@code-yeongyu/senpi 2026.8.30 → 2026.8.31

package/node_modules/@code-yeongyu/senpi-codemode/src/skill/bun-1-4/references/runtime-apis.md

@@ -0,0 +1,156 @@
+# Bun 1.4 Runtime Builtins
+
+Every API here ships inside the Bun binary: no install step, no native build, no lockfile entry. Version tags mark the minimum Bun version.
+
+## Bun.Image — image processing (replaces sharp) [v1.3.14]
+
+Docs: <https://bun.com/docs/runtime/image> · Blog: [#bun-image](https://bun.com/blog/bun-v1.4#bun-image)
+
+```ts
+await Bun.file("photo.jpg")
+  .image()
+  .resize(1024, 1024, { fit: "inside" })
+  .rotate(90)
+  .webp({ quality: 85 })
+  .write("thumb.webp");
+
+// Stream straight into a Response
+return new Response(new Bun.Image(upload).resize(200).jpeg());
+```
+
+- Decode/resize/rotate/encode JPEG, PNG, WebP, GIF, BMP everywhere; HEIC, AVIF, TIFF on macOS and Windows.
+- API mirrors sharp; 1.19-1.38x faster than sharp; ICC profiles (Display P3) survive transcoding.
+
+## Bun.WebView — headless browser (replaces puppeteer for scraping/screenshots) [v1.3.12, improved v1.4.0]
+
+Docs: <https://bun.com/docs/runtime/webview> · Blog: [#bun-webview](https://bun.com/blog/bun-v1.4#bun-webview)
+
+```ts
+await using view = new Bun.WebView({ width: 800, height: 600 });
+await view.navigate("https://bun.sh");
+await view.click("a[href='/docs']");
+const title = await view.evaluate("document.title");
+await Bun.write("page.png", await view.screenshot());
+```
+
+- macOS: system WebKit, nothing to install. macOS/Linux/Windows: can drive installed Chrome/Chromium/Edge.
+- Clicks/scrolls are trusted user input (`event.isTrusted === true`).
+- Extends `EventTarget`; screenshots are `Blob`s; `.cdp(method, params?)` escape hatch for raw Chrome DevTools Protocol.
+
+## Bun.markdown — Markdown parser (replaces marked) [v1.3.8, improved v1.4.0]
+
+Docs: <https://bun.com/docs/runtime/markdown> · Blog: [#bun-markdown](https://bun.com/blog/bun-v1.4#bun-markdown)
+
+```ts
+const html = Bun.markdown.html("# Hello **world**");   // HTML string
+const el = Bun.markdown.react(readme);                  // React elements; swap components per tag
+const ansi = Bun.markdown.render("# Hi\n\n**bold**", {  // callback per element (terminal output etc.)
+  heading: (children) => `\x1b[1;4m${children}\x1b[0m\n`,
+  paragraph: (children) => children + "\n",
+  strong: (children) => `\x1b[1m${children}\x1b[22m`,
+});
+```
+
+- GFM tables, strikethrough, task lists, autolinks. `.md` is a bundler loader. Linear time on adversarial input.
+- **HTML output is NOT sanitized** — raw HTML, event handlers, `javascript:` hrefs pass through. Sanitize before serving user content.
+- Bonus: `bun ./README.md` renders Markdown to the terminal (replaces glow).
+
+## Bun.cron() — scheduled jobs (replaces node-cron) [v1.3.11, improved v1.4.0]
+
+Docs: <https://bun.com/docs/runtime/cron> · Blog: [#bun-cron](https://bun.com/blog/bun-v1.4#bun-cron)
+
+```ts
+// OS-level job: crontab (Linux), launchd (macOS), Task Scheduler (Windows)
+await Bun.cron("./worker.ts", "30 2 * * MON", "weekly-report");
+// worker.ts exports: export default { async scheduled(controller) { ... } }  // Cloudflare Workers shape
+
+// In-process job on the event loop, no system cron
+using job = Bun.cron("*/5 * * * *", async () => { await cleanupTempFiles(); });
+job.unref(); job.stop();  // or let `using` dispose
+
+Bun.cron.parse("*/15 * * * *"); // → next matching Date
+```
+
+- 5-field syntax incl. named days and `@daily`. Jobs never overlap.
+- **v1.4 change:** `parse()` and in-process schedules use LOCAL time (was UTC). Pass `{ tz: "UTC" }` to keep UTC.
+
+## Bun.Terminal — native PTY (replaces node-pty) [v1.3.5, improved v1.4.0]
+
+Docs: <https://bun.com/docs/runtime/child-process#terminal-pty-support> · Blog: [#bun-terminal](https://bun.com/blog/bun-v1.4#bun-terminal)
+
+```ts
+const proc = Bun.spawn(["bash"], {
+  terminal: {
+    cols: 80, rows: 24,
