@piagent/platform 1.4.1 → 1.5.1

package/docs-site/mcp-servers.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.4.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/mcp-servers" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/mcp-servers" hreflang="en" lang="en">EN</a>

package/docs-site/mcp.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.4.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/mcp" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/mcp" hreflang="en" lang="en">EN</a>

package/docs-site/permissions.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.4.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/permissions" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/permissions" hreflang="en" lang="en">EN</a>

package/docs-site/profiles.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.4.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/profiles" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/profiles" hreflang="en" lang="en">EN</a>

package/docs-site/quickstart.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.4.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/quickstart" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/quickstart" hreflang="en" lang="en">EN</a>

package/docs-site/runtime.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.4.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/runtime" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/runtime" hreflang="en" lang="en">EN</a>

package/docs-site/scope.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.4.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/scope" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/scope" hreflang="en" lang="en">EN</a>

package/docs-site/security.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.4.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/security" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/security" hreflang="en" lang="en">EN</a>

package/docs-site/team.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.4.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/team" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/team" hreflang="en" lang="en">EN</a>

package/docs-site/whats-new.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.4.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/whats-new" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/whats-new" hreflang="en" lang="en">EN</a>

package/docs-site/workflows.html

@@ -30,7 +30,7 @@
         <span>Pi Agent Platform</span>
       </a>
       <div class="top-actions">
-        <span class="pill"><span class="pill-dot"></span>v1.4.1 docs · VI</span>
+        <span class="pill"><span class="pill-dot"></span>v1.5.1 docs · VI</span>
         <nav class="language-switch" aria-label="Ngôn ngữ">
           <a class="language-option current" href="/workflows" hreflang="vi" lang="vi" aria-current="true">VI</a>
           <a class="language-option" href="/en/workflows" hreflang="en" lang="en">EN</a>

package/evals/fixtures/piagent-webui/document-workspace-v1.invalid.json

@@ -0,0 +1,17 @@
+{
+  "schemaVersion": 1,
+  "version": "piagent-webui-document-workspace-v1",
+  "messageType": "document",
+  "generatedAt": "2026-08-17T09:00:00.000Z",
+  "documentRef": "document_01",
+  "state": "unavailable",
+  "name": null,
+  "relativePath": null,
+  "rootRef": null,
+  "format": null,
+  "text": "# Ke hoach quy ba\n\nContent that must never accompany a refusal.\n",
+  "sizeBytes": null,
+  "truncated": false,
+  "redacted": false,
+  "reasonCode": "document-protected"
+}

package/evals/fixtures/piagent-webui/document-workspace-v1.valid.json

@@ -0,0 +1,42 @@
+{
+  "schemaVersion": 1,
+  "version": "piagent-webui-document-workspace-v1",
+  "messageType": "listing",
+  "generatedAt": "2026-08-17T09:00:00.000Z",
+  "state": "ready",
+  "roots": [
+    { "rootRef": "document-root_01", "path": "/workspace/project", "source": "project", "documentCount": 2 },
+    { "rootRef": "document-root_02", "path": "/home/operator/Downloads", "source": "profile", "documentCount": 1 }
+  ],
+  "documents": [
+    {
+      "documentRef": "document_01",
+      "rootRef": "document-root_01",
+      "name": "ke-hoach.md",
+      "relativePath": "tai-lieu/ke-hoach.md",
+      "extension": "md",
+      "sizeBytes": 4096,
+      "modifiedAt": "2026-08-17T08:30:00.000Z"
+    },
+    {
+      "documentRef": "document_02",
+      "rootRef": "document-root_01",
+      "name": "bao-cao.docx",
+      "relativePath": "tai-lieu/bao-cao.docx",
+      "extension": "docx",
+      "sizeBytes": 245760,
+      "modifiedAt": "2026-08-17T08:45:00.000Z"
+    },
+    {
+      "documentRef": "document_03",
+      "rootRef": "document-root_02",
+      "name": "vendor-spec.pdf",
+      "relativePath": "vendor-spec.pdf",
+      "extension": "pdf",
+      "sizeBytes": 1048576,
+      "modifiedAt": "2026-08-16T17:10:00.000Z"
+    }
+  ],
+  "truncated": false,
+  "reasonCode": null
+}

