@erichll/pi-sandbox 0.26.0 → 0.26.1

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## 0.26.1 - 2026-10-13
+
+- Upgrade the Pi 1.2.0 development baseline (`pi-coding-agent`, `pi-ai`,
+  typebox `>=1.3.37`) and drop the unused
+  `@earendil-works/pi-server` development dependency: nothing in this package
+  imports it and pi-subagents 0.77.0 no longer references it, while upstream
+  removed the package in 1.2.0.
+- Revalidate the compatibility gate against pi-subagents 0.78.0 on Pi 1.2.0.
+  pi-subagents 0.77.0 required chord for every host from Pi 0.85 onward,
+  which broke background children on Pi 1.2.0 (chord removed upstream);
+  0.78.0 requires chord only when the host manifest declares it, so the
+  package needs no workaround. The deterministic gate and the model-backed
+  native baseline / protected child acceptance pass. Raise the pi-subagents
+  peer floor to `>=0.78.0` because 0.77.x background children fail on
+  Pi 1.2.0; 0.78.0 also works on Pi 1.1.0.
+- Keep the pi-coding-agent peer floor at `>=1.1.0`: both 1.1.0 and 1.2.0 are
+  verified, so 1.1.0 users are not forced onto the newer Pi.
+
 ## 0.26.0 - 2026-10-08
 
 - Require `@erichll/pi-auto-review ^0.26.0` so sandbox approvals use the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erichll/pi-sandbox",
-  "version": "0.26.0",
+  "version": "0.26.1",
   "description": "Linux (bubblewrap) and macOS (Seatbelt) process sandbox for Pi backed by Anthropic's @anthropic-ai/sandbox-runtime. Fail-closed static filesystem policy plus per-connection network approval from pi-auto-review; sandboxes main-agent Bash and built-in subagent process trees.",
   "type": "module",
   "license": "Apache-2.0",
@@ -55,9 +55,9 @@
     "jiti": "2.7.0"
   },
   "peerDependencies": {
-    "@earendil-works/pi-coding-agent": "^1.1.0",
-    "pi-subagents": ">=0.76.1",
-    "typebox": ">=1.3.36"
+    "@earendil-works/pi-coding-agent": ">=1.1.0",
+    "pi-subagents": ">=0.78.0",
+    "typebox": ">=1.3.37"
   },
   "peerDependenciesMeta": {
     "pi-subagents": {
@@ -65,12 +65,11 @@
     }
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "^1.1.0",
-    "@earendil-works/pi-coding-agent": "^1.1.0",
-    "@earendil-works/pi-server": "^1.1.0",
-    "@types/node": "^26.6.4",
-    "pi-subagents": "^0.76.1",
-    "typebox": "^1.3.36",
+    "@earendil-works/pi-ai": "^1.2.0",
+    "@earendil-works/pi-coding-agent": "^1.2.0",
+    "@types/node": "^26.6.5",
+    "pi-subagents": "^0.78.0",
+    "typebox": "^1.3.37",
     "typescript": "^7.0.2"
   }
 }

package/src/pi-subagents-native.ts

@@ -43,6 +43,14 @@ import * as hostTypebox from "typebox";
  * baseline / protected child acceptance also passes, with the host read
  * blocked by sandboxed Bash and the runtime acknowledgement verified. This
  * package's own peer floor is Pi 1.1.0.
+ * Revalidated 2026-10-13 against 0.78.0 / Pi 1.2.0: pi-subagents 0.77.0
+ * required chord aliases for every host from Pi 0.85 onward, which broke
+ * background children on Pi 1.2.0 (chord removed upstream); 0.78.0 requires
+ * chord only when the host manifest declares it, so no host-side workaround
+ * is needed. The subagent tool schema moved management fields into `options`
+ * in 0.77.0 (top-level aliases keep working) and the loader seams are
+ * unchanged. The deterministic gate and model-backed native baseline /
+ * protected child acceptance pass.
  */
 export const PI_SUBAGENTS_COMPAT_RANGE = ">=0.66.0";
 export const NATIVE_CHILD_TOOLS = ["bash", "read", "grep", "find", "ls"] as const;