@oh-my-pi/pi-coding-agent 15.10.7 → 15.10.9

package/CHANGELOG.md

@@ -2,6 +2,33 @@
 
 ## [Unreleased]
 
+## [15.10.9] - 2026-06-09
+
+### Fixed
+
+- Fixed streaming thinking (and other styled assistant content) vanishing from native scrollback once it scrolled past the viewport top during a foreground turn. The transcript's append-only commit detector compared raw row bytes, so a styled paragraph wrapping onto a new row (the span-closing SGR and width padding move while the visible cells stay identical) or a streamed token pushing the last word down a line flagged the block as permanently volatile — the commit boundary froze and every later row that crossed the viewport top was committed nowhere. Rows are now compared by visible content, a wrap-shrink of the in-flight bottom line counts as append-only, and a genuine one-off interior rewrite only suspends commits until the block re-earns append-only (30 clean frames), after which the pinned emitter backfills the stalled gap contiguously. Periodically rewriting blocks (spinners, collapsing tool previews) never re-earn and stay deferred.
+
+- Fixed bracketed pastes containing multiple image file paths so each image is attached in order instead of treating the whole paste as one unreadable path.
+
+- Fixed MCP OAuth fallback prompts so the "Click here to authorize" label emits an auth-safe terminal hyperlink even when hyperlink auto-detection is unavailable, keeping non-browser MCP setup usable ([#2196](https://github.com/can1357/oh-my-pi/issues/2196)).
+- Fixed `task`-spawned subagents repeating filesystem scans the parent had already completed. `ExecutorOptions` and the `createAgentSession()` call inside `runSubprocess()` did not forward `rules`, the discovered extension paths, or the discovered `.omp/tools/` paths, so each subagent re-ran `loadCapability<Rule>()`, `discoverAndLoadExtensions()`, and the full `.omp/tools/` walk. The toolsession now caches `session.rules`, `session.extensionPaths`, and `session.customToolPaths`; `runSubprocess()` threads them through; and `createAgentSession()` accepts new `preloadedExtensionPaths` and `preloadedCustomToolPaths` options backed by new exported `discoverExtensionPaths()` and `discoverCustomToolPaths()` helpers. Crucially, only path lists are forwarded — never loaded instances. Each session rebuilds its own `Extension` and `LoadedCustomTool` objects so the per-session `ExtensionAPI`/`CustomToolAPI` (cwd, eventBus, runtime, exec, pushPendingAction, UI) targets the right session; forwarding loaded instances would have routed extension handlers and custom-tool execution back through the parent. The CLI's `preloadedExtensions` short-circuit is preserved for same-process reuse and now shallow-clones the caller's `extensions` array so inline-extension augmentation (autoresearch + custom-tools wrapper) cannot bleed back into it ([#2190](https://github.com/can1357/oh-my-pi/issues/2190)).
+- Fixed SSH tool cancellation hanging behind OpenSSH ControlMaster streams that stayed open after an Esc/user interrupt ([#2180](https://github.com/can1357/oh-my-pi/issues/2180)).
+- Fixed Windows stdio MCP servers launched through PATH shims such as `codegraph.cmd` so bare commands like `codegraph` resolve via `PATHEXT` before spawn ([#2174](https://github.com/can1357/oh-my-pi/issues/2174)).
+- Fixed compiled-binary extensions failing to load `@oh-my-pi/pi-*` packages when `bun --compile` quietly dropped one of the extra entrypoints (observed on macOS arm64 release builds): the legacy-pi compat shim's package-root override branch returned the bunfs path without checking the target was present, so the rewrite emitted a `file://` URL to a missing module and the #1216 fallback (scoped to the throwing `getResolvedSpecifier` path) never ran. Override targets are now validated against the on-disk filesystem at module init, missing entries are dropped, and resolution falls through to canonical lookup so Bun resolves the import from the extension's own `node_modules` ([#2168](https://github.com/can1357/oh-my-pi/issues/2168)).
+
+## [15.10.8] - 2026-06-09
+
+### Added
+
+- Added an optional `fetch` option to `CustomToolContext` so custom tools can use a caller-provided HTTP implementation
+- Added optional `fetch` overrides to `ModelRegistry` construction and MCP/web search/tool network calls, enabling callers to inject custom HTTP clients instead of relying on global `fetch`
+- Added a `bash.enabled` setting to disable the model-facing bash tool while leaving user-initiated bang/RPC bash commands available.
+- Added an `@<upstream>` model-selector suffix to pin an aggregator model to a single upstream provider per invocation, e.g. `--model openrouter/z-ai/glm-4.7@cerebras` (sets OpenRouter `provider.only`; Vercel AI Gateway models map to `vercelGatewayRouting.only`). Resolved through `parseModelPattern`, so it works for `--model`/`--smol`, model roles, and the SDK, and composes with a trailing thinking level (`...@cerebras:high`). The base must resolve to an aggregator (`openrouter.ai` / `ai-gateway.vercel.sh`); otherwise the `@` stays part of the id, so ids that legitimately contain `@` (`claude-opus-4-8@default`, `workers-ai/@cf/...`) are unaffected.
+
+### Fixed
+
+- Fixed a turn-ending provider error (e.g. a 502 whose body is the proxy's full HTML page) flooding the transcript: `AnthropicApiError` folds the entire response body into `errorMessage`, and the inline transcript render reprinted it verbatim — every embedded blank line included — leaving a tall mostly-empty block ending in `</html>`. The inline error now drops blank lines, clamps to 8 lines, and width-truncates each line via `getPreviewLines`, matching the pinned error banner.
+
 ## [15.10.7] - 2026-06-08
 
