@selesai/code 0.13.33 → 0.13.34

package/dist/extensions/pi-hermes-memory/src/config.ts

@@ -75,13 +75,42 @@ export const DEFAULT_CONFIG_PATH = path.join(
   AGENT_ROOT,
   "hermes-memory-config.json",
 );
+export const DEFAULT_SETTINGS_PATH = path.join(AGENT_ROOT, "settings.json");
+export const HERMES_MEMORY_SETTINGS_KEY = "hermesMemory";
 
-export function loadConfig(configPath = DEFAULT_CONFIG_PATH): MemoryConfig {
+function readConfigObject(configPath: string | undefined): Record<string, unknown> | undefined {
+  if (!configPath) return undefined;
   try {
-    if (fs.existsSync(configPath)) {
-      const raw = fs.readFileSync(configPath, "utf-8");
-      const parsed = JSON.parse(raw);
-      // Merge: override defaults with user config
+    const parsed: unknown = JSON.parse(fs.readFileSync(configPath, "utf-8"));
+    return typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)
+      ? parsed as Record<string, unknown>
+      : undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+/** Read extension settings from settings.json, falling back to the legacy file. */
+export function loadConfig(
+  configPath = DEFAULT_CONFIG_PATH,
+  settingsPath?: string,
+): MemoryConfig {
+  try {
+    const legacyConfig = readConfigObject(configPath);
+    const resolvedSettingsPath = settingsPath
+      ?? (configPath === DEFAULT_CONFIG_PATH ? DEFAULT_SETTINGS_PATH : undefined);
+    const settings = readConfigObject(resolvedSettingsPath);
+    const extensionSettings = settings?.[HERMES_MEMORY_SETTINGS_KEY];
+    if (legacyConfig || isRecord(extensionSettings)) {
+      const parsed: Record<string, unknown> = {
+        ...(legacyConfig ?? {}),
+        ...(isRecord(extensionSettings) ? extensionSettings : {}),
+      };
+      // New settings.json values take precedence over the legacy file.
       const config: MemoryConfig = { ...DEFAULT_CONFIG };
       const isNonNegativeNumber = (value: unknown): value is number => (
         typeof value === "number" && Number.isFinite(value) && value >= 0
@@ -156,8 +185,7 @@ export function loadConfig(configPath = DEFAULT_CONFIG_PATH): MemoryConfig {
         if (normalizedProjectsMemoryDir) config.projectsMemoryDir = normalizedProjectsMemoryDir;
       }
       if (
-        typeof parsed.sessionSearch === "object" &&
-        parsed.sessionSearch !== null &&
+        isRecord(parsed.sessionSearch) &&
         isSessionSearchVariant(parsed.sessionSearch.variant)
       ) {
         config.sessionSearch = { variant: parsed.sessionSearch.variant };
@@ -204,7 +232,7 @@ export function loadConfig(configPath = DEFAULT_CONFIG_PATH): MemoryConfig {
       return config;
     }
   } catch {
-    // Fall back to defaults on parse error or access issues
+    // Fall back to defaults on unexpected parse or access issues.
   }
   return { ...DEFAULT_CONFIG };
 }

package/dist/extensions/pi-hermes-memory/src/constants.ts

@@ -29,12 +29,12 @@ export const DEFAULT_NUDGE_TOOL_CALLS = 15;
 export const DEFAULT_REVIEW_RECENT_MESSAGES = 0;
 export const DEFAULT_FLUSH_RECENT_MESSAGES = 0;
 /**
- * A consolidation run pays child-process boot plus a full LLM turn, which
- * routinely exceeds 60s — at the old 60s default the auto path was killed
- * mid-run on every attempt (#136). Configured values are honored verbatim,
- * including lower ones; `loadConfig` warns when a value below this is set.
+ * A consolidation run pays child-process boot plus a full LLM turn. Five
+ * minutes leaves room for slower models and larger memory stores. Configured
+ * values are honored verbatim, including lower ones; `loadConfig` warns when a
+ * value below this is set.
  */
-export const DEFAULT_CONSOLIDATION_TIMEOUT_MS = 180000;
+export const DEFAULT_CONSOLIDATION_TIMEOUT_MS = 300000;
 /** Wall-clock grace after overflow before an automatic consolidation may run. */
 export const DEFAULT_OVERFLOW_GRACE_MS = 180000;
 export const DEFAULT_FAILURE_INJECTION_MAX_AGE_DAYS = 7;

package/dist/extensions/pi-hermes-memory/src/handlers/auto-consolidate.ts

@@ -337,64 +337,78 @@ export function registerConsolidateCommand(
         });
       }
 
-      try {
-        ctx.ui.notify(
-          `🔄 Starting memory consolidation for ${targets.length} target${targets.length === 1 ? "" : "s"}...`,
-          "info",
-        );
-      } catch {
-        // Best-effort only. If the command context is already stale, continue
-        // with the consolidation work rather than failing before it starts.
-      }
-
-      for (const item of targets) {
-        const entries = entriesForTarget(item.store, item.target);
-
-        if (entries.length === 0) {
-          results.push(`${item.label}: (empty, nothing to consolidate)`);
-          continue;
+      const setStatus = (text?: string) => {
+        try {
+          ctx.ui.setStatus("pi-hermes-memory:consolidation", text);
+        } catch {
+          // Best-effort progress feedback only.
         }
+      };
 
