Skip to content

build: bump the dev-dependencies group with 12 updates - #161

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-0657041026
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-0657041026

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 12 updates:

Package From To
@deepseek-ai/cordis 4.0.6-alpha.1 4.1.0
@deepseek-ai/dsh-client-store 0.2.2-alpha.2 0.2.2-rc.1
@deepseek-ai/dsh-client-ui-primitives 0.2.2-alpha.2 0.2.2-rc.1
@deepseek-ai/dsh-llm-pi-ai 0.2.2-alpha.2 0.2.2-rc.1
@deepseek-ai/dsh-typert-protocol 0.2.2-alpha.2 0.2.2-rc.1
@earendil-works/pi-ai 1.4.0 1.5.0
@vitest/coverage-v8 5.0.5 5.1.0
es-module-lexer 2.3.2 3.0.4
jsdom 30.1.3 31.0.0
semver 7.8.5 7.8.6
ultracite 8.1.0 8.1.1
vitest 5.0.5 5.1.0

Updates @deepseek-ai/cordis from 4.0.6-alpha.1 to 4.1.0

Commits

Updates @deepseek-ai/dsh-client-store from 0.2.2-alpha.2 to 0.2.2-rc.1

Release notes

Sourced from @​deepseek-ai/dsh-client-store's releases.

v0.2.2-rc.1

中文 | English

作为 0.2.2 系列的首个候选版本,本版本汇总了自 v0.2.1-rc.5 以来的主要用户和开发者相关变更。

  • 完善手机和平板适配,优化软键盘交互、导航与窄屏布局,保持菜单和操作入口可用。 @​Stevring, @​turtle2099, @​LegGasai, @​EricMoin, @​Saafo
  • 支持将聊天文本作为引用插入输入框,并在发送后显示紧凑预览。 @​lsdsjy, @​imccyu
  • 支持将完整历史会话复制为 Markdown,包含可用的原始日志路径。 @​tianyicui
  • 工作步骤收起后保留全部助手文字回复,可切换为仅最终回答。 @​imccyu
  • 支持统一右键与键盘菜单,覆盖会话、工作区和侧边栏,并支持开发者扩展。 @​std4453
  • 文件预览支持常驻目录树和文件定位功能。 @​yudshj
  • 新增日语、西班牙语、法语、德语、俄语和巴西葡萄牙语文案与界面配置。 @​07akioni
  • 插件管理页支持展示富文本详情,并改善页面布局和导航行为。 @​turtle1999, @​turtle2099
  • 插件管理支持更新第三方插件包;热更新失败时会尝试恢复旧版本。 @​turtle1999, @​turtle2099
  • 新增实验性「subagent_oar工具」插件,可将独立任务交给本机 Codex 或 Claude CLI。 @​tianyicui
  • 新增实验性「个性化推荐」插件,按需在回答下方提供官方插件启用卡片或个性化页面创建卡片。 @​ZiyaZhang
  • 新增实验性「开发者工具 - 统计」插件,按轮次和步骤查看上下文、缓存、模型与工具耗时等统计。 @​mektpoy
  • 新增实验性「变更请求与工作树」:在独立 Git 工作树中运行会话,通过可搜索文件树和逐文件导航查看本地及 PR 差异,将选中代码和评论交给 Agent,并跟踪检查与评审状态。 @​LegGasai, @​tianyicui

体验优化

  • 同名工作区在选择器中显示最短区分路径后缀,窄屏优先保留后缀。 @​turtle2099
  • 会话列表支持插件图标,并改善键盘与触屏操作。 @​LegGasai
  • 侧栏会话悬浮卡显示工作目录,便于区分未分组或同名会话。 @​turtle2099
  • 优化侧栏空间布局,改善响应区域,平滑搜索框展开与收起。 @​Yifffan
  • 侧栏搜索支持不区分大小写的会话 ID 子串匹配。 @​turtle2099
  • 悬浮侧栏面板拖过屏幕边缘时有阻力,松手后弹回可见区域;窗口缩小时保持控件可达。 @​yudshj
  • 支持中键关闭右侧栏标签,关闭后台标签不改变当前选中项,并保留不可关闭的起始页。 @​Kingwl
  • 消息在宿主确认接收后才显示并清空草稿;发送期间输入框只读,发送失败时保留草稿、引用和附件。 @​LegGasai
  • 图片上传方式调整为进入输入框后立即上传,发送消息时复用已上传的图片。默认单张图片上限提高到 50 MiB。 @​LegGasai
  • 已回答的问题批次以消息气泡显示,原生与 PTC 调用的回答在过程折叠后仍可回看。 @​Kaige-Gao
  • 运行状态位于当前工作轮次尾部、待处理插话之前,方便区分运行中和排队中的消息,并改善界面布局抖动问题。 @​imccyu
  • 改善工作步骤展开/收起和底部输入框的布局稳定性,减少正文、滚动与输入交互时的跳动,并保持运行状态可见。 @​imccyu
  • 输入框统计读数被截断时,可通过提示气泡查看完整数值;会话统计也显示轮次与步骤数。 @​turtle2099
  • 点击聊天中的文件行号链接后,代码和文本预览以短暂高亮标出目标行并淡出。 @​turtle2099
  • 支持拖动平移超出视口的图片,并通过应用内拖放或桌面原生拖放交付原始文件。 @​std4453
  • Trajectory 结果页新增实时工具返回值的原始 JSON 查看,并与渲染结果上下展示。 @​kermanx
  • Trajectory 支持独立折叠子调用,保留父调用和摘要;搜索或跨视图定位时可展开对应子调用。 @​kermanx
  • 模型选择器默认勾选已配置模型,可一次添加或移除候选并保留自定义值;筛选后的全选只作用于可见候选。 @​turtle2099
  • 对通过 pi-ai 接入且不支持在对话中追加系统消息的模型,后续系统消息会在原位置作为提醒提供,不会移到最初的提示词中。 @​Tuyixiang
  • 支持在 DeepSeek 与 pi-ai 提供商内拖动或用方向键排序模型,保存后保留顺序及完整模型参数。 @​Magolor
  • 自动化任务页支持确认后一次清除全部已结束任务,保留进行中的任务。 @​Chinesezjc
  • Search 功能优先向模型提供 Search API 长摘要,默认每来源最多 800 字符;搜索卡片仍展示短摘录。 @​yudshj
  • Auto 自动审核支持在连续工具调用之间更好地复用历史上下文缓存,减少重复处理。 @​turtle2099
  • 后台任务完成通知直接携带小体积输出,并减少已读取结果和子代理收尾消息的重复通知。 @​turtle1999
  • 子代理等待指引减少 sleep 和重复轮询:只有结果尚未返回时,结束当前轮次等待完成通知。 @​Chinesezjc
  • 加快带固定目录前缀的文件查找,跳过无关目录,同时保持结果与排序规则不变。 @​kermanx
  • Word 常规编辑在保存并核对内容与格式后即可交付,减少不必要的 ZIP、XML 与元数据检查。 @​tianyicui

