@dyyz1993/pi-coding-agent 0.74.24 → 0.74.27

package/dist/extensions/agent-permissions/index.ts

@@ -0,0 +1,235 @@
+/**
+ * Agent Permissions Extension
+ *
+ * Implements Claude Code-style permissionMode for sub-agents.
+ * Works with AgentConfig.permissionMode to control tool access.
+ *
+ * Modes:
+ *   auto         — default behavior, all tools allowed
+ *   acceptEdits  — auto-allow edit/write, block dangerous bash
+ *   plan         — read-only: block edit/write/bash
+ *   dontAsk      — auto-allow everything (no blocking)
+ *   always-allow — same as dontAsk
+ *   always-deny  — block everything
+ */
+
+import type { AgentConfig, ExtensionAPI, ExtensionContext } from "@dyyz1993/pi-coding-agent";
+
+const READ_TOOLS = new Set(["read", "grep", "find", "ls", "glob"]);
+const EDIT_TOOLS = new Set(["edit", "write"]);
+const DANGEROUS_BASH_PATTERNS = [
+	/\brm\s+-rf\b/,
+	/\bgit\s+push\s+.*--force\b/,
+	/--no-verify/,
+	/\bsudo\b/,
+	/\bchmod\s+777\b/,
+	/\.env/,
+	/credentials/i,
+];
+
+interface PermissionRule {
+	mode: string;
+	allowedTools: Set<string> | null;
+	blockedTools: Set<string> | null;
+	blockBashPatterns: RegExp[] | null;
+}
+
+const RULES: Record<string, PermissionRule> = {
+	auto: {
+		mode: "auto",
+		allowedTools: null,
+		blockedTools: null,
+		blockBashPatterns: DANGEROUS_BASH_PATTERNS,
+	},
+	acceptEdits: {
+		mode: "acceptEdits",
+		allowedTools: null,
+		blockedTools: null,
+		blockBashPatterns: DANGEROUS_BASH_PATTERNS,
+	},
+	plan: {
+		mode: "plan",
+		allowedTools: READ_TOOLS,
+		blockedTools: EDIT_TOOLS,
+		blockBashPatterns: null,
+	},
+	dontAsk: {
+		mode: "dontAsk",
+		allowedTools: null,
+		blockedTools: null,
+		blockBashPatterns: null,
+	},
+	"always-allow": {
+		mode: "always-allow",
+		allowedTools: null,
+		blockedTools: null,
+		blockBashPatterns: null,
+	},
+	"always-deny": {
+		mode: "always-deny",
+		allowedTools: new Set(),
+		blockedTools: null,
+		blockBashPatterns: null,
+	},
+};
+
+function matchesToolPattern(toolName: string, input: Record<string, unknown>, pattern: string): boolean {
+	const parenIdx = pattern.indexOf("(");
+	if (parenIdx === -1) {
+		if (pattern === "*") return true;
+		if (pattern.startsWith("*") && pattern.endsWith("*")) {
+			const middle = pattern.slice(1, -1);
+			return toolName.includes(middle);
+		}
+		if (pattern.startsWith("*")) {
+			const suffix = pattern.slice(1);
+			return toolName.endsWith(suffix);
+		}
+		if (pattern.endsWith("*")) {
+			const prefix = pattern.slice(0, -1);
+			return toolName.startsWith(prefix);
+		}
+		return pattern === toolName;
+	}
+
+	const baseTool = pattern.substring(0, parenIdx).trim();
+	if (baseTool !== toolName) return false;
+
+	const globPattern = pattern.substring(parenIdx + 1, pattern.lastIndexOf(")")).trim();
+	if (!globPattern || globPattern === "*") return true;
+
+	const parts = globPattern.split("|");
+	const inputStr = JSON.stringify(input);
+	const command = typeof input.command === "string" ? input.command : "";
+	const filePath = typeof input.filePath === "string" ? input.filePath : "";
+
+	// Try to match against relevant input fields
+	const targets = [command, filePath, inputStr].filter(Boolean);
+
+	for (const part of parts) {
+		const trimmed = part.trim();
+		if (!trimmed) continue;
+
+		// Check if pattern starts/ends with * to determine anchors
+		const startsWithWildcard = trimmed.startsWith("*");
+		const endsWithWildcard = trimmed.endsWith("*");
+
+		// Escape special regex characters EXCEPT: * and [] brackets
+		let regexStr = trimmed.replace(/[.+?^$()|\\]/g, "\\$&");
+
+		// Convert * to .*
