@oh-my-pi/pi-tui 18.16.0 → 18.17.0

package/CHANGELOG.md

@@ -2,6 +2,59 @@
 
 ## [Unreleased]
 
+## [18.17.0] - 2026-11-06
+
+### Breaking Changes
+
+- `MarkdownTheme.heading` receives the heading depth (1–6) as a second argument; callers must pass it.
+- Shell visualization uses the native presentation engine: shell node IDs are opaque strings, and native shell nodes receive presentation data, not raw execution traces.
+- Replaced `CustomEditor.modelMentionLabel` with `resolveModelMention` (returns `{ label, selector }`); `collapseModelMentions` takes the same callback; `getModelMentionSuggestions` returns `ModelMentionCompletion`.
+- `SetupHost` must implement `autoUpdate`, `canAutoUpdate()` and `saveAutoUpdate()` for setup version 3's auto-update scene.
+- Removed `SPINNER_ADVANCE_MS` in favor of the shared spinner clock; `sharedSpinnerFrame` is exported from `spinner-clock`.
+- Removed `formatMeta` from `render/render-utils`.
+- `TranscriptContainer.nativeBlocks()` and `Composer.describeSurface()` now require the frame's `DescribeContext`.
+- `GradientHighlightSpec.lightness` now maps gradient position to lightness like `hue` instead of taking a fixed percentage.
+
+### Added
+
+- Colorful Markdown, on by default (`setMarkdownColorful`): headings by level, bold/italic, inline code and table headers take distinct hues from the theme's `terminal.ansi` palette. `MarkdownTheme` gains optional `strong`, `emphasis` and `tableHeader` roles; `Theme.ansiFg()` paints a palette slot, falling back to the terminal's own palette.
+- Bash cards show incremental Python-like pseudocode with a Raw toggle, failure marks and variable values; the inspector adds layers, split source and timestamp replay. Native hosts draw an inline segmented run box (`shell` = command, `omp.tool.bash.output` = output).
+- `VersionUpdate`, `WelcomeComponent.setVersionUpdate()` and `ComposerWelcomeUpdate.versionUpdate`: the welcome banner shows background self-update progress, readiness or failure.
+- `newSessionThinkingLevel` / `resolveConfiguredThinkingLevel` resolve a new session's starting thinking level; `ComposerCache.writeStatus` accepts `{ shared: false }` to keep a project's status out of the any-project fallback.
+- `SettingItem.menu` exposes a cycling row's choices as a menu opened by `SettingsList.openSubmenuFor`; Enter/Space still cycle.
+- `StatusLineComponent.setSessionPinned()` / `setPinnedSessionIds()` / `isSessionPinned()` track pinned sessions; `session_name` shows the theme's pin icon for them ([#17848](https://github.com/can1357/oh-my-pi/pull/17848) by [@SuperUserA](https://github.com/SuperUserA))
+- Extension transcript presenters (`setTranscriptPresenters`, `readTranscriptPresentation`, `TranscriptPresentationState` in `chat/transcript-presentation`) draw tool cards and read entries full, compact or hidden ([#17960](https://github.com/can1357/oh-my-pi/pull/17960) by [@materemias](https://github.com/materemias))
+- `PresentedBlock` applies transcript presenters to advisor, skill, execution, background-job, TTSR and other non-tool blocks; `TtsrNotificationComponent.rules` exposes its merged rules ([#17997](https://github.com/can1357/oh-my-pi/pull/17997) by [@materemias](https://github.com/materemias))
+- `LinkBrowserComponent` (`overlays/link-browser`) browses a transcript fullscreen with stable link hint tags; `LinkHints` / `viewportLinkTargets()` share tagging with `Composer`; `ChatTranscriptBuilder` accepts `textRenderers` ([#16476](https://github.com/can1357/oh-my-pi/pull/16476) by [@materemias](https://github.com/materemias))
+- `cache` status-line segment with warm/cold indicators, plus `StatusLineSession.getPromptCacheStatus`, `icon.cacheWarm` / `icon.cacheCold`, the `omp.composer.cache` fact and `promptCacheBrief` / `promptCacheDetails` helpers ([#12677](https://github.com/can1357/oh-my-pi/issues/12677)) ([#17496](https://github.com/can1357/oh-my-pi/pull/17496) by [@will-bogusz](https://github.com/will-bogusz))
+- `^` model mentions suggest supported effort levels after `:` and refresh as you type via optional `AutocompleteProvider.trySyncModelMentionCompletion`, so Tab accepts the current row ([#17574](https://github.com/can1357/oh-my-pi/pull/17574) by [@a-glapinski](https://github.com/a-glapinski))
+- Shared spinner clock (`spinner-clock`: `setSpinnerInterval`, `sharedSpinnerFrame`, `spinnerTickDelay`) ticks all spinners together; `0` makes them static ([#14240](https://github.com/can1357/oh-my-pi/pull/14240) by [@mccraigmccraig](https://github.com/mccraigmccraig))
+- Frame-rate ceiling (`frame-rate`: `setMaxFps`, `minFrameIntervalMs`) for rendering and animations; frames awaited by a keystroke keep 30 fps ([#14240](https://github.com/can1357/oh-my-pi/pull/14240) by [@mccraigmccraig](https://github.com/mccraigmccraig))
+- `setMotionEffects` (`motion-effects`) turns off decorative motion: status-line blink, brand fade, magic-keyword sweep and native `fx` spans ([#14240](https://github.com/can1357/oh-my-pi/pull/14240) by [@mccraigmccraig](https://github.com/mccraigmccraig))
