@astralyn/pi 1.4.11 → 1.5.1

package/dist/core/isolated-session.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"isolated-session.js","sourceRoot":"","sources":["../../src/core/isolated-session.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAGxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAiBxD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAA+B;IAC1E,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC3B,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;QAC1B,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;QACzG,MAAM,cAAc,GAAG,IAAI,qBAAqB,CAAC;YAChD,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ;YACR,eAAe,EAAE,MAAM;YACvB,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,IAAI;YACd,iBAAiB,EAAE,IAAI;YACvB,QAAQ,EAAE,IAAI;YACd,oBAAoB,EAAE,OAAO,CAAC,YAAY;SAC1C,CAAC,CAAC;QACH,MAAM,cAAc,CAAC,MAAM,EAAE,CAAC;QAC9B,mGAAmG;QACnG,MAAM,eAAe,GAAG,eAAe,CAAC,QAAQ,CAC/C,EAAE,GAAG,MAAM,CAAC,iBAAiB,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,EACtD,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAC1C,CAAC;QACF,eAAe,CAAC,cAAc,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAC5D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC;IAC5C,CAAC,CAAC;IACF,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;IACzF,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,8FAA8F;IAC9F,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,kBAAkB,CAAC;QAC5C,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ;QACR,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,iBAAiB,EAAE,KAAK;QACxB,cAAc;QACd,eAAe;QACf,cAAc,EAAE,OAAO,CAAC,UAAU;YACjC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE;gBAC9D,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC,aAAa;aAC/C,CAAC;YACH,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC;QACvC,KAAK,EAAE,OAAO,CAAC,KAAK;KACpB,CAAC,CAAC;IACH,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC","sourcesContent":["import type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport type { Model } from \"@earendil-works/pi-ai/compat\";\nimport { getAgentDir } from \"../config.ts\";\nimport { raceWithAbortSignal } from \"../utils/abort.ts\";\nimport type { AgentSession } from \"./agent-session.ts\";\nimport type { ModelRuntime } from \"./model-runtime.ts\";\nimport { DefaultResourceLoader } from \"./resource-loader.ts\";\nimport { createAgentSession } from \"./sdk.ts\";\nimport { SessionManager } from \"./session-manager.ts\";\nimport { SettingsManager } from \"./settings-manager.ts\";\n\nexport interface IsolatedSessionOptions {\n\tcwd: string;\n\tmodel: Model<any>;\n\tthinkingLevel: ThinkingLevel;\n\tmodelRuntime: ModelRuntime;\n\t/** The parent's trust decision; project settings apply only when it is true. */\n\tprojectTrusted: boolean;\n\t/** Builds the system prompt from the base prompt Pi would otherwise use. */\n\tsystemPrompt: (base: string | undefined) => string;\n\ttools: string[];\n\t/** Persist the transcript as a session file at `path`, linked to `parentSession`; in memory when omitted. */\n\ttranscript?: { path: string; parentSession?: string };\n\tsignal?: AbortSignal;\n}\n\n/**\n * A self-contained child session for delegated work: no extensions, skills, prompt templates\n * or themes, a detached settings snapshot without cache warming, a transcript that is in memory unless\n * a path is given, and no background tasks. Cancellation rejects, and a session created as cancellation wins is disposed.\n */\nexport async function createIsolatedSession(options: IsolatedSessionOptions): Promise<AgentSession> {\n\tconst { signal } = options;\n\tsignal?.throwIfAborted();\n\tconst agentDir = getAgentDir();\n\tconst prepare = async () => {\n\t\tconst source = SettingsManager.create(options.cwd, agentDir, { projectTrusted: options.projectTrusted });\n\t\tconst resourceLoader = new DefaultResourceLoader({\n\t\t\tcwd: options.cwd,\n\t\t\tagentDir,\n\t\t\tsettingsManager: source,\n\t\t\tnoExtensions: true,\n\t\t\tnoSkills: true,\n\t\t\tnoPromptTemplates: true,\n\t\t\tnoThemes: true,\n\t\t\tsystemPromptOverride: options.systemPrompt,\n\t\t});\n\t\tawait resourceLoader.reload();\n\t\t// Resource discovery can reload its source; execution owns a detached snapshot, never that source.\n\t\tconst settingsManager = SettingsManager.inMemory(\n\t\t\t{ ...source.getGlobalSettings(), cacheWarming: \"off\" },\n\t\t\t{ projectTrusted: options.projectTrusted },\n\t\t);\n\t\tsettingsManager.applyOverrides(source.getProjectSettings());\n\t\treturn { resourceLoader, settingsManager };\n\t};\n\tconst { resourceLoader, settingsManager } = await raceWithAbortSignal(prepare(), signal);\n\tsignal?.throwIfAborted();\n\t// Adopt the created session before checking cancellation; never race away its cleanup handle.\n\tconst { session } = await createAgentSession({\n\t\tcwd: options.cwd,\n\t\tagentDir,\n\t\tmodelRuntime: options.modelRuntime,\n\t\tmodel: options.model,\n\t\tthinkingLevel: options.thinkingLevel,\n\t\tbackgroundAllowed: false,\n\t\tresourceLoader,\n\t\tsettingsManager,\n\t\tsessionManager: options.transcript\n\t\t\t? SessionManager.createAt(options.transcript.path, options.cwd, {\n\t\t\t\t\tparentSession: options.transcript.parentSession,\n\t\t\t\t})\n\t\t\t: SessionManager.inMemory(options.cwd),\n\t\ttools: options.tools,\n\t});\n\tif (signal?.aborted) {\n\t\tsession.dispose();\n\t\tthrow signal.reason ?? new Error(\"Session creation cancelled.\");\n\t}\n\treturn session;\n}\n"]}

