pi-subagents 0.83.0 → 0.84.0

package/CHANGELOG.md

@@ -2,11 +2,48 @@
 
 ## [Unreleased]
 
+## [0.84.0] - 2026-10-28
+
+### Highlights
+
+- Security fix: workflow scripts can no longer reach the Pi process outside their sandbox. Upgrade if you use workflow scripts.
+- A locked-down background agent that fails because one of your extensions' providers did not load in it now says which provider and how to load it.
+- Old background runs are now actually deleted from disk.
+
+### Security
+
+- Workflow scripts could reach the Pi process outside their sandbox. Upgrade to this version; see [GHSA-6v8j-6w28-2w8r](https://github.com/nicobailon/pi-subagents/security/advisories/GHSA-6v8j-6w28-2w8r) for affected versions and a workaround. Workflow scripts can no longer set `Error.prepareStackTrace`, and a script that calls `import()`, which always failed inside a workflow, is now rejected before it runs.
+
+### Fixed
+
+- Old background runs are now deleted from disk. Background runs are meant to be removed 30 days after they finish, but a run was kept forever while its Pi session file still existed, and session files are never deleted, so almost no run was ever removed. A run whose session still exists is now kept for 90 days, so you can still resume it for that long, and is then removed like any other finished run. Thanks to [@LCorleone](https://github.com/LCorleone) for the report and fix, and [@isjiajia01](https://github.com/isjiajia01) for reproducing it. (#3098)
+- A background agent that loads no ambient extensions (for example one with `extensions: []`) now says so when it fails on a model whose provider one of your extensions registers or overrides. That extension never loaded in the child, so the child sent its requests through the built-in provider of the same name and failed with an unrelated provider error. The failure now names the provider and how to load its extension for that agent. Thanks to [@Yivas](https://github.com/Yivas) for the report. (#3100)
+
+## [0.83.1] - 2026-10-27
+
+### Highlights
+
+- Stopping, interrupting, or resuming a subagent can no longer act on the wrong run: an interrupt with no id is refused, and resuming a worktree child while it is still cleaning up no longer runs it in your main checkout.
+- A mission you start on purpose stays open until its result is checked, instead of showing `completed` on the writer's own report.
+- Capability limits registered by session id, as the docs show, now cover background runs and workflow children, not only foreground launches.
+- Agent files with a blank line inside an indented block are read in full, so settings below that line are no longer dropped.
+
+### Fixed
+
+- `subagent({ action: "interrupt" })` without an id is now refused with "action='interrupt' requires id.", the same as `stop`, `steer`, and `resume`. Before, it interrupted the last foreground run or the newest background run, so a call that lost its id could interrupt the wrong child. When an id matches no run, `stop`, `interrupt`, and `resume` now name that id in the error. Thanks to [@mannainsect](https://github.com/mannainsect) for the report. (#3081)
+- Resuming a background child that ran in its own worktree (`worktree: true`) no longer continues it in your main checkout. If you resumed it in the few seconds while it was saving its changes and removing its worktree, the child could start in your main checkout and commit or switch branches there, or start in a deleted worktree. That resume is now refused with a message to retry once the run finishes cleaning up. Thanks to [@peskycipher](https://github.com/peskycipher) for the report and [@isjiajia01](https://github.com/isjiajia01) for narrowing it down. (#3083)
+- A mission you start with `mission` or `missionId` no longer becomes `completed` when nothing confirmed its result. Before, a background writer run with only its own report marked its mission `completed`, so a claimed result looked like a proven one. When the run, or any workflow child in the mission, ends with acceptance `review-required`, `rejected`, `claimed`, or `pending`, the mission now stays `waiting`, and `mission.show` lists each child's acceptance status. Close it with `mission.close` after you check the result. A `gate` or `acceptance.verify` command alone does not complete a writer run's mission, because writer runs also need a review; add `review: { required: false }` to the `acceptance` policy when the command is enough ([missions.md](docs/missions.md)). Missions created automatically for ordinary launches still complete as before. Thanks to [@kiote](https://github.com/kiote). (#3078)
+- A capability ceiling registered the way the docs show, with `ctx.sessionManager.getSessionId()`, now applies in saved sessions. Before, most checks looked it up by session file path, so background launches, workflow children, and `{ action: "list" }` ignored it and only foreground launches were blocked. Every check now uses the session id, so a ceiling registered by session file path no longer applies. Thanks to [@corobis](https://github.com/corobis) for the report. (#3087)
+- A blank line inside an indented block in an agent file's frontmatter, such as an `external-cli` script argument with an empty line, cut the value off there and dropped every setting below it. The whole block is now read. Lists that used to stop at a blank line, such as `tools:`, now include their later entries, so an agent can get tools it did not get before. `|` and `>` blocks are unchanged. Thanks to [@jbachorik](https://github.com/jbachorik). (#3089)
+- A workflow script that called `runs.run({ key, agent, task })` with a single object passed validation and then failed with "runs.run has an invalid key.". Validation now rejects that call, and both the validation error and the running script show the right forms: `runs.run("plan", { agent, task })` or `runs.all([{ key, agent, task }])`. Thanks to [@brunovcosta](https://github.com/brunovcosta) for the report. (#3088)
+- In a project you have not trusted, agent lookup no longer scans the project's `.git`, `.pi`, and `.agents` folders on every call. It already ignored what was in them, but it still listed them to decide when to refresh, so ordinary git activity made it rebuild its agent list. Thanks to [@ArietidsZ](https://github.com/ArietidsZ). (#3080)
+- Long errors and verdicts in the `runs.lanes` result are now cut at a whole character, so they no longer end in a broken character or go over the 256-byte limit. Thanks to [@XLi-hub](https://github.com/XLi-hub). (#3097)
+
 ## [0.83.0] - 2026-10-25
 
