@code-yeongyu/senpi 2026.10.10-8 → 2026.10.10-9

package/dist/core/extensions/builtin/ask-user/tool.js

@@ -1,16 +1,23 @@
 import { WAKE_SOURCE_STATE_EVENT } from "../monitor-state-event.js";
 import { TOOL_NAMES } from "./family.js";
-import { formatModelAnswer, formatResultDetails, formatUserMessage } from "./format.js";
+import { formatGatedCancellation, formatModelAnswer, formatResultDetails, formatUserMessage } from "./format.js";
 import { ASK_USER_ASKED_EVENT, ASK_USER_QUESTION_ENTRY, ASK_USER_SETTLEMENT_ENTRY, emitAskUserClosed, emitAskUserNotification, } from "./notify.js";
 import { createPendingQuestion } from "./pending.js";
 import { getPendingQuestions, queueQuestionOutcome, registerPendingQuestion, } from "./registry.js";
 import { renderCall, renderResult } from "./render.js";
 import { AskUserSchemaError, CLAUDE_PARAMS, CODEX_PARAMS, toCanonical, } from "./schema.js";
 const REASK = "The user did not answer the previous question this turn; continue without asking again.";
+const REASK_REQUIRED = "The user did not answer the previous question this turn, so this one gets no answer either. No answer: do not take the action it gates. Keep that action pending and end the turn.";
 function result(variant, response, request, text) {
     return {
-        content: [{ type: "text", text: text ?? formatModelAnswer(response, request.requestId, request.questions).text }],
-        details: formatResultDetails(variant, response, request.requestId, request.questions),
+        content: [
+            {
+                type: "text",
+                text: text ??
+                    formatModelAnswer(response, request.requestId, request.questions, request.required === true).text,
+            },
+        ],
+        details: formatResultDetails(variant, response, request.requestId, request.questions, request.required === true),
     };
 }
 /**
@@ -24,7 +31,7 @@ function result(variant, response, request, text) {
 export function deliverAnswer(pi, ctx, request, response, variant) {
     if (response.status === "cancelled")
         return;
-    pi.sendUserMessage(formatUserMessage(response, request.requestId, request.questions), {
+    pi.sendUserMessage(formatUserMessage(response, request.requestId, request.questions, request.required === true), {
         deliverAs: ctx.isIdle() ? "followUp" : "steer",
     });
     void emitAskUserNotification(pi, ctx, request, response, variant);
@@ -258,7 +265,7 @@ export function createAskUserTool(variant, pi, state) {
         allowLazyActivation: false,
         parameters: variant === "codex" ? CODEX_PARAMS : CLAUDE_PARAMS,
         promptSnippet: "Ask a material question, explicitly choosing whether to wait or receive the answer later.",
-        description: `${opener} Set ${flag} true to pause here until the user answers (the answer returns as this tool's result, or a timeout result after 30 idle minutes); set ${flag} false to keep working while the question stays open (the answer arrives later as a user message). Use it only when the answer materially changes the work; if it returns no answers, continue with best judgment instead of asking again. Never use it for permission requests; ask those directly in your message. Unavailable to subagents.${variant === "claude" ? " Users will always be able to type a free-text answer or one comment covering everything; do not add an Other option." : ""} Call this tool directly, never from inside an eval cell (a cell that waits on the user would hold the kernel).`,
+        description: `${opener} Set ${flag} true to pause here until the user answers (the answer returns as this tool's result, or a timeout result after 30 idle minutes); set ${flag} false to keep working while the question stays open (the answer arrives later as a user message). Use it only when the answer materially changes the work; if it returns no answers, continue with best judgment instead of asking again, unless you set required true because the answer decides whether you take an action: then no answer means do not take it. Never use it for permission requests; ask those directly in your message. Unavailable to subagents.${variant === "claude" ? " Users will always be able to type a free-text answer or one comment covering everything; do not add an Other option." : ""} Call this tool directly, never from inside an eval cell (a cell that waits on the user would hold the kernel).`,
         prepareArguments(args) {
             toCanonical(variant, args);
             return args;
@@ -284,7 +291,7 @@ export function createAskUserTool(variant, pi, state) {
             };
             if (state.timedOut) {
                 emitAskUserClosed(pi, request.requestId, unavailable);
-                return result(variant, unavailable, request, REASK);
+                return result(variant, unavailable, request, request.required === true ? REASK_REQUIRED : REASK);
             }
             if (state.unavailable ||
                 ctx.getAskUserSettings?.().enabled === false ||
@@ -307,7 +314,11 @@ export function createAskUserTool(variant, pi, state) {
             if (response.status !== "cancelled") {
                 void emitAskUserNotification(pi, ctx, request, response, variant);
             }
-            return result(variant, response, request, response.status === "cancelled" && response.comment ? response.comment : undefined);
+            return result(variant, response, request, response.status === "cancelled" && response.comment
+                ? request.required === true
+                    ? formatGatedCancellation(response.comment, response, request.requestId, request.questions)
+                    : response.comment
+                : undefined);
         },
         renderCall,
         renderResult,

