@oh-my-pi/pi-coding-agent 16.1.17 → 16.1.18

package/dist/types/cli/usage-cli.d.ts

@@ -78,4 +78,18 @@ export declare function formatUsageBreakdown(reports: UsageReport[], accounts: U
  * peak-per-bucket sparkline per limit window plus latest/peak percentages.
  */
 export declare function formatUsageHistory(entries: UsageHistoryEntry[], sinceMs: number, nowMs: number, redaction?: Map<string, string>): string;
+/**
+ * Keep only accounts worth a usage row: those whose provider has a usage
+ * provider, so a missing report is a real gap rather than the absence of any
+ * usage concept. Providers with no usage endpoint (web-search keys, local /
+ * keyless servers, inference providers without a usage API) would only ever
+ * render as noise, so they are dropped.
+ *
+ * `hasUsageProvider` is injected (in practice {@link AuthStorage.usageProviderFor})
+ * so custom/broker resolvers stay authoritative — no provider list is duplicated
+ * here. An explicit `--provider` request bypasses the cull, so
+ * `omp usage --provider xai` can still confirm the stored credential has no
+ * usage endpoint.
+ */
+export declare function selectReportableAccounts(accounts: UsageAccountIdentity[], hasUsageProvider: (provider: string) => boolean, explicitProvider?: string): UsageAccountIdentity[];
 export declare function runUsageCommand(cmd: UsageCommandArgs): Promise<void>;

package/dist/types/commands/token.d.ts

@@ -19,6 +19,15 @@ export default class Token extends Command {
             description: string;
             default: boolean;
         };
+        account: import("@oh-my-pi/pi-utils/cli").FlagDescriptor<"integer"> & {
+            char: string;
+            description: string;
+        };
+        list: import("@oh-my-pi/pi-utils/cli").FlagDescriptor<"boolean"> & {
+            char: string;
+            description: string;
+            default: boolean;
+        };
     };
     static examples: string[];
     run(): Promise<void>;

package/dist/types/extensibility/plugins/legacy-pi-bundled-registry.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Canonical specifier → live module namespace. Keys MUST match the right-hand
+ * side of `bundledRegistryVirtualSpecifier(...)` calls in
+ * `legacy-pi-compat.ts`; the synthesizer enumerates each namespace's own
+ * enumerable exports at extension load time.
+ */
+export declare const BUNDLED_PI_REGISTRY: Readonly<Record<string, Readonly<Record<string, unknown>>>>;

