one-code-extension 0.1.3 → 0.3.0

package/extensions/lib/reminders.ts

@@ -4,17 +4,57 @@
  * pi's `context` event; they are never written to the session file.
  *
  * Cross-extension contract: emit on the event bus channel
- * `one-code:system-reminder` with `{ text, scope? }` to enqueue from any
- * extension (including third-party ones). Extensions in this package can also
- * import `reminderQueue` directly.
+ * `one-code:system-reminder` with `{ text, scope?, placement? }` to enqueue from
+ * any extension (including third-party ones). The queue instance itself lives
+ * in the system-reminder extension; do not import one from here (jiti gives
+ * every extension its own module instance, so a shared export steers nothing).
  *
- * Placement mirrors Claude Code's first-user-message reminder stack. Session
- * context reminders (deferred tools, agent catalog, MCP instructions, skills,
- * the `# claudeMd` block) are `first-prepend`: they ride at the front of the
- * FIRST user message, before the user's text, ordered by `order`. Turn-steering
- * reminders (file changed, mode cycled, memory near-limit) are `last-append`:
- * appended to the LAST user message, the Claude Code default. See
- * docs/decisions and the captured payloads (opus-4-8.json / latest-haiku.json).
+ * Three placements, chosen by what kind of fact the reminder is:
+ *
+ * - `first-prepend` — SESSION CONTEXT that never changes mid-session (deferred
+ *   tools, agent catalog, MCP instructions, skills, `# claudeMd`). Front of the
+ *   FIRST user message, before the user's text, ordered by `order`, exactly
+ *   Claude Code's first-message stack. Byte-stable, so the cached prefix holds.
+ * - `sticky-append` — SESSION STATE that switches on and off (auto mode, plan
+ *   mode, a worktree session, ultracode). Appended to the user message that
+ *   opened the turn during which the state switched on (`since`) and to EVERY
+ *   user message after it, so message N carries the block on every later
+ *   request too: the prefix stays byte-stable while the state holds, and the
+ *   model still sees the reminder on its latest turn. Switching off drops the
+ *   blocks (one cache miss, once). The old `last-append` + every-turn
+ *   combination re-cached the previous turn on every turn — permanently, in
+ *   auto mode.
+ * - `last-append` — ONE-SHOT STEERING about what just happened (a deferred tool
+ *   miss, a file changed under the model, a mode change). Delivered where the
+ *   model reads next, and then KEPT there so the message never changes again:
+ *   a one-shot pending when a tool result is stored is written INTO that result
+ *   (`takeOneShots` from the `tool_result` hook — Claude Code persists its
+ *   mid-turn reminders the same way, so the transcript carries them and no
+ *   request ever re-caches the result); a one-shot still pending when a request
+ *   goes out is `pin`ned to the request's tail (the trailing tool result by call
+ *   id, else the last user message by timestamp) and re-attached to that same
+ *   message on every later request, byte-identical. Pins are process memory
+ *   (a `--resume` drops them: one miss, once).
+ *
+ * Persisted or pinned is decided by WHEN the one-shot is emitted, which is a
+ * load-order rule: system-reminder's `tool_result` hook takes the one-shots
+ * pending at that moment, so only an extension whose own `tool_result` handler
+ * runs BEFORE it (listed before `system-reminder` in `package.json`
+ * `pi.extensions`, like `context-budget`) or that emits from `tool_call` gets
+ * its block written into the result. Emitting from a later `tool_result`
+ * handler, or from `tool_execution_end` (pi runs it AFTER the `tool_result`
+ * hooks, findings §3), lands the block on the same result but as a pin. Same
+ * wording on the wire, so this only matters for `--resume` and for ordering
+ * after the `<total_tokens>` line.
+ *
+ * A compaction summary counts as a user message for anchoring (pi renders it as
+ * one), so the context stack survives a compaction that left no user turn. So
+ * does a `custom` harness message (task notification, wakeup, hook context):
+ * pi sends it as a user message, and a turn it opens has no other user turn.
+ *
+ * Retry safety falls out of this: pi re-runs the `context` transform per LLM
+ * attempt, and both a persisted and a pinned one-shot are present on every
+ * attempt by construction.
  */
 
