fix: update plugin submodules for current Pi, DSH and Codewhale hosts

[LIghtJUNction]

Scope

Update all plugin integrations: advance Pi, DSH, Codewhale and installer Git pins; revalidate OpenCode, already on the current stable 1.18.34. Keep the unrelated coweft application and Go/Rust backend migration untouched.

Component	Update
Pi	provider 0.1.0-alpha.4, Pi 1.0.4 and supported legacy hosts
DSH	provider 0.1.0-alpha.6, stable 0.2.0-rc.2 + alpha 0.2.1-alpha.1, synchronized nested Pi source, host-owned peer dependencies
Codewhale	provider 0.1.0-alpha.2, profile isolation and real native catalog test
Installers	new provider pin, matching immutable Bash/PowerShell helper revision and SHA-256
OpenCode	1.18.34 retained; build, native host and integration tests revalidated

Child PRs

Review before accepting the parent Gitlink update:

• fix: update Pi integration for 1.0.4 and retain legacy compatibility pi-lmm-provider#13
• fix: support DSH 0.2.1 alpha and refresh the shared Pi submodule dsh-lmm-provider#4
• fix: adapt Codewhale profiles and verify current native host integration codewhale-lmm-provider#1
• fix: update Codewhale installer pin and synchronize verified bootstraps lmm-scripts#9

Bugs fixed beyond version bumps

• DSH's expanded tarball matrix exposed alpha services shadowing stable services, correctly disabled by the host and producing an auth-route 404. The three shared services are now peers supplied by the active host, not independently installed runtime dependencies. Source and packed plugins passed BOTH stable/alpha hosts after the fix; no compatibility exemptions or skipped checks.
• Codewhale profile environment/arguments could override the isolated LMM provider configuration. They are now isolated/rejected while preserving native -p/-c flags.
• Both installer entrypoints retain verified immutable helper references rather than mismatched or bypassed SHA-256 checks.

Validation

• Pi: 118 tests, typecheck, package checks and native loader; full 0.86.1/0.87.1/0.99.2/1.0.4/latest matrix passed.
• DSH: 14 unit tests, stable/alpha actual Web OAuth/RPC/catalog/streaming/sign-out and tarball installs passed the final dependency-fix validation: https://github.com/TokenNotIncluded/dsh-lmm-provider/actions/runs/37469603779
• Codewhale: 38 tests and native host checks; Linux/macOS Node 22/24 plus native 0.10.0/latest matrix passed.
• Codewhale/OpenCode cross-platform installer workflows passed. Broader CI results remain visible in the respective PR checks.
• Parent Plugin compatibility already passed the initial full integration run, including OpenCode's real native host and reconnect integration; the final pin additionally enforces DSH tarball installation. Current checks validate that final revision.
• Dated compatibility record added in docs/plugin-compatibility-2026-10-06.md.

No package publication, child merge, production deployment, real user OAuth credentials or billable inference. Codewhale npm stable is 0.10.0; reviewed 0.10.1 development source is not a published release. Source version bumps do not invent new release asset URLs. Temporary write-enabled upgrade workflows have been removed.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
🔒 Security Review	✅ Completed 2026-10-06T13:16:17.891541Z	e586b1d	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[Copilot]

Copilot review overview

🟡 Changes recommended

Pinned child revisions have unresolved compatibility defects, and the new workflow currently fails the repository’s workflow-safety check.

Review effort: Balanced
Findings: 3

Open (3)

• Separate variable declaration to preserve command failure status · New
• Fix packaged-plugin 404 and advance DSH pin · New
• Make Windows profile-variable filtering case-insensitive · New

What changed in this PR

Updates plugin integrations to current Pi, DSH, and Codewhale revisions, with compatibility CI and documentation.

Changes:

• Advances four plugin/installer Git pins.
• Adds native-host and package validation.
• Documents compatibility scope and limitations.

File	Description
.github/​workflows/​plugin-compatibility.yml	Adds pinned-plugin validation CI.
docs/​plugin-compatibility-2026-10-06.md	Records versions, validation, and limitations.
packages/​pi-lmm-provider	Advances the Pi provider pin.
packages/​dsh-lmm-provider	Advances the DSH provider pin.
packages/​codewhale-lmm-provider	Advances the Codewhale provider pin.
packages/​lmm-scripts	Advances installer scripts.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.