@pi-unipi/unipi 2.2.5 → 2.2.6

package/CHANGELOG.md

@@ -0,0 +1,403 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
+
+## [Unreleased]
+
+## [2.2.6] — 2026-08-04
+
+### Fixed
+- `updater`: **the changelog never appeared after an update.** `CHANGELOG.md` was not in the published tarball at all, and both the update prompt and `/unipi:changelog` resolved it from `process.cwd()` — which only exists when pi happens to be running inside the UniPi checkout. The file now ships, and a new `resolveChangelogPath()` resolves it from the installed package location with a working-directory fallback.
+- `updater`: `getNewerVersions()` stopped only on an *exact* version match, so when the installed version was absent from the changelog (a local build, or a version newer than any entry) it reported every historical release as new. It now compares versions properly via `isNewerVersion()`.
+- `image`: `image_generate` failed with a bare `Unknown provider: omniroute`. pi-ai's images collection carries its own provider set (currently only `openrouter`) and is separate from pi's chat model registry, so a chat provider's image models were selectable but could never generate. The error now names the providers that can generate and points at `/unipi:image-settings`, models that cannot generate are marked `(cannot generate)` in the picker, and selecting one requires a confirming second Enter.
+
+## [2.2.5] — 2026-08-04
+
+### Fixed
+- `image`/`notify`/`compactor`/`footer`/`info-screen`: **Escape did not close overlays or exit a filter/search field.** Every overlay detected Escape with `data === "\x1b"`, but under the kitty keyboard protocol Escape arrives as `\x1b[27u` (and as `\x1b[27;1;27~` with modifyOtherKeys), so the comparison silently failed and the overlay could not be cancelled. All 19 occurrences across 8 files now use pi-tui's `matchesKey(data, "escape")`, which understands every encoding. Arrow keys, Enter and Ctrl+C in the image model selector were converted to `matchesKey` for the same reason.
+- `image`: the model selector's filter now supports arrow-key navigation without leaving the filter, and escape sequences can no longer be typed into the filter as literal text.
+
+## [2.2.4] — 2026-08-04
+
+### Fixed
+- `image`: `image_recognize` failed with `Unexpected token 'd', "data: {"id"... is not valid JSON` against OpenAI-compatible gateways that reply with `text/event-stream` even when streaming was not requested (omniroute does this). Both the OpenAI and Anthropic paths called `response.json()` on an SSE body. Responses are now read as text and, when the body is a `data:`-framed stream, the deltas are parsed and concatenated — handling OpenAI `choices[].delta.content` and Anthropic `content_block_delta` shapes, skipping malformed frames rather than failing the request. Both requests now also send `stream: false`. A non-SSE body that still cannot be parsed reports its first 200 characters instead of a bare parser error.
+
+## [2.2.3] — 2026-08-04
+
+### Added
+- `image`: the model pickers now accept a **custom model reference** — press `c` in `/unipi:image-settings` and type any `provider/model-id`. Image-generator detection is necessarily heuristic (third-party providers publish no image metadata), so this guarantees no model is ever unreachable. `resolveImageGenModel()` and `resolveVisionModel()` accept a well-formed reference even when it is absent from the catalog, while a bare typo with no provider segment still gets the "Unknown model" list, and a registered text-only model still gets the precise "does not accept image input" error. An empty catalog is no longer a dead end — the picker opens anyway so a model can be entered by hand.
+
+## [2.2.2] — 2026-08-04
+
+### Fixed
+- `image`: the model pickers only offered pi-ai's built-in OpenRouter catalog, so image models from providers registered by other extensions (such as `pi-omniroute-bridge`) could not be selected. The obvious filter — `output.includes("image")` — matches nothing, because third-party providers surface text-to-image endpoints as ordinary chat models with no declared output modality. `listAllImageGenModels()` now merges the built-in catalog with registry-contributed generators, de-duplicated by `provider/id`; `image_generate` resolves against the same merged list. Against a real 393-model omniroute registry this goes from 34 to 46 selectable generation models with no false positives.
+- `image`: **critical** — opening a model picker left both the overlay and the settings menu holding keyboard focus, so arrow keys drove the hidden menu and neither could be closed or toggled. `pickModel()` called `ctx.ui.custom()` without awaiting the promise it returns, letting the settings loop mount the next `ctx.ui.select` while the overlay was still on screen. It is now awaited, and the chosen model is persisted only after the overlay closes so cancelling leaves the config untouched.
+- `image`: the model-selector overlay swallowed `Ctrl+C`, leaving no way out, and deferred its close by 500ms after selection — which let the caller resume while the overlay still had focus. `Ctrl+C` now always closes, including mid-filter, and selection closes synchronously.
+
+## [2.2.1] — 2026-08-04
+
+### Fixed
+- `notify`: `permission-prompt-message.ts` was missing from the published tarball, so `@pi-unipi/notify@2.2.0` failed at load with `Cannot find module './permission-prompt-message.js'` — which took the whole umbrella extension down on a clean install. The package's `files` array was an explicit per-file whitelist and the new module was never added to it; it is now a `*.ts` glob so root-level modules cannot be omitted again. Caught by booting the published tarball in a clean directory rather than testing the workspace copy.
+
+## [2.2.0] — 2026-08-04
+
+### Breaking Changes