+		regexStr = regexStr.replace(/\*/g, ".*");
+
+		// Add anchors based on wildcards
+		if (!startsWithWildcard) regexStr = "^" + regexStr;
+		if (!endsWithWildcard) regexStr = regexStr + "$";
+
+		const regex = new RegExp(regexStr);
+		for (const target of targets) {
+			if (regex.test(target)) return true;
+		}
+	}
+	return false;
+}
+
+function matchesDisallowedTool(
+	toolName: string,
+	input: Record<string, unknown>,
+	patterns: string[],
+): boolean {
+	for (const pattern of patterns) {
+		if (matchesToolPattern(toolName, input, pattern)) {
+			return true;
+		}
+	}
+	return false;
+}
+
+export function createPermissionHandler(agentConfig: AgentConfig) {
+	const mode = agentConfig.permissionMode ?? "auto";
+	const rule = RULES[mode];
+	if (!rule) return null;
+
+	const disallowedTools = agentConfig.disallowedTools ?? [];
+	const allowedToolList = agentConfig.tools;
+
+	return (event: { toolName: string; input: Record<string, unknown> }): { block: boolean; reason?: string } | null => {
+	if (allowedToolList && allowedToolList.length > 0) {
+		const isAllowed = allowedToolList.some((pattern) => matchesToolPattern(event.toolName, event.input, pattern));
+		if (!isAllowed) {
+			return {
+				block: true,
+				reason: `[agent:${agentConfig.name}] Tool "${event.toolName}" not in agent's tool whitelist. Allowed: ${allowedToolList.join(", ")}`,
+			};
+		}
+	}
+
+		if (rule.allowedTools !== null && !rule.allowedTools.has(event.toolName) && event.toolName !== "bash") {
+			const allowed = Array.from(rule.allowedTools).join(", ");
+			return {
+				block: true,
+				reason: `[${mode} mode] Tool "${event.toolName}" not allowed. Allowed: ${allowed}`,
+			};
+		}
+
+		if (rule.blockedTools !== null && rule.blockedTools.has(event.toolName)) {
+			return {
+				block: true,
+				reason: `[${mode} mode] Tool "${event.toolName}" is blocked (read-only mode).`,
+			};
+		}
+
+		if (event.toolName === "bash" && rule.mode === "plan") {
+			return {
+				block: true,
+				reason: `[plan mode] Bash is not allowed in plan mode.`,
+			};
+		}
+
+		if (event.toolName === "bash" && rule.blockBashPatterns) {
+			const command = event.input?.command;
+			if (typeof command === "string") {
+				for (const pat of rule.blockBashPatterns) {
+					if (pat.test(command)) {
+						return {
+							block: true,
+							reason: `[${mode} mode] Blocked dangerous bash command: ${command}`,
+						};
+					}
+				}
+			}
+		}
+
+		if (disallowedTools.length > 0 && matchesDisallowedTool(event.toolName, event.input, disallowedTools)) {
+			return {
+				block: true,
+				reason: `[disallowedTools] Tool "${event.toolName}" is explicitly disallowed.`,
+			};
+		}
+
+		return null;
+	};
+}
+
+export default function agentPermissions(pi: ExtensionAPI, ctx: ExtensionContext): void {
+	pi.on("tool_call", (event) => {
+		const vars = (event as { variables?: Record<string, string> }).variables;
+		const mode = vars?.["permissionMode"];
+		if (!mode || mode === "auto" || mode === "dontAsk" || mode === "always-allow") return undefined;
+
+		const handler = createPermissionHandler({
+			name: vars["agentName"] ?? "unknown",
+			description: "",
+			permissionMode: mode as AgentConfig["permissionMode"],
+			disallowedTools: vars["disallowedTools"]?.split(",").filter(Boolean),
+			tools: vars["allowedTools"]?.split(",").filter(Boolean),
+		} as AgentConfig);
+
+		if (!handler) return undefined;
+		const result = handler({ toolName: event.toolName, input: event.input });
+		if (result?.block) {
+			return { block: true, reason: result.reason };
+		}
+		return undefined;
+	});
+}

