pi-better-harness 0.12.0 → 0.12.2

package/node_modules/pi-better-background-tasks/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-better-background-tasks",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Pi extension for durable background shell tasks, watchers, logs, and status inspection.",
   "license": "MIT",
   "type": "module",

package/node_modules/pi-better-background-tasks/src/shared-sandbox-core.ts

@@ -552,50 +552,18 @@ function contains(root: string, target: string): boolean {
     return target.startsWith(root.endsWith(sep) ? root : `${root}${sep}`);
 }
 
-/** Per-device answer to "does this volume fold case?" (APFS/HFS+ default). */
-const caseFoldingByDevice = new Map<number, boolean>();
-
-/**
- * Whether the volume holding `path` (its nearest existing ancestor) ignores
- * case: an existing component whose case-swapped spelling names the same
- * inode proves it. macOS only; false whenever it cannot be shown.
- */
-function caseInsensitiveVolume(path: string): boolean {
-    if (process.platform !== "darwin") return false;
-    let current = path;
-    while (!existsSync(current) && dirname(current) !== current) current = dirname(current);
-    let device: number;
-    try { device = statSync(current).dev; } catch { return false; }
-    const known = caseFoldingByDevice.get(device);
-    if (known !== undefined) return known;
-    for (let probe = current; dirname(probe) !== probe; probe = dirname(probe)) {
-        const name = basename(probe);
-        const swapped = [...name].map((c) => c === c.toLowerCase() ? c.toUpperCase() : c.toLowerCase()).join("");
-        if (swapped === name) continue;
-        try {
-            const original = statSync(probe);
-            if (original.dev !== device) break;
-            let folded = false;
-            try {
-                const other = statSync(join(dirname(probe), swapped));
-                folded = other.dev === original.dev && other.ino === original.ino;
-            } catch { /* The swapped name is absent: case-sensitive. */ }
-            caseFoldingByDevice.set(device, folded);
-            return folded;
-        } catch { return false; }
-    }
-    return false;
-}
-
 /**
- * Spell `path` the way the policy spells it when they differ only in case on a
- * case-insensitive volume. `canonicalizePath` fixes the case of every existing
- * component, but a missing tail (`~/.NPMRC` while `~/.npmrc` is absent) keeps
- * the caller's case, and the kernel still treats it as the protected name. The
- * longest policy path that matches case-insensitively wins, so the pre-check
- * decides as the kernel does (#354).
+ * Spell `path` the way the policy spells it when they differ only in case, on
+ * macOS. `canonicalizePath` fixes the case of every existing component on a
+ * case-insensitive volume, but a missing tail (`~/.NPMRC` while `~/.npmrc` is
+ * absent) keeps the caller's case, and the kernel still treats it as the
+ * protected name. Seatbelt matches paths case-insensitively on every volume,
+ * case-sensitive APFS included, so this folds on darwin without probing the
+ * volume: the pre-check decides as the kernel does (#354, #358). The longest
+ * policy path that matches case-insensitively wins. Other platforms never fold.
  */
-function alignCaseToPolicy(path: string, policy: CompiledSandboxWritePolicy): string {
+function alignCaseToPolicy(path: string, policy: CompiledSandboxWritePolicy, seams: SandboxSeams): string {
+    if (currentPlatform(seams) !== "darwin") return path;
     const broad = policy.broad;
     const candidates = [policy.writableRoot, ...policy.denyWrite, ...(policy.credentialPaths ?? []),
         ...(policy.runtimeWrite ?? []), ...(policy.compatibilityWrite ?? []),
@@ -608,8 +576,7 @@ function alignCaseToPolicy(path: string, policy: CompiledSandboxWritePolicy): st
         if (folded.length !== candidate.length || !contains(folded, lower)) continue;
         if (!best || candidate.length > best.length) best = candidate;
     }
-    // Already spelled as the policy spells it: nothing to probe.
-    if (!best || path.startsWith(best) || !caseInsensitiveVolume(path)) return path;
+    if (!best || path.startsWith(best)) return path;
     return `${best}${path.slice(best.length)}`;
 }
 
