@code-yeongyu/senpi 2026.11.6-2 → 2026.11.9-2

package/dist/modes/rpc/session-router-context.js

@@ -10,6 +10,7 @@ import { SessionAttachOrder } from "./session-attach-order.js";
 import { tearDownReleased } from "./session-router-close.js";
 import { routingIdOf } from "./session-router-errors.js";
 import { sweepIdleSessions } from "./session-router-occupancy.js";
+import { followRetainedRecord } from "./session-router-residency.js";
 import { registryStatusSource } from "./session-status-source.js";
 export class RouterContext {
     constructor(registry, writer, defaults, createBinding = createRpcSessionBinding, connectionOptions = {}, idle) {
@@ -74,6 +75,7 @@ export class RouterContext {
                 : { effectId: latest.effectId, kind: latest.kind, state: latest.state };
         });
         writer.afterRecord = (sessionId) => {
+            followRetainedRecord(this, sessionId);
             const session = this.registry.peek(sessionId)?.runtime?.session;
             if (session === undefined)
                 return;

package/dist/modes/rpc/session-router-occupancy.js

@@ -1,10 +1,8 @@
-import { recordHandoverParkedSession } from "./host-handover-parked.js";
-import { parkedEntryFromProfile } from "./host-handover-parked-open.js";
-import { hostInstanceId } from "./protocol-identity.js";
 import { readDrainVerdicts } from "./session-drain.js";
 import { holdUnattendedTurns } from "./session-drain-hold.js";
 import { forgetSessionOwnership } from "./session-router-attachments.js";
 import { finalizeClose, tryClaimClose } from "./session-router-close.js";
+import { recordRetainedSession } from "./session-router-residency.js";
 import { selectSweepEvictions } from "./session-sweep.js";
 const DRAIN_SWEEP_MS = 50;
 /**
@@ -128,14 +126,7 @@ export async function evictIdleSession(host, sessionId, reason) {
         parkedPath !== undefined &&
         retained?.retainOnDisconnect === true &&
         retained.sessionPath !== undefined) {
-        await recordHandoverParkedSession(host.handoverParkedDir, {
-            ...parkedEntryFromProfile({
-                sessionPath: retained.sessionPath,
-                contextOverlay: retained.contextOverlay,
-                ...(retained.durableSessionId !== undefined ? { durableSessionId: retained.durableSessionId } : {}),
-            }, retained.profile, Object.keys(host.defaults.hostContext ?? {})),
-            parkedBy: host.defaults.hostContext?.host_instance ?? hostInstanceId(),
-        }).catch((cause) => {
+        await recordRetainedSession(host, retained, retained.sessionPath, false).catch((cause) => {
             process.stderr.write(`senpi rpc handover park record ${sessionId} failed: ${String(cause)}\n`);
         });
     }

package/dist/modes/rpc/session-router-open-profile.js

@@ -70,6 +70,10 @@ export function validatedOpenProfile(host, command, options) {
                 : { host_socket: host.defaults.hostContext.host_socket }),
         },
         permissionPreset: command.permissionPreset ?? defaults?.permissionPreset,
+        // An embedder's host-level preset is the host default, never a client's choice (remote approval-mode rule).
+        ...(command.permissionPreset === undefined && defaults?.permissionPreset !== undefined
+            ? { permissionPresetSource: "host_default" }
+            : {}),
         creationModel: command.provider && command.modelId
             ? { provider: command.provider, modelId: command.modelId }
             : defaults?.creationModel,

package/dist/modes/rpc/session-router-open.d.ts

@@ -1,5 +1,5 @@
 import { type OpenAcceptance } from "./compact-open-admission.ts";
-import { type HandoverParkedEntry } from "./host-handover-parked.ts";
+import type { HandoverParkedEntry } from "./host-handover-parked.ts";
 import type { RpcCommand, RpcResponse } from "./rpc-types.ts";
 import type { RouterContext } from "./session-router-context.ts";
 export declare function openWithBarrier(host: RouterContext, command: Extract<RpcCommand, {

package/dist/modes/rpc/session-router-open.js

@@ -1,10 +1,10 @@
 import { buildRpcSessionState } from "./connection-handler.js";
 import { compactUpdatesEnabled } from "../../core/engine-socket-flag.js";
 import { startOpenTimer } from "../../core/open-timing.js";
+import { openReplyPermissionMode } from "../../core/permission-mode.js";
 import { compactOpen } from "./compact-open-admission.js";
 import { CompactAdmissionError } from "./compact-admission-error.js";
 import { runAdmissionProducer } from "./compact-admission-producer.js";
-import { clearHandoverParkedSession } from "./host-handover-parked.js";
 import { parkedOpenCommand } from "./host-handover-parked-open.js";
 import { sessionHeldCheck } from "./session-held.js";
 import { forgetSessionOwnership, releaseOwnedSession, releaseOwnerAttachment } from "./session-router-attachments.js";
@@ -13,6 +13,7 @@ import { code, detail, error } from "./session-router-errors.js";
 import { sweepDrain } from "./session-router-occupancy.js";
 import { invalidSpawnedBy, validatedOpenProfile } from "./session-router-open-profile.js";
 import { relocationConnection } from "./session-router-relocation.js";
+import { syncRetainedRecord } from "./session-router-residency.js";
 import { liveToolMediaScope, toolMediaPersister } from "./tool-media-store.js";
 export function openWithBarrier(host, command) {
     if (compactUpdatesEnabled() && command.admissionId !== undefined)
@@ -48,22 +49,6 @@ function openPhysicalWithBarrier(host, command, accept, signal) {
     // A late open's physical session is released by its admission (the accept/rollback path, 4272-admission-
     // abandonment), so the late response itself owns nothing to release here.
     const opened = signal === undefined ? start() : runAdmissionProducer(signal, start, async () => { });
-    // A manual reopen-by-path supersedes the handover auto-reopen for that session: clear its
-    // record entry, or a later generation would reopen a second copy (MEDIUM-1, senpi#3282 review).
-    // Cleared only after the open SUCCEEDS (MEDIUM-A): if the open fails - a session_path_in_use
-    // during a handover, or a bad profile - the entry must stay so a later generation can still
-    // reopen the session. open() resolves `undefined` on success (the response is written through
-    // the writer) and an RpcResponse only on failure, so success is `response === undefined`.
-    if (command.sessionPath !== undefined && host.handoverParkedDir !== undefined) {
-        const dir = host.handoverParkedDir;
-        const sessionPath = command.sessionPath;
-        void opened.then((response) => {
-            if (response === undefined)
-                void clearHandoverParkedSession(dir, sessionPath).catch(() => { });
-        }, () => {
-            // A rejection means the open failed before producing a response; the entry stays.
-        });
-    }
     return opened.finally(() => {
         resolveBarrier();
         opens.delete(barrier);
@@ -214,6 +199,9 @@ export async function open(host, command, owner, options) {
             releaseOwnerAttachment(host, owner, openedSession.sessionId);
             await releaseOwnedSession(host, openedSession.sessionId);
         }
+        // After the open SUCCEEDS (MEDIUM-A): a failed open keeps any record entry, so a later start
+        // still reopens that session.
+        await syncRetainedRecord(host, openedSession.sessionId, command.sessionPath);
         if (options?.accept) {
             return undefined;
         }
@@ -230,6 +218,7 @@ export async function open(host, command, owner, options) {
                 data: {
                     sessionId: opened.sessionId,
                     state: replyState,
+                    ...openReplyPermissionMode(replyState),
                     ...(opened.attached ? { attached: true } : {}),
                     ...(host.defaults.sessionPresence
                         ? { presence: host.defaults.sessionPresence.view(replyState.sessionId) }

