@iinm/plain-agent 1.7.15 → 1.7.16

package/README.md

@@ -4,21 +4,28 @@
 
 # Plain Agent
 
-A lightweight CLI-based coding agent.
+A lightweight CLI-based coding agent with zero framework dependencies.
 
-- **Safety controls** — Configure approval rules and sandboxing for safe execution
-- **Multi-provider** — Supports Anthropic, OpenAI, Gemini, Bedrock, Azure, Vertex AI, and more
-- **Sequential subagent delegation** — Delegate subtasks to specialized subagents with full visibility
-- **MCP support** — Connect to external MCP servers to extend available tools
-- **Claude Code compatible** — Reuse Claude Code plugins, agents, commands, and skills
+## Why Plain Agent?
 
-## Safety Controls
+- **Multi-provider** — Use Claude, GPT, Gemini, or any OpenAI-compatible model.
+  Switch providers without changing your workflow.
+- **Fine-grained approval rules** — Auto-approve commands by name, arguments,
+  and file paths using regex patterns
+  ([`config.predefined.json`](https://github.com/iinm/plain-agent/blob/main/config/config.predefined.json)).
+- **Path validation** — File paths must stay within the working directory
+  and git-ignored files (`.env`, etc.) are blocked.
+- **Sandboxed execution** — Run the agent's shell commands inside a Docker
+  container with network access restricted to allowlisted destinations
+  (e.g., `registry.npmjs.org` only for `npm install`).
+- **Extensible** — Define prompts and subagents in Markdown.
+  Connect MCP servers. Reuse Claude Code plugins.
 
-**Auto-Approval**: Tools with no side effects and no sensitive data access are automatically approved based on patterns defined in [`config.predefined.json#autoApproval`](https://github.com/iinm/plain-agent/blob/main/config/config.predefined.json).
+## Limitations
 
-**Path Validation**: All file paths in tool inputs are validated to remain within the working directory and under git control.
-
-⚠️ `write_file` and `patch_file` require explicit path arguments. However, `exec_command` can run arbitrary code where file access cannot be validated. Use a sandbox for stronger isolation.
+- **Sequential subagent execution** — Subagents run one at a time rather than
+  in parallel. The trade-off is full visibility: every step is streamed to
+  your terminal so you can follow exactly what each subagent is doing.
 
 ## Requirements
 
@@ -67,32 +74,11 @@ Create the configuration.
       "variant": "default",
       "apiKey": "FIXME"
     },
-    {
-      // Requires Azure CLI to get access token
-      "name": "azure",
-      "variant": "openai",
-      "baseURL": "https://<resource>.openai.azure.com/openai",
-      // Optional
-      "azureConfigDir": "/home/xxx/.azure-for-agent"
-    },
-    {
-      "name": "bedrock",
-      "variant": "default",
-      "baseURL": "https://bedrock-runtime.<region>.amazonaws.com",
-      "awsProfile": "FIXME"
-    },
-    {
-      // Requires gcloud CLI to get authentication token
-      "name": "vertex-ai",
-      "variant": "default",
-      "baseURL": "https://aiplatform.googleapis.com/v1beta1/projects/<project>/locations/<location>",
-      // Optional
-      "account": "<service_account_email>"
-    }
   ],
 
   // Optional
   "tools": {
+    // askWeb: Searches the web to answer questions requiring up-to-date information or external sources.
     "askWeb": {
       "provider": "gemini",
       "apiKey": "FIXME",
@@ -108,6 +94,8 @@ Create the configuration.
       // "account": "<service_account_email>"
     },
 
+    // askURL: Answers questions based on provided URL content.
+    //         Directly injecting URL content into context is not supported to prevent prompt injection.
     "askURL": {
       "provider": "gemini",
       "apiKey": "FIXME"
@@ -129,7 +117,40 @@ Create the configuration.
 ```
 
 <details>
-<summary><b>Other provider examples</b></summary>
+<summary><b>Azure / Bedrock / Vertex AI provider examples</b></summary>
+
+```js
+{
+  "platforms": [
+    {
+      // Requires Azure CLI to get access token
+      "name": "azure",
+      "variant": "openai",
+      "baseURL": "https://<resource>.openai.azure.com/openai",
+      // Optional
+      "azureConfigDir": "/home/xxx/.azure-for-agent"
+    },
+    {
+      "name": "bedrock",
+      "variant": "default",
+      "baseURL": "https://bedrock-runtime.<region>.amazonaws.com",
+      "awsProfile": "FIXME"
+    },
+    {
+      // Requires gcloud CLI to get authentication token
+      "name": "vertex-ai",
+      "variant": "default",
+      "baseURL": "https://aiplatform.googleapis.com/v1beta1/projects/<project>/locations/<location>",
+      // Optional
+      "account": "<service_account_email>"
+    }
+  ]
+}
+```
+</details>
+
+<details>
+<summary><b>OpenAI compatible provider examples</b></summary>
 
