@oh-my-pi/pi-agent-core 15.8.0 → 15.8.3

package/CHANGELOG.md

@@ -2,6 +2,22 @@
 
 ## [Unreleased]
 
+## [15.8.3] - 2026-06-03
+### Added
+
+- Added `getReadToolPath(context)` to `@oh-my-pi/pi-agent-core/compaction/tool-protection` to extract a paired `read` tool call's `path` for embedders building read-targeted protection matchers
+- Added `getReadToolPath(context)` to `@oh-my-pi/pi-agent-core/compaction/tool-protection`: the shared primitive that extracts a paired `read` tool call's `path` argument, so embedders can build their own read-targeted compaction protection matchers (e.g. plan-file reads) the same way `isSkillReadToolResult` does.
+
+## [15.8.2] - 2026-06-03
+
+### Added
+
+- Added optional `AgentTool.matcherDigest(args)` hook: tools whose streamed arguments encode content in a wire grammar (patch formats, escaped strings) can expose the real content they introduce, so stream-content matchers (e.g. TTSR rules) run against plain source text instead of the wire format.
+
+### Fixed
+
+- Fixed the agent loop wedging the model when a `write`/`edit` tool call is truncated by `stop_reason: length` (e.g. an OpenCode Zen / Claude-3.5-Haiku turn that emits >~1000 lines of code, blowing past the 8K `max_tokens` output cap). The skipped tool result now surfaces an actionable hint — naming `stop_reason: length` and telling the model to split the payload into multiple smaller calls — instead of the generic "Tool call was not executed because the assistant ended its turn" placeholder, which left the auto-continue loop re-emitting the same oversized payload until the user gave up. Tools are still NOT executed when the arguments are truncated. ([#1785](https://github.com/can1357/oh-my-pi/issues/1785))
+
 ## [15.8.0] - 2026-06-02
 
 ### Fixed
@@ -551,4 +567,4 @@ Initial release under @oh-my-pi scope. See previous releases at [badlogic/pi-mon
 
 - `Agent` constructor now has all options optional (empty options use defaults).
 
-- `queueMessage()` is now synchronous (no longer returns a Promise).
+- `queueMessage()` is now synchronous (no longer returns a Promise).

package/dist/types/compaction/tool-protection.d.ts

@@ -7,5 +7,11 @@ export interface ProtectedToolContext {
 }
 export type ProtectedToolMatcher = string | ((context: ProtectedToolContext) => boolean);
 export declare function collectToolCallsById(entries: readonly SessionEntry[]): Map<string, AgentToolCall>;
-export declare function isSkillReadToolResult({ toolResult, toolCall }: ProtectedToolContext): boolean;
+/**
+ * Extract the `path` argument from a paired `read` tool call, when the result
+ * is a `read` result carrying a string path. Returns `undefined` otherwise.
+ * Shared primitive for read-targeted protection matchers (skills, plans, …).
+ */
+export declare function getReadToolPath({ toolResult, toolCall }: ProtectedToolContext): string | undefined;
+export declare function isSkillReadToolResult(context: ProtectedToolContext): boolean;
 export declare function isProtectedToolResult(toolResult: ToolResultMessage, toolCall: AgentToolCall | undefined, matchers: readonly ProtectedToolMatcher[]): boolean;

package/dist/types/types.d.ts

@@ -370,6 +370,14 @@ export interface AgentTool<TParameters extends TSchema = TSchema, TDetails = any
      * - function: `_i` is NOT injected; intent is derived dynamically from (potentially partial / streaming) args.
      */
     intent?: "omit" | "optional" | "require" | ((args: Partial<Static<TParameters>>) => string | undefined);
+    /**
+     * Normalize (potentially partial) streamed arguments into the plain text that
+     * stream-content matchers (e.g. TTSR rules) should inspect — the real content
+     * the call introduces, without wire grammar such as patch prefixes or JSON
+     * string escaping. Return `undefined` to fall back to raw argument-delta
+     * matching.
+     */
+    matcherDigest?: (args: unknown) => string | undefined;
     /** Capability tier declaration used by approval gates. Omitted means "exec". */
     approval?: ToolApproval;
     /** Lines appended after the standard approval prompt header. */

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@oh-my-pi/pi-agent-core",
-	"version": "15.8.0",
+	"version": "15.8.3",
 	"description": "General-purpose agent with transport abstraction, state management, and attachment support",
 	"homepage": "https://omp.sh",
 	"author": "Can Boluk",
@@ -35,9 +35,9 @@
 		"fmt": "biome format --write ."
 	},
 	"dependencies": {
-		"@oh-my-pi/pi-ai": "15.8.0",
-		"@oh-my-pi/pi-natives": "15.8.0",
-		"@oh-my-pi/pi-utils": "15.8.0",
+		"@oh-my-pi/pi-ai": "15.8.3",
+		"@oh-my-pi/pi-natives": "15.8.3",
+		"@oh-my-pi/pi-utils": "15.8.3",
 		"@opentelemetry/api": "^1.9.1"
 	},
 	"devDependencies": {

package/src/agent-loop.ts

@@ -627,9 +627,12 @@ async function runLoopBody(
 				// toolCall blocks behind. The trailing call's arguments may be incomplete,
 				// so don't execute or continue — pair each with a placeholder result to keep
 				// the tool_use/tool_result contract valid for any later request that
-				// replays this turn.
+				// replays this turn. When the truncation was `length`, surface an actionable
+				// hint so the model doesn't loop by re-emitting the same oversized payload
+				// (e.g. 1000+ line `write` content blowing past the model's output cap).
+				const skipReason = message.stopReason === "length" ? "length" : "skipped";
 				for (const toolCall of toolCalls) {
-					const result = createAbortedToolResult(toolCall, stream, "skipped");
+					const result = createAbortedToolResult(toolCall, stream, skipReason);
 					currentContext.messages.push(result);
 					newMessages.push(result);
 					toolResults.push(result);
@@ -1360,15 +1363,17 @@ async function executeToolCalls(
 function createAbortedToolResult(
 	toolCall: Extract<AssistantMessage["content"][number], { type: "toolCall" }>,
 	stream: EventStream<AgentEvent, AgentMessage[]>,
-	reason: "aborted" | "error" | "skipped",
+	reason: "aborted" | "error" | "skipped" | "length",
 	errorMessage?: string,
 ): ToolResultMessage {
 	const message =
 		reason === "aborted"
 			? "Tool execution was aborted"
-			: reason === "skipped"
-				? "Tool call was not executed because the assistant ended its turn"
-				: "Tool execution failed due to an error";
+			: reason === "length"
+				? "Tool call was not executed because the assistant hit its output token limit (stop_reason: length) before the arguments could complete; the recorded arguments are truncated and unsafe to run. Do NOT retry by re-emitting the same large payload — split the work into several smaller tool calls (e.g. for `write`/`edit`, write the first chunk then append the rest with subsequent `edit` insert ops, or break the file into multiple `write` targets)"
+				: reason === "skipped"
+					? "Tool call was not executed because the assistant ended its turn"
+					: "Tool execution failed due to an error";
 	const result: AgentToolResult<any> = {
 		content: [{ type: "text", text: errorMessage ? `${message}: ${errorMessage}` : `${message}.` }],
 		details: {},

package/src/compaction/tool-protection.ts

@@ -24,10 +24,19 @@ export function collectToolCallsById(entries: readonly SessionEntry[]): Map<stri
 	return toolCalls;
 }
 
-export function isSkillReadToolResult({ toolResult, toolCall }: ProtectedToolContext): boolean {
-	if (toolResult.toolName !== "read" || toolCall?.name !== "read") return false;
+/**
+ * Extract the `path` argument from a paired `read` tool call, when the result
+ * is a `read` result carrying a string path. Returns `undefined` otherwise.
+ * Shared primitive for read-targeted protection matchers (skills, plans, …).
+ */
+export function getReadToolPath({ toolResult, toolCall }: ProtectedToolContext): string | undefined {
+	if (toolResult.toolName !== "read" || toolCall?.name !== "read") return undefined;
 	const path = (toolCall.arguments as Record<string, unknown>).path;
-	return typeof path === "string" && path.startsWith(SKILL_INTERNAL_URL_PREFIX);
+	return typeof path === "string" ? path : undefined;
+}
+
+export function isSkillReadToolResult(context: ProtectedToolContext): boolean {
+	return getReadToolPath(context)?.startsWith(SKILL_INTERNAL_URL_PREFIX) ?? false;
 }
 
 export function isProtectedToolResult(

package/src/types.ts

@@ -441,6 +441,15 @@ export interface AgentTool<TParameters extends TSchema = TSchema, TDetails = any
 	 */
 	intent?: "omit" | "optional" | "require" | ((args: Partial<Static<TParameters>>) => string | undefined);
 
+	/**
+	 * Normalize (potentially partial) streamed arguments into the plain text that
+	 * stream-content matchers (e.g. TTSR rules) should inspect — the real content
+	 * the call introduces, without wire grammar such as patch prefixes or JSON
+	 * string escaping. Return `undefined` to fall back to raw argument-delta
+	 * matching.
+	 */
+	matcherDigest?: (args: unknown) => string | undefined;
+
 	/** Capability tier declaration used by approval gates. Omitted means "exec". */
 	approval?: ToolApproval;