@piagent/platform 1.15.1 → 1.16.0

package/docs-site/en/team.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.16.0 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/team" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/team" hreflang="en" lang="en" aria-current="true">EN</a>

package/docs-site/en/whats-new.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.16.0 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/whats-new" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/whats-new" hreflang="en" lang="en" aria-current="true">EN</a>
@@ -104,6 +104,28 @@
               <h1>1.9.0: ask in plain language, the team's Harness checks</h1>
               <p>The task contract and workflow commands are gone. Company mode asks for checks and a review on its own; Stop, network commands on approval and clearer approval cards.</p>
             </div>
+<section class="section">
+  <p class="section-kicker">v1.16.0 · 2026-10-07</p>
+  <h2 id="v1-16-0">Bypass for company conversations</h2>
+  <p class="section-lead">Choose <strong>Bypass</strong> in the new-chat options or the conversation header ("Ask first" stays the default). Commands that need the internet (package installs, downloads, git pull, tests with a server or browser) run without asking. You are still asked before anything that pushes or sends data out (git push, publish, deploy, uploads, ssh), database migrations, deletes with an unknown target, and sudo.</p>
+  <ul>
+    <li>A helper the company Harness adds while you work is available from your next message, without a new conversation. With Studio 0.20.1 a running turn is not stopped when the Harness is saved.</li>
+    <li>Personal sessions with full access no longer ask before a broad <span class="inline-code">git add</span>; deletes, migrations and external actions are still asked.</li>
+  </ul>
+  <p>Updating from 1.15.x needs no re-import in Agent Watch.</p>
+</section>
+
+<section class="section">
+  <p class="section-kicker">v1.15.2 · 2026-10-07</p>
+  <h2 id="v1-15-2">Long company conversations shrink again, earlier</h2>
+  <p class="section-lead">A long company conversation's summary carried the provider's placeholder key instead of the run's grant, so Studio refused it (401 <span class="inline-code">authentication_required</span>, "Chưa chọn tài khoản" / "CLI trực tiếp" in the request monitor) before every step and the conversation kept growing. Summaries now use the run's grant, and Studio logs them as <span class="inline-code">summary</span>.</p>
+  <ul>
+    <li>A conversation is summarised at 90% of the model's window and never later than 300k tokens: 244.8k on a 272k GPT window (prices double above 272k), 300k on a 1M-token window instead of about 984k. About the last 20k tokens stay word for word.</li>
+    <li>A summary that fails is asked again after 1, 2, 4 … minutes (at most 30) instead of before every step.</li>
+  </ul>
+  <p>Updating from 1.15.x needs no re-import in Agent Watch.</p>
+</section>
+
 <section class="section">
   <p class="section-kicker">v1.15.1 · 2026-10-07</p>
   <h2 id="v1-15-1">Studio sees what each model call is for</h2>

package/docs-site/en/windows.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.16.0 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/windows" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/windows" hreflang="en" lang="en" aria-current="true">EN</a>

package/docs-site/en/workflows.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · EN</span>
+        <span class="pill"><span class="pill-dot"></span>v1.16.0 docs · EN</span>
         <nav class="language-switch" aria-label="Language">
           <a class="language-option" href="/workflows" hreflang="vi" lang="vi">VI</a>
           <a class="language-option current" href="/en/workflows" hreflang="en" lang="en" aria-current="true">EN</a>

