omni-pi 0.10.1 → 0.12.0

package/CHANGELOG.md

@@ -1,5 +1,50 @@
 # Changelog
 
+## 0.12.0 - 2026-04-27
+
+### Security and robustness
+
+- Sanitized untrusted text before it reaches brain prompts and `DECISIONS.md`
+- Sanitized generated `SKILL.md` files and fixed `Set` mutation in loop
+- Added atomic writes for `.omni/` and `.pi/` state files
+- Hardened version parsing in the self-updater
+
+### Bug fixes
+
+- Fixed `isRequestRelated` to actually use the overlap ratio for planning continuity
+- Fixed repo-map indexing, fingerprints, and dirty-path tracking
+- Fixed backtick code span tracking in the task table parser
+- Fixed prerelease ordering so pre-releases sort below their matching release in the updater
+- Used `os.homedir()` for reliable home directory resolution in the updater
+- Cached package version at module load to avoid repeated filesystem reads in the header
+
+### Dependencies
+
+- Upgraded `@mariozechner/pi-coding-agent` to `0.70.2`
+- Upgraded `@anthropic-ai/claude-agent-sdk` to `0.2.119`
+- Upgraded `@juanibiapina/pi-powerbar` to `0.9.1`
+- Upgraded `pi-interview` to `0.8.6`
+- Upgraded `pi-prompt-template-model` to `0.9.1`
+- Upgraded `glimpseui` to `0.8.0`
+- Upgraded `@biomejs/biome` to `2.4.13`
+- Upgraded `typescript` to `6.0.3`
+- Upgraded `vitest` to `4.1.5`
+- Upgraded `@types/node` to `25.6.0`
+
+### Housekeeping
+
+- Hoisted control-char regexes and applied Biome formatting
+- Included tests in `tsc` check and added launcher type declarations
+- Added `tsbuildinfo` and coverage artifacts to `.gitignore`
+- Enforced commit-after-every-task rule in `AGENTS.md`
+
+## 0.11.0 - 2026-04-24
+
+### Removed
+
+- Removed `/model-setup`, `/manage-providers`, the `omni-providers` extension, and the bundled provider catalog. Pi now handles provider and model management natively.
+- Removed `PROVIDERS.md` and the provider docs spec.
+
 ## 0.10.1 - 2026-04-24
 
 ### Release follow-up
@@ -9,6 +54,10 @@
 
 ## 0.10.0 - 2026-04-24
 
+### Removed
+
+- Removed `/model-setup`, `/manage-providers`, and the `omni-providers` extension. Pi now handles provider and model management natively.
+
 ### Runtime and integrations
 
 - upgraded `@mariozechner/pi-coding-agent` to `0.70.0`

package/README.md

@@ -15,7 +15,7 @@ Requires Node.js 22 or newer.
 - Keeps durable standards and project context in `.omni/`, even when Omni mode is off.
 - Writes specs, tasks, and progress into `.omni/` once Omni mode is enabled.
 - Adds a repo map that indexes supported source files, ranks them by structure plus recent activity, and injects a compact codebase-awareness block into Omni prompts.
-- Bundles web search, guided interviews, themed UI, native micro-UI via Glimpse, native git diff review, prompt-template-powered workflow commands, a task viewer, a powerbar, custom provider/model management, and automatic updates out of the box.
+- Bundles web search, guided interviews, themed UI, native micro-UI via Glimpse, native git diff review, prompt-template-powered workflow commands, a task viewer, a powerbar, and automatic updates out of the box.
 
