@code-yeongyu/senpi 2026.11.2-3 → 2026.11.3-1

package/dist/modes/rpc/connection-roles.d.ts

@@ -1,3 +1,4 @@
+import { type RpcRemoteOrigin } from "./remote-origin.ts";
 /**
  * Connection roles (senpi#3811): the capabilities that say who a connection speaks for, which is what
  * authority checks read. A role belongs to one connection, never to a session: a shared host serves every
@@ -16,12 +17,19 @@ export declare function roleConnection(connectionId: string | undefined): string
 export declare const CONNECTION_ROLE_FIXED = "connection_role_fixed: interactive_user and task_parent cannot change after they are declared";
 export declare class ConnectionRoles {
     private readonly declared;
+    private readonly origins;
     /** Records the roles a `set_client_info` carries; false when this connection already declared other roles. */
     declare(connectionId: string, capabilities: readonly string[]): boolean;
     /** The roles this connection explicitly declared, or undefined while it has declared none (no id = a stdio client). */
     rolesOf(connectionId: string | undefined): readonly string[] | undefined;
     /** Takes a declaration made elsewhere (the host, for a worker isolate) unless this connection already declared. */
     adopt(connectionId: string, roles: readonly string[]): void;
+    /** Whether `origin` may be declared for this connection: none yet, or the same one again (senpi#5475). */
+    acceptsOrigin(connectionId: string, origin: RpcRemoteOrigin): boolean;
+    /** Records the remote device a connection speaks for; call only after `acceptsOrigin` allowed it. */
+    declareOrigin(connectionId: string, origin: RpcRemoteOrigin): void;
+    /** The remote device this connection declared it speaks for, or undefined for a local connection. */
+    originOf(connectionId: string | undefined): RpcRemoteOrigin | undefined;
     has(connectionId: string | undefined, role: string): boolean;
     release(connectionId: string): void;
     /** Forgets every connection, for a worker isolate whose session ends. */

package/dist/modes/rpc/connection-roles.js

@@ -1,4 +1,5 @@
 import { INTERACTIVE_USER_CAPABILITY, TASK_PARENT_CAPABILITY } from "./custom-capability.js";
+import { sameRemoteOrigin } from "./remote-origin.js";
 /**
  * Connection roles (senpi#3811): the capabilities that say who a connection speaks for, which is what
  * authority checks read. A role belongs to one connection, never to a session: a shared host serves every
@@ -20,6 +21,7 @@ export const CONNECTION_ROLE_FIXED = "connection_role_fixed: interactive_user an
 export class ConnectionRoles {
     constructor() {
         this.declared = new Map();
+        this.origins = new Map();
     }
     /** Records the roles a `set_client_info` carries; false when this connection already declared other roles. */
     declare(connectionId, capabilities) {
@@ -39,15 +41,31 @@ export class ConnectionRoles {
         if (!this.declared.has(connectionId))
             this.declared.set(connectionId, [...roles]);
     }
+    /** Whether `origin` may be declared for this connection: none yet, or the same one again (senpi#5475). */
+    acceptsOrigin(connectionId, origin) {
+        const prior = this.origins.get(connectionId);
+        return prior === undefined || sameRemoteOrigin(prior, origin);
+    }
+    /** Records the remote device a connection speaks for; call only after `acceptsOrigin` allowed it. */
+    declareOrigin(connectionId, origin) {
+        if (this.acceptsOrigin(connectionId, origin))
+            this.origins.set(connectionId, origin);
+    }
+    /** The remote device this connection declared it speaks for, or undefined for a local connection. */
+    originOf(connectionId) {
+        return this.origins.get(roleConnection(connectionId));
+    }
     has(connectionId, role) {
         return this.declared.get(roleConnection(connectionId))?.includes(role) ?? false;
     }
     release(connectionId) {
         this.declared.delete(connectionId);
+        this.origins.delete(connectionId);
     }
     /** Forgets every connection, for a worker isolate whose session ends. */
     clear() {
         this.declared.clear();
+        this.origins.clear();
     }
 }
 //# sourceMappingURL=connection-roles.js.map

package/dist/modes/rpc/method-classes-schema-session.d.ts

@@ -923,6 +923,10 @@ export declare const SESSION_RECORD_SCHEMAS: {
     } & {
         readonly width: Type.TInteger;
         readonly capabilities: Type.TOptional<Type.TArray<Type.TString>>;
+        readonly remoteOrigin: Type.TOptional<Type.TObject<{
+            deviceId: Type.TString;
+            deviceName: Type.TOptional<Type.TString>;
+        }>>;
     }>;
 };
 //# sourceMappingURL=method-classes-schema-session.d.ts.map

package/dist/modes/rpc/method-classes-schema-session.js

@@ -198,6 +198,7 @@ const SURFACE_AND_ACCOUNT_SCHEMAS = {
     set_client_info: session("set_client_info", {
         width: Type.Integer({ minimum: 1, maximum: 100_000 }),
         capabilities: Opt(Strings),
+        remoteOrigin: Opt(Type.Object({ deviceId: Id, deviceName: OptId }, { additionalProperties: false })),
     }),
 };
 export const SESSION_RECORD_SCHEMAS = {

package/dist/modes/rpc/method-classes-schema.d.ts

@@ -1268,6 +1268,10 @@ export declare const RPC_INBOUND_SCHEMAS: {
     } & {
         readonly width: import("typebox").TInteger;
         readonly capabilities: import("typebox").TOptional<import("typebox").TArray<import("typebox").TString>>;
+        readonly remoteOrigin: import("typebox").TOptional<import("typebox").TObject<{
+            deviceId: import("typebox").TString;
+            deviceName: import("typebox").TOptional<import("typebox").TString>;
+        }>>;
     }>;
 };
 export type RpcInboundValidation = {

