privateer-agent 0.15.0 → 0.15.2

package/extensions/privateer-brand.ts

@@ -64,9 +64,9 @@ const VERSION: string = (() => {
 // The Privateer mark: our symbol — a padlock (with a keyhole) fused into an anchor,
 // "bring your own model" meets lock-and-key privacy — drawn from the app's logo. It's
 // rendered with terminal HALF-BLOCKS, so each text row packs TWO pixel rows. The mark is
-// a SINGLE colour (every set pixel is the accent), so a cell never needs two different
+// a SINGLE colour (every set pixel is WHITE), so a cell never needs two different
 // colours: both pixels set → a full block "█", top only → "▀", bottom only → "▄", none →
-// a space — all painted with the accent as FOREGROUND, no background cells at all. That
+// a space — all painted with WHITE as FOREGROUND, no background cells at all. That
 // makes the mark inherit the theme's ink (dark on light, light on dark) with one colour,
 // and sidesteps the old bg-bleed hazard entirely. Every built line is MARK_W visible
 // cells wide (SGR escapes don't count), so the text column beside it stays aligned. To
@@ -91,9 +91,9 @@ const PIXELS = [
   ".OO..OO..OO.", "..OO.OO.OO..",
   "..OOOOOOOO..", "...OOOOOO...", "....OOOO....", ".....OO.....",
 ];
-// Build the mark for a given palette (the accent is the ink). Cheap — called once per
+// Build the mark for a given palette (WHITE is the ink). Cheap — called once per
 // header factory invocation, i.e. once per theme, not per frame. Each cell resets SGR so
-// the accent can never bleed into the row padding the framer adds after it.
+// the colour can never bleed into the row padding the framer adds after it.
 function buildMark(p: Palette): string[] {
   const rows: string[] = [];
   for (let r = 0; r < PIXELS.length; r += 2) {
@@ -103,9 +103,9 @@ function buildMark(p: Palette): string[] {
     for (let x = 0; x < MARK_W; x++) {
       const t = top[x] === "O";
       const b = bot[x] === "O";
-      if (t && b) line += `${p.ACCENT}█${p.RESET}`;
-      else if (t) line += `${p.ACCENT}▀${p.RESET}`;
-      else if (b) line += `${p.ACCENT}▄${p.RESET}`;
+      if (t && b) line += `${p.WHITE}█${p.RESET}`;
+      else if (t) line += `${p.WHITE}▀${p.RESET}`;
+      else if (b) line += `${p.WHITE}▄${p.RESET}`;
       else line += " ";
     }
     rows.push(line);
@@ -277,7 +277,7 @@ function contextLine(p: Palette): string {
   const cost = truncated
     ? `${p.YELLOW} · too big, ${fmtBytes(loadedBytes)} loaded · ${p.INK}/context${p.RESET}`
     : `${p.DIM} · ~${tok} tok/turn${p.RESET}`;
-  return `${p.GREEN}⚓${p.DIM} ${p.RESET}${p.INK}${nearest}${p.RESET}${more}${cost}`;
+  return `${p.WHITE}⚓${p.DIM} ${p.RESET}${p.INK}${nearest}${p.RESET}${more}${cost}`;
 }
 
 // ── "What's New" — a tiny in-banner changelog ────────────────────────────────
@@ -314,7 +314,7 @@ function renderBanner(width: number, p: Palette, mark: string[], modelProvider?:
   // sits beside the lock body (not the shackle); the rest follows in reading order.
   const text: string[] = [
     "",
-    `${p.BOLD}${p.ACCENT}✻ ${p.ACCENT}P${p.INK}RIVATEER${p.RESET}${p.DIM}   privateer-agent ${p.INK}v${VERSION}${p.RESET}`,
+    `${p.BOLD}${p.SKY}✻ ${p.SKY}P${p.INK}RIVATEER${p.RESET}${p.DIM}   privateer-agent ${p.INK}v${VERSION}${p.RESET}`,
     `${p.DIM}Chart your own course privately.${p.RESET}`,
     "",
     accountLine(p, modelProvider),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "privateer-agent",
-  "version": "0.15.0",
+  "version": "0.15.2",
   "description": "Privacy-first terminal coding agent — bring your own model across 20 providers (Anthropic, OpenAI, OpenRouter, Google, local Ollama…). Safe-by-default permissions, MCP, sub-agents, workflows, and verifiable TEE inference. Built on the Pi toolkit.",
   "type": "module",
   "license": "MIT",

