@pi-unipi/unipi 3.0.0-alpha.28 → 3.0.0-alpha.29

package/CHANGELOG.md

@@ -6,6 +6,11 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [3.0.0-alpha.29] — 2026-10-04
+
+### Fixed
+- `notify`: prompts that send no event of their own (third-party `ask_user` tools, the permission prompt, the plan review) can notify through the new **Input Needed** event (`input_needed`, off by default); closing any prompt now stops its reminders. (GitHub #38)
+
 ## [3.0.0-alpha.28] — 2026-10-04
 
 ### Changed

package/README.md

@@ -249,6 +249,7 @@ The recent releases, in short. The [changelog](CHANGELOG.md) has the details.
 
 | Release | What changed for you |
 |---|---|
+| alpha.29 | Plan mode plans with you: it asks before it submits, blocks only edits outside the plan, and the review shows a summary beside the steps. Notify can alert on any prompt the agent waits on (Input Needed). |
 | alpha.27 | The footer shows tokens in and out and the session cost under the input. It fits narrow and short windows. Each part of the stats line, the frame badges and the rainbow can be turned off in `/unipi:settings` → Footer. The classic footer is gone. |
 | alpha.25 | The Unicrab splash at startup. A new `/unipi:info`: this session, the context bucket, compaction savings and `s`/`p`/`g` scope tags. Prompts that UniPi sends for you (goal, summarize, answer) show as a UniPi panel, not as your own message. |
 | alpha.24 | The `summarize` skill and `/unipi:summarize [focus]`. Long work ends with a short recap: the answer first, then findings, open items and questions. |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/unipi",
-  "version": "3.0.0-alpha.28",
+  "version": "3.0.0-alpha.29",
   "description": "All-in-one extension suite for Pi coding agent",
   "type": "module",
   "license": "MIT",
@@ -83,26 +83,26 @@
     "typebox": "^1.1.38"
   },
   "dependencies": {
-    "@pi-unipi/ask-user": "3.0.0-alpha.28",
-    "@pi-unipi/background-tasks": "3.0.0-alpha.28",
-    "@pi-unipi/btw": "3.0.0-alpha.28",
-    "@pi-unipi/command-enchantment": "3.0.0-alpha.28",
-    "@pi-unipi/compactor": "3.0.0-alpha.28",
-    "@pi-unipi/core": "3.0.0-alpha.28",
-    "@pi-unipi/footer": "3.0.0-alpha.28",
-    "@pi-unipi/fusion": "3.0.0-alpha.28",
-    "@pi-unipi/info-screen": "3.0.0-alpha.28",
-    "@pi-unipi/input-shortcuts": "3.0.0-alpha.28",
-    "@pi-unipi/kanboard": "3.0.0-alpha.28",
-    "@pi-unipi/mcp": "3.0.0-alpha.28",
-    "@pi-unipi/memory": "3.0.0-alpha.28",
-    "@pi-unipi/notify": "3.0.0-alpha.28",
-    "@pi-unipi/skill-registry": "3.0.0-alpha.28",
-    "@pi-unipi/subagents": "3.0.0-alpha.28",
-    "@pi-unipi/updater": "3.0.0-alpha.28",
-    "@pi-unipi/utility": "3.0.0-alpha.28",
-    "@pi-unipi/web-api": "3.0.0-alpha.28",
-    "@pi-unipi/workflow": "3.0.0-alpha.28"
+    "@pi-unipi/ask-user": "3.0.0-alpha.29",
+    "@pi-unipi/background-tasks": "3.0.0-alpha.29",
+    "@pi-unipi/btw": "3.0.0-alpha.29",
+    "@pi-unipi/command-enchantment": "3.0.0-alpha.29",
+    "@pi-unipi/compactor": "3.0.0-alpha.29",
+    "@pi-unipi/core": "3.0.0-alpha.29",
+    "@pi-unipi/footer": "3.0.0-alpha.29",
+    "@pi-unipi/fusion": "3.0.0-alpha.29",
+    "@pi-unipi/info-screen": "3.0.0-alpha.29",
+    "@pi-unipi/input-shortcuts": "3.0.0-alpha.29",
+    "@pi-unipi/kanboard": "3.0.0-alpha.29",
+    "@pi-unipi/mcp": "3.0.0-alpha.29",
+    "@pi-unipi/memory": "3.0.0-alpha.29",
+    "@pi-unipi/notify": "3.0.0-alpha.29",
+    "@pi-unipi/skill-registry": "3.0.0-alpha.29",
+    "@pi-unipi/subagents": "3.0.0-alpha.29",
+    "@pi-unipi/updater": "3.0.0-alpha.29",
+    "@pi-unipi/utility": "3.0.0-alpha.29",
+    "@pi-unipi/web-api": "3.0.0-alpha.29",
+    "@pi-unipi/workflow": "3.0.0-alpha.29"
   },
   "devDependencies": {
     "@earendil-works/pi-agent-core": "^0.87.1",

package/packages/ask-user/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/ask-user",
-  "version": "3.0.0-alpha.28",
+  "version": "3.0.0-alpha.29",
   "description": "Structured user input tool for Pi coding agent — single-select, multi-select, freeform",
   "type": "module",
   "main": "index.ts",
@@ -40,7 +40,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/core": "3.0.0-alpha.28"
+    "@pi-unipi/core": "3.0.0-alpha.29"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": "^0.87.1",

package/packages/autocomplete/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/command-enchantment",
-  "version": "3.0.0-alpha.28",
+  "version": "3.0.0-alpha.29",
   "description": "Enhanced TUI autocomplete for /unipi:* commands — colored, sorted, and grouped by package",
   "type": "module",
   "main": "src/index.ts",

