@code-yeongyu/senpi 2026.9.10 → 2026.9.12-2

package/docs/rpc.md

@@ -8,6 +8,14 @@ RPC mode enables headless operation of the coding agent via a JSON protocol over
 
 **Note for Node.js/TypeScript users**: If you're building a Node.js application, consider using `AgentSession` directly from `@code-yeongyu/senpi` instead of spawning a subprocess. See [`src/core/agent-session.ts`](../src/core/agent-session.ts) for the API. For a subprocess-based TypeScript client, see [`src/modes/rpc/rpc-client.ts`](../src/modes/rpc/rpc-client.ts).
 
+## Account display names
+
+`get_provider_accounts` returns secret-free descriptors containing `name`, `source`, `blocked`, `pinned`, and optional `displayName`. Render a named account as `displayName (name)`; keep using the immutable `name` for `account_pin`, `account_remove`, and comparisons. Legacy accounts omit `displayName`.
+
+Use `/account <provider> rename <id> <display name...>` or the corresponding `/gpt-account` and `/claude-account` commands to name saved accounts; `clear-name <id>` removes only the label. `/gpt-account add` offers optional naming after login is saved, and only when Senpi generated the account ID itself; the Claude lane names accounts through its own login prompt and never asks twice. Blank input or cancellation keeps that login usable. Environment accounts cannot be renamed.
+
+A label is stored NFC-normalized with internal whitespace collapsed, must contain at least one visible character, and may not exceed 32 terminal columns (measured in grapheme clusters, so CJK and emoji count two columns each). Uniqueness within a provider folds case, Unicode compatibility forms, invisible code points, and Cyrillic lookalikes, so two labels that render identically are refused.
+
 ## Starting RPC Mode
 
 ### RPC client lifecycle
@@ -147,6 +155,8 @@ The command response reports only `{ cancelled }`, so this event is the only pus
 
 The lifecycle supervisor is also available to bundled/rebranded runtimes through the hidden internal launch route `--internal-rpc-host-supervisor`. This route is wire-invisible and intended only for desktop launchers: it receives the public socket, ownership directory, and the runtime command/arguments to wrap, then runs the same `host-lifecycle.ts` implementation used by `ensureHost()`. Normal CLI modes do not use or advertise this route. Compiled standalone binaries also re-enter themselves through this route automatically: a bun executable always boots its embedded entrypoint, so the script-path re-entry used under a JS runtime would be parsed as CLI arguments (`Unknown option: --socket`) and the host could never start.
 
+On win32 the supervisor's internal hop lives under `<agentDir>/rpc-host-daemon/internal-<uuid>`, and that directory is created recursively. Before allocating the internal hop or spawning a child, the supervisor ensures `<publicSocket>.secret` exists, creating its parent directories and a 32-byte secret with mode `0600` when needed. An existing valid secret, including one written by `ensureHost()`, is reused unchanged. Direct launch therefore works on a fresh profile without caller-side secret provisioning. Provisioning failures identify the bootstrap step and secret path; the public endpoint still requires the secret handshake before forwarding RPC traffic.
+
 Hosts started through `ensureHost()` are wrapped by a lifecycle supervisor that owns the public socket and spawns the
 real RPC host on a private internal hop. The policy lives in `<agentDir>/rpc-host-daemon/settings.json`:
 
@@ -212,10 +222,17 @@ and only then constructs its session writer and runtime. A conflicting alias att
 explicitly before opening another writer.
 
 SessionManager writes, switches, forks, new sessions and imports obtain the same grant before writer creation or
-append-side normalization. Acquired paths are conservatively retained for that worker's entire lifetime, including
-superseded paths after a switch. Each worker may reserve at most 64 paths; an exhausted reservation budget fails
-explicitly. Close or an opening deadline requests worker termination, but does not release reservations or worker
-capacity until the actual exit event. A syscall that cannot yet be interrupted can therefore keep an entry
+append-side normalization. A grant is bound to a LIVE writer, not to the worker's lifetime: every snapshot a fully
+open worker publishes names the session files its live session writers still own, and the host releases each granted
+path that list (and the worker's current session path) no longer names. A session replaced by `new_session`,
+`switch_session`, a fork or an import therefore frees its previous file as soon as the replacement is published:
+another `open_session` for that superseded path opens its own worker instead of attaching or failing, and the
+previous opening spelling stops resolving to the replaced owner. Each worker may reserve at most 64 live paths
+at once; a request past that budget first reconciles against the latest snapshot and only then fails with
+`session_reservation_limit`, which is distinct from `session_path_in_use` (another owner holds the path). Only a
+fully open entry reconciles. An entry that is opening, closing or quarantined keeps every acquired path, because a
+worker stuck in a syscall can still be writing a path it can no longer report. Close or an opening deadline requests
+worker termination, but does not release reservations or worker capacity until the actual exit event. A syscall that cannot yet be interrupted can therefore keep an entry
 internally quarantined after the routing handle has closed. `list_sessions` continues to publish `closing`, not a
 new status: existing clients must not mistake a quarantined worker for a live reattach target. Retry the path only
 after that entry disappears.
@@ -286,7 +303,8 @@ In the response `error` field, machine-matchable:
 