package/src/cli/chat.ts

@@ -336,16 +336,22 @@ async function main() {
 
   async function runTurn(text: string, remote: boolean, echo = true): Promise<void> {
     if (turnActive) {
-      console.log(`\n${DIM}(busy — a turn is already running)${RESET}`);
-      // Say it to the DRIVER too, not just to this terminal's own console. An
-      // app-driven prompt refused here used to vanish: the app had already echoed
-      // the message into its feed and lit the thinking pill (submit() in
-      // RemoteDriveContext does both before transmitting), and the only trace of
-      // the refusal was a dim line on a terminal nobody was looking at. The driver
-      // saw their own message sit under a spinner forever. A notice does not close
-      // their turn, and must not — a turn IS running, and it is the one they are
-      // watching — but it tells them this message was not added to it.
-      if (remote) relay?.sendNotice("Not sent — this terminal is already running a turn. Wait for it to finish, or press Stop.");
+      // A message sent while a turn runs STEERS it, the way typing into a running
+      // session does in any agent: Pi delivers it after the tool calls in flight and
+      // before the next model call. Refusing it ("busy") left the driver no way to
+      // correct course short of Stop, which throws the turn's work away.
+      if (remote) console.log(`\n${DIM}⟿ [app] ${text.slice(0, 80)}${RESET}`);
+      try {
+        const mentions = await resolveMentions(text, cwd);
+        await session.steer(mentions.text, mentions.images.length ? mentions.images : undefined);
+        console.log(`${DIM}(steering the running turn)${RESET}`);
+      } catch (e) {
+        // An extension command can't be queued (Pi refuses it mid-stream). Say so to
+        // whoever sent it — the app has already echoed the message into its feed.
+        const m = `Not sent — ${(e as Error).message || "this can't be added to a running turn"}. Wait for the turn to finish, or press Stop.`;
+        console.log(`\n${DIM}${m}${RESET}`);
+        if (remote) relay?.sendNotice(m);
+      }
       return;
     }
     turnActive = true;
@@ -375,6 +381,12 @@ async function main() {
         if (remote) relay?.sendNotice(m);
       }
       await session.prompt(mentions.text, mentions.images.length ? { images: mentions.images } : undefined);
+      // A steer that landed after the agent's last check (while its final reply was
+      // streaming) sits in Pi's queue with nothing left to pick it up. Run it now
+      // rather than leave the driver's message unanswered until some later prompt.
+      for (let q = session.clearQueue?.(); q && q.steering.length + q.followUp.length > 0; q = session.clearQueue?.()) {
+        await session.prompt([...q.steering, ...q.followUp].join("\n\n"));
+      }
     } catch (e) {
       failure = (e as Error).message || "The turn failed.";
       console.log(`\n${RED}${failure}${RESET}`);

package/src/config/whatsNew.json

@@ -1,10 +1,10 @@
 {
   "$comment": "The banner's What's New list, newest first: the two to four things a returning user should notice, not a changelog. `reviewedFor` is the release this list was last looked at for. A release can't ship until it equals package.json's version (scripts/check-whats-new.mjs, run by `npm test` and by release.yml before anything builds), so every release, patches included, is a deliberate look at this list. If nothing new is worth a line, bumping `reviewedFor` alone is the answer. `since` is the release an entry arrived in. `cmd` is shown in the accent colour.",
-  "reviewedFor": "0.15.0",
+  "reviewedFor": "0.15.2",
   "items": [
+    { "text": "Driving from the app: a message sent mid-turn steers it, and questions survive a dropped link", "since": "0.15.1" },
     { "text": "MCP on Pi's built-in support — sign OAuth connectors back in with", "cmd": "/mcp", "since": "0.15.0" },
     { "text": "Sub-agents are back: hand work to bounded parallel agents", "since": "0.15.0" },
-    { "text": "API keys can expire and carry their own credit limit — set them in the app", "since": "0.14.6" },
-    { "text": "Save to Cargo with no app attached — it lands on your next app open", "since": "0.14.4" }
+    { "text": "API keys can expire and carry their own credit limit — set them in the app", "since": "0.14.6" }
   ]
 }

package/src/mcp/catalog.ts

@@ -227,6 +227,485 @@ export const MCP_CATALOG: CatalogEntry[] = [
     needs: "oauth",
   },
 
