@code-yeongyu/senpi 2026.10.25-1 → 2026.10.25-2

package/dist/bundle/rpc-entry.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
 import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url); { const __piWorkerThreads = require("node:worker_threads"); if (typeof __piWorkerThreads.markAsUncloneable !== "function") { __piWorkerThreads.markAsUncloneable = () => {}; } }
-import"./chunks/chunk-PXKF2RHD.js";import{main}from"./chunks/chunk-URBJS24R.js";import"./chunks/chunk-SGDOZT6B.js";import"./chunks/chunk-VOBD6FQG.js";import{configureHttpDispatcher}from"./chunks/chunk-BTNYLNWZ.js";import"./chunks/chunk-DXJJP6RP.js";import"./chunks/chunk-GXY5JEI5.js";import"./chunks/chunk-YDCRA5ES.js";import"./chunks/chunk-GY5MR5KR.js";import"./chunks/chunk-EHQXLHRB.js";import"./chunks/chunk-XF3LJC3O.js";import"./chunks/chunk-CNPDUC4D.js";import"./chunks/chunk-CDRFFHLL.js";import"./chunks/chunk-7UUOGZKR.js";import"./chunks/chunk-Y5OTHMXO.js";import"./chunks/chunk-MLVIYDHK.js";import"./chunks/chunk-TIVW4P37.js";import"./chunks/chunk-H4QOEVS5.js";import"./chunks/chunk-3LNSLJ7N.js";import"./chunks/chunk-MSQCTH6V.js";import"./chunks/chunk-KLAX467B.js";import"./chunks/chunk-JFFS72FL.js";import"./chunks/chunk-ORXZXUMC.js";import"./chunks/chunk-GZVCRV7I.js";import"./chunks/chunk-SOMFLLPD.js";import"./chunks/chunk-MTQQ2VQH.js";import"./chunks/chunk-3VOG6WFU.js";import"./chunks/chunk-BMYNMUVZ.js";import"./chunks/chunk-QMRJYMNH.js";import"./chunks/chunk-FWXMMMCV.js";import"./chunks/chunk-4AOMNOGY.js";import"./chunks/chunk-KUPQO7MC.js";import"./chunks/chunk-U67ML6CQ.js";import"./chunks/chunk-26UBFF6N.js";import"./chunks/chunk-EWOEVVQT.js";import"./chunks/chunk-II22E3CV.js";import"./chunks/chunk-7IRLFYNM.js";import"./chunks/chunk-XUFUKDKJ.js";import"./chunks/chunk-RHHBXIRN.js";import"./chunks/chunk-U3VOXCGP.js";import"./chunks/chunk-RVYSJBZ7.js";import"./chunks/chunk-HB35RBP4.js";import"./chunks/chunk-Z6WGAK7W.js";import"./chunks/chunk-DLAY7CIU.js";import"./chunks/chunk-3BTN337S.js";import"./chunks/chunk-QXREUA5F.js";import"./chunks/chunk-RUGYFYH7.js";import"./chunks/chunk-OEFCY46F.js";import"./chunks/chunk-KRNXUTZJ.js";import"./chunks/chunk-TAV6QZFM.js";import"./chunks/chunk-PELNNWGO.js";import"./chunks/chunk-QH2HSCMX.js";import"./chunks/chunk-FDL4CF6F.js";import"./chunks/chunk-BWA4FVFW.js";import"./chunks/chunk-YU4AYH4C.js";import"./chunks/chunk-E6WYH3ZL.js";import"./chunks/chunk-COH5F7QV.js";import"./chunks/chunk-RFB5CBW7.js";import"./chunks/chunk-2VZJTDUX.js";import"./chunks/chunk-E4LBKOZG.js";import"./chunks/chunk-GVSBCJFI.js";import"./chunks/chunk-WASCMT6Y.js";import"./chunks/chunk-T36LJ6MW.js";import"./chunks/chunk-QGJLZ6BI.js";import"./chunks/chunk-WHPDEDCC.js";import"./chunks/chunk-AA2L2RHH.js";import"./chunks/chunk-HK46JMSC.js";import"./chunks/chunk-4P7WARQZ.js";import"./chunks/chunk-WDTJ6JKE.js";import"./chunks/chunk-5ROMKDLK.js";import"./chunks/chunk-3W47LTXQ.js";import"./chunks/chunk-6AOVUTUR.js";import"./chunks/chunk-45SZOLCU.js";import"./chunks/chunk-DMI55M2N.js";import"./chunks/chunk-PJ34QVL5.js";import"./chunks/chunk-BMX2U22F.js";import"./chunks/chunk-YU2P3CAR.js";import"./chunks/chunk-7WAJCESX.js";import"./chunks/chunk-ZOFZRJSL.js";import"./chunks/chunk-2SOVDETB.js";import"./chunks/chunk-V3CK2AVC.js";import"./chunks/chunk-VRDU425E.js";import"./chunks/chunk-ZGAB7WQA.js";import{APP_NAME,scrubBrandFromEnvironment}from"./chunks/chunk-7YO7VQZW.js";import"./chunks/chunk-ATQFN5HI.js";import"./chunks/chunk-MIENF2YK.js";import"./chunks/chunk-OXNWERO4.js";import"./chunks/chunk-QN2BHP3M.js";import"./chunks/chunk-NTK2MHJ5.js";import"./chunks/chunk-7ASLQ243.js";import"./chunks/chunk-IKOFCODM.js";process.title=`${APP_NAME}-rpc`;scrubBrandFromEnvironment();process.env.PI_CODING_AGENT="true";process.env.AI_AGENT=APP_NAME;process.emitWarning=(()=>{});configureHttpDispatcher();main(["--mode","rpc",...process.argv.slice(2)]);
