@oh-my-pi/pi-coding-agent 17.0.8 → 17.0.9

package/dist/types/config/__tests__/model-registry.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/config/model-registry.d.ts

@@ -78,6 +78,23 @@ export declare class ModelRegistry {
      */
     refresh(strategy?: ModelRefreshStrategy): Promise<void>;
     refreshInBackground(strategy?: ModelRefreshStrategy): void;
+    /**
+     * Wait for any in-flight background model discovery to settle.
+     *
+     * Background discovery started by {@link refreshInBackground} is
+     * fire-and-forget; RPC consumers (e.g. `get_available_models`,
+     * `set_model`) and deferred `--model` resolution that read the registry
+     * immediately after session creation can otherwise observe a partial
+     * catalog before discovery-backed providers have populated `#models`.
+     * Awaiting the tracked promise ensures the response reflects every
+     * configured provider once the initial background refresh resolves.
+     *
+     * No-op when no refresh is in flight (`#backgroundRefresh` cleared in the
+     * `finally` of `refreshInBackground` on completion). Resolves immediately
+     * in that case so already-warm sessions are unaffected. Discovery errors
+     * remain swallowed by `refreshInBackground`'s existing `.catch`.
+     */
+    awaitBackgroundRefresh(): Promise<void>;
     refreshProvider(providerId: string, strategy?: ModelRefreshStrategy): Promise<void>;
     /**
      * Refresh dynamic metadata that can appear only after a local model loads.
@@ -132,6 +149,16 @@ export declare class ModelRegistry {
      */
     hasCommandBackedApiKey(provider: string): boolean;
     getDiscoverableProviders(): string[];
+    /**
+     * Whether `providerId` is known to the registry: it has at least one live
+     * model, or it is configured for dynamic discovery (models.yml `discovery:`
+     * or a runtime extension provider) and is not disabled. Discovery-only
+     * providers can hold zero models at startup — cached rows never persist
+     * live auth headers (#5780), so a provider whose discovered models all
+     * carry config headers (`authHeader: true`) only materializes models after
+     * the online refresh completes.
+     */
+    hasProvider(providerId: string): boolean;
     getProviderDiscoveryState(provider: string): ProviderDiscoveryState | undefined;
     /**
      * Find a model by provider and ID.

package/dist/types/config/settings-schema.d.ts

@@ -62,6 +62,8 @@ interface UiNumber extends UiBase {
     options?: ReadonlyArray<SubmenuOption>;
 }
 interface UiString extends UiBase {
+    /** Mask the value in both the settings row and text editor. */
+    secret?: boolean;
     /**
      * Submenu options.
      *  - Array  → submenu with these choices.
@@ -73,6 +75,7 @@ interface UiString extends UiBase {
 /** Wide ui shape exposed to consumers that walk the schema generically. */
 export type AnyUiMetadata = UiBase & {
     options?: ReadonlyArray<SubmenuOption> | "runtime";
+    secret?: boolean;
 };
 interface BooleanDef {
     type: "boolean";
@@ -2839,6 +2842,14 @@ export declare const SETTINGS_SCHEMA: {
     readonly "hindsight.apiToken": {
         readonly type: "string";
         readonly default: undefined;
+        readonly ui: {
+            readonly tab: "memory";
+            readonly group: "Hindsight";
+            readonly label: "Hindsight API Token";
+            readonly description: "Bearer token for authenticated Hindsight servers";
+            readonly condition: "hindsightActive";
+            readonly secret: true;
+        };
     };
     readonly "hindsight.bankId": {
         readonly type: "string";
@@ -4050,6 +4061,16 @@ export declare const SETTINGS_SCHEMA: {
             readonly description: "Load .mcp.json/mcp.json from project root";
         };
     };
+    readonly "mcp.renderMarkdownResults": {
+        readonly type: "boolean";
+        readonly default: true;
+        readonly ui: {
+            readonly tab: "tools";
+            readonly group: "Discovery & MCP";
+            readonly label: "MCP Markdown Results";
+            readonly description: "Render non-JSON MCP text results as Markdown in the transcript";
+        };
+    };
     readonly "mcp.notifications": {
         readonly type: "boolean";
         readonly default: false;
@@ -4183,6 +4204,16 @@ export declare const SETTINGS_SCHEMA: {
             }];
         };
     };
+    readonly "task.isolation.apply": {
+        readonly type: "boolean";
+        readonly default: true;
+        readonly ui: {
+            readonly tab: "tasks";
+            readonly group: "Isolation";
+            readonly label: "Apply Isolated Changes";
+            readonly description: "Automatically apply successful isolated task changes to the parent checkout; disable to retain patch or branch artifacts";
+        };
+    };
     readonly "task.isolation.merge": {
         readonly type: "enum";
         readonly values: readonly ["patch", "branch"];
@@ -4648,7 +4679,7 @@ export declare const SETTINGS_SCHEMA: {
             }, {
                 readonly value: "firecrawl";
                 readonly label: "Firecrawl";
-                readonly description: "Requires FIRECRAWL_API_KEY";
+                readonly description: "Uses Firecrawl API when FIRECRAWL_API_KEY is set; falls back to keyless mode";
             }, {
                 readonly value: "brave";
                 readonly label: "Brave";
@@ -5486,12 +5517,12 @@ export declare const SETTINGS_SCHEMA: {
     };
     readonly "dev.autoqa": {
         readonly type: "boolean";
-        readonly default: false;
+        readonly default: true;
         readonly ui: {
             readonly tab: "tools";
             readonly group: "Developer";
             readonly label: "Auto QA";
-            readonly description: "Enable automated tool issue reporting (report_tool_issue) for all agents";
+            readonly description: "Automated tool issue reporting (xd://report_issue). On by default; the first report asks for consent, and denying it disables reporting until re-enabled explicitly";
         };
     };
     readonly "dev.autoqaPush.endpoint": {

