@oh-my-pi/pi-coding-agent 15.10.1 → 15.10.2

package/CHANGELOG.md

@@ -2,6 +2,73 @@
 
 ## [Unreleased]
 
+## [15.10.2] - 2026-06-08
+### Added
+
+- Added `raw-sse.txt` to debug report bundles, exporting recent raw provider SSE diagnostics when captured
+- Added `/model` visibility for auto-selected role defaults: inferred `pi/smol`/`pi/slow`/designer choices now show as compact `[ROLE auto]` badges, while explicitly configured roles keep the existing solid badges and thinking labels.
+- Added credential provenance to the `/login` and `/logout` provider picker: each authenticated provider now shows where its credential comes from — `(login)`, `(api key)`, `(env: VAR_NAME)`, `(config)`, `(--api-key)`, or `(custom provider)` — so a real OAuth login is distinguishable from an env var that merely aliases the provider (e.g. `COPILOT_GITHUB_TOKEN`). The origin is also matched by the picker's type-to-search filter.
+
+### Changed
+
+- Changed raw SSE debug export output to prepend dropped-record metadata so truncated sessions in debug bundles now report dropped record and character counts
+- Changed settings reads to cache pre-split schema paths and resolved values, with coarse invalidation on source/cwd changes.
+- Changed status-line rendering to cache merged effective settings until `updateSettings()` changes the configuration.
+- Changed `CustomEditor` app shortcut dispatch to parse each input packet once and match against precomputed canonical key sets, preserving the existing shortcut precedence while avoiding repeated key reparses.
+- Changed `lsp references` to retry only when no references or only the queried declaration are returned, using two fixed 250ms retries for project-aware servers
+- Changed `read` handling of `https://github.com/<owner>/<repo>:raw` to use raw page rendering only, removing the GitHub API README fallback
+- Changed model resolution to apply provider-priority ordering when selecting models for roles and ambiguous patterns, using `modelProviderOrder` settings and built-in provider priority so first-party providers are preferred over relays in tie cases
+- Changed model canonical variant selection to use the same provider-priority ordering instead of candidate order when deduplicating equivalent upstream models
+- Changed the working-message shimmer to sweep at a fixed velocity (cells/second) instead of a fixed sweep duration divided by the message length. The band now advances ≤1 cell per 30fps redraw frame and stays equally smooth on short and long messages — previously a longer message swept proportionally faster and stepped visibly because it outran the redraw cadence. Sweep/round-trip duration now scales with length. Additionally, when `display.shimmer = disabled` the working line is static, so the loader no longer schedules 30fps redraws for it and falls back to the spinner-only ~12.5fps cadence.
+- Changed the eval fan-out trigger keyword from `workflow`/`workflows` to `workflowz`.
+
+### Fixed
+
+- Fixed working-message loader session accents so spinner/message color math is cached per session name, session-accent setting, and theme luminance while still updating immediately on renames, setting toggles, and theme changes.
+- Fixed startup model fallback selection so sessions now prefer each provider’s configured default model before choosing the first available authenticated model
+- Fixed implicit model selection path for tools and sessions by honoring persisted model-provider order when no explicit pattern is provided
+- Fixed the working spinner appearing to ignore Esc for 2-3 seconds when an interrupt lands mid-tool. Esc fires the abort synchronously, but the agent loop only stops the loader at `agent_end`, which it cannot reach until every in-flight tool settles in `executeToolCalls`' `await Promise.allSettled(...)` — and process/subagent/kernel-owning tools tear down gracefully (SIGTERM, 2-3s grace, SIGKILL), so the loader kept showing the unchanged "Working…/<intent>" line and read as a dropped keypress. The loader now switches to "Interrupting…" the instant Esc requests the abort and freezes intent-driven label updates until the turn unwinds (`EventController.notifyInterrupting`), so the interrupt is acknowledged immediately even while teardown completes.
+- Fixed a flaky JS eval worker startup that intermittently failed unrelated CI runs. The worker-ready wait reused Bun's 5s default per-test timeout as its floor, so a slow cold-start under `--isolate` + high concurrency was aborted mid-init; terminating a still-initializing Bun worker is the documented SIGILL/SIGTRAP crash trigger, which took down the whole test file. Worker init now floors at a fixed 15s infrastructure budget (independent of, and still dominated by, a larger per-cell `timeout`), and the JS eval test suites set a 20s file-local timeout so cold starts complete instead of being torn down.
+- Fixed reviewer-style subagent yields crashing the calling eval cell when a caller-supplied output schema declares `additionalProperties: false` without a `findings` property. `normalizeCompleteData` now consults the active validator before splicing collected `report_finding` entries onto the yielded payload, so injection is suppressed when the schema would reject it — keeping the executor's post-mortem validation in lockstep with the in-tool `yield` validation that already accepted the same raw payload ([#2070](https://github.com/can1357/oh-my-pi/issues/2070))
+- Fixed Anthropic empty `toolUse` stops without tool calls corrupting session history by retrying them and removing orphaned turns even at the retry cap.
+- Fixed MCP tools hanging in non-yolo modes by declaring `approval = "write"` on `MCPTool` and `DeferredMCPTool`, and propagating the `approval` property through `customToolToDefinition()` in `sdk.ts`