package/dist/modes/rpc/session-router-residency.d.ts

@@ -0,0 +1,24 @@
+import type { RouterContext } from "./session-router-context.ts";
+import type { RpcSessionEntry } from "./session-registry-types.ts";
+/**
+ * Writes the record entry of a retained session under `sessionPath`, stamped with this host instance, and drops
+ * the entry it was recorded under before when the session has since moved to another transcript (senpi#6190).
+ * `resident` stamps the writing process: the session is open here. A park writes it unstamped.
+ */
+export declare function recordRetainedSession(host: RouterContext, retained: RpcSessionEntry, sessionPath: string, resident: boolean): Promise<void>;
+/**
+ * Brings the record in line with a session this host just opened or attached: a retained session is
+ * recorded as resident here, so a restart reopens it; a non-retained open by path supersedes any
+ * earlier park of that path, whose entry is cleared so no later start reopens a second copy
+ * (MEDIUM-1, senpi#3282 review). Runs only after the open succeeded, so a failed open keeps the entry.
+ */
+export declare function syncRetainedRecord(host: RouterContext, sessionId: string, requestedPath: string | undefined): Promise<void>;
+/**
+ * Called after every record a session publishes: a retained session whose transcript was switched (`new_session`,
+ * `switch_session`, a fork) moves its record entry to the new file at once, so a crash restores the transcript the
+ * session is on, never the one it left. A string compare until the path actually moves.
+ */
+export declare function followRetainedRecord(host: RouterContext, sessionId: string): void;
+/** An explicit close or reclaim ends the session for good: drop every key its record was written under. */
+export declare function clearRetainedRecord(host: RouterContext, entry: RpcSessionEntry | undefined): Promise<void>;
+//# sourceMappingURL=session-router-residency.d.ts.map

package/dist/modes/rpc/session-router-residency.js

@@ -0,0 +1,90 @@
+/**
+ * The retained-session record a host keeps for the NEXT start of its endpoint: one per-session
+ * entry in the handover-parked record (`host-handover-parked.ts`), written when a session becomes
+ * retained-and-resident here, moved when the session switches to another transcript, and rewritten
+ * when it parks. A restart on the same socket and agent dir - after a handoff, a crash, or a kill
+ * mid-turn - reopens every entry a previous process wrote by its session file, the way a TUI resumes
+ * from its session file, so `list_sessions` (and the relay that mirrors it) lists the session again
+ * without anyone re-opening it by hand.
+ */
+import { clearHandoverParkedSession, recordHandoverParkedSession } from "./host-handover-parked.js";
+import { parkedEntryFromProfile } from "./host-handover-parked-open.js";
+import { currentResidentWriter } from "./host-handover-resident-writer.js";
+import { hostInstanceId } from "./protocol-identity.js";
+const reportRecordFailure = (sessionId) => (cause) => {
+    process.stderr.write(`senpi rpc retained session record ${sessionId} failed: ${String(cause)}\n`);
+};
+/**
+ * Writes the record entry of a retained session under `sessionPath`, stamped with this host instance, and drops
+ * the entry it was recorded under before when the session has since moved to another transcript (senpi#6190).
+ * `resident` stamps the writing process: the session is open here. A park writes it unstamped.
+ */
+export async function recordRetainedSession(host, retained, sessionPath, resident) {
+    const dir = host.handoverParkedDir;
+    if (dir === undefined)
+        return;
+    const previous = retained.recordedPath;
+    retained.recordedPath = sessionPath;
+    if (previous !== undefined && previous !== sessionPath)
+        await clearHandoverParkedSession(dir, previous);
+    const durableSessionId = retained.runtime?.session.sessionId ?? retained.durableSessionId;
+    await recordHandoverParkedSession(dir, {
+        ...parkedEntryFromProfile({
+            sessionPath,
+            contextOverlay: retained.contextOverlay,
+            ...(durableSessionId !== undefined ? { durableSessionId } : {}),
+        }, retained.profile, Object.keys(host.defaults.hostContext ?? {})),
+        parkedBy: host.defaults.hostContext?.host_instance ?? hostInstanceId(),
+        ...(resident ? { residentWriter: currentResidentWriter() } : {}),
+    });
+}
+/** The session path a live entry writes now; a replacement moves it before the registry's metadata catches up. */
+const currentPath = (entry) => entry.runtime?.session.sessionFile ?? entry.sessionPath;
+/**
+ * Brings the record in line with a session this host just opened or attached: a retained session is
+ * recorded as resident here, so a restart reopens it; a non-retained open by path supersedes any
+ * earlier park of that path, whose entry is cleared so no later start reopens a second copy
+ * (MEDIUM-1, senpi#3282 review). Runs only after the open succeeded, so a failed open keeps the entry.
+ */
+export async function syncRetainedRecord(host, sessionId, requestedPath) {
+    const dir = host.handoverParkedDir;
+    if (dir === undefined)
+        return;
+    const entry = host.registry.peek(sessionId);
+    const sessionPath = entry === undefined ? undefined : currentPath(entry);
+    if (entry?.retainOnDisconnect === true && sessionPath !== undefined) {
+        await recordRetainedSession(host, entry, sessionPath, true).catch(reportRecordFailure(sessionId));
+        if (requestedPath === undefined || requestedPath === sessionPath)
+            return;
+    }
+    if (requestedPath !== undefined)
+        await clearHandoverParkedSession(dir, requestedPath).catch(() => { });
+}
+/**
+ * Called after every record a session publishes: a retained session whose transcript was switched (`new_session`,
+ * `switch_session`, a fork) moves its record entry to the new file at once, so a crash restores the transcript the
+ * session is on, never the one it left. A string compare until the path actually moves.
+ */
+export function followRetainedRecord(host, sessionId) {
+    if (host.handoverParkedDir === undefined)
+        return;
+    const entry = host.registry.peek(sessionId);
+    if (entry?.retainOnDisconnect !== true || entry.recordedPath === undefined || entry.state !== "open")
+        return;
+    const sessionPath = currentPath(entry);
+    if (sessionPath === undefined || sessionPath === entry.recordedPath)
+        return;
+    void recordRetainedSession(host, entry, sessionPath, true).catch(reportRecordFailure(sessionId));
+}
+/** An explicit close or reclaim ends the session for good: drop every key its record was written under. */
+export async function clearRetainedRecord(host, entry) {
+    const dir = host.handoverParkedDir;
+    if (dir === undefined || entry === undefined)
+        return;
+    const keys = new Set([entry.recordedPath, entry.sessionPath, entry.runtime?.session.sessionFile]);
+    entry.recordedPath = undefined;
+    for (const key of keys)
+        if (key !== undefined)
+            await clearHandoverParkedSession(dir, key).catch(() => { });
+}
+//# sourceMappingURL=session-router-residency.js.map