+      setStatus("Preparing memory consolidation…");
+      try {
         try {
           ctx.ui.notify(
-            `⏳ Consolidating ${item.label}...`,
+            `🔄 Starting memory consolidation for ${targets.length} target${targets.length === 1 ? "" : "s"}...`,
             "info",
           );
         } catch {
-          // Best-effort progress feedback only.
+          // Best-effort only. If the command context is already stale, continue
+          // with the consolidation work rather than failing before it starts.
         }
 
-        const result = await triggerConsolidation(
-          pi,
-          item.store,
-          item.target,
-          ctx.signal,
-          timeoutMs,
-          item.toolTarget,
-          llmConfig,
-          ctx,
-          dbManager,
-          activeProjectName,
-          deps,
-        );
-
-        if (result.consolidated) {
-          await item.store.loadFromDisk();
-          results.push(`${item.label}: ✅ consolidated`);
-        } else {
-          results.push(`${item.label}: ❌ ${result.error}`);
+        for (const [index, item] of targets.entries()) {
+          const entries = entriesForTarget(item.store, item.target);
+
+          if (entries.length === 0) {
+            results.push(`${item.label}: (empty, nothing to consolidate)`);
+            continue;
+          }
+
+          setStatus(`Consolidating ${item.label} (${index + 1}/${targets.length})…`);
+          try {
+            ctx.ui.notify(
+              `⏳ Consolidating ${item.label}...`,
+              "info",
+            );
+          } catch {
+            // Best-effort progress feedback only.
+          }
+
+          const result = await triggerConsolidation(
+            pi,
+            item.store,
+            item.target,
+            ctx.signal,
+            timeoutMs,
+            item.toolTarget,
+            llmConfig,
+            ctx,
+            dbManager,
+            activeProjectName,
+            deps,
+          );
+
+          if (result.consolidated) {
+            await item.store.loadFromDisk();
+            results.push(`${item.label}: ✅ consolidated`);
+          } else {
+            results.push(`${item.label}: ❌ ${result.error}`);
+          }
         }
-      }
 
-      const summary = `\n  🔄 Memory Consolidation\n  ${"─".repeat(30)}\n${results.map((r) => `  ${r}`).join("\n")}`;
+        const summary = `\n  🔄 Memory Consolidation\n  ${"─".repeat(30)}\n${results.map((r) => `  ${r}`).join("\n")}`;
 
-      try {
-        ctx.ui.notify(summary, "info");
-      } catch {
-        // Child consolidation can indirectly trigger a runtime reload/session
-        // replacement. If that happens, the original command ctx is stale by
-        // the time we reach the final summary, so the command should exit
-        // quietly instead of surfacing a stale-ctx error.
+        try {
+          ctx.ui.notify(summary, "info");
+        } catch {
+          // Child consolidation can indirectly trigger a runtime reload/session
+          // replacement. If that happens, the original command ctx is stale by
+          // the time we reach the final summary, so the command should exit
+          // quietly instead of surfacing a stale-ctx error.
+        }
+      } finally {
+        setStatus(undefined);
       }
     },
   });

package/dist/extensions/pi-hermes-memory/tests/config.test.ts

@@ -7,9 +7,11 @@ import { loadConfig } from "../src/config.js";
 import { AGENT_ROOT } from "../src/paths.js";
 
 const TEST_CONFIG_PATH = path.join(os.tmpdir(), `hermes-memory-config-test-${process.pid}.json`);
+const TEST_SETTINGS_PATH = path.join(os.tmpdir(), `hermes-settings-test-${process.pid}.json`);
 
 afterEach(() => {
   fs.rmSync(TEST_CONFIG_PATH, { force: true });
+  fs.rmSync(TEST_SETTINGS_PATH, { force: true });
 });
 
 describe("loadConfig", () => {
@@ -30,7 +32,7 @@ describe("loadConfig", () => {
     assert.strictEqual(config.flushRecentMessages, 0);
     assert.strictEqual(config.memoryOverflowStrategy, "auto-consolidate");
     assert.strictEqual(config.autoConsolidate, true);
-    assert.strictEqual(config.consolidationTimeoutMs, 180000);
+    assert.strictEqual(config.consolidationTimeoutMs, 300000);
     assert.strictEqual(config.overflowGraceMs, 180000);
     assert.strictEqual(config.autoConsolidationWarnOnFailure, true);
     assert.strictEqual(config.failureInjectionEnabled, true);
@@ -65,7 +67,7 @@ describe("loadConfig", () => {
         "a lower configured value must be honored, not clamped",
       );
       assert.strictEqual(warnings.length, 1, "a sub-default value should warn once");
-      assert.match(warnings[0], /60000ms.*below the 180000ms default/);
+      assert.match(warnings[0], /60000ms.*below the 300000ms default/);
     } finally {
       console.warn = originalWarn;
     }
@@ -112,6 +114,28 @@ describe("loadConfig", () => {
     assert.strictEqual(config.reviewEnabled, true);
   });
 
