7 +102,6 @@ export interface SshMuxStatus {
 }
 
 export interface SshMuxEnsureResult extends SshMuxStatus {
-  state: "up";
   reused: boolean;
 }
 
@@ -340,6 +340,35 @@ export function defaultSshControlPathRoot(): string {
  */
 export function createSshMuxController(options: SshMuxControllerOptions): SshMuxController {
   const sessionScope = requireValue(options.sessionScope, "ssh mux sessionScope is required").trim();
+  // Native Windows OpenSSH cannot provide a working ControlMaster socket.
+  if ((options.platform ?? process.platform) === "win32") {
+    const commandResult: CommandResult = {
+      exitCode: null, signal: null, stdout: "", stderr: "", startedAt: 0, endedAt: 0,
+    };
+    const disabled: SshMuxStatus = {
+      state: "down",
+      target: options.identity.target,
+      controlPath: "",
+      detail: "SSH multiplexing is disabled on Windows; commands use independent connections.",
+      commandResult,
+    };
+    const unsupportedForward = async (): Promise<SshMuxForwardResult> => {
+      throw new SshMuxError("SSH Unix socket forwarding is not supported on Windows without ControlMaster.", commandResult);
+    };
+    return {
+      controlPath: "",
+      forwardUnixSocket: unsupportedForward,
+      cancelUnixSocketForward: unsupportedForward,
+      status: async () => disabled,
+      ensure: async () => ({ ...disabled, reused: false }),
+      cleanup: async () => ({ ...disabled, state: "not_running" }),
+      withMux: (commandSpec) => muxCommandSpec(commandSpec, options.identity.target, [
+        "-o", "ControlMaster=no",
+        "-o", "ControlPersist=no",
+        "-o", "ControlPath=none",
+      ], true),
+    };
+  }
   const controlPathRoot = resolve(options.controlPathRoot ?? defaultSshControlPathRoot());
   const controlPath = join(controlPathRoot, `cm-${muxIdentityHash(options.identity, sessionScope)}`);
   if (Buffer.byteLength(controlPath) > MAX_SSH_CONTROL_PATH_BYTES) {

package/node_modules/pi-better-background-tasks/src/supervisor/generated/store.mjs

@@ -35,7 +35,7 @@
 import { createHash, randomBytes } from "node:crypto";
 import { createRequire } from "node:module";
 import { appendFileSync, closeSync, fsyncSync, linkSync, mkdirSync, openSync, readFileSync, renameSync, unlinkSync, writeSync, } from "node:fs";
-import { dirname, isAbsolute, join, resolve } from "node:path";
+import { basename, dirname, isAbsolute, join, resolve } from "node:path";
 import { validateCondition } from "./conditions.mjs";
 import { SUPERVISOR_FENCE_WAIT_MS, SUPERVISOR_RECORD_VERSION, SUPERVISOR_TASK_ID_PATTERN, SUPERVISOR_TASK_ID_PREFIX, } from "./types.mjs";
 /** The task id is derived from the token, so one token can only ever name one execution. */
@@ -113,7 +113,9 @@ function fsyncDirectoryOf(path) {
     }
 }
 function tempPathFor(path) {
-    return join(dirname(path), `.${path.split("/").at(-1)}.tmp-${process.pid}-${randomBytes(6).toString("hex")}`);
+    // `basename`, not `split("/")`: a Windows path has no `/`, so the whole path
+    // would become the temp file name.
+    return join(dirname(path), `.${basename(path)}.tmp-${process.pid}-${randomBytes(6).toString("hex")}`);
 }
 /** Write a durable temp file; the caller publishes it. */
 function writeDurableTemp(path, text) {

package/node_modules/pi-better-background-tasks/src/supervisor/store.ts

@@ -45,7 +45,7 @@ import {
   writeFileSync,
   writeSync,
 } from "node:fs";
-import { dirname, isAbsolute, join, resolve } from "node:path";
+import { basename, dirname, isAbsolute, join, resolve } from "node:path";
 import { validateCondition } from "../conditions.ts";
 import {
   SUPERVISOR_FENCE_WAIT_MS,
@@ -171,7 +171,9 @@ function fsyncDirectoryOf(path: string): void {
 }
 
 function tempPathFor(path: string): string {
-  return join(dirname(path), `.${path.split("/").at(-1)}.tmp-${process.pid}-${randomBytes(6).toString("hex")}`);
+  // `basename`, not `split("/")`: a Windows path has no `/`, so the whole path
+  // would become the temp file name.
+  return join(dirname(path), `.${basename(path)}.tmp-${process.pid}-${randomBytes(6).toString("hex")}`);
 }
 