+    data(term, data) { process.stdout.write(data); },
+  },
+});
+proc.terminal.write("echo Hello from PTY!\n");
+```
+
+- Drive bash/vim/htop with colored output; resize; works on Linux, macOS, Windows.
+- `write()` returns full input length (whole input buffered); `drain` fires on POSIX.
+
+## bun run --parallel — concurrent scripts (replaces concurrently, npm-run-all) [v1.3.9, improved v1.4.0]
+
+Blog: [#bun-run-parallel](https://bun.com/blog/bun-v1.4#bun-run-parallel)
+
+```bash
+bun run --parallel build test                        # named scripts concurrently
+bun run --parallel "build:*"                         # glob-matched
+bun run --parallel --filter '*' build                # every workspace package
+bun run --parallel --no-exit-on-error --filter '*' test   # keep going past failures
+```
+
+- Output lines prefixed with script name (`package:script` under `--filter`); pre/post hooks stay ordered; `--sequential` for one-at-a-time with same prefixing.
+
+## bun:ffi — 3x faster, engine-native [v1.4.0]
+
+Docs: <https://bun.com/docs/runtime/ffi> · Blog: [#3x-faster-bun-ffi](https://bun.com/blog/bun-v1.4#3x-faster-bun-ffi)
+
+```ts
+import { dlopen } from "bun:ffi";
+const { symbols } = dlopen("libhash.so", {
+  hash: { args: ["buffer", "buffer_length"], returns: "cstring" },
+});
+const digest = symbols.hash(data, data); // typeof digest === "string"
+```
+
+- FFI is built into JavaScriptCore (TinyCC removed): no-op call 0.70ns (3x), `CString` 3.8x faster. Hot call sites JIT into direct C calls.
+- New `buffer_length` arg type passes a TypedArray's length with its pointer.
+- **Breaking:** `cstring` returns are plain strings (`NULL` → `null`); `new CString(ptr)` has no `.ptr` anymore — keep the original pointer to free it. See [breaking-changes](breaking-changes.md).
+
+## Data format parsers
+
+Blog: [#also-built-in](https://bun.com/blog/bun-v1.4#also-built-in)
+
+| API | Replaces | Notes |
+|---|---|---|
+| `Bun.JSON5.parse()/stringify()` | json5 | `.json5` files importable directly |
+| `Bun.JSONL.parse()` / streaming `parseChunk()` | ndjson | newline-delimited JSON |
+| `Bun.JSONC.parse()` | jsonc-parser | comments + trailing commas (the tsconfig parser); throws `SyntaxError` on invalid input |
+| `Bun.XML.parse()/stringify()` | fast-xml-parser, xml2js | SIMD; `.xml` files importable (v1.4: import returns parsed doc, not path) |
+| `Bun.TOML.parse()/stringify()` | @iarna/toml | TOML v1.1.0, 708/708 toml-test; v1.4 is strict — unquoted strings throw `SyntaxError` |
+| `Bun.YAML.parse()` | — | YAML 1.2: `yes/no/on/off` are strings, not booleans |
+| `Bun.Archive` | tar | create/extract tarballs off the main thread — docs <https://bun.com/docs/runtime/archive> |
+
+## Terminal text utilities (replaces string-width, slice-ansi, cli-truncate, wrap-ansi)
+
+Docs: <https://bun.com/docs/runtime/utils>
+
+```ts
+Bun.stringWidth("한글 text");     // terminal columns, ANSI + grapheme aware
+Bun.sliceAnsi(str, 0, 20);        // slice by columns, preserving ANSI codes
+Bun.wrapAnsi(str, 80);            // wrap by columns
+```
+
+## Everything else new in the runtime
+
+- **`URLPattern`**: the Web API, 408 WPT passing. Replaces path-to-regexp.
+- **`CompressionStream` / `DecompressionStream`**: gzip, deflate, deflate-raw + brotli and zstd.
+- **`Response.textStream()`**: `ReadableStream<string>` of the body decoded as UTF-8.
+- **`process.on("memoryPressure")`**: OS low-memory notification on macOS/Linux/Windows.
+- **ML-DSA and ML-KEM**: NIST post-quantum signatures/KEM in `crypto.subtle` and `node:crypto`.
+- **`Bun.spawn({ cgroup })`**: place a child in a cgroup before it starts (Linux). Docs: <https://bun.com/docs/runtime/child-process#resource-limits-with-cgroups-linux>
+- **`bun repl`** [native]: highlighting, history, tab completion, `-e`/`-p`. Docs: <https://bun.com/docs/runtime/repl>
+- **`Temporal`** is defined by default (JSC implementation). `BUN_JSC_useTemporal=0` disables.

