@oh-my-pi/pi-coding-agent 17.2.9 → 17.2.11

package/dist/types/capability/mcp.d.ts

@@ -24,12 +24,23 @@ export interface MCPServer {
     args?: string[];
     /** Environment variables */
     env?: Record<string, string>;
+    /**
+     * `literal`: env values are opaque plugin package data (Agent Plugins
+     * §§4.1/9.2) — exempt from env-name lookup and `!command` resolution.
+     */
+    envPolicy?: "literal";
     /** Working directory for stdio transport */
     cwd?: string;
     /** URL (for HTTP/SSE transport) */
     url?: string;
     /** HTTP headers (for HTTP transport) */
     headers?: Record<string, string>;
+    /**
+     * `origin-locked`: configured headers are literal package data pinned to the
+     * configured URL's origin (Agent Plugins §7.2.1) — never expanded, never
+     * forwarded cross-origin, and client-generated headers win case-insensitively.
+     */
+    headerPolicy?: "origin-locked";
     /** Authentication configuration */
     auth?: {
         type: "oauth" | "apikey";

package/dist/types/capability/skill.d.ts

@@ -35,6 +35,12 @@ export interface Skill {
     content: string;
     /** Parsed frontmatter */
     frontmatter?: SkillFrontmatter;
+    /**
+     * Filesystem-resolved plugin root this skill was packaged in (Agent Plugins
+     * §4.1). When set, every `skill://` resource access must realpath-resolve
+     * within this directory; symlinks may target other files inside it.
+     */
+    containRoot?: string;
     /** Source level */
     level: "user" | "project";
     /** Source metadata */

package/dist/types/cli/args.d.ts

@@ -50,6 +50,7 @@ export interface Args {
     noPty?: boolean;
     hooks?: string[];
     extensions?: string[];
+    trustedExtensions?: string[];
     noExtensions?: boolean;
     pluginDirs?: string[];
     print?: boolean;

package/dist/types/cli/command-help.d.ts

@@ -67,6 +67,9 @@ export declare const sayHelp: {
 export declare const searchHelp: {
     description: string;
 };
+export declare const shareHelp: {
+    description: string;
+};
 export declare const setupHelp: {
     description: string;
 };

package/dist/types/commands/share.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Share a saved session as an encrypted link without launching the agent.
+ *
+ * `omp share <session>` accepts a session id (prefix) or a path to a session
+ * `.jsonl` and uploads the sealed snapshot exactly like the `/share` slash
+ * command, honoring `share.serverUrl`, `share.store`, and
+ * `share.redactSecrets`.
+ */
+import { Command } from "@oh-my-pi/pi-utils/cli";
+export default class Share extends Command {
+    static description: string;
+    static args: {
+        session: import("@oh-my-pi/pi-utils/cli").ArgDescriptor & {
+            description: string;
+            required: true;
+        };
+    };
+    static flags: {
+        gist: import("@oh-my-pi/pi-utils/cli").FlagDescriptor<"boolean"> & {
+            description: string;
+            default: boolean;
+        };
+    };
+    run(): Promise<void>;
+}

package/dist/types/commit/agentic/index.d.ts

@@ -1,2 +1,4 @@
 import type { CommitCommandArgs } from "../../commit/types.js";
-export declare function runAgenticCommit(args: CommitCommandArgs): Promise<void>;
+export declare function runAgenticCommit(args: CommitCommandArgs): Promise<{
+    usedFallback: boolean;
+}>;

