fix(deps): update pi extension dependency closure

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@earendil-works/pi-agent-core (source)	0.84.1 → 0.84.2
@earendil-works/pi-ai (source)	0.84.1 → 0.84.2
@earendil-works/pi-coding-agent (source)	0.84.1 → 0.84.2
@earendil-works/pi-tui (source)	0.84.1 → 0.84.2
@juicesharp/rpiv-ask-user-question (source)	2.4.0 → 2.5.2
@juicesharp/rpiv-todo (source)	2.4.0 → 2.5.2
@juicesharp/rpiv-web-tools (source)	2.4.0 → 2.5.2
@plannotator/pi-extension (source)	0.27.2 → 0.27.3
pi-subagents	0.48.0 → 0.49.0
typebox	1.3.13 → 1.3.14

---

Release Notes

earendil-works/pi (@​earendil-works/pi-agent-core)

v0.84.2

Compare Source

Fixed

• Fixed streamProxy() dropping finalized tool-call metadata such as OpenAI Responses namespaces (#​7709).

earendil-works/pi (@​earendil-works/pi-ai)

v0.84.2

Compare Source

Added

• Added createGatewayBindingFetch() for routing Cloudflare AI Gateway requests through a Workers AI binding without an API token (#​7901 by @​Maximo-Guk).
• Added AssistantMessage.endTurn to preserve OpenAI Codex's terminal end_turn signal for diagnostics (#​7766).

Changed

• Changed Kimi Coding requests to use pi's runtime User-Agent header.
• Automatically converted supported strict tool schemas to provider-compatible closed objects with required nullable optional fields while preserving original tool definitions, and treated null values for optional non-nullable tool arguments as omitted.
• Changed OpenAI Responses deferred tool loading to prefer message-anchored additional_tools where supported while retaining tool-search and top-level fallbacks (#​7709).
• Replaced the Mistral SDK transport with a native Chat Completions HTTP stream, eliminating its generated client and schema runtime overhead.

Fixed

• Fixed GitHub Copilot login triggering API rate limits while enabling model policies by limiting concurrent policy updates (#​6187).
• Fixed upstream request buffer limit failures to trigger automatic assistant retries.
• Fixed OpenAI Responses function and custom tool calls to preserve namespaces during streaming, proxying, and replay (#​7709).
• Fixed built-in and custom DeepSeek API models to send output limits through the supported max_tokens field.
• Fixed Google Generative AI and Vertex AI responses with tool calls incorrectly treating output-limit or provider-error stops as normal tool use (#​8059).
• Fixed Amazon Bedrock replay rejecting tool arguments that contain empty object keys while preserving all valid nested values (#​7882 by @​muyiyr).
• Fixed DeepSeek compatibility detection for base URLs whose hostname contains uppercase letters (#​7933 by @​yearth).

earendil-works/pi (@​earendil-works/pi-coding-agent)

v0.84.2

Compare Source

New Features

• Fullscreen transcript search — Search and navigate matches in fullscreen mode. See TUI Fullscreen Viewport.
• Configurable default tools — Choose startup built-in tools globally or per project. See Tools.
• Configurable fullscreen exit output — Print the transcript or only a resume hint on exit. See Interactive Mode.

Added

• Added fullscreen transcript search with Ctrl+Shift+F, incremental match highlighting, configurable search match theme colors, and next/previous navigation with Enter/Ctrl+G and Shift+Enter/Ctrl+Shift+G.
• Added experimental strict JSON-schema constrained sampling for the default read, bash, edit, and write tools under PI_EXPERIMENTAL=1.
• Added a fullscreen exit output setting to choose between printing the final transcript and only a session resume hint.
• Added the defaultTools setting for configuring the initial built-in tool selection globally or per project.
• Added --use-theme <name[/name]> to choose an initial per-run interactive theme without changing saved settings (#​7722 by @​rwachtler).
• Added expandPromptTemplates to extension pi.sendUserMessage() options for explicitly dispatching commands and expanding skills and prompt templates. See pi.sendUserMessage() (#​7857 by @​mrexodia).
• Added inherited createGatewayBindingFetch() for routing Cloudflare AI Gateway requests through a Workers AI binding without an API token (#​7901 by @​Maximo-Guk).
• Added inherited AssistantMessage.endTurn to preserve OpenAI Codex's terminal end_turn signal for diagnostics (#​7766).
• Added inherited unbound single-line transcript scrolling actions for fullscreen mode. See TUI Fullscreen Viewport (#​7903 by @​midastruth).

