@oh-my-pi/pi-coding-agent 17.2.9 → 17.2.11

package/dist/types/extensibility/shared-events.d.ts

@@ -200,7 +200,8 @@ export interface AutoRetryStartEvent {
     errorMessage: string;
     errorId?: number;
 }
-export interface RecoveredRetryError {
+/** Persisted retry error whose transcript presentation changed when the retry saga settled. */
+export interface RetryErrorUpdate {
     entryId: string;
     persistenceKey?: string;
     note: string;
@@ -212,7 +213,7 @@ export interface AutoRetryEndEvent {
     success: boolean;
     attempt: number;
     finalError?: string;
-    recoveredErrors?: RecoveredRetryError[];
+    retryErrors?: RetryErrorUpdate[];
 }
 /** Fired when TTSR rule matching interrupts generation */
 export interface TtsrTriggeredEvent {

package/dist/types/extensibility/skills.d.ts

@@ -13,6 +13,11 @@ export interface Skill {
      * prompt's `<skills>` listing.
      */
     hide?: boolean;
+    /**
+     * Filesystem-resolved plugin root for Agent Plugin skills (spec §4.1):
+     * every `skill://` resource access must realpath-resolve within it.
+     */
+    containRoot?: string;
     /** Source metadata for display */
     _source?: SourceMeta;
 }

package/dist/types/index.d.ts

@@ -1,8 +1,8 @@
 import { HookEditorComponent, HookInputComponent, HookSelectorComponent } from "./modes/components/index.js";
+export * as zod from "@oh-my-pi/omptype/zod";
+export { z } from "@oh-my-pi/omptype/zod";
 export { Container, Markdown, Spacer, Text } from "@oh-my-pi/pi-tui";
 export { getAgentDir, logger, VERSION } from "@oh-my-pi/pi-utils";
-export * as zod from "zod/v4";
-export { z } from "zod/v4";
 export * from "./config/keybindings.js";
 export * from "./config/model-registry.js";
 export type * from "./config/prompt-templates.js";

package/dist/types/main.d.ts

@@ -28,7 +28,7 @@ export interface AcpSessionFactoryOptions {
     sessionDir?: string;
     authStorage: AuthStorage;
     modelRegistry: ModelRegistry;
-    parsedArgs: Pick<Args, "apiKey">;
+    parsedArgs: Pick<Args, "apiKey" | "trustedExtensions">;
     rawArgs: string[];
     createSession: (options: CreateAgentSessionOptions) => Promise<CreateAgentSessionResult>;
 }

package/dist/types/mcp/transports/header-policy.d.ts

@@ -0,0 +1,45 @@
+/**
+ * HTTP header precedence and redirect-origin policy for remote MCP transports.
+ *
+ * Two invariants, applied at every transport fetch:
+ *
+ * 1. Client-generated headers (protocol headers like `Content-Type`, `Accept`,
+ *    `Mcp-Session-Id`, and authorization) take precedence over configured
+ *    headers with the same case-insensitive name. Configured headers can never
+ *    corrupt the MCP wire protocol via casing tricks.
+ * 2. Origin-locked servers (Agent Plugins §7.2.1) never forward configured
+ *    headers to a different origin: redirects are followed manually and
+ *    configured headers are attached only when the hop targets the configured
+ *    origin. Method-changing redirects of non-GET requests are refused.
+ */
+/** Header buckets for one MCP HTTP request. */
+export interface MCPHeaderSources {
+    /** Client-generated HTTP/MCP/authorization headers; win case-insensitively. */
+    generated: Record<string, string>;
+    /** Configured headers from the server entry (package or user config). */
+    configured?: Record<string, string>;
+}
+/**
+ * Merge configured headers under client-generated ones: a configured entry is
+ * dropped when a generated header with the same case-insensitive name exists.
+ */
+export declare function mergeMCPHeaders({ generated, configured }: MCPHeaderSources): Record<string, string>;
+/**
+ * Set a client-generated header, removing any existing entry with the same
+ * case-insensitive name so the generated value is the only one sent.
+ */
+export declare function setGeneratedHeader(headers: Record<string, string>, name: string, value: string): void;
+export interface MCPFetchInit {
+    method: "GET" | "POST" | "DELETE";
+    body?: string;
+    signal?: AbortSignal;
+}
+/**
+ * Fetch an MCP endpoint with header precedence and, for origin-locked servers,
+ * manual redirect handling that strips configured headers on cross-origin hops.
+ *
+ * Non-locked servers keep the platform default redirect behavior. Locked
+ * non-GET requests only follow 307/308 (method-preserving); a 301/302/303
+ * redirect of a JSON-RPC POST is a connection error, never a silent GET.
+ */
+export declare function mcpFetch(url: string, init: MCPFetchInit, sources: MCPHeaderSources, originLocked: boolean): Promise<Response>;