@@ -627,7 +594,7 @@ export function evaluateReadAccess(
     policy: CompiledSandboxWritePolicy,
     seams: SandboxSeams = {},
 ): ReadAccessDecision {
-    const path = alignCaseToPolicy(canonicalizePath(target, seams), policy);
+    const path = alignCaseToPolicy(canonicalizePath(target, seams), policy, seams);
     const permissions = policy.permissions;
     if (!permissions) return { allowed: true, path };
     if (policy.broad) {
@@ -654,7 +621,7 @@ export function evaluateWriteAccess(
     policy: CompiledSandboxWritePolicy,
     seams: SandboxSeams = {},
 ): WriteAccessDecision {
-    const path = alignCaseToPolicy(canonicalizePath(target, seams), policy);
+    const path = alignCaseToPolicy(canonicalizePath(target, seams), policy, seams);
     if (policy.broad) return evaluateBroadWrite(path, policy, policy.broad, seams);
     if (!policy.permissions && !contains(policy.writableRoot, path)) {
         return { allowed: false, path, reason: "outside-writable-root" };
@@ -1582,7 +1549,7 @@ function buildLinuxBroadCommand(
         fileArgs: [...fileArgs, ...(!permissions.network ? ["--unshare-net"] : []),
             "--", args.execPath, ...args.execArgs],
         ...(created.length && { notices: [
-            `Sandbox: created an empty read-only placeholder where a protected symlink points at nothing, and left it in place: ${created.join(", ")}`,
+            `Sandbox: created an empty read-only placeholder where a protected symlink points at nothing, and left it in place (remove it before creating the real target): ${created.join(", ")}`,
         ] }),
     };
 }

package/node_modules/pi-better-sandbox/README.md

@@ -121,9 +121,9 @@ the sandbox is enabled again.
 
 | | macOS (Seatbelt) | Linux (Bubblewrap) | Windows |
 | - | - | - | - |
-| Outside project = Write | Writes across home and temp. Removal and renaming refused outside the disposable places. | Fallback: ordinary top-level home folders (`~/projects`, `~/Documents`, …) and home itself are **read-only**. Dot entries, temp, worktree folders (found within three levels of home), and the workspace are writable, removal included. A directory holding a protected symlink (typically `~/.config` with a stow link such as `~/.config/git`) keeps its existing entries writable but refuses new top-level entries. | No backend: confined launches fail closed. |
+| Outside project = Write | Writes across home and temp. Removal and renaming refused outside the disposable places. | Fallback: ordinary top-level home folders (`~/projects`, `~/Documents`, …) and home itself are **read-only**. Dot entries, temp, worktree folders (found within three levels of home), and the workspace are writable, removal included. A directory holding a protected symlink (typically `~/.config` with a stow link such as `~/.config/git`) keeps its existing entries writable but refuses new top-level entries. A protected symlink pointing at nothing can get an empty read-only placeholder that stays on disk; the launch says so, and you remove the placeholder before creating the real target. | No backend: confined launches fail closed. |
 | Project files = Write | Enforced. | **Refused at launch** (bind mounts cannot separate removal from writing). Use Write & delete or Read. | No backend. |
-| Deny list | Path rules. | Credentials masked by empty mode-000 mounts. Code that runs later is bound read-only. | No backend. |
+| Deny list | Path rules, matched ignoring case on every volume (as Seatbelt does). | Credentials masked by empty mode-000 mounts. Code that runs later is bound read-only. | No backend. |
 
 Linux could separate removal from writing with Landlock (5.19+), but nothing
 here can apply it: Node has no binding and `bwrap` does not expose it. Windows

package/node_modules/pi-better-sandbox/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-better-sandbox",
-  "version": "0.7.1",
+  "version": "0.7.2",
   "description": "Pi extension with independent Main and Subagents permission profiles, file guards, and OS sandbox enforcement.",
   "license": "MIT",
   "type": "module",

package/node_modules/pi-better-sandbox/shared-sandbox-core.ts

@@ -552,50 +552,18 @@ function contains(root: string, target: string): boolean {
     return target.startsWith(root.endsWith(sep) ? root : `${root}${sep}`);
 }
 
