@oh-my-pi/pi-coding-agent 15.10.4 → 15.10.6

package/CHANGELOG.md

@@ -2,6 +2,80 @@
 
 ## [Unreleased]
 
+## [15.10.6] - 2026-06-08
+
+### Added
+
+- Added a `/plan-review` command that manually (re-)opens the plan-review overlay while plan mode is active. Since there is no fixed plan filename, it reviews the newest `local://<slug>-plan.md` the agent wrote — useful for pulling the review back up after dismissing it, or reviewing a plan the agent wrote without calling `resolve`.
+
+### Changed
+
+- Reverted the `task` tool's result-header glyph from the `⇶` signature icon back to the quiet `status.done` bullet (`•`): white while a subagent is running, accent once it finishes. The reviewer verdict line and per-agent result lines use the same bullet.
+
+### Fixed
+
+- Fixed `/login` API-key prompts (OpenCode Zen, Perplexity OTP, GitHub Enterprise URL, manual OAuth redirect URL, …) silently dropping pasted content on kitty/Linux/Wayland — and any other terminal supporting OSC 5522 enhanced paste. `InputController` enables kitty's enhanced clipboard protocol on TUI start and consumes the resulting OSC 5522 packets in an `addInputListener` that runs before focus dispatch, so the paste never reached the modal `Input`'s bracketed-paste handler; the routing then stuffed the text into the main `CustomEditor` unconditionally, even when `selector-controller` had detached the editor and focused a temporary OAuth input. The pasted API key accumulated in the hidden editor and only resurfaced in the main prompt when the user dismissed the modal with Enter or Esc. The enhanced-paste callback now consults `ui.getFocused()` and routes the text to the focused component when it exposes a `pasteText` hook, falling back to the editor only when no modal target is in focus; image pastes refuse with a status message instead of stuffing a binary blob into the hidden editor. ([#2127](https://github.com/can1357/oh-my-pi/issues/2127))
+- Fixed an auto-compaction dead loop when `compaction.strategy` was `shake` and the configured threshold was low enough that a single shake pass could not bring the context below it (e.g. a 50K-token threshold on a session well above it). Each pass auto-continued, the next agent turn re-triggered the threshold check, and the second shake had nothing new to drop, so the session spun forever. The shake recovery path now estimates post-shake context and, when it is still above the threshold (or shake reclaimed nothing on overflow recovery), surfaces a one-shot warning and falls back to the summarization-driven `context-full` compaction so progress actually resumes ([#2119](https://github.com/can1357/oh-my-pi/issues/2119)).
+- Fixed `/skill:` prompts so magic keywords and turn-budget directives in skill args inject the same hidden notices as normal user prompts, matching the editor highlight behavior ([#2128](https://github.com/can1357/oh-my-pi/issues/2128)).
+- Fixed MCP OAuth fallback rendering to show a short terminal hyperlink and keep the raw authorization URL on one unwrapped copy line ([#2121](https://github.com/can1357/oh-my-pi/issues/2121)).
+- Fixed the `task` tool rendering a success bullet and a `success` frame state for detail-less error results (e.g. an argument-validation failure that never executes): the header now shows the error glyph with an error border and `error` state, and surfaces the dispatched agent name.
+- Fixed Agent Control Center new-agent creation so Windows Ctrl+Enter sequences submitted as a single LF generate the agent instead of inserting a newline ([#2118](https://github.com/can1357/oh-my-pi/issues/2118)).
+- Fixed plan-mode subagents preserving read-only specialty tools such as `report_finding` while still stripping mutating tools ([#1998](https://github.com/can1357/oh-my-pi/issues/1998)).
+- Removed unreachable standalone Exa tool-suite exports and stale tool-count barrel exposure while keeping the live Exa `web_search` provider helpers ([#2093](https://github.com/can1357/oh-my-pi/issues/2093)).
+- Fixed `omp commit` split plans accepting hunk selectors that resolve to no parsed hunks, which crashed the apply step after the index reset and left the working tree fully unstaged ([#2098](https://github.com/can1357/oh-my-pi/issues/2098)).
+
+## [15.10.5] - 2026-06-08
+
+### Added
+
+- Added Homebrew and mise package-manager update paths to the self-update command so installations launched from those tools are updated through their native workflows
+- Added detection of Homebrew and mise install locations so self-update chooses the manager-specific updater when the active `omp` binary comes from a package-manager-managed path
+- Added `astCondition` to TTSR rule frontmatter as a syntax-aware alternative to regex `condition`, enabling AST-based matching for edit/write tool snapshots
+- Added a built-in `ts-redundant-clear-guard` rule that flags redundant guards around `clearTimeout`, `clearInterval`, and `clearImmediate` calls
+- Added a built-in `ts-no-test-timers` rule that flags real timers (`Bun.sleep`, `setTimeout`, `setInterval`) in `*.test.ts` files, steering toward fake timers (`vi.useFakeTimers()` / `vi.advanceTimersByTime()`)