package/packages/background-tasks/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/background-tasks",
-  "version": "3.0.0-alpha.28",
+  "version": "3.0.0-alpha.29",
   "description": "Background tasks for UniPi — durable shell jobs and delegated background agents with a footer dock",
   "type": "module",
   "main": "src/index.ts",
@@ -10,7 +10,7 @@
   },
   "dependencies": {
     "@earendil-works/pi-ai": "^0.87.1",
-    "@pi-unipi/core": "3.0.0-alpha.28",
+    "@pi-unipi/core": "3.0.0-alpha.29",
     "turndown": "^7.2.4"
   },
   "devDependencies": {

package/packages/btw/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/btw",
-  "version": "3.0.0-alpha.28",
+  "version": "3.0.0-alpha.29",
   "description": "A pi extension for parallel side conversations with /unipi:btw — part of the Unipi suite",
   "type": "module",
   "main": "extensions/btw.ts",
@@ -37,7 +37,7 @@
     "@earendil-works/pi-tui": "^0.87.1"
   },
   "dependencies": {
-    "@pi-unipi/core": "3.0.0-alpha.28"
+    "@pi-unipi/core": "3.0.0-alpha.29"
   },
   "pi": {
     "extensions": [

package/packages/compactor/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/compactor",
-  "version": "3.0.0-alpha.28",
+  "version": "3.0.0-alpha.29",
   "description": "Compaction for Pi — lossless zero-LLM or model summaries, rebuilt from full history, with session recall",
   "type": "module",
   "main": "src/index.ts",
@@ -33,8 +33,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/core": "3.0.0-alpha.28",
-    "@pi-unipi/info-screen": "3.0.0-alpha.28",
+    "@pi-unipi/core": "3.0.0-alpha.29",
+    "@pi-unipi/info-screen": "3.0.0-alpha.29",
     "@earendil-works/pi-agent-core": "^0.87.1"
   },
   "peerDependencies": {

package/packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/core",
-  "version": "3.0.0-alpha.28",
+  "version": "3.0.0-alpha.29",
   "description": "Shared utilities, event types, and constants for Unipi extension suite",
   "type": "module",
   "license": "MIT",

package/packages/footer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/footer",
-  "version": "3.0.0-alpha.28",
+  "version": "3.0.0-alpha.29",
   "description": "Persistent status bar for Unipi — subscribes to UNIPI_EVENTS and renders key stats from all unipi packages",
   "type": "module",
   "main": "index.ts",
@@ -32,8 +32,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/core": "3.0.0-alpha.28",
-    "@pi-unipi/background-tasks": "3.0.0-alpha.28"
+    "@pi-unipi/core": "3.0.0-alpha.29",
+    "@pi-unipi/background-tasks": "3.0.0-alpha.29"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": "^0.87.1",

package/packages/fusion/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/fusion",
-  "version": "3.0.0-alpha.28",
+  "version": "3.0.0-alpha.29",
   "description": "Devin-style model picker, fusion presets (lead + sidekick), and Local Fusion runtime for UniPi",
   "type": "module",
   "main": "src/index.ts",
@@ -32,9 +32,9 @@
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/core": "3.0.0-alpha.28",
-    "@pi-unipi/subagents": "3.0.0-alpha.28",
-    "@pi-unipi/utility": "3.0.0-alpha.28"
+    "@pi-unipi/core": "3.0.0-alpha.29",
+    "@pi-unipi/subagents": "3.0.0-alpha.29",
+    "@pi-unipi/utility": "3.0.0-alpha.29"
   },
   "peerDependencies": {
     "@earendil-works/pi-ai": "^0.87.1",

package/packages/info-screen/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/info-screen",
-  "version": "3.0.0-alpha.28",
+  "version": "3.0.0-alpha.29",
   "description": "Unicrab startup splash and the /unipi:info dashboard — this session, context, usage, compaction savings",
   "type": "module",
   "main": "index.ts",
@@ -33,7 +33,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/core": "3.0.0-alpha.28"
+    "@pi-unipi/core": "3.0.0-alpha.29"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": "^0.87.1",

package/packages/input-shortcuts/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/input-shortcuts",
-  "version": "3.0.0-alpha.28",
+  "version": "3.0.0-alpha.29",
   "description": "Keyboard shortcuts for stash/restore, undo/redo, clipboard, and thinking toggle — chord-based overlay system",
   "type": "module",
   "main": "src/index.ts",
@@ -33,7 +33,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/core": "3.0.0-alpha.28"
+    "@pi-unipi/core": "3.0.0-alpha.29"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": "^0.87.1",

package/packages/kanboard/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/kanboard",
-  "version": "3.0.0-alpha.28",
+  "version": "3.0.0-alpha.29",
   "description": "Kanboard v3 — deferred-work board: CLI/daemon bridge, task runner and skill",
   "type": "module",
   "main": "index.ts",
@@ -31,7 +31,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/core": "3.0.0-alpha.28"
+    "@pi-unipi/core": "3.0.0-alpha.29"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": "^0.87.1",
@@ -48,10 +48,10 @@
     "themes": []
   },
   "optionalDependencies": {
-    "@pi-unipi/kanboard-linux-x64": "3.0.0-alpha.28",
-    "@pi-unipi/kanboard-linux-arm64": "3.0.0-alpha.28",
-    "@pi-unipi/kanboard-darwin-x64": "3.0.0-alpha.28",
-    "@pi-unipi/kanboard-darwin-arm64": "3.0.0-alpha.28",
-    "@pi-unipi/kanboard-win32-x64": "3.0.0-alpha.28"
+    "@pi-unipi/kanboard-linux-x64": "3.0.0-alpha.29",
+    "@pi-unipi/kanboard-linux-arm64": "3.0.0-alpha.29",
+    "@pi-unipi/kanboard-darwin-x64": "3.0.0-alpha.29",
+    "@pi-unipi/kanboard-darwin-arm64": "3.0.0-alpha.29",
+    "@pi-unipi/kanboard-win32-x64": "3.0.0-alpha.29"
   }
 }