package/dist/types/extensibility/plugins/legacy-pi-compat.d.ts

@@ -1,26 +1,16 @@
 import * as path from "node:path";
 /**
- * Compute the bunfs package root from the compiled binary's `import.meta.dir`
- * (or any stand-in supplied by tests). Bun compiled binaries report one of:
- *
- * - the bunfs mount root itself — `/$bunfs/root` or `<drive>:\~BUN\root` (Bun
- *   1.2.x and early 1.3.x). Append `packages` for the canonical layout.
- * - the bunfs mount root followed by the binary's basename — `//root/<bin>`
- *   on POSIX or `<drive>:\~BUN\root\<bin>.exe` on Windows (observed on Bun
- *   1.3.14 with the cross-compiled `omp-darwin-arm64` release asset — issue
- *   #3329). The trailing segment is stripped so the result still lands on
- *   `<root>/packages`.
- * - the module's own source directory if a future Bun release switches to
- *   module-specific `import.meta.dir` values:
- *   `<bunfs>/packages/coding-agent/src/extensibility/plugins`.
- * The bunfs-root-with-binary branch slices the original `metaDir`, and
- * `bunfsPath` uses a matching double-slash-preserving join, so the bunfs-native
- * prefix is preserved verbatim — `path.posix.join` collapses `//root` to
- * `/root`, but Bun's bunfs lookup is keyed on the exact `//root` form.
- *
- * Exported for tests; production callers use `BUNFS_PACKAGE_ROOT` below.
+ * Test seam: builds the synthetic ES module source for a virtual specifier
+ * against an explicit registry. Pure (no globalThis read); the emitted source
+ * still routes runtime lookups through `globalThis[BUNDLED_REGISTRY_GLOBAL]`.
  */
-export declare function __computeBunfsPackageRoot(metaDir: string, pathImpl?: typeof path): string;
+export declare function __synthesizeLegacyPiBundledSourceWithRegistry(registryKey: string, registry: Readonly<Record<string, Readonly<Record<string, unknown>>>>): string;
+/**
+ * Test seam: returns the globalThis key the synthetic loader reads from. Tests
+ * assert that the emitted source addresses the exact stash key the install
+ * function writes to, so a rename can't break extension loads silently.
+ */
+export declare function __getLegacyPiBundledRegistryGlobal(): string;
 /**
  * Compute the package root for the npm prebuilt `dist/cli.js` bundle.
  *
@@ -31,17 +21,31 @@ export declare function __computeBunfsPackageRoot(metaDir: string, pathImpl?: ty
  */
 export declare function __computeBundledSelfPackageRoot(metaDir: string, pathImpl?: typeof path): string;
 /**
- * Join a computed bunfs package root with descendants without collapsing
- * Bun's POSIX `//root` mount prefix.
+ * Resolve the path the TypeBox compatibility shim ships at, then drop it when
+ * the source file is missing.
+ *
+ * In compiled-binary mode the shim is served through the
+ * `omp-legacy-pi-bundled:` virtual namespace (issue #3423) — bunfs paths are
+ * unreachable on Bun 1.3.14+, so the virtual specifier is always available and
+ * needs no filesystem probe. In dev / source-link / installed-package mode the
+ * shim is an on-disk source file; validation mirrors
+ * `__validateLegacyPiPackageRootOverrides` (#2168): if the computed candidate
+ * doesn't exist (e.g. an install that dropped the source — issue #3414),
+ * `resolveTypeBoxSpecifier` returns `undefined` and
+ * `rewriteLegacyExtensionSource` leaves bare `typebox` / `@sinclair/typebox`
+ * specifiers alone, so Bun falls through to native resolution against the
+ * extension's own `node_modules`.
  *
- * Exported for tests; production callers use `bunfsPath` below.
+ * Exported for tests; production callers use `TYPEBOX_SHIM_PATH`.
  */
-export declare function __joinBunfsPath(root: string, segments: readonly string[], pathImpl?: typeof path): string;
+export declare function __resolveTypeBoxShimPath(isCompiled: boolean, sourcePath: string, pathExistsSync?: (p: string) => boolean): string | null;
 /**
- * Drop overrides whose targets are missing on disk so they can fall through to
- * the canonical-resolution path. Exported for the test seam in #2168.
+ * Drop overrides whose filesystem targets are missing so they can fall
+ * through to the canonical-resolution path. Virtual `omp-legacy-pi-bundled:`
+ * entries always pass — the bundled registry is the source of truth in
+ * compiled-binary mode where bunfs paths are unreachable (issue #3423).
  *
- * `pathExistsSync` defaults to `fs.existsSync`; the tests inject a stub to
+ * `pathExistsSync` defaults to `fs.existsSync`; tests inject a stub to
  * simulate the missing-entrypoint failure mode without touching the real FS.
  */
 export declare function __validateLegacyPiPackageRootOverrides(candidates: Record<string, string>, pathExistsSync?: (p: string) => boolean): Record<string, string>;