 - `unknown_session`
 - `session_closing`
-- `session_path_in_use` (path held by an opening, closing, quarantined, or superseded owner; a fully-open current owner is attached instead)
+- `session_path_in_use` (path held by an opening, closing, or quarantined owner; a fully-open current owner is attached instead, and a path a live owner has superseded is released rather than held)
+- `session_reservation_limit` (this worker already holds 64 live session paths; the open or session replacement was refused without disturbing the existing session)
 - `missing_session_id` (session-scoped command without `sessionId` in multi mode)
 - `multi_session_disabled` (`open_session` in classic mode)
 - `invalid_path` (relative `sessionPath`/`cwd`)
@@ -303,7 +321,7 @@ Strict FIFO per session; one total stdout order; cross-session order unspecified
 
 ### Duplicate/idempotency
 
-Duplicate `open_session` while a path reservation is held by a fully-open session → ATTACH (`attached: true`, same handle); while held by an `opening`/`closing` entry (including internal quarantine) → `session_path_in_use`. `close_session` releases one attachment; the runtime is disposed only when the last attachment closes. A close for an entry already `closing` joins its in-flight teardown. `close_session` on unknown/already-closed → `unknown_session` error. The grace window is configurable by the host through `SENPI_RPC_CLOSE_GRACE_MS`. Request `id`s are client-owned; the server echoes them without dedup.
+Duplicate `open_session` while a path reservation is held by a fully-open session → ATTACH (`attached: true`, same handle); while held by an `opening`/`closing` entry (including internal quarantine) → `session_path_in_use`. A path whose owner has already replaced it with another session file is no longer held: that open allocates a new worker and resumes the file. `close_session` releases one attachment; the runtime is disposed only when the last attachment closes. A close for an entry already `closing` joins its in-flight teardown. `close_session` on unknown/already-closed → `unknown_session` error. The grace window is configurable by the host through `SENPI_RPC_CLOSE_GRACE_MS`. Request `id`s are client-owned; the server echoes them without dedup.
 
