@oh-my-pi/pi-coding-agent 16.1.19 → 16.1.21

package/dist/types/advisor/advise-tool.d.ts

@@ -84,6 +84,7 @@ export declare function deriveAdvisorTelemetry(primaryTelemetry: AgentTelemetryC
  */
 export declare const ADVISOR_READONLY_TOOL_NAMES: ReadonlySet<string>;
 export declare class AdviseTool implements AgentTool<typeof adviseSchema, AdviseDetails> {
+    #private;
     private readonly onAdvice;
     readonly name = "advise";
     readonly label = "Advise";
@@ -94,6 +95,8 @@ export declare class AdviseTool implements AgentTool<typeof adviseSchema, Advise
     }, {}>;
     readonly intent: "omit";
     constructor(onAdvice: (note: string, severity?: AdviseDetails["severity"]) => void);
+    /** Clear delivered-note memory when the advisor starts a fresh conversation. */
+    resetDeliveredNotes(): void;
     execute(_toolCallId: string, args: AdviseParams, _signal?: AbortSignal, _onUpdate?: AgentToolUpdateCallback<AdviseDetails>, _context?: AgentToolContext): Promise<AgentToolResult<AdviseDetails>>;
 }
 export {};

package/dist/types/cli/gallery-cli.d.ts

@@ -2,6 +2,12 @@ import { type GalleryFixture } from "./gallery-fixtures";
 /** Lifecycle states the gallery renders, in display order. */
 export declare const GALLERY_STATES: readonly ["streaming", "progress", "success", "error"];
 export type GalleryState = (typeof GALLERY_STATES)[number];
+/** User-facing labels printed above each rendered lifecycle state. */
+export declare const GALLERY_STATE_LABELS: Record<GalleryState, string>;
+/** Accepted `--state` tokens, including legacy lifecycle names and displayed labels. */
+export declare const GALLERY_STATE_TOKENS: string[];
+/** Normalize user-provided `--state` tokens to the internal gallery lifecycle states. */
+export declare function parseGalleryStates(states: readonly string[] | undefined): GalleryState[] | undefined;
 export interface GalleryCommandArgs {
     /** Render width in columns (defaults to terminal width, clamped). */
     width?: number;

package/dist/types/commands/gallery.d.ts

@@ -12,7 +12,7 @@ export default class Gallery extends Command {
         state: import("@oh-my-pi/pi-utils/cli").FlagDescriptor<"string"> & {
             char: string;
             description: string;
-            options: ("error" | "progress" | "streaming" | "success")[];
+            options: string[];
             multiple: true;
         };
         width: import("@oh-my-pi/pi-utils/cli").FlagDescriptor<"integer"> & {

package/dist/types/config/service-tier.d.ts

@@ -0,0 +1,34 @@
+import type { ServiceTier } from "@oh-my-pi/pi-ai";
+import type { SubmenuOption } from "./settings-schema";
+/**
+ * Service-tier setting values shared by every "Service Tier" setting. `"none"`
+ * is the omit-the-parameter sentinel; the remaining values mirror
+ * {@link ServiceTier}.
+ */
+export declare const SERVICE_TIER_SETTING_VALUES: readonly ["none", "auto", "default", "flex", "scale", "priority", "openai-only", "claude-only"];
+export type ServiceTierSettingValue = (typeof SERVICE_TIER_SETTING_VALUES)[number];
+/** Variant value set for scoped service-tier settings (subagent/advisor) that can defer to the main agent. */
+export declare const SERVICE_TIER_INHERIT_SETTING_VALUES: readonly ["inherit", "none", "auto", "default", "flex", "scale", "priority", "openai-only", "claude-only"];
+export type ServiceTierInheritSettingValue = (typeof SERVICE_TIER_INHERIT_SETTING_VALUES)[number];
+/** Submenu descriptions shared by the base `serviceTier` setting. */
+export declare const SERVICE_TIER_OPTIONS: ReadonlyArray<SubmenuOption<ServiceTierSettingValue>>;
+/** Submenu descriptions for inherit-capable service-tier settings. */
+export declare const SERVICE_TIER_INHERIT_OPTIONS: ReadonlyArray<SubmenuOption<ServiceTierInheritSettingValue>>;
+/**
+ * Resolve a service-tier setting value to the wire {@link ServiceTier} (or
+ * `undefined` to omit). `"inherit"` defers to `inherited`; `"none"` omits.
+ */
+export declare function resolveServiceTierSetting(value: string, inherited: ServiceTier | undefined): ServiceTier | undefined;
+/**
+ * Resolve the `serviceTier` *setting value* to stamp onto a subagent's settings
+ * snapshot.
+ *
+ * - A concrete `subagentSetting` (`"none"` or a tier) wins outright.
+ * - `"inherit"` defers to the parent's live effective tier when the caller has a
+ *   live session (`inherited` passed as `ServiceTier | null`, where `null` means
+ *   the parent explicitly has no tier — e.g. `/fast off`). When no live session
+ *   is available (`inherited === undefined`, e.g. cold subagent revive) it falls
+ *   back to the parent's configured `serviceTier` setting so behavior matches a
+ *   plain settings snapshot.
+ */
+export declare function resolveSubagentServiceTier(subagentSetting: string, configuredTier: ServiceTierSettingValue, inherited: ServiceTier | null | undefined): ServiceTierSettingValue;