+- **BREAKING:** `web-api` provider `source:` numbers changed, because wigolo was inserted at rank 1 for both search and read. Search is now `1`=wigolo `2`=DuckDuckGo `3`=Jina Search `4`=SerpAPI `5`=Tavily `6`=Perplexity (was `1`=DuckDuckGo `2`=Jina `3`=SerpAPI `4`=Tavily `5`=Perplexity). Read is now `1`=wigolo `2`=Jina Reader `3`=Firecrawl `4`=Perplexity (was `1`=Jina Reader `2`=Firecrawl `3`=Perplexity); read `0` is still the built-in smart-fetch engine. Migration: if you pass an explicit `source:` to `web_search` or `multi_web_content_read`, add 1 to the old number — or simply omit `source:` and let auto-selection pick, which now also falls through on provider failure. Omitting `source:` requires no change.
+- **BREAKING:** `web_llm_summarize`'s `source:` range is corrected to `1`=Perplexity `2`=LLM Summarize (`maximum` was previously documented as `3` and listed read providers, which never matched the registered summarize providers). Migration: use `1` or `2`, or omit `source:`.
+
+### Added
+- `image`: new `@pi-unipi/image` package with two agent tools. `image_generate` creates images from a text prompt using pi-ai's image catalog (34 models — FLUX.2, Gemini 3 Pro Image, GPT-5 Image, Recraft, Riverflow — served through OpenRouter), returning them inline and saving them to disk (default `~/.unipi/images`). `image_recognize` analyzes an image with any model whose input modality includes `image`, accepting a local file path, `data:` URL, or base64, with a customizable system prompt. Both are configured via `/unipi:image-settings`, which includes a filterable model picker.
+- `web-api`: [wigolo](https://github.com/KnockOutEZ/wigolo) is now the default search and read provider (rank 1 for both, enabled by default) — a local-first engine with multi-engine search, rank fusion and on-device reranking, at $0/query with no API key. It is an **optional** dependency loaded through a dynamic `import()`, because wigolo-sdk is AGPL-3.0-only while UniPi is MIT; UniPi therefore ships no AGPL code. Install with `npm install -g wigolo && npx wigolo init`. Existing providers renumbered: search `2`=DuckDuckGo `3`=Jina `4`=SerpAPI `5`=Tavily `6`=Perplexity; read `2`=Jina Reader `3`=Firecrawl `4`=Perplexity.
+- `web-api`: auto-selection now falls through to the next-ranked provider when one fails, so an enabled-but-uninitialized wigolo cannot break every web call. An explicit `source:` stays strict so the user's choice is respected and reported.
+- `notify`: new built-in `permission_request` event bound to `@gotgenes/pi-permission-system`'s `permissions:ui_prompt` broadcast, which fires only when a human-facing permission prompt is about to be shown (no spam from policy auto-allow/deny or session approvals). Forwarded subagent prompts are marked `(forwarded)`. Disabled by default (closes #25).
+- `core`: new `tui-width` helpers (`normalizeWidth`, `boxInnerWidth`, `adaptiveInnerWidth`, `shouldRenderBorder`, `contentWidth`, `safeRepeat`, `WidthKeyedCache`) encoding the invariant that a rendered line must never exceed the terminal width.
+
+### Fixed
+- `ask-user`/`tui`: Pi no longer crashes on terminals narrower than 42 columns. Every box-drawing component floored its content width at `Math.max(40, width - 2)`, emitting lines of at least 42 columns regardless of the real terminal width; pi-tui's differential renderer throws on any over-wide line, stopping the TUI and taking the agent down. `ask-ui` and `launcher-ui` were fully exposed since they mount in the editor container at the raw terminal width. Components now clamp to the available width and drop the border below 12 columns. Applied to the same pattern in 15 other overlays across updater, info-screen, compactor, footer, mcp, notify and utility.
+- `ask-user`/`mcp`: render caches are now keyed on width. `requestRender()` does not invalidate on resize, so shrinking the terminal previously returned stale, over-wide lines and the next frame threw.
+- `ask-user`: `launcher-ui` measured its header with `String.length` on a string containing an astral emoji; now uses `visibleWidth`.
+- `subagents`: Pi no longer crashes on exit with "This extension ctx is stale after session replacement or reload" when a background agent (typically the session-name generator) is still running. Pi disposes the session immediately after `session_shutdown` resolves, which invalidates the extension runtime; `abortAll()` only signals the AbortController, so the in-flight promise settled a microtask later and called `pi.sendMessage()` on a dead runtime, throwing from an async continuation with nothing to catch it. Late completions are now dropped via a `sessionEnded` guard set before `abortAll()`. The guard is scoped to the extension factory, so `/new`, `/fork` and `/resume` (which also emit `session_shutdown`) reset it when pi re-invokes the factory.
+- `web-api`: the DuckDuckGo provider returned zero results against live markup. Snippet bodies contain `<b>` query highlights so the `[^<]*` pattern never matched; results were paired by index across two independent match streams, so one snippet-less result shifted every later snippet onto the wrong title; and URLs were returned as `//duckduckgo.com/l/?uddg=…` redirect wrappers rather than real destinations, with HTML entities left undecoded.
+
+## [2.1.3] — 2026-07-22
+
+### Added
+- `notify`: support Pi's `agent_settled` lifecycle event as a separate configurable notification from `agent_end`, so users can route retry/error runs and final settled completion to different platforms or sounds (fixes #24).
+
+### Fixed
+- `tests`: run TypeScript test suites through `tsx` instead of Node's built-in TypeScript stripping so the workspace test suite passes on Node builds without `--experimental-strip-types` support.
+- `tests/package-manifest`: allow split packages such as `@pi-unipi/compactor` to declare package-internal `pi.skills` while still blocking hoisted `node_modules` resource paths.
