• The unread filter is now also supported in message folders and the search interface, so you can easily see what you've been missing.
• Improved upload reliability under poor network conditions. Thanks, @3mmmbulus!
• The "(N)" shortcut correctly points to the thumbs down emoji. Thumbs up to @lnicola for the bugfix.

• Additional small tweaks, bug fixes, and assorted plans for the future.

@oh-my-pi/pi-agent-core

Added

• AgentTool gained the optional approvalCacheTargets hook, which the always-ask-cached approval mode uses to check and record per-file grants (#16049 by @Peribunt)

Changed

• Tools with lenientArgValidation now receive unknown root arguments that their closed schema would otherwise drop, so they can reject them (#16317)

@oh-my-pi/pi-ai

Added

• Added validateToolArguments(tool, call, { keepUnknownRootKeys: true }) to keep unknown root keys that a closed schema would otherwise drop during argument repair (#16317)

Fixed

• Fixed Claude streams that a gateway cut off before message_delta failing the turn instead of being retried (#16341 by @lz-lunzi)
• Fixed Gemini pairing parallel same-name tool results with the wrong call when history stores them out of call order (sessions from before 18.4.2, SDK-built contexts) (#16259 by @will-bogusz)
• Fixed Factory Droid Gemini dropping calls to tools with names over 64 characters (most MCP tools) and their results from later requests, so the model called the tool again; such names now shorten to 64 characters (#16283 by @will-bogusz)
• Fixed Factory Droid Gemini requests failing with 400 "For schema with items, schema type should be ARRAY" when a tool parameter accepts a string or a list, as the default task tool's model field does (#16249 by @will-bogusz)
• Fixed PI_REQ_DEBUG=1 request dumps writing your API key, bearer token and response cookies to disk in plain text: credential headers now read [redacted], as in rejected-request dumps (#16293 by @will-bogusz)
• Fixed finalized signed reasoning disappearing from displayed thinking when no deltas streamed (#16227)

@oh-my-pi/pi-catalog

Changed

• MiniMax MiniMax-M3.1-Flash (the launch id) now gets the always-on low–max thinking the bundled MiniMax-M3.1-Flash-Preview rows have, and omits sampling params (temperature, top_p, top_k) it rejects (#16315 by @SaladDay)

Fixed

• Gemma 4 models on Google AI Studio (google/gemma-4-31b-it, google/gemma-4-26b-a4b-it, …) no longer fail every request with Thinking budget is not supported for this model; thinking is now toggled with thinkingLevel (on = high, off = minimal) (#16350)

@oh-my-pi/pi-coding-agent

Added

• Added the Ask and remember approval mode (tools.approvalMode: always-ask-cached, --approval-mode always-ask-cached): it also asks before file reads, and file prompts can remember the folder or the file, for this session or across sessions, through approval-cache.db (#16049 by @Peribunt)
• Added /forget-approvals to forget every file and folder approval Ask and remember has recorded (#16049 by @Peribunt)
• Extension ui.approve() hosts can render the new prompt.grants choices and answer { grant, always }; hosts that ignore them keep answering once/session/deny (#16049 by @Peribunt)
• Extension and custom tools can declare approvalCacheTargets to take part in Ask and remember grants (#16049 by @Peribunt)
• Added proc://<id>/streams for bash jobs: it lists the command's pipes, and proc://<id>/streams/<n> shows what has crossed pipe n so far, so cmd | tail -5 can be followed live without rerunning cmd
• Background job widgets are designed per job by the new widget model role (resolves like smol until you assign it): one request writes rules that read the job's output and its pipes (cmd | tail included), and every later update is computed locally with no further model calls or messages to the agent; a subagent gets a widget only once it says which output shows its progress, and a job with nothing worth charting gets none; turn them off with async.widgets: false
• Running subagents now show their current step, in their own words, on the task card; the periodic completion check also asks the subagent which output shows its progress, so the job widget knows what to chart
• The wait card shows the watched jobs as a row of tiles, each with its status, name (a subagent's in full), what it is doing, and its headline figure and live widget when it has one (a throughput chart with its target line, per-model bars, CI job status, trial progress), and a subagent's own completion estimate as a ring that turns from blue to green as it fills (hover the tile for the percentage); the HUD jobs pill shows the freshest job's headline and a mini chart, and hovering it opens a card with the running jobs as tiles; the jobs sheet shows the selected job's widget above its output, and the terminal status line appends the headline to the jobs count

Changed

• While a subagent is focused, /model, /switch, /effort, Alt+P, Ctrl+P, and Shift+Tab change that subagent's model and thinking level (session-only) instead of telling you to return to the main session; /model and Alt+M open the session-only picker there, since role assignments configure the main session

Fixed

• Fixed omp skill list omitting skills from a skills.customDirectories entry that starts with ~; such an entry now resolves against your home directory, matching the skill loader (#16347 by @yuzu-octopus)
• Fixed grep treating a ;-separated list of internal URLs (e.g. artifact://44;artifact://43) as one URI and refusing to search it; every listed resource is now searched (#14091)
• Fixed grep refusing a web URL that carries a :raw (or :conflicts) selector before the page was fetched; the selector now reaches the fetch, so :raw searches the verbatim response body (#14092)
• Fixed browser role/<role>[name="…" exact] selectors in Chromium and Tern tabs matching nothing for many names copied from observe(); a button or link with visible text is no longer matched by its title (#16252 by @will-bogusz)
• Fixed /tan clones with Mnemopi auto-recall re-sending the parent's recalled memories as an extra system-prompt block, which duplicated them and missed the parent's prompt cache (#16337)
• Fixed legacy pi extensions that import contentText from pi-ai or formatSkillsForPrompt from pi-coding-agent, such as pi-claude-bridge, failing to load (#16313 by @Jerryx333)
• Fixed legacy Pi plugins such as pi-ssh-remote crashing at session start when reading shell settings through SettingsManager (#16256)
• Fixed newly authenticated models missing from the current session's scoped /model picker and model cycle after login, including setup-wizard sign-in, without changing the active model or widening the configured scope (#16234 by @lazy1523)
• Fixed the computer tool's control.acquire returning the same { active: false } when nobody could be asked (a subagent or headless run) as when you declined; it now reports reason: "no-ui" or reason: "denied" (#16295 by @will-bogusz)
• Fixed a browser screenshot waiting past its deadline when Chrome was slow to open a DevTools session; it now stops at the deadline (#16230 by @will-bogusz)
• Fixed a parked subagent waking up with the todo tool and its instructions when messaged, though subagents are spawned without them (#16281 by @will-bogusz)
• Fixed wait failing with "Skipped due to a queued background completion" when the job it was waiting for had just finished; it now returns that job's result, and a steer, peer message or aside arriving at the same moment no longer turns a settled job or waiting peer message into that skip (#16301 by @will-bogusz)
• Fixed the second of two extension asides (pi.sendMessage(…, { deliverAs: "aside" })) sent together to an idle session being lost; it now reaches the agent after the first (#16292 by @will-bogusz)
• Fixed every idle agent woken by an agent://all broadcast answering the sender automatically, mostly to say the message was not for it; a direct message still gets the woken agent's turn back (#16312 by @will-bogusz)
• Fixed a subagent woken by an IRC message sending its waker and parent every line of text it wrote that turn run together (Checking.Answer.) instead of just its final answer (#16302 by @will-bogusz)
• Fixed a parent follow-up sent while a peer-woken subagent was running leaving the accepted agent:// result unchanged and skipping the parent's completion (#16305)
• Fixed yield reporting success while silently omitting unsupported root fields; such calls are now rejected with an error naming the fields (#16317)
• Fixed brew install and brew upgrade of omp failing with a 403 behind corporate proxies (#16264 by @debanjanbasu)
• Fixed browser timeouts in the release binary surfacing as raw errors such as Og: Navigation timeout of 7000 ms exceeded; a timed-out tab.goto or browser.open now stops the pending load and keeps the tab, as running from source did (#16266 by @will-bogusz)
• Fixed find, glob and ast_grep always refusing ssh:// paths with "ssh:// access needs exec approval; this command was approved at read": they now ask for exec approval like read and grep do (#16285 by @will-bogusz)
• Fixed a conflict://* write of per-id lines with literal values (1: foo, 2: bar) writing all of them into every conflict block and reporting success; it now fails without touching the file and points to per-block conflict://<N> writes (#16267 by @will-bogusz)
• Fixed hashline block edits (PUT N*:, CUT N*) applying over block lines a read never fully showed, such as a line cut at the column cap, which silently dropped that line's tail; they are now rejected like the equivalent explicit range (#16209)
• Fixed a resumed session's next snapcompact compaction losing the newest archived history once the archive passed 500k characters, and drawing [Session persistence truncated large content] into its frames; the archive's source text is now saved whole (#16282 by @will-bogusz)
• Fixed /compact, /new or a session switch during a running tool dropping that tool's result from the session file, so the model and a resumed session saw "No result provided" instead of what the tool returned (#16241 by @will-bogusz)
• Fixed read middle-eliding large file pages into an artifact; a page past the output spill threshold now stops at a line boundary with an exact :N continuation (#16277)
• Fixed an edit after a restart replacing a line that read or grep had shown cut at the column cap and silently dropping the rest of that line; such edits now ask for a full :raw read of the line first, while edits to lines within the cap still apply (#16171)
• Fixed Enter on an unknown slash command such as /not-a-command running a command whose description happened to match it (e.g. /loop, which then resent every later prompt after each turn); Enter now sends what you typed, including as the deny-and-steer message for a pending tool approval, unless you select a suggestion first (#16265)
• Fixed read of web pages dropping collapsed sections such as accordion and expander panels (e.g. a product page's "Item details" table); content in <template>, <noscript> and scripts stays out (#16246)
• Fixed /mcp reauth and /mcp add opening an unrelated origin-root authorization server's login page when the authorization server an MCP server advertises in its protected-resource metadata has invalid metadata; discovery now uses only the advertised servers and reports the issuer mismatch naming the server (#16339)
• Fixed auto thinking offering the judge effort levels the current model does not support, which could leave a sparse-ladder model on the wrong level; with at most one usable level under the ceiling it now skips the judge call (#16327 by @savanne-kham)
• Fixed subagents that were cancelled, interrupted, timed out, or killed refusing messages as "hard-aborted and cannot be messaged or revived": a message (or Agent Hub revive/focus) now resumes them from their transcript with full context
• Fixed interrupting a focused subagent to send it a queued message (empty Enter) sometimes ending its run as cancelled before it read the message; the subagent now answers the message and keeps working
• Fixed sessions whose first reply starts with a todo plan getting a title without its icon and code: the plan's title refresh no longer replaces the card title that is still being generated
• Fixed generated titles that come out without an icon and code (a subagent's title, a title-model fallback, a malformed card reply) staying plain: they now get a card like /rename titles do
• Fixed running the test suite adding fixture titles (PLAN, renamed session, …) to your real ~/.omp/agent/history.db

@oh-my-pi/pi-natives

Added

• Added a hiddenContent option to htmlToMarkdown: "drop" (default) omits hidden content, "reachable" keeps content the page can reveal such as collapsed sections and inactive tab panels, and "all" also keeps <template> and <noscript> content; other values throw (#16246)
• Added normalizePtyDimensions(cols, rows) to size screen emulators with the same effective dimensions as native PTY sessions (#16192 by @C-W-Z)
• Added LineMatcher, a native multi-pattern line matcher: matchLines returns a batch's matches column-wise as typed arrays (line, pattern, and the UTF-16 span of each named group in groupNames() order)
• Added PipeStreams and the streams option of Shell.run: every pipe the run opens keeps a readable copy of its newest megabyte, so a stage's output stays visible while a later stage (| tail) holds it back

Fixed

• Fixed the output minimizer altering what ssh commands print in the bash tool: remote lines were cut to 120 characters and blank lines dropped; ssh's own login and connection notices are still stripped (#16314 by @will-bogusz)
• Fixed X11 background shortcuts and typing reporting Cancelled when you stopped them right after the last key went down: the key releases now always go out and the call succeeds (#16235 by @will-bogusz)
• Fixed wrapTextWithAnsi leaving rows half-empty in Chinese and Japanese text: CJK runs now break between characters to fill each row, closing punctuation such as ，。！」 never starts a row, and opening brackets never end one (#16219)
• Fixed a cancelled or timed-out macOS computer call finishing its lookup of a sheet, popover or menu window, up to 5,000 accessibility elements, before it stopped and let the next request run (#16233 by @will-bogusz)

@oh-my-pi/pi-tui

Added

• Added IrcMessage.broadcast, set on each copy of an agent://all broadcast so recipients can tell it from a direct message (#16312 by @will-bogusz)
• AutocompleteItem.descriptionMatch marks a slash command matched only through its description; Editor Enter no longer applies such a row unless the user moved the selection onto it (#16265)
• ApprovalDialogComponent accepts grants and onGrant: grant choices above Approve Once, led by a toggle that keeps them across sessions (#16049 by @Peribunt)
• Added describeJobWidget/renderJobWidgetLines to draw a background job's widget natively and as terminal lines, describeJobTiles/renderJobTileLines to draw jobs as tiles (status, title, figure, widget), and renderSparkline (with peakBuckets/fitSparkValues) for one-row block sparklines

Fixed

• Fixed transparent images with empty top rows disappearing inside Zellij (#16346 by @Bouska)
• Fixed bash output rewritten by the output minimizer skipping the per-line column cap (tools.outputMaxColumns), so a line wider than the cap reached the model whole; the raw output stays in its artifact (#16314 by @will-bogusz)
• Fixed the composer caret drifting one cell left per pasted image or video chip in terminals that draw the chip icon as a wide emoji (JetBrains terminal); the unicode preset now uses 📷/🎬 chip icons (#16270)
• Fixed Tern hiding user text sent with /skill:<name> inside a collapsed skill card; only the loaded skill prompt is hidden (#16311)
• Fixed SIXEL charts and images overlapping following content when their top rows scroll out of the viewport (#16245 by @JustasMasiulis).

@oh-my-pi/pi-wire

Added

• Added min, max and dashed reference marks to bars/spark chart nodes, a tone per series column, and the common hovercard prop: a node tree Tern floats over the node while the pointer rests on it

What's Changed

• fix(tui): clip SIXEL rasters at the viewport top by @JustasMasiulis in #16245
• fix(tui): kept Enter from running description-only slash matches by @roboomp in #16268
• fix(ai): preserved finalized native reasoning without deltas by @roboomp in #16229
• fix(tui): used emoji-presentation glyphs for image and video chips by @roboomp in #16276
• fix(tui): kept skill draft visible in tern transcript by @roboomp in #16320
• fix(read): paged file reads at the spill threshold instead of eliding by @roboomp in #16280
• fix(tui-debug): support native Windows without /bin/sh by @C-W-Z in #16192
• fix(ai): redact credential headers in PI_REQ_DEBUG dumps by @will-bogusz in #16293
• fix(coding-agent): keep a running tool's result when /compact, /new or a session switch aborts it by @will-bogusz in #16241
• fix(coding-agent): persist snapcompact archive source text whole by @will-bogusz in #16282
• fix(edit): checked every block line in the hashline seen-line guard by @roboomp in #16218
• fix(coding-agent): reject conflict://* per-id blocks with literal values by @will-bogusz in #16267
• fix(coding-agent): ask exec approval for ssh:// paths in find, glob and ast_grep by @will-bogusz in #16285
• fix(natives): never cancel X11 uinput releases by @will-bogusz in #16235
• fix(mcp): restricted oauth discovery to advertised auth servers by @roboomp in #16340
• fix(ai): keep Factory Droid Gemini tool schemas valid when a parameter takes a string or a list by @will-bogusz in #16249
• fix(ai): keep Factory Droid Gemini calls to long-named tools in later requests by @will-bogusz in #16283
• fix(ai): send parallel Gemini tool results back in call order by @will-bogusz in #16259
• fix(catalog): sent thinkingLevel for gemma 4 on google ai studio by @roboomp in #16354
• fix(browser): recognize Puppeteer timeouts in release builds by @will-bogusz in #16266
• fix(ci): fall back to the GitHub release in the Homebrew formula by @debanjanbasu in #16264
• fix(coding-agent): rejected yield calls carrying fields beside data by @roboomp in #16323
• fix(task): published parent-injected wake results by @roboomp in #16307
• fix(task): relay a woken subagent's final report, not all its turn text by @will-bogusz in #16302
• fix: address review follow-ups for #16323, #16340, #16249, #16241 by @H4vC in #16362
• fix(coding-agent,tui): stop woken agents auto-replying to agent://all broadcasts by @will-bogusz in #16312
• fix(coding-agent): deliver both of two asides sent together to an idle session by @will-bogusz in #16292
• fix(coding-agent): return a just-finished job from a wait its completion notice cut short by @will-bogusz in #16301
• fix(pi-shell,tui): keep ssh remote output intact in the minimizer by @will-bogusz in #16314
• fix(natives): broke cjk runs between characters in wrapTextWithAnsi by @roboomp in #16228
• fix(coding-agent): keep todo stripped from a warm-revived subagent by @will-bogusz in #16281
• fix(natives): stop a cancelled macOS stale-ref search before it looks up the window by @will-bogusz in #16233
• fix(coding-agent): stop a browser screenshot waiting on a DevTools session past its deadline by @will-bogusz in #16230
• fix(coding-agent): tell a computer.control.acquire nobody could answer apart from a refusal by @will-bogusz in #16295
• fix(ai): classify mid-stream message_delta drops as retryable by @lz-lunzi in #16341
• fix(coding-agent): refresh scoped models after OAuth login by @lazy1523 in #16234
• fix(coding-agent): restored legacy shell settings accessors by @roboomp in #16258
• fix(coding-agent): export contentText and formatSkillsForPrompt from the legacy pi shims by @Jerryx333 in #16313
• fix(mnemopi): kept /tan clones from re-injecting the parent recall by @roboomp in #16338
• fix(coding-agent): match browser role/ exact names to the names observe() shows by @will-bogusz in #16252
• fix(coding-agent): let grep fetch a web URL that carries a :raw selector by @yuzu-octopus in #16352
• fix(coding-agent): search every resource in a semicolon list of internal URLs by @yuzu-octopus in #16353
• fix(coding-agent): expand tilde in skill list custom directories by @yuzu-octopus in #16347
• fix(tui): preserve transparent SIXEL image width in Zellij by @Bouska in #16346
• fix(coding-agent): add the legacy skills prompt template by @H4vC in #16364
• fix: address second round of review follow-ups by @H4vC in #16365
• fix(coding-agent): constrain auto-thinking choices to supported model efforts by @savanne-kham in #16327
• fix(catalog): move MiniMax M3.1 Flash rules to the launch id MiniMax-M3.1-Flash by @SaladDay in #16315
• docs(changelog): describe the auto-thinking fix by its effect by @H4vC in #16367

New Contributors

• @JustasMasiulis made their first contribution in #16245
• @debanjanbasu made their first contribution in #16264
• @lz-lunzi made their first contribution in #16341
• @lazy1523 made their first contribution in #16234
• @Jerryx333 made their first contribution in #16313
• @SaladDay made their first contribution in #16315

Full Changelog: v18.12.2...v18.12.3

chore: bump version to 18.12.1

chore: bump version to 18.12.0

@oh-my-pi/pi-agent-core

Added

• prepareQueuedMessages receives which queue (steering or followUp) a batch came from (#16026)

@oh-my-pi/pi-ai

Fixed

• Fixed JSON Schema dereferencing rewriting literal values in const, enum, default, examples, and custom annotations, or treating property names as schema keywords (#15927 by @jchanghong023).
• Fixed Anthropic requests hanging forever on Bun 1.3 when the upstream accepted the request but never sent headers: aborting the request (including the first-event timeout) now fails it, so the turn retries instead of waiting until the user interrupts it (#16010 by @ca-io-systems)
• Fixed the auth gateway's POST /v1/chat/completions streams being dropped (terminated) after ~255 s without upstream output, e.g. while xAI generates a large tool call's arguments, which arrive only when complete; the stream now sends an SSE : keepalive comment every 15 s (#15940 by @radkawar)
• Fixed Anthropic models with mid-conversation system messages (e.g. Claude Opus 5.5) receiving @file mention contents and hidden extension messages as a trailing system message instead of ending the request on the user's turn (#15881)

@oh-my-pi/pi-catalog

Changed

• Renamed the built-in google-antigravity login option to "Google Antigravity (Gemini, Claude, GPT-OSS)" so it is distinguishable from similarly named third-party plugins and no longer implies support stops at Gemini 3 (#15998 by @savanne-kham).

Fixed

• Fixed Command Code's z-ai/glm-5.3-flash failing every request with "not available on this endpoint": the catalog routes it to chat completions, the only endpoint Command Code lists for it (#15922 by @jasonharrison)
• Fixed /handoff failing with 400 Provider returned error on OpenRouter's hosted Muse Spark 1.x and Muse Wonder models: requests no longer send a tool_choice the upstream Meta backend rejects (#15910)
• Fixed OpenCode Zen bringing back retired bundled models from an authoritative model cache, and dropping drop-listed models such as gemini-3.7-flash when a refresh fails after an upgrade (#15770 by @adi-IL)

@oh-my-pi/pi-coding-agent

Breaking Changes

• Extension ui.approve() hosts receive an optional session choice label and answer "once", "session", or "deny" instead of a boolean

Added

• Added imageCountBudget to custom models and modelOverrides in models.yml, so a custom gateway can state its host's image limit instead of the default of 5; past that limit the oldest images were dropped on every new image, which rewrote the provider's prompt cache (#15002, #15969 by @aramalipoor)
• The status line names the active profile next to the π brand (π-work), so sessions from different profiles are distinguishable at a glance; the default profile is unchanged (#15622 by @matthewrball)
• Added opt-in prewalk.auto (off, suggest, or on): the native judge decides per task whether to arm a prewalk handoff to prewalk.autoTarget, and the next task starts back on the planning model (#16026 by @taibenvenuti)
• Added /seance and the task seance agent: consult a saved session read-only, in place, without resuming it or copying its artifacts; pick the source and an optional model from pickers, and send follow-ups to the consultant (#15036 by @anatoli-tsinovoy)

Changed

• Tool approval prompts list Approve, Approve <tool> for this session, and Deny again: with an empty composer, pick with the arrow keys and Enter; typing in the composer denies and steers instead, and the Deny row reads "Deny and send message" while you do

Fixed

• Fixed the Isolate Subagents setting description implying that all tasks run isolated; each task must opt in with isolated: true (#15987).
• Fixed read labeling re-encoded images with the display format instead of the source file's format; it now identifies both when they differ (#15890).
• Fixed omp -p and task subagents reporting a clean finish with an earlier answer when a context overflow could not be compacted enough to retry; the overflow error is now the run's outcome (#15897 by @nhthung)
• Fixed Cursor's Shell tool killing commands once its block_until_ms wait elapsed; the wait no longer sets the kill deadline, which comes from Cursor's hard_timeout or the bash default (#15898 by @nhthung)
• Fixed an interrupted prompt's late setup cleanup marking the next prompt idle early, allowing overlapping submissions and releasing sleep prevention mid-turn (#15946)
• Fixed hashline REM hiding the path-recovery warning when a nonexistent path matched an earlier-read file (#15957).
• Fixed tool downloads (sd, sg, yt-dlp, trafilatura) failing with GitHub API error: 403 on a machine whose egress IP has spent GitHub's anonymous 60/hour budget; the release lookup now sends GITHUB_TOKEN/GH_TOKEN like omp's other GitHub API call sites (#15981 by @iacore)
• Background local memory extraction now stops after one bounded retry budget on repeated OpenAI-compatible 429 responses instead of multiplying transport, provider, and completion retries (#15826).
• Fixed a message-result subagent resumed by typing into its focused session leaving agent://<id> empty and never reporting its final reply to the parent (#15948)
• Fixed read of an RSS or Atom feed showing Untitled for every item and dropping feed titles, descriptions, dates, and RSS item links (#15954)
• Fixed read showing a binary notice instead of an HTML page when a server sends unlabeled gzip to the first request but decodable HTML to the second (#15956)
• Fixed read returning a homepage's site-wide feed or a page's site-wide llms.txt alternate instead of the requested page (#15955).
• Fixed ast_grep reporting a clean "No matches found" for a pattern that does not parse in the target language (e.g. a bare C# identifier); it now lists the pattern's ERROR node as a parse issue (#15950)
• Fixed --resume <id> and session listings skipping transcripts placed in the session directory as symlinks (#15878, #15884 by @peda-cos)
• Fixed sessions with a deferred-connecting MCP server listing every routed MCP tool twice, once as a mount notice and once in route guidance (#15982 by @zcyoung2000)

Removed

• Removed the built-in rs-parking-lot rule; Rust edits using std::sync::{Mutex, RwLock} with .lock().unwrap() are no longer steered to parking_lot

@oh-my-pi/pi-natives

Changed

• Changed encodeSixel and encodeSixelAsync to drop a partial last 6-pixel band, so an image never extends below the requested height and the caller no longer has to shrink it to a multiple of 6 (#16007)

@oh-my-pi/pi-tui

Added

• Added selection-only session and model picker actions for /seance, so choosing a source or model leaves the active session and model unchanged (#15036 by @anatoli-tsinovoy)

Changed

• ApprovalDialogComponent shows a choice list (Approve, an optional session row, Deny): the arrow keys move between them and Enter (armed after APPROVE_ARM_MS) takes the highlighted one; while a composer draft holds Enter the highlight sits on Deny, relabeled "Deny and send message"; Tern clicks on a choice take it; Page Up/Down scroll the details

Fixed

• Fixed a streamed Markdown list keeping every item out of native scrollback until the turn ended, so rows that scrolled off screen were unreachable mid-stream; items in front of the newest one now retire as soon as it begins (#13676, #15993 by @shgew)
• Fixed SIXEL charts and SVG figures being resampled before display, which softened their text, on terminals whose cell height is not a multiple of 6 such as Windows Terminal (#16007)

@oh-my-pi/pi-utils

Fixed

• Fixed Markdown fence info-string parsing to keep backtick-containing backtick openers as paragraph text while accepting backticks in tilde info strings and Unicode line separators in either fence's info string (#15928 by @jchanghong023).
• Fixed parseHTML treating <link> in RSS/Atom documents as an HTML void element, which dropped the URL text of RSS <link>…</link> (#15954)

What's Changed

• fix(read): rendered rss and atom feed fields instead of untitled by @roboomp in #15959
• fix(tools): scoped read alternates to the requested page by @roboomp in #15960
• fix(read): rendered decoded html from binary refetch by @roboomp in #15961
• fix(edit): preserved recovery warnings on deleted files by @roboomp in #15962
• feat(coding-agent): configurable imageCountBudget for custom models by @aramalipoor in #15969
• fix(tools): send the environment token to the GitHub release lookup by @iacore in #15981
• fix(coding-agent): suppress mount notices duplicated by route guidance by @zcyoung2000 in #15982
• fix(task): clarify opt-in subagent isolation setting by @roboomp in #15990
• fix(tui): retire finished items of a streaming list mid-stream by @shgew in #15993
• fix(catalog): rename Google Antigravity login label by @savanne-kham in #15998
• fix(tui): encoded sixel images at their cell box without resampling by @roboomp in #16009
• fix(ai): failed an aborted cowork request that never received headers by @ca-io-systems in #16010
• feat(tui): tag the status-line brand with the active profile by @matthewrball in #15622
• fix(catalog): preserve authoritative caches in resolveProviderModels by @adi-IL in #15770
• fix(memory): bounded background extraction retries by @roboomp in #15827
• fix(ai): kept user-attributed developer turns off anthropic system role by @roboomp in #15883
• fix(session): follow symlinks in session inventory scans by @peda-cos in #15884
• fix(read): corrected source image format labels by @roboomp in #15892
• fix(coding-agent): kept an unrecovered context overflow as the run's outcome by @nhthung in #15897
• fix(cursor): stopped killing Shell commands at the block_until_ms wait by @nhthung in #15898
• fix(catalog): route Command Code z-ai/glm-5.3-flash to chat completions by @jasonharrison in #15922
• fix(ai): preserve literal data while dereferencing schemas by @jchanghong023 in #15927
• fix(utils): preserve invalid backtick fences as prose by @jchanghong023 in #15928
• fix(ai): keep auth-gateway chat-completions SSE streams alive during upstream silence by @radkawar in #15940
• fix(session): preserved next prompt state after interrupted setup by @roboomp in #15947
• fix(task): publish user-resumed message results to agent:// and parent by @roboomp in #15949
• fix(natives): reported ast-grep patterns that parse to an ERROR node by @roboomp in #15958
• fix(catalog): omitted tool_choice for openrouter muse models by @roboomp in #15911
• feat(coding-agent): add opt-in auto-prewalk routing with native judgment by @taibenvenuti in #16026
• feat(coding-agent): add focused read-only session seance by @anatoli-tsinovoy in #15036
• chore(coding-agent): remove stale rs-parking-lot TTSR rule by @H4vC in #16034

New Contributors

• @zcyoung2000 made their first contribution in #15982
• @ca-io-systems made their first contribution in #16010
• @matthewrball made their first contribution in #15622
• @adi-IL made their first contribution in #15770
• @nhthung made their first contribution in #15897

Full Changelog: v18.11.2...v18.11.3

fix(utils): ptree json/bytes/arrayBuffer surface a deadline kill that lands before the root exit is reported

chore: bump version to 18.11.1

• Handful of bug fixes to keep your app running smoothly. More exciting changes on the horizon!

