pi-ptc-subagents 7.3.0 → 7.4.0

package/README.md

@@ -81,6 +81,35 @@ URL tracks the latest GitHub Release (pinned URLs get no update checks); run `/r
 activate. A bundled `ptc` skill teaches the model when to write a program instead of
 fanning out tool calls one by one.
 
+## The engine on its own (no model, no pi)
+
+The PTC runtime is a zero-dependency engine inside this package. Install it and run programs
+with no model in the loop — a batch job, a CI step, or a script you wrote yourself.
+
+```bash
+npm i pi-ptc-subagents
+```
+
+```ts
+import { createFsBindings, runPtcProgram } from "pi-ptc-subagents/ptc";
+
+const outcome = await runPtcProgram({
+  code: `const files = await tools.glob({ pattern: "*.md" });
+         return { files, hits: await tools.grep({ pattern: "TODO", path: "." }) };`,
+  bindings: createFsBindings(process.cwd()),
+  cwd: process.cwd(),
+});
+```
+
+Or from the shell:
+
+```bash
+ptc prog.ts --workdir .
+```
+
+The program sees the same vm cell as on pi: `tools.*` is the only door out, and the file tool
+set is confined to `workdir`. The engine pulls in nothing — no pi, no dependencies at all.
+
 ## Install (pi)
 
 ```bash
@@ -128,9 +157,14 @@ full pi process running as you. `bash` is not in the program binding table on ei
 
 pi `>= 0.86.0`, tracked against latest (currently 1.4.0). Two version facts matter:
 
-- **In-program `tools.*` needs pi ≥ 0.99.** On 0.86/0.87 a program still evaluates and can
-  still dispatch a task, but session-tool calls fail with a clear version error. The
-  codemode surface itself also only exists from 0.99.
+- **In-program session tools need pi ≥ 0.99 for the nested call channel.** On 0.86/0.87 a
+  program still evaluates, still dispatches tasks, and still calls `read` / `write` / `edit` /
+  `grep` / `ls` / `find` — pi has no nested tool-call channel there, so the extension builds
+  pi's own tool definitions (its public `create*ToolDefinition` factories) and calls them
+  directly. Same tools, same parameter shapes as 0.99; only the call path differs. The
+  codemode surface itself still only exists from 0.99. That fallback is gated on the pi
+  version: on 0.99+ a missing call channel is an error, not a silent bypass of pi's tool
+  pipeline.
 - Everything else in the 0.86–1.4 range is covered by real-machine smoke tests, including
   a program that dispatches a real child process. Per-version details:
   [docs/pi-version-matrix.md](./docs/pi-version-matrix.md).

package/dist/index.js

@@ -1,3 +1,4 @@
+import * as piHost from "@earendil-works/pi-coding-agent";
 import { getAgentDir } from "@earendil-works/pi-coding-agent";
 import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
@@ -3905,34 +3906,73 @@ var TaskEngine = class {
 	}
 };
 // ../tui/src/bounds.ts
-const RENDER_BOUNDS$1 = {
+const RENDER_BOUNDS = {
 	MAX_LOG_LINES_EXPANDED: 12,
 	VALUE_TREE_MAX_DEPTH: 4,
 	VALUE_TREE_MAX_CHILDREN: 6,
 	VALUE_TREE_MAX_LINE_CHARS: 120
 };
 // ../tui/src/text.ts
-const ANSI_PATTERN$1 = /\x1B\[[0-9:;<=>?]*[ -/]*[@-~]|\x1B\][^\x07\x1B]*(?:\x07|\x1B\\)|[\x00-\x08\x0B\x0C\x0E-\x1F\x7F]/g;
-function stripAnsi$1(text) {
-	return text.replace(ANSI_PATTERN$1, "");
+const ANSI_PATTERN = /\x1B\[[0-9:;<=>?]*[ -/]*[@-~]|\x1B\][^\x07\x1B]*(?:\x07|\x1B\\)|[\x00-\x08\x0B\x0C\x0E-\x1F\x7F]/g;
+function stripAnsi(text) {
+	return text.replace(ANSI_PATTERN, "");
 }
-function sanitizeText$1(text) {
-	return stripAnsi$1(text.replace(/\r/g, ""));
+function sanitizeText(text) {
+	return stripAnsi(text.replace(/\r/g, ""));
 }
-const MAX_LINE_CHARS$1 = RENDER_BOUNDS$1.VALUE_TREE_MAX_LINE_CHARS;
-function truncateLine$1(line, maxChars = MAX_LINE_CHARS$1) {
+const MAX_LINE_CHARS = RENDER_BOUNDS.VALUE_TREE_MAX_LINE_CHARS;
+function truncateLine(line, maxChars = MAX_LINE_CHARS) {
 	if (line.length <= maxChars) return line;
 	let cut = maxChars;
 	while (cut > 0 && (line.charCodeAt(cut) & 64512) === 56320) cut--;
 	return `${line.slice(0, cut)}…`;
 }
+function renderModelValue(value, depth = 0, seen = /* @__PURE__ */ new WeakSet()) {
+	const pad = "  ".repeat(depth);
+	if (depth >= RENDER_BOUNDS.VALUE_TREE_MAX_DEPTH) return "…";
+	if (typeof value === "string") return depth === 0 ? value : JSON.stringify(value);
+	if (value === null || typeof value === "number" || typeof value === "boolean") return String(value);
+	if (undefinedValue(value)) return "（无完成值）";
+	if (value !== null && typeof value === "object") {
+		if (seen.has(value)) return "[Circular]";
+		seen.add(value);
+	}
+	if (Array.isArray(value)) {
+		const shown = value.slice(0, RENDER_BOUNDS.VALUE_TREE_MAX_CHILDREN);
+		const rest = value.length - shown.length;
+		const oneLine = `[${shown.map((v) => JSON.stringify(v)).join(", ")}]`;
+		const rendered = value.length === 0 ? "[]" : rest === 0 && shown.every((v) => primitive(v)) && oneLine.length <= MAX_LINE_CHARS ? oneLine : `[\n${shown.map((v) => truncateLine(`${pad}  ${renderModelValue(v, depth + 1, seen)}`)).join(",\n")}${rest > 0 ? `,\n${pad}  …（余 ${rest} 项）` : ""}\n${pad}]`;
+		seen.delete(value);
+		return rendered;
+	}
+	if (value !== null && typeof value === "object") {
+		const entries = Object.entries(value);
+		const shown = entries.slice(0, RENDER_BOUNDS.VALUE_TREE_MAX_CHILDREN);
+		const rest = entries.length - shown.length;
+		const oneLine = `{ ${shown.map(([k, v]) => `${k}: ${JSON.stringify(v)}`).join(", ")} }`;
+		const rendered = entries.length === 0 ? "{}" : rest === 0 && shown.every(([, v]) => primitive(v)) && oneLine.length <= MAX_LINE_CHARS ? oneLine : `{\n${shown.map(([k, v]) => truncateLine(`${pad}  ${k}: ${renderModelValue(v, depth + 1, seen)}`)).join(",\n")}${rest > 0 ? `,\n${pad}  …（余 ${rest} 项）` : ""}\n${pad}}`;
+		seen.delete(value);
+		return rendered;
+	}
+	return String(value);
+}
+function primitive(v) {
+	return v === null || [
+		"string",
+		"number",
+		"boolean"
+	].includes(typeof v);
+}
+function undefinedValue(value) {
+	return typeof value === "object" && value !== null && value.$void === true;
+}
 // ../tui/src/truncate.ts
-const TRUNCATION_MAX_BYTES$1 = 51200;
-const TMP_FILE_TTL_MS$1 = 864e5;
-const TMP_FILE_PREFIX$1 = "pi-ptc-output-";
-let sweptTmp$1 = false;
-function sweepExpiredTmp$1() {
-	sweptTmp$1 = true;
