pi-crew 0.9.35 → 0.9.37

package/CHANGELOG.md

@@ -1,5 +1,53 @@
 # Changelog
 
+## [0.9.37] — cold context + subagent streaming (2026-07-14)
+
+Two performance improvements targeting perceived subagent slowness:
+
+### Phase 1: Cold Context (inheritContext default → true)
+
+- **`inheritContext` default changed from `false` → `true`** — subagents now receive parent conversation context by default, eliminating redundant re-exploration of files the main session already processed. Configurable via `runtime.inheritContext`.
+- **`buildParentContext()` token budget** — 12K char budget with most-recent-first retention prevents token bloat on large parent sessions.
+- **Noisy content filtering** — skips file dumps (code blocks, `ls` output, import lists >1K chars) and truncates long assistant messages to 200 chars. Compaction summaries kept in full.
+- **Tests**: `test/unit/build-parent-context.test.ts` (10 cases).
+
+### Phase 2: Subagent Streaming (child-process → widget)
+
+- **`ProgressTracker.handleWorkerEvent()`** — bridges child-process JSON events (from `onJsonEvent`) into `crewEventBus`, enabling real-time widget display of tool calls, assistant text, and token usage for BOTH runtimes (previously only live-session had streaming).
+- **`register.ts` onJsonEvent** — now forwards events to `globalProgressTracker` (was only feeding `overflowTracker`).
+- **`subagent-tools.ts` inline progress** — enriched with real-time worker progress: ⚡ current tool, 📊 tokens, 💬 partial assistant text.
+- **Throttled to 500ms per worker** to prevent widget flooding.
+- **Tests**: `test/unit/progress-tracker-worker.test.ts` (8 cases).
+
+## [0.9.36] — security audit round 1 (2026-07-14)
+
+Three security hardening fixes from the first formal security audit pass (run via `team_20260714045239_bb49d72211b966a2` + verified via `team_20260714062932_638dbb0310cc9f77`, 12/12 targeted tests pass, typecheck clean):
+
+- **`writeIntermediate()` path-traversal guard** — `src/workflows/intermediate-store.ts`. `writeIntermediate()` previously had no validation on `phase`/`stepId` before constructing the filename, while the sibling `readIntermediate()` was already hardened (M-2 fix 2026-06-23). An attacker-controlled `phase` or `stepId` could write JSON to arbitrary paths. Fix: added `isSafePathId(phase) && isSafePathId(stepId)` guard at the top of `writeIntermediate()` — throws `Error("Invalid phase or stepId for intermediate store")` on bad input. Closes the write/read asymmetry.
+  - **Tests**: `test/unit/intermediate-store-traversal.test.ts` (+3 cases).
+- **`InstinctStore` `projectId` validation** — `src/state/instinct-store.ts`. All 4 public methods that accept `projectId` (`saveInstinct`, `getProjectInstincts`, `promoteInstinct`, `deleteInstinct`) now call `assertSafePathId("projectId", projectId)` before using the value in `path.join()`.
+  - **Tests**: `test/unit/instinct-store-projectid-guard.test.ts` (+4 cases).
+- **Verification env sanitization default → opt-out** — `src/runtime/verification-gates.ts`. `isVerificationEnvSanitizeEnabled()` flipped from opt-in (`PI_CREW_VERIFICATION_SANITIZE_ENV=1`) to opt-out (default `true`, explicitly disabled via env var set to `"0"`). Prevents accidental secret leakage to verification commands in untrusted repos — the safe path is now the default. `PI_CREW_VERIFICATION_PRESERVE_ENV=KEY1,KEY2,...` remains the escape hatch for tests/flows that legitimately need specific secrets.
+  - **Tests**: `test/unit/verification-gates-env-sanitize.test.ts` (5 cases) + `test/unit/verification-env-sanitize.test.ts` (7 integration cases).
+
+**False positives eliminated during the audit** (documented so they don't reappear):
+
+- `runtime/run-cache.ts` — cache keys are SHA-256 hex hashes (16 chars) — inherently safe from path injection.
+- `runtime/task-runner/retrieval-orchestrator.ts` — `rg` invocations use `node:child_process.spawn()` with structured args, no shell. No injection vector.
