shariq-pi-extensions 0.5.0 → 0.5.1

package/docs/EXTENSIONS.md

@@ -58,4 +58,4 @@ Adds `/exit` as an alias for `/quit`.
 
 ## Tool exposure
 
-Pi 1.0 lets each tool choose how the model reaches it. Tools that ask the user, manage lifecycles, or change session state (questions, goals, task list, terminals, subagents) use `model-only` exposure: they stay declared to the model even with `codemode.mode: "only"`, and codemode scripts cannot call them. The read-only web tools keep the default `direct` exposure so scripts can call them in parallel. Read-only tools also declare `readOnlyHint` annotations for permission extensions.
+Pi 1.0 lets each tool choose how the model reaches it. Tools that ask the user, manage lifecycles, or change session state (questions, goals, task list, starting, writing to, or stopping terminals, subagents) use `model-only` exposure: they stay declared to the model even with `codemode.mode: "only"`, and codemode scripts cannot call them. The read-only web tools and `read_terminal` and `list_terminals` keep the default `direct` exposure so scripts can call them in parallel and filter their output. Read-only tools also declare `readOnlyHint` annotations for permission extensions.

package/extensions/background-terminals/README.md

@@ -10,7 +10,7 @@ Session-scoped background pseudo-terminals for Pi. The extension combines Codex-
 - `list_terminals` — list running and settled terminals.
 - `stop_terminal` — stop complete process groups with TERM-to-KILL escalation.
 
-Each output response carries a byte cursor; pass it to the next read or write to get only new output. The tools render as compact cards with expandable output, use `model-only` exposure, and running terminals appear in the shared **Active work** dock with elapsed time and the latest output line.
+`read_terminal` and `list_terminals` are read-only and callable from codemode scripts, so a script can filter a long log down to what matters; the tools that start, write to, or stop processes use `model-only` exposure. Each output response carries a byte cursor; pass it to the next read or write to get only new output. The tools render as compact cards with expandable output, and running terminals appear in the shared **Active work** dock with elapsed time and the latest output line.
 
 When a model-started terminal exits, its status and a bounded output tail are delivered as a custom message. An idle parent starts a new turn for it; a busy parent receives it, together with any other pending results, when its run settles. The message never appears as user-authored or follow-up input, and reading the terminal does not suppress it.
 

package/extensions/background-terminals/index.ts

@@ -230,7 +230,7 @@ export default function backgroundTerminals(pi: ExtensionAPI) {
     description:
       "Read a background terminal's output since a cursor; omit the cursor for the retained tail. " +
       "Use it when the user asks for progress or the process is waiting for input. Completion output arrives on its own.",
-    exposure: "model-only",
+    // Read-only, so codemode scripts may call it to filter large logs.
     annotations: { readOnlyHint: true, openWorldHint: false },
     parameters: Type.Object({
       id: Type.String({ description: 'Terminal id, such as "term-1".' }),
@@ -317,7 +317,6 @@ export default function backgroundTerminals(pi: ExtensionAPI) {
     name: "list_terminals",
     label: "List Background Terminals",
     description: "List background terminals with id, status, pid, elapsed time, and working directory.",
-    exposure: "model-only",
     annotations: { readOnlyHint: true, openWorldHint: false },
     parameters: Type.Object({}),
     async execute() {

package/extensions/subagents/README.md

@@ -44,7 +44,9 @@ Capability modes:
 - `execute`: the read-only set plus `bash` and background terminals, without direct edits;
 - `all`: every tool the child loads.
 
-Restrictive modes fail closed: an extension tool is unavailable until it is classified in `src/backends/pi.ts`. The session-only `task_list` tool is allowed in every mode.
+Restrictive modes fail closed: an extension tool is unavailable until it is classified in `src/backends/pi.ts`, and a child-only `tool_call` check refuses unclassified tools at call time, including tools registered later. The session-only `task_list` tool is allowed in every mode.
+
+Children load the same packages and extensions as the parent but not Pi's built-in extensions (`codemode`, MCP, and tool search), because Pi does not export them to extensions.
 
 Each tool call inside a child times out after three minutes.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shariq-pi-extensions",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "Cross-platform extension suite for the Pi coding agent.",
   "license": "MIT",
   "author": "Shariq Riaz",