@oh-my-pi/pi-coding-agent 15.10.3 → 15.10.5

package/CHANGELOG.md

@@ -2,6 +2,78 @@
 
 ## [Unreleased]
 
+## [15.10.5] - 2026-06-08
+
+### Added
+
+- Added Homebrew and mise package-manager update paths to the self-update command so installations launched from those tools are updated through their native workflows
+- Added detection of Homebrew and mise install locations so self-update chooses the manager-specific updater when the active `omp` binary comes from a package-manager-managed path
+- Added `astCondition` to TTSR rule frontmatter as a syntax-aware alternative to regex `condition`, enabling AST-based matching for edit/write tool snapshots
+- Added a built-in `ts-redundant-clear-guard` rule that flags redundant guards around `clearTimeout`, `clearInterval`, and `clearImmediate` calls
+- Added a built-in `ts-no-test-timers` rule that flags real timers (`Bun.sleep`, `setTimeout`, `setInterval`) in `*.test.ts` files, steering toward fake timers (`vi.useFakeTimers()` / `vi.advanceTimersByTime()`)
+- Added support for paste marker highlighting with accent styling (`[Paste #N, +X lines]`/`[Paste #N, Y chars]`) in the prompt editor, matching the visual treatment of image references
+- Added pixel dimensions to pasted/loaded image placeholders in the prompt — the marker now reads `[Image #N, WxH]` (falling back to `[Image #N]` when the header can't be decoded).
+- The bundled shell now treats `nohup` as a builtin: `nohup … &` runs the command without masking `SIGHUP` or detaching it, so agent-started daemons stay tied to this agent's lifetime instead of leaking as orphans when the agent exits. Updated the bash tool prompt's daemon guidance to match (dropped the `nohup … & / setsid … & / disown` detach recommendation in favor of a large `timeout` plus the persistent session).
+- Added per-tool `tool.*` theme symbol keys (nerd/unicode/ascii presets) plus a quiet `status.done` glyph, so each tool's result header can carry a signature icon instead of a generic status mark
+
+### Changed
+
+- Updated pi-ai OAuth imports to the renamed `@oh-my-pi/pi-ai/oauth` subpath (was `@oh-my-pi/pi-ai/utils/oauth`) across the login UI, MCP OAuth flow, model registry, setup wizard, and web-search Codex auth. The legacy-plugin specifier shim drops its `pi-ai/oauth` → `pi-ai/utils/oauth` subpath rewrite, since the canonical `@oh-my-pi/pi-ai/oauth` export now resolves directly.
+- Changed forced self-updates for Homebrew installs to run `brew reinstall` and for mise installs to run `mise install --force` after `mise upgrade` when `--force` is requested
+- Changed TTSR rule bucketing and matching so rules with only `astCondition` are treated as TTSR rules and evaluated in the interrupt flow using reconstructed edit/write source snapshots
+- Normalized image content before it enters model context so attached images are downscaled and preprocessed for prompts, steering messages, follow-ups, and custom agent messages
+- Changed image marker format to include pixel dimensions when available (`[Image #N, WxH]`), falling back to bare `[Image #N]` when header cannot be decoded
+- Changed the prompt editor to highlight large-paste placeholders (`[Paste #N, +X lines]`/`[Paste #N, Y chars]`) with the same accent styling as image references (bold, no hyperlink), and to delete image/paste markers atomically: a single backspace or forward-delete removes the whole marker instead of leaving a broken `[Paste #N, +X lines` behind.
+- Browser tool helpers (`tab.*`) are now individually tracked and time-bounded: when a `run` cell hits its budget, the timeout error names the still-running helper(s) and how long each has been stalled (e.g. `... (stalled on tab.screenshot({ selector: ".x" }) (29.9s))`) instead of the opaque `Browser code execution timed out after 30000ms`. Page-coupled helpers that should resolve quickly (`observe`, `screenshot`, `extract`) also fail fast with a named per-op error at `min(cellBudget, 20s)`, leaving budget for the rest of the cell, rather than silently consuming the whole budget.
+- Derived the auth-broker OAuth callback ports (`CALLBACK_PORTS`) and the paste-code login-provider set from the `@oh-my-pi/pi-ai` provider registry, removing the duplicated `CALLBACK_SERVER_PROVIDERS` tables in the model selector and the setup-wizard sign-in scene.
+- Raised the `eval` tool's per-cell `timeout` ceiling from 600s to 3600s (matching `bash`), in both the Zod schema and the `TOOL_TIMEOUTS.eval` runtime clamp, so heavy local-compute cells can request budgets above 10 minutes.
+- Derived the auth-broker OAuth callback ports (`CALLBACK_PORTS`) and the paste-code login-provider set from the `@oh-my-pi/pi-ai` provider registry, removing the duplicated `CALLBACK_SERVER_PROVIDERS` tables in the model selector and the setup-wizard sign-in scene.
+- Reworked tool result-header glyphs to cut the overused success checkmark/dot: each tool now shows its own signature icon on success (terminal for bash, pencil for edit, magnifier/globe for search, plug for MCP, etc.; read keeps the read-group status dot), tools without a custom renderer fall back to a quiet `status.done` dot, and error/warning/pending states keep the universal cross/warning/spinner
+- Changed steady-state health indicators (LSP server ready, OAuth logged-in, plugin-doctor checks) from a success checkmark to a colored `status.enabled` dot, so failures stand out instead of every line reading as a check
+- Changed one-shot MCP/SSH/debug confirmation messages from a generic checkmark to contextual action glyphs (add/remove, connect/enable/disable toggles, reload, job-completed), reflecting what happened rather than just "success"
+- Derived the auth-broker OAuth callback ports (`CALLBACK_PORTS`) and the paste-code login-provider set from the `@oh-my-pi/pi-ai` provider registry, removing the duplicated `CALLBACK_SERVER_PROVIDERS` tables in the model selector and the setup-wizard sign-in scene.
+
+### Fixed
+
+- Fixed package subpath exports for status-line, setup-wizard, tool-discovery, and gallery fixture modules so rewritten test imports resolve through `@oh-my-pi/pi-coding-agent`.
+- Fixed runtime model provider discovery so extension-registered providers are now refreshed after extension load and extension-supplied models appear without restarting
+- Fixed task-row shimmer timing so every running description starts its highlight on the first character together and reaches the last character together, regardless of text length.
+- Fixed the `eval` tool's `read`/`write`/`append` helpers (both Python and JS backends) treating `local://` (and other internal-URL) paths as plain filesystem paths. `pathlib.Path`/`path.resolve` collapse `local://x.md` to `local:/x.md`, so `write("local://x.md", …)` created a junk `local:` directory under the cwd instead of writing where `read local://x.md` resolves. The helpers now substitute injected on-disk roots for known schemes (currently `local://`, pinned to the session's own `local://` root), reject path traversal and unknown `scheme://` paths, and leave plain paths resolving against the cwd.