 ### Fixed

package/dist/types/config/model-registry.d.ts

@@ -1,7 +1,7 @@
 import { type ModelRefreshStrategy } from "@oh-my-pi/pi-ai/model-manager";
 import type { Api, Context, Model, SimpleStreamOptions, ThinkingConfig } from "@oh-my-pi/pi-ai/types";
 import type { AssistantMessageEventStream } from "@oh-my-pi/pi-ai/utils/event-stream";
-import type { ApiKeyResolver } from "@oh-my-pi/pi-ai";
+import type { ApiKeyResolver, FetchImpl } from "@oh-my-pi/pi-ai";
 import type { OAuthCredentials, OAuthLoginCallbacks } from "@oh-my-pi/pi-ai/oauth/types";
 import { type ThemeColor } from "../modes/theme/theme";
 import type { AuthStorage } from "../session/auth-storage";
@@ -277,7 +277,9 @@ export declare class ModelRegistry {
      * migration step lands off the event loop's hot path before the first
      * `tryLoad()` runs.
      */
-    constructor(authStorage: AuthStorage, modelsPath?: string);
+    constructor(authStorage: AuthStorage, modelsPath?: string, options?: {
+        fetch?: FetchImpl;
+    });
     /**
      * Reload models from disk (built-in + custom from models.json).
      */

package/dist/types/config/model-resolver.d.ts

@@ -50,6 +50,8 @@ export interface ParsedModelResult {
     model: Model<Api> | undefined;
     /** Thinking level if explicitly specified in pattern, undefined otherwise */
     thinkingLevel?: ThinkingLevel;
+    /** Upstream provider slug from an `@upstream` routing selector, if present. */
+    upstream?: string;
     warning: string | undefined;
     explicitThinkingLevel: boolean;
 }

package/dist/types/config/settings-schema.d.ts

@@ -2505,6 +2505,15 @@ export declare const SETTINGS_SCHEMA: {
             readonly description: "Automatically create a comprehensive todo list after the first message";
         };
     };
+    readonly "bash.enabled": {
+        readonly type: "boolean";
+        readonly default: true;
+        readonly ui: {
+            readonly tab: "tools";
+            readonly label: "Bash";
+            readonly description: "Enable the bash tool for shell command execution";
+        };
+    };
     readonly "find.enabled": {
         readonly type: "boolean";
         readonly default: true;

package/dist/types/extensibility/custom-tools/loader.d.ts

@@ -1,8 +1,10 @@
 import type { AgentToolResult } from "@oh-my-pi/pi-agent-core";
 import type { HookUIContext } from "../../extensibility/hooks/types";
 import type { LoadedCustomTool, ToolLoadError } from "./types";
-/** Tool path with optional source metadata */
-interface ToolPathWithSource {
+/** Tool path with optional source metadata, suitable for forwarding from a
+ * parent session to a subagent so the subagent can re-bind tools to its own
+ * `CustomToolAPI` without redoing the filesystem scan. */
+export interface ToolPathWithSource {
     path: string;
     source?: {
         provider: string;
@@ -46,12 +48,30 @@ export declare function loadCustomTools(pathsWithSources: ToolPathWithSource[],
     errors: ToolLoadError[];
     setUIContext: (uiContext: HookUIContext, hasUI: boolean) => void;
 }>;
+/**
+ * Collect the absolute tool-source paths to load, without importing or
+ * binding factories. Hot path on session startup — the scan walks
+ * `.omp/tools/`, `.claude/tools/`, the plugin tree, and any configured paths.
+ *
+ * Subagents reuse the parent's collected paths via the SDK's
+ * `preloadedCustomToolPaths` option, then call `loadCustomTools` themselves
+ * so each session re-binds factories with its own session-scoped
+ * `CustomToolAPI` (cwd, exec, pushPendingAction, UI).
+ *
+ * @param configuredPaths - Explicit paths from settings.json and CLI --tool flags
+ * @param cwd - Current working directory
+ */
+export declare function discoverCustomToolPaths(configuredPaths: string[], cwd: string): Promise<ToolPathWithSource[]>;
 /**
  * Discover and load tools from standard locations via capability system:
  * 1. User and project tools discovered by capability providers
  * 2. Installed plugins (~/.omp/plugins/node_modules/*)
  * 3. Explicitly configured paths from settings or CLI
  *
+ * Composed of {@link discoverCustomToolPaths} (FS scan) + {@link loadCustomTools}
+ * (per-session binding). Subagents skip the first step and just call
+ * `loadCustomTools` against the parent's collected paths.
+ *
  * @param configuredPaths - Explicit paths from settings.json and CLI --tool flags
  * @param cwd - Current working directory
  * @param builtInToolNames - Names of built-in tools to check for conflicts
@@ -66,4 +86,3 @@ export declare function discoverAndLoadCustomTools(configuredPaths: string[], cw
     errors: ToolLoadError[];
     setUIContext: (uiContext: HookUIContext, hasUI: boolean) => void;
 }>;
-export {};

