@caupulican/pi-adaptative 0.86.17 → 0.90.0

package/CHANGELOG.md

@@ -1,3 +1,38 @@
+## [0.90.0] - 2026-08-11
+
+## [0.89.0] - 2026-08-11
+
+### Fixed
+
+- Kept the Windows Bash tool schema within the provider-context budget without removing its routing contract.
+- Made process-matrix watcher ticks expose their asynchronous completion to deterministic timer drivers.
+
+## [0.88.0] - 2026-08-11
+
+## [0.87.0] - 2026-08-11
+
+### Breaking Changes
+
+- Removed `formatSkillsForPrompt`; skill catalogs are no longer rendered into system prompts. Use the host-owned `skill` vault/tool lifecycle.
+- Provider prompt additions from extensions must use replay-safe `context.transientMessages`; `before_provider_request` now rejects payload growth after request admission.
+
+### Added
+
+- Added autonomous model-blind credential migration from environment variables, dotenv files, and credential/key files into current-project Bitwarden profiles without exposing values; an unavailable TUI vault requests only one masked `BW_SESSION` key before continuing.
+- Added import-free provider-prompt and tool-contract budgets that reject oversized harness prose before it reaches a model.
+- Added provider-only extension context messages that remain outside durable session history and compaction summaries while participating in complete request admission.
+
+### Changed
+
+- Compressed system, tool, worker, recovery, and dynamic provider context while retaining mandatory rules, exact capabilities, security boundaries, and user or skill content.
+- Unified worker status, review, event waits, and profile management under `delegate`; removed `context_audit` and obsolete split delegation tools from the default model surface while retaining `/context` and explicit diagnostics.
+- Changed skill discovery to retain bounded frontmatter only; one compact tool now searches metadata and loads one exact body request-locally, while the host owns monotonic usage, idle expiry, file/profile invalidation, and context-cost reporting.
+
+### Fixed
+
+- Made tool-failure recovery records explicitly mandatory and guaranteed one tool-free user delivery after the recovery circuit opens.
+- Made provider request planning transactional across extensions, memory, goals, active skills, tool projection, and text-only tool protocol; only durable history is compacted, replanned history is adopted by the live loop, and irreducible mandatory envelopes fail explicitly.
+
 ## [0.86.17] - 2026-08-10
 
 ## [0.86.16] - 2026-08-10

package/README.md

@@ -360,7 +360,7 @@ Place in `~/.pi/agent/prompts/`, `.pi/prompts/`, or a [pi package](#pi-packages)
 
