pi-herdsman 0.15.0 → 0.16.0

package/SKILL.md

@@ -31,8 +31,8 @@ Use these high-salience rules for the model-facing agent boundary:
 - Each unresolved unit of work has one executor. Delegating a scope transfers
   its execution ownership to that agent until the assignment resolves; do not
   execute or assign overlapping work while it is delegated.
-- For agent handoffs, `task`/`files` carry assignment evidence and
-  `fork`/`continue` carry selected Pi history; do not assume the caller's
+- For agent handoffs, `task`/`files` carry assignment evidence; `continue`
+  resumes an exact managed-agent Pi session. Do not assume the caller's
   conversation or attachments are inherited.
 - When agent work is unresolved, handle required agent control, then continue
   only necessary work you still own or end the turn without concluding; agent
@@ -53,8 +53,9 @@ Use list when fresh agent state or ownership is materially needed for a concrete
 control or recovery decision, or to refresh the definition roster after
 configuration changes. Do not use list merely to check progress.
 
-Use delegate to start one bounded assignment from an agent definition.
-Use continue to start one bounded assignment from an exact historical Pi session.
+Use delegate to start one bounded fresh assignment from an agent definition.
+Use continue to start one bounded assignment from an exact historical
+managed-agent Pi session.
 
 Each managed agent exists for one assignment only. After its terminal result is
 delivered, Pi Herdsman cleans up that agent automatically. To continue completed
@@ -128,9 +129,8 @@ are not copied or snapshotted. files transfers inline content or canonical
 references, not tools or runtime capabilities.
 
 For agent handoffs, task text and `files` carry assignment-specific evidence.
-`fork` and `continue` are the public mechanisms that deliberately select saved
-Pi history. Do not assume the caller's conversation or caller-side attachments
-are inherited by another agent session.
+`continue` resumes an exact managed-agent Pi session. Fresh delegation does not
+inherit the caller's conversation or caller-side attachments.
 
 Pass relevant evidence explicitly through `files`; omit unrelated evidence.
 

package/dist/index.js

@@ -5515,11 +5515,8 @@ function renderExpandedCoordinationCall(tool, args, theme, header) {
     if (action2 === "delegate") {
       if (args.definition) fields.push(["definition", args.definition]);
       if (args.label) fields.push(["label", args.label]);
-      if (args.timeoutMs) fields.push(["timeout", args.timeoutMs]);
-      if (args.fork) fields.push(["fork", args.fork]);
     } else if (action2 === "continue") {
       if (args.session) fields.push(["session", args.session]);
-      if (args.timeoutMs) fields.push(["timeout", args.timeoutMs]);
     } else if (args.agent) fields.push(["agent", args.agent]);
   } else if (tool === "staff" || tool === "peer") {
     if (args.lead) fields.push(["lead", args.lead]);
@@ -6395,7 +6392,7 @@ function formatMessageLimit(bytes) {
 }
 var AGENT_DELEGATION_GUIDANCE = "Use agent for genuinely independent or context-heavy work; keep small, tightly coupled work local.";
 var AGENT_EXECUTION_OWNERSHIP_GUIDANCE = "Each unresolved unit of work has one executor. Delegating a scope transfers its execution ownership to that agent until the assignment resolves. After delegation succeeds, stop executing, inspecting, or analyzing that delegated scope locally; do not assign overlapping work. Continue only concrete, necessary work clearly outside the delegated scope that you still own.";
-var AGENT_HANDOFF_GUIDANCE = "For agent handoffs, `task`/`files` carry assignment evidence and `fork`/`continue` carry selected Pi history; do not assume the caller's conversation or attachments are inherited.";
+var AGENT_HANDOFF_GUIDANCE = "For agent handoffs, `task`/`files` carry assignment evidence; `continue` resumes an exact managed-agent Pi session. Do not assume the caller's conversation or attachments are inherited.";
 var AGENT_UNRESOLVED_GUIDANCE = "When agent work is unresolved, handle required agent control, then continue only necessary work you still own or end the turn without concluding; agent results or attention will resume the session automatically. Do not check progress with list, inspect, transcript, status requests, steering, sleep, or other waiting mechanisms. Stale health attention is diagnosis, not progress polling: use attached evidence first and, when it is absent or insufficient, perform at most one bounded diagnostic read before returning to passive waiting. Repeated reminders alone do not justify another read. Do not invent work merely to remain active.";
 var AGENT_OPERATIONAL_DESCRIPTION = `Coordinate managed agents.
