@code-yeongyu/senpi 2026.7.23 → 2026.7.25-2

package/CHANGELOG.md

@@ -1,5 +1,163 @@
 # Changelog
 
+## [2026.7.25-2] - 2026-07-25
+
+### New Features
+
+- **Claude Opus 5** — Available on Anthropic and Amazon Bedrock with adaptive thinking (including `xhigh`), inference profiles, and prompt caching. See [Providers](docs/providers.md#api-keys).
+- **Anthropic gateway bearer auth** — `ANTHROPIC_AUTH_TOKEN` authenticates against Anthropic-compatible gateways that require `Authorization: Bearer`, including compaction and branch summaries. See [Environment Variables or Auth File](docs/providers.md#environment-variables-or-auth-file).
+- **Faster, more resilient model catalogs** — pi.dev catalogs revalidate with `If-None-Match` so unchanged providers answer with an empty `304`, and llama.cpp models stay listed across restarts. See [llama.cpp](docs/llama-cpp.md).
+
+### Breaking Changes
+
+### Added
+
+- Exposed the `outputPad` setting to custom message renderers. See [Extensions](docs/extensions.md) ([#7045](https://github.com/earendil-works/pi/pull/7045) by [@xl0](https://github.com/xl0)).
+- Added inherited `ANTHROPIC_AUTH_TOKEN` bearer authentication for Anthropic-compatible gateways. See [Providers](docs/providers.md#environment-variables-or-auth-file) ([#5871](https://github.com/earendil-works/pi/issues/5871)).
+- Added inherited Claude Opus 5 support for Anthropic and Amazon Bedrock with adaptive thinking, inference profiles, prompt caching, and preserved AWS validation messages ([#7081](https://github.com/earendil-works/pi/pull/7081) by [@unexge](https://github.com/unexge), [#7083](https://github.com/earendil-works/pi/pull/7083) by [@davidbrai](https://github.com/davidbrai)).
+
+### Changed
+
+- Changed pi.dev model catalog refreshes to revalidate with `If-None-Match`, so unchanged provider catalogs answer with an empty `304` instead of a full download.
+- Changed inherited Radius OAuth device authorization, token exchange, and refresh requests to use the configured gateway directly.
+- Changed inherited model loading errors to append the underlying cause, so auth failures such as `OAuth refresh failed for openai-codex` report the provider response instead of a bare wrapper message.
+
+### Fixed
+
+- Fixed startup context file discovery to skip directories that match context file names such as `AGENTS.md`, which produced `EISDIR` warnings ([#7106](https://github.com/earendil-works/pi/pull/7106) by [@mrexodia](https://github.com/mrexodia)).
+- Fixed the llama.cpp extension to persist its model catalog, so llama.cpp models stay listed before the first successful refresh. See [llama.cpp](docs/llama-cpp.md) ([#7072](https://github.com/earendil-works/pi/pull/7072) by [@davidbrai](https://github.com/davidbrai)).
+
+### Removed
+
+## [2026.7.25] - 2026-07-25
+
+### Breaking Changes
+
+### Added
+
+### Changed
+
+### Fixed
+
+- Fixed npm installs on non-Linux x64 platforms by keeping platform-constrained native packages out of bundled dependencies ([#343](https://github.com/code-yeongyu/senpi/pull/343) by [@realsigridjin](https://github.com/realsigridjin)).
+
+### Removed
+
+## [2026.7.24] - 2026-07-24
+
+### Breaking Changes
+
+### Added
+
+### Changed
+
+### Fixed
+
+- Fixed compaction and branch summaries for providers whose authentication resolves entirely to request headers ([#5871](https://github.com/earendil-works/pi/issues/5871))
+
+### Removed
+
+## [0.82.0] - 2026-07-24
+
+### New Features
+
+- **Constrained tool sampling** — Tools can prefer or require strict JSON Schema sampling or use OpenAI Lark/regex grammars, with model capability metadata preventing unsupported requests. See [Constrained Sampling for Tools](../ai/README.md#constrained-sampling-for-tools).
+- **OpenRouter and Kimi Code sign-in** — Use `/login` to authorize OpenRouter or a Kimi Code subscription without manually configuring API keys. See [OpenRouter](docs/providers.md#openrouter).
+- **Session-aware, streaming bash integrations** — Bash tools receive current session/model metadata, while direct RPC bash commands stream correlated output. See [Bash Tool Session Environment](docs/environment-variables.md#bash-tool-session-environment) and [RPC bash events](docs/rpc.md#bash_execution_update).
