apex-code 0.0.1-alpha.9 → 0.0.4

package/examples/extensions/git-checkpoint.ts

@@ -1,53 +1,41 @@
 /**
  * Git Checkpoint Extension
  *
- * Creates git stash checkpoints at each turn so /fork can restore code state.
- * When forking, offers to restore code to that point in history.
+ * Offers to restore code state when /fork rewinds the conversation to an earlier entry.
+ *
+ * Capture is not here. Setting `"checkpoints": { "enabled": true }` makes the harness
+ * snapshot the worktree at every turn, keyed to the session entry, into
+ * `refs/apex-code/checkpoints/<sessionId>/<entryId>`. This extension only asks the
+ * question, because whether to prompt is a UI decision and the harness stays headless.
+ *
+ * The engine is resolved from the workspace rather than handed over, because the
+ * registry is git itself. That is also why a checkpoint survives a restart.
  */
 
-import type { ExtensionAPI } from "apex-code";
+import { createGitCheckpoints, type ExtensionAPI, type GitCheckpoints } from "apex-code";
 
 export default function (pi: ExtensionAPI) {
-	const checkpoints = new Map<string, string>();
-	let currentEntryId: string | undefined;
-
-	// Track the current entry ID when user messages are saved
-	pi.on("tool_result", async (_event, ctx) => {
-		const leaf = ctx.sessionManager.getLeafEntry();
-		if (leaf) currentEntryId = leaf.id;
-	});
-
-	pi.on("turn_start", async () => {
-		// Create a git stash entry before LLM makes changes
-		const { stdout } = await pi.exec("git", ["stash", "create"]);
-		const ref = stdout.trim();
-		if (ref && currentEntryId) {
-			checkpoints.set(currentEntryId, ref);
-		}
-	});
+	let engine: Promise<GitCheckpoints | undefined> | undefined;
 
 	pi.on("session_before_fork", async (event, ctx) => {
-		const ref = checkpoints.get(event.entryId);
-		if (!ref) return;
+		if (!ctx.hasUI) return;
 
-		if (!ctx.hasUI) {
-			// In non-interactive mode, don't restore automatically
-			return;
-		}
+		engine ??= createGitCheckpoints(ctx.cwd, ctx.sessionManager.getSessionId());
+		const checkpoint = await (await engine)?.lookup(event.entryId);
+		if (!checkpoint) return;
 
 		const choice = await ctx.ui.select("Restore code state?", [
 			"Yes, restore code to that point",
 			"No, keep current code",
 		]);
-
-		if (choice?.startsWith("Yes")) {
-			await pi.exec("git", ["stash", "apply", ref]);
-			ctx.ui.notify("Code restored to checkpoint", "info");
-		}
-	});
-
-	pi.on("agent_settled", async () => {
-		// Clear checkpoints after the full agent run completes
-		checkpoints.clear();
+		if (!choice?.startsWith("Yes")) return;
+
+		const previous = await (await engine)?.restore(checkpoint);
+		ctx.ui.notify(
+			previous
+				? `Code restored. Previous state kept at ${previous.commit.slice(0, 8)}.`
+				: "Checkpoint restore failed; code is unchanged.",
+			previous ? "info" : "error",
+		);
 	});
 }

package/examples/extensions/gondolin/package-lock.json

@@ -1,12 +1,12 @@
 {
 	"name": "pi-extension-gondolin",
-	"version": "0.84.3",
+	"version": "0.84.4",
 	"lockfileVersion": 3,
 	"requires": true,
 	"packages": {
 		"": {
 			"name": "pi-extension-gondolin",
-			"version": "0.84.3",
+			"version": "0.84.4",
 			"dependencies": {
 				"@earendil-works/gondolin": "0.12.0"
 			}

package/examples/extensions/gondolin/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "pi-extension-gondolin",
 	"private": true,
-	"version": "0.84.3",
+	"version": "0.84.4",
 	"type": "module",
 	"scripts": {
 		"clean": "echo 'nothing to clean'",