+- `runtime/pi-spawn.ts:159` `execSync("npm root -g")` — hardcoded command, `execSync` is intentional for Windows `PATHEXT` resolution.
+
+**Files changed**: 4 src files, 3 test files, 1 comment-only update. +100 / -13 net.
+
+### Audit findings (security survey, see `.gsd/AUDIT-PLAN.md` for full detail)
+
+Surveyed 36 process-execution call sites (`execSync`/`spawn`/`execFileSync`), 100+ `import()` sites, 13 `require()` sites, 9 `__proto__` references, path-traversal patterns, env sanitization, and unbounded data structures.
+
+- **Path traversal**: 2 real issues fixed (`intermediate-store.ts`, `instinct-store.ts`); 1 false positive (`run-cache.ts`).
+- **Process execution**: 1 critical-pattern (`sh -c` in `verification-gates.ts` — properly guarded by `validateGateCommand()`), 1 `execSync` with hardcoded command (intentional), 34 safe `spawn`/`execFileSync` with args arrays.
+- **Env handling**: 1 real issue fixed (verification env default flipped to opt-out); 2 low/info items (rg inherits full env, `diagnostic-export` writes non-secret env vars — both by design).
+- **Code injection**: 0 `eval`, 0 `new Function`, 0 `vm.*` usage, 0 `prototype[`. 9 `__proto__` references — all prototype-pollution defenses (`POLLUTED_KEYS` deny-lists).
+- **Memory safety**: all major Maps/Sets have MAX_* caps + LRU eviction (workflowCache=32, teamCache=32, asyncAgentReaderCache=128, agentEventSeqCache=1000, liveAgents=5000, NotificationRouter.seen=10000, etc.).
+
 ## [0.9.35] — performance plan Phases 1–3 + 2 wiring fixes (2026-07-13)
 
 Shipped the **forward performance optimization plan** in 3 phases (`docs/performance-optimization-execution-plan.md`) plus 2 follow-up wiring fixes for the `pipeline` workflow and `schedule` action. 8 performance optimizations landed + 1 bundle rebuild. End-to-end verified post-restart via `team action='run', workflow='pipeline', team='research'` (`team_20260713102348_529c8e4e79e90e20`, 4/4 tasks, 142,686 tokens, 6.4 min, pipeline-summary.md emitted with "PIPELINE_WORKFLOW_OK" + scheduled job successfully removed via new subAction). Typecheck clean, 63 + 58 + 92 targeted unit tests pass across the modified suites.

package/dist/build-meta.json

@@ -8410,7 +8410,7 @@
       "format": "esm"
     },
     "src/extension/team-tool/context.ts": {
-      "bytes": 3419,
+      "bytes": 5581,
       "imports": [
         {
           "path": "src/extension/tool-result.ts",
@@ -8577,7 +8577,7 @@
       "format": "esm"
     },
     "src/extension/team-tool/handle-settings.ts": {
-      "bytes": 17990,
+      "bytes": 17989,
       "imports": [
         {
           "path": "src/config/config.ts",
@@ -12891,7 +12891,7 @@
       "format": "esm"
     },
     "src/runtime/async-runner.ts": {
-      "bytes": 14704,
+      "bytes": 14705,
       "imports": [
         {
           "path": "node:child_process",
@@ -14759,7 +14759,7 @@
       "format": "esm"
     },
     "src/runtime/verification-gates.ts": {
-      "bytes": 17042,
+      "bytes": 17191,
       "imports": [
         {
           "path": "node:child_process",
@@ -16950,7 +16950,7 @@
       "format": "esm"
     },
     "src/ui/settings-overlay.ts": {
-      "bytes": 31026,
+      "bytes": 31025,
       "imports": [
         {
           "path": "src/utils/visual.ts",
@@ -17720,8 +17720,30 @@
       ],
       "format": "esm"
     },
+    "src/observability/event-bus.ts": {
+      "bytes": 2219,
+      "imports": [
+        {
+          "path": "src/utils/internal-error.ts",
+          "kind": "import-statement",
+          "original": "../utils/internal-error.ts"
+        }
+      ],
+      "format": "esm"
+    },
+    "src/runtime/progress-tracker.ts": {
+      "bytes": 7543,
+      "imports": [
+        {
+          "path": "src/observability/event-bus.ts",
+          "kind": "import-statement",
