@fitchmultz/pi-subagents 0.49.1

Changed

• Worker verification guidance now requires an execution command and venue, carries applicable execution policy through delegation and continuation, and accepts inspected remote verification evidence without implying local execution.

Release verification

@fitchmultz/pi-subagents 0.49.0

Added

• Event-driven remote inbox waits through optional waitMs (0–10000 ms) and CLI inbox --wait-ms, preserving immediate reads by default, durable cursor paging and explicit acknowledgement.
• Native fallback wake two seconds after mailbox commit without intake acknowledgement, with durable shared admission of at most 20 attempts per sliding hour across all identities and URLs. Pending cold batches coalesce, retain retry deadlines across crashes and rotations, and recover automatically when allowance returns.
• Stopped-helper audit preflight for preserving known remaining wake allowance during migration; unverified legacy usage conservatively reserves the first hour.

Fixed

• Cancelling an inbox read no longer disconnects the certificate-bound native identity or interrupts unrelated requests. Revocation, expiry, broker disconnect and shutdown still cancel outstanding waits.

Release verification

@fitchmultz/pi-subagents 0.48.0

Added

• Remote live/saved session discovery, workspace-aware spawn with task/model selection, and resume by stable ID or unique name. Reuse discoverable live owners rather than reopening their journal; retain native model selection and history on resume. Owned cancellation preserves accepted queues, while owned stop observes actual process closure.
• Certificate-authenticated native control and bounded recent transcripts for updated live Pi owners, plus read-only saved transcripts. Foreign cancellation/shutdown receipts describe the requested native stage and mode limitations; they do not claim process exit or terminate detached work.
• Persistent named peer groups and broadcasts with per-recipient receipts, explicit partial outcomes and no automatic mutation retries.

Fixed

• Preserve confirmed, unknown and unattempted broadcast outcomes when the broker stalls or disconnects, without disclosing partial results after identity revocation or certificate expiry.
• Inspect native resume identity before opening a writable journal so rejected requests cannot publish an incomplete tail. Saved transcripts tolerate interrupted malformed records while retaining structural limits.
• Reduce archive lookup allocation churn with shared bounded scratch storage, and switch to header-only uniqueness checks after a verified exact native-ID match.

Release verification

@fitchmultz/pi-subagents 0.47.0

Added

• Unattended remote Intercom: private durable mailboxes with bounded cursor drains, persistent authenticated presence, and optional HTTPS fallback wake after two minutes without consumer acknowledgement. Helper crashes, idle leases and broker outages retain unread messages and unanswered asks. Consumer acknowledgement suppresses fallback without discarding reply obligations.
• Remote live/saved session discovery, workspace-aware spawn with task/model selection, and resume by stable ID or unique name. Reuse discoverable live owners rather than reopening their journal; retain native model selection and history on resume. Owned cancellation preserves accepted queues, while owned stop observes actual process closure.
• Certificate-authenticated native control and bounded recent transcripts for updated live Pi owners, plus read-only saved transcripts. Foreign cancellation/shutdown receipts describe the requested native stage and mode limitations; they do not claim process exit or terminate detached work.
• Persistent named peer groups and broadcasts with per-recipient receipts, explicit partial outcomes and no automatic mutation retries. Client provisioning supports distinct bridge ports, configurable certificate lifetimes and same-CA server renewal for independent instances.

Fixed

• Preserve local identity policies during certificate rotation, and prevent consumer-acknowledged inbound asks from generating redundant fallback wakes.

Release verification

@fitchmultz/pi-subagents 0.46.2

Changed

• Keep parent execution, history and UI imports behind the child-mode guard. Skip empty streaming-spool replay/truncation and right-size copy buffers while preserving exact native wire logs and completed-text output.
• Reuse a bounded set of SQLite statements, prune through indexed source lookups and publish small indexed records in one transaction. Bound pending-human reply lookup and improve relevance search without changing global scores, attempt boundaries or pagination.
• Avoid irrelevant completion discovery and duplicate profile reads when listing agents. Reuse unchanged native history cards while retaining fresh detail validation, expanded state and source/theme invalidation.
• Assemble fragmented Intercom frames and restore topic snapshots incrementally. Encode socket payloads once and keep legacy lists identity-only without reconstructing discarded topic arrays; encoded limits and validation-before-commit remain unchanged.
• Aggregate workflow activity on tool transitions and coalesced status publication rather than every streaming delta. Preserve all observer updates and scheduling requests.
• Right-size saved-owner JSON scratch buffers and share supplemental-owner reads across recovery. Filter validated embedded question owners before reading foreign answer/delivery/revival/cancellation state, preserving full archive discovery, selected validation and fresh publication.
• Record reproducible operation-count baselines and qualified startup measurements in the performance guide.

