privateer-agent 0.12.26 → 0.12.28

package/bin/privateer-launch.mjs

@@ -64,6 +64,38 @@ function sweepLegacyShims() {
   }
 }
 
+// Pi's shell tools spill oversized command output to `$TMPDIR/pi-{bash,powershell,
+// output}-<hex>.log` and hand the model the path — a good design, with no other half:
+// NOTHING in Pi ever deletes them. Two `grep -rn` calls that wandered into node_modules
+// left 630MB of minified JS in one developer's tmpdir, inside a 640MB/22-file pile that
+// had been accumulating for weeks. macOS clears /var/folders only on its own schedule
+// and Linux distros vary, so on a long-lived machine this is simply a leak.
+//
+// A day is the useful window: the path is only ever quoted into a live session, so a log
+// outlives its usefulness the moment that session ends. Silent and best-effort — the acp
+// branch's stdout is a JSON-RPC stream, and a tmpdir we can't read is not a launch
+// problem. Name-matched before stat so the common case is one readdir.
+const BASH_LOG_MAX_AGE_MS = 24 * 60 * 60 * 1000;
+const BASH_LOG_RE = /^pi-(?:bash|powershell|output)-[0-9a-f]{16}\.log$/;
+
+function sweepBashLogs() {
+  try {
+    const dir = os.tmpdir();
+    const cutoff = Date.now() - BASH_LOG_MAX_AGE_MS;
+    for (const name of fs.readdirSync(dir)) {
+      if (!BASH_LOG_RE.test(name)) continue;
+      const file = path.join(dir, name);
+      try {
+        if (fs.statSync(file).mtimeMs < cutoff) fs.rmSync(file, { force: true });
+      } catch {
+        /* raced with another session, or not ours to delete — either way, skip it. */
+      }
+    }
+  } catch {
+    /* unreadable tmpdir; the logs stay. */
+  }
+}
+
 // --- bundle detection ------------------------------------------------------
 // A self-contained bundle ships its own pinned Node at "$REPO/node[.exe]" plus a
 // BUNDLE_INFO.json marker (built by scripts/build-bundle.mjs). When present we use
@@ -279,6 +311,7 @@ if (sub === "update") {
 // `daemon` is a hidden back-compat alias for the pre-rename command name.
 else if (sub === "harbor" || sub === "daemon") {
   sweepLegacyShims(); // a harbor-only machine upgrades too — see the function's note
+  sweepBashLogs();
   const nodeArgs = fs.existsSync(ENV_FILE) ? [`--env-file=${ENV_FILE}`] : [];
   // A resident background process, stopped by launchd/systemd/scripts with a plain
   // `kill` — which reaches only this launcher. See runToCompletion.
@@ -304,6 +337,7 @@ else if (sub === "verify") {
 // stray stdout line breaks the JSON-RPC stream and the host disconnects.
 else if (sub === "acp") {
   sweepLegacyShims(); // silent: only ever removes files
+  sweepBashLogs(); // silent too
   const nodeArgs = fs.existsSync(ENV_FILE) ? [`--env-file=${ENV_FILE}`] : [];
   // Long-lived and driven over stdio by an editor, which stops it by terminating
   // the process rather than by a keystroke. Same leak, same fix.
@@ -329,6 +363,7 @@ else {
   // to drop one, and clear out any shim an older release left behind.
   fs.mkdirSync(EXT_DIR, { recursive: true });
   sweepLegacyShims();
+  sweepBashLogs();
 
   // Resolve every moat entry point to an absolute path, to be passed to Pi as `-e`.
   // Dependencies resolve by walking the node_modules chain, NOT as REPO/node_modules: npm

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "privateer-agent",
-  "version": "0.12.26",
+  "version": "0.12.28",
   "description": "Privacy-first terminal coding agent — bring your own model across 20 providers (Anthropic, OpenAI, OpenRouter, Google, local Ollama…). Safe-by-default permissions, MCP, sub-agents, workflows, and verifiable TEE inference. Built on the Pi toolkit.",
   "type": "module",
   "license": "MIT",
@@ -69,9 +69,9 @@
     "node": ">=22.19.0"
   },
   "dependencies": {
-    "@earendil-works/pi-ai": "0.84.1",
-    "@earendil-works/pi-coding-agent": "0.84.1",
-    "@earendil-works/pi-tui": "0.84.1",
+    "@earendil-works/pi-ai": "0.84.4",
+    "@earendil-works/pi-coding-agent": "0.84.4",
+    "@earendil-works/pi-tui": "0.84.4",
     "@juicesharp/rpiv-ask-user-question": "2.2.0",
     "@juicesharp/rpiv-web-tools": "1.20.0",
     "@noble/ciphers": "2.2.0",
@@ -80,6 +80,7 @@
     "@phala/dcap-qvl": "0.5.2",
     "@zed-industries/agent-client-protocol": "0.4.5",
     "patch-package": "8.0.1",
+    "pi-background-tasks": "2.4.2",
     "pi-mcp-adapter": "2.11.0",
     "pi-privacy": "0.13.0",
     "pi-subagents": "0.34.0",

package/patches/{@earendil-works+pi-coding-agent+0.84.1.patch → @earendil-works+pi-coding-agent+0.84.4.patch}

@@ -1,8 +1,8 @@
 diff --git a/node_modules/@earendil-works/pi-coding-agent/dist/config.js b/node_modules/@earendil-works/pi-coding-agent/dist/config.js
-index 4600b23..075ecae 100644
+index f04269f..536e030 100644
 --- a/node_modules/@earendil-works/pi-coding-agent/dist/config.js
 +++ b/node_modules/@earendil-works/pi-coding-agent/dist/config.js
-@@ -393,6 +393,64 @@ export const APP_NAME = piConfigName || "pi";
+@@ -401,6 +401,64 @@ export const APP_NAME = piConfigName || "pi";
  export const APP_TITLE = piConfigName ? APP_NAME : "π";
  export const CONFIG_DIR_NAME = pkg.piConfig?.configDir || ".pi";
  export const VERSION = pkg.version || "0.0.0";
@@ -68,7 +68,7 @@ index 4600b23..075ecae 100644
  export const ENV_AGENT_DIR = `${APP_NAME.toUpperCase()}_CODING_AGENT_DIR`;
  export const ENV_SESSION_DIR = `${APP_NAME.toUpperCase()}_CODING_AGENT_SESSION_DIR`;
 diff --git a/node_modules/@earendil-works/pi-coding-agent/dist/core/agent-session.js b/node_modules/@earendil-works/pi-coding-agent/dist/core/agent-session.js
-index ce8a9a2..679e584 100644
+index fd82b71..5e0821c 100644
 --- a/node_modules/@earendil-works/pi-coding-agent/dist/core/agent-session.js
 +++ b/node_modules/@earendil-works/pi-coding-agent/dist/core/agent-session.js
 @@ -38,6 +38,111 @@ import { createLocalBashOperations } from "./tools/bash.js";
@@ -207,7 +207,7 @@ index ce8a9a2..679e584 100644
              throw new Error(`Authentication failed for "${model.provider}". ` +
                  `Credentials may have expired or network is unavailable. ` +
                  `Run '/login ${model.provider}' to re-authenticate.`);
-@@ -360,6 +475,16 @@ export class AgentSession {
+@@ -380,6 +495,16 @@ export class AgentSession {
                  }
              }
          }
@@ -224,7 +224,7 @@ index ce8a9a2..679e584 100644
          // Emit to extensions first
          await this._emitExtensionEvent(event);
          // Notify all listeners
-@@ -772,6 +897,33 @@ export class AgentSession {
+@@ -801,6 +926,33 @@ export class AgentSession {
                  finalError: msg.errorMessage,
              });
              this._retryAttempt = 0;
@@ -258,7 +258,7 @@ index ce8a9a2..679e584 100644
          }
          if (await this._checkCompaction(msg)) {
              return true;
-@@ -852,6 +1004,14 @@ export class AgentSession {
+@@ -882,6 +1034,14 @@ export class AgentSession {
              if (!hasConfiguredAuth) {
                  const isOAuth = this._modelRuntime.isUsingOAuth(this.model.provider);
                  if (isOAuth) {
@@ -273,7 +273,7 @@ index ce8a9a2..679e584 100644
                      throw new Error(`Authentication failed for "${this.model.provider}". ` +
                          `Credentials may have expired or network is unavailable. ` +
                          `Run '/login ${this.model.provider}' to re-authenticate.`);
-@@ -861,7 +1021,13 @@ export class AgentSession {
+@@ -891,7 +1051,13 @@ export class AgentSession {
              // Check if we need to compact before sending (catches aborted responses).
              // The user's new prompt is sent below, so do not call agent.continue() here.
              const lastAssistant = this._findLastAssistantMessage();
@@ -288,7 +288,7 @@ index ce8a9a2..679e584 100644
                  await this._checkCompaction(lastAssistant, false);
              }
              // Build messages array (custom message if any, then user message)
-@@ -2084,6 +2250,27 @@ export class AgentSession {
+@@ -2242,6 +2408,27 @@ export class AgentSession {
          // Context overflow is handled by compaction, not retry.
          if (isContextOverflow(message, this.model?.contextWindow ?? 0))
              return false;
@@ -316,7 +316,7 @@ index ce8a9a2..679e584 100644
          return isRetryableAssistantError(message);
      }
      /**
-@@ -2129,7 +2316,11 @@ export class AgentSession {
+@@ -2287,7 +2474,11 @@ export class AgentSession {
              this._retryAttempt--;
              return false;
          }
@@ -375,7 +375,7 @@ index 197bccc..bc9ac3f 100644
  //# sourceMappingURL=auth-guidance.js.map
 
