build(deps-dev): bump @earendil-works/pi-coding-agent from 0.78.0 to 0.79.0 in /tools/common

[dependabot]

Bumps @earendil-works/pi-coding-agent from 0.78.0 to 0.79.0.

Release notes

Sourced from @​earendil-works/pi-coding-agent's releases.

v0.79.0

New Features

• Project trust for local inputs - Pi now asks before loading project-local settings, resources, instructions, and packages, with saved decisions and --approve / --no-approve controls for non-interactive modes. See Project Trust.
• Extension-controlled trust decisions - Global and CLI extensions can handle project_trust, decide, remember, or defer project trust before project-local resources load. See project_trust.
• Cache-hit visibility in the footer - The interactive footer now shows the latest prompt cache hit rate (CH). See Interactive Mode.
• Richer SDK and RPC extension surfaces - Public exports now include RPC extension UI request/response types and package asset path helpers. See Extension UI Protocol and SDK Exports.

Added

• Added a project_trust extension event so global and CLI extensions can decide or defer project trust during startup and runtime cwd switches.
• Added project trust gating for project-local settings, resources, instructions, and packages (#5332).
• Added the latest prompt cache hit rate to the interactive footer.
• Exported RPC extension UI request and response types from the public API (#5455).
• Exported coding-agent package asset path helpers from the public API (#5415).

Fixed

• Fixed package exports by removing the stale ./hooks subpath that pointed at non-existent build output.
• Fixed inherited TUI rendering to clear stale lines when content shrinks to zero.
• Fixed inherited autocomplete suggestions to refresh after editor cursor movement (#5499 by @​Roman-Galeev).
• Fixed /reload to persist project trust when an implicitly trusted session creates a project .pi directory.
• Fixed project trust input discovery to traverse parent directories portably.
• Fixed inherited intermittent Shift+Enter handling by making Kitty keyboard protocol fallback response-driven instead of timeout-driven (#5188).
• Fixed the compaction summarization system prompt to use neutral AI assistant wording for non-coding agents (#5401).
• Fixed models.json schema support and inherited OpenAI Responses custom-provider handling for compat.supportsDeveloperRole: false (#5456).
• Fixed inherited prompt history navigation to place the cursor at the start when browsing upward and at the end when browsing downward (#5454).
• Fixed tmux setup documentation to require tmux 3.5 for extended-keys-format csi-u and document the tmux 3.2-3.4 fallback (#5432).
• Fixed inherited OpenRouter routing preferences on OpenAI-compatible custom providers to work when the custom provider base URL does not point directly at OpenRouter (#5347).
• Fixed built-in tool expand hints to style closing parentheses consistently (#5359).
• Fixed skill-wrapped prompts to insert spacing between skill instructions and the user message (#5371 by @​Perlence).

v0.78.1

New Features

• More built-in provider coverage - Added Ant Ling and NVIDIA NIM provider setup, plus MiniMax-M3 support for the direct MiniMax providers. See Providers.
• Richer extension context - Extensions can use ctx.mode and ctx.getSystemPromptOptions() to adapt behavior across TUI, RPC, JSON, and print modes and inspect base system prompt inputs. See Extensions.

Added

• Added containerization documentation and a Gondolin extension example for routing built-in tools into a local micro-VM.
• Added Ant Ling provider selection and setup documentation.
• Added MiniMax-M3 model support inherited from @earendil-works/pi-ai for the minimax and minimax-cn direct providers (#5313).
• Added NVIDIA NIM provider selection, setup documentation, and direct NIM request attribution headers.
• Added ctx.mode to extension contexts so extensions can distinguish TUI, RPC, JSON, and print mode.
• Added ctx.getSystemPromptOptions() for extension commands to inspect the current base system prompt inputs (#5306 by @​xl0).

Fixed

... (truncated)

Changelog

Sourced from @​earendil-works/pi-coding-agent's changelog.

[0.79.0] - 2026-06-08

New Features

• Project trust for local inputs - Pi now asks before loading project-local settings, resources, instructions, and packages, with saved decisions and --approve / --no-approve controls for non-interactive modes. See Project Trust.
• Extension-controlled trust decisions - Global and CLI extensions can handle project_trust, decide, remember, or defer project trust before project-local resources load. See project_trust.
• Cache-hit visibility in the footer - The interactive footer now shows the latest prompt cache hit rate (CH). See Interactive Mode.
• Richer SDK and RPC extension surfaces - Public exports now include RPC extension UI request/response types and package asset path helpers. See Extension UI Protocol and SDK Exports.

Added

• Added a project_trust extension event so global and CLI extensions can decide or defer project trust during startup and runtime cwd switches.
• Added project trust gating for project-local settings, resources, instructions, and packages (#5332).
• Added the latest prompt cache hit rate to the interactive footer.
• Exported RPC extension UI request and response types from the public API (#5455).
• Exported coding-agent package asset path helpers from the public API (#5415).

Fixed

• Fixed package exports by removing the stale ./hooks subpath that pointed at non-existent build output.
• Fixed inherited TUI rendering to clear stale lines when content shrinks to zero.
• Fixed inherited autocomplete suggestions to refresh after editor cursor movement (#5499 by @​Roman-Galeev).
• Fixed /reload to persist project trust when an implicitly trusted session creates a project .pi directory.
• Fixed project trust input discovery to traverse parent directories portably.
• Fixed inherited intermittent Shift+Enter handling by making Kitty keyboard protocol fallback response-driven instead of timeout-driven (#5188).
• Fixed the compaction summarization system prompt to use neutral AI assistant wording for non-coding agents (#5401).
• Fixed models.json schema support and inherited OpenAI Responses custom-provider handling for compat.supportsDeveloperRole: false (#5456).
• Fixed inherited prompt history navigation to place the cursor at the start when browsing upward and at the end when browsing downward (#5454).
• Fixed tmux setup documentation to require tmux 3.5 for extended-keys-format csi-u and document the tmux 3.2-3.4 fallback (#5432).
• Fixed inherited OpenRouter routing preferences on OpenAI-compatible custom providers to work when the custom provider base URL does not point directly at OpenRouter (#5347).
• Fixed built-in tool expand hints to style closing parentheses consistently (#5359).
• Fixed skill-wrapped prompts to insert spacing between skill instructions and the user message (#5371 by @​Perlence).

[0.78.1] - 2026-06-04

New Features

• More built-in provider coverage - Added Ant Ling and NVIDIA NIM provider setup, plus MiniMax-M3 support for the direct MiniMax providers. See Providers.
• Richer extension context - Extensions can use ctx.mode and ctx.getSystemPromptOptions() to adapt behavior across TUI, RPC, JSON, and print modes and inspect base system prompt inputs. See Extensions.

Added

• Added containerization documentation and a Gondolin extension example for routing built-in tools into a local micro-VM.
• Added Ant Ling provider selection and setup documentation.
• Added MiniMax-M3 model support inherited from @earendil-works/pi-ai for the minimax and minimax-cn direct providers (#5313).
• Added NVIDIA NIM provider selection, setup documentation, and direct NIM request attribution headers.
• Added ctx.mode to extension contexts so extensions can distinguish TUI, RPC, JSON, and print mode.
• Added ctx.getSystemPromptOptions() for extension commands to inspect the current base system prompt inputs (#5306 by @​xl0).

Fixed

... (truncated)

Commits

• c10fb95 Release v0.79.0
• 35120d7 docs: audit unreleased changelogs
• ce3a724 docs(coding-agent): document security model
• d8aef0f feat(coding-agent): allow project trust extensions to defer
• 085a085 fix(coding-agent): remove stale hooks export
• 718215b feat(coding-agent): add extension project trust decisions
• 38f18be fix(coding-agent): persist implicit project trust on reload
• 130ae57 fix(tui,coding-agent): make keyboard protocol fallback response-driven
• 72fd911 fix(coding-agent): neutralize compaction summarization prompt
• eb43bd4 fix(coding-agent): export package asset path helpers
• Additional commits viewable in compare view

[wojtekn]

@dependabot rebase

[wpmobilebot]

📊 Performance Test Results

Comparing d452c86 vs trunk

app-size

Metric	trunk	d452c86	Diff	Change
App Size (Mac)	2357.83 MB	2357.83 MB	+0.00 MB	⚪ 0.0%

site-editor

Metric	trunk	d452c86	Diff	Change
load	1032 ms	780 ms	252 ms	🟢 -24.4%

site-startup

Metric	trunk	d452c86	Diff	Change
siteCreation	6511 ms	6505 ms	6 ms	⚪ 0.0%
siteStartup	6989 ms	6989 ms	0 ms	⚪ 0.0%

---

Results are median values from multiple test runs.

Legend: 🟢 Improvement (faster) | 🔴 Regression (slower) | ⚪ No change (<50ms diff)

[wojtekn]

I'm unsure why dependabot missed lock file - I generated it and pushed.