@oh-my-pi/pi-coding-agent 15.7.3 → 15.7.5

package/CHANGELOG.md

@@ -2,6 +2,45 @@
 
 ## [Unreleased]
 
+## [15.7.5] - 2026-06-01
+### Fixed
+
+- Fixed streaming assistant responses leaving duplicated tail rows in WSL/Windows Terminal scrollback by enabling eager native-scrollback rebuilds while assistant text is actively streaming ([#1615](https://github.com/can1357/oh-my-pi/issues/1615)).
+
+### Fixed
+
+- Fixed the `task` tool mangling subagent prompts when a model double-JSON-encodes a string argument: `context` and each task's `assignment`/`description` are now repaired when they arrive uniformly double-escaped (literal `\n`, `\"`, `\uXXXX`), so the subagent receives the intended prose and the call preview renders real newlines. The repair is guarded by a JSON-string round-trip and a double-encode signature, so legitimate backslashes/quotes (Windows paths, regexes, embedded quotes) are left untouched, and it is scoped to these natural-language fields only (never code-bearing tools).
+
+### Fixed
+
+- Fixed `pr://` PR views omitting formal review submissions and approvals when comments are enabled ([#1600](https://github.com/can1357/oh-my-pi/issues/1600)).
+
+### Fixed
+
+- Fixed subagent yield-reminder loop logging benign user/compaction aborts as `ERROR`. The catch around `session.prompt`/`waitForIdle` in `task/executor.ts` now demotes `ToolAbortError` and signal-aborted exits to `debug` and keeps `ERROR` for genuine prompt failures only ([#1623](https://github.com/can1357/oh-my-pi/issues/1623)).
+
+### Fixed
+
+- Fixed `read local://<file>` resolving to the wrong session's artifacts directory in multi-session ACP hosts (e.g. cmux). `LocalProtocolHandler.resolve` now honors `context.localProtocolOptions` supplied by the calling tool before falling back to the process-wide override or the first `main`-kind session in the global `AgentRegistry`; `read`, `find`, `search`, `ast_grep`, and `ast_edit` thread their session's options through so a `local://PLAN.md` lookup hits the calling session's `local` root instead of a sibling session's ([#1608](https://github.com/can1357/oh-my-pi/issues/1608)).
+
+### Fixed
+
+- Fixed `omp` segfaulting on exit on Windows after the tiny title/memory model loaded `onnxruntime-node` (issue [#1606](https://github.com/can1357/oh-my-pi/issues/1606)). The tiny model now runs in a Bun subprocess instead of a Worker thread, so the NAPI finalizer that crashes during shutdown never executes in the agent's address space; the subprocess is `SIGKILL`'d on dispose to skip every native destructor on every platform.
+
+### Fixed
+
+- Fixed unbounded MCP reconnect loop that could fork-bomb the host when a stdio MCP server completes the `initialize`/`tools/list` handshake and then exits. `MCPManager` now enforces a per-server crash circuit breaker (5 reconnects per 30 s window) on the automatic `transport.onClose` path; manual `/mcp reconnect` resets the window so users can recover after fixing the misconfiguration ([#1592](https://github.com/can1357/oh-my-pi/issues/1592)).
+
+## [15.7.4] - 2026-05-31
+
+### Removed
+
+- Removed `/shake summary`, the `shake-summary` auto-compaction strategy, and the `providers.shakeSummaryModel` setting. Use `/shake` or `compaction.strategy: shake` for mechanical artifact-backed elision without local-model CPU.
+
+### Fixed
+
+- Fixed plugin install failing for sources pinned to a SHA: `git.clone()` no longer adds `--depth 1` when `options.sha` is set, so the checkout of arbitrary commits succeeds instead of bailing out with "shallow clone may not contain this commit" ([#1589](https://github.com/can1357/oh-my-pi/issues/1589)).
+
 ## [15.7.3] - 2026-05-31
 ### Added
 

