@cydm/pie 1.0.23 → 1.0.24

package/README.md

@@ -20,7 +20,7 @@ Pie is developed by [cydream](https://cydream.tech).
 npm install -g @cydm/pie
 ```
 
-Pie supports Node.js 20 and newer. Release builds are validated with npm's lockfile workflow (`npm ci`) so dependency resolution is reproducible.
+Pie requires Node.js 20.19 or newer. Release builds are validated with npm's lockfile workflow (`npm ci`) so dependency resolution is reproducible.
 
 ## Quick Start
 
@@ -199,6 +199,7 @@ Pie uses a hierarchical slash-command menu. The current built-in commands includ
 | `/skills/list` | List available skills |
 | `/skills/use` | Use a skill |
 | `/skills/reload` | Reload skills from disk |
+| `/extensions` | List extensions and toggle enable/disable |
 | `/tools/subagent` | Spawn a subagent for a task |
 | `/debugs/cache-test` | Run provider cache diagnostics with a dedicated 2-request probe |
 | `/debugs/context` | Append a context summary to `~/.pie/logs/pie-cli.log` |
@@ -228,6 +229,33 @@ Pie supports Markdown-based skills and built-in extensions.
 
 That is part of what makes Pie embeddable: the CLI is only one interface on top of a broader agent toolkit.
 
+## Extension Sources, Priority, And Toggles
+
+Extensions are discovered from four sources in ascending priority (later sources shadow earlier ones by stable extension identity):
+
+1. `builtin` — shipped with the CLI (`ask-user`, `todo`, `plan-mode`, `subagent`, `init`, `changelog`, `deploy`, `files`, attachment handlers)
+2. `global` — `~/.pie/extensions/`
+3. `project` — `./.pie/extensions/`
+4. `configured` — repeated `--extension-path <dir>` flags
+
+Every extension is enabled by default. Toggles are sparse overrides stored in settings and applied by extension identity across all sources:
+
+- Interactive: `/extensions` opens the user-default toggle menu; `/extensions --project` edits project overrides. `/extensions list|enable|disable ...` remains available for command-driven use.
+- Scripts and third-party UIs: `pie extensions list [--json]`, `pie extensions enable|disable <name> [--project|--user]`
+- Process flags: `--no-builtin-extensions` (skip built-ins) and `--no-extensions` (skip all discovered sources; `--extension-path` still loads)
+
+Example override in `~/.pie/settings.json` (or `./.pie/settings.json` for project scope, which wins per identity):
+
+```jsonc
+{
+  "extensions": {
+    "plan-mode": { "enabled": false }
+  }
+}
+```
+
+The full contract (identity rules, schema, host integration) lives in [`docs/extensions-enablement.md`](../../docs/extensions-enablement.md).
+
 ## Browser Tools
 
 The built-in `browser-tools` skill uses Microsoft's Playwright CLI for visible browser automation. Its runtime dependencies ship with the CLI; do not run `npm install` inside the skill directory.
@@ -239,7 +267,7 @@ node <resolvedPath for browser-tools/playwright-cli.js> open https://example.com
 node <resolvedPath for browser-tools/playwright-cli.js> snapshot
 node <resolvedPath for browser-tools/playwright-cli.js> screenshot
 node <resolvedPath for browser-tools/playwright-cli.js> console
-node <resolvedPath for browser-tools/playwright-cli.js> network
+node <resolvedPath for browser-tools/playwright-cli.js> requests
 ```
 
 If Playwright's Chromium browser is not installed, run:

package/dist/builtin/extensions/ask-user/index.js

@@ -1,9 +1,10 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   createAskUserCapability
-} from "../../../chunks/chunk-AFTBFF6J.js";
-import "../../../chunks/chunk-PUZP2Q3F.js";
-import "../../../chunks/chunk-7ABSJC2D.js";
+} from "../../../chunks/chunk-XWNIIJ3X.js";
+import "../../../chunks/chunk-X44YTB6R.js";
+import "../../../chunks/chunk-J4P2LP7K.js";
+import "../../../chunks/chunk-HAAYC2N5.js";
 import "../../../chunks/chunk-TG2EQLX2.js";
 
 // builtin/extensions/ask-user/index.ts

package/dist/builtin/extensions/changelog/index.js

@@ -65,54 +65,54 @@ function changelogExtension(ctx) {
         if (!commits2) {
           return "No git history found. Cannot check for missing entries.";
         }
-        return `\u{1F50D} CHANGELOG \u9057\u6F0F\u68C0\u67E5
+        return `\u{1F50D} Check for CHANGELOG gaps
 
-\u8BF7\u5206\u6790\u4EE5\u4E0B\u4FE1\u606F\uFF0C\u68C0\u67E5 CHANGELOG \u662F\u5426\u6709\u9057\u6F0F\uFF1A
+Analyze the following information for missing CHANGELOG entries:
 
