@oh-my-pi/pi-coding-agent 15.9.3 → 15.9.5

package/CHANGELOG.md

@@ -2,6 +2,44 @@
 
 ## [Unreleased]
 
+## [15.9.5] - 2026-06-05
+### Added
+
+- Added a persistent error banner pinned above the editor when an assistant turn ends on a provider error (e.g. Anthropic's "Output blocked by content filtering policy"). The transcript `Error: …` line scrolls away as the conversation grows, so terminal turns that ended on a stream error could pass unnoticed; the banner stays in the fixed region above the input and is cleared when the next turn starts.
+
+- Added bold, underlined, clickable `[Image #N]` placeholders in the draft editor and sent user-message bubbles, backed by extension-bearing blob-store sidecar files so terminal `file://` links open in image viewers.
+- Added the active model identifier (`provider/id`) to the system prompt's `<workstation>` block so the agent knows which model it is running as. Gated by the new `includeModelInPrompt` setting (default on); the base prompt is rebuilt on a mid-session model switch so the surfaced identifier stays current.
+- Added `OLLAMA_HOST` support for implicit local Ollama discovery when `OLLAMA_BASE_URL` is unset, so OMP picks up the same host setting used by Ollama.
+- Added `OLLAMA_CONTEXT_LENGTH` as a positive-integer context-window override for implicit local Ollama discovery, so users can correct OMP context budgeting without writing per-model overrides.
+
+### Changed
+
+- Changed `tools.discoveryMode` to default to `auto`, which keeps discovery off for small tool sets and automatically switches to MCP-only tool discovery when more than 40 tools are registered.
+
+### Fixed
+
+- Fixed user-message rendering to materialize image links from embedded image blocks when rebuilding chat output, so image placeholders remain clickable after replayed or restored messages
+- Fixed queued/steering user messages carrying a pasted image rendering out of order — sometimes dropping the user bubble *below* the very tool output it was sent to steer. `EventController.#handleMessageStart` awaited async image-link materialization between the user `message_start` and `addMessageToChat`; since `AgentSession.#emit` dispatches TUI listeners fire-and-forget, that mid-handler yield let the next synchronously-handled events (assistant `message_start`, tool execution start/end) append their components first, scrambling transcript order and live-region block boundaries. The bubble is now appended synchronously, with clickable image links still materialized via the synchronous blob-store fallback.
+- Fixed tool execution cards to finalize promptly when a turn is abandoned or completed so stale streaming previews and frozen spinner frames no longer keep transcript rows in the live region
+- Fixed `read` and `search` TUI rendering to emit OSC 8 hyperlinks for HTTP URLs, `local://` resources backed by files, and filesystem search targets, including line-specific links for search match rows.
+- Fixed aborted streaming assistant messages staying frozen before their red "Operation aborted" label when status rows were appended underneath on ED3-risk terminals.
+- Fixed `omp` / `omp -c` stacking a fresh welcome screen and transcript on top of the previous run's leftover terminal scrollback. The cold-launch transcript render was the only session-load path that did not pass `clearTerminalHistory`, so the TUI's scrollback-preserving initial paint left the prior run's welcome + conversation above the new one; the cold launch now clears native scrollback before painting, matching every in-process session switch.