package/dist/types/commit/execute.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Shared commit-execution helpers for the agentic and legacy `omp commit`
+ * pipelines: readable failure reporting for refusing git hooks and a push
+ * wrapper that keeps a requested `--push` honest.
+ */
+import * as git from "../utils/git.js";
+/**
+ * A commit or push failure that has already been reported to the user with a
+ * readable message. It is thrown so the CLI exits non-zero without the runtime
+ * dumping a stack trace — in a bundled build that trace is several kilobytes of
+ * minified source, which buries the one line the user needs (issue #7834).
+ *
+ * `runCommitCommand`'s caller (`commands/commit.ts`) maps this to exit code 1.
+ */
+export declare class CommitAbortedError extends Error {
+    constructor();
+}
+/**
+ * Print a git-command failure — most often a `pre-commit`/`commit-msg` hook
+ * that exited non-zero — as an indented message under `context`, then abort.
+ *
+ * @param context Label for the failed step, e.g. `"Commit 1 of 2 failed"`.
+ * @param error The failure to surface; its captured stderr/stdout is shown.
+ * @param note Optional trailing status line (split-plan progress, recovery).
+ */
+export declare function abortOnGitFailure(context: string, error: git.GitCommandError, note?: string): never;
+/**
+ * Push the current branch, reporting a refused push (missing upstream, rejected
+ * ref) through {@link abortOnGitFailure} instead of letting the raw
+ * `GitCommandError` escape. Prints the success line on completion.
+ */
+export declare function pushOrAbort(cwd: string): Promise<void>;

package/dist/types/commit/index.d.ts

@@ -1,4 +1,5 @@
 /**
  * Entry points for the omp commit command.
  */
-export { runCommitCommand } from "./pipeline.js";
+export * from "./execute.js";
+export * from "./pipeline.js";

package/dist/types/commit/pipeline.d.ts

@@ -1,5 +1,11 @@
 import type { CommitCommandArgs } from "./types.js";
 /**
  * Execute the omp commit pipeline for staged changes.
+ *
+ * Returns whether the commit was generated by the mechanical fallback rather
+ * than by the commit agent, so callers can signal a degraded outcome (issue
+ * #7835). The legacy pipeline has no fallback: model failures throw.
  */
-export declare function runCommitCommand(args: CommitCommandArgs): Promise<void>;
+export declare function runCommitCommand(args: CommitCommandArgs): Promise<{
+    usedFallback: boolean;
+}>;

package/dist/types/config/model-registry.d.ts

@@ -227,6 +227,10 @@ export declare class ModelRegistry {
      * Remove custom API/OAuth registrations for a specific extension source.
      */
     clearSourceRegistrations(sourceId: string): void;
+    /**
+     * Remove one extension-registered provider and restore its static models.
+     */
+    unregisterProvider(providerName: string): void;
     /**
      * Remove registrations for extension sources that are no longer active.
      */

package/dist/types/config/model-resolver.d.ts

@@ -97,18 +97,31 @@ export declare function parseModelPattern(pattern: string, availableModels: Mode
 export interface ModelRoleLookup {
     getModelRole(role: ModelRole | string): string | undefined;
 }
+/**
+ * Extract the first explicit model-role alias from a raw model selection.
+ *
+ * This intentionally runs before role expansion so callers can retain the
+ * source identity (`@smol`, `pi/slow`, or `*`) even when it resolves to a
+ * concrete provider/model or inherited fallback. Bare role names and explicit
+ * provider/model selectors are not role aliases.
+ */
+export declare function resolveExplicitModelRole(value: string | string[] | undefined, settings?: ModelRoleLookup): string | undefined;
 /**
  * Expand a role alias like "@smol" to the configured model string.
  */
 export declare function expandRoleAlias(value: string, settings?: ModelRoleLookup): string;
 export declare function resolveConfiguredModelPatterns(value: string | string[] | undefined, settings?: ModelRoleLookup): string[];
 export interface AgentModelPatternResolutionOptions {
+    /** Highest-priority request selector, when supplied by a caller. */
+    requestModel?: string | string[];
     settingsOverride?: string | string[];
     agentModel?: string | string[];
     settings?: Settings;
     activeModelPattern?: string;
     fallbackModelPattern?: string;
 }
+/** Return the raw selector source that supplies the effective agent patterns. */
+export declare function resolveAgentModelSource(options: AgentModelPatternResolutionOptions): string | string[] | undefined;
 export declare function resolveAgentModelPatterns(options: AgentModelPatternResolutionOptions): string[];
 /** Default prewalk hand-off target when no explicit target is configured. */
 export declare const DEFAULT_PREWALK_TARGET = "@smol";