Changed

• Changed inherited Kimi Coding requests to use pi's runtime User-Agent header.
• Replaced the inherited Mistral SDK transport with a native Chat Completions HTTP stream, eliminating its generated client and schema runtime overhead.
• Documented the generic AI_AGENT=pi process marker and how it differs from PI_CODING_AGENT=true (#​7747).
• Changed inherited OpenAI Responses deferred tool loading to prefer message-anchored additional_tools where supported while retaining tool-search and top-level fallbacks (#​7709).
• Reduced inherited fullscreen rendering allocation churn by painting full-width layout rows directly instead of recompositing them on every frame.

Fixed

• Fixed managed-tool downloads delaying TUI startup and hiding diagnostics in fullscreen mode by mounting the TUI first and showing download progress and warnings inside it.
• Fixed opening a model selector immediately after startup cancelling and restarting the in-progress model catalog refresh.
• Fixed inherited GitHub Copilot login triggering API rate limits while enabling model policies by limiting concurrent policy updates (#​6187).
• Fixed fullscreen transcript search snapping back to the current match during manual scrolling and fragmented mouse input leaking into the search query.
• Fixed inherited required LaTeX arguments starting on a new line being parsed as empty (#​7760).
• Updated the transitive nanoid development dependency to address a denial-of-service vulnerability.
• Fixed fallback rendering for extension tool results to collapse long output and honor tool expansion (#​7979).
• Fixed JSON and RPC message_update events dropping cumulative usage during streaming. See JSON Event Mode and RPC message_update (#​7982 by @​christianklotz).
• Fixed pi.sendMessage(..., { triggerTurn: false }) steering an active run instead of only recording the custom message (#​8022 by @​cristinaponcela).
• Fixed the defaultTools setting dropping extension and SDK custom tools when selecting built-in defaults.
• Fixed the subagent example rejecting YAML array syntax for the tools frontmatter field (#​7598 by @​alexsavio).
• Fixed the subagent example dropping parent session model, thinking, and tool configuration (#​7897 by @​virtuald).
• Fixed custom system prompts concatenating the current working directory with later appended prompt content (#​7887 by @​distributedlock).
• Fixed inherited OpenAI Responses function and custom tool calls losing namespaces during streaming, proxying, and replay (#​7709).
• Fixed inherited upstream request buffer failures not triggering automatic assistant retries.
• Fixed inherited built-in and custom DeepSeek API models sending output limits through an unsupported field.
• Fixed inherited Amazon Bedrock replay rejecting tool arguments that contain empty object keys while preserving all valid nested values (#​7882 by @​muyiyr).
• Fixed inherited DeepSeek compatibility detection for base URLs whose hostname contains uppercase letters (#​7933 by @​yearth).
• Fixed inherited Google Generative AI and Vertex AI responses with tool calls incorrectly treating output-limit or provider-error stops as normal tool use (#​8059).
• Fixed inherited fullscreen mouse drag selection and OSC 8 link activation in terminals that report generic SGR mouse release button codes (#​7963).
• Fixed inherited focused fullscreen overlays not receiving mouse wheel or viewport scroll keys such as PageUp and PageDown (#​7894).
• Fixed inherited LaTeX control spaces split across line endings causing complete expressions to fall back to raw source.
• Fixed split Alt+Enter input over SSH being misread as Escape, added PI_TUI_ESC_TIMEOUT for high-latency terminals, and limited that timeout to lone Escape input (#​7899 by @​powerfooI).
• Fixed inherited idle fullscreen sessions repainting and clearing text selection when the terminal loses focus (#​7892 by @​terrorobe).
• Fixed fullscreen selection copy to use the host clipboard and report failure instead of claiming success when OSC 52 is unsupported (#​8110 by @​Panoplos).