+- Fixed a long streamed assistant reply dropping its earlier lines on ED3-risk terminals (Ghostty/kitty/iTerm2) once it grew past the viewport — the head scrolled off the top and never reached scrollback, so the reply rendered as a ~viewport-tall circular buffer of only its latest lines. `AssistantMessageComponent` now reports itself as an append-only transcript block and `TranscriptContainer` surfaces the resulting commit-safe boundary, so the renderer commits the scrolled-off head to native scrollback instead of discarding it (volatile tool previews stay deferred as before).
+
+### Security
+
+- Blocked OSC 8 hyperlink wrapping for URI targets containing terminal control bytes to avoid rendering malformed control-sequence links
+
+## [15.9.4] - 2026-06-05
+### Fixed
+
+- Fixed chat transcript updates after submitting input so frozen scrollback is only thawed when native scrollback replay succeeds, preventing misplaced or duplicated rows when the viewport is not at the tail
+- Fixed `read` of `.zip` archives to list the central directory without inflating every member, so large or corrupt zip payloads no longer freeze directory reads; member contents are inflated only when a specific entry is read.
+- Fixed the Python `eval` kernel being hard-killed (and its persistent session state lost) when a cell blocked in `parallel()` / `agent()` was interrupted. Each `agent()`/`tool.*` call blocks a kernel worker thread in a synchronous `urllib` request to the host bridge, and `parallel()`'s `ThreadPoolExecutor` exit joins those threads — so the kernel cannot unwind a `KeyboardInterrupt` until every in-flight bridge call returns. A wide subagent fan-out's teardown routinely outlasted the kernel's 5s SIGINT-escalation window, so the kernel was force-killed (surfacing `[kernel] Python kernel shutdown`) while the subagents were still winding down. The host bridge now resolves an in-flight call the instant the cell's signal aborts, so the kernel unwinds cleanly and keeps its state; the already-signaled subagent continues tearing down in the background.
+- Fixed `github` tool `run_watch` op ignoring the explicit `repo` argument and silently watching the cwd-inferred repository in nested/umbrella workspaces. `executeRunWatch` passed `undefined` for the user-supplied `repo` to `resolveGitHubRepo`, so a call like `{op: "run_watch", repo: "owner/cxf", branch: "main"}` fell back to `gh repo view` in cwd and streamed `watching <sha> on <cwd-repo>` against the wrong repository. The explicit `repo` now takes precedence over the cwd inference, and the no-`branch`/no-`run` path refuses to derive the watched commit from `git HEAD` unless the cwd actually points at the resolved repo — otherwise it raises a `ToolError` telling the caller to pass `branch` or `run` instead of silently rebinding to an unrelated commit ([#1949](https://github.com/can1357/oh-my-pi/issues/1949)).
+- Fixed `omp plugin install <local-path>` failing with `Invalid package name: .` (and similar) for cwd-relative (`.`, `./pkg`), absolute (`/abs`, `C:\…`, `\\unc`), and tilde-prefixed (`~/pkg`) specs. `classifyInstallTarget` now returns a `local` arm in addition to `marketplace`/`npm`, and `plugin install` routes those specs to `PluginManager.link()` — the same code path as `omp plugin link`. ([#1945](https://github.com/can1357/oh-my-pi/issues/1945))
+- Fixed the `web_search` result renderer capping the synthesized answer at 12 lines even when expanded, while the Sources list expanded in full — so a long answer stayed truncated ("… N more lines") after `Ctrl+O`, making the expand toggle look like a no-op and dwarfing the answer next to its sources. The answer now renders the full text (markdown-formatted) when expanded and a short markdown preview when collapsed, matching the sources' collapse/expand behavior. The answer is also rendered through the Markdown component instead of dimmed raw lines, so headings, bold, lists, and code in the answer display formatted.
+
 ## [15.9.3] - 2026-06-05
 
