@cr1ms0n/pi-subagent 0.8.6 → 0.8.7

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## Unreleased
+
+## 0.8.7 — 2026-09-14
+
+### Provider-safe tool schemas
+
+- Strip internal TypeBox `~...` metadata from the `subagent` and `subagent_wait` schemas before Pi provider adapters receive them, while retaining the original schemas for local runtime validation.
+
 ## 0.8.6 — 2026-09-14
 
 ### Pi context management in child profiles

package/docs/ARCHITECTURE.md

@@ -29,7 +29,7 @@
 - `persistence.ts`: versioned active-branch event folding and bounded child transcript metadata.
 - `maintenance.ts`: filesystem GC (session files) and abort-race helpers; kept out of persistence.
 - `usage.ts`: provider-reported root/subagent/combined accounting.
-- `policy.ts` / `schema.ts`: discriminated request validation and safe capability profiles. Pi context-management control-plane tools remain available to child allowlists without granting project-file write access.
+- `policy.ts` / `schema.ts`: discriminated request validation and safe capability profiles. `schema.ts` retains the canonical TypeBox validators and derives provider-safe tool-schema projections; `extension.ts` registers those projections while validating calls with the originals. Pi context-management control-plane tools remain available to child allowlists without granting project-file write access.
 - `config.ts`: defaults ← `~/.pi/subagent.json` ← `PI_SUBAGENT_*` env overrides.
 - `structured.ts`: structured-output contract (dependency-free JSON-Schema subset
   validation, fenced json:result extraction, contract/repair prompts) and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cr1ms0n/pi-subagent",
-  "version": "0.8.6",
+  "version": "0.8.7",
   "description": "Community fork of Luke Parke's pi-subagent with explicit model policy and model visibility for Pi",
   "type": "module",
   "license": "MIT",

package/src/extension.ts

@@ -28,7 +28,14 @@ import { CONTEXT_MANAGEMENT_TOOLS, parseDepth, parseSpawnPolicy, SPAWNS_ENV_VAR,
 import type { ChildRunner } from "./runner.js";
 import { ProcessLockManager } from "./process-lock.js";
 import { SessionScopedRunRegistry, snapshotFromLiveRun } from "./registry.js";
-import { SubagentParamsSchema, SubagentWaitParamsSchema, type SubagentParams, type SubagentWaitParams } from "./schema.js";
+import {
+  ProviderSubagentParamsSchema,
+  ProviderSubagentWaitParamsSchema,
+  SubagentParamsSchema,
+  SubagentWaitParamsSchema,
+  type SubagentParams,
+  type SubagentWaitParams,
+} from "./schema.js";
 import { BTW_ENTRY_TYPE, btwLabel, type BtwEntry } from "./btw.js";
 import { Semaphore } from "./semaphore.js";
 import type { RunSnapshot, TaskResult, TaskSpec, UsageStats } from "./types.js";
@@ -944,7 +951,7 @@ export default function registerSubagent(pi: ExtensionAPI): void {
     // usable immediately via agent:'name' (execute-time refresh); only the
     // system-prompt advertisement waits for the next session.
     promptGuidelines: guidelines(discoverAgents(process.cwd())),
-    parameters: SubagentParamsSchema,
+    parameters: ProviderSubagentParamsSchema,
     async execute(_id, params: SubagentParams, signal, onUpdate, ctx) {
       // `subagent_wait` delegates here with a synthesized action:"wait" params
       // object, carrying its timeout through this non-schema field so the two
@@ -1507,7 +1514,7 @@ export default function registerSubagent(pi: ExtensionAPI): void {
     label: "Subagent wait",
     description:
       "Block until a background subagent run (async:true) settles, then deliver its output. Equivalent to subagent { action: 'wait', id }. Aborting or timing out leaves the run alive and collectable; use subagent { action: 'cancel' } to stop it.",
-    parameters: SubagentWaitParamsSchema,
+    parameters: ProviderSubagentWaitParamsSchema,
     async execute(id, params: SubagentWaitParams, signal, onUpdate, ctx) {
       return subagentTool.execute(
         id,

package/src/schema.ts

@@ -1,5 +1,27 @@
 import { Type, type Static } from "typebox";
 
+/**
+ * Remove TypeBox's internal compositor metadata before a schema crosses into
+ * Pi's provider-facing tool catalog. The original schema is kept intact for
+ * local Value.Check/Value.Errors validation.
+ */
+export function sanitizeProviderSchema<T>(value: T): T {
+  if (Array.isArray(value)) {
+    return value.map((item) => sanitizeProviderSchema(item)) as T;
+  }
+
+  if (value && typeof value === "object") {
+    const record = value as Record<string, unknown>;
+    return Object.fromEntries(
+      Object.entries(record)
+        .filter(([key]) => !key.startsWith("~"))
+        .map(([key, entry]) => [key, sanitizeProviderSchema(entry)] as const),
+    ) as T;
+  }
+
+  return value;
+}
+
 const ThinkingLevel = Type.String({
   minLength: 1,
   maxLength: 64,
@@ -29,7 +51,7 @@ export const TaskFields = {
   system_prompt: Type.Optional(Type.String({ description: "Extra system prompt appended to the child's prompt (does not replace it)." })),
   model: Type.Optional(Type.String({ description: "**REQUIRED for every spawn call (task/tasks).** Exact model id from modelPolicy, in provider/model-id form. Calls without an explicit model are rejected; agent-file model, taskDefaults, and parent-session inheritance are ignored. Management actions (status/wait/cancel/steer/diff/apply/discard) do not need it." })),
   thinking: Type.Optional({ ...ThinkingLevel, description: "Opaque Pi thinking level for the child. Values such as max are passed through unchanged; Pi/model support decides validity. Defaults to agent thinking, profile taskDefaults.thinking, modelPolicy route thinking, then the parent's level." }),
-  tools: Type.Optional(Type.Array(Type.String({ minLength: 1 }), { description: "Optional tool allowlist. explore/review profiles reject project-writing tools; Pi context-management tools remain available for context continuity." })),
+  tools: Type.Optional(Type.Array(Type.String(), { description: "Optional tool allowlist. explore/review profiles reject project-writing tools; Pi context-management tools remain available for context continuity." })),
   profile: Type.Optional({ ...Profile, description: "Capability profile: explore/review cannot write project files but retain Pi context-management tools; general inherits the parent's active tools and may write." }),
   cwd: Type.Optional(Type.String({ description: "Working directory for the child process." })),
   timeout_ms: Type.Optional(Type.Number({ minimum: 1, maximum: 24 * 60 * 60_000, description: "Total budget in milliseconds including queue time. Timed-out runs report which phase timed out." })),
@@ -152,6 +174,10 @@ export const SubagentWaitParamsSchema = Type.Object(
   },
 );
 
+/** Provider-facing projections without TypeBox's internal `~...` metadata. */
+export const ProviderSubagentParamsSchema = sanitizeProviderSchema(SubagentParamsSchema);
+export const ProviderSubagentWaitParamsSchema = sanitizeProviderSchema(SubagentWaitParamsSchema);
+
 export type SubagentWaitParams = Static<typeof SubagentWaitParamsSchema>;
 
 /** Runtime guard used by tests/docs to assert provider compatibility. */