@cydm/pie 2.5.2 → 2.6.0

package/dist/builtin/extensions/ask-user/index.js

@@ -1,9 +1,9 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   createAskUserCapability
-} from "../../../chunks/chunk-LO2V5DZZ.js";
-import "../../../chunks/chunk-RTTGO2A6.js";
-import "../../../chunks/chunk-UD7KYQ6J.js";
+} from "../../../chunks/chunk-AZ336HKF.js";
+import "../../../chunks/chunk-Y4CYXJR7.js";
+import "../../../chunks/chunk-O2DKMLNX.js";
 import "../../../chunks/chunk-XXGYUYXI.js";
 import "../../../chunks/chunk-LZQXQOPJ.js";
 

package/dist/builtin/extensions/mcp-adapter/index.js

@@ -24461,20 +24461,35 @@ function redactSecrets(text, secrets) {
   }
   return sanitized;
 }
-function sanitizeDiagnostic(text, secrets) {
-  let sanitized = redactSecrets(text, secrets);
-  if (secrets.length > 0 && sanitized.length > 0) {
-    for (const secret of secrets) {
-      for (let keep = Math.min(secret.length - 1, sanitized.length); keep >= 4; keep--) {
-        if (sanitized.startsWith(secret.slice(secret.length - keep))) {
-          sanitized = `[redacted]${sanitized.slice(keep)}`;
-          break;
-        }
+function redactLeadingSecretSuffix(text, secrets) {
+  if (secrets.length === 0 || text.length === 0) return text;
+  for (const secret of secrets) {
+    for (let keep = Math.min(secret.length - 1, text.length); keep >= 4; keep--) {
+      if (text.startsWith(secret.slice(secret.length - keep))) {
+        return `[redacted]${text.slice(keep)}`;
+      }
+    }
+  }
+  return text;
+}
+function redactTrailingSecretPrefix(text, secrets) {
+  if (secrets.length === 0 || text.length === 0) return text;
+  for (const secret of secrets) {
+    for (let keep = Math.min(secret.length - 1, text.length); keep >= 4; keep--) {
+      if (text.endsWith(secret.slice(0, keep))) {
+        return `${text.slice(0, text.length - keep)}[redacted]`;
       }
     }
   }
+  return text;
+}
+function redactStderrTail(tail, secrets) {
+  return redactTrailingSecretPrefix(redactLeadingSecretSuffix(redactSecrets(tail, secrets), secrets), secrets);
+}
+function sanitizeDiagnostic(text, secrets) {
+  const sanitized = redactLeadingSecretSuffix(redactSecrets(text, secrets), secrets);
   if (sanitized.length > DIAGNOSTIC_TEXT_LIMIT) {
-    sanitized = `${sanitized.slice(0, DIAGNOSTIC_TEXT_LIMIT)}\u2026[truncated ${sanitized.length - DIAGNOSTIC_TEXT_LIMIT} chars]`;
+    return `${sanitized.slice(0, DIAGNOSTIC_TEXT_LIMIT)}\u2026[truncated ${sanitized.length - DIAGNOSTIC_TEXT_LIMIT} chars]`;
   }
   return sanitized;
 }
@@ -24543,14 +24558,20 @@ function cacheFingerprint(definition) {
     command: definition.command,
     args: definition.args,
     // Canonicalized (key-sorted) so reordering equivalent env/header keys
-    // does not invalidate cached metadata.
-    env: Object.fromEntries(Object.entries(definition.env ?? {}).sort(([a], [b]) => a.localeCompare(b))),
+    // does not invalidate cached metadata. Sorting must be locale-stable
+    // (code-unit order, not localeCompare) so the same definition
+    // fingerprints identically on every machine.
+    env: canonicalizeKeys(definition.env),
     serverCwd: definition.cwd,
     url: definition.url,
-    headers: Object.fromEntries(Object.entries(definition.headers ?? {}).sort(([a], [b]) => a.localeCompare(b))),
+    headers: canonicalizeKeys(definition.headers),
     inheritEnv: definition.inheritEnv
   })).digest("hex").slice(0, 24);
 }
+function canonicalizeKeys(record2) {
+  if (!record2) return {};
+  return Object.fromEntries(Object.entries(record2).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0));
+}
 var McpServerManager = class {
   constructor(definitions, cacheDir, log, now = Date.now) {
     this.now = now;
@@ -24757,7 +24778,6 @@ var McpServerManager = class {
     }
   }
   /** Cached descriptors for one server (from the metadata cache file). */
-  /** Cached descriptors for one server (from the metadata cache file). */
   cachedToolsFor(server) {
     return this.loadCatalog().filter((tool) => tool.server === sanitizeName(server));
   }
@@ -24887,8 +24907,8 @@ var McpServerManager = class {
       runtime = await this.connect(server, signal);
     } catch (error2) {
       const runtimeState = this.runtimes.get(server);
-      const tail = runtimeState?.stderrTail.trim();
       const secrets = definitionSecrets(definition);
+      const tail = redactStderrTail(runtimeState?.stderrTail ?? "", secrets).trim();
       return {
         delivery: "not_sent",
         error: sanitizeDiagnostic(
@@ -25186,6 +25206,7 @@ ${truncate(JSON.stringify(schema ?? {}, null, 2), maxBytes)}` : `unknown MCP too
       }
       const resolved = getManager().resolvePrefixedName(params.tool);
       const server = descriptor?.server ?? resolved?.server ?? "";
+      let dispatchManager;
       if (server) {
         const managerAtGate = getManager();
         const trust = await ensureTrusted(server, managerAtGate);
@@ -25204,6 +25225,7 @@ ${truncate(JSON.stringify(schema ?? {}, null, 2), maxBytes)}` : `unknown MCP too
             isError: true
           };
         }
+        dispatchManager = managerNow;
       }
       let args = {};
       if (typeof params.args === "string") {
@@ -25219,7 +25241,7 @@ ${truncate(JSON.stringify(schema ?? {}, null, 2), maxBytes)}` : `unknown MCP too
       } else if (params.args && typeof params.args === "object" && !Array.isArray(params.args)) {
         args = params.args;
       }
-      const outcome = await getManager().callTool(params.tool, args, toolContext.signal);
+      const outcome = await (dispatchManager ?? getManager()).callTool(params.tool, args, toolContext.signal);
       return mapMcpOutcome(outcome, maxBytes);
     }
   };

