@signalridge/pi-welcome 1.3.4 → 1.3.6

package/CHANGELOG.md

@@ -1,5 +1,59 @@
 # Changelog
 
+## 1.3.6
+### Patch Changes
+
+- d9219d4: Correct shipped documentation that contradicted the code or the manifest.
+  
+  - `pi-subagents`: the summary line still advertised protocol-v3 spawning while
+    the feature list and the managed-spawn section described v4.
+  - `pi-worktree`: the workspace-switching section named `/tree`; the registered
+    command is `/worktree`.
+  - `pi-workflows`: removed an orphaned sentence fragment left behind by an edit
+    to the saved-workflow paragraph.
+  - `pi-plan-mode`, `pi-goal`, `pi-usage-extension`: the stated Pi floor
+    (`0.80.6`, `0.42.4+`) contradicted the declared `^0.84.0` peer range, which
+    resolves to `0.84.x`. `pi-usage-extension` also carried a "Last updated"
+    stamp from a version that predates the workspace baseline.
+  - `pi-welcome`: the example card was a real session capture. It is now a
+    generic sample, and Install moved above the configuration sections instead of
+    sitting below them.
+- 1f586f8: Expand Pi peer support to `^0.84.0 || ^0.85.0`, retaining 0.84 compatibility while admitting 0.85 releases. The previous zero-major caret range excluded Pi 0.85.1. Update existing Pi development dependency pins to 0.85.1.
+
+## 1.3.5
+### Patch Changes
+
+- c1b1741: Durability and containment fixes found in a repository-wide scan.
+  
+  `pi-gpt-fast` rewrote pi's own global `settings.json` with a plain
+  `writeFileSync`. That file is shared with pi and every other extension, and this
+  one is the only writer of it; a torn write would have left the user with no pi
+  configuration at all rather than just no gpt-fast setting. It now writes a temp
+  file and renames, matching every other settings writer in the repository.
+  `pi-goal` gets the same treatment for its cross-project goal state file, which
+  its own settings module already did.
+  
+  `pi-ralph-wiggum` resolved `/ralph start <path>` straight against the session
+  cwd, so `../../notes.md` would create directories and a file outside the project
+  the user opened — silently, before the loop started. This extension drives long
+  unattended loops, so that command is as likely to come from a model as from a
+  person. Task-file paths are now required to stay inside the workspace, on the
+  command, on the `ralph_start` tool, and on the paths read back out of persisted
+  state, so a state file written earlier or edited by hand cannot pull a file in
+  from outside either.
+  
+  The containment test canonicalizes both sides before comparing, because a purely
+  lexical one is defeated by a symlink: every segment of `linked/plan.md` reads as
+  inside the workspace when `linked` is a door out of it. `realpathSync` throws on
+  a path that does not exist yet — the ordinary case, since `start` is usually
+  creating the file — so it resolves the deepest existing ancestor and re-attaches
+  the not-yet-created suffix, which cannot itself be a link. The traversal test
+  matches a `..` segment rather than a `..` prefix; the prefix form also rejected
+  `..notes.md`, an ordinary filename sitting in the workspace.
+  
+  Every remaining bare `catch {}` now says why the error is safe to drop, matching
+  the convention the rest of the repository already follows.
+
 ## 1.3.4
 ### Patch Changes
 

package/README.md

@@ -10,18 +10,18 @@ redraws it, and collapses to a width-safe compact summary on narrow terminals.
 │                                                                         │
 │  Ctrl+C interrupt · / commands · ! bash · Ctrl+L clear                  │
 │                                                                         │
-│  Directory:  ~/ghq/github.com/signalridge/pi-extensions                 │
+│  Directory:  ~/code/acme-api                                            │
 │  Branch:     main [+392 -202]                                           │
 │  Session:    (new)                                                      │
 │  Model:      openai-codex / gpt-5.6-luna · thinking max                 │
 │  Budget:     400K · compacts at 270K                                    │
-│  Version:    0.84.1                                                     │
+│  Version:    0.85.1                                                     │
 │                                                                         │
 │  Context:    AGENTS.md                                                  │
-│  Skills:     commit, dev-preferences, toolbelt, write-tui +12           │
-│  Prompts:    /plan, /review, /ship +4                                   │
+│  Skills:     commit, release, review +12                                │
+│  Prompts:    /plan, /ship +4                                            │
 │  Extensions: btw, code-actions, goal, gpt-fast, statusline +18          │
-│  Themes:     catppuccin-mocha, signalridge-ridgeline +2                 │
+│  Themes:     catppuccin-mocha +2                                        │
 │  Tools:      18 active of 42                                            │
 │                                                                         │
 ╰─────────────────────────────────────────────────────────────────────────╯
@@ -30,6 +30,22 @@ redraws it, and collapses to a width-safe compact summary on narrow terminals.
 No logo and no wordmark: the card exists to say what this session is, and a
 brand line says nothing a returning user does not already know.
 