package/dist/types/extensibility/custom-tools/types.d.ts

@@ -6,7 +6,7 @@
  */
 import type { AgentToolResult, AgentToolUpdateCallback, ToolApproval, ToolApprovalDecision, ToolTier } from "@oh-my-pi/pi-agent-core";
 import type { CompactionResult } from "@oh-my-pi/pi-agent-core/compaction";
-import type { Model, Static, TSchema } from "@oh-my-pi/pi-ai";
+import type { FetchImpl, Model, Static, TSchema } from "@oh-my-pi/pi-ai";
 import type { Component } from "@oh-my-pi/pi-tui";
 import type { Rule } from "../../capability/rule";
 import type { ModelRegistry } from "../../config/model-registry";
@@ -74,6 +74,8 @@ export interface CustomToolContext {
     abort(): void;
     /** Settings instance for the current session. Prefer over the global singleton. */
     settings?: Settings;
+    /** Fetch implementation for outbound HTTP; defaults to global fetch when omitted. */
+    fetch?: FetchImpl;
     /** Whether to auto-approve all destructive tool operations (--auto-approve CLI flag) */
     autoApprove?: boolean;
 }

package/dist/types/extensibility/extensions/index.d.ts

@@ -2,7 +2,7 @@
  * Extension system for lifecycle events and custom tools.
  */
 export type { SlashCommandInfo, SlashCommandLocation, SlashCommandSource } from "../slash-commands";
-export { discoverAndLoadExtensions, ExtensionRuntimeNotInitializedError, loadExtensionFromFactory, loadExtensions, } from "./loader";
+export { discoverAndLoadExtensions, discoverExtensionPaths, ExtensionRuntimeNotInitializedError, loadExtensionFromFactory, loadExtensions, } from "./loader";
 export * from "./runner";
 export * from "./types";
 export * from "./wrapper";

package/dist/types/extensibility/extensions/loader.d.ts

@@ -38,6 +38,22 @@ export declare function loadExtensionFromFactory(factory: ExtensionFactory, cwd:
  */
 export declare function loadExtensions(paths: string[], cwd: string, eventBus?: EventBus): Promise<LoadExtensionsResult>;
 /**
- * Discover and load extensions from standard locations.
+ * Discover absolute paths of extensions to load, without importing or
+ * binding factories. Hot path on session startup — the scan walks native
+ * `.omp`/`.pi` extension capabilities, the installed-plugin tree, and any
+ * configured paths.
+ *
+ * Subagents reuse the parent's collected paths via the SDK's
+ * `preloadedExtensionPaths` option, then call {@link loadExtensions} themselves
+ * so each session rebuilds Extension instances bound to its OWN
+ * `ExtensionAPI` (cwd, eventBus, runtime). Forwarding the parent's
+ * `LoadExtensionsResult` directly would reuse handlers/tools/commands that
+ * closed over the parent's `cwd` and event bus.
+ */
+export declare function discoverExtensionPaths(configuredPaths: string[], cwd: string, disabledExtensionIds?: string[]): Promise<string[]>;
+/**
+ * Discover and load extensions from standard locations. Composed of
+ * {@link discoverExtensionPaths} (FS scan) + {@link loadExtensions}
+ * (per-session binding).
  */
 export declare function discoverAndLoadExtensions(configuredPaths: string[], cwd: string, eventBus?: EventBus, disabledExtensionIds?: string[]): Promise<LoadExtensionsResult>;

