v2.0.0

Major Changes

• 43c1fad: Remove per-command SSH confirmations so concurrent remote commands cannot leave displaced confirmation promises pending. Connected sessions now execute commands directly while retaining configured target allowlists, pinned host verification, alternate-target approval, and the one-active-command-per-session invariant.

  The confirmCommands SSH profile field is no longer accepted and must be removed from agent configuration. Remaining pi-square confirmations now share a session-scoped FIFO coordinator so SSH endpoint, CodeGraph lifecycle, and Firecrawl upload prompts cannot replace one another in Pi's single confirmation selector.

v1.0.2

Patch Changes

• 8bd2740: Deliver completed background subagent results into active parent runs without requiring a manual resume.

v1.0.1

Patch Changes

• f1308a1: Move bundled subagent definitions from resources/subagents to the package-root subagents directory while preserving agent and project overlay paths.

v1.0.0

Major Changes

• 0023437: Replace the ask tool's docked per-question widget with a focused, persistent Pi-native wizard and a versioned answer protocol.

  • Preserve selections and comments across back navigation, review multi-question calls before submission, enforce required questions, expose explicit optional-question skipping, and confirm cancellation when drafts would be discarded.
  • Present questions in a theme-driven, left-aligned form with a compact step rail, full-row focus treatment, adaptive option summaries, stable paged details, responsive command bars, a compact review checklist, and a half-width wide-terminal layout.
  • Add multiline comments, placeholders, option descriptions, bounded input validation, count-only progress updates, and complete native collapsible call/result rendering.
  • Return submitted, cancelled, and failed outcomes as self-contained JSON v1 while discarding every unsubmitted draft on cancellation.

  This is a breaking change because allowComment now defaults to false, required now defaults to true, and final model-facing content changes from Markdown to structured JSON.

• 85a694b: Replace the former statusline with a responsive enhanced footer that preserves Pi's native project, model, cumulative usage, cost, context, branch, and extension-status semantics. Add a configuration V2 footer.mode fallback for the built-in native footer, and remove the old statusline command, shortcut, git polling, and settings.

• 0319f1b: Make model-callable shell tools platform-exclusive and give PowerShell Pi-native streaming output.

  • Expose highlighted native bash calls only on non-Windows hosts and expose PowerShell only on Windows, with hard top-level and subagent enforcement plus explicit unavailable diagnostics.
  • Add the portable subagent shell capability, resolving it to bash or pwsh at runtime and migrating former dual-shell and default built-in persisted configurations.
  • Stream merged PowerShell output at approximately 100 ms intervals, retain the same bounded tail and full-output log behavior as Pi's bash tool, and add collapsible native rendering with elapsed and runtime metadata.
  • Preserve exact command text while adding display-only bash and PowerShell syntax highlighting, multiline layout, terminal-control sanitization, and responsive rendering coverage.

  This is a breaking change because pwsh is no longer registered off Windows, bash is no longer model-callable on Windows, subagent shell declarations use tools: [shell], and PowerShell results replace separated stdout/stderr plus the success footer with arrival-ordered bash-style output and tail truncation.

• 9f97f5f: Rename the scheme_eval tool to scheme and add Pi-native streaming presentation.

  • Stream captured stdout and cleaned stderr into a Bash-style collapsible result with elapsed time, tail previews, complete expanded output, and explicit output-limit status.
  • Show the full submitted source and effective sandbox access in the call display, with a warning treatment for fullaccess.
  • Propagate cancellation into the WASM runner, terminate its process tree on cancellation or timeout, and classify nonzero exits, timeouts, cancellations, and startup failures as tool errors.
  • Preserve the existing final stdout/stderr/footer text format and 512 KiB shared output budget while adding truncation and cancellation details.

  Custom subagent configurations must replace scheme_eval with scheme in extensionTools; no compatibility alias is registered.

• 21491ba: Align bundled skill metadata with explicit invocation policy, remove per-skill tool allowlists in favor of the agent's governed tool set, and update skill delegation references for the new Oracle and Generalist subagent roles.

• 1847ea8: Reject concurrent subagent resume attempts with the structured SUBAGENT_ACTIVE tool error, base Manager resume availability on live leases, and share safe specialized sg and GitHub activity summaries across all subagent TUI surfaces.

• e08b13a: Replace the bundled subagent catalog with inherited-model Explorer, Oracle, Crawler, Librarian, and Generalist profiles. Add an explicit no-built-in-tools selection, make authenticated GitHub research an opt-in child capability used only by the bundled Librarian, and preserve deterministic resume with frozen inherited runtime values.

