pi-advisor-flow 0.11.2-dev.1 → 0.11.2-dev.2

package/CHANGELOG.md

@@ -9,6 +9,11 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and
 ### Fixed
 
 - Avoided a startup crash when a host omits `systemPromptOptions` from `before_agent_start`.
+- Prevented OMP's legacy session-history fallback from disclosing entries or images before the latest reset boundary or outside the latest compaction's retained range.
+
+### Changed
+
+- Documented support for OMP session managers without Pi's `buildContextEntries()` projection.
 
 ## 0.11.1 - 2026-10-04
 

package/README.md

@@ -151,7 +151,7 @@ Advisor Scout is off by default. When enabled in `/advisor-settings` or via `"ad
 
 Advisor requests can include user messages, tool calls, tool results, targeted questions, trusted project and global `AGENTS.md` rules, and repository information. `advisorAgentsMdContext` is on by default and can be disabled in `/advisor-settings`; rules are sent as origin-labelled, capped, redacted, untrusted review guidance only. Untrusted projects withhold both rule files and tell the Advisor that rules were withheld. Repository context is configurable from no access through changed-file summaries to a capped patch; when it is disabled, the Advisor is told so rather than shown an apparently clean tree. Images from disclosed conversation and full-policy tool results can be sent as pixels only to image-capable Advisor models; Scout sees markers, not pixels. Exact tracked and untracked image files can be attached using `includeTrackedFiles` and `includeUntracked` under their existing separate global consent rules. Images are limited to four and 8 MiB total, with a 4 MiB per-image cap; unsupported, missing, or oversized images are reported as withheld, not reviewed. Explicit tracked and untracked file contents require separate global opt-ins and are sent as untrusted data. Secret redaction is off by default; when enabled, credential-shaped values in targeted questions are redacted before the provider request. Tools without an explicit policy use full context. Settings are global, so a project cannot silently change them.
 
-When Scout is enabled, the Executor model provider also receives bounded Advisor-eligible conversation history. Read [Privacy and data handling](https://github.com/philipbrembeck/pi-advisor/blob/main/docs/privacy.md) before using pi-advisor with sensitive work.
+When Scout is enabled, the Executor model provider also receives bounded Advisor-eligible conversation history. Pi's `buildContextEntries()` projection is used when available. OMP-compatible session managers without that API are supported through the active branch, with the latest reset boundary and compaction's retained range applied before history or images are disclosed; cleared and compacted-out entries are not forwarded. Read [Privacy and data handling](https://github.com/philipbrembeck/pi-advisor/blob/main/docs/privacy.md) before using pi-advisor with sensitive work.
 
 ## Documentation
 

package/dist/index.js

@@ -2403,6 +2403,35 @@ var detectImageFormat = (bytes) => {
   }
 };
 
+// src/session-context.ts
+var projectBranch = (source) => {
+  const resetBoundaryIndex = source.findLastIndex((entry) => Object.is(entry.type, "reset_boundary"));
+  const branch = source.slice(resetBoundaryIndex + 1);
+  const compactionIndex = branch.findLastIndex((entry) => entry.type === "compaction");
+  if (compactionIndex === -1) {
+    return branch;
+  }
+  const compaction = branch[compactionIndex];
+  if (compaction.type !== "compaction") {
+    return branch;
+  }
+  const firstKeptIndex = branch.findIndex((entry, index) => index < compactionIndex && entry.id === compaction.firstKeptEntryId);
+  const projected = [compaction];
+  if (firstKeptIndex !== -1) {
+    for (let index = firstKeptIndex;index < compactionIndex; index += 1) {
+      const entry = branch[index];
+      if (entry.type !== "compaction" && !(entry.type === "message" && entry.message.role === "system")) {
+        projected.push(entry);
+      }
+    }
+  }
+  return [...projected, ...branch.slice(compactionIndex + 1)];
+};
+var sessionContextEntries = (ctx) => {
+  const sessionManager = ctx.sessionManager;
+  return sessionManager.buildContextEntries ? sessionManager.buildContextEntries() : projectBranch(sessionManager.getBranch());
+};
+
 // src/images.ts
 var ADVISOR_IMAGE_MAX_BYTES = 4 * 1024 * 1024;
 var ADVISOR_IMAGES_TOTAL_MAX_BYTES = 8 * 1024 * 1024;
@@ -2465,12 +2494,12 @@ var selectedConversationImages = (ctx, conversation, policies, selectedEntryIds,
   if (!conversation) {
     return { imagePartsSeen: 0, selected: [] };
   }
-  const entries = selectedEntryIds ? ctx.sessionManager.buildContextEntries() : ctx.sessionManager.getBranch();
+  const entries = sessionContextEntries(ctx);
   const images = [];
   const seen = new Set;
   let imagePartsSeen = 0;
   for (const [index, entry] of entries.entries()) {
-    if (entry.type !== "message" || selectedEntryIds && !selectedEntryIds.has(entry.id ?? String(index))) {
+    if (entry.type !== "message" || selectedEntryIds !== undefined && !selectedEntryIds.has(entry.id ?? String(index))) {
       continue;
     }
     const { message } = entry;
@@ -2832,7 +2861,7 @@ var recentConversation = (ctx, maxChars = 15000, toolResultMaxLines = advisorToo
   if (maxChars === 0) {
     return "";
   }
-  const entries = ctx.sessionManager.getBranch().map((entry) => conversationEntry(entry, toolResultMaxLines, toolResultMaxBytes, policies, redact, describeImages, imageNonce)).filter((entry) => entry !== undefined);
+  const entries = sessionContextEntries(ctx).map((entry) => conversationEntry(entry, toolResultMaxLines, toolResultMaxBytes, policies, redact, describeImages, imageNonce)).filter((entry) => entry !== undefined);
   return selectRecentEntries(entries, maxChars);
 };
 
