omnirush 0.10.3 → 0.10.4

package/assets/extensions/omnirush/agents-lib.ts

@@ -199,11 +199,18 @@ export const ROLE_PRESETS: Record<AgentRole, RolePreset> = {
   },
 };
 
-/** Resolve the child entry: this running script + the current runtime. */
-export function childInvocation(args: string[]): {
+/**
+ * Resolve the child entry: the core's entry as the launcher started it
+ * (OMNIRUSH_CORE_ENTRY: through <package>/engine, so process listings name
+ * omnirush; the runtime reports the resolved path in argv[1]), else this
+ * running script, with the current runtime.
+ */
+export function childInvocation(args: string[], env: NodeJS.ProcessEnv = process.env): {
   command: string;
   args: string[];
 } {
+  const launched = (env.OMNIRUSH_CORE_ENTRY || "").trim();
+  if (launched && existsSync(launched)) return { command: process.execPath, args: [launched, ...args] };
   const currentScript = process.argv[1];
   const isBunVirtualScript = currentScript?.startsWith("/$bunfs/root/");
   if (currentScript && !isBunVirtualScript && existsSync(currentScript)) {
@@ -214,8 +221,8 @@ export function childInvocation(args: string[]): {
   if (!isGenericRuntime) {
     return { command: process.execPath, args };
   }
-  // Packaged bun builds: fall back to the pi on PATH.
-  return { command: "pi", args };
+  // Packaged bun builds: fall back to the omnirush on PATH (it forwards core flags).
+  return { command: "omnirush", args };
 }
 
 /** The folder, inside a session dir, that holds its sub-agents' sessions. */

package/assets/extensions/omnirush/secret-env.ts

@@ -5,11 +5,55 @@ const SECRET_ENV_NAMES = new Set([
   "OMNIRUSH_APPROVAL_TOKEN",
 ]);
 
-/** Keep provider credentials in the agent process, never in shell/MCP children. */
+/**
+ * The agent core's own PI_<NAME> variables (src/compat.js
+ * CORE_ONLY_ENV_NAMES; a test keeps the lists equal). Shell commands and
+ * MCP servers see their OMNIRUSH_<NAME> copies only; any other PI_*
+ * variable (a user's own) passes through.
+ */
+export const CORE_ONLY_ENV_NAMES = [
+  "CODING_AGENT",
+  "CODING_AGENT_DIR",
+  "CODING_AGENT_SESSION_DIR",
+  "SESSION_ID",
+  "SESSION_FILE",
+  "PROVIDER",
+  "MODEL",
+  "REASONING_LEVEL",
+  "OFFLINE",
+  "TELEMETRY",
+  "INSTALLER_API_BASE",
+  "MANAGED_INSTALL_ROOT",
+  "CACHE_RETENTION",
+  "CLEAR_ON_SHRINK",
+  "EXPERIMENTAL",
+  "HARDWARE_CURSOR",
+  "HYPERLINKS",
+  "IMAGE_PROTOCOL",
+  "OAUTH_CALLBACK_HOST",
+  "PACKAGE_DIR",
+  "RADIUS_GATEWAY",
+  "SHARE_VIEWER_URL",
+  "SKIP_VERSION_CHECK",
+  "STARTUP_BENCHMARK",
+  "TIMING",
+  "TRUE_COLOR",
+  "TUI_DEBUG",
+  "TUI_DEBUG_REDRAW",
+  "TUI_ESC_TIMEOUT",
+  "TUI_WRITE_LOG",
+];
+const CORE_ONLY_ENV = new Set(CORE_ONLY_ENV_NAMES.map((name) => `PI_${name}`));
+
+/**
+ * Keep provider credentials in the agent process, never in shell/MCP
+ * children; the core's PI_* variables stay there too (the children get the
+ * OMNIRUSH_* spellings).
+ */
 export function sanitizeToolEnvironment(input: NodeJS.ProcessEnv = process.env): NodeJS.ProcessEnv {
   const output: NodeJS.ProcessEnv = {};
   for (const [key, value] of Object.entries(input)) {
-    if (!SECRET_ENV_NAMES.has(key) && value !== undefined) output[key] = value;
+    if (!SECRET_ENV_NAMES.has(key) && !CORE_ONLY_ENV.has(key) && value !== undefined) output[key] = value;
   }
   return output;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omnirush",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "description": "Omnirush — free daily tokens for the most powerful coding model on earth.",
   "license": "Apache-2.0",
   "type": "module",

package/scripts/brand-engine.js

@@ -23,10 +23,16 @@
 //      folders), OMNIRUSH_* copies of the env the core exports to shell
 //      commands, AI_AGENT, the HTTP User-Agent and temp-file names.
 //
+//   4. <package>/engine, a link to the core (src/compat.js
+//      ensureEngineLink): the launcher runs the core through it, so process
+//      listings and the doc paths in the system prompt name omnirush, not
+//      the core's npm package.
+//
 // Not renamed (internal, never shown): package ids and imports, code
 // identifiers, session entry/customType ids, telemetry attribute keys,
 // protocol values third-party providers expect, and the PI_* env names the
-// core reads (the launcher maps OMNIRUSH_* spellings onto them).
+// core reads (the launcher maps OMNIRUSH_* spellings onto them; shells the
+// core starts get the OMNIRUSH_* copies only).
 //
 // Maintenance: after bumping the core, run `node scripts/brand-engine.js`
 // and `node --test test/branding.test.js`; a target that moved is reported
@@ -38,11 +44,16 @@ import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 
+import { CORE_ONLY_ENV_NAMES, ensureEngineLink } from "../src/compat.js";
+
 const PKG = "@earendil-works/pi-coding-agent";
 const BRAND = "omnirush";
 export const BRAND_CONFIG_DIR = ".omnirush";
 const OUR_CHANGELOG = path.join(path.dirname(fileURLToPath(import.meta.url)), "..", "assets", "CHANGELOG.md");
 
+/** Matches the core's own PI_<NAME> variables (src/compat.js CORE_ONLY_ENV_NAMES), as JS regex source. */
+export const CORE_ENV_PATTERN = `/^PI_(${CORE_ONLY_ENV_NAMES.join("|")})$/`;
+
 // `from` must match the installed dist exactly; applied with replaceAll to
 // every dist/**/*.js. A `to` must never contain its own `from` (idempotency).
 export const REPLACEMENTS = [
@@ -157,13 +168,37 @@ export const REPLACEMENTS = [
   {
     label: "/bug disclaimer",
     from: "This report goes to the Pi developers (Earendil) and is not shared publicly. It includes your pi version,",
-    to: "This report goes to the agent core's upstream developers (Earendil) and is not shared publicly. It includes your omnirush version,",
+    to: "This report is not shared publicly. It includes your omnirush version,",
   },
   {
     label: "announcement easter egg",
     from: '"pi has joined Earendil"',
-    to: '"The agent core has joined Earendil"',
+    to: '"omnirush"',
+  },
+  {
+    // Upstream easter eggs typed as commands (/arminsayshi, /dementedelves;
+    // the third only fires for one third-party model): shown nothing.
+    label: "hidden /arminsayshi is inert (bundle)",
+    from: "handleArminSaysHi(){",
+    to: "handleArminSaysHi(_off){return;",
+  },
+  {
+    label: "hidden /dementedelves is inert (bundle)",
+    from: "handleDementedDelves(){",
+    to: "handleDementedDelves(_off){return;",
   },
+  { label: "upstream easter egg is inert (bundle)", from: "handleDaxnuts(){", to: "handleDaxnuts(_off){return;" },
+  {
+    label: "hidden /arminsayshi is inert (dist)",
+    from: "    handleArminSaysHi() {",
+    to: "    handleArminSaysHi(_off) { return;",
+  },
+  {
+    label: "hidden /dementedelves is inert (dist)",
+    from: "    handleDementedDelves() {",
+    to: "    handleDementedDelves(_off) { return;",
+  },
+  { label: "upstream easter egg is inert (dist)", from: "    handleDaxnuts() {", to: "    handleDaxnuts(_off) { return;" },
   {
     label: "external editor note",
     from: "Pi will resume when the editor exits.",
@@ -345,7 +380,20 @@ export const REPLACEMENTS = [
     label: "OMNIRUSH_* session env for shell commands",
     from: "ctx.thinkingLevel&&(env2.PI_REASONING_LEVEL=ctx.thinkingLevel)}let baseContext={command,cwd,env:env2}",
     to:
-      'ctx.thinkingLevel&&(env2.PI_REASONING_LEVEL=ctx.thinkingLevel)}for(let k of["SESSION_ID","SESSION_FILE","PROVIDER","MODEL","REASONING_LEVEL"])env2["PI_"+k]===void 0?delete env2["OMNIRUSH_"+k]:env2["OMNIRUSH_"+k]=env2["PI_"+k];let baseContext={command,cwd,env:env2}',
+      'ctx.thinkingLevel&&(env2.PI_REASONING_LEVEL=ctx.thinkingLevel)}for(let k of["SESSION_ID","SESSION_FILE","PROVIDER","MODEL","REASONING_LEVEL"])env2["PI_"+k]===void 0?delete env2["OMNIRUSH_"+k]:(env2["OMNIRUSH_"+k]=env2["PI_"+k],delete env2["PI_"+k]);let baseContext={command,cwd,env:env2}',
+  },
+  {
+    // The env every shell the core starts inherits (the bash tool, `!`
+    // commands, package installs): the core's own PI_* variables stay in
+    // the agent process; their OMNIRUSH_* copies are what commands see.
+    label: "no core PI_* variables in shell commands (bundle)",
+    from: "return{...process.env,[pathKey]:updatedPath}}function sanitizeBinaryOutput",
+    to: `let _env={...process.env,[pathKey]:updatedPath};for(let k of Object.keys(_env))${CORE_ENV_PATTERN}.test(k)&&delete _env[k];return _env}function sanitizeBinaryOutput`,
+  },
+  {
+    label: "no core PI_* variables in shell commands (dist)",
+    from: "    return {\n        ...process.env,\n        [pathKey]: updatedPath,\n    };\n}",
+    to: `    const _env = { ...process.env, [pathKey]: updatedPath };\n    for (const k of Object.keys(_env)) if (${CORE_ENV_PATTERN}.test(k)) delete _env[k];\n    return _env;\n}`,
   },
 
   // --- HTTP User-Agent (the omnirush gateway sees it) --------------------
@@ -377,6 +425,9 @@ export const REPLACEMENTS = [
   { label: "bug report zip", from: "`pi-bug-report-${id}.zip`", to: "`omnirush-bug-report-${id}.zip`" },
   { label: "TUI crash log", from: '"pi-tui-crash.log"', to: '"omnirush-tui-crash.log"' },
   { label: "TUI debug log", from: '"pi-tui-debug.log"', to: '"omnirush-tui-debug.log"' },
+  { label: "git package update marker", from: ".pi-update-incomplete", to: ".omnirush-update-incomplete" },
+  { label: "native module quarantine dir", from: '".pi-native-quarantine"', to: '".omnirush-native-quarantine"' },
+  { label: "package install root package.json name", from: '"pi-extensions"', to: '"omnirush-extensions"' },
 
   // --- update banner (belt-and-braces; the launcher sets PI_OFFLINE) -----
   // showNewVersionNotification returns before its body (the parameter is
@@ -507,6 +558,9 @@ function main() {
     console.log("omnirush: agent core not installed; skipped branding patch");
     return;
   }
+  // <package>/engine -> the core (what process listings and the system
+  // prompt's doc paths show; the launcher re-creates it when missing).
+  ensureEngineLink(repoRoot, report.piRoot);
   const patched = report.packageJsonPatched ? "package.json + " : "";
   const notes = report.changelogReplaced ? " + release notes" : "";
   console.log(

package/src/bin.js

@@ -54,7 +54,7 @@ import {
   yoloBanner,
 } from "./lib.js";
 import { installManagedTools } from "./tools.js";
-import { engineEnvAliases, migrateAgentDir, projectConfigDirName, resolveAgentDir } from "./compat.js";
+import { engineEnvAliases, ensureEngineLink, migrateAgentDir, projectConfigDirName, resolveAgentDir } from "./compat.js";
 import { customSessionDir, moveLegacySubagentSessions } from "./sessions.js";
 import { ensureRuntime, managedBunPath } from "../scripts/postinstall.js";
 import {
@@ -144,12 +144,31 @@ function piPackage() {
   return null;
 }
 
+// The core as users see it (process listings, the doc paths in the system
+// prompt, sub-agent command lines): <package>/engine, a link to the core's
+// folder (src/compat.js ensureEngineLink); null when the link cannot be made.
+let ENGINE_LINK_DIR = null;
+let ENGINE_ENTRY = null;
+
 function piEntry() {
   const found = piPackage();
-  if (found?.pkg?.bin?.pi) return path.join(found.dir, found.pkg.bin.pi);
+  if (found?.pkg?.bin?.pi) {
+    const dir = ensureEngineLink(path.resolve(__dirname, ".."), found.dir);
+    ENGINE_LINK_DIR = dir === path.resolve(found.dir) ? null : dir;
+    ENGINE_ENTRY = path.join(dir, found.pkg.bin.pi);
+    return ENGINE_ENTRY;
+  }
   throw new Error("could not locate the pinned agent core (broken install). Fix: npm install -g omnirush@latest");
 }
 
+/** The core's package dir as the link, unless the user points it elsewhere. */
+function engineDirEnv(env = process.env) {
+  const env2 = {};
+  if (ENGINE_ENTRY) env2.OMNIRUSH_CORE_ENTRY = ENGINE_ENTRY; // sub-agents start the core through the same path
+  if (ENGINE_LINK_DIR && !env.PI_PACKAGE_DIR && !env.OMNIRUSH_PACKAGE_DIR) env2.PI_PACKAGE_DIR = ENGINE_LINK_DIR;
+  return env2;
+}
+
 function ensureDirs() {
   fs.mkdirSync(OMNI_DIR, { recursive: true, mode: 0o700 });
   migrateLegacyAgentData();
@@ -875,6 +894,7 @@ function childEnv(auth) {
   const origin = (process.env.OMNIRUSH_ORIGIN || "").trim().replace(/\/+$/, "") ||
     gateway.replace(/\/+$/, "").replace(/\/v1$/, ""); // provider base -> manager origin
   return {
+    ...engineDirEnv(process.env),
     // OMNIRUSH_* spellings of the core's own settings (PI_* still work).
     ...engineEnvAliases(process.env),
     // Bootstrap values only: the agent (and every sub-agent it spawns)
@@ -1090,8 +1110,7 @@ Environment:
                          (default 50% of RAM), and none start below this
                          (default 10%); e.g. 25% or 6G. OMNIRUSH_AGENT_MEMORY=off
                          starts them without checking memory
-  OMNIRUSH_<SETTING>     the agent core's own settings (e.g. OMNIRUSH_CACHE_RETENTION;
-                         the older PI_<SETTING> names still work)
+  OMNIRUSH_<SETTING>     the agent core's own settings (e.g. OMNIRUSH_CACHE_RETENTION)
 
 Docs: https://omnirush.ai/omnirush — state is stored 0600 in ~/.omnirush`);
 }

package/src/compat.js

@@ -270,3 +270,68 @@ export function engineEnvAliases(env = process.env) {
   }
   return out;
 }
+
+/**
+ * The core's own variables the launcher and the core set for themselves
+ * (PI_<NAME>). Shell commands the agent runs, background jobs and MCP
+ * servers see their OMNIRUSH_<NAME> copies only; a PI_ variable that is
+ * not on this list (a user's own) passes through. Mirrored in
+ * scripts/brand-engine.js (the core's shell env) and
+ * assets/extensions/omnirush/secret-env.ts (tests keep them equal).
+ */
+export const CORE_ONLY_ENV_NAMES = [
+  "CODING_AGENT",
+  "CODING_AGENT_DIR",
+  "CODING_AGENT_SESSION_DIR",
+  "SESSION_ID",
+  "SESSION_FILE",
+  "PROVIDER",
+  "MODEL",
+  "REASONING_LEVEL",
+  "OFFLINE",
+  "TELEMETRY",
+  "INSTALLER_API_BASE",
+  "MANAGED_INSTALL_ROOT",
+  ...ENGINE_ENV_NAMES,
+];
+
+/** Folder, in the omnirush package, that links to the installed agent core. */
+export const ENGINE_LINK = "engine";
+
+/**
+ * The agent core as users see it: <package root>/engine, a link to the
+ * core's folder in node_modules (a junction on Windows). The launcher runs
+ * the core through it and hands it over as the core's package dir, so
+ * process listings, the doc paths in the system prompt and the sub-agent
+ * command lines name omnirush instead of the core's npm package. Made by
+ * the branding step at install and, when missing (archives, a read-only
+ * reinstall), here at launch. Never replaces a real folder. Returns the
+ * link, or the core's own folder when the link cannot be made.
+ */
+export function ensureEngineLink(packageRoot, coreDir, { fsImpl = fs, platform = process.platform } = {}) {
+  const link = path.join(packageRoot, ENGINE_LINK);
+  const real = path.resolve(coreDir);
+  const points = () => {
+    try {
+      return fsImpl.realpathSync(link) === fsImpl.realpathSync(real);
+    } catch {
+      return false;
+    }
+  };
+  if (points()) return link;
+  try {
+    let stat = null;
+    try {
+      stat = fsImpl.lstatSync(link);
+    } catch {
+      /* absent */
+    }
+    if (stat && !stat.isSymbolicLink()) return real;
+    if (stat) fsImpl.unlinkSync(link); // a stale link (the core moved)
+    if (platform === "win32") fsImpl.symlinkSync(real, link, "junction");
+    else fsImpl.symlinkSync(path.relative(path.dirname(link), real) || ".", link, "dir");
+  } catch {
+    /* read-only install or a concurrent launch: checked below */
+  }
+  return points() ? link : real;
+}