 
@@ -6404,10 +6401,9 @@ Use list when fresh agent state or ownership is materially needed for a concrete
 control or recovery decision, or to refresh the definition roster after
 configuration changes. Do not use list merely to check progress.
 
-Use delegate to start one bounded assignment from an agent definition.
-A delegate fork selects an exact saved Pi session as historical context for a
-fresh derived assignment. Use continue to start one bounded assignment from an
-exact historical managed-agent Pi session.
+Use delegate to start one bounded fresh assignment from an agent definition.
+Use continue to start one bounded assignment from an exact historical
+managed-agent Pi session.
 
 Each managed agent exists for one assignment only. After its terminal result is
 delivered, Pi Herdsman cleans up that live generation. Agent labels identify the
@@ -6583,10 +6579,6 @@ async function visibleAgentDefinitionMetadata(ctx, scope) {
     (definition) => scope.allowedAgentDefinitions.has(definition.name) && definition.enabled !== false
   ) : definitions;
 }
-function matchesActionFields(value2, required, optional = []) {
-  const allowed = ["action", ...required, ...optional];
-  return required.every((key) => key in value2) && Object.keys(value2).every((key) => allowed.includes(key));
-}
 function invalidRequestInput(operation, message) {
   return new OperationError({
     category: "invalid_request",
@@ -6596,6 +6588,31 @@ function invalidRequestInput(operation, message) {
     retryAttempted: false
   });
 }
+function projectedFiles(value2) {
+  const files = value2.files;
+  return files?.length ? { files } : {};
+}
+function requiredString(value2, field, action2) {
+  const candidate = value2[field];
+  if (typeof candidate !== "string")
+    throw invalidRequestInput(action2, `${action2} requires ${field}`);
+  return candidate;
+}
+function replaceInput(input, canonical) {
+  for (const key of Object.keys(input)) delete input[key];
+  Object.assign(input, canonical);
+}
+function projectActionInput(value2, fieldsByAction) {
+  if (!value2 || typeof value2 !== "object" || Array.isArray(value2)) return value2;
+  const input = { ...value2 };
+  const action2 = String(input.action);
+  if (!Object.prototype.hasOwnProperty.call(fieldsByAction, action2))
+    return input;
+  const fields = fieldsByAction[action2];
+  const knownFields = new Set(Object.values(fieldsByAction).flat());
+  for (const key of knownFields) if (!fields.includes(key)) delete input[key];
+  return input;
+}
 var runtimes = /* @__PURE__ */ new Map();
 var resultWatchers = /* @__PURE__ */ new Map();
 var watchRetryTimers = /* @__PURE__ */ new Map();
@@ -7190,12 +7207,12 @@ async function resolveManagedSession(ctx, raw) {
     );
   return { path: manager.getSessionFile() ?? path, id };
 }
-async function resolveAssignmentSessionOrFail(operation, resolver) {
+async function resolveAssignmentSessionOrFail(resolver) {
   try {
     return await resolver();
   } catch (error2) {
     if (!(error2 instanceof AssignmentSessionResolutionError)) throw error2;
-    fail("invalid_request", error2.message, operation);
+    fail("invalid_request", error2.message, "continue");
   }
 }
 async function resolveAssignmentSession(ctx, raw) {
@@ -7231,13 +7248,13 @@ async function resolveAssignmentSession(ctx, raw) {
     cwd
   };
 }
-async function requireOwnedAssignmentSource(ctx, session, operation) {
+async function requireOwnedAssignmentSource(ctx, session) {
   const source = SessionManager2.open(session.path);
   const entries = source.getEntries();
   const deny = () => fail(
     "invalid_request",
     "Assignment source is outside the caller's proven session ownership tree",
-    operation
+    "continue"
   );
   let identity;
   try {
@@ -7245,10 +7262,7 @@ async function requireOwnedAssignmentSource(ctx, session, operation) {
   } catch {
     deny();
   }