package/docs-site/index.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.16.0 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/" hreflang="en" lang="en">EN</a>
@@ -94,7 +94,7 @@
       <main>
         <div class="content-shell" data-article>
 <section class="hero">
-  <p class="eyebrow">Piagent 1.15.1</p>
+  <p class="eyebrow">Piagent 1.16.0</p>
   <h1>Coding agent cho cả team, kiểm tra từng bước.</h1>
   <p>
     Một dashboard cho Terminal và trình duyệt. Dùng model bằng tài khoản của bạn, hoặc model của công ty qua Agent Watch và Agent Studio. Guard kiểm tra từng tool call; ở chế độ công ty, Harness của team tự yêu cầu chạy check, cho subagent review và báo kết quả ngay dưới câu trả lời.
@@ -108,7 +108,7 @@
   <div class="hero-actions">
     <a class="button primary" href="/quickstart">Bắt đầu</a>
     <a class="button" href="/ecosystem">Hệ sinh thái</a>
-    <a class="button" href="/whats-new">Có gì mới trong 1.15.1</a>
+    <a class="button" href="/whats-new">Có gì mới trong 1.16.0</a>
     <a class="button" href="/commands">Xem command</a>
   </div>
 </section>
@@ -184,9 +184,9 @@ piagent-setup</code></pre>
   <h2 id="bat-dau-tu-dau">Bắt đầu từ đâu</h2>
   <div class="card-grid">
     <a class="doc-card" href="/whats-new">
-      <span class="card-kicker">Bản 1.15.1</span>
+      <span class="card-kicker">Bản 1.16.0</span>
       <h3>Có gì mới</h3>
-      <p>Studio thấy mỗi call của model dùng để làm gì, nhiều cuộc trò chuyện trong một folder không nhận nhầm thay đổi của nhau; ở 1.15.0: subagent bị từ chối nói đúng lý do; ở 1.14: cập nhật giữ model bạn đã chọn; ở 1.13: cuộc trò chuyện giữ chỗ đang đọc, chữ của agent có định dạng, Piagent trên Windows qua WSL2: sandbox công ty bằng bubblewrap và Agent Watch cho Windows; ở 1.12: @ chọn file và folder trên máy, skill và command dùng bằng /, nhánh cuộc trò chuyện công ty gửi được tin nhắn.</p>
+      <p>Bypass cho cuộc trò chuyện công ty, đổi Harness không làm gián đoạn; ở 1.15.2: cuộc trò chuyện dài tự thu gọn trở lại; ở 1.15.1: Studio thấy mỗi call của model dùng để làm gì, nhiều cuộc trò chuyện trong một folder không nhận nhầm thay đổi của nhau; ở 1.15.0: subagent bị từ chối nói đúng lý do; ở 1.14: cập nhật giữ model bạn đã chọn; ở 1.13: cuộc trò chuyện giữ chỗ đang đọc, chữ của agent có định dạng, Piagent trên Windows qua WSL2: sandbox công ty bằng bubblewrap và Agent Watch cho Windows; ở 1.12: @ chọn file và folder trên máy, skill và command dùng bằng /, nhánh cuộc trò chuyện công ty gửi được tin nhắn.</p>
     </a>
     <a class="doc-card" href="/ecosystem">
       <span class="card-kicker">Get started</span>

package/docs-site/mcp-approval.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.16.0 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/mcp-approval" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/mcp-approval" hreflang="en" lang="en">EN</a>

package/docs-site/mcp-auth.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.16.0 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/mcp-auth" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/mcp-auth" hreflang="en" lang="en">EN</a>

package/docs-site/mcp-servers.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.16.0 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/mcp-servers" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/mcp-servers" hreflang="en" lang="en">EN</a>

package/docs-site/mcp.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.16.0 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/mcp" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/mcp" hreflang="en" lang="en">EN</a>

package/docs-site/permissions.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.16.0 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/permissions" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/permissions" hreflang="en" lang="en">EN</a>

package/docs-site/profiles.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.16.0 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/profiles" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/profiles" hreflang="en" lang="en">EN</a>

package/docs-site/quickstart.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.16.0 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/quickstart" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/quickstart" hreflang="en" lang="en">EN</a>

package/docs-site/runtime.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.16.0 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/runtime" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/runtime" hreflang="en" lang="en">EN</a>

package/docs-site/scope.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.16.0 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/scope" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/scope" hreflang="en" lang="en">EN</a>

package/docs-site/security.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.16.0 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/security" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/security" hreflang="en" lang="en">EN</a>

package/docs-site/team.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.16.0 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/team" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/team" hreflang="en" lang="en">EN</a>