package/dist/types/modes/components/extensions/extension-dashboard.d.ts

@@ -1,19 +1,29 @@
 /**
- * ExtensionDashboard - Tabbed layout for the Extension Control Center.
+ * ExtensionDashboard - Fullscreen alternate-screen control center for extensions.
  *
- * Layout:
- * - Top: Horizontal tab bar for provider selection
- * - Body: 2-column grid (inventory list | preview panel)
+ * Chrome mirrors the `/settings` overlay: a titled rounded box, a shared
+ * {@link TabBar} for provider selection, and a two-column body (inventory list |
+ * inspector). Both panes are mouse-aware — wheel scrolls, hover highlights, and
+ * clicks select/activate — routed from a single SGR-mouse handler.
  *
  * Navigation:
- * - TAB/Shift+TAB: Cycle through provider tabs
- * - Up/Down/j/k: Navigate list
- * - Space: Toggle selected item (or master switch)
- * - Esc: Close dashboard (clears search first if active)
+ * - Tab/Shift+Tab or ←/→: switch provider tab
+ * - Up/Down/j/k or wheel: move list selection
+ * - Space/Enter or click: toggle selected item (or provider master switch)
+ * - Wheel over the inspector: scroll the detail pane
+ * - Esc: clear search (if active) then close
  */
-import { Container } from "@oh-my-pi/pi-tui";
+import { type Component, type Tab } from "@oh-my-pi/pi-tui";
 import { Settings } from "../../../config/settings";
-export declare class ExtensionDashboard extends Container {
+import type { ProviderTab } from "./types";
+/**
+ * Map dashboard provider tabs to {@link TabBar} tabs. Empty *enabled* providers
+ * are muted — skipped by keyboard nav and unclickable; disabled providers stay
+ * selectable (with a leading disabled glyph) so their master switch can be
+ * re-enabled from the list. The "all" tab is never muted or marked.
+ */
+export declare function buildTabBarTabs(tabs: ProviderTab[]): Tab[];
+export declare class ExtensionDashboard implements Component {
     #private;
     private readonly cwd;
     private readonly settings;
@@ -22,6 +32,12 @@ export declare class ExtensionDashboard extends Container {
     onRequestRender?: () => void;
     private constructor();
     static create(cwd: string, settings?: Settings | null, terminalHeight?: number): Promise<ExtensionDashboard>;
+    /**
+     * Fullscreen frame: titled top border, the tab row(s), a divider, the
+     * two-column body sized to fill the viewport, a divider, the footer hint, and
+     * the bottom border. Records row geometry for mouse hit-testing.
+     */
     render(width: number): readonly string[];
+    invalidate(): void;
     handleInput(data: string): void;
 }

package/dist/types/modes/components/extensions/extension-list.d.ts

@@ -35,5 +35,18 @@ export declare class ExtensionList implements Component {
     clearSearch(): void;
     invalidate(): void;
     render(width: number): readonly string[];
+    /** Highlight the row under the pointer (null clears). */
+    setHoverIndex(index: number | null): void;
+    /**
+     * Map a 0-based line within this component's render to the absolute list-item
+     * index, or null when the line is the search banner, a padding row, or outside
+     * the visible window. The first two lines are the search banner and a blank
+     * separator; item rows follow, windowed at the current scroll offset.
+     */
+    hitTest(line: number): number | null;
+    /** Wheel notch: move the selection (and the inspector) one row. */
+    handleWheel(delta: -1 | 1): void;
+    /** Click: select the row under the pointer, or activate it when already selected. */
+    handleClick(line: number): void;
     handleInput(data: string): void;
 }