 ### Highlights
 
-- Subagents no longer break your session's prompt cache on models that take system messages mid-conversation, so each turn after a subagent returns is cheaper and faster. A child that runs its own subagents keeps its cache too.
+- When an extension or tool search changes the system prompt or tools during a session, subagent results no longer make every later turn miss the prompt cache, so those turns are cheaper and faster again. A child that runs its own subagents keeps its cache too.
 - Subagents that finished their work always report it: background runs no longer end as "exited with code 0 before writing a result", and foreground calls no longer hang when the child stops after its final reply.
 - Children placed on another machine (a Rex tab, Rex over SSH, or a Herdr pane) launch instead of being refused, and workflows no longer crash on Windows standalone Pi builds.
 - Extensions and editors that show subagent activity can refresh on a new event instead of polling, and `bg_wait` now waits for background jobs that other extensions report, such as surf-cli's.
@@ -18,7 +55,7 @@
 
 ### Fixed
 
-- On models that take system messages mid-conversation, the first request of every new turn after the first subagent notice missed the prompt cache, so most of the context was sent uncached again each turn. A child that had called `subagent` missed it on every later request. The way pi-subagents marked its notices and removed parent-only subagent history made Pi move every mid-conversation system message to the start of the prompt; both now leave those messages where they are. Thanks to [@adameq](https://github.com/adameq) for the report. (#3058, #3063)
+- When an extension or tool search changed the system prompt or tools during a session, the first request of every new turn after the first subagent notice missed the prompt cache, so most of the context was sent uncached again each turn. A child that had called `subagent` missed it on every later request. On models where Pi adds those changes further down the conversation instead of rewriting the start of the prompt (Anthropic and OpenAI models, among others), the way pi-subagents marked its notices and removed parent-only subagent history made Pi move them all back into the start of the prompt, which then changed every turn. Both now leave those changes where they are. Thanks to [@adameq](https://github.com/adameq) for the report. (#3058, #3063)
 - Background subagents that finished their work no longer end as "exited with code 0 before writing a result". When a child stopped after its final reply without reporting that it had settled, or when one of its extensions hung on shutdown, the background runner process exited with the result still unwritten. It now ends the child after its final reply, waits for any compaction that runs after that reply, and waits at most 5 seconds for shutdown handlers. A foreground subagent whose child stops the same way now returns its reply too, instead of the call never returning. Thanks to [@perriea](https://github.com/perriea). (#3051)
 - Background jobs that other extensions report to `bg_wait`, such as surf-cli's or pi-agent-wait's, are now waited for in saved sessions. Before, `bg_wait` and the wait at the end of a `pi -p` run matched a job only when the extension named the session by its file path, so a job named by the session id was ignored and they returned while it was still running. Both forms are now accepted. Thanks to [@cad0p](https://github.com/cad0p) for the report. (#3071)
 - With features turned off in `disabledFeatures`, every `guide` topic now starts with a notice listing what is disabled, and every section with a one-line pointer to that list, not only the `tool-reference` topic. Before, an agent reading the workflow guide with `workflow-scripts` disabled was taught `workflow: true` and `args`, and its call was rejected. With workflow scripts disabled, the notice also says to use the top-level `tasks` or `chain` fields instead. Thanks to [@jefftheai](https://github.com/jefftheai) for the report. (#3057)

