@oh-my-pi/pi-agent-core 18.17.0 → 18.18.0

package/dist/types/types.d.ts

@@ -1132,8 +1132,15 @@ export interface AgentTool<TParameters extends TSchema = TSchema, TDetails = any
      */
     approvalCacheTargets?: (args: unknown) => readonly string[] | undefined;
     /**
-     * Paths a call reads beyond its working directory, matched against restricted folders when it
-     * reports no `approvalCacheTargets`. Unlike cache targets they never key a remembered grant.
+     * Capture per-invocation targets after extension preflight, before final approval and execution.
+     * The coding-agent wrapper calls this once with the final approval args, even without a prompt
+     * or restricted folders. Restriction queries and approval details may then read the binding.
+     */
+    bindApprovalTargets?: (args: unknown) => void;
+    /**
+     * Query paths a call reads beyond its working directory, matched against restricted folders when
+     * it reports no `approvalCacheTargets`. Never capture bindings here: this also runs before preflight.
+     * Unlike cache targets these paths never key a remembered grant.
      */
     approvalRestrictionPaths?: (args: unknown) => readonly string[] | undefined;
     /** The main execution callback for this tool. */

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@oh-my-pi/pi-agent-core",
-	"version": "18.17.0",
+	"version": "18.18.0",
 	"description": "General-purpose agent with transport abstraction, state management, and attachment support",
 	"homepage": "https://omp.sh",
 	"author": {
@@ -38,16 +38,16 @@
 		"fmt": "oxfmt --no-error-on-unmatched-pattern 'src/**/*.{ts,tsx}' '{test,bench,examples,scripts}/**/*.ts' '*.ts'"
 	},
 	"dependencies": {
-		"@oh-my-pi/pi-ai": "18.17.0",
-		"@oh-my-pi/pi-catalog": "18.17.0",
-		"@oh-my-pi/pi-natives": "18.17.0",
-		"@oh-my-pi/pi-utils": "18.17.0",
-		"@oh-my-pi/pi-wire": "18.17.0",
-		"@oh-my-pi/snapcompact": "18.17.0",
+		"@oh-my-pi/pi-ai": "18.18.0",
+		"@oh-my-pi/pi-catalog": "18.18.0",
+		"@oh-my-pi/pi-natives": "18.18.0",
+		"@oh-my-pi/pi-utils": "18.18.0",
+		"@oh-my-pi/pi-wire": "18.18.0",
+		"@oh-my-pi/snapcompact": "18.18.0",
 		"@opentelemetry/api": "^1.9.1"
 	},
 	"devDependencies": {
-		"@oh-my-pi/omptype": "18.17.0",
+		"@oh-my-pi/omptype": "18.18.0",
 		"@opentelemetry/context-async-hooks": "2.9.0",
 		"@opentelemetry/sdk-trace-base": "2.9.0",
 		"@types/bun": "^1.3.14"

package/src/types.ts

@@ -1276,8 +1276,16 @@ export interface AgentTool<
 	approvalCacheTargets?: (args: unknown) => readonly string[] | undefined;
 
 	/**
-	 * Paths a call reads beyond its working directory, matched against restricted folders when it
-	 * reports no `approvalCacheTargets`. Unlike cache targets they never key a remembered grant.
+	 * Capture per-invocation targets after extension preflight, before final approval and execution.
+	 * The coding-agent wrapper calls this once with the final approval args, even without a prompt
+	 * or restricted folders. Restriction queries and approval details may then read the binding.
+	 */
+	bindApprovalTargets?: (args: unknown) => void;
+
+	/**
+	 * Query paths a call reads beyond its working directory, matched against restricted folders when
+	 * it reports no `approvalCacheTargets`. Never capture bindings here: this also runs before preflight.
+	 * Unlike cache targets these paths never key a remembered grant.
 	 */
 	approvalRestrictionPaths?: (args: unknown) => readonly string[] | undefined;