package/dist/types/config/settings-schema.d.ts

@@ -1298,12 +1298,12 @@ export declare const SETTINGS_SCHEMA: {
     };
     readonly "compaction.strategy": {
         readonly type: "enum";
-        readonly values: readonly ["context-full", "handoff", "shake", "shake-summary", "off"];
+        readonly values: readonly ["context-full", "handoff", "shake", "off"];
         readonly default: "context-full";
         readonly ui: {
             readonly tab: "context";
             readonly label: "Compaction Strategy";
-            readonly description: "Choose in-place context-full maintenance, auto-handoff, surgical shake (drop heavy content), shake with local-model summaries, or disable auto maintenance (off)";
+            readonly description: "Choose in-place context-full maintenance, auto-handoff, surgical shake (drop heavy content), or disable auto maintenance (off)";
             readonly options: readonly [{
                 readonly value: "context-full";
                 readonly label: "Context-full";
@@ -1316,10 +1316,6 @@ export declare const SETTINGS_SCHEMA: {
                 readonly value: "shake";
                 readonly label: "Shake";
                 readonly description: "Drop heavy content (tool results + large blocks) in place; recover via artifact";
-            }, {
-                readonly value: "shake-summary";
-                readonly label: "Shake (summary)";
-                readonly description: "Shake, but compress heavy regions with a local on-device model instead of dropping";
             }, {
                 readonly value: "off";
                 readonly label: "Off";
@@ -3560,21 +3556,6 @@ export declare const SETTINGS_SCHEMA: {
             })[];
         };
     };
-    readonly "providers.shakeSummaryModel": {
-        readonly type: "enum";
-        readonly values: readonly ["qwen3-1.7b", "gemma-3-1b", "qwen2.5-1.5b", "lfm2-1.2b"];
-        readonly default: "gemma-3-1b" | "lfm2-1.2b" | "qwen2.5-1.5b" | "qwen3-1.7b";
-        readonly ui: {
-            readonly tab: "context";
-            readonly label: "Shake Summary Model";
-            readonly description: "Local on-device model used by /shake summary and the shake-summary compaction strategy to compress heavy regions. Runs entirely on-device; downloads on first use. Falls back to plain elide when unavailable.";
-            readonly options: {
-                value: "gemma-3-1b" | "lfm2-1.2b" | "qwen2.5-1.5b" | "qwen3-1.7b";
-                label: "Gemma 3 1B" | "LFM2 1.2B" | "Qwen2.5 1.5B" | "Qwen3 1.7B";
-                description: "Best consolidation/dedup; lighter footprint, but leaks small talk during extraction." | "Best extraction granularity (atomic facts); weaker consolidation." | "Fastest load; solid all-rounder, slightly noisier extraction labels." | "Recommended; most disciplined extraction (ignores chit-chat), good consolidation, about 1.1 GB cached.";
-            }[];
-        };
-    };
     readonly "providers.kimiApiFormat": {
         readonly type: "enum";
         readonly values: readonly ["openai", "anthropic"];
@@ -3868,7 +3849,7 @@ export type StatusLineSeparatorStyle = SettingValue<"statusLine.separator">;
 export type TreeFilterMode = SettingValue<"treeFilterMode">;
 export interface CompactionSettings {
     enabled: boolean;
-    strategy: "context-full" | "handoff" | "shake" | "shake-summary" | "off";
+    strategy: "context-full" | "handoff" | "shake" | "off";
     thresholdPercent: number;
     thresholdTokens: number;
     reserveTokens: number;

package/dist/types/extensibility/custom-tools/types.d.ts

@@ -86,10 +86,10 @@ export type CustomToolSessionEvent = {
 } | {
     reason: "auto_compaction_start";
     trigger: "threshold" | "overflow" | "idle" | "incomplete";
-    action: "context-full" | "handoff" | "shake" | "shake-summary";
+    action: "context-full" | "handoff" | "shake";
 } | {
     reason: "auto_compaction_end";
-    action: "context-full" | "handoff" | "shake" | "shake-summary";
+    action: "context-full" | "handoff" | "shake";
     result: CompactionResult | undefined;
     aborted: boolean;
     willRetry: boolean;

package/dist/types/extensibility/shared-events.d.ts

@@ -160,12 +160,12 @@ export interface TurnEndEvent {
 export interface AutoCompactionStartEvent {
     type: "auto_compaction_start";
     reason: "threshold" | "overflow" | "idle" | "incomplete";
-    action: "context-full" | "handoff" | "shake" | "shake-summary";
+    action: "context-full" | "handoff" | "shake";
 }
 /** Fired when auto-compaction ends */
 export interface AutoCompactionEndEvent {
     type: "auto_compaction_end";
-    action: "context-full" | "handoff" | "shake" | "shake-summary";
+    action: "context-full" | "handoff" | "shake";
     result: CompactionResult | undefined;
     aborted: boolean;
     willRetry: boolean;