+- `CompactTranscriptBlock` (`chrome/transcript-container`): consecutive blocks whose `isTranscriptBlockCompact()` is true render without blank rows between them, in terminal and native (TSP) surfaces ([#17997](https://github.com/can1357/oh-my-pi/pull/17997) by [@materemias](https://github.com/materemias))
+
+### Changed
+
+- Ask cards drop per-question section headers; each question shows its id and flags inline (`(db · 3 options)`) ([#18104](https://github.com/can1357/oh-my-pi/pull/18104) by [@JustasMasiulis](https://github.com/JustasMasiulis))
+- Tab in the `/usage` Details view switches back to Overview ([#17962](https://github.com/can1357/oh-my-pi/pull/17962) by [@SuperUserA](https://github.com/SuperUserA))
+- LSP results use one header with request and counts, preview each reference's source line, and syntax-highlight previews and definition snippets ([#18106](https://github.com/can1357/oh-my-pi/pull/18106) by [@JustasMasiulis](https://github.com/JustasMasiulis))
+- Grep and AST Grep headers show the search scope after the pattern, errors show the tool title and pattern, and collapsed AST Grep drops `meta:` rows ([#18105](https://github.com/can1357/oh-my-pi/pull/18105) by [@JustasMasiulis](https://github.com/JustasMasiulis))
+- AST Edit's header shows the search scope; the `proposed` state and replacement counts move to the card's bottom border ([#18105](https://github.com/can1357/oh-my-pi/pull/18105) by [@JustasMasiulis](https://github.com/JustasMasiulis))
+- Centered sheets and dialogs on narrow native terminals fill the pane only once their content reaches half the screen height.
+
+### Fixed
+
+- Tern acknowledgements and visibility reports no longer appear as text in the editor when they arrive during a paste, including through Windows ConPTY.
+- The `find` card marks searches cut short by its 20 s budget as `timed out` ([#18161](https://github.com/can1357/oh-my-pi/pull/18161) by [@will-bogusz](https://github.com/will-bogusz))
+- Tern's classic renderer no longer leaves stale inline images over text while an answer streams or the pane resizes.
+- The native composer's first frame shows the cached thinking/effort level instead of the plain model icon.
+- Clicking a many-valued enum setting's popup on native settings pages now opens its menu.
+- Ask notes no longer carry over between successive single-select questions ([#17979](https://github.com/can1357/oh-my-pi/issues/17979))
+- LSP references no longer render as diagnostics or hover cards when a line looks like a diagnostics summary or code fence ([#18106](https://github.com/can1357/oh-my-pi/pull/18106) by [@JustasMasiulis](https://github.com/JustasMasiulis))
+- The LSP diagnostics card lists diagnostics per file, counts every file, and reports server failures instead of `No issues` ([#18106](https://github.com/can1357/oh-my-pi/pull/18106) by [@JustasMasiulis](https://github.com/JustasMasiulis))
+- Closing an overlay that others opened over no longer makes them return focus to it ([#16476](https://github.com/can1357/oh-my-pi/pull/16476))
+- ASCII tree branches are two columns wide (`|-`, `'-`), so child rows align like Unicode trees ([#18103](https://github.com/can1357/oh-my-pi/pull/18103) by [@JustasMasiulis](https://github.com/JustasMasiulis))
+
 ## [18.16.0] - 2026-11-02
 
 ### Breaking Changes
@@ -2400,128 +2453,4 @@
 - Fixed tmux offscreen-shrink frames to skip repainting when the visible tail is unchanged, avoiding intermittent blank/refresh flashes in pane terminals ([#2046](https://github.com/can1357/oh-my-pi/issues/2046)).
 - Fixed Windows ConPTY hosts (Windows Terminal, Tabby, Hyper, VS Code) parking the viewport at the top of a full paint after a `/resume` or any long-session repaint. `ProcessTerminal#safeWrite` now splits oversized writes into ≤ 8 KiB pieces at line boundaries on `win32` and inside WSL (where stdout still crosses ConPTY at the `wslhost` boundary) so each underlying `WriteFile` stays below the ~32 KiB threshold where ConPTY stops tracking the cursor; the data was always delivered, but the host UI's scroll position would not follow until any focus event forced a re-query. ([#2034](https://github.com/can1357/oh-my-pi/issues/2034))
 
-## [15.10.1] - 2026-06-07
-
-### Breaking Changes
-
-- Removed Kitty temp-file image transmission, its startup support probe, the `PI_KITTY_IMAGE_TRANSMISSION` override, and the temp-file helper exports. Kitty/Ghostty image payloads now stay on in-band base64 before placeholder/direct placement, avoiding blank first renders from temp-file load races.
-- Renamed `RenderRequestOptions.allowUnknownViewportMutation` → `allowUnknownViewportTransientRepaint`. The option only permits a transient live-viewport repaint (autocomplete/IME/focused-editor chrome) on hosts that cannot report viewport position; it never authorizes a settled transcript commit. The old name implied any offscreen mutation was safe to push into native scrollback, which led callers to emit duplicate transcript copies.