+- Fixed read and edit previews to surface the enclosing syntactic block's off-window boundary line (behind an ellipsis) when a shown line opens or closes a block whose other end falls outside the displayed range. Powered by a new tree-sitter `enclosingBlockBoundaries` native, so it covers brace languages and indentation languages (Python) using real syntactic spans, with a lexical bracket scan as fallback for unparseable sources.
+- Fixed `tab.screenshot({ selector })` hanging for the entire cell budget on continuously-animating pages (WebGL / `backdrop-filter` "glass" effects). The element-screenshot path no longer routes through puppeteer's `scrollIntoViewIfNeeded()`, whose `IntersectionObserver` promise can stall indefinitely under heavy rendering; it now does a single instant `scrollIntoView` and captures with `scrollIntoView: false` (relying on `captureBeyondViewport`), so off-screen elements are still captured without the stall.
+- Fixed follow-up message submissions to forward pending clipboard-pasted images to `session.prompt` in both streaming and non-streaming flows
+- Fixed follow-up handling to clear consumed clipboard image state after submission so pasted images are not silently carried into later messages
+- Fixed clipboard-pasted images being rejected when steering or following up during compaction. Instead of bailing with "Retry after it completes to send images", the message and its images are now queued via `queueCompactionMessage` and forwarded to the session (steer/follow-up/prompt) when the compaction queue flushes.
+- Fixed edit tool result previews to show only current-file lines and collapse long inserted blocks instead of echoing removed content.
+- Fixed `generateDiffString` to omit the mid-skip `...` placeholder between two nearby edits, conveying the elided gap via the jump in line numbers instead (consistent with how leading/trailing context skips already render). The placeholder row was indistinguishable from a genuine `...` context line and wasted a row in compact previews.
+- Fixed concurrent interactive dialogs clobbering each other on the shared editor surface. `ExtensionUiController` presents the selector / input / editor modals by swapping a component into the single `editorContainer` and stealing focus, with no serialization — so a second `select`/`input`/`editor` request (from a hook, extension, the `ask` tool, or an internal flow) opened while one was already up would clear the container and re-focus, orphaning the first dialog. Its promise then hung until the caller's signal aborted (surfacing a stray `Ask input was cancelled` on top of the answered call). These modals are now serialized through `#presentDialog`: at most one shows at a time and the rest queue (FIFO); a queued request whose signal aborts before its turn resolves `undefined` and is never shown. The first dialog is still presented synchronously, so single-dialog timing is unchanged.
+- Fixed the `ask` tool potentially hanging when the model emitted two `ask` calls in one tool batch. `ask` now declares `concurrency: "exclusive"`, so the agent loop serializes the batch and each question's selector runs to completion before the next starts, instead of racing for the shared selector surface.
+- Expanded `@path/to/file` import references in CLAUDE.md / AGENTS.md / GEMINI.md (and the other discovered context-file flavors) when loading them into the system prompt, matching the convention used by Claude Code, Goose, and other agents. Imports resolve relative to the importing file's directory, support `~/...`, recurse up to 5 hops, and are skipped inside fenced code blocks and inline code spans so technical examples like `npm install @types/node` survive intact ([#2111](https://github.com/can1357/oh-my-pi/issues/2111)).
+
+### Removed
+
+- Removed the special Anthropic `claude-opus-4-8` tool-call batch cap; sessions no longer abort an in-flight provider stream after a fixed number of completed tool calls.
+
+## [15.10.4] - 2026-06-08
+
+### Added
+
+- macOS release binaries are now signed with a Developer ID Application identity (hardened runtime + secure timestamp + JIT/library-validation entitlements) and notarized in CI when the `APPLE_*` signing secrets are configured; releases auto-fall back to ad-hoc signing until then. This makes the shipped binaries Gatekeeper-acceptable, unblocking an official Homebrew submission ([#776](https://github.com/can1357/oh-my-pi/issues/776)). See `docs/macos-signing-notarization.md`.
+- Added a Homebrew install path: `brew install can1357/tap/omp`. The [can1357/homebrew-tap](https://github.com/can1357/homebrew-tap) formula installs the prebuilt release binary, and a `release_brew` CI job regenerates it (version + per-asset sha256) from each published release via `scripts/ci-update-brew-formula.ts` ([#776](https://github.com/can1357/oh-my-pi/issues/776)).
+
+### Changed
+
+- Adjusted `completion()` model resolution so the `default` tier now prefers the session’s active model and falls back to the configured default role when needed
+- Rewrote the session auto-title prompt (`prompts/system/title-system.md`) and the `set_title` tool description to ask for a concise, sentence-case title (3-7 words) that captures the session's topic/goal, with good/bad examples and explicit guidance to treat the first message as data (no following embedded links/instructions, no refusals, describe URL/reference asks). The local on-device title prompt (`tiny-title-system.md`) was aligned to the same 3-7 word, sentence-case convention. The deterministic greeting/low-signal filter and the `none` deferral sentinel are unchanged.
+- Renamed the eval oneshot helper from `llm()` to `completion()` in both JavaScript and Python preludes, including status events, prompt docs, and runtime tests.
+
+### Fixed
+
+- Fixed `completion()` to always send a non-empty default system prompt when `system` is omitted so providers that require instructions no longer reject requests
+- Fixed structured `completion()` mode to return parsed JSON from plain text output when the model skips the forced `respond` tool call
+- Fixed slow-tier `completion()` reasoning requests to avoid unsupported effort settings by only enabling reasoning on reasoning-capable models and capping effort to supported levels
+- Fixed JS eval worker reset/dispose to close workers gracefully before forced termination, avoiding Bun 1.3.14 N-API teardown crashes with native modules such as `canvas`.
+
 ## [15.10.3] - 2026-06-08
 