package/dist/modes/rpc/protocol-identity.js

@@ -19,6 +19,7 @@ import { parseArgs, resolveSessionRuntime } from "../../cli/args.js";
 import { getAgentDir } from "../../config.js";
 import { engineBuildIdentity } from "../../core/engine-build-identity.js";
 import { HOST_GENERATION_ENV, HOST_INSTANCE_ID_ENV } from "./host-identity-env.js";
+import { RPC_METHOD_CLASSES_DIGEST, RPC_METHOD_CLASSES_VERSION } from "./method-classes.js";
 export { HOST_GENERATION_ENV, HOST_INSTANCE_ID_ENV };
 /** Identity of THIS host process, fixed for its lifetime. */
 const INSTANCE_ID = resolveInstanceId(process.env[HOST_INSTANCE_ID_ENV]);
@@ -69,6 +70,7 @@ export function protocolIdentity(agentDir = resolve(getAgentDir())) {
         engineOrdinal: build.ordinal,
         launch_profile: cachedProfile,
         agentDir,
+        method_classes: { version: RPC_METHOD_CLASSES_VERSION, digest: RPC_METHOD_CLASSES_DIGEST },
     };
 }
 //# sourceMappingURL=protocol-identity.js.map

package/dist/modes/rpc/remote-origin.d.ts

@@ -0,0 +1,31 @@
+/**
+ * The remote device a connection speaks for (senpi#5475, omo-relay-daemon#184 P5).
+ *
+ * A relay forwarder opens one engine connection per remote sender and declares, through its own
+ * `set_client_info`, which device that connection speaks for. Every dialog a command of that connection raises
+ * then carries the value as `remoteOrigin`, so the host's desktop and TUI can label it "Requested from <device>".
+ * A connection that never declared one is local, and its dialogs carry no `remoteOrigin`. The engine copies only
+ * this declared value, never a free-form client name. `set_client_info` is `connection_local` in the method-class
+ * table, so a forwarded record can never set or change it.
+ */
+export interface RpcRemoteOrigin {
+    readonly deviceId: string;
+    readonly deviceName?: string;
+}
+/**
+ * Validates a `set_client_info.remoteOrigin` against what the connection already declared, before anything of the
+ * declaration is committed: the origin to record (none when the field is absent), or the refusal to answer.
+ */
+export declare function remoteOriginDeclaration(value: unknown, accepts: (origin: RpcRemoteOrigin) => boolean): {
+    readonly origin: RpcRemoteOrigin | undefined;
+} | {
+    readonly refusal: string;
+};
+export declare function sameRemoteOrigin(a: RpcRemoteOrigin, b: RpcRemoteOrigin): boolean;
+export declare function remoteOriginField(origin: RpcRemoteOrigin | undefined): {
+    remoteOrigin?: RpcRemoteOrigin;
+};
+export declare function originField(origin: RpcRemoteOrigin | undefined): {
+    origin?: RpcRemoteOrigin;
+};
+//# sourceMappingURL=remote-origin.d.ts.map

package/dist/modes/rpc/remote-origin.js

@@ -0,0 +1,58 @@
+/**
+ * The remote device a connection speaks for (senpi#5475, omo-relay-daemon#184 P5).
+ *
+ * A relay forwarder opens one engine connection per remote sender and declares, through its own
+ * `set_client_info`, which device that connection speaks for. Every dialog a command of that connection raises
+ * then carries the value as `remoteOrigin`, so the host's desktop and TUI can label it "Requested from <device>".
+ * A connection that never declared one is local, and its dialogs carry no `remoteOrigin`. The engine copies only
+ * this declared value, never a free-form client name. `set_client_info` is `connection_local` in the method-class
+ * table, so a forwarded record can never set or change it.
+ */
+const MAX_DEVICE_ID_CHARACTERS = 256;
+const MAX_DEVICE_NAME_CHARACTERS = 256;
+const REMOTE_ORIGIN_INVALID = "remote_origin_invalid: remoteOrigin must be { deviceId: non-empty string, deviceName?: non-empty string }";
+const REMOTE_ORIGIN_FIXED = "remote_origin_fixed: a connection's remoteOrigin cannot change after it is declared";
+function boundedText(value, max) {
+    return typeof value === "string" && value.length > 0 && value.length <= max;
+}
+/** The declared origin, `undefined` when the field is absent, or `"invalid"` for any other shape. */
+function parseRemoteOrigin(value) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        return "invalid";
+    const deviceId = Reflect.get(value, "deviceId");
+    const deviceName = Reflect.get(value, "deviceName");
+    const keys = Object.keys(value);
+    if (keys.some((key) => key !== "deviceId" && key !== "deviceName"))
+        return "invalid";
+    if (!boundedText(deviceId, MAX_DEVICE_ID_CHARACTERS))
+        return "invalid";
+    if (deviceName === undefined)
+        return { deviceId };
+    if (!boundedText(deviceName, MAX_DEVICE_NAME_CHARACTERS))
+        return "invalid";
+    return { deviceId, deviceName };
+}
+/**
+ * Validates a `set_client_info.remoteOrigin` against what the connection already declared, before anything of the
+ * declaration is committed: the origin to record (none when the field is absent), or the refusal to answer.
+ */
+export function remoteOriginDeclaration(value, accepts) {
+    const origin = parseRemoteOrigin(value);
+    if (origin === "invalid")
+        return { refusal: REMOTE_ORIGIN_INVALID };
+    if (origin !== undefined && !accepts(origin))
+        return { refusal: REMOTE_ORIGIN_FIXED };
+    return { origin };
+}
+export function sameRemoteOrigin(a, b) {
+    return a.deviceId === b.deviceId && a.deviceName === b.deviceName;
+}
+export function remoteOriginField(origin) {
+    return origin === undefined ? {} : { remoteOrigin: origin };
+}
+export function originField(origin) {
+    return origin === undefined ? {} : { origin };
+}
+//# sourceMappingURL=remote-origin.js.map

package/dist/modes/rpc/rpc-protocol-info-types.d.ts

@@ -33,6 +33,14 @@ export interface RpcProtocolIdentity {
     readonly launch_profile: RpcLaunchProfile;
     /** Absolute agent directory this host reads and writes; a handoff from another agent dir is refused. */
     readonly agentDir: string;
+    /**
+     * The inbound method-class table this engine runs (`method-classes.ts`): a remote forwarder classifies with its
+     * own copy only while that copy's digest equals `digest`.
+     */
+    readonly method_classes: {
+        readonly version: number;
+        readonly digest: string;
+    };
 }
 export interface RpcProtocolInfo extends RpcProtocolIdentity {
     /** Present only on a public POSIX endpoint's answer to a challenge (wire contract v1.1). */