package/dist/core/extensions/builtin/hooks/index.js

@@ -54,7 +54,7 @@ export default function hooksExtension(pi) {
                 message: response === undefined
                     ? `Question asked (${headers})`
                     : response.status === "timed_out"
-                        ? `Question timed out (${headers}): ${formatResultText(variant, response, request.questions)}`
+                        ? `Question timed out (${headers}): ${formatResultText(variant, response, request.questions, request.required === true)}`
                         : `Question ${response.status} (${headers})`,
                 requestId: request.requestId,
                 source: "ask-user",

package/dist/core/extensions/builtin/ttsr/follow-up-limit.d.ts

@@ -0,0 +1,11 @@
+import type { SessionEntry } from "../../../session-manager.ts";
+export declare const TTSR_LOOP_STOPPED_ENTRY_TYPE = "ttsr-loop-stopped";
+export declare const TTSR_LOOP_STOPPED_EVENT = "ttsr:loop-stopped";
+export declare function ttsrLoopStoppedNotice(rule: string): string;
+/**
+ * Whether this rule already sent its one corrective follow-up since the user's last message. Read from the
+ * session, so a host that rebuilds the extension between turns cannot re-arm it (senpi#2967); the engine-wide
+ * turn bound covers every other source.
+ */
+export declare function ruleAlreadyCorrected(entries: readonly SessionEntry[], rule: string): boolean;
+//# sourceMappingURL=follow-up-limit.d.ts.map

package/dist/core/extensions/builtin/ttsr/follow-up-limit.js

@@ -0,0 +1,30 @@
+import { TTSR_INJECTION_CUSTOM_TYPE } from "./types.js";
+export const TTSR_LOOP_STOPPED_ENTRY_TYPE = "ttsr-loop-stopped";
+export const TTSR_LOOP_STOPPED_EVENT = "ttsr:loop-stopped";
+export function ttsrLoopStoppedNotice(rule) {
+    return `The ${rule} stream rule flagged the reply again after its correction, so no further correction was sent. Send any message to continue.`;
+}
+function nudgedRules(entry) {
+    if (entry.type !== "custom_message" || entry.customType !== TTSR_INJECTION_CUSTOM_TYPE)
+        return [];
+    const details = entry.details;
+    if (typeof details !== "object" || details === null || !("rules" in details))
+        return [];
+    return Array.isArray(details.rules) ? details.rules : [];
+}
+/**
+ * Whether this rule already sent its one corrective follow-up since the user's last message. Read from the
+ * session, so a host that rebuilds the extension between turns cannot re-arm it (senpi#2967); the engine-wide
+ * turn bound covers every other source.
+ */
+export function ruleAlreadyCorrected(entries, rule) {
+    for (let index = entries.length - 1; index >= 0; index--) {
+        const entry = entries[index];
+        if (entry.type === "message" && entry.message.role === "user")
+            return false;
+        if (nudgedRules(entry).includes(rule))
+            return true;
+    }
+    return false;
+}
+//# sourceMappingURL=follow-up-limit.js.map

package/dist/core/extensions/builtin/ttsr/index.js

@@ -6,6 +6,7 @@ import { registerTtsrCommands } from "./commands.js";
 import { claimAbort, createGenerationState, markUserCancelled } from "./coordinator.js";
 import { REPETITIVE_TURNS_RULE_NAME } from "./detectors/repetitive-turns.js";
 import { discoverTtsrRulesSync } from "./discovery.js";
+import { ruleAlreadyCorrected, TTSR_LOOP_STOPPED_ENTRY_TYPE, TTSR_LOOP_STOPPED_EVENT, ttsrLoopStoppedNotice, } from "./follow-up-limit.js";
 import { TtsrManager } from "./manager.js";
 import { getTtsrStreamDelta } from "./message-update.js";
 import { REPETITIVE_TURNS_RULE_CONTENT } from "./prompts.js";
@@ -242,7 +243,7 @@ export default function ttsrExtension(pi) {
             repetitiveTurns.recordCompletedTurn(turnText);
         return undefined;
     });
-    pi.on("agent_settled", () => {
+    pi.on("agent_settled", (_event, ctx) => {
         if (pendingNudge === null || genState.userCancelled || settlingAgentEnd?.abortSource === "user") {
             pendingNudge = null;
             settlingAgentEnd = null;
@@ -250,6 +251,13 @@ export default function ttsrExtension(pi) {
         }
         const nudge = pendingNudge;
         pendingNudge = null;
+        const [rule] = nudge.details.rules;
+        if (rule !== undefined && ruleAlreadyCorrected(ctx.sessionManager.getEntries(), rule)) {
+            pi.appendEntry(TTSR_LOOP_STOPPED_ENTRY_TYPE, { rules: nudge.details.rules, at: Date.now() });
+            pi.events.emit(TTSR_LOOP_STOPPED_EVENT, { rules: nudge.details.rules });
+            ctx.ui.notify(ttsrLoopStoppedNotice(rule), "warning");
+            return;
+        }
         pi.sendMessage(nudge, { triggerTurn: true });
     });
 }