+
+### Added
+
+- Added inherited `Tool.constrainedSampling` with strict JSON Schema (`prefer`/`require`) and OpenAI Lark/regex grammar variants across OpenAI, Anthropic, Amazon Bedrock, Google Gemini, and Mistral. See [Constrained Sampling for Tools](../ai/README.md#constrained-sampling-for-tools).
+- Added inherited `supportsGrammarTools` and `supportsStrictTools` compatibility flags, expanded `supportsStrictMode` coverage, and generated model capability metadata to gate constrained sampling.
+- Added inherited Kimi Code subscription OAuth login for the Kimi For Coding provider, including device authorization and automatic token refresh ([#6935](https://github.com/earendil-works/pi/pull/6935) by [@zaycruz](https://github.com/zaycruz)).
+- Added inherited OpenRouter OAuth PKCE login through `/login`, minting a user-controlled API key. See [OpenRouter](docs/providers.md#openrouter) ([#6927](https://github.com/earendil-works/pi/pull/6927) by [@rsaryev](https://github.com/rsaryev)).
+- Exposed `PI_SESSION_ID`, `PI_SESSION_FILE`, `PI_PROVIDER`, `PI_MODEL`, and `PI_REASONING_LEVEL` to commands run by built-in and factory-created bash tools. See [Bash Tool Session Environment](docs/environment-variables.md#bash-tool-session-environment).
+- Added streaming `bash_execution_update` events for direct RPC bash commands, correlated with request IDs. See [RPC bash events](docs/rpc.md#bash_execution_update) ([#6971](https://github.com/earendil-works/pi/pull/6971) by [@ananthakumaran](https://github.com/ananthakumaran)).
+
+### Changed
+
+- Changed inherited generated model catalogs to expose only provider-verified reasoning effort levels from models.dev ([#6928](https://github.com/earendil-works/pi/pull/6928) by [@davidbrai](https://github.com/davidbrai)).
+
+### Fixed
+
+- Fixed inherited DNS lookup failures such as `getaddrinfo`, `ENOTFOUND`, and `EAI_AGAIN` to trigger automatic assistant retries ([#6946](https://github.com/earendil-works/pi/pull/6946) by [@christianklotz](https://github.com/christianklotz)).
+- Fixed inherited OpenRouter Anthropic cache breakpoints to advance through tool results and enabled cache control for `~anthropic/*-latest` aliases ([#6941](https://github.com/earendil-works/pi/pull/6941) by [@mteam88](https://github.com/mteam88)).
+- Fixed inherited OpenAI Codex WebSocket sessions to retry once without a missing previous-response continuation after `previous_response_not_found` errors ([#6955](https://github.com/earendil-works/pi/pull/6955) by [@davidbrai](https://github.com/davidbrai)).
+- Fixed TUI debug and crash logs to respect custom agent directories instead of always writing under `~/.pi/agent` ([#6958](https://github.com/earendil-works/pi/pull/6958) by [@davidbrai](https://github.com/davidbrai)).
+- Fixed slow Ctrl+G external-editor startup when the system temporary directory contains many entries ([#6903](https://github.com/earendil-works/pi/pull/6903) by [@christianklotz](https://github.com/christianklotz)).
+- Fixed startup resource display to preserve relative paths for sibling npm extensions loaded by a package ([#6964](https://github.com/earendil-works/pi/pull/6964) by [@davidbrai](https://github.com/davidbrai)).
+- Fixed compaction and branch-summary requests to use fresh routing session IDs with prompt caching disabled where supported ([#6618](https://github.com/earendil-works/pi/pull/6618) by [@tmustier](https://github.com/tmustier)).
+- Fixed explicit self-updates when `PI_SKIP_VERSION_CHECK` is set ([#6977](https://github.com/earendil-works/pi/issues/6977)).
+- Fixed scoped model IDs containing brackets to resolve as literal exact matches before glob matching ([#6210](https://github.com/earendil-works/pi/issues/6210)).
+- Fixed inherited OpenAI and Anthropic provider retry waits to honor abort signals and configured delay limits ([#6980](https://github.com/earendil-works/pi/pull/6980) by [@petrroll](https://github.com/petrroll)).
+- Fixed fresh installs from preferring bundled model catalogs over newer remote catalogs because package file mtimes were newer ([#7016](https://github.com/earendil-works/pi/pull/7016) by [@davidbrai](https://github.com/davidbrai)).
