pi-quiver 6.0.0 → 6.0.1

package/CHANGELOG.md

@@ -8,6 +8,14 @@ Published to npm as `pi-quiver` (`pi install npm:pi-quiver`). Pushing a
 via OIDC trusted publishing. The release helper at
 `.agents/skills/release/scripts/release.sh` cuts the tag; CI publishes.
 
+## v6.0.1 - 2026-09-13
+
+- `session-name` Herdr sink tolerates herdr-ntfy-notify's armed marker: exactly one leading `* ` on the live label no longer counts as a human rename, is preserved on every rename and on the shutdown restore, and its removal keeps the claim (#19).
+- `release.sh <level>` promotes the CHANGELOG `## Unreleased` section to `## vX.Y.Z - <date>` and commits it with `package.json` in the single `Release X.Y.Z` commit; a missing or empty section fails the run. New CONFIG field `CHANGELOG_HEADING`.
+- Release skill and `/release` prompt: a user instruction naming the level is the approval - no proposal step or re-confirmation; bundled follow-ups run after `verify`.
+- AGENTS.md rewritten to always-on essentials plus routing; shared core bumped to v3.
+- Added `.pi/gauntlet-overrides.md` (`tracker: github`, release path, write-gate carve-out for user-named writes).
+
 ## v6.0.0 - 2026-09-10
 
 - doc_to_md (Excel, breaking): `maxCellsPerSheet` is removed from the tool schema, CLI (`--max-cells-per-sheet`), and `quiver.docToMd` settings; a leftover key is reported by the settings lint. Sheet indices are now 0-based workbook positions covering worksheets and chartsheets, so embedded-image files move from `<stem>-s1-<n>.*` to `<stem>-s0-<n>.*` and `SheetInfo.index` is rebased.

package/README.md

@@ -200,7 +200,7 @@ survive untouched.
 
 `sessionAutoName.enabled` makes one extra short LLM call per session (once, after the first turn) to title it; `false` (default) makes no model calls. `rules` appends house conventions to the naming prompt (later rules win when they conflict with the built-ins). Literal, case-insensitive `deny` phrases are stripped from every name; whitespace inside a phrase is loose, so `"acme corp"` also catches `AcmeCorp`. `revisitFirstTurn` re-evaluates the name once that many model round trips have completed, while `revisitEveryTurns` does so at every multiple; both default to `0` (off) because each revisit costs another short LLM call. For example, `10` and `100` mark round trips 10, 100, 200, 300. Revisits only run when the agent has fully settled (idle, nothing queued) - an automated multi-turn run such as a subagent chain is never renamed or delayed mid-flight; cadence points it crossed fire once, at the settle. A machine-generated name is replaced when stale. A name set by a human is never overwritten: the extension strongly prefers it, and announces a suggestion only when the work has clearly moved on. Counts come from the persisted transcript, so they survive resume.
 