package/docs-site/whats-new.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.16.0 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/whats-new" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/whats-new" hreflang="en" lang="en">EN</a>
@@ -104,6 +104,28 @@
               <h1>Bản 1.9.0: nói việc bằng lời, Harness của team kiểm tra</h1>
               <p>Bỏ task contract và lệnh workflow. Chế độ công ty tự yêu cầu check và review; nút Dừng, lệnh có mạng theo lần duyệt và thẻ duyệt dễ đọc hơn.</p>
             </div>
+<section class="section">
+  <p class="section-kicker">v1.16.0 · 2026-10-07</p>
+  <h2 id="v1-16-0">Bypass cho cuộc trò chuyện công ty</h2>
+  <p class="section-lead">Chọn <strong>Bypass</strong> trong tùy chọn cuộc trò chuyện mới hoặc trên thanh đầu cuộc trò chuyện ("Hỏi trước" vẫn là mặc định). Lệnh cần internet (cài package, tải file, git pull, test có server hay browser) chạy luôn, không hỏi. Vẫn hỏi trước khi đẩy hoặc gửi dữ liệu ra ngoài (git push, publish, deploy, upload, ssh), chạy migration database, xóa mà không rõ đích hoặc dùng sudo.</p>
+  <ul>
+    <li>Harness công ty thêm subagent trong lúc bạn đang làm: dùng được ngay từ tin nhắn kế tiếp, không cần mở cuộc trò chuyện mới. Với Studio 0.20.1, lượt đang chạy không bị dừng khi Harness được lưu.</li>
+    <li>Phiên cá nhân "Toàn quyền" không còn hỏi trước <span class="inline-code">git add</span> toàn bộ; xóa, migration và thao tác ra ngoài vẫn hỏi.</li>
+  </ul>
+  <p>Cập nhật từ 1.15.x không cần nhập lại cấu hình trong Agent Watch.</p>
+</section>
+
+<section class="section">
+  <p class="section-kicker">v1.15.2 · 2026-10-07</p>
+  <h2 id="v1-15-2">Cuộc trò chuyện công ty dài tự thu gọn trở lại, và sớm hơn</h2>
+  <p class="section-lead">Tóm tắt hội thoại dài ở chế độ công ty gửi nhầm key giữ chỗ thay vì quyền của lượt chạy, nên Studio từ chối (401 <span class="inline-code">authentication_required</span>, hiện là "Chưa chọn tài khoản" / "CLI trực tiếp" trong theo dõi request) trước mỗi bước và hội thoại cứ dài thêm. Giờ tóm tắt dùng quyền của lượt chạy và Studio ghi là <span class="inline-code">summary</span>.</p>
+  <ul>
+    <li>Hội thoại được tóm tắt khi đạt 90% cửa sổ của model và muộn nhất ở 300k token: 244,8k với GPT 272k (giá gấp đôi trên 272k), 300k với model 1M thay vì khoảng 984k. Khoảng 20k token gần nhất vẫn giữ nguyên văn.</li>
+    <li>Tóm tắt bị lỗi được thử lại sau 1, 2, 4 … phút (tối đa 30) thay vì trước mỗi bước.</li>
+  </ul>
+  <p>Cập nhật từ 1.15.x không cần nhập lại cấu hình trong Agent Watch.</p>
+</section>
+
 <section class="section">
   <p class="section-kicker">v1.15.1 · 2026-10-07</p>
   <h2 id="v1-15-1">Studio thấy mỗi call của model dùng để làm gì</h2>

package/docs-site/windows.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.16.0 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/windows" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/windows" hreflang="en" lang="en">EN</a>

package/docs-site/workflows.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.15.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.16.0 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/workflows" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/workflows" hreflang="en" lang="en">EN</a>

