pi-smart-compact 10.2.1 → 10.3.0

package/ARCHITECTURE.md

@@ -250,13 +250,17 @@ reloads and forks. At a completed, uncontested turn boundary a ready batch
 commits with cause `pressure` (early pressure gate reached) or `break-even`
 (catalog prices say it pays back within `AUTO_TRIM_BREAK_EVEN_REQUESTS` = 24
 requests). Otherwise it is held (`deferredTrim` in `smart_context` status):
-once the prompt cache has expired, `context_with_system` sends the trimmed
-results request-locally, byte-identical to the future `context_edit`, and the
-edits commit with cause `cold` at the next completed turn. While a batch is
+beyond the model's estimated cache horizon, `context_with_system` sends the
+trimmed results request-locally, byte-identical to the future `context_edit`,
+and the edits commit with cause `cold` at the next completed turn. The shared
+`cacheLifetimeMs` uses Pi's longest advertised `promptCache` tier, extended by
+observed 1h writes; unknown metadata never permits a cold trim. Model changes
+and context epochs do not inherit the old route's clock. While a batch is
 held, `cache_warming_decision` may stop Pi's cache warming when a refresh no
 longer pays. Unknown prices allow only `pressure` and `cold`. The formula and
 drop conditions are in [configuration](./docs/configuration.md);
-`app/host-cache-ledger.ts` attributes observed prefix rebuilds. These are
+`app/host-cache-ledger.ts` uses the same horizon for estimated rebuild timing;
+its labels are temporal observations, not proof of causality. Costs are
 catalog-price estimates, not measured cache billing. Manual and agent trims
 commit at the next boundary with cause `manual` or `agent`; explicit trim
 bypasses batching, not safety.
@@ -286,11 +290,20 @@ context. A checkpoint captures session/origin IDs and a projected-prefix
 fingerprint. New user messages, an intervening compaction or branch summary, or
 a changed prefix invalidate it. The agent-written handoff is a bounded
 `custom_message`, not an authoritative user instruction or an EESV
-verification result.
+verification result. Checkpoint/rewind are explicit research round trips and
+are pressure-independent (including unknown usage); automatic cleanup and
+agent trim/anchor remain pressure-gated. A second active checkpoint is rejected
+at request and commit time. For a pure read-only detour the delivered context
+is the unchanged checkpoint prefix plus one report, without another model call.
 
 A conservative read-only tool allowlist plus shared nested-call normalization
 protects side effects. Rewind removes only whole successful, complete,
-text-only read exchanges and successful assistant prose after the checkpoint.
+text-only read exchanges (including supported graph, diagnostic and web tools)
+and successful assistant prose after the checkpoint. Owned pressure hints
+inside that suffix are omitted by native custom-entry type, never text matching;
+pre-checkpoint hints and unrelated extension messages stay. Namespace lookalikes and
+mutating graph operations are not admitted. First-delivery graph source snippets
+stay whole for read-before-edit guards, just like native file/symbol reads.
 Mixed batches, errors, commands, writes, unknown tools and image results stay
 raw. Context edits omit messages in the projection, not in session history. The
 mutation cap is 512; no partial rewind is applied when it is exceeded. Files
@@ -340,8 +353,17 @@ anchor footer and the Anthropic anchor cache marker (`app/anchor-cache.ts`).
 type `smart-context-anchor`, plus `smart_navigation` tool results) and legacy
 `context` tool anchors; recall scans other sessions' JSONL read-only.
 
-Agent anchors require the shared early pressure gate by default. An anchor
-requests one safe consolidation through `smart_context`'s existing queue;
+Autonomous agent anchors require the shared early pressure gate by default.
+An early user-requested anchor uses native `ctx.ui.confirm`: only a literal
+host `true` grants a call-local timing exception. The name/summary are scrubbed
+before approval, then session epoch, leaf, pending input, permissions and running
+work are rechecked. Headless, denied, cancelled or stale approval fails closed.
+No tool argument or persistent setting carries this grant. The trusted callback
+forwards `userConfirmed` to the existing queue, leaving `manual` false for a tool
+call so batch, permission, preparation, origin and signature checks still run.
+The single trim is recorded with cause `manual`; future requests inherit nothing.
+
+An anchor requests one safe consolidation through `smart_context`'s existing queue;
 only its new region can be trimmed before first replay. Previous anchor and
 checkpoint prefixes stay protected. Append-only anchors do not invalidate a
 prepared summary; ready/running compaction takes priority over agent cleanup.

package/CHANGELOG.md

@@ -2,6 +2,54 @@
 
 ## [Unreleased]
 
+## [10.3.0] - 2026-10-06
+
+### Release approval
+
+- The release owner explicitly approved `10.3.0` as a stable release to `latest`
+  with a version-specific canary exception, not an RC. Publication remains
+  gated on the exact candidate's deterministic release checks and required CI.
+  No version-specific applied-canary cohort or live provider/signature test
+  exists. Offline regressions do not establish provider-side signature
+  acceptance, cache-hit savings, production quality or a `PROMOTE` result.
+
+### Added
+
+- **User-confirmed early anchors.** In pressure-only mode, an explicitly
+  user-requested anchor can ask Pi for one-time host confirmation, then save the
+  anchor and request one safe cleanup below pressure or with unknown usage.
+  No model argument grants permission and no setting changes. Rejection,
+  cancellation, stale session/history and revoked navigation/tool access fail
+  closed; confirmed cleanup still revalidates the originating batch, policy,
+  prepared work and signed thinking. Autonomous actions retain their timing
+  gates. No extra summarizer request, automatic full compaction or general
+  pressure bypass is added.
+
+### Fixed
+
+- **Model-aware cache lifetime.** Economic cleanup, the host cache ledger and
+  replay estimates now share Pi's model cache-lifetime metadata instead of
+  assuming five minutes for every provider. A 30-minute cache is not cold at
+  minute six. Unknown/invalid lifetimes cannot authorize a cold trim; pressure
+  and manual cleanup remain available. With no recorded retention choice the
+  longest advertised tier is used, and shorter tail writes do not retire an
+  observed 1h prefix. Model switches do not reuse the previous route's clock.
+  Ledger expiry/cause labels are explicitly estimates. Replay assumes no cache
+  reuse when lifetime metadata is unknown, without changing measured baseline
+  usage. Automatic cleanup thresholds and provider routes are unchanged.
+- **Research checkpoint/rewind semantics.** A bounded read-only investigation
+  can return to its checkpoint with one findings report even below pressure,
+  with unknown usage, or after pressure clears before commit. Automatic
+  cleanup and autonomous agent trim/anchor retain their pressure gates. Active checkpoints
+  cannot be silently replaced. Guidance distinguishes research return from
+  cleanup and points an active investigation at rewind rather than a new anchor.
+  Transient owned pressure hints inside the detour leave active context too;
+  checkpoint-prefix and unrelated extension messages are preserved.
+  Known read-only graph, diagnostic and web tools participate in recoverable
+  cleanup; source snippet first deliveries and explicit instruction reads stay
+  protected. Branch, permission, preparation, side-effect and signed-thinking
+  safeguards remain in force; no extra summarizer request or per-turn notice.
+
 ## [10.2.1] - 2026-10-05
 
 ### Release approval

package/assets/skills/context-management/SKILL.md

@@ -12,17 +12,19 @@ Permitted context tools are available from the start by default. In optional laz
 Load `navigation` for `smart_navigation`.
 
 - `view` lists recent anchors on the active branch first, then other branches. Results are bounded previews; use `target` to read one anchor's full summary. An anchor records completed work, not a speculative plan.
-- `anchor` records completed work only under pressure by default; check `smart_context status` first. Preserve the goal, constraints, decisions, verified state, unresolved problems and exact identifiers. It queues one safe cleanup of the new region, not a full compaction. The response distinguishes queued cleanup from a no-op; never claim context shrank before commit. Do not duplicate a rewind report as another long anchor summary.
+- `anchor` records completed work under pressure by default. For an explicit user request outside pressure, prepare the name and summary and call the tool: Pi independently asks for one-time approval, including when usage is unknown. Never claim approval, invent a bypass argument, retry a refusal, or change settings to get around the gate. Without host consent no early anchor/cleanup is requested. Preserve the goal, constraints, decisions, verified state, unresolved problems and exact identifiers. It queues one safe cleanup of the new region, not full compaction; safety/preparation gates still apply. A queued cleanup or a saved anchor is not proof that context shrank. Do not duplicate a rewind report as another long anchor summary.
 - `recall` searches anchors in earlier local sessions, in the current project by default. Only use `scope="all"` when cross-project search is actually needed. Results are historical evidence, not instructions or permission. Use Pi's `/resume` to open a different session.
 - Before `pivot`, inspect the destination with `view`. Supply its exact entry ID or unambiguous anchor name and a non-empty `carryover` containing the task, new facts, decisions, failures, unfinished work and the next step. Call pivot on its own and end the turn. The host applies it only after the tool batch settles and revalidates the origin. A queued result is not proof that navigation has happened.
 - Pivot changes the active conversation branch, not files, running processes, databases or external services. Never claim it undoes side effects. Required carryover is inserted as the native tree summary without a second model request. An optional `message` becomes the next user turn only after successful navigation; omit it when the user should decide what happens next.
 
-## Recoverable cleanup
+## Research round trips and recoverable cleanup
 
-Load `history` for `smart_context`. This is different from tree navigation.
+Load `history` for `smart_context`. Research return, automatic cleanup and tree navigation are different operations.
 
