pi-agy-acp 0.1.0 → 0.1.1

package/docs/development.md

@@ -70,6 +70,30 @@ To inspect the package contents without publishing:
 npm pack --dry-run
 ```
 
+## CI and releases
+
+`ci.yml` checks pull requests and pushes to `main`. `release.yml` runs only for
+version-tag pushes or manual runs on an existing tag, so ordinary commits do not
+run a second test suite or trigger publication. Both use Node.js 24. There is no
+committed lockfile, so dependency installation uses `npm install`.
+
+To release, bump `package.json`, commit the change, and push its matching
+`vX.Y.Z` tag. The workflow accepts stable versions only; publish one version at
+a time and never move a published tag. It validates the tag and version, then
+checks, tests, and packs before publishing. Only a registry 404 means the version
+is absent; network, authentication, and server errors stop the job.
+
+Configure npm [Trusted Publishing](https://docs.npmjs.com/trusted-publishers/)
+for owner `fdkevin0`, repository `pi-agy-acp`, and workflow filename `release.yml`.
+The workflow grants OIDC permission to the publish job and uses npm >= 11.5.1.
+An optional `NPM_TOKEN` repository secret supports token authentication through
+`NODE_AUTH_TOKEN`; use a granular write token with the required 2FA bypass.
+
+If npm publication succeeds but GitHub Release creation fails, rerun that tagged
+workflow, or use `gh workflow run release.yml --ref vX.Y.Z`. Branch-based manual
+runs are rejected. Existing npm versions are not republished, and GitHub Releases
+are created only for existing tags with `gh release create --verify-tag`.
+
 ## Documentation conventions
 
 Keep all project documentation in English. Use progressive disclosure:

package/docs/reference.md

@@ -98,6 +98,14 @@ PI_AGY_COMMAND=/absolute/path/to/agy pi -e ./index.ts
 The dedicated directory isolates the bridge agent from your normal agy tools and
 plugins. It contains agy-managed session data, logs, and the extension's model cache.
 
+Closed temporary ACP sessions have their database files and brain directories
+removed automatically. Before starting ACP, the extension also removes leftover
+session files, summary indexes, and numeric `acp.log.<pid>` backups. It retains
+the current `acp.log`, model cache, and authentication files; Pi owns the history
+used to rebuild sessions. Cleanup is best-effort if files are locked. Use a
+different `PI_AGY_HOME` for each concurrently running Pi instance, since startup
+cleanup assumes exclusive use of the directory.
+
 With file-backed authentication, the extension copies the existing OAuth token
 from your normal agy directory and sets its permissions to `0600`. Do not commit
 or share this directory. Authentication and token refresh remain agy's responsibility.
@@ -106,7 +114,9 @@ or share this directory. Authentication and token refresh remain agy's responsib
 
 Loading the extension reads the cached model catalog, or falls back to five model
 families, without starting agy. Pi's model refresh queries ACP for the account's
-catalog. The first request also discovers models and validates the selection.
+catalog once per runtime. Concurrent refreshes share one discovery session;
+after a refresh or normal session observes the live catalog, later refreshes
+reuse it. The first request also discovers models and validates the selection.
 Cache-only refreshes and refreshes already cancelled before startup do not launch
 ACP. Server-advertised models are not hidden, and live catalog changes update
 Pi's model selector. The selector exposes only the ACP reasoning levels offered

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-agy-acp",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "type": "module",
   "license": "MIT",
   "description": "Google Antigravity ACP provider extension for Pi Coding Agent",

package/src/preflight.ts

@@ -16,6 +16,9 @@ import {
   writeFileSync,
   readFileSync,
   statSync,
+  lstatSync,
+  readdirSync,
+  rmSync,
 } from 'node:fs'
 import { homedir } from 'node:os'
 import { delimiter, isAbsolute, join } from 'node:path'
@@ -208,6 +211,46 @@ export function syncOAuthToken(
   }
 }
 
+/** Remove only one closed ACP session's files; session ids come from the agent. */
+export function removeSessionArtifacts(home: string, sessionId: string): void {
+  if (
+    typeof sessionId !== 'string' ||
+    sessionId.length === 0 ||
+    /[^A-Za-z0-9._-]/.test(sessionId) ||
+    sessionId === '.' ||
+    sessionId.includes('..')
+  )
+    return
+  const appData = join(home, 'agy')
+  if (!isRealDirectory(appData)) return
+  removeArtifacts(join(appData, 'conversations'), [
+    `${sessionId}.db`,
+    `${sessionId}.db-wal`,
+    `${sessionId}.db-shm`,
+  ])
+  removeArtifacts(join(appData, 'brain'), [sessionId])
+}
+
+function isRealDirectory(path: string): boolean {
+  try {
+    return lstatSync(path).isDirectory()
+  } catch {
+    return false
+  }
+}
+
+function removeArtifacts(directory: string, names: readonly string[]): void {
+  // Never follow a replaced parent directory into data outside the isolated home.
+  if (!isRealDirectory(directory)) return
+  for (const name of names) {
+    try {
+      rmSync(join(directory, name), { recursive: true, force: true })
+    } catch {
+      // Locked or unreadable leftovers can be retried on the next startup.
+    }
+  }
+}
+
 /**
  * Write the isolated Antigravity home: bridge agent and ACP settings.
  * @param home - absolute home directory used as `--gemini-dir`.
@@ -240,6 +283,24 @@ export function prepareHome(
   )
   const appData = join(home, 'agy')
   mkdirSync(appData, { recursive: true })
+  // Pi owns conversation history; no ACP session is restored across processes.
+  // shortcut: cleanup requires an exclusive home; add locking before supporting shared homes.
+  removeArtifacts(appData, [
+    'conversations',
+    'brain',
+    'conversation_summaries.db',
+    'conversation_summaries.db-wal',
+    'conversation_summaries.db-shm',
+    'jetbox_summaries_proto.pb',
+  ])
+  try {
+    removeArtifacts(
+      home,
+      readdirSync(home).filter((name) => /^acp\.log\.\d+$/.test(name)),
+    )
+  } catch {
+    // Log cleanup is best-effort when the home cannot be listed.
+  }
   syncOAuthToken(home, userHome)
   const settingsPath = join(appData, 'settings.json')
   const settings = readJson(settingsPath)

package/src/runtime.ts

@@ -67,6 +67,7 @@ import {
   GPT_OSS_CONTEXT_WINDOW,
   DEFAULT_CONTEXT_WINDOW,
   prepareHome,
+  removeSessionArtifacts,
   readVersion,
   resolveAgyBinary,
   syncOAuthToken,
@@ -184,6 +185,7 @@ export class AntigravityRuntime {
   private state: RuntimeStatus['state'] = 'idle'
   private lastError: string | undefined
   private tierDiscovery: Promise<void> | undefined
+  private warmupPromise: Promise<void> | undefined
   private readonly conversations = new Map<string, Conversation>()
   private readonly tenants = new Map<string, Conversation>()
   private readonly mutex = new KeyedMutex()
@@ -344,24 +346,39 @@ export class AntigravityRuntime {
    * @returns resolves when discovery finished.
    */
   async warmup(): Promise<void> {
-    const proc = await this.ensureReady()
-    const result = await proc.newSession(
-      {
-        cwd: this.preflight?.workspace ?? this.home,
-        mcpServers: [],
-      },
-      { onUpdate: () => undefined },
-      120_000,
-    )
-    if (
-      this.catalog.observe(
-        result.configOptions,
-        result.models?.availableModels,
-        result._meta?.antigravity?.tier,
+    if (this.warmupPromise !== undefined) return this.warmupPromise
+    if (this.catalog.observed) return
+    this.warmupPromise = (async () => {
+      const proc = await this.ensureReady()
+      if (this.catalog.observed) return
+      const result = await proc.newSession(
+        {
+          cwd: this.preflight?.workspace ?? this.home,
+          mcpServers: [],
+        },
+        { onUpdate: () => undefined },
+        120_000,
       )
-    )
-      this.host.onModelsChanged()
-    await proc.closeSession(result.sessionId)
+      try {
+        if (
+          this.catalog.observe(
+            result.configOptions,
+            result.models?.availableModels,
+            result._meta?.antigravity?.tier,
+          )
+        )
+          this.host.onModelsChanged()
+      } finally {
+        try {
+          await proc.closeSession(result.sessionId)
+        } finally {
+          removeSessionArtifacts(this.home, result.sessionId)
+        }
+      }
+    })().finally(() => {
+      this.warmupPromise = undefined
+    })
+    return this.warmupPromise
   }
 
   /** Stop every session, the process, and the bridge. */
@@ -593,7 +610,10 @@ export class AntigravityRuntime {
   }
 
   private runPreflight(): Promise<PreflightResult> {
-    if (this.preflight !== undefined) return Promise.resolve(this.preflight)
+    if (this.preflight !== undefined) {
+      prepareHome(this.home)
+      return Promise.resolve(this.preflight)
+    }
     this.preflightPromise ??= (async () => {
       const config = this.host.config
       const binary = resolveAgyBinary(config.command)
@@ -966,7 +986,10 @@ export class AntigravityRuntime {
 
   private async resetSession(conv: Conversation): Promise<void> {
     if (conv.sessionId !== undefined && conv.process !== undefined) {
-      void conv.process.closeSession(conv.sessionId)
+      const sessionId = conv.sessionId
+      void conv.process
+        .closeSession(sessionId)
+        .finally(() => removeSessionArtifacts(this.home, sessionId))
     }
     this.releaseTenant(conv)
     conv.sessionId = undefined