@piagent/platform 1.15.0 → 1.15.1

package/docs-site/en/windows.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.0 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/windows" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/windows" hreflang="en" lang="en" aria-current="true">EN</a>

package/docs-site/en/workflows.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.0 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/workflows" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/workflows" hreflang="en" lang="en" aria-current="true">EN</a>

package/docs-site/index.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.0 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/" hreflang="en" lang="en">EN</a>
@@ -94,7 +94,7 @@
       <main>
         <div class="content-shell" data-article>
 <section class="hero">
-  <p class="eyebrow">Piagent 1.15.0</p>
+  <p class="eyebrow">Piagent 1.15.1</p>
   <h1>Coding agent cho cả team, kiểm tra từng bước.</h1>
   <p>
     Một dashboard cho Terminal và trình duyệt. Dùng model bằng tài khoản của bạn, hoặc model của công ty qua Agent Watch và Agent Studio. Guard kiểm tra từng tool call; ở chế độ công ty, Harness của team tự yêu cầu chạy check, cho subagent review và báo kết quả ngay dưới câu trả lời.
@@ -108,7 +108,7 @@
   <div class="hero-actions">
     <a class="button primary" href="/quickstart">Bắt đầu</a>
     <a class="button" href="/ecosystem">Hệ sinh thái</a>
-    <a class="button" href="/whats-new">Có gì mới trong 1.15.0</a>
+    <a class="button" href="/whats-new">Có gì mới trong 1.15.1</a>
     <a class="button" href="/commands">Xem command</a>
   </div>
 </section>
@@ -184,9 +184,9 @@ piagent-setup</code></pre>
   <h2 id="bat-dau-tu-dau">Bắt đầu từ đâu</h2>
   <div class="card-grid">
     <a class="doc-card" href="/whats-new">
-      <span class="card-kicker">Bản 1.15.0</span>
+      <span class="card-kicker">Bản 1.15.1</span>
       <h3>Có gì mới</h3>
-      <p>Subagent bị từ chối nói đúng lý do, lệnh chạy lâu không bị dừng; ở 1.14: cập nhật giữ model bạn đã chọn; ở 1.13: cuộc trò chuyện giữ chỗ đang đọc, chữ của agent có định dạng, Piagent trên Windows qua WSL2: sandbox công ty bằng bubblewrap và Agent Watch cho Windows; ở 1.12: @ chọn file và folder trên máy, skill và command dùng bằng /, nhánh cuộc trò chuyện công ty gửi được tin nhắn.</p>
+      <p>Studio thấy mỗi call của model dùng để làm gì, nhiều cuộc trò chuyện trong một folder không nhận nhầm thay đổi của nhau; ở 1.15.0: subagent bị từ chối nói đúng lý do; ở 1.14: cập nhật giữ model bạn đã chọn; ở 1.13: cuộc trò chuyện giữ chỗ đang đọc, chữ của agent có định dạng, Piagent trên Windows qua WSL2: sandbox công ty bằng bubblewrap và Agent Watch cho Windows; ở 1.12: @ chọn file và folder trên máy, skill và command dùng bằng /, nhánh cuộc trò chuyện công ty gửi được tin nhắn.</p>
     </a>
     <a class="doc-card" href="/ecosystem">
       <span class="card-kicker">Get started</span>

package/docs-site/mcp-approval.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.0 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/mcp-approval" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/mcp-approval" hreflang="en" lang="en">EN</a>

package/docs-site/mcp-auth.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.0 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/mcp-auth" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/mcp-auth" hreflang="en" lang="en">EN</a>

package/docs-site/mcp-servers.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.0 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/mcp-servers" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/mcp-servers" hreflang="en" lang="en">EN</a>

package/docs-site/mcp.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.0 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/mcp" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/mcp" hreflang="en" lang="en">EN</a>

package/docs-site/permissions.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.0 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/permissions" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/permissions" hreflang="en" lang="en">EN</a>

