@pi-unipi/unipi 2.4.2 → 2.5.0

package/CHANGELOG.md

@@ -6,6 +6,31 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [2.5.0] — 2026-08-14
+
+This release makes persistent memory migration reliable across standalone and all-in-one installs, while stabilizing workflow tool schemas and MCP registration.
+
+### Added
+
+- **Verified MemPalace catch-up:** migration state now records a source fingerprint and explicit discovered/imported/skipped/failed/verified counts. New or changed legacy memories trigger an idempotent catch-up, and partial runs retry instead of being marked complete.
+- **MemPalace packaging contracts:** the umbrella tarball now ships the Python bridge and resolves it across standalone, bundled, nested npm, and explicit override layouts.
+- **Deterministic MCP registration:** server discovery runs in parallel behind an atomic registration barrier with canonical tool ordering, duplicate-name rejection, rollback, and orderly disconnect.
+- **Workflow lifecycle tests:** added coverage for call-time tool enforcement, nested workflow restoration, MCP schema stability, concurrent completion, and Milestone completion fallback.
+
+### Changed
+
+- **Workflow tools are enforced at execution time.** UniPi no longer mutates Pi's active tool list between workflow phases, preserving provider prefix-cache stability and avoiding stale tool schemas.
+- **MCP schemas are canonicalized.** Equivalent JSON schemas now produce stable key/required ordering and Pi-compatible complete object schemas.
+- **Milestone completion is per workflow run.** Overlapping runs are tracked independently and agent shutdown only reconciles runs that missed their normal completion event.
+- **Memory markdown records preserve authoritative IDs** in frontmatter while retaining the legacy filename/title fallback for existing files.
+
+### Fixed
+
+- **All-in-one UniPi installs no longer silently fall back to SQLite** because `mempalace_bridge.py` was absent from the umbrella artifact or resolved relative to the wrong module.
+- **MemPalace migration no longer false-completes** after bridge errors, timeouts, partial writes, or stale timestamp markers; exact persisted documents are re-read and verified before completion is recorded.
+- **MCP no longer registers tools in network-completion order,** leak partial registrations after failure, or retain clients during shutdown.
+- **Workflow completion and sandbox rules no longer bleed across nested or concurrent runs.**
+
 ## [2.4.2] — 2026-08-13
 
 This release closes the unreachable-code and misleading-contract audit across runtime behavior, package artifacts, and integration events.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/unipi",
-  "version": "2.4.2",
+  "version": "2.5.0",
   "description": "All-in-one extension suite for Pi coding agent",
   "type": "module",
   "license": "MIT",
@@ -27,7 +27,7 @@
     "prepare": "node scripts/build-bundle.mjs --if-missing",
     "prepublishOnly": "npm run build",
     "publish:all": "npm publish --workspaces --access public",
-    "test": "npx tsx --test tests/*.test.js && npm test --workspaces --if-present",
+    "test": "npx tsx --test tests/*.test.js packages/memory/tests/*.test.ts && npm test --workspaces --if-present",
     "typecheck": "npx tsc --noEmit --skipLibCheck"
   },
   "files": [
@@ -36,6 +36,7 @@
     "packages/*/*.ts",
     "packages/*/src/**/*.ts",
     "packages/*/extensions/**/*.ts",
+    "packages/*/bridge/**/*.py",
     "packages/*/platforms/*",
     "packages/*/tui/*",
     "packages/*/SKILL.md",
@@ -75,26 +76,26 @@
     "typebox": "^1.1.38"
   },
   "dependencies": {
-    "@pi-unipi/ask-user": "2.4.1",
-    "@pi-unipi/btw": "2.4.1",
-    "@pi-unipi/compactor": "2.4.1",
-    "@pi-unipi/notify": "2.4.1",
-    "@pi-unipi/command-enchantment": "2.4.1",
-    "@pi-unipi/core": "2.4.1",
-    "@pi-unipi/info-screen": "2.4.1",
-    "@pi-unipi/mcp": "2.4.1",
-    "@pi-unipi/memory": "2.4.1",
-    "@pi-unipi/ralph": "2.4.2",
-    "@pi-unipi/subagents": "2.4.1",
-    "@pi-unipi/utility": "2.4.1",
-    "@pi-unipi/milestone": "2.4.1",
-    "@pi-unipi/kanboard": "2.4.1",
-    "@pi-unipi/web-api": "2.4.1",
-    "@pi-unipi/workflow": "2.4.1",
-    "@pi-unipi/footer": "2.4.1",
-    "@pi-unipi/updater": "2.4.1",
-    "@pi-unipi/input-shortcuts": "2.4.1",
-    "@pi-unipi/cocoindex": "2.4.1"
+    "@pi-unipi/ask-user": "2.5.0",
+    "@pi-unipi/btw": "2.5.0",
+    "@pi-unipi/compactor": "2.5.0",
+    "@pi-unipi/notify": "2.5.0",
+    "@pi-unipi/command-enchantment": "2.5.0",
+    "@pi-unipi/core": "2.5.0",
+    "@pi-unipi/info-screen": "2.5.0",
+    "@pi-unipi/mcp": "2.5.0",
+    "@pi-unipi/memory": "2.5.0",
+    "@pi-unipi/ralph": "2.5.0",
+    "@pi-unipi/subagents": "2.5.0",
+    "@pi-unipi/utility": "2.5.0",
+    "@pi-unipi/milestone": "2.5.0",
+    "@pi-unipi/kanboard": "2.5.0",
+    "@pi-unipi/web-api": "2.5.0",
+    "@pi-unipi/workflow": "2.5.0",
+    "@pi-unipi/footer": "2.5.0",
+    "@pi-unipi/updater": "2.5.0",
+    "@pi-unipi/input-shortcuts": "2.5.0",
+    "@pi-unipi/cocoindex": "2.5.0"
   },
   "devDependencies": {
     "@earendil-works/pi-agent-core": "^0.80.0",