-/** Per-device answer to "does this volume fold case?" (APFS/HFS+ default). */
-const caseFoldingByDevice = new Map<number, boolean>();
-
-/**
- * Whether the volume holding `path` (its nearest existing ancestor) ignores
- * case: an existing component whose case-swapped spelling names the same
- * inode proves it. macOS only; false whenever it cannot be shown.
- */
-function caseInsensitiveVolume(path: string): boolean {
-    if (process.platform !== "darwin") return false;
-    let current = path;
-    while (!existsSync(current) && dirname(current) !== current) current = dirname(current);
-    let device: number;
-    try { device = statSync(current).dev; } catch { return false; }
-    const known = caseFoldingByDevice.get(device);
-    if (known !== undefined) return known;
-    for (let probe = current; dirname(probe) !== probe; probe = dirname(probe)) {
-        const name = basename(probe);
-        const swapped = [...name].map((c) => c === c.toLowerCase() ? c.toUpperCase() : c.toLowerCase()).join("");
-        if (swapped === name) continue;
-        try {
-            const original = statSync(probe);
-            if (original.dev !== device) break;
-            let folded = false;
-            try {
-                const other = statSync(join(dirname(probe), swapped));
-                folded = other.dev === original.dev && other.ino === original.ino;
-            } catch { /* The swapped name is absent: case-sensitive. */ }
-            caseFoldingByDevice.set(device, folded);
-            return folded;
-        } catch { return false; }
-    }
-    return false;
-}
-
 /**
- * Spell `path` the way the policy spells it when they differ only in case on a
- * case-insensitive volume. `canonicalizePath` fixes the case of every existing
- * component, but a missing tail (`~/.NPMRC` while `~/.npmrc` is absent) keeps
- * the caller's case, and the kernel still treats it as the protected name. The
- * longest policy path that matches case-insensitively wins, so the pre-check
- * decides as the kernel does (#354).
+ * Spell `path` the way the policy spells it when they differ only in case, on
+ * macOS. `canonicalizePath` fixes the case of every existing component on a
+ * case-insensitive volume, but a missing tail (`~/.NPMRC` while `~/.npmrc` is
+ * absent) keeps the caller's case, and the kernel still treats it as the
+ * protected name. Seatbelt matches paths case-insensitively on every volume,
+ * case-sensitive APFS included, so this folds on darwin without probing the
+ * volume: the pre-check decides as the kernel does (#354, #358). The longest
+ * policy path that matches case-insensitively wins. Other platforms never fold.
  */
-function alignCaseToPolicy(path: string, policy: CompiledSandboxWritePolicy): string {
+function alignCaseToPolicy(path: string, policy: CompiledSandboxWritePolicy, seams: SandboxSeams): string {
+    if (currentPlatform(seams) !== "darwin") return path;
     const broad = policy.broad;
     const candidates = [policy.writableRoot, ...policy.denyWrite, ...(policy.credentialPaths ?? []),
         ...(policy.runtimeWrite ?? []), ...(policy.compatibilityWrite ?? []),
@@ -608,8 +576,7 @@ function alignCaseToPolicy(path: string, policy: CompiledSandboxWritePolicy): st
         if (folded.length !== candidate.length || !contains(folded, lower)) continue;
         if (!best || candidate.length > best.length) best = candidate;
     }
-    // Already spelled as the policy spells it: nothing to probe.
-    if (!best || path.startsWith(best) || !caseInsensitiveVolume(path)) return path;
+    if (!best || path.startsWith(best)) return path;
     return `${best}${path.slice(best.length)}`;
 }
 
@@ -627,7 +594,7 @@ export function evaluateReadAccess(
     policy: CompiledSandboxWritePolicy,
     seams: SandboxSeams = {},
 ): ReadAccessDecision {
-    const path = alignCaseToPolicy(canonicalizePath(target, seams), policy);
+    const path = alignCaseToPolicy(canonicalizePath(target, seams), policy, seams);
     const permissions = policy.permissions;
     if (!permissions) return { allowed: true, path };
     if (policy.broad) {
@@ -654,7 +621,7 @@ export function evaluateWriteAccess(
     policy: CompiledSandboxWritePolicy,
     seams: SandboxSeams = {},
 ): WriteAccessDecision {
-    const path = alignCaseToPolicy(canonicalizePath(target, seams), policy);
+    const path = alignCaseToPolicy(canonicalizePath(target, seams), policy, seams);
     if (policy.broad) return evaluateBroadWrite(path, policy, policy.broad, seams);
     if (!policy.permissions && !contains(policy.writableRoot, path)) {
         return { allowed: false, path, reason: "outside-writable-root" };
@@ -1582,7 +1549,7 @@ function buildLinuxBroadCommand(
         fileArgs: [...fileArgs, ...(!permissions.network ? ["--unshare-net"] : []),
             "--", args.execPath, ...args.execArgs],
         ...(created.length && { notices: [
-            `Sandbox: created an empty read-only placeholder where a protected symlink points at nothing, and left it in place: ${created.join(", ")}`,
+            `Sandbox: created an empty read-only placeholder where a protected symlink points at nothing, and left it in place (remove it before creating the real target): ${created.join(", ")}`,
         ] }),
     };
 }

package/node_modules/pi-better-subagents/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-better-subagents",
-  "version": "0.9.0",
+  "version": "0.9.2",
   "description": "Pi extension for detached, sandboxed subagent runs that keep the foreground session free.",
   "license": "MIT",
   "type": "module",

package/node_modules/pi-better-subagents/shared-sandbox-core.ts

@@ -552,50 +552,18 @@ function contains(root: string, target: string): boolean {
     return target.startsWith(root.endsWith(sep) ? root : `${root}${sep}`);
 }
 