 ### Fixed
@@ -9361,4 +9399,4 @@ Initial public release.
 - Git branch display in footer
 - Message queueing during streaming responses
 - OAuth integration for Gmail and Google Calendar access
-- HTML export with syntax highlighting and collapsible sections
+- HTML export with syntax highlighting and collapsible sections

package/dist/types/cli/classify-install-target.d.ts

@@ -1,4 +1,7 @@
-export declare function classifyInstallTarget(spec: string, knownMarketplaces: Set<string>): {
+export type ClassifiedInstallTarget = {
+    type: "local";
+    path: string;
+} | {
     type: "marketplace";
     name: string;
     marketplace: string;
@@ -6,3 +9,4 @@ export declare function classifyInstallTarget(spec: string, knownMarketplaces: S
     type: "npm";
     spec: string;
 };
+export declare function classifyInstallTarget(spec: string, knownMarketplaces: Set<string>): ClassifiedInstallTarget;

package/dist/types/config/settings-schema.d.ts

@@ -659,7 +659,7 @@ export declare const SETTINGS_SCHEMA: {
         readonly ui: {
             readonly tab: "appearance";
             readonly label: "Terminal Hyperlinks";
-            readonly description: "Wrap file paths in OSC 8 hyperlinks for terminal-native click-to-open (auto: detect support; off: never; always: unconditional)";
+            readonly description: "Wrap paths and URLs in OSC 8 hyperlinks for terminal-native click-to-open (auto: detect support; off: never; always: unconditional)";
         };
     };
     readonly "display.tabWidth": {
@@ -745,6 +745,15 @@ export declare const SETTINGS_SCHEMA: {
             readonly description: "Render full tool descriptions in the system prompt instead of a tool name list";
         };
     };
+    readonly includeModelInPrompt: {
+        readonly type: "boolean";
+        readonly default: true;
+        readonly ui: {
+            readonly tab: "model";
+            readonly label: "Include Model In Prompt";
+            readonly description: "Surface the active model identifier in the system prompt so the agent knows which model it is";
+        };
+    };
     readonly temperature: {
         readonly type: "number";
         readonly default: -1;
@@ -2828,12 +2837,12 @@ export declare const SETTINGS_SCHEMA: {
     };
     readonly "tools.discoveryMode": {
         readonly type: "enum";
-        readonly values: readonly ["off", "mcp-only", "all"];
-        readonly default: "off";
+        readonly values: readonly ["auto", "off", "mcp-only", "all"];
+        readonly default: "auto";
         readonly ui: {
             readonly tab: "tools";
             readonly label: "Tool Discovery";
-            readonly description: "Hide tools behind a search tool to save tokens. 'mcp-only' hides MCP tools; 'all' hides all non-essential built-ins too.";
+            readonly description: "Hide tools behind a search tool to save tokens. 'auto' hides MCP tools once the tool set has more than 40 tools; 'mcp-only' always hides MCP tools; 'all' hides all non-essential built-ins too.";
         };
     };
     readonly "tools.essentialOverride": {

package/dist/types/modes/components/assistant-message.d.ts

@@ -13,6 +13,17 @@ export declare class AssistantMessageComponent extends Container {
     constructor(message?: AssistantMessage, hideThinkingBlock?: boolean, onImageUpdate?: (() => void) | undefined, thinkingRenderers?: readonly AssistantThinkingRenderer[], imageBudget?: ImageBudget | undefined);
     invalidate(): void;
     setHideThinkingBlock(hide: boolean): void;
+    isTranscriptBlockFinalized(): boolean;
+    /**
+     * Assistant text/thinking streams in append-only: earlier rendered rows never
+     * re-layout, new content only grows the block at the bottom. The transcript
+     * reports this so the renderer may commit scrolled-off head rows of a long
+     * streamed reply to native scrollback instead of dropping them (see
+     * `NativeScrollbackLiveRegion#getNativeScrollbackCommitSafeEnd`). Volatile
+     * blocks (tool previews that collapse) intentionally do not implement this.
+     */
+    isTranscriptBlockAppendOnly(): boolean;
+    markTranscriptBlockFinalized(): void;
     setToolResultImages(toolCallId: string, images: ImageContent[]): void;
     setUsageInfo(usage: Usage): void;
     updateContent(message: AssistantMessage): void;

package/dist/types/modes/components/custom-editor.d.ts

@@ -6,8 +6,10 @@ type ConfigurableEditorAction = Extract<AppKeybinding, "app.interrupt" | "app.cl
  */
 export declare class CustomEditor extends Editor {
     #private;
+    imageLinks?: readonly (string | undefined)[];
     /** Gradient-highlight the "ultrathink" / "orchestrate" / "workflow" keywords as the user types
-     *  them, skipping any occurrence inside code spans, fenced blocks, or XML sections. */
+     *  them, skipping any occurrence inside code spans, fenced blocks, or XML sections. Also make
+     *  pasted image placeholders visually distinct and hyperlink them once their blob file exists. */
     decorateText: (text: string) => string;
     onEscape?: () => void;
     onClear?: () => void;

package/dist/types/modes/components/error-banner.d.ts

@@ -0,0 +1,11 @@
+import { Container } from "@oh-my-pi/pi-tui";
+/**
+ * A persistent error banner pinned above the editor. Unlike the transcript
+ * "Error: …" line (which scrolls away as the conversation grows), this stays in
+ * the fixed region directly above the input so a turn that ended on a provider
+ * error — e.g. Anthropic's "Output blocked by content filtering policy" — cannot
+ * be missed. It is cleared when the next turn starts.
+ */
+export declare class ErrorBannerComponent extends Container {
+    constructor(message: string);
+}

package/dist/types/modes/components/tool-execution.d.ts

@@ -52,6 +52,21 @@ export declare class ToolExecutionComponent extends Container {
         details?: any;
         isError?: boolean;
     }, isPartial?: boolean, _toolCallId?: string): void;
+    /**
+     * Whether this block has reached a terminal state for transcript freezing.
+     * Reports `false` while it can still visually change so the
+     * {@link TranscriptContainer} keeps it inside the repaintable live region:
+     * a foreground tool awaiting its result, or one streaming partial output.
+     * A final (non-partial) result, a background-async tool the agent has moved
+     * past, or an explicit {@link seal} flips it to `true`.
+     */
+    isTranscriptBlockFinalized(): boolean;
+    /**
+     * Mark the tool terminal even though no result arrived (the turn aborted or
+     * abandoned it) and stop animating, so it can freeze and stops pinning the
+     * transcript live region.
+     */
+    seal(): void;
     /**
      * Stop spinner animation and cleanup resources.
      */