package/dist/modes/rpc/rpc-question-types.d.ts

@@ -1,3 +1,4 @@
+import type { RpcRemoteOrigin } from "./remote-origin.ts";
 /** One question in an RPC `question` UI request. Matches canonical QuestionRequest.questions. */
 export type RpcQuestionSpec = {
     id: string;
@@ -25,6 +26,8 @@ export type RpcQuestionUiRequest = {
     questions: RpcQuestionSpec[];
     /** The connection whose command raised the question, or `"agent"` when no connection's command was dispatching. */
     raisedBy?: string;
+    /** The remote device the raising connection speaks for (senpi#5475); absent for a local connection. */
+    remoteOrigin?: RpcRemoteOrigin;
     timeout: number;
     askedAtMs: number;
     deadlineAtMs: number;
@@ -35,6 +38,7 @@ export type RpcExtensionUIRequest = {
     type: "extension_ui_request";
     id: string;
     method: "select";
+    remoteOrigin?: RpcRemoteOrigin;
     /** Permanent MCP env grant; only a grant_select presentation may answer. */
     grantSelect?: boolean;
     title: string;
@@ -50,10 +54,12 @@ export type RpcExtensionUIRequest = {
     title: string;
     message: string;
     timeout?: number;
+    remoteOrigin?: RpcRemoteOrigin;
 } | {
     type: "extension_ui_request";
     id: string;
     method: "input";
+    remoteOrigin?: RpcRemoteOrigin;
     secret?: boolean;
     deadlineAtMs?: number;
     title: string;
@@ -67,6 +73,7 @@ export type RpcExtensionUIRequest = {
     method: "editor";
     title: string;
     prefill?: string;
+    remoteOrigin?: RpcRemoteOrigin;
 } | {
     type: "extension_ui_request";
     id: string;

package/dist/modes/rpc/rpc-question-types.js

@@ -1,5 +1,2 @@
-// ============================================================================
-// Extension UI Events (stdout)
-// ============================================================================
 export {};
 //# sourceMappingURL=rpc-question-types.js.map

package/dist/modes/rpc/rpc-session-command-types.d.ts

@@ -6,6 +6,7 @@ import type { ClientMessageIdentity } from "../../core/client-message-identity.t
 import type { SessionEntry } from "../../core/session-manager.ts";
 import type { ToolBarrierSpec } from "../../core/tool-barrier.ts";
 import type { RpcRecoveryCommand } from "./rpc-recovery-command-types.ts";
+import type { RpcRemoteOrigin } from "./remote-origin.ts";
 import type { RpcSessionModelEntry } from "./rpc-session-state-types.ts";
 export type RpcSessionCommand = {
     id?: string;
@@ -521,6 +522,8 @@ export type RpcSessionCommand = {
     type: "set_client_info";
     width: number;
     capabilities?: string[];
+    /** Declared by a relay forwarder for the remote device this connection speaks for (senpi#5475). */
+    remoteOrigin?: RpcRemoteOrigin;
 };
 /** What `steer`/`follow_up` do on an idle session: queue (default) or start a turn. */
 export type RpcWhenIdle = "queue" | "start";

package/dist/modes/rpc/session-registry.js

@@ -4,7 +4,7 @@ import { createRegistryWarm } from "./host-warm.js";
 import { refreshesSessionActivity } from "./session-command-activity.js";
 import { publishedSessionContext } from "./session-context-patch.js";
 import { attachLiveSession, markPathAttached } from "./session-live-attachment.js";
-import { syncRuntimeMetadata } from "./session-registry-claims.js";
+import { beginPendingClaim, syncRuntimeMetadata } from "./session-registry-claims.js";
 import { openRegistrySession } from "./session-registry-open.js";
 import { RpcSessionRegistryError, } from "./session-registry-types.js";
 import { beginSessionClose, closeMarkedSession, closeSession } from "./session-teardown.js";
@@ -44,8 +44,17 @@ export class RpcSessionRegistry {
                 return deleted;
             },
             releaseReservation: async (key) => {
-                await this.options.pathReservations?.release(key);
-                this.reservations.delete(key);
+                // Close may finish at its grace deadline before removal settles. Keep
+                // that work visible to reopen even after the closing entry is gone. A failed removal
+                // still gives the path back: no entry is left to ever release it later.
+                const settle = beginPendingClaim(this.pendingClaims, key);
+                try {
+                    await this.options.pathReservations?.release(key);
+                }
+                finally {
+                    this.reservations.delete(key);
+                    settle();
+                }
             },
             markDetached: (key) => this.options.pathReservations?.setAttached(key, false),
             now: () => this.now(),

package/dist/modes/rpc/session-worker-client.js

@@ -5,6 +5,7 @@ import { createWebViewBroker } from "../../core/webview/webview-broker.js";
 import { workerCapabilities } from "./worker-client-capabilities.js";
 import { captureAdmissionReply, withAdmissionReply } from "./compact-admission-reply.js";
 import { roleConnection } from "./connection-roles.js";
+import { originField } from "./remote-origin.js";
 import { answeredUiRequestId, isGrantSelectRequest, refusedExtensionUiResponse } from "./extension-ui-response.js";
 import { enqueueLegacyRecord } from "./legacy-record-depth.js";
 import { SessionAcceptanceLane } from "./session-acceptance-lane.js";
@@ -199,6 +200,7 @@ export class SessionWorkerClient {
                     command,
                     connection,
                     roles: options.connectionRoles?.rolesOf(roleConnection(connection)),
+                    ...originField(options.connectionRoles?.originOf(connection)),
                     ...(owner === undefined ? {} : { owner }),
                 });
             },

package/dist/modes/rpc/session-worker-protocol.d.ts

@@ -1,3 +1,4 @@
+import type { RpcRemoteOrigin } from "./remote-origin.ts";
 import type { BrowserEngine } from "../../core/browser-engine.ts";
 import type { McpFormInput, McpFormOutcome } from "../../core/mcp-form-types.ts";
 import type { RecoveryCarrier } from "../../core/session-recovery-identity.ts";
@@ -96,6 +97,8 @@ export type HostToSessionWorker = {
     command: object;
     connection?: string;
     roles?: readonly string[];
+    /** The remote device the connection declared on the host (senpi#5475); the isolate adopts it. */
+    origin?: RpcRemoteOrigin;
     /** The gate the host captured at ingress, before its first await (#4728). */
     owner?: ExtensionOwnerWire;
 }