• The unread filter is now also supported in message folders and the search interface, so you can easily see what you've been missing.
• Improved upload reliability under poor network conditions. Thanks, @3mmmbulus!
• The "(N)" shortcut correctly points to the thumbs down emoji. Thumbs up to @lnicola for the bugfix.

@oh-my-pi/pi-agent-core

Added

• AgentTool.formatApprovalDetails receives ApprovalDetailsOptions; compact: true asks for untruncated bodies so a compact approval prompt can count their lines (#15550 by @H4vC)

Changed

• Before-model-call hooks now receive the loop context as a second argument, and buildProviderContext receives the summarizer model (#15436 by @will-bogusz)

Fixed

• Fixed a Claude compaction or branch summarizer receiving assistant reasoning from a snapcompact archive rendered under another model, which Claude refuses (reasoning_extraction) (#15436 by @will-bogusz)

@oh-my-pi/pi-ai

Fixed

• Fixed Codex cybersecurity policy errors incorrectly retrying without Daybreak and disabling it for subsequent requests, while preserving retries without Daybreak when access is rejected (#15472 by @taibenvenuti)

Removed

• Removed the toolNamespacesInfo stream option; Codex requests no longer send tool_namespaces_info turn metadata, and code_mode_tool_names/tool_namespaces_info are no longer reserved client metadata keys.

@oh-my-pi/pi-catalog

Added

• Added Muse Code's subscription-only Muse Wonder Full and Wonder contributor tiers with the max effort, recording API-equivalent cost instead of $0: Wonder Full at Muse Wonder's $4 input / $0.20 cached / $20 output per 1M tokens, contributor tiers at the measured $1.60 / $0.08 / $8 (#15522 by @eggpeat)
• Added the classifier-cot-extraction rule axis, set for Claude, marking models whose classifier refuses earlier reasoning quoted back into their input (#15436 by @will-bogusz)
• Added Gemini 4 Argon pricing on Cursor ($2 input / $0.10 cached / $10 output per 1M tokens) and Google Antigravity, which now uses Google's first-party rate instead of showing $0 (#15620 by @eggpeat)
• Added scheduled list-price changes to cost-patch, as cost-fallback already allowed: a dated effective-rates card sets the price from its date, and each request is priced at the card in force when it was made, even on models loaded before the change, on rebuilt models, and on Cursor lanes priced from a sibling's card. A malformed dated card now fails the model build instead of silently keeping the old price. getEffectiveTokenCost returns that card for price displays, and hasRecurringTariff tells these dated-only schedules apart from peak/off-peak tariffs, which alone show a status-line arrow (#15620 by @eggpeat)

Changed

• Devin models with a long-context price tier (GPT-5.4 through 5.6 standard lanes, GPT-6 through 6.1, Gemini Pro, and Grok 4.5 through 4.7) now default to a 272K or 200K context window, where that pricing starts; run /extended-context on to use the full window at long-context rates (#14891 by @eggpeat).
• Devin SWE-2, SWE-1.7, and GLM-5.2 fallback pricing no longer charges cache writes at the input rate, since Devin publishes no cache-write rate for them (#14891 by @eggpeat).
• Google Antigravity now lists Gemini 4 Argon once, with selectable low, medium, and high thinking levels, instead of a separate entry per thinking tier (#15620 by @eggpeat)
• Gemini 4 Argon on Google, Vertex, Google Antigravity, and Cursor moves to Google's $4 input / $0.20 cached / $20 output list price on 2026-12-01 (midnight US Pacific), including requests on models loaded before then, without a catalog update (#15620 by @eggpeat)
• Devin SWE-2's promotional fallback price now ends on 2027-01-01 for requests on models loaded before then too (#15620 by @eggpeat)

Fixed

• Fixed Devin Claude and GPT-5.6 through GPT-6 models pricing prompt-cache writes at $0; they now use Devin's published rate of 1.25x input, and Adaptive uses its input rate (#14891 by @eggpeat).
• Fixed Devin GPT-5.4 through GPT-6.1, Gemini Pro, and Grok 4.5 through 4.7 models missing the long-context price tiers Devin publishes above 272K and 200K prompt tokens (#14891 by @eggpeat).
• Fixed Devin Fusion pairings ignoring their lead model's rules, including its cache-write rate and long-context tier (#14891 by @eggpeat).
• Fixed Kilo and NanoGPT models showing stale or missing prices (for example Gemini 4 Argon at $4/$20 instead of $2/$10, and many models at $0); prices now come from each gateway's live model list (#15623 by @eggpeat)
• Fixed NanoGPT models showing their raw id as the name and no context window (disabling auto-compaction) when the bundled catalog lacked them; names, context windows and output limits now come from NanoGPT's live model list (#15623 by @eggpeat)

Removed

• Removed the Codex toolMode model field (code_mode_only); Codex discovery no longer maps tool_mode

@oh-my-pi/pi-coding-agent

Added

• Extensions can observe and answer the interactive plan review, including refinement feedback and save-and-quit (#14250 by @rlfleming93)
• Added opt-in omp gc --compress (or gc.compress), which stores sessions idle for gc.compressAfterDays (default 7) with filesystem transparent compression (APFS, NTFS); they stay resumable and searchable (#15600 by @wolfiesch)
• Extensions can reopen a dismissed plan review while the session is idle (ctx.openPlanReview()) and pick the execution tier on ctx.resolvePlanReview (input.role); plan_review_requested now reports the slider's tiers (#15552 by @Shadorain)

Changed

• Tool approval prompts now replace the composer like ask, show one row per detail, and approve with Ctrl+Enter (or Ctrl+Q) instead of Enter (#15548 by @H4vC)

Fixed

• Fixed late completion probes rewinding resumed conversations and stale history scans lowering parked subagent costs (#15594 by @anatoli-tsinovoy).
• Fixed read.renderMarkdown having no effect on plain-file reads: inline read previews now render Markdown files as formatted Markdown instead of numbered source (#15007).
• Fixed Claude refusing every turn (reasoning_extraction) in a session snapcompacted under Codex, Grok or another reasoning model, after a switch or resume; Claude turns, /btw, /handoff and compaction now read a reasoning-free copy of the archive (#15436 by @will-bogusz)
• Fixed the project-shared browser (headless or headed) reopening every page its previous run left open whenever it relaunched (after a crash, an out-of-memory kill, a normal stop, or a restart from omp ps); no session owned those pages, so they were never closed and piled up across restarts. Detaching it through proc://<name>/mode, which relaunched it the same way, is now refused (#15561 by @eggpeat)
• Fixed omp models --json reporting a scheduled model's superseded price in cost; it reports the price in force, such as DeepSeek V4 Pro's $0.30 / $1.20 card since 2026-09-14 (#15620 by @eggpeat)

Removed

• Removed Codex Code Mode and its providers.openai-codex.codeMode / providers.openai-codex.codeModeDirectTools settings; Codex models always use the full direct tool surface.

@oh-my-pi/pi-natives

Fixed

• Fixed pwsh code blocks rendering without PowerShell syntax colors (#15008).

@oh-my-pi/snapcompact

Added

• Added viewWithoutThinking(), textWithoutThinking(), readerIncludesThinking() and an optional Archive.withoutThinking variant, so an archive rendered with reasoning can be read by a model that must not see it; without a stored variant the view keeps only reasoning-free text and no frames (#15436 by @will-bogusz)

Fixed

• Fixed re-rendering an archive without reasoning keeping every paragraph after the first of a multi-paragraph ¶think: section (#15436 by @will-bogusz)

@oh-my-pi/omp-stats

Fixed

• Usage recorded at $0 for a model whose catalog price changes on a date (Gemini 4 Argon, Devin SWE-2) is now priced at the rate in force on the request's date, instead of staying $0 like peak/off-peak tariff usage (#15620 by @eggpeat)

@oh-my-pi/pi-tui

Added

• Added ApprovalDialogComponent and the app.approval.approve keybinding (default Ctrl+Enter, Ctrl+Q) (#15548 by @H4vC)
• Plan review overlay can take a remote answer: it shows the remotely chosen execution tier and locks further input like a terminal approval (#15552 by @Shadorain)

Fixed

• The model browser shows the price a model is billed at now, not the one current when its row was loaded: DeepSeek V4 Pro shows its $0.30 / $1.20 card in effect since 2026-09-14 instead of $1.32 / $3.96, and Gemini 4 Argon switches to $4 / $20 on 2026-12-01 (#15620 by @eggpeat)
• Clicking Copy answer in the /btw history (and Copy raw in the raw SSE viewer) on native terminals copies the answer instead of the button's label (#15547 by @H4vC)
• Fixed image previews inside tmux showing as SIXEL IMAGE (WxH) placeholder text when the outer terminal lacks SIXEL; SIXEL is now enabled from tmux's DA1 reply only when tmux's terminal description for the attached client has Sxl (#15513)

Removed

• Removed tools/eval-format/code-mode-declarations (generateCodeModeDeclarations), which only served Codex Code Mode.

What's Changed

• fix(tui): rendered markdown previews in grouped read cards by @roboomp in #15009
• fix(natives): highlighted pwsh code fences by @roboomp in #15010
• fix(tui): ignored tmux's own DA1 sixel attribute without client support by @roboomp in #15517
• fix(ai): preserve Codex Daybreak access on cyber policy errors by @taibenvenuti in #15472
• feat(extensions): let extensions answer the interactive plan review by @rlfleming93 in #14250
• fix(tui): route btw copy-button clicks to omp instead of the terminal-local copy by @H4vC in #15547
• fix(snapcompact,coding-agent,agent): stop Claude refusing a session snapcompacted under another model by @will-bogusz in #15436
• feat(tui): dock tool approvals in the composer, approve with Ctrl+Enter by @H4vC in #15548
• fix(approval): honor approve timeouts and count untruncated lines by @H4vC in #15550
• fix(coding-agent): preserve late probe context and parked cost snapshots by @anatoli-tsinovoy in #15594
• feat(catalog): priced Muse Code's subscription-only Muse Wonder tiers by @eggpeat in #15522
• fix(catalog): price Devin cache writes and long-context tiers by @eggpeat in #14891
• fix(browser): discard shared browser session-restore state before relaunch by @eggpeat in #15561
• feat(extensions): let extensions reopen the plan review and pick the execution tier by @Shadorain in #15552
• feat(coding-agent): compress idle sessions in place with omp gc --compress by @wolfiesch in #15600
• fix(gc): address post-merge Codex findings on omp gc --compress by @H4vC in #15616
• feat(catalog): collapse Antigravity Gemini 4 Argon thinking tiers and add pricing by @eggpeat in #15620
• fix(catalog): price Kilo and NanoGPT models from their live model lists by @eggpeat in #15623

Full Changelog: v18.10.3...v18.10.4

This is the v1.75.2 release of rclone.

Full details of the changes can be found in the changelog.

chore: bump version to 18.10.3

@oh-my-pi/pi-agent-core

Added

• Added support for warm-cache-aware conversation pruning, keeping pruned history within the model’s prompt-cache lookback window while preserving Anthropic prompt-cache efficiency.
• Added AgentLoopConfig.hasQueuedAsides (also available on Agent) to allow interruptible waits to detect queued asides without consuming them or signaling other tools.

@oh-my-pi/pi-ai

Fixed

• Fixed Google Gemini and Cloud Code Assist (Antigravity) requests failing when tool schemas contain unsupported JSON Schema keywords or fields that allow multiple types.
• Fixed auth broker account selection and usage-limit enforcement to consistently use the selected account’s quota when multiple accounts are present.
• Fixed Anthropic-family model streaming so encoded marker tokens are decoded correctly in text, tool-call updates, partial messages, and completed tool calls.

@oh-my-pi/pi-catalog

Added

• Added prompt-cache lookback support for Claude models across all hosts, including the public prompt-cache-lookback catalog axis and resolvePromptCacheLookback API.

Fixed

• Fixed model discovery when providers publish models before they are recognized by the catalog; unsupported models are now skipped with a warning so other available models remain discoverable.

@oh-my-pi/pi-coding-agent

Added

• Added per-session Git worktree support with worktree.onStart and worktree.onExit settings to create an isolated worktree for each session and clean it up when the session ends.
• Expanded xAI web search with X post search, including X-only and author-specific queries, author exclusions, date and recency filters, and automatic xAI routing when credentials are available.
• Added xAI-powered reading of X posts, threads and replies, profiles, searches, and hashtags when logged in, replacing the unavailable Nitter mirrors.

Changed

• Web search now prefers an authenticated xai-oauth login over an xai API key when both are available, unless modelProviderOrder specifies a different order.

Fixed

• Fixed judge-gated features continuing to use a stale model chain after switching judge roles.
• Improved Anthropic prompt-cache reuse when pruning tool results from long conversations.
• Fixed resumed Claude sessions losing earlier thinking context and prompt-cache reuse when extensions or MCP tools were registered before the first message.
• Fixed subagent advisors configured with @advisor using the built-in slow model instead of the configured advisor role.
• Fixed the /switch command and alternate model picker crashing when stored model speed statistics contained an unnamed model.
• Fixed lsp and generate_image attempting to read FIFO, terminal, or unbounded device paths, which could hang or exhaust memory.
• Fixed aside messages from extensions being blocked behind a running wait operation.
• Fixed extensions importing @oh-my-pi/pi-tui/native/* failing to load in compiled omp binaries.
• Fixed raw token markers appearing instead of Nerd Font icons in Anthropic idle recaps, /btw and /omfg replies, and streaming previews.
• Fixed sessions moved with /wt disappearing from resume lists; sessions in Git worktrees now remain discoverable and can be resumed or relocated if their worktree was removed.
• Fixed live config reload ignoring edits made during startup or right after a config symlink was retargeted, until the next unrelated edit.

@oh-my-pi/pi-tui

Changed

• Improved rendering performance for streaming long Markdown lists while preserving nested items, numbering, and reference links.

Fixed

• Added package exports for the native Tern/TSP modules, allowing extensions in compiled omp binaries to import them.
• Fixed the Tern /model picker's Roles tab so typing and Backspace consistently edit the search field without triggering role commands.
• Fixed the session picker so sessions retain and display their directory when switching between the current folder and all-project views.

What's Changed

• fix(agent): stop tool-result pruning from re-writing the whole Anthropic cache behind many small turns by @will-bogusz in #14751
• fix(coding-agent): keep resumed Claude sessions' thinking and cache when tools register before the first message by @will-bogusz in #14754
• fix(ai): stop broker clients judging an account by a sibling's usage when its own fetch fails by @will-bogusz in #14904
• fix(coding-agent): resolve @advisor subagent advisor against owner roles by @H4vC in #14972
• fix(judgment): invalidate the cached judge role chain when settings change by @alnaggar-dev in #14861
• feat(coding-agent): add worktree.onStart and worktree.onExit settings by @gitpushoriginmaster in #14908
• fix(coding-agent): skipped null model_perf keys that crashed the model picker by @roboomp in #14787
• fix(lsp,image): refuse FIFOs and devices instead of hanging on them by @DrFaustus-vic in #14730
• fix(agent): end an interruptible wait when an aside is queued by @mgpai22 in #14731
• fix(ai): strip uniqueItems and unsupported schema keywords for Google and CCA by @jwaldrip in #14766
• fix(tui): register pi-tui native/* subpaths for compiled-binary extensions by @clasalle-lila in #14835
• Make long streamed lists incremental by @iliaal in #13701

New Contributors

• @mgpai22 made their first contribution in #14731
• @clasalle-lila made their first contribution in #14835

Full Changelog: v18.8.5...v18.8.6

@oh-my-pi/pi-ai

Changed

• Updated state field rendering to trim trailing whitespace and normalize empty collection formatting for consistent prompt output

@oh-my-pi/pi-coding-agent

Added

• Added capability-driven extension terminal launches for tmux, Zellij, Herdr, and CMUX, with consolidated multiplexer detection, provider/shell capability feedback, and required POSIX-shell confirmation for shell-input launches; CMUX shell input preserves non-ASCII arguments and pane working directories (#13620 by @anatoli-tsinovoy).
• Added /fork pane|window|tab to open a fork of the session in a new multiplexer pane or window while this session keeps running; bare /fork still forks in place (#13620 by @anatoli-tsinovoy).
• Added Orca CLI-based launches for /fork pane|window|tab and ctx.ui.openTerminal(), with POSIX-shell confirmation; when Orca can only start a tab as a background terminal, the launch reports a warning instead of a visible tab (#13620 by @anatoli-tsinovoy).

Changed

• CLI --fork now pairs tool calls the source session left unresolved with an unknown-outcome result, and /tan clones report such calls as unknown-outcome instead of aborted; forking a source whose process already exited keeps the process-exit recovery and pending-tool warning (#13620 by @anatoli-tsinovoy).
• Table charts (tui.autoGraph) now cover before/after tables whose rows are different metrics (time, memory, counts): each row's change is drawn as a factor of its "before" value (48× less, +27%), and rows written in prose are skipped and named under the chart. A single column of scores like 12/12 is drawn as bars filling toward 100%
• In terminals that speak the Tern Surface Protocol (Tern), the composer's bottom bar shows the git branch and its status beside the model chip when the status line has the git segment; it outlasts the other facts as the bar narrows, and clicking it opens /git (#15220 by @H4vC)
• Table charts plot scores like 154/160 as the share of their total instead of the first number, and tables comparing two or three columns across four or more metrics now get a chart: a grid of one small panel per metric

Fixed

• Fixed table charts failing on a table cell such as 3 constructor or 2 valueOf calls

@oh-my-pi/pi-tui

Breaking Changes

• Removed the isInsideTmux(), isInsideZellij(), and isInsideHerdr() exports; use hasTerminalMultiplexerSession("tmux" | "zellij" | "herdr", env) instead (#13620 by @anatoli-tsinovoy)

Added

• classifyTerminalMultiplexer() reports "orca" inside Orca terminals while isInsideTerminalMultiplexer() stays false there, so Orca keeps the direct-terminal render path; TERMINAL_MULTIPLEXER_ENV_KEYS lists every environment variable multiplexer detection reads (#13620 by @anatoli-tsinovoy)
• Added terminalMultiplexerSessions(), terminalMultiplexerForTerm(), classifyTerminalMultiplexerModule(), and routeTerminalMultiplexerNotification(), driven by one multiplexer registry that now owns notification routing and per-multiplexer capability overrides (#13620 by @anatoli-tsinovoy)
• Added change and progress table-chart kinds with ChartSpec.baseline and TableColumn.scores: a before/after table whose rows have their own units charts each metric as a factor of the baseline column (rows without two numbers are named in the caption), and analyzeTable reads whole-number scores (12/12, 154/160) as the percent of their total, keeping a / b pairs and lists as written

Changed

• StatusLineComponent.describeComposerFacts() includes the configured git segment among the composer's facts (branch and status, the status.git click action, pinned so it outlasts the other facts) instead of leaving the branch to Tern's pane header (#15220 by @H4vC)
• Small-multiple table charts with more than three panels and at most six categories draw as bands of per-metric panels with a color legend, and worthCharting counts their panels like categories
• Table charts take the look of Apple's charts and Tern: a UI sans, hairline gridlines, rounded bars and cells, smooth lines over a soft area fill, dot legends, left-aligned category labels that never run off the edge, and axes labeled in one unit (0, 5k, 10k)
• Line charts whose series differ 8× or more in size stack panels on their own axes instead of flattening the smaller lines, and their end labels no longer overlap
• SVG figure series colors --c1…--c6 are an even-weight palette led by the theme accent's hue instead of syntax colors

Fixed

• Fixed parseCell throwing on table cells such as 3 constructor or 2 valueOf calls, and reading a constructor cell as a missing value

@oh-my-pi/pi-utils

Added

• Added hueDistance, the angular distance between two OKLCH hues

What's Changed

• feat(tui): show the git branch in Tern's composer bar by @H4vC in #15220
• feat(coding-agent): add multiplexer terminal launch and /fork placements by @anatoli-tsinovoy in #13620

Full Changelog: v18.8.8...v18.8.9

@oh-my-pi/pi-agent-core

Fixed

• Fixed stale queue updates when queued steering is adopted, withdrawn, or added to the transcript, ensuring queue listeners consistently receive the latest state.

@oh-my-pi/pi-ai

Breaking Changes

• Removed the retainTextSignature option from consumeGoogleStream and streamGoogleGenAI; Google routes now consistently preserve text reply signatures.
• Custom SessionsApi implementations must implement permits(provider, sessionId, credentialId).

Added

• Exported matchesReplacementCredential and isSameOAuthAccount to help identify credential replacement and account ownership.
• Added AuthStorage.sessions.permits(provider, sessionId, credentialId) for checking whether a stored account may serve a session restricted to an account pool.
• Added judgeQuestions() for loading judge questions from JSON with inferred choice labels and answer types, plus renderQuestion() for templated instructions.

Changed

• Devin chat turns now use the native Devin CLI sampling settings by default, while continuing to honor explicitly configured temperature, top-p, and stop sequences.
• Added parentSessionId and minimizeEffort stream options. Branched side requests can reuse a conversation's prompt cache, and supported models can run them at their lowest effort without losing cache reuse.
• Improved cross-host continuation for supported models so confirmed prior reasoning is preserved as reasoning context rather than exposed as <think> text in replies.

Fixed

• Fixed Anthropic subscription quota not appearing in /usage when an OAuth token is supplied through ANTHROPIC_API_KEY.
• Fixed custom OpenAI-compatible Responses streams truncating reasoning and incorrectly invoking custom tools with empty input.
• Fixed Codex WebSocket prewarming so optional service tiers and model routing are handled consistently with normal requests.
• Fixed OAuth sign-in result pages breaking or rendering injected markup when provider errors or callback values contain special characters.
• Fixed Anthropic requests failing when tools are added to a conversation or when resumed sessions no longer include earlier tools.
• Fixed Anthropic requests rejecting tall or oversized historical screenshots by resizing or re-encoding images to the host's limits.
• Improved compatibility with Anthropic-compatible endpoints that reject prompt-cache options by retrying without unsupported caching features and reporting the disabled capability.
• LiteLLM proxy logs now group requests by omp conversation instead of displaying a separate session for each request.
• Fixed Gemini-family integrations echoing prior thinking as visible fenced thinking blocks; thinking is now restored as model reasoning across Google, Vertex, Antigravity, Gemini CLI, and Factory Droid routes.
• Fixed Gemini-family integrations losing text reply signatures needed for subsequent requests across Google, Vertex, Antigravity, Gemini CLI, and Factory Droid routes.
• Fixed Cursor integrations losing previously recorded reasoning, including signed and redacted reasoning, when continuing or resuming a conversation.
• Fixed invalid auth.accountPolicies entries referring to unavailable accounts from preventing startup, account selection, or login; such entries are now skipped with a warning.
• Fixed Factory Droid Claude turns with thinking disabled from replaying unsupported earlier thinking blocks, and aligned high-effort Sonnet 5.5 thinking behavior with the native client.
• Fixed side requests for GPT-6 Responses and Codex models from losing prompt-cache context or applying unsupported reasoning-effort configuration changes.

@oh-my-pi/pi-catalog

Fixed

• Fixed GLM-5.3-FlashX on Zhipu Coding Plan so bundled context, image, and reasoning-level capabilities are reported correctly.
• Fixed OpenRouter Decisions endpoint derivation when the chat base URL has a trailing slash.
• Fixed GPT-6.1 Sol Ultrafast usage pricing to apply OpenAI's published premium rates for the OpenAI API and Codex included usage.
• Fixed GPT-6 Sol, GPT-6.1 Sol, and GPT-6 Luna so changing reasoning effort preserves prompt caching.

@oh-my-pi/pi-coding-agent

Added

• Added browser target discovery and control, allowing agents to list the user's available pages and operate an already-open Tern browser block instead of opening a new view.
• Added the ctx.annotations extension API for submitting and collecting /annotate feedback on text and diffs.
• Added configurable Extra Context Files under /settings → Context, allowing custom instruction filenames without editing YAML.
• Added optional composer predictions via composer.predictions, which suggest the user's next message as ghost text after each turn and support Tab or Right to accept the suggestion. Predictions use an additional model request and are included in session usage and /stats.
• Added structured async job metadata exposing native job status and child-agent identity alongside the job ID.
• Enhanced tui.autoGraph: smart with data-aware chart recommendations, including labels, grouping, ordering, shading, reference rows, measure direction, and suitable chart types.
• Added retry.fallbackOn to restrict model fallback to quota errors (usage-limit) or to non-quota errors (except-usage-limit), while retaining any as the default.
• Added omp usage reset commands to list saved Codex and Claude rate-limit resets and redeem a selected reset from the CLI, scripts, or auth-broker clients.
• Added warnings for saved Codex and Claude resets that are nearing expiry, including affected accounts and redemption targets; interactive sessions also show a one-time conversation warning.
• On macOS, the computer tool now keeps the display awake while operating and reports when the screen is locked or asleep.
• Tern browser open results now indicate when a page is not currently visible, helping agents direct users to hidden picture-in-picture or omp-tab views.

Changed

• Improved computer.window() failure messages by listing open windows grouped by application, with the requested application shown first.
• Standalone binary updates and installers now use Stencil's build service with SHA-256 verification; recent updates use substantially smaller verified patches, and --binary --ref accepts release tags.
• After an omp upgrade, an unused older browser relay started by omp is automatically replaced on the next browser call so relay fixes take effect without manual shutdown.
• Saved Codex and Claude resets in non-interactive sessions are now automatically redeemed when they are about to expire, unless autoRedeem: no is configured.
• Background Claude reset salvage now checks only accounts with eligible usage, reducing unnecessary usage-limit traffic.
• Reasoning provenance is preserved when /btw answers are promoted or turns are moved, preventing provider summaries from being sent as model-generated reasoning.

