pi-subagents 0.82.1 → 0.83.0

package/bundle/{chunk-43SCHIMD.js → chunk-MBDOYZ2V.js}

@@ -1,6 +1,6 @@
 import {
   registerRuntimeAgent
-} from "./chunk-YKEWIB4M.js";
+} from "./chunk-JHZ6DZ5M.js";
 
 // src/agents/runtime-agent-events.ts
 var RUNTIME_AGENT_REGISTER_EVENT = "pi-subagents:runtime-agent-register:v1";

package/bundle/{chunk-XSWOTIA3.js → chunk-MHX22USZ.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-7F6RKT6W.js";
 import {
   getAgentDir
-} from "./chunk-CIZQXJ5Q.js";
+} from "./chunk-7F5SK2U3.js";
 
 // src/intercom/intercom-bridge.ts
 import * as fs from "node:fs";

package/bundle/{chunk-6XJB7PIX.js → chunk-OOFW75PV.js}

@@ -39,10 +39,10 @@ import {
   validateModelResponseAliases,
   withWorkflowChildRunModel,
   withWorktreeTransaction
-} from "./chunk-46XKCPJR.js";
+} from "./chunk-5ESXK62X.js";
 import {
   validateIntercomBridgeConfig
-} from "./chunk-XSWOTIA3.js";
+} from "./chunk-MHX22USZ.js";
 import {
   stableJsonDigest
 } from "./chunk-7F6RKT6W.js";
@@ -73,12 +73,12 @@ import {
   validateToolBudgetConfig,
   waitForFileSystemRetry,
   writeAtomicJson
-} from "./chunk-CIZQXJ5Q.js";
+} from "./chunk-7F5SK2U3.js";
 import {
   DIRS,
   RUNNER_LAUNCHER_NAME_PATTERN,
   TEMP_ROOT_DIR
-} from "./chunk-5LFLVSTM.js";
+} from "./chunk-JEZOSEWG.js";
 import {
   previewDisplayText,
   sanitizeDisplayText,

package/bundle/{chunk-RMQFMMAT.js → chunk-P2NCCTZP.js}

@@ -1,3 +1,9 @@
+import {
+  CODE_OWNED_EXTERNAL_CLI_ADAPTER_IDS,
+  getAgentDir,
+  getProjectConfigDir
+} from "./chunk-7F5SK2U3.js";
+
 // src/runs/shared/rex-machine.ts
 import { spawnSync } from "node:child_process";
 import * as fs from "node:fs";
@@ -67,6 +73,11 @@ function resolveRexLocalPlacement(input) {
   return machine;
 }
 