package/dist/types/modes/components/transcript-container.d.ts

@@ -26,6 +26,7 @@ export declare class TranscriptContainer extends Container implements NativeScro
     invalidate(): void;
     clear(): void;
     getNativeScrollbackLiveRegionStart(): number | undefined;
+    getNativeScrollbackCommitSafeEnd(): number | undefined;
     /**
      * Retire all frozen snapshots so the next render reflects each block's current
      * state. Call at reconciliation checkpoints (prompt submit) where the whole

package/dist/types/modes/components/user-message.d.ts

@@ -3,6 +3,6 @@ import { Container } from "@oh-my-pi/pi-tui";
  * Component that renders a user message
  */
 export declare class UserMessageComponent extends Container {
-    constructor(text: string, synthetic?: boolean);
+    constructor(text: string, synthetic?: boolean, imageLinks?: readonly (string | undefined)[]);
     render(width: number): string[];
 }

package/dist/types/modes/image-references.d.ts

@@ -0,0 +1,17 @@
+import type { ImageContent } from "@oh-my-pi/pi-ai";
+import { type BlobPutResult } from "../session/blob-store";
+type ImageBlobWriter = (data: Buffer, options?: {
+    extension?: string;
+}) => Promise<BlobPutResult>;
+type ImageBlobWriterSync = (data: Buffer, options?: {
+    extension?: string;
+}) => BlobPutResult;
+export interface ImageReferenceRenderers {
+    renderText: (text: string) => string;
+    renderReference: (label: string, index: number) => string;
+}
+export declare function renderImageReferences(text: string, renderers: ImageReferenceRenderers): string;
+export declare function imageReferenceHyperlink(label: string, index: number, imageLinks: readonly (string | undefined)[] | undefined, renderLabel: (text: string) => string): string;
+export declare function materializeImageReferenceLinks(images: readonly ImageContent[] | undefined, putBlob: ImageBlobWriter): Promise<(string | undefined)[] | undefined>;
+export declare function materializeImageReferenceLinksSync(images: readonly ImageContent[] | undefined, putBlob: ImageBlobWriterSync): (string | undefined)[] | undefined;
+export {};

package/dist/types/modes/interactive-mode.d.ts

@@ -56,6 +56,7 @@ export declare class InteractiveMode implements InteractiveModeContext {
     todoContainer: Container;
     btwContainer: Container;
     omfgContainer: Container;
+    errorBannerContainer: Container;
     editor: CustomEditor;
     editorContainer: Container;
     hookWidgetContainerAbove: Container;
@@ -77,6 +78,7 @@ export declare class InteractiveMode implements InteractiveModeContext {
     todoPhases: TodoPhase[];
     hideThinkingBlock: boolean;
     pendingImages: ImageContent[];
+    pendingImageLinks: (string | undefined)[];
     compactionQueuedMessages: CompactionQueuedMessage[];
     pendingTools: Map<string, ToolExecutionHandle>;
     pendingBashComponents: BashExecutionComponent[];
@@ -136,6 +138,7 @@ export declare class InteractiveMode implements InteractiveModeContext {
     startPendingSubmission(input: {
         text: string;
         images?: ImageContent[];
+        imageLinks?: (string | undefined)[];
         customType?: string;
         display?: boolean;
     }): SubmittedUserInput;
@@ -162,6 +165,8 @@ export declare class InteractiveMode implements InteractiveModeContext {
         dim?: boolean;
     }): void;
     showError(message: string): void;
+    showPinnedError(message: string): void;
+    clearPinnedError(): void;
     showWarning(message: string): void;
     ensureLoadingAnimation(): void;
     setWorkingMessage(message?: string): void;
@@ -177,6 +182,7 @@ export declare class InteractiveMode implements InteractiveModeContext {
     isKnownSlashCommand(text: string): boolean;
     addMessageToChat(message: AgentMessage, options?: {
         populateHistory?: boolean;
+        imageLinks?: readonly (string | undefined)[];
     }): Component[];
     renderSessionContext(sessionContext: SessionContext, options?: {
         updateFooter?: boolean;
@@ -184,6 +190,7 @@ export declare class InteractiveMode implements InteractiveModeContext {
     }): void;
     renderInitialMessages(prebuiltContext?: SessionContext, options?: {
         preserveExistingChat?: boolean;
+        clearTerminalHistory?: boolean;
     }): void;
     getUserMessageText(message: Message): string;
     findLastAssistantMessage(): AssistantMessage | undefined;