package/dist/modes/rpc/session-router-routing.js

@@ -24,6 +24,7 @@ import { answerListSessions, answerProtocolInfo, answerSubscriptionLimits } from
 import { acknowledgePrompt, otherRequestsSettled } from "./session-router-observation.js";
 import { sweepDrain } from "./session-router-occupancy.js";
 import { openWithBarrier } from "./session-router-open.js";
+import { syncRetainedRecord } from "./session-router-residency.js";
 import { answerSetSessionContext, answerSubscribeSessions, answerUnsubscribeSessions, notAttachedRefusal, } from "./session-status-commands.js";
 import { unloadSession } from "./session-unload.js";
 /**
@@ -245,7 +246,12 @@ export function setSessionContext(host, command) {
         return notAttachedRefusal(command);
     try {
         const entry = host.registry.getForCommand(command.sessionId, command.type);
-        return answerSetSessionContext(command, entry, host.writer.status);
+        const answered = answerSetSessionContext(command, entry, host.writer.status);
+        // The record carries the overlay a restart reopens the session with (a terminal task_status
+        // is not reopened at all), so it follows each accepted patch.
+        if (answered.success)
+            void syncRetainedRecord(host, command.sessionId, undefined);
+        return answered;
     }
     catch (cause) {
         return error(command.id, command.type, code(cause), detail(cause));

package/dist/modes/rpc/session-status.js

@@ -57,7 +57,10 @@ export function deriveSessionStatus(entry, runtime, fanout, terminal, cause) {
 export function terminalOfLifecycle(record) {
     const reason = typeof record.reason === "string" ? record.reason : undefined;
     if (record.type === "session_parked")
-        return { status: "unloaded", reason: reason === "unloaded" ? "unload_session" : "idle" };
+        return {
+            status: "unloaded",
+            reason: reason === "unloaded" ? "unload_session" : reason === "host_shutdown" ? "host_shutdown" : "idle",
+        };
     if (record.type !== "session_closed")
         return undefined;
     if (reason === "handoff_parked")

package/dist/modes/rpc/session-worker.js

@@ -278,6 +278,8 @@ async function handle(message) {
             const bound = roleConnection(message.connection);
             if (message.delegation !== undefined && connectionRoles.retain(bound, message.delegation).kind === "conflict")
                 throw new Error(DELEGATION_AUTHORITY_CONFLICT);
+            if (message.delegation !== undefined)
+                connectionRoles.noteCarriedDelegation(bound);
             if (message.roles !== undefined)
                 connectionRoles.adopt(bound, message.roles, message.delegation?.incarnation);
             const bindingEntry = entry;
@@ -336,6 +338,8 @@ async function handle(message) {
             const resolved = message.delegation === undefined ? undefined : connectionRoles.retain(connection, message.delegation);
             if (resolved?.kind !== "conflict" && message.roles !== undefined)
                 connectionRoles.adopt(connection, message.roles, message.delegation?.incarnation);
+            if (message.delegation !== undefined)
+                connectionRoles.noteCarriedDelegation(connection);
             if (message.origin !== undefined)
                 connectionRoles.declareOrigin(connection, message.origin);
             const activeBinding = binding;

package/dist/modes/rpc/tool-child/terminal-jobs.d.ts

@@ -14,6 +14,7 @@ export interface TerminalJobArgs {
     readonly defaultRows: number;
     readonly timeoutAction?: TimeoutAction;
     readonly redactSecretsInOutput?: boolean;
+    readonly backgroundAutoReapMinutes?: number;
 }
 /**
  * The handlers. The child's one terminal manager (shared by every terminal job of this child) is made on the first job,

package/dist/modes/rpc/tool-child/terminal-jobs.js

@@ -21,6 +21,7 @@ function parseArgs(value) {
         throw new ToolChildJobError("terminal_job_bad_args", "a terminal job needs cwd, toolCallId and env");
     const shellPath = field("shellPath");
     const timeoutAction = field("timeoutAction");
+    const autoReap = field("backgroundAutoReapMinutes");
     return {
         params: field("params"),
         toolCallId,
@@ -31,6 +32,7 @@ function parseArgs(value) {
         defaultRows: Number(field("defaultRows")) || 0,
         redactSecretsInOutput: field("redactSecretsInOutput") === true,
         ...(timeoutAction === "background" || timeoutAction === "kill" ? { timeoutAction } : {}),
+        ...(typeof autoReap === "number" && Number.isFinite(autoReap) ? { backgroundAutoReapMinutes: autoReap } : {}),
     };
 }
 function barrierFor(job) {
@@ -67,6 +69,9 @@ function exitSummary(id, runtime) {
             ? null
             : { exitCode: exit.exitCode, signal: exit.signal, cancelled: exit.cancelled, timedOut: exit.timedOut },
         output: output.length > NOTICE_TAIL_MAX_CHARS ? output.slice(output.length - NOTICE_TAIL_MAX_CHARS - 1) : output,
+        ...(runtime.autoReapedAfterMinutes === undefined
+            ? {}
+            : { autoReapedAfterMinutes: runtime.autoReapedAfterMinutes }),
     };
 }
 /**
@@ -87,8 +92,19 @@ export function createTerminalJobHandlers(injected) {
     const contextFor = (args, job) => ({
         manager: managerFor(job.generation),
         ...(args.timeoutAction === undefined ? {} : { timeoutAction: args.timeoutAction }),
-        onBackgroundStart: (id, description, startedAtMs) => tell(job, { event: "background_start", id, description, startedAtMs }),
+        ...(args.backgroundAutoReapMinutes === undefined
+            ? {}
+            : { backgroundAutoReapMinutes: args.backgroundAutoReapMinutes }),
+        onBackgroundStart: (id, description, startedAtMs, command, autoReapMinutes) => tell(job, {
+            event: "background_start",
+            id,
+            description,
+            startedAtMs,
+            ...(command === undefined ? {} : { command }),
+            ...(autoReapMinutes === undefined ? {} : { autoReapMinutes }),
+        }),
         onBackgroundExit: (id, runtime) => tell(job, exitSummary(id, runtime)),
+        onBackgroundReapFailed: (id, autoReapMinutes, reason) => tell(job, { event: "background_reap_failed", id, autoReapMinutes, reason }),
         cwd: args.cwd,
         ...(args.shellPath === undefined ? {} : { shellPath: args.shellPath }),
         defaultCols: args.defaultCols,

package/dist/modes/rpc/worker-session-registry.js

@@ -1,3 +1,4 @@
+import { clientNamedPreset, withClientPreset } from "../../core/permission-mode.js";
 import { outsideCommand } from "./command-authority.js";
 import { refreshesSessionActivity } from "./session-command-activity.js";
 import { publishedSessionContext } from "./session-context-patch.js";
@@ -163,7 +164,9 @@ export class WorkerSessionRegistry {
         return undefined;
     }
     async attach(owner, path, options, requested = { cwd: "" }) {
-        const { promptSurface, browserEngine, permissionPreset } = requested;
+        const { promptSurface, browserEngine } = requested;
+        // A host-default preset folded into a preset-less attach is not a client choice (see session-registry-attach.ts).
+        const permissionPreset = clientNamedPreset(requested);
         const entry = this.entries.get(owner);
         if (entry?.state !== "open" || !entry.worker?.bindingReady || entry.worker.snapshot?.sessionPath !== path)
             throw new RpcSessionRegistryError("session_path_in_use");
@@ -178,7 +181,7 @@ export class WorkerSessionRegistry {
         }
         // Sent even when the record already names it: only the worker sees its live session (senpi#2842).
         if (permissionPreset !== undefined) {
-            entry.profile = frozenProfile({ ...entry.profile, permissionPreset });
+            entry.profile = frozenProfile(withClientPreset(entry.profile, permissionPreset));
             await entry.worker.setPermissionPreset(permissionPreset);
         }
         const result = this.openResult(owner, entry);