+// src/runs/shared/herdr-machine.ts
+import { spawnSync as spawnSync3 } from "node:child_process";
+import * as fs3 from "node:fs";
+import * as path3 from "node:path";
+
 // src/runs/shared/herdr-connection.ts
 import { spawn, spawnSync as spawnSync2 } from "node:child_process";
 import * as fs2 from "node:fs";
@@ -127,7 +138,7 @@ function runHerdrRemoteCommandAsync(machine, command, options = {}) {
   return runBoundedCommand(options.sshBin ?? "ssh", [...herdrSshArgs(options.env), machine.target, command], { env: hardenedSshEnv(options.env), timeout: options.timeout, maxBuffer: options.maxBuffer });
 }
 function runBoundedCommand(file, args, options) {
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     const child = spawn(file, args, { env: options.env, stdio: ["ignore", "pipe", "pipe"], windowsHide: true });
     const stdout = [], stderr = [], maxBuffer = options.maxBuffer ?? MAX_DISCOVERY_BYTES;
     let stdoutBytes = 0, stderrBytes = 0, error, settled = false, escalation;
@@ -136,7 +147,7 @@ function runBoundedCommand(file, args, options) {
       settled = true;
       clearTimeout(timer);
       if (escalation) clearTimeout(escalation);
-      resolve2({ status, stdout: Buffer.concat(stdout).toString("utf8"), stderr: Buffer.concat(stderr).toString("utf8"), ...spawnError ? { error: spawnError } : {} });
+      resolve3({ status, stdout: Buffer.concat(stdout).toString("utf8"), stderr: Buffer.concat(stderr).toString("utf8"), ...spawnError ? { error: spawnError } : {} });
     };
     const terminate = () => {
       child.kill("SIGTERM");
@@ -194,7 +205,7 @@ var SocketRpcClient = class {
     this.#subscriptionAckTimeoutMs = subscriptionAckTimeoutMs;
   }
   call(method, params = {}, timeoutMs = 15e3) {
-    return new Promise((resolve2, reject) => {
+    return new Promise((resolve3, reject) => {
       const socket = net.createConnection(this.#socketPath);
       let bytes = 0;
       let data = Buffer.alloc(0);
@@ -207,7 +218,7 @@ var SocketRpcClient = class {
         finished = true;
         clearTimeout(timer);
         socket.destroy();
-        error ? reject(error) : resolve2(value);
+        error ? reject(error) : resolve3(value);
       };
       socket.on("connect", () => socket.write(`${JSON.stringify({ id, method, params })}
 `));
@@ -244,8 +255,8 @@ var SocketRpcClient = class {
     const id = String(++this.#next);
     let buffer = Buffer.alloc(0), bytes = 0, acknowledged = false, intentional = false, notified = false, settled = false;
     let resolveAck, rejectAck;
-    const acknowledgement = new Promise((resolve2, reject) => {
-      resolveAck = resolve2;
+    const acknowledgement = new Promise((resolve3, reject) => {
+      resolveAck = resolve3;
       rejectAck = reject;
     });
     const failHandshake = (error) => {
@@ -339,12 +350,12 @@ async function waitForSocket(socketPath, child) {
       }
     } catch {
     }
-    await new Promise((resolve2) => setTimeout(resolve2, 25));
+    await new Promise((resolve3) => setTimeout(resolve3, 25));
   }
   throw new Error("SSH StreamLocal forwarding did not create its local socket.");
 }
 async function terminateChild(child) {
-  const wait = (ms) => child.exitCode !== null || child.signalCode !== null ? Promise.resolve() : Promise.race([new Promise((resolve2) => child.once("exit", () => resolve2())), new Promise((resolve2) => setTimeout(resolve2, ms))]);
+  const wait = (ms) => child.exitCode !== null || child.signalCode !== null ? Promise.resolve() : Promise.race([new Promise((resolve3) => child.once("exit", () => resolve3())), new Promise((resolve3) => setTimeout(resolve3, ms))]);
   if (child.exitCode === null && child.signalCode === null) child.kill("SIGTERM");
   await wait(1e3);
   if (child.exitCode === null && child.signalCode === null) {
@@ -397,12 +408,220 @@ async function connectHerdrMachine(machine, options = {}) {
   return { endpoint, socketPath: primary.socketPath, client: new SocketRpcClient(primary.socketPath), forwardRemoteSocket: sockets.forwardRemoteSocket, close: sockets.close };
 }
 
