pi-better-harness 0.37.0 → 0.37.1

package/node_modules/pi-better-subagents/child-codemode.ts

@@ -0,0 +1,17 @@
+/** Native Pi codemode, explicitly loaded because children disable extension discovery. */
+import * as SDK from "@earendil-works/pi-coding-agent";
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+
+/** Older supported SDKs have no native codemode; keep their existing tool set. */
+export function installChildCodemode(pi: ExtensionAPI, confined = false): boolean {
+    const factory = (SDK as any).createCodemodeExtension;
+    if (typeof factory !== "function") return false;
+    // Model globals make direct provider calls outside nested tool hooks.
+    // Confined children get only tool dispatch, which passes through the guard.
+    factory(confined ? { models: false } : {})(pi);
+    return true;
+}
+
+export default function childCodemode(pi: ExtensionAPI): void {
+    installChildCodemode(pi);
+}

package/node_modules/pi-better-subagents/config.json

@@ -1,6 +1,6 @@
 {
   "defaultModel": null,
-  "defaultTools": "read, bash, edit, write, web_search, web_fetch",
+  "defaultTools": "read, bash, edit, write, web_search, web_fetch, codemode",
   "maxConcurrent": 6,
   "delegationMode": "adaptive",
 

package/node_modules/pi-better-subagents/config.ts

@@ -85,7 +85,7 @@ export function normalizeConcurrencyCap(value: unknown): number {
 }
 
 /** Built-in default tool set when config.json sets nothing. */
-export const SAFE_DEFAULT_TOOLS = "read, bash, edit, write, web_search, web_fetch";
+export const SAFE_DEFAULT_TOOLS = "read, bash, edit, write, web_search, web_fetch, codemode";
 /** Safe default for a hermetic (clean) child where extension tools don't exist. */
 export const SAFE_CLEAN_TOOLS = "read, bash";
 

package/node_modules/pi-better-subagents/docs/usage.md

@@ -162,8 +162,8 @@ Continuation rules:
 On Pi 0.99.1 or newer, enable native codemode alongside the existing direct
 tools with `defaultTools: ["+codemode"]` and `codemode.mode: "on"`. SDK sessions
 must also load Pi's `createCodemodeExtension()`. This support is for the
-foreground coordinator; it does not enable codemode in confined children or
-change sandbox admission.
+foreground coordinator. Child codemode is enabled separately by the default
+tool set and preserves sandbox tool admission.
 
 `subagent_spawn_batch` returns the same readable text to direct callers and a
 structured launch receipt to codemode scripts. No text parsing is needed:
@@ -514,10 +514,17 @@ the task boundary.
 ## Tool scoping (allowlist)
 
 Precedence, highest first: the per-call `tools` param → `config.json`
-`defaultTools` → a built-in default (`read, bash, edit, write, web_search,
+`defaultTools` → a built-in default (`read, bash, edit, write, codemode, web_search,
 web_fetch`; just `read, bash` in a `clean` child). `exclude_tools` subtracts on
 top.
 
+On Pi 0.99.1 or newer, default children explicitly load native `codemode` even
+with extension discovery disabled. Custom tool lists must include `codemode`;
+`exclude_tools: "codemode"` removes it. Older SDKs keep their existing tools.
+In confined children, nested tool calls pass through the task guard. Direct
+classifier and image-model globals are disabled there because they bypass tool
+hooks. Unconfined children retain native model globals.
+
 User configuration lives in
 `~/.pi/agent/settings.json` under `piBetterHarness.subagents` (under
 `PI_CODING_AGENT_DIR` when set). The old user config migrates on first use.

package/node_modules/pi-better-subagents/extensions.mjs

@@ -33,7 +33,8 @@
  *   pi -p --no-extensions "list your tools" -> read, bash, edit, write
  * A builtin needs no extension, so it never counts as unmapped.
  */
-export const BUILTIN_TOOLS = ["read", "bash", "edit", "write"];
+// codemode is supplied by the harness child adapter, not a discovered package.
+export const BUILTIN_TOOLS = ["read", "bash", "edit", "write", "codemode"];
 
 /** Marker spec meaning "this extension's own package" (for allow_nested). */
 export const SELF_SPEC = "self";

