@cydm/pie 1.0.37 → 1.0.39

package/README.md

@@ -309,6 +309,8 @@ Pie exposes one default model-visible web tool: `web_research`. Use it for publi
 
 Pie's default tools operate from the current workspace. File tools are workspace-scoped, `~/.pie` is allowlisted for Pie configuration/session support, and shell commands return structured timeout/truncation/error details. The canonical shell tool is still named `bash` for compatibility; on Windows `shell:auto` uses PowerShell, and callers can explicitly request `bash`, `powershell`, or `cmd`. High-risk shell commands require confirmation outside YOLO mode. `/settings/yolo` relaxes filesystem sandbox directory restrictions and should only be used in trusted workspaces. `pie permissions` prints the current policy-derived safety summary.
 
+In interactive Plan mode (`/tools/plan`), workspace editing tools are unavailable. The `bash` guard accepts simple read commands and read-only pipelines such as `rg 'TODO' . | head -20`; it blocks redirects, command substitution, and write-capable subcommands. Use `plan_scratch` to write, read, or list temporary text drafts in a directory dedicated to the current session. Shell redirection to `/tmp` remains blocked in Plan mode. Leave Plan mode before changing workspace files.
+
 ## Code Intelligence
 
 `code_intel` provides read-only JS/TS diagnostics, definition, references, symbols, and hover. CLI uses an isolated TypeScript worker by default and falls back to bounded lightweight text analysis on worker startup/OOM/crash/timeout failures; aborts, permission errors, and path escapes do not fallback. Unity uses a Node sidecar contract for TypeScript intelligence so the PuerTS bundle does not import Node-only parser dependencies.

package/dist/builtin/extensions/ask-user/index.js

@@ -1,9 +1,9 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   createAskUserCapability
-} from "../../../chunks/chunk-MGZHZSHB.js";
-import "../../../chunks/chunk-4B42ZU4B.js";
-import "../../../chunks/chunk-64XJIKVK.js";
+} from "../../../chunks/chunk-SNSSIR3E.js";
+import "../../../chunks/chunk-7IFMKPHH.js";
+import "../../../chunks/chunk-HPTWCKJE.js";
 import "../../../chunks/chunk-TG2EQLX2.js";
 
 // builtin/extensions/ask-user/index.ts

package/dist/builtin/extensions/plan-mode/index.js

@@ -7,14 +7,23 @@ import {
   isPlanModeSafeCommand,
   markCompletedPlanSteps,
   restoreExecutionState
-} from "../../../chunks/chunk-MGZHZSHB.js";
-import "../../../chunks/chunk-4B42ZU4B.js";
-import "../../../chunks/chunk-64XJIKVK.js";
+} from "../../../chunks/chunk-SNSSIR3E.js";
+import "../../../chunks/chunk-7IFMKPHH.js";
+import {
+  Type
+} from "../../../chunks/chunk-HPTWCKJE.js";
 import "../../../chunks/chunk-TG2EQLX2.js";
 