package/docs-site/profiles.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.0 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/profiles" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/profiles" hreflang="en" lang="en">EN</a>

package/docs-site/quickstart.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.0 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/quickstart" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/quickstart" hreflang="en" lang="en">EN</a>

package/docs-site/runtime.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.0 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/runtime" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/runtime" hreflang="en" lang="en">EN</a>

package/docs-site/scope.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.0 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/scope" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/scope" hreflang="en" lang="en">EN</a>

package/docs-site/security.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.0 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/security" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/security" hreflang="en" lang="en">EN</a>

package/docs-site/team.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.0 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/team" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/team" hreflang="en" lang="en">EN</a>

package/docs-site/whats-new.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.0 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/whats-new" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/whats-new" hreflang="en" lang="en">EN</a>
@@ -104,6 +104,18 @@
               <h1>Bản 1.9.0: nói việc bằng lời, Harness của team kiểm tra</h1>
               <p>Bỏ task contract và lệnh workflow. Chế độ công ty tự yêu cầu check và review; nút Dừng, lệnh có mạng theo lần duyệt và thẻ duyệt dễ đọc hơn.</p>
             </div>
+<section class="section">
+  <p class="section-kicker">v1.15.1 · 2026-10-07</p>
+  <h2 id="v1-15-1">Studio thấy mỗi call của model dùng để làm gì</h2>
+  <p class="section-lead">Mỗi call model trong phiên công ty báo cho Studio nó dùng để làm gì: trả lời tin nhắn, bước tiếp sau tool (kèm tên tool vừa chạy), lượt harness yêu cầu, tóm tắt hội thoại, subagent nhận việc (kèm tiêu đề một dòng của việc) hoặc tìm web. Không gửi thêm nội dung prompt nào khác. Studio 0.20.0 hiện chúng ở Logs → "Lượt agent".</p>
+  <ul>
+    <li>Nhiều cuộc trò chuyện công ty trong cùng một folder không còn nhận nhầm thay đổi của nhau: check, review và kế hoạch chỉ xét các file chính cuộc trò chuyện đó đã sửa.</li>
+    <li>Cuộc trò chuyện công ty mới không mở được runtime nói rõ lý do, và Lưu trữ hoặc Khởi động lại dùng được mà không cần khởi động lại dashboard.</li>
+    <li><span class="inline-code">mvnw</span>/<span class="inline-code">gradlew</span> tải bị chặn được chỉ sang <span class="inline-code">run_with_network</span>; <span class="inline-code">piagent doctor</span> chạy <span class="inline-code">piagent-doctor</span>.</li>
+  </ul>
+  <p>Cập nhật từ 1.14.x hoặc 1.15.0 không cần nhập lại cấu hình trong Agent Watch.</p>
+</section>
+
 <section class="section">
   <p class="section-kicker">v1.15.0 · 2026-10-07</p>
   <h2 id="v1-15-0">Subagent bị từ chối nói đúng lý do</h2>

package/docs-site/windows.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.0 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/windows" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/windows" hreflang="en" lang="en">EN</a>

package/docs-site/workflows.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.0 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/workflows" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/workflows" hreflang="en" lang="en">EN</a>

package/evals/private-holdout-v1/public-exposure.v2.json

@@ -256,8 +256,8 @@
     },
     {
       "path": "tests",
-      "fileCount": 523,
-      "sha256": "7a915f36ce5d1c156d838eb5bbeba84db83e26fc092b77328006aecf6b53b3b8"
+      "fileCount": 524,
+      "sha256": "905a1c9999775af0f40d20589e23f047bb0ba5974b258cb5d7c2dcb255c56086"
     }
   ],
   "custodianComparisonRules": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@piagent/platform",
-  "version": "1.15.0",
+  "version": "1.15.1",
   "license": "MIT",
   "publishConfig": {
     "access": "public",

