takomi 2.1.43 → 2.1.45

package/.pi/README.md

@@ -34,8 +34,8 @@ Inside Pi, use:
 - `/takomi build [prompt]` to implement while cross-checking against approved UI/design artifacts
 - `/takomi plan [title]` to create a Genesis-first orchestration session that can expand through Design and Build
 - `/takomi mode direct`, `/takomi mode orchestrate`, or `/takomi mode review` to choose the session operating mode
-- `/takomi gate auto` to continue approved plans automatically
-- `/takomi gate review` to return to the user after each task with results and verification guidance
+- `/takomi gate auto` to continue approved plans automatically and explicitly authorize project-local agents for this session
+- `/takomi gate review` (or `/takomi gate manual`) to return to the user after each task with results and verification guidance and revoke that authorization
 - `/takomi subagents on` or `/takomi subagents off` to allow or disable delegated subagents
 - `/takomi subagents list` to list available Takomi agents without exposing the raw `subagent` tool
 - `/takomi subagents status` to inspect active subagent state
@@ -109,7 +109,8 @@ So when working on packaging, agents should distinguish between:
 - Direct `takomi_subagent` calls build a `TakomiDelegationPlan` before launch. In auto mode the plan launches immediately; in manual mode the plan is returned for review until `confirmLaunch=true` is supplied.
 - The subagent tool supports `conversationId`, so reviewed work can be sent back to the same agent for continuation instead of restarting from scratch.
 - The subagent tool supports Pi-style single, parallel `tasks`, sequential `chain`, explicit `context=fork|fresh`, `async=true`, and native read/control actions such as `action=list`, `action=status`, `action=doctor`, `action=interrupt`, and `action=resume`.
-- The subagent tool supports `agentScope` values of `user`, `project`, and `both`; project-local agents require confirmation by default.
+- The subagent tool supports `agentScope` values of `user`, `project`, and `both`; project-local agents require confirmation by default. The only session authorization bypasses are `TAKOMI_TRUST_PROJECT_AGENTS` and the explicit user `/takomi gate auto` provenance marker; model mode changes plus profile, default, or generic runtime `auto` state do not authorize project agents.
+- The explicit user gate-auto marker is stored in session history so it survives resuming that same session. `/takomi gate review`, `/takomi gate manual`, review mode, and `/takomi-reset` append a revocation; it is not a cross-session or profile setting.
 - The subagent tool also supports per-run `workflow`, `skills`, `model`, `fallbackModels`, `thinking`, `checklist`, `concurrency`, and `worktree` overrides.
 - `takomi_board` records session/state/markdown artifacts only; it does not run subagents.
 - Pi's default `subagent` tool remains owned by the user-level/default subagent extension to avoid tool-name conflicts; Takomi uses `takomi_subagent` as the preferred lifecycle-aware execution interface and renders it with the native Pi-style result surface.

package/.pi/extensions/oauth-router/README.md

@@ -41,12 +41,12 @@ The extension ships with two default upstream profiles:
    - auth mode: OAuth
    - oauth provider: `openai-codex`
    - api: `openai-codex-responses`
-   - default models: `gpt-5.4-mini`, `gpt-5.4`, `gpt-5.5`, `gpt-5.6-luna`, `gpt-5.6-sol`, `gpt-5.6-terra`
+   - default models: `gpt-5.4-mini`, `gpt-5.4`, `gpt-5.5`, `gpt-5.6-luna`, `gpt-5.6-sol`, `gpt-5.6-terra`
 
 2. `openai-compatible`
    - auth mode: API key fallback
    - api: `openai-responses`
-   - default models: `gpt-5.4-mini`, `gpt-5.4`, `gpt-5.5`, `gpt-5.6-luna`, `gpt-5.6-sol`, `gpt-5.6-terra`
+   - default models: `gpt-5.4-mini`, `gpt-5.4`, `gpt-5.5`, `gpt-5.6-luna`, `gpt-5.6-sol`, `gpt-5.6-terra`
 
 Edit `~/.pi/agent/oauth-router/config.json` to add more upstreams, swap endpoints, change model catalogs, or tune retry behavior. By default client-side transport failures such as `Codex SSE response headers timed out after 10000ms` retry the same account 5 times with exponential backoff (`5s`, `10s`, `20s`, `40s`, then capped at `60s`) before router failover. While this is happening, Pi's footer shows the active retry/failover/error state so the UI no longer looks frozen. These failures are recorded but do not cool down an account unless `clientNetworkPenaltyMs` is set above `0`.
 