+## Install
+
+Supports Pi `0.84.x` and `0.85.x`; tested with `0.85.1` — see the `peerDependencies` range.
+
+```bash
+pi install npm:@signalridge/pi-welcome
+```
+
+## Use from this checkout
+
+From the repository root:
+
+```bash
+pi -e ./packages/pi-welcome
+```
+
 ## Turn on `quietStartup`
 
 The card is designed to be the whole opening screen. Pi's own startup is a
@@ -75,17 +91,3 @@ attacker-controlled in a cloned repository, and the card is a persisted entry
 replayed on every resume. Control characters and bidirectional overrides are
 neutralized at render time, so an entry stored before that landed is cleaned up
 on the way out too.
-
-## Install
-
-```bash
-pi install npm:@signalridge/pi-welcome
-```
-
-## Use from this checkout
-
-From the repository root:
-
-```bash
-pi -e ./packages/pi-welcome
-```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@signalridge/pi-welcome",
-  "version": "1.3.4",
+  "version": "1.3.6",
   "description": "Startup resource and repository summary card for Pi.",
   "type": "module",
   "license": "MIT",
@@ -9,8 +9,8 @@
     "lifecycle": "stable"
   },
   "peerDependencies": {
-    "@earendil-works/pi-coding-agent": "^0.84.0",
-    "@earendil-works/pi-tui": "^0.84.0"
+    "@earendil-works/pi-coding-agent": "^0.84.0 || ^0.85.0",
+    "@earendil-works/pi-tui": "^0.84.0 || ^0.85.0"
   },
   "pi": {
     "extensions": [

package/src/index.ts

@@ -221,14 +221,19 @@ function collectExtensionNames(cwd: string): string[] {
         const bare = (spec.startsWith("@") ? (spec.split("/")[1] ?? spec) : basename(spec)).replace(/@.*$/u, "");
         names.push(bare.replace(/^pi-/u, ""));
       }
-    } catch {}
+    } catch {
+      // Discovery is best-effort: a malformed manifest contributes no names
+      // rather than blanking the whole card.
+    }
   }
   for (const directory of [join(getAgentDir(), "extensions"), join(cwd, ".pi", "extensions")]) {
     try {
       for (const entry of readdirSync(directory)) {
         names.push(entry.replace(/\.[cm]?[jt]s$/u, "").replace(/^pi-/u, ""));
       }
-    } catch {}
+    } catch {
+      // An extensions directory that does not exist is the normal case.
+    }
   }
   return tidy(names);
 }
@@ -271,7 +276,9 @@ export function collectResources(pi: ExtensionAPI, cwd: string): [string, string
     // Several scopes can contribute the same filename (a project AGENTS.md and
     // a global one); the card names kinds of context, not paths.
     push("Context", nameList(tidy(files.map((file) => basename(file.path)))));
-  } catch {}
+  } catch {
+    // One unreadable source drops its row; the card still renders the rest.
+  }
 
   try {
     const commands = pi.getCommands?.() ?? [];
@@ -279,7 +286,9 @@ export function collectResources(pi: ExtensionAPI, cwd: string): [string, string
       tidy(commands.filter((command) => command.source === source).map((command) => `${prefix}${command.name}`));
     push("Skills", nameList(named("skill")));
     push("Prompts", nameList(named("prompt", "/")));
-  } catch {}
+  } catch {
+    // A host without these accessors simply contributes no rows.
+  }
 
   push("Extensions", nameList(collectExtensionNames(cwd)));
   push("Themes", nameList(collectThemeNames()));
@@ -288,7 +297,9 @@ export function collectResources(pi: ExtensionAPI, cwd: string): [string, string
     const all = pi.getAllTools?.() ?? [];
     const active = pi.getActiveTools?.() ?? [];
     if (all.length) push("Tools", `${active.length} active of ${all.length}`);
-  } catch {}
+  } catch {
+    // A host without these accessors simply contributes no rows.
+  }
 
   return rows;
 }
@@ -501,7 +512,10 @@ export default function (pi: ExtensionAPI) {
           return;
         }
       }
-    } catch {}
+    } catch {
+      // Unreadable entries mean we cannot prove the card was already written.
+      // Falling through re-appends it, which beats never showing it at all.
+    }
 
     try {
       pi.appendEntry<WelcomeData>(ENTRY_TYPE, collect(pi, ctx));