 /** Write a durable temp file; the caller publishes it. */

package/node_modules/pi-better-background-tasks/src/tools.ts

@@ -25,7 +25,7 @@ import {
   type WaitView,
 } from "./observed-waits.js";
 import { inspectMeta, listMetasForOrigin, readMeta, writeMeta } from "./registry.js";
-import { awaitFirstWatchCheck, FIRST_WATCH_CHECK_WAIT_MS, resumeRunningTask, spawnTask, startWatchTask, stopTask, type WatchTaskParams } from "./runtime.js";
+import { awaitFirstWatchCheck, FIRST_WATCH_CHECK_WAIT_MS, resumeRunningTask, spawnTask, startWatchTask, stopTask, type WatchTaskParams, type BackgroundTaskRuntime } from "./runtime.js";
 import { runTaskMaintenance } from "./maintenance.js";
 import { backgroundProcessDiagnosticsAccess, ForegroundSandboxBlockedError } from "./sandbox.js";
 import { inspectTaskProcess } from "./task-diagnostics.js";
@@ -34,6 +34,8 @@ import { isTerminalStatus } from "./types.js";
 
 export { formatLaunch } from "./output.js";
 
+const defaultRuntime = { awaitFirstWatchCheck, resumeRunningTask, spawnTask, startWatchTask, stopTask };
+
 const JsonPathSchema = Type.String({
   pattern: "^\\$",
   description: "Root-prefixed JSON path, e.g. $.status, $.terminalFailure, or $.steps[0].status. Bare keys and wildcards are unsupported.",
@@ -292,7 +294,8 @@ const BACKGROUND_ORCHESTRATION_GUIDELINES = [
   "Do not treat launch as completion of the parent milestone; relevant background work must be terminal, inspected, and integrated before verification or completion.",
 ];
 
-export function registerTools(pi: ExtensionAPI): void {
+export function registerTools(pi: ExtensionAPI, runtime: Pick<BackgroundTaskRuntime, keyof typeof defaultRuntime> = defaultRuntime, refreshNavigator = refreshBackgroundTasksNavigator): void {
+  const { resumeRunningTask, spawnTask } = runtime;
   let activeSession: BackgroundTaskCallbackOrigin | undefined;
   const getActiveSession = () => activeSession;
   const schemas = new Map<string, object>();
@@ -345,11 +348,11 @@ export function registerTools(pi: ExtensionAPI): void {
       activeSession = getCallbackOrigin(ctx);
       const durable = await durableLaunchText(pi, "process", params, ctx);
       if (durable !== undefined) {
-        refreshBackgroundTasksNavigator(ctx);
+        refreshNavigator(ctx);
         return text(durable);
       }
       const launched = reportLaunch(() => spawnTask(pi, params, ctx.cwd, activeSession, getActiveSession));
-      refreshBackgroundTasksNavigator(ctx);
+      refreshNavigator(ctx);
       return text(launched);
     },
   });
@@ -362,8 +365,8 @@ export function registerTools(pi: ExtensionAPI): void {
     parameters: BatchParams,
     async execute(_toolCallId, params, _signal, _onUpdate, ctx) {
       activeSession = getCallbackOrigin(ctx);
-      const launched = spawnTaskBatch(pi, params, ctx.cwd, activeSession, getActiveSession);
-      refreshBackgroundTasksNavigator(ctx);
+      const launched = spawnTaskBatch(pi, params, ctx.cwd, activeSession, getActiveSession, {}, runtime);
+      refreshNavigator(ctx);
       return text(formatBatchLaunch(launched), launched);
     },
   });
@@ -378,11 +381,11 @@ export function registerTools(pi: ExtensionAPI): void {
       activeSession = getCallbackOrigin(ctx);
       const durable = await durableLaunchText(pi, "watch", params, ctx);
       if (durable !== undefined) {
-        refreshBackgroundTasksNavigator(ctx);
+        refreshNavigator(ctx);
         return text(durable);
       }
-      const launched = await launchWatch(pi, params, ctx.cwd, activeSession, getActiveSession, FIRST_WATCH_CHECK_WAIT_MS, signal);
-      refreshBackgroundTasksNavigator(ctx);
+      const launched = await launchWatch(pi, params, ctx.cwd, activeSession, getActiveSession, FIRST_WATCH_CHECK_WAIT_MS, signal, runtime);
+      refreshNavigator(ctx);
       return text(launched);
     },
   });
@@ -436,11 +439,11 @@ export function registerTools(pi: ExtensionAPI): void {
       activeSession = getCallbackOrigin(ctx);
       const durable = await durableStopText(pi, params.id, ctx);
       if (durable !== undefined) {
-        refreshBackgroundTasksNavigator(ctx);
+        refreshNavigator(ctx);
         return text(durable);
       }
-      const result = await formatStop(pi, params.id, ctx, getActiveSession, statusOptions(params, activeSession));
-      refreshBackgroundTasksNavigator(ctx);
+      const result = await formatStop(pi, params.id, ctx, getActiveSession, statusOptions(params, activeSession), runtime);
+      refreshNavigator(ctx);
       return text(result);
     },
   });
@@ -456,7 +459,7 @@ export function registerTools(pi: ExtensionAPI): void {
     },
     async execute(_toolCallId, params, signal, _onUpdate, ctx) {
       activeSession = getCallbackOrigin(ctx);
-      return actionText(pi, params, ctx, activeSession, getActiveSession, signal);
+      return actionText(pi, params, ctx, activeSession, getActiveSession, signal, runtime, refreshNavigator);
     },
   });
 
