pi-freeflow 1.13.0 → 1.14.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -1,237 +1,247 @@
1
- # Changelog
2
-
3
- ## 1.13.0
4
-
5
- ### Minor Changes
6
-
7
- - 39a06b9: Carry a relay pool between machines: `/freeflow export` saves the relays to a file and `/freeflow import` loads them back, adding to the current pool by default or swapping it whole on confirmation.
8
-
9
- ## 1.12.1
10
-
11
- ### Patch Changes
12
-
13
- - b32f208: Sessions survive a relay change without a rejected turn.
14
-
15
- Responses models sign each thinking block for the upstream backend that produced it, and only that backend can read it back. When a later turn reached a different backend, the replayed blocks were rejected as unreadable ("reasoning `encrypted_content` was not issued to this caller"), the host repeated the same failing request, and the session could not continue.
16
-
17
- pi-freeflow now keeps each conversation on the relay that issued its reasoning while that relay is healthy, and when a relay change is unavoidable (rate limit, relay removed or redeployed, direct-mode switch) it sends that turn without the signed thinking blocks, so the new backend accepts it on the first attempt. If a rejection still happens (the provider can change backends behind a relay), the request is retried once without the blocks, and only the rejected blocks are dropped on later turns, so the model keeps whatever reasoning the current backend can read. Messages, tool calls and tool results are always preserved.
18
-
19
- ## 1.12.0
20
-
21
- ### Minor Changes
22
-
23
- - Free-model picker grows from 24 to 26: adds Nex N2.5 Pro, Nex N2.5 Mini, and Ling 3.0 Flash VL, and removes the discontinued Inkling entry. A new Stealth Models Watchlist docs page tracks masked preview IDs users ask about.
24
-
25
- ## 1.11.2
26
-
27
- ### Patch Changes
28
-
29
- - 549b66e: Oversized requests no longer fail at the relay hop: when a relay answers 413 payload limit, the proxy transparently tries the next relay and then the direct route, keeping the stream alive. Long sessions that outgrow the relay payload cap now complete instead of surfacing a function payload error.
30
-
31
- ## 1.11.1
32
-
33
- ### Patch Changes
34
-
35
- - Apologies for the daemon disconnect bug introduced in v1.11.0: in multi-agent workflows or when subagents, evaluations, and background tasks completed, the extension prematurely detached from the local proxy daemon, causing the proxy to shut down while your main session remained active. The heartbeat connection now persists throughout your active terminal session.
36
- - Increased local health check and liveness probe timeouts from 800ms and 500ms to 2500ms and 1500ms, with an automatic probe retry to avoid false-alarm daemon restarts during heavy concurrent streaming.
37
- - Added unhandled error logging inside the daemon to prevent silent process exits.
38
- - Fresh installs now log full HTTP lifecycle debug output by default so diagnostic reports contain complete request context; turn it off anytime with `/freeflow debug off`.
39
-
40
- ## 1.11.0
41
-
42
- ### Minor Changes
43
-
44
- - Proxy daemon now stays up while any session uses it, even when idle. It shuts down only after the last session leaves, instead of retiring after a short quiet window.
45
-
46
- ## 1.10.0
47
-
48
- ### Minor Changes
49
-
50
- - cf48598: Hands-free proxy recovery plus catalog refresh: the proxy now watches its own health, restarts with backoff instead of leaving a dead port, and can start on login. Removed two discontinued free models from the picker.
51
-
52
- All notable changes to pi-freeflow. Public, user-visible behavior only.
53
-
54
- ## 1.9.9 - 2026-09-06
55
-
56
- ### Fixes
57
-
58
- - **Removed our own request cap — sorry, that one was on us.** The proxy used to enforce a built-in request limit and could answer 429 before upstream quota was actually exhausted. That was a bug, not your quota. From this version the proxy never rejects on quota itself: a 429 only surfaces when the upstream — and every relay in your pool — genuinely is rate-limited, and that response now points you at `/freeflow deploy` to add relay egress.
59
-
60
- ## 1.9.8 - 2026-09-06
61
-
62
- ### Fixes
63
-
64
- - **Stale model list heals itself (follow-up to #6).** If your saved model list predates a newly added model, the background refresh now repairs the entry (correct endpoint and details) instead of sending requests to the wrong address — no manual `/freeflow refresh` or cache deletion needed.
65
- - **Paid models stay out of the picker even from old saved lists.** Every read of the saved model list now drops non-free entries, so models requiring an API key cannot linger after an upgrade.
