@code-yeongyu/senpi 2026.10.21-1 → 2026.10.21-2

package/dist/core/extensions/builtin/terminal/monitor-wake-pacing.js

@@ -0,0 +1,41 @@
+/**
+ * Per-monitor wake pacing: a token bucket of `rate` tokens refilled at `rate` an hour, one token
+ * per wake. Monitors without a rate are unpaced and always ready.
+ */
+const HOUR_MS = 3_600_000;
+export class WakePacer {
+    #rateOf;
+    #buckets = new Map();
+    constructor(rateOf) {
+        this.#rateOf = rateOf;
+    }
+    /** When `id` next holds a whole token: `now` for an unpaced monitor or one with a token left. */
+    readyAt(id, now) {
+        const paced = this.#refill(id, now);
+        if (paced === undefined || paced.bucket.tokens >= 1)
+            return now;
+        return now + Math.ceil(((1 - paced.bucket.tokens) * HOUR_MS) / paced.rate);
+    }
+    spend(id, now) {
+        const paced = this.#refill(id, now);
+        if (paced !== undefined)
+            paced.bucket.tokens = Math.max(0, paced.bucket.tokens - 1);
+    }
+    forget(id) {
+        this.#buckets.delete(id);
+    }
+    clear() {
+        this.#buckets.clear();
+    }
+    #refill(id, now) {
+        const rate = this.#rateOf(id);
+        if (rate === undefined || !Number.isFinite(rate) || rate < 1)
+            return undefined;
+        const bucket = this.#buckets.get(id) ?? { tokens: rate, at: now };
+        bucket.tokens = Math.min(rate, bucket.tokens + ((now - bucket.at) * rate) / HOUR_MS);
+        bucket.at = now;
+        this.#buckets.set(id, bucket);
+        return { bucket, rate };
+    }
+}
+//# sourceMappingURL=monitor-wake-pacing.js.map

package/dist/core/extensions/builtin/terminal/restore-session.js

@@ -10,6 +10,7 @@ import { existsSync } from "node:fs";
 import { encodedSessionId } from "../../../session-sidecar-store.js";
 import { createLeaseKeeper } from "./lease-keeper.js";
 import { acquireTerminalLease, releaseTerminalLease, retireLeaseToken, } from "./manifest-lease.js";
+import { sweepMonitorOverflowFiles } from "./monitor-overflow-file.js";
 import { removeMonitorStateDir, terminalStateDir } from "./monitor-state-dir.js";
 import { ownProcessStartedAtMs, processBootAtMs } from "./process-identity.js";
 import { restoreTerminalState } from "./restore.js";
@@ -114,6 +115,7 @@ export async function startPersistence({ pi, state, toolCtx, sessionKey }) {
         const self = { pid: process.pid, bootAtMs: processBootAtMs(), processStartedAtMs: ownProcessStartedAtMs() };
         // Housekeeping only: a failed sweep leaves the files for the next start to reclaim.
         void sweepTerminalStateDir(dir, { self, keep: new Set([`${encoded}.lease`, `${encoded}.json`]) }).catch(() => undefined);
+        void sweepMonitorOverflowFiles(dir).catch(() => undefined);
         flushRestoreDigest(pi, state);
         decided();
     };

package/dist/core/extensions/builtin/terminal/rpc-monitor-observer.js

@@ -6,6 +6,7 @@
  * reads the stream itself.
  */
 import { createConnection } from "node:net";
+import { OBSERVE_REQUEST_FIELD } from "../../../../modes/rpc/host-observe-request.js";
 import { attachJsonlLineReader, MAX_RPC_LINE_CHARACTERS } from "../../../../modes/rpc/jsonl.js";
 import { readSocketSecret, resolveSocketTransportAddress, sendSocketHandshake, socketSecretPath, } from "../../../../modes/rpc/socket-transport.js";
 import { socketNeedsHandshake } from "../../../../modes/rpc/tui-socket.js";
@@ -25,7 +26,10 @@ export async function openRpcObserver(socketPath, subscription, handlers) {
     socket.once("connect", () => {
         if (secret !== undefined)
             sendSocketHandshake(socket, secret);
-        socket.write(`${JSON.stringify({ ...subscription, id: SUBSCRIBE_ID, type: "subscribe_sessions" })}\n`);
+        // Marked observing (senpi#3956): without it the supervisor counts this watch as an attached client, so a
+        // watched host never idle-exits and a `children`/`all` watch pins every task shard host on the machine.
+        const frame = { ...subscription, [OBSERVE_REQUEST_FIELD]: true, id: SUBSCRIBE_ID, type: "subscribe_sessions" };
+        socket.write(`${JSON.stringify(frame)}\n`);
     });
     const detach = attachJsonlLineReader(socket, (line) => {
         let record;

