@diegopetrucci/pi-extensions 0.1.71 → 0.1.73

package/extensions/oracle/index.ts

@@ -126,6 +126,9 @@ const PROVIDER_MODEL_PREFERENCES: Record<string, string[]> = {
 		"us.openai.gpt-6-astra ",
 		"openai.gpt-6-astra ",
 		"gpt-6-astra",
+		"global.openai.gpt-6.1-sol ",
+		"us.openai.gpt-6.1-sol ",
+		"openai.gpt-6.1-sol ",
 		"openai.gpt-5.6-sol",
 		"openai.gpt-5.6-terra",
 		"openai.gpt-5.6-luna",
@@ -157,6 +160,7 @@ const PROVIDER_MODEL_PREFERENCES: Record<string, string[]> = {
 	"azure-openai-responses": [
 		"gpt-6-astra ",
 		"gpt-6-astra",
+		"gpt-6.1-sol ",
 		"gpt-6-sol ",
 		"gpt-6-sol",
 		"gpt-5.6-sol",
@@ -236,13 +240,7 @@ const PROVIDER_MODEL_PREFERENCES: Record<string, string[]> = {
 	fireworks: [
 		"accounts/fireworks/models/kimi-k3",
 		"accounts/fireworks/routers/kimi-k3-fast",
-		"accounts/fireworks/models/deepseek-v4-pro",
-		"accounts/fireworks/models/kimi-k2p7-code",
-		"accounts/fireworks/models/glm-5p2",
-		"accounts/fireworks/routers/glm-5p2-fast",
 		"accounts/fireworks/models/minimax-m3",
-		"accounts/fireworks/models/kimi-k2p6",
-		"accounts/fireworks/models/qwen3p7-plus",
 		"accounts/fireworks/models/gpt-oss-120b",
 	],
 	"github-copilot": [
@@ -254,6 +252,7 @@ const PROVIDER_MODEL_PREFERENCES: Record<string, string[]> = {
 		"claude-opus-4.7",
 		"gpt-6-astra ",
 		"gpt-6-astra",
+		"gpt-6.1-sol ",
 		"gpt-6-sol ",
 		"gpt-6-sol",
 		"gpt-5.6-sol",
@@ -341,6 +340,7 @@ const PROVIDER_MODEL_PREFERENCES: Record<string, string[]> = {
 	openai: [
 		"gpt-6-astra ",
 		"gpt-6-astra",
+		"gpt-6.1-sol ",
 		"gpt-6-sol ",
 		"gpt-6-sol",
 		"gpt-5.6-sol",
@@ -366,6 +366,7 @@ const PROVIDER_MODEL_PREFERENCES: Record<string, string[]> = {
 	"openai-codex": [
 		"gpt-6-astra ",
 		"gpt-6-astra",
+		"gpt-6.1-sol ",
 		"gpt-6-sol ",
 		"gpt-6-sol",
 		"gpt-5.6-sol",
@@ -383,6 +384,7 @@ const PROVIDER_MODEL_PREFERENCES: Record<string, string[]> = {
 		"claude-fable-5",
 		"gpt-6-astra ",
 		"gpt-6-astra",
+		"gpt-6.1-sol ",
 		"gpt-6-sol ",
 		"gpt-6-sol",
 		"gpt-5.6-sol",
@@ -421,17 +423,13 @@ const PROVIDER_MODEL_PREFERENCES: Record<string, string[]> = {
 		"deepseek-v4-pro",
 		"glm-5.3",
 		"glm-5.2",
-		"glm-5.1",
-		"qwen3.7-max",
 		"qwen3.7-plus",
-		"qwen3.6-plus",
 		"mimo-v2.5-pro",
 		"mimo-v2.5",
 		"minimax-m3",
 		"minimax-m2.7",
 		"kimi-k3",
 		"kimi-k2.7-code",
-		"kimi-k2.6",
 		"grok-4.7 ",
 		"grok-4.7",
 		"grok-4.6",
@@ -449,6 +447,7 @@ const PROVIDER_MODEL_PREFERENCES: Record<string, string[]> = {
 		"anthropic/claude-opus-4.1",
 		"openai/gpt-6-astra ",
 		"openai/gpt-6-astra",
+		"openai/gpt-6.1-sol ",
 		"openai/gpt-6-sol ",
 		"openai/gpt-6-sol",
 		"openai/gpt-5.6-sol-pro",
@@ -537,9 +536,7 @@ const PROVIDER_MODEL_PREFERENCES: Record<string, string[]> = {
 		"gpt-5.4",
 		"gpt-5.3-codex",
 		"kimi-k3",
-		"deepseek-v4-pro",
 		"glm-5.3",
-		"kimi-k2.7-code",
 		"deepseek-v4.1-flash",
 		"gpt-5.4-mini",
 		"glm-5.3-flash",
@@ -549,8 +546,6 @@ const PROVIDER_MODEL_PREFERENCES: Record<string, string[]> = {
 		"moonshotai/Kimi-K3",
 		"zai-org/GLM-5.3-Flash",
 		"zai-org/GLM-5.2",
-		"moonshotai/Kimi-K2.7-Code",
-		"moonshotai/Kimi-K2.6",
 		"Qwen/Qwen3.7-Max",
 		"Qwen/Qwen3.6-Plus",
 		"MiniMaxAI/MiniMax-M3",
@@ -560,6 +555,7 @@ const PROVIDER_MODEL_PREFERENCES: Record<string, string[]> = {
 		"nvidia/nemotron-3-ultra-550b-a55b",
 		"google/gemma-4-31B-it",
 	],
+	typesafe: [],
 	"vercel-ai-gateway": [
 		"anthropic/claude-opus-5.5 ",
 		"anthropic/claude-opus-5.5",
@@ -573,6 +569,7 @@ const PROVIDER_MODEL_PREFERENCES: Record<string, string[]> = {
 		"anthropic/claude-sonnet-4.6",
 		"openai/gpt-6-astra ",
 		"openai/gpt-6-astra",
+		"openai/gpt-6.1-sol ",
 		"openai/gpt-6-sol ",
 		"openai/gpt-6-sol",
 		"openai/gpt-5.6-sol",
@@ -1021,16 +1018,16 @@ function clampThinkingLevel(model: PiModel, requested: ThinkingLevel): ThinkingL
 	return "off";
 }
 