package/dist/types/config/settings-schema.d.ts

@@ -1153,39 +1153,32 @@ export declare const SETTINGS_SCHEMA: {
             readonly group: "Sampling";
             readonly label: "Service Tier";
             readonly description: 'Processing priority hint (none = omit). OpenAI accepts the tier values directly; Anthropic realizes `priority` as `speed: "fast"` on supported Opus models. Scoped values target one family.';
-            readonly options: readonly [{
-                readonly value: "none";
-                readonly label: "None";
-                readonly description: "Omit service_tier parameter";
-            }, {
-                readonly value: "auto";
-                readonly label: "Auto";
-                readonly description: "Use provider default tier selection (OpenAI)";
-            }, {
-                readonly value: "default";
-                readonly label: "Default";
-                readonly description: "Standard priority processing (OpenAI)";
-            }, {
-                readonly value: "flex";
-                readonly label: "Flex";
-                readonly description: "Flexible capacity tier when available (OpenAI)";
-            }, {
-                readonly value: "scale";
-                readonly label: "Scale";
-                readonly description: "Scale Tier credits when available (OpenAI)";
-            }, {
-                readonly value: "priority";
-                readonly label: "Priority";
-                readonly description: "Priority on every supported provider (OpenAI `service_tier`, Anthropic fast mode)";
-            }, {
-                readonly value: "openai-only";
-                readonly label: "Priority (OpenAI only)";
-                readonly description: "Priority on OpenAI/OpenAI-Codex requests; ignored elsewhere";
-            }, {
-                readonly value: "claude-only";
-                readonly label: "Priority (Claude only)";
-                readonly description: "Anthropic fast mode on direct Claude requests; ignored elsewhere (incl. Bedrock/Vertex)";
-            }];
+            readonly options: readonly SubmenuOption<"auto" | "claude-only" | "default" | "flex" | "none" | "openai-only" | "priority" | "scale">[];
+        };
+    };
+    readonly serviceTierSubagent: {
+        readonly type: "enum";
+        readonly values: readonly ["inherit", "none", "auto", "default", "flex", "scale", "priority", "openai-only", "claude-only"];
+        readonly default: "inherit";
+        readonly ui: {
+            readonly tab: "model";
+            readonly group: "Sampling";
+            readonly label: "Service Tier - Subagent";
+            readonly description: "Service Tier for spawned task/eval subagents. Inherit = match the main agent's live tier (tracks /fast); pick a value to scope subagents independently.";
+            readonly options: readonly SubmenuOption<"auto" | "claude-only" | "default" | "flex" | "inherit" | "none" | "openai-only" | "priority" | "scale">[];
+        };
+    };
+    readonly serviceTierAdvisor: {
+        readonly type: "enum";
+        readonly values: readonly ["inherit", "none", "auto", "default", "flex", "scale", "priority", "openai-only", "claude-only"];
+        readonly default: "none";
+        readonly ui: {
+            readonly tab: "model";
+            readonly group: "Sampling";
+            readonly label: "Service Tier - Advisor";
+            readonly description: "Service Tier for the advisor model. None = standard processing; Inherit = match the main agent's live tier; pick a value (e.g. Priority) to run the advisor on a faster serving path.";
+            readonly options: readonly SubmenuOption<"auto" | "claude-only" | "default" | "flex" | "inherit" | "none" | "openai-only" | "priority" | "scale">[];
+            readonly condition: "advisorEnabled";
         };
     };
     readonly fastModeScope: {
@@ -4243,6 +4236,16 @@ export declare const SETTINGS_SCHEMA: {
             readonly description: "Obfuscate secrets before sending to AI providers";
         };
     };
+    readonly "providers.ollama-cloud.maxConcurrency": {
+        readonly type: "number";
+        readonly default: 3;
+        readonly ui: {
+            readonly tab: "providers";
+            readonly group: "Services";
+            readonly label: "Ollama Cloud Max Concurrency";
+            readonly description: "Maximum concurrent Ollama Cloud subagent runs per process; 0 disables the provider-specific limit";
+        };
+    };
     readonly "providers.webSearch": {
         readonly type: "enum";
         readonly values: readonly ["auto", ...SearchProviderId[]];

