chore: pin deps, collapse CI to one job, deactivate dependabot, fix node-pty on macOS

.github/branch-protection-main.json

@@ -1,7 +1,7 @@
 {
 	"required_status_checks": {
 		"strict": true,
-		"contexts": ["ci (ubuntu-latest)", "ci (macos-14)"]
+		"contexts": ["ci"]
 	},
 	"enforce_admins": true,
 	"required_pull_request_reviews": {

.github/workflows/ci.yml

@@ -5,7 +5,6 @@ on:
     branches: [main]
   pull_request:
     branches: [main]
-    types: [opened, synchronize, reopened, ready_for_review]
   workflow_dispatch:
 
 permissions:
@@ -16,45 +15,8 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  lint:
-    if: github.event.pull_request.draft != true
-    name: lint
+  ci:
     runs-on: ubuntu-latest
-    timeout-minutes: 5
-    steps:
-      - uses: actions/checkout@v6
-        with:
-          persist-credentials: false
-      - uses: actions/setup-node@v6
-        with:
-          node-version: 24
-          cache: npm
-      - run: npm ci --prefer-offline --no-audit --no-fund
-      - run: npm run typecheck
-      - run: npm run lint
-
-  test:
-    if: github.event.pull_request.draft != true
-    name: test
-    runs-on: ubuntu-latest
-    needs: lint
-    timeout-minutes: 5
-    steps:
-      - uses: actions/checkout@v6
-        with:
-          persist-credentials: false
-      - uses: actions/setup-node@v6
-        with:
-          node-version: 24
-          cache: npm
-      - run: npm ci --prefer-offline --no-audit --no-fund
-      - run: npm run test
-
-  e2e:
-    if: github.event.pull_request.draft != true
-    name: e2e
-    runs-on: ubuntu-latest
-    needs: test
     timeout-minutes: 10
     steps:
       - uses: actions/checkout@v6
@@ -65,4 +27,4 @@ jobs:
           node-version: 24
           cache: npm
       - run: npm ci --prefer-offline --no-audit --no-fund
-      - run: npm run test:e2e
+      - run: npm run ci

biome.json

@@ -1,5 +1,5 @@
 {
-	"$schema": "https://biomejs.dev/schemas/2.4.12/schema.json",
+	"$schema": "https://biomejs.dev/schemas/2.4.13/schema.json",
 	"assist": { "actions": { "source": { "organizeImports": "on" } } },
 	"formatter": {
 		"enabled": true,

package.json

@@ -69,30 +69,31 @@
 		"test:e2e": "npm run build && node --import tsx --test 'tests/e2e/**/*.test.ts'",
 		"ci": "npm run typecheck && npm run lint && npm run test && npm run build && npm run test:e2e",
 		"hooks:install": "bash scripts/install-hooks.sh",
+		"postinstall": "node scripts/fix-node-pty-permissions.mjs",
 		"prepublishOnly": "npm run typecheck && npm run lint && npm run build && node scripts/check-dist.mjs"
 	},
 	"dependencies": {
-		"@anthropic-ai/claude-agent-sdk": "^0.2.120",
+		"@anthropic-ai/claude-agent-sdk": "0.2.120",
 		"@lmstudio/sdk": "1.5.0",
 		"@mariozechner/pi-agent-core": "0.70.2",
-		"@mariozechner/pi-ai": "0.69.0",
-		"@mariozechner/pi-tui": "0.69.0",
-		"chalk": "^5.3.0",
-		"diff": "^9.0.0",
-		"esbuild": "^0.28.0",
+		"@mariozechner/pi-ai": "0.70.2",
+		"@mariozechner/pi-tui": "0.70.2",
+		"chalk": "5.6.2",
+		"diff": "9.0.0",
+		"esbuild": "0.28.0",
 		"ollama": "0.6.3",
-		"typebox": "^1.1.33",
-		"undici": "^8.1.0",
-		"uuid": "^14.0.0",
-		"yaml": "^2.6.0"
+		"typebox": "1.1.33",
+		"undici": "8.1.0",
+		"uuid": "14.0.0",
+		"yaml": "2.8.3"
 	},
 	"devDependencies": {
-		"@biomejs/biome": "^2.4.13",
-		"@types/diff": "^8.0.0",
-		"@types/node": "^24.12.2",
-		"node-pty": "^1.1.0",
-		"tsup": "^8.3.0",
-		"tsx": "^4.19.0",
-		"typescript": "^6.0.3"
+		"@biomejs/biome": "2.4.13",
+		"@types/diff": "8.0.0",
+		"@types/node": "24.12.2",
+		"node-pty": "1.1.0",
+		"tsup": "8.5.1",
+		"tsx": "4.21.0",
+		"typescript": "6.0.3"
 	}
 }