+
+## [2.1.2] — 2026-07-06
+
+### Fixed
+- `compactor`: registered the package extension and skills in `packages/compactor/package.json` (`pi.extensions` pointing at `./index.ts`, `pi.skills` at `./skills`) so the standalone `@pi-unipi/compactor` package loads its extension and skills without relying on umbrella auto-discovery (fixes #23). Mirrors the notify fix from #18.
+
+## [2.1.1] — 2026-07-02
+
+### Added
+- `core`: new `withHerdrBlocked(pi, label, fn)` helper that emits `herdr:blocked` active/inactive around an awaited blocking UI so the herdr integration surfaces `blocked` agent status.
+- `ask-user`/`subagents`: agent-driven blocking overlays now report `blocked` to herdr — `ask_user` (label `ask_user`), session launcher (label `ask_user: launch`), and the `get_helper_result` live conversation viewer (label `helper viewer`).
+- `info-screen`: new "Show on boot" toggle at the top of `/unipi:info-settings` (persisted via `saveInfoSettings`).
+
+### Fixed
+- `info-screen`: the info overlay no longer blocks startup. `fetchAllBackground()` now defers each group's `dataProvider()` to a background macrotask with a `_destroyed` guard instead of running them synchronously before the first `await`. Startup cost dropped from ~4750ms to ~1ms; data loads reactively after the TUI is up.
+- `memory`: skip the Python `ping` `spawnSync` when recently verified via `~/.unipi/memory/.mempalace-ping-verified` (24h TTL). New `memPalaceCall<T>()` wrapper invalidates the flag on a null result so a broken palace gets re-verified next session. Warm-start saving ~484ms.
+
+## [2.1.0] — 2026-06-27
+
+### Breaking Changes
+- **BREAKING:** `@pi-unipi/*` peer dependencies on `@earendil-works/pi-coding-agent`, `pi-ai`, `pi-tui`, and `pi-agent-core` are now `^0.80.0` (was `^0.78.0`). Users must run Pi `0.80.0` or newer. Pi `0.80` moved pi-ai's global API to `@earendil-works/pi-ai/compat` (unipi only imports core types from the root, so extensions keep working at runtime), removed the `/base` selective-provider entry points, and renamed `ExecutionEnvExecOptions` to `ShellExecOptions`. Migration: update Pi (`pi update`) to 0.80+ before updating unipi.
+- **BREAKING:** `@pi-unipi/memory` now uses [MemPalace](https://github.com/mempalace/mempalace) as its primary backend. On first load it auto-installs MemPalace via `uv` and migrates all existing memories into a MemPalace palace at `~/.mempalace/palace`. **Prerequisite:** install [`uv`](https://docs.astral.sh/uv/) (`curl -LsSf https://astral.sh/uv/install.sh | sh`) before upgrading if you want the new backend — without `uv`, memory silently falls back to the existing SQLite store (nothing breaks, but migration will not run until `uv` is available). Legacy `~/.unipi/memory/` files are never modified or deleted; rollback by removing `~/.mempalace/palace` and `~/.unipi/memory/.mempalace-*` flags. First-run also downloads MemPalace's default ONNX embedding model (~80 MB, cached at `~/.cache/chroma/onnx_models/`).
+
+### Changed
+- `memory`: MemPalace is now the primary storage backend. On first load the package auto-installs MemPalace via `uv`, performs a one-way read-only migration of all legacy SQLite + markdown memories into MemPalace drawers, and serves all reads/writes/searches from MemPalace. Falls back to the bundled SQLite + sqlite-vec store when MemPalace or `uv` is unavailable. Markdown files remain the durable human-readable tier.
+- Bumped `@earendil-works/*` peer dependencies from `^0.78.0` to `^0.80.0` (resolves to 0.80.2).
+
+### Added
+- `@pi-unipi/memory` now ships `bridge/mempalace_bridge.py` — a single-command JSON bridge to MemPalace's Python API (palace drawers) with deterministic drawer IDs, auto-install, and one-way auto-migration.
+
+### Fixed
+- `memory`/`ask-user`/`info-screen`/`mcp`/`milestone`/`notify`/`ralph`/`updater`/`utility`/`web-api`/`workflow`: replaced `new URL('.', import.meta.url).pathname` with `dirname(fileURLToPath(import.meta.url))` so package-internal paths resolve correctly on Windows (the old pattern produced malformed `E:\C:\Users\...` paths).
+- `notify`: registered the package extension in `packages/notify/package.json` so notify loads without relying on umbrella auto-discovery (fixes #18).
+- `tests/package-manifest.test.js`: allow split packages to register package-internal extensions (e.g. notify's `./index.ts`) instead of asserting all `pi` fields are empty.
+
+## [2.0.13] — 2026-06-01
+
+### Fixed
+- Removed duplicate `resources_discover` skill registration from split extension modules. The umbrella package manifest is now the sole source of skill resources, preventing collisions between `@pi-unipi/unipi/packages/*/skills` and sibling `@pi-unipi/*/skills`.
+
+## [2.0.12] — 2026-06-01
+
+### Fixed
+- `unipi`: pin internal `@pi-unipi/*` dependencies to the exact release version so fresh installs cannot resolve stale split packages with conventional skill discovery.
+
+## [2.0.11] — 2026-06-01
+
+### Fixed
+- `packages`: added explicit empty Pi manifests to split dependency packages so Pi treats them as non-resource packages instead of falling back to conventional `skills/` discovery.
+
+## [2.0.10] — 2026-06-01
+
+### Fixed
+- `updater`: resolve the installed `@pi-unipi/unipi` package from sibling `node_modules/@pi-unipi/*` packages so nested installs report the real version instead of `0.0.0`.
+- `packages`: removed Pi resource manifests from split dependency packages so installing the umbrella `@pi-unipi/unipi` package no longer double-loads skills from both `packages/*/skills` and sibling `@pi-unipi/*/skills` packages.
+
+### Changed
+- `deps`: updated Pi peer and development dependencies to the current `@earendil-works/*` `0.78.0` package family.
+
+## [2.0.9] — 2026-05-28
+
+### Fixed