-
-### Added
-
-- Added `TUI.addStartListener()` so feature hooks can re-enable terminal modes after temporary stop/start cycles such as external-editor handoffs.
-- Added `Editor.pasteText()` to apply terminal-style paste handling for text inserted from non-bracketed paste transports
-- Added an optional `dispose()` lifecycle method to `Component` so components can release timers and subscriptions during permanent teardown
-- Added `Container.dispose()` to propagate teardown to child components when a component tree is permanently discarded
-- Added `Loader.dispose()` to stop the loader animation timer when the component is disposed
-- Added a `ScrollView` `ellipsis` option (defaults to `Ellipsis.Unicode`) so callers that pre-wrap content to width can pass `Ellipsis.Omit` and suppress the stray per-line `…` that lands on trailing padding.
-- Added `ScrollView.handleScrollKey()` plus a `fastScrollLines` option so every scroll view gets shared navigation keys, including Shift+Arrow to scroll faster.
-- Added `OverlayOptions.fullscreen`: while the topmost visible overlay sets it, the engine borrows the terminal's alternate screen buffer for the overlay's lifetime and paints only the modal there — no ED3, no transcript re-commit — so the transcript stays untouched on the normal screen and is not scrollable behind the modal. Mouse tracking (`?1000h`/`?1006h`) is enabled for the modal's lifetime and disabled on exit, so the rest of the app keeps the terminal's native text selection.
-- Added the `submitPinsViewportToTail` terminal capability and `detectSubmitPinsViewportToTail()`: genuine local terminals where a submit keystroke scrolls the host to its tail reconcile deferred native scrollback at the prompt-submit checkpoint even when the viewport position is unprobeable (Ghostty/kitty/iTerm/WezTerm/Alacritty). Restores the pre-regression submit reconciliation without re-enabling it for Windows Terminal/ConPTY, SSH, or multiplexers, where a submit is not proof the host is at the tail.
-
-### Changed
-
-- Changed static `Loader` messages to repaint only at the spinner's 80 ms cadence; time-dependent message colorizers can opt into 16 ms redraws with `animated: true`.
-- Changed keybinding matching to precompute canonical key sets so each input sequence is parsed once per binding check instead of once per candidate key.
-- Made `Component.invalidate()` optional so leaf components without render caches no longer need no-op invalidation hooks.
-- `TERMINAL` is now a `RuntimeTerminal` whose post-construction capabilities (image protocol and the probe-driven flags) are writable, replacing the `as unknown as MutableTerminalInfo` cast pattern and the positional `withTerminalOverrides` rebuild with a prototype-preserving `clone()`.
-
-### Fixed
-
-- Fixed `Loader` text updates to skip identical messages and preserve the rendered `Text` cache instead of invalidating it every timer tick.
-- Fixed fullscreen overlay alt-frame rendering to reuse the current line-preparation path instead of calling removed fitting helpers.
-- Reduced TUI render-path line fitting by deferring overlay base-frame fitting until an overlay rebuild and by reusing already-fitted lines in emitters.
-- Reduced live-region pinned repaint output by diffing unchanged viewport rows when no sealed rows are being committed to native scrollback.
-- Fixed no-append live-region pinned repaints to re-anchor the hardware cursor when the logical viewport shifts.
-- Fixed keybinding matching so printable uppercase input preserves `Shift` for bindings such as `shift+a`.
-- Optimized terminal image-line detection and Thai/Lao AM normalization checks to avoid hot-path regex scans and substring allocations.
-- Fixed `Markdown.render()` cache hits returning the cache's mutable backing array, which let callers that append extra rows corrupt cached Markdown and duplicate those rows on every redraw.
-- Fixed first-paint full replays for callers that intentionally replace terminal history by allowing `TUI.start({ clearScrollback: true })`, so they do not briefly append an entire initial frame before the first clean replay.
-- Fixed ED3-risk streaming cap accounting to preserve the native scrollback high-water mark for rows that were already physically committed before transient frames were viewport-capped.
-- Fixed terminal stop and restore cleanup to disable enhanced paste mode so it does not remain enabled after shutdown
-- Removed the per-frame line-fit `Map` cache from the render timer path to avoid forcing JSC rope-string hashing during scheduled viewport repaints.
-- Fixed `visibleWidth()` so terminal column measurements for ANSI and OSC text now match the native truncation/wrapping helpers, including OSC 66 text-sizing spans being counted at their scaled payload width
-- Fixed cursor, padding, and line-fit behavior when strings contain tabs or OSC escapes by aligning `visibleWidth()` with the native text-width model
-- Fixed the transcript — or a re-appearing prior view such as the welcome screen — duplicating itself on terminals without a scroll-position oracle (Ghostty/kitty/iTerm/WezTerm) when a foreground tool completes by rewriting a partly-committed block, or when the transcript is reset. A non-destructive viewport repaint no longer re-paints rows that are byte-identical to what is already committed to native scrollback into the active grid; the repaint anchor is clamped to the committed-and-unchanged prefix (`min(firstChanged, scrollbackHighWater)`).