package/dist/core/extensions/builtin/terminal/settings.d.ts

@@ -7,6 +7,13 @@ export interface MonitorDeliverySettings {
     readonly maxLinesPerInjection: number;
     readonly maxCharsPerInjection: number;
     readonly wakeBudget: number;
+    /** Average wakes an hour (and burst size) of a persistent command watch; more lines batch. */
+    readonly wakesPerHour: number;
+}
+/** Runaway guard of a persistent command watch: pause after this many lines a minute for this many minutes. */
+export interface MonitorRunawayGuard {
+    readonly linesPerMinute: number;
+    readonly minutes: number;
 }
 export interface ResolvedTerminalSettings {
     readonly defaultCols: number;
@@ -16,10 +23,13 @@ export interface ResolvedTerminalSettings {
     readonly timeoutAction: TimeoutAction;
     readonly notify: NotifyMode;
     readonly monitor: MonitorDeliverySettings;
+    readonly monitorRunaway: MonitorRunawayGuard;
     /** Admission cap on persistent (restart-surviving) monitors per session. */
     readonly maxDurableMonitors: number | "unlimited";
 }
 export declare const TERMINAL_SETTINGS_DEFAULTS: ResolvedTerminalSettings;
+/** Upper bound of a wake rate (setting or per-monitor override): one wake a second on average. */
+export declare const MAX_MONITOR_WAKES_PER_HOUR = 3600;
 /** Resolve terminal-tool config from a raw `terminal` settings block, filling defaults. */
 export declare function resolveTerminalSettings(raw: TerminalSettings | undefined): ResolvedTerminalSettings;
 /** Load and merge terminal-tool settings from global + project settings.json. */

package/dist/core/extensions/builtin/terminal/settings.js

@@ -1,4 +1,4 @@
-import { DEFAULT_COLS, DEFAULT_MAX_SESSIONS, DEFAULT_ROWS, DEFAULT_SCROLLBACK } from "./shared.js";
+import { DEFAULT_COLS, DEFAULT_MAX_SESSIONS, DEFAULT_MONITOR_RUNAWAY_LINES_PER_MINUTE, DEFAULT_MONITOR_RUNAWAY_MINUTES, DEFAULT_MONITOR_WAKES_PER_HOUR, DEFAULT_ROWS, DEFAULT_SCROLLBACK, } from "./shared.js";
 export const TERMINAL_SETTINGS_DEFAULTS = {
     defaultCols: DEFAULT_COLS,
     defaultRows: DEFAULT_ROWS,
@@ -12,9 +12,16 @@ export const TERMINAL_SETTINGS_DEFAULTS = {
         maxLinesPerInjection: 50,
         maxCharsPerInjection: 4096,
         wakeBudget: 5,
+        wakesPerHour: DEFAULT_MONITOR_WAKES_PER_HOUR,
+    },
+    monitorRunaway: {
+        linesPerMinute: DEFAULT_MONITOR_RUNAWAY_LINES_PER_MINUTE,
+        minutes: DEFAULT_MONITOR_RUNAWAY_MINUTES,
     },
     maxDurableMonitors: "unlimited",
 };
+/** Upper bound of a wake rate (setting or per-monitor override): one wake a second on average. */
+export const MAX_MONITOR_WAKES_PER_HOUR = 3600;
 function positiveInt(value, fallback, maximum = Number.MAX_SAFE_INTEGER) {
     if (typeof value !== "number" || !Number.isFinite(value) || value < 1)
         return fallback;
@@ -51,6 +58,11 @@ export function resolveTerminalSettings(raw) {
             maxLinesPerInjection: positiveInt(raw.monitorMaxLinesPerInjection, TERMINAL_SETTINGS_DEFAULTS.monitor.maxLinesPerInjection, 200),
             maxCharsPerInjection: positiveInt(raw.monitorMaxCharsPerInjection, TERMINAL_SETTINGS_DEFAULTS.monitor.maxCharsPerInjection, 16_384),
             wakeBudget: positiveInt(raw.monitorWakeBudget, TERMINAL_SETTINGS_DEFAULTS.monitor.wakeBudget, 100),
+            wakesPerHour: positiveInt(raw.monitorWakesPerHour, TERMINAL_SETTINGS_DEFAULTS.monitor.wakesPerHour, MAX_MONITOR_WAKES_PER_HOUR),
+        },
+        monitorRunaway: {
+            linesPerMinute: positiveInt(raw.monitorRunawayLinesPerMinute, TERMINAL_SETTINGS_DEFAULTS.monitorRunaway.linesPerMinute),
+            minutes: positiveInt(raw.monitorRunawayMinutes, TERMINAL_SETTINGS_DEFAULTS.monitorRunaway.minutes, 1440),
         },
         maxDurableMonitors: durableMonitorCap(raw.maxDurableMonitors),
     };