+- `kanboard`: updated the npm package `files` manifest so runtime sources imported by `index.ts` (`commands.ts`, `parser/`, `server/`, `tui/`, and `types.ts`) are included in the published tarball.
+
+## [2.0.8] — 2026-05-24
+
+### Added
+- `ci`: added a GitHub Actions workflow that installs dependencies, typechecks, and runs the workspace test suite on push and pull request.
+- `repo`: added the MIT license file to the repository.
+
+### Changed
+- `unipi`: migrated Pi extension imports and peer dependencies from the legacy `@mariozechner/*` packages to the current `@earendil-works/*` Pi base.
+- `tools`: migrated tool schemas from `@sinclair/typebox` to Pi's current `typebox` package.
+- `deps`: updated the Pi peer dependency family to `0.75.5` and aligned lockfile resolution across workspaces.
+
+### Fixed
+- `info-screen` and `utility`: updated Pi package discovery paths to look under `@earendil-works/pi-coding-agent`.
+- `web-api`: added missing `@types/mime-types` for clean typechecking with the updated dependency graph.
+
+## [2.0.7] — 2026-05-24
+
+### Fixed
+- `unipi`: changed the umbrella package manifest to load its package-internal all-in-one extension instead of hoisted `node_modules/@pi-unipi/*` paths, fixing npm installs where no `/unipi:*` commands or skills loaded.
+- `unipi`: ships package metadata and root `SKILL.md` files needed by package-internal extension and skill paths.
+- `notify`: supports the lossless `rpiv:ask-user:prompt` payload shape while preserving UniPi's existing flat `ask_user_prompt` payload formatting.
+- `notify`: avoids a type-only dependency on an unpublished `@juicesharp/rpiv-ask-user-question/events` subpath so `tsc --noEmit` passes with the current npm package.
+
+### Changed
+- `notify`: extracted ask-user prompt notification formatting into `ask-user-prompt-message.ts` with regression coverage for lossless and legacy payloads.
+- `unipi`: added a package-manifest regression test that verifies npm pack output contains every path declared in the Pi manifest.
+
+## [2.0.6] — 2026-05-19
+
+### Fixed
+- `updater`: compare versions numerically instead of using string inequality so stale cache entries never prompt downgrades like `2.0.5 → 2.0.4`.
+- `updater`: bypass the check interval when the cached npm version is older than the installed version, forcing a fresh registry check after local/source releases.
+
+## [2.0.5] — 2026-05-19
+
+### Added
+- `footer`: added terminal-aware `colorMode` support (`auto`, `truecolor`, `256`, `none`) with xterm-256 downgrading for terminals that do not support 24-bit color.
+- `footer`: added Apple Terminal detection so footer hex colors render with 256-color ANSI escapes instead of being swallowed.
+
+### Fixed
+- `autocomplete`: stripped Pi source tags like `[u:npm:@pi-unipi/unipi]` from enchanted `/unipi:*` suggestions while keeping package tags such as `[workflow]`.
+- `footer`: preserved distinct workflow/category colors on non-truecolor terminals and expanded color-mode tests for truecolor, 256-color, no-color, and Apple Terminal paths.
+- `utility`: aligned terminal capability detection with footer color fallback behavior, including Apple Terminal truecolor suppression.
+
+### Changed
+- `unipi`: regenerated the bundled all-in-one extension for the release.
+
+## [2.0.4] — 2026-05-18
+
+### Added
+- `notify`: added `suppressWhenFocused` support for native notifications so noisy completion/attention alerts can be skipped when Pi is already focused.
+- `compactor`: added optional UniPi-managed percentage auto-compaction with configurable threshold, cooldown, repeat-growth safeguards, and notifications.
+
+### Fixed
+- `notify`: validated Linux focus detection and corrected Windows foreground PID typing for reliable focus suppression.
+- `compactor`: fixed preset/profile application so the Pipeline tab reflects selected profiles (`precise`, `balanced`, `thorough`, `lean`) instead of staying all `off`.
+- `compactor`: handled Pi's post-compaction `null` context usage state and repeated long-session auto-compactions without triggering compaction loops.
+
+### Changed
+- `compactor`: expanded README and skill docs with user commands, settings, agent tools/skills, benchmark notes, and chronological Pi hook flow.
+- `unipi`: regenerated the bundled all-in-one extension for the release.
+
+## [2.0.3] — 2026-05-16
+
+### Fixed
+- `ask-user`: expanded historical `ask_user` results now show the previous question, context, and available options when toggled with Ctrl+O.
+- `workflow`: cached worktree argument completions per working directory so `/unipi:worktree-merge` suggestions do not rescan `.unipi/worktrees` on every autocomplete call.
+
+### Changed
+- `ask-user`: tool result details now preserve normalized options and input-mode metadata for richer TUI history rendering.
+- `unipi`: regenerated the bundled all-in-one extension after the ask-user and workflow fixes.
+
+## [2.0.2] — 2026-05-16
+
+### Breaking Changes
+- BREAKING: `btw` commands moved from `/btw`, `/btw:new`, `/btw:tangent`, `/btw:clear`, `/btw:inject`, and `/btw:summarize` to `/unipi:btw`, `/unipi:btw-new`, `/unipi:btw-tangent`, `/unipi:btw-clear`, `/unipi:btw-inject`, and `/unipi:btw-summarize`.
+
+### Fixed
+- `compactor`: `/unipi:session-recall` now searches the append-only session branch so messages omitted by compaction remain searchable.
+- `compactor`: `/unipi:compact-recall` keeps working as a deprecated alias and points users to `/unipi:session-recall`.
+- `autocomplete`: command registry now includes all working compactor commands, including `session-recall` and `compact-help`.
+- `autocomplete`: registry now includes BTW commands and the CocoIndex package label.
+
+### Changed
+- `btw`: moved public commands from the bare `/btw*` namespace to `/unipi:btw*` for consistency with the Unipi command registry.