-## \u6700\u8FD1 Git \u63D0\u4EA4
-${commits2 || "(\u65E0\u6CD5\u83B7\u53D6)"}
+## Recent Git commits
+${commits2 || "(unavailable)"}
 
-## \u53D8\u66F4\u6587\u4EF6
-${changedFiles2 || "(\u65E0\u6CD5\u83B7\u53D6)"}
+## Changed files
+${changedFiles2 || "(unavailable)"}
 
-## \u5F53\u524D CHANGELOG
-${changelog2 ? changelog2.slice(0, 1500) + "\n..." : "(\u6587\u4EF6\u4E0D\u5B58\u5728)"}
+## Current CHANGELOG
+${changelog2 ? changelog2.slice(0, 1500) + "\n..." : "(file does not exist)"}
 
-\u8BF7\u5BF9\u6BD4\u5206\u6790\uFF1A
-1. \u54EA\u4E9B\u91CD\u8981\u7684\u53D8\u66F4\u5DF2\u7ECF\u63D0\u4EA4\u5230 git \u4F46\u6CA1\u6709\u8BB0\u5F55\u5728 CHANGELOG\uFF1F
-2. \u5F53\u524D [Unreleased] \u90E8\u5206\u662F\u5426\u5B8C\u6574\u53CD\u6620\u4E86\u6700\u8FD1\u7684\u5DE5\u4F5C\uFF1F
-3. \u5217\u51FA\u9057\u6F0F\u7684\u6761\u76EE\u5EFA\u8BAE\uFF08\u6309 Added/Changed/Fixed \u5206\u7C7B\uFF09
+Compare the sources and report:
+1. Which important committed changes are not recorded in the CHANGELOG?
+2. Does the current [Unreleased] section accurately cover recent work?
+3. Which missing entries should be added under Added, Changed, or Fixed?
 
-\u53EA\u8FD4\u56DE\u5206\u6790\u62A5\u544A\uFF0C\u4E0D\u8981\u4FEE\u6539\u6587\u4EF6\u3002`;
+Return the analysis report only. Do not modify files.`;
       }
       if (args?.startsWith("add ")) {
         const description = args.slice(4).trim();
         const existingChangelog = await readChangelog(ctx2.cwd);
-        ctx2.ui.notify(`\u{1F4DD} \u6B63\u5728\u751F\u6210 changelog \u6761\u76EE...`, "info");
-        return `\u8BF7\u5C06\u4EE5\u4E0B\u63CF\u8FF0\u8F6C\u6362\u4E3A\u4E13\u4E1A\u7684 CHANGELOG \u6761\u76EE\uFF1A
+        ctx2.ui.notify("\u{1F4DD} Generating a changelog entry...", "info");
+        return `Convert the following description into a professional CHANGELOG entry:
 
-\u63CF\u8FF0\uFF1A"${description}"
+Description: "${description}"
 
 ${existingChangelog ? `
-\u53C2\u8003\u73B0\u6709\u683C\u5F0F\uFF1A
+Follow the existing format:
 \`\`\`
 ${existingChangelog.slice(0, 800)}
 ...
 \`\`\`` : ""}
 
-\u8981\u6C42\uFF1A
-1. \u9009\u62E9\u5408\u9002\u7684\u5206\u7C7B\uFF1A**Added** / **Changed** / **Fixed** / **Removed** / **Deprecated** / **Security**
-2. \u4F7F\u7528\u73B0\u5728\u65F6\u6001\uFF0C\u7B80\u6D01\u4F46\u5305\u542B\u5173\u952E\u6280\u672F\u7EC6\u8282
-3. \u5982\u6709\u76F8\u5173\u6587\u4EF6\u8DEF\u5F84\uFF0C\u8BF7\u5305\u542B
+Requirements:
+1. Choose the appropriate category: **Added** / **Changed** / **Fixed** / **Removed** / **Deprecated** / **Security**.
+2. Use present tense and concise wording while preserving important technical details.
+3. Include relevant file paths when useful.
 
-\u683C\u5F0F\u793A\u4F8B\uFF1A
-- **Added**: \u65B0\u589E\u7528\u6237\u8BA4\u8BC1\u6A21\u5757\uFF0C\u652F\u6301 JWT token \u9A8C\u8BC1\uFF08src/auth/\uFF09
-- **Fixed**: \u4FEE\u590D\u5185\u5B58\u6CC4\u6F0F\u95EE\u9898\uFF0C\u4F18\u5316\u4E86\u5927\u6587\u4EF6\u5904\u7406\u6027\u80FD
+Examples:
+- **Added**: Add JWT token validation to the authentication module (src/auth/).
+- **Fixed**: Prevent a memory leak during large-file processing.
 