 diff --git a/node_modules/@earendil-works/pi-coding-agent/dist/core/extensions/loader.js b/node_modules/@earendil-works/pi-coding-agent/dist/core/extensions/loader.js
-index 324d30a..e613e92 100644
+index bb022d4..382ff2b 100644
 --- a/node_modules/@earendil-works/pi-coding-agent/dist/core/extensions/loader.js
 +++ b/node_modules/@earendil-works/pi-coding-agent/dist/core/extensions/loader.js
 @@ -18,7 +18,7 @@ import { createJiti } from "jiti/static";
@@ -387,7 +387,7 @@ index 324d30a..e613e92 100644
  // NOTE: This import works because loader.ts exports are NOT re-exported from index.ts,
  // avoiding a circular dependency. Extensions can import from @earendil-works/pi-coding-agent.
  import * as _bundledPiCodingAgent from "../../index.js";
-@@ -554,9 +554,23 @@ export async function discoverAndLoadExtensions(configuredPaths, cwd, agentDir =
+@@ -621,9 +621,23 @@ export async function discoverAndLoadExtensions(configuredPaths, cwd, agentDir =
              }
          }
      };
@@ -415,19 +415,19 @@ index 324d30a..e613e92 100644
      const globalExtDir = path.join(resolvedAgentDir, "extensions");
      addPaths(discoverExtensionsInDir(globalExtDir));
 diff --git a/node_modules/@earendil-works/pi-coding-agent/dist/core/package-manager.js b/node_modules/@earendil-works/pi-coding-agent/dist/core/package-manager.js
-index e806af3..9b00ebd 100644
+index 696e98c..7585930 100644
 --- a/node_modules/@earendil-works/pi-coding-agent/dist/core/package-manager.js
 +++ b/node_modules/@earendil-works/pi-coding-agent/dist/core/package-manager.js
-@@ -25,7 +25,7 @@ import { globSync } from "glob";
+@@ -24,7 +24,7 @@ import { basename, dirname, join, relative, resolve, sep } from "node:path";
  import ignore from "ignore";
  import { minimatch } from "minimatch";
- import { maxSatisfying, rcompare, satisfies, valid, validRange } from "semver";
+ import { gt, maxSatisfying, rcompare, satisfies, valid, validRange } from "semver";
 -import { CONFIG_DIR_NAME } from "../config.js";
 +import { projectConfigDirs, projectConfigWriteDir, resolveProjectConfigPath } from "../config.js";
  import { spawnProcess, spawnProcessSync } from "../utils/child-process.js";
  import { parseGitUrl } from "../utils/git.js";
  import { canonicalizePath, isLocalPath, markPathIgnoredByCloudSync, resolvePath } from "../utils/paths.js";
-@@ -698,23 +698,29 @@ export class DefaultPackageManager {
+@@ -711,23 +711,29 @@ export class DefaultPackageManager {
          const packageSources = this.dedupePackages(allPackages);
          await this.resolvePackageSources(packageSources, accumulator, onMissing);
          const globalBaseDir = this.agentDir;
@@ -464,7 +464,7 @@ index e806af3..9b00ebd 100644
          return this.toResolvedPaths(accumulator);
      }
      async resolveExtensionSources(sources, options) {
-@@ -1668,13 +1674,30 @@ export class DefaultPackageManager {
+@@ -1681,13 +1687,30 @@ export class DefaultPackageManager {
              writeFileSync(ignorePath, "*\n!.gitignore\n", "utf-8");
          }
      }
@@ -496,7 +496,7 @@ index e806af3..9b00ebd 100644
          }
          return join(this.agentDir, "npm");
      }
-@@ -1713,7 +1736,9 @@ export class DefaultPackageManager {
+@@ -1726,7 +1749,9 @@ export class DefaultPackageManager {
          }
          if (scope === "project") {
              this.assertProjectTrustedForScope(scope);
@@ -507,7 +507,7 @@ index e806af3..9b00ebd 100644
          }
          return join(this.agentDir, "npm", "node_modules", source.name);
      }
-@@ -1749,7 +1774,7 @@ export class DefaultPackageManager {
+@@ -1762,7 +1787,7 @@ export class DefaultPackageManager {
          }
          if (scope === "project") {
              this.assertProjectTrustedForScope(scope);
@@ -516,7 +516,7 @@ index e806af3..9b00ebd 100644
          }
          return join(this.agentDir, "git");
      }
-@@ -1772,7 +1797,7 @@ export class DefaultPackageManager {
+@@ -1785,7 +1810,7 @@ export class DefaultPackageManager {
      getBaseDirForScope(scope) {
          if (scope === "project") {
              this.assertProjectTrustedForScope(scope);
@@ -525,7 +525,7 @@ index e806af3..9b00ebd 100644
          }
          if (scope === "user") {
              return this.agentDir;
-@@ -1783,7 +1808,30 @@ export class DefaultPackageManager {
+@@ -1796,7 +1821,30 @@ export class DefaultPackageManager {
          return resolvePath(input, this.cwd, { homeDir: getHomeDir(), trim: true });
      }
      resolvePathFromBase(input, baseDir) {
@@ -557,7 +557,7 @@ index e806af3..9b00ebd 100644
      }
      collectPackageResources(packageRoot, accumulator, filter, metadata) {
          if (filter) {
-@@ -1928,19 +1976,24 @@ export class DefaultPackageManager {
+@@ -1936,19 +1984,24 @@ export class DefaultPackageManager {
              this.addResource(target, f, metadata, enabledPaths.has(f));
          }
      }
@@ -586,7 +586,7 @@ index e806af3..9b00ebd 100644
          const userOverrides = {
              extensions: (globalSettings.extensions ?? []),
              skills: (globalSettings.skills ?? []),
-@@ -1959,12 +2012,12 @@ export class DefaultPackageManager {
+@@ -1967,12 +2020,12 @@ export class DefaultPackageManager {
              prompts: join(globalBaseDir, "prompts"),
              themes: join(globalBaseDir, "themes"),
          };
@@ -605,7 +605,7 @@ index e806af3..9b00ebd 100644
          const userAgentsSkillsDir = join(getHomeDir(), ".agents", "skills");
          const projectTrusted = this.settingsManager.isProjectTrusted();
          const projectAgentsSkillDirs = projectTrusted
-@@ -1978,10 +2031,13 @@ export class DefaultPackageManager {
+@@ -1986,10 +2039,13 @@ export class DefaultPackageManager {
              }
          };
          if (projectTrusted) {
@@ -623,7 +623,7 @@ index e806af3..9b00ebd 100644
          }
          // Project skills from .agents/ (each with its own baseDir)
          for (const agentsSkillsDir of projectAgentsSkillDirs) {
-@@ -1993,8 +2049,11 @@ export class DefaultPackageManager {
+@@ -2001,8 +2057,11 @@ export class DefaultPackageManager {
              addResources("skills", collectAutoSkillEntries(agentsSkillsDir, "agents"), agentsMetadata, projectOverrides.skills, agentsBaseDir);
          }
          if (projectTrusted) {
@@ -638,17 +638,17 @@ index e806af3..9b00ebd 100644
          // User extensions from ~/.pi/agent/
          addResources("extensions", collectAutoExtensionEntries(userDirs.extensions), userMetadata, userOverrides.extensions, globalBaseDir);
 diff --git a/node_modules/@earendil-works/pi-coding-agent/dist/core/project-trust.js b/node_modules/@earendil-works/pi-coding-agent/dist/core/project-trust.js
-index c4f2509..a4402df 100644
+index 2f85768..328b27b 100644
 --- a/node_modules/@earendil-works/pi-coding-agent/dist/core/project-trust.js
 +++ b/node_modules/@earendil-works/pi-coding-agent/dist/core/project-trust.js
 @@ -1,8 +1,8 @@
--import { CONFIG_DIR_NAME } from "../config.js";
-+import { formatProjectConfigDirNames } from "../config.js";