-`herdrTab` (default `true`) mirrors the same curated label to the Herdr tab bar over Herdr's unix socket, independent of `ghosttyTab` - either sink can be toggled off without affecting the other. It's claim-once: the extension adopts a tab only while it still shows its default numeric label (its live 1-based position among the workspace's tabs); a manually renamed tab, or one renamed mid-session by hand, is never touched again for that session - the human's label always wins. On every shutdown (quit, reload, `/new`, resume, fork) a claimed tab's label is restored to its then-current default position, so a successor session in the same pane can claim cleanly. It only ever runs in TUI mode, on an attached TTY, under Herdr (`HERDR_ENV`/`HERDR_TAB_ID`/`HERDR_SOCKET_PATH` all set) - `pi -p`/json/rpc runs and background subagents never touch the tab. Caveats: a hard crash (`kill -9`) skips the restore and leaves the stale label - rename the tab by hand to recover; and the restored label is internally a custom name (Herdr has no clear-to-auto API), so that tab keeps a number-looking label but stops renumbering on later tab closes/reorders.
+`herdrTab` (default `true`) mirrors the same curated label to the Herdr tab bar over Herdr's unix socket, independent of `ghosttyTab` - either sink can be toggled off without affecting the other. It's claim-once: the extension adopts a tab only while it still shows its default numeric label (its live 1-based position among the workspace's tabs); a manually renamed tab, or one renamed mid-session by hand, is never touched again for that session - the human's label always wins. One exception: exactly one leading `* ` (herdr-ntfy-notify's armed marker) is not a human rename - it is preserved across renames and the shutdown restore, and removing it keeps the claim. On every shutdown (quit, reload, `/new`, resume, fork) a claimed tab's label is restored to its then-current default position, so a successor session in the same pane can claim cleanly. It only ever runs in TUI mode, on an attached TTY, under Herdr (`HERDR_ENV`/`HERDR_TAB_ID`/`HERDR_SOCKET_PATH` all set) - `pi -p`/json/rpc runs and background subagents never touch the tab. Caveats: a hard crash (`kill -9`) skips the restore and leaves the stale label - rename the tab by hand to recover; and the restored label is internally a custom name (Herdr has no clear-to-auto API), so that tab keeps a number-looking label but stops renumbering on later tab closes/reorders.
 
 `fastMode` only affects `claude-opus-4-8` and `claude-opus-5` requests on Anthropic's `anthropic-messages` API; enabling it opts into premium fast-mode pricing. `--fast` forces it on for one launch; `/fast on|off` toggles live. Proxy providers (opencode, cloudflare-ai-gateway) are excluded. `fastMode`'s header injection needs the `before_provider_headers` hook (pi bundling `@earendil-works/pi-coding-agent` >= 0.80.5); on older pi the beta header is silently not sent. The `anthropic-beta` header is discovered at request time by probing pi's own request assembly (no network), so conditional betas pi adds - e.g. `server-side-fallback-2026-07-01` for models with server-side fallback - are preserved alongside `fast-mode-2026-02-01`. If the probe fails, the header falls back to the static OAuth-identity + fast-mode list. See [doc/fetch.md](doc/fetch.md) and [doc/doc-to-md.md](doc/doc-to-md.md) for the ingestion tools' full reference; session-name/sword-header behavior above is complete.
 