earendil-works/pi (@​earendil-works/pi-tui)

v0.84.2

Compare Source

Added

• Added unbound single-line transcript scrolling actions, tui.altScreen.lineUp and tui.altScreen.lineDown, for fullscreen TUI keybindings (#​7903 by @​midastruth).
• Added incremental primary-scroll-view search to the fullscreen TUI with configurable match styles, Ctrl+Shift+F, and next/previous navigation with Enter/Ctrl+G and Shift+Enter/Ctrl+Shift+G.

Changed

• Reduced alternate-screen per-frame allocation churn roughly 9-18x by painting full-width layout rows as direct line references instead of recompositing every visible row through ANSI/grapheme segmentation on each frame.

Fixed

• Fixed fullscreen mouse drag selection and OSC 8 link activation in terminals that report generic SGR mouse release button codes (#​7963).
• Fixed fullscreen transcript search snapping back to the current match during manual scrolling and fragmented SGR mouse input leaking into the search query.
• Fixed required LaTeX arguments starting on a new line being parsed as empty (#​7760).
• Fixed LaTeX control spaces split across line endings causing complete expressions to fall back to raw source.
• Fixed focused fullscreen overlays not receiving mouse wheel or viewport scroll keys such as PageUp and PageDown (#​7894).
• Fixed split Alt+Enter input over SSH being misread as Escape, added PI_TUI_ESC_TIMEOUT for high-latency terminals, and limited that timeout to lone Escape input (#​7899 by @​powerfooI).
• Fixed idle fullscreen sessions repainting and clearing text selection when the terminal loses focus (#​7892 by @​terrorobe).
• Fixed fullscreen selection copy falsely reporting success when OSC 52 is unsupported by allowing host clipboard integration and reporting verified failures (#​8110 by @​Panoplos).

juicesharp/rpiv-mono (@​juicesharp/rpiv-ask-user-question)

v2.5.2

Compare Source

Fixed

• The questionnaire now honors a remapped tui.input.submit key as its confirm action everywhere (notes, custom answers, option rows, multi-select, Submit tab). Previously a Slack-style configuration that folds enter into tui.input.newLine and moves submit elsewhere (e.g. ctrl+enter) left the dialog with no working confirm key, and pressing the submit key silently wiped the typed draft (#​156).

v2.5.1

Compare Source

Fixed

• Long pasted text in "Type something" answers and notes now reaches the agent as the full pasted content instead of the editor's compact [paste #N +L lines] marker, including after tab switches (#​160).

v2.5.0

Compare Source

juicesharp/rpiv-mono (@​juicesharp/rpiv-todo)

v2.5.2

Compare Source

v2.5.1

Compare Source

v2.5.0

Compare Source

Fixed

• Terminal control characters (ANSI/C1 escape sequences, newlines, bidi overrides) in model-controlled task text — subject, description, activeForm, owner — are now stripped before terminal rendering (#​151, #​152).

juicesharp/rpiv-mono (@​juicesharp/rpiv-web-tools)

v2.5.2

Compare Source

v2.5.1

Compare Source

v2.5.0

Compare Source

backnotprop/plannotator (@​plannotator/pi-extension)

v0.27.3

Compare Source

Follow @​plannotator on X for updates

Missed recent releases?