+-import { APP_NAME, CONFIG_DIR_NAME } from "../config.js";
++import { APP_NAME, formatProjectConfigDirNames } from "../config.js";
  import { emitProjectTrustEvent } from "./extensions/runner.js";
  import { getProjectTrustOptions, hasTrustRequiringProjectResources, } from "./trust-manager.js";
  function formatProjectTrustPrompt(cwd) {
--    return `Trust project folder?\n${cwd}\n\nThis allows pi to load ${CONFIG_DIR_NAME} settings and resources, install missing project packages, and execute project extensions.`;
-+    return `Trust project folder?\n${cwd}\n\nThis allows pi to load ${formatProjectConfigDirNames()} settings and resources, install missing project packages, and execute project extensions.`;
+-    return `Trust project folder?\n${cwd}\n\nThis allows ${APP_NAME} to load ${CONFIG_DIR_NAME} settings and resources, install missing project packages, and execute project extensions.`;
++    return `Trust project folder?\n${cwd}\n\nThis allows ${APP_NAME} to load ${formatProjectConfigDirNames()} settings and resources, install missing project packages, and execute project extensions.`;
  }
  async function selectProjectTrustOption(cwd, ctx) {
      const options = getProjectTrustOptions(cwd, { includeSessionOnly: true });
@@ -696,7 +696,7 @@ index 3700c08..79cb85e 100644
      // 3. Load explicit prompt paths
      for (const rawPath of promptPaths) {
 diff --git a/node_modules/@earendil-works/pi-coding-agent/dist/core/resource-loader.js b/node_modules/@earendil-works/pi-coding-agent/dist/core/resource-loader.js
-index 97af6cd..74d5d52 100644
+index c5ed4d7..d9f50ae 100644
 --- a/node_modules/@earendil-works/pi-coding-agent/dist/core/resource-loader.js
 +++ b/node_modules/@earendil-works/pi-coding-agent/dist/core/resource-loader.js
 @@ -1,7 +1,7 @@
@@ -707,8 +707,8 @@ index 97af6cd..74d5d52 100644
 +import { findProjectConfigPath, projectConfigDirCandidates, projectConfigDirs } from "../config.js";
  import { loadThemeFromPath } from "../modes/interactive/theme/theme.js";
  import { canonicalizePath, isLocalPath, resolvePath } from "../utils/paths.js";
- import { createEventBus } from "./event-bus.js";
-@@ -624,12 +624,14 @@ export class DefaultResourceLoader {
+ import { stripBom } from "../utils/text.js";
+@@ -625,12 +625,14 @@ export class DefaultResourceLoader {
              join(this.agentDir, "themes"),
              join(this.agentDir, "extensions"),
          ];
@@ -729,7 +729,7 @@ index 97af6cd..74d5d52 100644
          for (const root of agentRoots) {
              if (this.isUnderPath(normalizedPath, root)) {
                  return { path: filePath, source: "local", scope: "user", origin: "top-level", baseDir: root };
-@@ -668,7 +670,11 @@ export class DefaultResourceLoader {
+@@ -669,7 +671,11 @@ export class DefaultResourceLoader {
          const themes = [];
          const diagnostics = [];
          if (includeDefaults) {
@@ -742,7 +742,7 @@ index 97af6cd..74d5d52 100644
              for (const dir of defaultDirs) {
                  this.loadThemesFromDir(dir, themes, diagnostics);
              }
-@@ -806,8 +812,9 @@ export class DefaultResourceLoader {
+@@ -807,8 +813,9 @@ export class DefaultResourceLoader {
          return { themes: Array.from(seen.values()), diagnostics };
      }
      discoverSystemPromptFile() {
@@ -754,7 +754,7 @@ index 97af6cd..74d5d52 100644
              return projectPath;
          }
          const globalPath = join(this.agentDir, "SYSTEM.md");
-@@ -817,8 +824,9 @@ export class DefaultResourceLoader {
+@@ -818,8 +825,9 @@ export class DefaultResourceLoader {
          return undefined;
      }
      discoverAppendSystemPromptFile() {
@@ -767,7 +767,7 @@ index 97af6cd..74d5d52 100644
          }
          const globalPath = join(this.agentDir, "APPEND_SYSTEM.md");
 diff --git a/node_modules/@earendil-works/pi-coding-agent/dist/core/settings-manager.js b/node_modules/@earendil-works/pi-coding-agent/dist/core/settings-manager.js
-index cb06c10..41fb90c 100644
+index f0f936e..ad164d2 100644
 --- a/node_modules/@earendil-works/pi-coding-agent/dist/core/settings-manager.js
 +++ b/node_modules/@earendil-works/pi-coding-agent/dist/core/settings-manager.js
 @@ -2,7 +2,7 @@ import { randomUUID } from "crypto";
@@ -777,11 +777,11 @@ index cb06c10..41fb90c 100644
 -import { CONFIG_DIR_NAME, getAgentDir } from "../config.js";
 +import { getAgentDir, projectConfigDirCandidates, projectConfigWriteDir } from "../config.js";
  import { normalizePath, resolvePath } from "../utils/paths.js";
+ import { stripBom } from "../utils/text.js";
  import { DEFAULT_HTTP_IDLE_TIMEOUT_MS, parseHttpIdleTimeoutMs } from "./http-dispatcher.js";
- function isMergeableObject(value) {
-@@ -37,14 +37,112 @@ function parseTimeoutSetting(value, settingName) {
-     }
-     return undefined;
+@@ -45,14 +45,112 @@ function toSettingsError(scope, error, path) {
+         error: error instanceof Error ? error : new Error(String(error)),
+     };
  }
 +/**
 + * Privateer patch: drop the keys of `settings` that are byte-identical to `base`.
@@ -893,7 +893,7 @@ index cb06c10..41fb90c 100644
      }
      acquireLockSyncWithRetry(path) {
          const maxAttempts = 10;
-@@ -71,7 +169,13 @@ export class FileSettingsStorage {
+@@ -79,7 +177,13 @@ export class FileSettingsStorage {
          throw lastError ?? new Error("Failed to acquire settings lock");
      }
      withLock(scope, fn) {
@@ -908,7 +908,16 @@ index cb06c10..41fb90c 100644
          const dir = dirname(path);
          let release;
          try {
-@@ -568,7 +672,15 @@ export class SettingsManager {
+@@ -157,7 +261,7 @@ export class SettingsManager {
+         const storage = new FileSettingsStorage(resolvedCwd, resolvedAgentDir);
+         return SettingsManager.fromStorageWithPaths(storage, options, {
+             global: join(resolvedAgentDir, "settings.json"),
+-            project: join(resolvedCwd, CONFIG_DIR_NAME, "settings.json"),
++            project: join(projectConfigWriteDir(resolvedCwd), "settings.json"),
+         });
+     }
+     /** Create a SettingsManager from an arbitrary storage backend */
+@@ -610,7 +714,15 @@ export class SettingsManager {
      getProviderRetrySettings() {
          return {
              timeoutMs: this.settings.retry?.provider?.timeoutMs,
@@ -926,7 +935,7 @@ index cb06c10..41fb90c 100644
          };
      }
 diff --git a/node_modules/@earendil-works/pi-coding-agent/dist/core/skills.js b/node_modules/@earendil-works/pi-coding-agent/dist/core/skills.js
-index 4e7e784..7383a2b 100644
+index 56cf7a3..2a32170 100644
 --- a/node_modules/@earendil-works/pi-coding-agent/dist/core/skills.js
 +++ b/node_modules/@earendil-works/pi-coding-agent/dist/core/skills.js
 @@ -1,7 +1,7 @@
@@ -938,7 +947,7 @@ index 4e7e784..7383a2b 100644
  import { parseFrontmatter } from "../utils/frontmatter.js";
  import { canonicalizePath, resolvePath } from "../utils/paths.js";
  import { createSyntheticSourceInfo } from "./source-info.js";