package/packages/piagent-core/managed/call-purpose.mjs

@@ -0,0 +1,39 @@
+// What a company model call is for, for Studio's logs (Logs → "Lượt agent"):
+// the kind of call, the tools the answer before it called, and a subagent
+// job's one-line title. No other prompt text leaves in these headers.
+const SUMMARY_PROMPT = 'You are a context summarization assistant';
+const TOOL = /^[a-z0-9_]{1,40}$/;
+const TITLE_CHARS = 100;
+
+// "read:3,bash": the tools of the assistant answer before this call, most
+// used first, at most eight names (an unknown name counts as "other").
+export function afterTools(message) {
+  const counts = new Map();
+  for (const part of message?.role === 'assistant' && Array.isArray(message.content) ? message.content : []) {
+    if (part?.type !== 'toolCall') continue;
+    const name = TOOL.test(String(part.name)) ? part.name : 'other';
+    counts.set(name, (counts.get(name) ?? 0) + 1);
+  }
+  return [...counts].sort((a, b) => b[1] - a[1]).slice(0, 8).map(([name, n]) => n > 1 ? `${name}:${Math.min(n, 9999)}` : name).join(',');
+}
+
+// A subagent job's title: the one the main agent gave, else the brief's
+// first line; one line, at most TITLE_CHARS characters.
+export function jobTitle(task, title) {
+  const line = [title, ...String(task ?? '').split('\n')].map(s => String(s ?? '').replace(/[\p{Cc}\s]+/gu, ' ').trim()).find(Boolean) ?? '';
+  return line.length > TITLE_CHARS ? line.slice(0, TITLE_CHARS - 1).trimEnd() + '…' : line;
+}
+
+// The headers of one call. `owner.nextPurpose` is set by the harness when it
+// sends the main agent back (checks, review findings, a missing plan).
+export function purposeHeaders(owner, runtime, role, context) {
+  const messages = context?.messages ?? [], last = messages.at(-1);
+  let purpose, after = '';
+  if (typeof context?.systemPrompt === 'string' && context.systemPrompt.startsWith(SUMMARY_PROMPT)) purpose = 'summary';
+  else if (last?.role === 'toolResult') { purpose = 'tool_step'; after = afterTools(messages.findLast(m => m.role === 'assistant')); }
+  else if (role !== 'main') purpose = 'brief';
+  else if (owner.nextPurpose === 'harness') { purpose = 'harness'; owner.nextPurpose = null; }
+  else purpose = 'answer';
+  const title = purpose === 'brief' ? owner.jobTitles?.get(runtime) : '';
+  return { 'X-Agent-Purpose': purpose, ...(after ? { 'X-Agent-After': after } : {}), ...(title ? { 'X-Agent-Task': encodeURIComponent(title) } : {}) };
+}

package/packages/piagent-core/managed/helper-roles.mjs

@@ -58,12 +58,16 @@ export const HELPER_SETUP = {
 export function countedCheck(managed, tool) {
   if (tool.name !== 'bash') return tool;
   return { ...tool, execute: async (...args) => {
-    const counted = managed.run && isCheckCommand(args[1]?.command, managed.checks.commands), before = counted ? await managed.digest() : null;
+    // Whether anything in the folder moved during the check (another
+    // conversation's edit too: the suite ran on the whole folder); the check
+    // then counts for this conversation's own code.
+    const folder = async () => { try { return await (managed.folderDigest ?? managed.digest).call(managed); } catch { return null; } };
+    const counted = managed.run && isCheckCommand(args[1]?.command, managed.checks.commands), before = counted ? await folder() : null;
     let ok = false;
     try { const result = await tool.execute(...args); ok = !result?.isError; return result; }
     finally {
-      const after = counted && before !== null ? await managed.digest() : null;
-      if (after !== null && after === before) await managed.run.afterTool('bash', args[1], ok, async () => after);
+      const after = counted && before !== null ? await folder() : null;
+      if (after !== null && after === before) await managed.run.afterTool('bash', args[1], ok, () => managed.digest());
     }
   } };
 }