package/dist/core/extensions/builtin/terminal/shared.d.ts

@@ -44,20 +44,27 @@ export declare const KILLED_SESSION_EXIT_GRACE_MS = 5000;
  */
 export declare const DURABLE_MONITOR_EXPIRY_MS: number;
 /**
- * Per-monitor rolling fire budget: one durable command watch may deliver at most this many
- * matched line events inside any FIRE_BUDGET_WINDOW_MS window before the registry auto-mutes
- * it. The session-global wake budget only counts consecutive line-only wakes on an idle
- * session, so a busy session needs this per-monitor backstop against a runaway watch.
+ * Width of a durable command watch's rolling fire window: the persisted count of matched lines it
+ * delivered inside the current window. It is a statistic only; nothing mutes on it.
  */
-export declare const DEFAULT_DURABLE_MONITOR_FIRE_BUDGET = 200;
-/** Width of the rolling fire-budget window: the budget replenishes after this span elapses. */
 export declare const FIRE_BUDGET_WINDOW_MS: number;
 /**
- * The ONE summary emitted when the fire budget mutes a watch. Machine-consumed: the monitor
- * notifier exempts exactly this summary from its completion handling, so the mute must not
- * clear the session-global wake streak.
+ * Wake pacing of a persistent command watch: at most this many wakes an hour on average, with a
+ * burst of the same size. Lines matched between wakes are batched into the next one, never dropped.
  */
-export declare const FIRE_BUDGET_AUTO_MUTE_SUMMARY = "auto-muted: fire budget (200/24h) reached; rearm to resume";
+export declare const DEFAULT_MONITOR_WAKES_PER_HOUR = 12;
+/** Runaway guard: a persistent command watch matching more lines than this in each minute... */
+export declare const DEFAULT_MONITOR_RUNAWAY_LINES_PER_MINUTE = 120;
+/** ...for this many consecutive minutes is paused with a visible notice until it is re-armed. */
+export declare const DEFAULT_MONITOR_RUNAWAY_MINUTES = 5;
+/** One per-monitor overflow file grows to this size before it rotates to a single `.1` copy. */
+export declare const MONITOR_OVERFLOW_FILE_MAX_BYTES: number;
+/**
+ * Machine-consumed prefix of the runaway-guard pause summary: the monitor notifier treats a summary
+ * that starts with it as a pause, not a completion, so it must not clear the session wake streak.
+ */
+export declare const RUNAWAY_PAUSE_SUMMARY_PREFIX = "paused: runaway output";
+export declare function runawayPauseSummary(bashId: string, linesPerMinute: number, minutes: number): string;
 /**
  * Non-interactive environment for foreground one-shot commands (codex-style):
  * cooperative tools (`gh`, `git`, pagers, color libs) skip spinners/colors at

package/dist/core/extensions/builtin/terminal/shared.js

@@ -50,20 +50,29 @@ export const KILLED_SESSION_EXIT_GRACE_MS = 5000;
  */
 export const DURABLE_MONITOR_EXPIRY_MS = 7 * 24 * 60 * 60 * 1000;
 /**
- * Per-monitor rolling fire budget: one durable command watch may deliver at most this many
- * matched line events inside any FIRE_BUDGET_WINDOW_MS window before the registry auto-mutes
- * it. The session-global wake budget only counts consecutive line-only wakes on an idle
- * session, so a busy session needs this per-monitor backstop against a runaway watch.
+ * Width of a durable command watch's rolling fire window: the persisted count of matched lines it
+ * delivered inside the current window. It is a statistic only; nothing mutes on it.
  */
-export const DEFAULT_DURABLE_MONITOR_FIRE_BUDGET = 200;
-/** Width of the rolling fire-budget window: the budget replenishes after this span elapses. */
 export const FIRE_BUDGET_WINDOW_MS = 24 * 60 * 60 * 1000;
 /**
- * The ONE summary emitted when the fire budget mutes a watch. Machine-consumed: the monitor
- * notifier exempts exactly this summary from its completion handling, so the mute must not
- * clear the session-global wake streak.
+ * Wake pacing of a persistent command watch: at most this many wakes an hour on average, with a
+ * burst of the same size. Lines matched between wakes are batched into the next one, never dropped.
  */
-export const FIRE_BUDGET_AUTO_MUTE_SUMMARY = `auto-muted: fire budget (${DEFAULT_DURABLE_MONITOR_FIRE_BUDGET}/24h) reached; rearm to resume`;
+export const DEFAULT_MONITOR_WAKES_PER_HOUR = 12;
+/** Runaway guard: a persistent command watch matching more lines than this in each minute... */
+export const DEFAULT_MONITOR_RUNAWAY_LINES_PER_MINUTE = 120;
+/** ...for this many consecutive minutes is paused with a visible notice until it is re-armed. */
+export const DEFAULT_MONITOR_RUNAWAY_MINUTES = 5;
+/** One per-monitor overflow file grows to this size before it rotates to a single `.1` copy. */
+export const MONITOR_OVERFLOW_FILE_MAX_BYTES = 4 * 1024 * 1024;
+/**
+ * Machine-consumed prefix of the runaway-guard pause summary: the monitor notifier treats a summary
+ * that starts with it as a pause, not a completion, so it must not clear the session wake streak.
+ */
+export const RUNAWAY_PAUSE_SUMMARY_PREFIX = "paused: runaway output";
+export function runawayPauseSummary(bashId, linesPerMinute, minutes) {
+    return `${RUNAWAY_PAUSE_SUMMARY_PREFIX} (more than ${linesPerMinute} matched lines a minute for ${minutes} minute${minutes === 1 ? "" : "s"}); later lines stay in bash_output. Resume with monitor({ action: "rearm", bash_id: "${bashId}" }).`;
+}
 /**
  * Non-interactive environment for foreground one-shot commands (codex-style):
  * cooperative tools (`gh`, `git`, pagers, color libs) skip spinners/colors at

package/dist/core/extensions/builtin/terminal/terminal-manifest-model.d.ts

@@ -49,6 +49,8 @@ export interface ManifestMonitor {
     readonly filter?: string;
     /** Command watch whose output lines are a person's words; absent on older entries. */
     readonly humanInput?: boolean;
+    /** Per-monitor wake-rate override of a persistent command watch; absent uses the setting. */
+    readonly wakesPerHour?: number;
     readonly cwd?: string;
     readonly approvedParent?: string;
     /** Rpc watches: the target as written, the record kinds reported and dropped. */
@@ -91,6 +93,7 @@ export interface CommandMonitorSpec {
     readonly command: string;
     readonly filter?: string;
     readonly humanInput?: boolean;
+    readonly wakesPerHour?: number;
     readonly cwd?: string;
     readonly persistent: boolean;
 }