package/dist/types/extensibility/legacy-pi-coding-agent-shim.d.ts

@@ -371,4 +371,5 @@ export { getProjectDir } from "@oh-my-pi/pi-utils";
 export declare function getPackageDir(): string;
 export * from "../index.js";
 export { formatBytes as formatSize } from "../tools/render-utils.js";
+export { copyToClipboard } from "../utils/clipboard.js";
 export { Type } from "./typebox.js";

package/dist/types/extensibility/legacy-pi-tui-shim.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Compatibility shim for legacy extensions importing the package root of
+ * `@earendil-works/pi-tui` or `@mariozechner/pi-tui`.
+ *
+ * The historical root exported `decodeKittyPrintable`; the canonical TUI now
+ * exposes the equivalent, broader `decodePrintableKey` helper. Keep the legacy
+ * name available without reintroducing it into the canonical package surface.
+ */
+export * from "@oh-my-pi/pi-tui";
+export { decodePrintableKey as decodeKittyPrintable } from "@oh-my-pi/pi-tui";

package/dist/types/extensibility/plugins/legacy-pi-compat.d.ts

@@ -57,7 +57,7 @@ export declare function __validateLegacyPiPackageRootOverrides(candidates: Recor
  */
 export declare function __buildLegacyPiPackageRootOverrides(isCompiled: boolean, bundledModuleKeys?: Iterable<string>): Record<string, string>;
 /** Test seam for compiled-binary legacy extension source rewriting. */
-export declare function __rewriteLegacyExtensionSourceForTests(source: string, importerPath: string, mtimeTag?: string | null): Promise<string>;
+export declare function __rewriteLegacyExtensionSourceForTests(source: string, importerPath: string, mtimeTag?: string | null, resolvedImportMtimeTag?: string | null): Promise<string>;
 /**
  * Load a legacy Pi extension module from its real on-disk location.
  *

package/dist/types/internal-urls/registry-helpers.d.ts

@@ -31,3 +31,14 @@ export declare function artifactsDirsFromRegistry(): string[];
  * multiple dirs, the first hit wins (registry dirs are scanned first).
  */
 export declare function sessionFilesFromDisk(): Promise<Map<string, string>>;
+/**
+ * Availability half of the `history://` resolution semantics: true when a
+ * transcript for `agentId` can be served from a registered ref's live session
+ * or retained session file, or from an on-disk `.jsonl` under a known
+ * artifacts dir. Hint surfaces use this so they only advertise
+ * `history://<agentId>` links that `HistoryProtocolHandler` can actually
+ * resolve. A retained sessionFile path is verified on disk before it counts,
+ * and probing never throws: a stale path or unreadable artifacts subtree
+ * reads as unavailable instead of disturbing the caller's delivery path.
+ */
+export declare function hasResolvableTranscript(agentId: string): Promise<boolean>;