package/dist/modes/rpc/session-worker.js

@@ -338,6 +338,8 @@ async function handle(message) {
                 throw new Error("session_closing");
             if (message.roles !== undefined)
                 connectionRoles.adopt(roleConnection(message.connection), message.roles);
+            if (message.origin !== undefined)
+                connectionRoles.declareOrigin(roleConnection(message.connection), message.origin);
             const activeBinding = binding;
             const run = () => activeBinding.handle(message.command);
             await workerAdmissionCommand(message, writer, issuedOwners, run);

package/docs/engine-socket/fixtures/admission-routes/c-baseline.json

@@ -43,9 +43,9 @@
 				"hint": "restart_from_catalog",
 				"retryAfterMs": 0
 			},
-			"length": 1000,
-			"digest": "131dc6a4a4e49873ce5d5d0330f81816be72c8a12c25dec7d14d4fe2c9cc32e4",
-			"bytes": "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"
+			"length": 1230,
+			"digest": "afc0506ef0b5e09ae70818c0b435b2fa633d3536d44f6e357950aad78d0102f9",
+			"bytes": "ewAiAGYAbwByAG0AYQB0ACIAOgAiAHMAZQBuAHAAaQAtAHIAZQBjAG8AdgBlAHIAeQAtAG0AYQBuAGkAZgBlAHMAdAAiACwAIgB2AGUAcgBzAGkAbwBuACIAOgAxACwAIgBzAG8AYwBrAGUAdABFAHAAbwBjAGgAIgA6AHsAIgBpAGQAIgA6ACIAcwBvAGMAawBlAHQALQAxACIAfQAsACIAYQBkAG0AaQBzAHMAaQBvAG4ASQBkACIAOgB7ACIAaQBkACIAOgAiAGcAbwBsAGQAZQBuAC0AYQAiAH0ALAAiAHIAbwB1AHQAZQBLAGkAbgBkACIAOgAiAG8AcgBkAGkAbgBhAHIAeQAiACwAIgBzAGUAcwBzAGkAbwBuACIAOgB7ACIAaQBkACIAOgAiAHIAcABjAC0AMQAiAH0ALAAiAHMAZQBzAHMAaQBvAG4ARQBwAG8AYwBoACIAOgB7ACIAaQBkACIAOgAiADAAMAAwADAAMAAwADAAMAAtADAAMAAwADAALQA0ADAAMAAwAC0AOAAwADAAMAAtADAAMAAwADAAMAAwADAAMAAwADAAMAAxACIAfQAsACIAZwBlAG4AZQByAGEAdABpAG8AbgAiADoAMQAsACIAcwBlAHEAdQBlAG4AYwBlACIAOgAwACwAIgBoAGkAcwB0AG8AcgB5AFYAZQByAHMAaQBvAG4AIgA6ADUALAAiAHQAbwBrAGUAbgAiADoAewAiAGkAZAAiADoAIgBzAG8AYwBrAGUAdAAtADEAOgAxACIAfQAsACIAbABlAGEAZgAiADoAewAiAGkAZAAiADoAIgAwADAAMAAwADAAMAAwADEAIgB9ACwAIgBhAGMAdABpAHYAZQBNAGUAcwBzAGEAZwBlACIAOgBuAHUAbABsACwAIgB0AHUAcgBuACIAOgBuAHUAbABsACwAIgBjAGgAZQBjAGsAcABvAGkAbgB0AEQAaQBnAGUAcwB0ACIAOgAiADEAYgBiAGMAYQBkADIAOQAzADIAMABmADIAMAA4ADQANwBhADUAMQA1AGMAYwA4ADUANAAwADYAMwBjAGQAYQAwAGQAZABhAGUAYQAyADAAYwBkAGMAZgBmADQANQBlAGIANgBiADUAZQAwAGUAOQBlAGUAMQA1AGYAYgBkADQAIgAsACIAYwBhAHQAYQBsAG8AZwBSAG8AbwB0ACIAOgAiAGMALQAwADAAMAAwADAAMAAwADAAMAAwADAAMAAwADAAMAAxACIALAAiAGMAYQB0AGEAbABvAGcAUgBvAG8AdABMAGUAbgBnAHQAaAAiADoAMwA5ADQANgAsACIAcgBlAHEAdQBpAHIAZQBkAEsAaQBuAGQAcwAiADoAWwAiAGEAYwB0AGkAdgBlACIALAAiAGMAYQBsAGwAcwAiACwAIgBkAGkAYQBsAG8AZwBzACIALAAiAGkAZABlAG4AdABpAHQAeQAiACwAIgBsAGkAZgBlAGMAeQBjAGwAZQAiACwAIgBvAHAAYQBxAHUAZQAiACwAIgByAHUAbgAiACwAIgBzAGUAdAB0AGwAZQBkACIALAAiAHMAbwB1AHIAYwBlACIALAAiAHQAcgBhAG4AcwBjAHIAaQBwAHQAIgBdAH0A"
 		}
 	}
 }

