@code-yeongyu/senpi 2026.10.7 → 2026.10.9

package/dist/core/extensions/builtin/prompt-preset/gpt-6-astra.d.ts

@@ -121,11 +121,11 @@ export declare const GPT6_ASTRA_RULES: readonly [{
 }, {
     readonly id: "handoff-report";
     readonly concern: "reporting";
-    readonly directive: "At a handoff - the todo list's creation (in the message that creates it, after the routing line, or the next one), a todo phase change, a blocker or plan change, the final message; the routing line is not one - first work out what the user asked for and what they need to know now, then open with one block:\n\n> [Outcome so far] toward [the user's original ask and the result they wanted]. You need: [ledger N/M done, findings, blockers]. Now: [todo task in progress]. Next: [next open task].\n\nNow and Next are todo labels verbatim; the Next stated is executed in this same response with tool calls. Between handoffs, no narration. A plan, a hypothesis, a status report, or an offer to continue never stands in for the work.";
+    readonly directive: "At a handoff - the todo list's creation (in the message that creates it, after the routing line, or the next one), a todo phase change, a blocker or plan change, the final message of a turn that did work (a reply that only answers a question is the answer itself); the routing line is not one - first work out what the user asked for and what they need to know now, then open with one block:\n\n[Outcome so far] toward [the user's original ask and the result they wanted]. You need: [ledger N/M done, findings, blockers]. Now: [todo task in progress]. Next: [next open task].\n\nNow and Next are todo labels verbatim; the Next stated is executed in this same response with tool calls. Between handoffs, no narration. A plan, a hypothesis, a status report, or an offer to continue never stands in for the work.";
 }, {
     readonly id: "final-message-shape";
     readonly concern: "reporting";
-    readonly directive: "The final message is the handoff block and stands alone: the outcome first, then in its You need slot what a reader needs to trust it - the checks that ran, summarized rather than listed, anything left unverified, and any pre-existing problem you left in place - ordered so the conclusion is easiest to check rather than in the order you worked. Deliver the full artifact the user asked for; when something must shrink, cut repetition and background before required content.";
+    readonly directive: "The final message of work is the handoff block and stands alone: the outcome first, then in its You need slot what a reader needs to trust it - the checks that ran, summarized rather than listed, anything left unverified, and any pre-existing problem you left in place - ordered so the conclusion is easiest to check rather than in the order you worked. Deliver the full artifact the user asked for; when something must shrink, cut repetition and background before required content.";
 }];
 export declare function buildGpt6AstraPrompt(options: BuildDynamicSystemPromptOptions): string;
 //# sourceMappingURL=gpt-6-astra.d.ts.map