+const TRUNCATION_MAX_BYTES = 51200;
+const TMP_FILE_TTL_MS = 864e5;
+const TMP_FILE_PREFIX = "pi-ptc-output-";
+let sweptTmp = false;
+function sweepExpiredTmp() {
+	sweptTmp = true;
 	let names;
 	try {
 		names = readdirSync(tmpdir());
@@ -3940,14 +3980,14 @@ function sweepExpiredTmp$1() {
 		return;
 	}
 	for (const name of names) {
-		if (!name.startsWith(TMP_FILE_PREFIX$1)) continue;
+		if (!name.startsWith(TMP_FILE_PREFIX)) continue;
 		try {
 			const file = join(tmpdir(), name);
-			if (Date.now() - statSync(file).mtimeMs > TMP_FILE_TTL_MS$1) rmSync(file, { force: true });
+			if (Date.now() - statSync(file).mtimeMs > TMP_FILE_TTL_MS) rmSync(file, { force: true });
 		} catch {}
 	}
 }
-function applyAdr0015Truncation$1(text) {
+function applyAdr0015Truncation(text) {
 	const lines = text.split("\n");
 	const bytes = Buffer.byteLength(text, "utf8");
 	if (bytes <= 51200 && lines.length <= 2e3) return {
@@ -3961,11 +4001,11 @@ function applyAdr0015Truncation$1(text) {
 		kept = keptLines.join("\n");
 	}
 	const keptBuffer = Buffer.from(kept, "utf8");
-	if (keptBuffer.length > 51200) kept = keptBuffer.subarray(keptBuffer.length - TRUNCATION_MAX_BYTES$1).toString("utf8");
-	const fullOutputPath = join(tmpdir(), `${TMP_FILE_PREFIX$1}${randomUUID()}.txt`);
+	if (keptBuffer.length > 51200) kept = keptBuffer.subarray(keptBuffer.length - TRUNCATION_MAX_BYTES).toString("utf8");
+	const fullOutputPath = join(tmpdir(), `${TMP_FILE_PREFIX}${randomUUID()}.txt`);
 	mkdirSync(tmpdir(), { recursive: true });
 	writeFileSync(fullOutputPath, text, "utf8");
-	if (!sweptTmp$1) sweepExpiredTmp$1();
+	if (!sweptTmp) sweepExpiredTmp();
 	return {
 		text: [`…（已截断：省略前 ${lines.length - keptLines.length} 行 / ${bytes - Buffer.byteLength(kept, "utf8")} 字节，全文在 ${fullOutputPath}）`, kept].join("\n"),
 		truncated: true,
@@ -3988,10 +4028,10 @@ function projectTaskEntry(record, options = {}) {
 	return {
 		id: record.id,
 		status: record.status,
-		...record.label ? { label: truncateLine$1(record.label, LABEL_MAX_CHARS) } : {},
+		...record.label ? { label: truncateLine(record.label, LABEL_MAX_CHARS) } : {},
 		...record.finishedAt !== void 0 ? { finishedAt: record.finishedAt } : {},
-		...record.task ? { task: truncateLine$1(record.task, TASK_TEXT_MAX_CHARS) } : {},
-		...record.report?.summary ? { summary: truncateLine$1(record.report.summary, SUMMARY_MAX_CHARS) } : {},
+		...record.task ? { task: truncateLine(record.task, TASK_TEXT_MAX_CHARS) } : {},
+		...record.report?.summary ? { summary: truncateLine(record.report.summary, SUMMARY_MAX_CHARS) } : {},
 		...options.archived ? { archived: true } : {},
 		...options.withSession && record.sessionId ? { sessionId: record.sessionId } : {}
 	};
@@ -4250,9 +4290,9 @@ async function readTaskOutput(source, record) {
 	const tail = await source.readOutputTail(taskId, 51200) ?? "";
 	let answer = parseChildStream(tail).text;
 	if (!answer && outputBytes > 51200) answer = parseChildStream(await source.readOutput(taskId) ?? "").text;
-	if (answer) return { text: applyAdr0015Truncation$1(answer).text };
+	if (answer) return { text: applyAdr0015Truncation(answer).text };
 	return {
-		output: applyAdr0015Truncation$1(tail).text,
+		output: applyAdr0015Truncation(tail).text,
 		guidance: renderLongOutputGuidance({
 			bytes: outputBytes,
 			report: record.report,
@@ -4512,14 +4552,14 @@ async function runWebSearch(action, context) {
 		};
 		return {
 			ok: true,
-			text: sanitizeText$1(renderSearchOverview(outcome.value, budget))
+			text: sanitizeText(renderSearchOverview(outcome.value, budget))
 		};
 	}
 	if (action.kind === "open") {
 		const cached = context.memory.lookup(action.url);
 		if (cached !== void 0) return {
 			ok: true,
-			text: sanitizeText$1(`（记忆命中，未发请求）\n${cached.slice(0, budget)}`)
+			text: sanitizeText(`（记忆命中，未发请求）\n${cached.slice(0, budget)}`)
 		};
 		if (!context.quota.tryAcquire()) return {
 			ok: false,
@@ -4538,7 +4578,7 @@ async function runWebSearch(action, context) {
 		context.memory.storeText(action.url, outcome.value);
 		return {
 			ok: true,
-			text: sanitizeText$1(outcome.value.slice(0, budget))
+			text: sanitizeText(outcome.value.slice(0, budget))
 		};
 	}
 	let regex;
@@ -4558,7 +4598,7 @@ async function runWebSearch(action, context) {
 	})).filter(({ line }) => regex.test(line));
 	return {
 		ok: true,
-		text: sanitizeText$1(lines.length > 0 ? lines.slice(0, 50).map(({ line, index }) => `${index + 1}: ${line}`).join("\n") : "（页内无匹配行）").slice(0, budget)
+		text: sanitizeText(lines.length > 0 ? lines.slice(0, 50).map(({ line, index }) => `${index + 1}: ${line}`).join("\n") : "（页内无匹配行）").slice(0, budget)
 	};
 }
 /** 页文获取：记忆命中免费；否则占额抓取并回存记忆 */
@@ -4651,50 +4691,6 @@ function createWebDsSearchTool(context) {
 		}
 	};
 }
-// ../ptc/src/task-binding.ts
-const TASK_BINDING_NAME = "pi_task_ptc";
-const TASK_DOOR_PARAMETERS = _Object_({
-	task: String$1({
-		minLength: 1,
-		description: TASK_DOOR_PARAM_DESCRIPTIONS.task
-	}),
-	agent: Optional(String$1({ description: TASK_DOOR_PARAM_DESCRIPTIONS.agent })),
-	why: Optional(String$1({ description: TASK_DOOR_PARAM_DESCRIPTIONS.why })),
-	agentScope: Optional(Union([
-		Literal("user"),
-		Literal("project"),
-		Literal("both")
-	], { description: TASK_DOOR_PARAM_DESCRIPTIONS.agentScope })),
-	model: Optional(String$1({ description: TASK_DOOR_PARAM_DESCRIPTIONS.model })),
-	thinkingLevel: Optional(String$1({ description: TASK_DOOR_PARAM_DESCRIPTIONS.thinkingLevel })),
-	wait: Optional(Boolean$1({ description: TASK_DOOR_PARAM_DESCRIPTIONS.wait })),
-	label: Optional(String$1({ description: TASK_DOOR_PARAM_DESCRIPTIONS.label })),
-	readOnly: Optional(Union([Literal("strict"), Literal("lenient")], { description: TASK_DOOR_PARAM_DESCRIPTIONS.readOnly })),
-	timeoutMs: Optional(Number$1({ description: TASK_DOOR_PARAM_DESCRIPTIONS.timeoutMs })),
-	projectContext: Optional(Union([Literal("auto"), Literal("none")], { description: TASK_DOOR_PARAM_DESCRIPTIONS.projectContext }))
-});
-function createTaskBinding(door) {
-	return {
-		name: TASK_BINDING_NAME,
-		parameters: TASK_DOOR_PARAMETERS,
-		execute(args) {
-			const input = args ?? {};
-			return door.createTask(input.task, {