 import type { AgentMessage } from "@earendil-works/pi-agent-core";
@@ -25,12 +65,11 @@ export const REMINDER_CHANNEL = "one-code:system-reminder";
 /** "next-turn" fires once on the next LLM call; "every-turn" fires on every call until removed. */
 export type ReminderScope = "next-turn" | "every-turn";
 
-/**
- * `first-prepend` → front of the first user message, before the user text,
- * sorted by `order` (Claude Code's context stack). `last-append` → end of the
- * last user message (Claude Code's steering default).
- */
-export type ReminderPlacement = "first-prepend" | "last-append";
+/** See the module header for which placement fits which kind of reminder. */
+export type ReminderPlacement = "first-prepend" | "sticky-append" | "last-append";
+
+/** Where a delivered one-shot stays: a tool result (by call id) or a user turn (by timestamp). */
+export type PinAnchor = { kind: "toolResult"; toolCallId: string } | { kind: "user"; timestamp: number };
 
 /**
  * `order` values for the `first-prepend` context stack, matching Claude Code's
@@ -42,9 +81,17 @@ export const CONTEXT_ORDER = {
 	deferredTools: 10,
 	subagentModels: 20,
 	agents: 21,
+	/** Tiny-tier-only strict delegation directive, right after the catalog. */
+	delegation: 22,
 	mcp: 30,
 	skills: 40,
+	// CLAUDE.md-family (with AGENTS.md as a per-directory fallback when a directory
+	// has no CLAUDE.md) — CLAUDE.md > AGENTS.md.
 	claudeMd: 50,
+	// One Code's own instructions ride in their own block AFTER the # claudeMd
+	// block (higher `order` = closer to the user text = higher precedence), so
+	// ONECODE.md takes precedence over CLAUDE.md/AGENTS.md. Not part of CC.
+	oneCodeMd: 60,
 } as const;
 
 /** A drained reminder with everything the injector needs to place it. */
@@ -58,6 +105,20 @@ export interface ReminderEntry {
 	 * reproduces that byte-for-byte. Defaults to "".
 	 */
 	suffix?: string;
+	/**
+	 * `sticky-append` only: when the state switched on. The user message that
+	 * opened the turn in progress at that moment, and every user message after
+	 * it, carry the block.
+	 */
+	since?: number;
+	/** Set on a pinned one-shot: the exact message it rides on every request. */
+	pin?: PinAnchor;
+	/**
+	 * Emit `text` as-is instead of inside a `<system-reminder>` frame — for the
+	 * few Claude Code blocks that ride bare, like `<total_tokens>` after a tool
+	 * result. Defaults to false.
+	 */
+	raw?: boolean;
 }
 
 export interface ReminderPayload {
@@ -73,6 +134,14 @@ export interface ReminderPayload {
 	order?: number;
 	/** Literal text appended after the closing `</system-reminder>` tag. Defaults to "". */
 	suffix?: string;
+	/** Emit the text bare, with no `<system-reminder>` frame. */
+	raw?: boolean;
+	/**
+	 * `sticky-append` only: anchor the block from this timestamp instead of now —
+	 * `0` puts it on every user message in the session, including ones a resume
+	 * brought back (the `<total_tokens>` line rides every user message in CC).
+	 */
+	since?: number;
 }
 
 interface StoredReminder extends ReminderEntry {
@@ -85,21 +154,44 @@ type EnqueueOptions = {
 	placement?: ReminderPlacement;
 	order?: number;
 	suffix?: string;
+	raw?: boolean;
+	/** Test seam / explicit anchor for `sticky-append`; defaults to now. */
+	since?: number;
 };
 
 export class ReminderQueue {
 	private nextTurn: StoredReminder[] = [];
+	/** Delivered one-shots, each fixed to the message it first rode (see `pin`). */
+	private pinned: StoredReminder[] = [];
 	private everyTurn = new Map<string, StoredReminder>();
+	private readonly now: () => number;
+
+	constructor(now: () => number = Date.now) {
+		this.now = now;
+	}
 
 	enqueue(text: string, opts?: EnqueueOptions): void {
 		if (!text.trim()) return;
+		const placement = opts?.placement ?? "last-append";
 		const entry: StoredReminder = {
 			text,
-			placement: opts?.placement ?? "last-append",
+			placement,
 			order: opts?.order ?? 0,
 			suffix: opts?.suffix,
 			key: opts?.key,
+			raw: opts?.raw,
 		};
+		if (placement === "sticky-append") {
+			// A standing reminder re-emitted with the SAME text (plan mode re-emits
+			// every turn) keeps its anchor, so the blocks on earlier messages do not
+			// move. Different text under the same key is a new fact (plan → auto
+			// under the shared "permission-mode" key) and anchors from now.
+			const previous = opts?.key !== undefined ? this.everyTurn.get(opts.key) : undefined;
+			entry.since =
+				opts?.since ??
+				(previous?.placement === "sticky-append" && previous.text === text ? previous.since : undefined) ??
+				this.now();
+		}
 		if (opts?.scope === "every-turn") {
 			this.everyTurn.set(opts.key ?? text, entry);
 		} else {
@@ -115,98 +207,259 @@ export class ReminderQueue {
 		this.everyTurn.delete(key);
 	}
 
-	/** Returns pending reminders. Clears next-turn reminders; every-turn ones persist. */
-	drain(): ReminderEntry[] {
-		const drained: ReminderEntry[] = [
-			...[...this.everyTurn.values()].map(strip),
-			...this.nextTurn.map(strip),
-		];
+	/**
+	 * Take the pending `last-append` one-shots out of the queue — for the
+	 * `tool_result` hook, which writes them into the stored result. Other
+	 * placements stay queued for the next request.
+	 */
+	takeOneShots(): ReminderEntry[] {
+		const taken = this.nextTurn.filter((r) => r.placement === "last-append");
+		this.nextTurn = this.nextTurn.filter((r) => r.placement !== "last-append");
+		return taken.map(strip);
+	}
+
+	/**
+	 * Fix the pending `last-append` one-shots to `anchor` — the message they ride
+	 * on this request — so every later request re-attaches them there unchanged.
+	 * Called by the owner at `context` time, after it has decided the tail.
+	 */
+	pin(anchor: PinAnchor): void {
+		for (const entry of this.nextTurn) {
+			if (entry.placement !== "last-append") continue;
+			this.pinned.push({ ...entry, pin: anchor });
+		}
+		this.nextTurn = this.nextTurn.filter((r) => r.placement !== "last-append");
+	}
+
+	/**
+	 * Everything to inject on this request: every-turn state, pinned one-shots,
+	 * then whatever is still pending. `messages` is the request being built:
+	 * pins whose anchor is no longer in it (compacted away, or left behind on
+	 * another branch) are dropped here, as part of draining, so no caller can
+	 * forget the step. Nothing else is ever evicted: a pin is one small object,
+	 * and removing a pin whose message is still in context would change that
+	 * message and re-cache everything after it — the old "oldest past 400" cap
+	 * did exactly that (CACHE-REVIEW-2026-09-04 M3).
+	 */
+	drain(messages: AgentMessage[]): ReminderEntry[] {
+		if (this.pinned.length > 0) {
+			const locate = pinLocator(messages);
+			this.pinned = this.pinned.filter((entry) => locate(entry.pin as PinAnchor) !== -1);
+		}
+		const pending = this.nextTurn.map(strip);
 		this.nextTurn = [];
-		return drained;
+		return [...[...this.everyTurn.values()].map(strip), ...this.pinned.map(strip), ...pending];
 	}
 
 	get size(): number {
-		return this.everyTurn.size + this.nextTurn.length;
+		return this.everyTurn.size + this.nextTurn.length + this.pinned.length;
+	}
+
+	/** True when a one-shot is waiting to be delivered (the owner decides where). */
+	get hasPendingOneShots(): boolean {
+		return this.nextTurn.some((r) => r.placement === "last-append");
 	}
 }
 
 function strip(r: StoredReminder): ReminderEntry {
-	return { text: r.text, placement: r.placement, order: r.order, suffix: r.suffix };
+	const entry: ReminderEntry = { text: r.text, placement: r.placement, order: r.order, suffix: r.suffix };
+	if (r.raw) entry.raw = true;
+	if (r.since !== undefined) entry.since = r.since;
+	if (r.pin !== undefined) entry.pin = r.pin;
+	return entry;
+}
+
+/**
+ * One pass over `messages` → a lookup from a pin to the index of the message it
+ * rides (-1 when that message left the context). Built once per request by the
+ * queue's drain and once by injectReminders, so pin count never multiplies the
+ * message count on the per-request path.
+ */
+function pinLocator(messages: AgentMessage[]): (pin: PinAnchor) => number {
+	const byToolCall = new Map<string, number>();
+	const byTimestamp = new Map<number, number>();
+	messages.forEach((m, index) => {
+		if (m.role === "toolResult") {
+			const id = (m as { toolCallId?: string }).toolCallId;
+			if (typeof id === "string" && !byToolCall.has(id)) byToolCall.set(id, index);
+		} else if (isUserLike(m)) {
+			const stamp = (m as { timestamp?: number }).timestamp;
+			if (typeof stamp === "number" && !byTimestamp.has(stamp)) byTimestamp.set(stamp, index);
+		}
+	});
+	return (pin) => (pin.kind === "toolResult" ? byToolCall.get(pin.toolCallId) : byTimestamp.get(pin.timestamp)) ?? -1;
+}
+
+/** The anchor a one-shot lands on for this request: the trailing tool result, else the last user-like message. */
+export function tailAnchor(messages: AgentMessage[]): PinAnchor | undefined {
+	const last = messages[messages.length - 1] as (AgentMessage & { toolCallId?: string }) | undefined;
+	if (last?.role === "toolResult" && typeof last.toolCallId === "string") return { kind: "toolResult", toolCallId: last.toolCallId };
+	for (let i = messages.length - 1; i >= 0; i--) {
+		const m = messages[i] as AgentMessage & { timestamp?: number };
+		if (isUserLike(m) && typeof m.timestamp === "number") {
+			return { kind: "user", timestamp: m.timestamp };
+		}
+	}
+	return undefined;
 }
 
-/** Shared queue instance for extensions in this package. */
-export const reminderQueue = new ReminderQueue();
+/** A tool result's content with reminder blocks appended (for the `tool_result` hook). */
+export function appendReminderBlocks(content: ContentBlock[], entries: ReminderEntry[]): ContentBlock[] {
+	return [...content, ...entries.map(reminderBlock)];
+}
+
+/**
+ * The framings a reminder/countdown block appended onto a tool result begins
+ * with: a `<system-reminder>`-wrapped one-shot, or a raw one-shot (the
+ * context-budget `<total_tokens>` countdown, an LSP `<new-diagnostics>` block).
+ * A PostToolUse hook that replaces the whole result must re-attach the trailing
+ * run of these, or it silently drops the harness's own context (review M3).
+ */
+const APPENDED_REMINDER_PREFIXES = ["<system-reminder>", "<total_tokens>", "<new-diagnostics>"];
+
+/** True when a text block is one the reminder queue appended onto a tool result. */
+export function isAppendedReminderText(text: string): boolean {
+	return APPENDED_REMINDER_PREFIXES.some((prefix) => text.startsWith(prefix));
+}
 
 export function wrapReminder(text: string): string {
 	return `<system-reminder>\n${text}\n</system-reminder>`;
 }
 
+/**
+ * pi's `convertToLlm` renders a `compactionSummary` message as a user message
+ * with exactly this frame (`core/messages.js`, not exported through the
+ * package's exports map — copied here and locked by a unit test). Used when a
+ * reminder must anchor to the summary because no user turn survived compaction.
+ */
+export const COMPACTION_SUMMARY_PREFIX =
+	"The conversation history before this point was compacted into the following summary:\n\n<summary>\n";
+export const COMPACTION_SUMMARY_SUFFIX = "\n</summary>";
+
 type ContentBlock = TextContent | ImageContent;
-type UserMessage = AgentMessage & { content: string | ContentBlock[] };
 
 function toBlocks(content: string | ContentBlock[]): ContentBlock[] {
 	return typeof content === "string" ? [{ type: "text", text: content }] : [...content];
 }
 
 function reminderBlock(entry: ReminderEntry): TextContent {
-	return { type: "text", text: wrapReminder(entry.text) + (entry.suffix ?? "") };
+	return { type: "text", text: (entry.raw ? entry.text : wrapReminder(entry.text)) + (entry.suffix ?? "") };
+}
+
+/**
+ * Roles a reminder block can be attached to. `custom` is a harness message
+ * (task notification, wakeup, hook context, `<new-diagnostics>`); pi's
+ * `convertToLlm` sends it to the model as `role: "user"`, so on the wire it IS
+ * a user turn — and a turn opened by one (a `/loop` tick, an agent report
+ * arriving while idle) has no `user` message of its own. Before 2026-09-05 such
+ * a request got no context stack at all, and its pending one-shots pinned to
+ * the previous user message (STEERING-REVIEW-2026-09-05 H1).
+ */
+function isUserLike(m: AgentMessage): boolean {
+	return isStickyCarrier(m) || m.role === "compactionSummary";
+}
+
+/** User-role messages that carry sticky blocks: real turns and harness messages, not a compaction summary. */
+function isStickyCarrier(m: AgentMessage): boolean {
+	return m.role === "user" || m.role === "custom";
+}
+
+/** A copy of `message` with `before` blocks in front of its content and `after` blocks behind. */
+function withBlocks(message: AgentMessage, before: TextContent[], after: TextContent[]): AgentMessage {
+	if (before.length === 0 && after.length === 0) return message;
+	if (message.role === "compactionSummary") {
+		const summary = message as unknown as { summary: string; timestamp: number };
+		return {
+			role: "user",
+			content: [
+				...before,
+				{ type: "text", text: COMPACTION_SUMMARY_PREFIX + summary.summary + COMPACTION_SUMMARY_SUFFIX },
+				...after,
+			],
+			timestamp: summary.timestamp,
+		} as AgentMessage;
+	}
+	const target = message as AgentMessage & { content: string | ContentBlock[] };
+	return { ...target, content: [...before, ...toBlocks(target.content), ...after] } as AgentMessage;
 }
 
 /**
  * Returns a copy of `messages` with reminder blocks injected (Claude Code
- * convention: reminders ride inside user-message content blocks). `first-prepend`
- * entries go to the front of the first user message, sorted by `order`, before
- * the user's text; `last-append` entries go to the end of the last user message.
- * A bare string is treated as `last-append` (back-compat). The input array and
- * its messages are not mutated. With no user message, messages are returned
- * unchanged and the caller re-enqueues as needed.
+ * convention: reminders ride inside message content blocks, never as messages
+ * of their own). See the module header for the three placements. A bare string
+ * is `last-append` (back-compat). The input array and its messages are not
+ * mutated. With nothing to anchor to (no user, tool-result, or compaction
+ * summary message), messages are returned unchanged and the caller keeps the
+ * reminders queued.
  */
-export function injectReminders(
-	messages: AgentMessage[],
-	reminders: Array<string | ReminderEntry>,
-): AgentMessage[] {
+export function injectReminders(messages: AgentMessage[], reminders: Array<string | ReminderEntry>): AgentMessage[] {
 	if (reminders.length === 0) return messages;
 
