@erichll/pi-sandbox 0.16.0 → 0.17.0

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.17.0 - 2026-09-05
+
+- Depend on the coordinated `@erichll/pi-auto-review 0.17.0` release.
+- Accept the whole pi-subagents 0.65.x line for protected native mode instead
+  of pinning exactly 0.65.0: patch updates such as 0.65.1 (background session
+  and worktree-patch fixes) now load normally. Any minor or major bump still
+  fails closed, and the real compatibility gates remain the
+  `./capability-ceiling` export check and the capability-ceiling version
+  check, so the version range only guards against blind accept-on-drift.
+- Widen the `pi-subagents` peer range to `>=0.65.0 <0.66.0` and the dev pin
+  accordingly.
+
 ## 0.16.0 - 2026-09-05
 
 - Depend on the coordinated `@erichll/pi-auto-review 0.16.0` release.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erichll/pi-sandbox",
-  "version": "0.16.0",
+  "version": "0.17.0",
   "description": "Linux (bubblewrap) and macOS (Seatbelt) process sandbox for Pi backed by Anthropic's @anthropic-ai/sandbox-runtime. Fail-closed static filesystem policy plus per-connection network approval from pi-auto-review; sandboxes main-agent Bash and built-in subagent process trees.",
   "type": "module",
   "license": "Apache-2.0",
@@ -51,12 +51,12 @@
   },
   "dependencies": {
     "@anthropic-ai/sandbox-runtime": "0.0.75",
-    "@erichll/pi-auto-review": "0.16.0",
+    "@erichll/pi-auto-review": "0.17.0",
     "jiti": "2.7.0"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": "^0.85.0",
-    "pi-subagents": "0.65.0",
+    "pi-subagents": ">=0.65.0 <0.66.0",
     "typebox": ">=1.0.0"
   },
   "peerDependenciesMeta": {
@@ -68,7 +68,7 @@
     "@earendil-works/pi-coding-agent": "^0.85.0",
     "@earendil-works/pi-server": "^0.85.0",
     "@types/node": "^26.2.0",
-    "pi-subagents": "0.65.0",
+    "pi-subagents": ">=0.65.0 <0.66.0",
     "typescript": "^6.0.3"
   }
 }

package/src/pi-subagents-native.ts

@@ -3,7 +3,13 @@ import { dirname, join } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { createJiti } from "jiti";
 
-export const PI_SUBAGENTS_VERSION = "0.65.0";
+/**
+ * Compatible pi-subagents line: 0.65.x. Patch updates (e.g. 0.65.1) are accepted;
+ * any minor or major bump fails closed until this adapter is revalidated against
+ * the new internal layout. The exports/ceiling checks below are the real
+ * compatibility gate; this range only guards against blind accept-on-drift.
+ */
+export const PI_SUBAGENTS_COMPAT_RANGE = ">=0.65.0 <0.66.0";
 export const NATIVE_CHILD_TOOLS = ["bash", "read", "grep", "find", "ls"] as const;
 export const PI_SANDBOX_ACKNOWLEDGEMENT = "@erichll:pi-sandbox";
 
@@ -57,12 +63,22 @@ function requiredFunction(
   name: string,
 ): asserts value is (...args: never[]) => unknown {
   if (typeof value !== "function") {
-    throw new Error(`pi-subagents 0.65.0 compatibility failure: missing ${name}`);
+    throw new Error(`pi-subagents 0.65.x compatibility failure: missing ${name}`);
   }
 }
 
 /**
- * Load the public ceiling API and the exact 0.65.0 discovery/config internals.
+ * Accept only versions inside PI_SUBAGENTS_COMPAT_RANGE (0.65.x, including
+ * prerelease suffixes like 0.65.2-beta.1) without pulling in a semver runtime.
+ */
+export function isCompatiblePiSubagentsVersion(version: unknown): boolean {
+  if (typeof version !== "string") return false;
+  const match = /^(\d+)\.(\d+)\.(\d+)(?:[-+].*)?$/.exec(version);
+  if (!match) return false;
+  return Number(match[1] ?? "") === 0 && Number(match[2] ?? "") === 65;
+}
+
+/** Load the public ceiling API and the 0.65.x discovery/config internals.
  * This intentionally fails closed on package version, export, or layout drift.
  */
 export async function loadPiSubagentsNativeRuntime(
@@ -73,14 +89,14 @@ export async function loadPiSubagentsNativeRuntime(
   const packageJson = JSON.parse(
     await readFile(join(root, "package.json"), "utf8"),
   ) as { version?: unknown; exports?: Record<string, unknown> };
-  if (packageJson.version !== PI_SUBAGENTS_VERSION) {
+  if (!isCompatiblePiSubagentsVersion(packageJson.version)) {
     throw new Error(
-      `pi-subagents protected mode requires exactly ${PI_SUBAGENTS_VERSION}; found ${String(packageJson.version)}`,
+      `pi-subagents protected mode requires ${PI_SUBAGENTS_COMPAT_RANGE}; found ${String(packageJson.version)}`,
     );
   }
   if (packageJson.exports?.["./capability-ceiling"] !== "./src/api/capability-ceiling.ts") {
     throw new Error(
-      "pi-subagents 0.65.0 compatibility failure: capability-ceiling export changed",
+      "pi-subagents 0.65.x compatibility failure: capability-ceiling export changed",
     );
   }
 
@@ -94,11 +110,11 @@ export async function loadPiSubagentsNativeRuntime(
     jiti.import(pathToFileURL(join(root, "src/extension/config.ts")).href) as Promise<ConfigModule>,
   ]).catch((error) => {
     throw new Error(
-      `pi-subagents 0.65.0 compatibility failure: ${error instanceof Error ? error.message : String(error)}`,
+      `pi-subagents 0.65.x compatibility failure: ${error instanceof Error ? error.message : String(error)}`,
     );
   });
   if (ceiling.SUBAGENT_CAPABILITY_CEILING_VERSION !== 1) {
-    throw new Error("pi-subagents 0.65.0 compatibility failure: unsupported capability ceiling version");
+    throw new Error("pi-subagents 0.65.x compatibility failure: unsupported capability ceiling version");
   }
   requiredFunction(ceiling.registerSubagentCapabilityCeiling, "registerSubagentCapabilityCeiling");
   requiredFunction(discovery.discoverAgents, "discoverAgents");
@@ -195,7 +211,7 @@ export function nativeSubagentCallBlockReason(
   }
   const isDirect = typeof input.agent === "string" && input.agent.trim() !== "";
   if (input.workflowScript !== undefined || input.workflowScriptPath !== undefined) {
-    return "workflowScript and workflowScriptPath are disabled because pi-subagents 0.65.0 disables ambient extensions for their native children";
+    return "workflowScript and workflowScriptPath are disabled because pi-subagents 0.65.x disables ambient extensions for their native children";
   }
   if (!isDirect) {
     return "protected mode supports only direct agent launches";