@@ -470,7 +473,7 @@ export function registerTools(pi: ExtensionAPI): void {
     },
     async execute(_toolCallId, params, _signal, _onUpdate, ctx) {
       activeSession = getCallbackOrigin(ctx);
-      return actionText(pi, params, ctx, activeSession, getActiveSession);
+      return actionText(pi, params, ctx, activeSession, getActiveSession, undefined, runtime, refreshNavigator);
     },
   });
 
@@ -646,14 +649,16 @@ async function actionText(
   ctx: ExtensionContext,
   callbackOrigin: BackgroundTaskCallbackOrigin,
   getActiveSession: () => BackgroundTaskCallbackOrigin | undefined,
-  signal?: AbortSignal,
+  signal: AbortSignal | undefined,
+  runtime: Pick<BackgroundTaskRuntime, keyof typeof defaultRuntime>,
+  refreshNavigator: typeof refreshBackgroundTasksNavigator,
 ) {
   if (params.action === "log" && params.id) {
     const durable = durableLogText(pi, String(params.id), params, ctx);
     if (durable !== undefined) return text(durable);
     return logText(String(params.id), logOptions(params, callbackOrigin));
   }
-  return text(await runAction(pi, params, ctx, callbackOrigin, getActiveSession, signal));
+  return text(await runAction(pi, params, ctx, callbackOrigin, getActiveSession, signal, runtime, refreshNavigator));
 }
 