-
-## [15.10.0] - 2026-06-06
-
-### Changed
-
-- Reworked the DEC 2026 synchronized-output default policy: a positive DECRQM mode-2026 report now **enables** sync (previously a report could only disable it), so conservatively defaulted-off hosts that actually support it — current Zellij, tmux master, foot, contour, mintty — are upgraded at runtime. The static allowlist also covers Alacritty and the VS Code terminal, honors a `TERM_FEATURES` `Sy` advertisement and `WT_SESSION` (Windows Terminal / WSL), and no longer blanket-disables SSH (DEC 2026 passes through to the outer terminal). Risky multiplexers still start off and rely on the probe. Added `synchronizedOutputUserOverride()` as the shared opt-out/force resolver.
-
-### Fixed
-
-- Fixed WSL/Windows Terminal row flicker while typing by repainting changed text rows before clearing only their stale suffix ([#2011](https://github.com/can1357/oh-my-pi/issues/2011)).
-- Fixed terminals that support DEC 2026 still tearing/flickering because the renderer ignored a positive DECRQM capability report and kept synchronized output off — most visibly WSL + Windows Terminal, Alacritty (≥0.13), and the VS Code terminal (≥1.108), which were detected yet refused sync.
-
-## [15.9.69] - 2026-06-06
-
-### Added
-
-- Added `TUI.resetDisplay()` to force an immediate full-frame replay, including native scrollback when the host can safely clear it.
-- Added `setPaddingY` to `Box` so vertical padding can be updated programmatically after creation.
-
-### Fixed
-
-- Fixed DECCARA background-fill optimization running when synchronized output is disabled, which could expose default-background gaps during rapidly updating tool-use panels ([#2000](https://github.com/can1357/oh-my-pi/issues/2000)).
-
-## [15.9.67] - 2026-06-06
-
-### Added
-
-- Added `setPaddingX` to `Box` so horizontal padding can be updated programmatically after creation
-- Added `ScrollView`, a fixed-height viewport component for pre-rendered lines with optional right-edge scrollbars and imperative scroll/page controls.
-- Added optional `Terminal.hasEagerEraseScrollbackRisk()` so custom/test terminal implementations can override the global ED3-risk profile without mutating the shared `TERMINAL` object.
-
-### Changed
-
-- Changed `SelectList` to render its visible window through `ScrollView`, replacing the `(N/M)` text scroll indicator with a uniform right-edge scrollbar (the type-to-search hint line is preserved).
-
-### Fixed
-
-- Fixed unknown-viewport deferred renders freezing bottom-anchored live chrome; deferred history mutations can now repaint only the active-grid bottom row with relative cursor movement, so spinner/status tails keep advancing without rewriting rows a scrolled reader can still see.
-- Fixed autocomplete popups freezing live repaint on ED3-risk macOS/POSIX terminals with unknown native viewport position; direct autocomplete shrink frames now repaint the live viewport without zero-byte deferral and preserve the old bottom anchor when padding can clear stale popup rows without duplicating committed scrollback.
-- Fixed focused Up/Down navigation on ED3-risk macOS/POSIX terminals replaying the whole transcript after dirty foreground-stream renders; selector/editor frames now repaint non-destructively instead of emitting `CSI 3 J` on every arrow-key move ([#1962](https://github.com/can1357/oh-my-pi/issues/1962)).
-- Fixed tmux (and screen/zellij) pane scrollback losing the head of a long streamed assistant reply once it grew past the visible pane, and stranding the chrome/footer in pane history after a later collapse — producing the "repeating chunks and missing sections" reporters saw when scrolling back through tmux pane history ([#1974](https://github.com/can1357/oh-my-pi/issues/1974)). The renderer's foreground-streaming cap-to-viewport branch (introduced in 15.9.2 for ED3-risk hosts that can checkpoint-rebuild later) also activated inside multiplexers, where checkpoint reconcile is a no-op (`refreshNativeScrollbackIfDirty` short-circuits because `\x1b[3J` cannot erase pane history). Every streaming frame clipped `lines` to the visible tail and reset `#scrollbackHighWater` to 0, so any row that scrolled above the viewport top was committed nowhere — pane history stayed empty until streaming ended. Meanwhile `#planLiveRegionPinnedRender` was explicitly disabled for multiplexers, but its `#emitLiveRegionPinnedRepaint` is built from the exact primitives tmux accepts (relative cursor moves, per-line `\x1b[2K`, `\r\n` to scroll the sealed prefix past the viewport bottom) and never emits `\x1b[2J`/`\x1b[3J`. The pinned planner now runs in multiplexers too, the cap branch skips them, and the diff/append path commits incrementally into pane history; the actively-mutating live tail stays in the visible viewport only.
-
-## [15.9.5] - 2026-06-05
-
-### Changed
-
-- Changed terminal resize handling so any width or height change always performs a clean reset + redraw: the renderer now unconditionally clears the viewport and native scrollback (`CSI 2 J` / `CSI 3 J`) and replays the full transcript at the new geometry, replacing the previous matrix of conditional viewport-repaint / history-rebuild / deferred-mutation branches. Multiplexer panes still repaint the visible window in place (pane scrollback cannot be erased), but a resize during active ED3-risk foreground streaming now performs the same clean rebuild rather than downgrading to a non-destructive viewport repaint: the terminal already re-wrapped its saved lines at the old width, so the rebuild must erase them (ED 3) instead of leaving the mis-wrapped history on screen. As a deliberate tradeoff this drops the prior no-overflow and confirmed-scrolled guards on resize: a reader scrolled into history snaps back to the bottom and preexisting shell scrollback above the UI is cleared.
