@oh-my-pi/pi-tui 18.11.0 → 18.11.2

package/dist/types/prompt/custom-editor.d.ts

@@ -198,6 +198,8 @@ export declare class CustomEditor extends Editor {
      *  item markers use the accent color so separate follow-ups remain visible while composing.
      *  Called once per layout segment, so whole-buffer inputs are computed once per text revision. */
     decorateText: (text: string, context: EditorTextDecorationContext) => string;
+    /** Catch the typed word up with the caret first: its leaving the word (or a blur) re-describes the typo marks. */
+    describe(cx: DescribeContext): NativeNode;
     /**
      * TSP decorations: magic keywords shimmer (terminal-clocked) in the accent
      * color, chips and markers take their token colors, misspellings are marked,

package/dist/types/prompt/image-references.d.ts

@@ -1,4 +1,5 @@
 import type { ImageContent } from "@oh-my-pi/pi-ai";
+import type { TspSpan } from "@oh-my-pi/pi-wire";
 /** Materialized image destination returned by the host blob writer. */
 interface ImageBlobResult {
     displayPath: string;
@@ -23,4 +24,25 @@ type ImageBlobWriterSync = (data: Buffer, options?: {
 export declare function imageReferenceHyperlink(label: string, index: number, imageLinks: readonly (string | undefined)[] | undefined, renderLabel: (text: string) => string): string;
 export declare function materializeImageReferenceLinks(images: readonly ImageContent[] | undefined, putBlob: ImageBlobWriter): Promise<(string | undefined)[] | undefined>;
 export declare function materializeImageReferenceLinksSync(images: readonly ImageContent[] | undefined, putBlob: ImageBlobWriterSync): (string | undefined)[] | undefined;
+/**
+ * Register the host's blob writer that backs links for images without a file of their
+ * own. Returns a disposer that unregisters it unless another writer replaced it since.
+ */
+export declare function setImageBlobWriter(next: ImageBlobWriterSync): () => void;
+/**
+ * Whether transcript images carry links under the current `tui.hyperlinks` policy: a
+ * native surface honours only an explicit `off`, text mode the resolved OSC 8 support.
+ * Renderers caching a linked image key their cache on it.
+ */
+export declare function imageLinksEnabled(): boolean;
+/**
+ * The file a transcript image opens: `sourcePath` when it was read from one, else a
+ * blob copy of its bytes written through the host. Undefined when links are disabled
+ * or no file exists, so a disabled policy never writes blobs.
+ */
+export declare function transcriptImageLink(image: Pick<ImageContent, "data" | "mimeType">, sourcePath?: string): string | undefined;
+/** `text` (an image's placeholder) as an OSC 8 link to the image's file; plain when hyperlinks are off or no file exists. */
+export declare function linkedImageText(text: string, image: Pick<ImageContent, "data" | "mimeType">, sourcePath?: string): string;
+/** Native counterpart of {@link linkedImageText}: a span linking to the image's file when one exists. */
+export declare function linkedImageSpan(text: string, image: Pick<ImageContent, "data" | "mimeType">, sourcePath: string | undefined, s?: string): TspSpan;
 export {};

package/dist/types/prompt/macos-spelling.d.ts

@@ -30,7 +30,8 @@ export declare class MacOSSpellingProvider implements EditorTextAssistProvider {
     decorateTypos(text: string, context: SpellingDecorationContext, decorate?: (span: string) => string): string;
     /**
      * Misspelled prose ranges in `text` (offsets into it), in order and
-     * non-overlapping. Schedules the verification check for uncached text; its
+     * non-overlapping, except ones touching `context.typing` (the word still
+     * being typed). Schedules the verification check for uncached text; its
      * result arrives through {@link onUpdate}.
      */
     typoRanges(text: string, context: SpellingDecorationContext): readonly native.SpellingRange[];