package/docs/engine-socket/fixtures/admission-routes/h-legacy.json

@@ -1,6 +1,6 @@
 {
 	"rpcClientRequests": "{\"type\":\"get_protocol_info\",\"id\":\"rpc-auth-protocol\",\"observe\":true,\"auth\":{\"client_nonce\":\"<public-nonce>\"}}\n{\"type\":\"set_client_info\",\"width\":100,\"capabilities\":[],\"id\":\"req_1\"}\n{\"type\":\"open_session\",\"cwd\":\"<root>/cwd\",\"sessionPath\":\"<root>/cwd/session.jsonl\",\"id\":\"req_2\"}\n{\"type\":\"get_entries\",\"sessionId\":\"rpc-1\",\"id\":\"req_3\"}\n{\"type\":\"close_session\",\"sessionId\":\"rpc-1\",\"id\":\"req_4\"}\n",
-	"rpcClientFrames": "{\"id\":\"rpc-auth-protocol\",\"type\":\"response\",\"command\":\"get_protocol_info\",\"success\":true,\"data\":{\"protocolVersion\":1,\"serverVersion\":\"<server-version>\",\"capabilities\":[\"<capabilities>\"],\"mode\":\"multi\",\"instanceId\":\"<uuid-1>\",\"generation\":0,\"engineVersion\":\"<server-version>\",\"engineOrdinal\":\"<engine-ordinal>\",\"launch_profile\":{\"profile_id\":\"ca7a49435f02009fdda5dac49d29408dcfeb1ab5374353784c5a9def467f5be1\",\"core\":{\"extensions\":[],\"multi_session\":false,\"session_runtime\":\"worker\"}},\"agentDir\":\"<root>/agent\",\"method_classes\":{\"version\":1,\"digest\":\"3860136b2a1b07c20373ed361df07c045bd1e84fce001917e271ca0e4b903e63\",\"classes\":{\"get_protocol_info\":\"observe\",\"get_subscription_limits\":\"observe\",\"list_sessions\":\"observe\",\"list_hands\":\"observe\",\"get_state\":\"observe\",\"get_snapshot\":\"observe\",\"get_entries\":\"observe\",\"get_messages\":\"observe\",\"get_tree\":\"observe\",\"get_fork_messages\":\"observe\",\"get_last_assistant_text\":\"observe\",\"get_session_stats\":\"observe\",\"get_effect_status\":\"dynamic\",\"get_pending_inputs\":\"observe\",\"get_follow_up_messages\":\"observe\",\"get_steering_messages\":\"observe\",\"get_commands\":\"observe\",\"get_loaded_surfaces\":\"observe\",\"get_project_trust\":\"observe\",\"get_available_models\":\"observe\",\"get_available_thinking_levels\":\"observe\",\"get_model_thinking_level\":\"observe\",\"get_fast_mode\":\"observe\",\"get_media\":\"observe\",\"memory_report\":\"observe\",\"eval_cells.list\":\"observe\",\"eval_cells.peek\":\"observe\",\"prompt\":\"dynamic\",\"steer\":\"dynamic\",\"follow_up\":\"dynamic\",\"abort\":\"drive\",\"interrupt\":\"drive\",\"abort_retry\":\"drive\",\"abort_compaction\":\"drive\",\"abort_branch_summary\":\"drive\",\"compact\":\"drive\",\"clear_queue\":\"drive\",\"dequeue_message\":\"drive\",\"edit_queued_message\":\"drive\",\"hold_input\":\"drive\",\"withdraw_held_input\":\"drive\",\"append_user_message\":\"drive\",\"edit_user_message\":\"drive\",\"continue_from_leaf\":\"drive\",\"navigate_tree\":\"drive\",\"set_label\":\"drive\",\"set_session_name\":\"drive\",\"set_thinking_level\":\"dynamic\",\"set_model\":\"dynamic\",\"set_auto_compaction\":\"drive\",\"set_retry_fallback\":\"drive\",\"pause_for_run\":\"drive\",\"resume_for_run\":\"drive\",\"wake\":\"drive\",\"release_tool_barrier\":\"drive\",\"request_self_settle\":\"drive\",\"eval_cells.stop\":\"drive\",\"append_session_entry\":\"dynamic\",\"extension_ui_response\":\"answer\",\"extension_ui_progress\":\"answer\",\"new_session\":\"dynamic\",\"open_session\":\"dynamic\",\"resume_session\":\"thread\",\"fork\":\"thread\",\"clone\":\"thread\",\"close_session\":\"thread\",\"unload_session\":\"thread\",\"set_session_context\":\"thread\",\"attach_session\":\"thread\",\"select_hand\":\"device_admin\",\"bash\":\"device_admin\",\"abort_bash\":\"device_admin\",\"record_bash_result\":\"device_admin\",\"cleanup_bash_output\":\"device_admin\",\"extension_request\":\"device_admin\",\"reload\":\"device_admin\",\"check_reload_veto\":\"device_admin\",\"resolve_path\":\"device_admin\",\"login_start\":\"device_admin\",\"login_cancel\":\"device_admin\",\"login_api_key\":\"device_admin\",\"logout\":\"device_admin\",\"verify_api_key\":\"device_admin\",\"get_auth_providers\":\"device_admin\",\"get_provider_accounts\":\"device_admin\",\"account_order\":\"device_admin\",\"account_pin\":\"device_admin\",\"account_remove\":\"device_admin\",\"account_reset\":\"device_admin\",\"test_provider_account\":\"device_admin\",\"set_favorite_models\":\"device_admin\",\"set_scoped_models\":\"device_admin\",\"cycle_model\":\"device_admin\",\"cycle_thinking_level\":\"device_admin\",\"set_fast_mode\":\"device_admin\",\"set_steering_mode\":\"device_admin\",\"set_follow_up_mode\":\"device_admin\",\"set_auto_retry\":\"device_admin\",\"set_project_trust\":\"device_admin\",\"get_project_settings\":\"device_admin\",\"set_project_setting\":\"device_admin\",\"edit_assistant_message\":\"device_admin\",\"send_custom_message\":\"device_admin\",\"switch_session\":\"device_admin\",\"import_jsonl\":\"device_admin\",\"export_html\":\"device_admin\",\"export_jsonl\":\"device_admin\",\"set_client_info\":\"connection_local\",\"subscribe_sessions\":\"connection_local\",\"unsubscribe_sessions\":\"connection_local\",\"record_user_activity\":\"connection_local\",\"detach_connection\":\"connection_local\",\"release_session\":\"connection_local\",\"warm\":\"connection_local\",\"host_response\":\"connection_local\",\"release_attachment\":\"connection_local\",\"reclaim_session\":\"connection_local\",\"move_session\":\"connection_local\",\"get_recovery_page\":\"connection_local\",\"release_recovery\":\"connection_local\",\"cancel_attempt\":\"connection_local\",\"reset_stream\":\"connection_local\"},\"dynamic_versions\":{\"get_effect_status\":1,\"prompt\":1,\"steer\":1,\"follow_up\":1,\"set_thinking_level\":1,\"set_model\":1,\"append_session_entry\":1,\"new_session\":1,\"open_session\":2}},\"memory_pressure\":false,\"path_identity_resolver\":{\"state\":\"not_started\",\"detail\":null}}}\n{\"id\":\"req_1\",\"type\":\"response\",\"command\":\"set_client_info\",\"success\":true}\n{\"type\":\"queued\",\"for_request\":\"req_2\",\"position\":1,\"in_flight\":0}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-2>\",\"method\":\"setWidget\",\"widgetKey\":\"todo-sidebar\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-3>\",\"method\":\"setStatus\",\"statusKey\":\"anthropic-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-4>\",\"method\":\"setWidget\",\"widgetKey\":\"anthropic-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-5>\",\"method\":\"setStatus\",\"statusKey\":\"openai-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-6>\",\"method\":\"setWidget\",\"widgetKey\":\"openai-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-7>\",\"method\":\"setStatus\",\"statusKey\":\"monitors\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-8>\",\"method\":\"setStatus\",\"statusKey\":\"pi-websearch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-9>\",