package/dist/types/modes/types.d.ts

@@ -32,6 +32,7 @@ export type CompactionQueuedMessage = {
 export type SubmittedUserInput = {
     text: string;
     images?: ImageContent[];
+    imageLinks?: (string | undefined)[];
     customType?: string;
     display?: boolean;
     cancelled: boolean;
@@ -60,6 +61,7 @@ export interface InteractiveModeContext {
     todoContainer: Container;
     btwContainer: Container;
     omfgContainer: Container;
+    errorBannerContainer: Container;
     editor: CustomEditor;
     editorContainer: Container;
     hookWidgetContainerAbove: Container;
@@ -87,6 +89,7 @@ export interface InteractiveModeContext {
     planModePlanFilePath?: string;
     hideThinkingBlock: boolean;
     pendingImages: ImageContent[];
+    pendingImageLinks: (string | undefined)[];
     compactionQueuedMessages: CompactionQueuedMessage[];
     pendingTools: Map<string, ToolExecutionHandle>;
     pendingBashComponents: BashExecutionComponent[];
@@ -130,6 +133,8 @@ export interface InteractiveModeContext {
         dim?: boolean;
     }): void;
     showError(message: string): void;
+    showPinnedError(message: string): void;
+    clearPinnedError(): void;
     showWarning(message: string): void;
     showNewVersionNotification(newVersion: string): void;
     clearEditor(): void;
@@ -146,6 +151,7 @@ export interface InteractiveModeContext {
     startPendingSubmission(input: {
         text: string;
         images?: ImageContent[];
+        imageLinks?: (string | undefined)[];
         customType?: string;
         display?: boolean;
     }): SubmittedUserInput;
@@ -170,6 +176,7 @@ export interface InteractiveModeContext {
     isKnownSlashCommand(text: string): boolean;
     addMessageToChat(message: AgentMessage, options?: {
         populateHistory?: boolean;
+        imageLinks?: readonly (string | undefined)[];
     }): Component[];
     renderSessionContext(sessionContext: SessionContext, options?: {
         updateFooter?: boolean;

package/dist/types/modes/utils/ui-helpers.d.ts

@@ -24,6 +24,7 @@ export declare class UiHelpers {
     }): void;
     addMessageToChat(message: AgentMessage, options?: {
         populateHistory?: boolean;
+        imageLinks?: readonly (string | undefined)[];
     }): Component[];
     /**
      * Render session context to chat. Used for initial load and rebuild after compaction.

package/dist/types/session/blob-store.d.ts

@@ -1,15 +1,16 @@
+export interface BlobPutOptions {
+    /** Optional file extension for a sidecar hardlink/copy that OS openers can type-detect. */
+    extension?: string;
+}
 export interface BlobPutResult {
     hash: string;
+    /** Canonical content-addressed path, always `<dir>/<sha256-hex>`. */
     path: string;
+    /** Path with the requested extension when supplied, otherwise the canonical path. */
+    displayPath: string;
     get ref(): string;
 }
-/**
- * Content-addressed blob store for externalizing large binary data (images) from session JSONL files.
- *
- * Files are stored at `<dir>/<sha256-hex>` with no extension. The SHA-256 hash is computed
- * over the raw binary data (not base64). Content-addressing makes writes idempotent and
- * provides automatic deduplication across sessions.
- */
+export declare function blobExtensionForImageMimeType(mimeType: string | undefined): string | undefined;
 export declare class BlobStore {
     readonly dir: string;
     constructor(dir: string);
@@ -17,13 +18,13 @@ export declare class BlobStore {
      * Write binary data to the blob store.
      * @returns SHA-256 hex hash of the data
      */
-    put(data: Buffer): Promise<BlobPutResult>;
+    put(data: Buffer, options?: BlobPutOptions): Promise<BlobPutResult>;
     /**
      * Synchronous variant of {@link put}. Use on persistence hot paths where the caller
      * cannot afford the microtask hops of the async version (e.g. OOM-safe session writes).
      * Returns once the bytes are in the kernel page cache.
      */
-    putSync(data: Buffer): BlobPutResult;
+    putSync(data: Buffer, options?: BlobPutOptions): BlobPutResult;
     /** Read blob by hash, returns Buffer or null if not found. */
     get(hash: string): Promise<Buffer | null>;
     /** Check if a blob exists. */
@@ -46,9 +47,9 @@ export declare function externalizeImageDataUrlSync(blobStore: BlobStore, dataUr
  * Externalize an image's base64 data to the blob store, returning a blob reference.
  * If the data is already a blob reference, returns it unchanged.
  */
-export declare function externalizeImageData(blobStore: BlobStore, base64Data: string): Promise<string>;
+export declare function externalizeImageData(blobStore: BlobStore, base64Data: string, mimeType?: string): Promise<string>;
 /** Synchronous variant of {@link externalizeImageData}. */
-export declare function externalizeImageDataSync(blobStore: BlobStore, base64Data: string): string;
+export declare function externalizeImageDataSync(blobStore: BlobStore, base64Data: string, mimeType?: string): string;
 /**
  * Resolve an externalized provider image data URL back to its original string.
  * If the data is not a blob reference, returns it unchanged.

