pi-subagents 0.81.0 → 0.82.1

package/bundle/{chunk-74RT5YQE.js → chunk-RMQFMMAT.js}

@@ -1,9 +1,78 @@
-// src/runs/shared/herdr-connection.ts
-import { spawn, spawnSync } from "node:child_process";
+// src/runs/shared/rex-machine.ts
+import { spawnSync } from "node:child_process";
 import * as fs from "node:fs";
-import * as net from "node:net";
 import * as os from "node:os";
 import * as path from "node:path";
+var REX_LOCAL_MACHINE = "local";
+var REX_EXIT_GONE = 3;
+var REX_EXIT_UNREACHABLE = 4;
+function isRexLocalMachine(machine) {
+  return machine?.provider === "rex" && !("target" in machine);
+}
+var REX_BUNDLE_BIN = "Library/Application Support/com.superlogical.rex/RexServer/Versions/Current/Rex Server.app/Contents/MacOS/rex";
+var REX_CALL_TIMEOUT_MS = 15e3;
+var REX_MAX_OUTPUT = 1024 * 1024;
+function rexGlobalArgs(server) {
+  return server ? ["--autostart=false", "-S", server] : ["--autostart=false"];
+}
+function executable(file) {
+  try {
+    fs.accessSync(file, fs.constants.X_OK);
+    return fs.statSync(file).isFile();
+  } catch {
+    return false;
+  }
+}
+function resolveRexBinary(env = process.env) {
+  const fromDir = env.REX_BIN_DIR ? [path.join(env.REX_BIN_DIR, "rex")] : [];
+  const fromPath = (env.PATH ?? "").split(path.delimiter).filter((dir) => path.isAbsolute(dir)).map((dir) => path.join(dir, "rex"));
+  const found = [...fromDir, ...fromPath, path.join(os.homedir(), REX_BUNDLE_BIN)].find(executable);
+  if (!found) throw new Error("The Rex CLI was not found: set REX_BIN_DIR, put rex on PATH, or install Rex.");
+  return found;
+}
+function rexCommandEnv(source = process.env) {
+  const { REX_SESSION: _session, REX_BLOCK: _block, REX_SERVER: _server, ...env } = source;
+  return env;
+}
+function sessionConfirmed(stdout, session) {
+  try {
+    const parsed = JSON.parse(stdout);
+    return parsed?.session_id === session;
+  } catch {
+    return false;
+  }
+}
+function resolveRexLocalPlacement(input) {
+  if (process.platform === "win32") throw new Error("Machine 'local' runs the child in a Rex pane, which is not supported on Windows.");
+  const env = input.env ?? process.env, session = env.REX_SESSION?.trim(), server = env.REX_SERVER?.trim();
+  if (!session) throw new Error("Machine 'local' opens the child in a new tab of this Rex session, but this Pi is not running inside Rex (REX_SESSION is not set).");
+  const result = spawnSync(resolveRexBinary(env), [...rexGlobalArgs(server), "session", "inspect", session, "--json"], { encoding: "utf8", env: rexCommandEnv(env), timeout: REX_CALL_TIMEOUT_MS, maxBuffer: REX_MAX_OUTPUT, windowsHide: true });
+  if (result.error) throw new Error(`Could not ask Rex about this session: ${result.error.message}`, { cause: result.error });
+  if (result.status === REX_EXIT_GONE) throw new Error(`Machine 'local' needs this Pi's Rex session, but the Rex server does not know session ${session}.`);
+  if (result.status === REX_EXIT_UNREACHABLE) throw new Error("Machine 'local' needs the Rex server, but it is unreachable.");
+  if (result.status !== 0) throw new Error(`rex session inspect exited with code ${result.status}: ${(result.stderr || result.stdout).trim().slice(0, 512)}`);
+  if (!sessionConfirmed(result.stdout, session)) throw new Error(`The Rex server did not confirm session ${session}.`);
+  const stepCwd = input.stepCwd?.trim();
+  const home = stepCwd === "~" || stepCwd?.startsWith("~/") ? path.join(os.homedir(), stepCwd.slice(1)) : void 0;
+  const requested = home ?? (stepCwd ? path.resolve(input.cwd, stepCwd) : input.cwd);
+  let cwd;
+  try {
