Confined Programs Collapse MCP Tool-Call Ping-Pong

[repo, ai, typescript, mcp, tool-calling, code-execution, agent-loops, pi] A Pi extension could expose one confined execute tool over MCP servers, keeping catalog search, intermediate results, and multi-call orchestration out of the model loop.