-
-### Fixed
-
-- Fixed ED3-risk foreground streaming dropping the scrolled-off head of an append-only live block that alone overflows the viewport (a long streamed assistant reply). The live-region pin again committed native scrollback only up to the live-region start, so once the live block grew past the viewport its earlier rows scrolled above the viewport top but were committed nowhere and repainted nowhere — they vanished, leaving the reply looking like a ~viewport-tall circular buffer. The `NativeScrollbackLiveRegion` seam now also reports an optional append-only `getNativeScrollbackCommitSafeEnd`, and the pinned commit boundary is the deeper of the sealed start and that append-only end: rows in `[liveRegionStart, commitSafeEnd)` above the viewport top commit to scrollback, while volatile live blocks (tool previews that collapse) omit the boundary and keep their mutable rows deferred — preserving the pending-box-above-running-box fix.
-
-## [15.9.4] - 2026-06-05
-
-### Added
-
-- Added `PI_TUI_SYNC_OUTPUT=0` and `PI_TUI_SYNC_OUTPUT=1` to explicitly disable or force-enable DEC 2026 synchronized-output mode, alongside `PI_FORCE_SYNC_OUTPUT=1` as a force-on alias
-- Added `PI_TUI_ED3_SAFE=1` environment override to treat a terminal as non-ED3-risk for eager native scrollback rebuilds on unknown POSIX hosts
-
-### Changed
-
-- Changed native-scrollback safety defaults to treat unknown POSIX, SSH, and multiplexer-shaped terminals as ED3-risk for passive rendering; checkpoint replay now requires a positive at-tail viewport proof instead of assuming prompt submit makes host scrollback safe.
-- Changed synchronized-output defaults to a conservative opt-in profile: DEC 2026 paint wrappers stay disabled for remote/multiplexer/VTE/unknown terminals unless explicitly forced, while the autowrap guards remain active.
-
-### Fixed
-
-- Fixed ED3-risk unknown-viewport renders repainting offscreen structural edits over stale native scrollback, which could duplicate or shift rows when async blocks collapsed or middle rows were deleted.
-- Fixed ED3-risk foreground streams committing mutable live-region rows into native scrollback, which could leave a stale `pending` tool box above the `running` box after the preview re-rendered.
-- Fixed TUI shutdown leaving paint-time terminal state and Kitty image data behind by restoring synchronized-output/autowrap modes and purging all transmitted Kitty image ids on stop.
-- Fixed stdin buffering splitting surrogate-pair text into UTF-16 halves and reduced timing sensitivity for incomplete escape sequences.
-- Fixed terminal content not reflowing after a resize on terminals using DEC 2048 in-band resize (kitty/Ghostty/iTerm2/WezTerm). `ProcessTerminal.columns`/`rows` returned the last cached in-band report even after the OS already knew the new size, so a SIGWINCH whose in-band report was dropped or malformed (split past the stdin flush window, `:`-subparameter fields) re-rendered the whole transcript at the stale width. OS resize events now reconcile cached in-band geometry against the live `process.stdout` dimensions, dropping a stale cached value so the next render uses the true size; a valid in-band report still re-seeds pixel sizing.
-
-## [15.9.3] - 2026-06-05
-
-### Fixed
-
-- Fixed ED3-risk foreground streaming erasing the head of any block that alone overflows the viewport (a tall tool result drawn in one frame, or a multi-line assistant reply growing past the viewport as it streams). The live-region pin committed native scrollback only up to the sealed-prefix boundary (`liveRegionStart`), so rows of the live block that had physically scrolled above the viewport top were neither pushed into scrollback nor kept in the repainted viewport — they vanished. The commit boundary is now the viewport top: every row above the viewport enters scrollback (only the tail still visible in the viewport stays transient and deferred to the checkpoint).
-- Fixed the same ED3-risk live-region pin duplicating already-committed scrollback rows when a foreground stream's live region collapsed mid-turn (a tool preview shrinking to its compact result, an assistant block re-wrapping shorter, a late tool completion). Because growth commits every row above the viewport top to native scrollback, a subsequent shrink moved the bottom-anchored viewport back across those committed rows and the repaint re-drew them into the viewport — so they appeared twice on scroll-up, and with no prompt-submit checkpoint to reconcile (autonomous multi-turn runs, or the session ending into the welcome screen) the duplicate was baked permanently into terminal history. The pinned repaint now separates commit geometry from repaint geometry: a collapse clamps the repaint to the committed sealed boundary (`min(#scrollbackHighWater, liveRegionStart)`) instead of re-exposing those rows, leaving native scrollback un-duplicated without emitting ED3 under a possibly-scrolled reader; stale mutable live-region saved lines still reconcile at the next checkpoint.
-- Fixed hiding overlays during ED3-risk foreground streaming on unknown-viewport terminals leaving the overlay's transient rows in native scrollback. Overlay visibility reductions now bypass the streaming deferral path and rebuild once, so hidden dialog/notification sentinels are scrubbed immediately.
