pi-fabric v0.131.0

Highlights

• Add directional participant overflow indicators, with ↑ N more on the Main row and ↓ N more below the list where space permits. Compact layouts preserve session identity, keyboard hints and mouse targeting.
• Add exact model selection, opt-in queued agent spawning, named child skill selection, and extension-provided model API support. Exact matching is not a final-dispatch security boundary for later hooks or extension-made calls.
• Add durable worker session files, an embedded durable-host entry and safer worker recovery and completion handling.
• Improve actor target resolution, template requirements, worktree rollback diagnostics, audit fidelity, decision rendering, configuration reloads and session-label lifecycle handling.
• Prove the actor name decision with gdp-wired. The generated policy is used by both actor creation paths; its proof covers the supplied snapshot, not distributed uniqueness or filesystem effects.

Compatibility notes

• A visible stopped actor now blocks creation of a same-name actor. To reuse the name, explicitly remove the stopped actor first; removal deletes its retained session and history. This replaces implicit removal during creation.
• The durable replay engine identity includes the package version. Journals written under another engine identity are refused; they are not silently replayed.
• If a worktree rollback fails, the error reports the repository, worktree and branch for manual cleanup.

Verification

Linux and Windows CI passed on the integration head. The release candidate passed typecheck, targeted replay and UI tests, and a fresh build. gdp-wired generation and proof reproduction passed for 28 kernels and 78 broken variants, with 320 verified-kernel and actor tests passing.

Thanks to Chris, HyphaDev and Nyarlathoteppppp for the reviewed contributions.

pi-fabric v0.130.0

Runtime reliability and safety

• Optional fsync durability for mesh writes, including async atomic writes and pre-existing directory barriers.
• Stronger short-lock exclusion: a displaced live owner remains an acquisition barrier, including when a stale reaper cannot restore it.
• Departed root-session discovery via agents.departed.
• Opt-in extension action-policy hooks with cancellation-safe approval handling and fail-closed malformed decisions. Streaming speculation is disabled while hooks are enabled so providers cannot run ahead of policy checks.
• Opt-in durable-worker recovery with host-owned launch authority, safe startup-loss settlement and correct external-stop handling. Recovery receipts also pin the separate recursive fabric_exec permission, preventing revoked authority from being restored.
• Child tool restrictions preserved through resident dispatch and native wildcard/session selection; clearer denied-tool diagnostics.
• Correct tool-only termination detection and name-based durable tool rebinding.
• Bounded complete progress updates, including large/escaped phase labels and preserved deadline metadata.

UI

• Main can be hovered again immediately after closing a participant conversation; no keyboard input is needed.
• Session-label timers stop when their session is replaced or invalidated.

Includes the contributions from PRs #316, #317, #318, #319, #320, #324 and #350–#355, with follow-up fixes and regression coverage. Existing defaults remain unchanged for opt-in features.

Verification

Linux and Windows CI passed before the integration merge. The release commit passed the Test, Entropy and trusted Publish workflows, including the proof, typecheck, build and package checks. npm lists 0.130.0 as latest; its tarball integrity, all 12 public exports and the verified-kernel manifest were checked. All 230 compiled JavaScript files agree with the fresh local build; one differs only in dependency-path source comments.

Operational notes

Restart or reload Pi to use the updated runtime. Recovery receipts require a host-controlled directory and are not same-UID filesystem isolation. Existing unsupported or legacy recovery records fail closed; a hard-killed outer worker can temporarily leave its detached child holding the journal lease. Fsync guarantees remain platform-dependent as documented. The stronger short-lock exclusion guarantee requires upgrading all writers sharing the store; old binaries retain their former race and stale-claim behavior.

v0.127.1

Managed-host follow-up

• Preserve field descriptions in native discovery previews, including nested field guidance.
• Budget rendered declarations instead of raw schema JSON. Shorten or omit descriptions before structural cuts, keep short enums/unions beyond 12 members, and visibly mark any remaining loss with the exact-schema discovery path.
• Emit managed execution guidance and host policy once per model request; keep tool metadata concise and stable across turns.
• Bind public declarations to the embedding host's peer SDK, preventing private worker SDK types from breaking older supported hosts. Build checks reject this regression.

The managed-host factory contract stays v2; provider registration stays v1. No configuration changes are required.

Verification

• Targeted upstream schema, dispatch, guidance, startup, managed-install and artifact-guard tests passed.
• Typecheck, fresh build and lazy-graph checks passed.
• The packed artifact type-checks against Pi 1.0.2 with a separate private worker SDK.
• Downstream reported regressions and full host typecheck passed without source patches. The measured first request shrank from 16,071 to 13,902 characters, with each checked guidance phrase present once.

See the managed-host migration guide.

pi-fabric v0.127.0

Managed-host contract v2

Embedded hosts can now run without downstream patches. Provider registration remains v1, and existing { providers } factory calls continue to work.

Added

• Explicit managedHost.foreground tools alongside fabric_exec.
• Provider-accurate guidance, managedHost.guidance, and an optional host skillReader.
• executor.maxCpuSliceMs, with a 1000 ms default for managed hosts.
• managedHost.compaction: "fabric" | "pi" and correct host-owned settled lifecycle behavior.

Fixed

• Script-store transactions remain valid across non-store custom receipts, without accepting branch changes or competing writers.
• Bounded schema declarations visibly mark omissions; exact raw schemas remain discoverable.
• Nested TypeBox validation errors retain field paths.
• Exact native-tool identities outrank descriptive mentions, within the requested namespace.
• MCP-only native discovery and disabled Jev in managed mode.

Migration and validation

• Update FABRIC_MANAGED_HOST_VERSION assertions to 2.
• See the complete migration guide for a hunk-by-hunk replacement map and compatibility notes.
• Targeted regressions, typecheck, build, and lazy-graph checks passed. A separate compiled-bundle smoke test passed with Pi packages pinned to 1.0.2.

pi-fabric v0.1.0

First public release of Pi Fabric, a programmable tool and agent runtime for Pi.

Highlights

• Type-checked TypeScript code mode over Pi core tools and captured extension tools
• Dynamic MCP discovery and invocation through mcporter
• Parallel workflows, guarded subagents, persistent actors, councils, and bounded recursive queries
• Durable mesh topics and compare-and-swap shared state
• QuickJS isolation, approval policies, timeouts, concurrency limits, and shared cost budgets
• Native activity widget, dashboard, settings, and structured nested tool previews
• Eight bundled workflow, supervision, council, swarm, ambient, and recursion skills

Install

pi install npm:pi-fabric

Requires Node.js 24+ and Pi 0.80.6+.