0.9.128

pstack no longer has the two source shapes that the Claude plugin directory's scanner read as a credential forward (MCP_FORWARDS_CREDENTIAL_ENV), the finding that held the plugin from publishing (#393). No child process inherits the whole environment. The statechart runner gives mise and java a named list of variables without the proxy variables, so behind a proxy the first mise install of TLC or Java no longer sees HTTPS_PROXY. In that case, set TLA2TOOLS and JAVA, as the error message says, or run mise install yourself with the proxy set. The Pi extension, codex-session-effort.mjs, worktree-audit.mjs, and claude-project-dir.mjs read named variables instead of taking an environment object. Identifiers named key beside a file read have names for what they hold, and the watcher's missing-key query failure is now missing-field, so a consumer that matches that failure kind needs the new name.

With pi agent tools: off set, the pstack-pi-tools system prompt section no longer adds the sentence from 0.9.127 that told the model to delegate with the session's own subagent tool. Live sessions with pi-subagents 0.84.0 installed beside pstack showed that it changed nothing. There were 10 sessions on openai/gpt-6.1-sol. Five had 0.9.127's sentence, three had a reworded sentence that also said Agent's fields do not carry over, and two had no sentence. In all 10, the model read pi-tools.md, called subagents_enable and then subagent, and never called agent. In all 10, subagent also rejected the call for an unknown description option, and the model stopped instead of retrying. The model takes description from the skill's own instruction to make an Agent call, which a system prompt sentence did not override. The sheet line still removes agent, send_message, list_agents, stop_agent, and /pstack-agents.