@vanillagreen/pi-qol 1.7.0 → 1.7.2

package/README.md

@@ -13,6 +13,7 @@ Quality-of-life extension for Pi: compact statusline, multiline input, session n
 - Newline-insert in the editor (multi-line drafts without auto-submit), with a fallback binding for terminals that can't distinguish the primary key.
 - Sessions auto-name from your first prompt. `/rename` overrides anytime.
 - `/search` browses previous sessions with snippet previews; the configured shortcut opens it instantly.
+- Session search reads prompt snippets line-by-line, so very large session JSONL files do not have to be materialized just to browse, search, or import context.
 - `/context` shows a Claude-style context-window breakdown.
 - `/handoff <goal>` drafts a focused prompt for a new session.
 - `/schedule 20m <message>` or `/schedule 1h45m <message>` sends a delayed prompt without invoking the model until the timer fires.
@@ -63,6 +64,8 @@ Arguments support autocomplete.
 
 Open `/extensions:settings`; settings appear under the **QOL** tab. Names below match the labels shown there.
 
+Project settings in `.pi/settings.json` apply only after Pi marks the workspace trusted; before trust, vstack Pi extensions read user/global settings only.
+
 Glyph style: each package exposes `glyphStyle` (`unicode` default, `ascii` for terminal-safe chrome). `@vanillagreen/pi-tool-renderer.globalGlyphStyleOverride=ascii` forces ASCII chrome across vstack Pi extensions while leaving tool/model/user content unchanged.
 
 ### Statusline
@@ -180,7 +183,7 @@ Idle thresholds (token threshold, idle delay, fixed token limit, percent limit)
 
 ### Long-session budget guard
 
-For autonomous/Flightdeck-style runs the agent never goes idle, so idle compaction may never fire and the transcript can grow until provider/buffer limits hit. The budget guard runs on `agent_end` (not idle) and starts a compaction immediately when context usage crosses a percent of the model window or an absolute token limit. It fires once per threshold crossing — repeated `agent_end` events above the same threshold do not retrigger it, and the crossing key resets on a successful compaction or on a transient compaction failure (so the next `agent_end` retries).
+For long autonomous runs the agent may not go idle, so idle compaction may never fire and the transcript can grow until provider/buffer limits hit. The budget guard runs on `agent_end` (not idle) and starts a compaction immediately when context usage crosses a percent of the model window or an absolute token limit. It fires once per threshold crossing — repeated `agent_end` events above the same threshold do not retrigger it, and the crossing key resets on a successful compaction or on a transient compaction failure (so the next `agent_end` retries).
 
 | Setting | What it does | Default |
 | --- | --- | --- |
@@ -195,7 +198,7 @@ When the budget guard fires it injects a sentinel into the compaction request so
 
 While budget-guard compaction is running, QOL keeps a persistent status line above the prompt (and in the normal status footer when the compact statusline is disabled). After Pi prints the compacted-summary block, the line changes to `QOL budget guard finalizing compaction…` until `ctx.compact()` reports completion, so long reload/finalization gaps do not look frozen.
 
-Recommended values for autonomous/Flightdeck runs:
+Recommended values for long autonomous runs:
 
 - Keep **Long-session budget guard** on. Lower **Budget guard percent** to `75` if your provider buffers are tight.
 - Optionally turn **Custom compaction summaries** on so user-initiated and idle compactions also use the QOL chunked summarizer + handoff artifact. (Budget-guard-triggered compactions always use them regardless of this setting.)

package/extensions/qol/editor.ts

@@ -24,6 +24,7 @@ function styleSlashAutocompleteHints(suggestions: AutocompleteSuggestions | null
 export function installAutocompleteHintStyling(ctx: ExtensionContext): void {
 	if (!ctx.hasUI) return;
 	ctx.ui.addAutocompleteProvider((current) => ({
+		...current,
 		async getSuggestions(lines, cursorLine, cursorCol, options) {
 			return styleSlashAutocompleteHints(await current.getSuggestions(lines, cursorLine, cursorCol, options), ctx.ui.theme);
 		},

