@code-yeongyu/senpi 2026.10.4 → 2026.10.5

package/dist/core/extensions/builtin/gpt-apply-patch/patch-replace.js

@@ -1,14 +1,8 @@
+import { replacementsAroundContext, SourceText } from "./line-endings.js";
 import { seekSequenceWithFuzz } from "./seek-sequence.js";
-import { normalizePatchText } from "./text.js";
-function splitFileLines(content) {
-    const lines = normalizePatchText(content).split("\n");
-    if (lines[lines.length - 1] === "") {
-        lines.pop();
-    }
-    return lines;
-}
 export function replaceChunks(content, filePath, chunks) {
-    const originalLines = splitFileLines(content);
+    const source = SourceText.parse(content);
+    const originalLines = source.texts;
     const replacements = [];
     let lineIndex = 0;
     let fuzz = 0;
@@ -37,14 +31,9 @@ export function replaceChunks(content, filePath, chunks) {
         if (foundAt === undefined)
             throw new Error(`Failed to find expected lines in ${filePath}:\n${chunk.oldLines.join("\n")}`);
         fuzz += foundAt.fuzz;
-        replacements.push({ start: foundAt.index, oldLength: pattern.length, newLines });
+        replacements.push(...replacementsAroundContext(foundAt.index, pattern.length, newLines, chunk.contextLineIndices));
         lineIndex = foundAt.index + pattern.length;
     }
-    const nextLines = [...originalLines];
-    for (const replacement of replacements.sort((left, right) => right.start - left.start)) {
-        nextLines.splice(replacement.start, replacement.oldLength, ...replacement.newLines);
-    }
-    nextLines.push("");
-    return { content: nextLines.join("\n"), fuzz };
+    return { content: source.replace(replacements), fuzz };
 }
 //# sourceMappingURL=patch-replace.js.map

package/dist/core/extensions/builtin/gpt-apply-patch/streaming-parser.js

@@ -100,7 +100,7 @@ export class StreamingPatchParser {
         const hunk = this.currentUpdate();
         let chunk = hunk.chunks[hunk.chunks.length - 1];
         if (!chunk || chunk.isEndOfFile) {
-            chunk = { changeContexts: [], oldLines: [], newLines: [], isEndOfFile: false };
+            chunk = { changeContexts: [], oldLines: [], newLines: [], contextLineIndices: [], isEndOfFile: false };
             hunk.chunks.push(chunk);
         }
         return chunk;
@@ -178,6 +178,7 @@ export class StreamingPatchParser {
         const value = line.slice(1);
         const chunk = this.currentChunk();
         if (prefix === " ") {
+            chunk.contextLineIndices.push([chunk.oldLines.length, chunk.newLines.length]);
             chunk.oldLines.push(value);
             chunk.newLines.push(value);
         }
@@ -188,6 +189,7 @@ export class StreamingPatchParser {
             chunk.newLines.push(value);
         }
         else if (prefix === undefined) {
+            chunk.contextLineIndices.push([chunk.oldLines.length, chunk.newLines.length]);
             chunk.oldLines.push("");
             chunk.newLines.push("");
         }

package/dist/core/extensions/builtin/gpt-apply-patch/text.d.ts

@@ -1,4 +1,12 @@
 export declare function normalizePatchText(patchText: string): string;
 export declare function stripHeredoc(input: string): string;
+declare const FILE_HEADER_MARKERS: readonly [readonly ["add", "*** Add File: "], readonly ["delete", "*** Delete File: "], readonly ["update", "*** Update File: "]];
+export type FileHeader = {
+    readonly kind: (typeof FILE_HEADER_MARKERS)[number][0];
+    readonly path: string;
+};
+export declare function parseFileHeader(line: string): FileHeader | undefined;
+export declare function parseMoveTo(line: string): string | undefined;
 export declare function extractPatchedPaths(patchText: string): string[];
+export {};
 //# sourceMappingURL=text.d.ts.map