+- Added support for paste marker highlighting with accent styling (`[Paste #N, +X lines]`/`[Paste #N, Y chars]`) in the prompt editor, matching the visual treatment of image references
+- Added pixel dimensions to pasted/loaded image placeholders in the prompt — the marker now reads `[Image #N, WxH]` (falling back to `[Image #N]` when the header can't be decoded).
+- The bundled shell now treats `nohup` as a builtin: `nohup … &` runs the command without masking `SIGHUP` or detaching it, so agent-started daemons stay tied to this agent's lifetime instead of leaking as orphans when the agent exits. Updated the bash tool prompt's daemon guidance to match (dropped the `nohup … & / setsid … & / disown` detach recommendation in favor of a large `timeout` plus the persistent session).
+- Added per-tool `tool.*` theme symbol keys (nerd/unicode/ascii presets) plus a quiet `status.done` glyph, so each tool's result header can carry a signature icon instead of a generic status mark
+
+### Changed
+
+- Updated pi-ai OAuth imports to the renamed `@oh-my-pi/pi-ai/oauth` subpath (was `@oh-my-pi/pi-ai/utils/oauth`) across the login UI, MCP OAuth flow, model registry, setup wizard, and web-search Codex auth. The legacy-plugin specifier shim drops its `pi-ai/oauth` → `pi-ai/utils/oauth` subpath rewrite, since the canonical `@oh-my-pi/pi-ai/oauth` export now resolves directly.
+- Changed forced self-updates for Homebrew installs to run `brew reinstall` and for mise installs to run `mise install --force` after `mise upgrade` when `--force` is requested
+- Changed TTSR rule bucketing and matching so rules with only `astCondition` are treated as TTSR rules and evaluated in the interrupt flow using reconstructed edit/write source snapshots
+- Normalized image content before it enters model context so attached images are downscaled and preprocessed for prompts, steering messages, follow-ups, and custom agent messages
+- Changed image marker format to include pixel dimensions when available (`[Image #N, WxH]`), falling back to bare `[Image #N]` when header cannot be decoded
+- Changed the prompt editor to highlight large-paste placeholders (`[Paste #N, +X lines]`/`[Paste #N, Y chars]`) with the same accent styling as image references (bold, no hyperlink), and to delete image/paste markers atomically: a single backspace or forward-delete removes the whole marker instead of leaving a broken `[Paste #N, +X lines` behind.
+- Browser tool helpers (`tab.*`) are now individually tracked and time-bounded: when a `run` cell hits its budget, the timeout error names the still-running helper(s) and how long each has been stalled (e.g. `... (stalled on tab.screenshot({ selector: ".x" }) (29.9s))`) instead of the opaque `Browser code execution timed out after 30000ms`. Page-coupled helpers that should resolve quickly (`observe`, `screenshot`, `extract`) also fail fast with a named per-op error at `min(cellBudget, 20s)`, leaving budget for the rest of the cell, rather than silently consuming the whole budget.
+- Derived the auth-broker OAuth callback ports (`CALLBACK_PORTS`) and the paste-code login-provider set from the `@oh-my-pi/pi-ai` provider registry, removing the duplicated `CALLBACK_SERVER_PROVIDERS` tables in the model selector and the setup-wizard sign-in scene.
+- Raised the `eval` tool's per-cell `timeout` ceiling from 600s to 3600s (matching `bash`), in both the Zod schema and the `TOOL_TIMEOUTS.eval` runtime clamp, so heavy local-compute cells can request budgets above 10 minutes.
+- Derived the auth-broker OAuth callback ports (`CALLBACK_PORTS`) and the paste-code login-provider set from the `@oh-my-pi/pi-ai` provider registry, removing the duplicated `CALLBACK_SERVER_PROVIDERS` tables in the model selector and the setup-wizard sign-in scene.
+- Reworked tool result-header glyphs to cut the overused success checkmark/dot: each tool now shows its own signature icon on success (terminal for bash, pencil for edit, magnifier/globe for search, plug for MCP, etc.; read keeps the read-group status dot), tools without a custom renderer fall back to a quiet `status.done` dot, and error/warning/pending states keep the universal cross/warning/spinner
+- Changed steady-state health indicators (LSP server ready, OAuth logged-in, plugin-doctor checks) from a success checkmark to a colored `status.enabled` dot, so failures stand out instead of every line reading as a check
+- Changed one-shot MCP/SSH/debug confirmation messages from a generic checkmark to contextual action glyphs (add/remove, connect/enable/disable toggles, reload, job-completed), reflecting what happened rather than just "success"
+- Derived the auth-broker OAuth callback ports (`CALLBACK_PORTS`) and the paste-code login-provider set from the `@oh-my-pi/pi-ai` provider registry, removing the duplicated `CALLBACK_SERVER_PROVIDERS` tables in the model selector and the setup-wizard sign-in scene.
+
+### Fixed
+
