@companion-ai/feynman 0.5.58 → 0.5.60

package/RELEASES.md

@@ -6,6 +6,26 @@ GitHub release notes are generated from the matching `## vX.Y.Z` section in this
 
 ## Unreleased
 
+## v0.5.60 - 2026-10-29
+
+- **pi-subagents 0.84.0.**
+  - Security fix: workflow scripts can no longer reach the Feynman process outside their sandbox ([GHSA-6v8j-6w28-2w8r](https://github.com/nicobailon/pi-subagents/security/advisories/GHSA-6v8j-6w28-2w8r)).
+  - Finished background subagent runs are now deleted from disk after 30 days (90 if their session still exists) instead of being kept forever.
+- **pi-web-access 0.46.0.**
+  - Reading a web page with a question on Claude Opus 5.5 or Sonnet 5.5 no longer fails with `"thinking.type.disabled" is not supported for this model`.
+  - Reading a PDF returns its text instead of only a note saying where the file was saved.
+  - `feynman search set` accepts three new providers: `cloudflare` (also set `CLOUDFLARE_ACCOUNT_ID`), `searchapi` (Google through SearchApi) and `tabstack` (one cited answer). Each runs only when you choose it.
+  - A rate-limited free Exa search now says so instead of claiming no search provider is set up.
+- MiniMax M3.1 Flash is now a research model fallback, after MiniMax M3. Thanks to @octo-patch (#364).
+
+## v0.5.59 - 2026-10-28
+
+- **pi-subagents 0.83.1.**
+  - Stopping, interrupting or resuming a research subagent can no longer act on the wrong run: an interrupt with no id is refused, and resuming a worktree child while it is still cleaning up no longer runs it in your main checkout.
+  - Agent files with a blank line inside an indented frontmatter block are read in full, so settings below that line are no longer dropped.
+- The startup header no longer crashes Feynman when the terminal is two columns wide or less.
+- Five more `undici` advisories published Oct 27 ([GHSA-4w7w-5xrc-9h26](https://github.com/advisories/GHSA-4w7w-5xrc-9h26), [GHSA-2m5v-pch6-74hx](https://github.com/advisories/GHSA-2m5v-pch6-74hx), [GHSA-qrxm-fqhp-jwvm](https://github.com/advisories/GHSA-qrxm-fqhp-jwvm), [GHSA-9fm3-97px-rjf6](https://github.com/advisories/GHSA-9fm3-97px-rjf6), [GHSA-55wc-3pg8-jfw6](https://github.com/advisories/GHSA-55wc-3pg8-jfw6)) are already fixed in the `undici` 8.12.3 Feynman installs. Pi 1.4.0's own pinned 8.10.2 copy still has them until Pi ships its next release.
+
 ## v0.5.58 - 2026-10-26
 
 - **pi-subagents 0.83.0.**

package/dist/model/catalog.js

@@ -95,6 +95,7 @@ const RESEARCH_MODEL_FALLBACK_PREFERENCES = [
         reason: "newest OpenRouter OpenAI GPT fallback when direct OpenAI access is unavailable",
     },
     exactResearchModel("minimax/MiniMax-M3", "good fallback when MiniMax is the available research model"),
+    exactResearchModel("minimax/MiniMax-M3.1-Flash", "fast MiniMax fallback when MiniMax is the available research model"),
     exactResearchModel("minimax/MiniMax-M2.7", "good fallback when MiniMax is the available research model"),
     exactResearchModel("minimax/MiniMax-M2.7-highspeed", "good fallback when MiniMax is the available research model"),
     exactResearchModel("kimi-coding/kimi-for-coding", "Kimi Coding Plan stable ID, auto-maps to the latest backend model"),

package/dist/pi/web-access.js

@@ -9,6 +9,7 @@ export const PI_WEB_SEARCH_PROVIDERS = [
     "tavily", "you", "firecrawl", "jina", "searxng", "degoog", "duckduckgo", "perplexity", "gemini", "kimi", "exa",
     "serpdive", "kagi", "ollama", "anysearch", "xai", "mistral", "brightdata", "serpbase", "serpapi", "serper", "serply",
     "valyu", "bocha", "xcrawl", "baizhi", "zai", "keenable", "ceramic", "deepseek", "linkup", "ninerouter",
+    "cloudflare", "searchapi", "tabstack",
 ];
 // The web-search.json field holding a provider's key (searxng and ninerouter take their base URL);
 // undefined for providers with nothing to set.

package/extensions/research-tools/header.ts

@@ -201,8 +201,8 @@ export function installFeynmanHeader(
 			render(width: number): string[] {
 				const maxW = Math.max(width - 2, 1);
 				const cardW = Math.min(maxW, 120);
-				const innerW = cardW - 2;
-				const contentW = innerW - 2;
+				const innerW = Math.max(cardW - 2, 0);
+				const contentW = Math.max(innerW - 2, 0);
 				const outerPad = " ".repeat(Math.max(0, Math.floor((width - cardW) / 2)));
 				const lines: string[] = [];
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@companion-ai/feynman",
-  "version": "0.5.58",
+  "version": "0.5.60",
   "description": "The open source AI research agent.",
   "license": "MIT",
   "type": "module",
@@ -85,8 +85,8 @@
     "fast-xml-parser": "5.11.2",
     "pi-btw": "0.8.0",
     "pi-docparser": "4.0.0",
-    "pi-subagents": "0.83.0",
-    "pi-web-access": "0.45.0",
+    "pi-subagents": "0.84.0",
+    "pi-web-access": "0.46.0",
     "posthog-node": "^5.53.0",
     "undici": "^8.12.3"
   },