-				label: input.label,
-				wait: input.wait,
-				why: input.why,
-				model: input.model,
-				thinkingLevel: input.thinkingLevel,
-				agent: input.agent,
-				agentScope: input.agentScope,
-				readOnly: input.readOnly,
-				timeoutMs: input.timeoutMs,
-				projectContext: input.projectContext
-			});
-		}
-	};
-}
-const TASK_RECORDS_BINDING_NAME = "task_records";
 // ../ptc/src/limits.ts
 const DEFAULT_LIMITS = {
 	timeoutMs: 12e4,
@@ -5023,127 +5019,7 @@ var WorkerPool = class {
 		this.#spawned = Math.max(0, this.#spawned - 1);
 	}
 };
-// ../ptc/src/bindings.ts
-const KNOWN_BINDING_NAMES = [
-	"read",
-	"bash",
-	"grep",
-	"find",
-	"ls",
-	"edit",
-	"write"
-];
-const OPT_IN_BINDING_NAMES = ["bash"];
-const DEFAULT_BINDING_NAMES = KNOWN_BINDING_NAMES.filter((name) => !OPT_IN_BINDING_NAMES.includes(name));
-function resolveBindingNames(activeToolNames, optIns = []) {
-	const allowed = /* @__PURE__ */ new Set([...DEFAULT_BINDING_NAMES, ...optIns]);
-	return KNOWN_BINDING_NAMES.filter((name) => activeToolNames.includes(name) && allowed.has(name));
-}
-// ../output/dist/index.js
-const RENDER_BOUNDS = {
-	MAX_LOG_LINES_EXPANDED: 12,
-	VALUE_TREE_MAX_DEPTH: 4,
-	VALUE_TREE_MAX_CHILDREN: 6,
-	VALUE_TREE_MAX_LINE_CHARS: 120
-};
-const ANSI_PATTERN = /\x1B\[[0-9:;<=>?]*[ -/]*[@-~]|\x1B\][^\x07\x1B]*(?:\x07|\x1B\\)|[\x00-\x08\x0B\x0C\x0E-\x1F\x7F]/g;
-function stripAnsi(text) {
-	return text.replace(ANSI_PATTERN, "");
-}
-function sanitizeText(text) {
-	return stripAnsi(text.replace(/\r/g, ""));
-}
-const MAX_LINE_CHARS = RENDER_BOUNDS.VALUE_TREE_MAX_LINE_CHARS;
-function truncateLine(line, maxChars = MAX_LINE_CHARS) {
-	if (line.length <= maxChars) return line;
-	let cut = maxChars;
-	while (cut > 0 && (line.charCodeAt(cut) & 64512) === 56320) cut--;
-	return `${line.slice(0, cut)}…`;
-}
-function renderModelValue(value, depth = 0, seen = /* @__PURE__ */ new WeakSet()) {
-	const pad = "  ".repeat(depth);
-	if (depth >= RENDER_BOUNDS.VALUE_TREE_MAX_DEPTH) return "…";
-	if (typeof value === "string") return depth === 0 ? value : JSON.stringify(value);
-	if (value === null || typeof value === "number" || typeof value === "boolean") return String(value);
-	if (undefinedValue(value)) return "（无完成值）";
-	if (value !== null && typeof value === "object") {
-		if (seen.has(value)) return "[Circular]";
-		seen.add(value);
-	}
-	if (Array.isArray(value)) {
-		const shown = value.slice(0, RENDER_BOUNDS.VALUE_TREE_MAX_CHILDREN);
-		const rest = value.length - shown.length;
-		const oneLine = `[${shown.map((v) => JSON.stringify(v)).join(", ")}]`;
-		const rendered = value.length === 0 ? "[]" : rest === 0 && shown.every((v) => primitive(v)) && oneLine.length <= MAX_LINE_CHARS ? oneLine : `[\n${shown.map((v) => truncateLine(`${pad}  ${renderModelValue(v, depth + 1, seen)}`)).join(",\n")}${rest > 0 ? `,\n${pad}  …（余 ${rest} 项）` : ""}\n${pad}]`;
-		seen.delete(value);
-		return rendered;
-	}
-	if (value !== null && typeof value === "object") {
-		const entries = Object.entries(value);
-		const shown = entries.slice(0, RENDER_BOUNDS.VALUE_TREE_MAX_CHILDREN);
-		const rest = entries.length - shown.length;
-		const oneLine = `{ ${shown.map(([k, v]) => `${k}: ${JSON.stringify(v)}`).join(", ")} }`;
-		const rendered = entries.length === 0 ? "{}" : rest === 0 && shown.every(([, v]) => primitive(v)) && oneLine.length <= MAX_LINE_CHARS ? oneLine : `{\n${shown.map(([k, v]) => truncateLine(`${pad}  ${k}: ${renderModelValue(v, depth + 1, seen)}`)).join(",\n")}${rest > 0 ? `,\n${pad}  …（余 ${rest} 项）` : ""}\n${pad}}`;
-		seen.delete(value);
-		return rendered;
-	}
-	return String(value);
-}
-function primitive(v) {
-	return v === null || [
-		"string",
-		"number",
-		"boolean"
-	].includes(typeof v);
-}
-function undefinedValue(value) {
-	return typeof value === "object" && value !== null && value.$void === true;
-}
-const TRUNCATION_MAX_BYTES = 51200;
-const TMP_FILE_TTL_MS = 864e5;
-const TMP_FILE_PREFIX = "pi-ptc-output-";
-let sweptTmp = false;
-function sweepExpiredTmp() {
-	sweptTmp = true;
-	let names;
-	try {
-		names = readdirSync(tmpdir());
-	} catch {
-		return;
-	}
-	for (const name of names) {
-		if (!name.startsWith(TMP_FILE_PREFIX)) continue;
-		try {
-			const file = join(tmpdir(), name);
-			if (Date.now() - statSync(file).mtimeMs > TMP_FILE_TTL_MS) rmSync(file, { force: true });
-		} catch {}
-	}
-}
-function applyAdr0015Truncation(text) {
-	const lines = text.split("\n");
-	const bytes = Buffer.byteLength(text, "utf8");
-	if (bytes <= 51200 && lines.length <= 2e3) return {
-		text,
-		truncated: false
-	};
-	let keptLines = lines.slice(-2e3);
-	let kept = keptLines.join("\n");
-	while (Buffer.byteLength(kept, "utf8") > 51200 && keptLines.length > 1) {
-		keptLines = keptLines.slice(Math.max(1, Math.floor(keptLines.length / 2)));
-		kept = keptLines.join("\n");
-	}
-	const keptBuffer = Buffer.from(kept, "utf8");
-	if (keptBuffer.length > 51200) kept = keptBuffer.subarray(keptBuffer.length - TRUNCATION_MAX_BYTES).toString("utf8");
-	const fullOutputPath = join(tmpdir(), `${TMP_FILE_PREFIX}${randomUUID()}.txt`);
-	mkdirSync(tmpdir(), { recursive: true });
-	writeFileSync(fullOutputPath, text, "utf8");
-	if (!sweptTmp) sweepExpiredTmp();
-	return {
-		text: [`…（已截断：省略前 ${lines.length - keptLines.length} 行 / ${bytes - Buffer.byteLength(kept, "utf8")} 字节，全文在 ${fullOutputPath}）`, kept].join("\n"),
-		truncated: true,
-		fullOutputPath
-	};
-}
+// ../output/src/result-text.ts
 function renderToolResult(outcome) {
 	let body;
 	if (outcome.status === "fulfilled") body = (outcome.logs.length > 0 ? [...outcome.logs, renderModelValue(outcome.value)] : [renderModelValue(outcome.value)]).join("\n");
@@ -5156,7 +5032,7 @@ function renderToolResult(outcome) {
 		fullOutputPath
 	};
 }
-// ../ptc/src/render.ts
+// src/ptc-render.ts
 function renderPtcResult(surface) {
 	return (result, options, _theme, context) => {
 		const args = context.args;
@@ -5175,14 +5051,14 @@ function renderPtcResult(surface) {
 		if (options.expanded && !options.isPartial) for (const block of result.content) {
 			if (block.type !== "text") continue;
 			const lines = block.text.split("\n");
-			const kept = lines.slice(0, RENDER_BOUNDS$1.MAX_LOG_LINES_EXPANDED);