-- Fixed ED3-risk / unknown-viewport terminals (including WSL fronted by Windows Terminal) keeping the foreground-stream eager-rebuild mode active after the stream had already settled. A later scrolled content shrink or resize-with-append could then bypass the anti-yank deferral and repaint from stale geometry, jumping the viewport or replaying the wrong rows. The eager opt-in now drops immediately when no teardown render is pending, and the one-frame post-checkpoint suffix-suppression path no longer overrides geometry reflow handling.
-
-Older entries are archived in [packages/tui/CHANGELOG.md@9f40fb535f35](https://github.com/can1357/oh-my-pi/blob/9f40fb535f35f2b38336a4e694ff4c0dc91d4868/packages/tui/CHANGELOG.md).
+Older entries are archived in [packages/tui/CHANGELOG.md@bdbb5c920f69](https://github.com/can1357/oh-my-pi/blob/bdbb5c920f693caff287c50996c116e42e37992b/packages/tui/CHANGELOG.md).

package/README.md

@@ -318,7 +318,7 @@ Renders markdown with syntax highlighting and theming support.
 
 ```typescript
 interface MarkdownTheme {
-	heading: (text: string) => string;
+	heading: (text: string, depth: number) => string; // depth 1–6
 	link: (text: string) => string;
 	linkUrl: (text: string) => string;
 	code: (text: string) => string;
@@ -332,6 +332,9 @@ interface MarkdownTheme {
 	italic: (text: string) => string;
 	strikethrough: (text: string) => string;
 	underline: (text: string) => string;
+	strong?: (text: string) => string; // **strong**; defaults to bold
+	emphasis?: (text: string) => string; // *emphasis*; defaults to italic
+	tableHeader?: (text: string) => string; // defaults to bold
 	highlightCode?: (code: string, lang?: string) => string[];
 	symbols: SymbolTheme;
 }

package/dist/types/apps/shell-visualizer.d.ts

@@ -0,0 +1,24 @@
+import type { ShellVizPresentation } from "@oh-my-pi/pi-wire";
+import type { DescribeContext, NativeNode, NativeUiEvent } from "../native/node.js";
+import type { Component } from "../tui.js";
+/** Focused inspector host; state and replay timers remain owned by the transcript tool call. */
+export interface ShellVisualizerHost {
+    presentation(): ShellVizPresentation | undefined;
+    replayEpoch(): number;
+    liveOrigin(): boolean;
+    action(value: string): void;
+    close(): void;
+    requestRender(): void;
+    height(): number;
+}
+/** Keyboard and native inspector for the exact presentation shown in the transcript. */
+export declare class ShellVisualizer implements Component {
+    #private;
+    readonly host: ShellVisualizerHost;
+    constructor(host: ShellVisualizerHost);
+    invalidate(): void;
+    handleInput(data: string): void;
+    handleNativeEvent(event: NativeUiEvent): void;
+    describe(cx: DescribeContext): NativeNode;
+    render(width: number): string[];
+}

package/dist/types/autocomplete.d.ts

@@ -47,6 +47,21 @@ export interface AutocompleteItem {
     descriptionMatch?: boolean;
 }
 type Awaitable<T> = T | Promise<T>;
+/**
+ * `^` model mention completion at the cursor. `unhandled` means no mention token there, or
+ * another completion outranks it, so the async {@link AutocompleteProvider.getSuggestions} decides.
+ */
+export type ModelMentionCompletion = {
+    kind: "unhandled";
+} | {
+    kind: "no-match";
+} | {
+    kind: "matched";
+    suggestions: {
+        items: AutocompleteItem[];
+        prefix: string;
+    };
+};
 export interface SlashCommand {
     name: string;
     aliases?: string[];
@@ -94,6 +109,11 @@ export interface AutocompleteProvider {
         items: AutocompleteItem[];
         prefix: string;
     } | null;
+    /**
+     * Synchronously list `^` model mention completions for the token at the cursor, so a
+     * shown mention popup never lags the typed text.
+     */
+    trySyncModelMentionCompletion?(lines: string[], cursorLine: number, cursorCol: number): ModelMentionCompletion;
     /**
      * Synchronously try to expand text immediately before the cursor (no async I/O).
      * Called after every single-character insert. Implementations MUST cheaply

package/dist/types/chat/cache-invalidation-marker.d.ts

@@ -10,11 +10,16 @@ export interface CacheInvalidation {
  * reusing.
  *
  * The provider reports a warm prefix as `cacheRead`; a model/thinking/tool/
- * system-prompt change (or a history rewrite) breaks the prefix, so the next
- * request reads nothing from cache and re-pays for the whole prompt. We flag
+ * system-prompt change, a history rewrite or an expired entry breaks the
+ * prefix, so the next request re-pays for the prompt past the break. We flag
  * only the transition where a demonstrably warm cache goes cold: the previous
- * turn must have actually READ a meaningful prefix back, and this turn's
- * `cacheRead` collapsed to zero while it still reprocessed a non-trivial prompt.
+ * turn must have actually READ a meaningful prefix back, and this turn read
+ * back less than half of it while it still reprocessed a non-trivial prompt.