package/bundle/agents.js

@@ -2,14 +2,14 @@ import {
   RUNTIME_AGENT_REGISTER_EVENT,
   RUNTIME_AGENT_REGISTER_VERSION,
   registerAgentViaEvents
-} from "./chunk-MBDOYZ2V.js";
+} from "./chunk-2S4K53MV.js";
 import {
   registerRuntimeAgent
-} from "./chunk-JHZ6DZ5M.js";
-import "./chunk-7F5SK2U3.js";
+} from "./chunk-G2Z6ZH26.js";
+import "./chunk-LNRJCP2Y.js";
 import "./chunk-JEZOSEWG.js";
 import "./chunk-YFCK7H2S.js";
-import "./chunk-Z7KVHQHL.js";
+import "./chunk-QXASAHIA.js";
 export {
   RUNTIME_AGENT_REGISTER_EVENT,
   RUNTIME_AGENT_REGISTER_VERSION,

package/bundle/capability-ceiling.js

@@ -8,7 +8,7 @@ import {
   registerSubagentCapabilityCeiling,
   resolveCurrentSubagentCapabilityCeiling,
   resolveSubagentCapabilityCeiling
-} from "./chunk-Z7KVHQHL.js";
+} from "./chunk-QXASAHIA.js";
 export {
   SUBAGENT_CAPABILITY_CEILING_REGISTRY_KEY,
   SUBAGENT_CAPABILITY_CEILING_VERSION,

package/bundle/child-tool-plan.js

@@ -1,11 +1,11 @@
 import {
   resolvePiLaunchToolPlan
-} from "./chunk-CSSZRTKY.js";
+} from "./chunk-V2BZYLEP.js";
 import "./chunk-CTPAE36Y.js";
-import "./chunk-7F5SK2U3.js";
+import "./chunk-LNRJCP2Y.js";
 import "./chunk-JEZOSEWG.js";
 import "./chunk-YFCK7H2S.js";
-import "./chunk-Z7KVHQHL.js";
+import "./chunk-QXASAHIA.js";
 export {
   resolvePiLaunchToolPlan
 };