package/dist/types/extensibility/plugins/legacy-pi-compat.d.ts

@@ -61,6 +61,8 @@ export declare function __validateLegacyPiPackageRootOverrides(candidates: Recor
  * compiled-binary branch is verifiable from dev tests.
  */
 export declare function __buildLegacyPiPackageRootOverrides(isCompiled: boolean): Record<string, string>;
+/** Test seam for compiled-binary legacy extension source rewriting. */
+export declare function __rewriteLegacyExtensionSourceForTests(source: string, importerPath: string): Promise<string>;
 /**
  * Load a legacy Pi extension module from its real on-disk location.
  *

package/dist/types/mcp/oauth-flow.d.ts

@@ -38,6 +38,14 @@ export interface MCPStoredOAuthCredential extends OAuthCredential {
     clientId?: string;
     clientSecret?: string;
     resource?: string;
+    /**
+     * Authorization-server URL (the issuer the grant was minted against). Used
+     * to filter same-origin resource indicators on refresh: RFC 8414 lets the
+     * authorize and token endpoints sit on different origins, so refresh
+     * cannot infer the original auth-server origin from `tokenUrl` alone.
+     * Unset on legacy credentials minted before issue #3502's fix.
+     */
+    authorizationUrl?: string;
 }
 export interface MCPOAuthConfig {
     /** Authorization endpoint URL */
@@ -67,6 +75,13 @@ export interface MCPOAuthConfig {
     callbackPath?: string;
     /** MCP resource URI for RFC 8707 resource indicators */
     resource?: string;
+    /**
+     * True when `resource` was synthesized from the server URL fallback rather
+     * than advertised by OAuth/protected-resource metadata. Fallback resources
+     * are stripped when same-origin with the authorization server; advertised
+     * path-scoped resources are preserved.
+     */
+    stripSameOriginResource?: boolean;
     /** Fetch implementation for token exchange and discovery requests. */
     fetch?: FetchImpl;
 }
@@ -93,18 +108,40 @@ export declare class MCPOAuthFlow extends OAuthCallbackFlow {
      */
     get registeredClientSecret(): string | undefined;
     get resource(): string | undefined;
+    /**
+     * Authorization-server URL the flow used. Persist alongside the credential
+     * so refresh can filter same-origin resource indicators against the issuer's
+     * origin even when `tokenUrl` lives on a different origin (RFC 8414 permits
+     * the split).
+     */
+    get authorizationUrl(): string;
     generateAuthUrl(state: string, redirectUri: string): Promise<{
         url: string;
         instructions?: string;
     }>;
     exchangeToken(code: string, _state: string, redirectUri: string): Promise<OAuthCredentials>;
 }
+/**
+ * Options for {@link refreshMCPOAuthToken}. Carried via the trailing object
+ * so positional callers keep working.
+ */
+export interface RefreshMCPOAuthTokenOptions {
+    fetch?: FetchImpl;
+    /**
+     * Authorization-server URL the original grant was minted against. Used to
+     * filter same-origin resource indicators on refresh. Defaults to `tokenUrl`'s
+     * origin when omitted for legacy credentials.
+     */
+    authorizationUrl?: string;
+    /**
+     * True when the refresh `resource` was synthesized from the server URL
+     * fallback because the credential/auth material carried no resource.
+     * Preserved advertised resources leave this false/undefined.
+     */
+    stripSameOriginResource?: boolean;
+}
 /**
  * Refresh an MCP OAuth token using the standard refresh_token grant.
  * Returns updated credentials; preserves the old refresh token if the server doesn't rotate it.
  */
-export declare function refreshMCPOAuthToken(tokenUrl: string, refreshToken: string, clientId?: string, clientSecret?: string, resourceOrOpts?: string | {
-    fetch?: FetchImpl;
-}, opts?: {
-    fetch?: FetchImpl;
-}): Promise<OAuthCredentials>;
+export declare function refreshMCPOAuthToken(tokenUrl: string, refreshToken: string, clientId?: string, clientSecret?: string, resourceOrOpts?: string | RefreshMCPOAuthTokenOptions, opts?: RefreshMCPOAuthTokenOptions): Promise<OAuthCredentials>;