+ *
+ * A collapse need not reach zero: the leading system/tool block is shared with
+ * every concurrent session on the same prompt, which keeps it warm while this
+ * session's history expires, so a cold turn still reads that block (~15k
+ * tokens) back while re-writing hundreds of thousands behind it.
  *
  * Requiring a prior warm read is deliberate. A turn that merely WROTE the prefix
  * (`cacheRead` 0) has not proven the cache is live — that is the session's first
@@ -23,11 +28,14 @@ export interface CacheInvalidation {
  * call outliving the provider's 5-minute cache TTL surfaced a spurious "cache
  * miss" right under the opening message). It also collapses a run of consecutive
  * cold turns to the single marker at the moment the cache actually broke, instead
- * of repeating the banner on every turn while it re-warms.
+ * of repeating the banner on every turn while it re-warms. Measuring the loss
+ * against what the predecessor READ (not what it wrote) keeps both guarantees
+ * when only the shared block was warm: nothing proven live was lost.
  *
  * Returns `undefined` (no marker) for the first turn, turns whose predecessor
- * never read a warm prefix, tiny contexts, turns that reused any cache, and —
- * crucially — turns on providers with *implicit* best-effort caching. Only an
+ * never read a warm prefix, tiny contexts, turns that read back at least half
+ * of the predecessor's warm prefix, and — crucially — turns on providers with
+ * *implicit* best-effort caching. Only an
  * explicit, prefix-controlled cache (Anthropic / Bedrock `cache_control`)
  * re-creates the prefix on a cold turn (`cacheWrite > 0`); implicit caches
  * (Google / OpenAI / Fireworks) report `cacheWrite: 0` and drop `cacheRead` to

package/dist/types/chat/chat-transcript-builder.d.ts

@@ -13,7 +13,7 @@
  */
 import type { AgentTool } from "@oh-my-pi/pi-agent-core";
 import { type TUI } from "../tui.js";
-import type { MessageRenderer } from "./extension-types.js";
+import type { AssistantTextRenderer, MessageRenderer } from "./extension-types.js";
 import { type TranscriptEntryLike as TranscriptEntry } from "./transcript-entry.js";
 import { TranscriptContainer } from "../chrome/transcript-container.js";
 export interface ChatTranscriptBuilderDeps {
@@ -30,6 +30,8 @@ export interface ChatTranscriptBuilderDeps {
     linkTargets?: ReadonlyMap<string, string>;
     /** Draw charts under numeric tables; false for transcripts that are not the main session's. Default: true. */
     tableCharts?: boolean;
+    /** Extension assistant text renderers the replayed replies draw with, as the live transcript does. */
+    textRenderers?: readonly AssistantTextRenderer[];
     requestRender: () => void;
 }
 export declare class ChatTranscriptBuilder {

package/dist/types/chat/display-preferences.d.ts

@@ -1,6 +1,8 @@
 /** Process-wide display preferences applied by the host settings hooks. */
 export interface ChatTranscriptDisplayPreferences {
     hideToolActivity: boolean;
+    /** Show the interactive shell execution visualization instead of the plain command. */
+    shellVisualization: boolean;
     readToolResultPreview: boolean;
     showImages: boolean;
     cacheMissMarker: boolean;

package/dist/types/chat/extension-types.d.ts

@@ -1,7 +1,10 @@
 import type { AssistantMessage } from "@oh-my-pi/pi-ai";
+import type { TspText } from "@oh-my-pi/pi-wire";
 import type { Component, TUI } from "../tui.js";
 import type { Theme } from "../theme/theme.js";
-import type { CustomMessage, HookMessage } from "./messages.js";
+import type { TodoItem } from "../tools/todo.js";
+import type { BashExecutionMessage, CustomMessage, HookMessage, PythonExecutionMessage } from "./messages.js";
+import type { NotificationRule } from "./ttsr-notification.js";
 export type ExtensionUiComponent = Component & {
     dispose?(): void;
 };
@@ -48,6 +51,74 @@ export interface AssistantTextRendering {
     /** Index in the full reply's `content` of this component's first block; a segment after a tool call starts past it. */
     contentOffset: number;
 }
+/**
+ * One transcript block a {@link TranscriptPresenter} decides the display of. Later omp versions
+ * add block types; answer `undefined` for a `type` you do not know.
+ *
+ * - `toolCall`: a model tool call, `id` its `toolCallId`. `result` arrives with the call's first
+ *   result frame; `isPartial` stays true while the call still streams progress.
+ * - `message`: a session message drawn as its own block, `id` the decimal `message.timestamp`
+ *   (shared by messages recorded in the same millisecond).
+ *   `custom` messages with `customType` `"advisor"`, `"skill-prompt"`, `"lsp-late-diagnostic"`,
+ *   `"async-result"` or `"launch-completion"`, and `!`/`$` runs (`bashExecution`,
+ *   `pythonExecution`). A `!`/`$` run still going has a provisional message and id; it is asked
+ *   again with the recorded message once the session records the run. In Tern, late diagnostics
+ *   an edit/write card takes are drawn with that card instead, so an `"lsp-late-diagnostic"`
+ *   block appears only for the files no card took.
+ * - `event`: a TTSR rule hit or an incomplete-todo reminder, shaped like the extension event of
+ *   the same `type`. These exist only in the session that raised them; `id` is unique per process.