-/** Per-device answer to "does this volume fold case?" (APFS/HFS+ default). */
-const caseFoldingByDevice = new Map<number, boolean>();
-
-/**
- * Whether the volume holding `path` (its nearest existing ancestor) ignores
- * case: an existing component whose case-swapped spelling names the same
- * inode proves it. macOS only; false whenever it cannot be shown.
- */
-function caseInsensitiveVolume(path: string): boolean {
-    if (process.platform !== "darwin") return false;
-    let current = path;
-    while (!existsSync(current) && dirname(current) !== current) current = dirname(current);
-    let device: number;
-    try { device = statSync(current).dev; } catch { return false; }
-    const known = caseFoldingByDevice.get(device);
-    if (known !== undefined) return known;
-    for (let probe = current; dirname(probe) !== probe; probe = dirname(probe)) {
-        const name = basename(probe);
-        const swapped = [...name].map((c) => c === c.toLowerCase() ? c.toUpperCase() : c.toLowerCase()).join("");
-        if (swapped === name) continue;
-        try {
-            const original = statSync(probe);
-            if (original.dev !== device) break;
-            let folded = false;
-            try {
-                const other = statSync(join(dirname(probe), swapped));
-                folded = other.dev === original.dev && other.ino === original.ino;
-            } catch { /* The swapped name is absent: case-sensitive. */ }
-            caseFoldingByDevice.set(device, folded);
-            return folded;
-        } catch { return false; }
-    }
-    return false;
-}
-
 /**
- * Spell `path` the way the policy spells it when they differ only in case on a
- * case-insensitive volume. `canonicalizePath` fixes the case of every existing
- * component, but a missing tail (`~/.NPMRC` while `~/.npmrc` is absent) keeps
- * the caller's case, and the kernel still treats it as the protected name. The
- * longest policy path that matches case-insensitively wins, so the pre-check
- * decides as the kernel does (#354).
+ * Spell `path` the way the policy spells it when they differ only in case, on
+ * macOS. `canonicalizePath` fixes the case of every existing component on a
+ * case-insensitive volume, but a missing tail (`~/.NPMRC` while `~/.npmrc` is
+ * absent) keeps the caller's case, and the kernel still treats it as the
+ * protected name. Seatbelt matches paths case-insensitively on every volume,
+ * case-sensitive APFS included, so this folds on darwin without probing the
+ * volume: the pre-check decides as the kernel does (#354, #358). The longest
+ * policy path that matches case-insensitively wins. Other platforms never fold.
  */
-function alignCaseToPolicy(path: string, policy: CompiledSandboxWritePolicy): string {
+function alignCaseToPolicy(path: string, policy: CompiledSandboxWritePolicy, seams: SandboxSeams): string {
+    if (currentPlatform(seams) !== "darwin") return path;
     const broad = policy.broad;
     const candidates = [policy.writableRoot, ...policy.denyWrite, ...(policy.credentialPaths ?? []),
         ...(policy.runtimeWrite ?? []), ...(policy.compatibilityWrite ?? []),
@@ -608,8 +576,7 @@ function alignCaseToPolicy(path: string, policy: CompiledSandboxWritePolicy): st
         if (folded.length !== candidate.length || !contains(folded, lower)) continue;
         if (!best || candidate.length > best.length) best = candidate;
     }
-    // Already spelled as the policy spells it: nothing to probe.
-    if (!best || path.startsWith(best) || !caseInsensitiveVolume(path)) return path;
+    if (!best || path.startsWith(best)) return path;
     return `${best}${path.slice(best.length)}`;
 }
 