 ## Protocol Overview
 

package/docs/settings.md

@@ -88,7 +88,7 @@ Permission rules are a confirmation policy, not a sandbox. Senpi, extensions, pa
 | `modelThinkingLevels` | object | - | Per-model reasoning effort memory (`"provider/id": "level"`) |
 | `modelLastOnThinkingLevels` | object | - | Per-model last non-off reasoning level, used by `/reasoning on` to restore the previous effort |
 | `modelServiceTiers` | object | - | Per-model service tier memory (`"provider/id": "auto" \| "priority"`) |
-| `promptPreset` | string | `"auto"` | Force a system prompt preset: `"auto"`, `"kimi-k2-6"`, `"kimi-k2-7"`, `"kimi-k3"`, `"glm-5.2"`, `"glm-5.3"`, `"grok-4.5"`, `"grok-4.6"`, `"claude-fable-5"`, `"claude-fable-5-1"`, `"claude-opus-5"`, `"claude-opus-4-5"`, `"claude-opus-4-6"`, `"claude-opus-4-7"`, `"claude-opus-4-8"`, `"deepseek-v4-flash"`, `"deepseek-v4-flash-0731"`, `"deepseek-v4-pro"`, `"gpt-5"`, `"gpt-5.2"`, `"gpt-5.3-codex"`, `"gpt-5.4"`, `"gpt-5.5"`, `"gpt-5.6"`, or `"gpt-6-astra"` |
+| `promptPreset` | string | `"auto"` | Force a system prompt preset: `"auto"`, `"kimi-k2-6"`, `"kimi-k2-7"`, `"kimi-k3"`, `"glm-5.2"`, `"glm-5.3"`, `"grok-4.5"`, `"grok-4.6"`, `"claude-fable-5"`, `"claude-fable-5-1"`, `"claude-opus-5"`, `"claude-opus-4-5"`, `"claude-opus-4-6"`, `"claude-opus-4-7"`, `"claude-opus-4-8"`, `"deepseek-v4-flash"`, `"deepseek-v4-flash-0731"`, `"deepseek-v4-1-flash"`, `"deepseek-v4-pro"`, `"gpt-5"`, `"gpt-5.2"`, `"gpt-5.3-codex"`, `"gpt-5.4"`, `"gpt-5.5"`, `"gpt-5.6"`, or `"gpt-6-astra"` |
 | `hideThinkingBlock` | boolean | `false` | Hide thinking blocks in output |
 | `showCacheMissNotices` | boolean | `false` | Show transcript notices for significant prompt-cache misses, compaction or branch-summary usage, and provider recovery diagnostics such as dropped Anthropic thinking blocks |
 | `thinkingBudgets` | object | - | Custom token budgets per thinking level. Anthropic, Google, and Bedrock use these natively. OpenAI-compatible models use them when `compat.thinkingTokenBudgetField` (or `supportsThinkingTokenBudget`) is set. |
@@ -130,6 +130,7 @@ When this value is anything other than `"auto"`, it overrides any model-level `p
 | `tipsHistory` | object | - | Internal record of which tips were shown last (managed automatically) |
 | `defaultProjectTrust` | string | `"ask"` | Fallback project trust behavior: `"ask"`, `"always"`, or `"never"`. Global setting only |
 | `collapseChangelog` | boolean | `false` | Show condensed changelog after updates |
+| `changelogSeen` | object | - | Internal per-source record of the latest changelog version acknowledged (managed automatically) |
 | `enableInstallTelemetry` | boolean | `true` | Send an anonymous install/update version ping after first install or changelog-detected updates. This does not control update checks |
 | `enableAnalytics` | boolean | `false` | Opt-in analytics data sharing. Currently only asked for during the experimental first-time setup (`PI_EXPERIMENTAL=1`) |
 | `trackingId` | string | - | Analytics tracking identifier, generated when `enableAnalytics` is turned on |

package/docs/tui.md

@@ -178,7 +178,7 @@ Use `handle.unfocus()` when a visible overlay should stop owning input and let T
 
 ### Question Overlay and Async Widget
 
-When the agent asks a blocking question (`waitForAnswer: true`), a full-screen overlay appears with a tab bar for each question, numbered options (digits or arrows to select, Space to toggle multi-select), and a comment editor at the bottom. Press Enter to submit what you have. Unanswered questions are reported back as unanswered. Esc cancels.
+When the agent asks a blocking question (`waitForAnswer: true`), a full-screen overlay appears with a tab for each question and a final Submit tab. Use digits or arrows to choose options, Space to toggle multi-select choices, and Enter to confirm and advance. The Submit tab contains the optional comment editor and accepts partial answers after confirmation; unanswered questions are reported back as unanswered. Esc backs out of an editor or asks for confirmation before discarding a draft.
 
 For async questions (`waitForAnswer: false`), a one-line widget appears above the editor showing the question count and a countdown. The agent keeps working while you decide. Type your reply in the editor at any time and press Enter to send it as a comment, or open the full overlay with the shortcut shown in the widget.
 

package/node_modules/@code-yeongyu/senpi-codemode/CHANGELOG.md

@@ -12,6 +12,58 @@
 
 ### Removed
 
+## [2026.9.12-2] - 2026-09-12
+
+### Breaking Changes
+
+### Added
+
+### Changed
+
+### Fixed
+
+### Removed
+
+## [2026.9.12] - 2026-09-12
+
+### Breaking Changes
+
+### Added
+
+### Changed
+
+### Fixed
+
+### Removed
+
+## [2026.9.11] - 2026-09-11
+
+### Breaking Changes
+
+### Added
+
+### Changed
+
+- The eval tool instructions now tell callers to emit large text in bounded chunks or through offset-based file reads, and to treat a truncation notice as incomplete data that must be recovered from the full-output path instead of being read as the whole result ([#1600](https://github.com/code-yeongyu/senpi/pull/1600)).
+
+### Fixed
+
+- Column-capped eval output now preserves a recoverable full-output artifact, so a cell whose output is clipped by a narrow terminal column cap still exposes the complete text through the artifact path ([#1600](https://github.com/code-yeongyu/senpi/pull/1600)).
+
+### Removed
+
+## [2026.9.10-2] - 2026-09-10
+
+### Breaking Changes
+
+### Added
+
+### Changed
+
+### Fixed
+
+### Removed
+
 ## [2026.9.10] - 2026-09-10
 
