@llblab/pi-kit 0.38.0 → 0.38.1

package/CHANGELOG.md

@@ -2,6 +2,11 @@
 
 All notable changes to `@llblab/pi-kit` are documented here.
 
+## 0.38.1: Bundled Package Updates (2026-10-29)
+
+- `Exact pins`: `@llblab/pi-claude-usage` 0.2.3 → 0.2.4; `@llblab/pi-clean-room` 0.3.0 → 0.3.1.
+- `Packaging`: Synchronizes the lockfile, bundle aliases and README inventory. Package membership and resource order remain unchanged; packed validation does not certify extension safety or installed-client behavior.
+
 ## 0.38.0: Bundled Package Updates (2026-10-26)
 
 - `Exact pins`: `@llblab/pi-state-flow` 0.26.5 → 0.27.1.

package/README.md

@@ -13,8 +13,8 @@ Package links lead to the owning repositories for usage, documentation, issues,
 | Package | Version | Purpose |
 | --- | ---: | --- |
 | [`@llblab/pi-actors`](https://github.com/llblab/pi-actors) | `0.55.0` | Inspectable local Runs, reusable Recipes, persistent tools, and delegation Skills |
-| [`@llblab/pi-claude-usage`](https://github.com/llblab/pi-claude-usage) | `0.2.3` | Claude subscription quota status and shared per-model Fast toggle for Opus, mirrored in Telegram |
-| [`@llblab/pi-clean-room`](https://github.com/llblab/pi-clean-room) | `0.3.0` | Isolated nested Pi TUI with named npm extensions and compatible model selection |
+| [`@llblab/pi-claude-usage`](https://github.com/llblab/pi-claude-usage) | `0.2.4` | Claude subscription quota status and shared per-model Fast toggle for Opus, mirrored in Telegram |
+| [`@llblab/pi-clean-room`](https://github.com/llblab/pi-clean-room) | `0.3.1` | Isolated nested Pi TUI with named npm extensions and compatible model selection |
 | [`@llblab/pi-codex-usage`](https://github.com/llblab/pi-codex-usage) | `0.13.2` | OpenAI/legacy Codex subscription quota and Business credit status, with persistent priority Fast toggle mirrored in Telegram |
 | [`@llblab/pi-grow-loop`](https://github.com/llblab/pi-grow-loop) | `0.9.0` | Visible continuation scheduling and bounded worker Skills through compiled, manifest-owned resources |
 | [`@llblab/pi-state-flow`](https://github.com/llblab/pi-state-flow) | `0.27.1` | Scoped context/memory compiler with step-independent current memory, stable Passive/Active modes and visible blocked-state status |

package/node_modules/@llblab/pi-claude-usage/AGENTS.md

@@ -20,4 +20,4 @@
   - Action: Do not add fallbacks, CLI probes, or API-key paths; API keys have no subscription quota, so report `n/a`. `utilization` is a used percent.
 - `Rate-limit discipline`: Quota polling must be shared across instances; HTTP 429 triggers shared backoff.
   - Trigger: Changing refresh cadence, retries, locking, or adding fetch paths.
-  - Action: Keep the single shared-state protocol in `lib/usage-store.ts`, orchestrated by `lib/status.ts` (leader refreshes every minute, takeover after 90 seconds by claiming leadership before fetching, a non-waiting OS-backed SQLite mutex around claiming and fenced publication, atomic writes, shared failure backoff). Always re-read the file for request authorization (`owner` + `claimId` + lease) and publication; do not use an in-memory ownership fallback. Lock failures and failed claim writes must deny requests. `mutex.sqlite` stores no quota or leadership data: never unlink/replace it while instances run or evict a paused holder; close or process death releases the mutex. Keep network calls outside critical sections. Instances otherwise only read the file; never add per-instance polling or probing requests.
+  - Action: Keep the single shared-state protocol in `lib/usage-store.ts`, orchestrated by `lib/status.ts` (leader refreshes every 3 minutes, takeover after 210 seconds by claiming leadership before fetching, a non-waiting OS-backed SQLite mutex around claiming and fenced publication, atomic writes, shared failure backoff). Always re-read the file for request authorization (`owner` + `claimId` + lease) and publication; do not use an in-memory ownership fallback. Lock failures and failed claim writes must deny requests. `mutex.sqlite` stores no quota or leadership data: never unlink/replace it while instances run or evict a paused holder; close or process death releases the mutex. Keep network calls outside critical sections. Instances otherwise only read the file; never add per-instance polling or probing requests.

package/node_modules/@llblab/pi-claude-usage/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 0.2.4: Quota Polling Hotfix
+
+- Reduced shared quota polling from once a minute to once every three minutes to lower request pressure on Anthropic's usage endpoint. Follower takeover now waits three minutes and thirty seconds so multiple instances preserve the slower cadence. Shared HTTP 429 backoff and local reset countdown updates remain in place.
+
 ## 0.2.3: Empty Quota Bar Hotfix
 
 - Aligned quota bars with rounded remaining percentages: when either window rounds to `0%`, its final segment disappears and the whole dual bar uses the error background, while the other half retains its quota. The 5-hour reset countdown follows the same zero boundary; near-full quota still rounds to the nearest 5% step.