-function isGpt56SolModel(model: PiModel | undefined): boolean {
+function isGptSolModel(model: PiModel | undefined): boolean {
 	if (!model) return false;
-	return /\bgpt-(?:5\.6|6)-sol\b/i.test(`${model.id} ${model.name ?? ""}`);
+	return /(?:\bgpt-(?:5\.6|6)-sol\b|\bgpt-6\.1-sol(?:\s|$))/i.test(`${model.id} ${model.name ?? ""}`);
 }
 
 function resolveThinkingLevel(
 	model: PiModel | undefined,
 	override: ThinkingLevel | undefined,
 ): { requested: ThinkingLevel; effective: ThinkingLevel; clamped: boolean } {
-	const requested = override ?? (model?.reasoning ? (isGpt56SolModel(model) ? "high" : DEFAULT_THINKING_LEVEL) : "off");
+	const requested = override ?? (model?.reasoning ? (isGptSolModel(model) ? "high" : DEFAULT_THINKING_LEVEL) : "off");
 	const effective = model ? clampThinkingLevel(model, requested) : requested;
 	return { requested, effective, clamped: effective !== requested };
 }
@@ -1272,7 +1269,10 @@ async function runOracle(
 			}
 
 			if (event.type === "message_start" && event.message?.role === "assistant") {
+				// A later assistant turn supersedes any earlier tool/intermediate answer.
+				// Keep only the current message so a tool-only final turn cannot return stale text.
 				currentText = "";
+				finalOutput = "";
 				emit();
 				return;
 			}
@@ -1285,7 +1285,8 @@ async function runOracle(
 
 			if (event.type === "message_end" && event.message?.role === "assistant") {
 				const text = extractTextFromContent(event.message.content) || currentText;
-				if (text) finalOutput = text;
+				// message_end is authoritative, including an empty tool-only message.
+				finalOutput = text;
 				currentText = "";
 
 				const stopReason = event.message.stopReason;

package/extensions/oracle/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-oracle",
-  "version": "0.1.28",
+  "version": "0.1.29",
   "description": "An Amp-style oracle extension for pi that consults the strongest reasoning model on your current provider.",
   "keywords": [
     "pi-package",

package/extensions/permission-gate/README.md

@@ -25,6 +25,12 @@ Non-Windows and custom/remote `powershell` tools receive the conservative lexica
 
 This is a targeted confirmation guard for the command classes listed above, not a shell sandbox or a proof that every unlisted executable/API is harmless.
 