package/examples/extensions/minimal-mode.ts

@@ -128,8 +128,8 @@ export default function (pi: ExtensionAPI) {
 		},
 
 		renderCall(args, theme, _context) {
-			const command = args.command || "...";
-			const timeout = args.timeout as number | undefined;
+			const command = "command" in args ? args.command : "…";
+			const timeout = "command" in args ? (args.timeout as number | undefined) : undefined;
 			const timeoutSuffix = timeout ? theme.fg("muted", ` (timeout ${timeout}s)`) : "";
 
 			return new Text(theme.fg("toolTitle", theme.bold(`$ ${command}`)) + timeoutSuffix, 0, 0);

package/examples/extensions/permission-gate.ts

@@ -13,7 +13,7 @@ export default function (pi: ExtensionAPI) {
 	pi.on("tool_call", async (event, ctx) => {
 		if (event.toolName !== "bash") return undefined;
 
-		const command = event.input.command as string;
+		const command = (event.input as Record<string, unknown>).command as string;
 		const isDangerous = dangerousPatterns.some((p) => p.test(command));
 
 		if (isDangerous) {

package/examples/extensions/plan-mode/index.ts

@@ -164,7 +164,7 @@ export default function planModeExtension(pi: ExtensionAPI): void {
 	pi.on("tool_call", async (event) => {
 		if (!planModeEnabled || event.toolName !== "bash") return;
 
-		const command = event.input.command as string;
+		const command = (event.input as Record<string, unknown>).command as string;
 		if (!isSafeCommand(command)) {
 			return {
 				block: true,

package/examples/extensions/rpc-demo.ts

@@ -46,7 +46,7 @@ export default function (pi: ExtensionAPI) {
 	pi.on("tool_call", async (event, ctx) => {
 		if (event.toolName !== "bash") return undefined;
 
-		const command = event.input.command as string;
+		const command = (event.input as Record<string, unknown>).command as string;
 		const isDangerous = /\brm\s+(-rf?|--recursive)/i.test(command) || /\bsudo\b/i.test(command);
 
 		if (isDangerous) {

package/examples/extensions/sandbox/package-lock.json

@@ -1,12 +1,12 @@
 {
 	"name": "pi-extension-sandbox",
-	"version": "1.14.3",
+	"version": "1.14.4",
 	"lockfileVersion": 3,
 	"requires": true,
 	"packages": {
 		"": {
 			"name": "pi-extension-sandbox",
-			"version": "1.14.3",
+			"version": "1.14.4",
 			"dependencies": {
 				"@anthropic-ai/sandbox-runtime": "^0.0.26"
 			}

package/examples/extensions/sandbox/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "pi-extension-sandbox",
 	"private": true,
-	"version": "1.14.3",
+	"version": "1.14.4",
 	"type": "module",
 	"scripts": {
 		"clean": "echo 'nothing to clean'",

package/examples/extensions/with-deps/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "pi-extension-with-deps",
-  "version": "0.84.3",
+  "version": "0.84.4",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pi-extension-with-deps",
-      "version": "0.84.3",
+      "version": "0.84.4",
       "dependencies": {
         "ms": "^2.1.3"
       },

package/examples/extensions/with-deps/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pi-extension-with-deps",
   "private": true,
-  "version": "0.84.3",
+  "version": "0.84.4",
   "type": "module",
   "scripts": {
     "clean": "echo 'nothing to clean'",

