npm - pi-openai-codex-compat - Versions diffs - 0.0.9 → 0.0.10-alpha.2 - Mend

pi-openai-codex-compat 0.0.9 → 0.0.10-alpha.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (90) hide show

package/APPLY_PATCH_INSTRUCTION_FEEDBACK.md CHANGED Viewed

@@ -17,8 +17,8 @@ Feedback must:
 1. retain the aggregate changed-file summary;
 2. when an instruction ledger is needed, report every instruction without a
    model-facing limit;
-3. attribute filesystem effects, errors, and matching evidence to the
-   instruction that produced them;
+3. attribute filesystem effects and errors to the instruction that produced
+   them;
 4. report failed and not-run instructions;
 5. use concise, simplified technical English;
 6. report deterministic facts rather than speculative outcomes; and
@@ -134,8 +134,7 @@ Add a short clause only for:
 - a failure;
 - a non-obvious externally visible filesystem effect;
 - a partial effect;
-- a final state that is not verified; or
-- concise matcher evidence.
+- a final state that is not verified.
 Do not include:
@@ -143,7 +142,6 @@ Do not include:
 - a diff-availability warning;
 - verbose proof sections;
 - a duplicated raw error section;
-- a detached matcher section; or
 - prose that merely restates an ordinary successful operation.
 ## Terminology
@@ -227,7 +225,6 @@ Each instruction result stores:
 - completed externally visible filesystem effects;
 - relevant final path states;
 - an optional error;
-- optional matcher evidence; and
 - related instruction numbers.
 The operation label is sufficient for ordinary successful effects. Explicit
@@ -346,37 +343,17 @@ Do not tell the model that previous content was unreadable, a diff is
 unavailable, history is incomplete, or the result is inexact. Diff
 availability is a TUI/history concern, not an operation result.
-## Matcher feedback
-Matcher feedback belongs to the failed update instruction. Do not emit a
-detached `Matcher diagnostics:` section or repeat old/replacement patch text.
-Examples:
+## Matching failures
-```text
-3. [FAILED] Update file.ts - Old content was not found. Read the current file and use apply_patch again with updated instructions if needed.
-```
+A strict matching failure belongs to the failed update instruction. Do not
+emit a detached matcher-diagnostics section or repeat old/replacement patch
+text:
 ```text
-3. [FAILED] Update file.ts - The requested changes match in reverse source-file order at lines 10-12 and lines 30-32. Use apply_patch again with the requested changes in source-file order if needed.
+3. [FAILED] Update file.ts - Old content was not found.
 ```
-```text
-3. [FAILED] Update file.ts - Matching locations at lines 10-12 and lines 40-42 produce different results. Use apply_patch again with more specific surrounding context or smaller changes if needed.
-```
-```text
-3. [FAILED] Update file.ts - More than 256 possible ways to apply the requested changes were found. Use apply_patch again with more specific surrounding context or smaller changes if needed.
-```
-```text
-3. [FAILED] Update file.ts - Requested replacement found at lines 40-44, but old content was not found. Inspect the reported lines and use apply_patch again with updated instructions if needed.
-```
-The 64-location limit, different-result ambiguity, and 256-way limit use the
-same guidance because each requires more specific surrounding context or
-smaller requested changes. Reverse-order and overlap failures instead tell the
-model to reorder or separate the requested changes.
+Missing `@@` anchors analogously report `Context was not found.`.
 ## Not-run results
@@ -457,7 +434,6 @@ Expanded rendering nests these details beneath the relevant instruction:
 - applied textual diffs;
 - non-obvious filesystem effects;
 - final-state verification;
-- concise matcher locations; and
 - useful system-error details.
 Partial effects are not rendered as detached successful operations. Failed
@@ -483,7 +459,6 @@ type InstructionResult = {
   effects: InstructionEffect[];
   finalStates: FinalPathState[];
   error?: InstructionError;
-  matching?: MatchingEvidence;
   relatedInstructions?: number[];
 };
 ```
@@ -512,18 +487,6 @@ Only presentation differs:
 Semantic wording and facts remain shared.
-## Matcher candidate deduplication
-Before applying candidate and mapping limits:
-1. canonicalize candidates by complete byte-edit effect;
-2. remove byte-identical duplicate candidates;
-3. retain every semantically distinct candidate; and
-4. do not rank candidates or use heuristic preference.
-This prevents duplicate line-level and structural candidates from consuming
-the exhaustive mapping bound.
 ## Required tests
 ### Completeness
@@ -552,7 +515,6 @@ Generated model and TUI feedback does not contain:
 - `installed`
 - `dead`
 - `dominated`
-- `Matcher diagnostics`
 - the heading `Instructions:`
 When the conditional ledger is present, its heading is
@@ -583,8 +545,8 @@ Cover:
 - temporary entry remains without a false no-change statement; and
 - post-operation verification failure.
-Every formatter-matcher failure reason is covered with its direct retry
-guidance.
+Strict mismatch coverage verifies the source is unchanged and the original
+context or expected-lines error is reported.