+			const kept = lines.slice(0, RENDER_BOUNDS.MAX_LOG_LINES_EXPANDED);
 			for (const line of kept) box.addChild(new Text(line));
 			if (lines.length > kept.length) box.addChild(new Text(`…（共 ${lines.length} 行，省略 ${lines.length - kept.length} 行）`));
 		}
 		return box;
 	};
 }
-// ../ptc/src/tools.ts
+// src/ptc-tools.ts
 const RUN_CODE_PARAMETERS = _Object_({
 	code: String$1({ description: "要执行的 TypeScript 程序体，可用顶层 await 和 return" }),
 	description: String$1({ description: "这段程序要干什么（给人看的一行）" }),
@@ -5297,6 +5173,66 @@ function validateWorkflowArgs(args) {
 		throw new Error(`workflow args 必须是 JSON 值：${error instanceof Error ? error.message : String(error)}`);
 	}
 }
+// src/ptc-bindings.ts
+const KNOWN_BINDING_NAMES = [
+	"read",
+	"bash",
+	"grep",
+	"find",
+	"ls",
+	"edit",
+	"write"
+];
+const OPT_IN_BINDING_NAMES = ["bash"];
+const DEFAULT_BINDING_NAMES = KNOWN_BINDING_NAMES.filter((name) => !OPT_IN_BINDING_NAMES.includes(name));
+function resolveBindingNames(activeToolNames, optIns = []) {
+	const allowed = /* @__PURE__ */ new Set([...DEFAULT_BINDING_NAMES, ...optIns]);
+	return KNOWN_BINDING_NAMES.filter((name) => activeToolNames.includes(name) && allowed.has(name));
+}
+// src/task-binding.ts
+const TASK_BINDING_NAME = "pi_task_ptc";
+const TASK_DOOR_PARAMETERS = _Object_({
+	task: String$1({
+		minLength: 1,
+		description: TASK_DOOR_PARAM_DESCRIPTIONS.task
+	}),
+	agent: Optional(String$1({ description: TASK_DOOR_PARAM_DESCRIPTIONS.agent })),
+	why: Optional(String$1({ description: TASK_DOOR_PARAM_DESCRIPTIONS.why })),
+	agentScope: Optional(Union([
+		Literal("user"),
+		Literal("project"),
+		Literal("both")
+	], { description: TASK_DOOR_PARAM_DESCRIPTIONS.agentScope })),
+	model: Optional(String$1({ description: TASK_DOOR_PARAM_DESCRIPTIONS.model })),
+	thinkingLevel: Optional(String$1({ description: TASK_DOOR_PARAM_DESCRIPTIONS.thinkingLevel })),
+	wait: Optional(Boolean$1({ description: TASK_DOOR_PARAM_DESCRIPTIONS.wait })),
+	label: Optional(String$1({ description: TASK_DOOR_PARAM_DESCRIPTIONS.label })),
+	readOnly: Optional(Union([Literal("strict"), Literal("lenient")], { description: TASK_DOOR_PARAM_DESCRIPTIONS.readOnly })),
+	timeoutMs: Optional(Number$1({ description: TASK_DOOR_PARAM_DESCRIPTIONS.timeoutMs })),
+	projectContext: Optional(Union([Literal("auto"), Literal("none")], { description: TASK_DOOR_PARAM_DESCRIPTIONS.projectContext }))
+});
+function createTaskBinding(door) {
+	return {
+		name: TASK_BINDING_NAME,
+		parameters: TASK_DOOR_PARAMETERS,
+		execute(args) {
+			const input = args ?? {};
+			return door.createTask(input.task, {
+				label: input.label,
+				wait: input.wait,
+				why: input.why,
+				model: input.model,
+				thinkingLevel: input.thinkingLevel,
+				agent: input.agent,
+				agentScope: input.agentScope,
+				readOnly: input.readOnly,
+				timeoutMs: input.timeoutMs,
+				projectContext: input.projectContext
+			});
+		}
+	};
+}
+const TASK_RECORDS_BINDING_NAME = "task_records";
 // src/session.ts
 function assemblePtcSession(options = {}) {
 	const registry = new TaskRegistry(options.onTransition);
@@ -5552,10 +5488,15 @@ function piPtcEntry(pi) {
 			}] };
 		});
 		let toolContext;
-		const getBindings = () => createBindingTable(pi, session, () => toolContext);
+		const cwd = process.cwd();
+		const getBindings = () => createBindingTable(pi, session, () => toolContext, {
+			cwd,
+			extCtx: ctx,
+			piVersion
+		});
 		registerPtcTools(registerTracked, {
 			getBindings,
-			cwd: process.cwd(),
+			cwd,
 			surface,
 			getPool: () => pool,
 			onToolContext: (ctx) => {
@@ -5687,13 +5628,52 @@ function normalizeToolValue(value) {
 	}
 	return value;
 }
-function createBindingTable(pi, session, getToolContext) {
+const PI_TOOL_FACTORIES = Object.fromEntries([
+	"read",
+	"write",
+	"edit",
+	"grep",
+	"ls",
+	"find"
+].map((name) => [name, piHost[`create${name[0].toUpperCase()}${name.slice(1)}ToolDefinition`]]));
+function hasNestedToolCalls(piVersion) {
+	if (!piVersion) return true;
+	const [major = "0", minor = "0"] = piVersion.trim().replace(/^v/, "").split(".");
+	const M = Number.parseInt(major, 10);
+	const m = Number.parseInt(minor, 10);
+	if (Number.isNaN(M) || Number.isNaN(m)) return true;
+	return M > 0 || M === 0 && m >= 99;
+}
+function createBindingTable(pi, session, getToolContext, env) {
+	const { cwd, extCtx, piVersion } = env;
 	const active = pi.getActiveTools();
 	const known = new Set(KNOWN_BINDING_NAMES);
 	const names = resolveBindingNames(!getToolContext() && !active.some((name) => known.has(name)) ? pi.getAllTools().map((tool) => tool.name) : active);
+	let piTools;
+	const piToolFor = (name) => {
+		if (!piTools) {
+			piTools = {};
+			for (const [tool, factory] of Object.entries(PI_TOOL_FACTORIES)) if (typeof factory === "function") piTools[tool] = factory(cwd);
+		}
+		return piTools[name];
+	};
 	const table = Object.fromEntries(names.map((name) => [name, async (args, callCtx) => {
 		const ctx = getToolContext();
-		if (!ctx?.executeTool) throw new Error(`此 pi 版本没有程序内调用工具的通道（需 pi ≥ 0.99，binding: ${name}）`);
+		if (!ctx?.executeTool) {
+			const def = hasNestedToolCalls(piVersion) ? void 0 : piToolFor(name);
+			if (!def) throw new Error(`此 pi 版本没有程序内调用工具的通道（需 pi ≥ 0.99，binding: ${name}）`);
+			const prepared = def.prepareArguments ? def.prepareArguments(args) : args;
+			const result = await def.execute(`ptc-${name}`, prepared, callCtx.signal, void 0, extCtx);
+			for (const block of result.content ?? []) if (block.type === "image") callCtx.emitImage(block);
+			if (result.isError) {
+				const text = (result.content ?? []).map((block) => {
+					const obj = block;
+					return obj.type === "text" ? obj.text ?? "" : `[${obj.type ?? "block"}]`;
+				}).join("\n");
+				throw new Error(text || `工具 ${name} 执行失败`);
+			}
+			return normalizeToolValue(result.structuredContent ?? result.content);
+		}
 		const outcome = await ctx.executeTool(name, args, { signal: callCtx.signal });
 		for (const block of outcome.result.content) if (block.type === "image") callCtx.emitImage(block);
 		if (outcome.isError) {

package/dist/ptc/cli.js

@@ -0,0 +1,61 @@
+#!/usr/bin/env node