package/dist/types/internal-urls/local-protocol.d.ts

@@ -1,4 +1,4 @@
-import type { InternalResource, InternalUrl, ProtocolHandler, UrlCompletion } from "./types";
+import type { InternalResource, InternalUrl, ProtocolHandler, ResolveContext, UrlCompletion } from "./types";
 export interface LocalProtocolOptions {
     getArtifactsDir?: () => string | null;
     getSessionId?: () => string | null;
@@ -28,13 +28,23 @@ export declare class LocalProtocolHandler implements ProtocolHandler {
      * Returns the active local-protocol options.
      *
      * Resolution order:
-     * 1. Explicit override installed via {@link setOverride} (used by subagents
-     *    that share their parent's root and by SDK consumers with a custom
-     *    artifacts/session id mapping).
-     * 2. The main session in `AgentRegistry.global()`. Its `SessionManager`
-     *    supplies both `getArtifactsDir` and `getSessionId`.
+     * 1. **Caller-supplied** `context.localProtocolOptions` (the actual session
+     *    that initiated the `read`/`find`/`search`/`router.resolve` call). This
+     *    is what keeps `local://` reads pinned to the calling session in
+     *    multi-session hosts (cmux/ACP, embedded SDK consumers) where every
+     *    session registers as `kind: "main"` and "first one wins" would route
+     *    to the wrong artifacts directory.
+     * 2. Explicit process-global override installed via {@link setOverride}
+     *    (used by SDK consumers with a custom artifacts/session-id mapping and
+     *    by code paths that do not have a calling session, e.g. TUI hyperlink
+     *    resolution).
+     * 3. The first `main`-kind session in `AgentRegistry.global()`. Its
+     *    `SessionManager` supplies both `getArtifactsDir` and `getSessionId`.
+     *    Last-resort fallback — every caller that has a session reference
+     *    SHOULD thread it through `context` so this branch is never taken in
+     *    multi-session setups.
      */
-    static resolveOptions(): LocalProtocolOptions | undefined;
-    resolve(url: InternalUrl): Promise<InternalResource>;
-    complete(): Promise<UrlCompletion[]>;
+    static resolveOptions(context?: ResolveContext): LocalProtocolOptions | undefined;
+    resolve(url: InternalUrl, context?: ResolveContext): Promise<InternalResource>;
+    complete(_query?: string, context?: ResolveContext): Promise<UrlCompletion[]>;
 }

package/dist/types/internal-urls/types.d.ts

@@ -4,6 +4,7 @@
  * Internal URLs (agent://, artifact://, memory://, skill://, rule://, mcp://, omp://, local://) are resolved by tools like read,
  * providing access to agent outputs and server resources without exposing filesystem paths.
  */
+import type { LocalProtocolOptions } from "./local-protocol";
 /**
  * Raw resource payload returned by protocol handlers. The `immutable` flag is
  * applied by the router from {@link ProtocolHandler.immutable}, so handlers do
@@ -73,6 +74,17 @@ export interface ResolveContext {
     settings?: unknown;
     /** Caller's abort signal. */
     signal?: AbortSignal;
+    /**
+     * Calling session's `local://` root mapping. When present, the local-protocol
+     * handler resolves the URL against THIS session's artifacts dir instead of
+     * picking the first `main`-kind session from the global `AgentRegistry`.
+     *
+     * Required for correctness in multi-session hosts (cmux/ACP, embedded SDK
+     * consumers) where multiple sessions are registered as `main` and the
+     * "first one wins" lookup picks the wrong artifacts directory — see
+     * [#1608](https://github.com/can1357/oh-my-pi/issues/1608).
+     */
+    localProtocolOptions?: LocalProtocolOptions;
 }
 /**
  * Caller context for write operations dispatched to host-owned URI handlers.
@@ -84,6 +96,8 @@ export interface WriteContext {
     cwd?: string;
     /** Caller's abort signal. */
     signal?: AbortSignal;
+    /** Calling session's `local://` root mapping — see {@link ResolveContext.localProtocolOptions}. */
+    localProtocolOptions?: LocalProtocolOptions;
 }
 /**
  * Handler for a specific internal URL scheme (e.g., agent://, memory://, skill://, mcp://).