+    cwd = fs.realpathSync(requested);
+  } catch (error) {
+    throw new Error(`Machine 'local' cwd does not exist: ${requested}.`, { cause: error });
+  }
+  if (!fs.statSync(cwd).isDirectory()) throw new Error(`Machine 'local' cwd is not a directory: ${requested}.`);
+  const machine = { provider: "rex", id: REX_LOCAL_MACHINE, session, cwd };
+  if (server) machine.server = server;
+  return machine;
+}
+
+// src/runs/shared/herdr-connection.ts
+import { spawn, spawnSync as spawnSync2 } from "node:child_process";
+import * as fs2 from "node:fs";
+import * as net from "node:net";
+import * as os2 from "node:os";
+import * as path2 from "node:path";
 var MAX_DISCOVERY_BYTES = 256 * 1024;
 var MAX_RPC_BYTES = 4 * 1024 * 1024;
 var SUBSCRIPTION_ACK_TIMEOUT_MS = 15e3;
@@ -52,11 +121,14 @@ function sshEnvCommand(session, command) {
   return `/usr/bin/env -u HERDR_SOCKET_PATH -u HERDR_SESSION${assignment} ${remoteShellCommand(command)}`;
 }
 function runHerdrRemoteCommand(machine, command, options = {}) {
-  return spawnSync(options.sshBin ?? "ssh", [...herdrSshArgs(options.env), machine.target, command], { encoding: "utf8", env: hardenedSshEnv(options.env), timeout: options.timeout ?? 15e3, maxBuffer: options.maxBuffer ?? MAX_DISCOVERY_BYTES, windowsHide: true });
+  return spawnSync2(options.sshBin ?? "ssh", [...herdrSshArgs(options.env), machine.target, command], { encoding: "utf8", env: hardenedSshEnv(options.env), timeout: options.timeout ?? 15e3, maxBuffer: options.maxBuffer ?? MAX_DISCOVERY_BYTES, windowsHide: true });
 }
 function runHerdrRemoteCommandAsync(machine, command, options = {}) {
-  return new Promise((resolve) => {
-    const child = spawn(options.sshBin ?? "ssh", [...herdrSshArgs(options.env), machine.target, command], { env: hardenedSshEnv(options.env), stdio: ["ignore", "pipe", "pipe"], windowsHide: true });
+  return runBoundedCommand(options.sshBin ?? "ssh", [...herdrSshArgs(options.env), machine.target, command], { env: hardenedSshEnv(options.env), timeout: options.timeout, maxBuffer: options.maxBuffer });
+}
+function runBoundedCommand(file, args, options) {
+  return new Promise((resolve2) => {
+    const child = spawn(file, args, { env: options.env, stdio: ["ignore", "pipe", "pipe"], windowsHide: true });
     const stdout = [], stderr = [], maxBuffer = options.maxBuffer ?? MAX_DISCOVERY_BYTES;
     let stdoutBytes = 0, stderrBytes = 0, error, settled = false, escalation;
     const finish = (status, spawnError = error) => {
@@ -64,7 +136,7 @@ function runHerdrRemoteCommandAsync(machine, command, options = {}) {
       settled = true;
       clearTimeout(timer);
       if (escalation) clearTimeout(escalation);
-      resolve({ status, stdout: Buffer.concat(stdout).toString("utf8"), stderr: Buffer.concat(stderr).toString("utf8"), ...spawnError ? { error: spawnError } : {} });
+      resolve2({ status, stdout: Buffer.concat(stdout).toString("utf8"), stderr: Buffer.concat(stderr).toString("utf8"), ...spawnError ? { error: spawnError } : {} });
     };
     const terminate = () => {
       child.kill("SIGTERM");
@@ -100,7 +172,7 @@ function parseHerdrEndpoint(value, expectedSession) {
   }
   if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("Remote Herdr endpoint discovery returned no endpoint.");
   const p = parsed;
-  if (typeof p.socket !== "string" || !path.posix.isAbsolute(p.socket) || typeof p.version !== "string" || typeof p.protocol !== "number") throw new Error("Remote Herdr endpoint discovery returned incomplete identity.");
