@tt-a1i/openpi 0.1.0 → 0.1.1

package/SETUP.md

@@ -9,14 +9,14 @@ pi install npm:@tt-a1i/openpi
 To inspect the current source before loading it, install directly from GitHub instead:
 
 ```sh
-pi install git:github.com/tt-a1i/my-pi-setup
+pi install git:github.com/tt-a1i/openpi
 ```
 
 Pi installs the package dependencies automatically. Restart Pi or run `/reload` after installation.
 
 ## fd and rg tools
 
-The `file-search` extension registers `fd` and `rg` as model tools. No setup is normally needed: at startup it silently uses a system-installed `fd` (or `fdfind` on Debian/Ubuntu) and `rg` when available, or an existing fallback binary in `~/.pi/agent/bin/`. Only when neither exists does it download an official release binary (macOS/Linux, arm64/x64, over HTTPS) into `~/.pi/agent/bin/` and show a one-time notification. If your platform is unsupported, install `fd` and `rg` with your package manager and restart pi.
+The `file-search` extension registers `fd` and `rg` as model tools. No setup is normally needed: at startup it silently uses a system-installed `fd` (or `fdfind` on Debian/Ubuntu) and `rg` when available, or an existing fallback in this package's private `bin/` directory. Only when neither exists does it download an official release binary (macOS/Linux, arm64/x64, over HTTPS) into that package-local directory and show a one-time notification. If your platform is unsupported, install `fd` and `rg` with your package manager and restart Pi.
 
 ## Theme
 
@@ -32,27 +32,27 @@ Pi will load the extensions, skills, and theme from their directories the next t
 
 ## Configure this package
 
-Use the single package-owned command. With no arguments, the current model explains the configurable areas and their impact, then uses `ask_user`: first run initializes them; later runs explain the saved state and ask whether to keep it, change one area, or review everything. With arguments, it treats the rest as a targeted natural-language request:
+Use the single canonical package-owned command. `/my-pi-setup` remains a compatibility alias. With no arguments, when optional pi-intercom is absent, the interactive TUI first offers a reviewed global installation; declining changes nothing. Acceptance installs the fixed `npm:pi-intercom` source through Pi's package manager. A new private config receives `confirmSend: true` and `inboundTrigger: "replies"`; an existing preference file is never rewritten and must already define both fields. Package download failure writes no config, while uncertain activation retains the safe new config. Setup asks for `/reload` instead of loading a new broker into the running Session. The current model then explains the remaining configurable areas and uses `ask_user`: first run initializes them; later runs explain the saved state and ask whether to keep it, change one area, or review everything. With arguments, it treats the rest as a targeted natural-language request:
 
 ```text
-/my-pi-setup
-/my-pi-setup 开启下一步预测，使用 seal/deepseek-v4-flash，关闭推理
-/my-pi-setup 关闭下一步预测
-/my-pi-setup workflow 同时跑 16 个 agent，总任务最多 256 个
-/my-pi-setup 显示大标题
-/my-pi-setup 切换 Footer 为 powerline
-/my-pi-setup 用 mono powerline Footer
-/my-pi-setup Footer 用 compact
-/my-pi-setup Footer 两行：cwd flex model / context cost flex git
-/my-pi-setup Footer 只显示 model、thinking、context、cache 和 git
-/my-pi-setup 关闭自定义状态栏
-/my-pi-setup 编辑后自动跑 npm run format
-/my-pi-setup 关闭 post-edit 命令
-/my-pi-setup 给 explorer 指定当前 Registry 中可用的模型
-/my-pi-setup 清除 explorer 的模型，让它继承父模型
+/openpi-setup
+/openpi-setup 开启下一步预测，使用 seal/deepseek-v4-flash，关闭推理
+/openpi-setup 关闭下一步预测
+/openpi-setup workflow 同时跑 16 个 agent，总任务最多 256 个
+/openpi-setup 显示大标题
+/openpi-setup 切换 Footer 为 powerline
+/openpi-setup 用 mono powerline Footer
+/openpi-setup Footer 用 compact
+/openpi-setup Footer 两行：cwd flex model / context cost flex git
+/openpi-setup Footer 只显示 model、thinking、context、cache 和 git
+/openpi-setup 关闭自定义状态栏
+/openpi-setup 编辑后自动跑 npm run format
+/openpi-setup 关闭 post-edit 命令
+/openpi-setup 给 explorer 指定当前 Registry 中可用的模型
+/openpi-setup 清除 explorer 的模型，让它继承父模型
 ```
 
