@iinm/plain-agent 1.10.1 → 1.10.3

package/README.md

@@ -3,14 +3,14 @@
 A lightweight, capable coding agent for the terminal.
 
 - **Multi-provider** — Use Claude, GPT, Gemini, or any OpenAI-compatible model via Bedrock, Vertex AI, or direct APIs.
-- **Fine-grained auto-approval** — Auto-approve tool calls by name and arguments using regex patterns.
+- **Fine-grained auto-approval** — Auto-approve tool calls by name and arguments using regex patterns, with path validation on tool arguments.
 - **Sandboxed execution** — Run commands in a Docker container with filesystem and network isolation.
 - **Claude Code compatible** — Use Claude Code plugins, commands, subagents, and skills from `.claude/`.
 - **Zero external dependencies** — Built with Node.js standard libraries only.
 
 ## Limitations
 
-- **Path validation only covers tool arguments** — Path validation restricts only paths explicitly passed as tool-use arguments; it cannot control file access inside arbitrary scripts. Always use sandboxed execution when allowing arbitrary script execution.
+- **Path validation only covers tool arguments** — It blocks paths outside the working directory, directory traversal (`..`), symlinks escaping the project, and git-ignored files — but only for paths explicitly passed as tool-use arguments; it cannot control file access inside arbitrary scripts. Always use sandboxed execution when allowing arbitrary script execution.
 - **Sequential subagent execution** — Subagents run one at a time rather than
   in parallel. The trade-off is full visibility: every step is streamed to
   your terminal so you can follow exactly what each subagent is doing.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@iinm/plain-agent",
-  "version": "1.10.1",
+  "version": "1.10.3",
   "description": "A lightweight CLI-based coding agent",
   "license": "MIT",
   "type": "module",

package/src/claudeCodePlugin.mjs

@@ -32,7 +32,7 @@ export function resolvePluginPaths(repos) {
   for (const repo of repos) {
     const ownerRepo = extractOwnerRepo(repo.source);
     if (!ownerRepo) {
-      console.warn(`Invalid source URL: ${repo.source}`);
+      console.error(`Invalid source URL: ${repo.source}`);
       continue;
     }
 
@@ -43,7 +43,7 @@ export function resolvePluginPaths(repos) {
         try {
           only = new RegExp(plugin.only);
         } catch (err) {
-          console.warn(
+          console.error(
             `Invalid regex pattern "${plugin.only}" for plugin "${plugin.name}":`,
             err instanceof Error ? err.message : String(err),
           );

package/src/{cliBatch.mjs → cli/batch.mjs}

@@ -1,9 +1,9 @@
 /**
- * @import { UserEventEmitter, AgentEventEmitter, AgentCommands } from "./agent"
+ * @import { UserEventEmitter, AgentEventEmitter, AgentCommands } from "../agent"
  */
 
-import { formatCostForBatch } from "./cliFormatter.mjs";
-import { appendUsageRecord, buildUsageRecord } from "./usageStore.mjs";
+import { appendUsageRecord, buildUsageRecord } from "../usageStore.mjs";
+import { formatCostForBatch } from "./formatter.mjs";
 
 /**
  * @typedef {object} BatchSessionOptions

package/src/{cliCommands.mjs → cli/commands.mjs}

@@ -1,18 +1,18 @@
 /**
- * @import { UserEventEmitter, AgentCommands } from "./agent"
- * @import { ClaudeCodePlugin } from "./claudeCodePlugin.mjs"
+ * @import { UserEventEmitter, AgentCommands } from "../agent"
+ * @import { ClaudeCodePlugin } from "../claudeCodePlugin.mjs"
  */
 
 import { execFileSync } from "node:child_process";
 import { styleText } from "node:util";
-import { formatCostSummary } from "./cliFormatter.mjs";
-import { loadAgentRoles } from "./context/loadAgentRoles.mjs";
-import { loadPrompts } from "./context/loadPrompts.mjs";
-import { loadUserMessageContext } from "./context/loadUserMessageContext.mjs";
-import { CLAUDE_CODE_COMPATIBILITY_NOTES } from "./prompt.mjs";
-import { parseFileRange } from "./utils/parseFileRange.mjs";
-import { readFileRange } from "./utils/readFileRange.mjs";
-import { toOneLine } from "./utils/toOneLine.mjs";
+import { loadAgentRoles } from "../context/loadAgentRoles.mjs";
+import { loadPrompts } from "../context/loadPrompts.mjs";
+import { loadUserMessageContext } from "../context/loadUserMessageContext.mjs";
+import { CLAUDE_CODE_COMPATIBILITY_NOTES } from "../prompt.mjs";
+import { parseFileRange } from "../utils/parseFileRange.mjs";
+import { readFileRange } from "../utils/readFileRange.mjs";
+import { toOneLine } from "../utils/toOneLine.mjs";
+import { formatCostSummary } from "./formatter.mjs";
 
