@piagent/platform 1.13.1 → 1.15.0

package/packages/piagent-webui/dist/client/index.html

@@ -7,7 +7,7 @@
     <meta name="csp-nonce" content="__PIAGENT_CSP_NONCE__" />
     <meta name="piagent-webui-mode" content="__PIAGENT_WEBUI_MODE__" />
     <title>Piagent WebUI</title>
-    <script type="module" crossorigin src="/assets/index-BBEa7Ger.js"></script>
+    <script type="module" crossorigin src="/assets/index-DeCt-FaN.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-Z91z6SlN.css">
   </head>
   <body>

package/packages/piagent-webui/gateway/pi-host.ts

@@ -28,9 +28,23 @@ export function installedPiHostRoot(): string {
   } catch {
     // The operator installation is normally global.
   }
+  const windows = process.platform === "win32";
+  if (windows) {
+    // npm's global prefix is configurable (CI commonly uses C:\npm\prefix).
+    // Read the package beside each PATH entry directly: where.exe may be
+    // unavailable in a restricted launcher, and an earlier stale shim must
+    // not hide a valid installation later on PATH. Windows env keys ignore case.
+    const environment = Object.fromEntries(Object.entries(process.env).map(([key, value]) => [key.toLowerCase(), value]));
+    const prefixes = [...(environment.path ?? "").split(";"), environment.npm_config_prefix];
+    for (const value of prefixes) {
+      const prefix = value?.trim().replace(/^"(.*)"$/, "$1");
+      if (!prefix || !path.isAbsolute(prefix)) continue;
+      const found = packageRootFrom(path.join(prefix, "node_modules", "@earendil-works", "pi-coding-agent", "package.json"));
+      if (found) return found;
+    }
+  }
   try {
-    const windows = process.platform === "win32";
-    const executable = execFileSync(windows ? "where" : "which", ["pi"], { encoding: "utf8", timeout: 2_000, stdio: ["ignore", "pipe", "ignore"] }).trim().split(/\r?\n/)[0];
+    const executable = execFileSync(windows ? "where.exe" : "which", ["pi"], { encoding: "utf8", timeout: 2_000, stdio: ["ignore", "pipe", "ignore"] }).trim().split(/\r?\n/)[0];
     // npm on Windows puts the pi.cmd shim in the global prefix and the package
     // in node_modules beside it.
     const found = packageRootFrom(fs.realpathSync(executable))

package/scripts/build-docs-site.mjs

@@ -69,6 +69,12 @@ const NAV = [
         title: "Step by step cho thành viên mới",
         lead: "Hai lệnh để cài, mở repo, chọn profile và quyền, rồi giao việc bằng lời thường; guard kiểm tra từng tool call."
       },
+      {
+        slug: "windows",
+        nav: "Cài trên Windows",
+        title: "Piagent trên Windows bằng một lệnh",
+        lead: "Một lệnh PowerShell cài WSL2, Ubuntu, Piagent và Agent Watch, nối key công ty và thêm Piagent vào Start menu; chạy lại để cập nhật."
+      },
       {
         slug: "whats-new",
         nav: "Có gì mới",
@@ -200,6 +206,11 @@ const EN_PAGE_COPY = {
     title: "Step by step for new team members",
     lead: "Install with two commands, open a repository, choose its profile and permissions, then ask in plain language; the guard checks every tool call."
   },
+  windows: {
+    nav: "Windows",
+    title: "Piagent on Windows with one command",
+    lead: "One PowerShell command installs WSL2, Ubuntu, Piagent and Agent Watch, binds the company key and adds Piagent to the Start menu; run it again to update."
+  },
   "whats-new": {
     nav: "What’s new",
     title: "1.9.0: ask in plain language, the team's Harness checks",

package/scripts/configure-model-scope.sh

@@ -14,6 +14,9 @@ Options:
   --dry-run                          Print resulting settings JSON without writing
   --prune                            Only remove enabledModels patterns that match no model
                                      Pi knows (Pi warns about each on every start); keep the rest
+  --keep-member-choices              Install/update mode: set the default model and model list
+                                     only where Pi has none yet; otherwise keep the member's and
+                                     add only models this release offers for the first time
   -h, --help
 
 Purpose:
@@ -36,6 +39,7 @@ DEFAULT_MODEL="openai-codex/gpt-6-sol:high"
 SETTINGS_PATH="${PI_CODING_AGENT_DIR:-"${HOME}/.pi/agent"}/settings.json"
 DRY_RUN=false
 PRUNE=false
+KEEP=false
 