+  if (typeof p.socket !== "string" || !path2.posix.isAbsolute(p.socket) || typeof p.version !== "string" || typeof p.protocol !== "number") throw new Error("Remote Herdr endpoint discovery returned incomplete identity.");
   const session = canonicalHerdrSession(typeof p.session === "string" ? p.session : null), expected = canonicalHerdrSession(expectedSession);
   if (expected !== session) throw new Error(`Remote Herdr session identity mismatch: expected ${expected ?? "default"}, received ${session ?? "default"}.`);
   if (p.running !== true || p.compatible !== true || p.endpoint_compatible === false) throw new Error("The selected remote Herdr session is stopped or incompatible.");
@@ -122,7 +194,7 @@ var SocketRpcClient = class {
     this.#subscriptionAckTimeoutMs = subscriptionAckTimeoutMs;
   }
   call(method, params = {}, timeoutMs = 15e3) {
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve2, reject) => {
       const socket = net.createConnection(this.#socketPath);
       let bytes = 0;
       let data = Buffer.alloc(0);
@@ -135,7 +207,7 @@ var SocketRpcClient = class {
         finished = true;
         clearTimeout(timer);
         socket.destroy();
-        error ? reject(error) : resolve(value);
+        error ? reject(error) : resolve2(value);
       };
       socket.on("connect", () => socket.write(`${JSON.stringify({ id, method, params })}
 `));
@@ -172,8 +244,8 @@ var SocketRpcClient = class {
     const id = String(++this.#next);
     let buffer = Buffer.alloc(0), bytes = 0, acknowledged = false, intentional = false, notified = false, settled = false;
     let resolveAck, rejectAck;
-    const acknowledgement = new Promise((resolve, reject) => {
-      resolveAck = resolve;
+    const acknowledgement = new Promise((resolve2, reject) => {
+      resolveAck = resolve2;
       rejectAck = reject;
     });
     const failHandshake = (error) => {
@@ -260,19 +332,19 @@ async function waitForSocket(socketPath, child) {
   for (let attempt = 0; attempt < 100; attempt++) {
     if (child.exitCode !== null) throw new Error(`SSH StreamLocal forwarding exited with code ${child.exitCode}.`);
     try {
-      const stat = fs.lstatSync(socketPath);
+      const stat = fs2.lstatSync(socketPath);
       if (stat.isSocket()) {
-        fs.chmodSync(socketPath, 384);
+        fs2.chmodSync(socketPath, 384);
         return;
       }
     } catch {
     }
-    await new Promise((resolve) => setTimeout(resolve, 25));
+    await new Promise((resolve2) => setTimeout(resolve2, 25));
   }
   throw new Error("SSH StreamLocal forwarding did not create its local socket.");
 }
 async function terminateChild(child) {
-  const wait = (ms) => child.exitCode !== null || child.signalCode !== null ? Promise.resolve() : Promise.race([new Promise((resolve) => child.once("exit", () => resolve())), new Promise((resolve) => setTimeout(resolve, ms))]);
+  const wait = (ms) => child.exitCode !== null || child.signalCode !== null ? Promise.resolve() : Promise.race([new Promise((resolve2) => child.once("exit", () => resolve2())), new Promise((resolve2) => setTimeout(resolve2, ms))]);
   if (child.exitCode === null && child.signalCode === null) child.kill("SIGTERM");
   await wait(1e3);
   if (child.exitCode === null && child.signalCode === null) {
@@ -280,22 +352,20 @@ async function terminateChild(child) {
     await wait(1e3);
   }
 }
-async function connectHerdrMachine(machine, options = {}) {
-  if (process.platform === "win32") throw new Error("Pane-native Herdr placement requires OpenSSH StreamLocal forwarding and is not supported on Windows.");
-  const endpoint = await discoverHerdrEndpoint(machine, options);
