@oh-my-pi/pi-coding-agent 17.2.3 → 17.2.4

package/dist/types/advisor/advise-tool.d.ts

@@ -109,6 +109,12 @@ export declare class AdviseTool implements AgentTool<typeof adviseSchema, Advise
     }, {}>;
     readonly intent: "omit";
     constructor(onAdvice: (note: string, severity?: AdviseDetails["severity"]) => void);
+    /**
+     * Mark whether the next advisor prompt reviews an in-progress primary turn.
+     * Non-blockers are withheld until a completed update so partial work does
+     * not interrupt the primary before it can finish its planned steps.
+     */
+    beginUpdate(inProgress: boolean): void;
     /** Clear delivered-note memory when the advisor starts a fresh conversation. */
     resetDeliveredNotes(): void;
     execute(_toolCallId: string, args: AdviseParams, _signal?: AbortSignal, _onUpdate?: AgentToolUpdateCallback<AdviseDetails>, _context?: AgentToolContext): Promise<AgentToolResult<AdviseDetails>>;

package/dist/types/advisor/runtime.d.ts

@@ -41,11 +41,11 @@ export interface AdvisorRuntimeHost {
     maintainContext?(incomingTokens: number, signal: AbortSignal): Promise<boolean>;
     /**
      * Called immediately before each `agent.prompt(batch)` cycle. Lets the host
-     * clear per-update advisor state — currently the one-advise-per-update gate
-     * in {@link AdvisorEmissionGuard}, which the host owns because it is the
-     * one that routes `advise()` results back to the primary.
+     * clear per-update advisor state and apply the in-progress delivery policy.
+     * The host owns these gates because it routes `advise()` results back to the
+     * primary.
      */
-    beginAdvisorUpdate?(): void;
+    beginAdvisorUpdate?(inProgress: boolean): void;
     /**
      * Called with the error of every failed advisor turn, before the retry sleep
      * or the dropped-after-3 path. Lets the host apply credential-level remedies

package/dist/types/capability/mcp.d.ts

@@ -1,3 +1,10 @@
+/**
+ * MCP (Model Context Protocol) Servers Capability
+ *
+ * Canonical shape for MCP server configurations, regardless of source format.
+ * All providers translate their native format to this shape.
+ */
+import type { MCPRequestIdFormat } from "../mcp/types.js";
 import type { SourceMeta } from "./types.js";
 /**
  * Canonical MCP server configuration.
@@ -9,6 +16,8 @@ export interface MCPServer {
     enabled?: boolean;
     /** Connection timeout in milliseconds */
     timeout?: number;
+    /** Encoding for outgoing JSON-RPC request ids (default: `"number"`) */
+    requestIdFormat?: MCPRequestIdFormat;
     /** Command to run (for stdio transport) */
     command?: string;
     /** Command arguments */

package/dist/types/cli/models-cli.d.ts

@@ -37,7 +37,7 @@ export interface RunModelsListingOptions {
     settingsExtensions?: string[];
     /** Disabled extension ids from settings (`disabledExtensions`). */
     disabledExtensionIds?: string[];
-    /** When true, skip discovery and only load `additionalExtensionPaths`. */
+    /** When true, exclude ambient factories and resolve only `additionalExtensionPaths`. */
     disableExtensionDiscovery?: boolean;
 }
 export declare function runModelsListing(options: RunModelsListingOptions): Promise<void>;

package/dist/types/config/keybindings.d.ts

@@ -240,7 +240,7 @@ export declare const KEYBINDINGS: {
         readonly description: "Retry last failed assistant turn";
     };
     readonly "app.message.dequeue": {
-        readonly defaultKeys: "alt+up";
+        readonly defaultKeys: ["alt+up", "shift+up"];
         readonly description: "Dequeue message";
     };
     readonly "app.clipboard.pasteImage": {