package/packages/ask-user/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/ask-user",
-  "version": "2.4.1",
+  "version": "2.5.0",
   "description": "Structured user input tool for Pi coding agent — single-select, multi-select, freeform",
   "type": "module",
   "main": "index.ts",
@@ -40,7 +40,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/core": "2.4.1"
+    "@pi-unipi/core": "2.5.0"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": "^0.80.0",

package/packages/autocomplete/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/command-enchantment",
-  "version": "2.4.1",
+  "version": "2.5.0",
   "description": "Enhanced TUI autocomplete for /unipi:* commands — colored, sorted, and grouped by package",
   "type": "module",
   "main": "src/index.ts",

package/packages/btw/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/btw",
-  "version": "2.4.1",
+  "version": "2.5.0",
   "description": "A pi extension for parallel side conversations with /unipi:btw — part of the Unipi suite",
   "type": "module",
   "main": "extensions/btw.ts",
@@ -37,7 +37,7 @@
     "@earendil-works/pi-tui": "^0.80.0"
   },
   "dependencies": {
-    "@pi-unipi/core": "2.4.1"
+    "@pi-unipi/core": "2.5.0"
   },
   "pi": {
     "extensions": [],

package/packages/cocoindex/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/cocoindex",
-  "version": "2.4.1",
+  "version": "2.5.0",
   "description": "CocoIndex integration for Pi — AST-aware content indexing, semantic vector search, and incremental pipeline management",
   "type": "module",
   "main": "index.ts",
@@ -25,7 +25,7 @@
     "typebox": "^1.1.38"
   },
   "dependencies": {
-    "@pi-unipi/core": "2.4.1"
+    "@pi-unipi/core": "2.5.0"
   },
   "optionalDependencies": {
     "@lancedb/lancedb": "^0.21.0"

package/packages/compactor/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/compactor",
-  "version": "2.4.1",
+  "version": "2.5.0",
   "description": "Context engine for Pi — zero-LLM compaction, session continuity, sandbox execution, and tool display optimization",
   "type": "module",
   "main": "src/index.ts",
@@ -34,8 +34,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/core": "2.4.1",
-    "@pi-unipi/info-screen": "2.4.1",
+    "@pi-unipi/core": "2.5.0",
+    "@pi-unipi/info-screen": "2.5.0",
     "@earendil-works/pi-agent-core": "^0.80.0"
   },
   "peerDependencies": {

package/packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/core",
-  "version": "2.4.1",
+  "version": "2.5.0",
   "description": "Shared utilities, event types, and constants for Unipi extension suite",
   "type": "module",
   "license": "MIT",

package/packages/core/sandbox.ts

@@ -2,7 +2,8 @@
  * @unipi/core — Sandbox module
  *
  * Defines tool access levels for workflow commands.
- * Used with pi.setActiveTools() to enforce restrictions.
+ * Workflow enforces blocked names at tool_call time so provider tool schemas
+ * and ordering remain stable; filtering helpers remain available to other callers.
  */
 
 import { WORKFLOW_COMMANDS } from "./constants.js";
@@ -13,9 +14,9 @@ export type SandboxLevel = "read_only" | "brainstorm" | "write_unipi" | "review"
 /**
  * Built-in workflow tools used when no active tool list is supplied.
  *
- * Workflow commands should normally call filterToolsForLevel() with the current
- * active tool list. That keeps safe extension tools (memory, ask-user, web,
- * notify, etc.) available while removing only tools that violate the sandbox.
+ * Legacy fallback list used by callers that need an explicit filtered tool set.
+ * The workflow package itself keeps Pi's active tools unchanged and enforces
+ * BLOCKED_TOOLS at tool_call time.
  */
 const FALLBACK_TOOLS: Record<SandboxLevel, readonly string[]> = {
   /** Only read-only file tools — no bash, no write, no edit */
@@ -78,8 +79,8 @@ export function getSandboxLevel(commandName: string): SandboxLevel {
 /**
  * Get fallback tools for a sandbox level.
  *
- * Prefer filterToolsForLevel(level, activeTools) when applying a sandbox so
- * extension tools are preserved unless explicitly blocked.
+ * Prefer isToolAllowed() for cache-stable call-time enforcement. Filtering is
+ * retained for compatibility with callers that intentionally alter tool sets.
  */
 export function getToolsForLevel(level: SandboxLevel): readonly string[] {
   return FALLBACK_TOOLS[level];