package/dist/extensions/ask-tools/index.ts

@@ -0,0 +1,115 @@
+/**
+ * Ask Tools Extension
+ *
+ * 注册 ask-confirm / ask-select / ask-input / ask-editor / ask-notify 工具，
+ * 内部调用 ctx.ui.confirm / select / input / editor / notify 触发 UI 交互。
+ * ask-select 支持 multiple 参数切换单选/多选模式。
+ * 配合 message-bridge 扩展使用时，confirm/select/input/editor 调用会被推送到 Bridge。
+ */
+
+import type { ExtensionAPI, ExtensionContext } from "@dyyz1993/pi-coding-agent";
+import { type Static, Type } from "@sinclair/typebox";
+
+const ConfirmParams = Type.Object({
+	title: Type.String({ description: "Short title for the confirmation" }),
+	question: Type.String({ description: "The question to ask" }),
+});
+
+const SelectParams = Type.Object({
+	title: Type.String({ description: "Short title for the selection" }),
+	options: Type.Array(Type.String(), { description: "List of options to choose from" }),
+	multiple: Type.Optional(Type.Boolean({ description: "Allow multi-select (checkbox mode). Default: false (single select)." })),
+});
+
+const InputParams = Type.Object({
+	title: Type.String({ description: "Short title for the input" }),
+	placeholder: Type.Optional(Type.String({ description: "Placeholder text" })),
+});
+
+const EditorParams = Type.Object({
+	title: Type.String({ description: "Short title for the editor" }),
+	prefill: Type.Optional(Type.String({ description: "Pre-filled content in the editor" })),
+});
+
+const NotifyParams = Type.Object({
+	message: Type.String({ description: "The message to display" }),
+	type: Type.Optional(Type.String({ description: "Notification type: 'info', 'warning', or 'error'" })),
+});
+
+export default function askToolsExtension(pi: ExtensionAPI) {
+	pi.registerTool({
+		name: "ask-confirm",
+		label: "Ask Confirm",
+		description: "Asks the user a yes/no confirmation question. Use when you need user approval before proceeding.",
+		parameters: ConfirmParams,
+		execute: async (_id: string, params: Static<typeof ConfirmParams>, _signal, _onUpdate, ctx: ExtensionContext) => {
+			const confirmed = await ctx.ui.confirm(params.title, params.question);
+			return {
+				content: [{ type: "text" as const, text: confirmed ? "User confirmed: yes" : "User confirmed: no" }],
+				details: undefined,
+			};
+		},
+	});
+
+	pi.registerTool({
+		name: "ask-select",
+		label: "Ask Select",
+		description:
+			"Asks the user to select option(s) from a list. By default single-select (returns one choice). Set multiple=true to allow selecting multiple options (checkbox style).",
+		parameters: SelectParams,
+		execute: async (_id: string, params: Static<typeof SelectParams>, _signal, _onUpdate, ctx: ExtensionContext) => {
+			const isMultiple = params.multiple === true;
+			const result = await ctx.ui.select(params.title, params.options, { multiple: isMultiple });
+			if (isMultiple) {
+				if (!result || !Array.isArray(result) || result.length === 0) {
+					return { content: [{ type: "text" as const, text: "User selected: (none)" }], details: undefined };
+				}
+				return { content: [{ type: "text" as const, text: `User selected: ${(result as string[]).join(", ")}` }], details: undefined };
+			}
+			const choice = result as string | undefined;
+			return { content: [{ type: "text" as const, text: `User selected: ${choice ?? "(cancelled)"}` }], details: undefined };
+		},
+	});
+
+	pi.registerTool({
+		name: "ask-input",
+		label: "Ask Input",
+		description: "Asks user for free-form text input. Use when you need user to provide text.",
+		parameters: InputParams,
+		execute: async (_id: string, params: Static<typeof InputParams>, _signal, _onUpdate, ctx: ExtensionContext) => {
+			const text = await ctx.ui.input(params.title, params.placeholder);
+			return {
+				content: [{ type: "text" as const, text: `User input: ${text ?? "(empty)"}` }],
+				details: undefined,
+			};
+		},
+	});
+
+	pi.registerTool({
+		name: "ask-editor",
+		label: "Ask Editor",
+		description: "Opens a multi-line editor for user to edit text. Use when you need user to edit longer text (code, JSON, configs, commit messages).",
+		parameters: EditorParams,
+		execute: async (_id: string, params: Static<typeof EditorParams>, _signal, _onUpdate, ctx: ExtensionContext) => {
+			const text = await ctx.ui.editor(params.title, params.prefill);
+			return {
+				content: [{ type: "text" as const, text: text ?? "(cancelled)" }],
+				details: undefined,
+			};
+		},
+	});
+
+	pi.registerTool({
+		name: "ask-notify",
+		label: "Ask Notify",
+		description: "Shows a notification to the user. Use for informational messages (fire-and-forget, does not wait for response).",
+		parameters: NotifyParams,
+		execute: async (_id: string, params: Static<typeof NotifyParams>, _signal, _onUpdate, ctx: ExtensionContext) => {
+			ctx.ui.notify(params.message, params.type as "info" | "warning" | "error" | undefined);
+			return {
+				content: [{ type: "text" as const, text: "Notified user" }],
+				details: undefined,
+			};
+		},
+	});
+}