package/dist/types/extensibility/plugins/legacy-pi-compat.d.ts

@@ -13,6 +13,14 @@ import * as path from "node:path";
  * Exported for tests; production callers use `BUNFS_PACKAGE_ROOT` below.
  */
 export declare function __computeBunfsPackageRoot(metaDir: string, pathImpl?: typeof path): string;
+/**
+ * Drop overrides whose targets are missing on disk so they can fall through to
+ * the canonical-resolution path. Exported for the test seam in #2168.
+ *
+ * `pathExistsSync` defaults to `fs.existsSync`; the tests inject a stub to
+ * simulate the missing-entrypoint failure mode without touching the real FS.
+ */
+export declare function __validateLegacyPiPackageRootOverrides(candidates: Record<string, string>, pathExistsSync?: (p: string) => boolean): Record<string, string>;
 /**
  * Load a legacy Pi extension module from its real on-disk location.
  *

package/dist/types/mcp/oauth-discovery.d.ts

@@ -4,6 +4,7 @@
  * Automatically detects OAuth requirements from MCP server responses
  * and extracts authentication endpoints.
  */
+import type { FetchImpl } from "@oh-my-pi/pi-ai/types";
 export interface OAuthEndpoints {
     authorizationUrl: string;
     tokenUrl: string;
@@ -38,4 +39,6 @@ export declare function analyzeAuthError(error: Error, serverUrl?: string): Auth
  * Try to discover OAuth endpoints by querying the server's well-known endpoints.
  * This is a fallback when error responses don't include OAuth metadata.
  */
-export declare function discoverOAuthEndpoints(serverUrl: string, authServerUrl?: string, resourceMetadataUrl?: string): Promise<OAuthEndpoints | null>;
+export declare function discoverOAuthEndpoints(serverUrl: string, authServerUrl?: string, resourceMetadataUrl?: string, opts?: {
+    fetch?: FetchImpl;
+}): Promise<OAuthEndpoints | null>;

package/dist/types/mcp/oauth-flow.d.ts

@@ -6,6 +6,7 @@
  */
 import { OAuthCallbackFlow } from "@oh-my-pi/pi-ai/oauth/callback-server";
 import type { OAuthController, OAuthCredentials } from "@oh-my-pi/pi-ai/oauth/types";
+import type { FetchImpl } from "@oh-my-pi/pi-ai/types";
 export interface MCPOAuthConfig {
     /** Authorization endpoint URL */
     authorizationUrl: string;
@@ -23,6 +24,8 @@ export interface MCPOAuthConfig {
     callbackPort?: number;
     /** Custom callback path (default: /callback or redirectUri pathname) */
     callbackPath?: string;
+    /** Fetch implementation for token exchange and discovery requests. */
+    fetch?: FetchImpl;
 }
 /**
  * Generic OAuth flow for MCP servers.
@@ -56,4 +59,6 @@ export declare class MCPOAuthFlow extends OAuthCallbackFlow {
  * Refresh an MCP OAuth token using the standard refresh_token grant.
  * Returns updated credentials; preserves the old refresh token if the server doesn't rotate it.
  */
-export declare function refreshMCPOAuthToken(tokenUrl: string, refreshToken: string, clientId?: string, clientSecret?: string): Promise<OAuthCredentials>;
+export declare function refreshMCPOAuthToken(tokenUrl: string, refreshToken: string, clientId?: string, clientSecret?: string, opts?: {
+    fetch?: FetchImpl;
+}): Promise<OAuthCredentials>;

package/dist/types/mcp/transports/stdio.d.ts

@@ -5,6 +5,18 @@
  * Messages are newline-delimited JSON.
  */
 import type { MCPRequestOptions, MCPStdioServerConfig, MCPTransport } from "../../mcp/types";
+/** Subprocess argv for launching an MCP stdio server. */
+export interface StdioSpawnCommand {
+    cmd: string[];
+}
+/** Inputs used to resolve platform-specific stdio spawn behavior. */
+export interface ResolveStdioSpawnOptions {
+    cwd: string;
+    env: Record<string, string | undefined>;
+    platform?: NodeJS.Platform;
+}
+/** Resolve the subprocess argv used to launch an MCP stdio server. */
+export declare function resolveStdioSpawnCommand(config: MCPStdioServerConfig, options: ResolveStdioSpawnOptions): Promise<StdioSpawnCommand>;
 /** Minimal write surface of `Subprocess.stdin` we need for framed sends. */
 interface FrameSink {
     write(chunk: string): unknown;