-Next-action suggestions default to off. Run `/my-pi-setup` to explicitly choose an available model and reasoning level. After a fully settled main-agent run, one suggestion may appear as dim inline text on the first row of an empty editor; reserved cells at the row end keep CJK IME preedit from overwriting it. `Right` accepts it into the editor without submitting, while any other editor input dismisses it. Suggestions are ephemeral and never enter session history or model context. Workflows default to 8 concurrent agents and 128 total agent calls per run; configurable hard maxima are 64 and 1024. The large decorative header defaults off and the custom dashboard footer defaults on with a one-line Powerline layout (`cwd model thinking context cache cost throughput |flex| git pr`). Footer presets are `powerline`, `powerline-mono`, and `compact`; style can also be set independently to `plain`, `powerline`, or `powerline-mono`. Custom layouts use a 2D `footerLines` array with at most one `flex` per row for left/right alignment. Nerd Font only affects powerline separator glyphs (``); metric text stays readable without it. Footer changes apply immediately in the active TUI session. Subagent results default to the existing full display; users who do not usually inspect implementation detail can select compact previews. Bash defaults to a folded one-line command with bounded output and a hidden-line count. Write/Edit defaults to an extra-short folded preview capped at three rendered lines including the operation header; its hidden-line hint remains inside the operation's status background. Select full independently for any category to keep it expanded. Compact views temporarily expand with `app.tools.expand` (`Ctrl+O` by default). An optional post-edit command is off by default: set one (for example `npm run format`, maximum 500 characters) and it runs once in the background after each interactive-TUI turn with successful Write/Edit operations, with failures reported as a notification. It deliberately does not guess whether arbitrary Bash commands changed files. Built-in Agent roles `explorer`, `implementer`, `reviewer`, and `advisor` are shared by `subagent_spawn.agent_type` and Workflow `agent(..., { agent_type })`; all inherit the parent model by default. `/my-pi-setup` may assign a currently available Registry model to any subset; clearing one returns it to inheritance and omitted roles stay unchanged. Model precedence is explicit call > selected role-file model > setup assignment > parent inheritance; effort is explicit call > selected role > parent. A trusted project `.pi/agents/<role>.md` overrides global `~/.pi/agent/agents/<role>.md`, which overrides the complete built-in role definition; overrides are diagnosed. Role-model changes apply to the next spawn or Workflow agent call without reload. Configuration is stored privately at `~/.pi/agent/my-pi-setup.json`.
+Next-action suggestions default to off. Run `/openpi-setup` to explicitly choose an available model and reasoning level. After a fully settled main-agent run, one suggestion may appear as dim inline text on the first row of an empty editor; reserved cells at the row end keep CJK IME preedit from overwriting it. `Right` accepts it into the editor without submitting, while any other editor input dismisses it. Suggestions are ephemeral and never enter session history or model context. Workflows default to 8 concurrent agents and 128 total agent calls per run; configurable hard maxima are 64 and 1024. The large decorative header defaults off and the custom dashboard footer defaults on with a one-line Powerline layout (`cwd model thinking context cache cost throughput |flex| git pr`). Footer presets are `powerline`, `powerline-mono`, and `compact`; style can also be set independently to `plain`, `powerline`, or `powerline-mono`. Custom layouts use a 2D `footerLines` array with at most one `flex` per row for left/right alignment. Nerd Font only affects powerline separator glyphs (``); metric text stays readable without it. Footer changes apply immediately in the active TUI session. Subagent results default to the existing full display; users who do not usually inspect implementation detail can select compact previews. Bash defaults to a folded one-line command with bounded output and a hidden-line count. Write/Edit defaults to an extra-short folded preview capped at three rendered lines including the operation header; its hidden-line hint remains inside the operation's status background. Select full independently for any category to keep it expanded. Compact views temporarily expand with `app.tools.expand` (`Ctrl+O` by default). An optional post-edit command is off by default: set one (for example `npm run format`, maximum 500 characters) and it runs once in the background after each interactive-TUI turn with successful Write/Edit operations, with failures reported as a notification. It deliberately does not guess whether arbitrary Bash commands changed files. Built-in Agent roles `explorer`, `implementer`, `reviewer`, and `advisor` are shared by `subagent_spawn.agent_type` and Workflow `agent(..., { agent_type })`; all inherit the parent model by default. `/openpi-setup` may assign a currently available Registry model to any subset; clearing one returns it to inheritance and omitted roles stay unchanged. Model precedence is explicit call > selected role-file model > setup assignment > parent inheritance; effort is explicit call > selected role > parent. A trusted project `.pi/agents/<role>.md` overrides global `~/.pi/agent/agents/<role>.md`, which overrides the complete built-in role definition; overrides are diagnosed. Role-model changes apply to the next spawn or Workflow agent call without reload. Configuration is stored privately at `~/.pi/agent/my-pi-setup.json`.
 