package/dist/types/config/settings-schema.d.ts

@@ -5981,17 +5981,7 @@ export declare const SETTINGS_SCHEMA: {
             readonly tab: "providers";
             readonly group: "Services";
             readonly label: "Exa";
-            readonly description: "Master toggle for all Exa search tools";
-        };
-    };
-    readonly "exa.enableSearch": {
-        readonly type: "boolean";
-        readonly default: true;
-        readonly ui: {
-            readonly tab: "providers";
-            readonly group: "Services";
-            readonly label: "Exa Search";
-            readonly description: "Enable Exa basic search, deep search, code search, and crawl tools";
+            readonly description: "Enable the Exa web search provider";
         };
     };
     readonly "exa.searchDelayMs": {
@@ -6004,26 +5994,6 @@ export declare const SETTINGS_SCHEMA: {
             readonly description: "Minimum delay between Exa web search requests in milliseconds; set 0 to disable pacing";
         };
     };
-    readonly "exa.enableResearcher": {
-        readonly type: "boolean";
-        readonly default: false;
-        readonly ui: {
-            readonly tab: "providers";
-            readonly group: "Services";
-            readonly label: "Exa Researcher";
-            readonly description: "Enable the Exa researcher tool for AI-powered deep research";
-        };
-    };
-    readonly "exa.enableWebsets": {
-        readonly type: "boolean";
-        readonly default: false;
-        readonly ui: {
-            readonly tab: "providers";
-            readonly group: "Services";
-            readonly label: "Exa Websets";
-            readonly description: "Enable Exa webset management and enrichment tools";
-        };
-    };
     readonly "searxng.endpoint": {
         readonly type: "string";
         readonly default: undefined;
@@ -6329,10 +6299,7 @@ export interface TtsrSettings {
 }
 export interface ExaSettings {
     enabled: boolean;
-    enableSearch: boolean;
     searchDelayMs: number;
-    enableResearcher: boolean;
-    enableWebsets: boolean;
 }
 export interface StatusLineSettings {
     preset: StatusLinePreset;

