@erichll/pi-auto-review 0.25.0 → 0.26.0

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## 0.26.0 - 2026-10-08
+
+- Upgrade Pi development dependencies and peer floors to `^1.1.0`, require
+  permission-system `>=40.0.2`, and align the Node engine with Pi
+  (`>=22.19.0`). Node types (`^26.6.4`) and TypeScript (`^7.0.2`) already
+  match the latest stable registry versions.
+- Retry `server_busy` and server-busy provider details within the existing
+  two-attempt review budget, aligning with Pi 1.1.0
+  ([#10543](https://github.com/earendil-works/pi/issues/10543)).
+- Recognize the exact Mistral `finish_reason: "error"` message from pi-ai
+  1.0.x as a transient server failure. pi-ai 1.1.0 adds a server-error suffix
+  that the existing classifier already recognizes
+  ([#10487](https://github.com/earendil-works/pi/issues/10487)); keep unknown,
+  authentication, and configuration failures non-retryable.
+- Clear staged UI auto-confirmations and one-shot interceptors when Pi 1.1.0
+  emits `agent_settled.aborted: true`
+  ([#10607](https://github.com/earendil-works/pi/issues/10607)). Preserve
+  existing behavior when the field is absent, false, or malformed.
+
 ## 0.25.0 - 2026-10-07
 
 - Pass permission-system's matched bash spelling (#910) through the review and

package/README.md

@@ -31,12 +31,11 @@ that dependency is a hard prerequisite (see [Install and enable](#install-and-en
 > **Prerequisite:** pi-auto-review is an authorizer inside
 > `@gotgenes/pi-permission-system`. Pi does not auto-install peer packages, so
 > install the permission system separately (once per machine) before this
-> extension. This release line requires Pi 1.0.0 or later and supports
-> permission-system 39.0.0 and later (development baseline validated against
-> permission-system 40.0.2). Use 40.0.2 or later for the bash-chain session-grant
-> security fix; the older peer floor is retained for API compatibility:
+> extension. This release line requires Pi 1.1.0 or later and
+> permission-system 40.0.2 or later, including the bash-chain session-grant
+> security fix:
 
-Node-based Pi requires Node.js 22.13.0 or newer. Permission auditing uses the
+Node-based Pi requires Node.js 22.19.0 or newer. Permission auditing uses the
 host runtime's built-in SQLite: `node:sqlite` on Node and `bun:sqlite` on Bun,
 including Bun-compiled Pi (verified with Bun 1.3.14). It does not require a
 SQLite CLI, system SQLite library, or npm SQLite package.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erichll/pi-auto-review",
-  "version": "0.25.0",
+  "version": "0.26.0",
   "description": "Fail-closed, model-backed approval broker for Pi: deterministically hard-denies dangerous operations, reviews dangerous boundaries with a reviewer model, and issues one-shot expiring grants that OS sandbox adapters must consume before retrying.",
   "type": "module",
   "license": "MIT",
@@ -24,7 +24,7 @@
     "access": "public"
   },
   "engines": {
-    "node": ">=22.13.0"
+    "node": ">=22.19.0"
   },
   "files": [
     "src",
@@ -47,14 +47,14 @@
     "test": "node --disable-warning=ExperimentalWarning --experimental-transform-types --import ./test/register-external-ts.mjs --test test/*.test.ts"
   },
   "peerDependencies": {
-    "@earendil-works/pi-ai": "^1.0.0",
-    "@earendil-works/pi-coding-agent": "^1.0.0",
-    "@gotgenes/pi-permission-system": ">=39.0.0"
+    "@earendil-works/pi-ai": "^1.1.0",
+    "@earendil-works/pi-coding-agent": "^1.1.0",
+    "@gotgenes/pi-permission-system": ">=40.0.2"
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "^1.0.0",
-    "@earendil-works/pi-coding-agent": "^1.0.0",
-    "@earendil-works/pi-server": "^1.0.0",
+    "@earendil-works/pi-ai": "^1.1.0",
+    "@earendil-works/pi-coding-agent": "^1.1.0",
+    "@earendil-works/pi-server": "^1.1.0",
     "@gotgenes/pi-permission-system": "^40.0.2",
     "@types/node": "^26.6.4",
     "typescript": "^7.0.2"

package/src/index.ts

@@ -669,6 +669,14 @@ export function createPiAutoReviewExtension(
     }
   });
 
+  pi.on("agent_settled", (event) => {
+    // Pi 1.0.x omits aborted. Only an explicit cancellation revokes staged
+    // allows and any one-shot UI interceptor left by that run.
+    if ((event as { aborted?: unknown }).aborted === true) {
+      uiAutoConfirmer.clear();
+    }
+  });
+
   pi.events.on("permissions:ui_prompt", (event) => {
     if (context) uiAutoConfirmer.handlePrompt(event, context);
     policyAudit.notePrompt(event);

package/src/review/provider.ts

@@ -128,6 +128,7 @@ export function classifyProviderFailure(
   }
 
   const code = errorCode(error);
+  if (code === "server_busy") return "transient_server";
   if (
     code &&
     new Set([
@@ -157,7 +158,13 @@ export function classifyProviderFailure(
   if (/\b429\b|rate.?limit|too many requests/i.test(detail)) {
     return "rate_limit";
   }
-  if (/\b5(?:00|02|03|04)\b|service.?unavailable|server.?error|internal.?error|overloaded/i.test(detail)) {
+  if (/\b5(?:00|02|03|04)\b|service.?unavailable|server.?error|internal.?error|overloaded|\bservers?[ _-]busy\b|\bservers? (?:are|is) currently busy\b/i.test(detail)) {
+    return "transient_server";
+  }
+  // pi-ai 1.0.x maps Mistral finish_reason "error" to this exact message.
+  // 1.1.0 (#10487) adds "(server error)", covered above. Do not make all
+  // stopReason="error" messages retryable: auth/config failures use it too.
+  if (/^Provider stopped with: error$/i.test(detail.trim())) {
     return "transient_server";
   }
   if (/unknown model|model not found|invalid model|unsupported model/i.test(detail)) {