package/dist/modes/interactive/tool-view/fallback.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"fallback.d.ts","sourceRoot":"","sources":["../../../../src/modes/interactive/tool-view/fallback.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,OAAO,EAAE,KAAK,SAAS,EAAyB,MAAM,wBAAwB,CAAC;AAO/E,oGAAoG;AACpG,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAexD;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,UAAQ,GAAG,SAAS,CAK/F;AAED,oGAAoG;AACpG,qBAAa,uBAAwB,YAAW,SAAS;IACxD,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAAU;gBAEd,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO;IAK7C,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE;IAa/B,UAAU,IAAI,IAAI;CAClB"}

package/dist/modes/interactive/tool-view/fallback.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fallback.js","sourceRoot":"","sources":["../../../../src/modes/interactive/tool-view/fallback.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,OAAO,EAAkB,IAAI,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,oGAAoG;AACpG,MAAM,UAAU,kBAAkB,CAAC,IAAa;IAC/C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,OAAO;SACrB,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QACrB,IAAI,CAAC;YACJ,OAAO,GAAG,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,GAAG,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,CAAC;IACF,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC;SACT,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvB,OAAO,eAAe,CAAC,OAAO,EAAE,SAAS,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,IAAa,EAAE,QAAQ,GAAG,KAAK;IACnF,IAAI,QAAQ;QAAE,OAAO,IAAI,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACzF,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,OAAO,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,oGAAoG;AACpG,MAAM,OAAO,uBAAuB;IAInC,YAAY,MAAc,EAAE,QAAiB;QAC5C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC1B,CAAC;IAED,MAAM,CAAC,KAAa;QACnB,MAAM,YAAY,GAAG,KAAK,CAAC,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAErE,MAAM,OAAO,GAAG,qBAAqB,CAAC,YAAY,EAAE,SAAS,CAAC,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAC9F,IAAI,OAAO,CAAC,YAAY,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC,WAAW,CAAC;QAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAC3D,MAAM,IAAI,GACT,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,OAAO,CAAC,YAAY,YAAY,IAAI,GAAG,CAAC;YAClE,IAAI,OAAO,CAAC,kBAAkB,EAAE,WAAW,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;QACzE,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACtE,CAAC;IAED,UAAU,KAAU,CAAC;CACrB","sourcesContent":["/** Generic call and result presentation for a tool that supplies no renderer. */\n\nimport { type Component, Text, truncateToWidth } from \"@earendil-works/pi-tui\";\nimport { formatToolCallWithArgs } from \"../../../core/tools/render-utils.ts\";\nimport { keyHint } from \"../components/keybinding-hints.ts\";\nimport { truncateToVisualLines } from \"../components/visual-truncate.ts\";\nimport { theme } from \"../theme/theme.ts\";\nimport { toolStyle } from \"./style.ts\";\n\n/** One-line `key=value` summary of a call's arguments, bounded by `toolStyle.fallbackArgsWidth`. */\nexport function formatFallbackArgs(args: unknown): string {\n\tif (!args || typeof args !== \"object\") return \"\";\n\tconst entries = Object.entries(args);\n\tif (entries.length === 0) return \"\";\n\tconst summary = entries\n\t\t.map(([key, value]) => {\n\t\t\ttry {\n\t\t\t\treturn `${key}=${JSON.stringify(value) ?? String(value)}`;\n\t\t\t} catch {\n\t\t\t\treturn `${key}=${String(value)}`;\n\t\t\t}\n\t\t})\n\t\t.join(\" \")\n\t\t.replace(/\\s+/g, \" \");\n\treturn truncateToWidth(summary, toolStyle.fallbackArgsWidth, \"...\");\n}\n\nexport function createCallFallback(toolName: string, args: unknown, expanded = false): Component {\n\tif (expanded) return new Text(formatToolCallWithArgs(toolName, args, theme, true), 0, 0);\n\tconst summary = formatFallbackArgs(args);\n\tconst suffix = summary ? theme.fg(\"dim\", `(${summary})`) : \"\";\n\treturn new Text(`${theme.fg(\"toolTitle\", theme.bold(toolName))}${suffix}`, 0, 0);\n}\n\n/** The last `toolStyle.collapsed.fallbackLines` lines of the output, or all of it when expanded. */\nexport class FallbackResultComponent implements Component {\n\tprivate output: string;\n\tprivate expanded: boolean;\n\n\tconstructor(output: string, expanded: boolean) {\n\t\tthis.output = output;\n\t\tthis.expanded = expanded;\n\t}\n\n\trender(width: number): string[] {\n\t\tconst styledOutput = theme.fg(\"toolOutput\", this.output);\n\t\tif (this.expanded) return new Text(styledOutput, 0, 0).render(width);\n\n\t\tconst preview = truncateToVisualLines(styledOutput, toolStyle.collapsed.fallbackLines, width);\n\t\tif (preview.skippedCount <= 0) return preview.visualLines;\n\t\tconst noun = preview.skippedCount === 1 ? \"line\" : \"lines\";\n\t\tconst hint =\n\t\t\ttheme.fg(\"muted\", `... (${preview.skippedCount} earlier ${noun},`) +\n\t\t\t` ${keyHint(\"app.tools.expand\", \"to expand\")}${theme.fg(\"muted\", \")\")}`;\n\t\treturn [truncateToWidth(hint, width, \"...\"), ...preview.visualLines];\n\t}\n\n\tinvalidate(): void {}\n}\n"]}