+- Fixed package subpath exports for status-line, setup-wizard, tool-discovery, and gallery fixture modules so rewritten test imports resolve through `@oh-my-pi/pi-coding-agent`.
+- Fixed runtime model provider discovery so extension-registered providers are now refreshed after extension load and extension-supplied models appear without restarting
+- Fixed task-row shimmer timing so every running description starts its highlight on the first character together and reaches the last character together, regardless of text length.
+- Fixed the `eval` tool's `read`/`write`/`append` helpers (both Python and JS backends) treating `local://` (and other internal-URL) paths as plain filesystem paths. `pathlib.Path`/`path.resolve` collapse `local://x.md` to `local:/x.md`, so `write("local://x.md", …)` created a junk `local:` directory under the cwd instead of writing where `read local://x.md` resolves. The helpers now substitute injected on-disk roots for known schemes (currently `local://`, pinned to the session's own `local://` root), reject path traversal and unknown `scheme://` paths, and leave plain paths resolving against the cwd.
+- Fixed read and edit previews to surface the enclosing syntactic block's off-window boundary line (behind an ellipsis) when a shown line opens or closes a block whose other end falls outside the displayed range. Powered by a new tree-sitter `enclosingBlockBoundaries` native, so it covers brace languages and indentation languages (Python) using real syntactic spans, with a lexical bracket scan as fallback for unparseable sources.
+- Fixed `tab.screenshot({ selector })` hanging for the entire cell budget on continuously-animating pages (WebGL / `backdrop-filter` "glass" effects). The element-screenshot path no longer routes through puppeteer's `scrollIntoViewIfNeeded()`, whose `IntersectionObserver` promise can stall indefinitely under heavy rendering; it now does a single instant `scrollIntoView` and captures with `scrollIntoView: false` (relying on `captureBeyondViewport`), so off-screen elements are still captured without the stall.
+- Fixed follow-up message submissions to forward pending clipboard-pasted images to `session.prompt` in both streaming and non-streaming flows
+- Fixed follow-up handling to clear consumed clipboard image state after submission so pasted images are not silently carried into later messages
+- Fixed clipboard-pasted images being rejected when steering or following up during compaction. Instead of bailing with "Retry after it completes to send images", the message and its images are now queued via `queueCompactionMessage` and forwarded to the session (steer/follow-up/prompt) when the compaction queue flushes.
+- Fixed edit tool result previews to show only current-file lines and collapse long inserted blocks instead of echoing removed content.
+- Fixed `generateDiffString` to omit the mid-skip `...` placeholder between two nearby edits, conveying the elided gap via the jump in line numbers instead (consistent with how leading/trailing context skips already render). The placeholder row was indistinguishable from a genuine `...` context line and wasted a row in compact previews.
+- Fixed concurrent interactive dialogs clobbering each other on the shared editor surface. `ExtensionUiController` presents the selector / input / editor modals by swapping a component into the single `editorContainer` and stealing focus, with no serialization — so a second `select`/`input`/`editor` request (from a hook, extension, the `ask` tool, or an internal flow) opened while one was already up would clear the container and re-focus, orphaning the first dialog. Its promise then hung until the caller's signal aborted (surfacing a stray `Ask input was cancelled` on top of the answered call). These modals are now serialized through `#presentDialog`: at most one shows at a time and the rest queue (FIFO); a queued request whose signal aborts before its turn resolves `undefined` and is never shown. The first dialog is still presented synchronously, so single-dialog timing is unchanged.
+- Fixed the `ask` tool potentially hanging when the model emitted two `ask` calls in one tool batch. `ask` now declares `concurrency: "exclusive"`, so the agent loop serializes the batch and each question's selector runs to completion before the next starts, instead of racing for the shared selector surface.
+- Expanded `@path/to/file` import references in CLAUDE.md / AGENTS.md / GEMINI.md (and the other discovered context-file flavors) when loading them into the system prompt, matching the convention used by Claude Code, Goose, and other agents. Imports resolve relative to the importing file's directory, support `~/...`, recurse up to 5 hops, and are skipped inside fenced code blocks and inline code spans so technical examples like `npm install @types/node` survive intact ([#2111](https://github.com/can1357/oh-my-pi/issues/2111)).
+
+### Removed
+
+- Removed the special Anthropic `claude-opus-4-8` tool-call batch cap; sessions no longer abort an in-flight provider stream after a fixed number of completed tool calls.
+
 ## [15.10.4] - 2026-06-08
 