package/evals/private-holdout-v1/public-exposure.v2.json

@@ -256,8 +256,8 @@
     },
     {
       "path": "tests",
-      "fileCount": 524,
-      "sha256": "905a1c9999775af0f40d20589e23f047bb0ba5974b258cb5d7c2dcb255c56086"
+      "fileCount": 525,
+      "sha256": "88975f723534cb5aa9f8755c8d6694c2371baecb79c0fc4baf83f066a44f9375"
     }
   ],
   "custodianComparisonRules": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@piagent/platform",
-  "version": "1.15.1",
+  "version": "1.16.0",
   "license": "MIT",
   "publishConfig": {
     "access": "public",

package/packages/piagent-core/extensions/piagent-guard.ts

@@ -547,6 +547,9 @@ function verifyProjectCapabilityState(
   }
 }
 
+// Exec-policy prompts a full-access session does not show: local, reversible.
+const FULL_ACCESS_SKIPPED_PROMPTS = ["prompt-git-add-broad"];
+
 function evaluateExecPolicy(command: string, profile: ProjectProfile, policy: BasePolicy): {
   mode: RuntimePolicySettings["execPolicy"];
   decision: "allow" | "prompt" | "forbid";
@@ -3953,7 +3956,11 @@ export default function piagentGuard(pi: ExtensionAPI) {
         return { block: true, reason: unresolvedExpansionReason("Command", unresolvedExpansions) };
       }
 
-      const confirmationReasons = execDecision.mode !== "off" && execDecision.decision === "prompt" ? [...execDecision.reasons] : [];
+      // Full access skips the prompts for local, reversible steps; deletes,
+      // migrations and anything sent outside this machine are still asked.
+      const confirmationReasons = (execDecision.mode !== "off" && execDecision.decision === "prompt" ? [...execDecision.reasons] : [])
+        .filter((reason) => permissionProfile.mode !== "trusted-full-access"
+          || !FULL_ACCESS_SKIPPED_PROMPTS.some((id) => reason.startsWith(`Prompt required by exec policy ${id}:`)));
       const externalReason = findShellExternalConfirmationReason(execDecision.segments, externalActionPolicyConfig(policy));
       if (externalReason) confirmationReasons.push(externalReason);
       if (confirmationReasons.length > 0) {

package/packages/piagent-core/managed/call-purpose.mjs

@@ -29,7 +29,7 @@ export function jobTitle(task, title) {
 export function purposeHeaders(owner, runtime, role, context) {
   const messages = context?.messages ?? [], last = messages.at(-1);
   let purpose, after = '';
-  if (typeof context?.systemPrompt === 'string' && context.systemPrompt.startsWith(SUMMARY_PROMPT)) purpose = 'summary';
+  if (systemText(context).startsWith(SUMMARY_PROMPT)) purpose = 'summary';
   else if (last?.role === 'toolResult') { purpose = 'tool_step'; after = afterTools(messages.findLast(m => m.role === 'assistant')); }
   else if (role !== 'main') purpose = 'brief';
   else if (owner.nextPurpose === 'harness') { purpose = 'harness'; owner.nextPurpose = null; }
@@ -37,3 +37,13 @@ export function purposeHeaders(owner, runtime, role, context) {
   const title = purpose === 'brief' ? owner.jobTitles?.get(runtime) : '';
   return { 'X-Agent-Purpose': purpose, ...(after ? { 'X-Agent-After': after } : {}), ...(title ? { 'X-Agent-Task': encodeURIComponent(title) } : {}) };
 }
+
+// Pi folds the system prompt into a leading system message before a call
+// reaches a provider, so a summary is recognised in either shape.
+function systemText(context) {
+  if (typeof context?.systemPrompt === 'string') return context.systemPrompt;
+  const first = context?.messages?.[0];
+  if (first?.role !== 'system') return '';
+  if (typeof first.content === 'string') return first.content;
+  return Array.isArray(first.content) ? first.content.filter(p => p?.type === 'text').map(p => p.text).join('') : '';
+}

package/packages/piagent-core/managed/compaction.mjs

@@ -17,6 +17,49 @@ function addUsage(a, b) {
     totalTokens: sum(a.totalTokens, b.totalTokens), cost: Object.fromEntries(Object.keys(a.cost ?? {}).map(k => [k, sum(a.cost[k], b.cost?.[k])])) };
 }
 