package/node_modules/@code-yeongyu/senpi-codemode/src/skill/bun-1-4/references/security.md

@@ -0,0 +1,52 @@
+# Bun 1.4 Security Tightening
+
+Blog: [#security](https://bun.com/blog/bun-v1.4#security)
+
+1.4 tightened TLS/parsing defaults. **A connection that worked on 1.3 can now fail with a verification error — that is usually the fix working, not a bug.** Diagnose before loosening.
+
+## checkServerIdentity runs BEFORE fetch() sends [v1.4.0]
+
+```ts
+await fetch("https://api.example.com/upload", {
+  method: "POST",
+  body: secretPayload,
+  tls: {
+    checkServerIdentity(hostname, cert) {
+      if (cert.fingerprint256 !== PINNED) return new Error("pin mismatch");
+    },
+  },
+});
+// nothing is sent until the callback returns undefined; re-runs on each redirect hop
+```
+
+If you pin a cert and the URL redirects through another host, the callback sees that cert too — accept every hop or use `redirect: "manual"`.
+
+## tls.connect defaults servername to host [v1.3.13]
+
+`tls.connect({ host, port })` without `servername` uses `host` for SNI + identity check (matches Node). Connecting by IP or `localhost` to a cert issued for another name now fails with `ERR_TLS_CERT_ALTNAME_INVALID` — including through drivers like `pg`/`ioredis`. Fix: pass the cert's name as `servername`, or `checkServerIdentity: () => undefined` if trusting by CA alone.
+
+```ts
+tls.connect({ host: "10.0.0.12", port: 5432, ca, servername: "db.internal" });
+```
+
+## Bun.connect / Bun.listen enforce rejectUnauthorized [v1.4.0]
+
+`Bun.connect({ tls })`, `socket.upgradeTLS()`, and `Bun.listen()` with `requestCert: true` default to `rejectUnauthorized: true`. A self-signed dev server with no `ca` does NOT throw — the `handshake` handler runs with `socket.authorized === false`, writes return `-1`, and the socket closes without data. Pass the CA in `tls`, or `rejectUnauthorized: false` (`NODE_TLS_REJECT_UNAUTHORIZED=0` honored).
+
+## RedisClient verifies TLS hostname [v1.3.14]
+
+`rediss://` checks the server cert against the URL host; first command rejects with `ERR_TLS_CERT_ALTNAME_INVALID` on mismatch. Connect by the certificate's name, or pass `tls: { rejectUnauthorized: false }`.
+
+## HTTP request parsing hardening in Bun.serve [v1.3.4]
+
+More malformed `Content-Length` / `Transfer-Encoding` / chunked bodies get `400` + connection close, without calling your `fetch` handler or logging. Browsers/curl/proxies never send these; if a hand-written client starts seeing 400s, fix its framing headers.
+
+## Tarball extraction hardening [v1.3.6]
+
+`github:`/URL dependencies and `bun create` templates skip tar entries that would land outside the package directory. A post-upgrade `Cannot find module` for such a package usually means the repo has a symlink pointing outside the package — replace it with a real file or relative link.
+
+## Also
+
+- Registry credentials stay scoped to their configured host: never sent cross-origin, never downgraded to `http://`, never printed in errors/verbose output.
+- `tls.createServer({ requestCert: true })` now rejects unverified client certs by default; only a literal `rejectUnauthorized: false` disables verification (`null` no longer counts).
+- Full list: [Security hardening](https://bun.com/blog/bun-v1.4#security-hardening) in the changelog; advisories at <https://github.com/oven-sh/bun/security/advisories>.

