osdy-pi 1.11.9 → 1.11.11

package/README.md

@@ -12,7 +12,7 @@ Osdy Pi gives [Pi](https://github.com/earendil-works/pi) a themed, responsive te
 
 | Area | What ships |
 | --- | --- |
-| Control Center | `/osdyConfig` opens ten categories, including confirmed TODO/Agents provider selection and explicit per-profile Codex quota previews. |
+| Control Center | **Ctrl+Option+O** or `/osdyConfig` opens ten categories, including confirmed TODO/Agents provider selection and explicit per-profile Codex quota previews. |
 | Local analytics (1.10.0) | `/osdy-usage` opens Summary, Profiles, Models, and History pages for recorded tokens and estimated cost—not billing or subscription quota. |
 | Themes introduced in 1.11.0 | Spider-Man Classic, Miles Morales, and Spider-Verse add three distinct dark palettes. |
 | Themes introduced in 1.9.0 | Halloween and Halloween Killer add two dark palettes. |
@@ -20,7 +20,7 @@ Osdy Pi gives [Pi](https://github.com/earendil-works/pi) a themed, responsive te
 | Message cards | Pi-native colored user cards without emojis and plain assistant Markdown preceded by a separate `🦝` transcript row. |
 | Header and mascot | Independent header/mascot choices, an installed-package version label, and mascot-only fallback when full artwork cannot fit. |
 | Accounts | `/osdy-account` switches Codex profiles in place with atomic activation, rollback, bounded auth files, and process-safe locks. |
-| Quota | `/usage` and compact bars emphasize remaining Codex quota at warning (40% or less) and error (15% or less) thresholds. |
+| Quota | **Ctrl+Option+U** or `/usage` opens subscription quota; compact bars emphasize remaining Codex quota at warning (40% or less) and error (15% or less) thresholds. |
 | TODO (starting in 1.5.0, opt-in) | Default-off first-party `todo` snapshots track the Pi session branch; `/todos` reads them without editing. ODD Markdown remains separate. |
 
 ## Prerequisites
@@ -57,19 +57,30 @@ Osdy Pi's own extension and themes are bundled—do not install them separately.
 
 ### Control Center in Pi
 
-Run **`/osdyConfig`** in interactive Pi to open the Osdy Control Center. The ten categories—**Theme, Header, Mascot, Editor, Git, Sounds, Account, Usage, TODO, and Agents**—provide inline controls or data in the same modal. Existing commands remain available.
+Press **Ctrl+Option+O** or run **`/osdyConfig`** in interactive Pi to open the Osdy Control Center. The ten categories—**Theme, Header, Mascot, Editor, Git, Sounds, Account, Usage, TODO, and Agents**—provide inline controls or data in the same modal. Existing commands remain available.
+
+| Shortcut | Panel | Command fallback |
+| --- | --- | --- |
+| **Ctrl+Option+O** | Osdy Control Center | `/osdyConfig` |
+| **Ctrl+Option+U** | Active Codex subscription quota—not local token/cost analytics | `/usage` |
+
+On macOS, **Option = Alt** in Pi's shortcut names: these bindings register as `ctrl+alt+o` and `ctrl+alt+u`. On other platforms, use **Ctrl+Alt+O** and **Ctrl+Alt+U**. Your terminal must send Option as **Alt/Meta** and support **Ctrl+Alt chords**; registration does not guarantee actual hardware delivery. Check **`/hotkeys`** for bindings, and use **`/osdyConfig`** or **`/usage`** if the terminal, OS, or another extension intercepts or cannot deliver the chord.
+
+**Ctrl+Option+O capability limits:** Account **Switch**, **Set default**, and **Clear default** refuse changes while Pi is busy; retry when idle. The same actions through `/osdyConfig` retain idle waiting, as does switching through `/osdy-account`. Read-only account quota previews remain available while busy. Successful TODO/Agents selection from Ctrl+Option+O saves settings, closes/disposes the panel, releases its editor hold, then asks you to run **`/reload` manually** (or restart Pi). From `/osdyConfig`, the same sequence still reloads automatically once; restart Pi if reload fails.
+
+Ctrl+Option+U opens the existing `/usage` dashboard with the same refresh behavior; it does not open `/osdy-usage`.
 