+import { n as runPtcProgram, t as createFsBindings } from "./fs-bindings-DCGErhvt.js";
+import { readFileSync } from "node:fs";
+import { resolve } from "node:path";
+// src/cli.ts
+const USAGE = `用法：ptc <program.ts> [--workdir <dir>] [--timeout <ms>] [--json]
+
+程序在运行格里跑（看不见 process / fetch / 动态 import），能调的只有文件四件套
+（read / write / grep / glob / edit），且只在 workdir 内活动。`;
+function parseArgs(argv) {
+	let program = "";
+	let workdir = process.cwd();
+	let timeoutMs;
+	let json = false;
+	for (let i = 0; i < argv.length; i++) {
+		const arg = argv[i];
+		if (arg === "--json") json = true;
+		else if (arg === "--workdir" || arg === "-w") workdir = argv[++i] ?? workdir;
+		else if (arg === "--timeout") timeoutMs = Number(argv[++i]);
+		else if (arg.startsWith("-")) throw new Error(`未知参数 ${arg}`);
+		else if (program) throw new Error(`只能跑一个程序（多给了 ${arg}）`);
+		else program = arg;
+	}
+	if (!program) throw new Error(USAGE);
+	if (timeoutMs !== void 0 && !Number.isFinite(timeoutMs)) throw new Error("--timeout 要一个毫秒数");
+	return {
+		program,
+		workdir: resolve(workdir),
+		timeoutMs,
+		json
+	};
+}
+function isVoid(value) {
+	return typeof value === "object" && value !== null && "$void" in value;
+}
+async function main() {
+	const argv = process.argv.slice(2);
+	if (argv.length === 0 || argv.includes("--help") || argv.includes("-h")) {
+		console.log(USAGE);
+		return;
+	}
+	const options = parseArgs(argv);
+	const outcome = await runPtcProgram({
+		code: readFileSync(options.program, "utf8"),
+		cwd: options.workdir,
+		timeoutMs: options.timeoutMs,
+		bindings: createFsBindings(options.workdir)
+	});
+	for (const line of outcome.logs) console.error(line);
+	if (options.json) console.log(JSON.stringify(outcome, null, 2));
+	else if (outcome.status === "fulfilled") console.log(isVoid(outcome.value) ? "(程序无返回值)" : JSON.stringify(outcome.value, null, 2));
+	if (outcome.status !== "fulfilled") {
+		console.error(outcome.status === "canceled" ? outcome.reason : outcome.error);
+		process.exitCode = 1;
+	}
+}
+main().catch((error) => {
+	console.error(error instanceof Error ? error.message : String(error));
+	process.exitCode = 1;
+});
+export {};

package/dist/ptc/fs-bindings-DCGErhvt.js

@@ -0,0 +1,423 @@
+import { Worker } from "node:worker_threads";
+import { existsSync, globSync, readFileSync, readdirSync, realpathSync, renameSync, statSync, writeFileSync } from "node:fs";
+import { randomUUID } from "node:crypto";
+import { basename, dirname, resolve, sep } from "node:path";
+// src/limits.ts
+const DEFAULT_LIMITS = {
+	timeoutMs: 12e4,
+	maxTimeoutMs: 6e5,
+	graceMs: 3e3,
+	maxOutputBytes: 67108864,
+	maxPendingCalls: 128,
+	maxParallelSubCalls: 10,
+	poolSize: 4,
+	poolAcquireTimeoutMs: 3e4
+};
+function effectiveTimeoutMs(requested) {
+	if (requested === void 0) return DEFAULT_LIMITS.timeoutMs;
+	return Math.min(Math.max(requested, 1e3), DEFAULT_LIMITS.maxTimeoutMs);
+}
+// src/sub-calls.ts
+const PREVIEW_MAX_CHARS = 60;
+var SubCallTracker = class {
+	#records = /* @__PURE__ */ new Map();
+	#order = [];
+	start(callId, name, args) {
+		let preview = "";
+		try {
+			preview = JSON.stringify(args) ?? "";
+		} catch {
+			preview = String(args);
+		}
+		this.#records.set(callId, {
+			callId,
+			name,
+			argsPreview: preview.slice(0, PREVIEW_MAX_CHARS),
+			status: "running",
+			startedAt: performance.now()
+		});
+		this.#order.push(callId);
+	}
+	end(callId, status) {
+		const record = this.#records.get(callId);
+		if (!record) return;
+		record.status = status;
+		record.durationMs = Math.round(performance.now() - record.startedAt);
+	}
+	snapshot() {
+		return this.#order.map((callId) => this.#records.get(callId));
+	}
+};
+// src/worker-source.ts
+function buildWorkerUrl(from) {
+	const built = new URL("./worker.js", from);
+	if (existsSync(built)) return built;
+	return new URL("../src/worker-entry.ts", from);
+}
+// src/dispatcher.ts
+const WORKER_ENV_ALLOW_LIST = [
+	"PATH",
+	"PATHEXT",
+	"SYSTEMROOT",
+	"WINDIR",
+	"TEMP",
+	"TMP"
+];
+function workerEnv() {
+	return Object.fromEntries(WORKER_ENV_ALLOW_LIST.filter((key) => key in process.env).map((key) => [key, process.env[key]]));
+}
+function spawnPtcWorker() {
+	return new Worker(buildWorkerUrl(import.meta.url), {
+		env: workerEnv(),
+		execArgv: [],
+		resourceLimits: {
+			maxOldGenerationSizeMb: 512,
+			maxYoungGenerationSizeMb: 64
+		}
+	});
+}
+async function runPtcProgram(request) {
+	const timeoutMs = effectiveTimeoutMs(request.timeoutMs);
+	const cwd = request.cwd ?? process.cwd();
+	const worker = request.pool ? await request.pool.acquire() : spawnPtcWorker();
+	return new Promise((resolve) => {
+		const runId = crypto.randomUUID();
+		const logs = [];
+		const images = [];
+		const subCalls = new SubCallTracker();
+		let pendingCalls = 0;
+		let runningCalls = 0;
+		const callQueue = [];
+		const controllers = /* @__PURE__ */ new Set();
+		let settled = false;
+		let waitingReset = false;
+		let resetTimer;
+		const send = (frame) => worker.postMessage(frame);
+		const finish = (outcome) => {
+			if (settled) return;
+			settled = true;
+			clearTimeout(timer);
+			callQueue.length = 0;
+			for (const abort of controllers) abort.abort();
+			const withExtras = {
+				...outcome,
+				subCalls: subCalls.snapshot()
+			};
+			if (withExtras.status === "fulfilled" && images.length > 0) withExtras.images = images;
+			resolve(withExtras);
+			if (request.pool) {
+				waitingReset = true;
+				resetTimer = setTimeout(() => {
+					if (!waitingReset) return;
+					waitingReset = false;
+					request.pool.discard(worker);
+				}, DEFAULT_LIMITS.graceMs);
+				resetTimer.unref();
+				send({ kind: "reset" });
+			} else worker.terminate();
+		};
+		const timer = setTimeout(() => {
+			send({
+				kind: "cancel",
+				id: runId,
+				reason: "timeout"
+			});
+			finish({
+				status: "canceled",
+				reason: `timeout after ${timeoutMs}ms`,
+				logs
+			});
+		}, timeoutMs);
+		const onMessage = (frame) => {
+			if (settled && frame.kind !== "ready") return;
+			if (frame.kind === "ready") {
+				if (waitingReset) {
+					waitingReset = false;
+					if (resetTimer) clearTimeout(resetTimer);
+					worker.off("message", onMessage);
+					worker.off("error", onError);