+  it("loads hermesMemory from settings.json with precedence over the legacy config", () => {
+    fs.mkdirSync(path.dirname(TEST_CONFIG_PATH), { recursive: true });
+    fs.writeFileSync(TEST_CONFIG_PATH, JSON.stringify({
+      llmThinkingOverride: "high",
+      consolidationTimeoutMs: 240000,
+    }));
+    fs.writeFileSync(TEST_SETTINGS_PATH, JSON.stringify({
+      theme: "dark",
+      hermesMemory: {
+        llmThinkingOverride: "off",
+        llmModelOverride: " tokenin/deepseek-v4.1-flash ",
+        consolidationTimeoutMs: 300000,
+      },
+    }));
+
+    const config = loadConfig(TEST_CONFIG_PATH, TEST_SETTINGS_PATH);
+    assert.strictEqual(config.llmThinkingOverride, "off");
+    assert.strictEqual(config.llmModelOverride, "tokenin/deepseek-v4.1-flash");
+    assert.strictEqual(config.consolidationTimeoutMs, 300000);
+    assert.strictEqual(config.memoryMode, "policy-only");
+  });
+
   it("only accepts boolean quickCheckOnOpen overrides", () => {
     fs.mkdirSync(path.dirname(TEST_CONFIG_PATH), { recursive: true });
     fs.writeFileSync(TEST_CONFIG_PATH, JSON.stringify({ quickCheckOnOpen: "false" }));

package/dist/extensions/pi-hermes-memory/tests/handlers/auto-consolidate.test.ts

@@ -631,6 +631,7 @@ describe("registerConsolidateCommand", () => {
   it("includes project memory when a project store is available", async () => {
     let handler: any;
     const notifications: string[] = [];
+    const statuses: Array<[string, string | undefined]> = [];
     let projectReloaded = false;
 
     const pi = {
@@ -655,7 +656,10 @@ describe("registerConsolidateCommand", () => {
     registerConsolidateCommand(pi, mockStore, 60000, projectStore, "demo-project");
     await handler({}, {
       signal: undefined,
-      ui: { notify: (message: string) => { notifications.push(message); } },
+      ui: {
+        notify: (message: string) => { notifications.push(message); },
+        setStatus: (key: string, text: string | undefined) => { statuses.push([key, text]); },
+      },
     });
 
     assert.strictEqual(execCalls.length, 4, "should consolidate memory, user, failure, and project stores");
@@ -670,6 +674,8 @@ describe("registerConsolidateCommand", () => {
     assert.ok(projectReloaded, "project store should reload after consolidation");
     assert.ok(notifications.some((message) => message.includes("Starting memory consolidation")), "should show an initial progress notification");
     assert.ok(notifications.some((message) => message.includes("⏳ Consolidating memory")), "should show per-target progress");
+    assert.ok(statuses.some(([key, text]) => key === "pi-hermes-memory:consolidation" && text?.includes("Consolidating memory")), "should publish busy progress");
+    assert.deepStrictEqual(statuses.at(-1), ["pi-hermes-memory:consolidation", undefined], "should clear busy progress when done");
     const finalNotification = notifications[notifications.length - 1] ?? "";
     assert.ok(finalNotification.includes("failure: ✅ consolidated"), "final notification should include failure result");
     assert.ok(finalNotification.includes("project:demo-project: ✅ consolidated"), "final notification should include project result");

package/dist/extensions/pi-intercom/index.ts

@@ -1186,7 +1186,11 @@ export default function piIntercomExtension(pi: ExtensionAPI) {
     const deliveredEntry = { ...entry, message: injectedMessage, replyCommand };
     replyTracker.queueTurnContext({ from: entry.from, message: injectedMessage, receivedAt: Date.now() });
     const senderDisplay = entry.from.name || entry.from.id.slice(0, 8);
-    const replyInstruction = replyCommand ? `\n\nTo reply, use the intercom tool: ${replyCommand}` : "";
+    // The tool may be an inactive optional capability: say how to activate it, not just its call.
+    const activateHint = pi.getActiveTools().includes("intercom")
+      ? ""
+      : ' (not active yet: call capability_discover with name "intercom" first)';
+    const replyInstruction = replyCommand ? `\n\nTo reply, use the intercom tool${activateHint}: ${replyCommand}` : "";
     const deliveryMetadata = formatInboundDeliveryMetadata(injectedMessage);
     pi.sendMessage(
       {

package/dist/extensions/rtk.test.ts

@@ -41,9 +41,11 @@ esac
 function makePi() {
 	const handlers = new Map<string, Function[]>();
 	const pi = {
-		exec: async (cmd: string, args: string[], opts?: { timeout?: number }) =>
+		exec: async (cmd: string, args: string[]) =>
 			new Promise((resolve) => {
-				execFile(cmd, args, { timeout: opts?.timeout }, (error, stdout, stderr) => {
+				// The shim runs under the suite's own load: enforcing the extension's production
+				// 2s budget here kills it, which the extension reports as a failed probe.
+				execFile(cmd, args, (error, stdout, stderr) => {
 					if (error) {
 						// execFile reports non-zero exits as errors; keep the real exit code.
 						const code =
@@ -63,8 +65,14 @@ function makePi() {
 	return { pi: pi as any, handlers };
 }
 