 ## Session Goal and Tasks
 
@@ -62,7 +62,7 @@ Model callers use `get_goal`, `create_goal`, and `update_goal`. `create_goal` is
 
 There are no normal user-facing Turn, no-progress, or wall-clock caps; a hidden 1000-continuation circuit breaker exists only to stop runaway automation. An optional `token_budget` must only be positive. Goal non-cached Assistant input-plus-output Token and elapsed-time usage are persisted; crossing the budget marks `budget_limited` and queues one wrap-up Turn. Active goals continue after reload/resume. Fork and tree navigation defer inherited active continuation until the first explicit user input; paused, blocked, and usage-limited goals remain stopped and can prompt for Resume. A v1 active/waiting goal migrates once to paused. Assistant aborts pause an active goal and Assistant errors block it. Print/json automation is inert. Footer text mirrors Codex (`Pursuing goal (…)`, resume hints, `Goal unmet`, `Goal achieved`) without showing the objective or legacy Turn counts. An achieved Footer remains visible until the next explicit interactive/RPC input, then a branch-persisted acknowledgement hides only the Footer while `/goal` retains the completed record.
 
-Session Tasks remain advisory multi-item work intent and do not determine Goal completion. They are scoped to the current request batch: once every item is done or dropped, the batch closes and the next `tasks_add` starts again at T1. Active items persist in a polished Claude Code-style panel above the editor; `Ctrl+Shift+T` or `/tasks hide|show|toggle` controls visibility, while `/tasks` opens the full list. No `/my-pi-setup` setting or secondary judge model is required.
+Session Tasks remain advisory multi-item work intent and do not determine Goal completion. They are scoped to the current request batch: once every item is done or dropped, the batch closes and the next `tasks_add` starts again at T1. Active items persist in a polished Claude Code-style panel above the editor; `Ctrl+Shift+T` or `/tasks hide|show|toggle` controls visibility, while `/tasks` opens the full list. No `/openpi-setup` setting or secondary judge model is required.
 
 ## Other commands added by this fork
 

package/THIRD_PARTY_NOTICES.md

@@ -10,7 +10,6 @@ The upstream project is distributed under the MIT License. Its notice states
 `Copyright (c) 2026`; the complete license text is included at
 [`extensions/sessions/LICENSE.upstream`](extensions/sessions/LICENSE.upstream).
 
-The remainder of this repository retains its upstream licensing status; no
-project-wide license is asserted here. The npm package therefore declares
-`UNLICENSED`; publication does not grant permission to copy, modify, or
-redistribute code beyond rights supplied by an applicable upstream license.
+OpenPI is distributed under the MIT License; see [`LICENSE`](LICENSE). Portions
+identified in this notice retain their original copyright notices and license
+terms. The project-wide MIT license does not replace or remove those notices.

package/assets/readme-hero-mobile.svg

@@ -1,6 +1,6 @@
 <svg xmlns="http://www.w3.org/2000/svg" width="720" height="900" viewBox="0 0 720 900" role="img" aria-labelledby="title desc">
   <title id="title">OpenPI</title>
-  <desc id="desc">A mobile-readable overview of the Pi-native multi-agent runtime.</desc>
+  <desc id="desc">OpenPI — small harness, deep extensions, clean context.</desc>
   <defs>
     <linearGradient id="bg" x1="0" y1="0" x2="1" y2="1">
       <stop stop-color="#0d1117"/>
@@ -21,7 +21,7 @@
     <text x="42" y="28" fill="#a5d6ff" font-family="ui-monospace, SFMono-Regular, Menlo, monospace" font-size="18" font-weight="700" letter-spacing="1">PI NATIVE</text>
 