 ### Added

package/dist/types/capability/rule-buckets.d.ts

@@ -6,7 +6,7 @@
  * manager, and splits the rest into the always-apply and rulebook buckets.
  *
  * Bucket precedence (matches docs/rulebook-matching-pipeline.md §5):
- *   1. TTSR     — non-empty `condition` that `TtsrManager.addRule` accepts
+ *   1. TTSR     — non-empty `condition`/`astCondition` that `TtsrManager.addRule` accepts
  *   2. always   — `alwaysApply === true`
  *   3. rulebook — has a `description`
  */

package/dist/types/capability/rule.d.ts

@@ -15,6 +15,8 @@ export interface RuleFrontmatter {
     alwaysApply?: boolean;
     /** New key for TTSR match conditions. */
     condition?: string | string[];
+    /** TTSR match condition(s) expressed as ast-grep patterns (edit/write streams only). */
+    astCondition?: string | string[];
     /** New key for TTSR stream scope. */
     scope?: string | string[];
     /** Per-rule TTSR interrupt mode override. */
@@ -39,6 +41,8 @@ export interface Rule {
     description?: string;
     /** Regex condition(s) that can trigger TTSR interruption. */
     condition?: string[];
+    /** ast-grep pattern condition(s) that can trigger TTSR interruption (edit/write streams only). */
+    astCondition?: string[];
     /** Optional stream scope tokens (for example: text, thinking, tool:edit(*.ts)). */
     scope?: string[];
     /** Per-rule TTSR interrupt mode override (falls back to global ttsr.interruptMode). */
@@ -54,8 +58,9 @@ export interface Rule {
  * - legacy `ttsr_trigger` / `ttsrTrigger` are accepted as a `condition` fallback
  * - condition tokens that look like file globs become scope shorthands:
  *   `*.rs` => `tool:edit(*.rs)`, `tool:write(*.rs)` and a catch-all condition `.*`
+ * - `astCondition` holds ast-grep patterns and is kept verbatim (no glob inference)
  */
-export declare function parseRuleConditionAndScope(frontmatter: RuleFrontmatter): Pick<Rule, "condition" | "scope">;
+export declare function parseRuleConditionAndScope(frontmatter: RuleFrontmatter): Pick<Rule, "condition" | "astCondition" | "scope">;
 /**
  * Process-global snapshot of rules the active session loaded.
  * Read by internal URL protocol handlers (rule://).

package/dist/types/cli/update-cli.d.ts

@@ -20,7 +20,13 @@ export declare function parseUpdateArgs(args: string[]): {
     force: boolean;
     check: boolean;
 } | undefined;
-export declare function resolveUpdateMethodForTest(ompPath: string, bunBinDir: string | undefined): "bun" | "binary";
+type UpdateMethod = "brew" | "mise" | "bun" | "binary";
+interface UpdateMethodResolutionOptions {
+    homebrewPrefix?: string;
+    miseBinDirs?: readonly string[];
+    miseDataDir?: string;
+}
+export declare function resolveUpdateMethodForTest(ompPath: string, bunBinDir: string | undefined, options?: UpdateMethodResolutionOptions): UpdateMethod;
 /**
  * Atomically replace the installed binary and roll back if version verification fails.
  */
@@ -56,6 +62,9 @@ export declare function replaceBinaryForUpdate(options: BinaryReplacementOptions
  * See #1824.
  */
 export declare function buildBunInstallArgs(expectedVersion: string, nativeTag?: string): string[];
+export declare function buildHomebrewUpdateArgs(force: boolean): string[];
+export declare function buildMiseUpgradeArgs(): string[];
+export declare function buildMiseForceInstallArgs(expectedVersion: string): string[];
 /**
  * Run the update command.
  */
@@ -67,3 +76,4 @@ export declare function runUpdateCommand(opts: {
  * Print update command help.
  */
 export declare function printUpdateHelp(): void;
+export {};

package/dist/types/config/model-registry.d.ts

@@ -2,7 +2,7 @@ import { type ModelRefreshStrategy } from "@oh-my-pi/pi-ai/model-manager";
 import type { Api, Context, Model, SimpleStreamOptions, ThinkingConfig } from "@oh-my-pi/pi-ai/types";
 import type { AssistantMessageEventStream } from "@oh-my-pi/pi-ai/utils/event-stream";
 import type { ApiKeyResolver } from "@oh-my-pi/pi-ai";
-import type { OAuthCredentials, OAuthLoginCallbacks } from "@oh-my-pi/pi-ai/utils/oauth/types";
+import type { OAuthCredentials, OAuthLoginCallbacks } from "@oh-my-pi/pi-ai/oauth/types";
 import { type ThemeColor } from "../modes/theme/theme";
 import type { AuthStorage } from "../session/auth-storage";
 import { type ApiKeyResolverOptions } from "./api-key-resolver";
@@ -284,6 +284,16 @@ export declare class ModelRegistry {
     refresh(strategy?: ModelRefreshStrategy): Promise<void>;
     refreshInBackground(strategy?: ModelRefreshStrategy): void;
     refreshProvider(providerId: string, strategy?: ModelRefreshStrategy): Promise<void>;
+    /**
+     * Discover models for providers registered at runtime via `fetchDynamicModels`
+     * (extension providers). Merges the discovered catalog into the existing model
+     * set without reloading static models, so dynamically-discovered models from
+     * other providers are preserved. No-op when no runtime providers are registered.
+     *
+     * Drives the same SQLite model cache as built-in providers, so the default
+     * `online-if-uncached` strategy fetches at most once per cache TTL (24 h).
+     */
+    refreshRuntimeProviders(strategy?: ModelRefreshStrategy): Promise<void>;
     /**
      * Get any error from loading models.json (undefined if no error).
      */
@@ -399,6 +409,13 @@ export interface ProviderConfigInput {
         getApiKey?(credentials: OAuthCredentials): string;
         modifyModels?(models: Model<Api>[], credentials: OAuthCredentials): Model<Api>[];
     };
+    /**
+     * Async factory that fetches the live model list from the provider endpoint.
+     * When present, the result is run through the same SQLite model-cache as
+     * built-in providers (keyed by provider name, default 24 h TTL).
+     * The factory receives the resolved API key (undefined when unauthenticated).
+     */
+    fetchDynamicModels?: (apiKey: string | undefined) => Promise<readonly NonNullable<ProviderConfigInput["models"]>[number][]>;
     models?: Array<{
         id: string;
         name: string;