 ```js
 {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@iinm/plain-agent",
-  "version": "1.7.15",
+  "version": "1.7.16",
   "description": "A lightweight CLI-based coding agent",
   "license": "MIT",
   "type": "module",

package/src/cliFormatter.mjs

@@ -11,6 +11,49 @@
 import { styleText } from "node:util";
 import { createPatch } from "diff";
 
+/** Length above which a single-line arg forces block-form rendering. */
+const ARG_BLOCK_LENGTH_THRESHOLD = 60;
+
+/**
+ * Format an args array for display.
+ * Uses compact JSON for short single-line args; switches to a YAML-style
+ * block form when any arg contains newlines or exceeds
+ * {@link ARG_BLOCK_LENGTH_THRESHOLD} characters so that long scripts passed
+ * to `bash -c`, `python -c`, `node -e`, etc. stay readable.
+ * @param {unknown} args
+ * @returns {string}
+ */
+export function formatArgs(args) {
+  if (!Array.isArray(args) || args.length === 0) {
+    return `args: ${JSON.stringify(args ?? [])}`;
+  }
+
+  const needsBlock = args.some(
+    (a) =>
+      typeof a === "string" &&
+      (a.includes("\n") || a.length > ARG_BLOCK_LENGTH_THRESHOLD),
+  );
+  if (!needsBlock) {
+    return `args: ${JSON.stringify(args)}`;
+  }
+
+  const lines = ["args:"];
+  for (const arg of args) {
+    if (
+      typeof arg === "string" &&
+      (arg.includes("\n") || arg.length > ARG_BLOCK_LENGTH_THRESHOLD)
+    ) {
+      lines.push("  - |");
+      for (const line of arg.split("\n")) {
+        lines.push(`      ${line}`);
+      }
+    } else {
+      lines.push(`  - ${JSON.stringify(arg)}`);
+    }
+  }
+  return lines.join("\n");
+}
+
 /**
  * Format tool use for display.
  * @param {MessageContentToolUse} toolUse
@@ -25,7 +68,7 @@ export function formatToolUse(toolUse) {
     return [
       `tool: ${toolName}`,
       `command: ${JSON.stringify(execCommandInput.command)}`,
-      `args: ${JSON.stringify(execCommandInput.args)}`,
+      formatArgs(execCommandInput.args),
     ].join("\n");
   }
 
@@ -82,7 +125,7 @@ export function formatToolUse(toolUse) {
     return [
       `tool: ${toolName}`,
       `command: ${tmuxCommandInput.command}`,
-      `args: ${JSON.stringify(tmuxCommandInput.args)}`,
+      formatArgs(tmuxCommandInput.args),
     ].join("\n");
   }
 

package/src/main.mjs

@@ -123,7 +123,7 @@ if (cliArgs.subcommand.type === "install-claude-code-plugins") {
       }),
     );
 
-    for (const { serverName, tools, cleanup } of mcpResults) {
+    for (const { serverName, tools, stderrLogPath, cleanup } of mcpResults) {
       mcpTools.push(...tools);
       mcpCleanups.push(cleanup);
       if (!isBatchMode) {
@@ -133,6 +133,7 @@ if (cliArgs.subcommand.type === "install-claude-code-plugins") {
             `✅ Successfully connected to MCP server: ${serverName}`,
           ),
         );
+        console.log(`  ⤷ stderr log: ${stderrLogPath}`);
       }
     }
   }

package/src/mcp.mjs

@@ -15,6 +15,7 @@ const OUTPUT_MAX_LENGTH = 1024 * 8;
 /**
  * @typedef {Object} SetupMCPServrResult
  * @property {Tool[]} tools
+ * @property {string} stderrLogPath
  * @property {() => Promise<void>} cleanup
  */
 
@@ -26,7 +27,7 @@ const OUTPUT_MAX_LENGTH = 1024 * 8;
 export async function setupMCPServer(serverName, serverConfig) {
   const { options, ...params } = serverConfig;
 
-  const { client, cleanup } = await startMCPServer({
+  const { client, stderrLogPath, cleanup } = await startMCPServer({
     serverName,
     params,
   });
@@ -41,6 +42,7 @@ export async function setupMCPServer(serverName, serverConfig) {
 
   return {
     tools,
+    stderrLogPath,
     cleanup: async () => {
       cleanup();
       await client.close();
@@ -56,7 +58,7 @@ export async function setupMCPServer(serverName, serverConfig) {
 
 /**
  * @param {MCPClientOptions} options - The options for the client.
- * @returns {Promise<{client: Client; cleanup: () => void}>} - The MCP client and cleanup function.
+ * @returns {Promise<{client: Client; stderrLogPath: string; cleanup: () => void}>} - The MCP client, stderr log path, and cleanup function.
  */
 async function startMCPServer(options) {
   const mcpClient = await import("@modelcontextprotocol/client");
@@ -88,6 +90,7 @@ async function startMCPServer(options) {
 
   return {
     client,
+    stderrLogPath: logPath,
     cleanup: () => {
       stderrLogFile.close();
     },