@code-yeongyu/senpi 2026.8.30 → 2026.8.31

package/dist/modes/rpc/connection-handler.d.ts

@@ -17,6 +17,7 @@
 import type { AgentAbortSource } from "../../core/agent-abort-provenance.ts";
 import type { AgentSession } from "../../core/agent-session.ts";
 import type { AgentSessionRuntime } from "../../core/agent-session-runtime.ts";
+import { FooterDataProvider } from "../../core/footer-data-provider.ts";
 import type { RpcSessionState } from "./rpc-types.ts";
 /** Additive per-connection options. Absent = classic default (byte-identical). */
 export interface RpcConnectionOptions {
@@ -28,12 +29,17 @@ export interface RpcConnectionOptions {
     disposeRuntime?: boolean;
     /** Multi-session routing handle. Absent preserves classic wire output exactly. */
     sessionId?: string;
+    footerDataProviderFactory?: (session: AgentSession) => FooterDataProvider;
+    sharedWidth?: {
+        getWidth: () => number;
+        setWidth: (connectionId: string | undefined, width: number) => void;
+        clearWidth: (connectionId: string | undefined) => void;
+        setCapabilities?: (connectionId: string | undefined, capabilities: readonly string[]) => void;
+        hasRenderedComponents?: (sessionId: string) => boolean;
+        connectionId: () => string | undefined;
+        onChange?: () => void;
+    };
 }
-/**
- * The output side of a connection. `writeRaw` receives already-serialized JSONL
- * text (LF-terminated). `waitForBackpressure` lets the host apply flow control
- * (stdout drain in classic mode, or the transport's own `drain` signal).
- */
 export interface RpcConnectionSink {
     writeRaw(chunk: string): void;
     waitForBackpressure(): Promise<void>;
@@ -46,6 +52,7 @@ export interface RpcConnectionHandler {
     readonly ready: Promise<void>;
     /** Feed one inbound JSONL line (command or extension_ui_response). */
     handleInputLine(line: string): Promise<void>;
+    rerenderComponents(): void;
     /**
      * True once an extension requested shutdown via the shutdown handler. The
      * host polls this after each command and decides how to tear down.

package/dist/modes/rpc/connection-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connection-handler.d.ts","sourceRoot":"","sources":["../../../src/modes/rpc/connection-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAOH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,KAAK,EAAE,YAAY,EAAqB,MAAM,6BAA6B,CAAC;AACnF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAyC/E,OAAO,KAAK,EAYX,eAAe,EAEf,MAAM,gBAAgB,CAAC;AAGxB,kFAAkF;AAClF,MAAM,WAAW,oBAAoB;IACpC,mFAAmF;IACnF,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,iFAAiF;IACjF,eAAe,CAAC,EAAE,MAAM,IAAI,CAAC;IAC7B,0DAA0D;IAC1D,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,oBAAoB;IACpC;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,sEAAsE;IACtE,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C;;;OAGG;IACH,mBAAmB,IAAI,OAAO,CAAC;IAC/B,4EAA4E;IAC5E,gCAAgC,IAAI,IAAI,CAAC;IACzC,iFAAiF;IACjF,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AA4BD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC,EAAE,gBAAgB,GAAG,eAAe,CAkD/G;AA4BD;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACzC,WAAW,EAAE,mBAAmB,EAChC,IAAI,EAAE,iBAAiB,EACvB,OAAO,GAAE,oBAAyB,GAChC,oBAAoB,CA4uCtB"}
+{"version":3,"file":"connection-handler.d.ts","sourceRoot":"","sources":["../../../src/modes/rpc/connection-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAOH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,KAAK,EAAE,YAAY,EAAqB,MAAM,6BAA6B,CAAC;AACnF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AA8B/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAaxE,OAAO,KAAK,EAYX,eAAe,EAEf,MAAM,gBAAgB,CAAC;AAKxB,kFAAkF;AAClF,MAAM,WAAW,oBAAoB;IACpC,mFAAmF;IACnF,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,iFAAiF;IACjF,eAAe,CAAC,EAAE,MAAM,IAAI,CAAC;IAC7B,0DAA0D;IAC1D,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yBAAyB,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,kBAAkB,CAAC;IAC1E,WAAW,CAAC,EAAE;QACb,QAAQ,EAAE,MAAM,MAAM,CAAC;QACvB,QAAQ,EAAE,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;QACpE,UAAU,EAAE,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAC;QACvD,eAAe,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,EAAE,YAAY,EAAE,SAAS,MAAM,EAAE,KAAK,IAAI,CAAC;QAC9F,qBAAqB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;QACvD,YAAY,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;QACvC,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;KACtB,CAAC;CACF;AAWD,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,oBAAoB;IACpC;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,sEAAsE;IACtE,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,kBAAkB,IAAI,IAAI,CAAC;IAC3B;;;OAGG;IACH,mBAAmB,IAAI,OAAO,CAAC;IAC/B,4EAA4E;IAC5E,gCAAgC,IAAI,IAAI,CAAC;IACzC,iFAAiF;IACjF,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AA4BD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC,EAAE,gBAAgB,GAAG,eAAe,CAkD/G;AA4BD;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACzC,WAAW,EAAE,mBAAmB,EAChC,IAAI,EAAE,iBAAiB,EACvB,OAAO,GAAE,oBAAyB,GAChC,oBAAoB,CAi3CtB"}

package/dist/modes/rpc/connection-handler.js

@@ -24,14 +24,25 @@ import { emitProviderAccountsChanged, subscribeProviderAccountEvents, } from "..