package/npm-shrinkwrap.json

@@ -1,33 +1,35 @@
 {
 	"name": "apex-code",
-	"version": "0.0.1-alpha.9",
+	"version": "0.0.4",
 	"lockfileVersion": 3,
 	"requires": true,
 	"packages": {
 		"": {
 			"name": "apex-code",
-			"version": "0.0.1-alpha.9",
+			"version": "0.0.4",
 			"license": "MIT",
 			"dependencies": {
-				"apex-code-agent-core": "0.0.1-alpha.9",
-				"@earendil-works/pi-ai": "^0.84.3",
-				"@earendil-works/pi-client": "^0.84.3",
-				"@earendil-works/pi-protocol": "^0.84.3",
-				"@earendil-works/pi-tui": "^0.84.3",
+				"@earendil-works/pi-ai": "^0.84.4",
+				"@earendil-works/pi-client": "^0.84.4",
+				"@earendil-works/pi-protocol": "^0.84.4",
+				"@earendil-works/pi-tui": "^0.84.4",
+				"@modelcontextprotocol/client": "2.0.0",
+				"@modelcontextprotocol/core": "2.0.0",
 				"@silvia-odwyer/photon-node": "0.3.4",
+				"apex-code-agent-core": "0.0.4",
 				"chalk": "5.6.2",
 				"cross-spawn": "7.0.6",
-				"diff": "8.0.4",
+				"diff": "9.0.0",
 				"grok-mermaid": "0.2.2",
 				"highlight.js": "10.7.3",
-				"hosted-git-info": "9.0.3",
+				"hosted-git-info": "10.1.1",
 				"ignore": "7.0.5",
 				"jiti": "2.7.0",
-				"minimatch": "10.2.5",
+				"minimatch": "10.2.6",
 				"proper-lockfile": "4.1.2",
-				"semver": "7.8.0",
+				"semver": "7.8.5",
 				"typebox": "1.3.7",
-				"undici": "8.9.0",
+				"undici": "8.10.0",
 				"yaml": "2.9.0"
 			},
 			"optionalDependencies": {
@@ -502,13 +504,13 @@
 			}
 		},
 		"node_modules/@earendil-works/pi-ai": {
-			"version": "0.84.3",
-			"resolved": "https://registry.npmjs.org/@earendil-works/pi-ai/-/pi-ai-0.84.3.tgz",
+			"version": "0.84.4",
+			"resolved": "https://registry.npmjs.org/@earendil-works/pi-ai/-/pi-ai-0.84.4.tgz",
 			"license": "MIT",
 			"dependencies": {
 				"@anthropic-ai/sdk": "0.91.1",
 				"@aws-sdk/client-bedrock-runtime": "3.1048.0",
-				"@earendil-works/pi-telemetry": "^0.84.3",
+				"@earendil-works/pi-telemetry": "^0.84.4",
 				"@google/genai": "1.52.0",
 				"@smithy/node-http-handler": "4.7.3",
 				"http-proxy-agent": "7.0.2",
@@ -525,19 +527,19 @@
 			}
 		},
 		"node_modules/@earendil-works/pi-client": {
-			"version": "0.84.3",
-			"resolved": "https://registry.npmjs.org/@earendil-works/pi-client/-/pi-client-0.84.3.tgz",
+			"version": "0.84.4",
+			"resolved": "https://registry.npmjs.org/@earendil-works/pi-client/-/pi-client-0.84.4.tgz",
 			"license": "MIT",
 			"dependencies": {
-				"@earendil-works/pi-protocol": "^0.84.3"
+				"@earendil-works/pi-protocol": "^0.84.4"
 			},
 			"engines": {
 				"node": ">=22.19.0"
 			}
 		},
 		"node_modules/@earendil-works/pi-protocol": {
-			"version": "0.84.3",
-			"resolved": "https://registry.npmjs.org/@earendil-works/pi-protocol/-/pi-protocol-0.84.3.tgz",
+			"version": "0.84.4",
+			"resolved": "https://registry.npmjs.org/@earendil-works/pi-protocol/-/pi-protocol-0.84.4.tgz",
 			"license": "MIT",
 			"dependencies": {
 				"typebox": "1.3.7"
@@ -547,16 +549,16 @@
 			}
 		},
 		"node_modules/@earendil-works/pi-telemetry": {
-			"version": "0.84.3",
-			"resolved": "https://registry.npmjs.org/@earendil-works/pi-telemetry/-/pi-telemetry-0.84.3.tgz",
+			"version": "0.84.4",
+			"resolved": "https://registry.npmjs.org/@earendil-works/pi-telemetry/-/pi-telemetry-0.84.4.tgz",
