crewx-pi-kit 0.1.13 → 0.1.15

package/extensions/crewx-tools.ts

@@ -11,8 +11,24 @@ type JsonRecord = Record<string, unknown>;
 const CONTROL_PATH_PATTERN = /(?:\/proc\/[^/]+\/environ|\.config\/crewx(?:-cloud)?\/|\.local\/state\/crewx\/|bootstrap\.env|bridge\/config\.json)/i;
 const CONTROL_VALUE_PATTERN = /\bCREWX_(?:TOKEN|URL|CLI_PATH|RUNTIME_PROXY_[A-Z0-9_]+)\b/;
 
-function containsControlCredential(value: unknown): boolean {
-  const serialized = JSON.stringify(value);
+function containsControlCredential(value: unknown, toolName: string): boolean {
+  // The work CLI path is managed configuration, but executing the documented
+  // work commands is intentional. Exempt only that executable-position token;
+  // still inspect all arguments, extra input fields and subsequent commands.
+  let inspected = value;
+  if (toolName === "bash" && value && typeof value === "object") {
+    const input = value as JsonRecord;
+    if (typeof input.command === "string") {
+      inspected = {
+        ...input,
+        command: input.command.replace(
+          /^(\s*node\s+)"\$(?:CREWX_CLI_PATH|\{CREWX_CLI_PATH\})"(?=\s+(?:task|doc|memory|integration|file|preview)(?:\s|$))/,
+          '$1"[CrewX work CLI]"',
+        ),
+      };
+    }
+  }
+  const serialized = JSON.stringify(inspected);
   return CONTROL_PATH_PATTERN.test(serialized) || CONTROL_VALUE_PATTERN.test(serialized);
 }
 
@@ -214,7 +230,7 @@ export default function crewxTools(pi: ExtensionAPI) {
   pi.on("tool_call", async (event, ctx) => {
     if (
       ["bash", "read", "write", "edit"].includes(event.toolName) &&
-      containsControlCredential(event.input)
+      containsControlCredential(event.input, event.toolName)
     ) {
       return {
         block: true,

package/extensions/session-context.ts

@@ -0,0 +1,36 @@
+import type { ContextEvent, ExtensionAPI } from '@earendil-works/pi-coding-agent';
+
+const SNAPSHOT = '\n\n## Workspace snapshot\n\n```json\n';
+
+function isEnvelope(text: string): boolean {
+  return text.startsWith('# CrewX assignment\n') &&
+    text.includes('\n# Operating context\n') &&
+    text.includes(SNAPSHOT) && text.endsWith('\n```');
+}
+
+/** Model-facing projection only: never rewrite Pi's persisted session ledger. */
+export function latestWorkspaceSnapshot(messages: ContextEvent['messages']): ContextEvent['messages'] {
+  let latest = -1;
+  for (let index = 0; index < messages.length; index++) {
+    const message = messages[index];
+    if (message.role !== 'user') continue;
+    const texts = typeof message.content === 'string'
+      ? [message.content] : message.content.filter(item => item.type === 'text').map(item => item.text);
+    if (texts.some(isEnvelope)) latest = index;
+  }
+  if (latest < 0) return messages;
+  const trim = (text: string): string => isEnvelope(text)
+    ? text.slice(0, text.lastIndexOf(SNAPSHOT)) +
+      '\n\n[Historical CrewX workspace snapshot omitted. Use the latest assignment snapshot; the original task and tool history are retained.]'
+    : text;
+  return messages.map((message, index) => {
+    if (index >= latest || message.role !== 'user') return message;
+    return { ...message, content: typeof message.content === 'string'
+      ? trim(message.content)
+      : message.content.map(item => item.type === 'text' ? { ...item, text: trim(item.text) } : item) };
+  });
+}
+
+export default function sessionContext(pi: ExtensionAPI): void {
+  pi.on('context', event => ({ messages: latestWorkspaceSnapshot(event.messages) }));
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "crewx-pi-kit",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "description": "Typed CrewX tools and operating skills for managed Pi agents.",
   "type": "module",
   "files": ["extensions", "skills"],