package/dist/core/extensions/builtin/gpt-apply-patch/text.js

@@ -8,9 +8,32 @@ export function stripHeredoc(input) {
     }
     return input;
 }
+const FILE_HEADER_MARKERS = [
+    ["add", "*** Add File: "],
+    ["delete", "*** Delete File: "],
+    ["update", "*** Update File: "],
+];
+const MOVE_TO_MARKER = "*** Move to: ";
+// The parser and extractPatchedPaths both read headers through these two functions, so they share one
+// whitespace definition (String.prototype.trim): every path the parser writes is a path the permission
+// system's per-file approval sees, spelled the same way.
+export function parseFileHeader(line) {
+    const trimmed = line.trim();
+    for (const [kind, marker] of FILE_HEADER_MARKERS) {
+        if (trimmed.startsWith(marker))
+            return { kind, path: trimmed.slice(marker.length) };
+    }
+    return undefined;
+}
+export function parseMoveTo(line) {
+    const trimmed = line.trimEnd();
+    return trimmed.startsWith(MOVE_TO_MARKER) ? trimmed.slice(MOVE_TO_MARKER.length) : undefined;
+}
 export function extractPatchedPaths(patchText) {
-    const normalized = stripHeredoc(normalizePatchText(patchText));
-    const matches = normalized.matchAll(/^\*\*\* (?:(?:Add|Delete|Update) File|Move to): (.+)$/gm);
-    return Array.from(matches, (match) => match[1] ?? "");
+    const lines = stripHeredoc(normalizePatchText(patchText)).split("\n");
+    return lines.flatMap((line) => {
+        const path = parseFileHeader(line)?.path ?? parseMoveTo(line.trimStart());
+        return path === undefined ? [] : [path];
+    });
 }
 //# sourceMappingURL=text.js.map

package/dist/core/extensions/builtin/gpt-apply-patch/types.d.ts

@@ -1,5 +1,6 @@
 import type { ExtensionAPI, ToolDefinition } from "../../types.ts";
 import type { APPLY_PATCH_PARAMS } from "./constants.ts";
+import type { ContextLineIndex } from "./line-endings.ts";
 export type ParsedPatch = {
     type: "add";
     filePath: string;
@@ -17,6 +18,7 @@ export type PatchChunk = {
     changeContexts: string[];
     oldLines: string[];
     newLines: string[];
+    contextLineIndices: ContextLineIndex[];
     isEndOfFile: boolean;
 };
 export type ApplyPatchWireMode = "freeform" | "json" | "none";

package/dist/core/extensions/builtin/terminal/tools/bash.d.ts

@@ -32,6 +32,7 @@ type SessionEnvSource = {
     thinkingLevel?: string;
     cwd?: string;
     goalStoreFile?: string;
+    browserEngine?: string;
 };
 /** Build the PTY-backed `bash` tool definition. */
 export declare function createPtyBashTool(ctx: TerminalToolContext): {

package/dist/core/extensions/builtin/terminal/tools/bash.js

@@ -79,7 +79,12 @@ function sessionSpawnContext(ctx) {
     return {
         ...ctx,
         // Explicit deletions survive backends that merge overrides with the host environment.
-        getEnv: () => ({ ...ctx.getEnv(), PI_SESSION_CWD: undefined, PI_GOAL_STORE_FILE: undefined }),
+        getEnv: () => ({
+            ...ctx.getEnv(),
+            PI_SESSION_CWD: undefined,
+            PI_GOAL_STORE_FILE: undefined,
+            OMO_BROWSER_ENGINE: undefined,
+        }),
     };
 }
 function sessionEnvOverrides(ctx, execCtx) {
@@ -101,6 +106,8 @@ function sessionEnvOverrides(ctx, execCtx) {
     }
     if (session.thinkingLevel)
         env.PI_REASONING_LEVEL = session.thinkingLevel;
+    if (session.browserEngine)
+        env.OMO_BROWSER_ENGINE = session.browserEngine;
     return env;
 }
 /**

package/dist/core/extensions/runner.d.ts

@@ -138,6 +138,7 @@ export declare class ExtensionRunner {
     private getPromptCacheKeepAliveSettingsFn;
     private getLookAtSettingsFn;
     private getAskUserSettingsFn;
+    private getBrowserEngineFn;
     private getImageSettingsFn;
     private sessionSettingsFn;
     private compactFn;

