@erichll/pi-sandbox 0.19.1 → 0.20.0

package/CHANGELOG.md

@@ -1,5 +1,29 @@
 # Changelog
 
+## 0.20.0 - 2026-09-23
+
+- Require Pi `^0.87.1` (development and peer) for `@earendil-works/
+  pi-coding-agent`, and upgrade the development `@earendil-works/pi-ai` and
+  `@earendil-works/pi-server` baselines to 0.87.1 (validated against the
+  published packages; type surface unchanged from 0.86.x).
+- Pin the development `pi-subagents` baseline to `^0.71.0`; the runtime peer
+  stays `>=0.66.0`. Revalidated protected native mode against published
+  0.71.0: the ceiling implementation (`SUBAGENT_CAPABILITY_CEILING_VERSION` 1)
+  and the config loader are byte-identical to 0.70.0, and `discoverAgents` /
+  `resolveAgentName` keep their signatures (the new `applyRuntimeAgentSettings`
+  and `completionGuard` removal do not touch validated agent fields). The
+  package test suite passes (89 pass, 1 skipped) and the deterministic
+  `gate:pi-subagents` preflight passes with `piSubagentsModuleExtension
+  ".js"`; the model-backed gate phase was skipped locally for lack of a
+  model credential.
+- Upgrade `@anthropic-ai/sandbox-runtime` from the exact `0.0.75` pin to
+  `^0.0.77` (adds `LinuxSandboxProfileError` exports and an `address` module;
+  `NetworkConfigSchema` surface unchanged).
+- Move the development `typebox` to `^1.3.34` (peer stays `>=1.0.0`).
+- Type checking and the full test suite pass on Pi 0.87.1; the development
+  `typescript` stays 6.0.3 (TS7 was evaluated and rejected, see the
+  pi-auto-review 0.20.0 notes).
+
 ## 0.19.1 - 2026-09-20
 
 - Pin the development `pi-subagents` baseline to `^0.70.0`. The runtime peer

package/README.md

@@ -97,7 +97,7 @@ Supported modes:
 ### `pi-subagents` native-background tool boundary
 
 This provider supports the `pi-subagents >=0.66.0` line (validated through
-0.70.0) and fails closed if its public ceiling API, module layout, or internal
+0.71.0) and fails closed if its public ceiling API, module layout, or internal
 discovery layout drifts. The peer dependency is a floor with no upper pin; the
 loader's explicit export and layout checks are the real gate.
 Configure both the protection mode and a non-empty canonical whitelist:
@@ -284,7 +284,8 @@ capability ceiling, and protected launch policy in an isolated temporary agent
 directory. It never reads or updates production Pi configuration. Model-backed
 acceptance requires `PI_SUBAGENTS_GATE_MODEL` and an already-exported matching
 credential; missing prerequisites are reported as `SKIP`. Protected mode with
-pi-subagents 0.68.0 or newer needs Pi 0.86.0 or newer.
+pi-subagents 0.68.0 or newer needs Pi 0.86.0 or newer. The development
+baseline is validated against Pi 0.87.1.
 
 The test suite covers real Linux Sandbox Runtime enforcement when its native
 dependencies are installed, plus deterministic broker, network approval,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erichll/pi-sandbox",
-  "version": "0.19.1",
+  "version": "0.20.0",
   "description": "Linux (bubblewrap) and macOS (Seatbelt) process sandbox for Pi backed by Anthropic's @anthropic-ai/sandbox-runtime. Fail-closed static filesystem policy plus per-connection network approval from pi-auto-review; sandboxes main-agent Bash and built-in subagent process trees.",
   "type": "module",
   "license": "Apache-2.0",
@@ -50,12 +50,11 @@
     "test": "node --experimental-strip-types --test test/*.test.ts"
   },
   "dependencies": {
-    "@anthropic-ai/sandbox-runtime": "0.0.75",
-    "@erichll/pi-auto-review": "^0.19.0",
+    "@erichll/pi-auto-review": "^0.20.0",
     "jiti": "2.7.0"
   },
   "peerDependencies": {
-    "@earendil-works/pi-coding-agent": "^0.86.0",
+    "@earendil-works/pi-coding-agent": "^0.87.1",
     "pi-subagents": ">=0.66.0",
     "typebox": ">=1.0.0"
   },
@@ -65,10 +64,13 @@
     }
   },
   "devDependencies": {
-    "@earendil-works/pi-coding-agent": "^0.86.0",
-    "@earendil-works/pi-server": "^0.86.0",
+    "@anthropic-ai/sandbox-runtime": "^0.0.77",
+    "@earendil-works/pi-ai": "^0.87.1",
+    "@earendil-works/pi-coding-agent": "^0.87.1",
+    "@earendil-works/pi-server": "^0.87.1",
     "@types/node": "^26.2.0",
-    "pi-subagents": "^0.70.0",
+    "pi-subagents": "^0.71.0",
+    "typebox": "^1.3.34",
     "typescript": "^6.0.3"
   }
 }

package/src/pi-subagents-native.ts

@@ -11,11 +11,14 @@ import { createJiti } from "jiti";
  * (`SUBAGENT_CAPABILITY_CEILING_VERSION` 1), the `./capability-ceiling` export,
  * discovery/canonical resolution, and the config loader with `scheduledRuns`
  * are unchanged since 0.66.0, and the published package now ships compiled
- * `.js`/`.d.ts` modules instead of the TypeScript source layout (verified
- * 2026-09-20 against the published 0.70.0 package). Protected mode needs Pi
- * 0.86.0 or newer (the package peer floor) with pi-subagents 0.68.0+: 0.85.0
- * does not ship `@earendil-works/pi-server`, so background children fail to
- * launch there.
+ * `.js`/`.d.ts` modules instead of the TypeScript source layout (revalidated
+ * 2026-09-23 against the published 0.71.0 package: the ceiling implementation
+ * and the config loader are byte-identical to 0.70.0, `discoverAgents` and
+ * `resolveAgentName` keep their signatures, and the `./capability-ceiling`
+ * export still resolves to `.js`). Protected mode needs Pi 0.86.0 or newer
+ * (the pi-subagents 0.68.0+ floor): 0.85.0 does not ship
+ * `@earendil-works/pi-server`, so background children fail to launch there.
+ * This package's own peer floor is Pi 0.87.1 (validated 2026-09-23).
  */
 export const PI_SUBAGENTS_COMPAT_RANGE = ">=0.66.0";
 export const NATIVE_CHILD_TOOLS = ["bash", "read", "grep", "find", "ls"] as const;