+// When a long conversation is summarised. Pi waits until the window is full
+// but for its 16k reserve; Codex summarises at 90% of the window, and its
+// GPT models report a 272k window under an 872k maximum. A turn re-reads the
+// whole context: a 1M-token window full to the brim bills about 1M input
+// tokens per step (GPT doubles its price above 272k) and answers worse.
+// Summarise at 90% of the window, and never later than 300k tokens.
+export const COMPACT_SHARE = 0.9, COMPACT_CEILING_TOKENS = 300_000;
+// Pi's own reserve: the summary may write up to 80% of it.
+export const SUMMARY_RESERVE_TOKENS = 16_384;
+export function compactionTrigger(contextWindow) {
+  return Math.min(Math.floor(contextWindow * COMPACT_SHARE), contextWindow - SUMMARY_RESERVE_TOKENS, COMPACT_CEILING_TOKENS);
+}
+// Pi compacts once context > window - reserveTokens: the trigger is set
+// through the reserve, per model (Auto may move a conversation to another
+// window). The summary keeps Pi's reserve (see stageCompaction).
+export function compactEarly(settingsManager) {
+  const settings = settingsManager.getCompactionSettings.bind(settingsManager);
+  settingsManager.getCompactionSettings = model => {
+    const own = settings(model), window = model?.contextWindow;
+    return window > 0 ? { ...own, reserveTokens: Math.max(own.reserveTokens, window - compactionTrigger(window)) } : own;
+  };
+}
+// A summary that failed is not asked again at every step: each attempt can
+// cost a full read of the conversation. Threshold attempts wait 1, 2, 4 …
+// minutes (at most 30) after a failure; a success or an overflow (Pi retries
+// that once on its own) is not held back.
+export const COMPACT_BACKOFF_MS = 60_000, COMPACT_BACKOFF_MAX_MS = 30 * 60_000;
+export function backOffFailedCompaction(session, now = Date.now) {
+  const run = session._runAutoCompaction?.bind(session);
+  if (!run) throw Error('managed-sdk-version-unqualified');
+  let failures = 0, failedAt = 0;
+  session.subscribe(event => {
+    if (event?.type !== 'compaction_end' || event.reason !== 'threshold') return;
+    if (event.result) failures = 0;
+    else if (!event.aborted) { failures += 1; failedAt = now(); }
+  });
+  session._runAutoCompaction = (reason, willRetry) => {
+    const wait = failures ? Math.min(COMPACT_BACKOFF_MS * 2 ** (failures - 1), COMPACT_BACKOFF_MAX_MS) : 0;
+    if (reason === 'threshold' && now() - failedAt < wait) return Promise.resolve(false);
+    return run(reason, willRetry);
+  };
+}
+
 // Pi summarises everything older than the kept tail in one request. A
 // conversation can be longer than the window of the model a run uses now
 // (the harness moved from a 1M-token model to a 272k one, or Auto fell
@@ -33,7 +76,10 @@ export async function stageCompaction(session, api, sdk) {
     return unfinished(plan) ? { ...result, summary: `${result.summary}\n\nCurrent plan (kept verbatim; keep it up to date with update_plan):\n${planText(plan)}` } : result;
   };
   session._runDefaultCompaction = async (preparation, model, apiKey, headers, instructions, signal, env, reason) => {
-    const { settings, previousSummary } = preparation, room = model.contextWindow - settings.reserveTokens;
+    // The reserve that set the trigger is not the summary's budget.
+    const settings = { ...preparation.settings, reserveTokens: Math.min(preparation.settings.reserveTokens, SUMMARY_RESERVE_TOKENS) };
+    preparation = { ...preparation, settings };
+    const { previousSummary } = preparation, room = model.contextWindow - settings.reserveTokens;
     const history = [...preparation.messagesToSummarize, ...preparation.turnPrefixMessages];
     const size = history.reduce((n, m) => n + api.estimateTokens(m), 0) + Math.ceil((previousSummary?.length ?? 0) / 4);
     if (size + 4096 <= room) {

