feat: container execution routing + sandbox fail-closed policy (by Wren)

package.json

@@ -83,7 +83,7 @@
     "minimatch@9.0.3": "9.0.7",
     "undici": "6.24.0",
     "lodash": "4.18.0",
-    "brace-expansion": "1.1.13",
+    "brace-expansion@^1": "1.1.13",
     "@slack/bolt/path-to-regexp": "8.4.0",
     "handlebars": "4.7.9"
   }

packages/api/package.json

@@ -35,6 +35,8 @@
   "dependencies": {
     "@anthropic-ai/sdk": "^0.71.2",
     "@inklabs/shared": "workspace:*",
+    "@mariozechner/pi-agent-core": "0.71.1",
+    "@mariozechner/pi-coding-agent": "0.71.1",
     "@modelcontextprotocol/sdk": "^1.26.0",
     "@slack/bolt": "^4.6.0",
     "@supabase/supabase-js": "^2.39.3",

packages/api/src/agent/adapters/index.ts

@@ -45,7 +45,7 @@ export function getAdapterRegistry(): AdapterRegistry {
     registryInstance.register(getClaudeCodeAdapter());
 
     // Future adapters would be registered here:
-    // registryInstance.register(getDirectApiAdapter());
+    // registryInstance.register(getInkAdapter());
     // registryInstance.register(getOpenAiAdapter());
   }
   return registryInstance;

packages/api/src/agent/adapters/types.ts

@@ -30,7 +30,7 @@ export interface BackendPermissionConfig {
  * Implement this for each backend to translate PCP permissions
  */
 export interface PermissionAdapter {
-  /** Backend identifier (e.g., 'claude-code', 'direct-api') */
+  /** Backend identifier (e.g., 'claude-code', 'ink') */
   readonly backendId: string;
 
   /**

packages/api/src/agent/backend-manager.ts

@@ -16,9 +16,9 @@ import type {
   ResponseHandler,
 } from './types';
 import type { ClaudeCodeConfig } from './backends/claude-code.backend';
-import type { DirectApiConfig } from './backends/direct-api.backend';
+import type { InkConfig } from './backends/ink.backend';
 import { ClaudeCodeBackend, createClaudeCodeBackend } from './backends/claude-code.backend';
-import { DirectApiBackend, createDirectApiBackend } from './backends/direct-api.backend';
+import { InkBackend, createInkBackend } from './backends/ink.backend';
 
 export interface BackendManagerConfig {
   /** Primary backend to use */
@@ -28,7 +28,7 @@ export interface BackendManagerConfig {
   /** Backend-specific configurations */
   backends: {
     'claude-code'?: Partial<ClaudeCodeConfig>;
-    'direct-api'?: Partial<DirectApiConfig>;
+    ink?: Partial<InkConfig>;
   };
   /** Enable automatic failover */
   enableFailover?: boolean;
@@ -138,10 +138,9 @@ export class BackendManager extends EventEmitter {
   setResponseHandler(handler: ResponseHandler): void {
     this.responseHandler = handler;
 
-    // Pass to direct API backend if it exists
-    const directApi = this.backends.get('direct-api') as DirectApiBackend | undefined;
-    if (directApi) {
-      directApi.setResponseHandler(handler);
+    const inkBackend = this.backends.get('ink') as InkBackend | undefined;
+    if (inkBackend) {
+      inkBackend.setResponseHandler(handler);
     }
   }
 
@@ -228,14 +227,14 @@ export class BackendManager extends EventEmitter {
       this.backends.set('claude-code', backend);
     }
 
-    // Create Direct API backend
-    if (this.config.backends['direct-api'] || this.config.primaryBackend === 'direct-api') {
-      const backend = createDirectApiBackend(this.config.backends['direct-api']);
+    // Create Ink backend
+    if (this.config.backends.ink || this.config.primaryBackend === 'ink') {
+      const backend = createInkBackend(this.config.backends.ink);
       this.setupBackendEvents(backend);
       if (this.responseHandler) {
         backend.setResponseHandler(this.responseHandler);
       }
-      this.backends.set('direct-api', backend);
+      this.backends.set('ink', backend);
     }
   }
 

packages/api/src/agent/backends/direct-api.backend.ts → packages/api/src/agent/backends/ink.backend.ts

@@ -1,5 +1,5 @@
 /**
- * Direct API Backend
+ * Ink Backend
  *
  * Uses the Anthropic API directly instead of Claude Code CLI.
  * Useful for cloud deployments where CLI isn't available.
@@ -17,8 +17,8 @@ import type {
   ResponseHandler,
 } from '../types';
 
-export interface DirectApiConfig extends BackendConfig {
-  type: 'direct-api';
+export interface InkConfig extends BackendConfig {
+  type: 'ink';
   apiKey?: string;
   model?: string;
   maxTokens?: number;
@@ -30,15 +30,15 @@ interface ConversationMessage {
   content: string;
 }
 
-const DEFAULT_CONFIG: Partial<DirectApiConfig> = {
+const DEFAULT_CONFIG: Partial<InkConfig> = {
   model: 'claude-sonnet-4-20250514',
   maxTokens: 4096,
 };
 