-\u4F7F\u7528 write \u5DE5\u5177\u66F4\u65B0 CHANGELOG.md\uFF1A
-- \u5982\u679C\u4E0D\u5B58\u5728\uFF0C\u521B\u5EFA\u6807\u51C6\u683C\u5F0F\uFF08\u5305\u542B ## [Unreleased] \u90E8\u5206\uFF09
-- \u5C06\u65B0\u6761\u76EE\u6DFB\u52A0\u5230 [Unreleased] \u90E8\u5206\u7684\u5408\u9002\u4F4D\u7F6E
-- \u4FDD\u6301\u73B0\u6709\u6761\u76EE\u4E0D\u53D8`;
+Use the write tool to update CHANGELOG.md:
+- Create a standard file with an ## [Unreleased] section if it does not exist.
+- Add the new entry to the appropriate subsection under [Unreleased].
+- Preserve existing entries.`;
       }
       if (args?.startsWith("release")) {
         const versionHint = args.slice(7).trim();
@@ -121,30 +121,30 @@ ${existingChangelog.slice(0, 800)}
           return "No CHANGELOG.md found. Create one first with /changelog";
         }
         ctx2.ui.notify(`\u{1F4DD} Preparing release ${versionHint || "..."}`, "info");
-        return `\u8BF7\u5C06 [Unreleased] \u90E8\u5206\u7684\u5185\u5BB9\u6574\u7406\u4E3A\u4E00\u4E2A\u65B0\u7248\u672C\u53D1\u5E03\u3002
+        return `Turn the [Unreleased] section into a new version release.
 
-\u5F53\u524D CHANGELOG\uFF1A
+Current CHANGELOG:
 \`\`\`
 ${existingChangelog.slice(0, 1500)}
 ...
 \`\`\`
 
-\u7248\u672C\u63D0\u793A\uFF1A${versionHint || "\u6839\u636E\u53D8\u66F4\u5185\u5BB9\u81EA\u52A8\u5224\u65AD\uFF08patch/minor/major\uFF09"}
+Version hint: ${versionHint || "infer patch, minor, or major from the changes"}
 
-Semantic Versioning \u89C4\u5219\uFF1A
+Semantic Versioning rules:
 - **patch** (0.0.x): Bug fixes only
 - **minor** (0.x.0): New features, backward compatible
 - **major** (x.0.0): Breaking changes
 
-\u4EFB\u52A1\uFF1A
-1. \u5206\u6790 [Unreleased] \u4E2D\u7684\u53D8\u66F4\u7C7B\u578B
-2. \u786E\u5B9A\u5408\u9002\u7684\u7248\u672C\u53F7\uFF08\u5982\u679C\u7528\u6237\u672A\u6307\u5B9A\uFF09
-3. \u521B\u5EFA\u65B0\u7684\u7248\u672C\u8282\uFF08\u5982 ## [1.2.0] - 2024-03-06\uFF09
-4. \u5C06 [Unreleased] \u7684\u5185\u5BB9\u79FB\u52A8\u5230\u65B0\u7248\u672C\u8282
-5. \u6E05\u7A7A [Unreleased] \u90E8\u5206\uFF0C\u53EA\u4FDD\u7559\u7A7A\u5217\u8868
-6. \u5728\u6587\u4EF6\u5E95\u90E8\u66F4\u65B0\u7248\u672C\u5BF9\u6BD4\u94FE\u63A5\uFF08\u5982\u679C\u9700\u8981\uFF09
+Tasks:
+1. Analyze the change types in [Unreleased].
+2. Choose the appropriate version when the user did not specify one.
+3. Create a version section such as ## [1.2.0] - 2024-03-06.
+4. Move the [Unreleased] entries into the new version section.
+5. Leave an empty [Unreleased] section.
+6. Update version comparison links at the bottom when needed.
 
-\u4F7F\u7528 write \u5DE5\u5177\u66F4\u65B0 CHANGELOG.md`;
+Use the write tool to update CHANGELOG.md.`;
       }
       const commits = getRecentCommits(ctx2.cwd, 15);
       const changelog = await readChangelog(ctx2.cwd);
@@ -152,40 +152,40 @@ Semantic Versioning \u89C4\u5219\uFF1A
       if (!commits && !changelog) {
         return "No git history or CHANGELOG.md found. Initialize with: /changelog add <description>";
       }
-      ctx2.ui.notify("\u{1F50D} \u5206\u6790\u53D8\u66F4\u5E76\u68C0\u67E5\u9057\u6F0F...", "info");
-      return `\u{1F4DD} \u667A\u80FD Changelog \u66F4\u65B0
+      ctx2.ui.notify("\u{1F50D} Analyzing changes and checking for gaps...", "info");
+      return `\u{1F4DD} Smart CHANGELOG update
 