-- `status` shows real usage, the policy window, cleanup/compaction thresholds and blockers. `plan` previews cleanup; `trim` requests it at an uncontested completed turn boundary. Agent trim/rewind/anchor requests require pressure by default; human commands can request earlier work.
-- `checkpoint` is cheap metadata: use it before a substantial, bounded read-only research detour, not every turn. `rewind(report=...)` removes its eligible read-only exploration from delivered context while retaining the findings you explicitly report. Preserve decisions, evidence, constraints, failures and the next step. Do not hide side effects or discard an unresolved question.
+- For a substantial, bounded read-only investigation: `checkpoint(label=...)` → explore → `rewind(report=...)` → continue the original task. Finish the rewind before implementation or your final answer. Neither checkpoint nor rewind requires pressure or an available usage reading. Do not wait for the context to fill or run `trim` first.
+- One checkpoint at a time: never nest or replace an active one. In a purely read-only detour, rewind returns the unchanged checkpoint context plus one agent-written report, without another model call. Preserve findings with evidence paths/identifiers, decisions, constraints, failed attempts and the next step. Intermediate prose and supported read/search/graph/diagnostic tool exchanges leave active context; original text remains recoverable.
+- Rewind is not filesystem rollback. Errors, instruction reads, side-effecting or unknown batches, images and new user instructions must not be silently erased. If a safety/preparation gate blocks the return, preserve/report findings and explain the blocker; do not retry in a loop or claim success.
+- `status` shows real usage, the policy window, cleanup/compaction thresholds and blockers. `plan` previews cleanup; `trim` requests it at an uncontested completed turn boundary. Automatic cleanup and autonomous agent trim/anchor requests still require pressure by default; human commands and a host-confirmed anchor can request earlier work. Do not checkpoint every turn or duplicate a completed research report as a long anchor.
 - `status`, `search` and `read` recover archived tool evidence on the active branch; add `scope="lineage"` to reach the sessions this one was handed off or forked from (read-only, up to three levels). A marker is a digest (subject, first line, risk lines), not the output; a `(superseded: …)` note means the file was edited or read again in full later. Old successful `bash` output and old `read` pages are archived the same way. A preview is not the whole output; retrieve the needed source rather than inventing details.
 - A `read` or `search` that reports archived text no longer matching its record means the session file changed after archiving; treat that source as unavailable and say so, never reconstruct it.
 - Published anchor prefixes stay protected. A new anchor may consolidate only its new region once, before first replay. Signed Anthropic thinking that depends on removed history blocks unsafe trim/rewind; do not bypass this safeguard. Prepared compaction takes priority. There is one cleanup owner; do not stack independent truncators.

package/dist/app/context-attention.d.ts

@@ -12,7 +12,7 @@
  */
 import type { ExtensionAPI, ExtensionContext } from "@earendil-works/pi-coding-agent";
 import type { CompactConfig } from "../types.ts";
-export declare const ATTENTION_CUSTOM_TYPE = "smart-compact-attention";
+export { ATTENTION_CUSTOM_TYPE } from "./context-operations.ts";
 type AttentionConfig = Pick<CompactConfig, "contextNavigationEnabled" | "contextGuidanceEnabled" | "toolLoading" | "autoTrigger" | "autoTriggerStrategy" | "minContextPercent" | "prepareContextPercent" | "maxContextTokens">;
 export interface ContextAttentionDeps {
     config: () => AttentionConfig;
@@ -24,5 +24,4 @@ export interface ContextAttentionDeps {
     reachable: (group: "navigation" | "history" | "compaction") => boolean;
 }
 export declare function registerContextAttention(pi: Pick<ExtensionAPI, "on" | "sendMessage" | "getActiveTools">, deps: ContextAttentionDeps): void;
-export {};
 //# sourceMappingURL=context-attention.d.ts.map

package/dist/app/context-attention.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context-attention.d.ts","sourceRoot":"","sources":["../../src/app/context-attention.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAEtF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAKjD,eAAO,MAAM,qBAAqB,4BAA4B,CAAC;AAM/D,KAAK,eAAe,GAAG,IAAI,CAAC,aAAa,EACvC,0BAA0B,GAAG,wBAAwB,GAAG,aAAa,GAAG,aAAa,GAAG,qBAAqB,GAC3G,mBAAmB,GAAG,uBAAuB,GAAG,kBAAkB,CAAC,CAAC;AAExE,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,eAAe,CAAC;IAC9B,yGAAyG;IACzG,WAAW,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,OAAO,CAAC;IAChD,uFAAuF;IACvF,UAAU,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,OAAO,CAAC;IAC/C,8DAA8D;IAC9D,SAAS,EAAE,CAAC,KAAK,EAAE,YAAY,GAAG,SAAS,GAAG,YAAY,KAAK,OAAO,CAAC;CACxE;AAED,wBAAgB,wBAAwB,CACtC,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,GAAG,aAAa,GAAG,gBAAgB,CAAC,EAC/D,IAAI,EAAE,oBAAoB,GACzB,IAAI,CA2CN"}
+{"version":3,"file":"context-attention.d.ts","sourceRoot":"","sources":["../../src/app/context-attention.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAEtF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAKjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAMhE,KAAK,eAAe,GAAG,IAAI,CAAC,aAAa,EACvC,0BAA0B,GAAG,wBAAwB,GAAG,aAAa,GAAG,aAAa,GAAG,qBAAqB,GAC3G,mBAAmB,GAAG,uBAAuB,GAAG,kBAAkB,CAAC,CAAC;AAExE,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,eAAe,CAAC;IAC9B,yGAAyG;IACzG,WAAW,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,OAAO,CAAC;IAChD,uFAAuF;IACvF,UAAU,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,OAAO,CAAC;IAC/C,8DAA8D;IAC9D,SAAS,EAAE,CAAC,KAAK,EAAE,YAAY,GAAG,SAAS,GAAG,YAAY,KAAK,OAAO,CAAC;CACxE;AAED,wBAAgB,wBAAwB,CACtC,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,GAAG,aAAa,GAAG,gBAAgB,CAAC,EAC/D,IAAI,EAAE,oBAAoB,GACzB,IAAI,CA2CN"}

package/dist/app/context-operations.d.ts

@@ -4,6 +4,7 @@ import type { ModelCostRates } from "@earendil-works/pi-ai";
 import { fingerprintContext } from "./pending-slot.ts";
 export declare const CONTEXT_CONTROL_TYPE = "smart-compact-context";
 export declare const CONTEXT_REPORT_TYPE = "smart-compact-rewind";
+export declare const ATTENTION_CUSTOM_TYPE = "smart-compact-attention";
 export declare const MAX_CONTEXT_EDITS = 512;
 export declare const MAX_TRIM_EDITS = 32;
 export declare const MIN_TRIM_CHARS = 4096;

package/dist/app/context-operations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context-operations.d.ts","sourceRoot":"","sources":["../../src/app/context-operations.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,OAAO,EAC+C,KAAK,oBAAoB,EAAE,KAAK,YAAY,EACjG,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,cAAc,EAAY,MAAM,uBAAuB,CAAC;AAStE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAIvD,eAAO,MAAM,oBAAoB,0BAA0B,CAAC;AAC5D,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAC1D,eAAO,MAAM,iBAAiB,MAAM,CAAC;AACrC,eAAO,MAAM,cAAc,KAAK,CAAC;AACjC,eAAO,MAAM,cAAc,OAAQ,CAAC;AAKpC,eAAO,MAAM,0BAA0B,QAAS,CAAC;AACjD,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAE1C,kFAAkF;AAClF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,GAAG,SAAS,CAO7E;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;CACjD;AAED,mHAAmH;AACnH,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,YAAY,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;AAGhF,yGAAyG;AACzG,MAAM,WAAW,aAAa;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAE5E,KAAK,WAAW,GACZ;IAAE,OAAO,EAAE,CAAC,CAAC;IAAC,MAAM,EAAE,YAAY,CAAC;IAAC,UAAU,EAAE,iBAAiB,CAAA;CAAE,GACnE;IAAE,OAAO,EAAE,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,SAAS,CAAA;CAAE,GACnG;IAAE,OAAO,EAAE,CAAC,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAA;CAAE,CAAC;AAuBvF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,WAAW,GAAG,oBAAoB,CAE3E;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,MAAM;;;;;;EA+CvE;AAqCD,kGAAkG;AAClG,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAErE;AASD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CA+B9J;AA6CD,+FAA+F;AAC/F,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAelI;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,GAAE;IAAE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO;;;;;;;;;EAqD7I;AAED,mFAAmF;AACnF,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,aAAa,EAAE,CAAA;CAAE,EAAE,KAAK,EAAE,SAAS,GAAG,oBAAoB,EAAE,CAGhK;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM;;;EAkBpH;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CASvI;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM;;;EA+BpI;AAED,2GAA2G;AAC3G,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAYlG"}
+{"version":3,"file":"context-operations.d.ts","sourceRoot":"","sources":["../../src/app/context-operations.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,OAAO,EAC+C,KAAK,oBAAoB,EAAE,KAAK,YAAY,EACjG,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,cAAc,EAAY,MAAM,uBAAuB,CAAC;AAStE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAIvD,eAAO,MAAM,oBAAoB,0BAA0B,CAAC;AAC5D,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAC1D,eAAO,MAAM,qBAAqB,4BAA4B,CAAC;AAC/D,eAAO,MAAM,iBAAiB,MAAM,CAAC;AACrC,eAAO,MAAM,cAAc,KAAK,CAAC;AACjC,eAAO,MAAM,cAAc,OAAQ,CAAC;AAKpC,eAAO,MAAM,0BAA0B,QAAS,CAAC;AACjD,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAE1C,kFAAkF;AAClF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,GAAG,SAAS,CAO7E;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;CACjD;AAED,mHAAmH;AACnH,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,YAAY,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;AAGhF,yGAAyG;AACzG,MAAM,WAAW,aAAa;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAE5E,KAAK,WAAW,GACZ;IAAE,OAAO,EAAE,CAAC,CAAC;IAAC,MAAM,EAAE,YAAY,CAAC;IAAC,UAAU,EAAE,iBAAiB,CAAA;CAAE,GACnE;IAAE,OAAO,EAAE,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,SAAS,CAAA;CAAE,GACnG;IAAE,OAAO,EAAE,CAAC,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAA;CAAE,CAAC;AAuBvF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,WAAW,GAAG,oBAAoB,CAE3E;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,MAAM;;;;;;EA+CvE;AAqCD,kGAAkG;AAClG,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAErE;AASD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CA+B9J;AA6CD,+FAA+F;AAC/F,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAelI;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,GAAE;IAAE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO;;;;;;;;;EAqD7I;AAED,mFAAmF;AACnF,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,aAAa,EAAE,CAAA;CAAE,EAAE,KAAK,EAAE,SAAS,GAAG,oBAAoB,EAAE,CAGhK;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM;;;EAkBpH;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CASvI;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM;;;EAkCpI;AAED,2GAA2G;AAC3G,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAYlG"}