\"method\":\"setWidget\",\"widgetKey\":\"pi-websearch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-10>\",\"method\":\"setStatus\",\"statusKey\":\"pi-webfetch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-11>\",\"method\":\"setWidget\",\"widgetKey\":\"pi-webfetch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"entry_appended\",\"entry\":{\"type\":\"custom\",\"customType\":\"pi-rules.scan\",\"data\":{\"cwd\":\"<root>/cwd\",\"reason\":\"startup\"},\"startupBookkeeping\":true,\"id\":\"<entry-1>\",\"parentId\":\"<entry-2>\",\"timestamp\":\"2026-10-29T00:00:00.000Z\"},\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-12>\",\"method\":\"setStatus\",\"statusKey\":\"todo-waiting\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-13>\",\"method\":\"setStatus\",\"statusKey\":\"goal\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"session_opened\",\"sessionId\":\"rpc-1\",\"durableSessionId\":\"<uuid-14>\",\"sessionPath\":\"<root>/cwd/session.jsonl\",\"kind\":\"interactive\",\"cwd\":\"<root>/cwd\"}\n{\"id\":\"req_2\",\"type\":\"response\",\"command\":\"open_session\",\"success\":true,\"data\":{\"sessionId\":\"rpc-1\",\"state\":{\"answeredUiRequests\":[],\"paused\":false,\"pausedNoticeCount\":0,\"holds\":[],\"lifecycle\":{\"state\":\"done\",\"seq\":0,\"epoch\":0,\"epochOrigin\":\"automatic\",\"humanInputRevision\":0,\"selfSettleEligible\":true,\"restoring\":false,\"persisted\":false,\"runPaused\":false,\"since\":\"2026-10-29T00:00:00.000Z\",\"role\":\"root\",\"rootSessionId\":\"<uuid-14>\",\"activityRevision\":{\"instanceId\":\"<uuid-15>\",\"revision\":0},\"waitingOn\":{\"children\":0,\"background\":[],\"human\":[]},\"holds\":[],\"observedAt\":\"2026-10-29T00:00:00.000Z\"},\"pendingQuestions\":[],\"pendingDialogs\":[],\"model\":{\"id\":\"faux-a\",\"name\":\"faux-a\",\"api\":\"faux:fixture\",\"provider\":\"faux\",\"baseUrl\":\"http://localhost:0\",\"reasoning\":false,\"input\":[\"text\",\"image\"],\"cost\":{\"input\":0,\"output\":0,\"cacheRead\":0,\"cacheWrite\":0},\"contextWindow\":128000,\"maxTokens\":16384},\"pendingModelSwitch\":null,\"thinkingLevel\":\"off\",\"thinkingLevelSource\":\"default\",\"sessionModelThinkingLevels\":{\"faux/faux-a\":\"off\"},\"fastMode\":false,\"isStreaming\":false,\"pausedHeldInputCount\":0,\"runPaused\":false,\"pause\":{\"pauseSeq\":0,\"records\":[]},\"isCompacting\":false,\"retryAttempt\":0,\"isBashRunning\":false,\"steeringMode\":\"all\",\"followUpMode\":\"one-at-a-time\",\"sessionFile\":\"<root>/cwd/session.jsonl\",\"sessionId\":\"<uuid-14>\",\"cwd\":\"<root>/cwd\",\"projectTrusted\":false,\"entries\":[{\"type\":\"model_change\",\"id\":\"<entry-3>\",\"parentId\":null,\"timestamp\":\"2026-10-29T00:00:00.000Z\",\"provider\":\"faux\",\"modelId\":\"faux-a\"},{\"type\":\"thinking_level_change\",\"id\":\"<entry-2>\",\"parentId\":\"<entry-3>\",\"timestamp\":\"2026-10-29T00:00:00.000Z\",\"thinkingLevel\":\"off\",\"provider\":\"faux\",\"modelId\":\"faux-a\"},{\"type\":\"custom\",\"customType\":\"pi-rules.scan\",\"data\":{\"cwd\":\"<root>/cwd\",\"reason\":\"startup\"},\"startupBookkeeping\":true,\"id\":\"<entry-1>\",\"parentId\":\"<entry-2>\",\"timestamp\":\"2026-10-29T00:00:00.000Z\"}],\"steering\":[],\"followUp\":[],\"ordered\":[],\"autoCompactionEnabled\":true,\"messageCount\":0,\"pendingMessageCount\":0,\"usageTotals\":{\"input\":0,\"output\":0,\"cacheRead\":0,\"cacheWrite\":0,\"cost\":0},\"contextUsage\":{\"tokens\":0,\"contextWindow\":128000,\"percent\":0},\"favoriteModels\":[],\"scopedModels\":[]}},\"sessionId\":\"rpc-1\"}\n{\"id\":\"req_3\",\"type\":\"response\",\"command\":\"get_entries\",\"success\":true,\"data\":{\"entries\":[{\"type\":\"model_change\",\"id\":\"<entry-3>\",\"parentId\":null,\"timestamp\":\"2026-10-29T00:00:00.000Z\",\"provider\":\"faux\",\"modelId\":\"faux-a\"},{\"type\":\"thinking_level_change\",\"id\":\"<entry-2>\",\"parentId\":\"<entry-3>\",\"timestamp\":\"2026-10-29T00:00:00.000Z\",\"thinkingLevel\":\"off\",\"provider\":\"faux\",\"modelId\":\"faux-a\"},{\"type\":\"custom\",\"customType\":\"pi-rules.scan\",\"data\":{\"cwd\":\"<root>/cwd\",\"reason\":\"startup\"},\"startupBookkeeping\":true,\"id\":\"<entry-1>\",\"parentId\":\"<entry-2>\",\"timestamp\":\"2026-10-29T00:00:00.000Z\"}],\"leafId\":\"<entry-1>\"},\"sessionId\":\"rpc-1\"}\n{\"type\":\"session_closed\",\"sessionId\":\"rpc-1\",\"reason\":\"client_close\"}\n{\"id\":\"req_4\",\"type\":\"response\",\"command\":\"close_session\",\"success\":true,\"data\":{},\"sessionId\":\"rpc-1\"}\n",
+	"rpcClientFrames": "{\"id\":\"rpc-auth-protocol\",\"type\":\"response\",\"command\":\"get_protocol_info\",\"success\":true,\"data\":{\"protocolVersion\":1,\"serverVersion\":\"<server-version>\",\"capabilities\":[\"<capabilities>\"],\"mode\":\"multi\",\"instanceId\":\"<uuid-1>\",\"generation\":0,\"engineVersion\":\"<server-version>\",\"engineOrdinal\":\"<engine-ordinal>\",\"launch_profile\":{\"profile_id\":\"ca7a49435f02009fdda5dac49d29408dcfeb1ab5374353784c5a9def467f5be1\",\"core\":{\"extensions\":[],\"multi_session\":false,\"session_runtime\":\"worker\"}},\"agentDir\":\"<root>/agent\",\"method_classes\":{\"version\":1,\"digest\":\"7ea18de0fb5d28f89aabdc17cbaca72e973cdea7d5928fd82d91ccced025000e\",\"classes\":{\"get_protocol_info\":\"observe\",\"get_subscription_limits\":\"observe\",\"list_sessions\":\"observe\",\"list_hands\":\"observe\",\"get_state\":\"observe\",\"get_snapshot\":\"observe\",\"get_entries\":\"observe\",\"get_messages\":\"observe\",\"get_tree\":\"observe\",\"get_fork_messages\":\"observe\",\"get_last_assistant_text\":\"observe\",\"get_session_stats\":\"observe\",\"get_effect_status\":\"dynamic\",\"get_pending_inputs\":\"observe\",\"get_follow_up_messages\":\"observe\",\"get_steering_messages\":\"observe\",\"get_commands\":\"observe\",\"get_loaded_surfaces\":\"observe\",\"get_project_trust\":\"observe\",\"get_available_models\":\"observe\",\"get_available_thinking_levels\":\"observe\",\"get_model_thinking_level\":\"observe\",\"get_fast_mode\":\"observe\",\"get_media\":\"observe\",\"memory_report\":\"observe\",\"eval_cells.list\":\"observe\",\"eval_cells.peek\":\"observe\",\"prompt\":\"dynamic\",\"steer\":\"dynamic\",\"follow_up\":\"dynamic\",\"abort\":\"drive\",\"interrupt\":\"drive\",\"abort_retry\":\"drive\",\"abort_compaction\":\"drive\",\"abort_branch_summary\":\"drive\",\"compact\":\"drive\",\"clear_queue\":\"drive\",\"dequeue_message\":\"drive\",\"edit_queued_message\":\"drive\",\"hold_input\":\"drive\",\"withdraw_held_input\":\"drive\",\"append_user_message\":\"drive\",\"edit_user_message\":\"drive\",\"continue_from_leaf\":\"drive\",\"navigate_tree\":\"drive\",\"set_label\":\"drive\",\"set_session_name\":\"drive\",\"set_thinking_level\":\"dynamic\",\"set_model