+// Registration is deferred off startup (the managed-binary probe may spawn a process),
+// so hook installation can outlast vi.waitFor's 1s default on a loaded machine.
+function waitFor<T>(assertion: () => T | Promise<T>): Promise<T> {
+	return vi.waitFor(assertion, { timeout: 5_000 });
+}
+
 async function getToolCall(handlers: Map<string, Function[]>): Promise<Function> {
-	await vi.waitFor(() => expect(handlers.has("tool_call")).toBe(true));
+	await waitFor(() => expect(handlers.has("tool_call")).toBe(true));
 	return handlers.get("tool_call")![0]!;
 }
 
@@ -131,7 +139,7 @@ posixOnly("rtk extension", () => {
 			const warn = vi.spyOn(console, "warn").mockImplementation(() => {});
 			const { pi, handlers } = makePi();
 			rtkExtension(pi);
-			await vi.waitFor(() => expect(warn).toHaveBeenCalledWith(expect.stringContaining("rtk gain failed")));
+			await waitFor(() => expect(warn).toHaveBeenCalledWith(expect.stringContaining("rtk gain failed")));
 			expect(handlers.has("tool_call")).toBe(false);
 		} finally {
 			if (previousPath) process.env.PATH = previousPath;
@@ -156,7 +164,7 @@ posixOnly("rtk extension", () => {
 		// Override exec so --version fails.
 		pi.exec = vi.fn(async () => ({ code: 1, stdout: "", stderr: "not found", killed: false }));
 		rtkExtension(pi);
-		await vi.waitFor(() => expect(warn).toHaveBeenCalledWith(expect.stringContaining("failed --version")));
+		await waitFor(() => expect(warn).toHaveBeenCalledWith(expect.stringContaining("failed --version")));
 		expect(handlers.has("tool_call")).toBe(false);
 	});
 
@@ -166,7 +174,7 @@ posixOnly("rtk extension", () => {
 		ensureToolMock.mockResolvedValue("rtk");
 		pi.exec = vi.fn(async () => ({ code: 0, stdout: "garbage output", stderr: "", killed: false }));
 		rtkExtension(pi);
-		await vi.waitFor(() => expect(warn).toHaveBeenCalledWith(expect.stringContaining("could not parse version")));
+		await waitFor(() => expect(warn).toHaveBeenCalledWith(expect.stringContaining("could not parse version")));
 		expect(handlers.has("tool_call")).toBe(false);
 	});
 
@@ -176,7 +184,7 @@ posixOnly("rtk extension", () => {
 		ensureToolMock.mockResolvedValue("rtk");
 		pi.exec = vi.fn(async () => ({ code: 0, stdout: "   ", stderr: "", killed: false }));
 		rtkExtension(pi);
-		await vi.waitFor(() => expect(warn).toHaveBeenCalledWith(expect.stringContaining("<empty output>")));
+		await waitFor(() => expect(warn).toHaveBeenCalledWith(expect.stringContaining("<empty output>")));
 		expect(handlers.has("tool_call")).toBe(false);
 	});
 
@@ -186,7 +194,7 @@ posixOnly("rtk extension", () => {
 		ensureToolMock.mockResolvedValue("rtk");
 		pi.exec = vi.fn(async () => ({ code: 0, stdout: "rtk 0.22.0", stderr: "", killed: false }));
 		rtkExtension(pi);
-		await vi.waitFor(() => expect(warn).toHaveBeenCalledWith(expect.stringContaining("too old")));
+		await waitFor(() => expect(warn).toHaveBeenCalledWith(expect.stringContaining("too old")));
 		expect(handlers.has("tool_call")).toBe(false);
 	});
 
@@ -195,7 +203,7 @@ posixOnly("rtk extension", () => {
 		ensureToolMock.mockRejectedValue(new Error("download failed"));
 		const { pi, handlers } = makePi();
 		rtkExtension(pi);
-		await vi.waitFor(() => expect(warn).toHaveBeenCalledWith(expect.stringContaining("managed installation failed")));
+		await waitFor(() => expect(warn).toHaveBeenCalledWith(expect.stringContaining("managed installation failed")));
 		expect(handlers.has("tool_call")).toBe(false);
 	});
 
@@ -204,7 +212,7 @@ posixOnly("rtk extension", () => {
 		ensureToolMock.mockRejectedValue("plain string failure");
 		const { pi, handlers } = makePi();
 		rtkExtension(pi);
-		await vi.waitFor(() => expect(warn).toHaveBeenCalledWith(expect.stringContaining("plain string failure")));
+		await waitFor(() => expect(warn).toHaveBeenCalledWith(expect.stringContaining("plain string failure")));
 		expect(handlers.has("tool_call")).toBe(false);
 	});
 
@@ -213,7 +221,7 @@ posixOnly("rtk extension", () => {
 		ensureToolMock.mockResolvedValue(undefined);
 		const { pi, handlers } = makePi();
 		rtkExtension(pi);
-		await vi.waitFor(() => expect(warn).toHaveBeenCalledWith(expect.stringContaining("unavailable")));
+		await waitFor(() => expect(warn).toHaveBeenCalledWith(expect.stringContaining("unavailable")));
 		expect(handlers.has("tool_call")).toBe(false);
 	});
 
