pi-freeflow 1.9.9 → 1.11.0

package/CHANGELOG.md

@@ -1,26 +1,36 @@
 # Changelog
 
+## 1.11.0
+
+### Minor Changes
+
+- Proxy daemon now stays up while any session uses it, even when idle. It shuts down only after the last session leaves, instead of retiring after a short quiet window.
+
+## 1.10.0
+
+### Minor Changes
+
+- cf48598: Hands-free proxy recovery plus catalog refresh: the proxy now watches its own health, restarts with backoff instead of leaving a dead port, and can start on login. Removed two discontinued free models from the picker.
+
 All notable changes to pi-freeflow. Public, user-visible behavior only.
 
 ## 1.9.9 - 2026-09-06
 
 ### Fixes
-- **Removed our own request cap — sorry, that one was on us.** The proxy used to enforce a built-in request limit and could answer 429 before upstream quota was actually exhausted. That was a bug, not your quota. From this version the proxy never rejects on quota itself: a 429 only surfaces when the upstream — and every relay in your pool — genuinely is rate-limited, and that response now points you at `/freeflow deploy` to add relay egress.
 
-### Validation
-- TypeScript typecheck passed cleanly (`tsc --noEmit`) on Windows and Ubuntu Linux (`acerblue-local`).
-- Full test suite: Windows 302 tests (301 pass + 1 Linux-only skip), `acerblue-local` 302/302 pass, including new regressions locking the guidance hint onto genuine upstream 429s (direct path and exhausted relay pool).
-- Sandboxed stress harness 7/7 on `acerblue-local`; extension smoke load green on both machines.
+- **Removed our own request cap — sorry, that one was on us.** The proxy used to enforce a built-in request limit and could answer 429 before upstream quota was actually exhausted. That was a bug, not your quota. From this version the proxy never rejects on quota itself: a 429 only surfaces when the upstream — and every relay in your pool — genuinely is rate-limited, and that response now points you at `/freeflow deploy` to add relay egress.
 
 ## 1.9.8 - 2026-09-06
 
 ### Fixes
+
 - **Stale model list heals itself (follow-up to #6).** If your saved model list predates a newly added model, the background refresh now repairs the entry (correct endpoint and details) instead of sending requests to the wrong address — no manual `/freeflow refresh` or cache deletion needed.
 - **Paid models stay out of the picker even from old saved lists.** Every read of the saved model list now drops non-free entries, so models requiring an API key cannot linger after an upgrade.
 - **Old saved lists without a sync marker now re-sync once.** A saved list that could never trigger a network check now performs one plain revalidation (then syncs normally), so newly added free models appear without manual intervention. Missing or corrupt lists still fall back silently with no network call.
 - **Upstream errors are now visible in the proxy log.** Failed upstream responses log their status code and model, and a model routed to the wrong endpoint logs the mismatch with the fix (restart Pi/OMP after upgrade).
 
 ### Validation
+
 - TypeScript typecheck passed cleanly (`tsc --noEmit`).
 - Full test suite passed on Windows (304 tests) and Ubuntu Linux (`acerblue`, 305/305 tests passed), including new regressions for the stale-cache shape from #6.
 - Live sweep of all 26 models through a fresh install on `acerblue`: 23/26 answered on first try (both Muse Spark models via the Responses endpoint); the 3 misses are upstream per-model daily quotas (429), zero server errors.
@@ -28,16 +38,19 @@ All notable changes to pi-freeflow. Public, user-visible behavior only.
 ## 1.9.7 - 2026-09-06
 
 ### Fixes
+
 - **Model picker only shows verified free models (fixes #6).** Background catalog refresh now filters out non-free models from upstream endpoints so paid models requiring an API key no longer leak into your picker.
 - **Relay pool automatically recovers from dead deployments (fixes #5).** If a relay URL in your pool returns an infrastructure 404 (such as a missing or deleted Vercel deployment), the proxy marks it as failed and immediately rolls over to your next healthy relay or direct mode instead of getting trapped in a 404 loop.
 