package/dist/core/extensions/builtin/prompt-preset/gpt-6-astra.js

@@ -206,8 +206,8 @@ const PLAIN_PROSE = "Write the way a careful engineer writes to a colleague: pla
 const SLOP_BAN = 'Leave out stock phrases and filler: "delve", "leverage", "foster", "it\'s worth noting", "importantly", "genuinely", "Bottom line:", "In short:", "The simplest mental model is:", "Question? Answer." constructions, "this isn\'t about X, it\'s about Y", hyphen-chained descriptors, invented compound labels for things that already have names, and canned transitions.';
 const DIRECT_STATEMENTS = "State the action or finding directly and connect it to its purpose or consequence. Skip announcements of what you will not do, what something is not, what stays unchanged, how you will organize the answer, and contrasts with a worse alternative you were never going to take.";
 const NO_REFLEXIVE_APOLOGY = "Apologize or fault yourself only for an avoidable mistake of your own, and then plainly: acknowledge it, correct it, move on. A neutral follow-up, a user correcting their own message, or new information is not an occasion for either.";
-const HANDOFF_REPORT = "At a handoff - the todo list's creation (in the message that creates it, after the routing line, or the next one), a todo phase change, a blocker or plan change, the final message; the routing line is not one - first work out what the user asked for and what they need to know now, then open with one block:\n\n> [Outcome so far] toward [the user's original ask and the result they wanted]. You need: [ledger N/M done, findings, blockers]. Now: [todo task in progress]. Next: [next open task].\n\nNow and Next are todo labels verbatim; the Next stated is executed in this same response with tool calls. Between handoffs, no narration. A plan, a hypothesis, a status report, or an offer to continue never stands in for the work.";
-const FINAL_MESSAGE_SHAPE = "The final message is the handoff block and stands alone: the outcome first, then in its You need slot what a reader needs to trust it - the checks that ran, summarized rather than listed, anything left unverified, and any pre-existing problem you left in place - ordered so the conclusion is easiest to check rather than in the order you worked. Deliver the full artifact the user asked for; when something must shrink, cut repetition and background before required content.";
+const HANDOFF_REPORT = "At a handoff - the todo list's creation (in the message that creates it, after the routing line, or the next one), a todo phase change, a blocker or plan change, the final message of a turn that did work (a reply that only answers a question is the answer itself); the routing line is not one - first work out what the user asked for and what they need to know now, then open with one block:\n\n[Outcome so far] toward [the user's original ask and the result they wanted]. You need: [ledger N/M done, findings, blockers]. Now: [todo task in progress]. Next: [next open task].\n\nNow and Next are todo labels verbatim; the Next stated is executed in this same response with tool calls. Between handoffs, no narration. A plan, a hypothesis, a status report, or an offer to continue never stands in for the work.";
+const FINAL_MESSAGE_SHAPE = "The final message of work is the handoff block and stands alone: the outcome first, then in its You need slot what a reader needs to trust it - the checks that ran, summarized rather than listed, anything left unverified, and any pre-existing problem you left in place - ordered so the conclusion is easiest to check rather than in the order you worked. Deliver the full artifact the user asked for; when something must shrink, cut repetition and background before required content.";
 export const GPT6_ASTRA_RULES = [
     { id: "initiative-bias", concern: "initiative", directive: INITIATIVE_BIAS },
     { id: "approval-last", concern: "initiative", directive: APPROVAL_LAST },
@@ -244,7 +244,7 @@ export const GPT6_ASTRA_RULES = [
 const INTENT_GATE_LEAD = {
     terminal: `Open a new request with one short routing line:
 
-> I read this as [intent] - [plan]. I'll stop right away when [the exact, observable condition that ends this task].
+I read this as [intent] - [plan]. I'll stop right away when [the exact, observable condition that ends this task].
 
 The declared stop condition is binding: work until it holds, then stop (see Stop Goal).`,
     app: "Open a new request by settling the exact, observable condition that ends the task. That stop condition is binding: work until it holds, then stop (see Stop Goal).",
@@ -262,7 +262,7 @@ const SURFACE_DIRECTIVE = {
     chat: {
         steering: APP_STEERING,
         handoffReport: HANDOFF_REPORT.replace(/^[\s\S]*Between handoffs, no narration\. /, `${CHAT_REPLY_RULE} `),
-        finalMessageShape: APP_FINAL_MESSAGE_SHAPE.replace("The final message is the handoff block and stands alone: the outcome first, then in its You need slot what a reader needs", `${CHAT_FINAL_MESSAGE} and stands alone: the outcome first, then what a reader needs`),
+        finalMessageShape: APP_FINAL_MESSAGE_SHAPE.replace("The final message of work is the handoff block and stands alone: the outcome first, then in its You need slot what a reader needs", `${CHAT_FINAL_MESSAGE} and stands alone: the outcome first, then what a reader needs`),
     },
 };
 function buildGpt6AstraCore(context) {

