killeros 2.0.17 → 2.0.19

package/CHANGELOG.md

@@ -4,6 +4,56 @@ All notable changes to KillerOS are documented here.
 
 ## [Unreleased]
 
+## [2.0.19] - 2026-08-24
+
+### Changed
+
+- Hardened JSON and caught-error boundaries, made goal and `/init` target states constructive, added exhaustive outcome handling, and replaced unsafe test doubles with checked adapters.
+- Deprecated positional `executeHook` arguments in favor of object options; the compatibility adapter will be removed in the next major release.
+
+### Fixed
+
+- Paused active goals during automatic compaction and resumed the exact paused revision once after compaction and turn settlement succeed.
+- Restored active goals saved by v2.0.18 shutdown checkpoints that omitted their stopped clock timestamp.
+
+## [2.0.18] - 2026-08-24
+
+### Added
+
+- Added a real Pi SDK lifecycle test for package activation, shutdown-before-reload, fresh registration, and stale-context rejection.
+
+### Changed
+
+- Raised the locked Pi development packages and minimum supported Pi peer version to 0.84.3.
+- Made Pi lifecycle compatibility coverage install the generated npm tarball offline before activation and reload.
+
+### Fixed
+
+- Preserved provider-managed OAuth routing during `/handoff`, fixing GitHub Copilot `421 Misdirected Request` failures.
+- Repaired incompatible process-global `/codex-fast` state during extension updates while preserving a valid saved enabled flag.
+- Stopped lifecycle-hook failures from echoing configured shell commands, which could expose inline credentials in Pi diagnostics.
+- Kept lifecycle-hook configuration paths terminal-safe and single-line in warnings.
+- Limited trusted lifecycle-hook configuration to a 64 KiB regular, non-linked file in the project's real `.pi` directory and verified the opened file identity before parsing it.
+- Sanitized dynamic slash-command descriptions and omitted unsafe command names from KillerOS autocomplete.
+- Rejected explicit file goals when their starting filesystem baseline cannot be inspected instead of treating every error as a missing file.
+- Kept custom model and provider labels single-line and terminal-safe in the shell header and footer.
+- Sanitized model-reported `/init` policy conflicts before returning, storing, or notifying with them.
+- Kept session-storage failure details terminal-safe when an explicit goal pause falls back to in-memory state.
+- Stripped terminal commands and unsafe controls from saved goal objectives before clear confirmations.
+- Kept rejected `/variants` arguments terminal-safe and single-line in error notifications.
+- Kept provider and model identifiers terminal-safe and single-line throughout `/variants`.
+- Flushed partial UTF-8 lifecycle-hook output on process close instead of silently dropping final diagnostic bytes.
+- Contained synchronous lifecycle-hook process-start failures inside normal hook failure handling.
+- Kept header and footer paths single-line and terminal-safe for unusual cwd or home-directory names.
+- Sanitized manual-compaction abort diagnostics before saving recovery-eligible goal state.
+- Stripped terminal commands and unsafe controls from saved goal text before showing status panels or notifications.
+- Sanitized provider and storage diagnostics before persisting or announcing an automatically paused goal.
+- Routed handoff generation and session-replacement failures through the shared terminal-safe error reporter.
+- Stripped terminal commands and unsafe control bytes from caught errors before showing KillerOS failure notifications.
+- Stripped terminal commands and control bytes from cwd and session names before emitting the KillerOS terminal title.
+- Removed filesystem source paths from personal-instruction prompt wrappers so unusual project paths cannot alter prompt structure.
+- Stripped terminal commands and unsafe control bytes from lifecycle hook failure notifications and tool block reasons.
+
 ## [2.0.17] - 2026-08-23
 
 ### Added

package/README.md

@@ -19,7 +19,7 @@ A TypeScript extension for the [Pi coding agent](https://github.com/earendil-wor
 ## Requirements
 
 - Node.js 22.19.0+
-- Pi 0.84.2+
+- Pi 0.84.3+
 - An interactive TUI session for the custom header, editor, footer, `question`, and `/init`
 
