pi-subagents 0.83.1 → 0.84.0

package/CHANGELOG.md

@@ -2,6 +2,23 @@
 
 ## [Unreleased]
 
+## [0.84.0] - 2026-10-28
+
+### Highlights
+
+- Security fix: workflow scripts can no longer reach the Pi process outside their sandbox. Upgrade if you use workflow scripts.
+- A locked-down background agent that fails because one of your extensions' providers did not load in it now says which provider and how to load it.
+- Old background runs are now actually deleted from disk.
+
+### Security
+
+- Workflow scripts could reach the Pi process outside their sandbox. Upgrade to this version; see [GHSA-6v8j-6w28-2w8r](https://github.com/nicobailon/pi-subagents/security/advisories/GHSA-6v8j-6w28-2w8r) for affected versions and a workaround. Workflow scripts can no longer set `Error.prepareStackTrace`, and a script that calls `import()`, which always failed inside a workflow, is now rejected before it runs.
+
+### Fixed
+
+- Old background runs are now deleted from disk. Background runs are meant to be removed 30 days after they finish, but a run was kept forever while its Pi session file still existed, and session files are never deleted, so almost no run was ever removed. A run whose session still exists is now kept for 90 days, so you can still resume it for that long, and is then removed like any other finished run. Thanks to [@LCorleone](https://github.com/LCorleone) for the report and fix, and [@isjiajia01](https://github.com/isjiajia01) for reproducing it. (#3098)
+- A background agent that loads no ambient extensions (for example one with `extensions: []`) now says so when it fails on a model whose provider one of your extensions registers or overrides. That extension never loaded in the child, so the child sent its requests through the built-in provider of the same name and failed with an unrelated provider error. The failure now names the provider and how to load its extension for that agent. Thanks to [@Yivas](https://github.com/Yivas) for the report. (#3100)
+
 ## [0.83.1] - 2026-10-27
 