package/packages/long-horizon/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/long-horizon",
-  "version": "3.0.0-alpha.28",
+  "version": "3.0.0-alpha.29",
   "description": "Long-horizon execution for Pi — mode-gated /goal /ralph /swarm /graph orchestration with a TypeSafe prompt judge",
   "type": "module",
   "main": "index.ts",
@@ -37,7 +37,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/core": "3.0.0-alpha.28"
+    "@pi-unipi/core": "3.0.0-alpha.29"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": "^0.87.1",

package/packages/mcp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/mcp",
-  "version": "3.0.0-alpha.28",
+  "version": "3.0.0-alpha.29",
   "description": "MCP server management extension for Pi coding agent — browse, add, configure, and use MCP servers",
   "type": "module",
   "main": "src/index.ts",
@@ -30,7 +30,7 @@
     "test": "npx tsx --test tests/**/*.test.ts"
   },
   "dependencies": {
-    "@pi-unipi/core": "3.0.0-alpha.28"
+    "@pi-unipi/core": "3.0.0-alpha.29"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": "^0.87.1",

package/packages/memory/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/memory",
-  "version": "3.0.0-alpha.28",
+  "version": "3.0.0-alpha.29",
   "description": "Persistent cross-session memory on MemPalace (auto-installed): daemon-routed writes, shared palace with other agents, for Pi coding agent",
   "type": "module",
   "main": "index.ts",
@@ -42,8 +42,8 @@
     "README.md"
   ],
   "dependencies": {
-    "@pi-unipi/core": "3.0.0-alpha.28",
-    "@pi-unipi/info-screen": "3.0.0-alpha.28",
+    "@pi-unipi/core": "3.0.0-alpha.29",
+    "@pi-unipi/info-screen": "3.0.0-alpha.29",
     "js-yaml": "^4.1.0"
   },
   "peerDependencies": {

package/packages/notify/README.md

@@ -71,9 +71,12 @@ notify_user({ title: "Build failed", message: "tsc found 12 errors.", priority:
 | `session_shutdown` | off | The session ends. |
 | `ask_user_prompt` | off | The agent asks you a question and waits. |
 | `permission_request` | off | A permission prompt opens. This needs [`@gotgenes/pi-permission-system`](https://www.npmjs.com/package/@gotgenes/pi-permission-system). |
+| `input_needed` | off | The agent waits on any prompt while it runs. Covers prompts that send no event of their own — third-party `ask_user` tools, the permission prompt, the plan review. |
 
 `ask_user_prompt` and `permission_request` are blocking events. The agent stops until you answer.
 
+`input_needed` is the catch-all for the same situation: Pi fires it around every blocking prompt, including ones that emit no event of their own. It only fires while the agent is running — prompts you open yourself while the agent is idle (for example `/unipi:settings`) stay quiet — and a prompt already announced as `ask_user_prompt` or `permission_request` is not announced twice. Closing any prompt stops its reminders.
+
 ## Settings
 
 Open `/unipi:settings` → **Notify**. The file is `~/.unipi/config/notify/config.json`. A project file at `.unipi/config/notify/config.json` overrides it.
@@ -104,6 +107,7 @@ A reminder has the text `(still waiting)` in its title and `high` priority. Remi
 - You press a key.
 - herdr reports that the agent is not blocked.
 - The agent starts a new turn.
+- The prompt closes.
 - The session ends.
 
 Only one reminder runs at a time. Silence after input does not apply to blocking events.

package/packages/notify/activity.ts

@@ -26,6 +26,7 @@ const VALID_PLATFORMS: ReadonlySet<NotifyPlatform> = new Set([
 const BLOCKING_EVENTS: ReadonlySet<string> = new Set([
   "ask_user_prompt",
   "permission_request",
+  "input_needed",
 ]);
 
 /** Whether an event type is a human-blocking prompt. */
@@ -51,8 +52,9 @@ export function resetInputActivity(): void {
  * Empty `platforms` (while enabled) silences all incoming channels, matching
  * `events.*.platforms: []` → all enabled.
  *
- * Human-blocking events (`ask_user_prompt`, `permission_request`) bypass the
- * filter entirely — the keypress that triggered them must not mute them.
+ * Human-blocking events (`ask_user_prompt`, `permission_request`,
+ * `input_needed`) bypass the filter entirely — the keypress that triggered
+ * them must not mute them.
  */
 export function filterPlatformsAfterInput(
   platforms: NotifyPlatform[],

package/packages/notify/events.ts

@@ -15,6 +15,7 @@ import { sendTelegramNotification } from "./platforms/telegram.js";
 import { sendNtfyNotification } from "./platforms/ntfy.js";
 import { buildAskUserPromptMessage } from "./ask-user-prompt-message.js";
 import { buildPermissionPromptMessage } from "./permission-prompt-message.js";
+import { buildInputNeededMessage } from "./input-needed-message.js";
 import { summarizeLastMessage } from "./summarize.js";
 import { filterPlatformsAfterInput, isBlockingEvent } from "./activity.js";
 