@@ -62,7 +62,7 @@ Edit `~/.pi/agent/oauth-router/config.json` to add more upstreams, swap endpoint
    - `/router-status`
    - `/router-usage`
 5. Select a model:
-   - `oauth-router/gpt-5.6-sol`
+   - `oauth-router/gpt-5.6-sol`
 
 ## Account storage format
 

package/.pi/extensions/oauth-router/commands.ts

@@ -1,5 +1,6 @@
 import type { ExtensionAPI, ExtensionCommandContext } from "@earendil-works/pi-coding-agent";
 import { createAccountFromUpstream } from "./oauth-flow.ts";
+import { createRouterReportLines, createRouterReportWidget, ROUTER_REPORT_DISMISS_HINT, ROUTER_REPORT_WIDGET_KEY } from "./report-ui.ts";
 import type { RouterStatusRow, RouterUsageSummary, RouterUsageWindowSummary, RoutingPolicyName, StoredRouterAccount } from "./types.ts";
 import { RouterRuntime } from "./provider.ts";
 
@@ -273,16 +274,32 @@ export function formatUsageRawReport(runtime: RouterRuntime, accountId?: string)
   return ["# oauth-router usage raw", "", ...rows].join("\n");
 }
 
-function emitReport(ctx: ExtensionCommandContext, text: string) {
-  const lines = text.split(/\r?\n/);
-  const visibleLines = [
-    "oauth-router report (UI-only; not sent to the agent)",
-    ...lines,
-  ];
-  ctx.ui.setWidget("oauth-router-report", visibleLines, { placement: "belowEditor" });
-  ctx.ui.notify(lines[0] || "oauth-router report updated", "info");
+export function emitRouterReport(ctx: ExtensionCommandContext, text: string) {
+  // A single key gives every report predictable replacement semantics. Add the
+  // dismiss affordance at this presentation boundary, not to formatter output,
+  // so model/source report text remains unchanged. Omitting options uses Pi's
+  // default above-editor placement for both TUI and RPC widgets.
+  const reportText = `${ROUTER_REPORT_DISMISS_HINT}\n\n${text}`;
+  if (ctx.mode === "tui") {
+    ctx.ui.setWidget(ROUTER_REPORT_WIDGET_KEY, createRouterReportWidget(reportText));
+    return;
+  }
+  // RPC accepts string-array widgets only; ctx.hasUI is true there, so ctx.mode
+  // is the capability signal that prevents its visible report from being ignored.
+  ctx.ui.setWidget(ROUTER_REPORT_WIDGET_KEY, createRouterReportLines(reportText));
+}
+
+export function clearRouterReport(ctx: ExtensionCommandContext) {
+  ctx.ui.setWidget(ROUTER_REPORT_WIDGET_KEY, undefined);
 }
 
+export type RouterReportEmitter = (ctx: ExtensionCommandContext, text: string) => void;
+
+export type RouterReportControls = {
+  show: RouterReportEmitter;
+  clear: (ctx: ExtensionCommandContext) => void;
+};
+
 async function pickUpstream(runtime: RouterRuntime, ctx: ExtensionCommandContext, requestedId?: string) {
   const upstreams = runtime.listUpstreams().filter((upstream) => upstream.enabled);
   if (upstreams.length === 0) throw new Error("No enabled upstreams are configured");
@@ -389,12 +406,11 @@ function setFooterStatus(ctx: ExtensionCommandContext, runtime: RouterRuntime) {
   ctx.ui.setStatus("oauth-router", `oauth-router ${healthy}/${rows.length || 0} healthy | ${runtime.getPolicy()}`);
 }
 
-function showCommandHint(ctx: ExtensionCommandContext, title: string, lines: string[]) {
-  emitReport(ctx, [`# ${title}`, "", ...lines].join("\n"));
-  ctx.ui.notify(title, "info");
+function showCommandHint(ctx: ExtensionCommandContext, title: string, lines: string[], showReport: RouterReportEmitter = emitRouterReport) {
+  showReport(ctx, [`# ${title}`, "", ...lines].join("\n"));
 }
 