 			"license": "MIT",
 			"engines": {
 				"node": ">=22.19.0"
 			}
 		},
 		"node_modules/@earendil-works/pi-tui": {
-			"version": "0.84.3",
-			"resolved": "https://registry.npmjs.org/@earendil-works/pi-tui/-/pi-tui-0.84.3.tgz",
+			"version": "0.84.4",
+			"resolved": "https://registry.npmjs.org/@earendil-works/pi-tui/-/pi-tui-0.84.4.tgz",
 			"license": "MIT",
 			"dependencies": {
 				"get-east-asian-width": "1.6.0",
@@ -784,6 +786,113 @@
 			],
 			"optional": true
 		},
+		"node_modules/@modelcontextprotocol/client": {
+			"version": "2.0.0",
+			"resolved": "https://registry.npmjs.org/@modelcontextprotocol/client/-/client-2.0.0.tgz",
+			"integrity": "sha512-8f1OghQ2rjzIOfqgUCP+8GiUWqRs89njoWLNqAe8kWmDePv3s1fZXseej+QXemssEuuOvLLmLO/kqM3IQHtISw==",
+			"license": "MIT",
+			"dependencies": {
+				"@modelcontextprotocol/core": "2.0.0",
+				"cross-spawn": "^7.0.5",
+				"eventsource": "^3.0.2",
+				"eventsource-parser": "^3.0.0",
+				"jose": "^6.1.3",
+				"pkce-challenge": "^5.0.0",
+				"zod": "^4.2.0"
+			},
+			"engines": {
+				"node": ">=20"
+			}
+		},
+		"node_modules/@modelcontextprotocol/client/node_modules/cross-spawn": {
+			"version": "7.0.6",
+			"resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
+			"integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
+			"license": "MIT",
+			"dependencies": {
+				"path-key": "^3.1.0",
+				"shebang-command": "^2.0.0",
+				"which": "^2.0.1"
+			},
+			"engines": {
+				"node": ">= 8"
+			}
+		},
+		"node_modules/@modelcontextprotocol/client/node_modules/path-key": {
+			"version": "3.1.1",
+			"resolved": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz",
+			"integrity": "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==",
+			"license": "MIT",
+			"engines": {
+				"node": ">=8"
+			}
+		},
+		"node_modules/@modelcontextprotocol/client/node_modules/shebang-command": {
+			"version": "2.0.0",
+			"resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz",
+			"integrity": "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==",
+			"license": "MIT",
+			"dependencies": {
+				"shebang-regex": "^3.0.0"
+			},
+			"engines": {
+				"node": ">=8"
+			}
+		},
+		"node_modules/@modelcontextprotocol/client/node_modules/shebang-regex": {
+			"version": "3.0.0",
+			"resolved": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz",
+			"integrity": "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==",
+			"license": "MIT",
+			"engines": {
+				"node": ">=8"
+			}
+		},
+		"node_modules/@modelcontextprotocol/client/node_modules/which": {
+			"version": "2.0.2",
+			"resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz",
+			"integrity": "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==",
+			"license": "ISC",
+			"dependencies": {
+				"isexe": "^2.0.0"
+			},
+			"bin": {
+				"node-which": "bin/node-which"
+			},
+			"engines": {
+				"node": ">= 8"
+			}
+		},
+		"node_modules/@modelcontextprotocol/client/node_modules/zod": {
+			"version": "4.4.3",
+			"resolved": "https://registry.npmjs.org/zod/-/zod-4.4.3.tgz",
+			"integrity": "sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==",
+			"license": "MIT",
+			"funding": {
+				"url": "https://github.com/sponsors/colinhacks"
+			}
+		},