-@@ -328,10 +328,15 @@ export function loadSkills(options) {
+@@ -346,10 +346,15 @@ export function loadSkills(options) {
      }
      if (includeDefaults) {
          addSkills(loadSkillsFromDirInternal(join(resolvedAgentDir, "skills"), "user", true));
@@ -956,7 +965,7 @@ index 4e7e784..7383a2b 100644
      const isUnderPath = (target, root) => {
          const normalizedRoot = resolve(root);
          if (target === normalizedRoot) {
-@@ -344,7 +349,7 @@ export function loadSkills(options) {
+@@ -362,7 +367,7 @@ export function loadSkills(options) {
          if (!includeDefaults) {
              if (isUnderPath(resolvedPath, userSkillsDir))
                  return "user";
@@ -965,8 +974,121 @@ index 4e7e784..7383a2b 100644
                  return "project";
          }
          return "path";
+diff --git a/node_modules/@earendil-works/pi-coding-agent/dist/core/tools/output-accumulator.js b/node_modules/@earendil-works/pi-coding-agent/dist/core/tools/output-accumulator.js
+index 7241668..7b79305 100644
+--- a/node_modules/@earendil-works/pi-coding-agent/dist/core/tools/output-accumulator.js
++++ b/node_modules/@earendil-works/pi-coding-agent/dist/core/tools/output-accumulator.js
+@@ -10,6 +10,30 @@ function defaultTempFilePath(prefix) {
+ function byteLength(text) {
+     return Buffer.byteLength(text, "utf-8");
+ }
++// --- Privateer patch: per-line cap on the DISPLAY tail --------------------------
++//
++// Stock Pi bounds tool output two ways — 2000 lines and 50KB — but never bounds a
++// single LINE. One minified line is enough to spend the whole budget: a bare
++// `grep -rn <term> .` that wanders into node_modules matches inside
++// typescript.js or an Expo web bundle, and those "lines" are megabytes wide. The
++// observed shape is a 331MB capture whose entire visible output was 390 lines,
++// of which the model saw one — the tail of a single line of minified JS. The
++// context window pays 50KB for nothing, and the truncation notice reads as noise
++// because nothing about it says "your grep hit a bundle".
++//
++// So cap what goes into the display tail at one line's worth of characters and
++// mark the elision. Accounting (totalDecodedBytes, totalLines, currentLineBytes)
++// still measures the REAL stream, so "Showing lines X-Y of Z" stays honest, and
++// the temp file still receives every raw byte — `Full output:` means what it
++// says. Only the bytes we hand the model change: 25+ real lines instead of one
++// blob.
++//
++// 2000 rather than grep's 500 (GREP_MAX_LINE_LENGTH): a 2000-char line is already
++// ~25 terminal rows, so ordinary output — stack traces, long JSON, compiler
++// diagnostics — passes through untouched, while the pathological case is capped
++// three orders of magnitude below where it hurts.
++const DEFAULT_MAX_LINE_CHARS = 2000;
++const LINE_ELISION = "... [line truncated]";
+ /**
+  * Incrementally tracks streaming output with bounded memory.
+  *
+@@ -32,6 +56,11 @@ export class OutputAccumulator {
+     completedLines = 0;
+     totalLines = 0;
+     currentLineBytes = 0;
++    // Privateer patch: per-line display cap, carried across chunk boundaries
++    // because a long line rarely arrives in one read().
++    maxLineChars;
++    lineCharsEmitted = 0;
++    lineElided = false;
+     hasOpenLine = false;
+     finished = false;
+     tempFilePath;
+@@ -40,6 +69,8 @@ export class OutputAccumulator {
+         this.maxLines = options.maxLines ?? DEFAULT_MAX_LINES;
+         this.maxBytes = options.maxBytes ?? DEFAULT_MAX_BYTES;
+         this.maxRollingBytes = Math.max(this.maxBytes * 2, 1);
++        // Privateer patch: 0 or less disables the cap.
++        this.maxLineChars = options.maxLineChars ?? DEFAULT_MAX_LINE_CHARS;
+         this.tempFilePrefix = options.tempFilePrefix ?? "pi-output";
+     }
+     append(data) {
+@@ -122,8 +153,11 @@ export class OutputAccumulator {
+         }
+         const bytes = byteLength(text);
+         this.totalDecodedBytes += bytes;
+-        this.tailText += text;
+-        this.tailBytes += bytes;
++        // Privateer patch: the tail is what the model and the TUI see, so it is the
++        // only thing capped. Every counter below still sees the full `text`.
++        const display = this.capLongLines(text);
++        this.tailText += display;
++        this.tailBytes += byteLength(display);
+         if (this.tailBytes > this.maxRollingBytes * 2) {
+             this.trimTail();
+         }
+@@ -145,6 +179,42 @@ export class OutputAccumulator {
+         }
+         this.totalLines = this.completedLines + (this.hasOpenLine ? 1 : 0);
+     }
++    /**
++     * Privateer patch: emit at most `maxLineChars` characters per line, followed by
++     * one elision marker, dropping the rest of that line until its newline.
++     *
++     * Streaming, so the per-line counters live on the instance: a 5MB line arrives
++     * as hundreds of chunks and every one of them must know the line is already
++     * spent.
++     */
++    capLongLines(text) {
++        if (this.maxLineChars <= 0) {
++            return text;
++        }
++        let out = "";
++        let i = 0;
++        while (i < text.length) {
++            const nl = text.indexOf("\n", i);
++            const segment = text.slice(i, nl === -1 ? text.length : nl);
++            const room = Math.max(this.maxLineChars - this.lineCharsEmitted, 0);
++            if (room > 0) {
++                out += segment.slice(0, room);
++                this.lineCharsEmitted += Math.min(segment.length, room);
++            }
++            if (segment.length > room && !this.lineElided) {
++                out += LINE_ELISION;
++                this.lineElided = true;
++            }
++            if (nl === -1) {
++                break;
++            }
++            out += "\n";
++            this.lineCharsEmitted = 0;
++            this.lineElided = false;
++            i = nl + 1;
++        }
++        return out;
++    }
+     trimTail() {
+         const buffer = Buffer.from(this.tailText, "utf-8");
+         if (buffer.length <= this.maxRollingBytes) {
 diff --git a/node_modules/@earendil-works/pi-coding-agent/dist/core/trust-manager.js b/node_modules/@earendil-works/pi-coding-agent/dist/core/trust-manager.js
-index 17af938..6d97caa 100644
+index 0877ee7..faa2559 100644
 --- a/node_modules/@earendil-works/pi-coding-agent/dist/core/trust-manager.js
 +++ b/node_modules/@earendil-works/pi-coding-agent/dist/core/trust-manager.js
 @@ -2,7 +2,7 @@ import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
@@ -976,9 +1098,9 @@ index 17af938..6d97caa 100644
 -import { CONFIG_DIR_NAME } from "../config.js";
 +import { projectConfigDirCandidates } from "../config.js";
  import { canonicalizePath, resolvePath } from "../utils/paths.js";
+ import { stripBom } from "../utils/text.js";
  const TRUST_REQUIRING_PROJECT_CONFIG_RESOURCES = [
-     "settings.json",
-@@ -150,9 +150,13 @@ export function hasTrustRequiringProjectResources(cwd) {
