opensec-git/Pi-Bolt bolt-v1.1.0

Pi-Bolt 1.1.0

on GitHub

Pi-Bolt 1.1.0 is Pi 1.5.0, built ahead of time as before. What
Pi 1.5.0 brings is in its release notes; in short: changelogs for updated extension packages, faster streaming of large tool
calls and code-heavy answers, PI_SELF_UPDATE_COMMAND / selfUpdateCommand, and GPT-6.1 Terra. Everything Pi-Bolt adds is
1.0.9's.

Pi-Bolt's versions now go 1.0.9, 1.1.0: the last number runs from 0 to 9, then the middle one goes up.

Changed

• Pi 1.5.0 (#237, #229):
  Pi-Bolt's changes are kept on top of it. For extensions: Pi 1.5.0 validates tool arguments with
  @earendil-works/pi-schema instead of TypeBox, so TypeBox features outside JSON Schema (Type.Refine(), Type.BigInt(),
  Type.Undefined(), codecs, Format.Set() formats) no longer apply to tool arguments, and plain JSON Schema tools (MCP
  tools too) get the same coercion as TypeBox ones.
• pi-bolt compile gives compiled-in extensions the same @earendil-works/pi-ai as Pi 1.5.0's loader: pi-ai's compat
  entry plus TypeBox's Type and StringEnum. Run pi-bolt compile again after updating.
• Startup profile: recorded again for Pi 1.5.0, on Linux, macOS and Windows.

Fixed

• Numbers in tool arguments: a number that does not fit (1e400) or NaN fails validation again, as with Pi 1.4.0, instead
  of reaching the tool as Infinity.
• Provider stream wrappers (#226,
  #227 by @Patrick-Kappen): a
  provider extension that returns the API's stream wrapped in a Proxy that changes the events (to map renamed tool names
  back, say) had the wrapper skipped. Such a stream is now iterated through the wrapper.
• Dependencies (#231,
  #232): with Pi 1.5.0's dependencies npm audit finds nothing (zod
  4.6.7, undici 8.12.3), and shx is gone, with the old minimatch under glob 7.

With the default settings Pi-Bolt sends what Pi 1.5.0 sends. The release archives on the Apple M5, 1.0.9 / 1.1.0
(medians of 25 runs, 15 for the -jit build; a second copy of 1.0.9 varied as much):

Ready to type: 28 / 28 ms.

Pi is 1.5.0. The engine and runtimes are 1.0.9's: Bun 1.4.3 with Bun 1.4.4's TLS fix (oven-sh/bun#46300), which
pi-bolt doctor now names on its engine line (#228).

Install

curl -fsSL https://pi-bolt.opensec.in/install.sh | sh

irm https://pi-bolt.opensec.in/install.ps1 | iex

powershell -c "irm https://pi-bolt.opensec.in/install.ps1 | iex"

or pi-bolt update, or npm install -g --allow-scripts=pi-bolt pi-bolt, or bun add -g --trust pi-bolt, or:

• Homebrew (macOS on Apple silicon, Linux): brew install opensec-git/tap/pi-bolt
• Scoop (Windows): scoop bucket add opensec-git https://github.com/opensec-git/scoop-bucket, then scoop install opensec-git/pi-bolt
• mise: github:opensec-git/Pi-Bolt with the options in the installation guide

The installer checks the release signature with OpenSSL 3, ssh-keygen (OpenSSH 8.1 or later), or an installed Pi-Bolt.
Every archive also has a GitHub build attestation: gh attestation verify <file> -R opensec-git/Pi-Bolt.

Linux x86-64 or ARM64 with glibc 2.17 or later; Android 7 or later on 64-bit ARM, in Termux; macOS 13 or later on Apple silicon;
Windows 10 1809 or later, or Windows 11, on x64.