billion-context-omp 0.1.7 → 0.1.9

package/dist/messages.d.ts

@@ -1,5 +1,5 @@
 import type { SessionEntry, SessionMessageEntry } from "@oh-my-pi/pi-coding-agent";
-import type { CoreMessage } from "acp-kernel";
+import { type CoreMessage } from "acp-kernel";
 type AgentMessage = SessionMessageEntry["message"];
 export type { AgentMessage };
 export declare function entriesToCoreMessages(entries: SessionEntry[]): CoreMessage[];

package/dist/runtime.d.ts

@@ -22,6 +22,10 @@ export interface AcpRuntime {
         coreMessages: CoreMessage[];
     }>;
     commitFoldState(ctx: ExtensionContext, state: CompressionState, toolCallId?: string): void;
+    /** Track the per-session streak of consecutively REJECTED compress calls.
+     *  `ok=false` increments and returns the new streak; `ok=true` resets to 0.
+     *  A re-fold (rewritten stream prefix) drops the slot and starts at 0. */
+    noteCompressOutcome(ctx: ExtensionContext, ok: boolean): number;
     forgetSession(sid: string): void;
     /** Rebuild blocks from the persisted session view at session_start so /acp
    *  and acp_status show them BEFORE the first LLM call of a resumed session.

package/dist/user-config.d.ts

@@ -13,13 +13,23 @@ export interface UserAcpConfig {
     compress?: CompressConfig;
     displayUsage?: "merged" | "separate";
     prompts?: Partial<Prompts>;
+    /** Acknowledge the risks of user-supplied compression prompts (system-prompt
+     *  injection surface). Only honored from the GLOBAL config — a project-local
+     *  acp-omp.json under agent control cannot pre-acknowledge its own risk gate. */
+    acknowledgePromptsRisk?: boolean;
     /** Model for /compact summaries, as "provider:modelId" (e.g.
      *  "zhipuai:glm-5.2"). Shortcut for compress.compressModel — normalized
      *  into the nested path at load time. */
     compressModel?: string;
 }
 /** Read global + project acp-omp.json, project overrides global. Returns {} on any
- *  error (missing file, bad JSON) — never throws. */
+ *  error (missing file, bad JSON) — never throws.
+ *
+ *  `prompts` / `acknowledgePromptsRisk` are accepted from the GLOBAL config
+ *  only (issue #32): a repo under agent control can ship a project-local
+ *  .omp/acp-omp.json, and letting it inject arbitrary system-prompt text
+ *  every turn is a prompt-injection surface. Project-local files may tune
+ *  everything else (thresholds, models, timeouts) but not the prompts. */
 export declare function loadUserConfig(cwd: string): Promise<UserAcpConfig>;
 /** Merge user config onto an adapter config: user config wins for the keys it
  *  sets. Used at session_start to apply runtime-discovered config. */

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "billion-context-omp",
-	"version": "0.1.7",
+	"version": "0.1.9",
 	"description": "One billion, not one million. Model-driven context management for the oh-my-pi (omp) coding agent.",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",
@@ -68,8 +68,9 @@
 		"@oh-my-pi/pi-coding-agent": "17.3.2",
 		"@oh-my-pi/pi-utils": "17.3.2",
 		"@types/node": "^26.1.2",
-		"acp-kernel": "0.0.23",
+		"acp-kernel": "0.0.24",
 		"billion-context-kit": "0.2.0",
+		"bun-types": "^1.3.14",
 		"tsup": "^8.5.1",
 		"tsx": "^4.23.1",
 		"typescript": "^7.0.2"