+- Fixed inherited editor scroll indicators overflowing narrow terminals ([#7015](https://github.com/earendil-works/pi/pull/7015) by [@christianklotz](https://github.com/christianklotz)).
+- Fixed llama.cpp models to use the loaded context window as their output token limit instead of capping it at 16K ([#7034](https://github.com/earendil-works/pi/pull/7034) by [@christianklotz](https://github.com/christianklotz)).
+- Fixed release source archives to include the generated provider model data used to build standalone binaries.
+- Updated the packaged `protobufjs` dependency to 7.6.5 to address GHSA-j3f2-48v5-ccww ([#7005](https://github.com/earendil-works/pi/issues/7005)).
+- Fixed `/copy` on Wayland to fall back to X11 or OSC 52 when `wl-copy` fails ([#7009](https://github.com/earendil-works/pi/pull/7009) by [@rkfshakti](https://github.com/rkfshakti)).
+- Fixed `/model` to reload updated `models.json` configuration when opening the model picker ([#6999](https://github.com/earendil-works/pi/issues/6999)).
+
+## [0.81.1] - 2026-07-21
+
+### New Features
+
+- **Verifiable release source archives** — GitHub releases now include deterministic, checksummed source archives with instructions for rebuilding standalone binaries. See [Building standalone binaries from release source](../../README.md#building-standalone-binaries-from-release-source).
+- **Resilient compaction and branch summaries** — Transient provider failures now follow the configured retry policy, with retry lifecycle events available to interactive, JSON, RPC, and SDK consumers. See [Compaction & Branch Summarization](docs/compaction.md) and [RPC retry events](docs/rpc.md#summarization_retry_scheduled--summarization_retry_attempt_start--summarization_retry_finished).
+
+### Added
+
+- Added deterministic, checksummed source archives to GitHub releases with documented standalone binary rebuild instructions ([#6913](https://github.com/earendil-works/pi/pull/6913) by [@christianklotz](https://github.com/christianklotz)).
+
+### Fixed
+
+- Fixed compaction and branch summarization to retry transient provider failures using the configured retry policy, with retry lifecycle events exposed to interactive, JSON, RPC, and SDK consumers ([#6901](https://github.com/earendil-works/pi/pull/6901) by [@davidbrai](https://github.com/davidbrai)).
+- Fixed interactive startup waiting for background model catalog refresh while computing the footer provider count.
+- Restored the default stream fallback for extensions using the pre-0.81 agent-core API ([#6915](https://github.com/earendil-works/pi/issues/6915)).
+- Fixed inherited Kimi K3 models from Moonshot AI and Moonshot AI China to use the OpenAI thinking format and expose reasoning effort support.
+
+## [0.81.0] - 2026-07-21
+
+### New Features
+
+- **Local llama.cpp model management** — Connect to a llama.cpp router, search and download Hugging Face models, and explicitly load or unload models with live progress. See [llama.cpp](docs/llama-cpp.md).
+- **Full provider extensions** — Extensions can register complete pi-ai providers with authentication, model refresh, filtering, and custom streaming. See [Register New Provider](docs/custom-provider.md#register-new-provider).
+- **Qwen Token Plan providers** — Use the built-in international and China subscription providers with regional endpoints and API-key authentication. See [API Keys](docs/providers.md#api-keys).
+- **Expanded usage accounting** — Tool, compaction, and branch-summary usage is persisted and included in session totals. See [Compaction & Branch Summarization](docs/compaction.md).
+
+### Added
+
+- Added Qwen Token Plan and Qwen Token Plan China to built-in provider setup, default model resolution, and provider documentation ([#6858](https://github.com/earendil-works/pi/pull/6858) by [@QuintinShaw](https://github.com/QuintinShaw)).
+- Added the `get_available_thinking_levels` RPC command and `RpcClient.getAvailableThinkingLevels()` method ([#6865](https://github.com/earendil-works/pi/pull/6865) by [@cristinaponcela](https://github.com/cristinaponcela)).
+- Exported message and tool execution lifecycle event types from the package root ([#6772](https://github.com/earendil-works/pi/pull/6772) by [@davidbrai](https://github.com/davidbrai)).