package/dist/types/session/session-manager.d.ts

@@ -1,7 +1,7 @@
 import type { AgentMessage } from "@oh-my-pi/pi-agent-core";
 import type { ImageContent, Message, MessageAttribution, ServiceTier, TextContent } from "@oh-my-pi/pi-ai";
 import { ArtifactManager } from "./artifacts";
-import { type BlobPutResult } from "./blob-store";
+import { type BlobPutOptions, type BlobPutResult } from "./blob-store";
 import { type BashExecutionMessage, type CustomMessage, type FileMentionMessage, type HookMessage, type PythonExecutionMessage } from "./messages";
 import type { SessionStorage } from "./session-storage";
 export declare const CURRENT_SESSION_VERSION = 3;
@@ -208,7 +208,7 @@ export interface SessionInfo {
      */
     status?: SessionStatus;
 }
-export type ReadonlySessionManager = Pick<SessionManager, "getCwd" | "getSessionDir" | "getSessionId" | "getSessionFile" | "getSessionName" | "getArtifactsDir" | "getArtifactManager" | "allocateArtifactPath" | "saveArtifact" | "getArtifactPath" | "getLeafId" | "getLeafEntry" | "getEntry" | "getLabel" | "getBranch" | "getHeader" | "getEntries" | "getTree" | "getUsageStatistics" | "putBlob">;
+export type ReadonlySessionManager = Pick<SessionManager, "getCwd" | "getSessionDir" | "getSessionId" | "getSessionFile" | "getSessionName" | "getArtifactsDir" | "getArtifactManager" | "allocateArtifactPath" | "saveArtifact" | "getArtifactPath" | "getLeafId" | "getLeafEntry" | "getEntry" | "getLabel" | "getBranch" | "getHeader" | "getEntries" | "getTree" | "getUsageStatistics" | "putBlob" | "putBlobSync">;
 /** Exported for testing */
 export declare function migrateSessionEntries(entries: FileEntry[]): void;
 /** Exported for compaction.test.ts */
@@ -294,7 +294,9 @@ export declare class SessionManager {
     private readonly storage;
     private constructor();
     /** Puts a binary blob into the blob store and returns the blob reference */
-    putBlob(data: Buffer): Promise<BlobPutResult>;
+    putBlob(data: Buffer, options?: BlobPutOptions): Promise<BlobPutResult>;
+    /** Synchronous variant of {@link putBlob} for rebuild-only render paths. */
+    putBlobSync(data: Buffer, options?: BlobPutOptions): BlobPutResult;
     captureState(): SessionManagerStateSnapshot;
     restoreState(snapshot: SessionManagerStateSnapshot): void;
     /** Switch to a different session file (used for resume and branching) */

package/dist/types/system-prompt.d.ts

@@ -84,6 +84,8 @@ export interface BuildSystemPromptOptions {
     workspaceTree?: WorkspaceTree | Promise<WorkspaceTree>;
     /** Whether the local memory://root summary is active. */
     memoryRootEnabled?: boolean;
+    /** Active model identifier (e.g. "anthropic/claude-opus-4") surfaced to the agent. */
+    model?: string;
 }
 /** Result of building provider-facing system prompt messages. */
 export interface BuildSystemPromptResult {

