@oh-my-pi/pi-coding-agent 17.2.8 → 17.2.10

package/dist/types/session/agent-session-types.d.ts

@@ -65,6 +65,13 @@ export interface UsageFallbackConfirmation {
     to: string;
     remainingPercent: number | undefined;
 }
+/**
+ * Confirms whether a reserve-triggered model fallback may proceed.
+ *
+ * Interactive callers use the confirmation details to present the pending
+ * route change; aborting `signal` cancels that pending confirmation.
+ */
+export type UsageFallbackConfirmer = (confirmation: UsageFallbackConfirmation, signal: AbortSignal) => Promise<boolean>;
 /** Identifies a retry fallback chain already entered during startup model resolution. */
 export interface InitialRetryFallbackState {
     /** Role whose configured primary was unavailable. */

package/dist/types/session/agent-session.d.ts

@@ -20,7 +20,7 @@ import { type Effort } from "@oh-my-pi/pi-ai";
 import { type AdvisorConfig, type AdvisorRuntimeStatus } from "../advisor/index.js";
 import { AsyncJobManager } from "../async/index.js";
 import type { ModelRegistry } from "../config/model-registry.js";
-import { type ResolvedModelRoleValue } from "../config/model-resolver.js";
+import type { ResolvedModelRoleValue } from "../config/model-resolver.js";
 import { type PromptTemplate } from "../config/prompt-templates.js";
 import type { Settings, SkillsSettings } from "../config/settings.js";
 import { RawSseDebugBuffer } from "../debug/raw-sse-buffer.js";
@@ -29,7 +29,7 @@ import type { BashResult } from "../exec/bash-executor.js";
 import type { TtsrManager } from "../export/ttsr.js";
 import type { LoadedCustomCommand } from "../extensibility/custom-commands/index.js";
 import type { CustomTool } from "../extensibility/custom-tools/types.js";
-import type { ExtensionRunner, ExtensionUIContext } from "../extensibility/extensions/index.js";
+import type { ExtensionRunner, ExtensionUIContext, ToolInfo } from "../extensibility/extensions/index.js";
 import type { CompactOptions, ContextUsage } from "../extensibility/extensions/types.js";
 import type { Skill, SkillWarning } from "../extensibility/skills.js";
 import { type FileSlashCommand } from "../extensibility/slash-commands.js";
@@ -50,7 +50,7 @@ import type { TodoPhase } from "../tools/todo.js";
 import type { InspectImageMode } from "../utils/inspect-image-mode.js";
 import type { VibeModeState } from "../vibe/state.js";
 import type { AgentSessionEventListener } from "./agent-session-events.js";
-import type { AgentSessionConfig, AgentSessionDisposeOptions, AsyncJobSnapshot, CommandMetadataChangedListener, ContextUsageBreakdown, FollowUpOptions, FreshSessionResult, HandoffResult, ModelCycleResult, Prewalk, PromptOptions, ResetSessionContextResult, ResolvedRoleModel, RestoredQueuedMessage, RoleModelCycle, RoleModelCycleResult, SessionHandoffOptions, SessionOAuthAccountList, SessionStats, UsageFallbackConfirmation } from "./agent-session-types.js";
+import type { AgentSessionConfig, AgentSessionDisposeOptions, AsyncJobSnapshot, CommandMetadataChangedListener, ContextUsageBreakdown, FollowUpOptions, FreshSessionResult, HandoffResult, ModelCycleResult, Prewalk, PromptOptions, ResetSessionContextResult, ResolvedRoleModel, RestoredQueuedMessage, RoleModelCycle, RoleModelCycleResult, SessionHandoffOptions, SessionOAuthAccountList, SessionStats, UsageFallbackConfirmer } from "./agent-session-types.js";
 import type { ClientBridge } from "./client-bridge.js";
 import { type CustomMessage, type CustomMessagePayload } from "./messages.js";
 import { type AdvisorStats } from "./session-advisors.js";
@@ -228,7 +228,7 @@ export declare class AgentSession {
     /** Resolved selector while retry routing is using a fallback model. */
     get retryFallbackModel(): string | undefined;
     /** Install the interactive decision surface for reserve-triggered model changes. */
-    setUsageFallbackConfirmer(confirmer: ((confirmation: UsageFallbackConfirmation) => Promise<boolean>) | undefined): void;
+    setUsageFallbackConfirmer(confirmer: UsageFallbackConfirmer | undefined): void;
     /** Effective thinking level applied to the agent (the resolved level when `auto`). */
     get thinkingLevel(): ThinkingLevel | undefined;
     /** The selector the user configured: `auto` when auto mode is active, else the effective level. */
@@ -267,6 +267,8 @@ export declare class AgentSession {
     getLastAssistantMessage(): AssistantMessage | undefined;
     /** Current effective system prompt blocks (includes any per-turn extension modifications) */
     get systemPrompt(): string[];
+    /** Marks streamed text as committed or buffered for turn-recovery replay decisions. */
+    setTextOutputCommitted(committed: boolean): void;
     /** Current retry attempt (0 if not retrying) */
     get retryAttempt(): number;
     /** Names of tools currently exposed at the top level. */
@@ -283,6 +285,8 @@ export declare class AgentSession {
     hasBuiltInTool(name: string): boolean;
     /** Names of every registered tool. */
     getAllToolNames(): string[];
+    /** Full metadata for every registered tool, including source provenance (backs `getAllTools()`). */
+    getAllToolInfos(): ToolInfo[];
     /** Installs and activates the ephemeral vibe tool set. */
     activateVibeTools(baseToolNames: string[]): Promise<void>;
     /** Uninstalls vibe tools and activates the replacement set. */

