@cydm/pie 2.7.12 → 2.7.13

package/README.md

@@ -211,11 +211,14 @@ Main key bindings:
 - `Enter` submit message
 - `Shift+Enter` insert a new line
 - `\` + `Enter` insert a new line in terminals without modified-enter support
-- `Ctrl+C` exit
-- `Ctrl+D` exit
+- `Ctrl+C` clear the editor; press twice within 500 ms to exit
+- `Ctrl+D` exit when the editor is empty; forward-delete otherwise
+- `Ctrl+V` / `Alt+V` / `Cmd+V` paste an image from the clipboard when the main chat editor owns focus (terminal clipboard first, OS helper fallback). Plan refinement, extension input/editor/custom UI, visible overlays, and the mention picker retain their own paste keys.
 - `Ctrl+O` expand or collapse tool output
 - `/` open the slash command menu
 
+OS clipboard images are staged in per-read private temporary directories (0700 directories and exclusively reserved 0600 files on POSIX), including subprocess output, and removed after staging or on failure. Windows uses the user's temporary directory and inherited OS access controls. Terminal OSC 5522 frames and CSI 5522 support replies are incrementally framed, size-bounded, and never flushed as keyboard input while recognized: the default inter-chunk deadline is 1s, with a 10s absolute frame deadline. Failed frames discard their tails through the terminator or until 1s of idle recovery. An ambiguous lone Escape keeps its normal keyboard timeout unless a clipboard request is active; even then it is eventually delivered as Escape. After idle recovery, arbitrarily late bare payload bytes cannot be distinguished from new typing.
+
 Direct shell mode:
 
 ```text
@@ -333,17 +336,13 @@ Run `pie doctor` to check whether chrome-devtools-axi and a Chrome browser are d
 
 ## Terminal UI Automation
 
-The built-in `tui-use` skill drives interactive terminal programs - REPLs, pdb/gdb debugger sessions, and full-screen TUI apps - through Pie's packaged PTY runtime. Run `node <skill-baseDir>/tui-use-cli.js --help`; no first-use dependency download or global CLI is required. Windows uses native PowerShell and ConPTY. State lives in `~/.pie/tui-use`, or a dedicated `PIE_TUI_USE_STATE_DIR`. Always target sessions with `--session <id>`, confirm termination with `wait --exit`, and clean up only sessions and daemons you own. Use plain `bash` for non-interactive commands.
+The built-in `tui-use` skill drives interactive terminal programs - REPLs, pdb/gdb debugger sessions, and full-screen TUI apps - through Pie's packaged PTY runtime. Run `node <skill-baseDir>/tui-use-cli.js --help`; no first-use dependency download or global CLI is required. Windows uses native PowerShell and ConPTY. State lives in `~/.pie/tui-use`, or a dedicated `PIE_TUI_USE_STATE_DIR`. Always target sessions with `--session <id>`, confirm termination with `wait --exit`, and clean up only sessions and daemons you own. Use the `shell` tool for non-interactive commands.
 
 ## Desktop Control (computer-use)
 
-The built-in `computer-use` extension (vendored from `@injaneity/pi-computer-use@0.5.1`, frozen and self-maintained by Pie) controls real desktop applications on macOS, Windows, and Linux through a native accessibility helper. Desktop control is a last resort - prefer API, CLI, or web tools whenever they can accomplish the task.
-
-Tools are tiered:
+The built-in `computer-use-axi` skill controls real desktop applications on macOS, Windows, and Linux through a native accessibility helper. Desktop control is a last resort - prefer API, CLI, or web tools whenever they can accomplish the task. Invoke the skill's CLI through the `shell` tool (`node <skill-baseDir>/computer-use-axi-cli.js <command>`); observation commands read UI state, while `act` synthesizes real input. These are CLI operations, not a separate model-visible extension tool tier, so normal shell confirmation policy applies.
 
-- **Observe tier (default)** - `find_roots`, `observe_ui`, `search_ui`, `expand_ui`, `inspect_ui`, `read_text`, `wait_for` read screen/UI state.
-- **Browser tier (default)** - `launch_browser`, `navigate_browser`, `evaluate_browser` control a managed CDP context. Navigation and JavaScript evaluation can have side effects; these are not read-only tools.
-- **Act tier (first-use confirmation)** - `act_ui` synthesizes real input (click, type, scroll, keypress, drag). The first `act_ui` call in each session asks for confirmation (class `computer_use_act`); YOLO mode bypasses it, and non-interactive hosts block it deterministically.
+Read `builtin/skills/computer-use-axi/SKILL.md` for `roots`, bounded observation, checked actions and browser workflows. On macOS, run the CLI's `permissions setup` and then `permissions recheck` after granting Accessibility and Screen Recording; starting Pie interactively is not a substitute for that setup flow.
 
 Platform notes:
 
@@ -351,7 +350,7 @@ Platform notes:
 - **Windows**: the helper installs to `~/.pie/helpers/computer-use/windows-bridge.exe` and needs an interactive desktop session.
 - **Linux**: the helper installs to `~/.pie/helpers/computer-use/linux-bridge` and needs an AT-SPI2 bus (a running desktop session; headless servers are not supported).
 
-Config: `~/.pie/extensions/computer-use.json` (user) or `.pie/computer-use.json` (project) with `browser_use`, `headless`, `cursor_overlay`, `managed_browser`; env overrides `PIE_COMPUTER_USE_BROWSER_USE` / `PIE_COMPUTER_USE_HEADLESS` / `PIE_COMPUTER_USE_CURSOR_OVERLAY` / `PIE_COMPUTER_USE_MANAGED_BROWSER`. The engine ships as the `computer-use-axi` skill: invoke it through bash (`node <skill baseDir>/computer-use-axi-cli.js <command>`) per its SKILL.md, and run `pie doctor` for helper install status.
+Config: `~/.pie/extensions/computer-use.json` (user) or `.pie/computer-use.json` (project) with `browser_use`, `headless`, `cursor_overlay`, `managed_browser`; env overrides `PIE_COMPUTER_USE_BROWSER_USE` / `PIE_COMPUTER_USE_HEADLESS` / `PIE_COMPUTER_USE_CURSOR_OVERLAY` / `PIE_COMPUTER_USE_MANAGED_BROWSER`. Run `pie doctor` for helper install status.
 
 ## Web Research
 
@@ -363,13 +362,13 @@ Pie exposes one default model-visible web tool: `web_research`. Use it for publi
 
 ## Permissions
 
-Pie's default tools operate from the current workspace. File tools are workspace-scoped, `~/.pie` is allowlisted for Pie configuration/session support, and shell commands return structured timeout/truncation/error details. The canonical shell tool is still named `bash` for compatibility; on Windows `shell:auto` uses PowerShell, and callers can explicitly request `bash`, `powershell`, or `cmd`. High-risk shell commands require confirmation outside YOLO mode; the confirmation dialog also offers a time-boxed `Yolo (5 min)` option that suppresses further high-risk prompts for five minutes without enabling full YOLO mode. `/settings/yolo` relaxes filesystem sandbox directory restrictions and should only be used in trusted workspaces. `pie permissions` prints the current policy-derived safety summary.
+Pie's default tools operate from the current workspace. File tools are workspace-scoped, `~/.pie` is allowlisted for Pie configuration/session support, and shell commands return structured timeout/truncation/error details. The canonical executable tool is named `shell`; `bash` remains only a historical replay/rendering and policy identifier, not a second executable alias. On Windows `shell:auto` uses PowerShell, and callers can explicitly request the `bash`, `powershell`, or `cmd` dialect. High-risk shell commands require confirmation outside YOLO mode; the confirmation dialog also offers a time-boxed `Yolo (5 min)` option that suppresses further high-risk prompts for five minutes without enabling full YOLO mode. Explicitly turning `/settings/yolo off` revokes both persistent YOLO and any live temporary grant; status reports a remaining grant separately. `/settings/yolo` relaxes filesystem sandbox directory restrictions and should only be used in trusted workspaces. `pie permissions` prints the current policy-derived safety summary.
 
-In interactive Plan mode (`/tools/plan`), workspace editing tools are unavailable. The `bash` guard accepts simple read commands and read-only pipelines such as `rg 'TODO' . | head -20`; it blocks redirects, command substitution, and write-capable subcommands. Use `plan_scratch` to write, read, or list temporary text drafts in a directory dedicated to the current session. Shell redirection to `/tmp` remains blocked in Plan mode. When the plan is ready, the agent submits the ordered steps with `plan_submit` and you choose to execute immediately (progress is tracked through `[DONE:n]` markers in responses), keep planning, or refine the plan in a prefilled editor; a plan written as plain text under a `Plan:`/`计划：` heading is still detected as a fallback. Leave Plan mode before changing workspace files.
+In interactive Plan mode (`/tools/plan`), workspace editing tools are unavailable. The Plan-mode `shell` guard accepts simple read commands and read-only pipelines such as `rg 'TODO' . | head -20`; it blocks redirects, command substitution, and write-capable subcommands. Use `plan_scratch` to write, read, or list temporary text drafts in a directory dedicated to the current session. Shell redirection to `/tmp` remains blocked in Plan mode. When the plan is ready, the agent submits the ordered steps with `plan_submit` and you choose to execute immediately (progress is tracked through `[DONE:n]` markers in responses), keep planning, or refine the plan in a prefilled editor; a plan written as plain text under a `Plan:`/`计划：` heading is still detected as a fallback. Leave Plan mode before changing workspace files.