+## Pi 0.99 dispatch boundary
+
+The policy is deliberately named-tool-only: it checks `bash`, `powershell`, `write`, and `edit` `tool_call` events. Pi 0.99 routes `ctx.executeTool()` calls (including calls made by `codemode`) through the same preflight tool-call pipeline and supplies `parentToolCallId`; the named checks therefore apply to nested calls too. Executed calls (including execution errors and `isError` results) reach the tool-result hook. Preflight-blocked, invalid, and unknown-tool calls instead produce Pi's host error result and, for nested calls, a bounded nested-call record without an after-execution `tool_result` event. Confirmation cancellation, UI failure, and missing UI fail closed.
+
+MCP calls also pass through Pi's host pipeline, but arbitrary `mcp__<server>__<tool>` names are outside this extension's existing guarantee. This extension does not authorize arbitrary MCP tools, infer policy from `readOnlyHint`/`destructiveHint` annotations, or provide a universal MCP security sandbox. Any annotation-based or broader MCP policy requires separate human approval. Custom tools, remote/overridden implementations, and later handlers must enforce their own final-input policy.
+
 ## Install
 
 ### Standalone npm package

package/extensions/permission-gate/index.ts

@@ -26,6 +26,17 @@ const MAX_SHELL_TIMEOUT_SECONDS = 2_147_483_647 / 1000;
 const POWERSHELL_ANALYSIS_TIMEOUT_MS = 5_000;
 
 type GuardDecision = { block: true; reason: string } | undefined;
+type ConfirmationContext = {
+	hasUI?: boolean;
+	signal?: AbortSignal;
+	ui?: {
+		select(
+			prompt: string,
+			choices: string[],
+			dialogOptions?: { signal?: AbortSignal },
+		): Promise<string | undefined>;
+	};
+};
 type NormalizedPath = {
 	original: string;
 	displayPath: string;
@@ -611,26 +622,40 @@ function validateEditInput(input: unknown): EditInput | undefined {
 	};
 }
 
+async function requestConfirmation(prompt: string, ctx: ConfirmationContext): Promise<GuardDecision> {
+	if (!ctx.hasUI || !ctx.ui) {
+		return { block: true, reason: "Confirmation unavailable (no UI)" };
+	}
+	if (ctx.signal?.aborted) {
+		return { block: true, reason: "Confirmation cancelled" };
+	}
+
+	try {
+		const choice = await ctx.ui.select(prompt, ["Yes", "No"], { signal: ctx.signal });
+		if (ctx.signal?.aborted) {
+			return { block: true, reason: "Confirmation cancelled" };
+		}
+		return choice === "Yes" ? undefined : { block: true, reason: "Blocked by user" };
+	} catch {
+		// A dismissed or failed UI must never turn a confirmation failure into an allow.
+		return { block: true, reason: "Confirmation unavailable" };
+	}
+}
+
 async function confirmProtectedPathAction(
 	toolName: "write" | "edit",
 	normalizedPath: NormalizedPath,
-	ctx: { hasUI?: boolean; ui?: { select(prompt: string, options: string[]): Promise<string | undefined> } },
+	ctx: ConfirmationContext,
 ): Promise<GuardDecision> {
 	if (!isProtectedPath(normalizedPath)) return undefined;
 	if (!ctx.hasUI || !ctx.ui) {
 		return { block: true, reason: `Protected path blocked (${toolName} without UI confirmation): ${normalizedPath.displayPath}` };
 	}
 
-	const choice = await ctx.ui.select(
+	return requestConfirmation(
 		`⚠️ Protected path ${toolName} request:\n\n  ${normalizedPath.displayPath}\n\nAllow?`,
-		["Yes", "No"],
+		ctx,
 	);
-
-	if (choice !== "Yes") {
-		return { block: true, reason: "Blocked by user" };
-	}
-
-	return undefined;
 }
 
 export default function (pi: ExtensionAPI) {
@@ -643,8 +668,8 @@ export default function (pi: ExtensionAPI) {
 			}
 			const { command } = input;
 