 ### Skills
 
-On-demand capability packages following the [Agent Skills standard](https://agentskills.io). Startup prompts list each skill name, description, and lazy-loadable file location so the agent can choose relevant skills without injecting full instructions until it reads the skill or you invoke `/skill:name`.
+On-demand capability packages following the [Agent Skills standard](https://agentskills.io). Startup reads retain bounded frontmatter metadata only. A compact `skill` tool searches that metadata, loads one exact match, then the host injects its body request-locally until idle expiry or unload. Stable prompts contain only the vault rule, never the skill catalog or bodies. `/skill:name` selects a skill explicitly through the same lifecycle.
 
 ```markdown
 <!-- ~/.pi/agent/skills/my-skill/SKILL.md -->

package/dist/bundled-resources/extensions/tmux-agent-manager/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/bundled-resources/extensions/tmux-agent-manager/index.ts"],"names":[],"mappings":"AAMA,OAAO,EACN,KAAK,YAAY,EAIjB,MAAM,2BAA2B,CAAC;AAInC,OAAO,EAmBN,KAAK,QAAQ,EAEb,MAAM,qBAAqB,CAAC;AAE7B,eAAO,MAAM,QAAQ;IAAK,KAAK;CAA0B,CAAC;AAsG1D,KAAK,WAAW,GAAG;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AACF,KAAK,aAAa,GAAG;IAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC;AACtF,KAAK,aAAa,GAAG;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,0GAA0G;IAC1G,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qGAAqG;IACrG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;yGACqG;IACrG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;4GACwG;IACxG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,yBAAyB,CAAC,EAAE,gBAAgB,GAAG,yBAAyB,GAAG,iBAAiB,CAAC;IAC7F,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AACF,KAAK,YAAY,GAAG;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,iGAAiG;IACjG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qKAAqK;IACrK,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8GAA8G;IAC9G,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AACF;;gFAEgF;AAChF,KAAK,kBAAkB,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,GAAG,aAAa,GAAG,iBAAiB,GAAG,QAAQ,CAAC,CAAC;AA2KlG,wBAAgB,2BAA2B,IAAI,MAAM,CAQpD;AA8YD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,kBAAkB,GAAG,MAAM,CA4GrE;AAmpCD,MAAM,CAAC,OAAO,UAAU,yBAAyB,CAAC,EAAE,EAAE,YAAY,QAoWjE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/bundled-resources/extensions/tmux-agent-manager/index.ts"],"names":[],"mappings":"AAMA,OAAO,EACN,KAAK,YAAY,EAIjB,MAAM,2BAA2B,CAAC;AAInC,OAAO,EAmBN,KAAK,QAAQ,EAEb,MAAM,qBAAqB,CAAC;AAE7B,eAAO,MAAM,QAAQ;IAAK,KAAK;CAA0B,CAAC;AAsG1D,KAAK,WAAW,GAAG;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AACF,KAAK,aAAa,GAAG;IAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC;AACtF,KAAK,aAAa,GAAG;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,0GAA0G;IAC1G,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qGAAqG;IACrG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;yGACqG;IACrG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;4GACwG;IACxG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,yBAAyB,CAAC,EAAE,gBAAgB,GAAG,yBAAyB,GAAG,iBAAiB,CAAC;IAC7F,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AACF,KAAK,YAAY,GAAG;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,iGAAiG;IACjG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qKAAqK;IACrK,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8GAA8G;IAC9G,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AACF;;gFAEgF;AAChF,KAAK,kBAAkB,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,GAAG,aAAa,GAAG,iBAAiB,GAAG,QAAQ,CAAC,CAAC;AA2KlG,wBAAgB,2BAA2B,IAAI,MAAM,CAQpD;AA8YD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,kBAAkB,GAAG,MAAM,CA4GrE;AAmpCD,MAAM,CAAC,OAAO,UAAU,yBAAyB,CAAC,EAAE,EAAE,YAAY,QAkWjE"}

package/dist/bundled-resources/extensions/tmux-agent-manager/index.js

@@ -1893,22 +1893,21 @@ export default function tmuxAgentManagerExtension(pi) {
         name: "tmux_agent_manager",
         label: "tmux Agent Manager",
         description: "Specialized tmux-backed interactive provider/workspace manager. Native delegate is the standard cross-platform subagent path. Use this tool only when the owner explicitly requests persistent interactive CLI panes and tmux is available.",
-        promptSnippet: "Use native delegate for ordinary subagents. Use tmux only for owner-requested persistent interactive provider panes after action=guard confirms availability.",
+        promptSnippet: "tmux interactive panes only by owner request after guard; ordinary agents use native delegate.",
         promptGuidelines: [
-            "Use native delegate/delegate_status for ordinary subagent work on every OS. Use tmux_agent_manager only when the owner explicitly requests persistent interactive provider panes and action=guard confirms tmux is available.",
-            "On native Windows, do not attempt tmux dispatch. Native delegate is the supported backend; WSL may use tmux only when installed and explicitly requested.",
-            "Never create or edit orchestration profiles during dispatch; native delegation's owner-configured profile resolver is authoritative.",
-            "Prefer action=fire_task for interactive worker batches. It returns after event watchers and prompts are armed; do not wait, poll, or peek for completion.",
-            "Use action=list_templates/show_template before assembling repeated teams; pass teamTemplate when a built-in team fits.",
-            "Use action=workspace_plan before launch_workspace when designing a pane layout.",
-            "Use action=send_followup to re-inject a new prompt into a live fire_task job's pane mid-run, without relaunching. It re-arms the completion watcher for a fresh turn and reuses the same event-driven handoff.",
-            "Use action=dismiss to stop tracking a job without killing its tmux session; the pane keeps running and can still be attached to or stopped later with stop_job/stop_session.",
-            "Use stop_job/stop_session dry-run first, then confirm=yes-tmux-stop for real cleanup.",
-            "Do not put secrets in task text or command strings; prompts, commands, and logs persist under ~/.pi/agent/work/background/tmux-agent-manager/state/jobs.",
-            "tmux display/status actions are metadata only; validate worker result/log files before claiming task completion.",
-            "fire_task and send_followup are APPROVAL-GATED: a real (non-dryRun) dispatch needs either a standing grant (action=grant_dispatch, once per session/goal) or a one-shot interactive approval. With no grant and no UI available, the dispatch is refused, never silent — run grant_dispatch first.",
-            "Use action=grant_dispatch to authorize repeated unattended dispatch: set agent, maxLaunches, and optionally goalId/allowedTools/resourceProfile/writePaths/expiresInMinutes. Requires interactive confirmation, or the --allow-tmux-dispatch flag when no UI is available. Use action=revoke_grant to end it early.",
-            "A grant-covered pi child launches with a RESTRICTED profile (--tools/--resource-profile or --no-extensions --no-skills, plus a scoped --append-system-prompt naming the grant and its hard stops) — the envelope lives in the CHILD's own launch config, not an in-process sandbox. Non-pi agents (agy/claude/codex/opencode/custom) are bounded by the grant at launch only; their internal tool loop is that CLI's own responsibility.",
+            "Ordinary agents: delegate. tmux only owner-requested panes after guard; never native Windows.",
+            "WSL tmux only if installed/requested. Never edit profiles during dispatch; native resolver owns them.",
+            "fire_task starts batch, returns after watcher armed; never wait/poll/peek.",
+            "Teams: list/show_template, teamTemplate. Layout: workspace_plan, then launch_workspace.",
+            "send_followup prompts live pane/re-arms watcher; no relaunch. dismiss stops tracking, not session.",
+            "Cleanup: stop_job/stop_session dryRun, then confirm=yes-tmux-stop.",
+            "No secrets in task/command; all persist: ~/.pi/agent/work/background/tmux-agent-manager/state/jobs.",
+            "Display/status metadata only; verify result/log before completion claim.",
+            "Real fire_task/send_followup needs grant or one-shot UI approval. No grant/UI: refused; run grant_dispatch.",
+            "grant_dispatch: agent,maxLaunches; optional goalId,allowedTools,resourceProfile,writePaths,expiresInMinutes.",
+            "Grant needs UI confirmation, or --allow-tmux-dispatch without UI; revoke_grant ends it.",
+            "Pi child: restricted tools/resource profile or no extensions/skills, scoped hard-stop prompt; launch config holds grant.",
+            "Non-pi CLI grant applies at launch only; tool loop is CLI-owned.",
         ],
         parameters: Type.Object({
             action: Type.Optional(Type.Union([