@code-yeongyu/senpi 2026.10.11 → 2026.10.12

package/dist/core/retry-fallback/usage-limit.d.ts

@@ -1,3 +1,5 @@
+import { type AssistantMessage } from "@earendil-works/pi-ai";
+import type { SessionEntry } from "../session-manager.ts";
 /**
  * Who a usage limit binds. `model`: the provider refused THIS model only (a
  * Fable-only weekly cap, premium models on a Copilot plan, a model that needs
@@ -7,7 +9,14 @@
  * the chain moves to another provider instead.
  */
 export type UsageLimitScope = "model" | "account";
-export declare function usageLimitScope(errorMessage: string | undefined): UsageLimitScope | undefined;
+export declare class AccountUsageLimitError extends Error {
+    constructor(provider: string, raw?: string);
+}
+export declare function usageLimitScope(failure: string | undefined | Pick<AssistantMessage, "errorMessage" | "errorCause">): UsageLimitScope | undefined;
+/** Project advice without mutating the diagnostic-bearing engine message. */
+export declare function describeUsageLimitMessage(message: AssistantMessage): AssistantMessage;
+/** Project an assistant entry without mutating its persisted identity or payload. */
+export declare function describeUsageLimitEntry(entry: SessionEntry): SessionEntry;
 /** The notice clause naming what hit the limit, or undefined when no usage limit caused the switch. */
 export declare function usageLimitCause(from: string, limit: UsageLimitScope | undefined): string | undefined;
 //# sourceMappingURL=usage-limit.d.ts.map

package/dist/core/retry-fallback/usage-limit.js

@@ -1,6 +1,12 @@
-import { isQuotaExhaustionMessage } from "@earendil-works/pi-ai";
+import { describeProviderFailureForUser, isQuotaExhaustionMessage } from "@earendil-works/pi-ai";
 import { rateLimitModelFamily } from "../credential-pool/model-scope.js";
 import { isBillingErrorMessage } from "./billing.js";
+export class AccountUsageLimitError extends Error {
+    constructor(provider, raw = "usage limit reached") {
+        super(describeProviderFailureForUser(raw, { model: provider, usageLimit: "account" }));
+        this.name = "AccountUsageLimitError";
+    }
+}
 // Subscription limit prose that carries no quota/billing keyword, e.g. Claude's
 // "You've hit your session limit · resets 3pm" and the SDK terminal reasons.
 const SUBSCRIPTION_LIMIT_PATTERN = /\bhit\s+your\b[^.]*\blimit\b|\b(?:session|weekly|monthly|daily|hourly|\d+[- ]hour|usage)\s+limit\b|\bblocking_limit\b|\brapid_refill_breaker\b/i;
@@ -8,7 +14,13 @@ const SUBSCRIPTION_LIMIT_PATTERN = /\bhit\s+your\b[^.]*\blimit\b|\b(?:session|we
 // switch to a different model" (senpi#2660). An ordinary "rate limit exceeded" stays transient.
 const PLAN_MODEL_LIMIT_PATTERN = /\breached\b[^.]*\b(?:free|plan|tier|model)\b[^.]*\blimit\b[\s\S]*\bswitch to (?:a |an )?(?:different|another) model\b/i;
 const MODEL_SCOPE_PATTERN = /\bmodels?\b|\bpremium\b|\b(?:opus|sonnet|haiku|fable|mythos)\b/i;
-export function usageLimitScope(errorMessage) {
+export function usageLimitScope(failure) {
+    if (typeof failure === "object" && failure.errorCause?.type === "usage_limit") {
+        const scope = failure.errorCause.scope;
+        if (scope === "account" || scope === "model")
+            return scope;
+    }
+    const errorMessage = typeof failure === "object" ? failure.errorMessage : failure;
     if (errorMessage === undefined)
         return undefined;
     // Claude Code's "You've reached your Fable limit. Switch to another model" carries
@@ -23,6 +35,31 @@ export function usageLimitScope(errorMessage) {
         return undefined;
     return MODEL_SCOPE_PATTERN.test(errorMessage) ? "model" : "account";
 }
+/** Project advice without mutating the diagnostic-bearing engine message. */
+export function describeUsageLimitMessage(message) {
+    const scope = usageLimitScope(message);
+    if (!scope || message.errorCause?.scope === scope)
+        return message;
+    return {
+        ...message,
+        errorCause: { type: "usage_limit", scope },
+        ...(scope === "account"
+            ? {
+                errorMessage: describeProviderFailureForUser(message.errorMessage, {
+                    model: `${message.provider}/${message.model}`,
+                    usageLimit: scope,
+                }),
+            }
+            : {}),
+    };
+}
+/** Project an assistant entry without mutating its persisted identity or payload. */
+export function describeUsageLimitEntry(entry) {
+    if (entry.type !== "message" || entry.message.role !== "assistant")
+        return entry;
+    const message = describeUsageLimitMessage(entry.message);
+    return message === entry.message ? entry : { ...entry, message };
+}
 /** The notice clause naming what hit the limit, or undefined when no usage limit caused the switch. */
 export function usageLimitCause(from, limit) {
     if (limit === "model")

package/dist/core/session-title-generator.js

@@ -1,5 +1,6 @@
 import { normalizeContext } from "@earendil-works/pi-ai";
 import { completeSimple, retryAssistantCall } from "@earendil-works/pi-ai/compat";
+import { withoutServerSearch } from "./extensions/builtin/server-search-fallback.js";
 import { initialTitleReasoning, mandatoryReasoningRetryLevel } from "./session-title-reasoning.js";
 const TITLE_SYSTEM_PROMPT = `Generate a concise title for this coding-agent session.
 