+		"node_modules/@modelcontextprotocol/core": {
+			"version": "2.0.0",
+			"resolved": "https://registry.npmjs.org/@modelcontextprotocol/core/-/core-2.0.0.tgz",
+			"integrity": "sha512-pJCEwGG7Lfr/+PQp9ZTwKXNeO5wzbfKL7H3MYpCorM4oFBoQrdjnBgEoqG+RjhsvS1FKrDbKux+M1HhlnGWqcA==",
+			"license": "MIT",
+			"dependencies": {
+				"zod": "^4.2.0"
+			},
+			"engines": {
+				"node": ">=20"
+			}
+		},
+		"node_modules/@modelcontextprotocol/core/node_modules/zod": {
+			"version": "4.4.3",
+			"resolved": "https://registry.npmjs.org/zod/-/zod-4.4.3.tgz",
+			"integrity": "sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==",
+			"license": "MIT",
+			"funding": {
+				"url": "https://github.com/sponsors/colinhacks"
+			}
+		},
 		"node_modules/@protobufjs/aspromise": {
 			"version": "1.1.2",
 			"resolved": "https://registry.npmjs.org/@protobufjs/aspromise/-/aspromise-1.1.2.tgz",
@@ -991,13 +1100,13 @@
 			}
 		},
 		"node_modules/apex-code-agent-core": {
-			"version": "0.0.1-alpha.9",
-			"resolved": "https://registry.npmjs.org/apex-code-agent-core/-/apex-code-agent-core-0.0.1-alpha.9.tgz",
+			"version": "0.0.4",
+			"resolved": "https://registry.npmjs.org/apex-code-agent-core/-/apex-code-agent-core-0.0.4.tgz",
 			"license": "MIT",
 			"dependencies": {
-				"@earendil-works/pi-ai": "^0.84.3",
-				"@earendil-works/pi-telemetry": "^0.84.3",
-				"diff": "8.0.4",
+				"@earendil-works/pi-ai": "^0.84.4",
+				"@earendil-works/pi-telemetry": "^0.84.4",
+				"diff": "9.0.0",
 				"ignore": "7.0.5",
 				"typebox": "1.3.7",
 				"yaml": "2.9.0"
@@ -1119,9 +1228,9 @@
 			}
 		},
 		"node_modules/diff": {
-			"version": "8.0.4",
-			"resolved": "https://registry.npmjs.org/diff/-/diff-8.0.4.tgz",
-			"integrity": "sha512-DPi0FmjiSU5EvQV0++GFDOJ9ASQUVFh5kD+OzOnYdi7n3Wpm9hWWGfB/O2blfHcMVTL5WkQXSnRiK9makhrcnw==",
+			"version": "9.0.0",
+			"resolved": "https://registry.npmjs.org/diff/-/diff-9.0.0.tgz",
+			"integrity": "sha512-svtcdpS8CgJyqAjEQIXdb3OjhFVVYjzGAPO8WGCmRbrml64SPw/jJD4GoE98aR7r25A0XcgrK3F02yw9R/vhQw==",
 			"license": "BSD-3-Clause",
 			"engines": {
 				"node": ">=0.3.1"
@@ -1136,6 +1245,27 @@
 				"safe-buffer": "^5.0.1"
 			}
 		},
+		"node_modules/eventsource": {
+			"version": "3.0.7",
+			"resolved": "https://registry.npmjs.org/eventsource/-/eventsource-3.0.7.tgz",
+			"integrity": "sha512-CRT1WTyuQoD771GW56XEZFQ/ZoSfWid1alKGDYMmkt2yl8UXrVR4pspqWNEcqKvVIzg6PAltWjxcSSPrboA4iA==",
+			"license": "MIT",
+			"dependencies": {
+				"eventsource-parser": "^3.0.1"
+			},
+			"engines": {
+				"node": ">=18.0.0"
+			}
+		},
+		"node_modules/eventsource-parser": {
+			"version": "3.1.1",
+			"resolved": "https://registry.npmjs.org/eventsource-parser/-/eventsource-parser-3.1.1.tgz",
+			"integrity": "sha512-EKN1vKAMcZ8MlYMpaNuxN6R9yakzH6uajHcHVTqWJzvu5pWw9DyhbP35HH8MVBQ+dZjAfDxk+A8NiR9KWaXiyQ==",
+			"license": "MIT",
+			"engines": {
+				"node": ">=18.0.0"
+			}
+		},
 		"node_modules/extend": {
 			"version": "3.0.2",
 			"resolved": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz",
@@ -1268,15 +1398,15 @@
 			}
 		},
 		"node_modules/hosted-git-info": {
-			"version": "9.0.3",
-			"resolved": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-9.0.3.tgz",
-			"integrity": "sha512-Hc+ghLoSt6QaYZUv0WBiIvmMDZuZZ7oaDvdH8MbfOO4lOsxdXLEvuC6ePoGs9H1X9oCLyq6+NVN0MKqD+ydxyg==",
