@cydm/pie 2.7.7 → 2.7.9

package/dist/builtin/extensions/ask-user/index.js

@@ -1,9 +1,9 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   createAskUserCapability
-} from "../../../chunks/chunk-UPGEXDEQ.js";
-import "../../../chunks/chunk-W5B3OXHQ.js";
-import "../../../chunks/chunk-2FEDB5GR.js";
+} from "../../../chunks/chunk-AX5QEIKP.js";
+import "../../../chunks/chunk-5SP2H5QK.js";
+import "../../../chunks/chunk-SMGBZQI5.js";
 import "../../../chunks/chunk-XXGYUYXI.js";
 import "../../../chunks/chunk-LZQXQOPJ.js";
 

package/dist/builtin/extensions/plan-mode/index.js

@@ -4,13 +4,11 @@ import {
   createExecutionStateFromPlan,
   createPlanCapability,
   extractPlanTodoItems,
-  getToolCapabilityMetadata,
-  isPlanModeSafeCommand,
   markCompletedPlanSteps,
   restoreExecutionState
-} from "../../../chunks/chunk-UPGEXDEQ.js";
-import "../../../chunks/chunk-W5B3OXHQ.js";
-import "../../../chunks/chunk-2FEDB5GR.js";
+} from "../../../chunks/chunk-AX5QEIKP.js";
+import "../../../chunks/chunk-5SP2H5QK.js";
+import "../../../chunks/chunk-SMGBZQI5.js";
 import {
   Type
 } from "../../../chunks/chunk-XXGYUYXI.js";
@@ -258,19 +256,6 @@ Update the plan accordingly and call plan_submit again with the revised steps. D
       togglePlanMode();
     }
   });
-  ctx.on("tool:call", async (event) => {
-    if (!planModeEnabled) return;
-    if (getToolCapabilityMetadata({ name: event.toolName })?.executesShell !== true) return;
-    const command = typeof event.args === "object" && event.args !== null ? event.args.command : void 0;
-    if (typeof command === "string" && !isPlanModeSafeCommand(command)) {
-      ctx.ui.notify(
-        `Plan mode: Command blocked. Use read-only commands or plan_scratch for temporary drafts; submit the finished plan with plan_submit. Use /tools/plan to leave Plan mode.
-Command: ${command}`,
-        "error"
-      );
-      return { block: true, reason: `Plan mode: command "${command}" is not a read-only shell command. Use plan_scratch for temporary drafts, submit the finished plan with plan_submit, or use /tools/plan to leave Plan mode.` };
-    }
-  });
   ctx.on("agent:start", async () => {
     const persisted = readPersistedPlanMode();
     applyPlanModeState(persisted);

package/dist/builtin/extensions/subagent/index.js

@@ -4,14 +4,15 @@ import {
   formatTransportLifecycle,
   getConfigDir,
   logTransportLifecycle
-} from "../../../chunks/chunk-IU5L5DED.js";
+} from "../../../chunks/chunk-ABZOXNDK.js";
 import {
   SUBAGENT_SESSION_RECORD_VERSION,
+  createPolicyEnforcedTools,
   createSharedFileSystemTools,
   createSubagentCapability
-} from "../../../chunks/chunk-UPGEXDEQ.js";
-import "../../../chunks/chunk-W5B3OXHQ.js";
-import "../../../chunks/chunk-2FEDB5GR.js";
+} from "../../../chunks/chunk-AX5QEIKP.js";
+import "../../../chunks/chunk-5SP2H5QK.js";
+import "../../../chunks/chunk-SMGBZQI5.js";
 import "../../../chunks/chunk-XXGYUYXI.js";
 import "../../../chunks/chunk-LZQXQOPJ.js";
 
@@ -206,7 +207,13 @@ function createSubagentSessionStore(sessionsDir, log, deps) {
           }
         }
         try {
-          const stat = fs.statSync(lockPath);
+          let stat;
+          try {
+            stat = fs.statSync(lockPath);
+          } catch (statError) {
+            if (statError.code === "ENOENT") continue;
+            throw new Error(`Subagent session "${id}" is busy (session lease is unreadable).`);
+          }
           let lockContent;
           try {
             lockContent = fs.readFileSync(lockPath, "utf8");
@@ -226,7 +233,8 @@ function createSubagentSessionStore(sessionsDir, log, deps) {
           let current;
           try {
             current = fs.readFileSync(lockPath, "utf8");
-          } catch {
+          } catch (recheckError) {
+            if (recheckError.code === "ENOENT") continue;
             current = void 0;
           }
           if (current !== lockContent) {
@@ -422,7 +430,9 @@ function subagentExtension(ctx) {
       };
       const fsTools = createSharedFileSystemTools(ctx.cwd, fsOptions);
       const cliHostCapabilities = createCliHostCapabilities(ctx.cwd);
-      return [...fsTools, ...cliHostCapabilities.tools];
+      return createPolicyEnforcedTools([...fsTools, ...cliHostCapabilities.tools], {
+        getContext: () => ({ mode: "normal", confirmationPolicy: "allow" })
+      });
     }
   });
   ctx.registerCleanup?.(() => capability.dispose());