... (truncated)

Commits
  • 2f97f60 release(dsh): 0.2.2-rc.1
  • 1c78d47 release(dsh): 0.2.2-alpha.3
  • 135423b fix(client): default static client bundles to production mode
  • See full diff in compare view

Updates @deepseek-ai/dsh-client-ui-primitives from 0.2.2-alpha.2 to 0.2.2-rc.1

Release notes

Sourced from @​deepseek-ai/dsh-client-ui-primitives's releases.

v0.2.2-rc.1

中文 | English

作为 0.2.2 系列的首个候选版本,本版本汇总了自 v0.2.1-rc.5 以来的主要用户和开发者相关变更。

  • 完善手机和平板适配,优化软键盘交互、导航与窄屏布局,保持菜单和操作入口可用。 @​Stevring, @​turtle2099, @​LegGasai, @​EricMoin, @​Saafo
  • 支持将聊天文本作为引用插入输入框,并在发送后显示紧凑预览。 @​lsdsjy, @​imccyu
  • 支持将完整历史会话复制为 Markdown,包含可用的原始日志路径。 @​tianyicui
  • 工作步骤收起后保留全部助手文字回复,可切换为仅最终回答。 @​imccyu
  • 支持统一右键与键盘菜单,覆盖会话、工作区和侧边栏,并支持开发者扩展。 @​std4453
  • 文件预览支持常驻目录树和文件定位功能。 @​yudshj
  • 新增日语、西班牙语、法语、德语、俄语和巴西葡萄牙语文案与界面配置。 @​07akioni
  • 插件管理页支持展示富文本详情,并改善页面布局和导航行为。 @​turtle1999, @​turtle2099
  • 插件管理支持更新第三方插件包;热更新失败时会尝试恢复旧版本。 @​turtle1999, @​turtle2099
  • 新增实验性「subagent_oar工具」插件,可将独立任务交给本机 Codex 或 Claude CLI。 @​tianyicui
  • 新增实验性「个性化推荐」插件,按需在回答下方提供官方插件启用卡片或个性化页面创建卡片。 @​ZiyaZhang
  • 新增实验性「开发者工具 - 统计」插件,按轮次和步骤查看上下文、缓存、模型与工具耗时等统计。 @​mektpoy
  • 新增实验性「变更请求与工作树」:在独立 Git 工作树中运行会话,通过可搜索文件树和逐文件导航查看本地及 PR 差异,将选中代码和评论交给 Agent,并跟踪检查与评审状态。 @​LegGasai, @​tianyicui

体验优化

  • 同名工作区在选择器中显示最短区分路径后缀,窄屏优先保留后缀。 @​turtle2099
  • 会话列表支持插件图标,并改善键盘与触屏操作。 @​LegGasai
  • 侧栏会话悬浮卡显示工作目录,便于区分未分组或同名会话。 @​turtle2099
  • 优化侧栏空间布局,改善响应区域,平滑搜索框展开与收起。 @​Yifffan
  • 侧栏搜索支持不区分大小写的会话 ID 子串匹配。 @​turtle2099
  • 悬浮侧栏面板拖过屏幕边缘时有阻力,松手后弹回可见区域;窗口缩小时保持控件可达。 @​yudshj
  • 支持中键关闭右侧栏标签,关闭后台标签不改变当前选中项,并保留不可关闭的起始页。 @​Kingwl
  • 消息在宿主确认接收后才显示并清空草稿;发送期间输入框只读,发送失败时保留草稿、引用和附件。 @​LegGasai
  • 图片上传方式调整为进入输入框后立即上传,发送消息时复用已上传的图片。默认单张图片上限提高到 50 MiB。 @​LegGasai
  • 已回答的问题批次以消息气泡显示,原生与 PTC 调用的回答在过程折叠后仍可回看。 @​Kaige-Gao
  • 运行状态位于当前工作轮次尾部、待处理插话之前,方便区分运行中和排队中的消息,并改善界面布局抖动问题。 @​imccyu
  • 改善工作步骤展开/收起和底部输入框的布局稳定性,减少正文、滚动与输入交互时的跳动,并保持运行状态可见。 @​imccyu
  • 输入框统计读数被截断时,可通过提示气泡查看完整数值;会话统计也显示轮次与步骤数。 @​turtle2099
  • 点击聊天中的文件行号链接后,代码和文本预览以短暂高亮标出目标行并淡出。 @​turtle2099
  • 支持拖动平移超出视口的图片,并通过应用内拖放或桌面原生拖放交付原始文件。 @​std4453
  • Trajectory 结果页新增实时工具返回值的原始 JSON 查看,并与渲染结果上下展示。 @​kermanx
  • Trajectory 支持独立折叠子调用,保留父调用和摘要;搜索或跨视图定位时可展开对应子调用。 @​kermanx
  • 模型选择器默认勾选已配置模型,可一次添加或移除候选并保留自定义值;筛选后的全选只作用于可见候选。 @​turtle2099
  • 对通过 pi-ai 接入且不支持在对话中追加系统消息的模型,后续系统消息会在原位置作为提醒提供,不会移到最初的提示词中。 @​Tuyixiang
  • 支持在 DeepSeek 与 pi-ai 提供商内拖动或用方向键排序模型,保存后保留顺序及完整模型参数。 @​Magolor
  • 自动化任务页支持确认后一次清除全部已结束任务,保留进行中的任务。 @​Chinesezjc
  • Search 功能优先向模型提供 Search API 长摘要,默认每来源最多 800 字符;搜索卡片仍展示短摘录。 @​yudshj
  • Auto 自动审核支持在连续工具调用之间更好地复用历史上下文缓存,减少重复处理。 @​turtle2099
  • 后台任务完成通知直接携带小体积输出,并减少已读取结果和子代理收尾消息的重复通知。 @​turtle1999
  • 子代理等待指引减少 sleep 和重复轮询:只有结果尚未返回时,结束当前轮次等待完成通知。 @​Chinesezjc
  • 加快带固定目录前缀的文件查找,跳过无关目录,同时保持结果与排序规则不变。 @​kermanx
  • Word 常规编辑在保存并核对内容与格式后即可交付,减少不必要的 ZIP、XML 与元数据检查。 @​tianyicui