     <text x="0" y="122" fill="#f0f6fc" font-family="-apple-system, BlinkMacSystemFont, Segoe UI, sans-serif" font-size="66" font-weight="760" letter-spacing="-2">OpenPI</text>
-    <text x="0" y="168" fill="#8b949e" font-family="-apple-system, BlinkMacSystemFont, Segoe UI, sans-serif" font-size="24">Small harness. Real runtime.</text>
+    <text x="0" y="168" fill="#8b949e" font-family="-apple-system, BlinkMacSystemFont, Segoe UI, sans-serif" font-size="24">Small harness. Deep extensions. Clean context.</text>
   </g>
 
   <g transform="translate(48 250)" font-family="ui-monospace, SFMono-Regular, Menlo, monospace" font-size="23" font-weight="600">

package/assets/readme-hero.svg

@@ -1,6 +1,6 @@
 <svg xmlns="http://www.w3.org/2000/svg" width="1200" height="500" viewBox="0 0 1200 500" role="img" aria-labelledby="title desc">
   <title id="title">OpenPI</title>
-  <desc id="desc">A Pi-native runtime layer for background terminals, isolated subagents, dynamic workflows, and clean context.</desc>
+  <desc id="desc">OpenPI — small harness, deep extensions, clean context.</desc>
 
   <defs>
     <linearGradient id="bg" x1="0" y1="0" x2="1" y2="1">
@@ -34,11 +34,11 @@
     <g>
       <rect width="112" height="34" rx="17" fill="#12233d" stroke="#2f81f7"/>
       <circle cx="18" cy="17" r="5" fill="#3fb950"/>
-      <text x="33" y="22" fill="#a5d6ff" font-family="ui-monospace, SFMono-Regular, Menlo, monospace" font-size="13" font-weight="700" letter-spacing="1">PI NATIVE</text>
+      <text x="33" y="22" fill="#a5d6ff" font-family="ui-monospace, SFMono-Regular, Menlo, monospace" font-size="14" font-weight="700" letter-spacing="0.7">PI NATIVE</text>
     </g>
 
     <text x="0" y="112" fill="#f0f6fc" font-family="-apple-system, BlinkMacSystemFont, Segoe UI, sans-serif" font-size="64" font-weight="760" letter-spacing="-2">OpenPI</text>
-    <text x="0" y="155" fill="#8b949e" font-family="-apple-system, BlinkMacSystemFont, Segoe UI, sans-serif" font-size="21">Keep the harness small. Give it a real runtime.</text>
+    <text x="0" y="155" fill="#8b949e" font-family="-apple-system, BlinkMacSystemFont, Segoe UI, sans-serif" font-size="20">Small harness. Deep extensions. Clean context.</text>
 
     <g transform="translate(0 198)" font-family="ui-monospace, SFMono-Regular, Menlo, monospace" font-size="16">
       <path d="M5 9h14M12 2l7 7-7 7" fill="none" stroke="#58a6ff" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"/>
@@ -62,14 +62,14 @@
     <circle cx="22" cy="22" r="5" fill="#f85149"/>
     <circle cx="40" cy="22" r="5" fill="#d29922"/>
     <circle cx="58" cy="22" r="5" fill="#3fb950"/>
-    <text x="229" y="27" text-anchor="middle" fill="#7d8590" font-family="ui-monospace, SFMono-Regular, Menlo, monospace" font-size="13">pi · main</text>
+    <text x="229" y="27" text-anchor="middle" fill="#7d8590" font-family="ui-monospace, SFMono-Regular, Menlo, monospace" font-size="15">pi · main</text>
 
-    <g font-family="ui-monospace, SFMono-Regular, Menlo, monospace" font-size="14">
+    <g font-family="ui-monospace, SFMono-Regular, Menlo, monospace" font-size="16">
       <text x="24" y="78" fill="#7d8590">$ pi</text>
       <rect x="24" y="92" width="410" height="44" rx="9" fill="#0d1117" stroke="#21262d"/>
       <circle cx="44" cy="114" r="5" fill="#58a6ff"/>
       <text x="59" y="119" fill="#f0f6fc">main agent</text>
-      <text x="320" y="119" fill="#7d8590">orchestrating</text>
+      <text x="320" y="119" fill="#7d8590" font-size="14">orchestrating</text>
 
