v0.3.48

v0.3.48 - 2026-09-06

Installation and source reliability

• Moved the canonical GitHub repository to advaitpaliwal/feynman. Native installers, skills downloads, package source/issue metadata, and public documentation now use the new owner directly.
• The canonical npm package is now @advaitpaliwal/feynman. Migrate old npm installs with npm uninstall -g @companion-ai/feynman, then npm install -g @advaitpaliwal/feynman. Future npm updates use npm install -g @advaitpaliwal/feynman@latest. The command remains feynman, and native install commands are unchanged.
• Historical release attestations retain their original source identity; new releases are verified against the new repository owner without relaxing provenance checks.
• Updated affected URL/query parsing dependencies in the CLI and bundled research runtime, plus the website's browser-target resolver, to patched versions.

v0.3.46

Warning

Do not install v0.3.46. This release was published from superseded commit 6bbb6e8217967caed3fc03c95a40b1c1bdfdd18c after its workflow cancellation was retried. It contains a pi-otel shutdown failure, exposes explicit proxy/provider credentials in child-process arguments, and ships stale npm runtime metadata. The repaired 0.3.47 hotfix is in progress.

v0.3.46 - 2026-08-26

Research continuity

• Resuming a valid Pi session whose JSONL file lacks a trailing newline now repairs the append boundary before new research messages are persisted, preventing the next record from being fused into the previous one.
• /btw and /btw:summarize now copy extension-registered providers, native providers, and temporary runtime API keys into their isolated child ModelRuntime. Side research can use the same custom provider that is already active in the main session.

Web research

• Updated pi-web-access to 0.25.0. Researchers can route search and fetch calls through an explicit HTTP(S) proxy, retrieve bounded GitHub issue and pull-request documents with comments and review threads, use Defuddle when ordinary HTML extraction is insufficient, and select Chromium browser/profile cookies explicitly.
• Gemini generate-content paths can use Google Application Default Credentials for Vertex AI, and Kimi Code Plan accounts can be selected explicitly for web search. Stored-content passage lookup also tolerates bridge defaults when findText is supplied.

Observability

• Generic HTTP OTLP collectors configured through one shared endpoint now receive traces, metrics, and logs at their signal-specific /v1/* paths, including collectors on default HTTP and HTTPS ports. Explicit per-signal endpoints remain exact and retain their own headers and protocols; Feynman's PostHog AI trace endpoint is unchanged.
• Existing 0.3.45 pi-otel package roots migrate through the reviewed legacy digest. Embedded package setup and runtime-workspace preparation preflight every discovered pi-btw and pi-otel root before applying their combined patch plan, so an unsupported later root cannot leave earlier research packages partially updated.

Validation

• Added exact source, published-upgrade, patch-plan transaction, package-tree, runtime-archive, installed-runtime OTLP behavior, proxy, GitHub document, Gemini ADC, Kimi credential, BTW provider, and unterminated-session regressions.

v0.3.45

v0.3.45 - 2026-08-26

Release reliability

• Windows publication smoke tests now use the supported .NET ZIP extractor instead of the pathologically slow PowerShell Expand-Archive cmdlet, so large native research bundles complete within the release job budget.
• Source-checkout runtime archive rebuilds now use the same fifteen-minute process budget as exact locked runtime restores, avoiding premature timeouts on slow clean environments while retaining the existing transactional exact-lock checks.

Validation

• Added workflow and runtime regressions that bind Windows native extraction and source-archive rebuilding to their supported timeout contracts.

v0.3.44

v0.3.44 - 2026-08-26

Research continuity

• Stopping a tool run now ends the active Pi loop before queued steering or follow-up research input can be drained into an already-aborted model call. The queued input remains available for the next turn instead of producing a second spurious cancellation.

Compaction integrity

• Small-context local and proxy models now bound compaction reserve and retained-history budgets to the model's actual context window, preventing empty or short sessions from compacting continuously.
• Empty or structurally unusable summaries no longer replace research history. OpenAI Responses providers such as Grok also omit tool_choice when a compaction request has no tools.