 ### Added

package/dist/types/capability/rule-buckets.d.ts

@@ -6,7 +6,7 @@
  * manager, and splits the rest into the always-apply and rulebook buckets.
  *
  * Bucket precedence (matches docs/rulebook-matching-pipeline.md §5):
- *   1. TTSR     — non-empty `condition` that `TtsrManager.addRule` accepts
+ *   1. TTSR     — non-empty `condition`/`astCondition` that `TtsrManager.addRule` accepts
  *   2. always   — `alwaysApply === true`
  *   3. rulebook — has a `description`
  */

package/dist/types/capability/rule.d.ts

@@ -15,6 +15,8 @@ export interface RuleFrontmatter {
     alwaysApply?: boolean;
     /** New key for TTSR match conditions. */
     condition?: string | string[];
+    /** TTSR match condition(s) expressed as ast-grep patterns (edit/write streams only). */
+    astCondition?: string | string[];
     /** New key for TTSR stream scope. */
     scope?: string | string[];
     /** Per-rule TTSR interrupt mode override. */
@@ -39,6 +41,8 @@ export interface Rule {
     description?: string;
     /** Regex condition(s) that can trigger TTSR interruption. */
     condition?: string[];
+    /** ast-grep pattern condition(s) that can trigger TTSR interruption (edit/write streams only). */
+    astCondition?: string[];
     /** Optional stream scope tokens (for example: text, thinking, tool:edit(*.ts)). */
     scope?: string[];
     /** Per-rule TTSR interrupt mode override (falls back to global ttsr.interruptMode). */
@@ -54,8 +58,9 @@ export interface Rule {
  * - legacy `ttsr_trigger` / `ttsrTrigger` are accepted as a `condition` fallback
  * - condition tokens that look like file globs become scope shorthands:
  *   `*.rs` => `tool:edit(*.rs)`, `tool:write(*.rs)` and a catch-all condition `.*`
+ * - `astCondition` holds ast-grep patterns and is kept verbatim (no glob inference)
  */
-export declare function parseRuleConditionAndScope(frontmatter: RuleFrontmatter): Pick<Rule, "condition" | "scope">;
+export declare function parseRuleConditionAndScope(frontmatter: RuleFrontmatter): Pick<Rule, "condition" | "astCondition" | "scope">;
 /**
  * Process-global snapshot of rules the active session loaded.
  * Read by internal URL protocol handlers (rule://).