Release	Highlights
v0.27.2	Mobile plan and code review, Codex CLI 0.147 fix, folder annotate cold-start, configurable markdown extensions
v0.27.1	Open-in-editor launch fix, file headers respect Viewed/Git-add visibility toggles
v0.27.0	Call Flow analysis, --tailscale remote reviews, review panel remembers your view, Pi rebuild (breaking command rename), focus-mode shortcut
v0.26.8	Placed comment markers on HTML pages, shift-click multi-select, live app annotation
v0.26.7	Pinpoint targets any element on HTML pages, smarter hover labels, zero-scan hit testing
v0.26.6	Fixed empty environment variables in sandboxed sessions (Bun 1.3.14 builds)
v0.26.5	HTML pinpoint element annotations, durable annotate submissions, installer fallback for old git, vim HUD cursor fix
v0.26.4	Skill-menu hover jitter fix (same-day patch on v0.26.3)
v0.26.3	Skill references in comments with / or $, reachable remote session URLs, worktree switcher tooltips
v0.26.2	Single-file diff tabs render fully, no more silently dropped review files, light/dark theme pairs, palette-matched code blocks
v0.26.1	GitButler 0.22.0 compatibility via capability-probed JSON flags
v0.26.0	Edit Mode (suggest by editing the diff), Guided Review virtualization, colorblind theme, safe uninstall, installer opt-outs, OpenCode 2 support

What's New in v0.27.3

One fix on top of v0.27.2. If you are coming from an earlier version, the full v0.27.2 notes follow below; v0.27.3 is that release plus:

Folder annotate no longer freezes the session on large repos

Community-reported within hours of v0.27.2: opening a folder annotate session on a repo with hundreds of directories could freeze the entire local server while the file-tree watcher ran its initial scan, and a browser reconnect rebuilt the watcher from scratch, so on big repos the freeze fed itself and file switching appeared permanently dead. The bug predates v0.27.2 by six releases; the reporter's repo was simply large enough to make it unbearable.

Three changes close the whole class: the watcher now warms up off the request path, so the session answers immediately while the scan runs behind it; disconnects reuse the warm watcher for 30 seconds instead of rescanning, which breaks the freeze loop; and macOS and Windows now use the operating system's native recursive watcher, measured at about 3ms to start versus 9 seconds for the previous scan on a 228-directory repo. The regression test pins it: a nested 780-directory tree that blocked the server for 79 seconds before now answers in under one second, and that test runs in CI so this cannot quietly return.

Reported by @​abanoub-ashraf in #​1313.

• #​1314

This is also the first release whose pipeline publishes a CycloneDX SBOM and attests it alongside the existing build provenance.

---

What's New in v0.27.2

Plannotator now works on your phone. This release ships a full mobile experience for plan review, code review, and annotation, alongside a security hardening pass, a fix for Codex review jobs on current Codex CLI versions, a large folder-mode performance win, and configurable markdown extensions. Fourteen PRs, including a community fix from @​leoreisdias and a community-requested feature from @​sgiath.

Plan and code review on phones and tablets

Review a plan from your couch. Approve a diff from the train. Plannotator's plan review, code review, and annotate surfaces now adapt to phones and tablets with a compact touch experience: full-width reading layouts, a full-screen navigator for files and contents, touch-safe comment composition that stays clear of the software keyboard, 44px touch targets, and safe-area-aware layouts that respect notches and home indicators. On iPhone Safari, plans use the browser's natural document scroll so the address bar collapses as you read.

Desktop behavior is unchanged. The compact experience activates only on coarse-pointer devices at tablet widths and below, so a narrow desktop window keeps the workspace you know. Pair it with v0.27.0's --tailscale flag or remote mode and your phone becomes a first-class review device: start a review on your workstation, scan the QR code, and annotate from anywhere on your tailnet.

This shipped as a five-part stack: viewport and safe-area foundation, keyboard-safe comment composition, touch and dialog primitives, the code review shell, and the plan shell.

• #​1295, #​1297, #​1300, #​1301, #​1303 by @​backnotprop

Codex review jobs work again on current Codex CLIs

Codex CLI 0.147.0 removed the --full-auto flag, which broke every Plannotator Codex review, Guided Review, and Code Tour job at launch with an argument error. Plannotator now passes --approve-for-me, the flag Codex introduced as its replacement, across all three job builders.