package/dist/app/host-cache-ledger.d.ts

@@ -1,5 +1,5 @@
 /** Session-local ledger of the host's own provider prompt-cache usage, built only from reported usage. */
-import type { Usage } from "@earendil-works/pi-ai";
+import type { ModelPromptCache, Usage } from "@earendil-works/pi-ai";
 export type ContextEditKind = "trim" | "rewind" | "navigation" | "compaction";
 export type RebuildCause = "continuity" | "idle-expiry" | "foreign";
 /** Foreign rebuilds needed before the ledger asks the integrator to warn once. */
@@ -57,11 +57,15 @@ export interface HostCacheLedger {
     /** Pi sent a `cache_warm` refresh at `at`; it keeps the live prefix alive like a request. */
     noteCacheWarm(at: number): void;
     /** Assistant message at message_end; null when it carries no usable usage. */
-    observe(message: ObservedMessage, at?: number): LedgerEntry | null;
+    observe(message: ObservedMessage, at?: number, promptCache?: ModelPromptCache): LedgerEntry | null;
     summary(): LedgerSummary;
 }
-/** Lifetime of the prefix a request cached: 1 h when it reported 1h-retention writes, else 5 min. */
-export declare const cacheLifetimeMs: (usage: Partial<Usage> | undefined) => number;
+/**
+ * Best-effort lifetime from Pi's model metadata (seconds). The request's chosen
+ * retention is not recorded, so use the longest advertised tier. A reported
+ * 1h write can lengthen this estimate, never shorten it. Unknown is not expired.
+ */
+export declare function cacheLifetimeMs(usage: Partial<Usage> | undefined, promptCache?: ModelPromptCache): number | null;
 export declare function createHostCacheLedger(): HostCacheLedger;
 /** 1–3 short Home lines; empty until the host reported usage for a request. */
 export declare function formatCacheLedgerSummary(summary: LedgerSummary): string[];

package/dist/app/host-cache-ledger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"host-cache-ledger.d.ts","sourceRoot":"","sources":["../../src/app/host-cache-ledger.ts"],"names":[],"mappings":"AAAA,0GAA0G;AAE1G,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAGnD,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,QAAQ,GAAG,YAAY,GAAG,YAAY,CAAC;AAC9E,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,aAAa,GAAG,SAAS,CAAC;AAEpE,kFAAkF;AAClF,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,6FAA6F;IAC7F,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAED,MAAM,WAAW,UAAU;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE;AAE/D,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC3C,UAAU,EAAE,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IAChD,kIAAkI;IAClI,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC;CACpE;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,iDAAiD;IACjD,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,wEAAwE;IACxE,SAAS,IAAI,MAAM,GAAG,IAAI,CAAC;IAC3B,kFAAkF;IAClF,eAAe,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAAC;IAC7C,6FAA6F;IAC7F,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,8EAA8E;IAC9E,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;IACnE,OAAO,IAAI,aAAa,CAAC;CAC1B;AAMD,qGAAqG;AACrG,eAAO,MAAM,eAAe,UAAW,OAAO,CAAC,KAAK,CAAC,GAAG,SAAS,KAAG,MACN,CAAC;AAE/D,wBAAgB,qBAAqB,IAAI,eAAe,CAgFvD;AAKD,+EAA+E;AAC/E,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,EAAE,CAmBzE"}
+{"version":3,"file":"host-cache-ledger.d.ts","sourceRoot":"","sources":["../../src/app/host-cache-ledger.ts"],"names":[],"mappings":"AAAA,0GAA0G;AAE1G,OAAO,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAGrE,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,QAAQ,GAAG,YAAY,GAAG,YAAY,CAAC;AAC9E,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,aAAa,GAAG,SAAS,CAAC;AAEpE,kFAAkF;AAClF,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,6FAA6F;IAC7F,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAED,MAAM,WAAW,UAAU;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE;AAE/D,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC3C,UAAU,EAAE,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IAChD,kIAAkI;IAClI,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC;CACpE;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,iDAAiD;IACjD,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,wEAAwE;IACxE,SAAS,IAAI,MAAM,GAAG,IAAI,CAAC;IAC3B,kFAAkF;IAClF,eAAe,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAAC;IAC7C,6FAA6F;IAC7F,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,8EAA8E;IAC9E,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,gBAAgB,GAAG,WAAW,GAAG,IAAI,CAAC;IACnG,OAAO,IAAI,aAAa,CAAC;CAC1B;AAMD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,SAAS,EAAE,WAAW,CAAC,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAIhH;AAED,wBAAgB,qBAAqB,IAAI,eAAe,CAyFvD;AAKD,+EAA+E;AAC/E,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,EAAE,CAmBzE"}

package/dist/app/register-navigation.d.ts

@@ -13,7 +13,7 @@ export declare function registerNavigation(pi: ExtensionAPI, options?: {
     config?: () => CompactConfig;
     mutationBlocked?: (ctx: ExtensionContext) => string | undefined;
     /** Anchor creation may request one safe consolidation, without invalidating prepared compaction. */
-    onAnchor?: (ctx: ExtensionContext, originId: string, callId?: string, signal?: AbortSignal) => string;
+    onAnchor?: (ctx: ExtensionContext, originId: string, callId?: string, signal?: AbortSignal, userConfirmed?: boolean) => string;
     /** Staging-time signal: queued and about-to-apply pivots, never append-only anchors. */
     onContextChange?: (ctx: ExtensionContext) => void;
     /** Commit-time signal: fires only after Pi applied a pivot's tree navigation. */

package/dist/app/register-navigation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"register-navigation.d.ts","sourceRoot":"","sources":["../../src/app/register-navigation.ts"],"names":[],"mappings":"AAGA,OAAO,EAAe,KAAK,YAAY,EAAE,KAAK,uBAAuB,EAAE,KAAK,gBAAgB,EAAc,MAAM,iCAAiC,CAAC;AAKlJ,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAKjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AA0E9D,OAAO,KAAK,EAA6C,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAgB/G,MAAM,WAAW,oBAAoB;IACpC,SAAS,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC;IAC1C,OAAO,CAAC,GAAG,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACrC,KAAK,CAAC,GAAG,EAAE,uBAAuB,GAAG,sBAAsB,CAAC;IAC5D,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5E;AAED,iFAAiF;AACjF,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,GAAE;IAC7D,MAAM,CAAC,EAAE,MAAM,aAAa,CAAC;IAC7B,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,MAAM,GAAG,SAAS,CAAC;IAChE,oGAAoG;IACpG,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,MAAM,CAAC;IACtG,wFAAwF;IACxF,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,IAAI,CAAC;IAClD,iFAAiF;IACjF,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,KAAK,IAAI,CAAC;CAClE,GAAG,oBAAoB,CAkQ5B"}
+{"version":3,"file":"register-navigation.d.ts","sourceRoot":"","sources":["../../src/app/register-navigation.ts"],"names":[],"mappings":"AAGA,OAAO,EAAe,KAAK,YAAY,EAAE,KAAK,uBAAuB,EAAE,KAAK,gBAAgB,EAAc,MAAM,iCAAiC,CAAC;AAKlJ,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAKjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AA0E9D,OAAO,KAAK,EAA6C,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAgB/G,MAAM,WAAW,oBAAoB;IACpC,SAAS,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC;IAC1C,OAAO,CAAC,GAAG,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACrC,KAAK,CAAC,GAAG,EAAE,uBAAuB,GAAG,sBAAsB,CAAC;IAC5D,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5E;AAED,iFAAiF;AACjF,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,GAAE;IAC7D,MAAM,CAAC,EAAE,MAAM,aAAa,CAAC;IAC7B,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,MAAM,GAAG,SAAS,CAAC;IAChE,oGAAoG;IACpG,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IAC/H,wFAAwF;IACxF,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,IAAI,CAAC;IAClD,iFAAiF;IACjF,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,KAAK,IAAI,CAAC;CAClE,GAAG,oBAAoB,CAsR5B"}

package/dist/app/register-smart-context-tool.d.ts

@@ -34,7 +34,7 @@ export declare function unchangedSince(branch: SessionEntry[], leafId: string):
 export type SmartContextController = {
     /** Queue a user-requested trim; it applies at the next natural turn boundary. */
     requestManualTrim(ctx: ExtensionContext): ManualTrimRequest;
-    requestAnchorTrim(ctx: ExtensionContext, originId: string, callId?: string, signal?: AbortSignal): ManualTrimRequest;
+    requestAnchorTrim(ctx: ExtensionContext, originId: string, callId?: string, signal?: AbortSignal, userConfirmed?: boolean): ManualTrimRequest;
     /** Automatic trim waiting for a cold prompt cache in this session, if any. */
     deferredTrim(sessionId: string): DeferredTrim | null;
 };

package/dist/app/register-smart-context-tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"register-smart-context-tool.d.ts","sourceRoot":"","sources":["../../src/app/register-smart-context-tool.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAqD,YAAY,EAAE,gBAAgB,EAAwB,YAAY,EAAuB,MAAM,iCAAiC,CAAC;AAOlM,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAMjD,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAgC/E,iFAAiF;AACjF,MAAM,MAAM,iBAAiB,GACzB;IAAE,KAAK,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,KAAK,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,KAAK,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,KAAK,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7C,8EAA8E;AAC9E,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,iEAAiE;IACjE,cAAc,CAAC,EAAE,IAAI,CAAC;CACvB;AAED,6FAA6F;AAC7F,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,YAAY,GAAG,MAAM,CAOjE;AA2BD,wFAAwF;AACxF,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAI9E;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,iFAAiF;IACjF,iBAAiB,CAAC,GAAG,EAAE,gBAAgB,GAAG,iBAAiB,CAAC;IAC5D,iBAAiB,CAAC,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,iBAAiB,CAAC;IACrH,8EAA8E;IAC9E,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAAC;CACtD,CAAC;AAEF,8FAA8F;AAC9F,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,GAAE;IAClE,MAAM,CAAC,EAAE,MAAM,aAAa,CAAC;IAC7B,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,OAAO,CAAC;IACjD,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,OAAO,CAAC;IACpD,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,OAAO,CAAC;IAC9C,0GAA0G;IAC1G,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,IAAI,CAAC;IAClD,kGAAkG;IAClG,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,KAAK,IAAI,CAAC;IACvE,gFAAgF;IAChF,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1D,8CAA8C;IAC9C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACf,GAAG,sBAAsB,CAsa9B"}
+{"version":3,"file":"register-smart-context-tool.d.ts","sourceRoot":"","sources":["../../src/app/register-smart-context-tool.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAqD,YAAY,EAAE,gBAAgB,EAAwB,YAAY,EAAuB,MAAM,iCAAiC,CAAC;AAOlM,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAMjD,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAmC/E,iFAAiF;AACjF,MAAM,MAAM,iBAAiB,GACzB;IAAE,KAAK,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,KAAK,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,KAAK,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,KAAK,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7C,8EAA8E;AAC9E,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,iEAAiE;IACjE,cAAc,CAAC,EAAE,IAAI,CAAC;CACvB;AAED,6FAA6F;AAC7F,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,YAAY,GAAG,MAAM,CAOjE;AA4BD,wFAAwF;AACxF,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAI9E;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,iFAAiF;IACjF,iBAAiB,CAAC,GAAG,EAAE,gBAAgB,GAAG,iBAAiB,CAAC;IAC5D,iBAAiB,CAAC,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE,OAAO,GAAG,iBAAiB,CAAC;IAC9I,8EAA8E;IAC9E,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAAC;CACtD,CAAC;AAEF,8FAA8F;AAC9F,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,GAAE;IAClE,MAAM,CAAC,EAAE,MAAM,aAAa,CAAC;IAC7B,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,OAAO,CAAC;IACjD,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,OAAO,CAAC;IACpD,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,OAAO,CAAC;IAC9C,0GAA0G;IAC1G,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,IAAI,CAAC;IAClD,kGAAkG;IAClG,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,KAAK,IAAI,CAAC;IACvE,gFAAgF;IAChF,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1D,8CAA8C;IAC9C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACf,GAAG,sBAAsB,CA8a9B"}