Fixed

• Clear stale top-level tool/path activity when a parallel child exits or fails without a tool-end event, while retaining activity until a resistant process actually exits.

Release verification

@fitchmultz/pi-subagents 0.46.1

Fixed

• A child that fails with Node's bare terminated network error (the response stream dropped mid-body, common during Wi-Fi drops) now gets the same-model retry and configured fallback models like other transport failures, instead of failing outright. Pi already retries this error inside the child.

Release verification

@fitchmultz/pi-subagents 0.46.0

Added

• Opt-in controlled destination Pi-session launching over the secure Intercom bridge: locally pinned native RPC sessions, private native journals and inference-free startup, actual peer readiness, name reuse, own-session status/stop, caps, and remote CLI commands. Cancellation, expiry, revocation and shutdown reap the helper-owned process group, including unresponsive native workers, while retaining journals and observing actual closure. Cleanup deadlines report stop_timeout and remain retryable; cleanup failures preserve the original startup fault. Messaging-only and standalone credential installs remain independent of Pi SDK imports.

Release verification

@fitchmultz/pi-subagents 0.45.0

Changed

• Refresh bundled role defaults. Claude Opus 5.5 at xhigh now drives planner, ui-designer, writer and reviewer-claude, with GPT-6.1 Sol as fallback. GPT-6.1 Sol at xhigh drives worker, fixer, debugger, researcher, context-builder, oracle and the reviewer, reviewer-gpt, reviewer-ponytail and reviewer-security roles; scout and delegate stay at high. Sol roles fall back to Opus 5.5, except fork-default oracle (Anthropic is ineligible for fork context) and reviewer-security (Opus refuses security review work), which fall back to zai/glm-5.3. Removed stale anthropic/claude-opus-5, gpt-5.6-sol, gpt-6-astra and claude-fable-5-1 routes. Watcher is unchanged.
• Acceptance contracts now tell children to check early whether every criterion is verifiable in their environment and to report unreachable services, credentials, devices or tools right away instead of spending turns on workarounds; observed human-only boundaries still report as blocked. The skill tells parents to require only checks the child can run.
• Enforce strict Oxlint and Oxfmt rules through the published tools, editor configuration and CI. Refactor maintained code into focused owners, preserve native SDK contracts, and validate persisted run data at runtime boundaries. Package versions and user-facing behavior remain unchanged.

Release verification

@fitchmultz/pi-subagents 0.44.7

Fixed

• Keep newer Agents history, including consumed human answers, from being overwritten by an older in-flight page. Recheck the owning session, index, selected attempt, source and published page before applying async history or saved-result reads; preserve requested paging and reading anchors when reloading an invalidated snapshot.
• Consume refresh notifications received while the latest conversation page is loading, without pulling scrolled readers forward or automatically retrying history errors.
• Emit the Intercom bridge session_closed audit record after broker disconnect completes and the closing session is removed; cancellation still rejects pending and new requests for that identity immediately.

Release verification

@fitchmultz/pi-subagents 0.44.6

Fixed

• Keep full Agents pages available for long native histories by sharing bounded configuration results across rows and repeated queries. Committed publication, source generations and exact terminal/time/leaf boundaries invalidate reuse; strict errors and source integrity checks remain unchanged.
• Restrict scoped saved-text search to eligible records before aggregating matches, retaining the complete corpus for global relevance scores, cross-field word matching, phrases, attempt boundaries and pagination.
• Publish one settled-freshness notification for unchanged history census work instead of one per run/source. Real commits, canonical failures and source error/recovery observations still notify; polling, census and watches remain active.

Release verification