package/dist/core/extensions/builtin/terminal/terminal-manifest-parse.js

@@ -44,6 +44,12 @@ function bool(raw, field) {
 function opt(raw, field, required) {
     return raw[field] === undefined ? undefined : required(raw, field);
 }
+function wakeRate(raw, field) {
+    const value = raw[field];
+    if (typeof value !== "number" || !Number.isInteger(value) || value < 1 || value > 3600)
+        invalid(`field ${field} must be an integer from 1 to 3600`);
+    return value;
+}
 function oneOf(values, raw, field) {
     const value = raw[field];
     if (typeof value !== "string" || !values.includes(value))
@@ -127,6 +133,7 @@ function parseMonitor(entry) {
         event: opt(entry, "event", (raw, field) => oneOf(FILE_EVENTS, raw, field)),
         filter: opt(entry, "filter", str),
         humanInput: opt(entry, "humanInput", bool),
+        ...(entry.wakesPerHour === undefined ? {} : { wakesPerHour: wakeRate(entry, "wakesPerHour") }),
         cwd: opt(entry, "cwd", str),
         approvedParent: opt(entry, "approvedParent", str),
         target: opt(entry, "target", str),

package/dist/core/extensions/builtin/terminal/terminal-manifest.js

@@ -227,6 +227,7 @@ export class TerminalManifestWriter {
             event: spec.kind === "file" ? spec.event : undefined,
             filter: spec.kind === "file" ? undefined : spec.filter,
             humanInput: spec.kind === "command" && spec.humanInput === true ? true : undefined,
+            ...(spec.kind === "command" && spec.wakesPerHour !== undefined ? { wakesPerHour: spec.wakesPerHour } : {}),
             cwd: spec.kind === "rpc" ? undefined : spec.cwd,
             ...(spec.kind === "rpc"
                 ? {

package/dist/core/extensions/builtin/terminal/tools/monitor-schema.d.ts

@@ -21,6 +21,7 @@ export declare const monitorSchema: Type.TObject<{
     timeout_ms: Type.TOptional<Type.TNumber>;
     persistent: Type.TOptional<Type.TBoolean>;
     bash_id: Type.TOptional<Type.TString>;
+    wakes_per_hour: Type.TOptional<Type.TInteger>;
     human_input: Type.TOptional<Type.TBoolean>;
 }>;
 export type MonitorInput = Static<typeof monitorSchema>;

package/dist/core/extensions/builtin/terminal/tools/monitor-schema.js

@@ -10,7 +10,7 @@ export const MAX_MONITOR_TIMEOUT_MS = 3_600_000;
  */
 export const monitorSchema = Type.Object({
     action: Type.Optional(StringEnum(["create", "rearm"], {
-        description: "Defaults to create. rearm resumes a monitor paused by the wake budget.",
+        description: "Defaults to create. rearm resumes a monitor paused by the wake budget or the runaway guard.",
     })),
     type: Type.Optional(StringEnum(["command", "path", "rpc"], {
         description: "Create: which source to watch; inferred when omitted (command -> command, path -> path, target -> rpc).",
@@ -50,6 +50,11 @@ export const monitorSchema = Type.Object({
         description: "Standing watch: no deadline, and it survives a session restart (command re-run once, file rescanned and any detached change reported). Expires 7 days after creation; no per-session cap unless the terminal.maxDurableMonitors setting sets one; stop one with kill_bash.",
     })),
     bash_id: Type.Optional(Type.String({ description: "Rearm: paused monitor id (mon_ or bash_id) to resume; omit for all paused." })),
+    wakes_per_hour: Type.Optional(Type.Integer({
+        minimum: 1,
+        maximum: 3600,
+        description: "Persistent command branch only: average wakes an hour for this watch (default: terminal.monitorWakesPerHour, 12). Lines matched between wakes are batched into the next one, never dropped; raise it for a chat bridge that needs quicker replies.",
+    })),
     human_input: Type.Optional(Type.Boolean({
         description: "Command branch only: set true when each output line is a message a person wrote (a chat or inbox bridge). Its deliveries then count as new user input, so a running goal keeps going; leave unset for machine status.",
     })),

package/dist/core/extensions/builtin/terminal/tools/monitor.d.ts

@@ -24,6 +24,7 @@ export declare function createMonitorTool(ctx: TerminalToolContext): {
         timeout_ms: import("typebox").TOptional<import("typebox").TNumber>;
         persistent: import("typebox").TOptional<import("typebox").TBoolean>;
         bash_id: import("typebox").TOptional<import("typebox").TString>;
+        wakes_per_hour: import("typebox").TOptional<import("typebox").TInteger>;
         human_input: import("typebox").TOptional<import("typebox").TBoolean>;
     }>;
     renderCall: typeof renderMonitorCall;