+ *
+ * Read-only, and not a copy: `args`, `result`'s `content` and `details`, `message` and `event`
+ * are the live objects omp draws the block from, often the session's own message data. Never
+ * mutate them: the change would reach the block and possibly the session.
+ */
+export type TranscriptBlock = {
+    readonly type: "toolCall";
+    readonly id: string;
+    readonly toolName: string;
+    readonly args: unknown;
+    readonly result?: {
+        readonly content: readonly unknown[];
+        readonly details?: unknown;
+    };
+    readonly isError: boolean;
+    readonly isPartial: boolean;
+} | {
+    readonly type: "message";
+    readonly id: string;
+    readonly message: CustomMessage | BashExecutionMessage | PythonExecutionMessage;
+} | {
+    readonly type: "event";
+    readonly id: string;
+    readonly event: {
+        readonly type: "ttsr_triggered";
+        readonly rules: readonly NotificationRule[];
+    } | {
+        readonly type: "todo_reminder";
+        readonly todos: readonly TodoItem[];
+        readonly attempt: number;
+        readonly maxAttempts: number;
+    };
+};
+/**
+ * How a transcript block is drawn: `undefined` defers to the next presenter (and, after the
+ * last, to `"full"`); `"full"` is omp's own card; `"hidden"` draws nothing, as hidden tool
+ * activity does; `"compact"` is one row from omp's own summary. `{ compact: { label, rows } }`
+ * replaces that row's text with `label` and adds one row per `rows` entry below it. Spans use the
+ * semantic tokens and theme colour names of {@link TspText}.
+ */
+export type TranscriptPresentation = undefined | "full" | "hidden" | "compact" | {
+    readonly compact: {
+        readonly label?: TspText;
+        readonly rows?: readonly TspText[];
+    };
+};
+/**
+ * Display-only choice of how one transcript block is drawn. Presenters are asked in extension
+ * load order; the first answer other than `undefined` wins. A block the user expanded is always
+ * drawn in full.
+ */
+export type TranscriptPresenter = (block: TranscriptBlock) => TranscriptPresentation;
 export interface HookMessageRenderOptions {
     /** Whether the view is expanded */
     expanded: boolean;

package/dist/types/chat/read-tool-group.d.ts

@@ -21,12 +21,21 @@ export declare function readArgsCollapseIntoGroup(args: unknown): boolean;
 export declare function groupedReadUsageCallIds(message: AssistantMessage): string[] | undefined;
 type ReadToolGroupOptions = {
     showContentPreview?: boolean;
+    /** Ask the extension transcript presenters; false for a replayed transcript (overlays). Default: true. */
+    transcriptPresenters?: boolean;
 };
 export declare class ReadToolGroupComponent extends Container implements ToolExecutionHandle {
     #private;
     constructor(options?: ReadToolGroupOptions);
+    /**
+     * Reads a presenter leaves full draw as the group, at the first full read's place; a compact
+     * read is a row of its own; hidden draws nothing.
+     */
     render(width: number): readonly string[];
+    refreshTranscriptPresentation(ids?: ReadonlySet<string>): boolean;
     isTranscriptBlockFinalized(): boolean;
+    /** Compact only while every read it draws is a compact row. */
+    isTranscriptBlockCompact(): boolean;
     finalize(): void;
     /**
      * Force the group terminal even if an entry never received its result (the
@@ -63,11 +72,14 @@ export declare class ReadToolGroupComponent extends Container implements ToolExe
     setExecutionStarted(_toolCallId?: string): void;
     setExpanded(expanded: boolean): void;
     setToolActivityVisible(visible: boolean): void;
+    /** The reads' Spotlight notices, in order: blocks of their own right after the group's card. */
+    nativeTrailers(): readonly Component[];
     getComponent(): Component;
     /**
      * Mirrors the terminal's toggles: the `tool` head (the group's root) is
      * `Ctrl+O`'s expansion; a fallback preview card collapses on its own
-     * (`setExpanded` resets those).
+     * (`setExpanded` resets those). A compact read's row (`c<id>`) opens that
+     * read; the full rows beside compact ones (`full`) open and close their reads.
      */
     handleNativeEvent(event: NativeUiEvent): void;
     /**
@@ -75,7 +87,8 @@ export declare class ReadToolGroupComponent extends Container implements ToolExe
      * the fallback: a bare `card` (role `omp.tool.read`) with `Read <path>` or
      * `Read (N)` in the head, a `list` of path items (status tone, link,
      * correction and conflict detail, nested usage) and a clamped preview per
-     * read when content previews are on.
+     * read when content previews are on. Compact reads become rows of their
+     * own (keyed `c<toolCallId>`) beside that group.
      */
     describe(cx?: DescribeContext): NativeNode;
 }

package/dist/types/chat/skill-message.d.ts

@@ -18,6 +18,7 @@ export declare class SkillMessageComponent extends Container {
     #private;
     constructor(message: CustomMessage<SkillPromptDetails>, imageLinks?: readonly (string | undefined)[]);
     setExpanded(expanded: boolean): void;
+    isExpanded(): boolean;
     handleNativeEvent(event: NativeUiEvent): void;
     /**
      * A user-toned card (role `omp.skill`): the skill chip and prompt size in