@@ -627,7 +594,7 @@ export function evaluateReadAccess(
     policy: CompiledSandboxWritePolicy,
     seams: SandboxSeams = {},
 ): ReadAccessDecision {
-    const path = alignCaseToPolicy(canonicalizePath(target, seams), policy);
+    const path = alignCaseToPolicy(canonicalizePath(target, seams), policy, seams);
     const permissions = policy.permissions;
     if (!permissions) return { allowed: true, path };
     if (policy.broad) {
@@ -654,7 +621,7 @@ export function evaluateWriteAccess(
     policy: CompiledSandboxWritePolicy,
     seams: SandboxSeams = {},
 ): WriteAccessDecision {
-    const path = alignCaseToPolicy(canonicalizePath(target, seams), policy);
+    const path = alignCaseToPolicy(canonicalizePath(target, seams), policy, seams);
     if (policy.broad) return evaluateBroadWrite(path, policy, policy.broad, seams);
     if (!policy.permissions && !contains(policy.writableRoot, path)) {
         return { allowed: false, path, reason: "outside-writable-root" };
@@ -1582,7 +1549,7 @@ function buildLinuxBroadCommand(
         fileArgs: [...fileArgs, ...(!permissions.network ? ["--unshare-net"] : []),
             "--", args.execPath, ...args.execArgs],
         ...(created.length && { notices: [
-            `Sandbox: created an empty read-only placeholder where a protected symlink points at nothing, and left it in place: ${created.join(", ")}`,
+            `Sandbox: created an empty read-only placeholder where a protected symlink points at nothing, and left it in place (remove it before creating the real target): ${created.join(", ")}`,
         ] }),
     };
 }

package/node_modules/pi-better-subagents/tools.ts

@@ -420,7 +420,7 @@ export function subagentResultTool(Type: TypeModule, baseSession: SubagentToolSe
         name: "subagent_result",
         label: "Subagent Result",
         description:
-            "Read a subagent's final output if it has finished. NEVER waits. Default current session. Ordinary answers are preserved verbatim in a 2 KiB UTF-8 page (max_bytes up to 8 KiB, optional lines cap); pass cursor to reconstruct the rest. Pass all:true for a foreign-session id. mode=raw pages retained log bytes (16 KiB default, 64 KiB cap). Failures and exceptional lifecycle facts come before progress. No tool-name histories or default cost lines; pass include:[\"cost\",\"tools\"] to opt in.",
+            "Read a subagent's final output if it has finished. NEVER waits. Default current session. Ordinary answers are preserved verbatim in a 2048-byte UTF-8 page (max_bytes up to 8192 bytes, optional lines cap); pass cursor to reconstruct the rest. Pass all:true for a foreign-session id. mode=raw pages retained log bytes (16 KiB default, 64 KiB cap). Failures and exceptional lifecycle facts come before progress. No tool-name histories or default cost lines; pass include:[\"cost\",\"tools\"] to opt in.",
         promptSnippet: "Read a finished subagent's final result (never waits)",
         promptGuidelines: [
             "Use subagent_result to collect a finished run's output. If it reports the run is still going, stop — do not poll; you'll be notified when it finishes.",
@@ -429,7 +429,7 @@ export function subagentResultTool(Type: TypeModule, baseSession: SubagentToolSe
         parameters: Type.Object({
             id: Type.String({ description: "Run id from subagent_spawn." }),
             cursor: Type.Optional(Type.String({ description: "Caller-owned answer page or status cursor from a previous response." })),
-            max_bytes: Type.Optional(Type.Number({ description: "UTF-8 byte budget for this page (default 2 KiB, max 8 KiB)." })),
+            max_bytes: Type.Optional(Type.Number({ description: "UTF-8 byte budget for this page (default 2048 bytes, max 8192 bytes)." })),
             maxBytes: Type.Optional(Type.Number({ description: MAX_BYTES_ALIAS_DESCRIPTION })),
             lines: Type.Optional(Type.Number({ description: "Optional line cap for each answer page (default: bytes only). nextCursor continues after the last line shown." })),
             tail_lines: Type.Optional(Type.Number({ description: "Deprecated alias for lines. lines wins when both are given." })),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-better-harness",
-  "version": "0.12.0",
+  "version": "0.12.2",
   "description": "Pi extension bundle for a write sandbox, subagents, background tasks, SSH, goals, and structured plans.",
   "license": "MIT",
   "type": "module",
@@ -50,12 +50,12 @@
     "test": "node --test test/*.test.mjs"
   },
   "dependencies": {
-    "pi-better-background-tasks": "0.6.0",
+    "pi-better-background-tasks": "0.6.1",
     "pi-better-goal": "0.5.0",
     "pi-better-plan": "0.5.0",
-    "pi-better-sandbox": "0.7.1",
+    "pi-better-sandbox": "0.7.2",
     "pi-better-ssh": "0.1.1",
-    "pi-better-subagents": "0.9.0",
+    "pi-better-subagents": "0.9.2",
     "smol-toml": "1.9.0",
     "yaml": "^2.9.1"
   },