package/dist/types/discovery/at-imports.d.ts

@@ -0,0 +1,15 @@
+/** Maximum number of recursive `@`-import hops. Matches Claude Code's documented cap. */
+export declare const MAX_AT_IMPORT_DEPTH = 5;
+export interface ExpandAtImportsOptions {
+    /** Maximum hop depth (default: {@link MAX_AT_IMPORT_DEPTH}). */
+    maxDepth?: number;
+    /** Override the home directory used to resolve `~/...` (default: `os.homedir()`). */
+    home?: string;
+}
+/**
+ * Expand `@path/to/file` references in `content` against `filePath`'s directory.
+ *
+ * Returns the expanded text. When no imports match, the original string is
+ * returned unchanged.
+ */
+export declare function expandAtImports(content: string, filePath: string, options?: ExpandAtImportsOptions): Promise<string>;

package/dist/types/edit/diff.d.ts

@@ -1,3 +1,4 @@
+import { type BlockContextSource } from "../utils/block-context";
 export interface DiffResult {
     diff: string;
     firstChangedLine: number | undefined;
@@ -25,7 +26,7 @@ export declare class ApplyPatchError extends Error {
  * Generate a unified diff string with line numbers and context.
  * Returns both the diff string and the first changed line number (in the new file).
  */
-export declare function generateDiffString(oldContent: string, newContent: string, contextLines?: number): DiffResult;
+export declare function generateDiffString(oldContent: string, newContent: string, contextLines?: number, source?: BlockContextSource): DiffResult;
 export interface ReplaceOptions {
     /** Allow fuzzy matching */
     fuzzy: boolean;
@@ -44,7 +45,7 @@ export interface ReplaceResult {
  * Generate a unified diff string without file headers.
  * Returns both the diff string and the first changed line number (in the new file).
  */
-export declare function generateUnifiedDiffString(oldContent: string, newContent: string, contextLines?: number): DiffResult;
+export declare function generateUnifiedDiffString(oldContent: string, newContent: string, contextLines?: number, source?: BlockContextSource): DiffResult;
 export declare function normalizeDiff(diff: string): string;
 export declare function normalizeCreateContent(content: string): string;
 export declare function parseDiffHunks(diff: string): DiffHunk[];

package/dist/types/eval/__tests__/helpers-local-roots.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/eval/backend.d.ts

@@ -53,3 +53,10 @@ export interface ExecutorBackend {
     /** Execute one cell. Caller invokes once per cell and aggregates results. */
     execute(code: string, opts: ExecutorBackendExecOptions): Promise<ExecutorBackendResult>;
 }
+/**
+ * Resolve the on-disk roots that the eval helpers substitute for internal-URL
+ * schemes (currently `local://`). Prefers the session's own
+ * {@link LocalProtocolOptions} — the exact mapping `read local://…` uses — so an
+ * eval `write("local://x")` and a later `read local://x` agree on the location.
+ */
+export declare function resolveEvalUrlRoots(session: ToolSession): Record<string, string>;

package/dist/types/eval/js/context-manager.d.ts

@@ -12,6 +12,7 @@ export declare function executeInVmContext(options: {
     sessionId: string;
     cwd: string;
     session: ToolSession;
+    localRoots?: Record<string, string>;
     reset?: boolean;
     code: string;
     filename: string;

package/dist/types/eval/js/executor.d.ts

@@ -20,6 +20,8 @@ export interface JsExecutorOptions {
     artifactPath?: string;
     artifactId?: string;
     session: ToolSession;
+    /** On-disk roots the helpers substitute for internal-URL schemes (e.g. `local://`). */
+    localRoots?: Record<string, string>;
 }
 export interface JsResult {
     output: string;

package/dist/types/eval/js/index.d.ts

@@ -1,5 +1,5 @@
 import type { ToolSession } from "../../tools";
-import type { ExecutorBackendExecOptions, ExecutorBackendResult } from "../backend";
+import { type ExecutorBackendExecOptions, type ExecutorBackendResult } from "../backend";
 declare const _default: {
     id: "js";
     label: string;

package/dist/types/eval/js/shared/helpers.d.ts

@@ -17,6 +17,12 @@ export interface HelperOptions {
 export interface HelperContext {
     cwd(): string;
     env: Map<string, string>;
+    /**
+     * On-disk roots for internal-URL schemes the helpers accept (e.g.
+     * `{ local: "/…/artifacts/local" }`). A path like `local://x.md` is rewritten
+     * to `<root>/x.md` before any filesystem op; unknown schemes are rejected.
+     */
+    localRoots(): Record<string, string>;
     emitStatus(event: JsStatusEvent): void;
 }
 /**

package/dist/types/eval/js/shared/runtime.d.ts

@@ -25,6 +25,11 @@ export interface RuntimeOptions {
      * via `setRunScope()` instead.
      */
     extraGlobals?: Record<string, unknown>;
+    /**
+     * On-disk roots the helpers substitute for internal-URL schemes (e.g.
+     * `{ local: "/…/artifacts/local" }`). Stable for the worker's lifetime.
+     */
+    localRoots?: Record<string, string>;
 }
 /**
  * Shared JS runtime for the eval worker and the browser tab worker. Owns the prelude,