 ### Breaking Changes

package/node_modules/@code-yeongyu/senpi-codemode/README.md

@@ -218,10 +218,11 @@ empty pipe (`true | ( … )`) while a cell is active. Output, exit codes, `cwd`,
 ## Output and artifacts
 
 Cell output is streamed while the cell runs. Large streams spill to an absolute
-file after the default 50 KiB threshold. With a session file such as
-`/path/session.jsonl`, artifacts live in `/path/session-artifacts/`; sessions
-without a file use a unique temporary directory. Truncated results include a
-plain-path notice such as `[Full output: /absolute/path/eval-….log]`.
+file after the default 50 KiB threshold or when the output column cap drops
+bytes. With a session file such as `/path/session.jsonl`, artifacts live in
+`/path/session-artifacts/`; sessions without a file use a unique temporary
+directory. Truncated results include a plain-path notice such as
+`[Full output: /absolute/path/eval-….log]`.
 
 ## Deliberate differences from oh-my-pi
 

package/node_modules/@code-yeongyu/senpi-codemode/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@code-yeongyu/senpi-codemode",
-	"version": "2026.9.10",
+	"version": "2026.9.12-2",
 	"private": true,
 	"description": "Source-only senpi extension package for codemode evaluation tools",
 	"type": "module",
@@ -31,14 +31,14 @@
 	},
 	"dependencies": {
 		"@babel/parser": "8.0.4",
-		"@earendil-works/pi-ai": "npm:@code-yeongyu/senpi-ai@2026.9.10",
+		"@earendil-works/pi-ai": "npm:@code-yeongyu/senpi-ai@2026.9.12-2",
 		"typebox": "1.3.18"
 	},
 	"peerDependencies": {
-		"@code-yeongyu/senpi": "2026.9.10"
+		"@code-yeongyu/senpi": "2026.9.12-2"
 	},
 	"devDependencies": {
-		"@code-yeongyu/senpi": "2026.9.10"
+		"@code-yeongyu/senpi": "2026.9.12-2"
 	},
 	"keywords": [
 		"senpi",

package/node_modules/@code-yeongyu/senpi-codemode/src/output/streaming-output-buffer.ts

@@ -0,0 +1,58 @@
+interface ByteSlice {
+	readonly text: string;
+	readonly bytes: number;
+}
+
+export function truncateHeadBytes(text: string, maxBytes: number): ByteSlice {
+	if (maxBytes <= 0) return { text: "", bytes: 0 };
+	const buffer = Buffer.from(text, "utf8");
+	if (buffer.length <= maxBytes) return { text, bytes: buffer.length };
+	let end = maxBytes;
+	while (end > 0 && (buffer[end] & 0xc0) === 0x80) end--;
+	const slice = buffer.subarray(0, end);
+	return { text: slice.toString("utf8"), bytes: slice.length };
+}
+
+export function truncateTailBytes(text: string, maxBytes: number): ByteSlice {
+	if (maxBytes <= 0) return { text: "", bytes: 0 };
+	const buffer = Buffer.from(text, "utf8");
+	if (buffer.length <= maxBytes) return { text, bytes: buffer.length };
+	let start = buffer.length - maxBytes;
+	while (start < buffer.length && (buffer[start] & 0xc0) === 0x80) start++;
+	const slice = buffer.subarray(start);
+	return { text: slice.toString("utf8"), bytes: slice.length };
+}
+
+export class TailBuffer {
+	readonly #maxBytes: number;
+	#text = "";
+	#bytes = 0;
+
+	constructor(maxBytes: number) {
+		this.#maxBytes = Math.max(0, Math.floor(maxBytes));
+	}
+
+	append(text: string): void {
+		if (text.length === 0) return;
+		if (this.#maxBytes === 0) {
+			this.#text = "";
+			this.#bytes = 0;
+			return;
+		}
+		const incomingBytes = Buffer.byteLength(text, "utf8");
+		const next =
+			incomingBytes >= this.#maxBytes
+				? truncateTailBytes(text, this.#maxBytes)
+				: truncateTailBytes(this.#text + text, this.#maxBytes);
+		this.#text = next.text;
+		this.#bytes = next.bytes;
+	}
+
+	text(): string {
+		return this.#text;
+	}
+
+	bytes(): number {
+		return this.#bytes;
+	}
+}