package/dist/modes/interactive/tool-view/shell.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../../../src/modes/interactive/tool-view/shell.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACX,cAAc,EACd,kBAAkB,EAElB,aAAa,EACb,MAAM,mCAAmC,CAAC;AAM3C,MAAM,MAAM,kBAAkB,GAAG,aAAa,GAAG,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAS/E;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,kBAAkB,GAAG,SAAS,GAAG,kBAAkB,CAuBhH;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,kBAAkB,GAAG,SAAS,GAAG,kBAAkB,CAG9G"}

package/dist/modes/interactive/tool-view/shell.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../../../src/modes/interactive/tool-view/shell.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAOnE,OAAO,EAAE,aAAa,IAAI,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC7F,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAIrF,IAAI,gBAAuE,CAAC;AAE5E,SAAS,qBAAqB,CAAC,QAAgB;IAC9C,gBAAgB,KAAK,sBAAsB,EAAE,CAAC;IAC9C,OAAQ,gBAAkD,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;AACpF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,UAA0C;IAC3F,MAAM,cAAc,GAAG,UAAU,EAAE,YAAY,CAAC;IAChD,OAAO;QACN,IAAI,GAAG;YACN,OAAO,SAAS,CAAC,GAAG,CAAC;QACtB,CAAC;QACD,KAAK,CAAC,SAAoB,EAAE,IAAuB,EAAE,OAA0B;YAC9E,OAAO,IAAI,eAAe,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACzF,CAAC;QACD,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO;YAC/B,OAAO,kBAAkB,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC7D,CAAC;QACD,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO;YAC7C,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;YACjE,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,uBAAuB,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC;QACzF,CAAC;QACD,gBAAgB,CAAC,OAAO;YACvB,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,OAAO,KAAK,CAAC;YACvG,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;YAChD,iGAAiG;YACjG,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,cAAc,CAAC;QAC5D,CAAC;KACD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,UAA0C;IACzF,IAAI,UAAU,EAAE,WAAW,KAAK,MAAM,IAAI,UAAU,EAAE,KAAK;QAAE,OAAO,UAAU,CAAC;IAC/E,OAAO,EAAE,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;AAChF,CAAC","sourcesContent":["import { type Component, Container } from \"@earendil-works/pi-tui\";\nimport type {\n\tToolDefinition,\n\tToolExecutionShell,\n\tToolRenderContext,\n\tToolRenderers,\n} from \"../../../core/extensions/types.ts\";\nimport { getTextOutput as getRenderedTextOutput } from \"../../../core/tools/render-utils.ts\";\nimport { createAllToolRenderers } from \"../../../core/tools/renderers/index.ts\";\nimport { createCallFallback, FallbackResultComponent } from \"./fallback.ts\";\nimport { FramedComponent, toolMarkerColor, toolStatus, toolStyle } from \"./style.ts\";\n\nexport type ToolDefinitionLike = ToolRenderers | ToolDefinition<any, any, any>;\n\nlet builtInRenderers: ReturnType<typeof createAllToolRenderers> | undefined;\n\nfunction builtInResultRenderer(toolName: string): ToolRenderers[\"renderResult\"] {\n\tbuiltInRenderers ??= createAllToolRenderers();\n\treturn (builtInRenderers as Record<string, ToolRenderers>)[toolName]?.renderResult;\n}\n\n/**\n * Create the distribution's TUI chrome without changing a tool's call or result renderers.\n * The native component invokes these fallbacks only when the corresponding renderer slot is empty\n * or fails. HTML export never reads this object.\n */\nexport function createToolShell(toolName: string, definition: ToolDefinitionLike | undefined): ToolExecutionShell {\n\tconst resultRenderer = definition?.renderResult;\n\treturn {\n\t\tget gap() {\n\t\t\treturn toolStyle.gap;\n\t\t},\n\t\tframe(component: Component, kind: \"header\" | \"body\", context: ToolRenderContext): Component {\n\t\t\treturn new FramedComponent(component, kind, () => toolMarkerColor(toolStatus(context)));\n\t\t},\n\t\trenderCall(args, _theme, context) {\n\t\t\treturn createCallFallback(toolName, args, context.expanded);\n\t\t},\n\t\trenderResult(result, _options, _theme, context) {\n\t\t\tconst output = getRenderedTextOutput(result, context.showImages);\n\t\t\treturn output ? new FallbackResultComponent(output, context.expanded) : new Container();\n\t\t},\n\t\tshouldHideResult(context) {\n\t\t\tif (context.expanded || context.isError || !toolStyle.collapsed.headerOnly.has(toolName)) return false;\n\t\t\tconst builtIn = builtInResultRenderer(toolName);\n\t\t\t// Only fold the built-in result renderer. An extension that replaces it owns its collapsed view.\n\t\t\treturn builtIn !== undefined && builtIn === resultRenderer;\n\t\t},\n\t};\n}\n\n/**\n * Attach the distribution shell while preserving renderer identity and explicit shell ownership.\n * In particular, this does not set renderShell or wrap renderCall/renderResult, so HTML export and\n * other renderer resolvers continue to see the original functions.\n */\nexport function withToolShell(toolName: string, definition: ToolDefinitionLike | undefined): ToolDefinitionLike {\n\tif (definition?.renderShell === \"self\" || definition?.shell) return definition;\n\treturn { ...(definition ?? {}), shell: createToolShell(toolName, definition) };\n}\n"]}