package/dist/types/config/settings-schema.d.ts

@@ -4352,7 +4352,7 @@ export declare const SETTINGS_SCHEMA: {
             readonly tab: "tools";
             readonly group: "Discovery & MCP";
             readonly label: "xd:// Tools";
-            readonly description: "Mount rarely-used (discoverable) tools under xd:// device URLs driven via read/write instead of shipping their schemas on every request. Disable to expose every enabled tool top-level.";
+            readonly description: "Mount rarely-used (discoverable) tools under xd:// device URLs driven via read/write instead of shipping their schemas on every request. Sessions without a granted write tool skip mounting and expose every tool top-level. Disable to expose every enabled tool top-level.";
         };
     };
     readonly "tools.xdevDocs": {

package/dist/types/discovery/helpers.d.ts

@@ -2,6 +2,7 @@ import type { ExtensionModule } from "../capability/extension-module.js";
 import { type Rule } from "../capability/rule.js";
 import type { Skill } from "../capability/skill.js";
 import type { LoadContext, LoadResult, SourceMeta } from "../capability/types.js";
+import type { MCPRequestIdFormat } from "../mcp/types.js";
 import { type ConfiguredThinkingLevel } from "../thinking.js";
 /**
  * Standard paths for each config source.
@@ -79,6 +80,11 @@ export declare function resolveCopilotHome(home: string): string;
  */
 export declare function createSourceMeta(provider: string, filePath: string, level: "user" | "project"): SourceMeta;
 export declare function parseBoolean(value: unknown): boolean | undefined;
+/**
+ * Parse an MCP `requestIdFormat` value. Unrecognized values are dropped so a typo
+ * degrades to the default integer ids rather than reaching a transport.
+ */
+export declare function parseRequestIdFormat(value: unknown): MCPRequestIdFormat | undefined;
 /**
  * Parse a comma-separated string into an array of trimmed, non-empty strings.
  */

package/dist/types/discovery/omp-extension-roots.d.ts

@@ -8,6 +8,24 @@ export interface OmpExtensionRoot {
     /** Scope from which the path was sourced. */
     level: "user" | "project";
 }
+export type OmpExtensionRootMode = "merge" | "explicit-only";
+export interface InjectOmpExtensionCliRootOptions {
+    /**
+     * `explicit-only` exposes only roots named by this CLI invocation. Use it
+     * with `--no-extensions` so configured and installed packages cannot
+     * contribute sibling capabilities through the `omp-plugins` provider.
+     */
+    mode?: OmpExtensionRootMode;
+    /** Replace roots from an earlier invocation instead of extending them. */
+    replace?: boolean;
+}
+/**
+ * Run one SDK invocation with its own extension-package roots. Async resources
+ * started inside `callback` retain this scope, including discovery deliberately
+ * deferred until the end of session startup. Raw relative paths are resolved by
+ * {@link listOmpExtensionRoots} against that invocation's active cwd.
+ */
+export declare function withOmpExtensionRootScope<T>(paths: readonly string[], mode: OmpExtensionRootMode, callback: () => T): T;
 /**
  * Register CLI-provided extension package paths (e.g. from `--extension`/`-e`)
  * so the sub-discovery providers can find their sibling `skills/`, `hooks/`,
@@ -17,7 +35,7 @@ export interface OmpExtensionRoot {
  * Call once during startup before any capability load. Repeated calls extend
  * the registered set; {@link clearOmpExtensionCliRoots} resets for tests.
  */
-export declare function injectOmpExtensionCliRoots(paths: readonly string[], home: string, cwd: string): void;
+export declare function injectOmpExtensionCliRoots(paths: readonly string[], home: string, cwd: string, options?: InjectOmpExtensionCliRootOptions): void;
 /** Drop every CLI-injected root. Tests use this between cases. */
 export declare function clearOmpExtensionCliRoots(): void;
 /** Inspect currently-injected CLI roots (read-only). Exposed for diagnostics + tests. */
@@ -28,7 +46,8 @@ export declare function getInjectedOmpExtensionCliRoots(): readonly OmpExtension
  * Sources, in order of precedence (later entries with the same absolute path
  * are dropped):
  *
- * 1. CLI roots injected via {@link injectOmpExtensionCliRoots}
+ * 1. Invocation-scoped SDK roots, when present; otherwise CLI roots injected
+ *    via {@link injectOmpExtensionCliRoots}
  * 2. Project `<cwd>/.omp/settings.json#extensions`
  * 3. User `~/.omp/agent/settings.json#extensions`
  * 4. Enabled npm/link plugins installed under `<plugins>/node_modules/` (for