 async function runAction(
@@ -662,8 +667,12 @@ async function runAction(
   ctx: ExtensionContext,
   callbackOrigin: BackgroundTaskCallbackOrigin,
   getActiveSession: () => BackgroundTaskCallbackOrigin | undefined,
-  signal?: AbortSignal,
+  signal: AbortSignal | undefined,
+  runtime: Pick<BackgroundTaskRuntime, keyof typeof defaultRuntime>,
+  refreshNavigator: typeof refreshBackgroundTasksNavigator,
 ): Promise<string> {
+  const { spawnTask } = runtime;
+  const withNavigatorRefresh = (ctx: ExtensionContext, result: string) => { refreshNavigator(ctx); return result; };
   switch (params.action) {
     case "spawn": {
       const durable = await durableLaunchText(pi, "process", params, ctx);
@@ -674,7 +683,7 @@ async function runAction(
       if (!params.success_when) return "Invalid parameters: watch requires success_when.";
       const durable = await durableLaunchText(pi, "watch", params, ctx);
       if (durable !== undefined) return withNavigatorRefresh(ctx, durable);
-      return withNavigatorRefresh(ctx, await launchWatch(pi, params as unknown as WatchTaskParams, ctx.cwd, callbackOrigin, getActiveSession, FIRST_WATCH_CHECK_WAIT_MS, signal));
+      return withNavigatorRefresh(ctx, await launchWatch(pi, params as unknown as WatchTaskParams, ctx.cwd, callbackOrigin, getActiveSession, FIRST_WATCH_CHECK_WAIT_MS, signal, runtime));
     }
     case "list":
       return durableAwareList(pi, params, callbackOrigin);
@@ -694,7 +703,7 @@ async function runAction(
       if (!params.id) return "Invalid parameters: stop requires id.";
       const durable = await durableStopText(pi, String(params.id), ctx);
       if (durable !== undefined) return withNavigatorRefresh(ctx, durable);
-      return withNavigatorRefresh(ctx, await formatStop(pi, String(params.id), ctx, getActiveSession, statusOptions(params, callbackOrigin)));
+      return withNavigatorRefresh(ctx, await formatStop(pi, String(params.id), ctx, getActiveSession, statusOptions(params, callbackOrigin), runtime));
     }
     case "clear": {
       const host = getObservedWaitHost(pi);
@@ -872,7 +881,9 @@ export async function launchWatch(
   getActiveSession: () => BackgroundTaskCallbackOrigin | undefined,
   waitMs = FIRST_WATCH_CHECK_WAIT_MS,
   signal?: AbortSignal,
+  runtime: Pick<BackgroundTaskRuntime, keyof typeof defaultRuntime> = defaultRuntime,
 ): Promise<string> {
+  const { startWatchTask, awaitFirstWatchCheck } = runtime;
   let meta: BackgroundTaskMeta;
   try {
     meta = startWatchTask(pi, params, cwd, callbackOrigin, getActiveSession);
@@ -887,11 +898,6 @@ export async function launchWatch(
   return formatLaunch(latest);
 }
 
-function withNavigatorRefresh(ctx: ExtensionContext, result: string): string {
-  refreshBackgroundTasksNavigator(ctx);
-  return result;
-}
-
 /** Origins whose session identity could not be read (the host threw). */
 const unavailableSessionOrigins = new WeakSet<BackgroundTaskCallbackOrigin>();
 
@@ -1023,7 +1029,9 @@ async function formatStop(
   _ctx: ExtensionContext,
   getActiveSession?: () => BackgroundTaskCallbackOrigin | undefined,
   options: OutputOptions = {},
+  runtime: Pick<BackgroundTaskRuntime, "stopTask"> = defaultRuntime,
 ): Promise<string> {
+  const { stopTask } = runtime;
   const existing = inspectMeta(id);
   if (!existing.meta && !existing.found) return formatStopResult(existing, options);
   if (!existing.meta) return formatMissingTask(existing, options);

package/node_modules/pi-better-ssh/README.md

@@ -97,6 +97,8 @@ Call `ssh_profile` with `status` to inspect the active profile or `clear` to rem
 
 ## ControlMaster
 
+On Windows, commands use independent SSH connections because native Windows OpenSSH does not support working ControlMaster sockets. Mux options from callers and SSH config are overridden. `ssh_mux status` reports mux down with an explanation, and `stop` has no master to stop. Linux and macOS retain connection reuse.
+
 `remote_bash` checks for a reusable ControlMaster and opens one when needed. Its ControlPath lives under the harness-owned `~/.pi/agent/ssh-control` directory, which is forced to mode `0700`; the socket key includes the connection identity and Pi session. A stale socket is removed and reopened once. Repeated commands for the same target and session reuse the master.
 
 Use `ssh_mux` with `status` or `stop` and either a target, the active profile, or `all:true` for masters observed in the current Pi process and session:

package/node_modules/pi-better-ssh/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-better-ssh",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "Pi extension for safe synchronous remote bash commands over reusable SSH connections.",
   "license": "MIT",
   "type": "module",