package/extensions/qol/glyphs.ts

@@ -26,9 +26,44 @@ function projectSettingsPath(cwd: string): string {
 	}
 }
 
+const PROJECT_TRUST_SYMBOL = Symbol.for("vstack.pi.project-trust");
+
+interface ProjectTrustRegistry {
+	projectSettings?: Map<string, boolean>;
+}
+
+function projectTrustRegistry(): ProjectTrustRegistry {
+	const host = globalThis as unknown as Record<PropertyKey, ProjectTrustRegistry | undefined>;
+	const existing = host[PROJECT_TRUST_SYMBOL];
+	if (existing) return existing;
+	const created: ProjectTrustRegistry = {};
+	host[PROJECT_TRUST_SYMBOL] = created;
+	return created;
+}
+
+export function recordProjectTrust(ctx: { cwd?: string; isProjectTrusted?: () => boolean }): void {
+	if (!ctx.cwd) return;
+	let trusted = true;
+	try {
+		trusted = ctx.isProjectTrusted?.() === true;
+	} catch {
+		trusted = false;
+	}
+	const registry = projectTrustRegistry();
+	if (!registry.projectSettings) registry.projectSettings = new Map();
+	registry.projectSettings.set(projectSettingsPath(ctx.cwd), trusted);
+}
+
+function projectSettingsTrusted(settingsPath: string): boolean {
+	return projectTrustRegistry().projectSettings?.get(settingsPath) === true;
+}
+
+
 function piSettingsPaths(cwd = process.cwd()): string[] {
 	const userDir = resolve(expandHome(process.env.PI_CODING_AGENT_DIR?.trim() || "~/.pi/agent"));
-	return [join(userDir, "settings.json"), projectSettingsPath(cwd)];
+	const user = join(userDir, "settings.json");
+	const project = projectSettingsPath(cwd);
+	return projectSettingsTrusted(project) ? [user, project] : [user];
 }
 
 function readPackageConfig(packageId: string, cwd?: string): Record<string, unknown> {

package/extensions/qol/session-search/cache.ts

@@ -10,6 +10,7 @@ import {
 	SESSION_SEARCH_STATUS_KEY,
 } from "../constants.js";
 import { expandHome, piSettingsPaths, settingBoolean, settingNumber, settingString, settingStringAllowEmpty } from "../settings.js";
+import { forEachSessionJsonlLine } from "./jsonl.js";
 import type {
 	QolSessionPaletteAction,
 	QolSessionSearchPendingMessage,
@@ -166,15 +167,14 @@ export function sessionUserMessages(sessionPath: string): QolSessionUserMessage[
 	if (cached) return cached;
 	const messages: QolSessionUserMessage[] = [];
 	try {
-		const lines = readFileSync(sessionPath, "utf8").split(/\r?\n/);
-		for (const line of lines) {
-			if (!line.trim()) continue;
+		forEachSessionJsonlLine(sessionPath, (line) => {
+			if (!line.trim()) return;
 			let entry: any;
-			try { entry = JSON.parse(line); } catch { continue; }
+			try { entry = JSON.parse(line); } catch { return; }
 			const message = entry?.type === "message" ? entry.message : undefined;
-			if (!message || message.role !== "user") continue;
+			if (!message || message.role !== "user") return;
 			const text = oneLine(messageContentText(message.content));
-			if (!text) continue;
+			if (!text) return;
 			messages.push({
 				entryId: typeof entry.id === "string" ? entry.id : undefined,
 				index: messages.length + 1,
@@ -182,7 +182,7 @@ export function sessionUserMessages(sessionPath: string): QolSessionUserMessage[
 				text,
 				timestamp: sessionMessageTimestamp(entry, message),
 			});
-		}
+		});
 	} catch {
 		// Ignore unreadable sessions; callers fall back to SessionInfo.firstMessage.
 	}

package/extensions/qol/session-search/context.ts

@@ -1,4 +1,3 @@
-import { readFileSync } from "node:fs";
 import type { AgentMessage } from "@earendil-works/pi-agent-core";
 import { SessionManager, type ExtensionAPI, type ExtensionContext, type Theme } from "@earendil-works/pi-coding-agent";
 import { Text } from "@earendil-works/pi-tui";
@@ -13,6 +12,7 @@ import {
 import { settingNumber, settingString } from "../settings.js";
 import { sessionDisplayName } from "./cache.js";
 import { QolSessionSearchLoadingComponent } from "./component.js";
+import { forEachSessionJsonlLine } from "./jsonl.js";
 import type { QolSessionSearchPendingMessage, QolSessionSearchResult } from "./types.js";
 
 export function trimSessionSummaryInput(text: string, cwd: string): string {
@@ -33,14 +33,13 @@ function messagesForSessionSummary(sessionPath: string): AgentMessage[] {
 		// Fall back to a direct JSONL parse below.
 	}
 	try {
-		const lines = readFileSync(sessionPath, "utf8").split(/\r?\n/);
 		const messages: AgentMessage[] = [];
-		for (const line of lines) {
-			if (!line.trim()) continue;
+		forEachSessionJsonlLine(sessionPath, (line) => {
+			if (!line.trim()) return;
 			let entry: any;
-			try { entry = JSON.parse(line); } catch { continue; }
+			try { entry = JSON.parse(line); } catch { return; }
 			if (entry?.type === "message" && entry.message) messages.push(entry.message);
-		}
+		});
 		return messages;
 	} catch {
 		return [];