Note the floor this implies: Codex review jobs now require codex-cli 0.147.0 or newer. Older Codex CLIs do not recognize the new flag. Thanks to @​tgenov for independently reporting the breakage and pushing on a read-only sandbox for review jobs, an idea now tracked in #​1310.

• #​1231 by @​leoreisdias

Folder annotate opens in milliseconds on large repos

Opening a folder annotate session initialized a file watcher across the entire .git/refs tree to keep git status live in the file browser. On repos with hundreds of branches and tags that took 9 to 23 seconds before the first file selection was responsive. The watcher now targets the five specific git files that drive status display (HEAD, index, the reflog, packed-refs, and the current branch ref), bringing cold start to about 30ms on the same repos with the same live status behavior.

• #​1306 by @​backnotprop

Annotate any markdown-like file with configurable extensions

Livebook notebooks, Quarto documents, and other markdown-dialect files were rejected by annotate because the accepted extensions were hardcoded. A new config-only setting registers extra extensions to treat as markdown:

{ "markdownExtensions": [".livemd"] }

in ~/.plannotator/config.json. Listed extensions are accepted everywhere annotate accepts .md: the CLI, the folder file browser, linked-doc and wiki-link navigation, frontmatter stripping, and version history. Entries are validated hard, and dotenv-family extensions can never be registered since annotate history copies file contents. Requested by @​sgiath in #​1307.

• #​1309 by @​backnotprop

Security hardening across the supply chain

Four security-focused changes landed in this cycle:

• Pi 0.79+ required. The Pi extension now requires Pi 0.79.1 or newer and refuses older hosts with a clear message instead of running with weaker project-trust behavior. If you are on an older Pi, update Pi first. #​1291
• Continuous scanning. Semgrep CE and Trivy now run on every PR and weekly in monitor mode, with fail-closed scanner health checks and pinned, checksum-verified tooling. #​1294
• Weekly DAST. An isolated OWASP ZAP passive scan runs weekly against a disposable annotate session on an internal-only network with no credentials and blocked egress. #​1299
• Marketing site on Astro 7. plannotator.ai moved from Astro 5 to 7.1.6, clearing eight dependency advisories. #​1293

Additional Changes

• New reviewers start in Tree view. First-time code review users now land on the file tree instead of the Git status panel. Returning users keep whatever view they had. #​1292
• Quieter first run. The plan-AI, vim-mode, and analysis-layers announcement dialogs are gone, and automatic AI provider selection no longer persists anything until you explicitly choose a provider. Fewer interruptions before your first review. #​1295

Install / Update

macOS / Linux:

curl -fsSL https://plannotator.ai/install.sh | bash

Windows:

irm https://plannotator.ai/install.ps1 | iex

Claude Code Plugin: Run /plugin in Claude Code, find plannotator, and click "Update now".

OpenCode: Clear cache and restart:

rm -rf ~/.bun/install/cache/@plannotator

What's Changed

• security(pi): require Pi 0.79+ and document project trust by @​backnotprop in #​1291
• feat: default new Code Review users to Tree by @​backnotprop in #​1292
• security(marketing): migrate static site to Astro 7.1+ by @​backnotprop in #​1293
• ci(security): add Semgrep CE and Trivy monitoring by @​backnotprop in #​1294
• feat: mobile foundation and quieter first run by @​backnotprop in #​1295
• feat: mobile-safe plan and code comment composition by @​backnotprop in #​1297
• feat(ui): add mobile-safe touch and dialog primitives by @​backnotprop in #​1300
• feat(review): add compact touch review shell by @​backnotprop in #​1301
• feat(editor): mobile plan shell and navigation by @​backnotprop in #​1303
• fix(review): update Codex automatic approval flag by @​leoreisdias in #​1231
• fix: folder watcher cold-start refs scan by @​backnotprop in #​1306
• ci(security): add isolated ZAP DAST monitoring by @​backnotprop in #​1299
• feat(annotate): configurable extra markdown extensions by @​backnotprop in #​1309