 	const entries: ReminderEntry[] = reminders.map((r) =>
 		typeof r === "string" ? { text: r, placement: "last-append", order: 0 } : r,
 	);
-
 	const firstPrepend = entries
 		.filter((e) => e.placement === "first-prepend")
 		.map((e, i) => ({ e, i }))
 		.sort((a, b) => a.e.order - b.e.order || a.i - b.i)
 		.map((x) => x.e);
-	const lastAppend = entries.filter((e) => e.placement === "last-append");
+	const sticky = entries.filter((e) => e.placement === "sticky-append");
+	const pinnedEntries = entries.filter((e) => e.pin !== undefined);
+	const lastAppend = entries.filter((e) => e.placement === "last-append" && e.pin === undefined);
 
-	const firstUserIndex = messages.findIndex((m) => m.role === "user");
-	if (firstUserIndex === -1) return messages;
-	const lastUserIndex = messages.findLastIndex((m) => m.role === "user");
+	const firstUserIndex = messages.findIndex(isUserLike);
+	const lastUserIndex = messages.findLastIndex(isUserLike);
+	const lastIndex = messages.length - 1;
+	// Mid-turn, the request ends in the tool result(s) the model is about to
+	// read — that is where a one-shot reminder belongs. Otherwise the last user turn.
+	const tailIndex = lastIndex >= 0 && messages[lastIndex].role === "toolResult" ? lastIndex : lastUserIndex;
+	if (firstUserIndex === -1 && tailIndex === -1) return messages;
 
-	const result = [...messages];
+	const before = new Map<number, TextContent[]>();
+	const after = new Map<number, TextContent[]>();
+	const push = (map: Map<number, TextContent[]>, index: number, blocks: TextContent[]) => {
+		if (index < 0 || blocks.length === 0) return;
+		map.set(index, [...(map.get(index) ?? []), ...blocks]);
+	};
 
-	if (firstUserIndex === lastUserIndex) {
-		const target = result[firstUserIndex] as UserMessage;
-		const blocks = toBlocks(target.content);
-		result[firstUserIndex] = {
-			...target,
-			content: [...firstPrepend.map(reminderBlock), ...blocks, ...lastAppend.map(reminderBlock)],
-		} as AgentMessage;
-		return result;
-	}
+	push(before, firstUserIndex === -1 ? tailIndex : firstUserIndex, firstPrepend.map(reminderBlock));
 
-	if (firstPrepend.length > 0) {
-		const target = result[firstUserIndex] as UserMessage;
-		result[firstUserIndex] = {
-			...target,
-			content: [...firstPrepend.map(reminderBlock), ...toBlocks(target.content)],
-		} as AgentMessage;
+	for (const entry of sticky) {
+		const since = entry.since ?? 0;
+		// The block rides the user message that opened the turn during which the
+		// state switched on (the latest user message stamped before `since` — a
+		// standing reminder emitted on before_agent_start is always stamped after
+		// the turn's user message) and every user message after it. The set only
+		// grows while the state holds, so earlier messages never change.
+		let opener = -1;
+		const carriers: number[] = [];
+		messages.forEach((m, index) => {
+			if (!isStickyCarrier(m)) return;
+			const stamp = (m as { timestamp?: number }).timestamp ?? 0;
+			if (stamp >= since) carriers.push(index);
+			else opener = index;
+		});
+		if (opener !== -1) carriers.unshift(opener);
+		if (carriers.length === 0) {
+			// No user turn at all (overflow compaction mid-turn): ride the tail.
+			push(after, tailIndex === -1 ? firstUserIndex : tailIndex, [reminderBlock(entry)]);
+			continue;
+		}
+		for (const index of carriers) push(after, index, [reminderBlock(entry)]);
 	}
-	if (lastAppend.length > 0) {
-		const target = result[lastUserIndex] as UserMessage;
-		result[lastUserIndex] = {
-			...target,
-			content: [...toBlocks(target.content), ...lastAppend.map(reminderBlock)],
-		} as AgentMessage;
+
+	push(after, tailIndex === -1 ? firstUserIndex : tailIndex, lastAppend.map(reminderBlock));
+
+	// Pinned one-shots ride the exact message they first landed on; a message
+	// compacted away simply no longer carries its pin.
+	if (pinnedEntries.length > 0) {
+		const locate = pinLocator(messages);
+		for (const entry of pinnedEntries) {
+			const index = locate(entry.pin as PinAnchor);
+			if (index !== -1) push(after, index, [reminderBlock(entry)]);
+		}
 	}
-	return result;
+
+	if (before.size === 0 && after.size === 0) return messages;
+	return messages.map((m, index) => withBlocks(m, before.get(index) ?? [], after.get(index) ?? []));
 }

package/extensions/lib/scratchpad.ts

@@ -1,10 +1,13 @@
 /**
- * Session scratchpad — Claude Code's designated temp-files directory.
+ * Session scratchpad — a designated temp-files directory.
  *
- * Claude Code puts one under `<tmp>/claude-<uid>/<project-slug>/<session-id>/scratchpad`
- * and tells the model (via a system-prompt section) to use it for everything
- * that would otherwise land in `/tmp` or leak into the project. The path is
- * per-session, so parallel sessions on one project never collide.
+ * The shape follows Claude Code's (`<tmp>/<owner>/<project-slug>/<session-id>/scratchpad`),
+ * but the owner segment carries One Code's name, not Claude Code's, so a machine
+ * running both products never interleaves their scratchpads under one owner dir
+ * (distribution review 2026-09-09, H2). We tell the model (via a system-prompt
+ * section) to use it for everything that would otherwise land in `/tmp` or leak
+ * into the project. The path is per-session, so parallel sessions on one project
+ * never collide.
  *
  * Three extensions need the same path (system-prompt renders the section,
  * permissions and the workflow gate allow writes into it), and jiti isolates
@@ -17,14 +20,14 @@ import { join } from "node:path";
 import { findGitRoot } from "./git.ts";
 import { projectSlug } from "./memory.ts";
 
-/** Pure core, testable: the Claude Code path shape. */
+/** Pure core, testable: Claude Code's path shape under a One Code-named owner dir. */
 export function scratchpadDir(
 	tmpRoot: string,
 	uid: number | undefined,
 	projectRoot: string,
 	sessionId: string,
 ): string {
-	const owner = uid === undefined ? "claude" : `claude-${uid}`;
+	const owner = uid === undefined ? "onecode" : `onecode-${uid}`;
 	return join(tmpRoot, owner, projectSlug(projectRoot), sessionId, "scratchpad");
 }
 
@@ -34,7 +37,7 @@ export function scratchpadDir(
  * resolved subject all name the same real location. Falls back to os.tmpdir()
  * where /tmp does not exist.
  */
-export function resolveTmpRoot(): string {
+function resolveTmpRoot(): string {
 	try {
 		return realpathSync("/tmp");
 	} catch {

package/extensions/lib/session-lifecycle.ts

@@ -0,0 +1,28 @@
+/**
+ * "Is this extension instance's session still alive?" — the one flag every
+ * extension with late work (a child's `close`, a debounce, a panel action's
+ * continuation) needs. After `session_shutdown` (which `/clear`, `/new`,
+ * `/resume` and process exit all emit — findings §8) every `pi.*` call and
+ * every getter on a captured ctx throws; a callback that fires afterwards must
+ * do nothing. Before this module each extension kept its own `shuttingDown`
+ * boolean wired to the same two events (LIFECYCLE-REVIEW-2026-09-06 fix pass).
+ *
+ * Call it FIRST in the factory: its handlers register before the extension's
+ * own, so `alive()` already reads false inside the extension's
+ * `session_shutdown` handler and true again inside its `session_start` one
+ * (RPC's `new_session` re-runs factories and emits `session_start` twice;
+ * the reset is idempotent).
+ */
+
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+
+export function sessionAlive(pi: Pick<ExtensionAPI, "on">): () => boolean {
+	let alive = true;
+	pi.on("session_start", () => {
+		alive = true;
+	});
+	pi.on("session_shutdown", () => {
+		alive = false;
+	});
+	return () => alive;
+}

package/extensions/lib/settings-channels.ts

@@ -0,0 +1,14 @@
+/**
+ * Cross-extension "a setting you own just changed on disk" channels (pure
+ * constants). jiti isolates module state, so when one extension writes another
+ * extension's setting — `/doctor preset` writing the subagent default and the
+ * auto-mode classifier model — it announces the write here and the owner
+ * re-reads its file and republishes its live status. No payload: the owner's
+ * own loader is the source of truth.
+ */
+
+/** `subagentModel` in ~/.onecode/settings.json changed; the subagents extension re-resolves and re-emits its status. */
+export const SUBAGENT_DEFAULT_CHANGED_CHANNEL = "one-code:subagent-default-changed";
+
+/** `autoMode.classifierModel` changed; the permissions extension drops its pinned classifier and cached config. */
+export const CLASSIFIER_SETTING_CHANGED_CHANNEL = "one-code:classifier-setting-changed";

package/extensions/lib/shell-tasks.ts

@@ -0,0 +1,54 @@
+/**
+ * Shell-task tracker — a per-extension live mirror of the background bash
+ * shells (kind "bash") that register over TASK_REGISTER_CHANNEL.
+ *
+ * Module state does not cross extension boundaries (findings §3), but the
+ * task OBJECTS do: the bash extension emits each BackgroundTask over the bus,
+ * so any consumer holding the reference sees live status/output. Each
+ * interested extension (subagents' shell panel, turn-duration) instantiates
+ * its own tracker; multiple bus listeners are fine.
+ */
+
+import { TASK_REGISTER_CHANNEL, type BackgroundTask } from "../background/registry.ts";
+
+export interface ShellTaskTracker {
+	/** Every bash shell registered this session, registration order. */
+	list(): BackgroundTask[];
+	running(): BackgroundTask[];
+	/** Fires on register and on any tracked shell finishing. */
+	subscribe(listener: () => void): () => void;
+}
+
+interface EventBusLike {
+	events: { on(channel: string, handler: (payload: unknown) => void): unknown };
+}
+
+export function trackShellTasks(pi: EventBusLike): ShellTaskTracker {
+	const tasks = new Map<string, BackgroundTask>();
+	const listeners = new Set<() => void>();
+	const notify = () => {
+		for (const listener of listeners) {
+			try {
+				listener();
+			} catch {
+				// One consumer's render error must not starve the others.
+			}
+		}
+	};
+	pi.events.on(TASK_REGISTER_CHANNEL, (payload) => {
+		const task = payload as BackgroundTask | undefined;
+		if (!task?.id || task.kind !== "bash") return;
+		tasks.set(task.id, task);
+		notify();
+		// `finished` settles (never rejects) per the BackgroundTask contract.
+		void task.finished.then(notify);
+	});
+	return {
+		list: () => [...tasks.values()],
+		running: () => [...tasks.values()].filter((t) => t.status === "running"),
+		subscribe: (listener) => {
+			listeners.add(listener);
+			return () => listeners.delete(listener);
+		},
+	};
+}