 ## Install
@@ -34,7 +34,7 @@ Or from GitHub:
 pi install git:github.com/KyrosHendrix/pi-KillerOS
 ```
 
-Pin a release by appending its tag, for example `@v2.0.17`. Add `-l` to install only for the current project. Restart Pi after installing.
+Pin a release by appending its tag, for example `@v2.0.19`. Add `-l` to install only for the current project. Restart Pi after installing.
 
 ## Commands
 
@@ -85,7 +85,7 @@ Releases go through CI on `main`; do not push version tags manually.
 
 ## Security
 
-Pi extensions run with your user permissions. Review the source before installing globally. Hook commands run only for projects Pi marks as trusted; check `.pi/killeros-hooks.json` before enabling project trust.
+Pi extensions run with your user permissions. Review the source before installing globally. Hook commands run only for projects Pi marks as trusted; check `.pi/killeros-hooks.json` before enabling project trust. KillerOS accepts that configuration only as a regular, non-linked file no larger than 64 KiB in the project's real `.pi` directory.
 
 ## License
 

package/killeros/activity.ts

@@ -52,6 +52,10 @@ export function formatActivityMessage(message: ActivityMessage, theme: Theme): s
           detail = `using ${safeToolName(message.toolName)}`;
       }
       break;
+    default: {
+      const exhaustive: never = message;
+      return exhaustive;
+    }
   }
 
   return `${theme.fg("accent", verb)} ${theme.fg("dim", `(${theme.bold("esc")} to interrupt · ${detail})`)}`;

package/killeros/codex-fast-state.ts

@@ -5,16 +5,25 @@ interface CodexFastState {
   listeners: Set<CodexFastStateListener>;
 }
 
-const GLOBAL_STATE_KEY = "__killerosCodexFastState";
-type GlobalWithCodexFastState = typeof globalThis & {
-  [GLOBAL_STATE_KEY]?: CodexFastState;
-};
+declare global {
+  var __killerosCodexFastState: unknown;
+}
+
+// Accepts process-global state only when it is safe to reuse across extension versions.
+function isCodexFastState(value: unknown): value is CodexFastState {
+  return typeof value === "object" && value !== null
+    && "enabled" in value && typeof value.enabled === "boolean"
+    && "listeners" in value && value.listeners instanceof Set
+    && [...value.listeners].every((listener) => typeof listener === "function");
+}
 
-const globalState = globalThis as GlobalWithCodexFastState;
-const state = globalState[GLOBAL_STATE_KEY] ??= {
-  enabled: false,
+const savedState = globalThis.__killerosCodexFastState;
+const state: CodexFastState = isCodexFastState(savedState) ? savedState : {
+  enabled: typeof savedState === "object" && savedState !== null
+    && "enabled" in savedState && savedState.enabled === true,
   listeners: new Set<CodexFastStateListener>(),
 };
+globalThis.__killerosCodexFastState = state;
 
 export function isCodexFastEnabled(): boolean {
   return state.enabled;

package/killeros/commands.ts

@@ -1,5 +1,6 @@
 import { type ExtensionAPI, type ExtensionCommandContext } from "@earendil-works/pi-coding-agent";
 import type { AutocompleteItem } from "@earendil-works/pi-tui";
+import { safeTerminalText } from "./safe-terminal-text.ts";
 
 async function confirmNewSession(ctx: ExtensionCommandContext): Promise<boolean> {
   if (!ctx.hasUI) return true;
@@ -87,6 +88,11 @@ interface TaggedAutocompleteItem extends AutocompleteItem {
 const SLASH_COMMAND_PREFIX_PATTERN = /(?:^|[ \t])\/([^\s/]*)$/u;
 const SLASH_COMMAND_TOKEN_PATTERN = /(?:^|[ \t])\/([^\s/]+)(?=$|[ \t])/gu;
 
+function safeCommandName(name: string): string | undefined {
+  const safe = safeTerminalText(name).replaceAll("\n", "").trim();
+  return safe === name && safe && !/[\s/]/u.test(safe) ? safe : undefined;
+}
+
 export function getSlashCommandPrefix(line: string): { prefix: string; slashIndex: number } | undefined {
   const match = SLASH_COMMAND_PREFIX_PATTERN.exec(line);
   if (!match || match.index === undefined) return undefined;
@@ -107,7 +113,8 @@ export function findSlashCommandTokens(line: string): SlashCommandToken[] {
 }
 
 function commandNameFromAutocompleteItem(item: AutocompleteItem): string {
-  return (item.value || item.label).replace(/^\//u, "").trim().split(/\s+/u)[0] ?? "";
+  const name = (item.value || item.label).replace(/^\//u, "").trim().split(/\s+/u)[0] ?? "";
+  return safeCommandName(name) ?? "";
 }
 
 export function createSlashCommandResolver(
@@ -124,16 +131,20 @@ export function createSlashCommandResolver(
     }));
 
     for (const command of pi.getCommands()) {
+      const name = safeCommandName(command.name);
+      if (!name) continue;
       const category: CommandInfo["category"] = command.source === "skill"
         ? "Skill"
         : command.source === "prompt"
           ? "Prompt"
           : "Extension";
-      commands.set(command.name, {
-        name: command.name,
-        description: command.description,
+      commands.set(name, {
+        name,
+        description: command.description === undefined
+          ? undefined
+          : safeTerminalText(command.description).replaceAll("\n", " "),
         category,
-        syntaxHint: COMMAND_SYNTAX_HINTS[command.name],
+        syntaxHint: COMMAND_SYNTAX_HINTS[name],
       });
     }
 
@@ -142,7 +153,11 @@ export function createSlashCommandResolver(