package/node_modules/pi-better-ssh/src/index.ts

@@ -60,6 +60,7 @@ const SshProfileParams = Type.Object({
 export interface RegisterRemoteBashDependencies {
   runner: RemoteBashDependencies["runner"];
   controlPathRoot?: string;
+  platform?: NodeJS.Platform;
   getActiveProfile?: () => SshProfile | undefined;
   muxRegistry?: SshMuxRegistry;
   onResult?: (result: RemoteBashResult, params: { host?: string }, ctx: ExtensionContext) => void | Promise<void>;
@@ -74,7 +75,7 @@ export function registerRemoteBashTool(pi: ExtensionAPI, dependencies: RegisterR
   pi.registerTool({
     name: "remote_bash",
     label: "Remote Bash",
-    description: `Run one short remote bash command synchronously over a reusable SSH ControlMaster. Pass an SSH Host alias or user@host, or omit host when an active SSH profile supplies it; optional workdir, env, timeout, and structured identity fields are supported. Required SSH safety options cannot be disabled. Returns remote output and exitCode without turning a non-zero remote exit into a tool failure. Output is truncated to the last ${DEFAULT_MAX_LINES} lines or ${DEFAULT_MAX_BYTES / 1024}KB (whichever is hit first), with full output saved locally. For long-running remote work, use bg_task_spawn (or bg_task_* lifecycle tools) with structured ssh instead. Pi's built-in bash remains local.`,
+    description: `Run one short remote bash command synchronously over SSH. Reuses a ControlMaster on Linux/macOS; uses independent connections on Windows. Pass an SSH Host alias or user@host, or omit host when an active SSH profile supplies it; optional workdir, env, timeout, and structured identity fields are supported. Required SSH safety options cannot be disabled. Returns remote output and exitCode without turning a non-zero remote exit into a tool failure. Output is truncated to the last ${DEFAULT_MAX_LINES} lines or ${DEFAULT_MAX_BYTES / 1024}KB (whichever is hit first), with full output saved locally. For long-running remote work, use bg_task_spawn (or bg_task_* lifecycle tools) with structured ssh instead. Pi's built-in bash remains local.`,
     promptSnippet: "Run a short synchronous remote command through safe reusable SSH",
     promptGuidelines: [
       "Use remote_bash for short synchronous remote commands instead of writing ssh commands inside local bash.",
@@ -87,6 +88,7 @@ export function registerRemoteBashTool(pi: ExtensionAPI, dependencies: RegisterR
       const result = await executeRemoteBash(params, {
         runner: dependencies.runner,
         sessionScope,
+        ...(dependencies.platform !== undefined ? { platform: dependencies.platform } : {}),
         ...(dependencies.controlPathRoot ? { controlPathRoot: dependencies.controlPathRoot } : {}),
         ...(activeProfile ? { activeProfile } : {}),
         ...(dependencies.muxRegistry ? { muxRegistry: dependencies.muxRegistry } : {}),
@@ -104,6 +106,7 @@ export function registerSshExtension(pi: ExtensionAPI, dependencies: RegisterSsh
   let activeProfile: SshProfile | undefined;
   const muxRegistry = dependencies.muxRegistry ?? createSshMuxRegistry({
     runner: dependencies.runner,
+    ...(dependencies.platform !== undefined ? { platform: dependencies.platform } : {}),
     ...(dependencies.controlPathRoot ? { controlPathRoot: dependencies.controlPathRoot } : {}),
     ...(dependencies.muxEntries ? { entries: dependencies.muxEntries } : {}),
   });

package/node_modules/pi-better-ssh/src/mux-registry.ts

@@ -27,6 +27,7 @@ export interface SshMuxRegistry {
 export function createSshMuxRegistry(options: {
   runner: RemoteRunner;
   controlPathRoot?: string;
+  platform?: NodeJS.Platform;
   entries?: SshMuxEntryMap;
 }): SshMuxRegistry {
   const entries = options.entries ?? processMuxEntries();
@@ -36,12 +37,13 @@ export function createSshMuxRegistry(options: {
       ...resolved,
       runner: options.runner,
       sessionScope,
+      ...(options.platform !== undefined ? { platform: options.platform } : {}),
       ...(options.controlPathRoot ? { controlPathRoot: options.controlPathRoot } : {}),
     });
 
   const controllerFor = (resolved: ResolvedSshCommand, sessionScope: string): SshMuxController => {
     const controller = makeController(resolved, sessionScope);
-    entries.set(controller.controlPath, { sessionScope, resolved });
+    if (controller.controlPath) entries.set(controller.controlPath, { sessionScope, resolved });
     return controller;
   };
 