package/dist/utils/path-identity.d.ts

@@ -1,12 +0,0 @@
-/** True when both paths resolve to the same location. */
-export declare function samePath(left: string | undefined, right: string): boolean;
-/** True when `child` is strictly inside `parent`. */
-export declare function isPathInside(parent: string, child: string): boolean;
-/** Keys of a path-keyed record that name `path`, including other spellings on Windows. */
-export declare function findPathKeys(record: Record<string, unknown>, path: string): string[];
-/**
- * Matcher for the user-global ~/.agents/skills directory. HOME and the account's home
- * directory can differ (for example under MSYS), so both count as the user's home.
- */
-export declare function userAgentsSkillsDirMatcher(): (dir: string) => boolean;
-//# sourceMappingURL=path-identity.d.ts.map

package/dist/utils/path-identity.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"path-identity.d.ts","sourceRoot":"","sources":["../../src/utils/path-identity.ts"],"names":[],"mappings":"AASA,yDAAyD;AACzD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAEzE;AAED,qDAAqD;AACrD,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAKnE;AA2BD,0FAA0F;AAC1F,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAGpF;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,IAAI,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CASrE"}

package/dist/utils/path-identity.js

@@ -1,63 +0,0 @@
-import { statSync } from "node:fs";
-import { homedir, userInfo } from "node:os";
-import { isAbsolute, join, relative, sep } from "node:path";
-import { canonicalizePath, resolvePath } from "./paths.js";
-// realpathSync keeps the caller's drive-letter case on Windows, so C:\repo and c:\repo
-// canonicalize to different strings for the same directory. relative() compares
-// case-insensitively on win32; stored keys also need a dev:ino comparison.
-/** True when both paths resolve to the same location. */
-export function samePath(left, right) {
-    return left !== undefined && relative(canonicalizePath(left), canonicalizePath(right)) === "";
-}
-/** True when `child` is strictly inside `parent`. */
-export function isPathInside(parent, child) {
-    const relativePath = relative(canonicalizePath(parent), canonicalizePath(child));
-    return (relativePath !== "" && relativePath !== ".." && !relativePath.startsWith(`..${sep}`) && !isAbsolute(relativePath));
-}
-function pathKey(value) {
-    const normalized = canonicalizePath(resolvePath(value));
-    return process.platform === "win32"
-        ? normalized.replace(/^([A-Z]):/, (_, drive) => `${drive.toLowerCase()}:`)
-        : normalized;
-}
-function fileIdentity(value) {
-    try {
-        const stats = statSync(value, { bigint: true });
-        return stats.ino === 0n ? undefined : `${stats.dev}:${stats.ino}`;
-    }
-    catch {
-        return undefined;
-    }
-}
-function referToSameLocation(left, right) {
-    const leftKey = pathKey(left);
-    const rightKey = pathKey(right);
-    if (leftKey === rightKey)
-        return true;
-    if (process.platform !== "win32")
-        return false;
-    const leftIdentity = fileIdentity(leftKey);
-    return leftIdentity !== undefined && leftIdentity === fileIdentity(rightKey);
-}
-/** Keys of a path-keyed record that name `path`, including other spellings on Windows. */
-export function findPathKeys(record, path) {
-    if (process.platform !== "win32")
-        return Object.hasOwn(record, path) ? [path] : [];
-    return Object.keys(record).filter((key) => referToSameLocation(key, path));
-}
-/**
- * Matcher for the user-global ~/.agents/skills directory. HOME and the account's home
- * directory can differ (for example under MSYS), so both count as the user's home.
- */
-export function userAgentsSkillsDirMatcher() {
-    const homes = [process.env.HOME || homedir()];
-    try {
-        homes.push(userInfo().homedir);
-    }
-    catch {
-        // Some restricted runtimes cannot query the operating-system account database.
-    }
-    const skillDirs = homes.map((home) => join(pathKey(home), ".agents", "skills"));
-    return (dir) => skillDirs.some((skillDir) => referToSameLocation(skillDir, dir));
-}
-//# sourceMappingURL=path-identity.js.map