package/packages/piagent-core/managed/helper-run.mjs

@@ -3,6 +3,7 @@
 // A helper whose company model account is out of usage, or resting after a
 // refusal, starts once more: Studio then gives the new helper the next model
 // of its role that serves (an auto role's list).
+import { jobTitle } from './call-purpose.mjs';
 import { ManagedToolBoundary } from './tool-boundary.mjs';
 import { managedResourceLoader } from './resource-loader.mjs';
 import { shareGrant, releaseGrant } from './grant-share.mjs';
@@ -20,20 +21,20 @@ const textContent = result => result.content?.filter(p => p.type === 'text').map
 const HELPER_SWITCH = new Set(['upstream_rate_limited', 'session_account_not_ready_retry_later', 'session_account_unavailable_start_new_session', 'account_capacity_unavailable', 'execution_capability_unavailable']);
 const HELPER_ATTEMPTS = 2;
 
-export async function runHelper(managed, role, task, signal, harness, { verifyGrant, patiently }) {
+export async function runHelper(managed, role, task, signal, harness, { verifyGrant, patiently, title }) {
   const snapshot = role === 'review' ? await managed.patchSnapshot() : null, parts = snapshot ? reviewParts(snapshot) : null;
   // A helper whose company model account is out of usage, or resting after
   // a refusal, starts once more: Studio then gives the new helper the next
   // model of its role that serves (an auto role's list). Helpers read and
   // run checks only, so starting over repeats no change.
   for (let attempt = 1; ; attempt += 1) {
-    try { return await helperAttempt(managed, role, task, signal, harness, snapshot, parts, { verifyGrant, patiently }); }
+    try { return await helperAttempt(managed, role, task, signal, harness, snapshot, parts, { verifyGrant, patiently, title }); }
     catch (error) {
       if (attempt >= HELPER_ATTEMPTS || signal?.aborted || !HELPER_SWITCH.has(failureCode(error?.message)) || (managed.helperCalls.get(role) ?? 0) >= HELPER_CALLS) throw error;
     }
   }
 }
-async function helperAttempt(managed, role, task, signal, harness, snapshot, parts, { verifyGrant, patiently }) {
+async function helperAttempt(managed, role, task, signal, harness, snapshot, parts, { verifyGrant, patiently, title }) {
   // A long local tool step may outlive the main lease. Refresh authority
   // before asking for a child; the broker serializes concurrent renewals,
   // and main's own searches running beside it share managed renew.
@@ -54,6 +55,8 @@ async function helperAttempt(managed, role, task, signal, harness, snapshot, par
   try {
     const runtime = await managed.api.ModelRuntime.create({ credentials: new managed.ai.InMemoryCredentialStore(), modelsPath: null, refreshOnCreate: false, allowModelNetwork: false });
     const model = managed.installModel(runtime, grant); managed.wrapStreams(runtime, role);
+    // Studio's logs name the job by its title (the brief's first line without one).
+    (managed.jobTitles ??= new WeakMap()).set(runtime, jobTitle(task, title));
     const setup = HELPER_SETUP[role];
     boundary = new ManagedToolBoundary({ cwd: managed.cwd, sdkRoot: managed.sdk, protectedRoots: managed.protectedRoots, readOnly: true, commands: setup.commands });
     const checks = role === 'verify' ? `\n\nRepository checks: ${managed.checks.commands.length ? managed.checks.commands.map(c => '`' + c + '`').join(', ') : 'none declared or detected; choose the tests, type check or build that cover the claims'}.` : '';

package/packages/piagent-core/managed/patch-snapshot.mjs

@@ -1,6 +1,6 @@
 import fs from 'node:fs';
 import path from 'node:path';
-import { createHash } from 'node:crypto';
+import { createHash, randomUUID } from 'node:crypto';
 import { fileURLToPath } from 'node:url';
 
 const quote = value => "'" + value.replaceAll("'", "'\"'\"'") + "'";
@@ -9,8 +9,16 @@ const WORKER = fileURLToPath(new URL('./review-snapshot-worker.mjs', import.meta
 const MAX_SNAPSHOT = 16 * 1024 * 1024;
 