+- Added built-in llama.cpp router support with `/login` connection setup and `/llama` Hugging Face model search and downloads, explicit loading, unloading, and live progress. See [llama.cpp](docs/llama-cpp.md).
+- Added extension registration for complete pi-ai providers, including native authentication, model refresh, filtering, and streaming behavior.
+- Added usage accounting for tools, compaction, and branch summaries in persisted sessions, footer totals, and session statistics ([#6671](https://github.com/earendil-works/pi/pull/6671) by [@davidbrai](https://github.com/davidbrai)).
+
+### Fixed
+
+- Updated the packaged `brace-expansion` dependency to 5.0.7 ([#6896](https://github.com/earendil-works/pi/pull/6896) by [@davidbrai](https://github.com/davidbrai)).
+- Fixed persisted remote model catalogs from overriding newer bundled catalogs after an upgrade.
+- Fixed inherited stored API-key credentials to apply their provider-scoped `env` values, including Amazon Bedrock profiles ([#6864](https://github.com/earendil-works/pi/pull/6864) by [@cristinaponcela](https://github.com/cristinaponcela)).
+- Fixed inherited OpenAI-compatible cross-provider replay to keep tool call IDs unique when multiple calls share a provider call ID ([#6854](https://github.com/earendil-works/pi/pull/6854) by [@cristinaponcela](https://github.com/cristinaponcela)).
+- Fixed inherited Kimi K3 thinking levels to expose low, high, and max, and normalized the `k2p7` alias to `kimi-for-coding`.
+- Fixed inherited OpenCode Go models routed through the OpenAI Responses API.
+- Fixed inherited `pi-ai` package metadata to avoid repeated consumer lockfile changes ([#6812](https://github.com/earendil-works/pi/pull/6812) by [@jmfederico](https://github.com/jmfederico)).
+- Fixed inherited terminal shutdown to clear the editor's inverted software cursor before restoring the hardware cursor ([#6790](https://github.com/earendil-works/pi/pull/6790) by [@dam9000](https://github.com/dam9000)).
+- Fixed inherited ANSI-aware text wrapping to recognize CRLF and CR line endings while preserving styles ([#6764](https://github.com/earendil-works/pi/pull/6764) by [@xz-dev](https://github.com/xz-dev)).
+- Fixed inherited editor paste registry corruption after deleting and undoing paste markers, preventing literal or mismatched paste markers in submitted prompts ([#6844](https://github.com/earendil-works/pi/issues/6844)).
+- Fixed sessionless OpenAI Codex WebSocket requests to use UUIDv7 request IDs ([#6834](https://github.com/earendil-works/pi/pull/6834) by [@xl0](https://github.com/xl0)).
+- Fixed inherited GPT-5.6 Codex models to default to the 272K context window, avoiding automatic long-context pricing ([#6853](https://github.com/earendil-works/pi/pull/6853) by [@aadishv](https://github.com/aadishv)).
+- Fixed messages queued during compaction to preserve steering and follow-up delivery behavior ([#6730](https://github.com/earendil-works/pi/pull/6730) by [@dannote](https://github.com/dannote)).
+- Fixed read tool errors being syntax-highlighted as if they were file contents ([#6731](https://github.com/earendil-works/pi/pull/6731) by [@dannote](https://github.com/dannote)).
+- Fixed llama.cpp router download progress updates and removed redundant wording from model action confirmations.
+- Moved automatic model catalog network refresh out of startup initialization and into the running interactive and RPC modes.
+- Fixed persisted sessions being read and parsed twice when opened, reducing startup latency for large sessions ([#6793](https://github.com/earendil-works/pi/issues/6793)).
+- Fixed prompt-template defaults for all arguments (`${@:-default}` and `${ARGUMENTS:-default}`) ([#6695](https://github.com/earendil-works/pi/issues/6695)).
+- Fixed obsolete custom UI, custom tool, and custom editor examples in the extension documentation ([#6735](https://github.com/earendil-works/pi/issues/6735)).
+- Fixed Kimi Coding sessions to show API-equivalent implied costs with the subscription indicator.
+- Fixed OpenAI Responses early stream endings to trigger automatic retry instead of ending the agent run ([#6727](https://github.com/earendil-works/pi/issues/6727)).
+
 ## [2026.7.23] - 2026-07-23
 