+- Fixed session resumption after a working directory is moved/renamed (e.g. `git worktree move`): `--continue` now re-roots the terminal's last session into the new directory when its original directory no longer exists, explicit `--resume <id> --session-dir <dir>` local matches re-root instead of reopening with the stale cwd, and cross-project `--resume <id>` offers to move (re-root) the session rather than only forking a duplicate copy when the source directory is gone
+- Fixed Kitty OSC 5522 paste rejecting plain text as "no supported text or image data": the listing parser now decodes the `mime="."` DATA payload (whitespace-separated MIME list) Kitty actually sends, in addition to the per-type DATA packets described by the ancillary 5522-mode spec, and per-type spec listings now request the selected payload with `type=read:mime=...` instead of Kitty's dot-payload request shape ([#2051](https://github.com/can1357/oh-my-pi/issues/2051))
+- Fixed follow-up shortcut submission of builtin slash commands so `/goal set ...` applies goal mode instead of queueing as plain text.
+- Fixed Ctrl+Z crashing the agent on Windows with `TypeError: Unknown signal: SIGTSTP`. `InputController.handleCtrlZ` called `process.kill(0, "SIGTSTP")` unconditionally, but `SIGTSTP` is POSIX job-control and Bun/Node on Windows rejects the signal name from the JS side; the throw propagated out of the TUI input dispatcher as an uncaught exception. The handler now no-ops with a "Suspend (Ctrl+Z) is not supported on this platform" status on Windows, and on POSIX wraps `process.kill` in a try/catch that detaches the registered SIGCONT resume hook and re-`start()`s the TUI on failure so a rejected signal can never leave the UI stranded with a leaked listener ([#2036](https://github.com/can1357/oh-my-pi/issues/2036)).
+- Fixed a relative `--cwd` target (e.g. `omp --cwd repo` launched from `/tmp`) leaking the raw relative string into the session config. `applyStartupCwd` chdired into the resolved directory via `setProjectDir` but left `parsed.cwd` as `"repo"`, so `buildSessionOptions` (which prefers `parsed.cwd` over `getProjectDir()`) handed downstream settings/discovery/session creation a value that re-resolved against the new process cwd (`/tmp/repo/repo`) or persisted a relative session cwd. `parsed.cwd` is now re-synced to the resolved absolute project dir after the chdir.
+- Fixed the `--cwd` launch flag so it is parsed and can override the startup directory instead of always falling back to the current process directory or home auto-switch target.
+- Fixed session auto-retry for generic `upstream_error: Upstream request failed` gateway failures.
+- Stripped read-output line-number prefixes (`N:`) from auto-piped bare body rows in the hashline edit parser, so pasting `3:text` without a `+` prefix no longer injects `3:` as literal content. Uses single-pass stripping to avoid corrupting content whose own text starts with `digits:` ([#1492](https://github.com/can1357/oh-my-pi/issues/1492)).
+- Fixed `eval` `llm()` returning HTTP 400 "Instructions are required" when called without a `system` prompt against providers (notably `openai-codex`) whose Responses transformer drops the `instructions` field on an empty system prompt. `runEvalLlm` now sends a minimal default system prompt ("You are a helpful assistant.") when no `system` is supplied, so `llm("question")` works against every provider; an explicit `system=` still wins.
+- Fixed the Python `read(path, offset, limit)` prelude helper rejecting documented positional arguments with `TypeError: read() takes 1 positional argument but 3 were given`. The signature was keyword-only (`def read(path, *, offset=1, limit=None)`) while the eval helper table advertises positional optional args; agents that called `read("file.py", 10, 20)` literally crashed. The `*` is removed so both `read("f", 10, 20)` and `read("f", offset=10, limit=20)` work.
+- Fixed `eval` reset cells failing with `"Python kernel reset already in progress"` / `"JS context reset already in progress"` when two cells happened to overlap on the same session (e.g. a rapid resubmit, or a parallel-cell race). The executor now coalesces concurrent resets — additional callers wait for the in-flight reset to finish and then run on the freshly restarted kernel — instead of throwing a user-visible error for what is purely an internal coordination state.
+- Fixed the `eval` tool description advertising the `agent()` helper unconditionally even in subagent sessions whose parent forbids spawning. When `getSessionSpawns()` returns `""`, the prelude doc now omits `agent()` so the model is not promised a helper that can only ever throw "Cannot spawn 'task'. Allowed: none (spawns disabled for this agent)".
+- Fixed plan mode rejecting `local://` plan-artifact edits when addressed via the absolute path the `read` tool echoes back in the `[path#tag]` header. `enforcePlanModeWrite` previously only matched the literal `local://` scheme; it now also accepts any absolute path whose realpath resolves inside the session's local sandbox root, so the absolute spelling and the `local://` spelling are interchangeable in plan mode.
+- Fixed snapshot tags freshly minted by `read` being rejected as stale by a subsequent `edit` against the same file when the two sides reached the file via symlink-equivalent spellings (e.g. macOS `/tmp/…` vs `/private/tmp/…`, or `read local://foo.md` recording under the file's `fs.realpath` while `edit local://foo.md` looked up under the raw `path.resolve(localRoot, …)` form). The file snapshot store now keys every record/lookup through a `realpath`-canonicalized key (`canonicalSnapshotKey`), fusing all spellings of the same on-disk file onto one snapshot entry.
+- Fixed `read` of a `github.com/<owner>/<repo>` URL with `:raw` returning the full JS-rendered HTML shell. Repo roots now resolve to the decoded README via the GitHub API (`/repos/<owner>/<repo>/readme`), falling back to the raw HTML only when the API returns no usable payload.