package/extensions/qol/session-search/jsonl.ts

@@ -0,0 +1,31 @@
+import { closeSync, openSync, readSync } from "node:fs";
+import { StringDecoder } from "node:string_decoder";
+
+export function forEachSessionJsonlLine(sessionPath: string, onLine: (line: string) => void, chunkSize = 64 * 1024): void {
+	const fd = openSync(sessionPath, "r");
+	const buffer = Buffer.allocUnsafe(Math.max(1, Math.floor(chunkSize)));
+	const decoder = new StringDecoder("utf8");
+	let pending = "";
+	try {
+		for (;;) {
+			const bytesRead = readSync(fd, buffer, 0, buffer.length, null);
+			if (bytesRead === 0) break;
+			pending += decoder.write(buffer.subarray(0, bytesRead));
+			let start = 0;
+			for (;;) {
+				const newline = pending.indexOf("\n", start);
+				if (newline < 0) {
+					pending = pending.slice(start);
+					break;
+				}
+				const line = pending.slice(start, newline);
+				onLine(line.endsWith("\r") ? line.slice(0, -1) : line);
+				start = newline + 1;
+			}
+		}
+		pending += decoder.end();
+		if (pending.length > 0) onLine(pending.endsWith("\r") ? pending.slice(0, -1) : pending);
+	} finally {
+		closeSync(fd);
+	}
+}

package/extensions/qol/settings.ts

@@ -23,9 +23,44 @@ export function projectSettingsPath(cwd: string): string {
 	}
 }
 
+const PROJECT_TRUST_SYMBOL = Symbol.for("vstack.pi.project-trust");
+
+interface ProjectTrustRegistry {
+	projectSettings?: Map<string, boolean>;
+}
+
+function projectTrustRegistry(): ProjectTrustRegistry {
+	const host = globalThis as unknown as Record<PropertyKey, ProjectTrustRegistry | undefined>;
+	const existing = host[PROJECT_TRUST_SYMBOL];
+	if (existing) return existing;
+	const created: ProjectTrustRegistry = {};
+	host[PROJECT_TRUST_SYMBOL] = created;
+	return created;
+}
+
+export function recordProjectTrust(ctx: { cwd?: string; isProjectTrusted?: () => boolean }): void {
+	if (!ctx.cwd) return;
+	let trusted = true;
+	try {
+		trusted = ctx.isProjectTrusted?.() === true;
+	} catch {
+		trusted = false;
+	}
+	const registry = projectTrustRegistry();
+	if (!registry.projectSettings) registry.projectSettings = new Map();
+	registry.projectSettings.set(projectSettingsPath(ctx.cwd), trusted);
+}
+
+function projectSettingsTrusted(settingsPath: string): boolean {
+	return projectTrustRegistry().projectSettings?.get(settingsPath) === true;
+}
+
+
 export function piSettingsPaths(cwd = process.cwd()): string[] {
 	const userDir = resolve(expandHome(process.env.PI_CODING_AGENT_DIR?.trim() || "~/.pi/agent"));
-	return [join(userDir, "settings.json"), projectSettingsPath(cwd)];
+	const user = join(userDir, "settings.json");
+	const project = projectSettingsPath(cwd);
+	return projectSettingsTrusted(project) ? [user, project] : [user];
 }
 
 export function readVstackConfig(cwd?: string): VstackConfig {

package/extensions/qol.ts

@@ -67,7 +67,7 @@ import {
 	runSessionSearchResumeOrFork,
 	sessionSearchShortcut,
 } from "./qol/session-search/index.js";
-import { settingBoolean, settingNumber, settingString } from "./qol/settings.js";
+import { recordProjectTrust, settingBoolean, settingNumber, settingString } from "./qol/settings.js";
 import { statusMessage } from "./qol/status-message.js";
 import {
 	formatTmuxSessionTitle,
@@ -560,6 +560,7 @@ export default function qol(pi: ExtensionAPI): void {
 	});
 
 	pi.on("session_start", (event, ctx) => {
+		recordProjectTrust(ctx);
 		currentCtx = ctx;
 		subscribeCavemanBridge();
 		latestSystemPromptOptions = undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vanillagreen/pi-qol",
-  "version": "1.7.0",
+  "version": "1.7.2",
   "description": "Pi quality-of-life extension: compact statusline/π prompt, reliable multiline input, styled pasted-image chips, session naming/search/context import, scheduled prompts, handoff, permission prompts, notifications, custom compaction, and a collapsed-thinking timer.",
   "license": "MIT",
   "keywords": [
@@ -875,7 +875,7 @@
         {
           "key": "compaction.budgetGuardEnabled",
           "label": "Long-session budget guard",
-          "description": "Trigger compaction on agent_end (no idle wait) when context usage crosses budgetPercent or budgetTokens. Designed for autonomous/Flightdeck runs so transcript growth cannot silently hit provider/buffer limits. Fires once per threshold crossing, not in a loop.",
+          "description": "Trigger compaction on agent_end (no idle wait) when context usage crosses budgetPercent or budgetTokens. Designed for long autonomous runs so transcript growth cannot silently hit provider/buffer limits. Fires once per threshold crossing, not in a loop.",
           "type": "boolean",
           "default": true,
           "category": "Compaction Budget Guard",