package/dist/core/extensions/runner.d.ts

@@ -206,6 +206,8 @@ export declare class ExtensionRunner {
      * signals extensions publish about work that outlives a turn (`wake_source_state`).
      */
     onBusEvent(channel: string, handler: (data: unknown) => void): () => void;
+    /** Publish a session-originated signal on the shared bus, for extensions and hosts that observe it. */
+    emitBusEvent(channel: string, data: unknown): void;
     /** Get extension-declared MCP servers (first declaration per name wins). */
     getRegisteredMcpServers(): readonly RegisteredMcpServerDeclaration[];
     /** Get a tool definition by name. Returns undefined if not found. */

package/dist/core/extensions/runner.js

@@ -594,6 +594,10 @@ export class ExtensionRunner {
     onBusEvent(channel, handler) {
         return this.eventBus.on(channel, handler);
     }
+    /** Publish a session-originated signal on the shared bus, for extensions and hosts that observe it. */
+    emitBusEvent(channel, data) {
+        this.eventBus.emit(channel, data);
+    }
     /** Get extension-declared MCP servers (first declaration per name wins). */
     getRegisteredMcpServers() {
         const serversByName = new Map();

package/dist/core/extensions/types.d.ts

@@ -94,6 +94,8 @@ export interface QuestionRequest {
     }>;
     waitForAnswer: boolean;
     timeoutMs: number;
+    /** The question gates an action: a missing answer means the action is not taken (senpi#2949). */
+    required?: boolean;
 }
 /** Outcome of ExtensionUIContext.question. */
 export interface QuestionResponse {

package/dist/core/settings-manager.d.ts

@@ -103,6 +103,11 @@ export interface Settings {
     images?: ImageSettings;
     lookAt?: LookAtSettings;
     askUser?: AskUserSettings;
+    /** Bounds on turns the engine starts without a user message (senpi#2967). */
+    engineTurns?: {
+        maxPerUserInput?: number;
+        maxToolFreePerMinute?: number;
+    };
     todo?: TodoSettings;
     recommendedModels?: string[];
     favoriteModels?: string[];
@@ -254,6 +259,10 @@ export declare class SettingsManager {
         timeoutMinutes: number;
         bell: boolean;
     };
+    getEngineTurnSettings(): {
+        maxPerUserInput: number;
+        maxToolFreePerMinute: number;
+    };
     getTodoFirstTurnPlan(): TodoFirstTurnPlan;
     getTodoTurnEndBackstop(): boolean;
     isProjectTrusted(): boolean;

package/dist/core/settings-manager.js

@@ -12,6 +12,7 @@ import { normalizePath, resolvePath } from "../utils/paths.js";
 import { envValue } from "./brand.js";
 import { compactionEnabled, compactionKeepRecentTokens, compactionReserveTokens, } from "./compaction-settings-access.js";
 import { resolveCompactionSettings } from "./compaction-settings-resolver.js";
+import { MAX_ENGINE_TURNS_PER_USER_INPUT, MAX_TOOL_FREE_ENGINE_TURNS_PER_WINDOW } from "./engine-turn-limit.js";
 import { DEFAULT_HTTP_IDLE_TIMEOUT_MS, parseHttpIdleTimeoutMs } from "./http-dispatcher.js";
 import { CredentialStoreBusyError, FILE_STORAGE_LOCK_OPTIONS, FILE_STORAGE_LOCK_RETRY_BUDGET_MS, FILE_STORAGE_LOCK_RETRY_MAX_DELAY_MS, FILE_STORAGE_LOCK_RETRY_MIN_DELAY_MS, FILE_STORAGE_SYNC_LOCK_BUDGET_MS, isLockError, } from "./lockfile-policy.js";
 import { resolveFallbackCircuitSettings, } from "./retry-fallback/circuit.js";
@@ -675,6 +676,14 @@ export class SettingsManager {
             bell: typeof configured?.bell === "boolean" ? configured.bell : true,
         };
     }
+    getEngineTurnSettings() {
+        const configured = this.settings.engineTurns;
+        const limit = (value, fallback) => typeof value === "number" && Number.isInteger(value) && value >= 0 ? value : fallback;
+        return {
+            maxPerUserInput: limit(configured?.maxPerUserInput, MAX_ENGINE_TURNS_PER_USER_INPUT),
+            maxToolFreePerMinute: limit(configured?.maxToolFreePerMinute, MAX_TOOL_FREE_ENGINE_TURNS_PER_WINDOW),
+        };
+    }
     getTodoFirstTurnPlan() {
         const configured = this.settings.todo?.firstTurnPlan;
         return configured === "remind" || configured === "off" ? configured : "force";

