@plannotator/pi-extension 0.28.32 → 0.28.33

package/README.md

@@ -41,8 +41,10 @@ itself before loading the extension.
 
 Run Pi on **Node 22.23.4+, 24.22.1+ or 26.12.1+**. These October 2026 security
 releases stop trusting the compromised eMudhra certificate chain. On an older
-Node, HTTPS calls made inside Pi still trust it. The package's `engines` field
-states this floor; npm warns but does not block the install.
+Node, HTTPS calls made inside Pi still trust it, and the extension says so once
+when Pi starts (on Bun: Bun 1.4.4+). The package declares no `engines` floor on
+purpose: npm passes over a release whose floor the running Node misses, which
+kept older-Node installs on an old Plannotator without a word.
 
 Pi 0.79 introduced project trust for repository-local inputs. In interactive
 sessions, Pi asks before loading project settings, instructions, resources, and

package/index.ts

@@ -35,6 +35,7 @@ import {
 } from "./generated/checklist.ts";
 import { loadConfig, resolveAgentTool, resolveUseJina } from "./generated/config.ts";
 import { detectPiHost, setPiHost } from "./pi-host.ts";
+import { warnRuntimeTlsOnce } from "./runtime-tls.ts";
 import { importFresh, isPlannotatorUpdatedError, launchFailureText } from "./package-version.ts";
 import { readImprovementHook } from "./generated/improvement-hooks.ts";
 import { composeImproveContext } from "./generated/pfm-reminder.ts";
@@ -2645,6 +2646,9 @@ Call ${PLAN_MARK_DONE_TOOL} immediately after each completed step and before the
 		for (const warning of loadedConfig.warnings) {
 			ctx.ui.notify(`Plannotator config: ${warning}`, "warning");
 		}
+		// A runtime without the Oct 2026 TLS fixes: one line per Pi start. It
+		// replaces the package's engines floor, which kept updates from installing (#902).
+		warnRuntimeTlsOnce((message) => ctx.ui.notify(message, "warning"));
 
 		// Check --plan flag
 		if (pi.getFlag("plan") === true) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plannotator/pi-extension",
-  "version": "0.28.32",
+  "version": "0.28.33",
   "type": "module",
   "description": "Plannotator Pi extension - interactive plan review with annotations, annotate agent messages, and review code/PRs",
   "author": "backnotprop",
@@ -44,6 +44,7 @@
     "plannotator-tool-host.ts",
     "session-opened.ts",
     "pi-host.ts",
+    "runtime-tls.ts",
     "package-version.ts",
     "inbox.ts",
     "server.ts",
@@ -75,9 +76,7 @@
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": ">=0.79.1"
   },
-  "engines": {
-    "node": ">=22.23.4 <23 || >=24.22.1 <25 || >=26.12.1"
-  },
+  "//engines": "No engines field on purpose (#902): for a bare or range install npm passes over a release whose engines the running Node misses, so Pi on an older Node silently stayed on an old Plannotator. runtime-tls.ts warns once per start instead. package-engines.test.ts fails if a node engines field comes back.",
   "devDependencies": {
     "glimpseui": "^0.8.0",
     "@earendil-works/pi-coding-agent": ">=0.79.1",