+          "original": "../observability/event-bus.ts"
+        }
+      ],
+      "format": "esm"
+    },
     "src/extension/registration/subagent-tools.ts": {
-      "bytes": 17386,
+      "bytes": 18292,
       "imports": [
         {
           "path": "node_modules/@sinclair/typebox/build/esm/index.mjs",
@@ -17753,6 +17775,11 @@
           "kind": "import-statement",
           "original": "../../runtime/crew-agent-records.ts"
         },
+        {
+          "path": "src/runtime/progress-tracker.ts",
+          "kind": "import-statement",
+          "original": "../../runtime/progress-tracker.ts"
+        },
         {
           "path": "src/runtime/role-permission.ts",
           "kind": "import-statement",
@@ -17993,7 +18020,7 @@
       "format": "esm"
     },
     "src/extension/register.ts": {
-      "bytes": 68063,
+      "bytes": 68402,
       "imports": [
         {
           "path": "node:fs",
@@ -18315,6 +18342,11 @@
           "kind": "import-statement",
           "original": "../i18n.ts"
         },
+        {
+          "path": "src/runtime/progress-tracker.ts",
+          "kind": "import-statement",
+          "original": "../runtime/progress-tracker.ts"
+        },
         {
           "path": "src/runtime/session-resources.ts",
           "kind": "import-statement",
@@ -18415,7 +18447,7 @@
       "imports": [],
       "exports": [],
       "inputs": {},
-      "bytes": 6696933
+      "bytes": 6717985
     },
     "dist/index.mjs": {
       "imports": [
@@ -20931,7 +20963,7 @@
           "bytesInOutput": 1541
         },
         "src/extension/team-tool/context.ts": {
-          "bytesInOutput": 2198
+          "bytesInOutput": 3237
         },
         "src/extension/team-tool/intent-policy.ts": {
           "bytesInOutput": 1245
@@ -20952,7 +20984,7 @@
           "bytesInOutput": 1876
         },
         "src/extension/team-tool/handle-settings.ts": {
-          "bytesInOutput": 16052
+          "bytesInOutput": 16051
         },
         "src/workflows/validate-workflow.ts": {
           "bytesInOutput": 1927
@@ -21546,7 +21578,7 @@
           "bytesInOutput": 2699
         },
         "src/runtime/async-runner.ts": {
-          "bytesInOutput": 8942
+          "bytesInOutput": 8943
         },
         "src/subagents/async-entry.ts": {
           "bytesInOutput": 119
@@ -21792,7 +21824,7 @@
           "bytesInOutput": 810
         },
         "src/runtime/verification-gates.ts": {
-          "bytesInOutput": 7561
+          "bytesInOutput": 7597
         },
         "src/runtime/worker-startup.ts": {
           "bytesInOutput": 2344
@@ -21960,7 +21992,7 @@
           "bytesInOutput": 15659
         },
         "src/ui/settings-overlay.ts": {
-          "bytesInOutput": 30589
+          "bytesInOutput": 30588
         },
         "src/extension/registration/commands.ts": {
           "bytesInOutput": 40488
@@ -22020,7 +22052,7 @@
           "bytesInOutput": 3150
         },
         "src/extension/register.ts": {
-          "bytesInOutput": 45555
+          "bytesInOutput": 45685
         },
         "src/runtime/batch-barrier.ts": {
           "bytesInOutput": 3060
@@ -22104,11 +22136,17 @@
           "bytesInOutput": 647
         },
         "src/extension/registration/subagent-tools.ts": {
-          "bytesInOutput": 15548
+          "bytesInOutput": 16197
         },
         "src/i18n.ts": {
           "bytesInOutput": 6837
         },
+        "src/observability/event-bus.ts": {
+          "bytesInOutput": 1170
+        },
+        "src/runtime/progress-tracker.ts": {
+          "bytesInOutput": 6660
+        },
         "src/extension/session-summary.ts": {
           "bytesInOutput": 512
         },
@@ -22125,7 +22163,7 @@
           "bytesInOutput": 81
         }
       },