package/node_modules/@code-yeongyu/senpi-codemode/src/skill/bun-1-4/references/test.md

@@ -0,0 +1,103 @@
+# bun test in 1.4
+
+Composable CI recipe:
+
+```bash
+bun test --changed=main                                   # only what your branch touches
+bun test --parallel --timings=timings.json --update-timings
+bun test --parallel --shard=1/3 --timings=timings.json    # in CI, per machine
+```
+
+## --parallel: worker processes [v1.3.13, improved v1.4.0]
+
+Blog: [#bun-test-parallel](https://bun.com/blog/bun-v1.4#bun-test-parallel)
+
+```bash
+bun test --parallel          # N = CPU count
+bun test --parallel=4
+```
+
+- Files go to whichever worker frees up next. Coverage and JUnit output merged across workers; `--bail` stops every worker.
+- `--parallel` implies `--isolate`; `--no-isolate` opts out.
+- Workers expose 1-indexed `JEST_WORKER_ID` / `BUN_TEST_WORKER_ID`, so Jest setups keying DBs/ports off worker id work unchanged.
+- Preload scripts with top-level `await` complete before any worker runs tests.
+
+## --isolate: fresh global per file [v1.3.13, hardened v1.4.0]
+
+Blog: [#bun-test-isolate](https://bun.com/blog/bun-v1.4#bun-test-isolate)
+
+```bash
+bun test --isolate
+```
+
+Between files, Bun creates a new `globalThis`, clears ESM/CJS module registries, closes leaked servers/sockets/watchers/subprocesses, cancels timers, restores fake timers, and re-runs `--preload`. Transpiled source/bytecode stay cached process-wide, so only top-level code re-runs. This is how Jest/Vitest behave by default — use it to kill "passes alone, fails in the full suite" bugs. v1.4 fixed the 1.3.13 stability issues (fake-timer leaks, module-scope subprocess leaks, `process.chdir` bleed, N-API across files, debugger breakpoints).
+
+## --shard: split across CI machines [v1.3.13]
+
+Blog: [#bun-test-shard](https://bun.com/blog/bun-v1.4#bun-test-shard)
+
+```bash
+bun test --shard=1/3   # deterministic, round-robin, 1-based (matches Jest/Vitest/Playwright)
+```
+
+Works with `--changed` and `--randomize`; an empty shard exits 0.
+
+## --timings: balance by wall time [v1.4.0]
+
+Blog: [#bun-test-timings](https://bun.com/blog/bun-v1.4#bun-test-timings)
+
+```bash
+bun test --timings=timings.json --update-timings   # record per-file durations
+bun test --shard=1/3 --timings=timings.json        # shards cut by equal time, not file count
+bun test --parallel --timings=timings.json         # workers start slowest file first (LPT scheduling)
+```
+
+The timings file is written slowest-first, so it doubles as a slow-test report. Files sharing imports stay together (warm module cache).
+
+## --changed: only affected tests [v1.3.13]
+
+Blog: [#bun-test-changed](https://bun.com/blog/bun-v1.4#bun-test-changed)
+
+```bash
+bun test --changed             # uncommitted (unstaged + staged + untracked)
+bun test --changed=main        # diff against branch/commit/tag
+bun test --changed --watch     # re-filters on every restart
+```
+
+Bun scans test imports, asks git what changed, walks the import graph backwards. tsconfig `paths` aliases (`@/*`) work. Vitest-compatible flag.
+
+## --retry and repeats [v1.3.3]
+
+Blog: [#bun-test-retry](https://bun.com/blog/bun-v1.4#bun-test-retry)
+
+```ts
+test("flaky network call", async () => { await fetch("https://example.com"); }, { retry: 5 });
+test("stress", () => { if (Math.random() < 0.1) throw new Error("uh oh!"); }, { repeats: 20 });
+```
+
+`bun test --retry <N>` sets a suite-wide default. NOTE: prefer fixing the flake; retry is a containment tool.
+
+## jest.useFakeTimers() [v1.3.4, improved v1.4.0]
+
+Blog: [#jest-usefaketimers](https://bun.com/blog/bun-v1.4#jest-usefaketimers)
+
+```ts
+import { jest, test, expect } from "bun:test";
+test("debounce", () => {
+  jest.useFakeTimers();
+  let called = 0;
+  setTimeout(() => called++, 1000);
+  jest.advanceTimersByTime(1000);
+  expect(called).toBe(1);
+  jest.useRealTimers();
+});
+```
+
+- Controls `setTimeout`, `setInterval`, `Date`. `jest.setSystemTime()` works with `advanceTimersByTime()`.
+- `@testing-library/react`'s `waitFor` detects fake timers and advances instead of sleeping. `Bun.cron` schedules can be driven by the fake clock.
+
+## Behavior changes in 1.4 (test-related)
+
+- `jest.resetAllMocks()` now drops implementations too (matches Jest); use `clearAllMocks()` for history-only.
+- `expect().toContain()` compares with `===` not `Object.is` (`[NaN]` no longer contains `NaN`).
+- `toEqual()` compares `Temporal` objects by value.

