fix(chat): read Pi histories past 64 MiB - #869

…appers (#970)

## Problem

`server/herdr/client.ts` exported an untyped `herdrRpc(method: string,
params: Record<string, unknown>)`. Eleven server files called it
directly for four methods (`pane.process_info` x10, `agent.get` x6,
`pane.send_text` x2, `pane.send_keys` x1), each with its own inline
result type. Nothing stopped `{ target }` reaching `pane.process_info`,
which herdr then silently answers for the focused pane (the AGENTS.md
rule was prose only).

## Change

- `server/herdr/methods.ts`: `HerdrMethods`, a `{ [method]: { params;
result } }` map for those four methods. Params and result bodies come
from the generated schema types; `PaneProcessInfoParams`, `AgentTarget`
and `PaneProcessInfo` are now generator roots
(`scripts/generate-protocol-types.ts`, regenerated
`shared/herdr-api.generated.ts`). The map itself is hand-written because
herdr's schema links a method to its params (`request.oneOf`) but not to
its answer: answers are one `ResponseResult.oneOf` told apart only by a
`type` tag (`pane_process_info`, `agent_info`, `ok`).
- `herdrRpc<M extends keyof HerdrMethods>(method, params:
HerdrMethods[M]["params"], …): Promise<HerdrMethods[M]["result"]>` is
the first overload. An untyped fallback overload stays for methods the
map does not list yet. It refuses a typed method name
(`UntypedHerdrMethod<M>` is `never` for one), so
`herdrRpc("pane.process_info", { target })` is a compile error.
`server/herdr/seam.test.ts` pins that with `@ts-expect-error` and checks
the wire params of the new wrappers against a stand-in socket.
- New wrappers: `paneProcessInfo(paneId)` returns one shared
`ProcessInfo` (= generated `PaneProcessInfo`: shell_pid,
foreground_processes with pid/name/argv0/argv) and `agentGet(paneId)`
returns `AgentInfo`. The existing `paneSendText` / `paneSendKeys` now go
through the typed overload. The wrappers call the exported `herdrRpc`
binding, so tests that `spyOn(herdr, "herdrRpc")` keep working.
- Migrated (no open PR touches them): `server/pi.ts`, `server/omp.ts`,
`server/grok-store.ts`, `server/agy-store.ts`, `server/codex.ts` (x3).
Behaviour is unchanged: the same params go on the wire, with the same
default timeout and the same `.catch` / `try` at each call site.
`codex.ts` keeps its old `argv?: string[]` reading through a commented
cast, because the schema allows `argv: null` and that path has never
handled null. Changing that would change behaviour, so it is left for a
separate fix.
- Guard: `server/conventions.test.ts` ("herdr socket") now fails when
server code outside `server/herdr/` uses `herdrRpc`. The message names
the fix ("add a typed wrapper in server/herdr/client.ts; for pane status
use the server/collector.ts listeners") and the allowlist
`HERDR_RPC_ALLOWED`. A stale allowlist entry also fails. The
`events.subscribe` / `subscribeEvents` rules from #949 were already
there; their message now also says where `events.subscribe` lives.
- AGENTS.md: the `pane.process_info` line points at `paneProcessInfo` /
`HerdrMethods` and names the enforcing test. Only that one line changes;
#812, #888 and #894 also edit AGENTS.md.

## Allowlist (`HERDR_RPC_ALLOWED`, migrated in PR B)

| File | Open PRs touching it |
|------|----------------------|
| `server/conversation.ts` | #869 #912 #923 |
| `server/gjc-runtime.ts` | #912 |
| `server/hermes.ts` | #910 |
| `server/omo.ts` | #923 |
| `server/shell-agent.ts` | #885 #923 |

Built from `gh pr list --state open --limit 100 --json number,files` on
2026-10-14.

## Known limits (closed in PR B)

- The export is still named `herdrRpc`. Renaming it to `herdrRpcUnsafe`
would touch about 33 test files and 30 `scripts/` harnesses, several of
them in open PRs (api.contract, gjc.contract, omo.contract,
ui-regression, pending-input…). Tests and `scripts/` QA harnesses are
outside this guard's scope: they drive herdr (`pane.report_agent`,
`workspace.create`, …) and are not part of the bridge seam.
- A call with an explicit result type,
`herdrRpc<Inline>("pane.process_info", …)`, still reaches the untyped
fallback. That is the form the allowlisted files use, and they may not
change here. In server code the source guard closes this gap. The
fallback goes away once the allowlist is empty.

