@cydm/pie 2.7.8 → 2.7.10

package/dist/builtin/extensions/ask-user/index.js

@@ -1,9 +1,9 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   createAskUserCapability
-} from "../../../chunks/chunk-P22SYVGO.js";
-import "../../../chunks/chunk-W5B3OXHQ.js";
-import "../../../chunks/chunk-2FEDB5GR.js";
+} from "../../../chunks/chunk-C4LXD56O.js";
+import "../../../chunks/chunk-JO6EDWHP.js";
+import "../../../chunks/chunk-2B6VS2NH.js";
 import "../../../chunks/chunk-XXGYUYXI.js";
 import "../../../chunks/chunk-LZQXQOPJ.js";
 

package/dist/builtin/extensions/plan-mode/index.js

@@ -4,13 +4,11 @@ import {
   createExecutionStateFromPlan,
   createPlanCapability,
   extractPlanTodoItems,
-  getToolCapabilityMetadata,
-  isPlanModeSafeCommand,
   markCompletedPlanSteps,
   restoreExecutionState
-} from "../../../chunks/chunk-P22SYVGO.js";
-import "../../../chunks/chunk-W5B3OXHQ.js";
-import "../../../chunks/chunk-2FEDB5GR.js";
+} from "../../../chunks/chunk-C4LXD56O.js";
+import "../../../chunks/chunk-JO6EDWHP.js";
+import "../../../chunks/chunk-2B6VS2NH.js";
 import {
   Type
 } from "../../../chunks/chunk-XXGYUYXI.js";
@@ -258,19 +256,6 @@ Update the plan accordingly and call plan_submit again with the revised steps. D
       togglePlanMode();
     }
   });
-  ctx.on("tool:call", async (event) => {
-    if (!planModeEnabled) return;
-    if (getToolCapabilityMetadata({ name: event.toolName })?.executesShell !== true) return;
-    const command = typeof event.args === "object" && event.args !== null ? event.args.command : void 0;
-    if (typeof command === "string" && !isPlanModeSafeCommand(command)) {
-      ctx.ui.notify(
-        `Plan mode: Command blocked. Use read-only commands or plan_scratch for temporary drafts; submit the finished plan with plan_submit. Use /tools/plan to leave Plan mode.
-Command: ${command}`,
-        "error"
-      );
-      return { block: true, reason: `Plan mode: command "${command}" is not a read-only shell command. Use plan_scratch for temporary drafts, submit the finished plan with plan_submit, or use /tools/plan to leave Plan mode.` };
-    }
-  });
   ctx.on("agent:start", async () => {
     const persisted = readPersistedPlanMode();
     applyPlanModeState(persisted);

package/dist/builtin/extensions/subagent/index.js

@@ -4,14 +4,15 @@ import {
   formatTransportLifecycle,
   getConfigDir,
   logTransportLifecycle
-} from "../../../chunks/chunk-E6F4BTNN.js";
+} from "../../../chunks/chunk-5GUPRFNP.js";
 import {
   SUBAGENT_SESSION_RECORD_VERSION,
+  createPolicyEnforcedTools,
   createSharedFileSystemTools,
   createSubagentCapability
-} from "../../../chunks/chunk-P22SYVGO.js";
-import "../../../chunks/chunk-W5B3OXHQ.js";
-import "../../../chunks/chunk-2FEDB5GR.js";
+} from "../../../chunks/chunk-C4LXD56O.js";
+import "../../../chunks/chunk-JO6EDWHP.js";
+import "../../../chunks/chunk-2B6VS2NH.js";
 import "../../../chunks/chunk-XXGYUYXI.js";
 import "../../../chunks/chunk-LZQXQOPJ.js";
 
@@ -232,7 +233,8 @@ function createSubagentSessionStore(sessionsDir, log, deps) {
           let current;
           try {
             current = fs.readFileSync(lockPath, "utf8");
-          } catch {
+          } catch (recheckError) {
+            if (recheckError.code === "ENOENT") continue;
             current = void 0;
           }
           if (current !== lockContent) {
@@ -428,7 +430,9 @@ function subagentExtension(ctx) {
       };
       const fsTools = createSharedFileSystemTools(ctx.cwd, fsOptions);
       const cliHostCapabilities = createCliHostCapabilities(ctx.cwd);
-      return [...fsTools, ...cliHostCapabilities.tools];
+      return createPolicyEnforcedTools([...fsTools, ...cliHostCapabilities.tools], {
+        getContext: () => ({ mode: "normal", confirmationPolicy: "allow" })
+      });
     }
   });
   ctx.registerCleanup?.(() => capability.dispose());