 ### No patch-content repetition
@@ -602,16 +564,10 @@ With `applyPatchDebug` enabled:
 - changing the setting updates existing result components; and
 - partial previews remain unchanged.
-### Matcher deduplication
-A multi-group formatter-recovery fixture proves duplicate candidates do not
-consume the mapping limit.
 ## Documentation
 Implementation changes must also update:
 - `APPLY_PATCH_SEMANTIC_OPERATIONS.md`
-- `APPLY_PATCH_REMAINING_WORK.md`
 - `README.md`
 - `CHANGELOG.md`

package/CHANGELOG.md CHANGED Viewed

@@ -2,6 +2,56 @@
 ## Unreleased
+### Added
+- Show the current Pi session ID on the compatibility footer's first line.
+- Add default-off, failure-only `apply_patch` diagnostics capture with
+  pre-execution text snapshots and binary metadata for every instruction in a
+  failed patch, runtime and filesystem identity metadata, nested error causes,
+  patch outcomes, and Pi/provider trace identifiers linked from tool-result
+  details.
+### Fixed
+- Preserve regular-file permission modes across sequential `apply_patch`
+  replacements and state-changing moves, including files created by earlier
+  instructions in the same patch.
+- Resolve descendants through symlink parents established by earlier
+  instructions, keeping subsequent aliased operations in one virtual
+  filesystem state.
+- Resolve relative symlink targets from the canonical source or moved
+  destination directory when a parent path is itself a symlink.
+- Verify the complete final byte buffer after `apply_patch` adds and text
+  updates, so requested bytes appearing in a duplicate or unrelated region
+  cannot satisfy the result postcondition.
+- Classify repeated identical `apply_patch` adds from source-ordered virtual
+  content and exact spelling, avoiding redundant replacements after earlier
+  adds or moves while preserving case, Unicode, and symlink-parent identity.
+- Use actual or planned directory-entry spelling when proving dead
+  `apply_patch` operations and classifying same-entry moves on case-insensitive
+  or Unicode-normalizing filesystems.
+- Validate supplied identity and context chunks before `apply_patch` moves while preserving chunkless opaque moves and successful symlink and hard-link topology.
+- Remove formatter-tolerant `apply_patch` matching permanently and rely exclusively on the official Codex-compatible exact, trailing-trim, full-trim, and Unicode matcher.
+- Treat streamed Codex misalignment-policy violations as terminal without retrying and preserve the provider's error message.
+- Preserve unexpected parser, matcher, and asynchronous transport failures instead of replacing or detaching them.
+- Recover expired 60-minute Codex WebSockets in the provider response loop, retaining committed items, discarding provisional output, and waiting for Pi to record completed tool outputs before continuing.
+- Validate complete apply-patch result details against schema-derived contracts before rendering, including integer metadata and nested instruction relationships.
+- Distinguish an unavailable Pi compaction append capability from a missing percentage-compaction retention boundary.
+- Validate supported Responses input, completed-output, content, and tool-definition variants with closed schema-derived unions, failing closed on unknown or malformed item types while preserving additional fields on known variants.
+### Changed
+- Align deferred tool loading with Pi 0.84.3, preferring message-anchored
+  additional tools on capable Codex models while retaining tool-search and
+  top-level fallbacks.
+- Simplify `apply_patch` for its queued single-writer operating model: retain
+  Pi's mutation queue, remove the extension-local alias queue and
+  preflight-to-execution drift machinery, use direct writes for in-place text
+  updates, and preserve source-ordered no-change checkpoints without
+  filesystem revalidation.
+- Adopt the shared 2h2d Oxlint policy and exact supported Oxlint and Oxfmt versions.
+- Run isolated test files across four workers, bypass unasserted wall-clock response-retry waits in integration coverage, and assert the retry-delay calculation directly.
 ## 0.0.9 - 2026-08-16
 ### Fixed

package/README.md CHANGED Viewed

@@ -7,13 +7,14 @@ OpenAI Codex compatibility for [Pi](https://github.com/earendil-works/pi-mono),
 - **Request-level fast mode**: keeps the canonical `openai-codex` provider id and models selected while adding `service_tier: "priority"` at the request boundary.
 - **Native compaction**: uses Codex `remote_compaction_v2` for `/compact`, Pi threshold compaction, context-overflow recovery, and an optional percentage threshold.
 - **Codex `apply_patch`**: provides an optional patch tool with the Codex grammar, parser, fuzzy matcher, overwrite semantics, filesystem behavior, model-facing result format, structured history, and diff-oriented TUI rendering. Pi sends it as an OpenAI custom grammar tool when the model supports that protocol and as a normal function tool otherwise.
+- **Opt-in patch diagnostics**: records failed `apply_patch` requests with pre-execution text snapshots or binary metadata for every instruction, outcomes, and Pi/Codex identifiers.
 - **Standalone image generation**: exposes Pi's dotted `image_gen.imagegen` tool as a native Responses namespace and executes generation or edits through the Codex Images endpoints.
