@gavin-hu/my-pi-agent 0.13.0 → 0.14.0

package/extensions/worktree/exit.ts

@@ -7,12 +7,14 @@ import type { ExtensionAPI, ExtensionContext } from "@earendil-works/pi-coding-a
 import { loadConfig } from "./config.ts";
 import { WorktreeCancelledError } from "./errors.ts";
 import {
+	commitsAheadOf,
 	currentBranch,
 	defaultBranch,
 	deleteBranch,
 	inspectWork,
 	isBranchMerged,
 	lockWorktree,
+	refExists,
 	unlockWorktree,
 	worktreeRemove,
 } from "./git.ts";
@@ -32,17 +34,35 @@ export interface ExitOptions {
  * A failed lookup degrades to the facts already in hand: an exit that succeeded
  * must not fail because the default branch could not be read.
  */
-async function describeHandoff(pi: ExtensionAPI, state: WorktreeState, ahead: number): Promise<Handoff> {
-	if (!state.branch) return { branch: null, base: null, ahead, merged: false };
+async function describeHandoff(pi: ExtensionAPI, state: WorktreeState, recorded: number): Promise<Handoff> {
+	if (!state.branch) return { branch: null, base: null, ahead: recorded, merged: false };
 	try {
 		// `origin/HEAD` names the merge target when the repository has a remote; a
 		// local-only repository has none, and the main checkout's own branch is the
 		// branch a merge would actually land on.
 		const base = (await defaultBranch(pi, state.repoRoot)) ?? (await currentBranch(pi, state.repoRoot)) ?? null;
-		const merged = base ? await isBranchMerged(pi, state.repoRoot, state.branch, base) : false;
-		return { branch: state.branch, base, ahead, merged };
+		if (!base) return { branch: state.branch, base: null, ahead: recorded, merged: false };
+		// Count against the resolved base branch, not the commit recorded at entry:
+		// a worktree branch rebased onto a newer local branch would otherwise report
+		// every commit the base gained since, as its own.
+		// Every lookup runs in the main checkout: the handoff is read after the exit,
+		// when the worktree directory may already be gone, while the branch refs it
+		// describes outlive it.
+		const root = state.repoRoot;
+		const ref = (await refExists(pi, root, base))
+			? base
+			: (await refExists(pi, root, `origin/${base}`))
+				? `origin/${base}`
+				: null;
+		if (!ref) return { branch: state.branch, base: null, ahead: recorded, merged: false };
+		return {
+			branch: state.branch,
+			base,
+			ahead: await commitsAheadOf(pi, root, state.branch, ref),
+			merged: await isBranchMerged(pi, root, state.branch, ref),
+		};
 	} catch {
-		return { branch: state.branch, base: null, ahead, merged: false };
+		return { branch: state.branch, base: null, ahead: recorded, merged: false };
 	}
 }
 

package/extensions/worktree/git.ts

@@ -191,6 +191,25 @@ export async function worktreeExists(pi: ExtensionAPI, dir: string): Promise<boo
 }
 
 /** Whether a local branch exists. */
+/**
+ * Count of commits on `branch` that `base` does not contain.
+ *
+ * Takes the branch by name rather than reading `HEAD`, because a handoff is read
+ * after the worktree may already be gone while its branch refs outlive it.
+ */
+export async function commitsAheadOf(pi: ExtensionAPI, dir: string, branch: string, base: string): Promise<number> {
+	const result = await git(pi, ["rev-list", "--count", `${base}..${branch}`], dir);
+	if (result.code !== 0) return 0;
+	const count = Number.parseInt(result.stdout.trim(), 10);
+	return Number.isFinite(count) ? count : 0;
+}
+
+/** Whether `ref` resolves here: a branch, a remote-tracking ref, or a tag. */
+export async function refExists(pi: ExtensionAPI, dir: string, ref: string): Promise<boolean> {
+	const result = await git(pi, ["rev-parse", "--verify", "--quiet", ref], dir);
+	return result.code === 0 && result.stdout.trim() !== "";
+}
+
 export async function branchExists(pi: ExtensionAPI, repoRoot: string, branch: string): Promise<boolean> {
 	const result = await git(pi, ["show-ref", "--verify", "--quiet", `refs/heads/${branch}`], repoRoot);
 	return result.code === 0;
@@ -240,6 +259,15 @@ export async function deleteBranch(
 	return { ok: false, error: outcome.error || `Could not delete branch ${branch}` };
 }
 
