@howarewoo/pi-subagents 0.0.0-stage → 0.1.1

package/package.json

@@ -1,6 +1,66 @@
 {
   "name": "@howarewoo/pi-subagents",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.1",
+  "description": "Pi-native single-assignment delegation with explicit profiles and parent-owned SDK children",
+  "keywords": [
+    "pi-package"
+  ],
+  "homepage": "https://github.com/howarewoo/pi-extended-subagents#readme",
+  "bugs": {
+    "url": "https://github.com/howarewoo/pi-extended-subagents/issues"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/howarewoo/pi-extended-subagents.git"
+  },
+  "files": [
+    "src",
+    "docs",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE",
+    "THIRD_PARTY_NOTICES.md"
+  ],
+  "type": "module",
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "test": "node --test test/*.test.ts",
+    "typecheck": "tsc --noEmit",
+    "lint": "oxlint --deny-warnings .",
+    "lint:fix": "npm run lint -- --fix",
+    "format": "oxfmt --write .",
+    "format:check": "oxfmt --check .",
+    "exercise": "node examples/sdk-exercise.ts",
+    "check": "npm run lint && npm run format:check && npm run typecheck && npm test && npm run exercise",
+    "test:package": "node scripts/test-package.mjs",
+    "release:check": "node scripts/release-notes.mjs"
+  },
+  "dependencies": {
+    "@earendil-works/pi-schema": "1.5.2"
+  },
+  "devDependencies": {
+    "@earendil-works/pi-ai": "1.5.2",
+    "@earendil-works/pi-coding-agent": "1.5.2",
+    "@earendil-works/pi-tui": "1.5.2",
+    "@types/node": "26.6.6",
+    "oxfmt": "0.78.0",
+    "oxlint": "1.93.0",
+    "typescript": "7.0.2"
+  },
+  "peerDependencies": {
+    "@earendil-works/pi-ai": "*",
+    "@earendil-works/pi-coding-agent": "*",
+    "@earendil-works/pi-tui": "*"
+  },
+  "engines": {
+    "node": ">=22.19.0"
+  },
+  "pi": {
+    "extensions": [
+      "./src/pi-extended-subagents.ts"
+    ]
+  }
+}

package/src/capabilities.ts

@@ -0,0 +1,39 @@
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import { WRITE_TOOLS } from "./profiles.ts";
+
+export type ToolMetadata = ReturnType<ExtensionAPI["getAllTools"]>[number];
+export type CapabilityDenial = { name: string; reason: string };
+
+/** These controls belong to the child coordinator, never to the root dispatcher. */
+const CONTROLS = new Set([
+  "delegate_task",
+  "delegate_coordinate",
+  "subagent",
+  "submit_result",
+  "codemode",
+  "tool_search",
+]);
+
+/** A leaf grant is an operator assertion about trusted code, not a JavaScript sandbox.
+ * Undeclared orchestration is outside that contract; annotations never authorize forwarding.
+ */
+export function leafDenial(
+  tool: ToolMetadata,
+  grants: readonly string[],
+  sameWorkspace: boolean,
+): string | undefined {
+  if (CONTROLS.has(tool.name)) return "owned or orchestrating control cannot be forwarded";
+  if (tool.reachesTools) return "tool-to-tool forwarding has no child execution scope";
+  if (tool.exposure === "hidden" || tool.exposure === "model-only") return "tool is not callable";
+  if (tool.sourceInfo.path.startsWith("builtin:")) return "builtin is outside the profile ceiling";
+  if (WRITE_TOOLS.includes(tool.name as (typeof WRITE_TOOLS)[number]))
+    return "builtin replacements cannot be leaf grants";
+  if (!grants.includes(tool.name))
+    return "no operator-reviewed leaf grant (unknown execution capabilities)";
+  if (!sameWorkspace) return "custom tool execution cwd cannot be rebound to the child workspace";
+  return undefined;
+}
+
+export function toolProvenance(tool: ToolMetadata): string {
+  return JSON.stringify([tool.sourceInfo, tool.exposure, tool.namespace]);
+}