package/dist/types/lsp/client.d.ts

@@ -39,6 +39,9 @@ export declare function notifySaved(client: LspClient, filePath: string, signal?
  * Increments version, sends didChange and didSave notifications.
  */
 export declare function refreshFile(client: LspClient, filePath: string, signal?: AbortSignal): Promise<void>;
+/**
+ * Shutdown a specific client by key.
+ */
 export declare function shutdownClient(key: string): Promise<void>;
 /**
  * Send an LSP request and wait for response.

package/dist/types/mcp/manager.d.ts

@@ -130,12 +130,21 @@ export declare class MCPManager {
     disconnectAll(): Promise<void>;
     /**
      * Reconnect to a server after a connection failure.
+     *
      * Tears down the stale connection, re-resolves auth, establishes a new
-     * connection, reloads tools, and notifies consumers.
-     * Concurrent calls for the same server share one reconnection attempt.
-     * Returns the new connection, or null if reconnection failed.
-     */
-    reconnectServer(name: string): Promise<MCPServerConnection | null>;
+     * connection, reloads tools, and notifies consumers. Concurrent calls for
+     * the same server share one reconnection attempt. Returns the new
+     * connection, or `null` if reconnection failed or the per-server crash
+     * burst limit (see {@link RECONNECT_BURST_LIMIT}) is exceeded.
+     *
+     * @param options.manual - When `true`, resets the crash-burst window so a
+     *   user-driven retry (e.g. `/mcp reconnect`) is never blocked by an
+     *   earlier storm. Defaults to `false`; the transport `onClose` callback
+     *   and the per-tool-call retry path in `tool-bridge` MUST NOT set it.
+     */
+    reconnectServer(name: string, options?: {
+        manual?: boolean;
+    }): Promise<MCPServerConnection | null>;
     /**
      * Refresh tools from a specific server.
      */

package/dist/types/modes/controllers/command-controller.d.ts

@@ -31,9 +31,8 @@ export declare class CommandController {
     handlePythonCommand(code: string, excludeFromContext?: boolean): Promise<void>;
     handleCompactCommand(customInstructions?: string): Promise<CompactionOutcome>;
     /**
-     * TUI handler for `/shake`. `elide`/`images` are instant structural drops;
-     * `summary` runs the local on-device compressor behind a cancelable loader
-     * (Esc aborts via `abortCompaction`). Rebuilds the chat and reports counts.
+     * TUI handler for `/shake`. `elide` drops heavy structural content and
+     * `images` strips image blocks. Rebuilds the chat and reports counts.
      */
     handleShakeCommand(mode: ShakeMode): Promise<void>;
     handleSkillCommand(skillPath: string, args: string): Promise<void>;

package/dist/types/session/agent-session.d.ts

@@ -54,10 +54,10 @@ import { YieldQueue } from "./yield-queue";
 export type AgentSessionEvent = AgentEvent | {
     type: "auto_compaction_start";
     reason: "threshold" | "overflow" | "idle" | "incomplete";
-    action: "context-full" | "handoff" | "shake" | "shake-summary";
+    action: "context-full" | "handoff" | "shake";
 } | {
     type: "auto_compaction_end";
-    action: "context-full" | "handoff" | "shake" | "shake-summary";
+    action: "context-full" | "handoff" | "shake";
     result: CompactionResult | undefined;
     aborted: boolean;
     willRetry: boolean;
@@ -737,10 +737,6 @@ export declare class AgentSession {
      * - `images` delegates to {@link dropImages}.
      * - `elide` replaces whole tool-call results and large fenced/XML blocks
      *   with short placeholders that embed an `artifact://` recovery link.
-     * - `summary` extractively compresses the same regions with the configured
-     *   local on-device model (`providers.shakeSummaryModel`), falling back to
-     *   the elide placeholder per region (or wholesale when the local model is
-     *   unavailable). Never calls a remote/cloud LLM.
      *
      * Mutates the branch in place, persists via `rewriteEntries`, replays the
      * rebuilt context through the agent, and tears down provider sessions that