Community

This release carries a lot of community fingerprints:

• @​leoreisdias fixed the Codex CLI breakage in #​1231, restoring Codex review jobs for everyone on current Codex versions.
• @​tgenov independently diagnosed the same Codex breakage in #​1302 and proposed running review jobs read-only, now tracked in #​1310.
• @​sgiath requested configurable markdown extensions for Livebook notebooks in #​1307, with a workaround-quality write-up that traced both allowlists involved.
• @​edision reported that Pi's thinking: "max" level is silently ignored in #​1304, queued for an upcoming patch.
• @​MartinNeudecker proposed direct edits alongside suggestions in code review in #​1308, and followed up with workflow details that are shaping the design.
• @​ashish921998 picked up the skill-menu screen reader accessibility issue in #​1233.

Full Changelog: backnotprop/plannotator@v0.27.2...v0.27.3

nicobailon/pi-subagents (pi-subagents)

v0.49.0

Compare Source

Added

• Run a single child with { agent, task? } when a full workflow script is not needed (#​1059).
• Adjust FleetView spacing and collapsed result height from the main window. Thanks to @​pierre-mgmt for #​1048.
• Inspect async run state with debug.run, without exposing prompts, secrets, or transcripts (#​1037).
• Let builtin role overrides keep Pi's normal tools and extensions with tools: "inherit". Thanks to @​estanexanavsem for #​1047 and @​davidarny for #​1049.
• Add simple terminal examples for FleetView, the async widget, and inline tool display. Thanks to @​czottmann for #​1050.
• Add per-tool-call wedge protection with toolTimeoutMs call → agent → config → environment precedence. Known-fast built-in tools get a five-minute default, long-running tools get attention notices without a hard default, matching toolCallId timers survive parallel tool completions, and supervisor waits (contact_supervisor, intercom, subagent_wait) remain exempt. Thanks to @​forrestbthomas for #​1077.

Changed

• Clean up active-run limits and artifact packaging code without changing behavior.

Fixed

• Trust live Herdr session roots only when the parent executor registered them for that async run.
• Let a workflow child disable the intercom bridge for one run with intercomBridge: { mode: "off" }, while normal async completion still works. Thanks to @​jaudiger for #​1072.
• Recover sibling children after a detached workflow fails (#​1066).
• Show child session transcripts in standalone Herdr inspectors when the transcript is in a trusted session folder (#​1069).
• Keep watchdog reviews, permission checks, Prompt Audit rewriting, and completion intent checks on the authenticated provider stream across the Pi 0.81 and 0.84 APIs. Thanks to @​nuzayets for #​1067.
• Mark children stopped by a parent workflow as stopped, not failed, and keep the stop reason (#​1060).
• Keep subagent artifacts and automatic mission records out of project worktrees by default, so read-only workflows leave the tree clean (#​1062).
• Make parents wait at dependency barriers after async launches, so child results are available before dependent work continues. Thanks to @​exuanbo for #​1045.
• Keep wait callers alive for intercom replies instead of reviving a detached wrapper. Thanks to @​yayamaz for #​1053.
• Keep workflow summary reports separate from child reports, and reject report path collisions before launch (#​1038).
• Accept no-edit implementation challenge passes when the writer says the current solution is already best (#​1054).
• Make the mutation guard safer for LLM intent checks, long tasks, and provider authentication. Thanks to @​MarcusNeufeldt for #​1044.
• Launch Herdr inspector panes with Node when Pi runs as a standalone executable. Thanks to @​kevinpita for #​1051.
• Sanitize async, nested, and result transcript output before showing it in terminal views. Thanks to @​riesbri for #​1046.

sinclairzx81/typebox (typebox)

v1.3.14

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.