@piagent/platform 1.44.2 → 1.44.3

package/docs-site/en/permissions.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · EN"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new">Changelog</a>

package/docs-site/en/profiles.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · EN"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new">Changelog</a>

package/docs-site/en/quickstart.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · EN"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart" aria-current="page">Docs</a>
         <a href="/en/whats-new">Changelog</a>

package/docs-site/en/runtime.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · EN"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new">Changelog</a>

package/docs-site/en/scope.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · EN"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new">Changelog</a>

package/docs-site/en/security.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · EN"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new">Changelog</a>

package/docs-site/en/team.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · EN"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new">Changelog</a>

package/docs-site/en/update.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · EN"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new">Changelog</a>
@@ -145,9 +145,9 @@
   <h2 id="pin-for-a-team">Pin one release for a team</h2>
   <p>For a team rollout, install the exact Pi host and platform release, then run the installer in stable mode. The <code>--dry-run</code> step prints what would change.</p>
   <div class="command-card">
-    <header><span>Pinned install</span><button class="clip-btn" data-clip="npm install -g --ignore-scripts @earendil-works/pi-coding-agent@1.3.0&#10;npm install -g --ignore-scripts @piagent/platform@1.44.2&#10;piagent-install --stable --dry-run&#10;piagent-install --stable">Copy</button></header>
+    <header><span>Pinned install</span><button class="clip-btn" data-clip="npm install -g --ignore-scripts @earendil-works/pi-coding-agent@1.3.0&#10;npm install -g --ignore-scripts @piagent/platform@1.44.3&#10;piagent-install --stable --dry-run&#10;piagent-install --stable">Copy</button></header>
     <pre><code>npm install -g --ignore-scripts @earendil-works/pi-coding-agent@1.3.0
-npm install -g --ignore-scripts @piagent/platform@1.44.2
+npm install -g --ignore-scripts @piagent/platform@1.44.3
 piagent-install --stable --dry-run
 piagent-install --stable</code></pre>
   </div>