package/dist/core/extensions/builtin/terminal/tools/monitor.js

@@ -50,7 +50,9 @@ async function createMonitor(ctx, registry, input, execCtx) {
         persistent: input.persistent === true,
         deadlineMs,
         ...(input.human_input === true ? { humanInput: true } : {}),
-        // Only persistent command watches are restartable-command durable: those carry the fire budget.
+        ...(input.wakes_per_hour !== undefined ? { wakesPerHour: input.wakes_per_hour } : {}),
+        // Only persistent command watches are restartable-command durable: those carry the fire window
+        // and the runaway guard, and only they are wake-paced.
         durabilityClass: input.persistent === true ? "restartable-command" : "ephemeral",
         // Same deadline the manifest writer persists, so the footer warns off the live record too.
         ...(input.persistent === true ? { expiresAt: Date.now() + DURABLE_MONITOR_EXPIRY_MS } : {}),
@@ -67,6 +69,7 @@ async function createMonitor(ctx, registry, input, execCtx) {
             command: input.command,
             filter: input.filter,
             ...(input.human_input === true ? { humanInput: true } : {}),
+            ...(input.wakes_per_hour !== undefined ? { wakesPerHour: input.wakes_per_hour } : {}),
             cwd,
             persistent: input.persistent === true,
         },
@@ -130,6 +133,11 @@ export function createMonitorTool(ctx) {
             const source = monitorSourceOf(input);
             if (typeof source !== "string")
                 return errorResult(source.error);
+            if (input.wakes_per_hour !== undefined && (source !== "command" || input.persistent !== true))
+                return errorResult("wakes_per_hour applies to persistent command monitors (command with persistent: true); other watches are not wake-paced.");
+            if (input.wakes_per_hour !== undefined &&
+                (!Number.isInteger(input.wakes_per_hour) || input.wakes_per_hour < 1 || input.wakes_per_hour > 3600))
+                return errorResult("wakes_per_hour must be an integer from 1 to 3600.");
             if (source === "rpc") {
                 if (input.human_input === true)
                     return errorResult("human_input applies to command monitors; an rpc watch reports session status, not a person's text.");

package/dist/core/extensions/builtin/tps.js

@@ -1,17 +1,10 @@
+import { reasonedBeforeFirstDelta, STREAMED_DELTA_TYPES } from "@earendil-works/pi-agent-core";
 function isAssistantMessage(message) {
     if (!message || typeof message !== "object")
         return false;
     const role = message.role;
     return role === "assistant";
 }
-function reasonedBeforeFirstDelta(message, thinkingStreamed) {
-    if ((message.usage?.reasoning ?? 0) > 0)
-        return true;
-    if (thinkingStreamed)
-        return false;
-    return message.content?.some((block) => block.type === "thinking") ?? false;
-}
-const STREAMED_DELTA_TYPES = new Set(["text_delta", "thinking_delta", "toolcall_delta"]);
 /** Below this much streamed generation time a rate is mostly timer noise, so none is shown (senpi#3393). */
 const MIN_GENERATION_MS = 500;
 export default function (pi) {

package/dist/core/extensions/loader.js

@@ -900,7 +900,9 @@ function discoverExtensionsInDir(dir) {
     }
     const discovered = [];
     try {
-        const entries = fs.readdirSync(dir, { withFileTypes: true });
+        const entries = fs
+            .readdirSync(dir, { withFileTypes: true })
+            .sort((a, b) => (a.name < b.name ? -1 : a.name > b.name ? 1 : 0));
         for (const entry of entries) {
             const entryPath = path.join(dir, entry.name);
             // 1. Direct files: *.ts or *.js

package/dist/core/extensions/runner.d.ts

@@ -142,6 +142,7 @@ export declare class ExtensionRunner {
     private engineTurnsHeldFn;
     private noteHeldWakeFn;
     private questionInput;
+    private personAnswerPending;
     private isProjectTrustedFn;
     private getSignalFn;
     private waitForIdleFn;

package/dist/core/extensions/runner.js

@@ -249,6 +249,7 @@ export class ExtensionRunner {
         this.isIdleFn = () => true;
         this.engineTurnsHeldFn = () => false;
         this.noteHeldWakeFn = () => { };
+        this.personAnswerPending = false;
         this.isProjectTrustedFn = () => true;
         this.getSignalFn = () => undefined;
         this.waitForIdleFn = async () => { };
@@ -336,7 +337,12 @@ export class ExtensionRunner {
             else
                 actions.sendMessage(message, options);
         };
-        this.runtime.sendUserMessage = (content, options) => this.sessionStartTurns.admit(() => actions.sendUserMessage(content, options));
+        this.runtime.sendUserMessage = (content, options) => {
+            // Captured at admission: a deferred answer keeps the origin it was delivered with.
+            const inputOrigin = this.personAnswerPending ? "person" : "extension";
+            this.personAnswerPending = false;
+            this.sessionStartTurns.admit(() => actions.sendUserMessage(content, options, inputOrigin));
+        };
         this.runtime.appendEntry = actions.appendEntry;
         this.runtime.setSessionName = actions.setSessionName;
         this.runtime.getSessionName = actions.getSessionName;
@@ -1248,6 +1254,11 @@ export class ExtensionRunner {
         if (this.questionInput) {
             bindQuestionInput(context, () => {
                 runner.assertActive();
+                // The answer's own sendUserMessage follows synchronously and takes this token at admission.
+                runner.personAnswerPending = true;
+                queueMicrotask(() => {
+                    runner.personAnswerPending = false;
+                });
                 runner.questionInput?.();
             });
         }

package/dist/core/extensions/types.d.ts

@@ -7,6 +7,7 @@
  * - Register commands, keyboard shortcuts, and CLI flags
  * - Interact with the user via UI primitives
  */
+import type { InputOrigin } from "../input-origin.ts";
 import type { UploadRedaction, UploadRedactionOptions } from "../share/upload-redaction.ts";
 import type { ContextEvent } from "./context-event.ts";
 export type { ContextEvent } from "./context-event.ts";
@@ -2507,7 +2508,8 @@ export interface ExtensionRuntimeState {
  */
 export interface ExtensionActions {
     sendMessage: SendMessageHandler;
-    sendUserMessage: SendUserMessageHandler;
+    /** The runner passes the origin it captured when the extension called `sendUserMessage` (a person's answer is `person`). */
+    sendUserMessage: (content: Parameters<SendUserMessageHandler>[0], options?: Parameters<SendUserMessageHandler>[1], inputOrigin?: InputOrigin) => void;
     appendEntry: AppendEntryHandler;
     setSessionName: SetSessionNameHandler;
     getSessionName: GetSessionNameHandler;

