@iinm/plain-agent 1.10.2 → 1.10.4

package/README.md

@@ -3,14 +3,14 @@
 A lightweight, capable coding agent for the terminal.
 
 - **Multi-provider** — Use Claude, GPT, Gemini, or any OpenAI-compatible model via Bedrock, Vertex AI, or direct APIs.
-- **Fine-grained auto-approval** — Auto-approve tool calls by name and arguments using regex patterns.
+- **Fine-grained auto-approval** — Auto-approve tool calls by name and arguments using regex patterns, with path validation on tool arguments.
 - **Sandboxed execution** — Run commands in a Docker container with filesystem and network isolation.
 - **Claude Code compatible** — Use Claude Code plugins, commands, subagents, and skills from `.claude/`.
 - **Zero external dependencies** — Built with Node.js standard libraries only.
 
 ## Limitations
 
-- **Path validation only covers tool arguments** — Path validation restricts only paths explicitly passed as tool-use arguments; it cannot control file access inside arbitrary scripts. Always use sandboxed execution when allowing arbitrary script execution.
+- **Path validation only covers tool arguments** — It blocks paths outside the working directory, directory traversal (`..`), symlinks escaping the project, and git-ignored files — but only for paths explicitly passed as tool-use arguments; it cannot control file access inside arbitrary scripts. Always use sandboxed execution when allowing arbitrary script execution.
 - **Sequential subagent execution** — Subagents run one at a time rather than
   in parallel. The trade-off is full visibility: every step is streamed to
   your terminal so you can follow exactly what each subagent is doing.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@iinm/plain-agent",
-  "version": "1.10.2",
+  "version": "1.10.4",
   "description": "A lightweight CLI-based coding agent",
   "license": "MIT",
   "type": "module",
@@ -19,6 +19,7 @@
     "config",
     "src/**/*.mjs",
     "src/**/*.d.ts",
+    "src/**/*.json",
     "!src/**/*.test.mjs",
     "!src/**/*.test.*.mjs",
     "!src/**/*.playground.mjs",

package/src/{cliBatch.mjs → cli/batch.mjs}

@@ -1,9 +1,9 @@
 /**
- * @import { UserEventEmitter, AgentEventEmitter, AgentCommands } from "./agent"
+ * @import { UserEventEmitter, AgentEventEmitter, AgentCommands } from "../agent"
  */
 
-import { formatCostForBatch } from "./cliFormatter.mjs";
-import { appendUsageRecord, buildUsageRecord } from "./usageStore.mjs";
+import { appendUsageRecord, buildUsageRecord } from "../usageStore.mjs";
+import { formatCostForBatch } from "./formatter.mjs";
 
 /**
  * @typedef {object} BatchSessionOptions

package/src/{cliCommands.mjs → cli/commands.mjs}

@@ -1,18 +1,18 @@
 /**
- * @import { UserEventEmitter, AgentCommands } from "./agent"
- * @import { ClaudeCodePlugin } from "./claudeCodePlugin.mjs"
+ * @import { UserEventEmitter, AgentCommands } from "../agent"
+ * @import { ClaudeCodePlugin } from "../claudeCodePlugin.mjs"
  */
 
 import { execFileSync } from "node:child_process";
 import { styleText } from "node:util";
-import { formatCostSummary } from "./cliFormatter.mjs";
-import { loadAgentRoles } from "./context/loadAgentRoles.mjs";
-import { loadPrompts } from "./context/loadPrompts.mjs";
-import { loadUserMessageContext } from "./context/loadUserMessageContext.mjs";
-import { CLAUDE_CODE_COMPATIBILITY_NOTES } from "./prompt.mjs";
-import { parseFileRange } from "./utils/parseFileRange.mjs";
-import { readFileRange } from "./utils/readFileRange.mjs";
-import { toOneLine } from "./utils/toOneLine.mjs";
+import { loadAgentRoles } from "../context/loadAgentRoles.mjs";
+import { loadPrompts } from "../context/loadPrompts.mjs";
+import { loadUserMessageContext } from "../context/loadUserMessageContext.mjs";
+import { CLAUDE_CODE_COMPATIBILITY_NOTES } from "../prompt.mjs";
+import { parseFileRange } from "../utils/parseFileRange.mjs";
+import { readFileRange } from "../utils/readFileRange.mjs";
+import { toOneLine } from "../utils/toOneLine.mjs";
+import { formatCostSummary } from "./formatter.mjs";
 
 /**
  * @typedef {"prompt" | "continue"} CommandResult
@@ -204,7 +204,9 @@ export function createCommandHandler({
       if (inputTrimmed.startsWith("/prompts:")) {
         const match = inputTrimmed.match(/^\/prompts:([^ ]+)(?:\s+(.*))?$/s);
         if (!match) {
-          console.error(styleText("red", "\nInvalid prompt invocation format."));
+          console.error(
+            styleText("red", "\nInvalid prompt invocation format."),
+          );
           return "prompt";
         }
         return await invokePrompt(

package/src/{cliCompleter.mjs → cli/completer.mjs}

@@ -1,11 +1,11 @@
 /**
- * @import { ClaudeCodePlugin } from "./claudeCodePlugin.mjs"
+ * @import { ClaudeCodePlugin } from "../claudeCodePlugin.mjs"
  */
 
 import { styleText } from "node:util";
-import { loadAgentRoles } from "./context/loadAgentRoles.mjs";
-import { loadPrompts } from "./context/loadPrompts.mjs";
-import { toOneLine } from "./utils/toOneLine.mjs";
+import { loadAgentRoles } from "../context/loadAgentRoles.mjs";
+import { loadPrompts } from "../context/loadPrompts.mjs";
+import { toOneLine } from "../utils/toOneLine.mjs";
 