package/dist/types/lsp/client.d.ts

@@ -30,6 +30,8 @@ export declare const WARMUP_TIMEOUT_MS = 5000;
  *   timeout/cancel instead of falling back to the internal 30s default.
  */
 export declare function getOrCreateClient(config: ServerConfig, cwd: string, initTimeoutMs?: number, signal?: AbortSignal): Promise<LspClient>;
+/** Return an active or already-starting client without starting a language server. */
+export declare function getActiveOrPendingClient(config: ServerConfig, cwd: string, signal?: AbortSignal): Promise<LspClient | undefined>;
 /**
  * Ensure a file is opened in the LSP client.
  * Sends didOpen notification if the file is not already tracked.

package/dist/types/mcp/manager.d.ts

@@ -5,7 +5,7 @@ import { type AuthStorage } from "../session/auth-storage.js";
 import type { McpConnectionStatusEvent } from "./startup-events.js";
 import type { MCPToolDetails } from "./tool-bridge.js";
 import type { MCPToolCache } from "./tool-cache.js";
-import type { MCPGetPromptResult, MCPPrompt, MCPRequestOptions, MCPResource, MCPResourceReadResult, MCPResourceTemplate, MCPServerConfig, MCPServerConnection } from "./types.js";
+import type { MCPAuthChallenge, MCPGetPromptResult, MCPPrompt, MCPRequestOptions, MCPResource, MCPResourceReadResult, MCPResourceTemplate, MCPServerConfig, MCPServerConnection } from "./types.js";
 /**
  * Stable, total ordering on MCP tools by name.
  *
@@ -42,6 +42,8 @@ export interface MCPDiscoverOptions {
     /** Called when MCP server connection state changes. */
     onStatus?: (event: McpConnectionStatusEvent) => void;
 }
+/** Handles an MCP `WWW-Authenticate` challenge and returns refreshed config. */
+export type MCPAuthHandler = (serverName: string, challenge: MCPAuthChallenge) => Promise<MCPServerConfig | undefined>;
 /**
  * MCP Server Manager.
  *
@@ -79,6 +81,8 @@ export declare class MCPManager {
      * Set the auth storage for resolving OAuth credentials.
      */
     setAuthStorage(authStorage: AuthStorage): void;
+    /** Set the callback used to complete OAuth after a tool-level auth challenge. */
+    setAuthHandler(handler: MCPAuthHandler | undefined): void;
     /**
      * Discover and connect to all MCP servers from .mcp.json files.
      * Returns tools and any connection errors.
@@ -149,7 +153,6 @@ export declare class MCPManager {
      * the same server share one reconnection attempt. Returns the new
      * connection, or `null` if reconnection failed or the per-server crash
      * burst limit (see {@link RECONNECT_BURST_LIMIT}) is exceeded.
-     *
      * @param options.manual - When `true`, resets the crash-burst window so a
      *   user-driven retry (e.g. `/mcp reconnect`) is never blocked by an
      *   earlier storm. Defaults to `false`; the transport `onClose` callback
@@ -157,6 +160,7 @@ export declare class MCPManager {
      */
     reconnectServer(name: string, options?: {
         manual?: boolean;
+        authChallenge?: MCPAuthChallenge;
     }): Promise<MCPServerConnection | null>;
     /**
      * Refresh tools from a specific server.

package/dist/types/mcp/render.d.ts

@@ -4,9 +4,9 @@
  * Provides structured display of MCP tool calls and results,
  * showing args and output in JSON tree format similar to task tool.
  */
-import type { Component } from "@oh-my-pi/pi-tui";
+import { type Component } from "@oh-my-pi/pi-tui";
 import type { RenderResultOptions } from "../extensibility/custom-tools/types.js";
-import type { Theme } from "../modes/theme/theme.js";
+import { type Theme } from "../modes/theme/theme.js";
 import type { MCPToolDetails } from "./tool-bridge.js";
 /**
  * Render MCP tool call.