package/dist/types/mcp/types.d.ts

@@ -82,6 +82,13 @@ export interface MCPStdioServerConfig extends MCPServerConfigBase {
     command: string;
     args?: string[];
     env?: Record<string, string>;
+    /**
+     * `literal`: env values are opaque plugin package data (Agent Plugins
+     * §§4.1/9.2) — no env-name lookup, no `!command` execution, no dropping of
+     * empty values. The provider already applied the only permitted expansion
+     * (`${PLUGIN_ROOT}`/`${PLUGIN_DATA}`).
+     */
+    envPolicy?: "literal";
     cwd?: string;
 }
 /** HTTP server configuration (Streamable HTTP transport) */
@@ -89,12 +96,20 @@ export interface MCPHttpServerConfig extends MCPServerConfigBase {
     type: "http";
     url: string;
     headers?: Record<string, string>;
+    /**
+     * `origin-locked`: configured headers are literal package data pinned to the
+     * configured URL's origin (Agent Plugins §7.2.1) — never expanded, never
+     * forwarded cross-origin, and client-generated headers win case-insensitively.
+     */
+    headerPolicy?: "origin-locked";
 }
 /** SSE server configuration (deprecated, use HTTP) */
 export interface MCPSseServerConfig extends MCPServerConfigBase {
     type: "sse";
     url: string;
     headers?: Record<string, string>;
+    /** See {@link MCPHttpServerConfig.headerPolicy}. */
+    headerPolicy?: "origin-locked";
 }
 export type MCPServerConfig = MCPStdioServerConfig | MCPHttpServerConfig | MCPSseServerConfig;
 export declare const MCP_CONFIG_SCHEMA_URL = "https://raw.githubusercontent.com/can1357/oh-my-pi/main/packages/coding-agent/src/config/mcp-schema.json";

package/dist/types/modes/acp/acp-agent.d.ts

@@ -1,5 +1,5 @@
-import { type Agent, type AgentSideConnection, type AuthenticateRequest, type AuthenticateResponse, type ClientCapabilities, type CloseSessionRequest, type CloseSessionResponse, type ForkSessionRequest, type ForkSessionResponse, type InitializeRequest, type InitializeResponse, type ListSessionsRequest, type ListSessionsResponse, type LoadSessionRequest, type LoadSessionResponse, type NewSessionRequest, type NewSessionResponse, type PromptRequest, type PromptResponse, type ResumeSessionRequest, type ResumeSessionResponse, type SetSessionConfigOptionRequest, type SetSessionConfigOptionResponse, type SetSessionModeRequest, type SetSessionModeResponse } from "@agentclientprotocol/sdk";
 import { type postmortem } from "@oh-my-pi/pi-utils";
+import { type Agent, type AgentSideConnection, type AuthenticateRequest, type AuthenticateResponse, type ClientCapabilities, type CloseSessionRequest, type CloseSessionResponse, type ForkSessionRequest, type ForkSessionResponse, type InitializeRequest, type InitializeResponse, type ListSessionsRequest, type ListSessionsResponse, type LoadSessionRequest, type LoadSessionResponse, type NewSessionRequest, type NewSessionResponse, type PromptRequest, type PromptResponse, type ResumeSessionRequest, type ResumeSessionResponse, type SetSessionConfigOptionRequest, type SetSessionConfigOptionResponse, type SetSessionModeRequest, type SetSessionModeResponse } from "@oh-my-pi/pi-utils/acp";
 import { type ExtensionUIContext } from "../../extensibility/extensions/index.js";
 import type { AgentSession } from "../../session/agent-session.js";
 /**

package/dist/types/modes/acp/acp-client-bridge.d.ts

@@ -4,6 +4,6 @@
  * `AgentSession`) can route through the client when it advertises the
  * relevant capabilities at `initialize` time.
  */
-import type { AgentSideConnection, ClientCapabilities } from "@agentclientprotocol/sdk";
+import type { AgentSideConnection, ClientCapabilities } from "@oh-my-pi/pi-utils/acp";
 import type { ClientBridge } from "../../session/client-bridge.js";
 export declare function createAcpClientBridge(connection: AgentSideConnection, sessionId: string, clientCapabilities: ClientCapabilities | undefined): ClientBridge;

package/dist/types/modes/acp/acp-event-mapper.d.ts

@@ -1,4 +1,4 @@
-import type { SessionNotification, SessionUpdate, ToolKind } from "@agentclientprotocol/sdk";
+import type { SessionNotification, SessionUpdate, ToolKind } from "@oh-my-pi/pi-utils/acp";
 import type { AgentSessionEvent } from "../../session/agent-session.js";
 interface MessageProgress {
     textEmitted: boolean;

