Added 'herrnel' as an approved contributor.

# Conflicts:
#	package-lock.json
#	packages/agent/package.json

…on-in-config-tui

fix(coding-agent): preserve .agents provenance in skill metadata

docs(coding-agent): fix termux-open chooser flag

closes earendil-works#4289

…e-outputs

feat: image content

closes earendil-works#4870

- Tighten all sections (279 -> 159 lines) without dropping rules.
- Reorganize: git rules moved next to issues/PRs.
- Defer contributor gate details to CONTRIBUTING.md.
- Replace stale npx tsx test command with node (strip-only mode); add ./test.sh + e2e warning.
- Releasing: explicit WebAuthn briefing step, no bash timeout, stop on partial publish failure.
- Move LLM provider checklist to .pi/skills/add-llm-provider.md.

…evice-code-login

feat(ai): refactor device code login for copilot

fix(coding-agent): use the right basedir for patterns

closes earendil-works#4832

closes earendil-works#4842

closes earendil-works#4790

closes earendil-works#4847

closes earendil-works#4869

Adds 10 project-level skills under .claude/skills/ for common Exult
Healthcare front-office workflows, split across AdvancedMD (5) and
RingCentral (5). Each SKILL.md covers: purpose, inputs, prerequisites,
API-first workflow with UI fallback, per-request approval gates, verify,
rollback, common pitfalls, and references to local AMD API doc cache +
memory.

PHI/PCI-sensitive skills (add-patient, reschedule, cancel, records,
payment) require explicit per-request Gautam approval before any write
and never log full PHI/card data.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Adds 10 new project-level skills covering insurance verification + add,
patient check-in, document upload, patient messaging, refunds, SMS
reminders, IVR updates, temporary call forwarding, and a composite
daily KPI report. Updates INDEX.md and preserves batch 1 conventions
(API-first + UI fallback, per-request approval gates for PHI/financial
writes, PHI redaction rules).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

…nd AMD XMLRPC

Adds three local stdio MCP servers under packages/exult-mcp/ to fill gaps in
Claude Desktop coverage of Exult Healthcare operational services:

- ringcentral-admin: RC Platform API with the Remote Admin JWT — extensions,
  call queues, IVR, detailed/paginated call log, voicemails, transcripts
  (fills the gap Keragon RC MCP leaves around admin/pagination/voicemail).
- microsoft365-admin: Graph client_credentials (Exult Agent Service app) for
  tenant-wide directory, any-mailbox mail/calendar, groups, SharePoint
  (claude_ai_Microsoft_365 is Gautam's personal delegated OAuth — doesn't
  cover tenant admin).
- advancedmd-xmlrpc: ARC022825 service-account XMLRPC for getUpdatedPatients,
  getUpdatedVisits, getVisitInfoByDate, getEhrUpdatedNotes,
  getAppointmentHistory, plus a raw_xmlrpc_request escape hatch. Complements
  Keragon AMD (which can't reach the service-account-only getUpdated family).

All tools are READ-ONLY. Writes deliberately excluded — AMD writes require
Gautam's per-operation approval and Keragon already covers the write APIs.

Each server live-smoke-tested against its real API during build:
- RC returned account 2761864020 / Confirmed
- M365 returned tenant Exult Healthcare / 707a7153-...
- AMD XMLRPC login + getfieldsets probe returned 3310 bytes of table XML

Full build log at .pi/services/mcp_setup/build_log.md including MBP config
discovery gap (MBP offline 8h, ssh unreachable), coverage gap analysis, and
the claude.ai remote MCP hosting note (only M365 is hostable; RC and AMD are
local-only due to PHI + session-auth).

Claude Desktop config at ~/Library/Application Support/Claude/ was updated
out-of-tree and is NOT part of this commit. Credential JSON files remain
uncommitted in .config/exult/.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

…-2026-05-23

# Conflicts:
#	.gitignore
#	packages/coding-agent/examples/extensions/subagent/index.ts

Upstream pi-mono renamed @mariozechner/pi-* → @earendil-works/pi-*. This
commit lands the full upstream merge plus the post-merge work needed for
local extensions/packages to build & pass all pre-commit gates.

- @mariozechner/pi-* → @earendil-works/pi-* in source files
- gbharg-auto-review pin → ^0.75.4
- Dedupe loader.ts virtualModules + getAliases (sed-pass dupes)
- `: any` annotations for noImplicitAnyLet errors (cli.ts + index.ts)
- biome --write --unsafe auto-fixes (useTemplate, useLiteralKeys, etc)
- Pin floating ^ deps per check:pinned-deps
- Rewrite relative .js → .ts imports (gbharg-auto-review + .pi/extensions)
- .gitignore .next/ + delete tracked .next dirs
- Cast StringEnum() to any in sendblue extension (TUnsafe vs TSchema mismatch
  post-upstream typebox bump)

Build passes for all 4 workspace packages: pi-tui, pi-ai (gpt-5.5 +
gpt-5.5-pro exposed), pi-agent-core, pi-coding-agent.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>