... (truncated)

Commits
  • 2f97f60 release(dsh): 0.2.2-rc.1
  • 1c78d47 release(dsh): 0.2.2-alpha.3
  • 1d9c0ab revert(markdown): remove PR #4484 display-dollar parser
  • 5f01833 fix(client): align floating panels with the visual viewport (#6666)
  • 341ea6e feat(schedule): integrate standalone tasks with the existing WebUI (#6189)
  • 34411fd Merge master into feat/extensible-context-menus
  • 2b6fedd Merge pull request #7056 from deepseek-harness/xtr/file-link-line-suffix
  • a5f1d4a refactor(client): bind context menus at their Slot consumers
  • 49e9d42 refactor(context-menu): inject shared trigger bindings through slots
  • c89be0a refactor: extract context menu utilities and merge master
  • Additional commits viewable in compare view

Updates @deepseek-ai/dsh-llm-pi-ai from 0.2.2-alpha.2 to 0.2.2-rc.1

Release notes

Sourced from @​deepseek-ai/dsh-llm-pi-ai's releases.

v0.2.2-rc.1

中文 | English

作为 0.2.2 系列的首个候选版本,本版本汇总了自 v0.2.1-rc.5 以来的主要用户和开发者相关变更。

  • 完善手机和平板适配,优化软键盘交互、导航与窄屏布局,保持菜单和操作入口可用。 @​Stevring, @​turtle2099, @​LegGasai, @​EricMoin, @​Saafo
  • 支持将聊天文本作为引用插入输入框,并在发送后显示紧凑预览。 @​lsdsjy, @​imccyu
  • 支持将完整历史会话复制为 Markdown,包含可用的原始日志路径。 @​tianyicui
  • 工作步骤收起后保留全部助手文字回复,可切换为仅最终回答。 @​imccyu
  • 支持统一右键与键盘菜单,覆盖会话、工作区和侧边栏,并支持开发者扩展。 @​std4453
  • 文件预览支持常驻目录树和文件定位功能。 @​yudshj
  • 新增日语、西班牙语、法语、德语、俄语和巴西葡萄牙语文案与界面配置。 @​07akioni
  • 插件管理页支持展示富文本详情,并改善页面布局和导航行为。 @​turtle1999, @​turtle2099
  • 插件管理支持更新第三方插件包;热更新失败时会尝试恢复旧版本。 @​turtle1999, @​turtle2099
  • 新增实验性「subagent_oar工具」插件,可将独立任务交给本机 Codex 或 Claude CLI。 @​tianyicui
  • 新增实验性「个性化推荐」插件,按需在回答下方提供官方插件启用卡片或个性化页面创建卡片。 @​ZiyaZhang
  • 新增实验性「开发者工具 - 统计」插件,按轮次和步骤查看上下文、缓存、模型与工具耗时等统计。 @​mektpoy
  • 新增实验性「变更请求与工作树」:在独立 Git 工作树中运行会话,通过可搜索文件树和逐文件导航查看本地及 PR 差异,将选中代码和评论交给 Agent,并跟踪检查与评审状态。 @​LegGasai, @​tianyicui