package/packages/piagent-core/managed/permission.mjs

@@ -0,0 +1,22 @@
+// A company conversation's access, chosen by the member and kept with the
+// conversation: "workspace-write" asks before every command that needs the
+// internet; "trusted-full-access" (Bypass) asks only for what must be
+// confirmed (runtime/policy/bypass-policy.mjs).
+import { mustConfirm } from '../runtime/policy/bypass-policy.mjs';
+
+export const PERMISSIONS = ['workspace-write', 'trusted-full-access'];
+const ENTRY = 'agent-watch-permission';
+
+export function restorePermission(manager) {
+  const chosen = manager.getEntries().filter(e => e.type === 'custom' && e.customType === ENTRY).at(-1)?.data?.mode;
+  return PERMISSIONS.includes(chosen) ? chosen : 'workspace-write';
+}
+export function permissionSetter(owner, manager) {
+  return mode => {
+    if (!PERMISSIONS.includes(mode)) throw Error('managed-permission-unavailable');
+    manager.appendCustomEntry(ENTRY, { mode, at: new Date().toISOString() }); owner.permission = mode;
+  };
+}
+// Why a network command must still be asked about: null runs it in Bypass,
+// 'ask' when the member asks first.
+export const networkConfirmation = (owner, command) => owner.permission === 'trusted-full-access' ? mustConfirm(command) : 'ask';

package/packages/piagent-core/managed/request-stream.mjs

@@ -11,6 +11,14 @@ import { CLIENT_AGENT } from './client-agent.mjs';
 import { shareGrant, releaseGrant } from './grant-share.mjs';
 import { purposeHeaders } from './call-purpose.mjs';
 
+// A caller may pass the provider's resolved auth headers (Pi's compaction and
+// branch summaries do): for this provider that is the registered placeholder
+// key, and caller headers override the role token. Only the grant authenticates.
+const CREDENTIAL_HEADERS = /^(authorization|x-api-key)$/i;
+function withoutCredentials(headers) {
+  return headers && Object.fromEntries(Object.entries(headers).filter(([name]) => !CREDENTIAL_HEADERS.test(name)));
+}
+
 // How long one request waits in line for a free company model account.
 const CAPACITY_WAIT_MS = 20 * 60_000;
 // How long a helper's request waits before the helper moves to another model.
@@ -62,7 +70,7 @@ export function wrapRoleStreams(owner, runtime, role, { provider, verifyGrant })
             // same company account and prompt cache; a helper names its role.
             const conversation = role === 'main' ? conversationSession(owner) : null;
             const stream = original({ ...model, id: route.native }, context, { ...options, apiKey: grant.token, sessionId: conversation ?? grant.role_id, maxRetries: 0,
-              headers: { ...options?.headers, ...purpose, 'User-Agent': CLIENT_AGENT, 'X-Session-Id': grant.role_id, ...(conversation ? { 'X-Claude-Code-Session-Id': conversation } : {}) } });
+              headers: { ...withoutCredentials(options?.headers), ...purpose, 'User-Agent': CLIENT_AGENT, 'X-Session-Id': grant.role_id, ...(conversation ? { 'X-Claude-Code-Session-Id': conversation } : {}) } });
             // Whether Studio admitted the request is known at its first event
             // after "start": until then nothing is passed on, so a refused
             // request leaves no trace in the conversation.

