pi-config/extensions/pi-crew/CHANGELOG.md

Changelog

Unreleased

0.1.45

Added

• Added /team-respond <runId> <taskId|--all> <message> for replying to interactive/waiting tasks from slash commands.
• Added runtime-extensible run ownership metadata (ownerSessionId) so destructive cancellation can be guarded by session ownership.
• Added async manifest and crew-agent readers used by snapshot preloading.

Fixed

• Fixed respond action to validate waiting-only tasks, write replies to task mailboxes, and reject non-waiting task responses instead of reporting false success.
• Fixed cancel ownership handling so runs created by another Pi session are not cancelled when ownerSessionId mismatches.
• Fixed DeliveryCoordinator to requeue payloads when active delivery callbacks throw, and to drop queued payloads from stale session generations.
• Fixed OverflowRecoveryTracker collisions by keying recovery state with runId + taskId, plus cleanup of terminal recovery states.
• Fixed stale reconciliation false positives for foreground/live no-PID runs by preserving runs with recent task heartbeat or agent progress evidence.
• Fixed UI waiting counts: snapshots, powerbar, and crew widget now include waiting tasks/agents where appropriate.
• Fixed team tool cwd override handling so valid overrides are applied consistently and invalid overrides return a clear error.
• Fixed session history pollution by only appending crew:run-started after a successful run with a real runId.
• Fixed async snapshot preload path to avoid synchronous manifest/agent reads.
• Fixed mailbox count semantics for large mailbox files by marking tail-derived counts as approximate when the file is larger than the bounded tail window.
• Fixed auto-retry freshness by reloading manifest/tasks before retry attempts and fallback task runs.

Changed

• Wired session snapshots into session_before_switch logging so active runs and pending deliveries are captured before session transitions.
• Dashboard mailbox pane now indicates when counts are approximate tail-derived values.

0.1.43

Added

• /team-settings command: view and manage all pi-crew config from Pi CLI (list, get, set, unset, path, scope).
• addTranslations(locale, bundle) and listLocales() for runtime-extensible i18n.

Fixed

• UI freeze crash: replaced setInterval with recursive setTimeout in RenderScheduler and HeartbeatWatcher to prevent timer storms when renders exceed the interval.
• Growing-file I/O bottleneck: safeRecentEvents, readMailboxCounts, readGroupJoinMailbox now use tail-reading (last 32 KB) instead of reading entire .jsonl files that grow unbounded over long runs.
• Snapshot cache TTL increased from 250 ms to 500 ms, halving unnecessary I/O.
• Heartbeat watcher memory leak: stale keys are now cleaned after 10 minutes of inactivity instead of being held forever.
• Dashboard crash guard: render() is wrapped in try/catch with a fallback error display.
• Dashboard selected-index mismatch: reset selected to 0 when the selected run disappears from the manifest cache.
• live-run-sidebar.ts crash: fixed missing optional chaining on agent.progress?.recentOutput?.at(-1).
• signatureFor crash: JSON.stringify in snapshot cache wrapped in try/catch with a timestamp fallback.
• Render scheduler timer leak: added a disposed guard after schedule() to prevent orphaned timers.
• Render scheduler loop guard: capped at 5 iterations per flush() to prevent infinite loops when render() re-enters flush().
• powerbar-publisher.ts: replaced .filter().length with .reduce() counting to avoid temporary array allocations.

Changed

• i18n module hardened: locale validated at runtime (not hardcoded union type), currentLocale reset on dispose, missing-key guard (fallback[key] ?? key), __test__resetI18n() helper.

0.1.42

Fixed

• Reduced atomic-write rename retries from 20 to 5 and added busy-wait fallback for Atomics.wait to avoid event-loop stalls on Windows with aggressive file-locking.
• Applied the same sleepSync fallback pattern to locks.ts for consistent lock-acquisition resilience.
• Removed dead findReadyTask function in team-runner.
• Eliminated a redundant refreshTaskGraphQueues O(n) call per batch iteration by reusing the already-computed taskGraphSnapshot for ready-task selection.
• Expanded appendTaskAttentionEvent dedup window from 100 to 200 events and switched to a computed dedup key.

Changed

• Extended MUTATING_TOOLS set in completion guard with replace_in_file, insert, delete_files, create_file, overwrite, and patch.
• Extended MUTATING_COMMANDS regex with sed -i, tee, wget -O, and curl -o patterns.
• Reordered bash-command mutation check so mutating patterns (sed -i) take priority over read-only patterns (sed).
• Unknown bash commands that don't match the read-only list are now treated as potentially mutating (conservative default).

Hardened

• Replaced timer.unref?.() with timer.unref() in SubagentManager blocked-poll and stuck-notify timers.
• Added session-liveness guard to notifyOperator fallback so it won't attempt sendFollowUp after extension cleanup.

