@selesai/code 0.13.9 → 0.13.11

package/dist/extensions/pi-subagents/src/runs/background/subagent-runner.ts

@@ -144,9 +144,6 @@ import { resolveWatchdogConfig } from "../../watchdog/settings.ts";
 import { createBoundedByteTail, createBoundedLineReader, formatProtocolOutputLimit, MAX_CHILD_STDERR_BYTES, PI_AGGREGATE_EVENT_PROJECTOR, projectChildLifecycle, type ChildLifecycleAction, type ChildLifecycleState, type ProtocolOutputLimit } from "../shared/child-protocol.ts";
 import { acquireSessionLease, type SessionLeaseRequest } from "../shared/session-lease.ts";
 import { buildExternalCliPrompt, runExternalCli } from "../shared/external-cli-runner.ts";
-import { resolveClaudeCodeLaunch } from "../shared/claude-code-adapter.ts";
-import { resolveCodexExecLaunch } from "../shared/codex-exec-adapter.ts";
-import { resolveCursorAgentLaunch } from "../shared/cursor-agent-adapter.ts";
 import { resolveExternalCliRunnerStatus } from "../shared/external-cli-contract.ts";
 import { runExternalJob } from "../shared/external-job-runner.ts";
 import { createOrcaProgressTab, type OrcaProgressTab } from "../shared/orca-progress-tabs.ts";
@@ -1480,28 +1477,15 @@ async function runSingleStepInner(
 
 	if (step.runner?.type === "external-cli") {
 		const externalCwd = step.cwd ?? ctx.cwd;
-		const adapterLaunch = step.runner.adapter === "codex-exec" || step.runner.adapter === "codex-exec-writer"
-			? resolveCodexExecLaunch({ adapter: step.runner.adapter, command: step.runner.command, asyncDir: path.dirname(ctx.outputFile), stepIndex: ctx.flatIndex })
-			: step.runner.adapter === "claude-code" || step.runner.adapter === "claude-code-writer"
-				? resolveClaudeCodeLaunch({ adapter: step.runner.adapter, command: step.runner.command })
-				: step.runner.adapter === "cursor-agent" || step.runner.adapter === "cursor-agent-writer"
-					? resolveCursorAgentLaunch({ adapter: step.runner.adapter, command: step.runner.command, cwd: externalCwd, asyncDir: path.dirname(ctx.outputFile), stepIndex: ctx.flatIndex })
-				: undefined;
-		const runner = resolveExternalCliRunnerStatus({ ...step.runner, ...(adapterLaunch ? { args: adapterLaunch.args } : {}) });
+		const runner = resolveExternalCliRunnerStatus({ ...step.runner });
 		const outputSnapshot = captureSingleOutputSnapshot(step.outputPath);
 		const external = await runExternalCli(omitUndefinedProperties({
-			command: adapterLaunch?.command ?? runner.command,
-			args: adapterLaunch?.args ?? runner.args,
+			command: runner.command,
+			args: runner.args,
 			cwd: externalCwd,
 			prompt: buildExternalCliPrompt(step.systemPrompt ?? "", task),
 			asyncDir: path.dirname(ctx.outputFile),
 			stepIndex: ctx.flatIndex,
-			environment: adapterLaunch?.environment,
-			preflight: adapterLaunch?.preflight,
-			parser: adapterLaunch?.parser,
-			finalOutputPath: adapterLaunch?.finalOutputPath,
-			promptFilePath: adapterLaunch?.promptFilePath,
-			temporaryDirectories: adapterLaunch?.temporaryDirectories,
 			registerTimeout: ctx.registerTimeout,
 			registerStop: ctx.registerStop,
 			timeoutMessage: ctx.timeoutMessage,

package/dist/extensions/pi-subagents/src/runs/shared/external-cli-contract.ts

@@ -22,43 +22,27 @@ const PROMPT_FILE_UNSUPPORTED = {
 	resume: "The one-shot prompt-file adapter does not retain a durable external session identity.",
 } as const;
 
-export const CODE_OWNED_EXTERNAL_CLI_ADAPTER_IDS = [
-	"codex-exec",
-	"codex-exec-writer",
-	"claude-code",
-	"claude-code-writer",
-	"cursor-agent",
-	"cursor-agent-writer",
-] as const;
+export const CODE_OWNED_EXTERNAL_CLI_ADAPTER_IDS = [] as const;
 export type CodeOwnedExternalCliAdapterId = typeof CODE_OWNED_EXTERNAL_CLI_ADAPTER_IDS[number];
 
 const CODE_OWNED_EXTERNAL_CLI_ADAPTER_ID_SET = new Set<string>(CODE_OWNED_EXTERNAL_CLI_ADAPTER_IDS);
-export const CODE_OWNED_EXTERNAL_CLI_ADAPTER_LABEL = CODE_OWNED_EXTERNAL_CLI_ADAPTER_IDS.map((id) => `'${id}'`).join(", ");
+export const CODE_OWNED_EXTERNAL_CLI_ADAPTER_LABEL = "(none)";
 
 export function isCodeOwnedExternalCliAdapterId(value: unknown): value is CodeOwnedExternalCliAdapterId {
 	return typeof value === "string" && CODE_OWNED_EXTERNAL_CLI_ADAPTER_ID_SET.has(value);
 }
 
-const RESERVED_READ_ONLY_ADAPTERS = [
-	{ name: "claude-code", writer: "claude-code-writer", access: "file-write" },
-	{ name: "codex-exec", writer: "codex-exec-writer", access: "workspace-write" },
-	{ name: "cursor-agent", writer: "cursor-agent-writer", access: "workspace-write" },
-] as const;
+const RESERVED_READ_ONLY_ADAPTERS = [] as const;
 
 export function validateCodeOwnedProfileRunner(
-	agent: {
+	_agent: {
 		name: string;
 		localName?: string;
 		aliases?: readonly string[];
 		runner?: { type: string; adapter?: string };
 	},
 ): string | undefined {
-	const selectionNames = [agent.name, ...(agent.localName ? [agent.localName] : []), ...(agent.aliases ?? [])];
-	for (const adapter of RESERVED_READ_ONLY_ADAPTERS) {
-		if (selectionNames.includes(adapter.name) && !(agent.runner?.type === "external-cli" && agent.runner.adapter === adapter.name)) {
-			return `Selection name '${adapter.name}' is reserved for the read-only '${adapter.name}' adapter. Use '${adapter.writer}' for explicit ${adapter.access} access.`;
-		}
-	}
+	// With no code-owned adapter profiles bundled, no selection names are reserved.
 	return undefined;
 }
 
@@ -81,26 +65,13 @@ export function resolveExternalCliRunnerStatus(input: {
 	promptDelivery?: "stdin";
 	capabilities?: ExternalCliCapabilityNarrowing;
 }): ExternalCliRunnerStatus {
-	const codexExec = input.adapter === "codex-exec";
-	const codexExecWriter = input.adapter === "codex-exec-writer";
-	const claudeCode = input.adapter === "claude-code";
-	const claudeCodeWriter = input.adapter === "claude-code-writer";
-	const cursorAgent = input.adapter === "cursor-agent";
-	const cursorAgentWriter = input.adapter === "cursor-agent-writer";
-	const cursor = cursorAgent || cursorAgentWriter;
-	const unsupported = cursor ? PROMPT_FILE_UNSUPPORTED : UNSUPPORTED;
+	const unsupported = UNSUPPORTED;
 	return {
 		type: "external-cli",
 		command: input.command,
 		args: input.args ?? [],
-		promptDelivery: cursor ? "prompt-file" : input.promptDelivery ?? "stdin",
-		adapter: { id: input.adapter ?? "external-cli", version: 1, executionMode: cursor ? "one-shot-prompt-file" : "one-shot-stdin" },
-		...(codexExec ? { safety: { sandbox: "read-only" as const, approvalPolicy: "never" as const, ephemeral: true as const } } : {}),
-		...(codexExecWriter ? { safety: { access: "workspace-write" as const, sandbox: "workspace-write" as const, approvalPolicy: "never" as const, ephemeral: true as const } } : {}),
-		...(claudeCode ? { safety: { access: "read-only" as const, authentication: "existing-cli-required" as const, permissionMode: "plan" as const, tools: "none" as const, mcp: "empty-strict" as const, settingSources: "user" as const, userSettingsTrust: "required" as const, sessionPersistence: false as const } } : {}),
-		...(claudeCodeWriter ? { safety: { access: "workspace-write" as const, authentication: "existing-cli-required" as const, permissionMode: "acceptEdits" as const, tools: "Read,Write,Edit,Glob,Grep" as const, mcp: "empty-strict" as const, settingSources: "user" as const, userSettingsTrust: "required" as const, sessionPersistence: false as const } } : {}),
-		...(cursorAgent ? { safety: { access: "read-only" as const, authentication: "cursor-api-key-or-existing-login" as const, mode: "ask" as const, sandbox: "enabled" as const, workspaceTrust: "existing-required" as const, sessionReuse: false as const } } : {}),
-		...(cursorAgentWriter ? { safety: { access: "workspace-write" as const, authentication: "cursor-api-key-or-existing-login" as const, mode: "print" as const, sandbox: "enabled" as const, workspaceTrust: "existing-required" as const, sessionReuse: false as const } } : {}),
+		promptDelivery: input.promptDelivery ?? "stdin",
+		adapter: { id: input.adapter ?? "external-cli", version: 1, executionMode: "one-shot-stdin" },
 		capabilities: {
 			stop: true,
 			steer: false,

package/dist/extensions/pi-subagents/src/shared/types.ts

@@ -1652,7 +1652,7 @@ export type AgentRunnerConfig =
 	| { type: "pi" }
 	| {
 		type: "external-cli";
-		adapter?: "codex-exec" | "codex-exec-writer" | "claude-code" | "claude-code-writer" | "cursor-agent" | "cursor-agent-writer";
+		adapter?: never;
 		command: string;
 		args?: string[];
 		promptDelivery?: "stdin";
@@ -1678,7 +1678,7 @@ export interface ExternalCliCapabilities {
 }
 
 export interface ExternalCliReceiptMetadata {
-	adapter: { id: "external-cli" | "codex-exec" | "codex-exec-writer" | "claude-code" | "claude-code-writer" | "cursor-agent" | "cursor-agent-writer" | "grok-build"; version: 1; executionMode: "one-shot-stdin" | "one-shot-prompt-file" };
+	adapter: { id: "external-cli" | "grok-build"; version: 1; executionMode: "one-shot-stdin" | "one-shot-prompt-file" };
 	capabilities: ExternalCliCapabilities;
 	safety?:
 		| { sandbox: "read-only"; approvalPolicy: "never"; ephemeral: true }

package/dist/extensions/pi-subagents/src/workflows/workflow-receipt.ts

@@ -127,7 +127,7 @@ function parseExternalCliReceiptMetadata(value: unknown, key: string, source: st
 	const adapterRecord = adapter as Record<string, unknown>;
 	const unknownAdapter = Object.keys(adapterRecord).filter((field) => !["id", "version", "executionMode"].includes(field));
 	if (unknownAdapter.length > 0) throw new Error(`${label}.adapter has unsupported fields: ${unknownAdapter.join(", ")}.`);
-	if ((adapterRecord.id !== "external-cli" && adapterRecord.id !== "codex-exec" && adapterRecord.id !== "codex-exec-writer" && adapterRecord.id !== "claude-code" && adapterRecord.id !== "claude-code-writer" && adapterRecord.id !== "cursor-agent" && adapterRecord.id !== "cursor-agent-writer" && adapterRecord.id !== "grok-build") || adapterRecord.version !== 1 || adapterRecord.executionMode !== (adapterRecord.id === "cursor-agent" || adapterRecord.id === "cursor-agent-writer" || adapterRecord.id === "grok-build" ? "one-shot-prompt-file" : "one-shot-stdin")) throw new Error(`${label}.adapter is invalid.`);
+	if ((adapterRecord.id !== "external-cli" && adapterRecord.id !== "grok-build") || adapterRecord.version !== 1 || adapterRecord.executionMode !== (adapterRecord.id === "grok-build" ? "one-shot-prompt-file" : "one-shot-stdin")) throw new Error(`${label}.adapter is invalid.`);
 	const capabilities = metadata.capabilities;
 	if (!capabilities || typeof capabilities !== "object" || Array.isArray(capabilities)) throw new Error(`${label}.capabilities must be an object.`);
 	const capabilityRecord = capabilities as Record<string, unknown>;
@@ -137,43 +137,7 @@ function parseExternalCliReceiptMetadata(value: unknown, key: string, source: st
 		if (capabilityRecord[capability] !== expected) throw new Error(`${label}.capabilities.${capability} is invalid.`);
 	}
 	const safety = metadata.safety;
-	if (adapterRecord.id === "codex-exec") {
-		if (!safety || typeof safety !== "object" || Array.isArray(safety)) throw new Error(`${label}.safety is missing.`);
-		const safetyRecord = safety as Record<string, unknown>;
-		const unknownSafety = Object.keys(safetyRecord).filter((field) => !["sandbox", "approvalPolicy", "ephemeral"].includes(field));
-		if (unknownSafety.length > 0) throw new Error(`${label}.safety has unsupported fields: ${unknownSafety.join(", ")}.`);
-		if (safetyRecord.sandbox !== "read-only" || safetyRecord.approvalPolicy !== "never" || safetyRecord.ephemeral !== true) throw new Error(`${label}.safety is invalid.`);
-	} else if (adapterRecord.id === "codex-exec-writer") {
-		if (!safety || typeof safety !== "object" || Array.isArray(safety)) throw new Error(`${label}.safety is missing.`);
-		const safetyRecord = safety as Record<string, unknown>;
-		const unknownSafety = Object.keys(safetyRecord).filter((field) => !["access", "sandbox", "approvalPolicy", "ephemeral"].includes(field));
-		if (unknownSafety.length > 0) throw new Error(`${label}.safety has unsupported fields: ${unknownSafety.join(", ")}.`);
-		if (safetyRecord.access !== "workspace-write" || safetyRecord.sandbox !== "workspace-write" || safetyRecord.approvalPolicy !== "never" || safetyRecord.ephemeral !== true) throw new Error(`${label}.safety is invalid.`);
-	} else if (adapterRecord.id === "claude-code") {
-		if (!safety || typeof safety !== "object" || Array.isArray(safety)) throw new Error(`${label}.safety is missing.`);
-		const safetyRecord = safety as Record<string, unknown>;
-		const legacy = safetyRecord.authentication === undefined;
-		const unknownSafety = Object.keys(safetyRecord).filter((field) => !(legacy
-			? ["permissionMode", "tools", "mcp", "settingSources", "sessionPersistence"]
-			: ["access", "authentication", "permissionMode", "tools", "mcp", "settingSources", "userSettingsTrust", "sessionPersistence"]).includes(field));
-		if (unknownSafety.length > 0) throw new Error(`${label}.safety has unsupported fields: ${unknownSafety.join(", ")}.`);
-		if (legacy) {
-			if (safetyRecord.permissionMode !== "plan" || safetyRecord.tools !== "none" || safetyRecord.mcp !== "empty-strict" || safetyRecord.settingSources !== "none" || safetyRecord.sessionPersistence !== false) throw new Error(`${label}.safety is invalid.`);
-		} else if (safetyRecord.access !== "read-only" || safetyRecord.authentication !== "existing-cli-required" || safetyRecord.permissionMode !== "plan" || safetyRecord.tools !== "none" || safetyRecord.mcp !== "empty-strict" || safetyRecord.settingSources !== "user" || safetyRecord.userSettingsTrust !== "required" || safetyRecord.sessionPersistence !== false) throw new Error(`${label}.safety is invalid.`);
-	} else if (adapterRecord.id === "claude-code-writer") {
-		if (!safety || typeof safety !== "object" || Array.isArray(safety)) throw new Error(`${label}.safety is missing.`);
-		const safetyRecord = safety as Record<string, unknown>;
-		const unknownSafety = Object.keys(safetyRecord).filter((field) => !["access", "authentication", "permissionMode", "tools", "mcp", "settingSources", "userSettingsTrust", "sessionPersistence"].includes(field));
-		if (unknownSafety.length > 0) throw new Error(`${label}.safety has unsupported fields: ${unknownSafety.join(", ")}.`);
-		if (safetyRecord.access !== "workspace-write" || safetyRecord.authentication !== "existing-cli-required" || safetyRecord.permissionMode !== "acceptEdits" || safetyRecord.tools !== "Read,Write,Edit,Glob,Grep" || safetyRecord.mcp !== "empty-strict" || safetyRecord.settingSources !== "user" || safetyRecord.userSettingsTrust !== "required" || safetyRecord.sessionPersistence !== false) throw new Error(`${label}.safety is invalid.`);
-	} else if (adapterRecord.id === "cursor-agent" || adapterRecord.id === "cursor-agent-writer") {
-		if (!safety || typeof safety !== "object" || Array.isArray(safety)) throw new Error(`${label}.safety is missing.`);
-		const safetyRecord = safety as Record<string, unknown>;
-		const unknownSafety = Object.keys(safetyRecord).filter((field) => !["access", "authentication", "mode", "sandbox", "workspaceTrust", "sessionReuse"].includes(field));
-		if (unknownSafety.length > 0) throw new Error(`${label}.safety has unsupported fields: ${unknownSafety.join(", ")}.`);
-		const writer = adapterRecord.id === "cursor-agent-writer";
-		if (safetyRecord.access !== (writer ? "workspace-write" : "read-only") || safetyRecord.authentication !== "cursor-api-key-or-existing-login" || safetyRecord.mode !== (writer ? "print" : "ask") || safetyRecord.sandbox !== "enabled" || safetyRecord.workspaceTrust !== "existing-required" || safetyRecord.sessionReuse !== false) throw new Error(`${label}.safety is invalid.`);
-	} else if (adapterRecord.id === "grok-build") {
+	if (adapterRecord.id === "grok-build") {
 		if (!safety || typeof safety !== "object" || Array.isArray(safety)) throw new Error(`${label}.safety is missing.`);
 		const safetyRecord = safety as Record<string, unknown>;
 		const unknownSafety = Object.keys(safetyRecord).filter((field) => !["access", "authentication", "permissionMode", "tools", "deniedTools", "sandbox", "webSearch", "subagents", "config", "updates", "sessionPersistence"].includes(field));

package/dist/extensions/pi-subagents/test/unit/agent-management.test.ts

@@ -108,55 +108,6 @@ describe("agent management config parsing", () => {
 		assert.equal(JSON.stringify(capabilities).includes("SYSTEM_PROMPT_SENTINEL"), false);
 	});
 
-	it("rejects management attempts to widen the reserved read-only Claude profile", () => {
-		const ctx = { cwd: tempDir, modelRegistry: { getAvailable: () => [] } };
-		const writerRunner = { type: "external-cli", adapter: "claude-code-writer", command: "claude" };
-		const unsafeCreate = handleCreate({ config: { name: "claude-code", description: "Unsafe shadow", scope: "project", runner: writerRunner } }, ctx);
-		assert.equal(unsafeCreate.isError, true);
-		assert.match(readText(unsafeCreate), /reserved for the read-only 'claude-code' adapter/);
-		const unsafeLocalName = handleCreate({ config: { name: "claude-code", package: "custom", description: "Unsafe local name", scope: "project", runner: writerRunner } }, ctx);
-		assert.equal(unsafeLocalName.isError, true);
-		assert.match(readText(unsafeLocalName), /Selection name 'claude-code' is reserved/);
-		const unsafeAlias = handleCreate({ config: { name: "aliased-writer", aliases: ["claude-code"], description: "Unsafe alias", scope: "project", runner: writerRunner } }, ctx);
-		assert.equal(unsafeAlias.isError, true);
-		assert.match(readText(unsafeAlias), /Selection name 'claude-code' is reserved/);
-
-		const readOnlyCreate = handleCreate({ config: { name: "claude-code", description: "Narrow shadow", scope: "project", runner: { type: "external-cli", adapter: "claude-code", command: "claude" } } }, ctx);
-		assert.equal(readOnlyCreate.isError, false);
-		const unsafeUpdate = handleUpdate({ agent: "claude-code", agentScope: "project", config: { runner: writerRunner } }, ctx);
-		assert.equal(unsafeUpdate.isError, true);
-		assert.match(readText(unsafeUpdate), /reserved for the read-only 'claude-code' adapter/);
-		assert.match(fs.readFileSync(path.join(tempDir, ".selesai", "agents", "claude-code.md"), "utf-8"), /adapter: claude-code\n/);
-
-		const writerCreate = handleCreate({ config: { name: "custom-writer", description: "Writer", scope: "project", runner: writerRunner } }, ctx);
-		assert.equal(writerCreate.isError, false);
-		const unsafeAliasUpdate = handleUpdate({ agent: "custom-writer", agentScope: "project", config: { aliases: ["claude-code"] } }, ctx);
-		assert.equal(unsafeAliasUpdate.isError, true);
-		assert.match(readText(unsafeAliasUpdate), /Selection name 'claude-code' is reserved/);
-		const unsafeRename = handleUpdate({ agent: "custom-writer", agentScope: "project", config: { name: "claude-code" } }, ctx);
-		assert.equal(unsafeRename.isError, true);
-		assert.match(readText(unsafeRename), /reserved for the read-only 'claude-code' adapter/);
-	});
-
-	it("rejects create, update, alias, and rename widening for Codex and Cursor", () => {
-		const ctx = { cwd: tempDir, modelRegistry: { getAvailable: () => [] } };
-		for (const [readOnly, writer, command] of [["codex-exec", "codex-exec-writer", "codex"], ["cursor-agent", "cursor-agent-writer", "cursor-agent"]] as const) {
-			const writerRunner = { type: "external-cli", adapter: writer, command };
-			assert.equal(handleCreate({ config: { name: readOnly, description: "Unsafe shadow", scope: "project", runner: writerRunner } }, ctx).isError, true);
-			assert.equal(handleCreate({ config: { name: readOnly, package: `custom-${readOnly}`, description: "Unsafe local name", scope: "project", runner: writerRunner } }, ctx).isError, true);
-			assert.equal(handleCreate({ config: { name: `${readOnly}-alias`, aliases: [readOnly], description: "Unsafe alias", scope: "project", runner: writerRunner } }, ctx).isError, true);
-
-			const readOnlyCreate = handleCreate({ config: { name: readOnly, description: "Narrow shadow", scope: "project", runner: { type: "external-cli", adapter: readOnly, command } } }, ctx);
-			assert.equal(readOnlyCreate.isError, false);
-			assert.equal(handleUpdate({ agent: readOnly, agentScope: "project", config: { runner: writerRunner } }, ctx).isError, true);
-
-			const customName = `custom-${writer}`;
-			assert.equal(handleCreate({ config: { name: customName, description: "Writer", scope: "project", runner: writerRunner } }, ctx).isError, false);
-			assert.equal(handleUpdate({ agent: customName, agentScope: "project", config: { aliases: [readOnly] } }, ctx).isError, true);
-			assert.equal(handleUpdate({ agent: customName, agentScope: "project", config: { name: readOnly } }, ctx).isError, true);
-		}
-	});
-
 	it("lists valid agents and diagnoses malformed agent definitions", () => {
 		const agentsDir = path.join(tempDir, ".selesai", "agents");
 		fs.mkdirSync(agentsDir, { recursive: true });

package/dist/extensions/pi-subagents/test/unit/runtime-agent-registration.test.ts

@@ -255,24 +255,6 @@ describe("runtime agent registration", () => {
 	});
 
 	it("fails closed for builtin and duplicate runtime identities", () => {
-		assert.throws(
-			() => registerAgent({ pi, name: "claude-code", definition: { description: "Unsafe", systemPrompt: "Write.", runner: { type: "external-cli", adapter: "claude-code-writer", command: "claude" } } }),
-			/reserved for the read-only 'claude-code' adapter/,
-		);
-		assert.throws(
-			() => registerAgent({ pi, name: "runtime-writer", definition: { description: "Unsafe alias", systemPrompt: "Write.", aliases: ["claude-code"], runner: { type: "external-cli", adapter: "claude-code-writer", command: "claude" } } }),
-			/Selection name 'claude-code' is reserved/,
-		);
-		for (const [readOnly, writer, command] of [["codex-exec", "codex-exec-writer", "codex"], ["cursor-agent", "cursor-agent-writer", "cursor-agent"]] as const) {
-			assert.throws(
-				() => registerAgent({ pi, name: readOnly, definition: { description: "Unsafe", systemPrompt: "Write.", runner: { type: "external-cli", adapter: writer, command } } }),
-				/reserved for the read-only/,
-			);
-			assert.throws(
-				() => registerAgent({ pi, name: `runtime-${writer}`, definition: { description: "Unsafe alias", systemPrompt: "Write.", aliases: [readOnly], runner: { type: "external-cli", adapter: writer, command } } }),
-				/Selection name .* is reserved/,
-			);
-		}
 		assert.throws(
 			() => registerAgent({ pi, name: "worker", definition: { description: "Bad", systemPrompt: "Bad." } }),
 			/Worker|builtin agent 'worker'|collides with builtin agent 'worker'/i,

package/dist/modes/rpc/rpc-client.d.ts

@@ -12,7 +12,7 @@ import type { BashResult } from "../../core/bash-executor.ts";
 import type { CompactionResult } from "../../core/compaction/index.ts";
 import type { SessionEntry, SessionTreeNode } from "../../core/session-manager.ts";
 import type { ChangelogEntry } from "../../utils/changelog.ts";
-import type { RpcSessionState, RpcSlashCommand } from "./rpc-types.ts";
+import type { RpcSessionInfo, RpcSessionState, RpcSkillInfo, RpcSlashCommand } from "./rpc-types.ts";
 export interface RpcClientOptions {
     /** Path to the CLI entry point (default: searches for dist/cli.js) */
     cliPath?: string;
@@ -64,8 +64,9 @@ export declare class RpcClient {
      * Send a prompt to the agent.
      * Returns immediately after sending; use onEvent() to receive streaming events.
      * Use waitForIdle() to wait for completion.
+     * @param queueWhileCompacting - Buffer the prompt during compaction and send after compaction_end.
      */
-    prompt(message: string, images?: ImageContent[]): Promise<void>;
+    prompt(message: string, images?: ImageContent[], queueWhileCompacting?: boolean): Promise<void>;
     /**
      * Queue a steering message to interrupt the agent mid-run.
      */
@@ -105,9 +106,9 @@ export declare class RpcClient {
         id: string;
     }>;
     /**
-     * Cycle to next model.
+     * Cycle to next (or previous) model.
      */
-    cycleModel(): Promise<{
+    cycleModel(direction?: "forward" | "backward"): Promise<{
         model: {
             provider: string;
             id: string;
@@ -117,8 +118,9 @@ export declare class RpcClient {
     } | null>;
     /**
      * Get list of available models.
+     * @param refresh - When true, refresh model catalogs before listing (TUI parity).
      */
-    getAvailableModels(): Promise<ModelInfo[]>;
+    getAvailableModels(refresh?: boolean): Promise<ModelInfo[]>;
     /**
      * Set thinking level.
      */
@@ -180,7 +182,7 @@ export declare class RpcClient {
     /**
      * Export session to HTML.
      */
-    exportHtml(outputPath?: string): Promise<{
+    exportHtml(outputPath?: string, themeName?: string): Promise<{
         path: string;
     }>;
     /**
@@ -234,6 +236,48 @@ export declare class RpcClient {
      * Set the session display name.
      */
     setSessionName(name: string): Promise<void>;
+    /**
+     * Navigate the session tree to a target entry, optionally summarizing the
+     * branch being left. Mirrors the TUI tree-selector flow.
+     */
+    navigateTree(options: {
+        targetId: string;
+        summarize?: boolean;
+        customInstructions?: string;
+        replaceInstructions?: boolean;
+        label?: string;
+    }): Promise<{
+        editorText?: string;
+        cancelled: boolean;
+        aborted?: boolean;
+        summaryEntry?: unknown | null;
+    }>;
+    /**
+     * List sessions. scope "current" = sessions in the active cwd; "all" = across all projects.
+     */
+    listSessions(scope?: "current" | "all"): Promise<RpcSessionInfo[]>;
+    /**
+     * Rename a session (by path). Does not switch the active runtime.
+     */
+    renameSession(path: string, name: string): Promise<void>;
+    /**
+     * Delete a session file (trash first, unlink fallback). Active session is rejected.
+     * @returns The method used: "trash" or "unlink".
+     */
+    deleteSession(path: string): Promise<{
+        method: "trash" | "unlink";
+    }>;
+    /**
+     * Set session-only (ephemeral) scoped models — resolved to concrete model ids,
+     * not persisted to settings. Clears scope with an empty array.
+     */
+    setSessionModels(options: {
+        enabled?: string[];
+        reorder?: string[];
+    }): Promise<{
+        enabled: string[];
+        models: ModelInfo[];
+    }>;
     /**
      * Get all messages in the session.
      */
@@ -242,6 +286,14 @@ export declare class RpcClient {
      * Get available commands (extension commands, prompt templates, builtins).
      */
     getCommands(): Promise<RpcSlashCommand[]>;
+    /**
+     * Get the resolved skill catalog (per-skill enabled state) plus the raw
+     * global+project merged settings.skills patterns for round-trip toggling.
+     */
+    getSkills(): Promise<{
+        skills: RpcSkillInfo[];
+        patterns: string[];
+    }>;
     /**
      * Get settings for a scope ("global" | "project" | "effective", default "effective").
      */
@@ -361,7 +413,7 @@ export declare class RpcClient {
     /**
      * Share the current session as a secret GitHub gist (requires `gh` CLI).
      */
-    shareGist(): Promise<{
+    shareGist(themeName?: string): Promise<{
         url: string;
         gistUrl: string;
     }>;

package/dist/modes/rpc/rpc-client.js

@@ -131,9 +131,10 @@ export class RpcClient {
      * Send a prompt to the agent.
      * Returns immediately after sending; use onEvent() to receive streaming events.
      * Use waitForIdle() to wait for completion.
+     * @param queueWhileCompacting - Buffer the prompt during compaction and send after compaction_end.
      */
-    async prompt(message, images) {
-        await this.send({ type: "prompt", message, images });
+    async prompt(message, images, queueWhileCompacting) {
+        await this.send({ type: "prompt", message, images, queueWhileCompacting });
     }
     /**
      * Queue a steering message to interrupt the agent mid-run.
@@ -184,17 +185,18 @@ export class RpcClient {
         return this.getData(response);
     }
     /**
-     * Cycle to next model.
+     * Cycle to next (or previous) model.
      */
-    async cycleModel() {
-        const response = await this.send({ type: "cycle_model" });
+    async cycleModel(direction) {
+        const response = await this.send({ type: "cycle_model", direction });
         return this.getData(response);
     }
     /**
      * Get list of available models.
+     * @param refresh - When true, refresh model catalogs before listing (TUI parity).
      */
-    async getAvailableModels() {
-        const response = await this.send({ type: "get_available_models" });
+    async getAvailableModels(refresh) {
+        const response = await this.send({ type: "get_available_models", refresh });
         return this.getData(response).models;
     }
     /**
@@ -289,8 +291,8 @@ export class RpcClient {
     /**
      * Export session to HTML.
      */
-    async exportHtml(outputPath) {
-        const response = await this.send({ type: "export_html", outputPath });
+    async exportHtml(outputPath, themeName) {
+        const response = await this.send({ type: "export_html", outputPath, themeName });
         return this.getData(response);
     }
     /**
@@ -351,6 +353,50 @@ export class RpcClient {
     async setSessionName(name) {
         await this.send({ type: "set_session_name", name });
     }
+    // =========================================================================
+    // Tree navigation (rev 3)
+    // =========================================================================
+    /**
+     * Navigate the session tree to a target entry, optionally summarizing the
+     * branch being left. Mirrors the TUI tree-selector flow.
+     */
+    async navigateTree(options) {
+        const response = await this.send({ type: "navigate_tree", ...options });
+        return this.getData(response);
+    }
+    // =========================================================================
+    // Session discovery / management (rev 3)
+    // =========================================================================
+    /**
+     * List sessions. scope "current" = sessions in the active cwd; "all" = across all projects.
+     */
+    async listSessions(scope) {
+        const response = await this.send({ type: "list_sessions", scope });
+        return this.getData(response).sessions;
+    }
+    /**
+     * Rename a session (by path). Does not switch the active runtime.
+     */
+    async renameSession(path, name) {
+        const response = await this.send({ type: "rename_session", path, name });
+        this.getData(response);
+    }
+    /**
+     * Delete a session file (trash first, unlink fallback). Active session is rejected.
+     * @returns The method used: "trash" or "unlink".
+     */
+    async deleteSession(path) {
+        const response = await this.send({ type: "delete_session", path });
+        return this.getData(response);
+    }
+    /**
+     * Set session-only (ephemeral) scoped models — resolved to concrete model ids,
+     * not persisted to settings. Clears scope with an empty array.
+     */
+    async setSessionModels(options) {
+        const response = await this.send({ type: "set_session_models", ...options });
+        return this.getData(response);
+    }
     /**
      * Get all messages in the session.
      */
@@ -365,6 +411,14 @@ export class RpcClient {
         const response = await this.send({ type: "get_commands" });
         return this.getData(response).commands;
     }
+    /**
+     * Get the resolved skill catalog (per-skill enabled state) plus the raw
+     * global+project merged settings.skills patterns for round-trip toggling.
+     */
+    async getSkills() {
+        const response = await this.send({ type: "get_skills" });
+        return this.getData(response);
+    }
     // =========================================================================
     // Settings
     // =========================================================================
@@ -513,8 +567,8 @@ export class RpcClient {
     /**
      * Share the current session as a secret GitHub gist (requires `gh` CLI).
      */
-    async shareGist() {
-        const response = await this.send({ type: "share_gist", public: false });
+    async shareGist(themeName) {
+        const response = await this.send({ type: "share_gist", public: false, themeName });
         return this.getData(response);
     }
     // =========================================================================

package/dist/modes/rpc/rpc-mode.d.ts

@@ -11,7 +11,7 @@
  * - Extension UI: Extension UI requests are emitted, client responds with extension_ui_response
  */
 import type { AgentSessionRuntime } from "../../core/agent-session-runtime.ts";
-export type { RpcCommand, RpcExtensionUIRequest, RpcExtensionUIResponse, RpcResponse, RpcSessionState, RpcSlashCommand, PrototypePhase, QuicktypePhase, WorkflowState, } from "./rpc-types.ts";
+export type { RpcCommand, RpcExtensionUIRequest, RpcExtensionUIResponse, RpcResponse, RpcSessionInfo, RpcSessionState, RpcSlashCommand, PrototypePhase, QuicktypePhase, WorkflowState, } from "./rpc-types.ts";
 /**
  * Run in RPC mode.
  * Listens for JSON commands on stdin, outputs events and responses on stdout.