+import"./chunks/chunk-UFJ2K7Q7.js";import{main}from"./chunks/chunk-J2U5VDG7.js";import"./chunks/chunk-MXZPAUFB.js";import"./chunks/chunk-FHXR4ZAC.js";import{configureHttpDispatcher}from"./chunks/chunk-2EFVQWXZ.js";import"./chunks/chunk-DXJJP6RP.js";import"./chunks/chunk-GXY5JEI5.js";import"./chunks/chunk-JRXKLIEQ.js";import"./chunks/chunk-GY5MR5KR.js";import"./chunks/chunk-EHQXLHRB.js";import"./chunks/chunk-XF3LJC3O.js";import"./chunks/chunk-CNPDUC4D.js";import"./chunks/chunk-CDRFFHLL.js";import"./chunks/chunk-RXKNOEQQ.js";import"./chunks/chunk-Y5OTHMXO.js";import"./chunks/chunk-MLVIYDHK.js";import"./chunks/chunk-TIVW4P37.js";import"./chunks/chunk-H4QOEVS5.js";import"./chunks/chunk-3LNSLJ7N.js";import"./chunks/chunk-MSQCTH6V.js";import"./chunks/chunk-KLAX467B.js";import"./chunks/chunk-JFFS72FL.js";import"./chunks/chunk-ORXZXUMC.js";import"./chunks/chunk-GZVCRV7I.js";import"./chunks/chunk-SOMFLLPD.js";import"./chunks/chunk-MTQQ2VQH.js";import"./chunks/chunk-KJZAY5YH.js";import"./chunks/chunk-W2BKZBYJ.js";import"./chunks/chunk-QMRJYMNH.js";import"./chunks/chunk-LYGAV6KU.js";import"./chunks/chunk-4AOMNOGY.js";import"./chunks/chunk-KUPQO7MC.js";import"./chunks/chunk-U67ML6CQ.js";import"./chunks/chunk-26UBFF6N.js";import"./chunks/chunk-YN7ELQ43.js";import"./chunks/chunk-OI4NMCKP.js";import"./chunks/chunk-G2UETS2R.js";import"./chunks/chunk-VNN2V74Y.js";import"./chunks/chunk-4WZRVZNX.js";import"./chunks/chunk-U3VOXCGP.js";import"./chunks/chunk-WFXUCVIR.js";import"./chunks/chunk-HB35RBP4.js";import"./chunks/chunk-Z6WGAK7W.js";import"./chunks/chunk-DLAY7CIU.js";import"./chunks/chunk-3BTN337S.js";import"./chunks/chunk-QXREUA5F.js";import"./chunks/chunk-RUGYFYH7.js";import"./chunks/chunk-OEFCY46F.js";import"./chunks/chunk-KRNXUTZJ.js";import"./chunks/chunk-TAV6QZFM.js";import"./chunks/chunk-PELNNWGO.js";import"./chunks/chunk-TTU2RNVX.js";import"./chunks/chunk-FDL4CF6F.js";import"./chunks/chunk-BWA4FVFW.js";import"./chunks/chunk-YU4AYH4C.js";import"./chunks/chunk-E6WYH3ZL.js";import"./chunks/chunk-COH5F7QV.js";import"./chunks/chunk-RFB5CBW7.js";import"./chunks/chunk-2VZJTDUX.js";import"./chunks/chunk-E4LBKOZG.js";import"./chunks/chunk-GVSBCJFI.js";import"./chunks/chunk-WASCMT6Y.js";import"./chunks/chunk-T36LJ6MW.js";import"./chunks/chunk-QGJLZ6BI.js";import"./chunks/chunk-WHPDEDCC.js";import"./chunks/chunk-AA2L2RHH.js";import"./chunks/chunk-HK46JMSC.js";import"./chunks/chunk-4P7WARQZ.js";import"./chunks/chunk-WDTJ6JKE.js";import"./chunks/chunk-5ROMKDLK.js";import"./chunks/chunk-3W47LTXQ.js";import"./chunks/chunk-6AOVUTUR.js";import"./chunks/chunk-45SZOLCU.js";import"./chunks/chunk-DMI55M2N.js";import"./chunks/chunk-PJ34QVL5.js";import"./chunks/chunk-BMX2U22F.js";import"./chunks/chunk-YU2P3CAR.js";import"./chunks/chunk-XBUSVKWC.js";import"./chunks/chunk-ZOFZRJSL.js";import"./chunks/chunk-2SOVDETB.js";import"./chunks/chunk-V3CK2AVC.js";import"./chunks/chunk-VRDU425E.js";import"./chunks/chunk-ZGAB7WQA.js";import{APP_NAME,scrubBrandFromEnvironment}from"./chunks/chunk-7YO7VQZW.js";import"./chunks/chunk-ATQFN5HI.js";import"./chunks/chunk-MIENF2YK.js";import"./chunks/chunk-OXNWERO4.js";import"./chunks/chunk-QN2BHP3M.js";import"./chunks/chunk-NTK2MHJ5.js";import"./chunks/chunk-O5RYI3IW.js";import"./chunks/chunk-IKOFCODM.js";process.title=`${APP_NAME}-rpc`;scrubBrandFromEnvironment();process.env.PI_CODING_AGENT="true";process.env.AI_AGENT=APP_NAME;process.emitWarning=(()=>{});configureHttpDispatcher();main(["--mode","rpc",...process.argv.slice(2)]);