 ### Highlights

package/bundle/{chunk-5YIITCPD.js → chunk-235AWJUQ.js}

@@ -10,10 +10,10 @@ import {
   setInlineWorkflowCoverage,
   setMainThinkingLevelSource,
   widgetRenderKey
-} from "./chunk-ZVOAMTUQ.js";
+} from "./chunk-AKOIVLA5.js";
 import {
   package_default
-} from "./chunk-MABL3FUM.js";
+} from "./chunk-NKQ6JNAS.js";
 import {
   EXTERNAL_JOB_BRIDGE_REQUEST_DIR,
   REVIVAL_ORIGIN_FILE,
@@ -61,7 +61,7 @@ import {
   snapshotProviderDiagnostics,
   workflowResumeClaimState,
   workflowResumeRefusal
-} from "./chunk-F5DBXJ2G.js";
+} from "./chunk-DZDETGRJ.js";
 import {
   CONTACT_SUPERVISOR_TOOL_NAME,
   NATIVE_SUPERVISOR_TOOL_NAME,
@@ -89,14 +89,14 @@ import {
   resolveWaitToolConfig,
   setDeclarationPinning,
   topLevelSupervisorTool
-} from "./chunk-UFL7IYCW.js";
+} from "./chunk-7BWGNDNK.js";
 import {
   deliverAsyncRunStop,
   ownerConfirmedDead,
   readSessionMessagesTail,
   resolveSubagentRunId,
   restoreForegroundRunHistory
-} from "./chunk-VLFZIN6D.js";
+} from "./chunk-NENDSQUY.js";
 import {
   ASYNC_STATUS_SNAPSHOT_KIND,
   ASYNC_STATUS_SNAPSHOT_VERSION,
@@ -118,7 +118,7 @@ import {
   resolveAsyncStatusChild,
   stopStoppableAsyncStatusChildren,
   withCachedUiContext
-} from "./chunk-UYK5MZWE.js";
+} from "./chunk-L3WFKBEI.js";
 import "./chunk-NF7IEKBH.js";
 import {
   disabledFeatureUseError,
@@ -129,7 +129,7 @@ import {
   resolveDisabledFeatureSurface,
   resolveMaxActiveAsyncRunsPerSession,
   resolveScheduledStoreRoot
-} from "./chunk-QP5ZWNIS.js";
+} from "./chunk-PALJGGYC.js";
 import {
   ACTIVE_RUN_INDEX_DIR,
   MissionNotFoundError,
@@ -178,7 +178,7 @@ import {
   withWorkflowChildRunModel,
   writeAsyncResultFile,
   writeResultIndexForData
-} from "./chunk-RNIZLSEA.js";
+} from "./chunk-CGN2TVE7.js";
 import "./chunk-F4ASL6OV.js";
 import {
   shouldUseNativeFsWatch
@@ -1215,7 +1215,9 @@ var ASYNC_RETENTION_DAYS = 30;
 var ASYNC_RETENTION_BATCH_SIZE = 100;
 var ASYNC_RETENTION_DELAY_MS = 6e4;
 var ASYNC_RETENTION_TOMBSTONE_GRACE_MS = 24 * 60 * 60 * 1e3;
+var RESUMABLE_RETENTION_DAYS = 90;
 var RETENTION_MS = ASYNC_RETENTION_DAYS * 24 * 60 * 60 * 1e3;
+var RESUMABLE_RETENTION_MS = RESUMABLE_RETENTION_DAYS * 24 * 60 * 60 * 1e3;
 var LOCK_NAME = ".async-retention.lock";
 var CURSOR_NAME = ".async-retention-cursor.json";
 var LOG_NAME = "async-retention-maintenance.jsonl";
@@ -1389,8 +1391,8 @@ function runSkipReason(input) {
   if (hasNestedReferences(status)) return "nested-reference";
   if (missionReferenceBlocksReclaim(runDir, input.resultsDir, status.runId)) return "mission-reference";
   if (hasUnresolvedRunHandoff(runDir, status)) return "handoff-reference";
-  if (hasResumableContract(runDir, status)) return "resumable";
   const timestamp = statusTimestamp(status, runDir);
+  if (hasResumableContract(runDir, status) && (timestamp === void 0 || timestamp > input.resumableCutoff)) return "resumable";
   if (timestamp === void 0) return "unknown-age";
   if (timestamp > input.cutoff) return "recent";
   return void 0;
@@ -1558,10 +1560,10 @@ function resultSkipReason(input) {
   if (missionObserverIndexExists(input.resultsDir, runId)) return "mission-reference";
   if (input.data.mode === "workflow" || completionMode(input.data) === "workflow" || typeof input.data.parentWorkflowRunId === "string" || typeof input.data.workflowKey === "string") return "workflow-reference";
   if (hasUnresolvedResultHandoff(input.data)) return "handoff-reference";
-  if (resultHasResumableSession(input.data)) return "resumable";
+  const timestamp = resultTimestamp(input.data, input.candidate.path);
+  if (resultHasResumableSession(input.data) && (timestamp === void 0 || timestamp > input.resumableCutoff)) return "resumable";
   if (input.candidate.kind === "archive" && fs4.existsSync(path3.join(input.resultsDir, "completion-replay", `${encodeURIComponent(runId)}.json`))) return "replay-reference";
   if (!terminalResult(input.data) && input.candidate.kind !== "replay" && input.candidate.kind !== "archive" && input.candidate.kind !== "tombstone") return "non-terminal-result";
-  const timestamp = resultTimestamp(input.data, input.candidate.path);
   if (timestamp === void 0) return "unknown-age";
   if (timestamp > input.cutoff) return "recent";
   return void 0;
@@ -1747,6 +1749,7 @@ async function cleanupAsyncRetention(options) {
     if (markCancelled()) return finish();
     const protectedRunIds = new Set(options.protectedRunIds ?? []);
     const cutoff = currentTime - retentionMs;
+    const resumableCutoff = currentTime - RESUMABLE_RETENTION_MS;
     const cursor = readCursor(maintenanceRoot);
     const runBudget = Math.ceil(batchSize / 2);
     const resultBudget = batchSize - runBudget;
@@ -1811,7 +1814,7 @@ async function cleanupAsyncRetention(options) {
           status = reconciliation.status ?? void 0;
           if (reconciliation.repaired) result.repairedRuns += 1;
         }
-        const initialReason = runSkipReason({ runDir, status, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, cutoff, protectedRunIds, waitRunIds: waitReferences.runIds });
+        const initialReason = runSkipReason({ runDir, status, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, cutoff, resumableCutoff, protectedRunIds, waitRunIds: waitReferences.runIds });
         if (initialReason) {
           increment(result.skipped, initialReason);
           continue;
@@ -1826,7 +1829,7 @@ async function cleanupAsyncRetention(options) {
             continue;
           }
           const freshWaitReferences2 = parseWaitRunIds(waitSubscriptionsDir);
-          const finalReason = freshWaitReferences2.safe ? runSkipReason({ runDir, status, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, cutoff, protectedRunIds, waitRunIds: freshWaitReferences2.runIds }) : "wait-references-unknown";