 // builtin/extensions/plan-mode/index.ts
+import { randomUUID } from "node:crypto";
+import { promises as fs, constants as fsConstants } from "node:fs";
+import os from "node:os";
+import path from "node:path";
 var SESSION_METADATA_KEY = "planModeEnabled";
 var EXECUTION_METADATA_KEY = "executionState";
+var SCRATCH_METADATA_KEY = "planScratchId";
+var SCRATCH_NAME = /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,63}$/;
+var MAX_SCRATCH_CHARS = 64e3;
 var planModeEnabled = false;
 var executionMode = false;
 function toPlanTodoItems(state) {
@@ -26,6 +35,62 @@ function toPlanTodoItems(state) {
 }
 function planModeExtension(ctx) {
   const capability = createPlanCapability();
+  function scratchDirectory() {
+    const metadata = ctx.getSessionMetadata();
+    let id = metadata?.[SCRATCH_METADATA_KEY];
+    if (typeof id !== "string" || !/^[0-9a-f-]{36}$/.test(id)) {
+      id = randomUUID();
+      ctx.setSessionMetadata(SCRATCH_METADATA_KEY, id);
+    }
+    return path.join(os.tmpdir(), `pie-plan-${id}`);
+  }
+  ctx.registerTool({
+    name: "plan_scratch",
+    label: "plan_scratch",
+    description: "Read, write, or list session-local temporary text drafts while planning. Use a simple filename; files stay outside the workspace. Shell output redirection is blocked in Plan mode.",
+    parameters: Type.Object({
+      action: Type.Union([Type.Literal("write"), Type.Literal("read"), Type.Literal("list")]),
+      name: Type.Optional(Type.String({ description: "Simple filename within this session's scratch directory" })),
+      content: Type.Optional(Type.String({ description: "Text to write (maximum 64,000 characters)" }))
+    }),
+    risk: { riskClass: "session_mutation", permissionScope: "session", mutatesSession: true, availableInPlanMode: true },
+    async execute(args) {
+      const reply = (text, isError = false) => ({ content: [{ type: "text", text }], isError });
+      try {
+        const directory = scratchDirectory();
+        await fs.mkdir(directory, { recursive: true, mode: 448 });
+        if (!(await fs.lstat(directory)).isDirectory()) return reply("Temporary draft directory is invalid.", true);
+        if (args.action === "list") {
+          const names = (await fs.readdir(directory)).filter((name) => SCRATCH_NAME.test(name)).sort();
+          return reply(names.length ? names.join("\n") : "No temporary drafts in this session.");
+        }
+        if (!args.name || !SCRATCH_NAME.test(args.name) || args.name === "." || args.name === "..") {
+          return reply("Invalid draft filename. Use letters, digits, dots, underscores, or hyphens without directories.", true);
+        }
+        const filename = path.join(directory, args.name);
+        if (args.action === "read") {
+          const handle2 = await fs.open(filename, fsConstants.O_RDONLY | (fsConstants.O_NOFOLLOW || 0));
+          try {
+            return reply(await handle2.readFile("utf8"));
+          } finally {
+            await handle2.close();
+          }
+        }
+        if (typeof args.content !== "string" || args.content.length > MAX_SCRATCH_CHARS) {
+          return reply(`Draft content must be text of at most ${MAX_SCRATCH_CHARS} characters.`, true);
+        }
+        const handle = await fs.open(filename, fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_TRUNC | (fsConstants.O_NOFOLLOW || 0), 384);
+        try {
+          await handle.writeFile(args.content, "utf8");
+        } finally {
+          await handle.close();
+        }
+        return reply(`Saved ${args.name} (${args.content.length} characters).`);
+      } catch (error) {
+        return reply(`Temporary draft failed: ${error instanceof Error ? error.message : String(error)}`, true);
+      }
+    }
+  });
   function readPersistedPlanMode() {
     return ctx.getSessionMetadata()?.[SESSION_METADATA_KEY] === true;
   }
@@ -45,7 +110,7 @@ function planModeExtension(ctx) {
       const completed = state.steps.filter((step) => step.status === "completed").length;
       ctx.ui.notify(`\u{1F4CB} Plan: ${completed}/${state.steps.length} completed`, "info");
     } else if (planModeEnabled) {
-      ctx.ui.notify("\u23F8\uFE0F Plan mode active (read-only)", "info");
+      ctx.ui.notify("\u23F8\uFE0F Plan mode active (workspace read-only; session drafts available)", "info");
     }
   }
   function applyPlanModeState(enabled, forcePromptInjection = false) {
@@ -84,11 +149,11 @@ function planModeExtension(ctx) {
     const command = event.args?.command;
     if (command && !isPlanModeSafeCommand(command)) {
       ctx.ui.notify(
-        `Plan mode: Command blocked (not allowlisted). Use /plan to disable plan mode first.
+        `Plan mode: Command blocked. Use read-only commands, or plan_scratch for temporary drafts. Use /plan to leave Plan mode.
 Command: ${command}`,
         "error"
       );
-      return { block: true, reason: `Plan mode: command "${command}" is not in the allowlist. Disable plan mode with /plan to run this command.` };
+      return { block: true, reason: `Plan mode: command "${command}" is not a read-only shell command. Use plan_scratch for temporary drafts, or /plan to leave Plan mode.` };
     }
   });
   ctx.on("agent:start", async () => {

package/dist/builtin/extensions/subagent/index.js

@@ -1,13 +1,13 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   createCliHostCapabilities
-} from "../../../chunks/chunk-QXTAEPLR.js";
+} from "../../../chunks/chunk-F6VAOGFL.js";
 import {
   createSharedFileSystemTools,
   createSubagentCapability
-} from "../../../chunks/chunk-MGZHZSHB.js";
-import "../../../chunks/chunk-4B42ZU4B.js";
-import "../../../chunks/chunk-64XJIKVK.js";
+} from "../../../chunks/chunk-SNSSIR3E.js";
+import "../../../chunks/chunk-7IFMKPHH.js";
+import "../../../chunks/chunk-HPTWCKJE.js";
 import "../../../chunks/chunk-TG2EQLX2.js";
 
 // builtin/extensions/subagent/index.ts

package/dist/builtin/extensions/todo/index.js

@@ -7,9 +7,9 @@ import {
   executeManageTodoList,
   executionStateToTodos,
   restoreExecutionState
-} from "../../../chunks/chunk-MGZHZSHB.js";
-import "../../../chunks/chunk-4B42ZU4B.js";
-import "../../../chunks/chunk-64XJIKVK.js";
+} from "../../../chunks/chunk-SNSSIR3E.js";
+import "../../../chunks/chunk-7IFMKPHH.js";
+import "../../../chunks/chunk-HPTWCKJE.js";
 import "../../../chunks/chunk-TG2EQLX2.js";
 
 // builtin/extensions/todo/index.ts

package/dist/chunks/{chunk-4B42ZU4B.js → chunk-7IFMKPHH.js}

@@ -3,7 +3,7 @@ import {
   EventStream,
   streamSimple,
   validateToolArguments
-} from "./chunk-64XJIKVK.js";
+} from "./chunk-HPTWCKJE.js";
 
 // ../../packages/agent-core/src/agent-loop.ts
 function createLoopErrorMessage(error, config, signal) {

package/dist/chunks/{chunk-QXTAEPLR.js → chunk-F6VAOGFL.js}

@@ -8,10 +8,10 @@ import {
   createSharedWebSearchTool,
   interpretShellExit,
   requestInteraction
-} from "./chunk-MGZHZSHB.js";
+} from "./chunk-SNSSIR3E.js";
 import {
   Type
-} from "./chunk-64XJIKVK.js";
+} from "./chunk-HPTWCKJE.js";
 
 // src/config.ts
 import { existsSync, mkdirSync, readFileSync, renameSync } from "fs";