@narumitw/pi-subagents 3.1.1 → 3.2.1

package/docs/tools.md

@@ -5,7 +5,7 @@
 | Parameter | Type | Required | Constraint / default |
 | --- | --- | --- | --- |
 | `task` | `string` | Yes | Self-contained task, up to 50 KiB of UTF-8 text. |
-| `tools` | `string[]` | No | Pi core tools: `read`, `bash`, `powershell`, `edit`, `write`, `grep`, `find`, `ls`; defaults to `read`, `grep`, `find`, `ls`. |
+| `tools` | `string[]` | No | Pi tools: `read`, `bash`, `powershell`, `edit`, `write`, `grep`, `find`, `ls`, `codemode`; defaults to `read`, `grep`, `find`, `ls`. |
 | `skills` | `string[]` | No | Up to 16 local skill files or directories; Pi uses progressive disclosure. |
 | `extensions` | `{ path: string; tools: string[] }[]` | No | Up to 16 trusted local extensions and their initially selected tools. |
 | `thinkingLevel` | `string` | No | `off`, `minimal`, `low`, `medium`, `high`, `xhigh`, or `max`; defaults to the main agent's level. |
@@ -13,6 +13,11 @@
 
 Starts one job and returns its `jobId` immediately. The child inherits the main agent's effective model and always receives `subagent_send` and `subagent_wait`.
 
+Select `codemode` explicitly with the other required tools, for example `tools: ["read", "grep", "codemode"]`.
+Pi's built-in codemode extension runs scripts against the child's callable tools, including `subagent_send` and `subagent_wait`; automatic resource discovery stays disabled.
+Codemode also exposes Pi's classifier and image model API using child-visible credentials; these calls can send data to providers and incur costs.
+The default tools do not include codemode.
+
 Skills do not add tools or inject their entire bodies. An extension's `tools` list selects its initial tools; use an empty list for provider or lifecycle behavior only. An attached extension runs trusted code with full child-process permissions, not in a sandbox.
 
 Attachments must be existing local paths. Every non-ignored declared skill must load successfully, each skill name must be unique, and each skill path must contain at least one loadable Pi skill. Missing or misattributed extension tools fail before the child model receives the task. See [Attachment behavior](./attachments.md) for validation, trust, limits, provider credentials, and startup failures.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@narumitw/pi-subagents",
-  "version": "3.1.1",
+  "version": "3.2.1",
   "description": "Subagent jobs with asynchronous main-agent messaging for Pi.",
   "type": "module",
   "license": "MIT",
@@ -39,12 +39,12 @@
     "typebox": "*"
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "1.0.0",
-    "@earendil-works/pi-coding-agent": "1.0.0",
-    "@earendil-works/pi-tui": "1.0.0",
-    "@types/node": "26.6.4",
+    "@earendil-works/pi-ai": "1.2.0",
+    "@earendil-works/pi-coding-agent": "1.2.0",
+    "@earendil-works/pi-tui": "1.2.0",
+    "@types/node": "26.6.5",
     "esbuild": "0.28.2",
-    "typebox": "1.3.34",
+    "typebox": "1.3.37",
     "typescript": "7.0.2"
   },
   "repository": {
@@ -53,6 +53,6 @@
     "directory": "packages/pi-subagents"
   },
   "dependencies": {
-    "ignore": "^7.0.11"
+    "ignore": "^7.0.12"
   }
 }

package/src/process.ts

@@ -100,6 +100,7 @@ export function buildPiArgs(request: ChildCommandRequest): string[] {
     "-e",
     childCommunicationBridgePath(),
   ];
+  if (request.tools.includes("codemode")) args.push("-e", "builtin:codemode");
   for (const extension of request.extensions) args.push("-e", extension.path);
   if (requiresReadinessAttestation(request)) args.push("-e", childReadinessProbePath());
   for (const skill of request.skills) args.push("--skill", skill);
@@ -153,8 +154,8 @@ export function childReadinessProbePath(): string {
   return fileURLToPath(new URL("./child-readiness-probe.ts", import.meta.url));
 }
 
-function requiresReadinessAttestation(request: Pick<ChildRequest, "extensions">): boolean {
-  return request.extensions.length > 0;
+function requiresReadinessAttestation(request: Pick<ChildRequest, "tools" | "extensions">): boolean {
+  return request.tools.includes("codemode") || request.extensions.length > 0;
 }
 
 function selectedChildTools(request: Pick<ChildRequest, "tools" | "extensions">): string[] {

package/src/runtime.ts

@@ -28,6 +28,7 @@ interface InternalJob extends JobSummary {
   terminal: Promise<void>;
   resolveTerminal: () => void;
   task?: Promise<void>;
+  taskText: string;
   stopRequest?: StopRequest;
   control?: ChildControl;
   controlReady: Promise<ChildControl>;
@@ -48,6 +49,7 @@ export interface RuntimeDependencies {
 
 export interface ActiveJobDisplay {
   jobId: string;
+  task: string;
   state: Extract<SubagentJobState, "queued" | "running">;
   elapsedMs: number;
   timeout?: number;
@@ -113,6 +115,7 @@ export class SubagentRuntime {
       .sort((left, right) => left.createdAt - right.createdAt)
       .map((job) => ({
         jobId: job.jobId,
+        task: job.taskText,
         state: job.state,
         elapsedMs: Math.max(0, now - (job.startedAt ?? job.createdAt)),
         ...(job.timeout !== undefined ? { timeout: job.timeout } : {}),
@@ -155,6 +158,7 @@ export class SubagentRuntime {
       ...(input.timeout !== undefined ? { timeout: input.timeout } : {}),
       controller,
       tools: effectiveTools,
+      taskText: input.task,
       terminal,
       resolveTerminal,
       controlReady,