package/dist/core/session-manager.d.ts

@@ -1,6 +1,7 @@
 import type { AgentMessage } from "@earendil-works/pi-agent-core";
 import type { AssistantMessage, ImageContent, Message, SystemMessage, TextContent, ThinkingSelection, ToolResultMessage, Usage, UserMessage } from "@earendil-works/pi-ai";
 import { EventLoopSlicer } from "./event-loop-slicer.ts";
+import type { InputSource } from "./extensions/types.ts";
 import type { ModelChangeOrigin, ModelChangeSource } from "./model-change-origin.ts";
 import type { RepositoryIdentity } from "./repository-identity.ts";
 import { type SessionListProgress } from "./session-discovery.ts";
@@ -53,6 +54,12 @@ export interface SessionEntryBase {
 export interface SessionMessageEntry extends SessionEntryBase {
     type: "message";
     message: AgentMessage;
+    /**
+     * Where a user message came from: the `source` its `input` event reported. Stored on the entry, never on
+     * the message, so it stays in the session record and out of provider requests. Absent on every other
+     * entry and on user input that ran no `input` event (restored, moved or edited input): unknown origin.
+     */
+    inputSource?: InputSource;
 }
 export interface ThinkingLevelChangeEntry extends SessionEntryBase {
     type: "thinking_level_change";
@@ -480,7 +487,9 @@ export declare class SessionManager {
      * instead of a full JSON copy (see `_shareMessage` for when it falls back). `appendMessage` keeps the
      * full copy: a caller may still change its object after appending.
      */
-    appendOwnedMessage(message: Message | CustomMessage | BashExecutionMessage): string;
+    appendOwnedMessage(message: Message | CustomMessage | BashExecutionMessage, options?: {
+        readonly inputSource?: InputSource | undefined;
+    }): string;
     private _appendMessage;
     /** Runtime append position for this exact persisted message object, if known. */
     getMessageEntryPosition(message: AgentMessage): Readonly<{

package/dist/core/session-manager.js

@@ -1369,16 +1369,17 @@ export class SessionManager {
      * instead of a full JSON copy (see `_shareMessage` for when it falls back). `appendMessage` keeps the
      * full copy: a caller may still change its object after appending.
      */
-    appendOwnedMessage(message) {
-        return this._appendMessage(message, true);
+    appendOwnedMessage(message, options) {
+        return this._appendMessage(message, true, options?.inputSource);
     }
-    _appendMessage(message, owned) {
+    _appendMessage(message, owned, inputSource) {
         const entry = {
             type: "message",
             id: generateId(this.idsInUse),
             parentId: this.leafId,
             timestamp: new Date().toISOString(),
             message,
+            ...(inputSource === undefined ? {} : { inputSource }),
         };
         this._appendEntry(entry, owned ? message : undefined);
         const order = this.entryOrdersById.get(entry.id);

package/dist/core/terminal-settings.d.ts

@@ -21,6 +21,9 @@ export interface TerminalSettings {
     monitorMaxLinesPerInjection?: number;
     monitorMaxCharsPerInjection?: number;
     monitorWakeBudget?: number;
+    monitorWakesPerHour?: number;
+    monitorRunawayLinesPerMinute?: number;
+    monitorRunawayMinutes?: number;
     maxDurableMonitors?: number | "unlimited";
 }
 export interface BranchSummarySettings {