-  if (!identity) {
-    if (operation === "delegate") return;
-    deny();
-  }
+  if (!identity) deny();
   const callerId = ctx.sessionManager.getSessionId();
   const listed = await SessionManager2.listAll();
   const sourceMatches = listed.filter((item) => item.id === session.id);
@@ -8592,7 +8606,7 @@ async function deliverResultUnsafe(pi, runtime, ctx, result, signal) {
         return false;
       }
     })();
-    const retirementGuidance = sessionRetired ? "Session retired after context pressure. Do not continue or fork this session. For follow-up, delegate a fresh agent and pass this result/handoff plus the relevant files." : void 0;
+    const retirementGuidance = sessionRetired ? "Session retired after context pressure. Do not continue this session. For follow-up, delegate a fresh agent and pass this result/handoff plus the relevant files." : void 0;
     const delegationStatus = delegationStatusForResult(
       runtime,
       result.requestId,
@@ -10177,7 +10191,6 @@ async function actionUnsafe(pi, ctx, p, signal, scope, pendingStarts) {
         p.action
       );
     const resumed = p.action === "continue" ? await resolveAssignmentSessionOrFail(
-      "continue",
       () => resolveAssignmentSession(ctx, p.session)
     ) : void 0;
     await herdrVersion(pi, ctx, signal);
@@ -10195,17 +10208,7 @@ async function actionUnsafe(pi, ctx, p, signal, scope, pendingStarts) {
         `Agent definition ${agentDefinition} is not allowed for this delegating agent`,
         p.action
       );
-    if (resumed) await requireOwnedAssignmentSource(ctx, resumed, "continue");
-    const forkSource = p.action === "delegate" && p.fork ? await resolveAssignmentSessionOrFail("delegate", async () => {
-      const fork = await resolveManagedSession(ctx, p.fork);
-      const manager = SessionManager2.open(fork.path);
-      if (readConfig().contextRetirement && retiredManagedSession(manager))
-        throw new AssignmentSessionResolutionError(
-          `Managed agent session ${manager.getSessionId()} is retired after context pressure. Delegate a fresh agent without fork and pass the previous handoff/result and relevant files.`
-        );
-      await requireOwnedAssignmentSource(ctx, fork, "delegate");
-      return fork.path;
-    }) : void 0;
+    if (resumed) await requireOwnedAssignmentSource(ctx, resumed);
     if (definition.projectSource && !sameCwd(agentCwd, ctx.cwd))
       fail(
         "invalid_request",
@@ -10221,7 +10224,7 @@ async function actionUnsafe(pi, ctx, p, signal, scope, pendingStarts) {
     if (resumed && resumed.id === ctx.sessionManager.getSessionId())
       fail(
         "invalid_request",
-        "Cannot continue the controller's currently active Pi session. Use delegate with fork=<session> for a separate derived context.",
+        "Cannot continue the controller's currently active Pi session.",
         p.action
       );
     const resumedSessionPath = resumed ? (() => {
@@ -10235,7 +10238,7 @@ async function actionUnsafe(pi, ctx, p, signal, scope, pendingStarts) {
         );
       }
     })() : void 0;
-    const sessionArgs = resumed ? ["--session", resumedSessionPath] : forkSource ? ["--fork", forkSource] : [];
+    const sessionArgs = resumed ? ["--session", resumedSessionPath] : [];
     let releaseSessionActivation;
     const live = await listedAgents(pi, ctx, void 0, signal);
     if (!agentDefinitionEnabled(definition))
@@ -10491,7 +10494,7 @@ async function actionUnsafe(pi, ctx, p, signal, scope, pendingStarts) {
       );
       const childModel = resolveChildModel({
         configured: configuredModel(effectiveDefinition.frontmatter),
-        inherited: p.action === "delegate" && ctx.model ? { provider: ctx.model.provider, token: modelToken(ctx.model) } : void 0,
+        inherited: !resumed && ctx.model ? { provider: ctx.model.provider, token: modelToken(ctx.model) } : void 0,