package/node_modules/pi-better-subagents/index.ts

@@ -1868,7 +1868,7 @@ export default function (pi: ExtensionAPI) {
             requested: allow.split(",").filter((name) => name && !requestedExcludes.has(name)),
             settings: permissionPlan.tools, network: permissionPlan.permissions?.network ?? true,
             processAccess: permissionPlan.permissions?.processAccess ?? "off",
-            builtins: TASK_BUILTINS, registered: pi.getAllTools?.() ?? [],
+            builtins: [...TASK_BUILTINS, "codemode"], registered: pi.getAllTools?.() ?? [],
             toolExtensions: cfg.toolExtensions, resolvePath: resolveExtensionPath,
         }) : undefined;
         const resolution = resolveExtensions({
@@ -1882,10 +1882,12 @@ export default function (pi: ExtensionAPI) {
             .filter((path) => !resolvedExtArgs.includes(path)).flatMap((path) => ["--extension", path]);
         // Harness child controls ride along in every mode, including clean and unsandboxed runs.
         // They deliver deadline steers and keep external monitoring with the coordinator.
-        const extArgs = [...resolvedExtArgs, ...trustedExtArgs,
+        const codemodeArgs = !sandboxEnabled && allow.split(",").includes("codemode") && !requestedExcludes.has("codemode")
+            ? ["--extension", join(selfDir(), "child-codemode.ts")] : [];
+        const extArgs = [...resolvedExtArgs, ...trustedExtArgs, ...codemodeArgs,
             "--extension", childSteerExtensionPath(), "--extension", join(selfDir(), "child-ownership.ts")]
             .map((value, index, all) => sandboxEnabled && all[index - 1] === "--extension" ? canonicalizePath(value) : value);
-        const baseExtensionArgs = [...resolvedExtArgs,
+        const baseExtensionArgs = [...resolvedExtArgs, ...codemodeArgs,
             "--extension", childSteerExtensionPath(), "--extension", join(selfDir(), "child-ownership.ts")]
             .map((value, index, all) => sandboxEnabled && all[index - 1] === "--extension" ? canonicalizePath(value) : value);
         if (resume?.recipe.extensionArgs) {
@@ -1895,7 +1897,7 @@ export default function (pi: ExtensionAPI) {
                 tools: sandboxEnabled ? allow.split(",").filter((name) => (SDK_BUILTIN_TOOLS as readonly string[]).includes(name)).join(",") : allow,
                 model: resume.recipe.model, clean, allowNested: sandboxEnabled ? false : allowNested, config: cfg,
             });
-            const referenceArgs = [...extensionArgs(reference, resolveExtensionPath).args,
+            const referenceArgs = [...extensionArgs(reference, resolveExtensionPath).args, ...codemodeArgs,
                 ...(!resume.recipe.baseExtensionArgs ? trustedExtArgs : []),
                 "--extension", childSteerExtensionPath(), "--extension", join(selfDir(), "child-ownership.ts")]
                 .map((value, index, all) => sandboxEnabled && all[index - 1] === "--extension" ? canonicalizePath(value) : value);

package/node_modules/pi-better-subagents/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-better-subagents",
-  "version": "0.25.0",
+  "version": "0.25.1",
   "description": "Pi extension for detached, sandboxed subagent runs that keep the foreground session free.",
   "license": "MIT",
   "type": "module",

package/node_modules/pi-better-subagents/task-guard.ts

@@ -9,6 +9,7 @@ import { DISPOSITION_TOOL } from "./incident-model.ts";
 import { SandboxDiagnostics, diagnosticPackageVersion } from "./shared-sandbox-diagnostics.ts";
 import { fileURLToPath } from "node:url";
 import { claimTaskToolOwner } from "./task-tool-owner.ts";
+import { installChildCodemode } from "./child-codemode.ts";
 
 const TRUSTED_INLINE_SOURCE = "<inline:task-sandbox>";
 
@@ -56,6 +57,7 @@ export default function taskGuard(pi: ExtensionAPI, input: unknown, fatal: (erro
             diagnosticsWarned = true;
         },
     });
+    const codemode = policy.tools.includes("codemode") && installChildCodemode(pi, true);
     const toolApi = ownedTools ? { ...pi, registerTool: claimTaskToolOwner(pi) } : pi;
     const installBoundary = () => installTaskTools(toolApi, { controller, cwd: process.cwd(), shellPath: () => shellPath,
         diagnostics,
@@ -66,7 +68,7 @@ export default function taskGuard(pi: ExtensionAPI, input: unknown, fatal: (erro
         processAccess: () => policy.permissions.processAccess ?? "off",
         // The disposition tool performs no file or command I/O; only this inline registration is admitted.
         // Trusted tools are admitted by name and package (ADR 0009).
-        admitExtensionTool: (name, _input, sourcePath) => (name === DISPOSITION_TOOL && sourcePath === TRUSTED_INLINE_SOURCE) ||
+        admitExtensionTool: (name, _input, sourcePath) => ((name === DISPOSITION_TOOL || (name === "codemode" && codemode)) && sourcePath === TRUSTED_INLINE_SOURCE) ||
             trustedToolRefusal(policy, name, sourcePath) === undefined,
     });
     // Defer owned registrations until after SDK duplicate-name diagnostics.
@@ -107,7 +109,8 @@ export default function taskGuard(pi: ExtensionAPI, input: unknown, fatal: (erro
                 const reason = registered ? trustedToolRefusal(policy, name, registered.sourceInfo?.path) : `${name} was not registered by its package`;
                 if (reason) refused.push({ name, reason }); else trusted.push(name);
             }
-            const activated = selected.length || trusted.length ? [...selected, ...trusted, DISPOSITION_TOOL] : selected;
+            const activated = selected.length || trusted.length || codemode
+                ? [...selected, ...trusted, ...(codemode ? ["codemode"] : []), DISPOSITION_TOOL] : selected;
             pi.setActiveTools(activated);
             const active = new Set(pi.getActiveTools());
             if (active.size !== activated.length || activated.some((name) => !active.has(name))) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-better-harness",
-  "version": "0.37.0",
+  "version": "0.37.1",
   "description": "Pi extension bundle for a write sandbox, subagents, background tasks, SSH, goals, and Outcome & Todo.",
   "license": "MIT",
   "type": "module",
@@ -58,7 +58,7 @@
     "pi-better-goal": "0.11.0",
     "pi-better-sandbox": "0.14.0",
     "pi-better-ssh": "0.1.4",
-    "pi-better-subagents": "0.25.0",
+    "pi-better-subagents": "0.25.1",
     "proper-lockfile": "^4.1.2",
     "shell-quote": "1.12.0",
     "smol-toml": "1.9.0",