package/dist/types/prompt/prose-gate.d.ts

@@ -1,9 +1,12 @@
+import type { TypingWord } from "./typing-word.js";
 /** Logical source location for one rendered editor segment. */
 export interface SpellingDecorationContext {
     editorText: string;
     lines: readonly string[];
     line: number;
     startCol: number;
+    /** The word being typed: typo marks touching it wait until the caret leaves it. */
+    typing?: TypingWord | undefined;
 }
 /**
  * Whether `text[start, end)` is a prose word: unmasked by {@link maskNonProse},

package/dist/types/prompt/queued-messages.d.ts

@@ -10,7 +10,7 @@ export interface QueuedMessageGroup {
  * Messages queued while the agent works, above the editor. ANSI: a heading
  * per group, numbered dim rows and the dequeue hint. Natively (§8.1): a
  * stack of pills, each `corner-down-right` · the text · `⌥↑ Edit`, the total
- * count in the first pill when more than one waits; the edit control sends
+ * (`N queued`, not a position) in the first pill when more than one waits; the edit control sends
  * `queue.edit`, answered like the dequeue key.
  */
 export declare class QueuedMessagesBand extends Container {

package/dist/types/prompt/typing-word.d.ts

@@ -0,0 +1,25 @@
+/**
+ * The word being typed in the composer. Misspelling marks hold off on it until
+ * the caret leaves it (a space or punctuation, a caret move, losing focus), the
+ * way Slack and Chromium mark a typo only once its word is done; marks on other
+ * words stay while typing.
+ */
+/** A word of one logical line, as UTF-16 columns `[start, end)`. */
+export interface TypingWord {
+    line: number;
+    start: number;
+    end: number;
+}
+/** Follows an editor's text revision and caret to know which word is being typed. */
+export declare class TypingWordTracker {
+    #private;
+    /** The word being typed, if any. */
+    get word(): TypingWord | undefined;
+    /**
+     * Catch up with the editor: an edit that leaves the caret in (or right after)
+     * a word starts typing it; a caret move out of that word, or losing focus,
+     * ends it. The first call only records the revision, so a restored draft is
+     * not held. Returns whether the held word changed.
+     */
+    update(revision: number, lines: readonly string[], line: number, col: number, focused: boolean): boolean;
+}

package/dist/types/render/hyperlink.d.ts

@@ -70,6 +70,8 @@ export declare function urlHyperlinkAlways(url: string, displayText: string): st
  * Non-HTTP(S) or unparsable URLs yield a plain span.
  */
 export declare function urlLinkSpan(target: string, displayText: string, s?: string): TspSpan;
+/** Whether native link spans and nodes may carry an `href`: everything but an explicit `off` policy. */
+export declare function isNativeLinkEnabled(): boolean;
 /**
  * A native link span to a filesystem path as a plain `file://` URI (the
  * terminal opens it through the system; the location stays in the visible

package/dist/types/render/utils.d.ts

@@ -32,7 +32,7 @@ export interface RenderCache {
     lines: string[];
 }
 /** Build indentation and continuing branches for ancestor levels. */
-export declare function buildTreePrefix(ancestors: boolean[], theme: Theme): string;
+export declare function buildTreePrefix(ancestors: readonly boolean[], theme: Theme): string;
 /** Return the branch glyph for a final or continuing tree item. */
 export declare function getTreeBranch(isLast: boolean, theme: Theme): string;
 /** Return the continuation prefix for subsequent lines of a tree item. */