package/packages/piagent-core/managed/session.mjs

@@ -17,12 +17,13 @@ import { wrapRoleStreams } from './request-stream.mjs';
 import { runHelper } from './helper-run.mjs';
 import { askTool } from './member-questions.mjs';
 import { setTimeout as sleep } from 'node:timers/promises';
-import { stageCompaction } from './compaction.mjs';
+import { stageCompaction, compactEarly, backOffFailedCompaction } from './compaction.mjs';
 import { readPatchDigest, readPatchSnapshot, readChangedFiles } from './patch-snapshot.mjs';
 import { workflowPolicy, repositoryChecks, planTool, currentPlan, PLAN_ENTRY, workflowPrompt, RunProcess, completionGate, pendingBaseline, pendingPaths, processEditTools } from './workflow.mjs';
 import { beforeDelegate } from './objections.mjs';
 import { HELPER_CALLS, HELPER_ROLES, helperRoles, helperPrompt, webPrompt, delegateDescription } from './helper-roles.mjs';
 import { loadAgentResources } from './agent-skills.mjs';
+import { restorePermission, permissionSetter, networkConfirmation } from './permission.mjs';
 
 const PROVIDER = 'agent_watch_managed';
 // Who the agent is: the model account may put another product's name in an
@@ -109,6 +110,7 @@ export class ManagedSession {
       parameters:{type:'object',properties:{},additionalProperties:false},
       execute:async(id,_args,signal,_update,ctx)=>{
         const plan=await repositoryFetchPlan(self.boundary);
+        if(self.permission==='trusted-full-access'&&!signal?.aborted)return executeRepositoryFetch(self.boundary,plan,signal);
         const {piApprovalBroker}=await import('../runtime/inspection/approval-broker.ts');
         const decision=await piApprovalBroker.request({cwd:self.cwd,rawSessionId:self.session.sessionManager.getSessionId(),toolCallId:id,
           action:{kind:'external-provider-action',preconditionClass:'runtime-only',toolName:'fetch_origin',rawAction:plan,
@@ -125,10 +127,11 @@ export class ManagedSession {
     customTools.push({name:'run_with_network',label:'Run with network',description:'Run one shell command that needs the internet (package install, download, git pull of a public repository), or that starts a local server or a browser (end-to-end tests with Playwright\'s Chromium against a server on 127.0.0.1), after the user approves that exact command. Normal bash has no network and cannot listen on a port. Credentials (.npmrc, SSH keys, Keychain) stay unavailable, so private registries and git push are not possible here.',
       parameters:{type:'object',properties:{command:{type:'string',minLength:1,maxLength:4000},reason:{type:'string',minLength:1,maxLength:300},timeout:{type:'number',minimum:1,maximum:1800}},required:['command','reason'],additionalProperties:false},
       execute:async(id,args,signal,onUpdate,ctx)=>{
-        const {piApprovalBroker}=await import('../runtime/inspection/approval-broker.ts');
-        const decision=await piApprovalBroker.request({cwd:self.cwd,rawSessionId:self.session.sessionManager.getSessionId(),toolCallId:id,
+        // Bypass runs it without asking, unless it is one the member must confirm.
+        const confirm=await networkConfirmation(self,args.command);
+        const decision=confirm===null?{allowed:true,consume:()=>true}:await (await import('../runtime/inspection/approval-broker.ts')).piApprovalBroker.request({cwd:self.cwd,rawSessionId:self.session.sessionManager.getSessionId(),toolCallId:id,
           action:{kind:'external-provider-action',preconditionClass:'runtime-only',toolName:'run_with_network',rawAction:{command:args.command},commandPreview:String(args.command),
-            targetPaths:[self.cwd],provider:'network',urlOrigin:null,requestedScope:'network-command-once',reason:String(args.reason).slice(0,300),riskClass:'medium',
+            targetPaths:[self.cwd],provider:'network',urlOrigin:null,requestedScope:'network-command-once',reason:(confirm==='ask'?String(args.reason):`Bypass still asks: ${confirm}. ${args.reason}`).slice(0,300),riskClass:'medium',
             allowConsequence:'Run this exact command once, with internet access; a server it starts accepts connections while it runs.',denyConsequence:'The command does not run; the agent is told you declined.'},