package/dist/extensions/auto-memory/contract.d.ts

@@ -0,0 +1,51 @@
+import type { ChannelContract } from "@dyyz1993/pi-coding-agent";
+export declare const MEMORY_CHANNEL_NAME = "memory";
+export interface MemoryFileInfo {
+    filename: string;
+    filePath: string;
+    description: string | null;
+    type: string | null;
+    mtimeMs: number;
+}
+export interface MemoryListResult {
+    type: "list_result";
+    files: MemoryFileInfo[];
+    entrypointContent: string | null;
+    memoryDir: string;
+}
+export interface MemoryUserRememberParams {
+    sourceSessionId?: string;
+    sourceMessageIds?: string[];
+    content?: string;
+}
+export interface BookmarkCreatingEvent {
+    type: "bookmark_creating";
+}
+export interface MemoryUpdatedEvent {
+    type: "memory_updated";
+    files: MemoryFileInfo[];
+}
+export interface MemoryUpdateFailedEvent {
+    type: "memory_update_failed";
+    reason: string;
+}
+export interface MemoryChannelContract extends ChannelContract {
+    methods: {
+        "memory.list": {
+            params: Record<string, never>;
+            return: MemoryListResult;
+        };
+        "memory.userRemember": {
+            params: MemoryUserRememberParams;
+            return: {
+                ok: boolean;
+            };
+        };
+    };
+    events: {
+        bookmark_creating: BookmarkCreatingEvent;
+        memory_updated: MemoryUpdatedEvent;
+        memory_update_failed: MemoryUpdateFailedEvent;
+    };
+}
+//# sourceMappingURL=contract.d.ts.map

package/dist/extensions/auto-memory/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAEjE,eAAO,MAAM,mBAAmB,WAAW,CAAC;AAE5C,MAAM,WAAW,cAAc;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,wBAAwB;IACxC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACrC,IAAI,EAAE,mBAAmB,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,cAAc,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACvC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAsB,SAAQ,eAAe;IAC7D,OAAO,EAAE;QACR,aAAa,EAAE;YACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC9B,MAAM,EAAE,gBAAgB,CAAC;SACzB,CAAC;QACF,qBAAqB,EAAE;YACtB,MAAM,EAAE,wBAAwB,CAAC;YACjC,MAAM,EAAE;gBAAE,EAAE,EAAE,OAAO,CAAA;aAAE,CAAC;SACxB,CAAC;KACF,CAAC;IACF,MAAM,EAAE;QACP,iBAAiB,EAAE,qBAAqB,CAAC;QACzC,cAAc,EAAE,kBAAkB,CAAC;QACnC,oBAAoB,EAAE,uBAAuB,CAAC;KAC9C,CAAC;CACF","sourcesContent":["import type { ChannelContract } from \"@dyyz1993/pi-coding-agent\";\n\nexport const MEMORY_CHANNEL_NAME = \"memory\";\n\nexport interface MemoryFileInfo {\n\tfilename: string;\n\tfilePath: string;\n\tdescription: string | null;\n\ttype: string | null;\n\tmtimeMs: number;\n}\n\nexport interface MemoryListResult {\n\ttype: \"list_result\";\n\tfiles: MemoryFileInfo[];\n\tentrypointContent: string | null;\n\tmemoryDir: string;\n}\n\nexport interface MemoryUserRememberParams {\n\tsourceSessionId?: string;\n\tsourceMessageIds?: string[];\n\tcontent?: string;\n}\n\nexport interface BookmarkCreatingEvent {\n\ttype: \"bookmark_creating\";\n}\n\nexport interface MemoryUpdatedEvent {\n\ttype: \"memory_updated\";\n\tfiles: MemoryFileInfo[];\n}\n\nexport interface MemoryUpdateFailedEvent {\n\ttype: \"memory_update_failed\";\n\treason: string;\n}\n\nexport interface MemoryChannelContract extends ChannelContract {\n\tmethods: {\n\t\t\"memory.list\": {\n\t\t\tparams: Record<string, never>;\n\t\t\treturn: MemoryListResult;\n\t\t};\n\t\t\"memory.userRemember\": {\n\t\t\tparams: MemoryUserRememberParams;\n\t\t\treturn: { ok: boolean };\n\t\t};\n\t};\n\tevents: {\n\t\tbookmark_creating: BookmarkCreatingEvent;\n\t\tmemory_updated: MemoryUpdatedEvent;\n\t\tmemory_update_failed: MemoryUpdateFailedEvent;\n\t};\n}\n"]}