+// src/runs/shared/herdr-machine.ts
+var MAX_MACHINE_NAME_LENGTH = 128;
+var HERDR_MACHINE_LIST_TIMEOUT_MS = 7500;
+var MAX_HERDR_MACHINE_LIST_BYTES = 1024 * 1024;
+var CONTROL_CHARS = /[\u0000-\u001f\u007f]/u;
+var SUPPORTED_MACHINE_ADAPTERS = new Set(CODE_OWNED_EXTERNAL_CLI_ADAPTER_IDS);
+function validateMachineName(value) {
+  const trimmed = value.trim();
+  if (!trimmed) throw new Error("Herdr machine id or label is required.");
+  if (trimmed.length > MAX_MACHINE_NAME_LENGTH) throw new Error(`Herdr machine '${trimmed.slice(0, 24)}\u2026' exceeds ${MAX_MACHINE_NAME_LENGTH} characters.`);
+  if (CONTROL_CHARS.test(trimmed)) throw new Error("Herdr machine id or label contains control characters.");
+  return trimmed;
+}
+function validateTarget(value, requested) {
+  const target = value.trim();
+  if (!target || target.startsWith("-") || /[\s\u0000-\u001f\u007f]/u.test(target)) {
+    throw new Error(`Herdr machine '${requested}' has an ssh target that cannot be passed safely: ${JSON.stringify(target)}.`);
+  }
+  return target;
+}
+function isRemoteAbsolute(value) {
+  return value.startsWith("/") || value === "~" || value.startsWith("~/");
+}
+function validateRemoteCwd(value, requested) {
+  const cwd = value.trim();
+  if (!isRemoteAbsolute(cwd)) throw new Error(`Herdr machine '${requested}' cwd must be an absolute POSIX path or start with '~': ${JSON.stringify(cwd)}.`);
+  if (CONTROL_CHARS.test(cwd)) throw new Error(`Herdr machine '${requested}' cwd contains control characters.`);
+  return cwd.length > 1 ? cwd.replace(/\/+$/u, "") : cwd;
+}
+function parseMachineCatalog(json) {
+  let parsed;
+  try {
+    parsed = JSON.parse(json);
+  } catch (error) {
+    throw new Error(`Failed to parse herdr machine list --json: ${error instanceof Error ? error.message : String(error)}`);
+  }
+  const entries = Array.isArray(parsed) ? parsed : parsed && typeof parsed === "object" && Array.isArray(parsed.machines) ? parsed.machines : void 0;
+  if (!entries) throw new Error("herdr machine list --json returned no machine list.");
+  return entries.flatMap((entry) => {
+    if (!entry || typeof entry !== "object" || Array.isArray(entry)) return [];
+    const record = entry;
+    if (typeof record.id !== "string" || !record.id.trim() || typeof record.target !== "string") return [];
+    return [{
+      id: record.id.trim(),
+      ...typeof record.label === "string" && record.label.trim() ? { label: record.label.trim() } : {},
+      target: record.target,
+      ...typeof record.session === "string" && record.session.trim() ? { session: record.session.trim() } : {},
+      enabled: record.enabled !== false
+    }];
+  });
+}
+function readHerdrMachineCatalog(env, herdrBin) {
+  const result = spawnSync3(herdrBin, ["machine", "list", "--json"], {
+    env,
+    encoding: "utf-8",
+    maxBuffer: MAX_HERDR_MACHINE_LIST_BYTES,
+    timeout: HERDR_MACHINE_LIST_TIMEOUT_MS,
+    windowsHide: true
+  });
+  if (result.error) {
+    const code = result.error.code;
+    if (code === "ENOENT") throw new Error(`Herdr CLI '${herdrBin}' was not found on PATH. Saved-machine placement needs Herdr installed locally.`);
+    throw new Error(`Failed to run herdr machine list --json: ${result.error.message}`);
+  }
+  if (result.status !== 0) throw new Error(`herdr machine list --json exited with code ${result.status}: ${(result.stderr || result.stdout).trim()}`);
+  return parseMachineCatalog(result.stdout);
+}
+function selectMachine(catalog, requested) {
+  const byId = catalog.find((entry) => entry.id === requested);
+  const matches = byId ? [byId] : catalog.filter((entry) => entry.label === requested);
+  if (matches.length > 1) throw new Error(`Machine label '${requested}' is ambiguous; use its profile ID.`);
+  const machine = matches[0];
+  if (!machine) {
+    const saved = catalog.filter((entry) => entry.enabled).map((entry) => entry.label ?? entry.id);
+    throw new Error(`Herdr machine '${requested}' was not found. Saved machines: ${saved.length ? saved.join(", ") : "none"}. Add one with herdr machine add <target> --label <name>.`);
+  }
+  if (!machine.enabled) throw new Error(`Machine '${requested}' is disabled. Run herdr machine enable ${machine.id}.`);
+  return machine;
+}
+function readJsonObject(filePath) {
+  if (!fs3.existsSync(filePath)) return {};
+  let parsed;
+  try {
+    parsed = JSON.parse(fs3.readFileSync(filePath, "utf-8"));
+  } catch (error) {
+    throw new Error(`Failed to read settings file '${filePath}': ${error instanceof Error ? error.message : String(error)}`);
+  }
+  return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
+}
+function machineSettingsFrom(settings, keys, filePath) {
+  const subagents = settings.subagents;
+  if (!subagents || typeof subagents !== "object" || Array.isArray(subagents)) return void 0;
+  const machines = subagents.machines;
+  if (machines === void 0) return void 0;
+  if (!machines || typeof machines !== "object" || Array.isArray(machines)) throw new Error(`Subagent settings in '${filePath}' have invalid 'machines'; expected an object keyed by machine label or id.`);
+  const key = keys.find((candidate) => candidate in machines);
+  if (key === void 0) return void 0;
+  const value = machines[key];
+  if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`Subagent settings in '${filePath}' have invalid 'machines.${key}'; expected an object with 'cwd' and optional 'env'.`);
+  const record = value;
+  const entry = {};
+  if (record.cwd !== void 0) {
+    if (typeof record.cwd !== "string" || !record.cwd.trim()) throw new Error(`Subagent settings in '${filePath}' have invalid 'machines.${key}.cwd'; expected a non-empty string.`);
+    entry.cwd = validateRemoteCwd(record.cwd, key);
+  }
+  if (record.env !== void 0) {
+    if (!record.env || typeof record.env !== "object" || Array.isArray(record.env) || Object.entries(record.env).some(([name, item]) => !/^[A-Za-z_][A-Za-z0-9_]*$/u.test(name) || typeof item !== "string")) {
+      throw new Error(`Subagent settings in '${filePath}' have invalid 'machines.${key}.env'; expected an object of string values keyed by variable name.`);
+    }
+    entry.env = { ...record.env };
+    if (Object.keys(entry.env).length > 0) {
+      throw new Error(`Subagent settings in '${filePath}' set 'machines.${key}.env'. Saved-machine runs use the remote Herdr/Pi environment; configure credentials and environment on '${key}' and remove the local env map.`);
+    }
+  }
+  if (record.rex !== void 0) {