package/docs-site/en/whats-new.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · EN"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new" aria-current="page">Changelog</a>
@@ -108,7 +108,19 @@
 <div class="release-filter" role="toolbar" aria-label="Filter by kind of change"><button type="button" data-filter-kind="all" aria-pressed="true">All</button><button type="button" data-filter-kind="new" aria-pressed="false">New</button><button type="button" data-filter-kind="improved" aria-pressed="false">Improved</button><button type="button" data-filter-kind="fixed" aria-pressed="false">Fixed</button><button type="button" data-filter-kind="security" aria-pressed="false">Security</button></div>
 <section class="section releases" data-releases>
 <h2 id="latest" class="sr-only">Latest</h2>
-<article class="release latest" id="v1-44-2" data-release>
+<article class="release latest" id="v1-44-3" data-release>
+  <div class="release-meta"><a class="release-version" href="#v1-44-3">v1.44.3</a><time class="release-date" datetime="2026-10-28">Oct 28, 2026</time></div>
+  <div class="release-body">
+    <h3 data-toc-skip id="v1-44-3-title">Prompt injection cannot quietly read the system</h3>
+    <p>Text in a page, file, memory or helper answer can no longer send data to an unknown site, read credentials in Bypass or steer the agent without the member seeing it.</p>
+    <ul class="release-items">
+      <li data-kind="security"><span class="kind kind-security">Security</span><span>web_fetch reads documentation and registry sites freely; another site is asked about once per conversation, and an address there with a query or fragment every time.</span></li>
+      <li data-kind="security"><span class="kind kind-security">Security</span><span>Helper answers and team memory results reach the agent inside a data fence it cannot close; the agent never shows its configuration or credentials or asks for a secret on their word.</span></li>
+      <li data-kind="security"><span class="kind kind-security">Security</span><span>In Bypass, run_on_host still asks when a command reaches credentials: ~/.ssh, ~/.pi, .env, auth.json, keys, the Keychain or the environment.</span></li>
+    </ul>
+  </div>
+</article>
+<article class="release" id="v1-44-2" data-release>
   <div class="release-meta"><a class="release-version" href="#v1-44-2">v1.44.2</a><time class="release-date" datetime="2026-10-28">Oct 28, 2026</time></div>
   <div class="release-body">
     <h3 data-toc-skip id="v1-44-2-title">The company harness follows the size of a change</h3>
@@ -415,24 +427,23 @@
     </ul>
   </div>
 </article>
-<article class="release" id="v1-36-1" data-release>
-  <div class="release-meta"><a class="release-version" href="#v1-36-1">v1.36.1</a><time class="release-date" datetime="2026-10-22">Oct 22, 2026</time></div>
-  <div class="release-body">
-    <h3 data-toc-skip id="v1-36-1-title">A brief Agent Watch failure no longer stops a task</h3>
-    <p>When Agent Watch briefly cannot reach a running Studio, Piagent asks again for up to 3 minutes instead of stopping the task.</p>
-    <ul class="release-items">
-      <li data-kind="improved"><span class="kind kind-improved">Improved</span><span>Each wait is logged locally and reported to Studio in Logs → &quot;Mất kết nối&quot;; a refused key or report still fails at once.</span></li>
-      <li data-kind="fixed"><span class="kind kind-fixed">Fixed</span><span>One failed grant renewal through Agent Watch stopped a 25-minute task; it is now asked again, waiting longer each time, for up to 3 minutes.</span></li>
-      <li data-kind="fixed"><span class="kind kind-fixed">Fixed</span><span>Closing the round's run goes through the same wait, so a passing gateway error no longer fails a turn whose work is done.</span></li>
-    </ul>
-  </div>
-</article>
 </section>
 <section class="section archive">
   <h2 id="archive">Earlier releases</h2>
   <p class="section-lead">Older releases, grouped by month. Open a month to see every change.</p>
   <details class="release-archive">
-    <summary><span>October 2026</span><span class="archive-count">53</span></summary>
+    <summary><span>October 2026</span><span class="archive-count">54</span></summary>
+    <div class="archive-row" id="v1-36-1">
+      <div class="archive-head"><a class="release-version" href="#v1-36-1">v1.36.1</a> <span class="release-date">Oct 22, 2026</span></div>
+      <div class="archive-body">
+        <p><strong>A brief Agent Watch failure no longer stops a task</strong> — When Agent Watch briefly cannot reach a running Studio, Piagent asks again for up to 3 minutes instead of stopping the task.</p>
+        <ul class="release-items">
+        <li data-kind="improved"><span class="kind kind-improved">Improved</span><span>Each wait is logged locally and reported to Studio in Logs → &quot;Mất kết nối&quot;; a refused key or report still fails at once.</span></li>
+        <li data-kind="fixed"><span class="kind kind-fixed">Fixed</span><span>One failed grant renewal through Agent Watch stopped a 25-minute task; it is now asked again, waiting longer each time, for up to 3 minutes.</span></li>
+        <li data-kind="fixed"><span class="kind kind-fixed">Fixed</span><span>Closing the round's run goes through the same wait, so a passing gateway error no longer fails a turn whose work is done.</span></li>
+        </ul>
+      </div>
+    </div>
     <div class="archive-row" id="v1-36-0">
       <div class="archive-head"><a class="release-version" href="#v1-36-0">v1.36.0</a> <span class="release-date">Oct 21, 2026</span></div>
       <div class="archive-body">

package/docs-site/en/windows.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · EN"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new">Changelog</a>

package/docs-site/en/workflows.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · EN"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new">Changelog</a>

