feat(herdr): Herdr compat improvements: overhaul agent state reporting and pane integration

[taoeffect]

This PR makes Crush work better inside Herdr. Crush now reliably tells Herdr what it's doing — working, waiting on you, or idle — without getting stuck in the wrong state when you switch sessions, compact context, run sub-agents, or need to re-authenticate. When Crush is blocked, Herdr shows what it's waiting on (a permission prompt, a question, or a sign-in). Crush also shares the current session title and model with Herdr, updates them as they change, and can now send its toast notifications straight to Herdr's UI (opt-in).

Closes #3539

Note: This PR also fixes an unrelated flaky test that existed in main via commit 207c17c.

• I have read CONTRIBUTING.md.
• I have created a discussion that was approved by a maintainer (for new features).

AI Disclosure

Planning and Implementation: Kimi K3 (max)
Review and fixes: Opus 5 (x-high) + Copilot

Manual testing by me.

[Copilot]

Pull request overview

This PR improves Crush’s integration with Herdr by making pane state reporting accurate and resilient across session switches, compaction, sub-agent activity, permission prompts, questions, and re-auth flows. It also adds pane metadata (session title + model) and an opt-in Herdr notification backend so toasts can appear in Herdr’s UI.

Changes:

• Overhauls Herdr state translation/state-machine to correctly report working, blocked (with reason), and idle, including compaction lifecycle and session scoping.
• Reports pane presentation metadata (session title + session/model tokens) and refreshes them on changes.
• Adds notifications=herdr backend and hardens pane-ownership isolation by stripping Herdr authority env vars and disabling Herdr integration in crush server.

Reviewed changes

Copilot reviewed 26 out of 26 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
schema.json	Adds herdr notification style to the JSON schema.
README.md	Documents notifications=herdr behavior and fallback.
internal/workspace/client_workspace.go	Reports session title/model to Herdr on session switches and workspace refresh.
internal/workspace/client_workspace_test.go	Pins that non-Herdr runs avoid extra session title lookups.
internal/workspace/app_workspace.go	Threads context into session reporting for Herdr integration.
internal/ui/notification/notification.go	Updates notification backend docs to include Herdr.
internal/ui/notification/herdr.go	Introduces Herdr notification backend implementation.
internal/ui/notification/herdr_test.go	Tests Herdr notification backend behavior.
internal/ui/model/ui.go	Selects Herdr notification backend (with OSC fallback).
internal/ui/dialog/notifications.go	Exposes “Herdr” notification style in the UI dialog.
internal/shell/shell.go	Ensures subprocesses don’t inherit Herdr pane-ownership env vars.
internal/shell/run.go	Exports WithoutHerdrEnv and narrows stripping to pane-ownership vars only.
internal/shell/run_test.go	Updates tests to reflect the new env-stripping semantics.
internal/herdr/translate.go	Expands event translation to cover blocked reasons, compaction, and session metadata updates.
internal/herdr/translate_test.go	Adds extensive unit coverage for the new translation rules and bridge wiring.
internal/herdr/translate_integration_test.go	Adds integration tests pinning DB-backed publish/translate contracts.
internal/herdr/client.go	Reworks Herdr client state machine: blocked reasons, compaction lifecycle, metadata reporting, notifications, and server disablement.
internal/herdr/client_test.go	Adds comprehensive tests for state/metadata sequencing, blocking correlation, truncation, and concurrency assumptions.
internal/config/config.go	Adds herdr as a notification enum in config schema tags.
internal/cmd/server.go	Disables Herdr integration for detached server processes.
internal/cmd/run.go	Reports session title and model in non-interactive mode.
internal/cmd/root.go	Strips Herdr pane-ownership env vars when starting detached server.
internal/app/resolve_session_test.go	Extends session service mock to track Get calls (for “no lookup” assertions).
internal/app/report_current_session_test.go	Verifies no session title DB lookup occurs without a Herdr client.
internal/app/app.go	Bridges more local pubsub sources into Herdr and reports model/session title metadata.
docs/config/README.md	Updates config docs to include notifications=herdr.

Suppressed comments (1)

internal/herdr/translate.go:87

• Proto question text has the same single-line constraint as domain questions, but this translation can forward multi-line text (it only truncates). Use firstLine before truncation so the blocked reason is always one line.

		var text string
		if len(e.Payload.Questions) > 0 {
			text = e.Payload.Questions[0].Question
		}
		return QuestionAsked{BatchID: e.Payload.ID, Text: truncateText(text)}

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.