killeros 3.0.1 → 3.0.3

package/CHANGELOG.md

@@ -4,6 +4,44 @@ All notable changes to KillerOS are documented here. Releases use New Features f
 
 ## [Unreleased]
 
+## [3.0.3] - 2026-10-07
+
+### Changed
+
+- Raised the minimum supported Pi version and all four locked Pi development packages to 1.0.4. Compatibility CI now targets the exact 1.0.4 minimum and latest `>=1.0.4 <2`, with unchanged stable check names and package-file immutability guards.
+- Documented Pi 1.0.4's native wildcard tool filters, MCP availability under explicit tool allowlists, and codemode image reads.
+- Updated Azure footer naming and fast-mode exclusion tests for Pi's renamed `azure` provider. Documented the required Azure configuration migration, the unchanged Responses API identifier, native editor/transcript navigation, and saved codemode images.
+- Gave Pi compatibility CI checks stable minimum/latest names so future Pi version changes do not require renaming GitHub's required checks. Documented the one-time protection migration without weakening existing safeguards.
+
+### Added
+
+- Added real Pi regressions for wildcard decision-tool selection and exclusion, codemode-only provider prompt rules, and pending-stream cancellation retries that preserve one goal turn and defer receipts and sounds until settlement.
+- Added real Pi contract coverage for Azure Responses and Foundry Chat Completions requests both before and after reload, preserving sampling settings and deployment names without applying OpenAI priority service.
+- Added custom-editor coverage for Pi 1.0.3's separate line-navigation and fullscreen transcript Home/End shortcuts.
+
+### Fixed
+
+- Fixed a process-tree test startup race by waiting for the complete descendant PID instead of readiness-file creation. Hook termination assertions remain unchanged.
+- Reused bounded cleanup retries throughout real Pi integration tests so transient Windows directory locks do not fail CI after the assertions pass. Added a repository contract against unbounded fixture cleanup.
+
+## [3.0.2] - 2026-10-05
+
+### Changed
+
+- Raised the minimum supported Pi version and locked Pi development packages to 1.0.2. Compatibility CI now tests the exact 1.0.2 minimum and latest stable 1.x; users on older Pi versions must upgrade.
+- Documented Pi's native thinking-level sampling configuration and trusted-project MCP overrides without adding KillerOS commands or settings.
+
+### Added
+
+- Added real Pi contract coverage for capacity-error recovery within one logical goal turn, with task receipts and completion sounds deferred until settlement.
+- Verified that native OpenAI fast mode preserves thinking-level sampling overrides across API-key and ChatGPT subscription requests, extension reloads, and provider retries.
+
+### Fixed
+
+- Kept POSIX process-group cleanup pending after a timed-out or cancelled hook's shell exits, preserving forced termination and reporting bounded uncertainty unless group exit is confirmed. Fixes #42.
+- Preserved goal-request ownership through settlement so automatic compaction cannot restart completed or blocked goals as ordinary work. Active-goal recovery, later ordinary requests, and compaction error reporting remain supported. Fixes #43.
+- Corrected the process-tree timeout fixture's marker argument and delayed descendant writes beyond cleanup. Added a real cleanup-disabled control that detects surviving descendants and checks explicit uncertainty. Fixes #44.
+
 ## [3.0.1] - 2026-10-02
 
 ### Changed

package/README.md

@@ -19,9 +19,11 @@ A TypeScript extension for the [Pi coding agent](https://github.com/earendil-wor
 ## Requirements
 
 - Node.js 22.19.0+
-- Pi 0.99.2 or later below 2.0.0
+- Pi 1.0.4 or later below 2.0.0
 - An interactive TUI session for the custom header, editor, footer, and `question`
 
+Users on older Pi versions must upgrade.
+
 ## Install
 
 ```bash
@@ -34,7 +36,7 @@ Or from GitHub:
 pi install git:github.com/KyrosHendrix/pi-KillerOS
 ```
 
-Pin a release by appending its tag, for example `@v3.0.1`. Add `-l` to install only for the current project. Restart Pi after installing.
+Pin a release by appending its tag, for example `@v3.0.3`. Add `-l` to install only for the current project. Restart Pi after installing.
 
