@erichll/pi-sandbox 0.16.0 → 0.17.1

package/CHANGELOG.md

@@ -1,5 +1,32 @@
 # Changelog
 
+## 0.17.1 - 2026-09-06
+
+- Move the `pi-subagents` compatibility floor to 0.66.0 for protected native
+  mode and drop the upper pin: new minors are accepted, and the real
+  compatibility gates remain the `./capability-ceiling` export check and the
+  capability-ceiling version check.
+- Revalidated the adapter against the published pi-subagents 0.66.0 package:
+  the ceiling registry (`SUBAGENT_CAPABILITY_CEILING_VERSION` 1),
+  `registerSubagentCapabilityCeiling` options and handle, agent discovery and
+  resolution, config loading with `scheduledRuns`, and the
+  `runtimeAcknowledgedExtensions` acknowledgement mechanism are unchanged.
+- Widen the `pi-subagents` peer and dev ranges to `>=0.66.0`. Protected mode
+  now requires pi-subagents 0.66.0 or newer; 0.65.x installs fail closed with
+  an explicit version error.
+
+## 0.17.0 - 2026-09-05
+
+- Depend on the coordinated `@erichll/pi-auto-review 0.17.0` release.
+- Accept the whole pi-subagents 0.65.x line for protected native mode instead
+  of pinning exactly 0.65.0: patch updates such as 0.65.1 (background session
+  and worktree-patch fixes) now load normally. Any minor or major bump still
+  fails closed, and the real compatibility gates remain the
+  `./capability-ceiling` export check and the capability-ceiling version
+  check, so the version range only guards against blind accept-on-drift.
+- Widen the `pi-subagents` peer range to `>=0.65.0 <0.66.0` and the dev pin
+  accordingly.
+
 ## 0.16.0 - 2026-09-05
 
 - Depend on the coordinated `@erichll/pi-auto-review 0.16.0` release.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erichll/pi-sandbox",
-  "version": "0.16.0",
+  "version": "0.17.1",
   "description": "Linux (bubblewrap) and macOS (Seatbelt) process sandbox for Pi backed by Anthropic's @anthropic-ai/sandbox-runtime. Fail-closed static filesystem policy plus per-connection network approval from pi-auto-review; sandboxes main-agent Bash and built-in subagent process trees.",
   "type": "module",
   "license": "Apache-2.0",
@@ -51,12 +51,12 @@
   },
   "dependencies": {
     "@anthropic-ai/sandbox-runtime": "0.0.75",
-    "@erichll/pi-auto-review": "0.16.0",
+    "@erichll/pi-auto-review": "0.17.0",
     "jiti": "2.7.0"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": "^0.85.0",
-    "pi-subagents": "0.65.0",
+    "pi-subagents": ">=0.66.0",
     "typebox": ">=1.0.0"
   },
   "peerDependenciesMeta": {
@@ -68,7 +68,7 @@
     "@earendil-works/pi-coding-agent": "^0.85.0",
     "@earendil-works/pi-server": "^0.85.0",
     "@types/node": "^26.2.0",
-    "pi-subagents": "0.65.0",
+    "pi-subagents": ">=0.66.0",
     "typescript": "^6.0.3"
   }
 }

package/src/pi-subagents-native.ts

@@ -3,7 +3,15 @@ import { dirname, join } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { createJiti } from "jiti";
 
-export const PI_SUBAGENTS_VERSION = "0.65.0";
+/**
+ * Compatible pi-subagents line: 0.66.0 and above (no upper pin). Any new minor
+ * is accepted, so the exports/ceiling checks below are the real compatibility
+ * gate; this range only rejects old lines and guards against blind
+ * accept-on-drift. Revalidated against 0.66.0: ceiling registry, discovery,
+ * and config internals unchanged (verified 2026-09-06 against the published
+ * 0.66.0 package).
+ */
+export const PI_SUBAGENTS_COMPAT_RANGE = ">=0.66.0";
 export const NATIVE_CHILD_TOOLS = ["bash", "read", "grep", "find", "ls"] as const;
 export const PI_SANDBOX_ACKNOWLEDGEMENT = "@erichll:pi-sandbox";
 