+					worker.off("exit", onExit);
+					request.pool.release(worker);
+				}
+				return;
+			}
+			if (frame.runId !== runId) return;
+			if (frame.kind === "log") {
+				logs.push(frame.text);
+				return;
+			}
+			if (frame.kind === "call") {
+				if (pendingCalls >= DEFAULT_LIMITS.maxPendingCalls) {
+					send({
+						kind: "result",
+						callId: frame.callId,
+						ok: false,
+						error: `maxPendingCalls ${DEFAULT_LIMITS.maxPendingCalls} reached`
+					});
+					return;
+				}
+				pendingCalls++;
+				subCalls.start(frame.callId, frame.name, frame.args);
+				const execute = async () => {
+					if (settled) return;
+					const controller = new AbortController();
+					controllers.add(controller);
+					try {
+						const binding = request.bindings[frame.name];
+						if (!binding) {
+							subCalls.end(frame.callId, "rejected");
+							send({
+								kind: "result",
+								callId: frame.callId,
+								ok: false,
+								error: `unknown binding ${frame.name}`
+							});
+							return;
+						}
+						const value = await binding(frame.args, {
+							cwd,
+							emitImage: (image) => images.push(image),
+							signal: controller.signal
+						});
+						subCalls.end(frame.callId, "ok");
+						send({
+							kind: "result",
+							callId: frame.callId,
+							ok: true,
+							value: value === void 0 ? null : value
+						});
+					} catch (error) {
+						subCalls.end(frame.callId, "error");
+						send({
+							kind: "result",
+							callId: frame.callId,
+							ok: false,
+							error: error instanceof Error ? error.message : String(error)
+						});
+					} finally {
+						controllers.delete(controller);
+						pendingCalls--;
+						runningCalls--;
+						const next = callQueue.shift();
+						if (next) {
+							runningCalls++;
+							next();
+						}
+					}
+				};
+				if (runningCalls < DEFAULT_LIMITS.maxParallelSubCalls) {
+					runningCalls++;
+					execute();
+				} else callQueue.push(execute);
+				return;
+			}
+			if (frame.kind === "settled") {
+				const outcome = frame.outcome;
+				if (JSON.stringify({
+					logs: outcome.logs,
+					value: outcome.status === "fulfilled" ? outcome.value : void 0
+				}).length > DEFAULT_LIMITS.maxOutputBytes) {
+					finish({
+						status: "rejected",
+						error: `output exceeds ${DEFAULT_LIMITS.maxOutputBytes} bytes budget`,
+						logs
+					});
+					return;
+				}
+				finish(outcome);
+			}
+		};
+		worker.on("message", onMessage);
+		const onError = (error) => void finish({
+			status: "rejected",
+			error: `worker error: ${error instanceof Error ? error.message : String(error)}`,
+			logs
+		});
+		const onExit = (code) => {
+			if (!settled) finish({
+				status: "rejected",
+				error: `worker exited early with code ${code}`,
+				logs
+			});
+		};
+		worker.on("error", onError);
+		worker.on("exit", onExit);
+		send({
+			kind: "init",
+			surface: request.surface ?? "run_code",
+			bindingNames: Object.keys(request.bindings)
+		});
+		send({
+			kind: "run",
+			id: runId,
+			code: request.code,
+			args: request.args ?? {}
+		});
+	});
+}
+// src/fs-bindings.ts
+const SKIP_DIRS = /* @__PURE__ */ new Set(["node_modules", ".git"]);
+const SKIP_SUFFIXES = /* @__PURE__ */ new Set([
+	".png",
+	".jpg",
+	".jpeg",
+	".gif",
+	".webp",
+	".ico",
+	".zip",
+	".gz",
+	".tgz",
+	".pdf",
+	".woff",
+	".woff2",
+	".map"
+]);
+const GREP_MAX_RESULTS = 500;
+const GLOB_MAX_RESULTS = 1e3;
+const READ_MAX_BYTES = 2097152;
+const WRITE_MAX_BYTES = 2097152;
+function strArg(args, key) {
+	const value = args?.[key];
+	if (typeof value !== "string" || value.length === 0) throw new Error(`${key} 必须是非空字符串`);
+	return value;
+}
+function jailed(workdirReal, p) {
+	const abs = resolve(workdirReal, p);
+	let real;
+	try {
+		real = realpathSync(abs);
+	} catch {
+		real = resolve(realpathSync(dirname(abs)), basename(abs));
+	}
+	if (real !== workdirReal && !real.startsWith(workdirReal + sep)) throw new Error(`path escapes workdir: ${p}`);
+	return real;
+}
+function* walk(dir) {
+	let entries;
+	try {
+		entries = readdirSync(dir, { withFileTypes: true });
+	} catch {
+		return;
+	}
+	for (const entry of entries) if (entry.isDirectory()) {
+		if (SKIP_DIRS.has(entry.name)) continue;
+		yield* walk(resolve(dir, entry.name));
+	} else if (entry.isFile()) yield resolve(dir, entry.name);
+}
+function readPlainText(file) {
+	const stat = statSync(file);
+	const dot = file.lastIndexOf(".");
+	const suffix = dot === -1 ? "" : file.slice(dot).toLowerCase();
+	if (stat.size > READ_MAX_BYTES || SKIP_SUFFIXES.has(suffix)) return void 0;
+	const text = readFileSync(file, "utf8");
+	return text.includes("�") ? void 0 : text;
+}
+function createFsBindings(workdir, onCall) {
+	let workdirReal;
+	try {
+		workdirReal = realpathSync(resolve(workdir));
+	} catch {
+		throw new Error(`workdir 不存在或不可达: ${workdir}（workdir 传用户工作区绝对路径）`);
+	}
+	const table = {
+		read: async (args) => {
+			const real = jailed(workdirReal, strArg(args, "path"));
+			const stat = statSync(real);
+			if (!stat.isFile()) throw new Error(`not a file: ${strArg(args, "path")}`);
+			if (stat.size > READ_MAX_BYTES) throw new Error(`file too large (${stat.size} bytes > ${READ_MAX_BYTES})`);
+			return readFileSync(real, "utf8");
+		},
+		write: async (args) => {
+			const p = strArg(args, "path");
+			const content = strArg(args, "content");
+			const bytes = Buffer.byteLength(content, "utf8");
+			if (bytes > WRITE_MAX_BYTES) throw new Error(`content too large (${bytes} bytes > ${WRITE_MAX_BYTES} bytes)`);
+			const abs = resolve(workdirReal, p);
+			const parentAbs = dirname(abs);
+			if (!existsSync(parentAbs)) throw new Error(`parent dir does not exist: ${dirname(p)}（write 不隐式建目录）`);
+			const parentReal = jailed(workdirReal, parentAbs);
+			const real = resolve(parentReal, basename(abs));
+			const tmp = `${real}.ptc-${randomUUID()}`;
+			writeFileSync(tmp, content, "utf8");
+			renameSync(tmp, real);
+			return { written: real.slice(workdirReal.length + 1) };
+		},
+		grep: async (args) => {
+			const pattern = strArg(args, "pattern");
+			const scope = typeof args?.path === "string" ? jailed(workdirReal, strArg(args, "path")) : workdirReal;
+			let regex;