package/dist/bundle/runtime-manifest.json

@@ -1 +1 @@
-{"buildId":"3d444238d96c5025","externals":["@earendil-works/chord","@earendil-works/pi-pty","@silvia-odwyer/photon-node","bufferutil","canvas","kerberos","supports-color","utf-8-validate"]}
+{"buildId":"256057df5dd08be8","externals":["@earendil-works/chord","@earendil-works/pi-pty","@silvia-odwyer/photon-node","bufferutil","canvas","kerberos","supports-color","utf-8-validate"]}

package/dist/core/agent-session.d.ts

@@ -1708,6 +1708,7 @@ export declare class AgentSession {
     noteAutomaticInput(text: string): boolean;
     private _stopAddedSince;
     private _stopHoldLive;
+    private _resumeCause;
     get pauseView(): {
         pauseSeq: number;
         records: {

package/dist/core/agent-session.js

@@ -56,7 +56,7 @@ import { assertExpectedUserLeaf, buildEditedUserMessage, UserEditError, userText
 import { ENGINE_PAUSED_ENTRY_TYPE, enginePauseSinceLastTurn, settledRepetitiveTurnPause } from "./engine-paused.js";
 import { EngineTurnHold, engineTurnHoldHistory, engineWakeSource } from "./engine-turn-hold.js";
 import { EngineTurnInput } from "./engine-turn-input.js";
-import { ENGINE_TURN_LIMIT_ENTRY_TYPE, ENGINE_TURN_LIMIT_EVENT, ENGINE_TURN_START_ENTRY_TYPE, engineTurnHistory, engineTurnLimitNotice, engineTurnStop, isUserDirectedTurn, } from "./engine-turn-limit.js";
+import { ENGINE_TURN_LIMIT_ENTRY_TYPE, ENGINE_TURN_LIMIT_EVENT, ENGINE_TURN_START_ENTRY_TYPE, engineTurnHistory, engineTurnLimitNotice, engineTurnStop, isUserDirectedTurn, resetsEngineTurnHistory, } from "./engine-turn-limit.js";
 import { EngineTurnRelease } from "./engine-turn-release.js";
 import { environmentContextMessageIfChanged, resolveEnvironmentContext, } from "./environment-context.js";
 import { areExperimentalFeaturesEnabled } from "./experimental.js";
@@ -5771,7 +5771,11 @@ export class AgentSession {
             });
         const deliveredNotices = this._engineTurnHold.noticeCount;
         const deliveredHeldInputs = this._heldInputs.pending().length;
-        if (this._stopHoldLive() || this._engineTurnHold.fences.length > 0 || deliveredHeldInputs > 0) {
+        // Payload-free notices (including goals) revalidate through their producer after release.
+        // An interruption must not add a directive-only turn when that work has already completed.
+        const resumeHeldTurn = this._stopHoldLive() &&
+            (this._resumeCause() === "stop" || deliveredNotices === 0 || this._engineTurnHold.messages().length > 0);
+        if (resumeHeldTurn || this._engineTurnHold.fences.length > 0 || deliveredHeldInputs > 0) {
             const { turnStarted, settled } = await this._resumeAfterStop(onQueued);
             return {
                 answer: { resumed: true, pauseSeq, turnStarted, deliveredNotices, deliveredHeldInputs },
@@ -5810,8 +5814,9 @@ export class AgentSession {
      * resume settlement delivered the turn.
      */
     async _resumeAfterStop(onQueued) {
+        const resumeCause = this._resumeCause();
         const sources = this._engineTurnHold.releaseAll("resume_session");
-        const { turnId, delivered } = await this._startResumeTurn(onQueued);
+        const { turnId, delivered } = await this._startResumeTurn(onQueued, resumeCause);
         const settled = (async () => {
             if (!(await delivered)) {
                 this._engineTurnHold.rejectInput();
@@ -5833,7 +5838,7 @@ export class AgentSession {
         return this._resumeSettlement;
     }
     /** The resume turn both resume paths start; held input and notices are consumed only if no newer Stop aborted it. */
-    async _startResumeTurn(onQueued) {
+    async _startResumeTurn(onQueued, resumeCause = "stop") {
         const settlement = Promise.withResolvers();
         this._resumeSettlement = settlement.promise;
         try {
@@ -5864,7 +5869,7 @@ export class AgentSession {
                 }));
                 // The hold is already released: include new or re-held input before sending, and omit withdrawals.
             }
-            const started = await this._startResumeTurnWith(generation, continues, heldInputs, onQueued);
+            const started = await this._startResumeTurnWith(generation, continues, heldInputs, onQueued, resumeCause);
             started.delivered.then(() => settlement.resolve(), () => settlement.resolve());
             return started;
         }
@@ -5873,8 +5878,9 @@ export class AgentSession {
             throw error;
         }
     }
-    _startResumeTurnWith(generation, continues, heldInputs, onQueued) {
+    _startResumeTurnWith(generation, continues, heldInputs, onQueued, resumeCause = "stop") {
         return startRunResumeTurn({
+            resumeCause,
             heldInputs: () => heldInputs,
             continueInputs: () => [...continues],
             heldWakes: () => this._engineTurnHold.messages(),
@@ -5906,7 +5912,7 @@ export class AgentSession {
             return;
         this._releaseExtrasGeneration = this._userAbortGeneration;
         if (this._stopHoldLive())
-            this._releaseExtras.push({ role: "custom", ...stopResumeDirective(), timestamp: Date.now() });
+            this._releaseExtras.push({ role: "custom", ...stopResumeDirective(this._resumeCause()), timestamp: Date.now() });
         const { messages, commands } = this._takeHeldInputs();
         this._releaseExtras.push(...messages);
         // A later capture that finds no commands keeps the run an earlier one (a question answer's) still owes.
@@ -6019,7 +6025,7 @@ export class AgentSession {
         });
     }
     noteAutomaticInput(text) {
-        const userHold = this._engineTurnHold.holds.some((hold) => hold.kind === "session_hold" || hold.kind === "inherited_hold");
+        const userHold = this._engineTurnHold.holds.some((hold) => (hold.kind === "session_hold" && hold.key !== "interrupted-run") || hold.kind === "inherited_hold");
         if (!userHold)
             return false;
         const message = {
@@ -6039,6 +6045,13 @@ export class AgentSession {
     _stopHoldLive() {
         return this._engineTurnHold.holds.some((hold) => hold.kind === "session_hold");
     }
+    _resumeCause() {
+        const holds = this._engineTurnHold.holds;
+        return holds.some((hold) => hold.kind === "session_hold" && hold.key === "interrupted-run") &&
+            !holds.some((hold) => hold.kind === "session_hold" && hold.key !== "interrupted-run")
+            ? "interrupted"
+            : "stop";
+    }
     get pauseView() {
         return {
             pauseSeq: this._engineTurnHold.currentPauseSeq,
@@ -6150,7 +6163,8 @@ export class AgentSession {
     }
     /** Keeps this process's engine-turn record: a user message clears it, a tool call marks the running engine turn. */
     _observeEngineTurnMessage(message) {
-        if (message.role === "user" || (message.role === "custom" && isUserDirectedTurn(message.customType))) {
+        if (message.role === "user" ||
+            (message.role === "custom" && resetsEngineTurnHistory(message.customType, message.details))) {
             this._engineTurnStarts = [];
             this._engineResumeWindow = false;
             this._engineTurnPauseRecorded = false;
@@ -6615,6 +6629,7 @@ export class AgentSession {
     /** A user Stop: hold automatic turns until human input or resume_session, then stop the running turn (senpi#3811). */
     async stop() {
         this._runHolds.stamp();
+        this.refreshLifecycle();
         this._stopInterrupt = { pauseSeq: this._engineTurnHold.currentPauseSeq, at: new Date().toISOString() };
         try {
             await this.abort();
@@ -9211,6 +9226,10 @@ export class AgentSession {
                 this._extensionErrorListener = bindings.onError;
             }
             this._applyExtensionBindings(this._extensionRunner);
+            // Opening a session is not explicit Resume. Install the same hold used by Stop before
+            // session_start producers run, so automatic work waits quietly in notice custody.
+            if (this._lifecycleBinding.controller.requiresHumanContinuation)
+                this._engineTurnHold.addHold("session_hold", { key: "interrupted-run" });
             this._engineTurnHold.start();
             this.syncPromptCacheSafeWaitEnv();
             await this._extensionRunner.emit({