package/bundle/{chunk-HJJAVHFB.js → chunk-235AWJUQ.js}

@@ -10,10 +10,10 @@ import {
   setInlineWorkflowCoverage,
   setMainThinkingLevelSource,
   widgetRenderKey
-} from "./chunk-HXVKGS33.js";
+} from "./chunk-AKOIVLA5.js";
 import {
   package_default
-} from "./chunk-6B4ITO2W.js";
+} from "./chunk-NKQ6JNAS.js";
 import {
   EXTERNAL_JOB_BRIDGE_REQUEST_DIR,
   REVIVAL_ORIGIN_FILE,
@@ -61,7 +61,7 @@ import {
   snapshotProviderDiagnostics,
   workflowResumeClaimState,
   workflowResumeRefusal
-} from "./chunk-CDI3GMNV.js";
+} from "./chunk-DZDETGRJ.js";
 import {
   CONTACT_SUPERVISOR_TOOL_NAME,
   NATIVE_SUPERVISOR_TOOL_NAME,
@@ -89,14 +89,14 @@ import {
   resolveWaitToolConfig,
   setDeclarationPinning,
   topLevelSupervisorTool
-} from "./chunk-CZTMUBUI.js";
+} from "./chunk-7BWGNDNK.js";
 import {
   deliverAsyncRunStop,
   ownerConfirmedDead,
   readSessionMessagesTail,
   resolveSubagentRunId,
   restoreForegroundRunHistory
-} from "./chunk-4BW55BTL.js";
+} from "./chunk-NENDSQUY.js";
 import {
   ASYNC_STATUS_SNAPSHOT_KIND,
   ASYNC_STATUS_SNAPSHOT_VERSION,
@@ -118,7 +118,7 @@ import {
   resolveAsyncStatusChild,
   stopStoppableAsyncStatusChildren,
   withCachedUiContext
-} from "./chunk-OOFW75PV.js";
+} from "./chunk-L3WFKBEI.js";
 import "./chunk-NF7IEKBH.js";
 import {
   disabledFeatureUseError,
@@ -129,7 +129,7 @@ import {
   resolveDisabledFeatureSurface,
   resolveMaxActiveAsyncRunsPerSession,
   resolveScheduledStoreRoot
-} from "./chunk-RZJN63GU.js";
+} from "./chunk-PALJGGYC.js";
 import {
   ACTIVE_RUN_INDEX_DIR,
   MissionNotFoundError,
@@ -178,28 +178,28 @@ import {
   withWorkflowChildRunModel,
   writeAsyncResultFile,
   writeResultIndexForData
-} from "./chunk-5ESXK62X.js";
-import "./chunk-BKFWQ642.js";
+} from "./chunk-CGN2TVE7.js";
+import "./chunk-F4ASL6OV.js";
 import {
   shouldUseNativeFsWatch
 } from "./chunk-NIXWDZZV.js";
 import {
   validateIntercomBridgeConfig
-} from "./chunk-MHX22USZ.js";
+} from "./chunk-C5P5CHYK.js";
 import "./chunk-7F6RKT6W.js";
-import "./chunk-CSSZRTKY.js";
+import "./chunk-V2BZYLEP.js";
 import "./chunk-CTPAE36Y.js";
 import {
   listHerdrProjectPaneRoots,
   restoreHerdrProjectPaneSnapshots
-} from "./chunk-WG2OTTAK.js";
+} from "./chunk-2DHZTCOL.js";
 import "./chunk-7J4ZXMY7.js";
 import {
   cleanupAllArtifactDirs,
   cleanupOldArtifacts,
   getArtifactPaths,
   getArtifactsDir
-} from "./chunk-VTMNBPCQ.js";
+} from "./chunk-D3JAFGMO.js";
 import {
   listBackgroundWorkProviders
 } from "./chunk-XA3DY6UG.js";
@@ -207,12 +207,12 @@ import "./chunk-YYREO77V.js";
 import "./chunk-UKG4V45O.js";
 import {
   registerRuntimeAgentEventListener
-} from "./chunk-MBDOYZ2V.js";
+} from "./chunk-2S4K53MV.js";
 import {
   clearRuntimeAgentsForPi,
   listRuntimeAgentConfigs,
   mergeRuntimeAgents
-} from "./chunk-JHZ6DZ5M.js";
+} from "./chunk-G2Z6ZH26.js";
 import {
   DEFAULT_FILE_SYSTEM_RETRY_DELAYS_MS,
   EXTRA_AGENT_DIRS_ENV,
@@ -252,7 +252,7 @@ import {
   waitForFileSystemRetry,
   withSettingsFileLease,
   writeAtomicJson
-} from "./chunk-7F5SK2U3.js";
+} from "./chunk-LNRJCP2Y.js";
 import {
   DEFAULT_ARTIFACT_CONFIG,
   DIRS,
@@ -293,7 +293,7 @@ import {
 import {
   isAgentAllowedByCapabilityCeiling,
   resolveCurrentSubagentCapabilityCeiling
-} from "./chunk-Z7KVHQHL.js";
+} from "./chunk-QXASAHIA.js";
 