\":\"dynamic\",\"set_auto_compaction\":\"drive\",\"set_permission_preset\":\"device_admin\",\"set_retry_fallback\":\"drive\",\"pause_for_run\":\"drive\",\"resume_for_run\":\"drive\",\"wake\":\"drive\",\"admit_external_message\":\"drive\",\"release_tool_barrier\":\"drive\",\"request_self_settle\":\"drive\",\"eval_cells.stop\":\"drive\",\"append_session_entry\":\"dynamic\",\"extension_ui_response\":\"answer\",\"extension_ui_progress\":\"answer\",\"new_session\":\"dynamic\",\"open_session\":\"dynamic\",\"resume_session\":\"thread\",\"fork\":\"thread\",\"clone\":\"thread\",\"close_session\":\"thread\",\"unload_session\":\"thread\",\"set_session_context\":\"thread\",\"attach_session\":\"thread\",\"select_hand\":\"device_admin\",\"bash\":\"device_admin\",\"abort_bash\":\"device_admin\",\"record_bash_result\":\"device_admin\",\"cleanup_bash_output\":\"device_admin\",\"extension_request\":\"device_admin\",\"reload\":\"device_admin\",\"check_reload_veto\":\"device_admin\",\"resolve_path\":\"device_admin\",\"login_start\":\"device_admin\",\"login_cancel\":\"device_admin\",\"login_api_key\":\"device_admin\",\"logout\":\"device_admin\",\"verify_api_key\":\"device_admin\",\"get_auth_providers\":\"device_admin\",\"get_provider_accounts\":\"device_admin\",\"account_order\":\"device_admin\",\"account_pin\":\"device_admin\",\"account_remove\":\"device_admin\",\"account_reset\":\"device_admin\",\"test_provider_account\":\"device_admin\",\"set_favorite_models\":\"device_admin\",\"set_scoped_models\":\"device_admin\",\"cycle_model\":\"device_admin\",\"cycle_thinking_level\":\"device_admin\",\"set_fast_mode\":\"device_admin\",\"set_steering_mode\":\"device_admin\",\"set_follow_up_mode\":\"device_admin\",\"set_auto_retry\":\"device_admin\",\"set_project_trust\":\"device_admin\",\"get_project_settings\":\"device_admin\",\"set_project_setting\":\"device_admin\",\"edit_assistant_message\":\"device_admin\",\"send_custom_message\":\"device_admin\",\"switch_session\":\"device_admin\",\"import_jsonl\":\"device_admin\",\"export_html\":\"device_admin\",\"export_jsonl\":\"device_admin\",\"set_client_info\":\"connection_local\",\"subscribe_sessions\":\"connection_local\",\"unsubscribe_sessions\":\"connection_local\",\"record_user_activity\":\"connection_local\",\"detach_connection\":\"connection_local\",\"release_session\":\"connection_local\",\"warm\":\"connection_local\",\"host_response\":\"connection_local\",\"release_attachment\":\"connection_local\",\"reclaim_session\":\"connection_local\",\"move_session\":\"connection_local\",\"get_recovery_page\":\"connection_local\",\"release_recovery\":\"connection_local\",\"cancel_attempt\":\"connection_local\",\"reset_stream\":\"connection_local\"},\"dynamic_versions\":{\"get_effect_status\":1,\"prompt\":1,\"steer\":1,\"follow_up\":1,\"set_thinking_level\":1,\"set_model\":1,\"append_session_entry\":1,\"new_session\":1,\"open_session\":2}},\"memory_pressure\":false,\"path_identity_resolver\":{\"state\":\"not_started\",\"detail\":null}}}\n{\"id\":\"req_1\",\"type\":\"response\",\"command\":\"set_client_info\",\"success\":true}\n{\"type\":\"queued\",\"for_request\":\"req_2\",\"position\":1,\"in_flight\":0}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-2>\",\"method\":\"setWidget\",\"widgetKey\":\"todo-sidebar\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-3>\",\"method\":\"setStatus\",\"statusKey\":\"anthropic-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-4>\",\"method\":\"setWidget\",\"widgetKey\":\"anthropic-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-5>\",\"method\":\"setStatus\",\"statusKey\":\"openai-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-6>\",\"method\":\"setWidget\",\"widgetKey\":\"openai-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-7>\",\"method\":\"setStatus\",\"statusKey\":\"monitors\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-8>\",\"method\":\"setStatus\",\"statusKey\":\"pi-websearch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-9>\",\"method\":\"setWidget\",\"widgetKey\":\"pi-websearch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-10>\",\"method\":\"setStatus\",\"statusKey\":\"pi-webfetch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-11>\",\"method\":\"setWidget\",\"widgetKey\":\"pi-webfetch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"entry_appended\",\"entry\":{\"type\":\"custom\",\"customType\":\"pi-rules.scan\",\"data\":{\"cwd\":\"<root>/cwd\",\"reason\":\"startup\"},\"startupBookkeeping\":true,\"id\":\"<entry-1>\",\"parentId\":\"<entry-2>\",\"timestamp\":\"2026-10-29T00:00:00.000Z\"},\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-12>\",\"method\":\"setStatus\",\"statusKey\":\"todo-waiting\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-13>\",\"method\":\"setStatus\",\"statusKey\":\"goal\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"session_opened\",\"sessionId\":\"rpc-1\",\"durableSessionId\":\"<uuid-14>\",\"sessionPath\":\"<root>/cwd/session.jsonl\",\"kind\":\"interactive\",\"cwd\":\"<root>/cwd\"}\n{\"id\":\"req_2\",\"type\":\"response\",\"command\":\"open_session\",\"success\":true,\"data\":{\"sessionId\":\"rpc-1\",\"state\":{\"answeredUiRequests\":[],\"paused\":false,\"pausedNoticeCount\":0,\"holds\":[],\"lifecycle\":{\"state\":\"done\",\"seq\":0,\"epoch\":0,\"epochOrigin\":\"automatic\",\"humanInputRevision\":0,\"selfSettleEligible\":true,\"restoring\":false,\"persisted\":false,\"runPaused\":false,\"since\":\"2026-10-29T00:00:00.000Z\",\"role\":\"root\",\"rootSessionId\":\"<uuid-14>\",\"activityRevision\":{\"instanceId\":\"<uuid-15>\",\"revision\":0},\"waitingOn\":{\"children\":0,\"background\":[],\"human\":[]},\"holds\":[],\"observedAt\":\"2026-10-29T00:00:00.000Z\"},\"pendingQuestions\":[],\"pendingDialogs\":[],\"permissionPreset\":\"full-access\",\"permissionPresetSource\":\"host_default\",\"permissionPresetStatus\":\"applied\",\"effectivePermissionPreset\":\"full-access\",\"model\":{\"id\":\"faux-a\",\"name\":\"faux-a\",\"api\":\"faux:fixture\",\"provider\":\"faux\",\"baseUrl\":\"http://localhost:0\",\"reasoning\":false,\"input\":[\"text\",\"image\"],\"cost\":{\"input\":0,\"output\":0,\"cacheRead\":0,\"cacheWrite\":0},\"contextWindow\":128000,\"maxTokens\":16384},\"pendingModelSwitch\":null,\"thinkingLevel\":\"off\",\"thinkingLevelSource\":\"default\",\"sessionModelThinkingLevels\":{\"faux/faux-a\":\"off\"},\"fastMode\":false,\"isStreaming\":false,\"pausedHeldInputCount\":0,\"runPaused\":false,\"pause\":{\"pauseSeq\":0,\"records\":[]},\"isCompacting\":false,\"retryAttempt\":0,\"isBashRunning\":false,\"steeringMode\":\"all\",\"followUpMode\":\"one-at-a-time\",\"sessionFile\":\"<root>/cwd/session.jsonl\",\"sessionId\":\"<uuid-14>\",\"cwd\":\"<root