+@@ -151,9 +151,13 @@ export function hasTrustRequiringProjectResources(cwd) {
      const homeDir = canonicalizePath(resolvePath(process.env.HOME || homedir()));
      const userAgentsSkillsDir = join(homeDir, ".agents", "skills");
      let currentDir = canonicalizePath(resolvePath(cwd));
@@ -996,7 +1118,7 @@ index 17af938..6d97caa 100644
      while (true) {
          const agentsSkillsDir = join(currentDir, ".agents", "skills");
 diff --git a/node_modules/@earendil-works/pi-coding-agent/dist/index.d.ts b/node_modules/@earendil-works/pi-coding-agent/dist/index.d.ts
-index 7d3e24c..578ada5 100644
+index 3e9241d..bfbfcbf 100644
 --- a/node_modules/@earendil-works/pi-coding-agent/dist/index.d.ts
 +++ b/node_modules/@earendil-works/pi-coding-agent/dist/index.d.ts
 @@ -1,7 +1,7 @@
@@ -1007,9 +1129,9 @@ index 7d3e24c..578ada5 100644
 +export { AuthStorage, readStoredCredential } from "./core/auth-storage.ts";
  export { type BranchPreparation, type BranchSummaryResult, type CollectEntriesResult, type CompactionResult, type CutPointResult, calculateContextTokens, collectEntriesForBranchSummary, compact, DEFAULT_COMPACTION_SETTINGS, estimateTokens, type FileOperations, findCutPoint, findTurnStartIndex, type GenerateBranchSummaryOptions, generateBranchSummary, generateSummary, generateSummaryWithUsage, getLastAssistantUsage, prepareBranchEntries, serializeConversation, shouldCompact, } from "./core/compaction/index.ts";
  export { createEventBus, type EventBus, type EventBusController } from "./core/event-bus.ts";
- export type { AgentEndEvent, AgentSettledEvent, AgentStartEvent, AgentToolResult, AgentToolUpdateCallback, AppKeybinding, AutocompleteProviderFactory, BashToolCallEvent, BeforeAgentStartEvent, BeforeAgentStartEventResult, BeforeProviderHeadersEvent, BeforeProviderRequestEvent, BeforeProviderRequestEventResult, BuildSystemPromptOptions, CompactOptions, ContextEvent, ContextUsage, CustomToolCallEvent, EditToolCallEvent, EntryRenderer, EntryRenderOptions, ExecOptions, ExecResult, Extension, ExtensionActions, ExtensionAPI, ExtensionCommandContext, ExtensionCommandContextActions, ExtensionContext, ExtensionContextActions, ExtensionError, ExtensionEvent, ExtensionFactory, ExtensionFlag, ExtensionHandler, ExtensionRuntime, ExtensionShortcut, ExtensionUIContext, ExtensionUIDialogOptions, ExtensionWidgetOptions, FindToolCallEvent, GrepToolCallEvent, InlineExtension, InputEvent, InputEventResult, InputSource, KeybindingsManager, LoadExtensionsResult, LsToolCallEvent, MarkdownTransformContext, MarkdownTransformer, MessageEndEvent, MessageRenderer, MessageRenderOptions, MessageStartEvent, MessageUpdateEvent, ProjectTrustContext, ProjectTrustEvent, ProjectTrustEventDecision, ProjectTrustEventResult, ProjectTrustHandler, ProviderConfig, ProviderModelConfig, ReadToolCallEvent, RegisteredCommand, RegisteredTool, ResolvedCommand, SessionBeforeCompactEvent, SessionBeforeForkEvent, SessionBeforeSwitchEvent, SessionBeforeTreeEvent, SessionCompactEvent, SessionInfoChangedEvent, SessionShutdownEvent, SessionStartEvent, SessionTreeEvent, SlashCommandInfo, SlashCommandSource, SourceInfo, TerminalInputHandler, ToolCallEvent, ToolCallEventResult, ToolDefinition, ToolExecutionEndEvent, ToolExecutionMode, ToolExecutionStartEvent, ToolExecutionUpdateEvent, ToolInfo, ToolRenderResultOptions, ToolResultEvent, TurnEndEvent, TurnStartEvent, UserBashEvent, UserBashEventResult, WidgetPlacement, WorkingIndicatorOptions, WriteToolCallEvent, } from "./core/extensions/index.ts";
+ export type { AgentEndEvent, AgentSettledEvent, AgentStartEvent, AgentToolResult, AgentToolUpdateCallback, AppKeybinding, AutocompleteProviderFactory, BashToolCallEvent, BeforeAgentStartEvent, BeforeAgentStartEventResult, BeforeProviderHeadersEvent, BeforeProviderRequestEvent, BeforeProviderRequestEventResult, BuildSystemPromptOptions, CompactOptions, ContextEvent, ContextUsage, CustomToolCallEvent, EditToolCallEvent, EntryRenderer, EntryRenderOptions, ExecOptions, ExecResult, Extension, ExtensionActions, ExtensionAPI, ExtensionCommandContext, ExtensionCommandContextActions, ExtensionContext, ExtensionContextActions, ExtensionError, ExtensionEvent, ExtensionFactory, ExtensionFlag, ExtensionHandler, ExtensionRuntime, ExtensionShortcut, ExtensionUIContext, ExtensionUIDialogOptions, ExtensionWidgetOptions, FindToolCallEvent, GrepToolCallEvent, InlineExtension, InputEvent, InputEventResult, InputSource, KeybindingsManager, LoadExtensionsResult, LsToolCallEvent, MarkdownTransformContext, MarkdownTransformer, MessageEndEvent, MessageRenderer, MessageRenderOptions, MessageStartEvent, MessageUpdateEvent, PowerShellToolCallEvent, ProjectTrustContext, ProjectTrustEvent, ProjectTrustEventDecision, ProjectTrustEventResult, ProjectTrustHandler, ProviderConfig, ProviderModelConfig, ReadToolCallEvent, RegisteredCommand, RegisteredTool, ResolvedCommand, SessionBeforeCompactEvent, SessionBeforeForkEvent, SessionBeforeSwitchEvent, SessionBeforeTreeEvent, SessionCompactEvent, SessionInfoChangedEvent, SessionShutdownEvent, SessionStartEvent, SessionTreeEvent, SlashCommandInfo, SlashCommandSource, SourceInfo, TerminalInputHandler, ToolCallEvent, ToolCallEventResult, ToolDefinition, ToolExecutionEndEvent, ToolExecutionMode, ToolExecutionStartEvent, ToolExecutionUpdateEvent, ToolInfo, ToolRenderResultOptions, ToolResultEvent, TurnEndEvent, TurnStartEvent, UIPromptEndEvent, UIPromptKind, UIPromptStartEvent, UserBashEvent, UserBashEventResult, WidgetPlacement, WorkingIndicatorOptions, WriteToolCallEvent, } from "./core/extensions/index.ts";
 diff --git a/node_modules/@earendil-works/pi-coding-agent/dist/index.js b/node_modules/@earendil-works/pi-coding-agent/dist/index.js
-index 76d728e..2b2c892 100644
+index 01017cd..c2b8722 100644
 --- a/node_modules/@earendil-works/pi-coding-agent/dist/index.js
 +++ b/node_modules/@earendil-works/pi-coding-agent/dist/index.js
 @@ -3,7 +3,7 @@ export { parseArgs } from "./cli/args.js";
@@ -1022,10 +1144,10 @@ index 76d728e..2b2c892 100644
  export { calculateContextTokens, collectEntriesForBranchSummary, compact, DEFAULT_COMPACTION_SETTINGS, estimateTokens, findCutPoint, findTurnStartIndex, generateBranchSummary, generateSummary, generateSummaryWithUsage, getLastAssistantUsage, prepareBranchEntries, serializeConversation, shouldCompact, } from "./core/compaction/index.js";
  export { createEventBus } from "./core/event-bus.js";
 diff --git a/node_modules/@earendil-works/pi-coding-agent/dist/main.js b/node_modules/@earendil-works/pi-coding-agent/dist/main.js
-index 5ff9c80..5b91d5f 100644
+index 940e0f4..c0f3d11 100644
 --- a/node_modules/@earendil-works/pi-coding-agent/dist/main.js
 +++ b/node_modules/@earendil-works/pi-coding-agent/dist/main.js
-@@ -786,7 +786,58 @@ export async function main(args, options) {
+@@ -795,7 +795,58 @@ export async function main(args, options) {
          if (exitCode !== 0) {
              process.exitCode = exitCode;
          }
@@ -1086,7 +1208,7 @@ index 5ff9c80..5b91d5f 100644
  //# sourceMappingURL=main.js.map
 