package/dist/types/eval/js/worker-protocol.d.ts

@@ -3,6 +3,12 @@ export type { JsDisplayOutput } from "./shared/types";
 export interface SessionSnapshot {
     cwd: string;
     sessionId: string;
+    /**
+     * On-disk roots the helpers substitute for internal-URL schemes
+     * (e.g. `{ local: "/…/artifacts/local" }`). Lets `read`/`write`/`append`
+     * accept `local://…` paths instead of writing a literal `local:/` directory.
+     */
+    localRoots?: Record<string, string>;
 }
 export interface RunErrorPayload {
     name?: string;

package/dist/types/eval/py/executor.d.ts

@@ -39,6 +39,13 @@ export interface PythonExecutorOptions {
     /** Artifact path/id for full output storage */
     artifactPath?: string;
     artifactId?: string;
+    /**
+     * On-disk roots the prelude helpers (`read`/`write`/`append`) substitute for
+     * internal-URL schemes (e.g. `{ local: "/…/artifacts/local" }`). Exported to
+     * the kernel as `PI_EVAL_LOCAL_ROOTS` (JSON) so `write("local://x")` lands
+     * where `read local://x` resolves instead of a literal `local:/` directory.
+     */
+    localRoots?: Record<string, string>;
     /**
      * ToolSession used to resolve host-side `tool.<name>(args)` calls made from
      * the Python prelude's bridge proxy. When omitted, the bridge env vars are

package/dist/types/eval/py/index.d.ts

@@ -1,5 +1,5 @@
 import type { ToolSession } from "../../tools";
-import type { ExecutorBackendExecOptions, ExecutorBackendResult } from "../backend";
+import { type ExecutorBackendExecOptions, type ExecutorBackendResult } from "../backend";
 export declare function namespaceSessionId(sessionId: string): string;
 declare const _default: {
     id: "python";

package/dist/types/exa/index.d.ts

@@ -1,20 +1,2 @@
-/**
- * Exa MCP Tools
- *
- * 22 tools for Exa's MCP servers:
- * - 4 search tools (search, deep, code, crawl)
- * - 1 LinkedIn search tool
- * - 1 company research tool
- * - 2 researcher tools (start, poll)
- * - 14 websets tools (CRUD, items, search, enrichment, monitor)
- */
-import type { CustomTool } from "../extensibility/custom-tools/types";
-import type { ExaRenderDetails } from "./types";
-/** All Exa tools (22 total) - static export for backward compatibility */
-export declare const exaTools: CustomTool<any, ExaRenderDetails>[];
 export * from "./mcp-client";
-export { renderExaCall, renderExaResult } from "./render";
-export { researcherTools } from "./researcher";
-export { searchTools } from "./search";
-export type { ExaRenderDetails, ExaSearchResponse, ExaSearchResult, MCPToolWrapperConfig } from "./types";
-export { websetsTools } from "./websets";
+export type { ExaSearchResponse, MCPCallResponse, MCPTool, MCPToolsResponse, MCPToolWrapperConfig } from "./types";

package/dist/types/exa/mcp-client.d.ts

@@ -1,7 +1,13 @@
 import type { TSchema } from "@oh-my-pi/pi-ai";
 import type { CustomTool, CustomToolResult } from "../extensibility/custom-tools/types";
 import { type CallMcpOptions } from "../mcp/json-rpc";
-import type { ExaRenderDetails, ExaSearchResponse, MCPTool, MCPToolWrapperConfig } from "./types";
+import type { ExaSearchResponse, MCPTool, MCPToolWrapperConfig } from "./types";
+type MCPWrappedToolDetails = {
+    response?: ExaSearchResponse;
+    error?: string;
+    toolName?: string;
+    raw?: unknown;
+};
 /** Find EXA_API_KEY from Bun.env or .env files */
 export declare function findApiKey(): string | null;
 /** Fetch available tools from Exa MCP */
@@ -29,14 +35,14 @@ export declare function fetchMCPToolSchema(apiKey: string, mcpToolName: string,
  * This allows tools to be generated from MCP server schemas without hardcoding,
  * reducing drift when MCP servers add new parameters.
  */
-export declare class MCPWrappedTool implements CustomTool<TSchema, ExaRenderDetails> {
+export declare class MCPWrappedTool implements CustomTool<TSchema, MCPWrappedToolDetails> {
     private readonly config;
     readonly parameters: TSchema;
     readonly description: string;
     readonly name: string;
     readonly label: string;
     constructor(config: MCPToolWrapperConfig, parameters: TSchema, description: string);
-    execute(_toolCallId: string, params: unknown, _onUpdate?: unknown, _ctx?: unknown, _signal?: AbortSignal): Promise<CustomToolResult<ExaRenderDetails>>;
+    execute(_toolCallId: string, params: unknown, _onUpdate?: unknown, _ctx?: unknown, _signal?: AbortSignal): Promise<CustomToolResult<MCPWrappedToolDetails>>;
 }
 /**
  * Create a CustomTool by fetching schema from MCP server.
@@ -44,3 +50,4 @@ export declare class MCPWrappedTool implements CustomTool<TSchema, ExaRenderDeta
  * Falls back to provided fallback schema if MCP fetch fails.
  */
 export declare function createMCPToolFromServer(apiKey: string, config: MCPToolWrapperConfig, fallbackSchema: TSchema, fallbackDescription: string): Promise<MCPWrappedTool>;
+export {};