package/dist/core/extensions/runner.js

@@ -248,6 +248,7 @@ export class ExtensionRunner {
             enabled: true,
             timeoutMinutes: 30,
         });
+        this.getBrowserEngineFn = () => undefined;
         this.getImageSettingsFn = () => ({
             autoResize: true,
             blockImages: false,
@@ -356,6 +357,8 @@ export class ExtensionRunner {
         this.getLookAtSettingsFn = contextActions.getLookAtSettings;
         if (contextActions.getAskUserSettings)
             this.getAskUserSettingsFn = contextActions.getAskUserSettings;
+        if (contextActions.getBrowserEngine)
+            this.getBrowserEngineFn = contextActions.getBrowserEngine;
         this.getImageSettingsFn = contextActions.getImageSettings;
         this.sessionSettingsFn = contextActions.sessionSettings;
         this.compactFn = contextActions.compact;
@@ -908,6 +911,10 @@ export class ExtensionRunner {
                 runner.assertActive();
                 return goalFilePath(goalStoreRef(runner.sessionManager, runner.cwd));
             },
+            get browserEngine() {
+                runner.assertActive();
+                return runner.getBrowserEngineFn();
+            },
             get modelRegistry() {
                 runner.assertActive();
                 return runner.modelRegistry;

package/dist/core/extensions/types.d.ts

@@ -13,6 +13,7 @@ import type { AutocompleteItem, AutocompleteProvider, Component, EditorComponent
 import type { Static, TSchema } from "typebox";
 import type { Theme } from "../../modes/interactive/theme/theme.ts";
 import type { BashResult } from "../bash-executor.ts";
+import type { BrowserEngine } from "../browser-engine.ts";
 import type { CompactionPreparation, CompactionResult } from "../compaction/index.ts";
 import type { WarmAnchorSnapshot } from "../compaction/warm-anchor.ts";
 import type { EventBus } from "../event-bus.ts";
@@ -355,6 +356,8 @@ export interface ExtensionContext {
     sessionManager: ReadonlySessionManager;
     /** Absolute goal-store path for this session; reading it does not create the file. */
     readonly goalStoreFile?: string;
+    /** Browser engine the opener chose for THIS session (`open_session.browserEngine`); absent when it chose none. */
+    readonly browserEngine?: BrowserEngine;
     /** Model registry for API key resolution */
     modelRegistry: ModelRegistry;
     /** Current model (may be undefined) */
@@ -2366,6 +2369,7 @@ export interface ExtensionContextActions {
         enabled: boolean;
         timeoutMinutes: number;
     };
+    getBrowserEngine?: () => BrowserEngine | undefined;
     getImageSettings: () => {
         autoResize: boolean;
         blockImages: boolean;

package/dist/core/model-resolver.js

@@ -24,7 +24,7 @@ export const defaultModelPerProvider = {
     cursor: "auto",
     // Radius resolves its catalog after discovery; "balanced" is the selectable default.
     radius: "balanced",
-    nvidia: "nvidia/nemotron-3-super-120b-a12b",
+    nvidia: "nvidia/nemotron-3-ultra-550b-a55b",
     deepseek: "deepseek-v4-pro",
     google: "gemini-3.1-pro-preview",
     "google-vertex": "gemini-3.1-pro-preview",

package/dist/core/sdk.d.ts

@@ -3,6 +3,7 @@ import type { ThinkingSelection } from "@earendil-works/pi-ai";
 import { type Model } from "@earendil-works/pi-ai/compat";
 import { AgentSession } from "./agent-session.ts";
 import { AuthStorage } from "./auth-storage.ts";
+import type { BrowserEngine } from "./browser-engine.ts";
 import type { PromptSurface } from "./dynamic-prompt/types.ts";
 import { type ServiceTier } from "./extensions/builtin/service-tier.ts";
 import type { LoadExtensionsResult, SessionStartEvent, ToolDefinition } from "./extensions/index.ts";
@@ -83,6 +84,8 @@ export interface CreateAgentSessionOptions {
     autoTitleSessions?: boolean;
     /** Where this session's replies render; omitted means `SENPI_PROMPT_SURFACE` decides. */
     promptSurface?: PromptSurface;
+    /** Browser engine this session's skills drive (`open_session.browserEngine`); omitted means none was chosen. */
+    browserEngine?: BrowserEngine;
 }
 /** Result from createAgentSession */
 export interface CreateAgentSessionResult {