package/dist/types/cli/update-cli.d.ts

@@ -20,7 +20,13 @@ export declare function parseUpdateArgs(args: string[]): {
     force: boolean;
     check: boolean;
 } | undefined;
-export declare function resolveUpdateMethodForTest(ompPath: string, bunBinDir: string | undefined): "bun" | "binary";
+type UpdateMethod = "brew" | "mise" | "bun" | "binary";
+interface UpdateMethodResolutionOptions {
+    homebrewPrefix?: string;
+    miseBinDirs?: readonly string[];
+    miseDataDir?: string;
+}
+export declare function resolveUpdateMethodForTest(ompPath: string, bunBinDir: string | undefined, options?: UpdateMethodResolutionOptions): UpdateMethod;
 /**
  * Atomically replace the installed binary and roll back if version verification fails.
  */
@@ -56,6 +62,9 @@ export declare function replaceBinaryForUpdate(options: BinaryReplacementOptions
  * See #1824.
  */
 export declare function buildBunInstallArgs(expectedVersion: string, nativeTag?: string): string[];
+export declare function buildHomebrewUpdateArgs(force: boolean): string[];
+export declare function buildMiseUpgradeArgs(): string[];
+export declare function buildMiseForceInstallArgs(expectedVersion: string): string[];
 /**
  * Run the update command.
  */
@@ -67,3 +76,4 @@ export declare function runUpdateCommand(opts: {
  * Print update command help.
  */
 export declare function printUpdateHelp(): void;
+export {};

package/dist/types/config/model-registry.d.ts

@@ -2,7 +2,7 @@ import { type ModelRefreshStrategy } from "@oh-my-pi/pi-ai/model-manager";
 import type { Api, Context, Model, SimpleStreamOptions, ThinkingConfig } from "@oh-my-pi/pi-ai/types";
 import type { AssistantMessageEventStream } from "@oh-my-pi/pi-ai/utils/event-stream";
 import type { ApiKeyResolver } from "@oh-my-pi/pi-ai";
-import type { OAuthCredentials, OAuthLoginCallbacks } from "@oh-my-pi/pi-ai/utils/oauth/types";
+import type { OAuthCredentials, OAuthLoginCallbacks } from "@oh-my-pi/pi-ai/oauth/types";
 import { type ThemeColor } from "../modes/theme/theme";
 import type { AuthStorage } from "../session/auth-storage";
 import { type ApiKeyResolverOptions } from "./api-key-resolver";
@@ -284,6 +284,16 @@ export declare class ModelRegistry {
     refresh(strategy?: ModelRefreshStrategy): Promise<void>;
     refreshInBackground(strategy?: ModelRefreshStrategy): void;
     refreshProvider(providerId: string, strategy?: ModelRefreshStrategy): Promise<void>;
+    /**
+     * Discover models for providers registered at runtime via `fetchDynamicModels`
+     * (extension providers). Merges the discovered catalog into the existing model
+     * set without reloading static models, so dynamically-discovered models from
+     * other providers are preserved. No-op when no runtime providers are registered.
+     *
+     * Drives the same SQLite model cache as built-in providers, so the default
+     * `online-if-uncached` strategy fetches at most once per cache TTL (24 h).
+     */
+    refreshRuntimeProviders(strategy?: ModelRefreshStrategy): Promise<void>;
     /**
      * Get any error from loading models.json (undefined if no error).
      */
@@ -399,6 +409,13 @@ export interface ProviderConfigInput {
         getApiKey?(credentials: OAuthCredentials): string;
         modifyModels?(models: Model<Api>[], credentials: OAuthCredentials): Model<Api>[];
     };
+    /**
+     * Async factory that fetches the live model list from the provider endpoint.
+     * When present, the result is run through the same SQLite model-cache as
+     * built-in providers (keyed by provider name, default 24 h TTL).
+     * The factory receives the resolved API key (undefined when unauthenticated).
+     */
+    fetchDynamicModels?: (apiKey: string | undefined) => Promise<readonly NonNullable<ProviderConfigInput["models"]>[number][]>;
     models?: Array<{
         id: string;
         name: string;

package/dist/types/discovery/at-imports.d.ts

@@ -0,0 +1,15 @@
+/** Maximum number of recursive `@`-import hops. Matches Claude Code's documented cap. */
+export declare const MAX_AT_IMPORT_DEPTH = 5;
+export interface ExpandAtImportsOptions {
+    /** Maximum hop depth (default: {@link MAX_AT_IMPORT_DEPTH}). */
+    maxDepth?: number;
+    /** Override the home directory used to resolve `~/...` (default: `os.homedir()`). */
+    home?: string;
+}
+/**
+ * Expand `@path/to/file` references in `content` against `filePath`'s directory.
+ *
+ * Returns the expanded text. When no imports match, the original string is
+ * returned unchanged.
+ */
+export declare function expandAtImports(content: string, filePath: string, options?: ExpandAtImportsOptions): Promise<string>;