 ### Breaking Changes
@@ -49,6 +207,7 @@
 ### Changed
 
 ### Fixed
+
 - Fixed the interactive render hot path re-materializing the entire session every frame: `SessionManager.getEntries()`, no-arg `getBranch()`, and `getSessionName()` are now memoized behind a monotonic mutation counter, eliminating repeated deep copies of large sessions at frame rate.
 - Fixed OpenAI Responses replay to omit invalid custom tool-call item IDs.
 - Fixed compaction budgeting and diagnostics, including bounded summary streams and preservation of queued input after failures.
@@ -62,13 +221,16 @@
 ### Breaking Changes
 
 ### Added
+
 - Added configurable per-model retry fallback chains and the `/fallback` command, including scoped cooldowns, automatic primary-model reversion, model-fallback events in RPC/app-server consumers, and interactive fallback status.
 - Added progress updates that identify the active web-search provider for each attempt.
 
 ### Changed
+
 - Abbreviated interactive footer token counts using K/M/B notation.
 
 ### Fixed
+
 - Fixed goal token accounting during active turns so `get_goal`, updates, completion, and shutdown checkpoints include streamed usage without double counting or charging usage before a goal was created.
 - Fixed compaction recovery to preserve queued input and transforms, reject unsafe or oversize compactions visibly, and avoid stale compaction barriers.
 - Fixed coding-agent model fallback behavior for classifier refusals, hard failures, invalid chains, and self-referential candidates.
@@ -85,17 +247,11 @@
 
 - Added a `/todo` command for user-side todo management: view, overlay `edit` (Markdown checklist), `copy`, `export`/`import` (default `TODO.md`), and fuzzy-matched `append`/`start`/`done`/`drop`/`rm`; user edits persist as `senpi.todo-state` entries and notify the agent next turn.
 - Added `antml` as a valid `compat.toolCallFormat` in custom `models.json` provider and model definitions: ANTML `<function_calls>`/`<invoke>` text-tool protocol with Claude-Code-style failure tolerance.
-- Added built-in llama.cpp router support with `/login` connection setup and `/llama` Hugging Face model search and downloads, explicit loading, unloading, and live progress. See [llama.cpp](docs/llama-cpp.md).
-- Added extension registration for complete pi-ai providers, including native authentication, model refresh, filtering, and streaming behavior.
 
 ### Changed
 
 ### Fixed
 
-- Fixed prompt-template defaults for all arguments (`${@:-default}` and `${ARGUMENTS:-default}`) ([#6695](https://github.com/earendil-works/pi/issues/6695)).
-- Fixed obsolete custom UI, custom tool, and custom editor examples in the extension documentation ([#6735](https://github.com/earendil-works/pi/issues/6735)).
-- Fixed Kimi Coding sessions to show API-equivalent implied costs with the subscription indicator.
-- Fixed OpenAI Responses early stream endings to trigger automatic retry instead of ending the agent run ([#6727](https://github.com/earendil-works/pi/issues/6727)).
 ### Removed
 
 ## [2026.7.17-5] - 2026-07-17

package/README.md

@@ -153,7 +153,7 @@ The interface from top to bottom:
 - **Startup header** - Shows shortcuts (`/hotkeys` for all), loaded AGENTS.md files, prompt templates, skills, and extensions
 - **Messages** - Your messages, assistant responses, tool calls and results, notifications, errors, and extension UI
 - **Editor** - Where you type; border color indicates thinking level
-- **Footer** - Working directory, session name, total token/cache usage (`↑` input, `↓` output, `R` cache read, `W` cache write, `CH` latest cache hit rate), cost, context usage, current model
+- **Footer** - Working directory, session name, total token/cache usage (`↑` input, `↓` output, `R` cache read, `W` cache write, `CH` latest cache hit rate), cost, context usage, current model. Totals include assistant responses, usage reported by tools, and summary generation.
 
 The editor can be temporarily replaced by other UI, like built-in `/settings` or custom UI from extensions (e.g., a Q&A tool that lets the user answer model questions in a structured format). [Extensions](#extensions) can also replace the editor, add widgets above/below it, a status line, custom footer, or overlays.
 
@@ -708,6 +708,7 @@ pi --thinking high "Solve this complex problem"
 
 | Variable | Description |
 |----------|-------------|
+| `PI_CODING_AGENT` | Set to `true` by the CLI and RPC entry points so child processes can detect that they run inside Pi |
 | `PI_CODING_AGENT_DIR` | Override config directory (default: `~/.pi/agent`) |
 | `PI_CODING_AGENT_SESSION_DIR` | Override session storage directory (overridden by `--session-dir`) |
 | `PI_PACKAGE_DIR` | Override package directory (useful for Nix/Guix where store paths tokenize poorly) |
@@ -717,6 +718,18 @@ pi --thinking high "Solve this complex problem"
 | `PI_CACHE_RETENTION` | Set to `long` for extended prompt cache (Anthropic: 1h, OpenAI: 24h) |
 | `VISUAL`, `EDITOR` | Fallback external editor for Ctrl+G when `externalEditor` is unset; defaults to Notepad on Windows and `nano` elsewhere |
 