 ## Install
 
@@ -30,8 +30,6 @@ cd your-project
 omni
 ```
 
-Custom provider setup, refresh behavior, and bundled provider behavior are documented in [PROVIDERS.md](PROVIDERS.md).
-
 ## Features
 
 ### Bundled Skills
@@ -66,7 +64,6 @@ Current deferred roadmap items remain intentional and visible in docs rather tha
 | Extension | What it does |
 |-----------|-------------|
 | **omni-core** | Brain workflow, themed header, session init, system prompt injection |
-| **omni-providers** | Model provider wiring |
 | **omni-memory** | `.omni/` durable memory bootstrap |
 | **glimpseui** | Native micro-UI windows and the optional floating companion widget |
 | **pi-web-access** | Web search and fetch tools for the agent |
@@ -88,8 +85,6 @@ Omni-Pi now bundles [Glimpse](https://github.com/HazAT/glimpse) for native micro
 
 | Command | Description |
 |---------|-------------|
-| `/model-setup` | Add, refresh, or remove custom provider/model entries |
-| `/manage-providers` | Remove stored auth for bundled providers |
 | `/omni-mode` | Toggle persistent Omni mode on or off for this project |
 | `/companion` | Toggle the Glimpse floating companion widget |
 | `/diff-review` | Open a native git diff review window and insert feedback into the editor |
@@ -108,24 +103,6 @@ Omni-Pi now bundles [Glimpse](https://github.com/HazAT/glimpse) for native micro
 
 Omni-Pi checks for new versions on startup (cached, re-checks every 4 hours). When an update is available, it prompts to install and restart. Pi's own update notification is suppressed to avoid duplication.
 
-## Provider Support
-
-`/model-setup` is for custom providers and custom model entries only.
-
-Use `/model-setup` when you want to configure:
-
-- a custom provider id
-- an API type and base URL
-- an API key for that custom provider
-- discovered models or manual model entries
-- a manual refresh of already configured custom providers
-
-Use `/manage-providers` to remove stored auth for bundled Pi providers.
-
-Anthropic is intentionally API-key-only in Omni-Pi. Anthropic OAuth login is disabled.
-
-See [PROVIDERS.md](PROVIDERS.md) for the current supported-provider list and auth-management split.
-
 ## Omni Mode
 
 Omni-Pi keeps its current branding and shell at all times, but the specialized workflow is opt-in.
@@ -176,7 +153,7 @@ npm run chat    # launch locally in dev mode
 ## CI/CD
 
 - Pull requests and pushes to `main` run `npm run verify`.
-- The docs are part of the test contract, including a sync check between `PROVIDERS.md` and the bundled-provider setup list in code.
+- The docs are part of the test contract.
 - Pushing a `v*` tag runs the release workflow, verifies the repo again, publishes to npm through GitHub Actions trusted publishing with provenance, and then creates the GitHub release.
 - Trusted publishing still requires npm-side setup for this repository/workflow in the npm package settings.
 

package/bin/omni.d.ts

@@ -0,0 +1,22 @@
+export function getOmniPackageDir(): string;
+export function resolvePiCliPath(): string;
+export function buildOmniEnvironment(
+  baseEnv?: NodeJS.ProcessEnv,
+): NodeJS.ProcessEnv;
+export function ensureQuietStartupDefault(baseEnv?: NodeJS.ProcessEnv): void;
+export function buildPiProcessSpec(
+  argv?: string[],
+  baseEnv?: NodeJS.ProcessEnv,
+): {
+  command: string;
+  args: string[];
+  env: NodeJS.ProcessEnv;
+};
+export function runOmni(
+  argv?: string[],
+  options?: { cwd?: string; env?: NodeJS.ProcessEnv },
+): Promise<number>;
+export function isOmniEntrypointInvocation(
+  argvPath?: string,
+  moduleUrl?: string,
+): boolean;

package/bin/omni.js

@@ -1,11 +1,45 @@
 #!/usr/bin/env node
 
 import { spawn } from "node:child_process";
-import { mkdirSync, readFileSync, realpathSync, writeFileSync } from "node:fs";
+import { randomBytes } from "node:crypto";
+import {
+  chmodSync,
+  mkdirSync,
+  readFileSync,
+  realpathSync,
+  renameSync,
+  statSync,
+  unlinkSync,
+  writeFileSync,
+} from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 
+function writeFileAtomicSync(filePath, content) {
+  const tempPath = `${filePath}.${randomBytes(6).toString("hex")}.tmp`;
+  let mode;
+  try {
+    mode = statSync(filePath).mode & 0o777;
+  } catch {
+    // New file: keep Node's default creation mode.