@@ -93,6 +94,7 @@ function buildTitleContext(firstPrompt) {
 function buildTitleOptions(options, reasoning) {
     const titleOptions = {
         ...options.baseOptions,
+        onPayload: withoutServerSearch(options.baseOptions?.onPayload),
         sessionId: options.sessionId,
         cacheRetention: options.model.cacheRetention === "none" ? "none" : "short",
         maxTokens: reasoning === undefined ? TITLE_MAX_TOKENS : REASONING_TITLE_MAX_TOKENS,

package/dist/index.d.ts

@@ -21,6 +21,7 @@ export { type CreateModelRuntimeOptions, CredentialSynchronizationError, type Cr
 export type { PackageManager, PathMetadata, ProgressCallback, ProgressEvent, ResolvedPaths, ResolvedResource, } from "./core/package-manager.ts";
 export { DefaultPackageManager } from "./core/package-manager.ts";
 export { type ProcessFootprint, type ProcessFootprintMeasure, readOwnFootprint, readProcessFootprint, } from "./core/process-footprint.ts";
+export { findReservedKeywordRuns, findReservedKeywordSpans, type ReservedKeyword, type ReservedKeywordRun, type ReservedKeywordSpan, } from "./core/reserved-keywords.ts";
 export type { ResourceCollision, ResourceDiagnostic, ResourceLoader } from "./core/resource-loader.ts";
 export { DefaultResourceLoader, loadProjectContextFiles } from "./core/resource-loader.ts";
 export { AgentSessionRuntime, type AgentSessionRuntimeDiagnostic, type AgentSessionServices, type CreateAgentSessionFromServicesOptions, type CreateAgentSessionOptions, type CreateAgentSessionResult, type CreateAgentSessionRuntimeFactory, type CreateAgentSessionRuntimeResult, type CreateAgentSessionServicesOptions, createAgentSession, createAgentSessionFromServices, createAgentSessionRuntime, createAgentSessionServices, createBashTool, createCodingTools, createEditTool, createFindTool, createGrepTool, createLsTool, createPowerShellTool, createReadOnlyTools, createReadTool, createWriteTool, type PromptTemplate, } from "./core/sdk.ts";
@@ -36,7 +37,7 @@ export { UnknownCommandError, type UnknownCommandReason } from "./core/unknown-c
 export { type ModelRoute, type ModelRouteReason, type ModelRouteRequest, VIRTUAL_MODEL_STATE_ENTRY, type VirtualModelDefinition, type VirtualModelStateData, } from "./core/virtual-models.ts";
 export { connectWebViewService, type WebViewServiceConnection } from "./core/webview/webview-broker.ts";
 export { type MainOptions, main } from "./main.ts";
-export { classifyEndpointLiveness, createHostDaemonPaths, DEFAULT_HOST_LAUNCH_SPEC, daemonDirectoryName, decideHostAction, ENDPOINT_REGISTRY_VERSION, type EndpointKind, type EndpointLiveness, type EnsuredHost, type EnsureHostOptions, endpointProbeTimeoutMs, ensureHost, GENERATION_HANDOFF_CAPABILITY, gcHostEndpoints, type HandoffHostOptions, type HandoffRefusal, type HandoffResult, HOST_EXIT_ERROR, HOST_EXIT_FALLBACK, HOST_EXIT_OK, HOST_EXIT_REFUSED, HOST_EXIT_USAGE, HOST_PROTOCOL_VERSION, type HostAction, type HostDaemonPaths, type HostDecision, type HostDecisionClient, type HostDecisionPolicy, type HostDecisionWarning, type HostEndpointEntry, type HostEndpointIdentitySource, type HostEndpointStatus, HostEnsureRefusedError, type HostGcOptions, type HostGcResult, type HostGenerationRow, type HostLaunchSpec, type HostLaunchSpecCore, HostLaunchSpecError, type HostLaunchSpecRefusal, type HostOutcome, type HostProtocolInfo, type HostRefusalReason, type HostRequest, type HostSessionCounts, type HostStatusOptions, type HostStatusReport, type HostTarget, type HostUpgradePolicy, handoffHost, InteractiveMode, type InteractiveModeOptions, isTransportGoneError, type JsonAgentSessionEvent, listHostEndpoints, loadHostLaunchSpec, type ModelInfo, PINNED_HOST_CLIENT_CAPABILITIES, type PrintModeOptions, type ProbeHostOptions, parseHostLaunchSpec, parseHostProtocolInfo, probeHost, REQUIRED_HOST_CAPABILITIES, type ResolvedHostLaunchSpec, RpcClient, type RpcClientEvent, RpcClientOpenInFlightError, type RpcClientOptions, type RpcCommand, type RpcEventListener, type RpcExtensionEvent, type RpcExtensionUIRequest, type RpcExtensionUIResponse, type RpcResponse, type RpcSessionState, RpcTransportGoneError, readAllHostStatus, readHostStatus, runHostRequest, runPrintMode, runRpcMode, type ShardKind, type StopHostOptions, type StopHostResult, shardKey, shardSocketPath, shardSocketPathForKey, stopHost, TUI_PROBE_TIMEOUT_MS, } from "./modes/index.ts";
+export { classifyEndpointLiveness, createHostDaemonPaths, DEFAULT_HOST_LAUNCH_SPEC, daemonDirectoryName, decideHostAction, ENDPOINT_REGISTRY_VERSION, type EndpointKind, type EndpointLiveness, type EnsuredHost, type EnsureHostOptions, endpointProbeTimeoutMs, ensureHost, GENERATION_HANDOFF_CAPABILITY, gcHostEndpoints, type HandoffHostOptions, type HandoffRefusal, type HandoffResult, HOST_EXIT_ERROR, HOST_EXIT_FALLBACK, HOST_EXIT_OK, HOST_EXIT_REFUSED, HOST_EXIT_USAGE, HOST_PROTOCOL_VERSION, type HostAction, type HostDaemonPaths, type HostDecision, type HostDecisionClient, type HostDecisionPolicy, type HostDecisionWarning, type HostEndpointEntry, type HostEndpointIdentitySource, type HostEndpointStatus, HostEnsureRefusedError, type HostGcOptions, type HostGcResult, type HostGenerationRow, type HostLaunchSpec, type HostLaunchSpecCore, HostLaunchSpecError, type HostLaunchSpecRefusal, type HostOutcome, type HostProtocolInfo, type HostRefusalReason, type HostRequest, type HostSessionCounts, type HostStatusOptions, type HostStatusReport, type HostTarget, type HostUpgradePolicy, handoffHost, InteractiveMode, type InteractiveModeOptions, isTransportGoneError, type JsonAgentSessionEvent, listHostEndpoints, loadHostLaunchSpec, type ModelInfo, PINNED_HOST_CLIENT_CAPABILITIES, type PrintModeOptions, type ProbeHostOptions, parseHostLaunchSpec, parseHostProtocolInfo, probeHost, REQUIRED_HOST_CAPABILITIES, type ResolvedHostLaunchSpec, RpcClient, type RpcClientEvent, RpcClientOpenInFlightError, type RpcClientOptions, type RpcCommand, type RpcEvalCell, type RpcEvalCellSnapshot, type RpcEventListener, type RpcExtensionEvent, type RpcExtensionUIRequest, type RpcExtensionUIResponse, type RpcResponse, type RpcSessionState, RpcTransportGoneError, readAllHostStatus, readHostStatus, runHostRequest, runPrintMode, runRpcMode, type ShardKind, type StopHostOptions, type StopHostResult, shardKey, shardSocketPath, shardSocketPathForKey, stopHost, TUI_PROBE_TIMEOUT_MS, } from "./modes/index.ts";
 export { ArminComponent, AssistantMessageComponent, BashExecutionComponent, BorderedLoader, BranchSummaryMessageComponent, CompactionSummaryMessageComponent, CustomEditor, type CustomEditorOptions, CustomMessageComponent, DynamicBorder, ExtensionEditorComponent, ExtensionInputComponent, ExtensionSelectorComponent, FooterComponent, keyHint, keyText, LoginDialogComponent, ModelSelectorComponent, OAuthSelectorComponent, type RenderDiffOptions, rawKeyHint, renderDiff, SessionSelectorComponent, type SettingsCallbacks, type SettingsConfig, SettingsSelectorComponent, ShowImagesSelectorComponent, SkillInvocationMessageComponent, ThemeSelectorComponent, ThinkingSelectorComponent, ToolExecutionComponent, type ToolExecutionOptions, TreeSelectorComponent, truncateToVisualLines, UserMessageComponent, UserMessageSelectorComponent, type VisualTruncateResult, } from "./modes/interactive/components/index.ts";
 export { getLanguageFromPath, getMarkdownTheme, getSelectListTheme, getSettingsListTheme, highlightCode, initTheme, Theme, type ThemeAppearance, type ThemeBg, type ThemeColor, type ThemeStyle, type ThemeToken, } from "./modes/interactive/theme/theme.ts";
 export { collectOrphanedChildren } from "./modes/rpc/child-reaper.ts";