+    const rex = record.rex, ssh = rex && typeof rex === "object" && !Array.isArray(rex) && Object.keys(rex).every((field) => field === "ssh") ? rex.ssh : void 0;
+    if (typeof ssh !== "string") throw new Error(`Subagent settings in '${filePath}' have invalid 'machines.${key}.rex'; expected { "ssh": "<ssh target>" }.`);
+    entry.rex = { ssh: validateTarget(ssh, key) };
+  }
+  return entry;
+}
+function readMachineSettings(cwd, keys) {
+  const userPath = path3.join(getAgentDir(), "settings.json");
+  const projectPath = path3.join(getProjectConfigDir(findProjectRootForSettings(cwd)), "settings.json");
+  const user = machineSettingsFrom(readJsonObject(userPath), keys, userPath);
+  const project = projectPath === userPath ? void 0 : machineSettingsFrom(readJsonObject(projectPath), keys, projectPath);
+  if (project?.rex) throw new Error(`Project settings '${projectPath}' set a Rex SSH host in 'machines'. Move the rex entry to your user settings '${userPath}'; only user settings choose which host a task runs on.`);
+  if (!user && !project) return void 0;
+  return { ...user, ...project };
+}
+function userRexMachine(machine) {
+  const userPath = path3.join(getAgentDir(), "settings.json");
+  return machineSettingsFrom(readJsonObject(userPath), [machine], userPath)?.rex !== void 0;
+}
+function findProjectRootForSettings(cwd) {
+  let current = path3.resolve(cwd);
+  while (true) {
+    if (fs3.existsSync(path3.join(getProjectConfigDir(current), "settings.json"))) return current;
+    const parent = path3.dirname(current);
+    if (parent === current) return path3.resolve(cwd);
+    current = parent;
+  }
+}
+function remoteMachineCwd(stepCwd, root, name) {
+  const step = stepCwd?.trim();
+  if (step && isRemoteAbsolute(step)) return step;
+  if (!root) throw new Error(`No root for ${name} in this repo. Set subagents.machines.${name}.cwd in .pi/settings.json or pass an absolute cwd on that machine.`);
+  return step ? path3.posix.join(root, step) : root;
+}
+function resolveHerdrMachinePlacement(input) {
+  const requested = validateMachineName(input.machine);
+  const catalog = input.catalogJson !== void 0 ? parseMachineCatalog(input.catalogJson) : readHerdrMachineCatalog(input.env ?? process.env, input.herdrBin ?? process.env.HERDR_BIN ?? "herdr");
+  const selected = selectMachine(catalog, requested);
+  const name = selected.label ?? selected.id;
+  const keys = [.../* @__PURE__ */ new Set([requested, ...selected.label ? [selected.label] : [], selected.id])];
+  const settings = input.settings ?? readMachineSettings(input.cwd, keys);
+  if (settings?.env && Object.keys(settings.env).length > 0) {
+    throw new Error(`Saved-machine environment for '${name}' must be configured remotely. Remove machines.${name}.env and configure the remote Herdr/Pi session instead.`);
+  }
+  const cwd = remoteMachineCwd(input.stepCwd, settings?.cwd, name);
+  return {
+    machine: {
+      provider: "herdr",
+      id: selected.id,
+      ...selected.label ? { label: selected.label } : {},
+      target: validateTarget(selected.target, requested),
+      ...selected.session && selected.session !== "default" ? { session: selected.session } : {},
+      cwd: validateRemoteCwd(cwd, requested)
+    },
+    ...settings?.env ? { env: settings.env } : {}
+  };
+}
+function resolveMachinePlacement(input) {
+  const requested = validateMachineName(input.machine);
+  const settings = input.settings ?? readMachineSettings(input.cwd, [requested]);
+  if (requested === REX_LOCAL_MACHINE) {
+    if (settings?.rex) throw new Error("Machine 'local' is reserved for a Rex pane on this machine; give the Rex SSH host in subagents.machines.local.rex another name.");
+    return { machine: resolveRexLocalPlacement({ cwd: input.cwd, stepCwd: input.stepCwd, env: input.env }) };
+  }
+  if (settings?.rex) return { machine: { provider: "rex", id: requested, target: settings.rex.ssh, cwd: validateRemoteCwd(remoteMachineCwd(input.stepCwd, settings.cwd, requested), requested) } };
+  return resolveHerdrMachinePlacement(input);
+}
+var PLACED_RESTORE_UNSUPPORTED = "Pane-native remote Pi does not support fork, resume, or revival; use fresh context.";
+function formatHerdrMachineRunnerUnsupported(input) {
+  if (input.machine === void 0) return void 0;
+  const name = input.machine.trim();
+  let rex;
+  try {
+    rex = name === REX_LOCAL_MACHINE || userRexMachine(name);
+  } catch (error) {
+    return error instanceof Error ? error.message : String(error);
+  }
+  if (rex) {
+    if (input.runnerType !== void 0 && input.runnerType !== "pi") return `Agent '${input.agentName}' requested machine '${name}', but Rex supports native Pi children only. Remove the machine or use a native Pi agent.`;
+    if (input.worktree === true) return `Agent '${input.agentName}' requested machine '${name}', but managed worktrees cannot be combined with machine placement.`;
+    if (process.platform === "win32") return `Machine '${name}' runs the child in a Rex pane, which is not supported on Windows.`;
+    return void 0;
+  }
+  if (input.runnerType !== void 0 && input.runnerType !== "pi" && input.runnerType !== "external-cli") {
+    return `Agent '${input.agentName}' requested machine '${input.machine}', but this runner cannot use pane-native Herdr placement. Use native Pi or a built-in Claude, Codex, or Cursor profile.`;
+  }
+  if (input.runnerType === "external-cli" && (input.adapter === void 0 || !SUPPORTED_MACHINE_ADAPTERS.has(input.adapter))) {
+    return `Agent '${input.agentName}' requested machine '${input.machine}', but generic external-cli commands cannot be remote-wrapped safely. Use claude-code, claude-code-writer, codex-exec, codex-exec-writer, cursor-agent, or cursor-agent-writer.`;
+  }
+  if (input.worktree === true) return `Agent '${input.agentName}' requested machine '${input.machine}', but managed worktrees are local git operations and cannot be combined with a Herdr saved machine.`;
+  if (process.platform === "win32") return "Herdr saved-machine pane transport requires hardened OpenSSH StreamLocal forwarding, which is not supported from a Windows host yet.";
+  return void 0;
+}
+
 export {
   remoteShellCommand,
   runBoundedCommand,
   sshMachineAccess,
   connectHerdrMachine,
-  REX_LOCAL_MACHINE,
   REX_EXIT_GONE,
   REX_EXIT_UNREACHABLE,
   isRexLocalMachine,
@@ -412,5 +631,7 @@ export {
   rexGlobalArgs,
   resolveRexBinary,
   rexCommandEnv,
-  resolveRexLocalPlacement
+  resolveMachinePlacement,
+  PLACED_RESTORE_UNSUPPORTED,
+  formatHerdrMachineRunnerUnsupported
 };