 
 ## Code Intelligence
 
-`code_intel` provides read-only JS/TS diagnostics, definition, references, symbols, and hover. CLI uses an isolated TypeScript worker by default and falls back to bounded lightweight text analysis on worker startup/OOM/crash/timeout failures; aborts, permission errors, and path escapes do not fallback. Unity uses a Node sidecar contract for TypeScript intelligence so the PuerTS bundle does not import Node-only parser dependencies.
+The CLI's former TypeScript-service `code_intel` tool has been retired. Unity currently exposes a lightweight provider for read-only JS/TS diagnostics, definition, references, symbols, and hover; do not infer a CLI TypeScript worker or a Unity Node sidecar from the old documentation.
 
 ## Diagnostics
 
@@ -405,7 +404,7 @@ Every management command (`sessions`, `doctor`, `models`, `extensions`, `permiss
 - Errors are structured on stdout: `{"v":1,"ok":false,"kind":"...","error":{"code":"session_not_found","message":"...","hint":"..."}}`.
 - Exit codes: `0` success, `1` business failure, `2` usage error. Unknown flags fail loudly; every subcommand supports `--help`.
 - `sessions list --json` defaults to the current project (`--all` lists every project). Rows are minimal (`id`, `name`, `updatedAt`, `count`) with `--fields` and `--full` opt-ins; `sessions read` truncates content by default with the same opt-ins.
-- JSONL protocol mode (`--json-events`) identifies entries by `entryId` only (the legacy `checkpointId` alias is gone) and caps large tool results and turn summaries by default; pass `--event-detail full` for untruncated payloads. Truncation always carries `truncated`/`fullLength` markers.
+- JSONL protocol mode (`--json-events`) identifies entries by `entryId` only (the legacy `checkpointId` alias is gone) and caps large tool results and turn summaries by default; pass `--event-detail full` for larger but still bounded payloads (including a 4,000-character string cap, depth/item/key limits). Affected tool-result strings carry `truncated`/`fullLength`; other bounded structures may use only `truncated`.
 
 Run `pie capabilities --json` to discover the full command surface, flags, and exit-code contract programmatically.
 

package/dist/builtin/extensions/ask-user/index.js

@@ -1,9 +1,9 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   createAskUserCapability
-} from "../../../chunks/chunk-AFPRX5XI.js";
-import "../../../chunks/chunk-2NBUFVUQ.js";
-import "../../../chunks/chunk-EN47TIBG.js";
+} from "../../../chunks/chunk-CIFC6QVB.js";
+import "../../../chunks/chunk-HGUYS5SF.js";
+import "../../../chunks/chunk-R46YPPTU.js";
 import "../../../chunks/chunk-XXGYUYXI.js";
 import "../../../chunks/chunk-LZQXQOPJ.js";
 

package/dist/builtin/extensions/plan-mode/index.js

@@ -6,9 +6,9 @@ import {
   extractPlanTodoItems,
   markCompletedPlanSteps,
   restoreExecutionState
-} from "../../../chunks/chunk-AFPRX5XI.js";
-import "../../../chunks/chunk-2NBUFVUQ.js";
-import "../../../chunks/chunk-EN47TIBG.js";
+} from "../../../chunks/chunk-CIFC6QVB.js";
+import "../../../chunks/chunk-HGUYS5SF.js";
+import "../../../chunks/chunk-R46YPPTU.js";
 import {
   Type
 } from "../../../chunks/chunk-XXGYUYXI.js";

package/dist/builtin/extensions/subagent/index.js

@@ -6,15 +6,15 @@ import {
   formatTransportLifecycle,
   getConfigDir,
   logTransportLifecycle
-} from "../../../chunks/chunk-YI3CSQGD.js";
+} from "../../../chunks/chunk-D7RMNFVM.js";
 import {
   SUBAGENT_SESSION_RECORD_VERSION,
   createPolicyEnforcedTools,
   createSharedFileSystemTools,
   createSubagentCapability
-} from "../../../chunks/chunk-AFPRX5XI.js";
-import "../../../chunks/chunk-2NBUFVUQ.js";
-import "../../../chunks/chunk-EN47TIBG.js";
+} from "../../../chunks/chunk-CIFC6QVB.js";
+import "../../../chunks/chunk-HGUYS5SF.js";
+import "../../../chunks/chunk-R46YPPTU.js";
 import "../../../chunks/chunk-XXGYUYXI.js";
 import "../../../chunks/chunk-LZQXQOPJ.js";
 

package/dist/builtin/extensions/todo/index.js

@@ -8,9 +8,9 @@ import {
   executeManageTodoList,
   executionStateToTodos,
   restoreExecutionState
-} from "../../../chunks/chunk-AFPRX5XI.js";
-import "../../../chunks/chunk-2NBUFVUQ.js";
-import "../../../chunks/chunk-EN47TIBG.js";
+} from "../../../chunks/chunk-CIFC6QVB.js";
+import "../../../chunks/chunk-HGUYS5SF.js";
+import "../../../chunks/chunk-R46YPPTU.js";
 import "../../../chunks/chunk-XXGYUYXI.js";
 import "../../../chunks/chunk-LZQXQOPJ.js";
 

package/dist/builtin/skills/computer-use-axi/computer-use-axi-broker.js

@@ -5022,17 +5022,19 @@ function validateRequest(value) {
   const params = validateCommandParams(command, value.params);
   const cwd = value.cwd === void 0 ? process.cwd() : boundedString(value.cwd, "cwd", 4096);
   if (!path3.isAbsolute(cwd)) throw new BrokerProtocolError("invalid_request", "cwd must be absolute.");
-  const rawEnvironment = value.environment ?? {};
-  assertPlainRecord(rawEnvironment, "environment");
-  assertKeys(rawEnvironment, "environment", REQUEST_ENV_KEYS);
-  for (const entry of Object.values(rawEnvironment)) {
-    if (typeof entry !== "string") throw new BrokerProtocolError("invalid_request", "environment values must be strings.");
-  }
-  let environment;
-  try {
-    environment = captureComputerUseEnvironment(rawEnvironment);
-  } catch (error) {
-    throw new BrokerProtocolError("invalid_request", String(error));
+  let environment = {};
+  if (command !== "stop") {
+    const rawEnvironment = value.environment ?? {};
+    assertPlainRecord(rawEnvironment, "environment");
+    assertKeys(rawEnvironment, "environment", REQUEST_ENV_KEYS);
+    for (const entry of Object.values(rawEnvironment)) {
+      if (typeof entry !== "string") throw new BrokerProtocolError("invalid_request", "environment values must be strings.");
+    }
+    try {
+      environment = captureComputerUseEnvironment(rawEnvironment);
+    } catch (error) {
+      throw new BrokerProtocolError("invalid_request", String(error));
+    }
   }
   const budgetMs = value.budgetMs === void 0 ? BROKER_DEFAULT_REQUEST_BUDGET_MS : Math.trunc(boundedNumber(value.budgetMs, "budgetMs", BROKER_MIN_REQUEST_BUDGET_MS, BROKER_MAX_REQUEST_BUDGET_MS));
   return {

package/dist/builtin/skills/computer-use-axi/computer-use-axi-runtime.js

@@ -378,7 +378,7 @@ function isBrokerResponse(value) {
 }
 async function callBroker(options) {
   if (options.command !== "stop") resolveTestOnlyBackend();
-  const environment = captureComputerUseEnvironment();
+  const environment = options.command === "stop" ? {} : captureComputerUseEnvironment();
   const endpoint = resolveBrokerEndpoint();
   const budgetMs = Math.min(Math.max(options.budgetMs ?? BROKER_DEFAULT_REQUEST_BUDGET_MS, 100), 15 * 6e4);
   const spawnState = { spawned: false };

package/dist/chunks/{chunk-AFPRX5XI.js → chunk-CIFC6QVB.js}

@@ -1,8 +1,10 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   Agent,
+  createAgentOperationError,
+  getAgentFailureMetadata,
   getToolCallerIdentity
-} from "./chunk-2NBUFVUQ.js";
+} from "./chunk-HGUYS5SF.js";
 import {
   AssistantMessageEventStream,
   FileSystemGateway,
@@ -12,7 +14,7 @@ import {
   getPlatformConfig,
   hashText,
   streamSimple
-} from "./chunk-EN47TIBG.js";
+} from "./chunk-R46YPPTU.js";
 import {
   Type
 } from "./chunk-XXGYUYXI.js";
@@ -1001,7 +1003,7 @@ var PLAN_POWERSHELL_READ_COMMANDS = new Set([
   "Compare-Object",
   "Test-Path"
 ].map((name) => name.toLowerCase()));
-var PLAN_POWERSHELL_READ_ALIASES = /* @__PURE__ */ new Set(["cat", "ls", "pwd", "echo", "sort"]);
+var PLAN_POWERSHELL_READ_ALIASES = /* @__PURE__ */ new Set(["cat", "ls", "pwd", "echo"]);
 var PLAN_POWERSHELL_SAFE_PARAMETERS = /^(?:-(?:Raw|TotalCount|Head|Tail|First|Last|Wait|LiteralPath|Path|Name|Pattern|Recurse|Filter|Include|Exclude|SimpleMatch|CaseSensitive|Quiet|Word|Line|Character|Encoding|ErrorAction|WarningAction))$/i;
 var PLAN_POWERSHELL_SEPARATORS = /[;\n\r\t&<>|]/;
 var PLAN_POWERSHELL_NON_ASCII = /[^\x20-\x7E]/;
@@ -1698,12 +1700,7 @@ Return a text-only successor handoff. Do not call any tools.` }],
       ).result();
       throwIfAborted();
       if (response.stopReason === "error" && (!response.content.some((block) => block.type === "toolCall") || classifyRemoteFailure(response.remoteFailure, response.errorMessage ?? "") !== void 0)) {
-        const providerError = new Error(response.errorMessage || "Compaction provider error");
-        const explicitRetryable = response.retryable;
-        if (typeof explicitRetryable === "boolean") providerError.retryable = explicitRetryable;
-        if (response.replayEligible === true) providerError.replayEligible = true;