@@ -225,7 +233,7 @@ posixOnly("rtk extension", () => {
 			throw new Error("spawn ENOENT");
 		});
 		rtkExtension(pi);
-		await vi.waitFor(() => expect(warn).toHaveBeenCalledWith(expect.stringContaining("verification failed")));
+		await waitFor(() => expect(warn).toHaveBeenCalledWith(expect.stringContaining("verification failed")));
 		expect(handlers.has("tool_call")).toBe(false);
 	});
 
@@ -237,7 +245,7 @@ posixOnly("rtk extension", () => {
 			throw "string failure";
 		});
 		rtkExtension(pi);
-		await vi.waitFor(() => expect(warn).toHaveBeenCalledWith(expect.stringContaining("string failure")));
+		await waitFor(() => expect(warn).toHaveBeenCalledWith(expect.stringContaining("string failure")));
 		expect(handlers.has("tool_call")).toBe(false);
 	});
 

package/dist/extensions/tps.test.ts

@@ -1,5 +1,5 @@
 import { describe, expect, it } from "vitest";
-import { calculateLiveTps, calculateReliableTps, type TpsTiming } from "./tps.ts";
+import { calculateLiveTps, calculateReliableTps, setupTpsTracker, type TpsTiming } from "./tps.ts";
 
 function timing(overrides: Partial<TpsTiming> = {}): TpsTiming {
 	return {
@@ -23,6 +23,37 @@ describe("calculateLiveTps", () => {
 	});
 });
 
+describe("setupTpsTracker with anthropic-style usage", () => {
+	it("ignores the tiny usage.output seeded at message_start while streaming", async () => {
+		const handlers = new Map<string, (event: any, ctx: any) => Promise<void>>();
+		const statuses: string[] = [];
+		const ctx = { ui: { setStatus: (_k: string, v: string) => statuses.push(v), notify: () => {}, theme: { fg: (_c: string, t: string) => t } } };
+		setupTpsTracker({ on: (name: string, fn: any) => handlers.set(name, fn) } as any);
+
+		let now = 0;
+		const realNow = performance.now;
+		performance.now = () => now;
+		try {
+			const message = { role: "assistant", provider: "anthropic", model: "claude", usage: { output: 1 } };
+			await handlers.get("agent_start")!({}, ctx);
+			await handlers.get("message_start")!({ message }, ctx);
+			for (let i = 0; i < 20; i++) {
+				now += 50;
+				await handlers.get("message_update")!({ message, assistantMessageEvent: { type: "text_delta", delta: "x".repeat(40) } }, ctx);
+			}
+			// 20 deltas * 10 est. tokens over ~1s => ~200 tok/s, not ~1 tok/s
+			expect(statuses.at(-1)).toBe("211 tok/s");
+
+			message.usage.output = 200;
+			await handlers.get("message_end")!({ message }, ctx);
+			await handlers.get("agent_end")!({}, ctx);
+			expect(statuses.at(-1)).toMatch(/^done [1-9]\d* t\/s \(main [1-9]\d* t\/s\)$/);
+		} finally {
+			performance.now = realNow;
+		}
+	});
+});
+
 describe("calculateReliableTps", () => {
 	it("uses active stream time for sufficiently sampled output", () => {
 		expect(calculateReliableTps(100, timing())).toEqual({

package/dist/extensions/tps.ts

@@ -230,7 +230,9 @@ export function setupTpsTracker(pi: ExtensionAPI): void {
 		streamStart ??= now;
 		estimatedStreamedTokens += Math.max(0, streamEvent.delta.length / 4);
 		const officialTokens = generatedTokensFromUsage(asRecord(event.message.usage));
-		const currentTokens = officialTokens > 0 ? officialTokens : estimatedStreamedTokens;
+		// Anthropic seeds usage.output (~1) at message_start and only finalizes it at message_delta,
+		// so a nonzero official count mid-stream is not authoritative; take whichever is larger.
+		const currentTokens = Math.max(officialTokens, estimatedStreamedTokens);
 		const tps = calculateLiveTps(currentTokens, now - streamStart);
 		if (tps !== null) {
 			ctx.ui.setStatus("tps", ctx.ui.theme.fg("accent", `${tps} tok/s`));

package/docs/settings.md

@@ -49,8 +49,8 @@ Use `/trust` in interactive mode to save a project trust decision for future ses
 ### Jev Advisory Routing
 
 The bundled `jev-advisory-routing` extension uses the Jev decisions model for bounded opt-in
-routing. Every route stays off until it is enabled in `jevAdvisory`; the two routes share one
-Jev provider/model pair:
+routing. The host-side routes stay off until they are enabled in `jevAdvisory`; the agent's own
+`ask` route is on by default. All three share one Jev provider/model pair:
 