-\u8BF7\u5206\u6790\u4EE5\u4E0B\u4FE1\u606F\uFF0C\u68C0\u67E5\u5E76\u8865\u5145\u9057\u6F0F\u7684 CHANGELOG \u6761\u76EE\uFF1A
+Analyze the following information, identify missing CHANGELOG entries, and add them when appropriate:
 
-## \u6700\u8FD1 Git \u63D0\u4EA4\u8BB0\u5F55
-${commits || "(\u65E0\u6CD5\u83B7\u53D6 git \u5386\u53F2)"}
+## Recent Git commits
+${commits || "(git history unavailable)"}
 
-## \u6700\u8FD1\u53D8\u66F4\u7684\u6587\u4EF6
-${changedFiles || "(\u65E0\u6CD5\u83B7\u53D6)"}
+## Recently changed files
+${changedFiles || "(unavailable)"}
 
-## \u5F53\u524D CHANGELOG.md
-${changelog ? "\n```\n" + changelog.slice(0, 2e3) + "\n...\n```" : "(\u6587\u4EF6\u4E0D\u5B58\u5728\uFF0C\u9700\u8981\u521B\u5EFA)"}
+## Current CHANGELOG.md
+${changelog ? "\n```\n" + changelog.slice(0, 2e3) + "\n...\n```" : "(file does not exist and must be created)"}
 
-## \u4EFB\u52A1
+## Tasks
 
-1. **\u5BF9\u6BD4\u5206\u6790**\uFF1A
-   - \u67E5\u770B git \u63D0\u4EA4\u4E2D\u6709\u54EA\u4E9B\u91CD\u8981\u53D8\u66F4
-   - \u5BF9\u6BD4 CHANGELOG \u7684 [Unreleased] \u90E8\u5206
-   - \u8BC6\u522B\u9057\u6F0F\u7684\u6761\u76EE
+1. **Compare sources**:
+   - Identify important changes in Git commits.
+   - Compare them with the CHANGELOG [Unreleased] section.
+   - Identify missing entries.
 
-2. **\u8865\u5145\u9057\u6F0F**\uFF08\u5982\u679C\u6709\uFF09\uFF1A
-   - \u4E3A\u6BCF\u4E2A\u9057\u6F0F\u7684\u53D8\u66F4\u521B\u5EFA\u4E13\u4E1A\u6761\u76EE
-   - \u5206\u7C7B\uFF1A**Added** / **Changed** / **Fixed** / **Removed**
-   - \u5305\u542B\u6280\u672F\u7EC6\u8282\u548C\u6587\u4EF6\u8DEF\u5F84
+2. **Add missing entries when needed**:
+   - Write a professional entry for each missing change.
+   - Classify it under **Added**, **Changed**, **Fixed**, or **Removed**.
+   - Include useful technical details and file paths.
 
-3. **\u66F4\u65B0\u6587\u4EF6**\uFF1A
-   - \u4F7F\u7528 write \u5DE5\u5177\u66F4\u65B0 CHANGELOG.md
-   - \u5982\u679C\u4E0D\u5B58\u5728\uFF0C\u521B\u5EFA\u6807\u51C6\u683C\u5F0F
-   - \u53EA\u6DFB\u52A0\u9057\u6F0F\u7684\u6761\u76EE\uFF0C\u4FDD\u6301\u73B0\u6709\u5185\u5BB9
+3. **Update the file**:
+   - Use the write tool to update CHANGELOG.md.
+   - Create a standard CHANGELOG if it does not exist.
+   - Add only missing entries and preserve existing content.
 
-4. **\u62A5\u544A\u7ED3\u679C**\uFF1A
-   - \u6DFB\u52A0\u4E86\u54EA\u4E9B\u6761\u76EE
-   - \u662F\u5426\u6709\u4E0D\u786E\u5B9A\u662F\u5426\u9700\u8981\u8BB0\u5F55\u7684\u5185\u5BB9`;
+4. **Report the result**:
+   - List the entries that were added.
+   - Note any changes whose inclusion is uncertain.`;
     }
   });
   ctx.log("Changelog extension ready");

package/dist/builtin/extensions/init/index.js

@@ -28,48 +28,48 @@ function buildResearchPrompt(params) {
   const { isUpdate, existingContent, userIntent, cwd, projectRoot, agentsPath } = params;
   if (isUpdate && existingContent) {
     const truncatedContent = existingContent.length > 4e3 ? existingContent.slice(0, 4e3) + "\n... (truncated)" : existingContent;
-    return `\u{1F4DD} \u66F4\u65B0 root AGENTS.md \u9879\u76EE\u4E0A\u4E0B\u6587
+    return `\u{1F4DD} Update the root AGENTS.md project context
 