package/dist/types/discovery/agent-plugin-format.d.ts

@@ -0,0 +1,143 @@
+/** Canonical `plugin.json` `$schema` identifier for Agent Plugins 1.0.0 (spec §5.2). */
+export declare const AGENT_PLUGIN_MANIFEST_SCHEMA = "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json";
+/** Canonical `mcp.json` `$schema` identifier for Agent Plugins 1.0.0 (spec §7.2.1). */
+export declare const AGENT_PLUGIN_MCP_SCHEMA = "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json";
+/** Validated portable manifest fields from a plugin's root `plugin.json` (spec §5). */
+export interface AgentPluginManifest {
+    name: string;
+    version?: string;
+    description?: string;
+    author?: {
+        name?: string;
+        email?: string;
+        url?: string;
+    };
+    homepage?: string;
+    repository?: string;
+    license?: string;
+    keywords?: string[];
+    /**
+     * Client-owned data keyed by reverse-domain namespace. Member values are
+     * opaque: this client implements no namespace, and §8.1/§11.1 require
+     * ignoring unimplemented namespaces without validating their values.
+     */
+    extensions?: Record<string, unknown>;
+}
+/**
+ * Outcome of parsing a candidate `plugin.json`:
+ * - `none` — the document does not target Agent Plugins (no recognized `$schema`);
+ *   legacy plugin conventions may still apply to the directory.
+ * - `valid` — a conformant manifest; `warnings` carries the non-fatal violations
+ *   the spec requires reporting (unknown top-level fields, non-object `extensions`).
+ * - `invalid` — the document targets Agent Plugins but violates the closed schema
+ *   fatally; the plugin must be rejected and none of its components loaded (spec §5.2).
+ */
+export type AgentPluginManifestResult = {
+    status: "none";
+} | {
+    status: "valid";
+    manifest: AgentPluginManifest;
+    warnings: string[];
+} | {
+    status: "invalid";
+    reason: string;
+};
+/** Enforce the plugin `name` constraints from spec §5.5. */
+export declare function isValidAgentPluginName(name: string): boolean;
+/**
+ * Validate `SKILL.md` frontmatter against the Agent Skills specification
+ * (https://agentskills.io/specification), the source of truth for skill
+ * validity under Agent Plugins §7.1, mirroring the official skills-ref
+ * reference validator: the frontmatter schema is CLOSED to its six fields and
+ * any unexpected key rejects the skill. Returns the first violation, or `null`
+ * when the skill conforms. Frontmatter keys must be raw (unnormalized).
+ */
+export declare function validateAgentSkillFrontmatter(frontmatter: Record<string, unknown>, dirName: string): string | null;
+/**
+ * Parse and validate a root `plugin.json` document against the closed
+ * Agent Plugins 1.0.0 manifest schema (spec §5.2–§5.5, §8.1).
+ */
+export declare function parseAgentPluginManifest(raw: string): AgentPluginManifestResult;
+/**
+ * Expand `${PLUGIN_ROOT}` and `${PLUGIN_DATA}` in a configuration value
+ * (spec §9.2). Single non-recursive pass; replacement text is never rescanned,
+ * and no other placeholder or environment-variable expansion is performed.
+ */
+export declare function expandAgentPluginPlaceholders(value: string, pluginRoot: string, pluginData: string): string;
+/** A validated `mcp.json` server entry, resolved to launch-ready values. */
+export interface AgentPluginMcpServer {
+    name: string;
+    transport: "stdio" | "http" | "sse";
+    /** Absolute path for `./`-relative commands; bare executable token otherwise. */
+    command?: string;
+    args?: string[];
+    /** Expanded configured env plus the client-supplied `PLUGIN_ROOT`/`PLUGIN_DATA`. */
+    env?: Record<string, string>;
+    /** Absolute working directory; defaults to the plugin root for stdio servers. */
+    cwd?: string;
+    url?: string;
+    headers?: Record<string, string>;
+}
+/**
+ * Outcome of parsing a plugin's `mcp.json`:
+ * - `disabled` — the top-level document is invalid, so MCP is disabled for the
+ *   plugin while other component types keep loading (spec §7.2.2 rule 2).
+ * - `ok` — the document is valid; individually invalid server entries are
+ *   skipped with a warning (spec §7.2.2 rule 3).
+ */
+export type AgentPluginMcpResult = {
+    status: "disabled";
+    reason: string;
+} | {
+    status: "ok";
+    servers: AgentPluginMcpServer[];
+    warnings: string[];
+};
+export interface AgentPluginMcpOptions {
+    /** Filesystem-resolved plugin root. */
+    pluginRoot: string;
+    /** Client-managed persistent data directory for this plugin (spec §9.1). */
+    pluginData: string;
+}
+/**
+ * Parse and validate a plugin's `mcp.json` against the closed Agent Plugins
+ * 1.0.0 MCP configuration (spec §7.2), resolving stdio commands and working
+ * directories against the plugin root and expanding plugin variables.
+ */
+export declare function parseAgentPluginMcp(raw: string, options: AgentPluginMcpOptions): Promise<AgentPluginMcpResult>;
+/**
+ * Classification of a plugin root directory against the Agent Plugins standard:
+ * - `none` — no Agent Plugins manifest; legacy plugin conventions govern.
+ * - `standard` — a valid Agent Plugin; the standard governs its portable
+ *   components (skills and MCP servers). `realRoot` is the filesystem-resolved
+ *   plugin root every package path is contained within.
+ * - `invalid` — the root claims Agent Plugins conformance but its manifest is
+ *   fatally invalid; no component may be discovered or executed (spec §11.3).
+ */
+export type AgentPluginRootStatus = {
+    kind: "none";
+} | {
+    kind: "standard";
+    manifest: AgentPluginManifest;
+    warnings: string[];
+    realRoot: string;
+} | {
+    kind: "invalid";
+    reason: string;
+};
+/** Drop cached classifications (tests, or after plugin installs outside the shared registry flow). */
+export declare function clearAgentPluginRootCache(): void;
+/**
+ * Determine whether a plugin root is governed by the Agent Plugins standard.
+ * Results are cached per root path; the cache clears with the shared plugin
+ * roots cache and via {@link clearAgentPluginRootCache}.
+ */
+export declare function classifyAgentPluginRoot(rootPath: string): Promise<AgentPluginRootStatus>;
+/**
+ * Whether a legacy plugin provider (claude-plugins, omp-plugins) may process a
+ * root for the given surface. Roots governed by the Agent Plugins standard keep
+ * their portable components (`skills`, `mcp`) exclusive to the standard loader,
+ * while client-specific surfaces (commands, hooks, tools, …) still load from
+ * hybrid packages. Fatally invalid Agent Plugins packages are rejected entirely.
+ */
+export declare function legacyProviderAllowed(rootPath: string, surface: "skills" | "mcp" | "other"): Promise<boolean>;