 // The worker runs inside the tool boundary; what it prints is one short line.
-async function worker(boundary, mode) {
-  const result = await boundary.invoke('bash', { command: `${quote(process.execPath)} ${quote(WORKER)} ${mode}`, timeout: 60 });
+// `scope`: only these paths (relative to the project) make the patch.
+async function worker(boundary, mode, scope = null) {
+  let scopeName = null;
+  if (scope) {
+    scopeName = `scope-${randomUUID()}.json`;
+    fs.writeFileSync(path.join(boundary.temporary, scopeName), JSON.stringify([...scope]), { mode: 0o600, flag: 'wx' });
+  }
+  let result;
+  try { result = await boundary.invoke('bash', { command: `${quote(process.execPath)} ${quote(WORKER)} ${mode}${scopeName ? ' ' + scopeName : ''}`, timeout: 60 }); }
+  finally { if (scopeName) fs.rmSync(path.join(boundary.temporary, scopeName), { force: true }); }
   const text = textContent(result).trim();
   if (result.details?.truncation?.truncated || text.includes('\n')) throw Error(/review-(patch|file|untracked)-limit/.exec(text)?.[0] ?? 'managed-review-patch-unreadable');
   const [digest, bytes, name] = text.split(' ');
@@ -20,15 +28,29 @@ async function worker(boundary, mode) {
 
 // The digest of the patch a reviewer would see (diff against HEAD plus
 // untracked files): whether a review is still current. Nothing else moves.
-export async function readPatchDigest(boundary) { return (await worker(boundary, 'digest')).digest; }
+export async function readPatchDigest(boundary, scope = null) { return (await worker(boundary, 'digest', scope)).digest; }
 
 // The patch a reviewer sees, read inside the tool boundary. The worker writes
 // it to the boundary's temporary directory and names it, with its digest, on
 // its output; the file is read once, must match that digest (a file changed
 // meanwhile never passes) and is removed.
-export async function readPatchSnapshot(boundary) {
-  const { digest, bytes, name } = await worker(boundary, 'file');
+export async function readPatchSnapshot(boundary, scope = null) {
+  const { digest, bytes, name } = await worker(boundary, 'file', scope);
   if (!/^review-[0-9a-f-]{36}\.json$/.test(name ?? '')) throw Error('managed-review-patch-unreadable');
+  return { patch: readOnce(boundary, name, bytes, digest).toString('utf8'), digest };
+}
+
+// What each changed or new file of the project holds now: { path: hash }.
+// Compared before and after a command, it names the files that command
+// changed, so a conversation answers for its own changes, not for another
+// conversation's in the same folder.
+export async function readChangedFiles(boundary) {
+  const { digest, bytes, name } = await worker(boundary, 'files');
+  if (!/^files-[0-9a-f-]{36}\.json$/.test(name ?? '')) throw Error('managed-review-patch-unreadable');
+  return new Map(Object.entries(JSON.parse(readOnce(boundary, name, bytes, digest).toString('utf8'))));
+}
+
+function readOnce(boundary, name, bytes, digest) {
   const file = path.join(boundary.temporary, name);
   let data;
   try {
@@ -40,7 +62,7 @@ export async function readPatchSnapshot(boundary) {
     } finally { fs.closeSync(fd); }
   } finally { fs.rmSync(file, { force: true }); }
   if (createHash('sha256').update(data).digest('hex') !== digest) throw Error('managed-review-patch-changed');
-  return { patch: data.toString('utf8'), digest };
+  return data;
 }
 