package/dist/types/session/shake-types.d.ts

@@ -5,13 +5,13 @@
  * an import cycle through the slash-command registry).
  */
 /** Mode selector for `AgentSession.shake`. */
-export type ShakeMode = "elide" | "summary" | "images";
+export type ShakeMode = "elide" | "images";
 /** Outcome of an `AgentSession.shake` run. */
 export interface ShakeResult {
     mode: ShakeMode;
-    /** Whole tool-call results dropped/compressed. */
+    /** Whole tool-call results dropped. */
     toolResultsDropped: number;
-    /** Large fenced/XML blocks dropped/compressed. */
+    /** Large fenced/XML blocks dropped. */
     blocksDropped: number;
     /** Image blocks removed (images mode only). */
     imagesDropped?: number;

package/dist/types/task/repair-args.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Repair double-encoded JSON string arguments for the task tool.
+ *
+ * Models occasionally JSON-escape a string value twice when emitting a
+ * `task` tool call, so a `context`/`assignment` that should read
+ *
+ *     # Role
+ *     You are a judge … "describe this" … return —
+ *
+ * arrives — after the one JSON decode the provider already applied — as the
+ * literal text
+ *
+ *     # Role\nYou are a judge … \"describe this\" … return \u2014
+ *
+ * i.e. every newline, quote, and unicode character is still backslash-escaped.
+ * The subagent then receives that garbled prompt, and the call preview renders
+ * one long blob with visible `\n` / `\"` / `\uXXXX`.
+ *
+ * The *whole-arguments* form of this quirk (the entire `arguments` blob is a
+ * JSON string) is already auto-corrected by the validator's JSON-string
+ * coercion. This module handles the *per-field* form, where the object parses
+ * fine but an individual string value is double-encoded — the validator never
+ * fires there because a double-encoded string is still a structurally valid
+ * string.
+ *
+ * This is deliberately scoped to the task tool's natural-language fields
+ * (`context`, `assignment`, `description`). It is NOT applied to code-bearing
+ * tools (write/edit/bash/search), where a backslash or quote is load-bearing
+ * and a false-positive unescape would silently corrupt a file or command.
+ */
+import type { TaskParams } from "./types";
+/**
+ * Return the once-unescaped string when `value` is uniformly double-encoded
+ * JSON (a well-formed JSON string body that decodes to a different string);
+ * otherwise return `value` unchanged.
+ *
+ * The `JSON.parse(\`"${value}"\`)` round-trip is the safety net: it only
+ * succeeds when *every* backslash begins a valid JSON escape and no bare
+ * double-quote exists — exactly the signature of double-encoding. Genuine
+ * prose with a Windows path (`C:\Users`), a regex (`\d+`), an embedded quote,
+ * or a real (already-decoded) newline makes the parse throw, so the value is
+ * returned untouched.
+ */
+export declare function repairDoubleEncodedJsonString(value: string): string;
+/**
+ * Repair double-encoded prose in task-tool params (`context` and each task's
+ * `assignment`/`description`). Returns the same reference when nothing changed
+ * so callers can cheaply skip work. Defensive against partially-streamed args
+ * (missing/undefined fields, partial task arrays) so it is safe on the render
+ * path as well as on execution.
+ */
+export declare function repairTaskParams(params: TaskParams): TaskParams;

package/dist/types/tiny/models.d.ts

@@ -113,20 +113,6 @@ export declare const TINY_MEMORY_MODEL_OPTIONS: ({
 })[];
 export declare function isTinyMemoryLocalModelKey(value: string): value is TinyMemoryLocalModelKey;
 export declare function getTinyMemoryModelSpec(key: TinyMemoryLocalModelKey): (typeof TINY_MEMORY_LOCAL_MODELS)[number];
-/**
- * Shake-summary models. Shake's `summary` mode (and the `shake-summary`
- * compaction strategy) compress heavy regions strictly on-device — there is no
- * online/remote option, so this registry reuses the local memory models only.
- */
-export declare const SHAKE_SUMMARY_MODEL_VALUES: readonly ["qwen3-1.7b", "gemma-3-1b", "qwen2.5-1.5b", "lfm2-1.2b"];
-export type ShakeSummaryModelKey = (typeof SHAKE_SUMMARY_MODEL_VALUES)[number];
-export declare const SHAKE_SUMMARY_MODEL_OPTIONS: {
-    value: "gemma-3-1b" | "lfm2-1.2b" | "qwen2.5-1.5b" | "qwen3-1.7b";
-    label: "Gemma 3 1B" | "LFM2 1.2B" | "Qwen2.5 1.5B" | "Qwen3 1.7B";
-    description: "Best consolidation/dedup; lighter footprint, but leaks small talk during extraction." | "Best extraction granularity (atomic facts); weaker consolidation." | "Fastest load; solid all-rounder, slightly noisier extraction labels." | "Recommended; most disciplined extraction (ignores chit-chat), good consolidation, about 1.1 GB cached.";
-}[];
-/** Default shake-summary local model when none is named. */
-export declare const DEFAULT_SHAKE_SUMMARY_MODEL_KEY: ShakeSummaryModelKey;
 /** Any local model key (title or memory), used by the shared inference worker. */
 export type TinyLocalModelKey = TinyTitleLocalModelKey | TinyMemoryLocalModelKey;
 /** Resolve a local model spec by key across both the title and memory registries. */

