@oh-my-pi/pi-coding-agent 16.1.8 → 16.1.9

package/dist/types/cli/flag-tables.d.ts

@@ -124,3 +124,20 @@ export declare const PROFILE_BOOTSTRAP_BOUNDARY_ARG = "--omp-profile-boundary";
  * fires for `--`-prefixed tokens.
  */
 export declare const VALUELESS_FLAGS: ReadonlySet<string>;
+/**
+ * Whether a bare long option (`--xxx`, no `=`) is unclassified — not a known
+ * string-, optional-, or value-less flag. The bootstrap and subcommand
+ * resolver treat these as possible extension string flags that may consume a
+ * value-like successor (the extension flag table is not yet loaded). Shared so
+ * both call sites classify identically.
+ */
+export declare function isUnknownLongValueCandidate(arg: string): boolean;
+/**
+ * Whether a leading option `flag` consumes the following argv token `next` as
+ * its value, applying the same contract as `extractProfileFlags` / `parseArgs`.
+ * Single source of truth so subcommand detection ({@link resolveCliArgv}) skips
+ * a flag's value instead of mistaking it for the subcommand — `omp --model acp`
+ * means model `acp`, not the `acp` subcommand, exactly as the launch parser
+ * reads it.
+ */
+export declare function flagConsumesValue(flag: string, next: string | undefined): boolean;

package/dist/types/cli-commands.d.ts

@@ -25,7 +25,9 @@ export type ResolvedCliArgv = {
 };
 /**
  * Decide what the CLI runner should do with raw argv: reject bare reserved
- * management words, pass help/version through untouched, and route everything
- * that is not a known subcommand to `launch`.
+ * management words, pass help/version through untouched, route a recognized
+ * subcommand (even behind leading global flags like `--approval-mode=yolo`) to
+ * that command with the flags preserved, and forward everything else to
+ * `launch` (#2970).
  */
 export declare function resolveCliArgv(argv: string[]): ResolvedCliArgv;

package/dist/types/modes/controllers/command-controller.d.ts

@@ -11,7 +11,7 @@ export declare class CommandController {
     constructor(ctx: InteractiveModeContext);
     openInBrowser(urlOrPath: string): void;
     handleExportCommand(text: string): Promise<void>;
-    handleDumpCommand(): void;
+    handleDumpCommand(): Promise<void>;
     handleAdvisorDumpCommand(isRaw?: boolean): void;
     handleDebugTranscriptCommand(): Promise<void>;
     handleShareCommand(): Promise<void>;

package/dist/types/modes/interactive-mode.d.ts

@@ -271,7 +271,7 @@ export declare class InteractiveMode implements InteractiveModeContext {
     findLastAssistantMessage(): AssistantMessage | undefined;
     extractAssistantText(message: AssistantMessage): string;
     handleExportCommand(text: string): Promise<void>;
-    handleDumpCommand(): void;
+    handleDumpCommand(): Promise<void>;
     handleAdvisorDumpCommand(isRaw?: boolean): void;
     handleDebugTranscriptCommand(): Promise<void>;
     handleShareCommand(): Promise<void>;

package/dist/types/modes/types.d.ts

@@ -270,7 +270,7 @@ export interface InteractiveModeContext {
     handleHotkeysCommand(): void;
     handleToolsCommand(): void;
     handleContextCommand(): void;
-    handleDumpCommand(): void;
+    handleDumpCommand(): Promise<void>;
     handleAdvisorDumpCommand(isRaw?: boolean): void;
     handleDebugTranscriptCommand(): Promise<void>;
     handleClearCommand(): Promise<void>;

package/dist/types/session/agent-session.d.ts

@@ -1203,6 +1203,19 @@ export declare class AgentSession {
      * `### Tool Call`/`### Tool Result`).
      */
     formatSessionAsText(): string;
+    /**
+     * Dump the current session's LLM-facing request context as JSON to a
+     * auto-named file in `os.tmpdir()`. This is the synchronous
+     * `convertToLlm`-boundary snapshot — system prompt, tools (wire schemas),
+     * thinking/service tier, and converted messages — with no network round-trip
+     * and no arming flag, so advisor/side requests cannot intercept it.
+     *
+     * The file persists on disk and may contain the same raw context/secrets
+     * as `/dump`; treat the path accordingly.
+     *
+     * @returns the written file path, or `undefined` when there are no messages.
+     */
+    dumpLlmRequestToTmpDir(): Promise<string | undefined>;
     /**
      * Enable or disable the advisor for this session. The setting is overridden for the session,
      * and the runtime is started or stopped to match.