package/dist/types/extensibility/extensions/loader.d.ts

@@ -53,10 +53,14 @@ export declare function loadExtensions(paths: string[], cwd: string, eventBus?:
  * `LoadExtensionsResult` directly would reuse handlers/tools/commands that
  * closed over the parent's `cwd` and event bus.
  */
-export declare function discoverExtensionPaths(configuredPaths: string[], cwd: string, disabledExtensionIds?: string[]): Promise<string[]>;
+export interface DiscoverExtensionPathOptions {
+    /** Include ambient native extensions, hooks, and installed plugins. */
+    ambient?: boolean;
+}
+export declare function discoverExtensionPaths(configuredPaths: string[], cwd: string, disabledExtensionIds?: string[], options?: DiscoverExtensionPathOptions): Promise<string[]>;
 /**
  * Discover and load extensions from standard locations. Composed of
  * {@link discoverExtensionPaths} (FS scan) + {@link loadExtensions}
  * (per-session binding).
  */
-export declare function discoverAndLoadExtensions(configuredPaths: string[], cwd: string, eventBus?: EventBus, disabledExtensionIds?: string[]): Promise<LoadExtensionsResult>;
+export declare function discoverAndLoadExtensions(configuredPaths: string[], cwd: string, eventBus?: EventBus, disabledExtensionIds?: string[], options?: DiscoverExtensionPathOptions): Promise<LoadExtensionsResult>;

package/dist/types/extensibility/plugins/marketplace/registry.d.ts

@@ -2,7 +2,7 @@
  * Registry read/write operations for the marketplace plugin system.
  *
  * Two registries:
- *   - marketplaces.json under getConfigRootDir() — which catalogs the user has added
+ *   - marketplaces.json at getMarketplacesRegistryPath() — which catalogs the user has added
  *   - installed_plugins.json under getPluginsDir() — which plugins are installed
  *
  * Read/write functions accept explicit file paths so callers control the
@@ -11,8 +11,8 @@
  * Both use atomic write (tmp + rename). On Windows, rename over existing file
  * can fail with EPERM — fallback: unlink target then rename.
  */
+export { getMarketplacesRegistryPath } from "@oh-my-pi/pi-utils";
 import type { InstalledPluginEntry, InstalledPluginsRegistry, MarketplaceRegistryEntry, MarketplacesRegistry } from "./types.js";
-export declare function getMarketplacesRegistryPath(): string;
 export declare function getInstalledPluginsRegistryPath(): string;
 export declare function getMarketplacesCacheDir(): string;
 export declare function getPluginsCacheDir(): string;

package/dist/types/launch/paths.d.ts

@@ -1,4 +1,5 @@
+import { getDaemonRuntimeDir } from "@oh-my-pi/pi-utils";
 /** Resolve the private runtime directory shared by omp processes in one project directory. */
-export declare function daemonRuntimeDir(projectDir: string, configRoot?: string): string;
+export { getDaemonRuntimeDir as daemonRuntimeDir };
 /** Resolve the Unix socket or Windows named pipe used by one project broker. */
 export declare function daemonBrokerEndpoint(projectDir: string, runtimeDir: string): string;

package/dist/types/mcp/request-id.d.ts

@@ -0,0 +1,19 @@
+import type { MCPRequestIdFormat } from "./types.js";
+/**
+ * Per-transport allocator for outgoing JSON-RPC request ids.
+ *
+ * JSON-RPC 2.0 permits String and Number ids equally, but the wider MCP
+ * ecosystem (reference SDKs included) issues incrementing integers, so servers
+ * are best tested against numbers — Apple's `xcrun mcpbridge` even logs
+ * `mcpbridge.DecodeError Code=1` and never answers a string id. Integers are
+ * therefore the default. `"string"` opts a server back into collision-resistant
+ * snowflake ids.
+ *
+ * The counter is per instance and never reset, so ids stay unique for the life
+ * of the transport even though a reconnect rejects and clears every pending
+ * request.
+ */
+export declare class RequestIdAllocator {
+    #private;
+    next(format: MCPRequestIdFormat | undefined): string | number;
+}