+          const finalReason = freshWaitReferences2.safe ? runSkipReason({ runDir, status, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, cutoff, resumableCutoff, protectedRunIds, waitRunIds: freshWaitReferences2.runIds }) : "wait-references-unknown";
           if (finalReason) {
             increment(result.skipped, `recheck-${finalReason}`);
             continue;
@@ -1850,7 +1853,7 @@ async function cleanupAsyncRetention(options) {
         }
         const recheckStatus = readStatus2(tombstone);
         const freshWaitReferences = parseWaitRunIds(waitSubscriptionsDir);
-        const recheckReason = freshWaitReferences.safe ? runSkipReason({ runDir: tombstone, status: recheckStatus, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, cutoff, protectedRunIds, waitRunIds: freshWaitReferences.runIds }) : "wait-references-unknown";
+        const recheckReason = freshWaitReferences.safe ? runSkipReason({ runDir: tombstone, status: recheckStatus, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, cutoff, resumableCutoff, protectedRunIds, waitRunIds: freshWaitReferences.runIds }) : "wait-references-unknown";
         if (recheckReason) {
           if (!fs4.existsSync(runDir)) {
             fs4.renameSync(tombstone, runDir);
@@ -1882,7 +1885,7 @@ async function cleanupAsyncRetention(options) {
           continue;
         }
         const data = readJson(candidate.path);
-        const reason = resultSkipReason({ candidate, data, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, maintenanceRoot, cutoff, protectedRunIds, waitRunIds: waitReferences.runIds });
+        const reason = resultSkipReason({ candidate, data, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, maintenanceRoot, cutoff, resumableCutoff, protectedRunIds, waitRunIds: waitReferences.runIds });
         if (reason) {
           increment(result.skipped, reason);
           continue;
@@ -1893,7 +1896,7 @@ async function cleanupAsyncRetention(options) {
             continue;
           }
           const freshWaitReferences2 = parseWaitRunIds(waitSubscriptionsDir);
-          const finalReason = freshWaitReferences2.safe ? resultSkipReason({ candidate, data, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, maintenanceRoot, cutoff, protectedRunIds, waitRunIds: freshWaitReferences2.runIds }) : "wait-references-unknown";
+          const finalReason = freshWaitReferences2.safe ? resultSkipReason({ candidate, data, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, maintenanceRoot, cutoff, resumableCutoff, protectedRunIds, waitRunIds: freshWaitReferences2.runIds }) : "wait-references-unknown";
           if (finalReason) {
             increment(result.skipped, `recheck-${finalReason}`);
             continue;
@@ -1910,7 +1913,7 @@ async function cleanupAsyncRetention(options) {
         const tombstoneCandidate = { ...candidate, path: tombstone, kind: "tombstone" };
         const recheckData = readJson(tombstone);
         const freshWaitReferences = parseWaitRunIds(waitSubscriptionsDir);
-        const recheckReason = freshWaitReferences.safe ? resultSkipReason({ candidate: tombstoneCandidate, data: recheckData, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, maintenanceRoot, cutoff, protectedRunIds, waitRunIds: freshWaitReferences.runIds }) : "wait-references-unknown";
+        const recheckReason = freshWaitReferences.safe ? resultSkipReason({ candidate: tombstoneCandidate, data: recheckData, asyncDirRoot: options.asyncDirRoot, resultsDir: options.resultsDir, maintenanceRoot, cutoff, resumableCutoff, protectedRunIds, waitRunIds: freshWaitReferences.runIds }) : "wait-references-unknown";
         if (recheckReason) {
           if (!fs4.existsSync(candidate.path)) {
             fs4.renameSync(tombstone, candidate.path);
@@ -5182,7 +5185,7 @@ function registerSlashCommands(pi, state, options = {}) {
     }
     fleetOpen = true;
     try {
-      const { openSubagentFleet } = await import("./chunk-IPGZMQXV.js");
+      const { openSubagentFleet } = await import("./chunk-PV63UFUR.js");
       await openSubagentFleet(ctx, state, { asyncDirRoot: DIRS.async, inspectorPlugins: () => getInspectorPlugins(pi), resultsDir: DIRS.results, fleetKeybindings: options.fleetKeybindings });
     } finally {
       fleetOpen = false;
@@ -8571,7 +8574,7 @@ function registerSubagentExtension(pi) {
     const ctx = withLastUiContext((current) => current);
     if (!ctx) return;
     try {
-      const { openSubagentFleet } = await import("./chunk-IPGZMQXV.js");
+      const { openSubagentFleet } = await import("./chunk-PV63UFUR.js");
       await openSubagentFleet(ctx, state, { initialKey: itemKey, asyncDirRoot: DIRS.async, resultsDir: DIRS.results, fleetKeybindings: config.fleetKeybindings, inspectorPlugins: () => getInspectorPlugins(pi) });
     } catch (error) {
       if (isStaleExtensionContextError(error)) {
@@ -8767,7 +8770,7 @@ function registerSubagentExtension(pi) {
   let executor;
   let executorPromise;
   let executorModulePromise;
-  const loadExecutorModule = () => executorModulePromise ??= import("./chunk-UUP372DR.js");
+  const loadExecutorModule = () => executorModulePromise ??= import("./chunk-JG4QKI5M.js");
   const getExecutor = () => {
     executorPromise ??= loadExecutorModule().then(({ createSubagentExecutor }) => {
       executor = createSubagentExecutor(executorDeps);
@@ -8781,7 +8784,7 @@ function registerSubagentExtension(pi) {
     modulePreloadTimer = setTimeout(() => {
       loadExecutorModule().catch(() => {
       });
-      if (fleetViewEnabled) import("./chunk-IPGZMQXV.js").catch(() => {
+      if (fleetViewEnabled) import("./chunk-PV63UFUR.js").catch(() => {
       });
     }, MODULE_PRELOAD_DELAY_MS);
     modulePreloadTimer.unref?.();