+			try {
+				regex = new RegExp(pattern);
+			} catch {
+				throw new Error(`invalid pattern: ${pattern}`);
+			}
+			const hits = [];
+			const files = statSync(scope).isFile() ? [scope] : walk(scope);
+			outer: for (const file of files) {
+				let text;
+				try {
+					text = readPlainText(file);
+				} catch {
+					continue;
+				}
+				if (text === void 0) continue;
+				const lines = text.split("\n");
+				for (let i = 0; i < lines.length; i++) if (regex.test(lines[i])) {
+					hits.push(`${file.slice(workdirReal.length + 1)}:${i + 1}: ${lines[i]}`);
+					if (hits.length >= GREP_MAX_RESULTS) {
+						hits.push(`…（已截断：达到 ${GREP_MAX_RESULTS} 条上限）`);
+						break outer;
+					}
+				}
+			}
+			return hits;
+		},
+		glob: async (args) => {
+			const pattern = strArg(args, "pattern");
+			let found;
+			try {
+				found = globSync(pattern, { cwd: workdirReal });
+			} catch {
+				throw new Error(`invalid glob: ${pattern}`);
+			}
+			return found.slice(0, GLOB_MAX_RESULTS);
+		},
+		edit: async (args) => {
+			const real = jailed(workdirReal, strArg(args, "path"));
+			const oldString = strArg(args, "old_string");
+			const newString = strArg(args, "new_string");
+			const text = readFileSync(real, "utf8");
+			const count = text.split(oldString).length - 1;
+			if (count === 0) throw new Error("old_string not found");
+			if (count > 1) throw new Error(`old_string matches ${count} places — must be unique`);
+			const tmp = `${real}.ptc-${randomUUID()}`;
+			writeFileSync(tmp, text.replace(oldString, newString), "utf8");
+			renameSync(tmp, real);
+			return { edited: real.slice(workdirReal.length + 1) };
+		}
+	};
+	if (!onCall) return table;
+	return {
+		read: (a) => {
+			onCall();
+			return table.read(a);
+		},
+		write: (a) => {
+			onCall();
+			return table.write(a);
+		},
+		grep: (a) => {
+			onCall();
+			return table.grep(a);
+		},
+		glob: (a) => {
+			onCall();
+			return table.glob(a);
+		},
+		edit: (a) => {
+			onCall();
+			return table.edit(a);
+		}
+	};
+}
+export { DEFAULT_LIMITS as i, runPtcProgram as n, spawnPtcWorker as r, createFsBindings as t };

package/dist/ptc/index.js

@@ -0,0 +1,77 @@
+import { i as DEFAULT_LIMITS, n as runPtcProgram, r as spawnPtcWorker, t as createFsBindings } from "./fs-bindings-DCGErhvt.js";
+// src/pool.ts
+var WorkerPool = class {
+	#spawn;
+	#capacity;
+	#idle = [];
+	#waiters = [];
+	#retired = /* @__PURE__ */ new WeakSet();
+	#spawned = 0;
+	#draining = false;
+	constructor(spawn, capacity = DEFAULT_LIMITS.poolSize) {
+		this.#spawn = spawn;
+		this.#capacity = capacity;
+	}
+	acquire(timeoutMs = DEFAULT_LIMITS.poolAcquireTimeoutMs) {
+		const idle = this.#idle.pop();
+		if (idle) return Promise.resolve(idle);
+		if (this.#spawned < this.#capacity) {
+			this.#draining = false;
+			this.#spawned++;
+			return Promise.resolve(this.#track(this.#spawn()));
+		}
+		return new Promise((resolve, reject) => {
+			const timer = setTimeout(() => {
+				const index = this.#waiters.findIndex((w) => w.timer === timer);
+				if (index >= 0) this.#waiters.splice(index, 1);
+				reject(/* @__PURE__ */ new Error(`worker acquire timed out after ${timeoutMs}ms`));
+			}, timeoutMs);
+			this.#waiters.push({
+				resolve,
+				timer
+			});
+		});
+	}
+	release(worker) {
+		if (this.#draining) {
+			this.#retire(worker);
+			worker.terminate();
+			return;
+		}
+		const waiter = this.#waiters.shift();
+		if (waiter) {
+			clearTimeout(waiter.timer);
+			waiter.resolve(worker);
+			return;
+		}
+		this.#idle.push(worker);
+	}
+	/** 被杀/卡死/崩溃的 worker：收回名额并摘出空闲表（terminate 幂等） */
+	discard(worker) {
+		this.#retire(worker);
+		const index = this.#idle.indexOf(worker);
+		if (index >= 0) this.#idle.splice(index, 1);
+		worker.terminate();
+	}
+	drain() {
+		this.#draining = true;
+		for (const worker of this.#idle.splice(0)) {
+			this.#retire(worker);
+			worker.terminate();
+		}
+	}
+	#track(worker) {
+		worker.once("exit", () => {
+			this.#retire(worker);
+			const index = this.#idle.indexOf(worker);
+			if (index >= 0) this.#idle.splice(index, 1);
+		});
+		return worker;
+	}
+	#retire(worker) {
+		if (this.#retired.has(worker)) return;
+		this.#retired.add(worker);
+		this.#spawned = Math.max(0, this.#spawned - 1);
+	}
+};
+export { DEFAULT_LIMITS, WorkerPool, createFsBindings, runPtcProgram, spawnPtcWorker };

package/dist/ptc/worker.js

@@ -0,0 +1,197 @@
+import { stripTypeScriptTypes } from "node:module";
+import { parentPort, workerData } from "node:worker_threads";
+import vm from "node:vm";
+// src/compile.ts
+function compileProgram(source) {
+	return `"use strict";\n${stripTypeScriptTypes(`async function __ptcProgram() {\n${source}\n}`, { mode: "strip" })}\n;globalThis.__ptcProgram = __ptcProgram;`;
+}
+// src/worker-main.ts
+const CELL_PREAMBLE = `"use strict";
+(function () {
+var __bridge = globalThis.__ptcCall;
+var __emit = globalThis.__ptcConsole;
+var __args = JSON.parse(globalThis.__ptcArgsJson);
+// contextified 全局属性不可 delete（vm 限制）但可写——置 undefined 即脱手，桥只剩序言闭包可达
+globalThis.__ptcCall = undefined;
+globalThis.__ptcConsole = undefined;
+globalThis.__ptcArgsJson = undefined;
+function __ptcFmt(v) {
+  if (typeof v === "string") return v;
+  try { var s = JSON.stringify(v); return s === undefined ? String(v) : s; } catch (e) { return String(v); }
+}
+function __ptcJoin(values) {
+  var out = [];
+  for (var i = 0; i < values.length; i++) out.push(__ptcFmt(values[i]));
+  return out.join(" ");
+}
+var __ptcTools = {};
+__PTC_NAMES__.forEach(function (name) {
+  __ptcTools[name] = function (args) {
+    return new Promise(function (resolve, reject) {
+      __bridge(name, JSON.stringify(args === undefined ? null : args)).then(function (json) {
+        var value;
+        try { value = JSON.parse(json); } catch (e) { reject(e); return; }
+        resolve(value);
+      }, reject);
+    });
+  };
+});
+globalThis.tools = Object.freeze(__ptcTools);
+globalThis.console = Object.freeze({
+  log: function () { __emit("log", __ptcJoin(arguments)); },
+  info: function () { __emit("info", __ptcJoin(arguments)); },
+  warn: function () { __emit("warn", __ptcJoin(arguments)); },
+  error: function () { __emit("error", __ptcJoin(arguments)); },