package/dist/types/edit/diff.d.ts

@@ -1,3 +1,4 @@
+import { type BlockContextSource } from "../utils/block-context";
 export interface DiffResult {
     diff: string;
     firstChangedLine: number | undefined;
@@ -25,7 +26,7 @@ export declare class ApplyPatchError extends Error {
  * Generate a unified diff string with line numbers and context.
  * Returns both the diff string and the first changed line number (in the new file).
  */
-export declare function generateDiffString(oldContent: string, newContent: string, contextLines?: number): DiffResult;
+export declare function generateDiffString(oldContent: string, newContent: string, contextLines?: number, source?: BlockContextSource): DiffResult;
 export interface ReplaceOptions {
     /** Allow fuzzy matching */
     fuzzy: boolean;
@@ -44,7 +45,7 @@ export interface ReplaceResult {
  * Generate a unified diff string without file headers.
  * Returns both the diff string and the first changed line number (in the new file).
  */
-export declare function generateUnifiedDiffString(oldContent: string, newContent: string, contextLines?: number): DiffResult;
+export declare function generateUnifiedDiffString(oldContent: string, newContent: string, contextLines?: number, source?: BlockContextSource): DiffResult;
 export declare function normalizeDiff(diff: string): string;
 export declare function normalizeCreateContent(content: string): string;
 export declare function parseDiffHunks(diff: string): DiffHunk[];

package/dist/types/eval/__tests__/helpers-local-roots.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/eval/__tests__/js-context-manager.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/eval/backend.d.ts

@@ -53,3 +53,10 @@ export interface ExecutorBackend {
     /** Execute one cell. Caller invokes once per cell and aggregates results. */
     execute(code: string, opts: ExecutorBackendExecOptions): Promise<ExecutorBackendResult>;
 }
+/**
+ * Resolve the on-disk roots that the eval helpers substitute for internal-URL
+ * schemes (currently `local://`). Prefers the session's own
+ * {@link LocalProtocolOptions} — the exact mapping `read local://…` uses — so an
+ * eval `write("local://x")` and a later `read local://x` agree on the location.
+ */
+export declare function resolveEvalUrlRoots(session: ToolSession): Record<string, string>;

package/dist/types/eval/bridge-timeout.d.ts

@@ -2,7 +2,7 @@
  * Timeout suspension for in-flight host-side eval bridge calls.
  *
  * The eval watchdog caps a cell's `timeout` as a budget on the cell runtime's
- * own work. Host-side `agent()` / `parallel()` / `llm()` bridge calls hand
+ * own work. Host-side `agent()` / `parallel()` / `completion()` bridge calls hand
  * control to the outer TypeScript process, where the Python kernel or JS VM is
  * only waiting for a result. While that delegated work is in flight, the cell
  * timeout must be ignored completely; once the bridge returns and the runtime is

package/dist/types/eval/{llm-bridge.d.ts → completion-bridge.d.ts}

@@ -1,25 +1,25 @@
 import type { ToolSession } from "../tools";
 import type { JsStatusEvent } from "./js/shared/types";
-/** Synthetic bridge name reserved for the `llm()` helper across both runtimes. */
-export declare const EVAL_LLM_BRIDGE_NAME = "__llm__";
-type LlmTier = "smol" | "default" | "slow";
-export interface EvalLlmBridgeOptions {
+/** Synthetic bridge name reserved for the `completion()` helper across both runtimes. */
+export declare const EVAL_COMPLETION_BRIDGE_NAME = "__completion__";
+type CompletionTier = "smol" | "default" | "slow";
+export interface EvalCompletionBridgeOptions {
     session: ToolSession;
     signal?: AbortSignal;
     emitStatus?: (event: JsStatusEvent) => void;
 }
-export interface EvalLlmResult {
+export interface EvalCompletionResult {
     text: string;
     details: {
         model: string;
-        tier: LlmTier;
+        tier: CompletionTier;
         structured: boolean;
     };
 }
 /**
- * Run a single stateless completion on behalf of an eval cell's `llm()` call.
+ * Run a single stateless completion on behalf of an eval cell's `completion()` call.
  * Returns a `{ text, details }` value shaped like a {@link callSessionTool}
  * result so the existing bridge transport carries it to either runtime.
  */
-export declare function runEvalLlm(args: unknown, options: EvalLlmBridgeOptions): Promise<EvalLlmResult>;
+export declare function runEvalCompletion(args: unknown, options: EvalCompletionBridgeOptions): Promise<EvalCompletionResult>;
 export {};

package/dist/types/eval/idle-timeout.d.ts

@@ -3,7 +3,7 @@
  *
  * A cell's `timeout` bounds time while the Python kernel or JS VM is in control.
  * Host-side bridge calls can {@link pause} the watchdog so delegated
- * `agent()`/`parallel()`/`llm()` work is ignored completely, then {@link resume}
+ * `agent()`/`parallel()`/`completion()` work is ignored completely, then {@link resume}
  * starts a fresh timeout window once the runtime gets control back.
  *
  * The active timer self-reschedules instead of being torn down on every

package/dist/types/eval/js/context-manager.d.ts

@@ -12,6 +12,7 @@ export declare function executeInVmContext(options: {
     sessionId: string;
     cwd: string;
     session: ToolSession;
+    localRoots?: Record<string, string>;
     reset?: boolean;
     code: string;
     filename: string;

package/dist/types/eval/js/executor.d.ts

@@ -20,6 +20,8 @@ export interface JsExecutorOptions {
     artifactPath?: string;
     artifactId?: string;
     session: ToolSession;
+    /** On-disk roots the helpers substitute for internal-URL schemes (e.g. `local://`). */
+    localRoots?: Record<string, string>;
 }
 export interface JsResult {
     output: string;