 // src/extension/index.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
@@ -1215,7 +1215,9 @@ var ASYNC_RETENTION_DAYS = 30;
 var ASYNC_RETENTION_BATCH_SIZE = 100;
 var ASYNC_RETENTION_DELAY_MS = 6e4;
 var ASYNC_RETENTION_TOMBSTONE_GRACE_MS = 24 * 60 * 60 * 1e3;
+var RESUMABLE_RETENTION_DAYS = 90;
 var RETENTION_MS = ASYNC_RETENTION_DAYS * 24 * 60 * 60 * 1e3;
+var RESUMABLE_RETENTION_MS = RESUMABLE_RETENTION_DAYS * 24 * 60 * 60 * 1e3;
 var LOCK_NAME = ".async-retention.lock";
 var CURSOR_NAME = ".async-retention-cursor.json";
 var LOG_NAME = "async-retention-maintenance.jsonl";
@@ -1389,8 +1391,8 @@ function runSkipReason(input) {
   if (hasNestedReferences(status)) return "nested-reference";
   if (missionReferenceBlocksReclaim(runDir, input.resultsDir, status.runId)) return "mission-reference";
   if (hasUnresolvedRunHandoff(runDir, status)) return "handoff-reference";
-  if (hasResumableContract(runDir, status)) return "resumable";
   const timestamp = statusTimestamp(status, runDir);
+  if (hasResumableContract(runDir, status) && (timestamp === void 0 || timestamp > input.resumableCutoff)) return "resumable";
   if (timestamp === void 0) return "unknown-age";
   if (timestamp > input.cutoff) return "recent";
   return void 0;
@@ -1558,10 +1560,10 @@ function resultSkipReason(input) {
   if (missionObserverIndexExists(input.resultsDir, runId)) return "mission-reference";
   if (input.data.mode === "workflow" || completionMode(input.data) === "workflow" || typeof input.data.parentWorkflowRunId === "string" || typeof input.data.workflowKey === "string") return "workflow-reference";
   if (hasUnresolvedResultHandoff(input.data)) return "handoff-reference";
-  if (resultHasResumableSession(input.data)) return "resumable";
+  const timestamp = resultTimestamp(input.data, input.candidate.path);
+  if (resultHasResumableSession(input.data) && (timestamp === void 0 || timestamp > input.resumableCutoff)) return "resumable";
   if (input.candidate.kind === "archive" && fs4.existsSync(path3.join(input.resultsDir, "completion-replay", `${encodeURIComponent(runId)}.json`))) return "replay-reference";
   if (!terminalResult(input.data) && input.candidate.kind !== "replay" && input.candidate.kind !== "archive" && input.candidate.kind !== "tombstone") return "non-terminal-result";
-  const timestamp = resultTimestamp(input.data, input.candidate.path);
   if (timestamp === void 0) return "unknown-age";
   if (timestamp > input.cutoff) return "recent";
   return void 0;
@@ -1747,6 +1749,7 @@ async function cleanupAsyncRetention(options) {
     if (markCancelled()) return finish();
     const protectedRunIds = new Set(options.protectedRunIds ?? []);
     const cutoff = currentTime - retentionMs;
+    const resumableCutoff = currentTime - RESUMABLE_RETENTION_MS;
     const cursor = readCursor(maintenanceRoot);
     const runBudget = Math.ceil(batchSize / 2);
     const resultBudget = batchSize - runBudget;
@@ -1811,7 +1814,7 @@ async function cleanupAsyncRetention(options) {
           status = reconciliation.status ?? void 0;
           if (reconciliation.repaired) result.repairedRuns += 1;
         }
-        const initialReason = runSkipReason({ runDir, status, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, cutoff, protectedRunIds, waitRunIds: waitReferences.runIds });
+        const initialReason = runSkipReason({ runDir, status, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, cutoff, resumableCutoff, protectedRunIds, waitRunIds: waitReferences.runIds });
         if (initialReason) {
           increment(result.skipped, initialReason);
           continue;
@@ -1826,7 +1829,7 @@ async function cleanupAsyncRetention(options) {
             continue;
           }
           const freshWaitReferences2 = parseWaitRunIds(waitSubscriptionsDir);
-          const finalReason = freshWaitReferences2.safe ? runSkipReason({ runDir, status, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, cutoff, protectedRunIds, waitRunIds: freshWaitReferences2.runIds }) : "wait-references-unknown";
+          const finalReason = freshWaitReferences2.safe ? runSkipReason({ runDir, status, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, cutoff, resumableCutoff, protectedRunIds, waitRunIds: freshWaitReferences2.runIds }) : "wait-references-unknown";
           if (finalReason) {
             increment(result.skipped, `recheck-${finalReason}`);
             continue;
@@ -1850,7 +1853,7 @@ async function cleanupAsyncRetention(options) {
         }
         const recheckStatus = readStatus2(tombstone);
         const freshWaitReferences = parseWaitRunIds(waitSubscriptionsDir);
-        const recheckReason = freshWaitReferences.safe ? runSkipReason({ runDir: tombstone, status: recheckStatus, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, cutoff, protectedRunIds, waitRunIds: freshWaitReferences.runIds }) : "wait-references-unknown";
+        const recheckReason = freshWaitReferences.safe ? runSkipReason({ runDir: tombstone, status: recheckStatus, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, cutoff, resumableCutoff, protectedRunIds, waitRunIds: freshWaitReferences.runIds }) : "wait-references-unknown";
         if (recheckReason) {
           if (!fs4.existsSync(runDir)) {
             fs4.renameSync(tombstone, runDir);
@@ -1882,7 +1885,7 @@ async function cleanupAsyncRetention(options) {
           continue;
         }
         const data = readJson(candidate.path);
-        const reason = resultSkipReason({ candidate, data, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, maintenanceRoot, cutoff, protectedRunIds, waitRunIds: waitReferences.runIds });