-  const dir = fs.mkdtempSync(path.join(os.tmpdir(), "pi-subagents-herdr-"));
-  fs.chmodSync(dir, 448);
+function openSshSockets(machine, options) {
+  const dir = fs2.mkdtempSync(path2.join(os2.tmpdir(), "pi-subagents-herdr-"));
+  fs2.chmodSync(dir, 448);
   const children = /* @__PURE__ */ new Set();
   const forward = async (remotePath, name) => {
-    if (!path.posix.isAbsolute(remotePath)) throw new Error("Remote socket path must be absolute.");
-    const local = path.join(dir, `${name}.sock`);
+    if (!path2.posix.isAbsolute(remotePath)) throw new Error("Remote socket path must be absolute.");
+    const local = path2.join(dir, `${name}.sock`);
     const child = spawn(options.sshBin ?? "ssh", [...herdrSshArgs(options.env), "-N", "-o", "StreamLocalBindUnlink=yes", "-L", `${local}:${remotePath}`, machine.target], { env: hardenedSshEnv(options.env), stdio: "ignore", windowsHide: true });
     children.add(child);
     const stop = async () => {
       await terminateChild(child);
       children.delete(child);
       try {
-        fs.rmSync(local, { force: true });
+        fs2.rmSync(local, { force: true });
       } catch {
       }
     };
@@ -307,20 +377,40 @@ async function connectHerdrMachine(machine, options = {}) {
     }
     return { socketPath: local, close: stop };
   };
-  const primary = await forward(endpoint.socket, "herdr").catch((error) => {
-    fs.rmSync(dir, { recursive: true, force: true });
-    throw error;
-  });
-  return { endpoint, socketPath: primary.socketPath, client: new SocketRpcClient(primary.socketPath), forwardRemoteSocket: forward, close: async () => {
+  return { forwardRemoteSocket: forward, close: async () => {
     await Promise.all([...children].map(terminateChild));
     children.clear();
-    fs.rmSync(dir, { recursive: true, force: true });
+    fs2.rmSync(dir, { recursive: true, force: true });
   } };
 }
+function sshMachineAccess(machine, options = {}) {
+  return { shellCommand: remoteShellCommand, run: (command, limits = {}) => runHerdrRemoteCommand(machine, command, { ...options, ...limits }), runAsync: (command, limits = {}) => runHerdrRemoteCommandAsync(machine, command, { ...options, ...limits }), openSockets: () => openSshSockets(machine, options) };
+}
+async function connectHerdrMachine(machine, options = {}) {
+  if (process.platform === "win32") throw new Error("Pane-native Herdr placement requires OpenSSH StreamLocal forwarding and is not supported on Windows.");
+  const endpoint = await discoverHerdrEndpoint(machine, options);
+  const sockets = sshMachineAccess(machine, options).openSockets();
+  const primary = await sockets.forwardRemoteSocket(endpoint.socket, "herdr").catch(async (error) => {
+    await sockets.close();
+    throw error;
+  });
+  return { endpoint, socketPath: primary.socketPath, client: new SocketRpcClient(primary.socketPath), forwardRemoteSocket: sockets.forwardRemoteSocket, close: sockets.close };
+}
 
 export {
   remoteShellCommand,
-  runHerdrRemoteCommand,
-  runHerdrRemoteCommandAsync,
-  connectHerdrMachine
+  runBoundedCommand,
+  sshMachineAccess,
+  connectHerdrMachine,
+  REX_LOCAL_MACHINE,
+  REX_EXIT_GONE,
+  REX_EXIT_UNREACHABLE,
+  isRexLocalMachine,
+  REX_BUNDLE_BIN,
+  REX_CALL_TIMEOUT_MS,
+  REX_MAX_OUTPUT,
+  rexGlobalArgs,
+  resolveRexBinary,
+  rexCommandEnv,
+  resolveRexLocalPlacement
 };

package/bundle/{chunk-WSBNENFS.js → chunk-UCPP4GNU.js}

@@ -1,5 +1,7 @@
 import {
   checkPidLiveness,
+  checkRecordedPidLiveness,
+  currentBootId,
   currentPidNamespaceScope,
   isTerminalAsyncState,