 - **Standalone web search**: exposes Pi's dotted `web.run` tool as a native Responses namespace and executes search and browsing through Codex `alpha/search`.
 - **Dedicated Codex tool UI**: renders `apply_patch`, `image_gen.imagegen`, and `web.run` on a shared configurable surface with compact summaries and `Ctrl+O` expansion.
 - **Hosted web-search fallback**: injects native `web_search` only when `web.run` is inactive, with cached, indexed, or live modes.
 - **Native request controls**: configures Responses API text verbosity, reasoning summaries, and GPT-5.6 standard/pro reasoning mode.
 - **Session-local settings pane**: `/codex-settings` changes every compatibility setting for the current session; `Enter` persists and closes, `Escape` discards unsaved changes and closes, and `Ctrl+S` persists without closing.
-- **Compact footer indicators**: non-default Codex request modes are appended to the model side of Pi's normal second footer line.
+- **Session-aware footer**: shows the current Pi session ID on the first line and appends non-default Codex request modes to the model side of Pi's normal second line.
 Pi provides the Codex OAuth flow and model catalog. At session start, this package overrides the built-in `openai-codex` runtime under the same provider id so ordinary responses and remote compaction share one transport, parser, native-history store, and sticky WebSocket session.
@@ -31,7 +32,7 @@ Authenticate through Pi if needed:
 ## Compatibility baseline and differences
-The compatibility baseline is official Codex CLI `0.146.0`, released July 29, 2026. Upstream `main` at commit `0bdce9f424eb9b39d7b3a8811742d10b6fbf8d54` was also inspected on August 7, 2026, including post-release routing and default-tool namespace changes. Current upstream, rather than the older installed CLI, is authoritative where they differ: commit `f21dc46388` replaced direct Lite function/custom declarations with one canonical `functions` namespace. This section is the package's explicit compatibility contract: it distinguishes close protocol adaptations from deliberate Pi behavior, configurable defaults, known gaps, and unsupported Codex runtimes. See the [Responses Lite compatibility report](RESPONSES_LITE_COMPATIBILITY.md) and [Codex caching and transport comparison](CODEX_CACHE_RESEARCH.md) for source revisions, request-path findings, and live cache trajectories.
+The compatibility baseline is official Codex CLI `0.149.0`, released August 20, 2026, at commit `758ef40f50c1a458425c7cfbf1eb12cbc07af0b0`. It retains the `0.147.0` Responses Lite contract that groups direct function and custom declarations into one canonical `functions` namespace for namespace-capable providers. The `0.148.0`–`0.149.0` review adopted typed misalignment-policy failures while recording official unbounded connection recovery as an intentional bounded-transport deviation. The [official release compatibility log](OFFICIAL_CODEX_CLI_RELEASES.md) is the canonical release-by-release record of protocol and `apply_patch` alignment, intentional deviations, and excluded runtimes. This section is the package's user-facing compatibility contract. See the [Responses Lite compatibility report](RESPONSES_LITE_COMPATIBILITY.md) and [Codex caching and transport comparison](CODEX_CACHE_RESEARCH.md) for detailed request-path findings and live cache trajectories.
 ### Configurable defaults that differ from Codex
@@ -43,6 +44,7 @@ The compatibility baseline is official Codex CLI `0.146.0`, released July 29, 20
 | Hosted web search                             | Disabled by default; when enabled, injected only for ordinary Responses while `web.run` is inactive. Responses Lite omits hosted tools.           | Omitted for `gpt-5.6-sol` while standalone `web.run` is available; otherwise defaults to cached mode when hosted search is supported.         | `webRun` and `webSearch`: `disabled`, `cached`, `indexed`, or `live`.                                                                                                       |
 | Coding mutation tools                         | Enables `apply_patch` and suppresses Pi's active `edit` and `write` tools.                                                                        | Chooses its tool surface from model metadata and runtime capabilities; there are no Pi `edit` or `write` tools to suppress.                   | `applyPatch`: boolean.                                                                                                                                                      |
 | `apply_patch` debug output                    | Disabled; collapsed results show the normal visual summary and instruction rows.                                                                  | Not applicable to Pi's tool-result renderer.                                                                                                  | `applyPatchDebug`: boolean.                                                                                                                                                 |
+| `apply_patch` diagnostics capture             | Disabled; no separate request or filesystem snapshot artifacts are retained.                                                                      | Codex owns its rollout diagnostics rather than writing this package's artifact format.                                                        | `applyPatchDiagnostics`: boolean.                                                                                                                                           |
 | Codex tool background                         | Uses a subtle theme-derived surface for extension-owned Codex tools.                                                                              | Uses Codex's own TUI activity cells rather than Pi tool rows.                                                                                 | `toolBackground`: `subtle`, `status`, or `none`.                                                                                                                            |