-async function handleRouterLogin(runtime: RouterRuntime, args: string, ctx: ExtensionCommandContext) {
+async function handleRouterLogin(runtime: RouterRuntime, args: string, ctx: ExtensionCommandContext, showReport: RouterReportEmitter = emitRouterReport) {
   const [command = "help", first, ...rest] = parseArgs(args);
 
   switch (command) {
@@ -419,18 +435,17 @@ async function handleRouterLogin(runtime: RouterRuntime, args: string, ctx: Exte
         runtime.clearAccountHealth(duplicate.id);
         const usageMessage = await refreshUsageAfterCredentialChange(runtime, duplicate.id);
         setFooterStatus(ctx, runtime);
-        emitReport(ctx, `Updated existing account ${duplicate.id} (${duplicate.label}) with fresh credentials instead of adding a duplicate.${usageMessage}`);
+        showReport(ctx, `Updated existing account ${duplicate.id} (${duplicate.label}) with fresh credentials instead of adding a duplicate.${usageMessage}`);
         return;
       }
       runtime.addAccount(account);
       const usageMessage = await refreshUsageAfterCredentialChange(runtime, account.id);
       setFooterStatus(ctx, runtime);
-      emitReport(ctx, `Added account ${account.id} (${account.label}) for upstream ${upstream.id}.${usageMessage}`);
-      ctx.ui.notify(`Added ${account.id}`, "info");
+      showReport(ctx, `Added account ${account.id} (${account.label}) for upstream ${upstream.id}.${usageMessage}`);
       return;
     }
     case "list": {
-      emitReport(ctx, formatAccountsReport(runtime));
+      showReport(ctx, formatAccountsReport(runtime));
       setFooterStatus(ctx, runtime);
       return;
     }
@@ -443,7 +458,7 @@ async function handleRouterLogin(runtime: RouterRuntime, args: string, ctx: Exte
       }
       runtime.removeAccount(account.id);
       setFooterStatus(ctx, runtime);
-      emitReport(ctx, `Removed account ${account.id}.`);
+      showReport(ctx, `Removed account ${account.id}.`);
       return;
     }
     case "rename": {
@@ -451,7 +466,7 @@ async function handleRouterLogin(runtime: RouterRuntime, args: string, ctx: Exte
       const label = await getRequiredLabel(ctx, account.label, rest.join(" "));
       runtime.renameAccount(account.id, label);
       setFooterStatus(ctx, runtime);
-      emitReport(ctx, `Renamed account ${account.id} to ${label}.`);
+      showReport(ctx, `Renamed account ${account.id} to ${label}.`);
       return;
     }
     case "relogin": {
@@ -476,7 +491,7 @@ async function handleRouterLogin(runtime: RouterRuntime, args: string, ctx: Exte
       runtime.clearAccountHealth(existing.id);
       const usageMessage = await refreshUsageAfterCredentialChange(runtime, existing.id);
       setFooterStatus(ctx, runtime);
-      emitReport(ctx, `Re-logged account ${existing.id} (${existing.label}) and cleared auth state.${usageMessage}`);
+      showReport(ctx, `Re-logged account ${existing.id} (${existing.label}) and cleared auth state.${usageMessage}`);
       return;
     }
     case "refresh": {
@@ -484,12 +499,12 @@ async function handleRouterLogin(runtime: RouterRuntime, args: string, ctx: Exte
       const refreshed = await runtime.refreshAccount(account.id);
       const usageMessage = await refreshUsageAfterCredentialChange(runtime, refreshed.id);
       setFooterStatus(ctx, runtime);
-      emitReport(ctx, `Refreshed account ${refreshed.id} (${refreshed.label}).${usageMessage}`);
+      showReport(ctx, `Refreshed account ${refreshed.id} (${refreshed.label}).${usageMessage}`);
       return;
     }
     case "help":
     default: {
-      emitReport(
+      showReport(
         ctx,
         [
           "# oauth-router commands",
@@ -510,6 +525,7 @@ async function handleRouterLogin(runtime: RouterRuntime, args: string, ctx: Exte
           "- /router-disable <id>",
           "- /router-policy <round-robin|weighted-round-robin>",
           "- /router-weight <id> <n>",
+          "- /router-clear (dismiss the current report)",
         ].join("\n"),
       );
       return;
@@ -517,16 +533,27 @@ async function handleRouterLogin(runtime: RouterRuntime, args: string, ctx: Exte
   }
 }
 
