@code-yeongyu/senpi 2026.11.10-3 → 2026.11.11

package/dist/core/retry-fallback/credential-recovery.js

@@ -29,4 +29,28 @@ export async function releaseOnCredentialChange(state, original, deps, unusable)
         trigger: "sign-in",
     });
 }
+/**
+ * A billing pin a usage limit caused holds only until the reset that limit stated: the account serves again
+ * then, so the pin and the original's cooldown, unusable mark and circuit are released and the existing
+ * revert path tries it once, with no re-login (senpi#4085). A pin with no stated reset (an empty credit
+ * balance) still holds until a sign-in. A still-spent original falls back and pins again.
+ */
+export function releaseOnLimitReset(state, original, deps, unusable) {
+    if (!state.pinnedByBilling || state.pinnedUntil === undefined)
+        return;
+    if (deps.cooldowns.wallClock() < state.pinnedUntil)
+        return;
+    state.pinnedByBilling = false;
+    state.pinnedUntil = undefined;
+    state.pinned = state.pinnedByRefusal;
+    const selector = formatSelector(original);
+    deps.cooldowns.clearModel(selector);
+    unusable.clear(original);
+    deps.circuits?.close(selector);
+    deps.logger.info("credential_recovery_released", {
+        chainKey: state.chainKey,
+        originalSelector: state.originalSelector,
+        trigger: "limit-reset",
+    });
+}
 //# sourceMappingURL=credential-recovery.js.map

package/dist/core/retry-fallback/settings.d.ts

@@ -33,11 +33,14 @@ export interface ResolvedRetryFallbackSettings {
  * follows Fable 5 whichever provider serves it - the builtin Anthropic provider, the
  * Anthropic Subscription extension, a gateway, or Bedrock.
  *
- * The ladder never leaves the Anthropic Opus family. The previous shipped default was
- * removed because it led with cross-family rungs (`k3`, `kimi-k3`), which moved a Claude
- * session onto another vendor mid-turn and could rank a guaranteed-refusal OAuth lane
- * first; a same-family step-down carries neither problem. There is still deliberately no
- * wildcard lane.
+ * The ladder never leaves Anthropic. The previous shipped default was removed because it
+ * led with cross-family rungs (`k3`, `kimi-k3`), which moved a Claude session onto another
+ * vendor mid-turn and could rank a guaranteed-refusal OAuth lane first; an Anthropic-only
+ * ladder carries neither problem. There is still deliberately no wildcard lane.
+ *
+ * Opus 5.5 steps to Fable 5.2 before Opus 5: Anthropic meters Opus on its own quota window,
+ * so a rate limit on Opus 5.5 also holds every other Opus rung on that account or gateway
+ * pool (senpi#6385).
  *
  * Rungs stay on current-generation Opus: a Claude session must never step down to
  * `claude-opus-4-8` or `claude-opus-4-6` (senpi#3727).

package/dist/core/retry-fallback/settings.js

@@ -4,11 +4,14 @@
  * follows Fable 5 whichever provider serves it - the builtin Anthropic provider, the
  * Anthropic Subscription extension, a gateway, or Bedrock.
  *
- * The ladder never leaves the Anthropic Opus family. The previous shipped default was
- * removed because it led with cross-family rungs (`k3`, `kimi-k3`), which moved a Claude
- * session onto another vendor mid-turn and could rank a guaranteed-refusal OAuth lane
- * first; a same-family step-down carries neither problem. There is still deliberately no
- * wildcard lane.
+ * The ladder never leaves Anthropic. The previous shipped default was removed because it
+ * led with cross-family rungs (`k3`, `kimi-k3`), which moved a Claude session onto another
+ * vendor mid-turn and could rank a guaranteed-refusal OAuth lane first; an Anthropic-only
+ * ladder carries neither problem. There is still deliberately no wildcard lane.
+ *
+ * Opus 5.5 steps to Fable 5.2 before Opus 5: Anthropic meters Opus on its own quota window,
+ * so a rate limit on Opus 5.5 also holds every other Opus rung on that account or gateway
+ * pool (senpi#6385).
  *
  * Rungs stay on current-generation Opus: a Claude session must never step down to
  * `claude-opus-4-8` or `claude-opus-4-6` (senpi#3727).
@@ -18,7 +21,7 @@ export const DEFAULT_FALLBACK_CHAINS = {
     "claude-fable-5-2": ["claude-opus-5-5", "claude-opus-5"],
     "claude-fable-5-1": ["claude-opus-5-5", "claude-opus-5"],
     "claude-fable-5": ["claude-opus-5-5", "claude-opus-5"],
-    "claude-opus-5-5": ["claude-opus-5"],
+    "claude-opus-5-5": ["claude-fable-5-2", "claude-opus-5"],
 };
 function cloneDefaultFallbackChains() {
     const chains = {};