+- `full-release`: replaced fragile manual command-registry checks with an automated autocomplete registry audit test.
+
+## [2.0.1] — 2026-05-15
+
+### Fixed
+- `workflow`: require `@pi-unipi/core@^2.0.0` so npm installs do not load stale nested core 0.1.x copies that lack `getBlockedToolsForLevel`.
+- `ralph`: align the internal `@pi-unipi/core` dependency range with the 2.x suite to avoid the same stale nested-core risk.
+- `cocoindex`: extend update timeout handling with clearer timeout/error output and make `COCOINDEX_UPDATE_TIMEOUT_MS` configurable.
+- `cocoindex`: skip huge generated/lock files in the default pipeline template to avoid runaway indexing and noisy generated artifacts.
+- `ask-user`: render full questions, context, options, descriptions, actions, and prefill text in the tool-call display with wrapping for long prompts.
+
+## [2.0.0] — 2026-05-06
+
+### Breaking Changes
+- BREAKING: `compactor` no longer provides project content indexing/search tools or commands (`content_index`, `ctx_index`, `content_search`, `ctx_search`, `content_fetch`, `ctx_fetch_and_index`). Use `/unipi:cocoindex-init`, `/unipi:cocoindex-update`, `/unipi:cocoindex-status`, `/unipi:cocoindex-search`, and `cocoindex_status` instead.
+- BREAKING: `@pi-unipi/compactor` removed public content-command surface in favor of `@pi-unipi/cocoindex`; this is a breaking command and dependency migration.
+
+### Added
+- `@pi-unipi/cocoindex` package now includes optional `@lancedb/lancedb` dependency and first-class CLI bridge for workspace indexing/search.
+- Added `/unipi:cocoindex-search` command and `/unipi:cocoindex-settings` status/management flow.
+- Added `cocoindex_status` and `cocoindex_search` agent tools for index diagnostics/search.
+- Added deprecation-aware UX and autocomplete registry checks in full-release checks.
+
+### Changed
+- `autocomplete` now explicitly includes CocoIndex + footer + ralph helper command suggestions and validates `/unipi:*` completeness.
+- `worktree-merge/review` and ask-user documentation updates for workflow consistency.
+
+### Fixed
+- `autocomplete`: add missing suggestions for `/unipi:cocoindex-search`, `/unipi:footer-help`, and `/unipi:ralph-start`.
+- `full-release`: add an enhanced autocomplete registry audit to catch registered commands missing from command suggestions.
+
+## [0.1.18] — 2026-05-06
+
+### Breaking Changes
+- BREAKING: `compactor` no longer provides project content indexing/search tools or commands (`content_index`, `ctx_index`, `content_search`, `ctx_search`, `content_fetch`, `ctx_fetch_and_index`, `/unipi:compact-index`, `/unipi:compact-search`, `/unipi:compact-purge`). Use `/unipi:cocoindex-init`, `/unipi:cocoindex-update`, `/unipi:cocoindex-search`, `cocoindex_search`, and `cocoindex_status` instead.
+- BREAKING: `sandbox_batch` no longer accepts embedded search items from the removed compactor content store; run `cocoindex_search` as a separate search tool call.
+
+### Added
+- `@pi-unipi/cocoindex` package — CocoIndex CLI bridge with LanceDB-backed project indexing and semantic search.
+- `/unipi:cocoindex-init`, `/unipi:cocoindex-update`, `/unipi:cocoindex-status`, `/unipi:cocoindex-settings`, and `/unipi:cocoindex-search` commands.
+- `cocoindex_search` and `cocoindex_status` tools for agent-accessible indexed content search and status diagnostics.
+- Consent-based CocoIndex auto-install flow using `uv tool install 'cocoindex[lancedb]>=1.0'`, with `mise` fallback and shell-aware manual guidance.
+- Default `.unipi/cocoindex/main.py` pipeline template using CocoIndex v1.0+ APIs, local filesystem ingestion, recursive splitting, OpenRouter embeddings, and LanceDB output.
+
+### Changed
+- `compactor`: project content indexing responsibilities moved to `@pi-unipi/cocoindex`; compactor now focuses on session compaction, recall, sandbox execution, diagnostics, and context budgeting.
+- `footer`: replaced the old indexed-docs content-store segment with a CocoIndex status segment.
+- `autocomplete`: removed old compactor content commands and added CocoIndex command suggestions.
+- `workflow`: sandbox tool filtering now preserves safe extension tools (memory, web, ask-user, notifications) while removing only blocked tools for the active workflow level.
+- `memory`: lifecycle reminders now respect the currently active tool set and track recall/store activity independently.
+- `full-release` chore updated with CocoIndex package inventory, command registry checks, and explicit breaking-change changelog guidance.
+
+### Fixed
+- `cocoindex`: command registration now happens synchronously at extension load time instead of during `session_start`.
+- `cocoindex`: pipeline template updated for CocoIndex v1.0+ APIs after `flow_def` removal.
+- `cocoindex`: parsed v1.0+ files-processed output correctly during indexing.
+- `cocoindex`: all-in-one `@pi-unipi/unipi` entry now imports and registers the CocoIndex extension.
+
+## [0.1.17] — 2026-05-02
+
+### Added
+- `ask-user`: session launcher overlay for `new_session` action — spawns a new pi session with the selected model
+- `footer`: zone-aware renderer with `zone`, `description`, `shortLabel` on every `FooterSegment`; extended `SemanticColor` with TPS tiers, zone colors, and workflow types
+- `footer`: TPS (turns-per-second) tracker segment showing real-time agent throughput
+- `footer`: clock and duration segments with live 1-second refresh timer
+- `footer`: `hexColor` palette from spec — semantic colors mapped to exact hex values for consistent rendering
+- `footer`: `/unipi:footer-help` command with full-label mode and help overlay showing all segments and their meanings
+- `footer`: unified 3-category settings TUI (`Groups`, `Segments`, `Theme`) — simplifies the `/unipi:footer-settings` experience
+- `autocomplete`: 4-tier sorting for cross-group command suggestions — unipi matches first, then unipi non-matches, system matches, system non-matches