package/dist/index.js

@@ -25,6 +25,7 @@ export { CredentialSynchronizationError, ModelRuntime, } from "./core/model-runt
 export { DefaultPackageManager } from "./core/package-manager.js";
 // Process memory footprint (phys_footprint / RssAnon / PrivateUsage), read without spawning
 export { readOwnFootprint, readProcessFootprint, } from "./core/process-footprint.js";
+export { findReservedKeywordRuns, findReservedKeywordSpans, } from "./core/reserved-keywords.js";
 export { DefaultResourceLoader, loadProjectContextFiles } from "./core/resource-loader.js";
 // SDK for programmatic usage
 export { AgentSessionRuntime, 

package/dist/modes/index.d.ts

@@ -19,5 +19,5 @@ export { type HostEndpointStatus, readAllHostStatus } from "./rpc/host-status-al
 export { type StopHostOptions, type StopHostResult, stopHost } from "./rpc/host-stop.ts";
 export { isTransportGoneError, type ModelInfo, RpcClient, type RpcClientEvent, RpcClientOpenInFlightError, type RpcClientOptions, type RpcEventListener, RpcTransportGoneError, } from "./rpc/rpc-client.ts";
 export { runRpcMode } from "./rpc/rpc-mode.ts";
-export type { RpcCommand, RpcExtensionEvent, RpcExtensionUIRequest, RpcExtensionUIResponse, RpcResponse, RpcSessionState, } from "./rpc/rpc-types.ts";
+export type { RpcCommand, RpcEvalCell, RpcEvalCellSnapshot, RpcExtensionEvent, RpcExtensionUIRequest, RpcExtensionUIResponse, RpcResponse, RpcSessionState, } from "./rpc/rpc-types.ts";
 //# sourceMappingURL=index.d.ts.map

package/dist/modes/interactive/components/assistant-render-descriptors.js

@@ -1,4 +1,5 @@
 import { describeProviderFailureForUser, SERVER_FALLBACK_ABORTED_DIAGNOSTIC, stripTurnRetrySuppressionPrefix, } from "@earendil-works/pi-ai";
+import { usageLimitScope } from "../../../core/retry-fallback/usage-limit.js";
 import { formatDuration } from "../../../utils/duration.js";
 import { formatProviderNativeBody, formatProviderNativeSummary } from "../../provider-native-rendering.js";
 import { theme } from "../theme/theme.js";
@@ -132,7 +133,12 @@ export function createAssistantRenderDescriptors(message, options) {
             // wording so the retry engine can read it; the transcript gets the
             // plain-language version, without the recovery advice a retry still in
             // flight would contradict, and never the internal replay marker.
-            const described = describeProviderFailureForUser(message.errorMessage);
+            const described = message.errorCause?.type === "usage_limit" && message.errorCause.scope === "account"
+                ? message.errorMessage
+                : describeProviderFailureForUser(message.errorMessage, {
+                    model: `${message.provider}/${message.model}`,
+                    usageLimit: usageLimitScope(message),
+                });
             addError(described ?? `Error: ${stripTurnRetrySuppressionPrefix(message.errorMessage ?? "") || "Unknown error"}`);
             break;
         }

