pier-setup 0.3.0 → 0.4.1

package/README.md

@@ -19,18 +19,21 @@ pier ships as **two halves**, installed separately:
 | Half | Package | Role |
 |---|---|---|
 | **pi extension** | `packages/pier-ext` (npm: [`pi-pier`](https://www.npmjs.com/package/pi-pier), [pi.dev gallery](https://pi.dev/packages/pi-pier)) | Injects `todo_write` / `subagent` / `terminal` / `ask_user_question` tools into a pi session, and reports pane state over the herdr socket API |
-| **herdr plugin** | `packages/pier-workbench` (`pier.workbench`) | Workspace bootstrap, blocked human-gate notifications, focus heat layout (focused pane grows in place) |
+| **herdr plugin** | `packages/pier-workbench` (`pier.workbench`) | Blocked human-gate notifications, focus heat layout (focused pane grows in place), ops dashboard + sidebar agent view |
 
 ### Highlights
 
-- **Todo loop**: `todo_write` with full-replace semantics, session JSONL as source of truth, correct branch rollback; live pane-title projection `▶i ○p ■b ✓c (N/M) · current task`; TUI widget is an activity-anchored window (the in_progress entry and its surrounding context stay visible as work moves down the list); `/todos` command (including unblock)
+- **Todo loop**: `todo_write` with full-replace semantics, session JSONL as source of truth, correct branch rollback; live pane-title projection `▶i ○p ■b ✓c (N/M) · current task`; `/todos` command (including unblock)
 - **Todo anti-freeze**: an all-completed list unchanged for ≥6 turns flips the read hook from recitation to a rewrite warning; after ≥1h it archives — first offering one rewrite window with old entries as reference, then (if ignored) a final notice that clears the list (rm persisted to JSONL; the empty guard takes over — multi-step work must re-track); `/todos` still shows history, session JSONL untouched
 - **Interactive subagents**: every subagent = an isolated pi session in its own pane (separate context window); **a human can enter that pane and talk to it directly** (fix bugs, take over, answer ask_user_question)
+- **Delegation identity** (D111): spawn hands the worker a `PI_HERDR_DELEGATION` context (parent pane/session, taskId, task, role), replayed env > worker marker > branch fold; the worker's system prompt gains a `pier-delegation` section (identity + one stable delivery contract), its transcript opens with an "⟵ delegated by master …" card, and its pane title carries an `↳` prefix; `pi-parent`/`pi-task` herdr tokens ride their own report batch, the dashboard groups workers under their master, and blocked alerts name the edge (`worker ← master`)
+- **Task slugs + worker progress reports** (D112): spawn allocates a task slug (numbered on collision); tool outputs print `slug@paneId` and `agentId` accepts the bare slug, bare pane id, or the combined form (the slug part survives a revive that changed the pane); a worker-only `report_progress` tool pipes checkpoints into the master's context as a display-less custom message — no chat flood, no forced turn
+- **Unified TUI status strip** (D113/D114): the resident widget is one line per agent — self as `▶ current item ✓done/total`, each running subagent as `↳ slug ▶ current item ✓d/n` (blocked shows the task + reason; settled rows never occupy the strip; a fully completed self list hides the widget instead of showing a bare `✓N/N`); workers push their full todo list over the pipe on every `todo_write` (event-driven, no polling), and `/pier-tree` opens the complete delegation tree (your todos + every worker's full list + settled nodes) in the shared Pier **popup** — the same singleton panel as `/dashboard`, opened on its `Tree` tab (inside the popup, `1`/`2`/`Tab` switch views; an explicit `/pier-tree overlay` keeps the independent full-window pane; non-Herdr falls back to the in-pane notify view); `/dashboard` opens the same panel on its `Dashboard` tab
 - **Subagent output preview**: `subagent(action: "output", agentId)` returns what a running background subagent has printed since the previous call — an in-memory per-pane cursor computes the delta (`agent.read`, falling back to `pane.read` on older herdr), and the result carries status, revision, truncation and a `restart` flag for scrolled/cleared buffers, so the master can notice a stuck worker instead of waiting for settlement
 - **Soft write-locks**: per-pane lock beacons on `write`/`edit` paths; cross-pane conflicts warn (default) or block (`PI_HERDR_WRITE_LOCK=1`). The warning lists every holder; `/locks` is the human view of the same table (`herdr agent list` exposes the raw tokens to agents)
 - **Role profiles**: built-in `master` / `worker-default`; custom roles as `.pi-herdr/roles/<name>.json`; toolset converges per role (deny rules are not bypassable)
 - **Human gate**: subagent `ask_user_question` → sidebar blocked marker + notification; manual takeover (ESC-interrupt then typing) is heuristically detected so the master pauses/returns management automatically
-- **Ask picker**: a `multi: true` question renders as an interactive toggle list (space toggles a row, `a` toggles all, enter confirms, esc declines, live selection count) with the free-text row pinned last; `allowOther: false` gives pure choice. The typed-index prompt remains the fallback for RPC mode and older pi
+- **Ask picker**: every choice question renders through one pier-owned picker in the TUI — single-select (arrows + enter/space pick the highlighted row) and `multi: true` toggle list (checkboxes: space toggles, `a` toggles all, live selection count) share the same framed chrome, `recommended` seeds the cursor (and pre-checks in multi), and the free-text row stays last; `allowOther: false` gives pure choice. The host select dialog and typed-index prompts remain the fallbacks for RPC mode and older pi
 - **Blocking dialogs mark the pane**: pi's `ui_prompt_start` / `ui_prompt_end` events cover the inherently blocking `ctx.ui` dialogs (`select` / `confirm` / `input` / `editor`), so a dialog from *any* extension marks the pane blocked and emits the `herdr:blocked` edge; nested gates coalesce, and the ask tool no longer needs its 5s refresh heartbeat. `custom` is deliberately excluded — pi routes resident overlays through it too (pier's own slim-frame overlay never calls `done()`), which used to leave a working pane marked blocked for the whole session
 - **Role gate stops early**: a denied worker tool call returns `terminate`, so a batch whose results are all terminating ends without another model round trip
 - **Transcript cards**: pier's own session entries (todo edits, subagent/terminal registries, role manifests, soft approvals) and its reminder messages render as compact cards instead of raw JSON — entry/message renderers, no pi-tui dependency
@@ -45,8 +48,8 @@ pier ships as **two halves**, installed separately:
 ### Requirements
 