package/dist/types/mcp/tool-bridge.d.ts

@@ -9,9 +9,11 @@ import type { SourceMeta } from "../capability/types.js";
 import type { CustomTool, CustomToolContext, CustomToolResult, RenderResultOptions } from "../extensibility/custom-tools/types.js";
 import type { Theme } from "../modes/theme/theme.js";
 import type { OutputMeta } from "../tools/output-meta.js";
-import type { MCPContent, MCPServerConnection, MCPToolDefinition } from "./types.js";
-/** Reconnect callback: tears down stale connection, returns new one or null. */
-export type MCPReconnect = () => Promise<MCPServerConnection | null>;
+import type { MCPAuthChallenge, MCPContent, MCPServerConnection, MCPToolDefinition } from "./types.js";
+/** Reconnect callback: tears down a stale connection, optionally authorizing first. */
+export type MCPReconnect = (options?: {
+    authChallenge?: MCPAuthChallenge;
+}) => Promise<MCPServerConnection | null>;
 export declare function isRetriableConnectionError(error: unknown): boolean;
 /** Details included in MCP tool results for rendering */
 export interface MCPToolDetails {
@@ -23,6 +25,8 @@ export interface MCPToolDetails {
     isError?: boolean;
     /** Raw content from MCP response */
     rawContent?: MCPContent[];
+    /** Structured metadata from the MCP response */
+    mcpMeta?: Record<string, unknown>;
     /** Provider ID (e.g., "claude", "mcp-json") */
     provider?: string;
     /** Provider display name (e.g., "Claude Code", "MCP Config") */

package/dist/types/mcp/types.d.ts

@@ -175,10 +175,16 @@ export interface MCPResourceContent {
     };
 }
 export type MCPContent = MCPTextContent | MCPImageContent | MCPResourceContent;
+/** Structured authentication challenge returned in a tool result. */
+export interface MCPAuthChallenge {
+    /** Values from `_meta["mcp/www_authenticate"]`. */
+    readonly wwwAuthenticate: readonly string[];
+}
 /** tools/call response */
 export interface MCPToolCallResult {
     content: MCPContent[];
     isError?: boolean;
+    _meta?: Record<string, unknown>;
 }
 export interface MCPRequestOptions {
     /** Abort signal (e.g. Escape-to-interrupt) */

package/dist/types/modes/components/oauth-selector.d.ts

@@ -10,6 +10,14 @@ export declare class OAuthSelectorComponent extends Container {
         requestRender?: () => void;
     });
     stopValidation(): void;
+    /**
+     * Fit the selector into `lines` rendered rows by shrinking the visible list
+     * window (the window is centered on the selection, so the selected row is
+     * always visible at any height). Prefers keeping the full chrome — borders,
+     * spacers, title, search status — but sacrifices the trailing spacer/border
+     * (clipped by the host) before dropping below three visible rows.
+     */
+    setMaxHeight(lines: number): void;
     handleInput(keyData: string): void;
     /** Move the selection one step for a wheel notch (clamped, no wrap). */
     handleWheel(delta: -1 | 1): void;

package/dist/types/modes/components/settings-defs.d.ts

@@ -40,6 +40,7 @@ export interface SubmenuSettingDef extends BaseSettingDef {
 }
 export interface TextInputSettingDef extends BaseSettingDef {
     type: "text";
+    secret: boolean;
 }
 export interface ProviderLimitsSettingDef extends BaseSettingDef {
     type: "providerLimits";

package/dist/types/modes/controllers/mcp-command-controller.d.ts

@@ -1,4 +1,5 @@
 import { type Component } from "@oh-my-pi/pi-tui";
+import type { MCPAuthChallenge, MCPServerConfig } from "../../mcp/types.js";
 import type { InteractiveModeContext } from "../types.js";
 /**
  * Renders the MCP OAuth fallback URL. Always shows the full authorization URL
@@ -41,4 +42,6 @@ export declare class MCPCommandController {
      * Handle /mcp command and route to subcommands
      */
     handle(text: string): Promise<void>;
+    /** Reauthorize a server after a tool-level OAuth challenge. */
+    handleMCPAuthChallenge(name: string, challenge: MCPAuthChallenge): Promise<MCPServerConfig | undefined>;
 }