 // Why a required review could not run, in one word for the member.

package/packages/piagent-core/managed/request-stream.mjs

@@ -9,6 +9,7 @@ import { setTimeout as sleep } from 'node:timers/promises';
 import { describeFailure, failureCode, failureIsAdmissionRefusal, failureIsBriefRefusal, failureReason, unnamedFailureText } from '../runtime/managed-failure.mjs';
 import { CLIENT_AGENT } from './client-agent.mjs';
 import { shareGrant, releaseGrant } from './grant-share.mjs';
+import { purposeHeaders } from './call-purpose.mjs';
 
 // How long one request waits in line for a free company model account.
 const CAPACITY_WAIT_MS = 20 * 60_000;
@@ -25,6 +26,8 @@ export function wrapRoleStreams(owner, runtime, role, { provider, verifyGrant })
     runtime[method] = (model, context, options) => {
       // Tools run between two answers: the count names the answer they came from.
       if (role === 'main') owner.mainAnswers = (owner.mainAnswers ?? 0) + 1;
+      // What this call is for, named once: an ask again after a refusal is the same call.
+      const purpose = purposeHeaders(owner, runtime, role, context);
       const out = owner.ai.createAssistantMessageEventStream(), signal = options?.signal;
       void (async () => {
         let wait = null, noted = false, brief = 0, refused = null, rebinds = 0, share = null;
@@ -59,7 +62,7 @@ export function wrapRoleStreams(owner, runtime, role, { provider, verifyGrant })
             // same company account and prompt cache; a helper names its role.
             const conversation = role === 'main' ? conversationSession(owner) : null;
             const stream = original({ ...model, id: route.native }, context, { ...options, apiKey: grant.token, sessionId: conversation ?? grant.role_id, maxRetries: 0,
-              headers: { ...options?.headers, 'User-Agent': CLIENT_AGENT, 'X-Session-Id': grant.role_id, ...(conversation ? { 'X-Claude-Code-Session-Id': conversation } : {}) } });
+              headers: { ...options?.headers, ...purpose, 'User-Agent': CLIENT_AGENT, 'X-Session-Id': grant.role_id, ...(conversation ? { 'X-Claude-Code-Session-Id': conversation } : {}) } });
             // Whether Studio admitted the request is known at its first event
             // after "start": until then nothing is passed on, so a refused
             // request leaves no trace in the conversation.