package/dist/types/discovery/agent-plugins.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/discovery/contained-path.d.ts

@@ -0,0 +1,34 @@
+/** Lexical containment: `target` is `base` itself or a descendant of it. */
+export declare function isContained(base: string, target: string): boolean;
+/** Resolve symlinks and equivalents; `null` when the path is missing or unresolvable. */
+export declare function realpathIfExists(p: string): Promise<string | null>;
+/** Outcome of resolving a fixed package path without reading it. */
+export type ContainedPathResolution = {
+    status: "missing";
+} | {
+    status: "outside";
+} | {
+    status: "ok";
+    realPath: string;
+};
+/**
+ * Resolve a fixed package path WITHOUT reading it: symlinks and equivalent
+ * mechanisms are resolved first, and a path escaping the filesystem-resolved
+ * plugin root is rejected before any I/O could consume outside content.
+ */
+export declare function resolveContainedPath(realBase: string, target: string): Promise<ContainedPathResolution>;
+/**
+ * Verify a package path stays within the filesystem-resolved plugin root:
+ * lexically, and — when the target exists — after resolving symlinks. Unlike
+ * {@link resolveContainedPath}, a missing target passes. ONLY for configured
+ * paths that are validated but never read or executed at load time (stdio
+ * `command`, `cwd` — including `${PLUGIN_DATA}` paths created after
+ * validation); access paths MUST use {@link resolveContainedPath} instead,
+ * which fails closed on unresolvable targets.
+ */
+export declare function isContainedResolved(realBase: string, target: string): Promise<boolean>;
+/**
+ * Sync variant of {@link resolveContainedPath} for synchronous callsites
+ * (bash `skill://` expansion).
+ */
+export declare function resolveContainedPathSync(realBase: string, target: string): ContainedPathResolution;

package/dist/types/discovery/index.d.ts

@@ -18,6 +18,7 @@ import "../capability/slash-command.js";
 import "../capability/ssh.js";
 import "../capability/system-prompt.js";
 import "../capability/tool.js";
+import "./agent-plugins.js";
 import "./agents-md.js";
 import "./builtin.js";
 import "./builtin-defaults.js";