package/dist/extensions/auto-memory/contract.js

@@ -0,0 +1,2 @@
+export const MEMORY_CHANNEL_NAME = "memory";
+//# sourceMappingURL=contract.js.map

package/dist/extensions/auto-memory/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["contract.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,mBAAmB,GAAG,QAAQ,CAAC","sourcesContent":["import type { ChannelContract } from \"@dyyz1993/pi-coding-agent\";\n\nexport const MEMORY_CHANNEL_NAME = \"memory\";\n\nexport interface MemoryFileInfo {\n\tfilename: string;\n\tfilePath: string;\n\tdescription: string | null;\n\ttype: string | null;\n\tmtimeMs: number;\n}\n\nexport interface MemoryListResult {\n\ttype: \"list_result\";\n\tfiles: MemoryFileInfo[];\n\tentrypointContent: string | null;\n\tmemoryDir: string;\n}\n\nexport interface MemoryUserRememberParams {\n\tsourceSessionId?: string;\n\tsourceMessageIds?: string[];\n\tcontent?: string;\n}\n\nexport interface BookmarkCreatingEvent {\n\ttype: \"bookmark_creating\";\n}\n\nexport interface MemoryUpdatedEvent {\n\ttype: \"memory_updated\";\n\tfiles: MemoryFileInfo[];\n}\n\nexport interface MemoryUpdateFailedEvent {\n\ttype: \"memory_update_failed\";\n\treason: string;\n}\n\nexport interface MemoryChannelContract extends ChannelContract {\n\tmethods: {\n\t\t\"memory.list\": {\n\t\t\tparams: Record<string, never>;\n\t\t\treturn: MemoryListResult;\n\t\t};\n\t\t\"memory.userRemember\": {\n\t\t\tparams: MemoryUserRememberParams;\n\t\t\treturn: { ok: boolean };\n\t\t};\n\t};\n\tevents: {\n\t\tbookmark_creating: BookmarkCreatingEvent;\n\t\tmemory_updated: MemoryUpdatedEvent;\n\t\tmemory_update_failed: MemoryUpdateFailedEvent;\n\t};\n}\n"]}

package/dist/extensions/auto-memory/contract.ts

@@ -0,0 +1,56 @@
+import type { ChannelContract } from "@dyyz1993/pi-coding-agent";
+
+export const MEMORY_CHANNEL_NAME = "memory";
+
+export interface MemoryFileInfo {
+	filename: string;
+	filePath: string;
+	description: string | null;
+	type: string | null;
+	mtimeMs: number;
+}
+
+export interface MemoryListResult {
+	type: "list_result";
+	files: MemoryFileInfo[];
+	entrypointContent: string | null;
+	memoryDir: string;
+}
+
+export interface MemoryUserRememberParams {
+	sourceSessionId?: string;
+	sourceMessageIds?: string[];
+	content?: string;
+}
+
+export interface BookmarkCreatingEvent {
+	type: "bookmark_creating";
+}
+
+export interface MemoryUpdatedEvent {
+	type: "memory_updated";
+	files: MemoryFileInfo[];
+}
+
+export interface MemoryUpdateFailedEvent {
+	type: "memory_update_failed";
+	reason: string;
+}
+
+export interface MemoryChannelContract extends ChannelContract {
+	methods: {
+		"memory.list": {
+			params: Record<string, never>;
+			return: MemoryListResult;
+		};
+		"memory.userRemember": {
+			params: MemoryUserRememberParams;
+			return: { ok: boolean };
+		};
+	};
+	events: {
+		bookmark_creating: BookmarkCreatingEvent;
+		memory_updated: MemoryUpdatedEvent;
+		memory_update_failed: MemoryUpdateFailedEvent;
+	};
+}