pi-advisor-flow 0.10.1-dev.1 → 0.11.0

package/CHANGELOG.md

@@ -4,12 +4,17 @@ All notable changes to this project are documented here.
 
 The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0/).
 
-## Unreleased
+## 0.11.0 - 2026-10-03
 
 ### Added
 
 - Native Pi Codemode composition for `ask_advisor`: scripts receive structured advice, IDs, normalized usage, and existing skip metadata, while interactive responses remain unchanged. Documented deterministic-check composition and explicit draft disclosure limits.
 
+### Fixed
+
+- Advisor invocation guidelines no longer replace the whole system prompt, so prompt sections from other extensions, such as the list of MCP servers, still reach the model.
+- Braces Vulnerability patched (CVE-2026-93687)
+
 ## 0.10.0 - 2026-10-02
 
 ### Added

package/dist/index.js

@@ -9025,7 +9025,9 @@ var registerToolLifecycle = ({
       ctx.ui.setStatus("advisor-usage", undefined);
     }
   });
-  pi.on("before_agent_start", (_event, ctx) => {
+  pi.on("before_agent_start", (event, ctx) => {
+    const { sections } = event.systemPromptOptions;
+    delete sections.advisor_invocation_settings;
     if (!pi.getActiveTools().includes("ask_advisor")) {
       return;
     }
@@ -9039,13 +9041,11 @@ var registerToolLifecycle = ({
       guidelines.push(`Advisor calls remaining this session: ${budget}.
 Reserve calls for material decisions, repeated failures, or final review.`);
     }
-    return guidelines.length > 0 ? {
-      systemPrompt: `${ctx.getSystemPrompt()}
-
-Advisor invocation settings:
+    if (guidelines.length > 0) {
+      sections.advisor_invocation_settings = `Advisor invocation settings:
 ${guidelines.map((rule) => `- ${rule}`).join(`
-`)}`
-    } : undefined;
+`)}`;
+    }
   });
   pi.on("input", () => {
     session.clearFollowUps();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-advisor-flow",
-  "version": "0.10.1-dev.1",
+  "version": "0.11.0",
   "description": "Advanced Executor/Advisor flow for Pi, fully configurable and extendable.",
   "keywords": [
     "advisor",
@@ -93,6 +93,7 @@
   },
   "overrides": {
     "brace-expansion": "5.0.12",
+    "braces": "github:micromatch/braces#d0d575e55e74a4e0218e5248fafb79efc3e54ebb",
     "is-unicode-supported": "npm:@socketregistry/is-unicode-supported@1.0.5",
     "safe-buffer": "npm:@socketregistry/safe-buffer@1.0.9",
     "undici": "8.11.2"

package/src/tools/register-lifecycle.ts

@@ -71,7 +71,9 @@ export const registerToolLifecycle = ({
     }
   });
 
-  pi.on("before_agent_start", (_event, ctx) => {
+  pi.on("before_agent_start", (event, ctx) => {
+    const { sections } = event.systemPromptOptions;
+    delete sections.advisor_invocation_settings;
     if (!pi.getActiveTools().includes("ask_advisor")) {
       return;
     }
@@ -88,11 +90,9 @@ export const registerToolLifecycle = ({
         `Advisor calls remaining this session: ${budget}.\nReserve calls for material decisions, repeated failures, or final review.`
       );
     }
-    return guidelines.length > 0
-      ? {
-          systemPrompt: `${ctx.getSystemPrompt()}\n\nAdvisor invocation settings:\n${guidelines.map((rule) => `- ${rule}`).join("\n")}`,
-        }
-      : undefined;
+    if (guidelines.length > 0) {
+      sections.advisor_invocation_settings = `Advisor invocation settings:\n${guidelines.map((rule) => `- ${rule}`).join("\n")}`;
+    }
   });
 
   pi.on("input", () => {