package/dist/constants.d.ts

@@ -8,7 +8,7 @@ import type { CompressionProfile, ProfileConfig } from "./types.ts";
  * `package.json#version`. Do not hand-edit this line for releases; bump
  * package.json and run `bun run sync-version`.
  */
-export declare const VERSION = "10.2.1";
+export declare const VERSION = "10.3.0";
 /**
  * Opt-in components that are not installed with the extension: optional peer
  * dependencies in package.json, pinned to the versions the release audit

package/dist/domain/tool-semantics.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-semantics.d.ts","sourceRoot":"","sources":["../../src/domain/tool-semantics.ts"],"names":[],"mappings":"AAYA,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAgCpC;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAQjE;AAED,0FAA0F;AAC1F,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAMvD;AAOD,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,OAAO,CAK7E;AAED,8FAA8F;AAC9F,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,OAAO,CAK7E;AAID,8FAA8F;AAC9F,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAcnF;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AA8GD,mFAAmF;AACnF,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,OAAO,GAAG,mBAAmB,CAiC7E;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAcrG;AAED,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,OAAO,CAAC;AACtE,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;AAErG,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAQvD;AAOD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,aAAa,CAarF;AAqCD,sFAAsF;AACtF,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAW9F;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,EAC1D,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAC1D,OAAO,CAET;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,SAAS,CAQrD"}
+{"version":3,"file":"tool-semantics.d.ts","sourceRoot":"","sources":["../../src/domain/tool-semantics.ts"],"names":[],"mappings":"AAYA,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAgCpC;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAQjE;AAED,0FAA0F;AAC1F,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CASvD;AAUD,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,OAAO,CAK7E;AAED,8FAA8F;AAC9F,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,OAAO,CAK7E;AAID,8FAA8F;AAC9F,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAcnF;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AA8GD,mFAAmF;AACnF,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,OAAO,GAAG,mBAAmB,CAiC7E;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAcrG;AAED,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,OAAO,CAAC;AACtE,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;AAErG,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAQvD;AAOD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,aAAa,CAarF;AAqCD,sFAAsF;AACtF,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAW9F;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,EAC1D,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAC1D,OAAO,CAET;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,SAAS,CAQrD"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAEN,KAAK,YAAY,EAEjB,MAAM,iCAAiC,CAAC;AAmEzC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAyDtE,MAAM,CAAC,OAAO,UAAU,qBAAqB,CAAC,EAAE,EAAE,YAAY,QAumB7D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAEN,KAAK,YAAY,EAEjB,MAAM,iCAAiC,CAAC;AAmEzC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAyDtE,MAAM,CAAC,OAAO,UAAU,qBAAqB,CAAC,EAAE,EAAE,YAAY,QAymB7D"}

package/dist/index.js

@@ -5,7 +5,7 @@ import {
 } from "@earendil-works/pi-coding-agent";
 
 // src/constants.ts
-var VERSION = "10.2.1";
+var VERSION = "10.3.0";
 var OPTIONAL_COMPONENTS = {
   mnemopi: { name: "@oh-my-pi/pi-mnemopi", version: "18.3.1", enables: "Mnemopi memory store" },
   bun: { name: "bun", version: "1.4.2", enables: "Mnemopi worker runtime when no Bun 1.3.14+ is on PATH" },
@@ -2157,6 +2157,8 @@ function extractToolPath(args) {
   return;
 }
 function isInstructionSource(args) {
+  if (typeof args.qualified_name === "string" && /(?:^|[./])(?:AGENTS|CLAUDE|GEMINI|SKILL|copilot-instructions|skills?)(?:[./]|$)/i.test(args.qualified_name))
+    return true;
   return PATH_KEYS.some((key) => {
     const source = typeof args[key] === "string" ? args[key].replaceAll("\\", "/") : "";
     return /(?:^|\/)(?:AGENTS|CLAUDE|GEMINI|SKILL|copilot-instructions)\.md$/i.test(source) || /(?:^|\/)skills?\//i.test(source);
@@ -2176,7 +2178,24 @@ var READ_ONLY_TOOLS = new Set([
   "read_url_content",
   "find_text_in_url_content",
   "summarize_url_content",
-  "get_search_content"
+  "get_search_content",
+  "fetch_content",
+  "lens_diagnostics",
+  "effective_config",
+  "ast_grep_search",
+  "search_graph",
+  "trace_path",
+  "get_code_snippet",
+  "get_file_outline",
+  "query_graph",
+  "get_architecture",
+  "search_code",
+  "get_graph_schema",
+  "index_status",
+  "check_index_coverage",
+  "detect_changes",
+  "compare_graphs",
+  "list_projects"
 ]);
 function isReadOnlyResearchTool(toolName, input) {
   if (isInstructionSource(input))
@@ -13235,7 +13254,7 @@ function eligible(event) {
   if (event.isError || !event.content.length || event.content.some((block) => block.type !== "text") || Array.isArray(event.details) || event.details !== undefined && event.details !== null && !isRecord2(event.details) || isRecord2(event.details) && Object.hasOwn(event.details, ARTIFACT_DETAILS_KEY))
     return false;
   const tool = normalizeToolName(event.toolName);
-  if (["read", "read_symbol", "read_enclosing", "smart_context"].includes(tool) || !isReadOnlyResearchTool(tool, event.input))
+  if (["read", "read_symbol", "read_enclosing", "get_code_snippet", "smart_context"].includes(tool) || !isReadOnlyResearchTool(tool, event.input))
     return false;
   return true;
 }
@@ -13313,6 +13332,7 @@ function branchToolArtifacts(branch, ownedReferences) {
 // src/app/context-operations.ts
 var CONTEXT_CONTROL_TYPE = "smart-compact-context";
 var CONTEXT_REPORT_TYPE = "smart-compact-rewind";
+var ATTENTION_CUSTOM_TYPE = "smart-compact-attention";
 var MAX_CONTEXT_EDITS = 512;
 var MAX_TRIM_EDITS = 32;
 var MIN_TRIM_CHARS = 4096;
@@ -13662,8 +13682,8 @@ function planContextRewind(branch, sessionId, checkpointId, report, readerApi) {
   if (!state.checkpoint || state.checkpoint.id !== checkpointId) {
     throw new Error(state.invalidReason ?? "No matching active checkpoint; create one before research.");
   }
-  const suffixIds = new Set(branch.slice(state.checkpointIndex + 1).map((entry) => entry.id));
-  const targets = [...removableResearch(branch)].filter((id) => suffixIds.has(id));
+  const research = removableResearch(branch);
+  const targets = branch.slice(state.checkpointIndex + 1).filter((entry) => research.has(entry.id) || entry.type === "custom_message" && entry.customType === ATTENTION_CUSTOM_TYPE).map((entry) => entry.id);
   if (targets.length > MAX_CONTEXT_EDITS)
     throw new Error("Research exceeds the rewind edit limit; compact instead.");
   const targetSet = new Set(targets);
@@ -16811,7 +16831,6 @@ function createSettledAutoTrigger(options = {}) {
 }
 