Fixed

• Fixed unconfigured judge roles incorrectly falling back to a Google Vertex Claude model instead of the configured tiny, smol, or default models.
• Fixed omp --resume -p continuing stale todos instead of printing the answer and exiting.
• Fixed /btw, IRC, and composer-prediction requests losing the conversation prompt cache on Codex and after thinking-level changes on GPT-6 models.
• Fixed Tern browser operations on about:blank and no-op navigations hanging until timeout.
• Fixed SDK and RPC sessions using stale MCP tool lists when servers changed during extension loading.
• Fixed installing plugins from non-GitHub Git URLs and prevented inline credentials from being persisted in plugin metadata or lockfiles.
• Improved recovery from repeated OpenAI Responses request timeouts during productive long-running sessions.
• Fixed JavaScript eval syntax errors lacking source location and a useful code frame.
• Fixed Collab sessions failing to reconnect after network interruptions or device sleep.
• Fixed ACP and browser diagnostics and SSH listings using default paths instead of configured paths.
• Fixed advisors repeatedly returning to models that refused reviewed content; they now remain on the fallback until the conversation changes state.
• Plugin registry discovery warnings are now reported instead of silently ignored.
• Fixed OpenRouter Decisions judge requests through custom provider base URLs returning 404 errors.
• Fixed Codex configuration files being rejected and prevented supported settings from being ignored.
• Fixed secrets appearing in advisor previews when a preview was truncated.
• Restored public compatibility exports required by tools, legacy Pi extensions, and plugins.
• Fixed slow completions ignoring explicitly configured thinking levels, including :max and :off.
• Fixed session writes failing on Windows FSLogix profile disks.
• Limited persisted eval status history so long-running eval cells do not excessively enlarge session files or slow resume.
• Fixed Codex session prewarming from using a different model or service tier than the resolved session.
• Fixed subagent completion-probe usage disappearing after parking or restarting.
• Fixed Python eval processes hanging while waiting on the kernel control channel.
• Corrected the custom-tool quickstart to use the supported discovery flow and shipped example.
• Fixed browser screenshots providing incorrect coordinate-scaling guidance on high-device-scale displays.
• Fixed browser calls hanging when a tab renderer crashed; they now fail promptly and reload or close the affected tab as appropriate.
• Fixed sessions becoming permanently busy when retry-related session writes failed.
• Fixed collapsed todo lists wasting a row on the hidden-item indicator.
• Fixed concurrent SDK sessions interfering with one another's async jobs and subagent follow-up results.
• Fixed duplicate accessibility-tree output from computer-use eval cells.
• Fixed chained element actions such as win.ref("e5").click() throwing errors; element interaction options are now supported and documented.
• Fixed JavaScript and Python read("artifact://N") calls returning a capped preview instead of the artifact's selected text.
• Improved guidance for retrieving complete lines when read, eval, or bash output is truncated by the column limit.
• Fixed resumed, switched, and forked sessions losing the prompt cache when Mnemopi or Hindsight auto-recall was enabled.
• Fixed the first prompt losing provider prompt-cache coverage while MCP servers were still starting.
• Fixed coordinate clicks being dropped after password-form submission in omp-launched Chromium.
• Fixed classifier refusals ending fallback chains prematurely when the retry budget was exhausted.
• Fixed reading MCP-advertised skill:// resources and other MCP resources, including discovery order, loading state, and clean shutdown of stalled servers.
• Fixed smart unexpected-stop detection missing slow judge results, allowing premature stops to recover correctly.
• The cfg:// settings approval prompt now honors ask.timeout rather than always expiring after ten seconds.
• Fixed custom LiteLLM providers not receiving the built-in provider behavior and model/session handling.
• Fixed resumed Cursor sessions losing earlier reasoning after transcript truncation.
• Fixed computer.window() failing to find windows by ID or application when many windows were open.
• Fixed grep hiding matches that appeared beyond the first 512 bytes of a long line.
• Fixed snapcompaction leaving too little context room after compaction.
• Fixed usage-limited account pools redeeming saved resets for accounts outside the configured pool.

@oh-my-pi/pi-mnemopi

Added

• Exported clipRecallContent for applications that need to format content consistently with Mnemopi recall previews.

Fixed

• Fixed memory-save performance degradation and excessive memory-database growth when date-related terms such as “today” appeared in otherwise unrelated memories.

@oh-my-pi/pi-natives

Added

• Added applyBinaryPatch(oldPath, patchPath, outPath) for applying HDiffPatch single-stream delta patches, including zstd-compressed patches, to files.
• macOS desktop sessions now keep the display awake while in use and expose screen-lock and display-sleep state through capabilities, screenState, and screen captures.

Changed

• Improved Linux embedded-shell startup performance for external commands.
• Improved macOS computer-use performance, including faster screenshots and accessibility queries, with better handling of large numbers of off-screen windows.
• Updated grep() and search() to truncate matching lines around the first match when they exceed maxColumns, mark truncated sides with ..., and report the match's character column.

Fixed

• Fixed macOS accessibility and window-management operations requiring Screen Recording permission; only screenshots and display listing now require that permission, and window listing includes windows beyond the frontmost 48. Window titles from other applications remain unavailable without Screen Recording permission.
• Fixed macOS menu inspection and selection for menus containing items whose titles cannot be read; those items are now skipped safely.
• Fixed syntax highlighting and language detection for several languages, including TOML, PowerShell, SCSS, Less, Vim script, GraphQL, Protobuf, Terraform/HCL, Dockerfile, CMake, INI, gitignore, Kotlin, Swift, Elixir, Sass, Python f-strings, Julia interpolations, and Elixir interpolations.

@oh-my-pi/omp-stats

Fixed

• Fixed the stats dashboard favicon so dashboard tabs and bookmarks display the OMP icon correctly.

@oh-my-pi/pi-tui

Added

• Added opt-in JSON editing for free-form array settings while keeping credential values masked; settings editors now surface submission and validation errors.
• Added ghost-text predictions to the editor via the new Editor.prediction callback. Press Tab or Right at the end of a line to accept the suggested text without submitting.
• Expanded table-chart support with stacked, waterfall, timeline, dots, range, slope, butterfly, bullet, ladder, histogram, and stat charts, including error whiskers, share bars, status matrices, and richer before/after visualizations.
• Added richer table-chart planning and presentation controls, including titles, ordering, grouping, shading, normalization, reference lines, polarity, rivals, focus rows, and model-driven selection for smart mode. Charts now identify key findings, highlight best values and changes, and adapt scales and labels for clearer comparisons.
• Added the optional assistantMessageText theme token for coloring assistant reply prose while preserving the terminal default when unset or empty.
• Added optional status-line support for showing saved usage resets that expire soon and warning once per conversation when a reset expires within 24 hours.

Changed

• Improved table-chart planning to prefer waterfall charts over share bars for complex data sets and enforce segment limits for share-chart legibility
• Reduced the time required to rebuild long sessions on resume, particularly sessions with repeated wait polls or todo updates.
• Output summaries now identify the first and last lines omitted by column limits, and truncation notices point to the :raw selector for retrieving complete lines.

Fixed

• Fixed session model selection and setup displaying role chips for roles that resolve to a non-chat runner rather than the model used by the session.
• Improved table-chart parsing and rendering across repeated labels, grouped and paired values, percentages, units, currency, durations, model sizes, links, identifiers, and sparse or side-by-side tables. Charts now avoid duplicate or misleading plots and preserve meaningful comparisons.
• Fixed table-chart scaling for outliers, stacked groups, zeros, logarithmic shading, and values spanning multiple orders of magnitude.
• Fixed /tree stalling or using excessive memory when opened on long sessions with many branch points.
• Fixed extension status messages losing SGR colors and text styles in the status line.
• Fixed the eval status list omitting status events discarded from long-running cells.
• Fixed loop-blocked diagnostics to attribute stalls to the correct work phase or terminal writes instead of reporting misleading unknown causes.
• Fixed Agent Hub and status-line spending totals losing cumulative subagent costs after compaction, parking, or follow-up turns.
• Fixed dead-key input on older Windows Terminal versions so quotes are entered correctly with Space, Enter, and Tab.
• Fixed SIXEL graphics detection on terminals, including native Windows Terminal, so SVG figures and inline images work without forcing a graphics protocol.
• Fixed overflow transcript rendering so user messages no longer appear as blank padding bars or leave stray prompt markers across terminal rows.

@oh-my-pi/pi-utils

Breaking Changes

• Renamed takeRecentLoopPhase() to takeLoopPhaseAttribution(). The new API returns a LoopPhaseAttribution object ({ label, ms }) and reports a label only when it accounts for more time than unlabeled work within an armed measurement window.

Added

• Added withLoopPhase(label, fn) for attributing synchronous work to a named loop phase, with automatic cleanup even when the callback throws.

Changed

• Improved streaming JSON parsing performance for long tool-argument payloads.

Fixed

• Fixed archive extraction on Windows systems without symlink privileges by allowing symlink entries to be extracted using supported fallbacks, while skipping unresolvable dangling links instead of failing the entire archive.

What's Changed

• feat(settings): expose extra context filenames in the TUI by @Shadorain in #15252
• feat(coding-agent): expose /annotate to extensions as ctx.annotations by @Shadorain in #15260
• perf(tui): bound linear session tree projection by @azain47 in #12527
• perf(tui): drop redundant full passes from transcript block removal by @sjawhar in #13767
• perf(utils): bulk-skip ordinary chars in streaming JSON string scan by @abilliontokens in #14297
• feat(natives): speed up external command launches in the embedded shell by @farnoy in #14858
• fix(sdk): refresh changed MCP tools before returning the session by @aktanazat in #11315
• fix(ai): keep closed summary parts and completed custom input on lossy Responses streams by @moodiness in #11863
• fix(tui): stop /tree from exhausting memory on long sessions by @ParadaCarleton in #12622
• fix: re-arm Responses request-body timeout recovery on turn output by @hellofrommorgan in #12654
• fix(coding-agent): report cell line and column with a code frame for JS eval syntax errors by @tahakotil in #14376
• fix(collab): reconnect a relay socket that went silent by @andrewleech in #14387
• fix(tui): keep SGR styling in extension hook statuses by @sandboiii in #14500
• fix(coding-agent): show resolved diagnostic and SSH config paths by @Dante-dan in #14558
• fix(coding-agent): keep advisors off a model that refused their context by @mvid in #14743
• fix(coding-agent): log plugin registry discovery warnings by @tahakotil in #14788
• fix(utils): keep archive extraction going on Windows without the symlink privilege by @jchanghong023 in #14820
• fix(coding-agent): keep OpenRouter Decisions on /api/alpha under a provider-wide baseUrl by @jerryfane in #14848
• fix(coding-agent): loaded Codex config.toml as valid settings items by @mottopanikeiku in #14850
• fix(advisor): redact one-line previews before cutting them by @alnaggar-dev in #14863
• fix(coding-agent): export withFileMutationQueue in tools barrel and legacy shim by @twotnguyen in #14892
• fix(coding-agent): stop auth-broker migrate skipping accounts that share a project or workspace by @will-bogusz in #14901
• fix(coding-agent): bridge upstream pi 1.x shim gaps for legacy extensions by @Frenchy2k1 in #14909
• fix: honor explicit effort for slow completions by @xiangnan0811 in #14961
• fix(coding-agent): compare session lock identity handle-to-handle by @astrosloth in #14973
• fix(eval): keep only the newest status events per eval cell by @azain47 in #14992
• fix(catalog): billed GPT-6.1 Sol Ultrafast at 6x on the API and 8x on Codex by @eggpeat in #15000
• fix(mnemopi): stop linking memories by shared time scope alone by @tickernelz in #15013
• fix(loop-watchdog): name a stall's phase only when it outweighs unlabeled time in the late window by @jaredlyon in #15019
• fix(codex): align prewarm routing with the resolved session by @xiangnan0811 in #15022
• test(mcp): wait for delayed incremental tool discovery by @xiangnan0811 in #15023
• fix(tui): label synchronous terminal writes for the loop watchdog by @jaredlyon in #15029
• fix(ai): keep OAuth callback state inert in the result page by @BAKocska in #15037
• test(stats): bound the non-loopback connect probe by @alphastorm in #15050
• fix(coding-agent): give python eval code /dev/null as stdin by @kimprap in #15061
• feat(catalog): enable supports-prompt-cache-key for the mistral provider by @richardotomislav in #15079
• fix(coding-agent): give browser screenshot notes the factor clickAt needs by @will-bogusz in #15106
• fix(tui): type dead-key text carried on Space, Enter and Tab win32-input-mode records by @davide-butera in #15138
• fix(browser): fail fast and reload when a tab's renderer crashes by @will-bogusz in #15142
• fix(stats): serve the omp icon at /favicon.ico by @yuzu-octopus in #15162
• fix(coding-agent): end an automatic retry whose session write fails by @sjawhar in #15177
• fix(tui): show lone hidden todo instead of a '… 1 more todo' row by @ravshansbox in #15189
• fix(tui): detect DA1-advertised SIXEL on native Windows Terminal by @pgkim42 in #15226
• fix(sdk): isolated async jobs for concurrent roots by @roboomp in #15232
• fix(ai): load tools instead of deferring all of them on Anthropic by @will-bogusz in #15233
• fix(coding-agent): print a trailing computer observe() tree once by @will-bogusz in #15270
• fix(coding-agent): chain element calls on computer ref() handles by @will-bogusz in #15274
• fix(coding-agent,tui): return artifact text from Eval read() and name the raw range in cut-line notices by @will-bogusz in #15279
• perf(natives): list only on-screen windows before a macOS screenshot by @will-bogusz in #15291
• fix(plugins): install git specs from non-GitHub hosts via git protocol by @blindcat-10835 in #11810
• docs: fix custom-tool quickstart flag and example by @danzaio in #15088
• feat(coding-agent): add composer next-message predictions by @wolfiesch in #15137
• fix(coding-agent): place composer predictions next to word autocomplete and drop the duplicate usage warning by @H4vC in #15294
• fix(async): expose retained status and agentId by @joebenberry-afk in #10928
• feat(theme): add assistantMessageText token for assistant prose by @oleg494 in #11260
• fix(ai): retry without prompt-cache breakpoints when an endpoint rejects cache_control by @camjac251 in #11812
• feat(models): route OpenCode Zen's Jev models to the System One API by @jpds in #14446
• fix(coding-agent): reuse a transcript's memory recall when it is resumed by @andrebrait in #14656
• fix(coding-agent): wait briefly for MCP startup before the first turn by @andrebrait in #14780
• fix(agent): emit the queue change when live steering is adopted or withdrawn by @jchanghong023 in #14821
• fix(browser): turn off password leak dialogs in owned profiles by @alnaggar-dev in #14862
• fix(coding-agent): let a classifier refusal keep walking the fallback chain by @sjawhar in #14905
• fix(tui): render content line in user message emergency row and omit prompt marks by @twotnguyen in #14910
• fix(coding-agent): read MCP-advertised skill:// resources when no loaded skill matches by @sandboiii in #14977
• fix(coding-agent): stop aborting slow unexpected-stop judge verdicts before the nudge by @YounesRahimi in #14993
• fix(mnemopi): label Mnemopi work that can block the event loop by @jaredlyon in #15001
• fix: cfg:// approval honors ask.timeout instead of hardcoded 10s by @danzaio in #15085
• fix(ai): send x-litellm-session-id to the litellm provider by @occ in #15096
• fix(ai): stop Gemini echoing fenced thinking and keep its text reply signatures by @will-bogusz in #15152
• fix(ai,coding-agent): keep Cursor models' earlier reasoning across turns and resumes by @will-bogusz in #15154
• fix(natives,coding-agent): resolve macOS windows without Screen Recording or the 48-window list cap by @will-bogusz in #15158
• fix(natives): skip untitled macOS menu items instead of failing the menu by @will-bogusz in #15223
• fix(grep): show the match on a line wider than the column budget by @will-bogusz in #15278
• anthropic: clamp image dimensions and payload size to the API limits by @aktanazat in #10633
• docs: document command-backed extension providers by @aminamos in #11798
• feat(computer): list open windows by app when computer.window() misses by @will-bogusz in #13655
• fix(ai): ignore account policies whose account is absent instead of failing by @will-bogusz in #14233
• fix(coding-agent): size snapcompact archives by the room under the compaction trigger by @will-bogusz in #14345
• fix(coding-agent): replace an older browser relay omp started once no session uses it by @will-bogusz in #15108
• feat(ai,catalog): bring Factory Droid up to droid 0.237 (Haiku 5.5, Mistral Large 4, thinking Off, EU routes) by @will-bogusz in #15116
• feat(ai,catalog): carry reasoning natively when the same model moves between hosts by @will-bogusz in #15123
• feat(coding-agent): add retry.fallbackOn to limit fallback chain switches to usage limits by @will-bogusz in #15125
• fix(coding-agent): stop each session's Claude reset sweep from listing every account when nothing is due by @will-bogusz in #15129
• feat(coding-agent): spend a saved reset in its last 5 minutes when no prompt can ask by @will-bogusz in #15131
• feat(coding-agent): list and spend saved rate-limit resets with omp usage reset by @will-bogusz in #15132
• feat(coding-agent,tui): warn before saved rate-limit resets expire by @will-bogusz in #15134
• fix(coding-agent,ai): stop pooled sessions spending saved resets on accounts outside their pool by @will-bogusz in #15135
• feat(computer): keep the macOS display awake while acting and report a locked screen by @will-bogusz in #15188
• perf(natives): read each macOS AX element's attributes in one round trip by @will-bogusz in #15275
• fix(ai): sample Devin turns with the native CLI's settings by @will-bogusz in #10234
• fix(catalog): bundle GLM-5.3-FlashX on Zhipu Coding Plan by @roboomp in #15315
• fix(ai): restored claude quota for env oauth tokens by @roboomp in #15319
• fix(session): stopped print-mode todo reminder continuations by @roboomp in #15321

New Contributors

• @azain47 made their first contribution in #12527
• @andrewleech made their first contribution in #14387
• @mottopanikeiku made their first contribution in #14850
• @twotnguyen made their first contribution in #14892
• @Frenchy2k1 made their first contribution in #14909
• @astrosloth made their first contribution in #14973
• @richardotomislav made their first contribution in #15079
• @davide-butera made their first contribution in #15138
• @yuzu-octopus made their first contribution in #15162
• @pgkim42 made their first contribution in #15226
• @blindcat-10835 made their first contribution in #11810
• @joebenberry-afk made their first contribution in #10928
• @jpds made their first contribution in #14446
• @YounesRahimi made their first contribution in #14993
• @occ made their first contribution in #15096

Full Changelog: v18.8.9...v18.9.0

@oh-my-pi/pi-ai

Added

• Added compat.supportsThinkingBindingControls for Bedrock Converse: setting it to false stops prefix-bound Claude requests from sending thinking.block_binding, the thinking-binding-controls-2026-08-01 beta and the /input_transformations response path, for gateways or regions that reject them (#15316 by @harshaygadekar)

Fixed

• Fixed Bedrock Claude Fable 5.1 requests with thinking off and a forced tool choice sending the forced choice next to adaptive thinking; the choice now falls back to auto (#15316 by @harshaygadekar)

@oh-my-pi/pi-catalog

Added

• Added the supports-thinking-binding-controls axis to Bedrock Converse models (on by default) so a rule or models.yml override can turn off Claude thinking-binding controls on hosts that reject them (#15316 by @harshaygadekar)

@oh-my-pi/pi-coding-agent

Added

• Added supportsThinkingBindingControls to Bedrock compat in models.yml, so a Bedrock gateway or region that rejects Claude thinking-binding controls can turn them off (#15316 by @harshaygadekar)

@oh-my-pi/pi-natives

Fixed

• Fixed executable scripts without a #! line failing with "Exec format error" in the embedded shell (#15271 by @iliaal).

@oh-my-pi/pi-tui

Fixed

• Fixed inline charts and images leaving overlapping copies over text when moved, resized, replaced, or hidden, while preserving images in scrollback.

What's Changed

• fix(bedrock): add supportsThinkingBindingControls catalog opt-out by @harshaygadekar in #15316
• fix(shell): preserve executable text fallback with posix_spawn by @iliaal in #15271

Full Changelog: v18.9.0...v18.9.1

@oh-my-pi/pi-coding-agent

Added

• Added a Copy button that leads the turn footer under an answer in Tern (⧉ · 2m13s · 71K tok · $0.85 this turn, in place of the clock), which copies that answer

Changed

• Running agents and background jobs in Tern now share one compact counter over the composer (an icon and a count each, the words on hover) instead of two "N running" pills; each count still opens its own sheet
• In Tern, /session pin and /usage reset open the same picker sheet as the other small selectors (the active account checked, a confirm strip before a reset is spent, unusable accounts dimmed with the reason); the thinking level picker shows each level's depth as a meter, the plugin and queue mode pickers use badges (version, installed, scope, recommended) and plain-language names instead of bracketed text, and the theme picker no longer repeats "(current)" beside its check
• In Tern, the text editor an extension opens (and the ask tool's custom answer and note) is now a sheet in the composer's place: the title over its details, the text written straight on the sheet, and Open in editor, Cancel and Submit buttons whose keys show in their tooltips instead of a keycap hint row

Fixed

• Fixed grep on a single file showing in Tern as separate boxed snippets with no file row or syntax colors; it now looks the same as a grep over a directory

@oh-my-pi/pi-tui

Added

• AssistantMessageComponent's native turn footer leads with a Copy icon (omp.turn.copy) and a dot instead of the clock icon; it copies the answer's text and shows when the host handles transcript actions

Changed

• UserMessageComponent's native hover toolbar (omp.user.tools) leads with Copy and Rewind icon buttons (copy, rewind) instead of text labels, then a dot and the time, like the turn usage footer
• ContextUsageView's native body (on terminals with meter) leads with the tokens used and the room left before auto-compaction, then one stacked bar ticked at the threshold, the breakdown as rows (omp.context.cat, .cat.free, .cat.buffer: swatch, name, tokens, share; the exact count in the row's title) and the snapcompact estimate as labelled rows (omp.context.snap); the blocks meter and legend kv are gone, and contextUsageHead no longer repeats the window size
• AskDialogComponent's native root is omp.editor.ask (collapsed: omp.editor.ask.hidden, the countdown, the question as omp.ask.summary, Skip and Show): a chosen answer is the accent-toned row (a check also carries the check icon) instead of the highlighted one; multi-select Other… is omp.ask.other.check; the question tabs check answered questions and say their keys in the strip's title; the countdown moves from the head to the action bar beside Hide; the preview is omp.ask.preview; the Review tab leads with omp.ask.notice and lists answers (omp.ask.answers) by question name with inline code mono and no (Recommended) suffix; option descriptions run inline code mono, notes ride the row's detail as em; Submit/Next's tooltip names only Enter (and Space on a multi-select)
• MCPAddWizard's native sheet asks one question per step: a phase strip (omp.mcpAdd.progress of omp.mcpAdd.phase, toned done/current/upcoming and neutral when no auth was needed), the question and its lead (omp.mcpAdd.title, omp.mcpAdd.tag for optional fields, omp.mcpAdd.lead), then a mono field with a placeholder and its rule or refusal (omp.mcpAdd.field, tone: "error"; omp.mcpAdd.note), choice rows with icons and mono tags (omp.mcpAdd.choices), status lines (omp.mcpAdd.status, omp.mcpAdd.checks, omp.mcpAdd.error) or the review rows (omp.mcpAdd.summary). Cancel, Back and Continue / Save server buttons run Ctrl+C, Esc and Enter instead of a key-hint strip. The connection test shows its own busy step, the OAuth client secret field is masked, and the review saves on Enter (no Yes/No choice)
• ReportPanel's native body carries the role omp.report.body
• HookInputComponent describes a dock sheet (omp.overlay.hook-input col) like HookEditorComponent's: the title's first line (omp.hook-input.title, the countdown as omp.hook-input.timer) over its further lines (omp.hook-input.detail), the field (omp.hook-input.field, tone: "error" while a submit was refused) with its placeholder, and Cancel / Submit buttons that run Esc / Enter; the key legend under the field is terminal-only
• JobsSheet's native body is a master–detail split (omp.jobs.split: omp.jobs.master | omp.jobs.detail): the job list grouped Running / Recent (omp.jobs.group labels), each row a type icon tinted by status with its duration, beside the selected job's status pill, live elapsed and Cancel job (omp.jobs.status), its task title or command (omp.jobs.title / omp.jobs.command), facts (omp.jobs.facts: agent, directory, pids, exit code, artifact) and output (omp.jobs.out, omp.jobs.nooutput); the footer counts running and recent jobs (omp.jobs.summary), and no jobs shows an empty state (omp.jobs.empty). Task jobs no longer draw an agent node here
• BtwHistoryPanel's native sheet is centered and reads like a mail reader: the questions as two-line rows (omp.btw.history, list omp.btw.list / omp.btw.list.idle while the answer has the keys) beside the selected thread (omp.btw.reader › omp.btw.thread › omp.btw.turn: omp.btw.question / omp.btw.followup, omp.btw.meta, omp.btw.answer, omp.btw.error), the follow-up field under the last answer (omp.btw.composer), and footer buttons Stop answer, Copy answer, Close and Follow up (Cancel and Send while composing) in place of the focus labels and key-hint strip; an empty history is an md sheet (omp.btw.empty)

Fixed

• CountdownTimer's native elapsed no longer sends stopped: 0, which froze every native countdown (extension input, selector and editor prompts) at zero from the start
• The native backend's focus now reaches a field inside an overlay/picker sheet hoisted into the layer from a dock component (the MCP add wizard, login), so that field shows the live caret and focus ring
• MCPAddWizard keeps a refused name or URL in its field, clears a stale refusal on Back, ignores a connection test that settles after the user stepped back, and Edit OAuth settings after a failed sign-in opens the settings again instead of doing nothing

Full Changelog: v18.10.0...v18.10.1

@oh-my-pi/pi-agent-core

Added

• Added AgentLoopConfig.onDetachedToolUpdate: a tool's onUpdate frames that arrive after its run's event stream ended (a returned call whose background job keeps reporting) reach it instead of being dropped; Agent forwards them to its subscribers as tool_execution_update events

@oh-my-pi/pi-ai

Added

• Added support for CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS on the anthropic provider: when set, requests omit pre-release fields (context_management, beta tool fields such as strict and defer_loading, task budgets, structured-output format, thinking.block_binding, and Anthropic server compaction) along with their beta headers, so ANTHROPIC_BASE_URL gateways that reject them keep working (#15458 by @H4vC)

@oh-my-pi/pi-catalog

Added

• Added the honors-claude-code-beta-kill-switch axis (compat.honorsClaudeCodeBetaKillSwitch), on for the anthropic provider, so a rule or models.yml override decides which providers honor CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS (#15458 by @H4vC)

@oh-my-pi/pi-coding-agent

Added

• Added CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS support: set it to stop Anthropic requests sending experimental beta fields that a company ANTHROPIC_BASE_URL gateway rejects, such as the Sonnet 5.5 thinking.adaptive.block_binding 400 (#15458 by @H4vC)
• Added the task.structured setting (default off) for structured task results: when on, the task tool accepts outputSchema/schemaMode and subagents return results through yield as before

Changed

• Subagents spawned by the task tool now return their final message as plain text, with no yield tool, output schemas, or "Submit Result" fields; eval agent()/workpool spawns still return structured results
• In Tern, a backgrounded bash command or eval cell keeps filling its own card with live output (In background, with a running clock) and settles it with the job's outcome, Cancelled when the job is killed; wait lists each job on one line (type, id, label, duration) instead of repeating its output
• ACP clients now see a backgrounded call's job output stream into its tool call, which settles completed or failed with the job

Fixed

• Fails unstructured task runs that conclude without a final message
• Background task cards no longer stop updating once the agent ends its turn while the task is still running
• Transparent images the model receives (small icons, oversized screenshots) keep their transparency instead of turning into a black square, and resized edges no longer pick up a dark fringe

@oh-my-pi/pi-natives

Added

• Added in-process env, du, chmod, fold, rmdir, od, df, uptime, id, and dd shell builtins matching GNU coreutils 9.x options, output, and exit codes (chmod and id on Unix only; dd is disabled with the destructive set by PI_DISABLE_UUTILS_DESTRUCTIVE).
• Added an in-process nl shell builtin (ported from uutils coreutils 0.8.0, matching GNU nl), with header/body/footer numbering styles including pBRE regex styles, logical-page section delimiters, -l blank-line grouping, and ln/rn/rz number formats.