+Commands run by the LLM-callable bash tool also receive current session metadata:
+
+| Variable | Description |
+|----------|-------------|
+| `PI_SESSION_ID` | Current session ID |
+| `PI_SESSION_FILE` | Absolute session JSONL path; unset for ephemeral sessions |
+| `PI_PROVIDER` | Currently selected model provider |
+| `PI_MODEL` | Currently selected model ID |
+| `PI_REASONING_LEVEL` | Current effective reasoning level |
+
+These values are resolved when each command starts. See [Environment Variables](docs/environment-variables.md#bash-tool-session-environment) for semantics, examples, and custom-tool opt-out.
+
 ---
 
 ## Contributing & Development

package/dist/beta/omo-local-update.d.ts

@@ -0,0 +1,207 @@
+import type { PackageSource } from "../core/settings-manager.ts";
+/** Result of one spawned command, with output captured and timeout enforced. */
+export interface OmoLocalRunResult {
+    code: number | null;
+    stdout: string;
+    stderr: string;
+    timedOut: boolean;
+}
+export interface OmoLocalRunOptions {
+    cwd?: string;
+    timeoutMs?: number;
+    /** Merged over process.env (callers inject the isolated git env from the fixture contract). */
+    env?: Record<string, string | undefined>;
+}
+/** exported for tests only */
+export type OmoLocalRun = (command: string, args: string[], options: OmoLocalRunOptions) => Promise<OmoLocalRunResult>;
+/**
+ * exported for tests only
+ *
+ * Shared process seam for the whole module. spawnProcess/waitForChildProcess neither capture
+ * output nor enforce timeouts; this adds both. The child is spawned detached on POSIX so it
+ * owns a process group, and the timeout kill goes through killProcessTree (SIGKILL to the
+ * whole group) - without that, bun/git descendants would keep mutating the build worktree
+ * after the direct child died.
+ */
+export declare function defaultRun(command: string, args: string[], options: OmoLocalRunOptions): Promise<OmoLocalRunResult>;
+/** exported for tests only */
+export declare function isKillSwitched(env: Record<string, string | undefined>): boolean;
+/** A detected locally-installed OMO plugin and its enclosing omo monorepo checkout. */
+export interface OmoLocalInstall {
+    pluginPath: string;
+    repoRoot: string;
+}
+/** exported for tests only */
+export interface DetectOmoLocalInstallOptions {
+    packages: PackageSource[] | undefined;
+    agentDir: string;
+    run: OmoLocalRun;
+    readJson?: (path: string) => unknown;
+    exists?: (path: string) => boolean;
+}
+/**
+ * exported for tests only
+ *
+ * Three-part detection gate (ALL must hold, else silent no-op):
+ * 1. A global settings `packages` entry (string or object form) is a local path whose resolved
+ *    dir's package.json name is `@code-yeongyu/omo-senpi`.
+ * 2. The derived repo root (pluginPath/../../..) contains both workspace packages
+ *    `@oh-my-opencode/omo-senpi` and `@oh-my-opencode/senpi-task`.
+ * 3. `git -C <repoRoot> rev-parse --show-toplevel` succeeds AND its canonicalized output equals
+ *    the canonicalized repo root - a mismatched toplevel would mean the derived root is not
+ *    the checkout it claims to be.
+ */
+export declare function detectOmoLocalInstall(options: DetectOmoLocalInstallOptions): Promise<OmoLocalInstall | undefined>;
+/** State stamp written after a successful install: `<agentDir>/omo-local-update-state.json`. */
+export interface OmoLocalUpdateStamp {
+    repoRoot: string;
+    /** Frozen origin/dev sha the installed plugin was built from. */
+    sha: string;
+    /** `git rev-parse origin/dev:packages/omo-senpi` at install time. */
+    omoSenpiTree: string;
+    /** `git rev-parse origin/dev:packages/senpi-task` at install time. */
+    senpiTaskTree: string;
+    installedAt: string;
+    /** Post-install inventory: relative paths of every installed artifact present at stamp time. */
+    artifacts: string[];
+}
+/** exported for tests only */
+export declare function omoLocalUpdateStampPath(agentDir: string): string;
+/** exported for tests only */
+export declare function readStamp(agentDir: string): OmoLocalUpdateStamp | undefined;
+/** exported for tests only */
+export declare function writeStamp(agentDir: string, stamp: OmoLocalUpdateStamp): void;
+/** exported for tests only */
+export interface ShouldSkipUpdateOptions {
+    stamp: OmoLocalUpdateStamp | undefined;
+    repoRoot: string;
+    remoteSha: string;
+    /** True only when every path recorded in stamp.artifacts still exists on disk. */
+    stampArtifactsExist: boolean;
+    force: boolean;
+}
+/**
+ * exported for tests only
+ *
+ * Skip decision (taken BEFORE any worktree op, install, or write): skip only when the stamp
+ * belongs to this repo root, was installed at the frozen remote sha, recorded a non-empty
+ * artifact inventory, and every inventoried path still exists. A repoRoot mismatch always
+ * updates; an empty/absent inventory never skips; force always updates.
+ */
+export declare function shouldSkipUpdate(options: ShouldSkipUpdateOptions): boolean;
+/**
+ * exported for tests only
+ *
+ * Failure of one orchestrator-owned step (fetch/worktree/install/build/artifacts/swap/stamp).
+ * The stage feeds `OMO local plugin update failed (<stage>): ...`; `output` (combined