 diff --git a/node_modules/@earendil-works/pi-coding-agent/dist/migrations.js b/node_modules/@earendil-works/pi-coding-agent/dist/migrations.js
-index e3a5ccf..a561a8a 100644
+index 072268a..472ee6d 100644
 --- a/node_modules/@earendil-works/pi-coding-agent/dist/migrations.js
 +++ b/node_modules/@earendil-works/pi-coding-agent/dist/migrations.js
 @@ -4,7 +4,7 @@
@@ -1096,9 +1218,9 @@ index e3a5ccf..a561a8a 100644
 -import { CONFIG_DIR_NAME, getAgentDir, getBinDir } from "./config.js";
 +import { getAgentDir, getBinDir, projectConfigDirs } from "./config.js";
  import { migrateKeybindingsConfig } from "./core/keybindings.js";
+ import { stripBom } from "./utils/text.js";
  const MIGRATION_GUIDE_URL = "https://github.com/earendil-works/pi-mono/blob/main/packages/coding-agent/CHANGELOG.md#extensions-migration";
- const EXTENSIONS_DOC_URL = "https://github.com/earendil-works/pi-mono/blob/main/packages/coding-agent/docs/extensions.md";
-@@ -230,14 +230,17 @@ function checkDeprecatedExtensionDirs(baseDir, label) {
+@@ -231,14 +231,17 @@ function checkDeprecatedExtensionDirs(baseDir, label) {
   */
  function migrateExtensionSystem(cwd) {
      const agentDir = getAgentDir();
@@ -1410,16 +1532,18 @@ index 1d9f046..c0326e3 100644
          return lines;
      }
 diff --git a/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/components/tool-execution.js b/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/components/tool-execution.js
-index 3f93cc6..50a2a99 100644
+index c33fc39..060a38f 100644
 --- a/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/components/tool-execution.js
 +++ b/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/components/tool-execution.js
-@@ -1,8 +1,35 @@
+@@ -1,10 +1,37 @@
 -import { Box, Container, getCapabilities, Image, Spacer, Text } from "@earendil-works/pi-tui";
 +import { Box, Container, getCapabilities, Image, Spacer, visibleWidth, Text } from "@earendil-works/pi-tui";
  import { createAllToolDefinitions } from "../../../core/tools/index.js";
  import { getTextOutput as getRenderedTextOutput } from "../../../core/tools/render-utils.js";
  import { convertToPng } from "../../../utils/image-convert.js";
  import { theme } from "../theme/theme.js";
+ import { keyHint } from "./keybinding-hints.js";
+ const FALLBACK_PREVIEW_LINES = 10;
 +/**
 + * Privateer: mark a failed tool call inline on its title line.
 + *
@@ -1450,7 +1574,7 @@ index 3f93cc6..50a2a99 100644
  export class ToolExecutionComponent extends Container {
      contentBox;
      contentText;
-@@ -43,8 +70,13 @@ export class ToolExecutionComponent extends Container {
+@@ -45,8 +72,13 @@ export class ToolExecutionComponent extends Container {
          // Always create all shell variants. contentBox is used for default renderer-based composition.
          // selfRenderContainer is used when the tool renders its own framing.
          // contentText is reserved for generic fallback rendering when no tool definition exists.
@@ -1466,7 +1590,7 @@ index 3f93cc6..50a2a99 100644
          this.selfRenderContainer = new Container();
          if (this.hasRendererDefinition()) {
              this.addChild(this.getRenderShell() === "self" ? this.selfRenderContainer : this.contentBox);
-@@ -106,6 +138,13 @@ export class ToolExecutionComponent extends Container {
+@@ -108,6 +140,13 @@ export class ToolExecutionComponent extends Container {
      createCallFallback() {
          return new Text(theme.fg("toolTitle", theme.bold(this.toolName)), 0, 0);
      }
@@ -1480,7 +1604,7 @@ index 3f93cc6..50a2a99 100644
      createResultFallback() {
          const output = this.getTextOutput();
          if (!output) {
-@@ -218,19 +257,22 @@ export class ToolExecutionComponent extends Container {
+@@ -227,19 +266,22 @@ export class ToolExecutionComponent extends Container {
              renderContainer.clear();
              const callRenderer = this.getCallRenderer();
              if (!callRenderer) {
@@ -1506,7 +1630,7 @@ index 3f93cc6..50a2a99 100644
                      hasContent = true;
                  }
              }
-@@ -302,7 +344,8 @@ export class ToolExecutionComponent extends Container {
+@@ -311,7 +353,8 @@ export class ToolExecutionComponent extends Container {
          return getRenderedTextOutput(this.result, this.showImages);
      }
      formatToolExecution() {
@@ -1517,19 +1641,19 @@ index 3f93cc6..50a2a99 100644
          if (content) {
              text += `\n\n${content}`;
 diff --git a/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/interactive-mode.js b/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/interactive-mode.js
-index 42e655d..606c7cc 100644
+index a27754f..61a1fff 100644
 --- a/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/interactive-mode.js
 +++ b/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/interactive-mode.js
 @@ -10,7 +10,7 @@ import * as TuiLayouts from "@earendil-works/pi-tui";
- import { CombinedAutocompleteProvider, Container, fuzzyFilter, getCapabilities, hyperlink, Markdown, matchesKey, ProcessTerminal, Spacer, setKeybindings, Text, TruncatedText, TuiAltScreen, TuiMainScreen, visibleWidth, } from "@earendil-works/pi-tui";
+ import { CombinedAutocompleteProvider, Container, fuzzyFilter, getCapabilities, hyperlink, Markdown, matchesKey, ProcessTerminal, Spacer, setCapabilityOverrides, setKeybindings, Text, TruncatedText, TuiAltScreen, TuiMainScreen, visibleWidth, } from "@earendil-works/pi-tui";
  import chalk from "chalk";
- import { spawn, spawnSync } from "child_process";
--import { APP_NAME, APP_TITLE, CONFIG_DIR_NAME, getAgentDir, getAuthPath, getDebugLogPath, getDocsPath, getShareViewerUrl, VERSION, } from "../../config.js";
-+import { APP_NAME, APP_TITLE, formatProjectConfigDirNames, getAgentDir, getAuthPath, getDebugLogPath, getDocsPath, getShareViewerUrl, VERSION, } from "../../config.js";
+ import { spawn } from "child_process";
+-import { APP_NAME, APP_TITLE, CONFIG_DIR_NAME, getAgentDir, getAuthPath, getDebugLogPath, getDocsPath, VERSION, } from "../../config.js";
++import { APP_NAME, APP_TITLE, formatProjectConfigDirNames, getAgentDir, getAuthPath, getDebugLogPath, getDocsPath, VERSION, } from "../../config.js";
  import { parseSkillBlock } from "../../core/agent-session.js";
  import { SessionImportFileNotFoundError } from "../../core/agent-session-runtime.js";
  import { CACHE_TTL_MS, collectCacheMisses, computeCacheWaste, detectCacheMiss, } from "../../core/cache-stats.js";
-@@ -119,7 +119,12 @@ export function formatResumeCommand(sessionManager) {
+@@ -126,7 +126,12 @@ export function formatResumeCommand(sessionManager) {
      const sessionFile = sessionManager.getSessionFile();
      if (!sessionFile || !fs.existsSync(sessionFile))
          return undefined;
@@ -1543,7 +1667,7 @@ index 42e655d..606c7cc 100644
      if (!sessionManager.usesDefaultSessionDir()) {
          args.push("--session-dir", quoteIfNeeded(sessionManager.getSessionDir()));
      }
-@@ -207,6 +212,54 @@ export function createInteractiveTuiReference(getTui) {
+@@ -232,6 +237,54 @@ export function createInteractiveTuiReference(getTui) {
          getPrototypeOf: () => Reflect.getPrototypeOf(getTui()),
      });
  }
@@ -1598,7 +1722,7 @@ index 42e655d..606c7cc 100644
  export class InteractiveMode {
      runtimeHost;
      renderer;
-@@ -405,9 +458,15 @@ export class InteractiveMode {
+@@ -439,9 +492,15 @@ export class InteractiveMode {
      }
      getBuiltInCommandConflictDiagnostics(extensionRunner) {
          const builtinNames = new Set(BUILTIN_SLASH_COMMANDS.map((command) => command.name));
@@ -1615,7 +1739,7 @@ index 42e655d..606c7cc 100644
              .map((command) => ({
              type: "warning",
              message: command.invocationName === command.name
-@@ -754,20 +813,18 @@ export class InteractiveMode {
+@@ -815,20 +874,18 @@ export class InteractiveMode {
                  this.showNewVersionNotification(newRelease);
              }
          });
@@ -1648,7 +1772,7 @@ index 42e655d..606c7cc 100644
          // Check tmux keyboard setup asynchronously
          this.checkTmuxKeyboardSetup().then((warning) => {
              if (warning) {
-@@ -2310,7 +2367,17 @@ export class InteractiveMode {
+@@ -2393,7 +2450,17 @@ export class InteractiveMode {
              if (text === "/model" || text.startsWith("/model ")) {
                  const searchTerm = text.startsWith("/model ") ? text.slice(7).trim() : undefined;
                  this.editor.setText("");
@@ -1666,8 +1790,8 @@ index 42e655d..606c7cc 100644
 +                }
                  return;
              }
-             if (text === "/export" || text.startsWith("/export ")) {
-@@ -2376,12 +2443,42 @@ export class InteractiveMode {
+             if (text === "/thinking" || text.startsWith("/thinking ")) {
+@@ -2465,12 +2532,42 @@ export class InteractiveMode {
              if (text === "/login" || text.startsWith("/login ")) {
                  const providerRef = text.startsWith("/login ") ? text.slice(7).trim() : undefined;
                  this.editor.setText("");
@@ -1712,7 +1836,7 @@ index 42e655d..606c7cc 100644
                  return;
              }
              if (text === "/new") {
-@@ -3024,7 +3121,7 @@ export class InteractiveMode {
+@@ -3164,7 +3261,7 @@ export class InteractiveMode {
          if (this.chatContainer.children.length > 0) {
              this.chatContainer.addChild(new Spacer(1));
          }
@@ -1721,7 +1845,7 @@ index 42e655d..606c7cc 100644
      }
      async getUserInput() {
          const queuedInput = this.pendingUserInputs.shift();
-@@ -3363,7 +3460,17 @@ export class InteractiveMode {
+@@ -3504,7 +3601,17 @@ export class InteractiveMode {
      }
      showError(errorMessage) {
          this.chatContainer.addChild(new Spacer(1));
@@ -1741,10 +1865,10 @@ index 42e655d..606c7cc 100644
      }
      showWarning(warningMessage) {
 diff --git a/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/theme/dark.json b/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/theme/dark.json
-index 9db9cbd..b370180 100644
+index 01d1e02..c591e1d 100644
 --- a/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/theme/dark.json
 +++ b/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/theme/dark.json
-@@ -39,9 +39,9 @@
+@@ -41,9 +41,9 @@
  		"customMessageBg": "customMsgBg",
  		"customMessageText": "text",
  		"customMessageLabel": "#9575cd",
@@ -1758,10 +1882,10 @@ index 9db9cbd..b370180 100644
  		"toolOutput": "gray",
  