@@ -75,6 +76,22 @@ const unsubs: Array<() => void> = [];
 /** Pending re-notify interval for an unanswered blocking prompt. */
 let renotifyTimer: ReturnType<typeof setInterval> | undefined;
 
+/**
+ * A `ui_prompt_start` within this window of an ask_user/permission alert is
+ * the same prompt — pi emits the bus event and the lifecycle event back to
+ * back. Exported for tests.
+ */
+export const PROMPT_DEDUP_MS = 2000;
+
+/** Whether an agent run is in progress — `input_needed` fires only while it is. */
+let agentRunning = false;
+
+/** Open blocking UI prompts (`ui_prompt_start`/`ui_prompt_end` pairing). */
+let openPrompts = 0;
+
+/** When the last ask_user/permission alert went out, for ui_prompt de-dup. */
+let lastBlockingAlertAt = 0;
+
 /** Cancel any pending re-notify timer. Safe to call at any time. */
 export function disarmRenotify(): void {
   const timer = renotifyTimer;
@@ -128,9 +145,33 @@ function armRenotify(
   renotifyTimer = timer;
 }
 
+/**
+ * Dispatch a human-blocking prompt alert: high priority plus the reminder
+ * loop. Non-`input_needed` alerts also stamp `lastBlockingAlertAt` so the
+ * back-to-back `ui_prompt_start` for the same prompt is seen as announced.
+ */
+function notifyBlocking(
+  pi: ExtensionAPI,
+  eventKey: string,
+  title: string,
+  message: string,
+  platforms: NotifyPlatform[],
+  config: NotifyConfig,
+  cwd: string,
+  dispatch: DispatchNotification,
+): void {
+  if (eventKey !== "input_needed") lastBlockingAlertAt = Date.now();
+  dispatch(pi, title, message, platforms, eventKey, config, cwd, "high").catch(() => {
+    // Silently ignore — background notification failure is non-blocking.
+  });
+  armRenotify(pi, title, message, platforms, eventKey, config, cwd, dispatch);
+}
+
 /** Unregister all previously registered pi.events.on() listeners. */
 function unregisterAll(): void {
   disarmRenotify();
+  agentRunning = false;
+  openPrompts = 0;
   for (const unsub of unsubs) {
     try { unsub(); } catch { /* ignore */ }
   }
@@ -161,6 +202,7 @@ export const BUILTIN_EVENTS: Record<
   session_shutdown: { hook: "session_shutdown", label: "Session End" },
   ask_user_prompt: { hook: UNIPI_EVENTS.ASK_USER_PROMPT, label: "Question Asked" },
   permission_request: { hook: PERMISSION_UI_PROMPT_EVENT, label: "Permission Request" },
+  input_needed: { hook: "ui_prompt_start", label: "Input Needed" },
 };
 
 /**
@@ -184,7 +226,9 @@ export function registerEventListeners(
   unregisterAll();
   // Register built-in events (except agent lifecycle notifications which have custom logic)
   for (const [eventKey, def] of Object.entries(BUILTIN_EVENTS)) {
-    if (isAgentNotificationEvent(eventKey)) continue; // handled separately below
+    // Agent notifications have custom logic; input_needed has its own
+    // ui_prompt_start registration below (with agent-running + de-dup guards).
+    if (isAgentNotificationEvent(eventKey) || eventKey === "input_needed") continue;
 
     const eventConfig = config.events[eventKey];
     if (!eventConfig?.enabled) continue;
@@ -192,6 +236,12 @@ export function registerEventListeners(
     const handler = (payload: unknown) => {
       const title = `Pi — ${def.label}`;
       const message = buildEventMessage(eventKey, payload);
+      // Human-blocking prompts: high priority, reminder loop, and a stamp
+      // that keeps the follow-up ui_prompt_start from double-firing.
+      if (isBlockingEvent(eventKey)) {
+        notifyBlocking(pi, eventKey, title, message, eventConfig.platforms, config, cwd, dispatch);
+        return;
+      }
       // Fire-and-forget: don't block the event emitter
       dispatch(
         pi,
@@ -205,9 +255,6 @@ export function registerEventListeners(
       ).catch(() => {
         // Silently ignore — background notification failure is non-blocking.
       });
-      if (isBlockingEvent(eventKey)) {
-        armRenotify(pi, title, message, eventConfig.platforms, eventKey, config, cwd, dispatch);
-      }
     };
 
     // Pi lifecycle events are dispatched via ExtensionRunner — must use
@@ -225,14 +272,16 @@ export function registerEventListeners(
   const askUserConfig = config.events["ask_user_prompt"];
   if (askUserConfig?.enabled) {
     unsubs.push(pi.events.on(ASK_USER_PROMPT_EVENT, (payload: unknown) => {
-      const title = `Pi — ${BUILTIN_EVENTS.ask_user_prompt.label}`;
-      const message = buildAskUserPromptMessage(payload);
-      dispatch(pi, title, message, askUserConfig.platforms, "ask_user_prompt", config, cwd, "high").catch(
-        () => {
-          // Silently ignore — background notification failure is non-blocking.
-        }
+      notifyBlocking(
+        pi,
+        "ask_user_prompt",
+        `Pi — ${BUILTIN_EVENTS.ask_user_prompt.label}`,
+        buildAskUserPromptMessage(payload),
+        askUserConfig.platforms,
+        config,
+        cwd,
+        dispatch,
       );
-      armRenotify(pi, title, message, askUserConfig.platforms, "ask_user_prompt", config, cwd, dispatch);
     }));
   }
 