           terminalConfirm:()=>ctx?.ui?.confirm?.('Run with network',`Allow internet access for: ${args.command}`)??Promise.resolve(false),
           unavailableFallback:'terminal-confirm',recheck:()=>!signal?.aborted&&Boolean(self.grant)});
@@ -138,11 +141,14 @@ export class ManagedSession {
         try { const result=await self.boundary.invoke('bash',{command:args.command,...(args.timeout?{timeout:args.timeout}:{})},signal,onUpdate,ctx?.model,{network:true}); ok=!result?.isError; return result; }
         finally { await self.claimChanges(before); await self.run?.afterTool('bash',args,ok,()=>self.digest()); await self.refreshReview(); }
       }});
-    // The helpers of the Harness this conversation enrolled with. A later
-    // enrollment that drops one is refused at the call (delegate).
+    // Every helper role passes the tool's schema: Pi fixes a tool's schema
+    // and description when the conversation opens, so a helper a Harness
+    // saved later adds must already pass it. The system prompt, rebuilt each
+    // turn, names the Harness's current helpers; delegate refuses one the
+    // Harness does not have.
     const roles = helperRoles(manifest);
     if (roles.length) customTools.push({ name: 'delegate', label: 'Subagent', description: delegateDescription(roles),
-      parameters: { type: 'object', properties: { role: { type: 'string', enum: roles }, title: { type: 'string', maxLength: 120, description: 'One line naming the job, for the company logs (for example "Find where login tokens are stored").' }, task: { type: 'string', minLength: 1, maxLength: 12000 } }, required: ['role', 'task'], additionalProperties: false },
+      parameters: { type: 'object', properties: { role: { type: 'string', enum: HELPER_ROLES }, title: { type: 'string', maxLength: 120, description: 'One line naming the job, for the company logs (for example "Find where login tokens are stored").' }, task: { type: 'string', minLength: 1, maxLength: 12000 } }, required: ['role', 'task'], additionalProperties: false },
       execute: (_id, args, signal) => self.delegate(args, signal) });
     customTools.push(planTool(async plan => {
       self.session.sessionManager.appendCustomEntry(PLAN_ENTRY, { ...plan, at: new Date().toISOString() });
@@ -185,6 +191,8 @@ export class ManagedSession {
     self.extensionsResult = result.extensionsResult;
     self.session = result.session;
     self.session.managedExecution = true;
+    // The member's access for this conversation: ask first, or Bypass (permission.mjs).
+    self.permission = restorePermission(manager); self.session.managedSetPermission = permissionSetter(self, manager);
     // A helper's receipt (its tokens, the patch it read) is for the member's
     // eyes: the agent has the helper's answer as the tool result, and a
     // receipt in its context reads as a message from the member.
@@ -197,6 +205,7 @@ export class ManagedSession {
       if (event?.type === 'tool_execution_end' && event.isError && textContent(event.result ?? {}) === `Tool ${event.toolName} not found`) self.run && (self.run.unknownTools += 1);
     });
     await stageCompaction(self.session, self.api, self.sdk);
+    compactEarly(settings); backOffFailedCompaction(self.session);
     self.publishHelpers();
     const setThinking=self.session.setThinkingLevel.bind(self.session);
     self.runThinking = setThinking;
@@ -352,7 +361,7 @@ export class ManagedSession {
     this.blocked = this.scope && sameMember(this.scope, scope) ? null : 'managed-session-scope-changed';
     if (this.blocked) throw Error(this.blocked);
     if (!sameKey(this.scope, scope)) { this.session.sessionManager.appendCustomEntry('agent-watch-scope', scope); this.scope = scope; }
-    this.session?.setActiveToolsByName(this.session.getActiveToolNames()); // the new Harness workflow reaches the prompt
+    this.session?.setActiveToolsByName(this.session.getActiveToolNames()); // the new Harness workflow and helpers reach the prompt
   }
   async digest() { try { return await this.changeDigest(); } catch { return null; } }
   refusedAsTooLong() {

package/packages/piagent-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@piagent/core",
-  "version": "1.15.1",
+  "version": "1.16.0",
   "type": "module",
   "private": true,
   "license": "MIT",