-      "bytes": 3172886
+      "bytes": 3182689
     }
   }
 }

package/dist/index.mjs

@@ -24757,6 +24757,7 @@ var init_workflow_serializer = __esm({
 // src/extension/team-tool/context.ts
 var context_exports = {};
 __export(context_exports, {
+  MAX_PARENT_CONTEXT_CHARS: () => MAX_PARENT_CONTEXT_CHARS,
   buildParentContext: () => buildParentContext,
   configRecord: () => configRecord,
   formatScoped: () => formatScoped,
@@ -24780,6 +24781,10 @@ function extractTextContent(content) {
     (part) => part && typeof part === "object" && !Array.isArray(part) && typeof part.text === "string" ? part.text : ""
   ).filter(Boolean).join("\n");
 }
+function isNoisyContent(text) {
+  if (text.length < NOISY_THRESHOLD) return false;
+  return NOISY_PREFIXES.some((prefix) => text.startsWith(prefix));
+}
 function buildParentContext(ctx) {
   const branch = ctx.sessionManager?.getBranch?.();
   if (!Array.isArray(branch) || branch.length === 0) return void 0;
@@ -24787,28 +24792,50 @@ function buildParentContext(ctx) {
   for (const entry of branch.slice(-20)) {
     if (!entry || typeof entry !== "object" || Array.isArray(entry)) continue;
     const record = entry;
-    if (record.type === "compaction" && typeof record.summary === "string") parts.push(`[Summary]: ${record.summary}`);
+    if (record.type === "compaction" && typeof record.summary === "string") {
+      parts.push(`[Summary]: ${record.summary}`);
+      continue;
+    }
     const message = record.message && typeof record.message === "object" && !Array.isArray(record.message) ? record.message : void 0;
     if (!message || message.role !== "user" && message.role !== "assistant") continue;
-    const text = extractTextContent(message.content).trim();
-    if (text) parts.push(`[${message.role === "user" ? "User" : "Assistant"}]: ${text}`);
+    let text = extractTextContent(message.content).trim();
+    if (!text) continue;
+    if (isNoisyContent(text)) continue;
+    if (message.role === "assistant" && text.length > MAX_ASSISTANT_MSG_CHARS) {
+      text = `${text.slice(0, TRUNCATED_ASSISTANT_CHARS)}\u2026`;
+    }
+    parts.push(`[${message.role === "user" ? "User" : "Assistant"}]: ${text}`);
   }
   if (!parts.length) return void 0;
+  let totalChars = 0;
+  const budgeted = [];
+  for (const part of [...parts].reverse()) {
+    if (totalChars + part.length > MAX_PARENT_CONTEXT_CHARS) break;
+    budgeted.unshift(part);
+    totalChars += part.length;
+  }
+  if (!budgeted.length) return void 0;
   return [
     `# Parent Conversation Context`,
     "The following context was inherited from the parent Pi session. Treat it as reference-only.",
     "",
-    parts.join("\n\n")
+    budgeted.join("\n\n")
   ].join("\n");
 }
 function configRecord(config) {
   if (!config || typeof config !== "object" || Array.isArray(config)) return {};
   return config;
 }
+var MAX_PARENT_CONTEXT_CHARS, MAX_ASSISTANT_MSG_CHARS, TRUNCATED_ASSISTANT_CHARS, NOISY_THRESHOLD, NOISY_PREFIXES;
 var init_context = __esm({
   "src/extension/team-tool/context.ts"() {
     "use strict";
     init_tool_result();
+    MAX_PARENT_CONTEXT_CHARS = 12e3;
+    MAX_ASSISTANT_MSG_CHARS = 500;
+    TRUNCATED_ASSISTANT_CHARS = 200;
+    NOISY_THRESHOLD = 1e3;
+    NOISY_PREFIXES = ["```", "total ", "drwx", "-rw", "import ", "export "];
   }
 });
 
@@ -26191,7 +26218,7 @@ var init_handle_settings = __esm({
       "runtime.mode": "auto",
       "runtime.maxTurns": 1e4,
       "runtime.graceTurns": 5,
-      "runtime.inheritContext": false,
+      "runtime.inheritContext": true,
       "runtime.promptMode": "replace",
       "runtime.completionMutationGuard": "warn",
       "runtime.isolationPolicy": void 0,
@@ -48581,7 +48608,7 @@ var init_async_runner = __esm({
       // Phase 1.5: worker-thread atomic writer opt-in (RFC 15).