package/dist/types/mcp/types.d.ts

@@ -43,12 +43,26 @@ export interface MCPAuthConfig {
     /** MCP resource URI — persisted for OAuth resource indicators during refresh */
     resource?: string;
 }
+/** Encoding used for outgoing JSON-RPC request ids. */
+export type MCPRequestIdFormat = "string" | "number";
 /** Base server config with shared options */
 interface MCPServerConfigBase {
     /** Whether this server is enabled (default: true) */
     enabled?: boolean;
     /** MCP request timeout in milliseconds (default: 30000, 0 to disable) */
     timeout?: number;
+    /**
+     * Encoding for outgoing JSON-RPC request ids (default: `"number"`).
+     *
+     * Set `"string"` for servers that need collision-resistant snowflake string
+     * ids instead of per-transport integers. See `RequestIdAllocator` in
+     * `./request-id`.
+     *
+     * OMP-specific, so only the OMP-owned discovery providers parse it (native,
+     * standalone `mcp.json`, OMP plugins). Providers that translate another
+     * tool's config do not, since the key is not part of those formats.
+     */
+    requestIdFormat?: MCPRequestIdFormat;
     /** Authentication configuration (optional) */
     auth?: MCPAuthConfig;
     /** OAuth configuration for servers requiring explicit client credentials */

package/dist/types/memory-backend/index.d.ts

@@ -1,6 +1,7 @@
 export type { MnemopiBackendConfig, MnemopiLlmMode, MnemopiProviderOptions, MnemopiScoping, } from "../mnemopi/config.js";
 export type { MnemopiMemoryEditOperation, MnemopiMemoryEditOptions, MnemopiMemoryEditResult, MnemopiSessionState, MnemopiSessionStateOptions, } from "../mnemopi/state.js";
 export * from "./local-backend.js";
+export * from "./messages.js";
 export * from "./off-backend.js";
 export * from "./resolve.js";
 export * from "./runtime.js";

package/dist/types/memory-backend/messages.d.ts

@@ -0,0 +1,15 @@
+import type { MemoryBackendId } from "./types.js";
+/**
+ * Fallback text for `/memory stats` and `/memory diagnose` when the active
+ * backend's hook is missing or returns nothing.
+ *
+ * The `off` backend isn't a real backend a user picked among several
+ * stats-capable options — it's the no-op state memory falls back to by
+ * default — so it gets its own message instead of the generic
+ * "not available for the X backend" template, which would otherwise read as
+ * the self-contradictory "not available for the off backend".
+ *
+ * Shared by both the TUI (`CommandController.handleMemoryCommand`) and the
+ * ACP/RPC slash-command handler so the two surfaces stay consistent.
+ */
+export declare function memoryStatsUnavailableMessage(backendId: MemoryBackendId, action: "stats" | "diagnose"): string;

package/dist/types/modes/components/model-browser.d.ts

@@ -58,10 +58,10 @@ export declare function formatRoleChip(role: string, assignment: RoleAssignment,
 export interface ModelBrowserOptions {
     /** Render the dim `provider/` prefix before model ids. Default true. */
     showProvider?: boolean;
-    /** Session token count used to disable models whose context window is exceeded. */
+    /** Session token count used to flag models whose context window is exceeded. */
     currentContextTokens?: number;
-    /** When true, rows over the current context are unselectable (session-switch mode). */
-    disableOverContext?: boolean;
+    /** When true, over-context rows render grayed; picking one compacts first (session-switch mode). */
+    markOverContext?: boolean;
     /** Host-provided empty-state text (e.g. provider discovery status). */
     emptyText?: () => string | undefined;
 }
@@ -91,8 +91,8 @@ export declare class ModelBrowser implements Component {
     setShowProvider(show: boolean): void;
     /** Keep the source order after fuzzy filtering instead of applying model-specific ranking. */
     setPreserveQueryOrder(preserve: boolean): void;
-    /** Allow hosts to toggle context-window eligibility between browser modes. */
-    setDisableOverContext(disable: boolean): void;
+    /** Allow hosts to toggle context-window flagging between browser modes. */
+    setMarkOverContext(mark: boolean): void;
     /** Focused: accent cursor + selected-row background band. Unfocused: dim cursor, no band. */
     setFocused(focused: boolean): void;
     /** Total rendered height for the current `maxVisible` (host layout budgeting). */
@@ -103,6 +103,8 @@ export declare class ModelBrowser implements Component {
     get visibleCount(): number;
     /** Move selection to `selector`; false when it is not in the current view. */
     selectSelector(selector: string): boolean;
+    /** True when `item`'s context window is smaller than the live session token count (grayed row; hosts compact before switching). */
+    isOverContext(item: ModelBrowserItem): boolean;
     /**
      * Move the selection by `delta` rows, skipping disabled rows. Single steps
      * wrap at the ends; `wrap: false` (page/home/end jumps) clamps instead.