+  }
+  try {
+    writeFileSync(tempPath, content, "utf8");
+    if (mode !== undefined) {
+      chmodSync(tempPath, mode);
+    }
+    renameSync(tempPath, filePath);
+  } catch (error) {
+    try {
+      unlinkSync(tempPath);
+    } catch {
+      // temp may not exist
+    }
+    throw error;
+  }
+}
+
 export function getOmniPackageDir() {
   return path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
 }
@@ -22,8 +56,12 @@ export function resolvePiCliPath() {
 }
 
 export function buildOmniEnvironment(baseEnv = process.env) {
+  // Pi has its own update prompt; Omni-Pi runs its own (registerUpdater).
+  // Suppress Pi's check at the launcher boundary so the Omni updater is
+  // the only one that surfaces upgrade prompts.
   return {
     ...baseEnv,
+    PI_SKIP_VERSION_CHECK: "1",
   };
 }
 
@@ -56,10 +94,9 @@ export function ensureQuietStartupDefault(baseEnv = process.env) {
       typeof parsed === "object" &&
       parsed.quietStartup === undefined
     ) {
-      writeFileSync(
+      writeFileAtomicSync(
         settingsFile,
         `${JSON.stringify({ ...parsed, quietStartup: true }, null, 2)}\n`,
-        "utf8",
       );
     }
   } catch (error) {
@@ -73,10 +110,9 @@ export function ensureQuietStartupDefault(baseEnv = process.env) {
     }
 
     mkdirSync(agentDir, { recursive: true });
-    writeFileSync(
+    writeFileAtomicSync(
       settingsFile,
       `${JSON.stringify({ quietStartup: true }, null, 2)}\n`,
-      "utf8",
     );
   }
 }
@@ -96,7 +132,7 @@ export async function runOmni(argv = process.argv.slice(2), options = {}) {
   ensureQuietStartupDefault(options.env);
   const spec = buildPiProcessSpec(argv, options.env);
 
-  await new Promise((resolve, reject) => {
+  return await new Promise((resolve, reject) => {
     const child = spawn(spec.command, spec.args, {
       cwd: options.cwd ?? process.cwd(),
       env: spec.env,

package/extensions/omni-core/index.ts

@@ -9,13 +9,11 @@ import {
 } from "../../src/brain.js";
 import { createOmniCommands } from "../../src/commands.js";
 import { renderHeader } from "../../src/header.js";
-import { registerModelCommand } from "../../src/model-command.js";
 import {
   registerOmniMessageRenderer,
   registerPiCommands,
 } from "../../src/pi.js";
 import { ensureBundledPromptTemplates } from "../../src/prompt-template-sync.js";
-import { registerProviderAuthCommand } from "../../src/provider-auth-command.js";
 import {
   buildRepoMapPromptSuffix,
   registerRepoMapTracking,
@@ -42,8 +40,6 @@ import { buildOnboardingInterviewKickoff } from "../../src/workflow.js";
 export default function omniCoreExtension(api: ExtensionAPI): void {
   registerOmniMessageRenderer(api);
   registerPiCommands(api, createOmniCommands());
-  registerModelCommand(api);
-  registerProviderAuthCommand(api);
   registerThemeCommand(api);
   registerTodoShortcut(api);
   registerUpdater(api);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omni-pi",
-  "version": "0.10.1",
+  "version": "0.12.0",
   "description": "Single-agent Pi package that interviews the user, documents the spec, and implements work in bounded slices.",
   "type": "module",
   "license": "MIT",
@@ -38,7 +38,6 @@
     "templates",
     "vendor/pi-diff-review",
     "README.md",
-    "PROVIDERS.md",
     "CREDITS.md"
   ],
   "scripts": {
@@ -52,14 +51,13 @@
     "prepublishOnly": "npm run verify"
   },
   "devDependencies": {
-    "@biomejs/biome": "2.4.9",
-    "@types/node": "^24.12.0",
-    "typescript": "^5.9.3",
-    "vitest": "^3.2.4"
+    "@biomejs/biome": "2.4.13",
+    "@types/node": "^25.6.0",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.5"
   },
   "pi": {
     "extensions": [
-      "./extensions/omni-providers/index.ts",
       "./extensions/omni-core/index.ts",
       "./extensions/omni-memory/index.ts",
       "./node_modules/glimpseui/pi-extension/index.ts",
@@ -81,14 +79,14 @@
     ]
   },
   "dependencies": {
-    "@anthropic-ai/claude-agent-sdk": "0.2.84",
+    "@anthropic-ai/claude-agent-sdk": "^0.2.119",
     "@juanibiapina/pi-extension-settings": "^0.6.1",
-    "@juanibiapina/pi-powerbar": "^0.8.0",
-    "@mariozechner/pi-coding-agent": "^0.70.0",
-    "glimpseui": "^0.7.0",
+    "@juanibiapina/pi-powerbar": "^0.9.1",