>/cwd\",\"projectTrusted\":false,\"entries\":[{\"type\":\"model_change\",\"id\":\"<entry-3>\",\"parentId\":null,\"timestamp\":\"2026-10-29T00:00:00.000Z\",\"provider\":\"faux\",\"modelId\":\"faux-a\"},{\"type\":\"thinking_level_change\",\"id\":\"<entry-2>\",\"parentId\":\"<entry-3>\",\"timestamp\":\"2026-10-29T00:00:00.000Z\",\"thinkingLevel\":\"off\",\"provider\":\"faux\",\"modelId\":\"faux-a\"},{\"type\":\"custom\",\"customType\":\"pi-rules.scan\",\"data\":{\"cwd\":\"<root>/cwd\",\"reason\":\"startup\"},\"startupBookkeeping\":true,\"id\":\"<entry-1>\",\"parentId\":\"<entry-2>\",\"timestamp\":\"2026-10-29T00:00:00.000Z\"}],\"steering\":[],\"followUp\":[],\"ordered\":[],\"autoCompactionEnabled\":true,\"messageCount\":0,\"pendingMessageCount\":0,\"usageTotals\":{\"input\":0,\"output\":0,\"cacheRead\":0,\"cacheWrite\":0,\"cost\":0},\"contextUsage\":{\"tokens\":0,\"contextWindow\":128000,\"percent\":0},\"favoriteModels\":[],\"scopedModels\":[]},\"permissionPreset\":\"full-access\",\"permissionPresetSource\":\"host_default\",\"permissionPresetStatus\":\"applied\"},\"sessionId\":\"rpc-1\"}\n{\"id\":\"req_3\",\"type\":\"response\",\"command\":\"get_entries\",\"success\":true,\"data\":{\"entries\":[{\"type\":\"model_change\",\"id\":\"<entry-3>\",\"parentId\":null,\"timestamp\":\"2026-10-29T00:00:00.000Z\",\"provider\":\"faux\",\"modelId\":\"faux-a\"},{\"type\":\"thinking_level_change\",\"id\":\"<entry-2>\",\"parentId\":\"<entry-3>\",\"timestamp\":\"2026-10-29T00:00:00.000Z\",\"thinkingLevel\":\"off\",\"provider\":\"faux\",\"modelId\":\"faux-a\"},{\"type\":\"custom\",\"customType\":\"pi-rules.scan\",\"data\":{\"cwd\":\"<root>/cwd\",\"reason\":\"startup\"},\"startupBookkeeping\":true,\"id\":\"<entry-1>\",\"parentId\":\"<entry-2>\",\"timestamp\":\"2026-10-29T00:00:00.000Z\"}],\"leafId\":\"<entry-1>\"},\"sessionId\":\"rpc-1\"}\n{\"type\":\"session_closed\",\"sessionId\":\"rpc-1\",\"reason\":\"client_close\"}\n{\"id\":\"req_4\",\"type\":\"response\",\"command\":\"close_session\",\"success\":true,\"data\":{},\"sessionId\":\"rpc-1\"}\n",
 	"subscribeRequests": "{\"type\":\"subscribe_sessions\",\"mirror\":\"all\",\"id\":\"subscriber-1\"}\n{\"type\":\"unsubscribe_sessions\",\"subscriptionId\":\"sub-1\",\"id\":\"subscriber-2\"}\n",
 	"subscribeFrames": "{\"id\":\"subscriber-1\",\"type\":\"response\",\"command\":\"subscribe_sessions\",\"success\":true,\"data\":{\"subscriptionId\":\"sub-1\",\"snapshot\":[],\"seq\":0,\"hostGeneration\":\"0\",\"hostInstanceId\":\"<uuid-1>\"}}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-2>\",\"method\":\"setWidget\",\"widgetKey\":\"todo-sidebar\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-3>\",\"method\":\"setStatus\",\"statusKey\":\"anthropic-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-4>\",\"method\":\"setWidget\",\"widgetKey\":\"anthropic-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-5>\",\"method\":\"setStatus\",\"statusKey\":\"openai-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-6>\",\"method\":\"setWidget\",\"widgetKey\":\"openai-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-7>\",\"method\":\"setStatus\",\"statusKey\":\"monitors\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-8>\",\"method\":\"setStatus\",\"statusKey\":\"pi-websearch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-9>\",\"method\":\"setWidget\",\"widgetKey\":\"pi-websearch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-10>\",\"method\":\"setStatus\",\"statusKey\":\"pi-webfetch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-11>\",\"method\":\"setWidget\",\"widgetKey\":\"pi-webfetch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"entry_appended\",\"entry\":{\"type\":\"custom\",\"customType\":\"pi-rules.scan\",\"data\":{\"cwd\":\"<root>/cwd\",\"reason\":\"startup\"},\"startupBookkeeping\":true,\"id\":\"<entry-1>\",\"parentId\":\"<entry-2>\",\"timestamp\":\"2026-10-29T00:00:00.000Z\"},\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-12>\",\"method\":\"setStatus\",\"statusKey\":\"todo-waiting\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-13>\",\"method\":\"setStatus\",\"statusKey\":\"goal\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"session_opened\",\"sessionId\":\"rpc-1\",\"durableSessionId\":\"<uuid-14>\",\"sessionPath\":\"<root>/cwd/session.jsonl\",\"kind\":\"interactive\",\"cwd\":\"<root>/cwd\"}\n{\"type\":\"session_status\",\"subscriptionId\":\"sub-1\",\"seq\":1,\"sessionId\":\"rpc-1\",\"status\":\"idle\",\"kind\":\"interactive\",\"cwd\":\"<root>/cwd\",\"attachments\":1,\"durableSessionId\":\"<uuid-14>\",\"sessionPath\":\"<root>/cwd/session.jsonl\",\"model\":{\"provider\":\"faux\",\"id\":\"faux-a\"},\"thinkingLevel\":\"off\",\"pendingQueue\":{\"steering\":0,\"followUp\":0},\"lastChange\":{\"at\":\"2026-10-29T00:00:00.000Z\",\"cause\":\"open\",\"by\":\"client\"}}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-15>\",\"method\":\"setStatus\",\"statusKey\":\"anthropic-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-16>\",\"method\":\"setWidget\",\"widgetKey\":\"anthropic-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-17>\",\"method\":\"setStatus\",\"statusKey\":\"openai-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-18>\",\"method\":\"setWidget\",\"widgetKey\":\"openai-web-search\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-19>\",\"method\":\"setStatus\",\"statusKey\":\"monitors\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-20>\",\"method\":\"setStatus\",\"statusKey\":\"pi-websearch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-21>\",\"method\":\"setWidget\",\"widgetKey\":\"pi-websearch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-22>\",\"method\":\"setStatus\",\"statusKey\":\"pi-webfetch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-23>\",\"method\":\"setWidget\",\"widgetKey\":\"pi-webfetch\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"extension_ui_request\",\"id\":\"<uuid-24>\",\"method\":\"setStatus\",\"statusKey\":\"loop\",\"sessionId\":\"rpc-1\"}\n{\"type\":\"session_closed\",\"sessionId\":\"rpc-1\",\"reason\":\"client_close\"}\n{\"type\":\"session_status\",\"subscriptionId\":\"sub-1\",\"seq\":2,\"sessionId\":\"rpc-1\",\"status\":\"closed\",\"reason\":\"client_close\",\"kind\":\"interactive\",\"cwd\":\"<root>/cwd\",\"attachments\":1,\"durableSessionId\":\"<uuid-14>\",\"sessionPath\":\"<root>/cwd/session.jsonl\",\"model\":{\"provider\":\"faux\",\"id\":\"faux-a\"},\"thinkingLevel\":\"off\",\"pendingQueue\":{\"steering\":0,\"followUp\":0},\"lastChange\":{\"at\":\"2026-10-29T00:00:00.000Z\",\"cause\":\"close\",\"by\":\"client\"}}\n{\"id\":\"subscriber-2\",\"type\":\"response\",\"command\":\"unsubscribe_sessions\",\"success\":true}\n"
 }