+- `autocomplete`: 37 tests for sorting logic, match quality, and cross-group behavior
+
+### Fixed
+- `compactor`: compaction stats always zero — fixed 5 interrelated bugs in stats tracking pipeline
+- `updater`: resolve `@pi-unipi/unipi` version by package name instead of hardcoded relative path
+- `unipi`: include all package `.ts` files in npm bundle (was missing source files)
+- `notify`: add `ntfy-config.ts` to `package.json` files array so it ships on npm
+- `autocomplete`: sort by match quality across unipi/system items — exact matches ranked above partial
+- `footer`: apply hex color palette from spec for consistent segment colors
+- `footer`: update workflow color mapping and add thinking level segment color
+- `footer`: add TPS tracker icon entries and clock/duration segment definitions
+
+### Changed
+- Docs: all package READMEs rewritten with consistent 5-section format
+- Docs: package titles deep-linked to their individual README files
+- Footer preset updates and label mode support for compact display
+
+## [0.1.16] — 2026-05-01
+
+### Added
+- `@pi-unipi/updater` package — auto-updater, changelog browser, and readme browser
+- `/unipi:readme` command — browse package README.md files in TUI overlay
+- `/unipi:changelog` command — browse CHANGELOG.md with version list and detail view
+- `/unipi:updater-settings` command — configure check interval and auto-update mode
+- Automatic npm registry check on session start (configurable interval: 30min/1h/6h/1d)
+- Update notification overlay with changelog diff and one-key install
+- Skip-version persistence — skip a version and re-prompt only when newer version appears
+- Auto-update mode with countdown and cancel option
+- Markdown terminal renderer for changelog and readme content
+- `@pi-unipi/input-shortcuts` package — keyboard shortcuts with chord overlay, undo/redo, clipboard
+- `/unipi:stash-settings` command — configure keyboard shortcuts and input behavior
+- Project-level ntfy configuration — each project can use its own ntfy.json
+- Theme-aware Markdown rendering in updater TUI overlays
+
+### Fixed
+- Updater TUI overlays (`readme-overlay.ts`, `changelog-overlay.ts`, `update-overlay.ts`) — replaced `data.toLowerCase()` with `matchesKey()` to fix arrow key sequences and uppercase keys like `G`
+- Updater TUI overlays — replaced raw ANSI codes with `theme.fg()`, `theme.bold()`, `theme.bg()` for consistent styling
+- `input-shortcuts`: suppress input listener while overlay is open to prevent background input
+- `input-shortcuts`: suppress input listener during undo/redo operations
+- `input-shortcuts`: remove undo throttle — allow consecutive undos without delay
+- `input-shortcuts`: redo undo snapshot logic — 3 independent triggers for reliable state capture
+- `input-shortcuts`: undo for typed text + cut/copy deferred action pattern
+- `input-shortcuts`: overlay blocks editor API — refactor to deferred action pattern
+- `input-shortcuts`: remove chord timeout — overlay stays open until ESC or action
+- `input-shortcuts`: use `unipi:` prefix in `registerCommand()` calls
+- `input-shortcuts`: register extension — add barrel file, unipi entry, command registry, info-screen
+- `footer`: use icon style system in ralph and workflow segments
+- `footer`: remove duplicate icon from WEB segment
+- `footer`: add 1-second refresh timer so time segment updates
+- `footer`: uppercase status short labels and fix duplicate memory entry
+
+### Changed
+- Updater TUI overlays use `truncateToWidth()` and `visibleWidth()` from `@mariozechner/pi-tui` instead of custom implementations
+- Updater TUI overlays use proper box drawing frame (`╭╮╰╯│├┤`) matching other overlays
+
+## [0.1.15] — 2026-04-30
+
+### Added
+- `@pi-unipi/footer` package — persistent status bar with live stats from all packages
+- Footer settings overlay (`/unipi:footer-settings`) with group and segment toggles
+- Thinking level colors and rainbow border for xhigh thinking
+- Diff renderer with syntax highlighting via shiki
+- Smart-fetch engine for web-api package (default read path)
+
+### Fixed
+- Notification dispatch made non-blocking (fire-and-forget)
+- Diff renderer return types and shiki import corrections
+- Footer extension path alignment with other packages
+- Null returns in renderResult replaced with valid components
+- Console.log/warn/error calls removed that caused TUI rendering issues
+
+### Changed
+- Footer segment icons and labels restructured
+- Footer workflow/ralph/memory icons refined
+
+## [0.1.14] — 2026-04-29
+
+### Added
+- Compactor UX overhaul — settings overlay, BM25 cache, auto-injection
+- Context budget management with `context_budget` config option
+- Dry run mode for compaction
+- Two-tier skill system (project skills + bundled skills)
+- Context savings analytics bridged to info-screen
+- Compactor preset system (minimal/balanced/full/custom)
+- Compactor search with proximity reranking
+- Progressive throttling for large project indexing
+
+### Fixed
+- Compactor settings overlay type errors
+- Context-mode AnalyticsEngine bridge to info-screen
+- Stash artifacts resolved — merged compactor files restored
+
+### Changed
+- Compactor token stats info-screen integration improved
+- Ralph loop guidance wiring into skill prompts
+
+## [0.1.13] — 2026-04-28
+
+### Added
+- Info-screen module status response handling
+- MCP catalog sync on session start
+- Notify recap model selection (`/unipi:notify-recap-model`)
+- ntfy push notification platform support
+- Milestone tracking with `/unipi:milestone-onboard` and `/unipi:milestone-update`
+
+### Fixed
+- MCP server startup timeout handling
+- Notify Gotify header bug
+- Compactor init timing issues
+- Footer command argument autocomplete
+
+### Changed
+- Compactor commands need `unipi:` prefix
+- Footer icon style now configurable

