@caupulican/pi-adaptative 0.80.65 → 0.80.67

package/CHANGELOG.md

@@ -1,3 +1,15 @@
+## [0.80.67] - 2026-06-27
+
+### Added
+
+- Untrusted-content boundary (security): output from attacker-controllable sources (web/search, subagents, recall, third-party tools) is now structurally fenced in `<untrusted_content>` tags with a random nonce and break-out neutralization, plus an always-on system-prompt rule that the agent must treat such content as data, never instructions — and that boundary actions always need human approval. First-party tools (read/grep/find/ls/edit/write/bash) are trusted and unwrapped.
+
+## [0.80.66] - 2026-06-27
+
+### Added
+
+- Gateway & scheduler provider interfaces: pi now exposes `ChannelProvider` (transports) and `JobSchedulerProvider` (cron) contracts plus a registry, so a deployment/server wrapper can plug in channels and scheduled jobs without baking any transport into the core agent.
+
 ## [0.80.65] - 2026-06-27
 
 ### Added

package/dist/core/agent-session.d.ts

@@ -18,6 +18,7 @@ import { type BashResult } from "./bash-executor.ts";
 import { type CompactionResult } from "./compaction/index.ts";
 import { type ContextGcReport } from "./context-gc.ts";
 import { type ContextUsage, type ExtensionCommandContextActions, type ExtensionContext, type ExtensionErrorListener, ExtensionRunner, type ExtensionUIContext, type InputSource, type ReplacedSessionContext, type SessionStartEvent, type ShutdownHandler, type ToolDefinition, type ToolInfo } from "./extensions/index.ts";
+import { type ChannelProvider, GatewayRegistry, type JobSchedulerProvider } from "./gateways/channel-provider.ts";
 import { type DemandSignals, type ReflectionResult } from "./learning/reflection-engine.ts";
 import type { MemoryProvider } from "./memory/memory-provider.ts";
 import type { CustomMessage } from "./messages.ts";
@@ -276,6 +277,8 @@ export declare class AgentSession {
     private _memoryManager;
     /** R4: tracks whether injected recall is actually used, to adapt the recall gate. */
     private readonly _effectivenessTracker;
+    /** R8: registry for deployment-supplied gateway channels + schedulers (lifecycle driven by the host runner). */
+    private readonly _gatewayRegistry;
     private readonly _isChildSession;
     /** Memory providers registered by extensions via pi.registerMemoryProvider, applied on (re)init. */
     private _pendingMemoryProviders;
@@ -625,6 +628,12 @@ export declare class AgentSession {
     private _initializeMemory;
     /** Register a memory provider contributed by an extension; applied on the next memory (re)init. */
     registerMemoryProvider(provider: MemoryProvider): void;
+    /** R8: the gateway/scheduler registry. A deployment runner registers providers and drives start/stop. */
+    get gateways(): GatewayRegistry;
+    /** R8: register a deployment-supplied transport channel (gateway). */
+    registerChannelProvider(provider: ChannelProvider): void;
+    /** R8: register a deployment-supplied job scheduler (cron). */
+    registerJobScheduler(provider: JobSchedulerProvider): void;
     private _refreshToolRegistry;
     private _createReloadRuntimeSnapshot;
     private _restoreReloadRuntimeSnapshot;