pi-bro 0.26.0 → 0.28.0

package/CHANGELOG.md

@@ -2,6 +2,37 @@
 
 All notable changes to pi-bro are documented here.
 
+## [0.28.0] - 2026-11-05
+
+### Highlights
+
+- Simplify gains a source-focused modal with internal /simplify, /text, /file, /url, /copy, /clear and /help commands.
+- Bare /bro captures a fresh latest assistant response; /bro simplify reopens the last Simplify view without a new model call.
+- M changes explanation mode for that source without rewriting the saved default; R retries the same source.
+- Existing explicit top-level source forms and backend selection remain compatible.
+
+
+## [0.27.0] - 2026-10-30
+
+### Highlights
+
+- `/bro remember-me` helps you write and explicitly approve personal memory entries with a short, scan-friendly statement and expandable context.
+- `about_user` lets the main Pi agent read an overview, find memories by topic, and unfold selected entries without extra model calls.
+- Memory-writing guidance preserves conditions, scope, source, exceptions, user attribution and unresolved conflicts across short and expanded views.
+
+### Added
+
+- Private Remember Me modal: `/save`, `/list`, `/expand`, `/edit`, `/delete`, `/new`, `/help`.
+- Versioned local store with stable IDs, validated entries, bounded file size, revision checks and atomic writes.
+- Focused tests and `docs/remember-me.md`.
+
+### Limits
+
+- Automatic semantic conflict detection depends on model judgment and is not exhaustive.
+- External CLI agents do not receive the main Pi `about_user` tool automatically.
+- The old `/bro preferences` file remains separate until a reviewed migration; no automatic import occurs.
+
+
 ## [0.26.0] - 2026-10-20
 
 ### Highlights

package/README.md

@@ -49,6 +49,7 @@ For a first success, type this in Pi after setting up a backend:
 | `/bro` | Explains the agent's latest completed reply (requires one) |
 | `/bro btw What is a race condition?` | Asks a private side question |
 | `/bro show` | Draws the current session's recent conversation, if any |
+| `/bro grill-me Should agents talk freely to each other?` | Questions your assumptions privately, one at a time |
 | `/bro elevate Improve how we search company documents` | Find expert gaps before giving Pi a task |
 
 File and webpage examples need your own real path or URL; see [how to explain them](docs/features/explain.md#explain-a-document). For a step-by-step first run, see [Getting started](docs/getting-started.md).
@@ -60,6 +61,8 @@ File and webpage examples need your own real path or URL; see [how to explain th
 | `/bro`, `/bro text`, `/bro file`, `/bro url` | **[Explain](docs/features/explain.md).** A plain-language version of the agent's last reply, pasted text, a PDF/DOCX/Markdown file, or a public webpage. Three modes: `brief`, `balanced`, `faithful`. |
 | `/bro show` | **[Show](docs/features/show.md#bro-show).** The last few turns drawn as a shape (call tree, file tree, diff, pseudocode, a sequence diagram, or an HTML layout) instead of prose. |
 | `/bro elevate` or **Ctrl+Shift+E** | **[Elevate](docs/elevate.md).** Discover missing expert considerations, select useful improvements, and rewrite your task without submitting it. Shares BTW backend settings. |
+| `/bro remember-me [thought]` | **[Remember Me](docs/remember-me.md).** Privately clarify and approve short personal memories with unfoldable background. Agents can call `about_user` to read summaries and expand IDs. |
+| `/bro grill-me` | **[Grill Me](docs/grill-me.md) (experimental).** A private, opinionated decision interview: light, balanced or exhaustive; one question per round; `/consolidate` drafts a brief without ending the interview; `/insert-last-message` explicitly returns the latest reply to the editor. Uses BTW model settings; read-only restrictions vary by backend. |
 | `/bro btw` | **[Side questions](docs/features/btw.md#bro-btw-side-conversation).** A separate conversation seeded with recent context, so you can ask without interrupting the agent. ⚠️ [Full-permission mode](#what-leaves-your-machine) can edit files. |
 | `/bro guided-review <PR>` | **[Guided Review](docs/guided-review.md).** An explanation and quality assessment of a GitHub PR, with ranked findings, source evidence and private questions. Claude, Muse, or Pi is recommended for untrusted PRs. |
 | `bro_advisor` tool | **[Second opinion](docs/features/advisor.md#bro-advisor).** A tool your agent can call mid-task; a fresh backend process reviews the session snapshot, can inspect the workspace when needed, and returns advice to the agent. ⚠️ [Runs with permissions bypassed](#what-leaves-your-machine). |
@@ -101,6 +104,7 @@ which may keep it under their own policies. Paths below are under
 | Explain | The agent's last reply, your pasted text, or text extracted from your file or webpage, plus your preferences | Nothing; the last result stays in memory |
 | Show | User and assistant text from recent turns (no tool calls, tool results, reasoning or images), plus your preferences | Diagram pages in `pi-bro-<uid>/` in your system temp folder |
 | Side questions | Your questions and up to the last 8 turns of conversation text, plus your preferences | Nothing; the thread stays in memory |
+| Grill Me | Topic, interview turns, up to the last 8 main-session text turns and preferences; any workspace files the selected inspector reads | Nothing; interview and brief are in memory |
 | Elevate | Your objective, selected findings, all current-branch user/assistant text; Full also includes tool-call arguments and text results, and preferences | Nothing; the workflow stays in memory |
 | Guided Review | The PR description and diff, the files the backend reads, your questions, plus your preferences | Reviews and captured source in `bro-reviews/`, with no automatic cleanup |
 | Advisor | The agent's system instructions, tool list and whole conversation, including tool calls and results (reasoning and images omitted), plus your steering | Steering in `bro-advisor.md` and the session file |
@@ -118,6 +122,7 @@ the agent as tool results.
 > These run the backend in your workspace with its permission checks bypassed:
 > - **Advisor:** it can read, edit and run commands. "Advise, don't edit" is
 >   only an instruction.
+> - **Grill Me `/access full`:** explicitly opts into unrestricted workspace permissions. The no-edits prompt is not an access control.
 > - **BTW full-permission mode** (turned on with `/mode` inside BTW): it is
 >   meant to edit files and run commands.
 > - **Grok:** its sandbox is off except during Guided Review, which uses the
@@ -137,7 +142,7 @@ and [Privacy and safety](docs/reference/data-and-permissions.md#privacy-and-safe
 - No fallback: if the chosen backend, model or effort fails, Bro shows that
   backend's error instead of switching. → Run `/bro doctor`.
 - Elevate runs fresh restricted calls through the BTW model setting. Restricted does not always mean sandboxed; see [access and retention](docs/reference/data-and-permissions.md). The shortcut may not work in all terminals: use `/bro elevate` instead.
-- BTW threads and the last explanation live in memory only and clear on
+- BTW and Grill Me threads and the last explanation live in memory only and clear on
   reload or restart.
 - Guided Review runs in local interactive Pi only and does not post to
   GitHub.

package/docs/README.md

@@ -13,6 +13,8 @@ Start with what you want to do. The [README](../README.md) explains the product,
 - [Explain a local file](features/explain.md#explain-a-document) or [webpage](features/explain.md#explain-a-webpage).
 - [Visualize a conversation](features/show.md#bro-show) — Show diagrams.
 - [Ask a private side question](features/btw.md#bro-btw-side-conversation) — BTW.
+- [Remember personal context for agents](remember-me.md) — approved short memories, expandable background and the read-only `about_user` tool.
+- [Get grilled on a decision](grill-me.md) — one question at a time in a private modal, then copy a decision brief.
 - [Improve a request before sending it](elevate.md) — Elevate: discover expert gaps, choose improvements, rewrite the task.
 - [Investigate a PR](guided-review.md) — Guided Review.
 - [Get an agent's second opinion](features/advisor.md#bro-advisor) — Advisor; review its permissions first.

package/docs/grill-me.md

@@ -0,0 +1,63 @@
+# Grill Me (experimental)
+
+[Docs home](README.md) · [Commands](reference/commands.md) · [Safety](reference/data-and-permissions.md)
+
+`/bro grill-me` opens an independent decision interview in Bro's modal, without adding turns to Pi's main conversation.
+
+```text
+/bro grill-me Should child agents communicate freely?
+/bro grill-me
+```
+
+With a topic, start a new interview. Without one, reopen the current interview or enter a topic inside the modal. A proposal prompts scrutiny; an open question prompts discovery. Bro offers reasoned pushback, then one question with lettered choices, including an open-ended alternative. Answer with a letter or your own words. Questions request a horizontal divider, a distinct **Question** heading, and exactly one **(Recommended)** option with a short reason. Recommendations are provisional; model adherence is not guaranteed.
+
+## How Bro works with you
+
+Grill Me is a **context-rich thinking partner**, not a review pipeline. It can help you discover a position from an open question or test a proposal you already have. If you propose a solution before explaining the problem, Bro looks for the goal and constraints that matter; when those are already clear, it uses them rather than repeating an intake checklist.
+
+Bro contributes options and reasons, asks about the most consequential choice still open, and may inspect relevant workspace material when its backend permits it. It should check available facts rather than guessing, ask *you* about preferences and trade-offs, and explain meaningful uncertainty. Good arguments can persuade Bro; it should not invent objections to prolong the interview.
+
+As the discussion develops, Bro treats your **agreed choices and reasons** differently from untested assumptions and Bro's own suggestions. You can correct or change a constraint in normal conversation. Bro should carry that change forward and avoid reopening settled ground without a reason.
+
+`/consolidate` captures the current position for a handoff, at whatever level of detail the topic warrants: goals, key constraints, endorsed decisions and why, material trade-offs, unresolved questions, and a next step. It does not promote Bro's recommendations into decisions you never made. You can consolidate early, then continue and consolidate again.
+
+This takes inspiration from the context-rich **Elephant** in Google's [Elephant–Goldfish Model](https://github.com/google/elephant-goldfish-model). Grill Me does **not** dispatch Goldfish reviewers, require a design document, or impose review/approval stages. It remains one dialogue in Bro's modal.
+
+## Controls
+
+| Command inside the modal | Effect |
+| --- | --- |
+| `/consolidate` | Generate a current decision brief. Does not end the interview or insert anything. |
+| `/insert-last-message` | Insert the latest completed Bro reply, including a consolidated brief, into an empty Pi editor **without sending**. No model call. |
+| `/depth light` | Quick, focused questioning |
+| `/depth balanced` | Default: material assumptions and trade-offs |
+| `/depth exhaustive` | Deeper alternatives, evidence and failure cases |
+| `/retry` | Retry the failed/cancelled operation, otherwise regenerate the latest reply. Never repeats insertion. |
+| `/new <topic>` | Start over after confirmation. Resets depth to balanced and access to inspection. |
+| `/access inspect` | Request inspection tools; enforcement depends on backend |
+| `/access full` | Request full permissions; requires typing `yes` after a warning |
+| `/help` | Show commands on demand; **Esc returns to the interview** |
+| Esc | Close and cancel active work; preserve completed discussion |
+
+Type `/` to see matching commands; keep typing to narrow suggestions and press **Tab** to complete the first match. Completion never submits. From help, Esc returns to the discussion; a second Esc closes the modal.
+
+For confirmation prompts, type `yes` to proceed; anything else cancels. Depth can change between replies without losing the discussion. There are no question quotas or finished/locked states. Consolidate whenever useful, inspect the brief, then explicitly insert it or continue talking. The brief includes the current position, reasons, objections, unresolved questions and next actions. Insertion never overwrites a draft or submits it.
+
+The old `/finish`, `/copy`, `/copy-all`, `/insert`, `/insert-all`, `/clear`, and entry depth flags have been removed from this experimental interface. BTW commands are unchanged.
+
+Grill Me uses the **BTW model/backend/effort** selection from `/bro config`, but has its own independent thread. The header shows depth and effective access; `/help` keeps the footer short. Full access and Agy write risks remain visible in the header even when another notice is shown.
+
+## Access, privacy and limits
+
+- Inspection uses the Guided Review backend path in your current workspace. Claude, Muse and Pi have file-only tools. Codex and Grok have read-only sandboxes with shell access. **Agy inspection can still write project files.** No-edit prompts are not security controls.
+- Full access can read, edit and execute commands. Bro instructs the model not to make changes, but cannot enforce that instruction. There is no automatic escalation.
+- Each turn makes a fresh backend call replaying the complete interview. Long interviews cost more and may exceed context limits; there is no hidden truncation or fallback.
+- The provider receives your topic, interview history, Bro preferences and up to eight recent main-session user/assistant text turns (40,000 characters). Captured context excludes tool calls/results, hidden reasoning and images. Backend tools can inspect additional workspace content.
+- Bro keeps the interview in memory, lost on reload, session change or exit. Backend/provider retention is separate; see [backend retention](reference/data-and-permissions.md#backends-access-and-retention).
+- Closing discards partial output, preserves completed replies, and restores cancelled input unless a newer draft exists. Retry preserves the previous reply until replacement succeeds. Cancellation cannot undo backend changes; descendant cleanup on Windows and abrupt host shutdown are not guaranteed.
+
+## Comparison
+
+BTW is for side questions. Elevate improves an assignment. Grill Me tests a decision through dialogue. Its advantage over a standalone questioning skill is modal isolation and explicit return to Pi, not a claim of smarter questioning.
+
+See the [evaluation record](plans/grill-me-evaluation.md). Historical live results predate the command redesign and multiple-choice guidance; they do not validate the revised experience.

package/docs/reference/commands.md

@@ -6,7 +6,7 @@
 
 | Source | Command | What Bro does |
 | --- | --- | --- |
-| Latest assistant reply | `/bro` | Explains the latest completed reply without adding the result to the conversation. |
+| Latest assistant reply | `/bro` | Opens Simplify and explains the latest completed reply without inserting the result into Pi's conversation. |
 | Pasted text | `/bro text <text>` | Explains text supplied directly in the command. |
 | Local document | `/bro file <path>` | Extracts text from a workspace-local Markdown, text, PDF, or DOCX file. |
 | Public webpage | `/bro url <url>` | Fetches one public HTML page and extracts its main readable content. |
@@ -22,12 +22,13 @@ text directly captures a new source the same way.
 
 | Command | Description |
 | --- | --- |
-| `/bro`, `/bro simplify`, or `/bro text` | Explain the latest completed assistant response. |
+| `/bro` | Open Simplify and explain the latest completed assistant reply. |
+| `/bro simplify` | Reopen the last Simplify screen within this Pi session, without a new model call. |
 | `/bro text <text>` | Explain pasted text. |
 | `/bro <input>` | Explain it directly: a lone URL runs the webpage reader, an existing workspace file with a supported extension runs the document reader, and anything else is pasted text. A quoted path with spaces is routed too when the file exists. |
 | `/bro file <path>` | Explain a workspace-local `.md`, `.markdown`, `.txt`, `.pdf`, or `.docx` file. |
 | `/bro url <url>` | Explain one public, text-based webpage. |
-| `/bro open` | Reopen the latest explanation without calling the simplifier again. |
+| `/bro open` | Legacy compatibility shortcut to the last result. No `/open` command inside Simplify. |
 | `/bro show [n-turns] [query]` | Draw recent session turns (default last 1) as shapes instead of prose, from user and assistant conversation text only — tool calls, tool results, reasoning, and images are omitted. An optional query steers what the shapes focus on, with or without a leading turn count. |
 | `/bro doctor` | Check Bro's settings, preferences, and each selected backend, with the effective backend/model/effort per feature. |
 | `/bro mode [brief\|balanced\|faithful]` | View or choose the explanation mode. |
@@ -35,6 +36,8 @@ text directly captures a new source the same way.
 | `/bro config` | Open settings for the shared backend/model/effort, explain mode, show turns, and per-capability (explain/show/btw/advisor/review) overrides. |
 | `/bro guided-review <PR number or URL>` | Automatically explain and assess a captured PR in local Pi, with source evidence and optional private questions. Opening the same PR restores its saved review. |
 | `/bro guided-review` | List saved reviews; `resume` is an alias. |
+| `/bro remember-me [thought]` | Start a private memory-writing conversation, browse and expand memories, and approve saves explicitly. [Guide](../remember-me.md). |
+| `/bro grill-me [topic]` | Private one-question-at-a-time decision interview. Supply a topic to start fresh; omit it to resume. `/consolidate` drafts a brief; `/insert-last-message` inserts explicitly without sending. `/help` lists modal controls. [Guide](../grill-me.md). |
 | `/bro elevate [request]` | Improve an assignment before execution. Discover up to five gaps, choose useful findings, and insert a revised request without submitting it. **Ctrl+Shift+E** can use your unsent draft. See [Elevate](../elevate.md). |
 | `/bro btw [question]` | Open a side conversation in a modal, seeded with recent main-session context. Starts conversation-only; type `/mode` inside to toggle full permission (read and edit the workspace) without losing the thread. |
 | `/bro advisor` | Quick notice of whether the executor's `bro_advisor` tool is available right now, pointing at `/bro config`, `/bro advisor-steer`, and `/bro doctor`. |
@@ -48,3 +51,7 @@ Giving `/bro` the input directly works the same way:
 /bro docs/report.pdf
 /bro any other text is explained as pasted text
 ```
+
+## Simplify modal (single-source explanation)
+
+Once inside Simplify, use `/simplify` for the latest completed reply; `/text <text>`, `/file <path>`, `/url <url>` for a new source; `/copy` to copy the current explanation; `/clear` to return to the empty screen; and `/help` for controls. **M** changes the one-off Brief/Balanced/Faithful mode and re-explains the captured source; **R** retries the same source. This modal is not a conversation and does not persist history across restarts. Legacy `/bro text|file|url` shortcuts keep working. The global menu consolidation is tracked separately.

package/docs/reference/data-and-permissions.md

@@ -93,6 +93,7 @@ When shaping an answer, each part has one owner:
   seeded main-session conversation text (plus earlier turns when a native
   session is reseeded) to the selected backend. In full permission mode the
   side agent can additionally read and edit the workspace.
+- **Grill Me requests**: `/bro grill-me` sends the user-supplied topic, their answers, the full private Grill Me transcript so far, preferences, and up to 8 recent main-session text turns (40,000 characters) to the BTW-selected provider. It runs **fresh** each turn in the current workspace, via the Guided Review *inspection execution path* (not the Guided Review UI or checkout). Claude, Muse and Pi use file-only tools; Codex and Grok use a read-only sandbox with shell; **Agy can still write inside the project**. The model is always told not to edit or run mutating commands, but that prompt is not enforced. Optional `/access full` explicitly uses a fresh, full-permission backend call and gives the backend unrestricted tools; it never happens automatically. Grill Me and BTW hold separate in-memory threads, and nothing enters the main agent unless the user inserts it into an empty editor. See [Grill Me](../grill-me.md).
 - **Guided Review requests**: PR identity/description, captured diff, relevant private discussion and preferences go to the selected backend, which can inspect captured files. Main-session context is not attached. Claude (`--restricted`, file tools only), Muse (write/shell/web disabled), and Pi (`read/grep/find/ls` only, in-process) use strict file-only inspection and are recommended for untrusted PRs. Codex and Grok inspect the captured checkout under a read-only sandbox; Agy's `--sandbox` still allows in-project writes. All three run shell commands and show an advisory. Prompt injection can still corrupt conclusions or reveal captured content to the provider; this is not a general confidentiality guarantee. See [Guided Review access and storage](../guided-review.md#access-privacy-and-storage).
 - **Preferences**: `bro-preferences.md` is sent with every explain, Show,
   BTW, Elevate, and Guided Review request to the selected backend. It is never sent to the advisor or

package/docs/reference/settings.md

@@ -111,3 +111,7 @@ that is set):
 `bro-prompt.md`, the full prompt template from earlier versions, is no longer
 read. Move what you want to keep into `/bro preferences`, and choose
 `/bro mode brief` for the original ELI-simpleton instruction.
+
+## Remember Me
+
+`/bro remember-me` manages approved personal memories in `bro-memories.json` in the same user agent directory. Each entry has a stable ID, a scan-first short statement, and optional scope, exceptions, uncertainty and source context in an expanded view. The agent-facing `about_user` tool reads them on demand. `/bro preferences` remains a separate legacy file; no automatic migration or duplicate injection occurs. See [Remember Me](../remember-me.md).

package/docs/remember-me.md

@@ -0,0 +1,90 @@
+# Remember Me
+
+[Docs home](README.md) · [Commands](reference/commands.md) · [Preferences](reference/settings.md#preferences)
+
+Use `/bro remember-me` to browse your approved personal memories, or `/bro remember-me <thought>` to start drafting from your words and recent Pi conversation.
+
+## Write through conversation
+
+Bro reviews your statement and existing memories. It may ask one material question, flag a competing entry, or propose a short statement with deeper background. **Nothing saves until you type `/save`.** You can reply normally to refine a proposal. When you correct it, the old draft remains visible but cannot be approved until Bro returns a revised proposal. Questions and failed model calls never silently re-enable `/save`.
+
+A proposed memory always has:
+- **Subject:** a distinct topic, such as Testing or Delegation
+- **Short statement:** active, clear and usable on its own; include qualifications that change its meaning
+- **Expanded background:** context, explanations and original wording; optional scope, exceptions, source context, uncertainty and whether wording reflects a user statement or user-approved interpretation
+
+Use the same vocabulary across related memories. Put useful distinguishing words first. Never convert “prefers lean tests” into “dislikes tests,” or “autonomy within an approved plan” into “unrestricted autonomy.” Summaries and expanded content must agree.
+
+If the user hasn't resolved a conflict, don't pretend it is settled. Bro shows a potential conflict in the proposal. The user decides whether to revise it, update an existing memory or save a qualified entry.
+
+## Controls
+
+| Input | Action |
+| --- | --- |
+| Free text | Continue clarifying or refining |
+| `/save` | Approve and persist the current proposal |
+| `/list [page|all]` | Page through the current search (20 per page), or use `/list all` to return to all memories; preserve the proposal |
+| `/search <words>` | Start a filtered search; `/list 2` continues its second page without dropping the proposal |
+| `/expand <id>` | Show background, source, scope, exceptions and uncertainty |
+| `/edit <id>` | Edit an existing memory while keeping its stable ID |
+| `/delete <id>` | Delete after typing yes |
+| `/context show|on|off` | See or omit the captured Pi context before transmitting |
+| `/confirm-revision` | Approve after comparing a stale proposal with changed memories |
+| `/new` | Discard the draft without changing saved memories |
+| `/help` | Explain commands and boundaries |
+
+Before the first model call, Bro identifies the selected model/backend, the captured main-session context, and that related saved memories and legacy style preferences will be sent. The initial thought is prefilled but not sent until the user presses Enter. Use `/context show` to inspect what was captured or `/context off` to omit it.
+
+Browsing and failed saves preserve the proposal. If the store changed after the proposal was reviewed, `/save` compares the original and current target (and related entries) and **does not save**. An explicit `/confirm-revision` approves against that exact new revision; if it changes again, another review is required. Durable drafts across restarts are not implemented.
+
+Esc closes the modal and cancels an active model call. The draft conversation is not durable; **approved saved memories are durable**. Saved entries survive Pi restarts and project changes.
+
+## Agent access
+
+The main Pi agent gets a read-only `about_user` tool:
+
+```text
+about_user()                         → short statements and IDs
+about_user({query:"testing"})        → matching summaries
+about_user({offset:20,limit:20})      → next page of memories
+about_user({expand:["m-..."]})       → approved background for an ID
+```
+
+The agent can scan a summary before deciding what to unfold. The reader performs no new model call. It does not mutate stored entries. The user's current request wins over a standing memory.
+
+## Boundaries
+
+Stored memories live in `~/.pi/agent/bro-memories.json` (or under `$PI_CODING_AGENT_DIR`), not project Git repos. Files are personal: keep private backups and avoid sharing them in logs. Selected model providers receive the words you provide to Remember Me, recent session text captured at opening, and existing memory statements for conflict checking. Read-only `about_user` returns only the requested summaries/expansions to the calling main Pi agent; that agent may send returned content to its model provider.
+
+**Agent access is currently the registered main Pi tool only.** External CLIs and isolated Bro sessions do not receive it automatically. The existing `/bro preferences` file remains unchanged; no automatic migration or conflict reconciliation is claimed.
+
+Remember Me uses **the backend and model selected for BTW**. Every valid BTW backend is supported through Bro's existing restricted **explain** execution path. It never silently changes provider or model. Restricted means different things across backends, not a universal promise of no tools or no side effects:
+
+| Backend | Current restricted drafting behavior |
+| --- | --- |
+| Agy (default) | `--sandbox`, temporary working directory. Sandbox limits shell actions; it is **not** a no-tools or no-write guarantee. |
+| Codex | `--sandbox read-only`, ephemeral execution and temporary working directory; read-only sandbox, **not** no-tools. |
+| Claude | CLI tools disabled with `--tools ""`, strict empty MCP config, temporary working directory, no session persistence. |
+| Pi | Fresh SDK session with no tools, extensions, skills, or project context files, using the **selected configured physical model**. |
+| Muse | Write and shell disabled, approvals disabled, temporary working directory. Do not infer that all other abilities are disabled. |
+| Grok | A restricted **prompt request**, but CLI sandbox off and permissions bypassed; it is **not** a technical tool/write boundary. |
+
+The modal shows a backend-specific notice before sending data. Bro's `/save` gate controls **only writes to its approved memory store**. It does not prevent any action that the selected backend's own permissions might allow. See [execution configuration](reference/settings.md) for backend details.
+
+Live model behavior and the actual backend installation are separate from controlled-response tests.
+
+**Coexistence policy:** `/bro preferences` remains active as a legacy *answer-style* file for older Bro features. `about_user` reads only approved Remember Me memories. Current user instructions take precedence. If an approved memory conflicts with legacy preferences, the approved memory is the source for the personal fact or lasting rule; do not treat two conflicting stores as equally authoritative. Bro should surface the disagreement during drafting. There is no silent migration or overwrite; a reviewed migration remains a separate task.
+
+## Examples
+
+**Short:** `Testing: Seek sufficient confidence at the lowest reasonable maintenance cost; do not optimize for raw test count.`
+
+**Expanded:** The user values tests that protect meaningful behavior and rejects needless duplication. This does **not** mean the user dislikes tests. Scope: project test strategy. Source: explicit user preference.
+
+**Short:** `Delegation: Allow agents to act independently within an approved coordination plan; reserve consequential scope changes for human approval.`
+
+**Expanded:** The user wants strong initiative after authorizing the plan, not unrestricted delegation. An agent can coordinate approved subtasks but should return for approval when changing agreed goals or major commitments.
+
+**Short:** `Answer length: Lead with a short answer; give enough detail for consequential design reviews. [Apparent tension: brevity versus depth depends on task.]`
+
+**Expanded:** “Keep answers concise” and “go deep on important trade-offs” are not necessarily conflicting. Their scope differs: routine replies versus material design decisions. Preserve that distinction rather than deciding the user dislikes detailed work.

package/docs/user-guide.md

@@ -163,3 +163,7 @@ See [Privacy and safety](reference/data-and-permissions.md#privacy-and-safety).
 ## Troubleshooting and current limits
 
 See [Troubleshooting and current limits](reference/troubleshooting.md#troubleshooting-and-current-limits).
+
+## Simplify modal
+
+`/bro` opens Simplify and explains the latest completed assistant reply. `/bro simplify` returns to the most recent Simplify screen without another model request. Inside, `/simplify`, `/text <text>`, `/file <path>` and `/url <url>` produce one explanation at a time; `/copy` copies the answer, `/clear` clears it, and `/help` shows controls. Press **M** with an empty composer to change the explanation mode and rerun; **R** retries. The saved default mode remains unchanged. The current screen is kept only within the Pi session. Old `/bro text|file|url|open` forms remain callable for compatibility.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-bro",
-  "version": "0.26.0",
+  "version": "0.28.0",
   "description": "A sidekick for you and your Pi agent: plain-language explanations, side questions, diagrams, PR review and second opinions, without cluttering the agent's context.",
   "type": "module",
   "license": "MIT",
@@ -48,6 +48,14 @@
     "src/btw.ts",
     "src/elevate.ts",
     "src/elevate-engine.ts",
+    "src/grill.ts",
+    "src/grill-engine.ts",
+    "src/remember-store.ts",
+    "src/remember-engine.ts",
+    "src/remember-tool.ts",
+    "src/remember.ts",
+    "src/simplify-engine.ts",
+    "src/simplify-ui.ts",
     "src/explain-modal.ts",
     "src/review.ts",
     "src/review-source.ts",
@@ -72,6 +80,8 @@
     "docs/pig-compatibility.md",
     "docs/guided-review.md",
     "docs/elevate.md",
+    "docs/grill-me.md",
+    "docs/remember-me.md",
     "docs/examples.md",
     "docs/features",
     "docs/reference"
@@ -85,7 +95,7 @@
   "scripts": {
     "docs:check": "node scripts/check-docs.mjs && node --test test/docs-quality.test.mjs",
     "typecheck": "tsc --noEmit",
-    "test": "npm run typecheck && npm run docs:check && node .github/scripts/release-utils.mjs selftest && node --test test/elevate-docs.test.mjs test/elevate.test.ts test/review-ux.test.mjs test/review-doctor.test.mjs test/review-versions.test.mjs test/review-regeneration.test.mjs test/review-modal.test.mjs test/review.test.ts test/review-ui.test.mjs test/review-session.test.mjs test/helpers.test.mjs test/prompt.test.ts test/backend.test.ts test/claude.test.ts test/grok.test.ts test/codex.test.ts test/muse.test.ts test/settings.test.ts test/sources.test.ts test/release.test.ts test/show-html.test.ts test/smoke-rpc.test.ts test/ui-capabilities.test.ts test/modal-contract.test.mjs benchmark/*.test.ts && sh ./test/smoke-test.sh",
+    "test": "npm run typecheck && npm run docs:check && node .github/scripts/release-utils.mjs selftest && node --test test/elevate-docs.test.mjs test/elevate.test.ts test/simplify.test.ts test/simplify-modal.test.mjs test/grill.test.ts test/remember.test.ts test/remember-modal.test.mjs test/review-ux.test.mjs test/review-doctor.test.mjs test/review-versions.test.mjs test/review-regeneration.test.mjs test/review-modal.test.mjs test/review.test.ts test/review-ui.test.mjs test/review-session.test.mjs test/helpers.test.mjs test/prompt.test.ts test/backend.test.ts test/claude.test.ts test/grok.test.ts test/codex.test.ts test/muse.test.ts test/settings.test.ts test/sources.test.ts test/release.test.ts test/show-html.test.ts test/smoke-rpc.test.ts test/ui-capabilities.test.ts test/modal-contract.test.mjs benchmark/*.test.ts && sh ./test/smoke-test.sh",
     "benchmark:dry-run": "node benchmark/run.ts dry-run",
     "benchmark:run": "node benchmark/run.ts run",
     "benchmark:report": "node benchmark/run.ts report",

package/src/bro.ts

@@ -10,6 +10,11 @@ import {
 import { doctorReport, showBroConfigModal } from "./doctor.ts";
 import { setPiHostContext } from "./backend.ts";
 import { openElevateModal } from "./elevate.ts";
+import { openGrillModal } from "./grill.ts";
+import { openRememberModal } from "./remember.ts";
+import { openSimplifyWorkflow, type SimplifyState } from "./simplify-ui.ts";
+import { registerAboutUserTool } from "./remember-tool.ts";
+import { parseGrillArguments, type GrillThread } from "./grill-engine.ts";
 import {
 	type BroResult,
 	type ModalResult,
@@ -38,8 +43,6 @@ import {
 } from "./show.ts";
 import {
 	type BroSource,
-	extractDocumentText,
-	extractWebPage,
 	isWorkspaceFile,
 	looksLikeWebUrl,
 } from "./sources.ts";
@@ -57,10 +60,16 @@ export * from "./doctor.ts";
 export * from "./btw.ts";
 export * from "./elevate.ts";
 export * from "./elevate-engine.ts";
+export * from "./grill.ts";
+export * from "./grill-engine.ts";
+export * from "./remember-store.ts";
+export * from "./remember-engine.ts";
 export * from "./explain-modal.ts";
+export * from "./simplify-engine.ts";
+export * from "./simplify-ui.ts";
 
 const COMMANDS = [
-	{ value: "simplify", label: "simplify", description: "Explain the latest completed assistant reply (same as /bro)" },
+	{ value: "simplify", label: "simplify", description: "Reopen the last Simplify screen without a new model call" },
 	{ value: "text", label: "text", description: "Explain pasted text, or the latest reply when text is omitted" },
 	{ value: "file", label: "file", description: "Explain a local document" },
 	{ value: "url", label: "url", description: "Explain a public webpage" },
@@ -72,6 +81,8 @@ const COMMANDS = [
 	{ value: "guided-review", label: "guided-review", description: "Understand and assess a PR with captured code and optional private questions" },
 	{ value: "btw", label: "btw", description: "Open a side conversation (starts conversation-only; /mode toggles full permission)" },
 	{ value: "elevate", label: "elevate", description: "Discover missing expert considerations, then improve a request" },
+	{ value: "remember-me", label: "remember-me", description: "Help write and review personal memories; agents can unfold them on demand" },
+	{ value: "grill-me", label: "grill-me", description: "A private, one-question-at-a-time decision interview" },
 	{ value: "config", label: "config", description: "Configure shared defaults and per-capability model/effort overrides" },
 	{ value: "advisor", label: "advisor", description: "Check whether the executor's advisor tool is available right now" },
 	{ value: "advisor-steer", label: "advisor-steer", description: "View, edit, save, or clear the advisor's persistent steering brief" },
@@ -81,8 +92,10 @@ const KNOWN_ACTIONS = new Set(COMMANDS.map((command) => command.value));
 
 export default async function bro(pi: ExtensionAPI) {
 	let lastResult: ModalResult | undefined;
+	let simplifyState: SimplifyState = {};
 	let lastShowSteering: string | undefined;
 	let btwThread: BtwThread | undefined;
+	let grillThread: GrillThread | undefined;
 	const remember = (result: ModalResult, showSteering?: string) => {
 		if (result.source) {
 			lastResult = result;
@@ -94,10 +107,13 @@ export default async function bro(pi: ExtensionAPI) {
 
 	pi.on("session_start", async (_event, _ctx) => {
 		lastResult = undefined;
+		simplifyState = {};
 		btwThread = undefined;
+		grillThread = undefined;
 	});
 
 	registerAdvisorTool(pi);
+	registerAboutUserTool(pi);
 
 	pi.registerCommand("bro", {
 		description: "Explain text, documents, and webpages; draw session turns; open a side conversation; configure Bro and the executor's advisor tool",
@@ -116,8 +132,10 @@ export default async function bro(pi: ExtensionAPI) {
 			let value = raw.slice(raw.split(/\s+/, 1)[0]?.length ?? 0).trim();
 
 			if (action === "simplify") {
-				if (value) { ctx.ui.notify("Use /bro simplify for the latest reply, or /bro text <text> for pasted text.", "warning"); return; }
-				action = "";
+				if (value) { ctx.ui.notify("Use /bro simplify to reopen the last Simplify view; use /text, /file or /url inside it.", "warning"); return; }
+				try { await openSimplifyWorkflow(ctx, simplifyState, {kind:"resume"}); if (simplifyState.result) remember(simplifyState.result); }
+				catch (error) { ctx.ui.notify(withDoctor(error), "error"); }
+				return;
 			}
 
 			// Removed commands must never fall through to a paid text explanation.
@@ -140,6 +158,23 @@ export default async function bro(pi: ExtensionAPI) {
 				value = raw;
 			}
 
+			// Source operations open the same single-purpose Simplify modal, not separate
+			// top-level workflows. Old /bro text|file|url commands remain valid aliases.
+			if (!action || action === "text" || action === "file" || action === "url") {
+				if ((action === "file" || action === "url") && !value) {
+					ctx.ui.notify(`Use /bro ${action} <${action === "file" ? "path" : "url"}>.`, "warning");
+					return;
+				}
+				const initial = !action || (action === "text" && !value)
+					? {kind:"latest" as const}
+					: {kind:action as "text" | "file" | "url", input:value};
+				try {
+					await openSimplifyWorkflow(ctx, simplifyState, initial);
+					if (simplifyState.result) remember(simplifyState.result);
+				} catch (error) { ctx.ui.notify(withDoctor(error), "error"); }
+				return;
+			}
+
 			if (action === "show") {
 				const { requested, steering, invalid } = parseShowArguments(value);
 				if (invalid) {
@@ -178,41 +213,6 @@ export default async function bro(pi: ExtensionAPI) {
 				return;
 			}
 
-			if (action === "file" || action === "url") {
-				if (!value) {
-					ctx.ui.notify(`Use /bro ${action} <${action === "file" ? "path" : "url"}>.`, "warning");
-					return;
-				}
-				const runInput = async (
-					signal: AbortSignal,
-					source?: BroSource,
-					onProgress?: (text: string) => void,
-					mode?: BroMode,
-				): Promise<BroResult> => {
-					const target = source ?? (action === "url"
-						? await extractWebPage(value, signal)
-						: { text: await extractDocumentText(value, ctx.cwd, signal), label: unquote(value) });
-					try {
-						return {
-							source: target,
-							...(await simplify(target.text, signal, await readSettings(), onProgress, mode)),
-						};
-					} catch (error) {
-						throw new Error(withDoctor(error));
-					}
-				};
-				try {
-					await showBroModal(ctx, {
-						loadingText: action === "url" ? "Fetching and simplifying webpage…" : "Reading and simplifying document…",
-						run: runInput,
-						onResult: remember,
-					});
-				} catch (error) {
-					ctx.ui.notify(errorMessage(error), "error");
-				}
-				return;
-			}
-
 			if (action === "doctor") {
 				if (parts.length !== 1) {
 					ctx.ui.notify("Use /bro doctor.", "warning");
@@ -288,6 +288,25 @@ export default async function bro(pi: ExtensionAPI) {
 				return;
 			}
 
+			if (action === "remember-me") {
+				if (!hasBroCustomUi(ctx)) { ctx.ui.notify("Use /bro remember-me in Pi interactive UI.", "warning"); return; }
+				try { await openRememberModal(ctx, value); }
+				catch (error) { ctx.ui.notify(withDoctor(error), "error"); }
+				return;
+			}
+
+			if (action === "grill-me") {
+				if (!hasBroCustomUi(ctx)) { ctx.ui.notify("Use /bro grill-me in Pi's interactive UI.", "warning"); return; }
+				const parsed = parseGrillArguments(value);
+				if (parsed.invalid) { ctx.ui.notify(parsed.invalid, "warning"); return; }
+				const start = Boolean(parsed.topic);
+				if (start) grillThread = { topic: parsed.topic, depth: parsed.depth, turns: [], fullAccess: false };
+				else grillThread ??= { topic: "", depth: parsed.depth, turns: [], fullAccess: false };
+				try { await openGrillModal(ctx, grillThread, { start }); }
+				catch (error) { ctx.ui.notify(withDoctor(error), "error"); }
+				return;
+			}
+
 			if (action === "elevate") {
 				if (!hasBroCustomUi(ctx)) { ctx.ui.notify("Use /bro elevate in Pi interactive UI.", "warning"); return; }
 				try { await openElevateModal(ctx, value); }

package/src/btw.ts

@@ -194,8 +194,16 @@ export class BtwModal implements Focusable {
 	private running = false;
 	private full = false;
 	private model = "";
+	private customMode = "";
 	private disposed = false;
 	onInput?: () => void;
+	onKey?: (data: string) => boolean;
+	private suggestions = "";
+
+	setSuggestions(text: string): void {
+		this.suggestions = text;
+		this.tui.requestRender();
+	}
 
 	get focused(): boolean {
 		return this._focused;
@@ -212,6 +220,7 @@ export class BtwModal implements Focusable {
 		private readonly onClose: () => void,
 		private readonly onSubmit: (value: string) => void,
 		private readonly onDispose: () => void,
+		private readonly appearance: { title?: string; commands?: string; inputLabel?: string; idleHint?: string } = {},
 	) {
 		this.input.onSubmit = (value) => {
 			if (!this.running) this.onSubmit(value);
@@ -260,6 +269,12 @@ export class BtwModal implements Focusable {
 		this.tui.requestRender();
 	}
 
+	/** Reuse the BTW modal for independent interview flows without sharing BTW state. */
+	setCustomMode(label: string): void {
+		this.customMode = label;
+		this.tui.requestRender();
+	}
+
 	clearComposer(): void {
 		this.input.setValue("");
 		this.tui.requestRender();
@@ -285,6 +300,7 @@ export class BtwModal implements Focusable {
 	}
 
 	handleInput(data: string): void {
+		if (this.onKey?.(data)) return;
 		if (matchesKey(data, "escape")) {
 			this.onClose();
 			return;
@@ -303,18 +319,24 @@ export class BtwModal implements Focusable {
 			header: () => {
 				const scroll = this.scroller.indicator();
 				const model = this.model ? this.theme.fg("dim", ` · ${this.model}`) : "";
-				const mode = this.theme.fg("dim", " · ") + (this.full ? this.theme.fg("accent", this.theme.bold(btwModeLabel(true))) : this.theme.fg("dim", btwModeLabel(false)));
-				return this.theme.fg("accent", this.theme.bold("Bro · btw")) + model + mode + this.theme.fg("dim", scroll ? ` · ${scroll}` : "");
+				const mode = this.customMode
+					? this.theme.fg("dim", this.customMode)
+					: this.theme.fg("dim", " · ") + (this.full ? this.theme.fg("accent", this.theme.bold(btwModeLabel(true))) : this.theme.fg("dim", btwModeLabel(false)));
+				const title = this.theme.fg("accent", this.theme.bold(this.appearance.title ?? "Bro · btw"));
+				// Keep Grill's access warning ahead of text the frame may truncate.
+				const header = this.customMode ? `${mode} · ${title}${model}` : title + model + mode;
+				return header + this.theme.fg("dim", scroll ? ` · ${scroll}` : "");
 			},
 			body: (rows, innerWidth) => this.scroller.view(this.markdown.render(innerWidth), rows),
 			// The frame drops lines from the top when space runs out, so the composer goes last.
 			footer: [
-				...wrapTextWithAnsi("Commands: /mode · /copy · /copy-all · /insert · /insert-all · /clear · /retry", inner),
-				this.theme.fg("accent", this.theme.bold("Your message to Bro")),
+				...(this.appearance.commands === "" ? [] : wrapTextWithAnsi(this.appearance.commands ?? "Commands: /mode · /copy · /copy-all · /insert · /insert-all · /clear · /retry", inner)),
+				...(this.suggestions ? wrapTextWithAnsi(this.theme.fg("accent", this.suggestions), inner) : []),
+				this.theme.fg("accent", this.theme.bold(this.appearance.inputLabel ?? "Your message to Bro")),
 				this.input.render(inner)[0] ?? "",
 			],
 			notice: this.noticeText ? formatNotice(this.theme, this.noticeText, this.noticeTone) : undefined,
-			hints: this.running ? "Bro is thinking… · Esc close (stops reply)" : "Enter send · Esc close",
+			hints: this.running ? "Bro is thinking… · Esc close (stops reply)" : (this.appearance.idleHint ?? "Enter send · Esc close"),
 		});
 	}