package/dist/types/status-line/context-usage.d.ts

@@ -98,6 +98,7 @@ export interface CompactionBoundaries {
 export declare function computeCompactionBoundaries(compactionSettings: CompactionSettings, contextWindow: number, speculationLeadTokens?: number): CompactionBoundaries | null;
 /** Stable inputs used to cache non-message token estimates. */
 export interface NonMessageTokenSource {
+    readonly model?: Model;
     readonly systemPrompt?: readonly string[];
     readonly agent?: {
         readonly state?: {
@@ -137,6 +138,8 @@ export declare function invalidateToolSchemaMetadata(tools: ToolSchemaSource): v
  * {@link invalidateToolSchemaMetadata} when those inputs change.
  */
 export declare function estimateToolSchemaTokens(tools: ToolSchemaSource, tokenizer: Tokenizer, sourceRevision?: number): number;
+/** Count schemas carried on every request, excluding server-side deferred catalogs. */
+export declare function estimateContextToolSchemaTokens(tools: ToolSchemaSource, tokenizer: Tokenizer, model: Model | undefined, sourceRevision?: number): number;
 export declare function computeNonMessageTokens(session: NonMessageTokenSource, tokenizer: Tokenizer, sourceRevision?: number): number;
 /**
  * Shared helper for the four non-message token totals used by

package/dist/types/status-line/host.d.ts

@@ -97,11 +97,13 @@ export interface FooterSession {
     autoResolvedThinkingLevel(): string | undefined;
     getContextUsage: StatusLineSession["getContextUsage"];
     modelRegistry: Pick<StatusLineSession["modelRegistry"], "isUsingOAuth">;
+    /**
+     * Cumulative session rollup. Unlike the active-window stats it spans every
+     * entry in the session, so compaction does not reset the counters, and it
+     * folds in usage carried by completed `task` tool results.
+     */
     sessionManager: {
-        getEntries(): readonly {
-            type: string;
-            message?: AgentMessage;
-        }[];
+        getUsageStatistics: StatusLineSession["sessionManager"]["getUsageStatistics"];
     };
 }
 /**