package/dist/core/engine-turn-limit.d.ts

@@ -27,6 +27,8 @@ export interface EngineTurnStop {
 export declare function engineTurnLimitNotice(stop: EngineTurnStop): string;
 /** A `.` manual continue or a continue-from-leaf is the user's own request, not an automatic turn. */
 export declare function isUserDirectedTurn(customType: string): boolean;
+/** Recovering an interrupted run is not a new message that resets the unattended turn budget. */
+export declare function resetsEngineTurnHistory(customType: string, details?: unknown): boolean;
 /** The session's engine turns since the user's last message, in order: when each started and whether its reply called a tool. */
 export interface EngineTurnHistory {
     readonly starts: EngineTurnStartRecord[];

package/dist/core/engine-turn-limit.js

@@ -23,9 +23,15 @@ export function isUserDirectedTurn(customType) {
         customType === CONTINUE_FROM_LEAF_CUSTOM_TYPE ||
         customType === STOP_RESUME_CUSTOM_TYPE);
 }
+/** Recovering an interrupted run is not a new message that resets the unattended turn budget. */
+export function resetsEngineTurnHistory(customType, details) {
+    return (isUserDirectedTurn(customType) &&
+        !(customType === STOP_RESUME_CUSTOM_TYPE &&
+            details?.resumeCause === "interrupted"));
+}
 function isUserMessage(entry) {
     if (entry.type === "custom_message")
-        return isUserDirectedTurn(entry.customType);
+        return resetsEngineTurnHistory(entry.customType, entry.details);
     return entry.type === "message" && entry.message.role === "user";
 }
 function isEngineTurnStart(entry) {

package/dist/core/extensions/builtin/anthropic-subscription/auth-attempt.js

@@ -24,6 +24,11 @@ async function* closingQueryMessages(query) {
     }
 }
 export async function createAttemptMessages(input, auth) {
+    // Claude Code loads auto memory independently of settingSources. Keep its private
+    // notes out of every subscription session, after all auth and caller overrides.
+    auth.options.env = { ...auth.options.env, CLAUDE_CODE_DISABLE_AUTO_MEMORY: "1" };
+    if (typeof auth.options.settings !== "string")
+        auth.options.settings = { ...auth.options.settings, autoMemoryEnabled: false };
     if (input.createAttempt)
         return recordingLimitWindows(retainedAttemptMessages(await input.createAttempt(auth)), auth);
     const query = input.query({ prompt: input.prompt, options: auth.options });

package/dist/core/extensions/builtin/goal/stop-pause.js

@@ -1,7 +1,8 @@
 export const GOAL_STOP_PAUSED_ENTRY = "goal-stop-paused";
 export const GOAL_STOP_RESUMED_ENTRY = "goal-stop-resumed";
 export function stopHoldLive(ctx) {
-    return ctx.getPauseState?.().holds.some((hold) => hold.kind === "session_hold") === true;
+    return (ctx.getPauseState?.().holds.some((hold) => hold.kind === "session_hold" && hold.key !== "interrupted-run") ===
+        true);
 }
 export function markStopPaused(pi, goalId) {
     pi.appendEntry(GOAL_STOP_PAUSED_ENTRY, { goalId });

package/dist/core/extensions/builtin/loop/session-hold.js

@@ -2,6 +2,7 @@ export function sessionHeld(ctx) {
     return ctx.getPauseState?.().holds.some((hold) => hold.kind !== "run_fence") === true;
 }
 export function userStopped(ctx) {
-    return ctx.getPauseState?.().holds.some((hold) => hold.kind === "session_hold") === true;
+    return (ctx.getPauseState?.().holds.some((hold) => hold.kind === "session_hold" && hold.key !== "interrupted-run") ===
+        true);
 }
 //# sourceMappingURL=session-hold.js.map

package/dist/core/lifecycle-runtime-facts.js

@@ -35,6 +35,9 @@ export function readLifecycleRuntimeFacts(session) {
         });
     }
     const holds = session.holds.flatMap((hold) => {
+        // The interruption gate is a human wait, not a user Stop. Preserve unattended and real Stop precedence.
+        if (hold.kind === "session_hold" && hold.key === "interrupted-run")
+            return [];
         switch (hold.kind) {
             case "unattended":
             case "session_hold":