 ## Commands
 
@@ -69,8 +71,12 @@ Pi 1.0 defaults to fullscreen. Use `--tui-mode regular` for one invocation or se
 | RPC | Goals, proactive compaction; no TUI components, sounds, title indicator |
 | Print/JSON | No interactive questions, `/goal`, or proactive compaction |
 
+With Pi 1.0.3's default [keybindings](https://github.com/earendil-works/pi/blob/main/packages/coding-agent/docs/keybindings.md#fullscreen), `Home` and `End` move within the current editor line. In fullscreen mode, `Ctrl+Home` and `Ctrl+End` scroll to the transcript's beginning or end without moving the editor cursor. KillerOS inherits these bindings; user overrides still apply.
+
 `question` and the active `killeros_goal_update` tool use Pi's `model-only` exposure. They stay directly declared to the model when codemode is disabled or enabled in `on` or `only` mode, but scripts and other tools cannot call them through `ctx.executeTool()`. The goal tool remains inactive without an active goal. Questions still require TUI mode; a direct RPC call fails with `The question tool requires interactive TUI mode`. KillerOS does not enable or configure codemode.
 
+Pi 1.0.4's native `--tools` and `--exclude-tools` support `*` patterns. Quote patterns such as `"killeros_*"` so the shell does not expand them. An explicit allowlist must include `question` for interactive questions and permit `killeros_goal_update` for goals. Selection does not make questions usable outside TUI mode. Excluding the goal tool pauses goals before any model request. See Pi's [tool selection](https://github.com/earendil-works/pi/blob/main/packages/coding-agent/docs/cli.md#tools).
+
 ## Configuration
 