package/dist/types/status-line/startup.d.ts

@@ -1,11 +1,11 @@
 /**
  * Status line for the speculative first frame, before any session exists.
  *
- * InteractiveMode persists {@link StatusLineStartupData} (settings plus the last
- * session's model and thinking state); the next launch renders it through the
- * real {@link StatusLineComponent} as a fresh, unnamed session at the live
- * terminal width. Path and git branch are read live; context usage is reported
- * unknown so the gauge shows the window without a percent.
+ * InteractiveMode persists {@link StatusLineStartupData} (settings plus the
+ * resolved default role model and status inputs); the next launch renders it
+ * through the real {@link StatusLineComponent} as a fresh, unnamed session at
+ * the live terminal width. Path and git branch are read live; context usage is
+ * reported unknown so the gauge shows the window without a percent.
  *
  * @example
  * ```ts ignore
@@ -22,7 +22,7 @@ import type { StatusLineSettings } from "./types.js";
 export interface StatusLineStartupData {
     readonly settings: StatusLineSettings;
     readonly gitEnabled: boolean;
-    /** Model of the last session; the next fresh session usually starts on it too. */
+    /** Model resolved for the next fresh session's default role. */
     readonly model?: Model;
     readonly thinkingLevel?: ThinkingLevel;
     readonly autoThinking: boolean;

package/dist/types/stdin-buffer.d.ts

@@ -61,6 +61,13 @@ export type StdinBufferEventMap = {
 export declare class StdinBuffer extends EventEmitter<StdinBufferEventMap> {
     #private;
     constructor(options?: StdinBufferOptions);
+    /**
+     * Whether a bracketed paste has started and its end marker has not arrived.
+     * Terminal skips its per-read DEC 2004 reassertion meanwhile: the host is
+     * evidently in bracketed-paste mode, and a paste delivered one key record
+     * per read would otherwise cost one terminal write per pasted key (#15757).
+     */
+    get pasting(): boolean;
     process(data: string | Buffer): void;
     /**
      * Gate unbracketed raw-paste classification on event-loop responsiveness.

package/dist/types/terminal.d.ts

@@ -117,7 +117,7 @@ export type GlyphProtocolReportHandler = (supported: boolean) => void;
 /**
  * Outcome of the Tern Surface Protocol `hello` probe: the terminal's reply,
  * or null when it answered the DA1 sentinel first (no TSP) or the probe was
- * skipped (`PI_TUI_NATIVE=0`, multiplexers).
+ * skipped (`PI_TUI_NATIVE=0`, multiplexers, devenv's reloading shell).
  */
 export type TspHelloHandler = (hello: TspHello | null) => void;
 /**
@@ -181,6 +181,7 @@ export interface Terminal {
     get kittyEnableSequence(): string | null;
     readonly keyboardEnhancementEnterSequence?: string | null;
     readonly keyboardEnhancementExitSequence?: string | null;
+    readonly keyboardEnhancementRestoreSequence?: string | null;
     moveBy(lines: number): void;
     hideCursor(force?: boolean): void;
     showCursor(force?: boolean): void;
@@ -283,9 +284,11 @@ export interface ProcessTerminalOptions {
     conpty?: boolean;
     /**
      * Whether stdin is a native Windows console handle (win32, not WSL), whose
-     * console host answers `CSI ? 9001 h` with win32-input-mode key records.
-     * Defaults to `process.platform === "win32"`; only consulted when `conpty`
-     * is also true.
+     * console host is certain to answer `CSI ? 9001 h` with win32-input-mode key
+     * records. When false (WSL), the keyboard fallback requests modifyOtherKeys
+     * alongside win32-input-mode, since a WSL pty may not be relayed by a console
+     * host. Defaults to `process.platform === "win32"`; only consulted when
+     * `conpty` is also true.
      */
     nativeWindowsConsole?: boolean;
 }
@@ -298,6 +301,7 @@ export declare class ProcessTerminal implements Terminal {
     get kittyProtocolActive(): boolean;
     get kittyEnableSequence(): string | null;