package/bundle/{chunk-UCPP4GNU.js → chunk-RZJN63GU.js}

@@ -11,19 +11,19 @@ import {
   validateAuthorityPolicy,
   validateMissionStoreConfig,
   validateModelResponseAliases
-} from "./chunk-46XKCPJR.js";
+} from "./chunk-5ESXK62X.js";
 import {
   getAgentDir,
   readStatus,
   validatePermissionConfig,
   writePrivateAtomicJson
-} from "./chunk-CIZQXJ5Q.js";
+} from "./chunk-7F5SK2U3.js";
 import {
   FLEET_KEYBINDING_ACTIONS,
   RUNNER_LAUNCHER_NAME_PATTERN,
   RUNNER_LAUNCHER_NAME_RULE,
   TEMP_ROOT_DIR
-} from "./chunk-5LFLVSTM.js";
+} from "./chunk-JEZOSEWG.js";
 
 // src/shared/disabled-features.ts
 var SUBAGENT_FEATURES = {
@@ -104,16 +104,22 @@ function disabledFeatureUseError(request, surface, label = "subagent") {
   }
   return void 0;
 }
+var WORKFLOW_SCRIPTS_REPLACEMENT = "Instead of workflow scripts, use the top-level tasks or chain fields.";
 function disabledFeatureNotice(surface) {
   if (surface.features.size === 0) return void 0;
   const lines = [...surface.features].map((feature) => {
     const { actions, params, disabledBy } = featureSurface(feature);
     const parts = [`options ${params.join(", ")}`, ...actions.length > 0 ? [`actions ${actions.join(", ")}`] : []];
-    return `- ${disabledBy}: ${parts.join("; ")}`;
+    return `- ${disabledBy}: ${parts.join("; ")}${feature === "workflow-scripts" ? `. ${WORKFLOW_SCRIPTS_REPLACEMENT}` : ""}`;
   });
-  return `Disabled by config in this session. The reference below still lists these, but calls that use them are rejected:
+  return `Disabled by config in this session. The guide below may still describe these, but calls that use them are rejected:
 ${lines.join("\n")}`;
 }
+function disabledFeatureSectionNotice(surface) {
+  if (surface.features.size === 0) return void 0;
+  const replacement = surface.features.has("workflow-scripts") ? ` ${WORKFLOW_SCRIPTS_REPLACEMENT}` : "";
+  return `Some options and actions are disabled by config in this session; guide topic tool-reference lists them.${replacement}`;
+}
 