package/node_modules/@code-yeongyu/senpi-codemode/src/output/streaming-output.ts

@@ -2,9 +2,11 @@ import { createWriteStream, mkdirSync, type WriteStream } from "node:fs";
 import { dirname } from "node:path";
 import { DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, truncateTail } from "../host-sdk.ts";
 import { formatMiddleElisionMarker } from "./output-meta.ts";
+import { TailBuffer, truncateHeadBytes } from "./streaming-output-buffer.ts";
 
 export { artifactNotice, formatMiddleElisionMarker, resolveSessionArtifactsDir } from "./output-meta.ts";
-export { DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, truncateTail };
+export { truncateHeadBytes, truncateTailBytes } from "./streaming-output-buffer.ts";
+export { DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, TailBuffer, truncateTail };
 
 export const ARTIFACT_DEFAULT_HEAD_BYTES = 3 * 1024 * 1024;
 
@@ -31,11 +33,6 @@ export interface OutputSinkOptions {
 	readonly chunkThrottleMs?: number;
 }
 
-interface ByteSlice {
-	readonly text: string;
-	readonly bytes: number;
-}
-
 function countNewlines(text: string): number {
 	let count = 0;
 	let cursor = text.indexOf("\n");
@@ -50,60 +47,6 @@ function lineCount(text: string): number {
 	return text.length === 0 ? 0 : countNewlines(text) + 1;
 }
 
-function truncateHeadBytes(text: string, maxBytes: number): ByteSlice {
-	if (maxBytes <= 0) return { text: "", bytes: 0 };
-	const buffer = Buffer.from(text, "utf8");
-	if (buffer.length <= maxBytes) return { text, bytes: buffer.length };
-	let end = maxBytes;
-	while (end > 0 && (buffer[end] & 0xc0) === 0x80) end--;
-	const slice = buffer.subarray(0, end);
-	return { text: slice.toString("utf8"), bytes: slice.length };
-}
-
-function truncateTailBytes(text: string, maxBytes: number): ByteSlice {
-	if (maxBytes <= 0) return { text: "", bytes: 0 };
-	const buffer = Buffer.from(text, "utf8");
-	if (buffer.length <= maxBytes) return { text, bytes: buffer.length };
-	let start = buffer.length - maxBytes;
-	while (start < buffer.length && (buffer[start] & 0xc0) === 0x80) start++;
-	const slice = buffer.subarray(start);
-	return { text: slice.toString("utf8"), bytes: slice.length };
-}
-
-export class TailBuffer {
-	readonly #maxBytes: number;
-	#text = "";
-	#bytes = 0;
-
-	constructor(maxBytes: number) {
-		this.#maxBytes = Math.max(0, Math.floor(maxBytes));
-	}
-
-	append(text: string): void {
-		if (text.length === 0) return;
-		if (this.#maxBytes === 0) {
-			this.#text = "";
-			this.#bytes = 0;
-			return;
-		}
-		const incomingBytes = Buffer.byteLength(text, "utf8");
-		const next =
-			incomingBytes >= this.#maxBytes
-				? truncateTailBytes(text, this.#maxBytes)
-				: truncateTailBytes(this.#text + text, this.#maxBytes);
-		this.#text = next.text;
-		this.#bytes = next.bytes;
-	}
-
-	text(): string {
-		return this.#text;
-	}
-
-	bytes(): number {
-		return this.#bytes;
-	}
-}
-
 export class OutputSink {
 	readonly #artifactPath: string | undefined;
 	readonly #spillThreshold: number;
@@ -146,8 +89,10 @@ export class OutputSink {
 		this.#totalBytes += rawBytes;
 		this.#totalNewlines += countNewlines(chunk);
 		this.#sawData = true;
-		this.#mirrorRaw(chunk);
-		this.#retain(this.#maxColumns > 0 ? this.#clampColumns(chunk) : chunk);
+		const droppedBefore = this.#columnDroppedBytes;
+		const retained = this.#maxColumns > 0 ? this.#clampColumns(chunk) : chunk;
+		this.#mirrorRaw(chunk, this.#columnDroppedBytes > droppedBefore);
+		this.#retain(retained);
 	}
 
 	dump(notice?: string): Promise<OutputSummary> {
@@ -167,13 +112,13 @@ export class OutputSink {
 		this.#pendingChunk += chunk;
 	}
 