package/dist/core/lifecycle-session-binding.js

@@ -44,8 +44,12 @@ export class LifecycleSessionBinding {
         });
         // A crashed receiver may have durable custody but no transcript entry yet. Recovery owns that
         // delivery already; register it before session_start can let the gateway enqueue a second carrier.
-        const deliveryEntries = session.sessionManager.reduceHistory(lifecycleDeliveryEntries);
+        const deliveries = session.sessionManager.reduceHistory(lifecycleDeliveryEntries);
         for (const record of this.controller.obligations.active) {
+            // Discover consumed work before session_start can queue another automatic turn. The later
+            // recovery pass still writes interruption/tool records, but must not be the first to close admission.
+            if (record.ticketId && (record.state === "consumed" || deliveries.has(record.ticketId)))
+                this.controller.ledger.interrupted = true;
             if (record.state !== "queued" || !record.payload || !record.ticketId)
                 continue;
             const ticketId = record.ticketId;
@@ -53,7 +57,7 @@ export class LifecycleSessionBinding {
             const deliveryId = deliveryIdOf(message);
             if (deliveryId === undefined)
                 continue;
-            if (deliveryEntries.has(ticketId))
+            if (deliveries.has(ticketId))
                 session.externalAdmission.observePersisted(message);
             else
                 session.externalAdmission.restoreQueued(deliveryId, () => 

package/dist/core/run-resume-turn.d.ts

@@ -2,6 +2,7 @@ import type { ImageContent } from "@earendil-works/pi-ai";
 import type { CustomMessage } from "./messages.ts";
 type Message = Pick<CustomMessage, "customType" | "content" | "display" | "details">;
 export interface RunResumePorts {
+    readonly resumeCause?: "stop" | "interrupted";
     readonly heldInputs: () => readonly {
         readonly inputId: string;
         readonly text: string;

package/dist/core/run-resume-turn.js

@@ -1,4 +1,4 @@
-import { STOP_RESUME_CUSTOM_TYPE, stopResumeDirective } from "./stop-resume-directive.js";
+import { stopResumeDirective } from "./stop-resume-directive.js";
 function partsOf(content) {
     return typeof content === "string" ? [{ type: "text", text: content }] : [...content];
 }
@@ -13,17 +13,18 @@ export async function startRunResumeTurn(ports) {
     const inputs = ports.heldInputs();
     const continues = ports.continueInputs();
     const wakes = ports.heldWakes();
+    const directive = stopResumeDirective(ports.resumeCause);
     const content = [
         ...inputs.flatMap((input) => [
             { type: "text", text: `The user wrote while the run was paused:\n${input.text}` },
             ...(input.images ?? []),
         ]),
         ...wakes.flatMap((wake) => partsOf(wake.message.content)),
-        ...partsOf(stopResumeDirective().content),
+        ...partsOf(directive.content),
     ];
     const sendSettled = Promise.withResolvers();
     const started = ports.turnStarted(sendSettled.promise);
-    const sending = ports.send({ customType: STOP_RESUME_CUSTOM_TYPE, content, display: inputs.length > 0 });
+    const sending = ports.send({ ...directive, content, display: inputs.length > 0 });
     sending.then(sendSettled.resolve, sendSettled.resolve);
     const turnId = await started;
     const delivered = (async () => {

package/dist/core/stop-resume-directive.d.ts

@@ -1,4 +1,4 @@
 import type { CustomMessage } from "./messages.ts";
 export declare const STOP_RESUME_CUSTOM_TYPE = "session-resumed";
-export declare function stopResumeDirective(): Pick<CustomMessage, "customType" | "content" | "display">;
+export declare function stopResumeDirective(cause?: "stop" | "interrupted"): Pick<CustomMessage, "customType" | "content" | "display" | "details">;
 //# sourceMappingURL=stop-resume-directive.d.ts.map

package/dist/core/stop-resume-directive.js

@@ -2,7 +2,16 @@ export const STOP_RESUME_CUSTOM_TYPE = "session-resumed";
 const DIRECTIVE = "<system-reminder>The user stopped the previous turn and has now resumed. Tool calls that the Stop interrupted show " +
     "an aborted result; they were not re-run and their side effects may be partial. Check their effects before repeating " +
     "any of them, then continue the work.</system-reminder>";
-export function stopResumeDirective() {
+export function stopResumeDirective(cause = "stop") {
+    if (cause === "interrupted")
+        return {
+            customType: STOP_RESUME_CUSTOM_TYPE,
+            content: "<system-reminder>The previous run was interrupted and has now resumed. Interrupted tool calls may have " +
+                "partial side effects and were not re-run. Check their effects before repeating any of them, then continue " +
+                "the work.</system-reminder>",
+            display: false,
+            details: { resumeCause: cause },
+        };
     return { customType: STOP_RESUME_CUSTOM_TYPE, content: DIRECTIVE, display: false };
 }
 //# sourceMappingURL=stop-resume-directive.js.map

package/dist/modes/interactive/interactive-mode.js

@@ -2117,6 +2117,7 @@ export class InteractiveMode {
                 this.showExtensionError(error);
             },
         });
+        this.setExtensionStatus(PAUSE_STATUS_KEY, pauseFooterText(this.session));
         setRegisteredThemes(this.session.resourceLoader.getThemes().themes);
         this.setupAutocompleteProvider();
         const extensionRunner = this.session.extensionRunner;

package/dist/modes/interactive/pause-footer.d.ts

@@ -3,6 +3,11 @@ interface PauseView {
     readonly paused: boolean;
     readonly pausedNoticeCount: number;
     readonly runPaused: boolean;
+    readonly pauseView?: {
+        readonly records: readonly {
+            readonly key: string;
+        }[];
+    };
 }
 export declare function pauseFooterText(view: PauseView): string | undefined;
 export declare function resumeCommandTarget(view: PauseView): "resume_session" | "session_picker";

package/dist/modes/interactive/pause-footer.js

@@ -3,6 +3,8 @@ export function pauseFooterText(view) {
     if (!view.paused && !view.runPaused)
         return undefined;
     const held = view.pausedNoticeCount === 1 ? "1 update held" : `${view.pausedNoticeCount} updates held`;
+    if (view.pauseView?.records.some((record) => record.key === "interrupted-run"))
+        return `Interrupted · ${view.pausedNoticeCount > 0 ? `${held} · ` : ""}type to continue, /resume to resume`;
     if (view.runPaused)
         return `Run paused · ${held} · type to continue, /resume to resume the run`;
     return `Paused · ${held} · type to continue, /resume to resume`;