+    "@mariozechner/pi-coding-agent": "^0.70.2",
+    "glimpseui": "^0.8.0",
     "pi-diff-review": "file:./vendor/pi-diff-review",
-    "pi-interview": "^0.6.2",
-    "pi-prompt-template-model": "^0.8.2",
+    "pi-interview": "^0.8.6",
+    "pi-prompt-template-model": "^0.9.1",
     "pi-web-access": "^0.10.6",
     "zod": "^4.3.6"
   },

package/src/atomic.ts

@@ -0,0 +1,94 @@
+import { randomBytes } from "node:crypto";
+import {
+  chmodSync,
+  renameSync,
+  statSync,
+  unlinkSync,
+  writeFileSync,
+} from "node:fs";
+import {
+  chmod,
+  mkdir,
+  rename,
+  stat,
+  unlink,
+  writeFile,
+} from "node:fs/promises";
+import path from "node:path";
+
+// Atomic write helpers. Writes to a sibling temp file in the same
+// directory, then renames over the destination. POSIX rename(2) is
+// atomic when the source and destination are on the same filesystem,
+// so a reader (or a concurrent writer) never observes a partially
+// written state file. On Windows the rename is also atomic when the
+// destination exists.
+//
+// The temp suffix includes a random nonce so two concurrent writers
+// to the same path don't collide on their temp files.
+
+function tempPathFor(filePath: string): string {
+  return `${filePath}.${randomBytes(6).toString("hex")}.tmp`;
+}
+
+async function existingMode(filePath: string): Promise<number | undefined> {
+  try {
+    return (await stat(filePath)).mode & 0o777;
+  } catch {
+    return undefined;
+  }
+}
+
+function existingModeSync(filePath: string): number | undefined {
+  try {
+    return statSync(filePath).mode & 0o777;
+  } catch {
+    return undefined;
+  }
+}
+
+export async function writeFileAtomic(
+  filePath: string,
+  content: string | Uint8Array,
+): Promise<void> {
+  await mkdir(path.dirname(filePath), { recursive: true });
+  const tempPath = tempPathFor(filePath);
+  const mode = await existingMode(filePath);
+  try {
+    await writeFile(tempPath, content, "utf8");
+    if (mode !== undefined) {
+      await chmod(tempPath, mode);
+    }
+    await rename(tempPath, filePath);
+  } catch (error) {
+    // Best-effort cleanup of the orphaned temp file; ignore failure
+    // since the original error is what matters.
+    try {
+      await unlink(tempPath);
+    } catch {
+      /* temp may not exist */
+    }
+    throw error;
+  }
+}
+
+export function writeFileAtomicSync(
+  filePath: string,
+  content: string | Uint8Array,
+): void {
+  const tempPath = tempPathFor(filePath);
+  const mode = existingModeSync(filePath);
+  try {
+    writeFileSync(tempPath, content, "utf8");
+    if (mode !== undefined) {
+      chmodSync(tempPath, mode);
+    }
+    renameSync(tempPath, filePath);
+  } catch (error) {
+    try {
+      unlinkSync(tempPath);
+    } catch {
+      /* temp may not exist */
+    }
+    throw error;
+  }
+}

package/src/config.ts

@@ -1,6 +1,7 @@
-import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { mkdir, readFile } from "node:fs/promises";
 import path from "node:path";
 
+import { writeFileAtomic } from "./atomic.js";
 import type { OmniConfig } from "./contracts.js";
 import { AVAILABLE_MODELS } from "./providers.js";
 
@@ -84,7 +85,7 @@ export async function writeConfig(
 ): Promise<void> {
   const configPath = path.join(rootDir, CONFIG_PATH);
   await mkdir(path.dirname(configPath), { recursive: true });
-  await writeFile(configPath, renderConfigContent(config), "utf8");
+  await writeFileAtomic(configPath, renderConfigContent(config));
 }
 
 export async function updateModelConfig(

package/src/header.ts

@@ -40,7 +40,7 @@ export function centerIn(text: string, width: number): string {
   return " ".repeat(pad) + text;
 }
 
-function readVersion(): string {
+function loadVersion(): string {
   try {
     const pkgPath = path.resolve(
       path.dirname(fileURLToPath(import.meta.url)),
@@ -56,16 +56,19 @@ function readVersion(): string {
   }
 }
 
+// Read once at module load — package.json doesn't change while the
+// process is running, so re-parsing on every render is wasted work.
+const VERSION = loadVersion();
+
 export function pickWelcome(): string {
   return WELCOME_MESSAGES[Math.floor(Math.random() * WELCOME_MESSAGES.length)];
 }
 
 export function renderHeader(theme: Theme): Text {
-  const version = readVersion();