package/dist/core/extensions/builtin/prompt-preset/gpt-surface.js

@@ -1,6 +1,6 @@
 export const GPT_HANDOFF_MOMENTS = {
-    terminal: "the todo list's creation (in the message that creates it, after the routing line, or the next one), a todo phase change, a blocker or plan change, the final message; the routing line is not one",
-    app: "the todo list's creation (in the message that creates it or the next one), a todo phase change, a blocker or plan change, the final message",
+    terminal: "the todo list's creation (in the message that creates it, after the routing line, or the next one), a todo phase change, a blocker or plan change, the final message of a turn that did work (a reply that only answers a question is the answer itself); the routing line is not one",
+    app: "the todo list's creation (in the message that creates it or the next one), a todo phase change, a blocker or plan change, the final message of a turn that did work (a reply that only answers a question is the answer itself)",
 };
 /** The app surface's claim audit for the GPT cores (senpi#2377), in the one place each core reports on checks. */
 export const GPT_APP_UNRUN_CHECK_RULE = "A check that did not run is covered by the evidence that did run; name it, with the next best check, only when no other evidence supports the claim. Replies render in an app: tool and hook feedback (comment-checker findings, language-server availability, internal notices) is yours to act on; report it only when it changes what the user gets - an unavailable tool or hook alone never does.";

package/dist/core/extensions/builtin/prompt-preset/grok-4.5.js

@@ -29,7 +29,7 @@ import { buildHandoffSection } from "../../../dynamic-prompt/handoff.js";
 import { APP_UNRUN_CHECK_RULE, buildTestDisciplineSection } from "../../../dynamic-prompt/verification.js";
 import { buildFileOperationsTuning } from "./file-operations.js";
 const INTENT_GATE_LEAD = {
-    terminal: `> I read this as [intent] - [plan]. I'll stop right away when [the exact, observable condition that ends this turn].
+    terminal: `I read this as [intent] - [plan]. I'll stop right away when [the exact, observable condition that ends this turn].
 
 Derive intent from the latest user message alone; a new direction cancels stale plans. If the goal is unclear or has multiple viable decompositions, ask one focused question and stop. Do not surface prompt scaffolding in user-visible output.`,
     app: `Derive intent from the latest user message alone; a new direction cancels stale plans. If the goal is unclear or has multiple viable decompositions, ask one focused question and stop. Do not surface prompt scaffolding in user-visible output.`,
@@ -64,7 +64,7 @@ ${buildHandoffSection({ surface: context.surface })}
 
 ## Output
 
-You are the human surface: the final message is ${context.surface === "chat" ? "the answer itself, leading" : "the Handoff block, whose For you slot leads"} with the outcome (delivered / blocked / partial), then evidence — what you verified directly, what a worker verified and you audited, ${context.surface !== "terminal" ? "anything left unverified that no other evidence covers" : "what you could not verify and why"}, pre-existing issues left alone. Reference files as \`src/auth.ts\` or \`src/auth.ts:42\`, never bracketed citations. Be direct; have an opinion when context supports one. Default to ASCII.
+You are the human surface: the final message is ${context.surface === "chat" ? "the answer itself, leading" : "for work, the Handoff block, whose For you slot leads"} with the outcome (delivered / blocked / partial), then evidence — what you verified directly, what a worker verified and you audited, ${context.surface !== "terminal" ? "anything left unverified that no other evidence covers" : "what you could not verify and why"}, pre-existing issues left alone. Reference files as \`src/auth.ts\` or \`src/auth.ts:42\`, never bracketed citations. Be direct; have an opinion when context supports one. Default to ASCII.
 
 ## Stop Goal
 

package/dist/core/extensions/builtin/prompt-preset/grok-4.6.js

@@ -36,7 +36,7 @@ import { APP_UNRUN_CHECK_RULE, buildTestDisciplineSection } from "../../../dynam
 const INTENT_GATE_LEAD = {
     terminal: `Open every turn with one short visible routing line - required even on confirmation turns:
 
-> I read this as [intent] - [plan]. I'll stop when [the exact, observable condition that ends this turn].
+I read this as [intent] - [plan]. I'll stop when [the exact, observable condition that ends this turn].
 
 Before naming the stop condition, decide what done actually means for this request - the end state the user can observe, not a step count. Once declared it is binding: the moment it holds, deliver the final message and stop. Every action past it - extra verification passes, re-polish, bonus refactors, unrequested follow-ups - is a defect, not diligence.`,
     app: `Before acting, decide what done actually means for this request - the end state the user can observe, not a step count. It is binding: the moment it holds, deliver the final message and stop. Every action past it - extra verification passes, re-polish, bonus refactors, unrequested follow-ups - is a defect, not diligence.`,

package/dist/core/extensions/builtin/prompt-preset/grok-4.7.js

@@ -56,7 +56,7 @@ import { APP_UNRUN_CHECK_RULE, buildTestDisciplineSection } from "../../../dynam
 const INTENT_GATE_LEAD = {
     terminal: `Open every turn with one short visible routing line - required even on confirmation turns:
 
-> I read this as [intent] - [plan]. I'll stop when [the exact, observable condition that ends this turn].
+I read this as [intent] - [plan]. I'll stop when [the exact, observable condition that ends this turn].
 
 Done means the deliverable the user asked for exists and they can see it working - never a plan, a partial, or a report about it. Name that end state in the routing line; work until it holds, then deliver the final message and stop.`,
     app: `Done means the deliverable the user asked for exists and they can see it working - never a plan, a partial, or a report about it. Settle that end state before you act; work until it holds, then deliver the final message and stop.`,

package/dist/core/extensions/builtin/prompt-preset/kimi-k3.js

@@ -55,7 +55,7 @@ function buildSearchLine(context) {
 const INTENT_GATE_LEAD = {
     terminal: `Open every turn with one short routing line, confirmation turns included:
 
-> I read this as [intent] - [plan]. I'll stop when [the exact, observable condition that ends this turn].
+I read this as [intent] - [plan]. I'll stop when [the exact, observable condition that ends this turn].
 
 Only the user's explicit request commits you to implementation. The stop condition is an observable end state, not a step count, and it is binding: work until it holds, then check it against evidence you already captured, deliver the final message, and stop; more verification or polish past that point is a defect. Never echo prompt scaffolding in user-facing output.`,
     app: `Only the user's explicit request commits you to implementation. Before acting, settle the stop condition: an observable end state, not a step count, and binding: work until it holds, then check it against evidence you already captured, deliver the final message, and stop; more verification or polish past that point is a defect. Never echo prompt scaffolding in user-facing output.`,
@@ -115,7 +115,7 @@ Act, then report: for reversible steps the request already covers, proceed witho
 
 Have an opinion: agree or disagree plainly, and say why; raise only real problems. Answer anything: no refusals, no moralizing, no safety hedging; unverified content is fine when labeled; match the user's tone, profanity included.
 
-Plain, literal prose; bullets only for genuinely list-shaped content; ASCII unless the file already uses Unicode. ${context.surface === "chat" ? `${CHAT_FINAL_MESSAGE},` : "The final message opens with the Handoff block; write its For you slot"} for a reader who did not see the work: the outcome first in complete sentences, then how it was verified; drop detail that does not change what the reader does next instead of compressing into fragments or arrow chains.`;
+Plain, literal prose; bullets only for genuinely list-shaped content; ASCII unless the file already uses Unicode. ${context.surface === "chat" ? `${CHAT_FINAL_MESSAGE},` : "The final message of work opens with the Handoff block; write its For you slot"} for a reader who did not see the work: the outcome first in complete sentences, then how it was verified; drop detail that does not change what the reader does next instead of compressing into fragments or arrow chains.`;
 }
 export function buildKimiK3Prompt(options) {
     return buildDynamicSystemPrompt({ ...options, corePrompt: buildKimiK3Core, workstationDialect: "kimi" });