package/dist/modes/rpc/delegation-declaration.js

@@ -54,7 +54,7 @@ export function samePrincipal(a, b) {
 function parseRoles(value) {
     if (value === undefined)
         return undefined;
-    const invalid = "roles holds each of interactive_user, task_parent at most once";
+    const invalid = "roles holds each of interactive_user, task_parent, peer_agent at most once";
     if (!Array.isArray(value))
         return invalid;
     const roles = new Set();

package/dist/modes/rpc/host-gc-evidence.d.ts

@@ -1,5 +1,5 @@
 import { type HostDaemonDirectory } from "./host-daemon-paths.ts";
-export type EndpointInUse = "live_generation" | "live_claim" | "reachable";
+export type EndpointInUse = "live_generation" | "live_claim" | "reachable" | "credential_unavailable";
 export type SocketSilence = "socket_refused" | "socket_absent";
 /**
  * The three-part test, in the order its answers are reported: (a) no generation pidfile names a live

package/dist/modes/rpc/host-gc-evidence.js

@@ -33,12 +33,17 @@ export async function endpointInUse(paths, socket) {
             return { inUse: "live_claim" };
     }
     const silence = await socketSilence(socket);
+    if (silence === "credential_unavailable")
+        return { inUse: silence };
     if (silence === undefined)
         return { inUse: "reachable" };
     // A successor mid-handoff listens on `<socket>.next-<gen>` before it registers anywhere.
     const successors = (await socketSiblings(socket)).filter((name) => name.startsWith(`${basename(socket)}.next-`) && !isBindScratchName(name));
     for (const successor of successors) {
-        if ((await socketSilence(join(dirname(socket), successor))) === undefined)
+        const successorSilence = await socketSilence(join(dirname(socket), successor));
+        if (successorSilence === "credential_unavailable")
+            return { inUse: successorSilence };
+        if (successorSilence === undefined)
             return { inUse: "reachable" };
     }
     return { inUse: undefined, silence };
@@ -101,10 +106,11 @@ async function recordIsLive(record) {
 async function socketSilence(socket) {
     let secret;
     if (process.platform === "win32") {
-        // The pipe name includes the secret; without one no client can reach the pipe either.
+        // The pipe name includes the secret, so without a readable one nothing proves the pipe silent: a
+        // live host may still serve it under the key whose file was lost (sisyphuslabs/omo-desktop-app#4199).
         secret = await readSocketSecret(socketSecretPath(socket)).catch(() => undefined);
         if (secret === undefined)
-            return "socket_absent";
+            return "credential_unavailable";
     }
     return new Promise((resolveProbe) => {
         const connection = createConnection(resolveSocketTransportAddress(socket, process.platform, secret));