package/dist/types/modes/components/custom-editor.d.ts

@@ -1,6 +1,7 @@
 import { Editor, type KeyId } from "@oh-my-pi/pi-tui";
 import type { AppKeybinding } from "../../config/keybindings";
 type ConfigurableEditorAction = Extract<AppKeybinding, "app.interrupt" | "app.clear" | "app.exit" | "app.suspend" | "app.display.reset" | "app.thinking.cycle" | "app.model.cycleForward" | "app.model.cycleBackward" | "app.model.select" | "app.model.selectTemporary" | "app.tools.expand" | "app.thinking.toggle" | "app.editor.external" | "app.history.search" | "app.message.dequeue" | "app.clipboard.pasteImage" | "app.clipboard.pasteTextRaw" | "app.clipboard.copyPrompt">;
+export declare function extractBracketedImagePastePaths(data: string): string[] | undefined;
 export declare function extractBracketedImagePastePath(data: string): string | undefined;
 /**
  * Custom editor that handles configurable app-level shortcuts for coding-agent.
@@ -33,8 +34,8 @@ export declare class CustomEditor extends Editor {
     onCopyPrompt?: () => void;
     /** Called when the configured image-paste shortcut is pressed. */
     onPasteImage?: () => Promise<boolean>;
-    /** Called when a bracketed paste contains exactly one image-file path. */
-    onPasteImagePath?: (path: string) => void;
+    /** Called when a bracketed paste contains one or more image-file paths. */
+    onPasteImagePath?: (path: string) => void | Promise<void>;
     /** Called when the configured raw text-paste shortcut is pressed. */
     onPasteTextRaw?: () => void;
     /** Called when the configured dequeue shortcut is pressed. */

package/dist/types/sdk.d.ts

@@ -6,6 +6,7 @@ import { type PromptTemplate } from "./config/prompt-templates";
 import { Settings, type SkillsSettings } from "./config/settings";
 import "./discovery";
 import { type CustomCommandsLoadResult } from "./extensibility/custom-commands";
+import { type ToolPathWithSource } from "./extensibility/custom-tools";
 import type { CustomTool } from "./extensibility/custom-tools/types";
 import { type ExtensionFactory, type ExtensionUIContext, type LoadExtensionsResult, type ToolDefinition } from "./extensibility/extensions";
 import { type Skill, type SkillWarning } from "./extensibility/skills";
@@ -62,10 +63,41 @@ export interface CreateAgentSessionOptions {
     /** Disable extension discovery (explicit paths still load). */
     disableExtensionDiscovery?: boolean;
     /**
-     * Pre-loaded extensions (skips file discovery).
-     * @internal Used by CLI when extensions are loaded early to parse custom flags.
+     * Pre-loaded extensions (skips file discovery and the per-session factory
+     * call). Used by the CLI when extensions are loaded early to parse custom
+     * flags — the same process owns the returned instances, so reusing them is
+     * safe.
+     *
+     * NEVER pass this across session boundaries (e.g. parent → subagent).
+     * `Extension` instances close over a parent-bound `ExtensionAPI` (cwd,
+     * eventBus, runtime), and reusing them would route tools/handlers/commands
+     * back through the parent. For subagents, forward
+     * {@link preloadedExtensionPaths} instead.
+     *
+     * @internal
      */
     preloadedExtensions?: LoadExtensionsResult;
+    /**
+     * Pre-discovered extension source paths. When provided, the filesystem-scan
+     * inside `discoverExtensionPaths()` is skipped — the session still calls
+     * `loadExtensions()` itself so each `Extension` is bound to THIS session's
+     * `ExtensionAPI` (cwd, eventBus, runtime).
+     *
+     * This is the safe pass-through for parent → subagent forwarding.
+     */
+    preloadedExtensionPaths?: string[];
+    /**
+     * Pre-discovered custom-tool source paths from `.omp/tools/`, `.claude/tools/`,
+     * plugins, etc. When provided, the filesystem-scan inside
+     * `discoverCustomToolPaths()` is skipped — subagents inherit the parent's
+     * scan result and call `loadCustomTools()` themselves so each session binds
+     * tools to its OWN `CustomToolAPI` (cwd, exec, pushPendingAction, UI).
+     *
+     * Forwarding the loaded `LoadedCustomTool[]` instances directly would reuse
+     * the parent's session-bound API and route tool execution back through the
+     * parent — wrong for isolated tasks and for pending-action routing.
+     */
+    preloadedCustomToolPaths?: ToolPathWithSource[];
     /** Shared event bus for tool/extension communication. Default: creates new bus. */
     eventBus?: EventBus;
     /** Skills. Default: discovered from multiple locations */
@@ -178,6 +210,14 @@ export declare function discoverAuthStorage(agentDir?: string): Promise<AuthStor
  * Discover extensions from cwd.
  */
 export declare function discoverExtensions(cwd?: string): Promise<LoadExtensionsResult>;
+/**
+ * Path-only counterpart of {@link loadSessionExtensions}: the FS-heavy scan
+ * without the per-session module load. Subagents reuse the parent's path list
+ * (cached on {@link ToolSession.extensionPaths}) and rebuild Extension
+ * instances themselves so each session's `ExtensionAPI` (cwd, eventBus,
+ * runtime) is its own.
+ */
+export declare function discoverSessionExtensionPaths(options: Pick<CreateAgentSessionOptions, "disableExtensionDiscovery" | "additionalExtensionPaths">, cwd: string, settings: Settings): Promise<string[]>;
 /**
  * Load the discovered/configured extensions for a session — everything {@link
  * createAgentSession} would load except the inline factory extensions it appends