package/src/tools.ts

@@ -209,7 +209,7 @@ export function registerSubagentTools(
       if (ctx.cwd !== cwd || ctx.isProjectTrusted() !== projectTrusted) {
         throw new Error("Subagent spawn context changed during attachment validation; retry the request.");
       }
-      if (attachments.extensions.length > 0) {
+      if (tools.includes("codemode") || attachments.extensions.length > 0) {
         assertChildBootstrapCapacity([...new Set([...attachments.effectiveTools, ...CHILD_COMMUNICATION_TOOL_NAMES])]);
       }
       const model = resolveChildModel(ctx, attachments.extensions.length > 0);

package/src/types.ts

@@ -13,7 +13,17 @@ export const TERMINAL_JOB_STATES = new Set<SubagentJobState>([
   "cancelled",
 ]);
 
-export const CHILD_CORE_TOOL_NAMES = ["read", "bash", "powershell", "edit", "write", "grep", "find", "ls"] as const;
+export const CHILD_CORE_TOOL_NAMES = [
+  "read",
+  "bash",
+  "powershell",
+  "edit",
+  "write",
+  "grep",
+  "find",
+  "ls",
+  "codemode",
+] as const;
 export const DEFAULT_SUBAGENT_TOOLS = ["read", "grep", "find", "ls"] as const;
 export const SUBAGENT_THINKING_LEVELS = [
   "off",

package/src/widget.ts

@@ -1,5 +1,5 @@
 import type { ExtensionContext, Theme } from "@earendil-works/pi-coding-agent";
-import { truncateToWidth } from "@earendil-works/pi-tui";
+import { stripTerminalSequences, truncateToWidth, visibleWidth } from "@earendil-works/pi-tui";
 import { sanitizeTerminalText } from "./message-broker.js";
 import type { ActiveJobDisplay, SubagentRuntime } from "./runtime.js";
 
@@ -7,6 +7,7 @@ export const SUBAGENT_WIDGET_KEY = "subagents";
 export const SUBAGENT_WIDGET_REFRESH_INTERVAL_MS = 1_000;
 
 const WIDGET_OPTIONS = { placement: "aboveEditor" } as const;
+const TASK_PREVIEW_WIDTH = 40;
 
 export interface SubagentWidgetController {
   start(ctx: ExtensionContext): void;
@@ -86,17 +87,21 @@ function renderJob(job: ActiveJobDisplay, theme: Theme): string {
   const symbol = theme.fg(running ? "accent" : "dim", running ? "▶ " : "○ ");
   const state = theme.fg(running ? "accent" : "muted", job.state);
   const jobId = sanitizeLabel(job.jobId);
+  const taskText = sanitizeTask(job.task);
+  // Pi's truncation adds ANSI resets; remove them before applying the callback theme.
+  const task = stripTerminalSequences(truncateToWidth(taskText, TASK_PREVIEW_WIDTH, "…"));
+  const preview = visibleWidth(task) > 0 ? ` · ${theme.fg("text", task)}` : "";
   const tools = job.tools.length > 0 ? job.tools.map(sanitizeLabel).join(", ") : "none";
   const timeout = job.timeout === undefined ? "no timeout" : formatSeconds(job.timeout);
   const detail = ` · ${formatSeconds(Math.floor(job.elapsedMs / 1_000))} / ${timeout} · tools: ${tools}`;
-  return `${symbol}${theme.fg("text", jobId)} · ${state}${theme.fg("muted", detail)}`;
+  return `${symbol}${theme.fg("text", jobId)}${preview} · ${state}${theme.fg("muted", detail)}`;
 }
 
 function widgetValue(jobs: readonly ActiveJobDisplay[]): string {
   return jobs
     .map(
       (job) =>
-        `${job.jobId}\0${job.state}\0${Math.floor(job.elapsedMs / 1_000)}\0${job.timeout ?? ""}\0${job.tools.join(",")}`,
+        `${job.jobId}\0${job.task}\0${job.state}\0${Math.floor(job.elapsedMs / 1_000)}\0${job.timeout ?? ""}\0${job.tools.join(",")}`,
     )
     .join("\n");
 }
@@ -105,6 +110,17 @@ function cloneDisplayJob(job: ActiveJobDisplay): ActiveJobDisplay {
   return { ...job, tools: [...job.tools] };
 }
 
+function sanitizeTask(value: string): string {
+  // Stop sequence bodies at another control introducer so malformed input cannot
+  // repeatedly scan the rest of a maximum-size task, as Pi's escape stripper can.
+  const text = value.replace(
+    // biome-ignore lint/suspicious/noControlCharactersInRegex: Remove untrusted terminal escape sequences before display.
+    /(?:\u001b\[|\u009b)[0-?]*[ -/]*[@-~]|(?:\u001b[\]PX^_]|[\u0090\u0098\u009d-\u009f])[^\u0007\u001b\u0080-\u009f]*(?:\u0007|\u001b\\|\u009c)|\u001b[ -/]*[0-~]/gu,
+    "",
+  );
+  return sanitizeLabel(text.replace(/\p{Bidi_Control}/gu, ""));
+}
+
 function sanitizeLabel(value: string): string {
   return sanitizeTerminalText(value).replace(/\s+/gu, " ").trim();
 }