package/dist/types/exa/types.d.ts

@@ -4,9 +4,6 @@
  * Types for the Exa MCP client and tool implementations.
  */
 import type { TSchema } from "@oh-my-pi/pi-ai";
-/** MCP endpoint URLs */
-export declare const EXA_MCP_URL = "https://mcp.exa.ai/mcp";
-export declare const WEBSETS_MCP_URL = "https://websetsmcp.exa.ai/mcp";
 /** MCP tool definition from server */
 export interface MCPTool {
     name: string;
@@ -73,83 +70,3 @@ export interface ExaSearchResponse {
     searchTime?: number;
     requestId?: string;
 }
-/** Researcher task status */
-export interface ResearcherStatus {
-    id: string;
-    status: "pending" | "running" | "completed" | "failed";
-    result?: string;
-    error?: string;
-}
-/** Webset definition */
-export interface Webset {
-    id: string;
-    name: string;
-    description?: string;
-    createdAt?: string;
-    updatedAt?: string;
-}
-/** Webset item */
-export interface WebsetItem {
-    id: string;
-    websetId: string;
-    url: string;
-    title?: string;
-    content?: string;
-    metadata?: Record<string, unknown>;
-}
-/** Webset search */
-export interface WebsetSearch {
-    id: string;
-    websetId: string;
-    query: string;
-    status: "pending" | "running" | "completed" | "cancelled";
-    resultCount?: number;
-}
-/** Webset enrichment */
-export interface WebsetEnrichment {
-    id: string;
-    websetId: string;
-    name: string;
-    prompt: string;
-    status: "pending" | "running" | "completed" | "cancelled";
-}
-/** Tool name mappings: MCP name -> our tool name */
-export declare const EXA_TOOL_MAPPINGS: {
-    readonly web_search_exa: "exa_search";
-    readonly get_code_context_exa: "exa_search_code";
-    readonly crawling_exa: "exa_crawl";
-    readonly linkedin_search_exa: "exa_linkedin";
-    readonly company_research_exa: "exa_company";
-    readonly deep_researcher_start: "exa_researcher_start";
-    readonly deep_researcher_check: "exa_researcher_poll";
-};
-export declare const WEBSETS_TOOL_MAPPINGS: {
-    readonly create_webset: "webset_create";
-    readonly list_websets: "webset_list";
-    readonly get_webset: "webset_get";
-    readonly update_webset: "webset_update";
-    readonly delete_webset: "webset_delete";
-    readonly list_webset_items: "webset_items_list";
-    readonly get_item: "webset_item_get";
-    readonly create_search: "webset_search_create";
-    readonly get_search: "webset_search_get";
-    readonly cancel_search: "webset_search_cancel";
-    readonly create_enrichment: "webset_enrichment_create";
-    readonly get_enrichment: "webset_enrichment_get";
-    readonly update_enrichment: "webset_enrichment_update";
-    readonly delete_enrichment: "webset_enrichment_delete";
-    readonly cancel_enrichment: "webset_enrichment_cancel";
-    readonly create_monitor: "webset_monitor_create";
-};
-export type ExaMcpToolName = keyof typeof EXA_TOOL_MAPPINGS;
-export type WebsetsMcpToolName = keyof typeof WEBSETS_TOOL_MAPPINGS;
-export type ExaToolName = (typeof EXA_TOOL_MAPPINGS)[ExaMcpToolName];
-export type WebsetsToolName = (typeof WEBSETS_TOOL_MAPPINGS)[WebsetsMcpToolName];
-/** Render details for TUI */
-export interface ExaRenderDetails {
-    response?: ExaSearchResponse;
-    error?: string;
-    toolName?: string;
-    /** Raw result for non-search responses */
-    raw?: unknown;
-}

package/dist/types/export/ttsr.d.ts

@@ -32,6 +32,18 @@ export declare class TtsrManager {
      * of being appended to it.
      */
     checkSnapshot(snapshot: string, context: TtsrMatchContext): Rule[];
+    /**
+     * Evaluate ast-grep `astCondition` rules against a reconstructed tool snapshot.
+     *
+     * Only edit/write tool streams reach here (AST conditions need a language, which
+     * we infer from the file extension on the tool's path argument). The snapshot is
+     * matched in memory by the native engine (`astMatch`), so this is async and
+     * intentionally throttled: identical consecutive snapshots (the common case when
+     * only non-source arguments change between deltas) are skipped.
+     */
+    checkAstSnapshot(snapshot: string, context: TtsrMatchContext): Promise<Rule[]>;
+    /** True when any registered rule carries ast-grep conditions. */
+    hasAstRules(): boolean;
     /** Mark rules as injected (won't trigger again until conditions allow). */
     markInjected(rulesToMark: Rule[]): void;
     /** Mark rule names as injected (won't trigger again until conditions allow). */
@@ -44,6 +56,8 @@ export declare class TtsrManager {
     resetBuffer(): void;
     /** Check if any TTSR rules are registered. */
     hasRules(): boolean;
+    /** All rules currently registered for TTSR monitoring, in registration order. */
+    getRules(): Rule[];
     /** Increment message counter (call after each turn). */
     incrementMessageCount(): void;
     /** Get current message count. */