package/dist/types/extensibility/custom-commands/types.d.ts

@@ -5,7 +5,7 @@
  * Unlike markdown commands which expand to prompts, custom commands can execute
  * arbitrary logic with full access to the hook context.
  */
-import type * as arktype from "@oh-my-pi/omptype";
+import type { type as ArkType } from "@oh-my-pi/omptype";
 import type * as TypeBox from "@oh-my-pi/omptype/typebox";
 import type * as zod from "@oh-my-pi/omptype/zod";
 import type { ExecOptions, ExecResult, HookCommandContext } from "../../extensibility/hooks/types.js";
@@ -20,11 +20,11 @@ export interface CustomCommandAPI {
     cwd: string;
     /** Execute a shell command */
     exec(command: string, args: string[], options?: ExecOptions): Promise<ExecResult>;
-    /** Injected zod-backed typebox shim (legacy/compat). */
+    /** Injected TypeBox shim (legacy/compat). */
     typebox: typeof TypeBox;
-    /** Injected arktype module for validation in custom commands. */
-    arktype: typeof arktype;
-    /** Injected omptype-backed zod facade for command validation. */
+    /** Injected omptype schema builder for custom commands. */
+    arktype: typeof ArkType;
+    /** Injected Zod-compatible omptype builder for custom commands. */
     zod: typeof zod;
     /** Injected pi-coding-agent exports */
     pi: typeof PiCodingAgent;

package/dist/types/extensibility/custom-tools/types.d.ts

@@ -22,7 +22,7 @@ import type { LocalProtocolOptions } from "../../internal-urls/local-protocol.js
 import type { Theme } from "../../modes/theme/theme.js";
 import type { ReadonlySessionManager } from "../../session/session-manager.js";
 import type { TodoItem } from "../../tools/todo.js";
-import type { RecoveredRetryError } from "../shared-events.js";
+import type { RetryErrorUpdate } from "../shared-events.js";
 /** Alias for clarity */
 export type CustomToolUIContext = HookUIContext;
 export type { ExecOptions, ExecResult } from "../../exec/exec.js";
@@ -57,7 +57,7 @@ export interface CustomToolAPI {
     typebox: typeof TypeBox;
     /** Injected arktype module for arktype-authored custom tools. */
     arktype: typeof ArkType;
-    /** Injected omptype-backed zod facade for parameter schemas. */
+    /** Injected Zod-compatible omptype builder for custom tools. */
     zod: typeof zod;
     /** Injected pi-coding-agent exports */
     pi: typeof PiCodingAgent;
@@ -119,7 +119,7 @@ export type CustomToolSessionEvent = {
     success: boolean;
     attempt: number;
     finalError?: string;
-    recoveredErrors?: RecoveredRetryError[];
+    retryErrors?: RetryErrorUpdate[];
 } | {
     reason: "ttsr_triggered";
     rules: Rule[];

package/dist/types/extensibility/extensions/loader.d.ts

@@ -1,7 +1,7 @@
 import type { ThinkingLevel } from "@oh-my-pi/pi-agent-core";
 import type { ServiceTierByFamily } from "@oh-my-pi/pi-ai";
 import { EventBus } from "../../utils/event-bus.js";
-import type { Extension, ExtensionFactory, ExtensionRuntime as IExtensionRuntime, LoadExtensionsResult, ProviderConfig } from "./types.js";
+import type { Extension, ExtensionFactory, ExtensionRuntime as IExtensionRuntime, LoadExtensionsResult, ProviderConfig, ToolInfo } from "./types.js";
 export declare class ExtensionRuntimeNotInitializedError extends Error {
     constructor();
 }
@@ -16,12 +16,14 @@ export declare class ExtensionRuntime implements IExtensionRuntime {
         config: ProviderConfig;
         sourceId: string;
     }>;
+    registerProvider(name: string, config: ProviderConfig, sourceId: string): void;
+    unregisterProvider(name: string): void;
     sendMessage(): void;
     sendUserMessage(): void;
     appendEntry(): void;
     setLabel(): void;
     getActiveTools(): string[];
-    getAllTools(): string[];
+    getAllTools(): ToolInfo[];
     setActiveTools(): Promise<void>;
     getCommands(): never;
     setModel(): Promise<boolean>;
@@ -38,6 +40,11 @@ export declare class ExtensionRuntime implements IExtensionRuntime {
 export declare function loadExtensionFromFactory(factory: ExtensionFactory, cwd: string, eventBus: EventBus, runtime: IExtensionRuntime, name?: string): Promise<Extension>;
 /**
  * Load extensions from paths.
+ *
+ * Module import (the dominant cold-start cost — file I/O plus module
+ * evaluation) runs concurrently across extensions; factory binding then runs
+ * sequentially in the original path order, so registration semantics
+ * (last-wins collisions, shared runtime flag defaults) stay deterministic.
  */
 export declare function loadExtensions(paths: string[], cwd: string, eventBus?: EventBus): Promise<LoadExtensionsResult>;
 /**