+ * stdout+stderr of the failed step) is echoed dim, last 40 lines.
+ */
+export declare class OmoLocalStepError extends Error {
+    readonly stage: string;
+    readonly output: string | undefined;
+    constructor(stage: string, message: string, output?: string);
+}
+/** The frozen state of origin/dev: commit sha, subject, and both package tree hashes. */
+export interface OmoRemoteState {
+    sha: string;
+    subject: string;
+    omoSenpiTree: string;
+    senpiTaskTree: string;
+}
+/** exported for tests only */
+export interface ComputeRemoteStateOptions {
+    repoRoot: string;
+    run: OmoLocalRun;
+}
+/**
+ * exported for tests only
+ *
+ * Inspect the two packages' state ON ORIGIN/DEV: ONE `git fetch origin dev` (120s, read-only
+ * - the ONLY network/ref operation in the module), then rev-parse/log reads against the
+ * frozen `origin/dev` ref. A fetch failure throws an OmoLocalStepError with stage "fetch"
+ * before anything else is touched.
+ */
+export declare function computeRemoteState(options: ComputeRemoteStateOptions): Promise<OmoRemoteState>;
+/** exported for tests only */
+export declare function omoLocalUpdateLockPath(agentDir: string): string;
+/** exported for tests only */
+export declare function omoLocalUpdateBuildWorktreePath(agentDir: string): string;
+/** exported for tests only */
+export interface EnsureBuildWorktreeOptions {
+    /** Feature-owned persistent worktree path (inside agentDir). */
+    worktree: string;
+    repoRoot: string;
+    /** Frozen origin/dev sha to check out detached. */
+    sha: string;
+    run: OmoLocalRun;
+}
+/**
+ * exported for tests only
+ *
+ * Validate/reuse the FEATURE-OWNED persistent build worktree:
+ * - present AND owned by this repo (`git -C <wt> rev-parse --git-common-dir` realpath-equals
+ *   realpath(repoRoot/.git)) -> reuse: `git -C <wt> checkout --detach --force <sha>`. The
+ *   --force is SAFE here: this worktree is exclusively feature-owned, so it only discards
+ *   our own previous build outputs, and untracked node_modules survives for incremental
+ *   installs.
+ * - present but foreign/invalid -> `git -C repoRoot worktree remove --force <wt>` (fs rm
+ *   fallback), then re-add.
+ * - absent -> `git -C repoRoot worktree add --detach <wt> <sha>`.
+ * These are the ONLY git mutations in the module besides `git fetch`, and they touch only
+ * the feature-owned worktree registration - never the user's checkout state.
+ */
+export declare function ensureBuildWorktree(options: EnsureBuildWorktreeOptions): Promise<void>;
+/** exported for tests only: injectable fs seam for the atomic swap. */
+export interface OmoLocalFsSeam {
+    cpSync: (source: string, destination: string) => void;
+    renameSync: (oldPath: string, newPath: string) => void;
+    rmSync: (path: string) => void;
+}
+/** exported for tests only */
+export interface SwapPluginDirOptions {
+    pluginPath: string;
+    /** The freshly built plugin dir inside the build worktree. */
+    sourceDir: string;
+    fs?: OmoLocalFsSeam;
+}
+/**
+ * exported for tests only
+ *
+ * ATOMIC SWAP of the install target. staging/prev are siblings of pluginPath (same parent
+ * => same filesystem => atomic renames): copy the built tree to staging, move pluginPath
+ * aside to prev, move staging into place. If the staging rename fails, prev is restored
+ * and staging removed before the error propagates - the local install is never left
+ * half-swapped. On success prev is removed.
+ */
+export declare function swapPluginDir(options: SwapPluginDirOptions): void;
+export interface RunOmoLocalUpdateBetaOptions {
+    env: Record<string, string | undefined>;
+    agentDir: string;
+    settings?: {
+        packages?: PackageSource[];
+    };
+    force?: boolean;
+    log?: (message: string) => void;
+    run?: OmoLocalRun;
+}
+/**
+ * Beta hook entry point, called from bare `senpi update` before the self-update.
+ *
+ * SINGLE owner of the ORDERED state machine: gate chain (kill-switch -> detection) ->
+ * atomic lock acquisition (held through fetch, worktree, build, swap, stamp AND notify;
+ * owner-checked unlink in `finally`) -> computeRemoteState (ONE read-only fetch + frozen
+ * rev-parse reads of origin/dev) -> skip decision BEFORE any worktree op, install, or
+ * write -> ensureBuildWorktree (feature-owned persistent worktree, reuse-or-recreate) ->
+ * `bun install` (600s, cwd = build worktree) -> `bun run build:senpi-plugin` (900s, cwd =
+ * build worktree) -> completeness check in the WORKTREE plugin dir -> atomic swap of the
+ * install target -> writeStamp (inventory from the NEW plugin dir) -> notify (green line
+ * + dim per-package tree comparison when an old stamp existed).
+ *
+ * HARD GUARANTEES: the user's checkout receives ZERO git mutations (no
+ * checkout/branch/commit/merge/reset/clean/stash/push anywhere; only `git fetch` and
+ * feature-owned worktree add/remove). Only pluginPath content is replaced. This hook NEVER
+ * throws and NEVER sets process.exitCode: every failure downgrades to a yellow warning +
+ * dim manual hint so the senpi self-update continues untouched.
+ */
+export declare function runOmoLocalUpdateBeta(options: RunOmoLocalUpdateBetaOptions): Promise<void>;
+//# sourceMappingURL=omo-local-update.d.ts.map