Model reliability

• OpenAI-compatible structured reasoning deltas are accumulated without reparsing and reserializing the complete history for every streamed detail, preventing long reasoning streams from blocking the event loop while preserving same-model replay.
• OpenAI models reached through Amazon Bedrock now receive images returned by research tools as sibling user-image blocks instead of unsupported images nested inside toolResult.content. Text stays attached to its tool result, image-only results retain an explicit placeholder, and Anthropic Bedrock models keep their native nested-image shape.

Runtime reliability

• Non-interactive Pi extension handler work now has a cumulative 30-second budget. A handler that never settles reports its extension and event, expires its local context, safely absorbs late settlement, and lets later handlers and the research session continue.
• Timed-out model-tool and user-shell policy handlers still allow later policy handlers to run, then fail closed. User-shell interception returns an explicit non-executing result, so both TUI and RPC paths do not run the command after a policy timeout.
• Project trust, OAuth, and interactive dialogs preserve their supported behavior: documented UI prompts pause the remaining handler budget instead of resetting it, parent cancellation settles even a non-cooperative dialog, and OAuth callbacks remain outside the bounded event runner.

Document research

• Updated the bundled LiteParse runtime to 2.14.0. OCR rasterization now runs in bounded worker-sized rounds, and dense PDF layout deduplication avoids quadratic work. Existing parse, search, and screenshot interfaces are unchanged.

Validation

• Added executable abort-queue, Responses payload, structured-reasoning scale, small-context compaction, and summary-usability regressions across the maintained Pi runtime.
• Added executable extension-handler deadline coverage for downstream progress, timeout reporting, expired contexts, late rejection handling, fail-closed TUI/RPC user-shell interception, cumulative dialog timing, parent cancellation, project trust, and tool permission dialogs.
• Added exact source, root/nested runtime, package-tree, and runtime-archive verifier coverage for Bedrock tool-result images across bare, regional, and global OpenAI model IDs, with an Anthropic control.
• Re-ran installed document parsing, page-count, search, screenshot, package-artifact, runtime, and clean-consumer verification against LiteParse 2.14.0.

v0.3.43

v0.3.43 - 2026-08-25

Installation reliability

• Upgrading from an older Feynman installation no longer crashes while migrating a legacy pi-subagents package's agent diagnostics source. Fresh native-bundle installs and updates now tolerate the older management-source layout while preserving malformed-agent diagnostics.

Validation

• Added an executable source regression for the pi-subagents@0.37.2 management layout that previously raised missing management list diagnostics during --version.

v0.3.42

v0.3.42 - 2026-08-25

Reasoning integrity

• Same-model research turns now preserve structured reasoning metadata through session persistence and model replay instead of flattening or dropping it.
• When research history crosses a provider boundary, Feynman strips provider-private reasoning fields before forwarding it, preventing incompatible metadata from leaking into the next model's context.

Runtime reliability

• Runtime preparation now repairs stale Pi AgentCore copies to the current maintained patch before verification, so restored and installed research runtimes cannot retain an older patch shape.

Validation

• Reasoning and AgentCore patch validators now fail closed on missing, mixed, or stale transformations across source, bundled, restored, installed, and package-artifact copies.

v0.3.41

v0.3.41 - 2026-08-25

Research continuity

• Custom research messages queued while a Pi turn is active now wait until the turn settles before they are persisted and emitted. Tool results remain adjacent to their calls, and triggerTurn: false notifications no longer corrupt resumable session history.
• Extension-supplied research prompts now preserve interleaved text and image order through idle, steering, and follow-up delivery, so captions and questions stay attached to the intended figure.
• Large rendered tool diffs no longer hit V8's argument-count limit. Feynman's Pi runtime also resolves fd and rg releases through GitHub's public redirect without spending anonymous API quota.