package/docs/engine-socket/fixtures/admission-routes/h-legacy.json

@@ -1,6 +1,6 @@
 {
 	"rpcClientRequests": "{\"type\":\"get_protocol_info\",\"id\":\"rpc-auth-protocol\",\"observe\":true,\"auth\":{\"client_nonce\":\"<public-nonce>\"}}\n{\"type\":\"set_client_info\",\"width\":100,\"capabilities\":[],\"id\":\"req_1\"}\n{\"type\":\"open_session\",\"cwd\":\"<root>/cwd\",\"sessionPath\":\"<root>/cwd/session.jsonl\",\"id\":\"req_2\"}\n{\"type\":\"get_entries\",\"sessionId\":\"rpc-1\",\"id\":\"req_3\"}\n{\"type\":\"close_session\",\"sessionId\":\"rpc-1\",\"id\":\"req_4\"}\n",
-	"rpcClientFrames": "{\"id\":\"rpc-auth-protocol\",\"type\":\"response\",\"command\":\"get_protocol_info\",\"success\":true,\"data\":{\"protocolVersion\":1,\"serverVersion\":\"<server-version>\",\"capabilities\":[\"<capabilities>\"],\"mode\":\"multi\",\"instanceId\":\"<uuid-1>\",\"generation\":0,\"engineVersion\":\"<server-version>\",\"engineOrdinal\":\"<engine-ordinal>\",\"launch_profile\":{\"profile_id\":\"ca7a49435f02009fdda5dac49d29408dcfeb1ab5374353784c5a9def467f5be1\",\"core\":{\"extensions\":[],\"multi_session\":false,\"session_runtime\":\"worker\"}},\"agentDir\":\"<root>/agent\",\"memory_pressure\":false,\"path_identity_resolver\":{\"state\":\"not_started\",\"detail\":null}}}\n{\"id\":\"req_1\",\"type\":\"response\",\"command\":\"set_client_info\",\"success\":true}\n{\"type\":\"queued\",\"for_request\":\"req_2\",\"position\":1,\"in_flight\":0}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-2>\",\"method\":\"setWidget\",\"widgetKey\":\"todo-sidebar\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-3>\",\"method\":\"setStatus\",\"statusKey\":\"anthropic-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-4>\",\"method\":\"setWidget\",\"widgetKey\":\"anthropic-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-5>\",\"method\":\"setStatus\",\"statusKey\":\"openai-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-6>\",\"method\":\"setWidget\",\"widgetKey\":\"openai-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-7>\",\"method\":\"setStatus\",\"statusKey\":\"monitors\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-8>\",\"method\":\"setStatus\",\"statusKey\":\"pi-websearch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-9>\",\"method\":\"setWidget\",\"widgetKey\":\"pi-websearch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-10>\",\"method\":\"setStatus\",\"statusKey\":\"pi-webfetch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-11>\",\"method\":\"setWidget\",\"widgetKey\":\"pi-webfetch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"entry_appended\",\"entry\":{\"type\":\"custom\",\"customType\":\"pi-rules.scan\",\"data\":{\"cwd\":\"<root>/cwd\",\"reason\":\"startup\"},\"startupBookkeeping\":true,\"id\":\"<entry-1>\",\"parentId\":\"<entry-2>\",\"timestamp\":\"2026-10-29T00:00:00.000Z\"},\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-12>\",\"method\":\"setStatus\",\"statusKey\":\"todo-waiting\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-13>\",\"method\":\"setStatus\",\"statusKey\":\"goal\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"session_opened\",\"sessionId\":\"rpc-1\",\"durableSessionId\":\"<uuid-14>\",\"sessionPath\":\"<root>/cwd/session.jsonl\",\"kind\":\"interactive\",\"cwd\":\"<root>/cwd\"}\n{\"id\":\"req_2\",\"type\":\"response\",\"command\":\"open_session\",\"success\":true,\"data\":{\"sessionId\":\"rpc-1\",\"state\":{\"answeredUiRequests\":[],\"paused\":false,\"pausedNoticeCount\":0,\"holds\":[],\"lifecycle\":{\"state\":\"done\",\"seq\":0,\"epoch\":0,\"epochOrigin\":\"automatic\",\"humanInputRevision\":0,\"selfSettleEligible\":true,\"restoring\":false,\"persisted\":false,\"runPaused\":false,\"since\":\"2026-10-29T00:00:00.000Z\",\"role\":\"root\",\"rootSessionId\":\"<uuid-14>\",\"activityRevision\":{\"instanceId\":\"<uuid-15>\",\"revision\":0},\"waitingOn\":{\"children\":0,\"background\":[],\"human\":[]},\"holds\":[],\"observedAt\":\"2026-10-29T00:00:00.000Z\"},\"pendingQuestions\":[],\"pendingDialogs\":[],\"model\":{\"id\":\"faux-a\",\"name\":\"faux-a\",\"api\":\"faux:fixture\",\"provider\":\"faux\",\"baseUrl\":\"http://localhost:0\",\"reasoning\":false,\"input\":[\"text\",\"image\"],\"cost\":{\"input\":0,\"output\":0,\"cacheRead\":0,\"cacheWrite\":0},\"contextWindow\":128000,\"maxTokens\":16384},\"pendingModelSwitch\":null,\"thinkingLevel\":\"off\",\"thinkingLevelSource\":\"default\",\"sessionModelThinkingLevels\":{\"faux/faux-a\":\"off\"},\"fastMode\":false,\"isStreaming\":false,\"pausedHeldInputCount\":0,\"runPaused\":false,\"pause\":{\"pauseSeq\":0,\"records\":[]},\"isCompacting\":false,\"retryAttempt\":0,\"isBashRunning\":false,\"steeringMode\":\"all\",\"followUpMode\":\"one-at-a-time\",\"sessionFile\":\"<root>/cwd/session.jsonl\",\"sessionId\":\"<uuid-14>\",\"cwd\":\"<root>/cwd\",\"projectTrusted\":false,\"entries\":[{\"type\":\"model_change\",\"id\":\"<entry-3>\",\"parentId\":null,\"timestamp\":\"2026-10-29T00:00:00.000Z\",\"provider\":\"faux\",\"modelId\":\"faux-a\"},{\"type\":\"thinking_level_change\",\"id\":\"<entry-2>\",\"parentId\":\"<entry-3>\",\"timestamp\":\"2026-10-29T00:00:00.000Z\",\"thinkingLevel\":\"off\",\"provider\":\"faux\",\"modelId\":\"faux-a\"},{\"type\":\"custom\",\"customType\":\"pi-rules.scan\",\"data\":{\"cwd\":\"<root>/cwd\",\"reason\":\"startup\"},\"startupBookkeeping\":true,\"id\":\"<entry-1>\",\"parentId\":\"<entry-2>\",\"timestamp\":\"2026-10-29T00:00:00.000Z\"}],\"steering\":[],\"followUp\":[],\"ordered\":[],\"autoCompactionEnabled\":true,\"messageCount\":0,\"pendingMessageCount\":0,\"usageTotals\":{\"input\":0,\"output\":0,\"cacheRead\":0,\"cacheWrite\":0,\"cost\":0},\"contextUsage\":{\"tokens\":0,\"contextWindow\":128000,\"percent\":0},\"favoriteModels\":[],\"scopedModels\":[]}},\"sessionId\":\"rpc-1\"}\n{\"id\":\"req_3\",\"type\":\"response\",\"command\":\"get_entries\",\"success\":true,\"data\":{\"entries\":[{\"type\":\"model_change\",\"id\":\"<entry-3>\",\"parentId\":null,\"timestamp\":\"2026-10-29T00:00:00.000Z\",\"provider\":\"faux\",\"modelId\":\"faux-a\"},{\"type\":\"thinking_level_change\",\"id\":\"<entry-2>\",\"parentId\":\"<entry-3>\",\"timestamp\":\"2026-10-29T00:00:00.000Z\",\"thinkingLevel\":\"off\",\"provider\":\"faux\",\"modelId\":\"faux-a\"},{\"type\":\"custom\",\"customType\":\"pi-rules.scan\",\"data\":{\"cwd\":\"<root>/cwd\",\"reason\":\"startup\"},\"startupBookkeeping\":true,\"id\":\"<entry-1>\",\"parentId\":\"<entry-2>\",\"timestamp\":\"2026-10-29T00:00:00.000Z\"}],\"leafId\":\"<entry-1>\"},\"sessionId\":\"rpc-1\"}\n{\"type\":\"session_closed\",\"sessionId\":\"rpc-1\",\"reason\":\"client_close\"}\n{\"id\":\"req_4\",\"type\":\"response\",\"command\":\"close_session\",\"success\":true,\"data\":{},\"sessionId\":\"rpc-1\"}\n",