 // src/runs/background/active-async-capacity.ts
 import { createHash, randomUUID } from "node:crypto";
@@ -729,6 +735,7 @@ export {
   resolveDisabledFeatureSurface,
   disabledFeatureUseError,
   disabledFeatureNotice,
+  disabledFeatureSectionNotice,
   ActiveAsyncCapacityError,
   resolveMaxActiveAsyncRunsPerSession,
   resolveAbandonedSlotReleaseAfterMs,

package/bundle/{chunk-G4GZD3OJ.js → chunk-TJQJ3MEA.js}

@@ -6,35 +6,35 @@ import {
   resolveWorkflowForegroundSteeringTarget,
   steerAsyncRun,
   steerWorkflowForegroundTarget
-} from "./chunk-PBK2I7WY.js";
+} from "./chunk-527E3D2J.js";
 import {
   FLEET_STATUS_WIDGET_KEY,
   reportFleetWarning,
   runningTone,
   stepTaskSummary
-} from "./chunk-4Y2ROR7L.js";
+} from "./chunk-HXVKGS33.js";
 import {
   foregroundChildStateLabel,
   formatAsyncRunTranscript,
   stopAsyncRun
-} from "./chunk-FXUXCX2K.js";
+} from "./chunk-4BW55BTL.js";
 import {
   contextModeBadge,
   contextModeLabel,
   decodeUtf8Tail,
   listAsyncRuns
-} from "./chunk-6XJB7PIX.js";
-import "./chunk-46XKCPJR.js";
-import "./chunk-OYF6AFDY.js";
+} from "./chunk-OOFW75PV.js";
+import "./chunk-5ESXK62X.js";
+import "./chunk-BKFWQ642.js";
 import "./chunk-NIXWDZZV.js";
-import "./chunk-XSWOTIA3.js";
+import "./chunk-MHX22USZ.js";
 import "./chunk-7F6RKT6W.js";
 import "./chunk-CTPAE36Y.js";
 import "./chunk-7J4ZXMY7.js";
 import {
   getArtifactPaths,
   getArtifactsDir
-} from "./chunk-5TYMSZX3.js";
+} from "./chunk-VTMNBPCQ.js";
 import {
   snapshotExternalRuns
 } from "./chunk-UKG4V45O.js";
@@ -46,10 +46,10 @@ import {
   formatTokens,
   readStatus,
   shortenPath
-} from "./chunk-CIZQXJ5Q.js";
+} from "./chunk-7F5SK2U3.js";
 import {
   DIRS
-} from "./chunk-5LFLVSTM.js";
+} from "./chunk-JEZOSEWG.js";
 import "./chunk-YFCK7H2S.js";
 import "./chunk-Z7KVHQHL.js";
 

package/bundle/{chunk-5TYMSZX3.js → chunk-VTMNBPCQ.js}

@@ -1,9 +1,9 @@
 import {
   getAgentDir
-} from "./chunk-CIZQXJ5Q.js";
+} from "./chunk-7F5SK2U3.js";
 import {
   TEMP_ARTIFACTS_DIR
-} from "./chunk-5LFLVSTM.js";
+} from "./chunk-JEZOSEWG.js";
 
 // src/shared/artifacts.ts
 import * as fs from "node:fs";

package/bundle/{chunk-52UBALJL.js → chunk-WG2OTTAK.js}

@@ -3,11 +3,11 @@ import {
 } from "./chunk-7J4ZXMY7.js";
 import {
   getProjectSubagentsDir
-} from "./chunk-5TYMSZX3.js";
+} from "./chunk-VTMNBPCQ.js";
 import {
   getPiSpawnCommand,
   writeAtomicJson
-} from "./chunk-CIZQXJ5Q.js";
+} from "./chunk-7F5SK2U3.js";
 