@@ -3245,7 +3274,7 @@ var fitToBudget = (built, caps) => {
   };
 };
 var buildScoutManifest = (ctx, options = {}) => {
-  const entries = ctx.sessionManager.buildContextEntries();
+  const entries = sessionContextEntries(ctx);
   const caps = resolveCaps(options);
   const indexed = indexToolCalls(entries);
   if (!indexed.ok) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-advisor-flow",
-  "version": "0.11.2-dev.1",
+  "version": "0.11.2-dev.2",
   "description": "Advanced Executor/Advisor flow for Pi, fully configurable and extendable.",
   "keywords": [
     "advisor",

package/src/conversation.ts

@@ -11,6 +11,7 @@ import { contentParts, isRecordOf, isString } from "./content-utils.ts";
 import type { RecordValue } from "./content-utils.ts";
 import { imageMarker } from "./images.ts";
 import { redactSecrets } from "./redaction.ts";
+import { sessionContextEntries } from "./session-context.ts";
 import { capToolResult } from "./tool-result-cap.ts";
 
 const textFromPart = <Part>(part: Part): string => {
@@ -204,8 +205,7 @@ export const recentConversation = (
   if (maxChars === 0) {
     return "";
   }
-  const entries = ctx.sessionManager
-    .getBranch()
+  const entries = sessionContextEntries(ctx)
     .map((entry) =>
       conversationEntry(
         entry,

package/src/images.ts

@@ -7,6 +7,7 @@ import type { AdvisorToolPolicies } from "./config/types.ts";
 import { contentParts, isRecordOf, isString } from "./content-utils.ts";
 import type { RecordValue } from "./content-utils.ts";
 import { detectImageFormat } from "./image-validation.ts";
+import { sessionContextEntries } from "./session-context.ts";
 
 export const ADVISOR_IMAGE_MAX_BYTES = 4 * 1024 * 1024;
 export const ADVISOR_IMAGES_TOTAL_MAX_BYTES = 8 * 1024 * 1024;
@@ -120,16 +121,15 @@ export const selectedConversationImages = (
   if (!conversation) {
     return { imagePartsSeen: 0, selected: [] };
   }
-  const entries = selectedEntryIds
-    ? ctx.sessionManager.buildContextEntries()
-    : ctx.sessionManager.getBranch();
+  const entries = sessionContextEntries(ctx);
   const images: SelectedImage[] = [];
   const seen = new Set<string>();
   let imagePartsSeen = 0;
   for (const [index, entry] of entries.entries()) {
     if (
       entry.type !== "message" ||
-      (selectedEntryIds && !selectedEntryIds.has(entry.id ?? String(index)))
+      (selectedEntryIds !== undefined &&
+        !selectedEntryIds.has(entry.id ?? String(index)))
     ) {
       continue;
     }

package/src/scout-context.ts

@@ -19,6 +19,7 @@ import type {
   ScoutContextGroup,
   ScoutManifestResult,
 } from "./scout-types.ts";
+import { sessionContextEntries } from "./session-context.ts";
 
 // Re-exports preserve scout-context's historical public import surface.
 export { reconstructScoutConversation } from "./scout-reconstruct.ts";
@@ -174,7 +175,7 @@ export const buildScoutManifest = (
   ctx: ExtensionContext,
   options: BuildScoutManifestOptions = {}
 ): ScoutManifestResult => {
-  const entries = ctx.sessionManager.buildContextEntries();
+  const entries = sessionContextEntries(ctx);
   const caps = resolveCaps(options);
   const indexed = indexToolCalls(entries);
   if (!indexed.ok) {

package/src/session-context.ts

@@ -0,0 +1,52 @@
+import type {
+  ExtensionContext,
+  SessionEntry,
+} from "@earendil-works/pi-coding-agent";
+
+type SessionManagerWithContextEntries = ExtensionContext["sessionManager"] & {
+  buildContextEntries?: () => SessionEntry[];
+};
+
+const projectBranch = (source: SessionEntry[]): SessionEntry[] => {
+  const resetBoundaryIndex = source.findLastIndex((entry) =>
+    Object.is(entry.type, "reset_boundary")
+  );
+  const branch = source.slice(resetBoundaryIndex + 1);
+  const compactionIndex = branch.findLastIndex(
+    (entry) => entry.type === "compaction"
+  );
+  if (compactionIndex === -1) {
+    return branch;
+  }
+  const compaction = branch[compactionIndex];
+  if (compaction.type !== "compaction") {
+    return branch;
+  }
+  const firstKeptIndex = branch.findIndex(
+    (entry, index) =>
+      index < compactionIndex && entry.id === compaction.firstKeptEntryId
+  );
+  const projected: SessionEntry[] = [compaction];
+  if (firstKeptIndex !== -1) {
+    for (let index = firstKeptIndex; index < compactionIndex; index += 1) {
+      const entry = branch[index];
+      if (
+        entry.type !== "compaction" &&
+        !(entry.type === "message" && entry.message.role === "system")
+      ) {
+        projected.push(entry);
+      }
+    }
+  }
+  return [...projected, ...branch.slice(compactionIndex + 1)];
+};
+
+export const sessionContextEntries = (
+  ctx: ExtensionContext
+): SessionEntry[] => {
+  // SAFETY: older hosts lack projection; retain reset and compaction boundaries before disclosure.
+  const sessionManager = ctx.sessionManager as SessionManagerWithContextEntries;
+  return sessionManager.buildContextEntries
+    ? sessionManager.buildContextEntries()
+    : projectBranch(sessionManager.getBranch());
+};