package/dist/types/tools/browser/launch.d.ts

@@ -37,9 +37,14 @@ export interface UserAgentOverride {
             version: string;
         }>;
         fullVersion: string;
+        fullVersionList: Array<{
+            brand: string;
+            version: string;
+        }>;
         platform: string;
         platformVersion: string;
         architecture: string;
+        bitness: string;
         model: string;
         mobile: boolean;
     };

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@oh-my-pi/pi-coding-agent",
-	"version": "16.1.8",
+	"version": "16.1.9",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://omp.sh",
 	"author": "Can Boluk",
@@ -48,17 +48,17 @@
 		"@agentclientprotocol/sdk": "0.25.0",
 		"@babel/parser": "^7.29.7",
 		"@mozilla/readability": "^0.6.0",
-		"@oh-my-pi/hashline": "16.1.8",
-		"@oh-my-pi/omp-stats": "16.1.8",
-		"@oh-my-pi/pi-agent-core": "16.1.8",
-		"@oh-my-pi/pi-ai": "16.1.8",
-		"@oh-my-pi/pi-catalog": "16.1.8",
-		"@oh-my-pi/pi-mnemopi": "16.1.8",
-		"@oh-my-pi/pi-natives": "16.1.8",
-		"@oh-my-pi/pi-tui": "16.1.8",
-		"@oh-my-pi/pi-utils": "16.1.8",
-		"@oh-my-pi/pi-wire": "16.1.8",
-		"@oh-my-pi/snapcompact": "16.1.8",
+		"@oh-my-pi/hashline": "16.1.9",
+		"@oh-my-pi/omp-stats": "16.1.9",
+		"@oh-my-pi/pi-agent-core": "16.1.9",
+		"@oh-my-pi/pi-ai": "16.1.9",
+		"@oh-my-pi/pi-catalog": "16.1.9",
+		"@oh-my-pi/pi-mnemopi": "16.1.9",
+		"@oh-my-pi/pi-natives": "16.1.9",
+		"@oh-my-pi/pi-tui": "16.1.9",
+		"@oh-my-pi/pi-utils": "16.1.9",
+		"@oh-my-pi/pi-wire": "16.1.9",
+		"@oh-my-pi/snapcompact": "16.1.9",
 		"@opentelemetry/api": "^1.9.1",
 		"@opentelemetry/context-async-hooks": "^2.7.1",
 		"@opentelemetry/exporter-trace-otlp-proto": "^0.218.0",

package/src/cli/args.ts

@@ -298,7 +298,6 @@ export function getExtraHelpText(): string {
   OPENCODE_API_KEY           - OpenCode Zen/OpenCode Go models
   CURSOR_ACCESS_TOKEN        - Cursor AI models
   AI_GATEWAY_API_KEY         - Vercel AI Gateway
-  WAFER_PASS_API_KEY         - Wafer Pass (flat-rate subscription; GLM-5.1, Qwen3.5)
   WAFER_SERVERLESS_API_KEY   - Wafer Serverless (pay-as-you-go)
 
   ${chalk.dim("# Cloud Providers")}

package/src/cli/flag-tables.ts

@@ -278,3 +278,45 @@ export const VALUELESS_FLAGS: ReadonlySet<string> = new Set([
 	"--auto-approve",
 	"--yolo",
 ]);
+
+/**
+ * Whether a bare long option (`--xxx`, no `=`) is unclassified — not a known
+ * string-, optional-, or value-less flag. The bootstrap and subcommand
+ * resolver treat these as possible extension string flags that may consume a
+ * value-like successor (the extension flag table is not yet loaded). Shared so
+ * both call sites classify identically.
+ */
+export function isUnknownLongValueCandidate(arg: string): boolean {
+	return (
+		arg.startsWith("--") &&
+		!arg.includes("=") &&
+		!STRING_VALUE_FLAGS.has(arg) &&
+		!OPTIONAL_VALUE_FLAGS.has(arg) &&
+		!VALUELESS_FLAGS.has(arg)
+	);
+}
+
+/**
+ * Whether a leading option `flag` consumes the following argv token `next` as
+ * its value, applying the same contract as `extractProfileFlags` / `parseArgs`.
+ * Single source of truth so subcommand detection ({@link resolveCliArgv}) skips
+ * a flag's value instead of mistaking it for the subcommand — `omp --model acp`
+ * means model `acp`, not the `acp` subcommand, exactly as the launch parser
+ * reads it.
+ */
+export function flagConsumesValue(flag: string, next: string | undefined): boolean {
+	// `--flag=value` carries its own value inline.
+	if (flag.startsWith("--") && flag.includes("=")) return false;
+	if (next === undefined) return false;
+	// Known string flags consume any successor, even a flag-looking one
+	// (`--system-prompt --foo` ⇒ the system prompt is literally `--foo`).
+	if (STRING_VALUE_FLAGS.has(flag)) return true;
+	const valueLike = !next.startsWith("-");
+	if (EXTENSION_SHADOWABLE_STRING_FLAGS.has(flag)) return valueLike;
+	if (OPTIONAL_VALUE_FLAGS.has(flag)) {
+		const config = OPTIONAL_FLAGS[flag];
+		return valueLike && !(config.rejectEmpty === true && next.length === 0);
+	}
+	if (isUnknownLongValueCandidate(flag)) return valueLike;
+	return false;
+}