-	#mirrorRaw(chunk: string): void {
+	#mirrorRaw(chunk: string, columnCapDropped: boolean): void {
 		if (this.#artifactPath === undefined) return;
 		if (this.#file !== undefined) {
 			this.#file.write(chunk);
 			return;
 		}
-		if (this.#totalBytes <= this.#spillThreshold) {
+		if (!columnCapDropped && this.#totalBytes <= this.#spillThreshold) {
 			this.#beforeSpill += chunk;
 			return;
 		}

package/node_modules/@code-yeongyu/senpi-codemode/src/prompt/eval-prompt-template.ts

@@ -1,7 +1,7 @@
 export const EVAL_PROMPT_TEMPLATE = `Run one step of code in a persistent kernel.
 
 <instruction>
-**One eval call = one cell = one logical step.** Top-level names persist per language across eval calls{{#if spawns}}, tool calls and \`task\` subagents{{else}} and tool calls{{/if}}: define helpers and clients once and reuse them instead of re-importing or re-reading. Rebuild state only after \`reset\`, a kernel restart, or a \`NameError\`/\`ReferenceError\`, and check a sentinel variable first so a re-run cannot duplicate side effects.
+**One eval call = one cell = one logical step.** Top-level names persist per language across eval calls{{#if spawns}}, tool calls and \`task\` subagents{{else}} and tool calls{{/if}}: define helpers and clients once and reuse them instead of re-importing or re-reading. For large text, use bounded chunks or write it to a file and read it with offsets; treat truncation notices as incomplete data and follow the full-output path. Rebuild state only after \`reset\`, a kernel restart, or a \`NameError\`/\`ReferenceError\`, and check a sentinel variable first so a re-run cannot duplicate side effects.
 
 {{#if styleClaude}}<eval_first_batching>
 Batch a step's independent calls in one cell with \`parallel(thunks)\`; write real code around them - loops, branches, joins, a try/except per risky item - and keep every failed or missing item in the result verbatim; re-read truncated output before deciding.

package/node_modules/@earendil-works/pi-agent-core/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@earendil-works/pi-agent-core",
-	"version": "2026.9.10",
+	"version": "2026.9.12-2",
 	"description": "General-purpose agent with transport abstraction, state management, and attachment support",
 	"type": "module",
 	"main": "./dist/index.js",
@@ -35,8 +35,8 @@
 		"prepublishOnly": "npm run build"
 	},
 	"dependencies": {
-		"@earendil-works/pi-ai": "npm:@code-yeongyu/senpi-ai@2026.9.10",
-		"@earendil-works/pi-telemetry": "npm:@code-yeongyu/senpi-telemetry@2026.9.10",
+		"@earendil-works/pi-ai": "npm:@code-yeongyu/senpi-ai@2026.9.12-2",
+		"@earendil-works/pi-telemetry": "npm:@code-yeongyu/senpi-telemetry@2026.9.12-2",
 		"diff": "9.0.0",
 		"ignore": "7.0.6",
 		"typebox": "1.3.18",

package/node_modules/@earendil-works/pi-ai/dist/api/cursor-agent/measure.d.ts

@@ -15,6 +15,17 @@ export declare function buildCursorHistoryForTest(messages: Message[], activeUse
     turnUserMessagesJson: unknown[];
     turnStepMessagesJson: unknown[][];
 };
+/**
+ * Serialized byte cost of the MODEL INPUT alone: the `rootPromptMessagesJson`
+ * blobs Cursor's server replays as the prompt. `measureCursorHistorySerializedBytes`
+ * additionally counts the `turns[]` display copies of the same conversation, so
+ * it reports roughly twice this number and overstates what the model ingests.
+ * Each referenced blob is counted once per reference, because a blob replayed
+ * twice occupies the prompt twice.
+ *
+ * First proposed in #1614.
+ */
+export declare function measureCursorModelInputSerializedBytes(messages: Message[], activeUserMessageIndex?: number): number;
 export declare function measureCursorHistorySerializedBytes(messages: Message[], activeUserMessageIndex?: number): number;
 export declare function buildCursorHistoryWireBytesForTest(messages: Message[], activeUserMessageIndex?: number): Uint8Array[];
 //# sourceMappingURL=measure.d.ts.map