package/dist/types/task/executor.d.ts

@@ -4,10 +4,12 @@
  * Runs each subagent on the main thread and forwards AgentEvents for progress tracking.
  */
 import type { AgentTelemetryConfig, ThinkingLevel } from "@oh-my-pi/pi-agent-core";
+import type { Rule } from "../capability/rule";
 import { ModelRegistry } from "../config/model-registry";
 import type { PromptTemplate } from "../config/prompt-templates";
 import { Settings } from "../config/settings";
 import { type SettingPath } from "../config/settings-schema";
+import type { ToolPathWithSource } from "../extensibility/custom-tools";
 import type { CustomTool } from "../extensibility/custom-tools/types";
 import { type Skill } from "../extensibility/skills";
 import type { HindsightSessionState } from "../hindsight/state";
@@ -70,6 +72,20 @@ export interface ExecutorOptions {
     skills?: Skill[];
     promptTemplates?: PromptTemplate[];
     workspaceTree?: WorkspaceTree;
+    /** Parent-discovered rules, forwarded to skip rule discovery in the subagent. */
+    rules?: Rule[];
+    /**
+     * Parent's discovered extension source paths. Forwarded to skip the
+     * extension FS scan in the subagent; the subagent then re-binds each
+     * extension against its own `ExtensionAPI` (cwd, eventBus, runtime).
+     */
+    preloadedExtensionPaths?: string[];
+    /**
+     * Parent's discovered custom-tool source paths. Forwarded to skip the
+     * `.omp/tools/` FS scan in the subagent; the subagent then re-binds each
+     * tool against its own `CustomToolAPI` (cwd, exec, pushPendingAction, UI).
+     */
+    preloadedCustomToolPaths?: ToolPathWithSource[];
     mcpManager?: MCPManager;
     authStorage?: AuthStorage;
     modelRegistry?: ModelRegistry;

package/dist/types/tools/fetch.d.ts

@@ -1,4 +1,5 @@
 import type { AgentToolResult } from "@oh-my-pi/pi-agent-core";
+import type { FetchImpl } from "@oh-my-pi/pi-ai";
 import { type Component } from "@oh-my-pi/pi-tui";
 import type { Settings } from "../config/settings";
 import type { RenderResultOptions } from "../extensibility/custom-tools/types";
@@ -34,7 +35,7 @@ export type FetchProvider = "native" | "trafilatura" | "lynx" | "parallel" | "ji
  * which always works on already-loaded HTML. Only a real `userSignal`
  * cancellation aborts the chain (#1449).
  */
-export declare function renderHtmlToText(url: string, html: string, timeout: number, settings: Settings, userSignal: AbortSignal | undefined, storage: AgentStorage | null): Promise<{
+export declare function renderHtmlToText(url: string, html: string, timeout: number, settings: Settings, userSignal: AbortSignal | undefined, storage: AgentStorage | null, fetchOverride?: FetchImpl): Promise<{
     content: string;
     ok: boolean;
     method: string;