package/dist/types/tiny/title-client.d.ts

@@ -1,5 +1,19 @@
 import type { Subprocess } from "bun";
-import type { TinyTitleProgressEvent, TinyTitleWorkerOutbound } from "./title-protocol";
+import type { TinyTitleProgressEvent, TinyTitleWorkerInbound, TinyTitleWorkerOutbound } from "./title-protocol";
+/**
+ * Abstraction over the tiny-model subprocess. Modelled as a worker interface
+ * so existing callers (titles, memory completions, downloads) compose the
+ * same way; the runtime implementation is a Bun child process so
+ * `onnxruntime-node`'s NAPI finalizer never runs inside the main agent
+ * address space — that destructor segfaults Bun on Windows during shutdown
+ * (issue #1606).
+ */
+interface WorkerHandle {
+    send(message: TinyTitleWorkerInbound): void;
+    onMessage(handler: (message: TinyTitleWorkerOutbound) => void): () => void;
+    onError(handler: (error: Error) => void): () => void;
+    terminate(): Promise<void>;
+}
 export interface TinyTitleDownloadOptions {
     signal?: AbortSignal;
     onProgress?: (event: TinyTitleProgressEvent) => void;
@@ -39,6 +53,7 @@ interface SpawnedSubprocess {
 export declare function createTinyTitleSubprocess(): SpawnedSubprocess;
 export declare class TinyTitleClient {
     #private;
+    constructor(spawnWorker?: () => WorkerHandle);
     onProgress(listener: (event: TinyTitleProgressEvent) => void): () => void;
     generate(modelKey: string, message: string, signal?: AbortSignal): Promise<string | null>;
     complete(modelKey: string, prompt: string, options?: {

package/dist/types/tool-discovery/mode.d.ts

@@ -0,0 +1,8 @@
+import type { Settings } from "../config/settings";
+import type { SettingValue } from "../config/settings-schema";
+export declare const TOOL_DISCOVERY_AUTO_THRESHOLD = 40;
+export declare const TOOL_DISCOVERY_SEARCH_TOOL_NAME = "search_tool_bm25";
+export type ToolDiscoveryModeSetting = SettingValue<"tools.discoveryMode">;
+export type EffectiveToolDiscoveryMode = Exclude<ToolDiscoveryModeSetting, "auto">;
+export declare function countToolsForAutoDiscovery(toolNames: Iterable<string>): number;
+export declare function resolveEffectiveToolDiscoveryMode(settings: Settings, toolCount: number): EffectiveToolDiscoveryMode;

package/dist/types/tools/archive-reader.d.ts

@@ -21,7 +21,11 @@ interface TarStorage {
 }
 interface ZipStorage {
     type: "zip";
-    bytes: Uint8Array;
+    archivePath: string;
+    compressedSize: number;
+    compression: number;
+    flags: number;
+    localHeaderOffset: number;
 }
 type EntryStorage = TarStorage | ZipStorage;
 interface ArchiveIndexEntry extends ArchiveNode {

package/dist/types/tui/hyperlink.d.ts

@@ -7,6 +7,18 @@
  * - `"always"`: unconditionally (useful for viewers that support OSC 8 without advertising it)
  */
 export declare function isHyperlinkEnabled(): boolean;
+/**
+ * Wrap `displayText` in an OSC 8 hyperlink pointing at `uri`.
+ *
+ * Returns `displayText` unchanged when hyperlinks are disabled, `uri` contains
+ * terminal control bytes, or `displayText` already contains an OSC 8 sequence.
+ */
+export declare function uriHyperlink(uri: string, displayText: string): string;
+/**
+ * Wrap `displayText` in an OSC 8 hyperlink pointing at an HTTP(S) URL.
+ * `www.example.com` inputs are linked as `https://www.example.com`.
+ */
+export declare function urlHyperlink(url: string, displayText: string): string;
 /**
  * Wrap `displayText` in an OSC 8 hyperlink pointing at the given absolute file path.
  *

package/dist/types/web/search/render.d.ts

@@ -5,7 +5,7 @@
  */
 import type { Component } from "@oh-my-pi/pi-tui";
 import type { RenderResultOptions } from "../../extensibility/custom-tools/types";
-import type { Theme } from "../../modes/theme/theme";
+import { type Theme } from "../../modes/theme/theme";
 import type { SearchResponse } from "./types";
 export interface SearchRenderDetails {
     response: SearchResponse;
@@ -20,7 +20,6 @@ export declare function renderSearchResult(result: {
     details?: SearchRenderDetails;
 }, options: RenderResultOptions, theme: Theme, args?: {
     query?: string;
-    allowLongAnswer?: boolean;
     maxAnswerLines?: number;
 }): Component;
 /** Render web search call (query preview) */