package/dist/modes/rpc/host-reservations.js

@@ -22,7 +22,7 @@
 import { createHash } from "node:crypto";
 import { mkdir, readdir, readFile, rename, rm, writeFile } from "node:fs/promises";
 import { join } from "node:path";
-import { processIsLive, processStartTimeMs, readProcessStartTime, sameProcessStartMs, } from "../../utils/process-identity.js";
+import { processIsLive, processIsRunning, processStartTimeMs, readProcessStartTime, sameProcessStartMs, } from "../../utils/process-identity.js";
 import { createHostDaemonPaths, generationPaths, HOST_DAEMON_DIR_ENV, hostDaemonDirectoryPaths, } from "./host-daemon-paths.js";
 import { parseJson, readFileOrUndefined } from "./host-daemon-state.js";
 import { generationHeartbeatStopped } from "./host-stalled-evidence.js";
@@ -280,7 +280,8 @@ export async function claimOwnerIsLive(owner) {
  * different start time. `unproven`: the pid runs but no start time was recorded or none can be read.
  */
 export async function claimOwnerIdentity(owner) {
-    if (!processIsLive(owner.pid))
+    // An exited, unreaped owner (state Z) makes no more writes: the claim is gone (senpi#4119).
+    if (!processIsRunning(owner.pid))
         return "gone";
     const recorded = owner.processStartTime === null ? undefined : processStartTimeMs(owner.processStartTime);
     if (recorded === undefined) {

package/dist/modes/rpc/host-stalled-evidence.js

@@ -132,7 +132,8 @@ export async function hostChildAlive(generation) {
     if (!processIsLive(pid))
         return false;
     const observed = await readProcessIdentity(pid, process.platform, 1_000, processIsLive, "UTC");
-    if (!processIsLive(pid))
+    // `absent` includes an exited, unreaped child (state Z), read in the same async snapshot (senpi#4119).
+    if (observed.kind === "absent" || !processIsLive(pid))
         return false;
     const recordedMs = typeof record?.processStartTime === "string" ? processStartTimeMs(record.processStartTime) : undefined;
     const observedMs = observed.kind === "present" ? processStartTimeMs(observed.identity) : undefined;

package/dist/modes/rpc/tool-child/group-ownership.js

@@ -7,7 +7,7 @@
  * own group. A `detached` entry is never swept; the command explicitly opted out of the child's lifetime.
  */
 import { execFile } from "node:child_process";
-import { processIsLive, processStartTimeMs, readProcessStartTime, sameProcessStartMs, } from "../../../utils/process-identity.js";
+import { processIsRunning, processStartTimeMs, readProcessStartTime, sameProcessStartMs, } from "../../../utils/process-identity.js";
 export async function classifyGroup(group, ownGroup, probes) {
     if (group.lifetime === "detached")
         return "detached";
@@ -70,7 +70,9 @@ function groupHasMembers(pgid) {
 }
 export const defaultGroupProbes = {
     groupHasMembers,
-    isAlive: processIsLive,
+    // An exited, unreaped leader (state Z) has no start identity left to compare, so it must read as exited:
+    // its orphaned members keep the group, and the group is swept (senpi#3020, senpi#4119).
+    isAlive: processIsRunning,
     startOf: (pid) => readProcessStartTime(pid),
     ownGroup: () => processGroupOf(process.pid),
     signalGroup: (pgid, signal) => {

package/dist/utils/process-identity.d.ts

@@ -48,6 +48,13 @@ timeZone?: "UTC"): Promise<ProcessIdentityResult>;
 export declare function stopValidatedPid(pidFile: DaemonPidFile, signal: NodeJS.Signals): Promise<void>;
 export declare function waitForGone(pidFile: DaemonPidFile, timeoutMs: number): Promise<boolean>;
 export declare function readProcessStartTime(pid: number, platform?: NodeJS.Platform, timeoutMs?: number): Promise<string | undefined>;
+/**
+ * `processIsLive` minus processes that have exited but are not reaped yet (state Z): a SIGKILLed host
+ * stays a zombie until its parent's loop, or init, waits on it, and `kill(pid, 0)` still succeeds for it
+ * (senpi#4119). One `ps` snapshot decides; a probe that fails any other way reads as running, so a
+ * starved probe on a live process is never taken for a dead one (#1609).
+ */
+export declare function processIsRunning(pid: number): boolean;
 export declare function processIsLive(pid: number): boolean;
 /**
  * Wait for a spawned pid's process identity.