package/bundle/{chunk-YXFJVCOL.js → chunk-4E7BKDTX.js}

@@ -1,13 +1,13 @@
 import {
   isTrustedRecordedSessionFile,
   resolveSubagentRunId
-} from "./chunk-VLFZIN6D.js";
+} from "./chunk-NENDSQUY.js";
 import {
   agentStreamOptions,
   opencodeSessionHeaders,
   ownsRun,
   resolveAsyncResumeTarget
-} from "./chunk-UYK5MZWE.js";
+} from "./chunk-L3WFKBEI.js";
 import {
   currentCompletionOwnerId,
   listMissions,
@@ -16,7 +16,7 @@ import {
   reconcileAsyncRun,
   resolveAuthorityDecision,
   resolveMissionStoreLocation
-} from "./chunk-RNIZLSEA.js";
+} from "./chunk-CGN2TVE7.js";
 import {
   deliverInterruptRequest,
   queueRevivalBrief,

package/bundle/{chunk-UFL7IYCW.js → chunk-7BWGNDNK.js}

@@ -11,7 +11,7 @@ import {
   projectTimeoutRecovery,
   readAsyncRecoveryDescriptor,
   utf8Tail
-} from "./chunk-UYK5MZWE.js";
+} from "./chunk-L3WFKBEI.js";
 import {
   MAX_ARGS_BYTES,
   MAX_ARGS_DEPTH,
@@ -24,7 +24,7 @@ import {
   resultFilePath,
   resultPayloadMatchesSessionRun,
   resultPayloadPathForSessionRun
-} from "./chunk-RNIZLSEA.js";
+} from "./chunk-CGN2TVE7.js";
 import {
   shouldUseNativeFsWatch
 } from "./chunk-NIXWDZZV.js";

package/bundle/{chunk-ZVOAMTUQ.js → chunk-AKOIVLA5.js}

@@ -1,6 +1,6 @@
 import {
   buildWorkflowChatProgressRows
-} from "./chunk-VLFZIN6D.js";
+} from "./chunk-NENDSQUY.js";
 import {
   aggregateStepStatus,
   contextModeBadge,
@@ -25,13 +25,13 @@ import {
   projectWorkflowChecklist,
   withCachedUiContext,
   workflowGraphStageNodes
-} from "./chunk-UYK5MZWE.js";
+} from "./chunk-L3WFKBEI.js";
 import {
   flatToLogicalStepIndex,
   formatWorkflowJsonPreview,
   hostStepReportName,
   hostStepVerdictLabel
-} from "./chunk-RNIZLSEA.js";
+} from "./chunk-CGN2TVE7.js";
 import {
   snapshotExternalRuns
 } from "./chunk-UKG4V45O.js";

package/bundle/{chunk-RNIZLSEA.js → chunk-CGN2TVE7.js}

@@ -2517,6 +2517,7 @@ ${script}
     if (node !== wrapper && node.async === true && (node.type === "FunctionDeclaration" || node.type === "FunctionExpression" || node.type === "ArrowFunctionExpression")) {
       errors.push({ message: "workflowScript does not support nested async functions. Use top-level await, plain helper functions that return runs.run(...), or explicit Promise chains.", ...nodeLocation(node) });
     }
+    if (node.type === "ImportExpression") errors.push({ message: "workflowScript cannot load modules with import().", ...nodeLocation(node) });
     if (directRunsCall(node, "run")) {
       const args = Array.isArray(node.arguments) ? node.arguments : [];
       const keyNode = astNode(args[0]) ? args[0] : void 0;