package/dist/types/modes/components/model-picker.d.ts

@@ -11,15 +11,21 @@ import type { Settings } from "../../config/settings.js";
 import type { ResolvedRoleModel } from "../../session/agent-session.js";
 import type { ScopedModelItem } from "./model-hub.js";
 export interface ModelPickerCallbacks {
-    /** A model was chosen for a session-only switch. `selector` is `provider/id`. */
-    onPick: (model: Model, selector: string) => void;
+    /**
+     * A model was chosen for a session-only switch. `selector` is `provider/id`.
+     * `overContext` is true when the session transcript exceeds the model's
+     * context window — the host must compact before switching.
+     */
+    onPick: (model: Model, selector: string, meta: {
+        overContext: boolean;
+    }) => void;
     /** A configured ctrl+p quick role was chosen. */
     onPickRole?: (entry: ResolvedRoleModel) => void;
     /** The picker was dismissed. */
     onCancel: () => void;
 }
 export interface ModelPickerOptions {
-    /** Session token count; models with smaller context windows are disabled. */
+    /** Session token count; models with smaller context windows are grayed and compact-first on pick. */
     currentContextTokens?: number;
     /** `provider/id` of the session's active model; highlighted and preselected. */
     currentSelector?: string;

package/dist/types/modes/components/read-tool-group.d.ts

@@ -36,6 +36,15 @@ export declare class ReadToolGroupComponent extends Container implements ToolExe
      */
     seal(): void;
     updateArgs(args: ReadRenderArgs, toolCallId?: string): void;
+    /**
+     * Re-key an entry whose streamed tool-call id changed mid-stream (a provider
+     * rewriting the id across deltas; see EventController's
+     * `#streamedToolCallIdByIndex`). Preserves row order so a sibling read run is
+     * not visibly reshuffled, and no-ops when the rename would collide.
+     */
+    renameEntry(oldId: string, newId: string): void;
+    /** Remove one call without discarding successful siblings in the shared group. */
+    removeEntry(toolCallId: string): boolean;
     updateResult(result: {
         content: Array<{
             type: string;

package/dist/types/modes/types.d.ts

@@ -331,7 +331,7 @@ export interface InteractiveModeContext {
     handlePythonCommand(code: string, excludeFromContext?: boolean): Promise<void>;
     handleMCPCommand(text: string): Promise<void>;
     handleSSHCommand(text: string): Promise<void>;
-    handleCompactCommand(customInstructions?: string, mode?: CompactMode): Promise<CompactionOutcome>;
+    handleCompactCommand(customInstructions?: string, mode?: CompactMode, beforeFlush?: (outcome: CompactionOutcome) => void | Promise<void>): Promise<CompactionOutcome>;
     handleHandoffCommand(customInstructions?: string): Promise<void>;
     handleShakeCommand(mode: ShakeMode): Promise<void>;
     handleMoveCommand(targetPath?: string): Promise<void>;