package/dist/types/eval/js/index.d.ts

@@ -1,5 +1,5 @@
 import type { ToolSession } from "../../tools";
-import type { ExecutorBackendExecOptions, ExecutorBackendResult } from "../backend";
+import { type ExecutorBackendExecOptions, type ExecutorBackendResult } from "../backend";
 declare const _default: {
     id: "js";
     label: string;

package/dist/types/eval/js/shared/helpers.d.ts

@@ -17,6 +17,12 @@ export interface HelperOptions {
 export interface HelperContext {
     cwd(): string;
     env: Map<string, string>;
+    /**
+     * On-disk roots for internal-URL schemes the helpers accept (e.g.
+     * `{ local: "/…/artifacts/local" }`). A path like `local://x.md` is rewritten
+     * to `<root>/x.md` before any filesystem op; unknown schemes are rejected.
+     */
+    localRoots(): Record<string, string>;
     emitStatus(event: JsStatusEvent): void;
 }
 /**

package/dist/types/eval/js/shared/runtime.d.ts

@@ -25,6 +25,11 @@ export interface RuntimeOptions {
      * via `setRunScope()` instead.
      */
     extraGlobals?: Record<string, unknown>;
+    /**
+     * On-disk roots the helpers substitute for internal-URL schemes (e.g.
+     * `{ local: "/…/artifacts/local" }`). Stable for the worker's lifetime.
+     */
+    localRoots?: Record<string, string>;
 }
 /**
  * Shared JS runtime for the eval worker and the browser tab worker. Owns the prelude,

package/dist/types/eval/js/worker-protocol.d.ts

@@ -3,6 +3,12 @@ export type { JsDisplayOutput } from "./shared/types";
 export interface SessionSnapshot {
     cwd: string;
     sessionId: string;
+    /**
+     * On-disk roots the helpers substitute for internal-URL schemes
+     * (e.g. `{ local: "/…/artifacts/local" }`). Lets `read`/`write`/`append`
+     * accept `local://…` paths instead of writing a literal `local:/` directory.
+     */
+    localRoots?: Record<string, string>;
 }
 export interface RunErrorPayload {
     name?: string;

package/dist/types/eval/py/executor.d.ts

@@ -39,6 +39,13 @@ export interface PythonExecutorOptions {
     /** Artifact path/id for full output storage */
     artifactPath?: string;
     artifactId?: string;
+    /**
+     * On-disk roots the prelude helpers (`read`/`write`/`append`) substitute for
+     * internal-URL schemes (e.g. `{ local: "/…/artifacts/local" }`). Exported to
+     * the kernel as `PI_EVAL_LOCAL_ROOTS` (JSON) so `write("local://x")` lands
+     * where `read local://x` resolves instead of a literal `local:/` directory.
+     */
+    localRoots?: Record<string, string>;
     /**
      * ToolSession used to resolve host-side `tool.<name>(args)` calls made from
      * the Python prelude's bridge proxy. When omitted, the bridge env vars are

package/dist/types/eval/py/index.d.ts

@@ -1,5 +1,5 @@
 import type { ToolSession } from "../../tools";
-import type { ExecutorBackendExecOptions, ExecutorBackendResult } from "../backend";
+import { type ExecutorBackendExecOptions, type ExecutorBackendResult } from "../backend";
 export declare function namespaceSessionId(sessionId: string): string;
 declare const _default: {
     id: "python";

package/dist/types/export/ttsr.d.ts

@@ -32,6 +32,18 @@ export declare class TtsrManager {
      * of being appended to it.
      */
     checkSnapshot(snapshot: string, context: TtsrMatchContext): Rule[];
+    /**
+     * Evaluate ast-grep `astCondition` rules against a reconstructed tool snapshot.
+     *
+     * Only edit/write tool streams reach here (AST conditions need a language, which
+     * we infer from the file extension on the tool's path argument). The snapshot is
+     * matched in memory by the native engine (`astMatch`), so this is async and
+     * intentionally throttled: identical consecutive snapshots (the common case when
+     * only non-source arguments change between deltas) are skipped.
+     */
+    checkAstSnapshot(snapshot: string, context: TtsrMatchContext): Promise<Rule[]>;
+    /** True when any registered rule carries ast-grep conditions. */
+    hasAstRules(): boolean;
     /** Mark rules as injected (won't trigger again until conditions allow). */
     markInjected(rulesToMark: Rule[]): void;
     /** Mark rule names as injected (won't trigger again until conditions allow). */
@@ -44,6 +56,8 @@ export declare class TtsrManager {
     resetBuffer(): void;
     /** Check if any TTSR rules are registered. */
     hasRules(): boolean;
+    /** All rules currently registered for TTSR monitoring, in registration order. */
+    getRules(): Rule[];
     /** Increment message counter (call after each turn). */
     incrementMessageCount(): void;
     /** Get current message count. */