package/packages/piagent-core/managed/review-snapshot-worker.mjs

@@ -12,8 +12,33 @@ import { managedGit } from './toolchain.mjs';
 const MAX_SNAPSHOT = 16 * 1024 * 1024, MAX_UNTRACKED = 2000, READ_FILE = 400_000, BINARY_INLINE = 120_000, HASHED_FILE = 256 * 1024 * 1024;
 const git = args => execFileSync(managedGit(), ['--no-pager', ...args], { encoding: 'utf8', maxBuffer: MAX_SNAPSHOT + 1, env: { ...process.env, GIT_TERMINAL_PROMPT: '0', GIT_CONFIG_NOSYSTEM: '1' } });
 const sha256 = data => createHash('sha256').update(data).digest('hex');
-const patch = git(['diff', '--binary', '--no-ext-diff', '--no-textconv', 'HEAD', '--', '.']);
-const paths = git(['ls-files', '--others', '--exclude-standard', '-z']).split('\0').filter(Boolean).sort();
+const mode = process.argv[2];
+// "files": what each changed or new file holds now (a hash, "deleted"), so
+// the runtime can tell which files one conversation's command changed.
+if (mode === 'files') {
+  const changed = git(['diff', '--name-only', '--no-renames', '--relative', '-z', 'HEAD', '--', '.']).split('\0').filter(Boolean);
+  const fresh = git(['ls-files', '--others', '--exclude-standard', '-z']).split('\0').filter(Boolean);
+  if (changed.length + fresh.length > MAX_UNTRACKED * 4) throw Error('review-untracked-limit');
+  const print = name => {
+    let stat; try { stat = fs.lstatSync(name); } catch { return 'deleted'; }
+    if (stat.isSymbolicLink()) return 'link:' + sha256(fs.readlinkSync(name));
+    if (stat.isDirectory()) return 'dir:' + sha256(fs.readdirSync(name).sort().join('\0'));
+    return stat.size > HASHED_FILE ? `size:${stat.size}:${stat.mtimeMs}` : sha256(fs.readFileSync(name)) + ':' + (stat.mode & 0o777);
+  };
+  const files = Object.fromEntries([...new Set([...changed, ...fresh])].sort().map(name => [name, print(name)]));
+  const name = `files-${randomUUID()}.json`, data = Buffer.from(JSON.stringify(files));
+  fs.writeFileSync(path.join(os.tmpdir(), name), data, { mode: 0o600, flag: 'wx' });
+  process.stdout.write(`${sha256(data)} ${data.length} ${name}`);
+  process.exit(0);
+}
+// A scope (a file the runtime wrote in this boundary's temporary directory):
+// only these paths, the ones this conversation changed, make the patch.
+const scopeName = process.argv[3];
+if (scopeName !== undefined && !/^scope-[0-9a-f-]{36}\.json$/.test(scopeName)) throw Error('review-scope-invalid');
+const scope = scopeName ? new Set(JSON.parse(fs.readFileSync(path.join(os.tmpdir(), scopeName), 'utf8'))) : null;
+if (scope && [...scope].some(p => typeof p !== 'string' || !p || path.isAbsolute(p) || p.split('/').includes('..'))) throw Error('review-scope-invalid');
+const patch = scope && !scope.size ? '' : git(['diff', '--binary', '--no-ext-diff', '--no-textconv', '--no-renames', 'HEAD', '--', ...(scope ? [...scope].sort().map(p => ':(literal)' + p) : ['.'])]);
+const paths = git(['ls-files', '--others', '--exclude-standard', '-z']).split('\0').filter(Boolean).filter(p => !scope || scope.has(p)).sort();
 if (paths.length > MAX_UNTRACKED) throw Error('review-untracked-limit');
 const untracked = paths.map(name => {
   const stat = fs.lstatSync(name);
@@ -36,7 +61,6 @@ if (snapshot.length > MAX_SNAPSHOT) throw Error('review-patch-limit');
 // the snapshot goes to a new file in this boundary's temporary directory,
 // named on stdout with its digest; the runtime reads it once, checks the
 // digest and removes it. No argument: the snapshot itself.
-const mode = process.argv[2];
 if (mode === 'digest') process.stdout.write(`${sha256(snapshot)} ${snapshot.length}`);
 else if (mode === 'file') {
   const name = `review-${randomUUID()}.json`;

package/packages/piagent-core/managed/sandbox-diagnostic.mjs

@@ -1,5 +1,8 @@
 const DENIAL = /\b(?:EPERM|EACCES)\b|operation not permitted|permission denied/i;
-const OFFLINE = /ENOTFOUND|EAI_AGAIN|Could not resolve host|getaddrinfo|npm error network|Failed to establish a new connection/i;
+// A download that never left the machine: resolvers, npm/pip, and the curl or
+// wget a build wrapper runs (mvnw/gradlew fetch their distribution: "curl:
+// Failed to fetch https://repo.maven.apache.org/…").
+const OFFLINE = /ENOTFOUND|EAI_AGAIN|Could not resolve host|getaddrinfo|npm error network|Failed to establish a new connection|\bcurl: (?:\(\d+\) )?Failed to (?:fetch|connect)|\bwget: unable to resolve|Unknown host|UnknownHostException/i;
 // `network`: the member approved this command and it ran with network, so a
 // name that does not resolve is the machine's network, not the sandbox.
 // `isolated`: a proxy listens on this Mac, so without approval a command does