 - `memory` — only after an explicit durable-memory cue (for example “the convention we
   decided” or “don't repeat the past failure”), Jev chooses one read-only local
@@ -58,6 +58,14 @@ Jev provider/model pair:
 - `recommendations` — one discovered skill or prompt workflow that fits, or a proportionate
   verification level. Nothing is loaded, started, or executed: the recommendation is context for the
   agent, and required project/workflow gates are unchanged.
+- `ask` — the agent-callable `ask_jev` tool (on by default). The agent decides when to call it: it
+  passes its own prose, file `paths`, and one `command`, and gets typed choice/score/noul answers back —
+  never the file contents or command output, so a verdict about code costs a few lines of context
+  instead of the files. Files must be inside the working directory, secret-named files (`.env`,
+  `*.pem`, `id_rsa*`, `auth.json`, …) are refused, and the command runs through the bash tool's local
+  shell. Whatever the agent passes is sent to Jev. Without Token-In credentials the tool is taken out
+  of the agent's loadout before each run (it returns after `/tokenin add`, no reload needed), and a call
+  that slips through reads no file and runs no command.
 
 | Setting | Type | Default | Description |
 |---------|------|---------|-------------|
@@ -66,11 +74,15 @@ Jev provider/model pair:
 | `jevAdvisory.baseUrl` | string | inherited | Base URL override; defaults to any registered model of `provider` |
 | `jevAdvisory.routes.memory.enabled` | boolean | `false` | Enable the memory-lookup route |
 | `jevAdvisory.routes.recommendations.enabled` | boolean | `false` | Enable skill/workflow and verification recommendations |
-| `<route>.timeoutMs` | number | `8000` | Route request timeout (ms); memory is capped at 750ms |
+| `jevAdvisory.routes.ask.enabled` | boolean | `true` | Offer the agent the `ask_jev` tool; set `false` to turn it off |
+| `<route>.timeoutMs` | number | `8000` | Route request timeout (ms); memory is capped at 750ms; `ask` defaults to `15000` |
 | `<route>.minConfidence` | number | `0.6` | Below this Jev confidence the route abstains |
 | `<route>.contextTurns` | number | `4` | Prior user turns sent as recommendation context; memory sends only the current bounded prompt |
 | `<route>.contextChars` | number | `4000` | Character budget for recommendation context |
-| `<route>.payloadBytes` | number | `8192` | Hard cap on the serialized decision request |
+| `<route>.payloadBytes` | number | `8192` | Hard cap on the serialized decision request; `ask` defaults to `32768` |
+
+`ask` ignores `minConfidence`, `contextTurns`, and `contextChars`: it returns every confidence to the
+agent, and its context is whatever the agent put in the request.
 
 Only idle, top-level, interactive prompts are routed: queued steering/follow-up input, slash
 commands, and extension-injected turns are skipped, and each turn is routed at most once. The memory
@@ -99,16 +111,28 @@ needed: a compact `capability_catalog` lists them, `capability_discover` activat
 current run, and `capability_skill_show` loads one skill's full instructions. Set
 `SELESAI_CAPABILITY_GATEWAY=0` to disable the gateway and keep every tool visible.
 
-Routing has two rungs:
+Routing has three rungs:
 
 1. A deterministic router activates a tool when the prompt uniquely matches its name, alias, or
    discovery summary. Skills are never auto-loaded or auto-selected.
 2. Default-on Jev tie-breaking: when the deterministic router returns an ambiguous lexical hint
    among optional tools, the Jev decisions model is asked which of two or three hinted tools (or
    `none`) should be exposed. Jev sees only the bounded current prompt and each hinted tool's compact
-   discovery line — never conversation history, tool schemas, or the full catalog. A prompt with no
+   discovery line — never conversation history or tool schemas. A prompt with no
    lexical signal, a unique activation, and a skill-only match never reach Jev. Token-In credentials
    are required; without them, no Jev request is sent and Selesai prompts you to run `/tokenin add`.
+3. The agent-driven route: `capability_discover` also takes a `job` instead of a name. Tools and
+   skills are separate decisions — a tool is callable code from an extension or MCP server that the
+   agent may use many times, a skill is a written procedure it reads once — so one Jev request asks
+   two questions, each from catalog metadata only (never a schema or skill body), each allowed to
+   answer `none`. A chosen tool is activated for the run and its parameters are returned; a chosen
+   skill is named for `capability_skill_show`. Tools are offered first, so only skills can be left out
+   of an oversized catalog, and a `none` then says how many were not considered. A skill found in
+   several sources is offered once. While Jev has no credential, the `job` route is left out of the
+   agent's instructions and the agent is pointed at `capability_catalog` plus an exact `name`.
+
+All Jev features share one warning per session, shown the first time one of them actually needs the
+missing credential; a user without a subscription is not warned just for starting a session.
 
 | Setting | Type | Default | Description |
 |---------|------|---------|-------------|
@@ -117,8 +141,9 @@ Routing has two rungs:
 | `capabilityGateway.routing.jev.model` | string | `"jev-1.13"` | Decisions model the tie-breaker calls |
 | `capabilityGateway.routing.jev.baseUrl` | string | inherited | Base URL override; defaults to any registered model of `provider` |
 | `capabilityGateway.routing.jev.timeoutMs` | number | `1000` | Pre-turn request timeout (ms); hard-capped at `2000` |
+| `capabilityGateway.routing.jev.discoverTimeoutMs` | number | `5000` | Timeout (ms) for `capability_discover({ job })`; hard-capped at `15000` |
 | `capabilityGateway.routing.jev.minConfidence` | number | `0.6` | Below this Jev confidence the tie-breaker abstains |
-| `capabilityGateway.routing.jev.payloadBytes` | number | `8192` | Hard cap on the serialized decision request |
+| `capabilityGateway.routing.jev.payloadBytes` | number | `32768` | Hard cap on the serialized decision request; the pre-turn tie-break uses a few hundred bytes of it |
 