+  // ── More remote OAuth servers (added 2026-10-20) ───────────────────────────
+  // Mirrors the block of the same name in treeview client/components/mcpCatalog.ts,
+  // minus the rows whose registration refuses a loopback redirect (Calendly). Each
+  // was probed on 2026-10-20: initialize → 401, OAuth discovery, and a dynamic
+  // client registration with http://127.0.0.1:<port>/callback. A full consent →
+  // tools/list round trip has not been run.
+  {
+    // Distinct id from the stdio `notion` entry: the two coexist, and this one
+    // needs no integration token.
+    id: "notion-remote",
+    name: "notion-remote",
+    label: "Notion",
+    blurb: "Pages, databases, and search. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.notion.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "supabase-remote",
+    name: "supabase-remote",
+    label: "Supabase",
+    blurb: "Projects, tables, and SQL. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.supabase.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "gitlab",
+    name: "gitlab",
+    label: "GitLab",
+    blurb: "Projects, issues, and merge requests. Sign in via browser.",
+    transport: "http",
+    url: "https://gitlab.com/api/v4/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "vercel",
+    name: "vercel",
+    label: "Vercel",
+    blurb: "Deployments, logs, and projects. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.vercel.com/",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "netlify",
+    name: "netlify",
+    label: "Netlify",
+    blurb: "Sites, deploys, and forms. Sign in via browser.",
+    transport: "http",
+    url: "https://netlify-mcp.netlify.app/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "cloudflare",
+    name: "cloudflare",
+    label: "Cloudflare",
+    blurb: "Your whole Cloudflare account through its API. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.cloudflare.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "cloudflare-workers",
+    name: "cloudflare-workers",
+    label: "Cloudflare Workers",
+    blurb: "Workers, KV, R2, and D1. Sign in via browser.",
+    transport: "http",
+    url: "https://bindings.mcp.cloudflare.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "cloudflare-observability",
+    name: "cloudflare-observability",
+    label: "Cloudflare Observability",
+    blurb: "Worker logs and analytics. Sign in via browser.",
+    transport: "http",
+    url: "https://observability.mcp.cloudflare.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "neon",
+    name: "neon",
+    label: "Neon",
+    blurb: "Serverless Postgres projects, branches, and SQL. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.neon.tech/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "prisma",
+    name: "prisma",
+    label: "Prisma Postgres",
+    blurb: "Databases, migrations, and queries. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.prisma.io/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "instantdb",
+    name: "instantdb",
+    label: "InstantDB",
+    blurb: "Apps, schemas, and data. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.instantdb.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "buildkite",
+    name: "buildkite",
+    label: "Buildkite",
+    blurb: "Pipelines, builds, and jobs. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.buildkite.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "grafana",
+    name: "grafana",
+    label: "Grafana",
+    blurb: "Dashboards, metrics, and alerts. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.grafana.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "honeycomb",
+    name: "honeycomb",
+    label: "Honeycomb",
+    blurb: "Traces, queries, and SLOs. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.honeycomb.io/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "posthog",
+    name: "posthog",
+    label: "PostHog",
+    blurb: "Product analytics, flags, and errors. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.posthog.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "amplitude",
+    name: "amplitude",
+    label: "Amplitude",
+    blurb: "Charts, cohorts, and experiments. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.amplitude.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "mixpanel",
+    name: "mixpanel",
+    label: "Mixpanel",
+    blurb: "Events, funnels, and reports. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.mixpanel.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "semgrep",
+    name: "semgrep",
+    label: "Semgrep",
+    blurb: "Scan code for security issues. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.semgrep.ai/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "port",
+    name: "port",
+    label: "Port",
+    blurb: "Your software catalog and developer portal. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.port.io/v1",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "stytch",
+    name: "stytch",
+    label: "Stytch",
+    blurb: "Auth projects, users, and settings. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.stytch.dev/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "globalping",
+    name: "globalping",
+    label: "Globalping",
+    blurb: "Ping, traceroute, and DNS from probes worldwide. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.globalping.dev/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "apify",
+    name: "apify",
+    label: "Apify",
+    blurb: "Run scrapers and actors. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.apify.com",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "parallel-search",
+    name: "parallel-search",
+    label: "Parallel Search",
+    blurb: "Web search built for agents. Sign in via browser.",
+    transport: "http",
+    url: "https://search-mcp.parallel.ai/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "clickup",
+    name: "clickup",
+    label: "ClickUp",
+    blurb: "Tasks, docs, and spaces. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.clickup.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "monday",
+    name: "monday",
+    label: "monday.com",
+    blurb: "Boards, items, and updates. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.monday.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "todoist",
+    name: "todoist",
+    label: "Todoist",
+    blurb: "Tasks, projects, and due dates. Sign in via browser.",
+    transport: "http",
+    url: "https://ai.todoist.net/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "airtable",
+    name: "airtable",
+    label: "Airtable",
+    blurb: "Bases, tables, and records. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.airtable.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "miro",
+    name: "miro",
+    label: "Miro",
+    blurb: "Boards, sticky notes, and diagrams. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.miro.com/",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "canva",
+    name: "canva",
+    label: "Canva",
+    blurb: "Find, create, and export designs. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.canva.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "webflow",
+    name: "webflow",
+    label: "Webflow",
+    blurb: "Sites, pages, and CMS collections. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.webflow.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "wix",
+    name: "wix",
+    label: "Wix",
+    blurb: "Sites, stores, and bookings. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.wix.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "cloudinary",
+    name: "cloudinary",
+    label: "Cloudinary",
+    blurb: "Upload, search, and transform media assets. Sign in via browser.",
+    transport: "http",
+    url: "https://asset-management.mcp.cloudinary.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "attio",
+    name: "attio",
+    label: "Attio",
+    blurb: "CRM records, lists, and notes. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.attio.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "intercom",
+    name: "intercom",
+    label: "Intercom",
+    blurb: "Conversations, contacts, and tickets. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.intercom.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "zapier",
+    name: "zapier",
+    label: "Zapier",
+    blurb: "Run actions across thousands of apps. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.zapier.com/api/mcp/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "paypal",
+    name: "paypal",
+    label: "PayPal",
+    blurb: "Invoices, orders, and transactions. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.paypal.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "square",
+    name: "square",
+    label: "Square",
+    blurb: "Payments, catalog, and orders. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.squareup.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "ramp",
+    name: "ramp",
+    label: "Ramp",
+    blurb: "Spend, cards, and reimbursements. Sign in via browser.",
+    transport: "http",
+    url: "https://ramp-mcp-remote.ramp.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "morningstar",
+    name: "morningstar",
+    label: "Morningstar",
+    blurb: "Fund and stock research data. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.morningstar.com/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "thoughtspot",
+    name: "thoughtspot",
+    label: "ThoughtSpot",
+    blurb: "Ask questions of your analytics data. Sign in via browser.",
+    transport: "http",
+    url: "https://agent.thoughtspot.app/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "jam",
+    name: "jam",
+    label: "Jam",
+    blurb: "Bug reports with recordings and logs. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.jam.dev/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "granola",
+    name: "granola",
+    label: "Granola",
+    blurb: "Your meeting notes. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.granola.ai/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "fathom",
+    name: "fathom",
+    label: "Fathom",
+    blurb: "Meeting recordings, transcripts, and summaries. Sign in via browser.",
+    transport: "http",
+    url: "https://api.fathom.ai/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "fireflies",
+    name: "fireflies",
+    label: "Fireflies.ai",
+    blurb: "Meeting transcripts and summaries. Sign in via browser.",
+    transport: "http",
+    url: "https://api.fireflies.ai/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "otter",
+    name: "otter",
+    label: "Otter.ai",
+    blurb: "Meeting transcripts and notes. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.otter.ai/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "read-ai",
+    name: "read-ai",
+    label: "Read AI",
+    blurb: "Meeting reports and recaps. Sign in via browser.",
+    transport: "http",
+    url: "https://api.read.ai/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+  {
+    id: "tldv",
+    name: "tldv",
+    label: "tl;dv",
+    blurb: "Meeting recordings and highlights. Sign in via browser.",
+    transport: "http",
+    url: "https://mcp.tldv.io/mcp",
+    oauth: true,
+    needs: "oauth",
+  },
+
   // ── Local, token-authorized ─────────────────────────────────────────────────
   {
     id: "brave-search",