         isForeignProvider: (providerId) => registeredProviderIds.has(providerId)
       });
       const launchArgs = agentLaunchArgs(effectiveDefinition, {
@@ -10500,7 +10503,7 @@ async function actionUnsafe(pi, ctx, p, signal, scope, pendingStarts) {
         cwd: agentCwd,
         managedAgent: true,
         approveProject: agentContext.projectTrusted && sameCwd(agentCwd, ctx.cwd),
-        ...p.action === "delegate" ? { inheritedThinking: pi.getThinkingLevel() } : {},
+        ...!resumed ? { inheritedThinking: pi.getThinkingLevel() } : {},
         modelDecision: childModel
       });
       started = await startHerdrAgent(pi, ctx, {
@@ -10512,7 +10515,6 @@ async function actionUnsafe(pi, ctx, p, signal, scope, pendingStarts) {
         ...placementRevalidator ? { placementRevalidator } : {},
         agentArgs: [...launchArgs, ...sessionArgs],
         env,
-        timeoutMs: p.timeoutMs,
         signal
       });
       const state = await waitForState(
@@ -11054,7 +11056,7 @@ function index_default(pi) {
       ),
       session: Type.Optional(
         Type.String({
-          description: "Required for continue. Exact saved Pi session path or full UUID.",
+          description: "Required for continue. Exact saved managed-agent Pi session path or full UUID.",
           pattern: "\\S"
         })
       ),
@@ -11070,52 +11072,64 @@ function index_default(pi) {
           pattern: "\\S"
         })
       ),
-      fork: Type.Optional(
-        Type.String({
-          description: "Optional delegate context: exact saved Pi session path or full UUID.",
-          pattern: "\\S"
-        })
-      ),
-      timeoutMs: Type.Optional(
-        Type.Integer({
-          minimum: STARTUP_TIMEOUT_MIN,
-          maximum: STARTUP_TIMEOUT_MAX,
-          description: "Optional startup budget for delegate and continue."
-        })
-      ),
       files: FILES_SCHEMA
     },
     { additionalProperties: false }
   );
   const agentValidator = Compile(agentParameters);
-  const isAgentParams = (value2) => {
-    if (!agentValidator.Check(value2)) return false;
+  const projectAgentInput = (value2) => projectActionInput(value2, {
+    list: [],
+    delegate: ["definition", "label", "task", "files"],
+    continue: ["session", "task", "files"],
+    steer: ["agent", "message", "files"],
+    interrupt: ["agent", "message", "files"],
+    reply: ["agent", "message", "files"],
+    close: ["agent"],
+    inspect: ["agent"],
+    transcript: ["agent"]
+  });
+  const parseAgentParams = (value2) => {
+    value2 = projectAgentInput(value2);
+    if (!agentValidator.Check(value2))
+      throw invalidRequestInput("agent", "Invalid agent input");
     const p = value2;
+    const files = projectedFiles(p);
     switch (p.action) {
       case "list":
-        return matchesActionFields(p, []);
+        return { action: "list" };
       case "delegate":
-        return matchesActionFields(
-          p,
-          ["definition", "task"],
-          ["label", "fork", "timeoutMs", "files"]
-        );
+        return {
+          action: "delegate",
+          definition: requiredString(p, "definition", "delegate"),
+          task: requiredString(p, "task", "delegate"),
+          ...typeof p.label === "string" ? { label: p.label } : {},
+          ...files
+        };
       case "continue":
-        return matchesActionFields(
-          p,
-          ["session", "task"],
-          ["timeoutMs", "files"]
-        );
+        return {
+          action: "continue",
+          session: requiredString(p, "session", "continue"),
+          task: requiredString(p, "task", "continue"),
+          ...files
+        };
       case "steer":
       case "interrupt":
       case "reply":
-        return matchesActionFields(p, ["agent", "message"], ["files"]);
+        return {
+          action: p.action,
+          agent: requiredString(p, "agent", p.action),