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@oh-my-pi/pi-coding-agent",
-	"version": "16.1.17",
+	"version": "16.1.18",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://omp.sh",
 	"author": "Can Boluk",
@@ -48,17 +48,17 @@
 		"@agentclientprotocol/sdk": "0.25.0",
 		"@babel/parser": "^7.29.7",
 		"@mozilla/readability": "^0.6.0",
-		"@oh-my-pi/hashline": "16.1.17",
-		"@oh-my-pi/omp-stats": "16.1.17",
-		"@oh-my-pi/pi-agent-core": "16.1.17",
-		"@oh-my-pi/pi-ai": "16.1.17",
-		"@oh-my-pi/pi-catalog": "16.1.17",
-		"@oh-my-pi/pi-mnemopi": "16.1.17",
-		"@oh-my-pi/pi-natives": "16.1.17",
-		"@oh-my-pi/pi-tui": "16.1.17",
-		"@oh-my-pi/pi-utils": "16.1.17",
-		"@oh-my-pi/pi-wire": "16.1.17",
-		"@oh-my-pi/snapcompact": "16.1.17",
+		"@oh-my-pi/hashline": "16.1.18",
+		"@oh-my-pi/omp-stats": "16.1.18",
+		"@oh-my-pi/pi-agent-core": "16.1.18",
+		"@oh-my-pi/pi-ai": "16.1.18",
+		"@oh-my-pi/pi-catalog": "16.1.18",
+		"@oh-my-pi/pi-mnemopi": "16.1.18",
+		"@oh-my-pi/pi-natives": "16.1.18",
+		"@oh-my-pi/pi-tui": "16.1.18",
+		"@oh-my-pi/pi-utils": "16.1.18",
+		"@oh-my-pi/pi-wire": "16.1.18",
+		"@oh-my-pi/snapcompact": "16.1.18",
 		"@opentelemetry/api": "^1.9.1",
 		"@opentelemetry/context-async-hooks": "^2.7.1",
 		"@opentelemetry/exporter-trace-otlp-proto": "^0.218.0",

package/scripts/build-binary.ts

@@ -82,22 +82,15 @@ async function main(): Promise<void> {
 					"--root",
 					".",
 					"./packages/coding-agent/src/cli.ts",
-					// Legacy pi-* extension compat entrypoints served by
-					// `legacy-pi-compat.ts`. These are reached via computed bunfs paths
-					// (which `--compile`'s static analyzer cannot trace), so each must be
-					// listed here to land in bunfs at
-					// `/$bunfs/root/packages/<pkg>/<entry>.js`. The coding-agent's own
-					// `./src/index.ts` is intentionally NOT listed: bun --compile silently
-					// breaks the CLI entry when the same package's barrel appears as an
-					// extra entrypoint (issue #1474), so legacy `pi-coding-agent` imports
-					// resolve through `legacy-pi-coding-agent-shim.ts` instead.
-					"./packages/agent/src/index.ts",
-					"./packages/natives/native/index.js",
-					"./packages/tui/src/index.ts",
-					"./packages/utils/src/index.ts",
-					"./packages/coding-agent/src/extensibility/typebox.ts",
-					"./packages/coding-agent/src/extensibility/legacy-pi-ai-shim.ts",
-					"./packages/coding-agent/src/extensibility/legacy-pi-coding-agent-shim.ts",
+					// Legacy pi-* extension compat surfaces (host packages + shims)
+					// were previously listed as explicit `--compile` entries so the
+					// rewrite path could emit `/$bunfs/root/...` URLs against them.
+					// Bun 1.3.14 made bunfs files unreachable at runtime (issue
+					// #3423), so `legacy-pi-compat.ts` now serves them through a
+					// virtual namespace backed by `legacy-pi-bundled-registry.ts`,
+					// which static-imports each surface — the bundler already
+					// includes them via the main module graph, so no `--compile`
+					// extras are required.
 					"--outfile",
 					`packages/coding-agent/dist/${outName}`,
 				],

package/src/cli/usage-cli.ts

@@ -650,6 +650,28 @@ function collectStoredAccounts(authStorage: AuthStorage): UsageAccountIdentity[]
 	return accounts;
 }
 