package/dist/types/tiny/title-client.d.ts

@@ -1,8 +1,14 @@
-import type { TinyTitleProgressEvent } from "./title-protocol";
+import type { Subprocess } from "bun";
+import type { TinyTitleProgressEvent, TinyTitleWorkerOutbound } from "./title-protocol";
 export interface TinyTitleDownloadOptions {
     signal?: AbortSignal;
     onProgress?: (event: TinyTitleProgressEvent) => void;
 }
+/**
+ * Hidden subcommand on the main CLI that boots the tiny-model worker in the
+ * spawned subprocess. Kept in sync with the dispatch in `cli.ts`.
+ */
+export declare const TINY_WORKER_ARG = "--tiny-worker";
 /**
  * Decide which `PI_TINY_DEVICE` / `PI_TINY_DTYPE` vars to overlay onto the worker
  * env. A present env var wins (left untouched); otherwise the mapped persisted
@@ -11,7 +17,26 @@ export interface TinyTitleDownloadOptions {
  * @internal
  */
 export declare function tinyWorkerEnvOverlay(env: Record<string, string | undefined>, deviceSetting: string | undefined, dtypeSetting: string | undefined): Record<string, string>;
-export declare function createTinyTitleWorker(): Worker;
+interface SpawnedSubprocess {
+    proc: Subprocess<"ignore", "inherit", "inherit">;
+    inbound: Set<(message: TinyTitleWorkerOutbound) => void>;
+    errors: Set<(error: Error) => void>;
+    /**
+     * Flipped to `true` by {@link wrapSubprocess}'s `terminate()` right
+     * before it SIGKILLs the child so `onExit` can distinguish the
+     * expected hard-kill from a crash/OOM/external signal. Only the
+     * latter is surfaced as a worker error.
+     */
+    intentionalExit: {
+        value: boolean;
+    };
+}
+/**
+ * Spawn the tiny-model worker as a subprocess. Exported for tests and the
+ * smoke probe; production callers go through {@link spawnTinyTitleWorker}
+ * which wraps the result in a {@link WorkerHandle}.
+ */
+export declare function createTinyTitleSubprocess(): SpawnedSubprocess;
 export declare class TinyTitleClient {
     #private;
     onProgress(listener: (event: TinyTitleProgressEvent) => void): () => void;
@@ -30,3 +55,4 @@ export declare function shutdownTinyTitleClient(): Promise<void>;
 export declare function smokeTestTinyTitleWorker({ timeoutMs, }?: {
     timeoutMs?: number;
 }): Promise<void>;
+export {};

package/dist/types/tiny/title-protocol.d.ts

@@ -30,16 +30,10 @@ export type TinyTitleWorkerInbound = {
     modelKey: TinyLocalModelKey;
     prompt: string;
     maxTokens?: number;
-    /** Optional assistant-turn prefix appended after the generation prompt to pin output format. */
-    prefill?: string;
-    /** Optional literal stop string; generation halts once it appears in the decoded tail. */
-    stop?: string;
 } | {
     type: "download";
     id: string;
     modelKey: TinyLocalModelKey;
-} | {
-    type: "close";
 };
 export type TinyTitleWorkerOutbound = {
     type: "pong";
@@ -68,11 +62,16 @@ export type TinyTitleWorkerOutbound = {
     level: "debug" | "warn" | "error";
     msg: string;
     meta?: Record<string, unknown>;
-} | {
-    type: "closed";
 };
+/**
+ * Wire transport between the parent (`TinyTitleClient`) and the tiny-model
+ * subprocess. The parent owns the subprocess lifecycle (graceful work, hard
+ * kill on shutdown); the protocol therefore carries no explicit close
+ * handshake — once the parent decides to terminate, it signals the OS to
+ * reap the child so `onnxruntime-node`'s NAPI finalizer never runs in any
+ * shared address space. See `title-client.ts` for the spawn/kill glue.
+ */
 export interface TinyTitleTransport {
     send(message: TinyTitleWorkerOutbound): void;
     onMessage(handler: (message: TinyTitleWorkerInbound) => void): () => void;
-    close(): void;
 }