package/dist/builtin/extensions/todo/index.js

@@ -8,9 +8,9 @@ import {
   executeManageTodoList,
   executionStateToTodos,
   restoreExecutionState
-} from "../../../chunks/chunk-P22SYVGO.js";
-import "../../../chunks/chunk-W5B3OXHQ.js";
-import "../../../chunks/chunk-2FEDB5GR.js";
+} from "../../../chunks/chunk-C4LXD56O.js";
+import "../../../chunks/chunk-JO6EDWHP.js";
+import "../../../chunks/chunk-2B6VS2NH.js";
 import "../../../chunks/chunk-XXGYUYXI.js";
 import "../../../chunks/chunk-LZQXQOPJ.js";
 

package/dist/chunks/{chunk-2FEDB5GR.js → chunk-2B6VS2NH.js}

@@ -3170,8 +3170,8 @@ var FileSystemGateway = class {
         throw new Error(`Directory not found: ${source}`);
       }
       if (CS.System.IO.Directory.Exists(destination)) {
-        const destinationFiles = Array.from(CS.System.IO.Directory.GetFiles(destination) ?? []);
-        const destinationDirs = Array.from(CS.System.IO.Directory.GetDirectories(destination) ?? []);
+        const destinationFiles = csharpStringArray(CS.System.IO.Directory.GetFiles(destination));
+        const destinationDirs = csharpStringArray(CS.System.IO.Directory.GetDirectories(destination));
         const isEmpty = destinationFiles.length === 0 && destinationDirs.length === 0;
         if (!isEmpty) {
           throw new Error(`Move target already exists: ${destination}`);
@@ -3225,14 +3225,10 @@ var FileSystemGateway = class {
       }
       const files = CS.System.IO.Directory.GetFiles(path);
       const dirs = CS.System.IO.Directory.GetDirectories(path);
-      const result = [];
-      for (let i = 0; i < files.Length; i++) {
-        result.push(this.basename(files[i]));
-      }
-      for (let i = 0; i < dirs.Length; i++) {
-        result.push(this.basename(dirs[i]));
-      }
-      return result;
+      return [
+        ...csharpStringArray(files).map((entry) => this.basename(entry)),
+        ...csharpStringArray(dirs).map((entry) => this.basename(entry))
+      ];
     }
     const fs = nodeRequire("fs");
     if (!fs.existsSync(path)) {
@@ -3303,6 +3299,21 @@ var FileSystemGateway = class {
     return this.config;
   }
 };
+function csharpStringArray(value) {
+  if (Array.isArray(value)) {
+    return value.map((entry) => String(entry ?? ""));
+  }
+  if (value && typeof value.Length === "number") {
+    const array = value;
+    const results = [];
+    for (let i = 0; i < array.Length; i++) {
+      const entry = typeof array.get_Item === "function" ? array.get_Item(i) : array[i];
+      results.push(String(entry ?? ""));
+    }
+    return results;
+  }
+  return [];
+}
 function movePuertsDirectoryContents(source, destination) {
   const directory = CS.System.IO.Directory;
   const file = CS.System.IO.File;
@@ -3317,16 +3328,16 @@ function movePuertsDirectoryContents(source, destination) {
     );
   }
   directory.CreateDirectory(destination);
-  for (const entry of Array.from(directory.GetFiles(source) ?? [])) {
+  for (const entry of csharpStringArray(directory.GetFiles(source))) {
     const name = String(entry).replace(/\\/g, "/").split("/").pop();
     file.Copy(String(entry), `${destination}/${name}`, true);
   }
-  for (const subdir of Array.from(directory.GetDirectories(source) ?? [])) {
+  for (const subdir of csharpStringArray(directory.GetDirectories(source))) {
     const name = String(subdir).replace(/\\/g, "/").split("/").pop();
     if (isPuertsReparsePoint(String(subdir))) continue;
     movePuertsDirectoryContents(String(subdir), `${destination}/${name}`);
   }
-  for (const entry of Array.from(directory.GetFiles(source) ?? [])) {
+  for (const entry of csharpStringArray(directory.GetFiles(source))) {
     try {
       file.Delete(String(entry));
     } catch {
@@ -3382,8 +3393,8 @@ function deletePuertsDirectoryByEnumeration(path, recursive) {
       `Refusing to delete '${path}' through a reparse point (symlink/junction); resolve the link or delete it directly`
     );
   }
-  const files = Array.from(directory.GetFiles(path) ?? []);
-  const subdirs = Array.from(directory.GetDirectories(path) ?? []);
+  const files = csharpStringArray(directory.GetFiles(path));
+  const subdirs = csharpStringArray(directory.GetDirectories(path));
   if (!recursive) {
     if (files.length > 0 || subdirs.length > 0) {
       throw new Error(`Directory not empty: ${path}`);
@@ -6342,12 +6353,15 @@ function streamResponsesSSE(model, context, options) {
