Localize Pi provider injection to each Workspace

[luokerenx4]

What changed

• register the OpenAlice-managed Pi provider through a generic Workspace-local .pi/extensions/openalice-provider.ts
• keep provider credentials and reversible binding ownership in the git-excluded local .pi/openalice-provider.json sidecar
• preserve Pi global models, auth, settings, packages, trust, and sessions
• migrate active and departed version-1 bindings with backups, idempotency, stale-node cleanup, and torn model-selection repair
• preserve user-edited provider extensions instead of overwriting or stranding them
• document the new ownership boundary and execution plan

Root cause

OpenAlice previously wrote every Workspace custom provider into Pi’s user-global models.json. Concurrent Workspace launches could race on that shared file, leak Workspace-specific defaults across scopes, and leave project defaultModel selection pointing at a different global provider model. The extension API also requires complete model objects, unlike models.json, so the local projection supplies Pi’s own documented compatibility defaults at registration time.

User impact

Pi model and credential injection is now isolated per Workspace. Automated Issues and resumed Sessions use the Workspace provider without mutating global Pi model configuration, while user-owned global configuration remains visible and untouched. Existing installations migrate automatically with a backup and keep a legacy global provider whenever one Workspace cannot be localized safely.

Verification

• npx tsc --noEmit
• pnpm test — 3916 passed, 9 skipped
• focused runtime/package matrix — 147 passed
• migration/adapter matrix — 106 passed
• real managed Pi --list-models discovery from the local extension
• real managed Pi authenticated request against the isolated acceptance mock
• CSC_IDENTITY_AUTO_DISCOVERY=false pnpm electron:smoke:workspace — packaged Electron, PTY/CLI, scheduled Issue, managed Pi response, migration, and cleanup all passed

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
openalice-demo	Ready	Preview	Aug 4, 2026 4:17pm