package/packages/footer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/footer",
-  "version": "2.4.1",
+  "version": "2.5.0",
   "description": "Persistent status bar for Unipi — subscribes to UNIPI_EVENTS and renders key stats from all unipi packages",
   "type": "module",
   "main": "index.ts",
@@ -32,7 +32,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/core": "2.4.1"
+    "@pi-unipi/core": "2.5.0"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": "^0.80.0",

package/packages/image/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/image",
-  "version": "2.4.1",
+  "version": "2.5.0",
   "description": "Image generation and image recognition tools for the Pi coding agent",
   "type": "module",
   "main": "src/index.ts",
@@ -34,7 +34,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/core": "2.4.1"
+    "@pi-unipi/core": "2.5.0"
   },
   "peerDependencies": {
     "@earendil-works/pi-ai": "^0.80.0",

package/packages/info-screen/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/info-screen",
-  "version": "2.4.1",
+  "version": "2.5.0",
   "description": "Dashboard and module registry for Unipi — configurable info overlay with tabbed groups",
   "type": "module",
   "main": "index.ts",
@@ -33,7 +33,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/core": "2.4.1"
+    "@pi-unipi/core": "2.5.0"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": "^0.80.0",

package/packages/input-shortcuts/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/input-shortcuts",
-  "version": "2.4.1",
+  "version": "2.5.0",
   "description": "Keyboard shortcuts for stash/restore, undo/redo, clipboard, and thinking toggle — chord-based overlay system",
   "type": "module",
   "main": "src/index.ts",
@@ -33,7 +33,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/core": "2.4.1"
+    "@pi-unipi/core": "2.5.0"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": "^0.80.0",

package/packages/kanboard/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/kanboard",
-  "version": "2.4.1",
+  "version": "2.5.0",
   "description": "Visualization layer for unipi workflow — HTTP server with htmx/Alpine.js UI, modular parsers, TUI overlay, and kanban board",
   "type": "module",
   "main": "index.ts",
@@ -39,7 +39,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/core": "2.4.1"
+    "@pi-unipi/core": "2.5.0"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": "^0.80.0",

package/packages/mcp/README.md

@@ -12,6 +12,7 @@ The add command opens a split-pane overlay: server browser on the left, JSON con
 | `/unipi:mcp-settings` | Interactive settings with enable/disable/edit |
 | `/unipi:mcp-sync` | Force sync server catalog from GitHub |
 | `/unipi:mcp-status` | Text summary of all configured servers |
+| `/unipi:mcp-reload` | Remind you to restart Pi so tool schemas reload as a clean cache epoch |
 
 ### Setup Flow
 
@@ -30,6 +31,14 @@ MCP registers with the info-screen dashboard, showing server count, active serve
 
 MCP tools are registered dynamically based on configured servers. Once a server is added and Pi restarts, its tools become available to the agent.
 
+### Deterministic Definitions and Cache Behavior
+
+At session startup, enabled servers connect and discover tools in parallel. Registration waits for all discoveries to settle, then registers the successful combined tool set in canonical `{serverName}__{toolName}` order. Duplicate final names are rejected explicitly instead of allowing one definition to overwrite another.
+
+MCP input properties are cloned and recursively canonicalized before registration: schema object keys use locale-independent UTF-16 code-unit order, valid schema `required` string arrays are sorted and deduplicated, a missing top-level `required` becomes `[]`, and literal-value arrays keep their source order. Each tool also receives a stable label matching its final Pi name. These stable definitions and registration order prevent equivalent MCP configurations from changing the serialized tool list between runs, improving provider prompt-cache reuse. A server that fails discovery is excluded from the combined set; a registration error fails startup for that prepared set and is not reported as successful.
+
+Pi 0.80 cannot remove dynamically registered tools. Enabling, disabling, deleting, or changing MCP servers is therefore applied on the next Pi restart rather than mutating the tool list mid-session. This prevents stale schemas and makes the restart an explicit cache-epoch boundary.
+
 Example tool calls:
 ```
 github__search_code({ query: "authentication middleware" })

package/packages/mcp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/mcp",
-  "version": "2.4.1",
+  "version": "2.5.0",
   "description": "MCP server management extension for Pi coding agent — browse, add, configure, and use MCP servers",
   "type": "module",
   "main": "src/index.ts",
@@ -26,8 +26,11 @@
     "skills/**/*",
     "README.md"
   ],
+  "scripts": {
+    "test": "npx tsx --test tests/**/*.test.ts"
+  },
   "dependencies": {
-    "@pi-unipi/core": "2.4.1"
+    "@pi-unipi/core": "2.5.0"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": "^0.80.0",