+        const reason = resultSkipReason({ candidate, data, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, maintenanceRoot, cutoff, resumableCutoff, protectedRunIds, waitRunIds: waitReferences.runIds });
         if (reason) {
           increment(result.skipped, reason);
           continue;
@@ -1893,7 +1896,7 @@ async function cleanupAsyncRetention(options) {
             continue;
           }
           const freshWaitReferences2 = parseWaitRunIds(waitSubscriptionsDir);
-          const finalReason = freshWaitReferences2.safe ? resultSkipReason({ candidate, data, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, maintenanceRoot, cutoff, protectedRunIds, waitRunIds: freshWaitReferences2.runIds }) : "wait-references-unknown";
+          const finalReason = freshWaitReferences2.safe ? resultSkipReason({ candidate, data, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, maintenanceRoot, cutoff, resumableCutoff, protectedRunIds, waitRunIds: freshWaitReferences2.runIds }) : "wait-references-unknown";
           if (finalReason) {
             increment(result.skipped, `recheck-${finalReason}`);
             continue;
@@ -1910,7 +1913,7 @@ async function cleanupAsyncRetention(options) {
         const tombstoneCandidate = { ...candidate, path: tombstone, kind: "tombstone" };
         const recheckData = readJson(tombstone);
         const freshWaitReferences = parseWaitRunIds(waitSubscriptionsDir);
-        const recheckReason = freshWaitReferences.safe ? resultSkipReason({ candidate: tombstoneCandidate, data: recheckData, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, maintenanceRoot, cutoff, protectedRunIds, waitRunIds: freshWaitReferences.runIds }) : "wait-references-unknown";
+        const recheckReason = freshWaitReferences.safe ? resultSkipReason({ candidate: tombstoneCandidate, data: recheckData, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, maintenanceRoot, cutoff, resumableCutoff, protectedRunIds, waitRunIds: freshWaitReferences.runIds }) : "wait-references-unknown";
         if (recheckReason) {
           if (!fs4.existsSync(candidate.path)) {
             fs4.renameSync(tombstone, candidate.path);
@@ -5182,7 +5185,7 @@ function registerSlashCommands(pi, state, options = {}) {
     }
     fleetOpen = true;
     try {
-      const { openSubagentFleet } = await import("./chunk-TJQJ3MEA.js");
+      const { openSubagentFleet } = await import("./chunk-PV63UFUR.js");
       await openSubagentFleet(ctx, state, { asyncDirRoot: DIRS.async, inspectorPlugins: () => getInspectorPlugins(pi), resultsDir: DIRS.results, fleetKeybindings: options.fleetKeybindings });
     } finally {
       fleetOpen = false;
@@ -8571,7 +8574,7 @@ function registerSubagentExtension(pi) {
     const ctx = withLastUiContext((current) => current);
     if (!ctx) return;
     try {
-      const { openSubagentFleet } = await import("./chunk-TJQJ3MEA.js");
+      const { openSubagentFleet } = await import("./chunk-PV63UFUR.js");
       await openSubagentFleet(ctx, state, { initialKey: itemKey, asyncDirRoot: DIRS.async, resultsDir: DIRS.results, fleetKeybindings: config.fleetKeybindings, inspectorPlugins: () => getInspectorPlugins(pi) });
     } catch (error) {
       if (isStaleExtensionContextError(error)) {
@@ -8767,7 +8770,7 @@ function registerSubagentExtension(pi) {
   let executor;
   let executorPromise;
   let executorModulePromise;
-  const loadExecutorModule = () => executorModulePromise ??= import("./chunk-LDMXJIA6.js");
+  const loadExecutorModule = () => executorModulePromise ??= import("./chunk-JG4QKI5M.js");
   const getExecutor = () => {
     executorPromise ??= loadExecutorModule().then(({ createSubagentExecutor }) => {
       executor = createSubagentExecutor(executorDeps);
@@ -8781,7 +8784,7 @@ function registerSubagentExtension(pi) {
     modulePreloadTimer = setTimeout(() => {
       loadExecutorModule().catch(() => {
       });
-      if (fleetViewEnabled) import("./chunk-TJQJ3MEA.js").catch(() => {
+      if (fleetViewEnabled) import("./chunk-PV63UFUR.js").catch(() => {
       });
     }, MODULE_PRELOAD_DELAY_MS);
     modulePreloadTimer.unref?.();
@@ -8947,7 +8950,7 @@ ${close}` }]
     const activeRuns = config.activeRunsPrompt === true ? buildActiveRunsSection(state.asyncJobs.values(), sessionId) : void 0;
     if (activeRuns) event.systemPromptOptions.sections.active_subagents = activeRuns;
     if (!event.systemPromptOptions.selectedTools.includes("subagent")) return;
-    const catalog = buildAdvertisedAgentCatalog(advertisedAgents, resolveCurrentSubagentCapabilityCeiling(sessionId), recordedPromptSection(pi, "advertised_subagents"));
+    const catalog = buildAdvertisedAgentCatalog(advertisedAgents, resolveCurrentSubagentCapabilityCeiling(ctx.sessionManager.getSessionId() ?? void 0), recordedPromptSection(pi, "advertised_subagents"));
     if (catalog) event.systemPromptOptions.sections.advertised_subagents = catalog;
   });
   registerWaitTool(pi, state, waitToolConfig.enabled, waitSubscriptionManager, waitToolConfig.defaultTimeoutMs, void 0, supervisorChannel.hasPendingRequests);
@@ -9361,7 +9364,7 @@ ${close}` }]
     hasPendingSupervisorRequest: () => [...supervisorChannel.pending.values()].some((request) => request.expectsReply),
     advertisedPrompt: async () => {
       await waitForAdvertisement();
-      return buildAdvertisedAgentPrompt(advertisedAgents, resolveCurrentSubagentCapabilityCeiling(state.currentSessionId ?? void 0));
+      return buildAdvertisedAgentPrompt(advertisedAgents, resolveCurrentSubagentCapabilityCeiling(state.supervisorOwnerSessionId ?? void 0));
     }
   });
 }