     get keyboardEnhancementEnterSequence(): string | null;
+    get keyboardEnhancementRestoreSequence(): string | null;
     get keyboardEnhancementExitSequence(): string | null;
     get appearance(): TerminalAppearance | undefined;
     onAppearanceChange(callback: (appearance: TerminalAppearance, requestToken?: TerminalAppearanceRequestToken) => void): void;

package/dist/types/tools/eval.d.ts

@@ -20,6 +20,11 @@ export interface EvalCellResult {
     code: string;
     language?: EvalLanguage;
     output: string;
+    /**
+     * `output` without its `display[N]:` JSON sections, which renderers show
+     * from `jsonOutputs` instead. Absent when the cell displayed no JSON.
+     */
+    textOutput?: string;
     status: "pending" | "running" | "complete" | "error";
     durationMs?: number;
     exitCode?: number;

package/dist/types/tools/grouped-file-output.d.ts

@@ -111,9 +111,11 @@ export interface NumberedLine {
  * of consecutive line numbers (`start` = the run's first line, match lines
  * `mark`ed), with a `…` row wherever the numbers jump or an elision marker
  * (`n: null`) sits. No path header: the row or head above names the file.
+ * `wrap` soft-wraps long lines instead of scrolling the block sideways.
  */
 export declare function numberedCode(lines: readonly NumberedLine[], opts?: {
     lang?: string;
+    wrap?: boolean;
 }): NativeNode[];
 /**
  * Describe grouped search output (grep / ast-grep / ast-edit display content)

package/dist/types/tools/read.d.ts

@@ -122,10 +122,11 @@ export declare function readSourceFsPath(details: ReadToolDetails | undefined):
  */
 export declare function readResultIsMarkdown(details: ReadToolDetails | undefined, args: ReadRenderArgs | undefined): boolean;
 /**
- * Read content as numbered `code` (no path header: the head names the file).
- * Numbers come from `lineNumbers` (`displayContent`'s per-line numbers,
- * `null` for an elided block; runs split with `…` between) when they cover
- * every line, else count up from `start`.
+ * Read content as numbered, wrapped `code` (no path header: the head names
+ * the file), matching the ANSI preview's hanging wrap. Numbers come from
+ * `lineNumbers` (`displayContent`'s per-line numbers, `null` for an elided
+ * block; runs split with `…` between) when they cover every line, else count
+ * up from `start`.
  */
 export declare function readContentCode(content: string, start: number, numbers: readonly (number | null)[] | undefined, lang: string | undefined): NativeNode[];
 /** Render file, image, and URL reads in the transcript. */

package/dist/types/tui.d.ts

@@ -348,6 +348,7 @@ export declare class TUI extends Container {
     overlayStack: {
         component: Component;
         options?: OverlayOptions;
+        /** Focus restored after closing; tracks live focus changes beneath an input-less key holder. */
         preFocus: Component | null;
         hidden: boolean;
         /**
@@ -496,6 +497,13 @@ export declare class TUI extends Container {
      * overtaking them. No-op unless `previous` owns the held keys.
      */
     replaceHeldFocus(previous: Component, next: Component): void;
+    /**
+     * Register a hook that re-enables terminal modes on every start(). A hook
+     * added while the TUI is already running (a prepaint composer starts it
+     * before the interactive mode wires its controllers) missed that start, so
+     * it runs immediately instead of waiting for a stop/start cycle that may
+     * never come.
+     */
     addStartListener(listener: StartListener): () => void;
     addInputListener(listener: InputListener): () => void;
     removeInputListener(listener: InputListener): void;
@@ -508,6 +516,8 @@ export declare class TUI extends Container {
      */
     resetDisplay(): void;
     requestRender(force?: boolean, options?: RenderRequestOptions): void;
+    /** Run `callback` after `delayMs` on the render scheduler's clock, unless the TUI has stopped. */