package/dist/utils/process-identity.js

@@ -1,4 +1,4 @@
-import { execFile } from "node:child_process";
+import { execFile, execFileSync } from "node:child_process";
 const WINDOWS_FILETIME_EPOCH = 116444736000000000n;
 export const PROCESS_START_TOLERANCE_MS = 3_000;
 /** FILETIME and C/localized lstart/ISO identities share one millisecond representation. */
@@ -80,7 +80,7 @@ export class ProcessIdentityUnreadableError extends Error {
  * probe is retried within a bounded budget and only then surfaces as
  * ProcessIdentityUnreadableError. It never leaks the raw probe error as a verdict.
  */
-export async function processMatchesPidFile(pidFile, readStartTime = readProcessStartTime, isLive = processIsLive, retry = {}) {
+export async function processMatchesPidFile(pidFile, readStartTime = readProcessStartTime, isLive = processIsRunning, retry = {}) {
     // A record without an identity guard answers only the liveness half of the question: a pid
     // that is gone is gone, and a live one stays unknown so it is never claimed or signalled.
     if (pidFile.processStartTime === null) {
@@ -129,7 +129,9 @@ timeZone) {
                 `$process = Get-CimInstance Win32_Process -Filter "ProcessId=${String(pid)}" -ErrorAction Stop; if ($null -eq $process) { Write-Output '__SENPI_ABSENT__'; exit 0 }; $process.CreationDate.ToFileTimeUtc().ToString("D", [Globalization.CultureInfo]::InvariantCulture)`,
             ],
         }
-        : { executable: "ps", args: ["-o", "lstart=", "-p", String(pid)] };
+        : // State and start time from ONE snapshot: an exited, unreaped process (state Z) keeps its start
+            // time but runs nothing, so it has no identity to match (senpi#4119).
+            { executable: "ps", args: ["-o", "stat=,lstart=", "-p", String(pid)] };
     return new Promise((resolve) => {
         const effectiveTimeoutMs = timeoutMs ?? (platform === "win32" ? 1_000 : undefined);
         execFile(command.executable, command.args, {
@@ -151,9 +153,13 @@ timeZone) {
                 resolve({ kind: "error", error });
                 return;
             }
-            const output = stdout.trim();
-            if (output === "__SENPI_ABSENT__")
+            const snapshot = stdout.trim();
+            if (snapshot === "__SENPI_ABSENT__")
                 return resolve({ kind: "absent" });
+            const state = platform === "win32" ? "" : (snapshot.split(/\s+/, 1)[0] ?? "");
+            if (state.startsWith("Z"))
+                return resolve({ kind: "absent" });
+            const output = platform === "win32" ? snapshot : snapshot.slice(state.length).trim();
             if (!output || (platform === "win32" && !/^\d+$/.test(output)))
                 return resolve({ kind: "error", error: new Error("invalid process identity output") });
             resolve({ kind: "present", identity: timeZone && platform !== "win32" ? `${output} UTC` : output });
@@ -191,6 +197,27 @@ export async function readProcessStartTime(pid, platform = process.platform, tim
         return result.kind === "present" ? result.identity : undefined;
     });
 }
+/**
+ * `processIsLive` minus processes that have exited but are not reaped yet (state Z): a SIGKILLed host
+ * stays a zombie until its parent's loop, or init, waits on it, and `kill(pid, 0)` still succeeds for it
+ * (senpi#4119). One `ps` snapshot decides; a probe that fails any other way reads as running, so a
+ * starved probe on a live process is never taken for a dead one (#1609).
+ */
+export function processIsRunning(pid) {
+    if (!processIsLive(pid))
+        return false;
+    if (process.platform === "win32")
+        return true;
+    try {
+        const state = execFileSync("ps", ["-o", "stat=", "-p", String(pid)], { encoding: "utf8", timeout: 2_000 });
+        return !state.trim().startsWith("Z");
+    }
+    catch (error) {
+        if (error instanceof Error && "status" in error && error.status === 1)
+            return false;
+        return true;
+    }
+}
 export function processIsLive(pid) {
     try {
         process.kill(pid, 0);

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@code-yeongyu/senpi",
-	"version": "2026.10.25-1",
+	"version": "2026.10.25-2",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"type": "module",
 	"piConfig": {
@@ -71,9 +71,9 @@
 	},
 	"dependencies": {
 		"@earendil-works/chord": "0.99.1",
-		"@earendil-works/pi-agent-core": "npm:@code-yeongyu/senpi-agent-core@2026.10.25-1",
-		"@earendil-works/pi-ai": "npm:@code-yeongyu/senpi-ai@2026.10.25-1",
-		"@earendil-works/pi-tui": "npm:@code-yeongyu/senpi-tui@2026.10.25-1",
+		"@earendil-works/pi-agent-core": "npm:@code-yeongyu/senpi-agent-core@2026.10.25-2",
+		"@earendil-works/pi-ai": "npm:@code-yeongyu/senpi-ai@2026.10.25-2",
+		"@earendil-works/pi-tui": "npm:@code-yeongyu/senpi-tui@2026.10.25-2",
 		"@silvia-odwyer/photon-node": "0.3.4",
 		"chalk": "6.0.0",
 		"cross-spawn": "7.0.6",
@@ -92,8 +92,8 @@
 		"yaml": "2.9.1",
 		"@anthropic-ai/claude-agent-sdk": "0.3.306",
 		"@anthropic-ai/sdk": "0.127.0",
-		"@code-yeongyu/senpi-codemode": "2026.10.25-1",
-		"@earendil-works/pi-pty": "npm:@code-yeongyu/senpi-pty@2026.10.25-1",
+		"@code-yeongyu/senpi-codemode": "2026.10.25-2",
+		"@earendil-works/pi-pty": "npm:@code-yeongyu/senpi-pty@2026.10.25-2",
 		"@modelcontextprotocol/sdk": "1.32.1",
 		"@mozilla/readability": "0.6.0",
 		"linkedom": "0.18.13",