package/node_modules/@llblab/pi-claude-usage/README.md

@@ -124,10 +124,10 @@ The extension ships an export-only [`index.ts`](./index.ts) and a flat domain DA
 
 To avoid independent polling, instances coordinate through `~/.pi/agent/tmp/pi-claude-usage/usage.json` (percentages and timestamps only, no tokens):
 
-- The instance that last updated the file is the leader and refreshes it every minute
+- The instance that last updated the file is the leader and refreshes it every 3 minutes
 - Every other instance only reads the file (re-checking every ≤30s) and redraws when it changes
-- Leadership is never cached in memory: before each usage request, the instance re-reads the file and checks its `owner`, unique `claimId`, and 90s lease. Publication rechecks that claim under the lock; a superseded success or failure is discarded. Failed locks or unwritten claims never authorize a request
-- If the file is 90 seconds old (leader is closed, busy, or asleep), the first follower that obtains the mutex takes over: it re-reads the JSON, writes itself as the leader with a fresh timestamp, releases the mutex, then fetches from the server and publishes under the mutex after rechecking its claim. Its next refresh is one minute later; JSON writes remain atomic renames
+- Leadership is never cached in memory: before each usage request, the instance re-reads the file and checks its `owner`, unique `claimId`, and 210s lease. Publication rechecks that claim under the lock; a superseded success or failure is discarded. Failed locks or unwritten claims never authorize a request
+- If the file is 210 seconds old (leader is closed, busy, or asleep), the first follower that obtains the mutex takes over: it re-reads the JSON, writes itself as the leader with a fresh timestamp, releases the mutex, then fetches from the server and publishes under the mutex after rechecking its claim. Its next refresh is three minutes later; JSON writes remain atomic renames
 - Claiming and publication use a non-waiting transaction in `mutex.sqlite`, through Node's built-in `node:sqlite` (Node ≥22.19.0, the existing package minimum). It stores no quota or leadership records and needs no extra package or service. The OS releases the lock when the connection closes or the process dies; there is no timeout-based lock stealing
 - Failures are written to the file with an exponential backoff (1 to 5 minutes; 5 to 30 minutes for HTTP 429) that applies to all instances
 - The last report stays visible for up to an hour; after that `error` is shown

package/node_modules/@llblab/pi-claude-usage/lib/status.ts

@@ -210,7 +210,7 @@ export function createClaudeUsageStatus(pi: ExtensionAPI) {
   };
 
   /**
-   * When this instance is due (leader after 1 minute, anyone after 90 seconds) it
+   * When this instance is due (leader after 3 minutes, anyone after 210 seconds) it
    * claims leadership under the lock (owner and timestamp, so no other
    * instance is due), then fetches, then stamps the outcome. Failures are
    * published with a backoff so other instances do not pile on.

package/node_modules/@llblab/pi-claude-usage/lib/usage-store.ts

@@ -17,11 +17,11 @@ import type { ClaudeUsageReport } from "./usage.ts";
  * atomic renames; short critical sections use an OS-backed SQLite mutex.
  */
 
-export const LEADER_INTERVAL_MS = 60_000;
+export const LEADER_INTERVAL_MS = 3 * 60_000;
 /** The leader is considered gone after missing its slot by 30 seconds. */
 export const TAKEOVER_AFTER_MS = LEADER_INTERVAL_MS + 30_000;
 /** Minimum pause between two fetch attempts of the same instance. */
-export const MIN_ATTEMPT_GAP_MS = 60_000;
+export const MIN_ATTEMPT_GAP_MS = LEADER_INTERVAL_MS;
 
 const STATE_FILE = "usage.json";
 const LOCK_FILE = "mutex.sqlite";

package/node_modules/@llblab/pi-claude-usage/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@llblab/pi-claude-usage",
-  "version": "0.2.3",
+  "version": "0.2.4",
   "private": false,
   "description": "Minimal Pi extension that shows Anthropic Claude subscription usage limits using Pi OAuth auth",
   "keywords": [

package/node_modules/@llblab/pi-clean-room/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.3.1: Extension-owned skill selection
+
+- Accept a bundled skill when its owning extension is also allowlisted, regardless of argument order, and prefer it over a same-named standalone skill. When the owner is missing, suggest its `/clean-room` command without enabling it implicitly or loading unrelated skills.
+- Accept equivalent separators for explicit skill selection while keeping completion unchanged.
+
 ## 0.3.0: Pi 1.0 Baseline and Package Licensing
 
 - `Licensing`: Includes the MIT LICENSE in source checkouts and npm packages, preserving existing author attribution.