+    scheduleAfter(delayMs: number, callback: () => void): RenderTimer;
     /**
      * Paint a forced frame synchronously when startup must hand off an already
      * visible component tree before further async initialization. Same as

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@oh-my-pi/pi-tui",
-	"version": "18.11.0",
+	"version": "18.11.2",
 	"description": "Terminal User Interface library with differential rendering for efficient text-based applications",
 	"homepage": "https://omp.sh",
 	"author": {
@@ -41,14 +41,14 @@
 		"gen:glyphs": "bun scripts/gen-glyphs.ts"
 	},
 	"dependencies": {
-		"@oh-my-pi/omptype": "18.11.0",
-		"@oh-my-pi/pi-agent-core": "18.11.0",
-		"@oh-my-pi/pi-ai": "18.11.0",
-		"@oh-my-pi/pi-catalog": "18.11.0",
-		"@oh-my-pi/pi-natives": "18.11.0",
-		"@oh-my-pi/pi-utils": "18.11.0",
-		"@oh-my-pi/pi-wire": "18.11.0",
-		"@oh-my-pi/snapcompact": "18.11.0"
+		"@oh-my-pi/omptype": "18.11.2",
+		"@oh-my-pi/pi-agent-core": "18.11.2",
+		"@oh-my-pi/pi-ai": "18.11.2",
+		"@oh-my-pi/pi-catalog": "18.11.2",
+		"@oh-my-pi/pi-natives": "18.11.2",
+		"@oh-my-pi/pi-utils": "18.11.2",
+		"@oh-my-pi/pi-wire": "18.11.2",
+		"@oh-my-pi/snapcompact": "18.11.2"
 	},
 	"devDependencies": {
 		"kitty-vt-wasm": "^0.2.0"

package/src/apps/git/git-tui.ts

@@ -7,7 +7,8 @@
  * scrollbar, right sidebar (file management + commit form while dirty, HEAD
  * commit details with author avatar when clean). Submitting an empty commit
  * form generates an llm-git-compatible message; submitting populated fields
- * commits them. A footer shows key hints.
+ * commits them. A footer shows key hints; the staging and discarding ones are
+ * omitted while the tree is clean, where they cannot fire.
  *
  * `tab` moves focus between the diff and the sidebar; both panes take
  * arrows/PgUp/PgDn, vim motions (`j`/`k`/`h`/`l`/`g`/`G`), and mouse
@@ -22,7 +23,8 @@
  * refreshes. In the sidebar tree `←`/`→` collapse/expand directories,
  * `enter` opens the selected file in the diff pane, `space` stages or
  * unstages the selected row, and `delete` discards it — on a directory,
- * every file underneath it.
+ * every file underneath it. All of the staging and discarding keys are inert
+ * on a clean tree, which shows the HEAD commit instead of a change list.
  */
 
 import type { TspSpan } from "@oh-my-pi/pi-wire";
@@ -89,6 +91,28 @@ const STATUS_TTL_MS = 6_000;
 
 type Focus = "diff" | "sidebar";
 
+/**
+ * Footer key hints. A clean tree renders the HEAD commit view, where stage
+ * and discard cannot fire: `#patchTargetFor` returns null and
+ * `#discardCurrentFile` returns early for `area: "commit"` rows, and the
+ * sidebar only builds stage/discard actions for the unstaged/staged
+ * sections. `commit` needs the commit form (absent on a clean tree) and
+ * `select` feeds the line-level stage/discard actions (no-ops on commit
+ * rows), so the commit view drops those too and says what it is showing.
+ */
+export function gitFooterHints(clean: boolean, focus: Focus): string {
+	const edit = clean
+		? ""
+		: focus === "diff"
+			? ` · ${formatKeyHints(["s", "u"])} stage · ${formatKeyHints(["x", "delete"])} discard`
+			: ` · ${formatKeyHint("space")} stage · ${formatKeyHint("delete")} discard`;
+	const commit = clean ? "" : ` · ${formatKeyHint("c")} commit`;
+	const select = clean || focus !== "diff" ? "" : ` · ${formatKeyHints(["shift+up", "shift+down"])} select`;
+	return focus === "diff"
+		? `${formatKeyHints(["alt+down", "alt+up"])} hunk · ${formatKeyHints(["]", "["])} file${select}${edit} · ${formatKeyHint("v")} view${commit} · ${formatKeyHint("?")} keys · ${formatKeyHint("q")} quit`
+		: `${formatKeyHints(["up", "down"])} move · ${formatKeyHints(["left", "right"])} fold${edit} · ${formatKeyHint("enter")} open · ${formatKeyHints(["alt+down", "alt+up"])} hunk${commit} · ${formatKeyHint("t")} tree · ${formatKeyHint("?")} keys · ${formatKeyHint("q")} quit`;
+}
+