package/src/cli/profile-bootstrap.ts

@@ -36,27 +36,17 @@
 import { isSubcommand } from "../cli-commands";
 import {
 	EXTENSION_SHADOWABLE_STRING_FLAGS,
+	isUnknownLongValueCandidate,
 	OPTIONAL_FLAGS,
 	OPTIONAL_VALUE_FLAGS,
 	PROFILE_BOOTSTRAP_BOUNDARY_ARG,
 	STRING_VALUE_FLAGS,
-	VALUELESS_FLAGS,
 } from "./flag-tables";
 
 function isProfileBootstrapSubcommand(arg: string): boolean {
 	return arg === "launch" || arg === "acp";
 }
 
-function isUnknownLongValueCandidate(arg: string): boolean {
-	return (
-		arg.startsWith("--") &&
-		!arg.includes("=") &&
-		!STRING_VALUE_FLAGS.has(arg) &&
-		!OPTIONAL_VALUE_FLAGS.has(arg) &&
-		!VALUELESS_FLAGS.has(arg)
-	);
-}
-
 function needsBoundaryAfterGlobalStrip(stripped: readonly string[]): boolean {
 	const previous = stripped[stripped.length - 1];
 	return (

package/src/cli-commands.ts

@@ -9,6 +9,7 @@
  * regression that motivated the split.
  */
 import type { CommandEntry } from "@oh-my-pi/pi-utils/cli";
+import { flagConsumesValue } from "./cli/flag-tables";
 
 export const commands: CommandEntry[] = [
 	{ name: "launch", load: () => import("./commands/launch").then(m => m.default) },
@@ -44,11 +45,26 @@ export const commands: CommandEntry[] = [
 	{ name: "search", load: () => import("./commands/web-search").then(m => m.default), aliases: ["q"] },
 ];
 
+// Documented-looking plugin-management verbs that are NOT registered top-level
+// commands. Without a guard `resolveCliArgv` rewrites e.g. `omp list` to
+// `omp launch list`, silently forwarding the bare verb to the model as a prompt
+// instead of managing plugins (#2935; same class as the `install` leak fixed in
+// #1496/#1498). A bare (single-arg) use gets a hint pointing at the real
+// `omp plugin <action>` command; multi-word invocations still fall through to
+// `launch`, so genuine prompts that merely begin with one of these words work.
 const RESERVED_TOP_LEVEL_WORDS = new Map<string, string>([
 	[
 		"extensions",
 		'`omp extensions` is not a management command. Use `omp plugin list` / `omp plugin install`, or run `omp launch extensions` if you meant to send "extensions" as a prompt.',
 	],
+	[
+		"list",
+		'`omp list` is not a top-level command. Use `omp plugin list` to list installed plugins, or run `omp launch list` if you meant to send "list" as a prompt.',
+	],
+	[
+		"remove",
+		'`omp remove` is not a top-level command. Use `omp plugin uninstall <name>` to remove a plugin, or run `omp launch remove` if you meant to send "remove" as a prompt.',
+	],
 ]);
 
 export function reservedTopLevelWordMessage(first: string | undefined, argc = 1): string | undefined {
@@ -69,10 +85,29 @@ export function isSubcommand(first: string | undefined): boolean {
 
 export type ResolvedCliArgv = { argv: string[] } | { error: string };
 