+- Fixed `issue://` and `pr://` reads returning stale OPEN/CLOSED state after a successful `gh issue close` / `gh pr merge` (or any other state-changing `gh` invocation) in the same session. The `bash` tool now invalidates the matching `github-cache` rows before executing any `gh (issue|pr) <close|reopen|merge|delete|edit|comment|lock|unlock|pin|unpin|transfer|develop|ready|review>` command.
+- Fixed line-range selectors on PDF/DOCX/PPTX/XLSX/RTF/EPUB reads being ignored. The markit-converted markdown body now flows through the same in-memory range slicer used for plain text, so `file.pdf:50-100` and `file.pdf:5-16,40-80` slice the converted body instead of returning the whole document.
+- Fixed the `read` selector cheatsheet incorrectly promising "exactly one line" for `:N+1` while the implementation pads single-line reads with ≤1 leading and ≤3 trailing context; documented that multi-range selectors do not pad, giving callers a way to request exact bounds.
+- Documented the `bash.autoBackground.enabled` behavior in the `bash` tool prompt so the `Background job <id> started: …` notice for foreground commands that exceed `autoBackgroundThresholdSeconds` no longer reads as a tool malfunction.
+- Fixed `task` subagents whose in-tool `yield` validator had already accepted a payload after exhausting `MAX_SCHEMA_RETRIES` being rejected a second time by the post-mortem executor validator. The override now propagates through the yield tool's `details.schemaOverridden` flag, and the executor surfaces a `SUBAGENT_WARNING_SCHEMA_OVERRIDDEN` stderr line instead of re-emitting `schema_violation` for data the subagent already had to ship. Finalize also degrades to no validation (matching the yield tool's `looseRecordSchema` fallback) when the caller-supplied output schema fails to normalize.
+- Fixed the `web_search` `codex` provider returning `(see attached image)` / `[Attached image]` / `See image above` and similar non-informational image-placeholder strings as the answer. Detection broadened to a small regex set, and when annotations did produce sources we now drop the placeholder prose from `answer` (returning sources only); when neither annotations nor a real answer materialize, we throw 502 to advance the provider chain.
+- Fixed `search`, `find`, `ast_grep`, and `ast_edit` rejecting bracket-containing file paths (Next.js routes like `apps/[id]/page.tsx`) as glob patterns when the literal path exists on disk. `parseSearchPathPreferringLiteral` now prefers the literal interpretation for paths that resolve on disk and only falls back to glob expansion when the literal does not exist.
+- Fixed `search` with an external `http(s)/ftp/ws/file://` URL in `paths` surfacing a misleading "Path not found" error. The tool now rejects external URLs with a clear "use `read` for URLs" message.
+- Fixed `search` rejecting `skip: null` at the schema layer; `null` now normalizes to `0` alongside the omitted case, matching how callers serialize default pagination state.
+- Fixed `search` returning zero matches with no explanation when explicit file targets exceed the native grep cap (4 MB). The tool now surfaces a `Skipped oversized files (>4MB grep limit; …)` notice listing the truncated paths.
+- Fixed the archive-extraction error message in `search` recommending `grep` — which the system prompt forbids — instead of pointing to `read <archive>:<member>`.
+- Fixed `browser` `tab.open(name, { viewport })` on an existing tab not applying the new viewport: `acquireTab`'s reuse path now resizes the page in addition to navigating.
+- Fixed `browser` tab metadata leaking `user:pass@` basic-auth credentials in the URL surfaced to transcripts and observe snapshots; URLs are now redacted via `redactUrlCredentials()`.
+- Fixed `browser` `tab.extract(format)` returning a `ReadableResult | null` shape that the tool prompt advertised as plain content. The helper now returns the markdown/text string directly (or throws a clear `ToolError` when extraction is empty), and the prompt matches.
+- Fixed `lsp` requests timing out at a hard-coded 30 s ceiling when the caller supplied an explicit abort signal (e.g. the tool wall-clock). The signal is now the deadline; the 30 s default still applies when neither a signal nor an explicit `timeoutMs` is provided.
+- Fixed `lsp status` reporting servers as `Active language servers: …` when the binary resolves on PATH but never spawns (rustup wrapper, missing toolchain component, etc.). Status now labels each entry as `(ready)` or `(configured, not started)`.
+- Fixed `lsp rename_file` fanning `willRenameFiles` requests across every configured server (including ones with no jurisdiction over the file type) and burning the wall-clock timeout. The action now pre-filters configured LSPs to those whose `fileTypes` cover the source or destination path, falling back to a plain filesystem rename when no server claims the type.
+- Fixed `lsp references` returning only the queried declaration (or only in-file results) on project-aware servers that had not finished indexing. The retry budget is raised from 2 → 3 with 250 / 500 / 1000 ms backoff, and the retry trigger now also fires when all results live in the queried file.
+- Fixed `lsp config` accepting `fileTypes` entries with or without a leading dot inconsistently across actions; both `.ts` and `ts` are now normalized so a missing-dot entry no longer silently excludes a server from extension-based routing.
+- Fixed `lsp request` error path swallowing the params that were sent, making shape/coercion bugs on raw LSP calls impossible to diagnose in one round-trip; the error now echoes a truncated copy of the request params.
+- Fixed `find` with a single-star segment like `dir/*` recursing into subdirectories and returning nested matches. `parseFindPattern` already prepends `**/` for top-level globs (`*.ts` → `**/*.ts`), so anything reaching native without `**/` was deliberately scoped by the user; `recursive: false` is now passed to `natives.glob` to honor that scope.
+
 ## [15.10.1] - 2026-06-07
 