+/**
+ * Whether git ignores `path` in `dir`. Asks git rather than matching ignore
+ * text, so a directory covered by a wider rule also counts as ignored.
+ */
+export async function isIgnored(pi: ExtensionAPI, dir: string, path: string): Promise<boolean> {
+	const result = await git(pi, ["check-ignore", "-q", "--", path], dir);
+	return result.code === 0;
+}
+
 /** Porcelain status lines for a working tree; empty when clean. */
 export async function statusEntries(pi: ExtensionAPI, dir: string): Promise<string[]> {
 	const result = await git(pi, ["status", "--porcelain"], dir);

package/extensions/worktree/index.ts

@@ -53,6 +53,7 @@ import {
 	noteUnverifiableCommand,
 	publishWorktree,
 	resetDiagnostics,
+	resetGitignoreOffer,
 	setActive,
 	setBaseCwd,
 	setInactiveOverrides,
@@ -91,6 +92,7 @@ export function registerWorktree(pi: ExtensionAPI, { entryPath, createBuiltin }:
 		setActive(null);
 		clearConfigCache();
 		resetDiagnostics();
+		resetGitignoreOffer();
 
 		// A child `pi` process (subagent) inherits an active worktree. Bind to
 		// it without creating, locking, or persisting anything; the parent owns

package/extensions/worktree/root-tools.ts

@@ -133,7 +133,7 @@ export function registerRootTools(pi: ExtensionAPI, host: RootToolHost, deps: Ro
 					signal,
 					onUpdate,
 					withCwd(ctx, root),
-				)) as AgentToolResult<any>;
+				)) as AgentToolResult<unknown>;
 			},
 		});
 	}

package/extensions/worktree/runtime.ts

@@ -70,6 +70,11 @@ export function markGitignoreOffered(): void {
 	gitignoreOffered = true;
 }
 
+/** Re-arm the offer for the next session; `session_start` owns the reset. */
+export function resetGitignoreOffer(): void {
+	gitignoreOffered = false;
+}
+
 /**
  * Count a bash command the guard let through without being able to verify it.
  * Session-scoped on purpose: it is the one gap a user cannot see in the

package/lib/README.md

@@ -4,8 +4,10 @@ Small modules imported by two or more extensions. Pi loads each extension with
 an **isolated module cache**, so these are *value-only* libraries: pure
 functions, constants, and classes. Never keep cross-extension state here — a
 module-level variable would have one copy per extension, not one shared copy.
-The single exception is the event-bus pattern in `rails.ts`, where the state
-lives in the caller's closure, not in this module.
+`test/structure.test.ts` fails a module-scope `let`, `var`, `Map`, `WeakMap`, or
+empty array, so this is a test and not a convention. The single exception is the
+event-bus pattern in `rails.ts`, where the state lives in the caller's closure,
+not in this module.
 