66
- - **Old saved lists without a sync marker now re-sync once.** A saved list that could never trigger a network check now performs one plain revalidation (then syncs normally), so newly added free models appear without manual intervention. Missing or corrupt lists still fall back silently with no network call.
67
- - **Upstream errors are now visible in the proxy log.** Failed upstream responses log their status code and model, and a model routed to the wrong endpoint logs the mismatch with the fix (restart Pi/OMP after upgrade).
68
-
69
- ### Validation
70
-
71
- - TypeScript typecheck passed cleanly (`tsc --noEmit`).
72
- - Full test suite passed on Windows (304 tests) and Ubuntu Linux (`acerblue`, 305/305 tests passed), including new regressions for the stale-cache shape from #6.
73
- - Live sweep of all 26 models through a fresh install on `acerblue`: 23/26 answered on first try (both Muse Spark models via the Responses endpoint); the 3 misses are upstream per-model daily quotas (429), zero server errors.
74
-
75
- ## 1.9.7 - 2026-09-06
76
-
77
- ### Fixes
78
-
79
- - **Model picker only shows verified free models (fixes #6).** Background catalog refresh now filters out non-free models from upstream endpoints so paid models requiring an API key no longer leak into your picker.
80
- - **Relay pool automatically recovers from dead deployments (fixes #5).** If a relay URL in your pool returns an infrastructure 404 (such as a missing or deleted Vercel deployment), the proxy marks it as failed and immediately rolls over to your next healthy relay or direct mode instead of getting trapped in a 404 loop.
81
-
82
- ### Changes
83
-
84
- - **Updated model catalog (26 verified free models: 7 OpenCode Zen + 19 KiloCode Gateway).**
85
- - Added `inclusionai/ling-3.0-flash-sante:free` (Ling 3.0 Flash Sante, 262K context, 32K output, reasoning supported). Clean CLI alias `ling-3.0-flash-sante` supported.
86
- - Removed `laguna-s-2.1-free` (OpenCode Zen) after upstream dropped free-tier access. `poolside/laguna-s-2.1:free` on Kilo remains active.
87
- - **Public by default for new relay deployments.** Relays deployed via `/freeflow deploy` are now public by default with no mandatory authentication tokens. This enables seamless copy-paste migration across proxy tools (such as 9router) while maintaining safety guards for allowed AI upstreams.
88
-
89
- ### Validation
90
-
91
- - TypeScript typecheck passed cleanly (`tsc --noEmit`).
92
- - Full test suite passed across Windows (299 tests) and Ubuntu Linux (`acerblue-local`, 300/300 tests passed).
93
- - End-to-end concurrency and failover stress testing verified (100 parallel requests, 20 subagent leases, burst failover).
94
-
95
- ## 1.9.6 - 2026-09-03
96
-
97
- ### Fixes
98
-
99
- - **Hiding the status widget now sticks.** `/freeflow hide` survives restarts, new sessions, and background update notices — previously the widget could reappear on the next session.
100
- - **Calmer startup with many sessions.** Sessions starting at the same time now converge on a single background proxy instead of each spawning its own; a spawn that never becomes ready falls back to in-process mode instead of running untracked.
101
- - **Survives daemon restarts mid-session.** If the background proxy is replaced while sessions run, connected sessions re-register automatically instead of silently losing their lease (which could retire the daemon mid-use).
102
- - **Stale-version cleanup targets the right process.** Windows port matching is now exact, and Linux without `lsof`/`fuser` resolves the holder via `/proc` instead of giving up.
103
- - **`/freeflow logs --follow` no longer runs forever.** The live tail stops when the session ends and caps burst output; the update/install subprocess now has a 2-minute timeout.
104
-
105
- ### Validation
106
-
107
- - `npx tsc --noEmit` clean, `npm test` 299 (298 pass + 1 Linux-only skip) + smoke green on Windows; stress harness 7/7 on Windows and Linux `acerblue-local`. **`macOS not tested`** this cycle.
108
-
109
- ## 1.9.5 - 2026-09-03
110
-
111
- ### Changes
112
-
113
- - **Catalog refreshed against live upstream model lists (26 models: 8 OpenCode Zen + 18 KiloCode Gateway).** Re-checked both upstreams against their live endpoints and live inference probes:
114
- - **Added** `muse-spark-1.3-contributor-free` (OpenCode Zen, Responses API, 1M context, 131K output, vision) — verified live: completes with reasoning, accepts effort levels, and answers vision queries.
115
- - **Removed** `hy3-free` (OpenCode Zen) — upstream no longer serves it (`Model hy3-free is not supported`).
116
- - **Removed** `tencent/hy3:free` and `meituan/longcat-2.0-free` (KiloCode Gateway) — upstream free tier dropped them (model unavailable / sign-in required).