## Validation

- `bun run check fast`: green. A first run had one failure in
`server/portal.test.ts` ("does not treat an arbitrary interpreter as a
Portal script": the process argv read raced and returned undefined).
This change does not touch that file, it passed alone, and the rerun was
fully green.
- `bun run test:integration`: 455 pass, 0 fail, 14 skip in 38 files
(includes the omp, codex, codex-binding, pi, gjc, omo and hermes
contract tests).
- I checked by hand that the guard fails on a new `herdr.herdrRpc` use
in `server/pi.ts`.

## Follow-up: PR B

Once #869, #885, #910, #912 and #923 land: migrate the five allowlisted
files to `paneProcessInfo` / `agentGet` / `paneSendText` /
`paneSendKeys`, empty `HERDR_RPC_ALLOWED`, drop the untyped fallback
overload (or rename it `herdrRpcUnsafe` for tests and scripts), and
consider handling `argv: null` in `codex.ts`.

## Review

Fixed in 290d5f1:

- **Union of typed methods (medium, part of finding 1).** The typed
overload takes `SingleHerdrMethod<M>`, so `herdrRpc(cond ?
"pane.process_info" as const : "agent.get" as const, { target })` no
longer compiles. `seam.test.ts` pins this with a `@ts-expect-error`
line. Checked with tsc: the inferred `herdrRpc("pane.process_info", {
pane_id })` still returns the typed result.
- **Allowlist missed #928 and #859 (medium).** `conventions.test.ts`
adds `HERDR_RPC_PENDING` with `server/gjc-status.ts` (#928) and
`server/index.ts` (#859). Those PRs add a `pane.process_info` call, but
neither file calls herdrRpc on main yet, so the "no longer calls" check
skips them. It would be better for both PRs to switch to
`paneProcessInfo(paneId)`, which is a one-line change in each. After
that, these entries come out.
- **Docs claimed more than the PR delivers (low).** AGENTS.md now says
the guard enforces the rule, not the compiler, and that the allowlisted
and pending files still call herdrRpc. The changelog fragment now says
"no longer compiles without an explicit result type". "PR B" is replaced
with "a follow-up PR that moves these files to the wrappers once their
open PRs land". The fallback docblock in `client.ts` and the
`UntypedHerdrMethod` comment in `methods.ts` list the holes.

Deferred to the follow-up PR that drains `HERDR_RPC_ALLOWED`:

- **Explicit result type and widened string (rest of finding 1).**
`herdrRpc<T>("pane.process_info", { target })` and `herdrRpc(m as
string, { target })` still compile. With an explicit T, the fallback's
`M` stays at `string`, and that cannot be closed while the fallback
shares the name. Closing it means splitting the fallback out as
`herdrRpcUntyped` (or `herdrRpcUnsafe`) and moving about 400 test and
script call sites onto it. It also means converting the
`herdrRpc<T>("pane.process_info" | "agent.get", …)` calls in the five
allowlisted files, which conflicts with their open PRs. `seam.test.ts`
keeps both forms as compiling lines with a comment, so the follow-up can
turn them into `@ts-expect-error`.
- **Error message.** Two overloads are still present, so tsc reports a
bad inferred call such as `{ target }` to pane.process_info as `not
assignable to parameter of type 'never'` instead of naming the wrong
param. That message only gets better with the split.
- **Stale pending entries.** Nothing removes a `HERDR_RPC_PENDING` entry
on its own. If #928 or #859 switches to `paneProcessInfo` or closes, its
entry stays until someone takes it out by hand.
- **Tell the open PRs.** #912, #923, #928, #859 and #910 call
`herdrRpc<T>("pane.process_info", …)`. They should hear about the switch
to `paneProcessInfo` before the split lands. I have not commented on
those PRs.