package/dist/types/registry/agent-lifecycle.d.ts

@@ -92,12 +92,21 @@ export declare class AgentLifecycleManager {
      */
     ensureLive(id: string): Promise<AgentSession>;
     /**
-     * Hard removal: dispose if live, unregister from registry, drop timers.
-     * When `expected` is given, only a ref matching it is released; a stale
-     * release can never take down a newer same-id ref. Returns true when a
-     * matching ref was released.
+     * Dispose if live and drop timers. When `expected` is given, only a ref
+     * matching it is released; a stale release can never take down a newer
+     * same-id ref. Returns true when a matching ref was released.
+     *
+     * By default the ref is unregistered (teardown / one-shot removal). Pass
+     * `tombstone: true` for an explicit kill: the ref is kept registered as a
+     * terminal `aborted` row (session detached) instead of being removed, so a
+     * later persisted-subagent scan (e.g. Agent Hub reopen) skips it via its
+     * `if (!registry.get(id))` guard rather than re-adopting the surviving
+     * on-disk transcript as a fresh `parked` row. Mirrors
+     * `finalizeSubagentLifecycle`'s genuine-kill path.
      */
-    release(id: string, expected?: AgentRefExpectation): Promise<boolean>;
+    release(id: string, expected?: AgentRefExpectation, options?: {
+        tombstone?: boolean;
+    }): Promise<boolean>;
     /** Teardown everything (process exit / main session dispose). */
     dispose(): Promise<void>;
 }

package/dist/types/registry/agent-registry.d.ts

@@ -67,9 +67,10 @@ export declare class AgentRegistry {
     static resetGlobalForTests(): void;
     register(input: RegisterInput): AgentRef;
     /**
-     * Register a new id only when it is absent, or reuse the exact ref a parked
-     * revival was authorized to revive. A missing expected ref is a failed CAS:
-     * callers must never claim an id after its prior generation disappeared.
+     * Register a new id only when it is absent, or reuse the exact detached
+     * `parked` ref a revival was authorized to revive. A missing, replaced, or
+     * terminal expected ref is a failed CAS: delayed revivers must never claim an
+     * id after its prior generation disappeared or was hard-killed.
      */
     registerIfAvailable(input: RegisterInput, expected: AgentRef | null): AgentRef | undefined;
     setStatus(id: string, status: AgentStatus, expected?: AgentRefExpectation): boolean;

package/dist/types/sdk.d.ts

@@ -349,7 +349,7 @@ export declare function discoverSkills(cwd?: string, _agentDir?: string, setting
  * Discover context files (AGENTS.md) walking up from cwd.
  * Returns files sorted by depth (farther from cwd first, so closer files appear last/more prominent).
  */
-export declare function discoverContextFiles(cwd?: string, _agentDir?: string): Promise<Array<{
+export declare function discoverContextFiles(cwd?: string, _agentDir?: string, disabledExtensions?: string[]): Promise<Array<{
     path: string;
     content: string;
     depth?: number;

package/dist/types/secrets/index.d.ts

@@ -1,13 +1,11 @@
 import { type SecretEntry } from "./obfuscator.js";
 /**
- * Per-install secret key for the placeholder digest. Persisted under the agent
- * config directory and never sent to a provider, so model-visible placeholders
- * cannot be reversed by dictionary-hashing candidate secrets. Stable across
- * sessions so persisted transcripts deobfuscate consistently. Defaults to
- * `getAgentDir()` — the same directory `createAgentSession()` passes as
- * `agentDir` — so a caller relying on the default reads/writes the identical
- * key file live sessions use, per `~/.omp/agent/secret-placeholder.key` in
- * docs/secrets.md.
+ * Per-install secret key for the placeholder digest. Persisted under XDG state
+ * and never sent to a provider, so model-visible placeholders cannot be reversed
+ * by dictionary-hashing candidate secrets. Stable across sessions so persisted
+ * transcripts deobfuscate consistently. Defaults to `getSecretPlaceholderKeyPath()`
+ * — `$XDG_STATE_HOME/omp/secret-placeholder.key` (or `~/.omp/agent/secret-placeholder.key`
+ * without XDG), per docs/secrets.md.
  */
 export declare function getSecretPlaceholderKey(keyDir?: string): Promise<string>;
 /** Return an existing placeholder key for redaction without creating a new key file. */

