@vanillagreen/pi-qol 2.0.0 → 2.1.0

package/README.md

@@ -1,120 +1,49 @@
-# pi-qol
+# @vanillagreen/pi-qol
 
-![QOL extension settings panel](https://raw.githubusercontent.com/vanillagreencom/kendex/main/pi-extensions/pi-qol/assets/settings-panel.png)
-![Session search popup](https://raw.githubusercontent.com/vanillagreencom/kendex/main/pi-extensions/pi-qol/assets/session-search.gif)
-![/context usage breakdown](https://raw.githubusercontent.com/vanillagreencom/kendex/main/pi-extensions/pi-qol/assets/context-usage.png)
+A Pi extension for session controls, prompt editing and notifications. Users can configure each feature separately.
 
-Quality-of-life extension for Pi: compact statusline, multiline input, session naming and search, scheduled prompts, notifications, and a permission gate.
-
-## Highlights
-
-- Compact statusline with repo, branch, model, thinking level, and context percent; can be disabled.
-- Newline-insert in the editor (multi-line drafts without auto-submit), with a fallback binding for terminals that can't distinguish the primary key.
-- Sessions auto-name from your first prompt. `/rename` overrides anytime.
-- Session search reads prompt snippets line-by-line, so very large session JSONL files do not have to be materialized just to browse, search, or import context.
-- Optional rate-limit auto-resume sends a configurable continuation after reset.
-- Permission gate prompts before risky `bash` commands. Default match: `rm -Rf`.
-- Notifications for ready, questions, blocked states, and task completion.
-- Thinking timer next to collapsed `Thinking...` labels.
-- Caveman badge and a mode-cycling shortcut when `pi-caveman` is loaded.
-- Subagent-name badge in `pi-agents-tmux` child panes.
+![QOL extension settings panel](https://raw.githubusercontent.com/vanillagreencom/kendex/main/pi-extensions/pi-qol/assets/settings-panel.png) ![Session search popup](https://raw.githubusercontent.com/vanillagreencom/kendex/main/pi-extensions/pi-qol/assets/session-search.gif) ![/context usage breakdown](https://raw.githubusercontent.com/vanillagreencom/kendex/main/pi-extensions/pi-qol/assets/context-usage.png)
 
 ## Install
 
-Requires Pi 0.80.4 or newer. Restart Pi after installation.
-
-Via [npm](https://www.npmjs.com/package/@vanillagreen/pi-qol):
+- npm: `pi install npm:@vanillagreen/pi-qol`.
+- kendex: add the declaration below to the project's `kendex.toml`, or to `~/.config/kendex/kendex.toml` for user scope. Run `kendex update-pi`.
 
-```bash
-pi install npm:@vanillagreen/pi-qol
+```toml
+[pi-extensions."@vanillagreen/pi-qol"]
+source = "kendex"
 ```
 
-Via [kendex](https://github.com/vanillagreencom/kendex):
+Restart Pi after installation. Use `kendex update-pi --check` to preview the installation.
 
-```bash
-cargo install --git https://github.com/vanillagreencom/kendex.git kendex
-kendex add vanillagreencom/kendex --pi-extension pi-qol --harness pi -y
-```
+## Features
 
-## Commands
+- Show repository, model and context information beside the editor.
+- Name and search sessions.
+- Schedule prompts and prepare handoff drafts.
+- Ask before configured shell commands run.
+- Send terminal and desktop notifications.
+- Configure summaries and compaction for long sessions.
 
-| Command | Action |
-| --- | --- |
-| `/qol` | Open settings (or print status if extension-manager isn't installed). |
-| `/qol notify-test` | Send a test notification. |
-| `/rename [name]` | Set or show the current session's name. |
-| `/qol:rename` / `/qol:rename:full` | Regenerate the session name from the first prompt, or from the full conversation. |
-| `/context` | Show a Claude-style context-window usage breakdown by category. |
-| `/search [query]` | Open previous-session search with snippet previews; the configured shortcut opens it instantly. |
-| `/search:refresh` | Refresh the session cache. |
-| `/handoff <goal>` | Draft a focused handoff prompt for a new session. |
-| `/schedule <delay> <message>` | Send a user message after a timer without invoking the model now. Example: `/schedule 1h45m retry the previous request`. |
+## How it works
 
-Arguments support autocomplete. `/schedule` accepts `ms`, `s`, `m`, `h`, and `d` units; bare numbers mean minutes. Compact composite durations are accepted in largest-to-smallest order, like `1h45m`, `45m10s`, or `1h45m30s`. Pending prompts render above the statusline like steering/follow-up previews until they are sent or cancelled. Manage pending prompts with `/schedule list` and `/schedule cancel <id|all>`. Schedules are stored in the Pi session and re-armed on reload/resume; if Pi is not running at the due time, an overdue prompt sends when that session is next loaded.
+The extension reads your enabled features when Pi starts. It adds their editor controls, commands and event handlers. Session actions update the session or queue messages for the agent. Notifications report events through your selected channels. Compaction settings control when long conversations are summarized.
 
 ## Settings
 
-Open `/extensions:settings`; settings appear under the **QOL** tab. Names below match the labels shown there, grouped as the editor groups them. Project settings in `.pi/settings.json` apply only after Pi marks the workspace trusted; before trust, kendex Pi extensions read user/global settings only. Glyph style: each package exposes `glyphStyle` (`unicode` default, `ascii` for terminal-safe chrome). `@vanillagreen/pi-tool-renderer.globalGlyphStyleOverride=ascii` forces ASCII chrome across kendex Pi extensions while leaving tool/model/user content unchanged.
-
-| Group | Setting | What it does |
-| --- | --- | --- |
-| Statusline | Enable QOL editor helpers | Master toggle for QOL statusline, commands, notifications, search, compaction, and editor helpers. |
-| Statusline | Show compact statusline | Render or disable the QOL statusline row. |
-| Statusline | Replace built-in footer | Hide Pi's default footer while the QOL statusline is enabled. |
-| Statusline | Use π prompt editor | Use the compact prompt editor. |
-| Statusline | Show session name title | Show the session name above the prompt and in the tmux pane title; refreshes as soon as Pi reports a session metadata change. |
-| Statusline | Sync session name to tmux window name | Rename the tmux window to `π <session>`. |
-| Statusline | Input bottom padding | Blank lines below the prompt. |
-| Statusline | Show dirty marker | Append `*` to the branch when the worktree is dirty. |
-| Input | shift+enter inserts newline | Insert a newline instead of submitting. |
-| Input | Fallback newline key | Alternate binding for terminals that can't send the primary one. |
-| Input | Style pending queue preview | Highlight Pi's pending-queue preview with a green left bar. |
-| Input | Style image chips | Render `[Image #N]` placeholders as distinct chips. |
-| Input | Show attachment count | Show a status badge when the draft has image placeholders. |
-| Session, Handoff, Context window, Session search | Enable /rename, /schedule, /handoff, /context, session search | One toggle each: register that command. Session search also registers its overlay; `/schedule` is useful for retrying after rate limits reset. |
-| Session | Auto-resume after rate limits | Send the configured continuation after a detected reset; cancels on newer turn. |
-| Session | Auto-name new sessions | Generate a friendly session name from the first prompt. |
-| Session | Auto-rename model / fallback model | Model used for title generation, and the model tried when the primary fails. |
-| Session | Deterministic fallback | Title-case words, truncated prompt, or none if all model calls fail. |
-| Session | Auto-rename prefix | Optional static prefix on every generated name. |
-| Session | Notify on auto-rename | Show a notification when auto-renaming. |
-| Handoff | Review handoff prompt | Open an editor to edit the generated prompt before creating the session. |
-| Session search | Session search shortcut | Configurable; set to `none` to disable. |
-| Session search | Result limit | Max matching prompts returned. |
-| Session search | Visible session rows | Rows shown before scrolling; defaults to `8`. |
-| Session search | Preview snippets | Matching snippets shown on the preview screen. |
-| Session search | Session cache TTL | Seconds before the session list refreshes; `0` keeps it until you run `/search:refresh`. |
-| Permission gate | Prompt before risky bash commands | Ask before bash commands matching the command list. Off by default; when enabled, non-interactive matches are blocked. |
-| Permission gate | Commands to prompt for | Comma-separated literal fragments or `/regex/flags`. |
-| Permission gate | Approval preview lines / characters | Cap the approval-prompt preview height and width. |
-| Compaction | Custom compaction summaries | Use QOL summaries instead of Pi's default, with Pi-standard transient provider retries when available. |
-| Compaction | Compaction model | Summarizer model. Defaults to `current`, meaning Pi's active model; set a provider/model when you want a dedicated larger-context summarizer. Thinking suffixes through `:max` are accepted, and Pi-resolved header/environment authentication is forwarded. |
-| Compaction | Compaction detail profile | `concise`, `balanced`, or `exhaustive`. |
-| Compaction | Include previous summary | Pass the previous summary for iterative continuity. |
-| Compaction | Fallback to Pi default compaction | Run Pi's default compaction if QOL's fails. |
-| Compaction | Show compaction notifications | Notify on compaction start/fail/complete. |
-| Compaction | Custom branch summaries | Use QOL's chunked summarizer for `/tree` branch summaries; branch summaries do not write handoff artifacts. |
-| Compaction | Remote compaction endpoint | Call a remote HTTP summarizer instead of a model. |
-| Compaction | Idle compaction trigger | Auto-compact after the session sits idle above a token threshold. Idle thresholds (token threshold, idle delay, fixed token limit, percent limit) tune when it fires. |
-| Long-session budget guard | Long-session budget guard | Master toggle for threshold-triggered bounded compaction. Default on. |
-| Long-session budget guard | Budget guard percent / token limit | Context-window percentage that fires the guard (default `85`; `-1` disables percent-based firing), and the absolute token count that fires it (default `-1`, meaning percent only). |
-| Long-session budget guard | Chunked compaction input cap | Max serialized characters per summarization request; long transcripts are chunked and summarized in bounded pieces so the compaction call itself cannot exceed provider buffer limits. `0` disables chunking. Default `240000`. |
-| Long-session budget guard | Write pre-compaction handoff artifact | Write a pre-compaction handoff artifact (previous summary, last task state, referenced files and artifacts) for budget-guard and enabled custom session compactions; branch summaries never write one. Write failures surface as a QOL warning notification. Default on. |
-| Long-session budget guard | Transcript-risk warn budget (chars) | `/context` warns when the serialized payload of messages-to-send exceeds this many characters, even if tokens are still below the context window. `0` disables. Default `600000`. |
-| Thinking | Hidden thinking label | Label shown when thinking blocks are hidden. |
-| Thinking | Show thinking timer | Show elapsed time next to collapsed `Thinking...` labels. |
-| Thinking | Working indicator mode | `animated` ticks every 80ms; switch to `static` if you see flashes when the chat overflows. |
-
-Advanced auto-rename settings (input cap, title length, output tokens, timeout, custom prompt template, debug logging) and session-search summary settings (model, max tokens, input cap — they tune the summarizer when you import context from a previous session) sit alongside the rows above.
-
-`/context` also estimates the serialized payload size of the messages that would be sent on the next request. When that payload crosses **Transcript-risk warn budget (chars)** a `Transcript risk` block appears below the compact buffer section even if token count is still under the context window — useful for catching large blob-shaped tool outputs that inflate the request long before token count alone would page anyone.
-
-### Notifications
-
-Master toggle: **Enable notifications**. Triggers (notify when): ready, direction needed, question popups, all tasks complete, critical/blocked. Channels: terminal bell, **Mute bell sound**, native terminal notifications (OSC 777/99 or Windows toast), tmux `display-message`, tmux window marking, OSC passthrough, and an optional in-Pi UI notice. Tuning: cooldown seconds, title, ready message, body length, tmux durations. **Terminal notification protocol** picks between OSC 99 (Kitty) and OSC 777 automatically. **Bell when tmux window active** is off so you don't get bells while looking at Pi. **Mute bell sound** keeps notification routing enabled but suppresses QOL-emitted BEL bytes and uses ST terminators for OSC 777/99 where supported; terminals or operating systems may still play their own sound for native notifications outside QOL control. **tmux native via client TTY** sends OSC notifications to attached tmux clients so notifications still appear when the Pi window is inactive. Use `/qol notify-test` to verify your terminal/tmux setup, including silent behavior with **Mute bell sound** enabled.
+The settings editor writes project values to `.pi/settings.json`. The default user file is `~/.pi/agent/settings.json`. `PI_CODING_AGENT_DIR` changes the user directory. Package values are stored under `kendex.extensionManager.config["@vanillagreen/pi-qol"]`.
 
-### Long-session budget guard
+Open `/extensions:settings`; settings appear under the **QOL** tab. Project settings in `.pi/settings.json` apply only after Pi marks the workspace trusted. `glyphStyle` picks `unicode` or `ascii` symbols, and `@vanillagreen/pi-tool-renderer`'s `globalGlyphStyleOverride` wins when set.
 
-For long autonomous runs the agent may not go idle, so the transcript can grow until provider or buffer limits hit. The budget guard starts bounded compaction when context usage crosses a configured threshold, while giving Pi's built-in compaction priority and avoiding duplicate attempts. While it runs, QOL keeps a persistent status line above the prompt (and in the normal status footer when the compact statusline is disabled); after Pi prints the compacted-summary block the line changes to `QOL budget guard finalizing compaction…` until finalization completes, so long reload gaps do not look frozen.
+- `enabled`: package toggle for everything below.
+- Statusline and editor: `statusline.enabled`, `statusline.showAccount`, `replaceFooter`, `compactPrompt`, `showSessionNameTitle`, `showSessionNameWindow`, `inputBottomPaddingLines`, `gitRefreshTimeoutMs`, `showDirtyMarker`, `newlineOnShiftEnter`, `newlineFallbackKey`, `pendingQueue.asciiGreen`, `showImageChips`, `showAttachmentCountInStatus`.
+- Commands: `enableSessionNameCommand`, `enableHandoffCommand`, `enableScheduleCommand`, `enableContextCommand`, `handoffReviewPrompt`.
+- Session naming: `sessionAutoRename.*` (model, fallback model, deterministic fallback, prefix, prompt, limits, notify, debug).
+- Session search: `sessionSearch.*` (shortcut, result and row limits, snippets, overlay width, cache TTL, summary model and limits).
+- Rate limits: `rateLimitAutoResume.*`.
+- Permission gate: `permissionGate.enabled`, `permissionGate.commands` (comma-separated literal fragments or `/regex/flags`), `permissionGate.previewLines`, `permissionGate.previewChars`.
+- Notifications: `notification.*` (triggers, channels, tmux options, protocol, cooldown, title and body).
+- Compaction and budget guard: `compaction.*` (custom summaries, model, profile, remote endpoint, branch summaries, idle trigger, budget guard thresholds, chunk input cap, handoff artifact, transcript-risk budget).
+- Thinking: `thinkingLabel.text`, `thinkingTimer.enabled`, `workingIndicator.mode` (`static` if the animated indicator flashes).
 
-Budget-guard compaction always uses QOL's chunked summarizer, even if **Custom compaction summaries** is off, and writes a pre-compaction handoff artifact only when **Write pre-compaction handoff artifact** is enabled. Manual/user-triggered and idle compactions use the QOL chunked path only when **Custom compaction summaries** is on, and follow the same handoff-artifact toggle. `/tree` branch summaries separately use QOL's chunked summarizer when **Custom branch summaries** is on, but do not write handoff artifacts. When the relevant summarization setting is off, Pi uses its default behavior for that compaction type. Recommended for long autonomous runs: keep **Long-session budget guard** on, and lower **Budget guard percent** to `75` if your provider buffers are tight. Optionally turn **Custom compaction summaries** on so user-initiated and idle compactions also use the QOL chunked summarizer — with **Write pre-compaction handoff artifact** enabled, those compactions also write handoff artifacts. Lower **Chunked compaction input cap** to ~`120000` when the summarizer model has a small context window.
+Maintainer notes are in [DEVELOPMENT.md](DEVELOPMENT.md).

package/extensions/qol/bridges.ts

@@ -1,5 +1,6 @@
 import {
 	CAVEMAN_BRIDGE_SYMBOL,
+	CLAUDE_BILLING_IDENTITY_SYMBOL,
 	PI_AGENTS_STATUSLINE_SYMBOL,
 	QUESTION_SERVICE_SYMBOL,
 	KENDEX_MODAL_LOCK_SYMBOL,
@@ -21,6 +22,18 @@ export interface PiAgentsStatuslineBridge {
 	getCurrentSubagent(cwd?: string): { name: string; color?: string } | undefined;
 }
 
+/** The Claude bridge's published account surface. It answers with a login
+ *  email only when the SDK confirmed one for the child that ran the request:
+ *  an API key or a Bedrock, Vertex, Foundry, Anthropic-AWS or Mantle backend
+ *  authenticates as something no config directory names, and a companion
+ *  account router can rotate the profile per request without the environment
+ *  changing. Reading a config directory here instead would name the wrong
+ *  account in every one of those cases. */
+export interface ClaudeBillingIdentityBridge {
+	version: 1;
+	currentLoginEmail(sessionId: string | undefined): string | undefined;
+}
+
 export interface QuestionRequestLike {
 	header?: string;
 	question?: string;
@@ -47,6 +60,12 @@ export function readCavemanBridge(): CavemanBridge | undefined {
 	return value && typeof value === "object" ? (value as CavemanBridge) : undefined;
 }
 
+export function readClaudeBillingIdentityBridge(): ClaudeBillingIdentityBridge | undefined {
+	const host = globalThis as unknown as Record<PropertyKey, unknown>;
+	const value = host[CLAUDE_BILLING_IDENTITY_SYMBOL] as ClaudeBillingIdentityBridge | undefined;
+	return value?.version === 1 && typeof value.currentLoginEmail === "function" ? value : undefined;
+}
+
 export function readPiAgentsStatuslineBridge(): PiAgentsStatuslineBridge | undefined {
 	const host = globalThis as unknown as Record<PropertyKey, unknown>;
 	const value = host[PI_AGENTS_STATUSLINE_SYMBOL];

package/extensions/qol/budget-guard-runtime.ts

@@ -116,7 +116,7 @@ export class BudgetGuardDriver {
 		return true;
 	}
 
-	/** Dispatch a trigger previously staged by agent_end. */
+	/** Dispatch a trigger staged by agent_end. */
 	dispatchPending(input: GuardPendingDispatchInput): GuardDispatchResult {
 		const completed = (outcome: DispatchOutcome): GuardDispatchResult => ({ completion: Promise.resolve(), outcome });
 		const generation = input.generation ?? this.generation;

package/extensions/qol/compaction-handoff.ts

@@ -5,10 +5,10 @@
 // so it can be unit-tested without the pi-coding-agent / pi-ai peer deps.
 
 import { mkdirSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
 import { basename, dirname, join, resolve } from "node:path";
 
 import { QOL_BUDGET_HANDOFF_FOLDER, QOL_BUDGET_HANDOFF_LATEST } from "./constants.js";
+import { expandHome } from "./settings.js";
 
 export interface QolBudgetHandoff {
 	reason: string;
@@ -22,14 +22,15 @@ export interface QolBudgetHandoff {
 	model?: string;
 }
 
-function expandHome(input: string): string {
-	if (input === "~") return homedir();
-	if (input.startsWith("~/")) return join(homedir(), input.slice(2));
-	return input;
-}
+/** Root-anchored as `crates/core/src/harness/pi.rs::pi_root_is_absolute_for`
+ * means it, which `isAbsolute` is not: it calls a driveless `\root` absolute
+ * where the renderer does not, putting the two on different roots. Hoisted, so
+ * a circular import cannot reach it inside a temporal dead zone. */
+function rootAnchored(path: string, windows: boolean): boolean { return windows ? /^(?:[A-Za-z]:[\\/]|[\\/]{2}[^\\/]+[\\/][^\\/]+)/.test(path) : path.startsWith("/"); }
 
 export function piUserDir(): string {
-	return resolve(expandHome(process.env.PI_CODING_AGENT_DIR?.trim() || "~/.pi/agent"));
+	const override = expandHome(process.env.PI_CODING_AGENT_DIR?.trim() || "");
+	return resolve(rootAnchored(override, process.platform === "win32") ? override : expandHome("~/.pi/agent"));
 }
 
 export function safeFileName(value: string): string {
@@ -83,7 +84,7 @@ const ARTIFACT_REF_PATTERN = /(?:^|\s|["'`(\[<])((?:\.{1,2}\/|\/|~\/)?[\w.\-+@/]
 
 /**
  * Collects up to `maxRefs` file path-shaped strings from message contents,
- * walking newest-first. Used to give the handoff artifact a quick "if you
+ * walking newest-first. Gives the handoff artifact a quick "if you
  * are recovering, here are recent files" pointer list.
  */
 export function collectArtifactRefs(branch: unknown[], maxRefs = 20): string[] {

package/extensions/qol/compaction.ts

@@ -186,6 +186,11 @@ async function singleShotSummary(ctx: ExtensionContext, request: SummarizeReques
 	if (response.stopReason === "error" || response.stopReason === "aborted") {
 		throw new Error(response.errorMessage || `Summary request stopped: ${response.stopReason}`);
 	}
+	// A length stop carries text, but the text ends wherever the cap fell; as a
+	// continuation checkpoint it would silently drop the rest of the context.
+	if (response.stopReason === "length") {
+		throw new Error("Summary generation hit the token cap and the summary is incomplete");
+	}
 	const summary = response.content
 		.filter((content): content is { type: "text"; text: string } => content.type === "text")
 		.map((content) => content.text)

package/extensions/qol/constants.ts

@@ -15,6 +15,7 @@ export const QOL_NOTIFICATION_SERVICE_SYMBOL = Symbol.for("kendex.pi-qol.notific
 export const KENDEX_MODAL_LOCK_SYMBOL = Symbol.for("kendex.pi.modal-lock");
 export const CAVEMAN_BRIDGE_SYMBOL = Symbol.for("kendex.pi.caveman");
 export const PI_AGENTS_STATUSLINE_SYMBOL = Symbol.for("kendex.pi-agents-tmux.statusline");
+export const CLAUDE_BILLING_IDENTITY_SYMBOL = Symbol.for("kendex.pi.claude-bridge.billing-identity.v1");
 
 export const CAVEMAN_ICON_ACTIVE = "\uee9a";
 export const CAVEMAN_ICON_INACTIVE = "\u{f19e0}";

package/extensions/qol/editor.ts

@@ -85,7 +85,7 @@ function handleQolEditorInput(editor: CustomEditor, ctx: ExtensionContext, data:
 /// Push the latest attachment-count status only when it actually changes.
 /// Called from render() so we follow the rainbow-editor pattern (pull from
 /// render, don't push from every keystroke) and avoid the per-keystroke
-/// setStatus side effect that previously contributed to resize/input races.
+/// setStatus side effect that can cause resize and input races.
 function syncQolEditorStatus(
 	ctx: ExtensionContext,
 	text: string,

package/extensions/qol/glyphs.ts

@@ -1,6 +1,4 @@
-import { existsSync, readFileSync } from "node:fs";
-import { homedir } from "node:os";
-import { dirname, join, resolve } from "node:path";
+import { readPackageConfig } from "./settings.js";
 
 export type GlyphStyle = "unicode" | "ascii";
 export type GlobalGlyphStyleOverride = "inherit" | GlyphStyle;
@@ -8,79 +6,6 @@ export type GlobalGlyphStyleOverride = "inherit" | GlyphStyle;
 const LOCAL_CONFIG_ID = "@vanillagreen/pi-qol";
 const GLOBAL_CONFIG_ID = "@vanillagreen/pi-tool-renderer";
 
-function expandHome(input: string): string {
-	if (input === "~") return homedir();
-	if (input.startsWith("~/")) return join(homedir(), input.slice(2));
-	return input;
-}
-
-function projectSettingsPath(cwd: string): string {
-	let current = resolve(cwd);
-	while (true) {
-		const candidate = join(current, ".pi", "settings.json");
-		if (existsSync(candidate)) return candidate;
-		if (existsSync(join(current, ".pi")) || existsSync(join(current, ".git")) || existsSync(join(current, ".kendex-lock.json"))) return candidate;
-		const parent = dirname(current);
-		if (parent === current) return join(resolve(cwd), ".pi", "settings.json");
-		current = parent;
-	}
-}
-
-const PROJECT_TRUST_SYMBOL = Symbol.for("kendex.pi.project-trust");
-
-interface ProjectTrustRegistry {
-	projectSettings?: Map<string, boolean>;
-}
-
-function projectTrustRegistry(): ProjectTrustRegistry {
-	const host = globalThis as unknown as Record<PropertyKey, ProjectTrustRegistry | undefined>;
-	const existing = host[PROJECT_TRUST_SYMBOL];
-	if (existing) return existing;
-	const created: ProjectTrustRegistry = {};
-	host[PROJECT_TRUST_SYMBOL] = created;
-	return created;
-}
-
-export function recordProjectTrust(ctx: { cwd?: string; isProjectTrusted?: () => boolean }): void {
-	if (!ctx.cwd) return;
-	let trusted = true;
-	try {
-		trusted = ctx.isProjectTrusted?.() === true;
-	} catch {
-		trusted = false;
-	}
-	const registry = projectTrustRegistry();
-	if (!registry.projectSettings) registry.projectSettings = new Map();
-	registry.projectSettings.set(projectSettingsPath(ctx.cwd), trusted);
-}
-
-function projectSettingsTrusted(settingsPath: string): boolean {
-	return projectTrustRegistry().projectSettings?.get(settingsPath) === true;
-}
-
-
-function piSettingsPaths(cwd = process.cwd()): string[] {
-	const userDir = resolve(expandHome(process.env.PI_CODING_AGENT_DIR?.trim() || "~/.pi/agent"));
-	const user = join(userDir, "settings.json");
-	const project = projectSettingsPath(cwd);
-	return projectSettingsTrusted(project) ? [user, project] : [user];
-}
-
-function readPackageConfig(packageId: string, cwd?: string): Record<string, unknown> {
-	const merged: Record<string, unknown> = {};
-	for (const settingsPath of piSettingsPaths(cwd)) {
-		if (!existsSync(settingsPath)) continue;
-		try {
-			const parsed = JSON.parse(readFileSync(settingsPath, "utf8"));
-			const config = parsed?.kendex?.extensionManager?.config?.[packageId];
-			if (config && typeof config === "object" && !Array.isArray(config)) Object.assign(merged, config);
-		} catch {
-			// Ignore malformed optional manager config.
-		}
-	}
-	return merged;
-}
-
 function asGlyphStyle(value: unknown): GlyphStyle | undefined {
 	return value === "unicode" || value === "ascii" ? value : undefined;
 }

package/extensions/qol/settings.ts

@@ -55,21 +55,27 @@ function projectSettingsTrusted(settingsPath: string): boolean {
 	return projectTrustRegistry().projectSettings?.get(settingsPath) === true;
 }
 
+/** Root-anchored as `crates/core/src/harness/pi.rs::pi_root_is_absolute_for`
+ * means it, which `isAbsolute` is not: it calls a driveless `\root` absolute
+ * where the renderer does not, putting the two on different roots. Hoisted, so
+ * a circular import cannot reach it inside a temporal dead zone. */
+function rootAnchored(path: string, windows: boolean): boolean { return windows ? /^(?:[A-Za-z]:[\\/]|[\\/]{2}[^\\/]+[\\/][^\\/]+)/.test(path) : path.startsWith("/"); }
 
 export function piSettingsPaths(cwd = process.cwd()): string[] {
-	const userDir = resolve(expandHome(process.env.PI_CODING_AGENT_DIR?.trim() || "~/.pi/agent"));
+	const override = expandHome(process.env.PI_CODING_AGENT_DIR?.trim() || "");
+	const userDir = resolve(rootAnchored(override, process.platform === "win32") ? override : expandHome("~/.pi/agent"));
 	const user = join(userDir, "settings.json");
 	const project = projectSettingsPath(cwd);
 	return projectSettingsTrusted(project) ? [user, project] : [user];
 }
 
-export function readkendexConfig(cwd?: string): kendexConfig {
-	const merged: kendexConfig = {};
-	for (const path of piSettingsPaths(cwd)) {
-		if (!existsSync(path)) continue;
+export function readPackageConfig(packageId: string, cwd?: string): Record<string, unknown> {
+	const merged: Record<string, unknown> = {};
+	for (const settingsPath of piSettingsPaths(cwd)) {
+		if (!existsSync(settingsPath)) continue;
 		try {
-			const parsed = JSON.parse(readFileSync(path, "utf8"));
-			const config = parsed?.kendex?.extensionManager?.config?.[CONFIG_ID];
+			const parsed = JSON.parse(readFileSync(settingsPath, "utf8"));
+			const config = parsed?.kendex?.extensionManager?.config?.[packageId];
 			if (config && typeof config === "object" && !Array.isArray(config)) Object.assign(merged, config);
 		} catch {
 			// Ignore malformed optional manager config.
@@ -78,6 +84,10 @@ export function readkendexConfig(cwd?: string): kendexConfig {
 	return merged;
 }
 
+export function readkendexConfig(cwd?: string): kendexConfig {
+	return readPackageConfig(CONFIG_ID, cwd) as kendexConfig;
+}
+
 export function settingBoolean(key: string, fallback: boolean, cwd?: string): boolean {
 	const value = readkendexConfig(cwd)[key];
 	return typeof value === "boolean" ? value : fallback;

package/extensions/qol/statusline.ts

@@ -4,7 +4,7 @@ import type { ExtensionAPI, ExtensionContext, Theme } from "@earendil-works/pi-c
 import { truncateToWidth, visibleWidth } from "@earendil-works/pi-tui";
 import { subagentStatuslineMarker } from "./agent-statusline.js";
 import { stripAnsi } from "./ansi.js";
-import { readCavemanBridge } from "./bridges.js";
+import { readCavemanBridge, readClaudeBillingIdentityBridge } from "./bridges.js";
 import { glyphs } from "./glyphs.js";
 import { CAVEMAN_ICON_ACTIVE, CAVEMAN_ICON_INACTIVE } from "./constants.js";
 import { settingBoolean, settingNumber } from "./settings.js";
@@ -89,6 +89,17 @@ function statuslineContextInfo(ctx: ExtensionContext): { label: string; percent:
 	return { label: formatWindow(contextWindow), percent: 100 - usedPercent };
 }
 
+/** The account segment for an active Claude-bridge model, or "" otherwise.
+ *  A lane can retain its last Claude identity after the user selects another
+ *  provider, which does not bill that account. The Claude bridge owns the
+ *  judgement of what counts as a confirmed login; this reads its answer and
+ *  displays it only beside its model. */
+function accountLabel(ctx: ExtensionContext): string {
+	if (!settingBoolean("statusline.showAccount", true, ctx.cwd)) return "";
+	if (ctx.model?.provider !== "pi-claude") return "";
+	return readClaudeBillingIdentityBridge()?.currentLoginEmail(ctx.sessionManager.getSessionId()) ?? "";
+}
+
 function gitBadge(state: GitState, showDirtyMarker: boolean): string {
 	if (!state.branch) return "";
 	const icon = state.inLinkedWorktree || state.branch !== "main" ? `🌳 ${state.branch}` : "🦀";
@@ -200,6 +211,8 @@ export function renderStatusLine(width: number, ctx: ExtensionContext, git: GitS
 	const thinkingLevel = normalizeThinkingLevel(pi.getThinkingLevel());
 	const thinkingChunk = thinkingLevel;
 	const contextChunk = ` ${contextLabel}`;
+	const account = accountLabel(ctx);
+	const accountSegment = account ? `${statusSeparator}${account}` : "";
 	const cavemanBridge = readCavemanBridge();
 	const cavemanVisible = !!cavemanBridge && (cavemanBridge.isStatusBadgeEnabled?.(ctx.cwd) ?? true);
 	const caveman = cavemanVisible ? cavemanBridge : undefined;
@@ -208,16 +221,17 @@ export function renderStatusLine(width: number, ctx: ExtensionContext, git: GitS
 	const cavemanTone = cavemanIconTone(caveman?.getMode() ?? "off", cavemanActive);
 	const cavemanSegment = caveman ? `${statusSeparator}${cavemanGlyph}` : "";
 	const contextSeparator = caveman ? ` ${statusSeparator}` : "";
-	const leftPlain = `${projectChunk}${statusSeparator}${thinkingChunk}${cavemanSegment}${contextSeparator}${contextChunk.trimStart()}`;
+	const leftPlain = `${projectChunk}${statusSeparator}${thinkingChunk}${cavemanSegment}${contextSeparator}${contextChunk.trimStart()}${accountSegment}`;
 	const percentPlain = percent === null ? `${glyphs(ctx.cwd).ellipsis}%` : `${percent}%`;
 	const subagentMarker = subagentStatuslineMarker(ctx.cwd);
 	const rightPlain = subagentMarker ? `${percentPlain} ${subagentMarker.plain}` : percentPlain;
 	const percentColor = percent === null ? "muted" : percent <= 15 ? "error" : percent <= 30 ? "warning" : "success";
 	const separatorColored = theme.fg("muted", statusSeparator);
 	const thinkingToken = thinkingThemeToken(thinkingLevel) as Parameters<Theme["fg"]>[0];
+	const accountColored = account ? `${separatorColored}${theme.fg("muted", account)}` : "";
 	const leftColored = caveman
-		? `${theme.fg("accent", projectChunk)}${separatorColored}${theme.fg(thinkingToken, thinkingChunk)}${separatorColored}${theme.fg(cavemanTone, cavemanGlyph)}${theme.fg("muted", contextSeparator)}${theme.fg("accent", contextChunk.trimStart())}`
-		: `${theme.fg("accent", projectChunk)}${separatorColored}${theme.fg(thinkingToken, thinkingChunk)}${theme.fg("accent", contextChunk)}`;
+		? `${theme.fg("accent", projectChunk)}${separatorColored}${theme.fg(thinkingToken, thinkingChunk)}${separatorColored}${theme.fg(cavemanTone, cavemanGlyph)}${theme.fg("muted", contextSeparator)}${theme.fg("accent", contextChunk.trimStart())}${accountColored}`
+		: `${theme.fg("accent", projectChunk)}${separatorColored}${theme.fg(thinkingToken, thinkingChunk)}${theme.fg("accent", contextChunk)}${accountColored}`;
 	const right = subagentMarker ? `${theme.fg(percentColor, percentPlain)} ${subagentMarker.styled}` : theme.fg(percentColor, percentPlain);
 	const minimumGap = 1;
 	const gapWidth = Math.max(minimumGap, width - visibleWidth(leftPlain) - visibleWidth(rightPlain) - 2);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vanillagreen/pi-qol",
-  "version": "2.0.0",
+  "version": "2.1.0",
   "description": "Pi quality-of-life extension: compact statusline/π prompt, reliable multiline input, styled pasted-image chips, session naming/search/context import, scheduled prompts, handoff, permission prompts, notifications, custom compaction, and a collapsed-thinking timer.",
   "license": "MIT",
   "keywords": [
@@ -56,6 +56,15 @@
           "apply": "reload",
           "requiresReload": true
         },
+        {
+          "key": "statusline.showAccount",
+          "label": "Show account email",
+          "description": "Append the Claude login this session authenticated as, as the Claude bridge reports it. Nothing is shown before the first turn, or when the request used an API key or a third-party backend such as Bedrock or Vertex.",
+          "type": "boolean",
+          "default": true,
+          "category": "Statusline",
+          "apply": "live"
+        },
         {
           "key": "replaceFooter",
           "label": "Replace built-in footer",