Checks: `bun run check fast` passed (typecheck, build, 3452 unit tests).
`bun run test:integration` passed (455 pass, 0 fail).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

#863, #864, #869 and #870 edited CHANGELOG.md directly, so the fold did not link them; #863's entry named the Files at once setting that #1104 removed (the app now takes up to 100 files).

## Change

Release 0.4.9 from main at 6e575a8 (v0.4.8 + 193 commits), plus one
blocker fix found in pre-release QA.

- **`fix(terminal)` (ededf39)**: an open terminal re-attaches by itself
after herdr restarts or updates. Before, the pane kept "terminal ended"
and dropped typed input until another pane was picked (also in v0.4.8).
The renderer now keys its attachment on the pane's `terminal_id`, which
herdr changes on restore, and a cached tab waits until it is shown
again. Locked by `scripts/herdr-restart-regression.ts` (fails on main,
passes here), added to the browser lane.
- `package.json` and `herdr-plugin.toml`: 0.4.9.
- CHANGELOG: `[Unreleased]` and 147 changelog.d fragments become
`[0.4.9] - 2026-10-16`, with `by @login` for outside contributors (22
PRs) and #1164 by @aisensiy carried in #1169. The reattach entry has no
PR link yet: it is this PR's.
- `release-summaries.json`: 0.4.9 in en/ko/ja/zh (7 new, 7 improved, 8
fixed in each).
- `REMOTE_BUNDLE_VERSION` 27 -> 28: the bundle's inputs changed since
remote-v27.
- `telemetry/deployed.json`: the Worker was redeployed (version
431d6e07) for the settings schema changes since v0.4.8 (#1120, #1123,
#1135); before it, this build's install event got HTTP 400.

## Release notes (as installs will show them)

### New features

- New workspace → Browse makes a new folder and starts in it.
- Shortcuts record chords with their exact modifiers; New tab and splits
can be bound.
- Pin workspaces, worktrees and agents from a row's menu or a
right-click.
- A Jump to bottom button returns a terminal scrolled up into history to
the live end.
- Pick a skill anywhere in a message, not only at its start.
- Connect to remote PCs from a Windows PC.
- Mod+Shift+E puts the cursor in the pane's input.

### Improvements

- Split view halves are independent, and both may show the same tab.
- Phones start in direct typing; the key bar's keyboard key lights for
the input line.
- Claude's whole plan shows from its plan file, and its answer review
reads correctly.
- Send shows progress until the agent takes the message, and Stop always
goes first.
- Recent tabs stay ready, so switching back shows the chat at once.
- Sign out moved into Settings behind a confirm; menus and settings were
trimmed.
- A workspace or tab reopens on the pane you last saw, also after a
reload.

### Bug fixes

- Open terminals reconnect by themselves after herdr restarts or
updates.
- With herdr 0.9.4 or later, a second device no longer types stray
characters into a pane.
- Typing Hangul from an iPad hardware keyboard composes syllables.
- Opening an Android keyboard no longer resizes the shared terminal.
- When the app's folder is replaced under it, it asks for a restart, not
an endless reload.
- Hermes: Stop ends a running turn, and Chat will not send over text
typed in its input.
- The sidebar no longer breaks on a worktree without a branch.
- A click on a lone pane's top right corner reaches the program there.

The full changelog is the [`[0.4.9]` section of CHANGELOG.md on this
branch](https://github.com/devswha/herdr-web-ui/blob/chore/release-0.4.9/CHANGELOG.md)
(too long for a PR body).

## Verification

Scenarios ran on c5f297e. The two commits after it (a978847, 14387e5)
change only CHANGELOG.md, from the gate review: links for #863, #864,
#869, #870, #972 and #1161, #811 moved from 0.4.7 (where a merge put it)
into 0.4.9, and entries no longer name the removed Files at once setting
or Find. No runtime behaviour differs from what was verified.

