@erichll/pi-auto-review 0.18.3 → 0.19.0

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 0.19.0 - 2026-09-20
+
+- Require Pi `^0.86.0` for both the development and peer dependency of
+  `@earendil-works/pi-ai` and `@earendil-works/pi-coding-agent`.
+- Migrate the reviewer model call to Pi 0.86's normalized `TranscriptContext`:
+  a registered provider `streamSimple` (models.json or extension-registered
+  custom providers) now receives `normalizeContext(...)` so the reviewer system
+  prompt and tool declarations arrive as the transcript's leading system
+  message. Before this change such providers read the removed
+  `context.systemPrompt`/`context.tools` and silently reviewed with a fallback
+  system prompt and no tools.
+- Read the normalized transcript in the authorizer integration tests
+  (`getCurrentSystemPrompt` plus the last user message) and assert the leading
+  system message, so the fake `streamSimple` observes the same shape the real
+  provider adapters receive.
+
 ## 0.18.3 - 2026-09-20
 
 - Move the `@gotgenes/pi-permission-system` development dependency to

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erichll/pi-auto-review",
-  "version": "0.18.3",
+  "version": "0.19.0",
   "description": "Fail-closed, model-backed approval broker for Pi: deterministically hard-denies dangerous operations, reviews dangerous boundaries with a reviewer model, and issues one-shot expiring grants that OS sandbox adapters must consume before retrying.",
   "type": "module",
   "license": "MIT",
@@ -47,14 +47,14 @@
     "test": "node --disable-warning=ExperimentalWarning --experimental-transform-types --import ./test/register-external-ts.mjs --test test/*.test.ts"
   },
   "peerDependencies": {
-    "@earendil-works/pi-ai": "^0.85.0",
-    "@earendil-works/pi-coding-agent": "^0.85.0",
+    "@earendil-works/pi-ai": "^0.86.0",
+    "@earendil-works/pi-coding-agent": "^0.86.0",
     "@gotgenes/pi-permission-system": ">=30.0.0"
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "^0.85.1",
-    "@earendil-works/pi-coding-agent": "^0.85.1",
-    "@earendil-works/pi-server": "^0.85.1",
+    "@earendil-works/pi-ai": "^0.86.0",
+    "@earendil-works/pi-coding-agent": "^0.86.0",
+    "@earendil-works/pi-server": "^0.86.0",
     "@gotgenes/pi-permission-system": "^33.0.1",
     "@types/node": "^26.2.0",
     "typescript": "^6.0.3"

package/src/review/provider.ts

@@ -1,6 +1,6 @@
 import { createHash } from "node:crypto";
 import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
-import { completeSimple } from "@earendil-works/pi-ai/compat";
+import { completeSimple, normalizeContext } from "@earendil-works/pi-ai/compat";
 import type { BoundaryRequest } from "../broker/index.ts";
 import type { UserReviewUsage } from "../user-feedback.ts";
 import type {
@@ -572,8 +572,17 @@ export async function modelCall(
       metadata.retryAfterMs = parseRetryAfterMs(response.headers);
     },
   };
+  // 0.86 moved the provider-facing request to a normalized transcript: the
+  // system prompt and tool declarations now travel as the transcript's leading
+  // system message. Providers registered by extensions receive that shape, so
+  // normalize before calling a registered streamSimple. completeSimple still
+  // accepts a Context and normalizes internally.
   return (runtime.streamSimple
-    ? await runtime.streamSimple(runtime.model, context, options).result()
+    ? await runtime.streamSimple(
+        runtime.model,
+        normalizeContext(context),
+        options,
+      ).result()
     : await completeSimple(runtime.model, context, options)) as CompletionMessage;
 }