package/node_modules/@earendil-works/pi-agent-core/README.md

@@ -6,6 +6,9 @@ Stateful agent with tool execution and event streaming. Built on `@earendil-work
 
 ```bash
 npm install @earendil-works/pi-agent-core
+
+# Bun alternative
+bun add @earendil-works/pi-agent-core
 ```
 
 ### SQLite session backends

package/node_modules/@earendil-works/pi-agent-core/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@earendil-works/pi-agent-core",
-	"version": "2026.8.30",
+	"version": "2026.8.31",
 	"description": "General-purpose agent with transport abstraction, state management, and attachment support",
 	"type": "module",
 	"main": "./dist/index.js",
@@ -35,8 +35,8 @@
 		"prepublishOnly": "npm run build"
 	},
 	"dependencies": {
-		"@earendil-works/pi-ai": "npm:@code-yeongyu/senpi-ai@2026.8.30",
-		"@earendil-works/pi-telemetry": "npm:@code-yeongyu/senpi-telemetry@2026.8.30",
+		"@earendil-works/pi-ai": "npm:@code-yeongyu/senpi-ai@2026.8.31",
+		"@earendil-works/pi-telemetry": "npm:@code-yeongyu/senpi-telemetry@2026.8.31",
 		"diff": "9.0.0",
 		"ignore": "7.0.6",
 		"typebox": "1.3.18",

package/node_modules/@earendil-works/pi-ai/README.md

@@ -97,6 +97,9 @@ Unified LLM API with provider collections, automatic auth resolution, token and
 
 ```bash
 npm install @earendil-works/pi-ai
+
+# Bun alternative
+bun add @earendil-works/pi-ai
 ```
 