package/dist/types/extensibility/extensions/types.d.ts

@@ -7,7 +7,7 @@
  * - Register commands, keyboard shortcuts, and CLI flags
  * - Interact with the user via UI primitives
  */
-import type { Type as arktype } from "@oh-my-pi/omptype";
+import type { type as ArkType } from "@oh-my-pi/omptype";
 import type * as TypeBox from "@oh-my-pi/omptype/typebox";
 import type * as zod from "@oh-my-pi/omptype/zod";
 import type { AgentMessage, AgentToolResult, AgentToolUpdateCallback, ThinkingLevel, ToolApproval, ToolLoadMode } from "@oh-my-pi/pi-agent-core";
@@ -432,6 +432,32 @@ export interface ToolDefinition<TParams extends TSchema = TSchema, TDetails = un
     /** Custom rendering for tool result display */
     renderResult?: (result: AgentToolResult<TDetails>, options: ToolRenderResultOptions, theme: Theme, args?: Static<TParams>) => Component;
 }
+/** Whether a tool's source is scoped to the user, the project, or a transient runtime session. */
+export type SourceScope = "user" | "project" | "temporary";
+/** Whether a tool's source came from an installed package or a top-level (loose) file. */
+export type SourceOrigin = "package" | "top-level";
+/**
+ * Provenance metadata describing where a registered tool came from. Mirrors the
+ * `@earendil-works/pi-coding-agent` `SourceInfo` contract so extensions authored
+ * against upstream pi (e.g. gentle-pi) can read `sourceInfo.source` unchanged.
+ */
+export interface SourceInfo {
+    /** Synthetic or on-disk identifier for the tool's origin (e.g. `<builtin:read>`). */
+    path: string;
+    /** Origin class: `"builtin"`, `"sdk"`, `"mcp"`, or `"extension"`. */
+    source: string;
+    scope: SourceScope;
+    origin: SourceOrigin;
+    baseDir?: string;
+}
+/** Tool metadata returned by {@link ExtensionAPI.getAllTools}: identity, schema, and source provenance. */
+export interface ToolInfo {
+    name: string;
+    description: string;
+    parameters: TSchema;
+    promptGuidelines?: string[];
+    sourceInfo: SourceInfo;
+}
 /** Fired after session_start to allow extensions to provide additional resource paths. */
 export interface ResourcesDiscoverEvent {
     type: "resources_discover";
@@ -736,11 +762,11 @@ export type ExtensionServiceTier<Family extends ServiceTierFamily> = Family exte
 export interface ExtensionAPI {
     /** File logger for error/warning/debug messages */
     logger: typeof PiLogger;
-    /** Injected zod-backed typebox shim for legacy `Type.Object(...)` parameter authoring. */
+    /** Injected TypeBox shim for legacy `Type.Object(...)` parameter authoring. */
     typebox: typeof TypeBox;
-    /** Injected arktype module for arktype-authored extension tools (canonical going forward). */
-    arktype: typeof arktype;
-    /** Injected omptype-backed zod facade for extension tool parameter schemas. */
+    /** Injected omptype schema builder for extension tools. */
+    arktype: typeof ArkType;
+    /** Injected Zod-compatible omptype builder for extension tools. */
     zod: typeof zod;
     /** Injected pi-coding-agent exports for accessing SDK utilities */
     pi: typeof PiCodingAgent;
@@ -835,8 +861,8 @@ export interface ExtensionAPI {
     exec(command: string, args: string[], options?: ExecOptions): Promise<ExecResult>;
     /** Get the list of currently active tool names. */
     getActiveTools(): string[];
-    /** Get all configured tools (built-in + extension tools). */
-    getAllTools(): string[];
+    /** Get all configured tools (built-in + extension tools) with schema and source metadata. */
+    getAllTools(): ToolInfo[];
     /** Set the active tools by name. */
     setActiveTools(toolNames: string[]): Promise<void>;
     /** Get available slash commands in the current session. */
@@ -892,6 +918,13 @@ export interface ExtensionAPI {
      * });
      */
     registerProvider(name: string, config: ProviderConfig): void;
+    /**
+     * Unregister a provider previously registered by an extension.
+     *
+     * Removes extension-provided models and restores overridden built-in models.
+     * Has no effect when the provider is not registered.
+     */
+    unregisterProvider(name: string): void;
     /** Shared event bus for extension communication. */
     events: EventBus;
 }
@@ -999,7 +1032,7 @@ export type SendUserMessageHandler = (content: string | (TextContent | ImageCont
 }) => void;
 export type AppendEntryHandler = <T = unknown>(customType: string, data?: T) => void;
 export type GetActiveToolsHandler = () => string[];
-export type GetAllToolsHandler = () => string[];
+export type GetAllToolsHandler = () => ToolInfo[];
 export type GetCommandsHandler = () => SlashCommandInfo[];
 export type SetActiveToolsHandler = (toolNames: string[]) => Promise<void>;
 export type SetModelHandler = (model: Model) => Promise<boolean>;
@@ -1016,6 +1049,10 @@ export interface ExtensionRuntimeState {
         config: ProviderConfig;
         sourceId: string;
     }>;
+    /** Queue a provider registration until initialization, then apply it immediately. */
+    registerProvider(name: string, config: ProviderConfig, sourceId: string): void;
+    /** Remove a queued or initialized provider registration. */
+    unregisterProvider(name: string, sourceId: string): void;
 }
 /** Action implementations for ExtensionAPI methods. */
 export interface ExtensionActions {

package/dist/types/extensibility/hooks/types.d.ts

@@ -1,4 +1,4 @@
-import type { Type } from "@oh-my-pi/omptype";
+import type { type as ArkType } from "@oh-my-pi/omptype";
 import type * as TypeBox from "@oh-my-pi/omptype/typebox";
 import type * as zod from "@oh-my-pi/omptype/zod";
 import type { ImageContent, Message, Model, TextContent } from "@oh-my-pi/pi-ai";
@@ -418,11 +418,11 @@ export interface HookAPI {
     exec(command: string, args: string[], options?: ExecOptions): Promise<ExecResult>;
     /** File logger for error/warning/debug messages */
     logger: typeof PiLogger;
-    /** Injected zod-backed typebox shim (legacy/compat — prefer `arktype`). */
+    /** Injected TypeBox shim (legacy/compat — prefer `arktype`). */
     typebox: typeof TypeBox;
-    /** Injected arktype module for arktype-authored hooks. */
-    arktype: typeof Type;
-    /** Injected omptype-backed zod facade for hook validation. */
+    /** Injected omptype schema builder for hooks. */
+    arktype: typeof ArkType;
+    /** Injected Zod-compatible omptype builder for hooks. */
     zod: typeof zod;
     /** Injected pi-coding-agent exports */
     pi: typeof PiCodingAgent;