package/dist/index.d.ts

@@ -37,7 +37,7 @@ export { UnknownCommandError, type UnknownCommandReason } from "./core/unknown-c
 export { type ModelRoute, type ModelRouteReason, type ModelRouteRequest, VIRTUAL_MODEL_STATE_ENTRY, type VirtualModelDefinition, type VirtualModelStateData, } from "./core/virtual-models.ts";
 export { connectWebViewService, type WebViewServiceConnection } from "./core/webview/webview-broker.ts";
 export { type MainOptions, main } from "./main.ts";
-export { classifyEndpointLiveness, createHostDaemonPaths, DEFAULT_HOST_LAUNCH_SPEC, daemonDirectoryName, decideHostAction, ENDPOINT_REGISTRY_VERSION, type EndpointKind, type EndpointLiveness, type EnsuredHost, type EnsureHostOptions, endpointProbeTimeoutMs, ensureHost, GENERATION_HANDOFF_CAPABILITY, gcHostEndpoints, type HandoffHostOptions, type HandoffRefusal, type HandoffResult, HOST_EXIT_ERROR, HOST_EXIT_FALLBACK, HOST_EXIT_OK, HOST_EXIT_REFUSED, HOST_EXIT_USAGE, HOST_PROTOCOL_VERSION, type HostAction, type HostDaemonPaths, type HostDecision, type HostDecisionClient, type HostDecisionPolicy, type HostDecisionWarning, type HostEndpointEntry, type HostEndpointIdentitySource, type HostEndpointStatus, HostEnsureRefusedError, type HostGcOptions, type HostGcResult, type HostGenerationRow, type HostLaunchSpec, type HostLaunchSpecCore, HostLaunchSpecError, type HostLaunchSpecRefusal, type HostOutcome, type HostProtocolInfo, type HostRefusalReason, type HostRequest, type HostSessionCounts, type HostStatusOptions, type HostStatusReport, type HostTarget, type HostUpgradePolicy, handoffHost, InteractiveMode, type InteractiveModeOptions, isTransportGoneError, type JsonAgentSessionEvent, listHostEndpoints, loadHostLaunchSpec, type ModelInfo, PINNED_HOST_CLIENT_CAPABILITIES, type PrintModeOptions, type ProbeHostOptions, parseHostLaunchSpec, parseHostProtocolInfo, probeHost, REQUIRED_HOST_CAPABILITIES, type ResolvedHostLaunchSpec, RpcClient, type RpcClientEvent, RpcClientOpenInFlightError, type RpcClientOptions, type RpcCommand, type RpcEvalCell, type RpcEvalCellSnapshot, type RpcEventListener, type RpcExtensionEvent, type RpcExtensionUIRequest, type RpcExtensionUIResponse, type RpcResponse, type RpcSessionState, RpcTransportGoneError, readAllHostStatus, readHostStatus, runHostRequest, runPrintMode, runRpcMode, type ShardKind, type StopHostOptions, type StopHostResult, shardKey, shardSocketPath, shardSocketPathForKey, stopHost, TUI_PROBE_TIMEOUT_MS, } from "./modes/index.ts";
+export { classifyEndpointLiveness, createHostDaemonPaths, DEFAULT_HOST_LAUNCH_SPEC, daemonDirectoryName, decideHostAction, ENDPOINT_REGISTRY_VERSION, type EndpointKind, type EndpointLiveness, type EnsuredHost, type EnsureHostOptions, endpointProbeTimeoutMs, ensureHost, GENERATION_HANDOFF_CAPABILITY, gcHostEndpoints, type HandoffHostOptions, type HandoffRefusal, type HandoffResult, HOST_EXIT_ERROR, HOST_EXIT_FALLBACK, HOST_EXIT_OK, HOST_EXIT_REFUSED, HOST_EXIT_USAGE, HOST_PROTOCOL_VERSION, type HostAction, type HostDaemonPaths, type HostDecision, type HostDecisionClient, type HostDecisionPolicy, type HostDecisionWarning, type HostEndpointEntry, type HostEndpointIdentitySource, type HostEndpointStatus, HostEnsureRefusedError, type HostGcOptions, type HostGcResult, type HostGenerationRow, type HostHolder, type HostLaunchSpec, type HostLaunchSpecCore, HostLaunchSpecError, type HostLaunchSpecRefusal, type HostOutcome, type HostProtocolInfo, type HostRefusalReason, type HostRequest, type HostSessionCounts, type HostStatusOptions, type HostStatusReport, type HostTarget, type HostUpgradePolicy, handoffHost, InteractiveMode, type InteractiveModeOptions, isTransportGoneError, type JsonAgentSessionEvent, listHostEndpoints, loadHostLaunchSpec, type ModelInfo, PINNED_HOST_CLIENT_CAPABILITIES, type PrintModeOptions, type ProbeHostOptions, parseHostLaunchSpec, parseHostProtocolInfo, probeHost, REQUIRED_HOST_CAPABILITIES, type ResolvedHostLaunchSpec, RpcClient, type RpcClientEvent, RpcClientOpenInFlightError, type RpcClientOptions, type RpcCommand, type RpcEvalCell, type RpcEvalCellSnapshot, type RpcEventListener, type RpcExtensionEvent, type RpcExtensionUIRequest, type RpcExtensionUIResponse, type RpcResponse, type RpcSessionState, RpcTransportGoneError, readAllHostStatus, readHostStatus, runHostRequest, runPrintMode, runRpcMode, type ShardKind, type StopHostOptions, type StopHostResult, shardKey, shardSocketPath, shardSocketPathForKey, stopHost, TUI_PROBE_TIMEOUT_MS, } from "./modes/index.ts";
 export { ArminComponent, AssistantMessageComponent, BashExecutionComponent, BorderedLoader, BranchSummaryMessageComponent, CompactionSummaryMessageComponent, CustomEditor, type CustomEditorOptions, CustomMessageComponent, DynamicBorder, ExtensionEditorComponent, ExtensionInputComponent, ExtensionSelectorComponent, FooterComponent, keyHint, keyText, LoginDialogComponent, ModelSelectorComponent, OAuthSelectorComponent, type RenderDiffOptions, rawKeyHint, renderDiff, SessionSelectorComponent, type SettingsCallbacks, type SettingsConfig, SettingsSelectorComponent, ShowImagesSelectorComponent, SkillInvocationMessageComponent, ThemeSelectorComponent, ThinkingSelectorComponent, ToolExecutionComponent, type ToolExecutionOptions, TreeSelectorComponent, truncateToVisualLines, UserMessageComponent, UserMessageSelectorComponent, type VisualTruncateResult, } from "./modes/interactive/components/index.ts";
 export { getLanguageFromPath, getMarkdownTheme, getSelectListTheme, getSettingsListTheme, highlightCode, initTheme, Theme, type ThemeAppearance, type ThemeBg, type ThemeColor, type ThemeStyle, type ThemeToken, } from "./modes/interactive/theme/theme.ts";
 export { collectOrphanedChildren } from "./modes/rpc/child-reaper.ts";