@@ -392,7 +392,9 @@ bash .agents/skills/release/scripts/release.sh patch        # or minor / major
 bash .agents/skills/release/scripts/release.sh --dry-run patch
 ```
 
-It bumps `package.json`, commits `Release <version>`, runs the tests, creates
-and pushes the `vX.Y.Z` tag, then monitors the publish. See
-`.agents/skills/release/SKILL.md` for the full flow (`sync-presets` migrates
-old git-tag pins to `npm:pi-quiver@<version>`).
+It promotes the `## Unreleased` CHANGELOG section to `## vX.Y.Z - <date>`,
+bumps `package.json`, commits `Release <version>`, runs the tests, creates and
+pushes the `vX.Y.Z` tag, then monitors the publish. See
+`.agents/skills/release/SKILL.md` for the full flow (`sync-presets --apply`
+rewrites same-form `npm:pi-quiver@<old>` pins; git-tag pins are reported for
+manual migration).

package/extensions/session-name.ts

@@ -498,8 +498,10 @@ export function installSessionName(pi: ExtensionAPI, generate: NameGenerator = g
 
 	// Herdr sink. Claim-once: adopt the tab only while it shows its default
 	// (position) label; a human rename - before or during the session - wins
-	// permanently. All syncs serialize on one chain so overlapping hooks never
-	// interleave a read with a rename.
+	// permanently. The one exception is exactly one leading "* ": that is
+	// herdr-ntfy-notify's armed marker, ignored for ownership and carried
+	// through on every write. All syncs serialize on one chain so overlapping
+	// hooks never interleave a read with a rename.
 	// Used both for turn_start syncs (bounds a wedged-but-accepting Herdr so it
 	// can't stall the turn) and for the session_end restore.
 	const HERDR_TIMEOUT_MS = 500;
@@ -511,6 +513,13 @@ export function installSessionName(pi: ExtensionAPI, generate: NameGenerator = g
 		return siblings.findIndex((t) => t.tab_id === tabId) + 1;
 	};
 
+	const ARMED_PREFIX = "* ";
+	const matchOwned = (live: string, expected: string): { owned: boolean; armed: boolean } => {
+		if (live === expected) return { owned: true, armed: false };
+		if (live === ARMED_PREFIX + expected) return { owned: true, armed: true };
+		return { owned: false, armed: false };
+	};
+
 	const syncHerdrTab = (cfg: Config, label: string | null, mode: Mode | undefined): Promise<void> => {
 		const run = async (): Promise<void> => {
 			if (!cfg.herdrTab || mode !== "tui" || !label) return;
@@ -524,23 +533,25 @@ export function installSessionName(pi: ExtensionAPI, generate: NameGenerator = g
 				const position = positionOf(tabs, tabId);
 				if (position === -1) return; // stale tab id (pane moved); retry harmlessly
 				const own = tabs.find((t) => t.tab_id === tabId)!;
-				if (own.label !== String(position)) {
+				const owned = matchOwned(own.label, String(position));
+				if (!owned.owned) {
 					herdrClaim = "backed-off"; // human (or crashed predecessor) owns it
 					return;
 				}
-				if (await renameTab(sock, tabId, label, HERDR_TIMEOUT_MS)) {
+				if (await renameTab(sock, tabId, (owned.armed ? ARMED_PREFIX : "") + label, HERDR_TIMEOUT_MS)) {
 					herdrClaim = { lastWritten: label };
 				}
 				return;
 			}
 			const live = await getTab(sock, tabId, HERDR_TIMEOUT_MS);
 			if (!live) return; // failed read is not a human rename; stay claimed
-			if (live.label !== herdrClaim.lastWritten) {
+			const owned = matchOwned(live.label, herdrClaim.lastWritten);
+			if (!owned.owned) {
 				herdrClaim = "backed-off";
 				return;
 			}
 			if (label === herdrClaim.lastWritten) return;
-			if (await renameTab(sock, tabId, label, HERDR_TIMEOUT_MS)) herdrClaim.lastWritten = label;
+			if (await renameTab(sock, tabId, (owned.armed ? ARMED_PREFIX : "") + label, HERDR_TIMEOUT_MS)) herdrClaim.lastWritten = label;
 		};
 		herdrChain = herdrChain.then(run, run);
 		return herdrChain;
@@ -555,12 +566,14 @@ export function installSessionName(pi: ExtensionAPI, generate: NameGenerator = g
 			const sock = process.env.HERDR_SOCKET_PATH as string;
 			const tabId = process.env.HERDR_TAB_ID as string;
 			const live = await getTab(sock, tabId, HERDR_TIMEOUT_MS);
-			if (!live || live.label !== herdrClaim.lastWritten) return; // human's label wins
+			if (!live) return;
+			const owned = matchOwned(live.label, herdrClaim.lastWritten);
+			if (!owned.owned) return; // human's label wins
 			const tabs = await listTabs(sock, HERDR_TIMEOUT_MS);
 			if (!tabs) return;
 			const position = positionOf(tabs, tabId);
 			if (position === -1) return;
-			await renameTab(sock, tabId, String(position), HERDR_TIMEOUT_MS);
+			await renameTab(sock, tabId, (owned.armed ? ARMED_PREFIX : "") + String(position), HERDR_TIMEOUT_MS);
 		};
 		herdrChain = herdrChain.then(run, run);
 		return herdrChain;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-quiver",
-  "version": "6.0.0",
+  "version": "6.0.1",
   "description": "Personal pack of Pi coding-agent extensions: context-safe fetch, doc_to_md PDF/DOCX/PPTX-to-Markdown conversion, session naming, a themed ASCII startup header, Opus 4.8 fast mode, and a provider-stall watchdog.",
   "author": "Jacek Juraszek",
   "license": "MIT",