pi-roundtable 0.19.0 → 0.19.1

package/CHANGELOG.md

@@ -5,6 +5,13 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [0.19.1] - 2026-10-18
+
+### Fixed
+
+- The core's tests no longer depend on the host's `mktemp` or on a free-port probe. The check that the agents' `bash` writes into the scratch dir ran a bare `mktemp`, which macOS's BSD `mktemp` sends to the user temp dir whatever `TMPDIR` says; it now runs `mktemp -p "$TMPDIR"`, which both implementations honour, and the bare `mktemp` is held to the scratch dir only where GNU `mktemp` is the default. The listener tests found a free port by opening one and closing it, and another process could take it before the listener bound it (`EADDRINUSE`); they now let the listener bind port 0 and ask which port it got.
+- The docs say what the scratch dir promises: the agents' shell runs with `TMPDIR` pointing to it, so tools that read `TMPDIR` and GNU `mktemp` write there, while macOS's BSD `mktemp` ignores `TMPDIR` for a bare `mktemp` and needs `mktemp -p "$TMPDIR"`. The agents' prompt is unchanged: it already sends temporary files to `$TMPDIR` and never asks for a bare `mktemp`.
+
 ## [0.19.0] - 2026-10-17
 
 ### Added

package/docs/plugins.md

@@ -918,7 +918,7 @@ defineTool({
 
 `shellHoldRule` in `pi-roundtable/kit` judges the agents' `bash`, `write` and `edit` calls; the agent server links it, and a session without a workspace has no shell.
 Its scratch roots are the shared workspace (`HoldContext.workspace`) and the scratch dir (`HoldContext.scratchDir`).
-The scratch dir is the config's `scratchDir`, by default `<os temp dir>/<discord.rootCommand>-scratch` (such as `/tmp/roundtable-scratch`); the agent server creates it with mode 0700 at startup and refuses one that is a symlink or another user's, and the agents' `bash` runs with `TMPDIR` pointing to it, so `mktemp` and tools write there.
+The scratch dir is the config's `scratchDir`, by default `<os temp dir>/<discord.rootCommand>-scratch` (such as `/tmp/roundtable-scratch`); the agent server creates it with mode 0700 at startup and refuses one that is a symlink or another user's, and the agents' `bash` runs with `TMPDIR` pointing to it, so tools that read `TMPDIR` and GNU `mktemp` write there. macOS's BSD `mktemp` ignores `TMPDIR` for a bare `mktemp`; `mktemp -p "$TMPDIR"` works with both.
 `AgentSessions.scratchDir` carries it to a runtime, and the agents' prompt tells them to write temporary files there, and to show a file with `attach_file` or a `discord_send_message` file `path` rather than reading an image or base64-encoding it.
 
 - A `>`, `>>` or `tee` target, and a `write` or `edit` path, inside a scratch root run; anything else, the rest of `/tmp` included, is held.

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "pi-roundtable",
-	"version": "0.19.0",
+	"version": "0.19.1",
 	"description": "A plugin-driven Pi agent server for one owner, reached through Discord or the web",
 	"type": "module",
 	"license": "MIT",

package/src/core/http/listeners.ts

@@ -225,6 +225,7 @@ export class HttpListeners {
 	readonly #sockets: SocketSet;
 	readonly #closeTimeoutMs: number;
 	#servers: Pick<Server<unknown>, "stop">[] = [];
+	readonly #ports = new Map<string, number>();
 
 	/** Validates every route before any socket opens; `closeTimeoutMs` bounds how long a stop waits on WebSocket handlers. */
 	constructor(
@@ -271,9 +272,15 @@ export class HttpListeners {
 					);
 					chmodSync(listener.socketPath, listener.mode ?? 0o660);
 				} else {
-					this.#servers.push(
-						serveTcp(listener.port, listener.hostname, handle, websocket),
+					const server = serveTcp(
+						listener.port,
+						listener.hostname,
+						handle,
+						websocket,
 					);
+					this.#servers.push(server);
+					if (server.port !== undefined)
+						this.#ports.set(listener.id, server.port);
 				}
 			}
 		} catch (error) {
@@ -282,6 +289,11 @@ export class HttpListeners {
 		}
 	}
 
+	/** The port an open TCP listener is bound to, which differs from the configured one when that was 0. */
+	portOf(listener: string): number | undefined {
+		return this.#ports.get(listener);
+	}
+
 	/** The listener's WebSocket handler, sized for its largest route limits; none without WebSocket routes. */
 	#websocketHandler(
 		listener: string,
@@ -314,6 +326,7 @@ export class HttpListeners {
 		this.#sockets.closeAll();
 		for (const server of this.#servers) void server.stop(true);
 		this.#servers = [];
+		this.#ports.clear();
 		await this.#sockets.drain(this.#closeTimeoutMs);
 	}
 }

package/src/core/runtime/session-factory.ts

@@ -472,7 +472,7 @@ export function imageTools(
 	return images ? { generateImage: generateImageExtension(images, roots) } : {};
 }
 
-/** Pi's bash tool with TMPDIR set to `scratchDir`, so `mktemp` and tools write there. */
+/** Pi's bash tool with TMPDIR set to `scratchDir`, so tools that read TMPDIR and GNU `mktemp` write there (BSD `mktemp` needs `-p "$TMPDIR"`). */
 export function scratchBash(cwd: string, scratchDir: string): ToolDefinition {
 	// SAFETY: Pi's bash definition is a ToolDefinition typed by its own parameter schema, which the session takes as any custom tool.
 	return createBashToolDefinition(cwd, {