package/node_modules/@llblab/pi-clean-room/index.ts

@@ -1,12 +1,13 @@
 import { spawnSync } from "node:child_process";
-import { existsSync, readFileSync, readdirSync } from "node:fs";
+import { existsSync, readFileSync, readdirSync, realpathSync, statSync } from "node:fs";
 import { homedir } from "node:os";
-import { isAbsolute, join, resolve } from "node:path";
+import { basename, dirname, isAbsolute, join, resolve, sep } from "node:path";
 import {
 	CONFIG_DIR_NAME,
 	getAgentDir,
 	type ExtensionAPI,
 	type ExtensionCommandContext,
+	type SlashCommandInfo,
 } from "@earendil-works/pi-coding-agent";
 
 const EMPTY_COMPONENT = { render: () => [], invalidate: () => {} };
@@ -94,6 +95,27 @@ export function resolveSkill(name: string, cwd: string, agentDir = getAgentDir()
 	return undefined;
 }
 
+function isWithin(path: string, root: string): boolean {
+	return path === root || path.startsWith(`${root}${sep}`);
+}
+
+function resolveBundledSkill(name: string, extensions: string[], commands: SlashCommandInfo[]): string | undefined {
+	const skill = commands.find((command) => command.source === "skill" && command.name === `skill:${name}`);
+	if (!skill || !existsSync(skill.sourceInfo.path)) return undefined;
+	const skillPath = realpathSync(skill.sourceInfo.path);
+	const baseDir = skill.sourceInfo.baseDir;
+	const owner = baseDir && existsSync(baseDir) ? realpathSync(baseDir) : undefined;
+	const allowed = extensions.some((extension) => {
+		const path = realpathSync(extension);
+		if (statSync(path).isDirectory()) return isWithin(skillPath, path) || (owner !== undefined && isWithin(owner, path));
+		if (!owner) return false;
+		if (skill.sourceInfo.origin === "package") return isWithin(path, owner);
+		const source = `extension:${basename(extension).replace(/\.(ts|js)$/, "")}`;
+		return skill.sourceInfo.source === source && owner === realpathSync(dirname(extension));
+	});
+	return allowed ? skill.sourceInfo.path : undefined;
+}
+
 export const RESOURCE_ARGUMENTS = ["skills", "agents", "system", "append-system"] as const;
 type ResourceArgument = (typeof RESOURCE_ARGUMENTS)[number];
 
@@ -126,7 +148,7 @@ export function buildCleanRoomArgs(
 }
 
 function parseNames(args: string): string[] {
-	return args.trim().split(/\s+/).filter(Boolean);
+	return args.trim().split(/\s+/).filter(Boolean).map((name) => name.replace(/^skills::?/, "skills/"));
 }
 
 function launchCleanRoom(
@@ -177,19 +199,27 @@ export default function cleanRoomExtension(pi: ExtensionAPI) {
 			));
 			const skillNames = names.filter((name) => name.startsWith("skills/")).map((name) => name.slice("skills/".length));
 			const extensionNames = names.filter((name) => !resources.has(name as ResourceArgument) && !name.startsWith("skills/"));
-			const missingSkills: string[] = [];
-			const skills = skillNames.map((name) => {
-				const path = resolveSkill(name, ctx.cwd);
-				if (!path) missingSkills.push(name);
-				return path;
-			}).filter((path): path is string => path !== undefined);
 			const missingExtensions: string[] = [];
 			const paths = extensionNames.map((name) => {
 				const path = resolveExtension(name, ctx.cwd);
 				if (!path) missingExtensions.push(name);
 				return path;
 			}).filter((path): path is string => path !== undefined);
+			const commands = skillNames.length > 0 ? pi.getCommands() : [];
+			const missingSkills: string[] = [];
+			const skills = skillNames.map((name) => {
+				const path = resolveBundledSkill(name, paths, commands) ?? resolveSkill(name, ctx.cwd);
+				if (!path) missingSkills.push(name);
+				return path;
+			}).filter((path): path is string => path !== undefined);
 			if (missingSkills.length > 0) {
+				const candidates = discoverExtensionNames(ctx.cwd).map((name) => ({ name, path: resolveExtension(name, ctx.cwd) }));
+				for (const name of missingSkills) {
+					const owner = candidates.find(({ path }) => path && resolveBundledSkill(name, [path], commands));
+					if (!owner) continue;
+					ctx.ui.notify(`Skill ${name} belongs to ${owner.name}; use /clean-room ${owner.name}`, "error");
+					return;
+				}
 				ctx.ui.notify(`Unknown skill${missingSkills.length > 1 ? "s" : ""}: ${missingSkills.join(", ")}`, "error");
 				return;
 			}

package/node_modules/@llblab/pi-clean-room/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@llblab/pi-clean-room",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "private": false,
   "description": "Launch an isolated Pi TUI with only explicitly selected extensions",
   "keywords": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@llblab/pi-kit",
-  "version": "0.38.0",
+  "version": "0.38.1",
   "private": false,
   "publishConfig": {
     "access": "public"
@@ -45,8 +45,8 @@
   ],
   "dependencies": {
     "@llblab/pi-actors": "0.55.0",
-    "@llblab/pi-claude-usage": "0.2.3",
-    "@llblab/pi-clean-room": "0.3.0",
+    "@llblab/pi-claude-usage": "0.2.4",
+    "@llblab/pi-clean-room": "0.3.1",
     "@llblab/pi-codex-usage": "0.13.2",
     "@llblab/pi-grow-loop": "0.9.0",
     "@llblab/pi-state-flow": "0.27.1",