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/unipi",
-  "version": "2.2.5",
+  "version": "2.2.6",
   "description": "All-in-one extension suite for Pi coding agent",
   "type": "module",
   "license": "MIT",
@@ -28,6 +28,7 @@
     "publish:all": "npm publish --workspaces --access public"
   },
   "files": [
+    "CHANGELOG.md",
     "packages/*/package.json",
     "packages/*/*.ts",
     "packages/*/src/**/*.ts",
@@ -83,7 +84,7 @@
     "@pi-unipi/web-api": "2.2.0",
     "@pi-unipi/workflow": "2.2.0",
     "@pi-unipi/footer": "2.2.1",
-    "@pi-unipi/updater": "2.2.0",
+    "@pi-unipi/updater": "2.2.1",
     "@pi-unipi/input-shortcuts": "2.2.0",
     "@pi-unipi/cocoindex": "2.2.0"
   },

package/packages/image/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/image",
-  "version": "2.2.4",
+  "version": "2.2.5",
   "description": "Image generation and image recognition tools for the Pi coding agent",
   "type": "module",
   "main": "src/index.ts",

package/packages/image/src/generate.ts

@@ -103,6 +103,26 @@ export function saveImage(
   }
 }
 
+/** Providers pi-ai's images collection can actually generate with. */
+function supportedProviders(imagesApi: ImagesModelsLike): string[] {
+  try {
+    return [...new Set(imagesApi.getModels().map((m) => m.provider))];
+  } catch {
+    return [];
+  }
+}
+
+/**
+ * Whether generation can route to a provider. Unknown/empty catalogs are
+ * treated as capable so a stubbed or future pi-ai is never blocked by this
+ * check — the real call still reports its own error.
+ */
+function providerCanGenerate(imagesApi: ImagesModelsLike, provider: string): boolean {
+  const providers = supportedProviders(imagesApi);
+  if (providers.length === 0) return true;
+  return providers.includes(provider);
+}
+
 export interface GenerateOptions {
   prompt: string;
   model: ImageGenModel;
@@ -134,6 +154,22 @@ export async function generateImage(options: GenerateOptions): Promise<GenerateR
     );
   }
 
+  // pi-ai's images collection carries its own provider set (currently only
+  // `openrouter`) and is entirely separate from pi's chat model registry.
+  // A chat provider registered by another extension can therefore list image
+  // models that generation cannot actually drive — pi-ai answers with a bare
+  // "Unknown provider: x". Detect that here and say something useful.
+  if (!providerCanGenerate(imagesApi, model.provider)) {
+    const supported = supportedProviders(imagesApi);
+    throw new Error(
+      `Provider "${model.provider}" cannot generate images.\n` +
+        `→ Image generation is served by: ${supported.join(", ") || "openrouter"}.\n` +
+        `→ "${model.provider}" is a chat provider; its image models are listed for ` +
+        `recognition and reference, but generation must go through a supported provider.\n` +
+        "→ Pick one with /unipi:image-settings.",
+    );
+  }
+
   // Prefer pi-ai's own credential store, then the caller-supplied fallback so
   // a bare OPENROUTER_API_KEY still works.
   let apiKey: string | undefined;

package/packages/image/src/models.ts

@@ -105,6 +105,23 @@ export async function getImagesModels(): Promise<ImagesModelsLike | null> {
   return cachedImagesModels;
 }
 
+/**
+ * Providers pi-ai's images collection can actually generate with.
+ *
+ * This is NOT the same set as pi's chat model registry: a chat provider
+ * registered by another extension may list image models that image generation
+ * cannot drive. Empty means "unknown", which callers treat as permissive.
+ */
+export async function getGeneratingProviders(): Promise<string[]> {
+  const images = await getImagesModels();
+  if (!images) return [];
+  try {
+    return [...new Set(images.getModels().map((m) => m.provider))];
+  } catch {
+    return [];
+  }
+}
+
 /** List available image-generation models. Empty when unavailable. */
 export async function listImageGenModels(): Promise<ImageGenModel[]> {
   const images = await getImagesModels();

package/packages/image/src/tui/model-selector.ts

@@ -14,6 +14,8 @@ export interface SelectableModel {
   provider: string;
   id: string;
   name?: string;
+  /** Set when the model is listed but not usable, with the reason. */
+  unavailable?: string;
 }
 
 export type ModelSelectorKind = "generate" | "recognize";
@@ -212,6 +214,12 @@ export class ImageModelSelectorOverlay implements Component {
       this.error = "No model selected";
       return;
     }
+    // Require a deliberate second Enter on a model that cannot be used, rather
+    // than silently saving a choice that will fail at call time.
+    if (model.unavailable && this.error === null) {
+      this.error = `${model.id} ${model.unavailable} — press Enter again to select anyway`;
+      return;
+    }
 
     this.onSelect?.(`${model.provider}/${model.id}`);
     this.saved = true;
@@ -335,9 +343,12 @@ export class ImageModelSelectorOverlay implements Component {
         const marker = isSelected ? this.fg("accent", "▸") : " ";
         const label = model.name || model.id;
         const providerTag = this.fg("dim", `[${model.provider}]`);
-        const display = isSelected
+        const base = isSelected
           ? `${providerTag} ${this.bold(label)}`
           : `${providerTag} ${this.fg("dim", label)}`;
+        const display = model.unavailable
+          ? `${base} ${this.fg("warning", `(${model.unavailable})`)}`
+          : base;
         lines.push(this.frameLine(`  ${marker} ${display}`, innerWidth));
       }
     }