QA plan with scenarios and pass conditions: user flows install → first
run → daily use → errors, on Linux, macOS, Windows and remote PCs. Each
scenario ran twice: a first pass on main 6e575a8, then an independent
re-run by separate agents on this head (c5f297e), checked artifact by
artifact. Browser checks drove a real Chrome at 1440 px and 390 px
(iPhone emulation), light and dark. Local herdr was 0.9.5 (CI pins
0.9.3), so this also covers the newer herdr users have.

| ID | Flow | Where | Result on c5f297e |
|---|---|---|---|
| L1 | Fresh install: README plugin path and `install.sh` one-liner |
Clean Ubuntu 24.04 (Docker) | PASS: both exit 0, health ok, startup hook
after a herdr restart |
| M1 | Plugin install, start, first terminal | MacBook, macOS 26.6,
herdr 0.9.5 | PASS: installed in ~1 min, health ok, `echo` runs |
| W1(a) | Fresh native install | windows-latest ("Real Windows install"
check) | PASS (CI) |
| W1(b) | Plugin install on an existing herdr 0.9.3, mirrored pane |
Windows 11 PC | PASS; installer unit test PASS |
| L2 | First run: workspace list, new workspace, type in a pane | Linux,
herdr 0.9.5 | PASS |
| L3 | Daily use: split halves on one tab, Browse → New folder, pin,
record a shortcut, Sign out confirm, phone direct typing and input-line
key | Linux | PASS 7/7 |
| L4 | herdr down, server restart, typing while disconnected (kept as a
draft), token-protected server refuses a fresh browser | Linux | PASS |
| FIX1 | herdr stop + start with a pane open: re-attaches without
re-pick or reload | Linux | PASS (screenshots below) |
| R1 | Remote PC over SSH: bundle smoke, key + password logins, desktop
and phone | Linux sshd, Debian container | PASS |
| L5 | In-place update and PWA update | Linux | PASS for the product;
`update-browser-qa.ts` needs a fixture body after a fold (#1178) |
| C1 | Integration suite on herdr 0.9.5 + settings/split/shortcut/chat
browser scripts | Linux | 521 pass / 0 fail; `chat-browser-qa.ts` script
drift (#1178) |
| T1 | 1,484/2,000-char one-line messages into real Claude Code | Linux;
macOS | Linux PASS; **macOS input line: known issue #1174, see below** |

CI on this head: Fast checks, Integration and browser, Native Windows
install, Real Windows install, macOS session identity and the remote
bundle builds all pass. Local `bun run check fast`: 3,825 unit tests
pass; `bun scripts/release-guards.ts` passes.

### Known issue shipped: #1174 (not a regression)

On macOS, a single-line message of about 1.5 KB sent through the
terminal **input line** can reach Claude Code without its first 1,022
characters (5/5 in the re-run; the first pass kept it whole). It
predates 0.4.8. Two fixes were built and rejected on runtime evidence:
bracketed paste over `pane.send_text` corrupts plain shells, and sending
through the attach stream lets a following Stop overtake the message. A
safe fix needs a program-aware paste RPC from herdr or a shared delivery
barrier. Direct typing, which phones start in from this release, and the
desktop terminal delivered the same messages whole. Details in #1174.
**Shipping with it is the maintainer's call at merge**: the QA plan
counted it as a blocker, and no safe fix exists in this release.

### Follow-ups filed
#1177 (Homebrew Bun hint), #1178 (three QA scripts outside CI drifted),
#1179 (small UI findings).

### Screenshots (from the re-run on this head)

**Reattach after a herdr restart (FIX1)**
<img
src="https://raw.githubusercontent.com/devswha/herdr-web-ui/9bc3d185945572068f3fe9746e646312a009618c/FIX1/restarted-1440-dark.png"
alt="pane re-attached after herdr restart, desktop" width="560"> <img
src="https://raw.githubusercontent.com/devswha/herdr-web-ui/9bc3d185945572068f3fe9746e646312a009618c/FIX1/restarted-390-light.png"
alt="phone" width="240">

**First run (L2)**
<img
src="https://raw.githubusercontent.com/devswha/herdr-web-ui/9bc3d185945572068f3fe9746e646312a009618c/L2/echo-terminal-1440-dark.png"
alt="first terminal" width="560"> <img
src="https://raw.githubusercontent.com/devswha/herdr-web-ui/9bc3d185945572068f3fe9746e646312a009618c/L2/echo-terminal-390-light.png"
alt="phone" width="240">

**Daily use (L3)**
<img
src="https://raw.githubusercontent.com/devswha/herdr-web-ui/9bc3d185945572068f3fe9746e646312a009618c/L3/split-03-typed-in-active-half-both-draw-1440-dark.png"
alt="split halves on one tab" width="560">
<img
src="https://raw.githubusercontent.com/devswha/herdr-web-ui/9bc3d185945572068f3fe9746e646312a009618c/L3/newfolder-03-created-directory-follows-1440-light.png"
alt="Browse, new folder" width="560">
<img
src="https://raw.githubusercontent.com/devswha/herdr-web-ui/9bc3d185945572068f3fe9746e646312a009618c/L3/pin-02-workspace-pinned-1440-dark.png"
alt="pinned workspace" width="560">
<img
src="https://raw.githubusercontent.com/devswha/herdr-web-ui/9bc3d185945572068f3fe9746e646312a009618c/L3/signout-02-confirm-dialog-1440-dark.png"
alt="sign out confirm" width="560"> <img
src="https://raw.githubusercontent.com/devswha/herdr-web-ui/9bc3d185945572068f3fe9746e646312a009618c/L3/phone-02-input-line-key-lit-390-dark.png"
alt="phone input line key lit" width="240">

**Errors (L4)**
<img
src="https://raw.githubusercontent.com/devswha/herdr-web-ui/9bc3d185945572068f3fe9746e646312a009618c/L4/herdr-stopped-disconnected-1440-dark.png"
alt="herdr stopped" width="560">
<img
src="https://raw.githubusercontent.com/devswha/herdr-web-ui/9bc3d185945572068f3fe9746e646312a009618c/L4/server-restarted-reconnected-draft-offered-1440-dark.png"
alt="draft offered after reconnect" width="560"> <img
src="https://raw.githubusercontent.com/devswha/herdr-web-ui/9bc3d185945572068f3fe9746e646312a009618c/L4/server-killed-typed-draft-kept-390-light.png"
alt="phone draft kept" width="240">
<img
src="https://raw.githubusercontent.com/devswha/herdr-web-ui/9bc3d185945572068f3fe9746e646312a009618c/L4/unauth-gate-signin-1440-dark.png"
alt="token gate" width="560">

**macOS (M1) and Windows (W1)**
<img
src="https://raw.githubusercontent.com/devswha/herdr-web-ui/9bc3d185945572068f3fe9746e646312a009618c/M1/06-echo-1440-dark.png"
alt="macOS" width="560">
<img
src="https://raw.githubusercontent.com/devswha/herdr-web-ui/9bc3d185945572068f3fe9746e646312a009618c/W1/echo-1440-dark.png"
alt="Windows mirrored pane" width="560"> <img
src="https://raw.githubusercontent.com/devswha/herdr-web-ui/9bc3d185945572068f3fe9746e646312a009618c/W1/echo-390-light.png"
alt="Windows, phone" width="240">

**Remote PC (R1), Claude long message on Linux (T1), update notes (L5)**
<img
src="https://raw.githubusercontent.com/devswha/herdr-web-ui/9bc3d185945572068f3fe9746e646312a009618c/R1/machines-1440-dark.png"
alt="remote PCs" width="560"> <img
src="https://raw.githubusercontent.com/devswha/herdr-web-ui/9bc3d185945572068f3fe9746e646312a009618c/R1/add-pc-390-light.png"
alt="add PC, phone" width="240"> <img
src="https://raw.githubusercontent.com/devswha/herdr-web-ui/9bc3d185945572068f3fe9746e646312a009618c/T1/claude-1484-390-dark.png"
alt="1,484 chars into Claude" width="240">
<img
src="https://raw.githubusercontent.com/devswha/herdr-web-ui/9bc3d185945572068f3fe9746e646312a009618c/L5/notes-desktop.png"
alt="release notes beside the update" width="560">

Screenshots live on the `qa/v0.4.9-evidence` branch (not for merging;
delete it after this release).

## Release

After this merges and its CI on `main` passes: push `remote-v28` on the
merged commit, wait for the Remote PC bundles workflow, then run the
Release workflow with `0.4.9`. None of that was done here.