@bacnh85/pi-plan 0.1.3 → 0.1.5

package/README.md

@@ -4,7 +4,7 @@ Pi extension that adds a lightweight plan mode inspired by Codex and Claude Code
 
 - Toggle plan mode with `/plan` or `Ctrl+Alt+P`.
 - Remembers separate thinking/reasoning levels for planning and normal execution across sessions based on the active mode when you change Pi's reasoning level.
-- Keeps planning read-only by disabling built-in `edit`/`write` and blocking destructive shell commands.
+- Keeps planning read-only by limiting active tools to planning-safe tools and blocking destructive shell commands.
 - Provides a `write_plan` tool so the agent writes reviewable Markdown plans into `.agents/plans/` in the current workspace.
 - Provides an `ask_plan_question` tool so the agent can ask selection-style clarifying questions during planning, with an option for free-form user input.
 - Prompts after a plan is written so you can approve execution, approve only, keep planning, or refine with feedback.

package/index.ts

@@ -11,8 +11,8 @@ const PLAN_TOOL = "write_plan";
 const PLAN_QUESTION_TOOL = "ask_plan_question";
 const PLAN_EXECUTE_COMMAND = "plan-execute";
 const PREFERENCES_FILE = path.join(os.homedir(), ".pi", "agent", "pi-plan", "preferences.json");
-const PLAN_MODE_DISABLED_TOOLS = new Set(["edit", "write"]);
 const DEFAULT_PLAN_TOOLS = ["read", "bash", "grep", "find", "ls", PLAN_TOOL, PLAN_QUESTION_TOOL];
+const PLAN_ALLOWED_TOOLS = new Set(DEFAULT_PLAN_TOOLS);
 const THINKING_LEVELS = ["off", "minimal", "low", "medium", "high", "xhigh"] as const;
 
 type ThinkingLevel = (typeof THINKING_LEVELS)[number];
@@ -152,6 +152,13 @@ function isDestructiveBash(command: string): boolean {
 	return DESTRUCTIVE_BASH_PATTERNS.some((pattern) => pattern.test(command));
 }
 
+function isReadOnlyBash(command: string): boolean {
+	const trimmed = command.trim();
+	if (!trimmed) return true;
+	if (/[;&|`$(){}]/.test(trimmed) || /\b(python|python3|node|ruby|perl|php|sh|bash|zsh|fish)\b/i.test(trimmed)) return false;
+	return /^(git\s+(status|branch|rev-parse|diff|show|log|ls-files)\b|(?:rg|grep|find|fd|ls|pwd|cat|head|tail|sed|awk|wc|sort|uniq|cut)\b)/i.test(trimmed);
+}
+
 export default function piPlanExtension(pi: ExtensionAPI): void {
 	let planModeEnabled = false;
 	let executionMode = false;
@@ -199,7 +206,7 @@ export default function piPlanExtension(pi: ExtensionAPI): void {
 	function enablePlanTools(): void {
 		const baseline = toolsBeforePlan ?? pi.getActiveTools();
 		toolsBeforePlan = baseline;
-		pi.setActiveTools(unique([...baseline.filter((tool) => !PLAN_MODE_DISABLED_TOOLS.has(tool)), ...DEFAULT_PLAN_TOOLS]));
+		pi.setActiveTools(unique([...baseline.filter((tool) => PLAN_ALLOWED_TOOLS.has(tool)), ...DEFAULT_PLAN_TOOLS]));
 	}
 
 	function restoreTools(): void {
@@ -484,12 +491,12 @@ export default function piPlanExtension(pi: ExtensionAPI): void {
 
 	pi.on("tool_call", async (event) => {
 		if (!planModeEnabled) return;
-		if (event.toolName === "edit" || event.toolName === "write") {
-			return { block: true, reason: `pi-plan: ${event.toolName} is disabled until the plan is approved. Use ${PLAN_TOOL} to write the plan file.` };
+		if (!PLAN_ALLOWED_TOOLS.has(event.toolName)) {
+			return { block: true, reason: `pi-plan: ${event.toolName} is disabled in read-only plan mode. Use ${PLAN_TOOL} to write the plan file.` };
 		}
 		if (!isToolCallEventType("bash", event)) return;
-		if (isDestructiveBash(event.input.command)) {
-			return { block: true, reason: `pi-plan: bash command blocked in plan mode because it may modify state.\nCommand: ${event.input.command}` };
+		if (isDestructiveBash(event.input.command) || !isReadOnlyBash(event.input.command)) {
+			return { block: true, reason: `pi-plan: bash command blocked in plan mode because only simple read-only inspection commands are allowed.\nCommand: ${event.input.command}` };
 		}
 	});
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bacnh85/pi-plan",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "Pi extension that adds a plan mode with workspace markdown plans and thinking-level presets.",
   "license": "MIT",
   "publishConfig": {