 This directory sits outside `extensions/` on purpose: nothing here is a
 loadable extension entrypoint, and every module is a contract shared *between*
@@ -16,7 +18,7 @@ belongs in that extension instead — see `extensions/web-access/http.ts` and
 | Module | Responsibility |
 |---|---|
 | [`browser.ts`](./browser.ts) | Cross-platform default-browser opener shared by `file-browse` and `plan`: pure `browserCommand(url, platform)` plus best-effort `openInBrowser(url, { platform, spawn })` with an injectable spawn. |
-| [`config.ts`](./config.ts) | Config loading, two ways: `loadConfigFile` for a whole file, and the shared `bytefly.json` (`SHARED_CONFIG_FILE`) via `configSection` / `configValueAt` / `loadConfigSection` (global, then project), plus the atomic `writeConfigFile` / `writeConfigSection` / `writeConfigValue` / `writeConfigValueAt` (the last two edit one leaf, flat or nested, preserving siblings and metadata). Includes `clampInteger` / `clampNumber` / `cleanString` / `asRecord` / `readJson` / `readJsonResult`. |
+| [`config.ts`](./config.ts) | Config loading, two ways: `loadConfigFile` for a whole file, and the shared `bytefly.json` (`SHARED_CONFIG_FILE`) via `configSection` / `configValueAt` / `loadConfigSection` (global, then project), plus the atomic `writeConfigFile` / `writeConfigSection` / `writeConfigValue` / `writeConfigValueAt` / `unsetConfigValueAt` (the last three edit one leaf, flat or nested, preserving siblings and metadata; the last removes it and prunes what it emptied). Includes `clampInteger` / `clampNumber` / `cleanString` / `asRecord` / `readJson` / `readJsonResult`. |
 | [`env.ts`](./env.ts) | Env-var contracts shared across extensions: the worktree environment (`ENV_ROOT`, `worktreeRoot`, `resolveEffectiveCwd`) used by worktree, file-browse, job, and rewind, plus `isExtensionEnabled` / `ENV_DISABLED_EXTENSIONS` for the package-wide disable list. |
 | [`escape.ts`](./escape.ts) | `escapeHtml`: the single HTML text/attribute escape used by the browse page renderers and the Markdown and syntax highlighters. |
 | [`events.ts`](./events.ts) | Inter-extension `pi.events` channels and payloads: `JOB_FINISHED_CHANNEL` / `JobFinishedEvent` (published by `job`, consumed by bytefly's notify capability), `SUBAGENT_FINISHED_CHANNEL` / `SubagentFinishedEvent` (published by `subagent`, consumed by bytefly's footer roll-up), and `WEB_SEARCH_PROVIDER_CHANNEL` / `WebSearchProviderEvent` (published by `web-access` at session start, consumed by bytefly's doctor so it can report the resolved provider without importing the extension — the key itself is never in the payload). |

package/lib/config.ts

@@ -246,27 +246,51 @@ function setPath(source: Record<string, unknown>, path: readonly string[], value
 }
 
 /**
- * Delete one key from one top-level section, preserving its siblings and the
- * rest of the document. An emptied section is removed rather than left as `{}`.
- * A no-op when the file, section, or key is absent; refuses a malformed
- * document.
+ * Delete the leaf at `keyPath` from one top-level section, preserving every
+ * sibling key, every other section, and document metadata. An object left empty
+ * by the deletion goes with it, the section included, so a file does not fill
+ * with `{}` shells. A no-op when the file, section, or leaf is absent; refuses a
+ * malformed document and an empty path.
  */
-export function unsetConfigValue(path: string, section: string, key: string): void {
+export function unsetConfigValueAt(path: string, section: string, keyPath: readonly string[]): void {
+	if (keyPath.length === 0) throw new Error(`Cannot update ${path}: empty key path`);
 	const result = readJsonResult(path);
 	if (result.state === "absent") return;
 	if (result.state === "error") throw new Error(`Cannot update ${path}: ${result.error}`);
 
 	const document = result.value;
 	const current = configSection(document, section);
-	if (!current || !(key in current)) return;
+	if (!current) return;
 
-	const next = { ...current };
-	delete next[key];
-	if (Object.keys(next).length === 0) delete document[section];
+	const next = withoutPath(current, keyPath);
+	if (next === current) return;
+	if (next === undefined) delete document[section];
 	else document[section] = next;
 	writeConfigFile(path, document);
 }
 