package/dist/types/extensibility/extensions/types.d.ts

@@ -10,7 +10,7 @@
 import type { AgentMessage, AgentToolResult, AgentToolUpdateCallback, ThinkingLevel, ToolApproval } from "@oh-my-pi/pi-agent-core";
 import type { CompactionResult } from "@oh-my-pi/pi-agent-core/compaction";
 import type { Api, AssistantMessageEvent, AssistantMessageEventStream, Context, ImageContent, Model, ProviderResponseMetadata, SimpleStreamOptions, Static, TextContent, TSchema } from "@oh-my-pi/pi-ai";
-import type { OAuthCredentials, OAuthLoginCallbacks } from "@oh-my-pi/pi-ai/utils/oauth/types";
+import type { OAuthCredentials, OAuthLoginCallbacks } from "@oh-my-pi/pi-ai/oauth/types";
 import type * as piCodingAgent from "@oh-my-pi/pi-coding-agent";
 import type { AutocompleteItem, Component, EditorTheme, KeyId, TUI } from "@oh-my-pi/pi-tui";
 import type { logger as PiLogger } from "@oh-my-pi/pi-utils";
@@ -727,6 +727,13 @@ export interface ProviderConfig {
         /** Optional model rewrite hook for credential-aware routing (e.g., enterprise URLs). */
         modifyModels?(models: Model<Api>[], credentials: OAuthCredentials): Model<Api>[];
     };
+    /**
+     * Async factory that fetches the live model list from the provider endpoint.
+     * Runs through the same SQLite model-cache as built-in providers (keyed by
+     * provider name, default 24 h TTL). Receives the resolved API key (undefined
+     * when unauthenticated). Mutually exclusive with `models`.
+     */
+    fetchDynamicModels?: (apiKey: string | undefined) => Promise<readonly ProviderModelConfig[]>;
 }
 /** Configuration for a model within a provider. */
 export interface ProviderModelConfig {

package/dist/types/extensibility/legacy-pi-ai-shim.d.ts

@@ -8,7 +8,7 @@
  * entrypoint. Legacy extensions still author parameter schemas as
  * `Type.Object({ ... })`, so this file is served by `legacy-pi-compat.ts` in
  * place of the real pi-ai entrypoint whenever a legacy extension imports the
- * bare package root. Subpath imports (`@oh-my-pi/pi-ai/utils/oauth`, etc.)
+ * bare package root. Subpath imports (`@oh-my-pi/pi-ai/oauth`, etc.)
  * continue to resolve directly against the bundled pi-ai package.
  *
  * The `Type` runtime is borrowed from the Zod-backed TypeBox shim that

package/dist/types/internal-urls/local-protocol.d.ts

@@ -5,6 +5,16 @@ export interface LocalProtocolOptions {
 }
 export declare function resolveLocalRoot(options: LocalProtocolOptions): string;
 export declare function resolveLocalUrlToPath(input: string | InternalUrl, options: LocalProtocolOptions): string;
+/**
+ * On-disk roots the eval helpers (`read`/`write`/`append`) substitute for
+ * internal-URL schemes so e.g. `write("local://x.md")` lands where a later
+ * `read local://x.md` resolves — instead of a literal `local:/` directory under
+ * the cwd (a stdlib `pathlib.Path`/`path.resolve` collapses `local://` to
+ * `local:/`). Keyed by scheme without the `://`. Currently only `local`, but the
+ * shape is a map so additional file-backed schemes can be added without
+ * re-plumbing the worker boundary.
+ */
+export declare function buildEvalUrlRoots(options: LocalProtocolOptions): Record<string, string>;
 /**
  * Protocol handler for local:// URLs.
  *

package/dist/types/mcp/oauth-flow.d.ts

@@ -4,8 +4,8 @@
  * Allows users to authenticate with any OAuth-compatible MCP server
  * by providing authorization URL, token URL, and client credentials.
  */
-import { OAuthCallbackFlow } from "@oh-my-pi/pi-ai/utils/oauth/callback-server";
-import type { OAuthController, OAuthCredentials } from "@oh-my-pi/pi-ai/utils/oauth/types";
+import { OAuthCallbackFlow } from "@oh-my-pi/pi-ai/oauth/callback-server";
+import type { OAuthController, OAuthCredentials } from "@oh-my-pi/pi-ai/oauth/types";
 export interface MCPOAuthConfig {
     /** Authorization endpoint URL */
     authorizationUrl: string;

package/dist/types/modes/components/custom-editor.d.ts

@@ -8,6 +8,9 @@ export declare function extractBracketedImagePastePath(data: string): string | u
 export declare class CustomEditor extends Editor {
     #private;
     imageLinks?: readonly (string | undefined)[];
+    /** Treat image/paste markers as indivisible: a stray backspace deletes the whole token
+     *  instead of corrupting `[Paste #1, +30 lines]` into plain text. */
+    atomicTokenPattern: RegExp;
     /** Gradient-highlight the "ultrathink" / "orchestrate" / "workflowz" keywords as the user types
      *  them, skipping any occurrence inside code spans, fenced blocks, or XML sections. Also make
      *  pasted image placeholders visually distinct and hyperlink them once their blob file exists. */

package/dist/types/modes/components/{status-line.d.ts → status-line/component.d.ts}