0.1.41

Added

• Added strict-provider-friendly team tool schema shapes and config schema coverage for result delivery controls.
• Added resilient result watcher fallback polling for resource-limit watch failures and partial JSON retry handling.
• Added runtime.completionMutationGuard (off/warn/fail) with structured task.attention events when implementation-style workers complete without observed mutations.
• Added group-join mailbox delivery metadata, request-id dedupe, ack observability, timeout events, and dashboard/status visibility.
• Expanded team doctor and team status with schema, async/result delivery, worktree/readiness, attention, transcript, and group-join diagnostics.

Fixed

• Recovered adaptive implementation planner output when compaction truncates the end marker but complete phase objects are still present.

0.1.40

Added

• Added owner-session generation guards for background subagents, async run notifications, result watchers, and live-session callbacks so stale sessions do not receive completions.
• Added runtime.requirePlanApproval with approve/cancel API support to gate mutating adaptive implementation tasks behind an explicit planner artifact approval.
• Added shared secret redaction for event logs, mailbox persistence, artifacts, JSONL streams, agent records, notifications, metrics, and diagnostics.

Changed

• Project-local agents, teams, and workflows can no longer shadow builtin or user resources with the same name.
• Project-level sensitive config such as worker execution, runtime mode, autonomy, agent overrides, worktree setup hooks, and OTLP headers is ignored with warnings unless configured in trusted user scope.

Fixed

• Fixed lost async completion notifications after auto-compaction/session restart by continuing to track active runs across notifier restarts.
• Fixed stale background subagent wakeups after session switch/shutdown while preserving terminal results for explicit joins.
• Fixed resume bypasses in plan approval by re-gating persisted mutating adaptive tasks when approval state is missing or pending.
• Restricted plan approval and cancellation to non-read-only roles and rejected cancel/approve after the approval state is no longer pending.

0.1.39

Fixed

• Made CI test execution deterministic across Node 22/macOS/Linux/Windows by running Node test files sequentially to avoid cross-file environment races.
• Fixed live-agent durable control symlink-file rejection to return an API error instead of throwing from the tool handler.
• Tightened symlink artifact security assertions so tests check leaked file contents rather than safe metadata paths.

0.1.38

Added

• Added parent-session wake-up for completed background subagents so the main agent automatically joins results and continues the original task.
• Added stronger resource/parser coverage for team role metadata and workflow task-body headings.

Changed

• Clarified the current default worker execution model and local disable controls in project guidance.
• Aligned config schema constraints for UI settings with the published package schema.

Fixed

• Hardened subagent abort handling so stopped records are persisted and late runner completion does not regress them to completed/error.
• Fixed blocked subagent result joins, blocked duration persistence, and final wake-up after blocked runs resume to terminal status.
• Blocked path traversal through workflow shared artifacts, run ids, imported run bundles, task-scoped mailbox APIs, agent runtime files, and untrusted artifact/transcript paths; hardened reads/writes with realpath containment to prevent symlink escapes; bound live-agent control to the selected run.
• Documented actual project resource paths for .crew/ and .pi/teams/ layouts.

0.1.31

Fixed

• Added required Agent Skills frontmatter (name and description) to built-in coding skills so Pi loads them without conflicts.
• Tightened built-in skill package coverage to require standards-compliant frontmatter.

0.1.30

Added

• Added Phase 6 async hardening: jiti loader resolution/fail-fast, async startup marker files, and early background-runner exit detection.
• Added worker concurrency hard cap with explicit limits.allowUnboundedConcurrency opt-out and observability event.
• Added persisted model routing metadata on tasks and agent records: requested model, resolved model, fallback chain, reason, and used attempt.
• Added self-contained architecture/runtime-flow docs and five built-in coding skills.
• Added mailbox replay on resume for pending inbox messages, including task-scoped messages.
• Added task resume checkpoints and recovery for crash-after-final-stdout and crash-after-artifact-write child-process tasks.
• Added async notifier detection for quiet dead background runners with durable async.died events.
• Added adaptive planner repair for malformed JSON, oversized task plans, and common role aliases before blocking implementation runs.
• Added package snapshot coverage for Phase 6 docs, skills, Pi manifest entries, and the runtime jiti dependency.
• Added src/subagents/* consolidation entrypoints for child spawning, background runner commands, and subagent manager APIs.
• Split team-tool.ts actions into focused status, inspect, lifecycle, cancel, and plan modules while preserving public action names.
• Split register.ts lifecycle wiring into command, team-tool, subagent-tool, and artifact-cleanup registration modules.
• Added async restart recovery integration smoke coverage for stale background pids.
• Added explicit recursive subagent depth and read-only role spawn-denial tests.