 ### Added

package/dist/types/cli/startup-cwd.d.ts

@@ -0,0 +1,2 @@
+import type { Args } from "./args";
+export declare function applyStartupCwd(parsed: Args): Promise<void>;

package/dist/types/commands/launch.d.ts

@@ -40,6 +40,9 @@ export default class Index extends Command {
         "allow-home": import("@oh-my-pi/pi-utils/cli").FlagDescriptor<"boolean"> & {
             description: string;
         };
+        cwd: import("@oh-my-pi/pi-utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
         mode: import("@oh-my-pi/pi-utils/cli").FlagDescriptor<"string"> & {
             description: string;
             options: string[];

package/dist/types/config/keybindings.d.ts

@@ -109,11 +109,11 @@ export declare const KEYBINDINGS: {
         readonly description: "Delete character forward";
     };
     readonly "tui.editor.deleteWordBackward": {
-        readonly defaultKeys: ["ctrl+w", "alt+backspace", "ctrl+backspace"];
+        readonly defaultKeys: ["ctrl+w", "alt+backspace", "ctrl+backspace", "super+alt+backspace"];
         readonly description: "Delete word backward";
     };
     readonly "tui.editor.deleteWordForward": {
-        readonly defaultKeys: ["alt+delete", "alt+d"];
+        readonly defaultKeys: ["alt+delete", "alt+d", "super+alt+delete", "super+alt+d"];
         readonly description: "Delete word forward";
     };
     readonly "tui.editor.deleteToLineStart": {

package/dist/types/config/model-provider-priority.d.ts

@@ -0,0 +1 @@
+export declare function buildModelProviderPriorityRank(configuredProviderOrder?: readonly string[]): Map<string, number>;

package/dist/types/config/model-resolver.d.ts

@@ -30,7 +30,9 @@ export declare function resolveProviderModelReference(provider: string, modelId:
 export interface ModelMatchPreferences {
     /** Most-recently-used model keys (provider/modelId) to prefer when ambiguous. */
     usageOrder?: string[];
-    /** Providers to deprioritize when no recent usage is available. */
+    /** Provider precedence used for ambiguous unqualified model patterns. */
+    providerOrder?: readonly string[];
+    /** Providers to deprioritize when no recent usage or provider priority is available. */
     deprioritizeProviders?: string[];
 }
 export type CanonicalModelRegistry = Partial<Pick<ModelRegistry, "resolveCanonicalModel" | "getCanonicalVariants" | "getCanonicalId">>;
@@ -38,6 +40,7 @@ export type ModelLookupRegistry = Pick<ModelRegistry, "getAvailable"> & Partial<
 type CliModelRegistry = Pick<ModelRegistry, "getAll"> & Partial<CanonicalModelRegistry>;
 type InitialModelRegistry = Pick<ModelRegistry, "getAvailable" | "find">;
 type RestorableModelRegistry = Pick<ModelRegistry, "getAvailable" | "find" | "getApiKey">;
+export declare function getModelMatchPreferences(settings?: Partial<Pick<Settings, "get" | "getStorage">>): ModelMatchPreferences;
 /**
  * Find an exact explicit provider/model match.
  * Bare model ids are handled separately so canonical ids can coalesce variants.

package/dist/types/config/settings.d.ts

@@ -131,7 +131,12 @@ export declare class Settings {
  * Returns an unsubscribe function. Multiple sessions (main + subagents)
  * can register independently without overwriting each other.
  */
-export declare function onAppendOnlyModeChanged(cb: (value: string) => void): () => void;
+export declare const onAppendOnlyModeChanged: (cb: (value: string) => void) => () => void;
+/**
+ * Subscribe to session-accent setting changes.
+ * Returns an unsubscribe function. Callers should re-read settings in the callback.
+ */
+export declare const onStatusLineSessionAccentChanged: (cb: () => void) => () => void;
 /**
  * Subscribe to changes in the Hindsight bank-scoping settings. Lets the
  * Hindsight backend rebuild the active `HindsightSessionState` when the
@@ -142,7 +147,7 @@ export declare function onAppendOnlyModeChanged(cb: (value: string) => void): ()
  * Returns an unsubscribe function. The callback receives no arguments — the
  * caller is expected to re-read the relevant settings via `Settings.get`.
  */
-export declare function onHindsightScopeChanged(cb: () => void): () => void;
+export declare const onHindsightScopeChanged: (cb: () => void) => () => void;
 export declare function isSettingsInitialized(): boolean;
 /**
  * Reset the global singleton for testing.

package/dist/types/debug/report-bundle.d.ts

@@ -11,6 +11,8 @@ export interface ReportBundleOptions {
     heapSnapshot?: HeapSnapshot;
     /** Work profile (for work scheduling reports) */
     workProfile?: WorkProfile;
+    /** Raw provider SSE diagnostics captured by the session buffer */
+    rawSseText?: string;
 }
 export interface ReportBundleResult {
     path: string;
@@ -33,6 +35,7 @@ export interface DebugLogSource {
  * - env.json: Sanitized environment variables
  * - config.json: Resolved settings
  * - profile.cpuprofile: CPU profile (performance report only)
+ * - raw-sse.txt: Recent raw provider SSE diagnostics (when captured)
  * - profile.md: Markdown CPU profile (performance report only)
  * - heap.heapsnapshot: Heap snapshot (memory report only)
  * - work.folded: Work profile folded stacks (work report only)