package/dist/core/sdk.js

@@ -395,6 +395,7 @@ export async function createAgentSession(options = {}) {
         sessionStartEvent,
         autoTitleSessions: options.autoTitleSessions,
         promptSurface: options.promptSurface,
+        browserEngine: options.browserEngine,
     });
     const liveContextTokens = hasExistingSession
         ? existingSession.messages.reduce((total, message) => total + estimateTokens(message), 0)

package/dist/core/tools/bash.js

@@ -191,6 +191,7 @@ function resolveSpawnContext(command, cwd, spawnHook, exposeSessionEnvironment,
     delete env.PI_PROVIDER;
     delete env.PI_MODEL;
     delete env.PI_REASONING_LEVEL;
+    delete env.OMO_BROWSER_ENGINE;
     if (exposeSessionEnvironment && ctx) {
         const model = ctx.model;
         env.PI_SESSION_ID = ctx.sessionManager.getSessionId();
@@ -206,6 +207,8 @@ function resolveSpawnContext(command, cwd, spawnHook, exposeSessionEnvironment,
         }
         if (ctx.thinkingLevel)
             env.PI_REASONING_LEVEL = ctx.thinkingLevel;
+        if (ctx.browserEngine)
+            env.OMO_BROWSER_ENGINE = ctx.browserEngine;
     }
     const baseContext = { command, cwd, env };
     return spawnHook ? spawnHook(baseContext) : baseContext;

package/dist/main.js

@@ -813,6 +813,7 @@ export function createCliRuntimeFactory(configuration, local = {}) {
             customTools: sessionOptions.customTools,
             autoTitleSessions: resolveAutoTitleSessions(appMode, parsed, sessionManager.hasContextMessages(), parseClientCapabilities(envValue("RPC_CLIENT_CAPABILITIES")), launchProfile?.autoTitle),
             promptSurface: launchProfile?.promptSurface,
+            browserEngine: launchProfile?.browserEngine,
         });
         markSwitch("createSession");
         const cliThinkingOverride = runtimeParsed.thinking !== undefined || cliThinkingFromModel;

package/dist/modes/interactive/components/session-selector.d.ts

@@ -49,6 +49,17 @@ declare class SessionList implements Component, Focusable {
     handleInput(keyData: string): void;
 }
 type SessionsLoader = (onProgress?: SessionListProgress, signal?: AbortSignal) => Promise<SessionInfo[]>;
+/**
+ * Delete a session file, trying the `trash` CLI first, then falling back to unlink. The session's
+ * tool images go with it; when they cannot be removed the session is still deleted (its id is gone
+ * with the file) and `mediaError` names the leftover directory so the caller can say so.
+ */
+export declare function deleteSessionFile(sessionPath: string): Promise<{
+    ok: boolean;
+    method: "trash" | "unlink";
+    error?: string;
+    mediaError?: string;
+}>;
 /**
  * Component that renders a session selector
  */