   const welcome = pickWelcome();
 
   const logo = ASCII_LOGO.map((line) => brand(line)).join("\n");
-  const subtitleText = `— P I  v${version} —`;
+  const subtitleText = `— P I  v${VERSION} —`;
   const subtitle = theme.fg("muted", centerIn(subtitleText, LOGO_WIDTH));
   const taglineText = "plan · build · verify";
   const tagline = theme.fg("muted", centerIn(taglineText, LOGO_WIDTH));

package/src/planning.ts

@@ -162,6 +162,9 @@ function buildBootstrapTasks(repoSignals: RepoSignals): TaskBrief[] {
   return tasks;
 }
 
+const RELATION_OVERLAP_THRESHOLD = 0.34;
+const RELATION_SMALL_SET_LIMIT = 3;
+
 const RELATION_STOPWORDS = new Set([
   "a",
   "an",
@@ -245,13 +248,20 @@ export function isRequestRelated(
   const overlap = [...currentTokens].filter((token) =>
     previousTokens.has(token),
   );
-  if (overlap.length >= 1) {
-    return true;
+  if (overlap.length === 0) {
+    return false;
   }
 
-  return (
-    overlap.length / Math.min(previousTokens.size, currentTokens.size) >= 0.34
-  );
+  // Compare against the smaller token set: short follow-up summaries
+  // ("auth bug fix") have very few tokens, so even one match is meaningful
+  // there. With more text on either side, demand a real overlap ratio so a
+  // single incidental shared word ("users", "config") doesn't keep an
+  // unrelated plan alive.
+  const smaller = Math.min(previousTokens.size, currentTokens.size);
+  if (smaller <= RELATION_SMALL_SET_LIMIT) {
+    return true;
+  }
+  return overlap.length / smaller >= RELATION_OVERLAP_THRESHOLD;
 }
 
 export function createInitialSpec(

package/src/plans.ts

@@ -1,6 +1,7 @@
-import { mkdir, readFile, unlink, writeFile } from "node:fs/promises";
+import { mkdir, readFile, unlink } from "node:fs/promises";
 import path from "node:path";
 
+import { writeFileAtomic } from "./atomic.js";
 import type { PlanEntry, PlanStatus } from "./contracts.js";
 import { OMNI_DIR } from "./contracts.js";
 
@@ -109,7 +110,7 @@ async function writeIndex(
   entries: PlanEntry[],
 ): Promise<void> {
   await ensurePlansDir(rootDir);
-  await writeFile(indexPath(rootDir), renderIndex(entries), "utf8");
+  await writeFileAtomic(indexPath(rootDir), renderIndex(entries));
 }
 
 export async function createPlan(
@@ -123,10 +124,9 @@ export async function createPlan(
   const entry: PlanEntry = { id, title, status: "active", createdAt };
 
   await ensurePlansDir(rootDir);
-  await writeFile(
+  await writeFileAtomic(
     planFilePath(rootDir, id),
     renderPlanFile(entry, description, tasks),
-    "utf8",
   );
 
   const entries = await readPlanIndex(rootDir);
@@ -157,7 +157,7 @@ export async function updatePlanStatus(
     const filePath = planFilePath(rootDir, planId);
     const content = await readFile(filePath, "utf8");
     const updated = content.replace(/^Status:\s*.+$/mu, `Status: ${status}`);
-    await writeFile(filePath, updated, "utf8");
+    await writeFileAtomic(filePath, updated);
   } catch {
     // file may have been cleaned up already
   }
@@ -198,13 +198,12 @@ export async function appendProgress(
 
   try {
     const content = await readFile(filePath, "utf8");
-    await writeFile(filePath, `${content.trimEnd()}\n${bullet}\n`, "utf8");
+    await writeFileAtomic(filePath, `${content.trimEnd()}\n${bullet}\n`);
   } catch {
     await mkdir(path.dirname(filePath), { recursive: true });
-    await writeFile(
+    await writeFileAtomic(
       filePath,
       `# Progress\n\nOngoing log of project progress.\n\n${bullet}\n`,
-      "utf8",
     );
   }
 }

package/src/prompt-template-sync.ts

@@ -1,13 +1,9 @@
-import {
-  existsSync,
-  mkdirSync,
-  readFileSync,
-  rmSync,
-  writeFileSync,
-} from "node:fs";
+import { existsSync, mkdirSync, readFileSync, rmSync } from "node:fs";
 import os from "node:os";
 import path from "node:path";
 
+import { writeFileAtomicSync } from "./atomic.js";
+
 const MANAGED_PROMPT_FILES = ["commit.md", "push.md"] as const;
 const MANAGED_SUBDIR = "omni-pi";
 const LEGACY_MANAGED_SUBDIRS = ["zz-omni-pi"] as const;
@@ -55,7 +51,7 @@ export function ensureBundledPromptTemplates(
       continue;
     }
 
-    writeFileSync(targetPath, nextContent, "utf8");
+    writeFileAtomicSync(targetPath, nextContent);
     written.push(targetPath);
   }