package/dist/types/edit/file-snapshot-store.d.ts

@@ -1,13 +1,3 @@
-/**
- * Session-bound file snapshot store.
- *
- * Used by `read` and `search` to record exactly what the model saw, and by
- * the hashline patcher to verify or recover from stale section tags (file
- * changed externally between read and edit, or a prior in-session edit
- * advanced the tag). The store is the {@link InMemorySnapshotStore}
- * from `@oh-my-pi/hashline`; the only coding-agent-specific concern here
- * is wiring it onto the per-session owner object.
- */
 import { InMemorySnapshotStore } from "@oh-my-pi/hashline";
 /**
  * Upper bound on the file size we snapshot. A section tag is a content hash of
@@ -25,6 +15,24 @@ interface FileSnapshotStoreOwner {
  * the session itself.
  */
 export declare function getFileSnapshotStore(session: FileSnapshotStoreOwner): InMemorySnapshotStore;
+/**
+ * Canonicalize an absolute path into the stable key the snapshot store uses.
+ *
+ * Different code paths reach the snapshot store via different path forms:
+ * `read local://foo.md` records under the file's `fs.realpath` (the local
+ * protocol handler resolves symlinks); a subsequent `edit` may address the
+ * same artifact via `local://foo.md`, whose resolver does NOT realpath, or
+ * via the absolute path returned in the `[path#tag]` header. macOS adds the
+ * same hazard at the working-tree level (`/tmp/...` vs `/private/tmp/...`).
+ * Collapsing every key through `realpath` makes those forms fuse onto one
+ * snapshot entry, so a freshly-minted tag is never rejected as stale just
+ * because the lookup spelled the same file differently.
+ *
+ * Non-existent paths (new-file writes) fall back to a realpath of the parent
+ * directory + basename, then to the input. This keeps creates and updates on
+ * the same canonical key.
+ */
+export declare function canonicalSnapshotKey(absolutePath: string): string;
 /**
  * Read the full text of `absolutePath` (within {@link SNAPSHOT_MAX_BYTES}),
  * record it as a version snapshot, and return its content-hash tag. Returns

package/dist/types/eval/py/__tests__/prelude.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/extensibility/extensions/types.d.ts

@@ -7,7 +7,7 @@
  * - Register commands, keyboard shortcuts, and CLI flags
  * - Interact with the user via UI primitives
  */
-import type { AgentMessage, AgentToolResult, AgentToolUpdateCallback, ThinkingLevel } from "@oh-my-pi/pi-agent-core";
+import type { AgentMessage, AgentToolResult, AgentToolUpdateCallback, ThinkingLevel, ToolApproval } from "@oh-my-pi/pi-agent-core";
 import type { CompactionResult } from "@oh-my-pi/pi-agent-core/compaction";
 import type { Api, AssistantMessageEvent, AssistantMessageEventStream, Context, ImageContent, Model, ProviderResponseMetadata, SimpleStreamOptions, Static, TextContent, TSchema } from "@oh-my-pi/pi-ai";
 import type { OAuthCredentials, OAuthLoginCallbacks } from "@oh-my-pi/pi-ai/utils/oauth/types";
@@ -270,6 +270,9 @@ export interface ToolDefinition<TParams extends TSchema = TSchema, TDetails = un
     defaultInactive?: boolean;
     /** If true, tool may stage deferred changes that require explicit resolve/discard. */
     deferrable?: boolean;
+    /** Tool approval tier. Defaults to `"exec"` when omitted.
+     *  `"read"`: read-only operations. `"write"`: mutations. `"exec"`: code execution. */
+    approval?: ToolApproval;
     /** MCP server name for discovery/search metadata when this tool fronts an MCP server. */
     mcpServerName?: string;
     /** Original MCP tool name for discovery/search metadata. */

package/dist/types/lsp/client.d.ts

@@ -45,6 +45,16 @@ export declare function refreshFile(client: LspClient, filePath: string, signal?
 export declare function shutdownClient(key: string): Promise<void>;
 /**
  * Send an LSP request and wait for response.
+ *
+ * Timeout policy:
+ * - If `timeoutMs` is explicitly provided, that value is used.
+ * - Else, if `signal` is provided, no internal timer is installed (the caller
+ *   owns the deadline via the signal — typically a wall-clock `AbortSignal.timeout`
+ *   from the LSP tool). Installing a second hard-coded 30s timer here used to
+ *   cause "timed out after 30000ms" errors even when the caller had requested
+ *   `timeout: 60`.
+ * - Else (no signal, no explicit timeout), fall back to `DEFAULT_REQUEST_TIMEOUT_MS`
+ *   to avoid leaking pending requests forever.
  */
 export declare function sendRequest(client: LspClient, method: string, params: unknown, signal?: AbortSignal, timeoutMs?: number): Promise<unknown>;
 /**

package/dist/types/main.d.ts

@@ -1,9 +1,3 @@
-/**
- * Main entry point for the coding agent CLI.
- *
- * This file handles CLI argument parsing and translates them into
- * createAgentSession() options. The SDK does the heavy lifting.
- */
 import type { Args } from "./cli/args";
 import { ModelRegistry } from "./config/model-registry";
 import { Settings } from "./config/settings";
@@ -41,10 +35,10 @@ export interface AcpSessionFactoryOptions {
  * tool registry and shadow the client-supplied servers (issue #1234).
  */
 export declare function createAcpSessionFactory(args: AcpSessionFactoryOptions): AcpSessionFactory;
-type ForkSessionPromptResult = "accepted" | "declined" | "unavailable";
-type ForkSessionPrompt = (session: SessionInfo) => Promise<ForkSessionPromptResult>;
+type SessionPromptResult = "accepted" | "declined" | "unavailable";
+type SessionPrompt = (session: SessionInfo) => Promise<SessionPromptResult>;
 /** Resolves CLI session flags into an existing, forked, in-memory, or cancelled session manager. */
-export declare function createSessionManager(parsed: Args, cwd: string, activeSettings?: Settings, askToForkSession?: ForkSessionPrompt): Promise<SessionManager | undefined>;
+export declare function createSessionManager(parsed: Args, cwd: string, activeSettings?: Settings, askToForkSession?: SessionPrompt, askToMoveSession?: SessionPrompt): Promise<SessionManager | undefined>;
 interface RunRootCommandDependencies {
     createAgentSession?: typeof createAgentSession;
     discoverAuthStorage?: typeof discoverAuthStorage;