package/dist/modes/rpc/host-gc.js

@@ -14,6 +14,7 @@
  *     live_generation   a generation pidfile (any, the pointer's included) names a live process
  *     live_claim        a session-path claim in `reservations/` has a live owner
  *     reachable         the socket (or a `.next-*` successor bind) did not refuse the connection
+ *     credential_unavailable  win32: the socket secret cannot be read, so its pipe cannot be proven silent
  *     locked            the ensure lock was not free within 2 s
  *     legacy_layout     the agent dir predates layout 2; its flat files belong to a legacy host
  *     unknown_identity  nothing in the directory names its socket, so its lock cannot be taken
@@ -94,7 +95,9 @@ export async function gcEndpoint(socket, dir, options) {
     try {
         await options._test?.afterLockAcquired?.(socket);
         const evidence = await endpointInUse(hostDaemonDirectoryPaths(dir), socket);
-        if (evidence.inUse === "live_claim" || (evidence.inUse !== undefined && options.staleEngine === undefined)) {
+        if (evidence.inUse === "live_claim" ||
+            evidence.inUse === "credential_unavailable" ||
+            (evidence.inUse !== undefined && options.staleEngine === undefined)) {
             return { removed: false, reason: evidence.inUse };
         }
         if (evidence.inUse !== undefined)

package/dist/modes/rpc/rpc-session-state-types.d.ts

@@ -74,6 +74,8 @@ export interface RpcProviderAccount {
         model: string;
         outcome: "ok" | "failed";
         reason?: string;
+        message?: string;
+        status?: number;
         at: number;
     };
     /** `needs_sign_in`: the account must sign in again before it is used. */

package/dist/modes/rpc/session-attachment-gate.js

@@ -68,6 +68,9 @@ export function attachmentGate(host, command) {
         return undefined;
     if (host.sessionsByConnection.get(owner)?.has(command.sessionId))
         return undefined;
+    // senpi#6305: the forwarder's peer lane delivers an agent's message without ever attaching; only its admit passes.
+    if (command.type === "admit_external_message" && host.connectionRoles.grantedByForwarder(owner, "peer_agent"))
+        return undefined;
     if (process.env.SENPI_RPC_REQUIRE_ATTACH === "1")
         return error(command.id, command.type, "session_not_attached", {
             reason: "this connection is not attached to that session",

package/dist/private-fd-startup-fillers.d.ts

@@ -22,8 +22,8 @@ export declare function releaseStartupFillers(child: {
  * them, see `withStartupPipe`) and removes their list from the hand-off, so a process this one re-executes or
  * spawns never closes a descriptor that is not a filler. A slot the #4749 private table names is that
  * channel's, never a filler, and stays open. A table that does not decode (the `unparseable` marker included)
- * cannot prove any slot free of a channel, so no filler is closed. Called first by every entry that can
- * receive a hand-off.
+ * cannot prove any slot free of a channel, so no filler is closed. A slot that no longer holds its filler is
+ * the runtime's own and stays open (`inheritedFillerCheck`). Called first by every entry that can receive a hand-off.
  */
 export declare function releaseInheritedStartupFillers(env: NodeJS.ProcessEnv): void;
 //# sourceMappingURL=private-fd-startup-fillers.d.ts.map

