Agents CLI: dex-agents-pi command for Pi agents (#1597)

Adds the dex-agents-pi CLI command (Pi coding tools routed through the runtime's hardened WorkspaceFiles, bash with timeouts and allow list, AGENTS.md loading with scope and owner checks, env-only API keys), additive runtime exports (WorkspaceFiles, WorkspaceFileRefusedError, non-blocking opens, read caps), and adds the package to the agents release pipeline.

Author: longquanzheng

.github/workflows/agents-typescript-publish.yml

@@ -170,7 +170,7 @@ jobs:
           for package in dex-agents dex-agents-vercel-ai dex-agents-openai-agents \
             dex-agents-mastra dex-agents-claude-agent-sdk dex-agents-pi \
             dex-agents-cli dex-agents-claude-sdk-cli dex-agents-openai-sdk-cli \
-            dex-agents-vercel-ai-cli dex-agents-mastra-cli dex-agents-builtin-cli; do
+            dex-agents-vercel-ai-cli dex-agents-mastra-cli dex-agents-builtin-cli dex-agents-pi-cli; do
             tarball="./dist/superdurable-${package}-${RELEASE_VERSION}.tgz"
             [[ -f "${tarball}" ]] || { echo "Missing ${tarball}" >&2; exit 1; }
             if npm view "@superdurable/${package}@${RELEASE_VERSION}" version >/dev/null 2>&1; then

agents/CHANGELOG.md

@@ -96,6 +96,34 @@ for the Dex SDK and framework versions each release supports.
   has the command, file tools stay in the workspace, and the tool Step checks an
   approved call again. `ANTHROPIC_API_KEY` reaches Claude Code unchanged. See
   [cli/python/claude-sdk](cli/python/claude-sdk/README.md).
+- The **dex-agents-pi** command (`@superdurable/dex-agents-pi-cli`, not
+  published yet): a Pi coding agent in the terminal on the shared CLI runtime,
+  where Dex runs the agent loop and pi-ai makes each model call. The model is
+  `<provider>/<model>` from pi-ai's catalog, and the key comes only from the
+  provider's API key variable. pi-coding-agent's `read`, `grep`, `find`, `ls`,
+  `write`, `edit`, and `bash` replace the runtime's file and shell tools, with
+  the same rules: their file access goes through the runtime's workspace file
+  layer. `bash` has the shell tool's 120-second default timeout
+  (`pi.bash_timeout_seconds`) and its 600-second maximum, and a command that
+  ran is a result with its exit status. `grep` and `find` walk the workspace
+  themselves, without `rg` or `fd`; `grep` skips files over 1 MiB, and each
+  call of either has a 10-second budget. Each model call adds the project's
+  `AGENTS.md` files unless `pi.load_project_context` is `false`: a file loads
+  only directly in its own directory, and above the workspace the file, and a
+  link to it, must belong to you or root. See
+  [cli/typescript/pi](cli/typescript/pi/README.md).
+- TypeScript CLI runtime: **WorkspaceFiles**, the workspace file layer of the
+  local file tools, is exported for harnesses that bring their own file tools,
+  with new methods **readFileWithVersion** (with an optional smaller
+  **maximumBytes**), **replaceFileIfUnchanged**, **statExisting**, and
+  **readDirectoryEntries**. A refusal throws the new
+  **WorkspaceFileRefusedError**, a `ToolExecutionError` thrown before anything
+  changed. See
+  [cli/typescript/runtime](cli/typescript/runtime/README.md#the-harness-interface).
+- TypeScript CLI runtime: `read_file`, `edit_file`, and `search_files` open
+  files without blocking, so a FIFO in the workspace fails at once as not a
+  regular file, or is skipped by a search, instead of hanging the call, as in
+  the Python runtime.
 - Python commands for the other harnesses, not published yet, on the shared
   CLI runtime: **dex-agents-openai-sdk** (OpenAI Agents SDK),
   **dex-agents-pydantic-ai** (Pydantic AI), **dex-agents-deepagents** (Deep

agents/README.md

@@ -42,6 +42,7 @@ adapter depends on the published core instead.
 | [`cli/typescript/mastra`](cli/typescript/mastra) | `@superdurable/dex-agents-mastra-cli`, not published yet | The `dex-agents-mastra` command: a Mastra agent in the terminal |
 | [`cli/typescript/builtin`](cli/typescript/builtin) | `@superdurable/dex-agents-builtin-cli`, not published yet | The `dex-agents-builtin` command: the Dex built-in agent loop without a framework in the terminal |
 | [`typescript/pi`](typescript/pi) | `@superdurable/dex-agents-pi`, not published yet | Pi: pi-ai models and Pi tools on the built-in agent loop, so Dex runs the loop, not Pi |
+| [`cli/typescript/pi`](cli/typescript/pi) | `@superdurable/dex-agents-pi-cli`, not published yet | The `dex-agents-pi` command: a Pi coding agent in the terminal |
 