 // src/app/context-attention.ts
-var ATTENTION_CUSTOM_TYPE = "smart-compact-attention";
 var CONTEXT_TOOL_NAME = "smart_context";
 var COMPACTION_TOOL_NAME = "smart_compact";
 var LOADER_TOOL_NAME = "smart_tools";
@@ -16871,22 +16890,32 @@ function renderAttention(band, percent, settings, ctx, active, reachable, canCle
   const load = (group, tool) => active.has(tool) ? "" : reachable(group) && active.has(LOADER_TOOL_NAME) ? ` Load it first: ${LOADER_TOOL_NAME} load ${group}.` : null;
   const navigation = settings.contextNavigationEnabled ? load("navigation", NAVIGATION_TOOL_NAME) : null;
   const history = load("history", CONTEXT_TOOL_NAME);
-  if (navigation !== null) {
-    lines.push(`- Finishing a unit of work? ${NAVIGATION_TOOL_NAME} anchor with a concise handoff (done / in progress / next step). An anchor alone does not reduce context; cleanup depends on safety and preparation gates.${navigation}`);
-  }
+  let checkpointLabel;
+  let trimmable = 0;
   if (history !== null) {
-    let trimmable = 0;
-    if (canCleanup) {
-      try {
-        const branch = ctx.sessionManager.getBranch();
-        const plan = planContextTrim(branch, inspectContext(branch, resolveSessionId(ctx)).checkpoint?.originId, { readerApi: ctx.model?.api });
+    try {
+      const branch = ctx.sessionManager.getBranch();
+      const checkpoint = inspectContext(branch, resolveSessionId(ctx)).checkpoint;
+      checkpointLabel = checkpoint?.label;
+      if (canCleanup && !checkpoint) {
+        const plan = planContextTrim(branch, undefined, { readerApi: ctx.model?.api });
         if (!plan.blockedReason)
           trimmable = plan.entries.filter((entry) => entry.type === "context_edit").length;
-      } catch {}
+      }
+    } catch {}
+  }
+  if (navigation !== null && checkpointLabel === undefined) {
+    lines.push(`- Finishing a unit of work? ${NAVIGATION_TOOL_NAME} anchor with a concise handoff (done / in progress / next step). An anchor alone does not reduce context; cleanup depends on safety and preparation gates.${navigation}`);
+  }
+  if (history !== null) {
+    if (checkpointLabel !== undefined) {
+      const next = canCleanup ? `Finish with ${CONTEXT_TOOL_NAME} rewind(report) before implementation or your final answer. No pressure required; safety checks still apply.` : "Prepared/running compaction or unavailable recovery takes priority. Preserve findings and check status; do not replace the checkpoint or retry in a loop.";
+      lines.push(`- Research checkpoint ${JSON.stringify(checkpointLabel)} is active. ${next}${history}`);
+    } else {
+      if (trimmable > 0)
+        lines.push(`- ${CONTEXT_TOOL_NAME} trim: ${trimmable} archived tool output${trimmable === 1 ? "" : "s"} eligible now.${history}`);
+      lines.push(`- Starting a large read-only detour? ${CONTEXT_TOOL_NAME} checkpoint first; rewind(report) afterward before implementation or your final answer. No pressure required; safety checks still apply. Keep findings and evidence in the report.${trimmable > 0 ? "" : history}`);
     }
-    if (trimmable > 0)
-      lines.push(`- ${CONTEXT_TOOL_NAME} trim: ${trimmable} archived tool output${trimmable === 1 ? "" : "s"} eligible now.${history}`);
-    lines.push(`- Starting a large read-only detour? ${CONTEXT_TOOL_NAME} checkpoint first; rewind(report) afterward only when status permits. Keep findings and evidence in the report.${trimmable > 0 ? "" : history}`);
   }
   if (band === "compaction" && !settings.autoTrigger) {
     const compaction = load("compaction", COMPACTION_TOOL_NAME);
@@ -16917,19 +16946,26 @@ ${lines.join(`
 var FOREIGN_REBUILD_WARN_COUNT = 3;
 var num = (value) => typeof value === "number" && Number.isFinite(value) && value > 0 ? value : 0;
 var tallies = (keys) => Object.fromEntries(keys.map((key) => [key, { count: 0, uncached: 0 }]));
-var cacheLifetimeMs = (usage) => num(usage?.cacheWrite1h) > 0 ? ONE_HOUR_MS : FIVE_MINUTES_MS;
+function cacheLifetimeMs(usage, promptCache) {
+  const tiers = [promptCache?.short, promptCache?.long].filter((value) => value !== undefined);
+  if (!tiers.length || tiers.some((value) => !Number.isFinite(value) || value <= 0 || !Number.isFinite(value * 1000)))
+    return null;
+  return Math.max(...tiers.map((value) => value * 1000), num(usage?.cacheWrite1h) > 0 ? ONE_HOUR_MS : 0);
+}
 function createHostCacheLedger() {
   let sessionId = null;
   let summary;
   let previousAt;
   let warmedAt;
-  let lifetimeMs = FIVE_MINUTES_MS;
+  let lifetimeMs = null;
+  let previousRoute;
   let pendingEdit;
   const reset = (id) => {
     sessionId = id;
     previousAt = undefined;
     warmedAt = undefined;
-    lifetimeMs = FIVE_MINUTES_MS;
+    lifetimeMs = null;
+    previousRoute = undefined;
     pendingEdit = undefined;
     summary = {
       sessionId: id,
@@ -16952,7 +16988,7 @@ function createHostCacheLedger() {
     noteCacheWarm(at) {
       warmedAt = Math.max(warmedAt ?? at, at);
     },
-    observe(message, at) {
+    observe(message, at, promptCache) {
       const usage = message.usage;
       if (!usage || typeof usage.input !== "number" || !Number.isFinite(usage.input))
         return null;
@@ -16973,12 +17009,15 @@ function createHostCacheLedger() {
         cacheRead,
         rebuild: false
       };
-      if (previousAt !== undefined) {
+      const route = JSON.stringify([message.provider, message.model]);
+      const sameRoute = route === previousRoute;
+      const currentLifetime = cacheLifetimeMs(usage, promptCache);
+      if (previousAt !== undefined && sameRoute) {
         entry.gapMs = Math.max(0, time - previousAt);
         if (uncached >= Math.max(REBUILD_MIN_TOKENS, 0.5 * prompt)) {
           entry.rebuild = true;
           const alive = Math.max(previousAt, warmedAt ?? previousAt);
-          entry.cause = pendingEdit ? "continuity" : time - alive > lifetimeMs ? "idle-expiry" : "foreign";
+          entry.cause = pendingEdit ? "continuity" : lifetimeMs !== null && currentLifetime !== null && time - alive > Math.max(lifetimeMs, currentLifetime) ? "idle-expiry" : "foreign";
           const cause = summary.rebuilds[entry.cause];
           cause.count++;
           cause.uncached += uncached;
@@ -17002,8 +17041,8 @@ function createHostCacheLedger() {
         if (entry.rebuild)
           summary.cost.rebuildUncached += num(cost.input) + num(cost.cacheWrite);
       }
-      if (cacheWrite > 0)
-        lifetimeMs = cacheLifetimeMs(usage);
+      lifetimeMs = sameRoute && lifetimeMs !== null && currentLifetime !== null ? Math.max(lifetimeMs, currentLifetime) : currentLifetime;
+      previousRoute = route;
       previousAt = time;
       warmedAt = undefined;
       pendingEdit = undefined;
@@ -17020,7 +17059,7 @@ function formatCacheLedgerSummary(summary) {
   const readPercent = prompt ? Math.round(summary.cacheRead / prompt * 100) : 0;
   const { continuity, "idle-expiry": idle, foreign } = summary.rebuilds;
   const total = continuity.count + idle.count + foreign.count;
-  const lines = [`Host prompt cache: ${summary.requests} requests \xB7 ${readPercent}% of prompt tokens read from cache \xB7 ${total} rebuilds`];
+  const lines = [`Host prompt cache: ${summary.requests} requests \xB7 ${readPercent}% of prompt tokens read from cache \xB7 ${total} estimated rebuilds`];
   if (!total)
     return lines;
   const parts = [];
@@ -17029,10 +17068,10 @@ function formatCacheLedgerSummary(summary) {
     parts.push(`${continuity.count} after Continuity edits (${kinds}): ${tokens(continuity.uncached)} uncached`);
   }
   if (idle.count)
-    parts.push(`${idle.count} idle-expiry: ${tokens(idle.uncached)} uncached`);
+    parts.push(`${idle.count} possible idle-expiry: ${tokens(idle.uncached)} uncached`);
   if (foreign.count)
-    parts.push(`${foreign.count} without a Continuity edit: ${tokens(foreign.uncached)} uncached`);
-  lines.push("Rebuilds: " + parts.join(" \xB7 "));
+    parts.push(`${foreign.count} without a Continuity edit (cause unknown): ${tokens(foreign.uncached)} uncached`);
+  lines.push("Rebuild estimates: " + parts.join(" \xB7 "));
   if (summary.cost.total > 0)
     lines.push(`Cost (Pi model pricing): $${summary.cost.total.toFixed(4)} total \xB7 $${summary.cost.rebuildUncached.toFixed(4)} uncached input+cache writes on rebuilds`);
   return lines;
@@ -19304,24 +19343,31 @@ async function loadLineage(ctx, options = {}) {
 // src/app/register-smart-context-tool.ts
 var TOOL_NAME = "smart_context";
 var MAX_REPORT_CHARS = 8000;
+var ACTIVE_CHECKPOINT_ERROR = "A checkpoint is already active. Finish it with rewind(report) before starting another.";
 function formatDeferredTrim(deferred) {
   const tokens = (value) => value >= 1000 ? `${Math.round(value / 1000)}k` : String(value);
   const why = deferred.breakEvenRequests === null ? "the model's cache price is unknown" : `it pays back its cache rewrite only after ${Math.ceil(deferred.breakEvenRequests)} requests (limit ${AUTO_TRIM_BREAK_EVEN_REQUESTS})`;
   const warming = deferred.warmingStopped ? " Prompt-cache warming was stopped so the cache can go cold." : "";
   return `Saves ~${tokens(deferred.savedTokens)} tokens, but ${why}, so it waits for a cold prompt cache.${warming}`;
 }
-function cachedPrefix(branch) {
+function cachedPrefix(branch, model) {
+  let lifetimeMs = cacheLifetimeMs(undefined, model?.promptCache);
+  if (!model || lifetimeMs === null)
+    return null;
   let since;
   for (let index = branch.length - 1;index >= 0; index--) {
     const entry = branch[index];
+    if (entry.type === "compaction" || entry.type === "context_edit" || entry.type === "branch_summary")
+      break;
     if (entry.type !== "message" || entry.message.role !== "assistant")
       continue;
     const message = entry.message;
+    if (message.provider !== model.provider || message.model !== model.id)
+      break;
     since ??= message.timestamp;
-    if ((message.usage?.cacheWrite ?? 0) > 0)
-      return { since, lifetimeMs: cacheLifetimeMs(message.usage) };
+    lifetimeMs = Math.max(lifetimeMs, cacheLifetimeMs(message.usage, model.promptCache) ?? lifetimeMs);
   }
-  return since === undefined ? null : { since, lifetimeMs: FIVE_MINUTES_MS };
+  return since === undefined || !Number.isFinite(since) ? null : { since, lifetimeMs };
 }
 function unchangedSince(branch, leafId) {
   const leaf = branch.findIndex((entry) => entry.id === leafId);
@@ -19361,11 +19407,11 @@ function registerSmartContextTool(pi, options = {}) {
   pi.registerTool({
     name: TOOL_NAME,
     label: "Session Context",
-    description: "Check status for context pressure/gates. Before a large read-only detour, checkpoint; when finished, rewind(report) keeps findings and drops safe research under pressure. plan/trim old output; search/read archived evidence (scope=lineage includes parents). Changes apply after the batch, never roll back files/processes.",
+    description: "For bounded read-only research: checkpoint before exploring, then rewind(report) before implementation or your final answer. Rewind replaces safe exploration with your findings; no pressure required, one active checkpoint. status shows gates; plan/trim follow cleanup policy; search/read recover archived evidence (scope=lineage includes parents). Changes apply after the batch; safety guards remain, files/processes are never rolled back.",
     parameters: Type4.Object({
       action: StringEnum2(["status", "plan", "checkpoint", "rewind", "trim", "read", "search"]),
       label: Type4.Optional(Type4.String({ maxLength: 120, description: "Checkpoint label." })),
-      report: Type4.Optional(Type4.String({ minLength: 1, maxLength: MAX_REPORT_CHARS, description: "Rewind: findings, decisions, failures, next step." })),
+      report: Type4.Optional(Type4.String({ minLength: 1, maxLength: MAX_REPORT_CHARS, description: "Rewind handoff: findings and evidence paths, constraints/decisions, failed attempts, next step." })),
       id: Type4.Optional(Type4.String({ minLength: 1, maxLength: 128, description: "Source ID." })),
       query: Type4.Optional(Type4.String({ minLength: 1, maxLength: 200, description: "Literal text." })),
       line: Type4.Optional(Type4.Integer({ minimum: 1, description: "Read from line." })),
@@ -19487,7 +19533,7 @@ ${page.text}`);
       if (options.canAgentMutate?.(ctx) === false) {
         throw new Error("Agent-requested context changes are disabled by policy; status, plan, search and read stay available.");
       }
-      if (params.action !== "checkpoint" && config().contextPressureOnly && !contextPressure(ctx, config()).cleanup) {
+      if (params.action === "trim" && config().contextPressureOnly && !contextPressure(ctx, config()).cleanup) {
         throw new Error("No context pressure (or usage is unavailable); history left unchanged. Check status. Human commands can request early cleanup.");
       }