-\u76EE\u6807\u6587\u4EF6\uFF1A${agentsPath}
-\u9879\u76EE\u6839\u76EE\u5F55\uFF1A${projectRoot}
-\u5F53\u524D\u5DE5\u4F5C\u76EE\u5F55\uFF1A${cwd}
+Target file: ${agentsPath}
+Project root: ${projectRoot}
+Current working directory: ${cwd}
 
-\u5F53\u524D root AGENTS.md \u5185\u5BB9\uFF1A
+Current root AGENTS.md content:
 \`\`\`
 ${truncatedContent}
 \`\`\`
 
-${userIntent ? `\u{1F4CC} \u7528\u6237\u66F4\u65B0\u610F\u56FE\uFF1A${userIntent}
+${userIntent ? `\u{1F4CC} User update intent: ${userIntent}
 
-` : ""}\u8BF7\u91CD\u65B0\u7814\u7A76\u9879\u76EE\u5E76\u66F4\u65B0 root AGENTS.md\uFF1A
+` : ""}Research the project again and update the root AGENTS.md:
 
-1. \u4FDD\u6301 AGENTS.md \u662F progressive disclosure index\uFF0C\u4E0D\u8981\u5199\u6210\u957F\u7BC7\u9879\u76EE\u767E\u79D1
-2. \u4FDD\u7559\u7B80\u77ED root instructions\uFF0C\u7136\u540E\u7EF4\u62A4 Repo Map
-3. Repo Map \u91CC\u7684\u6BCF\u4E2A\u91CD\u8981\u76EE\u5F55\u90FD\u8981\u6709 desc\uFF0C\u8BF4\u660E\u4EC0\u4E48\u65F6\u5019\u9700\u8981\u8BFB\u8BE5\u76EE\u5F55\u6216\u76F8\u5173\u6587\u6863
-4. \u53EA\u8865\u5145\u7A33\u5B9A\u89C4\u5219\u3001\u76EE\u5F55\u8DEF\u7531\u3001\u9A8C\u8BC1\u95E8\u7981\u548C\u751F\u6210\u7269\u89C4\u5219
-5. \u5220\u9664\u8FC7\u65F6\u6216\u91CD\u590D README/ARCHITECTURE \u7684\u5927\u6BB5\u5185\u5BB9
+1. Keep AGENTS.md as a progressive-disclosure index, not a long project encyclopedia.
+2. Preserve concise root instructions and maintain the Repo Map.
+3. Give every important Repo Map directory a desc explaining when to read it or its related documentation.
+4. Include only stable rules, directory routing, verification gates, and generated-artifact rules.
+5. Remove obsolete content and large sections that duplicate README or ARCHITECTURE.
 
-\u8BF7\u4F7F\u7528 write_file \u5DE5\u5177\u66F4\u65B0\u76EE\u6807\u6587\u4EF6\uFF1A${agentsPath}
-CLI \u6587\u4EF6\u5DE5\u5177\u4F1A\u4EE5\u9879\u76EE\u6839\u76EE\u5F55\u4F5C\u4E3A\u8BBF\u95EE\u8FB9\u754C\uFF1B\u4E0D\u8981\u4F7F\u7528\u989D\u5916\u7684 root \u53C2\u6570\u3002`;
+Use the write_file tool to update: ${agentsPath}
+CLI file tools already use the project root as their access boundary; do not pass an additional root argument.`;
   }
-  return `\u{1F50D} \u521D\u59CB\u5316 root AGENTS.md \u9879\u76EE\u4E0A\u4E0B\u6587
+  return `\u{1F50D} Initialize the root AGENTS.md project context
 
-\u76EE\u6807\u6587\u4EF6\uFF1A${agentsPath}
-\u9879\u76EE\u6839\u76EE\u5F55\uFF1A${projectRoot}
-\u5F53\u524D\u5DE5\u4F5C\u76EE\u5F55\uFF1A${cwd}
+Target file: ${agentsPath}
+Project root: ${projectRoot}
+Current working directory: ${cwd}
 
-${userIntent ? `\u{1F4CC} \u7528\u6237\u7814\u7A76\u610F\u56FE\uFF1A${userIntent}
+${userIntent ? `\u{1F4CC} User research intent: ${userIntent}
 
-` : ""}\u8BF7\u7814\u7A76\u5F53\u524D\u9879\u76EE\u5E76\u521B\u5EFA root \`AGENTS.md\`\u3002\u8FD9\u4E2A\u6587\u4EF6\u5E94\u8BE5\u662F progressive disclosure index\uFF0C\u7528\u6765\u6307\u5BFC\u540E\u7EED agent \u6309\u9700\u8BFB\u53D6\u76F8\u5173\u6587\u6863\uFF0C\u800C\u4E0D\u662F\u4E00\u6B21\u6027\u603B\u7ED3\u6574\u4E2A\u4ED3\u5E93\u3002
+` : ""}Research the current project and create the root \`AGENTS.md\`. It should be a progressive disclosure index that tells future agents which documentation to read on demand, rather than a one-time summary of the entire repository.
 