package/src/remote/liveTaskSession.ts

@@ -138,7 +138,14 @@ export async function createLiveTaskSession(spec: TaskSpec, deps: LiveTaskDeps):
   };
 
   const runTurn = async (text: string): Promise<void> => {
-    if (turnActive || stopped) return;
+    if (stopped) return;
+    // A message sent while a turn runs steers it (delivered before the next model call)
+    // rather than being dropped — the driver must be able to correct course mid-turn.
+    if (turnActive) {
+      try { await session.steer(text); }
+      catch (e) { bridge.sendNotice(`Not sent — ${(e as Error).message || "this can't be added to a running turn"}.`); }
+      return;
+    }
     turnActive = true;
     let failure: string | undefined;
     lastAnswer = "";   // keep the CLOSING answer, not the whole session
@@ -160,6 +167,10 @@ export async function createLiveTaskSession(spec: TaskSpec, deps: LiveTaskDeps):
           `Use the save_attachment tool with the ref number to write one to disk.]`
         : "";
       await session.prompt(text + note);
+      // A steer that arrived after the agent's last check would otherwise sit unread.
+      for (let q = session.clearQueue?.(); q && q.steering.length + q.followUp.length > 0; q = session.clearQueue?.()) {
+        await session.prompt([...q.steering, ...q.followUp].join("\n\n"));
+      }
     } catch (e) {
       turnErrored = true;
       failure = (e as Error).message || "The turn failed.";