package/dist/types/mcp/tool-bridge.d.ts

@@ -53,6 +53,7 @@ export declare class MCPTool implements CustomTool<TSchema, MCPToolDetails> {
     readonly mcpToolName: string;
     /** Server name */
     readonly mcpServerName: string;
+    readonly approval: "write";
     /** Render completed MCP calls with the result header replacing the pending call header. */
     readonly mergeCallAndResult = true;
     /** Create MCPTool instances for all tools from an MCP server connection */
@@ -79,6 +80,7 @@ export declare class DeferredMCPTool implements CustomTool<TSchema, MCPToolDetai
     readonly mcpToolName: string;
     /** Server name */
     readonly mcpServerName: string;
+    readonly approval: "write";
     /** Render completed MCP calls with the result header replacing the pending call header. */
     readonly mergeCallAndResult = true;
     /** Create DeferredMCPTool instances for all tools from an MCP server */

package/dist/types/modes/components/custom-editor.d.ts

@@ -8,7 +8,7 @@ export declare function extractBracketedImagePastePath(data: string): string | u
 export declare class CustomEditor extends Editor {
     #private;
     imageLinks?: readonly (string | undefined)[];
-    /** Gradient-highlight the "ultrathink" / "orchestrate" / "workflow" keywords as the user types
+    /** Gradient-highlight the "ultrathink" / "orchestrate" / "workflowz" keywords as the user types
      *  them, skipping any occurrence inside code spans, fenced blocks, or XML sections. Also make
      *  pasted image placeholders visually distinct and hyperlink them once their blob file exists. */
     decorateText: (text: string) => string;

package/dist/types/modes/components/status-line.d.ts

@@ -30,11 +30,13 @@ export interface StatusLineSettings {
     showHookStatus?: boolean;
     sessionAccent?: boolean;
 }
+export type EffectiveStatusLineSettings = Required<Pick<StatusLineSettings, "leftSegments" | "rightSegments" | "separator" | "segmentOptions">> & StatusLineSettings;
 export declare class StatusLineComponent implements Component {
     #private;
     private readonly session;
     constructor(session: AgentSession);
     updateSettings(settings: StatusLineSettings): void;
+    getEffectiveSettingsForTest(): EffectiveStatusLineSettings;
     setAutoCompactEnabled(enabled: boolean): void;
     setSubagentCount(count: number): void;
     setSessionStartTime(time: number): void;

package/dist/types/modes/controllers/event-controller.d.ts

@@ -1,10 +1,27 @@
 import type { InteractiveModeContext } from "../../modes/types";
 import type { AgentSessionEvent } from "../../session/agent-session";
+/**
+ * Loader label shown the instant a user interrupt (Esc) is requested, kept until
+ * the agent turn fully unwinds. Esc fires the abort synchronously, but the loop
+ * only stops the spinner at `agent_end`, which it cannot reach until every
+ * in-flight tool settles its abort in `executeToolCalls` (`Promise.allSettled`).
+ * Swapping the steady "Working…" for this acknowledges the keypress instead of
+ * reading as an ignored Esc for the seconds a slow tool takes to tear down.
+ */
+export declare const INTERRUPTING_WORKING_MESSAGE = "Interrupting\u2026";
 export declare class EventController {
     #private;
     private ctx;
     constructor(ctx: InteractiveModeContext);
     dispose(): void;
+    /**
+     * Acknowledge a user interrupt (Esc) immediately: switch the loader to
+     * `INTERRUPTING_WORKING_MESSAGE` and freeze intent-driven working-message
+     * updates for the rest of the turn so a late `tool_execution_start` intent
+     * cannot repaint a "Working…/<intent>" line over the acknowledgment. Reset at
+     * the next `agent_start`. No-op outside an active turn or if already set.
+     */
+    notifyInterrupting(): void;
     subscribeToAgent(): void;
     handleEvent(event: AgentSessionEvent): Promise<void>;
     sendCompletionNotification(): void;

package/dist/types/modes/interactive-mode.d.ts

@@ -180,6 +180,7 @@ export declare class InteractiveMode implements InteractiveModeContext {
     ensureLoadingAnimation(): void;
     setWorkingMessage(message?: string): void;
     applyPendingWorkingMessage(): void;
+    notifyInterrupting(): void;
     showNewVersionNotification(newVersion: string): void;
     clearEditor(): void;
     updatePendingMessagesDisplay(): void;

package/dist/types/modes/magic-keywords.d.ts

@@ -1,6 +1,6 @@
 /**
  * Gradient-highlight every magic keyword ("ultrathink", "orchestrate",
- * "workflow") that appears as standalone prose, skipping any occurrence inside a
+ * "workflowz") that appears as standalone prose, skipping any occurrence inside a
  * code block, inline code span, or XML/HTML section. Each highlighter paints its
  * own keyword with its own gradient, so chaining is order-independent — the
  * earlier passes only inject zero-width SGR escapes (no backticks or angle

package/dist/types/modes/markdown-prose.d.ts

@@ -1,6 +1,6 @@
 /**
  * Markdown structure awareness for the magic-keyword affordances
- * ("ultrathink"/"orchestrate"/"workflow").
+ * ("ultrathink"/"orchestrate"/"workflowz").
  *
  * Keyword detection and editor/transcript highlighting must fire only on prose
  * the user is actually addressing to the model — never on a word that happens to

package/dist/types/modes/types.d.ts

@@ -159,6 +159,9 @@ export interface InteractiveModeContext {
     flushPendingModelSwitch(): Promise<void>;
     setWorkingMessage(message?: string): void;
     applyPendingWorkingMessage(): void;
+    /** Acknowledge a user interrupt (Esc) by switching the loader to an
+     *  "Interrupting…" label until the agent turn unwinds. */
+    notifyInterrupting(): void;
     ensureLoadingAnimation(): void;
     startPendingSubmission(input: {
         text: string;