package/dist/beta/omo-local-update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"omo-local-update.d.ts","sourceRoot":"","sources":["../../src/beta/omo-local-update.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAKjE,gFAAgF;AAChF,MAAM,WAAW,iBAAiB;IACjC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IAClC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+FAA+F;IAC/F,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CACzC;AAED,8BAA8B;AAC9B,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,kBAAkB,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAEvH;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAC/B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,kBAAkB,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAqC5B;AAED,8BAA8B;AAC9B,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,OAAO,CAE/E;AAED,uFAAuF;AACvF,MAAM,WAAW,eAAe;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,8BAA8B;AAC9B,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,EAAE,aAAa,EAAE,GAAG,SAAS,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,WAAW,CAAC;IACjB,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACrC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;CACnC;AAuBD;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CAC1C,OAAO,EAAE,4BAA4B,GACnC,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAwCtC;AAED,gGAAgG;AAChG,MAAM,WAAW,mBAAmB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,GAAG,EAAE,MAAM,CAAC;IACZ,qEAAqE;IACrE,YAAY,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,gGAAgG;IAChG,SAAS,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,8BAA8B;AAC9B,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,8BAA8B;AAC9B,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAsC3E;AAED,8BAA8B;AAC9B,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,IAAI,CAG7E;AAED,8BAA8B;AAC9B,MAAM,WAAW,uBAAuB;IACvC,KAAK,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,mBAAmB,EAAE,OAAO,CAAC;IAC7B,KAAK,EAAE,OAAO,CAAC;CACf;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAkB1E;AAED;;;;;;GAMG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,YAAY,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAK1D;CACD;AAcD,yFAAyF;AACzF,MAAM,WAAW,cAAc;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACtB;AAED,8BAA8B;AAC9B,MAAM,WAAW,yBAAyB;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,WAAW,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,cAAc,CAAC,CA0BpG;AAED,8BAA8B;AAC9B,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,8BAA8B;AAC9B,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAExE;AA0ND,8BAA8B;AAC9B,MAAM,WAAW,0BAA0B;IAC1C,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,WAAW,CAAC;CACjB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAyC5F;AAED,uEAAuE;AACvE,MAAM,WAAW,cAAc;IAC9B,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAK,IAAI,CAAC;IACtD,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACvD,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/B;AAcD,8BAA8B;AAC9B,MAAM,WAAW,oBAAoB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,cAAc,CAAC;CACpB;AAID;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAgBjE;AAsBD,MAAM,WAAW,4BAA4B;IAC5C,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAA;KAAE,CAAC;IAC1C,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,GAAG,CAAC,EAAE,WAAW,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,4BAA4B,GAAG,OAAO,CAAC,IAAI,CAAC,CA+HhG"}