package/dist/types/modes/components/custom-editor.d.ts

@@ -19,9 +19,41 @@ export declare const SPACE_HOLD_MECHANICAL_RUN = 2;
 /** Idle gap (ms) after the last repeated space that counts as the space bar being released, ending
  *  the push-to-talk recording. Must comfortably exceed the OS key-repeat interval. */
 export declare const SPACE_HOLD_RELEASE_MS = 250;
+/**
+ * Extract image-or-other file paths from plain (un-bracketed) clipboard text.
+ * Mirrors {@link extractBracketedPastePaths} for terminals/handlers that
+ * already stripped the `\x1b[200~`…`\x1b[201~` markers (e.g. clipboard text
+ * read directly via `pbpaste`/PowerShell).
+ */
+export declare function extractPastePathsFromText(text: string): string[] | undefined;
 export declare function extractBracketedPastePaths(data: string): string[] | undefined;
 export declare function extractBracketedImagePastePaths(data: string): string[] | undefined;
 export declare function extractBracketedImagePastePath(data: string): string | undefined;
+/**
+ * Return a single image file path when `text` is exactly one explicit path
+ * pointing at a supported image extension (`.png`, `.jpg`/`.jpeg`, `.gif`,
+ * `.webp`). Used by the keybind-driven clipboard image paste path so a
+ * clipboard whose only payload is an image file (e.g. Finder `Cmd+C` on
+ * macOS) attaches the image instead of pasting the path as literal text.
+ *
+ * Two-stage detection:
+ *
+ * 1. Splitter pass (shared with the bracketed-paste handler) — handles
+ *    quoted paths, shell-escaped spaces, and unambiguous single tokens.
+ *    Returns the single image path when it parses cleanly; explicitly
+ *    returns `undefined` when the splitter found multiple segments (so
+ *    ambiguous multi-path clipboard text like `/tmp/a.png /tmp/b.png`
+ *    still falls through to the text fallback instead of being mis-loaded
+ *    as one giant path).
+ * 2. Whole-text-as-path pass — only reached when the splitter failed
+ *    (every segment must look like an explicit path; an unescaped space in
+ *    a real path breaks that). Restricted to inputs anchored by
+ *    {@link ABSOLUTE_PATH_PREFIX_REGEX} so prose containing a path-shaped
+ *    fragment ("see /tmp/x.png") never hijacks the smart fallback. This
+ *    is what recovers macOS screenshot filenames like
+ *    `/Users/me/Desktop/Screenshot 2026-06-25 at 1.23.45 PM.png`.
+ */
+export declare function extractImagePathFromText(text: string): string | undefined;
 /**
  * Custom editor that handles configurable app-level shortcuts for coding-agent.
  */

package/dist/types/modes/components/tool-execution.d.ts

@@ -107,13 +107,13 @@ export declare class ToolExecutionComponent extends Container implements NativeS
      */
     seal(): void;
     /**
-     * Whether this block is a waiting `job` poll (every watched job still
-     * running) that has not been sealed. Such a block never finalized, so none
-     * of its rows entered native scrollback (the ticking spinner keeps the
-     * stable-prefix ratchet at zero) and the whole block can be removed when a
-     * follow-up `job` call supersedes it.
+     * Whether this block is a supersedable result snapshot that has not been
+     * sealed. Such a block never finalized, so none of its rows entered native
+     * scrollback and the whole block can be removed when a follow-up matching
+     * tool call supersedes it.
      */
     isDisplaceableBlock(): boolean;
+    canBeDisplacedBy(nextToolName: string | undefined): boolean;
     /**
      * Stop spinner animation and cleanup resources.
      */