package/dist/types/modes/rpc/rpc-client.d.ts

@@ -8,6 +8,7 @@ import type { CompactionResult } from "@oh-my-pi/pi-agent-core/compaction";
 import type { ImageContent, Model } from "@oh-my-pi/pi-ai";
 import type { BashResult } from "../../exec/bash-executor.js";
 import type { AgentSessionEvent, SessionStats } from "../../session/agent-session.js";
+import { type RpcMessagesPage, type RpcMessagesPageOptions } from "./rpc-messages.js";
 import type { RpcAvailableSlashCommand, RpcHandoffResult, RpcHostToolDefinition, RpcSessionState, RpcSubagentEventFrame, RpcSubagentLifecycleFrame, RpcSubagentMessagesResult, RpcSubagentProgressFrame, RpcSubagentSnapshot, RpcSubagentSubscriptionLevel } from "./rpc-types.js";
 export interface RpcClientOptions {
     /** Path to the CLI entry point (default: searches for dist/cli.js) */
@@ -45,6 +46,12 @@ export interface RpcClientCustomTool<TParams extends Record<string, unknown> = R
     execute(params: TParams, context: RpcClientToolContext<TDetails>): Promise<RpcClientToolResult<TDetails>> | RpcClientToolResult<TDetails>;
 }
 export declare function defineRpcClientTool<TParams extends Record<string, unknown> = Record<string, unknown>, TDetails = unknown>(tool: RpcClientCustomTool<TParams, TDetails>): RpcClientCustomTool<TParams, TDetails>;
+/** Failed RPC command; `code` mirrors the server's machine-readable error code when present. */
+export declare class RpcCommandError extends Error {
+    readonly command: string;
+    readonly code?: string | undefined;
+    constructor(message: string, command: string, code?: string | undefined);
+}
 export declare class RpcClient {
     #private;
     private options;
@@ -254,8 +261,10 @@ export declare class RpcClient {
      */
     getLastAssistantText(): Promise<string | null>;
     /**
-     * Get all messages in the session.
+     * Get one stable, byte-bounded message page.
      */
+    getMessagesPage(options?: RpcMessagesPageOptions): Promise<RpcMessagesPage>;
+    /** Get all messages, draining stable pages when protocol v2 is available. */
     getMessages(): Promise<AgentMessage[]>;
     /**
      * Get list of OAuth providers available for login, with their current authentication status.

package/dist/types/modes/rpc/rpc-frame.d.ts

@@ -1,9 +1,25 @@
 /** Maximum UTF-8 size of one newline-delimited RPC frame, including the newline. */
 export declare const MAX_RPC_FRAME_BYTES: number;
+/** Maximum UTF-8 size of one logical frame reassembled by protocol v2. */
+export declare const MAX_RPC_REASSEMBLED_BYTES: number;
+export type RpcProtocolVersion = 1 | 2;
+/** Reassemble protocol v2 chunk frames after each JSONL line has been parsed. */
+export declare class RpcFrameDecoder {
+    #private;
+    push(value: unknown): object | undefined;
+}
 /** Serialize a complete JSONL frame while enforcing the transport byte ceiling. */
 export declare function encodeRpcFrame(frame: object, streamedMessageCount?: number, streamedMessages?: readonly unknown[]): string;
 /** Stateful encoder that tracks which messages a client has already received. */
 export declare class RpcFrameEncoder {
     #private;
+    setProtocolVersion(version: number): void;
+    /**
+     * Encode one logical frame into physical JSONL lines. Encoder bookkeeping runs
+     * eagerly; only chunk emission is lazy, so a chunked result can be streamed to
+     * stdout with backpressure without holding the whole transport in memory. The
+     * returned iterable MUST be fully consumed exactly once.
+     */
+    encodeFrames(frame: object): Iterable<string>;
     encode(frame: object): string;
 }