package/evals/fixtures/piagent-webui/session-command-v1.valid.json

@@ -14,6 +14,7 @@
     "delivery": "new-operation",
     "message": "Continue the gateway implementation.",
     "messageRequestId": "message_request_01",
-    "expectedOperationRef": null
+    "expectedOperationRef": null,
+    "attachmentRefs": ["attachment_01"]
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@piagent/platform",
-  "version": "1.4.1",
+  "version": "1.5.1",
   "license": "MIT",
   "publishConfig": {
     "access": "public",

package/packages/piagent-core/extensions/document-intake.ts

@@ -51,7 +51,7 @@ export type DocumentExtraction =
   | { status: "ok"; text: string; truncated: boolean; kind: "text" | "docx" | "pdf" }
   | { status: "error"; reason: string };
 
-type DocumentCommandResult = { status: number | null; stdout: string; stderr: string; error?: Error };
+export type DocumentCommandResult = { status: number | null; stdout: string; stderr: string; error?: Error };
 
 export function expandHome(candidate: string, home: string | undefined): string {
   if (candidate === "~") return home ?? candidate;
@@ -450,7 +450,10 @@ export function extractPdfFromDescriptor(
   // stdout out. The converter is handed the already-open descriptor rather than
   // a path, so it reads the file whose identity was verified and cannot be
   // pointed somewhere else by a name that changed in the meantime.
-  const result = run("pdftotext", ["-layout", "-enc", "UTF-8", "-", "-"], fd);
+  return extractPdfCommandResult(run("pdftotext", ["-layout", "-enc", "UTF-8", "-", "-"], fd));
+}
+
+export function extractPdfCommandResult(result: DocumentCommandResult): DocumentExtraction {
   if (result.error) {
     return {
       status: "error",
@@ -471,7 +474,7 @@ export function extractPdfFromDescriptor(
 
 // spawnSync blocks the whole runtime, so an external converter that never
 // returns would hang the session rather than fail the read.
-const PDF_TIMEOUT_MS = 20_000;
+export const PDF_TIMEOUT_MS = 20_000;
 
 export function probeExecutableOnPath(executable: string): DocumentCommandResult {
   const result = spawnSync("/bin/sh", ["-c", 'command -v "$1"', "piagent-command-probe", executable], {

package/packages/piagent-core/extensions/piagent-guard.ts

@@ -115,7 +115,7 @@ import {
   activeTaskToolGroups
 } from "../runtime/tools/tool-groups.ts";
 import type { PiagentToolGroup } from "../runtime/tools/tool-groups.ts";
-import { shortTaskLabel } from "../runtime/workflows/input-routing.ts";
+import { freshRequestParts, shortTaskLabel } from "../runtime/workflows/input-routing.ts";
 import {
   automaticAcceptanceCriteria,
   automaticReviewLenses,
@@ -4705,7 +4705,7 @@ export default function piagentGuard(pi: ExtensionAPI) {
     safeTaskId, searchContextIndex, searchContextIndexV2, searchMemoryFiles, selectRuntimeAction,
     selectValueFromUi, selectVerificationPlan, semanticCompactionInstructions, sendWorkflowFollowUp, setPermissionOverrideForContext,
     semanticRepairCompletionBlock: (cwd: string, taskRunId: string) => semanticRepairRuntime.completionBlock(cwd, taskRunId),
-    shellArg, shortTaskLabel, solverShadow, summarizeAttempt, taskChangedFileEvidence,
+    freshRequestParts, shellArg, shortTaskLabel, solverShadow, summarizeAttempt, taskChangedFileEvidence,
     techContextDirPath, techContextFilePath, techContextRelativePath, techOptionById, techStackPath,
     telemetry, toolRegistryConfig, trajectoryRuntime, uniqueStrings, usageExactCommands,
     validTaskScopePattern, validateNewWorkPlan, verifierCommandInstructions, verifyProjectCapabilityState, workingTreeEvidenceDigest,

package/packages/piagent-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@piagent/core",
-  "version": "1.4.1",
+  "version": "1.5.1",
   "type": "module",
   "private": true,
   "license": "MIT",