package/dist/modes/interactive/composer-user-activity.d.ts

@@ -0,0 +1,6 @@
+import type { EditorComponent } from "@earendil-works/pi-tui";
+/** Extension-supplied text updates the composer but is not terminal input. */
+export declare function insertProgrammaticComposerInput(editor: EditorComponent, data: string): void;
+/** Observe user edits, not setText calls that restore drafts during resume/reload. */
+export declare function observeComposerActivity(editor: EditorComponent, onActivity: () => void): void;
+//# sourceMappingURL=composer-user-activity.d.ts.map

package/dist/modes/interactive/composer-user-activity.js

@@ -0,0 +1,30 @@
+const unobservedInput = new WeakMap();
+/** Extension-supplied text updates the composer but is not terminal input. */
+export function insertProgrammaticComposerInput(editor, data) {
+    const handleInput = unobservedInput.get(editor) ?? editor.handleInput.bind(editor);
+    handleInput(data);
+}
+/** Observe user edits, not setText calls that restore drafts during resume/reload. */
+export function observeComposerActivity(editor, onActivity) {
+    const handleInput = editor.handleInput.bind(editor);
+    unobservedInput.set(editor, handleInput);
+    editor.handleInput = (data) => {
+        const previousText = editor.getText();
+        const onSubmit = editor.onSubmit;
+        let submitted = false;
+        editor.onSubmit = (...args) => {
+            submitted = true;
+            onSubmit?.(...args);
+        };
+        try {
+            handleInput(data);
+            // Submission clears the editor and is handled by prompt admission instead.
+            if (!submitted && editor.getText() !== previousText)
+                onActivity();
+        }
+        finally {
+            editor.onSubmit = onSubmit;
+        }
+    };
+}
+//# sourceMappingURL=composer-user-activity.js.map

package/dist/modes/interactive/grok/chrome.js

@@ -1,6 +1,6 @@
 import { CustomEditor } from "../components/custom-editor.js";
 import { WorkingStatusIndicator } from "../components/status-indicator.js";
-import { theme } from "../theme/theme.js";
+import { getReservedKeywordHighlight, theme } from "../theme/theme.js";
 import { getGrokChromeTokens } from "./chrome-tokens.js";
 import { GrokFooter } from "./footer.js";
 import { GrokInputCard } from "./input-card.js";
@@ -60,6 +60,7 @@ export class GrokChrome {
         const tokens = getGrokChromeTokens();
         return {
             borderColor: tokens.inputBorder,
+            keywordHighlight: getReservedKeywordHighlight(),
             selectList: {
                 selectedPrefix: (text) => theme.fg("accent", text),
                 selectedText: (text) => tokens.primaryText(text),

package/dist/modes/interactive/interactive-mode.js

@@ -24,6 +24,7 @@ import { AssistantEditError, assistantTextEquals } from "../../core/edited-assis
 import { askUserAnswerDisplayText, formatUserMessage } from "../../core/extensions/builtin/ask-user/format.js";
 import { askUserRenderers } from "../../core/extensions/builtin/ask-user/render.js";
 import { buildNoticeBox } from "../../core/extensions/notice/index.js";
+import { emitUserActivity } from "../../core/extensions/user-activity.js";
 import { FooterDataProvider } from "../../core/footer-data-provider.js";
 import { sessionHolderWarning } from "../../core/foreign-session-holders.js";
 import { appendUncaughtCrashLog, appendUnhandledRejectionLog } from "../../core/hidden-stdout-log.js";
@@ -106,6 +107,7 @@ import { TreeSelectorComponent } from "./components/tree-selector.js";
 import { TrustSelectorComponent } from "./components/trust-selector.js";
 import { UserMessageComponent } from "./components/user-message.js";
 import { UserMessageSelectorComponent } from "./components/user-message-selector.js";
+import { insertProgrammaticComposerInput, observeComposerActivity } from "./composer-user-activity.js";
 import { expandEditorSubmission, expandSubmittedText, transferEditorContent } from "./editor-paste-transfer.js";
 import { formatExtensionErrorHeadline, sanitizeTuiErrorMessage } from "./extension-error-format.js";
 import { editFileInExternalEditor, editInExternalEditor } from "./external-editor.js";
@@ -470,7 +472,7 @@ export class OptimisticUserEchoController {
 const IMAGE_MARKER_PATTERN = /\[Image #([1-9]\d*)\]/g;
 /**
  * Attach a clipboard bitmap as an in-memory image behind an atomic
- * `[Image #N]` marker. Returns false when nothing was attached, so the caller
+ * `[Image #N]` marker. Returns false when the paste was unhandled, so the caller
  * falls through to the plain-text clipboard path.
  *
  * The bytes deliberately never touch the filesystem: writing a temp file and
@@ -496,10 +498,10 @@ async function attachClipboardImage(deps, image) {
     if (deps.isCompacting()) {
         // The compaction queue carries text only; an attachment queued behind
         // compaction would be silently lost at delivery, so drop it here with a
-        // visible status. Consume the paste (true) - the clipboard holds a
+        // visible status. Consume the paste as dropped - the clipboard holds a
         // bitmap, so the plain-text fallback has nothing useful to insert.
         deps.showStatus("Image paste dropped: messages sent during compaction cannot carry images - paste again after compaction finishes");
-        return true;
+        return "dropped";
     }
     const processed = await processImage(image.bytes, image.mimeType, {
         autoResizeImages: deps.settings.getImageAutoResize(),
@@ -521,7 +523,7 @@ async function attachClipboardImage(deps, image) {
         mimeType: processed.mimeType,
     });
     deps.requestRender();
-    return true;
+    return "attached";
 }
 export class InteractiveMode {
     static confirmsRefusedUnknownCommand(host, text) {
@@ -764,6 +766,7 @@ export class InteractiveMode {
             });
         }
         this.editor = this.defaultEditor;
+        observeComposerActivity(this.defaultEditor, () => emitUserActivity(this.session, "draft"));
         this.editorContainer = new Container();
         this.editorContainer.addChild(this.editor);
         this.footerDataProvider = new FooterDataProvider(this.sessionManager.getCwd());
@@ -2828,7 +2831,7 @@ export class InteractiveMode {
                 this.applyTerminalTitle();
             },
             custom: (factory, options) => this.showExtensionCustom(factory, options),
-            pasteToEditor: (text) => this.editor.handleInput(`\x1b[200~${text}\x1b[201~`),
+            pasteToEditor: (text) => insertProgrammaticComposerInput(this.editor, `\x1b[200~${text}\x1b[201~`),
             setEditorText: (text) => this.editor.setText(text),
             getEditorText: () => this.getExpandedEditorText(),
             editor: (title, prefill) => this.withBlockedHostDialog(crypto.randomUUID(), title, () => this.showExtensionEditor(title, prefill)),
@@ -3377,6 +3380,7 @@ export class InteractiveMode {
                 this.defaultEditor.onSubmit?.(expandSubmittedText(newEditor, text));
             };
             newEditor.onChange = this.defaultEditor.onChange;
+            observeComposerActivity(newEditor, () => emitUserActivity(this.session, "draft"));
             // Copy text (and any collapsed paste/image markers) from previous editor.
             // Image payloads live on this instance, so they must be dropped when the
             // destination cannot own their markers.
@@ -3669,6 +3673,7 @@ export class InteractiveMode {
                 const leadingSpace = characterBeforeCursor && !/\s/.test(characterBeforeCursor) ? " " : "";
                 const trailingSpace = characterAfterCursor && !/\s/.test(characterAfterCursor) ? " " : "";
                 this.editor.insertTextAtCursor?.(`${leadingSpace}${paths}${trailingSpace}`);
+                emitUserActivity(this.session, "draft");
                 this.ui.requestRender();
                 return;
             }
@@ -3682,11 +3687,15 @@ export class InteractiveMode {
                     showStatus: (message) => this.showStatus(message),
                     requestRender: () => this.ui.requestRender(),
                 }, image));
-            if (attached)
+            if (attached) {
+                if (attached === "attached")
+                    emitUserActivity(this.session, "draft");
                 return;
+            }
             const text = await readClipboardText();
             if (text) {
                 this.editor.insertTextAtCursor?.(text);
+                emitUserActivity(this.session, "draft");
                 this.ui.requestRender();
             }
         }

package/dist/modes/interactive/session-control-registry.js

@@ -12,6 +12,7 @@
 import { createHash } from "node:crypto";
 import { rmSync } from "node:fs";
 import { chmod, lstat, mkdir, realpath, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
 import { dirname, join } from "node:path";
 import { engineBuildIdentity } from "../../core/engine-build-identity.js";
 import { createDaemonDirectories, createHostDaemonPaths } from "../rpc/host-daemon-paths.js";
@@ -35,7 +36,13 @@ export async function resolveTuiSocket(agentDir, instanceId) {
         await makePrivateDirectory(dirname(primary));
         return primary;
     }
-    const root = join("/tmp", `senpi-rpc-${createHash("sha256").update(agentDir).digest("hex").slice(0, 8)}`);
+    const fallbackName = `senpi-rpc-${createHash("sha256").update(agentDir).digest("hex").slice(0, 8)}`;
+    const scopedRoot = join(tmpdir(), fallbackName);
+    // Test launchers supply a short owned TMPDIR. A normal user's long macOS temp path
+    // still needs the original short system fallback to fit sun_path.
+    const root = Buffer.byteLength(join(scopedRoot, "tui", name)) <= MAX_SOCKET_PATH_BYTES
+        ? scopedRoot
+        : join("/tmp", fallbackName);
     const tuiRoot = join(root, "tui");
     await makePrivateDirectory(tuiRoot);
     for (const directory of [root, tuiRoot])

package/dist/modes/interactive/theme/reserved-keyword-rainbow.d.ts

@@ -0,0 +1,11 @@
+import { type Color, type EditorKeywordHighlight, type TerminalColorMode } from "@earendil-works/pi-tui";
+import type { ThemeAppearance } from "./theme.ts";
+export declare function reservedKeywordColor(appearance: ThemeAppearance, index: number, length: number): Color;
+export interface ReservedKeywordHighlightSource {
+    readonly appearance: () => ThemeAppearance;
+    readonly colorMode: () => TerminalColorMode;
+    readonly env?: NodeJS.ProcessEnv;
+}
+/** `NO_COLOR` (any non-empty value) turns the decoration off entirely. */
+export declare function createReservedKeywordHighlight(source: ReservedKeywordHighlightSource): EditorKeywordHighlight | undefined;
+//# sourceMappingURL=reserved-keyword-rainbow.d.ts.map

package/dist/modes/interactive/theme/reserved-keyword-rainbow.js

@@ -0,0 +1,50 @@
+import { foregroundAnsi, mixColors, parseColor, } from "@earendil-works/pi-tui";
+import { findReservedKeywordRuns } from "../../../core/reserved-keywords.js";
+function spectrum(hexes) {
+    const positions = [0, 0.18, 0.36, 0.54, 0.72, 0.9, 1];
+    return hexes.map((hex, index) => ({ at: positions[index] ?? 1, color: parseColor(hex) }));
+}
+// The desktop composer's `.composer-reserved-keyword` stops: 700 shades on light surfaces,
+// 400 shades on dark ones, so every stop clears 4.5:1 as text.
+const SPECTRUM = {
+    light: spectrum(["#b91c1c", "#c2410c", "#15803d", "#0f766e", "#1d4ed8", "#be185d", "#b91c1c"]),
+    dark: spectrum(["#f87171", "#fbbf24", "#4ade80", "#2dd4bf", "#60a5fa", "#f472b6", "#f87171"]),
+};
+// A run spans red through pink; the final stop wraps back to red and is left out so the
+// first and last characters of a keyword never share a colour.
+const SPAN_END = 0.9;
+export function reservedKeywordColor(appearance, index, length) {
+    const stops = SPECTRUM[appearance];
+    const at = length <= 1 ? 0 : (Math.min(Math.max(index, 0), length - 1) / (length - 1)) * SPAN_END;
+    for (let stop = 1; stop < stops.length; stop++) {
+        const left = stops[stop - 1];
+        const right = stops[stop];
+        if (left === undefined || right === undefined || at > right.at)
+            continue;
+        const amount = right.at === left.at ? 0 : (at - left.at) / (right.at - left.at);
+        return mixColors(left.color, right.color, amount, "srgb");
+    }
+    return stops[0]?.color ?? parseColor("#ffffff");
+}
+/** `NO_COLOR` (any non-empty value) turns the decoration off entirely. */
+export function createReservedKeywordHighlight(source) {
+    const noColor = (source.env ?? process.env).NO_COLOR;
+    if (noColor !== undefined && noColor !== "")
+        return undefined;
+    const cache = new Map();
+    return {
+        find: findReservedKeywordRuns,
+        style: (text, index, length) => {
+            const appearance = source.appearance();
+            const mode = source.colorMode();
+            const key = `${appearance}:${mode}:${index}:${length}`;
+            let open = cache.get(key);
+            if (open === undefined) {
+                open = foregroundAnsi(reservedKeywordColor(appearance, index, length), mode);
+                cache.set(key, open);
+            }
+            return `${open}${text}\x1b[39m`;
+        },
+    };
+}
+//# sourceMappingURL=reserved-keyword-rainbow.js.map

package/dist/modes/interactive/theme/theme.d.ts

@@ -1,5 +1,5 @@
 import type { ThinkingLevel } from "@earendil-works/pi-agent-core";
-import { type Color, type EditorTheme, type MarkdownTheme, type SelectListTheme, type SettingsListTheme, type TerminalColorMode, type TerminalColors, type TextAttributes } from "@earendil-works/pi-tui";
+import { type Color, type EditorKeywordHighlight, type EditorTheme, type MarkdownTheme, type SelectListTheme, type SettingsListTheme, type TerminalColorMode, type TerminalColors, type TextAttributes } from "@earendil-works/pi-tui";
 import type { SourceInfo } from "../../../core/source-info.ts";
 /** Name of the built-in theme generated from the terminal's colors (`"system"`), used when no theme is set. */
 export { SYSTEM_THEME_NAME } from "./system-theme.ts";
@@ -147,5 +147,7 @@ export declare function getLanguageFromPath(filePath: string): string | undefine
 export declare function getMarkdownTheme(): MarkdownTheme;
 export declare function getSelectListTheme(): SelectListTheme;
 export declare function getEditorTheme(): EditorTheme;
+/** Rainbow for OmO's reserved prompt keywords; it follows the active theme's appearance and colour mode. */
+export declare function getReservedKeywordHighlight(): EditorKeywordHighlight | undefined;
 export declare function getSettingsListTheme(): SettingsListTheme;
 //# sourceMappingURL=theme.d.ts.map

package/dist/modes/interactive/theme/theme.js

@@ -5,6 +5,7 @@ import chalk from "chalk";
 import { getCustomThemesDir, getThemesDir } from "../../../config.js";
 import { closeWatcher, watchWithErrorHandler } from "../../../utils/fs-watch.js";
 import { highlight, supportsLanguage } from "../../../utils/syntax-highlight.js";
+import { createReservedKeywordHighlight } from "./reserved-keyword-rainbow.js";
 import { generateSystemThemeColors, SYSTEM_THEME_NAME, terminalAppearance } from "./system-theme.js";
 /** Name of the built-in theme generated from the terminal's colors (`"system"`), used when no theme is set. */
 export { SYSTEM_THEME_NAME } from "./system-theme.js";
@@ -888,9 +889,17 @@ export function getEditorTheme() {
     return {
         borderColor: (text) => theme.fg("borderMuted", text),
         mention: (text) => theme.fg("skillMention", `\x1b[1m${text}\x1b[22m`),
+        keywordHighlight: getReservedKeywordHighlight(),
         selectList: getSelectListTheme(),
     };
 }
+/** Rainbow for OmO's reserved prompt keywords; it follows the active theme's appearance and colour mode. */
+export function getReservedKeywordHighlight() {
+    return createReservedKeywordHighlight({
+        appearance: () => theme.appearance,
+        colorMode: () => theme.getColorMode(),
+    });
+}
 export function getSettingsListTheme() {
     return {
         label: (text, selected) => (selected ? theme.fg("accent", text) : text),