package/dist/modes/interactive/components/session-selector.js

@@ -4,6 +4,7 @@ import { unlink } from "node:fs/promises";
 import * as os from "node:os";
 import { Container, getKeybindings, Input, Spacer, Text, truncateToWidth, visibleWidth, } from "@earendil-works/pi-tui";
 import { KeybindingsManager } from "../../../core/keybindings.js";
+import { removeToolMedia, toolMediaRoot, toolMediaScopeOfSessionFile } from "../../rpc/tool-media-store.js";
 import { theme } from "../theme/theme.js";
 import { DynamicBorder } from "./dynamic-border.js";
 import { keyHint, keyText } from "./keybinding-hints.js";
@@ -466,10 +467,29 @@ class SessionList {
         }
     }
 }
+function withMediaOutcome(result, mediaError) {
+    return mediaError === undefined ? result : { ...result, mediaError };
+}
 /**
- * Delete a session file, trying the `trash` CLI first, then falling back to unlink
+ * Delete a session file, trying the `trash` CLI first, then falling back to unlink. The session's
+ * tool images go with it; when they cannot be removed the session is still deleted (its id is gone
+ * with the file) and `mediaError` names the leftover directory so the caller can say so.
  */
-async function deleteSessionFile(sessionPath) {
+export async function deleteSessionFile(sessionPath) {
+    // The header is read before the file goes: the media directory is named after the session id.
+    const mediaScope = await toolMediaScopeOfSessionFile(sessionPath);
+    const removeMedia = () => {
+        if (mediaScope === undefined)
+            return undefined;
+        try {
+            removeToolMedia(mediaScope);
+            return undefined;
+        }
+        catch (cause) {
+            const reason = cause instanceof Error ? cause.message : String(cause);
+            return `${toolMediaRoot(mediaScope)}: ${reason}`;
+        }
+    };
     // Try `trash` first (if installed)
     const trashArgs = sessionPath.startsWith("-") ? ["--", sessionPath] : [sessionPath];
     const trashResult = spawnSync("trash", trashArgs, { encoding: "utf-8" });
@@ -488,12 +508,12 @@ async function deleteSessionFile(sessionPath) {
     };
     // If trash reports success, or the file is gone afterwards, treat it as successful
     if (trashResult.status === 0 || !existsSync(sessionPath)) {
-        return { ok: true, method: "trash" };
+        return withMediaOutcome({ ok: true, method: "trash" }, removeMedia());
     }
     // Fallback to permanent deletion
     try {
         await unlink(sessionPath);
-        return { ok: true, method: "unlink" };
+        return withMediaOutcome({ ok: true, method: "unlink" }, removeMedia());
     }
     catch (err) {
         const unlinkError = err instanceof Error ? err.message : String(err);
@@ -628,7 +648,12 @@ export class SessionSelectorComponent extends Container {
                 const showCwd = this.scope === "all";
                 this.sessionList.setSessions(sessions, showCwd);
                 const msg = result.method === "trash" ? "Session moved to trash" : "Session deleted";
-                this.header.setStatusMessage({ type: "info", message: msg }, 2000);
+                if (result.mediaError) {
+                    this.header.setStatusMessage({ type: "error", message: `${msg}, but its images were not removed: ${result.mediaError}` }, 8000);
+                }
+                else {
+                    this.header.setStatusMessage({ type: "info", message: msg }, 2000);
+                }
                 await this.refreshSessionsAfterMutation();
             }
             else {

package/dist/modes/rpc/connection-handler.js

@@ -16,8 +16,10 @@
  */
 import * as crypto from "node:crypto";
 import { basename, dirname, extname } from "node:path";
+import { modelSupportsAssistantPrefill } from "@earendil-works/pi-ai";
 import { VERSION } from "../../config.js";
 import { authMethodStatus, buildLoginProviderInfos } from "../../core/auth-providers.js";
+import { ContinueFromLeafError } from "../../core/continue-from-leaf.js";
 import { getCredentialAccounts, pinCredentialAccount, removeCredentialAccount, } from "../../core/credential-accounts.js";
 import { AssistantEditError, SessionStreamingError } from "../../core/edited-assistant-message.js";
 import { UserEditError } from "../../core/edited-user-message.js";
@@ -32,7 +34,7 @@ import { ClientAdmissions } from "./client-admissions.js";
 import { handleClientInput } from "./client-input-handler.js";
 import { ClientMessageEvents } from "./client-message-events.js";
 import { ConnectionQuestionBridge, degradeQuestion, sessionQuestionBridges } from "./connection-question-bridge.js";
-import { AUTO_TITLE_SESSIONS_CAPABILITY, buildCustomUnsupportedRequest, DEFAULT_CUSTOM_EXTENSION_LABEL, EXTENSION_EVENTS_CAPABILITY, MEDIA_PLACEHOLDERS_CAPABILITY, QUESTION_CAPABILITY, } from "./custom-capability.js";
+import { AUTO_TITLE_SESSIONS_CAPABILITY, buildCustomUnsupportedRequest, CONTINUE_FROM_LEAF_CAPABILITY, DEFAULT_CUSTOM_EXTENSION_LABEL, EXTENSION_EVENTS_CAPABILITY, MEDIA_PLACEHOLDERS_CAPABILITY, QUESTION_CAPABILITY, } from "./custom-capability.js";
 import { createRpcEventOutputBuffer } from "./event-output-buffer.js";
 import { settleExtensionUiResponse } from "./extension-ui-response.js";
 import { HostSessionControl } from "./host-session-control.js";
@@ -725,6 +727,7 @@ export function createRpcConnectionHandler(runtimeHost, sink, options = {}) {
                                 AUTO_TITLE_SESSIONS_CAPABILITY,
                                 MEDIA_PLACEHOLDERS_CAPABILITY,
                                 DURABLE_CLIENT_MESSAGE_ID_CAPABILITY,
+                                CONTINUE_FROM_LEAF_CAPABILITY,
                                 ...(options.capabilities ?? []),
                             ]),
                         ],
@@ -756,6 +759,17 @@ export function createRpcConnectionHandler(runtimeHost, sink, options = {}) {
                 session.appendSessionEntry(command.entry);
                 return success(id, "append_session_entry");
             }
+            case "continue_from_leaf": {
+                try {
+                    await session.continueFromLeaf();
+                    return success(id, "continue_from_leaf");
+                }
+                catch (err) {
+                    if (err instanceof ContinueFromLeafError)
+                        return error(id, command.type, err.message, err.code);
+                    throw err;
+                }
+            }
             case "send_custom_message": {
                 await session.sendCustomMessage({
                     customType: command.customType,
@@ -865,6 +879,9 @@ export function createRpcConnectionHandler(runtimeHost, sink, options = {}) {
                     models: models.map((model) => ({
                         ...model,
                         supportedThinkingLevels: getSupportedThinkingLevels(model),
+                        supportsAssistantPrefill: modelSupportsAssistantPrefill(model, {
+                            thinkingEnabled: session.thinkingLevel !== "off",
+                        }),
                     })),
                 });
             }