@oh-my-pi/pi-tui

Added

• Added opt-in /tree branch navigation across visible branches and nested fork depths; bind app.tree.previousBranch / app.tree.nextBranch (e.g. to Shift+Left / Shift+Right) in keybindings.yml (#12623 by @azain47).

Changed

• The wait tool's native job rows (omp.wait.job) are a single row: badge, id and label, progress and clock, without the output preview or capture notice beneath
• The native bash run foot reads In background with a live clock (omp.run.time without stopped) while a parked job's frames stream (details.async.state === "running", partial), instead of Running
• Native model pickers (/model, the quick switch and the advisor's) mark providers with their logo (mark.icon: "provider:<id>", initials where the terminal has none), and every model row leads with its provider's mark

Removed

• Removed the unused app.tree.foldOrUp / app.tree.unfoldOrDown keybinding ids, which no longer did anything.
• Added parksAsBackground(toolName, details), asyncJobState(details), isSettledJobFrame(details) and settleWithJobFrame(component, frame, toolCallId) (chat/tool-execution): whether a returned call's card stays live for its background job's frames (task always; bash and eval under native rendering), the job state a frame reports, and settling the card with the job's last frame (a cancelled job keeps its output and seals as cancelled)
• BashToolDetails.async.state and EvalToolDetails.async.state gain cancelled for a job killed before it finished

@oh-my-pi/pi-wire

Added

• Added TspPickerMark.icon: an icon a picker mark draws instead of its initials when the terminal has it (provider:<id> names a model provider's logo)

What's Changed

• feat(tui): jump across session tree branches by @azain47 in #12623
• feat(ai): honor CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS for anthropic gateways by @H4vC in #15458

Full Changelog: v18.10.1...v18.10.2

• Additional small tweaks, bug fixes, and performance enhancements. Thanks for using Signal!

• Thanks to a few performance improvements, your CPU will be slightly happier during video calls (even if you're not smiling).
• We also added a convenient shortcut to open your system settings on Windows if you try to join a video call and Signal doesn't have permission to access the camera. Now it's easier to see what you need to do so that people can see you.

• Thanks to a few performance improvements, your CPU will be slightly happier during video calls (even if you're not smiling).
• We also added a convenient shortcut to open your system settings on Windows if you try to join a video call and Signal doesn't have permission to access the camera. Now it's easier to see what you need to do so that people can see you.

• Handful of bug fixes to keep your app running smoothly. More exciting changes on the horizon!

@oh-my-pi/pi-natives

Fixed

• Fixed omp 18.4.3 and later crashing with a segmentation fault at startup on Apple silicon Macs running macOS older than 27; Apple Foundation Models support now loads only on macOS 27 and later

@oh-my-pi/pi-tui

Added

• Added an optional terminal section to theme JSON (background, foreground, chrome, widget, 16 ansi colors) naming the terminal a theme was made for, for hosts that paint the terminal themselves; the built-in themes ported from known schemes (GitHub, Nord, Dracula, Catppuccin, Solarized, Gruvbox, Tokyo Night, One, Monokai, Rosé Pine, Poimandres, Celestial) carry their scheme's.

Fixed

• Fixed native-terminal (TSP) frames held back by unacknowledged credits waiting for an unrelated render after the 5-second stall fallback expired; a credit-blocked change now renders as soon as the oldest frame counts as stalled.

Full Changelog: v18.4.7...v18.4.8

chore: bump version to 18.4.7

@oh-my-pi/pi-agent-core

Added

• Added APIs for improving agent follow-up and steering workflow management, including moving queued follow-ups into steering with a single queue-change notification.
• Added support for trusted post-tool guidance via afterToolCall results, allowing additional context to be included in the next provider request, including after tool failures.

@oh-my-pi/pi-ai

Fixed

• Fixed forced tool calls failing for Claude Opus 5.5 and Sonnet 5.5 through Amazon Bedrock, including required-tool retries in plan mode.

@oh-my-pi/pi-catalog

Added

• Added configurable catalog cache-warming lifetimes for cache-capable Claude models on Amazon Bedrock Converse, Bedrock Runtime, and Mantle, with 5-minute defaults and a 1-hour Converse option where supported.

Fixed

• Fixed forced tool calls for Claude Opus 5.5 and Sonnet 5.5 on Amazon Bedrock Converse.
• Fixed the thinking-off setting for Command Code models served through the Responses API so they no longer produce reasoning when disabled.

@oh-my-pi/pi-coding-agent

Added

• Added a live Background Jobs view that lets you monitor running background jobs without interrupting the transcript.
• Added agent lineage navigation, making it easy to move between subagents and the main session from the composer header.
• Added queued-message controls to the RPC clients and session API, including promotion of queued follow-ups to steering messages without duplicating text or losing attachments, plus explicit steering or follow-up behavior for prompts sent while the agent is busy.
• Added support for keeping Claude prompt caches warm on Amazon Bedrock and Bedrock Mantle according to configured model cache lifetimes and retention settings.
• In Tern terminals, the effort indicator now visualizes the selected thinking level and becomes a fireball at the maximum level.

Changed

• RPC prompt requests now acknowledge only after the message has been accepted for processing, queued, or routed to an extension command, so subsequent queue-management operations can act on the admitted message reliably.
• Idle recaps now appear as structured notices in the transcript rather than status-line messages.
• Attached-image descriptions for text-only models now time out after 20 seconds and stop when aborted, while preserving the image and informing the model when a description is unavailable.
• The status line now separates the session's own cost from total subagent spend, including nested, background, and resumed subagents, and matches the Agent Hub total.
• Tool-use reminders are now delivered as separate developer messages, keeping them distinct from tool output.
• Reworked Tern transcript navigation and presentation: Esc-Esc rewind now uses the transcript with turn-by-turn and branch navigation, attached images open in Tern's image viewer, idle recaps remain unobtrusively in the transcript, and the background-jobs pill opens the live jobs view.
• Tern now reports agent activity through terminal progress consistently, and its progress and agent indicators update smoothly during subagent work.

Fixed

• Fixed Tern commands issued while the agent is working so they appear immediately in the transcript instead of being clipped above the prompt.
• Added a dismiss action for Tern's prompt-area error notifications.
• Fixed dollar signs in prompts being mistaken for Python mode until a following space confirms the mode.
• Fixed turns getting stuck in a working state when post-turn maintenance, such as saving the session, fails; the session now becomes idle and reports a warning.
• Fixed failed tool-output pruning from leaving live context out of sync with saved history.
• Fixed oversized or undersized attached images being distorted when resized to fit display limits.
• Fixed interrupted tool calls disappearing from the model's context after resuming a stopped session.
• Fixed aborted prompts with images still being prepared from starting or entering the queue afterward.
• Fixed aside messages containing pasted image or video paths so the source path is preserved when sent to the model.
• Fixed extension-registered prompt-cache settings, including explicit opt-outs, not taking precedence over matching models.yml definitions.
• Fixed prompt-cache warming to honor cache-retention settings, including disabling replay for no-retention caches and using the lifetime written by long-retention requests.

@oh-my-pi/pi-tui

Added

• Added a full-page transcript replay experience for Rewind in native terminals, with branching navigation through the conversation.
• Added agent lineage navigation, including headers and links for moving between a subagent and its ancestors or returning to the main session.
• Added a Jobs overlay for viewing background jobs.
• Added OSC 877 protocol support for native TUI surfaces in Windows ConPTY environments.
• Added customizable native screen layouts through Component.describeScreen and programmatic scrolling for native nodes.
• Added native-terminal text editing support for selections in the composer and single-line inputs, including undoable host edits and safe handling of stale or token-spanning ranges.
• Added optional dismissal handling for error banners, including a Dismiss button in native terminal strips.

Changed

• Notebook evaluation cells now use dedicated input and output gutters with clearer status indicators.
• Streaming file operations now remain expanded while running and collapse after execution completes.
• Improved native-terminal effort indicators, using terminal glyphs where available and block meters as a fallback.
• Updated native composer navigation when viewing a subagent to show the agent lineage and provide a direct return to the main session.
• Native /resume picker sheets drop the "Resume session" heading and the This folder / All projects tabs: the search placeholder names the scope ("Search sessions in app…", "Search all sessions…") and Tab (the footer's All projects / This folder action) switches it. Picker title is now optional on the wire.
• Updated the native composer's context display to span the window and provide clearer context usage and session-cost information, with shortcuts to the context and usage views.
• Updated status-line billing summaries to show subagent spend separately from session spend and avoid repeating the same currency or subscription marker for subsequent amounts.

Fixed

• Fixed search results so gaps between non-adjacent context runs are displayed correctly.
• Fixed custom-answer and note prompts in native terminals so questions are shown completely with the correct titles and are no longer truncated or incorrectly wrapped.
• Fixed text fields in native dialogs to render without a duplicate prompt indicator.
• Fixed native TUI surfaces falling back to plain text rendering in Tern on Windows by accepting OSC 877 messages received through ConPTY.
• Fixed streaming edit, patch, and write operation cards so they remain fully visible while running and collapse only after completion.

@oh-my-pi/pi-wire

Added

• Added the TspMeterMark component for marking a position on a meter track with a custom icon and a total value that defines the full span of the track.

What's Changed

• feat(coding-agent): warm Claude caches on Bedrock and Mantle by @anatoli-tsinovoy in #13871
• feat(rpc): promote queued follow-ups to steering by @andrebrait in #11618
• show estimated subagent price too by @H4vC in #13944
• feat(agent): support passive after-tool context by @andrebrait in #13266
• fix(catalog): send a real thinking-off to Command Code via Responses by @H4vC in #13949
• bedrock forced toolcall fix by @H4vC in #13948
• fix(session): recovered interrupted tool calls on resume by @roboomp in #13951

Full Changelog: v18.4.5...v18.4.6

chore: bump version to 18.4.5

chore: bump version to 18.4.3

@oh-my-pi/pi-agent-core

Added

• Added live steering support, allowing models to receive and act on user steering messages during an active stream.

@oh-my-pi/pi-coding-agent

Added

• Added a unified predictive text engine with N-gram, SmolLM2, and macOS native providers, including cross-engine blending, background model downloads, and a cross-process prediction daemon.
• Added the omp predict command for evaluating completion performance and support for ingesting existing Claude Code and Codex prompt histories to bootstrap predictions on new installations.
• Added omp skill list [dir] [--json] to report skills resolved for a session directory, including discovery warnings in JSON output.
• Added a centralized progress display for background tool and model downloads, including support for downloading the SmolLM2-135M word-completion model.
• Added dynamic evaluation guidance through hidden session notices.
• Added a required complexity rationale to the task tool to improve automatic thinking-depth selection.
• Agents using task or bash now receive the wait tool for background-process coordination, and subagents can receive it when explicitly requested.
• Added context-aware suggestions to empty composers based on agent activity and effort.
• Added optional global or per-project memory scopes to the retain and learn tools when Mnemopi scoping is enabled.
• Added /btw to focused subagent views for asking questions about that agent's transcript with separate side-conversation history.

Changed

• Completion behavior now uses the N-gram engine for standard auto completion across platforms, with blended N-gram and SmolLM confidence scoring where applicable; the SmolLM2 model uses a 145 MB GGUF (Q8_0) download and is prefetched only when explicitly activated.
• Updated spelling.autocomplete to use an enum-based engine configuration.
• Completion ghost text is now preserved through manual keystrokes.
• Window input actions now default to background execution; set takeover: true to opt into foreground activation, with clarified cross-platform coordinate and activation behavior.
• omp tiny-models download can now download the word-completion model.
• Updated /play help, read-tool summaries, platform-aware shortcut labels, and other UI hints for clearer interaction guidance.
• Updated the empty-submit behavior to account for live-steered messages and surface pending live-steering status in the UI.
• ps --all now includes exited global services, while the default view shows live global services.
• Orchestrator task documentation now follows a Target/Change/Acceptance format.
• Slash-command and hint usage tracking is now persistent and namespaced.

Fixed

• Preserved MCP structuredContent in live tool-result details so evaluation callers can consume server data without reparsing model-facing JSON; spilled results continue to retain an artifact reference without duplicating the payload in session history.
• Fixed Collab hosts becoming unable to reclaim a room after a brief network interruption; hosts now retry room recovery without losing guests or queued updates.
• Fixed one-shot commands that stopped before completing, such as omp config set on a fresh Windows profile, incorrectly exiting successfully without output; they now report failure with diagnostic guidance.

@oh-my-pi/pi-mnemopi

Fixed

• Fixed recall search matching query terms inside unrelated words, improving result relevance and ensuring exact matches are prioritized.
• Fixed sleep summaries replacing shortened terms within larger words, preventing unintended word corruption.

@oh-my-pi/pi-natives

Added

• Added a TextPredictor N-API binding for managing the high-performance ghost-text completion engine.

Changed

• Updated desktop input-control capabilities to use a unified takeover setting, including takeover: true for forced foreground pointer interaction.

@oh-my-pi/pi-tui

Added

• Added responsive ghost-text word completion with pluggable backend providers, context-aware prose filtering, and feedback support.
• Improved autocomplete responsiveness for high-latency file discovery by showing interim suggestions and a searching state while results are refreshed.

Changed

• Improved word-completion acceptance and persistence when typing through existing ghost text, including more natural handling of trailing spaces and punctuation.
• Made keyboard labels across the TUI platform-aware so shortcuts are displayed using the appropriate key names for the user's operating system.
• Updated the process monitor to distinguish target scope from current and global scope in its labels.

Fixed

• Fixed autocomplete submission so Enter commits the current input correctly while suggestions are still loading.
• Fixed the background tint for truncated skip lines.

Removed

• Removed the legacy TinyTitleDownloadProgress overlay in favor of the centralized agent HUD.

What's Changed

• fix(collab): reclaim a host room the relay still holds after a drop by @alphastorm in #13355
• fix(cli): exit non-zero when a command ends before completing by @alphastorm in #13373
• ci: second set of CI uplifts by @H4vC in #13391
• fix(mnemopi): match AAAK word substitutions on whole words only by @alphastorm in #13320
• fix(mnemopi): require token boundaries for lexical recall matches by @alphastorm in #13322
• feat(coding-agent): let retain and learn write to the shared memory bank by @alphastorm in #13324
• fix(mcp): preserve structured results in tool details by @shawnkoh in #13398
• feat(coding-agent): allow /btw in focused subagent views by @H4vC in #13412
• fix(web-search): prioritize GPT-6 Luna over GPT-5.6 Luna by @anatoli-tsinovoy in #13442
• fix(coding-agent): serialized codex saved resets across sessions by @roboomp in #13439
• fix(collab): re-applied auto-start after a room ended on its own by @roboomp in #13446
• fix(task): kept latest value for repeated scalar yield sections by @roboomp in #13449
• ci: release-time uplifts and green main (no native rebuild on bump, win32-arm64 cross-build, fresh bazel lock) by @H4vC in #13450
• fix(coding-agent): scope focused /btw history and keep it rendering after leaving the view by @H4vC in #13431
• spinner fix by @H4vC in #13453
• feat(cli): add omp skills command for machine-readable skill listings by @andrebrait in #12273
• fix(catalog): narrowed llama.cpp pre-3.8 qwen effort ladder by @roboomp in #13456
• fix(session): preserved batched tool results after rewind by @roboomp in #13459

Full Changelog: v18.3.2...v18.3.3

@oh-my-pi/pi-ai

Fixed

• Fixed Anthropic OAuth requests capping output at 64k tokens; they now request the model's full ceiling (128k on Opus 5.5), matching Claude Code and API-key requests

@oh-my-pi/pi-coding-agent

Breaking Changes

• Replaced the task tool's complexity field with solutionSpace, a description of how open-ended the subtask is; auto thinking for spawned subagents now picks effort from it alone

Changed

• auto thinking now picks effort for every turn by how open-ended the problem is, so large volumes of mechanical work no longer raise it

Fixed

• Fixed agents looping for hours when every turn spends the whole output limit on reasoning: length-stop retries now tell the model its reasoning was discarded and to act in smaller steps, and a subagent whose length-stop recovery gives up now fails with that error instead of being re-prompted into the same loop
• Fixed tagging a model with ^ mid-session dropping the provider prompt cache for every following turn: new m<N> pseudonyms now arrive as a hidden session notice instead of rewriting the task description, which only absorbs them at a base-prompt rebuild

@oh-my-pi/pi-natives

Fixed

• Fixed the native addon keeping every bun test --isolate/--parallel test file's global object and module graph alive, which grew each test worker by ~15 MB per file until the run was OOM-killed.

Full Changelog: v18.3.3...v18.3.4

@oh-my-pi/pi-agent-core

Added

• Added tool_execution_end events that fire as each tool call settles for live UI updates

Changed

• Emitted tool result messages in the order of tool calls, preserving call order regardless of completion order
• Reduced repeated token-counting work with a bounded, model-scoped cache of exact text and short-message fragment counts.

Fixed

• Fixed an issue where streaming tool call arguments could be incorrectly modified in-place

@oh-my-pi/pi-ai

Fixed

• Fixed successful Cursor agent turns being treated as context overflows, which ran overflow compaction and showed "Compaction freed too little context to make progress" while /context read well under the window; overflow detection now uses the reported context size instead of input totals summed across a turn's model calls (#13608 by @H4vC)
• Fixed Anthropic requests with thinking enabled failing on models whose output ceiling cannot fit the minimum thinking budget; thinking is now disabled for those requests instead (#13359 by @jchanghong023)
• Fixed Cursor native Grep/Glob results showing no matches or raw output, Write failing to create files, StrReplace missing edits beyond the read limit, and Read/Shell/Delete results misreporting content or metadata (#13600).

@oh-my-pi/pi-catalog

Changed

• Improved model cache invalidation efficiency by implementing deep equality checks on cached rows when database version signals change
• Optimized read-row cache by enabling granular cache-hit logic across concurrent connection handles

@oh-my-pi/pi-coding-agent

Added

• The shell's cp builtin accepts macOS's -c (clone where possible, else copy; same as --reflink=auto).

Changed

• Removed unused timestamp metadata from model usage tracking queries to optimize database overhead
• Improved session storage reliability by using atomic inode identity verification for lock management
• Optimized internal role chain resolution and caching to reduce event-loop contention during judge initialization
• On macOS, the shell's cp builtin now also clones (copy-on-write) when overwriting an existing file, instead of rewriting its data; the destination keeps its permissions, and hard-linked destinations are still written in place.
• The find tool now fails with a timeout error after 20 seconds instead of blocking the turn when the judge model stalls.
• Reduced main-thread stalls with many agents running: read code summaries now parse off the main thread, streamed tool-call snapshots no longer deep-copy growing argument text on every delta, and model-cache reads skip re-parsing unchanged rows.
• Reduced CPU while an agent streams: the working-row token rate and status line no longer re-tokenize or re-resolve settings every frame, and ^ model mentions no longer rebuild the model scope per keystroke.
• task and /vibe subagents now get their own Python kernel and JS/Ruby/Julia eval state instead of sharing the parent's, so agents can no longer overwrite each other's variables or reset each other's kernels.
• On Windows, the shell's cp builtin now clones files (copy-on-write) on ReFS and Dev Drive volumes by default, falling back to a regular copy elsewhere; --reflink and -c no longer fail there.

Fixed

• Fixed mouse handling ignoring per-mode TUI mouse setting
• Fixed the shell's cp --reflink=always emptying an existing destination when the filesystem cannot clone; the destination is now left untouched.
• Fixed block-clone task isolation on Windows ReFS and Dev Drive volumes failing on files whose size is not a whole number of clusters, larger than 4 GiB, or sparse.
• Fixed Google Antigravity requests failing with 429 RESOURCE_EXHAUSTED on every turn: the system prompts' RFC 2119 conventions line is reworded so the endpoint no longer rejects it (#13379 by @heshuoshuo0512)
• Fixed CRLF SKILL.md files injecting raw YAML frontmatter into user-invoked and autoload skill messages (#13590).
• Fixed Cursor native Grep ignoring requested context, Read negative offsets starting at the top, and Delete reporting zero-byte files (#13600).

@oh-my-pi/pi-natives

Added

• Added summarizeCodeAsync for non-blocking source structure summarization on the libuv thread pool

Fixed

• Fixed concurrent streaming searches hanging indefinitely or ignoring cancellation while waiting to deliver results to JavaScript.
• Fixed ngram word completion losing learned state between sessions on Windows when saving its snapshot (#13589).
• Fixed Windows shell pipelines losing their final output when cancelled or timed out (e.g. yes x | tail -5): cancelled runs now get a longer grace period to flush before being aborted (#13365 by @jchanghong023)

@oh-my-pi/pi-tui

Changed

• Optimized activity clock rendering by caching timestamp formatting strings
• Reduced CPU overhead during animated terminal redraws, transcript updates, inline-image bookkeeping, and status-line layout.
• Reduced per-keystroke CPU in ^ model-mention autocomplete and per-frame CPU while streaming (status line, live transcript blocks, tool cards, frame writes).

Fixed

• Fixed the @ completion popup swallowing Tab and cursor-movement keys while a narrowed filter matched nothing: with no candidate to accept they now fall through to their normal completion and cursor roles instead of being trapped (#13046 by @jchanghong023).
• Fixed the Esc-Esc rewind and fullscreen /copy selectors getting stuck at the oldest turn of a long session's recent tail; stepping past it now loads the earlier history
• Fixed the composer attachment band showing chip #1 (and other prefix IDs) as still present when only #10 remained in the prompt (#13605)

@oh-my-pi/pi-utils

Added

• Added cloneJsonTree to provide a high-performance deep copy utility for JSON-shaped object trees

What's Changed

• fix(predict): synced ngram snapshots using writable handles by @roboomp in #13595
• fix(tui): stop the @ completion popup from trapping Tab and cursor keys on an empty narrowed list by @jchanghong023 in #13046
• fix(ai): clamp thinking budgets to a model's output ceiling by @jchanghong023 in #13359
• fix(pi-shell): give cancelled Windows pipelines room to flush by @jchanghong023 in #13365
• fix(skills): stripped CRLF frontmatter from skill prompts by @roboomp in #13594
• fix(prompts): reword RFC-2119 conventions line that triggers Antigravity 429 by @heshuoshuo0512 in #13379
• isUsageBackedContextOverflow fix by @H4vC in #13608
• fix(tui): matched composer attachment chips by exact index by @roboomp in #13606
• fix(cursor): corrected native exec tool results by @roboomp in #13603

New Contributors

• @heshuoshuo0512 made their first contribution in #13379

Full Changelog: v18.4.1...v18.4.2

• ps -M printed "?" for %CPU on Linux threads spawned within the current
  clock tick: start_time/ticks equalled /proc/uptime, so age <= 0 mapped to
  None. Broke ps_builtin_lists_one_line_per_thread_with_m on the bazel CI run.
• Zero elapsed time now yields 0.0 like procps, for Linux and Windows threads
  and the process-level %CPU/C columns alike.

chore: bump version to 18.3.0

• Additional small tweaks, bug fixes, and performance enhancements. Thanks for using Signal!

Small tweaks, bug fixes, and performance enhancements. Thanks for using Signal!

chore: bump version to 18.2.10

• Delete redundant test file for umans provider which has been superseded by integrated model discovery tests.

The no-ffprobe branch asserted "requires ffprobe" but the VideoError
message reads "Video operations require ffprobe". The branch only runs
where ffprobe is absent (CI runners), so it never failed locally.

chore: bump version to 18.2.6

Both crates declare [lints] workspace = true, but the opted-in crate list
in the rust_validate job predates them, so CI linted them with default
clippy + -Dwarnings instead of the workspace policy. Release v18.2.5 failed
on three too_many_arguments hits in pi-edit's sloppy mode that the
workspace policy explicitly allows (and that cargo clippy passes locally).

chore: bump version to 18.2.3

feat(coding-agent): add tui.titleSpinner terminal title spinner styles

@oh-my-pi/pi-ai

Fixed

• 400-request debug dumps now redact provider-specific auth headers (x-goog-api-key, x-amz-security-token, and any header whose name carries a key/token/secret), not just a fixed allow-list, so a shared dump can no longer leak a live API key (#12007).

@oh-my-pi/pi-catalog

Added

• Enabled assistant prefill support for Ollama models

Fixed

• OpenCode Zen GPT-6 Astra requests now use the Responses endpoint instead of failing through chat completions with HTTP 500 (#12030).

@oh-my-pi/pi-coding-agent

Breaking Changes

• Hub message/job waits now always use the adaptive window (5s, lengthening to 5m across back-to-back waits); removed the timeoutMs argument and async.pollWaitDuration setting.

Added

• Added a privacy warning to memory reports reminding users to review data for secrets before sharing
• omp git / /git: delete discards the selected file's changes (press twice to confirm) — in the sidebar on a file or whole directory, in the diff pane on the shown file; untracked files are removed, staged files reset to HEAD

Changed

• Pressing c on a /btw answer now shows a green "✓ Copied to clipboard" confirmation in the panel and history detail, and BTW history accepts Ctrl+/ to switch panes (#12052 by @H4vC).

Fixed

• Automatic session titles no longer draw from canned prompt examples.
• Sessions titled by a local Ollama model (e.g. LFM2.5) no longer stay unnamed when the model's chat template spends the whole output budget on reasoning.
• /debug memory reports now include numeric memory statistics instead of raw heap snapshots that could expose provider and MCP credentials.
• Multi-step logins (e.g. Perplexity email → code) now move the input field under the latest prompt instead of leaving it stuck beneath the first one.
• Todo updates made through Eval's tool.todo(...) now persist to the session, so they survive resume/rewind/fork and no longer trigger false incomplete-todo reminders.
• Native background security scans now accept provider-owned AWS authentication for Amazon Bedrock and Bedrock Mantle without requiring a stored OAuth account (#12013).

@oh-my-pi/pi-utils

Fixed

• Fixed extractRetryHint sleeping hours past the provider's stated wait when a timezone-naive reset at timestamp overshoots the relative retry hint: the skewed stamp is now ignored instead of winning longest-wins (#12070 by @H4vC).

What's Changed

• fix(catalog): route Zen Astra through Responses by @roboomp in #12032
• fix(ai): redact provider-specific auth headers in 400 dumps by @roboomp in #12010
• fix(security): support provider-native Bedrock auth by @roboomp in #12017
• feat(coding-agent): confirm /btw copies with visual feedback by @H4vC in #12052
• fix(utils): ignore zone-skewed naive reset-at past relative retry hint by @H4vC in #12070

Full Changelog: v18.1.21...v18.1.22

• Small tweaks, bug fixes, and performance enhancements. Thanks for using Signal!