体验优化

  • 同名工作区在选择器中显示最短区分路径后缀,窄屏优先保留后缀。 @​turtle2099
  • 会话列表支持插件图标,并改善键盘与触屏操作。 @​LegGasai
  • 侧栏会话悬浮卡显示工作目录,便于区分未分组或同名会话。 @​turtle2099
  • 优化侧栏空间布局,改善响应区域,平滑搜索框展开与收起。 @​Yifffan
  • 侧栏搜索支持不区分大小写的会话 ID 子串匹配。 @​turtle2099
  • 悬浮侧栏面板拖过屏幕边缘时有阻力,松手后弹回可见区域;窗口缩小时保持控件可达。 @​yudshj
  • 支持中键关闭右侧栏标签,关闭后台标签不改变当前选中项,并保留不可关闭的起始页。 @​Kingwl
  • 消息在宿主确认接收后才显示并清空草稿;发送期间输入框只读,发送失败时保留草稿、引用和附件。 @​LegGasai
  • 图片上传方式调整为进入输入框后立即上传,发送消息时复用已上传的图片。默认单张图片上限提高到 50 MiB。 @​LegGasai
  • 已回答的问题批次以消息气泡显示,原生与 PTC 调用的回答在过程折叠后仍可回看。 @​Kaige-Gao
  • 运行状态位于当前工作轮次尾部、待处理插话之前,方便区分运行中和排队中的消息,并改善界面布局抖动问题。 @​imccyu
  • 改善工作步骤展开/收起和底部输入框的布局稳定性,减少正文、滚动与输入交互时的跳动,并保持运行状态可见。 @​imccyu
  • 输入框统计读数被截断时,可通过提示气泡查看完整数值;会话统计也显示轮次与步骤数。 @​turtle2099
  • 点击聊天中的文件行号链接后,代码和文本预览以短暂高亮标出目标行并淡出。 @​turtle2099
  • 支持拖动平移超出视口的图片,并通过应用内拖放或桌面原生拖放交付原始文件。 @​std4453
  • Trajectory 结果页新增实时工具返回值的原始 JSON 查看,并与渲染结果上下展示。 @​kermanx
  • Trajectory 支持独立折叠子调用,保留父调用和摘要;搜索或跨视图定位时可展开对应子调用。 @​kermanx
  • 模型选择器默认勾选已配置模型,可一次添加或移除候选并保留自定义值;筛选后的全选只作用于可见候选。 @​turtle2099
  • 对通过 pi-ai 接入且不支持在对话中追加系统消息的模型,后续系统消息会在原位置作为提醒提供,不会移到最初的提示词中。 @​Tuyixiang
  • 支持在 DeepSeek 与 pi-ai 提供商内拖动或用方向键排序模型,保存后保留顺序及完整模型参数。 @​Magolor
  • 自动化任务页支持确认后一次清除全部已结束任务,保留进行中的任务。 @​Chinesezjc
  • Search 功能优先向模型提供 Search API 长摘要,默认每来源最多 800 字符;搜索卡片仍展示短摘录。 @​yudshj
  • Auto 自动审核支持在连续工具调用之间更好地复用历史上下文缓存,减少重复处理。 @​turtle2099
  • 后台任务完成通知直接携带小体积输出,并减少已读取结果和子代理收尾消息的重复通知。 @​turtle1999
  • 子代理等待指引减少 sleep 和重复轮询:只有结果尚未返回时,结束当前轮次等待完成通知。 @​Chinesezjc
  • 加快带固定目录前缀的文件查找,跳过无关目录,同时保持结果与排序规则不变。 @​kermanx
  • Word 常规编辑在保存并核对内容与格式后即可交付,减少不必要的 ZIP、XML 与元数据检查。 @​tianyicui

... (truncated)

Commits
  • 2f97f60 release(dsh): 0.2.2-rc.1
  • 1c78d47 release(dsh): 0.2.2-alpha.3
  • b46adf9 fix(llm-pi-ai): offload count overflow in steps and document the default
  • 1abd104 fix(llm-pi-ai): offload old images when a request exceeds the image-count bound
  • d54475a fix(llm): preserve header overrides and safe failure diagnostics
  • a05a0d0 feat(llm): allow plugins to prepare pi-ai request headers
  • 1aead80 chore(cordis): merge master into cordis-core-rc11
  • 9170c7b Merge remote-tracking branch 'origin/master' into worktree/issue-7150-investi...
  • 6fcb9b6 fix(auto-review): route review requests by their Session
  • 21e19d3 chore(cordis): merge master into cordis-core-rc11
  • See full diff in compare view

Updates @deepseek-ai/dsh-typert-protocol from 0.2.2-alpha.2 to 0.2.2-rc.1

Release notes

Sourced from @​deepseek-ai/dsh-typert-protocol's releases.

v0.2.2-rc.1

中文 | English

作为 0.2.2 系列的首个候选版本,本版本汇总了自 v0.2.1-rc.5 以来的主要用户和开发者相关变更。

  • 完善手机和平板适配,优化软键盘交互、导航与窄屏布局,保持菜单和操作入口可用。 @​Stevring, @​turtle2099, @​LegGasai, @​EricMoin, @​Saafo
  • 支持将聊天文本作为引用插入输入框,并在发送后显示紧凑预览。 @​lsdsjy, @​imccyu
  • 支持将完整历史会话复制为 Markdown,包含可用的原始日志路径。 @​tianyicui
  • 工作步骤收起后保留全部助手文字回复,可切换为仅最终回答。 @​imccyu
  • 支持统一右键与键盘菜单,覆盖会话、工作区和侧边栏,并支持开发者扩展。 @​std4453
  • 文件预览支持常驻目录树和文件定位功能。 @​yudshj
  • 新增日语、西班牙语、法语、德语、俄语和巴西葡萄牙语文案与界面配置。 @​07akioni
  • 插件管理页支持展示富文本详情,并改善页面布局和导航行为。 @​turtle1999, @​turtle2099
  • 插件管理支持更新第三方插件包;热更新失败时会尝试恢复旧版本。 @​turtle1999, @​turtle2099
  • 新增实验性「subagent_oar工具」插件,可将独立任务交给本机 Codex 或 Claude CLI。 @​tianyicui
  • 新增实验性「个性化推荐」插件,按需在回答下方提供官方插件启用卡片或个性化页面创建卡片。 @​ZiyaZhang
  • 新增实验性「开发者工具 - 统计」插件,按轮次和步骤查看上下文、缓存、模型与工具耗时等统计。 @​mektpoy
  • 新增实验性「变更请求与工作树」:在独立 Git 工作树中运行会话,通过可搜索文件树和逐文件导航查看本地及 PR 差异,将选中代码和评论交给 Agent,并跟踪检查与评审状态。 @​LegGasai, @​tianyicui

