@ilya-lesikov/pi-pi 0.1.0

package/3p/pi-plannotator/apps/pi-extension/server.ts

@@ -0,0 +1,44 @@
+/**
+ * Node-compatible servers for Plannotator Pi extension.
+ *
+ * Pi loads extensions via jiti (Node.js), so we can't use Bun.serve().
+ * These are lightweight node:http servers implementing just the routes
+ * each UI needs — plan review, code review, and markdown annotation.
+ */
+
+export type {
+	DiffOption,
+	DiffType,
+	GitContext,
+} from "./generated/review-core.js";
+export type { WorkspaceDiffType } from "./generated/review-workspace.js";
+export type { VcsSelection } from "./server/vcs.js";
+export {
+	type AnnotateServerResult,
+	startAnnotateServer,
+} from "./server/serverAnnotate.js";
+export {
+	type PlanServerResult,
+	startPlanReviewServer,
+} from "./server/serverPlan.js";
+export {
+	type ReviewServerResult,
+	startReviewServer,
+} from "./server/serverReview.js";
+export {
+	canStageFiles,
+	detectManagedVcs,
+	detectRemoteDefaultCompareTarget,
+	detectVcs,
+	getGitContext,
+	getVcsContext,
+	getVcsFileContentsForDiff,
+	prepareLocalReviewDiff,
+	resolveInitialDiffType,
+	resolveVcsCwd,
+	reviewRuntime,
+	runGitDiff,
+	runVcsDiff,
+	stageFile,
+	unstageFile,
+} from "./server/vcs.js";

package/3p/pi-plannotator/apps/pi-extension/tool-scope.test.ts

@@ -0,0 +1,88 @@
+import { describe, expect, test } from "bun:test";
+import {
+	getToolsForPhase,
+	isPlanWritePathAllowed,
+	PLAN_SUBMIT_TOOL,
+	stripPlanningOnlyTools,
+} from "./tool-scope";
+
+describe("pi plan tool scoping", () => {
+	test("planning phase adds the submit tool and discovery helpers", () => {
+		expect(getToolsForPhase(["read", "bash", "edit", "write"], "planning")).toEqual([
+			"read",
+			"bash",
+			"edit",
+			"write",
+			"grep",
+			"find",
+			"ls",
+			PLAN_SUBMIT_TOOL,
+		]);
+	});
+
+	test("idle and executing phases strip the planning-only submit tool", () => {
+		const leakedTools = ["read", "bash", "grep", PLAN_SUBMIT_TOOL, "write"];
+
+		expect(getToolsForPhase(leakedTools, "idle")).toEqual([
+			"read",
+			"bash",
+			"grep",
+			"write",
+		]);
+		expect(getToolsForPhase(leakedTools, "executing")).toEqual([
+			"read",
+			"bash",
+			"grep",
+			"write",
+		]);
+	});
+
+	test("stripping planning-only tools preserves unrelated tools", () => {
+		expect(stripPlanningOnlyTools([PLAN_SUBMIT_TOOL, "todo", "question", "read"])).toEqual([
+			"todo",
+			"question",
+			"read",
+		]);
+	});
+});
+
+describe("plan write path gate", () => {
+	const cwd = "/r";
+
+	test("allows markdown files anywhere inside cwd", () => {
+		expect(isPlanWritePathAllowed("PLAN.md", cwd)).toBe(true);
+		expect(isPlanWritePathAllowed("plans/auth.md", cwd)).toBe(true);
+		expect(isPlanWritePathAllowed("deeply/nested/dir/notes.mdx", cwd)).toBe(true);
+	});
+
+	test("rejects non-markdown extensions", () => {
+		expect(isPlanWritePathAllowed("src/app.ts", cwd)).toBe(false);
+		expect(isPlanWritePathAllowed("notes.txt", cwd)).toBe(false);
+		expect(isPlanWritePathAllowed("config.json", cwd)).toBe(false);
+	});
+
+	test("rejects files with no extension or bare directories", () => {
+		expect(isPlanWritePathAllowed("plans", cwd)).toBe(false);
+		expect(isPlanWritePathAllowed("PLAN", cwd)).toBe(false);
+	});
+
+	test("rejects traversal and absolute paths outside cwd", () => {
+		expect(isPlanWritePathAllowed("../escape.md", cwd)).toBe(false);
+		expect(isPlanWritePathAllowed("../../etc/passwd.md", cwd)).toBe(false);
+		expect(isPlanWritePathAllowed("/tmp/leak.md", cwd)).toBe(false);
+	});
+
+	test("allows absolute paths that resolve inside cwd", () => {
+		expect(isPlanWritePathAllowed("/r/plans/foo.md", cwd)).toBe(true);
+	});
+
+	test("rejects empty path and the cwd itself", () => {
+		expect(isPlanWritePathAllowed("", cwd)).toBe(false);
+		expect(isPlanWritePathAllowed(".", cwd)).toBe(false);
+	});
+
+	test("extension check is case-insensitive", () => {
+		expect(isPlanWritePathAllowed("PLAN.MD", cwd)).toBe(true);
+		expect(isPlanWritePathAllowed("notes.MdX", cwd)).toBe(true);
+	});
+});