package/bundle/{chunk-F5DBXJ2G.js → chunk-DZDETGRJ.js}

@@ -11,10 +11,10 @@ import {
   startWatchdogDiffBaselineCapture,
   writeUserWatchdogEnabled,
   writeWatchdogModelSettings
-} from "./chunk-UFL7IYCW.js";
+} from "./chunk-7BWGNDNK.js";
 import {
   resolveGitRepositoryIdentity
-} from "./chunk-VLFZIN6D.js";
+} from "./chunk-NENDSQUY.js";
 import {
   listAsyncRuns,
   ownsRun,
@@ -22,7 +22,7 @@ import {
   parseWorkflowChildSummary,
   readAsyncRecoveryDescriptor,
   resolveRetainedWorktreeCwd
-} from "./chunk-UYK5MZWE.js";
+} from "./chunk-L3WFKBEI.js";
 import {
   deepFreezeWorkflowArgs,
   normalizeWorkflowArgs
@@ -50,7 +50,7 @@ import {
   resolveMissionStoreLocation,
   validateMissionId,
   workflowRunParamsFingerprint
-} from "./chunk-RNIZLSEA.js";
+} from "./chunk-CGN2TVE7.js";
 import {
   requestAsyncCommand,
   watchAsyncControlInbox
@@ -7683,6 +7683,9 @@ function createDefaultChildSessionFactory(options = {}) {
         get inheritedProvider() {
           return session.model && inheritedProviders.has(session.model.provider) ? session.model.provider : void 0;
         },
+        get claimedProvider() {
+          return session.model && !inheritedProviders.has(session.model.provider) && modelRuntime.getRegisteredProviderIds().includes(session.model.provider) ? session.model.provider : void 0;
+        },
         get virtualModelId() {
           return session.model?.api === "pi-virtual" ? `${session.model.provider}/${session.model.id}` : void 0;
         },
@@ -7718,7 +7721,7 @@ function childSessionFactory() {
 }
 function createLazyPlacementFactory(local) {
   let placed;
-  const factory = async () => placed ??= (await import("./chunk-C7JMPU5F.js")).createPlacementAwareChildSessionFactory(local);
+  const factory = async () => placed ??= (await import("./chunk-J5YL7LYR.js")).createPlacementAwareChildSessionFactory(local);
   return {
     async create(launch) {
       return launch.machine ? (await factory()).create(launch) : local.create(launch);

package/bundle/{chunk-C7JMPU5F.js → chunk-J5YL7LYR.js}

@@ -16,7 +16,7 @@ import {
 } from "./chunk-2D52JFLF.js";
 import {
   package_default
-} from "./chunk-MABL3FUM.js";
+} from "./chunk-NKQ6JNAS.js";
 import {
   HERDR_PI_MODE_ENV,
   HERDR_PI_PROTOCOL,

package/bundle/{chunk-UUP372DR.js → chunk-JG4QKI5M.js}

@@ -3,7 +3,7 @@ import {
   projectRuntimeAcknowledgedExtensions,
   registerSubagentPromptBoundary,
   registerSubagentPromptRuntime
-} from "./chunk-NPIYWVOD.js";
+} from "./chunk-XDQORLZ5.js";
 import {
   INSPECTOR_ACTIONS,
   canQueueRetainedAsyncFollowUp,
@@ -25,7 +25,7 @@ import {
   updateSteeringTarget,
   waitForSteeringAction,
   workflowAsyncChildSteeringGuidance
-} from "./chunk-YXFJVCOL.js";
+} from "./chunk-4E7BKDTX.js";
 import {
   PLACED_RESTORE_UNSUPPORTED,
   formatHerdrMachineRunnerUnsupported,
@@ -120,7 +120,7 @@ import {
   workflowStopCause,
   writeWorkflowLaunchRecord,
   writeWorkflowReceipt
-} from "./chunk-F5DBXJ2G.js";
+} from "./chunk-DZDETGRJ.js";
 import {
   NATIVE_SUPERVISOR_TOOL_NAME,
   SUBAGENT_PARENT_SESSION_ENV,
@@ -136,7 +136,7 @@ import {
   resolveWatchdogConfig,
   sendRuleViolationWarning,
   writeWatchdogModelSettings
-} from "./chunk-UFL7IYCW.js";
+} from "./chunk-7BWGNDNK.js";
 import {
   MAX_REMEMBERED_FOREGROUND_RUNS,
   discardRunningForegroundRun,
@@ -149,7 +149,7 @@ import {
   resolveSubagentRunId,
   resolveWorkflowChatProgress,
   stopAsyncRun
-} from "./chunk-VLFZIN6D.js";
+} from "./chunk-NENDSQUY.js";
 import {
   MODEL_ONLY_TOOL,
   RunFanoutLimitError,
@@ -211,7 +211,7 @@ import {
   writeParallelHandoffGroup,
   writeRunFanoutBudgetDescriptor,
   writeWorktreeSetupHandoff
-} from "./chunk-UYK5MZWE.js";
+} from "./chunk-L3WFKBEI.js";
 import {
   authorizeWorkflowResourceHost,
   claimWorkflowChildPermit,
@@ -246,7 +246,7 @@ import {
   resolveDisabledFeatureSurface,
   resolveMaxActiveAsyncRunsPerSession,
   transferActiveAsyncCapacity
-} from "./chunk-QP5ZWNIS.js";
+} from "./chunk-PALJGGYC.js";
 import {
   DEFAULT_STALE_TERMINAL_ACTIVE_MARKER_MS,
   MACHINE_DIFF_OPTIONS,
@@ -326,7 +326,7 @@ import {
   writeNestedControlRequest,
   writeNestedControlResult,
   writeNestedEvent
-} from "./chunk-RNIZLSEA.js";
+} from "./chunk-CGN2TVE7.js";
 import {
   closeSteerInbox,
   consumeSteerRequests,
@@ -1649,6 +1649,11 @@ function sourceUnderNodeModules() {
 function supportsNativeRunner(nodeExecutable) {
   return Boolean(process.features.typescript) && typeof nodeModule.registerHooks === "function" && nodeExecutable === process.execPath && !sourceUnderNodeModules();
 }
+function parentExtensionProviderForChild(ctx, disableAmbientExtensions, model, availableModels, preferredProvider) {
+  if (!disableAmbientExtensions || !ctx.parentProviderRegistry) return void 0;
+  const provider = findModelInfo(model, availableModels, preferredProvider)?.provider;
+  return provider && ctx.parentProviderRegistry.getRegisteredProviderIds().includes(provider) ? provider : void 0;
+}
 var DEFAULT_ASYNC_TIMEOUT_MS = 30 * 60 * 1e3;
 function formatAsyncStartedMessage(headline, interactive) {
   const guidance = interactive ? [
@@ -2376,6 +2381,7 @@ function buildAsyncRunnerSteps(id, params) {
       runtimeSnapshotHost: ctx.pi
     });
     const launchResolvedExtensions = externalRunner ? void 0 : projectLaunchResolvedChildExtensions(toolPlan);
+    const parentExtensionProvider = externalRunner || machine ? void 0 : parentExtensionProviderForChild(ctx, toolPlan.disableAmbientExtensions, selectedModel, availableModels, a.modelProvider ?? ctx.currentModelProvider);
     if (externalRunner && permissionRules) {
       throw new AsyncStartValidationError(`Agent '${a.name}' uses runner.type='${externalRunnerType}', which cannot enforce native Pi child permission rules.`);
     }
@@ -2405,6 +2411,7 @@ function buildAsyncRunnerSteps(id, params) {
       thinking: resolveEffectiveThinking(selectedModel, effectiveThinking),
       ...thinkingCeiling ? { thinkingCeiling } : {},
       launchResolvedExtensions,
+      ...parentExtensionProvider ? { parentExtensionProvider } : {},
       ...requestedModel ? { requestedModel } : {},
       ...primaryModelFromParent ? { skipPrimaryModelVerification: true } : {},
       ...availableModels && availableModels.length > 0 ? { modelVerificationRegistry: availableModels } : {},
@@ -3161,6 +3168,7 @@ function executeAsyncSingle(id, params) {
     runtimeSnapshotHost: ctx.pi
   });
   const launchResolvedExtensions = externalRunner ? void 0 : projectLaunchResolvedChildExtensions(toolPlan);
+  const parentExtensionProvider = externalRunner || machine ? void 0 : parentExtensionProviderForChild(ctx, toolPlan.disableAmbientExtensions, selectedModel, availableModels, agentConfig.modelProvider ?? ctx.currentModelProvider);
   const fast = params.fast ?? agentConfig.fast;
   const launchThinking = resolveEffectiveThinking(selectedModel, effectiveThinking);
   const { definitionDigest, launchContractDigest } = resolveLaunchBinding({
@@ -3283,6 +3291,7 @@ function executeAsyncSingle(id, params) {
             ...params.fast ?? agentConfig.fast ? { fast: params.fast ?? agentConfig.fast } : {},
             thinking: resolveEffectiveThinking(selectedModel, effectiveThinking),
             ...thinkingCeiling ? { thinkingCeiling } : {},
+            ...parentExtensionProvider ? { parentExtensionProvider } : {},
             ...requestedModel ? { requestedModel } : {},
             ...modelOrigin === "inherited" ? { skipPrimaryModelVerification: true } : {},
             ...availableModels && availableModels.length > 0 ? { modelVerificationRegistry: availableModels } : {},
@@ -10557,6 +10566,7 @@ function appendStepToAsyncChain(input) {
     parentSessionId: input.ctx.sessionManager.getSessionId() ?? void 0,
     parentSessionFile: input.ctx.sessionManager.getSessionFile() ?? void 0,
     currentModelProvider: parentModel?.provider,
+    parentProviderRegistry: input.ctx.modelRegistry,
     currentModel: parentModel,
     scopedModelIds: scopedModelIdsFromContext(input.ctx),
     modelScope: discoveredForAppend.modelScope,
@@ -10959,6 +10969,7 @@ async function resumeExternalJobFollowUp(input) {
       parentSessionId: input.ctx.sessionManager.getSessionId() ?? void 0,
       parentSessionFile: input.ctx.sessionManager.getSessionFile() ?? void 0,
       currentModelProvider: parentModel?.provider,
+      parentProviderRegistry: input.ctx.modelRegistry,
       currentModel: parentModel,
       scopedModelIds: scopedModelIdsFromContext(input.ctx),
       modelScope: input.modelScope,
@@ -11228,6 +11239,7 @@ async function resumeAsyncRun(input) {
         parentSessionId: input.ctx.sessionManager.getSessionId() ?? void 0,
         parentSessionFile: input.ctx.sessionManager.getSessionFile() ?? void 0,
         currentModelProvider: parentModel2?.provider,
+        parentProviderRegistry: input.ctx.modelRegistry,
         currentModel: parentModel2,
         scopedModelIds: scopedModelIdsFromContext(input.ctx),
         modelScope,
@@ -11351,6 +11363,7 @@ async function resumeAsyncRun(input) {
       parentSessionId: input.ctx.sessionManager.getSessionId() ?? void 0,
       parentSessionFile: input.ctx.sessionManager.getSessionFile() ?? void 0,
       currentModelProvider: parentModel?.provider,
+      parentProviderRegistry: input.ctx.modelRegistry,
       currentModel: parentModel,
       scopedModelIds: scopedModelIdsFromContext(input.ctx),
       modelScope,
@@ -12412,6 +12425,7 @@ async function runAsyncPath(data, deps) {
     parentSessionId: data.parentPiSessionId,
     parentSessionFile: ctx.sessionManager.getSessionFile() ?? void 0,
     currentModelProvider: parentModel?.provider,
+    parentProviderRegistry: ctx.modelRegistry,
     currentModel: parentModel,
     scopedModelIds: data.scopedModelIds,
     modelScope: data.modelScope,

package/bundle/{chunk-UYK5MZWE.js → chunk-L3WFKBEI.js}

@@ -39,7 +39,7 @@ import {
   validateModelResponseAliases,
   withWorkflowChildRunModel,
   withWorktreeTransaction
-} from "./chunk-RNIZLSEA.js";
+} from "./chunk-CGN2TVE7.js";
 import {
   validateIntercomBridgeConfig
 } from "./chunk-C5P5CHYK.js";

package/bundle/{chunk-VLFZIN6D.js → chunk-NENDSQUY.js}

@@ -13,7 +13,7 @@ import {
   summarizeContextModes,
   utf8Tail,
   workflowPreflightLaneForRuntimeKey
-} from "./chunk-UYK5MZWE.js";
+} from "./chunk-L3WFKBEI.js";
 import {
   assertSafeNestedId,
   checkRecordedPidLiveness,
@@ -32,7 +32,7 @@ import {
   updateActiveRunIndex,
   validateModelResponseAliases,
   writeAsyncResultFile
-} from "./chunk-RNIZLSEA.js";
+} from "./chunk-CGN2TVE7.js";
 import {
   deliverStopRequest,
   stopInboxClosedPath

package/bundle/{chunk-MABL3FUM.js → chunk-NKQ6JNAS.js}

@@ -1,7 +1,7 @@
 // package.json
 var package_default = {
   name: "pi-subagents",
-  version: "0.83.1",
+  version: "0.84.0",
   private: true,
   description: "Pi extension for single-agent delegation and scripted multi-agent workflows",
   author: "Nico Bailon",

package/bundle/{chunk-QP5ZWNIS.js → chunk-PALJGGYC.js}

@@ -11,7 +11,7 @@ import {
   validateAuthorityPolicy,
   validateMissionStoreConfig,
   validateModelResponseAliases
-} from "./chunk-RNIZLSEA.js";
+} from "./chunk-CGN2TVE7.js";
 import {
   getAgentDir,
   readStatus,

package/bundle/{chunk-IPGZMQXV.js → chunk-PV63UFUR.js}

@@ -6,25 +6,25 @@ import {
   resolveWorkflowForegroundSteeringTarget,
   steerAsyncRun,
   steerWorkflowForegroundTarget
-} from "./chunk-YXFJVCOL.js";
+} from "./chunk-4E7BKDTX.js";
 import {
   FLEET_STATUS_WIDGET_KEY,
   reportFleetWarning,
   runningTone,
   stepTaskSummary
-} from "./chunk-ZVOAMTUQ.js";
+} from "./chunk-AKOIVLA5.js";
 import {
   foregroundChildStateLabel,
   formatAsyncRunTranscript,
   stopAsyncRun
-} from "./chunk-VLFZIN6D.js";
+} from "./chunk-NENDSQUY.js";
 import {
   contextModeBadge,
   contextModeLabel,
   decodeUtf8Tail,
   listAsyncRuns
-} from "./chunk-UYK5MZWE.js";
-import "./chunk-RNIZLSEA.js";
+} from "./chunk-L3WFKBEI.js";
+import "./chunk-CGN2TVE7.js";
 import "./chunk-F4ASL6OV.js";
 import "./chunk-NIXWDZZV.js";
 import "./chunk-C5P5CHYK.js";

package/bundle/{chunk-AHIFYGR3.js → chunk-VQVVHSY6.js}

@@ -1,18 +1,18 @@
 import {
   rewriteSubagentPrompt
-} from "./chunk-NPIYWVOD.js";
+} from "./chunk-XDQORLZ5.js";
 import {
   package_default
-} from "./chunk-MABL3FUM.js";
-import "./chunk-UFL7IYCW.js";
+} from "./chunk-NKQ6JNAS.js";
+import "./chunk-7BWGNDNK.js";
 import {
   MODEL_ONLY_TOOL
-} from "./chunk-UYK5MZWE.js";
+} from "./chunk-L3WFKBEI.js";
 import "./chunk-NF7IEKBH.js";
 import {
   appendAgentRefinementOverlay
 } from "./chunk-LFDBD4PW.js";
-import "./chunk-RNIZLSEA.js";
+import "./chunk-CGN2TVE7.js";
 import "./chunk-NIXWDZZV.js";
 import "./chunk-C5P5CHYK.js";
 import "./chunk-7F6RKT6W.js";

package/bundle/{chunk-NPIYWVOD.js → chunk-XDQORLZ5.js}

@@ -15,15 +15,15 @@ import {
   resolveCurrentSessionId,
   resolveWatchdogReviewModel,
   startWatchdogDiffBaselineCapture
-} from "./chunk-UFL7IYCW.js";
+} from "./chunk-7BWGNDNK.js";
 import {
   MODEL_ONLY_TOOL,
   agentStreamOptions,
   opencodeSessionHeaders
-} from "./chunk-UYK5MZWE.js";
+} from "./chunk-L3WFKBEI.js";
 import {
   inheritedNestedRouteOf
-} from "./chunk-RNIZLSEA.js";
+} from "./chunk-CGN2TVE7.js";
 import {
   CHILD_WATCHDOG_STATUS_EVENT,
   MISSING_STRUCTURED_ACCEPTANCE_REPORT_ERROR,

package/bundle/index.js

@@ -17,7 +17,7 @@ function readInstalledPackageVersion() {
 var loadedPackageVersion = readInstalledPackageVersion();
 
 // index.ts
-var registerExtension = process.env[HERDR_PI_MODE_ENV] === "1" ? (await import("./chunk-AHIFYGR3.js")).default : process.env.PI_SUBAGENT_CHILD === "1" ? void 0 : (await import("./chunk-5YIITCPD.js")).default;
+var registerExtension = process.env[HERDR_PI_MODE_ENV] === "1" ? (await import("./chunk-VQVVHSY6.js")).default : process.env.PI_SUBAGENT_CHILD === "1" ? void 0 : (await import("./chunk-235AWJUQ.js")).default;
 function registerSubagentExtension(pi) {
   const installedVersion = readInstalledPackageVersion();
   if (installedVersion !== loadedPackageVersion) {

package/bundle/preflight.js

@@ -6,13 +6,13 @@ import {
 import "./chunk-LFDBD4PW.js";
 import {
   loadConfig
-} from "./chunk-QP5ZWNIS.js";
+} from "./chunk-PALJGGYC.js";
 import {
   nestedResultsPath,
   processTerminalCandidatePath,
   processTerminalPath,
   resultFilePath
-} from "./chunk-RNIZLSEA.js";
+} from "./chunk-CGN2TVE7.js";
 import {
   applyIntercomBridgeToAgent,
   resolveIntercomBridge,