package/node_modules/pi-better-ssh/src/remote-bash.ts

@@ -35,6 +35,7 @@ export interface RemoteBashDependencies {
   runner: RemoteRunner;
   sessionScope: string;
   controlPathRoot?: string;
+  platform?: NodeJS.Platform;
   muxRegistry?: Pick<SshMuxRegistry, "controllerFor">;
   activeProfile?: {
     host: string;
@@ -52,7 +53,7 @@ export interface RemoteBashResult {
   target: string;
   workdir?: string;
   mux: {
-    state: "up";
+    state: "up" | "down";
     reused: boolean;
   };
   truncation?: TruncationResult;
@@ -79,6 +80,7 @@ export async function executeRemoteBash(
       ...resolved,
       runner: dependencies.runner,
       sessionScope: dependencies.sessionScope,
+      ...(dependencies.platform !== undefined ? { platform: dependencies.platform } : {}),
       ...(dependencies.controlPathRoot ? { controlPathRoot: dependencies.controlPathRoot } : {}),
     });
   const muxState = await mux.ensure();
@@ -113,7 +115,7 @@ export async function executeRemoteBash(
     truncated: truncation.truncated,
     target: resolved.identity.target,
     ...(effectiveParams.workdir !== undefined ? { workdir: effectiveParams.workdir } : {}),
-    mux: { state: "up", reused: muxState.reused },
+    mux: { state: muxState.state, reused: muxState.reused },
     ...(truncation.truncated ? { truncation } : {}),
     ...(fullOutputPath ? { fullOutputPath } : {}),
   };

package/node_modules/pi-better-ssh/src/shared-ssh-core/index.ts

@@ -90,6 +90,7 @@ export interface SshMuxControllerOptions extends ResolvedSshCommand {
   runner: RemoteRunner;
   sessionScope: string;
   controlPathRoot?: string;
+  platform?: NodeJS.Platform;
 }
 
 export interface SshMuxStatus {
@@ -101,7 +102,6 @@ export interface SshMuxStatus {
 }
 
 export interface SshMuxEnsureResult extends SshMuxStatus {
-  state: "up";
   reused: boolean;
 }
 
@@ -340,6 +340,35 @@ export function defaultSshControlPathRoot(): string {
  */
 export function createSshMuxController(options: SshMuxControllerOptions): SshMuxController {
   const sessionScope = requireValue(options.sessionScope, "ssh mux sessionScope is required").trim();
+  // Native Windows OpenSSH cannot provide a working ControlMaster socket.
+  if ((options.platform ?? process.platform) === "win32") {
+    const commandResult: CommandResult = {
+      exitCode: null, signal: null, stdout: "", stderr: "", startedAt: 0, endedAt: 0,
+    };
+    const disabled: SshMuxStatus = {
+      state: "down",
+      target: options.identity.target,
+      controlPath: "",
+      detail: "SSH multiplexing is disabled on Windows; commands use independent connections.",
+      commandResult,
+    };
+    const unsupportedForward = async (): Promise<SshMuxForwardResult> => {
+      throw new SshMuxError("SSH Unix socket forwarding is not supported on Windows without ControlMaster.", commandResult);
+    };
+    return {
+      controlPath: "",
+      forwardUnixSocket: unsupportedForward,
+      cancelUnixSocketForward: unsupportedForward,
+      status: async () => disabled,
+      ensure: async () => ({ ...disabled, reused: false }),
+      cleanup: async () => ({ ...disabled, state: "not_running" }),
+      withMux: (commandSpec) => muxCommandSpec(commandSpec, options.identity.target, [
+        "-o", "ControlMaster=no",
+        "-o", "ControlPersist=no",
+        "-o", "ControlPath=none",
+      ], true),
+    };
+  }
   const controlPathRoot = resolve(options.controlPathRoot ?? defaultSshControlPathRoot());
   const controlPath = join(controlPathRoot, `cm-${muxIdentityHash(options.identity, sessionScope)}`);
   if (Buffer.byteLength(controlPath) > MAX_SSH_CONTROL_PATH_BYTES) {

package/node_modules/pi-better-subagents/index.ts

@@ -1625,10 +1625,10 @@ function returnWidgetNavToInput(): void {
     exitWidgetNav();
 }
 
-function viewWidgetNavSelection(ctx: ExtensionContext): void {
+function viewWidgetNavSelection(ctx: ExtensionContext, owner?: symbol): void {
     const selected = selectedWidgetNavRun();
     if (!selected) return;
-    openNavigator(ctx, selected.id);
+    openNavigator(ctx, selected.id, owner);
 }
 
 function stopWidgetNavSelection(ctx: ExtensionContext): void {
@@ -1640,9 +1640,9 @@ function stopWidgetNavSelection(ctx: ExtensionContext): void {
 }
 