+          message: requiredString(p, "message", p.action),
+          ...files
+        };
       case "close":
       case "inspect":
       case "transcript":
-        return matchesActionFields(p, ["agent"]);
+        return {
+          action: p.action,
+          agent: requiredString(p, "agent", p.action)
+        };
       default:
-        return false;
+        throw invalidRequestInput("agent", "Invalid agent action");
     }
   };
   const staffParameters = Type.Object(
@@ -11150,21 +11164,44 @@ function index_default(pi) {
     { additionalProperties: false }
   );
   const staffValidator = Compile(staffParameters);
-  const isStaffParams = (value2) => {
-    if (!staffValidator.Check(value2)) return false;
+  const projectStaffInput = (value2) => projectActionInput(value2, {
+    list: [],
+    inspect: ["lead"],
+    transcript: ["lead"],
+    message: ["lead", "message", "files"],
+    reply: ["lead", "askId", "message", "files"]
+  });
+  const parseStaffParams = (value2) => {
+    value2 = projectStaffInput(value2);
+    if (!staffValidator.Check(value2))
+      throw invalidRequestInput("staff", "Invalid staff action");
     const p = value2;
     switch (p.action) {
       case "list":
-        return matchesActionFields(p, []);
+        return { action: "list" };
       case "inspect":
       case "transcript":
-        return matchesActionFields(p, ["lead"]);
+        return {
+          action: p.action,
+          lead: requiredString(p, "lead", `staff ${p.action}`)
+        };
       case "message":
-        return matchesActionFields(p, ["lead", "message"], ["files"]);
+        return {
+          action: "message",
+          lead: requiredString(p, "lead", "staff message"),
+          message: requiredString(p, "message", "staff message"),
+          ...projectedFiles(p)
+        };
       case "reply":
-        return matchesActionFields(p, ["lead", "askId", "message"], ["files"]);
+        return {
+          action: "reply",
+          lead: requiredString(p, "lead", "staff reply"),
+          askId: requiredString(p, "askId", "staff reply"),
+          message: requiredString(p, "message", "staff reply"),
+          ...projectedFiles(p)
+        };
       default:
-        return false;
+        throw invalidRequestInput("staff", "Invalid staff action");
     }
   };
   const peerParameters = Type.Object(
@@ -11184,16 +11221,71 @@ function index_default(pi) {
     { additionalProperties: false }
   );
   const peerValidator = Compile(peerParameters);
-  const isPeerParams = (value2) => {
-    if (!peerValidator.Check(value2)) return false;
+  const projectPeerInput = (value2) => projectActionInput(value2, {
+    list: [],
+    message: ["lead", "message", "files"]
+  });
+  const parsePeerParams = (value2) => {
+    value2 = projectPeerInput(value2);
+    if (!peerValidator.Check(value2))
+      throw invalidRequestInput("peer", "Invalid peer action");
     const p = value2;
     switch (p.action) {
       case "list":
-        return matchesActionFields(p, []);
+        return { action: "list" };
       case "message":
-        return matchesActionFields(p, ["lead", "message"], ["files"]);
+        return {
+          action: "message",
+          lead: requiredString(p, "lead", "peer message"),
+          message: requiredString(p, "message", "peer message"),
+          ...projectedFiles(p)
+        };
       default:
-        return false;
+        throw invalidRequestInput("peer", "Invalid peer action");
+    }
+  };
+  const chiefParameters = Type.Object(
+    {
+      action: StringEnum(["message", "ask"]),
+      message: Type.Optional(
+        Type.String({ minLength: 1, description: "Required for message." })
+      ),
+      question: Type.Optional(
+        Type.String({
+          minLength: 1,
+          maxLength: 1024,
+          description: "Required for ask."
+        })
+      ),
+      files: FILES_SCHEMA
+    },
+    { additionalProperties: false }
+  );
+  const chiefValidator = Compile(chiefParameters);
+  const projectChiefInput = (value2) => projectActionInput(value2, {
+    message: ["message", "files"],
+    ask: ["question", "files"]
+  });
+  const parseChiefParams = (value2) => {
+    value2 = projectChiefInput(value2);
+    if (!chiefValidator.Check(value2))
+      throw invalidRequestInput("chief", "Invalid chief action");
+    const p = value2;
+    switch (p.action) {
+      case "message":
+        return {
+          action: "message",
+          message: requiredString(p, "message", "chief message"),
+          ...projectedFiles(p)
+        };
+      case "ask":
+        return {
+          action: "ask",
+          question: requiredString(p, "question", "chief ask"),
+          ...projectedFiles(p)
+        };
+      default:
+        throw invalidRequestInput("chief", "Invalid chief action");
     }
   };
   let startupDefinitionRoster;
@@ -12166,26 +12258,23 @@ Supervised leads will not be changed.`
         }
       }
       if (!controllerScope) return;
-      if (event.toolName === "agent" && !isAgentParams(event.input)) {
-        const error2 = invalidRequestInput("agent", "Invalid agent input");
-        return {
-          block: true,
-          reason: error2.detail.message
-        };
-      }
-      if (event.toolName === "staff" && !isStaffParams(event.input)) {
-        const error2 = invalidRequestInput("staff", "Invalid staff action");
-        return {
-          block: true,
-          reason: error2.detail.message
-        };
-      }
-      if (event.toolName === "peer" && !isPeerParams(event.input)) {
-        const error2 = invalidRequestInput("peer", "Invalid peer action");
-        return {
-          block: true,
-          reason: error2.detail.message
-        };
+      try {
+        if (event.toolName === "agent")
+          replaceInput(event.input, parseAgentParams(event.input));
+        else if (event.toolName === "staff")
+          replaceInput(event.input, parseStaffParams(event.input));
+        else if (event.toolName === "peer")
+          replaceInput(event.input, parsePeerParams(event.input));
+        else if (event.toolName === "chief")
+          replaceInput(event.input, parseChiefParams(event.input));
+      } catch (error2) {
+        if (error2 instanceof OperationError && error2.detail.category === "invalid_request")
+          return {
+            block: true,
+            reason: error2.detail.message,
+            terminate: true
+          };
+        throw error2;
       }
       if (controllerScope.kind !== "lead") return;
       if (event.toolName === CHIEF_TOOLS[0] || !isCurrentChief(ctx)) return;
@@ -13549,33 +13638,12 @@ Active work or pending results may be discarded.`
         promptSnippet: "Report progress to or ask the active chief supervising this lead",
         description: "For ordinary leads only. A lead owns its complete agent tree; the chief supervises leads and never changes ownership. Message and ask require a currently valid chief and reject before mutation when none exists. Use message for meaningful progress, results, warnings, and completion, including exact artifact paths; use ask when a chief decision is genuinely required; call ask alone as the final tool call of the turn, then stop and wait for the reply. Questions are limited to 1,024 characters and 1,024 UTF-8 bytes; channel message records are bounded to 8 KiB, so multibyte content can hit the byte limit first. Chief messages arrive as follow-ups, so integrate them through normal delegation. Descendants use ask_owner, never chief.",
         executionMode: "sequential",
-        parameters: Type.Object(
-          {
-            action: StringEnum(["message", "ask"]),
-            message: Type.Optional(
-              Type.String({
-                minLength: 1,
-                description: "Required for message."
-              })
-            ),
-            question: Type.Optional(
-              Type.String({
-                minLength: 1,
-                maxLength: 1024,
-                description: "Required for ask."
-              })
-            ),
-            files: FILES_SCHEMA
-          },
-          { additionalProperties: false }
-        ),
-        execute: async (_id, params, _signal, _update, ctx) => {
+        parameters: chiefParameters,
+        prepareArguments: projectChiefInput,
+        execute: async (_id, raw, _signal, _update, ctx) => {
           if (controllerScope.kind !== "lead" || chiefMode !== "inactive")
             throw new Error("Chief is available only to ordinary leads");
-          if (!params || typeof params.action !== "string")
-            throw new Error("Invalid chief action");
-          const validFields = params.action === "message" ? matchesActionFields(params, ["message"], ["files"]) : params.action === "ask" ? matchesActionFields(params, ["question"], ["files"]) : false;
-          if (!validFields) throw new Error("Invalid chief action");
+          const params = parseChiefParams(raw);
           if (params.action === "message") {
             if (typeof params.message !== "string" || !params.message.trim())
               throw new Error("Message must contain non-whitespace text");
@@ -13771,11 +13839,11 @@ Active work or pending results may be discarded.`
         description: "Other ordinary Lead sessions (peers), not managed agents. Use list for peers, other Leads, or other Lead sessions. list identifies this Lead as self and returns other live Leads as peers; message sends to one peer's exact lead ID and may include ordinary files or exact reusable direct-agent result refs through files.",
         executionMode: "sequential",
         parameters: peerParameters,
-        execute: async (_id, params, _signal, _update, ctx) => {
+        prepareArguments: projectPeerInput,
+        execute: async (_id, raw, _signal, _update, ctx) => {
           if (controllerScope.kind !== "lead" || chiefMode !== "inactive")
             throw new Error("Peer is available only to ordinary leads");
-          if (!isPeerParams(params))
-            throw invalidRequestInput("peer", "Invalid peer action");
+          const params = parsePeerParams(raw);
           if (params.action === "list") {
             const self = ctx.sessionManager.getSessionId();
             const peers = listPeerLeadRecords(peerRuntime()).filter((record2) => record2.piSessionId !== self).map((record2) => ({
@@ -13856,13 +13924,13 @@ Active work or pending results may be discarded.`
         description: "The lead is the exact full Pi session ID shown as lead in a fresh automatic supervision snapshot or returned by staff list; never use display_name. Chief-only supervision coordination. The chief supervises independent leads, does not own their agent trees, and receives no owner controls. A fresh supervision snapshot is automatically supplied at the start of each chief agent run; treat it as the default current coordination state. For ordinary state and coordination, use a fresh snapshot directly; do not call staff list, inspect, transcript, or another read command merely to poll progress. The message and reply actions revalidate exact identity and state themselves. Use list when the automatic snapshot is stale or unavailable, an immediately refreshed exact roster is materially necessary, or you are diagnosing identity or supervision projection problems. Inspect provides bounded live terminal/process evidence; use it only when that evidence matters. Transcript provides bounded persisted Pi conversation/tool evidence; use it only when that evidence materially matters. Use the lead field's exact full Pi session ID and only fresh available_actions, never infer from display state or metadata. Every exact-identity-verified lead accepts message; reply only with the exact pending ask ID and current chief lease. Message is ordinary durable follow-up communication. Messages are bounded and direction-aware, and temporary verification or delivery failures retain queued records. Metadata is presentation-only and never authority. Messages use follow-up delivery. Human conversation remains the dispatch surface.",
         executionMode: "sequential",
         parameters: staffParameters,
-        execute: async (_id, params, signal, _update, ctx) => {
+        prepareArguments: projectStaffInput,
+        execute: async (_id, raw, signal, _update, ctx) => {
           if (chiefMode !== "active" || !chiefLease)
             throw new Error("Staff is available only to the active chief");
           if (!await currentChiefAuthority(ctx))
             throw new Error("Chief lease is no longer active");
-          if (!isStaffParams(params))
-            throw invalidRequestInput("staff", "Invalid staff action");
+          const params = parseStaffParams(raw);
           const refresh = async () => loadSupervisionSnapshot(ctx);
           const result = (value2) => {
             const bounded = truncateModelText(JSON.stringify(value2, null, 2), {
@@ -15120,13 +15188,13 @@ Active work or pending results may be discarded.`
       description: controllerDescription(controllerScope),
       executionMode: "sequential",
       parameters: agentParameters,
-      execute: async (_id, p, signal, _update, ctx) => {
+      prepareArguments: projectAgentInput,
+      execute: async (_id, raw, signal, _update, ctx) => {
+        let p = { action: "list" };
+        let presentationAction = raw && typeof raw === "object" && typeof raw.action === "string" ? raw.action : p.action;
         try {
-          if (!isAgentParams(p))
-            throw invalidRequestInput(
-              typeof p?.action === "string" ? p.action : "agent",
-              "Invalid agent input"
-            );
+          p = parseAgentParams(raw);
+          presentationAction = p.action;
           const value2 = await action(
             pi,
             ctx,
@@ -15181,7 +15249,10 @@ Active work or pending results may be discarded.`
           if (!(e instanceof OperationError)) throw e;
           const detail = e.detail;
           const bounded = truncateModelText(
-            formatToolModelResult(p.action, { ok: false, error: detail }),
+            formatToolModelResult(presentationAction, {
+              ok: false,
+              error: detail
+            }),
             {
               keep: "head",
               sessionId: ctx.sessionManager.getSessionId(),