package/dist/types/modes/workflow.d.ts

@@ -1,14 +1,14 @@
 import { type KeywordHighlighter } from "./gradient-highlight";
-/** Hidden system notice appended after a user message that mentions "workflow". */
+/** Hidden system notice appended after a user message that mentions "workflowz". */
 export declare const WORKFLOW_NOTICE: string;
 /**
- * Whether `text` contains the standalone keyword "workflow"/"workflows"
+ * Whether `text` contains the standalone keyword "workflowz"
  * (lowercase, whitespace-delimited) in prose — never inside a code block, inline
  * code span, or XML/HTML section.
  */
 export declare function containsWorkflow(text: string): boolean;
 /**
- * Highlight every standalone "workflow"/"workflows" in `text` for editor display
+ * Highlight every standalone "workflowz" in `text` for editor display
  * with a warm amber→green gradient (hue 30..150), visually distinct from
  * ultrathink's rainbow and orchestrate's teal→violet.
  */

package/dist/types/session/auth-storage.d.ts

@@ -2,5 +2,5 @@
  * Re-exports from @oh-my-pi/pi-ai.
  * All credential storage types and the AuthStorage class now live in the ai package.
  */
-export type { ApiKeyCredential, AuthCredential, AuthCredentialEntry, AuthCredentialStore, AuthStorageData, AuthStorageOptions, OAuthCredential, SerializedAuthStorage, SnapshotResponse, StoredAuthCredential, } from "@oh-my-pi/pi-ai";
+export type { ApiKeyCredential, AuthCredential, AuthCredentialEntry, AuthCredentialStore, AuthStorageData, AuthStorageOptions, CredentialOrigin, CredentialOriginKind, OAuthCredential, SerializedAuthStorage, SnapshotResponse, StoredAuthCredential, } from "@oh-my-pi/pi-ai";
 export { AuthBrokerClient, AuthStorage, DEFAULT_SNAPSHOT_CACHE_TTL_MS, REMOTE_REFRESH_SENTINEL, RemoteAuthCredentialStore, readAuthBrokerSnapshotCache, SqliteAuthCredentialStore, writeAuthBrokerSnapshotCache, } from "@oh-my-pi/pi-ai";

package/dist/types/session/session-manager.d.ts

@@ -317,9 +317,11 @@ export declare class SessionManager {
     /**
      * Move the session to a new working directory.
      * Moves session files and artifacts on disk, updates all internal references,
-     * and rewrites the session header with the new cwd.
+     * and rewrites the session header with the new cwd. When provided,
+     * `targetSessionDir` is used instead of deriving the default directory for
+     * the new cwd (for `--continue --session-dir` / `--resume --session-dir`).
      */
-    moveTo(newCwd: string): Promise<void>;
+    moveTo(newCwd: string, targetSessionDir?: string): Promise<void>;
     isPersisted(): boolean;
     /**
      * Force-persist all current entries to disk, even when no assistant message exists yet.
@@ -407,6 +409,7 @@ export declare class SessionManager {
     /** The source that set the session name: "user" (manual /rename or RPC) or "auto" (generated title). */
     get titleSource(): "auto" | "user" | undefined;
     getSessionName(): string | undefined;
+    onSessionNameChanged(cb: () => void): () => void;
     /**
      * Set the session display name.
      * @param source - "user" for explicit renames (/rename command, RPC); "auto" for generated titles.

package/dist/types/task/executor.d.ts

@@ -102,6 +102,15 @@ export interface YieldItem {
     data?: unknown;
     status?: "success" | "aborted";
     error?: string;
+    /**
+     * Set by the in-tool yield validator when it exhausted its retry budget
+     * (MAX_SCHEMA_RETRIES) and accepted a schema-invalid payload anyway.
+     * `finalizeSubprocessOutput` honors this by serializing the payload and
+     * surfacing a stderr warning, instead of re-emitting `schema_violation`
+     * — which would silently swap the subagent's "accepted" view for a
+     * different, opaque error blob in the parent's view of the result.
+     */
+    schemaOverridden?: boolean;
 }
 interface FinalizeSubprocessOutputArgs {
     rawOutput: string;
@@ -120,6 +129,7 @@ interface FinalizeSubprocessOutputResult {
     abortedViaYield: boolean;
     hasYield: boolean;
 }
+export declare const SUBAGENT_WARNING_SCHEMA_OVERRIDDEN = "SYSTEM WARNING: Subagent exhausted schema-retry budget; result was accepted despite failing the output schema.";
 export declare const SUBAGENT_WARNING_NULL_YIELD = "SYSTEM WARNING: Subagent called yield with null data.";
 export declare const SUBAGENT_WARNING_MISSING_YIELD = "SYSTEM WARNING: Subagent exited without calling yield tool after 3 reminders.";
 export declare function finalizeSubprocessOutput(args: FinalizeSubprocessOutputArgs): FinalizeSubprocessOutputResult;

package/dist/types/tools/eval.d.ts

@@ -42,6 +42,14 @@ export type EvalProxyExecutor = (params: EvalToolParams, signal?: AbortSignal) =
 export interface EvalToolDescriptionOptions {
     py?: boolean;
     js?: boolean;
+    /**
+     * Whether `agent()` is allowed in this session. Driven by the parent's
+     * spawn policy (`getSessionSpawns`). Defaults to `true` for backward
+     * compatibility — when the session forbids spawning, the prelude doc
+     * omits the `agent()` entry so the model does not promise itself a
+     * helper that will only ever throw "spawns disabled".
+     */
+    spawns?: boolean;
 }
 export declare function getEvalToolDescription(options?: EvalToolDescriptionOptions): string;
 export interface EvalToolOptions {