+/**
+ * Keep only accounts worth a usage row: those whose provider has a usage
+ * provider, so a missing report is a real gap rather than the absence of any
+ * usage concept. Providers with no usage endpoint (web-search keys, local /
+ * keyless servers, inference providers without a usage API) would only ever
+ * render as noise, so they are dropped.
+ *
+ * `hasUsageProvider` is injected (in practice {@link AuthStorage.usageProviderFor})
+ * so custom/broker resolvers stay authoritative — no provider list is duplicated
+ * here. An explicit `--provider` request bypasses the cull, so
+ * `omp usage --provider xai` can still confirm the stored credential has no
+ * usage endpoint.
+ */
+export function selectReportableAccounts(
+	accounts: UsageAccountIdentity[],
+	hasUsageProvider: (provider: string) => boolean,
+	explicitProvider?: string,
+): UsageAccountIdentity[] {
+	if (explicitProvider) return accounts;
+	return accounts.filter(account => hasUsageProvider(account.provider));
+}
+
 /** Apply a redaction mask to an optional identity field. */
 function maskIdentity(redaction: Map<string, string>, value: string | undefined): string | undefined {
 	return value === undefined ? undefined : (redaction.get(value) ?? value);
@@ -721,7 +743,12 @@ export async function runUsageCommand(cmd: UsageCommandArgs): Promise<void> {
 			(await authStorage.fetchUsageReports({
 				baseUrlResolver: provider => modelRegistry.getProviderBaseUrl(provider),
 			})) ?? [];
-		let accounts = collectStoredAccounts(authStorage);
+		const storedAccounts = collectStoredAccounts(authStorage);
+		let accounts = selectReportableAccounts(
+			storedAccounts,
+			provider => authStorage.usageProviderFor(provider) !== undefined,
+			cmd.provider,
+		);
 		let filteredReports = reports;
 		if (cmd.provider) {
 			const wanted = cmd.provider.toLowerCase();
@@ -764,9 +791,13 @@ export async function runUsageCommand(cmd: UsageCommandArgs): Promise<void> {
 
 		if (filteredReports.length === 0 && accounts.length === 0) {
 			const scope = cmd.provider ? ` for provider "${cmd.provider}"` : "";
-			process.stderr.write(
-				chalk.yellow(`No credentials found${scope}. Run \`omp\` and use /login to add accounts.\n`),
-			);
+			// Credentials exist but every one is for a provider without a usage
+			// endpoint — say so rather than implying nothing is logged in.
+			const message =
+				storedAccounts.length > 0
+					? `No usage data${scope}. Stored credentials are for providers without a usage endpoint.\n`
+					: `No credentials found${scope}. Run \`omp\` and use /login to add accounts.\n`;
+			process.stderr.write(chalk.yellow(message));
 			process.exitCode = 1;
 			return;
 		}

package/src/commands/token.ts

@@ -28,12 +28,23 @@ export default class Token extends Command {
 			description: "Force refresh the OAuth token even if it has not expired",
 			default: false,
 		}),
+		account: Flags.integer({
+			char: "a",
+			description: "Select the Nth OAuth account (1-based) in stored order instead of the round-robin default",
+		}),
+		list: Flags.boolean({
+			char: "l",
+			description: "List the provider's OAuth accounts (index + identity) and exit",
+			default: false,
+		}),
 	};
 
 	static examples = [
 		"# Get API key for Anthropic\n  omp token anthropic",
 		"# Get raw Copilot credential JSON\n  omp token github-copilot --raw",
 		"# Force refresh and get Gemini CLI token\n  omp token google-gemini-cli --force-refresh",
+		"# List Anthropic OAuth accounts\n  omp token anthropic --list",
+		"# Get the 2nd Anthropic OAuth account's token\n  omp token anthropic --account 2",
 	];
 
 	async run(): Promise<void> {
@@ -43,6 +54,49 @@ export default class Token extends Command {
 