@oh-my-pi/pi-coding-agent

Fixed

• Fixed Flatpak Chromium launcher executables (including com.google.Chrome, org.chromium.Chromium, and io.github.ungoogled_software.ungoogled_chromium) so app.path is treated as a browser and gets managed Chromium profile handling
• Fixed Chromium --user-data-dir handling by normalizing --user-data-dir <dir> and relative profile paths to absolute --user-data-dir=... values before launch
• Browser automation now works alongside an already-running Chrome using an isolated profile, keeps requested profiles separate, and never kills reused browser processes.
• First-use Chromium installation and browser operations no longer consume Eval's runtime timeout or reset its kernel while waiting.
• Browser startup reuses a successful system-Chrome fallback instead of retrying an unavailable download during the same open.
• Browser clicks and other interactions no longer stall when OMP-owned tabs are in the background, including after worker timeout recovery.

@oh-my-pi/pi-utils

Added

• Added getBrowserProfilesDir() (~/.omp/browser-profiles; XDG: $XDG_STATE_HOME/omp/browser-profiles) for profiles of Chromium browsers spawned by the browser tool.

Fixed

• Timed out stalled Chrome-for-Testing metadata requests after 30 seconds when looking up download metadata
• Concurrent browser installations share one download without replacing a running browser, and stalled downloads time out with partial files cleaned up for retry.

Full Changelog: v18.1.20...v18.1.21

chore: bump version to 18.1.20

@oh-my-pi/pi-agent-core

Added

• Added Agent.getPendingToolResults() for reconstructing live displays before buffered tool results are persisted (#11868 by @serverinspector).
• Added opt-in host authorization and exact-once streamed child execution for discard-safe local reads.

Changed

• Tool <name> not found now also suggests mounted xd:// devices, not just the advertised tool set, via the new suggestFallbackToolNames option (#11516, #10109 by @oldschoola).

Fixed

• Speculative stream sessions are now discarded when a hook or argument transform replaces a call's arguments while keeping its ID, instead of releasing deferred work planned from the original code (#11889 by @h4vc).

@oh-my-pi/pi-ai

Added

• Charm Hyper accounts now report their remaining prepaid credit balance in /usage (#11656 by @oldschoola).

Fixed

• Fixed Kimi Code's 7-day rate-limiting window being mislabeled as "Total quota" in omp usage, causing accounts whose monthly subscription pool is exhausted to appear 100% free while chat completions fail; parsed totalQuota add-on packs into the true "Total quota" row when present, and recognized Kimi's HTTP 403 access_terminated_error as a credential-rotatable usage limit. (#11827 by @revofusion)
• Fixed provider streams that die after emitting toolcall_start but before any argument content failing validation with empty {} arguments; the uncommitted attempt is now discarded and retried (#11823 by @justdoGIT).
• Fixed Windows zcode:// (Z.AI coding-plan) OAuth sign-in never completing after a successful browser authorization: the native callback handler is now registered with a path the Windows shell can launch, so the zcode://zai-auth/callback redirect reaches omp instead of being silently dropped by the browser (#11907 by @oldschoola).
• Codex OAuth login now accepts valid account tokens that expose an email but omit chatgpt_account_id, without fabricating a workspace header (#11847 by @nguyennguyenit).
• Fixed Muse Code login failing when Meta returns no assigned subscription tier (subs_tier_id/subs_tier_name as null); sign-in now succeeds and usage is reported without a tier (#11843 by @John-Cusack).

@oh-my-pi/pi-catalog

Added

• Added Charm Hyper as a built-in provider with API-key login, live model discovery, and per-model pricing, effort ladders, and limits read straight from its catalog (#11656 by @oldschoola).

@oh-my-pi/pi-coding-agent

Added

• Added default-off speculative execution for validated local reads, including reads projected from nested JavaScript and Python eval cells.
• /usage now shows prepaid credit balances (e.g. Charm Hyper's 100 credits left) on the provider cards and account summaries instead of no data (#11656 by @oldschoola).
• Retry fallback chains now support per-model reasoning efforts: a fallback entry may carry an explicit thinking suffix ("default": ["openai/gpt-5-mini:low"]), and pressing t on a fallback row in /models sets or clears it. Bare entries keep inheriting the failing turn's effort. (#11842 by @H4vC).
• Added task.agentServiceTierOverrides for sparse exact-name service-tier overrides on task/eval agents, so selected agents can use priority/Fast mode without accelerating every subagent (#9668 by @alphastorm).
• Added session-local /btw history with persistent answers and follow-ups; bare /btw reopens history, Escape cancels running answers before closing, and new questions no longer replace an in-progress answer.
• Added f follow up in BTW history to continue a selected side conversation with an English input prompt, persistent multi-turn history, and no changes to the main conversation.
• Completed inline BTW answers now support f follow up directly; history uses Tab for pane navigation and Enter or f to start a follow-up.
• Codex web search now accepts valid email-only OAuth credentials without requiring or fabricating a ChatGPT-Account-Id header (#11847 by @nguyennguyenit).
• Sessions now stay alive when their working directory is removed instead of crashing while preparing shell tools (#11828).
• MCP tool calls spelled with the Claude Code doubled separator (mcp__server__tool) now reach their registered tool (#11516 by @oldschoola).
• MCP HTTP reconnects now release obsolete tool generations instead of growing session memory on every reconnect (#11784).
• /debug memory reports now keep large heap snapshots out of JavaScript strings and reject empty snapshots instead of saving zero-byte files (#11785).
• Sloppy-mode edits now drop a copied [N more lines in ...] read notice the same way they already drop the other read-metadata rows, so a pasted projection can no longer leak into the matched pattern or the written text (#11797 by @vasyza).
• /usage now honors a provider's configured baseUrl when checking credentials before any model has been discovered, so a proxy-scoped API key is no longer sent to the provider's canonical host (#11656 by @oldschoola).

Fixed

• Fixed completed tool cards reverting to pending after refocusing live sessions, and tool output collapsing behind finished reasoning segments (#11868 by @serverinspector).
• Invalid WATCHDOG.yml entries now produce startup/editor warnings while healthy advisors remain available (#11882 by @olegpulatov).
• Claude Code session imports now preserve typed user text stored alongside tool results (#11854).
• Extension commands now settle BTW writes before creating, switching, or branching sessions, preventing side requests from outliving their source session (#11335 by @Ant39140).
• Session selection and active-session deletion now settle BTW writes before switching or removing history, preventing stale saves from blocking the next session (#11335 by @Ant39140).
• Escape now cancels BTW follow-ups that are still waiting for startup writes, without launching a model request (#11335 by @Ant39140).
• BTW history now rejects out-of-range timestamps instead of failing during display (#11335 by @Ant39140).
• BTW follow-ups now preserve separate user/assistant messages and reuse an isolated topic-specific provider session for prompt caching; cancellation or failure starts a fresh transport generation.
• Restored Escape cancellation for running BTW answers and removed the separate x shortcut; cancelled output stays visible, and closing another history entry returns to any still-running BTW panel instead of hiding it.
• BTW history now rejects stale cross-process writes and protects running topics with an OS-backed lease, preventing one instance from erasing another instance's follow-ups.
• Copying a BTW topic now falls back to its most recent nonempty answer after an empty failed or cancelled follow-up.
• Invalid or cancelled /move operations no longer cancel BTW requests; busy side conversations block relocation, and stalled history writes stop session operations with a bounded error instead of hanging indefinitely.
• Session shutdown now shows closing progress before waiting for live commands or BTW history writes, and stops progress updates when cleanup completes or fails.
• Failed BTW terminal saves now block session operations while retaining the answer for copying and safe retry, instead of being treated as a successful flush.
• Standalone !cd now shares the BTW relocation guard with /move and /wt, refusing before shell execution when a side conversation is active or unsaved.
• /wt now checks BTW migration availability before creating a branch or checkout, preventing unused worktrees when a side conversation is busy.
• /move now checks BTW migration availability before confirming or creating a missing target directory, preventing leftover directories after a refused move.
• BTW errors now shorten embedded home paths and sanitize control characters and oversized text before display, while retaining original diagnostic errors.
• Speculative reads now open the authorized resolved target while rendering the requested path, so enabling speculation no longer changes read output for symlinks; video targets are declined at authorization (#11892 by @h4vc).
• JavaScript speculation now verifies the retained tool-bridge dispatcher and string-coercion intrinsic identities before projecting reads (#11892 by @h4vc).
• Speculative eval sessions are now discarded at reconciliation when a hook or transform appends source the stream never verified, instead of releasing reads planned from the original code (#11892 by @h4vc).
• Speculative reads now classify format and rendering by the requested path while opening the resolved target, so symlinks with a different extension read exactly like ordinary reads (#11892 by @h4vc).
• JavaScript speculation now validates coercion intrinsics used by String() and .join() inputs, not just template and + operands (#11892 by @h4vc).
• Speculative reads now infer the summary language from the requested path while reading the resolved target, so cross-language symlinks summarize exactly like ordinary reads (by @h4vc).
• The structural summary cache now keys on the parser language path, so one file read through different extensions no longer reuses a stale summary (by @h4vc).
• Fixed the Windows installer failing on Windows PowerShell 5.1: OS architecture detection no longer depends on the .NET RuntimeInformation type that only resolves reliably on PowerShell 7, and the script now requires PowerShell 5.1+ with a clear upgrade message instead of failing cryptically (#11905 by @h4vc).
• Speculative reads now infer the summary language from the requested path while reading the resolved target, so cross-language symlinks summarize exactly like ordinary reads (#11892 by @h4vc).
• The structural summary cache now keys on the parser language path, so one file read through different extensions no longer reuses a stale summary (#11892 by @h4vc).

@oh-my-pi/pi-utils

Added

• Added public acquireFileLock() and FileLockHandle APIs for holding and explicitly releasing exclusive OS-backed file locks.

Fixed

• Child-shell environment filtering now tolerates a removed process working directory by retaining the resolved project directory (#11828).

What's Changed

• fix(debug): avoid heap snapshot string limits by @roboomp in #11786
• fix(mcp): release obsolete tools after reconnect by @roboomp in #11787
• fix(catalog): give deepseek-flash the V4.1 Flash wire contract by @H4vC in #11799
• fix(utils): tolerate deleted working directories by @roboomp in #11829
• feat(catalog): add Charm Hyper provider by @oldschoola in #11656
• fix(ai): rotate accounts when Anthropic reports credits_required by @AshishKumar4 in #11333
• fix(tui): hide tool activity in retired transcript history by @notnotype in #11734
• fix(ai): fall back to the canonical Anthropic usage endpoint when a custom baseUrl does not serve it by @sandboiii in #11376
• fix(ai): retry tool calls with empty args by @justdoGIT in #11823
• feat(coding-agent): per-model reasoning efforts in retry fallback chains by @H4vC in #11842
• feat(coding-agent): add persistent btw history and follow-ups by @Ant39140 in #11335
• test(release): sync native-core file list with VCS entrypoints by @roboomp in #10884
• fix(coding-agent): make status test worktree-safe by @roboomp in #11716
• fix(ai): allow null subs_tier_id/subs_tier_name in Muse Code login response by @John-Cusack in #11843
• fix(cli): return non-zero when a JSON print-mode turn fails by @JamieJ5926 in #11545
• fix(ai): allow Codex OAuth login without account ID by @nguyennguyenit in #11847
• test(coding-agent): make two path assertions pass on Windows by @oleg494 in #11851
• fix(ai): distinguish Kimi weekly limit from total quota and rotate on termination by @revofusion in #11827
• test(coding-agent): assert the shortened artifact notice path independently by @oleg494 in #11853
• fix(edit): drop a copied "more lines in ..." read notice in sloppy mode by @vasyza in #11797
• fix(session): preserve text in mixed Claude records by @roboomp in #11856
• fix(tui): skip hidden thinking formatting by @redsolver in #11632
• feat(task): add per-agent service-tier overrides by @alphastorm in #9668
• feat: Add speculative tool and eval execution by @wn-mitch in #9732
• Wnmitch/spec followup nits by @H4vC in #11889
• fix(advisor): preserve healthy WATCHDOG entries and surface warnings by @olegpulatov in #11882
• fix(mcp): resolve the Claude Code tool-name spelling to its registered tool by @oldschoola in #11876
• test(utils,coding-agent): fix Windows-only suite failures by @H4vC in #11893
• fix(spec): exact-code reconcile, transform coercion gates, lexical cl… by @H4vC in #11892
• fix(ai): anchor proxy tunnel socket in a typed const by @H4vC in #11901
• docs(changelog): add 11892 links to follow-up entries, drop agent duplicate by @H4vC in #11902
• fix(coding-agent): version-robust fetch/socket/console typings by @H4vC in #11903
• fix(install): pwsh version check for pwsh installer by @H4vC in #11905
• fix(tui): preserve live tool results and retire closed reasoning by @serverinspector in #11868
• fix(auth): register zcode:// handler with a shell-launchable path by @oldschoola in #11907

New Contributors

• @sandboiii made their first contribution in #11376
• @justdoGIT made their first contribution in #11823
• @John-Cusack made their first contribution in #11843
• @nguyennguyenit made their first contribution in #11847
• @vasyza made their first contribution in #11797
• @redsolver made their first contribution in #11632
• @wn-mitch made their first contribution in #9732

Full Changelog: v18.1.18...v18.1.19

@oh-my-pi/pi-ai

Fixed

• Codex SSE streams that end without a terminal completion event now retry when replay-safe and remain transient errors when partial output prevents replay (#11349).

@oh-my-pi/pi-coding-agent

Added

• /rename without a title now generates a session name from recent conversation using the configured tiny model.
• Added opt-in experimental notes-backed context windows with persistent branch-local notes, searchable original session history, retained latest user requests, and a model-callable rollover tool, including in Code Mode.
• /loop accepts --until '<cmd>' / --while '<cmd>' to gate each iteration on a shell command's exit status, so a loop can stop on real project state instead of only a count or duration. (#10858 by @andyhite)

Fixed

• Read error and preview rendering now sanitizes tabs and Windows-style CRLF (e.g. ssh host-key failures, tab-indented fetched content) so raw output can no longer tear the result frame.
• Unset tiny model roles now honor the configured @smol fallback in direct execution and the /models Roles view (#11311).
• Extension Control Center (/extensions) search now accepts j and k, so extensions like jira/json are searchable; bare j/k no longer move the list selection (use arrow keys or the configured tui.select.up/down) (#11350).
• Codex turns interrupted before terminal completion now auto-continue after resolved tool calls instead of stopping (#11349).
• Fixed the status line's pi brand/working segment double-padding the first separator, so every gap around a separator is a single space (#11103).
• /handoff no longer leaves the TUI in a running state when completion races with delayed session events (#11263).
• Fixed legacy Pi extensions failing to load when calling ctx.isProjectTrusted() in an event handler; the extension context now exposes it (always true, since OMP applies no project-trust gating) (#7955).
• Fixed Ctrl+Z jobs exiting successfully after fg instead of restarting the TUI because terminal teardown left Bun without a referenced event-loop handle while waiting for SIGCONT (#8585).
• Extensions loaded by the npm CLI now apply settings overrides to the active session, so generated agents and model choices remain isolated between sessions (#11047 by @mgpai22).
• Live task dispatch now reloads added, changed, removed, and deleted project task and retry settings before resolving subagents (#11191).
• Reset /loop iterations combined with --while / --until no longer keep submitting without resetting when vibe mode is enabled while the condition command is still running; the loop now disables itself instead (#10858).

@oh-my-pi/pi-utils

Fixed

• Fixed $which capturing Bun.which at import on Linux and Windows, so Bun.which stubs installed later (e.g. per-test spies) are honoured and PATH-only language servers no longer leak into test results.

What's Changed

• feat(coding-agent): add experimental notes-backed context windows by @wolfiesch in #10893
• fix(coding-agent): sanitize tabs and CR in read error rendering by @H4vC in #11305
• TUI: single delta marker for turn elapsed time in usage rows by @JamieJ5926 in #11332
• fix(agent): retry truncated Codex streams by @roboomp in #11356
• fix(tui): let /extensions search accept j and k by @roboomp in #11352
• fix(coding-agent): honor configured smol fallback for tiny by @roboomp in #11312
• fix(tui): clear stale loader after handoff completion by @roboomp in #11264
• fix(auth): refresh desktop database for native zcode:// oauth by @roboomp in #11287
• fix(update): validate foreign symlink targets by @roboomp in #11155
• fix(compaction): rearm idle timer after setting changes by @roboomp in #10244
• feat(coding-agent): gate /loop iterations on a shell condition by @andyhite in #10858
• fix(tests): dispose status lines before settings teardown by @roboomp in #11098
• fix(commit): route agentic pipeline through commit model by @roboomp in #10993
• fix(eval): return immediate thenable handles from JS completion/agent by @roboomp in #10992
• fix(plan-mode): inline approved plan content by @roboomp in #10926
• docs: fix README hashline package link to deleted directory by @roboomp in #10885
• fix(coding-agent): recheck vibe guard after loop condition gate by @H4vC in #11367
• fix(coding-agent): break tiny/smol fallback cycle on default alias by @H4vC in #11363
• fix(settings): refresh project cache before reload by @roboomp in #11198
• fix(coding-agent): discover --plugin-dir agents without claude opt-in by @roboomp in #11153
• fix(tui): drop trailing pad from pi status segment by @roboomp in #11105
• fix(coding-agent): preserve npm extension session settings by @roboomp in #11051
• fix(coding-agent): restore getSupportedThinkingLevels in legacy pi-ai shim by @roboomp in #10801
• fix(task): ignore Claude marketplace model aliases by @roboomp in #7967
• fix(coding-agent): keep suspended sessions alive for fg by @roboomp in #8629
• feat(catalog): update Fire Pass models to glm-5.2-fast and kimi-k3-fast by @olegpulatov in #10859
• feat(coding-agent): generate a title when /rename has no arguments by @gitpushoriginmaster in #11084
• fix(extensions): expose ctx.isProjectTrusted for legacy pi extensions by @roboomp in #7958
• test(ai): gate the ::1 callback bind assertion on the host's IPv6 loopback by @PeterPonyu in #11385
• fix(utils): resolve Bun.which per call in whichFresh by @PeterPonyu in #11386
• test(coding-agent): make the project-venv setup test hermetic to an activated env by @PeterPonyu in #11387
• fix(coding-agent): guard reset loops against in-flight vibe activation by @H4vC in #11368
• docs: point AGENTS.md VCS helpers at natives/vcs by @PeterPonyu in #11396
• fix(coding-agent): complete title signal stub in working-accent harness by @H4vC in #11398

New Contributors

• @gitpushoriginmaster made their first contribution in #11084
• @PeterPonyu made their first contribution in #11385

Full Changelog: v18.1.15...v18.1.16

• This update introduces more granular settings to give you significantly more control over your Signal notifications. Now you can choose what appears on the app badge, adjust notification preferences for muted threads, and more! We also added a convenient button to restore the default notification settings if you ever make so many changes that you don't even know how to get ahold of yourself anymore.

• Small tweaks, bug fixes, and performance enhancements. Thanks for using Signal!

• Small tweaks, bug fixes, and performance enhancements. Thanks for using Signal!

chore: bump version to 18.1.13

chore: bump version to 18.1.11

Version v1.75.1

@oh-my-pi/pi-agent-core

Fixed

• Fixed Codex V2 remote compaction ignoring explicit thinking-off.
• Fixed Codex V2 remote compaction rebuilding the request prefix differently from normal turns, restoring prompt-cache reuse (#10786).

@oh-my-pi/pi-coding-agent

Changed

• Subagent yield now takes data/error directly instead of nesting them under a result wrapper.

Fixed

• Fixed Codex V2 remote compaction rebuilding the request prefix differently from normal turns, restoring prompt-cache reuse (#10786).
• Restored mouse clicks, hover, and wheel scrolling in Plan Review.

What's Changed

• fix(compaction): preserve codex v2 cache prefix by @roboomp in #10789

Full Changelog: v18.1.9...v18.1.10

• windows_sys::core::GUID has no zeroed; use its Default impl. Silenced the unused mode parameter on non-unix in atomic_write, where no per-file mode bits exist.

• This update introduces more granular settings to give you significantly more control over your Signal notifications. Now you can choose what appears on the app badge, adjust notification preferences for muted threads, and more! We also added a convenient button to restore the default notification settings if you ever make so many changes that you don't even know how to get ahold of yourself anymore.

• This update introduces more granular settings to give you significantly more control over your Signal notifications. Now you can choose what appears on the app badge, adjust notification preferences for muted threads, and more! We also added a convenient button to restore the default notification settings if you ever make so many changes that you don't even know how to get ahold of yourself anymore.

Publish Packages

Publish Packages

• Finding yourself can be a lifelong process, but now you'll appear as "You" in the group member search to make it a little easier.

• This update introduces more granular settings to give you significantly more control over your Signal notifications. Now you can choose what appears on the app badge, adjust notification preferences for muted threads, and more! We also added a convenient button to restore the default notification settings if you ever make so many changes that you don't even know how to get ahold of yourself anymore.

fix(coding-agent/tiny): derived worker log path from runtime dir, not…

chore: bump version to 18.1.4

fix: bazel builds

chore: bump version to 18.1.1

chore: bump version to 18.0.10

fix(ci): tolerated newer lint names in bazel clippy and scoped pi-vcs…

chore: bump version to 18.0.8

chore: bump version to 18.0.7

• Finding yourself can be a lifelong process, but now you'll appear as "You" in the group member search to make it a little easier.

• We added two new zoom levels in the appearance settings, so even with very little effort you can still give your messages 110% (or 90%).

chore: bump version to 18.0.6

chore: bump version to 18.0.5

chore: bump version to 18.0.3

chore: bump version to 18.0.2

• The resize replay logic now tracks both width and height and clears the previous replay size before re-offering history.
• A new encodeKittyDeleteAllImages function is used during destructive resets to remove all Kitty graphics.
• Tests were updated to reflect the new resize behavior and image deletion semantics.

chore: bump version to 18.0.0

chore: bump version to 17.4.4

chore: bump version to 17.4.3

chore: bump version to 17.4.2

@oh-my-pi/pi-ai

Fixed

• Distinguished Gemini thought-only STOP responses from empty transports, avoiding repeated identical reasoning requests and duplicate Antigravity endpoint streams while surfacing the missing final output for session-level recovery.

@oh-my-pi/pi-coding-agent

Fixed

• Automatically continued Gemini turns that stopped after thinking without final output, using a bounded final-answer reminder instead of exhausting generic retries.
• Retried Gemini MALFORMED_FUNCTION_CALL failures when every emitted tool call was proven unexecuted, while preserving real tool-result and visible-output replay guards.
• Kept current terminal retry errors in one pinned banner with attempt context while surfacing local continuation failures instead of stale provider errors.

@oh-my-pi/hashline

Fixed

• Recovered dangling range separators in hunk headers (PUT 244.=:, CUT 5.=) as single-line ranges (N.=N) instead of rejecting the header as an orphan payload line.

@oh-my-pi/pi-tui

Fixed

• Fixed Gemini reports rendering their final headings and tables as one raw code block when the model emitted a lone closing Markdown fence without its opener.

What's Changed

• fix(gemini): recover malformed, empty, and broken Markdown turns by @usr-bin-roygbiv in #8493

Full Changelog: v17.3.2...v17.3.3

@oh-my-pi/pi-agent-core

Fixed

• Fixed Codex-compatible V2 remote compaction with an explicit v2Endpoint by sending the required feature-negotiation header (#8524).

@oh-my-pi/pi-ai

Fixed

• Fixed omp usage invalidate to discard stale OAuth and API-key usage snapshots, then force a cache-bypassing, per-provider serialized refresh with a broker request budget sized for the full unfiltered account batch, so upgraded subscriptions do not silently retain pre-change quota data.
• Fixed quota reporting and Cookie capture guidance for China (Beijing) Alibaba Token Plan credentials (#8509).

@oh-my-pi/pi-catalog

Added

• Added wire constants for Codex V2 remote-compaction feature negotiation.

Fixed

• Fixed raw COPILOT_GITHUB_TOKEN credentials skipping plan-specific endpoint discovery, which routed GitHub Copilot Business model requests to the personal endpoint and returned HTTP 403. The GitHub Copilot model cache is now scoped per credential, so switching the token no longer serves another account's stale endpoint for the cache TTL (#8507).
• Fixed the OpenRouter deepseek/deepseek-v4-pro-0813 route silently clamping the reasoning effort to high: the dated SKU advertises (and accepts) the wire-exact low/high/max ladder, so its effort override no longer collapses to high-only. The undated deepseek/deepseek-v4-pro OpenRouter route stays high-only. (#8517)

@oh-my-pi/pi-coding-agent

Changed

• Replaced the MuPDF-WASM PDF document backend with pdf-inspector through @oh-my-pi/pi-natives, preserving cached text conversion and PDF line selectors while reporting pages that need OCR.
• Restored read <pdf>: and read <pdf>:<image>.png page rendering by automatically capturing PDF pages through the headless Chromium browser tool.

Fixed

• Fixed Streamable HTTP MCP sessions being invalidated by opening the optional GET SSE stream before sending notifications/initialized, which prevented Figma Dev Mode MCP from connecting (#8514).
• Fixed the /hotkeys table describing Ctrl+D (app.exit) as "Exit (when editor is empty)" when it actually exits unconditionally and saves the current prompt as a resumable draft (#8530).
• Fixed Ctrl+G external editors failing to launch on Windows because Bun re-quoted the embedded cmd.exe /c command line (#8544).

@oh-my-pi/pi-mnemopi

Fixed

• Fixed recall() silently dropping scope='global' rows whenever a channelId filter was active: buildWhere() appended a redundant hard channel_id = ? clause on top of the (session_id = ? OR scope = 'global' OR channel_id = ?) visibility clause, so global rows whose channel_id didn't match (e.g. imported rows with channel_id NULL) were excluded. Channel isolation is preserved by the visibility clause alone. This made imported/global episodic memory permanently unrecallable through callers that always pass a channel (such as the coding-agent memory backend). (#8525)

@oh-my-pi/pi-natives

Added

• Added the async pdfToMarkdown native API backed by pdf-inspector, with page numbering, page-count, OCR-needed-page, and encoding-issue metadata.

Changed

• Docker images (Dockerfile, scripts/install-tests/*.dockerfile) build the native addon through the cargo/napi-rs backend (OMP_NATIVE_BUILD_BACKEND=cargo) instead of Bazel: a single fixed host target gains nothing from hermetic cross toolchains, and none of those images shipped bazelisk. OMP_NATIVE_CARGO_PROFILE picks the profile for that path (images use ci, local default stays local).

Fixed

• Fixed the root Cargo workspace failing to load when a stale directory exists under crates/ — e.g. a deleted crate whose directory survived git reset --hard. members no longer globs crates/pi-*, so a directory without a Cargo.toml can no longer break every cargo and Bazel build.
• Fixed Docker build contexts shipping nested build output: .dockerignore patterns are anchored at the context root, so bare target/ and dist/ matched neither go-port/*/target (~1.4 GB) nor packages/*/dist (~600 MB).
• Fixed deviceCheckGenerateToken aborting the whole process with SIGTRAP when called from a macOS session without GUI/graphic access (SSH, a launchd LaunchDaemon, a CI runner, a service account, a sandbox), which made every openai-codex/* OAuth model unusable for such accounts. -[DCDevice isSupported] synchronously opens an XPC connection to the per-user DeviceCheck metadata daemon, which exists only in an interactive GUI login session; without one the connection setup hits _xpc_api_misuse and traps before any completion handler runs, so the promise never rejects. The binding now checks the caller's security session for the sessionHasGraphicAccess attribute first and resolves { supported: false, error: … } instead of touching DeviceCheck when it is absent (#8353).

@oh-my-pi/pi-tui

Fixed

• Fixed a terminal Device-Attributes reply leaking into the composer as literal text (e.g. 1;22;…;52c) when it arrived after the startup capability-probe sentinel FIFO drained, a race made observable by the added latency of an SSH/zmx PTY chain. DA1 replies (CSI ? … c) and split private-CSI responses are now consumed for the whole session lifetime, not only while a probe sentinel is outstanding (#8542).

What's Changed

• fix(catalog): discover Copilot endpoint for env tokens by @roboomp in #8510
• fix(ai): restore Beijing Token Plan quota reporting by @roboomp in #8513
• fix(mcp): initialize sessions before opening sse stream by @roboomp in #8515
• fix(catalog): grant low/high/max to OpenRouter deepseek-v4-pro-0813 by @roboomp in #8519
• fix(mnemopi): keep global rows recallable under channelId filter by @roboomp in #8526
• fix(agent): add Codex V2 compaction feature header by @roboomp in #8527
• docs: correct /hotkeys Ctrl+D copy to match save-draft-and-exit by @roboomp in #8531
• fix(pi-natives): guard DeviceCheck token generation on GUI session by @roboomp in #8533
• fix(tui): swallow late DA responses for the whole session by @roboomp in #8543
• fix(coding-agent): restore Windows external editor launch by @roboomp in #8546

Full Changelog: v17.3.3...v17.3.4

@oh-my-pi/pi-agent-core

Added

• Added automatic retry support for transient provider failures during one-shot completions, allowing callers such as compaction to opt in to resilient request handling.

Fixed

• Fixed /handoff, branch summarization, and manual /compact failing outright on transient provider errors (e.g. Anthropic overloaded/429/529 responses); these operations now retry automatically instead of leaving the user's context full.

@oh-my-pi/pi-ai

Added

• Added retryable oneshot completion support (retryTransientCompletion) so non-agent LLM calls correctly retry on transient provider failures (Anthropic overload/rate-limit errors, HTTP 429/500/502/503/529), honoring provider-supplied retry-after timing before giving up.

Fixed

• Fixed xAI availability detection so paid-key-only setups correctly default to xai/grok-4.5 instead of the free SuperGrok catalog; explicit xai-oauth/… selectors still work as before.
• Fixed xAI Responses requests sending unsupported parameters (reasoning summary, presence/frequency penalties) that some models rejected.
• Fixed Umans usage reporting incorrectly marking quota as exhausted based on raw request counts instead of actual weighted usage, and improved the usage display to show both a soft-cap warning and a hard exhaustion limit with an accurate countdown to reset.
• Fixed omp usage invalidate to fully clear stale usage data and force a fresh refresh, so upgraded subscriptions no longer show outdated quota information.
• Improved session recovery to correctly treat certain Cursor HTTP/2 connection errors as transient instead of ending the session.
• Fixed OpenAI-compatible streams (e.g. DeepSeek) that are cut off mid-generation being silently treated as a completed response instead of being retried.
• Fixed DeepSeek resource-exhaustion interruptions not being automatically retried.
• Fixed tool-call IDs being lost during same-model replay, which could break correlation with custom gateways.
• Fixed Kimi Code multi-account routing to prefer accounts with more available quota, respect usage-limit cooldowns, and keep consistent usage history across token refreshes.
• Fixed Anthropic custom signing-proxy conversations losing tool-search results and thinking content during replay.
• Fixed rare runaway response loops across model providers so they now fail gracefully instead of repeating indefinitely.
• Fixed xAI rejecting entire turns due to certain MCP tool schema shapes, restoring compatibility while isolating any remaining incompatible tools rather than failing the whole request.
• Fixed Alibaba DashScope/Bailian transient per-minute rate limits being misclassified as full quota exhaustion, causing unnecessary long backoffs instead of quick retries.
• Fixed Anthropic-compatible streams dropping thinking content, which broke replay of prior reasoning.
• Updated the Alibaba Coding Plan China login flow to point to the current Bailian API-key management console.

@oh-my-pi/pi-catalog

Added

• Added support for GLM-5.3 on the z.AI provider, featuring a unified low/high/max reasoning-effort ladder across all hosts, mandatory thinking mode, 1M context, and default-model status for the z.AI provider.

Changed

• Switched the paid xAI provider (xai / XAI_API_KEY) from Chat Completions to the OpenAI Responses API, aligning it with SuperGrok (xai-oauth) for prompt-cache affinity, reasoning-effort handling, and encrypted-reasoning replay.
• Changed the paid xAI (XAI_API_KEY) default model to grok-4.5.
• Changed the SuperGrok (xai-oauth) default model to grok-4.5.
• Improved reasoning continuity for xAI models by requesting and replaying encrypted reasoning content across multi-turn Responses API calls.

Fixed

• Fixed Codex Daybreak Blue and Red model discovery reporting zero token prices, which incorrectly labeled the models as free in the model picker.
• Fixed Baseten's moonshotai/Kimi-K3 catalog metadata so its low/high/max thinking levels are available.
• Fixed opencode-go/deepseek-v4-flash Responses requests sending forced named tool_choice selectors that are rejected while thinking mode is active.

@oh-my-pi/pi-coding-agent

Added

• Added Extensions tab group to settings schema

Changed

• Routed paid xAI models (XAI_API_KEY / xai/…) through the Responses API used by SuperGrok OAuth instead of Chat Completions, including reliable replay of encrypted reasoning content on follow-up turns.
• Updated the default model for XAI_API_KEY (xai) to grok-4.5, and the default SuperGrok OAuth (xai-oauth) model to grok-4.5. Automatic model selection continues to prefer paid xai/grok-4.5 when only XAI_API_KEY is set, with xai-oauth/grok-4.5 still available explicitly.
• Stopped sending presence/frequency penalties and stop sequences to xAI reasoning models such as grok-4.5, which reject them.

Fixed

• Fixed hub job and wait lists hiding stale running subagent registrations that have no turn in flight, ensuring they remain visible so operators can cancel them
• Fixed external thinking scratchpads running alongside native reasoning on xAI Grok 4 and other reasoning-only Responses models that reject reasoning.effort
• Fixed llama.cpp model discovery producing a baseUrl without the /v1 prefix for non-Qwen models, causing 404 errors on OpenAI-compatible endpoints.
• Fixed prompt caching on open-weight providers (DeepSeek, Qwen, GLM, …) so tool schemas stay cached across directory changes and midnight rollovers.
• Fixed omp --fork omitting the source session's artifact directory, so CLI-created forks now preserve artifact:// references like interactive /fork.
• Fixed long ask option labels being hard-truncated at the terminal width; labels now wrap onto indented continuation lines.
• Fixed toggling display.showTokenUsage from /settings leaving existing token-usage rows stale until the transcript was rebuilt.
• Fixed mid-run auto-compaction blocking the live loop while waiting on extension handlers, which could hang after a snapcompact or context-full pass.
• Reduced peak memory for persisted subagent revival probes by streaming large file-backed session journals instead of loading them fully.
• Improved responsiveness of streaming edit previews for large diffs by rendering only the visible tail.
• Fixed repeated /btw panels committing transient frames to native scrollback and replaying conversation history after dismissal.
• Clarified that closing browser tool sessions releases managed handles without closing pages in spawned, CDP-connected, or relay browsers.
• Fixed interrupted vibe_wait calls being reported as elapsed timeout windows.
• Improved checkpoint/rewind prompt rendering to stay accurate after a rewind and be more concise.
• Fixed Cursor turns dying with HTTP/2 stream errors (NGHTTP2_INTERNAL_ERROR / NGHTTP2_REFUSED_STREAM) after tool calls already had results, instead of leaving the agent idle until the user typed "continue".
• Fixed mixed-case plugin tool names being lowercased during tool-set refresh, which unmounted them from xd:// whenever MCP tools connected.
• Fixed Exa MCP servers being unmounted when their config explicitly requests tools the native Exa integration does not provide, breaking /mcp reconnect exa.
• Fixed Claude Code custom tool discovery attempting to import non-module files from .claude/tools.
• Fixed Agent Hub parking a mid-spawn child session so subsequent task calls failed with an ownership error and the row could never be revived.
• Fixed the welcome banner displaying a stale model name when the session's active model changes after startup (e.g. after a delayed config load or an explicit /model switch).
• Fixed Nix standalone binaries retaining Bun's build-time package in their runtime closure.
• Fixed birch user/custom message card contrast on dark terminals, where chat bubbles could render light-on-light.
• Fixed hidden tool snapshots preventing long streamed assistant responses from entering terminal scrollback.
• Prevented omp models from loading ambient hook factories while preserving extension-contributed providers.
• Fixed the ask dialog's multi-select mode dead-ending on Enter; Space now toggles options and Enter submits the current selection.
• Fixed workspace diagnostics reporting a clean workspace when its checker crashed without producing output.
• Fixed manual /compact failing outright when a summarization request hit a transient provider overload.
• Fixed transient Anthropic failures (overloaded_error, rate_limit_error, 429/500/502/503/529) aborting or silently degrading side-effect-free background LLM calls such as session title generation, TTS speech enhancement, commit-message generation, thinking/stop classifiers, memory extraction/consolidation, and commit analysis/summary/changelog passes; these now retry with backoff honoring retry-after instead of failing or returning an indistinguishable empty result.
• Fixed the shared headless browser daemon launching from the macOS system Google Chrome bundle, which could cause macOS to route the user's link clicks to the automation daemon and silently swallow them; the daemon now prefers an isolated Chrome for Testing binary on macOS.
• Reclaimed abandoned daemon runtime directories under ~/.omp/run/daemons/, preventing unbounded growth of leftover Chromium profiles and broker state.
• Kept the welcome screen's Tips, LSP Servers, and Recent sessions visible when a long model name still leaves enough terminal width for both columns.
• Fixed focused shimmer animation frames (ultrathink, orchestrate, workflowz) repainting the full TUI too frequently, causing high CPU usage while composing prompts on WSL2.
• Fixed the /debug report bundle including unrelated historic sessions, leaking other sessions' files and bloating archives.
• Fixed adopted keep-alive agents remaining stuck in a running state in the registry after deferred turn settlement, and prevented stale refs from sustaining bare hub wait calls indefinitely.
• Fixed home-relative marketplace catalog paths not being expanded before cache access, preventing updates from writing into a literal ~ directory.
• Fixed broker-owned headless Chromium opening and retaining an unowned blank foreground window on Windows.
• Fixed the auto thinking classifier failing every turn on Anthropic models served through LiteLLM/Vertex due to a thinking-budget mismatch.
• Fixed always-ask approval prompts bypassing edit preview readiness when a built-in tool executes under its wire-level alias, such as edit running as apply_patch.
• Fixed lsp reload crashing non-rust-analyzer language servers by sending them a rust-analyzer-specific request; that request is now gated to rust-analyzer only.
• Fixed browser open failing with "Shared browser daemon unavailable" when HTTP_PROXY/HTTPS_PROXY is set, because liveness probes were incorrectly routed through the proxy.
• Fixed defaultThinkingLevel: auto skipping classification for user-invoked /skill: turns, leaving the effort stuck on pending auto.
• Fixed custom-tool directory discovery recursing into subtrees despite a non-recursive default, which could crash startup when scanning large dependency directories such as Python venvs.
• Repaired torn session JSONL appends after disk-write failures, rewrote malformed resumed files before their next append, retried transient persistence failures, and surfaced failures in the TUI.
• Prevented Anthropic model fallback from replaying model-bound thinking blocks across models, and surfaced immutable-thinking errors without retrying the unchanged invalid turn.
• Fixed empty-stop failure messages always suggesting a context problem even when the provider billed output tokens; the message now reports the billed token count and points at a provider-side filter/translation issue when appropriate.
• Fixed a parked, session-less agent-registry entry with no reviver permanently poisoning its agent id, preventing fresh subagent spawns from reusing that id.
• Made extension tool-call timeouts configurable and paused them during user dialogs.
• Fixed /vibe cancellation leaving an in-flight model turn unaware that Vibe mode and its tools were removed.
• Fixed empty local-model stops lingering on the persisted active branch after retries, preventing them from resurfacing after reload or a mid-retry process kill.
• Fixed the Biome linter client silently dropping every diagnostic due to an outdated JSON output schema; it now supports Biome 2.x's diagnostic format.
• Fixed hub jobs and empty hub wait snapshots hiding running subagents that have no live turn, which removed the only way to discover and hub cancel a stale registration; such agents are listed again and flagged as having no turn in flight.
• Fixed external thinking being offered on xAI reasoning-only Responses models (grok-4 family) that reject reasoning.effort, where the private scratchpad ran alongside native reasoning instead of replacing it.
• Fixed the extension tool-call handler timeout rendering outside a titled section in /settings by registering its Extensions group on the Tools tab.

@oh-my-pi/pi-mnemopi

Fixed

• Fixed an issue where transient provider failures (such as Anthropic overload or rate limit errors) were incorrectly treated as empty responses; these failures are now retried automatically before falling back.

@oh-my-pi/pi-natives

Fixed

• Fixed the native xargs builtin panicking in -I/-i replace mode when stdin is empty; it now exits successfully without running the command, matching GNU behavior.
• Fixed inline-code foreground color incorrectly carrying into plain text when a Markdown codespan ended exactly at a soft-wrap boundary.
• Fixed wrapTextWithAnsi leaving a trailing space plus a stray underline open/close pair on the line above a soft wrap when a style opened immediately after that space (e.g. read this thread <underline>https://…), a regression from the codespan color-bleed fix: only sequences that follow visible content now ride along with the current token, while sequences after whitespace still wait for the token they style.

@oh-my-pi/pi-tui

Fixed

• Fixed long CPU-bound event-loop stalls being misclassified as system sleep and omitted from loop-blocked diagnostics.
• Fixed focused components with markers falling back to full-screen redraws instead of direct row updates, preserving cursor position and native scrollback across marker changes.

@oh-my-pi/pi-utils

Fixed

• Fixed the Markdown renderer incorrectly breaking into a raw code block when a 4-space-indented line (such as a box-drawing tree child under a └── branch) directly followed paragraph text; it now correctly stays part of the paragraph, matching standard Markdown behavior.

What's Changed

• feat(catalog): add GLM-5.3 support with uniform low/high/max effort ladder and mandatory thinking by @oldschoola in #8520
• feat(catalog): route paid xAI through Responses like SuperGrok by @geraint0923 in #7454
• fix(discovery): honor non-recursive glob in loadFilesFromDir by @roboomp in #8553
• fix(coding-agent): stop invalid Anthropic thinking fallback by @roboomp in #8560
• fix(ai): fail truncated OpenAI-compatible streams instead of silently stopping by @iacore in #8563
• fix(browser): probe CDP endpoints over raw TCP to bypass HTTP_PROXY by @roboomp in #8569
• fix(mcp): keep Exa MCP servers that request non-native tools by @dhruvkej9 in #8576
• fix(session): repair torn JSONL appends by @roboomp in #8598
• fix: stop mid-run compaction from hanging the live loop by @Thytu in #8604
• fix(tui): wait for wire-aliased edit previews by @roboomp in #8608
• fix(auto-thinking): clear proxy thinking budget in online classifiers by @roboomp in #8612
• fix(catalog): price Codex Daybreak aliases by @SJY051 in #8614
• fix(browser): suppress blank shared startup window by @roboomp in #8624
• fix(tui): refresh token usage rows when toggled by @notnotype in #8626
• fix(cli): expand marketplace catalog home paths by @roboomp in #8628
• fix(ai): restore Kimi multi-account quota recovery by @roboomp in #8632
• fix(hub): prevent stale agent refs from blocking wait by @roboomp in #8636
• fix(ai): preserve opaque Chat Completions tool-call IDs by @roboomp in #8642
• perf(session): stream persisted session init probes by @lemonleks in #8645
• fix(debug): scope report bundle to current session subtree by @roboomp in #8650
• fix(browser): clarify close release semantics by @koopmannleon19977-cmyk in #8651
• fix(tui): bound magic-keyword shimmer CPU by @roboomp in #8652
• fix(ask): wrap long option labels in the rich ask dialog instead of truncating by @szavadsky in #8654
• fix(tui): preserve welcome columns for long model names by @roboomp in #8658
• perf(coding-agent): bound streaming diff previews by @lemonleks in #8662
• fix(coding-agent): preserve artifacts in CLI forks by @anatoli-tsinovoy in #8664
• perf(coding-agent): bound completed diff rendering by @lemonleks in #8665
• fix(ai): stop runaway repeated responses by @pstarkgit in #8669
• fix(launch): prune dead daemon runtime dirs on broker startup by @roboomp in #8676
• fix(browser): prefer Chrome for Testing on macOS headless launch by @roboomp in #8677
• fix(catalog): omit forced tool choice for go responses by @roboomp in #8244
• fix(tui): multi-select ask dialog submits on Enter instead of dead-ending by @zhang17-24 in #8265
• fix(tui): preserve scrollback after hidden tool snapshots by @dannyboy-ai in #8285
• fix(ai): preserve streamed thinking start content by @max12525k in #8319
• fix(ai): rotate Cursor conversationId after a poisoned conversation by @zhang17-24 in #8349
• fix(catalog): Add missing thinking levels to Baseten Kimi K3 by @jcfrancisco in #8364
• fix: retry transient Anthropic failures at oneshot LLM call sites by @wonjun3991 in #8370
• fix(models): isolate ambient hooks from catalog listing by @starlink-awaken in #8414
• fix(nix): remove build-time Bun closure reference by @bjin in #8422
• fix(theme): improve birch user/custom card contrast by @atacolak in #8426
• fix(tui): welcome banner shows stale model name after model changes by @jacobleft in #8428
• fix(extensions): pause tool-call timeout during human dialogs by @Seljuke in #8441
• fix(tui): classify a long loop block by CPU time instead of duration by @Mustaqeem66 in #8442
• fix(tui): keep btw panels out of scrollback by @Ant39140 in #8444
• fix(lsp): don't report a crashed checker as a clean workspace by @Mustaqeem66 in #8448
• fix(hub): skip mid-spawn stubs in persisted scan by @tahsinrahman in #8453
• fix(ci): distinguish a watchdog kill from an OOM kill in the sequential test path by @Mustaqeem66 in #8458
• use /v1/ APIs for llama.cpp for better compatibility by @cphlipot in #8459
• fix(edit): add compact seen-line retries by @Kigbnajd in #8461
• fix(coding-agent): filter Claude custom tool modules by @Kigbnajd in #8471
• fix(ai): classify DashScope/Bailian 429 TPM throttle as transient instead of quota exhaustion by @Vitus213 in #8476
• fix(agent): remove capped empty stop tails by @roboomp in #8491
• fix(coding-agent): reclaim dead parked agent corpses on respawn by @roboomp in #8492
• fix(agent): optimize checkpoint/rewind prompt rendering by @szavadsky in #8503
• fix(agent): name billed output tokens on capped empty stops by @roboomp in #8512
• fix(session): resume Cursor turns after HTTP/2 stream reset by @joseotaviorf in #8516
• fix(ai): report Umans usage from weighted effective requests by @MertSoylu in #8537
• fix(coding-agent): keep the system prompt byte-stable across date/cwd changes by @MertSoylu in #8538
• fix(tests): prune bazel convenience symlinks from bun test discovery by @Jonathanm10 in #8547
• fix(vibe): distinguish wait abort from timeout by @Capslockb in #8550
• fix(coding-agent): classify user-invoked /skill turns under auto thinking by @roboomp in #8556
• fix(utils): stop indented code interrupting paragraphs in the vendored marked lexer by @chan1103 in #8557
• fix(ai): preserve Anthropic tool-search replay blocks by @roboomp in #8561
• fix(lsp): gate rust-analyzer/reloadWorkspace behind rust-analyzer check by @roboomp in #8572
• fix(tui): stop inline code color bleed at soft wraps by @roboomp in #8586
• fix(builtins): handle empty xargs replace input by @roboomp in #8597
• fix(vibe): cancel active turn on mode exit by @roboomp in #8327
• fix(ai): update Alibaba China console URL by @roboomp in #8692
• fix(coding-agent): map biome 2.x json reporter schema by @roboomp in #8695

New Contributors

• @geraint0923 made their first contribution in #7454
• @dhruvkej9 made their first contribution in #8576
• @Thytu made their first contribution in #8604
• @SJY051 made their first contribution in #8614
• @notnotype made their first contribution in #8626
• @koopmannleon19977-cmyk made their first contribution in #8651
• @pstarkgit made their first contribution in #8669
• @max12525k made their first contribution in #8319
• @wonjun3991 made their first contribution in #8370
• @starlink-awaken made their first contribution in #8414
• @atacolak made their first contribution in #8426
• @jacobleft made their first contribution in #8428
• @Seljuke made their first contribution in #8441
• @tahsinrahman made their first contribution in #8453
• @cphlipot made their first contribution in #8459
• @Vitus213 made their first contribution in #8476
• @joseotaviorf made their first contribution in #8516
• @MertSoylu made their first contribution in #8537
• @Jonathanm10 made their first contribution in #8547
• @Capslockb made their first contribution in #8550

Full Changelog: v17.3.4...v17.3.5

chore: bump version to 17.3.6

@oh-my-pi/pi-ai

Changed

• Send the omp/<version> User-Agent on xAI chat (xai and xai-oauth) unless the request already set its own.

@oh-my-pi/pi-catalog

Changed

• Changed the paid xAI (XAI_API_KEY) and SuperGrok (xai-oauth) default models to grok-4.6.

Fixed

• Raised the GPT-5.6 Sol/Terra/Luna context window on the Codex transport (openai-codex) from 372K to 1M tokens: OpenAI enabled the 1M window for subscription Codex on 2026-08-16, but the Codex model registry still reports the stale 272,000, so discovery now floors these SKUs at 1,000,000 instead of trusting the reported value (openai/codex#38917).

@oh-my-pi/pi-coding-agent

Added

• Added ExtensionAPI.registerFileWriteFallback(handler) and ExtensionAPI.registerFileDeleteFallback(handler), letting an extension supply a fallback writer or deleter that is consulted when a native write, edit, or apply_patch byte-write or unlink is denied with a permission error (EPERM/EACCES/EROFS) — for hosts that embed the agent inside a sandbox that denies direct filesystem access but exposes a privileged channel. The brokered path is symlink-resolved so a handler's allowlist sees the real destination, a destination that cannot be resolved is not brokered at all, and req.sessionId names the session that issued the mutation so a handler sharing the process-wide registry can enforce policy per session. See docs/extensions.md.

Changed

• Send the omp/<version> User-Agent on xAI chat (xai and xai-oauth) unless the request already set its own (#8840 by @Jaaneek).
• Updated the default model for XAI_API_KEY (xai) and SuperGrok OAuth (xai-oauth) to grok-4.6. Automatic model selection continues to prefer paid xai/grok-4.6 when only XAI_API_KEY is set, with xai-oauth/grok-4.6 still available explicitly.

Fixed

• Fixed omp stats and /stats dashboards being unreachable from container hosts by accepting an explicit --host bind address while preserving the 127.0.0.1 default.

@oh-my-pi/omp-stats

Fixed

• Fixed the stats dashboard being unreachable from container hosts by accepting an explicit --host bind address while preserving loopback-only binding and same-origin API access by default.

What's Changed

• fix(ai): send omp User-Agent on xAI chat only by @Jaaneek in #8840

New Contributors

• @Jaaneek made their first contribution in #8840

Full Changelog: v17.3.6...v17.3.7

@oh-my-pi/pi-agent-core

Fixed

• Fixed /compact (and automatic compaction) resurrecting pre-/clear conversation turns: prepareCompaction now honors the latest reset_boundary, so a compaction after an in-place /clear only summarizes messages created after the reset (#8718).
• Hardened compaction summarization against prompt injection: conversation history and previous summaries are now treated as untrusted, and embedded <conversation>/<previous-summary> boundary tags are neutralized before prompt assembly (#8727 by @koopmannleon19977-cmyk).
• Compaction summarization input is now bounded to the summary model's context (windowed fold for oversized spans) and deterministic context-overflow 400s are no longer retried up to the full retry budget; artifact ids containing 503 no longer misclassify hard 400s as transient.
• Fixed remote compaction mirroring the #8789 Responses shape: buildOpenAiNativeHistory now hoists an assistant message wedged between a tool-call batch and its outputs ahead of the batch, so compaction requests to strict opencode-go gateways match the canonical message(s) → calls → outputs order (#8789).

@oh-my-pi/pi-ai

Changed

• Fixed Gemini thought summaries occasionally leaking a raw ```thinking / ``````thinking fence delimiter into the reasoning block, so it no longer shows up as fence spam in the thinking display or persisted transcripts (#8719).
• Fixed the OpenCode Go login prompting for an "OpenCode Zen API key": the shared login flow now names the provider you selected, so connecting OpenCode Go asks for an OpenCode Go key (the opencode.ai/auth console is still shared, as documented upstream) (#8738).
• Fixed Anthropic-compatible endpoints with strict prompt validation (e.g. Z.AI GLM api.z.ai/api/anthropic, which rejects the whole request with 400 code 1213 "The prompt parameter was not received normally") failing sessions once a tool returned empty output on a vision-capable model: empty successful tool_result blocks now encode as content: "" instead of content: [], which both the official API and strict compatible endpoints accept.
• Fixed retry.usageReservePct (Reserve Margin) ignoring Claude Fable/Mythos weekly tier usage until it hit 100%, so a Fable model kept serving turns past the configured reserve; reserve health now honors the mapped tier row while credential-wide hard blocks still require confirmed exhaustion (#8773).
• Fixed cursor-agent streams stalling with "Provider stream stalled while waiting for the next event" when Cursor asked the client to approve a hosted WebFetch / web search (reproduced on cursor-grok-4.6-xhigh after "I'll fetch the page…"). Those interaction_query frames — including the newer WebFetch field 9 this proto did not name — were dropped, so the server waited forever and the idle watchdog aborted a live connection. Permission queries are now answered; hosted search/fetch is approved, unnamed permission fields get an approved reply on the same field number, and prompts this client cannot serve are rejected so the turn can continue.

Fixed

• Fixed thinking effort selections being ignored for local Qwen 3.8+ models on llama.cpp and vLLM: the Qwen chat-completions dialects only toggled enable_thinking, so the chat template always reasoned at its xhigh default no matter which level was selected. The encoder now routes the requested effort onto the template's reasoning_effort kwarg (chat_template_kwargs for both Qwen dialects, plus the top-level field newer llama.cpp builds map natively).
• Fixed OpenAI Completions, Amazon Bedrock, and Cursor providers ignoring onPayload replacement payloads. The hook now transforms the actual request body sent upstream on these providers, matching the Anthropic/Gemini/OpenAI Responses replacement contract. devin-agent still does not fire the hook (its payload is a protobuf object).
• Fixed Codex requests failing outright when the signed-in ChatGPT account is not entitled to the requested model; the exact model denial is now classified as an account-policy error so credential rotation can reach an entitled sibling account
• Fixed Perplexity email-OTP login after its verification response renamed the encrypted session token from token to challenge_token.
• Cloud Code Assist Gemini 3.6/3.7 Flash requests at minimal now send thinkingLevel: LOW on the aliased -low SKU instead of MINIMAL, which the API rejects with HTTP 400.
• Answer Cursor interaction_query permission gates (hosted web search, Exa, unnamed field-9 WebFetch) so the Run RPC continues instead of sitting silent until the 300s idle watchdog.
• Fixed provider tool calls arriving with flattened array argument paths (e.g. Gemini's questions[0].id) being stripped and rejected by argument validation; well-formed flattened paths are now rebuilt into the nested arrays the tool schema expects (#8886).
• Fixed opencode-go (Console Go) rejecting Responses turns with 400 No tool output found for tool call … (naming a random call of the batch on each retry) when a model streamed a trailing text/thinking block after its tool calls: buildResponsesInput emitted that block as an assistant message item wedged between the function_call batch and its function_call_output items. Such interleaved messages are now hoisted ahead of their call batch (canonical message(s) → calls → outputs), which the strict gateway validator accepts; content is unchanged (#8789).
• Fixed the OpenAI-wire transport sleeping on a LiteLLM concurrency-admission 429 (rate_limit_type: max_parallel_requests, Retry-After: 60) and retrying it up to 6 times (~300s) before session recovery saw the error. Because a 60s hint equals the transport's maxDelayMs cap, fetchWithRetry kept sleeping and retrying; the request now surfaces on the first attempt so TurnRecovery's concurrency backoff/model fallback runs promptly. Genuine RPM/quota 429s (no such marker) still honor Retry-After (#8854).
• Fixed OAuth login (Codex localhost:1455, and any localhost callback flow) failing on hosts with IPv6 disabled at the kernel (ipv6.disable=1). The ::1 companion listener added in #8081 fails there with Bun's generic "Is port X in use?" message (oven-sh/bun#7187), which the in-use check misread as a real collision — tearing down the healthy IPv4 listener and surfacing a bogus "port 1455 is in use" error. The dual-bind path now detects the missing IPv6 loopback up front and serves IPv4 alone (#8814).

@oh-my-pi/pi-catalog

Added

• Added a Cursor variant-collapse table folding the per-effort Grok siblings (cursor-grok-4.5 low/medium/high and cursor-grok-4.6 low/medium/high/xhigh, plus their -fast service-tier lanes) into one logical model per lane with effort routing onto the live wire ids, matching Devin's grok-4-5 collapse (#8803).
• Regenerated the Cursor agent protobufs to model hosted WebFetch permission queries (interaction_query / interaction_response field 9) and the matching ToolCall variant (field 37).

Fixed

• Fixed a physically corrupt models.db (SQLITE_CORRUPT* / SQLITE_NOTADB, "database disk image is malformed") permanently disabling the model cache. The shared read/write paths swallowed unrecoverable SQLite corruption as a best-effort miss and cached the broken handle, so a successful live catalog could never overwrite the corrupt cache and every later process repeated the miss — a runtime provider extension with no bundled catalog was left with only its bootstrap model. Corruption now self-heals: the cache closes the handle, quarantines models.db(+-wal/-shm) aside, recreates a fresh database, and retries the operation once; SQLITE_BUSY, permission, and unrelated errors keep their existing best-effort paths (#8867).
• Fixed local Qwen 3.8+ models (llama.cpp, vLLM, loopback custom providers) exposing the generic minimal..high thinking ladder instead of the chat template's real low/medium/xhigh reasoning_effort tiers. The derived metadata now marks thinking as mandatory (the official 3.8 template raises on enable_thinking: false), vLLM-served Qwen routes through the chat_template_kwargs dialect (top-level enable_thinking is ignored by vLLM), and vLLM discovery lights up the reasoning dial for Qwen 3.8+ ids its /v1/models endpoint reports as non-reasoning.
• Fixed deepseek-v4-pro-0813 surfacing from Alibaba Token Plan discovery with contextWindow/maxTokens of null. The dated DeepSeek V4 Pro snapshot was missing from ALIBABA_TOKEN_PLAN_DISCOVERED_MODEL_LIMITS, so unlike its deepseek-v4-flash-0731 sibling it fell through to unknown limits (#8847).
• Cloud Code Assist Gemini 3.6/3.7 Flash no longer maps user minimal to wire thinkingLevel: MINIMAL when that effort is aliased onto the -low SKU. The request now sends LOW, which those SKUs accept.
• Fixed SuperGrok (xai-oauth) Grok 4.6 hiding the thinking-level picker: the Responses effort-capable allowlist now includes grok-4.6, so /model can select the documented low/medium/high/xhigh ladder (max is rejected by api.x.ai).
• Marked CoreWeave runtime discovery as authoritative so stale bundled model ids that the endpoint no longer serves stop appearing as selectable models.
• ChatGPT Codex discovery that advertises only worker -wm SKUs now also registers the plain model route, so a configured openai-codex/<model> keeps resolving instead of fuzzy-falling-back to the -wm SKU some accounts reject.
• Fixed opencode-go/muse-spark-1.2 (and muse-spark-1.2-contributor) failing every tool-call turn with OpenAI completions stream closed before a finish_reason was received. The Go gateway serves these ids only at /zen/go/v1/responses, but the /zen/go/v1/models discovery omits the provider.npm hint, so the resolver fell through to openai-completions; both ids are now pinned to openai-responses like deepseek-v4-flash (#8957).
• Fixed GitHub Copilot grok-4.6 / grok-4.6-1m failing with HTTP 400 unsupported_api_for_model by routing them through the OpenAI Responses API (/responses) instead of /chat/completions, matching grok-4.5. Stale cached completion routes are invalidated on refresh (#8807).
• Fixed Cursor Grok 4.5/4.6 discovery classifying the versioned ids as non-reasoning: GetUsableModels ships no thinkingDetails and the bundled references read reasoning: false, so the picker hid the effort ladder. Discovery now marks cursor-grok-<version> ids as reasoning models (the non-reasoning grok-code-* ids stay out) (#8803).
• Fixed GMI Cloud (gmi-cloud) models resolved via /v1/models discovery surfacing with null context windows, zero pricing, and no reasoning/thinking metadata for every model except the bundled deepseek-ai/DeepSeek-V4-Flash seed. GMI's endpoint returns only bare {id} rows, so the mapper now recovers intrinsic capability metadata (context window, output limit, reasoning, thinking ladder) for resold open-weight models from the cross-provider canonical reference index — matching the SiliconFlow behavior — while never borrowing another provider's pricing (#8890).

@oh-my-pi/pi-coding-agent

Added

• Added providers.cacheRetention setting (/settings → Providers → Protocol) to control prompt-cache retention per request: auto keeps the provider default (Anthropic: 5m entries with idle keep-alive refreshes), short forces 5m, long restores 1h TTLs where supported and disables the keep-alive refresh loop, none disables prompt caching.

Changed

• The read tool now materializes a local text file once per invocation instead of once per consumer. A ranged read of a file within the snapshot cap previously cost four opens and three UTF-8 decodes — an 8KiB binary sniff, a streaming scan for the rendered window, a whole-file read for bracket context, and another whole-file read to hash the snapshot — with two of those readers separately normalizing line endings; whole-file reads under the structural summarizer paid a fifth read. Byte counts and truncation boundaries are now measured on the buffered bytes, so they stay exact for content that is not valid UTF-8. Files above the snapshot cap keep streaming, since nothing on that path wants the whole file. Raw reads, which skip the tree-sitter parse that documented the old cost, no longer pay for it.
• Documented that bash.patterns gates the bash tool only and does not cover a shell that eval can spawn via subprocess, and that closing that path needs a tools.approval.eval policy — noted in docs/bash-tool-runtime.md, docs/approval-mode.md, and docs/settings.md (#8838).

Fixed

• Fixed the /btw panel re-committing its frame to native scrollback on every update while the primary turn is still streaming: a live region that pins itself (an anchored HUD/panel such as /btw) no longer leaks its scrolled-off rows just because an unpinned transcript seam sits above it in the same frame (#8793).
• Fixed a submitted /skill:<name> command staying invisible in the transcript until its awaited preflight (memory recall, before_agent_start hooks, auto-thinking classification, pre-prompt compaction) finished, so a slow step such as a Hindsight auto-recall timeout made the command look unaccepted. Idle skill submissions now paint an optimistic row immediately — like a normal prompt — and reconcile it in place when the canonical message_start lands (#8895).
• Fixed broker-backed MCP OAuth credentials never refreshing, so remote OAuth MCP servers dropped out of /mcp once their access token expired under omp auth-broker serve. The client threw on the broker-redacted refresh sentinel instead of asking the broker to refresh, and the broker had no mcp_oauth:* refresh path (POST /v1/credential/:id/refresh answered Unknown OAuth provider). The client now routes redacted MCP refreshes through the broker, and the broker refreshes MCP credentials with a generic refresh_token grant from the credential's embedded token endpoint and client id — so the background refresher also keeps MCP tokens live (#8933).
• Fixed omp commit split-commit failing with corrupt binary patch when a split commit contains a binary file. parseFileDiffs split the captured diff on "\ndiff --git ", consuming the \n that terminates each block, and patch.join stripped trailing newlines — both dropped the blank line that terminates a GIT binary patch block, so the rebuilt patch was rejected by git apply --binary. Both trailing and mid-diff binary blocks now survive the parse/rebuild round-trip byte-exact (#8899).
• Fixed omp update (and other non-launch subcommands) crashing with error: Unknown option '--cwd' when a leading global launch flag preceded the subcommand — e.g. a shell alias/wrapper that runs omp --cwd <dir> update. resolveCliArgv hoisted the subcommand to the front but forwarded the launch-only flag into update's strict node:util.parseArgs parser, which rejected it. Launch-global flags before a launch-shaped command (acp/launch) are still forwarded; before any other subcommand they are now stripped as inapplicable (#8891).
• Fixed Claude Code marketplace plugins ignoring the enabledPlugins switch in ~/.claude/settings.json and .claude/settings(.local).json: a plugin turned off for a project no longer loads there, and a local-scope install enabled for a project loads even when its recorded projectPath is a different directory
• Fixed revived subagents (warm lifecycle reviver and cold persisted reviver) rebuilding the session without initializing the extension runtime, leaving every runtime action throwing ExtensionRuntimeNotInitializedError. An extension with a tool_call handler that touched a runtime action (e.g. appendEntry) then tripped the fail-closed gate in emitToolCall and blocked every tool — including the hidden yield — so the revived agent could neither finish nor exit and looped until killed. Both revivers now call the shared initializeExtensions helper, restoring runtime actions, onError, and the session_start event (#8824).
• Fixed omp commit split-commit crashing with a misleading No diff found for <path> when a staged binary (or any payload) pushed git diff --cached --binary past the 8 MiB subprocess output cap. The capture is truncated silently, so files sorting after the binary vanished from the parsed diff; the split flow now requests a complete diff and fails fast naming the real cause instead (#8897).
• Fixed a mid-run compaction being misread as a phantom overflow: after a compaction rebased the in-flight context snapshot, getContextBreakdown used message position (anchorIndex >= cutoffCount) as a freshness proxy, so an in-flight provider response whose request predated the compaction out-ranked the rebased estimate and reported the pre-compaction token count (~2.6x the real one). This tripped the "Compaction freed too little context to make progress" guard and drove the frame-rescue path on a byte-identical tokensBefore. Assistant context snapshots now carry a monotonic compaction epoch, and a post-cutoff anchor whose epoch predates the last compaction is no longer trusted over the rebased estimate (#8887).
• Fixed after_provider_response extension handlers receiving the primary session model in ctx.model and ctx.models.current() for cross-provider side requests. ExtensionRunner.emitAfterProviderResponse accepted the response model but discarded it, so a handler revoking a credential on an HTTP 402 could target the wrong provider. It now threads the response model into the context, matching emitBeforeProviderRequest (#8955).
• Fixed the TinyFish web search provider ignoring the lang:/language: query directive, so every request fell back to the API's US/English geolocation. parsed.lang now maps onto TinyFish's location/language parameters (e.g. lang:it-it → location=IT&language=it), matching the DuckDuckGo, Perplexity, and SearXNG providers (#8913).
• Fixed the /model Roles panel silently dropping roles and model-keyed fallback chains that fell past the visible panel height: the list had no scroll window, so entries below the cutoff were unreachable with no indication anything was missing. The panel now windows around the cursor like the provider list and shows an ↑/↓ N more hint when rows are clipped (#8817).
• Fixed task and eval subagents discovering newly added agent definitions while resolving their role aliases from stale startup settings. Subagent preflight now atomically reloads persisted settings before agent discovery while preserving live runtime overrides.
• Fixed images returned by tools mounted under xd:// rendering only as file links instead of inline terminal graphics.
• Resume Cursor idle-stall turns after completed MCP/todo tool results. The watchdog already closes the Connect stream, so unmarked blocks no longer need the exec-resolved marker to continue.
• Fixed the Web Search Provider Order settings summary showing providers excluded from web search (#8884).
• Fixed subagents aborting when external thinking exposes think as the required prelude before their remaining tools become callable (#8909 by @olegpulatov).
• Fixed session-title generation ignoring user /skill:<name> invocations, so titles now see the skill name and args instead of only later assistant text.
• Fixed destructive rm escaping the critical-pattern approval check when anything separates the flags from the target, so rm -rf -- /, rm --recursive --force / and rm -rf --no-preserve-root / are now classified critical like rm -rf /. --no-preserve-root is treated as critical wherever it appears, since it is what defeats coreutils' own refusal to recurse on /.
• Fixed thinking-loop aborts (AIError.Flag.ThinkingLoop) walking retry.fallbackChains and switching to another model family on attempt 1, so a healthy planning turn on Grok 4.6 (SuperGrok / Cursor OAuth) no longer gets replaced by whatever the chain lists next. The loop guard now re-samples the same model with its thinking-loop-redirect notice, and no longer parks the model selector on a fallback cooldown. (#8760)
• Fixed the clipboard image-paste keybind attaching Finder's generated file icon instead of the copied image on macOS. Current Finder Cmd+C pasteboards advertise both a public.file-url and a generated 1024x1024 icon bitmap, so arboard::get_image() succeeded with the icon and InputController.handleImagePaste attached it before the file-URL branch was ever reached. The handler now probes readMacFileUrlsFromClipboard() before the bitmap representation, so an image file URL wins over the co-advertised icon; pure bitmap pasteboards (screenshots, browser copies) and non-image file URLs still fall through to the image/text paths (#8769).
• Fixed the Home Manager module (programs.omp.settings) breaking every launch on macOS with Failed to acquire native file lock … Permission denied (os error 13). The declared config is now copied into ~/.omp/agent/config.yml as a writable file via home.activation instead of a read-only /nix/store symlink, so OMP can acquire its config lock and persist runtime changes; home-manager switch still reapplies the declared settings (#8775).
• Fixed OpenCode MCP servers 401ing when config used OpenCode's {env:VAR}/{file:path} substitution (e.g. Bearer {env:MCP_KEY} headers); the OpenCode loader now expands those tokens the way OpenCode does instead of only ${VAR} (#8778).
• Fixed omp update leaking Bun's raw fetch() error ("pass verbose: true in the second argument to fetch()") when a proxy environment variable (HTTPS_PROXY, ALL_PROXY, …) uses an unsupported scheme such as SOCKS; the update check now reports an actionable message naming the offending variable and the http/https proxy requirement (#8784).
• Fixed worker subprocesses (memory embeddings, tiny-model titles, TTS/STT, JS eval, browser relay, LSP mux, daemon broker) running with their cwd pinned to the CLI install directory. They share the agent's foreground process group, and terminal cwd heuristics such as kitty's new_tab_with_cwd pick the newest process in that group, so new terminal tabs opened in ~/.bun/install/global/node_modules/@oh-my-pi/pi-coding-agent/dist while any worker was alive. Workers now spawn with the absolute host entry and inherit the agent's cwd.
• Preserved MCP ImageContent tool-result blocks so vision-capable models and the TUI can inspect returned images instead of receiving only a text placeholder (#8687).
• Fixed a whole-file read of a file with a UTF-8 BOM minting a hashline tag hashed from BOM-bearing text. Because the patcher's live read strips the BOM, the next edit to that file only applied through stale-hash recovery and reported that the file had changed externally when it had not.
• Extension bare imports of workspace members now resolve inside installed git-dependency monorepo plugins (the walk recognizes workspaces roots; installed node_modules copies still shadow members)
• Fixed omp completions <shell> hanging after writing shell completion scripts to stdout by invoking postmortem.quit(0) upon completion. Prevents lingering event loop handles (such as background timers or sockets loaded when inspecting command metadata) from pinning the process and blocking tools like chezmoi.
• Fixed omp --smoke-test recursively deleting unrelated directories in os.tmpdir() (tmux/ssh sockets, editor state, build trees). The smoke broker now keeps its runtime dir under a private parent, and the dead-scope reclaim refuses any root that is not the daemons container and only prunes entries named like a 16-hex daemon scope key (#8721).
• Fixed high CPU during multi-subagent / workflowz / orchestrate sessions: each live tool block (streaming args, a running partial tool, or a task subagent) armed its own 80ms spinner setInterval driving requestComponentRender, so N concurrent live blocks created N unsynchronized repaint timers that kept the render scheduler awake near-continuously. The per-block timers are now consolidated into a single shared spinner ticker that repaints every live block in one coalesced frame per glyph step, independent of block count (#8731).
• Fixed omp update writing to the PATH launcher instead of the running binary on binary-only releases (major bumps or omp.dist: "binary"): a foreign symlink — e.g. an admin symlink into a shared install — now resolves to its real binary in every distribution channel, avoiding an EACCES on a root-owned link directory or a split-brain copy that shadows the shared install. Package-manager launchers keep their deliberate in-place takeover. (#8732)
• Added .css to the built-in Biome server fileTypes so CSS files route through Biome's linter/asserter by default instead of requiring a full per-project fileTypes override. (#8741)
• Fixed memory extraction sending its instructions, few-shot examples, and the user's message as a single user turn, which caused small local models to echo the examples instead of extracting facts; instructions now travel as a system turn and the raw text as the user turn
• Fixed local title generation stopping on a stop string that appeared in the prompt instead of the generated tokens
• Fixed the Subagents HUD role display and restored generated task labels by keeping spawn handles separate from UI descriptions.
• Fixed models.yml custom-model providers declaring auth: oauth being rejected by validation with "apiKey is required", which forced a dummy apiKey that then shadowed the broker's OAuth tokens (#8937 by @usr-bin-roygbiv).
• Provider-qualified model selectors (e.g. anthropic/claude-opus-5) now fail closed when the named provider is unavailable instead of silently re-binding to OpenRouter's same-named flat id and billing the aggregator (#8832).
• Fixed PlanYolo plan approval dropping all MCP tools: the post-handoff tool restore now accounts for MCP discovery that completed while planning instead of restoring a pre-discovery snapshot.
• Fixed parallel web_search calls hanging forever past the 60s timeout when the shared headless-browser daemon or page died mid-setup; browser fallback setup and teardown are now abort-protected (#8865).
• Fixed extension-package .mcp.json ${VAR} env placeholders (stdio env/command/args/cwd, HTTP url/headers/oauth) reaching MCP servers unexpanded.
• Advisor blocker advisories raised inside the post-interrupt immune window now wake a new turn instead of parking as asides until the next user prompt.
• The exit banner only advertises omp --resume <id> when the session was actually written to disk, so the printed command no longer fails for sessions that ended before persistence (#8860).
• Fixed terminals that deliver Shift+Enter as a bare LF (or the legacy CSI 13;2~ form) getting a plain switch instead of summarize-and-switch in the /tree selector (#8821).
• Fixed OMP panicking at startup when the host environment contains a non-UTF-8 variable value; such entries are now skipped when copying the host environment into the shell (#8925).
• Fixed /mcp reauth refusing to run the OAuth flow for HTTP MCP servers that allow unauthenticated initialize but require auth for tools/call; endpoint discovery now runs against the server URL before giving up (#8922).

@oh-my-pi/collab-web

Fixed

• The ask tool card now renders the note the user attached to their answer; previously it was dropped from HTML exports and the collab guest view.

@oh-my-pi/pi-mnemopi

Added

• Added optional task metadata to the runtime LLM completion interface so hosts can tell an extraction call from a consolidation call and choose the matching prompt

@oh-my-pi/pi-natives

Changed

• enclosingBlockBoundaries and blockRangeAt now reuse a parsed tree-sitter tree when the same source and language were parsed before, and skip subtrees whose line span holds no visible line. Together these cut the block-context work the read tool performs on every non-raw read: for an 81KB TypeScript source with a mid-file window, 13.4ms to 4.45ms on a first parse and to 0.149ms once the tree is cached; for a 1.06MB source, 188.1ms to 55.8ms and to 0.440ms. The tree cache is bounded (12 entries, 4MiB of retained source) and verifies content byte-for-byte on every hit, so a hash collision can only cost a re-parse. The subtree skip is proven equivalent by differential comparison against the exhaustive walk across 4827 repository files and 38,616 window comparisons.

@oh-my-pi/snapcompact

Fixed

• Fixed image-based compaction confusing digit 0 with letter O and corrupting compacted identifiers (e.g. Slack IDs): the default frame fonts (X.org 8x13, 6x12, 5x8) drew zero as a bare oval indistinguishable from O. Zero now carries a disambiguating interior slash (8x13) or bar (6x12/5x8); unscii-8 already shipped a slashed zero (#8713).

@oh-my-pi/pi-tui

Fixed

• Fixed images rendering as the [Image: …] text card on SIXEL terminals that expose no identifying environment variable (foot, xterm, contour): the graphics probe no longer requires Windows Terminal, and no longer reads an XTSMGRAPHICS success reply as a failure.
• Fixed the multiline editor ignoring a tui.input.submit remap onto Ctrl+Enter: the hardcoded Ctrl/Shift+Enter → newline fallbacks now yield to an explicit submit binding, so Ctrl+Enter can be used to submit (#8906).

@oh-my-pi/pi-utils

Added

• Exported BINARY_SNIFF_BYTES, the header window isProbablyBinary sniffs, so a caller holding the whole file in memory can classify the identical prefix through isProbablyBinaryHeader instead of reopening the file.

What's Changed

• Preserve MCP tools across PlanYolo handoff by @nick-maderight in #8866
• fix(tui): render xdev tool images inline by @daandden in #8872
• fix(compaction): bound summarization input and stop retrying overflow by @PaleRoses in #8920
• fix(catalog): mark coreweave discovery authoritative by @dmontague-crwv in #8923
• fix: skip non-UTF-8 host env entries instead of panicking at startup by @STRML in #8928
• fix(catalog): register plain Codex route for worker -wm SKUs by @STRML in #8929
• fix(robomp): validate review comment anchors before submitting by @djdembeck in #8936
• fix(coding-agent): allow auth oauth without apiKey in models.yml by @usr-bin-roygbiv in #8937
• fix(mcp): preserve image tool results by @roboomp in #8688
• fix(snapcompact): disambiguate digit zero from letter O in frame fonts by @roboomp in #8715
• fix(pi-ai): honor onPayload replacement payloads in openai-completions, bedrock and cursor by @ranxianglei in #8717
• fix(ai): strip leaked ```thinking delimiters from Gemini thought summaries by @roboomp in #8722
• fix(launch): scope daemon prune to the daemons container by @roboomp in #8723
• fix(tui): detect SIXEL outside Windows Terminal by @shrimpza in #8724
• fix(agent): harden compaction summaries against prompt injection by @koopmannleon19977-cmyk in #8727
• fix(tui): consolidate live tool spinner timers into one shared ticker by @roboomp in #8733
• fix(ai): name selected provider in opencode login prompt by @roboomp in #8739
• fix(catalog): expose grok-4.6 thinking levels on xai-oauth by @Unravl in #8745
• fix(memory): separate extraction instructions from user input by @alphastorm in #8750
• fix(tiny): match title stop string against generated tokens only by @alphastorm in #8752
• fix(coding-agent): classify destructive rm with long options as critical by @ghosty-11 in #8753
• fix(auth): rotate when a ChatGPT account lacks the requested Codex model by @alphastorm in #8756
• fix(coding-agent): keep thinking-loop retries on the same model by @roboomp in #8761
• fix(ai): encode empty successful tool_result content as empty string by @pgagarinov in #8768
• fix(tui): prefer macOS file URL over Finder icon bitmap on image paste by @roboomp in #8770
• fix(ai): honor Fable/Mythos tier usage in usage-reserve health by @roboomp in #8774
• fix(nix): install writable home-manager config instead of store symlink by @roboomp in #8776
• fix(discovery): expand OpenCode {env:} and {file:} config tokens by @roboomp in #8781
• fix(update): surface actionable message for unsupported proxy schemes by @roboomp in #8785
• fix(collab-web): render the user-added note in ask tool cards by @Liangzhi233 in #8786
• fix(tests): stop ANTHROPIC_BASE_URL from failing the Anthropic suites by @Huang-404-Q in #8795
• fix(tui): show subagent role and generate real HUD labels by @atacolak in #8797
• fix(tests): stop the checkout location and system zshrc from failing tests by @Huang-404-Q in #8799
• fix(tests): isolate TUI scrollback tests from terminal multiplexers by @Huang-404-Q in #8806
• fix(ai): accept Perplexity OTP challenge token by @onsails in #8819
• fix: resolve workspace-member imports in installed git-dep monorepo plugins by @sjawhar in #8826
• fix(ai): answer Cursor hosted WebFetch permission queries by @Unravl in #8830
• fix: provider-qualified model selectors fail closed instead of shadowing to OpenRouter by @STRML in #8833
• perf(pi-ast): cache parsed trees and prune subtrees that cannot hold a boundary by @alphastorm in #8848
• perf(read): materialize a local file once per read by @alphastorm in #8849
• fix(catalog): add deepseek-v4-pro-0813 discovery limits by @tommyldev in #8852
• fix(discovery): honor Claude Code enabledPlugins for marketplace plugins by @drycode in #8857
• fix(task): refresh model roles before agent discovery by @z80dev in #8864
• fix(catalog): map aliased Gemini Flash minimal to LOW on Cloud Code Assist by @audreyt in #8871
• fix(web-search): abort-protect browser fallback setup and teardown by @kimono381 in #8879
• fix(coding-agent): stop pinning worker subprocess cwd to the install dir by @chuzui in #8883
• fix(cursor): answer interactionQuery and resume idle-stall MCP turns by @bnivanov in #8889
• fix(discovery): expand extension-package MCP env placeholders by @drycode in #8903
• Advisor blocker advisories wake a new turn instead of parking in the immune window by @STRML in #8905
• fix(coding-agent): condition think prelude guidance for subagents by @olegpulatov in #8909
• fix(session): generate titles from /skill invocation args by @qiyi71w in #8911
• fix(session): only advertise --resume when the session is on disk by @re2zero in #8915
• fix(tui): treat bare LF as Shift+Enter in the /tree selector by @re2zero in #8916
• fix(sdk): accept flattened array argument paths from providers by @re2zero in #8917
• fix(cli): exit cleanly after printing shell completions by @czchen in #8704
• fix(compaction): honor /clear reset boundary in prepareCompaction by @roboomp in #8720
• fix(coding-agent): resolve update target from the running binary, not the PATH launcher by @roboomp in #8734
• fix(task): initialize extension runtime on subagent revival by @roboomp in #8966
• docs: clarify bash.patterns gates the bash tool only, not eval by @roboomp in #8967
• fix(ai): hoist assistant message interleaved in responses tool batch by @roboomp in #8968
• fix(tui): pin anchored regions under an unpinned streaming seam by @roboomp in #8970
• fix(ai): surface litellm concurrency-admission 429 immediately by @roboomp in #8973
• fix(catalog): self-heal a corrupt models.db model cache by @roboomp in #8975
• fix(commit): fail loudly when staged binary truncates split-commit diff by @roboomp in #8976
• fix(tui): honor tui.input.submit remap onto ctrl+enter by @roboomp in #8977
• fix(compaction): reject stale pre-compaction anchor in context breakdown by @roboomp in #8978
• fix(coding-agent): paint optimistic row for idle /skill submits by @roboomp in #8979
• fix(catalog): route opencode-go muse-spark to responses api by @roboomp in #8980
• fix(catalog): route copilot grok-4.6 through responses api by @roboomp in #8981
• fix(ai): serve IPv4-only OAuth callback when IPv6 is disabled by @roboomp in #8982
• fix(mcp): refresh broker-backed MCP OAuth credentials by @roboomp in #8983
• fix(sdk): thread response model into after_provider_response context by @roboomp in #8985
• fix(coding-agent): honor lang: directive in TinyFish search by @roboomp in #8986
• fix(catalog): collapse Cursor Grok 4.5/4.6 effort siblings by @roboomp in #8988
• fix(tui): scroll the /model Roles view so clipped rows stay reachable by @roboomp in #8990
• fix(catalog): recover gmi-cloud model params from canonical index by @roboomp in #8991
• fix(commit): preserve binary patch terminators in split-commit round-trip by @roboomp in #8993
• fix(cli): strip launch-global flags before non-launch subcommands by @roboomp in #8995

New Contributors

• @nick-maderight made their first contribution in #8866
• @PaleRoses made their first contribution in #8920
• @dmontague-crwv made their first contribution in #8923
• @STRML made their first contribution in #8928
• @ranxianglei made their first contribution in #8717
• @shrimpza made their first contribution in #8724
• @Unravl made their first contribution in #8745
• @ghosty-11 made their first contribution in #8753
• @pgagarinov made their first contribution in #8768
• @Liangzhi233 made their first contribution in #8786
• @Huang-404-Q made their first contribution in #8795
• @onsails made their first contribution in #8819
• @sjawhar made their first contribution in #8826
• @tommyldev made their first contribution in #8852
• @drycode made their first contribution in #8857
• @kimono381 made their first contribution in #8879
• @chuzui made their first contribution in #8883
• @bnivanov made their first contribution in #8889
• @qiyi71w made their first contribution in #8911
• @czchen made their first contribution in #8704

Full Changelog: v17.3.7...v17.3.8

@oh-my-pi/pi-agent-core

Breaking Changes

• Replaced global token counting functions (countTokens, countTokensConservatively, setTokenizerModel, and estimateTokens) with model-scoped, immutable Tokenizer instances (agent.tokenizer). Use tokenizer.countTokens(text, mode?), tokenizer.countMessage(message), or tokenizer.countMessages(messages).
• Updated context management functions (findCutPoint, prepareBranchEntries, collectShakeRegions, pruneToolOutputs, pruneSupersededToolResults, and trimRemoteCompactionInputToContextWindow) to require an explicit Tokenizer instance.