 The packaged `killeros` theme activates on TUI start. Compaction triggers by default at 15% tokens remaining, stored in global `killeros.json`:
@@ -103,7 +109,7 @@ A direct quoted path-shaped file target binds silent file proof. For an extensio
 /goal Fix `killeros/footer.ts`, verified by npm test
 ```
 
-Bare quoted prose remains model-reported. KillerOS captures the file baseline at goal start and only completes when the file is created or changed. A normal response never continues a goal by itself: the agent must record `continue`, `complete`, or a blocker decision through `killeros_goal_update`. Repeated continuation reports and unavailable goal tools pause the goal. New goals pause after 20 turns without warning. An explicit `/goal resume` on an exhausted goal grants another 20 turns; compaction recovery never grants turns. Same-turn recovery requires an actual interruption; successful or skipped compaction cannot restart a normally stopped goal without a decision. Restored goals keep their persisted limit.
+Bare quoted prose remains model-reported. KillerOS captures the file baseline at goal start and only completes when the file is created or changed. A normal response never continues a goal by itself: the agent must record `continue`, `complete`, or a blocker decision through `killeros_goal_update`. Repeated continuation reports and unavailable goal tools pause the goal. New goals pause after 20 turns without warning. An explicit `/goal resume` on an exhausted goal grants another 20 turns; compaction recovery never grants turns. Same-turn recovery requires an actual interruption; successful or skipped compaction cannot restart a normally stopped goal without a decision. A request that completes or blocks a goal remains goal-owned through settlement, so automatic compaction cannot restart it as ordinary work. Later ordinary requests still support compaction continuation. Restored goals keep their persisted limit.
 
 Session replacement, reload, and committed tree navigation discard unfinished task receipts. Late receipt results do not write or notify through the old session context or attach to a different branch. Cancelled navigation preserves the pending receipt.
 
@@ -113,6 +119,32 @@ Failed Git metadata reads keep the footer's last successful file counts and mark
 
 Completion sounds are off by default; change with `/notification` in TUI mode. The tab-title indicator requires a Nerd Font.
 
+### Pi model and MCP settings
+
+Use Pi's native `/thinking` selector for reasoning levels. Pi 1.0.2 can also apply different sampling parameters for each level through `samplingParamsByThinkingLevel` in `models.json`. For example, a model entry can contain:
+
+```json
+{
+  "samplingParams": { "temperature": 1.0, "top_p": 0.95 },
+  "samplingParamsByThinkingLevel": {
+    "off": { "temperature": 0.7, "top_p": 0.8 },
+    "high": { "temperature": 0.6 }
+  }
+}
+```
+
+Only configure parameters the endpoint accepts. These settings apply to `openai-completions`, `openai-responses`, and `azure-openai-responses`, not legacy `openai-codex`. Missing levels inherit model defaults; request-level sampling parameters take precedence. `/codex-fast` preserves sampling parameters when it adds the priority service tier. See Pi's [sampling configuration](https://github.com/earendil-works/pi/blob/main/packages/coding-agent/docs/models.md#configure-sampling-by-thinking-level) for the full file format and merge rules.
+
+Pi 1.0.3 renames the Azure **provider** from `azure-openai-responses` to `azure` and adds Azure Foundry Chat Completions, including `azure/deepseek-v4-pro`. Rename the provider key in `auth.json` or run `/login azure` again, rename it in `models.json`, and update `defaultProvider`, `enabledModels` patterns, and `modelThinkingLevels` keys in `settings.json`. The Responses **API** identifier remains `azure-openai-responses`; Foundry Chat Completions uses `openai-completions`. The `AZURE_OPENAI_*` environment variables are unchanged. Old Azure sessions fall back to another model on resume and lose prompt-cache reuse. KillerOS does not migrate credentials or Pi settings. See Pi's [Azure configuration](https://github.com/earendil-works/pi/blob/main/packages/coding-agent/docs/providers.md#azure-openai).
+
+In Pi 1.0.4 codemode, `tools.read()` on an image returns an image block that you can pass to native `image()`. See Pi's [codemode tool calls](https://github.com/earendil-works/pi/blob/main/packages/coding-agent/docs/codemode.md#call-tools).
+
+When codemode is enabled, Pi 1.0.3's `image()` also saves images to temporary files and includes their paths in the result, so later turns can copy or move them. Pi creates these output files with user-only permissions on POSIX systems; Windows access follows inherited filesystem ACLs. KillerOS uses Pi's native codemode behavior; see [image generation](https://github.com/earendil-works/pi/blob/main/packages/coding-agent/docs/codemode.md#generate-images).
+
+Use Pi's `/mcp` command and `.pi/mcp.json` to enable, disable, or change the exposure of a user-level MCP server for a trusted project without copying its credentials. See [project MCP overrides](https://github.com/earendil-works/pi/blob/main/packages/coding-agent/docs/mcp.md#configure-servers). KillerOS does not manage MCP configuration.
+