package/dist/builtin/extensions/plan-mode/index.js

@@ -7,9 +7,9 @@ import {
   isPlanModeSafeCommand,
   markCompletedPlanSteps,
   restoreExecutionState
-} from "../../../chunks/chunk-LO2V5DZZ.js";
-import "../../../chunks/chunk-RTTGO2A6.js";
-import "../../../chunks/chunk-UD7KYQ6J.js";
+} from "../../../chunks/chunk-AZ336HKF.js";
+import "../../../chunks/chunk-Y4CYXJR7.js";
+import "../../../chunks/chunk-O2DKMLNX.js";
 import {
   Type
 } from "../../../chunks/chunk-XXGYUYXI.js";

package/dist/builtin/extensions/subagent/index.js

@@ -1,13 +1,13 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   createCliHostCapabilities
-} from "../../../chunks/chunk-M4OJARWJ.js";
+} from "../../../chunks/chunk-G6KCJA6B.js";
 import {
   createSharedFileSystemTools,
   createSubagentCapability
-} from "../../../chunks/chunk-LO2V5DZZ.js";
-import "../../../chunks/chunk-RTTGO2A6.js";
-import "../../../chunks/chunk-UD7KYQ6J.js";
+} from "../../../chunks/chunk-AZ336HKF.js";
+import "../../../chunks/chunk-Y4CYXJR7.js";
+import "../../../chunks/chunk-O2DKMLNX.js";
 import "../../../chunks/chunk-5353DEEC.js";
 import "../../../chunks/chunk-XXGYUYXI.js";
 import "../../../chunks/chunk-LZQXQOPJ.js";
@@ -39,11 +39,14 @@ function subagentExtension(ctx) {
     debugLog: (module, message, data) => ctx.log(`[subagent:${module}] ${message}${data !== void 0 ? ` ${JSON.stringify(data)}` : ""}`),
     resolveModelClass: (modelClass) => ctx.resolveModelClass?.(modelClass),
     resolveModelRef: (modelRef) => ctx.resolveModelRef?.(modelRef),
-    createRuntimeTools: () => {
+    createRuntimeTools: (mode) => {
       const parentRuntimeTools = ctx.getRuntimeTools();
       if (Array.isArray(parentRuntimeTools) && parentRuntimeTools.length > 0) {
         return parentRuntimeTools.filter((tool) => tool?.name !== "spawn_subagents_parallel");
       }
+      if (mode === "edit") {
+        throw new Error("Edit delegation requires the parent's executable runtime tools; fallback tools are read-mode only.");
+      }
       const configDir = path.join(os.homedir(), ".pie");
       const fsOptions = ctx.yoloMode ? { allowlistedDirs: ["/"] } : {
         accessRoots: [

package/dist/builtin/extensions/todo/index.js

@@ -8,9 +8,9 @@ import {
   executeManageTodoList,
   executionStateToTodos,
   restoreExecutionState
-} from "../../../chunks/chunk-LO2V5DZZ.js";
-import "../../../chunks/chunk-RTTGO2A6.js";
-import "../../../chunks/chunk-UD7KYQ6J.js";
+} from "../../../chunks/chunk-AZ336HKF.js";
+import "../../../chunks/chunk-Y4CYXJR7.js";
+import "../../../chunks/chunk-O2DKMLNX.js";
 import "../../../chunks/chunk-XXGYUYXI.js";
 import "../../../chunks/chunk-LZQXQOPJ.js";