@erichll/pi-sandbox 0.21.1 → 0.22.0

package/CHANGELOG.md

@@ -1,5 +1,29 @@
 # Changelog
 
+## 0.22.0 - 2026-09-30
+
+- Raise the `@earendil-works/pi-coding-agent` peer floor to `^0.99.1` and the
+  development baseline to `^0.99.1`. Validated against Pi 0.99.1 with
+  `tsc --noEmit` and the test suite (92 pass, 1 macOS-only skip); the shipped
+  `src/` uses no API that changed between 0.87 and 0.99.
+- Adapt two test fixtures to the 0.99 extension surface: `ToolInfo` now requires
+  `exposure`, and tool handlers receive `ExtensionToolContext` (`tools`,
+  `executeTool`). The shipped extension uses neither field, so runtime behavior
+  is unchanged.
+- Raise the `pi-subagents` development dependency to `^0.72.1` and revalidate
+  the native-background loader against the published 0.72.1 package:
+  `discoverAgents` and `resolveAgentName` keep their signatures,
+  `src/agents/agents` only gains an optional `options.globalNpmRoot` argument,
+  `typebox` moved from a hard dependency to an optional host peer, and the
+  `./capability-ceiling` export still resolves to `.js`.
+- Depend on `@erichll/pi-auto-review` `^0.22.0`.
+- Document the three-way `subagents.provider` choice (`builtin` / `off` /
+  `pi-subagents`) with copy-ready example configs, including the duplicate
+  `subagent` tool that makes `builtin` unavailable whenever the pi-subagents
+  extension is loaded, and the scheduled-runs-disabled pi-subagents config that
+  protected mode requires.
+- Bump the development `typescript` baseline to `^7.0.2`.
+
 ## 0.21.1 - 2026-09-26
 
 - Alias `@earendil-works/pi-tui` for the `jiti` instance that loads the

package/README.md

@@ -92,7 +92,7 @@ Supported modes:
 ### `pi-subagents` native-background tool boundary
 
 This provider supports the `pi-subagents >=0.66.0` line (validated through
-0.71.0) and fails closed if its public ceiling API, module layout, or internal
+0.72.1) and fails closed if its public ceiling API, module layout, or internal
 discovery layout drifts. The peer dependency is a floor with no upper pin; the
 loader's explicit export and layout checks are the real gate. The loader also
 aliases `@earendil-works/pi-tui`, a host peer that the `pi-subagents` internals
@@ -296,7 +296,7 @@ directory. It never reads or updates production Pi configuration. Model-backed
 acceptance requires `PI_SUBAGENTS_GATE_MODEL` and an already-exported matching
 credential; missing prerequisites are reported as `SKIP`. Protected mode with
 pi-subagents 0.68.0 or newer needs Pi 0.86.0 or newer. The development
-baseline is validated against Pi 0.87.1.
+baseline is validated against Pi 0.99.1.
 
 The test suite covers real Linux Sandbox Runtime enforcement when its native
 dependencies are installed, plus deterministic broker, network approval,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erichll/pi-sandbox",
-  "version": "0.21.1",
+  "version": "0.22.0",
   "description": "Linux (bubblewrap) and macOS (Seatbelt) process sandbox for Pi backed by Anthropic's @anthropic-ai/sandbox-runtime. Fail-closed static filesystem policy plus per-connection network approval from pi-auto-review; sandboxes main-agent Bash and built-in subagent process trees.",
   "type": "module",
   "license": "Apache-2.0",
@@ -51,11 +51,11 @@
   },
   "dependencies": {
     "@anthropic-ai/sandbox-runtime": "^0.0.77",
-    "@erichll/pi-auto-review": "^0.21.0",
+    "@erichll/pi-auto-review": "^0.22.0",
     "jiti": "2.7.0"
   },
   "peerDependencies": {
-    "@earendil-works/pi-coding-agent": "^0.87.1",
+    "@earendil-works/pi-coding-agent": "^0.99.1",
     "pi-subagents": ">=0.66.0",
     "typebox": ">=1.0.0"
   },
@@ -65,12 +65,12 @@
     }
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "^0.87.1",
-    "@earendil-works/pi-coding-agent": "^0.87.1",
-    "@earendil-works/pi-server": "^0.87.1",
+    "@earendil-works/pi-ai": "^0.99.1",
+    "@earendil-works/pi-coding-agent": "^0.99.1",
+    "@earendil-works/pi-server": "^0.99.1",
     "@types/node": "^26.6.2",
-    "pi-subagents": "^0.71.0",
+    "pi-subagents": "^0.72.1",
     "typebox": "^1.3.34",
-    "typescript": "^6.0.3"
+    "typescript": "^7.0.2"
   }
 }

package/src/pi-subagents-native.ts

@@ -16,10 +16,16 @@ import { createJiti } from "jiti";
  * 2026-09-23 against the published 0.71.0 package: the ceiling implementation
  * and the config loader are byte-identical to 0.70.0, `discoverAgents` and
  * `resolveAgentName` keep their signatures, and the `./capability-ceiling`
- * export still resolves to `.js`). Protected mode needs Pi 0.86.0 or newer
+ * export still resolves to `.js`), and revalidated 2026-09-27 against the
+ * published 0.72.1 package: the ceiling implementation and the config loader
+ * are still byte-identical to 0.70.0, `discoverAgents` and `resolveAgentName`
+ * keep their signatures, `src/agents/agents` only gains an optional
+ * `options.globalNpmRoot` argument, `typebox` moved from a hard dependency to
+ * an optional host peer, and the `./capability-ceiling` export still resolves
+ * to `.js`). Protected mode needs Pi 0.86.0 or newer
  * (the pi-subagents 0.68.0+ floor): 0.85.0 does not ship
  * `@earendil-works/pi-server`, so background children fail to launch there.
- * This package's own peer floor is Pi 0.87.1 (validated 2026-09-23).
+ * This package's own peer floor is Pi 0.99.1 (validated 2026-09-30).
  */
 export const PI_SUBAGENTS_COMPAT_RANGE = ">=0.66.0";
 export const NATIVE_CHILD_TOOLS = ["bash", "read", "grep", "find", "ls"] as const;