package/dist/modes/interactive/interactive-mode.js

@@ -3249,7 +3249,7 @@ export class InteractiveMode {
             this.showStatus("The user dismissed the question.");
             // Ordinary cancellation/abort stays silent in the builtin. Only this
             // explicit command acknowledges dismissal, including on host bridges.
-            await this.session.sendUserMessage(formatUserMessage(response, state.request.requestId, state.request.questions), {
+            await this.session.sendUserMessage(formatUserMessage(response, state.request.requestId, state.request.questions, state.request.required === true), {
                 deliverAs: this.session.isStreaming ? "steer" : "followUp",
             });
             return;

package/docs/settings.md

@@ -528,6 +528,15 @@ await tool.monitor({ description: "build", command: "bun run build", filter: "^d
 
 This is the default and has no setting. Tools may declare `exposure: "eval"` to join this policy; `bash`, `powershell` and `grep` use that declaration. They remain registered and discoverable through `tool_schema` inside eval. Hooks and permission checks apply unchanged to calls made this way, and the prompt surfaces that document these tools render the `tool.<name>(` form to match. If the model attempts a direct call anyway, the call returns a hint naming the eval form instead of executing the tool. When the `eval` tool is unavailable (codemode not loaded, or a child agent whose allowlist omits it), the policy stays inert and otherwise enabled tools remain directly callable, so shell, text search, workflow and monitor access is never lost.
 
+### Automatic Turns
+
+| Setting | Type | Default | Description |
+|---------|------|---------|-------------|
+| `engineTurns.maxPerUserInput` | number | `150` | Turns the agent may start on its own (stream-rule nudges, goal continuations, other extension follow-ups) after one user message before it pauses; `0` turns the limit off |
+| `engineTurns.maxToolFreePerMinute` | number | `12` | Turns started on its own within 60 s that called no tool before it pauses; `0` turns the limit off |
+
+When a limit is reached the session pauses with a notice instead of starting another turn; any message you send continues it, because only turns since your last message count.
+
 ### Ask User
 
 | Setting | Type | Default | Description |

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@code-yeongyu/senpi",
-	"version": "2026.10.10-8",
+	"version": "2026.10.10-9",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"type": "module",
 	"piConfig": {
@@ -57,9 +57,9 @@
 	},
 	"dependencies": {
 		"@earendil-works/chord": "0.99.1",
-		"@earendil-works/pi-agent-core": "npm:@code-yeongyu/senpi-agent-core@2026.10.10-8",
-		"@earendil-works/pi-ai": "npm:@code-yeongyu/senpi-ai@2026.10.10-8",
-		"@earendil-works/pi-tui": "npm:@code-yeongyu/senpi-tui@2026.10.10-8",
+		"@earendil-works/pi-agent-core": "npm:@code-yeongyu/senpi-agent-core@2026.10.10-9",
+		"@earendil-works/pi-ai": "npm:@code-yeongyu/senpi-ai@2026.10.10-9",
+		"@earendil-works/pi-tui": "npm:@code-yeongyu/senpi-tui@2026.10.10-9",
 		"@silvia-odwyer/photon-node": "0.3.4",
 		"chalk": "6.0.0",
 		"cross-spawn": "7.0.6",
@@ -78,8 +78,8 @@
 		"yaml": "2.9.1",
 		"@anthropic-ai/claude-agent-sdk": "0.3.292",
 		"@anthropic-ai/sdk": "0.127.0",
-		"@code-yeongyu/senpi-codemode": "2026.10.10-8",
-		"@earendil-works/pi-pty": "npm:@code-yeongyu/senpi-pty@2026.10.10-8",
+		"@code-yeongyu/senpi-codemode": "2026.10.10-9",
+		"@earendil-works/pi-pty": "npm:@code-yeongyu/senpi-pty@2026.10.10-9",
 		"@modelcontextprotocol/sdk": "1.32.1",
 		"@mozilla/readability": "0.6.0",
 		"linkedom": "0.18.13",