package/dist/modes/print-mode.js

@@ -8,7 +8,7 @@
 import { describeProviderFailureForUser, stripTurnRetrySuppressionPrefix, } from "@earendil-works/pi-ai";
 import { REQUIRED_COMPACTION_ERROR_MESSAGE } from "../core/agent-session.js";
 import { flushRawStdout, waitForRawStdoutBackpressure, writeRawStdout } from "../core/output-guard.js";
-import { usageLimitCause } from "../core/retry-fallback/usage-limit.js";
+import { usageLimitCause, usageLimitScope } from "../core/retry-fallback/usage-limit.js";
 import { killTrackedDetachedChildren } from "../utils/shell.js";
 import { toJsonEvent } from "./json-event.js";
 import { formatProviderNativeBody, formatProviderNativeSummary } from "./provider-native-rendering.js";
@@ -157,7 +157,12 @@ export async function runPrintMode(runtimeHost, options) {
                 if (assistantMsg.stopReason === "error" || assistantMsg.stopReason === "aborted") {
                     // A provider-stream stall or transport drop keeps the classifier wording
                     // on the message; stderr gets the plain-language version instead.
-                    const described = describeProviderFailureForUser(assistantMsg.errorMessage);
+                    const described = assistantMsg.errorCause?.type === "usage_limit" && assistantMsg.errorCause.scope === "account"
+                        ? assistantMsg.errorMessage
+                        : describeProviderFailureForUser(assistantMsg.errorMessage, {
+                            model: `${assistantMsg.provider}/${assistantMsg.model}`,
+                            usageLimit: usageLimitScope(assistantMsg),
+                        });
                     console.error(described ??
                         (stripTurnRetrySuppressionPrefix(assistantMsg.errorMessage ?? "") ||
                             `Request ${assistantMsg.stopReason}`));

package/dist/modes/rpc/connection-handler.js

@@ -26,13 +26,15 @@ import { emitProviderAccountsChanged, subscribeProviderAccountEvents, } from "..
 import { ANTHROPIC_SUBSCRIPTION_PROVIDER_ID } from "../../core/extensions/builtin/anthropic-subscription/account-management.js";
 import { isMcpControlInventoryChanged, MCP_CONTROL_INVENTORY_CHANGED_EVENT, MCP_CONTROL_INVENTORY_REQUEST_EVENT, } from "../../core/extensions/builtin/mcp/control-inventory.js";
 import { applyFastMode, resolveServiceTierMemoryModel, } from "../../core/extensions/builtin/service-tier.js";
+import { ExtensionRpcRequestNotFoundError } from "../../core/extensions/runner.js";
+import { describeUsageLimitEntry, describeUsageLimitMessage } from "../../core/retry-fallback/usage-limit.js";
 import { theme } from "../interactive/theme/theme.js";
 import { DURABLE_CLIENT_MESSAGE_ID_CAPABILITY } from "./client-admission-record.js";
 import { ClientAdmissions } from "./client-admissions.js";
 import { handleClientInput } from "./client-input-handler.js";
 import { ClientMessageEvents } from "./client-message-events.js";
 import { ConnectionQuestionBridge, degradeQuestion, sessionQuestionBridges } from "./connection-question-bridge.js";
-import { AUTO_TITLE_SESSIONS_CAPABILITY, buildCustomUnsupportedRequest, CONTINUE_FROM_LEAF_CAPABILITY, DEFAULT_CUSTOM_EXTENSION_LABEL, EXTENSION_EVENTS_CAPABILITY, MEDIA_PLACEHOLDERS_CAPABILITY, QUESTION_CAPABILITY, RETRY_FALLBACK_COMMAND_CAPABILITY, SESSION_HELD_CAPABILITY, } from "./custom-capability.js";
+import { AUTO_TITLE_SESSIONS_CAPABILITY, buildCustomUnsupportedRequest, CONTINUE_FROM_LEAF_CAPABILITY, DEFAULT_CUSTOM_EXTENSION_LABEL, EVAL_CELLS_CAPABILITY, EXTENSION_EVENTS_CAPABILITY, MEDIA_PLACEHOLDERS_CAPABILITY, QUESTION_CAPABILITY, RETRY_FALLBACK_COMMAND_CAPABILITY, SESSION_HELD_CAPABILITY, } from "./custom-capability.js";
 import { createRpcEventOutputBuffer } from "./event-output-buffer.js";
 import { settleExtensionUiResponse } from "./extension-ui-response.js";
 import { HostSessionControl } from "./host-session-control.js";
@@ -42,7 +44,7 @@ import { protocolIdentity } from "./protocol-identity.js";
 import { buildRpcCommandsForSession, createCommandsChangedEvent, rpcCommandListDigest } from "./rpc-command-surface.js";
 import { rpcCommandPayloadError, rpcCommandShapeError, rpcMessageLengthError, sessionRetryFallbackError, } from "./rpc-input-validation.js";
 import { buildRpcSessionState } from "./rpc-session-state.js";
-import { RPC_ERROR_ENTRY_NOT_FOUND, RPC_ERROR_MEDIA_NOT_FOUND, RPC_ERROR_MODEL_NOT_FOUND } from "./rpc-types.js";
+import { RPC_ERROR_ENTRY_NOT_FOUND, RPC_ERROR_EVAL_CELL_NOT_FOUND, RPC_ERROR_EVAL_CELLS_UNAVAILABLE, RPC_ERROR_INVALID_EVAL_CELL_REQUEST, RPC_ERROR_MEDIA_NOT_FOUND, RPC_ERROR_MODEL_NOT_FOUND, } from "./rpc-types.js";
 import { availableModelsData, interruptRunningTurn, unsupportedThinkingLevel } from "./session-control-actions-data.js";
 import { SessionExtensionUiRequests } from "./session-extension-ui-requests.js";
 export { buildRpcSessionState } from "./rpc-session-state.js";
@@ -738,6 +740,7 @@ export function createRpcConnectionHandler(runtimeHost, sink, options = {}) {
                                 MEDIA_PLACEHOLDERS_CAPABILITY,
                                 DURABLE_CLIENT_MESSAGE_ID_CAPABILITY,
                                 CONTINUE_FROM_LEAF_CAPABILITY,
+                                EVAL_CELLS_CAPABILITY,
                                 ...(options.retryFallbackCommand ? [RETRY_FALLBACK_COMMAND_CAPABILITY] : []),
                                 // Client flags cannot advertise a host guard this classic binding does not run.
                                 ...(options.capabilities ?? []).filter((capability) => capability !== SESSION_HELD_CAPABILITY),
@@ -1249,11 +1252,22 @@ export function createRpcConnectionHandler(runtimeHost, sink, options = {}) {
                     }
                     entries = entries.slice(sinceIndex + 1);
                 }
-                return success(id, "get_entries", { entries, leafId: sessionManager.getLeafId() });
+                return success(id, "get_entries", {
+                    entries: entries.map(describeUsageLimitEntry),
+                    leafId: sessionManager.getLeafId(),
+                });
             }
             case "get_tree": {
                 const sessionManager = session.sessionManager;
-                return success(id, "get_tree", { tree: sessionManager.getTree(), leafId: sessionManager.getLeafId() });
+                const tree = sessionManager.getTree();
+                // getTree returns defensive nodes; keep the persisted entries diagnostic-bearing.
+                const nodes = [...tree];
+                for (const node of nodes) {
+                    node.entry = describeUsageLimitEntry(node.entry);
+                    for (const child of node.children)
+                        nodes.push(child);
+                }
+                return success(id, "get_tree", { tree, leafId: sessionManager.getLeafId() });
             }
             case "get_last_assistant_text": {
                 const text = session.getLastAssistantText();
@@ -1277,7 +1291,9 @@ export function createRpcConnectionHandler(runtimeHost, sink, options = {}) {
             // Messages
             // =================================================================
             case "get_messages": {
-                return success(id, "get_messages", { messages: session.messages });
+                return success(id, "get_messages", {
+                    messages: session.messages.map((message) => message.role === "assistant" ? describeUsageLimitMessage(message) : message),
+                });
             }
             // On-demand fetch of a media block a `media_placeholders` client received as
             // an `image_ref` stub. Durable session entries first (they survive the live
@@ -1302,13 +1318,29 @@ export function createRpcConnectionHandler(runtimeHost, sink, options = {}) {
                 const inventory = recordLoadedSurfaces(true);
                 return success(id, "get_loaded_surfaces", inventory.data);
             }
-            case "extension_request": {
-                const name = command.name.trim();
-                if (name.length === 0) {
-                    return error(id, "extension_request", "Extension RPC request name cannot be empty");
+            case "extension_request":
+            case "eval_cells.list":
+            case "eval_cells.peek":
+            case "eval_cells.stop": {
+                const name = command.type === "extension_request" ? command.name.trim() : command.type;
+                if (name.length === 0)
+                    return error(id, command.type, "Extension RPC request name cannot be empty");
+                try {
+                    const data = await session.extensionRunner.requestRpc(name, command.type === "extension_request" ? command.data : command);
+                    return success(id, command.type, data);
+                }
+                catch (cause) {
+                    if (cause instanceof ExtensionRpcRequestNotFoundError &&
+                        (name === "eval_cells.list" || name === "eval_cells.peek" || name === "eval_cells.stop")) {
+                        return error(id, command.type, "Eval cell controls are unavailable in this session", RPC_ERROR_EVAL_CELLS_UNAVAILABLE);
+                    }
+                    if (cause instanceof Error &&
+                        "code" in cause &&
+                        (cause.code === RPC_ERROR_EVAL_CELL_NOT_FOUND || cause.code === RPC_ERROR_INVALID_EVAL_CELL_REQUEST)) {
+                        return error(id, command.type, cause.message, cause.code);
+                    }
+                    throw cause;
                 }
-                const data = await session.extensionRunner.requestRpc(name, command.data);
-                return success(id, "extension_request", data);
             }
             // =================================================================
             // Auth (task 13)