@@ -1,36 +1,6 @@
 import { type Component } from "@oh-my-pi/pi-tui";
-import type { StatusLinePreset, StatusLineSegmentId, StatusLineSeparatorStyle } from "../../config/settings-schema";
-import type { AgentSession } from "../../session/agent-session";
-export interface StatusLineSegmentOptions {
-    model?: {
-        showThinkingLevel?: boolean;
-    };
-    path?: {
-        abbreviate?: boolean;
-        maxLength?: number;
-        stripWorkPrefix?: boolean;
-    };
-    git?: {
-        showBranch?: boolean;
-        showStaged?: boolean;
-        showUnstaged?: boolean;
-        showUntracked?: boolean;
-    };
-    time?: {
-        format?: "12h" | "24h";
-        showSeconds?: boolean;
-    };
-}
-export interface StatusLineSettings {
-    preset?: StatusLinePreset;
-    leftSegments?: StatusLineSegmentId[];
-    rightSegments?: StatusLineSegmentId[];
-    separator?: StatusLineSeparatorStyle;
-    segmentOptions?: StatusLineSegmentOptions;
-    showHookStatus?: boolean;
-    sessionAccent?: boolean;
-}
-export type EffectiveStatusLineSettings = Required<Pick<StatusLineSettings, "leftSegments" | "rightSegments" | "separator" | "segmentOptions">> & StatusLineSettings;
+import type { AgentSession } from "../../../session/agent-session";
+import type { EffectiveStatusLineSettings, StatusLineSettings } from "./types";
 export declare class StatusLineComponent implements Component {
     #private;
     private readonly session;

package/dist/types/modes/components/status-line/index.d.ts

@@ -1,3 +1,4 @@
+export * from "./component";
 export * from "./presets";
 export * from "./segments";
 export * from "./separators";

package/dist/types/modes/components/status-line/types.d.ts

@@ -1,7 +1,36 @@
 import type { StatusLinePreset, StatusLineSegmentId, StatusLineSeparatorStyle } from "../../../config/settings-schema";
 import type { AgentSession } from "../../../session/agent-session";
-import type { StatusLineSegmentOptions, StatusLineSettings } from "../status-line";
-export type { StatusLinePreset, StatusLineSegmentId, StatusLineSegmentOptions, StatusLineSeparatorStyle, StatusLineSettings, };
+export type { StatusLinePreset, StatusLineSegmentId, StatusLineSeparatorStyle };
+export interface StatusLineSegmentOptions {
+    model?: {
+        showThinkingLevel?: boolean;
+    };
+    path?: {
+        abbreviate?: boolean;
+        maxLength?: number;
+        stripWorkPrefix?: boolean;
+    };
+    git?: {
+        showBranch?: boolean;
+        showStaged?: boolean;
+        showUnstaged?: boolean;
+        showUntracked?: boolean;
+    };
+    time?: {
+        format?: "12h" | "24h";
+        showSeconds?: boolean;
+    };
+}
+export interface StatusLineSettings {
+    preset?: StatusLinePreset;
+    leftSegments?: StatusLineSegmentId[];
+    rightSegments?: StatusLineSegmentId[];
+    separator?: StatusLineSeparatorStyle;
+    segmentOptions?: StatusLineSegmentOptions;
+    showHookStatus?: boolean;
+    sessionAccent?: boolean;
+}
+export type EffectiveStatusLineSettings = Required<Pick<StatusLineSettings, "leftSegments" | "rightSegments" | "separator" | "segmentOptions">> & StatusLineSettings;
 export type RGB = readonly [number, number, number];
 export interface SegmentContext {
     session: AgentSession;

package/dist/types/modes/image-references.d.ts

@@ -1,16 +1,21 @@
 import type { ImageContent } from "@oh-my-pi/pi-ai";
 import { type BlobPutResult } from "../session/blob-store";
+/** Matches `[Image #N]`/`[Image #N, WxH]` and `[Paste #N, +X lines]`/`[Paste #N, Y chars]` tokens.
+ *  Group 1 is the kind (`Image`/`Paste`), group 2 the 1-based index. The optional metadata
+ *  tail (`, …`) is captured loosely (no `]`/newline) so future label tweaks keep matching. */
+export declare const PLACEHOLDER_REGEX: RegExp;
 type ImageBlobWriter = (data: Buffer, options?: {
     extension?: string;
 }) => Promise<BlobPutResult>;
 type ImageBlobWriterSync = (data: Buffer, options?: {
     extension?: string;
 }) => BlobPutResult;
-export interface ImageReferenceRenderers {
+export type PlaceholderKind = "image" | "paste";
+export interface PlaceholderRenderers {
     renderText: (text: string) => string;
-    renderReference: (label: string, index: number) => string;
+    renderReference: (label: string, kind: PlaceholderKind, index: number) => string;
 }
-export declare function renderImageReferences(text: string, renderers: ImageReferenceRenderers): string;
+export declare function renderPlaceholders(text: string, renderers: PlaceholderRenderers): string;
 export declare function imageReferenceHyperlink(label: string, index: number, imageLinks: readonly (string | undefined)[] | undefined, renderLabel: (text: string) => string): string;
 export declare function materializeImageReferenceLinks(images: readonly ImageContent[] | undefined, putBlob: ImageBlobWriter): Promise<(string | undefined)[] | undefined>;
 export declare function materializeImageReferenceLinksSync(images: readonly ImageContent[] | undefined, putBlob: ImageBlobWriterSync): (string | undefined)[] | undefined;