package/bundle/{chunk-P2NCCTZP.js → chunk-2D52JFLF.js}

@@ -2,7 +2,7 @@ import {
   CODE_OWNED_EXTERNAL_CLI_ADAPTER_IDS,
   getAgentDir,
   getProjectConfigDir
-} from "./chunk-7F5SK2U3.js";
+} from "./chunk-LNRJCP2Y.js";
 
 // src/runs/shared/rex-machine.ts
 import { spawnSync } from "node:child_process";

package/bundle/{chunk-WG2OTTAK.js → chunk-2DHZTCOL.js}

@@ -3,11 +3,11 @@ import {
 } from "./chunk-7J4ZXMY7.js";
 import {
   getProjectSubagentsDir
-} from "./chunk-VTMNBPCQ.js";
+} from "./chunk-D3JAFGMO.js";
 import {
   getPiSpawnCommand,
   writeAtomicJson
-} from "./chunk-7F5SK2U3.js";
+} from "./chunk-LNRJCP2Y.js";
 
 // src/inspectors/herdr/project-panes.ts
 import * as fs from "node:fs";

package/bundle/{chunk-MBDOYZ2V.js → chunk-2S4K53MV.js}

@@ -1,6 +1,6 @@
 import {
   registerRuntimeAgent
-} from "./chunk-JHZ6DZ5M.js";
+} from "./chunk-G2Z6ZH26.js";
 