+/**
+ * Copy `source` without the leaf at `path`, or `undefined` once nothing is left.
+ * Returns `source` itself when the leaf is absent or sits behind a non-object,
+ * so the caller can tell "nothing to delete" from "a deletion happened".
+ */
+function withoutPath(source: Record<string, unknown>, path: readonly string[]): Record<string, unknown> | undefined {
+	const [head, ...rest] = path;
+	if (head === undefined || !(head in source)) return source;
+	const next = { ...source };
+	if (rest.length === 0) {
+		delete next[head];
+	} else {
+		const child = asRecord(source[head]);
+		if (!child) return source;
+		const pruned = withoutPath(child, rest);
+		if (pruned === child) return source;
+		if (pruned === undefined) delete next[head];
+		else next[head] = pruned;
+	}
+	return Object.keys(next).length === 0 ? undefined : next;
+}
+
 /** Write a whole config document atomically (sibling temp file, then rename). */
 export function writeConfigFile(path: string, document: Record<string, unknown>): void {
 	mkdirSync(dirname(path), { recursive: true });

package/lib/format.ts

@@ -49,6 +49,12 @@ export function formatDuration(ms: number): string {
 	return `${hours}h${String(minutes % 60).padStart(2, "0")}m`;
 }
 
+/** `1 tool`, `3 tools`: a tool count with the right word. */
+export function formatToolCount(count: number): string {
+	const n = Number.isFinite(count) ? Math.max(0, Math.trunc(count)) : 0;
+	return `${formatCount(n)} ${n === 1 ? "tool" : "tools"}`;
+}
+
 /**
  * Replace terminal control characters (including ESC and the C1 block) with
  * spaces, keeping `\n` and `\t` for callers that render multi-line text.

package/lib/requirements.ts

@@ -111,6 +111,21 @@ export interface SafetyCheck {
 	hint: string;
 }
 
+/**
+ * A fact that ages: something checked by hand on a date, which is still worth
+ * trusting only for a while. The date arrives through a seam because `lib/` cannot
+ * import the extension that owns the record.
+ */
+export interface AgeCheck {
+	kind: "age";
+	/** What was verified, phrased for the report, e.g. `the built-in rate tables`. */
+	what: string;
+	/** Days after which the record counts as stale. */
+	maxAgeDays: number;
+	enables: string;
+	hint: string;
+}
+
 export type RequirementCheck =
 	| BinaryCheck
 	| ModuleCheck
@@ -118,7 +133,8 @@ export type RequirementCheck =
 	| InvocationCheck
 	| NotifyCheck
 	| ProviderCheck
-	| SafetyCheck;
+	| SafetyCheck
+	| AgeCheck;
 
 /** What an extension needs, split by how badly it needs it. */
 export interface ExtensionRequirements {
@@ -274,6 +290,13 @@ export const REQUIREMENTS: Readonly<Record<string, ExtensionRequirements>> = {
 	bytefly: {
 		configFiles: [SHARED_CONFIG_FILE],
 		optional: [
+			{
+				kind: "age",
+				what: "the built-in DeepSeek rate tables",
+				maxAgeDays: 90,
+				enables: "the footer's cost total tracks the published tariff",
+				hint: "re-check https://api-docs.deepseek.com/quick_start/pricing against `footer/price/config.ts`, then update `PRICE_VERIFIED_AT`.",
+			},
 			{
 				kind: "notify",
 				enables: "the configured notification delivery",
@@ -328,6 +351,10 @@ export interface ProbeSeams {
 	reach?: (url: string) => Promise<{ ok: boolean; error?: string }>;
 	/** True when the caller asked for an explicit refresh, which is when a probe may touch the network. */
 	refresh?: boolean;
+	/** The day a hand-checked record was verified, as `YYYY-MM-DD`, when the extension records one. */
+	priceVerifiedAt?: () => string | undefined;
+	/** The clock the age check reads; defaults to the process clock. */
+	now?: () => number;
 }
 