+	"rpcClientFrames": "{\"id\":\"rpc-auth-protocol\",\"type\":\"response\",\"command\":\"get_protocol_info\",\"success\":true,\"data\":{\"protocolVersion\":1,\"serverVersion\":\"<server-version>\",\"capabilities\":[\"<capabilities>\"],\"mode\":\"multi\",\"instanceId\":\"<uuid-1>\",\"generation\":0,\"engineVersion\":\"<server-version>\",\"engineOrdinal\":\"<engine-ordinal>\",\"launch_profile\":{\"profile_id\":\"ca7a49435f02009fdda5dac49d29408dcfeb1ab5374353784c5a9def467f5be1\",\"core\":{\"extensions\":[],\"multi_session\":false,\"session_runtime\":\"worker\"}},\"agentDir\":\"<root>/agent\",\"method_classes\":{\"version\":1,\"digest\":\"71d6846585dffea212d60019e24296f5cd2882c0e8ff54b4d6e40cef3945b80a\"},\"memory_pressure\":false,\"path_identity_resolver\":{\"state\":\"not_started\",\"detail\":null}}}\n{\"id\":\"req_1\",\"type\":\"response\",\"command\":\"set_client_info\",\"success\":true}\n{\"type\":\"queued\",\"for_request\":\"req_2\",\"position\":1,\"in_flight\":0}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-2>\",\"method\":\"setWidget\",\"widgetKey\":\"todo-sidebar\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-3>\",\"method\":\"setStatus\",\"statusKey\":\"anthropic-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-4>\",\"method\":\"setWidget\",\"widgetKey\":\"anthropic-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-5>\",\"method\":\"setStatus\",\"statusKey\":\"openai-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-6>\",\"method\":\"setWidget\",\"widgetKey\":\"openai-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-7>\",\"method\":\"setStatus\",\"statusKey\":\"monitors\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-8>\",\"method\":\"setStatus\",\"statusKey\":\"pi-websearch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-9>\",\"method\":\"setWidget\",\"widgetKey\":\"pi-websearch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-10>\",\"method\":\"setStatus\",\"statusKey\":\"pi-webfetch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-11>\",\"method\":\"setWidget\",\"widgetKey\":\"pi-webfetch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"entry_appended\",\"entry\":{\"type\":\"custom\",\"customType\":\"pi-rules.scan\",\"data\":{\"cwd\":\"<root>/cwd\",\"reason\":\"startup\"},\"startupBookkeeping\":true,\"id\":\"<entry-1>\",\"parentId\":\"<entry-2>\",\"timestamp\":\"2026-10-29T00:00:00.000Z\"},\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-12>\",\"method\":\"setStatus\",\"statusKey\":\"todo-waiting\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-13>\",\"method\":\"setStatus\",\"statusKey\":\"goal\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"session_opened\",\"sessionId\":\"rpc-1\",\"durableSessionId\":\"<uuid-14>\",\"sessionPath\":\"<root>/cwd/session.jsonl\",\"kind\":\"interactive\",\"cwd\":\"<root>/cwd\"}\n{\"id\":\"req_2\",\"type\":\"response\",\"command\":\"open_session\",\"success\":true,\"data\":{\"sessionId\":\"rpc-1\",\"state\":{\"answeredUiRequests\":[],\"paused\":false,\"pausedNoticeCount\":0,\"holds\":[],\"lifecycle\":{\"state\":\"done\",\"seq\":0,\"epoch\":0,\"epochOrigin\":\"automatic\",\"humanInputRevision\":0,\"selfSettleEligible\":true,\"restoring\":false,\"persisted\":false,\"runPaused\":false,\"since\":\"2026-10-29T00:00:00.000Z\",\"role\":\"root\",\"rootSessionId\":\"<uuid-14>\",\"activityRevision\":{\"instanceId\":\"<uuid-15>\",\"revision\":0},\"waitingOn\":{\"children\":0,\"background\":[],\"human\":[]},\"holds\":[],\"observedAt\":\"2026-10-29T00:00:00.000Z\"},\"pendingQuestions\":[],\"pendingDialogs\":[],\"model\":{\"id\":\"faux-a\",\"name\":\"faux-a\",\"api\":\"faux:fixture\",\"provider\":\"faux\",\"baseUrl\":\"http://localhost:0\",\"reasoning\":false,\"input\":[\"text\",\"image\"],\"cost\":{\"input\":0,\"output\":0,\"cacheRead\":0,\"cacheWrite\":0},\"contextWindow\":128000,\"maxTokens\":16384},\"pendingModelSwitch\":null,\"thinkingLevel\":\"off\",\"thinkingLevelSource\":\"default\",\"sessionModelThinkingLevels\":{\"faux/faux-a\":\"off\"},\"fastMode\":false,\"isStreaming\":false,\"pausedHeldInputCount\":0,\"runPaused\":false,\"pause\":{\"pauseSeq\":0,\"records\":[]},\"isCompacting\":false,\"retryAttempt\":0,\"isBashRunning\":false,\"steeringMode\":\"all\",\"followUpMode\":\"one-at-a-time\",\"sessionFile\":\"<root>/cwd/session.jsonl\",\"sessionId\":\"<uuid-14>\",\"cwd\":\"<root>/cwd\",\"projectTrusted\":false,\"entries\":[{\"type\":\"model_change\",\"id\":\"<entry-3>\",\"parentId\":null,\"timestamp\":\"2026-10-29T00:00:00.000Z\",\"provider\":\"faux\",\"modelId\":\"faux-a\"},{\"type\":\"thinking_level_change\",\"id\":\"<entry-2>\",\"parentId\":\"<entry-3>\",\"timestamp\":\"2026-10-29T00:00:00.000Z\",\"thinkingLevel\":\"off\",\"provider\":\"faux\",\"modelId\":\"faux-a\"},{\"type\":\"custom\",\"customType\":\"pi-rules.scan\",\"data\":{\"cwd\":\"<root>/cwd\",\"reason\":\"startup\"},\"startupBookkeeping\":true,\"id\":\"<entry-1>\",\"parentId\":\"<entry-2>\",\"timestamp\":\"2026-10-29T00:00:00.000Z\"}],\"steering\":[],\"followUp\":[],\"