package/dist/types/modes/acp/acp-mode.d.ts

@@ -1,4 +1,4 @@
-import { AgentSideConnection, type Stream } from "@agentclientprotocol/sdk";
+import { AgentSideConnection, type Stream } from "@oh-my-pi/pi-utils/acp";
 import type { AgentSession } from "../../session/agent-session.js";
 import { AcpAgent } from "./acp-agent.js";
 /** Creates sessions requested by an ACP client. */

package/dist/types/modes/components/agent-hub-projection.d.ts

@@ -0,0 +1,38 @@
+import type { AgentMetricsSummary, AgentRef, AgentStatus } from "../../registry/agent-registry.js";
+import type { ObservableSession } from "../session-observer-registry.js";
+export type AgentMetrics = AgentMetricsSummary;
+export interface AggregateMetrics extends AgentMetrics {
+    reportedAgents: number;
+    /** Rows whose duration is an observer-measured active runtime. */
+    activeDurationAgents: number;
+}
+export interface AgentTreeProjection {
+    rows: AgentRef[];
+    depthById: Map<string, number>;
+    parentById: Map<string, string>;
+    lastSiblingById: Map<string, boolean>;
+}
+export declare const STATUS_ORDER: Record<AgentStatus, number>;
+/** Exact observer usage for one roster entry. */
+export declare function progressMetrics(observed: ObservableSession | undefined): AgentMetrics | undefined;
+/**
+ * Read direct assistant usage from a live session. SessionStats also includes
+ * usage embedded in completed `task` tool results, so using it for a parent
+ * row would double-count child rows in the aggregate.
+ */
+export declare function readSessionMetrics(session: NonNullable<AgentRef["session"]>): AgentMetrics | undefined;
+export declare function aggregateMetrics(args: {
+    rows: readonly AgentRef[];
+    observedById: ReadonlyMap<string, ObservableSession>;
+    metricsFor: (ref: AgentRef, observed: ObservableSession | undefined) => AgentMetrics | undefined;
+    fallbackStatsSession: (ref: AgentRef, observed: ObservableSession | undefined) => NonNullable<AgentRef["session"]> | undefined;
+    sessionMetrics: WeakMap<object, {
+        metrics: AgentMetrics | undefined;
+    }>;
+    refreshFallback: boolean;
+}): {
+    metrics: AggregateMetrics;
+    hasFallbackLiveSessions: boolean;
+};
+/** Parent-before-child projection preserving the roster's stable sibling order. */
+export declare function projectAgentTree(refs: readonly AgentRef[]): AgentTreeProjection;

package/dist/types/modes/components/agent-hub-renderer.d.ts

@@ -0,0 +1,41 @@
+import { ThinkingLevel } from "@oh-my-pi/pi-agent-core";
+import type { Settings } from "../../config/settings.js";
+import { type AgentRef } from "../../registry/agent-registry.js";
+import type { ObservableSession } from "../session-observer-registry.js";
+import type { AgentMetrics } from "./agent-hub-projection.js";
+export interface RosterRender {
+    lines: string[];
+    hitRows: Array<number | undefined>;
+}
+/** Legacy progress snapshots may omit counters; snapshot absence remains distinct. */
+export declare function metricNumber(value: number | undefined): number;
+/** Compute the max content width for the current terminal, accounting for chrome. */
+export declare function contentWidth(): number;
+/** Remove terminal controls and normalize a value before it reaches the TUI. */
+export declare function sanitizeDisplayText(text: string): string;
+/** Sanitize a line for TUI display and truncate it to the viewport width. */
+export declare function sanitizeLine(text: string, maxWidth?: number): string;
+export declare function clampHubLine(line: string, width: number): string;
+/** Status glyph, colored per theme status conventions. The title-line counts spell out the words. */
+export declare function statusGlyph(status: AgentRef["status"]): string;
+export declare function statusText(status: AgentRef["status"], text: string): string;
+/** Model id + thinking level (`sonnet-4-6 ◒ high`), level colored per theme. */
+export declare function formatModelBadge(modelId: string, level: ThinkingLevel | undefined): string;
+/** Textual model-role tag; color reinforces (but never replaces) the label. */
+export declare function formatRoleBadge(role: string, settings: Settings): string;
+/** Format a resolved selector, preserving provider identity when requested. */
+export declare function formatResolvedModelBadge(resolved: string, preserveProvider?: boolean, fallbackLevel?: ThinkingLevel): string;
+/**
+ * Resolved model + reasoning level for a hub row. Exact executor progress is
+ * authoritative (and survives completion); direct live sessions are the
+ * fallback for agents without an observer snapshot.
+ */
+export declare function modelBadge(ref: AgentRef, observed: ObservableSession | undefined): string | undefined;
+export declare function formatMetricDuration(metrics: AgentMetrics): string | undefined;
+export declare function formatCost(cost: number): string;
+export declare function formatMetrics(metrics: AgentMetrics): string;
+export declare function contextGauge(tokens: number, window: number): string;
+/** Fit a child-id preview without joining an arbitrarily large child set. */
+export declare function formatChildIds(children: readonly AgentRef[], width: number): string;
+/** Bash `tree`-style ancestry prefix, clipped from the left on pathological depth. */
+export declare function treeBranch(ref: AgentRef, maxWidth: number, depthById: ReadonlyMap<string, number>, parentById: ReadonlyMap<string, string>, lastSiblingById: ReadonlyMap<string, boolean>): string;