 /**
@@ -494,6 +521,56 @@ function safetyFindings(
 	return [{ extension, check: label, severity: "ok", detail: check.enables }];
 }
 
+/**
+ * Whole days between an ISO `YYYY-MM-DD` date and `now`, or undefined for a date
+ * that does not parse or does not exist on the calendar.
+ *
+ * A date up to a day in the future reads as zero days old: a record made in a
+ * timezone ahead of UTC is not a typo, and reporting it as missing would hide a
+ * fresh record. Anything further ahead is a typo, so it is not a date.
+ */
+export function ageInDays(date: string, now: number): number | undefined {
+	if (!/^\d{4}-\d{2}-\d{2}$/.test(date)) return undefined;
+	const stamp = Date.parse(`${date}T00:00:00Z`);
+	if (!Number.isFinite(stamp)) return undefined;
+	// `Date.parse` accepts 2026-02-31 by rolling it into March; reject the roll.
+	if (new Date(stamp).toISOString().slice(0, 10) !== date) return undefined;
+	const days = Math.floor((now - stamp) / 86_400_000);
+	if (days >= 0) return days;
+	// One day of skew is a timezone, not a mistake.
+	return days >= -1 ? 0 : undefined;
+}
+
+/** The findings for a fact that ages. */
+function ageFindings(extension: string, check: AgeCheck, failSeverity: FindingSeverity, seams: ProbeSeams): Finding[] {
+	const label = check.what;
+	const date = seams.priceVerifiedAt?.();
+	const age = date === undefined ? undefined : ageInDays(date, (seams.now ?? Date.now)());
+	if (date === undefined || age === undefined) {
+		return [
+			{
+				extension,
+				check: label,
+				severity: "info",
+				detail: `no verification date is recorded for ${label}`,
+			},
+		];
+	}
+	const days = `${age} day${age === 1 ? "" : "s"} ago`;
+	if (age <= check.maxAgeDays) {
+		return [{ extension, check: label, severity: "ok", detail: `${label} last checked ${days}` }];
+	}
+	return [
+		{
+			extension,
+			check: label,
+			severity: failSeverity,
+			detail: `${label} were last checked ${days}, beyond the ${check.maxAgeDays}-day window — ${check.enables}`,
+			hint: check.hint,
+		},
+	];
+}
+
 /** Run one check. `failSeverity` comes from which list the check sits in. */
 async function runCheck(
 	extension: string,
@@ -611,6 +688,8 @@ async function runCheck(
 			return providerFindings(extension, check, failSeverity, seams);
 		case "safety":
 			return safetyFindings(extension, check, failSeverity, seams);
+		case "age":
+			return ageFindings(extension, check, failSeverity, seams);
 	}
 }
 

package/lib/tui/columns.ts

@@ -10,6 +10,10 @@
  */
 
 import { sliceByColumn, truncateToWidth, visibleWidth } from "@earendil-works/pi-tui";
+import { sanitizeLine } from "../format.ts";
+
+/** The columns a label gets before it stops reading as a label. */
+export const LABEL_WIDTH = 48;
 
 /** A usable origin: terminal arithmetic starts from one column, never zero. */
 function columns(width: number): number {
@@ -45,6 +49,19 @@ export function clipMiddle(text: string, width: number, ellipsis = "…"): strin
 	return clip(`${head}${ellipsis}${tail}`, w, ellipsis);
 }
 