-        providerError.remoteFailure = response.remoteFailure;
-        throw providerError;
+        throw Object.assign(new Error(response.errorMessage || "Compaction provider error"), getAgentFailureMetadata(response));
       }
     } catch (error) {
       throwIfAborted();
@@ -5208,7 +5205,11 @@ async function runPreRequestAutoCompact(params) {
   try {
     await params.runAutoCompact();
   } catch (error) {
-    if (boundary) throw error;
+    if (boundary) throw createAgentOperationError(error, {
+      origin: "tool-continuation",
+      operation: "compaction",
+      terminal: true
+    });
     if (params.isCurrent?.() !== false) params.setRecoveryState("none");
   }
 }
@@ -5517,7 +5518,8 @@ function isAssistantTerminalCompletion(message) {
   return !message.content.some((block) => block.type === "toolCall");
 }
 function createFailureClassification(context, retry, classifyFailure) {
-  if (context.message?.role === "assistant" && context.message.replayEligible === true && context.message.stopReason === "error") {
+  const terminalOperation = context.message?.role === "assistant" && context.message.operationFailure?.terminal === true;
+  if (!terminalOperation && context.message?.role === "assistant" && context.message.replayEligible === true && context.message.stopReason === "error") {
     return {
       kind: "provider_transient",
       retryable: true,
@@ -5528,7 +5530,7 @@ function createFailureClassification(context, retry, classifyFailure) {
       replayExempt: true
     };
   }
-  if (context.message?.role === "assistant" && context.message.retryable === false) {
+  if (context.message?.role === "assistant" && (terminalOperation || context.message.retryable === false)) {
     return { kind: "unknown", retryable: false, compactable: false, userAbort: context.message.stopReason === "aborted", terminal: true, message: context.errorMessage };
   }
   const remote = context.message?.role === "assistant" && context.message.stopReason === "error" ? classifyRemoteFailure(context.message.remoteFailure, context.errorMessage) : void 0;
@@ -6311,7 +6313,8 @@ async function handleAgentSessionTurnEndRuntimePolicies(params) {
     params.emit({ type: "turn_settled" });
     return;
   }
-  const compactDecision = params.getAutoCompactDecision?.({
+  const recoveryClosed = failure?.terminal && params.message?.role === "assistant" && (params.message.retryable === false || params.message.operationFailure?.terminal === true);
+  const compactDecision = recoveryClosed ? void 0 : params.getAutoCompactDecision?.({
     agent: params.agent,
     sessionManager: params.sessionManager,
     cwd: params.cwd,
@@ -9565,6 +9568,22 @@ function createAgentInstance(deps, systemPrompt, tools, model, apiKey, thinkingL
   agentRunHooks.set(agent, hooks);
   return agent;
 }
+function inFlightRequestSummary(observation, now) {
+  const transport = observation?.transport;
+  if (!transport || transport.length === 0) return void 0;
+  const lastStartIndex = transport.map((event) => event.phase).lastIndexOf("request_start");
+  if (lastStartIndex < 0) return void 0;
+  const start = transport[lastStartIndex];
+  const after = transport.slice(lastStartIndex + 1);
+  const terminal = after.find((event) => event.phase === "terminal_accepted");
+  if (terminal) {
+    const gapMs = Math.max(0, now - terminal.at);
+    return `last model response completed ${Math.round(gapMs / 100) / 10}s before the deadline; no request in flight at abort`;
+  }
+  const sawFirst = after.some((event) => event.phase === "first_application_message");
+  const ageMs = Math.max(0, now - start.at);
+  return `a model request was still in flight at abort (${Math.round(ageMs / 100) / 10}s old, ${sawFirst ? "receiving stream events" : "no application message yet"}) \u2014 the deadline cut an unfinished response, which usually means the budget is too small for this reasoning level, not a transport stall`;
+}
 function isParentHandoffRequired(task) {
   return task.report?.availability !== "available" || task.mode === "edit" || task.status === "timeout" || task.status === "failed" || task.confidenceSignals.some((signal) => signal.type === "tool_error" || signal.type === "no_tool_use" || signal.type === "no_text_report");
 }
@@ -10069,7 +10088,8 @@ ${DELEGATION_REPORT_INSTRUCTION}`;
     task.status = timedOut ? "timeout" : signal?.aborted ? "cancelled" : "failed";
     observeDelegationPhase(task.observation, timedOut ? "deadline" : signal?.aborted ? "cancelled" : "failed");
     phaseProgress(task.observation.phase);
-    task.error = errorMessage.slice(0, 2e3);
+    const deadlineDetail = timedOut ? inFlightRequestSummary(task.observation, Date.now()) : void 0;
+    task.error = `${errorMessage.slice(0, 2e3)}${deadlineDetail ? `; ${deadlineDetail}` : ""}`.slice(0, 2e3);
     const failureCarrier = error;
     if (failureCarrier?.subagentFailure) {
       task.failure = failureCarrier.subagentFailure;
@@ -10086,7 +10106,7 @@ ${DELEGATION_REPORT_INSTRUCTION}`;
     task.report ??= parseDelegationReport(void 0, task.id);
     task.parentHandoffRequired = isParentHandoffRequired(task);
     task.completedAt = Date.now();
-    report({ message: `[${task.name}] Failed: ${errorMessage.slice(0, 100)}`, increment: 100 });
+    report({ message: `[${task.name}] Failed: ${(errorMessage + (deadlineDetail ? `; ${deadlineDetail}` : "")).slice(0, 160)}`, increment: 100 });
   } finally {
     if (heartbeat) {
       clearInterval(heartbeat);
@@ -10181,7 +10201,7 @@ function buildParallelResult(tasks, totalDuration) {
 `;
     }
     if (task.sessionId) {
-      resultText += task.sessionBusy ? `Session: ${task.sessionId} (busy \u2014 previous run is still settling; recall will fail until it settles` : `Session: ${task.sessionId} (resumable \u2014 pass as "sessionId" in a later spawn to continue this subagent with its accumulated context`;
+      resultText += task.sessionBusy ? `Session: ${task.sessionId} (busy \u2014 previous run is still settling; recall will fail until it settles` : `Session: ${task.sessionId} (resumable \u2014 pass as "sessionId" in a later spawn to continue this subagent with its accumulated context; add resumeMode:"report" to reuse only its last report`;
       if (task.sessionRunCount) resultText += `; run ${task.sessionRunCount}`;
       if (task.sessionPersisted) resultText += "; persisted to disk, survives restarts";
       resultText += ")\n";
@@ -10357,7 +10377,7 @@ Default mode="read" is for investigation, search, review, or triage and cannot e
             priority: Type.Optional(Type.Union([Type.Literal("fast"), Type.Literal("thorough")], { description: "fast uses lower-cost defaults; thorough raises model class when needed." })),
             model: Type.Optional(Type.String({ description: 'Explicit model override, e.g. "provider/model-id". Only when the user names a specific model; otherwise automatic.' })),
             thinkingLevel: Type.Optional(Type.Union([Type.Literal("off"), Type.Literal("minimal"), Type.Literal("low"), Type.Literal("medium"), Type.Literal("high"), Type.Literal("xhigh")], { description: "off|minimal|low|medium|high|xhigh. Default medium; override only when the user asks or for cheap lookups (off)." })),
-            timeout: Type.Optional(Type.Number({ description: "Seconds. Default 1200; set higher for long tasks." })),
+            timeout: Type.Optional(Type.Number({ description: "Seconds. Default 1200; set higher for long tasks. Note: high/xhigh reasoning tasks can spend minutes per response on thinking alone \u2014 budget accordingly or the deadline will cut an in-flight response mid-thought." })),
             resumeMode: Type.Optional(Type.Union([Type.Literal("full"), Type.Literal("report")], { description: "Default full retains prior transcript. Explicit report rebuilds with current tools/model/credentials and only the latest valid historical report as data plus the new task; fails if unavailable." })),
             sessionId: Type.Optional(Type.String({ description: "Continue a previous subagent session by id (from an earlier result's Session line); full mode retains historical input with unknown cost. Optional mode/model/thinkingLevel reconfigure it; one task at a time; recalls never replay on failure and must target an idle session; prefer a fresh task for independent reviews." }))
           }

package/dist/chunks/{chunk-YI3CSQGD.js → chunk-D7RMNFVM.js}

@@ -7,12 +7,12 @@ import {
   defaultShellKindForPlatform,
   interpretShellExit,
   requestInteraction
-} from "./chunk-AFPRX5XI.js";
+} from "./chunk-CIFC6QVB.js";