package/dist/types/tools/index.d.ts

@@ -1,9 +1,11 @@
 import type { InMemorySnapshotStore } from "@oh-my-pi/hashline";
 import type { AgentTelemetryConfig, AgentTool } from "@oh-my-pi/pi-agent-core";
-import type { ToolChoice } from "@oh-my-pi/pi-ai";
+import type { FetchImpl, ToolChoice } from "@oh-my-pi/pi-ai";
 import type { AsyncJobManager } from "../async/job-manager";
+import type { Rule } from "../capability/rule";
 import type { PromptTemplate } from "../config/prompt-templates";
 import type { Settings } from "../config/settings";
+import type { ToolPathWithSource } from "../extensibility/custom-tools";
 import type { Skill } from "../extensibility/skills";
 import type { GoalModeState, GoalRuntime } from "../goals";
 import type { HindsightSessionState } from "../hindsight/state";
@@ -95,6 +97,8 @@ export interface ToolSession {
     cwd: string;
     /** Whether UI is available */
     hasUI: boolean;
+    /** Optional fetch implementation injected into the URL read pipeline (tests, proxies). Defaults to global fetch. */
+    fetch?: FetchImpl;
     /** Skip Python kernel availability check and warmup */
     skipPythonPreflight?: boolean;
     /** Pre-loaded context files (AGENTS.md, etc) */
@@ -105,6 +109,21 @@ export interface ToolSession {
     skills?: Skill[];
     /** Pre-loaded prompt templates */
     promptTemplates?: PromptTemplate[];
+    /** Pre-loaded rules (forwarded to subagents to skip re-discovery). */
+    rules?: Rule[];
+    /**
+     * Pre-discovered extension source paths. Forwarded to subagents so they
+     * skip the FS scan but still re-bind extensions to their own session-scoped
+     * `ExtensionAPI` (cwd, eventBus, runtime). Inline extension factories
+     * (`<inline-N>`) are NOT included — those are session-local.
+     */
+    extensionPaths?: string[];
+    /**
+     * Pre-discovered custom-tool source paths from `.omp/tools/`, `.claude/tools/`,
+     * plugins, etc. Forwarded to subagents so they skip the FS scan but still
+     * re-bind tools to their own session-scoped `CustomToolAPI`.
+     */
+    customToolPaths?: ToolPathWithSource[];
     /** Whether LSP integrations are enabled */
     enableLsp?: boolean;
     /** Whether an edit-capable tool is available in this session (controls hashline output) */

package/dist/types/tools/report-tool-issue.d.ts

@@ -21,6 +21,7 @@
  */
 import { Database } from "bun:sqlite";
 import type { AgentTool } from "@oh-my-pi/pi-agent-core";
+import type { FetchImpl } from "@oh-my-pi/pi-ai";
 import type { Settings } from "..";
 import type { ToolSession } from "./index";
 export declare function isAutoQaEnabled(settings?: Settings): boolean;
@@ -97,6 +98,10 @@ export interface FlushOptions {
      * future debug recipes); never set from the tool's auto-flush path.
      */
     bypassConsent?: boolean;
+    /**
+     * Fetch implementation for the push POST. Defaults to global fetch.
+     */
+    fetch?: FetchImpl;
     /**
      * Fires once at the start of the loop with the snapshot count of
      * unpushed rows. Subsequent inserts won't be reflected (the count is

package/dist/types/tui/hyperlink.d.ts

@@ -19,6 +19,14 @@ export declare function uriHyperlink(uri: string, displayText: string): string;
  * `www.example.com` inputs are linked as `https://www.example.com`.
  */
 export declare function urlHyperlink(url: string, displayText: string): string;
+/**
+ * Wrap `displayText` in an OSC 8 hyperlink pointing at an HTTP(S) URL,
+ * bypassing terminal capability auto-detection. Used for auth prompts where
+ * an inert "click" label blocks login on terminals whose capabilities are
+ * not advertised. Still returns plain text when the user has explicitly
+ * opted out via `tui.hyperlinks=off`.
+ */
+export declare function urlHyperlinkAlways(url: string, displayText: string): string;
 /**
  * Wrap `displayText` in an OSC 8 hyperlink pointing at a filesystem path.
  *

package/dist/types/web/kagi.d.ts

@@ -6,7 +6,7 @@
  * through the shared {@link AuthStorage} broker (Bearer token), and responses
  * are categorized result buckets rather than the legacy flat object array.
  */
-import type { AuthStorage } from "@oh-my-pi/pi-ai";
+import type { AuthStorage, FetchImpl } from "@oh-my-pi/pi-ai";
 /** V1 search request body. */
 export interface KagiSearchRequest {
     query: string;
@@ -82,6 +82,7 @@ export interface KagiSearchOptions {
     recency?: "day" | "week" | "month" | "year";
     sessionId?: string;
     signal?: AbortSignal;
+    fetch?: FetchImpl;
 }
 export interface KagiSearchSource {
     title: string;

package/dist/types/web/parallel.d.ts

@@ -1,3 +1,4 @@
+import { type FetchImpl } from "@oh-my-pi/pi-ai";
 import type { AgentStorage } from "../session/agent-storage";
 export interface ParallelUsageItem {
     name?: string;
@@ -40,6 +41,7 @@ export interface ParallelSearchOptions {
     mode?: "fast" | "research";
     maxCharsPerResult?: number;
     signal?: AbortSignal;
+    fetch?: FetchImpl;
 }
 export interface ParallelExtractOptions {
     objective?: string;
@@ -47,6 +49,7 @@ export interface ParallelExtractOptions {
     excerpts?: boolean;
     fullContent?: boolean;
     signal?: AbortSignal;
+    fetch?: FetchImpl;
 }
 export declare class ParallelApiError extends Error {
     readonly statusCode?: number;