Changed

• Async background runs now use an explicit jiti loader path and expose startup markers for recovery/health checks.
• Active batch selection now caps excessive user concurrency by default to protect local machines.
• Resume now emits mailbox replay metadata before restarting queued work.
• Child-process tasks now persist checkpoint phases (started, child-spawned, child-stdout-final, artifact-written) during execution.
• Split task-runner.ts prompt/progress/state/live helpers into focused modules while keeping runTeamTask as the public entrypoint.
• Moved live-session access behind src/subagents/live/* and dynamic task-runner imports so default child-process flow does not eagerly load live runtime code.

Fixed

• Background runner startup failures are reported earlier instead of silently leaving queued/running manifests stale.

Release prep notes

• Suggested next release grouping: 0.1.30 for Phase 6 runtime hardening, resume recovery, model observability, docs/skills, and internal refactors.
• Gate run locally: npm run typecheck, npm test, and npm pack --dry-run.
• No breaking public API changes: tool actions, slash commands, config schema, and package name remain stable.

0.1.29

• Republished the child worker response timeout fix as a fresh npm version.

0.1.28

• Fixed child-process workers being terminated after only 15 seconds of quiet provider/tool time by increasing the default response watchdog to five minutes and clarifying the timeout error message.

0.1.20

• Reworked the implementation workflow into an adaptive planner-led orchestration flow that decides the number, roles, and phases of subagents from the task instead of using a fixed fanout template.
• Added dynamic adaptive task injection, persisted adaptive task metadata, and resume reconstruction for planner-selected subagent steps.
• Block implementation runs when the planner does not produce a valid adaptive plan, including missing/unreadable planner artifacts and malformed/oversized plans.
• Added tests for adaptive plan parsing, dynamic batch fanout, invalid-plan blocking, writer-role support, and adaptive resume recovery.
• Hardened subagent/runtime fixes from post-0.1.19 review: env-isolated depth tests, foreground failure status updates, generic tool conflict aliases, and max_turns propagation.

0.1.19

• Added Claude-style Agent, get_subagent_result, and steer_subagent tools backed by pi-crew's durable worker runtime, plus conflict-safe crew_agent, crew_agent_result, and crew_agent_steer aliases.
• Added a durable subagent manager with background queueing, completion notifications, result joins, session-bound cleanup, and direct single-agent runs via team run agent=....
• Disabled risky auto-opening of the right sidebar by default, added foreground completion notifications, and reduced duplicate widget/sidebar UI.
• Added progress coalescing and workflow concurrency helpers to keep foreground sessions responsive during busy worker output.
• Fixed live-session runs being classified as scaffold when workers are enabled and hardened session switch/shutdown cleanup for foreground child processes.

0.1.18

• Added a built-in parallel-research team/workflow for map-reduce style source audits with dynamic Source/pi-* fanout and parallel explorer shards.
• Made the live right sidebar the default foreground UI: active foreground runs auto-open a top-right live sidebar when the terminal is wide enough.
• Added live sidebar sections for active agents, waiting tasks, completed agents, task graph, model, tool, and token/usage details.
• Stopped materializing queued dependency tasks as child-process agents; status now separates active agents, waiting tasks, and completed agents.
• Added workflow-aware default concurrency so research/parallel-research can use ready parallel work instead of always running one worker.
• Dropped user/system prompt messages from child event persistence to avoid prompt/context leakage in agent event logs.
• Tightened child event compaction with separate assistant/tool input/tool result caps and improved powerbar active/waiting/model/token summaries.

0.1.17

• Fixed terminal/completed workers being incorrectly escalated as stale heartbeat blockers after all tasks completed.
• Cleaned child-process result extraction so result artifacts prefer final assistant output and no longer include worker prompt/context.
• Made /team-dashboard visibly render as a top-right sidebar by default with explicit right-sidebar title text.
• Added per-subagent model and usage fields to agent records, status output, and dashboard fallbacks so model/token totals stay visible while and after workers run.

0.1.16

• Added right-side /team-dashboard placement with model, token, and tool detail rows for subagents.
• Added UI config for dashboard placement/width and model/token/tool visibility.
• Foreground child-process runs now continue without blocking the interactive chat and remain tied to session shutdown.
• Child-process observability now drops noisy message_update/encrypted thinking deltas and stores compact events to prevent massive JSONL/output logs from freezing sessions.
• Cancel now syncs agent records and writes a foreground interrupt request so queued/running agents stop appearing stale.

0.1.15

• Child-process model selection now uses Pi-configured/available models and auto-discovers provider/model entries from Pi settings/models config.
• Added configured-model fallback chains for worker runs instead of forcing builtin provider hints.
• Fixed skipped task agent records so they no longer appear queued.

0.1.0

• Initial scaffold for pi-crew.
• Added Pi package manifest, extension entry, minimal team tool, slash commands, builtin resources, and documentation placeholders.