-export class DirectApiBackend extends EventEmitter implements AgentBackend {
-  readonly type: BackendType = 'direct-api';
+export class InkBackend extends EventEmitter implements AgentBackend {
+  readonly type: BackendType = 'ink';
 
-  private config: DirectApiConfig;
+  private config: InkConfig;
   private client: Anthropic | null = null;
   private ready = false;
   private messageCount = 0;
@@ -55,9 +55,9 @@ export class DirectApiBackend extends EventEmitter implements AgentBackend {
   // MCP tools definition (simplified for API calls)
   private tools: Anthropic.Tool[] = [];
 
-  constructor(config: Partial<DirectApiConfig> = {}) {
+  constructor(config: Partial<InkConfig> = {}) {
     super();
-    this.config = { ...DEFAULT_CONFIG, ...config, type: 'direct-api' } as DirectApiConfig;
+    this.config = { ...DEFAULT_CONFIG, ...config, type: 'ink' } as InkConfig;
   }
 
   /**
@@ -76,28 +76,28 @@ export class DirectApiBackend extends EventEmitter implements AgentBackend {
 
   async initialize(): Promise<void> {
     if (this.client) {
-      logger.warn('Direct API backend already initialized');
+      logger.warn('Ink backend already initialized');
       return;
     }
 
-    logger.info('Initializing Direct API backend...');
+    logger.info('Initializing Ink backend...');
 
     const apiKey = this.config.apiKey || process.env.ANTHROPIC_API_KEY;
     if (!apiKey) {
-      throw new Error('ANTHROPIC_API_KEY is required for Direct API backend');
+      throw new Error('ANTHROPIC_API_KEY is required for Ink backend');
     }
 
     this.client = new Anthropic({ apiKey });
-    this.sessionId = `direct-api-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`;
+    this.sessionId = `ink-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`;
     this.startTime = new Date();
     this.ready = true;
 
     this.emit('ready');
-    logger.info('Direct API backend ready', { sessionId: this.sessionId });
+    logger.info('Ink backend ready', { sessionId: this.sessionId });
   }
 
   async shutdown(): Promise<void> {
-    logger.info('Shutting down Direct API backend...');
+    logger.info('Shutting down Ink backend...');
     this.client = null;
     this.ready = false;
     this.conversationHistory.clear();
@@ -106,7 +106,7 @@ export class DirectApiBackend extends EventEmitter implements AgentBackend {
 
   async sendMessage(message: AgentMessage): Promise<void> {
     if (!this.client || !this.ready) {
-      throw new Error('Direct API backend not ready');
+      throw new Error('Ink backend not ready');
     }
 
     this.messageCount++;
@@ -121,7 +121,7 @@ export class DirectApiBackend extends EventEmitter implements AgentBackend {
     });
 
     logger.info(
-      `Sending message via Direct API [${message.channel}]: ${message.content.substring(0, 100)}...`
+      `Sending message via Ink [${message.channel}]: ${message.content.substring(0, 100)}...`
     );
 
     try {
@@ -138,7 +138,7 @@ export class DirectApiBackend extends EventEmitter implements AgentBackend {
       await this.processResponse(response, message);
     } catch (error) {
       this.lastError = error instanceof Error ? error.message : 'Unknown error';
-      logger.error('Direct API error:', error);
+      logger.error('Ink error:', error);
       this.emit('error', error);
       throw error;
     }
@@ -164,7 +164,7 @@ export class DirectApiBackend extends EventEmitter implements AgentBackend {
   }
 
   async resumeSession(sessionId: string): Promise<boolean> {
-    // Direct API doesn't have true session resumption
+    // Ink doesn't have true session resumption
     // but we can set the session ID for tracking
     this.sessionId = sessionId;
     return true;
@@ -293,8 +293,8 @@ export class DirectApiBackend extends EventEmitter implements AgentBackend {
 }
 
 /**
- * Create a Direct API backend instance
+ * Create a Ink backend instance
  */
-export function createDirectApiBackend(config?: Partial<DirectApiConfig>): DirectApiBackend {
-  return new DirectApiBackend(config);
+export function createInkBackend(config?: Partial<InkConfig>): InkBackend {
+  return new InkBackend(config);
 }

packages/api/src/agent/index.ts

@@ -11,8 +11,16 @@ export * from './types';
 export { ClaudeCodeBackend, createClaudeCodeBackend } from './backends/claude-code.backend';
 export type { ClaudeCodeConfig } from './backends/claude-code.backend';
 
-export { DirectApiBackend, createDirectApiBackend } from './backends/direct-api.backend';
-export type { DirectApiConfig } from './backends/direct-api.backend';
+export { InkBackend, createInkBackend } from './backends/ink.backend';
+export type { InkConfig } from './backends/ink.backend';
+
+// Tools
+export {
+  createInkCodingTools,
+  getPiToolSchemas,
+  createPiToolExecutor,
+} from './tools/pi-coding-tools';
+export type { InkToolDefinition, PiCodingToolsConfig } from './tools/pi-coding-tools';
 
 // Manager
 export { BackendManager, createBackendManager } from './backend-manager';