feat(tool-search): expand dynamic group activation

pi-tool-search/README.md

@@ -20,7 +20,7 @@ Generated metadata never replaces executable schemas. Exact names, parameter typ
 
 A standard bundle installation therefore sends no tool definitions to a model during catalog setup. Complete definitions are sent to the selected provider only when extra unrecognized tools require enrichment during an unknown-group or query lookup; exact existing group loads never wait for that nested call. Any nested-call usage is attached to the `tool_search` result.
 
-Run `/tool-search-rebuild` to remove model enrichment. Standard bundle tools immediately return to the checked-in catalog; extra tools can be enriched lazily on the next search.
+Run `/tool-search-status` to inspect the current catalog source, pinned count, dynamic capacity, LRU order, and latest eviction reason. Run `/tool-search-rebuild` to remove model enrichment; standard bundle tools immediately return to the checked-in catalog and extra tools can be enriched lazily on the next search.
 
 ## Precomputed my-pi groups
 
@@ -48,7 +48,7 @@ Run `/tool-search-rebuild` to remove model enrichment. Standard bundle tools imm
 | `chrome-debugging` | Chrome page evaluation, console/network diagnostics, response retrieval, and file upload |
 | `mcp-management` | Shared MCP adapter management |
 
-Pinned tools are removed from these dynamic groups at runtime. For example, the default-pinned `codegraph_explore` and `lsp_diagnostics` do not consume the `code-intelligence` group budget.
+Pinned tools are removed from these dynamic groups at runtime. The defaults pin `codegraph_explore`, `lsp_diagnostics`, and the three high-frequency Context Mode execution tools, so none of them consume dynamic group or tool capacity.
 
 ## Loading and eviction
 
@@ -58,37 +58,53 @@ Call `tool_search` with an exact catalog group id when possible:
 { "group": "web-tavily" }
 ```
 
-A natural-language `query` can rank checked-in, generated, and deterministic group metadata when the group is unclear. Loading a group exposes the original full schemas for all tools in that group on Pi's next model request.
+A workflow can atomically activate up to five exact groups in one call. The complete request must fit the configured group and tool limits; otherwise no active state is changed:
 
-Pinned tools do not consume the dynamic group budget. Dynamic groups update their recency when loaded or when any member starts executing. Loading beyond `maxActiveGroups` or `maxDynamicTools` evicts least-recently-used, non-pinned groups before activating the new group.
+```json
+{
+  "groups": ["ssh-connection", "ssh-remote-shell", "ssh-remote-files", "ssh-remote-search"]
+}
+```
+
+A natural-language `query` uses weighted group, alias, and exact-tool-name metadata when the group is unclear. Weak or closely tied matches return ranked candidates without activating an arbitrary group. Loading exposes the original full schemas on Pi's next model request.
+
+Pinned tools do not consume the dynamic budget. Dynamic groups update their recency when loaded or when a member starts executing. Loading beyond `maxActiveGroups` or `maxDynamicTools` atomically evicts least-recently-used non-requested groups before activation.
 
 The first loads are purely additive and retain Pi's native deferred-loading propagation. An eviction necessarily removes and adds schemas in one transition, so Pi uses its safe fallback rather than treating that transition as purely additive.
 
 ## Configuration
 
-The bundle adds these fields only when missing and never replaces explicit user choices:
+Pi reads this configuration from `<agent-dir>/settings.json` (normally `~/.pi/agent/settings.json`). The bundle adds fields only when missing and never replaces explicit user choices:
 
 ```json
 {
   "toolSearch": {
-    "alwaysEnabled": ["codegraph_explore", "lsp_diagnostics"],
+    "alwaysEnabled": [
+      "codegraph_explore",
+      "lsp_diagnostics",
+      "ctx_execute",
+      "ctx_execute_file",
+      "ctx_batch_execute"
+    ],
     "showToolSearchFooterStatus": false,
-    "maxActiveGroups": 3,
+    "maxActiveGroups": 5,
     "maxToolsPerGroup": 8,
-    "maxDynamicTools": 20,
-    "groupOverrides": {}
+    "maxDynamicTools": 28,
+    "groupOverrides": {},
+    "bundleDefaultsVersion": 2
   }
 }
 ```
 
 | Key | Bundle default | Description |
 |---|---|---|
-| `alwaysEnabled` | `codegraph_explore`, `lsp_diagnostics` | Exact names pinned alongside Pi core tools |
+| `alwaysEnabled` | CodeGraph explore, LSP diagnostics, Context execution trio | Exact names pinned alongside Pi core tools |
 | `showToolSearchFooterStatus` | `false` | Show active tool/group counts |
-| `maxActiveGroups` | `3` | Maximum simultaneously active dynamic groups |
+| `maxActiveGroups` | `5` | Maximum simultaneously active dynamic groups |
 | `maxToolsPerGroup` | `8` | Maximum size accepted from model-generated groups |
-| `maxDynamicTools` | `20` | Hard cap across active dynamic group tools |
+| `maxDynamicTools` | `28` | Hard cap across active dynamic group tools |
 | `groupOverrides` | `{}` | Exact tool lists that override checked-in, generated, or fallback assignments |
+| `bundleDefaultsVersion` | `2` on a newly created default section | Bundle provenance for controlled default migrations; ignored by runtime routing |
 
 Example override:
 
@@ -103,7 +119,7 @@ Example override:
 }
 ```
 
-An explicit override larger than `maxDynamicTools` remains visible but cannot be activated until the limit or override is corrected. Invalid `settings.json` or an invalid `toolSearch` value is never overwritten.
+An explicit override larger than `maxDynamicTools` remains visible but cannot be activated until the limit or override is corrected. Normal extension loading preserves existing values and writes owner-only settings through a unique same-directory temporary file. When the user explicitly runs the bundle's updated `update.sh`, its post-update migration helper changes only the complete former `3`/`20` default snapshot: it creates an owner-only timestamped backup, atomically writes the current defaults, and records `bundleDefaultsVersion: 2`. Customized or invalid settings are preserved, and a content change detected immediately before commit aborts the migration.
 
 ## Current host integration