package/docs-site/index.html

@@ -36,7 +36,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · VI"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>
@@ -56,7 +56,7 @@
   <div class="hero-bg" aria-hidden="true"></div>
   <div class="hero-glow" aria-hidden="true"></div>
   <div class="home-wrap">
-    <a class="hero-pill" href="/whats-new#v1-44-2"><b>v1.44.2</b><span>Harness công ty theo cỡ thay đổi</span><svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><use href="#icon-arrow-right"/></svg></a>
+    <a class="hero-pill" href="/whats-new#v1-44-3"><b>v1.44.3</b><span>Prompt injection không lặng lẽ đọc được hệ thống</span><svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><use href="#icon-arrow-right"/></svg></a>
     <h1>Coding agent cho cả team, <span class="grad">kiểm tra từng bước.</span></h1>
     <p class="hero-sub">Guard chặn tool call nguy hiểm trước khi chạy. Harness của team tự chạy check và cho subagent review. Một dashboard cho Terminal và trình duyệt, với model của bạn hoặc của công ty.</p>
     <div class="hero-cta">
@@ -99,7 +99,7 @@
       <div><strong><span data-count="54">54</span><em>/54</em></strong><span>task giải quyết trong benchmark production</span><small>codex-cli cùng model: 48/54</small></div>
       <div><strong>−<span data-count="61">61</span><em>%</em></strong><span>fresh token trên cùng workload</span><small>khoảng tin cậy 95%: ít nhất −51,6%</small></div>
       <div><strong><span data-count="52">52</span><em>/52</em></strong><span>mẫu secret bị che trong output</span><small>0/30 văn bản thường bị che nhầm</small></div>
-      <div><strong><span data-count="122">122</span></strong><span>bản phát hành từ 21/07/2026</span><small>4.400+ test tự động trên macOS và Linux</small></div>
+      <div><strong><span data-count="123">123</span></strong><span>bản phát hành từ 21/07/2026</span><small>4.400+ test tự động trên macOS và Linux</small></div>
     </div>
   </div>
 </section>
@@ -280,6 +280,12 @@ pi                    # Terminal</code></pre></div></div>
       <p>Mỗi bản ghi thay đổi gì và cần bản nào của Studio hay Agent Watch. <a href="/whats-new">Xem toàn bộ changelog</a>.</p>
     </div>
     <div class="updates">
+      <a class="update" href="/whats-new#v1-44-3" data-reveal>
+        <span class="update-meta"><span class="release-version">v1.44.3</span>28/10/2026</span>
+        <h3>Prompt injection không lặng lẽ đọc được hệ thống</h3>
+        <p>Nội dung trong trang web, file, memory hay câu trả lời của helper không còn gửi dữ liệu tới trang lạ, đọc credential ở Bypass hay điều khiển agent mà member không biết.</p>
+        <span class="update-more">Xem chi tiết <svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><use href="#icon-arrow-right"/></svg></span>
+      </a>
       <a class="update" href="/whats-new#v1-44-2" data-reveal>
         <span class="update-meta"><span class="release-version">v1.44.2</span>28/10/2026</span>
         <h3>Harness công ty theo cỡ thay đổi</h3>
@@ -292,12 +298,6 @@ pi                    # Terminal</code></pre></div></div>
         <p>Dev đang dùng Pi mới hơn giữ nguyên Pi của mình, Piagent chạy bản Pi riêng đúng bản pin; /style chọn giao diện Terminal; piagent skills add thêm repo skill như mattpocock/skills.</p>
         <span class="update-more">Xem chi tiết <svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><use href="#icon-arrow-right"/></svg></span>
       </a>
-      <a class="update" href="/whats-new#v1-43-9" data-reveal>
-        <span class="update-meta"><span class="release-version">v1.43.9</span>27/10/2026</span>
-        <h3>Đủ skill đã cài, và mở file agent gửi lại</h3>
-        <p>Skill trong plugin Claude và Codex, như superpowers, đến được agent; file agent gửi lại mở ngay trong web; hộp chọn thư mục chạy trên Windows.</p>
-        <span class="update-more">Xem chi tiết <svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><use href="#icon-arrow-right"/></svg></span>
-      </a>
     </div>
   </div>
 </section>

package/docs-site/mcp-approval.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · VI"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/docs-site/mcp-auth.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · VI"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/docs-site/mcp-servers.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · VI"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/docs-site/mcp.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · VI"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/docs-site/permissions.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · VI"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/docs-site/profiles.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · VI"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/docs-site/quickstart.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · VI"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart" aria-current="page">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/docs-site/releases.json

@@ -1,4 +1,35 @@
 [
+  {
+    "version": "1.44.3",
+    "date": "2026-10-28",
+    "status": "stable",
+    "title": {
+      "en": "Prompt injection cannot quietly read the system",
+      "vi": "Prompt injection không lặng lẽ đọc được hệ thống"
+    },
+    "summary": {
+      "en": "Text in a page, file, memory or helper answer can no longer send data to an unknown site, read credentials in Bypass or steer the agent without the member seeing it.",
+      "vi": "Nội dung trong trang web, file, memory hay câu trả lời của helper không còn gửi dữ liệu tới trang lạ, đọc credential ở Bypass hay điều khiển agent mà member không biết."
+    },
+    "items": [
+      {
+        "kind": "security",
+        "en": "web_fetch reads documentation and registry sites freely; another site is asked about once per conversation, and an address there with a query or fragment every time.",
+        "vi": "web_fetch đọc tự do trang tài liệu và registry; trang khác hỏi member một lần mỗi cuộc trò chuyện, địa chỉ có query hoặc fragment thì hỏi mỗi lần."
+      },
+      {
+        "kind": "security",
+        "en": "Helper answers and team memory results reach the agent inside a data fence it cannot close; the agent never shows its configuration or credentials or asks for a secret on their word.",
+        "vi": "Câu trả lời của helper và kết quả team memory tới agent trong rào dữ liệu không thể đóng; agent không lộ cấu hình, credential hay xin bí mật theo lời của chúng."
+      },
+      {
+        "kind": "security",
+        "en": "In Bypass, run_on_host still asks when a command reaches credentials: ~/.ssh, ~/.pi, .env, auth.json, keys, the Keychain or the environment.",
+        "vi": "Ở Bypass, run_on_host vẫn hỏi khi lệnh đụng credential: ~/.ssh, ~/.pi, .env, auth.json, key, Keychain hoặc biến môi trường."
+      }
+    ],
+    "requires": null
+  },
   {
     "version": "1.44.2",
     "date": "2026-10-28",

package/docs-site/runtime.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · VI"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/docs-site/scope.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · VI"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/docs-site/security.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · VI"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/docs-site/team.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · VI"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/docs-site/update.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · VI"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>
@@ -145,9 +145,9 @@
   <h2 id="pin-cho-team">Pin một bản cho cả team</h2>
   <p>Khi rollout cho team, cài đúng bản Pi host và đúng bản platform, rồi chạy installer ở chế độ stable. Bước <code>--dry-run</code> in ra những gì sẽ đổi.</p>
   <div class="command-card">
-    <header><span>Cài pin theo bản</span><button class="clip-btn" data-clip="npm install -g --ignore-scripts @earendil-works/pi-coding-agent@1.3.0&#10;npm install -g --ignore-scripts @piagent/platform@1.44.2&#10;piagent-install --stable --dry-run&#10;piagent-install --stable">Lấy lệnh</button></header>
+    <header><span>Cài pin theo bản</span><button class="clip-btn" data-clip="npm install -g --ignore-scripts @earendil-works/pi-coding-agent@1.3.0&#10;npm install -g --ignore-scripts @piagent/platform@1.44.3&#10;piagent-install --stable --dry-run&#10;piagent-install --stable">Lấy lệnh</button></header>
     <pre><code>npm install -g --ignore-scripts @earendil-works/pi-coding-agent@1.3.0
-npm install -g --ignore-scripts @piagent/platform@1.44.2
+npm install -g --ignore-scripts @piagent/platform@1.44.3
 piagent-install --stable --dry-run
 piagent-install --stable</code></pre>
   </div>

package/docs-site/whats-new.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · VI"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new" aria-current="page">Changelog</a>
@@ -108,7 +108,19 @@
 <div class="release-filter" role="toolbar" aria-label="Lọc theo loại thay đổi"><button type="button" data-filter-kind="all" aria-pressed="true">Tất cả</button><button type="button" data-filter-kind="new" aria-pressed="false">Mới</button><button type="button" data-filter-kind="improved" aria-pressed="false">Cải thiện</button><button type="button" data-filter-kind="fixed" aria-pressed="false">Sửa lỗi</button><button type="button" data-filter-kind="security" aria-pressed="false">Bảo mật</button></div>
 <section class="section releases" data-releases>
 <h2 id="latest" class="sr-only">Mới nhất</h2>
-<article class="release latest" id="v1-44-2" data-release>
+<article class="release latest" id="v1-44-3" data-release>
+  <div class="release-meta"><a class="release-version" href="#v1-44-3">v1.44.3</a><time class="release-date" datetime="2026-10-28">28/10/2026</time></div>
+  <div class="release-body">
+    <h3 data-toc-skip id="v1-44-3-title">Prompt injection không lặng lẽ đọc được hệ thống</h3>
+    <p>Nội dung trong trang web, file, memory hay câu trả lời của helper không còn gửi dữ liệu tới trang lạ, đọc credential ở Bypass hay điều khiển agent mà member không biết.</p>
+    <ul class="release-items">
+      <li data-kind="security"><span class="kind kind-security">Bảo mật</span><span>web_fetch đọc tự do trang tài liệu và registry; trang khác hỏi member một lần mỗi cuộc trò chuyện, địa chỉ có query hoặc fragment thì hỏi mỗi lần.</span></li>
+      <li data-kind="security"><span class="kind kind-security">Bảo mật</span><span>Câu trả lời của helper và kết quả team memory tới agent trong rào dữ liệu không thể đóng; agent không lộ cấu hình, credential hay xin bí mật theo lời của chúng.</span></li>
+      <li data-kind="security"><span class="kind kind-security">Bảo mật</span><span>Ở Bypass, run_on_host vẫn hỏi khi lệnh đụng credential: ~/.ssh, ~/.pi, .env, auth.json, key, Keychain hoặc biến môi trường.</span></li>
+    </ul>
+  </div>
+</article>
+<article class="release" id="v1-44-2" data-release>
   <div class="release-meta"><a class="release-version" href="#v1-44-2">v1.44.2</a><time class="release-date" datetime="2026-10-28">28/10/2026</time></div>
   <div class="release-body">
     <h3 data-toc-skip id="v1-44-2-title">Harness công ty theo cỡ thay đổi</h3>
@@ -415,24 +427,23 @@
     </ul>
   </div>
 </article>
-<article class="release" id="v1-36-1" data-release>
-  <div class="release-meta"><a class="release-version" href="#v1-36-1">v1.36.1</a><time class="release-date" datetime="2026-10-22">22/10/2026</time></div>
-  <div class="release-body">
-    <h3 data-toc-skip id="v1-36-1-title">Agent Watch lỗi thoáng qua không còn làm dừng task</h3>
-    <p>Khi Agent Watch tạm thời không tới được Studio đang chạy, Piagent hỏi lại trong tối đa 3 phút thay vì dừng task.</p>
-    <ul class="release-items">
-      <li data-kind="improved"><span class="kind kind-improved">Cải thiện</span><span>Mỗi lần chờ được ghi vào log trên máy và báo về Studio trong Logs → &quot;Mất kết nối&quot;; key hay báo cáo bị từ chối vẫn lỗi ngay.</span></li>
-      <li data-kind="fixed"><span class="kind kind-fixed">Sửa lỗi</span><span>Một lần gia hạn quyền qua Agent Watch bị lỗi từng làm dừng task 25 phút; giờ Piagent hỏi lại, mỗi lần chờ lâu hơn, trong tối đa 3 phút.</span></li>
-      <li data-kind="fixed"><span class="kind kind-fixed">Sửa lỗi</span><span>Bước đóng run cuối lượt cũng chờ như vậy, nên lỗi gateway thoáng qua không còn làm hỏng lượt đã làm xong.</span></li>
-    </ul>
-  </div>
-</article>
 </section>
 <section class="section archive">
   <h2 id="archive">Các bản trước</h2>
   <p class="section-lead">Bản cũ hơn, gom theo tháng. Mở một tháng để xem từng thay đổi.</p>
   <details class="release-archive">
-    <summary><span>Tháng 10/2026</span><span class="archive-count">53</span></summary>
+    <summary><span>Tháng 10/2026</span><span class="archive-count">54</span></summary>
+    <div class="archive-row" id="v1-36-1">
+      <div class="archive-head"><a class="release-version" href="#v1-36-1">v1.36.1</a> <span class="release-date">22/10/2026</span></div>
+      <div class="archive-body">
+        <p><strong>Agent Watch lỗi thoáng qua không còn làm dừng task</strong> — Khi Agent Watch tạm thời không tới được Studio đang chạy, Piagent hỏi lại trong tối đa 3 phút thay vì dừng task.</p>
+        <ul class="release-items">
+        <li data-kind="improved"><span class="kind kind-improved">Cải thiện</span><span>Mỗi lần chờ được ghi vào log trên máy và báo về Studio trong Logs → &quot;Mất kết nối&quot;; key hay báo cáo bị từ chối vẫn lỗi ngay.</span></li>
+        <li data-kind="fixed"><span class="kind kind-fixed">Sửa lỗi</span><span>Một lần gia hạn quyền qua Agent Watch bị lỗi từng làm dừng task 25 phút; giờ Piagent hỏi lại, mỗi lần chờ lâu hơn, trong tối đa 3 phút.</span></li>
+        <li data-kind="fixed"><span class="kind kind-fixed">Sửa lỗi</span><span>Bước đóng run cuối lượt cũng chờ như vậy, nên lỗi gateway thoáng qua không còn làm hỏng lượt đã làm xong.</span></li>
+        </ul>
+      </div>
+    </div>
     <div class="archive-row" id="v1-36-0">
       <div class="archive-head"><a class="release-version" href="#v1-36-0">v1.36.0</a> <span class="release-date">21/10/2026</span></div>
       <div class="archive-body">

package/docs-site/windows.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · VI"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/docs-site/workflows.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.2" title="v1.44.2 docs · VI"><span class="dot"></span>v1.44.2</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/evals/private-holdout-v1/public-exposure.v2.json

@@ -256,8 +256,8 @@
     },
     {
       "path": "tests",
-      "fileCount": 630,
-      "sha256": "fdb22c2a7f5b1639663494491cd1d61d5eaeb39969a833e61f3befedc66995f1"
+      "fileCount": 631,
+      "sha256": "37750935b5a593d52607baf8fa6b3faba03105501289fa83f4677504ed05e3d3"
     }
   ],
   "custodianComparisonRules": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@piagent/platform",
-  "version": "1.44.2",
+  "version": "1.44.3",
   "license": "MIT",
   "publishConfig": {
     "access": "public",

package/packages/piagent-core/managed/command-tools.mjs

@@ -1,7 +1,7 @@
 import { spawn } from 'node:child_process';
 import { asksNothing, broadAccess, networkConfirmation } from './permission.mjs';
 import { engineAlive, engineLauncher } from './container-engine.mjs';
-import { MEMBER_ONLY, memberOnlyReason, runHostCommand } from './host-command.mjs';
+import { MEMBER_ONLY, memberOnlyReason, credentialReason, runHostCommand } from './host-command.mjs';
 import { processTools } from './background-process.mjs';
 import { checkpointsOf } from './checkpoints.mjs';
 
@@ -11,7 +11,8 @@ import { checkpointsOf } from './checkpoints.mjs';
 // socket) and run_on_host (on the member's machine, outside the sandbox).
 // Bypass runs the first two without asking (owner, 2026-10-09), except what
 // must be confirmed for any command (bypass-policy.mjs: pushes, deploys,
-// registry logins, deletes known only at run time); run_on_host always asks.
+// registry logins, deletes known only at run time). run_on_host asks in every
+// mode but Bypass; Bypass still asks when the command reaches credentials.
 const PARAMETERS = { type: 'object', properties: { command: { type: 'string', minLength: 1, maxLength: 4000 }, reason: { type: 'string', minLength: 1, maxLength: 300 }, timeout: { type: 'number', minimum: 1, maximum: 1800 } }, required: ['command', 'reason'], additionalProperties: false };
 
 const KINDS = {
@@ -35,8 +36,9 @@ const KINDS = {
     allow: 'Run this exact command once on this machine, outside the sandbox, as you: it can read and change your files and use your sign-ins.',
     title: 'Chạy lệnh trên máy (ngoài sandbox)', allowText: 'chạy đúng lệnh này một lần trên máy bạn, ngoài sandbox, bằng quyền của bạn: lệnh đọc/sửa được file và dùng được tài khoản đã đăng nhập trên máy.',
     // Full access does not cover it: the member approves each command (with
-    // what Full access would still have asked about). Bypass asks nothing.
-    confirm: async (self, command) => asksNothing(self) ? null : await networkConfirmation(self, command) ?? 'ask',
+    // what Full access would still have asked about). Bypass asks only about
+    // credentials: a prompt injection's "cat ~/.ssh/id_rsa" is never silent.
+    confirm: async (self, command) => asksNothing(self) ? credentialReason(command) : await networkConfirmation(self, command) ?? 'ask',
   },
 };
 
@@ -48,7 +50,7 @@ async function engineReady(boundary) {
 const DOCKER_STOPPED = 'managed-docker-unreachable: Docker engine trên máy không chạy. Gọi start_docker để xin member duyệt mở Docker, rồi chạy lại đúng lệnh này bằng run_with_docker.';
 
 // One approval of the member (the dashboard card, else the Terminal).
-async function approve(self, id, signal, ctx, action, { title, body }) {
+export async function approve(self, id, signal, ctx, action, { title, body }) {
   const { piApprovalBroker } = await import('../runtime/inspection/approval-broker.ts');
   const decision = await piApprovalBroker.request({ cwd: self.cwd, rawSessionId: self.session.sessionManager.getSessionId(), toolCallId: id,
     action: { kind: 'external-provider-action', preconditionClass: 'runtime-only', targetPaths: [self.cwd], urlOrigin: null, ...action },