package/dist/main.d.ts

@@ -8,12 +8,26 @@ import { type Args } from "./cli/args.ts";
 import { createStartupLoadingIndicator } from "./cli/startup-loading-indicator.ts";
 import { type ToolRuntimeKind } from "./cli/tool-runtime.ts";
 import { type AgentSessionRuntimeDiagnostic } from "./core/agent-session-services.ts";
+import { AuthStorage } from "./core/auth-storage.ts";
 import type { InlineExtension } from "./core/extensions/types.ts";
 import { ModelRuntime } from "./core/model-runtime.ts";
 import { type AppMode } from "./core/project-trust.ts";
 import { SessionManager } from "./core/session-manager.ts";
 import { SettingsManager } from "./core/settings-manager.ts";
 import type { PreparableRuntimeFactory } from "./modes/rpc/host-warm.ts";
+/**
+ * Auth problems for a run's diagnostics. Each credential notice appears once per process; with
+ * `persistSeen` (a run a person reads) it is also recorded as seen, so later runs stay quiet until
+ * the problem changes (senpi#3486).
+ */
+export declare function collectAuthDiagnostics(authStorage: AuthStorage, context: string, options: {
+    persistSeen: boolean;
+}): AgentSessionRuntimeDiagnostic[];
+/** The TUI shows auth problems at startup; credential notices are marked seen once shown (senpi#3486). */
+export declare function interactiveAuthNotices(authStorage: AuthStorage): {
+    messages: string[];
+    markSeen: () => void;
+};
 export declare function collectExtensionLoadDiagnostics(errors: readonly {
     path: string;
     error: string;

package/dist/main.js

@@ -74,11 +74,27 @@ import { isLocalPath, normalizePath, resolvePath } from "./utils/paths.js";
 import { readPipedStdin } from "./utils/piped-stdin.js";
 import { cleanupWindowsSelfUpdateQuarantine } from "./utils/windows-self-update.js";
 const EXTENSION_LOAD_FAILURE_HINT = `Hint: Start without extensions using "${APP_NAME} -ne".`;
-function collectAuthDiagnostics(authStorage, context) {
-    return authStorage.drainErrors().map((error) => ({
-        type: "warning",
-        message: `(${context}, auth storage) ${error.message}`,
-    }));
+/**
+ * Auth problems for a run's diagnostics. Each credential notice appears once per process; with
+ * `persistSeen` (a run a person reads) it is also recorded as seen, so later runs stay quiet until
+ * the problem changes (senpi#3486).
+ */
+export function collectAuthDiagnostics(authStorage, context, options) {
+    return [
+        ...authStorage.drainErrors().map((error) => error.message),
+        ...authStorage.takePendingNotices(options).map((notice) => notice.message),
+    ].map((message) => ({ type: "warning", message: `(${context}, auth storage) ${message}` }));
+}
+/** The TUI shows auth problems at startup; credential notices are marked seen once shown (senpi#3486). */
+export function interactiveAuthNotices(authStorage) {
+    const pending = authStorage.takePendingNotices({ persistSeen: false });
+    return {
+        messages: [
+            ...authStorage.drainErrors().map((error) => error.message),
+            ...pending.map((notice) => notice.message),
+        ],
+        markSeen: () => authStorage.markNoticesSeen(pending.map((notice) => notice.id)),
+    };
 }
 export function collectExtensionLoadDiagnostics(errors) {
     return errors.map(({ path, error }) => ({
@@ -1020,7 +1036,7 @@ export async function main(args, options) {
         reportDiagnostics([
             ...services.diagnostics,
             ...collectSettingsDiagnosticsWithContext(services.settingsManager, "model listing"),
-            ...collectAuthDiagnostics(services.authStorage, "model listing"),
+            ...collectAuthDiagnostics(services.authStorage, "model listing", { persistSeen: true }),
         ]);
         const searchPattern = typeof parsed.listModels === "string" ? parsed.listModels : undefined;
         await printThenExit(() => listModels(services.modelRuntime, searchPattern), 0);
@@ -1216,7 +1232,7 @@ export async function main(args, options) {
             type: "warning",
             message: diagnostic.path ? `${diagnostic.path}: ${diagnostic.message}` : diagnostic.message,
         })));
-        reportDiagnostics(collectAuthDiagnostics(services.authStorage, "runtime creation"));
+        reportDiagnostics(collectAuthDiagnostics(services.authStorage, "runtime creation", { persistSeen: appMode !== "rpc" }));
     }
     if (runtime.diagnostics.some((diagnostic) => diagnostic.type === "error")) {
         if (runtime.diagnostics.some((diagnostic) => diagnostic.message.includes("Failed to load extension"))) {
@@ -1266,6 +1282,7 @@ export async function main(args, options) {
         const { InteractiveMode } = await import("./modes/interactive/interactive-mode.js");
         const interactiveMode = new InteractiveMode(runtime, {
             migratedProviders,
+            authNotices: interactiveAuthNotices(services.authStorage),
             legacyPiEditNotice: legacyPiEditStartupNotice(),
             modelFallbackMessage,
             autoTrustOnReloadCwd,
@@ -1308,7 +1325,7 @@ export async function main(args, options) {
             initialMessage,
             initialImages,
         });
-        reportDiagnostics(collectAuthDiagnostics(services.authStorage, "print mode"));
+        reportDiagnostics(collectAuthDiagnostics(services.authStorage, "print mode", { persistSeen: true }));
         stopChildReaper();
         stopThemeWatcher();
         restoreStdout();