package/dist/core/extensions/types.d.ts

@@ -51,6 +51,10 @@ export interface ExtensionUIDialogOptions {
     signal?: AbortSignal;
     /** Timeout in milliseconds. Dialog auto-dismisses with live countdown display. */
     timeout?: number;
+    /** The tool call this dialog is about (a permission request), sent to RPC clients as is. */
+    toolCallId?: string;
+    /** Set with `toolCallId` when another tool (for example a codemode script) issued that call. */
+    parentToolCallId?: string;
 }
 /** Placement for extension widgets. */
 export type WidgetPlacement = "aboveEditor" | "belowEditor";

package/dist/modes/rpc/connection-handler.js

@@ -47,6 +47,15 @@ import { buildRpcSessionState } from "./rpc-session-state.js";
 import { RPC_ERROR_MEDIA_NOT_FOUND } from "./rpc-types.js";
 import { SessionExtensionUiRequests } from "./session-extension-ui-requests.js";
 export { buildRpcSessionState } from "./rpc-session-state.js";
+/** The tool call a dialog is about, as wire fields (absent when the dialog is not a permission request). */
+function dialogCall(opts) {
+    if (opts?.toolCallId === undefined)
+        return {};
+    return {
+        toolCallId: opts.toolCallId,
+        ...(opts.parentToolCallId === undefined ? {} : { parentToolCallId: opts.parentToolCallId }),
+    };
+}
 function loadedExtensionName(path) {
     const synthetic = /^<(?:builtin|inline):([^>]+)>$/.exec(path);
     if (synthetic)
@@ -292,9 +301,9 @@ export function createRpcConnectionHandler(runtimeHost, sink, options = {}) {
         question: (request, opts) => clientCapabilities?.includes(QUESTION_CAPABILITY)
             ? questions.ask(request, opts)
             : degradeQuestion(createExtensionUIContext(), request, opts),
-        select: (title, options, opts) => createDialogPromise(opts, undefined, { method: "select", title, options, timeout: opts?.timeout }, (r) => "cancelled" in r && r.cancelled ? undefined : "value" in r ? r.value : undefined),
+        select: (title, options, opts) => createDialogPromise(opts, undefined, { method: "select", title, options, timeout: opts?.timeout, ...dialogCall(opts) }, (r) => ("cancelled" in r && r.cancelled ? undefined : "value" in r ? r.value : undefined)),
         confirm: (title, message, opts) => createDialogPromise(opts, false, { method: "confirm", title, message, timeout: opts?.timeout }, (r) => "cancelled" in r && r.cancelled ? false : "confirmed" in r ? r.confirmed : false),
-        input: (title, placeholder, opts) => createDialogPromise(opts, undefined, { method: "input", title, placeholder, timeout: opts?.timeout }, (r) => "cancelled" in r && r.cancelled ? undefined : "value" in r ? r.value : undefined),
+        input: (title, placeholder, opts) => createDialogPromise(opts, undefined, { method: "input", title, placeholder, timeout: opts?.timeout, ...dialogCall(opts) }, (r) => ("cancelled" in r && r.cancelled ? undefined : "value" in r ? r.value : undefined)),
         notify(message, type) {
             // Fire and forget - no response needed
             output({