package/dist/utils/path-identity.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"path-identity.js","sourceRoot":"","sources":["../../src/utils/path-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE3D,uFAAuF;AACvF,gFAAgF;AAChF,2EAA2E;AAE3E,yDAAyD;AACzD,MAAM,UAAU,QAAQ,CAAC,IAAwB,EAAE,KAAa;IAC/D,OAAO,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;AAC/F,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,KAAa;IACzD,MAAM,YAAY,GAAG,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;IACjF,OAAO,CACN,YAAY,KAAK,EAAE,IAAI,YAAY,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CACjH,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC7B,MAAM,UAAU,GAAG,gBAAgB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IACxD,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO;QAClC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,KAAa,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC;QAClF,CAAC,CAAC,UAAU,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IAClC,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAa;IACvD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAC3C,OAAO,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,YAAY,CAAC,QAAQ,CAAC,CAAC;AAC9E,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,YAAY,CAAC,MAA+B,EAAE,IAAY;IACzE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B;IACzC,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;IAC9C,IAAI,CAAC;QACJ,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACR,+EAA+E;IAChF,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;AAClF,CAAC","sourcesContent":["import { statSync } from \"node:fs\";\nimport { homedir, userInfo } from \"node:os\";\nimport { isAbsolute, join, relative, sep } from \"node:path\";\nimport { canonicalizePath, resolvePath } from \"./paths.ts\";\n\n// realpathSync keeps the caller's drive-letter case on Windows, so C:\\repo and c:\\repo\n// canonicalize to different strings for the same directory. relative() compares\n// case-insensitively on win32; stored keys also need a dev:ino comparison.\n\n/** True when both paths resolve to the same location. */\nexport function samePath(left: string | undefined, right: string): boolean {\n\treturn left !== undefined && relative(canonicalizePath(left), canonicalizePath(right)) === \"\";\n}\n\n/** True when `child` is strictly inside `parent`. */\nexport function isPathInside(parent: string, child: string): boolean {\n\tconst relativePath = relative(canonicalizePath(parent), canonicalizePath(child));\n\treturn (\n\t\trelativePath !== \"\" && relativePath !== \"..\" && !relativePath.startsWith(`..${sep}`) && !isAbsolute(relativePath)\n\t);\n}\n\nfunction pathKey(value: string): string {\n\tconst normalized = canonicalizePath(resolvePath(value));\n\treturn process.platform === \"win32\"\n\t\t? normalized.replace(/^([A-Z]):/, (_, drive: string) => `${drive.toLowerCase()}:`)\n\t\t: normalized;\n}\n\nfunction fileIdentity(value: string): string | undefined {\n\ttry {\n\t\tconst stats = statSync(value, { bigint: true });\n\t\treturn stats.ino === 0n ? undefined : `${stats.dev}:${stats.ino}`;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nfunction referToSameLocation(left: string, right: string): boolean {\n\tconst leftKey = pathKey(left);\n\tconst rightKey = pathKey(right);\n\tif (leftKey === rightKey) return true;\n\tif (process.platform !== \"win32\") return false;\n\tconst leftIdentity = fileIdentity(leftKey);\n\treturn leftIdentity !== undefined && leftIdentity === fileIdentity(rightKey);\n}\n\n/** Keys of a path-keyed record that name `path`, including other spellings on Windows. */\nexport function findPathKeys(record: Record<string, unknown>, path: string): string[] {\n\tif (process.platform !== \"win32\") return Object.hasOwn(record, path) ? [path] : [];\n\treturn Object.keys(record).filter((key) => referToSameLocation(key, path));\n}\n\n/**\n * Matcher for the user-global ~/.agents/skills directory. HOME and the account's home\n * directory can differ (for example under MSYS), so both count as the user's home.\n */\nexport function userAgentsSkillsDirMatcher(): (dir: string) => boolean {\n\tconst homes = [process.env.HOME || homedir()];\n\ttry {\n\t\thomes.push(userInfo().homedir);\n\t} catch {\n\t\t// Some restricted runtimes cannot query the operating-system account database.\n\t}\n\tconst skillDirs = homes.map((home) => join(pathKey(home), \".agents\", \"skills\"));\n\treturn (dir) => skillDirs.some((skillDir) => referToSameLocation(skillDir, dir));\n}\n"]}