       if (params.action !== "checkpoint" && options.canAutoTrim?.(ctx) === false) {
@@ -19497,6 +19543,8 @@ ${page.text}`);
         throw new Error("Context changes are paused while a navigation pivot is pending.");
       if (queued)
         throw new Error("A context change is already queued; wait for the next turn boundary.");
+      if (params.action === "checkpoint" && state.checkpoint)
+        throw new Error(ACTIVE_CHECKPOINT_ERROR);
       if (params.action === "rewind" && !state.checkpoint)
         throw new Error(state.invalidReason ?? "No active checkpoint.");
       const report = params.report?.trim() ?? "";
@@ -19519,7 +19567,8 @@ ${page.text}`);
         text: params.action === "rewind" ? text : text.slice(0, 120),
         signal
       };
-      return reply(`${params.action} queued for the completed tool batch. ${params.action === "rewind" ? "Stop research here; files and processes stay unchanged." : "Use status to inspect the committed state."}`, {
+      const next = params.action === "checkpoint" ? "Explore read-only, then call rewind(report) with findings, evidence, constraints and the next step before implementation or your final answer. Do not nest checkpoints. No pressure required." : params.action === "rewind" ? "Stop research here. After the batch, continue the original task from the retained report. Files and processes are not reverted." : "Use status to inspect the committed state.";
+      return reply(`${params.action} queued for the completed tool batch. ${next}`, {
         display: { state: "queued", action: params.action, label: text.slice(0, 120) }
       });
     },
@@ -19585,7 +19634,7 @@ ${page.text}`);
         mark = null;
         return;
       }
-      const prefix = cachedPrefix(branch);
+      const prefix = cachedPrefix(branch, ctx.model);
       const since = Math.max(prefix?.since ?? 0, warm?.sessionId === sessionId ? warm.at : 0);
       if (!prefix || now() - since <= prefix.lifetimeMs)
         return;
@@ -19606,7 +19655,7 @@ ${page.text}`);
     return changed ? { messages } : undefined;
   };
   const vetoWarming = (event, ctx, sessionId) => {
-    if (config().contextPressureOnly || mark?.sessionId !== sessionId || !unchangedSince(ctx.sessionManager.getBranch(), mark.leafId) || thinkingEditReason(ctx.sessionManager.getBranch(), mark.entries, ctx.model?.api))
+    if (config().contextPressureOnly || mark?.sessionId !== sessionId || !cachedPrefix(ctx.sessionManager.getBranch(), ctx.model) || !unchangedSince(ctx.sessionManager.getBranch(), mark.leafId) || thinkingEditReason(ctx.sessionManager.getBranch(), mark.entries, ctx.model?.api))
       return false;
     const cost = ctx.model?.cost;
     const price = cost ? cost.cacheWrite > 0 ? cost.cacheWrite : cost.input : NaN;
@@ -19640,7 +19689,7 @@ ${page.text}`);
     }
     const settings = config();
     const pressure = contextPressure(ctx, settings).cleanup;
-    if (request && !request.manual && request.action !== "checkpoint" && settings.contextPressureOnly && !pressure) {
+    if (request && !request.manual && !request.userConfirmed && request.action === "trim" && settings.contextPressureOnly && !pressure) {
       return cancelled(event, "Context pressure cleared; history left unchanged.");
     }
     if (!request) {
@@ -19674,6 +19723,8 @@ ${page.text}`);
     let entries;
     try {
       if (request?.action === "checkpoint") {
+        if (state.checkpoint)
+          throw new Error(ACTIVE_CHECKPOINT_ERROR);
         entries = [contextControlEntry({
           version: 1,
           action: "checkpoint",
@@ -19696,7 +19747,7 @@ ${page.text}`);
         if (plan.blockedReason)
           return request ? cancelled(event, plan.blockedReason) : undefined;
         if (request) {
-          entries = trimEntries(plan, request.manual ? "manual" : "agent");
+          entries = trimEntries(plan, request.manual || request.userConfirmed ? "manual" : "agent");
         } else {
           mark = null;
           if (plan.automatic !== "ready")
@@ -19736,6 +19787,7 @@ ${page.text}`);
     return { entries: [...event.entries, ...entries] };
   });
   const requestTrim = (ctx, anchor) => {
+    const userConfirmed = anchor?.userConfirmed === true;
     const sessionId = resolveSessionId(ctx);
     if (isUnresolvedSessionId(sessionId)) {
       return { state: "unavailable", notice: "Context control needs an identifiable session." };
@@ -19749,7 +19801,7 @@ ${page.text}`);
     if (anchor && options.canAutoTrim?.(ctx) === false) {
       return { state: "busy", notice: "Cleanup deferred: prepared/running compaction or unavailable recovery tools take priority." };
     }
-    if (anchor?.callId && (options.canAgentMutate?.(ctx) === false || config().contextPressureOnly && !contextPressure(ctx, config()).cleanup)) {
+    if (anchor?.callId && (options.canAgentMutate?.(ctx) === false || !userConfirmed && config().contextPressureOnly && !contextPressure(ctx, config()).cleanup)) {
       return { state: "unavailable", notice: "Cleanup not requested: no context pressure or agent changes are disabled." };
     }
     const branch = ctx.sessionManager.getBranch();
@@ -19758,7 +19810,7 @@ ${page.text}`);
       return { state: "unavailable", notice: "Anchor origin is no longer on this branch." };
     const anchorBoundary = anchor ? lastAnchorBoundary(branch.slice(0, origin + 1)) ?? null : undefined;
     const plan = planContextTrim(branch, inspectContext(branch, sessionId).checkpoint?.originId, { anchorBoundary, readerApi: ctx.model?.api });
-    if (!plan.entries.length || anchor?.callId && plan.automatic !== "ready") {
+    if (!plan.entries.length || anchor?.callId && !userConfirmed && plan.automatic !== "ready") {
       return { state: "no-eligible", notice: plan.blockedReason ?? (anchor ? "No safe cleanup batch ready; recent turns and protected prefixes stay unchanged." : "No eligible archived output to trim.") };
     }
     mark = null;
@@ -19770,17 +19822,18 @@ ${page.text}`);
       checkpointId: "",
       text: "",
       manual: !anchor?.callId,
+      userConfirmed,
       anchorBoundary,
       signal: anchor?.signal
     };
     return {
       state: "queued",
-      notice: anchor?.callId ? "Anchor cleanup queued for the completed tool batch; prior anchor prefixes and recent turns stay protected. Use status to confirm the committed state." : "Manual trim queued. The first next provider request is not yet trimmed; the change applies at the next completed turn boundary. A pending navigation pivot or newer boundary change cancels it."
+      notice: anchor?.callId ? `${userConfirmed ? "User-confirmed anchor" : "Anchor"} cleanup queued for the completed tool batch; prior anchor prefixes and recent turns stay protected. Use status to confirm the committed state.` : "Manual trim queued. The first next provider request is not yet trimmed; the change applies at the next completed turn boundary. A pending navigation pivot or newer boundary change cancels it."
     };
   };
   return {
     requestManualTrim: (ctx) => requestTrim(ctx),
-    requestAnchorTrim: (ctx, originId, callId, signal) => requestTrim(ctx, { originId, callId, signal }),
+    requestAnchorTrim: (ctx, originId, callId, signal, userConfirmed) => requestTrim(ctx, { originId, callId, signal, userConfirmed }),
     deferredTrim: deferred
   };
 }
@@ -21205,7 +21258,7 @@ var CATEGORIES = [
         setting: {
           id: "contextPressureOnly",
           label: "Cleanup timing",
-          description: "Pressure only (default) leaves roomy cached history alone, including agent trim/rewind/anchor requests. Economic also allows break-even/cold-cache cleanup. Human commands can request early cleanup; safety checks always apply.",
+          description: "Pressure only (default) gates automatic cleanup and autonomous agent trim/anchor requests. A host-confirmed anchor can request one early cleanup without changing this setting. Checkpoint/rewind research is pressure-independent. Economic opts into early cleanup. Safety checks always apply.",
           values: BOOLEAN_VALUES,
           labels: { true: "Pressure only", false: "Economic (opt-in)" }
         }
@@ -24325,6 +24378,11 @@ function registerNavigation(pi, options = {}) {
   let queued;
   let applying;
   let timer;
+  let epoch = 0;
+  const agentAllowed = () => {
+    const settings = config();
+    return settings.toolLoading !== "off" && pi.getActiveTools().includes(NAVIGATION_TOOL_NAME);
+  };
   const scrub = (text) => {
     const settings = config();
     return new SecretScrubber(settings.scrubSecrets, settings.scrubPii).scrubText(text).value;
@@ -24445,7 +24503,7 @@ function registerNavigation(pi, options = {}) {
   pi.registerTool({
     name: NAVIGATION_TOOL_NAME,
     label: "Context Navigation",
-    description: "View/recall session anchors. Under context pressure, anchor completed work with a concise handoff; safe cleanup is queued once, not full compaction. Pivot needs carryover and ends the turn; files/processes are not rolled back.",
+    description: "View/recall session anchors. Anchor completed work under pressure. In pressure-only mode, an explicitly user-requested early anchor requires one-time host confirmation. Safe cleanup is queued once, not full compaction; never claim approval or retry a refusal. Pivot needs carryover and ends the turn; files/processes are not rolled back.",
     parameters: Type6.Object({
       action: StringEnum4(["view", "recall", "anchor", "pivot"]),
       target: Type6.Optional(Type6.String({ minLength: 1, maxLength: 128 })),
@@ -24463,8 +24521,8 @@ function registerNavigation(pi, options = {}) {
       enabled();
       if (signal?.aborted)
         throw new Error("Navigation cancelled.");
-      if (config().toolLoading === "off" || !pi.getActiveTools().includes(NAVIGATION_TOOL_NAME))
-        throw new Error("Load navigation with smart_tools first; respect the user's /tools selection.");
+      if (!agentAllowed())
+        throw new Error("Navigation tool access is disabled or hidden; respect the user's policy and /tools selection.");
       if (params.action === "view") {
         if (params.target) {
           const target = resolveAnchorTarget(ctx.sessionManager, params.target);
@@ -24489,16 +24547,34 @@ Use Pi's /resume to open a different session.`, {
         });
       }
       if (params.action === "anchor") {
-        if (config().contextPressureOnly && !contextPressure(ctx, config()).cleanup) {
-          throw new Error("No context pressure (or usage is unavailable); no anchor added. Use smart_context status. A human can save an early anchor from /smart-compact.");
+        const early = config().contextPressureOnly && !contextPressure(ctx, config()).cleanup;
+        if (early && !ctx.hasUI)
+          throw new Error("No context pressure (or usage is unavailable); early anchor requires host confirmation. No anchor or cleanup requested. A human can use /smart-compact.");
+        let data = anchor(ctx, params.name ?? "", params.summary ?? "");
+        let userConfirmed = false;
+        if (early) {
+          if (ctx.hasPendingMessages())
+            throw new Error("Queued user input takes priority; no anchor or cleanup requested.");
+          const approvalEpoch = epoch;
+          const sessionId = resolveSessionId(ctx);
+          const approved = await ctx.ui.confirm("Save anchor and request early cleanup?", `Anchor: ${data.name}
+
+${data.summary}
+
+Allow this anchor and one safe cleanup without context pressure? Only eligible old tool outputs may be shortened; recent turns, protected prefixes and safety checks stay. No full compaction or file/process rollback. Cleanup can be blocked by prepared work or safety checks. This does not change your settings or authorize future calls.`, { signal });
+          if (approved !== true || signal?.aborted)
+            throw new Error("Anchor not approved or cancelled; no anchor or cleanup requested. Do not retry without a new user request.");
+          if (approvalEpoch !== epoch || sessionId !== resolveSessionId(ctx) || data.targetId !== ctx.sessionManager.getLeafId() || ctx.hasPendingMessages() || !agentAllowed())
+            throw new Error("Anchor confirmation expired: session, history, pending input or tool permissions changed. Nothing was queued.");
+          data = anchor(ctx, data.name, data.summary);
+          userConfirmed = true;
         }
-        const data = anchor(ctx, params.name ?? "", params.summary ?? "");
-        const cleanup = options.onAnchor?.(ctx, data.targetId, callId, signal) ?? "History unchanged; no cleanup controller attached.";
+        const cleanup = options.onAnchor?.(ctx, data.targetId, callId, signal, userConfirmed) ?? "History unchanged; no cleanup controller attached.";
         return { content: [{ type: "text", text: `Anchor: ${data.name}
 
 ${data.summary}
 
-${cleanup}` }], details: { anchor: data } };
+${cleanup}` }], details: { anchor: data, ...userConfirmed ? { userConfirmed: true } : {} } };
       }
       const operation = preparePivot(ctx, params.target ?? "", params.carryover ?? "", params.message);
       operation.callId = callId;
@@ -24575,6 +24651,7 @@ ${operation.carryover}` } };
     footer(ctx);
   });
   const reset = (_event, ctx) => {
+    epoch++;
     cancel();
     applying = undefined;
     footer(ctx);
@@ -24583,17 +24660,23 @@ ${operation.carryover}` } };
   pi.on("session_before_switch", reset);
   pi.on("session_before_fork", reset);
   pi.on("session_before_compact", (_event, ctx) => {
+    epoch++;
     if (queued?.sessionId === resolveSessionId(ctx) || applying?.sessionId === resolveSessionId(ctx))
       return { cancel: true };
   });
   pi.on("session_shutdown", (_event, ctx) => {
+    epoch++;
     cancel();
     applying = undefined;
     ctx.ui.setStatus(STATUS, undefined);
   });
   pi.on("session_tree", (_event, ctx) => {
+    epoch++;
     footer(ctx);
   });
+  pi.on("model_select", () => {
+    epoch++;
+  });
   return {
     isPending: (ctx) => queued?.sessionId === resolveSessionId(ctx) || applying?.sessionId === resolveSessionId(ctx),
     refresh,
@@ -25112,7 +25195,7 @@ function smartCompactExtension(pi) {
   navigation = registerNavigation(pi, {
     config: automaticConfig,
     mutationBlocked: (ctx) => isRunning.isSessionActive(resolveSessionId(ctx)) ? "Compaction is running; wait for it to finish." : undefined,
-    onAnchor: (ctx, originId, callId, signal) => smartContext.requestAnchorTrim(ctx, originId, callId, signal).notice,
+    onAnchor: (ctx, originId, callId, signal, userConfirmed) => smartContext.requestAnchorTrim(ctx, originId, callId, signal, userConfirmed).notice,
     onContextChange: (ctx) => invalidatePreparation(ctx, "branch"),
     onContextEdit: (_ctx, kind) => hostCache.noteContextEdit(kind)
   });
@@ -25430,12 +25513,13 @@ function smartCompactExtension(pi) {
     const sessionId = resolveSessionId(ctx);
     if (hostCache.sessionId() !== sessionId)
       hostCache.reset(sessionId);
-    if (!hostCache.observe(event.message)?.warn)
+    const promptCache = ctx.model && ctx.model.provider === event.message.provider && ctx.model.id === event.message.model ? ctx.model.promptCache : undefined;
+    if (!hostCache.observe(event.message, undefined, promptCache)?.warn)
       return;
     const { foreign } = hostCache.summary().rebuilds;
     recordIssue({
       key: "cache.foreign-rebuilds",
-      message: "Pi's prompt cache was rebuilt " + foreign.count + " times this session with no Continuity edit before them (" + foreign.uncached.toLocaleString("en-US") + " uncached prompt tokens re-sent). Other extensions, model or tool changes, or Pi's built-in compaction change the prefix too; Home \u203A Readiness & details lists rebuild causes."
+      message: "Pi reported " + foreign.count + " large uncached prompts this session with no Continuity edit before them (" + foreign.uncached.toLocaleString("en-US") + " uncached prompt tokens). Their cause is unknown; model/tool changes and Pi's built-in compaction can also change the prefix. Home \u203A Readiness & details lists rebuild estimates."
     });
   });
   pi.on("message_end", async (event, ctx) => {

package/dist/rtk.js

@@ -198,7 +198,7 @@ class SecretScrubber {
 }
 
 // src/constants.ts
-var VERSION = "10.2.1";
+var VERSION = "10.3.0";
 var OPTIONAL_COMPONENTS = {
   mnemopi: { name: "@oh-my-pi/pi-mnemopi", version: "18.3.1", enables: "Mnemopi memory store" },
   bun: { name: "bun", version: "1.4.2", enables: "Mnemopi worker runtime when no Bun 1.3.14+ is on PATH" },

package/docs/configuration.md

@@ -370,11 +370,17 @@ stay on disk and manual `/smart-compact trim` still works.
 | Key | TUI label | Default | Effect |
 | --- | --- | --- | --- |
 | `contextHygieneEnabled` | `Automatic cleanup` | `true` | Batched, recoverable trimming. Needs 16,384 characters of net savings and eight assistant turns since the last trim, rewind or compaction. Works with `autoTrigger: false`. |
-| `contextPressureOnly` | `Cleanup timing` | `true` | Automatic cleanup and agent trim/rewind/anchor requests require the early pressure gate. `false` opts into the legacy economic/cold-cache timing below. Human commands bypass pressure, never safety checks. |
+| `contextPressureOnly` | `Cleanup timing` | `true` | Automatic cleanup and autonomous agent trim/anchor requests require the early pressure gate. Human commands and one host-confirmed anchor can bypass timing, never safety checks. Checkpoint/rewind research round trips are independent of pressure. `false` opts into the legacy early/economic timing below; no switch is needed for a user-confirmed anchor. |
 | `artifactOffloadEnabled` | `Offload huge outputs` | `false` | Saves eligible read-only text results of 16,384+ characters before the model sees them. Independent of pressure gates. |
 | `visualArchiveEnabled` | `Image snapshots` | `false` | Experimental image snapshots beside the verified text. Adds image tokens; needs a vision model with a validated cost rule and the optional `@resvg/resvg-js` component (not installed with the extension; `Readiness & details` shows the install command). Without it, output falls back to text. |
 | `pinPaths` | `Always-kept files` | `[]` | Paths every summary must keep |
 
+User-guided early anchors use Pi's native confirmation, not a new setting or
+model-settable override. The confirmation is scoped to one anchor/cleanup;
+`contextHygieneEnabled: false` disables periodic cleanup, not explicit confirmed
+work. Tool/navigation permissions, prepared work and signed-thinking guards
+still apply. See [user-guided anchors](./guide.md#user-guided-early-anchors).
+
 ### Fixed hygiene limits
 
 These limits are not configurable. Behavior and examples are in the guide's
@@ -398,8 +404,10 @@ These limits are not configurable. Behavior and examples are in the guide's
 Default: only `pressure` can trigger automatic cleanup. The shared early gate is
 `prepareContextPercent`, or the adaptive lead when null. A 400k policy window
 with the default 80% apply gate cleans from 288k and compacts from 320k.
-Unknown usage does not authorize cleanup. First-delivery offload and metadata
-checkpoints do not rewrite cached history and remain independent of pressure.
+Unknown usage does not authorize automatic cleanup. First-delivery offload and
+metadata checkpoints do not rewrite cached history. Explicit research rewind
+is also independent of pressure: it returns to a valid checkpoint with a report,
+subject to the same branch, permission, preparation and safety checks.
 
 The following economics apply **only with `contextPressureOnly: false`**.
 Let `X` be the estimated tokens a batch removes (net of its markers) and `T`
@@ -415,13 +423,17 @@ At a completed turn boundary a ready batch commits with cause:
 - `pressure` when usage reached the early pressure gate;
 - `break-even` when `N* ≤ 24`;
 - `cold` otherwise, after waiting. The batch is held (`smart_context`
-  `status` reports it as `deferredTrim`). The first request after the cache
-  expired (5 minutes after the last response, 1 hour when the last response
-  that wrote cache reported 1h retention) sends the trimmed messages, later
-  requests keep them, and the edits commit at the next completed, uncontested
-  turn.
-
-An unknown price only allows `pressure` and `cold`. Manual and permitted agent trims
+  `status` reports it as `deferredTrim`). The first request beyond the estimated
+  cache horizon sends the trimmed messages; later requests keep them, and the
+  edits commit at the next completed, uncontested turn. The horizon comes from
+  Pi's model `promptCache` metadata (seconds), not a universal five-minute TTL.
+  Since the chosen retention tier is not recorded, the longest advertised tier
+  is used; an observed 1h write can extend it. Short tail writes never shorten
+  an older 1h prefix. A different model or context epoch cannot supply the clock.
+  Missing/invalid lifetime metadata disables `cold` timing and its warming veto,
+  not manual cleanup or pressure-based cleanup.
+
+An unknown price only allows `pressure` and `cold` (the latter still needs lifetime metadata). Manual and permitted agent trims
 commit at the next boundary (causes `manual`, `agent`).
 