 import { CLAUDE_SDK_OAUTH_PROVIDER_ID } from "../../core/extensions/builtin/claude-sdk-oauth/account-management.js";
 import { isMcpControlInventoryChanged, MCP_CONTROL_INVENTORY_CHANGED_EVENT, MCP_CONTROL_INVENTORY_REQUEST_EVENT, } from "../../core/extensions/builtin/mcp/control-inventory.js";
 import { applyFastMode, resolveServiceTierMemoryModel, } from "../../core/extensions/builtin/service-tier.js";
+import { FooterDataProvider } from "../../core/footer-data-provider.js";
 import { getSupportedThinkingLevels } from "../../core/thinking-levels.js";
 import { ProjectTrustStore } from "../../core/trust-manager.js";
 import { theme } from "../interactive/theme/theme.js";
-import { buildCustomUnsupportedRequest, DEFAULT_CUSTOM_EXTENSION_LABEL, EXTENSION_EVENTS_CAPABILITY, } from "./custom-capability.js";
+import { buildCustomUnsupportedRequest, DEFAULT_CUSTOM_EXTENSION_LABEL, EXTENSION_EVENTS_CAPABILITY, RENDERED_COMPONENTS_CAPABILITY, } from "./custom-capability.js";
 import { createRpcEventOutputBuffer } from "./event-output-buffer.js";
 import { buildRpcCommandsForSession, createCommandsChangedEvent, rpcCommandListDigest } from "./rpc-command-surface.js";
 import { rpcCommandPayloadError, rpcCommandShapeError, rpcMessageLengthError } from "./rpc-input-validation.js";
+import { RENDERED_COMPONENT_RECORD } from "./session-event-writer.js";
 import { SessionExtensionUiRequests } from "./session-extension-ui-requests.js";
+import { createLiveComponentRenderer } from "./widget-line-renderer.js";
+/**
+ * The output side of a connection. `writeRaw` receives already-serialized JSONL
+ * text (LF-terminated). `waitForBackpressure` lets the host apply flow control
+ * (stdout drain in classic mode, or the transport's own `drain` signal).
+ */
+function createFooterDataProvider(session) {
+    return new FooterDataProvider(session.sessionManager.getCwd());
+}
 function loadedExtensionName(path) {
     const synthetic = /^<(?:builtin|inline):([^>]+)>$/.exec(path);
     if (synthetic)
@@ -73,12 +84,12 @@ function loadedMcpStatus(server) {
  */
 export function buildRpcSessionState(session, lastAbortSource) {
     const cwd = session.sessionManager.getCwd();
-    // Trust gates project-source settings (shell prefixes, project resources), so an
-    // unverifiable verdict must fail closed: no agentDir means no authoritative store to
-    // consult, and the session's own manager only counts when it says trusted outright.
-    const projectTrusted = session.agentDir
-        ? new ProjectTrustStore(session.agentDir).get(cwd) === true
-        : session.settingsManager?.isProjectTrusted?.() === true;
+    // Trust gates project-source settings (shell prefixes, project resources), so every
+    // session state projection must have an authoritative store to consult.
+    if (!session.agentDir) {
+        throw new Error("RPC session invariant violated: agentDir is required");
+    }
+    const projectTrusted = new ProjectTrustStore(session.agentDir).get(cwd) === true;
     return {
         model: session.model,
         thinkingLevel: session.thinkingLevel,
@@ -146,8 +157,28 @@ function loadedSurfacesFingerprint(session, extensions, mcpServers) {
  * wiring, and process exit are intentionally NOT done here.
