- Restrict generic agent_kind fallback in _resolve_herdr_pane_id to bare-kind searches - Exclude 'agent' key from exact-match loop to enforce R-1 fail-closed contract - Prioritize reusing existing idle pane on new-session to prevent unbounded pane proliferation - Wrap final_cmd with env prefix to preserve env_flags when reusing idle pane