package/dist/bundle/chunks/chunk-7ASLQ243.js

@@ -1,2 +0,0 @@
-import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url); { const __piWorkerThreads = require("node:worker_threads"); if (typeof __piWorkerThreads.markAsUncloneable !== "function") { __piWorkerThreads.markAsUncloneable = () => {}; } }
-import{execFile}from"node:child_process";var WINDOWS_FILETIME_EPOCH=116444736000000000n,PROCESS_START_TOLERANCE_MS=3e3;function processStartTimeMs(identity){if(/^\d+$/.test(identity)){let parsed2=Number((BigInt(identity)-WINDOWS_FILETIME_EPOCH)/10000n);return Number.isFinite(parsed2)?parsed2:void 0}let localIdentity=identity.trim(),korean=/^(\d{4})\uB144\s+(\d{1,2})\uC6D4\s+(\d{1,2})\uC77C\s+[\uC6D4\uD654\uC218\uBAA9\uAE08\uD1A0\uC77C]\uC694\uC77C\s+(\d{1,2})\uC2DC\s+(\d{1,2})\uBD84\s+(\d{1,2})\uCD08$/.exec(localIdentity),japanese=/^[\u65E5\u6708\u706B\u6C34\u6728\u91D1\u571F](?:\u66DC\u65E5)?\s+(\d{1,2})\/\s*(\d{1,2})\s+(\d{2}):(\d{2}):(\d{2})\s+(\d{4})$/.exec(localIdentity),parts=korean?korean.slice(1):japanese?[japanese[6],japanese[1],japanese[2],japanese[3],japanese[4],japanese[5]]:void 0;if(parts===void 0){let parsed2=Date.parse(identity);return Number.isFinite(parsed2)?parsed2:void 0}let[year=NaN,month=NaN,day=NaN,hour=NaN,minute=NaN,second=NaN]=parts.map(Number),parsed=new Date(year,month-1,day,hour,minute,second,0);return parsed.getFullYear()===year&&parsed.getMonth()===month-1&&parsed.getDate()===day&&parsed.getHours()===hour&&parsed.getMinutes()===minute&&parsed.getSeconds()===second?parsed.getTime():void 0}function sameProcessStartMs(recorded,observed){return recorded!==void 0&&observed!==void 0&&Number.isFinite(recorded)&&Number.isFinite(observed)&&Math.abs(recorded-observed)<=PROCESS_START_TOLERANCE_MS}function parseDaemonPidFile(text){let parsed;try{parsed=JSON.parse(text)}catch(error){if(error instanceof SyntaxError)return;throw error}let unguarded=parsed!==null&&isRecord(parsed)&&parsed.processStartTime===null;if(!(!isRecord(parsed)||typeof parsed.pid!="number"||!unguarded&&typeof parsed.processStartTime!="string")&&!(!Number.isInteger(parsed.pid)||parsed.pid<=0)){if(unguarded)return{pid:parsed.pid,processStartTime:null};if(!(typeof parsed.processStartTime!="string"||parsed.processStartTime.trim()===""))return{pid:parsed.pid,processStartTime:parsed.processStartTime}}}var ProcessIdentityUnreadableError=class extends Error{constructor(pid,attempts,cause){super(`process identity for live pid ${pid} stayed unreadable after ${attempts} probe attempt(s): ${cause instanceof Error?cause.message:String(cause)}`),this.name="ProcessIdentityUnreadableError",this.pid=pid,this.attempts=attempts,this.cause=cause}};async function processMatchesPidFile(pidFile,readStartTime=readProcessStartTime,isLive=processIsLive,retry={}){if(pidFile.processStartTime===null){if(!isLive(pidFile.pid))return!1;throw new ProcessIdentityUnreadableError(pidFile.pid,0,new Error("pidfile carries no process identity guard"))}let attempts=Math.max(1,retry.attempts??5),delayMs=retry.delayMs??200,lastError;for(let attempt=1;attempt<=attempts;attempt++)try{let current=await readStartTime(pidFile.pid);if(current!==void 0){let recorded=processStartTimeMs(pidFile.processStartTime),observed=processStartTimeMs(current);if(recorded!==void 0&&observed!==void 0)return sameProcessStartMs(recorded,observed)}if(!isLive(pidFile.pid))return!1;lastError=new Error("process identity probe returned no usable identity for a live process"),attempt<attempts&&await new Promise(resolve=>setTimeout(resolve,delayMs))}catch(error){if(!isLive(pidFile.pid))return!1;lastError=error,attempt<attempts&&await new Promise(resolve=>setTimeout(resolve,delayMs))}throw new ProcessIdentityUnreadableError(pidFile.pid,attempts,lastError)}async function readProcessIdentity(pid,platform=process.platform,timeoutMs,isLive=processIsLive,timeZone){let command=platform==="win32"?{executable:"powershell.exe",args:["-NoProfile","-NonInteractive","-Command",`$process = Get-CimInstance Win32_Process -Filter "ProcessId=${String(pid)}" -ErrorAction Stop; if ($null -eq $process) { Write-Output '__SENPI_ABSENT__'; exit 0 }; $process.CreationDate.ToFileTimeUtc().ToString("D", [Globalization.CultureInfo]::InvariantCulture)`]}:{executable:"ps",args:["-o","lstart=","-p",String(pid)]};return new Promise(resolve=>{let effectiveTimeoutMs=timeoutMs??(platform==="win32"?1e3:void 0);execFile(command.executable,command.args,{windowsHide:!0,...effectiveTimeoutMs===void 0?{}:{timeout:effectiveTimeoutMs},...platform==="win32"&&timeZone===void 0?{}:{env:{...process.env,LC_ALL:"C",LANG:"C",...timeZone?{TZ:timeZone}:{}}}},(error,stdout)=>{if(error){let code="code"in error?error.code:void 0;if(platform!=="win32"&&code===1||!isLive(pid)){resolve({kind:"absent"});return}resolve({kind:"error",error});return}let output=stdout.trim();if(output==="__SENPI_ABSENT__")return resolve({kind:"absent"});if(!output||platform==="win32"&&!/^\d+$/.test(output))return resolve({kind:"error",error:new Error("invalid process identity output")});resolve({kind:"present",identity:timeZone&&platform!=="win32"?`${output} UTC`:output})}).once("error",error=>resolve({kind:"error",error}))})}async function readProcessStartTime(pid,platform=process.platform,timeoutMs){return readProcessIdentity(pid,platform,timeoutMs).then(result=>{if(result.kind==="error")throw result.error;return result.kind==="present"?result.identity:void 0})}function processIsLive(pid){try{return process.kill(pid,0),!0}catch(error){if(isNodeErrorCode(error,"ESRCH"))return!1;if(isNodeErrorCode(error,"EPERM"))return!0;throw error}}async function waitForStartTime(pid,timeoutMs,readStartTime=readProcessStartTime,isLive=processIsLive){let deadline=Date.now()+timeoutMs;for(;Date.now()<=deadline;){let startTime;try{startTime=await readStartTime(pid)}catch{}if(startTime)return startTime;await delay(20)}if(!isLive(pid))throw new Error(`spawned daemon pid ${pid} had no process start time`)}function delay(ms){return new Promise(resolveDelay=>setTimeout(resolveDelay,ms))}function isRecord(value){return typeof value=="object"&&value!==null&&!Array.isArray(value)}function isNodeErrorCode(error,code){return error instanceof Error&&"code"in error&&error.code===code}export{PROCESS_START_TOLERANCE_MS,processStartTimeMs,sameProcessStartMs,parseDaemonPidFile,ProcessIdentityUnreadableError,processMatchesPidFile,readProcessIdentity,readProcessStartTime,processIsLive,waitForStartTime};