体验优化

  • 同名工作区在选择器中显示最短区分路径后缀,窄屏优先保留后缀。 @​turtle2099
  • 会话列表支持插件图标,并改善键盘与触屏操作。 @​LegGasai
  • 侧栏会话悬浮卡显示工作目录,便于区分未分组或同名会话。 @​turtle2099
  • 优化侧栏空间布局,改善响应区域,平滑搜索框展开与收起。 @​Yifffan
  • 侧栏搜索支持不区分大小写的会话 ID 子串匹配。 @​turtle2099
  • 悬浮侧栏面板拖过屏幕边缘时有阻力,松手后弹回可见区域;窗口缩小时保持控件可达。 @​yudshj
  • 支持中键关闭右侧栏标签,关闭后台标签不改变当前选中项,并保留不可关闭的起始页。 @​Kingwl
  • 消息在宿主确认接收后才显示并清空草稿;发送期间输入框只读,发送失败时保留草稿、引用和附件。 @​LegGasai
  • 图片上传方式调整为进入输入框后立即上传,发送消息时复用已上传的图片。默认单张图片上限提高到 50 MiB。 @​LegGasai
  • 已回答的问题批次以消息气泡显示,原生与 PTC 调用的回答在过程折叠后仍可回看。 @​Kaige-Gao
  • 运行状态位于当前工作轮次尾部、待处理插话之前,方便区分运行中和排队中的消息,并改善界面布局抖动问题。 @​imccyu
  • 改善工作步骤展开/收起和底部输入框的布局稳定性,减少正文、滚动与输入交互时的跳动,并保持运行状态可见。 @​imccyu
  • 输入框统计读数被截断时,可通过提示气泡查看完整数值;会话统计也显示轮次与步骤数。 @​turtle2099
  • 点击聊天中的文件行号链接后,代码和文本预览以短暂高亮标出目标行并淡出。 @​turtle2099
  • 支持拖动平移超出视口的图片,并通过应用内拖放或桌面原生拖放交付原始文件。 @​std4453
  • Trajectory 结果页新增实时工具返回值的原始 JSON 查看,并与渲染结果上下展示。 @​kermanx
  • Trajectory 支持独立折叠子调用,保留父调用和摘要;搜索或跨视图定位时可展开对应子调用。 @​kermanx
  • 模型选择器默认勾选已配置模型,可一次添加或移除候选并保留自定义值;筛选后的全选只作用于可见候选。 @​turtle2099
  • 对通过 pi-ai 接入且不支持在对话中追加系统消息的模型,后续系统消息会在原位置作为提醒提供,不会移到最初的提示词中。 @​Tuyixiang
  • 支持在 DeepSeek 与 pi-ai 提供商内拖动或用方向键排序模型,保存后保留顺序及完整模型参数。 @​Magolor
  • 自动化任务页支持确认后一次清除全部已结束任务,保留进行中的任务。 @​Chinesezjc
  • Search 功能优先向模型提供 Search API 长摘要,默认每来源最多 800 字符;搜索卡片仍展示短摘录。 @​yudshj
  • Auto 自动审核支持在连续工具调用之间更好地复用历史上下文缓存,减少重复处理。 @​turtle2099
  • 后台任务完成通知直接携带小体积输出,并减少已读取结果和子代理收尾消息的重复通知。 @​turtle1999
  • 子代理等待指引减少 sleep 和重复轮询:只有结果尚未返回时,结束当前轮次等待完成通知。 @​Chinesezjc
  • 加快带固定目录前缀的文件查找,跳过无关目录,同时保持结果与排序规则不变。 @​kermanx
  • Word 常规编辑在保存并核对内容与格式后即可交付,减少不必要的 ZIP、XML 与元数据检查。 @​tianyicui

... (truncated)

Commits

Updates @earendil-works/pi-ai from 1.4.0 to 1.5.0

Release notes

Sourced from @​earendil-works/pi-ai's releases.

v1.5.0

New Features

  • Extension update changelogs: see what changed in installed extension packages on the next fresh launch after an update. Package authors can choose the changelog path, and collapseChangelog condenses the notices. See Show a changelog.
  • Faster streaming: large tool calls are parsed incrementally, and code-heavy answers and tool rows reuse highlighting and rendered Markdown instead of repeating the work on every update. See Keep rendering responsive.
  • Custom self-update commands: use PI_SELF_UPDATE_COMMAND or selfUpdateCommand to update pi through a wrapper or another package manager. See Custom update command.
  • GPT-6.1 Terra: available through OpenAI, Azure OpenAI Responses, and OpenAI Codex, with tool search, mid-conversation thinking-level changes, and thinking off. Codex offers a 500K context window. See Models.

Breaking Changes

  • Tool argument validation runs on @earendil-works/pi-schema. TypeBox features outside JSON Schema (Type.Refine(), Type.BigInt(), Type.Undefined(), codecs, Format.Set() formats) no longer apply to tool arguments; see Tool parameter schemas and TypeBox. Plain JSON Schema tools, including MCP tools, now get the same coercion as TypeBox tools, such as converting numeric strings and wrapping a single value into an array. Validation failures the model sees list pi-schema's messages (- path: missing, - limit: expected number, got string) instead of TypeBox's (must have required properties path, must be number).

