@caupulican/pi-adaptative 0.80.74 → 0.80.75

package/CHANGELOG.md

@@ -1,3 +1,23 @@
+## [0.80.75] - 2026-06-28
+
+### Changed
+
+- Compaction cost guard (long-session savings): compaction now also triggers once context passes a
+  configurable fraction of the model's window (`compaction.triggerPercent`, default 0.7) — not only when
+  it's nearly full — so per-turn input cost stays bounded on large-window models, while an anti-thrashing
+  gate skips an early compaction that would barely shrink the context. The summary is now produced by a
+  cheap auxiliary model when one is available (`compaction.model`, default `"auto"` picks the cheapest
+  authed model that can hold the context and is cheaper than the session model; falls back to the session
+  model), instead of always using the main model.
+
+### Fixed
+
+- Hardened context/memory threat scanning: added detection and neutralization of invisible/bidirectional
+  control characters (zero-width, bidi overrides/isolates — the "Trojan Source" vector), and a broader,
+  scoped pattern set. Context-file and memory reads strip hidden characters and continue; high-privilege
+  memory writes are scanned in a stricter scope (exfil/backdoor/persistence patterns) and rejected
+  outright.
+
 ## [0.80.74] - 2026-06-28
 
 ### Fixed

package/dist/core/agent-session.d.ts

@@ -309,6 +309,16 @@ export declare class AgentSession {
     get modelRegistry(): ModelRegistry;
     private _getRequiredRequestAuth;
     private _getCompactionRequestAuth;
+    /**
+     * Resolve the model used to SUMMARIZE during compaction (cost guard, #30). A compaction summary is an
+     * extraction task — it does not need the main (expensive) model. Selection:
+     *   - an explicit `compaction.model` setting wins, but only if its provider is authed (else fall back);
+     *   - `"auto"` (default) picks the CHEAPEST authed model whose context window can hold a compaction
+     *     (capability floor), and ONLY if it is strictly cheaper than the session model — so we never
+     *     downgrade to an equally-priced but weaker summarizer (agy's floor: don't degrade the checkpoint);
+     *   - otherwise the session model is used (safe default).
+     */
+    private _resolveCompactionModel;
     /**
      * Install tool hooks once on the Agent instance.
      *