 // Define available slash commands for tab completion
 export const SLASH_COMMANDS = [

package/src/{cliCost.mjs → cli/cost.mjs}

@@ -1,9 +1,9 @@
 /**
- * @import { UsageRecord } from "./usageStore.mjs"
+ * @import { UsageRecord } from "../usageStore.mjs"
  */
 
 import { styleText } from "node:util";
-import * as usageStore from "./usageStore.mjs";
+import * as usageStore from "../usageStore.mjs";
 
 /**
  * @typedef {Object} CostPeriod
@@ -275,7 +275,7 @@ function formatCost(value) {
  * Run the `plain cost` subcommand.
  *
  * @param {{ from: string | null, to: string | null }} args
- * @param {{ readUsageRecords?: typeof import("./usageStore.mjs").readUsageRecords }} [deps]
+ * @param {{ readUsageRecords?: typeof import("../usageStore.mjs").readUsageRecords }} [deps]
  * @returns {Promise<number>} exit code
  */
 export async function runCostCommand(args, deps = {}) {

package/src/cli/eastAsianWideRanges.json

@@ -0,0 +1,124 @@
+[
+  [4352, 4447],
+  [8986, 8987],
+  [9001, 9002],
+  [9193, 9196],
+  [9200, 9200],
+  [9203, 9203],
+  [9725, 9726],
+  [9748, 9749],
+  [9776, 9783],
+  [9800, 9811],
+  [9855, 9855],
+  [9866, 9871],
+  [9875, 9875],
+  [9889, 9889],
+  [9898, 9899],
+  [9917, 9918],
+  [9924, 9925],
+  [9934, 9934],
+  [9940, 9940],
+  [9962, 9962],
+  [9970, 9971],
+  [9973, 9973],
+  [9978, 9978],
+  [9981, 9981],
+  [9989, 9989],
+  [9994, 9995],
+  [10024, 10024],
+  [10060, 10060],
+  [10062, 10062],
+  [10067, 10069],
+  [10071, 10071],
+  [10133, 10135],
+  [10160, 10160],
+  [10175, 10175],
+  [11035, 11036],
+  [11088, 11088],
+  [11093, 11093],
+  [11904, 11929],
+  [11931, 12019],
+  [12032, 12245],
+  [12272, 12350],
+  [12353, 12438],
+  [12441, 12543],
+  [12549, 12591],
+  [12593, 12686],
+  [12688, 12773],
+  [12783, 12830],
+  [12832, 12871],
+  [12880, 42124],
+  [42128, 42182],
+  [43360, 43388],
+  [44032, 55203],
+  [63744, 64255],
+  [65040, 65049],
+  [65072, 65106],
+  [65108, 65126],
+  [65128, 65131],
+  [65281, 65376],
+  [65504, 65510],
+  [94176, 94180],
+  [94192, 94193],
+  [94208, 100343],
+  [100352, 101589],
+  [101631, 101640],
+  [110576, 110579],
+  [110581, 110587],
+  [110589, 110590],
+  [110592, 110882],
+  [110898, 110898],
+  [110928, 110930],
+  [110933, 110933],
+  [110948, 110951],
+  [110960, 111355],
+  [119552, 119638],
+  [119648, 119670],
+  [126980, 126980],
+  [127183, 127183],
+  [127374, 127374],
+  [127377, 127386],
+  [127488, 127490],
+  [127504, 127547],
+  [127552, 127560],
+  [127568, 127569],
+  [127584, 127589],
+  [127744, 127776],
+  [127789, 127797],
+  [127799, 127868],
+  [127870, 127891],
+  [127904, 127946],
+  [127951, 127955],
+  [127968, 127984],
+  [127988, 127988],
+  [127992, 128062],
+  [128064, 128064],
+  [128066, 128252],
+  [128255, 128317],
+  [128331, 128334],
+  [128336, 128359],
+  [128378, 128378],
+  [128405, 128406],
+  [128420, 128420],
+  [128507, 128591],
+  [128640, 128709],
+  [128716, 128716],
+  [128720, 128722],
+  [128725, 128727],
+  [128732, 128735],
+  [128747, 128748],
+  [128756, 128764],
+  [128992, 129003],
+  [129008, 129008],
+  [129292, 129338],
+  [129340, 129349],
+  [129351, 129535],
+  [129648, 129660],
+  [129664, 129673],
+  [129679, 129734],
+  [129742, 129756],
+  [129759, 129769],
+  [129776, 129784],
+  [131072, 196605],
+  [196608, 262141]
+]