 | Auto-compaction trigger                       | Relies on Pi's reserve-token threshold unless a percentage is configured.                                                                         | Tracks Codex's model/token-budget state before and between sampling steps.                                                                    | `autoCompactAtPercent`: percentage or unset. Mid-response percentage boundaries use Pi's bounded compact-and-continue lifecycle, so Pi auto-compaction must remain enabled. |
 | Fast mode                                     | Uses the normal tier.                                                                                                                             | Uses the configured Codex service tier.                                                                                                       | `fastMode`: boolean; `true` requests the priority tier.                                                                                                                     |
@@ -63,6 +65,7 @@ The compatibility baseline is official Codex CLI `0.146.0`, released July 29, 20
 | Cache preparation           | Before the first cache-enabled WebSocket turn, the package prewarms only the stable instruction/tool prefix: ordinary Responses uses empty `input`, while Responses Lite uses `additional_tools` plus the developer instructions. The first generated request then contributes only dynamic conversation input to the continuation. No explicit prompt-cache breakpoints are added.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
 | Mid-turn compaction         | Provider-boundary percentage compaction preserves a successful `end_turn:false` prefix as its own Pi assistant message, installs a checkpoint, and continues without synthetic model input. Pi threshold compaction normally runs after the agent response; after Codex output-token truncation, the extension queues a hidden continuation so threshold compaction completes before sampling resumes. Official Codex owns this sampling and compaction loop directly.                                                                                                                                                                                                                                                                                                                                                                                                                           |
 | Provider-owned follow-up    | Completed responses with `end_turn: false` continue immediately from completed native output without synthetic user input. Retryable `response.failed` and all `response.incomplete` events are resampled with the official five-retry stream budget, preserving completed output and cumulative usage while excluding unfinished attempt content. A `max_output_tokens` response that exhausts this budget still becomes Pi `stopReason: "length"` and uses the extension's unbounded host-level continuation recovery.                                                                                                                                                                                                                                                                                                                                                                         |
+| Transport recovery          | WebSocket failures before model-visible output receive five fresh-connection retries before sticky SSE fallback; SSE transport failures receive five retries. Official Codex `0.149.0` separately retries sampling connection-establishment failures indefinitely with delays capped at 60 seconds. The package remains bounded because Fetch does not expose Reqwest's narrower connection-error category, and a phase-only approximation could indefinitely repeat requests that reached the server.                                                                                                                                                                                                                                                                                                                                                                                           |
 | Compaction lifecycle events | Pre-turn percentage compaction writes through Pi's mutable session manager and cannot emit Pi's internal `session_compact` event through the public extension API. Mid-response percentage boundaries and manual, threshold, or overflow compactions initiated by Pi emit the normal lifecycle.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
 | Header hooks                | An internal percentage-compaction request reuses the already transformed provider headers. It cannot independently rerun Pi's `before_provider_headers` hook.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
 | Native retained context     | Deliberately differs from current Codex. The package retains recent user/developer/system messages under the 64k budget before the opaque compaction item. Current Codex applies a second installed-history filter that drops developer/system wrappers and non-real-user messages, can retain eligible structured agent commentary, and trims oversized function outputs before compaction. Pi keeps its existing checkpoint shape by design.                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
@@ -164,7 +167,7 @@ A trusted project can override it at:
 Each session inherits the effective file-backed settings. Open `/codex-settings` to make immediate session-local changes. Press `Enter` to persist and close, `Escape` to discard unsaved changes and close, or `Ctrl+S` to persist without closing. The global file is the normal save target, while an existing trusted project override remains the target for that project. After `Ctrl+S`, later unsaved changes can still be discarded back to the values from that save.
-The effective settings are printed once when a TUI session starts. The footer shows `fast` and `pro` only when enabled, and shows text verbosity or reasoning summary only when they differ from their defaults.
+The effective settings are printed once when a TUI session starts. The footer shows the current Pi session ID alongside the working directory and optional session name. It shows `fast` and `pro` only when enabled, and shows text verbosity or reasoning summary only when they differ from their defaults.
 Example:
@@ -175,6 +178,7 @@ Example:
   "toolBackground": "subtle",
   "applyPatch": true,
   "applyPatchDebug": false,
+  "applyPatchDiagnostics": false,
   "imageGeneration": true,
   "imageDetail": "auto",
   "webRun": false,
@@ -188,41 +192,43 @@ Example:
 Defaults:
-| Setting                | Values                                               | Default    | Behavior                                                                                                                                                                                                                                  |
-| ---------------------- | ---------------------------------------------------- | ---------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `fastMode`             | boolean                                              | `false`    | Adds `service_tier: "priority"` to requests while retaining the current `openai-codex` provider and model.                                                                                                                                |
-| `responsesLite`        | boolean                                              | `false`    | Uses Codex's Responses Lite input envelope on supported GPT-5.6 models when enabled. By default, those models use ordinary Responses instructions and tools.                                                                              |
-| `toolBackground`       | `subtle`, `status`, `none`                           | `subtle`   | Controls the shared self-rendered background for `apply_patch`, `image_gen.imagegen`, and `web.run`. `status` uses Pi's pending/success/error backgrounds; `none` keeps the custom layout transparent.                                    |
-| `applyPatch`           | boolean                                              | `true`     | On selected `openai-codex` models, uses the extension's `apply_patch` tool instead of Pi's active `edit` and `write` tools. Other providers always use their normal Pi tool set.                                                          |
-| `applyPatchDebug`      | boolean                                              | `false`    | Shows the exact model-facing tool result while a completed `apply_patch` result is collapsed. Expanded results continue to show the normal visual summary and complete diffs.                                                             |
-| `imageGeneration`      | boolean                                              | `true`     | Enables the extension-owned `image_gen.imagegen` tool on selected `openai-codex` models.                                                                                                                                                  |
-| `imageDetail`          | `auto`, `low`, `high`, `original`                    | `auto`     | Sets `input_image.detail` when an image tool result is sent back to the model. It does not change `gpt-image-2` generation quality.                                                                                                       |
-| `webRun`               | boolean                                              | `false`    | Enables the extension-owned `web.run` tool on selected `openai-codex` models. When active, it replaces hosted `web_search` in the Responses tool list.                                                                                    |
-| `autoCompactAtPercent` | number greater than `0` and at most `100`, or `null` | unset      | Adds provider-boundary compaction independently of Pi's normal reserve-token threshold. Mid-response boundaries require Pi auto-compaction. A project value of `null` disables a global percentage threshold.                             |
-| `webSearch`            | `disabled`, `cached`, `indexed`, `live`              | `disabled` | Controls hosted search and standalone-search external access. `disabled` removes hosted search but leaves an independently enabled `web.run` in cached-only mode; `indexed` prefers indexed content; `live` permits live external access. |
-| `textVerbosity`        | `low`, `medium`, `high`                              | `low`      | Sets Responses API `text.verbosity`.                                                                                                                                                                                                      |
-| `reasoningSummary`     | `auto`, `concise`, `detailed`, `off`                 | `auto`     | Sets `reasoning.summary` when reasoning is enabled; `off` omits the summary parameter.                                                                                                                                                    |
-| `reasoningMode`        | `standard`, `pro`                                    | `standard` | Controls GPT-5.6 execution mode independently of Pi's reasoning-effort control. The default omits `reasoning.mode`; `pro` sends `reasoning.mode: "pro"`.                                                                                  |
+| Setting                 | Values                                               | Default    | Behavior                                                                                                                                                                                                                                  |
+| ----------------------- | ---------------------------------------------------- | ---------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `fastMode`              | boolean                                              | `false`    | Adds `service_tier: "priority"` to requests while retaining the current `openai-codex` provider and model.                                                                                                                                |
+| `responsesLite`         | boolean                                              | `false`    | Uses Codex's Responses Lite input envelope on supported GPT-5.6 models when enabled. By default, those models use ordinary Responses instructions and tools.                                                                              |
+| `toolBackground`        | `subtle`, `status`, `none`                           | `subtle`   | Controls the shared self-rendered background for `apply_patch`, `image_gen.imagegen`, and `web.run`. `status` uses Pi's pending/success/error backgrounds; `none` keeps the custom layout transparent.                                    |
+| `applyPatch`            | boolean                                              | `true`     | On selected `openai-codex` models, uses the extension's `apply_patch` tool instead of Pi's active `edit` and `write` tools. Other providers always use their normal Pi tool set.                                                          |
+| `applyPatchDebug`       | boolean                                              | `false`    | Shows the exact model-facing tool result while a completed `apply_patch` result is collapsed. Expanded results continue to show the normal visual summary and complete diffs.                                                             |
+| `applyPatchDiagnostics` | boolean                                              | `false`    | Persists failed patch requests with pre-execution text snapshots or binary metadata for every instruction, outcomes, and trace identifiers. See [`apply_patch`](#apply_patch) for storage and sensitivity details.                        |
+| `imageGeneration`       | boolean                                              | `true`     | Enables the extension-owned `image_gen.imagegen` tool on selected `openai-codex` models.                                                                                                                                                  |
+| `imageDetail`           | `auto`, `low`, `high`, `original`                    | `auto`     | Sets `input_image.detail` when an image tool result is sent back to the model. It does not change `gpt-image-2` generation quality.                                                                                                       |
+| `webRun`                | boolean                                              | `false`    | Enables the extension-owned `web.run` tool on selected `openai-codex` models. When active, it replaces hosted `web_search` in the Responses tool list.                                                                                    |
+| `autoCompactAtPercent`  | number greater than `0` and at most `100`, or `null` | unset      | Adds provider-boundary compaction independently of Pi's normal reserve-token threshold. Mid-response boundaries require Pi auto-compaction. A project value of `null` disables a global percentage threshold.                             |
+| `webSearch`             | `disabled`, `cached`, `indexed`, `live`              | `disabled` | Controls hosted search and standalone-search external access. `disabled` removes hosted search but leaves an independently enabled `web.run` in cached-only mode; `indexed` prefers indexed content; `live` permits live external access. |
+| `textVerbosity`         | `low`, `medium`, `high`                              | `low`      | Sets Responses API `text.verbosity`.                                                                                                                                                                                                      |
+| `reasoningSummary`      | `auto`, `concise`, `detailed`, `off`                 | `auto`     | Sets `reasoning.summary` when reasoning is enabled; `off` omits the summary parameter.                                                                                                                                                    |
+| `reasoningMode`         | `standard`, `pro`                                    | `standard` | Controls GPT-5.6 execution mode independently of Pi's reasoning-effort control. The default omits `reasoning.mode`; `pro` sends `reasoning.mode: "pro"`.                                                                                  |
 Invalid JSON setting values are ignored and invalid JSON does not prevent Pi from starting. The settings pane never writes on ordinary changes, refuses to overwrite invalid JSON when `Enter` or `Ctrl+S` attempts to save, and retains unknown keys when saving. Project configuration is read only when the project is trusted.
 Every setting can also be overridden for one Pi process with an environment variable:
-| Setting                | Environment variable                             |
-| ---------------------- | ------------------------------------------------ |
-| `fastMode`             | `PI_OPENAI_CODEX_COMPAT_FAST_MODE`               |
-| `responsesLite`        | `PI_OPENAI_CODEX_COMPAT_RESPONSES_LITE`          |
-| `toolBackground`       | `PI_OPENAI_CODEX_COMPAT_TOOL_BACKGROUND`         |
-| `applyPatch`           | `PI_OPENAI_CODEX_COMPAT_APPLY_PATCH`             |
-| `applyPatchDebug`      | `PI_OPENAI_CODEX_COMPAT_APPLY_PATCH_DEBUG`       |
-| `imageGeneration`      | `PI_OPENAI_CODEX_COMPAT_IMAGE_GENERATION`        |
-| `imageDetail`          | `PI_OPENAI_CODEX_COMPAT_IMAGE_DETAIL`            |
-| `webRun`               | `PI_OPENAI_CODEX_COMPAT_WEB_RUN`                 |
-| `autoCompactAtPercent` | `PI_OPENAI_CODEX_COMPAT_AUTO_COMPACT_AT_PERCENT` |
-| `webSearch`            | `PI_OPENAI_CODEX_COMPAT_WEB_SEARCH_MODE`         |
-| `textVerbosity`        | `PI_OPENAI_CODEX_COMPAT_TEXT_VERBOSITY`          |
-| `reasoningSummary`     | `PI_OPENAI_CODEX_COMPAT_REASONING_SUMMARY`       |
-| `reasoningMode`        | `PI_OPENAI_CODEX_COMPAT_REASONING_MODE`          |
+| Setting                 | Environment variable                             |
+| ----------------------- | ------------------------------------------------ |
+| `fastMode`              | `PI_OPENAI_CODEX_COMPAT_FAST_MODE`               |
+| `responsesLite`         | `PI_OPENAI_CODEX_COMPAT_RESPONSES_LITE`          |
+| `toolBackground`        | `PI_OPENAI_CODEX_COMPAT_TOOL_BACKGROUND`         |
+| `applyPatch`            | `PI_OPENAI_CODEX_COMPAT_APPLY_PATCH`             |
+| `applyPatchDebug`       | `PI_OPENAI_CODEX_COMPAT_APPLY_PATCH_DEBUG`       |
+| `applyPatchDiagnostics` | `PI_OPENAI_CODEX_COMPAT_APPLY_PATCH_DIAGNOSTICS` |
+| `imageGeneration`       | `PI_OPENAI_CODEX_COMPAT_IMAGE_GENERATION`        |
+| `imageDetail`           | `PI_OPENAI_CODEX_COMPAT_IMAGE_DETAIL`            |
+| `webRun`                | `PI_OPENAI_CODEX_COMPAT_WEB_RUN`                 |
+| `autoCompactAtPercent`  | `PI_OPENAI_CODEX_COMPAT_AUTO_COMPACT_AT_PERCENT` |
+| `webSearch`             | `PI_OPENAI_CODEX_COMPAT_WEB_SEARCH_MODE`         |
+| `textVerbosity`         | `PI_OPENAI_CODEX_COMPAT_TEXT_VERBOSITY`          |
+| `reasoningSummary`      | `PI_OPENAI_CODEX_COMPAT_REASONING_SUMMARY`       |
+| `reasoningMode`         | `PI_OPENAI_CODEX_COMPAT_REASONING_MODE`          |
 Environment variables have the highest precedence: defaults < global JSON < trusted-project JSON < environment. Boolean values accept `true`/`false`, `1`/`0`, `on`/`off`, or `enabled`/`disabled`. Other settings use the values in the defaults table; `PI_OPENAI_CODEX_COMPAT_AUTO_COMPACT_AT_PERCENT=off` and `PI_OPENAI_CODEX_COMPAT_AUTO_COMPACT_AT_PERCENT=default` explicitly select Pi's default compaction lifecycle.
@@ -297,10 +303,17 @@ Compatibility behavior:
 - `*** Add File` overwrites an existing file, matching Codex.
 - `*** Move to` overwrites an existing destination, matching Codex.
 - Hunk matching retries exact text, trailing-whitespace-insensitive text, fully trimmed text, and Codex's Unicode punctuation normalization.
-- After strict matching fails, uniquely determined formatter-only line reflow can recover through exact Tree-sitter tokens for JavaScript, JSX, TypeScript, TSX, Python, Go, Java, and Scala. Requested replacement lines remain opaque and exact.
-- Markdown recovery is limited to exact-cell tables and supported code inside typed fences. Plain prose reflow, optional punctuation differences, single-token structural recovery, and partial-line structural recovery reject.
+- Matching stops after the official Codex-compatible line matcher. There is no Tree-sitter, Markdown-table, code-fence, formatter-reflow, candidate-ranking, or output-equivalence fallback.
+- Move identity and context chunks must match before the entry is moved; chunkless moves remain byte-opaque.
 - The parser accepts Codex's lenient marker whitespace, blank update-context lines, and direct heredoc wrappers.
 - Empty and identity updates, identical adds, absent deletes, self-moves, and same-patch fulfilled moves succeed with concise `NO CHANGE` results. Inapplicable operations are `SKIPPED` only when later operations deterministically make every effect unobservable.
+- Repeated identical adds use source-ordered virtual content and exact
+  spelling, so an earlier add or move can satisfy a later add without a
+  redundant replacement.
+- State-dependent `NO CHANGE` results retain source-ordered execution
+  checkpoints without rereading the filesystem. A checkpoint after an earlier
+  failure is `NOT RUN`; empty updates, identity updates without moves, and
+  chunkless lexical self-moves remain unconditional.
 - Model-facing results retain the aggregate A/M/D summary. When any instruction is not applied or an applied instruction has feedback, they list every source-ordered instruction under `Patch instruction results:` as `N. [STATUS] operation`, without an instruction limit; ordinary all-applied results omit the ledger.
 - Combined text updates and moves are labeled `Update & Move`; move-only operations remain `Move`.
 - Replacement feedback always identifies the verified previous and resulting entry types. Symlink feedback also uses the raw target pathname stored in the symlink.
@@ -308,19 +321,84 @@ Compatibility behavior:
 - Opaque moves and symlink deletions use path-only history, so binary bytes and link-target bytes are not serialized as textual deletions.
 - The TUI retains Codex-style changed-file summaries and uses the same conditional instruction ledger; when present, `Ctrl+O` nests complete diffs beneath the instruction that produced them.
 - With `applyPatchDebug` enabled, the tool title becomes `apply_patch (debug)` and a completed collapsed result shows the exact text returned to the model without an extra renderer-only heading; expanding it with `Ctrl+O` still shows the normal visual summary and complete diffs.
-- Failed instruction feedback colocates its error, completed effects, final path states, and concise matcher evidence without repeating patch text or using speculative language. Matcher failures include direct guidance for retrying with updated, source-ordered, non-overlapping, or more specific instructions.
+- Failed instruction feedback colocates its error, completed effects, and final path states without repeating patch text or using speculative language. Matching failures report the original context or expected-lines mismatch.
+With `applyPatchDiagnostics` enabled, the extension prepares pre-execution
+snapshots in memory for each invocation. A successful invocation discards that
+prepared data and writes no diagnostic artifacts or tool-result references. A
+failed invocation writes paired JSON artifacts under:
+```text
+~/.pi/agent/openai-codex-compat-apply-patch-diagnostics/<session-id>/
+```
+The active Pi agent directory replaces `~/.pi/agent` when configured
+differently. The request artifact contains the raw patch, parsed instructions
+(or parse failure), pre-execution snapshots for paths referenced by every
+instruction in the failed patch, and available session, assistant, response,
+turn, transport-request, and tool-call identifiers. It also records the
+compatibility-package, Pi, Node.js, operating-system, and architecture versions.
+Process identity, working directory, and umask are included when available.
+Each file and parent-directory snapshot includes mode, size, modification time,
+device, inode, link count, user ID, and group ID so hard-link, alias,
+cross-filesystem, and permission failures remain traceable. Parent metadata is
+collected from each referenced path through the filesystem root. Malformed
+patches retain snapshots for every instruction recognized by the fallback
+scanner.
+Valid UTF-8 regular-file content is stored as text with its byte length and
+SHA-256. Binary content is not copied; its snapshot contains only the byte
+length and SHA-256. Symlink snapshots retain the raw target and either readable
+UTF-8 target content or binary target metadata. The result artifact records the
+failed outcome, structured tool details, and the error chain up to eight causes,
+including available filesystem codes, operation names, source paths, and
+destination paths. Those details also retain the diagnostic record ID and both
+artifact paths so the invocation can be located from Pi session history.
+These artifacts can contain sensitive source code, ownership and filesystem
+identity metadata, absolute paths, patches, and request identifiers. Capture is
+disabled by default.
+Directories are restricted to mode `0700`, files to `0600`, and records are not
+automatically pruned; delete them manually when they are no longer needed. If
+either artifact cannot be written after a patch failure, the diagnostic error
+is reported to stderr without replacing or changing the original patch
+failure.
 Filesystem behavior:
 - Relative paths resolve from Pi's current working directory; absolute paths and `..` traversal are honored.