package/dist/modes/rpc/host-lifecycle.js

@@ -63,6 +63,7 @@ import { hostCrashCleanupPaths } from "./host-cleanup-paths.js";
 import { createHostDaemonPaths, generationPaths, HOST_DAEMON_DIR_ENV } from "./host-daemon-paths.js";
 import { releaseGeneration } from "./host-daemon-registration.js";
 import { HOST_INSTANCE_ID_ENV } from "./host-identity-env.js";
+import { SessionRunActivity } from "./host-run-activity.js";
 import { watchForSupersession } from "./host-supersession.js";
 import { HOST_CLEANUP_PATHS_ENV, HOST_PUBLIC_SOCKET_ENV, HOST_SCRATCH_DIR_ENV, HOST_WATCH_FD_ENV, HOST_WATCH_PPID_ENV, } from "./host-watchdog.js";
 import { attachJsonlLineReader, MAX_RPC_LINE_CHARACTERS } from "./jsonl.js";
@@ -319,7 +320,7 @@ export async function runHostSupervisor(launch) {
     const internalSecretPath = internal.secretPath ?? socketSecretPath(internalSocket);
     const internalSecret = process.platform === "win32" ? await createSocketSecret(internalSecretPath) : undefined;
     const clients = new ClientOccupancy(() => decider.update(currentActivity()));
-    const busySessions = new Map();
+    const runs = new SessionRunActivity();
     // Declared before anything that can reach `currentActivity()`. A client accepted during startup
     // asks for the activity snapshot, and a `const` read before its initializer runs is a
     // ReferenceError that fails the connection - which is how a successor's first `open_session`
@@ -461,37 +462,13 @@ export async function runHostSupervisor(launch) {
                 unhealthySince: observerLink.unhealthySince(),
                 now: Date.now(),
                 unknownGraceMs: decider.idleExitMs,
-                observedBusy: countBusySessions(),
+                observedBusy: runs.busySessions,
             }),
         };
     }
-    function countBusySessions() {
-        let busy = 0;
-        for (const count of busySessions.values())
-            if (count > 0)
-                busy++;
-        return busy;
-    }
     function observeHostEvent(line) {
-        let event;
-        try {
-            event = JSON.parse(line);
-        }
-        catch {
-            return;
-        }
-        if (typeof event !== "object" || event === null)
-            return;
-        const { type, sessionId } = event;
-        if (typeof sessionId !== "string")
-            return;
-        if (type === "agent_start")
-            busySessions.set(sessionId, (busySessions.get(sessionId) ?? 0) + 1);
-        else if (type === "agent_settled")
-            busySessions.set(sessionId, Math.max(0, (busySessions.get(sessionId) ?? 1) - 1));
-        else
-            return;
-        decider.update(currentActivity());
+        if (runs.observe(line))
+            decider.update(currentActivity());
     }
     async function shutdown(reason, exitCode) {
         // Single-flight: concurrent triggers (listener error, child exit, signals)

package/dist/modes/rpc/host-run-activity.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Which sessions have an agent run in progress, from the host child's events. A run emits
+ * `agent_start` on every loop iteration (a provider retry, a post-compaction continue, a follow-up)
+ * but `agent_settled` once, so this tracks runs, not starts: a repeated start for a running session
+ * changes nothing. A session that closes is dropped even if its settle never arrives (#2713).
+ */
+export declare class SessionRunActivity {
+    #private;
+    /** Applies one host event line; true when it is a run or session event the idle decision must re-read. */
+    observe(line: string): boolean;
+    get busySessions(): number;
+}
+//# sourceMappingURL=host-run-activity.d.ts.map

package/dist/modes/rpc/host-run-activity.js

@@ -0,0 +1,39 @@
+/**
+ * Which sessions have an agent run in progress, from the host child's events. A run emits
+ * `agent_start` on every loop iteration (a provider retry, a post-compaction continue, a follow-up)
+ * but `agent_settled` once, so this tracks runs, not starts: a repeated start for a running session
+ * changes nothing. A session that closes is dropped even if its settle never arrives (#2713).
+ */
+export class SessionRunActivity {
+    #running = new Set();
+    /** Applies one host event line; true when it is a run or session event the idle decision must re-read. */
+    observe(line) {
+        const event = parseHostEvent(line);
+        if (event === undefined)
+            return false;
+        if (event.type === "agent_start")
+            this.#running.add(event.sessionId);
+        else if (event.type === "agent_settled" || event.type === "session_closed")
+            this.#running.delete(event.sessionId);
+        else
+            return false;
+        return true;
+    }
+    get busySessions() {
+        return this.#running.size;
+    }
+}
+function parseHostEvent(line) {
+    let event;
+    try {
+        event = JSON.parse(line);
+    }
+    catch {
+        return undefined;
+    }
+    if (typeof event !== "object" || event === null)
+        return undefined;
+    const { type, sessionId } = event;
+    return typeof sessionId === "string" ? { type, sessionId } : undefined;
+}
+//# sourceMappingURL=host-run-activity.js.map