+In Pi 1.0.4, a nonempty `--tools` list with no `mcp__` entry preserves MCP tool availability according to each server's exposure. For example, `--tools codemode` does not disable MCP connections or remove their tools. Use `--no-mcp` to disable MCP connections through Pi's built-in MCP support for one run. Explicit MCP selection and exclusion remain Pi's responsibility; see [MCP tool exposure](https://github.com/earendil-works/pi/blob/main/packages/coding-agent/docs/mcp.md#control-tool-exposure).
+
 ## Development
 
 Strict TypeScript throughout. Tests run on Node's built-in test runner:
@@ -129,7 +161,9 @@ npm ci && npm run check && npm test
 4. Merge using **Create a merge commit**. Squash and rebase merging are disabled because the automated `main`-to-`dev` sync requires shared ancestry. Avoid advancing `dev` until that sync finishes.
 5. Check the `main` CI run and the following Release run. Successful CI on the current `main` commit triggers npm publication with provenance, creates the GitHub release, and fast-forwards `dev` to the released commit. A green PR alone never publishes.
 
-`main` requires pull requests and the CI workflow's required checks, including for administrators. Force pushes and branch deletion are blocked. If CI job names change, update GitHub's required status checks to match.
+`main` requires pull requests and the CI workflow's required checks, including for administrators. Force pushes and branch deletion are blocked. Pi compatibility checks use the stable names `Pi compatibility (minimum)` and `Pi compatibility (latest)`, independent of the tested versions.
+
+When adopting these names, first confirm both checks passed on the release PR's exact head commit. Replace only the two old versioned Pi required checks with their corresponding stable names, preserving their GitHub Actions app bindings and every other protection. If other CI job names change, update GitHub's required status checks to match.
 
 Releases go through CI on `main`; do not push version tags manually. The package smoke job validates release metadata before packing, and the release workflow checks it again before publication. The prepublish check rejects ordinary direct `npm publish`, but `--ignore-scripts` can bypass it. Configure npm's trusted publisher for `release.yml`, set package publishing access to "Require two-factor authentication and disallow tokens", and revoke unused publish tokens. npm maintainers can still publish interactively with 2FA, so workflow-only publishing also depends on maintainer policy.
 
@@ -137,6 +171,8 @@ Releases go through CI on `main`; do not push version tags manually. The package
 
 Pi extensions run with your user permissions. Review the source before installing globally. Hook commands run only for projects Pi marks as trusted; check `.pi/killeros-hooks.json` before enabling project trust. KillerOS accepts that configuration only as a regular, non-linked file no larger than 64 KiB in the project's real `.pi` directory.
 
+On POSIX systems, timed-out or cancelled hooks receive `SIGTERM`, followed by `SIGKILL` if cleanup remains pending. Shell exit alone does not confirm that the original process group stopped. Cleanup uses a two-second window and reports uncertainty if group exit cannot be confirmed.
+
 Handoff validation rejects recognized credential assignments in plain text, Markdown lists, bold labels, and inline-code labels before creating a destination session. This pattern check cannot detect every secret or personally identifying value. Rejected values are not included in the error notification.
 
 ## License

package/killeros/auto-compaction.ts

@@ -121,12 +121,14 @@ export function registerAutoCompaction(
   const loadPreference = dependencies.loadPreference ?? (() => defaultPreference(settingsStore));
   const getCompactionSettings = dependencies.getCompactionSettings ?? defaultCompactionSettings;
   let request: AutoCompactionRequest | undefined;
+  let goalRequestOwned = false;
   let armed = true;
   let rearmOnNextLogicalRequest = false;
   let settingsErrorReported = false;
 
   const resetForLifecycle = (): void => {
     request = undefined;
+    goalRequestOwned = false;
     armed = true;
     rearmOnNextLogicalRequest = false;
     settingsErrorReported = false;
@@ -239,6 +241,11 @@ export function registerAutoCompaction(
     }
   };
 
+  pi.on("agent_start", (_event, ctx) => {
+    // Terminal decisions clear active status before turn_end, but still own this run.
+    goalRequestOwned = dependencies.goal?.isActive(ctx) === true;
+  });
+
   pi.on("turn_end", (_event, ctx) => {
     if (!supportedMode(ctx) || request) return;
 
@@ -277,7 +284,8 @@ export function registerAutoCompaction(
 
     armed = false;
     const token = Symbol();
-    const goal = dependencies.goal?.isActive(ctx) === true;
+    const activeGoal = dependencies.goal?.isActive(ctx) === true;
+    const goal = goalRequestOwned || activeGoal;
     request = {
       phase: "compacting",
       goal,
@@ -285,7 +293,7 @@ export function registerAutoCompaction(
       turnSettled: false,
       compactionCompleted: false,
     };
-    if (goal && dependencies.goal) {
+    if (activeGoal && dependencies.goal) {
       try {
         dependencies.goal.onRequested();
       } catch (error) {
@@ -299,26 +307,29 @@ export function registerAutoCompaction(
         onComplete: () => {