+			"version": "10.1.1",
+			"resolved": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-10.1.1.tgz",
+			"integrity": "sha512-DeOnSPAvOndYKfw075gt8yZzQ7S2hNztw34zBTfhIzLhmBTswIBg5/y+pqu/VD5cYWm5goAFTusDmUEmKZ0PEQ==",
 			"license": "ISC",
 			"dependencies": {
 				"lru-cache": "^11.1.0"
 			},
 			"engines": {
-				"node": "^20.17.0 || >=22.9.0"
+				"node": "^22.22.2 || ^24.15.0 || >=26.0.0"
 			}
 		},
 		"node_modules/http-proxy-agent": {
@@ -1329,6 +1459,15 @@
 				"jiti": "lib/jiti-cli.mjs"
 			}
 		},
+		"node_modules/jose": {
+			"version": "6.2.10",
+			"resolved": "https://registry.npmjs.org/jose/-/jose-6.2.10.tgz",
+			"integrity": "sha512-iiW7J9qRFlGxvCOIBDBDxFePQSn7ZMAnrYGhrrOo6siO/MIqwfyilLR27pkfDgUk+raLuzADS8A3S/KLBisc0g==",
+			"license": "MIT",
+			"funding": {
+				"url": "https://github.com/sponsors/panva"
+			}
+		},
 		"node_modules/json-bigint": {
 			"version": "1.0.0",
 			"resolved": "https://registry.npmjs.org/json-bigint/-/json-bigint-1.0.0.tgz",
@@ -1400,12 +1539,12 @@
 			}
 		},
 		"node_modules/minimatch": {
-			"version": "10.2.5",
-			"resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.5.tgz",
-			"integrity": "sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg==",
+			"version": "10.2.6",
+			"resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.6.tgz",
+			"integrity": "sha512-vpLQEs+VLCr1nU0BXS07maYoFwlDAH0gngQuuttxIwutDFEMHq2blX+8vpgxDdK3J1PwjCJiep77OitTZ4Ll1A==",
 			"license": "BlueOak-1.0.0",
 			"dependencies": {
-				"brace-expansion": "^5.0.5"
+				"brace-expansion": "^5.0.8"
 			},
 			"engines": {
 				"node": "18 || 20 || >=22"
@@ -1511,6 +1650,15 @@
 				"node": ">=8"
 			}
 		},
+		"node_modules/pkce-challenge": {
+			"version": "5.0.1",
+			"resolved": "https://registry.npmjs.org/pkce-challenge/-/pkce-challenge-5.0.1.tgz",
+			"integrity": "sha512-wQ0b/W4Fr01qtpHlqSqspcj3EhBvimsdh0KlHhH8HRZnMsEa0ea2fTULOXOS9ccQr3om+GcGRk4e+isrZWV8qQ==",
+			"license": "MIT",
+			"engines": {
+				"node": ">=16.20.0"
+			}
+		},
 		"node_modules/proper-lockfile": {
 			"version": "4.1.2",
 			"resolved": "https://registry.npmjs.org/proper-lockfile/-/proper-lockfile-4.1.2.tgz",
@@ -1575,9 +1723,9 @@
 			]
 		},
 		"node_modules/semver": {
-			"version": "7.8.0",
-			"resolved": "https://registry.npmjs.org/semver/-/semver-7.8.0.tgz",
-			"integrity": "sha512-AcM7dV/5ul4EekoQ29Agm5vri8JNqRyj39o0qpX6vDF2GZrtutZl5RwgD1XnZjiTAfncsJhMI48QQH3sN87YNA==",
+			"version": "7.8.5",
+			"resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
+			"integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
 			"license": "ISC",
 			"bin": {
 				"semver": "bin/semver.js"
@@ -1628,9 +1776,9 @@
 			"license": "MIT"
 		},
 		"node_modules/undici": {
-			"version": "8.9.0",
-			"resolved": "https://registry.npmjs.org/undici/-/undici-8.9.0.tgz",
-			"integrity": "sha512-aWZpUj7XoGonMClx4gdDRfgBjqeA+F473aDmROQQbM9n6PRfK/u1q/a0X4wMTgcHfT8H6fpbt98PFuDUwFg2YA==",
+			"version": "8.10.0",
+			"resolved": "https://registry.npmjs.org/undici/-/undici-8.10.0.tgz",
+			"integrity": "sha512-HvltHd7avK13QIw/oLe4qoOLyoVSoafqJ2jYOrtMRBkbYT31eiBQ8O0ehRKZiEZCMEyLFQNIADpgCWC5fALvYQ==",
 			"license": "MIT",
 			"engines": {
 				"node": ">=22.19.0"