package/docs/engine-socket/fixtures/rpc-inbound-samples.json

@@ -1,9 +1,9 @@
 {
 	"methodClassesVersion": 1,
-	"methodClassesDigest": "3860136b2a1b07c20373ed361df07c045bd1e84fce001917e271ca0e4b903e63",
+	"methodClassesDigest": "7ea18de0fb5d28f89aabdc17cbaca72e973cdea7d5928fd82d91ccced025000e",
 	"sampleId": "00000000-0000-7000-8000-000000000000",
 	"samplePathRoot": "/nonexistent/senpi-rpc-inbound-sample",
-	"methodCount": 122,
+	"methodCount": 124,
 	"methods": [
 		{
 			"method": "abort",
@@ -94,6 +94,23 @@
 				"name": "rpc-sample-account"
 			}
 		},
+		{
+			"method": "admit_external_message",
+			"class": "drive",
+			"sampleClass": "drive",
+			"connectionLocal": false,
+			"sample": {
+				"type": "admit_external_message",
+				"deliveryId": "00000000-0000-7000-8000-000000000000",
+				"text": "Sample delivery.",
+				"sender": {
+					"kind": "agent",
+					"session_id": "00000000-0000-7000-8000-000000000000"
+				},
+				"deliverAs": "followUp",
+				"whenIdle": "queue"
+			}
+		},
 		{
 			"method": "append_session_entry",
 			"class": "dynamic",
@@ -1065,6 +1082,16 @@
 				"modelId": "rpc-sample-model"
 			}
 		},
+		{
+			"method": "set_permission_preset",
+			"class": "device_admin",
+			"sampleClass": "device_admin",
+			"connectionLocal": false,
+			"sample": {
+				"type": "set_permission_preset",
+				"permissionPreset": "ask"
+			}
+		},
 		{
 			"method": "set_project_setting",
 			"class": "device_admin",

package/docs/extensions.md

@@ -885,6 +885,18 @@ pi.on("ui_prompt_end", async (event, ctx) => {
 });
 ```
 
+#### Permission mode and session-wide dialogs
+
+`pi.getPermissionPreset()` returns the preset the permission system enforces for this session right now, or `undefined` when no permission system runs for it or its setup failed.
+
+When a client moves a live session to another preset (`set_permission_preset`, or an attach naming one), the session announces it on the `pi.events` bus. A session's initial preset is not announced; read it with `pi.getPermissionPreset()`.
+
+| Channel | Payload | Meaning |
+|---------|---------|---------|
+| `permission_preset_changed` | `{ permissionPreset, permissionPresetSource, permissionPresetStatus, effectivePermissionPreset }` | The session's approval mode changed; the payload is the same mode `get_state` reports. |
+
+`pi.sessionDialog.select / confirm / input / editor` raise a dialog addressed to every client attached to the session, not only to the connection whose command is running. Use it for a prompt raised after that command returned, such as a background child's permission request a task runner forwards. The first answer wins; a later answer to the same dialog is refused with `already_answered`. In the terminal UI it shows like any other dialog. The same addressing is available on `ctx.ui` dialogs with the `audience: "session"` option.
+
 #### Pending-question bus events
 
 These additive events use `pi.events.on(...)`, not `pi.on(...)`: