pi-openai-codex-compat 0.0.21 → 0.0.22

package/CHANGELOG.md

@@ -2,6 +2,22 @@
 
 ## Unreleased
 
+## 0.0.22 - 2026-10-08
+
+### Fixed
+
+- Create command-output temporary files with owner-only permissions and refuse
+  to overwrite existing files or follow symlinks. Failed creation leaves
+  existing files intact.
+- Preserve explicit `originator` and `User-Agent` overrides without changing
+  the default Pi identity.
+- Honor Pi's horizontal output padding setting in Codex tool calls and results.
+- Do not restart output-limit recovery after the user cancels the Pi run.
+
+### Changed
+
+- Require Pi `>=1.1.0 <1.2.0`. Restart Pi after upgrading its runtime.
+
 ## 0.0.21 - 2026-10-02
 
 ### Fixed

package/README.md

@@ -22,19 +22,19 @@ Pi provides the Codex OAuth flow and model catalog. At session start, this packa
 ## Requirements
 
 - Node.js 22.19 or newer
-- Pi `>=1.0.0 <1.1.0`
+- Pi `>=1.1.0 <1.2.0`
 - An OpenAI Codex login in Pi
 
 Restart Pi after upgrading its runtime. `/reload` reloads extensions but cannot
 upgrade the running Pi process. At load time, the extension requires the host's
 transcript APIs, the Pi 0.99 APIs `SessionManager.getEntryCount()` and
-`ExtensionAPI.getSettings()`, and a reported Pi version of at least 1.0.0. It
+`ExtensionAPI.getSettings()`, and a reported Pi version of at least 1.1.0. It
 refuses to load otherwise. The load check does not reject newer releases: the
-`<1.1.0` bound is the package's peer range, which Pi does not enforce when it
+`<1.2.0` bound is the package's peer range, which Pi does not enforce when it
 installs packages. `PI_PACKAGE_DIR` can point an older executable at
 newer package metadata, so the reported version alone does not establish
 compatibility. The API checks detect missing capabilities from before Pi 0.99.
-They do not distinguish a Pi 0.99 executable from Pi 1.0.0 when its metadata
+They do not distinguish a Pi 0.99 executable from Pi 1.1.0 when its metadata
 points at the newer installation.
 
 Authenticate through Pi if needed:
@@ -662,19 +662,18 @@ Both namespace tools are accepted only from the fixed extension-owned allowlist.
 ```bash
 mise trust
 mise install
-npm install
+mise run init
 mise run check
 npm run pack:dry
 ```
 
 `mise run check` runs the linters, formatters, type checks, and the offline
-test suite; `mise run test` runs only the offline suite. Both tasks bind
-`PI_PACKAGE_DIR` to `node_modules/@earendil-works/pi-coding-agent`, so tests
-that load Pi in-process read this repository's Pi 1.0.0 resources even when a
-global `PI_PACKAGE_DIR` points at another installation. Ordinary `pi` launches
-outside these tasks are unaffected. Offline tests also exercise
+test suite; `npm test` runs only the offline suite. `npm test` and
+`npm run test:live:codex` remove an inherited `PI_PACKAGE_DIR` from their test
+processes, so tests that load Pi in-process read this repository's Pi
+resources. Ordinary `pi` launches are unaffected. Offline tests also exercise
 `scripts/release.ts` with every child process mocked: they never run Git, npm,
-Mise, or provider calls.
+or provider calls.
 
 Run the credentialed Pi/Codex integration tests separately. They load the real
 extension into headless Pi sessions, use the real WebSocket service, and ask
@@ -682,13 +681,14 @@ the model to report all prior history markers after each text and tool
 continuation:
 
 ```bash
-mise run test:live:codex
+npm run test:live:codex
 ```
 
-The task obtains the local Codex bearer token and runs the tests with
-`gpt-5.6-luna`, `gpt-6-sol`, `gpt-6-luna`, and `gpt-6.1-sol` at medium reasoning
-effort. It also packs the extension and loads that archive through the shipped Pi
-1.0.0 CLI. Ordinary Responses and Responses Lite tests exercise tool calls,
+`scripts/test-live.ts` first runs the offline packaged terminal tests. It then
+obtains the local Codex bearer token through the repository Pi and runs the
+tests with `gpt-5.6-luna`, `gpt-6-sol`, `gpt-6-luna`, and `gpt-6.1-sol` at
+medium reasoning effort. It also packs the extension and loads that archive through the shipped Pi
+CLI. Ordinary Responses and Responses Lite tests exercise tool calls,
 prompt reload, native compaction, and persisted-session resume against Codex.
 SDK tests verify Responses Lite
 WebSocket history, prewarming, continuation, and the built-in read tool.
@@ -710,12 +710,12 @@ The packaged-CLI test selects its archive and executable as follows:
   existing regular file that `tar` can list, and an empty, missing, directory,
   or invalid value fails the test instead of falling back to a fresh pack.
 - `PI_CODEX_CLI_PATH` selects another Pi `cli.js`; the default is this
-  repository's Pi 1.0.0 dependency. The test asserts that the selected
-  executable reports version 1.0.0, the only Pi version the packaged CLI test
-  is run against. The supported range is `>=1.0.0 <1.1.0`.
-- Each Pi child process receives `PI_PACKAGE_DIR` bound to the selected
-  executable's package directory, so the runtime under test reads its own
-  metadata.
+  repository's Pi development dependency. The live test asserts that the
+  selected executable has the development dependency's version, the only Pi
+  version releases are validated against. The supported range is
+  `>=1.1.0 <1.2.0`.
+- Each Pi child process resolves its own package directory, so the runtime
+  under test reads its own metadata.
 
 The public package entrypoint is `extensions/index.ts`; implementation modules remain under
 `extensions/openai-codex-compat/`. The focused Pi AI serializer copy lives under
@@ -748,7 +748,7 @@ The release command runs these steps in order:
    only those two files.
 3. Check out the staged index into a temporary directory, run
    `npm ci --ignore-scripts` and `npm pack` there, validate the package
-   identity, file list, and manifest, then run `mise run test:live:codex` in
+   identity, file list, and manifest, then run `npm run test:live:codex` in
    the repository with `PI_CODEX_PACKAGE_ARCHIVE` set to that archive. This is
    the exact archive release gate: the live CLI tests load that archive and
    nothing else. A live process that cannot start, a nonzero exit, or a failed

package/extensions/openai-codex-compat/apply-patch-render.ts

@@ -17,6 +17,7 @@ type ApplyPatchArgs = {
 };
 
 type ApplyPatchRenderContext = {
+  outputPad: number;
   cwd: string;
   isPartial: boolean;
   expanded: boolean;
@@ -132,6 +133,7 @@ export function renderApplyPatchCall(
 
   return new CodexToolSurfaceComponent(container, theme, {
     background: resolveBackground,
+    outputPad: context.outputPad,
     status: context.isPartial ? "pending" : context.isError ? "error" : "success",
     top: true,
     bottom: context.isPartial,
@@ -163,6 +165,7 @@ export function renderApplyPatchResult(
       theme,
       {
         background: resolveBackground,
+        outputPad: context.outputPad,
         status: context.isError ? "error" : "success",
         top: true,
         bottom: true,
@@ -176,6 +179,7 @@ export function renderApplyPatchResult(
     theme,
     {
       background: resolveBackground,
+      outputPad: context.outputPad,
       status: "error",
       top: true,
       bottom: true,

package/extensions/openai-codex-compat/codex-tool-surface.ts

@@ -155,6 +155,7 @@ export class CodexToolSurfaceComponent implements Component {
   private readonly status: CodexToolSurfaceStatus;
   private readonly topPadding: boolean;
   private readonly bottomPadding: boolean;
+  private readonly outputPad: number;
   private renderCache:
     | {
         width: number;
@@ -172,6 +173,7 @@ export class CodexToolSurfaceComponent implements Component {
       status: CodexToolSurfaceStatus;
       top: boolean;
       bottom: boolean;
+      outputPad: number;
     },
   ) {
     this.component = component;
@@ -180,12 +182,13 @@ export class CodexToolSurfaceComponent implements Component {
     this.status = options.status;
     this.topPadding = options.top;
     this.bottomPadding = options.bottom;
+    this.outputPad = options.outputPad;
   }
 
   render(width: number): string[] {
     const effectiveWidth = Math.max(1, width);
     const background = surfaceBackground(this.theme, this.resolveBackground(), this.status);
-    const horizontalPadding = effectiveWidth > 2 ? 1 : 0;
+    const horizontalPadding = Math.min(this.outputPad, Math.floor((effectiveWidth - 1) / 2));
     const contentWidth = Math.max(1, effectiveWidth - horizontalPadding * 2);
     const componentLines = this.component.render(contentWidth);
     const cached = this.renderCache;

package/extensions/openai-codex-compat/codex-transport/codex-transport-request-headers.ts

@@ -164,19 +164,20 @@ export function baseHeaders(
   accountId: string,
   token: string,
 ): Headers {
-  const headers = new Headers(modelHeaders);
+  const os = nodeOs();
+  const headers = new Headers({
+    originator: "pi",
+    "User-Agent": os ? `pi (${os.platform()} ${os.release()}; ${os.arch()})` : "pi (browser)",
+  });
+  for (const [name, value] of Object.entries(modelHeaders ?? {})) {
+    headers.set(name, value);
+  }
   for (const [name, value] of Object.entries(additionalHeaders ?? {})) {
     if (value === null) headers.delete(name);
     else headers.set(name, value);
   }
   headers.set("Authorization", `Bearer ${token}`);
   headers.set("chatgpt-account-id", accountId);
-  headers.set("originator", "pi");
-  const os = nodeOs();
-  headers.set(
-    "User-Agent",
-    os ? `pi (${os.platform()} ${os.release()}; ${os.arch()})` : "pi (browser)",
-  );
   return headers;
 }
 

package/extensions/openai-codex-compat/command-output.ts

@@ -134,6 +134,7 @@ export class CommandOutputAccumulator {
   private hasOpenLine = false;
   private finished = false;
   private tempFilePath: string | undefined;
+  private tempFileCreated = false;
   private tempFileStream: WriteStream | undefined;
   private tempFileError: Error | undefined;
   private readonly retainCompleteOutput: boolean;
@@ -230,6 +231,8 @@ export class CommandOutputAccumulator {
 
     const stream = this.tempFileStream;
     this.tempFileStream = undefined;
+    const previousError = this.tempFileError;
+    if (previousError) throw previousError;
     await new Promise<void>((resolve, reject) => {
       const onError = (error: Error): void => {
         stream.off("finish", onFinish);
@@ -256,8 +259,9 @@ export class CommandOutputAccumulator {
           ? error
           : new Error("Could not close discarded command output.", { cause: error });
     }
-    if (this.tempFilePath !== undefined) {
+    if (this.tempFileCreated && this.tempFilePath !== undefined) {
       await rm(this.tempFilePath, { force: true });
+      this.tempFileCreated = false;
     }
     if (closeError) throw closeError;
   }
@@ -325,7 +329,10 @@ export class CommandOutputAccumulator {
   private ensureTempFile(): void {
     if (this.tempFilePath) return;
     this.tempFilePath = tempFilePath(this.tempFilePrefix);
-    const stream = createWriteStream(this.tempFilePath);
+    const stream = createWriteStream(this.tempFilePath, { mode: 0o600, flags: "wx" });
+    stream.once("open", () => {
+      this.tempFileCreated = true;
+    });
     stream.on("error", (error) => {
       this.tempFileError = error;
     });
@@ -344,6 +351,7 @@ export class CommandOutputSpool {
   private readonly tempFilePrefix: string;
   private totalBytes = 0;
   private tempFilePath: string | undefined;
+  private tempFileCreated = false;
   private tempFileStream: WriteStream | undefined;
   private tempFileError: Error | undefined;
   private finishing: Promise<void> | undefined;
@@ -390,8 +398,9 @@ export class CommandOutputSpool {
           ? error
           : new Error("Could not finish disposable command output.", { cause: error });
     }
-    if (this.tempFilePath !== undefined) {
+    if (this.tempFileCreated && this.tempFilePath !== undefined) {
       await rm(this.tempFilePath, { force: true });
+      this.tempFileCreated = false;
     }
     if (finishError) throw finishError;
   }
@@ -400,6 +409,10 @@ export class CommandOutputSpool {
     if (this.finishing) return this.finishing;
     const stream = this.tempFileStream;
     this.tempFileStream = undefined;
+    if (this.tempFileError) {
+      this.finishing = Promise.reject(this.tempFileError);
+      return this.finishing;
+    }
     if (!stream) {
       this.finishing = Promise.resolve();
       return this.finishing;
@@ -423,7 +436,10 @@ export class CommandOutputSpool {
   private ensureTempFile(): void {
     if (this.tempFilePath) return;
     this.tempFilePath = tempFilePath(this.tempFilePrefix);
-    const stream = createWriteStream(this.tempFilePath);
+    const stream = createWriteStream(this.tempFilePath, { mode: 0o600, flags: "wx" });
+    stream.once("open", () => {
+      this.tempFileCreated = true;
+    });
     stream.on("error", (error) => {
       this.tempFileError = error;
     });

package/extensions/openai-codex-compat/command-render.ts

@@ -9,6 +9,7 @@ import { DEFAULT_CONFIG } from "./config.ts";
 export type CommandRenderContext = {
   isError: boolean;
   isPartial: boolean;
+  outputPad: number;
 };
 
 export type CommandCallRenderContext = CommandRenderContext & {
@@ -223,6 +224,7 @@ export function renderCommandCall(
     theme,
     {
       background: resolveBackground,
+      outputPad: context.outputPad,
       status: context.isPartial ? "pending" : context.isError ? "error" : "success",
       top: true,
       bottom: context.isPartial && !context.executionStarted,
@@ -243,6 +245,7 @@ export function renderCommandResult(
     theme,
     {
       background: resolveBackground,
+      outputPad: context.outputPad,
       status: context.isPartial ? "pending" : context.isError ? "error" : "success",
       top: output.length > 0,
       bottom: true,

package/extensions/openai-codex-compat/image-generation-render.ts

@@ -25,6 +25,7 @@ export const IMAGE_GENERATION_DETAILS_SCHEMA = {
 export type ImageGenerationDetails = Static<typeof IMAGE_GENERATION_DETAILS_SCHEMA>;
 
 type ImageGenerationRenderContext = {
+  outputPad: number;
   args: ImageGenerationParameters;
   isPartial: boolean;
   expanded: boolean;
@@ -150,6 +151,7 @@ export function renderImageGenerationCall(
   const summary = theme.fg("muted", describeImageCall(args));
   return new CodexToolSurfaceComponent(new Text(`${title}  ${summary}`, 0, 0), theme, {
     background: resolveBackground,
+    outputPad: context.outputPad,
     status: context.isPartial ? "pending" : context.isError ? "error" : "success",
     top: true,
     bottom: context.isPartial,
@@ -171,6 +173,7 @@ export function renderImageGenerationResult(
     theme,
     {
       background: resolveBackground,
+      outputPad: context.outputPad,
       status: context.isError ? "error" : "success",
       top: false,
       bottom: true,

package/extensions/openai-codex-compat/output-limit-continuation.ts

@@ -36,9 +36,14 @@ export type OutputLimitContinuationLifecycleHandler = (
   ctx: OutputLimitContinuationContext,
 ) => Promise<void> | void;
 
+export type OutputLimitContinuationSettledHandler = (
+  event: { aborted: boolean },
+  ctx: OutputLimitContinuationContext,
+) => Promise<void> | void;
+
 export type OutputLimitContinuationApi = {
   onAgentEnd: (handler: OutputLimitContinuationAgentEndHandler) => void;
-  onAgentSettled: (handler: OutputLimitContinuationLifecycleHandler) => void;
+  onAgentSettled: (handler: OutputLimitContinuationSettledHandler) => void;
   onSessionBeforeCompact: (handler: OutputLimitContinuationCompactionHandler) => void;
   onSessionCompact: (handler: OutputLimitContinuationLifecycleHandler) => void;
   onSessionShutdown: (handler: OutputLimitContinuationLifecycleHandler) => void;
@@ -66,7 +71,8 @@ export function outputLimitContinuationApi(pi: ExtensionAPI): OutputLimitContinu
   return {
     onAgentEnd: (handler) =>
       pi.on("agent_end", (event, ctx) => handler({ messages: event.messages }, context(ctx))),
-    onAgentSettled: (handler) => pi.on("agent_settled", (_event, ctx) => handler(context(ctx))),
+    onAgentSettled: (handler) =>
+      pi.on("agent_settled", (event, ctx) => handler({ aborted: event.aborted }, context(ctx))),
     onSessionBeforeCompact: (handler) =>
       pi.on("session_before_compact", (event, ctx) =>
         handler({ signal: event.signal }, context(ctx)),
@@ -181,7 +187,7 @@ export default function registerOutputLimitContinuation(pi: OutputLimitContinuat
     if (recovery?.compaction === "started") recovery.compaction = "completed";
   });
 
-  pi.onAgentSettled((ctx) => {
+  pi.onAgentSettled((event, ctx) => {
     const sessionId = ctx.sessionManager.getSessionId();
     const recovery = pendingRecoveries.get(sessionId);
     if (!recovery) return;
@@ -189,6 +195,7 @@ export default function registerOutputLimitContinuation(pi: OutputLimitContinuat
 
     const compactionFailed = recovery.compaction === "started";
     if (
+      event.aborted ||
       recovery.cancelled ||
       compactionFailed ||
       !ctx.isIdle() ||

package/extensions/openai-codex-compat/pi-runtime.ts

@@ -31,7 +31,7 @@ export const SESSION_APIS = ["buildSessionProjection"] as const;
  */
 export const PI_099_APIS = ["SessionManager.getEntryCount", "ExtensionAPI.getSettings"] as const;
 
-export const MINIMUM_PI_VERSION = "1.0.0";
+export const MINIMUM_PI_VERSION = "1.1.0";
 export const REQUIRED_PI = `Pi ${MINIMUM_PI_VERSION} or later`;
 
 function isFunction(value: unknown): boolean {
@@ -62,9 +62,9 @@ export function atLeastVersion(version: unknown, minimum: string): boolean {
 }
 
 /**
- * Require the Pi 0.99 host surface and a reported version of at least 1.0.0. The version comes
+ * Require the Pi 0.99 host surface and a reported version of at least 1.1.0. The version comes
  * from package metadata. The API checks detect missing capabilities, but cannot distinguish
- * a Pi 0.99 executable pointed at Pi 1.0.0 metadata through `PI_PACKAGE_DIR`.
+ * a Pi 0.99 executable pointed at Pi 1.1.0 metadata through `PI_PACKAGE_DIR`.
  */
 export function requirePiRuntime(
   transcriptApi: Record<string, unknown>,

package/extensions/openai-codex-compat/web-run-render.ts

@@ -36,6 +36,7 @@ type NullishOptionalProperties<Value> = Value extends readonly (infer Item)[]
 export type WebRunRenderCommands = NullishOptionalProperties<WebRunCommands>;
 
 type WebRunRenderContext = {
+  outputPad: number;
   args: WebRunRenderCommands;
   isPartial: boolean;
   expanded: boolean;
@@ -683,6 +684,7 @@ export function renderWebRunCall(
   const summary = theme.fg("muted", describeWebRunCall(args));
   return new CodexToolSurfaceComponent(new Text(`${title}  ${summary}`, 0, 0), theme, {
     background: resolveBackground,
+    outputPad: context.outputPad,
     status: context.isPartial ? "pending" : context.isError ? "error" : "success",
     top: true,
     bottom: context.isPartial,
@@ -702,6 +704,7 @@ export function renderWebRunResult(
     theme,
     {
       background: resolveBackground,
+      outputPad: context.outputPad,
       status: context.isError ? "error" : "success",
       top: false,
       bottom: true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-openai-codex-compat",
-  "version": "0.0.21",
+  "version": "0.0.22",
   "description": "OpenAI Codex compatibility for Pi with native compaction, fast mode, and Codex-optimized capabilities",
   "keywords": [
     "pi-package"
@@ -34,9 +34,8 @@
   ],
   "type": "module",
   "scripts": {
-    "check": "hk check --all --check",
-    "test": "node --test --test-concurrency=4 test/*.test.ts",
-    "test:live:codex": "PI_CODEX_LIVE_TEST=1 node --test --test-concurrency=1 test/codex-host.live.test.ts test/codex-cli.live.test.ts test/command-render-cli.test.ts",
+    "test": "env -u PI_PACKAGE_DIR node --test --test-concurrency=4 test/*.test.ts",
+    "test:live:codex": "node scripts/test-live.ts",
     "pack:dry": "npm pack --dry-run --allow-directory=all",
     "release": "node scripts/release.ts",
     "fmt": "oxfmt",
@@ -49,22 +48,22 @@
     "tree-sitter-bash": "0.25.1"
   },
   "devDependencies": {
-    "@2h2d/oxlint-config": "0.1.1",
+    "@2h2d/oxlint-config": "0.1.2",
     "@2h2d/ts-config": "0.0.1",
-    "@earendil-works/pi-ai": "1.0.0",
-    "@earendil-works/pi-coding-agent": "1.0.0",
-    "@earendil-works/pi-tui": "1.0.0",
-    "@types/node": "22.20.1",
-    "oxfmt": "0.64.0",
-    "oxlint": "1.79.0",
-    "oxlint-tsgolint": "7.0.2001",
-    "typebox": "1.3.16",
+    "@earendil-works/pi-ai": "1.1.0",
+    "@earendil-works/pi-coding-agent": "1.1.0",
+    "@earendil-works/pi-tui": "1.1.0",
+    "@types/node": "22.20.4",
+    "oxfmt": "0.70.0",
+    "oxlint": "1.85.0",
+    "oxlint-tsgolint": "7.0.2003",
+    "typebox": "1.3.34",
     "typescript": "7.0.2"
   },
   "peerDependencies": {
-    "@earendil-works/pi-ai": ">=1.0.0 <1.1.0",
-    "@earendil-works/pi-coding-agent": ">=1.0.0 <1.1.0",
-    "@earendil-works/pi-tui": ">=1.0.0 <1.1.0",
+    "@earendil-works/pi-ai": ">=1.1.0 <1.2.0",
+    "@earendil-works/pi-coding-agent": ">=1.1.0 <1.2.0",
+    "@earendil-works/pi-tui": ">=1.1.0 <1.2.0",
     "typebox": "*"
   },
   "engines": {