package/dist/types/session/session-entries.d.ts

@@ -71,6 +71,8 @@ export interface ModelChangeEntry extends SessionEntryBase {
     model: string;
     /** Role: "default", "smol", "slow", etc. Undefined treated as "default" */
     role?: string;
+    /** True when this transition selected a retry-fallback model rather than the configured model. */
+    resolvedModelIsFallback?: boolean;
 }
 export interface ServiceTierChangeEntry extends SessionEntryBase {
     type: "service_tier_change";
@@ -183,6 +185,14 @@ export interface SessionInitEntry extends SessionEntryBase {
     task: string;
     /** Tools available to the agent */
     tools: string[];
+    /** Agent definition name (for example `scout` or `reviewer`). */
+    agent?: string;
+    /** Semantic model role declared by the agent, retained even after concrete model resolution. */
+    modelRole?: string;
+    /** Initially resolved provider/model selector for historical display. */
+    resolvedModel?: string;
+    /** Whether the agent definition is read-only, allowing an exact zero-LoC attribution. */
+    readOnly?: boolean;
     /** Output schema if structured output was requested. */
     outputSchema?: unknown;
     /** Enforcement policy recorded with the output schema for faithful revival. */

package/dist/types/session/session-loader.d.ts

@@ -3,13 +3,23 @@ import { BlobStore } from "./blob-store.js";
 import { type FileEntry, type SessionTitleSlotEntry } from "./session-entries.js";
 import { type SessionStorage } from "./session-storage.js";
 import { type SessionTitleUpdate } from "./session-title-slot.js";
+export interface VisitEntriesFromFileStreamOptions {
+    /** Stop after the visitor returns `false`. */
+    shouldContinue?: () => boolean;
+    /** Stop after this many valid or malformed JSONL records have been consumed. */
+    maxRecords?: number;
+    /** Yield to the macrotask queue after this many bytes have been consumed. */
+    yieldEveryBytes?: number;
+    /** Yield to the macrotask queue after this many entries have been visited. */
+    yieldEveryEntries?: number;
+}
 /** Parse session JSONL while stripping and folding the optional fixed title slot. */
 export declare function parseSessionContent(content: string): {
     entries: FileEntry[];
     titleSlot: SessionTitleUpdate | undefined;
 };
 /** Parse session JSONL and visit each entry without retaining prior entries. */
-export declare function visitEntriesFromFileStream(filePath: string, visit: (entry: FileEntry) => void): Promise<SessionTitleUpdate | undefined>;
+export declare function visitEntriesFromFileStream(filePath: string, visit: (entry: FileEntry) => void | boolean, options?: VisitEntriesFromFileStreamOptions): Promise<SessionTitleUpdate | undefined>;
 /** Exported for testing — the ≥8MiB streaming path (works on any file size). */
 export declare function loadEntriesFromFileStream(filePath: string): Promise<{
     entries: FileEntry[];

package/dist/types/session/session-manager.d.ts

@@ -220,12 +220,17 @@ export declare class SessionManager {
      * Append a model change as a child of the current leaf, then advance the leaf.
      * @param model Model in "provider/modelId" format
      * @param role Optional role (default: "default")
+     * @param resolvedModelIsFallback Whether this transition selected a retry-fallback model
      */
-    appendModelChange(model: string, role?: string): string;
+    appendModelChange(model: string, role?: string, resolvedModelIsFallback?: boolean): string;
     appendSessionInit(init: {
         systemPrompt: string;
         task: string;
         tools: string[];
+        agent?: string;
+        modelRole?: string;
+        resolvedModel?: string;
+        readOnly?: boolean;
         outputSchema?: unknown;
         outputSchemaMode?: StructuredSubagentSchemaMode;
         restrictToolNames?: boolean;
@@ -375,6 +380,9 @@ export declare class SessionManager {
             systemPrompt: string;
             task: string;
             tools: string[];
+            agent?: string;
+            modelRole?: string;
+            resolvedModel?: string;
             outputSchema?: unknown;
             outputSchemaMode?: StructuredSubagentSchemaMode;
             restrictToolNames?: boolean;