 ### Changes
+
 - **Updated model catalog (26 verified free models: 7 OpenCode Zen + 19 KiloCode Gateway).**
   - Added `inclusionai/ling-3.0-flash-sante:free` (Ling 3.0 Flash Sante, 262K context, 32K output, reasoning supported). Clean CLI alias `ling-3.0-flash-sante` supported.
   - Removed `laguna-s-2.1-free` (OpenCode Zen) after upstream dropped free-tier access. `poolside/laguna-s-2.1:free` on Kilo remains active.
 - **Public by default for new relay deployments.** Relays deployed via `/freeflow deploy` are now public by default with no mandatory authentication tokens. This enables seamless copy-paste migration across proxy tools (such as 9router) while maintaining safety guards for allowed AI upstreams.
 
 ### Validation
+
 - TypeScript typecheck passed cleanly (`tsc --noEmit`).
 - Full test suite passed across Windows (299 tests) and Ubuntu Linux (`acerblue-local`, 300/300 tests passed).
 - End-to-end concurrency and failover stress testing verified (100 parallel requests, 20 subagent leases, burst failover).
@@ -45,6 +58,7 @@ All notable changes to pi-freeflow. Public, user-visible behavior only.
 ## 1.9.6 - 2026-09-03
 
 ### Fixes
+
 - **Hiding the status widget now sticks.** `/freeflow hide` survives restarts, new sessions, and background update notices — previously the widget could reappear on the next session.
 - **Calmer startup with many sessions.** Sessions starting at the same time now converge on a single background proxy instead of each spawning its own; a spawn that never becomes ready falls back to in-process mode instead of running untracked.
 - **Survives daemon restarts mid-session.** If the background proxy is replaced while sessions run, connected sessions re-register automatically instead of silently losing their lease (which could retire the daemon mid-use).
@@ -52,11 +66,13 @@ All notable changes to pi-freeflow. Public, user-visible behavior only.
 - **`/freeflow logs --follow` no longer runs forever.** The live tail stops when the session ends and caps burst output; the update/install subprocess now has a 2-minute timeout.
 
 ### Validation
+
 - `npx tsc --noEmit` clean, `npm test` 299 (298 pass + 1 Linux-only skip) + smoke green on Windows; stress harness 7/7 on Windows and Linux `acerblue-local`. **`macOS not tested`** this cycle.
 
 ## 1.9.5 - 2026-09-03
 
 ### Changes
+
 - **Catalog refreshed against live upstream model lists (26 models: 8 OpenCode Zen + 18 KiloCode Gateway).** Re-checked both upstreams against their live endpoints and live inference probes:
   - **Added** `muse-spark-1.3-contributor-free` (OpenCode Zen, Responses API, 1M context, 131K output, vision) — verified live: completes with reasoning, accepts effort levels, and answers vision queries.
   - **Removed** `hy3-free` (OpenCode Zen) — upstream no longer serves it (`Model hy3-free is not supported`).
@@ -64,29 +80,35 @@ All notable changes to pi-freeflow. Public, user-visible behavior only.
 - Pruned IDs added to the dead-model filter so a stale disk cache cannot resurrect them.
 
 ### Validation
+
 - `npx tsc --noEmit` clean, `npm test` full suite green on Windows.
 
 ## 1.9.4 - 2026-09-02
 
 ### Dependencies
+
 - **Zero runtime dependencies.** Removed `undici@8.10.0` — `pi` (`0.84.4`) and `omp` (`18.1.3`) already bundle `undici` 6.x/7.x and expose `global fetch` with keep-alive pooling. `relayFetch` and proxy now use `global fetch` directly (`src/relay.ts` `Agent` + `canUseCustomDispatcher` + `dispatcher: agent` removed; `src/proxy.ts` dispatcher removed). Keeps thin `11.3k` + `298 tests` + `0 deps` compatible directly with `reference/pi` + `reference/oh-my-pi`.
 
 ### Validation
+
 - `npx tsc --noEmit` clean, `npm test 298/298` on **Windows** (`omp/18.1.3`, `pi 0.84.4`) and **Linux `acerblue-local`** (`Ubuntu 6.8.0-138`, `node v22.23.2`, `pi 0.84.4`) via `/tmp/pi-freeflow-validation`. **`macOS not tested`** this cycle.
 
 ## 1.9.3 - 2026-09-02
 
 ### Fixes
+
 - **Windows console flood fixed.** Two Windows-only helpers flashed a visible `conhost`/`cmd` window on every daemon probe: `netstat -ano | findstr :28180` / `taskkill` in the stale-daemon replace path and `spawn(omp|npm, shell:true)` for `/freeflow update`. Both now use `windowsHide: true` (no-op on Linux/macOS) and `spawnWithProgress` was refactored to `Promise.withResolvers` to satisfy `ts-promise-with-resolvers`. Idle `pi` no longer spawns many visible consoles even after closing the terminal (detached daemon at `127.0.0.1:28180` survives by design; `beatOnce` 10s heartbeat now throttled 2s via `lastSpawnAt`).
 - Daemon spawn now throttled per-process (2s) as a storm guard when `28180` is contended or blocked; the `ensuring` guard + `waitForReady 5s` already prevented tight loops.
 
 ### Validation
+
 - `npx tsc --noEmit` clean, `npm test 279/279` on **Windows** (`omp/18.1.3`, `pi 0.84.4`) and **Linux `acerblue-local`** (`Ubuntu 6.8.0-138`, `node v22.23.2`, `pi 0.84.4`) via `/tmp/pi-freeflow-validation`. **`macOS not tested`** this cycle.
 - Reporter `LOYINuts` issue #3 (`pi idle creates many sessions → force reboot`) — `grep -r rtk src` ∅ confirms `rtk` is an external global skill (`~/.agents/skills/rtk` → `Command::new("cmd")` without `CREATE_NO_WINDOW`), not `pi-freeflow`. After this fix, closing the terminal no longer leaves flashing zombies; kill via `netstat -ano | findstr :28180` → `taskkill /F /PID` or `/freeflow kill`.
 
 ## 1.9.2 - 2026-08-31
 
 ### Fixes
+
 - **Closing one session no longer stops the shared local proxy.** The proxy daemon
   is now a fully detached background process: it outlives any single OMP/Pi session
   (previously, closing the session that owned the daemon could shut it down even
@@ -97,6 +119,7 @@ All notable changes to pi-freeflow. Public, user-visible behavior only.
   daemon on demand. The next freeflow use restarts it.
 
 ### Improvements
+
 - The proxy tracks connected sessions and last request time; `/freeflow status`
   and the health endpoint now report active session leases, so you can see when
   other sessions are keeping the daemon alive.
@@ -106,6 +129,7 @@ All notable changes to pi-freeflow. Public, user-visible behavior only.
 ## 1.9.1 - 2026-08-30
 
 ### Fixes
+
 - Stale-daemon guard completed: a pre-1.9.0 daemon cannot report its in-flight requests, and usage cannot be verified — so it is now left running instead of being replaced. Previously such a daemon could still be killed mid-stream while busy (a one-time window when upgrading from 1.8.x). The guarantee now holds in every case: only older, verified-idle daemons are replaced.
 - The stale-daemon kill ritual was consolidated into one path (it was duplicated at five call sites); behavior unchanged.
 - Tests: new coverage for the pre-1.9 daemon case; shared sandbox helpers extracted.
@@ -113,16 +137,19 @@ All notable changes to pi-freeflow. Public, user-visible behavior only.
 ## 1.9.0 - 2026-08-30
 
 ### Development hardening
+
 - Test suite now runs fully sandboxed: every test uses a temporary data directory, so no test can ever write to your real `~/.pi/agent/` files or interfere with a running local proxy. A single env override (`PI_*_DATA_DIR`) re-roots all data files for tests/CI.
 - Added a complete mocked user-flow e2e suite: fresh install → onboarding → proxy health → direct chat → relay add/roll/fallback → guided deploy → update check → command surface — all deterministic, zero network.
 - Docs: test counts no longer hardcoded in README (they drifted with releases); release history tracked here.
 