         message.replayEligible = true;
         message.replayClass = receivedMessageCount === 0 ? "stream_lost" : "stream_lost_partial";
       }
-      if (!message.remoteFailure && (userAborted || (submitted || localFailure) && !(streamLost && receivedMessageCount === 0))) message.retryable = false;
+      if (streamLost && !message.remoteFailure) {
+        message.replayClass = receivedMessageCount === 0 ? "stream_lost" : "stream_lost_partial";
+      }
+      if (!message.remoteFailure && !streamLost && (userAborted || (submitted || localFailure))) message.retryable = false;
       phase = "cleanup";
       lifecycle({
         timeoutKind: internalTimeout,
         retryAllowed: !userAborted && !localFailure && message.retryable !== false,
-        retryDecision: message.remoteFailure ? `remote_${message.remoteFailure.category}` : streamLost ? receivedMessageCount === 0 ? message.replayEligible ? "replay_exempt_stream_lost" : "stream_lost_no_evidence" : message.replayEligible ? "replay_exempt_after_submission" : "not_retryable_after_submission" : submitted ? "not_retryable_after_submission" : localFailure ? "local_configuration_error" : "not_submitted",
+        retryDecision: message.remoteFailure ? `remote_${message.remoteFailure.category}` : streamLost ? message.replayEligible ? receivedMessageCount === 0 ? "replay_exempt_stream_lost" : "replay_exempt_after_submission" : receivedMessageCount === 0 ? "stream_lost_no_evidence" : "stream_lost_partial" : submitted ? "not_retryable_after_submission" : localFailure ? "local_configuration_error" : "not_submitted",
         cancelSource: userAborted ? "user" : internalTimeout ? "internal_timeout" : "none",
         cleanupOutcome: "request_abandoned"
       });
@@ -6988,7 +7002,7 @@ function streamResponsesWS(model, context, options) {
         const protocolFailure = !endedWithoutTerminal && (error instanceof ResponsesProtocolError || error instanceof SyntaxError || !transportLost && error instanceof TypeError || error instanceof WebSocketTransportError && (error.kind === "protocol" || error.kind === "overflow"));
         const cause = providerRejected && error instanceof WebSocketTransportError ? `${error.message} (HTTP status ${error.status})` : timedOut && !protocolFailure ? `Responses request timeout (${timedOut}) after ${ageMs()}ms` : error instanceof Error ? error.message : String(error);
         message.errorMessage = cause;
-        const streamLost = (endedWithoutTerminal || transportLost) && !protocolFailure && sent && !timedOut && !providerRejected && message.stopReason === "error";
+        const streamLost = (endedWithoutTerminal || transportLost) && !protocolFailure && !localFailure && sent && !timedOut && !providerRejected && message.stopReason === "error";
         if (timedOut && timedOut !== "connect" && !message.remoteFailure && !protocolFailure && !localFailure && sent && !providerRejected && !userAborted && !ownerDisposed && compat.timeoutReplay) {
           message.replayEligible = true;
           message.replayClass = timedOut;
@@ -6996,12 +7010,17 @@ function streamResponsesWS(model, context, options) {
           message.replayEligible = true;
           message.replayClass = receivedMessageCount === 0 ? "stream_lost" : "stream_lost_partial";
         }
-        if (!message.remoteFailure && (localFailure || providerRejected || protocolFailure || userAborted || ownerDisposed)) {
+        if (streamLost && !message.remoteFailure) {
+          message.replayClass = receivedMessageCount === 0 ? "stream_lost" : "stream_lost_partial";
+        }
+        if (!message.remoteFailure && !streamLost && (localFailure || providerRejected || protocolFailure || userAborted || ownerDisposed)) {
           message.retryable = false;
         }
         if (sent) {
           if (streamLost && receivedMessageCount === 0) {
             retryDecision = message.replayEligible ? "replay_exempt_stream_lost" : "stream_lost_no_evidence";
+          } else if (streamLost) {
+            retryDecision = message.replayEligible ? "replay_exempt_after_submission" : "stream_lost_partial";
           } else {
             if (!message.remoteFailure) message.retryable = false;
             if (!timedOut) retryDecision = message.replayEligible ? "replay_exempt_after_submission" : "not_retryable_after_submission";