-export function registerRouterCommands(pi: ExtensionAPI, runtime: RouterRuntime) {
+export function registerRouterCommands(pi: ExtensionAPI, runtime: RouterRuntime, reportControls?: RouterReportControls) {
+  const showReport = reportControls?.show ?? emitRouterReport;
+  const clearReport = reportControls?.clear ?? clearRouterReport;
+
   pi.registerCommand("router-login", {
     description: "Manage oauth-router accounts",
-    handler: async (args, ctx) => handleRouterLogin(runtime, args || "", ctx),
+    handler: async (args, ctx) => handleRouterLogin(runtime, args || "", ctx, showReport),
+  });
+
+  pi.registerCommand("router-clear", {
+    description: "Dismiss the current oauth-router report widget",
+    handler: async (_args, ctx) => {
+      clearReport(ctx);
+      setFooterStatus(ctx, runtime);
+    },
   });
 
   pi.registerCommand("router-status", {
     description: "Show oauth-router health and routing state",
     handler: async (_args, ctx) => {
-      emitReport(ctx, formatStatusReport(runtime));
+      showReport(ctx, formatStatusReport(runtime));
       setFooterStatus(ctx, runtime);
     },
   });
@@ -534,7 +561,7 @@ export function registerRouterCommands(pi: ExtensionAPI, runtime: RouterRuntime)
   pi.registerCommand("router-accounts", {
     description: "Show compact oauth-router account list",
     handler: async (_args, ctx) => {
-      emitReport(ctx, formatAccountsReport(runtime));
+      showReport(ctx, formatAccountsReport(runtime));
       setFooterStatus(ctx, runtime);
     },
   });
@@ -543,7 +570,7 @@ export function registerRouterCommands(pi: ExtensionAPI, runtime: RouterRuntime)
     description: "Show oauth-router visual provider quota and local usage",
     handler: async (args, ctx) => {
       const [id] = parseArgs(args || "");
-      emitReport(ctx, formatUsageReport(runtime, id));
+      showReport(ctx, formatUsageReport(runtime, id));
       setFooterStatus(ctx, runtime);
     },
   });
@@ -552,7 +579,7 @@ export function registerRouterCommands(pi: ExtensionAPI, runtime: RouterRuntime)
     description: "Show raw oauth-router usage/provider quota details",
     handler: async (args, ctx) => {
       const [id] = parseArgs(args || "");
-      emitReport(ctx, formatUsageRawReport(runtime, id));
+      showReport(ctx, formatUsageRawReport(runtime, id));
       setFooterStatus(ctx, runtime);
     },
   });
@@ -561,7 +588,7 @@ export function registerRouterCommands(pi: ExtensionAPI, runtime: RouterRuntime)
     description: "Alias for visual oauth-router usage/quota",
     handler: async (args, ctx) => {
       const [id] = parseArgs(args || "");
-      emitReport(ctx, formatUsageReport(runtime, id));
+      showReport(ctx, formatUsageReport(runtime, id));
       setFooterStatus(ctx, runtime);
     },
   });
@@ -584,7 +611,7 @@ export function registerRouterCommands(pi: ExtensionAPI, runtime: RouterRuntime)
       }
 
       const report = formatUsageReport(runtime, target === "all" ? undefined : target);
-      emitReport(ctx, failures.length ? [report, "", "## Refresh failures", ...failures].join("\n") : report);
+      showReport(ctx, failures.length ? [report, "", "## Refresh failures", ...failures].join("\n") : report);
       if (failures.length) ctx.ui.notify(`oauth-router usage refreshed with ${failures.length} failure(s)`, "error");
       setFooterStatus(ctx, runtime);
     },
@@ -598,7 +625,7 @@ export function registerRouterCommands(pi: ExtensionAPI, runtime: RouterRuntime)
       const label = await getRequiredLabel(ctx, account.label, labelParts.join(" "));
       runtime.renameAccount(account.id, label);
       setFooterStatus(ctx, runtime);
-      emitReport(ctx, `Renamed account ${account.id} to ${label}.`);
+      showReport(ctx, `Renamed account ${account.id} to ${label}.`);
     },
   });
 