@@ -242,11 +291,67 @@ export function registerEventListeners(
     if ((payload as { active?: unknown } | null)?.active === false) disarmRenotify();
   }));
   (pi as any).on("agent_start", () => {
+    agentRunning = true;
     disarmRenotify();
   });
 
   registerAgentNotification(pi, "agent_end", config, cwd, dispatch);
   registerAgentNotification(pi, "agent_settled", config, cwd, dispatch);
+
+  // Keep the agent-running flag in sync. Registered after the agent
+  // notification handlers above so the first agent_end handler stays the
+  // notification path (pi.on handlers fire in registration order).
+  (pi as any).on("agent_end", () => {
+    agentRunning = false;
+  });
+
+  registerInputNeeded(pi, config, cwd, dispatch);
+}
+
+/**
+ * pi ≥0.84.4 fires `ui_prompt_start`/`ui_prompt_end` around every blocking
+ * user-facing prompt — including ones that emit no bus event of their own
+ * (third-party ask_user tools, the permission prompt, the plan review).
+ *
+ * The start/end pair is registered whenever we are not a subagent child,
+ * independent of the `input_needed` flag: the open-prompt counter must stay
+ * paired so a prompt closing also disarms ask_user/permission reminders.
+ * Only the notification itself respects the flag, and it fires only while
+ * the agent is running — a `ui_prompt_start` while idle is the user's own
+ * overlay (e.g. /unipi:settings).
+ */
+function registerInputNeeded(
+  pi: ExtensionAPI,
+  config: NotifyConfig,
+  cwd: string,
+  dispatch: DispatchNotification,
+): void {
+  // Subagent children never own a user-facing prompt.
+  if (process.env.UNIPI_SUBAGENT_CHILD === "1") return;
+
+  (pi as any).on("ui_prompt_start", (payload: unknown) => {
+    openPrompts += 1;
+    const eventConfig = config.events["input_needed"];
+    if (!eventConfig?.enabled) return;
+    if (!agentRunning) return;
+    // Same prompt already announced as ask_user/permission_request.
+    if (Date.now() - lastBlockingAlertAt < PROMPT_DEDUP_MS) return;
+    notifyBlocking(
+      pi,
+      "input_needed",
+      `Pi — ${BUILTIN_EVENTS.input_needed.label}`,
+      buildInputNeededMessage(payload),
+      eventConfig.platforms,
+      config,
+      cwd,
+      dispatch,
+    );
+  });
+
+  (pi as any).on("ui_prompt_end", () => {
+    openPrompts = Math.max(0, openPrompts - 1);
+    if (openPrompts === 0) disarmRenotify();
+  });
 }
 
 /** Get all platforms that are currently enabled in config */

package/packages/notify/input-needed-message.ts

@@ -0,0 +1,27 @@
+/**
+ * @pi-unipi/notify — Internal helper: build notification message from pi's
+ * `ui_prompt_start` lifecycle payload.
+ *
+ * @internal — not part of the public API. Shared by the event listener and tests.
+ */
+
+/** Longest prompt title kept verbatim before an ellipsis is appended. */
+export const INPUT_TITLE_MAX_CHARS = 120;
+
+function cleanKind(value: unknown): string {
+  return typeof value === "string" && value.trim().length > 0 ? value.trim() : "prompt";
+}
+
+/** Truncate by code points (Array.from) so surrogate pairs are never split. */
+function truncate(text: string, max: number): string {
+  const chars = Array.from(text);
+  return chars.length <= max ? text : `${chars.slice(0, max).join("")}…`;
+}
+
+/** Build a human-readable notification message from a ui_prompt_start payload. */
+export function buildInputNeededMessage(payload: unknown): string {
+  const p = (payload ?? {}) as { title?: unknown; kind?: unknown };
+  const title = typeof p.title === "string" ? p.title.replace(/\s+/g, " ").trim() : "";
+  if (title.length === 0) return `Waiting for your input (${cleanKind(p.kind)})`;
+  return `Waiting for your input: ${truncate(title, INPUT_TITLE_MAX_CHARS)}`;
+}

package/packages/notify/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/notify",
-  "version": "3.0.0-alpha.28",
+  "version": "3.0.0-alpha.29",
   "description": "Cross-platform notification extension for Pi — native OS, Gotify, and Telegram notifications for agent lifecycle events",
   "type": "module",
   "main": "index.ts",
@@ -34,7 +34,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/core": "3.0.0-alpha.28",
+    "@pi-unipi/core": "3.0.0-alpha.29",
     "node-notifier": "^10.0.1"
   },
   "peerDependencies": {

package/packages/notify/settings.ts

@@ -30,6 +30,7 @@ export const DEFAULT_CONFIG: NotifyConfig = {
     session_shutdown: { enabled: false, platforms: [] },
     ask_user_prompt: { enabled: false, platforms: [] },
     permission_request: { enabled: false, platforms: [] },
+    input_needed: { enabled: false, platforms: [] },
   },
   native: {
     enabled: true,
@@ -79,6 +80,7 @@ const EVENT_PHRASES: Record<string, string> = {
   session_shutdown: "the session shuts down.",
   ask_user_prompt: "the agent asks you a question.",
   permission_request: "a permission prompt opens.",
+  input_needed: "the agent is waiting on any prompt (covers tools that send no event of their own).",
 };
 