 - Node ≥ 22
-- pi ≥ 0.84.4 (`@earendil-works/pi-coding-agent`)
-- herdr ≥ 0.9.0 (macOS / Linux / Windows; Windows is preview beta)
+- pi ≥ 1.3.0 (`@earendil-works/pi-coding-agent`) — `before_agent_start.messageType` and resumed-session active tools
+- herdr ≥ 0.9.5 (macOS / Linux / Windows; Windows is preview beta) — native `pane.focused`, self-reported resume, and shutdown-safe session saves
 
 ### One-shot install (recommended)
 
@@ -56,7 +59,7 @@ No clone needed — run the npm package directly:
 npx pier-setup@latest            # user mode: pi install npm:pi-pier + herdr plugin install
 npx pier-setup@latest version    # local vs npm latest (installer / pi-pier / herdr plugin)
 npx pier-setup@latest update     # refresh both halves in place (does not uninstall first)
-npx pier-setup@latest uninstall  # --purge also drops boot-config.json
+npx pier-setup@latest uninstall
 
 npm i -g pier-setup              # or install globally, then: pier-setup / version / update
 ```
@@ -70,15 +73,13 @@ Dev mode still requires cloning the repo:
 git clone https://github.com/July24/pier && cd pier
 node install.mjs install --dev   # local-path pi install + herdr plugin link; code changes are live
 node install.mjs version --dev
-node install.mjs update --dev    # rewrite boot-config only; pull the repo yourself
+node install.mjs update --dev    # re-check env + versions; pull the repo yourself
 ```
 
-The script verifies the environment (node / pi / herdr versions), probes pi's node
-and cli.js absolute paths, generates boot-config.json (user mode stores it in the
-herdr plugin config dir, so reinstalls don't lose it), and registers both halves.
+The script verifies the environment (node / pi / herdr versions) and registers both halves.
 
 `update` re-runs `pi update npm:pi-pier` (falls back to `pi install`) and
-`herdr plugin install … --yes`, then rewrites boot-config. Override sources with
+`herdr plugin install … --yes`. Override sources with
 `--pi-spec=` / `--herdr-spec=` (npm publishing or forks). `pier-setup --help`
 lists every command.
 
@@ -131,15 +132,7 @@ pi overwrites tools/commands by name; event listeners stack. Two todo or subagen
 **Designed coexistence:** herdr’s official `herdr:pi` reporter. Keep it. pier emits `herdr:blocked` so that plugin remains lifecycle authority.
 