-\u7814\u7A76\u4EFB\u52A1\uFF1A
-1. \u8BC6\u522B\u9879\u76EE\u7C7B\u578B\u548C\u6280\u672F\u6808\uFF08\u67E5\u770B package.json, Cargo.toml, go.mod, requirements.txt, pyproject.toml \u7B49\uFF09
-2. \u63A2\u7D22\u9876\u5C42\u76EE\u5F55\u7ED3\u6784\u548C\u5173\u952E package/product \u8FB9\u754C
-3. \u8BFB\u53D6 README\u3001ARCHITECTURE\u3001docs/public-api \u7B49\u5DF2\u6709\u6587\u6863\uFF0C\u907F\u514D\u91CD\u590D\u7C98\u8D34
-4. \u8BC6\u522B\u751F\u6210\u7269\u89C4\u5219\u3001\u6D4B\u8BD5\u95E8\u7981\u3001\u4EE3\u7801\u5206\u5C42\u548C\u9AD8\u98CE\u9669\u6539\u52A8\u8FB9\u754C
-5. \u751F\u6210\u7B80\u77ED\u3001\u7A33\u5B9A\u3001\u53EF\u7EF4\u62A4\u7684\u76EE\u5F55\u8DEF\u7531\u8BF4\u660E
+Research tasks:
+1. Identify the project type and technology stack by checking package.json, Cargo.toml, go.mod, requirements.txt, pyproject.toml, and similar files.
+2. Explore the top-level directory structure and important package/product boundaries.
+3. Read existing README, ARCHITECTURE, and docs/public-api material without duplicating it.
+4. Identify generated-artifact rules, verification gates, code-layer boundaries, and high-risk change boundaries.
+5. Produce concise, stable, maintainable directory-routing guidance.
 
-\u8BF7\u751F\u6210\u5305\u542B\u4EE5\u4E0B\u7AE0\u8282\u7684 AGENTS.md\uFF1A
+Create an AGENTS.md with these sections:
 
 \`\`\`
 # AGENTS.md
@@ -91,8 +91,8 @@ Rules for AGENTS.md, generated bundles, and source-of-truth files.
 Which focused tests/checks to run by touched area.
 \`\`\`
 
-\u8BF7\u4F7F\u7528 write_file \u5DE5\u5177\u521B\u5EFA\u76EE\u6807\u6587\u4EF6\uFF1A${agentsPath}
-CLI \u6587\u4EF6\u5DE5\u5177\u4F1A\u4EE5\u9879\u76EE\u6839\u76EE\u5F55\u4F5C\u4E3A\u8BBF\u95EE\u8FB9\u754C\uFF1B\u4E0D\u8981\u4F7F\u7528\u989D\u5916\u7684 root \u53C2\u6570\u3002`;
+Use the write_file tool to create: ${agentsPath}
+CLI file tools already use the project root as their access boundary; do not pass an additional root argument.`;
 }
 async function initExtension(ctx) {
   ctx.log("Init extension loaded");
@@ -110,7 +110,7 @@ async function initExtension(ctx) {
   }
   ctx.registerCommand({
     path: ["tools", "init"],
-    description: "\u7814\u7A76\u9879\u76EE\u5E76\u751F\u6210/\u66F4\u65B0 root AGENTS.md \u9879\u76EE\u4E0A\u4E0B\u6587\u7D22\u5F15",
+    description: "Research the project and create or update the root AGENTS.md context index",
     handler: async (ctx2, args) => {
       const existing = await loadExistingKnowledge(ctx2.cwd);
       const existingContent = existing.content;
@@ -119,12 +119,12 @@ async function initExtension(ctx) {
       cachedKnowledge = existingContent;
       if (isUpdate) {
         if (userIntent) {
-          ctx2.ui.notify(`\u{1F4DD} \u6B63\u5728\u66F4\u65B0\u9879\u76EE\u77E5\u8BC6\uFF08${userIntent}\uFF09...`, "info");
+          ctx2.ui.notify(`\u{1F4DD} Updating project context (${userIntent})...`, "info");
         } else {
-          ctx2.ui.notify("\u{1F4DD} \u6B63\u5728\u66F4\u65B0 root AGENTS.md...", "info");
+          ctx2.ui.notify("\u{1F4DD} Updating root AGENTS.md...", "info");
         }
       } else {
-        ctx2.ui.notify("\u{1F50D} \u6B63\u5728\u521D\u59CB\u5316 root AGENTS.md...", "info");
+        ctx2.ui.notify("\u{1F50D} Initializing root AGENTS.md...", "info");
       }
       const researchPrompt = buildResearchPrompt({
         isUpdate,