package/dist/types/extensibility/extensions/types.d.ts

@@ -10,7 +10,7 @@
 import type { AgentMessage, AgentToolResult, AgentToolUpdateCallback, ThinkingLevel, ToolApproval } from "@oh-my-pi/pi-agent-core";
 import type { CompactionResult } from "@oh-my-pi/pi-agent-core/compaction";
 import type { Api, AssistantMessageEvent, AssistantMessageEventStream, Context, ImageContent, Model, ProviderResponseMetadata, SimpleStreamOptions, Static, TextContent, TSchema } from "@oh-my-pi/pi-ai";
-import type { OAuthCredentials, OAuthLoginCallbacks } from "@oh-my-pi/pi-ai/utils/oauth/types";
+import type { OAuthCredentials, OAuthLoginCallbacks } from "@oh-my-pi/pi-ai/oauth/types";
 import type * as piCodingAgent from "@oh-my-pi/pi-coding-agent";
 import type { AutocompleteItem, Component, EditorTheme, KeyId, TUI } from "@oh-my-pi/pi-tui";
 import type { logger as PiLogger } from "@oh-my-pi/pi-utils";
@@ -727,6 +727,13 @@ export interface ProviderConfig {
         /** Optional model rewrite hook for credential-aware routing (e.g., enterprise URLs). */
         modifyModels?(models: Model<Api>[], credentials: OAuthCredentials): Model<Api>[];
     };
+    /**
+     * Async factory that fetches the live model list from the provider endpoint.
+     * Runs through the same SQLite model-cache as built-in providers (keyed by
+     * provider name, default 24 h TTL). Receives the resolved API key (undefined
+     * when unauthenticated). Mutually exclusive with `models`.
+     */
+    fetchDynamicModels?: (apiKey: string | undefined) => Promise<readonly ProviderModelConfig[]>;
 }
 /** Configuration for a model within a provider. */
 export interface ProviderModelConfig {

package/dist/types/extensibility/legacy-pi-ai-shim.d.ts

@@ -8,7 +8,7 @@
  * entrypoint. Legacy extensions still author parameter schemas as
  * `Type.Object({ ... })`, so this file is served by `legacy-pi-compat.ts` in
  * place of the real pi-ai entrypoint whenever a legacy extension imports the
- * bare package root. Subpath imports (`@oh-my-pi/pi-ai/utils/oauth`, etc.)
+ * bare package root. Subpath imports (`@oh-my-pi/pi-ai/oauth`, etc.)
  * continue to resolve directly against the bundled pi-ai package.
  *
  * The `Type` runtime is borrowed from the Zod-backed TypeBox shim that

package/dist/types/internal-urls/local-protocol.d.ts

@@ -5,6 +5,16 @@ export interface LocalProtocolOptions {
 }
 export declare function resolveLocalRoot(options: LocalProtocolOptions): string;
 export declare function resolveLocalUrlToPath(input: string | InternalUrl, options: LocalProtocolOptions): string;
+/**
+ * On-disk roots the eval helpers (`read`/`write`/`append`) substitute for
+ * internal-URL schemes so e.g. `write("local://x.md")` lands where a later
+ * `read local://x.md` resolves — instead of a literal `local:/` directory under
+ * the cwd (a stdlib `pathlib.Path`/`path.resolve` collapses `local://` to
+ * `local:/`). Keyed by scheme without the `://`. Currently only `local`, but the
+ * shape is a map so additional file-backed schemes can be added without
+ * re-plumbing the worker boundary.
+ */
+export declare function buildEvalUrlRoots(options: LocalProtocolOptions): Record<string, string>;
 /**
  * Protocol handler for local:// URLs.
  *

package/dist/types/mcp/oauth-flow.d.ts

@@ -4,8 +4,8 @@
  * Allows users to authenticate with any OAuth-compatible MCP server
  * by providing authorization URL, token URL, and client credentials.
  */
-import { OAuthCallbackFlow } from "@oh-my-pi/pi-ai/utils/oauth/callback-server";
-import type { OAuthController, OAuthCredentials } from "@oh-my-pi/pi-ai/utils/oauth/types";
+import { OAuthCallbackFlow } from "@oh-my-pi/pi-ai/oauth/callback-server";
+import type { OAuthController, OAuthCredentials } from "@oh-my-pi/pi-ai/oauth/types";
 export interface MCPOAuthConfig {
     /** Authorization endpoint URL */
     authorizationUrl: string;

package/dist/types/modes/components/custom-editor.d.ts

@@ -8,6 +8,9 @@ export declare function extractBracketedImagePastePath(data: string): string | u
 export declare class CustomEditor extends Editor {
     #private;
     imageLinks?: readonly (string | undefined)[];
+    /** Treat image/paste markers as indivisible: a stray backspace deletes the whole token
+     *  instead of corrupting `[Paste #1, +30 lines]` into plain text. */
+    atomicTokenPattern: RegExp;
     /** Gradient-highlight the "ultrathink" / "orchestrate" / "workflowz" keywords as the user types
      *  them, skipping any occurrence inside code spans, fenced blocks, or XML sections. Also make
      *  pasted image placeholders visually distinct and hyperlink them once their blob file exists. */