 This area is independent of `jevAdvisory`: gateway routing reads only
 `capabilityGateway.routing.jev` and shares just the Jev provider/model deployment identity. A
@@ -362,6 +387,20 @@ When selesai reads extensions from both `~/.selesai/agent/extensions/` and `~/.p
 
 Keys are top-level entry names (dir name for packaged extensions, file name for loose `.ts`). Values are `"selesai"` or `"pi"`. See [Shared Host Extensions](shared-host-extensions.md) for the full flow.
 
+## Bundled extension settings
+
+The `pi-hermes-memory` extension reads its options from the `hermesMemory` object in global `~/.selesai/agent/settings.json`:
+
+```json
+{
+  "hermesMemory": {
+    "llmThinkingOverride": "off",
+    "consolidationTimeoutMs": 300000
+  }
+}
+```
+
+These settings load at startup and take precedence over the legacy `hermes-memory-config.json` fallback. `llmModelOverride` is optional and uses `provider/model` format (for example, `tokenin/deepseek-v4.1-flash` if your account has access); leave it unset to use the active model. See the [memory extension configuration reference](../src/extensions/pi-hermes-memory/README.md#configuration) for all options.
 
 ## Example
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@selesai/code",
-  "version": "0.13.33",
+  "version": "0.13.34",
   "description": "Maintained, extension-first Pi coding agent with built-in workflows, subagents, web research, questions, skills, and an enhanced terminal UI.",
   "type": "module",
   "engines": {
@@ -55,8 +55,8 @@
     "clean": "shx rm -rf dist",
     "dev": "tsx src/cli.ts",
     "dev:print": "tsx src/cli.ts --print",
-    "test": "vitest run src/__tests__/model-registry-completion.test.ts src/extensions/jev/decisions.test.ts src/extensions/capability-gateway/routing.test.ts src/core/settings-manager-auto-handoff.test.ts src/core/remote-catalog-provider.test.ts src/extensions/jev-advisory-memory.test.ts src/extensions/jev-advisory-recommendations.test.ts src/extensions/jev-advisory-lifecycle.test.ts src/extensions/undo.test.ts src/extensions/tps.test.ts src/extensions/pi-graft src/extensions/agent-browser.test.ts src/extensions/auto-session-name.test.ts src/extensions/context-compaction-reminder.test.ts src/extensions/copy-turn.test.ts src/extensions/grep-app/index.test.ts src/extensions/inline-skills.test.ts src/extensions/rtk.test.ts src/extensions/handoff-new.test.ts src/extensions/question/tests src/extensions/ponytail/test src/__tests__/tokenin-search.test.ts src/__tests__/tokenin-onboarding.test.ts src/__tests__/model-registry-defaults.test.ts src/core/system-prompt.test.ts src/core/session-format.test.ts test/settings-manager-compaction.test.ts test/suite/agent-session-runtime.test.ts test/suite/agent-session-prompt.test.ts test/suite/agent-session-queue.test.ts test/suite/agent-session-retry-events.test.ts test/suite/agent-session-compaction.test.ts test/suite/agent-session-compaction-model-overrides.test.ts test/suite/agent-session-bash-persistence.test.ts test/suite/agent-session-model-extension.test.ts test/clipboard.test.ts test/clipboard-command.test.ts test/clipboard-image.test.ts test/clipboard-image-bmp-conversion.test.ts test/clipboard-image-native-errors.test.ts src/cli/args.test.ts",
-    "test:coverage": "vitest run --coverage src/__tests__/model-registry-completion.test.ts src/extensions/jev/decisions.test.ts src/extensions/capability-gateway/routing.test.ts src/core/settings-manager-auto-handoff.test.ts src/core/remote-catalog-provider.test.ts src/extensions/jev-advisory-memory.test.ts src/extensions/jev-advisory-recommendations.test.ts src/extensions/jev-advisory-lifecycle.test.ts src/extensions/undo.test.ts src/extensions/tps.test.ts src/extensions/agent-browser.test.ts src/extensions/auto-session-name.test.ts src/extensions/context-compaction-reminder.test.ts src/extensions/copy-turn.test.ts src/extensions/grep-app/index.test.ts src/extensions/inline-skills.test.ts src/extensions/rtk.test.ts src/extensions/handoff-new.test.ts src/extensions/question/tests src/extensions/ponytail/test src/__tests__/tokenin-search.test.ts src/__tests__/tokenin-onboarding.test.ts src/__tests__/model-registry-defaults.test.ts src/core/system-prompt.test.ts src/core/session-format.test.ts test/settings-manager-compaction.test.ts test/suite/agent-session-runtime.test.ts test/suite/agent-session-prompt.test.ts test/suite/agent-session-queue.test.ts test/suite/agent-session-retry-events.test.ts test/suite/agent-session-compaction.test.ts test/suite/agent-session-compaction-model-overrides.test.ts test/suite/agent-session-bash-persistence.test.ts test/suite/agent-session-model-extension.test.ts test/clipboard.test.ts test/clipboard-command.test.ts test/clipboard-image.test.ts test/clipboard-image-bmp-conversion.test.ts test/clipboard-image-native-errors.test.ts src/cli/args.test.ts",