       "PI_CREW_WORKER_ATOMIC_WRITER",
       "PI_TEAMS_WORKER_ATOMIC_WRITER",
-      // Phase 1.5 #1: verification env sanitization opt-in (RFC 13 §6).
+      // Phase 1.5 #1: verification env sanitization opt-out (RFC 13 §6).
       "PI_CREW_VERIFICATION_SANITIZE_ENV",
       "PI_TEAMS_VERIFICATION_SANITIZE_ENV",
       "PI_CREW_VERIFICATION_PRESERVE_ENV",
@@ -58026,7 +58053,10 @@ import { spawn as spawn4 } from "node:child_process";
 import * as fs82 from "node:fs";
 import * as path69 from "node:path";
 function isVerificationEnvSanitizeEnabled() {
-  return process.env.PI_CREW_VERIFICATION_SANITIZE_ENV === "1" || process.env.PI_TEAMS_VERIFICATION_SANITIZE_ENV === "1";
+  if (process.env.PI_CREW_VERIFICATION_SANITIZE_ENV === "0" || process.env.PI_TEAMS_VERIFICATION_SANITIZE_ENV === "0") {
+    return false;
+  }
+  return true;
 }
 function buildVerificationEnv() {
   if (!isVerificationEnvSanitizeEnabled()) {
@@ -75791,7 +75821,7 @@ var init_settings_overlay = __esm({
       "runtime.mode": "auto",
       "runtime.maxTurns": 1e4,
       "runtime.graceTurns": 5,
-      "runtime.inheritContext": false,
+      "runtime.inheritContext": true,
       "runtime.promptMode": "replace",
       "runtime.completionMutationGuard": "warn",
       "runtime.isolationPolicy": void 0,
@@ -84088,6 +84118,259 @@ function initI18n(pi) {
 
 // src/extension/registration/subagent-tools.ts
 init_crew_agent_records();
+
+// src/observability/event-bus.ts
+init_internal_error();
+var EventBus = class _EventBus {
+  listeners = /* @__PURE__ */ new Map();
+  static _instance;
+  static getInstance() {
+    if (!_EventBus._instance) {
+      _EventBus._instance = new _EventBus();
+    }
+    return _EventBus._instance;
+  }
+  /**
+   * Dispose of the EventBus instance and clear all listeners.
+   * Resets the singleton so a new instance can be created.
+   */
+  dispose() {
+    this.listeners.clear();
+    _EventBus._instance = void 0;
+  }
+  emit(event) {
+    const listeners2 = this.listeners.get(event.type);
+    if (listeners2) {
+      for (const listener of listeners2) {
+        try {
+          listener(event);
+        } catch (e) {
+          logInternalError("event-bus.listener", e, `type=${event.type} runId=${event.runId}`);
+        }
+      }
+    }
+  }
+  on(type, listener) {
+    if (!this.listeners.has(type)) {
+      this.listeners.set(type, /* @__PURE__ */ new Set());
+    }
+    this.listeners.get(type).add(listener);
+    return () => {
+      this.listeners.get(type)?.delete(listener);
+    };
+  }
+  off(type, listener) {
+    this.listeners.get(type)?.delete(listener);
+  }
+};
+var crewEventBus = EventBus.getInstance();
+
+// src/runtime/progress-tracker.ts
+var ProgressTracker = class _ProgressTracker {
+  sessions = /* @__PURE__ */ new Map();
+  track(session, agentId, runId) {
+    if (this.sessions.has(agentId)) {
+      return this.sessions.get(agentId).progress;
+    }
+    const progress = {
+      toolCalls: 0,
+      currentTool: null,
+      toolStartTime: null,
+      errors: [],
+      turns: 0,
+      tokens: { input: 0, output: 0 },
+      status: "running"
+    };
+    const unsubscribe = session.subscribe((event) => {
+      this.handleEvent(event, progress, agentId, runId);
+    });
+    this.sessions.set(agentId, { unsubscribe, progress });
+    return progress;
+  }
+  handleEvent(event, progress, agentId, runId) {
+    switch (event.type) {
+      case "tool_execution_start":
+        progress.toolCalls++;
+        progress.currentTool = event.toolName;
+        progress.toolStartTime = Date.now();
+        crewEventBus.emit({
+          type: "agent:progress",
+          runId,
+          agentId,