package/examples/extensions/sandbox/index.ts

@@ -1,321 +0,0 @@
-/**
- * Sandbox Extension - OS-level sandboxing for bash commands
- *
- * Uses @anthropic-ai/sandbox-runtime to enforce filesystem and network
- * restrictions on bash commands at the OS level (sandbox-exec on macOS,
- * bubblewrap on Linux).
- *
- * Note: this example intentionally overrides the built-in `bash` tool to show
- * how built-in tools can be replaced. Alternatively, you could sandbox `bash`
- * via `tool_call` input mutation without replacing the tool.
- *
- * Config files (merged, project takes precedence):
- * - ~/.pi/agent/extensions/sandbox.json (global)
- * - <cwd>/.pi/sandbox.json (project-local)
- *
- * Example .pi/sandbox.json:
- * ```json
- * {
- *   "enabled": true,
- *   "network": {
- *     "allowedDomains": ["github.com", "*.github.com"],
- *     "deniedDomains": []
- *   },
- *   "filesystem": {
- *     "denyRead": ["~/.ssh", "~/.aws"],
- *     "allowWrite": [".", "/tmp"],
- *     "denyWrite": [".env"]
- *   }
- * }
- * ```
- *
- * Usage:
- * - `pi -e ./sandbox` - sandbox enabled with default/config settings
- * - `pi -e ./sandbox --no-sandbox` - disable sandboxing
- * - `/sandbox` - show current sandbox configuration
- *
- * Setup:
- * 1. Copy sandbox/ directory to ~/.pi/agent/extensions/
- * 2. Run `npm install` in ~/.pi/agent/extensions/sandbox/
- *
- * Linux also requires: bubblewrap, socat, ripgrep
- */
-
-import { spawn } from "node:child_process";
-import { existsSync, readFileSync } from "node:fs";
-import { join } from "node:path";
-import { SandboxManager, type SandboxRuntimeConfig } from "@anthropic-ai/sandbox-runtime";
-import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
-import { type BashOperations, CONFIG_DIR_NAME, createBashTool, getAgentDir } from "@earendil-works/pi-coding-agent";
-
-interface SandboxConfig extends SandboxRuntimeConfig {
-	enabled?: boolean;
-}
-
-const DEFAULT_CONFIG: SandboxConfig = {
-	enabled: true,
-	network: {
-		allowedDomains: [
-			"npmjs.org",
-			"*.npmjs.org",
-			"registry.npmjs.org",
-			"registry.yarnpkg.com",
-			"pypi.org",
-			"*.pypi.org",
-			"github.com",
-			"*.github.com",
-			"api.github.com",
-			"raw.githubusercontent.com",
-		],
-		deniedDomains: [],
-	},
-	filesystem: {
-		denyRead: ["~/.ssh", "~/.aws", "~/.gnupg"],
-		allowWrite: [".", "/tmp"],
-		denyWrite: [".env", ".env.*", "*.pem", "*.key"],
-	},
-};
-
-function loadConfig(cwd: string): SandboxConfig {
-	const projectConfigPath = join(cwd, CONFIG_DIR_NAME, "sandbox.json");
-	const globalConfigPath = join(getAgentDir(), "extensions", "sandbox.json");
-
-	let globalConfig: Partial<SandboxConfig> = {};
-	let projectConfig: Partial<SandboxConfig> = {};
-
-	if (existsSync(globalConfigPath)) {
-		try {
-			globalConfig = JSON.parse(readFileSync(globalConfigPath, "utf-8"));
-		} catch (e) {
-			console.error(`Warning: Could not parse ${globalConfigPath}: ${e}`);
-		}
-	}
-
-	if (existsSync(projectConfigPath)) {
-		try {
-			projectConfig = JSON.parse(readFileSync(projectConfigPath, "utf-8"));
-		} catch (e) {
-			console.error(`Warning: Could not parse ${projectConfigPath}: ${e}`);
-		}
-	}
-
-	return deepMerge(deepMerge(DEFAULT_CONFIG, globalConfig), projectConfig);
-}
-
-function deepMerge(base: SandboxConfig, overrides: Partial<SandboxConfig>): SandboxConfig {
-	const result: SandboxConfig = { ...base };
-
-	if (overrides.enabled !== undefined) result.enabled = overrides.enabled;
-	if (overrides.network) {
-		result.network = { ...base.network, ...overrides.network };
-	}
-	if (overrides.filesystem) {
-		result.filesystem = { ...base.filesystem, ...overrides.filesystem };
-	}
-
-	const extOverrides = overrides as {
-		ignoreViolations?: Record<string, string[]>;
-		enableWeakerNestedSandbox?: boolean;
-	};
-	const extResult = result as { ignoreViolations?: Record<string, string[]>; enableWeakerNestedSandbox?: boolean };
-
-	if (extOverrides.ignoreViolations) {
-		extResult.ignoreViolations = extOverrides.ignoreViolations;
-	}
-	if (extOverrides.enableWeakerNestedSandbox !== undefined) {
-		extResult.enableWeakerNestedSandbox = extOverrides.enableWeakerNestedSandbox;
-	}
-
-	return result;
-}
-
-function createSandboxedBashOps(): BashOperations {
-	return {
-		async exec(command, cwd, { onData, signal, timeout }) {
-			if (!existsSync(cwd)) {
-				throw new Error(`Working directory does not exist: ${cwd}`);
-			}
-
-			const wrappedCommand = await SandboxManager.wrapWithSandbox(command);
-
-			return new Promise((resolve, reject) => {
-				const child = spawn("bash", ["-c", wrappedCommand], {
-					cwd,
-					detached: true,
-					stdio: ["ignore", "pipe", "pipe"],
-				});
-