Added

  • Extension packages can now show their changelog after an update. Pi reads pi.changelogPath from the package's package.json, or CHANGELOG.md in the package root, and on the next fresh launch shows entries newer than the last seen version under "Extension Updates". The collapseChangelog setting condenses this to one line per package (#5958, #8790)
  • pi.exec() accepts a maxBuffer option that limits stdout and stderr combined, and its result has a truncated field that is true when output exceeded the limit (#11360)
  • Device-code login (for example GitHub Copilot) now opens the verification page and copies the code when you press Enter. Providers can turn either action off with openBrowserOnConfirm: false or copyCodeOnConfirm: false (#9282, #9301)
  • pi update can update Pi through a wrapper or another package manager. Set PI_SELF_UPDATE_COMMAND (for example mise use -g npm:{packageName}@{version}) or the global selfUpdateCommand setting; pi update runs it when pi.dev reports a newer release and fills {packageName}, {version}, and {installSpec} from that release. See Custom update command (#7756, #5607)
  • Extensions can format the user's configured keybindings with keyText() and keyHint() from the tool render context and the message and entry renderer options. Importing these functions from @earendil-works/pi-coding-agent can resolve the extension's own copy of the package, which does not see pi's keybindings, so hints such as keyHint("app.tools.expand", "to expand") rendered without the key. The docs now recommend the injected functions (#4748)
  • Added persisted session-entry messageId and ISO timestamp to MarkdownTransformContext. They are available when rendering saved entries and undefined for live rendering (#7952 by @​vipentti)
  • Added a blocked option to inline ctx.ui.custom() components so approval prompts and other custom dialogs can report that pi is waiting for user input. Overlays ignore the option. See Custom screens and overlays (#11428)
  • Added Usage.cost.totalFromProvider to distinguish billed totals from catalog estimates in SDK and extension usage data; combined usage is marked provider-reported only when every part is (#11178)
  • Added concrete responseModel metadata to messages from pi-messages providers such as Radius, including when a virtual model is requested. See AssistantMessage (#11265)
  • Added GPT-6.1 Terra for OpenAI, Azure OpenAI Responses, and OpenAI Codex, with tool search and mid-conversation thinking-level changes. It supports thinking off; Codex offers a 500K context window

Changed

  • Extensions keep importing Type, Static and TSchema from @earendil-works/pi-ai: Pi maps that import to pi-ai's compat entry plus the TypeBox it bundles, now that pi-ai itself no longer re-exports TypeBox, and its StringEnum there stays a TypeBox TUnsafe<T>. The built-in tool factories (createReadTool() and the others) return TypeBoxAgentTool<typeof schema>, which keeps params typed for TypeBox.
  • Tightened system prompt
  • pi update for installs from the pi.dev installer no longer passes --min-release-age=0 to npm ci. The release lockfile pins every package, so the flag had no effect, and security scanners that block it stopped the update (#11262)
  • /model and /scoped-models now show a model's name next to its ID when the name adds words the ID lacks, such as a renamed models.json override (#5916, #11347)
  • MCP OAuth sign-in now uses pi's Client ID Metadata Document by default when the authorization server supports it for public clients, and registers a client dynamically otherwise, like Codex, Claude Code, and opencode. Clients registered before stay in use while their redirect URI matches. The new default oauth.clientRegistration: "auto" registers when clientName or a non-default callbackUrl is set; "dcr" always registers. pi mcp add --oauth-client-registration sets the mode (#11426)
  • Changed the default OpenAI model from gpt-5.5 to gpt-6.1-sol, including after ChatGPT sign-in when no model is selected (#11442)
  • Updated the built-in model catalog to models.dev v2. Realtime and image-only models are no longer offered as chat models; newer OpenAI and Google chat models are included

Fixed

  • Updated glob matching to prevent denial of service from amplified glob patterns.
  • Fixed a saved "Do not trust" decision being ignored for projects without trust-requiring resources, for example a folder with only AGENTS.md. pi auto-trusted such projects, so ctx.isProjectTrusted() returned true and package commands treated them as trusted. A saved decision in trust.json now takes precedence; auto-trust applies only when no decision is saved (#10947)
  • Fixed Shift+Enter queueing a follow-up instead of inserting a newline in Apple Terminal setups that send ESC + Return. pi now checks the local Shift key state for that sequence, as it already did for plain Return; Alt+Enter without Shift still queues a follow-up (#11559)
  • Fixed the working status (OSC 7501) disappearing in Rex and iTerm2 during runs in regular TUI mode. Rendered messages wrote OSC 133 prompt markers to the terminal, which the terminal treats as a new shell prompt; regular mode no longer writes them (#11519)
  • Fixed compaction, branch summaries, and bug-report summaries in SDK sessions passing the stored OAuth token back to the model runtime as an explicit API key. Provider auth that treats explicit keys differently from stored OAuth now sees the OAuth login, as normal prompts do (#11520)
  • Fixed a redundant system prompt update (tools, rules) when an extension set the same active tools in a different order, for example a reversed pi.setActiveTools() list. Tools that stay active now keep their order and newly activated tools are appended (#11495)
  • Fixed pi.exec() crashing pi with RangeError: Invalid string length when a command printed more output than fits in a string. The default output cap is the smaller of 256 MiB and the runtime string limit; past the cap, the command is terminated and the result has truncated: true and a nonzero exit code (#11360)
  • Fixed pi.exec() never returning when a command ignored SIGTERM after a timeout or abort. pi now sends SIGKILL 5 seconds later, as intended
  • Fixed pi install and pi remove adding ever deeper nested entries to the npm package-lock.json when the agent directory is reached through a symlink, such as ~/.pi linked into a dotfiles repo. pi now passes the resolved real path to npm (#11358)
  • MCP sign-in now rejects authorization endpoints and other OAuth metadata URLs that are not http: or https:. Before, a malicious MCP server could supply a file: or custom protocol URL, which pi passed to the platform URL handler.
  • Automatic fd and rg downloads no longer fetch x86-64 binaries on ARM32 and other architectures without a prebuilt release. pi now warns and recommends installing the tool with the system package manager (#11209)
  • Fixed /model search ranking letters scattered over an earlier part of an entry above a real match, for example opus listing gpt-oss-120b and claude-sonnet-4.5 before claude-opus-4.1 (#11220, #11296)
  • Fixed /resume search matching scattered letters anywhere in session messages and IDs, for example 1024 matching inside a session UUID. Session names and working directories still match fuzzily; IDs and message text now match only as exact substrings (#11220, #11024, #11296)

... (truncated)

Changelog

Sourced from @​earendil-works/pi-ai's changelog.