package/dist/types/modes/controllers/event-controller.d.ts

@@ -1,3 +1,4 @@
+import { ToolExecutionComponent } from "../../modes/components/tool-execution";
 import type { InteractiveModeContext } from "../../modes/types";
 import type { AgentSessionEvent } from "../../session/agent-session";
 export declare class EventController {
@@ -14,5 +15,14 @@ export declare class EventController {
      */
     resetTranscriptAnchors(): void;
     handleEvent(event: AgentSessionEvent): Promise<void>;
+    /**
+     * Adopt a rebuilt-tail todo snapshot as the controller's tracked live
+     * snapshot. Used by rebuild paths (settings/extensions overlay close, focus
+     * attach, /resume) to preserve displacement continuity when a turn is still
+     * active — without this, the next same-turn `todo` update would stack
+     * another panel because the controller's tracker was reset before rebuild.
+     * Drops the candidate when it is no longer a displaceable todo.
+     */
+    inheritDisplaceableTodo(component: ToolExecutionComponent | null | undefined): void;
     sendCompletionNotification(): void;
 }

package/dist/types/modes/controllers/input-controller.d.ts

@@ -1,6 +1,6 @@
 import { type AutocompleteProvider, type SlashCommand } from "@oh-my-pi/pi-tui";
 import type { InteractiveModeContext } from "../../modes/types";
-import { readImageFromClipboard, readTextFromClipboard } from "../../utils/clipboard";
+import { readImageFromClipboard, readMacFileUrlsFromClipboard, readTextFromClipboard } from "../../utils/clipboard";
 /**
  * Slash commands that may carry secrets in their arguments should never be
  * persisted to history.
@@ -24,6 +24,7 @@ export declare class InputController {
     clipboard?: {
         readImage: typeof readImageFromClipboard;
         readText: typeof readTextFromClipboard;
+        readMacFileUrls?: typeof readMacFileUrlsFromClipboard;
     });
     setupKeyHandlers(): void;
     setupEditorSubmitHandler(): void;

package/dist/types/session/agent-session.d.ts

@@ -760,6 +760,8 @@ export declare class AgentSession {
     abort(options?: {
         goalReason?: "interrupted" | "internal";
         reason?: string;
+        /** Internal `/compact` startup keeps the manual-compaction marker alive while aborting the active turn. */
+        preserveCompaction?: boolean;
     }): Promise<void>;
     /**
      * Start a new session, optionally with initial messages and parent tracking.

package/dist/types/task/executor.d.ts

@@ -4,6 +4,7 @@
  * Runs each subagent on the main thread and forwards AgentEvents for progress tracking.
  */
 import type { AgentTelemetryConfig, ThinkingLevel } from "@oh-my-pi/pi-agent-core";
+import type { ServiceTier } from "@oh-my-pi/pi-ai";
 import type { Rule } from "../capability/rule";
 import { ModelRegistry } from "../config/model-registry";
 import type { PromptTemplate } from "../config/prompt-templates";
@@ -119,6 +120,13 @@ export interface ExecutorOptions {
     authStorage?: AuthStorage;
     modelRegistry?: ModelRegistry;
     settings?: Settings;
+    /**
+     * Parent session's live effective service tier, the source of truth for a
+     * subagent whose `serviceTierSubagent` is `"inherit"`. `null` = the parent
+     * explicitly has no tier (e.g. `/fast off`); omitted = no live session, so
+     * inherit falls back to the configured `serviceTier` setting.
+     */
+    parentServiceTier?: ServiceTier | null;
     /** Override local:// protocol options so subagent shares parent's local:// root */
     localProtocolOptions?: LocalProtocolOptions;
     /**
@@ -188,7 +196,7 @@ export declare function finalizeSubprocessOutput(args: FinalizeSubprocessOutputA
  * Create proxy tools that reuse the parent's MCP connections.
  */
 export declare function createMCPProxyTools(mcpManager: MCPManager): CustomTool[];
-export declare function createSubagentSettings(baseSettings: Settings, overrides?: Partial<Record<SettingPath, unknown>>): Settings;
+export declare function createSubagentSettings(baseSettings: Settings, overrides?: Partial<Record<SettingPath, unknown>>, inheritedServiceTier?: ServiceTier | null): Settings;
 /**
  * Run a single agent in-process.
  */

