@caupulican/pi-adaptative 0.80.70 → 0.80.72

package/CHANGELOG.md

@@ -1,3 +1,19 @@
+## [0.80.72] - 2026-06-28
+
+### Fixed
+
+- Long-session performance: the footer's spawned-cost total is now cached by entry count instead of re-scanning all session entries on every render frame, fixing typing lag and CPU spikes in long sessions.
+- Long-session stability: disposing a session now releases the hooks it installed on the shared agent (so the session and its history can be garbage-collected) and aborts any in-flight background reflection so it can't keep spending tokens or write memory/skills against a closed session.
+
+## [0.80.71] - 2026-06-28
+
+### Fixed
+
+- Security (untrusted boundary): closed a fence-spoofing bypass — closing tags in case/whitespace variants (e.g. `</UNTRUSTED_CONTENT >`) are now neutralized — and widened the set of tool names treated as untrusted (download/exec/scrape/etc.).
+- Security (cross-session recall): recalled past-session text is now fenced as untrusted data so an injected payload in old history can't be replayed as a current instruction; recall pages are no longer re-indexed into the recall corpus (no recirculation).
+- Memory: a remembered fact can no longer overwrite Markdown section headers; the recall-effectiveness metric no longer unfairly penalizes long snippets; situational souls follow first-wins profile precedence instead of concatenating.
+- Stability: the resource catalog no longer crashes on a circular symlink (cycle-guarded hashing) and never leaves a partially-copied resource on a failed install/backup (atomic swap); gateway re-registration stops the replaced provider (no listener leak).
+
 ## [0.80.70] - 2026-06-28
 
 ### Fixed

package/dist/core/agent-session.d.ts

@@ -279,6 +279,12 @@ export declare class AgentSession {
     private readonly _effectivenessTracker;
     /** R8: registry for deployment-supplied gateway channels + schedulers (lifecycle driven by the host runner). */
     private readonly _gatewayRegistry;
+    /** Cache for getSpawnedUsage(), keyed by session entry count (Bug #22 — avoid O(N) per render frame). */
+    private _spawnedUsageCache?;
+    /** Set on dispose so in-flight background reflection bails instead of writing to a dead session (Bug #21). */
+    private _disposed;
+    /** Aborts in-flight background reflection completions on dispose (Bug #21). */
+    private readonly _reflectionAbort;
     private readonly _isChildSession;
     /** Memory providers registered by extensions via pi.registerMemoryProvider, applied on (re)init. */
     private _pendingMemoryProviders;
@@ -777,7 +783,11 @@ export declare class AgentSession {
         sourceSessionId?: string;
         reportId?: string;
     }): string | undefined;
-    /** Aggregate all recorded spawned-usage reports (see {@link addSpawnedUsage}). */
+    /**
+     * Aggregate all recorded spawned-usage reports (see {@link addSpawnedUsage}). Cached by the session
+     * entry count so the interactive footer (which calls this every render frame) is O(1) between turns
+     * instead of an O(N) scan on every keystroke (Bug #22). Recomputes only when entries change.
+     */
     getSpawnedUsage(): SpawnedUsageTotals;
     /**
      * Run a one-shot LLM completion fully ISOLATED from the main session — the load-bearing