 - Use **↑/↓**, **Home/End**, or **Page Up/Down** to navigate; **Tab** or **←/→** switches between categories and details. **Enter** selects. Single blank lines separate the heading, summary, compact options, selected-item help, status, and action hints—not individual options. Gaps yield on short viewports so the selected option and controls remain reachable. Press **?** to expand/collapse the selected help and view notes; resize if expanded help is clipped. Confirmation effects remain complete, and **?** never toggles help during confirmation, path editing, loading, querying, or saving.
-- TODO shows configured selection, current eligibility, and actually loaded SDK registration separately. Opt-in/out requires an idle session and a Cancel-first inline confirmation naming the target, owned Gentle filter effects, and reload. Successful selection closes/disposes the panel and releases its editor hold before reloading once; restart Pi if reload fails. Rejections stay in the panel. No installs or task-history changes occur; legacy `/osdy-pi todo on|off|status` remains available.
-- Agents shows concise **Joker / Gentle** choices without activating anything. With detail focus, visible lowercase-only **j Joker / g Gentle** letters open the existing confirmation directly; only available, unambiguous rows get shortcuts. **↑/↓ + Enter** remains the fallback. Profile and Agent selections survive category navigation; unavailable choices fall back to the current row. Letters never bypass category focus, confirmation, path input, loading, querying, or saving. Selection is idle-only and Cancel-first confirmed, naming the real target, possible Joker installation, owned agent filters, and preserved unrelated resources. Normal personal Pi only: `pi:dev` and isolated/override sessions are blocked, never redirected to personal settings. Success closes/disposes the panel and releases its editor hold before reloading once; restart Pi if reload fails. Legacy `/osdy-pi agents setup|on|off|status` is unchanged.
+- TODO shows configured selection, current eligibility, and actually loaded SDK registration separately. Opt-in/out requires an idle session and a Cancel-first inline confirmation naming the target, owned Gentle filter effects, and reload. Successful selection closes/disposes the panel and releases its editor hold before automatic command reload or the Ctrl+Option+O manual-reload notice described above; restart Pi if reload fails. Rejections stay in the panel. No installs or task-history changes occur; legacy `/osdy-pi todo on|off|status` remains available.
+- Agents shows concise **Joker / Gentle** choices without activating anything. With detail focus, visible lowercase-only **j Joker / g Gentle** letters open the existing confirmation directly; only available, unambiguous rows get shortcuts. **↑/↓ + Enter** remains the fallback. Profile and Agent selections survive category navigation; unavailable choices fall back to the current row. Letters never bypass category focus, confirmation, path input, loading, querying, or saving. Selection is idle-only and Cancel-first confirmed, naming the real target, possible Joker installation, owned agent filters, and preserved unrelated resources. Normal personal Pi only: `pi:dev` and isolated/override sessions are blocked, never redirected to personal settings. Success closes/disposes the panel and releases its editor hold before automatic command reload or the Ctrl+Option+O manual-reload notice described above; restart Pi if reload fails. Legacy `/osdy-pi agents setup|on|off|status` is unchanged.
 - Theme lists Pi's available themes and marks the current theme. Explicit **Page x/N** pages contain at most **8 themes**, fewer in short viewports or with expanded help. **Page Up/Down** changes pages, **Home/End** reaches the first/last theme, and arrows cross page boundaries. Selection survives category navigation and resizing; resizing adjusts the page around the selected theme. A successful selection applies live and saves globally in the active Pi agent directory; project settings can override it at startup. Failures appear in the modal.
-- Header offers **osdy-theme / neon**; Mascot offers **current / Bts**; Editor offers **auto / extended / simple**, with the current preference marked. Editor also shows the effective mode: small terminals stay simple/native even with extended selected.
+- Header offers **osdy-theme / neon**; Mascot offers **current / Bts / Osdy-Halloween**; Editor offers **auto / extended / simple**, with the current preference marked. Editor also shows the effective mode: small terminals stay simple/native even with extended selected.
 - Preferences save immediately through the same runtime and global Osdy settings store as `/osdy-pi` commands (`<agent-dir>/extensions/osdy-pi/settings.json`). Header/Mascot apply live without closing the panel. Editor replacement waits until all overlays close; if another overlay remains, the next existing responsive watcher tick applies the latest choice. The effective mode reports the actually mounted editor while queued. Opening a category only reads values; while Osdy is disabled, choices save for later without enabling it.
 - A selection shows **Saving** until persistence finishes and **Saved globally** only on success. Failed saves retain the live preference but report **could not be saved**; select again to retry. Application errors report **Not saved**, without claiming the runtime change succeeded. Duplicate selections are ignored while saving.
 - **Git** shows the current branch (or detached HEAD), changed-entry count/clean status, and the current widget position as a read-only session detail. Working-tree enablement applies and saves through the same owner as `/osdy-pi working-tree`; Git inspection never writes Git. `/osdy-pi diff` and position commands are unchanged.
 - **Sounds** shows each event's saved and effective path/source. Configure opens a single-line path editor **inside this overlay**: enter a readable `.mp3`/`.wav` path, then **Enter** to validate and save immediately, or **Esc** to cancel editing. Relative paths resolve against the project directory and save as absolute paths. Clear removes only that event's saved path from the existing v1 audio store (`<agent-dir>/extensions/osdy-pi/audio-notifications.json`). Notifications read this store afresh; refresh failures are reported separately from save failures.
 - Sounds' master enablement is **unavailable**: the existing schema has paths, not an enable switch or presets. Startup `--osdy-pi-sound-<event>` flags override saved paths, so **clearing a saved path does not disable flag-configured playback**. Only **Test effective** explicitly plays a sound; opening categories and configuring paths never play. Tests report unavailable files/platforms or playback failures; playback remains macOS/Windows only. The legacy `/osdy-pi sound setup` wizard is preserved.
-- **Account** shows one row per validated profile, marked **Active** and **Default** where applicable. Select a profile, then use its visible context bar: **v View usage**, **s Switch** (inactive profiles), **d Set default**, and **c Clear default** (when a default exists). **v** or **Enter** explicitly queries that profile's stored Codex credentials without activating it; no second action list appears. Opening, navigating or highlighting never queries; stored profiles are never polled. A dedicated quota view reuses `/usage` dashboard content: Session/Weekly cards, additional bucket groups, remaining-capacity bars, resets, and the quotas/account summary with plan and credits when available. Identity belongs to the selected stored profile; unknown provider/model metadata is labeled honestly. Checked and updated times use local time; absent data is unknown, not zero. Refresh/Back controls and query feedback stay pinned while long dashboard content scrolls. **r Refresh** repeats the selected profile query; **s Switch**, when available, confirms activation of the currently viewed inactive profile. Cancelling that confirmation preserves the quota view and scroll position. **b Back** or **Esc** returns to the overview with the profile selected, without closing the overlay. In quota details, **↑/↓** selects Refresh/Back and **Enter** activates it; **Page Up/Down** and **Home/End** scroll long quota data. Switch, set default, and clear default require an **in-screen confirmation** with Cancel selected initially; **Esc** cancels confirmation without closing the overlay. Single blank separators group the confirmation title, complete effects, choices, and instructions; gaps yield on short viewports. Resize if the full confirmation cannot fit—acceptance stays hidden and blocked. Switching waits for Pi to become idle, activates through the existing backend, and refreshes subscription usage. Login remains Pi-owned (`/login`); create/rename/remove remain available in `/osdy-account`. Category navigation never changes profiles or credentials.
+- **Account** shows one row per validated profile, marked **Active** and **Default** where applicable. Select a profile, then use its visible context bar: **v View usage**, **s Switch** (inactive profiles), **d Set default**, and **c Clear default** (when a default exists). **v** or **Enter** explicitly queries that profile's stored Codex credentials without activating it; no second action list appears. Opening, navigating or highlighting never queries; stored profiles are never polled. A dedicated quota view reuses `/usage` dashboard content: Session/Weekly cards, additional bucket groups, remaining-capacity bars, resets, and the quotas/account summary with plan and credits when available. Identity belongs to the selected stored profile; unknown provider/model metadata is labeled honestly. Checked and updated times use local time; absent data is unknown, not zero. Refresh/Back controls and query feedback stay pinned while long dashboard content scrolls. **r Refresh** repeats the selected profile query; **s Switch**, when available, confirms activation of the currently viewed inactive profile. Cancelling that confirmation preserves the quota view and scroll position. **b Back** or **Esc** returns to the overview with the profile selected, without closing the overlay. In quota details, **↑/↓** selects Refresh/Back and **Enter** activates it; **Page Up/Down** and **Home/End** scroll long quota data. Switch, set default, and clear default require an **in-screen confirmation** with Cancel selected initially; **Esc** cancels confirmation without closing the overlay. Single blank separators group the confirmation title, complete effects, choices, and instructions; gaps yield on short viewports. Resize if the full confirmation cannot fit—acceptance stays hidden and blocked. Switching through `/osdyConfig` waits for Pi to become idle; Ctrl+Option+O refuses busy account changes. Successful switching activates through the existing backend and refreshes subscription usage. Login remains Pi-owned (`/login`); create/rename/remove remain available in `/osdy-account`. Category navigation never changes profiles or credentials.
 - **Usage** shows the runtime's cached active Codex subscription quota (remaining-capacity bars and percentages, window, reset/fetch times) and the existing local history owner's recorded token/cache totals, cost gaps, and model detail. Select **Range: day/week/month** for the current local calendar period; toggle **Accounts: all/current** for local analytics (unmanaged when no valid current profile exists). Quota always belongs to the active account, not the analytics filter; local token/cost totals never become quota percentages. Select **Refresh quota and local history** explicitly; rendering and filters never fetch. Empty, loading, unavailable, and limited/incomplete coverage are reported honestly. Estimates are not billing or subscription quota. `/usage` and `/osdy-usage` remain unchanged.
 - **Esc** closes without undoing live or saved changes, except when cancelling a confirmation/input or returning from Account quota details. Account read-only queries are cancelled on Back/Esc, category exit or close; late results are ignored even if cancellation is not honored. Other in-flight operations still finish and are not claimed cancelled. Late results cannot replace a closed overlay or another category. On narrow terminals, categories and details share the viewport; use Tab to switch.
 
@@ -300,7 +311,7 @@ Before rename or removal, close this Pi process when it uses the target and **ma
 | Area | Included behavior |
 | --- | --- |
 | Themes | 23 built-in themes, including Osdy, Kanagawa, Dracula, Gruvbox, Nord, Rosé Pine, Daniela Cute, Halloween, Halloween Killer, Catppuccin, Matrix, Lucent Orange, and three Spider-Man-inspired palettes |
-| Header and mascot | Independently selectable `osdy-theme`/`neon` headers and `current`/`bts` mascots |
+| Header and mascot | Independently selectable `osdy-theme`/`neon` headers and `current`/`bts`/`osdy-halloween` mascots |
 | Messages | Native colored user cards without emojis and plain assistant Markdown with a separate assistant `🦝` row |
 | Input | Responsive auto editor by default, with selectable simple Pi-native or extended framed modes |
 | Status | Six activity labels with compact per-state glyphs and a shared theme-color pulse, responsive footer metrics, dynamic extension statuses, and Codex subscription quota with low-capacity emphasis |
@@ -366,10 +377,12 @@ Header and mascot choices are independent:
 | Element | Choices | Command |
 | --- | --- | --- |
 | Header | `osdy-theme` (default), `neon` | `/osdy-pi header osdy-theme|neon` |
-| Mascot | `current` (default), `bts` | `/osdy-pi mascot current|bts` |
+| Mascot | `current` (default), `bts`, `osdy-halloween` | `/osdy-pi mascot current\|bts\|osdy-halloween` |
 
 Both commands update the UI immediately. Add `status` instead of a choice to inspect the current selection. Choices persist in the global Osdy Pi settings across reloads and sessions. The old top-level style commands and `classic` header aliases are no longer registered.
 
+Choose **Osdy-Halloween** in `/osdyConfig` → **Mascot**, or run `/osdy-pi mascot osdy-halloween`. It dresses the same Current raccoon in ivory fangs and a high-collared dark/crimson vampire cape. Its glow follows the active theme's `accent`, `mdHeading`, and `mdLink` colors; no Halloween theme is required. Current remains the default, and Current/Bts artwork and version-1 settings compatibility are unchanged.
+
 The header also shows **`osdy-pi v<version>`** at the top right in the theme's accent color, read from the installed Osdy package—not Pi's host version or the workspace manifest. It uses an empty first row or adds a row without overwriting artwork; invalid/unreadable versions or labels wider than the terminal are omitted.
 
 In normal mode, the selected header and mascot render side by side when both fit. The Neon header derives its highlights from the active theme rather than using one fixed palette. Each mascot keeps its own tone map while its animated edge glow can resolve through theme colors. Header and mascot scaling remain independent, so any combination follows the same responsive layout rules.
@@ -400,21 +413,21 @@ The enabled state, editor mode, working-tree visibility preference, header, and
 
 | Group | Command |
 | --- | --- |
-| Control Center | `/osdyConfig` (interactive terminal UI) |
+| Control Center | **Ctrl+Option+O** or `/osdyConfig` (interactive terminal UI) |
 | Main | `/osdy-pi` |
 | Main | `/osdy-pi enable\|disable\|on\|off\|status` |
 | Accounts | `/osdy-account` |
 | TODO selection | `/osdy-pi todo on\|off\|status` |
 | Session TODO (opt-in, starting in 1.5.0) | `/todos` (read-only) |
 | Header | `/osdy-pi header osdy-theme\|neon\|status` |
-| Mascot | `/osdy-pi mascot current\|bts\|status` |
+| Mascot | `/osdy-pi mascot current\|bts\|osdy-halloween\|status` |
 | Editor | `/osdy-pi editor auto\|extended\|simple\|on\|off\|toggle\|status` |
 | Working tree | `/osdy-pi working-tree on\|off\|toggle\|status` |
 | Working tree | `/osdy-pi working-tree position top\|bottom\|status` |
 | Audio | `/osdy-pi sound setup` |
 | Diff | `/osdy-pi diff` |
 | Package | `/osdy-pi uninstall` |
-| Codex subscription | `/usage` |
+| Codex subscription | **Ctrl+Option+U** or `/usage` |
 | Local usage analytics (starting in 1.10.0) | `/osdy-usage` |
 
 `/osdy-pi uninstall` finds a unique Osdy Pi package in Pi's configured package list and asks you to confirm its exact source and user/project scope before calling Pi's `remove` command. Run it from a trusted project with interactive UI. Git registrations are checked against Pi's host/path identity; a local registration must point to this running extension's package root and have a matching manifest. Ambiguous or changed registrations, unrecognized sources, and cancelled confirmation remove nothing. It removes only the Pi package registration, not Osdy profiles, accounts, the globally installed CLI, or other packages. Restart Pi afterward to unload the extension. If no unique source is found, inspect `pi list` and use `pi remove <source> [-l]` manually.
@@ -423,13 +436,13 @@ The enabled state, editor mode, working-tree visibility preference, header, and
 
 ### Codex subscription usage
 
-Run `/usage` to open the Codex subscription dashboard for the active managed `openai-codex` profile and model. Press `r` to refresh; `esc` or `q` closes it. The dashboard shows these controls at the bottom.
+Press **Ctrl+Option+U** or run `/usage` to open the same Codex subscription dashboard for the active managed `openai-codex` profile and model. Press `r` to refresh; `esc` or `q` closes it. The dashboard shows these controls at the bottom.
 
 The main windows are labeled **Session** and **Weekly** (the API/domain remains primary/secondary). Their remaining-capacity bars are full at 100% remaining and empty at 0%; labels use the active theme's bold accent, Session uses the accent fill, Weekly uses `mdLink`, and empty segments are muted. The remaining percentage stays muted above 40%, changes to the theme's warning color at 40% or less, and changes to its error color at 15% or less. The same thresholds apply in the `/usage` dashboard and compact footer/editor quota bars. A double themed frame, section dividers, and spacing separate the display. Detail cards show each duration and relative, local, and UTC reset times. Plan, availability, credits/reset count, and additional buckets appear only when the service supplies them; absent optional values are omitted.
 
 At wide widths, the modal pairs the Session and Weekly detail cards. Below 72 content columns, cards and bars stack and account/model data wraps. The native footer and extended editor also show compact Session/Weekly remaining-capacity bars below model and thinking metadata whenever a current Codex snapshot exists. Wide widths combine those bars; narrow widths stack them. Additional buckets appear in `/usage` and the selected-profile Control Center quota view, not compact editor/footer bars.
 
-Active quota loads when an enabled session starts and refreshes when `/usage` opens or `r` is pressed. It also refreshes while idle on a **60-second** schedule, only after settings are loaded, with Osdy enabled, an interactive terminal UI, an `openai-codex` model selected, and no quota request already in flight. Automatic failures double the retry delay up to **10 minutes**; a successful automatic query restores the 60-second interval. This scheduler never polls stored profiles.
+Active quota loads when an enabled session starts and refreshes when **Ctrl+Option+U** or `/usage` opens the dashboard, or `r` is pressed. It also refreshes while idle on a **60-second** schedule, only after settings are loaded, with Osdy enabled, an interactive terminal UI, an `openai-codex` model selected, and no quota request already in flight. Automatic failures double the retry delay up to **10 minutes**; a successful automatic query restores the 60-second interval. This scheduler never polls stored profiles.
 
 Automatic refresh retains the last snapshot during loading and on error, so an older reading can remain visible until a successful query replaces it. Manual refresh clears the previous snapshot before authentication resolves and supersedes any in-flight automatic request. Account switching refreshes active quota through that same clearing path. Session replacement and shutdown stop the timer, cancel pending requests and clear quota state; late results are ignored.
 
@@ -604,13 +617,14 @@ This launches `pi` from `PATH`, loads this checkout with `-e`, and uses `.pi-dev
 The explicit argument bypasses the launcher's default-account activation; Pi's `--no-session` disables session persistence, **not settings writes or provider access**.
 An isolated agent directory does **not** make custom audio paths or real provider accounts harmless. Use intentional disposable test profiles/files for profile writes, switches, default confirmations, and audio tests; do not assume an isolated account store makes real credentials safe.
 
-- Open `/osdyConfig` in regular and fullscreen Pi. Check arrows/Home/End/Page Up/Down, Tab or left/right, Enter, and Esc; shrink and restore the terminal, checking both panes remain reachable.
+- Check `/hotkeys` lists `ctrl+alt+o` and `ctrl+alt+u`. On macOS, configure Option to send Alt/Meta and verify the terminal supports Ctrl+Alt chords; actual Ctrl+Option delivery still needs a hardware check. Open both **Ctrl+Option+O** and `/osdyConfig` in regular and fullscreen Pi (Ctrl+Alt+O on other platforms); use the slash command if the chord is intercepted or unsupported. Check arrows/Home/End/Page Up/Down, Tab or left/right, Enter, and Esc; shrink and restore the terminal, checking both panes remain reachable. With disposable TODO/Agents settings, verify Ctrl+Option+O asks for manual `/reload` only after closing, while `/osdyConfig` reloads automatically.
 - In disposable settings, change a visual preference, wait for **Saved globally**, close and reopen, then reload/restart to check persistence. Esc does not undo changes; distinguish save/application errors from success.
-- Account (manual): with disposable profiles only, check Cancel-first switch/set-default/clear-default confirmations, Esc cancellation, idle switching, and current/default labels. Check one row per profile with **v/s/d/c** context actions and **Enter** usage fallback, without a second action list. From **v** quota details, check eligible **s Switch** opens the same Cancel-first confirmation, with blank separators between the title/effects, choices, and instructions; Cancel/Esc must retain the quota view and scroll position. Check gaps yield on short viewports without hiding safety content or enabling acceptance when the full confirmation cannot fit. Check remaining-capacity bars, **r Refresh**, **b Back/Esc** returning to the selected profile, long-view scrolling, no query on navigation, no stored-profile polling, and cancellation on exit. Create/rename/remove stay in `/osdy-account`, login in `/login`.
+- Account (manual): with disposable profiles only, check Cancel-first switch/set-default/clear-default confirmations, Esc cancellation, idle switching, and current/default labels. Verify Ctrl+Option+O refuses all three changes while busy, succeeds when idle, and `/osdyConfig` still waits for idle. Check one row per profile with **v/s/d/c** context actions and **Enter** usage fallback, without a second action list. From **v** quota details, check eligible **s Switch** opens the same Cancel-first confirmation, with blank separators between the title/effects, choices, and instructions; Cancel/Esc must retain the quota view and scroll position. Check gaps yield on short viewports without hiding safety content or enabling acceptance when the full confirmation cannot fit. Check remaining-capacity bars, **r Refresh**, **b Back/Esc** returning to the selected profile, long-view scrolling, no query on navigation, no stored-profile polling, and cancellation on exit. Create/rename/remove stay in `/osdy-account`, login in `/login`.
+- Subscription quota (manual): compare **Ctrl+Option+U** and `/usage` (Ctrl+Alt+U on other platforms), including **r Refresh** and Esc/q closing. Verify actual terminal chord delivery; use `/usage` if intercepted or unsupported.
 - Usage (manual): check day/week/month and all/current filters, empty/unavailable/limited states, and explicit refresh. Authenticated quota and post-switch account correctness need an intentionally authorized live provider check; local estimates are not billing.
 - Sounds (manual): use disposable readable `.mp3`/`.wav` files to check configure, cancel, clear, and startup-flag precedence. Only choose **Test effective** when playback is intended; actual macOS/Windows playback still needs a live check.
 
-Live TUI appearance, real account switching/authenticated quota, and actual audio playback remain unverified; this checklist is not a recorded pass.
+The user confirmed physical Ctrl+Option+O and Ctrl+Option+U delivery on one Mac terminal; other terminals may intercept or not support these chords. Live TUI appearance, real account switching/authenticated quota, and actual audio playback remain unverified; this checklist is not a recorded full pass.
 
 Install a local checkout into Pi with:
 

package/extensions/osdy-pi/account-profiles.test.ts

@@ -460,12 +460,14 @@ void test("manages profile rename and permanent removal prompts through authorit
 
 void test("switches in place after idle without spawning or shutting down", async () => {
 	const events: string[] = [];
+	let idle = false;
 	await switchAccountInPlace(
 		{
-			isIdle: () => false,
+			isIdle: () => idle,
 			waitForIdle: () =>
 				Promise.resolve().then(() => {
 					events.push("idle");
+					idle = true;
 				}),
 			ui: {
 				notify: (message: string) => events.push(message),
@@ -495,6 +497,46 @@ void test("switches in place after idle without spawning or shutting down", asyn
 	]);
 });
 
+void test("base-context account switches require idle without a command wait hook", async () => {
+	const previous = process.env.OSDY_PI_PROFILE_NAME;
+	try {
+		for (const idle of [false, true]) {
+			process.env.OSDY_PI_PROFILE_NAME = "personal";
+			const events: string[] = [];
+			const notices: string[] = [];
+			const ctx = { isIdle: () => idle, ui: {
+				notify: (message: string) => notices.push(message),
+				select: () => Promise.resolve(undefined), input: () => Promise.resolve(undefined),
+			} };
+			assert.equal("waitForIdle" in ctx, false);
+			const switched = await switchAccountInPlace(ctx, "work",
+				profile => { events.push(`activate:${profile}`); return Promise.resolve(); },
+				() => { events.push("refresh"); return Promise.resolve(); },
+				() => { events.push("render"); });
+			assert.equal(switched, idle);
+			assert.deepEqual(events, idle ? ["activate:work", "render", "refresh"] : []);
+			assert.equal(process.env.OSDY_PI_PROFILE_NAME, idle ? "work" : "personal");
+			assert.match(notices.join(" "), idle ? /Switched to work/ : /require Pi to be idle/);
+		}
+	} finally {
+		if (previous === undefined) delete process.env.OSDY_PI_PROFILE_NAME;
+		else process.env.OSDY_PI_PROFILE_NAME = previous;
+	}
+});
+
+void test("a command wait hook cannot activate an account if Pi remains busy", async () => {
+	const events: string[] = [];
+	const switched = await switchAccountInPlace({ isIdle: () => false,
+		waitForIdle: () => { events.push("wait"); return Promise.resolve(); },
+		ui: { notify: message => events.push(message), select: () => Promise.resolve(undefined), input: () => Promise.resolve(undefined) },
+	}, "work", () => { events.push("activate"); return Promise.resolve(); },
+	() => { events.push("refresh"); return Promise.resolve(); }, () => { events.push("render"); });
+	assert.equal(switched, false);
+	assert.equal(events[0], "wait");
+	assert.match(events[1] ?? "", /require Pi to be idle/);
+	assert.equal(events.length, 2);
+});
+
 void test("keeps the current account when in-place activation fails", async () => {
 	const notices: string[] = [];
 	let renderRequested = false;

package/extensions/osdy-pi/account-profiles.ts

@@ -12,10 +12,9 @@ function sameProfile(left: string | undefined, right: string | undefined): boole
 	return left?.toLowerCase() === right?.toLowerCase();
 }
 
-export type AccountContext = Pick<
-	ExtensionCommandContext,
-	"isIdle" | "waitForIdle"
-> & {
+export type AccountContext = Pick<ExtensionContext, "isIdle"> & {
+	/** Only slash-command contexts can wait; base shortcut contexts must already be idle. */
+	waitForIdle?: ExtensionCommandContext["waitForIdle"];
 	shutdown?: ExtensionCommandContext["shutdown"];
 	sessionManager?: Pick<
 		ExtensionCommandContext["sessionManager"],
@@ -128,7 +127,14 @@ export async function switchAccountInPlace(
 		);
 		return false;
 	}
-	if (!ctx.isIdle()) await ctx.waitForIdle();
+	if (!ctx.isIdle() && ctx.waitForIdle) await ctx.waitForIdle();
+	if (!ctx.isIdle()) {
+		ctx.ui.notify(
+			"Account changes require Pi to be idle. Wait for active work to finish and retry.",
+			"warning",
+		);
+		return false;
+	}
 	try {
 		await activate(profile);
 	} catch {

package/extensions/osdy-pi/animation.test.ts

@@ -2,7 +2,7 @@ import assert from "node:assert/strict";
 import { registerHooks } from "node:module";
 import test from "node:test";
 // @ts-expect-error Node's native TypeScript runner resolves test-only TypeScript source imports.
-import { HEADER_VARIANTS } from "./constants.ts";
+import { HEADER_VARIANTS, mascotForChoice } from "./constants.ts";
 import type { SimpleTheme } from "./types.js";
 
 registerHooks({
@@ -19,7 +19,7 @@ registerHooks({
 });
 
 // @ts-expect-error Node's native TypeScript runner resolves test-only TypeScript source imports.
-const { colorAsciiCharacter } = await import("./animation.ts");
+const { colorAsciiCharacter, animateAsciiLineWithToneMap } = await import("./animation.ts");
 
 class RecordingTheme implements SimpleTheme {
 	readonly calls: Array<{ name: string; text: string }> = [];
@@ -74,6 +74,33 @@ void test("Neon renders main and dark pink through bounded accent styling", () =
 	assert.equal(`${main}${dark.join("")}`.includes("\u001B[48;"), false);
 });
 
+void test("Osdy-Halloween resolves edge glow against the live theme in static and animated frames", () => {
+	const { art, tonePalette } = mascotForChoice("osdy-halloween");
+	assert.deepEqual([tonePalette.p, tonePalette.c, tonePalette.v], ["accent", "mdHeading", "mdLink"]);
+	let themeId = "first";
+	const calls: string[] = [];
+	const theme: SimpleTheme = { fg(name, text) { calls.push(name); return `<${themeId}:${name}:${text}>`; } };
+	for (const style of ["static", "animated"] as const) {
+		for (const frame of [0, 7, 28]) {
+			const render = () => art.mascot.map((line, row) =>
+				animateAsciiLineWithToneMap(line, art.toneMap[row] ?? "", row, frame, theme, tonePalette, style)).join("\n");
+			themeId = "first";
+			const first = render();
+			themeId = "second";
+			const second = render();
+			assert.notEqual(first, second);
+			assert.equal(first.replaceAll("first:", "second:"), second, "only theme-resolved colors change");
+			assert.ok(second.includes("\u001B[38;2;"), "fixed body/costume foreground colors remain");
+			assert.ok(!second.includes("\u001B[48;"), "transparent background");
+		}
+	}
+	assert.deepEqual([...new Set(calls)].sort(), ["accent", "mdHeading", "mdLink"].sort());
+	for (let row = 0; row < art.mascot.length; row++) {
+		const occupied = Array.from(art.mascot[row] ?? "").flatMap((glyph, column) => glyph === " " ? [] : [column]);
+		assert.deepEqual(occupied.slice(-3).reverse().map((column) => art.toneMap[row]?.[column]), ["p", "c", "v"].slice(0, occupied.length));
+	}
+});
+
 void test("Neon never maps a tone to mdHeading or mdLink", () => {
 	for (const color of Object.values(neonPalette())) {
 		if (typeof color === "string") {

package/extensions/osdy-pi/constants.ts

@@ -457,6 +457,52 @@ function addRightEdgeGlow(art: MascotArt): MascotArt {
   };
 }
 
+// Transparent overlay at Current's mouth/shoulders (row 17 onward).
+// ▓ = dark cape, ▒ = crimson lining. Keep the face and tail.
+const VAMPIRE_COSTUME = [
+  "        ▓                                     ▓",
+  "         ▓▒▓                               ▓▒▒▓",
+  "          ▓▒▒▒▓                        ▓▒▒▒▒▓",
+  "           ▓▒▒▒▒▒▒▓                 ▓▒▒▒▒▒▒▓",
+  "            ▓▓▒▒▒▒▒▓▓             ▓▓▒▒▒▒▒▓▓",
+  "            ▓▓▓▒▒▒▓▓             ▓▓▒▒▒▓▓▓",
+  "           ▓▓▓▒▒▒▓▓               ▓▓▒▒▓▓▓",
+  "          ▓▓▓▒▒▒▓▓                ▓▓▒▒▒▓▓",
+  "         ▓▓▓▒▒▒▓▓                  ▓▓▒▒▓▓",
+  "        ▓▓▓▒▒▒▓▓                   ▓▓▒▒▓▓",
+  "       ▓▓▓▒▒▒▓▓                     ▓▓▒▒▓▓",
+  "      ▓▓▓▒▒▒▓▓                      ▓▓▒▒▓▓",
+  "     ▓▓▓▒▒▒▓▓                        ▓▓▒▒▓▓",
+  "    ▓▓▓▓▒▒▓▓                         ▓▓▒▒▓▓",
+  "   ▓▓▓▓▒▒▓▓                           ▓▓▒▓▓",
+  "    ▓▓▓▓▓▓                             ▓▓▓",
+] as const;
+
+function addVampireCostume(art: MascotArt): MascotArt {
+  const rows = art.mascot.map((line, row) => {
+    const glyphs = Array.from(line);
+    // Reserve b for lining; retain the few original eye glints in ivory h.
+    const tones = Array.from((art.toneMap[row] ?? "").replaceAll("b", "h"));
+    for (const [column, glyph] of Array.from(VAMPIRE_COSTUME[row - 17] ?? "").entries()) {
+      if (glyph === " ") continue;
+      glyphs[column] = glyph;
+      if (glyph === "▓") tones[column] = "d";
+      else if (glyph === "▒") tones[column] = "b";
+      else tones[column] = "h";
+    }
+    return { mascot: glyphs.join(""), toneMap: tones.join("") };
+  });
+  return { mascot: rows.map((row) => row.mascot), toneMap: rows.map((row) => row.toneMap) };
+}
+
+const HALLOWEEN_MASCOT_TONES: MascotTonePalette = {
+  ...HTML_MASCOT_TONES,
+  b: "#9F2342",
+};
+const HALLOWEEN_MASCOT = addRightEdgeGlow(addVampireCostume({
+  mascot: HTML_MASCOT,
+  toneMap: HTML_MASCOT_MAP,
+}));
 const ROSE_MASCOT = addRightEdgeGlow({
   mascot: HTML_MASCOT,
   toneMap: HTML_MASCOT_MAP,
@@ -468,6 +514,7 @@ const BTS_MASCOT_ART = addRightEdgeGlow({
 for (const [art, palette] of [
   [ROSE_MASCOT, HTML_MASCOT_TONES],
   [BTS_MASCOT_ART, BTS_MASCOT_TONES],
+  [HALLOWEEN_MASCOT, HALLOWEEN_MASCOT_TONES],
 ] as const) {
   assertRawHexPalette(palette);
   assertMascotStructure(art, palette);
@@ -481,6 +528,7 @@ export type MascotConfig = {
 export const MASCOTS: Record<MascotChoice, MascotConfig> = {
   current: { art: ROSE_MASCOT, tonePalette: HTML_MASCOT_TONES },
   bts: { art: BTS_MASCOT_ART, tonePalette: BTS_MASCOT_TONES },
+  "osdy-halloween": { art: HALLOWEEN_MASCOT, tonePalette: HALLOWEEN_MASCOT_TONES },
 };
 
 export function mascotForChoice(choice: MascotChoice): MascotConfig {

package/extensions/osdy-pi/control-center-account.test.ts

@@ -138,6 +138,87 @@ void test("Bound Account reuses idle switching, quota refresh, and authoritative
 	}
 });
 
+void test("Bound base-context Account mutations refuse busy Pi and work when idle", async () => {
+	const previous = process.env.OSDY_PI_PROFILE_NAME;
+	try {
+		for (const idle of [false, true]) {
+			process.env.OSDY_PI_PROFILE_NAME = "personal";
+			const events: string[] = [];
+			const commands: string[][] = [];
+			const ctx = { isIdle: () => idle, ui: {
+				notify: (text: string) => events.push(text),
+				select: () => Promise.reject(new Error("dialog forbidden")), input: () => Promise.reject(new Error("dialog forbidden")),
+			} };
+			assert.equal("waitForIdle" in ctx, false);
+			const service = bindControlCenterAccount(ctx,
+				() => { events.push("refresh"); return Promise.resolve(); }, () => { events.push("render"); },
+				{ profiles: () => Promise.resolve(["work", "personal"]),
+					activate: name => { events.push(`activate:${name}`); return Promise.resolve(); },
+					run: args => { commands.push(args); return Promise.resolve({ code: 0, stdout: "No default account.", stderr: "" }); } });
+			assert.equal((await service.apply({ kind: "account-switch", profile: "work" })).failed, !idle);
+			assert.equal((await service.apply({ kind: "account-default", profile: "work" })).failed, !idle);
+			assert.equal((await service.apply({ kind: "account-default", profile: undefined })).failed, !idle);
+			assert.deepEqual(commands, idle ? [["account", "default", "work"], ["account", "default", "--clear"]] : []);
+			assert.equal(events.includes("activate:work"), idle);
+			assert.equal(events.includes("render"), idle);
+			assert.equal(events.includes("refresh"), idle);
+			assert.equal(process.env.OSDY_PI_PROFILE_NAME, idle ? "work" : "personal");
+		}
+	} finally {
+		if (previous === undefined) delete process.env.OSDY_PI_PROFILE_NAME;
+		else process.env.OSDY_PI_PROFILE_NAME = previous;
+	}
+});
+
+void test("Bound command Account defaults wait for idle and recheck idle and runtime freshness", async () => {
+	for (const outcome of ["idle", "busy", "stale", "rejected"] as const) {
+		let idle = false;
+		let current = true;
+		const events: string[] = [];
+		const service = bindControlCenterAccount({ isIdle: () => idle,
+			waitForIdle: () => {
+				events.push("wait");
+				idle = outcome !== "busy";
+				current = outcome !== "stale";
+				return outcome === "rejected" ? Promise.reject(new Error("wait failed")) : Promise.resolve();
+			},
+			ui: { notify: () => {}, select: () => Promise.resolve(undefined), input: () => Promise.resolve(undefined) },
+		}, () => { throw new Error("refresh forbidden"); }, () => {},
+		{ profiles: () => Promise.resolve(["work"]), run: args => {
+			events.push(args.join(" ")); return Promise.resolve({ code: 0, stdout: "", stderr: "" });
+		} }, { isCurrent: () => current });
+		assert.equal((await service.apply({ kind: "account-default", profile: "work" })).failed, outcome !== "idle");
+		assert.deepEqual(events, outcome === "idle" ? ["wait", "account default work"] : ["wait"]);
+	}
+});
+
+void test("Bound base-context Account rechecks idle after asynchronous profile validation", async () => {
+	const previous = process.env.OSDY_PI_PROFILE_NAME;
+	process.env.OSDY_PI_PROFILE_NAME = "personal";
+	let idle = true;
+	let finish: (profiles: string[]) => void = () => {};
+	const events: string[] = [];
+	const service = bindControlCenterAccount({ isIdle: () => idle,
+		ui: { notify: () => {}, select: () => Promise.resolve(undefined), input: () => Promise.resolve(undefined) },
+	}, () => { events.push("refresh"); return Promise.resolve(); }, () => { events.push("render"); },
+	{ profiles: () => new Promise(resolve => { finish = resolve; }),
+		activate: () => { events.push("activate"); return Promise.resolve(); },
+		run: () => { events.push("default"); return Promise.resolve({ code: 0, stdout: "", stderr: "" }); } });
+	try {
+		for (const kind of ["account-switch", "account-default"] as const) {
+			idle = true;
+			const applying = service.apply({ kind, profile: "work" });
+			idle = false;
+			finish(["work"]);
+			assert.equal((await applying).failed, true);
+		}
+		assert.deepEqual(events, []);
+	} finally {
+		if (previous === undefined) delete process.env.OSDY_PI_PROFILE_NAME;
+		else process.env.OSDY_PI_PROFILE_NAME = previous;
+	}
+});
+
 void test("Bound Account validates live external active names without rendering unsafe metadata", async () => {
 	const previous = process.env.OSDY_PI_PROFILE_NAME;
 	const service = bindControlCenterAccount({ isIdle: () => true, waitForIdle: () => Promise.resolve(),

package/extensions/osdy-pi/control-center-account.ts

@@ -136,7 +136,7 @@ export function bindControlCenterAccount(ctx: AccountContext, refreshUsage: () =
 			await backend.activate!(name);
 		}, refreshUsage, requestRender) : Promise.resolve(false),
 		setDefault: async profile => {
-			if (!ctx.isIdle()) await ctx.waitForIdle();
+			if (!ctx.isIdle() && ctx.waitForIdle) await ctx.waitForIdle();
 			if (!(options.isCurrent?.() ?? true) || !ctx.isIdle()) return false;
 			return (await backend.run(["account", "default", profile ?? "--clear"])).code === 0;
 		},

package/extensions/osdy-pi/control-center-preferences.test.ts

@@ -21,7 +21,7 @@ const snapshot: VisualPreferenceSnapshot = { enabled: true, headerVariant: "osdy
 void test("preference rows expose every catalog value and exactly one current indicator", () => {
 	for (const [category, field, values] of [
 		["Header", "headerVariant", ["osdy-theme", "neon"]],
-		["Mascot", "mascot", ["current", "bts"]],
+		["Mascot", "mascot", ["current", "bts", "osdy-halloween"]],
 		["Editor", "editorMode", ["auto", "extended", "simple"]],
 	] as const) {
 		for (const value of values) {
@@ -30,7 +30,9 @@ void test("preference rows expose every catalog value and exactly one current in
 			assert.deepEqual(detail.rows.map((row) => "value" in row.action ? row.action.value : undefined), values);
 			assert.equal(detail.rows.filter((row) => row.current).length, 1);
 			assert.equal(detail.rows.find((row) => row.current)?.action.kind, category.toLowerCase());
-			assert.match(detail.summary, new RegExp(`Current: ${value === "bts" ? "Bts" : value}`));
+			const label = value === "bts" ? "Bts" : value === "osdy-halloween" ? "Osdy-Halloween" : value;
+			assert.match(detail.summary, new RegExp(`Current: ${label}`));
+			assert.equal(detail.rows.find((row) => row.current)?.label, label);
 		}
 	}
 });

package/extensions/osdy-pi/control-center-preferences.ts

@@ -17,7 +17,11 @@ export interface ControlCenterPreferences {
 }
 
 export function visualPreferenceLabel(action: VisualPreferenceAction): string {
-	return action.kind === "mascot" && action.value === "bts" ? "Bts" : action.value;
+	if (action.kind === "mascot") {
+		if (action.value === "bts") return "Bts";
+		if (action.value === "osdy-halloween") return "Osdy-Halloween";
+	}
+	return action.value;
 }
 
 /** Explicit view adaptation only; application and persistence belong to runtime. */

package/extensions/osdy-pi/control-center.test.ts

@@ -336,7 +336,7 @@ void test("inline preferences show all supported values and live current/effecti
 	const f = preferenceFixture();
 	for (const [category, choices, current] of [
 		["Header", ["osdy-theme", "neon"], "osdy-theme"],
-		["Mascot", ["current", "Bts"], "current"],
+		["Mascot", ["current", "Bts", "Osdy-Halloween"], "current"],
 		["Editor", ["auto", "extended", "simple"], "auto"],
 	] as const) {
 		f.panel.handleInput(down);
@@ -350,6 +350,20 @@ void test("inline preferences show all supported values and live current/effecti
 	assert.deepEqual(f.applied, []);
 });
 
+void test("Mascot selects Osdy-Halloween and reports its exact saved label", async () => {
+	const f = preferenceFixture();
+	f.panel.handleInput(down);
+	f.panel.handleInput(down);
+	f.panel.handleInput(right);
+	f.panel.handleInput("\x1b[F");
+	f.panel.handleInput("\r");
+	assert.deepEqual(f.applied, [{ kind: "mascot", value: "osdy-halloween" }]);
+	assert.match(f.panel.render(100).join("\n"), /Saving.*Osdy-Halloween/);
+	f.complete(true);
+	await Promise.resolve();
+	assert.match(f.panel.render(100).join("\n"), /Saved globally: Osdy-Halloween/);
+});
+
 void test("changing categories resets selection to their current row, even after a longer theme list", () => {
 	const f = preferenceFixture();
 	f.panel.handleInput(right);
@@ -427,7 +441,7 @@ void test("inline preference rendering stays bounded at narrow widths and differ
 		f.panel.handleInput(down);
 		f.panel.handleInput(right);
 		f.panel.handleInput("\x1b[F");
-		assert.match(f.panel.render(48).join("\n"), new RegExp(`> ${["neon", "Bts", "simple"][category]}`));
+		assert.match(f.panel.render(48).join("\n"), new RegExp(`> ${["neon", "Osdy-Halloween", "simple"][category]}`));
 		for (const height of [1, 4, 7, 9, 18]) {
 			f.resize(height);
 			for (const width of [1, 8, 24, 48, 80]) {

package/extensions/osdy-pi/editor-settings.test.ts

@@ -97,7 +97,7 @@ void test("editor settings normalize only supported versioned modes", () => {
 });
 
 void test("mascot choices preserve the version-one current default, migrate raccoon to Bts, and persist Bts", async () => {
-	assert.deepEqual(MASCOT_CHOICES, ["current", "bts"]);
+	assert.deepEqual(MASCOT_CHOICES, ["current", "bts", "osdy-halloween"]);
 	assert.equal(
 		normalizeEditorSettings({ version: 1, mascot: "invalid" }).mascot,
 		"current",
@@ -129,6 +129,18 @@ void test("mascot choices preserve the version-one current default, migrate racc
 	assert.equal((await store.load()).mascot, "bts");
 });
 
+void test("Osdy-Halloween round-trips through a fresh version-one settings store", async () => {
+	const fileSystem = new MemoryEditorSettingsFileSystem();
+	const path = "/agent/extensions/osdy-pi/settings.json";
+	const settings = normalizeEditorSettings({ version: 1, mascot: "osdy-halloween" });
+	assert.equal(settings.mascot, "osdy-halloween");
+	await createEditorSettingsStore(path, fileSystem).save(settings);
+	const persisted: unknown = JSON.parse(fileSystem.content ?? "{}");
+	assert.deepEqual(persisted, { ...settings, version: 1 });
+	assert.deepEqual(await createEditorSettingsStore(path, fileSystem).load(), settings);
+	assert.equal(normalizeEditorSettings({ version: 2, mascot: "osdy-halloween" }).mascot, "current");
+});
+
 void test("enabled defaults safely and persists globally", async () => {
 	assert.equal(
 		normalizeEditorSettings({ version: 1, editorMode: "simple" }).enabled,