package/node_modules/@earendil-works/pi-ai/dist/api/cursor-agent/measure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"measure.d.ts","sourceRoot":"","sources":["../../../src/api/cursor-agent/measure.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAkC,OAAO,EAA4C,MAAM,gBAAgB,CAAC;AAwJxH;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CASzG;AAwPD,yFAAyF;AACzF,wBAAgB,yBAAyB,CACxC,QAAQ,EAAE,OAAO,EAAE,EACnB,sBAAsB,SAAqC,GACzD;IACF,sBAAsB,EAAE,OAAO,EAAE,CAAC;IAClC,oBAAoB,EAAE,OAAO,EAAE,CAAC;IAChC,oBAAoB,EAAE,OAAO,EAAE,EAAE,CAAC;CAClC,CAsBA;AAoCD,wBAAgB,mCAAmC,CAClD,QAAQ,EAAE,OAAO,EAAE,EACnB,sBAAsB,SAAqC,GACzD,MAAM,CAKR;AACD,wBAAgB,kCAAkC,CACjD,QAAQ,EAAE,OAAO,EAAE,EACnB,sBAAsB,SAAqC,GACzD,UAAU,EAAE,CAKd"}
+{"version":3,"file":"measure.d.ts","sourceRoot":"","sources":["../../../src/api/cursor-agent/measure.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAkC,OAAO,EAA4C,MAAM,gBAAgB,CAAC;AAwJxH;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CASzG;AAwPD,yFAAyF;AACzF,wBAAgB,yBAAyB,CACxC,QAAQ,EAAE,OAAO,EAAE,EACnB,sBAAsB,SAAqC,GACzD;IACF,sBAAsB,EAAE,OAAO,EAAE,CAAC;IAClC,oBAAoB,EAAE,OAAO,EAAE,CAAC;IAChC,oBAAoB,EAAE,OAAO,EAAE,EAAE,CAAC;CAClC,CAsBA;AAoCD;;;;;;;;;GASG;AACH,wBAAgB,sCAAsC,CACrD,QAAQ,EAAE,OAAO,EAAE,EACnB,sBAAsB,SAAqC,GACzD,MAAM,CAOR;AAED,wBAAgB,mCAAmC,CAClD,QAAQ,EAAE,OAAO,EAAE,EACnB,sBAAsB,SAAqC,GACzD,MAAM,CAKR;AACD,wBAAgB,kCAAkC,CACjD,QAAQ,EAAE,OAAO,EAAE,EACnB,sBAAsB,SAAqC,GACzD,UAAU,EAAE,CAKd"}

package/node_modules/@earendil-works/pi-ai/dist/api/cursor-agent/measure.js

@@ -431,6 +431,24 @@ function extractImages(content) {
         },
     }));
 }
+/**
+ * Serialized byte cost of the MODEL INPUT alone: the `rootPromptMessagesJson`
+ * blobs Cursor's server replays as the prompt. `measureCursorHistorySerializedBytes`
+ * additionally counts the `turns[]` display copies of the same conversation, so
+ * it reports roughly twice this number and overstates what the model ingests.
+ * Each referenced blob is counted once per reference, because a blob replayed
+ * twice occupies the prompt twice.
+ *
+ * First proposed in #1614.
+ */
+export function measureCursorModelInputSerializedBytes(messages, activeUserMessageIndex = findLastUserMessageIndex(messages)) {
+    const blobStore = new Map();
+    let total = 0;
+    for (const blobId of buildRootPromptMessagesJson(messages, [], blobStore, activeUserMessageIndex)) {
+        total += readCursorBlob(blobStore, blobId).byteLength;
+    }
+    return total;
+}
 export function measureCursorHistorySerializedBytes(messages, activeUserMessageIndex = findLastUserMessageIndex(messages)) {
     return buildCursorHistoryWireBytesForTest(messages, activeUserMessageIndex).reduce((total, bytes) => total + bytes.byteLength, 0);
 }