pi-freeflow 1.9.9 → 1.10.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -1,170 +1,194 @@
1
- # Changelog
2
-
3
- All notable changes to pi-freeflow. Public, user-visible behavior only.
4
-
5
- ## 1.9.9 - 2026-09-06
6
-
7
- ### Fixes
8
- - **Removed our own request cap — sorry, that one was on us.** The proxy used to enforce a built-in request limit and could answer 429 before upstream quota was actually exhausted. That was a bug, not your quota. From this version the proxy never rejects on quota itself: a 429 only surfaces when the upstream — and every relay in your pool — genuinely is rate-limited, and that response now points you at `/freeflow deploy` to add relay egress.
9
-
10
- ### Validation
11
- - TypeScript typecheck passed cleanly (`tsc --noEmit`) on Windows and Ubuntu Linux (`acerblue-local`).
12
- - Full test suite: Windows 302 tests (301 pass + 1 Linux-only skip), `acerblue-local` 302/302 pass, including new regressions locking the guidance hint onto genuine upstream 429s (direct path and exhausted relay pool).
13
- - Sandboxed stress harness 7/7 on `acerblue-local`; extension smoke load green on both machines.
14
-
15
- ## 1.9.8 - 2026-09-06
16
-
17
- ### Fixes
18
- - **Stale model list heals itself (follow-up to #6).** If your saved model list predates a newly added model, the background refresh now repairs the entry (correct endpoint and details) instead of sending requests to the wrong address — no manual `/freeflow refresh` or cache deletion needed.
19
- - **Paid models stay out of the picker even from old saved lists.** Every read of the saved model list now drops non-free entries, so models requiring an API key cannot linger after an upgrade.
20
- - **Old saved lists without a sync marker now re-sync once.** A saved list that could never trigger a network check now performs one plain revalidation (then syncs normally), so newly added free models appear without manual intervention. Missing or corrupt lists still fall back silently with no network call.
21
- - **Upstream errors are now visible in the proxy log.** Failed upstream responses log their status code and model, and a model routed to the wrong endpoint logs the mismatch with the fix (restart Pi/OMP after upgrade).
22
-
23
- ### Validation
24
- - TypeScript typecheck passed cleanly (`tsc --noEmit`).
25
- - Full test suite passed on Windows (304 tests) and Ubuntu Linux (`acerblue`, 305/305 tests passed), including new regressions for the stale-cache shape from #6.
26
- - Live sweep of all 26 models through a fresh install on `acerblue`: 23/26 answered on first try (both Muse Spark models via the Responses endpoint); the 3 misses are upstream per-model daily quotas (429), zero server errors.
27
-
28
- ## 1.9.7 - 2026-09-06
29
-
30
- ### Fixes
31
- - **Model picker only shows verified free models (fixes #6).** Background catalog refresh now filters out non-free models from upstream endpoints so paid models requiring an API key no longer leak into your picker.
32
- - **Relay pool automatically recovers from dead deployments (fixes #5).** If a relay URL in your pool returns an infrastructure 404 (such as a missing or deleted Vercel deployment), the proxy marks it as failed and immediately rolls over to your next healthy relay or direct mode instead of getting trapped in a 404 loop.
33
-
34
- ### Changes
35
- - **Updated model catalog (26 verified free models: 7 OpenCode Zen + 19 KiloCode Gateway).**
36
- - Added `inclusionai/ling-3.0-flash-sante:free` (Ling 3.0 Flash Sante, 262K context, 32K output, reasoning supported). Clean CLI alias `ling-3.0-flash-sante` supported.
37
- - Removed `laguna-s-2.1-free` (OpenCode Zen) after upstream dropped free-tier access. `poolside/laguna-s-2.1:free` on Kilo remains active.
38
- - **Public by default for new relay deployments.** Relays deployed via `/freeflow deploy` are now public by default with no mandatory authentication tokens. This enables seamless copy-paste migration across proxy tools (such as 9router) while maintaining safety guards for allowed AI upstreams.
39
-
40
- ### Validation
41
- - TypeScript typecheck passed cleanly (`tsc --noEmit`).
42
- - Full test suite passed across Windows (299 tests) and Ubuntu Linux (`acerblue-local`, 300/300 tests passed).
43
- - End-to-end concurrency and failover stress testing verified (100 parallel requests, 20 subagent leases, burst failover).
44
-
45
- ## 1.9.6 - 2026-09-03
46
-
47
- ### Fixes
48
- - **Hiding the status widget now sticks.** `/freeflow hide` survives restarts, new sessions, and background update notices — previously the widget could reappear on the next session.
49
- - **Calmer startup with many sessions.** Sessions starting at the same time now converge on a single background proxy instead of each spawning its own; a spawn that never becomes ready falls back to in-process mode instead of running untracked.
50
- - **Survives daemon restarts mid-session.** If the background proxy is replaced while sessions run, connected sessions re-register automatically instead of silently losing their lease (which could retire the daemon mid-use).
51
- - **Stale-version cleanup targets the right process.** Windows port matching is now exact, and Linux without `lsof`/`fuser` resolves the holder via `/proc` instead of giving up.
52
- - **`/freeflow logs --follow` no longer runs forever.** The live tail stops when the session ends and caps burst output; the update/install subprocess now has a 2-minute timeout.
53
-
54
- ### Validation
55
- - `npx tsc --noEmit` clean, `npm test` 299 (298 pass + 1 Linux-only skip) + smoke green on Windows; stress harness 7/7 on Windows and Linux `acerblue-local`. **`macOS not tested`** this cycle.
56
-
57
- ## 1.9.5 - 2026-09-03
58
-
59
- ### Changes
60
- - **Catalog refreshed against live upstream model lists (26 models: 8 OpenCode Zen + 18 KiloCode Gateway).** Re-checked both upstreams against their live endpoints and live inference probes:
61
- - **Added** `muse-spark-1.3-contributor-free` (OpenCode Zen, Responses API, 1M context, 131K output, vision) — verified live: completes with reasoning, accepts effort levels, and answers vision queries.
62
- - **Removed** `hy3-free` (OpenCode Zen) — upstream no longer serves it (`Model hy3-free is not supported`).
63
- - **Removed** `tencent/hy3:free` and `meituan/longcat-2.0-free` (KiloCode Gateway) — upstream free tier dropped them (model unavailable / sign-in required).
64
- - Pruned IDs added to the dead-model filter so a stale disk cache cannot resurrect them.
65
-
66
- ### Validation
67
- - `npx tsc --noEmit` clean, `npm test` full suite green on Windows.
68
-
69
- ## 1.9.4 - 2026-09-02
70
-
71
- ### Dependencies
72
- - **Zero runtime dependencies.** Removed `undici@8.10.0` — `pi` (`0.84.4`) and `omp` (`18.1.3`) already bundle `undici` 6.x/7.x and expose `global fetch` with keep-alive pooling. `relayFetch` and proxy now use `global fetch` directly (`src/relay.ts` `Agent` + `canUseCustomDispatcher` + `dispatcher: agent` removed; `src/proxy.ts` dispatcher removed). Keeps thin `11.3k` + `298 tests` + `0 deps` compatible directly with `reference/pi` + `reference/oh-my-pi`.
73
-
74
- ### Validation
75
- - `npx tsc --noEmit` clean, `npm test 298/298` on **Windows** (`omp/18.1.3`, `pi 0.84.4`) and **Linux `acerblue-local`** (`Ubuntu 6.8.0-138`, `node v22.23.2`, `pi 0.84.4`) via `/tmp/pi-freeflow-validation`. **`macOS not tested`** this cycle.
76
-
77
- ## 1.9.3 - 2026-09-02
78
-
79
- ### Fixes
80
- - **Windows console flood fixed.** Two Windows-only helpers flashed a visible `conhost`/`cmd` window on every daemon probe: `netstat -ano | findstr :28180` / `taskkill` in the stale-daemon replace path and `spawn(omp|npm, shell:true)` for `/freeflow update`. Both now use `windowsHide: true` (no-op on Linux/macOS) and `spawnWithProgress` was refactored to `Promise.withResolvers` to satisfy `ts-promise-with-resolvers`. Idle `pi` no longer spawns many visible consoles even after closing the terminal (detached daemon at `127.0.0.1:28180` survives by design; `beatOnce` 10s heartbeat now throttled 2s via `lastSpawnAt`).
81
- - Daemon spawn now throttled per-process (2s) as a storm guard when `28180` is contended or blocked; the `ensuring` guard + `waitForReady 5s` already prevented tight loops.
82
-
83
- ### Validation
84
- - `npx tsc --noEmit` clean, `npm test 279/279` on **Windows** (`omp/18.1.3`, `pi 0.84.4`) and **Linux `acerblue-local`** (`Ubuntu 6.8.0-138`, `node v22.23.2`, `pi 0.84.4`) via `/tmp/pi-freeflow-validation`. **`macOS not tested`** this cycle.
85
- - Reporter `LOYINuts` issue #3 (`pi idle creates many sessions → force reboot`) — `grep -r rtk src` ∅ confirms `rtk` is an external global skill (`~/.agents/skills/rtk` → `Command::new("cmd")` without `CREATE_NO_WINDOW`), not `pi-freeflow`. After this fix, closing the terminal no longer leaves flashing zombies; kill via `netstat -ano | findstr :28180` → `taskkill /F /PID` or `/freeflow kill`.
86
-
87
- ## 1.9.2 - 2026-08-31
88
-
89
- ### Fixes
90
- - **Closing one session no longer stops the shared local proxy.** The proxy daemon
91
- is now a fully detached background process: it outlives any single OMP/Pi session
92
- (previously, closing the session that owned the daemon could shut it down even
93
- while other sessions were still using it). It retires by itself only when no
94
- session is connected, no request is in flight, and it has been idle for a grace
95
- period. The next use starts it again automatically.
96
- - New command: `/freeflow kill` (aliases `stop`, `shutdown`) stops the background
97
- daemon on demand. The next freeflow use restarts it.
98
-
99
- ### Improvements
100
- - The proxy tracks connected sessions and last request time; `/freeflow status`
101
- and the health endpoint now report active session leases, so you can see when
102
- other sessions are keeping the daemon alive.
103
- - Docs: the command reference now lists `kill`, and the FAQ explains the shared
104
- daemon lifecycle (survives session close; self-retires when unused).
105
-
106
- ## 1.9.1 - 2026-08-30
107
-
108
- ### Fixes
109
- - Stale-daemon guard completed: a pre-1.9.0 daemon cannot report its in-flight requests, and usage cannot be verified — so it is now left running instead of being replaced. Previously such a daemon could still be killed mid-stream while busy (a one-time window when upgrading from 1.8.x). The guarantee now holds in every case: only older, verified-idle daemons are replaced.
110
- - The stale-daemon kill ritual was consolidated into one path (it was duplicated at five call sites); behavior unchanged.
111
- - Tests: new coverage for the pre-1.9 daemon case; shared sandbox helpers extracted.
112
-
113
- ## 1.9.0 - 2026-08-30
114
-
115
- ### Development hardening
116
- - Test suite now runs fully sandboxed: every test uses a temporary data directory, so no test can ever write to your real `~/.pi/agent/` files or interfere with a running local proxy. A single env override (`PI_*_DATA_DIR`) re-roots all data files for tests/CI.
117
- - Added a complete mocked user-flow e2e suite: fresh install → onboarding → proxy health direct chat relay add/roll/fallback guided deploy → update check → command surface — all deterministic, zero network.
118
- - Docs: test counts no longer hardcoded in README (they drifted with releases); release history tracked here.
119
-
120
- ### Fixes
121
- - **Stale-daemon replacement no longer interrupts running sessions.** The shared local proxy can be held by another OMP/Pi session; the old upgrade logic killed that holder on version mismatch, which could terminate the session that owned the proxy mid-stream. Replacement now only happens when the running daemon is strictly older AND idle (0 in-flight requests, reported via `/_health`); newer or busy daemons are reused with a log note instead. Optional opt-out: set the no-kill env to `1` (see README FAQ for upgrades).
122
-
123
- ## 1.8.2 - 2026-08-30
124
-
125
- ### Fixes & polish
126
- - Deploy: compare-and-swap on concurrent deployments (no duplicate relays when two sessions deploy at once).
127
- - Proxy: URL-encoding edge cases (`%` in paths), startup timeout and kill handling, port conflict fallback.
128
- - Logs: sanitized sensitive headers in debug output.
129
- - Kilo gateway models: compatibility pass for all 25 models.
130
- - Docs site build included; README per-host usage guide (Oh My Pi & Pi install + pick + manage).
131
-
132
- ## 1.8.1 - 2026-08-29
133
-
134
- - Fix: stale-daemon auto-heal is now shipped in the published package (previously only in the repo).
135
-
136
- ## 1.8.0 - 2026-08-29
137
-
138
- ### Automatic upgrades
139
- - On version upgrade, the extension detects a stale local proxy daemon and replaces it automatically — users get fixes without manual restarts or killing sessions.
140
- - Fix: client auth key stripped before reaching the opencode.ai/zen upstream (failed with 401 for some clients).
141
- - 3 new free models (28 total).
142
-
143
- ## 1.7.1 - 2026-08-29
144
-
145
- - Docs: clarified npm is the distribution channel (the package is an extension loaded by OMP/Pi, not a standalone CLI).
146
-
147
- ## 1.7.0 - 2026-08-29
148
-
149
- - 4 new free models (25 total) with live-verified specs (context/output limits, vision, thinking levels).
150
- - New alias map aligned with host model selectors.
151
-
152
- ## 1.6.1 - 2026-08-29
153
-
154
- - Catalog: thinking-level map locked per model; docs sync.
155
-
156
- ## 1.6.0 - 2026-08-29
157
-
158
- ### Onboarding & UX
159
- - First-run onboarding message; 429 guidance hint (add your own relay egress).
160
- - `/freeflow test` to probe a relay; relay latency tracking with health badges in `/freeflow list`.
161
- - Guided deploy with context picker + confirmation; post-deploy health check.
162
- - Status clarity: current mode + state file path; log text filter; per-relay usage counters; throttled roll notifications.
163
-
164
- ### Reliability
165
- - Relay state write-protection: before every save, the current state is snapshotted to `.bak`; if the main file is corrupted or missing, the backup is recovered automatically.
166
- - New-user flow never seeds a fake relay; starts in direct mode with an empty pool.
167
-
168
- ## 1.5.1 - 2026-08-28
169
-
170
- - Edge-sweep fixes: port 28180 with legacy 18080 dual-probe auto-migration, OMP/Pi compatibility.
1
+ # Changelog
2
+
3
+ ## 1.10.0
4
+
5
+ ### Minor Changes
6
+
7
+ - cf48598: Hands-free proxy recovery plus catalog refresh: the proxy now watches its own health, restarts with backoff instead of leaving a dead port, and can start on login. Removed two discontinued free models from the picker.
8
+
9
+ All notable changes to pi-freeflow. Public, user-visible behavior only.
10
+
11
+ ## 1.9.9 - 2026-09-06
12
+
13
+ ### Fixes
14
+
15
+ - **Removed our own request cap — sorry, that one was on us.** The proxy used to enforce a built-in request limit and could answer 429 before upstream quota was actually exhausted. That was a bug, not your quota. From this version the proxy never rejects on quota itself: a 429 only surfaces when the upstream — and every relay in your pool — genuinely is rate-limited, and that response now points you at `/freeflow deploy` to add relay egress.
16
+
17
+ ## 1.9.8 - 2026-09-06
18
+
19
+ ### Fixes
20
+
21
+ - **Stale model list heals itself (follow-up to #6).** If your saved model list predates a newly added model, the background refresh now repairs the entry (correct endpoint and details) instead of sending requests to the wrong address no manual `/freeflow refresh` or cache deletion needed.
22
+ - **Paid models stay out of the picker even from old saved lists.** Every read of the saved model list now drops non-free entries, so models requiring an API key cannot linger after an upgrade.
23
+ - **Old saved lists without a sync marker now re-sync once.** A saved list that could never trigger a network check now performs one plain revalidation (then syncs normally), so newly added free models appear without manual intervention. Missing or corrupt lists still fall back silently with no network call.
24
+ - **Upstream errors are now visible in the proxy log.** Failed upstream responses log their status code and model, and a model routed to the wrong endpoint logs the mismatch with the fix (restart Pi/OMP after upgrade).
25
+
26
+ ### Validation
27
+
28
+ - TypeScript typecheck passed cleanly (`tsc --noEmit`).
29
+ - Full test suite passed on Windows (304 tests) and Ubuntu Linux (`acerblue`, 305/305 tests passed), including new regressions for the stale-cache shape from #6.
30
+ - Live sweep of all 26 models through a fresh install on `acerblue`: 23/26 answered on first try (both Muse Spark models via the Responses endpoint); the 3 misses are upstream per-model daily quotas (429), zero server errors.
31
+
32
+ ## 1.9.7 - 2026-09-06
33
+
34
+ ### Fixes
35
+
36
+ - **Model picker only shows verified free models (fixes #6).** Background catalog refresh now filters out non-free models from upstream endpoints so paid models requiring an API key no longer leak into your picker.
37
+ - **Relay pool automatically recovers from dead deployments (fixes #5).** If a relay URL in your pool returns an infrastructure 404 (such as a missing or deleted Vercel deployment), the proxy marks it as failed and immediately rolls over to your next healthy relay or direct mode instead of getting trapped in a 404 loop.
38
+
39
+ ### Changes
40
+
41
+ - **Updated model catalog (26 verified free models: 7 OpenCode Zen + 19 KiloCode Gateway).**
42
+ - Added `inclusionai/ling-3.0-flash-sante:free` (Ling 3.0 Flash Sante, 262K context, 32K output, reasoning supported). Clean CLI alias `ling-3.0-flash-sante` supported.
43
+ - Removed `laguna-s-2.1-free` (OpenCode Zen) after upstream dropped free-tier access. `poolside/laguna-s-2.1:free` on Kilo remains active.
44
+ - **Public by default for new relay deployments.** Relays deployed via `/freeflow deploy` are now public by default with no mandatory authentication tokens. This enables seamless copy-paste migration across proxy tools (such as 9router) while maintaining safety guards for allowed AI upstreams.
45
+
46
+ ### Validation
47
+
48
+ - TypeScript typecheck passed cleanly (`tsc --noEmit`).
49
+ - Full test suite passed across Windows (299 tests) and Ubuntu Linux (`acerblue-local`, 300/300 tests passed).
50
+ - End-to-end concurrency and failover stress testing verified (100 parallel requests, 20 subagent leases, burst failover).
51
+
52
+ ## 1.9.6 - 2026-09-03
53
+
54
+ ### Fixes
55
+
56
+ - **Hiding the status widget now sticks.** `/freeflow hide` survives restarts, new sessions, and background update notices — previously the widget could reappear on the next session.
57
+ - **Calmer startup with many sessions.** Sessions starting at the same time now converge on a single background proxy instead of each spawning its own; a spawn that never becomes ready falls back to in-process mode instead of running untracked.
58
+ - **Survives daemon restarts mid-session.** If the background proxy is replaced while sessions run, connected sessions re-register automatically instead of silently losing their lease (which could retire the daemon mid-use).
59
+ - **Stale-version cleanup targets the right process.** Windows port matching is now exact, and Linux without `lsof`/`fuser` resolves the holder via `/proc` instead of giving up.
60
+ - **`/freeflow logs --follow` no longer runs forever.** The live tail stops when the session ends and caps burst output; the update/install subprocess now has a 2-minute timeout.
61
+
62
+ ### Validation
63
+
64
+ - `npx tsc --noEmit` clean, `npm test` 299 (298 pass + 1 Linux-only skip) + smoke green on Windows; stress harness 7/7 on Windows and Linux `acerblue-local`. **`macOS not tested`** this cycle.
65
+
66
+ ## 1.9.5 - 2026-09-03
67
+
68
+ ### Changes
69
+
70
+ - **Catalog refreshed against live upstream model lists (26 models: 8 OpenCode Zen + 18 KiloCode Gateway).** Re-checked both upstreams against their live endpoints and live inference probes:
71
+ - **Added** `muse-spark-1.3-contributor-free` (OpenCode Zen, Responses API, 1M context, 131K output, vision) — verified live: completes with reasoning, accepts effort levels, and answers vision queries.
72
+ - **Removed** `hy3-free` (OpenCode Zen) upstream no longer serves it (`Model hy3-free is not supported`).
73
+ - **Removed** `tencent/hy3:free` and `meituan/longcat-2.0-free` (KiloCode Gateway) — upstream free tier dropped them (model unavailable / sign-in required).
74
+ - Pruned IDs added to the dead-model filter so a stale disk cache cannot resurrect them.
75
+
76
+ ### Validation
77
+
78
+ - `npx tsc --noEmit` clean, `npm test` full suite green on Windows.
79
+
80
+ ## 1.9.4 - 2026-09-02
81
+
82
+ ### Dependencies
83
+
84
+ - **Zero runtime dependencies.** Removed `undici@8.10.0` `pi` (`0.84.4`) and `omp` (`18.1.3`) already bundle `undici` 6.x/7.x and expose `global fetch` with keep-alive pooling. `relayFetch` and proxy now use `global fetch` directly (`src/relay.ts` `Agent` + `canUseCustomDispatcher` + `dispatcher: agent` removed; `src/proxy.ts` dispatcher removed). Keeps thin `11.3k` + `298 tests` + `0 deps` compatible directly with `reference/pi` + `reference/oh-my-pi`.
85
+
86
+ ### Validation
87
+
88
+ - `npx tsc --noEmit` clean, `npm test 298/298` on **Windows** (`omp/18.1.3`, `pi 0.84.4`) and **Linux `acerblue-local`** (`Ubuntu 6.8.0-138`, `node v22.23.2`, `pi 0.84.4`) via `/tmp/pi-freeflow-validation`. **`macOS not tested`** this cycle.
89
+
90
+ ## 1.9.3 - 2026-09-02
91
+
92
+ ### Fixes
93
+
94
+ - **Windows console flood fixed.** Two Windows-only helpers flashed a visible `conhost`/`cmd` window on every daemon probe: `netstat -ano | findstr :28180` / `taskkill` in the stale-daemon replace path and `spawn(omp|npm, shell:true)` for `/freeflow update`. Both now use `windowsHide: true` (no-op on Linux/macOS) and `spawnWithProgress` was refactored to `Promise.withResolvers` to satisfy `ts-promise-with-resolvers`. Idle `pi` no longer spawns many visible consoles even after closing the terminal (detached daemon at `127.0.0.1:28180` survives by design; `beatOnce` 10s heartbeat now throttled 2s via `lastSpawnAt`).
95
+ - Daemon spawn now throttled per-process (2s) as a storm guard when `28180` is contended or blocked; the `ensuring` guard + `waitForReady 5s` already prevented tight loops.
96
+
97
+ ### Validation
98
+
99
+ - `npx tsc --noEmit` clean, `npm test 279/279` on **Windows** (`omp/18.1.3`, `pi 0.84.4`) and **Linux `acerblue-local`** (`Ubuntu 6.8.0-138`, `node v22.23.2`, `pi 0.84.4`) via `/tmp/pi-freeflow-validation`. **`macOS not tested`** this cycle.
100
+ - Reporter `LOYINuts` issue #3 (`pi idle creates many sessions force reboot`) — `grep -r rtk src` ∅ confirms `rtk` is an external global skill (`~/.agents/skills/rtk` → `Command::new("cmd")` without `CREATE_NO_WINDOW`), not `pi-freeflow`. After this fix, closing the terminal no longer leaves flashing zombies; kill via `netstat -ano | findstr :28180` → `taskkill /F /PID` or `/freeflow kill`.
101
+
102
+ ## 1.9.2 - 2026-08-31
103
+
104
+ ### Fixes
105
+
106
+ - **Closing one session no longer stops the shared local proxy.** The proxy daemon
107
+ is now a fully detached background process: it outlives any single OMP/Pi session
108
+ (previously, closing the session that owned the daemon could shut it down even
109
+ while other sessions were still using it). It retires by itself only when no
110
+ session is connected, no request is in flight, and it has been idle for a grace
111
+ period. The next use starts it again automatically.
112
+ - New command: `/freeflow kill` (aliases `stop`, `shutdown`) stops the background
113
+ daemon on demand. The next freeflow use restarts it.
114
+
115
+ ### Improvements
116
+
117
+ - The proxy tracks connected sessions and last request time; `/freeflow status`
118
+ and the health endpoint now report active session leases, so you can see when
119
+ other sessions are keeping the daemon alive.
120
+ - Docs: the command reference now lists `kill`, and the FAQ explains the shared
121
+ daemon lifecycle (survives session close; self-retires when unused).
122
+
123
+ ## 1.9.1 - 2026-08-30
124
+
125
+ ### Fixes
126
+
127
+ - Stale-daemon guard completed: a pre-1.9.0 daemon cannot report its in-flight requests, and usage cannot be verified — so it is now left running instead of being replaced. Previously such a daemon could still be killed mid-stream while busy (a one-time window when upgrading from 1.8.x). The guarantee now holds in every case: only older, verified-idle daemons are replaced.
128
+ - The stale-daemon kill ritual was consolidated into one path (it was duplicated at five call sites); behavior unchanged.
129
+ - Tests: new coverage for the pre-1.9 daemon case; shared sandbox helpers extracted.
130
+
131
+ ## 1.9.0 - 2026-08-30
132
+
133
+ ### Development hardening
134
+
135
+ - Test suite now runs fully sandboxed: every test uses a temporary data directory, so no test can ever write to your real `~/.pi/agent/` files or interfere with a running local proxy. A single env override (`PI_*_DATA_DIR`) re-roots all data files for tests/CI.
136
+ - Added a complete mocked user-flow e2e suite: fresh install → onboarding → proxy health → direct chat → relay add/roll/fallback → guided deploy → update check → command surface — all deterministic, zero network.
137
+ - Docs: test counts no longer hardcoded in README (they drifted with releases); release history tracked here.
138
+
139
+ ### Fixes
140
+
141
+ - **Stale-daemon replacement no longer interrupts running sessions.** The shared local proxy can be held by another OMP/Pi session; the old upgrade logic killed that holder on version mismatch, which could terminate the session that owned the proxy mid-stream. Replacement now only happens when the running daemon is strictly older AND idle (0 in-flight requests, reported via `/_health`); newer or busy daemons are reused with a log note instead. Optional opt-out: set the no-kill env to `1` (see README FAQ for upgrades).
142
+
143
+ ## 1.8.2 - 2026-08-30
144
+
145
+ ### Fixes & polish
146
+
147
+ - Deploy: compare-and-swap on concurrent deployments (no duplicate relays when two sessions deploy at once).
148
+ - Proxy: URL-encoding edge cases (`%` in paths), startup timeout and kill handling, port conflict fallback.
149
+ - Logs: sanitized sensitive headers in debug output.
150
+ - Kilo gateway models: compatibility pass for all 25 models.
151
+ - Docs site build included; README per-host usage guide (Oh My Pi & Pi install + pick + manage).
152
+
153
+ ## 1.8.1 - 2026-08-29
154
+
155
+ - Fix: stale-daemon auto-heal is now shipped in the published package (previously only in the repo).
156
+
157
+ ## 1.8.0 - 2026-08-29
158
+
159
+ ### Automatic upgrades
160
+
161
+ - On version upgrade, the extension detects a stale local proxy daemon and replaces it automatically — users get fixes without manual restarts or killing sessions.
162
+ - Fix: client auth key stripped before reaching the opencode.ai/zen upstream (failed with 401 for some clients).
163
+ - 3 new free models (28 total).
164
+
165
+ ## 1.7.1 - 2026-08-29
166
+
167
+ - Docs: clarified npm is the distribution channel (the package is an extension loaded by OMP/Pi, not a standalone CLI).
168
+
169
+ ## 1.7.0 - 2026-08-29
170
+
171
+ - 4 new free models (25 total) with live-verified specs (context/output limits, vision, thinking levels).
172
+ - New alias map aligned with host model selectors.
173
+
174
+ ## 1.6.1 - 2026-08-29
175
+
176
+ - Catalog: thinking-level map locked per model; docs sync.
177
+
178
+ ## 1.6.0 - 2026-08-29
179
+
180
+ ### Onboarding & UX
181
+
182
+ - First-run onboarding message; 429 guidance hint (add your own relay egress).
183
+ - `/freeflow test` to probe a relay; relay latency tracking with health badges in `/freeflow list`.
184
+ - Guided deploy with context picker + confirmation; post-deploy health check.
185
+ - Status clarity: current mode + state file path; log text filter; per-relay usage counters; throttled roll notifications.
186
+
187
+ ### Reliability
188
+
189
+ - Relay state write-protection: before every save, the current state is snapshotted to `.bak`; if the main file is corrupted or missing, the backup is recovered automatically.
190
+ - New-user flow never seeds a fake relay; starts in direct mode with an empty pool.
191
+
192
+ ## 1.5.1 - 2026-08-28
193
+
194
+ - Edge-sweep fixes: port 28180 with legacy 18080 dual-probe auto-migration, OMP/Pi compatibility.
package/README.md CHANGED
@@ -1,6 +1,6 @@
1
1
  # pi-freeflow 🌊
2
2
 
3
- > **26 free models. Up to 1M context. Zero API keys. Infinite scale via your own relay pool.**
3
+ > **24 free models. Up to 1M context. Zero API keys. Infinite scale via your own relay pool.**
4
4
 
5
5
  Thin by design: model list + dumb relay + log. Host `pi-ai` owns thinking, normalization & provider magic. We just make it free, fast, and unbreakable.
6
6
 
@@ -18,7 +18,7 @@ Join devs bypassing rate limits with their own relay pools. BYO, add as many as
18
18
 
19
19
  | Feature | Description | Value | Cost |
20
20
  | :--- | :--- | :--- | :--- |
21
- | **26 Curated Free Models** | 7 OpenCode Zen + 19 KiloCode Gateway models, up to 1M context & 512K output | Ceiling Unlocked | **$0** |
21
+ | **24 Curated Free Models** | 7 OpenCode Zen + 17 KiloCode Gateway models, up to 1M context & 512K output | Ceiling Unlocked | **$0** |
22
22
  | **BYO Relay Pool** | Round-robin load balancing across your Cloudflare Workers & Vercel Edges | Zero Rate Limits | **$0** (your free tiers) |
23
23
  | **Adaptive Health & Error Detection** | Auto-cooldown on 429 rate limits, 504 timeouts, and socket drops | 0ms Wasted Latency | **$0** |
24
24
  | **Stream Truncation Resilience** | Stateful SSE terminal tracking (`response.failed` / `response.incomplete` injection) | Zero Host Crashes | **$0** |
@@ -32,7 +32,7 @@ Philosophy: **Thin by design.** We only ship model list + relay proxy + log. Hos
32
32
 
33
33
  ---
34
34
 
35
- ### 26 Curated Models, One Command
35
+ ### 24 Curated Models, One Command
36
36
 
37
37
  ```bash
38
38
  /model → freeflow → pick
@@ -51,7 +51,7 @@ Optimized for deep reasoning, long-horizon coding & autonomous agentic workflows
51
51
  | `big-pickle` | Big Pickle | **200K** (200.000) | **32K** (32.000) | `high / max` | ❌ |
52
52
  | `ling-3.0-flash-fin-free` | Inclusion AI | **262K** (262.144) | **131K** (131.072) | `minimal … xhigh` | ❌ |
53
53
 
54
- #### KiloCode Gateway (19 Models), OpenRouter Compatible
54
+ #### KiloCode Gateway (17 Models), OpenRouter Compatible
55
55
  Keyless access with `Bearer kilo-free`. Clean slash-free and colon-free CLI aliases supported.
56
56
 
57
57
  | Model ID | Creator / Lab | Context | Max Output | Thinking | Vision |
@@ -69,8 +69,6 @@ Keyless access with `Bearer kilo-free`. Clean slash-free and colon-free CLI alia
69
69
  | `kilo-auto` (`kilo-auto/free`) | Kilo Gateway Auto | **256K** (256.000) | **10K** (10.000) | `minimal…xhigh`\* | ❌ |
70
70
  | `openrouter` (`openrouter/free`) | OpenRouter Free | **200K** (200.000) | **65K** (65.536) | `minimal…xhigh`\* | ✅ |
71
71
  | `content-safety` (`nvidia/...:free`) | NVIDIA | **128K** (128.000) | **8K** (8.192) | ❌ *(non-thinking)* | ✅ |
72
- | `minimax-m2.7` (`minimax/minimax-m2.7:free`) | MiniMax | **196K** (196.608) | **196K** (196.608) | `minimal…xhigh`\* | ❌ |
73
- | `minimax-m3` (`minimax/minimax-m3:free`) | MiniMax | **1M** (1.048.576) | **512K** (524.288) | `minimal…xhigh`\* | ❌ |
74
72
  | `ling-3.0-flash-fin` (`inclusionai/ling-3.0-flash-fin:free`) | Inclusion AI | **262K** (262.144) | **32K** (32.768) | `minimal…xhigh`\* | ❌ |
75
73
  | `inkling` (`thinkingmachines/inkling:free`) | Thinking Machines | **1M** (1.048.576) | **262K** (262.144) | `minimal…xhigh`\* | ✅ |
76
74
  | `ling-3.0-flash-sante` (`inclusionai/ling-3.0-flash-sante:free`) | Inclusion AI | **262K** (262.144) | **32K** (32.768) | `minimal…xhigh`\* | ❌ |
@@ -342,7 +340,7 @@ pnpm smoke # verifies extensions/index.ts loads without crashing
342
340
  ```
343
341
  src/
344
342
  ├── index.ts # extension entry, lifecycle hooks
345
- ├── models.ts # 26-model catalog definitions
343
+ ├── models.ts # 24-model catalog definitions
346
344
  ├── catalog.ts # model catalog cache (24h disk)
347
345
  ├── proxy.ts # local proxy server (127.0.0.1:28180)
348
346
  ├── relay.ts # relay selection & round-robin
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "pi-freeflow",
3
3
  "type": "module",
4
- "version": "1.9.9",
4
+ "version": "1.10.0",
5
5
  "description": "Thin provider for OMP/Pi — model list + dumb relay proxy + log; host pi-ai owns thinking/normalization",
6
6
  "main": "extensions/index.ts",
7
7
  "types": "src/index.ts",
package/src/catalog.ts CHANGED
@@ -38,6 +38,8 @@ export const DEAD_MODEL_IDS = new Set<string>([
38
38
  "tencent/hy3:free",
39
39
  "meituan/longcat-2.0-free",
40
40
  "laguna-s-2.1-free",
41
+ "minimax/minimax-m2.7:free",
42
+ "minimax/minimax-m3:free",
41
43
  ]);
42
44
  /**
43
45
  * Free-tier allowlist for anything entering the picker via network or stale disk.
@@ -74,7 +76,7 @@ export function sanitizeCatalogModels(models: RegisteredModel[]): RegisteredMode
74
76
  }
75
77
  /**
76
78
  * In-memory cache of currently active/available free models.
77
- * Initialized with all 26 verified models for 0ms instant availability.
79
+ * Initialized with all 24 verified models for 0ms instant availability.
78
80
  */
79
81
  let aliveCatalog: RegisteredModel[] = ALL_MODELS.map((m) => ({
80
82
  ...m,
@@ -397,6 +399,6 @@ export async function refreshCatalog(force = false): Promise<RegisteredModel[]>
397
399
  } catch (err) {
398
400
  logDebug("Failed reading stale catalog cache", { error: String(err) });
399
401
  }
400
- // No valid cache — return in-memory static 26 (host will refresh if needed)
402
+ // No valid cache — return in-memory static 24 (host will refresh if needed)
401
403
  return aliveCatalog;
402
404
  }