 ## UI streams
 
@@ -184,7 +185,7 @@ publish the released commit even if `main` has moved on.
 Both workflows stamp the release version first with
 [`script/stamp_agents_release_version.py`](script/stamp_agents_release_version.py).
 It sets one version in all fourteen `pyproject.toml` files (the thirteen
-published ones and `dex-agents-cli-testing`) and twelve `package.json`
+published ones and `dex-agents-cli-testing`) and thirteen `package.json`
 files, their lockfiles, and every constraint between agents packages: the
 adapters' on their core, and the CLI packages' on the core, their adapter,
 and the CLI runtime. Python pins `==<version>`; npm peer-depends on

agents/cli/typescript/pi/.gitignore

@@ -0,0 +1,2 @@
+dist/
+node_modules/

agents/cli/typescript/pi/.npmrc

@@ -0,0 +1 @@
+install-links=true

agents/cli/typescript/pi/LICENSE

@@ -0,0 +1,105 @@
+# License
+
+Copyright (c) 2026 Super Durable, Inc.
+
+Portions of this software are licensed as follows:
+
+- Legacy Materials remain under their original licenses as described in
+  `LEGACY_NOTICES.md`.
+- Third-Party Materials remain under the licenses provided by their owners.
+- The `docs/` and `examples/` directories are not licensed under the
+  Sustainable Use License and retain their existing licensing status.
+- All other material owned or licensable by Super Durable, Inc. is available
+  under the Sustainable Use License below.
+
+See `LEGACY_NOTICES.md` for the applicable legacy and third-party notices.
+
+## Sustainable Use License
+
+Version 1.0
+
+### Acceptance
+
+By using the software, you agree to all of the terms and conditions below.
+
+### Copyright License
+
+The licensor grants you a non-exclusive, royalty-free, worldwide,
+non-sublicensable, non-transferable license to use, copy, distribute, make
+available, and prepare derivative works of the software, in each case subject
+to the limitations below.
+
+### Limitations
+
+You may use or modify the software only for your own internal business purposes
+or for non-commercial or personal use. You may distribute the software or
+provide it to others only if you do so free of charge for non-commercial
+purposes. You may not alter, remove, or obscure any licensing, copyright, or
+other notices of the licensor in the software. Any use of the licensor's
+trademarks is subject to applicable law.
+
+### Patents
+
+The licensor grants you a license, under any patent claims the licensor can
+license, or becomes able to license, to make, have made, use, sell, offer for
+sale, import and have imported the software, in each case subject to the
+limitations and conditions in this license. This license does not cover any
+patent claims that you cause to be infringed by modifications or additions to
+the software.
+
+If you or your company make any written claim that the software infringes or
+contributes to infringement of any patent, your patent license for the software
+granted under these terms ends immediately. If your company makes such a claim,
+your patent license ends immediately for work on behalf of your company.
+
+### Notices
+
+You must ensure that anyone who gets a copy of any part of the software from
+you also gets a copy of these terms. If you modify the software, you must
+include in any modified copies of the software a prominent notice stating that
+you have modified the software.
+
+### No Other Rights
+
+These terms do not imply any licenses other than those expressly granted in
+these terms.
+
+### Termination
+
+If you use the software in violation of these terms, such use is not licensed,
+and your license will automatically terminate. If the licensor provides you
+with a notice of your violation, and you cease all violation of this license no
+later than 30 days after you receive that notice, your license will be
+reinstated retroactively. However, if you violate these terms after such
+reinstatement, any additional violation of these terms will cause your license
+to terminate automatically and permanently.
+
+### No Liability
+
+As far as the law allows, the software comes as is, without any warranty or
+condition, and the licensor will not be liable to you for any damages arising
+out of these terms or the use or nature of the software, under any kind of
+legal claim.
+
+### Definitions
+
+The "licensor" is the entity offering these terms.
+
+The "software" is the software the licensor makes available under these terms,
+including any portion of it.
+
+"You" refers to the individual or entity agreeing to these terms.
+
+"Your company" is any legal entity, sole proprietorship, or other kind of
+organization that you work for, plus all organizations that have control over,
+are under the control of, or are under common control with that organization.
+Control means ownership of substantially all the assets of an entity, or the
+power to direct its management and policies by vote, contract, or otherwise.
+Control can be direct or indirect.
+
+"Your license" is the license granted to you for the software under these
+terms.
+
+"Use" means anything you do with the software requiring your license.
+
+"Trademark" means trademarks, service marks, and similar rights.