       <path d="M47 136V155M47 155H379" fill="none" stroke="#30363d" stroke-width="2"/>
       <path d="M90 155V169M229 155V169M379 155V169" stroke="#30363d" stroke-width="2"/>
@@ -91,18 +91,18 @@
 
       <rect x="24" y="256" width="410" height="34" rx="8" fill="#0d1117" stroke="#21262d"/>
       <text x="38" y="278" fill="#7d8590">context</text>
-      <rect x="104" y="268" width="166" height="10" rx="5" fill="#21262d"/>
-      <rect x="104" y="268" width="61" height="10" rx="5" fill="#2f81f7"/>
+      <rect x="115" y="268" width="155" height="10" rx="5" fill="#21262d"/>
+      <rect x="115" y="268" width="57" height="10" rx="5" fill="#2f81f7"/>
       <text x="285" y="278" fill="#c9d1d9">37%</text>
       <text x="338" y="278" fill="#3fb950">settled</text>
 
       <path d="M24 308H434" stroke="#21262d"/>
       <rect x="24" y="318" width="410" height="18" rx="4" fill="#0b1720"/>
-      <text x="34" y="332" fill="#39c5cf" font-size="13">run tests and open the PR</text>
+      <text x="34" y="332" fill="#39c5cf" font-size="15">run tests and open the PR</text>
     </g>
   </g>
 
-  <g transform="translate(70 444)" font-family="ui-monospace, SFMono-Regular, Menlo, monospace" font-size="13" font-weight="600" letter-spacing="0.4">
+  <g transform="translate(70 444)" font-family="ui-monospace, SFMono-Regular, Menlo, monospace" font-size="14" font-weight="600" letter-spacing="0.25">
     <text fill="#58a6ff">BACKGROUND</text>
     <circle cx="110" cy="-4" r="2" fill="#30363d"/>
     <text x="126" fill="#3fb950">SUBAGENTS</text>

package/extensions/setup/index.ts

@@ -1,4 +1,7 @@
-import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import type {
+  ExtensionAPI,
+  ExtensionCommandContext,
+} from "@earendil-works/pi-coding-agent";
 import { StringEnum } from "@earendil-works/pi-ai";
 import { Type } from "typebox";
 import {
@@ -6,6 +9,13 @@ import {
   type SubagentRoleModel,
   type SubagentRoleModels,
 } from "../shared/subagent-roles.ts";
+import { sanitizeTerminalText } from "../shared/terminal-text.ts";
+import {
+  formatPiIntercomStatus,
+  inspectPiIntercom,
+  installPiIntercom,
+  type PiIntercomStatus,
+} from "./intercom.ts";
 import {
   applyFooterConfig,
   DETAIL_DISPLAYS,
@@ -101,7 +111,7 @@ export function buildInteractiveSetupPrompt(options: {
       ];
 
   return [
-    "Guide me through configuring the installed my-pi-setup package interactively.",
+    "Guide me through configuring the installed OpenPI package interactively.",
     "",
     "Current configuration:",
     options.currentConfiguration,
@@ -119,6 +129,7 @@ export function buildInteractiveSetupPrompt(options: {
     "- Post-edit command: one optional shell command (maximum 500 characters) run in the background after a turn with successful Write/Edit operations (e.g. `npm run format`). Off by default, interactive TUI sessions only, failures surface as a notification. This is a single command, not an event-hook system.",
     "- Result detail display: Subagent results, Bash operations, and Write/Edit operations can each default to full (always expanded) or compact (Claude Code-style folded preview with a hidden-line count). Compact output can still be temporarily expanded with the configured app.tools.expand key (Ctrl+O by default). Bash and Write/Edit default to compact. Recommend compact for users who do not usually inspect implementation details.",
     "- Agent role models: built-in explorer, implementer, reviewer, and advisor roles are shared by subagent_spawn and workflow agent_type, and inherit the parent model by default. Assign only an available registry model to an individual role when needed; clearing that role returns it to inheritance. Custom agent-type files still override a built-in role's complete definition.",
+    "- Intercom: optional cross-session messaging is installed only after a native setup confirmation. It stays parent-only; Direct/Workflow children and Replay cannot use it. The status above is informational for this model-guided step—do not install packages or edit its config yourself.",
     "",
     "Natural-language configuration examples the user might ask for:",
     '- "switch footer to powerline" → ui_footer_preset=powerline',
@@ -134,10 +145,96 @@ export function buildInteractiveSetupPrompt(options: {
   ];
 }
 