  */
 export function createRpcConnectionHandler(runtimeHost, sink, options = {}) {
-    const clientCapabilities = options.capabilities;
+    let clientCapabilities = options.capabilities;
     const routingSessionId = options.sessionId;
+    const clientWidth = () => options.sharedWidth?.getWidth() ?? 80;
+    const hasRenderedComponents = () => (options.sharedWidth?.hasRenderedComponents?.(routingSessionId ?? "") ?? false) ||
+        (clientCapabilities?.includes(RENDERED_COMPONENTS_CAPABILITY) ?? false);
+    const liveRenderers = new Map();
+    const retainedRendererFactories = new Map();
+    const footerProviders = new Map();
+    const disposeRenderer = (key) => {
+        liveRenderers.get(key)?.dispose();
+        liveRenderers.delete(key);
+        footerProviders.get(key)?.dispose();
+        footerProviders.delete(key);
+    };
+    const disposeAllRenderers = () => {
+        for (const renderer of liveRenderers.values())
+            renderer.dispose();
+        for (const provider of footerProviders.values())
+            provider.dispose();
+        liveRenderers.clear();
+        footerProviders.clear();
+    };
     // True only while THIS connection's own command drives a replacement; the issuer
     // already learns the new identity from its command response.
     let replacementIssuedHere = false;
@@ -328,6 +359,8 @@ export function createRpcConnectionHandler(runtimeHost, sink, options = {}) {
             // Hidden thinking label not supported in RPC mode - requires TUI message rendering access
         },
         setWidget(key, content, options) {
+            disposeRenderer(key);
+            retainedRendererFactories.delete(key);
             if (content === undefined || Array.isArray(content)) {
                 output({
                     type: "extension_ui_request",
@@ -339,18 +372,95 @@ export function createRpcConnectionHandler(runtimeHost, sink, options = {}) {
                 });
                 return;
             }
-            // A component factory closes over live TUI/theme state and cannot cross
-            // the RPC boundary. Never drop it silently: an opted-in client can show
-            // the same explicit degradation notice used by ctx.ui.custom.
-            const request = buildCustomUnsupportedRequest(clientCapabilities, "widget component");
-            if (request)
-                output(request);
+            retainedRendererFactories.set(key, () => {
+                const renderer = createLiveComponentRenderer({
+                    factory: content,
+                    getWidth: clientWidth,
+                    emit: (widgetLines) => output({
+                        type: "extension_ui_request",
+                        id: crypto.randomUUID(),
+                        method: "setWidget",
+                        widgetKey: key,
+                        widgetLines,
+                        widgetPlacement: options?.placement,
+                        [RENDERED_COMPONENT_RECORD]: true,
+                    }),
+                });
+                if (renderer)
+                    liveRenderers.set(key, renderer);
+            });
+            if (hasRenderedComponents())
+                retainedRendererFactories.get(key)();
         },
-        setFooter(_factory) {
-            // Custom footer not supported in RPC mode - requires TUI access
+        setFooter(factory) {
+            const key = "__footer__";
+            disposeRenderer(key);
+            retainedRendererFactories.delete(key);
+            if (factory === undefined) {
+                if (hasRenderedComponents())
+                    output({
+                        type: "extension_ui_request",
+                        id: crypto.randomUUID(),
+                        method: "setFooter",
+                        widgetLines: undefined,
+                    });
+                return;
+            }
+            retainedRendererFactories.set(key, () => {
+                const provider = options.footerDataProviderFactory?.(session) ?? createFooterDataProvider(session);
+                const renderer = createLiveComponentRenderer({
+                    factory: factory,
+                    factoryArgs: [provider],
+                    getWidth: clientWidth,
+                    emit: (widgetLines) => output({
+                        type: "extension_ui_request",
+                        id: crypto.randomUUID(),
+                        method: "setFooter",
+                        widgetLines,
+                        [RENDERED_COMPONENT_RECORD]: true,
+                    }),
+                });
+                if (renderer) {
+                    liveRenderers.set(key, renderer);
+                    footerProviders.set(key, provider);
+                }
+                else
+                    provider.dispose();
+            });
+            if (hasRenderedComponents())
+                retainedRendererFactories.get(key)();
         },
-        setHeader(_factory) {
-            // Custom header not supported in RPC mode - requires TUI access
+        setHeader(factory) {
+            const key = "__header__";
+            disposeRenderer(key);
+            retainedRendererFactories.delete(key);
+            if (factory === undefined) {
+                if (hasRenderedComponents())
+                    output({
+                        type: "extension_ui_request",
+                        id: crypto.randomUUID(),
+                        method: "setHeader",
+                        widgetLines: undefined,
+                    });
+                return;
+            }
+            retainedRendererFactories.set(key, () => {
+                const renderer = createLiveComponentRenderer({
+                    factory: factory,
+                    getWidth: clientWidth,
+                    emit: (widgetLines) => output({
+                        type: "extension_ui_request",
+                        id: crypto.randomUUID(),
+                        method: "setHeader",
+                        widgetLines,
+                        [RENDERED_COMPONENT_RECORD]: true,
+                    }),
+                });
+                if (renderer)
+                    liveRenderers.set(key, renderer);
+            });
+            if (hasRenderedComponents())
+                retainedRendererFactories.get(key)();
         },
         setTitle(title) {
             // Fire and forget - host can implement terminal title control
@@ -499,7 +609,7 @@ export function createRpcConnectionHandler(runtimeHost, sink, options = {}) {
                 // the window the refresh takes.
