chore(deps): update pi-subagents to 0.64.0

[patchmill-release-please-bot]

pi-subagents dependency upgrade

Updates pi-subagents from 0.61.0 to 0.64.0.

Release notes

v0.62.0

Pi subagents 0.62.0 makes delegated work safer and more predictable. Child agents can now provide completion evidence in a cleaner shape, and agent configs can keep specific tools out of reach. Scheduled work can stay tied to the session that created it, which helps avoid surprising cross-session runs. This release also tightens async recovery and Windows child launches, especially around forked runs and missing Pi CLI resolution.

Highlights

• Child agents can report completion evidence more cleanly and stay away from tools they should not use.
• Session-only schedules keep personal scheduled work tied to the session that created it.
• Async forked runs now start and resume in the working directory you requested.
• Windows child launches are more reliable, with clearer errors when Pi cannot find a valid CLI.
• External CLI and read-only recovery paths are sturdier when workers disappear or prompts include unusual line separators.

Full changelog

Highlights

• Child agents can report completion evidence more cleanly and stay away from tools they should not use.
• Session-only schedules keep personal scheduled work tied to the session that created it.
• Async forked runs now start and resume in the working directory you requested.
• Windows child launches are more reliable, with clearer errors when Pi cannot find a valid CLI.
• External CLI and read-only recovery paths are sturdier when workers disappear or prompts include unusual line separators.

Added

• Let native children with outputSchema include required acceptance evidence in the same structured_output call with acceptance.report: "on"; acceptance.report: "off" keeps fenced acceptance reports. Thanks @mapleluvr for #1770.
• Add per-agent excludeTools deny-lists that compose with Pi's ambient or explicit child tool selection. Thanks @expoli for #1776.
• Add session-only durable schedules that only run in the session that created them. Thanks @yangfeng20 for #1777.

Fixed

• Keep async forked runs in the requested child cwd when they start or resume. Thanks @stekman08 for #1785.
• Accept JSON-encoded acceptance objects from model tool calls, while still failing clearly for malformed strings. Thanks @mapleluvr for #1781.
• Keep steer and follow-up receipt statuses separate from their redacted message previews (#1773).
• Create async lifecycle sidecars before external CLI workers begin worktree changes, so disappeared runners are reported as failed runs. Thanks @fkhawajagh for #1764.
• Preserve explicit read-only intent when escaped line separators surround no-edit wording. Thanks @fkhawajagh for #1765.
• Launch child Pi processes through the resolved CLI JavaScript on Windows, and run JavaScript PI_SUBAGENT_PI_BINARY overrides with Node. Thanks @caohuipeng for #1768.
• Resolve the installed Pi CLI on Windows wrapper hosts from the forwarded package root, and report a clear error when no verified CLI can be found. Thanks @lux032 for #1780.

v0.63.0

pi-subagents 0.63.0 makes larger delegated workflows easier to follow and easier to keep isolated. Workflow progress is now clearer in status, Fleet, and live widgets, so you can see what is happening without expanding every child. Worktrunk users get managed worktrees automatically while native Git remains available as a fallback. This release also tightens several async and read-only edge cases so background work cleans up and reports results more reliably.

Highlights

• Workflow progress is easier to scan in status, Fleet, and live widgets.
• Additional agent folders can now be configured without copying definitions into one directory.
• Worktrunk users get managed worktrees automatically, with native Git available as the fallback.
• Fleet can jump straight into the selected child run's Herdr inspector.
• Async runs clean up and report edge cases more reliably.

Full changelog

Highlights

• Workflow progress is easier to scan in status, Fleet, and live widgets.
• Additional agent folders can now be configured without copying definitions into one directory.
• Worktrunk users get managed worktrees automatically, with native Git available as the fallback.
• Fleet can jump straight into the selected child run's Herdr inspector.
• Async runs clean up and report edge cases more reliably.

Added

• Show workflow progress as stacked checklist summaries in status, Fleet, and live widget views (#1806).
• Add configurable extra agent scan directories with one-segment wildcard expansion. Thanks to @mystery4f for #1801.
• Make Worktrunk a first-class managed worktree provider, selected automatically when available with native Git as the fallback (#1800).
• Let Fleet open the selected async child in its child-specific Herdr inspector. Thanks to @stekman08 for #1790.

Changed

• Show workflow checklist phases first in collapsed views, while keeping child details available when expanded (#1810).