package/dist/types/modes/rpc/rpc-messages.d.ts

@@ -0,0 +1,26 @@
+import type { AgentMessage } from "@oh-my-pi/pi-agent-core";
+export declare const RPC_MESSAGES_PAGE_BUSY_ERROR = "Cannot page messages while the session is changing";
+export declare const RPC_MESSAGES_PAGE_STALE_ERROR = "RPC message cursor is stale";
+/** Machine-readable reasons a `get_messages_page` request can fail; carried as `code` on the error response. */
+export type RpcMessagesPageErrorCode = "session_busy" | "stale_cursor";
+/** Paging failure that maps to a structured wire `code`, so clients can react without matching message text. */
+export declare class RpcMessagesPageError extends Error {
+    readonly code: RpcMessagesPageErrorCode;
+    constructor(message: string, code: RpcMessagesPageErrorCode);
+}
+export interface RpcMessageSnapshot {
+    sessionId: string;
+    leafId: string | null;
+    messageCount: number;
+}
+export interface RpcMessagesPage {
+    messages: AgentMessage[];
+    nextCursor?: string;
+    totalMessages: number;
+}
+export interface RpcMessagesPageOptions {
+    cursor?: string;
+    limit?: number;
+}
+/** Page one stable in-memory message snapshot without crossing the v1 frame budget. */
+export declare function pageRpcMessages(messages: readonly AgentMessage[], snapshot: RpcMessageSnapshot, options?: RpcMessagesPageOptions): RpcMessagesPage;

package/dist/types/modes/rpc/rpc-types.d.ts

@@ -14,7 +14,12 @@ import type { FileEntry } from "../../session/session-entries.js";
 import type { AvailableSlashCommandSource } from "../../slash-commands/available-commands.js";
 import type { AgentProgress, SubagentEventPayload, SubagentLifecyclePayload, SubagentProgressPayload } from "../../task/index.js";
 import type { TodoPhase } from "../../tools/todo.js";
+import type { RpcMessagesPage } from "./rpc-messages.js";
 export type RpcCommand = {
+    id?: string;
+    type: "negotiate_protocol";
+    protocolVersion: number;
+} | {
     id?: string;
     type: "prompt";
     message: string;
@@ -157,6 +162,11 @@ export type RpcCommand = {
 } | {
     id?: string;
     type: "get_messages";
+} | {
+    id?: string;
+    type: "get_messages_page";
+    cursor?: string;
+    limit?: number;
 } | {
     id?: string;
     type: "get_login_providers";
@@ -214,6 +224,21 @@ export interface RpcPromptResultFrame {
     id?: string;
     agentInvoked: boolean;
 }
+export interface RpcReadyFrame {
+    type: "ready";
+    protocolVersion: 1;
+    supportedProtocolVersions: [1, 2];
+    maxFrameBytes: number;
+    maxReassembledFrameBytes: number;
+}
+export interface RpcChunkFrame {
+    type: "rpc_chunk";
+    chunkId: string;
+    index: number;
+    count: number;
+    byteLength: number;
+    data: string;
+}
 export interface RpcHandoffResult {
     savedPath?: string;
 }
@@ -241,6 +266,14 @@ export interface RpcSubagentMessagesResult {
     messages: AgentMessage[];
 }
 export type RpcResponse = {
+    id?: string;
+    type: "response";
+    command: "negotiate_protocol";
+    success: true;
+    data: {
+        protocolVersion: 2;
+    };
+} | {
     id?: string;
     type: "response";
     command: "prompt";
@@ -489,6 +522,12 @@ export type RpcResponse = {
     data: {
         messages: AgentMessage[];
     };
+} | {
+    id?: string;
+    type: "response";
+    command: "get_messages_page";
+    success: true;
+    data: RpcMessagesPage;
 } | {
     id?: string;
     type: "response";
@@ -516,6 +555,7 @@ export type RpcResponse = {
     command: string;
     success: false;
     error: string;
+    code?: string;
 };
 export interface RpcSubagentLifecycleFrame {
     type: "subagent_lifecycle";

package/dist/types/modes/setup-wizard/scenes/sign-in.d.ts

@@ -18,5 +18,5 @@ export declare class SignInTab implements SetupTab {
     handleInput(data: string): void;
     /** Forward mouse to the provider selector; pointer is inert during an active login or code prompt. */
     routeMouse(event: SgrMouseEvent, line: number, col: number): void;
-    render(width: number): readonly string[];
+    render(width: number, maxLines?: number): readonly string[];
 }