Research images

• JPEG conversion and provider-bound resizing now continue past XMP APP1 metadata to apply a later EXIF orientation block. Figures, scans, photographs, and microscopy images no longer remain sideways when XMP precedes EXIF.

Model reliability

• OpenAI-compatible Gemini 3 streams now preserve the first Google thought signature and encrypted reasoning details together across persisted tool-call replay.
• Foreign OpenAI-compatible tool-call IDs now retain the full hash when they must be sanitized and bounded, reducing cross-provider replay collisions.
• OpenRouter's structured in_flight_budget_exhausted 402 responses can use their Retry-After budget without replacing ordinary 429 and server-error retries or overriding an explicit provider no-retry response.
• OpenAI-compatible compaction no longer sends tool_choice: "none" when no tools are present, avoiding requests that strict gateways reject before summary generation.

Runtime reliability

• An opt-in FEYNMAN_PI_STREAM_EVENT_IDLE_TIMEOUT_MS watchdog can terminate a provider stream that stops producing Pi events, even when the provider's iterator cleanup never settles. It remains disabled by default for local and private models that legitimately spend time in silent prefills.

Validation

• Ported the focused Pi fixes from commits 240eb29c (following contributor precursor 7b1dcfd), 8c16a558, 6d05adb, 94f6e7c, d8def812, fe37e9f9, 27115254, and 86c42324, plus the structured OpenRouter retry correction, across source, bundled, restored, installed, and package-artifact copies. Added fail-closed source-map checks, restored-runtime coverage, provider and image regressions, and clean installed-package verification.

v0.3.40

v0.3.40 - 2026-08-24

Research continuity

• Image-only steering and follow-up messages are now removed from Pi's pending queue state when they are delivered. Research sessions that add screenshots, paper figures, or other image context no longer remain falsely marked as waiting on input after the model receives the image.

Validation

• Reproduced the defect on the bundled Pi 0.84.2: the agent queue was empty after image delivery while pendingMessageCount remained 1 and no clearing queue_update event was emitted. Ported the focused fix from commit b67b3db across source, bundled, restored, installed, and package-artifact copies, with executable steering and follow-up regressions plus fail-closed patch verification.

v0.3.39

v0.3.39 - 2026-08-24

Research continuity

• Pi no longer persists a partial compaction, split-turn, or branch summary when summary generation reaches its output-token limit. The incomplete checkpoint now fails explicitly so long research sessions retain the last complete context instead of silently replacing it with truncated history.

Reliability

• Updated posthog-node to 5.51.1. On Node 24.16 and later, each telemetry flush now sends gzip bytes directly instead of retaining a native BlobReader for the life of the process.

Validation

• Backported Pi commit 97fa14e across source, bundled, restored, installed, and package-artifact copies, with executable history, split-turn, and branch-summary regressions. Disabled stale upstream source-map directives in the forward-patched files so diagnostics cannot resolve the new guards to unrelated pre-patch TypeScript lines. Matched the PostHog fix to upstream commit 3593c43 and added a transport regression that requires a Uint8Array gzip body instead of a Blob.

v0.3.38

v0.3.38 - 2026-08-24

Research artifacts

• Congress.gov and GovInfo bill parsing now excludes paired white-on-white GPO operator and print-tracking stamps from parsed text, JSON text items, and document search. Removal requires matching metadata, geometry, and exact rendered-white regions, so visible bill text and visible text that merely resembles a stamp remain available.

Research runtime

• Pi's edit tool now preserves the original CRLF, LF, and CR terminators outside each replacement. Exact and fuzzy edits no longer create unrelated full-file diffs in mixed-line-ending research code or data.

Validation

• Reproduced the hidden-stamp path with official 2008 and 2026 GPO bill PDFs and verified consistent parsed artifacts and searches with visible body-text, same-geometry black, white-on-dark, and white-on-RGB-245 controls.
• Added exact, fuzzy, multiline, bare-CR, restored-runtime, package-artifact, and clean installed-package regressions for the maintained Pi and pi-docparser patches.