 /**
  * @typedef {"prompt" | "continue"} CommandResult
@@ -75,7 +75,7 @@ export function createCommandHandler({
     const prompt = prompts.get(id);
 
     if (!prompt) {
-      console.log(styleText("red", `\nPrompt not found: ${id}`));
+      console.error(styleText("red", `\nPrompt not found: ${id}`));
       return "prompt";
     }
 
@@ -116,13 +116,13 @@ export function createCommandHandler({
     if (inputTrimmed.startsWith("!")) {
       const fileRange = parseFileRange(inputTrimmed.slice(1));
       if (fileRange instanceof Error) {
-        console.log(styleText("red", `\n${fileRange.message}`));
+        console.error(styleText("red", `\n${fileRange.message}`));
         return "prompt";
       }
 
       const fileContent = await readFileRange(fileRange);
       if (fileContent instanceof Error) {
-        console.log(styleText("red", `\n${fileContent.message}`));
+        console.error(styleText("red", `\n${fileContent.message}`));
         return "prompt";
       }
 
@@ -174,7 +174,7 @@ export function createCommandHandler({
     if (inputTrimmed.startsWith("/agents:")) {
       const match = inputTrimmed.match(/^\/agents:([^ ]+)(?:\s+(.*))?$/s);
       if (!match) {
-        console.log(styleText("red", "\nInvalid agent invocation format."));
+        console.error(styleText("red", "\nInvalid agent invocation format."));
         return "prompt";
       }
       return await invokeAgent(match[1], match[2] || "");
@@ -204,7 +204,9 @@ export function createCommandHandler({
       if (inputTrimmed.startsWith("/prompts:")) {
         const match = inputTrimmed.match(/^\/prompts:([^ ]+)(?:\s+(.*))?$/s);
         if (!match) {
-          console.log(styleText("red", "\nInvalid prompt invocation format."));
+          console.error(
+            styleText("red", "\nInvalid prompt invocation format."),
+          );
           return "prompt";
         }
         return await invokePrompt(

package/src/{cliCompleter.mjs → cli/completer.mjs}

@@ -1,11 +1,11 @@
 /**
- * @import { ClaudeCodePlugin } from "./claudeCodePlugin.mjs"
+ * @import { ClaudeCodePlugin } from "../claudeCodePlugin.mjs"
  */
 
 import { styleText } from "node:util";
-import { loadAgentRoles } from "./context/loadAgentRoles.mjs";
-import { loadPrompts } from "./context/loadPrompts.mjs";
-import { toOneLine } from "./utils/toOneLine.mjs";
+import { loadAgentRoles } from "../context/loadAgentRoles.mjs";
+import { loadPrompts } from "../context/loadPrompts.mjs";
+import { toOneLine } from "../utils/toOneLine.mjs";
 
 // Define available slash commands for tab completion
 export const SLASH_COMMANDS = [

package/src/{cliCost.mjs → cli/cost.mjs}

@@ -1,9 +1,9 @@
 /**
- * @import { UsageRecord } from "./usageStore.mjs"
+ * @import { UsageRecord } from "../usageStore.mjs"
  */
 
 import { styleText } from "node:util";
-import * as usageStore from "./usageStore.mjs";
+import * as usageStore from "../usageStore.mjs";
 
 /**
  * @typedef {Object} CostPeriod
@@ -275,7 +275,7 @@ function formatCost(value) {
  * Run the `plain cost` subcommand.
  *
  * @param {{ from: string | null, to: string | null }} args
- * @param {{ readUsageRecords?: typeof import("./usageStore.mjs").readUsageRecords }} [deps]
+ * @param {{ readUsageRecords?: typeof import("../usageStore.mjs").readUsageRecords }} [deps]
  * @returns {Promise<number>} exit code
  */
 export async function runCostCommand(args, deps = {}) {