@erichll/pi-sandbox 0.18.2 → 0.19.0

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## 0.19.0 - 2026-09-20
+
+- Require Pi `^0.86.0` for both the development and peer dependency of
+  `@earendil-works/pi-coding-agent`, and depend on `@erichll/pi-auto-review`
+  `^0.19.0` so the pair shares the same Pi floor. The `pi-subagents` runtime
+  peer stays `>=0.66.0`.
+- Revalidated against Pi 0.86.0: the package test suite passes (88 pass, 1
+  skipped), the deterministic `gate:pi-subagents` preflight passes, and the
+  model-backed gate passes both phases (native baseline host-readable,
+  protected sandboxed Bash blocked from the host read) with native
+  acknowledgement `@erichll:pi-sandbox`.
+- Recorded the Pi 0.86.0 floor in `README.md`, `docs/compat-notes.md`, and the
+  `pi-subagents-native.ts` compatibility notes: protected mode with
+  pi-subagents 0.68.0+ needs Pi 0.86.0 or newer.
+
 ## 0.18.2 - 2026-09-20
 
 - Pin the development `pi-subagents` baseline to `^0.69.0` and Pi to

package/README.md

@@ -284,7 +284,7 @@ capability ceiling, and protected launch policy in an isolated temporary agent
 directory. It never reads or updates production Pi configuration. Model-backed
 acceptance requires `PI_SUBAGENTS_GATE_MODEL` and an already-exported matching
 credential; missing prerequisites are reported as `SKIP`. Protected mode with
-pi-subagents 0.68.0 or newer needs Pi 0.85.1 or newer.
+pi-subagents 0.68.0 or newer needs Pi 0.86.0 or newer.
 
 The test suite covers real Linux Sandbox Runtime enforcement when its native
 dependencies are installed, plus deterministic broker, network approval,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erichll/pi-sandbox",
-  "version": "0.18.2",
+  "version": "0.19.0",
   "description": "Linux (bubblewrap) and macOS (Seatbelt) process sandbox for Pi backed by Anthropic's @anthropic-ai/sandbox-runtime. Fail-closed static filesystem policy plus per-connection network approval from pi-auto-review; sandboxes main-agent Bash and built-in subagent process trees.",
   "type": "module",
   "license": "Apache-2.0",
@@ -51,11 +51,11 @@
   },
   "dependencies": {
     "@anthropic-ai/sandbox-runtime": "0.0.75",
-    "@erichll/pi-auto-review": "^0.18.0",
+    "@erichll/pi-auto-review": "^0.19.0",
     "jiti": "2.7.0"
   },
   "peerDependencies": {
-    "@earendil-works/pi-coding-agent": "^0.85.0",
+    "@earendil-works/pi-coding-agent": "^0.86.0",
     "pi-subagents": ">=0.66.0",
     "typebox": ">=1.0.0"
   },
@@ -65,8 +65,8 @@
     }
   },
   "devDependencies": {
-    "@earendil-works/pi-coding-agent": "^0.85.1",
-    "@earendil-works/pi-server": "^0.85.1",
+    "@earendil-works/pi-coding-agent": "^0.86.0",
+    "@earendil-works/pi-server": "^0.86.0",
     "@types/node": "^26.2.0",
     "pi-subagents": "^0.69.0",
     "typescript": "^6.0.3"

package/src/pi-subagents-native.ts

@@ -11,9 +11,9 @@ import { createJiti } from "jiti";
  * (`SUBAGENT_CAPABILITY_CEILING_VERSION` 1), the `./capability-ceiling` export
  * path, discovery/canonical resolution, and the config loader with
  * `scheduledRuns` are unchanged since 0.66.0 (verified 2026-09-19 against the
- * published 0.69.0 package). Protected mode needs Pi 0.85.1 or newer with
- * pi-subagents 0.68.0+: 0.85.0 does not ship `@earendil-works/pi-server`, so
- * background children fail to launch there.
+ * published 0.69.0 package). Protected mode needs Pi 0.86.0 or newer (the
+ * package peer floor) with pi-subagents 0.68.0+: 0.85.0 does not ship
+ * `@earendil-works/pi-server`, so background children fail to launch there.
  */
 export const PI_SUBAGENTS_COMPAT_RANGE = ">=0.66.0";
 export const NATIVE_CHILD_TOOLS = ["bash", "read", "grep", "find", "ls"] as const;