[1.5.0] - 2026-11-02

Breaking Changes

  • The main entry no longer re-exports TypeBox (Type, Static, TSchema), and typebox is no longer a dependency. Tool.parameters is any JSON Schema object (Tool<TParameters extends object>): @earendil-works/pi-schema's builders, which also type the arguments through pi-schema's Static, TypeBox schemas, or plain objects. validateToolCall()/validateToolArguments() validate with pi-schema (compile(schema, { coerce: true }).parse()): every schema gets the same coercion, the superset of TypeBox's Value.Convert rules (which only applied to TypeBox-built schemas) and pi-ai's own, so plain JSON Schema tools (MCP tools) now also get, for example, null to "null" for a required string, "3.5" to 3 for an integer and a single value wrapped into an array. The error text lists pi-schema's messages (- edits.0.oldText: missing, - limit: expected number, got string) instead of TypeBox's. StringEnum() returns a pi-schema Schema<T> with the same JSON ({ type: "string", enum }). The model and compat schemas (providers/model-schema, providers/compat-schema) are built with pi-schema, with the same JSON Schema, and their types come from pi-schema's Static; ProviderCompat is exported. Migration:

    // Before
    import { Type, type Static, StringEnum } from "@earendil-works/pi-ai";
    const params = Type.Object({ path: Type.String(), mode: StringEnum(["a", "b"]) });
    type Params = Static<typeof params>;
    // After: pi-schema builders (closed objects; pass { open: true } to allow other properties)
    import { StringEnum } from "@​earendil-works/pi-ai";
    import { obj, type Static, str } from "@​earendil-works/pi-schema";
    const params = obj({ path: str(), mode: StringEnum(["a", "b"]) });
    type Params = Static<typeof params>;
    // Or keep TypeBox, imported from typebox itself (its schemas are JSON Schema)
    import { Type, type Static } from "typebox";

  • Tool arguments are validated as JSON Schema only; nothing runs through TypeBox's own validator any more, so TypeBox features outside JSON Schema no longer apply to tool arguments:

    • Type.Refine() refinements are not run: arguments they would reject are accepted.
    • Type.BigInt(), Type.Undefined() and Type.Void() reject every JSON argument (TypeBox converted to them).
    • Codecs (Type.Codec()) do not decode: the tool receives the encoded JSON value.
    • Formats registered with TypeBox's Format.Set() are not checked; the standard formats plus url and json-pointer-uri-fragment are.
    • Property names are names, not regular expressions: "a.b" no longer also converts the argument axb.
    • additionalProperties converts only undeclared properties; TypeBox also converted declared ones with it when an object had more than one property.
  • A $ref that names nothing (a missing definition, an external document) rejects only arguments at its place (- t: unresolved reference #/definitions/Missing) instead of failing every call of the tool, as TypeBox's rejection did before.

  • appendGrammarToolInputJsonDelta() (api/constrained-sampling) takes the input delta instead of the whole input so far and no longer closes the input; close it with the new closeGrammarToolInputJson() (#9265)

Added

  • Added optional openBrowserOnConfirm and copyCodeOnConfirm to device_code auth events and OAuthDeviceCodeInfo. Both default to true; set them to false to stop clients from offering to open the verification page or copy the code (#9282, #9301)
  • Added StreamingJsonParser, an incremental, tolerant parser for JSON text that arrives in pieces (each piece is read once; snapshots of the partial value never change once returned), and ToolCallArgumentsStream, which every provider now uses for streamed tool-call arguments; its append() also returns the changes each piece made (JsonChange: a value set at a path, or text appended to a string), for writers that keep their own copy (#9265)
  • Added GPT-6.1 Terra to the OpenAI, Azure OpenAI Responses, and OpenAI Codex providers with official pricing ($1 input, $0.05 cached input, $1.25 cache writes, $5 output, long-context tier above 272k), tool search, and mid-conversation effort changes. Unlike GPT-6.1 Sol it supports off (reasoning effort none); Codex serves it with a 500K context window
  • Added Usage.cost.totalFromProvider to distinguish provider-reported billed totals from catalog estimates. Missing or false means an estimate; combined usage is marked provider-reported only when every part is (#11178)
  • Added responseModel to pi-messages terminal events, preserving the concrete model reported by providers such as Radius when a virtual model is requested (#11265)

Changed

  • The faux provider streams partial tool-call arguments, so toolcall_delta partials show growing arguments as real providers do (#9265)
  • The built-in model catalog is generated from models.dev's v2 catalog, and its per-provider rules moved from scripts/generate-models.ts into one TypeScript definition per provider under catalog/. Models that models.dev types as realtime or image models (gpt-realtime-2.1, gemini-3.1-flash-live-preview, gemini-3.1-flash-lite-image) are no longer offered as chat models, and models.dev's newer OpenAI and Google chat models (chat-latest, gpt-5.6-cyber, gemini-robotics-er-2-preview) are now included

Fixed

  • Fixed Claude models that accept mid-conversation system messages rejecting a session with a 400 (role 'system' must precede an 'assistant' message) when a system update was followed by an assistant reply with nothing to send to Anthropic, such as an empty reply or another model's reasoning-only reply (#11091)
  • Fixed Claude models with mid-conversation effort failing with Invalid effort level on accounts whose organization caps effort below high, even at low or medium thinking, by sending a fixed low top-level effort (#10063)
  • Fixed streamed tool-call arguments being re-parsed in full on every delta, which made CPU time and memory grow quadratically with the size of a tool call (a 90 KB write on Anthropic peaked at about 140 MB of heap; a 500 KB one took minutes). Every provider and the pi-messages client now read each delta once, and keep the raw argument text and their other stream state (partialJson, partialArgs, index, customInput, streamIndex, Bedrock's encrypted reasoning bytes) off the content blocks, so it no longer reaches partial messages or transcripts of failed streams (#9265)
  • Fixed grammar (custom) tool input streaming copying the whole input so far on every delta (#9265)