 TypeBox exports are re-exported from `@earendil-works/pi-ai`: `Type`, `Static`, and `TSchema`.
@@ -1552,9 +1555,9 @@ Official docs: [Application Default Credentials](https://cloud.google.com/docs/a
 The quickest way to authenticate:
 
 ```bash
-npx @earendil-works/pi-ai login              # interactive provider selection
-npx @earendil-works/pi-ai login anthropic    # login to specific provider
-npx @earendil-works/pi-ai list               # list available providers
+bunx @earendil-works/pi-ai login              # interactive provider selection
+bunx @earendil-works/pi-ai login anthropic    # login to specific provider
+bunx @earendil-works/pi-ai list               # list available providers
 ```
 
 Credentials are saved to `auth.json` in the current directory.

package/node_modules/@earendil-works/pi-ai/dist/api/anthropic-messages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"anthropic-messages.d.ts","sourceRoot":"","sources":["../../src/api/anthropic-messages.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAC1C,OAAO,KAAK,EAGX,+BAA+B,EAK/B,MAAM,yCAAyC,CAAC;AAEjD,OAAO,KAAK,EACX,wBAAwB,EAKxB,OAAO,EAGP,KAAK,EAGL,mBAAmB,EAEnB,cAAc,EACd,aAAa,EAOb,MAAM,aAAa,CAAC;AAqCrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AA6JlE,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,CAAC;AAE1E,MAAM,MAAM,wBAAwB,GAAG,YAAY,GAAG,SAAS,CAAC;AAyEhE,MAAM,WAAW,gBAAiB,SAAQ,aAAa;IACtD;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EAAE,wBAAwB,CAAC;IAC3C;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,wEAAwE;IACxE,gBAAgB,CAAC,EAAE,wBAAwB,CAAC;IAC5C;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACtE;;;;OAIG;IACH,MAAM,CAAC,EAAE,SAAS,CAAC;CACnB;AAm4BD,eAAO,MAAM,MAAM,EAAE,cAAc,CAAC,oBAAoB,EAAE,gBAAgB,CAqbzE,CAAC;AA0FF,eAAO,MAAM,YAAY,EAAE,cAAc,CAAC,oBAAoB,EAAE,mBAAmB,CA+ClF,CAAC;AA6IF,wBAAgB,mCAAmC,CAClD,KAAK,EAAE,KAAK,CAAC,oBAAoB,CAAC,EAClC,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE,gBAAgB,GACxB,+BAA+B,CAkBjC"}
+{"version":3,"file":"anthropic-messages.d.ts","sourceRoot":"","sources":["../../src/api/anthropic-messages.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAC1C,OAAO,KAAK,EAGX,+BAA+B,EAK/B,MAAM,yCAAyC,CAAC;AAGjD,OAAO,KAAK,EACX,wBAAwB,EAKxB,OAAO,EAGP,KAAK,EAGL,mBAAmB,EAEnB,cAAc,EACd,aAAa,EAOb,MAAM,aAAa,CAAC;AAqCrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AA6JlE,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,CAAC;AAE1E,MAAM,MAAM,wBAAwB,GAAG,YAAY,GAAG,SAAS,CAAC;AAuFhE,MAAM,WAAW,gBAAiB,SAAQ,aAAa;IACtD;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EAAE,wBAAwB,CAAC;IAC3C;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,wEAAwE;IACxE,gBAAgB,CAAC,EAAE,wBAAwB,CAAC;IAC5C;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACtE;;;;OAIG;IACH,MAAM,CAAC,EAAE,SAAS,CAAC;CACnB;AAo4BD,eAAO,MAAM,MAAM,EAAE,cAAc,CAAC,oBAAoB,EAAE,gBAAgB,CAqbzE,CAAC;AA0FF,eAAO,MAAM,YAAY,EAAE,cAAc,CAAC,oBAAoB,EAAE,mBAAmB,CA+ClF,CAAC;AA6IF,wBAAgB,mCAAmC,CAClD,KAAK,EAAE,KAAK,CAAC,oBAAoB,CAAC,EAClC,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE,gBAAgB,GACxB,+BAA+B,CAkBjC"}

