@companion-ai/feynman 0.5.13 → 0.5.14

package/RELEASES.md

@@ -6,6 +6,11 @@ GitHub release notes are generated from the matching `## vX.Y.Z` section in this
 
 ## Unreleased
 
+## v0.5.14 - 2026-09-28
+
+- **The Windows installer no longer fails on slow networks (#309).** When usage telemetry could not reach PostHog quickly, the PostHog library printed a timeout to stderr, and Windows PowerShell treats stderr from the installer's `feynman --help` check as a failure. Each telemetry send now has a 1.5 s budget and ends quietly, so no command waits on telemetry (on a stalled network `feynman --help` took 11 s and printed two errors; it now takes about 2 s and prints nothing). The installers also run their checks with telemetry off and judge them by exit code.
+- pi-subagents 0.73.1 (no longer discards the prompt cache when subagents turn on; caps very large workflow output) and pi-web-access 0.33.0 (resumed sessions keep their tools; no false Pi version warnings). undici is overridden to a patched version for GHSA-3wwx-pv8p-q78v in the standalone installers; npm installs get the fix when pi-subagents releases its bump (nicobailon/pi-subagents#2548); pi-subagents only uses undici's HTTP proxy agent, not the affected WebSocket client.
+
 ## v0.5.13 - 2026-09-28
 
 - **OpenCode no longer recommends a retired Kimi model.** OpenCode Go and OpenCode Zen retired `kimi-k2.6` ("Use kimi-k2.7-code instead"), but Feynman still picked it as the default for new OpenCode users. It now recommends `kimi-k2.7-code`. If `feynman status` shows `kimi-k2.6`, switch with `feynman model set opencode-go/kimi-k2.7-code`. Three model preferences that no longer exist in the catalog were removed.

package/dist/telemetry/posthog.js

@@ -21,13 +21,20 @@ let telemetryInitialized = false;
 let telemetryStartWarningPrinted = false;
 let telemetryTransportFailed = false;
 let telemetryNoticeThisProcess;
+// On a slow or filtered network a pending send made every command wait for
+// posthog-node's 10s deadline, and the library then printed its timeout to
+// stderr, which Windows PowerShell treats as a failure (#309). Give each send
+// a short budget and end it here, where it counts as a quiet transport failure.
+export const TELEMETRY_REQUEST_BUDGET_MS = 1500;
 /** One silent attempt per session: after the first failure, later requests are dropped. */
-export function createTelemetryCircuitBreakerFetch(fetchImpl, onTransportFailure) {
+export function createTelemetryCircuitBreakerFetch(fetchImpl, onTransportFailure, budgetMs = TELEMETRY_REQUEST_BUDGET_MS) {
     let open = false;
     return async (url, options) => {
         if (!open) {
             try {
-                const response = await fetchImpl(url, options);
+                const budget = AbortSignal.timeout(budgetMs);
+                const signal = options.signal ? AbortSignal.any([options.signal, budget]) : budget;
+                const response = await fetchImpl(url, { ...options, signal });
                 if (response.status >= 200 && response.status < 400)
                     return response;
                 throw new Error(`PostHog transport returned HTTP ${response.status}`);

package/extensions/research-tools/telemetry.ts

@@ -56,7 +56,11 @@ function createPostHogClient(config: ResearchTelemetryConfig): ResearchTelemetry
 	const fetchOnce: NonNullable<PostHogOptions["fetch"]> = async (url, options) => {
 		if (!transportFailed) {
 			try {
-				const response = await fetch(url, options as RequestInit);
+				// A short budget per send, so a slow network ends quietly instead of
+				// hitting posthog-node's 10s deadline, which logs to stderr.
+				const budget = AbortSignal.timeout(1500);
+				const signal = options.signal ? AbortSignal.any([options.signal as AbortSignal, budget]) : budget;
+				const response = await fetch(url, { ...(options as RequestInit), signal });
 				if (response.status >= 200 && response.status < 400) return response;
 			} catch {}
 			transportFailed = true;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@companion-ai/feynman",
-  "version": "0.5.13",
+  "version": "0.5.14",
   "description": "Research-first CLI agent built on Pi and alphaXiv",
   "license": "MIT",
   "type": "module",
@@ -84,8 +84,8 @@
     "fast-xml-parser": "5.11.1",
     "pi-btw": "0.6.1",
     "pi-docparser": "4.0.0",
-    "pi-subagents": "0.71.0",
-    "pi-web-access": "0.31.0",
+    "pi-subagents": "0.73.1",
+    "pi-web-access": "0.33.0",
     "posthog-node": "^5.53.0"
   },
   "peerDependencies": {
@@ -115,5 +115,8 @@
   "author": "Advait Paliwal",
   "publishConfig": {
     "access": "public"
+  },
+  "overrides": {
+    "undici": "^8.10.2"
   }
 }