... (truncated)

Commits
  • f9a2636 Release v1.5.0
  • ddbe02c docs: audit changelogs and add release highlights
  • 6536f80 feat(ai,agent,coding-agent): validate tool arguments with pi-schema, drop Typ...
  • b4c2e92 fix: remove vulnerable dependency chains
  • c719d5b fix(ai): do not retry Zhipu usage limit errors (code 1308) (#11572)
  • 2e0f175 feat(ai): refactor provider definitions (#11368)
  • 068e972 fix(ai): remove adaptive thinking metadata test that duplicated generator logic
  • 44f6851 fix(ai): use Anthropic Messages for OpenRouter ~anthropic latest aliases
  • d3398f8 fix(ai): detect LiteLLM ContextWindowExceededError as context overflow (#11494)
  • 842c731 fix(ai): fall back on Bedrock strict tool limits
  • Additional commits viewable in compare view

Updates @vitest/coverage-v8 from 5.0.5 to 5.1.0

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.1.0

   🚀 Features

   🐞 Bug Fixes

Bumps the dev-dependencies group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [@deepseek-ai/cordis](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/vendor/cordis) | `4.0.6-alpha.1` | `4.1.0` |
| [@deepseek-ai/dsh-client-store](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/client/store) | `0.2.2-alpha.2` | `0.2.2-rc.1` |
| [@deepseek-ai/dsh-client-ui-primitives](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/client/ui-primitives) | `0.2.2-alpha.2` | `0.2.2-rc.1` |
| [@deepseek-ai/dsh-llm-pi-ai](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/llm/llm-pi-ai) | `0.2.2-alpha.2` | `0.2.2-rc.1` |
| [@deepseek-ai/dsh-typert-protocol](https://github.com/deepseek-ai/deepseek-harness/tree/HEAD/packages/typert/protocol) | `0.2.2-alpha.2` | `0.2.2-rc.1` |
| [@earendil-works/pi-ai](https://github.com/earendil-works/pi/tree/HEAD/packages/ai) | `1.4.0` | `1.5.0` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.5` | `5.1.0` |
| [es-module-lexer](https://github.com/guybedford/es-module-lexer) | `2.3.2` | `3.0.4` |
| [jsdom](https://github.com/jsdom/jsdom) | `30.1.3` | `31.0.0` |
| [semver](https://github.com/npm/node-semver) | `7.8.5` | `7.8.6` |
| [ultracite](https://github.com/haydenbleasel/ultracite) | `8.1.0` | `8.1.1` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.5` | `5.1.0` |


Updates `@deepseek-ai/cordis` from 4.0.6-alpha.1 to 4.1.0
- [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases)
- [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/HEAD/vendor/cordis)

Updates `@deepseek-ai/dsh-client-store` from 0.2.2-alpha.2 to 0.2.2-rc.1
- [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases)
- [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.2.2-rc.1/packages/client/store)

Updates `@deepseek-ai/dsh-client-ui-primitives` from 0.2.2-alpha.2 to 0.2.2-rc.1
- [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases)
- [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.2.2-rc.1/packages/client/ui-primitives)

Updates `@deepseek-ai/dsh-llm-pi-ai` from 0.2.2-alpha.2 to 0.2.2-rc.1
- [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases)
- [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.2.2-rc.1/packages/llm/llm-pi-ai)

Updates `@deepseek-ai/dsh-typert-protocol` from 0.2.2-alpha.2 to 0.2.2-rc.1
- [Release notes](https://github.com/deepseek-ai/deepseek-harness/releases)
- [Commits](https://github.com/deepseek-ai/deepseek-harness/commits/dsh-v0.2.2-rc.1/packages/typert/protocol)

Updates `@earendil-works/pi-ai` from 1.4.0 to 1.5.0
- [Release notes](https://github.com/earendil-works/pi/releases)
- [Changelog](https://github.com/earendil-works/pi/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/earendil-works/pi/commits/v1.5.0/packages/ai)

Updates `@vitest/coverage-v8` from 5.0.5 to 5.1.0
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.1.0/packages/coverage-v8)

Updates `es-module-lexer` from 2.3.2 to 3.0.4
- [Release notes](https://github.com/guybedford/es-module-lexer/releases)
- [Commits](guybedford/es-module-lexer@2.3.2...3.0.4)

Updates `jsdom` from 30.1.3 to 31.0.0
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v30.1.3...v31.0.0)

Updates `semver` from 7.8.5 to 7.8.6
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.8.5...v7.8.6)

Updates `ultracite` from 8.1.0 to 8.1.1
- [Release notes](https://github.com/haydenbleasel/ultracite/releases)
- [Commits](https://github.com/haydenbleasel/ultracite/compare/ultracite@8.1.0...ultracite@8.1.1)

Updates `vitest` from 5.0.5 to 5.1.0
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.1.0/packages/vitest)

---
updated-dependencies:
- dependency-name: "@deepseek-ai/cordis"
  dependency-version: 4.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@deepseek-ai/dsh-client-store"
  dependency-version: 0.2.2-rc.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@deepseek-ai/dsh-client-ui-primitives"
  dependency-version: 0.2.2-rc.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@deepseek-ai/dsh-llm-pi-ai"
  dependency-version: 0.2.2-rc.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@deepseek-ai/dsh-typert-protocol"
  dependency-version: 0.2.2-rc.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@earendil-works/pi-ai"
  dependency-version: 1.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: es-module-lexer
  dependency-version: 3.0.4
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: jsdom
  dependency-version: 31.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: semver
  dependency-version: 7.8.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: ultracite
  dependency-version: 8.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: vitest
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants