@skydiveai/pi-extensions 0.1.0-beta.1728 → 0.1.0-beta.1729

package/dist/index.mjs

@@ -418,6 +418,275 @@ function installIterationCap({ session, log }, configOverride = null) {
 */
 const CAPABILITY_SOUL_NUDGE = "New capability gained — once the current task is done, if this changes what you can do for the user, record it in `soul.md` so it carries into future conversations rather than being rediscovered from scratch (then commit and push).";
 //#endregion
+//#region src/extensions/tool-call-summary.ts
+const log$14 = logger.child({ module: "tool-call-summary-extension" });
+/**
+* The injected parameter name: a namespaced sentinel, so it can never collide
+* with a real tool argument and is unmistakable in transcripts and logs. The
+* frontend renderer (ANY-2723) duplicates this literal — keep the two in sync.
+*/
+const TOOL_CALL_SUMMARY_FIELD = "__skydive_summary__";
+/** JSON Schema fragment for the injected parameter. */
+const SUMMARY_PROPERTY = {
+	type: "string",
+	description: "Required for every tool call. A concise, specific summary (max ~8 words) of what THIS call does and why, written for a person watching the conversation, e.g. \"Searching feedback for billing complaints\" or \"Reading the auth middleware\". Address the user directly in second person: the summary is read by the user, so refer to their things as \"your\", never in third person — \"Reading your emails\", not \"Reading his emails\". Always use the present progressive tense, since it is shown while the call runs: \"Updating your Slack\", never \"Updated your Slack\". Make each summary distinct from your other tool calls; never reuse a generic label like \"Search query\" or \"Running command\"."
+};
+const jsonSchemaObjectSchema = z.object({
+	type: z.unknown().optional(),
+	properties: z.record(z.string(), z.unknown()).optional(),
+	required: z.array(z.string()).optional(),
+	additionalProperties: z.unknown().optional()
+}).passthrough();
+const toolEntrySchema = z.object({
+	name: z.string().optional(),
+	input_schema: jsonSchemaObjectSchema.optional(),
+	parameters: jsonSchemaObjectSchema.optional(),
+	function: z.object({
+		name: z.string().optional(),
+		parameters: jsonSchemaObjectSchema.optional()
+	}).passthrough().optional()
+}).passthrough();
+const payloadWithToolsSchema = z.object({ tools: z.array(z.unknown()) }).passthrough();
+/**
+* Add the summary property to one JSON Schema object. Returns the augmented
+* copy, or `null` when the tool should be left untouched: a strict schema
+* (`additionalProperties: false`) whose validation would reject the extra
+* field, or one that already declares a `__skydive_summary__` property of its own.
+*/
+function augmentSchema(schema) {
+	if (schema.additionalProperties === false) return null;
+	const properties = schema.properties ?? {};
+	if ("__skydive_summary__" in properties) return null;
+	const required = schema.required ?? [];
+	return {
+		...schema,
+		type: schema.type ?? "object",
+		properties: {
+			[TOOL_CALL_SUMMARY_FIELD]: SUMMARY_PROPERTY,
+			...properties
+		},
+		required: required.includes("__skydive_summary__") ? required : [...required, TOOL_CALL_SUMMARY_FIELD]
+	};
+}
+/**
+* Augment a single tool entry, dispatching on which provider shape it is.
+* Returns the (possibly rebuilt) entry and whether anything changed. Skipped
+* tools — wrong shape, strict, or name in `strictToolNames` — return unchanged.
+*/
+function augmentToolEntry(entry, strictToolNames) {
+	const parsed = toolEntrySchema.safeParse(entry);
+	if (!parsed.success) return {
+		entry,
+		changed: false
+	};
+	const tool = parsed.data;
+	const name = tool.name ?? tool.function?.name ?? null;
+	if (name !== null && strictToolNames.has(name)) return {
+		entry,
+		changed: false
+	};
+	if (tool.input_schema) {
+		const augmented = augmentSchema(tool.input_schema);
+		if (!augmented) return {
+			entry,
+			changed: false
+		};
+		return {
+			entry: {
+				...tool,
+				input_schema: augmented
+			},
+			changed: true
+		};
+	}
+	if (tool.parameters) {
+		const augmented = augmentSchema(tool.parameters);
+		if (!augmented) return {
+			entry,
+			changed: false
+		};
+		return {
+			entry: {
+				...tool,
+				parameters: augmented
+			},
+			changed: true
+		};
+	}
+	if (tool.function?.parameters) {
+		const augmented = augmentSchema(tool.function.parameters);
+		if (!augmented) return {
+			entry,
+			changed: false
+		};
+		return {
+			entry: {
+				...tool,
+				function: {
+					...tool.function,
+					parameters: augmented
+				}
+			},
+			changed: true
+		};
+	}
+	return {
+		entry,
+		changed: false
+	};
+}
+/**
+* Inject the summary field into every eligible tool in a provider payload.
+* Returns a new payload when at least one tool was augmented, or `undefined`
+* to signal "no change" (which keeps the original payload, per the
+* `before_provider_request` contract).
+*
+* @param payload The outgoing provider payload (shape varies by provider).
+* @param strictToolNames Names of tools whose registered schema is strict and
+*   must be skipped to avoid validation errors.
+*/
+function injectToolCallSummary(payload, strictToolNames) {
+	const parsed = payloadWithToolsSchema.safeParse(payload);
+	if (!parsed.success || parsed.data.tools.length === 0) return void 0;
+	let changed = false;
+	const tools = parsed.data.tools.map((entry) => {
+		const result = augmentToolEntry(entry, strictToolNames);
+		if (result.changed) changed = true;
+		return result.entry;
+	});
+	if (!changed) return void 0;
+	return {
+		...parsed.data,
+		tools
+	};
+}
+/**
+* Names of registered tools whose schema sets `additionalProperties: false`.
+* Pi validates the model's tool args against this registered schema, so the
+* injected field would make a strict tool's call fail validation — skip them.
+*/
+function getStrictToolNames(pi) {
+	const names = /* @__PURE__ */ new Set();
+	for (const tool of pi.getAllTools()) {
+		const parsed = jsonSchemaObjectSchema.safeParse(tool.parameters);
+		if (parsed.success && parsed.data.additionalProperties === false) names.add(tool.name);
+	}
+	return names;
+}
+/**
+* Whether a tool's own schema declares a `__skydive_summary__` property. We
+* never inject into such a tool, so any value it carries is a real argument
+* and must be left alone.
+*/
+function schemaDeclaresSummary(parameters) {
+	const parsed = jsonSchemaObjectSchema.safeParse(parameters);
+	return parsed.success && parsed.data.properties != null && "__skydive_summary__" in parsed.data.properties;
+}
+function toolDeclaresSummaryParam(pi, toolName) {
+	const tool = pi.getAllTools().find((candidate) => candidate.name === toolName);
+	if (!tool) return false;
+	return schemaDeclaresSummary(tool.parameters);
+}
+/** A copy of `args` without the injected summary. Never mutates its input. */
+function withoutInjectedSummary(args) {
+	if (args == null || typeof args !== "object" || Array.isArray(args)) return args;
+	if (!("__skydive_summary__" in args)) return args;
+	const { [TOOL_CALL_SUMMARY_FIELD]: _summary, ...rest } = args;
+	return rest;
+}
+/**
+* Register a tool so the injected summary is removed *before* pi validates
+* the model's arguments against the tool's schema.
+*
+* Needed because the `tool_call` strip below runs too late. pi-agent-core's
+* `prepareToolCall` goes: `tool.prepareArguments` → `validateToolArguments` →
+* `beforeToolCall` (which is what dispatches `tool_call`). A tool whose schema
+* sets `additionalProperties: false` therefore rejects the summary and errors
+* the call — client-side, before any request reaches the server — while the
+* strip meant to prevent exactly that sits one step further down.
+*
+* `augmentSchema` already skips strict tools, but that only controls what the
+* model is *told*. It still emits the field on those tools, because every
+* other tool in the list declares it as required for every call. So a server
+* can connect, bind its tools, present a healthy inventory, and have every
+* call fail — and it reads as the server's fault when it is ours.
+*
+* Apply to tools registered from schemas we do not author: MCP servers and
+* local `tools/*.ts`. Tools built here with `Type.Object(...)` do not need it
+* (TypeBox emits no `additionalProperties`, so the field validates fine and
+* the `tool_call` strip removes it in time).
+*
+* Fails open, like the rest of this module: if the strip throws, the original
+* arguments are used rather than failing the call.
+*/
+function withSummaryStrippedBeforeValidation(tool) {
+	if (schemaDeclaresSummary(tool.parameters)) return tool;
+	const toolPrepare = tool.prepareArguments;
+	const prepareArguments = ((args) => {
+		let stripped = args;
+		try {
+			stripped = withoutInjectedSummary(args);
+		} catch (err) {
+			log$14.error({
+				err,
+				event: "tool_call_summary_prepare_strip_failed",
+				toolName: tool.name
+			}, "tool_call_summary pre-validation strip failed; leaving arguments untouched");
+		}
+		return toolPrepare ? toolPrepare(stripped) : stripped;
+	});
+	return {
+		...tool,
+		prepareArguments
+	};
+}
+/**
+* Remove the injected summary from a tool's execution input. No-op when the
+* field is absent, or when the tool genuinely declares a `__skydive_summary__`
+* parameter of its own (which we never inject into, so its value is real).
+* Mutates `input` in place, matching the `tool_call` contract.
+*
+* Fails open: this runs on the critical path of tool execution, and the
+* `getAllTools()` lookup can throw. On any error we leave `input` untouched
+* (the sentinel may pass through to the tool, but a bug here can never break
+* tool execution).
+*/
+function stripInjectedSummary(pi, toolName, input) {
+	try {
+		if (!("__skydive_summary__" in input)) return;
+		if (toolDeclaresSummaryParam(pi, toolName)) return;
+		delete input[TOOL_CALL_SUMMARY_FIELD];
+	} catch (err) {
+		log$14.error({
+			err,
+			event: "tool_call_summary_strip_failed",
+			toolName
+		}, "tool_call_summary strip failed; leaving tool input untouched");
+	}
+}
+/**
+* Compute the rewritten payload for a `before_provider_request` event, failing
+* open: on any error the original payload is left untouched so a bug here can
+* never break an LLM call.
+*/
+function buildInjectedPayload(pi, payload) {
+	try {
+		return injectToolCallSummary(payload, getStrictToolNames(pi));
+	} catch (err) {
+		log$14.error({
+			err,
+			event: "tool_call_summary_injection_failed"
+		}, "tool_call_summary injection failed; passing payload through unchanged");
+		return;
+	}
+}
+const toolCallSummaryExtension = (pi) => {
+	pi.on("before_provider_request", (event) => buildInjectedPayload(pi, event.payload));
+	pi.on("tool_call", (event) => {
+		stripInjectedSummary(pi, event.toolName, event.input);
+	});
+};
+//#endregion
 //#region src/extensions/local-tools.ts
 /**
 * Local-tools adapter as a pi extension. Mirrors the mcp.ts hot-reload pattern
@@ -441,7 +710,7 @@ const CAPABILITY_SOUL_NUDGE = "New capability gained — once the current task i
 * or `ToolDefinition[]`. Files starting with `_` or `.` are skipped, so
 * `tools/_example.ts` documents the shape without registering.
 */
-const log$14 = logger.child({ module: "local-tools-extension" });
+const log$13 = logger.child({ module: "local-tools-extension" });
 const TOOLS_DIRNAME = "tools";
 const fileState = /* @__PURE__ */ new Map();
 let pendingLocalToolsUpdate = null;
@@ -568,7 +837,7 @@ async function reconcileLocalTools({ pi, dir }) {
 			action = existing ? "refreshed" : "added";
 		}
 		for (const tool of tools) {
-			pi.registerTool(withDefaultPromptSnippet(tool));
+			pi.registerTool(withSummaryStrippedBeforeValidation(withDefaultPromptSnippet(tool)));
 			summary.totalTools++;
 		}
 		if (action === "added") summary.added.push(file);
@@ -585,7 +854,7 @@ async function reconcileAndQueue({ pi, dir, reason }) {
 		dir
 	});
 	if (reason !== "session_start" && summaryHasChanges$1(summary)) pendingLocalToolsUpdate = summary;
-	log$14.info({
+	log$13.info({
 		event: "local_tools_reconcile",
 		reason,
 		total_tools: summary.totalTools,
@@ -607,7 +876,7 @@ const localToolsExtension = (pi) => {
 				reason: "session_start"
 			});
 		} catch (err) {
-			log$14.error({
+			log$13.error({
 				err,
 				event: "local_tools_reconcile_failed"
 			}, "local tools reconcile failed");
@@ -619,7 +888,7 @@ const localToolsExtension = (pi) => {
 		try {
 			current = await listToolFiles(dir);
 		} catch (err) {
-			log$14.warn({
+			log$13.warn({
 				err,
 				event: "local_tools_listing_failed"
 			}, "tools/ listing failed");
@@ -641,7 +910,7 @@ const localToolsExtension = (pi) => {
 				reason: "auto_reload"
 			});
 		} catch (err) {
-			log$14.error({
+			log$13.error({
 				err,
 				event: "local_tools_auto_reload_failed"
 			}, "auto-reload after tools/ change failed");
@@ -879,7 +1148,7 @@ async function loadMcpConfig(path) {
 * Clients are keyed by JSON-stringified config and reused across
 * reloads — only changed configs reconnect.
 */
-const log$13 = logger.child({ module: "mcp-extension" });
+const log$12 = logger.child({ module: "mcp-extension" });
 async function closeConnected(connected) {
 	try {
 		await connected.client.close();
@@ -969,7 +1238,7 @@ var McpExtension = class {
 		const parameters = Type.Unsafe(tool.inputSchema);
 		const description = tool.description?.trim() ?? "";
 		const promptSnippet = description.length > 0 ? description : `MCP tool from server "${serverId}".`;
-		pi.registerTool({
+		pi.registerTool(withSummaryStrippedBeforeValidation({
 			name,
 			label: `MCP: ${serverId}/${tool.name}`,
 			description,
@@ -1003,7 +1272,7 @@ var McpExtension = class {
 					};
 				}
 			}
-		});
+		}));
 		this.registeredMcpToolNames.add(name);
 	}
 	async reconcile({ pi, configPath, connectTimeoutMs }) {
@@ -1301,7 +1570,7 @@ var McpExtension = class {
 		});
 		this.lastConfigMtimeMs = await readConfigMtimeMs(configPath);
 		if (reason !== "session_start" && summaryHasChanges(summary)) this.pendingMcpUpdate = summary;
-		log$13.info({
+		log$12.info({
 			event: "mcp_reconcile",
 			reason,
 			total_tools: summary.totalTools,
@@ -1324,7 +1593,7 @@ var McpExtension = class {
 						reason: "session_start"
 					});
 				} catch (err) {
-					log$13.error({
+					log$12.error({
 						err,
 						event: "mcp_reconcile_failed"
 					}, "MCP reconcile failed");
@@ -1336,7 +1605,7 @@ var McpExtension = class {
 				try {
 					mtime = await readConfigMtimeMs(configPath);
 				} catch (err) {
-					log$13.warn({
+					log$12.warn({
 						err,
 						event: "mcp_mtime_check_failed"
 					}, "mtime check on mcp.config.json failed");
@@ -1350,7 +1619,7 @@ var McpExtension = class {
 						reason: "auto_reload"
 					});
 				} catch (err) {
-					log$13.error({
+					log$12.error({
 						err,
 						event: "mcp_auto_reload_failed"
 					}, "auto-reload after mcp.config.json change failed");
@@ -1746,7 +2015,7 @@ const bashDefaultTimeoutExtension = (pi) => {
 * turn over an observability feature.
 */
 const execFileAsync = promisify(execFile);
-const log$12 = logger.child({ module: "resource-pressure-warning" });
+const log$11 = logger.child({ module: "resource-pressure-warning" });
 const POLL_INTERVAL_MS = 1e4;
 function envOverride(name) {
 	for (const prefix of ["SKYDIVE_", "ANYONE_"]) {
@@ -1884,7 +2153,7 @@ const resourcePressureWarningExtension = (pi) => {
 			warnedDiskThisTurn = true;
 		}
 		if (trigger === null) return;
-		log$12.warn({
+		log$11.warn({
 			trigger,
 			mem,
 			cpuPct,
@@ -1910,7 +2179,7 @@ const resourcePressureWarningExtension = (pi) => {
 		if (!timer) {
 			timer = setInterval(() => {
 				checkOnce().catch((err) => {
-					log$12.error({ err }, "resource pressure check failed");
+					log$11.error({ err }, "resource pressure check failed");
 				});
 			}, POLL_INTERVAL_MS);
 			timer.unref?.();
@@ -1926,7 +2195,7 @@ const resourcePressureWarningExtension = (pi) => {
 };
 //#endregion
 //#region src/extensions/disk-guard.ts
-const log$11 = logger.child({ module: "disk-guard" });
+const log$10 = logger.child({ module: "disk-guard" });
 /**
 * In-band bypass. The guard is a safety net, not a jail: when the agent knows
 * a flagged command is genuinely safe (writing to a different mount, a tiny
@@ -2066,7 +2335,7 @@ const diskGuardExtension = (pi) => {
 		if (!isSpaceHungryCommand(command)) return;
 		const diskPct = await readDiskUsePct();
 		if (!shouldBlockForDisk(command, diskPct)) return;
-		log$11.warn({
+		log$10.warn({
 			diskPct,
 			command: command.slice(0, 200)
 		}, "blocked space-hungry bash command on near-full disk");
@@ -2139,7 +2408,7 @@ const HEARTBEAT_THROTTLE_MS = 6e4;
 const TOOL_HEARTBEAT_INTERVAL_MS = 5e3;
 const MAX_TOOL_HEARTBEATS = 1440 * 60 * 1e3 / TOOL_HEARTBEAT_INTERVAL_MS;
 const DAEMON_URL = "http://localhost:38994";
-const log$10 = logger.child({ module: "platform-ext" });
+const log$9 = logger.child({ module: "platform-ext" });
 function sandboxClient() {
 	const apiUrl = apiBaseUrl();
 	if (!apiUrl) return null;
@@ -2207,7 +2476,7 @@ async function fetchHarnessFlags() {
 	try {
 		const res = await client["feature-flags"].$get();
 		if (!res.ok) {
-			log$10.debug({
+			log$9.debug({
 				status: res.status,
 				event: "feature_flags_fetch_failed"
 			}, "feature-flags fetch failed");
@@ -2215,7 +2484,7 @@ async function fetchHarnessFlags() {
 		}
 		return { contextManagement: (await res.json()).contextManagement ?? null };
 	} catch (err) {
-		log$10.debug({
+		log$9.debug({
 			err,
 			event: "feature_flags_fetch_error"
 		}, "feature-flags request errored");
@@ -2226,7 +2495,7 @@ function postHeartbeat({ messageId }) {
 	const client = sandboxClient();
 	if (!client) return;
 	client.heartbeat.$post({ json: { messageId } }).catch((err) => {
-		log$10.debug({
+		log$9.debug({
 			err,
 			event: "heartbeat_failed"
 		}, "heartbeat failed");
@@ -2238,7 +2507,7 @@ async function resolveConversationFromApi(messageId) {
 	try {
 		const res = await client["message-conversation"].$get({ query: { messageId } });
 		if (!res.ok) {
-			log$10.warn({
+			log$9.warn({
 				status: res.status,
 				messageId,
 				event: "resolve_conversation_failed"
@@ -2247,7 +2516,7 @@ async function resolveConversationFromApi(messageId) {
 		}
 		return (await res.json()).conversationId ?? null;
 	} catch (err) {
-		log$10.warn({
+		log$9.warn({
 			err,
 			messageId,
 			event: "resolve_conversation_error"
@@ -2272,13 +2541,13 @@ async function putBackgroundTaskJournalSpec({ messageId, spec }) {
 			messageId,
 			spec
 		} });
-		if (!res.ok) log$10.warn({
+		if (!res.ok) log$9.warn({
 			status: res.status,
 			taskId: spec.id,
 			event: "bg_journal_put_failed"
 		}, "bg-task journal PUT failed");
 	} catch (err) {
-		log$10.warn({
+		log$9.warn({
 			err,
 			taskId: spec.id,
 			event: "bg_journal_put_failed"
@@ -2294,7 +2563,7 @@ async function deleteBackgroundTaskJournalSpec({ messageId, taskId }) {
 			taskId
 		} });
 	} catch (err) {
-		log$10.debug({
+		log$9.debug({
 			err,
 			taskId,
 			event: "bg_journal_delete_failed"
@@ -2309,7 +2578,7 @@ async function listBackgroundTaskJournalSpecs({ messageId }) {
 		if (!res.ok) return [];
 		return (await res.json()).specs ?? [];
 	} catch (err) {
-		log$10.debug({
+		log$9.debug({
 			err,
 			event: "bg_journal_list_failed"
 		}, "bg-task journal GET failed");
@@ -2323,7 +2592,7 @@ function postBackgroundTasksSnapshot({ messageId, tasks }) {
 		messageId,
 		tasks
 	} }).catch((err) => {
-		log$10.debug({
+		log$9.debug({
 			err,
 			event: "bg_tasks_snapshot_failed"
 		}, "bg-tasks snapshot publish failed");
@@ -2397,7 +2666,7 @@ function createToolHeartbeat({ messageId }) {
 			}
 			heartbeatCount++;
 			if (heartbeatCount > MAX_TOOL_HEARTBEATS) {
-				log$10.warn({
+				log$9.warn({
 					heartbeatCount,
 					activeToolCalls: [...activeToolCalls]
 				}, "tool heartbeat max reached, stopping");
@@ -2428,7 +2697,7 @@ function postToDaemon(path, body) {
 		headers: { "content-type": "application/json" },
 		body: JSON.stringify(body)
 	}).catch((err) => {
-		log$10.debug({
+		log$9.debug({
 			err,
 			path,
 			event: "daemon_post_failed"
@@ -2437,7 +2706,7 @@ function postToDaemon(path, body) {
 }
 function createPlatformExtensions({ sessionId, channelContext }) {
 	return (pi) => {
-		log$10.info({
+		log$9.info({
 			sessionId,
 			hasChannelContext: Boolean(channelContext)
 		}, "platform extension initialized");
@@ -2486,7 +2755,7 @@ function createPlatformExtensions({ sessionId, channelContext }) {
 			});
 		});
 		pi.on("agent_end", () => {
-			log$10.info({ sessionId }, "session ending");
+			log$9.info({ sessionId }, "session ending");
 			postToDaemon("/session/end", { sessionId });
 		});
 	};
@@ -2512,7 +2781,7 @@ function createPlatformExtensions({ sessionId, channelContext }) {
 * alive and an indeterminate result (no api url / transient failure) leaves the
 * last-known values untouched so a blip can't silently flip behavior.
 */
-const log$9 = logger.child({ module: "feature-flags-poll" });
+const log$8 = logger.child({ module: "feature-flags-poll" });
 const FLAG_POLL_INTERVAL_MS = 6e4;
 let contextManagement = null;
 const subscribers = { contextManagement: /* @__PURE__ */ new Set() };
@@ -2547,7 +2816,7 @@ function apply(name, next) {
 	if (next !== prev) for (const cb of subscribers[name]) try {
 		cb(next);
 	} catch (err) {
-		log$9.warn({
+		log$8.warn({
 			err,
 			flag: name
 		}, "flag subscriber threw");
@@ -2559,7 +2828,7 @@ async function pollOnce() {
 		if (!flags) return;
 		apply("contextManagement", flags.contextManagement ?? null);
 	} catch (err) {
-		log$9.debug({ err }, "feature-flag poll threw");
+		log$8.debug({ err }, "feature-flag poll threw");
 	}
 }
 /**
@@ -2666,7 +2935,7 @@ function transformContextMessages(messages, config, now) {
 }
 //#endregion
 //#region src/extensions/context-management.ts
-const log$8 = logger.child({ module: "context-management-extension" });
+const log$7 = logger.child({ module: "context-management-extension" });
 function isAnthropicMessagesPayload(payload) {
 	if (typeof payload !== "object" || payload === null) return false;
 	const candidate = payload;
@@ -2731,13 +3000,13 @@ function createContextManagementExtension() {
 		setContextManagementFlagOverride(getPolledFlag("contextManagement"));
 		onFlagChange("contextManagement", (enabled) => {
 			setContextManagementFlagOverride(enabled);
-			log$8.info({
+			log$7.info({
 				event: "context_management_flag_update",
 				enabled
 			}, "context-management flag updated from platform");
 		});
 		startFeatureFlagPoller();
-		log$8.info({
+		log$7.info({
 			event: "context_management_registered",
 			enabled: initial.enabled,
 			flagSource: hasFlagSource(),
@@ -2749,13 +3018,13 @@ function createContextManagementExtension() {
 			const { messages } = event;
 			try {
 				const result = transformContextIfEnabled(messages, getContextManagementConfig(), Date.now());
-				if (result.stats && (result.stats.clearedResults > 0 || result.stats.trimmedResults > 0)) log$8.info({
+				if (result.stats && (result.stats.clearedResults > 0 || result.stats.trimmedResults > 0)) log$7.info({
 					event: "context_management_applied",
 					...result.stats
 				}, "trimmed/cleared tool output before LLM call");
 				return { messages: result.messages };
 			} catch (err) {
-				log$8.error({
+				log$7.error({
 					err,
 					event: "context_management_transform_failed"
 				}, "context transform failed; passing messages through unchanged");
@@ -2767,7 +3036,7 @@ function createContextManagementExtension() {
 }
 //#endregion
 //#region src/extensions/current-time.ts
-const log$7 = logger.child({ module: "current-time-extension" });
+const log$6 = logger.child({ module: "current-time-extension" });
 const PI_DATE_LINE = /^Current date:.*$/m;
 function formatCurrentTimeLine(now) {
 	return `Current date: ${now.getUTCFullYear()}-${String(now.getUTCMonth() + 1).padStart(2, "0")}-${String(now.getUTCDate()).padStart(2, "0")} (${new Intl.DateTimeFormat("en-US", {
@@ -2780,7 +3049,7 @@ const currentTimeExtension = (pi) => {
 		const line = formatCurrentTimeLine(/* @__PURE__ */ new Date());
 		const base = event.systemPrompt;
 		if (PI_DATE_LINE.test(base)) {
-			log$7.info({ event: "pi_date_line_present" }, "pi base prompt carries its own 'Current date:' line again; replacing it in place (pi prompt format may have changed)");
+			log$6.info({ event: "pi_date_line_present" }, "pi base prompt carries its own 'Current date:' line again; replacing it in place (pi prompt format may have changed)");
 			return { systemPrompt: base.replace(PI_DATE_LINE, line) };
 		}
 		return { systemPrompt: `${base}\n${line}` };
@@ -3168,7 +3437,7 @@ async function migrateMemory({ cwd }) {
 }
 //#endregion
 //#region src/extensions/memory.ts
-const log$6 = logger.child({ module: "memory-extension" });
+const log$5 = logger.child({ module: "memory-extension" });
 /**
 * The standing instructions for the memory system. Always injected (even with
 * no `MEMORY.md`) so the agent knows it can persist notes and how. `users/` is
@@ -3205,13 +3474,13 @@ const memoryExtension = (pi) => {
 	pi.on("session_start", async (_event, ctx) => {
 		try {
 			const migrated = await migrateMemory({ cwd: ctx.cwd });
-			if (migrated !== null) log$6.info({
+			if (migrated !== null) log$5.info({
 				event: "memory_migrated",
 				from: migrated.from,
 				to: migrated.to
 			}, "migrated memory layout to current version");
 		} catch (err) {
-			log$6.warn({
+			log$5.warn({
 				err,
 				event: "memory_migration_failed"
 			}, "memory migration failed; continuing with existing index");
@@ -3223,7 +3492,7 @@ const memoryExtension = (pi) => {
 				index
 			});
 		} catch (err) {
-			log$6.warn({
+			log$5.warn({
 				err,
 				event: "memory_index_failed"
 			}, "memory index read failed; injecting instructions only");
@@ -3237,7 +3506,7 @@ const memoryExtension = (pi) => {
 };
 //#endregion
 //#region src/extensions/platform-memory.ts
-const log$5 = logger.child({ module: "platform-memory-extension" });
+const log$4 = logger.child({ module: "platform-memory-extension" });
 /**
 * Resolve the human on this turn via the API, keyed by the message id.
 * `/sandbox/channel-context` only returns a sender for a platform-known
@@ -3250,13 +3519,13 @@ const log$5 = logger.child({ module: "platform-memory-extension" });
 async function resolveTurnUser(messageId) {
 	const client = sandboxClient();
 	if (!client) {
-		log$5.debug({ event: "resolve_turn_user_no_api_url" }, "no API url in env; withholding user memory");
+		log$4.debug({ event: "resolve_turn_user_no_api_url" }, "no API url in env; withholding user memory");
 		return null;
 	}
 	try {
 		const res = await client["channel-context"].$get({ query: { messageId } });
 		if (!res.ok) {
-			log$5.warn({
+			log$4.warn({
 				event: "resolve_turn_user_failed",
 				status: res.status
 			}, "channel-context returned non-ok; withholding user memory");
@@ -3269,7 +3538,7 @@ async function resolveTurnUser(messageId) {
 			displayName: sender.displayName
 		};
 	} catch (err) {
-		log$5.warn({
+		log$4.warn({
 			err,
 			event: "resolve_turn_user_failed"
 		}, "failed to resolve current user; withholding user memory");
@@ -3316,7 +3585,7 @@ function createPlatformMemoryExtension({ channelContext }) {
 					user
 				});
 			} catch (err) {
-				log$5.warn({
+				log$4.warn({
 					err,
 					event: "user_memory_index_failed"
 				}, "user memory index build failed; skipping injection");
@@ -3331,7 +3600,7 @@ function createPlatformMemoryExtension({ channelContext }) {
 }
 //#endregion
 //#region src/extensions/self-trace.ts
-const log$4 = logger.child({ module: "self-trace-extension" });
+const log$3 = logger.child({ module: "self-trace-extension" });
 /**
 * Reports the agent's own execution as OpenTelemetry spans:
 * agent.session → agent.run → agent.turn.N → tool.NAME, with token/cost
@@ -3356,7 +3625,7 @@ const selfTraceExtension = (pi) => {
 		sessionSpan = tracer.startSpan("agent.session", { attributes: { "agent.model": modelId } }, remoteCtx);
 		sessionCtx = trace.setSpan(remoteCtx, sessionSpan);
 		const sc = sessionSpan.spanContext();
-		log$4.info({
+		log$3.info({
 			event: "self_trace_session_start",
 			trace_id: sc.traceId,
 			span_id: sc.spanId,
@@ -3468,13 +3737,13 @@ const selfTraceExtension = (pi) => {
 * Lives in the harness package — soul.md is content from the agent's
 * own git repo, not from the platform — so its handling stays here.
 */
-const log$3 = logger.child({ module: "soul-extension" });
+const log$2 = logger.child({ module: "soul-extension" });
 async function readSoul(cwd) {
 	try {
 		return (await readFile(join(cwd, "soul.md"), "utf8")).trim() || null;
 	} catch (err) {
 		if (err?.code === "ENOENT") return null;
-		log$3.warn({
+		log$2.warn({
 			err,
 			event: "soul_read_failed"
 		}, "soul.md read failed");
@@ -3506,7 +3775,7 @@ const soulExtension = (pi) => {
 };
 //#endregion
 //#region src/extensions/subagent/index.ts
-const log$2 = logger.child({ module: "subagent-ext" });
+const log$1 = logger.child({ module: "subagent-ext" });
 const MAX_TASKS = 8;
 const TaskItem = Type.Object({
 	task: Type.String({ description: "The task to delegate to a subagent run." }),
@@ -3566,7 +3835,7 @@ function buildTool(messageId) {
 					tasks: spawnTasks
 				});
 				const { taskIds } = spawned;
-				log$2.info({
+				log$1.info({
 					event: "subagent_spawned",
 					count: taskIds.length
 				}, "subagent tasks queued");
@@ -3589,7 +3858,7 @@ function buildTool(messageId) {
 				};
 			} catch (err) {
 				const message = err instanceof Error ? err.message : String(err);
-				log$2.warn({
+				log$1.warn({
 					err,
 					event: "subagent_spawn_failed"
 				}, "subagent spawn failed");
@@ -3620,7 +3889,7 @@ function createSubagentExtension({ channelContext }) {
 			if (registered) return;
 			registered = true;
 			pi.registerTool(buildTool(messageId));
-			log$2.info({ event: "subagent_enabled" }, "subagent tool registered");
+			log$1.info({ event: "subagent_enabled" }, "subagent tool registered");
 		};
 		pi.on("session_start", () => {
 			registerOnce();
@@ -3654,214 +3923,6 @@ const toolCallEnvExtension = (pi) => {
 	});
 };
 //#endregion
-//#region src/extensions/tool-call-summary.ts
-const log$1 = logger.child({ module: "tool-call-summary-extension" });
-/**
-* The injected parameter name: a namespaced sentinel, so it can never collide
-* with a real tool argument and is unmistakable in transcripts and logs. The
-* frontend renderer (ANY-2723) duplicates this literal — keep the two in sync.
-*/
-const TOOL_CALL_SUMMARY_FIELD = "__skydive_summary__";
-/** JSON Schema fragment for the injected parameter. */
-const SUMMARY_PROPERTY = {
-	type: "string",
-	description: "Required for every tool call. A concise, specific summary (max ~8 words) of what THIS call does and why, written for a person watching the conversation, e.g. \"Searching feedback for billing complaints\" or \"Reading the auth middleware\". Address the user directly in second person: the summary is read by the user, so refer to their things as \"your\", never in third person — \"Reading your emails\", not \"Reading his emails\". Always use the present progressive tense, since it is shown while the call runs: \"Updating your Slack\", never \"Updated your Slack\". Make each summary distinct from your other tool calls; never reuse a generic label like \"Search query\" or \"Running command\"."
-};
-const jsonSchemaObjectSchema = z.object({
-	type: z.unknown().optional(),
-	properties: z.record(z.string(), z.unknown()).optional(),
-	required: z.array(z.string()).optional(),
-	additionalProperties: z.unknown().optional()
-}).passthrough();
-const toolEntrySchema = z.object({
-	name: z.string().optional(),
-	input_schema: jsonSchemaObjectSchema.optional(),
-	parameters: jsonSchemaObjectSchema.optional(),
-	function: z.object({
-		name: z.string().optional(),
-		parameters: jsonSchemaObjectSchema.optional()
-	}).passthrough().optional()
-}).passthrough();
-const payloadWithToolsSchema = z.object({ tools: z.array(z.unknown()) }).passthrough();
-/**
-* Add the summary property to one JSON Schema object. Returns the augmented
-* copy, or `null` when the tool should be left untouched: a strict schema
-* (`additionalProperties: false`) whose validation would reject the extra
-* field, or one that already declares a `__skydive_summary__` property of its own.
-*/
-function augmentSchema(schema) {
-	if (schema.additionalProperties === false) return null;
-	const properties = schema.properties ?? {};
-	if ("__skydive_summary__" in properties) return null;
-	const required = schema.required ?? [];
-	return {
-		...schema,
-		type: schema.type ?? "object",
-		properties: {
-			[TOOL_CALL_SUMMARY_FIELD]: SUMMARY_PROPERTY,
-			...properties
-		},
-		required: required.includes("__skydive_summary__") ? required : [...required, TOOL_CALL_SUMMARY_FIELD]
-	};
-}
-/**
-* Augment a single tool entry, dispatching on which provider shape it is.
-* Returns the (possibly rebuilt) entry and whether anything changed. Skipped
-* tools — wrong shape, strict, or name in `strictToolNames` — return unchanged.
-*/
-function augmentToolEntry(entry, strictToolNames) {
-	const parsed = toolEntrySchema.safeParse(entry);
-	if (!parsed.success) return {
-		entry,
-		changed: false
-	};
-	const tool = parsed.data;
-	const name = tool.name ?? tool.function?.name ?? null;
-	if (name !== null && strictToolNames.has(name)) return {
-		entry,
-		changed: false
-	};
-	if (tool.input_schema) {
-		const augmented = augmentSchema(tool.input_schema);
-		if (!augmented) return {
-			entry,
-			changed: false
-		};
-		return {
-			entry: {
-				...tool,
-				input_schema: augmented
-			},
-			changed: true
-		};
-	}
-	if (tool.parameters) {
-		const augmented = augmentSchema(tool.parameters);
-		if (!augmented) return {
-			entry,
-			changed: false
-		};
-		return {
-			entry: {
-				...tool,
-				parameters: augmented
-			},
-			changed: true
-		};
-	}
-	if (tool.function?.parameters) {
-		const augmented = augmentSchema(tool.function.parameters);
-		if (!augmented) return {
-			entry,
-			changed: false
-		};
-		return {
-			entry: {
-				...tool,
-				function: {
-					...tool.function,
-					parameters: augmented
-				}
-			},
-			changed: true
-		};
-	}
-	return {
-		entry,
-		changed: false
-	};
-}
-/**
-* Inject the summary field into every eligible tool in a provider payload.
-* Returns a new payload when at least one tool was augmented, or `undefined`
-* to signal "no change" (which keeps the original payload, per the
-* `before_provider_request` contract).
-*
-* @param payload The outgoing provider payload (shape varies by provider).
-* @param strictToolNames Names of tools whose registered schema is strict and
-*   must be skipped to avoid validation errors.
-*/
-function injectToolCallSummary(payload, strictToolNames) {
-	const parsed = payloadWithToolsSchema.safeParse(payload);
-	if (!parsed.success || parsed.data.tools.length === 0) return void 0;
-	let changed = false;
-	const tools = parsed.data.tools.map((entry) => {
-		const result = augmentToolEntry(entry, strictToolNames);
-		if (result.changed) changed = true;
-		return result.entry;
-	});
-	if (!changed) return void 0;
-	return {
-		...parsed.data,
-		tools
-	};
-}
-/**
-* Names of registered tools whose schema sets `additionalProperties: false`.
-* Pi validates the model's tool args against this registered schema, so the
-* injected field would make a strict tool's call fail validation — skip them.
-*/
-function getStrictToolNames(pi) {
-	const names = /* @__PURE__ */ new Set();
-	for (const tool of pi.getAllTools()) {
-		const parsed = jsonSchemaObjectSchema.safeParse(tool.parameters);
-		if (parsed.success && parsed.data.additionalProperties === false) names.add(tool.name);
-	}
-	return names;
-}
-function toolDeclaresSummaryParam(pi, toolName) {
-	const tool = pi.getAllTools().find((candidate) => candidate.name === toolName);
-	if (!tool) return false;
-	const parsed = jsonSchemaObjectSchema.safeParse(tool.parameters);
-	return parsed.success && parsed.data.properties != null && "__skydive_summary__" in parsed.data.properties;
-}
-/**
-* Remove the injected summary from a tool's execution input. No-op when the
-* field is absent, or when the tool genuinely declares a `__skydive_summary__`
-* parameter of its own (which we never inject into, so its value is real).
-* Mutates `input` in place, matching the `tool_call` contract.
-*
-* Fails open: this runs on the critical path of tool execution, and the
-* `getAllTools()` lookup can throw. On any error we leave `input` untouched
-* (the sentinel may pass through to the tool, but a bug here can never break
-* tool execution).
-*/
-function stripInjectedSummary(pi, toolName, input) {
-	try {
-		if (!("__skydive_summary__" in input)) return;
-		if (toolDeclaresSummaryParam(pi, toolName)) return;
-		delete input[TOOL_CALL_SUMMARY_FIELD];
-	} catch (err) {
-		log$1.error({
-			err,
-			event: "tool_call_summary_strip_failed",
-			toolName
-		}, "tool_call_summary strip failed; leaving tool input untouched");
-	}
-}
-/**
-* Compute the rewritten payload for a `before_provider_request` event, failing
-* open: on any error the original payload is left untouched so a bug here can
-* never break an LLM call.
-*/
-function buildInjectedPayload(pi, payload) {
-	try {
-		return injectToolCallSummary(payload, getStrictToolNames(pi));
-	} catch (err) {
-		log$1.error({
-			err,
-			event: "tool_call_summary_injection_failed"
-		}, "tool_call_summary injection failed; passing payload through unchanged");
-		return;
-	}
-}
-const toolCallSummaryExtension = (pi) => {
-	pi.on("before_provider_request", (event) => buildInjectedPayload(pi, event.payload));
-	pi.on("tool_call", (event) => {
-		stripInjectedSummary(pi, event.toolName, event.input);
-	});
-};
-//#endregion
 //#region src/extensions/background-tasks.ts
 /**
 * Background bash tasks as a pi extension.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skydiveai/pi-extensions",
-  "version": "0.1.0-beta.1728",
+  "version": "0.1.0-beta.1729",
   "homepage": "https://skydive.com",
   "license": "MIT",
   "author": "Create, Inc.",