package/dist/private-fd-startup-fillers.js

@@ -3,7 +3,7 @@
  * the release of the ones this process inherited. Side-effect free and never imports `private-fds.ts`: the
  * startup stub releases its fillers before that module adopts the table at import.
  */
-import { closeSync } from "node:fs";
+import { closeSync, fstatSync } from "node:fs";
 import { HOST_STARTUP_EVENTS_ENV } from "./modes/rpc/host-identity-env.js";
 import { encodeStartupHandOff, parseStartupHandOff, STARTUP_EVENT_FD } from "./modes/rpc/host-startup-wire.js";
 import { decodePrivateFdTable, PRIVATE_FDS_TABLE_ENV } from "./private-fd-table.js";
@@ -53,13 +53,42 @@ function namedPrivateSlots(encoded) {
                 slots.add(fd);
     return slots;
 }
+function statOf(fd) {
+    try {
+        return fstatSync(fd);
+    }
+    catch {
+        return undefined;
+    }
+}
+const sameFile = (a, b) => a.dev === b.dev && a.ino === b.ino;
+/**
+ * Whether a listed slot still holds the filler the spawn put there. On POSIX a "pipe" slot is an AF_UNIX socketpair
+ * end under Node and Bun, and neither runtime holds a socket of its own this early; the startup pipe the same spawn
+ * placed at `STARTUP_EVENT_FD` must still be there too. A process that replaced its image between the spawn and this
+ * entry lost both, because Bun marks every inherited descriptor from 4 up close-on-exec at startup, and its runtime
+ * reuses the numbers: the compiled launcher's trust exec left Bun's own copies of stdout and stderr at 5 and 6, and
+ * closing them by number failed the host's first stderr write with EBADF (senpi#6282). Windows keeps the plain list.
+ */
+function inheritedFillerCheck() {
+    if (process.platform === "win32")
+        return () => true;
+    const startup = statOf(STARTUP_EVENT_FD);
+    if (!startup?.isSocket())
+        return () => false;
+    const kept = [startup, ...[0, 1, 2].map(statOf).filter((stat) => stat !== undefined)];
+    return (slot) => {
+        const stat = statOf(slot);
+        return stat !== undefined && stat.isSocket() && !kept.some((other) => sameFile(stat, other));
+    };
+}
 /**
  * Closes the filler pipes this process inherited (they only kept libuv from aborting the spawn that created
  * them, see `withStartupPipe`) and removes their list from the hand-off, so a process this one re-executes or
  * spawns never closes a descriptor that is not a filler. A slot the #4749 private table names is that
  * channel's, never a filler, and stays open. A table that does not decode (the `unparseable` marker included)
- * cannot prove any slot free of a channel, so no filler is closed. Called first by every entry that can
- * receive a hand-off.
+ * cannot prove any slot free of a channel, so no filler is closed. A slot that no longer holds its filler is
+ * the runtime's own and stays open (`inheritedFillerCheck`). Called first by every entry that can receive a hand-off.
  */
 export function releaseInheritedStartupFillers(env) {
     const handOff = parseStartupHandOff(env[HOST_STARTUP_EVENTS_ENV]);
@@ -67,8 +96,9 @@ export function releaseInheritedStartupFillers(env) {
         return;
     const privateSlots = namedPrivateSlots(env[PRIVATE_FDS_TABLE_ENV]);
     if (privateSlots) {
+        const inherited = inheritedFillerCheck();
         for (const slot of handOff.fillers) {
-            if (privateSlots.has(slot))
+            if (privateSlots.has(slot) || !inherited(slot))
                 continue;
             try {
                 closeSync(slot);

package/docs/rpc.md

@@ -2263,7 +2263,8 @@ which prints the bare socket path).
   `reason` is `socket_refused` or `socket_absent`. A sibling that is a directory is not unlinked: it stays and
   the removed entry lists it as `skipped: [{ path, type: "directory" }]`. Because the directory goes last, a
   removal that fails part-way leaves the endpoint listed for the next gc. Everything else is kept with its
-  reason: `live_generation`, `live_claim`, `reachable`, `locked` (an ensure held the lock for 2 s),
+  reason: `live_generation`, `live_claim`, `reachable`, `credential_unavailable` (Windows: the socket secret
+  is missing or invalid, so the pipe it names cannot be proven silent), `locked` (an ensure held the lock for 2 s),
   `legacy_layout` (a flat directory without `layout.json` - a legacy host's, never touched), `unknown_identity`
   (nothing names the socket, so its lock cannot be taken), or `failed` (reading the evidence or removing threw;
   the entry carries `error`) - and a `failed` endpoint never stops gc from going on to the others.

package/docs/settings.md

@@ -332,7 +332,7 @@ Keep `retry.provider.maxRetries` at `0` unless provider-level retries are explic
 