 - **other agents inside herdr (claude code / codex etc.)**: tabs without a pi pane
-  are excluded from heat reflow; blocked notifications are pi-only; master-tab
-  auto-bootstrap can be disabled with `autoBootstrap: false` in boot-config.
-
-### Bootstrap config (workbench half)
-
-Master-tab bootstrap needs local node / pi paths: `pier-setup` generates
-them automatically; manually, copy `packages/pier-workbench/scripts/boot-config.example.json`
-(placeholders for both macOS and Windows). User mode reads it from
-`herdr plugin config-dir pier.workbench`; dev mode from `packages/pier-workbench/scripts/boot-config.json`.
+  are excluded from heat reflow; blocked notifications are pi-only.
 
 ### Usage
 
@@ -153,7 +146,7 @@ them automatically; manually, copy `packages/pier-workbench/scripts/boot-config.
 ```
 packages/
   pier-ext/        # pi extension (npm: pi-pier): todo/subagent tools, herdr client, vocab authority, skill
-  pier-workbench/  # herdr plugin (pier.workbench): workspace bootstrap + blocked notify + heat layout
+  pier-workbench/  # herdr plugin (pier.workbench): blocked notify + heat layout + ops dashboard
 docs/              # install guide, configuration overview, role profile docs, sidebar role config
 ```
 
@@ -161,7 +154,7 @@ docs/              # install guide, configuration overview, role profile docs, s
 
 ```sh
 npm install --ignore-scripts
-npm test          # node --test, 809 unit tests (planner / todo replay / anti-freeze staleness / session tail / GC / lifecycle / renderers / ask picker / subagent output / jev decision layer: diagnostic gate, notice ranking, excerpt windows)
+npm test          # node --test, 733 unit tests (planner / todo replay / anti-freeze staleness / session tail / GC / lifecycle / renderers / ask picker / subagent output / jev decision layer: diagnostic gate, notice ranking, excerpt windows)
 ```
 
 ## Configuration
@@ -179,9 +172,8 @@ Runtime policies and operational limits are centralized in `runtime-policy.ts` (
 | `PIER_READY_TIMEOUT_MS` | `90000` | ms | Subagent pane pipe readiness wait (exponential backoff; a pane that exited fails immediately with its last output attached) |
 | `PIER_SESSION_TTL_SECONDS` | `600` | s | Session retention TTL after subagent exit before GC cleanup |
 | `PIER_GIT_TIMEOUT_MS` | `10000` | ms | Execution timeout for git operations (worktree creation, diff summary, cleanup) |
-| `PIER_FOCUS_POLL_MS` | `1500` / `0` | ms | Focus sampling for heat layout (`0` disables). Default 1500ms on Herdr <0.9.1; 0 (event-first) on 0.9.1+ |
 | `PIER_TERM_READ_MAX` | `8000` | chars | Maximum terminal buffer characters read per operation |
-| `PIER_TERM_IDLE_MS` | `1800000` | ms | Idle time before pier nudges about an open terminal |
+| `PIER_TERM_IDLE_MS` | `300000` | ms | Idle time before the second terminal-cleanup nudge (one is sent at turn end for a terminal used that turn) |
 | `PIER_TODO_GRACE_MS` | `30000` | ms | Settle grace before the unfinished-todo reminder |
 | `PIER_TRACE` | – | flag | Write diagnostics (tool renderers, swallowed errors) to stderr |
 | `PIER_JEV_ENABLE` | `0` | flag | Jev decision layer (TypeSafe System One classification) master switch; every call site fails open — see `docs/rfc-jev-integration.md` |
@@ -199,15 +191,26 @@ processes stay as they are (`PI_HERDR_SUBAGENT`, `PI_HERDR_ROLE_MANIFEST`, `PI_H
 `/pier-config doctor` lists every option with its effective value and where it came from, plus the
 errors pier deliberately swallowed this session.
 
-**Focus heat:** Herdr 0.9.0 resolved mouse focus in the client and did not deliver `pane.focused`
-to plugins, so each pane sampled `layout.export → focused_pane_id` and replayed the workbench
-event. Herdr 0.9.1+ delivers `pane.focused` natively, so the poller defaults off. Override with
-`PIER_FOCUS_POLL_MS`; `PIER_WORKBENCH_ROOT` points at a relocated plugin checkout.
+**Focus heat:** Herdr 0.9.5 delivers `pane.focused` natively, so pier starts no per-pane sampler;
+the workbench receives the event directly. `PIER_WORKBENCH_ROOT` points at a relocated plugin checkout.
+
+**Upstream tracking:** pi 1.3 / herdr 0.9.5 impact, version-floor cleanup, and the next extension
+directions (remote machines, native worktrees, plugin actions):
+**[docs/rfc-upstream-absorption-2026-10.md](docs/rfc-upstream-absorption-2026-10.md)**.
 