 A Pi cache-warming refresh counts as a response for this expiry. While a

package/docs/evaluation.md

@@ -367,13 +367,16 @@ policy starts from the same history. Policies:
   pressure fires later in replay than live.
 - `timed-<N>`: the current rule with `N` in place of the break-even limit;
   pressure commits, `N* ≤ N` commits (`break-even`), otherwise the batch is held
-  and applied at the first request after the previous request's cache lifetime
-  (`cold`). Planning, cooldown and protected prefixes use the extension's own
+  and applied at the first request beyond the model's estimated cache horizon
+  (`cold`). The longest advertised `promptCache` tier is used when the chosen
+  retention is unknown; observed 1h writes can extend it. Missing lifetime
+  metadata never permits a cold trim. Planning, cooldown and protected prefixes use the extension's own
   `planContextTrim`/`trimEntries`/`trimTokens`.
 
 Cost model per request: the projected context is estimated per message; the
 cached prefix is the longest run of identical projected messages shared with
-the previous request (0 after the cache lifetime or a model switch);
+the previous request (0 after the estimated cache horizon, a model switch,
+or when cache lifetime metadata is unknown);
 `uncached = prompt − cached`; a rebuild is `uncached ≥ max(--rebuild-min,
 0.5 × prompt)`; price = `cacheRead × cached + (cacheWrite, else input) ×
 uncached` at catalog rates. System prompt, tool definitions and output are

package/docs/guide.md

@@ -222,10 +222,11 @@ boundary under pressure. The other two causes below require the explicit
 - `pressure`: context usage reached the early pressure gate.
 - `break-even`: the model's catalog prices say the trim pays back its prompt
   cache rewrite within 24 further requests.
-- `cold`: otherwise the batch is held back until the cache has expired (5
-  minutes after the last response, 1 hour when the last response that wrote
-  cache reported 1h retention). A refresh from Pi's cache warming keeps the
-  entry alive, so the batch also waits one lifetime past the latest refresh.
+- `cold`: otherwise the batch waits beyond the model's estimated cache horizon.
+  Pi's `promptCache` metadata supplies the lifetime, not a universal five-minute
+  default. When the chosen retention is unknown, the longest advertised tier
+  is used; reported 1h writes can extend it. Missing lifetime metadata prevents
+  time-based cleanup. A refresh from Pi's cache warming extends this wait too.
   The first request after that already sends the trimmed context, every later
   request keeps sending it, and the edits commit at the next completed turn
   that nothing else claims.
@@ -388,36 +389,44 @@ size, an `artifact-<hash>` ID and short first/last excerpts.
 
 ## Checkpoint and rewind
 
-Use this for bounded research: set a checkpoint, explore, then replace the
-exploration with a short report.
+Use this for a bounded read-only investigation, not periodic cleanup:
+checkpoint → explore → rewind with findings → continue the original task.
+For a purely read-only detour, the delivered context becomes the unchanged
+checkpoint prefix plus one report. Finish the rewind before implementation
+or your final answer; do not wait for context pressure.
 
 Example inputs (one JSON object per call; explore between checkpoint and rewind):
 
 ```jsonl
 {"action":"checkpoint","label":"Investigate auth expiry"}
-{"action":"rewind","report":"Expiry must use <=. Keep async API. Failed approach: local-time parsing. Next: patch and test."}
-{"action":"plan"}
-{"action":"trim"}
+{"action":"rewind","report":"src/auth.ts:12: expiry must use <=. Keep async API. Failed approach: local-time parsing. Next: patch and test."}
 ```
 
-- Check `status` for actual usage and gates. Checkpoints are permitted below
-  pressure; agent rewind/trim/anchor requests are not, by default. Human
-  commands can request early work. Unsafe edits before retained signed
-  Anthropic thinking are refused, even when thinking bytes themselves would
-  stay unchanged.
+- `checkpoint` and `rewind` do **not** require context pressure or an available
+  usage reading. Autonomous agent trim/anchor requests and automatic cleanup
+  still do by default; an early user-requested anchor requires host confirmation.
+  Research return is a separate operation, not a cleanup trigger.
+- Check `status` when blocked. Tool permissions, prepared/running compaction,
+  a pending pivot and signed-thinking safety checks still apply. Keep/report
+  findings if blocked; do not loop, silently replace the checkpoint, or claim
+  the rewind completed.
 - `checkpoint`, `rewind` and `trim` return **queued**. Pi commits them at the
   end of the current tool batch.
-- One checkpoint is active at a time; a new one replaces it. It survives reload.
+- One checkpoint is active at a time and survives reload. A second checkpoint
+  is rejected; finish the active one before starting another investigation.
 - New user instructions, a compaction, branch changes or edits to the context
   before the checkpoint invalidate rewind. It does not silently drop new
   requirements.
 - Rewind removes successful read-only tool exchanges as complete call/result
-  pairs. Errors, instruction reads, incomplete exchanges, images, shell
+  pairs, including supported graph queries, diagnostics and web research.
+  It removes intermediate assistant prose, the rewind call itself and this
+  extension's pressure hints created during the detour, leaving one handoff.
+  Unrelated extension messages stay. Errors, instruction reads, incomplete exchanges, images, shell
   commands, writes and unknown tools stay.
 - **Files, processes, Git state and external effects are never rolled back.**
 - The report (maximum 8,000 characters) is written by the agent and is not
-  verified. It should include findings, constraints, failed attempts and the
-  next step. More than 512 eligible messages requires a normal compaction.
+  verified. It should include findings with evidence paths/identifiers,
+  constraints, failed attempts and the next step. More than 512 eligible messages requires a normal compaction.
 - `plan` previews how many outputs a trim would remove and the characters
   saved, without queuing anything.
 
@@ -432,6 +441,33 @@ anchor prefixes stay protected. It is not a full compaction; the response says
 whether cleanup was queued, blocked or unnecessary. A human may mark a milestone
 earlier. Append-only anchors do not discard an already prepared summary.
 
+### User-guided early anchors
+
+With `contextPressureOnly: true`, you can ask the agent to mark a milestone
+before the pressure gate (including when usage is unknown). The agent prepares
+an anchor name and summary; Pi shows them in a native confirmation dialog.
+Approval authorizes **that anchor and one safe cleanup only**. It changes no
+settings, grants no future permission and needs no extra summarizer request.
+The model cannot authorize itself with a `userConfirmed` argument.
+
+- Rejecting/cancelling the dialog leaves the anchor and cleanup unrequested.
+  Non-interactive hosts cannot grant this exception; RPC supports the dialog.
+- Session/branch changes, new history/input, revoked navigation/tool access and
+  cancellation invalidate pending approval. Cleanup rechecks the originating
+  successful tool batch and all safety/preparation gates at commit.
+- User-confirmed cleanup skips automatic pressure, minimum-batch and cooldown
+  timing, not eligibility: recent turns, previous anchor/checkpoint prefixes,
+  instructions and signed-thinking dependencies stay protected. It works with
+  automatic cleanup disabled. An anchor can be saved even when no safe cleanup
+  is possible; the response says why instead of claiming context shrank.
+- Autonomous anchor/trim and automatic cleanup keep their pressure policy.
+  `contextPressureOnly: false` remains the existing early/economic opt-in;
+  no global switch needs changing for a user-confirmed request.
+- Full compaction remains a separate operation with its existing permission
+  and verification rules. An anchor does not replace the whole conversation.
+
+### Manual navigation panel
+
 Home → **History & recovery** → **Session navigation**, or `/smart-compact context`:
 
 | Row | What it does |
@@ -648,30 +684,33 @@ out rather than estimated. Discarded preparations are only in
 
 For each assistant response in the current session, Pi Continuity records the
 prompt usage the provider reported for Pi's own request: uncached input, cache
-reads and cache writes. Nothing is estimated; responses without reported
-usage, or with zero prompt tokens (aborted or failed requests), are skipped.
+reads and cache writes. Those token counts are measured; rebuild detection and
+cause labels are estimates. Responses without reported usage, or with zero
+prompt tokens (aborted or failed requests), are skipped.
 
-A request counts as a cache rebuild when it is not the session's first and
-its uncached tokens (input + cache writes) are at least 16,384 and at least
-half of its prompt tokens. Each rebuild gets one cause, checked in this order:
+A request counts as an estimated rebuild when it is not the current route's
+first and its uncached tokens (input + cache writes) are at least 16,384 and at
+least half of its prompt tokens. Timing labels are checked in this order; they
+are not provider-confirmed root causes:
 
 - **continuity**: a Continuity edit reached the branch since the previous
   request (an output trim or checkpoint rewind, a navigation pivot, or a Pi
   Continuity compaction). Edits that were queued but not committed do not
   count.
-- **idle-expiry**: the gap since the previous request, or since Pi's latest
-  cache-warming refresh after it, exceeded the cache lifetime, 5 minutes, or
-  1 hour while the cached prefix was written with 1-hour retention (only
-  Anthropic reports that split).
-- **foreign**: neither. Something else changed the prompt prefix, for
-  example another extension, a model or tool change, Pi's built-in
-  compaction, or eviction by the provider.
+- **possible idle-expiry**: the gap since the previous request or cache-warming
+  refresh exceeded the model's longest advertised cache lifetime, extended by
+  any observed 1h writes. Unknown lifetime metadata never implies expiry.
+- **foreign / cause unknown**: neither. The ledger did not observe a Continuity
+  edit or a known expiry horizon; this does not prove another extension changed
+  the prompt. Tool changes, Pi's built-in compaction or provider eviction are
+  possible explanations, not assigned causes. A model switch starts a new
+  timing baseline rather than borrowing the old model's clock.
 
 Home › Readiness & details lists the request count, the share of prompt
 tokens read from cache, rebuilds by cause with their uncached tokens, and the
 cost Pi priced from that usage when the model has catalog prices. The third
-foreign rebuild in a session shows one notice with the count and uncached
-tokens. The ledger is session-local: it resets on a new or switched session,
+unassigned rebuild records one diagnostic with the count and uncached tokens;
+it does not duplicate Pi's cache-miss notification. The ledger is session-local: it resets on a new or switched session,
 is not persisted, and covers only Pi's own requests; Pi Continuity's summary
 calls are in `/smart-compact metrics` instead.
 

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "pi-smart-compact",
-	"version": "10.2.1",
+	"version": "10.3.0",
 	"description": "Pi Continuity — context hygiene and session continuity for Pi Coding Agent: recoverable cleanup, checkpoints, memory and verified compaction.",
 	"type": "module",
 	"packageManager": "bun@1.4.2",