package/dist/modes/rpc/rpc-types.d.ts

@@ -1319,6 +1319,9 @@ export type RpcExtensionUIRequest = {
     title: string;
     options: string[];
     timeout?: number;
+    /** The tool call this dialog approves, when it is a permission request. */
+    toolCallId?: string;
+    parentToolCallId?: string;
 } | {
     type: "extension_ui_request";
     id: string;
@@ -1333,6 +1336,8 @@ export type RpcExtensionUIRequest = {
     title: string;
     placeholder?: string;
     timeout?: number;
+    toolCallId?: string;
+    parentToolCallId?: string;
 } | {
     type: "extension_ui_request";
     id: string;

package/docs/rpc.md

@@ -3562,6 +3562,19 @@ Prompt the user to choose from a list. Dialog methods with a `timeout` field inc
 
 Expected response: `extension_ui_response` with `value` (the selected option string) or `cancelled: true`.
 
+A permission prompt (title `Permission required: <permission>`) also carries `toolCallId`, the id of the tool call it approves, and `parentToolCallId` when another tool (for example a codemode script) issued that call. Clients bind the prompt to that call by id: the engine raises the prompts for every call of a message before any of them runs, so the order of `tool_execution_start` events does not say which call a prompt belongs to. The `input` that follows a "Deny with feedback" choice carries the same fields.
+
+```json
+{
+  "type": "extension_ui_request",
+  "id": "uuid-3",
+  "method": "select",
+  "title": "Permission required: read\n\nPath: /project/a.txt\n\nPatterns:\n  - /project/a.txt",
+  "options": ["Allow once", "Allow always", "Deny", "Deny with feedback"],
+  "toolCallId": "call-a"
+}
+```
+
 #### confirm
 
 Prompt the user for yes/no confirmation.

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@code-yeongyu/senpi",
-	"version": "2026.10.7",
+	"version": "2026.10.9",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"type": "module",
 	"piConfig": {
@@ -57,9 +57,9 @@
 	},
 	"dependencies": {
 		"@earendil-works/chord": "0.99.1",
-		"@earendil-works/pi-agent-core": "npm:@code-yeongyu/senpi-agent-core@2026.10.7",
-		"@earendil-works/pi-ai": "npm:@code-yeongyu/senpi-ai@2026.10.7",
-		"@earendil-works/pi-tui": "npm:@code-yeongyu/senpi-tui@2026.10.7",
+		"@earendil-works/pi-agent-core": "npm:@code-yeongyu/senpi-agent-core@2026.10.9",
+		"@earendil-works/pi-ai": "npm:@code-yeongyu/senpi-ai@2026.10.9",
+		"@earendil-works/pi-tui": "npm:@code-yeongyu/senpi-tui@2026.10.9",
 		"@silvia-odwyer/photon-node": "0.3.4",
 		"chalk": "6.0.0",
 		"cross-spawn": "7.0.6",
@@ -76,10 +76,10 @@
 		"typebox": "1.3.34",
 		"undici": "8.10.2",
 		"yaml": "2.9.1",
-		"@anthropic-ai/claude-agent-sdk": "0.3.288",
+		"@anthropic-ai/claude-agent-sdk": "0.3.289",
 		"@anthropic-ai/sdk": "0.127.0",
-		"@code-yeongyu/senpi-codemode": "2026.10.7",
-		"@earendil-works/pi-pty": "npm:@code-yeongyu/senpi-pty@2026.10.7",
+		"@code-yeongyu/senpi-codemode": "2026.10.9",
+		"@earendil-works/pi-pty": "npm:@code-yeongyu/senpi-pty@2026.10.9",
 		"@modelcontextprotocol/sdk": "1.30.0",
 		"@mozilla/readability": "0.6.0",
 		"linkedom": "0.18.13",