 ### Efficiency mechanisms (D100–D103, opt-in)
 
 Three token-saving mechanisms ship **disabled by default** and are safe to try one at a time:
 
+**Origin — credit where due**: the mechanism ideas and names come from NVIDIA's
+[SoL-Pi](https://github.com/NVlabs/SoL-Pi) ([paper](https://arxiv.org/abs/2609.20519) ·
+[blog](https://nvlabs.github.io/SoL-Pi/)) — four harness-level efficiency mechanisms surfaced by
+scaled auto-research loops. pier adopts three of them (ObservationPack / EPR / OCC; the fourth,
+Action Fusion, is not adopted) and re-implements them on its own stack, extending the originals
+with a jev decision layer (small System One classifications at the diagnostic gate, excerpt-window
+pick, and settle attribution — [rfc-jev-integration.md](docs/rfc-jev-integration.md)), role gating,
+and the 4-plane efficiency config with per-mechanism JSONL telemetry (D100–D103).
+
 - **ObservationPack** — large tool outputs are projected as placeholders after the first `fullSends` requests, with paged retrieval via `obs_recall` (session JSONL stays untouched).
 - **EPR** — long diagnostic (`bash` test/build) logs are reduced in-process to a byte-verified evidence receipt; the raw log is archived first and stays readable.
 - **OCC** — `todo_write` boundaries drive pi's native compaction under a KV-cache cost model, carrying unfinished tasks across the compaction.
@@ -218,10 +221,10 @@ PI_HERDR_OBS_PACK_ENABLE=1 PI_HERDR_OBS_PACK_LOG=1 pi   # start here
 
 Full quick start, what to watch in `efficiency-logs/*.jsonl`, rollback steps and a feedback template: **[docs/efficiency-trial.md](docs/efficiency-trial.md)**.
 
-Everything above (plus roles, pi settings, boot-config and the `PIER_*`/`PI_HERDR_*` env knobs) is also inspectable in-session:
+Everything above (plus roles, pi settings and the `PIER_*`/`PI_HERDR_*` env knobs) is also inspectable in-session:
 
 ```text
-/pier-config            # 5-plane index; hands a guided change to the agent
+/pier-config            # 4-plane index; hands a guided change to the agent
 /pier-config show all   # effective value + source (env > workspace > user > default) per key
 /pier-config check      # validation across planes   ·   /pier-config doc → written report
 ```
@@ -241,6 +244,6 @@ MIT
 
 ---
 
-> 💡 **For contributors**: `.gitignore` is tracked in the repository. Note that `packages/pier-workbench/scripts/boot-config.json` is machine-local (see the `.example.json` template), and `docs/research/` contains local research notes ignored by `.gitignore`.
+> 💡 **For contributors**: `.gitignore` is tracked in the repository. `docs/research/` contains local research notes ignored by `.gitignore`.
 >
 > **Naming convention**: the brand is **pier** (repo/packages/plugin); runtime protocol identifiers keep the **`pi-herdr`** prefix (`.pi-herdr/roles/` dir, `pi-herdr.subs` session custom entries, `~/.pi/agent/herdr-pi/roles/` user dir) — they persist with user sessions/config files, renaming would break existing data, so they are the compatibility layer.