package/dist/types/tools/find.d.ts

@@ -93,7 +93,7 @@ export declare class FindTool implements AgentTool<typeof findSchema, FindToolDe
     execute(_toolCallId: string, params: z.infer<typeof findSchema>, signal?: AbortSignal, onUpdate?: AgentToolUpdateCallback<FindToolDetails>, _context?: AgentToolContext): Promise<AgentToolResult<FindToolDetails>>;
 }
 interface FindRenderArgs {
-    paths?: string[];
+    paths?: string | string[];
     limit?: number;
 }
 export declare const findToolRenderer: {

package/dist/types/tools/path-utils.d.ts

@@ -1,3 +1,4 @@
+import { type LocalProtocolOptions } from "../internal-urls";
 export declare function expandTilde(filePath: string, home?: string): string;
 export declare function expandPath(filePath: string): string;
 /**
@@ -143,6 +144,12 @@ export interface ToolScopeOptions {
     surfaceExactFilePaths?: boolean;
     /** Extra hint appended to "Path not found" when stat fails and the user supplied multiple paths. */
     multipathStatHint?: string;
+    /** Calling session's settings — forwarded to the internal-URL router so caller-aware handlers (issue://, pr://) honor it. */
+    settings?: unknown;
+    /** Caller's abort signal — forwarded to the internal-URL router. */
+    signal?: AbortSignal;
+    /** Calling session's `local://` root mapping — pins resolutions to the calling session. */
+    localProtocolOptions?: LocalProtocolOptions;
 }
 export interface ToolScopeResolution {
     searchPath: string;

package/dist/types/tui/output-block.d.ts

@@ -20,14 +20,14 @@ export interface OutputBlockOptions {
  */
 export declare function borderShimmerTick(): number;
 /**
- * Perimeter index of the moving segment's head for a box of inner width `W` and
- * height `H` at time `now`. The lap is split across the four edges in proportion
- * to their length (so the average speed is uniform) and each edge is eased, for a
- * deliberate, non-linear glide that slows at every corner. Position is derived
- * from the wall clock against a fixed lap duration, so a perimeter change (new
- * row / resize) shifts the head by at most a cell or two — no reset.
+ * Column of the travelling segment's center on the bottom edge for a box of
+ * inner width `W` at time `now`. The segment bounces left → right → left across
+ * the bottom border: a triangle wave over one full there-and-back cycle, eased
+ * per leg so it slows as it nears each wall before reversing. Position is
+ * derived from the wall clock against a fixed cycle, so a resize shifts the
+ * center proportionally — no reset.
  */
-export declare function borderSegmentHead(W: number, H: number, now: number): number;
+export declare function borderSegmentHeadCol(W: number, now: number): number;
 export declare function renderOutputBlock(options: OutputBlockOptions, theme: Theme): string[];
 /**
  * Cached wrapper around `renderOutputBlock`.

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@oh-my-pi/pi-coding-agent",
-	"version": "15.7.3",
+	"version": "15.7.5",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://omp.sh",
 	"author": "Can Boluk",
@@ -47,14 +47,14 @@
 		"@agentclientprotocol/sdk": "0.22.1",
 		"@babel/parser": "^7.29.7",
 		"@mozilla/readability": "^0.6.0",
-		"@oh-my-pi/hashline": "15.7.3",
-		"@oh-my-pi/omp-stats": "15.7.3",
-		"@oh-my-pi/pi-agent-core": "15.7.3",
-		"@oh-my-pi/pi-ai": "15.7.3",
-		"@oh-my-pi/pi-mnemopi": "15.7.3",
-		"@oh-my-pi/pi-natives": "15.7.3",
-		"@oh-my-pi/pi-tui": "15.7.3",
-		"@oh-my-pi/pi-utils": "15.7.3",
+		"@oh-my-pi/hashline": "15.7.5",
+		"@oh-my-pi/omp-stats": "15.7.5",
+		"@oh-my-pi/pi-agent-core": "15.7.5",
+		"@oh-my-pi/pi-ai": "15.7.5",
+		"@oh-my-pi/pi-mnemopi": "15.7.5",
+		"@oh-my-pi/pi-natives": "15.7.5",
+		"@oh-my-pi/pi-tui": "15.7.5",
+		"@oh-my-pi/pi-utils": "15.7.5",
 		"@puppeteer/browsers": "^3.0.4",
 		"@types/turndown": "5.0.6",
 		"@xterm/headless": "^6.0.0",