           if (request?.phase !== "compacting" || request.token !== token) return;
           rearmOnNextLogicalRequest = preference.percentRemaining === 100;
-          if (goal && dependencies.goal) {
+          if (goal) {
             request = undefined;
-            try {
-              dependencies.goal.onCompleted(ctx);
-            } catch (error) {
-              notifyFailure(ctx, error);
+            if (activeGoal && dependencies.goal) {
+              try {
+                dependencies.goal.onCompleted(ctx);
+              } catch (error) {
+                notifyFailure(ctx, error);
+              }
             }
             return;
           }
           request.compactionCompleted = true;
           finalizeOrdinaryContinuation(ctx, token);
         },
-        onError: (error) => finishRequestError(ctx, token, goal, error),
+        onError: (error) => finishRequestError(ctx, token, activeGoal, error),
       });
     } catch (error) {
-      finishRequestError(ctx, token, goal, error);
+      finishRequestError(ctx, token, activeGoal, error);
     }
   });
 
   pi.on("agent_settled", (_event, ctx) => {
+    goalRequestOwned = false;
     if (request?.phase === "continuation-dispatched") {
       request = undefined;
       notifyFailure(ctx, new Error("continuation was not accepted"));

package/killeros/footer.ts

@@ -280,7 +280,7 @@ function sumSessionCost(ctx: ExtensionContext): number {
 
 const PROVIDER_LABELS: Readonly<Record<string, string>> = {
   "amazon-bedrock": "Amazon Bedrock",
-  "azure-openai-responses": "Azure OpenAI",
+  azure: "Azure",
   "github-copilot": "GitHub Copilot",
   "google-vertex": "Google Vertex",
   "openai-codex": "OpenAI",

package/killeros/hooks.ts

@@ -236,6 +236,17 @@ function terminateHookProcess(child: HookChildProcess, force: boolean): void {
   }
 }
 
+function hookProcessGroupExited(child: HookChildProcess): boolean {
+  if (!child.pid) return false;
+  try {
+    process.kill(-child.pid, 0);
+    return false;
+  } catch (error) {
+    // Permission and other failures are uncertainty, not proof of exit.
+    return error instanceof Error && "code" in error && error.code === "ESRCH";
+  }
+}
+
 export function executeHook(options: ExecuteHookOptions): Promise<HookExecutionResult>;
 /** @deprecated Use the object-argument form. The positional adapter will be removed in the next major release. */
 export function executeHook(
@@ -297,6 +308,8 @@ export function executeHook(
     let forceTimer: NodeJS.Timeout | undefined;
     let settleTimer: NodeJS.Timeout | undefined;
     let windowsCleanupPending = false;
+    let posixCleanupPending = false;
+    let shellClosed = false;
     const finish = (code: number, exitUnconfirmed = false): void => {
       if (completed) return;
       completed = true;
@@ -334,10 +347,15 @@ export function executeHook(
         }, 2_000);
         return;
       }
+      posixCleanupPending = process.platform !== "win32" && child.pid !== undefined;
       forceTimer = setTimeout(() => {
         if (completed) return;
         terminateHookProcess(child, true);
-        settleTimer = setTimeout(() => finish(terminationCode(), true), 1_000);
+        if (completed) return;
+        settleTimer = setTimeout(() => {
+          const confirmed = posixCleanupPending && shellClosed && hookProcessGroupExited(child);
+          finish(terminationCode(), !confirmed);
+        }, 1_000);
       }, 1_000);
       terminateHookProcess(child, false);
     };
@@ -349,10 +367,13 @@ export function executeHook(
     if (child.stderr instanceof EventEmitter) child.stderr.on("error", captureStreamError);
     child.on("error", (error) => {
       appendBounded(stderr, error.message);
-      if (!windowsCleanupPending) finish(termination ? terminationCode() : 1);
+      if (!windowsCleanupPending && !posixCleanupPending) finish(termination ? terminationCode() : 1);
     });
     child.once("close", (code) => {
-      if (!windowsCleanupPending) finish(termination ? terminationCode() : code ?? 1);
+      shellClosed = true;
+      if (!windowsCleanupPending && (!posixCleanupPending || hookProcessGroupExited(child))) {
+        finish(termination ? terminationCode() : code ?? 1);
+      }
     });
     if (completed) return;
     const boundedTimeoutMs = Number.isNaN(timeoutMs)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "killeros",
-  "version": "3.0.1",
+  "version": "3.0.3",
   "description": "TUI, goals, and workflow automation for the Pi coding agent",
   "type": "module",
   "keywords": [
@@ -45,16 +45,16 @@
     ]
   },
   "peerDependencies": {
-    "@earendil-works/pi-ai": ">=0.99.2 <2",
-    "@earendil-works/pi-coding-agent": ">=0.99.2 <2",
-    "@earendil-works/pi-tui": ">=0.99.2 <2",
+    "@earendil-works/pi-ai": ">=1.0.4 <2",
+    "@earendil-works/pi-coding-agent": ">=1.0.4 <2",
+    "@earendil-works/pi-tui": ">=1.0.4 <2",
     "typebox": ">=1.1.38 <2"
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "1.0.0",
-    "@earendil-works/pi-coding-agent": "1.0.0",
-    "@earendil-works/pi-server": "1.0.0",
-    "@earendil-works/pi-tui": "1.0.0",
+    "@earendil-works/pi-ai": "1.0.4",
+    "@earendil-works/pi-coding-agent": "1.0.4",
+    "@earendil-works/pi-server": "1.0.4",
+    "@earendil-works/pi-tui": "1.0.4",
     "@types/node": "24.12.4",
     "eslint": "^10.9.1",
     "typebox": "1.3.20",