package/node_modules/@earendil-works/pi-ai/dist/api/anthropic-messages.js

@@ -1,5 +1,6 @@
 import Anthropic from "@anthropic-ai/sdk";
 import { calculateCost } from "../models.js";
+import { registerSessionResourceCleanup } from "../session-resources.js";
 import { isVideoMimeType } from "../types.js";
 import { combineAbortSignals } from "../utils/abort-signals.js";
 import { splitDeferredTools } from "../utils/deferred-tools.js";
@@ -181,6 +182,20 @@ const SERVER_SIDE_FALLBACK_BETA = "server-side-fallback-2026-07-01";
 // A provider can reject its own empty signatures. Learn that capability for one
 // conversation without changing the shared model definition used by other sessions.
 const unsignedThinkingTextReplayFallbacks = new Set();
+registerSessionResourceCleanup((sessionId) => {
+    // One small entry per (session, base URL, model) that ever hit the fallback;
+    // drop the session's entries at teardown so long-lived hosts do not collect
+    // them for every session that ever ran.
+    if (sessionId === undefined) {
+        unsignedThinkingTextReplayFallbacks.clear();
+        return;
+    }
+    const prefix = `${sessionId}\u0000`;
+    for (const key of unsignedThinkingTextReplayFallbacks) {
+        if (key.startsWith(prefix))
+            unsignedThinkingTextReplayFallbacks.delete(key);
+    }
+});
 function unsignedThinkingFallbackKey(model, sessionId) {
     return sessionId === undefined ? undefined : `${sessionId}\u0000${model.baseUrl}\u0000${model.id}`;
 }
@@ -237,12 +252,13 @@ const REPLAYABLE_ANTHROPIC_PROVIDER_NATIVE_TYPES = new Set([
     "text_editor_code_execution_tool_result",
     "tool_search_tool_result",
     "container_upload",
-    // Server-side fallback beta (server-side-fallback-2026-06-01) emits a
-    // `fallback` marker mid-response. The marker itself is replayed as a kept
-    // audit block. Blocks emitted *before* the final marker are the declined
-    // attempt and are pruned in convertMessages (see lastAnthropicFallbackBoundary
-    // and collectDiscardedFallbackToolCallIds); the marker onward replays verbatim.
-    "fallback",
+    // The server-side fallback marker (`fallback`, server-side-fallback-2026-06-01
+    // beta) is deliberately absent: the Messages API rejects it as an *input* tag
+    // ("Input tag 'fallback' found using 'type' does not match any of the expected
+    // tags"), so replaying it 400s every subsequent same-model request. The stored
+    // marker is audit metadata and still drives declined-attempt pruning in
+    // convertMessages (see lastAnthropicFallbackBoundary and
+    // collectDiscardedFallbackToolCallIds); blocks after it replay verbatim.
 ]);
 function isReplayableAnthropicProviderNativeBlock(raw) {
     return isRecord(raw) && typeof raw.type === "string" && REPLAYABLE_ANTHROPIC_PROVIDER_NATIVE_TYPES.has(raw.type);
@@ -1796,7 +1812,8 @@ function convertMessages(transformedMessages, model, isOAuthToken, cacheControl,
             const blocks = [];
             const isSameModel = isSameAnthropicModel(msg, model);
             // Blocks before the final fallback marker are the declined attempt; the
-            // marker onward is the serving model's output and replays verbatim.
+            // blocks after it are the serving model's output and replay verbatim. The
+            // marker itself never replays: the API rejects `fallback` as an input tag.
             const fallbackBoundary = isSameModel ? lastAnthropicFallbackBoundary(msg.content) : -1;
             const preBoundaryPairedServerToolUseIds = fallbackBoundary >= 0
                 ? pairedServerToolUseIdsBeforeBoundary(msg.content, fallbackBoundary)