v0.37.0

[0.37.0] - 2026-07-25

Added

• Bound public launch preflight to versioned selected-agent definition digests, projected async lifecycle/status/result/process-terminal roots, and actual foreground/async execution digests in result and status metadata. Thanks to @shaggitza for #637.
• Added subagents.defaultExtensions for shared child extension allowlists and agentOverrides.<name>.extensions for per-agent settings. Thanks to chronoAP for #642.
• Added a public pi-subagents/preflight API that resolves an ordinary single-agent launch contract without creating child sessions, temp prompt files, structured-output runtimes, or run artifacts. Thanks to @shaggitza for #634.
• Added an out-of-band, session-scoped capability-ceiling API for monotonic child tool and extension restrictions, with inherited async/nested propagation and bounded audit metadata. Thanks to aoguai for #585.
• Added durable v3 process-terminal proof for detached async runners, with exact close observation, conservative unknown states after observer loss, and status/RPC projections. Thanks to shaggitza for #626.
• Added subagents.defaultThinking for project- or user-scoped default thinking levels on agents without explicit thinking settings. Thanks to corrius for #612.
• Documented that builtin worker and delegate agents use strict tool allowlists and do not inherit ambient parent extension tools; custom agents must explicitly name extension tools and load their providers. Thanks to buihongduc132 for #586.

Fixed

• Preferred direct empty terminal-response evidence over stale tool errors so fallback models can retry abandoned child turns, and stopped treating successful tool output as a hidden failure. Thanks to Dmitry S. (@nuzayets) for #645.
• Separated evidence acceptance from independent review: evidence levels now end at verified, risky runs carry an orthogonal review requirement, review-required reports pending review while preserving evidenceStatus, and reviewed is reserved for achieved independent review. Explicit reviewed remains schema-recognized solely for actionable preflight recovery. Thanks to Theodor Hillmann (@t0dorakis) for #440.
• Bound public preflight launch digests to resolved skill injection metadata, matching execution when skill descriptions change.
• Classified missing resolved MCP direct tools as a host/pi-mcp-adapter child-registration problem while preserving strict fail-closed diagnostics. Thanks to peedrr for #638.