 - `.git` paths are unrestricted.
 - Text updates follow live symlinks; adds replace live or dangling symlinks without writing through them; deletes remove only the symlink; pure moves move the source symlink; and state-changing moves create a regular file at the destination without writing updated text through a source or destination symlink.
+- Relative symlink targets, including targets containing `..`, resolve from
+  the canonical directory containing the link even when the source or moved
+  destination is reached through a symlink-parent alias.
 - Entry-only operations and no-op updates do not dereference cyclic or inaccessible symlink targets during mutation-queue acquisition.
 - Same-filesystem pure moves use native rename topology. Cross-filesystem moves copy through a temporary entry, create or replace the destination, and then unlink the source, producing an inode independent from remaining source hard links.
-- Strict and formatter-recovered edits preserve the matched region's local CRLF or mixed line endings.
+- Supplied identity or context chunks validate a pure move through the text matcher without rewriting the moved entry. A blank `@@` therefore requires valid UTF-8; omit chunks for arbitrary binary content.
+- Strict edits preserve the matched region's local CRLF or mixed line endings.
+- In-place text updates use a direct path write, following source symlinks and
+  preserving normal hard-link visibility.
+- Adds and text updates verify the complete expected final byte buffer
+  byte-for-byte before succeeding. This is whole-file equality, not a
+  substring search, so duplicate or unrelated regions cannot satisfy the
+  postcondition. Deletes verify absence; moves verify their source,
+  destination type, exact destination spelling, native identity where
+  available, known bytes, and raw symlink target.
 - The extension does not add path filtering, sandboxing, or approval prompts.
 - Every hunk is parsed and validated before filesystem writes begin.
-- Mutations participate in Pi's per-file mutation queue and an extension-local logical queue for case, Unicode, symlink-parent, and hard-link aliases. Both queues coordinate only concurrent `apply_patch` calls in the same Pi process and module instance; they do not coordinate separate Pi sessions, other processes, or unrelated edit/write tools.
+- No-change checkpoints are interleaved with mutations in patch order, so
+  later checkpoints are not reported as completed after an earlier failure.
+- Mutations participate in Pi's per-file mutation queue for the complete
+  preflight-and-execution window. Queue paths are acquired deterministically,
+  follow operation-specific symlink semantics, and include every move source
+  and destination. There is no additional extension-local alias queue.
+Operating model: relevant filesystem state is not modified outside the queued
+`apply_patch` execution window. This includes ancestor paths, symlink targets,
+hard-link aliases, callbacks, injected filesystem hooks, separate Pi sessions,
+and external processes. Preflight is authoritative under this model; the
+executor does not attempt cross-process drift detection or transactional
+isolation.
 A low-level I/O failure can still complete part of an instruction. The failed
 instruction reports every confirmed effect and final path state; when a path

package/THIRD_PARTY_NOTICES.md CHANGED Viewed

@@ -2,7 +2,7 @@
 ## OpenAI Codex
-The `apply_patch` grammar, parser behavior, fuzzy matching, mutation semantics, result formatting, diff rendering, standalone image-generation behavior, standalone web-search behavior, tool schemas, and compatibility scenarios in this package are adapted for Pi from the public OpenAI Codex implementation.
+The `apply_patch` grammar, parser behavior, line matching, mutation semantics, result formatting, diff rendering, standalone image-generation behavior, standalone web-search behavior, tool schemas, and compatibility scenarios in this package are adapted for Pi from the public OpenAI Codex implementation.
 OpenAI Codex, Copyright 2025 OpenAI
@@ -19,29 +19,3 @@ Pi AI, Copyright (c) 2025 Mario Zechner
 Pi AI is licensed under the MIT License. A copy is included at [`LICENSES/pi-ai-MIT.txt`](LICENSES/pi-ai-MIT.txt).
 Source: <https://github.com/earendil-works/pi/tree/main/packages/ai>
-## Tree-sitter WASMs
-`@2h2d/tree-sitter-wasms` supplies lifecycle-free grammar WASM assets used for
-formatter-tolerant `apply_patch` matching.
-Tree-sitter WASMs, Copyright (c) 2026 Kaan Ozdokmeci
-Tree-sitter WASMs is licensed under the MIT License. A copy is included at
-[`LICENSES/tree-sitter-wasms-MIT.txt`](LICENSES/tree-sitter-wasms-MIT.txt).
-The dependency package includes the exact upstream license for each bundled
-grammar under its own `LICENSES` directory.
-Source: <https://github.com/2h2d-co/tree-sitter-wasms>
-## Web Tree-sitter
-`web-tree-sitter` supplies the official Tree-sitter WASM runtime used to load
-and execute the packaged grammars.
-Web Tree-sitter, Copyright (c) 2018 Max Brunsfeld
-Web Tree-sitter is licensed under the MIT License. A copy is included at
-[`LICENSES/web-tree-sitter-MIT.txt`](LICENSES/web-tree-sitter-MIT.txt).
-Source: <https://github.com/tree-sitter/tree-sitter/tree/master/lib/binding_web>