package/install.mjs

@@ -3,25 +3,23 @@
  * pier one-shot installer / uninstaller / updater / version inspector (cross-platform: macOS / Linux / Windows).
  *
  * Usage:
- *   node install.mjs install  [--dev] [--hmr-dev] [--force]   # Install (default command, 'install' can be omitted)
- *   node install.mjs update   [--dev] [--hmr-dev]             # Refresh both halves in place to latest release (no prior uninstall)
- *   node install.mjs version  [--json]                        # Local vs npm latest
- *   node install.mjs uninstall [--dev] [--purge]              # Uninstall; --purge deletes boot-config.json as well
+ *   node install.mjs install  [--dev]                        # Install (default command, 'install' can be omitted)
+ *   node install.mjs update   [--dev]                        # Refresh both halves in place to latest release (no prior uninstall)
+ *   node install.mjs version  [--json]                       # Local vs npm latest
+ *   node install.mjs uninstall [--dev]                       # Uninstall both halves
  *   node install.mjs --prepare                                # npm prepare: hooksPath + repo root bin link
  *   node install.mjs --help
  *
  * Modes:
  *   User mode (default): pi install npm:pi-pier
  *                   + herdr plugin install July24/pier/packages/pier-workbench --yes
- *                   boot-config.json written to herdr plugin config-dir; extPath points to pi-installed
- *                   pi-pier (~/.pi/agent/npm/...), not the repo path inside pier-setup package.
  *   --dev Development mode: pi install <repo>/packages/pier-ext + herdr plugin link <repo>/packages/pier-workbench
- *                   (linked directory is live; code edits take effect immediately; update only rewrites boot-config).
+ *                   (linked directory is live; code edits take effect immediately).
  * Distribution specs can be overridden via --pi-spec= / --herdr-spec= (for npm publish or fork scenarios).
  * Failure semantics: Each step provides manual equivalent command; step failure does not abort reporting (exitCode=1).
  */
 import { execFileSync } from 'node:child_process';
-import { chmodSync, existsSync, mkdirSync, readFileSync, realpathSync, rmSync, symlinkSync, writeFileSync } from 'node:fs';
+import { chmodSync, existsSync, mkdirSync, readFileSync, rmSync, symlinkSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -29,7 +27,6 @@ import { fileURLToPath } from 'node:url';
 const ROOT = resolve(dirname(fileURLToPath(import.meta.url)));
 const EXT_DIR = join(ROOT, 'packages', 'pier-ext');
 const WB_DIR = join(ROOT, 'packages', 'pier-workbench');
-const DEV_BOOT_CONFIG = join(WB_DIR, 'scripts', 'boot-config.json');
 const EXT_PATH = join(EXT_DIR, 'src', 'index.ts');
 const IS_WIN = process.platform === 'win32';
 const COMMANDS = ['install', 'uninstall', 'update', 'version', 'help'];
@@ -103,6 +100,11 @@ function tryRun(cmd, args) {
   try { run(cmd, args); return true; } catch (e) { log(`  (${e.message.split('\n')[0]})`); return false; }
 }
 
+/** Same as tryRun without the diagnostic line, for feature probes whose failure is expected. */
+function tryRunQuiet(cmd, args) {
+  try { run(cmd, args); return true; } catch { return false; }
+}
+
 function parseVersion(s) {
   const m = String(s).match(/(\d+)\.(\d+)\.(\d+)/);
   return m ? [Number(m[1]), Number(m[2]), Number(m[3])] : null;
@@ -141,10 +143,6 @@ function npmLatest(name) {
   }
 }
 
-/** Herdr plugin config directory (boot-config destination in user mode; semantic path exists once plugin is registered). */
-function herdrConfigDir() {
-  try { return run('herdr', ['plugin', 'config-dir', 'pier.workbench']); } catch { return null; }
-}
 
 /* ── Environment check (pre-install) ────────────────────────────────── */
 function checkEnv() {
@@ -152,13 +150,13 @@ function checkEnv() {
   if (major < 22) die(`node ≥ 22 required, found ${process.versions.node}`);
   log(`✓ node ${process.versions.node}`);
   const piVersion = (() => { try { return parseVersion(run('pi', ['--version'])); } catch { return null; } })();
-  if (!piVersion || !geVersion(piVersion, [0, 84, 4])) {
-    die(`pi ≥ 0.84.4 required${piVersion ? `, found ${piVersion.join('.')}` : ' (pi not found or not runnable)'}. Install: npm i -g @earendil-works/pi-coding-agent`);
+  if (!piVersion || !geVersion(piVersion, [1, 3, 0])) {
+    die(`pi ≥ 1.3.0 required${piVersion ? `, found ${piVersion.join('.')}` : ' (pi not found or not runnable)'}. Install: npm i -g @earendil-works/pi-coding-agent`);
   }
   log(`✓ pi ${piVersion.join('.')}`);
   const herdrVersion = (() => { try { return parseVersion(run('herdr', ['--version'])); } catch { return null; } })();
-  if (!herdrVersion || !geVersion(herdrVersion, [0, 9, 0])) {
-    die(`herdr ≥ 0.9.0 required${herdrVersion ? `, found ${herdrVersion.join('.')}` : ' (herdr not found)'}. Install: https://herdr.dev/`);
+  if (!herdrVersion || !geVersion(herdrVersion, [0, 9, 5])) {
+    die(`herdr ≥ 0.9.5 required${herdrVersion ? `, found ${herdrVersion.join('.')}` : ' (herdr not found)'}. Install: https://herdr.dev/`);
   }
   log(`✓ herdr ${herdrVersion.join('.')}`);
   return { piVersion, herdrVersion };
@@ -167,26 +165,6 @@ function checkEnv() {
 /** pi extension source: user mode uses git/npm spec, dev mode uses local directory. */
 const piSource = () => (dev ? EXT_DIR : PI_SPEC);
 
-/* ── boot-config detection and writing ────────────────────────────── */
-function probePiRuntime() {
-  const piBin = which('pi');
-  // bin is a node shim: realpath resolves to .../pi-coding-agent/dist/cli.js (npm layout, isomorphic win/posix)
-  if (piBin) {
-    try {
-      const real = realpathSync(piBin);
-      if (real.endsWith('cli.js') && existsSync(real)) {
-        return { piCli: real, piNode: process.execPath };
-      }
-    } catch { /* fall back to fallback */ }
-  }
-  // npm root -g fallback: when pi is not in PATH (e.g. nvm shim), construct from global npm layout
-  try {
-    const gRoot = run('npm', ['root', '-g']);
-    const cand = join(gRoot, '@earendil-works', 'pi-coding-agent', 'dist', 'cli.js');
-    if (existsSync(cand)) return { piCli: cand, piNode: process.execPath };
-  } catch { /* npm unavailable */ }
-  return null;
-}
 
 function piAgentDir() {
   return process.env.PI_CODING_AGENT_DIR || join(homedir(), '.pi', 'agent');
@@ -260,47 +238,6 @@ function resolveUserExtPath() {
   return extPathFromPiList();
 }
 
-function writeBootConfig(hmrDev, force) {
-  const probed = probePiRuntime();
-  if (!probed) die('cannot locate pi cli.js (tried: pi shim realpath, npm root -g). Fill boot-config.json manually.');
-  let extPath;
-  if (dev) {
-    if (!existsSync(EXT_PATH)) die(`pier-ext entry missing: ${EXT_PATH} (repo layout broken?)`);
-    extPath = EXT_PATH;
-  } else {
-    extPath = resolveUserExtPath();
-    if (!extPath) die(`cannot locate installed pier-ext (npm:pi-pier / git clone). Did \`pi install ${piSource()}\` succeed?`);
-  }
-
-  const config = {
-    mainTabLabel: 'main',
-    piNode: probed.piNode,
-    piCli: probed.piCli,
-    extPath,
-    workbenchPluginId: 'pier.workbench',
-    hmrDev,
-  };
-
-  const target = dev ? DEV_BOOT_CONFIG : join(herdrConfigDir() ?? die('cannot resolve herdr plugin config-dir (is pier.workbench installed?)'), 'boot-config.json');
-  if (existsSync(target) && !force) {
-    let existing = null;
-    try { existing = JSON.parse(readFileSync(target, 'utf8')); } catch { /* treated as corrupted */ }
-    if (existing) {
-      log(`• ${target} exists, diff (existing → new):`);
-      for (const k of Object.keys(config)) {
-        if (existing[k] !== config[k]) log(`    ${k}: ${JSON.stringify(existing[k])} → ${JSON.stringify(config[k])}`);
-      }
-      log('  kept existing (use --force to overwrite)');
-      return;
-    }
-  }
-  mkdirSync(dirname(target), { recursive: true });
-  writeFileSync(target, JSON.stringify(config, null, 2) + '\n');
-  log(`✓ boot-config.json ${force ? 'overwritten (--force)' : 'written'} → ${target}`);
-  log(`  piNode = ${config.piNode}`);
-  log(`  piCli  = ${config.piCli}`);
-  log(`  extPath = ${config.extPath}`);
-}
 
 function pkgDirFromExtPath(extPath) {
   let d = dirname(extPath);
@@ -313,16 +250,57 @@ function pkgDirFromExtPath(extPath) {
   return null;
 }
 