ordered\":[],\"autoCompactionEnabled\":true,\"messageCount\":0,\"pendingMessageCount\":0,\"usageTotals\":{\"input\":0,\"output\":0,\"cacheRead\":0,\"cacheWrite\":0,\"cost\":0},\"contextUsage\":{\"tokens\":0,\"contextWindow\":128000,\"percent\":0},\"favoriteModels\":[],\"scopedModels\":[]}},\"sessionId\":\"rpc-1\"}\n{\"id\":\"req_3\",\"type\":\"response\",\"command\":\"get_entries\",\"success\":true,\"data\":{\"entries\":[{\"type\":\"model_change\",\"id\":\"<entry-3>\",\"parentId\":null,\"timestamp\":\"2026-10-29T00:00:00.000Z\",\"provider\":\"faux\",\"modelId\":\"faux-a\"},{\"type\":\"thinking_level_change\",\"id\":\"<entry-2>\",\"parentId\":\"<entry-3>\",\"timestamp\":\"2026-10-29T00:00:00.000Z\",\"thinkingLevel\":\"off\",\"provider\":\"faux\",\"modelId\":\"faux-a\"},{\"type\":\"custom\",\"customType\":\"pi-rules.scan\",\"data\":{\"cwd\":\"<root>/cwd\",\"reason\":\"startup\"},\"startupBookkeeping\":true,\"id\":\"<entry-1>\",\"parentId\":\"<entry-2>\",\"timestamp\":\"2026-10-29T00:00:00.000Z\"}],\"leafId\":\"<entry-1>\"},\"sessionId\":\"rpc-1\"}\n{\"type\":\"session_closed\",\"sessionId\":\"rpc-1\",\"reason\":\"client_close\"}\n{\"id\":\"req_4\",\"type\":\"response\",\"command\":\"close_session\",\"success\":true,\"data\":{},\"sessionId\":\"rpc-1\"}\n",
 	"subscribeRequests": "{\"type\":\"subscribe_sessions\",\"mirror\":\"all\",\"id\":\"subscriber-1\"}\n{\"type\":\"unsubscribe_sessions\",\"subscriptionId\":\"sub-1\",\"id\":\"subscriber-2\"}\n",
 	"subscribeFrames": "{\"id\":\"subscriber-1\",\"type\":\"response\",\"command\":\"subscribe_sessions\",\"success\":true,\"data\":{\"subscriptionId\":\"sub-1\",\"snapshot\":[],\"seq\":0,\"hostGeneration\":\"0\",\"hostInstanceId\":\"<uuid-1>\"}}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-2>\",\"method\":\"setWidget\",\"widgetKey\":\"todo-sidebar\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-3>\",\"method\":\"setStatus\",\"statusKey\":\"anthropic-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-4>\",\"method\":\"setWidget\",\"widgetKey\":\"anthropic-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-5>\",\"method\":\"setStatus\",\"statusKey\":\"openai-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-6>\",\"method\":\"setWidget\",\"widgetKey\":\"openai-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-7>\",\"method\":\"setStatus\",\"statusKey\":\"monitors\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-8>\",\"method\":\"setStatus\",\"statusKey\":\"pi-websearch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-9>\",\"method\":\"setWidget\",\"widgetKey\":\"pi-websearch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-10>\",\"method\":\"setStatus\",\"statusKey\":\"pi-webfetch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-11>\",\"method\":\"setWidget\",\"widgetKey\":\"pi-webfetch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"entry_appended\",\"entry\":{\"type\":\"custom\",\"customType\":\"pi-rules.scan\",\"data\":{\"cwd\":\"<root>/cwd\",\"reason\":\"startup\"},\"startupBookkeeping\":true,\"id\":\"<entry-1>\",\"parentId\":\"<entry-2>\",\"timestamp\":\"2026-10-29T00:00:00.000Z\"},\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-12>\",\"method\":\"setStatus\",\"statusKey\":\"todo-waiting\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-13>\",\"method\":\"setStatus\",\"statusKey\":\"goal\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"session_opened\",\"sessionId\":\"rpc-1\",\"durableSessionId\":\"<uuid-14>\",\"sessionPath\":\"<root>/cwd/session.jsonl\",\"kind\":\"interactive\",\"cwd\":\"<root>/cwd\"}\n{\"type\":\"session_status\",\"subscriptionId\":\"sub-1\",\"seq\":1,\"sessionId\":\"rpc-1\",\"status\":\"idle\",\"kind\":\"interactive\",\"cwd\":\"<root>/cwd\",\"attachments\":1,\"durableSessionId\":\"<uuid-14>\",\"sessionPath\":\"<root>/cwd/session.jsonl\",\"model\":{\"provider\":\"faux\",\"id\":\"faux-a\"},\"thinkingLevel\":\"off\",\"pendingQueue\":{\"steering\":0,\"followUp\":0},\"lastChange\":{\"at\":\"2026-10-29T00:00:00.000Z\",\"cause\":\"open\",\"by\":\"client\"}}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-15>\",\"method\":\"setStatus\",\"statusKey\":\"anthropic-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-16>\",\"method\":\"setWidget\",\"widgetKey\":\"anthropic-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-17>\",\"method\":\"setStatus\",\"statusKey\":\"openai-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-18>\",\"method\":\"setWidget\",\"widgetKey\":\"openai-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-19>\",\"method\":\"setStatus\",\"statusKey\":\"monitors\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-20>\",\"method\":\"setStatus\",\"statusKey\":\"pi-websearch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-21>\",\"method\":\"setWidget\",\"widgetKey\":\"pi-websearch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-22>\",\"method\":\"setStatus\",\"statusKey\":\"pi-webfetch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-23>\",\"method\":\"setWidget\",\"widgetKey\":\"pi-webfetch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-24>\",\"method\":\"setStatus\",\"statusKey\":\"loop\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"session_closed\",\"sessionId\":\"rpc-1\",\"reason\":\"client_close\"}\n{\"type\":\"session_status\",\"subscriptionId\":\"sub-1\",\"seq\":2,\"sessionId\":\"rpc-1\",\"status\":\"closed\",\"reason\":\"client_close\",\"kind\":\"interactive\",\"cwd\":\"<root>/cwd\",\"attachments\":1,\"durableSessionId\":\"<uuid-14>\",\"sessionPath\":\"<root>/cwd/session.jsonl\",\"model\":{\"provider\":\"faux\",\"id\":\"faux-a\"},\"thinkingLevel\":\"off\",\"pendingQueue\":{\"steering\":0,\"followUp\":0},\"lastChange\":{\"at\":\"2026-10-29T00:00:00.000Z\",\"cause\":\"close\",\"by\":\"client\"}}\n{\"id\":\"subscriber-2\",\"type\":\"response\",\"command\":\"unsubscribe_sessions\",\"success\":true}\n"
 }