                 outputEvent({
                     type: "session_replaced",
-                    sessionId: session.sessionId,
+                    durableSessionId: session.sessionId,
                     sessionFile: session.sessionFile,
                     cwd: session.sessionManager.getCwd(),
                     sessionName: session.sessionName,
@@ -512,6 +622,17 @@ export function createRpcConnectionHandler(runtimeHost, sink, options = {}) {
             })
             : undefined;
         subscribeLoadedSurfaceEvents();
+        // Subscribe to the replaced session before its bind runs, not after. The bind
+        // is deferred by design - awaiting it would deadlock a client whose
+        // session_start handler blocks on an extension_ui_request it cannot answer
+        // while still awaiting the replacement response - and it still mutates the
+        // session it owns: pi-rules appends a durable scan entry from session_start.
+        // Those entries must reach every attached connection, and nothing else can
+        // carry them, because the session file is not written until an assistant
+        // message exists, so a client that misses the notification can never
+        // reconstruct the session it is bound to. Installing here also drops the
+        // previous session's subscription immediately instead of after the bind.
+        installSessionSubscriptions();
         const refresh = refreshLoadedSurfacesAfter(() => session.bindExtensions({
             uiContext: createExtensionUIContext(),
             mode: "rpc",
@@ -557,7 +678,7 @@ export function createRpcConnectionHandler(runtimeHost, sink, options = {}) {
                 });
             },
         }), true);
-        const installSessionSubscriptions = () => {
+        function installSessionSubscriptions() {
             unsubscribe?.();
             unsubscribeBackpressure?.();
             unsubscribe = session.subscribe((event) => {
@@ -592,15 +713,17 @@ export function createRpcConnectionHandler(runtimeHost, sink, options = {}) {
             unsubscribeBackpressure = session.agent.subscribe(async () => {
                 await waitForRpcBackpressure();
             });
-        };
+        }
         if (deferRefresh) {
-            void refresh.then(installSessionSubscriptions, (cause) => {
+            // The subscription is already installed on the replaced session above, so
+            // the deferred refresh only needs its failure reported. Re-installing here
+            // would replay the settings-source selection a second time.
+            void refresh.catch((cause) => {
                 outputEvent({ type: "rpc_error", error: String(cause) });
             });
             return;
         }
         await refresh;
-        installSessionSubscriptions();
     };
     /**
      * Drive an OAuth login for one provider as fire-command-then-subscribe.
@@ -798,6 +921,21 @@ export function createRpcConnectionHandler(runtimeHost, sink, options = {}) {
             // =================================================================
             // State
             // =================================================================
+            case "set_client_info":
+                if (options.sharedWidth && command.capabilities !== undefined) {
+                    clientCapabilities = command.capabilities;
+                    options.sharedWidth.setCapabilities?.(options.sharedWidth.connectionId(), command.capabilities);
+                }
+                if (Number.isFinite(command.width) && command.width > 0) {
+                    if (options.sharedWidth) {
+                        options.sharedWidth.setWidth(options.sharedWidth.connectionId(), command.width);
+                        options.sharedWidth.onChange?.();
+                    }
+                    else
+                        for (const renderer of liveRenderers.values())
+                            renderer.rerender();
+                }
+                return success(id, "set_client_info");
             case "get_state":
                 return success(id, "get_state", buildRpcSessionState(session, lastAbortSource));
             // =================================================================
@@ -1192,6 +1330,7 @@ export function createRpcConnectionHandler(runtimeHost, sink, options = {}) {
         }
     };
     const dispose = async () => {
+        disposeAllRenderers();
         pendingExtensionRequests.close();
         unsubscribeProviderAccountEvents();
         unsubscribe?.();
@@ -1215,6 +1354,17 @@ export function createRpcConnectionHandler(runtimeHost, sink, options = {}) {
             await ready;
             await handleInputLine(line);
         },
+        rerenderComponents() {
+            if (!hasRenderedComponents()) {
+                disposeAllRenderers();
+                return;
+            }
+            for (const [key, createRenderer] of retainedRendererFactories)
+                if (!liveRenderers.has(key))
+                    createRenderer();
+            for (const renderer of liveRenderers.values())
+                renderer.rerender();
+        },
         isShutdownRequested() {
             return shutdownRequested;
         },