Fixed

• Keep isolated test runs from writing agent definitions into an inherited PI_CODING_AGENT_DIR. Thanks to @mapleluvr for #1809.
• Prevent nested tool-availability diagnostics from failing an otherwise valid parent result. Thanks to @robertvangor for #1802.
• Free async capacity correctly after workflows finish, even when saved step status is stale. Thanks to @boggylp for #1804.
• Make subagents.agentOverrides.<name> replace matching custom-agent frontmatter fields, consistently with builtin agents. Thanks to @expoli for #1796.
• Strip the trailing Pi turn-timing footer from child output. Thanks to @fkhawajagh for #1792.
• Keep inferred acceptance reports out of reviewer and read-only child prompts. Thanks to @expoli for #1797.
• Preserve coordinated read-only intent when direct async children resume, and show captured structured output in completion and status evidence. Thanks to @fkhawajagh for #1788.
• Keep macOS subagent tasks out of argv by delivering them through temporary files. Thanks to @josephkallas for #1793.

v0.64.0

This release makes watchdogs more useful before and during delegated work. They can now stop risky child launches up front, review diffs with a safer read-only tool, and reuse standing project guidance from WATCHDOG.md. Watchdog findings are also easier to notice because they show up in parent results, completion notices, acceptance evidence, and Fleet. Workflow status and async result reporting are less noisy and more accurate, especially around preflight checks, thinking metadata, and idle attention.

Highlights

• Watchdog can now warn or block child launches before they start, based on role and model rules.
• Watchdog reviews are easier to guide with safe diff access, reusable WATCHDOG.md instructions, and configurable child review cadence.
• Watchdog findings are easier to see in parent results, completion notices, acceptance evidence, and Fleet.
• Workflow status and async results are less noisy and more accurate.

Need to know

Affected users	Change
Users with watchdog config	Unsupported watchdog settings that never took effect are now rejected instead of silently accepted.
Users with autoFollow watchdog config	autoFollow is removed. Pi 0.84+ already continues after displayed boundary warnings, and repeated identical warnings stop after subagents.watchdog.stalemateRepeats.

Full changelog

Highlights

• Watchdog can now warn or block child launches before they start, based on role and model rules.
• Watchdog reviews are easier to guide with safe diff access, reusable WATCHDOG.md instructions, and configurable child review cadence.
• Watchdog findings are easier to see in parent results, completion notices, acceptance evidence, and Fleet.
• Workflow status and async results are less noisy and more accurate.

Added

• Add watchdog launch rules under subagents.watchdog.rules, with per-role model allow and deny globs that warn or block before a child starts.
• Give watchdog reviewers a read-only watchdog_diff tool for session-start diffs, untracked paths, path narrowing, and stat summaries.
• Run child watchdog reviews on a configurable cadence with children.cadence and children.overrides.<agent>.cadence.
• Show child watchdog warnings in parent results, acceptance evidence, completion notices, and Fleet wd:<n> chips.
• Load watchdog reviewer instructions from project and agent WATCHDOG.md files.

Changed

• Reject unsupported watchdog settings that never took effect: delivery, showDuringRun, syncBacklog, lateWarningPolicy, compactAtPercent, reviewRetryDelayMs, maxReviewFailures, asyncCompletion, and guidance.systemPromptPath.
• Remove watchdog auto-follow. Pi 0.84+ already continues after displayed boundary warnings, and repeated identical warnings now stop after subagents.watchdog.stalemateRepeats. The autoFollow settings block is now unknown.

Fixed

• Keep advisory preflight checks out of runtime workflow rows and queued checklist counts (#1821). Thanks @stekman08.
• Preserve effective thinking in completed async step results. Thanks to @Nickonomic for #1823.
• Forward workflow child control overrides through new and retained launches, and suppress idle needs-attention notices before the first assistant turn (#1817). Thanks @rrocxela.

Changed files

• package.json
• package-lock.json
• npm-shrinkwrap.json
• nix/package.nix

Validation

• node --test src/pi/pi-subagents-dependency-contract.test.ts
• bun scripts/verify-pi-subagents-bun-workflow.mjs
• npm test
• node scripts/smoke-packed-artifact.mjs
• npm run lint
• scripts/update-npm-deps-hash.sh
• nix build .#patchmill --print-build-logs
• (cd result/share/patchmill && node --test --test-name-pattern='pi loads the resolved pi-subagents extension package without model execution' src/pi/pi-subagents-dependency-contract.test.ts)
• nix flake check --accept-flake-config --print-build-logs

This pull request is review-gated and does not auto-merge or publish.