package/dist/modes/rpc/custom-capability.d.ts

@@ -18,6 +18,8 @@ import type { RpcExtensionUIRequest } from "./rpc-types.ts";
 export declare const CUSTOM_UNSUPPORTED_CAPABILITY = "custom_unsupported";
 export declare const EXTENSION_EVENTS_CAPABILITY = "extension_events";
 export declare const AUTO_TITLE_SESSIONS_CAPABILITY = "auto_title_sessions";
+/** Host capability: the `continue_from_leaf` command starts a turn with no new prompt (#1930). */
+export declare const CONTINUE_FROM_LEAF_CAPABILITY = "continue_from_leaf";
 /**
  * Opt-in: the host replaces inline image bytes inside tool results with `image_ref`
  * placeholders for this connection; the client fetches a block on demand with `get_media`.
@@ -65,6 +67,13 @@ export declare const DURABLE_SESSION_ID_CAPABILITY = "durable_session_id";
  * `SENPI_PROMPT_SURFACE`. A later open that names another surface rebuilds that session's prompt.
  */
 export declare const PROMPT_SURFACE_CAPABILITY = "prompt_surface";
+/**
+ * HOST capability: this host honors `open_session.browserEngine` (`connected` | `builtin` | `none`). The
+ * choice is per session, never per process: that session's tool subprocesses and eval kernel see
+ * `OMO_BROWSER_ENGINE=<value>` and no other session on the host does. Advertised only because the
+ * value reaches every consumer, so a client may rely on it the moment it sees this name.
+ */
+export declare const BROWSER_ENGINE_CAPABILITY = "browser_engine";
 /**
  * HOST capability: `open_session.promptSurface` also accepts `chat` (a chat bridge: no routing line,
  * no handoff block, no todo cues). A host without it refuses `chat` with `invalid_launch_profile`,

package/dist/modes/rpc/custom-capability.js

@@ -18,6 +18,8 @@ import * as crypto from "node:crypto";
 export const CUSTOM_UNSUPPORTED_CAPABILITY = "custom_unsupported";
 export const EXTENSION_EVENTS_CAPABILITY = "extension_events";
 export const AUTO_TITLE_SESSIONS_CAPABILITY = "auto_title_sessions";
+/** Host capability: the `continue_from_leaf` command starts a turn with no new prompt (#1930). */
+export const CONTINUE_FROM_LEAF_CAPABILITY = "continue_from_leaf";
 /**
  * Opt-in: the host replaces inline image bytes inside tool results with `image_ref`
  * placeholders for this connection; the client fetches a block on demand with `get_media`.
@@ -65,6 +67,13 @@ export const DURABLE_SESSION_ID_CAPABILITY = "durable_session_id";
  * `SENPI_PROMPT_SURFACE`. A later open that names another surface rebuilds that session's prompt.
  */
 export const PROMPT_SURFACE_CAPABILITY = "prompt_surface";
+/**
+ * HOST capability: this host honors `open_session.browserEngine` (`connected` | `builtin` | `none`). The
+ * choice is per session, never per process: that session's tool subprocesses and eval kernel see
+ * `OMO_BROWSER_ENGINE=<value>` and no other session on the host does. Advertised only because the
+ * value reaches every consumer, so a client may rely on it the moment it sees this name.
+ */
+export const BROWSER_ENGINE_CAPABILITY = "browser_engine";
 /**
  * HOST capability: `open_session.promptSurface` also accepts `chat` (a chat bridge: no routing line,
  * no handoff block, no todo cues). A host without it refuses `chat` with `invalid_launch_profile`,

package/dist/modes/rpc/host-daemon-env.js

@@ -20,6 +20,7 @@ const ALLOWED_ENV_NAMES = [
     /^(PATH|HOME|USER|LOGNAME|SHELL|TMPDIR|TERM|LANG)$/u,
     /^(LC|XDG)_/u,
     /^(SENPI|OMO|PI)_/u,
+    /^BSK_(HOME|BIN)$/u,
     /^(HTTPS?_PROXY|NO_PROXY)$/u,
     /^[A-Z0-9_]+_API_KEY$/u,
     /^(ANTHROPIC|OPENAI|GOOGLE|GEMINI|AZURE|AWS|OPENROUTER|XAI|MISTRAL|DEEPSEEK|GROQ|CEREBRAS|MINIMAX)_/u,
@@ -61,6 +62,7 @@ const TRANSIENT_ENV_NAMES = new Set([
     "PI_PROVIDER",
     "PI_MODEL",
     "PI_REASONING_LEVEL",
+    "OMO_BROWSER_ENGINE",
     "PI_PROMPT_CACHE_SAFE_WAIT_SECONDS",
     "SENPI_PY_KERNEL_PARENT_PID",
     "SENPI_RPC_HOST_WATCH_FD",

package/dist/modes/rpc/host-idle-handover.js

@@ -9,6 +9,7 @@ const NEW_WORK_COMMANDS = new Set([
     "steer",
     "follow_up",
     "send_custom_message",
+    "continue_from_leaf",
     "append_user_message",
     "bash",
     "compact",

package/dist/modes/rpc/media-placeholders.d.ts

@@ -22,6 +22,25 @@
  * User-authored images (`prompt.images`) stay intact: they are bounded by the client
  * that sent them; the fan-out hazard is tool output.
  */
+/** Why a host could not keep a tool image on disk for the client to read. */
+export type MediaUnavailableReason = "image_too_large" | "session_limit" | "storage_error";
+/** Where a persisted image lives (absolute), or why there is no file. */
+export type PersistedMedia = {
+    readonly path: string;
+} | {
+    readonly unavailableReason: MediaUnavailableReason;
+};
+/**
+ * Writes one image's bytes to the session's media directory and reports the outcome. Returns
+ * `undefined` for a session that has nowhere durable to keep them: its placeholder carries neither field.
+ */
+export type MediaPersister = (ref: {
+    readonly toolCallId: string;
+    readonly contentIndex: number;
+}, block: {
+    readonly data: string;
+    readonly mimeType?: string;
+}) => PersistedMedia | undefined;
 /** The block a capable client receives in place of inline image bytes. */
 export interface ImageRefBlock {
     readonly type: "image_ref";
@@ -31,6 +50,9 @@ export interface ImageRefBlock {
         readonly toolCallId: string;
         readonly contentIndex: number;
     };
+    /** Absolute path of the stored bytes; written before this placeholder was emitted. */
+    readonly path?: string;
+    readonly unavailableReason?: MediaUnavailableReason;
 }
 /**
  * Decoded byte length of a base64 string, derived from its length alone.
@@ -45,5 +67,5 @@ export declare function base64ByteLength(data: string): number;
  * Returns the SAME reference when nothing changed, so the caller can skip the second
  * serialization entirely.
  */
-export declare function omitInlineMedia<T extends object>(record: T): T;
+export declare function omitInlineMedia<T extends object>(record: T, persist?: MediaPersister): T;
 //# sourceMappingURL=media-placeholders.d.ts.map