-				let timedOut = false;
-				let timeoutHandle: NodeJS.Timeout | undefined;
-
-				if (timeout !== undefined && timeout > 0) {
-					timeoutHandle = setTimeout(() => {
-						timedOut = true;
-						if (child.pid) {
-							try {
-								process.kill(-child.pid, "SIGKILL");
-							} catch {
-								child.kill("SIGKILL");
-							}
-						}
-					}, timeout * 1000);
-				}
-
-				child.stdout?.on("data", onData);
-				child.stderr?.on("data", onData);
-
-				child.on("error", (err) => {
-					if (timeoutHandle) clearTimeout(timeoutHandle);
-					reject(err);
-				});
-
-				const onAbort = () => {
-					if (child.pid) {
-						try {
-							process.kill(-child.pid, "SIGKILL");
-						} catch {
-							child.kill("SIGKILL");
-						}
-					}
-				};
-
-				signal?.addEventListener("abort", onAbort, { once: true });
-
-				child.on("close", (code) => {
-					if (timeoutHandle) clearTimeout(timeoutHandle);
-					signal?.removeEventListener("abort", onAbort);
-
-					if (signal?.aborted) {
-						reject(new Error("aborted"));
-					} else if (timedOut) {
-						reject(new Error(`timeout:${timeout}`));
-					} else {
-						resolve({ exitCode: code });
-					}
-				});
-			});
-		},
-	};
-}
-
-export default function (pi: ExtensionAPI) {
-	pi.registerFlag("no-sandbox", {
-		description: "Disable OS-level sandboxing for bash commands",
-		type: "boolean",
-		default: false,
-	});
-
-	const localCwd = process.cwd();
-	const localBash = createBashTool(localCwd);
-
-	let sandboxEnabled = false;
-	let sandboxInitialized = false;
-
-	pi.registerTool({
-		...localBash,
-		label: "bash (sandboxed)",
-		async execute(id, params, signal, onUpdate, _ctx) {
-			if (!sandboxEnabled || !sandboxInitialized) {
-				return localBash.execute(id, params, signal, onUpdate);
-			}
-
-			const sandboxedBash = createBashTool(localCwd, {
-				operations: createSandboxedBashOps(),
-			});
-			return sandboxedBash.execute(id, params, signal, onUpdate);
-		},
-	});
-
-	pi.on("user_bash", () => {
-		if (!sandboxEnabled || !sandboxInitialized) return;
-		return { operations: createSandboxedBashOps() };
-	});
-
-	pi.on("session_start", async (_event, ctx) => {
-		const noSandbox = pi.getFlag("no-sandbox") as boolean;
-
-		if (noSandbox) {
-			sandboxEnabled = false;
-			ctx.ui.notify("Sandbox disabled via --no-sandbox", "warning");
-			return;
-		}
-
-		const config = loadConfig(ctx.cwd);
-
-		if (!config.enabled) {
-			sandboxEnabled = false;
-			ctx.ui.notify("Sandbox disabled via config", "info");
-			return;
-		}
-
-		const platform = process.platform;
-		if (platform !== "darwin" && platform !== "linux") {
-			sandboxEnabled = false;
-			ctx.ui.notify(`Sandbox not supported on ${platform}`, "warning");
-			return;
-		}
-
-		try {
-			const configExt = config as unknown as {
-				ignoreViolations?: Record<string, string[]>;
-				enableWeakerNestedSandbox?: boolean;
-			};
-
-			await SandboxManager.initialize({
-				network: config.network,
-				filesystem: config.filesystem,
-				ignoreViolations: configExt.ignoreViolations,
-				enableWeakerNestedSandbox: configExt.enableWeakerNestedSandbox,
-			});
-
-			sandboxEnabled = true;
-			sandboxInitialized = true;
-
-			const networkCount = config.network?.allowedDomains?.length ?? 0;
-			const writeCount = config.filesystem?.allowWrite?.length ?? 0;
-			ctx.ui.setStatus(
-				"sandbox",
-				ctx.ui.theme.fg("accent", `🔒 Sandbox: ${networkCount} domains, ${writeCount} write paths`),
-			);
-			ctx.ui.notify("Sandbox initialized", "info");
-		} catch (err) {
-			sandboxEnabled = false;
-			ctx.ui.notify(`Sandbox initialization failed: ${err instanceof Error ? err.message : err}`, "error");
-		}
-	});
-
-	pi.on("session_shutdown", async () => {
-		if (sandboxInitialized) {
-			try {
-				await SandboxManager.reset();
-			} catch {
-				// Ignore cleanup errors
-			}
-		}
-	});
-
-	pi.registerCommand("sandbox", {
-		description: "Show sandbox configuration",
-		handler: async (_args, ctx) => {
-			if (!sandboxEnabled) {
-				ctx.ui.notify("Sandbox is disabled", "info");
-				return;
-			}
-
-			const config = loadConfig(ctx.cwd);
-			const lines = [
-				"Sandbox Configuration:",
-				"",
-				"Network:",
-				`  Allowed: ${config.network?.allowedDomains?.join(", ") || "(none)"}`,
-				`  Denied: ${config.network?.deniedDomains?.join(", ") || "(none)"}`,
-				"",
-				"Filesystem:",
-				`  Deny Read: ${config.filesystem?.denyRead?.join(", ") || "(none)"}`,
-				`  Allow Write: ${config.filesystem?.allowWrite?.join(", ") || "(none)"}`,
-				`  Deny Write: ${config.filesystem?.denyWrite?.join(", ") || "(none)"}`,
-			];
-			ctx.ui.notify(lines.join("\n"), "info");
-		},
-	});
-}