 ### Fixes
+
 - **Stale-daemon replacement no longer interrupts running sessions.** The shared local proxy can be held by another OMP/Pi session; the old upgrade logic killed that holder on version mismatch, which could terminate the session that owned the proxy mid-stream. Replacement now only happens when the running daemon is strictly older AND idle (0 in-flight requests, reported via `/_health`); newer or busy daemons are reused with a log note instead. Optional opt-out: set the no-kill env to `1` (see README FAQ for upgrades).
 
 ## 1.8.2 - 2026-08-30
 
 ### Fixes & polish
+
 - Deploy: compare-and-swap on concurrent deployments (no duplicate relays when two sessions deploy at once).
 - Proxy: URL-encoding edge cases (`%` in paths), startup timeout and kill handling, port conflict fallback.
 - Logs: sanitized sensitive headers in debug output.
@@ -136,6 +163,7 @@ All notable changes to pi-freeflow. Public, user-visible behavior only.
 ## 1.8.0 - 2026-08-29
 
 ### Automatic upgrades
+
 - On version upgrade, the extension detects a stale local proxy daemon and replaces it automatically — users get fixes without manual restarts or killing sessions.
 - Fix: client auth key stripped before reaching the opencode.ai/zen upstream (failed with 401 for some clients).
 - 3 new free models (28 total).
@@ -156,12 +184,14 @@ All notable changes to pi-freeflow. Public, user-visible behavior only.
 ## 1.6.0 - 2026-08-29
 
 ### Onboarding & UX
+
 - First-run onboarding message; 429 guidance hint (add your own relay egress).
 - `/freeflow test` to probe a relay; relay latency tracking with health badges in `/freeflow list`.
 - Guided deploy with context picker + confirmation; post-deploy health check.
 - Status clarity: current mode + state file path; log text filter; per-relay usage counters; throttled roll notifications.
 
 ### Reliability
+
 - Relay state write-protection: before every save, the current state is snapshotted to `.bak`; if the main file is corrupted or missing, the backup is recovered automatically.
 - New-user flow never seeds a fake relay; starts in direct mode with an empty pool.
 

package/README.md

@@ -1,6 +1,6 @@
 # pi-freeflow 🌊
 
-> **26 free models. Up to 1M context. Zero API keys. Infinite scale via your own relay pool.**
+> **24 free models. Up to 1M context. Zero API keys. Infinite scale via your own relay pool.**
 
 Thin by design: model list + dumb relay + log. Host `pi-ai` owns thinking, normalization & provider magic. We just make it free, fast, and unbreakable.
 
@@ -18,7 +18,7 @@ Join devs bypassing rate limits with their own relay pools. BYO, add as many as
 
 | Feature | Description | Value | Cost |
 | :--- | :--- | :--- | :--- |
-| **26 Curated Free Models** | 7 OpenCode Zen + 19 KiloCode Gateway models, up to 1M context & 512K output | Ceiling Unlocked | **$0** |
+| **24 Curated Free Models** | 7 OpenCode Zen + 17 KiloCode Gateway models, up to 1M context & 512K output | Ceiling Unlocked | **$0** |
 | **BYO Relay Pool** | Round-robin load balancing across your Cloudflare Workers & Vercel Edges | Zero Rate Limits | **$0** (your free tiers) |
 | **Adaptive Health & Error Detection** | Auto-cooldown on 429 rate limits, 504 timeouts, and socket drops | 0ms Wasted Latency | **$0** |
 | **Stream Truncation Resilience** | Stateful SSE terminal tracking (`response.failed` / `response.incomplete` injection) | Zero Host Crashes | **$0** |
@@ -32,7 +32,7 @@ Philosophy: **Thin by design.** We only ship model list + relay proxy + log. Hos
 
 ---
 
-### 26 Curated Models, One Command
+### 24 Curated Models, One Command
 
 ```bash
 /model → freeflow → pick
@@ -51,7 +51,7 @@ Optimized for deep reasoning, long-horizon coding & autonomous agentic workflows
 | `big-pickle` | Big Pickle | **200K** (200.000) | **32K** (32.000) | `high / max` | ❌ |
 | `ling-3.0-flash-fin-free` | Inclusion AI | **262K** (262.144) | **131K** (131.072) | `minimal … xhigh` | ❌ |
 
-#### KiloCode Gateway (19 Models), OpenRouter Compatible
+#### KiloCode Gateway (17 Models), OpenRouter Compatible
 Keyless access with `Bearer kilo-free`. Clean slash-free and colon-free CLI aliases supported.
 
 | Model ID | Creator / Lab | Context | Max Output | Thinking | Vision |
@@ -69,8 +69,6 @@ Keyless access with `Bearer kilo-free`. Clean slash-free and colon-free CLI alia
 | `kilo-auto` (`kilo-auto/free`) | Kilo Gateway Auto | **256K** (256.000) | **10K** (10.000) | `minimal…xhigh`\* | ❌ |
 | `openrouter` (`openrouter/free`) | OpenRouter Free | **200K** (200.000) | **65K** (65.536) | `minimal…xhigh`\* | ✅ |
 | `content-safety` (`nvidia/...:free`) | NVIDIA | **128K** (128.000) | **8K** (8.192) | ❌ *(non-thinking)* | ✅ |
-| `minimax-m2.7` (`minimax/minimax-m2.7:free`) | MiniMax | **196K** (196.608) | **196K** (196.608) | `minimal…xhigh`\* | ❌ |
-| `minimax-m3` (`minimax/minimax-m3:free`) | MiniMax | **1M** (1.048.576) | **512K** (524.288) | `minimal…xhigh`\* | ❌ |
 | `ling-3.0-flash-fin` (`inclusionai/ling-3.0-flash-fin:free`) | Inclusion AI | **262K** (262.144) | **32K** (32.768) | `minimal…xhigh`\* | ❌ |
 | `inkling` (`thinkingmachines/inkling:free`) | Thinking Machines | **1M** (1.048.576) | **262K** (262.144) | `minimal…xhigh`\* | ✅ |
 | `ling-3.0-flash-sante` (`inclusionai/ling-3.0-flash-sante:free`) | Inclusion AI | **262K** (262.144) | **32K** (32.768) | `minimal…xhigh`\* | ❌ |
@@ -292,7 +290,7 @@ to `1` before starting a session.
 Nothing visible to your other sessions. The proxy daemon is a separate background
 process shared by every OMP/Pi session on the machine. Closing one session just
 unregisters it; the daemon keeps serving the rest and retires itself automatically
-once the last client disconnects and it has been idle for a short grace period.
+once the last client disconnects and no client re-attaches within a short grace window.
 To stop it manually, run `/freeflow kill` — the next freeflow use starts it again.
 
 **Where's the normalizer?**
@@ -342,7 +340,7 @@ pnpm smoke       # verifies extensions/index.ts loads without crashing
 ```
 src/
 ├── index.ts          # extension entry, lifecycle hooks
-├── models.ts         # 26-model catalog definitions
+├── models.ts         # 24-model catalog definitions
 ├── catalog.ts        # model catalog cache (24h disk)
 ├── proxy.ts          # local proxy server (127.0.0.1:28180)
 ├── relay.ts          # relay selection & round-robin

package/package.json

@@ -1,61 +1,61 @@
-{
-  "name": "pi-freeflow",
-  "type": "module",
-  "version": "1.9.9",
-  "description": "Thin provider for OMP/Pi — model list + dumb relay proxy + log; host pi-ai owns thinking/normalization",
-  "main": "extensions/index.ts",
-  "types": "src/index.ts",
-  "keywords": [
-    "pi-package",
-    "pi-extension",
-    "oh-my-pi",
-    "omp",
-    "free-models",
-    "opencode",
-    "kilocode",
-    "ai-models",
-    "relay"
-  ],
-  "author": "trefeon",
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/trefeon/pi-freeflow.git"
-  },
-  "homepage": "https://github.com/trefeon/pi-freeflow#readme",
-  "engines": {
-    "node": ">=22.19.0"
-  },
-  "omp": {
-    "extensions": [
-      "./extensions"
-    ]
-  },
-  "pi": {
-    "extensions": [
-      "./extensions"
-    ]
-  },
-  "files": [
-    "extensions",
-    "src",
-    "README.md",
-    "CHANGELOG.md",
-    "LICENSE"
-  ],
-  "scripts": {
-    "test": "node --experimental-strip-types --import ./test/setup.mjs --test --test-concurrency=1 test/**/*.test.ts",
-    "typecheck": "tsc --noEmit",
-    "smoke": "node --experimental-strip-types -e \"import('./extensions/index.ts').then(() => console.log('✓ Smoke test passed: extensions/index.ts loaded successfully')).catch(err => { console.error(err); process.exit(1); })\"",
-    "changeset": "changeset",
-    "docs:dev": "vitepress dev docs",
-    "docs:build": "vitepress build docs"
-  },
-  "devDependencies": {
-    "@changesets/cli": "^2.27.0",
-    "@types/node": "^22.13.9",
-    "typescript": "^5.8.2",
-    "vitepress": "^1.6.4"
-  },
-  "dependencies": {}
-}
+{
+  "name": "pi-freeflow",
+  "type": "module",
+  "version": "1.11.0",
+  "description": "Thin provider for OMP/Pi — model list + dumb relay proxy + log; host pi-ai owns thinking/normalization",
+  "main": "extensions/index.ts",
+  "types": "src/index.ts",
+  "keywords": [
+    "pi-package",
+    "pi-extension",
+    "oh-my-pi",
+    "omp",
+    "free-models",
+    "opencode",
+    "kilocode",
+    "ai-models",
+    "relay"
+  ],
+  "author": "trefeon",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/trefeon/pi-freeflow.git"
+  },
+  "homepage": "https://github.com/trefeon/pi-freeflow#readme",
+  "engines": {
+    "node": ">=22.19.0"
+  },
+  "omp": {
+    "extensions": [
+      "./extensions"
+    ]
+  },
+  "pi": {
+    "extensions": [
+      "./extensions"
+    ]
+  },
+  "files": [
+    "extensions",
+    "src",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "test": "node --experimental-strip-types --import ./test/setup.mjs --test --test-concurrency=1 test/**/*.test.ts",
+    "typecheck": "tsc --noEmit",
+    "smoke": "node --experimental-strip-types -e \"import('./extensions/index.ts').then(() => console.log('✓ Smoke test passed: extensions/index.ts loaded successfully')).catch(err => { console.error(err); process.exit(1); })\"",
+    "changeset": "changeset",
+    "docs:dev": "vitepress dev docs",
+    "docs:build": "vitepress build docs"
+  },
+  "devDependencies": {
+    "@changesets/cli": "^2.27.0",
+    "@types/node": "^22.13.9",
+    "typescript": "^5.8.2",
+    "vitepress": "^1.6.4"
+  },
+  "dependencies": {}
+}

package/src/catalog.ts

@@ -38,6 +38,8 @@ export const DEAD_MODEL_IDS = new Set<string>([
 	"tencent/hy3:free",
 	"meituan/longcat-2.0-free",
 	"laguna-s-2.1-free",
+	"minimax/minimax-m2.7:free",
+	"minimax/minimax-m3:free",
 ]);
 /**
  * Free-tier allowlist for anything entering the picker via network or stale disk.
@@ -74,7 +76,7 @@ export function sanitizeCatalogModels(models: RegisteredModel[]): RegisteredMode
 }
 /**
  * In-memory cache of currently active/available free models.
- * Initialized with all 26 verified models for 0ms instant availability.
+ * Initialized with all 24 verified models for 0ms instant availability.
  */
 let aliveCatalog: RegisteredModel[] = ALL_MODELS.map((m) => ({
 	...m,
@@ -397,6 +399,6 @@ export async function refreshCatalog(force = false): Promise<RegisteredModel[]>
 	} catch (err) {
 		logDebug("Failed reading stale catalog cache", { error: String(err) });
 	}
-	// No valid cache — return in-memory static 26 (host will refresh if needed)
+	// No valid cache — return in-memory static 24 (host will refresh if needed)
 	return aliveCatalog;
 }