package/3p/pi-plannotator/apps/pi-extension/tool-scope.ts

@@ -0,0 +1,39 @@
+import { extname, isAbsolute, relative, resolve } from "node:path";
+
+export type Phase = "idle" | "planning" | "executing";
+
+export const PLAN_SUBMIT_TOOL = "plannotator_submit_plan";
+export const PLANNING_DISCOVERY_TOOLS = ["grep", "find", "ls"] as const;
+
+const PLANNING_ONLY_TOOLS = new Set<string>([PLAN_SUBMIT_TOOL]);
+const ALLOWED_PLAN_EXTENSIONS = new Set<string>([".md", ".mdx"]);
+
+export function stripPlanningOnlyTools(tools: readonly string[]): string[] {
+	return tools.filter((tool) => !PLANNING_ONLY_TOOLS.has(tool));
+}
+
+export function getToolsForPhase(
+	baseTools: readonly string[],
+	phase: Phase,
+): string[] {
+	const tools = stripPlanningOnlyTools(baseTools);
+	if (phase !== "planning") {
+		return [...new Set(tools)];
+	}
+
+	return [
+		...new Set([...tools, ...PLANNING_DISCOVERY_TOOLS, PLAN_SUBMIT_TOOL]),
+	];
+}
+
+// Used by both the planning-phase write gate and plannotator_submit_plan.
+// Path must resolve inside cwd (no traversal, no absolute escape) and end
+// in a permitted markdown extension.
+export function isPlanWritePathAllowed(inputPath: string, cwd: string): boolean {
+	if (!inputPath) return false;
+	const targetAbs = resolve(cwd, inputPath);
+	const rel = relative(resolve(cwd), targetAbs);
+	if (rel === "" || rel.startsWith("..") || isAbsolute(rel)) return false;
+	const ext = extname(targetAbs).toLowerCase();
+	return ALLOWED_PLAN_EXTENSIONS.has(ext);
+}

package/3p/pi-plannotator/apps/pi-extension/tsconfig.json

@@ -0,0 +1,16 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "strict": true,
+    "skipLibCheck": true,
+    "noEmit": true,
+    "allowImportingTsExtensions": true,
+    "isolatedModules": true,
+    "moduleDetection": "force",
+    "types": ["node"]
+  },
+  "include": ["*.ts", "server/**/*.ts"],
+  "exclude": ["**/*.test.ts"]
+}