 /** Open the focused navigator overlay. No-op without a UI or visible runs. */
-function openNavigator(ctx: ExtensionContext, initialDetailId?: string): void {
+function openNavigator(ctx: ExtensionContext, initialDetailId?: string, owner?: symbol): void {
     void initialDetailId;
-    ensureNavigator(ctx);
+    ensureNavigator(ctx, owner);
 }
 
 /** Refresh the shared navigator after run changes. */
@@ -1651,7 +1651,7 @@ function updateNavigatorFooter(ctx: ExtensionContext | undefined): void {
 }
 
 /** Install the empty-editor ← wrapper once per UI (reload-safe, composable). */
-function ensureNavigator(ctx: ExtensionContext): void {
+function ensureNavigator(ctx: ExtensionContext, owner?: symbol): void {
     if (!isNavigatorUiAvailable(ctx)) return;
     try {
         ensureSubagentProvider();
@@ -1662,7 +1662,7 @@ function ensureNavigator(ctx: ExtensionContext): void {
             matchKey: (data: string, keyId: string) => matchesKey(data, keyId),
             truncate: truncateToWidth,
             createTranscriptComponent: createSubagentTranscriptComponent,
-        });
+        }, owner);
     } catch { /* ignore */ }
 }
 
@@ -2012,6 +2012,8 @@ export default function (pi: ExtensionAPI) {
         restrictContextFilesToWorktree(event.systemPromptOptions, PiCodingAgent.getAgentDir());
     });
     initializeNavigatorPanels(pi);
+    // Each cached factory instance owns the navigator it installs (#460).
+    const navigatorOwner = Symbol("subagents navigator factory");
     const agentSessionSettings = createAgentSessionSettings(pi);
     let catalogModelRegistry: ExtensionContext["modelRegistry"] | undefined;
     let delegationOverride: DelegationMode | undefined;
@@ -3932,10 +3934,10 @@ export default function (pi: ExtensionAPI) {
         // Adopt records left non-terminal by a pi that died without a clean
         // shutdown, so the age sweep can eventually retire them.
         reconcileAbandonedRuns();
-        disposeBackgroundWorkNavigator(ctx);
+        disposeBackgroundWorkNavigator(ctx, navigatorOwner);
         widgetNavActive = false;
         widgetNavSelectedId = undefined;
-        ensureNavigator(ctx);
+        ensureNavigator(ctx, navigatorOwner);
         publishAcceptanceHooks();
         updateNavigatorFooter(ctx);
         // Clear the retired legacy widget so the shared navigator is the only
@@ -3956,7 +3958,9 @@ export default function (pi: ExtensionAPI) {
         cancelCallbackBatch(pi);
         mainAgentStartedAt = undefined;
         mainAgentTools.clear();
-        disposeBackgroundWorkNavigator();
+        // Owned disposal only: a headless child or a stale factory must not clear
+        // the parent's navigator by omitting the context and owner.
+        disposeBackgroundWorkNavigator(undefined, navigatorOwner);
     });
 
     // Tear down the timer and clear the widget when the session ends.
@@ -4008,7 +4012,7 @@ export default function (pi: ExtensionAPI) {
         resetParseRunCursor();
         // Always dispose navigator detail timers (no UI call — just clearInterval).
         // Safe in every mode; the dispose hook is only set when a TUI overlay opened.
-        disposeBackgroundWorkNavigator(ctx);
+        disposeBackgroundWorkNavigator(ctx, navigatorOwner);
         // Widget clear is intentional in every mode that exposes ui, including RPC.
         try { ctx.ui.setWidget("subagents", WIDGET_CLEAR); } catch { /* ignore */ }
     });

package/node_modules/pi-better-subagents/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-better-subagents",
-  "version": "0.28.1",
+  "version": "0.28.2",
   "description": "Pi extension for detached, sandboxed subagent runs that keep the foreground session free.",
   "license": "MIT",
   "type": "module",

package/node_modules/pi-better-subagents/shared-navigator.ts

@@ -82,8 +82,10 @@ type HostDeps = {
 
 type NavigatorState = {
   providers: Map<string, BackgroundWorkProvider>;
+  registrationTokens?: Map<string, symbol>;
   unsubscribers: Map<string, () => void>;
   uiCtx?: ExtensionContext;
+  uiOwner?: symbol;
   deps?: HostDeps;
   lastHint?: string | null;
   lastMainListLines?: string[];
@@ -137,6 +139,8 @@ function state(): NavigatorState {
 