Added

• Added Tokenizer.checkTokenBudget(text, budget) to efficiently verify if text fits within a token limit using fast byte-bound checks before falling back to full tokenization.
• Added provider-anchored transcript token estimation (findTranscriptUsageAnchor, isTranscriptUsageAnchor, estimateTranscriptTokens) to calculate transcript token counts incrementally from the latest reported assistant turn usage.
• Added remotePreserveReusable() to check whether a previous remote compaction payload remains reusable with the active model.

Changed

• Expanded native tokenizer support across catalog models, adding exact embedded token counting for Claude, Qwen 3.5+, DeepSeek V3/V4/R1, Kimi K2/K3, and GLM-5+ models. Tokenizer now constructs from a resolved catalog Model.
• createCompactionSummaryMessage takes an options object after (summary, tokensBefore, timestamp); CompactionSummaryMessage gained optional method and tokensAfter display metadata.

@oh-my-pi/pi-ai

Added

• Added model metadata fields (context_length, max_output_tokens, input_modalities, etc.) to auth gateway model listing responses

Fixed

• Fixed tool-argument repair applying lossy transformations (such as stringifying objects or stripping unrecognized keys) when validating union schemas (anyOf/oneOf), preventing corrupted tool call and subagent payloads
• Fixed 400 errors when communicating with local OpenAI-compatible inference servers that reject chat_template_kwargs.reasoning_effort by improving reasoning effort parameter fallback and compatibility handling
• Fixed DeepSeek-family models on hosts like Fireworks losing reasoning whenever tools were offered: a redundant tool_choice: "auto" is now omitted so the provider keeps thinking enabled; forced and "none" selectors still take priority (#1207)

@oh-my-pi/pi-catalog

Added

• Models now include an optional tokenizer family field across bundled, discovered, and custom models (supporting Claude, Qwen, DeepSeek, Kimi, and GLM families), with support for explicit overrides in model configuration.
• Added long-context cost tiers (cost.longContext) to subscription Codex GPT-5.6 models (Sol, Terra, Luna) matching first-party API pricing above 272K input tokens.

Changed

• Bundled model metadata is prebuilt during generation, reducing catalog startup work.

Fixed

• Fixed tool-call turn failures for opencode-go/muse-spark-1.2 and related variants by ensuring API transport pins apply to live discovery and automatically inferring response routes for gateway-first OpenCode models (#8957).

@oh-my-pi/pi-coding-agent

Added

• /cleanse (and omp cleanse) — run the checker/repair loop in-session, with a live status board of running checkers, repair subagents, and token/cost totals.
• omp ps — interactive monitor for daemon-supervised background processes.
• Composer layouts — composer.shape picks the editor frame (rounded box, Claude Code rules, upstream-pi rules, borderless), with live previews in /settings and the setup wizard.
• Context line — statusLine.contextLine gauge (percentage, annotated, embedded) showing context usage and compaction boundaries.
• Backgroundable Python — eval cells can run async and auto-background like bash, with configurable thresholds.
• Local Claude token counting — Anthropic-family tokens now count via a native local tokenizer, and every counter (session maintenance, advisor, stats, context tools) uses the active model's own tokenizer.
• extendedContext setting — pick whether models with premium long-context pricing (272K/1M tiers on Codex-class models) use the extended window or compact early and stay on standard pricing.
• /extended-context — toggle premium long-context windows without leaving the session.
• Speculative compaction — with compaction.asyncEnabled, all compaction modes compact in parallel while the session continues, then splice the result in instantly.
• tokenizer property on custom models and modelOverrides to pin the tokenizer family for proxy models.
• qwenTemplateReasoningEffort in models.yml compat to disable the Qwen 3.8+ reasoning-effort template parameter for strict local servers.
• Click-to-toggle and drag-to-reorder for list-valued editors in /settings.
• icon.subscription and icon.advisor symbol-theme tokens (Nerd Font, Unicode, ASCII).

Changed

• Typing anywhere in the /models UI now immediately focuses the model list for instant search and arrow navigation.
• Revamped the todo HUD — overall progress renders along the tree-spine connector with smooth completion transitions.
• Compaction divider now names the maintenance method that fired (remote-compacted, soft-compacted, handed-off, snap-compacted) and shows the before → after context size (e.g. 256K→20K).
• /handoff (and automatic handoff compaction) now compacts in place, replacing the session context instead of forking a new session.
• Compaction method priorities — compaction.methodOrder takes an ordered preference list (e.g. [remote, snap] uses remote compaction where the provider supports it, such as OpenAI, and snap everywhere else), replacing compaction.strategy/compaction.remoteEnabled.
• Unified inline overlays and selectors (model picker, settings, /cleanse) into one titled rounded-box panel style.
• Risk badges and warnings on /settings rows, starting with External Thinking.
• Faster CLI Startup

Fixed

• /models keeps auto thinking on non-default roles such as task instead of changing the active model and displaying the role as max.
• Subagent yield structured results no longer get corrupted by lossy argument repairs; prompt guidance improved for weak callers.
• GitHub file_read returns proper image blocks and direct view URLs for image/binary files.
• Cancelled prompts during pre-stream turn setup restore the text and image attachments to the editor.
• top builtin accepts single-dash macOS flags such as -pid and -stats.
• GNU/BSD compat sweep across built-in shell utilities (timeout, diff, find, date, tail, head, rg, stat, truncate, cksum, sleep, which, nohup, kill).

@oh-my-pi/hashline

Added

• Added an opener-escape landing correction for insertions anchored on a construct's opening line to place shallower sibling constructs after the enclosing block rather than splitting the opener from its body.

Fixed

• Fixed an issue where single-line replacements echoing attributes or decorators (such as #[napi] or @Injectable()) could lead to silently duplicated annotations.
• Increased the default snapshot-store path capacity from 30 to 256 to prevent early tags in wide sessions from aging out and triggering misleading "hash is not from this session" errors.

@oh-my-pi/pi-natives

Added

• Added offline countTokens support for Anthropic Claude families (ClaudeV3, ClaudeV47, ClaudeV5) via a high-performance native port of ctok.
• Added exact offline token counting support for Qwen (3.5+, 3.6+, 3.8), DeepSeek (V3, V4, R1), Kimi (K2, K3), and GLM-5 models alongside rebuilt OpenAI encodings, with optimized zero-allocation string passing from JavaScript.
• Added nodeChainAt native API to retrieve innermost-first tree-sitter node chains with grammar kinds and line spans for structural syntax analysis.

Changed

• Improved shell builtins (grep, rg, sed, cat, head, tail, jq, ls, etc.) to stream output progressively with destination-aware line buffering for pipes, terminals, and live TUI output, while maintaining block buffering for file writes.
• Updated compound blocks ({ ...; }, (...)) and shell-function pipeline stages to run concurrently with other pipeline stages, preventing head-of-line blocking and pipe buffer deadlocks.

Fixed

• Fixed the shell output minimizer dropping failure details from non-TTY bun test runs: the (fail) line, code frame, error: assertion, and stack trace are now kept instead of collapsing a failing run to bare pass/fail counts; unrecognized failing test formats now fall back to head/tail instead of counts-only output.

@oh-my-pi/omp-stats

Changed

• Window token estimates now incorporate broker-reported fleet token burn when an auth broker is configured, accurately tracking fleet-wide usage instead of undercounting with local-only statistics.

Fixed

• Fixed an issue in subscription-window insights where distinct limits sharing a duration label (such as Anthropic overall vs. model-scoped 7-day windows) were incorrectly merged, which inflated window-equivalents and skewed tokens-per-window estimates. Windows are now grouped by provider limit ID.

@oh-my-pi/pi-tui

Added

• Added composer border styles (box, claude, pi, borderless) via ComposerStyle objects and getComposerStyle, unifying chrome geometry and rendering across the editor and previews.
• Added support for warning risk notes and row markers in settings lists.

Full Changelog: v17.3.8...v17.4.0

@oh-my-pi/pi-agent-core

Fixed

• Fixed Codex remote compaction requests failing for region-pinned enterprise ChatGPT workspaces when requests egress from a different region.

@oh-my-pi/pi-ai

Added

• Added Codex Responses support for Code Mode, preserving tool modes and passing tool namespace metadata during sessions.

Fixed

• Fixed OpenAI Codex requests failing with HTTP 401 data residency errors on enterprise ChatGPT workspaces when connecting from a different region via VPN or proxy.
• Fixed concurrent xAI OAuth token refreshes revoking shared credentials across multiple processes.
• Fixed Amazon Bedrock Converse multi-turn conversations failing on models like Amazon Nova due to unsigned reasoning content in replayed turns.
• Fixed Antigravity OAuth login handling for project discovery and free-tier onboarding against Cloud Code Assist endpoints.
• Fixed provider-detected OAuth access token expiration terminating active turns instead of automatically refreshing credentials and replaying the request.
• Fixed compatibility issues with OpenAI-compatible servers (such as NInfer and vLLM) rejecting reasoning_effort inside chat_template_kwargs.
• Fixed Google Cloud Code Assist and Antigravity rejecting MCP tool schemas with unsupported annotations (x-mcp-header, deprecated, readOnly, writeOnly, $comment).
• Fixed Cursor provider issues with native file edit streaming (editToolCall) and ensuring always-apply system rules are properly preserved.
• Fixed Cursor HTTP/2 requests ignoring standard proxy environment variables (HTTP_PROXY, HTTPS_PROXY, ALL_PROXY, NO_PROXY).

@oh-my-pi/pi-catalog

Added

• Added helper functions and constants for reading enterprise ChatGPT workspace data-residency regions from Codex OAuth access tokens and forwarding the residency header to Codex backend endpoints.

Changed

• Preserved API-advertised tool_mode metadata (such as code_mode_only for GPT-5.6 Code Mode models) on Codex catalog models and types (#9069).
• Added an optional tokenizer family field across bundled, discovered, and custom catalog models (claude-v3/v47/v5, Qwen 3.5+, DeepSeek V3/V4/R1, Kimi K2/K3, and GLM-5+), which can also be explicitly overridden in model configuration.
• Updated subscription Codex GPT-5.6 Sol, Terra, and Luna models to include first-party cost.longContext pricing tiers for token inputs exceeding 272K tokens.

Fixed

• Fixed Vercel AI Gateway Muse Spark 1.2 Contributor requests failing with HTTP 400 errors by capping advertised output allowances to the model's 131K limit.
• Fixed LiteLLM model discovery to route OpenAI models through the Responses API for reasoning summaries in thinking blocks (#9085).
• Fixed OpenCode Console Go and Zen Responses providers rejecting forced tool choices by automatically downgrading forced or named tool selections to auto.
• Fixed OpenCode Go Muse Spark 1.2 and Muse Spark 1.2 Contributor models failing during tool calls or missing reasoning effort levels, ensuring they correctly route to the Responses API with full thinking, context, and multimodal support (#8957).
• Improved OpenCode gateway model discovery to automatically infer the Responses API route for unlisted models from sibling gateways and billing base variants.
• Fixed Cursor GPT-5.6 (Luna, Sol, and Terra) model discovery creating duplicate rows for each thinking tier by collapsing tiers into unified models with configurable reasoning effort (#9025).
• Fixed Google Gemini CLI model discovery failing with 403 PERMISSION_DENIED by directing catalog refresh requests to the appropriate Antigravity discovery endpoints (#8885).

@oh-my-pi/pi-coding-agent

Added

• Added PERSONALITY.md support: ~/.omp/agent/PERSONALITY.md (profile/XDG-aware agent dir) replaces the system prompt's personality block text; personality: none still omits the block (#8528)
• Sloppy edits now support inline replacements with ⟪old│new⟫ syntax (⟪old│⟫ for deletions and ⟪│new⟫ for insertions), alongside automatic recovery for common formatting mistakes without needing a retry.
• Sloppy edits now recover operations that mix ⟪old│new⟫ inline replacements with a » REWRITE instead of failing the payload: a redundant REWRITE is dropped, a diverging one is applied as the final text, and a note explains the interpretation.
• Expanded archive support in read and write tools: read can now inspect and extract members from .rar, .7z, .iso, .cab, .deb, .rpm, .cpio, .ar/.a, .lzh, .arj, compressed tar files (.tar.bz2, .tar.xz, .tar.zst), package formats (.whl, .ipa, .xpi, .vsix, .nupkg, .cbz, .cbr), .asar archives, and single-file compressed streams; write can create .tar.zst and update .asar archives.
• Added Code Mode for Codex code_mode_only models via providers.openai-codex.codeMode (off/on/auto), demoting non-essential tools into an eval bridge with generated TypeScript definitions.
• MCP tool names longer than 64 characters are now automatically truncated with a deterministic hash suffix to comply with strict provider validators.
• Marketplace-installed plugins with manifest settings can now be configured through omp plugin config and Settings → Plugins.
• Configured discovery providers with authHeader now preserve cached models across application restarts.
• Added repeat read warning hints when identical file content is read multiple times.
• Explicit DAP adapters can now attach without a PID or port when attachDefaults provide the target arguments.
• Added isProjectTrusted() compatibility shim to ExtensionContext for extensions targeting upstream per-directory trust gates.

Changed

• Added compaction.asyncEnabled (default: on) to speculatively summarize context in the background before hitting threshold limits, avoiding blocking summarization pauses.
• Replaced compaction.strategy and compaction.remoteEnabled with an ordered compaction.methodOrder preference list.
• Handoff maintenance (/handoff and automatic handoff compaction) now commits generated summaries directly to the active session instead of starting a new session.
• Added extendedContext setting (/settings → Context → General, default: on) to optionally clamp models with premium long-context pricing tiers (such as OpenAI GPT-5.6 Sol/Terra/Luna) to standard-pricing token limits before compaction triggers.
• Token counting and token estimations are now dynamically scoped to each specific model tokenizer rather than using a single process-global tokenizer.
• omp cleanse and /cleanse now feature a live interactive status board displaying active checkers, repair subagents, tool metrics, and token/cost totals in real time.
• Eval-bridge nested tool.<name>() calls now enforce ACP permission gates and tool allowlists identically to direct tool calls.
• Added tokenizer option to custom models and modelOverrides to allow overriding the local tokenizer family for proxied model endpoints.
• Added qwenTemplateReasoningEffort to the models.yml compat schema to configure or disable reasoning effort flags for strict local inference servers.
• Settings menus now support click-to-toggle and drag-to-reorder for list items, as well as warning indicators and risk notes on sensitive options such as External Thinking.
• Supervised process completion notices now render as compact single-line entries.
• The todo HUD header now displays a consolidated progress bar showing task completion across all stages.
• /settings rows can now carry a risk note: a warning glyph on the row plus a warning-colored line above the description. External Thinking (externalThinking, --external-thinking) is the first user — providers have flagged the request shape it produces as abuse, up to account-level enforcement, so both the settings entry and --help now say so.

Fixed

• Fixed regional HTTP 401 data-residency errors during Codex chat, web search, and image generation requests by passing token residency metadata on requests.
• Fixed macOS SSH ControlMaster socket creation failures caused by sun_path length limits when using named profiles.
• Fixed an issue where Nix-packaged builds failed to load on-demand native addons (onnxruntime-node/sherpa-onnx) due to missing shared C++ runtime library paths.
• Fixed external editor spawning (Ctrl+G, plan review, /todo edit) failing to attach to visible terminals for editors like emacsclient.
• Fixed omp --resume spinning at 100% CPU when new session entries arrived during initial transcript rendering.
• Fixed session resume hints and fatal exit messages omitting the active --profile argument.
• Fixed MCP OAuth authorization requests failing on pre-registered clients with restricted scopes by using RFC 9728 scopes_supported.
• Fixed isolated task subagents causing out-of-memory crashes on repositories with large uncommitted binary files by pre-sizing diffs and enforcing snapshot limits.
• Fixed LM Studio and lazy-loaded local models retaining uninitialized context lengths by re-probing loaded context lengths after initial inference.
• Fixed project-scoped Claude Code marketplace plugins incorrectly loading into sessions in other projects.
• Fixed configured advisors backed by discoverable providers remaining inactive on initial session startup until manually toggled.
• Fixed resolving --model @<role> failing for roles backed by discovery providers like oMLX, Ollama, and llama-swap.
• Fixed retry fallback chains stopping prematurely when encountering nested fallback configurations, and fixed session role priority during fallback chain selection.
• Fixed cancelled prompts disappearing upon abort during turn setup, properly restoring user text and attachments to the input editor.
• Fixed built-in shell utilities (grep, rg, diff, find, timeout, top, date, head, tail, stat, truncate, kill) across numerous POSIX/GNU/BSD compatibility edge cases and early-pipeline SIGPIPE handling.
• Fixed Cursor sessions missing standard string-replacement edit tooling after server tool injection.
• Fixed hub wait duplicating frozen rows into native scrollback during viewport overflow.
• Fixed dark-theme contrast issues on markdown code-fence headers.
• Fixed prompt guidance and descriptions for Task tools and SSH usage.
• ACP editor clients that support elicitation forms (Zed) can now use ask, so the agent can pose single-choice, multi-select, and free-text questions inline instead of guessing.
• /retry and /handoff now work over ACP, so editor clients (Zed) list them and can run them instead of sending the text to the model.
• Added qwenTemplateReasoningEffort to the models.yml compat schema, so the auto-enabled Qwen 3.8+ template effort dialect (chat_template_kwargs.reasoning_effort) can be switched off per provider/model for strict local servers that reject unknown chat_template_kwargs.
• Extensions can provide a normalized usage provider through pi.registerProvider(). Its reports now flow through AuthStorage caching, history, and usage displays, and the override is removed when the extension provider is unregistered.

@oh-my-pi/pi-natives

Changed

• bun run build:native now builds through the local cargo/napi-rs backend by default, with Bazel available as an opt-in via OMP_NATIVE_BUILD_BACKEND=bazel or extra Bazel arguments after --.

@oh-my-pi/snapcompact

Added

• Restored providerFrameBudget() to allow callers to size archives according to the maximum frame budget the provider will send.

Fixed

• Fixed an issue where character-based truncation could split inline base64 data URLs into corrupted payloads that were rejected by OpenAI-compatible providers. Data URLs are now replaced atomically with placeholders before truncation, and previously affected archives are healed during re-compaction.

@oh-my-pi/pi-tui

Added

• Added optional getNativeScrollbackLiveRegionPinnedStart() hook to allow nested transcripts to pin a later dashboard without shifting the earliest live seam.

@oh-my-pi/pi-utils

Added

• New unified archive API @oh-my-pi/pi-utils/ar, providing an openArchive/ArchiveReader interface across formats (including ZIP/ZIP64, tar with gz/bz2/xz/zst compression, ASAR, RAR 4/5, 7z, ISO 9660, CAB, cpio, RPM, Unix ar, Debian packages, LZH, ARJ, and single-stream compressed files) with lazy ranged reads for local files or HTTP range requests via httpByteSource, size limits, symlink-safe extraction, and deterministic archive creation for zip, tar, tar.gz, tar.zst, and asar.

What's Changed

• fix(task): bound isolation baseline capture to avoid host OOM by @roboomp in #8992
• fix(retry): reach a fallback model's own chain instead of burning the budget on it by @STRML in #9000
• fix(providers): refresh LM Studio runtime context after JIT load by @roboomp in #9002
• fix(extensions): expose project trust to improve extension compatibility by @CallumWayve in #9007
• fix(advisor): activate enabled advisor after model discovery settles by @roboomp in #9014
• fix(ai): strip MCP x-mcp-header annotation from Google/CCA schema by @roboomp in #9017
• fix(cli): include active profile in session resume hint by @roboomp in #9020
• fix(catalog): collapse cursor gpt-5.6 effort siblings by @roboomp in #9026
• fix(ai): retry provider-requested OAuth refresh by @usr-bin-roygbiv in #9038
• feat(acp): expose the ask tool through elicitation forms by @joseotaviorf in #9042
• fix(discovery): isolate Claude project plugins by @roboomp in #9044
• fix(tools): correct SSH guidance tool names by @MikeeI in #9045
• fix(coding-agent): clarify task spawn-policy defaults by @MikeeI in #9046
• fix(coding-agent): correct task overlap guidance by @MikeeI in #9047
• fix(catalog): correct gemini cli discovery endpoint by @roboomp in #9051
• fix(pi-builtins): accept pgrep -q on linux by @szavadsky in #9055
• fix(natives): cover prompt-or-granted desktop permission state by @szavadsky in #9056
• fix(cursor): honor standard proxy env vars on the HTTP/2 run path by @roboomp in #9059
• fix(catalog): disable forced tool choice for OpenCode Responses by @bchap1n in #9060
• fix: cap snapcompact frames at the provider image budget by @Thytu in #9061
• fix(snapcompact): elide inline base64 data URLs before truncation by @oshinop in #9066
• fix(ssh): bound control-path under sun_path for macOS profiles by @roboomp in #9072
• fix(coding-agent): restore inherit stdio for external editor by @roboomp in #9079
• feat(acp): expose /retry and /handoff over ACP by @joseotaviorf in #9081
• fix(catalog): route LiteLLM OpenAI models through Responses by @jbkkd in #9085
• fix(ai): never resend unsigned Bedrock reasoning content on replay by @acomito in #9086
• fix(nix): preload libstdc++ so runtime-downloaded addons load on NixOS by @lz37 in #9091
• fix(auth): stop concurrent xAI OAuth refresh replay by @roboomp in #9093
• docs(context-files): document disabling a single context file by @Honza-Jelinek in #9097
• fix(mcp): prefer RFC 9728 resource scopes over auth-server catalogue by @roboomp in #9100
• fix(tui): bound the resume transcript replay restart loop to stop 100% CPU livelock on --resume by @Mustaqeem66 in #9101
• fix(dap): support preattached GDB remote adapters by @CoffeeImpliesCode in #9107
• fix(plugins): expose marketplace plugin settings by @roboomp in #9109
• fix(catalog): cap Vercel Muse Spark contributor output tokens by @jnyross in #9115
• fix(models): restore auth headers for discovery cache by @roboomp in #9117
• fix(theme): make markdown code fence borders legible on dark themes by @Mustaqeem66 in #9118
• fix(tui): stop hub wait from smearing job rows into scrollback by @shentry in #9121
• fix(nix): give dlopen'd ONNX addons a libstdc++ path by @labi-le in #9127
• fix(ai/providers): declare Codex workspace data residency from token claims by @DusKing1 in #9128
• fix(lsp): hard wall-clock bound on per-server diagnostics pipeline (edit tool hang) by @Mustaqeem66 in #9129
• fix(mcp): cap minted tool names at 64 chars by @roboomp in #9131
• fix: heal Qwen XML tool-call markup by @jzupnick in #8945
• fix(ai): execute Cursor native StrReplace editToolCall by @eggpeat in #8946
• fix(coding-agent): preserve shell operators after internal URLs by @sundbp in #8959
• fix(advisor): defer in-progress non-blocker advice instead of dropping it by @barthazian in #8960
• fix(tui): stop scrollback row loss across mux height-only resizes by @ephraimduncan in #8961
• fix(sdk): refresh discoverable providers for deferred role aliases by @roboomp in #8972
• fix(coding-agent): stop shared-role yaml order stealing retry fallback by @atacolak in #8984
• fix(ai): strip deprecated/readOnly/writeOnly/$comment annotation keywords from CCA/Google tool schemas by @daviddatuX25 in #8994
• fix(ai): forward OMP system prompts on Cursor requestContext.rules by @atacolak in #8997
• fix(catalog): recover opencode-go muse-spark thinking levels by @Unravl in #8999
• feat(coding-agent): support extension usage providers by @CallumWayve in #9006
• fix(ci): fetch crates before the offline cargo-deny check by @svperfecta in #9156

New Contributors

• @CallumWayve made their first contribution in #9007
• @bchap1n made their first contribution in #9060
• @oshinop made their first contribution in #9066
• @jbkkd made their first contribution in #9085
• @acomito made their first contribution in #9086
• @lz37 made their first contribution in #9091
• @Honza-Jelinek made their first contribution in #9097
• @CoffeeImpliesCode made their first contribution in #9107
• @jnyross made their first contribution in #9115
• @shentry made their first contribution in #9121
• @labi-le made their first contribution in #9127
• @DusKing1 made their first contribution in #9128
• @jzupnick made their first contribution in #8945
• @barthazian made their first contribution in #8960
• @daviddatuX25 made their first contribution in #8994

Full Changelog: v17.4.0...v17.4.1

Publish Packages