package/scripts/build-binary.ts

@@ -56,7 +56,6 @@ async function main(): Promise<void> {
 					"../stats/src/sync-worker.ts",
 					"./src/tools/browser/tab-worker-entry.ts",
 					"./src/eval/js/worker-entry.ts",
-					"./src/tiny/worker.ts",
 					// Legacy pi-* extension compat entrypoints served by
 					// `legacy-pi-compat.ts`. These are reached via computed bunfs paths
 					// (which `--compile`'s static analyzer cannot trace), so each must be

package/src/cli.ts

@@ -1,4 +1,15 @@
 #!/usr/bin/env bun
+// Strip macOS malloc-stack-logging vars in the parent entrypoint, before any
+// subprocess/worker spawn. libmalloc reads MallocStackLogging /
+// MallocStackLoggingNoCompact during malloc bootstrap (pre-main) in every child
+// and warns when they're present but set to "off"; a child cannot suppress its
+// own warning, so the only fix is to keep them out of the inherited env here.
+// (They must be unset, not set — presence is the trigger.)
+try {
+	delete process.env.MallocStackLogging;
+	delete process.env.MallocStackLoggingNoCompact;
+} catch {}
+
 /**
  * CLI entry point — registers all commands explicitly and delegates to the
  * lightweight CLI runner from pi-utils.
@@ -43,12 +54,60 @@ async function runSmokeTest(): Promise<void> {
 	process.stdout.write("smoke-test: ok\n");
 }
 
+/**
+ * Hidden subcommand that boots the tiny-model worker inside this process
+ * over the parent's IPC channel. The agent's main process spawns the same
+ * binary with this flag so `onnxruntime-node` (loaded transitively by
+ * `@huggingface/transformers`) lives in a child address space. The parent
+ * `SIGKILL`s the child on shutdown so the NAPI finalizer never runs in
+ * either process — that finalizer segfaults Bun on Windows (issue #1606).
+ */
+async function runTinyWorker(): Promise<void> {
+	const { startTinyTitleWorker } = await import("./tiny/worker");
+	const { promise: shuttingDown, resolve: shutdown } = Promise.withResolvers<void>();
+	const send = (message: unknown): void => {
+		// `process.send` only exists when spawned with an IPC channel; the
+		// parent always spawns us that way. If it's missing, the parent
+		// vanished and there's no one to talk to.
+		const sender = (process as NodeJS.Process & { send?: (m: unknown) => boolean }).send;
+		if (!sender) {
+			shutdown();
+			return;
+		}
+		try {
+			sender.call(process, message);
+		} catch {
+			shutdown();
+		}
+	};
+	startTinyTitleWorker({
+		send,
+		onMessage(handler) {
+			const wrap = (data: unknown): void => handler(data as never);
+			process.on("message", wrap);
+			return () => {
+				process.off("message", wrap);
+			};
+		},
+	});
+	// Parent went away (crashed, SIGKILL, etc.) — commit suicide so we don't
+	// linger as an orphan. SIGKILL via `process.kill` keeps us symmetrical
+	// with the parent's hard-kill on shutdown: skip every JS/native finalizer.
+	process.on("disconnect", () => shutdown());
+	await shuttingDown;
+	process.kill(process.pid, "SIGKILL");
+}
+
 /** Run the CLI with the given argv (no `process.argv` prefix). */
 export async function runCli(argv: string[]): Promise<void> {
 	if (argv[0] === "--smoke-test") {
 		await runSmokeTest();
 		return;
 	}
+	if (argv[0] === "--tiny-worker") {
+		await runTinyWorker();
+		return;
+	}
 	// --help and --version are handled by run() directly, don't rewrite those.
 	// Everything else that isn't a known subcommand routes to "launch".
 	const first = argv[0];