 diff --git a/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/theme/light.json b/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/theme/light.json
-index 74ef3d1..709a21d 100644
+index 0fde42b..cc3b7c5 100644
 --- a/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/theme/light.json
 +++ b/node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/theme/light.json
-@@ -38,9 +38,9 @@
+@@ -40,9 +40,9 @@
  		"customMessageBg": "customMsgBg",
  		"customMessageText": "text",
  		"customMessageLabel": "#7e57c2",
@@ -1775,11 +1899,11 @@ index 74ef3d1..709a21d 100644
  		"toolOutput": "mediumGray",
  
 diff --git a/node_modules/@earendil-works/pi-coding-agent/dist/package-manager-cli.js b/node_modules/@earendil-works/pi-coding-agent/dist/package-manager-cli.js
-index 4230b18..f47e80f 100644
+index 3f101e6..51c7f73 100644
 --- a/node_modules/@earendil-works/pi-coding-agent/dist/package-manager-cli.js
 +++ b/node_modules/@earendil-works/pi-coding-agent/dist/package-manager-cli.js
-@@ -3,7 +3,7 @@ import { Markdown } from "@earendil-works/pi-tui";
- import chalk from "chalk";
+@@ -5,7 +5,7 @@ import chalk from "chalk";
+ import lockfile from "proper-lockfile";
  import { selectConfig } from "./cli/config-selector.js";
  import { createProjectTrustContext } from "./cli/project-trust.js";
 -import { APP_NAME, CONFIG_DIR_NAME, detectInstallMethod, getAgentDir, getPackageDir, getSelfUpdateCommand, getSelfUpdateUnavailableInstruction, PACKAGE_NAME, VERSION, } from "./config.js";
@@ -1787,7 +1911,7 @@ index 4230b18..f47e80f 100644
  import { ModelRuntime } from "./core/model-runtime.js";
  import { DefaultPackageManager } from "./core/package-manager.js";
  import { resolveProjectTrusted } from "./core/project-trust.js";
-@@ -60,7 +60,7 @@ Without -l, starts in global settings (~/${CONFIG_DIR_NAME}/agent/settings.json)
+@@ -221,7 +221,7 @@ Without -l, starts in global settings (~/${CONFIG_DIR_NAME}/agent/settings.json)
  Press Tab in the TUI to switch between global and project-local modes.
  