+          payload: { ...progress },
+          timestamp: Date.now()
+        });
+        break;
+      case "tool_execution_end":
+        progress.currentTool = null;
+        progress.toolStartTime = null;
+        if (event.isError) {
+          progress.errors.push(String(event.result ?? "Unknown error"));
+          crewEventBus.emit({
+            type: "agent:error",
+            runId,
+            agentId,
+            payload: String(event.result ?? "Unknown error"),
+            timestamp: Date.now()
+          });
+        }
+        crewEventBus.emit({
+          type: "agent:progress",
+          runId,
+          agentId,
+          payload: { ...progress },
+          timestamp: Date.now()
+        });
+        break;
+      case "turn_start":
+        progress.turns++;
+        break;
+      case "agent_end":
+        progress.status = "completed";
+        crewEventBus.emit({
+          type: "agent:complete",
+          runId,
+          agentId,
+          payload: { ...progress },
+          timestamp: Date.now()
+        });
+        break;
+      case "agent_start":
+        progress.status = "running";
+        break;
+    }
+  }
+  untrack(agentId) {
+    const tracked = this.sessions.get(agentId);
+    if (tracked) {
+      tracked.unsubscribe();
+      this.sessions.delete(agentId);
+    }
+  }
+  getProgress(agentId) {
+    return this.sessions.get(agentId)?.progress;
+  }
+  // ── Child-process worker event bridge ──────────────────────────────────
+  //
+  // For child-process runtime, events arrive as raw JSON from the child pi
+  // process's stdout (via onJsonEvent). These methods bridge those events into
+  // the same crewEventBus stream that live-session uses, so the widget shows
+  // real-time tool calls and assistant text for BOTH runtimes.
+  workerProgress = /* @__PURE__ */ new Map();
+  /** Throttle: don't emit more than 1 progress event per 500ms per worker. */
+  lastEmitTs = /* @__PURE__ */ new Map();
+  static EMIT_THROTTLE_MS = 500;
+  /**
+   * Handle a raw child-process JSON event (from onJsonEvent callback).
+   * Processes tool_execution_start/end, agent_start/end, and assistant text.
+   */
+  handleWorkerEvent(taskId, runId, event) {
+    let progress = this.workerProgress.get(taskId);
+    if (!progress) {
+      progress = {
+        toolCalls: 0,
+        currentTool: null,
+        toolStartTime: null,
+        errors: [],
+        turns: 0,
+        tokens: { input: 0, output: 0 },
+        status: "running"
+      };
+      this.workerProgress.set(taskId, progress);
+    }
+    const eventType = typeof event.type === "string" ? event.type : void 0;
+    switch (eventType) {
+      case "tool_execution_start": {
+        progress.toolCalls++;
+        progress.currentTool = typeof event.toolName === "string" ? event.toolName : "unknown";
+        progress.toolStartTime = Date.now();
+        this.emitThrottled(taskId, runId, progress);
+        break;
+      }
+      case "tool_execution_end": {
+        progress.currentTool = null;
+        progress.toolStartTime = null;
+        if (event.isError) {
+          progress.errors.push(String(event.result ?? "Unknown error"));
+          crewEventBus.emit({
+            type: "agent:error",
+            runId,
+            agentId: taskId,
+            payload: String(event.result ?? "Unknown error"),
+            timestamp: Date.now()
+          });
+        }
+        this.emitThrottled(taskId, runId, progress);
+        break;
+      }
+      case "turn_start":
+      case "turn_end":
+        progress.turns++;
+        break;
+      case "agent_start":
+        progress.status = "running";
+        break;
+      case "agent_end":
+      case "agent_settled":
+        progress.status = "completed";
+        this.emitThrottled(taskId, runId, progress);
+        break;
+      case "message":
+      case "message_end": {
+        const message = event.message;
+        if (message?.role === "assistant") {
+          const text = extractWorkerText(message.content);
+          if (text) {
+            progress.partialText = text.slice(-2e3);
+            this.emitThrottled(taskId, runId, progress);
+          }
+        }
+        if (eventType === "message_end" && event.usage && typeof event.usage === "object") {
+          const usage = event.usage;
+          if (typeof usage.input === "number") progress.tokens.input += usage.input;
+          if (typeof usage.output === "number") progress.tokens.output += usage.output;
+        }
+        break;
+      }
+    }
+  }
+  /** Get the accumulated progress for a child-process worker task. */
+  getWorkerProgress(taskId) {
+    return this.workerProgress.get(taskId);
+  }
+  /** Remove a worker from tracking after completion. */
+  untrackWorker(taskId) {
+    this.workerProgress.delete(taskId);
+    this.lastEmitTs.delete(taskId);
+  }
+  /**
+   * Emit a progress event to crewEventBus, throttled to avoid flooding
+   * the widget with re-renders (max 1 event per EMIT_THROTTLE_MS per worker).
+   */
+  emitThrottled(taskId, runId, progress) {
+    const now = Date.now();
+    const last = this.lastEmitTs.get(taskId) ?? 0;
+    if (now - last < _ProgressTracker.EMIT_THROTTLE_MS) return;
+    this.lastEmitTs.set(taskId, now);
+    crewEventBus.emit({
+      type: "agent:progress",
+      runId,
+      agentId: taskId,
+      payload: { ...progress },
+      timestamp: now
+    });
+  }
+};
+var globalProgressTracker = new ProgressTracker();
+function extractWorkerText(content) {
+  if (typeof content === "string") return content;
+  if (!Array.isArray(content)) return "";
+  return content.map(
+    (part) => part && typeof part === "object" && !Array.isArray(part) && typeof part.text === "string" ? part.text : ""
+  ).filter(Boolean).join("\n");
+}
+
+// src/extension/registration/subagent-tools.ts
 init_role_permission();
 init_state_store();
 init_manager();
@@ -84455,7 +84738,20 @@ function startAgentToolProgress(cwd, agentRecordId, onUpdate, manager) {
         agents,
         error: record.error
       });
-      onUpdate({ content: [{ type: "text", text }] });
+      let progressLine = text;
+      if (tasks && tasks.length > 0) {
+        const wp = globalProgressTracker.getWorkerProgress(tasks[0].id);
+        if (wp) {
+          const toolLine = wp.currentTool ? `
+  \u26A1 tool: ${wp.currentTool}` : "";
+          const tokenLine = wp.tokens.input + wp.tokens.output > 0 ? `
+  \u{1F4CA} tokens: ${(wp.tokens.input / 1e3).toFixed(1)}K in, ${(wp.tokens.output / 1e3).toFixed(1)}K out` : "";
+          const textLine = wp.partialText ? `
+  \u{1F4AC} ${wp.partialText.slice(-150).replace(/\n/g, " ")}` : "";
+          progressLine = `${text}${toolLine}${tokenLine}${textLine}`;
+        }
+      }
+      onUpdate({ content: [{ type: "text", text: progressLine }] });
     } catch (error) {
       logInternalError("subagent-tools.progress", error, `agentId=${agentRecordId}`);
     }
@@ -85587,6 +85883,9 @@ Subagent may need manual intervention.`
       const record = event;
       const eventType = typeof record.type === "string" ? record.type : void 0;
       if (eventType) lifecycleState.overflowTracker?.feedEvent(taskId, runId, eventType);
+      if (record && typeof record === "object") {
+        globalProgressTracker.handleWorkerEvent(taskId, runId, record);
+      }
     }
   });
   registerSubagentTools(pi, subagentManager, {