 		const authStorage = await discoverAuthStorage();
 		try {
+			if (flags.list || flags.account !== undefined) {
+				const accounts = authStorage.listOAuthAccounts(provider);
+				if (accounts.length === 0) {
+					process.stderr.write(`${chalk.red(`No OAuth accounts found for provider "${providerName}".`)}\n`);
+					process.stderr.write("--account/--list select among OAuth accounts; this provider has none stored.\n");
+					process.exitCode = 1;
+					return;
+				}
+				if (flags.list) {
+					for (const acct of accounts) {
+						const label =
+							acct.email ??
+							acct.accountId ??
+							acct.projectId ??
+							acct.enterpriseUrl ??
+							`credential #${acct.credentialId}`;
+						process.stdout.write(`${acct.position + 1}. ${label}\n`);
+					}
+					return;
+				}
+				const n = flags.account;
+				if (n === undefined || n < 1 || n > accounts.length) {
+					process.stderr.write(
+						`${chalk.red(`Invalid --account ${n ?? "(missing)"}.`)} Provider "${providerName}" has ${accounts.length} OAuth account(s) (1-${accounts.length}).\n`,
+					);
+					process.exitCode = 1;
+					return;
+				}
+				const resolution = await authStorage.getOAuthAccessAt(provider, n - 1, {
+					forceRefresh: flags["force-refresh"],
+				});
+				if (!resolution?.ok) {
+					const reason = resolution && !resolution.ok ? resolution.error : "no OAuth credential available";
+					process.stderr.write(
+						`${chalk.red(`Could not get token for account ${n} of "${providerName}": ${reason}`)}\n`,
+					);
+					process.exitCode = 1;
+					return;
+				}
+				process.stdout.write(`${resolution.accessToken}\n`);
+				return;
+			}
+
 			const modelRegistry = new ModelRegistry(authStorage);
 
 			// Resolve the API key / token

package/src/extensibility/plugins/legacy-pi-bundled-registry.ts

@@ -0,0 +1,40 @@
+/**
+ * Static handles on every bundled `@oh-my-pi/pi-*` surface a legacy extension
+ * may import. Loaded lazily by `legacy-pi-compat.ts` in compiled-binary mode
+ * (issue #3423) and re-exported through the `omp-legacy-pi-bundled:` virtual
+ * namespace — bunfs paths cannot be resolved at runtime on Bun 1.3.14+, so
+ * the only way to re-route extension imports onto the host's in-process copy
+ * is via live module references captured at compile time.
+ *
+ * This module is split out from `legacy-pi-compat.ts` so dev/test runs that
+ * touch the compat layer never trigger the cascade through
+ * `legacy-pi-coding-agent-shim.ts → ../index → export/html/...` (which
+ * requires generated artifacts that only exist after a `bun run build`).
+ *
+ * The bundler reaches every entry below via standard static-import analysis,
+ * so the matching `--compile` extras can be dropped from
+ * `scripts/build-binary.ts`.
+ */
+import * as bundledPiAgentCore from "@oh-my-pi/pi-agent-core";
+import * as bundledPiNatives from "@oh-my-pi/pi-natives";
+import * as bundledPiTui from "@oh-my-pi/pi-tui";
+import * as bundledPiUtils from "@oh-my-pi/pi-utils";
+import * as bundledLegacyPiAiShim from "../legacy-pi-ai-shim";
+import * as bundledLegacyPiCodingAgentShim from "../legacy-pi-coding-agent-shim";
+import * as bundledTypeBoxShim from "../typebox";
+
+/**
+ * Canonical specifier → live module namespace. Keys MUST match the right-hand
+ * side of `bundledRegistryVirtualSpecifier(...)` calls in
+ * `legacy-pi-compat.ts`; the synthesizer enumerates each namespace's own
+ * enumerable exports at extension load time.
+ */
+export const BUNDLED_PI_REGISTRY: Readonly<Record<string, Readonly<Record<string, unknown>>>> = {
+	"@oh-my-pi/pi-agent-core": bundledPiAgentCore,
+	"@oh-my-pi/pi-ai": bundledLegacyPiAiShim,
+	"@oh-my-pi/pi-coding-agent": bundledLegacyPiCodingAgentShim,
+	"@oh-my-pi/pi-natives": bundledPiNatives,
+	"@oh-my-pi/pi-tui": bundledPiTui,
+	"@oh-my-pi/pi-utils": bundledPiUtils,
+	typebox: bundledTypeBoxShim,
+};