@oh-my-pi/pi-agent-core 18.17.0 → 18.18.1

package/dist/types/compaction/compaction.d.ts

@@ -205,6 +205,8 @@ export declare const AUTO_HANDOFF_THRESHOLD_FOCUS: string;
 export interface SummaryOptions {
     promptOverride?: string;
     extraContext?: string[];
+    /** Additional summary context fetched only when a compaction request consumes it. */
+    loadExtraContext?: () => Promise<string[] | undefined>;
     remoteEndpoint?: string;
     /** Stable system-prompt segments from the live turn, preserved for provider cache reuse. */
     remoteSystemPrompt?: string[];

package/dist/types/types.d.ts

@@ -1132,8 +1132,15 @@ export interface AgentTool<TParameters extends TSchema = TSchema, TDetails = any
      */
     approvalCacheTargets?: (args: unknown) => readonly string[] | undefined;
     /**
-     * Paths a call reads beyond its working directory, matched against restricted folders when it
-     * reports no `approvalCacheTargets`. Unlike cache targets they never key a remembered grant.
+     * Capture per-invocation targets after extension preflight, before final approval and execution.
+     * The coding-agent wrapper calls this once with the final approval args, even without a prompt
+     * or restricted folders. Restriction queries and approval details may then read the binding.
+     */
+    bindApprovalTargets?: (args: unknown) => void;
+    /**
+     * Query paths a call reads beyond its working directory, matched against restricted folders when
+     * it reports no `approvalCacheTargets`. Never capture bindings here: this also runs before preflight.
+     * Unlike cache targets these paths never key a remembered grant.
      */
     approvalRestrictionPaths?: (args: unknown) => readonly string[] | undefined;
     /** The main execution callback for this tool. */

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@oh-my-pi/pi-agent-core",
-	"version": "18.17.0",
+	"version": "18.18.1",
 	"description": "General-purpose agent with transport abstraction, state management, and attachment support",
 	"homepage": "https://omp.sh",
 	"author": {
@@ -38,16 +38,16 @@
 		"fmt": "oxfmt --no-error-on-unmatched-pattern 'src/**/*.{ts,tsx}' '{test,bench,examples,scripts}/**/*.ts' '*.ts'"
 	},
 	"dependencies": {
-		"@oh-my-pi/pi-ai": "18.17.0",
-		"@oh-my-pi/pi-catalog": "18.17.0",
-		"@oh-my-pi/pi-natives": "18.17.0",
-		"@oh-my-pi/pi-utils": "18.17.0",
-		"@oh-my-pi/pi-wire": "18.17.0",
-		"@oh-my-pi/snapcompact": "18.17.0",
+		"@oh-my-pi/pi-ai": "18.18.1",
+		"@oh-my-pi/pi-catalog": "18.18.1",
+		"@oh-my-pi/pi-natives": "18.18.1",
+		"@oh-my-pi/pi-utils": "18.18.1",
+		"@oh-my-pi/pi-wire": "18.18.1",
+		"@oh-my-pi/snapcompact": "18.18.1",
 		"@opentelemetry/api": "^1.9.1"
 	},
 	"devDependencies": {
-		"@oh-my-pi/omptype": "18.17.0",
+		"@oh-my-pi/omptype": "18.18.1",
 		"@opentelemetry/context-async-hooks": "2.9.0",
 		"@opentelemetry/sdk-trace-base": "2.9.0",
 		"@types/bun": "^1.3.14"

package/src/compaction/compaction.ts

@@ -691,6 +691,8 @@ function shouldRetryHandoffWithAutoToolChoice(response: AssistantMessage): boole
 export interface SummaryOptions {
 	promptOverride?: string;
 	extraContext?: string[];
+	/** Additional summary context fetched only when a compaction request consumes it. */
+	loadExtraContext?: () => Promise<string[] | undefined>;
 	remoteEndpoint?: string;
 	/** Stable system-prompt segments from the live turn, preserved for provider cache reuse. */
 	remoteSystemPrompt?: string[];
@@ -1781,6 +1783,14 @@ export async function compact(
 		// an outer retry loop multiplies with the inner one (see SummaryOptions).
 		oneshotRetry: options?.oneshotRetry,
 	};
+	let extraContextLoaded = false;
+	const ensureExtraContext = async (): Promise<void> => {
+		if (extraContextLoaded || !options?.loadExtraContext) return;
+		const context = await options.loadExtraContext();
+		signal?.throwIfAborted();
+		if (context?.length) summaryOptions.extraContext = [...(summaryOptions.extraContext ?? []), ...context];
+		extraContextLoaded = true;
+	};
 
 	// An archive keeps the reasoning policy of the model it was rendered for;
 	// Claude refuses inputs that reproduce reasoning (issue #6093), so a
@@ -2214,6 +2224,7 @@ export async function compact(
 			].filter(files => files.after >= filesDueBefore);
 			if (carried.length > 0) nativeRetainedFiles = carried;
 		}
+		await ensureExtraContext();
 		try {
 			// The live turn's own system prompt, wire tools and transformed
 			// history when the host can build them: kept thinking remains valid
@@ -2274,6 +2285,7 @@ export async function compact(
 	if (!usedRemoteCompaction && nativeCompactionError !== undefined && !summaryOptions.remoteEndpoint) {
 		throw new NativeCompactionError(nativeCompactionError);
 	}
+	if (!usedRemoteCompaction && nativeSummary === undefined) await ensureExtraContext();
 
 	// Generate summaries (can be parallel if both needed) and merge into one
 	let summary: string;
@@ -2332,11 +2344,7 @@ export async function compact(
 
 	const shortSummary = usedRemoteCompaction
 		? "Remote compaction"
-		: await generateShortSummary(recentMessages, summary, model, reserveTokens, apiKey, signal, {
-				...summaryOptions,
-				extraContext: options?.extraContext,
-				thinkingLevel: options?.thinkingLevel,
-			});
+		: await generateShortSummary(recentMessages, summary, model, reserveTokens, apiKey, signal, summaryOptions);
 
 	// Compute file lists and append to summary
 	const { readFiles, modifiedFiles } = snapcompact.computeFileLists(fileOps);

package/src/types.ts

@@ -1276,8 +1276,16 @@ export interface AgentTool<
 	approvalCacheTargets?: (args: unknown) => readonly string[] | undefined;
 
 	/**
-	 * Paths a call reads beyond its working directory, matched against restricted folders when it
-	 * reports no `approvalCacheTargets`. Unlike cache targets they never key a remembered grant.
+	 * Capture per-invocation targets after extension preflight, before final approval and execution.
+	 * The coding-agent wrapper calls this once with the final approval args, even without a prompt
+	 * or restricted folders. Restriction queries and approval details may then read the binding.
+	 */
+	bindApprovalTargets?: (args: unknown) => void;
+
+	/**
+	 * Query paths a call reads beyond its working directory, matched against restricted folders when
+	 * it reports no `approvalCacheTargets`. Never capture bindings here: this also runs before preflight.
+	 * Unlike cache targets these paths never key a remembered grant.
 	 */
 	approvalRestrictionPaths?: (args: unknown) => readonly string[] | undefined;