 export function registerBackgroundWorkProvider(provider: BackgroundWorkProvider): () => void {
   const s = state();
+  const token = Symbol(provider.id);
+  (s.registrationTokens ??= new Map()).set(provider.id, token);
   const previousUnsub = s.unsubscribers.get(provider.id);
   if (previousUnsub) {
     try { previousUnsub(); } catch { /* ignore */ }
@@ -152,7 +156,10 @@ export function registerBackgroundWorkProvider(provider: BackgroundWorkProvider)
     s.unsubscribers.delete(provider.id);
   }
   refreshBackgroundWorkNavigator();
-  return () => unregisterBackgroundWorkProvider(provider.id);
+  // A stale factory must not unregister its replacement from another cached module.
+  return () => {
+    if (state().registrationTokens?.get(provider.id) === token) unregisterBackgroundWorkProvider(provider.id);
+  };
 }
 
 export function unregisterBackgroundWorkProvider(id: string): void {
@@ -163,6 +170,7 @@ export function unregisterBackgroundWorkProvider(id: string): void {
   }
   s.unsubscribers.delete(id);
   s.providers.delete(id);
+  s.registrationTokens?.delete(id);
   refreshBackgroundWorkNavigator();
 }
 
@@ -188,10 +196,11 @@ export function applyCloseConfirmFooter(ui: { setStatus(key: string, value: stri
   return hint ?? null;
 }
 
-export function ensureBackgroundWorkNavigator(ctx: ExtensionContext, deps: HostDeps): void {
+export function ensureBackgroundWorkNavigator(ctx: ExtensionContext, deps: HostDeps, owner?: symbol): void {
   if (!isNavigatorUiAvailable(ctx)) return;
   const s = state();
   s.uiCtx = ctx;
+  s.uiOwner = owner;
   s.deps = {
     ...deps,
     createTranscriptComponent: deps.createTranscriptComponent ?? s.deps?.createTranscriptComponent,
@@ -207,14 +216,26 @@ export function ensureBackgroundWorkNavigator(ctx: ExtensionContext, deps: HostD
   refreshMainListWidget();
 }
 
-export function disposeBackgroundWorkNavigator(ctx?: ExtensionContext): void {
+export function disposeBackgroundWorkNavigator(ctx?: ExtensionContext, owner?: symbol): void {
   const s = state();
+  if (owner !== undefined) {
+    // Only the factory that installed the current navigator may dispose it.
+    if (s.uiOwner !== owner) return;
+  } else if (s.uiOwner !== undefined) {
+    // Ownership is never inferred: an omitted owner must not clear a navigator
+    // another cached factory (or a headless child) owns.
+    return;
+  } else if (ctx !== undefined) {
+    // Unowned navigators stay releasable by a live, matching UI context.
+    if (!isNavigatorUiAvailable(ctx) || (s.uiCtx && ctx.ui !== s.uiCtx.ui)) return;
+  }
   try { s.dispose?.(); } catch { /* ignore */ }
   s.dispose = undefined;
   s.overlay = undefined;
   stopMainListWidget();
   const activeCtx = ctx ?? s.uiCtx;
   s.uiCtx = undefined;
+  s.uiOwner = undefined;
   if (activeCtx && isNavigatorUiAvailable(activeCtx)) {
     try { setNavigatorPanel(activeCtx, MAIN_LIST_WIDGET_KEY, undefined); } catch { /* ignore */ }
   }

package/node_modules/pi-better-subagents/shared-operation-coordinator/src/validate.ts

@@ -11,6 +11,7 @@
  *    reference channels (`continuationNote`, `reason`, `summary`, `authorityRef`)
  *    that a caller could otherwise use to persist a secret.
  */
+import { isAbsolute } from "node:path";
 import { StoreError } from "./errors.ts";
 import type { EvidenceKind, OwnerIdentity, OwnerKind } from "./types.ts";
 
@@ -143,7 +144,8 @@ export function requirePath(field: string, value: unknown): string {
 /** Workspace binding: an absolute path that may contain spaces. */
 export function requireWorkspace(value: unknown): string {
     const workspace = assertPlainString("owner.workspace", value, TEXT_LIMITS.workspace).trim();
-    if (!workspace.startsWith("/")) fail("owner.workspace", "must be an absolute path");
+    // Platform-aware: a Windows workspace is "C:\...", which never starts with "/".
+    if (!isAbsolute(workspace)) fail("owner.workspace", "must be an absolute path");
     return workspace;
 }