package/dist/types/modes/components/agent-hub.d.ts

@@ -4,8 +4,8 @@
  * One overlay, two views:
  * - Table view: every registered agent except Main (Main IS the ambient
  *   chat), live from the global AgentRegistry — status, unread irc count,
- *   current/last task, last activity. Select with j/k, Enter opens a chat,
- *   `r` revives a parked agent, `x` aborts + releases one.
+ *   current/last task, last activity. Navigate with keys, wheel, hover, and
+ *   click; `r` revives a parked agent, `x` aborts + releases one.
  * - Chat view: per-agent transcript (incremental session-file tail, absorbed
  *   from the old session observer overlay) plus an input line. Submitting
  *   revives a parked agent, then prompts/steers it; the message lands in the
@@ -13,9 +13,10 @@
  *
  * Replaces the old SessionObserverOverlayComponent (ctrl+s observer).
  */
-import { type AgentTool } from "@oh-my-pi/pi-agent-core";
-import { Container, type TUI } from "@oh-my-pi/pi-tui";
+import type { AgentTool } from "@oh-my-pi/pi-agent-core";
+import { Container, type SelectListMouseTarget, type TUI } from "@oh-my-pi/pi-tui";
 import type { KeyId } from "../../config/keybindings.js";
+import type { Settings } from "../../config/settings.js";
 import type { MessageRenderer } from "../../extensibility/extensions/types.js";
 import { IrcBus } from "../../irc/bus.js";
 import { AgentLifecycleManager } from "../../registry/agent-lifecycle.js";
@@ -39,6 +40,8 @@ export interface AgentHubRemote {
 export interface AgentHubDeps {
     /** Progress/status snapshot source (task lifecycle + progress channels). */
     observers: SessionObserverRegistry;
+    /** Production settings used to resolve textual model-role tags. */
+    settings?: Settings;
     /** Keys that toggle the hub closed from inside (app.agents.hub + app.session.observe). */
     hubKeys: KeyId[];
     onDone: () => void;
@@ -53,6 +56,8 @@ export interface AgentHubDeps {
     ui?: TUI;
     /** Tool lookup for transcript renderers (labels, custom render functions). */
     getTool?: (name: string) => AgentTool | undefined;
+    /** Whether the active registry entry came from a built-in factory. */
+    isBuiltInTool?: (name: string) => boolean;
     /** Extension message renderers for custom messages in the transcript. */
     getMessageRenderer?: (customType: string) => MessageRenderer | undefined;
     /** Cwd used by tool renderers for path shortening; defaults to the project dir. */
@@ -69,7 +74,7 @@ export interface AgentHubDeps {
     /** Collab guest: route actions/transcripts to the host instead of local sessions. */
     remote?: AgentHubRemote;
 }
-export declare class AgentHubOverlayComponent extends Container {
+export declare class AgentHubOverlayComponent extends Container implements SelectListMouseTarget {
     #private;
     /** Resolves after persisted historical subagents have been registered and rows refreshed. */
     readonly persistedSubagentsReady: Promise<void>;
@@ -101,4 +106,8 @@ export declare class AgentHubOverlayComponent extends Container {
      * restored when the viewer closes. No-op without a real TUI (render-only test stub).
      */
     openChat(id: string): void;
+    handleWheel(delta: -1 | 1): void;
+    hitTest(line: number): number | undefined;
+    setHoverIndex(index: number | null): void;
+    clickItem(index: number): void;
 }

package/dist/types/modes/components/agent-transcript-viewer.d.ts

@@ -17,6 +17,8 @@ export interface AgentTranscriptViewerDeps {
     lifecycle?: () => AgentLifecycleManager;
     ui: TUI;
     getTool?: (name: string) => AgentTool | undefined;
+    /** Whether the active registry entry came from a built-in factory. */
+    isBuiltInTool?: (name: string) => boolean;
     getMessageRenderer?: (customType: string) => MessageRenderer | undefined;
     cwd: string;
     hideThinkingBlock?: () => boolean;