package/docs/engine-socket/fixtures/admission-routes/i-reset-stream.json

@@ -96,9 +96,9 @@
 				"hint": "restart_from_catalog",
 				"retryAfterMs": 0
 			},
-			"length": 1002,
-			"digest": "da9d59636ee8bfe743c733edef30b3a6f92c420a3c2b77f89807124ec5f50f6e",
-			"bytes": "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"
+			"length": 1232,
+			"digest": "d78530753a0e52e3f73d2a204dc0cd2b77656535adb7b14da8b8176d53eac997",
+			"bytes": "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"
 		}
 	},
 	"refusals": {

package/docs/engine-socket/fixtures/recovery-manifest/index.json

@@ -0,0 +1,32 @@
+{
+	"contract": "CONTRACT-r6",
+	"section": "B1",
+	"rulings": [
+		"RULING-60",
+		"RULING-61",
+		"RULING-67",
+		"RULING-128"
+	],
+	"requiredKindsRule": "manifest.requiredKinds is the sorted (code-unit order), de-duplicated list of the catalog families this cut's root requires: its complete families only, partial ones excluded by the engine. The same list is the requiredKinds of the cut's families/families registry component, inside the content checkpointDigest covers.",
+	"clientRules": [
+		"Read requiredKinds verbatim; never derive it from a built-in family list.",
+		"A manifest without requiredKinds (an older engine) is refused as manifest_missing_required_kinds, never opened from a built-in list.",
+		"A kind the client does not know is refused as manifest_unknown_required_kind, never ignored.",
+		"A list that differs from the complete families of the digest-verified families/families component is refused as manifest_required_kinds_mismatch."
+	],
+	"normalization": "Random epoch ids become 00000000-0000-4000-8000-<n> and every 64-hex digest a stable alias, in order of first appearance; every other byte is the engine's.",
+	"regenerate": "SENPI_WRITE_RECOVERY_GOLDENS=1 npx vitest run test/suite/regressions/5397-required-kinds-golden.test.ts (packages/coding-agent, senpi repository)",
+	"cases": [
+		{
+			"caseId": "one-partial-family",
+			"file": "one-partial-family.json",
+			"kind": "manifest",
+			"contractIds": [
+				"R4.B1",
+				"RULING-61",
+				"RULING-67",
+				"RULING-128"
+			]
+		}
+	]
+}

package/docs/engine-socket/fixtures/recovery-manifest/one-partial-family.json

@@ -0,0 +1,118 @@
+{
+	"caseId": "one-partial-family",
+	"kind": "manifest",
+	"contractIds": [
+		"R4.B1",
+		"RULING-61",
+		"RULING-67",
+		"RULING-128"
+	],
+	"description": "A cut whose identity family is partial (one client correlation refused at the protocol depth limit): requiredKinds lists the nine complete families in code-unit order and leaves identity out; the cut's families/families registry carries the same list.",
+	"expected": {
+		"manifest": {
+			"format": "senpi-recovery-manifest",
+			"version": 1,
+			"socketEpoch": {
+				"id": "socket-1"
+			},
+			"admissionId": {
+				"id": "attach-1"
+			},
+			"routeKind": "ordinary",
+			"session": {
+				"id": "s"
+			},
+			"sessionEpoch": {
+				"id": "00000000-0000-4000-8000-000000000001"
+			},
+			"generation": 1,
+			"sequence": 3,
+			"historyVersion": 0,
+			"token": {
+				"id": "socket-1:1"
+			},
+			"leaf": null,
+			"activeMessage": {
+				"id": "message-1"
+			},
+			"turn": {
+				"id": "00000000-0000-4000-8000-000000000002"
+			},
+			"checkpointDigest": "1bbcad29320f20847a515cc854063cda0ddaea20cdcff45eb6b5e0e9ee15fbd4",
+			"catalogRoot": "c-0000000000000001",
+			"catalogRootLength": 2830,
+			"requiredKinds": [
+				"active",
+				"calls",
+				"dialogs",
+				"lifecycle",
+				"opaque",
+				"run",
+				"settled",
+				"source",
+				"transcript"
+			]
+		},
+		"families": {
+			"format": "senpi-recovery-families",
+			"version": 1,
+			"families": [
+				{
+					"family": "transcript",
+					"producer": "complete"
+				},
+				{
+					"family": "run",
+					"producer": "complete"
+				},
+				{
+					"family": "lifecycle",
+					"producer": "complete"
+				},
+				{
+					"family": "dialogs",
+					"producer": "complete"
+				},
+				{
+					"family": "opaque",
+					"producer": "complete"
+				},
+				{
+					"family": "active",
+					"producer": "complete"
+				},
+				{
+					"family": "calls",
+					"producer": "complete"
+				},
+				{
+					"family": "settled",
+					"producer": "complete"
+				},
+				{
+					"family": "identity",
+					"producer": "partial"
+				},
+				{
+					"family": "source",
+					"producer": "complete"
+				}
+			],
+			"requiredKinds": [
+				"active",
+				"calls",
+				"dialogs",
+				"lifecycle",
+				"opaque",
+				"run",
+				"settled",
+				"source",
+				"transcript"
+			],
+			"assembly": "incomplete",
+			"incomplete": [
+				"identity"
+			]
+		}
+	}
+}