 import {
   EMPTY_ASSISTANT_CONTENT_ERROR,
   OPENAI_COMPAT_PROTOCOL_ERROR_CODE,
   getLogger
-} from "./chunk-EN47TIBG.js";
+} from "./chunk-R46YPPTU.js";
 import {
   Type
 } from "./chunk-XXGYUYXI.js";

package/dist/chunks/{chunk-2NBUFVUQ.js → chunk-HGUYS5SF.js}

@@ -4,7 +4,27 @@ import {
   disposeModelTransports,
   streamSimple,
   validateToolArguments
-} from "./chunk-EN47TIBG.js";
+} from "./chunk-R46YPPTU.js";
+
+// ../../packages/agent-core/src/failure.ts
+function getAgentFailureMetadata(error) {
+  if (!error || typeof error !== "object") return {};
+  const source = error;
+  return {
+    ...source.retryable === false ? { retryable: false } : {},
+    ...source.remoteFailure ? { remoteFailure: source.remoteFailure } : {},
+    ...source.replayEligible === true ? { replayEligible: true } : {},
+    ...typeof source.replayClass === "string" ? { replayClass: source.replayClass } : {},
+    ...source.operationFailure ? { operationFailure: source.operationFailure } : {}
+  };
+}
+function createAgentOperationError(error, failure) {
+  return Object.assign(
+    new Error(error instanceof Error ? error.message : String(error), { cause: error }),
+    getAgentFailureMetadata(error),
+    { operationFailure: failure }
+  );
+}
 
 // ../../packages/agent-core/src/agent-loop.ts
 function createLoopErrorMessage(error, config, signal) {
@@ -25,6 +45,7 @@ function createLoopErrorMessage(error, config, signal) {
     },
     stopReason: signal?.aborted ? "aborted" : "error",
     errorMessage: message,
+    ...getAgentFailureMetadata(error),
     timestamp: Date.now()
   };
 }
@@ -1132,6 +1153,8 @@ var Agent = class {
 };
 
 export {
+  getAgentFailureMetadata,
+  createAgentOperationError,
   agentLoop,
   agentLoopContinue,
   createToolCallerIdentity,

package/dist/chunks/{chunk-EN47TIBG.js → chunk-R46YPPTU.js}

@@ -3408,33 +3408,33 @@ function isPuertsReparsePoint(path) {
 }
 function containsPuertsReparsePoint(directory) {
   const slashed = directory.replace(/\\/g, "/");
-  const trimmed = slashed.replace(/\/+$/, "");
-  if (!trimmed || trimmed === "/") return false;
-  const unc = /^\/\/([^/]+)\/([^/]+)/.exec(trimmed);
+  if (!slashed) return false;
+  const unc = /^\/\/([^/]+)\/([^/]+)/.exec(slashed);
   let prefix;
   let rest;
   if (unc) {
     prefix = unc[0];
-    rest = trimmed.slice(prefix.length);
+    rest = slashed.slice(prefix.length);
   } else {
-    const driveRoot = /^([a-zA-Z]:)\//.exec(trimmed);
+    const driveRoot = /^([a-zA-Z]:)\//.exec(slashed);
     if (driveRoot) {
       prefix = `${driveRoot[1]}/`;
-      rest = trimmed.slice(prefix.length);
+      rest = slashed.slice(prefix.length);
     } else {
-      const bareDrive = /^[a-zA-Z]:$/.test(trimmed);
+      const bareDrive = /^[a-zA-Z]:$/.test(slashed);
       if (bareDrive) {
-        return isPuertsReparsePoint(trimmed);
+        return isPuertsReparsePoint(slashed);
       }
-      if (trimmed.startsWith("/")) {
+      if (slashed.startsWith("/")) {
         prefix = "/";
-        rest = trimmed.slice(1);
+        rest = slashed.slice(1);
       } else {
         prefix = "";
-        rest = trimmed;
+        rest = slashed;
       }
     }
   }
+  if (prefix && isPuertsReparsePoint(prefix)) return true;
   let current = prefix;
   for (const part of rest.split("/").filter((segment) => segment.length > 0 && segment !== ".")) {
     current = current ? current.endsWith("/") ? `${current}${part}` : `${current}/${part}` : part;

package/dist/chunks/{src-XDNJ3PHL.js → src-5JJZZ5H7.js}

@@ -4,10 +4,12 @@ import {
   agentLoop,
   agentLoopContinue,
   bindToolCallerIdentity,
+  createAgentOperationError,
   createToolCallerIdentity,
+  getAgentFailureMetadata,
   getToolCallerIdentity
-} from "./chunk-2NBUFVUQ.js";
-import "./chunk-EN47TIBG.js";
+} from "./chunk-HGUYS5SF.js";
+import "./chunk-R46YPPTU.js";
 import "./chunk-XXGYUYXI.js";
 import "./chunk-LZQXQOPJ.js";
 export {
@@ -15,6 +17,8 @@ export {
   agentLoop,
   agentLoopContinue,
   bindToolCallerIdentity,
+  createAgentOperationError,
   createToolCallerIdentity,
+  getAgentFailureMetadata,
   getToolCallerIdentity
 };

package/dist/chunks/{test-stream-LUUGOJMP.js → test-stream-ZBTSPU7J.js}

@@ -1,7 +1,7 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   EventStream
-} from "./chunk-EN47TIBG.js";
+} from "./chunk-R46YPPTU.js";
 import "./chunk-XXGYUYXI.js";
 import "./chunk-LZQXQOPJ.js";
 

package/dist/cli.js

@@ -29,7 +29,7 @@ import {
   migrateConfigFromAgentDir,
   setYoloGrantListener,
   truncateHeadTail
-} from "./chunks/chunk-YI3CSQGD.js";
+} from "./chunks/chunk-D7RMNFVM.js";
 import {
   resolveCliProjectRoot
 } from "./chunks/chunk-WLFOBECN.js";
@@ -94,8 +94,8 @@ import {
   shouldPreserveExecutionStateForUserText,
   supersedeExecutionState,
   verifyPreparedCompactionCommit
-} from "./chunks/chunk-AFPRX5XI.js";
-import "./chunks/chunk-2NBUFVUQ.js";
+} from "./chunks/chunk-CIFC6QVB.js";
+import "./chunks/chunk-HGUYS5SF.js";
 import {
   Deref,
   Errors,
@@ -118,7 +118,7 @@ import {
   sortToolModelCandidatesByCapability,
   streamSimple,
   type_exports
-} from "./chunks/chunk-EN47TIBG.js";
+} from "./chunks/chunk-R46YPPTU.js";
 import {
   IsArray,
   IsBigInt,
@@ -52611,18 +52611,18 @@ function validateRemoteModel(profileId, model) {
   validateWebSearchCapability(model.webSearch, `Remote profile "${profileId}" model "${model.id}" webSearch`);
   validateFileCapabilities(model.fileCapabilities, `Remote profile "${profileId}" model "${model.id}" fileCapabilities`);
 }
-function assertHeadersShape(headers, label) {
-  if (headers === void 0) return;
-  if (!isPlainRecord(headers)) throw new Error(`${label} headers must be an object`);
-  for (const [name, value] of Object.entries(headers)) {
+function assertHeadersShape(headers2, label) {
+  if (headers2 === void 0) return;
+  if (!isPlainRecord(headers2)) throw new Error(`${label} headers must be an object`);
+  for (const [name, value] of Object.entries(headers2)) {
     if (!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/.test(name)) throw new Error(`${label} header name ${name || "(empty)"} is invalid`);
     if (typeof value !== "string") throw new Error(`${label} header ${name} must be a string`);
     if (/[\0-\x08\x0A-\x1F\x7F]/.test(value)) throw new Error(`${label} header ${name} contains an invalid control character`);
   }
 }
-function assertRemoteHeadersSafe(headers, label) {
-  assertHeadersShape(headers, label);
-  for (const name of Object.keys(headers || {})) {
+function assertRemoteHeadersSafe(headers2, label) {
+  assertHeadersShape(headers2, label);
+  for (const name of Object.keys(headers2 || {})) {
     if (/(?:authorization|cookie|api[-_]?key|token|secret|credential)/i.test(name)) {
       throw new Error(`${label} must not provide credential-bearing header ${name}`);
     }
@@ -53252,10 +53252,10 @@ var ModelRegistry = class {
       let payload = cached?.payload;
       let response;
       try {
-        const headers = { Authorization: `Bearer ${apiKey}` };
-        if (cached?.etag) headers["If-None-Match"] = cached.etag;
+        const headers2 = { Authorization: `Bearer ${apiKey}` };
+        if (cached?.etag) headers2["If-None-Match"] = cached.etag;
         response = await fetch(url, {
-          headers,
+          headers: headers2,
           redirect: "manual",
           signal: AbortSignal.timeout(3e3)
         });
@@ -63659,10 +63659,37 @@ var Spacer = class {
 
 // ../../packages/tui/src/stdin-buffer.ts
 import { EventEmitter } from "events";
+
+// ../../packages/tui/src/clipboard-framing.ts
+var headers = [
+  { kind: "osc", prefix: "\x1B]5522" },
+  { kind: "csi", prefix: "\x1B[?5522" }
+];
+function clipboardFrameEnd(data, kind) {
+  const match = kind === "osc" ? /\x07|\x1b\\/.exec(data) : /[\x40-\x7e]/.exec(data);
+  return match ? match.index + match[0].length : void 0;
+}
+function classifyClipboardFragment(data, pending = false) {
+  if (!data) return void 0;
+  for (const { kind, prefix } of headers) {
+    if (prefix.startsWith(data)) {
+      const ambiguous = data === "\x1B" || data === "\x1B[";
+      if (!ambiguous || pending) return { kind, valid: false };
+    } else if (data.startsWith(prefix)) {
+      const end = clipboardFrameEnd(data.slice(2), kind);
+      const length = end === void 0 ? void 0 : end + 2;
+      const frame = length === void 0 ? data : data.slice(0, length);
+      const valid = kind === "osc" ? frame.startsWith(`${prefix};`) : /^\x1b\[\?5522;[0-4]\$y$/.test(frame);
+      return { kind, length, valid };
+    }
+  }
+  return void 0;
+}
+
+// ../../packages/tui/src/stdin-buffer.ts