       : fallbackCommands;
     for (const [name, description] of baseCommands) {
       if (name && !commands.has(name)) {
-        commands.set(name, { name, description, category: "Built-in" });
+        commands.set(name, {
+          name,
+          description: description === undefined ? undefined : safeTerminalText(description).replaceAll("\n", " "),
+          category: "Built-in",
+        });
       }
     }
     return commands;
@@ -219,9 +234,11 @@ export function registerSlashAutocomplete(
         };
       },
       applyCompletion(lines, cursorLine, cursorCol, item, prefix) {
-        const tagged = item as TaggedAutocompleteItem;
-        if (!tagged.killerosCommand) return current.applyCompletion(lines, cursorLine, cursorCol, item, prefix);
-        usage.set(tagged.killerosCommand, (usage.get(tagged.killerosCommand) ?? 0) + 1);
+        const commandName = "killerosCommand" in item && typeof item.killerosCommand === "string"
+          ? item.killerosCommand
+          : undefined;
+        if (!commandName) return current.applyCompletion(lines, cursorLine, cursorCol, item, prefix);
+        usage.set(commandName, (usage.get(commandName) ?? 0) + 1);
         const line = lines[cursorLine] ?? "";
         const beforeCursor = line.slice(0, cursorCol);
         const afterCursor = line.slice(cursorCol);

package/killeros/display.ts

@@ -1,18 +1,21 @@
 import os from "node:os";
 import { truncateToWidth, visibleWidth } from "@earendil-works/pi-tui";
+import { safeTerminalText } from "./safe-terminal-text.ts";
 
+/** Formats a terminal-safe, single-line project path with home abbreviation. */
 export function formatCwd(cwd: string): string {
-  const home = process.env.HOME || process.env.USERPROFILE || os.homedir();
-  if (!home) return cwd;
+  const safeCwd = safeTerminalText(cwd).replaceAll("\n", "");
+  const home = safeTerminalText(process.env.HOME || process.env.USERPROFILE || os.homedir()).replaceAll("\n", "");
+  if (!home) return safeCwd;
   const normalizedHome = home.replace(/[\\/]+$/, "");
-  const normalizedCwd = cwd.replace(/[\\/]+$/, "");
+  const normalizedCwd = safeCwd.replace(/[\\/]+$/, "");
   const comparedHome = process.platform === "win32" ? normalizedHome.toLowerCase() : normalizedHome;
   const comparedCwd = process.platform === "win32" ? normalizedCwd.toLowerCase() : normalizedCwd;
   if (comparedCwd === comparedHome) return "~";
   const separator = normalizedCwd.slice(normalizedHome.length, normalizedHome.length + 1);
   return comparedCwd.startsWith(comparedHome) && (separator === "/" || separator === "\\")
     ? `~${normalizedCwd.slice(normalizedHome.length)}`
-    : cwd;
+    : safeCwd;
 }
 
 export function padRight(text: string, width: number): string {

package/killeros/errors.ts

@@ -1,8 +1,17 @@
 import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
+import { safeTerminalText } from "./safe-terminal-text.ts";
+
+/** Checks a caught value for one exact string error code. */
+export function hasErrorCode(error: unknown, code: string): boolean {
+  return typeof error === "object"
+    && error !== null
+    && "code" in error
+    && error.code === code;
+}
 
 /** Converts unknown caught values into text suitable for user-facing errors. */
 export function errorMessage(error: unknown): string {
-  return error instanceof Error ? error.message : String(error);
+  return safeTerminalText(error instanceof Error ? error.message : String(error));
 }
 
 export function reportError(ctx: ExtensionContext, area: string, error: unknown): void {

package/killeros/footer.ts

@@ -4,6 +4,7 @@ import { isCodexFastEnabled, subscribeCodexFast } from "./codex-fast-state.ts";
 import { formatCwd, formatTime, formatTokens, padRight } from "./display.ts";
 import { goalElapsedMilliseconds } from "./goals.ts";
 import type { GoalRuntime, GoalState } from "./runtime.ts";
+import { safeTerminalText } from "./safe-terminal-text.ts";
 import { LEVEL_COLORS, type ThinkingLevel } from "./variants.ts";
 
 const FOOTER_REFRESH_INTERVAL_MS = 1_000;
@@ -76,7 +77,7 @@ const PROVIDER_WORDS: Readonly<Record<string, string>> = {
 };
 
 function formatProviderName(provider: string): string {
-  const normalized = provider.trim();
+  const normalized = safeTerminalText(provider).replaceAll("\n", "").trim();
   const known = PROVIDER_LABELS[normalized.toLowerCase()];
   if (known) return known;
   return normalized
@@ -87,7 +88,8 @@ function formatProviderName(provider: string): string {
 }
 
 function modelDisplayName(model: NonNullable<ExtensionContext["model"]>): string {
-  return model.name?.trim() || model.id;
+  const name = safeTerminalText(model.name ?? "").replaceAll("\n", "").trim();
+  return name || safeTerminalText(model.id).replaceAll("\n", "").trim() || "Unknown model";
 }
 
 export function formatModel(
@@ -194,7 +196,7 @@ export function registerFooter(pi: ExtensionAPI, goalRuntime: GoalRuntime): void
     unsubscribeCodexFast = subscribeCodexFast(() => activeTui?.requestRender());
     const sessionStart = Date.now();
     currentModel = ctx.model;
-    thinkingLevel = pi.getThinkingLevel() as ThinkingLevel;
+    thinkingLevel = pi.getThinkingLevel();
     const cwd = formatCwd(ctx.cwd);
 
     ctx.ui.setFooter((tui, theme, footerData) => {