+/**
+ * Index of the first argv token that names a registered subcommand, skipping
+ * leading global option flags (and any value they consume) with the same
+ * contract as the launch parser ({@link flagConsumesValue}). Returns -1 when
+ * scanning hits a non-subcommand positional, an end-of-options `--`, or the end
+ * of argv first.
+ */
+function leadingSubcommandIndex(argv: string[]): number {
+	for (let index = 0; index < argv.length; index += 1) {
+		const arg = argv[index];
+		if (arg === "--") return -1;
+		if (!arg.startsWith("-")) return isSubcommand(arg) ? index : -1;
+		if (flagConsumesValue(arg, argv[index + 1])) index += 1;
+	}
+	return -1;
+}
+
 /**
  * Decide what the CLI runner should do with raw argv: reject bare reserved
- * management words, pass help/version through untouched, and route everything
- * that is not a known subcommand to `launch`.
+ * management words, pass help/version through untouched, route a recognized
+ * subcommand (even behind leading global flags like `--approval-mode=yolo`) to
+ * that command with the flags preserved, and forward everything else to
+ * `launch` (#2970).
  */
 export function resolveCliArgv(argv: string[]): ResolvedCliArgv {
 	const first = argv[0];
@@ -81,5 +116,15 @@ export function resolveCliArgv(argv: string[]): ResolvedCliArgv {
 	if (first === "--help" || first === "-h" || first === "--version" || first === "-v" || first === "help") {
 		return { argv };
 	}
-	return { argv: isSubcommand(first) ? argv : ["launch", ...argv] };
+	if (isSubcommand(first)) return { argv };
+	// A subcommand can hide behind leading global option flags
+	// (`omp --approval-mode=yolo acp`). `run` dispatches strictly on argv[0], so
+	// hoist the subcommand to the front and keep the leading flags as its own
+	// argv; the command's parser then applies them. Genuine launch prompts (no
+	// trailing subcommand) are untouched.
+	const subIndex = leadingSubcommandIndex(argv);
+	if (subIndex >= 0) {
+		return { argv: [argv[subIndex], ...argv.slice(0, subIndex), ...argv.slice(subIndex + 1)] };
+	}
+	return { argv: ["launch", ...argv] };
 }

package/src/config/model-registry.ts

@@ -24,12 +24,6 @@ import {
 	resolveVariantAlias,
 } from "@oh-my-pi/pi-catalog/variant-collapse";
 
-// Sentinels for local-only OAuth tokens — declared inline to avoid loading
-// provider modules at startup. Must match packages/ai/src/registry/lm-studio.ts
-// and packages/ai/src/registry/vllm.ts.
-const DEFAULT_LOCAL_TOKEN = "lm-studio-local";
-const DEFAULT_VLLM_LOCAL_TOKEN = "vllm-local";
-
 const SPECIAL_MODEL_MANAGER_PROVIDER_IDS: readonly string[] = [
 	"google-antigravity",
 	"google-gemini-cli",
@@ -41,6 +35,11 @@ const STARTUP_MODEL_CACHE_PROVIDER_IDS: readonly string[] = [
 	...SPECIAL_MODEL_MANAGER_PROVIDER_IDS,
 ];
 
+// Sentinels for local-only OAuth tokens — declared inline to avoid loading
+// provider modules at startup. Must match packages/ai/src/registry/llama-cpp.ts,
+// packages/ai/src/registry/lm-studio.ts, and packages/ai/src/registry/vllm.ts.
+const LOCAL_PROVIDER_PLACEHOLDERS = new Set<string>(["llama-cpp-local", "lm-studio-local", "vllm-local"]);
+
 import type { ApiKeyResolver, FetchImpl } from "@oh-my-pi/pi-ai";
 import { registerOAuthProvider, unregisterOAuthProviders } from "@oh-my-pi/pi-ai/oauth";
 import type { OAuthCredentials, OAuthLoginCallbacks } from "@oh-my-pi/pi-ai/oauth/types";
@@ -85,7 +84,7 @@ export function isAuthenticated(apiKey: string | undefined | null): apiKey is st
 }
 
 function isDiscoveryBearerApiKey(apiKey: string | undefined | null): apiKey is string {
-	return isAuthenticated(apiKey) && apiKey !== DEFAULT_LOCAL_TOKEN && apiKey !== DEFAULT_VLLM_LOCAL_TOKEN;
+	return isAuthenticated(apiKey) && !LOCAL_PROVIDER_PLACEHOLDERS.has(apiKey);
 }
 
 /** Provider override config (baseUrl, headers, apiKey, compat, transport) without custom models */