 var ESC = "\x1B";
 var BRACKETED_PASTE_START = "\x1B[200~";
 var BRACKETED_PASTE_END = "\x1B[201~";
-var OSC_5522_PREFIX = "\x1B]5522;";
 var OSC_5522_MAX_FRAME = 70 * 1024 * 1024;
 function isCompleteSequence(data) {
   if (!data.startsWith(ESC)) {
@@ -63750,16 +63777,29 @@ function isCompleteApcSequence(data) {
   }
   return "incomplete";
 }
-function extractCompleteSequences(buffer, maxClipboardFrame = OSC_5522_MAX_FRAME) {
+function extractCompleteSequences(buffer, maxClipboardFrame = OSC_5522_MAX_FRAME, pending = false) {
   const sequences = [];
   let pos = 0;
   while (pos < buffer.length) {
     const remaining = buffer.slice(pos);
+    const clipboard = classifyClipboardFragment(remaining, pending);
+    if (clipboard) {
+      if (clipboard.length === void 0) return { sequences, remainder: remaining };
+      if (clipboard.valid && clipboard.length <= Math.min(maxClipboardFrame, clipboard.kind === "csi" ? 64 : Infinity)) {
+        sequences.push(remaining.slice(0, clipboard.length));
+      }
+      pos += clipboard.length;
+      continue;
+    }
+    if (remaining.startsWith(BRACKETED_PASTE_START)) {
+      sequences.push(BRACKETED_PASTE_START);
+      return { sequences, remainder: remaining.slice(BRACKETED_PASTE_START.length) };
+    }
     if (remaining.startsWith(`${ESC}]`)) {
       const end = /\x07|\x1b\\/.exec(remaining);
       if (!end) return { sequences, remainder: remaining };
       const length = end.index + end[0].length;
-      if (!remaining.startsWith(OSC_5522_PREFIX) || length <= maxClipboardFrame) sequences.push(remaining.slice(0, length));
+      sequences.push(remaining.slice(0, length));
       pos += length;
       continue;
     }
@@ -63796,7 +63836,8 @@ var StdinBuffer = class extends EventEmitter {
   timeoutMs;
   pasteMode = false;
   pasteBuffer = "";
-  discardingClipboard = false;
+  discardingClipboard;
+  clipboardStarted = 0;
   discardEsc = false;
   options;
   constructor(options = {}) {
@@ -63825,19 +63866,26 @@ var StdinBuffer = class extends EventEmitter {
       return;
     }
     if (this.discardingClipboard) {
-      const discarded = (this.discardEsc ? ESC : "") + str2;
-      const end = /\x07|\x1b\\/.exec(discarded);
-      if (!end) {
-        this.discardEsc = discarded.endsWith(ESC);
-        this.timeout = setTimeout(() => {
-          this.discardingClipboard = false;
-          this.discardEsc = false;
-        }, this.options.clipboardFrameTimeout ?? 1e3);
-        return;
+      const kind = this.discardingClipboard;
+      const heldEscape = this.discardEsc;
+      const discarded = (heldEscape ? ESC : "") + str2;
+      const end = clipboardFrameEnd(discarded, kind);
+      const escape = discarded.indexOf(ESC, heldEscape && str2.startsWith(ESC) ? 1 : 0);
+      const resync = escape >= 0 && escape + 1 < discarded.length && (end === void 0 || escape < end - 1) && !(kind === "osc" && end !== void 0 && escape === end - 2 && discarded.startsWith(`${ESC}\\`, escape));
+      if (resync) {
+        this.discardingClipboard = void 0;
+        this.discardEsc = false;
+        str2 = discarded.slice(escape);
+      } else {
+        if (!end) {
+          this.discardEsc = discarded.endsWith(ESC);
+          this.scheduleDiscardRecovery();
+          return;
+        }
+        this.discardingClipboard = void 0;
+        this.discardEsc = false;
+        str2 = discarded.slice(end);
       }
-      this.discardingClipboard = false;
-      this.discardEsc = false;
-      str2 = discarded.slice(end.index + end[0].length);
     }
     this.buffer += str2;
     if (this.pasteMode) {
@@ -63856,16 +63904,13 @@ var StdinBuffer = class extends EventEmitter {
       }
       return;
     }
-    const startIndex = this.buffer.indexOf(BRACKETED_PASTE_START);
-    if (startIndex !== -1) {
-      if (startIndex > 0) {
-        const beforePaste = this.buffer.slice(0, startIndex);
-        const result2 = extractCompleteSequences(beforePaste);
-        for (const sequence of result2.sequences) {
-          this.emit("data", sequence);
-        }
-      }
-      this.buffer = this.buffer.slice(startIndex + BRACKETED_PASTE_START.length);
+    const result = extractCompleteSequences(this.buffer, this.options.clipboardMaxFrame, this.options.clipboardResponsePending?.());
+    if (result.remainder.length < this.buffer.length) this.clipboardStarted = 0;
+    this.buffer = result.remainder;
+    for (const sequence of result.sequences) {
+      if (sequence !== BRACKETED_PASTE_START) this.emit("data", sequence);
+    }
+    if (result.sequences.at(-1) === BRACKETED_PASTE_START) {
       this.pasteMode = true;
       this.pasteBuffer = this.buffer;
       this.buffer = "";
@@ -63882,40 +63927,29 @@ var StdinBuffer = class extends EventEmitter {
       }
       return;
     }
-    const result = extractCompleteSequences(this.buffer, this.options.clipboardMaxFrame);
-    this.buffer = result.remainder;
-    for (const sequence of result.sequences) {
-      this.emit("data", sequence);
-    }
     if (this.buffer.length > 0) {
-      const heldFor5522 = this.buffer.startsWith(OSC_5522_PREFIX) || this.buffer.length >= 2 && OSC_5522_PREFIX.startsWith(this.buffer) || this.buffer === ESC && this.options.clipboardResponsePending?.();
-      if (heldFor5522 && this.buffer.length <= (this.options.clipboardMaxFrame ?? OSC_5522_MAX_FRAME)) {
+      const fragment = classifyClipboardFragment(this.buffer, this.options.clipboardResponsePending?.());
+      if (fragment) {
+        this.clipboardStarted ||= Date.now();
+        const limit = Math.min(this.options.clipboardMaxFrame ?? OSC_5522_MAX_FRAME, fragment.kind === "csi" ? 64 : Infinity);
+        if (this.buffer.length > limit) {
+          this.discardClipboard(fragment.kind);
+          return;
+        }
+        const deadline = Math.min(
+          this.options.clipboardFrameTimeout ?? 1e3,
+          (this.options.clipboardFrameMaxDuration ?? 1e4) - (Date.now() - this.clipboardStarted)
+        );
         this.timeout = setTimeout(() => {
-          const ambiguousEscape = this.buffer === ESC;
-          this.discardEsc = this.buffer.endsWith(ESC);
-          this.buffer = "";
-          if (ambiguousEscape) {
+          if (this.buffer === ESC) {
+            this.buffer = "";
+            this.clipboardStarted = 0;
             this.emit("data", ESC);
-            return;
-          }
-          this.discardingClipboard = true;
-          this.timeout = setTimeout(() => {
-            this.discardingClipboard = false;
-            this.discardEsc = false;
-          }, this.options.clipboardFrameTimeout ?? 1e3);
-        }, this.options.clipboardFrameTimeout ?? 1e3);
-        return;
-      }
-      if (heldFor5522) {
-        this.discardEsc = this.buffer.endsWith(ESC);
-        this.buffer = "";
-        this.discardingClipboard = true;
-        this.timeout = setTimeout(() => {
-          this.discardingClipboard = false;
-          this.discardEsc = false;
-        }, this.options.clipboardFrameTimeout ?? 1e3);
+          } else this.discardClipboard(fragment.kind);
+        }, Math.max(0, deadline));
         return;
       }
+      this.clipboardStarted = 0;
       this.timeout = setTimeout(() => {
         const flushed = this.flush();
         for (const sequence of flushed) {
@@ -63924,6 +63958,19 @@ var StdinBuffer = class extends EventEmitter {
       }, this.timeoutMs);
     }
   }
+  scheduleDiscardRecovery() {
+    this.timeout = setTimeout(() => {
+      this.discardingClipboard = void 0;
+      this.discardEsc = false;
+    }, this.options.clipboardFrameTimeout ?? 1e3);
+  }
+  discardClipboard(kind) {
+    this.discardEsc = this.buffer.endsWith(ESC);
+    this.buffer = "";
+    this.clipboardStarted = 0;
+    this.discardingClipboard = kind;
+    this.scheduleDiscardRecovery();
+  }
   flush() {
     if (this.timeout) {
       clearTimeout(this.timeout);
@@ -63932,7 +63979,13 @@ var StdinBuffer = class extends EventEmitter {
     if (this.buffer.length === 0) {
       return [];
     }
-    const sequences = this.buffer.startsWith(OSC_5522_PREFIX) || this.buffer.length >= 2 && OSC_5522_PREFIX.startsWith(this.buffer) ? [] : [this.buffer];
+    const fragment = classifyClipboardFragment(this.buffer, this.options.clipboardResponsePending?.());
+    if (fragment && this.buffer !== ESC) {
+      this.discardClipboard(fragment.kind);
+      return [];
+    }
+    const sequences = [this.buffer];
+    this.clipboardStarted = 0;
     this.buffer = "";
     return sequences;
   }
@@ -63944,7 +63997,8 @@ var StdinBuffer = class extends EventEmitter {
     this.buffer = "";
     this.pasteMode = false;
     this.pasteBuffer = "";
-    this.discardingClipboard = false;
+    this.clipboardStarted = 0;
+    this.discardingClipboard = void 0;
     this.discardEsc = false;
   }
   getBuffer() {
@@ -63960,6 +64014,7 @@ import * as fs11 from "node:fs";
 import koffi from "koffi";
 
 // ../../packages/tui/src/osc-5522.ts
+import { randomBytes as randomBytes2 } from "node:crypto";
 var OSC = "\x1B]";
 var ST = "\x1B\\";
 var READ_TIMEOUT_MS = 8e3;
@@ -64016,13 +64071,14 @@ var Osc5522Client = class {
       return true;
     }
     const packet = parseOsc5522Packet(data);
-    if (!packet) return false;
+    if (!packet) return data.startsWith(`${OSC}5522;`);
     const fields = parseMetadata(packet.metadata);
     const type = fields.get("type") ?? "";
-    if (!type.startsWith("read")) return false;
+    if (!type.startsWith("read")) return true;
     const status = fields.get("status");
     const session = this.session;
     if (!session) return true;
+    if (fields.get("id") !== session.id) return true;
     if (status === void 0) {
       this.finishFor(session, { ok: false, kind: "malformed", message: `OSC 5522 read packet without status: ${packet.metadata}` });
       return true;
@@ -64105,6 +64161,7 @@ var Osc5522Client = class {
       return { ok: false, kind: "busy", message: "Another OSC 5522 read is already in flight." };
     }
     const session = {
+      id: `pie-${randomBytes2(8).toString("hex")}`,
       resolve: void 0,
       timer: void 0,
       chunks: [],
@@ -64124,7 +64181,7 @@ var Osc5522Client = class {
     }
     if (this.session !== session) return promise;
     const mimeList = Buffer.from("image/png image/jpeg").toString("base64");
-    this.write(`${OSC}5522;type=read;${mimeList}${ST}`);
+    this.write(`${OSC}5522;id=${session.id}:type=read;${mimeList}${ST}`);
     return promise;
   }
   /** Finish only if `session` is still the live session (identity-bound). */
@@ -70296,12 +70353,21 @@ var YoloGrantTracker = class {
   isActive(now = Date.now()) {
     return this.untilMs > now;
   }
+  remainingMs(now = Date.now()) {
+    return Math.max(0, this.untilMs - now);
+  }
   award(grantMs, now = Date.now()) {
     this.untilMs = now + Math.max(0, grantMs);
   }
   expire() {
     this.untilMs = 0;
   }
+  /** Revoke the active grant and report whether revocation changed live state. */
+  revoke() {
+    const wasActive = this.isActive();
+    this.expire();
+    return wasActive;
+  }
   /** Expiry timestamp (0 when no grant is held); useful for display. */
   get until() {
     return this.untilMs;
@@ -76576,7 +76642,9 @@ async function handleCalmCommand(host, args) {
 async function handleYoloCommand(host, args) {
   const mode = (args || "").trim().toLowerCase();
   if (mode === "status") {
-    host.showStatus(`YOLO mode is ${host.yoloMode ? "on" : "off"}`);
+    const persistent = `YOLO mode is ${host.yoloMode ? "on" : "off"}`;
+    const grantRemaining = host.getYoloGrantRemainingMs();
+    host.showStatus(grantRemaining > 0 ? `${persistent}; temporary high-risk shell grant active for ${Math.max(1, Math.ceil(grantRemaining / 6e4))} more min` : persistent);
     return;
   }
   if (mode && !["on", "off", "enable", "enabled", "disable", "disabled", "true", "false", "1", "0"].includes(mode)) {
@@ -76584,9 +76652,10 @@ async function handleYoloCommand(host, args) {
     return;
   }
   const nextYoloMode = mode ? ["on", "enable", "enabled", "true", "1"].includes(mode) : !host.yoloMode;
+  const revokedGrant = nextYoloMode ? false : host.revokeYoloGrant();
   if (host.yoloMode === nextYoloMode) {
     host.footer.setState({ yoloMode: host.yoloMode });
-    host.showStatus(`YOLO mode already ${host.yoloMode ? "on" : "off"}`);
+    host.showStatus(`YOLO mode already ${host.yoloMode ? "on" : "off"}${revokedGrant ? "; temporary grant revoked" : ""}`);
     return;
   }
   host.yoloMode = nextYoloMode;
@@ -76604,6 +76673,7 @@ async function handleYoloCommand(host, args) {
     host.chatContainer.addChild(new Spacer(1));
     host.chatContainer.addChild(new Text(theme.fg("accent", "\u2713 YOLO mode disabled"), 1, 0));
     host.chatContainer.addChild(new Text(theme.fg("dim", "  Sandbox directory restrictions restored."), 1, 0));
+    if (revokedGrant) host.chatContainer.addChild(new Text(theme.fg("dim", "  Temporary high-risk shell grant revoked."), 1, 0));
     host.chatContainer.addChild(new Spacer(1));
   }
   host.ui.requestRender();
@@ -79596,6 +79666,9 @@ async function selectMentionOption(host, option) {
 }
 
 // src/input/interactive-keybindings.ts
+function mainEditorOwnsInput(host) {
+  return host.editor.focused === true && host.editorContainer.children.includes(host.editor) && !host.ui.hasOverlay() && !host.mentionPickerComponent;
+}
 function setupInteractiveKeybindings(host) {
   host.ui.addInputListener((data) => {
     if (isKeyRelease(data)) {
@@ -79653,7 +79726,7 @@ function setupInteractiveKeybindings(host) {
       host.handleInterrupt();
       return { consume: true };
     }
-    if (!host.mentionPickerComponent && host.keybindings.matches(data, "pasteImage")) {
+    if (host.keybindings.matches(data, "pasteImage") && mainEditorOwnsInput(host)) {
       host.handlePasteImage();
       return { consume: true };
     }
@@ -79679,8 +79752,7 @@ function setupInteractiveKeybindings(host) {
 
 // src/clipboard/read-clipboard-image.ts
 import { spawn as spawn2 } from "node:child_process";
-import { randomBytes as randomBytes2 } from "node:crypto";
-import { existsSync as existsSync18, readFileSync as readFileSync17, statSync as statSync12, unlinkSync as unlinkSync8, writeFileSync as writeFileSync12 } from "node:fs";
+import { chmodSync as chmodSync2, closeSync as closeSync4, existsSync as existsSync18, fchmodSync, mkdtempSync, openSync as openSync4, readFileSync as readFileSync17, rmdirSync, statSync as statSync12, unlinkSync as unlinkSync8, writeFileSync as writeFileSync12 } from "node:fs";
 import { tmpdir } from "node:os";
 import { join as join20 } from "node:path";
 var MAX_IMAGE_BYTES = 50 * 1024 * 1024;
@@ -79746,14 +79818,67 @@ function defaultSpawnFn(file, args, spawnImpl = spawn2, maxBytes = MAX_IMAGE_BYT
     });
   });
 }
-function defaultMkTempPath(ext) {
-  return join20(tmpdir(), `pie-clipboard-${randomBytes2(6).toString("hex")}${ext}`);
-}
+var TempImageResources = class {
+  constructor(injectedPath) {
+    this.injectedPath = injectedPath;
+  }
+  injectedPath;
+  directory;
+  files = /* @__PURE__ */ new Set();
+  create = (ext) => {
+    if (!this.injectedPath && !this.directory) {
+      this.directory = mkdtempSync(join20(tmpdir(), "pie-clipboard-"));
+      if (process.platform !== "win32") chmodSync2(this.directory, 448);
+    }
+    const path34 = this.injectedPath ? this.injectedPath(ext) : join20(this.directory, `image${ext}`);
+    const fd = openSync4(path34, "wx", 384);
+    this.files.add(path34);
+    try {
+      if (process.platform !== "win32") fchmodSync(fd, 384);
+    } finally {
+      closeSync4(fd);
+    }
+    return path34;
+  };
+  cleanup = () => {
+    for (const path34 of this.files) {
+      try {
+        unlinkSync8(path34);
+        this.files.delete(path34);
+      } catch (err) {
+        if (err.code === "ENOENT") this.files.delete(path34);
+      }
+    }
+    if (this.directory) {
+      try {
+        rmdirSync(this.directory);
+        this.directory = void 0;
+      } catch (err) {
+        if (err.code === "ENOENT") this.directory = void 0;
+      }
+    }
+  };
+};
 async function readClipboardImage(deps = {}) {
   const platform2 = deps.platform ?? process.platform;
   const env = deps.env ?? process.env;
   const spawnImpl = deps.spawnImpl ?? defaultSpawnFn;
-  const mkTempPath = deps.mkTempPath ?? defaultMkTempPath;
+  const resources = new TempImageResources(deps.mkTempPath);
+  let retained = false;
+  try {
+    const result = await readPlatformClipboard(platform2, env, spawnImpl, resources.create);
+    if (result.ok === true) {
+      retained = true;
+      return { ...result, cleanup: resources.cleanup };
+    }
+    return result;
+  } catch (err) {
+    return { ok: false, kind: "failed", message: `Failed to read clipboard image: ${errorMessage4(err)}` };
+  } finally {
+    if (!retained) resources.cleanup();
+  }
+}
+async function readPlatformClipboard(platform2, env, spawnImpl, mkTempPath) {
   switch (platform2) {
     case "darwin":
       return readMacClipboard(spawnImpl, mkTempPath);
@@ -79936,15 +80061,14 @@ function writeImageBytes(bytes, declaredMime, mkTempPath) {
   const mimeType = detectMimeFromMagic(bytes) ?? declaredMime;
   const targetPath = mkTempPath(extensionForMime(mimeType));
   try {
-    writeFileSync12(targetPath, bytes);
+    writeFileSync12(targetPath, bytes, { flag: "r+", mode: 384 });
   } catch (err) {
     return { ok: false, kind: "failed", message: `Failed to write temp image: ${errorMessage4(err)}` };
   }
   return {
     ok: true,
     path: targetPath,
-    mimeType,
-    cleanup: makeCleanup(targetPath)
+    mimeType
   };
 }
 function finalizeTempImage(path34, mimeType) {
@@ -79955,11 +80079,9 @@ function finalizeTempImage(path34, mimeType) {
     }
     const size = statSync12(path34).size;
     if (size === 0) {
-      makeCleanup(path34)();
       return { ok: false, kind: "no-image", message: "Clipboard does not contain an image." };
     }
     if (size > MAX_IMAGE_BYTES) {
-      makeCleanup(path34)();
       return { ok: false, kind: "too-large", message: `Clipboard image is too large (${formatBytes2(size)}).` };
     }
     bytes = readFileSync17(path34);
@@ -79968,10 +80090,9 @@ function finalizeTempImage(path34, mimeType) {
   }
   const detected = detectMimeFromMagic(bytes);
   if (!detected) {
-    makeCleanup(path34)();
     return { ok: false, kind: "no-image", message: "Clipboard does not contain a supported image (PNG/JPEG)." };
   }
-  return { ok: true, path: path34, mimeType: detected, cleanup: makeCleanup(path34) };
+  return { ok: true, path: path34, mimeType: detected };
 }
 function detectMimeFromMagic(bytes) {
   if (bytes.length >= 8 && bytes[0] === 137 && bytes[1] === 80 && bytes[2] === 78 && bytes[3] === 71) {
@@ -79982,14 +80103,6 @@ function detectMimeFromMagic(bytes) {
   }
   return void 0;
 }
-function makeCleanup(path34) {
-  return () => {
-    try {
-      unlinkSync8(path34);
-    } catch {
-    }
-  };
-}
 function spawnFailure(outcome, tool) {
   if (outcome.error === "too-large") {
     return { ok: false, kind: "too-large", message: "Clipboard image is too large." };
@@ -80019,7 +80132,7 @@ function formatBytes2(bytes) {
 }
 
 // src/input/image-paste.ts
-import { mkdtempSync, writeFileSync as writeFileSync13, rmSync as rmSync3 } from "node:fs";
+import { mkdtempSync as mkdtempSync2, writeFileSync as writeFileSync13, rmSync as rmSync3 } from "node:fs";
 import { tmpdir as tmpdir2 } from "node:os";
 import { join as join21 } from "node:path";
 var pastingHosts = /* @__PURE__ */ new WeakSet();
@@ -80046,7 +80159,7 @@ function terminalResultToClipboardResult(result) {
   const ext = result.mimeType === "image/jpeg" ? ".jpg" : ".png";
   let dir;
   try {
-    dir = mkdtempSync(join21(tmpdir2(), "pie-osc5522-"));
+    dir = mkdtempSync2(join21(tmpdir2(), "pie-osc5522-"));
     const path34 = join21(dir, formatPastedImageName(/* @__PURE__ */ new Date(), ext));
     writeFileSync13(path34, result.bytes);
     return {
@@ -83026,6 +83139,12 @@ var InteractiveMode = class {
   get controllerSetupHost() {
     return this;
   }
+  getYoloGrantRemainingMs() {
+    return this.yoloGrant.remainingMs();
+  }
+  revokeYoloGrant() {
+    return this.yoloGrant.revoke();
+  }
   getPolicyContext = () => ({
     mode: this.planModeEnabled ? "plan" : "normal",
     yoloMode: this.yoloMode || this.yoloGrant.isActive(),
@@ -83183,7 +83302,7 @@ var InteractiveMode = class {
   async init() {
     const activeSession = this.sessionManager.getActiveSession();
     this.thinkingLevel = resolveInitialThinkingLevel({ session: activeSession, settingsManager: this.options.settingsManager });
-    const { Agent } = await import("./chunks/src-XDNJ3PHL.js");
+    const { Agent } = await import("./chunks/src-5JJZZ5H7.js");
     this.agent = new Agent({
       initialState: {
         systemPrompt: this.buildSystemPrompt(),
@@ -84075,7 +84194,7 @@ async function runPrintMode(params) {
 `);
     console.log("Assistant: ");
   }
-  const { Agent: AgentClass } = await import("./chunks/src-XDNJ3PHL.js");
+  const { Agent: AgentClass } = await import("./chunks/src-5JJZZ5H7.js");
   let agent;
   const printModeExtensions = await loadPrintModeExtensions({
     cwd: runtime.cwd,
@@ -84375,7 +84494,6 @@ function parseInput(line) {
     };
   }
   if (parsed.type === "sidechat.request" && typeof parsed.requestId === "string" && typeof parsed.prompt === "string") {
-    if (parsed.hostContext !== void 0 && !isHostContextBlock(parsed.hostContext)) return null;
     return {
       type: "sidechat.request",
       sessionId: typeof parsed.sessionId === "string" ? parsed.sessionId : void 0,
@@ -84385,7 +84503,6 @@ function parseInput(line) {
     };
   }
   if ((parsed.type === "turn.request" || parsed.type === "turn.input") && typeof parsed.turnId === "string" && typeof parsed.prompt === "string") {
-    if (parsed.hostContext !== void 0 && !isHostContextBlock(parsed.hostContext)) return null;
     const streamingBehavior = parsed.streamingBehavior;
     if (streamingBehavior !== void 0 && streamingBehavior !== "steer" && streamingBehavior !== "followUp") {
       return null;
@@ -84923,6 +85040,11 @@ async function runJsonEventsMode(params) {
     }
     const startedAt = Date.now();
     if (params.mockResponse !== void 0) {
+      const hostContextFailure = validateIntakeHostContext(message);
+      if (hostContextFailure) {
+        writeSidechatFailure(message, hostContextFailure.message, hostContextFailure.code);
+        return;
+      }
       writeEvent({ type: "sidechat.started", sessionId, requestId });
       const event = {
         type: "sidechat.completed",
@@ -84967,7 +85089,7 @@ async function runJsonEventsMode(params) {
       const sideTrace = trace;
       const sideApiKey = runtime.apiKey;
       const snapshot = structuredClone(parent.state.messages);
-      const { Agent: AgentClass } = await import("./chunks/src-XDNJ3PHL.js");
+      const { Agent: AgentClass } = await import("./chunks/src-5JJZZ5H7.js");
       const sideAgent = new AgentClass({
         initialState: {
           systemPrompt: parent.state.systemPrompt,
@@ -85331,7 +85453,7 @@ async function runJsonEventsMode(params) {
     if (runtime.initialModel.unconfigured || controller) {
       return;
     }
-    const { Agent: AgentClass } = await import("./chunks/src-XDNJ3PHL.js");
+    const { Agent: AgentClass } = await import("./chunks/src-5JJZZ5H7.js");
     if (runtimeClosing) return;
     const compositionRegistry = createCliHostEnvelopeRegistry();
     const jsonModeExtensions = await loadJsonModeExtensions({ runtime, envelopeRegistry: compositionRegistry, getAgent: () => agent });
@@ -85523,7 +85645,7 @@ async function runJsonEventsMode(params) {
     return message.hostContext ? [message.hostContext, { type: "text", text: message.prompt }] : [{ type: "text", text: message.prompt }];
   }
   function validateIntakeHostContext(message) {
-    return message.hostContext ? intakeHostContextFailure(message.hostContext, envelopeRegistry) : void 0;
+    return message.hostContext !== void 0 ? intakeHostContextFailure(message.hostContext, envelopeRegistry) : void 0;
   }
   async function runTurn(message) {
     if (isSessionMismatch(message)) {
@@ -85731,7 +85853,8 @@ async function runJsonEventsMode(params) {
         sessionId,
         turnId: message.turnId,
         error: failure.message,
-        hostContextKinds: cliHostEnvelopeKinds(envelopeRegistry)
+        code: failure.code,
+        ...failure.code === "host_context_unknown_projector" ? { hostContextKinds: cliHostEnvelopeKinds(envelopeRegistry) } : {}
       });
       return;
     }
@@ -86018,7 +86141,7 @@ async function runWithJsonEventsConsoleIsolation(fn) {
 }
 async function createCliTestStreamFnFromEnv() {
   if (!process.env.PIE_TEST_MOCK_STREAM_SEQUENCE) return void 0;
-  return (await import("./chunks/test-stream-LUUGOJMP.js")).createTestStreamFnFromSequenceEnv();
+  return (await import("./chunks/test-stream-ZBTSPU7J.js")).createTestStreamFnFromSequenceEnv();
 }
 function resolveJsonEventsDetailFlag() {
   for (let index = 0; index < process.argv.length; index += 1) {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@cydm/pie",
-	"version": "2.7.12",
+	"version": "2.7.13",
 	"description": "Pie AI Agent CLI",
 	"type": "module",
 	"bin": {
@@ -20,7 +20,7 @@
 		"test:skill-regressions": "node --test --import tsx test/bash-lifecycle.test.ts test/bash-powershell-display.test.ts test/skill-creator-runner.test.ts test/tui-use-contract.test.ts test/tui-use-runtime.test.ts test/browser-runtime.test.ts test/axi-stop-semantics.test.ts test/computer-use-axi.test.ts test/computer-evidence.test.ts test/interactive-lifecycle.test.ts",
 		"test:offline:post": "node --test --import tsx test/remote-model-catalog.test.ts",
 		"test:offline": "node ../../scripts/run-cli-offline.mjs",
-		"test:offline:main": "node --test --test-concurrency=4 --import tsx test/cli-attention.test.ts test/builtin-extensions.test.ts test/core-services.test.ts test/cli.test.ts test/cli-auto-compaction.test.ts test/execution-state-manager.test.ts test/queued-steer-execution-state.test.ts test/todo-steering-ownership.test.ts test/architecture-boundaries.test.ts test/attachment-resolver.test.ts test/kimi-attachment-provider.test.ts test/document-attachment-extension.test.ts test/auto-compact-overflow.test.ts test/auto-compaction-ui.test.ts test/tool-compaction-dogfood.terminal.test.ts test/hierarchical-command-system.test.ts test/mcp-adapter.test.ts test/herdr-agent-state.test.ts test/extensions-enablement.test.ts test/extension-selector-shortcuts.test.ts test/skill-tool-enablement.test.ts test/message-queue-unit.test.ts test/evals-harness.test.ts test/session-trace.test.ts test/json-events-sidechat-diagnostics.test.ts test/json-events-prewarm-shutdown.test.ts test/json-envelope-composition.test.ts test/subagent-session-store.test.ts test/runtime-mode-context.test.ts test/tool-policy.test.ts test/retry-policy.test.ts test/yolo-command.test.ts test/footer-lifecycle.test.ts test/footer-waiting-for-user.test.ts test/files-utils.test.ts test/source-size-guard.test.ts test/runtime-logger.test.ts test/release-readiness.test.ts test/package-artifacts.test.ts test/init-extension-contract.test.ts test/skills-runtime.test.ts test/skills-agents-discovery.test.ts test/skills-symlink.test.ts test/model-overrides.test.ts test/auth-storage.test.ts test/extension-register-provider.test.ts test/extension-reload.test.ts test/extension-terminal-input.test.ts test/extension-session-before-events.test.ts test/extension-widgets.test.ts test/extension-render-hint.test.ts test/extension-oauth-restore.test.ts test/cross-host-parity.test.ts test/tool-name-rendering.test.ts test/session-selector.test.ts test/tree-selector-pagination.test.ts test/context-report.test.ts test/context-signals.test.ts test/plan-cache-stability.test.ts test/cache-invalidation-trace.test.ts test/cache-retention.test.ts test/trace-report.test.ts test/boot-report.test.ts test/compaction-diff.test.ts test/entry-body-and-usage.test.ts test/session-control.test.ts test/terminal-title.test.ts test/interactive-controller-title.test.ts test/todo-title.terminal.test.ts test/host-envelope-dogfood.terminal.test.ts test/host-envelope-cross-mode.test.ts test/host-envelope-registry-lifecycle.test.ts test/host-envelope-migration-roundtrip.test.ts test/host-envelope-intake-order.test.ts test/plan-mode-extension.test.ts test/extension-interaction-signals.test.ts test/rendered-page-reader.test.ts test/tools-registry.test.ts test/system-prompt-contract.test.ts test/bash-yolo.test.ts test/bash-contract.test.ts test/bash-confirm-pending.test.ts test/interaction-status-lifecycle.test.ts test/bash-process-group.test.ts test/bash-artifact-sink.test.ts test/direct-bash.test.ts test/terminal-bell.test.ts test/ctrl-d-exit.test.ts test/session-display-title.test.ts test/calm-mode.test.ts test/stream-render-throttle.test.ts test/message-display-resync.test.ts test/project-root.test.ts test/guard-advisory-context.test.ts test/clear-command-usage.test.ts test/daily-agent-smoke.terminal.test.ts test/slash-menu-toggles.terminal.test.ts test/cli-args.test.ts test/extensions-configured-paths.test.ts test/extensions-loader-path.test.ts test/file-picker.test.ts test/interrupt-recovery.test.ts test/mention-insert-regression.test.ts test/image-paste.test.ts test/clipboard-read-image.test.ts test/clipboard-races.test.ts test/clipboard-dogfood.terminal.test.ts test/mention-picker-navigation.test.ts test/pie-unity-rpc-skill.test.ts test/skill-creator-scripts.test.ts test/interactive-compact-command.test.ts test/computer-use-broker.test.ts test/computer-use-review-regressions.test.ts test/computer-use-safety.test.ts ../../scripts/node-test-diagnostics.test.js ../../scripts/offline-test-runner.test.js ../../scripts/unity-consumer.test.mjs",
+		"test:offline:main": "node --test --test-concurrency=2 --import tsx test/cli-attention.test.ts test/builtin-extensions.test.ts test/core-services.test.ts test/cli.test.ts test/cli-auto-compaction.test.ts test/execution-state-manager.test.ts test/queued-steer-execution-state.test.ts test/todo-steering-ownership.test.ts test/architecture-boundaries.test.ts test/attachment-resolver.test.ts test/kimi-attachment-provider.test.ts test/document-attachment-extension.test.ts test/auto-compact-overflow.test.ts test/auto-compaction-ui.test.ts test/tool-compaction-dogfood.terminal.test.ts test/hierarchical-command-system.test.ts test/mcp-adapter.test.ts test/herdr-agent-state.test.ts test/extensions-enablement.test.ts test/extension-selector-shortcuts.test.ts test/skill-tool-enablement.test.ts test/message-queue-unit.test.ts test/evals-harness.test.ts test/session-trace.test.ts test/json-events-sidechat-diagnostics.test.ts test/json-events-prewarm-shutdown.test.ts test/json-envelope-composition.test.ts test/subagent-session-store.test.ts test/runtime-mode-context.test.ts test/tool-policy.test.ts test/retry-policy.test.ts test/yolo-command.test.ts test/footer-lifecycle.test.ts test/footer-waiting-for-user.test.ts test/files-utils.test.ts test/source-size-guard.test.ts test/runtime-logger.test.ts test/release-readiness.test.ts test/package-artifacts.test.ts test/init-extension-contract.test.ts test/skills-runtime.test.ts test/skills-agents-discovery.test.ts test/skills-symlink.test.ts test/model-overrides.test.ts test/auth-storage.test.ts test/extension-register-provider.test.ts test/extension-reload.test.ts test/extension-terminal-input.test.ts test/extension-session-before-events.test.ts test/extension-widgets.test.ts test/extension-render-hint.test.ts test/extension-oauth-restore.test.ts test/cross-host-parity.test.ts test/tool-name-rendering.test.ts test/session-selector.test.ts test/tree-selector-pagination.test.ts test/context-report.test.ts test/context-signals.test.ts test/plan-cache-stability.test.ts test/cache-invalidation-trace.test.ts test/cache-retention.test.ts test/trace-report.test.ts test/boot-report.test.ts test/compaction-diff.test.ts test/entry-body-and-usage.test.ts test/session-control.test.ts test/terminal-title.test.ts test/interactive-controller-title.test.ts test/todo-title.terminal.test.ts test/host-envelope-dogfood.terminal.test.ts test/host-envelope-cross-mode.test.ts test/host-envelope-registry-lifecycle.test.ts test/host-envelope-migration-roundtrip.test.ts test/host-envelope-intake-order.test.ts test/plan-mode-extension.test.ts test/extension-interaction-signals.test.ts test/rendered-page-reader.test.ts test/tools-registry.test.ts test/system-prompt-contract.test.ts test/bash-yolo.test.ts test/bash-contract.test.ts test/bash-confirm-pending.test.ts test/interaction-status-lifecycle.test.ts test/bash-process-group.test.ts test/bash-artifact-sink.test.ts test/direct-bash.test.ts test/terminal-bell.test.ts test/ctrl-d-exit.test.ts test/session-display-title.test.ts test/calm-mode.test.ts test/stream-render-throttle.test.ts test/message-display-resync.test.ts test/project-root.test.ts test/guard-advisory-context.test.ts test/clear-command-usage.test.ts test/daily-agent-smoke.terminal.test.ts test/slash-menu-toggles.terminal.test.ts test/cli-args.test.ts test/extensions-configured-paths.test.ts test/extensions-loader-path.test.ts test/file-picker.test.ts test/interrupt-recovery.test.ts test/mention-insert-regression.test.ts test/image-paste.test.ts test/clipboard-read-image.test.ts test/clipboard-races.test.ts test/clipboard-dogfood.terminal.test.ts test/mention-picker-navigation.test.ts test/pie-unity-rpc-skill.test.ts test/skill-creator-scripts.test.ts test/interactive-compact-command.test.ts test/computer-use-broker.test.ts test/computer-use-review-regressions.test.ts test/computer-use-safety.test.ts ../../scripts/node-test-diagnostics.test.js ../../scripts/offline-test-runner.test.js ../../scripts/unity-consumer.test.mjs ../../scripts/owned-process-cleanup.test.mjs",
 		"test:all": "npm run test:offline && npm run test:terminal:vitest",
 		"test:terminal:vitest": "vitest run test/mention-file-select.terminal.test.ts test/tool-partial-display.terminal.test.ts test/footer-plan-mode.test.ts test/viewport-position-final.test.ts test/resume-header.terminal.test.ts --no-file-parallelism",
 		"test:todo-tui": "node ../../scripts/run-with-env.mjs PIE_REAL_TODO_TUI=1 -- --test --import tsx test/todo-closure.terminal.test.ts",