package/dist/builtin/extensions/kimi-attachments/index.js

@@ -23,7 +23,7 @@ function kimiAttachmentsExtension(ctx) {
       if (!fileId) {
         return {
           items: [{ type: "text", text: `[${attachment.id}]` }],
-          warnings: ["\u9644\u4EF6\u7F3A\u5C11 fileId\uFF0C\u65E0\u6CD5\u8D70 Kimi \u539F\u751F\u5F15\u7528"]
+          warnings: ["The attachment has no fileId, so Kimi native references are unavailable."]
         };
       }
       const modality = getModality(attachment.mimeType);

package/dist/builtin/extensions/plan-mode/index.js

@@ -1,20 +1,26 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
+  BUILTIN_TOOL_CAPABILITY_METADATA,
+  DEFAULT_PLAN_MODE_TOOL_NAMES,
   buildExecutionReminder,
   createExecutionStateFromPlan,
   createPlanCapability,
   extractPlanTodoItems,
+  getToolCapabilityMetadata,
   isPlanModeSafeCommand,
+  isToolAllowedInPlanMode,
   markCompletedPlanSteps,
   restoreExecutionState
-} from "../../../chunks/chunk-AFTBFF6J.js";
-import "../../../chunks/chunk-PUZP2Q3F.js";
-import "../../../chunks/chunk-7ABSJC2D.js";
+} from "../../../chunks/chunk-XWNIIJ3X.js";
+import "../../../chunks/chunk-X44YTB6R.js";
+import "../../../chunks/chunk-J4P2LP7K.js";
+import "../../../chunks/chunk-HAAYC2N5.js";
 import "../../../chunks/chunk-TG2EQLX2.js";
 
 // builtin/extensions/plan-mode/index.ts
 var SESSION_METADATA_KEY = "planModeEnabled";
 var EXECUTION_METADATA_KEY = "executionState";
+var PLAN_ALLOWED_BUILTIN_TOOLS = new Set(DEFAULT_PLAN_MODE_TOOL_NAMES);
 var planModeEnabled = false;
 var executionMode = false;
 function toPlanTodoItems(state) {
@@ -80,9 +86,32 @@ function planModeExtension(ctx) {
     }
   });
   ctx.on("tool:call", async (event) => {
-    if (!planModeEnabled || event.toolName !== "bash") return;
+    if (!planModeEnabled) return;
+    if (event.runtimeTool && event.runtimeTool.name !== event.toolName) {
+      ctx.ui.notify(`Plan mode: Tool blocked (runtime instance mismatch).
+Tool: ${event.toolName}`, "error");
+      return { block: true, reason: `Plan mode: runtime tool instance does not match "${event.toolName}".` };
+    }
+    const runtimeTool = event.runtimeTool;
+    const builtinMetadata = BUILTIN_TOOL_CAPABILITY_METADATA[event.toolName];
+    const metadata = runtimeTool ? getToolCapabilityMetadata(runtimeTool) : builtinMetadata;
+    const allowed = runtimeTool ? isToolAllowedInPlanMode(runtimeTool) : builtinMetadata ? PLAN_ALLOWED_BUILTIN_TOOLS.has(event.toolName) : true;
+    if (!allowed) {
+      ctx.ui.notify(
+        `Plan mode: Tool blocked (read-only). Use /plan to disable plan mode first.
+Tool: ${event.toolName}`,
+        "error"
+      );
+      return { block: true, reason: `Plan mode: tool "${event.toolName}" is not available in plan mode (read-only). Disable plan mode with /plan to use it.` };
+    }
+    if (!metadata?.executesShell) return;
     const command = event.args?.command;
-    if (command && !isPlanModeSafeCommand(command)) {
+    if (typeof command !== "string" || command.trim().length === 0) {
+      ctx.ui.notify(`Plan mode: Shell tool blocked (missing command).
+Tool: ${event.toolName}`, "error");
+      return { block: true, reason: `Plan mode: shell tool "${event.toolName}" requires a non-empty string command.` };
+    }
+    if (!isPlanModeSafeCommand(command)) {
       ctx.ui.notify(
         `Plan mode: Command blocked (not allowlisted). Use /plan to disable plan mode first.
 Command: ${command}`,

package/dist/builtin/extensions/subagent/index.js

@@ -1,13 +1,14 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   createCliHostCapabilities
-} from "../../../chunks/chunk-4WU5VAX4.js";
+} from "../../../chunks/chunk-QYYRJ7JW.js";
 import {
   createSharedFileSystemTools,
   createSubagentCapability
-} from "../../../chunks/chunk-AFTBFF6J.js";
-import "../../../chunks/chunk-PUZP2Q3F.js";
-import "../../../chunks/chunk-7ABSJC2D.js";
+} from "../../../chunks/chunk-XWNIIJ3X.js";
+import "../../../chunks/chunk-X44YTB6R.js";
+import "../../../chunks/chunk-J4P2LP7K.js";
+import "../../../chunks/chunk-HAAYC2N5.js";
 import "../../../chunks/chunk-TG2EQLX2.js";
 
 // builtin/extensions/subagent/index.ts

package/dist/builtin/extensions/todo/index.js

@@ -7,9 +7,10 @@ import {
   executeManageTodoList,
   executionStateToTodos,
   restoreExecutionState
-} from "../../../chunks/chunk-AFTBFF6J.js";
-import "../../../chunks/chunk-PUZP2Q3F.js";
-import "../../../chunks/chunk-7ABSJC2D.js";
+} from "../../../chunks/chunk-XWNIIJ3X.js";
+import "../../../chunks/chunk-X44YTB6R.js";
+import "../../../chunks/chunk-J4P2LP7K.js";
+import "../../../chunks/chunk-HAAYC2N5.js";
 import "../../../chunks/chunk-TG2EQLX2.js";
 
 // builtin/extensions/todo/index.ts

package/dist/builtin/skills/browser-tools/README.md

@@ -10,7 +10,7 @@ node playwright-cli.js open https://example.com
 node playwright-cli.js snapshot
 node playwright-cli.js screenshot
 node playwright-cli.js console
-node playwright-cli.js network
+node playwright-cli.js requests
 node playwright-cli.js close
 ```
 

package/dist/builtin/skills/browser-tools/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: browser-tools
-description: Interactive browser automation via Microsoft Playwright CLI. Use when you need to open pages, inspect DOM snapshots, click/type, capture screenshots, inspect console/network output, or test frontend flows in a real browser.
+description: Interactive browser automation via Microsoft Playwright CLI. Use when you need to open pages, inspect DOM snapshots, click/type, capture screenshots, inspect console/request output, or test frontend flows in a real browser.
 ---
 
 # Browser Tools
@@ -19,7 +19,7 @@ node <baseDir>/playwright-cli.js click "Submit"
 node <baseDir>/playwright-cli.js type "hello"
 node <baseDir>/playwright-cli.js screenshot
 node <baseDir>/playwright-cli.js console
-node <baseDir>/playwright-cli.js network
+node <baseDir>/playwright-cli.js requests
 node <baseDir>/playwright-cli.js close
 ```
 
@@ -27,7 +27,7 @@ Use `node <baseDir>/playwright-cli.js --help` for the full command list.
 
 ## Workflow
 
-Start with `open` or `goto`, then use `snapshot` before interacting. Prefer snapshot, console, and network output for diagnosis; use screenshots when visual layout matters. Use named sessions with `-s=<session>` when you need to keep multiple browser flows separate.
+Start with `open` or `goto`, then use `snapshot` before interacting. Prefer snapshot, console, and request output for diagnosis; use screenshots when visual layout matters. Use named sessions with `-s=<session>` when you need to keep multiple browser flows separate.
 
 If the browser is not installed, run:
 

package/dist/builtin/skills/browser-tools/playwright-cli.js

@@ -1,7 +1,10 @@
 #!/usr/bin/env node
 
 import { spawnSync } from "node:child_process";
+import fs from "node:fs";
 import { createRequire } from "node:module";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
 
 const require = createRequire(import.meta.url);
 
@@ -18,7 +21,25 @@ export function runPlaywrightCli(args = process.argv.slice(2), options = {}) {
 	});
 }
 
-if (import.meta.url === `file://${process.argv[1]}`) {
+function normalizeDirectEntryPath(candidate) {
+	const resolved = path.resolve(candidate);
+	const real = fs.realpathSync.native(resolved);
+	const normalized = path.normalize(real);
+	return process.platform === "win32" ? normalized.toLowerCase() : normalized;
+}
+
+export function isDirectEntry(moduleUrl = import.meta.url, argvPath = process.argv[1]) {
+	if (!argvPath) return false;
+	try {
+		const modulePath = normalizeDirectEntryPath(fileURLToPath(moduleUrl));
+		const entryPath = normalizeDirectEntryPath(argvPath);
+		return modulePath === entryPath;
+	} catch {
+		return false;
+	}
+}
+
+if (isDirectEntry()) {
 	const result = runPlaywrightCli();
 	process.exitCode = result.status ?? 1;
 }