 #### Model fallback chains
 
-`retry.fallbackChains` maps a primary-model selector to an ordered list of fallback selectors. A selector is `provider/model` with an optional `:thinking-level` suffix, or a bare `model` id that applies to that model vendor's own providers - for example `anthropic-subscription` and `anthropic` for Claude, `chatgpt-subscription` and `openai` for GPT, `google` and `google-vertex` for Gemini. A bare selector never expands onto a reseller, gateway, cloud re-host or custom provider that also serves the model; name one as `provider/model` to use it. A bare id from a vendor senpi does not know stays on the provider the session is already using. Within the vendor's providers, those holding an OAuth credential are preferred, then a fixed precedence order. Senpi ships bare default chains for `claude-fable-5-2`, `claude-fable-5-1` and `claude-fable-5` - `claude-opus-5-5`, then `claude-opus-5` - and for `claude-opus-5-5` - `claude-opus-5` - with no thinking level of their own, so a shipped rung inherits the session's thinking level (clamped to what the model supports), so Fable 5.2, Fable 5.1, Fable 5 and Opus 5.5 keep a fallback chain whichever provider serves them, and a fallback never leaves the Anthropic family; set a key to `[]` to opt out entirely, or set one `provider/claude-fable-5-1` key to override just that provider. For example, this switches Fable 5.1 to Kimi K3 at `max` thinking when an eligible failure occurs:
+`retry.fallbackChains` maps a primary-model selector to an ordered list of fallback selectors. A selector is `provider/model` with an optional `:thinking-level` suffix, or a bare `model` id that applies to that model vendor's own providers - for example `anthropic-subscription` and `anthropic` for Claude, `chatgpt-subscription` and `openai` for GPT, `google` and `google-vertex` for Gemini. A bare selector never expands onto a reseller, gateway, cloud re-host or custom provider that also serves the model; name one as `provider/model` to use it. A bare id from a vendor senpi does not know stays on the provider the session is already using. Within the vendor's providers, those holding an OAuth credential are preferred, then a fixed precedence order. Senpi ships bare default chains for `claude-fable-5-2`, `claude-fable-5-1` and `claude-fable-5` - `claude-opus-5-5`, then `claude-opus-5` - and for `claude-opus-5-5` - `claude-fable-5-2`, then `claude-opus-5`, because a rate limit on one Opus model holds the whole Opus quota - with no thinking level of their own, so a shipped rung inherits the session's thinking level (clamped to what the model supports), so Fable 5.2, Fable 5.1, Fable 5 and Opus 5.5 keep a fallback chain whichever provider serves them, and a fallback never leaves the Anthropic family; set a key to `[]` to opt out entirely, or set one `provider/claude-fable-5-1` key to override just that provider. For example, this switches Fable 5.1 to Kimi K3 at `max` thinking when an eligible failure occurs:
 
 ```json
 {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@code-yeongyu/senpi",
-	"version": "2026.11.10-3",
+	"version": "2026.11.11",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"type": "module",
 	"piConfig": {
@@ -92,9 +92,9 @@
 	},
 	"dependencies": {
 		"@earendil-works/chord": "0.99.1",
-		"@earendil-works/pi-agent-core": "npm:@code-yeongyu/senpi-agent-core@2026.11.10-3",
-		"@earendil-works/pi-ai": "npm:@code-yeongyu/senpi-ai@2026.11.10-3",
-		"@earendil-works/pi-tui": "npm:@code-yeongyu/senpi-tui@2026.11.10-3",
+		"@earendil-works/pi-agent-core": "npm:@code-yeongyu/senpi-agent-core@2026.11.11",
+		"@earendil-works/pi-ai": "npm:@code-yeongyu/senpi-ai@2026.11.11",
+		"@earendil-works/pi-tui": "npm:@code-yeongyu/senpi-tui@2026.11.11",
 		"@silvia-odwyer/photon-node": "0.3.4",
 		"ajv": "8.20.0",
 		"chalk": "6.0.0",
@@ -115,8 +115,8 @@
 		"yaml": "2.9.1",
 		"@anthropic-ai/claude-agent-sdk": "0.3.321",
 		"@anthropic-ai/sdk": "0.127.0",
-		"@code-yeongyu/senpi-codemode": "2026.11.10-3",
-		"@earendil-works/pi-pty": "npm:@code-yeongyu/senpi-pty@2026.11.10-3",
+		"@code-yeongyu/senpi-codemode": "2026.11.11",
+		"@earendil-works/pi-pty": "npm:@code-yeongyu/senpi-pty@2026.11.11",
 		"@modelcontextprotocol/sdk": "1.32.1",
 		"@mozilla/readability": "0.6.0",
 		"linkedom": "0.18.13",