package/packages/image/src/tui/settings-dialog.ts

@@ -17,6 +17,7 @@ import {
 } from "../settings.js";
 import {
   formatModelRef,
+  getGeneratingProviders,
   listAllImageGenModels,
   listVisionModels,
   type ChatModelRegistry,
@@ -241,7 +242,20 @@ async function collectModels(
     // Include models from providers registered by other extensions, not just
     // pi-ai's built-in OpenRouter catalog.
     const models = await listAllImageGenModels(registry);
-    return models.map((m) => ({ provider: m.provider, id: m.id, name: m.name }));
+    const generating = await getGeneratingProviders();
+
+    return models.map((m) => ({
+      provider: m.provider,
+      id: m.id,
+      name: m.name,
+      // pi-ai's images collection has its own provider set. A chat provider's
+      // image models are listed for reference but cannot actually generate,
+      // so flag them rather than letting the user pick a dead option.
+      unavailable:
+        generating.length > 0 && !generating.includes(m.provider)
+          ? "cannot generate"
+          : undefined,
+    }));
   }
 
   if (!registry) return [];

package/packages/updater/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/updater",
-  "version": "2.2.0",
+  "version": "2.2.1",
   "description": "Auto-updater, changelog browser, and readme browser for Unipi — checks npm registry, renders CHANGELOG.md and README.md files in TUI overlays",
   "type": "module",
   "main": "src/index.ts",

package/packages/updater/src/changelog.ts

@@ -6,8 +6,35 @@
  */
 
 import { existsSync, readFileSync } from "fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { findPackageRoot } from "@pi-unipi/core";
+import { isNewerVersion } from "./version.js";
 import type { ChangelogEntry } from "../types.js";
 
+/**
+ * Locate the shipped CHANGELOG.md.
+ *
+ * Resolving from `process.cwd()` only works when pi happens to be running
+ * inside the UniPi checkout — for everyone else the update prompt and
+ * `/unipi:changelog` came up empty. Resolve from this module's own location
+ * instead, and fall back to the working directory so a repo checkout still
+ * shows its local (possibly unreleased) notes.
+ */
+export function resolveChangelogPath(): string {
+  try {
+    const dir = dirname(fileURLToPath(import.meta.url));
+    const root = findPackageRoot(dir, "@pi-unipi/unipi");
+    if (root) {
+      const packaged = join(root, "CHANGELOG.md");
+      if (existsSync(packaged)) return packaged;
+    }
+  } catch {
+    // Fall through to the working directory.
+  }
+  return join(process.cwd(), "CHANGELOG.md");
+}
+
 /** Regex for version headers: ## [x.y.z] — YYYY-MM-DD or ## [Unreleased] */
 const VERSION_HEADER_RE = /^## \[(.+?)\](?:\s*[-—–]\s*(.+))?$/;
 
@@ -119,7 +146,11 @@ export function getNewerVersions(
       result.push(entry);
       continue;
     }
-    if (entry.version === installedVersion) break;
+    // Compare rather than test for equality. Stopping only on an exact match
+    // meant that when the installed version was absent from the changelog
+    // (a local build, a yanked release, or simply a newer version) every
+    // historical entry was reported as "new".
+    if (!isNewerVersion(entry.version, installedVersion)) break;
     result.push(entry);
   }
   return result;

package/packages/updater/src/tui/changelog-overlay.ts

@@ -9,7 +9,7 @@ import { existsSync } from "fs";
 import { join } from "path";
 import { Key, matchesKey, truncateToWidth, visibleWidth } from "@earendil-works/pi-tui";
 import type { Theme } from "@earendil-works/pi-coding-agent";
-import { parseChangelog } from "../changelog.js";
+import { parseChangelog, resolveChangelogPath } from "../changelog.js";
 import { renderMarkdown } from "../markdown.js";
 import { getInstalledPackageVersion, boxInnerWidth } from "@pi-unipi/core";
 import type { ChangelogEntry } from "../../types.js";
@@ -62,7 +62,7 @@ export function renderChangelogOverlay() {
     let loaded = false;
     const ensureLoaded = () => {
       if (loaded) return;
-      const changelogPath = join(process.cwd(), "CHANGELOG.md");
+      const changelogPath = resolveChangelogPath();
       if (existsSync(changelogPath)) {
         state.entries = parseChangelog(changelogPath);
       }

package/packages/updater/src/tui/update-overlay.ts

@@ -9,7 +9,7 @@
 import { join } from "path";
 import { Key, matchesKey, truncateToWidth, visibleWidth } from "@earendil-works/pi-tui";
 import type { Theme } from "@earendil-works/pi-coding-agent";
-import { parseChangelog, getNewerVersions } from "../changelog.js";
+import { parseChangelog, getNewerVersions, resolveChangelogPath } from "../changelog.js";
 import { renderMarkdown } from "../markdown.js";
 import { installUpdate } from "../installer.js";
 import { writeSkippedVersion } from "../cache.js";
@@ -51,7 +51,7 @@ export function renderUpdateOverlay(checkResult: UpdateCheckResult) {
 
     // Load changelog for newer versions
     let newerVersions: ChangelogEntry[] = [];
-    const changelogPath = join(process.cwd(), "CHANGELOG.md");
+    const changelogPath = resolveChangelogPath();
     try {
       const entries = parseChangelog(changelogPath);
       newerVersions = getNewerVersions(entries, checkResult.currentVersion);