@cydm/pie 2.6.10 → 2.6.12

package/dist/builtin/extensions/ask-user/index.js

@@ -1,8 +1,8 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   createAskUserCapability
-} from "../../../chunks/chunk-DFWWHVJL.js";
-import "../../../chunks/chunk-PAC62XU4.js";
+} from "../../../chunks/chunk-PPEWRUMQ.js";
+import "../../../chunks/chunk-HHNOENEH.js";
 import "../../../chunks/chunk-7B4IIBVS.js";
 import "../../../chunks/chunk-XXGYUYXI.js";
 import "../../../chunks/chunk-LZQXQOPJ.js";

package/dist/builtin/extensions/plan-mode/index.js

@@ -7,8 +7,8 @@ import {
   isPlanModeSafeCommand,
   markCompletedPlanSteps,
   restoreExecutionState
-} from "../../../chunks/chunk-DFWWHVJL.js";
-import "../../../chunks/chunk-PAC62XU4.js";
+} from "../../../chunks/chunk-PPEWRUMQ.js";
+import "../../../chunks/chunk-HHNOENEH.js";
 import "../../../chunks/chunk-7B4IIBVS.js";
 import {
   Type

package/dist/builtin/extensions/subagent/index.js

@@ -1,13 +1,13 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   createCliHostCapabilities
-} from "../../../chunks/chunk-YUVGEY6X.js";
+} from "../../../chunks/chunk-AAEBH6KX.js";
 import {
   SUBAGENT_SESSION_RECORD_VERSION,
   createSharedFileSystemTools,
   createSubagentCapability
-} from "../../../chunks/chunk-DFWWHVJL.js";
-import "../../../chunks/chunk-PAC62XU4.js";
+} from "../../../chunks/chunk-PPEWRUMQ.js";
+import "../../../chunks/chunk-HHNOENEH.js";
 import "../../../chunks/chunk-7B4IIBVS.js";
 import "../../../chunks/chunk-5353DEEC.js";
 import "../../../chunks/chunk-XXGYUYXI.js";

package/dist/builtin/extensions/todo/index.js

@@ -8,8 +8,8 @@ import {
   executeManageTodoList,
   executionStateToTodos,
   restoreExecutionState
-} from "../../../chunks/chunk-DFWWHVJL.js";
-import "../../../chunks/chunk-PAC62XU4.js";
+} from "../../../chunks/chunk-PPEWRUMQ.js";
+import "../../../chunks/chunk-HHNOENEH.js";
 import "../../../chunks/chunk-7B4IIBVS.js";
 import "../../../chunks/chunk-XXGYUYXI.js";
 import "../../../chunks/chunk-LZQXQOPJ.js";

package/dist/chunks/{chunk-YUVGEY6X.js → chunk-AAEBH6KX.js}

@@ -8,7 +8,7 @@ import {
   createSharedWebSearchTool,
   interpretShellExit,
   requestInteraction
-} from "./chunk-DFWWHVJL.js";
+} from "./chunk-PPEWRUMQ.js";
 import {
   getBuiltinDir,
   getConfigDir
@@ -491,6 +491,21 @@ function createBashTool(defaultCwd, options) {
         sandboxRoot: defaultCwd ?? workingDir
       });
       if (risk.destructive && !options?.isYoloMode?.()) {
+        onUpdate?.({
+          content: [{
+            type: "text",
+            text: `\u23F8 Awaiting user confirmation (${risk.commandClass}): ${risk.riskWarnings.join("; ")}`
+          }],
+          details: {
+            exitCode: null,
+            signal: null,
+            timedOut: false,
+            shell: resolvedShell,
+            commandClass: risk.commandClass,
+            riskWarnings: risk.riskWarnings,
+            pendingConfirmation: true
+          }
+        });
         const approved = await (options?.confirm ?? requestHighRiskConfirmation)({
           command: effectiveCommand,
           shell: resolvedShell,
@@ -519,6 +534,18 @@ function createBashTool(defaultCwd, options) {
             isError: true
           };
         }
+        onUpdate?.({
+          content: [{ type: "text", text: "\u2713 Confirmed by user \u2014 running" }],
+          details: {
+            exitCode: null,
+            signal: null,
+            timedOut: false,
+            shell: resolvedShell,
+            commandClass: risk.commandClass,
+            riskWarnings: risk.riskWarnings,
+            pendingConfirmation: false
+          }
+        });
       }
       const timeoutPolicy = resolveTimeoutPolicy(timeout, risk.commandClass);
       const timeoutMs = timeoutPolicy.effectiveSeconds * 1e3;

package/dist/chunks/{chunk-PAC62XU4.js → chunk-HHNOENEH.js}

@@ -261,7 +261,15 @@ async function streamAssistantResponse(context, config, signal, stream, streamFn
       }
     }
   }
-  return await response.result();
+  const finalResult = await response.result();
+  if (signal?.aborted && finalResult.stopReason === "stop") {
+    const adjusted = { ...finalResult, stopReason: "aborted" };
+    if (addedPartial && context.messages.length > 0) {
+      context.messages[context.messages.length - 1] = adjusted;
+    }
+    return adjusted;
+  }
+  return finalResult;
 }
 async function executeToolCalls(tools, assistantMessage, signal, stream, getSteeringMessages, hooks) {
   const toolCalls = assistantMessage.content.filter((c) => c.type === "toolCall");
@@ -833,7 +841,8 @@ var Agent = class {
           (c) => c.type === "thinking" && c.thinking?.trim().length > 0 || c.type === "text" && c.text?.trim().length > 0 || c.type === "toolCall" && c.name?.trim().length > 0
         );
         if (!onlyEmpty) {
-          this.appendMessage(partial);
+          const effective = this.abortController?.signal.aborted && partial.stopReason === "stop" ? { ...partial, stopReason: "aborted" } : partial;
+          this.appendMessage(effective);
         }
       }
     } catch (err) {

package/dist/chunks/{chunk-DFWWHVJL.js → chunk-PPEWRUMQ.js}

@@ -2,7 +2,7 @@ import { createRequire as __createRequire } from "node:module"; const require =
 import {
   Agent,
   getToolCallerIdentity
-} from "./chunk-PAC62XU4.js";
+} from "./chunk-HHNOENEH.js";
 import {
   AssistantMessageEventStream,
   FileSystemGateway,
@@ -1215,7 +1215,10 @@ var DESTRUCTIVE_PATTERNS = [
   { pattern: /\bgit\s+stash[ \t]+(drop|clear)\b/, warning: "may permanently remove stashed changes", commandClass: "git_destructive" },
   { pattern: /\bgit\s+branch\s+(-D[ \t]|--delete\s+--force|--force\s+--delete)\b/, warning: "may force-delete a branch", commandClass: "git_destructive" },
   { pattern: /\bgit\s+(commit|push|merge)\b[^;&|\n]*--no-verify\b/, warning: "may skip safety hooks", commandClass: "git_destructive" },
-  { pattern: /(^|[;&|\n]\s*)rm\s+-[a-zA-Z]*[rR][a-zA-Z]*f|(^|[;&|\n]\s*)rm\s+-[a-zA-Z]*f[a-zA-Z]*[rR]/, warning: "may recursively force-remove files", commandClass: "filesystem_write" },
+  // `rm -rf` is NOT in this regex list: raw-text matching both missed split
+  // flags (`rm -r -f`) and false-positived on quoted literals mentioning
+  // `rm -rf` (grep patterns, echo, docs). It is detected semantically by
+  // containsRecursiveForceRemove in classifyShellCommand instead.
   { pattern: /\bsudo\b|\bsu\s+-|\bchmod\s+777\b|\bchown\s+-R\b/, warning: "may require elevated privileges or weaken permissions", commandClass: "privilege_escalation" },
   { pattern: /\b(DROP|TRUNCATE)\s+(TABLE|DATABASE|SCHEMA)\b/i, warning: "may drop or truncate database objects", commandClass: "infra_destructive" },
   { pattern: /\bDELETE\s+FROM\s+\w+[ \t]*(;|"|'|\n|$)/i, warning: "may delete all rows from a database table", commandClass: "infra_destructive" },
@@ -1223,6 +1226,9 @@ var DESTRUCTIVE_PATTERNS = [
   { pattern: /\bterraform\s+destroy\b/, warning: "may destroy Terraform infrastructure", commandClass: "infra_destructive" }
 ];
 var RM_FORCE_RECURSIVE_WARNING = "may recursively force-remove files";
+var RM_RECURSIVE_WARNING = "may recursively remove files";
+var FIND_DELETE_WARNING = "may recursively delete matched files";
+var RSYNC_DELETE_WARNING = "may delete extraneous destination files";
 var SHELL_DYNAMIC_TOKEN = /[$`*?[\]{}~]/;
 var PROTECTED_POSIX_PATHS = /* @__PURE__ */ new Set([
   "/",
@@ -1276,7 +1282,45 @@ function classifyBashCommand(command, options) {
   return classifyShellCommand(command, "bash", options);
 }
 function splitShellSegments(command) {
-  return command.split(/&&|\|\||[;&|\n]/).map((part) => part.trim()).filter(Boolean);
+  const segments = [];
+  let current = "";
+  let quote;
+  for (let index = 0; index < command.length; index += 1) {
+    const char = command[index];
+    if (quote) {
+      if (quote === '"' && char === "\\" && index + 1 < command.length) {
+        current += char;
+        current += command[index + 1];
+        index += 1;
+        continue;
+      }
+      current += char;
+      if (char === quote) quote = void 0;
+      continue;
+    }
+    if (char === "'" || char === '"') {
+      quote = char;
+      current += char;
+      continue;
+    }
+    if (char === "\\" && index + 1 < command.length) {
+      current += char;
+      current += command[index + 1];
+      index += 1;
+      continue;
+    }
+    if (char === "&" || char === "|" || char === ";" || char === "\n") {
+      if ((char === "&" || char === "|") && command[index + 1] === char) {
+        index += 1;
+      }
+      segments.push(current);
+      current = "";
+      continue;
+    }
+    current += char;
+  }
+  segments.push(current);
+  return segments.map((part) => part.trim()).filter(Boolean);
 }
 function splitShellWords(segment) {
   const words = [];
@@ -1348,7 +1392,7 @@ function isProtectedPosixPath(target) {
 function isStaticPathToken(token) {
   return Boolean(token) && !token.startsWith("-") && !token.includes("\0") && !SHELL_DYNAMIC_TOKEN.test(token);
 }
-function parseRmForceRecursiveTargets(words) {
+function scanRmInvocation(words) {
   const executable = words[0] ?? "";
   if (executable !== "rm" && !executable.endsWith("/rm")) return void 0;
   let recursive = false;
@@ -1361,9 +1405,8 @@ function parseRmForceRecursiveTargets(words) {
       continue;
     }
     if (!endOfOptions && word.startsWith("--")) {
-      if (word === "--recursive" || word === "--dir") recursive = true;
+      if (word === "--recursive") recursive = true;
       else if (word === "--force") force = true;
-      else return void 0;
       continue;
     }
     if (!endOfOptions && /^-[A-Za-z]+$/.test(word)) {
@@ -1373,7 +1416,37 @@ function parseRmForceRecursiveTargets(words) {
     }
     targets.push(word);
   }
-  return recursive && force && targets.length > 0 ? targets : void 0;
+  return { recursive, force, targets };
+}
+var COMMAND_POSITION_RM_RECURSIVE_PATTERN = /^rm\s+-[a-zA-Z]*[rR]/;
+function recursiveRemoveWarnings(command) {
+  const found = [];
+  const warnings = [];
+  for (const segment of splitShellSegments(command)) {
+    const words = splitShellWords(segment);
+    if (words) {
+      const scan = scanRmInvocation(words);
+      if (scan?.recursive) found.push({ scan });
+      const xargsArgs = words[0] === "xargs" || words[0]?.endsWith("/xargs") ? words.slice(1) : void 0;
+      const xargsScan = xargsArgs ? scanRmInvocation(xargsArgs) : void 0;
+      if (xargsScan?.recursive) found.push({ scan: xargsScan });
+      const executable = words[0] ?? "";
+      if ((executable === "find" || executable.endsWith("/find")) && words.slice(1).some((word) => word === "-delete")) {
+        warnings.push(FIND_DELETE_WARNING);
+      }
+      if ((executable === "rsync" || executable.endsWith("/rsync")) && words.slice(1).some((word) => word === "--delete" || word.startsWith("--delete-"))) {
+        warnings.push(RSYNC_DELETE_WARNING);
+      }
+      continue;
+    }
+    if (COMMAND_POSITION_RM_RECURSIVE_PATTERN.test(segment)) {
+      warnings.push(RM_RECURSIVE_WARNING);
+    }
+  }
+  for (const { scan } of found) {
+    warnings.push(scan.force ? RM_FORCE_RECURSIVE_WARNING : RM_RECURSIVE_WARNING);
+  }
+  return warnings;
 }
 function resolveStaticScopedTarget(target, cwd, root) {
   if (!isStaticPathToken(target)) return void 0;
@@ -1406,10 +1479,10 @@ function isStaticallyScopedRecursiveForceRemove(command, options) {
       currentCwd = next;
       continue;
     }
-    const targets = parseRmForceRecursiveTargets(words);
-    if (!targets) continue;
+    const scan = scanRmInvocation(words);
+    if (!scan?.recursive || scan.targets.length === 0) continue;
     sawRm = true;
-    if (!targets.every((target) => resolveStaticScopedTarget(target, currentCwd, normalizedRoot))) {
+    if (!scan.targets.every((target) => resolveStaticScopedTarget(target, currentCwd, normalizedRoot))) {
       return false;
     }
   }
@@ -1420,12 +1493,18 @@ function classifyShellCommand(command, shell = "bash", options) {
   let commandClass = "unknown_shell";
   let destructive = false;
   const destructivePatterns = shell === "powershell" ? [...POWERSHELL_DESTRUCTIVE_PATTERNS, ...DESTRUCTIVE_PATTERNS] : shell === "cmd" ? [...CMD_DESTRUCTIVE_PATTERNS, ...DESTRUCTIVE_PATTERNS] : DESTRUCTIVE_PATTERNS;
+  const removeWarnings = recursiveRemoveWarnings(command);
+  if (removeWarnings.length > 0) {
+    if (shell === "bash" && isStaticallyScopedRecursiveForceRemove(command, options)) {
+      commandClass = "filesystem_write";
+    } else {
+      warnings.push(...removeWarnings);
+      commandClass = "filesystem_write";
+      destructive = true;
+    }
+  }
   for (const entry of destructivePatterns) {
     if (entry.pattern.test(command)) {
-      if (shell === "bash" && entry.commandClass === "filesystem_write" && entry.warning === RM_FORCE_RECURSIVE_WARNING && isStaticallyScopedRecursiveForceRemove(command, options)) {
-        commandClass = "filesystem_write";
-        continue;
-      }
       warnings.push(entry.warning);
       commandClass = entry.commandClass;
       destructive = true;
@@ -8585,6 +8664,18 @@ var SessionTraceSnapshotWriter = class {
   recentTurnsLimit;
   recentEventsLimit;
   debounceMs;
+  /**
+   * Current in-memory trace snapshot for the active session, or null
+   * when no session is active. Read-only observability accessor: never
+   * loads, mutates, or flushes state.
+   */
+  getLiveSnapshot() {
+    if (!this.cachedSessionId || !this.cachedController) return null;
+    if (this.cachedSessionId !== String(this.options.getSessionId() || "").trim()) {
+      return null;
+    }
+    return this.cachedController.getSnapshot();
+  }
   loadController(sessionId) {
     if (this.cachedSessionId === sessionId && this.cachedController) {
       return this.cachedController;

package/dist/chunks/{src-HPIBCE2I.js → src-OWQI5M6W.js}

@@ -6,7 +6,7 @@ import {
   bindToolCallerIdentity,
   createToolCallerIdentity,
   getToolCallerIdentity
-} from "./chunk-PAC62XU4.js";
+} from "./chunk-HHNOENEH.js";
 import "./chunk-7B4IIBVS.js";
 import "./chunk-XXGYUYXI.js";
 import "./chunk-LZQXQOPJ.js";