package/dist/types/tools/gh-cache-invalidation.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Drop `github-cache` rows for any `gh issue|pr <mutating-subcmd>` call
+ * embedded in `command`. Safe to invoke unconditionally; no-op when the
+ * command does not touch GitHub state.
+ */
+export declare function invalidateGithubCacheForBashCommand(command: string): void;

package/dist/types/tools/github-cache.d.ts

@@ -55,6 +55,18 @@ export interface PutCachedInput<T = unknown> {
 export declare function putCached<T = unknown>(input: PutCachedInput<T>): void;
 /** Drop a specific cache entry. */
 export declare function invalidate(repo: string, kind: CacheKind, number: number, includeComments?: boolean, authKey?: string): void;
+/**
+ * Drop every cached row for a given issue/PR number, regardless of repo,
+ * auth key, include_comments flag, or row kind ({@link CacheKind}). Best-effort:
+ * swallows DB failures the same way {@link invalidate} does.
+ *
+ * Used by the bash-side detector that reacts to `gh issue close` / `gh pr merge`
+ * style mutations. Repo + auth-key narrowing is intentionally skipped because
+ * the bash command often does not name the repo (defaults to cwd's `gh`
+ * config) and resolving the *current* repo from `cwd` for every bash call would
+ * be far more expensive than a write-amplified DELETE.
+ */
+export declare function invalidateAllForNumber(number: number, repo?: string): void;
 /** Drop every cached row. Test helper. */
 export declare function clearAll(): void;
 /**

package/dist/types/tools/path-utils.d.ts

@@ -125,6 +125,14 @@ export interface ResolvedMultiFindPattern {
  * APIs accepting separate `path` and `glob` arguments.
  */
 export declare function parseSearchPath(filePath: string): ParsedSearchPath;
+/**
+ * Async sibling of {@link parseSearchPath} that prefers literal interpretation
+ * when a path containing glob metacharacters resolves to an existing entry on
+ * disk. Disambiguates Next.js/SvelteKit routes like `apps/[id]/page.tsx` —
+ * without this, `[id]` is parsed as a glob character class and silently
+ * matches nothing.
+ */
+export declare function parseSearchPathPreferringLiteral(filePath: string, cwd: string): Promise<ParsedSearchPath>;
 export declare function parseFindPattern(pattern: string): ParsedFindPattern;
 export declare function combineSearchGlobs(prefixGlob?: string, suffixGlob?: string): string | undefined;
 export declare function resolveExplicitSearchPaths(pathItems: string[], cwd: string, suffixGlob?: string): Promise<ResolvedMultiSearchPath | undefined>;

package/dist/types/tools/search.d.ts

@@ -11,7 +11,7 @@ declare const searchSchema: z.ZodObject<{
     paths: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
     i: z.ZodOptional<z.ZodBoolean>;
     gitignore: z.ZodOptional<z.ZodBoolean>;
-    skip: z.ZodOptional<z.ZodNumber>;
+    skip: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
 }, z.core.$strict>;
 export type SearchToolInput = z.infer<typeof searchSchema>;
 export declare function toPathList(input: string | string[] | undefined): string[];
@@ -70,7 +70,7 @@ export declare class SearchTool implements AgentTool<typeof searchSchema, Search
         paths: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
         i: z.ZodOptional<z.ZodBoolean>;
         gitignore: z.ZodOptional<z.ZodBoolean>;
-        skip: z.ZodOptional<z.ZodNumber>;
+        skip: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     }, z.core.$strict>;
     readonly strict = true;
     constructor(session: ToolSession);

package/dist/types/tools/yield.d.ts

@@ -10,6 +10,14 @@ export interface YieldDetails {
     data: unknown;
     status: "success" | "aborted";
     error?: string;
+    /**
+     * Set when the yield tool exhausted its in-tool schema-retry budget
+     * (MAX_SCHEMA_RETRIES) and accepted the data anyway. Surfaced so the
+     * executor's post-mortem finalizer can honor the override instead of
+     * re-rejecting the same payload with `schema_violation` — keeping the
+     * subagent's acceptance and the parent's view of the result in lockstep.
+     */
+    schemaOverridden?: boolean;
 }
 export declare class YieldTool implements AgentTool<TSchema, YieldDetails> {
     #private;

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@oh-my-pi/pi-coding-agent",
-	"version": "15.10.1",
+	"version": "15.10.2",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://omp.sh",
 	"author": "Can Boluk",
@@ -47,14 +47,14 @@
 		"@agentclientprotocol/sdk": "0.22.1",
 		"@babel/parser": "^7.29.7",
 		"@mozilla/readability": "^0.6.0",
-		"@oh-my-pi/hashline": "15.10.1",
-		"@oh-my-pi/omp-stats": "15.10.1",
-		"@oh-my-pi/pi-agent-core": "15.10.1",
-		"@oh-my-pi/pi-ai": "15.10.1",
-		"@oh-my-pi/pi-mnemopi": "15.10.1",
-		"@oh-my-pi/pi-natives": "15.10.1",
-		"@oh-my-pi/pi-tui": "15.10.1",
-		"@oh-my-pi/pi-utils": "15.10.1",
+		"@oh-my-pi/hashline": "15.10.2",
+		"@oh-my-pi/omp-stats": "15.10.2",
+		"@oh-my-pi/pi-agent-core": "15.10.2",
+		"@oh-my-pi/pi-ai": "15.10.2",
+		"@oh-my-pi/pi-mnemopi": "15.10.2",
+		"@oh-my-pi/pi-natives": "15.10.2",
+		"@oh-my-pi/pi-tui": "15.10.2",
+		"@oh-my-pi/pi-utils": "15.10.2",
 		"@opentelemetry/api": "^1.9.1",
 		"@opentelemetry/context-async-hooks": "^2.7.1",
 		"@opentelemetry/exporter-trace-otlp-proto": "^0.218.0",