package/examples/extensions/sandbox/package-lock.json

@@ -1,92 +0,0 @@
-{
-	"name": "pi-extension-sandbox",
-	"version": "1.4.0",
-	"lockfileVersion": 3,
-	"requires": true,
-	"packages": {
-		"": {
-			"name": "pi-extension-sandbox",
-			"version": "1.4.0",
-			"dependencies": {
-				"@anthropic-ai/sandbox-runtime": "^0.0.26"
-			}
-		},
-		"node_modules/@anthropic-ai/sandbox-runtime": {
-			"version": "0.0.26",
-			"resolved": "https://registry.npmjs.org/@anthropic-ai/sandbox-runtime/-/sandbox-runtime-0.0.26.tgz",
-			"integrity": "sha512-DYV5LSsVMnzq0lbfaYMSpxZPUMAx4+hy343dRss+pVCLIfF62qOhxpYfZ5TmOk1GTDQm5f9wPprMNSStmnsV4w==",
-			"license": "Apache-2.0",
-			"dependencies": {
-				"@pondwader/socks5-server": "^1.0.10",
-				"@types/lodash-es": "^4.17.12",
-				"commander": "^12.1.0",
-				"lodash-es": "^4.17.21",
-				"shell-quote": "^1.8.3",
-				"zod": "^3.24.1"
-			},
-			"bin": {
-				"srt": "dist/cli.js"
-			},
-			"engines": {
-				"node": ">=18.0.0"
-			}
-		},
-		"node_modules/@pondwader/socks5-server": {
-			"version": "1.0.10",
-			"resolved": "https://registry.npmjs.org/@pondwader/socks5-server/-/socks5-server-1.0.10.tgz",
-			"integrity": "sha512-bQY06wzzR8D2+vVCUoBsr5QS2U6UgPUQRmErNwtsuI6vLcyRKkafjkr3KxbtGFf9aBBIV2mcvlsKD1UYaIV+sg==",
-			"license": "MIT"
-		},
-		"node_modules/@types/lodash": {
-			"version": "4.17.23",
-			"resolved": "https://registry.npmjs.org/@types/lodash/-/lodash-4.17.23.tgz",
-			"integrity": "sha512-RDvF6wTulMPjrNdCoYRC8gNR880JNGT8uB+REUpC2Ns4pRqQJhGz90wh7rgdXDPpCczF3VGktDuFGVnz8zP7HA==",
-			"license": "MIT"
-		},
-		"node_modules/@types/lodash-es": {
-			"version": "4.17.12",
-			"resolved": "https://registry.npmjs.org/@types/lodash-es/-/lodash-es-4.17.12.tgz",
-			"integrity": "sha512-0NgftHUcV4v34VhXm8QBSftKVXtbkBG3ViCjs6+eJ5a6y6Mi/jiFGPc1sC7QK+9BFhWrURE3EOggmWaSxL9OzQ==",
-			"license": "MIT",
-			"dependencies": {
-				"@types/lodash": "*"
-			}
-		},
-		"node_modules/commander": {
-			"version": "12.1.0",
-			"resolved": "https://registry.npmjs.org/commander/-/commander-12.1.0.tgz",
-			"integrity": "sha512-Vw8qHK3bZM9y/P10u3Vib8o/DdkvA2OtPtZvD871QKjy74Wj1WSKFILMPRPSdUSx5RFK1arlJzEtA4PkFgnbuA==",
-			"license": "MIT",
-			"engines": {
-				"node": ">=18"
-			}
-		},
-		"node_modules/lodash-es": {
-			"version": "4.18.1",
-			"resolved": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.18.1.tgz",
-			"integrity": "sha512-J8xewKD/Gk22OZbhpOVSwcs60zhd95ESDwezOFuA3/099925PdHJ7OFHNTGtajL3AlZkykD32HykiMo+BIBI8A==",
-			"license": "MIT"
-		},
-		"node_modules/shell-quote": {
-			"version": "1.8.3",
-			"resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.8.3.tgz",
-			"integrity": "sha512-ObmnIF4hXNg1BqhnHmgbDETF8dLPCggZWBjkQfhZpbszZnYur5DUljTcCHii5LC3J5E0yeO/1LIMyH+UvHQgyw==",
-			"license": "MIT",
-			"engines": {
-				"node": ">= 0.4"
-			},
-			"funding": {
-				"url": "https://github.com/sponsors/ljharb"
-			}
-		},
-		"node_modules/zod": {
-			"version": "3.25.76",
-			"resolved": "https://registry.npmjs.org/zod/-/zod-3.25.76.tgz",
-			"integrity": "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==",
-			"license": "MIT",
-			"funding": {
-				"url": "https://github.com/sponsors/colinhacks"
-			}
-		}
-	}
-}

package/examples/extensions/sandbox/package.json

@@ -1,19 +0,0 @@
-{
-	"name": "pi-extension-sandbox",
-	"private": true,
-	"version": "1.4.0",
-	"type": "module",
-	"scripts": {
-		"clean": "echo 'nothing to clean'",
-		"build": "echo 'nothing to build'",
-		"check": "echo 'nothing to check'"
-	},
-	"pi": {
-		"extensions": [
-			"./index.ts"
-		]
-	},
-	"dependencies": {
-		"@anthropic-ai/sandbox-runtime": "0.0.26"
-	}
-}