 # A flag whose value is missing swallows the next flag instead. `--settings
 # --dry-run` used to set the settings path to the string "--dry-run", leave
@@ -75,6 +79,10 @@ while [[ $# -gt 0 ]]; do
       PRUNE=true
       shift
       ;;
+    --keep-member-choices)
+      KEEP=true
+      shift
+      ;;
     -h|--help)
       usage
       exit 0
@@ -102,14 +110,15 @@ case "$PRESET" in
     ;;
 esac
 
-PIAGENT_SCOPE_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)" node --input-type=module - "$SETTINGS_PATH" "$PRESET" "$DEFAULT_MODEL" "$DRY_RUN" <<'NODE'
+PIAGENT_SCOPE_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)" node --input-type=module - "$SETTINGS_PATH" "$PRESET" "$DEFAULT_MODEL" "$DRY_RUN" "$KEEP" <<'NODE'
 import fs from "node:fs";
 import path from "node:path";
 import { pathToFileURL } from "node:url";
 const { prepareClaudeModelAdditions } = await import(pathToFileURL(process.env.PIAGENT_SCOPE_ROOT + "/scripts/claude-model-additions.mjs"));
 
-const [settingsPath, preset, defaultModelInput, dryRunRaw] = process.argv.slice(2);
+const [settingsPath, preset, defaultModelInput, dryRunRaw, keepRaw] = process.argv.slice(2);
 const dryRun = dryRunRaw === "true";
+const keep = keepRaw === "true";
 
 const codexModels = [
   "openai-codex/gpt-5.3-codex-spark:minimal",
@@ -160,10 +169,28 @@ const parsedDefault = parseDefaultModel(defaultModelInput);
 const settingsBefore = fs.existsSync(settingsPath) ? fs.readFileSync(settingsPath, "utf8") : null;
 const settings = settingsBefore === null ? {} : JSON.parse(settingsBefore);
 
-settings.defaultProvider = parsedDefault.provider;
-settings.defaultModel = parsedDefault.model;
-settings.defaultThinkingLevel = parsedDefault.thinking;
-settings.enabledModels = enabledModels;
+// What Piagent last offered, so an update adds only models new to this
+// release and never puts back one the member removed.
+const recordPath = path.join(path.dirname(settingsPath), "piagent-model-scope.json");
+let offered = null;
+try { const record = JSON.parse(fs.readFileSync(recordPath, "utf8")); if (Array.isArray(record.offered)) offered = record.offered; } catch { /* none yet */ }
+const notes = [];
+if (!keep || !settings.defaultModel) {
+  settings.defaultProvider = parsedDefault.provider;
+  settings.defaultModel = parsedDefault.model;
+  settings.defaultThinkingLevel = parsedDefault.thinking;
+} else {
+  notes.push(`kept the member's default: ${settings.defaultProvider ?? "?"}/${settings.defaultModel}${settings.defaultThinkingLevel ? `:${settings.defaultThinkingLevel}` : ""}`);
+}
+if (!keep || !Array.isArray(settings.enabledModels) || settings.enabledModels.length === 0) {
+  settings.enabledModels = enabledModels;
+} else {
+  // Installed before this record existed: the member's list stays, and the
+  // record starts now.
+  const fresh = offered ? enabledModels.filter((model) => !offered.includes(model) && !settings.enabledModels.includes(model)) : [];
+  settings.enabledModels = [...settings.enabledModels, ...fresh];
+  notes.push(fresh.length ? `kept the member's model list, added ${fresh.join(", ")}` : "kept the member's model list");
+}
 
 const catalogEdit = preset === "codex" ? null : prepareClaudeModelAdditions(path.join(path.dirname(settingsPath), "models.json"));
 const output = `${JSON.stringify(settings, null, 2)}\n`;
@@ -180,9 +207,11 @@ if (dryRun) {
     }
     throw error;
   }
+  fs.writeFileSync(recordPath, `${JSON.stringify({ version: 1, preset, offered: enabledModels }, null, 2)}\n`);
   console.log(`Configured Pi model scope: ${settingsPath}`);
   console.log(`  preset: ${preset}`);
-  console.log(`  default: ${parsedDefault.provider}/${parsedDefault.model}:${parsedDefault.thinking}`);
-  console.log(`  enabledModels: ${enabledModels.length}`);
+  console.log(`  default: ${settings.defaultProvider}/${settings.defaultModel}:${settings.defaultThinkingLevel}`);
+  console.log(`  enabledModels: ${settings.enabledModels.length}`);
+  for (const note of notes) console.log(`  ${note}`);
 }
 NODE