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@oh-my-pi/pi-coding-agent",
-	"version": "15.9.3",
+	"version": "15.9.5",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://omp.sh",
 	"author": "Can Boluk",
@@ -47,14 +47,14 @@
 		"@agentclientprotocol/sdk": "0.22.1",
 		"@babel/parser": "^7.29.7",
 		"@mozilla/readability": "^0.6.0",
-		"@oh-my-pi/hashline": "15.9.3",
-		"@oh-my-pi/omp-stats": "15.9.3",
-		"@oh-my-pi/pi-agent-core": "15.9.3",
-		"@oh-my-pi/pi-ai": "15.9.3",
-		"@oh-my-pi/pi-mnemopi": "15.9.3",
-		"@oh-my-pi/pi-natives": "15.9.3",
-		"@oh-my-pi/pi-tui": "15.9.3",
-		"@oh-my-pi/pi-utils": "15.9.3",
+		"@oh-my-pi/hashline": "15.9.5",
+		"@oh-my-pi/omp-stats": "15.9.5",
+		"@oh-my-pi/pi-agent-core": "15.9.5",
+		"@oh-my-pi/pi-ai": "15.9.5",
+		"@oh-my-pi/pi-mnemopi": "15.9.5",
+		"@oh-my-pi/pi-natives": "15.9.5",
+		"@oh-my-pi/pi-tui": "15.9.5",
+		"@oh-my-pi/pi-utils": "15.9.5",
 		"@opentelemetry/api": "^1.9.1",
 		"@opentelemetry/context-async-hooks": "^2.7.1",
 		"@opentelemetry/exporter-trace-otlp-proto": "^0.218.0",

package/src/cli/classify-install-target.ts

@@ -1,7 +1,11 @@
 /**
- * Classify an install spec as a marketplace plugin reference or a plain npm package.
+ * Classify an install spec as a local path, marketplace plugin reference, or
+ * plain npm package.
  *
  * Rules (applied in order):
+ *  0. Looks like a filesystem path (`.`, `..`, `./…`, `..\…`, `/…`, `~/…`,
+ *     `C:\…`, `\\unc`) -> local. Routed through `PluginManager.link()` so the
+ *     `omp plugin install <path>` and `omp plugin link <path>` flows agree.
  *  1. Starts with `@` (scoped npm) -> always npm.
  *  2. Contains `@` after the first character -> split on the LAST `@`.
  *     If the right-hand side is a known marketplace name, it's a marketplace ref.
@@ -25,10 +29,32 @@ const NPM_DIST_TAGS = new Set([
 // Semver-like: starts with digit, or contains version range prefixes
 const LOOKS_LIKE_VERSION = /^[\d~^>=<]/;
 
-export function classifyInstallTarget(
-	spec: string,
-	knownMarketplaces: Set<string>,
-): { type: "marketplace"; name: string; marketplace: string } | { type: "npm"; spec: string } {
+/**
+ * Detect specs that name a filesystem path rather than a package: bare `.` /
+ * `..`, cwd-relative (`./`, `../`, `.\`, `..\`), absolute (`/`, `C:\`, `C:/`,
+ * UNC `\\`), and tilde-prefixed (`~`, `~/`, `~\`). Tilde paths still rely on
+ * the shell or the caller for expansion — we only classify them so they reach
+ * the link path instead of npm-name validation.
+ */
+function isLocalPathSpec(spec: string): boolean {
+	if (spec === "." || spec === ".." || spec === "~") return true;
+	if (spec.startsWith("./") || spec.startsWith("../")) return true;
+	if (spec.startsWith(".\\") || spec.startsWith("..\\")) return true;
+	if (spec.startsWith("~/") || spec.startsWith("~\\")) return true;
+	if (spec.startsWith("/")) return true;
+	if (spec.startsWith("\\\\")) return true;
+	if (/^[A-Za-z]:[\\/]/.test(spec)) return true;
+	return false;
+}
+
+export type ClassifiedInstallTarget =
+	| { type: "local"; path: string }
+	| { type: "marketplace"; name: string; marketplace: string }
+	| { type: "npm"; spec: string };
+
+export function classifyInstallTarget(spec: string, knownMarketplaces: Set<string>): ClassifiedInstallTarget {
+	// Rule 0: filesystem path — bypass npm/marketplace validation entirely.
+	if (isLocalPathSpec(spec)) return { type: "local", path: spec };
 	// Rule 1: scoped npm package — @ at position 0 is never a marketplace separator.
 	if (spec.startsWith("@")) return { type: "npm", spec };
 	// Rule 2: @ somewhere after the first character.