 // src/inspectors/herdr/project-panes.ts
 import * as fs from "node:fs";

package/bundle/{chunk-N2BN7BF5.js → chunk-XA3DY6UG.js}

@@ -104,14 +104,16 @@ function listBackgroundWorkWakeChannels() {
   }
   return [...channels];
 }
-function snapshotBackgroundWork(sessionId, nowMs = Date.now()) {
-  validateString(sessionId, "Background-work snapshot sessionId", MAX_SESSION_ID_LENGTH);
+function snapshotBackgroundWork(sessionIds, nowMs = Date.now()) {
+  const accepted = [...new Set(sessionIds.map((value) => validateString(value, "Background-work snapshot sessionId", MAX_SESSION_ID_LENGTH)))];
+  const sessionId = accepted[0];
+  if (sessionId === void 0) throw new Error("Background-work snapshot needs at least one session id.");
   const providers = listBackgroundWorkProviders();
   const items = [];
   const identities = /* @__PURE__ */ new Set();
   for (const provider of providers) {
     try {
-      provider.reconcile?.({ sessionId, nowMs });
+      provider.reconcile?.({ sessionId, sessionIds: [...accepted], nowMs });
     } catch (error) {
       throw new Error(
         `Background-work provider '${provider.name}' reconcile failed: ${error instanceof Error ? error.message : String(error)}`,
@@ -120,7 +122,7 @@ function snapshotBackgroundWork(sessionId, nowMs = Date.now()) {
     }
     let active;
     try {
-      active = provider.listActiveWork({ sessionId, nowMs });
+      active = provider.listActiveWork({ sessionId, sessionIds: [...accepted], nowMs });
     } catch (error) {
       throw new Error(
         `Background-work provider '${provider.name}' listActiveWork failed: ${error instanceof Error ? error.message : String(error)}`,
@@ -140,7 +142,7 @@ function snapshotBackgroundWork(sessionId, nowMs = Date.now()) {
         throw new Error(`Background-work provider '${provider.name}' returned duplicate item '${item.id}' for session '${item.sessionId}'.`);
       }
       identities.add(identity);
-      if (item.sessionId === sessionId) items.push({ provider: provider.name, ...item });
+      if (accepted.includes(item.sessionId)) items.push({ provider: provider.name, ...item });
     });
   }
   return {

package/bundle/{chunk-PDZWJCHD.js → chunk-XXKG3P2W.js}

@@ -1,4 +1,5 @@
 import {
+  PLACED_RESTORE_UNSUPPORTED,
   REX_BUNDLE_BIN,
   REX_CALL_TIMEOUT_MS,
   REX_EXIT_GONE,
@@ -12,10 +13,10 @@ import {
   rexGlobalArgs,
   runBoundedCommand,
   sshMachineAccess
-} from "./chunk-RMQFMMAT.js";
+} from "./chunk-P2NCCTZP.js";
 import {
   package_default
-} from "./chunk-UTT254JE.js";
+} from "./chunk-6B4ITO2W.js";
 import {
   HERDR_PI_MODE_ENV,
   HERDR_PI_PROTOCOL,
@@ -28,8 +29,8 @@ import {
 import {
   getAgentDir,
   getPiSpawnCommand
-} from "./chunk-CIZQXJ5Q.js";
-import "./chunk-5LFLVSTM.js";
+} from "./chunk-7F5SK2U3.js";
+import "./chunk-JEZOSEWG.js";
 import "./chunk-YFCK7H2S.js";
 import "./chunk-Z7KVHQHL.js";
 