package/dist/types/session/session-tools.d.ts

@@ -3,7 +3,7 @@ import type { Model } from "@oh-my-pi/pi-ai";
 import type { ModelRegistry } from "../config/model-registry.js";
 import type { Settings, SkillsSettings } from "../config/settings.js";
 import type { CustomTool } from "../extensibility/custom-tools/types.js";
-import type { ExtensionRunner } from "../extensibility/extensions/index.js";
+import type { ExtensionRunner, ToolInfo } from "../extensibility/extensions/index.js";
 import { type Skill, type SkillWarning } from "../extensibility/skills.js";
 import { type LocalProtocolOptions } from "../internal-urls/index.js";
 import type { MemoryBackendStartOptions } from "../memory-backend/types.js";
@@ -132,6 +132,15 @@ export declare class SessionTools {
     hasBuiltInTool(name: string): boolean;
     /** Names of every registered tool. */
     getAllToolNames(): string[];
+    /**
+     * Full metadata for every registered tool, including source provenance.
+     *
+     * Backs the `getAllTools()` ExtensionAPI method. Returns {@link ToolInfo}
+     * objects (not bare names) so extensions authored against upstream
+     * `@earendil-works/pi-coding-agent` — which promises `ToolInfo[]` — can read
+     * `sourceInfo.source` unchanged.
+     */
+    getAllToolInfos(): ToolInfo[];
     /** Installs and activates the ephemeral vibe tool set. */
     activateVibeTools(baseToolNames: string[]): Promise<void>;
     /** Uninstalls vibe tools and activates the replacement set. */

package/dist/types/session/turn-recovery.d.ts

@@ -4,7 +4,7 @@ import type { ModelRegistry } from "../config/model-registry.js";
 import type { Settings } from "../config/settings.js";
 import { type ConfiguredThinkingLevel } from "../thinking.js";
 import type { AgentSessionEvent } from "./agent-session-events.js";
-import type { InitialRetryFallbackState } from "./agent-session-types.js";
+import type { InitialRetryFallbackState, UsageFallbackConfirmer } from "./agent-session-types.js";
 import { type RetryFallbackSelector } from "./retry-fallback-chains.js";
 import type { SessionManager } from "./session-manager.js";
 /** Result shape shared with automatic maintenance recovery. */
@@ -22,6 +22,8 @@ export interface TurnRecoveryHost {
     modelRegistry: ModelRegistry;
     configWarnings: string[];
     model(): Model | undefined;
+    /** Whether streamed text has already been committed to the active output sink. */
+    textOutputCommitted(): boolean;
     thinkingLevel(): ThinkingLevel | undefined;
     configuredThinkingLevel(): ConfiguredThinkingLevel | undefined;
     setThinkingLevel(level: ConfiguredThinkingLevel | undefined): void;
@@ -100,6 +102,8 @@ export declare class TurnRecovery {
     }): Promise<RecoveryCompactionResult>;
     /** Restores the configured primary after fallback cooldown expiry. */
     maybeRestoreRetryFallbackPrimary(): Promise<void>;
+    /** Applies model fallback policy from live usage health before a turn starts. */
+    maybeApplyUsageAwareFallback(signal: AbortSignal, confirmer?: UsageFallbackConfirmer): Promise<boolean>;
     /** Applies automatic retry, credential rotation, and model fallback policy. */
     handleRetryableError(message: AssistantMessage, options?: {
         allowModelFallback?: boolean;
@@ -181,7 +185,7 @@ export declare class TurnRecovery {
         pinFallback?: boolean;
         apiKey?: string;
         signal?: AbortSignal;
-    }): Promise<void>;
+    }): Promise<boolean>;
     /**
      * True when the current turn failed on a Fireworks Fast (`-fast`) model in a
      * way that should degrade to the reliable base (Standard) model. Fast is a