-export default function myPiSetup(pi: ExtensionAPI) {
+const safeSetupNotice = (value: unknown, maximum = 500) =>
+  sanitizeTerminalText(value instanceof Error ? value.message : String(value))
+    .replace(/\s+/gu, " ")
+    .trim()
+    .slice(0, maximum);
+
+export function shouldOfferPiIntercom(options: {
+  readonly request: string;
+  readonly status: PiIntercomStatus;
+  readonly mode: ExtensionCommandContext["mode"];
+  readonly idle: boolean;
+}) {
+  return (
+    !options.request &&
+    !options.status.active &&
+    !options.status.installed &&
+    !options.status.diagnostic &&
+    options.mode === "tui" &&
+    options.idle
+  );
+}
+
+async function maybeOfferPiIntercom(
+  ctx: ExtensionCommandContext,
+  status: PiIntercomStatus,
+  request: string,
+) {
+  if (
+    !shouldOfferPiIntercom({
+      request,
+      status,
+      mode: ctx.mode,
+      idle: ctx.isIdle(),
+    })
+  ) {
+    return status;
+  }
+
+  const accepted = await ctx.ui.confirm(
+    status.configured
+      ? "Repair optional pi-intercom integration?"
+      : "Install optional pi-intercom integration?",
+    [
+      "pi-intercom enables cross-session messaging through a local IPC broker.",
+      "Like every Pi package, it runs with full system access.",
+      "OpenPI will install npm:pi-intercom globally. A new private config gets safe defaults; an existing preference file is never rewritten and must already define both fields:",
+      "• confirmSend: true",
+      '• inboundTrigger: "replies"',
+      "It remains parent-only and activates after /reload.",
+    ].join("\n"),
+  );
+  if (!accepted) return status;
+
+  ctx.ui.setWorkingMessage("Installing optional pi-intercom integration...");
+  try {
+    await installPiIntercom({
+      cwd: ctx.cwd,
+      onProgress: (event) =>
+        ctx.ui.setWorkingMessage(
+          safeSetupNotice(
+            event.message ?? "Installing optional pi-intercom integration...",
+            200,
+          ),
+        ),
+    });
+    const installed = inspectPiIntercom({
+      cwd: ctx.cwd,
+      active: false,
+    });
+    const next = { ...installed, reloadRequired: true };
+    ctx.ui.notify(
+      "pi-intercom installed with existing preferences preserved or a new safe config created. Run /reload after setup to activate it.",
+      "info",
+    );
+    return next;
+  } catch (error) {
+    ctx.ui.notify(
+      `pi-intercom was not enabled: ${safeSetupNotice(error)}`,
+      "error",
+    );
+    return inspectPiIntercom({ cwd: ctx.cwd, active: false });
+  } finally {
+    ctx.ui.setWorkingMessage();
+  }
+}
+
+export default function openPiSetup(pi: ExtensionAPI) {
   pi.registerTool({
     name: "configure_my_pi_setup",
-    label: "Configure My Pi Setup",
+    label: "Configure OpenPI",
     description:
       "Apply a user-requested configuration change for this Pi setup. Configures next-action suggestions, workflow fan-out, UI/Footer (presets, style, multi-line layout), result detail display, optional Post-edit, and built-in Agent-role model assignments shared by subagent_spawn and workflow agent_type. Role models must be available in the Pi registry; null clears a role back to parent-model inheritance. Footer examples: powerline preset, powerline-mono, compact, or custom ui_footer_lines with flex. Preserve current values for settings the user did not ask to change. Changes apply immediately to an active TUI footer.",
     parameters: Type.Object({
@@ -361,48 +458,61 @@ export default function myPiSetup(pi: ExtensionAPI) {
       if (ctx.hasUI) ctx.ui.notify(`${text}${note}`, "info");
       return {
         content: [
-          { type: "text", text: `Updated my Pi setup. ${text}${note}` },
+          { type: "text", text: `Updated OpenPI setup. ${text}${note}` },
         ],
         details: config,
       };
     },
   });
 