package/dist/types/task/parallel.d.ts

@@ -33,6 +33,22 @@ export declare function mapWithConcurrencyLimit<T, R>(items: T[], concurrency: n
 export declare class Semaphore {
     #private;
     constructor(max: number);
-    acquire(): Promise<void>;
+    /**
+     * Resolves when a slot is available. Pass an `AbortSignal` so callers that
+     * stop waiting (parent task cancelled, wall-clock budget elapsed) also stop
+     * occupying a queue slot — otherwise a later `release()` would resolve the
+     * abandoned waiter, permanently shrinking effective concurrency for the
+     * remaining lifetime of the process (issue #3464 review feedback).
+     */
+    acquire(signal?: AbortSignal): Promise<void>;
     release(): void;
+    /**
+     * Adjust the maximum concurrency in place. Raising the ceiling immediately
+     * admits queued waiters that now fit; lowering it lets in-flight holders
+     * drain naturally (new acquires keep blocking until `#current` falls below
+     * the new max). Resizing the single shared instance — instead of replacing
+     * it — keeps in-flight slots counted, so a runtime or mixed limit change can
+     * never push concurrency past the cap (issue #3464 review feedback).
+     */
+    resize(max: number): void;
 }

package/dist/types/tools/index.d.ts

@@ -1,6 +1,6 @@
 import type { InMemorySnapshotStore } from "@oh-my-pi/hashline";
 import type { AgentTelemetryConfig, AgentTool } from "@oh-my-pi/pi-agent-core";
-import type { FetchImpl, ImageContent, Model, ToolChoice } from "@oh-my-pi/pi-ai";
+import type { FetchImpl, ImageContent, Model, ServiceTier, ToolChoice } from "@oh-my-pi/pi-ai";
 import type { AsyncJobManager } from "../async/job-manager";
 import type { Rule } from "../capability/rule";
 import type { PromptTemplate } from "../config/prompt-templates";
@@ -191,6 +191,8 @@ export interface ToolSession {
     getActiveModelString?: () => string | undefined;
     /** Get the current session model object (provider/api capabilities), regardless of how it was chosen. */
     getActiveModel?: () => Model | undefined;
+    /** Get the session's live effective service tier (undefined = none). Source of truth for subagent `serviceTierSubagent: inherit`. */
+    getServiceTier?: () => ServiceTier | undefined;
     /** Auth storage for passing to subagents (avoids re-discovery) */
     authStorage?: import("../session/auth-storage").AuthStorage;
     /** Model registry for passing to subagents (avoids re-discovery) */

package/dist/types/utils/clipboard.d.ts

@@ -1,4 +1,14 @@
 import type { ClipboardImage } from "@oh-my-pi/pi-natives";
+/**
+ * Read file paths from the macOS pasteboard's `public.file-url` representation.
+ *
+ * Used to reach the Finder `Cmd+C` pasteboard (which exposes only file URLs,
+ * no plain text or raw image bytes) so an image-file clipboard can be attached
+ * via {@link handleImagePathPaste} instead of falling through to "Clipboard is
+ * empty". Returns an empty array on non-darwin platforms, when AppleScript is
+ * unavailable, or when the pasteboard holds no file URLs.
+ */
+export declare function readMacFileUrlsFromClipboard(): Promise<string[]>;
 /**
  * Copy text to the system clipboard.
  *

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@oh-my-pi/pi-coding-agent",
-	"version": "16.1.19",
+	"version": "16.1.21",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://omp.sh",
 	"author": "Can Boluk",
@@ -35,7 +35,7 @@
 		"check": "biome check . && bun run check:types",
 		"check:types": "tsgo -p tsconfig.json --noEmit",
 		"lint": "biome lint .",
-		"test": "bun test --parallel=4 test src",
+		"test": "bun ../../scripts/ci-test-ts.ts coding-agent-heavy --full",
 		"fix": "biome check --write --unsafe . && bun run format-prompts",
 		"fmt": "biome format --write . && bun run format-prompts",
 		"format-prompts": "bun scripts/format-prompts.ts",
@@ -48,17 +48,17 @@
 		"@agentclientprotocol/sdk": "0.25.0",
 		"@babel/parser": "^7.29.7",
 		"@mozilla/readability": "^0.6.0",
-		"@oh-my-pi/hashline": "16.1.19",
-		"@oh-my-pi/omp-stats": "16.1.19",
-		"@oh-my-pi/pi-agent-core": "16.1.19",
-		"@oh-my-pi/pi-ai": "16.1.19",
-		"@oh-my-pi/pi-catalog": "16.1.19",
-		"@oh-my-pi/pi-mnemopi": "16.1.19",
-		"@oh-my-pi/pi-natives": "16.1.19",
-		"@oh-my-pi/pi-tui": "16.1.19",
-		"@oh-my-pi/pi-utils": "16.1.19",
-		"@oh-my-pi/pi-wire": "16.1.19",
-		"@oh-my-pi/snapcompact": "16.1.19",
+		"@oh-my-pi/hashline": "16.1.21",
+		"@oh-my-pi/omp-stats": "16.1.21",
+		"@oh-my-pi/pi-agent-core": "16.1.21",
+		"@oh-my-pi/pi-ai": "16.1.21",
+		"@oh-my-pi/pi-catalog": "16.1.21",
+		"@oh-my-pi/pi-mnemopi": "16.1.21",
+		"@oh-my-pi/pi-natives": "16.1.21",
+		"@oh-my-pi/pi-tui": "16.1.21",
+		"@oh-my-pi/pi-utils": "16.1.21",
+		"@oh-my-pi/pi-wire": "16.1.21",
+		"@oh-my-pi/snapcompact": "16.1.21",
 		"@opentelemetry/api": "^1.9.1",
 		"@opentelemetry/context-async-hooks": "^2.7.1",
 		"@opentelemetry/exporter-trace-otlp-proto": "^0.218.0",

package/scripts/generate-legacy-pi-bundled-registry.ts

@@ -117,6 +117,15 @@ function isSafeWildcardBasename(basename: string): boolean {
 	return true;
 }
 
+// Worker entry modules intentionally throw when imported outside a Worker. The
+// bundled registry loads on the main thread during legacy extension validation,
+// so these exported subpaths must stay out of the static registry.
+const MAIN_THREAD_UNSAFE_WILDCARD_BASENAMES = new Set(["worker-entry"]);
+
+function isMainThreadSafeWildcardBasename(basename: string): boolean {
+	return !MAIN_THREAD_UNSAFE_WILDCARD_BASENAMES.has(basename);
+}
+
 interface WildcardPattern {
 	readonly exportPrefix: string;
 	readonly exportSuffix: string;
@@ -217,6 +226,7 @@ async function collectEntries(): Promise<RegistryEntry[]> {
 					if (!match.endsWith(pattern.sourceSuffix)) continue;
 					const basename = match.slice(0, match.length - pattern.sourceSuffix.length);
 					if (!isSafeWildcardBasename(basename)) continue;
+					if (!isMainThreadSafeWildcardBasename(basename)) continue;
 					if (basename.includes("/")) continue;
 					const subpath = `${pattern.exportPrefix}${basename}${pattern.exportSuffix}`;
 					const key = `${pkg.name}/${subpath}`;

package/src/advisor/__tests__/advisor.test.ts

@@ -199,6 +199,50 @@ describe("advisor", () => {
 			expect(result.useless).toBe(true);
 		});
 