package/dist/types/slash-commands/acp-builtins.d.ts

@@ -1,4 +1,4 @@
-import type { AvailableCommand } from "@agentclientprotocol/sdk";
+import type { AvailableCommand } from "@oh-my-pi/pi-utils/acp";
 import type { AcpBuiltinSlashCommandResult, SlashCommandRuntime } from "./types.js";
 export type { AcpBuiltinSlashCommandResult } from "./types.js";
 /**

package/dist/types/slash-commands/available-commands.d.ts

@@ -1,4 +1,4 @@
-import type { AvailableCommand } from "@agentclientprotocol/sdk";
+import type { AvailableCommand } from "@oh-my-pi/pi-utils/acp";
 import type { SkillsSettings } from "../config/settings.js";
 import type { LoadedCustomCommand } from "../extensibility/custom-commands/index.js";
 import type { ExtensionRunner } from "../extensibility/extensions/index.js";

package/dist/types/task/executor.d.ts

@@ -87,6 +87,8 @@ export interface ExecutorOptions {
      */
     detached?: boolean;
     modelOverride?: string | string[];
+    /** Explicit pre-expansion model role alias selected for this run. */
+    modelRole?: string;
     /**
      * Active model selector of the parent session, used as an auth-aware fallback
      * if the resolved subagent model has no working credentials. See #985.
@@ -209,6 +211,8 @@ export interface ExecutorOptions {
      * set this false so disposal unregisters them instead of leaving idle peers.
      */
     keepAlive?: boolean;
+    /** Internal ownership handoff for cleanup that outlives the visible Task result. */
+    onCleanupDeferred?: (completion: Promise<void>) => void;
 }
 interface FinalizeSubprocessOutputArgs {
     rawOutput: string;
@@ -258,6 +262,8 @@ export interface IrcWakeTurnMonitorOptions {
     agent: AgentDefinition;
     description?: string;
     modelOverride?: string | string[];
+    /** Explicit pre-expansion model role alias selected for this run. */
+    modelRole?: string;
     eventBus?: EventBus;
     parentToolCallId?: string;
     /** Fallback session file when the registry ref carries none. */
@@ -294,6 +300,8 @@ export declare function finalizeSubagentLifecycle(args: {
     isolated: boolean;
     agentIdleTtlMs: number;
     reviveSession: AgentReviver | null;
+    cleanupDeadlineAt?: number;
+    onCleanupDeferred?: (completion: Promise<void>) => void;
 }): Promise<void>;
 /** Options for {@link runSubagentFollowUpTurn}. */
 export interface FollowUpTurnOptions {
@@ -305,6 +313,8 @@ export interface FollowUpTurnOptions {
     message: string;
     index?: number;
     description?: string;
+    /** Explicit pre-expansion model role alias retained from the original run. */
+    modelRole?: string;
     /** Structured-output state retained from the original invocation. */
     outputSchema?: unknown;
     outputSchemaMode?: StructuredSubagentSchemaMode;

package/dist/types/task/index.d.ts

@@ -1,17 +1,16 @@
 import type { AgentTool, AgentToolResult, AgentToolUpdateCallback } from "@oh-my-pi/pi-agent-core";
 import type { ToolSession } from "../index.js";
 import type { Theme } from "../modes/theme/theme.js";
-import { type AgentDefinition, type SingleResult, type TaskItem, type TaskToolDetails, type TaskToolSchemaInstance } from "./types.js";
+import { type SingleResult, type TaskItem, type TaskToolDetails, type TaskToolSchemaInstance } from "./types.js";
 import "../tools/review.js";
 import { renderResult, renderCall as renderTaskCall } from "./render.js";
 export { loadBundledAgents as BUNDLED_AGENTS } from "./agents.js";
 export { discoverCommands, expandCommand, getCommand } from "./commands.js";
 export { discoverAgents, getAgent } from "./discovery.js";
 export { AgentOutputManager } from "./output-manager.js";
+export * from "./read-only-policy.js";
 export type { AgentDefinition, AgentProgress, SingleResult, SubagentEventPayload, SubagentLifecyclePayload, SubagentProgressPayload, TaskParams, TaskToolDetails, } from "./types.js";
 export { TASK_SUBAGENT_EVENT_CHANNEL, TASK_SUBAGENT_LIFECYCLE_CHANNEL, TASK_SUBAGENT_PROGRESS_CHANNEL, taskSchema, } from "./types.js";
-export declare const READ_ONLY_TOOL_NAMES: ReadonlySet<string>;
-export declare function isReadOnlyAgent(agent: AgentDefinition): boolean;
 /**
  * Preview text for a child result. Falls back to "(no output)" — annotated
  * with the request count when the child actually did work, so the parent can