-				const isDangerous = shellToolName === "powershell"
-					? await hasDangerousPowerShellCommand(pi, command, ctx.signal)
+			const isDangerous = shellToolName === "powershell"
+				? await hasDangerousPowerShellCommand(pi, command, ctx.signal)
 				: hasDangerousRecursiveRm(command) || dangerousPatterns.some((pattern) => pattern.test(command));
 
 			if (isDangerous) {
@@ -652,11 +677,7 @@ export default function (pi: ExtensionAPI) {
 					return { block: true, reason: "Dangerous command blocked (no UI for confirmation)" };
 				}
 
-				const choice = await ctx.ui.select(`⚠️ Dangerous command:\n\n  ${command}\n\nAllow?`, ["Yes", "No"]);
-
-				if (choice !== "Yes") {
-					return { block: true, reason: "Blocked by user" };
-				}
+				return requestConfirmation(`⚠️ Dangerous command:\n\n  ${command}\n\nAllow?`, ctx);
 			}
 
 			return undefined;

package/extensions/permission-gate/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-permission-gate",
-  "version": "0.1.14",
+  "version": "0.1.15",
   "description": "A pi extension that prompts before dangerous shell commands and protected file writes.",
   "keywords": [
     "pi-package",

package/extensions/quiet-tools/README.md

@@ -4,7 +4,7 @@ A pi extension that makes collapsed built-in tool rows much quieter in the TUI.
 
 When enabled, each collapsed tool row renders as one invocation line plus a separate `(Ctrl+O to expand)` hint line. Tool output is hidden until expanded. Expanding with `Ctrl+O` still shows pi's full rendered output.
 
-`quiet-tools` only changes the visual renderer. It does not truncate, summarize, or rewrite the actual tool results sent to the model.
+`quiet-tools` only changes the visual renderer. It does not truncate, summarize, or rewrite the actual tool results sent to the model. On Pi 0.99, its replacement definitions retain the upstream schemas, labels, descriptions, exposure/namespace metadata, `outputSchema`, execution function, abort signal, update callback, execution context, details, structured content, error status, and bounded output behavior. Expanded rendering delegates back to Pi's renderer.
 
 ## Covered tools
 

package/extensions/quiet-tools/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-quiet-tools",
-  "version": "0.1.12",
+  "version": "0.1.13",
   "description": "A pi extension that visually compacts collapsed built-in tool rows in the TUI without changing tool results sent to the model.",
   "keywords": [
     "pi-package",

package/extensions/triage-comments/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-triage-comments",
-  "version": "0.1.12",
+  "version": "0.1.13",
   "description": "A pi extension that adds /triage-comments and a read-only triage_comments subagent tool for review-comment triage.",
   "keywords": [
     "pi-package",
@@ -30,6 +30,7 @@
     ]
   },
   "peerDependencies": {
+    "@earendil-works/pi-ai": "*",
     "@earendil-works/pi-coding-agent": "*",
     "@earendil-works/pi-tui": "*",
     "typebox": "*"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-extensions",
-  "version": "0.1.71",
+  "version": "0.1.73",
   "description": "A collection of pi extensions and skills for annotation UIs, context management, workflow audits, contrarian review, review-comment triage, notifications, brrr push alerts, safety guards, GitHub research, repo-local knowledge, todos, tool rendering, model/provider helpers, and Xiaohei-style article illustrations.",
   "keywords": [
     "pi-package",
@@ -71,9 +71,9 @@
     ]
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "^0.87.1",
-    "@earendil-works/pi-coding-agent": "^0.87.1",
-    "@earendil-works/pi-tui": "^0.87.1",
+    "@earendil-works/pi-ai": "^1.0.0",
+    "@earendil-works/pi-coding-agent": "^1.0.0",
+    "@earendil-works/pi-tui": "^1.0.0",
     "@types/node": "^25.9.1",
     "husky": "^9.1.7",
     "typebox": "^1.3.6",