package/dist/types/session/agent-session.d.ts

@@ -610,7 +610,6 @@ export declare class AgentSession {
         selector?: string;
         thinkingLevel?: ThinkingLevel;
         persist?: boolean;
-        currentContextTokens?: number;
     }): Promise<{
         switched: boolean;
     }>;
@@ -1009,6 +1008,12 @@ export declare class AgentSession {
      * @returns the number of advisors active after the rebuild.
      */
     applyAdvisorConfigs(advisors: AdvisorConfig[], sharedInstructions: string | undefined): number;
+    /**
+     * Refresh the project context prompt advisor sessions run against after
+     * context files change on `/reload-plugins`. Rebuilds live advisor runtimes so
+     * they stop evaluating turns against stale `AGENTS.md` instructions.
+     */
+    setAdvisorContextPrompt(contextPrompt: string | undefined): void;
     /**
      * Whether the advisor setting is enabled for this session.
      */

package/dist/types/session/model-controls.d.ts

@@ -71,7 +71,6 @@ export declare class ModelControls {
         selector?: string;
         thinkingLevel?: ThinkingLevel;
         persist?: boolean;
-        currentContextTokens?: number;
     }): Promise<{
         switched: boolean;
     }>;

package/dist/types/session/session-advisors.d.ts

@@ -227,6 +227,13 @@ export declare class SessionAdvisors {
      * @returns the number of advisors active after the rebuild.
      */
     applyAdvisorConfigs(advisors: AdvisorConfig[], sharedInstructions: string | undefined): number;
+    /**
+     * Swap the project context prompt handed to advisor sessions after context
+     * files change (`/reload-plugins` edit/disable). Rebuilds live runtimes in
+     * place so the next advisor turn evaluates against the current instructions;
+     * a no-op when the rendered prompt is unchanged.
+     */
+    setContextPrompt(contextPrompt: string | undefined): void;
     /**
      * Whether the advisor setting is enabled for this session.
      */

package/dist/types/session/session-maintenance.d.ts

@@ -38,6 +38,7 @@ export interface SessionMaintenanceHost {
     extensionRunner: ExtensionRunner | undefined;
     sideStreamFn: StreamFn;
     providerSessionState: Map<string, ProviderSessionState>;
+    preferWebsockets: boolean | undefined;
     model(): Model | undefined;
     thinkingLevel(): ThinkingLevel | undefined;
     isDisposed(): boolean;

package/dist/types/session/session-manager.d.ts

@@ -39,11 +39,17 @@ export declare class SessionPersistenceIndeterminateError extends AggregateError
  * tree by `(id, parentId)`, and the mutable leaf pointer selects which path is
  * active for future appends and for LLM context construction.
  *
- * Durability is software-crash safe but not power-loss safe: appends are handed
- * to the OS synchronously in-body (so an entry survives an OOM/SIGKILL the
- * instant `appendMessage` returns) but never `fsync`'d. Full-file rewrites go
- * through the storage layer's atomic temp-write+rename so a crash mid-rewrite
- * cannot truncate the prior good file.
+ * Durability is software-crash safe but not power-loss safe: appends are normally
+ * handed to the OS synchronously in-body but never `fsync`'d. While an in-place
+ * atomic rewrite publishes, a synchronous `flushSync` still persists fenced
+ * appends by superseding the pending publish against the same (stable) path.
+ * A {@link moveTo} relocation is the one exception: the session file is being
+ * renamed to a new path, so appends landing in the rename window are held in
+ * memory and persisted only by the move's trailing rewrite. A `flushSync` in
+ * that narrow window cannot durably place them — writing the vacated source
+ * would recreate the orphan the move eliminates, and a queued backend publish
+ * (fire-and-forget on `IndexedSessionStorage`) could land after the rename all
+ * the same. This gap is inherent to closing the writer for a Windows-safe rename.
  */
 export declare class SessionManager {
     #private;

package/dist/types/system-prompt.d.ts

@@ -19,6 +19,8 @@ export declare function resolvePromptInput(input: string | undefined, descriptio
 export interface LoadContextFilesOptions {
     /** Working directory to start walking up from. Default: getProjectDir() */
     cwd?: string;
+    /** Disabled extension IDs to honor instead of the process-global settings. */
+    disabledExtensions?: string[];
 }
 /**
  * Load all project context files using the capability API.

package/dist/types/tools/default-renderer.d.ts

@@ -11,6 +11,9 @@ export interface DefaultToolRenderInput {
     result?: {
         output: string;
         isError?: boolean;
+        /** Synthetic placeholder for a call skipped mid-batch to service steering/peer
+         * input — the tool never ran, so it renders neutral (info) rather than as an error. */
+        skipped?: boolean;
     };
     /** Current expansion and lifecycle state. */
     options: RenderResultOptions;

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@oh-my-pi/pi-coding-agent",
-	"version": "17.2.3",
+	"version": "17.2.4",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://omp.sh",
 	"author": "Can Boluk",
@@ -52,17 +52,17 @@
 		"@agentclientprotocol/sdk": "1.2.1",
 		"@babel/parser": "^7.29.7",
 		"@mozilla/readability": "^0.6.0",
-		"@oh-my-pi/hashline": "17.2.3",
-		"@oh-my-pi/omp-stats": "17.2.3",
-		"@oh-my-pi/pi-agent-core": "17.2.3",
-		"@oh-my-pi/pi-ai": "17.2.3",
-		"@oh-my-pi/pi-catalog": "17.2.3",
-		"@oh-my-pi/pi-mnemopi": "17.2.3",
-		"@oh-my-pi/pi-natives": "17.2.3",
-		"@oh-my-pi/pi-tui": "17.2.3",
-		"@oh-my-pi/pi-utils": "17.2.3",
-		"@oh-my-pi/pi-wire": "17.2.3",
-		"@oh-my-pi/snapcompact": "17.2.3",
+		"@oh-my-pi/hashline": "17.2.4",
+		"@oh-my-pi/omp-stats": "17.2.4",
+		"@oh-my-pi/pi-agent-core": "17.2.4",
+		"@oh-my-pi/pi-ai": "17.2.4",
+		"@oh-my-pi/pi-catalog": "17.2.4",
+		"@oh-my-pi/pi-mnemopi": "17.2.4",
+		"@oh-my-pi/pi-natives": "17.2.4",
+		"@oh-my-pi/pi-tui": "17.2.4",
+		"@oh-my-pi/pi-utils": "17.2.4",
+		"@oh-my-pi/pi-wire": "17.2.4",
+		"@oh-my-pi/snapcompact": "17.2.4",
 		"@opentelemetry/api": "^1.9.1",
 		"@opentelemetry/api-logs": "^0.220.0",
 		"@opentelemetry/context-async-hooks": "^2.9.0",

package/scripts/legacy-pi-virtual-module.ts

@@ -142,7 +142,13 @@ export async function collectBundledPiEntries(): Promise<BundledPiEntry[]> {
 
 			const sourceDir = path.join(packageRoot, pattern.sourcePrefix);
 			try {
-				const glob = new Bun.Glob(`*${pattern.sourceSuffix}`);
+				// Recursive on purpose: Node matches `*` in an `exports` pattern across
+				// `/`, so `./slash-commands/*` genuinely serves
+				// `slash-commands/helpers/active-oauth-account`. Enumerating only the
+				// top level left every nested key out of the compiled registry, where
+				// it fell through to `Bun.resolveSync` and died under bunfs — so such
+				// an import worked from source and failed inside a binary.
+				const glob = new Bun.Glob(`**/*${pattern.sourceSuffix}`);
 				const matches: string[] = [];
 				for await (const match of glob.scan({ cwd: sourceDir, onlyFiles: true })) {
 					matches.push(match);
@@ -151,7 +157,11 @@ export async function collectBundledPiEntries(): Promise<BundledPiEntry[]> {
 				for (const match of matches) {
 					if (!match.endsWith(pattern.sourceSuffix)) continue;
 					const basename = match.slice(0, match.length - pattern.sourceSuffix.length);
-					if (!isSafeWildcardBasename(basename) || basename.includes("/")) continue;
+					const segments = basename.split("/");
+					// Every directory on the way has to be importable too: a private or
+					// hidden folder is no more exported than a private file.
+					if (segments.some(segment => segment.startsWith(".") || segment.startsWith("_"))) continue;
+					if (!isSafeWildcardBasename(segments.at(-1) ?? "")) continue;
 					const subpath = `${pattern.exportPrefix}${basename}${pattern.exportSuffix}`;
 					const key = `${manifest.name}/${subpath}`;
 					addEntry(key, bindingForSubpath(pkg.identifier, subpath), key);