+		it("suppresses duplicate advice notes from the same advisor session", async () => {
+			const onAdvice = vi.fn();
+			const tool = new AdviseTool(onAdvice);
+			const note = "I'll pause here and wait for the YAML revision.";
+
+			await tool.execute("tc-1", { note, severity: "nit" });
+			await tool.execute("tc-2", { note, severity: "nit" });
+
+			expect(onAdvice).toHaveBeenCalledTimes(1);
+			expect(onAdvice).toHaveBeenCalledWith(note, "nit");
+		});
+
+		it("allows the same advice after delivered-note memory resets", async () => {
+			const onAdvice = vi.fn();
+			const tool = new AdviseTool(onAdvice);
+			const note = "Acknowledged.";
+
+			await tool.execute("tc-1", { note, severity: "nit" });
+			tool.resetDeliveredNotes();
+			await tool.execute("tc-2", { note, severity: "nit" });
+
+			expect(onAdvice).toHaveBeenCalledTimes(2);
+			expect(onAdvice).toHaveBeenNthCalledWith(1, note, "nit");
+			expect(onAdvice).toHaveBeenNthCalledWith(2, note, "nit");
+		});
+
+		it("forwards escalations of an already-delivered note and suppresses downgrades", async () => {
+			const onAdvice = vi.fn();
+			const tool = new AdviseTool(onAdvice);
+			const note = "Rename collides with the existing helper.";
+
+			await tool.execute("tc-1", { note, severity: "nit" });
+			await tool.execute("tc-2", { note, severity: "concern" });
+			await tool.execute("tc-3", { note, severity: "blocker" });
+			// De-escalation back to nit or concern is treated as a duplicate.
+			await tool.execute("tc-4", { note, severity: "concern" });
+			await tool.execute("tc-5", { note, severity: "nit" });
+
+			expect(onAdvice).toHaveBeenCalledTimes(3);
+			expect(onAdvice).toHaveBeenNthCalledWith(1, note, "nit");
+			expect(onAdvice).toHaveBeenNthCalledWith(2, note, "concern");
+			expect(onAdvice).toHaveBeenNthCalledWith(3, note, "blocker");
+		});
+
 		it("validates parameters using ArkType", () => {
 			const onAdvice = vi.fn();
 			const tool = new AdviseTool(onAdvice);

package/src/advisor/advise-tool.ts

@@ -139,15 +139,37 @@ export function deriveAdvisorTelemetry(
  */
 export const ADVISOR_READONLY_TOOL_NAMES: ReadonlySet<string> = new Set(["read", "search", "find"]);
 
+function advisorNoteDedupeKey(note: string): string {
+	return note.trim().replace(/\s+/g, " ");
+}
+
+/** Rank advisor severities so the dedupe state can detect a real escalation
+ *  (nit → concern → blocker) versus a verbatim repeat. `undefined` defers to
+ *  `nit` because the schema treats an omitted severity as a plain nit. */
+const ADVISOR_SEVERITY_RANK: Record<AdvisorSeverity, number> = { nit: 1, concern: 2, blocker: 3 };
+function advisorSeverityRank(severity: AdvisorSeverity | undefined): number {
+	return ADVISOR_SEVERITY_RANK[severity ?? "nit"];
+}
+
 export class AdviseTool implements AgentTool<typeof adviseSchema, AdviseDetails> {
 	readonly name = "advise";
 	readonly label = "Advise";
 	readonly description = adviseDescription;
 	readonly parameters = adviseSchema;
 	readonly intent = "omit" as const;
+	/** Highest delivered severity rank per normalized note. A new call passes
+	 *  through only when its rank strictly exceeds the recorded one (a real
+	 *  escalation: nit → concern → blocker), so an advisor cannot bypass dedupe
+	 *  by retagging the same text at a lower or equal severity. */
+	#deliveredNoteSeverities = new Map<string, number>();
 
 	constructor(private readonly onAdvice: (note: string, severity?: AdviseDetails["severity"]) => void) {}
 
+	/** Clear delivered-note memory when the advisor starts a fresh conversation. */
+	resetDeliveredNotes(): void {
+		this.#deliveredNoteSeverities.clear();
+	}
+
 	async execute(
 		_toolCallId: string,
 		args: AdviseParams,
@@ -155,6 +177,17 @@ export class AdviseTool implements AgentTool<typeof adviseSchema, AdviseDetails>
 		_onUpdate?: AgentToolUpdateCallback<AdviseDetails>,
 		_context?: AgentToolContext,
 	): Promise<AgentToolResult<AdviseDetails>> {
+		const key = advisorNoteDedupeKey(args.note);
+		const rank = advisorSeverityRank(args.severity);
+		const previousRank = this.#deliveredNoteSeverities.get(key) ?? 0;
+		if (rank <= previousRank) {
+			return {
+				content: [{ type: "text", text: "Duplicate advice ignored." }],
+				details: { note: args.note, severity: args.severity },
+				useless: true,
+			};
+		}
+		this.#deliveredNoteSeverities.set(key, rank);
 		this.onAdvice(args.note, args.severity);
 		return {
 			content: [{ type: "text", text: "Recorded." }],