package/dist/types/modes/components/chat-transcript-builder.d.ts

@@ -19,6 +19,8 @@ import { TranscriptContainer } from "./transcript-container.js";
 export interface ChatTranscriptBuilderDeps {
     ui: TUI;
     getTool?: (name: string) => AgentTool | undefined;
+    /** Whether the active registry entry came from a built-in factory. */
+    isBuiltInTool?: (name: string) => boolean;
     getMessageRenderer?: (customType: string) => MessageRenderer | undefined;
     cwd: string;
     hideThinkingBlock?: () => boolean;

package/dist/types/modes/components/custom-editor.d.ts

@@ -1,7 +1,7 @@
 import type { ImageContent } from "@oh-my-pi/pi-ai";
 import { Editor, type KeyId, TUI } from "@oh-my-pi/pi-tui";
 import type { AppKeybinding } from "../../config/keybindings.js";
-type ConfigurableEditorAction = Extract<AppKeybinding, "app.interrupt" | "app.clear" | "app.exit" | "app.suspend" | "app.display.reset" | "app.thinking.cycle" | "app.model.cycleForward" | "app.model.cycleBackward" | "app.model.select" | "app.model.selectTemporary" | "app.tools.expand" | "app.tools.toggleVisibility" | "app.thinking.toggle" | "app.editor.external" | "app.history.search" | "app.message.dequeue" | "app.retry" | "app.clipboard.pasteImage" | "app.clipboard.pasteTextRaw" | "app.clipboard.copyPrompt">;
+type ConfigurableEditorAction = Extract<AppKeybinding, "app.interrupt" | "app.clear" | "app.exit" | "app.suspend" | "app.display.reset" | "app.thinking.cycle" | "app.model.cycleForward" | "app.model.cycleBackward" | "app.model.select" | "app.model.selectTemporary" | "app.tools.toggleVisibility" | "app.thinking.toggle" | "app.editor.external" | "app.history.search" | "app.message.dequeue" | "app.retry" | "app.clipboard.pasteImage" | "app.clipboard.pasteTextRaw" | "app.clipboard.copyPrompt">;
 /** Max gap (ms) between two spaces for the later one to count as OS key auto-repeat rather than a
  *  deliberate press. OS auto-repeat is fast; a deliberate tap (even a fast one) is slower. */
 export declare const SPACE_REPEAT_MAX_GAP_MS = 120;
@@ -140,7 +140,6 @@ export declare class CustomEditor extends Editor {
     onCycleModelForward?: () => void;
     onCycleModelBackward?: () => void;
     onSelectModel?: () => void;
-    onExpandTools?: () => void;
     onToggleToolActivity?: () => void;
     onToggleThinking?: () => void;
     onExternalEditor?: () => void;

package/dist/types/modes/components/model-browser.d.ts

@@ -50,8 +50,16 @@ export declare function sortModelItems(items: ModelBrowserItem[], options?: Sort
 /** Compact glyph for a configured thinking level; empty for `inherit` (nothing to show). */
 export declare function thinkingLevelGlyph(level: ConfiguredThinkingLevel): string;
 /**
- * A slim role chip: `●default ◉` — solid dot for configured assignments,
+ * A slim role chip: `● default ◉` — solid dot for configured assignments,
  * hollow for auto-selected fallbacks, thinking glyph attached when set.
+ *
+ * The space after the status glyph is load-bearing. Under the `nerd` preset
+ * these are Nerd Font private-use icons (U+F111 / U+F10C) whose glyphs are
+ * drawn two cells wide, while `visibleWidth` counts them as one
+ * (`ambiguousIsNarrow: true` in tui/utils.ts — the PUA block is
+ * East_Asian_Width=Ambiguous). Without a separator the icon overhangs and
+ * eats the label's first character (`● default` renders as `●efault`).
+ * Mirrors the spacing already used for `status.success` in model-hub.
  */
 export declare function formatRoleChip(role: string, assignment: RoleAssignment, settings: Settings): string;
 /** Behavior switches for {@link ModelBrowser}. */

package/dist/types/modes/components/status-line/types.d.ts

@@ -52,6 +52,8 @@ export interface SegmentContext {
     session: AgentSession;
     /** Focused subagent id while the view is proxied at its session, undefined otherwise. */
     focusedAgentId?: string | undefined;
+    /** Effective `statusLine.sessionAccent`; `false` disables hash-derived accent colors, while `true` or omission enables them. */
+    sessionAccent?: boolean;
     activeRepo: ActiveRepoContext | null;
     width: number;
     options: StatusLineSegmentOptions;

package/dist/types/modes/components/tool-execution.d.ts

@@ -28,6 +28,8 @@ export interface ToolExecutionOptions {
     /** Session-persistent edit clipboard register, forked per preview frame. */
     clipboard?: Clipboard;
     showImages?: boolean;
+    /** Allow the name-keyed renderer registry only when the active tool is the built-in implementation. */
+    useBuiltInRenderer?: boolean;
     editFuzzyThreshold?: number;
     editAllowFuzzy?: boolean;
     /** Live-region probe used to settle detached task progress once the block

package/dist/types/modes/interactive-mode.d.ts

@@ -284,7 +284,14 @@ export declare class InteractiveMode implements InteractiveModeContext {
     initializeHookRunner(uiContext: ExtensionUIContext, hasUI: boolean): void;
     setEditorComponent(factory: ((tui: TUI, theme: EditorTheme, keybindings: KeybindingsManager) => CustomEditor) | undefined): void;
     present(content: Component | readonly Component[]): void;
-    /** Defer transcript command panels until the active turn can no longer grow above them. */
+    /**
+     * Defer transcript command panels while the agent is streaming, then mount
+     * them at the next settle, terminal or not. A non-terminal settle is only a
+     * scheduling pause, so resumed streaming can still land below a panel
+     * flushed there. That is preferred over leaving it queued behind a command
+     * the user runs during the pause, which mounts immediately and would put the
+     * older panel out of order.
+     */
     presentCommandOutput(content: Component | readonly Component[]): void;
     /** Mount every command panel queued for the current session while the agent was streaming. */
     flushPendingCommandOutput(): void;

package/dist/types/modes/utils/transcript-render-helpers.d.ts

@@ -68,8 +68,9 @@ export type AssistantErrorPresentation = {
 };
 /**
  * Resolve the turn-ending assistant error presentation, if any.
- * Silent and user-interrupt aborts yield no label. Recovered auto-retry errors
- * collapse to a single non-error note; terminal errors keep the full red presentation.
+ * Silent and user-interrupt aborts yield no label. Recovered retry attempts
+ * render a compact note; attempts superseded by an exhausted budget are hidden
+ * while the final terminal error keeps its full presentation.
  */
 export declare function resolveAssistantErrorPresentation(message: AssistantAgentMessage, retryAttempt?: number): AssistantErrorPresentation;
 /**

package/dist/types/registry/agent-registry.d.ts

@@ -10,6 +10,9 @@
  */
 import type { AgentSession } from "../session/agent-session.js";
 export declare const MAIN_AGENT_ID = "Main";
+/** Sidecar marker retained beside a child transcript after an explicit kill. */
+export declare const AGENT_TOMBSTONE_SUFFIX = ".tombstone";
+export declare function getAgentTombstonePath(sessionFile: string): string;
 /**
  * - `running`: a turn is in flight.
  * - `idle`: live AgentSession in memory, awaiting work. Finished agents are
@@ -18,6 +21,8 @@ export declare const MAIN_AGENT_ID = "Main";
  * - `aborted`: hard-killed, terminal.
  */
 export type AgentStatus = "running" | "idle" | "parked" | "aborted";
+/** Provenance of a displayed duration: active runtime, transcript span, or unavailable. */
+export type AgentDurationKind = "active" | "span" | "unknown";
 /**
  * - `main`/`sub`: the user-facing agent tree (driving agent + task subagents).
  * - `advisor`: a passive review transcript persisted like a subagent for usage
@@ -25,6 +30,33 @@ export type AgentStatus = "running" | "idle" | "parked" | "aborted";
  *   agent-facing rosters (`hub`, `history://`) and not messageable/revivable.
  */
 export type AgentKind = "main" | "sub" | "advisor";
+/** Persisted per-agent totals reconstructed from the child session transcript. */
+export interface AgentMetricsSummary {
+    tokens: number;
+    requests: number;
+    tools: number;
+    cost: number;
+    durationMs: number;
+    durationKind?: AgentDurationKind;
+    contextTokens?: number;
+    contextWindow?: number;
+}
+/** Historical identity and telemetry that remain available after the live session is disposed. */
+export interface AgentHistorySummary {
+    agent?: string;
+    modelRole?: string;
+    resolvedModel?: string;
+    /** Whether the last resolved model was selected by retry fallback routing. */
+    resolvedModelIsFallback?: boolean;
+    metrics?: AgentMetricsSummary;
+    readOnly?: boolean;
+    /** Durable task output artifact, when the executor wrote one. */
+    outputPath?: string;
+    /** Captured isolated-worktree patch, when patch capture succeeded. */
+    patchPath?: string;
+    /** Isolated branch identity, when branch-mode capture succeeded. */
+    branchName?: string;
+}
 export interface AgentRef {
     id: string;
     displayName: string;
@@ -38,6 +70,8 @@ export interface AgentRef {
     lastActivity: number;
     /** Short gist of what the agent is currently doing (latest intent or tool), for the work-aware roster. Display-only. */
     activity?: string;
+    /** Persisted identity and telemetry restored after the live observer is gone. */
+    history?: AgentHistorySummary;
 }
 export type AgentRefExpectation = AgentRef | AgentSession;
 export type RegistryEvent = {
@@ -46,6 +80,9 @@ export type RegistryEvent = {
 } | {
     type: "status_changed";
     ref: AgentRef;
+} | {
+    type: "metadata_changed";
+    ref: AgentRef;
 } | {
     type: "removed";
     ref: AgentRef;
@@ -59,6 +96,14 @@ export interface RegisterInput {
     session: AgentSession | null;
     sessionFile?: string | null;
     status?: AgentStatus;
+    /** Last persisted task summary, when restoring a historical agent. */
+    activity?: string;
+    /** Original registration timestamp, when known from persisted history. */
+    createdAt?: number;
+    /** Last transcript activity timestamp, when known from persisted history. */
+    lastActivity?: number;
+    /** Persisted identity and telemetry restored after the live observer is gone. */
+    history?: AgentHistorySummary;
 }
 export declare class AgentRegistry {
     #private;
@@ -73,6 +118,8 @@ export declare class AgentRegistry {
      * id after its prior generation disappeared or was hard-killed.
      */
     registerIfAvailable(input: RegisterInput, expected: AgentRef | null): AgentRef | undefined;
+    /** Attach transcript-derived identity and telemetry without changing lifecycle state. */
+    setHistory(id: string, history: AgentHistorySummary, expectedSessionFile?: string): boolean;
     setStatus(id: string, status: AgentStatus, expected?: AgentRefExpectation): boolean;
     /**
      * Record a short activity gist for the work-aware roster. Display-only and

package/dist/types/registry/persisted-agents.d.ts

@@ -1,3 +1,5 @@
 import { type AgentRegistry } from "./agent-registry.js";
 /** Register persisted subagent and advisor transcripts as parked registry refs. */
-export declare function registerPersistedSubagents(registry: AgentRegistry, sessionFile: string | null | undefined): Promise<void>;
+export declare function registerPersistedSubagents(registry: AgentRegistry, sessionFile: string | null | undefined, options?: {
+    shouldContinue?: () => boolean;
+}): Promise<void>;

package/dist/types/secrets/index.d.ts

@@ -1,4 +1,4 @@
-import { type SecretEntry } from "./obfuscator.js";
+import { type SecretEntry, SecretObfuscator } from "./obfuscator.js";
 /**
  * Per-install secret key for the placeholder digest. Persisted under XDG state
  * and never sent to a provider, so model-visible placeholders cannot be reversed
@@ -40,3 +40,25 @@ export declare function collectEnvSecrets(): SecretEntry[];
  * transparent because the round trip is lossless.
  */
 export declare function builtinCredentialSecretEntries(): SecretEntry[];
+/**
+ * Build the session secret obfuscator from every configured source: secrets.yml
+ * (project + global), secret-shaped environment variables, and the built-in
+ * credential patterns. Callers gate on `secrets.enabled`.
+ *
+ * Only CONFIGURED entries force startup key creation: a configured
+ * obfuscate-mode secret — or a default (no custom `replacement`) replace-mode
+ * regex whose key-derived idempotent fallback marker needs a stable key across
+ * restarts (see `secretEntryNeedsPlaceholderKey`) — mints placeholders as soon
+ * as the obfuscator is built. The built-in credential-pattern entry matches
+ * dynamically, so it resolves the persisted key lazily on first match instead
+ * of creating the key file for every secrets-enabled session.
+ *
+ * When no configured entry produced an active secret but a persisted key
+ * exists, returns a redaction-only obfuscator so a tool read of the key file
+ * does not ship the reusable HMAC key to the provider. Returns undefined when
+ * there is nothing to protect.
+ *
+ * `keyDir` is the explicit agent dir override for the placeholder-key file
+ * (default XDG/agent location when omitted).
+ */
+export declare function buildSecretObfuscator(cwd: string, agentDir: string, keyDir?: string): Promise<SecretObfuscator | undefined>;

package/dist/types/session/agent-session-events.d.ts

@@ -2,7 +2,7 @@ import type { AgentEvent, ThinkingLevel } from "@oh-my-pi/pi-agent-core";
 import type { CompactionResult } from "@oh-my-pi/pi-agent-core/compaction";
 import type { Effort } from "@oh-my-pi/pi-ai";
 import type { Rule } from "../capability/rule.js";
-import type { RecoveredRetryError } from "../extensibility/shared-events.js";
+import type { RetryErrorUpdate } from "../extensibility/shared-events.js";
 import type { Goal, GoalModeState } from "../goals/state.js";
 import type { ConfiguredThinkingLevel } from "../thinking.js";
 import type { TodoItem } from "../tools/todo.js";
@@ -40,7 +40,7 @@ export type AgentSessionEvent = Exclude<AgentEvent, {
     success: boolean;
     attempt: number;
     finalError?: string;
-    recoveredErrors?: RecoveredRetryError[];
+    retryErrors?: RetryErrorUpdate[];
 } | {
     type: "retry_fallback_applied";
     from: string;

package/dist/types/session/agent-session.d.ts

@@ -29,7 +29,7 @@ import type { BashResult } from "../exec/bash-executor.js";
 import type { TtsrManager } from "../export/ttsr.js";
 import type { LoadedCustomCommand } from "../extensibility/custom-commands/index.js";
 import type { CustomTool } from "../extensibility/custom-tools/types.js";
-import type { ExtensionRunner, ExtensionUIContext } from "../extensibility/extensions/index.js";
+import type { ExtensionRunner, ExtensionUIContext, ToolInfo } from "../extensibility/extensions/index.js";
 import type { CompactOptions, ContextUsage } from "../extensibility/extensions/types.js";
 import type { Skill, SkillWarning } from "../extensibility/skills.js";
 import { type FileSlashCommand } from "../extensibility/slash-commands.js";
@@ -83,7 +83,7 @@ export declare class AgentSession {
     /**
      * Arm prewalk outside the normal startup path so an explicit slash command starts immediately.
      */
-    armPrewalk(target: Model, thinkingLevel?: ConfiguredThinkingLevel): void;
+    armPrewalk(target: Model, thinkingLevel?: ConfiguredThinkingLevel): boolean;
     /** Validate the active plan artifact and shape an `xd://propose` result for review-mode hosts. */
     preparePlanForReview(title: string): Promise<AgentToolResult<PlanApprovalDetails>>;
     constructor(config: AgentSessionConfig);
@@ -285,6 +285,8 @@ export declare class AgentSession {
     hasBuiltInTool(name: string): boolean;
     /** Names of every registered tool. */
     getAllToolNames(): string[];
+    /** Full metadata for every registered tool, including source provenance (backs `getAllTools()`). */
+    getAllToolInfos(): ToolInfo[];
     /** Installs and activates the ephemeral vibe tool set. */
     activateVibeTools(baseToolNames: string[]): Promise<void>;
     /** Uninstalls vibe tools and activates the replacement set. */

package/dist/types/session/messages.d.ts

@@ -12,6 +12,7 @@ import type { OutputMeta } from "../tools/output-meta.js";
 export declare const SKILL_PROMPT_MESSAGE_TYPE = "skill-prompt";
 export declare const LSP_LATE_DIAGNOSTIC_MESSAGE_TYPE = "lsp-late-diagnostic";
 export declare const BACKGROUND_TAN_DISPATCH_MESSAGE_TYPE = "background-tan-dispatch";
+export declare const PREWALK_PLAN_MESSAGE_TYPE = "prewalk-plan";
 /**
  * Logs provider-error turns so their actual cause is available outside the
  * session transcript. No-op for non-error stop reasons.

package/dist/types/session/prewalk.d.ts

@@ -6,6 +6,8 @@ import { type ConfiguredThinkingLevel } from "../thinking.js";
 import type { PlanProposalHandler } from "../tools/resolve.js";
 import type { PlanYolo, Prewalk } from "./agent-session-types.js";
 import type { SessionManager } from "./session-manager.js";
+/** Hidden plan steering is consumed within the live run and must not reappear after a context rebuild. */
+export declare function isPrewalkPlanNudge(message: AgentMessage): boolean;
 /** Capabilities the prewalk coordinator borrows from its owning session. */
 export interface PrewalkCoordinatorHost {
     agent: Agent;
@@ -41,7 +43,7 @@ export declare class PrewalkCoordinator {
     /** Advances the one-way prewalk switch at a completed assistant-turn boundary. */
     advanceAtTurnEnd(liveMessages: AgentMessage[], context: AgentTurnEndContext | undefined): Promise<void>;
     /** Arms a prewalk immediately for an explicit slash-command request. */
-    arm(target: Model, thinkingLevel?: ConfiguredThinkingLevel): void;
+    arm(target: Model, thinkingLevel?: ConfiguredThinkingLevel): boolean;
     /** Lazily enables plan-yolo's plan phase before the first prompt is built. */
     armPlanYoloIfNeeded(): Promise<void>;
 }