pi-condense 2.10.1 → 2.10.2

package/CHANGELOG.md

@@ -7,6 +7,10 @@ Published to npm as [`pi-condense`](https://www.npmjs.com/package/pi-condense) (
 Pushing a `vX.Y.Z` tag triggers `.github/workflows/release.yml`, which runs the tests and
 publishes via OIDC trusted publishing. See `.agents/skills/release/SKILL.md`.
 
+## [2.10.2] - 2026-09-06
+
+- Protect `gauntlet-overrides.md` reads by default alongside skill files, including `.pi/` and `doc/` paths, so per-repo harness contracts survive context pruning. User-supplied `protectedPaths` still replaces the defaults; path matching remains limited to `args.path`.
+
 ## [2.10.1] - 2026-09-02
 
 - **Spill sidecar basenames capped at 255 bytes ([#14](https://github.com/jjuraszek/pi-condense/issues/14)).** Providers emitting 300+ char tool-call ids drove `blobPathFor` past the filesystem basename limit: eager spill failed silently (`ENAMETOOLONG` caught, oversized result stayed inline and bloated context) and the deterministic backfill aborted fail-closed. Fitting names stay byte-identical; over-limit names become `<234-byte sanitized prefix>.<16-hex sha1 of the unsanitized occurrence key>.txt` (exactly 255 bytes). The `.` separator is unreachable by `sanitizeId`, so capped names are namespace-disjoint from short-key names by construction - no probe, no migration, persisted `spillPath` read-back unchanged. Spec: `doc/specs/2026-09-02-gh-14-spill-filename-cap.md` (partially supersedes the 2026-06-02 spill spec's filename derivation).

package/PRUNING.md

@@ -618,7 +618,7 @@ A tool call is protected if **either** its `toolName` is in `protectedTools` **o
 
 **`protectedTools: string[]`** (default `[]`) - allowlist of tool names. Covers tools whose output is a small handle that must be reused byte-for-byte (e.g. a session-id) or planning tools like `todowrite` / `todoread`.
 
-**`protectedPaths: string[]`** (default `["**/skills/**/*.md"]`) - glob list matched against `args.path`. Designed for skill files that carry multi-step workflow gates; summarizing them is categorically lossy. Non-string or missing `path` arguments never match. Set `[]` to disable. Edit with `/pruner protected-paths`.
+**`protectedPaths: string[]`** (default `["**/skills/**/*.md", "**/gauntlet-overrides.md"]`) - glob list matched against `args.path`. Designed for skill files that carry multi-step workflow gates; summarizing them is categorically lossy. Non-string or missing `path` arguments never match. Set `[]` to disable. Edit with `/pruner protected-paths`.
 
 Glob contract: full-path match against the raw `args.path` string with `\` normalized to `/`. `*` and `?` match within a segment (no `/`); `**` crosses segments; `**/` also matches zero directories (so `**/SKILL.md` matches a bare relative `SKILL.md`). Case-sensitive. All other characters are regex-escaped literals.
 

package/README.md

@@ -169,9 +169,11 @@ Settings live under `contextPrune` in `<agent-dir>/settings.json` (`$PI_CODING_A
 | `pruneOn` | `agent-message` | Trigger mode - see Architecture above |
 | `autoBudgetThreshold` | `null` | Fraction (e.g. `0.8`) of the context window that force-flushes everything regardless of `pruneOn`; the trigger point is capped at 300k tokens |
 | `frontierGapThresholdTokens` | `null` | Opt-in absolute-token flush trigger: fires at `turn_end` once the un-pruned tail past the prune frontier reaches N tokens, regardless of window size; recommended starting value `80000` |
-| `protectedTools` / `protectedPaths` | `[]` / `["**/skills/**/*.md"]` | Tool names / path globs that are never pruned |
+| `protectedTools` / `protectedPaths` | `[]` / `["**/skills/**/*.md", "**/gauntlet-overrides.md"]` | Tool names / path globs that are never pruned |
 | `spillThreshold` | `65536` | Chars above which a single oversized result spills straight to a sidecar file |
 
+The default also protects reads of [pi-gauntlet](https://github.com/jjuraszek/pi-gauntlet)'s per-repo `gauntlet-overrides.md` so the repo's harness contract stays available for gate decisions after pruning.
+
 The full settings JSON, every key, the commands table, footer widget states, spilled-output details, and the summarizer-model-by-plan table live in **[doc/configuration.md](doc/configuration.md)**.
 