 /** Tone of a status message: its colour in the header and its span token natively. */
 type StatusTone = "success" | "warning" | "error" | "accent" | "dim";
 
@@ -793,14 +817,7 @@ class GitTuiComponent implements Component {
 
 		// The empty middle carries the key hints (or a fresh status message).
 		const status = this.#visibleStatus() ? theme.fg(this.#statusTone, this.#status) : "";
-		const middle =
-			status ||
-			theme.fg(
-				"dim",
-				this.#focus === "diff"
-					? `${formatKeyHints(["alt+down", "alt+up"])} hunk · ${formatKeyHints(["]", "["])} file · ${formatKeyHints(["shift+up", "shift+down"])} select · ${formatKeyHints(["s", "u"])} stage · ${formatKeyHints(["x", "delete"])} discard · ${formatKeyHint("v")} view · ${formatKeyHint("c")} commit · ${formatKeyHint("?")} keys · ${formatKeyHint("q")} quit`
-					: `${formatKeyHints(["up", "down"])} move · ${formatKeyHints(["left", "right"])} fold · ${formatKeyHint("space")} stage · ${formatKeyHint("delete")} discard · ${formatKeyHint("enter")} open · ${formatKeyHints(["alt+down", "alt+up"])} hunk · ${formatKeyHint("c")} commit · ${formatKeyHint("t")} tree · ${formatKeyHint("?")} keys · ${formatKeyHint("q")} quit`,
-			);
+		const middle = status || theme.fg("dim", gitFooterHints(this.#model.clean, this.#focus));
 		const free = width - row.width - right.width - 1;
 		const middleText = free > visibleWidth(middle) + 4 ? middle : truncateToWidth(middle, Math.max(0, free - 4));
 		const leftPad = Math.max(1, Math.floor((free - visibleWidth(middleText)) / 2));

package/src/apps/git/sidebar.ts

@@ -1667,6 +1667,9 @@ export class Sidebar {
 				text: ` ${theme.fg("dim", "parent:")} ${theme.fg("accent", head.parents.map(sha => sha.slice(0, 8)).join(" "))}`,
 			});
 		}
+		// This view only appears when there is nothing to stage or discard, so say so
+		// rather than letting the file list read as pending work.
+		rows.push({ text: theme.fg("success", ` Working tree clean — showing committed ${head.shortSha}`) });
 		rows.push({ text: theme.fg("borderMuted", "─".repeat(Math.max(0, width))) });
 		if (!head.filesLoaded) {
 			rows.push({ text: theme.fg("dim", " Loading changed files…") });
@@ -1675,8 +1678,9 @@ export class Sidebar {
 
 		const additions = head.files.reduce((sum, file) => sum + (file.additions ?? 0), 0);
 		const deletions = head.files.reduce((sum, file) => sum + (file.deletions ?? 0), 0);
+		const count = `${head.files.length} file${head.files.length === 1 ? "" : "s"}`;
 		rows.push({
-			text: ` ${theme.bold(`${head.files.length} modified`)}  ${theme.fg("success", `+${additions}`)} ${theme.fg("error", `−${deletions}`)} ${theme.fg("dim", `· ${head.shortSha}`)}`,
+			text: ` ${theme.bold(count)} ${theme.fg("dim", `in ${head.shortSha}`)}  ${theme.fg("success", `+${additions}`)} ${theme.fg("error", `−${deletions}`)}`,
 		});
 		rows.push(this.#viewToggleRow(width));
 		rows.push(...this.#entryRows(head.files, "commit"));

package/src/autocomplete.ts

@@ -14,6 +14,11 @@ const PATH_DELIMITERS = new Set([" ", "\t", '"', "'", "="]);
  */
 const AT_PARTIAL_DELAY_MS = 150;
 
+/**
+ * Without a deadline the native walk follows symlinks at unbounded depth and never returns.
+ */
+const AT_FUZZY_TIMEOUT_MS = 1_500;
+
 function buildAutocompleteFuzzyDiscoveryProfile(
 	query: string,
 	basePath: string,
@@ -25,6 +30,7 @@ function buildAutocompleteFuzzyDiscoveryProfile(
 	hidden: boolean;
 	gitignore: boolean;
 	cache: boolean;
+	timeoutMs: number;
 	signal?: AbortSignal;
 } {
 	return {
@@ -34,6 +40,7 @@ function buildAutocompleteFuzzyDiscoveryProfile(
 		hidden: true,
 		gitignore: true,
 		cache: true,
+		timeoutMs: AT_FUZZY_TIMEOUT_MS,
 		...(signal ? { signal } : {}),
 	};
 }
@@ -106,6 +113,18 @@ function extractQuotedPrefix(text: string): string | null {
 	return text.slice(quoteStart);
 }
 
+/** Extract the live whitespace-delimited or double-quoted `@` file token ending at the cursor. */
+export function extractAtFilePrefix(text: string): string | null {