• d5fc6dc: Redesign subagent configuration, prompt authority, persistence, and interactive management around a breaking V2 contract.

  • Require promptVersion: 2 definitions with source-aware package, user, and project field overlays.
  • Replace YAML system and prompt with layered policy, replayed instructions, and replayed output, plus optional parent-system inheritance.
  • Treat injected parent history as reference-only context and preserve deterministic prompt snapshots with hash/provenance manifests.
  • Upgrade persisted run details to v3 with parent-session ownership; legacy v2 artifacts are ignored without automatic deletion.
  • Add a non-overlay, responsive Pi-native /subagent manager with integrated current-session cancellation, history resume/fresh/delete actions, task editors, definition CRUD, diff review, and confirmations.
  • Add parameterized /subagent <request> handoff as an ordered, collapsible Config Guide custom message followed by the unchanged native user request.
  • Render asynchronous background completion follow-ups inside Pi's native success/error tool shell.
  • Show active background summaries in a bounded second statusline row without exposing tool result payloads.
  • Introduce a real cancelling transition while retaining aborted child sessions for resume.

• 1f56352: Replace the session todo's binary checklist with a strict three-state workflow and a responsive Pi-native presentation.

  • Add one-current-item pending, in_progress, and completed transitions with automatic advancement, explicit pause/start actions, atomic validation, and idempotent persistence.
  • Replace the unbounded full-width widget with a read-only, theme-driven, half-width wide-terminal layout and a height-bounded viewport around the current task.
  • Return self-contained JSON v1 snapshots, add complete native collapsible call/result renderers, and migrate existing pi-square.todo.v1 session state to v2 snapshots.
  • Bound lists and strings, reject duplicate or unsafe identifiers and terminal controls, and expand contract, lifecycle, migration, theme, width, height, and pressure coverage.

  This is a breaking change because create, replace, and status are removed, task inputs use status instead of completed, new start and pause transitions define the current task, and model-facing Markdown results become structured JSON v1.

Minor Changes

• 6b39ee2: Add Pi-native collapsible presentation for the Context7 libs and docs tools.

  • Calls emphasize the library identity and query while showing only explicitly supplied options.
  • Collapsed results summarize candidates, snippets, tokens, redirects, omissions, and errors without content previews.
  • Expanded library results present complete ranked metadata and safe sources; expanded documentation presents all selected rules, code, and prose with per-snippet token counts.
  • Display-only Markdown strips terminal controls and neutralizes provider-authored links outside code while preserving validated HTTP(S) source links and unchanged model-facing content.

• 8760fe2: Add a parent-only parse tool that confirms and uploads explicitly selected workspace PDF pages to Firecrawl, with local page extraction, strict safety bounds, credential redaction, and bounded Markdown results.

• 1109885: Add four authenticated, parent-only GitHub.com research tools with Pi-native collapsible presentation.

  • Search repositories and default-branch code with bounded snippets, pagination, completeness, and rate-limit metadata.
  • Read UTF-8 files or repository READMEs with line pagination and explicit binary/size handling.
  • Browse bounded repository trees with path, depth, output, and request budgets.
  • Inspect commits with metadata, changed-file pagination, and bounded available patches.
  • Resolve GITHUB_TOKEN or auth.json github.key without exposing credentials or sending them across origins.

• ac78118: Add a bounded local codegraph semantic code-intelligence tool with a provider-compatible object schema, confirmed index lifecycle operations, automatic incremental synchronization, native presentation, and read-only subagent access.

• 1e86ee1: Add a local pdf_search tool that extracts embedded PDF text with PDF.js, ranks exact and conservative fuzzy page matches with bounded context, and reuses changed-file-aware session memory without OCR, network access, or disk indexing.

• 26d9e5e: Add Pi-native collapsible presentation for the bundled rg and fd tools.

  • Calls show every explicitly supplied search parameter while omitting unspecified defaults.
  • Collapsed results show concise result, paging, truncation, and error status without previews.
  • Expanded rg output groups files with aligned gutters, exact match highlighting, subdued context, and continuation notices; expanded fd output presents a compact path hierarchy.
  • Valid local text paths become capability-aware links, while byte and network paths remain inert.
  • Display-only metadata preserves existing CLI arguments, model-facing content, pagination, and excerpt budgets, with safe legacy-session fallback.

• 7aade1a: Add a parent-only persistent SSH shell tool with agent-configured allowlisted targets, pinned host fingerprints, SSH-agent and private-key authentication, bounded multi-session lifecycle management, command confirma...