@companion-ai/feynman 0.5.56 → 0.5.58

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/RELEASES.md CHANGED
@@ -6,6 +6,26 @@ GitHub release notes are generated from the matching `## vX.Y.Z` section in this
6
6
 
7
7
  ## Unreleased
8
8
 
9
+ ## v0.5.58 - 2026-10-26
10
+
11
+ - **pi-subagents 0.83.0.**
12
+ - Background research subagents that finished their work always report it, instead of ending as "exited with code 0 before writing a result"; a foreground subagent whose child stops after its final reply returns instead of hanging.
13
+ - Turns after a subagent returns keep the prompt cache on models that take mid-conversation system messages, so they are cheaper and faster.
14
+ - pi-subagents now uses a patched `undici` (8.12.3), so only Pi's own pinned copy remains (see v0.5.57).
15
+ - **pi-web-access 0.45.0.**
16
+ - The web tools add about 1.1k tokens to every model request instead of 2.8k.
17
+ - DuckDuckGo search no longer gets your IP blocked by its bot check when several searches run at once.
18
+ - `source_check` shows the matching passages under each source.
19
+ - `feynman search set ninerouter <base-url>` selects a self-hosted [9router](https://github.com/decolua/9router) gateway.
20
+
21
+ ## v0.5.57 - 2026-10-24
22
+
23
+ - **Security updates from advisories published Oct 23.**
24
+ - `undici` 8.12.3, now a direct dependency, so a fresh install no longer gives every package the pinned 8.10.2 below ([GHSA-xjj6-f33q-929c](https://github.com/advisories/GHSA-xjj6-f33q-929c), [GHSA-4qv8-2p9j-2685](https://github.com/advisories/GHSA-4qv8-2p9j-2685), [GHSA-f72v-6w45-q472](https://github.com/advisories/GHSA-f72v-6w45-q472)).
25
+ - `body-parser` 2.4.0, `fast-uri` 3.1.9 and `zod` 4.6.7, through Alpha Hub's MCP SDK.
26
+ - The website's build tools (vite 8.3.5, sharp 0.35.5, hono 4.13.13 and others) are patched too; its full `npm audit` is clean.
27
+ - Pi 1.4.0 and pi-subagents 0.81.0 still pin `undici` 8.10.2 for their own HTTP clients. Feynman can't change those copies; they'll move when Pi ([pi#11208](https://github.com/earendil-works/pi/issues/11208)) and pi-subagents ([#3022](https://github.com/nicobailon/pi-subagents/issues/3022)) release patched versions.
28
+
9
29
  ## v0.5.56 - 2026-10-23
10
30
 
11
31
  - **pi-subagents 0.81.0.**
@@ -8,9 +8,9 @@ export const PI_WEB_SEARCH_PROVIDERS = [
8
8
  "auto", "all", "openai", "brave", "parallel", "parallel-mcp", "tinyfish", "search1api", "searchinfinity", "querit",
9
9
  "tavily", "you", "firecrawl", "jina", "searxng", "degoog", "duckduckgo", "perplexity", "gemini", "kimi", "exa",
10
10
  "serpdive", "kagi", "ollama", "anysearch", "xai", "mistral", "brightdata", "serpbase", "serpapi", "serper", "serply",
11
- "valyu", "bocha", "xcrawl", "baizhi", "zai", "keenable", "ceramic", "deepseek", "linkup",
11
+ "valyu", "bocha", "xcrawl", "baizhi", "zai", "keenable", "ceramic", "deepseek", "linkup", "ninerouter",
12
12
  ];
13
- // The web-search.json field holding a provider's key (searxng takes its base URL);
13
+ // The web-search.json field holding a provider's key (searxng and ninerouter take their base URL);
14
14
  // undefined for providers with nothing to set.
15
15
  export function searchProviderKeyField(provider) {
16
16
  if (provider === "auto" || provider === "all" || provider === "duckduckgo" || provider === "kimi")
@@ -19,6 +19,8 @@ export function searchProviderKeyField(provider) {
19
19
  return "parallelApiKey";
20
20
  if (provider === "searxng")
21
21
  return "searxngBaseUrl";
22
+ if (provider === "ninerouter")
23
+ return "ninerouterBaseUrl";
22
24
  return `${provider}ApiKey`;
23
25
  }
24
26
  const ROUTE_LABELS = { auto: "Auto", perplexity: "Perplexity", exa: "Exa", gemini: "Gemini" };
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@companion-ai/feynman",
3
- "version": "0.5.56",
3
+ "version": "0.5.58",
4
4
  "description": "The open source AI research agent.",
5
5
  "license": "MIT",
6
6
  "type": "module",
@@ -85,9 +85,10 @@
85
85
  "fast-xml-parser": "5.11.2",
86
86
  "pi-btw": "0.8.0",
87
87
  "pi-docparser": "4.0.0",
88
- "pi-subagents": "0.81.0",
89
- "pi-web-access": "0.44.0",
90
- "posthog-node": "^5.53.0"
88
+ "pi-subagents": "0.83.0",
89
+ "pi-web-access": "0.45.0",
90
+ "posthog-node": "^5.53.0",
91
+ "undici": "^8.12.3"
91
92
  },
92
93
  "peerDependencies": {
93
94
  "@earendil-works/pi-agent-core": "1.4.0",