package/3p/pi-plannotator/apps/pi-extension/vendor.sh

@@ -0,0 +1,48 @@
+#!/usr/bin/env bash
+# Vendor shared modules into generated/ for Pi extension.
+# Single source of truth — used by both `npm run build` and CI test workflow.
+set -euo pipefail
+cd "$(dirname "$0")"
+
+rm -rf generated
+mkdir -p generated generated/ai/providers
+
+for f in feedback-templates prompts review-core diff-paths jj-core vcs-core review-args storage draft project pr-types pr-provider pr-stack pr-github pr-gitlab checklist integrations-common repo reference-common favicon code-file resolve-file config external-annotation agent-jobs worktree worktree-pool html-to-markdown url-to-markdown tour annotate-args at-reference review-workspace-node review-workspace pfm-reminder improvement-hooks code-nav data-dir semantic-diff-types semantic-diff; do
+  src="../../packages/shared/$f.ts"
+  printf '// @generated — DO NOT EDIT. Source: packages/shared/%s.ts\n' "$f" | cat - "$src" > "generated/$f.ts"
+done
+
+# Vendor review agent modules from packages/server/ — rewrite imports for generated/ layout
+for f in agent-review-message codex-review claude-review path-utils; do
+  src="../../packages/server/$f.ts"
+  printf '// @generated — DO NOT EDIT. Source: packages/server/%s.ts\n' "$f" | cat - "$src" \
+    | sed 's|from "./vcs"|from "./review-core.js"|' \
+    | sed 's|from "./pr"|from "./pr-provider.js"|' \
+    | sed 's|from "./path-utils"|from "./path-utils.js"|' \
+    | sed 's|from "@plannotator/shared/review-workspace"|from "./review-workspace.js"|' \
+    | sed 's|from "@plannotator/shared/data-dir"|from "./data-dir"|' \
+    > "generated/$f.ts"
+done
+
+# tour-review lives in packages/server/tour/ — parent-relative imports and the
+# shared tour types package each map to the flat generated/ layout.
+for f in tour-review; do
+  src="../../packages/server/tour/$f.ts"
+  printf '// @generated — DO NOT EDIT. Source: packages/server/tour/%s.ts\n' "$f" | cat - "$src" \
+    | sed 's|from "\.\./vcs"|from "./review-core.js"|' \
+    | sed 's|from "\.\./pr"|from "./pr-provider.js"|' \
+    | sed 's|from "\.\./agent-review-message"|from "./agent-review-message.js"|' \
+    | sed 's|from "@plannotator/shared/tour"|from "./tour.js"|' \
+    | sed 's|from "@plannotator/shared/data-dir"|from "./data-dir"|' \
+    > "generated/$f.ts"
+done
+
+for f in index types provider session-manager endpoints context base-session; do
+  src="../../packages/ai/$f.ts"
+  printf '// @generated — DO NOT EDIT. Source: packages/ai/%s.ts\n' "$f" | cat - "$src" > "generated/ai/$f.ts"
+done
+
+for f in claude-agent-sdk codex-sdk opencode-sdk command-path pi-sdk pi-sdk-node pi-events; do
+  src="../../packages/ai/providers/$f.ts"
+  printf '// @generated — DO NOT EDIT. Source: packages/ai/providers/%s.ts\n' "$f" | cat - "$src" > "generated/ai/providers/$f.ts"
+done

package/3p/pi-plannotator/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "plannotator",
+  "version": "0.20.0",
+  "private": true,
+  "description": "Interactive Plan Review for Claude Code - annotate plans visually, share with team, automatically send feedback",
+  "author": "backnotprop",
+  "license": "MIT OR Apache-2.0",
+  "bin": {
+    "plannotator": "bin/plannotator.js"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/backnotprop/plannotator.git"
+  },
+  "homepage": "https://github.com/backnotprop/plannotator",
+  "bugs": {
+    "url": "https://github.com/backnotprop/plannotator/issues"
+  },
+  "scripts": {
+    "dev:hook": "bun run --cwd apps/hook dev",
+    "dev:portal": "bun run --cwd apps/portal dev",
+    "dev:marketing": "bun run --cwd apps/marketing dev",
+    "dev:review": "bun run --cwd apps/review dev",
+    "build:hook": "bun run --cwd apps/hook build",
+    "build:portal": "bun run --cwd apps/portal build",
+    "build:marketing": "bun run --cwd apps/marketing build",
+    "build:opencode": "bun run --cwd apps/opencode-plugin build",
+    "build:review": "bun run --cwd apps/review build",
+    "build:pi": "bun run build:review && bun run build:hook && bun run --cwd apps/pi-extension build",
+    "build": "bun run build:hook && bun run build:opencode",
+    "dev:vscode": "bun run --cwd apps/vscode-extension watch",
+    "build:vscode": "bun run --cwd apps/vscode-extension build",
+    "package:vscode": "bun run --cwd apps/vscode-extension package",
+    "test": "bun test",
+    "typecheck": "bash apps/pi-extension/vendor.sh && tsc --noEmit -p packages/shared/tsconfig.json && tsc --noEmit -p packages/ai/tsconfig.json && tsc --noEmit -p packages/server/tsconfig.json && tsc --noEmit -p packages/ui/tsconfig.json && tsc --noEmit -p apps/pi-extension/tsconfig.json"
+  },
+  "dependencies": {
+    "@anthropic-ai/claude-agent-sdk": "^0.2.92",
+    "@openai/codex-sdk": "^0.118.0",
+    "@opencode-ai/sdk": "^1.3.0",
+    "@pierre/diffs": "^1.1.20",
+    "diff": "^8.0.4",
+    "dockview-react": "^5.2.0",
+    "dompurify": "^3.3.3",
+    "marked": "^17.0.6",
+    "sonner": "^2.0.7"
+  },
+  "devDependencies": {
+    "@types/node": "^25.5.2",
+    "@types/turndown": "^5.0.6",
+    "bun-types": "^1.3.11"
+  }
+}