package/dist/chunks/{chunk-E6F4BTNN.js → chunk-5GUPRFNP.js}

@@ -4,12 +4,13 @@ import {
   createSharedWebFetchTool,
   createSharedWebResearchTool,
   createSharedWebSearchTool,
+  defaultShellKindForPlatform,
   interpretShellExit,
   requestInteraction
-} from "./chunk-P22SYVGO.js";
+} from "./chunk-C4LXD56O.js";
 import {
   getLogger
-} from "./chunk-2FEDB5GR.js";
+} from "./chunk-2B6VS2NH.js";
 import {
   Type
 } from "./chunk-XXGYUYXI.js";
@@ -320,10 +321,11 @@ function truncateStringToBytesFromEnd(str, maxBytes) {
 var WINDOWS_DIALECT_BLOCK = `On this host shell:auto runs Windows PowerShell 5.1 (powershell.exe). Write PowerShell syntax: separate statements with ';' (PS 5.1 has no && or || \u2014 chain with "if ($?) { ... }" or check $LASTEXITCODE after native commands). Nested quotes in inline "node -e" or "-Command" strings are fragile; write a temp script file with write_file and execute it instead. Heredocs do not exist; multi-line commands work, but long scripts run more reliably from a file. Judge outcomes by the exit code; stderr may carry PowerShell-generated records such as CLIXML. shell:"bash" runs the first real bash on PATH (Git Bash when installed) and fails with an actionable error when only the WSL stub exists; shell:"cmd" runs cmd.exe.`;
 var POSIX_DIALECT_BLOCK = 'On this host shell:auto runs bash (bash -c). POSIX syntax applies: && and || chaining, heredocs, and standard quoting rules are available. shell:"powershell" uses pwsh when installed; shell:"cmd" is Windows-only.';
 function buildShellToolContract(platform = process.platform) {
+  const defaultShell = defaultShellKindForPlatform(platform);
   if (platform === "win32") {
     return {
       dialect: "powershell51",
-      defaultShell: "powershell",
+      defaultShell,
       name: "shell",
       label: "powershell",
       dialectBlock: WINDOWS_DIALECT_BLOCK,
@@ -332,7 +334,7 @@ function buildShellToolContract(platform = process.platform) {
   }
   return {
     dialect: "bash",
-    defaultShell: "bash",
+    defaultShell,
     name: "shell",
     label: "bash",
     dialectBlock: POSIX_DIALECT_BLOCK,
@@ -599,6 +601,9 @@ function resolveShell(shell, contract) {
   if (!shell || shell === "auto") {
     return contract.defaultShell;
   }
+  if (shell !== "bash" && shell !== "powershell" && shell !== "cmd") {
+    throw new Error(`Unknown shell "${shell}". Supported: auto, bash, powershell, cmd.`);
+  }
   return shell;
 }
 function buildBashDescription(contract) {
@@ -610,6 +615,7 @@ function buildBashDescription(contract) {
 }
 function buildSpawnCommand(shell, command) {
   if (shell === "powershell") {
+    const childExe = process.platform === "win32" ? "powershell.exe" : "pwsh";
     const childScript = [
       "$ProgressPreference = 'SilentlyContinue'",
       "[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding; $OutputEncoding = [Console]::OutputEncoding",
@@ -618,7 +624,7 @@ function buildSpawnCommand(shell, command) {
     ].join("\n");
     const script = [
       "$ProgressPreference = 'SilentlyContinue'",
-      `powershell.exe -NoProfile -NonInteractive -EncodedCommand ${Buffer.from(childScript, "utf16le").toString("base64")}`,
+      `${childExe} -NoProfile -NonInteractive -EncodedCommand ${Buffer.from(childScript, "utf16le").toString("base64")}`,
       "$__pieCode = $LASTEXITCODE; $__pieOk = $?",
       "if (-not $__pieOk -and (($null -eq $__pieCode) -or ($__pieCode -eq 0))) { exit 1 }",
       "if (($null -ne $__pieCode) -and ($__pieCode -ne 0)) { exit $__pieCode }",