package/dist/builtin/extensions/todo/index.js

@@ -8,9 +8,9 @@ import {
   executeManageTodoList,
   executionStateToTodos,
   restoreExecutionState
-} from "../../../chunks/chunk-UPGEXDEQ.js";
-import "../../../chunks/chunk-W5B3OXHQ.js";
-import "../../../chunks/chunk-2FEDB5GR.js";
+} from "../../../chunks/chunk-AX5QEIKP.js";
+import "../../../chunks/chunk-5SP2H5QK.js";
+import "../../../chunks/chunk-SMGBZQI5.js";
 import "../../../chunks/chunk-XXGYUYXI.js";
 import "../../../chunks/chunk-LZQXQOPJ.js";
 

package/dist/chunks/{chunk-W5B3OXHQ.js → chunk-5SP2H5QK.js}

@@ -4,7 +4,7 @@ import {
   disposeModelTransports,
   streamSimple,
   validateToolArguments
-} from "./chunk-2FEDB5GR.js";
+} from "./chunk-SMGBZQI5.js";
 
 // ../../packages/agent-core/src/agent-loop.ts
 function createLoopErrorMessage(error, config, signal) {

package/dist/chunks/{chunk-IU5L5DED.js → chunk-ABZOXNDK.js}

@@ -4,12 +4,13 @@ import {
   createSharedWebFetchTool,
   createSharedWebResearchTool,
   createSharedWebSearchTool,
+  defaultShellKindForPlatform,
   interpretShellExit,
   requestInteraction
-} from "./chunk-UPGEXDEQ.js";
+} from "./chunk-AX5QEIKP.js";
 import {
   getLogger
-} from "./chunk-2FEDB5GR.js";
+} from "./chunk-SMGBZQI5.js";
 import {
   Type
 } from "./chunk-XXGYUYXI.js";
@@ -320,10 +321,11 @@ function truncateStringToBytesFromEnd(str, maxBytes) {
 var WINDOWS_DIALECT_BLOCK = `On this host shell:auto runs Windows PowerShell 5.1 (powershell.exe). Write PowerShell syntax: separate statements with ';' (PS 5.1 has no && or || \u2014 chain with "if ($?) { ... }" or check $LASTEXITCODE after native commands). Nested quotes in inline "node -e" or "-Command" strings are fragile; write a temp script file with write_file and execute it instead. Heredocs do not exist; multi-line commands work, but long scripts run more reliably from a file. Judge outcomes by the exit code; stderr may carry PowerShell-generated records such as CLIXML. shell:"bash" runs the first real bash on PATH (Git Bash when installed) and fails with an actionable error when only the WSL stub exists; shell:"cmd" runs cmd.exe.`;
 var POSIX_DIALECT_BLOCK = 'On this host shell:auto runs bash (bash -c). POSIX syntax applies: && and || chaining, heredocs, and standard quoting rules are available. shell:"powershell" uses pwsh when installed; shell:"cmd" is Windows-only.';
 function buildShellToolContract(platform = process.platform) {
+  const defaultShell = defaultShellKindForPlatform(platform);
   if (platform === "win32") {
     return {
       dialect: "powershell51",
-      defaultShell: "powershell",
+      defaultShell,
       name: "shell",
       label: "powershell",
       dialectBlock: WINDOWS_DIALECT_BLOCK,
@@ -332,7 +334,7 @@ function buildShellToolContract(platform = process.platform) {
   }
   return {
     dialect: "bash",
-    defaultShell: "bash",
+    defaultShell,
     name: "shell",
     label: "bash",
     dialectBlock: POSIX_DIALECT_BLOCK,
@@ -599,6 +601,9 @@ function resolveShell(shell, contract) {
   if (!shell || shell === "auto") {
     return contract.defaultShell;
   }
+  if (shell !== "bash" && shell !== "powershell" && shell !== "cmd") {
+    throw new Error(`Unknown shell "${shell}". Supported: auto, bash, powershell, cmd.`);
+  }
   return shell;
 }
 function buildBashDescription(contract) {
@@ -610,6 +615,7 @@ function buildBashDescription(contract) {
 }
 function buildSpawnCommand(shell, command) {
   if (shell === "powershell") {
+    const childExe = process.platform === "win32" ? "powershell.exe" : "pwsh";
     const childScript = [
       "$ProgressPreference = 'SilentlyContinue'",
       "[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding; $OutputEncoding = [Console]::OutputEncoding",
@@ -618,7 +624,7 @@ function buildSpawnCommand(shell, command) {
     ].join("\n");
     const script = [
       "$ProgressPreference = 'SilentlyContinue'",
-      `powershell.exe -NoProfile -NonInteractive -EncodedCommand ${Buffer.from(childScript, "utf16le").toString("base64")}`,
+      `${childExe} -NoProfile -NonInteractive -EncodedCommand ${Buffer.from(childScript, "utf16le").toString("base64")}`,
       "$__pieCode = $LASTEXITCODE; $__pieOk = $?",
       "if (-not $__pieOk -and (($null -eq $__pieCode) -or ($__pieCode -eq 0))) { exit 1 }",
       "if (($null -ne $__pieCode) -and ($__pieCode -ne 0)) { exit $__pieCode }",