package/dist/modes/rpc/media-placeholders.js

@@ -56,29 +56,32 @@ function isInlineImage(value) {
     return isPlainObject(value) && value.type === "image" && typeof value.data === "string";
 }
 /** Replace inline images in one tool-result content array; same reference when none. */
-function omitContentImages(content, toolCallId) {
+function omitContentImages(content, toolCallId, persist) {
     let replaced;
     for (let index = 0; index < content.length; index++) {
         const block = content[index];
         if (!isInlineImage(block))
             continue;
         replaced ??= [...content];
+        const ref = { toolCallId, contentIndex: index };
+        // The bytes reach disk before the placeholder that names them leaves this function.
         replaced[index] = {
             type: "image_ref",
             mimeType: typeof block.mimeType === "string" ? block.mimeType : "application/octet-stream",
             byteLength: base64ByteLength(block.data),
-            ref: { toolCallId, contentIndex: index },
+            ref,
+            ...persist?.(ref, block),
         };
     }
     return replaced ?? content;
 }
 /** A toolResult message whose content array carries images, rebuilt without them. */
-function omitToolResultImages(message) {
+function omitToolResultImages(message, persist) {
     const content = message.content;
     const toolCallId = typeof message.toolCallId === "string" ? message.toolCallId : "";
     if (!Array.isArray(content))
         return message;
-    const omitted = omitContentImages(content, toolCallId);
+    const omitted = omitContentImages(content, toolCallId, persist);
     return omitted === content ? message : { ...message, content: omitted };
 }
 /**
@@ -86,11 +89,11 @@ function omitToolResultImages(message) {
  * scrubbed, wherever it sits (message arrays, `turn_end.toolResults`, session entries,
  * tree nodes, `state.entries`). Unchanged sub-trees are returned by reference.
  */
-function walk(value) {
+function walk(value, persist) {
     if (Array.isArray(value)) {
         let replaced;
         for (let index = 0; index < value.length; index++) {
-            const next = walk(value[index]);
+            const next = walk(value[index], persist);
             if (next === value[index])
                 continue;
             replaced ??= [...value];
@@ -100,14 +103,14 @@ function walk(value) {
     }
     if (!isPlainObject(value))
         return value;
-    const scrubbed = value.role === "toolResult" ? omitToolResultImages(value) : value;
+    const scrubbed = value.role === "toolResult" ? omitToolResultImages(value, persist) : value;
     let replaced = scrubbed === value ? undefined : { ...scrubbed };
     for (const [key, child] of Object.entries(scrubbed)) {
         if (key === "content" && scrubbed !== value)
             continue;
         if (!isPlainObject(child) && !Array.isArray(child))
             continue;
-        const next = walk(child);
+        const next = walk(child, persist);
         if (next === child)
             continue;
         replaced ??= { ...scrubbed };
@@ -116,12 +119,12 @@ function walk(value) {
     return replaced ?? value;
 }
 /** `tool_execution_end.result.content` is not a toolResult message; scrub it explicitly. */
-function omitToolExecutionEndImages(record) {
+function omitToolExecutionEndImages(record, persist) {
     const result = record.result;
     if (!isPlainObject(result) || !Array.isArray(result.content))
         return record;
     const toolCallId = typeof record.toolCallId === "string" ? record.toolCallId : "";
-    const omitted = omitContentImages(result.content, toolCallId);
+    const omitted = omitContentImages(result.content, toolCallId, persist);
     return omitted === result.content ? record : { ...record, result: { ...result, content: omitted } };
 }
 /** True when this record type can carry a tool result at all (cheap gate). */
@@ -140,12 +143,12 @@ function carriesMedia(record) {
  * Returns the SAME reference when nothing changed, so the caller can skip the second
  * serialization entirely.
  */
-export function omitInlineMedia(record) {
+export function omitInlineMedia(record, persist) {
     const typed = record;
     if (!carriesMedia(typed))
         return record;
-    const scrubbed = typed.type === "tool_execution_end" ? omitToolExecutionEndImages(typed) : typed;
-    const walked = walk(scrubbed);
+    const scrubbed = typed.type === "tool_execution_end" ? omitToolExecutionEndImages(typed, persist) : typed;
+    const walked = walk(scrubbed, persist);
     return (walked === typed ? record : walked);
 }
 //# sourceMappingURL=media-placeholders.js.map