+	const quotedPrefix = extractQuotedPrefix(text);
+	if (quotedPrefix?.startsWith('@"')) {
+		return quotedPrefix;
+	}
+
+	const lastDelimiterIndex = findLastDelimiter(text);
+	const tokenStart = lastDelimiterIndex === -1 ? 0 : lastDelimiterIndex + 1;
+	return text[tokenStart] === "@" ? text.slice(tokenStart) : null;
+}
+
 function parsePathPrefix(prefix: string): { rawPrefix: string; isAtPrefix: boolean; isQuotedPrefix: boolean } {
 	if (prefix.startsWith('@"')) {
 		return { rawPrefix: prefix.slice(2), isAtPrefix: true, isQuotedPrefix: true };
@@ -719,7 +738,7 @@ export class CombinedAutocompleteProvider implements AutocompleteProvider {
 		}
 
 		// Check for @ file reference (fuzzy search) - must be after a delimiter or at start
-		const atPrefix = this.#extractAtPrefix(textBeforeCursor);
+		const atPrefix = extractAtFilePrefix(textBeforeCursor);
 		if (atPrefix) {
 			const { rawPrefix, isQuotedPrefix } = parsePathPrefix(atPrefix);
 			// Recursive fuzzy walks rooted outside the project (e.g. `@../`,
@@ -862,7 +881,7 @@ export class CombinedAutocompleteProvider implements AutocompleteProvider {
 
 		// Check if we're completing a file attachment (prefix starts with "@")
 		if (prefix.startsWith("@")) {
-			const liveAtPrefix = this.#extractAtPrefix(textBeforeCursor);
+			const liveAtPrefix = extractAtFilePrefix(textBeforeCursor);
 			if (liveAtPrefix) {
 				beforePrefix = currentLine.slice(0, cursorCol - liveAtPrefix.length);
 			}
@@ -896,23 +915,6 @@ export class CombinedAutocompleteProvider implements AutocompleteProvider {
 		};
 	}
 
-	// Extract @ prefix for fuzzy file suggestions
-	#extractAtPrefix(text: string): string | null {
-		const quotedPrefix = extractQuotedPrefix(text);
-		if (quotedPrefix?.startsWith('@"')) {
-			return quotedPrefix;
-		}
-
-		const lastDelimiterIndex = findLastDelimiter(text);
-		const tokenStart = lastDelimiterIndex === -1 ? 0 : lastDelimiterIndex + 1;
-
-		if (text[tokenStart] === "@") {
-			return text.slice(tokenStart);
-		}
-
-		return null;
-	}
-
 	// Extract a path-like prefix from the text before cursor
 	#extractPathPrefix(text: string, forceExtract: boolean = false): string | null {
 		const quotedPrefix = extractQuotedPrefix(text);

package/src/bracketed-paste.ts

@@ -68,6 +68,7 @@ const DEFAULT_BYTE_LIMIT = 64 * 1024 * 1024;
  */
 export class BracketedPasteHandler {
 	#buffer = "";
+	#bufferBytes = 0;
 	#active = false;
 	readonly #byteLimit: number;
 
@@ -88,7 +89,10 @@ export class BracketedPasteHandler {
 		const start = data.indexOf(PASTE_START);
 		const end = data.indexOf(PASTE_END);
 		if (start !== -1 && (end === -1 || start < end)) {
-			if (!this.#active) this.#buffer = "";
+			if (!this.#active) {
+				this.#buffer = "";
+				this.#bufferBytes = 0;
+			}
 			this.#active = true;
 			// Only strip nested starts before this paste's first end. Later starts
 			// belong to the next paste in `remaining`.
@@ -100,6 +104,7 @@ export class BracketedPasteHandler {
 
 		if (!this.#active) return { handled: false };
 
+		this.#bufferBytes += Buffer.byteLength(data, "utf8");
 		this.#buffer += data;
 
 		const endIndex = this.#buffer.indexOf(PASTE_END);
@@ -108,6 +113,7 @@ export class BracketedPasteHandler {
 			const remaining = this.#buffer.substring(endIndex + PASTE_END.length);
 
 			this.#buffer = "";
+			this.#bufferBytes = 0;
 			this.#active = false;
 
 			return { handled: true, pasteContent, remaining };
@@ -118,9 +124,10 @@ export class BracketedPasteHandler {
 		// neither lost nor held forever, and reset paste mode so subsequent
 		// input recovers. See `StdinBuffer#abortPaste` for the sibling recovery
 		// semantics inside `StdinBuffer`.
-		if (this.#buffer.length > this.#byteLimit) {
+		if (this.#bufferBytes > this.#byteLimit) {
 			const pasteContent = this.#buffer;
 			this.#buffer = "";
+			this.#bufferBytes = 0;
 			this.#active = false;
 			return { handled: true, pasteContent, remaining: "" };
 		}