@erichll/pi-sandbox 0.17.0 → 0.17.1

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## 0.17.1 - 2026-09-06
+
+- Move the `pi-subagents` compatibility floor to 0.66.0 for protected native
+  mode and drop the upper pin: new minors are accepted, and the real
+  compatibility gates remain the `./capability-ceiling` export check and the
+  capability-ceiling version check.
+- Revalidated the adapter against the published pi-subagents 0.66.0 package:
+  the ceiling registry (`SUBAGENT_CAPABILITY_CEILING_VERSION` 1),
+  `registerSubagentCapabilityCeiling` options and handle, agent discovery and
+  resolution, config loading with `scheduledRuns`, and the
+  `runtimeAcknowledgedExtensions` acknowledgement mechanism are unchanged.
+- Widen the `pi-subagents` peer and dev ranges to `>=0.66.0`. Protected mode
+  now requires pi-subagents 0.66.0 or newer; 0.65.x installs fail closed with
+  an explicit version error.
+
 ## 0.17.0 - 2026-09-05
 
 - Depend on the coordinated `@erichll/pi-auto-review 0.17.0` release.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erichll/pi-sandbox",
-  "version": "0.17.0",
+  "version": "0.17.1",
   "description": "Linux (bubblewrap) and macOS (Seatbelt) process sandbox for Pi backed by Anthropic's @anthropic-ai/sandbox-runtime. Fail-closed static filesystem policy plus per-connection network approval from pi-auto-review; sandboxes main-agent Bash and built-in subagent process trees.",
   "type": "module",
   "license": "Apache-2.0",
@@ -56,7 +56,7 @@
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": "^0.85.0",
-    "pi-subagents": ">=0.65.0 <0.66.0",
+    "pi-subagents": ">=0.66.0",
     "typebox": ">=1.0.0"
   },
   "peerDependenciesMeta": {
@@ -68,7 +68,7 @@
     "@earendil-works/pi-coding-agent": "^0.85.0",
     "@earendil-works/pi-server": "^0.85.0",
     "@types/node": "^26.2.0",
-    "pi-subagents": ">=0.65.0 <0.66.0",
+    "pi-subagents": ">=0.66.0",
     "typescript": "^6.0.3"
   }
 }

package/src/pi-subagents-native.ts

@@ -4,12 +4,14 @@ import { fileURLToPath, pathToFileURL } from "node:url";
 import { createJiti } from "jiti";
 
 /**
- * Compatible pi-subagents line: 0.65.x. Patch updates (e.g. 0.65.1) are accepted;
- * any minor or major bump fails closed until this adapter is revalidated against
- * the new internal layout. The exports/ceiling checks below are the real
- * compatibility gate; this range only guards against blind accept-on-drift.
+ * Compatible pi-subagents line: 0.66.0 and above (no upper pin). Any new minor
+ * is accepted, so the exports/ceiling checks below are the real compatibility
+ * gate; this range only rejects old lines and guards against blind
+ * accept-on-drift. Revalidated against 0.66.0: ceiling registry, discovery,
+ * and config internals unchanged (verified 2026-09-06 against the published
+ * 0.66.0 package).
  */
-export const PI_SUBAGENTS_COMPAT_RANGE = ">=0.65.0 <0.66.0";
+export const PI_SUBAGENTS_COMPAT_RANGE = ">=0.66.0";
 export const NATIVE_CHILD_TOOLS = ["bash", "read", "grep", "find", "ls"] as const;
 export const PI_SANDBOX_ACKNOWLEDGEMENT = "@erichll:pi-sandbox";
 
@@ -63,22 +65,23 @@ function requiredFunction(
   name: string,
 ): asserts value is (...args: never[]) => unknown {
   if (typeof value !== "function") {
-    throw new Error(`pi-subagents 0.65.x compatibility failure: missing ${name}`);
+    throw new Error(`pi-subagents compatibility failure: missing ${name}`);
   }
 }
 
 /**
- * Accept only versions inside PI_SUBAGENTS_COMPAT_RANGE (0.65.x, including
- * prerelease suffixes like 0.65.2-beta.1) without pulling in a semver runtime.
+ * Accept only versions at or above PI_SUBAGENTS_COMPAT_RANGE (>= 0.66.0,
+ * including prerelease suffixes like 0.66.1-beta.1) without pulling in a
+ * semver runtime.
  */
 export function isCompatiblePiSubagentsVersion(version: unknown): boolean {
   if (typeof version !== "string") return false;
   const match = /^(\d+)\.(\d+)\.(\d+)(?:[-+].*)?$/.exec(version);
   if (!match) return false;
-  return Number(match[1] ?? "") === 0 && Number(match[2] ?? "") === 65;
+  return Number(match[1] ?? "") === 0 && Number(match[2] ?? "") >= 66;
 }
 
-/** Load the public ceiling API and the 0.65.x discovery/config internals.
+/** Load the public ceiling API and the discovery/config internals.
  * This intentionally fails closed on package version, export, or layout drift.
  */
 export async function loadPiSubagentsNativeRuntime(
@@ -96,7 +99,7 @@ export async function loadPiSubagentsNativeRuntime(
   }
   if (packageJson.exports?.["./capability-ceiling"] !== "./src/api/capability-ceiling.ts") {
     throw new Error(
-      "pi-subagents 0.65.x compatibility failure: capability-ceiling export changed",
+      "pi-subagents compatibility failure: capability-ceiling export changed",
     );
   }
 
@@ -110,11 +113,11 @@ export async function loadPiSubagentsNativeRuntime(
     jiti.import(pathToFileURL(join(root, "src/extension/config.ts")).href) as Promise<ConfigModule>,
   ]).catch((error) => {
     throw new Error(
-      `pi-subagents 0.65.x compatibility failure: ${error instanceof Error ? error.message : String(error)}`,
+      `pi-subagents compatibility failure: ${error instanceof Error ? error.message : String(error)}`,
     );
   });
   if (ceiling.SUBAGENT_CAPABILITY_CEILING_VERSION !== 1) {
-    throw new Error("pi-subagents 0.65.x compatibility failure: unsupported capability ceiling version");
+    throw new Error("pi-subagents compatibility failure: unsupported capability ceiling version");
   }
   requiredFunction(ceiling.registerSubagentCapabilityCeiling, "registerSubagentCapabilityCeiling");
   requiredFunction(discovery.discoverAgents, "discoverAgents");
@@ -211,7 +214,7 @@ export function nativeSubagentCallBlockReason(
   }
   const isDirect = typeof input.agent === "string" && input.agent.trim() !== "";
   if (input.workflowScript !== undefined || input.workflowScriptPath !== undefined) {
-    return "workflowScript and workflowScriptPath are disabled because pi-subagents 0.65.x disables ambient extensions for their native children";
+    return "workflowScript and workflowScriptPath are disabled because pi-subagents disables ambient extensions for their native children";
   }
   if (!isDirect) {
     return "protected mode supports only direct agent launches";