+    "test": "vitest run src/__tests__/model-registry-completion.test.ts src/extensions/jev/decisions.test.ts src/extensions/capability-gateway/routing.test.ts src/core/settings-manager-auto-handoff.test.ts src/core/remote-catalog-provider.test.ts src/extensions/jev-advisory-memory.test.ts src/extensions/jev-advisory-recommendations.test.ts src/extensions/jev-ask-tool.test.ts src/extensions/jev-advisory-lifecycle.test.ts src/extensions/undo.test.ts src/extensions/tps.test.ts src/extensions/pi-graft src/extensions/agent-browser.test.ts src/extensions/auto-session-name.test.ts src/extensions/context-compaction-reminder.test.ts src/extensions/copy-turn.test.ts src/extensions/grep-app/index.test.ts src/extensions/inline-skills.test.ts src/extensions/rtk.test.ts src/extensions/handoff-new.test.ts src/extensions/question/tests src/extensions/ponytail/test src/__tests__/tokenin-search.test.ts src/__tests__/tokenin-onboarding.test.ts src/__tests__/model-registry-defaults.test.ts src/core/system-prompt.test.ts src/core/session-format.test.ts test/settings-manager-compaction.test.ts test/suite/agent-session-runtime.test.ts test/suite/agent-session-prompt.test.ts test/suite/agent-session-queue.test.ts test/suite/agent-session-retry-events.test.ts test/suite/agent-session-compaction.test.ts test/suite/agent-session-compaction-model-overrides.test.ts test/suite/agent-session-bash-persistence.test.ts test/suite/agent-session-model-extension.test.ts test/clipboard.test.ts test/clipboard-command.test.ts test/clipboard-image.test.ts test/clipboard-image-bmp-conversion.test.ts test/clipboard-image-native-errors.test.ts src/cli/args.test.ts",
+    "test:coverage": "vitest run --coverage src/__tests__/model-registry-completion.test.ts src/extensions/jev/decisions.test.ts src/extensions/capability-gateway/routing.test.ts src/core/settings-manager-auto-handoff.test.ts src/core/remote-catalog-provider.test.ts src/extensions/jev-advisory-memory.test.ts src/extensions/jev-advisory-recommendations.test.ts src/extensions/jev-ask-tool.test.ts src/extensions/jev-advisory-lifecycle.test.ts src/extensions/undo.test.ts src/extensions/tps.test.ts src/extensions/agent-browser.test.ts src/extensions/auto-session-name.test.ts src/extensions/context-compaction-reminder.test.ts src/extensions/copy-turn.test.ts src/extensions/grep-app/index.test.ts src/extensions/inline-skills.test.ts src/extensions/rtk.test.ts src/extensions/handoff-new.test.ts src/extensions/question/tests src/extensions/ponytail/test src/__tests__/tokenin-search.test.ts src/__tests__/tokenin-onboarding.test.ts src/__tests__/model-registry-defaults.test.ts src/core/system-prompt.test.ts src/core/session-format.test.ts test/settings-manager-compaction.test.ts test/suite/agent-session-runtime.test.ts test/suite/agent-session-prompt.test.ts test/suite/agent-session-queue.test.ts test/suite/agent-session-retry-events.test.ts test/suite/agent-session-compaction.test.ts test/suite/agent-session-compaction-model-overrides.test.ts test/suite/agent-session-bash-persistence.test.ts test/suite/agent-session-model-extension.test.ts test/clipboard.test.ts test/clipboard-command.test.ts test/clipboard-image.test.ts test/clipboard-image-bmp-conversion.test.ts test/clipboard-image-native-errors.test.ts src/cli/args.test.ts",
     "prepare": "npm run build",
     "build": "npm run clean && tsgo -p tsconfig.build.json && shx chmod +x dist/cli.js dist/rpc-entry.js && npm run copy-assets",
     "copy-assets": "shx mkdir -p dist/modes/interactive/theme && shx cp src/modes/interactive/theme/*.json dist/modes/interactive/theme/ && shx mkdir -p dist/modes/interactive/assets && shx cp src/modes/interactive/assets/*.png dist/modes/interactive/assets/ && shx mkdir -p dist/core/export-html/vendor && shx cp src/core/export-html/template.html src/core/export-html/template.css src/core/export-html/template.js dist/core/export-html/ && shx cp src/core/export-html/vendor/*.js dist/core/export-html/vendor/ && shx mkdir -p dist/defaults && shx cp src/defaults/* dist/defaults/ && shx mkdir -p dist/extensions && node scripts/copy-extensions.mjs && shx mkdir -p dist/themes && shx cp -r src/themes/. dist/themes/ && shx mkdir -p dist/skills && shx cp -r src/skills/. dist/skills/"