+  debug: function () { __emit("debug", __ptcJoin(arguments)); }
+});
+globalThis.args = Object.freeze(__args);
+if (__PTC_WORKFLOW__) {
+  globalThis.workflow = Object.freeze({
+    log: function () { __emit("log", __ptcJoin(arguments)); },
+    phase: function (name) { __emit("log", "— phase: " + name + " —"); },
+    parallel: function (items) { return Promise.allSettled(items.map(function (run) { return run(); })); },
+    pipeline: function (items, step) {
+      var results = [];
+      return items.reduce(function (chain, item, index) {
+        return chain.then(function () { return Promise.resolve(step(item, index)).then(function (r) { results.push(r); }); });
+      }, Promise.resolve()).then(function () { return results; });
+    }
+  });
+}
+})();
+`;
+function workerMain(deps) {
+	let bindingNames = [];
+	let surface = "run_code";
+	let pending = /* @__PURE__ */ new Map();
+	let nextCallId = 1;
+	let currentRunId = null;
+	let logs = [];
+	deps.onFrame((frame) => {
+		if (frame.kind === "init") {
+			bindingNames = frame.bindingNames;
+			surface = frame.surface;
+			deps.post({ kind: "ready" });
+			return;
+		}
+		if (frame.kind === "reset") {
+			currentRunId = null;
+			for (const { reject } of pending.values()) reject(/* @__PURE__ */ new Error("run reset：worker 被复用"));
+			pending = /* @__PURE__ */ new Map();
+			deps.post({ kind: "ready" });
+			return;
+		}
+		if (frame.kind === "result") {
+			const entry = pending.get(frame.callId);
+			if (!entry) return;
+			pending.delete(frame.callId);
+			if (frame.ok) {
+				let json;
+				try {
+					json = JSON.stringify(frame.value ?? null);
+				} catch {
+					json = void 0;
+				}
+				if (json === void 0) entry.reject(/* @__PURE__ */ new Error("binding 返回值不可 JSON 序列化（如循环引用）"));
+				else entry.resolve(json);
+			} else entry.reject(new Error(frame.error));
+			return;
+		}
+		if (frame.kind === "cancel") return;
+		run(frame.code, frame.id, frame.args);
+	});
+	function preamble() {
+		return CELL_PREAMBLE.replace(/__PTC_NAMES__/g, () => JSON.stringify(bindingNames)).replace(/__PTC_WORKFLOW__/g, () => surface === "workflow" ? "true" : "false");
+	}
+	async function run(code, runId, args) {
+		currentRunId = runId;
+		logs = [];
+		const postLog = (level, text) => {
+			logs.push(text);
+			deps.post({
+				kind: "log",
+				runId,
+				level,
+				text
+			});
+		};
+		const outcome = await execute(code, vm.createContext({
+			__ptcArgsJson: JSON.stringify(args ?? {}),
+			__ptcCall(name, argsJson) {
+				if (currentRunId === null) return Promise.reject(/* @__PURE__ */ new Error("run 已结束：reset 后不再接受工具调用"));
+				let parsed = null;
+				try {
+					parsed = JSON.parse(argsJson);
+				} catch {
+					return Promise.reject(/* @__PURE__ */ new Error("工具参数不是合法 JSON"));
+				}
+				const call = new Promise((resolve, reject) => {
+					const callId = nextCallId++;
+					pending.set(callId, {
+						resolve,
+						reject
+					});
+					deps.post({
+						kind: "call",
+						runId: currentRunId ?? "",
+						callId,
+						name,
+						args: parsed
+					});
+				});
+				call.catch(() => {});
+				return call;
+			},
+			__ptcConsole(level, text) {
+				postLog(level, String(text));
+			}
+		}));
+		deps.post({
+			kind: "settled",
+			runId,
+			outcome
+		});
+	}
+	function errorMessage(error) {
+		if (error instanceof Error) return error.message;
+		if (error && typeof error === "object" && typeof error.message === "string") return error.message;
+		return String(error);
+	}
+	async function execute(code, context) {
+		try {
+			vm.runInContext(preamble(), context, { filename: "ptc_preamble.js" });
+			vm.runInContext(compileProgram(code), context, { filename: "run_code.js" });
+			const value = await context.__ptcProgram.call(context);
+			if (value === void 0) return {
+				status: "fulfilled",
+				value: { $void: true },
+				logs
+			};
+			const json = JSON.stringify(value);
+			if (json === void 0) return {
+				status: "rejected",
+				error: "程序返回值不可序列化",
+				logs
+			};
+			return {
+				status: "fulfilled",
+				value: JSON.parse(json),
+				logs
+			};
+		} catch (error) {
+			return {
+				status: "rejected",
+				error: errorMessage(error),
+				logs
+			};
+		}
+	}
+}
+// src/worker-entry.ts
+if (!parentPort) throw new Error("worker-entry 只能在 worker 线程里加载");
+Object.freeze(workerData);
+workerMain({
+	post: (frame) => parentPort.postMessage(frame),
+	onFrame: (handler) => parentPort.on("message", (frame) => handler(frame))
+});
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-ptc-subagents",
-  "version": "7.3.0",
+  "version": "7.4.0",
   "description": "Programmable tool calling (PTC) and subagent fan-out for pi",
   "keywords": [
     "pi",
@@ -18,6 +18,9 @@
     "type": "git",
     "url": "git+https://github.com/a1121611810/pi-ptc-subagents.git"
   },
+  "bin": {
+    "ptc": "./dist/ptc/cli.js"
+  },
   "files": [
     "dist/**/*.js",
     "docs/routes/**/*.md",
@@ -27,18 +30,20 @@
   "type": "module",
   "main": "./dist/index.js",
   "exports": {
-    ".": "./dist/index.js"
+    ".": "./dist/index.js",
+    "./ptc": "./dist/ptc/index.js"
   },
   "scripts": {
     "build": "pnpm -r --filter=!@pi-ptc/website run build",
     "build:kimi": "pnpm --filter @pi-ptc/kimi-mcp run build && node scripts/assemble-kimi.mjs",
-    "prepack": "pnpm run build && rm -rf dist docs/routes && cp -R packages/entry/dist dist && cp -R packages/routes/docs/routes docs/routes",
+    "prepack": "pnpm run build && rm -rf dist docs/routes && cp -R packages/entry/dist dist && cp -R packages/ptc/dist dist/ptc && cp -R packages/routes/docs/routes docs/routes",
     "check": "pnpm -r --filter=!@pi-ptc/website run check",
     "lint": "oxlint",
-    "test": "pnpm run test:pi && pnpm run test:output && pnpm run test:kimi",
+    "test": "pnpm run test:pi && pnpm run test:output && pnpm run test:kimi && pnpm run test:standalone",
     "test:pi": "node --test tests/pi/*.test.mjs",
     "test:output": "node --test tests/output/*.test.mjs",
     "test:kimi": "node --test tests/kimi/*.test.mjs",
+    "test:standalone": "node --test tests/standalone/*.test.mjs",
     "pretest": "pnpm run build",
     "fmt": "oxfmt",
     "fmt:check": "oxfmt --check"