-function herdrPluginInfo() {
-  let out;
-  try { out = run('herdr', ['plugin', 'list']); } catch { return { installed: false, spec: null, sha: null }; }
-  const line = out.split(/\r?\n/).find((l) => l.includes('pier.workbench'));
-  if (!line) return { installed: false, spec: null, sha: null };
+const HERDR_PLUGIN_ID = 'pier.workbench';
+const HERDR_PLUGIN_NAME = 'pier-workbench';
+const NOT_INSTALLED = Object.freeze({ installed: false, spec: null, sha: null, version: null, source: null, enabled: false });
+
+/** `plugin list --json` (herdr 0.9.5+): returns undefined for a malformed payload, null when the
+ *  plugin is absent, so the caller can fall back to the text listing on older binaries. */
+function parseHerdrPluginJson(out) {
+  let parsed;
+  try { parsed = JSON.parse(out); } catch { return undefined; }
+  const plugins = parsed?.result?.plugins ?? parsed?.plugins;
+  if (!Array.isArray(plugins)) return undefined;
+  const p = plugins.find((x) => x && (x.plugin_id === HERDR_PLUGIN_ID || x.name === HERDR_PLUGIN_NAME));
+  if (!p) return null;
+  const source = p.source && typeof p.source === 'object' ? p.source : {};
+  const kind = typeof source.kind === 'string' ? source.kind : null;
+  const root = typeof p.plugin_root === 'string' ? p.plugin_root : null;
+  const commit = typeof source.commit === 'string' ? source.commit : null;
+  const spec = kind === 'local'
+    ? `local:${root ?? p.manifest_path ?? ''}`
+    : (typeof p.version === 'string' ? `v${p.version}` : (kind ?? 'installed'));
+  return {
+    installed: true,
+    spec,
+    sha: commit ? commit.slice(0, 7) : null,
+    version: typeof p.version === 'string' ? p.version : null,
+    source: kind,
+    enabled: p.enabled === true,
+  };
+}
+
+function parseHerdrPluginText(out) {
+  const line = out.split(/\r?\n/).find((l) => l.includes(HERDR_PLUGIN_ID));
+  if (!line) return NOT_INSTALLED;
   const bracket = line.match(/\[([^\]]+)\]/);
   const spec = bracket ? bracket[1] : line.trim();
   const at = spec.lastIndexOf('@');
   const fullSha = at >= 0 && !spec.startsWith('local:') ? spec.slice(at + 1) : null;
-  return { installed: true, spec, sha: fullSha ? fullSha.slice(0, 7) : null };
+  return { installed: true, spec, sha: fullSha ? fullSha.slice(0, 7) : null, version: null, source: spec.startsWith('local:') ? 'local' : null, enabled: false };
+}
+
+function herdrPluginInfo() {
+  try {
+    const out = run('herdr', ['plugin', 'list', '--json']);
+    const parsed = parseHerdrPluginJson(out);
+    if (parsed !== undefined) return parsed ?? NOT_INSTALLED;
+  } catch { /* older herdr or no server; fall through to the text listing */ }
+  try {
+    return parseHerdrPluginText(run('herdr', ['plugin', 'list']));
+  } catch {
+    return NOT_INSTALLED;
+  }
 }
 
 function collectStatus() {
@@ -344,17 +322,17 @@ function usage() {
   log(`pier-setup — install / update / inspect pier (pi-pier + pier.workbench)
 
 Usage:
-  pier-setup [install] [--dev] [--hmr-dev] [--force]
-  pier-setup update    [--dev] [--hmr-dev]
+  pier-setup [install] [--dev]
+  pier-setup update    [--dev]
   pier-setup version   [--json]
-  pier-setup uninstall [--dev] [--purge]
+  pier-setup uninstall [--dev]
 
   npx pier-setup@latest          # recommended user install
   npx pier-setup@latest update   # refresh both halves to newest release
   npx pier-setup@latest version  # local vs npm latest
 
   --pi-spec= / --herdr-spec= override distribution sources
-  --dev  local link (clone); update only rewrites boot-config`);
+  --dev  local link (clone); the linked directories are live`);
 }
 
 function version() {
@@ -390,25 +368,26 @@ function update() {
   if (latestSetup && me && cmpSemver(me, latestSetup) < 0) {
     log(`⚠ installer ${me} < latest ${latestSetup} — re-run: npx pier-setup@latest update`);
   }
-  const hmrDev = flags.has('--hmr-dev');
   if (dev) {
-    log('dev mode: local link is live; pull the repo yourself. Refreshing boot-config only.');
-    writeBootConfig(hmrDev, true);
+    log('dev mode: local link is live; pull the repo yourself (no installer-managed files to refresh).');
   } else {
     if (tryRun('pi', ['update', piSource()])) log(`✓ pi extension updated (${piSource()})`);
     else if (tryRun('pi', ['install', piSource()])) log(`✓ pi extension installed (${piSource()})`);
     else { console.error('✗ pi update/install failed'); log(`  manual: pi update ${piSource()}`); process.exitCode = 1; }
-    if (tryRun('herdr', ['plugin', 'install', HERDR_SPEC, '--yes'])) log(`✓ herdr plugin updated (${HERDR_SPEC})`);
+    // 0.9.4+ updates the GitHub checkout in place without disturbing running plugin panes.
+    // Only try it for an installed, non-local plugin; otherwise install from the configured spec.
+    const existing = herdrPluginInfo();
+    const updated = (existing.installed && existing.source !== 'local'
+      && tryRunQuiet('herdr', ['plugin', 'update', HERDR_PLUGIN_ID, '--yes']))
+      || tryRunQuiet('herdr', ['plugin', 'install', HERDR_SPEC, '--yes']);
+    if (updated) log(`✓ herdr plugin updated (${HERDR_SPEC})`);
     else { console.error('✗ herdr plugin update failed'); log(`  manual: herdr plugin install ${HERDR_SPEC} --yes`); process.exitCode = 1; }
-    writeBootConfig(hmrDev, true);
   }
   log('');
   version();
 }
 
 function install() {
-  const hmrDev = flags.has('--hmr-dev');
-  const force = flags.has('--force');
   checkEnv();
   removeLegacyGitRegistration();
 