@@ -57,12 +65,23 @@ function requiredFunction(
   name: string,
 ): asserts value is (...args: never[]) => unknown {
   if (typeof value !== "function") {
-    throw new Error(`pi-subagents 0.65.0 compatibility failure: missing ${name}`);
+    throw new Error(`pi-subagents compatibility failure: missing ${name}`);
   }
 }
 
 /**
- * Load the public ceiling API and the exact 0.65.0 discovery/config internals.
+ * Accept only versions at or above PI_SUBAGENTS_COMPAT_RANGE (>= 0.66.0,
+ * including prerelease suffixes like 0.66.1-beta.1) without pulling in a
+ * semver runtime.
+ */
+export function isCompatiblePiSubagentsVersion(version: unknown): boolean {
+  if (typeof version !== "string") return false;
+  const match = /^(\d+)\.(\d+)\.(\d+)(?:[-+].*)?$/.exec(version);
+  if (!match) return false;
+  return Number(match[1] ?? "") === 0 && Number(match[2] ?? "") >= 66;
+}
+
+/** Load the public ceiling API and the discovery/config internals.
  * This intentionally fails closed on package version, export, or layout drift.
  */
 export async function loadPiSubagentsNativeRuntime(
@@ -73,14 +92,14 @@ export async function loadPiSubagentsNativeRuntime(
   const packageJson = JSON.parse(
     await readFile(join(root, "package.json"), "utf8"),
   ) as { version?: unknown; exports?: Record<string, unknown> };
-  if (packageJson.version !== PI_SUBAGENTS_VERSION) {
+  if (!isCompatiblePiSubagentsVersion(packageJson.version)) {
     throw new Error(
-      `pi-subagents protected mode requires exactly ${PI_SUBAGENTS_VERSION}; found ${String(packageJson.version)}`,
+      `pi-subagents protected mode requires ${PI_SUBAGENTS_COMPAT_RANGE}; found ${String(packageJson.version)}`,
     );
   }
   if (packageJson.exports?.["./capability-ceiling"] !== "./src/api/capability-ceiling.ts") {
     throw new Error(
-      "pi-subagents 0.65.0 compatibility failure: capability-ceiling export changed",
+      "pi-subagents compatibility failure: capability-ceiling export changed",
     );
   }
 
@@ -94,11 +113,11 @@ export async function loadPiSubagentsNativeRuntime(
     jiti.import(pathToFileURL(join(root, "src/extension/config.ts")).href) as Promise<ConfigModule>,
   ]).catch((error) => {
     throw new Error(
-      `pi-subagents 0.65.0 compatibility failure: ${error instanceof Error ? error.message : String(error)}`,
+      `pi-subagents compatibility failure: ${error instanceof Error ? error.message : String(error)}`,
     );
   });
   if (ceiling.SUBAGENT_CAPABILITY_CEILING_VERSION !== 1) {
-    throw new Error("pi-subagents 0.65.0 compatibility failure: unsupported capability ceiling version");
+    throw new Error("pi-subagents compatibility failure: unsupported capability ceiling version");
   }
   requiredFunction(ceiling.registerSubagentCapabilityCeiling, "registerSubagentCapabilityCeiling");
   requiredFunction(discovery.discoverAgents, "discoverAgents");
@@ -195,7 +214,7 @@ export function nativeSubagentCallBlockReason(
   }
   const isDirect = typeof input.agent === "string" && input.agent.trim() !== "";
   if (input.workflowScript !== undefined || input.workflowScriptPath !== undefined) {
-    return "workflowScript and workflowScriptPath are disabled because pi-subagents 0.65.0 disables ambient extensions for their native children";
+    return "workflowScript and workflowScriptPath are disabled because pi-subagents disables ambient extensions for their native children";
   }
   if (!isDirect) {
     return "protected mode supports only direct agent launches";