package/scripts/install/install.ps1

@@ -325,39 +325,51 @@ Workarounds:
       throw "Downloaded archive did not contain the expected launcher: $candidate"
     }
   }
-  $candidateVersionOutput = @(& $candidateCmd --version 2>&1)
-  if ($LASTEXITCODE -ne 0) {
-    throw "Downloaded launcher failed --version: $candidateCmd"
-  }
-  $candidateVersion = ($candidateVersionOutput | Select-Object -Last 1).ToString().Trim()
-  if ($candidateVersion -ne $resolvedVersion) {
-    throw "Downloaded bundle version mismatch: expected=$resolvedVersion actual=$candidateVersion"
-  }
-  $candidateHelp = @(& $candidateCmd --help 2>&1)
-  if ($LASTEXITCODE -ne 0 -or $candidateHelp.Count -eq 0) {
-    throw "Downloaded launcher failed --help: $candidateCmd"
-  }
-
-  # The public one-line installer can run under Windows PowerShell's default
-  # Restricted policy because it executes an in-memory scriptblock. Validate
-  # the packaged PowerShell launcher in a child host with an explicit process-
-  # scoped bypass rather than invoking the downloaded .ps1 file directly.
-  $powerShellExecutable = (Get-Process -Id $PID).Path
-  $candidateVersionOutput = @(
-    & $powerShellExecutable -NoProfile -ExecutionPolicy Bypass -File $candidatePs1 --version 2>&1
-  )
-  if ($LASTEXITCODE -ne 0) {
-    throw "Downloaded launcher failed --version: $candidatePs1"
-  }
-  $candidateVersion = ($candidateVersionOutput | Select-Object -Last 1).ToString().Trim()
-  if ($candidateVersion -ne $resolvedVersion) {
-    throw "Downloaded bundle version mismatch: expected=$resolvedVersion actual=$candidateVersion"
-  }
-  $candidateHelp = @(
-    & $powerShellExecutable -NoProfile -ExecutionPolicy Bypass -File $candidatePs1 --help 2>&1
-  )
-  if ($LASTEXITCODE -ne 0 -or $candidateHelp.Count -eq 0) {
-    throw "Downloaded launcher failed --help: $candidatePs1"
+  # Verify with telemetry off: the check is not usage, and under
+  # $ErrorActionPreference = "Stop" any stderr line from a native command
+  # aborts the install (#309). Judge the launcher by its exit code instead.
+  $previousTelemetry = $env:FEYNMAN_TELEMETRY
+  $previousErrorAction = $ErrorActionPreference
+  try {
+    $env:FEYNMAN_TELEMETRY = "off"
+    $ErrorActionPreference = "Continue"
+    $candidateVersionOutput = @(& $candidateCmd --version 2>&1)
+    if ($LASTEXITCODE -ne 0) {
+      throw "Downloaded launcher failed --version: $candidateCmd"
+    }
+    $candidateVersion = ($candidateVersionOutput | Select-Object -Last 1).ToString().Trim()
+    if ($candidateVersion -ne $resolvedVersion) {
+      throw "Downloaded bundle version mismatch: expected=$resolvedVersion actual=$candidateVersion"
+    }
+    $candidateHelp = @(& $candidateCmd --help 2>&1)
+    if ($LASTEXITCODE -ne 0 -or $candidateHelp.Count -eq 0) {
+      throw "Downloaded launcher failed --help: $candidateCmd"
+    }
+
+    # The public one-line installer can run under Windows PowerShell's default
+    # Restricted policy because it executes an in-memory scriptblock. Validate
+    # the packaged PowerShell launcher in a child host with an explicit process-
+    # scoped bypass rather than invoking the downloaded .ps1 file directly.
+    $powerShellExecutable = (Get-Process -Id $PID).Path
+    $candidateVersionOutput = @(
+      & $powerShellExecutable -NoProfile -ExecutionPolicy Bypass -File $candidatePs1 --version 2>&1
+    )
+    if ($LASTEXITCODE -ne 0) {
+      throw "Downloaded launcher failed --version: $candidatePs1"
+    }
+    $candidateVersion = ($candidateVersionOutput | Select-Object -Last 1).ToString().Trim()
+    if ($candidateVersion -ne $resolvedVersion) {
+      throw "Downloaded bundle version mismatch: expected=$resolvedVersion actual=$candidateVersion"
+    }
+    $candidateHelp = @(
+      & $powerShellExecutable -NoProfile -ExecutionPolicy Bypass -File $candidatePs1 --help 2>&1
+    )
+    if ($LASTEXITCODE -ne 0 -or $candidateHelp.Count -eq 0) {
+      throw "Downloaded launcher failed --help: $candidatePs1"
+    }
+  } finally {
+    $ErrorActionPreference = $previousErrorAction
+    $env:FEYNMAN_TELEMETRY = $previousTelemetry
   }
 
   New-Item -ItemType Directory -Path $installRoot -Force | Out-Null

package/scripts/install/install.sh

@@ -320,12 +320,12 @@ if [ ! -x "$candidate_bundle/feynman" ]; then
   echo "Downloaded archive did not contain the expected executable: ${bundle_name}/feynman" >&2
   exit 1
 fi
-candidate_version="$("$candidate_bundle/feynman" --version | tail -n 1)"
+candidate_version="$(FEYNMAN_TELEMETRY=off "$candidate_bundle/feynman" --version | tail -n 1)"
 if [ "$candidate_version" != "$resolved_version" ]; then
   echo "Downloaded bundle version mismatch: expected ${resolved_version}, found ${candidate_version}." >&2
   exit 1
 fi
-"$candidate_bundle/feynman" --help >/dev/null
+FEYNMAN_TELEMETRY=off "$candidate_bundle/feynman" --help >/dev/null
 
 mkdir -p "$INSTALL_APP_DIR"
 mkdir -p "$INSTALL_BIN_DIR"