package/scripts/install-global.sh

@@ -24,7 +24,11 @@ Options:
                                   Install pi-web-access for the researcher subagent (default: install).
   --with-herdr                    Also configure Herdr integration.
   --model-scope <full|codex|claude>
-                                  Model families to enable in Pi (default: full).
+                                  Model families to enable in Pi (default: full). A member who
+                                  already has a default model and model list keeps them; an
+                                  update only adds models new to this release.
+  --reset-model-scope             Replace the member's default model and model list with the
+                                  preset (what every update did before 1.14.0).
   --no-model-scope                Leave the user's enabledModels untouched.
   --default-model <provider/model[:thinking]>
                                   Default model written to Pi settings
@@ -90,6 +94,7 @@ SUBAGENTS_MODEL_SCOPE="none"
 WITH_WEB_ACCESS=true
 WITH_HERDR=false
 CONFIGURE_MODEL_SCOPE=true
+RESET_MODEL_SCOPE=false
 MODEL_SCOPE_PRESET="full"
 DEFAULT_MODEL="openai-codex/gpt-6-sol:high"
 DRY_RUN=false
@@ -135,7 +140,12 @@ detect_runtime_surface() {
   arch_name="$(uname -m 2>/dev/null || echo unknown)"
 
   if [[ "$os_name" == "Linux" && -r /proc/version ]] && grep -qiE "microsoft|wsl" /proc/version 2>/dev/null; then
-    printf 'wsl2/%s (experimental; not release-gated)' "$arch_name"
+    # WSL2 is how Windows runs Piagent (since 1.13.0): the Windows setup and
+    # the bubblewrap sandbox run in CI on x86_64.
+    case "$arch_name" in
+      x86_64|amd64) printf 'wsl2/%s (verified in CI: Windows setup and the bubblewrap sandbox)' "$arch_name" ;;
+      *) printf 'wsl2/%s (supported target; run smoke before team rollout)' "$arch_name" ;;
+    esac
     return
   fi
 
@@ -153,7 +163,7 @@ detect_runtime_surface() {
       printf 'linux-arm64 (supported target; run smoke before team rollout)'
       ;;
     MINGW*|MSYS*|CYGWIN*)
-      printf 'native-windows/%s (not release-gated; terminal helpers require Bash semantics)' "$arch_name"
+      printf 'native-windows/%s (personal-mode preview, not release-gated; teams use WSL2)' "$arch_name"
       ;;
     *)
       printf '%s/%s (outside v1.2.0 release matrix)' "$os_name" "$arch_name"
@@ -530,6 +540,10 @@ while [[ $# -gt 0 ]]; do
       DEFAULT_MODEL="$2"
       shift 2
       ;;
+    --reset-model-scope)
+      RESET_MODEL_SCOPE=true
+      shift
+      ;;
     --no-model-scope)
       CONFIGURE_MODEL_SCOPE=false
       shift
@@ -750,7 +764,11 @@ fi
 
 if [[ "$CONFIGURE_MODEL_SCOPE" == true ]]; then
   echo "Configuring Pi model selector scope:"
-  run_cmd bash "$PLATFORM_ROOT/scripts/configure-model-scope.sh" --preset "$MODEL_SCOPE_PRESET" --default-model "$DEFAULT_MODEL"
+  if [[ "$RESET_MODEL_SCOPE" == true ]]; then
+    run_cmd bash "$PLATFORM_ROOT/scripts/configure-model-scope.sh" --preset "$MODEL_SCOPE_PRESET" --default-model "$DEFAULT_MODEL"
+  else
+    run_cmd bash "$PLATFORM_ROOT/scripts/configure-model-scope.sh" --preset "$MODEL_SCOPE_PRESET" --default-model "$DEFAULT_MODEL" --keep-member-choices
+  fi
 fi
 
 if [[ "$WITH_HERDR" == true ]]; then

package/scripts/update-global.mjs

@@ -423,7 +423,8 @@ function main() {
     fail(`${HELPER_PACKAGE}@${targetHelper} does not pin an exact ${HOST_PACKAGE} version, so the host cannot be updated safely.`);
   }
 
-  const helperNeedsChange = options.force || currentHelper !== targetHelper;
+  // npm exec is temporary even when its version already matches the target.
+  const helperNeedsChange = options.force || currentHelper !== targetHelper || isNpxCacheRoot(platformRoot);
   const hostNeedsChange = options.host && (options.force || currentHost !== targetHost);
 
   console.log("Pi Agent Platform update");
@@ -475,6 +476,11 @@ function main() {
     }
   }
 
+  // Refuse an impossible package installation before replacing either global.
+  if (options.package && !options.host && effectiveHost !== targetHost) {
+    fail(`--no-host cannot install this Pi package: active Pi is ${effectiveHost ?? "missing"}, but v${targetHelper} requires ${targetHost}. Rerun without --no-host.`);
+  }
+
   // Host first: piagent-install refuses to run against a host that does not match
   // the version its package.json pins, so a helper installed ahead of the host
   // would fail on its very next step.