-  pi.registerCommand("my-pi-setup", {
-    description:
-      "View or change this package's configuration in natural language",
-    handler: async (args, ctx) => {
-      const request = args.trim();
-      const currentConfiguration = formatSetupConfig(loadSetupConfig());
-      const savedConfigExists = hasSavedSetupConfig();
-      const currentModel = ctx.model
-        ? `${ctx.model.provider}/${ctx.model.id}`
-        : "unavailable";
-      const currentThinking = pi.getThinkingLevel();
+  const setupHandler = async (args: string, ctx: ExtensionCommandContext) => {
+    const request = args.trim();
+    let intercomStatus = inspectPiIntercom({
+      cwd: ctx.cwd,
+      active: pi.getAllTools().some(({ name }) => name === "intercom"),
+    });
+    intercomStatus = await maybeOfferPiIntercom(ctx, intercomStatus, request);
 
-      const prompt = request
-        ? [
-            "Configure the installed my-pi-setup package according to this request:",
-            request,
-            "",
-            "Current configuration:",
-            currentConfiguration,
-            "",
-            "Footer tips: presets are powerline, powerline-mono, compact; style is plain/powerline/powerline-mono; custom layouts use ui_footer_lines (2D enum arrays with optional flex). Do not use ui_footer_items together with ui_footer_lines. Built-in Agent role models (explorer, implementer, reviewer, advisor) are shared by subagent_spawn and workflow agent_type; they inherit the parent unless assigned an available registry model, and clearing an assignment restores inheritance. Custom agent-type files still override built-in role definitions. Nerd Font only affects powerline separator glyphs. Changes apply immediately in the active TUI session.",
-            "",
-            "Use configure_my_pi_setup to apply only the requested changes and preserve everything else. Interpret model names from the available Pi registry. Do not edit configuration files directly.",
-          ]
-        : buildInteractiveSetupPrompt({
-            currentConfiguration,
-            currentModel,
-            currentThinking,
-            savedConfigExists,
-          });
+    const currentConfiguration = formatSetupConfig(loadSetupConfig(), [
+      formatPiIntercomStatus(intercomStatus),
+    ]);
+    const savedConfigExists = hasSavedSetupConfig();
+    const currentModel = ctx.model
+      ? `${ctx.model.provider}/${ctx.model.id}`
+      : "unavailable";
+    const currentThinking = pi.getThinkingLevel();
 
-      pi.sendUserMessage(
-        prompt.join("\n"),
-        ctx.isIdle() ? undefined : { deliverAs: "followUp" },
-      );
-    },
+    const prompt = request
+      ? [
+          "Configure the installed OpenPI package according to this request:",
+          request,
+          "",
+          "Current configuration:",
+          currentConfiguration,
+          "",
+          "Footer tips: presets are powerline, powerline-mono, compact; style is plain/powerline/powerline-mono; custom layouts use ui_footer_lines (2D enum arrays with optional flex). Do not use ui_footer_items together with ui_footer_lines. Built-in Agent role models (explorer, implementer, reviewer, advisor) are shared by subagent_spawn and workflow agent_type; they inherit the parent unless assigned an available registry model, and clearing an assignment restores inheritance. Custom agent-type files still override built-in role definitions. Nerd Font only affects powerline separator glyphs. Changes apply immediately in the active TUI session. Intercom installation is handled only by the native setup confirmation; do not install packages or edit its config yourself.",
+          "",
+          "Use configure_my_pi_setup to apply only the requested OpenPI-owned changes and preserve everything else. Interpret model names from the available Pi registry. Do not edit configuration files directly.",
+        ]
+      : buildInteractiveSetupPrompt({
+          currentConfiguration,
+          currentModel,
+          currentThinking,
+          savedConfigExists,
+        });
+
+    pi.sendUserMessage(
+      prompt.join("\n"),
+      ctx.isIdle() ? undefined : { deliverAs: "followUp" },
+    );
+  };
+
+  pi.registerCommand("openpi-setup", {
+    description: "View or change OpenPI configuration in natural language",
+    handler: setupHandler,
+  });
+  pi.registerCommand("my-pi-setup", {
+    description: "Legacy alias — use /openpi-setup",
+    handler: setupHandler,
   });
 }