   normalizeWorktreeBranchPrefix,
@@ -9,13 +11,13 @@ import {
   validateAuthorityPolicy,
   validateMissionStoreConfig,
   validateModelResponseAliases
-} from "./chunk-VJHOELQP.js";
+} from "./chunk-46XKCPJR.js";
 import {
   getAgentDir,
   readStatus,
   validatePermissionConfig,
   writePrivateAtomicJson
-} from "./chunk-ZBC44JJ3.js";
+} from "./chunk-CIZQXJ5Q.js";
 import {
   FLEET_KEYBINDING_ACTIONS,
   RUNNER_LAUNCHER_NAME_PATTERN,
@@ -252,8 +254,13 @@ function abandonedRunnerReleaseVerdict(status, proofState, options, anyTerminalS
   if (thresholdMs === false) return { state: "retained", reason: `${proofReason}; abandoned-timeout policy is disabled` };
   if (anyTerminalState ? !isTerminalAsyncState(status.state) : status.state !== "failed") return { state: "retained", reason: `${proofReason}; abandoned-timeout policy requires a ${anyTerminalState ? "terminal" : "failed"} run, not ${status.state}` };
   if (typeof status.pid !== "number" || !Number.isInteger(status.pid) || status.pid < 1) return { state: "retained", reason: `${proofReason}; runner PID is missing or invalid` };
-  if (status.pidNamespaceScope !== void 0 && status.pidNamespaceScope !== (options.pidNamespaceScope ?? currentPidNamespaceScope)()) return { state: "retained", reason: `${proofReason}; runner PID namespace differs from this process, so liveness is unknown` };
-  const liveness = (options.pidLiveness ?? checkPidLiveness)(status.pid);
+  const observedScope = (options.pidNamespaceScope ?? currentPidNamespaceScope)();
+  if (status.pidNamespaceScope !== void 0 && status.pidNamespaceScope !== observedScope) return { state: "retained", reason: `${proofReason}; runner PID namespace differs from this process, so liveness is unknown` };
+  const liveness = checkRecordedPidLiveness({ pid: status.pid, pidNamespaceScope: status.pidNamespaceScope, bootId: status.bootId }, {
+    observedScope,
+    observedBootId: (options.bootId ?? currentBootId)(),
+    probe: options.pidLiveness ?? ((pid) => checkPidLiveness(pid))
+  });
   if (liveness !== "dead") return { state: "retained", reason: `${proofReason}; runner PID liveness is ${liveness}` };
   const lastActivityAt = status.lastActivityAt ?? status.lastUpdate ?? status.endedAt;
   if (typeof lastActivityAt !== "number" || !Number.isFinite(lastActivityAt)) return { state: "retained", reason: `${proofReason}; last activity timestamp is missing or invalid` };
@@ -666,6 +673,9 @@ function validateConfig(config) {
   if (config.enableSlashCommands !== void 0 && typeof config.enableSlashCommands !== "boolean") {
     throw new Error("config.enableSlashCommands must be a boolean");
   }
+  if (config.autoResume !== void 0 && typeof config.autoResume !== "boolean") {
+    throw new Error("config.autoResume must be a boolean");
+  }
   if (config.toolActivation !== void 0 && config.toolActivation !== "auto" && config.toolActivation !== "dynamic" && config.toolActivation !== "eager") {
     throw new Error('config.toolActivation must be "auto", "dynamic", or "eager"');
   }

package/bundle/{chunk-2XYWN7QJ.js → chunk-UTT254JE.js}

@@ -1,7 +1,7 @@
 // package.json
 var package_default = {
   name: "pi-subagents",
-  version: "0.81.0",
+  version: "0.82.1",
   private: true,
   description: "Pi extension for single-agent delegation and scripted multi-agent workflows",
   author: "Nico Bailon",
@@ -106,7 +106,7 @@ var package_default = {
     "@js-temporal/polyfill": "0.5.1",
     acorn: "8.18.0",
     jiti: "2.7.0",
-    undici: "8.10.2",
+    undici: "8.12.3",
     yaml: "2.8.3"
   },
   devDependencies: {