package/packages/piagent-core/runtime/input/attachment-document-command.ts

@@ -0,0 +1,39 @@
+import { spawn } from "node:child_process";
+
+import { MAX_DOCUMENT_BYTES, PDF_TIMEOUT_MS, probeExecutableOnPath,
+  type DocumentCommandResult } from "../../extensions/document-intake.ts";
+
+export type AttachmentDocumentCommand = (executable: string, args: string[], input?: Buffer) =>
+DocumentCommandResult | Promise<DocumentCommandResult>;
+
+// The converter is external and may consume its full timeout. Run it without a
+// shell and without blocking Pi's event loop, while bounding both output pipes.
+export function runAttachmentDocumentCommand(executable: string, args: string[], input?: Buffer):
+DocumentCommandResult | Promise<DocumentCommandResult> {
+  if (executable === "command") return probeExecutableOnPath(args[1] ?? "");
+  return new Promise((resolve) => {
+    let child: ReturnType<typeof spawn>;
+    try { child = spawn(executable, args, { stdio: ["pipe", "pipe", "pipe"] }); }
+    catch (cause) { resolve({ status: null, stdout: "", stderr: "", error: cause as Error }); return; }
+    const stdout: Buffer[] = [], stderr: Buffer[] = []; let stdoutBytes = 0, stderrBytes = 0, settled = false;
+    const finish = (result: DocumentCommandResult) => {
+      if (settled) return; settled = true; clearTimeout(timer); resolve(result);
+    };
+    const overflow = () => {
+      child.kill("SIGKILL");
+      const error = new Error("document converter output exceeded its limit"); (error as NodeJS.ErrnoException).code = "ENOBUFS";
+      finish({ status: null, stdout: "", stderr: "", error });
+    };
+    child.stdout.on("data", (chunk: Buffer) => { stdoutBytes += chunk.length; if (stdoutBytes > MAX_DOCUMENT_BYTES) overflow(); else stdout.push(chunk); });
+    child.stderr.on("data", (chunk: Buffer) => { stderrBytes += chunk.length; if (stderrBytes > MAX_DOCUMENT_BYTES) overflow(); else stderr.push(chunk); });
+    child.on("error", (error) => finish({ status: null, stdout: "", stderr: "", error }));
+    child.on("close", (status) => finish({ status, stdout: Buffer.concat(stdout).toString("utf8"), stderr: Buffer.concat(stderr).toString("utf8") }));
+    const timer = setTimeout(() => {
+      child.kill("SIGKILL"); const error = new Error("document converter ETIMEDOUT");
+      finish({ status: null, stdout: "", stderr: "", error });
+    }, PDF_TIMEOUT_MS);
+    timer.unref();
+    child.stdin.on("error", () => undefined);
+    child.stdin.end(input);
+  });
+}

package/packages/piagent-core/runtime/input/attachment-reservation.ts

@@ -0,0 +1,36 @@
+export type AttachmentReservation<T> = {
+  prepared: T;
+  commit(): void;
+  release(): void;
+};
+
+// A small transaction primitive for staged attachments. The map is the lock:
+// only one dispatch may prepare a ref, and only that dispatch may consume it.
+export function reserveAttachments<TRecord extends { attachmentRef: string }, TPrepared>(input: {
+  records: TRecord[];
+  live: Map<string, TRecord>;
+  reservations: Map<string, string>;
+  token: string;
+  prepared: TPrepared;
+  consume(record: TRecord): void;
+}): AttachmentReservation<TPrepared> {
+  for (const record of input.records) input.reservations.set(record.attachmentRef, input.token);
+  let state: "active" | "committed" | "released" = "active";
+  return {
+    prepared: input.prepared,
+    commit: () => {
+      if (state === "committed") return;
+      if (state !== "active" || input.records.some((record) => input.live.get(record.attachmentRef) !== record
+        || input.reservations.get(record.attachmentRef) !== input.token)) throw new Error("attachment-reservation-unavailable");
+      state = "committed";
+      input.records.forEach(input.consume);
+    },
+    release: () => {
+      if (state !== "active") return;
+      state = "released";
+      for (const record of input.records) {
+        if (input.reservations.get(record.attachmentRef) === input.token) input.reservations.delete(record.attachmentRef);
+      }
+    }
+  };
+}