@agentos-software/pi bundles @mariozechner/pi-coding-agent 0.60.0, affected by GHSA-jfgx-wxx8-mp94 (fixed only in @earendil-works/pi-coding-agent 0.78.1+)

[BitByBen]

Summary

@agentos-software/pi (checked 0.2.7 and the latest, 0.3.2) depends on and bundles @mariozechner/pi-coding-agent@0.60.0 (and @mariozechner/pi-ai@0.60.0) into dist/sdk-snapshot.js. That package line stopped at 0.73.1: Pi moved to @earendil-works/pi-coding-agent, and these advisories list no fix for the @mariozechner name:

Advisory	Severity	Affected @mariozechner/pi-coding-agent	Fixed
GHSA-jfgx-wxx8-mp94 (CVE-2026-54328) — predictable temporary extension install paths, local privilege escalation on shared Linux hosts	High	>= 0.50.0, <= 0.73.1	@earendil-works/pi-coding-agent 0.78.1
GHSA-7v5m-pr3q-6453 (CVE-2026-54326) — XSS in HTML session exports	Low	>= 0.27.5, <= 0.73.1	same
GHSA-r95r-rj6r-c39x (CVE-2026-54327) — auth.json write race	Low	>= 0.28.0, <= 0.73.1	same

Downstream scanners flag every consumer, and an npm overrides entry is not a workaround: the adapter prefers the bundled snapshot (if (snapshotRuntime) in dist/adapter.js), so overriding the dependency changes only the lockfile, not what runs.

Request

Publish an @agentos-software/pi built on @earendil-works/pi-coding-agent / @earendil-works/pi-ai >= 0.78.1. Note the adapter imports internal paths (dist/core/sdk.js, session-manager.js, model-registry.js, ...) and @mariozechner/pi-agent-core; those still exist under the new package names, but the auth APIs changed (e.g. AuthStorage is no longer exported from the package root and credential operations are async).

Related: #1903.