@@ -613,13 +640,13 @@ export function registerRouterCommands(pi: ExtensionAPI, runtime: RouterRuntime)
       }
       runtime.removeAccount(account.id);
       setFooterStatus(ctx, runtime);
-      emitReport(ctx, `Deleted account ${account.id}.`);
+      showReport(ctx, `Deleted account ${account.id}.`);
     },
   });
 
   pi.registerCommand("router-relogin", {
     description: "Re-login and recover an oauth-router account",
-    handler: async (args, ctx) => handleRouterLogin(runtime, `relogin ${args || ""}`, ctx),
+    handler: async (args, ctx) => handleRouterLogin(runtime, `relogin ${args || ""}`, ctx, showReport),
   });
 
   pi.registerCommand("router-enable", {
@@ -629,7 +656,7 @@ export function registerRouterCommands(pi: ExtensionAPI, runtime: RouterRuntime)
       const account = await pickAccount(runtime, ctx, id, "Choose account to enable");
       runtime.setEnabled(account.id, true);
       setFooterStatus(ctx, runtime);
-      emitReport(ctx, `Enabled account ${account.id}.`);
+      showReport(ctx, `Enabled account ${account.id}.`);
     },
   });
 
@@ -640,7 +667,7 @@ export function registerRouterCommands(pi: ExtensionAPI, runtime: RouterRuntime)
       const account = await pickAccount(runtime, ctx, id, "Choose account to disable");
       runtime.setEnabled(account.id, false);
       setFooterStatus(ctx, runtime);
-      emitReport(ctx, `Disabled account ${account.id}.`);
+      showReport(ctx, `Disabled account ${account.id}.`);
     },
   });
 
@@ -655,7 +682,7 @@ export function registerRouterCommands(pi: ExtensionAPI, runtime: RouterRuntime)
           "",
           "Usage: /router-policy <round-robin|weighted-round-robin>",
           "Aliases: rr, wrr, weighted",
-        ]);
+        ], showReport);
         return;
       }
       if (!policy) {
@@ -664,12 +691,12 @@ export function registerRouterCommands(pi: ExtensionAPI, runtime: RouterRuntime)
           "",
           `Current policy: ${runtime.getPolicy()}`,
           "Valid values: round-robin, weighted-round-robin",
-        ]);
+        ], showReport);
         return;
       }
       runtime.setPolicy(policy);
       setFooterStatus(ctx, runtime);
-      emitReport(ctx, `Routing policy set to ${policy}.`);
+      showReport(ctx, `Routing policy set to ${policy}.`);
     },
   });
 
@@ -684,12 +711,12 @@ export function registerRouterCommands(pi: ExtensionAPI, runtime: RouterRuntime)
         weight = Number(response);
       }
       if (!Number.isFinite(weight)) {
-        showCommandHint(ctx, "router-weight", ["Usage: /router-weight <id> <n>", "Example: /router-weight acct_ab12cd34 3"]);
+        showCommandHint(ctx, "router-weight", ["Usage: /router-weight <id> <n>", "Example: /router-weight acct_ab12cd34 3"], showReport);
         return;
       }
       runtime.setWeight(account.id, weight);
       setFooterStatus(ctx, runtime);
-      emitReport(ctx, `Updated weight for ${account.id} to ${Math.max(1, Math.floor(weight))}.`);
+      showReport(ctx, `Updated weight for ${account.id} to ${Math.max(1, Math.floor(weight))}.`);
     },
   });
 }

package/.pi/extensions/oauth-router/config.ts

@@ -11,7 +11,7 @@ export const STATE_PATH = join(DATA_ROOT, "state.json");
 
 const LEGACY_CODEX_CONTEXT_WINDOW = 272000;
 const SAFE_CODEX_CONTEXT_WINDOW = 240000;
-const CODEX_MODEL_IDS = new Set(["gpt-5.4", "gpt-5.4-mini", "gpt-5.5", "gpt-5.6-luna", "gpt-5.6-sol", "gpt-5.6-terra"]);
+const CODEX_MODEL_IDS = new Set(["gpt-5.4", "gpt-5.4-mini", "gpt-5.5", "gpt-5.6-luna", "gpt-5.6-sol", "gpt-5.6-terra"]);
 
 const DEFAULT_MODELS: RouterModelConfig[] = [
   {
@@ -32,42 +32,42 @@ const DEFAULT_MODELS: RouterModelConfig[] = [
     contextWindow: SAFE_CODEX_CONTEXT_WINDOW,
     maxTokens: 128000,
   },
-  {
-    id: "gpt-5.5",
+  {
+    id: "gpt-5.5",
     name: "GPT-5.5",
     reasoning: true,
     input: ["text", "image"],
     cost: { input: 5.00, output: 30.00, cacheRead: 0.50, cacheWrite: 6.25 },
     contextWindow: SAFE_CODEX_CONTEXT_WINDOW,
-    maxTokens: 128000,
-  },
-  {
-    id: "gpt-5.6-luna",
-    name: "GPT-5.6 Luna",
-    reasoning: true,
-    input: ["text", "image"],
-    cost: { input: 1.00, output: 6.00, cacheRead: 0.10, cacheWrite: 1.25 },
-    contextWindow: SAFE_CODEX_CONTEXT_WINDOW,
-    maxTokens: 128000,
-  },
-  {
-    id: "gpt-5.6-sol",
-    name: "GPT-5.6 Sol",
-    reasoning: true,
-    input: ["text", "image"],
-    cost: { input: 5.00, output: 30.00, cacheRead: 0.50, cacheWrite: 6.25 },
-    contextWindow: SAFE_CODEX_CONTEXT_WINDOW,
-    maxTokens: 128000,
-  },
-  {
-    id: "gpt-5.6-terra",
-    name: "GPT-5.6 Terra",
-    reasoning: true,
-    input: ["text", "image"],
-    cost: { input: 2.50, output: 15.00, cacheRead: 0.25, cacheWrite: 3.125 },
-    contextWindow: SAFE_CODEX_CONTEXT_WINDOW,
-    maxTokens: 128000,
-  },
+    maxTokens: 128000,
+  },
+  {
+    id: "gpt-5.6-luna",
+    name: "GPT-5.6 Luna",
+    reasoning: true,
+    input: ["text", "image"],
+    cost: { input: 1.00, output: 6.00, cacheRead: 0.10, cacheWrite: 1.25 },
+    contextWindow: SAFE_CODEX_CONTEXT_WINDOW,
+    maxTokens: 128000,
+  },
+  {
+    id: "gpt-5.6-sol",
+    name: "GPT-5.6 Sol",
+    reasoning: true,
+    input: ["text", "image"],
+    cost: { input: 5.00, output: 30.00, cacheRead: 0.50, cacheWrite: 6.25 },
+    contextWindow: SAFE_CODEX_CONTEXT_WINDOW,
+    maxTokens: 128000,
+  },
+  {
+    id: "gpt-5.6-terra",
+    name: "GPT-5.6 Terra",
+    reasoning: true,
+    input: ["text", "image"],
+    cost: { input: 2.50, output: 15.00, cacheRead: 0.25, cacheWrite: 3.125 },
+    contextWindow: SAFE_CODEX_CONTEXT_WINDOW,
+    maxTokens: 128000,
+  },
 ];
 
 const DEFAULT_UPSTREAMS: RouterUpstreamConfig[] = [
@@ -79,7 +79,7 @@ const DEFAULT_UPSTREAMS: RouterUpstreamConfig[] = [
     api: "openai-responses",
     authMode: "api-key",
     enabled: true,
-    modelIds: ["gpt-5.4-mini", "gpt-5.4", "gpt-5.5", "gpt-5.6-luna", "gpt-5.6-sol", "gpt-5.6-terra"],
+    modelIds: ["gpt-5.4-mini", "gpt-5.4", "gpt-5.5", "gpt-5.6-luna", "gpt-5.6-sol", "gpt-5.6-terra"],
   },
   {
     id: "chatgpt-codex",
@@ -90,7 +90,7 @@ const DEFAULT_UPSTREAMS: RouterUpstreamConfig[] = [
     authMode: "oauth",
     oauthProviderId: "openai-codex",
     enabled: true,
-    modelIds: ["gpt-5.4-mini", "gpt-5.4", "gpt-5.5", "gpt-5.6-luna", "gpt-5.6-sol", "gpt-5.6-terra"],
+    modelIds: ["gpt-5.4-mini", "gpt-5.4", "gpt-5.5", "gpt-5.6-luna", "gpt-5.6-sol", "gpt-5.6-terra"],
     usageProbe: {
       enabled: true,
       timeoutMs: 8_000,

package/.pi/extensions/oauth-router/index.ts

@@ -1,5 +1,6 @@
 import type { ExtensionAPI, ExtensionContext } from "@earendil-works/pi-coding-agent";
-import { registerRouterCommands, formatStatusReport } from "./commands.ts";
+import { emitRouterReport, formatStatusReport, registerRouterCommands, type RouterReportControls } from "./commands.ts";
+import { ROUTER_REPORT_WIDGET_KEY } from "./report-ui.ts";
 import { registerRouterProvider, RouterRuntime } from "./provider.ts";
 import type { RouterUiEvent } from "./types.ts";
 
@@ -64,8 +65,33 @@ function notifyActivity(ctx: ExtensionContext, event: RouterUiEvent) {
   ctx.ui.notify(message, level);
 }
 
-function installRouterUiBridge(pi: ExtensionAPI, runtime: RouterRuntime, notifyOnLoad = false) {
+function installRouterUiBridge(pi: ExtensionAPI, runtime: RouterRuntime, notifyOnLoad = false): RouterReportControls {
   let activeCtx: ExtensionContext | undefined;
+  let reportGeneration = 0;
+  let activeReport: { generation: number; ctx: ExtensionContext } | undefined;
+
+  const clearReport = (fallbackCtx?: ExtensionContext, clearFallback = false) => {
+    const report = activeReport;
+    const ctx = report?.ctx ?? (clearFallback ? fallbackCtx : undefined);
+    if (!ctx) return;
+
+    try {
+      ctx.ui.setWidget(ROUTER_REPORT_WIDGET_KEY, undefined);
+    } catch {
+      // Widget lifecycle is best-effort and must not interrupt agent activity.
+    } finally {
+      // A re-entrant command can replace the report while the old widget clears.
+      // Its newer generation remains active instead of being erased by this clear.
+      if (report && activeReport?.generation === report.generation) activeReport = undefined;
+    }
+  };
+
+  const showReport: RouterReportControls["show"] = (ctx, text) => {
+    const report = { generation: ++reportGeneration, ctx };
+    activeCtx = ctx;
+    activeReport = report;
+    emitRouterReport(ctx, text);
+  };
 
   const setBaseStatus = (ctx: ExtensionContext) => {
     activeCtx = ctx;
@@ -84,14 +110,29 @@ function installRouterUiBridge(pi: ExtensionAPI, runtime: RouterRuntime, notifyO
   });
 
   pi.on("session_start", async (_event, ctx) => {
+    // A session replacement owns a fresh transport, so clear the old transport
+    // before accepting reports for the new one.
+    clearReport(activeCtx, true);
     setBaseStatus(ctx);
     if (notifyOnLoad) ctx.ui.notify("oauth-router loaded", "info");
   });
 
+  pi.on("input", async (event, ctx) => {
+    // Registered slash commands run before Pi emits input and return without an
+    // input event. Ordinary text/image input reaches this handler before its
+    // agent starts, which is the intended transient-dismissal boundary.
+    if (event.text.trim() || event.images?.length) clearReport(ctx);
+  });
+
   pi.on("agent_start", async (_event, ctx) => {
+    clearReport(ctx);
     setBaseStatus(ctx);
   });
 
+  pi.on("tool_execution_start", async (_event, ctx) => {
+    clearReport(ctx);
+  });
+
   pi.on("turn_start", async (_event, ctx) => {
     setBaseStatus(ctx);
   });
@@ -105,26 +146,26 @@ function installRouterUiBridge(pi: ExtensionAPI, runtime: RouterRuntime, notifyO
   });
 
   pi.on("session_shutdown", async () => {
+    // The old context owns the RPC transport. Clear its report before releasing
+    // it so clients do not retain a widget across a session replacement.
+    clearReport(activeCtx, true);
     activeCtx = undefined;
   });
+
+  return { show: showReport, clear: (ctx) => clearReport(ctx, true) };
 }
 
 export default function (pi: ExtensionAPI) {
   const runtime = new RouterRuntime();
 
   registerRouterProvider(pi, runtime);
-  registerRouterCommands(pi, runtime);
-  installRouterUiBridge(pi, runtime, false);
+  const reportControls = installRouterUiBridge(pi, runtime, false);
+  registerRouterCommands(pi, runtime, reportControls);
 
   pi.registerCommand("router-debug-report", {
     description: "Show a detailed oauth-router report in the UI only",
     handler: async (_args, ctx) => {
-      const report = formatStatusReport(runtime);
-      ctx.ui.setWidget("oauth-router-report", [
-        "oauth-router debug report (UI-only; not sent to the agent)",
-        ...report.split(/\r?\n/),
-      ], { placement: "belowEditor" });
-      ctx.ui.notify("oauth-router debug report updated", "info");
+      reportControls.show(ctx, formatStatusReport(runtime));
     },
   });
 }