package/dist/types/modes/setup-wizard/scenes/types.d.ts

@@ -14,6 +14,13 @@ export interface SetupSceneController extends Component {
     onMount?(): void | Promise<void>;
     onUnmount?(): void;
     dispose?(): void;
+    /**
+     * Render the scene body. `maxLines` is the number of body rows the wizard
+     * will actually display (header and footer already subtracted); scenes
+     * shrink list windows and drop decorative chrome so the selected row stays
+     * inside the budget. Overflow beyond `maxLines` is clipped by the wizard.
+     */
+    render(width: number, maxLines?: number): readonly string[];
     /**
      * Route an SGR mouse report (tracking is on while the wizard holds the
      * alternate screen). `line`/`col` are 0-based within this controller's
@@ -34,7 +41,8 @@ export interface SetupTab {
      * login). The parent scene MUST NOT switch tabs or finish while modal.
      */
     readonly modal: boolean;
-    render(width: number): readonly string[];
+    /** See {@link SetupSceneController.render}: `maxLines` is the tab-local row budget. */
+    render(width: number, maxLines?: number): readonly string[];
     handleInput(data: string): void;
     invalidate(): void;
     /** Called when the tab becomes active (including initial mount). */

package/dist/types/modes/setup-wizard/scenes/web-search.d.ts

@@ -19,5 +19,5 @@ export declare class WebSearchTab implements SetupTab {
     routeMouse(event: SgrMouseEvent, line: number, _col: number): void;
     invalidate(): void;
     dispose(): void;
-    render(width: number): readonly string[];
+    render(width: number, maxLines?: number): readonly string[];
 }

package/dist/types/session/agent-session.d.ts

@@ -666,6 +666,8 @@ export declare class AgentSession {
     get state(): AgentState;
     /** Current model (may be undefined if not yet selected) */
     get model(): Model | undefined;
+    /** Resolved selector while retry routing is using a fallback model. */
+    get retryFallbackModel(): string | undefined;
     /** Effective thinking level applied to the agent (the resolved level when `auto`). */
     get thinkingLevel(): ThinkingLevel | undefined;
     /** The selector the user configured: `auto` when auto mode is active, else the effective level. */
@@ -1235,7 +1237,8 @@ export declare class AgentSession {
     setAutoRetryEnabled(enabled: boolean): void;
     /**
      * Manually retry the last failed assistant turn.
-     * Removes the error message from agent state and re-attempts with a fresh retry budget.
+     * Removes the error message from active agent state when present and
+     * re-attempts with a fresh retry budget.
      *
      * A stream that stalls or aborts mid-tool-call ends the turn with
      * `stopReason: "error" | "aborted"` and then appends one synthetic
@@ -1246,6 +1249,10 @@ export declare class AgentSession {
      * checking the assistant message; it strips both the placeholders and the
      * failed turn before re-attempting.
      *
+     * A restored session deliberately omits failed assistant turns from provider
+     * context. In that case, the persisted display transcript remains the source
+     * of truth for whether the current branch has a retryable failed tail.
+     *
      * @returns true if retry was initiated, false if no failed turn to retry or agent is busy
      */
     retry(): Promise<boolean>;

package/dist/types/session/session-loader.d.ts

@@ -21,9 +21,11 @@ export declare function parseSessionEntries(content: string): FileEntry[];
 export declare function loadEntriesFromFile(filePath: string, storage?: SessionStorage): Promise<FileEntry[]>;
 export declare function resolveBlobRefsInEntries(entries: FileEntry[], blobStore: BlobStore): Promise<void>;
 /**
- * Read-only message view of a session file: load entries, migrate to the
- * current version, resolve blob refs, and build the context along the
- * persisted leaf path (last entry). Does NOT create a writer or take the
- * session lock — safe to call against a file another session is writing.
+ * Read-only transcript view of a session file: load entries, migrate to the
+ * current version, resolve blob refs, and build the display transcript along
+ * the persisted leaf path (last entry). Uses transcript mode (collapsed to the
+ * latest compaction) so failed/aborted tail turns stay visible, unlike the
+ * provider-context builder which drops them. Does NOT create a writer or take
+ * the session lock — safe to call against a file another session is writing.
  */
 export declare function loadSessionMessagesReadOnly(filePath: string): Promise<AgentMessage[]>;