@@ -417,40 +396,31 @@ function install() {
     else { console.error('✗ pi install failed'); log(`  manual: pi install ${EXT_DIR}`); process.exitCode = 1; }
     if (tryRun('herdr', ['plugin', 'link', WB_DIR])) log('✓ herdr plugin linked (packages/pier-workbench, local)');
     else { console.error('✗ herdr plugin link failed'); log(`  manual: herdr plugin link ${WB_DIR}`); process.exitCode = 1; }
-    writeBootConfig(hmrDev, force);
   } else {
     if (tryRun('pi', ['install', piSource()])) log(`✓ pi extension installed (${PI_SPEC})`);
     else { console.error('✗ pi install failed'); log(`  manual: pi install ${PI_SPEC}`); process.exitCode = 1; }
     if (tryRun('herdr', ['plugin', 'install', HERDR_SPEC, '--yes'])) log(`✓ herdr plugin installed (${HERDR_SPEC})`);
     else { console.error('✗ herdr plugin install failed'); log(`  manual: herdr plugin install ${HERDR_SPEC}`); process.exitCode = 1; }
-    writeBootConfig(hmrDev, force);
   }
 
   log(`
 pier installed (${dev ? 'dev mode: local paths, code changes are live' : 'user mode: managed checkouts'}). Next:
-  1. start herdr, open/create a workspace — the main tab auto-bootstraps a pi session
+  1. start herdr, open/create a workspace and run \`pi\` inside a pane
   2. inside pi, ask the model to use todo_write / subagent tools`);
 }
 
 function uninstall() {
-  const purge = flags.has('--purge');
   if (tryRun('pi', ['remove', piSource()])) log('✓ pi extension removed');
   else { console.error('✗ pi remove failed'); log(`  manual: pi remove ${piSource()}`); process.exitCode = 1; }
 
   if (dev) {
     if (tryRun('herdr', ['plugin', 'unlink', 'pier.workbench'])) log('✓ herdr plugin unlinked (files kept)');
     else { console.error('✗ herdr plugin unlink failed'); log('  manual: herdr plugin unlink pier.workbench'); process.exitCode = 1; }
-    if (purge && existsSync(DEV_BOOT_CONFIG)) { rmSync(DEV_BOOT_CONFIG); log('✓ dev boot-config.json purged'); }
   } else {
     if (tryRun('herdr', ['plugin', 'uninstall', 'pier.workbench'])) log('✓ herdr plugin uninstalled (managed checkout removed)');
     else { console.error('✗ herdr plugin uninstall failed'); log('  manual: herdr plugin uninstall pier.workbench'); process.exitCode = 1; }
-    if (purge) {
-      const dir = herdrConfigDir();
-      const f = dir ? join(dir, 'boot-config.json') : null;
-      if (f && existsSync(f)) { rmSync(f); log('✓ boot-config.json purged'); }
-    }
   }
-  log(`\npier uninstalled.${purge ? '' : ' (boot-config.json kept; use --purge to remove)'}`);
+  log('\npier uninstalled.');
 }
 
 if (command === 'help' || flags.has('--help') || flags.has('-h')) usage();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pier-setup",
-  "version": "0.3.0",
+  "version": "0.4.1",
   "description": "One-shot installer for pier: install / update / version / uninstall for pi-pier + pier.workbench",
   "license": "MIT",
   "type": "module",
@@ -31,8 +31,9 @@
     "packages/*"
   ],
   "scripts": {
+    "build:workbench": "tsc -p packages/pier-workbench/tsconfig.build.json",
     "typecheck": "tsc --noEmit -p packages/pier-ext/tsconfig.json",
-    "test": "npm run typecheck && node --test \"packages/*/test/*.test.ts\"",
+    "test": "npm run build:workbench && npm run typecheck && node --test \"packages/*/test/*.test.ts\"",
     "test:mutation": "stryker run",
     "prepare": "node ./install.mjs --prepare"
   },
@@ -42,7 +43,6 @@
     "@deepseek-ai/cordis-plugin-loader": "^1.0.2",
     "@deepseek-ai/cordis-plugin-timer": "^1.1.3",
     "@stryker-mutator/core": "^10.0.0",
-    "@stryker-mutator/typescript-checker": "^10.0.0",
     "typescript": "~5.9.3"
   },
   "pi": {