+/**
+ * A single-line label clipped to {@link LABEL_WIDTH}.
+ *
+ * The sanitizer runs first, then the clip: cutting the raw text first would put
+ * a cut inside an escape sequence a sanitizer can no longer recognize, and a
+ * newline would be left to break the row in two. The default is
+ * {@link sanitizeLine}; an extension with its own log- or file-authored text
+ * passes that sanitizer instead.
+ */
+export function labelLine(text: string, sanitize: (text: string) => string = sanitizeLine): string {
+	return clip(sanitize(text), LABEL_WIDTH);
+}
+
 /** Pad `text` on the right to exactly `width` columns. Never truncates. */
 export function padTo(text: string, width: number): string {
 	const missing = columns(width) - visibleWidth(text);

package/lib/tui/tool.ts

@@ -136,7 +136,8 @@ export function moreHint(theme: Theme, hidden: number, noun = "lines"): string {
 
 /** The render context fields the elapsed timer needs. */
 export interface ToolRenderClock {
-	state: any;
+	/** Pi's per-call render state, opaque here: this module only ever casts it. */
+	state: unknown;
 	invalidate(): void;
 }
 
@@ -191,7 +192,10 @@ export function elapsedSuffix(theme: Theme, durationMs: number | undefined, minM
  * (the renderer's `isPartial` branch draws its own running line) and the host
  * replaces it with the final result.
  */
-export function startToolProgress(onUpdate: ((partial: any) => void) | undefined): void {
+export function startToolProgress(
+	// allow:any Pi's partial-result type is generic over each tool's details, so a shared helper cannot name it.
+	onUpdate: ((partial: any) => void) | undefined,
+): void {
 	onUpdate?.({ content: [], details: undefined });
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gavin-hu/my-pi-agent",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "description": "Personal Pi customizations, packaged as a Pi package: worktree isolation and rewind snapshots, question, todo, goal, plan, subagent, job, watch, web-access, file-browse, file-open, document, memory, wechat, and bytefly.",
   "keywords": [
     "pi-package",
@@ -105,6 +105,7 @@
     "config:migrate": "bun run scripts/migrate-config.ts",
     "compat:versions": "bun run scripts/peer-versions.ts",
     "bench:render": "bun run scripts/render-bench.ts",
+    "screenshot:file-browse": "bun run scripts/file-browse-shot.ts",
     "screenshot:plan": "bun run scripts/plan-review-shot.ts",
     "screenshot:tools": "bun run scripts/tool-renderings.ts gallery assets/tool-renderings.png",
     "screenshot:tool-pngs": "bun run scripts/tool-renderings.ts tools assets/tools",

package/themes/bytefly-dark.json

@@ -17,7 +17,6 @@
     "purple": "#bc8cff",
     "pink": "#f778ba",
     "selectionBg": "#17273a",
-    "customBg": "#26233a",
     "successBg": "#12271a",
     "errorBg": "#3d1a21",
     "searchBg": "#3d331a",
@@ -43,9 +42,9 @@
     "searchMatchText": "text",
     "userMessageBg": "",
     "userMessageText": "text",
-    "customMessageBg": "customBg",
+    "customMessageBg": "",
     "customMessageText": "muted",
-    "customMessageLabel": "purple",
+    "customMessageLabel": "blue",
     "toolPendingBg": "canvasSubtle",
     "toolSuccessBg": "successBg",
     "toolErrorBg": "errorBg",

package/themes/bytefly-light.json

@@ -16,7 +16,6 @@
     "yellow": "#9a6700",
     "purple": "#8250df",
     "pink": "#bf3989",
-    "customBg": "#f5f1fd",
     "successBg": "#e9f6ed",
     "errorBg": "#fcf0f1",
     "selectionBg": "#e8f2fc",
@@ -43,9 +42,9 @@
     "searchMatchText": "text",
     "userMessageBg": "",
     "userMessageText": "text",
-    "customMessageBg": "customBg",
+    "customMessageBg": "",
     "customMessageText": "muted",
-    "customMessageLabel": "purple",
+    "customMessageLabel": "blue",
     "toolPendingBg": "canvasSubtle",
     "toolSuccessBg": "successBg",
     "toolErrorBg": "errorBg",