package/extensions/setup/intercom-fs-helper.cjs

@@ -0,0 +1,130 @@
+const { randomUUID } = require("node:crypto");
+const {
+  constants,
+  closeSync,
+  fstatSync,
+  openSync,
+  readFileSync,
+  renameSync,
+  statSync,
+  unlinkSync,
+  writeFileSync,
+} = require("node:fs");
+
+const [operation, expectedDev, expectedIno, name, encoded] =
+  process.argv.slice(2);
+const allowedNames = new Set([
+  "config.json",
+  "config.json.openpi-install.lock",
+]);
+const fail = (code, message) => {
+  process.stderr.write(`OPENPI:${code}:${message}\n`);
+  process.exit(1);
+};
+const identityMatches = () => {
+  const current = statSync(".", { bigint: true });
+  return (
+    current.isDirectory() &&
+    String(current.dev) === expectedDev &&
+    String(current.ino) === expectedIno
+  );
+};
+
+if (!allowedNames.has(name)) fail("INPUT", "unsupported file name");
+if (!identityMatches()) fail("IDENTITY", "directory identity mismatch");
+
+const payload = Buffer.from(encoded ?? "", "base64");
+if (payload.length > 8_192) fail("INPUT", "payload too large");
+
+if (operation === "create") {
+  let fd;
+  try {
+    fd = openSync(
+      name,
+      constants.O_WRONLY |
+        constants.O_CREAT |
+        constants.O_EXCL |
+        (constants.O_NOFOLLOW ?? 0),
+      0o600,
+    );
+  } catch (error) {
+    if (error && error.code === "EEXIST") fail("EEXIST", "file exists");
+    fail("IO", error instanceof Error ? error.message : String(error));
+  }
+  try {
+    const metadata = fstatSync(fd);
+    if (!metadata.isFile()) fail("TYPE", "created path is not a regular file");
+    writeFileSync(fd, payload);
+  } finally {
+    closeSync(fd);
+  }
+  if (!identityMatches()) fail("IDENTITY", "directory identity changed");
+  process.exit(0);
+}
+
+if (operation === "remove-owned") {
+  // Atomically move the current lock to a unique claim before inspecting it.
+  // A replacement lock can then appear at `name`, but cleanup never unlinks
+  // that pathname: it removes only inode-pinned, randomly named claims.
+  const claim = `.${name}.release.${process.pid}.${randomUUID()}`;
+  const markerClaim = `${claim}.marker`;
+  const releaseToken = Buffer.from(`release:${process.pid}:${randomUUID()}\n`);
+  try {
+    renameSync(name, claim);
+  } catch (error) {
+    fail("IO", error instanceof Error ? error.message : String(error));
+  }
+
+  let markerCreated = false;
+  let markerFd;
+  try {
+    markerFd = openSync(
+      name,
+      constants.O_WRONLY |
+        constants.O_CREAT |
+        constants.O_EXCL |
+        (constants.O_NOFOLLOW ?? 0),
+      0o600,
+    );
+    writeFileSync(markerFd, releaseToken);
+    markerCreated = true;
+  } catch (error) {
+    if (!error || error.code !== "EEXIST") {
+      fail("IO", error instanceof Error ? error.message : String(error));
+    }
+  } finally {
+    if (markerFd !== undefined) closeSync(markerFd);
+  }
+
+  let claimFd;
+  try {
+    claimFd = openSync(claim, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+    if (!fstatSync(claimFd).isFile())
+      fail("TYPE", "claim is not a regular file");
+    if (!readFileSync(claimFd).equals(payload))
+      fail("OWNER", "owner token mismatch");
+  } finally {
+    if (claimFd !== undefined) closeSync(claimFd);
+  }
+  unlinkSync(claim);
+
+  if (markerCreated) {
+    renameSync(name, markerClaim);
+    let releaseFd;
+    try {
+      releaseFd = openSync(
+        markerClaim,
+        constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0),
+      );
+      if (!readFileSync(releaseFd).equals(releaseToken))
+        fail("OWNER", "release marker ownership mismatch");
+    } finally {
+      if (releaseFd !== undefined) closeSync(releaseFd);
+    }
+    unlinkSync(markerClaim);
+  }
+  if (!identityMatches()) fail("IDENTITY", "directory identity changed");
+  process.exit(0);
+}
+
+fail("INPUT", "unsupported operation");