package/dist/modes/rpc/custom-capability.d.ts

@@ -17,6 +17,8 @@ import type { RpcExtensionUIRequest } from "./rpc-types.ts";
 /** The capability string a client sends in its handshake to opt into the notice. */
 export declare const CUSTOM_UNSUPPORTED_CAPABILITY = "custom_unsupported";
 export declare const EXTENSION_EVENTS_CAPABILITY = "extension_events";
+/** Host protocol support; a session without codemode returns `eval_cells_unavailable`. */
+export declare const EVAL_CELLS_CAPABILITY = "eval_cells";
 export declare const AUTO_TITLE_SESSIONS_CAPABILITY = "auto_title_sessions";
 /** Host capability: the `continue_from_leaf` command starts a turn with no new prompt (#1930). */
 export declare const CONTINUE_FROM_LEAF_CAPABILITY = "continue_from_leaf";

package/dist/modes/rpc/custom-capability.js

@@ -17,6 +17,8 @@ import * as crypto from "node:crypto";
 /** The capability string a client sends in its handshake to opt into the notice. */
 export const CUSTOM_UNSUPPORTED_CAPABILITY = "custom_unsupported";
 export const EXTENSION_EVENTS_CAPABILITY = "extension_events";
+/** Host protocol support; a session without codemode returns `eval_cells_unavailable`. */
+export const EVAL_CELLS_CAPABILITY = "eval_cells";
 export const AUTO_TITLE_SESSIONS_CAPABILITY = "auto_title_sessions";
 /** Host capability: the `continue_from_leaf` command starts a turn with no new prompt (#1930). */
 export const CONTINUE_FROM_LEAF_CAPABILITY = "continue_from_leaf";

package/dist/modes/rpc/host-admission-proxy.d.ts

@@ -0,0 +1,9 @@
+import type { Socket } from "node:net";
+import { type HostAdmission } from "./host-admission.ts";
+/**
+ * Requests are size-bounded; each direction awaits downstream socket backpressure.
+ * Opens remain concurrent with control commands. Stop refuses every pending open,
+ * while other commands retain their wire order and child-owned semantics.
+ */
+export declare function proxyWithAdmission(client: Socket, internal: Socket | undefined, admission: HostAdmission): void;
+//# sourceMappingURL=host-admission-proxy.d.ts.map