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "apex-code",
-	"version": "0.0.1-alpha.9",
+	"version": "0.0.4",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"type": "module",
 	"piConfig": {
@@ -43,25 +43,27 @@
 		"prepublishOnly": "npm run clean && npm run build && npm run shrinkwrap"
 	},
 	"dependencies": {
-		"apex-code-agent-core": "0.0.1-alpha.9",
-		"@earendil-works/pi-ai": "^0.84.3",
-		"@earendil-works/pi-client": "^0.84.3",
-		"@earendil-works/pi-protocol": "^0.84.3",
-		"@earendil-works/pi-tui": "^0.84.3",
+		"@earendil-works/pi-ai": "^0.84.4",
+		"@earendil-works/pi-client": "^0.84.4",
+		"@earendil-works/pi-protocol": "^0.84.4",
+		"@earendil-works/pi-tui": "^0.84.4",
+		"@modelcontextprotocol/client": "2.0.0",
+		"@modelcontextprotocol/core": "2.0.0",
 		"@silvia-odwyer/photon-node": "0.3.4",
+		"apex-code-agent-core": "0.0.4",
 		"chalk": "5.6.2",
 		"cross-spawn": "7.0.6",
-		"diff": "8.0.4",
+		"diff": "9.0.0",
 		"grok-mermaid": "0.2.2",
 		"highlight.js": "10.7.3",
-		"hosted-git-info": "9.0.3",
+		"hosted-git-info": "10.1.1",
 		"ignore": "7.0.5",
 		"jiti": "2.7.0",
-		"minimatch": "10.2.5",
+		"minimatch": "10.2.6",
 		"proper-lockfile": "4.1.2",
-		"semver": "7.8.0",
+		"semver": "7.8.5",
 		"typebox": "1.3.7",
-		"undici": "8.9.0",
+		"undici": "8.10.0",
 		"yaml": "2.9.0"
 	},
 	"overrides": {
@@ -79,7 +81,7 @@
 		"@types/hosted-git-info": "3.0.5",
 		"@types/node": "22.19.19",
 		"@types/proper-lockfile": "4.1.4",
-		"@types/semver": "7.7.1",
+		"@types/semver": "7.8.0",
 		"glob": "13.0.6",
 		"shx": "0.4.0",
 		"typescript": "5.9.3",