117
- - Pruned IDs added to the dead-model filter so a stale disk cache cannot resurrect them.
118
-
119
- ### Validation
120
-
121
- - `npx tsc --noEmit` clean, `npm test` full suite green on Windows.
122
-
123
- ## 1.9.4 - 2026-09-02
124
-
125
- ### Dependencies
126
-
127
- - **Zero runtime dependencies.** Removed `undici@8.10.0` — `pi` (`0.84.4`) and `omp` (`18.1.3`) already bundle `undici` 6.x/7.x and expose `global fetch` with keep-alive pooling. `relayFetch` and proxy now use `global fetch` directly (`src/relay.ts` `Agent` + `canUseCustomDispatcher` + `dispatcher: agent` removed; `src/proxy.ts` dispatcher removed). Keeps thin `11.3k` + `298 tests` + `0 deps` compatible directly with `reference/pi` + `reference/oh-my-pi`.
128
-
129
- ### Validation
130
-
131
- - `npx tsc --noEmit` clean, `npm test 298/298` on **Windows** (`omp/18.1.3`, `pi 0.84.4`) and **Linux `acerblue-local`** (`Ubuntu 6.8.0-138`, `node v22.23.2`, `pi 0.84.4`) via `/tmp/pi-freeflow-validation`. **`macOS not tested`** this cycle.
132
-
133
- ## 1.9.3 - 2026-09-02
134
-
135
- ### Fixes
136
-
137
- - **Windows console flood fixed.** Two Windows-only helpers flashed a visible `conhost`/`cmd` window on every daemon probe: `netstat -ano | findstr :28180` / `taskkill` in the stale-daemon replace path and `spawn(omp|npm, shell:true)` for `/freeflow update`. Both now use `windowsHide: true` (no-op on Linux/macOS) and `spawnWithProgress` was refactored to `Promise.withResolvers` to satisfy `ts-promise-with-resolvers`. Idle `pi` no longer spawns many visible consoles even after closing the terminal (detached daemon at `127.0.0.1:28180` survives by design; `beatOnce` 10s heartbeat now throttled 2s via `lastSpawnAt`).
138
- - Daemon spawn now throttled per-process (2s) as a storm guard when `28180` is contended or blocked; the `ensuring` guard + `waitForReady 5s` already prevented tight loops.
139
-
140
- ### Validation
141
-
142
- - `npx tsc --noEmit` clean, `npm test 279/279` on **Windows** (`omp/18.1.3`, `pi 0.84.4`) and **Linux `acerblue-local`** (`Ubuntu 6.8.0-138`, `node v22.23.2`, `pi 0.84.4`) via `/tmp/pi-freeflow-validation`. **`macOS not tested`** this cycle.
143
- - Reporter `LOYINuts` issue #3 (`pi idle creates many sessions → force reboot`) — `grep -r rtk src` ∅ confirms `rtk` is an external global skill (`~/.agents/skills/rtk` → `Command::new("cmd")` without `CREATE_NO_WINDOW`), not `pi-freeflow`. After this fix, closing the terminal no longer leaves flashing zombies; kill via `netstat -ano | findstr :28180` → `taskkill /F /PID` or `/freeflow kill`.
144
-
145
- ## 1.9.2 - 2026-08-31
146
-
147
- ### Fixes
148
-
149
- - **Closing one session no longer stops the shared local proxy.** The proxy daemon
150
- is now a fully detached background process: it outlives any single OMP/Pi session
151
- (previously, closing the session that owned the daemon could shut it down even
152
- while other sessions were still using it). It retires by itself only when no
153
- session is connected, no request is in flight, and it has been idle for a grace
154
- period. The next use starts it again automatically.
155
- - New command: `/freeflow kill` (aliases `stop`, `shutdown`) stops the background
156
- daemon on demand. The next freeflow use restarts it.
157
-
158
- ### Improvements
159
-
160
- - The proxy tracks connected sessions and last request time; `/freeflow status`
161
- and the health endpoint now report active session leases, so you can see when
162
- other sessions are keeping the daemon alive.
163
- - Docs: the command reference now lists `kill`, and the FAQ explains the shared
164
- daemon lifecycle (survives session close; self-retires when unused).
165
-
166
- ## 1.9.1 - 2026-08-30
167
-
168
- ### Fixes
169
-
170
- - Stale-daemon guard completed: a pre-1.9.0 daemon cannot report its in-flight requests, and usage cannot be verified — so it is now left running instead of being replaced. Previously such a daemon could still be killed mid-stream while busy (a one-time window when upgrading from 1.8.x). The guarantee now holds in every case: only older, verified-idle daemons are replaced.
171
- - The stale-daemon kill ritual was consolidated into one path (it was duplicated at five call sites); behavior unchanged.
172
- - Tests: new coverage for the pre-1.9 daemon case; shared sandbox helpers extracted.
173
-
174
- ## 1.9.0 - 2026-08-30
175
-
176
- ### Development hardening
177
-
178
- - Test suite now runs fully sandboxed: every test uses a temporary data directory, so no test can ever write to your real `~/.pi/agent/` files or interfere with a running local proxy. A single env override (`PI_*_DATA_DIR`) re-roots all data files for tests/CI.
179
- - Added a complete mocked user-flow e2e suite: fresh install → onboarding → proxy health → direct chat → relay add/roll/fallback → guided deploy → update check → command surface — all deterministic, zero network.
180
- - Docs: test counts no longer hardcoded in README (they drifted with releases); release history tracked here.
181
-
182
- ### Fixes
183
-
184
- - **Stale-daemon replacement no longer interrupts running sessions.** The shared local proxy can be held by another OMP/Pi session; the old upgrade logic killed that holder on version mismatch, which could terminate the session that owned the proxy mid-stream. Replacement now only happens when the running daemon is strictly older AND idle (0 in-flight requests, reported via `/_health`); newer or busy daemons are reused with a log note instead. Optional opt-out: set the no-kill env to `1` (see README FAQ for upgrades).
185
-
186
- ## 1.8.2 - 2026-08-30
187
-
188
- ### Fixes & polish
189
-
190
- - Deploy: compare-and-swap on concurrent deployments (no duplicate relays when two sessions deploy at once).
191
- - Proxy: URL-encoding edge cases (`%` in paths), startup timeout and kill handling, port conflict fallback.
192
- - Logs: sanitized sensitive headers in debug output.
193
- - Kilo gateway models: compatibility pass for all 25 models.
194
- - Docs site build included; README per-host usage guide (Oh My Pi & Pi install + pick + manage).
195
-
196
- ## 1.8.1 - 2026-08-29
197
-
198
- - Fix: stale-daemon auto-heal is now shipped in the published package (previously only in the repo).
199
-
200
- ## 1.8.0 - 2026-08-29
201
-
202
- ### Automatic upgrades
203
-
204
- - On version upgrade, the extension detects a stale local proxy daemon and replaces it automatically users get fixes without manual restarts or killing sessions.
205
- - Fix: client auth key stripped before reaching the opencode.ai/zen upstream (failed with 401 for some clients).
206
- - 3 new free models (28 total).
207
-
208
- ## 1.7.1 - 2026-08-29
209
-
210
- - Docs: clarified npm is the distribution channel (the package is an extension loaded by OMP/Pi, not a standalone CLI).
211
-
212
- ## 1.7.0 - 2026-08-29
213
-
214
- - 4 new free models (25 total) with live-verified specs (context/output limits, vision, thinking levels).
215
- - New alias map aligned with host model selectors.
216
-
217
- ## 1.6.1 - 2026-08-29
218
-
219
- - Catalog: thinking-level map locked per model; docs sync.
220
-
221
- ## 1.6.0 - 2026-08-29
222
-
223
- ### Onboarding & UX
224
-
225
- - First-run onboarding message; 429 guidance hint (add your own relay egress).
226
- - `/freeflow test` to probe a relay; relay latency tracking with health badges in `/freeflow list`.
227
- - Guided deploy with context picker + confirmation; post-deploy health check.
228
- - Status clarity: current mode + state file path; log text filter; per-relay usage counters; throttled roll notifications.
229
-
230
- ### Reliability
231
-
232
- - Relay state write-protection: before every save, the current state is snapshotted to `.bak`; if the main file is corrupted or missing, the backup is recovered automatically.
233
- - New-user flow never seeds a fake relay; starts in direct mode with an empty pool.
234
-
235
- ## 1.5.1 - 2026-08-28
236
-
237
- - Edge-sweep fixes: port 28180 with legacy 18080 dual-probe auto-migration, OMP/Pi compatibility.
1
+ # Changelog
2
+
3
+ ## 1.14.0
4
+
5
+ ### Minor Changes
6
+
7
+ - c28b7b5: Local proxy recovers on its own: if the background proxy stops unexpectedly, the extension now notices the refused local connection and starts a fresh proxy within seconds instead of leaving every model failing until the next session; shutdowns and crashes are also recorded in the log so the cause is visible.
8
+
9
+ ### Patch Changes
10
+
11
+ - /freeflow update now goes through the host plugin managers first — reinstall under OMP, package update under Pi — and only then falls back to a global install, using Bun when npm is missing. Previously the first step called an update action the plugin manager does not define, so managed installs always fell through to the wrong target.
12
+
13
+ ## 1.13.0
14
+
15
+ ### Minor Changes
16
+
17
+ - 39a06b9: Carry a relay pool between machines: `/freeflow export` saves the relays to a file and `/freeflow import` loads them back, adding to the current pool by default or swapping it whole on confirmation.
18
+
19
+ ## 1.12.1
20
+
21
+ ### Patch Changes
22
+
23
+ - b32f208: Sessions survive a relay change without a rejected turn.
24
+
25
+ Responses models sign each thinking block for the upstream backend that produced it, and only that backend can read it back. When a later turn reached a different backend, the replayed blocks were rejected as unreadable ("reasoning `encrypted_content` was not issued to this caller"), the host repeated the same failing request, and the session could not continue.
26
+
27
+ pi-freeflow now keeps each conversation on the relay that issued its reasoning while that relay is healthy, and when a relay change is unavoidable (rate limit, relay removed or redeployed, direct-mode switch) it sends that turn without the signed thinking blocks, so the new backend accepts it on the first attempt. If a rejection still happens (the provider can change backends behind a relay), the request is retried once without the blocks, and only the rejected blocks are dropped on later turns, so the model keeps whatever reasoning the current backend can read. Messages, tool calls and tool results are always preserved.
28
+
29
+ ## 1.12.0
30
+
31
+ ### Minor Changes
32
+
33
+ - Free-model picker grows from 24 to 26: adds Nex N2.5 Pro, Nex N2.5 Mini, and Ling 3.0 Flash VL, and removes the discontinued Inkling entry. A new Stealth Models Watchlist docs page tracks masked preview IDs users ask about.
34
+
35
+ ## 1.11.2
36
+
37
+ ### Patch Changes
38
+
39
+ - 549b66e: Oversized requests no longer fail at the relay hop: when a relay answers 413 payload limit, the proxy transparently tries the next relay and then the direct route, keeping the stream alive. Long sessions that outgrow the relay payload cap now complete instead of surfacing a function payload error.
40
+
41
+ ## 1.11.1
42
+
43
+ ### Patch Changes
44
+
45
+ - Apologies for the daemon disconnect bug introduced in v1.11.0: in multi-agent workflows or when subagents, evaluations, and background tasks completed, the extension prematurely detached from the local proxy daemon, causing the proxy to shut down while your main session remained active. The heartbeat connection now persists throughout your active terminal session.
46
+ - Increased local health check and liveness probe timeouts from 800ms and 500ms to 2500ms and 1500ms, with an automatic probe retry to avoid false-alarm daemon restarts during heavy concurrent streaming.
47
+ - Added unhandled error logging inside the daemon to prevent silent process exits.
48
+ - Fresh installs now log full HTTP lifecycle debug output by default so diagnostic reports contain complete request context; turn it off anytime with `/freeflow debug off`.
49
+
50
+ ## 1.11.0
51
+
52
+ ### Minor Changes
53
+
54
+ - Proxy daemon now stays up while any session uses it, even when idle. It shuts down only after the last session leaves, instead of retiring after a short quiet window.
55
+
56
+ ## 1.10.0
57
+
58
+ ### Minor Changes
59
+
60
+ - cf48598: Hands-free proxy recovery plus catalog refresh: the proxy now watches its own health, restarts with backoff instead of leaving a dead port, and can start on login. Removed two discontinued free models from the picker.
61
+
62
+ All notable changes to pi-freeflow. Public, user-visible behavior only.
63
+
64
+ ## 1.9.9 - 2026-09-06
65
+
66
+ ### Fixes
67
+
68
+ - **Removed our own request cap — sorry, that one was on us.** The proxy used to enforce a built-in request limit and could answer 429 before upstream quota was actually exhausted. That was a bug, not your quota. From this version the proxy never rejects on quota itself: a 429 only surfaces when the upstream — and every relay in your pool — genuinely is rate-limited, and that response now points you at `/freeflow deploy` to add relay egress.
69
+
70
+ ## 1.9.8 - 2026-09-06
71
+
72
+ ### Fixes
73
+
74
+ - **Stale model list heals itself (follow-up to #6).** If your saved model list predates a newly added model, the background refresh now repairs the entry (correct endpoint and details) instead of sending requests to the wrong address — no manual `/freeflow refresh` or cache deletion needed.
75
+ - **Paid models stay out of the picker even from old saved lists.** Every read of the saved model list now drops non-free entries, so models requiring an API key cannot linger after an upgrade.
76
+ - **Old saved lists without a sync marker now re-sync once.** A saved list that could never trigger a network check now performs one plain revalidation (then syncs normally), so newly added free models appear without manual intervention. Missing or corrupt lists still fall back silently with no network call.
77
+ - **Upstream errors are now visible in the proxy log.** Failed upstream responses log their status code and model, and a model routed to the wrong endpoint logs the mismatch with the fix (restart Pi/OMP after upgrade).
78
+
79
+ ### Validation
80
+
81
+ - TypeScript typecheck passed cleanly (`tsc --noEmit`).
82
+ - Full test suite passed on Windows (304 tests) and Ubuntu Linux (`acerblue`, 305/305 tests passed), including new regressions for the stale-cache shape from #6.
83
+ - Live sweep of all 26 models through a fresh install on `acerblue`: 23/26 answered on first try (both Muse Spark models via the Responses endpoint); the 3 misses are upstream per-model daily quotas (429), zero server errors.
84
+
85
+ ## 1.9.7 - 2026-09-06
86
+
87
+ ### Fixes
88
+
89
+ - **Model picker only shows verified free models (fixes #6).** Background catalog refresh now filters out non-free models from upstream endpoints so paid models requiring an API key no longer leak into your picker.
90
+ - **Relay pool automatically recovers from dead deployments (fixes #5).** If a relay URL in your pool returns an infrastructure 404 (such as a missing or deleted Vercel deployment), the proxy marks it as failed and immediately rolls over to your next healthy relay or direct mode instead of getting trapped in a 404 loop.
91
+
92
+ ### Changes
93
+
94
+ - **Updated model catalog (26 verified free models: 7 OpenCode Zen + 19 KiloCode Gateway).**
95
+ - Added `inclusionai/ling-3.0-flash-sante:free` (Ling 3.0 Flash Sante, 262K context, 32K output, reasoning supported). Clean CLI alias `ling-3.0-flash-sante` supported.
96
+ - Removed `laguna-s-2.1-free` (OpenCode Zen) after upstream dropped free-tier access. `poolside/laguna-s-2.1:free` on Kilo remains active.
97
+ - **Public by default for new relay deployments.** Relays deployed via `/freeflow deploy` are now public by default with no mandatory authentication tokens. This enables seamless copy-paste migration across proxy tools (such as 9router) while maintaining safety guards for allowed AI upstreams.
98
+
99
+ ### Validation
100
+
101
+ - TypeScript typecheck passed cleanly (`tsc --noEmit`).
102
+ - Full test suite passed across Windows (299 tests) and Ubuntu Linux (`acerblue-local`, 300/300 tests passed).
103
+ - End-to-end concurrency and failover stress testing verified (100 parallel requests, 20 subagent leases, burst failover).
104
+
105
+ ## 1.9.6 - 2026-09-03
106
+
107
+ ### Fixes
108
+
109
+ - **Hiding the status widget now sticks.** `/freeflow hide` survives restarts, new sessions, and background update notices — previously the widget could reappear on the next session.
110
+ - **Calmer startup with many sessions.** Sessions starting at the same time now converge on a single background proxy instead of each spawning its own; a spawn that never becomes ready falls back to in-process mode instead of running untracked.
111
+ - **Survives daemon restarts mid-session.** If the background proxy is replaced while sessions run, connected sessions re-register automatically instead of silently losing their lease (which could retire the daemon mid-use).
112
+ - **Stale-version cleanup targets the right process.** Windows port matching is now exact, and Linux without `lsof`/`fuser` resolves the holder via `/proc` instead of giving up.
113
+ - **`/freeflow logs --follow` no longer runs forever.** The live tail stops when the session ends and caps burst output; the update/install subprocess now has a 2-minute timeout.
114
+
115
+ ### Validation
116
+
117
+ - `npx tsc --noEmit` clean, `npm test` 299 (298 pass + 1 Linux-only skip) + smoke green on Windows; stress harness 7/7 on Windows and Linux `acerblue-local`. **`macOS not tested`** this cycle.
118
+
119
+ ## 1.9.5 - 2026-09-03
120
+
121
+ ### Changes
122
+
123
+ - **Catalog refreshed against live upstream model lists (26 models: 8 OpenCode Zen + 18 KiloCode Gateway).** Re-checked both upstreams against their live endpoints and live inference probes:
124
+ - **Added** `muse-spark-1.3-contributor-free` (OpenCode Zen, Responses API, 1M context, 131K output, vision) — verified live: completes with reasoning, accepts effort levels, and answers vision queries.
125
+ - **Removed** `hy3-free` (OpenCode Zen) — upstream no longer serves it (`Model hy3-free is not supported`).
126
+ - **Removed** `tencent/hy3:free` and `meituan/longcat-2.0-free` (KiloCode Gateway) — upstream free tier dropped them (model unavailable / sign-in required).
127
+ - Pruned IDs added to the dead-model filter so a stale disk cache cannot resurrect them.
128
+
129
+ ### Validation
130
+
131
+ - `npx tsc --noEmit` clean, `npm test` full suite green on Windows.
132
+
133
+ ## 1.9.4 - 2026-09-02
134
+
135
+ ### Dependencies
136
+
137
+ - **Zero runtime dependencies.** Removed `undici@8.10.0` `pi` (`0.84.4`) and `omp` (`18.1.3`) already bundle `undici` 6.x/7.x and expose `global fetch` with keep-alive pooling. `relayFetch` and proxy now use `global fetch` directly (`src/relay.ts` `Agent` + `canUseCustomDispatcher` + `dispatcher: agent` removed; `src/proxy.ts` dispatcher removed). Keeps thin `11.3k` + `298 tests` + `0 deps` compatible directly with `reference/pi` + `reference/oh-my-pi`.
138
+
139
+ ### Validation
140
+
141
+ - `npx tsc --noEmit` clean, `npm test 298/298` on **Windows** (`omp/18.1.3`, `pi 0.84.4`) and **Linux `acerblue-local`** (`Ubuntu 6.8.0-138`, `node v22.23.2`, `pi 0.84.4`) via `/tmp/pi-freeflow-validation`. **`macOS not tested`** this cycle.
142
+
143
+ ## 1.9.3 - 2026-09-02
144
+
145
+ ### Fixes
146
+
147
+ - **Windows console flood fixed.** Two Windows-only helpers flashed a visible `conhost`/`cmd` window on every daemon probe: `netstat -ano | findstr :28180` / `taskkill` in the stale-daemon replace path and `spawn(omp|npm, shell:true)` for `/freeflow update`. Both now use `windowsHide: true` (no-op on Linux/macOS) and `spawnWithProgress` was refactored to `Promise.withResolvers` to satisfy `ts-promise-with-resolvers`. Idle `pi` no longer spawns many visible consoles even after closing the terminal (detached daemon at `127.0.0.1:28180` survives by design; `beatOnce` 10s heartbeat now throttled 2s via `lastSpawnAt`).
148
+ - Daemon spawn now throttled per-process (2s) as a storm guard when `28180` is contended or blocked; the `ensuring` guard + `waitForReady 5s` already prevented tight loops.
149
+
150
+ ### Validation
151
+
152
+ - `npx tsc --noEmit` clean, `npm test 279/279` on **Windows** (`omp/18.1.3`, `pi 0.84.4`) and **Linux `acerblue-local`** (`Ubuntu 6.8.0-138`, `node v22.23.2`, `pi 0.84.4`) via `/tmp/pi-freeflow-validation`. **`macOS not tested`** this cycle.
153
+ - Reporter `LOYINuts` issue #3 (`pi idle creates many sessions → force reboot`) — `grep -r rtk src` ∅ confirms `rtk` is an external global skill (`~/.agents/skills/rtk` → `Command::new("cmd")` without `CREATE_NO_WINDOW`), not `pi-freeflow`. After this fix, closing the terminal no longer leaves flashing zombies; kill via `netstat -ano | findstr :28180` → `taskkill /F /PID` or `/freeflow kill`.
154
+
155
+ ## 1.9.2 - 2026-08-31
156
+
157
+ ### Fixes
158
+
159
+ - **Closing one session no longer stops the shared local proxy.** The proxy daemon
160
+ is now a fully detached background process: it outlives any single OMP/Pi session
161
+ (previously, closing the session that owned the daemon could shut it down even
162
+ while other sessions were still using it). It retires by itself only when no
163
+ session is connected, no request is in flight, and it has been idle for a grace
164
+ period. The next use starts it again automatically.
165
+ - New command: `/freeflow kill` (aliases `stop`, `shutdown`) stops the background
166
+ daemon on demand. The next freeflow use restarts it.
167
+
168
+ ### Improvements
169
+
170
+ - The proxy tracks connected sessions and last request time; `/freeflow status`
171
+ and the health endpoint now report active session leases, so you can see when
172
+ other sessions are keeping the daemon alive.
173
+ - Docs: the command reference now lists `kill`, and the FAQ explains the shared
174
+ daemon lifecycle (survives session close; self-retires when unused).
175
+
176
+ ## 1.9.1 - 2026-08-30
177
+
178
+ ### Fixes
179
+
180
+ - Stale-daemon guard completed: a pre-1.9.0 daemon cannot report its in-flight requests, and usage cannot be verified — so it is now left running instead of being replaced. Previously such a daemon could still be killed mid-stream while busy (a one-time window when upgrading from 1.8.x). The guarantee now holds in every case: only older, verified-idle daemons are replaced.
181
+ - The stale-daemon kill ritual was consolidated into one path (it was duplicated at five call sites); behavior unchanged.
182
+ - Tests: new coverage for the pre-1.9 daemon case; shared sandbox helpers extracted.
183
+
184
+ ## 1.9.0 - 2026-08-30
185
+
186
+ ### Development hardening
187
+
188
+ - Test suite now runs fully sandboxed: every test uses a temporary data directory, so no test can ever write to your real `~/.pi/agent/` files or interfere with a running local proxy. A single env override (`PI_*_DATA_DIR`) re-roots all data files for tests/CI.
189
+ - Added a complete mocked user-flow e2e suite: fresh install → onboarding → proxy health → direct chat → relay add/roll/fallback → guided deploy → update check → command surface — all deterministic, zero network.
190
+ - Docs: test counts no longer hardcoded in README (they drifted with releases); release history tracked here.
191
+
192
+ ### Fixes
193
+
194
+ - **Stale-daemon replacement no longer interrupts running sessions.** The shared local proxy can be held by another OMP/Pi session; the old upgrade logic killed that holder on version mismatch, which could terminate the session that owned the proxy mid-stream. Replacement now only happens when the running daemon is strictly older AND idle (0 in-flight requests, reported via `/_health`); newer or busy daemons are reused with a log note instead. Optional opt-out: set the no-kill env to `1` (see README FAQ for upgrades).
195
+
196
+ ## 1.8.2 - 2026-08-30
197
+
198
+ ### Fixes & polish
199
+
200
+ - Deploy: compare-and-swap on concurrent deployments (no duplicate relays when two sessions deploy at once).
201
+ - Proxy: URL-encoding edge cases (`%` in paths), startup timeout and kill handling, port conflict fallback.
202
+ - Logs: sanitized sensitive headers in debug output.
203
+ - Kilo gateway models: compatibility pass for all 25 models.
204
+ - Docs site build included; README per-host usage guide (Oh My Pi & Pi install + pick + manage).
205
+
206
+ ## 1.8.1 - 2026-08-29
207
+
208
+ - Fix: stale-daemon auto-heal is now shipped in the published package (previously only in the repo).
209
+
210
+ ## 1.8.0 - 2026-08-29
211
+
212
+ ### Automatic upgrades
213
+
214
+ - On version upgrade, the extension detects a stale local proxy daemon and replaces it automatically — users get fixes without manual restarts or killing sessions.
215
+ - Fix: client auth key stripped before reaching the opencode.ai/zen upstream (failed with 401 for some clients).
216
+ - 3 new free models (28 total).
217
+
218
+ ## 1.7.1 - 2026-08-29
219
+
220
+ - Docs: clarified npm is the distribution channel (the package is an extension loaded by OMP/Pi, not a standalone CLI).
221
+
222
+ ## 1.7.0 - 2026-08-29
223
+
224
+ - 4 new free models (25 total) with live-verified specs (context/output limits, vision, thinking levels).
225
+ - New alias map aligned with host model selectors.
226
+
227
+ ## 1.6.1 - 2026-08-29
228
+
229
+ - Catalog: thinking-level map locked per model; docs sync.
230
+
231
+ ## 1.6.0 - 2026-08-29
232
+
233
+ ### Onboarding & UX
234
+
235
+ - First-run onboarding message; 429 guidance hint (add your own relay egress).
236
+ - `/freeflow test` to probe a relay; relay latency tracking with health badges in `/freeflow list`.
237
+ - Guided deploy with context picker + confirmation; post-deploy health check.
238
+ - Status clarity: current mode + state file path; log text filter; per-relay usage counters; throttled roll notifications.
239
+
240
+ ### Reliability
241
+
242
+ - Relay state write-protection: before every save, the current state is snapshotted to `.bak`; if the main file is corrupted or missing, the backup is recovered automatically.
243
+ - New-user flow never seeds a fake relay; starts in direct mode with an empty pool.
244
+
245
+ ## 1.5.1 - 2026-08-28
246
+
247
+ - Edge-sweep fixes: port 28180 with legacy 18080 dual-probe auto-migration, OMP/Pi compatibility.