@@ -840,11 +841,11 @@ function safeRunId(value) {
   return validateHerdrPiRunId(`${prefix}_${randomBytes2(8).toString("hex")}`);
 }
 function serializeHerdrPiLaunch(launch) {
-  if (launch.storage.kind === "file") throw new Error("Pane-native remote Pi does not support fork, resume, or revival; use fresh context.");
+  if (launch.storage.kind === "file" && fs3.existsSync(launch.storage.sessionFile)) throw new Error(PLACED_RESTORE_UNSUPPORTED);
   if (launch.extensionPaths.length || launch.requiredExtensions?.length) throw new Error("Pane-native remote Pi cannot transfer local extension paths; install/configure pi-subagents on the remote machine.");
   if (launch.processEnv && Object.values(launch.processEnv).some((value) => value !== void 0 && value !== "__none__")) throw new Error("Pane-native remote Pi cannot transfer local bindings, MCP selections, or process environment.");
   if (launch.runtime.nestedRoute || launch.runtime.fanoutChild || launch.runtime.depth > 1) throw new Error("Nested delegation from a pane-native remote Pi is not supported.");
-  if (launch.excludeTools?.length || launch.runtime.permissions || launch.runtime.toolBudget || launch.runtime.requiredExtensions || launch.runtime.requiredTools?.length || launch.runtime.mcpDirectTools?.length) throw new Error("Pane-native remote Pi cannot yet represent exclusions, permission rules, tool budgets, MCP direct tools, or required-tool/extension contracts; remove machine placement.");
+  if (launch.excludeTools?.length || launch.runtime.permissions || launch.runtime.toolBudget || launch.runtime.requiredExtensions || launch.runtime.mcpDirectTools?.length) throw new Error("Pane-native remote Pi cannot yet represent exclusions, permission rules, tool budgets, MCP direct tools, or required-extension contracts; remove machine placement.");
   const resources = launch.remoteResources;
   if (!resources || !/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/u.test(resources.agent) || resources.skills?.some((name) => !/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/u.test(name)) || resources.toolCeiling?.some((name) => !/^[A-Za-z0-9_-]{1,64}$/u.test(name)) || resources.reads !== void 0 && resources.reads !== false && resources.reads.some((read) => typeof read !== "string" || Buffer.byteLength(read) > 4096)) throw new Error("Pane-native remote resources require bounded logical agent, skill, tool, and read names.");
   const args = [];
@@ -1254,6 +1255,8 @@ async function startPlacedPiSession(launch, owner, policy) {
     const configured = await Promise.race([bridge.configure(policy.resources), bridge.failure]);
     if (configured.nativeSessionId !== manifest.nativeSessionId || configured.agent !== policy.resources.agent) throw new Error("Remote Pi resource resolution identity mismatch.");
     if (!Array.isArray(configured.tools) || policy.resources.toolCeiling && configured.tools.some((tool) => !policy.resources.toolCeiling.includes(String(tool)))) throw new Error("Remote Pi active-tool ceiling acknowledgement mismatch.");
+    const missingRequired = (launch.runtime.requiredTools ?? []).filter((tool) => !configured.tools.includes(tool));
+    if (missingRequired.length) throw new Error(`Remote Pi agent '${policy.resources.agent}' did not activate required tools: ${missingRequired.join(", ")}.`);
     if (launch.model && configured.model !== launch.model.split(":")[0]) throw new Error(`Remote Pi model '${launch.model}' did not resolve to the requested provider/model.`);
     const identity = { runId, machineId: machine.id, target: isRexLocalMachine(machine) ? machine.id : machine.target, session: owner.host.sessionOf(connection), workspaceId: owned.workspaceId, tabId: owned.tabId, paneId: owned.paneId, terminalId, agentName, nativeSessionId: manifest.nativeSessionId, cwd: machine.cwd, runtimeDir };
     owner.journal(identity);

package/bundle/{chunk-PLCCBLPY.js → chunk-Y3I6H6DV.js}

@@ -1,12 +1,12 @@
 import {
   getProjectSubagentsDir
-} from "./chunk-5TYMSZX3.js";
+} from "./chunk-VTMNBPCQ.js";
 import {
   discoverAgents,
   formatUnknownAgentError,
   resolveAgentName,
   unknownAgentDiagnosticContext
-} from "./chunk-CIZQXJ5Q.js";
+} from "./chunk-7F5SK2U3.js";
 
 // src/agents/agent-refinements.ts
 import { createHash, randomUUID } from "node:crypto";

package/bundle/control-channel.js

@@ -1,9 +1,9 @@
 import {
   requestAsyncStop
-} from "./chunk-OYF6AFDY.js";
+} from "./chunk-BKFWQ642.js";
 import "./chunk-NIXWDZZV.js";
-import "./chunk-CIZQXJ5Q.js";
-import "./chunk-5LFLVSTM.js";
+import "./chunk-7F5SK2U3.js";
+import "./chunk-JEZOSEWG.js";
 import "./chunk-YFCK7H2S.js";
 import "./chunk-Z7KVHQHL.js";
 export {

package/bundle/index.js

@@ -17,7 +17,7 @@ function readInstalledPackageVersion() {
 var loadedPackageVersion = readInstalledPackageVersion();
 
 // index.ts
-var registerExtension = process.env[HERDR_PI_MODE_ENV] === "1" ? (await import("./chunk-JYUKW2SY.js")).default : process.env.PI_SUBAGENT_CHILD === "1" ? void 0 : (await import("./chunk-IVAE5Z6Q.js")).default;
+var registerExtension = process.env[HERDR_PI_MODE_ENV] === "1" ? (await import("./chunk-CNLDYEH4.js")).default : process.env.PI_SUBAGENT_CHILD === "1" ? void 0 : (await import("./chunk-HJJAVHFB.js")).default;
 function registerSubagentExtension(pi) {
   const installedVersion = readInstalledPackageVersion();
   if (installedVersion !== loadedPackageVersion) {

package/bundle/intercom-bridge.js

@@ -1,9 +1,9 @@
 import {
   resolveIntercomSessionTarget
-} from "./chunk-XSWOTIA3.js";
+} from "./chunk-MHX22USZ.js";
 import "./chunk-7F6RKT6W.js";
-import "./chunk-CIZQXJ5Q.js";
-import "./chunk-5LFLVSTM.js";
+import "./chunk-7F5SK2U3.js";
+import "./chunk-JEZOSEWG.js";
 import "./chunk-YFCK7H2S.js";
 import "./chunk-Z7KVHQHL.js";
 export {