package/dist/types/web/search/providers/anthropic.d.ts

@@ -4,7 +4,7 @@
  * Uses Claude's built-in web_search_20250305 tool to search the web.
  * Returns synthesized answers with citations and source metadata.
  */
-import { type AuthStorage } from "@oh-my-pi/pi-ai";
+import { type AuthStorage, type FetchImpl } from "@oh-my-pi/pi-ai";
 import type { SearchResponse } from "../../../web/search/types";
 import type { SearchParams } from "./base";
 import { SearchProvider } from "./base";
@@ -15,6 +15,7 @@ export interface AnthropicSearchParams {
     max_tokens?: number;
     temperature?: number;
     signal?: AbortSignal;
+    fetch?: FetchImpl;
 }
 /**
  * Executes a web search using Anthropic's Claude with built-in web search tool.

package/dist/types/web/search/providers/base.d.ts

@@ -1,4 +1,4 @@
-import type { AuthStorage } from "@oh-my-pi/pi-ai";
+import type { AuthStorage, FetchImpl } from "@oh-my-pi/pi-ai";
 import type { SearchProviderId, SearchResponse } from "../types";
 /**
  * Shared web search parameters passed to providers.
@@ -29,6 +29,7 @@ export interface SearchParams {
     recency?: "day" | "week" | "month" | "year";
     systemPrompt: string;
     signal?: AbortSignal;
+    fetch?: FetchImpl;
     maxOutputTokens?: number;
     numSearchResults?: number;
     temperature?: number;

package/dist/types/web/search/providers/brave.d.ts

@@ -4,7 +4,7 @@
  * Calls Brave's web search REST API and maps results into the unified
  * SearchResponse shape used by the web search tool.
  */
-import { type AuthStorage } from "@oh-my-pi/pi-ai";
+import { type AuthStorage, type FetchImpl } from "@oh-my-pi/pi-ai";
 import type { SearchResponse } from "../../../web/search/types";
 import type { SearchParams } from "./base";
 import { SearchProvider } from "./base";
@@ -13,6 +13,7 @@ export interface BraveSearchParams {
     num_results?: number;
     recency?: "day" | "week" | "month" | "year";
     signal?: AbortSignal;
+    fetch?: FetchImpl;
 }
 /** Find BRAVE_API_KEY from environment or .env files. */
 export declare function findApiKey(): string | null;

package/dist/types/web/search/providers/codex.d.ts

@@ -1,9 +1,10 @@
-import { type AuthStorage } from "@oh-my-pi/pi-ai";
+import { type AuthStorage, type FetchImpl } from "@oh-my-pi/pi-ai";
 import type { SearchResponse } from "../../../web/search/types";
 import type { SearchParams } from "./base";
 import { SearchProvider } from "./base";
 export interface CodexSearchParams {
     signal?: AbortSignal;
+    fetch?: FetchImpl;
     query: string;
     system_prompt?: string;
     num_results?: number;

package/dist/types/web/search/providers/exa.d.ts

@@ -6,7 +6,7 @@
  * Requests per-result summaries via `contents.summary` and synthesizes
  * them into a combined `answer` string on the SearchResponse.
  */
-import { type AuthStorage } from "@oh-my-pi/pi-ai";
+import { type AuthStorage, type FetchImpl } from "@oh-my-pi/pi-ai";
 import type { SearchResponse } from "../../../web/search/types";
 import type { SearchParams } from "./base";
 import { SearchProvider } from "./base";
@@ -21,6 +21,7 @@ export interface ExaSearchParams {
     start_published_date?: string;
     end_published_date?: string;
     signal?: AbortSignal;
+    fetch?: FetchImpl;
     /**
      * Credential source. Resolved before falling back to `EXA_API_KEY` so
      * Exa works when the key is stored via the broker/auth pipeline.

package/dist/types/web/search/providers/gemini.d.ts

@@ -8,7 +8,7 @@
  * sibling SQLite store and never POSTs the broker sentinel to a Google token
  * endpoint.
  */
-import { type AuthStorage } from "@oh-my-pi/pi-ai";
+import { type AuthStorage, type FetchImpl } from "@oh-my-pi/pi-ai";
 import type { SearchResponse } from "../../../web/search/types";
 import type { SearchParams } from "./base";
 import { SearchProvider } from "./base";
@@ -28,6 +28,7 @@ export interface GeminiSearchParams extends GeminiToolParams {
     signal?: AbortSignal;
     authStorage: AuthStorage;
     sessionId?: string;
+    fetch?: FetchImpl;
 }
 export declare function buildGeminiRequestTools(params: GeminiToolParams): Array<Record<string, Record<string, unknown>>>;
 /** Resolved auth for a Gemini API request. */