  Options:
@@ -1796,7 +1920,7 @@ index 4230b18..f47e80f 100644
    -a, --approve     Trust project-local files for this command with -l
    -na, --no-approve Ignore project-local files for this command with -l
  `);
-@@ -74,7 +74,7 @@ function printPackageCommandHelp(command) {
+@@ -235,7 +235,7 @@ function printPackageCommandHelp(command) {
  Install a package and add it to settings.
  
  Options:
@@ -1805,7 +1929,7 @@ index 4230b18..f47e80f 100644
    -a, --approve     Trust project-local files for this command
    -na, --no-approve Ignore project-local files for this command
  
-@@ -95,7 +95,7 @@ Remove a package and its source from settings.
+@@ -256,7 +256,7 @@ Remove a package and its source from settings.
  Alias: ${APP_NAME} uninstall <source> [-l]
  
  Options:

package/src/config/moatManifest.json

@@ -1,28 +1,31 @@
 {
   "$comment": "The one list of extensions Privateer ships. Read by bin/privateer-launch.mjs (shim install, dependency-free, pre-patch) and src/config/moatManifest.ts (RESERVED + profile composition). JSON so both a plain .mjs and the TS side can read it without a build step. See moatManifest.ts for the field contract.",
-  "shims": [
-    { "name": "privateer-brand", "entry": "extensions/privateer-brand.ts", "note": "banner, ⚓ badge, /signin /signout" },
-    { "name": "privateer-context", "entry": "extensions/privateer-context.ts", "note": "PRIVATEER.md context + /init" },
-    { "name": "privateer-gate", "entry": "extensions/privateer-gate.ts", "note": "the permission gate (moat)" },
-    { "name": "privateer-account", "entry": "extensions/privateer-account.ts", "note": "account inference provider" },
-    { "name": "privateer-models", "entry": "extensions/privateer-models.ts", "note": "/models picker w/ privacy shields" },
-    { "name": "privateer-posture", "entry": "extensions/privateer-posture.ts", "note": "live attestation shield" },
-    { "name": "privateer-tools", "entry": "extensions/privateer-tools.ts", "note": "Privateer tool pack" },
-    { "name": "privateer-privacy", "entry": "extensions/privateer-privacy.ts", "note": "pi-privacy + account tier resolver" },
-    { "name": "privateer-connect", "entry": "extensions/privateer-connect.ts", "note": "/connect — MCP connector manager" },
-    { "name": "privateer-media", "entry": "extensions/privateer-media.ts", "note": "image/video/speech/music + ffmpeg compose" },
-    { "name": "privateer-desktop", "entry": "extensions/privateer-desktop.ts", "note": "/desktop — open the Privateer desktop app" },
-    { "name": "privateer-hints", "entry": "extensions/privateer-hints.ts", "note": "rotating tips in the working line + /hints" },
-    { "name": "privateer-update", "entry": "extensions/privateer-update.ts", "note": "tool pack updates in place — banner flag + /update" },
-    { "name": "privateer-speak", "entry": "extensions/privateer-speak.ts", "note": "spoken responses (/speak) + voice input (/talk) — pi-speak + confidential account TTS/STT" },
-    { "name": "privateer-web", "entry": "extensions/privateer-web.ts", "note": "web_search/web_fetch — account search when signed in, else the user's own provider (rpiv-web-tools)" },
-    { "name": "rpiv-ask-user-question", "dep": ["@juicesharp/rpiv-ask-user-question", "index.ts"], "note": "ask_user_question" },
-    { "name": "pi-mcp-adapter", "dep": ["pi-mcp-adapter", "index.ts"], "note": "MCP servers as first-class tools" },
-    { "name": "pi-subagents", "dep": ["pi-subagents", "src", "extension", "index.ts"], "note": "bounded parallel sub-agents" }
-  ],
-  "retired": ["pi-privacy", "pi-web-access", "pi-hypa", "rpiv-web-tools"],
   "reservedAliases": [
     "@juicesharp/rpiv-web-tools",
-    "@juicesharp/rpiv-ask-user-question"
+    "@juicesharp/rpiv-ask-user-question",
+    "background-tasks"
+  ],
+  "retired": ["pi-privacy", "pi-web-access", "pi-hypa", "rpiv-web-tools"],
+  "shims": [
+    { "entry": "extensions/privateer-brand.ts", "name": "privateer-brand", "note": "banner, ⚓ badge, /signin /signout" },
+    { "entry": "extensions/privateer-context.ts", "name": "privateer-context", "note": "PRIVATEER.md context + /init" },
+    { "entry": "extensions/privateer-gate.ts", "name": "privateer-gate", "note": "the permission gate (moat)" },
+    { "entry": "extensions/privateer-account.ts", "name": "privateer-account", "note": "account inference provider" },
+    { "entry": "extensions/privateer-models.ts", "name": "privateer-models", "note": "/models picker w/ privacy shields" },
+    { "entry": "extensions/privateer-posture.ts", "name": "privateer-posture", "note": "live attestation shield" },
+    { "entry": "extensions/privateer-tools.ts", "name": "privateer-tools", "note": "Privateer tool pack" },
+    { "entry": "extensions/privateer-privacy.ts", "name": "privateer-privacy", "note": "pi-privacy + account tier resolver" },
+    { "entry": "extensions/privateer-connect.ts", "name": "privateer-connect", "note": "/connect — MCP connector manager" },
+    { "entry": "extensions/privateer-media.ts", "name": "privateer-media", "note": "image/video/speech/music + ffmpeg compose" },
+    { "entry": "extensions/privateer-desktop.ts", "name": "privateer-desktop", "note": "/desktop — open the Privateer desktop app" },
+    { "entry": "extensions/privateer-hints.ts", "name": "privateer-hints", "note": "rotating tips in the working line + /hints" },
+    { "entry": "extensions/privateer-update.ts", "name": "privateer-update", "note": "tool pack updates in place — banner flag + /update" },
+    { "entry": "extensions/privateer-speak.ts", "name": "privateer-speak", "note": "spoken responses (/speak) + voice input (/talk) — pi-speak + confidential account TTS/STT" },
+    { "entry": "extensions/privateer-web.ts", "name": "privateer-web", "note": "web_search/web_fetch — account search when signed in, else the user's own provider (rpiv-web-tools)" },
+    { "dep": ["@juicesharp/rpiv-ask-user-question", "index.ts"], "name": "rpiv-ask-user-question", "note": "ask_user_question" },
+    { "dep": ["pi-mcp-adapter", "index.ts"], "name": "pi-mcp-adapter", "note": "MCP servers as first-class tools" },
+    { "dep": ["pi-subagents", "src", "extension", "index.ts"], "name": "pi-subagents", "note": "bounded parallel sub-agents" },
+    { "dep": ["pi-background-tasks", "extensions", "anthropic-attribution.ts"], "name": "anthropic-attribution", "note": "Anthropic OAuth attribution and prompt sanitization" },
+    { "dep": ["pi-background-tasks", "extensions", "background-tasks.ts"], "name": "pi-background-tasks", "note": "durable background tasks, delegated agents, and fusion" }
   ]
 }