package/dist/types/task/read-only-policy.d.ts

@@ -0,0 +1,3 @@
+import type { AgentDefinition } from "./types.js";
+export declare const READ_ONLY_TOOL_NAMES: ReadonlySet<string>;
+export declare function isReadOnlyAgent(agent: AgentDefinition): boolean;

package/dist/types/task/structured-subagent.d.ts

@@ -74,6 +74,8 @@ export interface EffectiveSubagentPolicy {
     agent: AgentDefinition;
     effectiveAgent: AgentDefinition;
     modelOverride?: string | string[];
+    /** Explicit pre-expansion model role alias selected for this run. */
+    modelRole?: string;
     parentActiveModelPattern?: string;
     schema: StructuredSubagentSchemaResolution;
     planMode: boolean;

package/dist/types/task/types.d.ts

@@ -336,6 +336,8 @@ export interface AgentProgress {
     cost: number;
     durationMs: number;
     modelOverride?: string | string[];
+    /** Explicit pre-expansion model role alias selected for this run. */
+    modelRole?: string;
     /** Resolved model display string in the form `<provider>/<id>`, optionally suffixed with `:<thinkingLevel>` when the level was set explicitly. Undefined when the model could not be resolved. */
     resolvedModel?: string;
     /** True when {@link resolvedModel} is the target of an active retry fallback (not the originally configured model). Lets observer-only UIs (collab guests, Agent Hub rows with no live session) flag the fallback and keep the provider. */
@@ -404,6 +406,8 @@ export interface SingleResult {
     /** Model's context window in tokens, when known. */
     contextWindow?: number;
     modelOverride?: string | string[];
+    /** Explicit pre-expansion model role alias selected for this run. */
+    modelRole?: string;
     /** Resolved model display string in the form `<provider>/<id>`, optionally suffixed with `:<thinkingLevel>` when the level was set explicitly. Omitted from tool-result JSON when undefined to keep wire payloads small. */
     resolvedModel?: string;
     /** True when {@link resolvedModel} is the target of an active retry fallback. Mirrors {@link AgentProgress.resolvedModelIsFallback} onto the settled result. */

package/dist/types/tools/bash.d.ts

@@ -119,7 +119,7 @@ export declare class BashTool implements AgentTool<typeof bashSchemaBase | typeo
 }
 export interface BashRenderArgs {
     command?: string;
-    env?: Record<string, string>;
+    env?: Record<string, unknown>;
     timeout?: number;
     cwd?: string;
     __partialJson?: string;
@@ -141,10 +141,10 @@ export interface ShellRendererConfig<TArgs> {
     resolveTitle: (args: TArgs | undefined, options: RenderResultOptions) => string;
     resolveCommand?: (args: TArgs | undefined) => string | undefined;
     resolveCwd?: (args: TArgs | undefined) => string | undefined;
-    resolveEnv?: (args: TArgs | undefined) => Record<string, string> | undefined;
+    resolveEnv?: (args: TArgs | undefined) => Record<string, unknown> | undefined;
     showHeader?: boolean;
 }
-export declare function getBashEnvForDisplay(args: BashRenderArgs): Record<string, string> | undefined;
+export declare function getBashEnvForDisplay(args: BashRenderArgs): Record<string, unknown> | undefined;
 /**
  * Returns the bash command formatted for the result body: the dim `$ cd … &&`
  * prefix joined with syntax-highlighted command lines. The prefix is applied

package/dist/types/tools/browser/launch.d.ts

@@ -115,6 +115,9 @@ export declare function applyStealthPatches(browser: Browser, page: Page, state:
     browserSession: CDPSession | null;
     override: UserAgentOverride | null;
 }): Promise<void>;
+/** Exposes executable candidates for detection tests. */
+export declare function systemChromiumCandidatesForTest(platform?: NodeJS.Platform, home?: string, which?: (name: string) => string | null | undefined): string[];
+export declare function chromiumExecutableProbeForTest(executablePath: string): Promise<boolean>;
 export declare function stealthIgnoreDefaultArgsForTest(executablePath: string | undefined): string[];
 export declare function targetSupportsUserAgentOverrideForTest(target: Target): boolean;
 export declare function configureUserAgentTargetsForTest(browser: Browser, state: {

package/dist/types/tools/browser/tab-worker.d.ts

@@ -1,4 +1,4 @@
-import type { HTMLElement } from "linkedom";
+import type { HTMLElement } from "@oh-my-pi/pi-utils/dom";
 import type { ElementHandle, Page } from "puppeteer-core";
 import type { Transport } from "./tab-protocol.js";
 declare module "puppeteer-core" {
@@ -72,7 +72,7 @@ export declare function preparePageForScreenshot(page: Pick<Page, "bringToFront"
 export declare function describeInflight(inflight: Map<number, InflightOp>): string;
 export declare class WorkerCore {
     #private;
-    constructor(transport: Transport);
+    constructor(transport: Transport, isolated: boolean);
     nextElementId(): number;
     cacheElement(id: number, handle: ElementHandle): void;
 }

package/dist/types/tools/path-utils.d.ts

@@ -44,6 +44,13 @@ export declare function splitPathAndSel(rawPath: string): {
  * plus selector `1-2` (issue #4618). `lstat` inspects the entry itself, so a
  * dangling symlink is still detected as present; ambiguous errors resolve to
  * `"unknown"` so callers keep the raw path instead of guessing.
+ *
+ * `ENAMETOOLONG` resolves to `"missing"` rather than `"unknown"`: a path whose
+ * component or whole length exceeds the OS limit can never name a real single
+ * entry, so it is strictly stronger evidence of non-existence than `ENOENT`.
+ * Without this, a semicolon-joined `path` list long enough to trip the limit
+ * (bare filenames past `NAME_MAX`, or a total past `PATH_MAX`) was read as one
+ * literal path and the delimited split was suppressed (issue #7597).
  */
 export declare function probeLiteralPathExists(filePath: string, cwd: string): Promise<"exists" | "missing" | "unknown">;
 /**
@@ -178,6 +185,7 @@ type PathEntrySplitter = (item: string) => {
  */
 export declare function splitDelimitedPathEntry(entry: string, cwd: string, options?: {
     splitter?: PathEntrySplitter;
+    routedUrlPredicate?: (entry: string) => boolean;
 }): Promise<string[] | null>;
 /** Expand delimited entries in-place while preserving unsplit entries. */
 export declare function expandDelimitedPathEntries(entries: readonly string[], cwd: string, options?: {

package/dist/types/tools/read.d.ts

@@ -28,6 +28,8 @@ export interface ReadToolDetails {
     meta?: OutputMeta;
     /** Full on-disk byte size recorded before applying a file range. */
     fileSize?: number;
+    /** Full source line count when the read reached EOF and the count is exact. */
+    totalLines?: number;
     /** Raw text + start line for user-visible TUI rendering, set when content is text-like.
      * Mirrors the same lines the model receives but without hashline/line-number prefixes,
      * so the TUI can render the file content with its own gutter without re-parsing the formatted text. */
@@ -61,11 +63,7 @@ export declare class ReadTool implements AgentTool<typeof readSchema, ReadToolDe
     readonly label = "Read";
     readonly loadMode = "essential";
     description: string;
-    readonly parameters: import("@oh-my-pi/omptype").FluentType<{
-        path: string;
-    }, {
-        path: string;
-    }>;
+    get parameters(): typeof readSchema;
     readonly strict = true;
     constructor(session: ToolSession);
     /**

package/dist/types/tools/run-scope.d.ts

@@ -1,3 +1,28 @@
+/** Associates a browser operation failure with its owning evaluated run. */
+export declare function markBrowserRunRejection<T>(reason: T, owner: object): T;
+/** Returns whether a rejection was marked for the specified evaluated run. */
+export declare function isBrowserRunRejection(reason: unknown, owner: object): boolean;
+/** Returns whether a rejection belongs to the marked browser run or its evaluated source file. */
+export declare function isBrowserRunOwnedRejection(reason: unknown, owner: object, filename: string): boolean;
+type FloatingRejectionHandler = (reason: unknown) => void;
+/**
+ * Observes native promise-combinator results derived from browser promises for
+ * the duration of one evaluated run. Native `await` remains unchanged; dropped
+ * user continuations from `Promise.all` and `Promise.race` are routed to the
+ * owning run.
+ */
+export declare function withBrowserPromiseCombinatorTracking<T>(owner: object, onFloatingRejection: FloatingRejectionHandler, run: () => Promise<T>): Promise<T>;
+/**
+ * Observes every explicit continuation of a browser promise without replacing
+ * the native promise. Browser failures remain contained; an unhandled error
+ * created by user continuation code is reported to the owning run.
+ */
+export declare function observeBrowserRunPromise<T>(promise: Promise<T>, owner: object, onFloatingRejection: FloatingRejectionHandler): Promise<T>;
+/**
+ * Installs worker-realm rejection routing. Consumed browser-run failures stay in
+ * the worker; unrelated failures retain the default fatal worker behavior.
+ */
+export declare function installBrowserWorkerRejectionGuard(consume: (reason: unknown) => boolean): () => void;
 /**
  * Marks a run-scoped promise as observed without changing its behavior for awaited callers.
  *
@@ -38,4 +63,5 @@ export declare function resolvePredicateTimeout(cellTimeoutMs: number, explicit?
  */
 export declare function waitForRun(msOrPredicate: number | (() => unknown), signal: AbortSignal, opts?: WaitPredicateOptions): Promise<unknown>;
 /** Binds a long-lived scope facade (page/tab/desktop objects) to one evaluated run's abort signal. */
-export declare function bindRunFacade<T extends object>(target: T, signal: AbortSignal): T;
+export declare function bindRunFacade<T extends object>(target: T, signal: AbortSignal, rejectionOwner?: object, onFloatingRejection?: FloatingRejectionHandler): T;
+export {};

package/dist/types/tools/shell-tokenize.d.ts

@@ -13,13 +13,31 @@
  */
 export declare function tokenizeShellSegments(command: string): string[][];
 /**
- * Returns the original text of flat shell command segments. Unlike
+ * A flat shell command segment with the context needed to decide interception.
+ *
+ * @see extractFlatShellCommandSegments
+ */
+export interface FlatShellCommandSegment {
+    /** Original segment text with quoting and escaping preserved. */
+    text: string;
+    /**
+     * True when this segment consumes the previous stage's stdout via an
+     * unquoted `|` or `|&`. Blank and comment-only continuation lines preserve
+     * the pending pipe state. Such a stage reads piped stdin, so path-based
+     * dedicated tools (read/grep/glob) cannot replace it. `||`, `;`, `&`, and
+     * `&&` start an independent command and leave this false.
+     */
+    pipedStdin: boolean;
+}
+/**
+ * Returns the flat shell command segments with the original text of each. Unlike
  * `tokenizeShellSegments`, this preserves quoting and escaping so the results
- * are safe to match against user-configured regular expressions.
+ * are safe to match against user-configured regular expressions, and flags
+ * segments that receive piped stdin.
  *
  * The extractor deliberately declines to split syntax whose execution context
  * cannot be determined with this small scanner (heredocs, command substitution,
  * backticks, grouping, and malformed quoting). Callers must still check the
  * complete input in that case.
  */
-export declare function extractFlatShellCommandSegments(command: string): string[];
+export declare function extractFlatShellCommandSegments(command: string): FlatShellCommandSegment[];

package/dist/types/tools/terminal-output.d.ts

@@ -1,4 +1,4 @@
-import type { Terminal as XtermTerminal } from "@xterm/headless";
+import type { Terminal as XtermTerminal } from "@oh-my-pi/pi-utils/vterm";
 /** Applies the active tool-output color while preserving safe styles from a virtual terminal row. */
 export declare function styleTerminalRow(row: string, baseForeground: string): string;
 /** Reads terminal screen rows as sanitized text plus only the styles the TUI may replay. */

package/dist/types/utils/changelog.d.ts

@@ -39,9 +39,10 @@ export declare function formatStartupChangelogSummary(selection: StartupChangelo
 export declare function resolveBundledChangelogPath(assetPath: string, moduleUrl: string | URL): string | URL;
 export declare function parseChangelog(changelogPath: string | undefined): Promise<ChangelogEntry[]>;
 /**
- * Compare versions. Returns: -1 if v1 < v2, 0 if v1 === v2, 1 if v1 > v2
+ * Compare changelog entries by their parsed version parts.
+ * Returns: -1 if v1 < v2, 0 if v1 === v2, 1 if v1 > v2
  */
-export declare function compareVersions(v1: ChangelogEntry, v2: ChangelogEntry): number;
+export declare function compareChangelogEntries(v1: ChangelogEntry, v2: ChangelogEntry): number;
 /**
  * Parse an omp changelog marker version into comparable parts.
  */

package/dist/types/utils/late-cleanup.d.ts

@@ -0,0 +1,2 @@
+/** Keep timed-out cleanup reachable until its resources really settle. */
+export declare function trackLateCleanup(work: Promise<void>, context: Record<string, unknown>): void;

package/dist/types/utils/turndown.d.ts

@@ -1,4 +1,4 @@
-import TurndownService from "turndown";
+import TurndownService from "@oh-my-pi/pi-utils/turndown";
 /**
  * Build a Turndown instance configured for GFM with the fixes omp relies on:
  * `~~strikethrough~~`, unescaped heading periods, and single-space list markers.

package/dist/types/vibe/runtime.d.ts

@@ -1,5 +1,4 @@
 import type { AsyncJobManager } from "../async/job-manager.js";
-import type { SessionEntry } from "../session/session-entries.js";
 import { SessionManager } from "../session/session-manager.js";
 import type { ToolSession } from "../tools/index.js";
 /** The two worker CLI flavors the director drives. */
@@ -87,8 +86,8 @@ export interface VibeWaitOutcome {
     stillRunning: string[];
     timedOut: boolean;
 }
-/** Child ids claimed by any valid Vibe spawn event, independent of current parent scope. */
-export declare function persistedVibeChildIds(entries: Iterable<SessionEntry>): Set<string>;
+/** Child ids claimed by valid Vibe spawn records from untrusted persisted JSON. */
+export declare function persistedVibeChildIds(entries: Iterable<unknown>): Set<string>;
 /** Thrown from a turn job body so the job manager marks the job failed while carrying the formatted result. */
 export declare class VibeTurnError extends Error {
 }
@@ -113,6 +112,8 @@ export declare class VibeSessionRegistry {
         ownerId: string;
         state?: VibeSessionState;
     }): void;
+    /** Override the teardown grace period for deterministic lifecycle tests. */
+    setTeardownGraceForTesting(timeoutMs: number): void;
     ownerScope(session: VibeParentSession): VibeOwnerScope;
     /** Re-open spawn admission after an explicit Vibe-mode entry. */
     activateScope(scope: VibeOwnerScope): void;

package/dist/types/web/scrapers/readthedocs.d.ts

@@ -1,5 +1,2 @@
-/**
- * Read the Docs handler for web-fetch
- */
 import { type SpecialHandler } from "./types.js";
 export declare const handleReadTheDocs: SpecialHandler;

package/dist/types/web/search/providers/browser-headers.d.ts

@@ -1,8 +1,7 @@
 /**
  * Build a fresh, internally consistent desktop navigation fingerprint for one HTTP request.
- * By default, this randomizes across valid modern versions of Chrome, Firefox, Edge, and Safari
- * using real-world traffic data. Set `randomized` to `false` when a fetch must preserve a
- * stable Mac Chrome identity.
+ * By default, this randomizes across coherent modern Chrome, Firefox, and Safari profiles.
+ * Set `randomized` to `false` when a fetch must preserve a stable Mac Chrome identity.
  */
 export declare function buildBrowserNavigationHeaders(options?: {
     randomized?: boolean;

package/examples/custom-tools/README.md

@@ -96,7 +96,7 @@ renderResult(result, { expanded, isPartial }, theme) {
 **Use `z.enum` for discriminated string tool args:**
 
 ```typescript
-const { z } = pi.zod;
+const z = pi.zod;
 
 parameters: z.object({
 	action: z.enum(["list", "add"]),

package/examples/extensions/README.md

@@ -114,7 +114,7 @@ export default function (pi: ExtensionAPI) {
 **Use `z.enum` for discriminated string tool args:**
 
 ```typescript
-const { z } = pi.zod;
+const z = pi.zod;
 
 parameters: z.object({
 	action: z.enum(["list", "add"]),

package/examples/extensions/api-demo.ts

@@ -1,14 +1,13 @@
 /**
  * API Demo Extension
  *
- * Demonstrates using ExtensionAPI's logger, injected `pi.zod`, and pi module access.
- * These features are now exposed directly on the ExtensionAPI, matching
- * the CustomToolAPI interface.
+ * Demonstrates using ExtensionAPI's logger, injected schema builder, and pi
+ * module access.
  */
 import type { ExtensionAPI } from "@oh-my-pi/pi-coding-agent";
 
 export default function (pi: ExtensionAPI) {
-	const { z } = pi.zod;
+	const z = pi.zod;
 
 	// Access the logger for debugging
 	pi.logger.debug("API demo extension loaded");
@@ -16,7 +15,7 @@ export default function (pi: ExtensionAPI) {
 	pi.registerTool({
 		name: "api_demo",
 		label: "API Demo",
-		description: "Demonstrates ExtensionAPI capabilities: logger, zod, and pi module access",
+		description: "Demonstrates ExtensionAPI capabilities: logger, schema validation, and pi module access",
 		parameters: z.object({
 			message: z.string().describe("Test message"),
 			logLevel: z.enum(["error", "warn", "debug"]).default("debug").describe("Log level to use"),
@@ -48,7 +47,7 @@ export default function (pi: ExtensionAPI) {
 							``,
 							`Features demonstrated:`,
 							`1. ✓ Logger access via pi.logger`,
-							`2. ✓ Zod access via pi.zod`,
+							`2. ✓ Schema builder access via pi.arktype`,
 							`3. ✓ Pi module access via pi.pi`,
 							``,
 							`Context:`,