 ## Relationship to the rest of the platform

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-condense",
-  "version": "2.10.1",
+  "version": "2.10.2",
   "description": "Pi coding-agent extension that summarizes completed tool-call batches, replaces raw outputs with short stubs, compresses closed tool-call chains, and recovers any original on demand via context_tree_query.",
   "author": "Jacek Juraszek",
   "license": "MIT",

package/src/commands.ts

@@ -256,7 +256,7 @@ function protectedToolsDescription(config: ContextPruneConfig): string {
 }
 
 function protectedPathsDescription(config: ContextPruneConfig): string {
-  return `Glob patterns matched against a tool call's \`args.path\`; matching outputs are NEVER pruned. Currently: ${protectedToolsDisplay(config.protectedPaths)}. Edit via \`/pruner protected-paths\` (interactive) or \`/pruner protected-paths <comma-separated globs>\`. Set to 'none' to disable (kill switch). Default protects skill files: **/skills/**/*.md`;
+  return `Glob patterns matched against a tool call's \`args.path\`; matching outputs are NEVER pruned. Currently: ${protectedToolsDisplay(config.protectedPaths)}. Edit via \`/pruner protected-paths\` (interactive) or \`/pruner protected-paths <comma-separated globs>\`. Set to 'none' to disable (kill switch). Default protects skill files and per-repo gauntlet overrides: **/skills/**/*.md, **/gauntlet-overrides.md`;
 }
 
 const HELP_TEXT = `pruner — automatically summarizes tool-call outputs to keep context lean.

package/src/config.test.ts

@@ -35,6 +35,22 @@ async function writeContextPrune(overrides: Record<string, unknown>): Promise<vo
   await writeFile(settingsPath(), JSON.stringify({ contextPrune: overrides }));
 }
 
+describe("loadConfig protectedPaths", () => {
+  it("uses the defaults when unset", async () => {
+    await writeContextPrune({});
+    const config = await loadConfig();
+    expect(config.protectedPaths).toEqual(DEFAULT_CONFIG.protectedPaths);
+  });
+
+  it("replaces defaults with user-supplied paths, including an empty list", async () => {
+    for (const protectedPaths of [["**/custom.md"], []]) {
+      await writeContextPrune({ protectedPaths });
+      const config = await loadConfig();
+      expect(config.protectedPaths).toEqual(protectedPaths);
+    }
+  });
+});
+
 describe("loadConfig recoveryGraceTurns normalization", () => {
   it("preserves an explicit 0", async () => {
     await writeContextPrune({ recoveryGraceTurns: 0 });

package/src/protected.test.ts

@@ -1,5 +1,6 @@
 import { describe, expect, test } from "bun:test";
 import { globToRegExp, isProtected } from "./protected.js";
+import { DEFAULT_CONFIG } from "./types.js";
 
 describe("globToRegExp", () => {
   test("** crosses path segments", () => {
@@ -33,6 +34,27 @@ describe("globToRegExp", () => {
   });
 });
 
+describe("isProtected defaults", () => {
+  test.each([".pi/gauntlet-overrides.md", "doc/gauntlet-overrides.md"])(
+    "protects reads of %s",
+    (path) => {
+      expect(isProtected("read", { path }, DEFAULT_CONFIG)).toBe(true);
+    },
+  );
+
+  test("protects skill reads", () => {
+    expect(isProtected("read", { path: "/h/skills/x/SKILL.md" }, DEFAULT_CONFIG)).toBe(true);
+  });
+
+  test("does not protect sibling settings reads", () => {
+    expect(isProtected("read", { path: ".pi/settings.json" }, DEFAULT_CONFIG)).toBe(false);
+  });
+
+  test("does not infer paths from bash commands", () => {
+    expect(isProtected("bash", { command: "cat .pi/gauntlet-overrides.md" }, DEFAULT_CONFIG)).toBe(false);
+  });
+});
+
 describe("isProtected", () => {
   const cfg = { protectedTools: ["todowrite"], protectedPaths: ["**/skills/**/*.md"] };
 

package/src/types.ts

@@ -352,7 +352,8 @@ export interface ContextPruneConfig {
   /**
    * Glob patterns matched against a tool call's `args.path`. Matching calls are
    * protected with identical semantics to protectedTools. Default protects
-   * skill files and their sibling reference docs under any `skills/` dir.
+   * skill files and their sibling reference docs under any `skills/` dir,
+   * plus per-repo `gauntlet-overrides.md` files.
    * Kill switch: set to [] in settings.json (`contextPrune.protectedPaths`).
    */
   protectedPaths: string[];
@@ -562,7 +563,7 @@ export const DEFAULT_CONFIG: ContextPruneConfig = {
   summarizerIdleTimeoutMs: 20000,
   summarizerMaxTimeoutMs: 180000,
   protectedTools: [],
-  protectedPaths: ["**/skills/**/*.md"],
+  protectedPaths: ["**/skills/**/*.md", "**/gauntlet-overrides.md"],
   chainCompression: {
     enabled: true,
     rollingWindow: 3,