Merge branch 'main' into fix/permission-mode-reminder-env

Author: elkaix

.changeset/graduate-database-and-remote-control.md

@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": major
+---
+
+Remote Control is always available — `pythinker rc`, `pythinker web --remote-control` and `/remote-control` no longer need an experimental flag. Session indexing and global search move to the new `[database]` section: set `PYTHINKER_CODE_PERSISTENCE_MINIDB_READMODEL` (was `PYTHINKER_CODE_EXPERIMENTAL_PERSISTENCE_MINIDB_READMODEL`) and `PYTHINKER_CODE_SEARCH_WORKER` (was `PYTHINKER_CODE_EXPERIMENTAL_SEARCH_WORKER`), or `[database] base` and `[database] search` in `config.toml`.

.changeset/graduate-subagent-model-pool.md

@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": major
+---
+
+The subagent model pool is always available. Remove `PYTHINKER_CODE_EXPERIMENTAL_SECONDARY_MODEL` from your environment — it no longer does anything, and `[secondary_model]` takes effect with no opt-in.

.changeset/remote-control-local-ui-token.md

@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": patch
+---
+
+The Remote Control banner's Local UI link now carries the server token, so it opens without a second sign-in.

.changeset/remote-control-toggle-api.md

@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": minor
+---
+
+The server can now start and stop Remote Control while it runs, through `GET` and `POST /api/v1/remote-control`.

.changeset/remote-control-tunnel-gzip.md

@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": patch
+---
+
+Remote Control now gzips text, JSON, JavaScript, XML and SVG responses over the tunnel.

.changeset/remove-now-template-variable.md

@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": major
+---
+
+Remove the `${now}` variable from custom system prompt templates. Delete `${now}` from your `SYSTEM.md` and agent files — the agent still receives the current date.

.changeset/search-index-self-heal.md

@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": patch
+---
+
+Global search now rebuilds its index instead of staying broken when the stored data is corrupt or a write keeps failing.

.changeset/silent-late-task-settlement.md

@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": patch
+---
+
+A background task that finishes after its agent is closed no longer emits stray task events.

AGENTS.md

@@ -67,6 +67,7 @@ Adding an OpenAI-compatible provider requires **zero code changes** — just add
 | `packages/acp-server` | Agent Client Protocol host over engine v2 | Drives the engine through a `klient` memory-transport facade. |
 | `packages/pi-tui` | Vendored TUI library | Upstream fork with local divergences; tests run with `node --test`, not vitest. See its `AGENTS.md`. |
 | `packages/protocol` | Shared REST + WS protocol schemas | Envelope, error codes, pagination, WS-control types. |
+| `packages/remote-control` | Remote Control tunnel client | Registers this machine with a relay and forwards HTTP/WebSocket traffic to the local server, behind a machine-wide single-instance lock. Consumed by agent-gateway (the `/api/v1/remote-control` toggle) and the CLI (`pythinker web --remote-control`). |
 
 The web bundle: `apps/pythinker-code/dist-web` is the committed, prebuilt bundle of `apps/pythinker-web` (built with `pnpm --filter @pymodel/pythinker-web run build` and copied via `scripts/copy-web-assets.mjs`). `apps/pythinker-code/scripts/check-web-assets.mjs` fails when the bundle is missing **or stale** (it compares a fingerprint of every `apps/pythinker-web` build input against the one recorded at copy time); it runs in pre-push, in the CLI `build`, and on `prepack`. Whenever you touch the web UI, run `pnpm run build:web` and commit the restaged bundle in the same change. `packages/server` and `packages/server-e2e` are empty leftover directories excluded from the workspace — not packages.
 

apps/desktop/scripts/finalize-mac-artifacts.ts

@@ -153,7 +153,13 @@ export function finalizeMacArtifacts(options: FinalizeMacArtifactsOptions): void
     .sort()
   if (dmgs.length === 0) throw new Error(`No DMG artifacts found in ${options.distDir}`)
 
-  const manifestName = options.manifestName ?? DEFAULT_MAC_MANIFEST
+  // The workflow always passes the channel manifest positionally, so an unresolved
+  // channel output arrives as an empty string rather than a missing argument; `??`
+  // would keep it and read the distribution directory itself.
+  const manifestName =
+    options.manifestName === undefined || options.manifestName === ''
+      ? DEFAULT_MAC_MANIFEST
+      : options.manifestName
   const metadataPath = join(options.distDir, manifestName)
   let metadata = readFileSync(metadataPath, 'utf8')
   const credentialArgs = buildNotarytoolArguments(options.env)