 /** One section per known event: enable + platform routing. */

package/packages/notify/skills/configure-notify/SKILL.md

@@ -38,7 +38,8 @@ Help users configure the `@pi-unipi/notify` notification system.
     "memory_consolidated": { "enabled": false, "platforms": [] },
     "session_shutdown": { "enabled": false, "platforms": [] },
     "ask_user_prompt": { "enabled": false, "platforms": [] },
-    "permission_request": { "enabled": false, "platforms": [] }
+    "permission_request": { "enabled": false, "platforms": [] },
+    "input_needed": { "enabled": false, "platforms": [] }
   },
   "native": {
     "enabled": true,
@@ -207,10 +208,11 @@ ntfy uses dedicated `ntfy.json` files at both global and project scope, with ful
 | `session_shutdown` | Off | Session ends |
 | `ask_user_prompt` | Off | Agent asked a question and is waiting for an answer |
 | `permission_request` | Off | A permission prompt is about to be shown |
+| `input_needed` | Off | The agent waits on any prompt while it runs (covers tools that send no event of their own) |
 
 Each event can override `platforms` — empty array means use `defaultPlatforms`.
 
-`ask_user_prompt` and `permission_request` are **blocking** events: while one is unanswered the agent is parked, so notify re-sends it periodically (see the Re-notify unanswered prompts section under Platforms).
+`ask_user_prompt`, `permission_request` and `input_needed` are **blocking** events: while one is unanswered the agent is parked, so notify re-sends it periodically (see the Re-notify unanswered prompts section under Platforms).
 
 ### `permission_request`
 

package/packages/skill-registry/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/skill-registry",
-  "version": "3.0.0-alpha.28",
+  "version": "3.0.0-alpha.29",
   "description": "Skill registry for pi — per-project skill on/off, a skill vault, and jev-judged skill exposure",
   "type": "module",
   "license": "MIT",
@@ -33,7 +33,7 @@
   },
   "main": "index.ts",
   "dependencies": {
-    "@pi-unipi/core": "3.0.0-alpha.28"
+    "@pi-unipi/core": "3.0.0-alpha.29"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": "^0.87.1",

package/packages/subagents/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/subagents",
-  "version": "3.0.0-alpha.28",
+  "version": "3.0.0-alpha.29",
   "description": "Subagents for UniPi — Devin-model independent child agents",
   "type": "module",
   "main": "src/index.ts",
@@ -9,8 +9,8 @@
     "test": "npx tsx --test src/__tests__/*.test.ts"
   },
   "dependencies": {
-    "@pi-unipi/core": "3.0.0-alpha.28",
-    "@pi-unipi/utility": "3.0.0-alpha.28",
+    "@pi-unipi/core": "3.0.0-alpha.29",
+    "@pi-unipi/utility": "3.0.0-alpha.29",
     "@earendil-works/pi-agent-core": "^0.87.1",
     "acorn": "8.18.0"
   },

package/packages/unipi/bundled.js

@@ -25336,10 +25336,10 @@ import { dirname as dirname20, join as join37 } from "node:path";
 import { randomUUID as randomUUID6 } from "node:crypto";
 function primaryArg(name, args) {
   if (!args) return "";
-  const truncate2 = (v, max) => v.length > max ? `${v.slice(0, Math.max(0, max - 1))}\u2026` : v;
+  const truncate3 = (v, max) => v.length > max ? `${v.slice(0, Math.max(0, max - 1))}\u2026` : v;
   const firstLine3 = (v) => v.split("\n", 1)[0] ?? "";
   const value = name === "bash" ? args.command : name === "read" || name === "edit" || name === "write" ? args.path ?? args.file_path ?? args.filePath : Object.values(args).find((entry) => typeof entry === "string");
-  return typeof value === "string" ? truncate2(firstLine3(value), 100) : "";
+  return typeof value === "string" ? truncate3(firstLine3(value), 100) : "";
 }
 var DENY_WITH_NOTE = "Deny with note\u2026";
 var BACKGROUND_DENY_NOTE = "Permission denied for this tool: this agent is running in the background, where tools that would require approval are automatically denied. Do not retry variants of this call; finish what you can without it and say in your report what needs approval.";
@@ -36577,8 +36577,8 @@ function renderMcpSettingsOverlay(params) {
         const selected = i === state2.selectedIndex;
         const statusIcon = server.status === "running" ? "\u25CF" : server.status === "error" ? "\u2717" : server.enabled ? "\u25CB" : "\u25CB";
         const label = `${statusIcon} ${server.enabled ? "" : "disabled \xB7 "}${server.name}`;
-        const tools = server.status === "running" && server.toolCount > 0 ? `${server.toolCount} tools` : server.status === "error" && server.error ? truncate2(server.error, 20) : "stopped";
-        const value = `${truncate2(server.command, 24)} \xB7 ${tools} \xB7 [${server.source}]`;
+        const tools = server.status === "running" && server.toolCount > 0 ? `${server.toolCount} tools` : server.status === "error" && server.error ? truncate3(server.error, 20) : "stopped";
+        const value = `${truncate3(server.command, 24)} \xB7 ${tools} \xB7 [${server.source}]`;
         body.push(hubExactRow(hubRowColumns({
           inner,
           selected,
@@ -36600,7 +36600,7 @@ function renderMcpSettingsOverlay(params) {
         title: hubBoldText(hubFrameTitle("mcp", [], `\u2014 ${state2.viewScope}`)),
         borderFg: (t) => hubTheme.fg("borderMuted", t)
       });
-      function truncate2(text, n) {
+      function truncate3(text, n) {
         return text.length > n ? text.slice(0, n - 1) + "\u2026" : text;
       }
     }
@@ -36879,7 +36879,8 @@ var VALID_PLATFORMS = /* @__PURE__ */ new Set([
 ]);
 var BLOCKING_EVENTS = /* @__PURE__ */ new Set([
   "ask_user_prompt",
-  "permission_request"
+  "permission_request",
+  "input_needed"
 ]);
 function isBlockingEvent(eventType) {
   return eventType !== void 0 && BLOCKING_EVENTS.has(eventType);
@@ -36948,7 +36949,8 @@ var DEFAULT_CONFIG5 = {
     memory_consolidated: { enabled: false, platforms: [] },
     session_shutdown: { enabled: false, platforms: [] },
     ask_user_prompt: { enabled: false, platforms: [] },
-    permission_request: { enabled: false, platforms: [] }
+    permission_request: { enabled: false, platforms: [] },
+    input_needed: { enabled: false, platforms: [] }
   },
   native: {
     enabled: true,
@@ -36992,7 +36994,8 @@ var EVENT_PHRASES = {
   memory_consolidated: "a memory consolidation completes.",
   session_shutdown: "the session shuts down.",
   ask_user_prompt: "the agent asks you a question.",
-  permission_request: "a permission prompt opens."
+  permission_request: "a permission prompt opens.",
+  input_needed: "the agent is waiting on any prompt (covers tools that send no event of their own)."
 };
 var EVENT_SECTIONS = Object.keys(DEFAULT_CONFIG5.events).map((event) => ({
   title: event,
@@ -37558,6 +37561,22 @@ function buildPermissionPromptMessage(payload) {
   return parts.join(" ");
 }
 
+// packages/notify/input-needed-message.ts
+var INPUT_TITLE_MAX_CHARS = 120;
+function cleanKind(value) {
+  return typeof value === "string" && value.trim().length > 0 ? value.trim() : "prompt";
+}
+function truncate2(text, max) {
+  const chars = Array.from(text);
+  return chars.length <= max ? text : `${chars.slice(0, max).join("")}\u2026`;
+}
+function buildInputNeededMessage(payload) {
+  const p = payload ?? {};
+  const title = typeof p.title === "string" ? p.title.replace(/\s+/g, " ").trim() : "";
+  if (title.length === 0) return `Waiting for your input (${cleanKind(p.kind)})`;
+  return `Waiting for your input: ${truncate2(title, INPUT_TITLE_MAX_CHARS)}`;
+}
+
 // packages/notify/summarize.ts
 var SYSTEM_PROMPT2 = "Summarize this in one concise sentence for a push notification. Reply with ONLY the summary.";
 var MAX_INPUT_CHARS = 2e3;
@@ -37675,6 +37694,10 @@ function defaultEventPriority(eventKey) {
 var sessionCtx = null;
 var unsubs = [];
 var renotifyTimer;
+var PROMPT_DEDUP_MS = 2e3;
+var agentRunning = false;
+var openPrompts = 0;
+var lastBlockingAlertAt = 0;
 function disarmRenotify() {
   const timer = renotifyTimer;
   renotifyTimer = void 0;
@@ -37707,8 +37730,16 @@ function armRenotify(pi, title, message, platforms, eventType, config, cwd, disp
   timer.unref?.();
   renotifyTimer = timer;
 }
+function notifyBlocking(pi, eventKey, title, message, platforms, config, cwd, dispatch) {
+  if (eventKey !== "input_needed") lastBlockingAlertAt = Date.now();
+  dispatch(pi, title, message, platforms, eventKey, config, cwd, "high").catch(() => {
+  });
+  armRenotify(pi, title, message, platforms, eventKey, config, cwd, dispatch);
+}
 function unregisterAll() {
   disarmRenotify();
+  agentRunning = false;
+  openPrompts = 0;
   for (const unsub of unsubs) {
     try {
       unsub();
@@ -37732,18 +37763,23 @@ var BUILTIN_EVENTS = {
   memory_consolidated: { hook: UNIPI_EVENTS.MEMORY_CONSOLIDATED, label: "Memory Saved" },
   session_shutdown: { hook: "session_shutdown", label: "Session End" },
   ask_user_prompt: { hook: UNIPI_EVENTS.ASK_USER_PROMPT, label: "Question Asked" },
-  permission_request: { hook: PERMISSION_UI_PROMPT_EVENT, label: "Permission Request" }
+  permission_request: { hook: PERMISSION_UI_PROMPT_EVENT, label: "Permission Request" },
+  input_needed: { hook: "ui_prompt_start", label: "Input Needed" }
 };
 var LIFECYCLE_EVENTS = /* @__PURE__ */ new Set(["agent_end", "agent_settled", "session_shutdown"]);
 function registerEventListeners(pi, config, cwd, dispatch = dispatchNotification) {
   unregisterAll();
   for (const [eventKey, def] of Object.entries(BUILTIN_EVENTS)) {
-    if (isAgentNotificationEvent(eventKey)) continue;
+    if (isAgentNotificationEvent(eventKey) || eventKey === "input_needed") continue;
     const eventConfig = config.events[eventKey];
     if (!eventConfig?.enabled) continue;
     const handler = (payload) => {
       const title = `Pi \u2014 ${def.label}`;
       const message = buildEventMessage(eventKey, payload);
+      if (isBlockingEvent(eventKey)) {
+        notifyBlocking(pi, eventKey, title, message, eventConfig.platforms, config, cwd, dispatch);
+        return;
+      }
       dispatch(
         pi,
         title,
@@ -37755,9 +37791,6 @@ function registerEventListeners(pi, config, cwd, dispatch = dispatchNotification
         defaultEventPriority(eventKey)
       ).catch(() => {
       });
-      if (isBlockingEvent(eventKey)) {
-        armRenotify(pi, title, message, eventConfig.platforms, eventKey, config, cwd, dispatch);
-      }
     };
     if (LIFECYCLE_EVENTS.has(eventKey)) {
       pi.on(def.hook, handler);
@@ -37768,23 +37801,55 @@ function registerEventListeners(pi, config, cwd, dispatch = dispatchNotification
   const askUserConfig = config.events["ask_user_prompt"];
   if (askUserConfig?.enabled) {
     unsubs.push(pi.events.on(ASK_USER_PROMPT_EVENT, (payload) => {
-      const title = `Pi \u2014 ${BUILTIN_EVENTS.ask_user_prompt.label}`;
-      const message = buildAskUserPromptMessage(payload);
-      dispatch(pi, title, message, askUserConfig.platforms, "ask_user_prompt", config, cwd, "high").catch(
-        () => {
-        }
+      notifyBlocking(
+        pi,
+        "ask_user_prompt",
+        `Pi \u2014 ${BUILTIN_EVENTS.ask_user_prompt.label}`,
+        buildAskUserPromptMessage(payload),
+        askUserConfig.platforms,
+        config,
+        cwd,
+        dispatch
       );
-      armRenotify(pi, title, message, askUserConfig.platforms, "ask_user_prompt", config, cwd, dispatch);
     }));
   }
   unsubs.push(pi.events.on("herdr:blocked", (payload) => {
     if (payload?.active === false) disarmRenotify();
   }));
   pi.on("agent_start", () => {
+    agentRunning = true;
     disarmRenotify();
   });
   registerAgentNotification(pi, "agent_end", config, cwd, dispatch);
   registerAgentNotification(pi, "agent_settled", config, cwd, dispatch);
+  pi.on("agent_end", () => {
+    agentRunning = false;
+  });
+  registerInputNeeded(pi, config, cwd, dispatch);
+}
+function registerInputNeeded(pi, config, cwd, dispatch) {
+  if (process.env.UNIPI_SUBAGENT_CHILD === "1") return;
+  pi.on("ui_prompt_start", (payload) => {
+    openPrompts += 1;
+    const eventConfig = config.events["input_needed"];
+    if (!eventConfig?.enabled) return;
+    if (!agentRunning) return;
+    if (Date.now() - lastBlockingAlertAt < PROMPT_DEDUP_MS) return;
+    notifyBlocking(
+      pi,
+      "input_needed",
+      `Pi \u2014 ${BUILTIN_EVENTS.input_needed.label}`,
+      buildInputNeededMessage(payload),
+      eventConfig.platforms,
+      config,
+      cwd,
+      dispatch
+    );
+  });
+  pi.on("ui_prompt_end", () => {
+    openPrompts = Math.max(0, openPrompts - 1);
+    if (openPrompts === 0) disarmRenotify();
+  });
 }
 function getEnabledPlatforms(config, ntfyEnabled) {
   const enabled = [];

package/packages/updater/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/updater",
-  "version": "3.0.0-alpha.28",
+  "version": "3.0.0-alpha.29",
   "description": "Auto-updater, changelog browser, and readme browser for Unipi — checks npm registry, renders CHANGELOG.md and README.md files in TUI overlays",
   "type": "module",
   "main": "index.ts",
@@ -34,7 +34,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/core": "3.0.0-alpha.28"
+    "@pi-unipi/core": "3.0.0-alpha.29"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": "^0.87.1",

package/packages/utility/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/utility",
-  "version": "3.0.0-alpha.28",
+  "version": "3.0.0-alpha.29",
   "description": "Utility commands and tools for Pi coding agent — lifecycle, diagnostics, cache, analytics, display, batch execution",
   "type": "module",
   "main": "src/index.ts",
@@ -36,7 +36,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/core": "3.0.0-alpha.28"
+    "@pi-unipi/core": "3.0.0-alpha.29"
   },
   "devDependencies": {},
   "peerDependencies": {

package/packages/watchdog/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/watchdog",
-  "version": "3.0.0-alpha.28",
+  "version": "3.0.0-alpha.29",
   "description": "Jev watchdog for long-running tool calls and background tasks — judges stuck work via TypeSafe System One and kills or warns",
   "type": "module",
   "main": "index.ts",
@@ -32,8 +32,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/background-tasks": "3.0.0-alpha.28",
-    "@pi-unipi/core": "3.0.0-alpha.28"
+    "@pi-unipi/background-tasks": "3.0.0-alpha.29",
+    "@pi-unipi/core": "3.0.0-alpha.29"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": "^0.87.1",

package/packages/web-api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/web-api",
-  "version": "3.0.0-alpha.28",
+  "version": "3.0.0-alpha.29",
   "description": "Web search, read, and summarize tools with provider-based backend selection for Pi coding agent",
   "type": "module",
   "main": "src/index.ts",
@@ -31,7 +31,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@pi-unipi/core": "3.0.0-alpha.28",
+    "@pi-unipi/core": "3.0.0-alpha.29",
     "defuddle": "^0.18.1",
     "linkedom": "^0.18.12",
     "wreq-js": "^2.3.0"

package/packages/workflow/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/workflow",
-  "version": "3.0.0-alpha.28",
+  "version": "3.0.0-alpha.29",
   "description": "Plan mode and permission modes for the Pi coding agent",
   "type": "module",
   "main": "index.ts",
@@ -27,7 +27,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/core": "3.0.0-alpha.28"
+    "@pi-unipi/core": "3.0.0-alpha.29"
   },
   "peerDependencies": {
     "@earendil-works/pi-ai": "^0.87.1",