 // src/agents/runtime-agent-events.ts
 var RUNTIME_AGENT_REGISTER_EVENT = "pi-subagents:runtime-agent-register:v1";

package/bundle/{chunk-527E3D2J.js → chunk-4E7BKDTX.js}

@@ -1,13 +1,13 @@
 import {
   isTrustedRecordedSessionFile,
   resolveSubagentRunId
-} from "./chunk-4BW55BTL.js";
+} from "./chunk-NENDSQUY.js";
 import {
   agentStreamOptions,
   opencodeSessionHeaders,
   ownsRun,
   resolveAsyncResumeTarget
-} from "./chunk-OOFW75PV.js";
+} from "./chunk-L3WFKBEI.js";
 import {
   currentCompletionOwnerId,
   listMissions,
@@ -16,12 +16,12 @@ import {
   reconcileAsyncRun,
   resolveAuthorityDecision,
   resolveMissionStoreLocation
-} from "./chunk-5ESXK62X.js";
+} from "./chunk-CGN2TVE7.js";
 import {
   deliverInterruptRequest,
   queueRevivalBrief,
   requestAsyncSteer
-} from "./chunk-BKFWQ642.js";
+} from "./chunk-F4ASL6OV.js";
 import {
   formatShellCommand
 } from "./chunk-7J4ZXMY7.js";
@@ -32,7 +32,7 @@ import {
   tryLease,
   writeAtomicJson,
   writePrivateAtomicJson
-} from "./chunk-7F5SK2U3.js";
+} from "./chunk-LNRJCP2Y.js";
 import {
   DIRS
 } from "./chunk-JEZOSEWG.js";

package/bundle/{chunk-CZTMUBUI.js → chunk-7BWGNDNK.js}

@@ -11,7 +11,7 @@ import {
   projectTimeoutRecovery,
   readAsyncRecoveryDescriptor,
   utf8Tail
-} from "./chunk-OOFW75PV.js";
+} from "./chunk-L3WFKBEI.js";
 import {
   MAX_ARGS_BYTES,
   MAX_ARGS_DEPTH,
@@ -24,13 +24,13 @@ import {
   resultFilePath,
   resultPayloadMatchesSessionRun,
   resultPayloadPathForSessionRun
-} from "./chunk-5ESXK62X.js";
+} from "./chunk-CGN2TVE7.js";
 import {
   shouldUseNativeFsWatch
 } from "./chunk-NIXWDZZV.js";
 import {
   PROJECT_SUBAGENTS_RELATIVE_DIR
-} from "./chunk-VTMNBPCQ.js";
+} from "./chunk-D3JAFGMO.js";
 import {
   listBackgroundWorkWakeChannels,
   snapshotBackgroundWork
@@ -55,7 +55,7 @@ import {
   withSettingsFileLease,
   writeAtomicJson,
   writePrivateAtomicJson
-} from "./chunk-7F5SK2U3.js";
+} from "./chunk-LNRJCP2Y.js";
 import {
   ASYNC_DIR,
   DIRS,

package/bundle/{chunk-HXVKGS33.js → chunk-AKOIVLA5.js}

@@ -1,6 +1,6 @@
 import {
   buildWorkflowChatProgressRows
-} from "./chunk-4BW55BTL.js";
+} from "./chunk-NENDSQUY.js";
 import {
   aggregateStepStatus,
   contextModeBadge,
@@ -25,13 +25,13 @@ import {
   projectWorkflowChecklist,
   withCachedUiContext,
   workflowGraphStageNodes
-} from "./chunk-OOFW75PV.js";
+} from "./chunk-L3WFKBEI.js";
 import {
   flatToLogicalStepIndex,
   formatWorkflowJsonPreview,
   hostStepReportName,
   hostStepVerdictLabel
-} from "./chunk-5ESXK62X.js";
+} from "./chunk-CGN2TVE7.js";
 import {
   snapshotExternalRuns
 } from "./chunk-UKG4V45O.js";
@@ -49,7 +49,7 @@ import {
   getSingleResultOutput,
   shortenPath,
   unresolvedChildWatchdogBlockers
-} from "./chunk-7F5SK2U3.js";
+} from "./chunk-LNRJCP2Y.js";
 import {
   MAX_WIDGET_JOBS,
   WIDGET_ANIMATION_INTERVAL_MS,

package/bundle/{chunk-MHX22USZ.js → chunk-C5P5CHYK.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-7F6RKT6W.js";
 import {
   getAgentDir
-} from "./chunk-7F5SK2U3.js";
+} from "./chunk-LNRJCP2Y.js";
 
 // src/intercom/intercom-bridge.ts
 import * as fs from "node:fs";