@pi-unipi/workflow 0.1.17 → 2.0.1

package/commands.ts

@@ -388,7 +388,7 @@ export function registerWorkflowCommands(
         // Apply sandbox — save current tools, set command's tools
         const currentTools = options.getActiveTools();
         options.saveTools(currentTools);
-        const sandboxTools = getToolsForCommand(cmd.name);
+        const sandboxTools = getToolsForCommand(cmd.name, currentTools);
         const sandboxLevel = getSandboxLevel(cmd.name);
         options.setActiveTools([...sandboxTools], sandboxLevel);
 

package/index.ts

@@ -16,7 +16,7 @@ import {
   getPackageVersion,
   initUnipiDirs,
   type SandboxLevel,
-  getToolsForLevel,
+  getBlockedToolsForLevel,
 } from "@pi-unipi/core";
 import { registerWorkflowCommands } from "./commands.js";
 
@@ -35,6 +35,9 @@ let sandboxActive = false;
 /** Current sandbox level (null = no sandbox) */
 let currentSandboxLevel: SandboxLevel | null = null;
 
+/** Current active tools after sandbox filtering */
+let currentSandboxTools: string[] | null = null;
+
 export default function (pi: ExtensionAPI) {
   // Register skills directory with pi's resource loader
   const skillsDir = new URL("./skills", import.meta.url).pathname;
@@ -52,6 +55,7 @@ export default function (pi: ExtensionAPI) {
       pi.setActiveTools(tools);
       sandboxActive = true;
       currentSandboxLevel = level;
+      currentSandboxTools = tools;
     },
     saveTools: (tools: string[]) => {
       savedTools = tools;
@@ -62,7 +66,7 @@ export default function (pi: ExtensionAPI) {
   pi.on("tool_call", async (event, _ctx) => {
     if (!sandboxActive || !currentSandboxLevel) return;
 
-    const allowed = getToolsForLevel(currentSandboxLevel);
+    const allowed = currentSandboxTools ?? [];
     if (!allowed.includes(event.toolName)) {
       return {
         block: true,
@@ -75,11 +79,13 @@ export default function (pi: ExtensionAPI) {
   pi.on("before_agent_start", async (event, _ctx) => {
     if (!sandboxActive || !currentSandboxLevel) return;
 
-    const allowed = getToolsForLevel(currentSandboxLevel);
-    const blocked = ["read", "write", "edit", "bash", "grep", "find", "ls"]
-      .filter((t) => !allowed.includes(t));
+    const allowed = currentSandboxTools ?? pi.getActiveTools();
+    const blocked = getBlockedToolsForLevel(currentSandboxLevel);
 
-    const base = `\n\n<sandbox>\nSandbox mode: ${currentSandboxLevel}.\nAvailable tools: ${allowed.join(", ")}.\nBlocked tools: ${blocked.join(", ")} — removed from your tool list.`;
+    const blockedLine = blocked.length > 0
+      ? `\nBlocked tools: ${blocked.join(", ")} — removed from your tool list.`
+      : "\nNo tools were blocked by this sandbox.";
+    const base = `\n\n<sandbox>\nSandbox mode: ${currentSandboxLevel}.\nAvailable tools: ${allowed.join(", ")}.${blockedLine}`;
 
     if (currentSandboxLevel === "brainstorm") {
       return {
@@ -114,6 +120,7 @@ export default function (pi: ExtensionAPI) {
       savedTools = null;
       sandboxActive = false;
       currentSandboxLevel = null;
+      currentSandboxTools = null;
     }
   });
 
@@ -149,7 +156,8 @@ export default function (pi: ExtensionAPI) {
   });
 
   // Listen for ralph module ready event
-  pi.events.on(UNIPI_EVENTS.MODULE_READY, (event: any) => {
+  pi.events.on(UNIPI_EVENTS.MODULE_READY, (data) => {
+    const event = data as { name?: string };
     if (event?.name === MODULES.RALPH) {
       ralphDetected = true;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-unipi/workflow",
-  "version": "0.1.17",
+  "version": "2.0.1",
   "description": "Structured development workflow commands for Pi coding agent",
   "type": "module",
   "license": "MIT",
@@ -33,7 +33,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@pi-unipi/core": "^0.1.6"
+    "@pi-unipi/core": "^2.0.0"
   },
   "peerDependencies": {
     "@mariozechner/pi-ai": "*",

package/skills/brainstorm/SKILL.md

@@ -177,13 +177,27 @@ Wait for user response. If changes requested, make them and re-run self-review.
 
 ## Phase 8: Handoff
 
-Ask user what to do next:
-
-1. **Proceed to /unipi:plan** — Turn decisions into implementation plan
-2. **Keep exploring** — More questions or refine decisions
-3. **Done for now** — Return later
+Ask user what to do next. If `ask_user` is available, prefer structured options so the plan handoff can run automatically:
+
+```ts
+ask_user({
+  question: "What would you like to do next?",
+  options: [
+    {
+      label: "Proceed to /unipi:plan",
+      description: "Turn decisions into an implementation plan",
+      value: "plan",
+      action: "new_session",
+      prefill: "/unipi:plan specs:YYYY-MM-DD-<topic>-design",
+    },
+    { label: "Keep exploring", description: "Refine questions or decisions", value: "explore" },
+    { label: "Done for now", description: "Return later", value: "done", action: "end_turn" },
+  ],
+  allowFreeform: false,
+})
+```
 
-If user selects "Proceed to /unipi:plan", suggest:
+If `ask_user` is unavailable, ask conversationally with the same options. Keep this copyable fallback command visible:
 ```
 /unipi:plan specs:YYYY-MM-DD-<topic>-design
 ```

package/skills/debug/SKILL.md

@@ -12,6 +12,8 @@ Active investigation to reproduce, diagnose, and root-cause bugs. Produces a str
 **This skill MAY:** read codebase, run diagnostic commands, spawn subagents, write debug report to `.unipi/docs/debug/`.
 **This skill MAY NOT:** edit code, fix issues, run tests that modify state, deploy.
 
+**Write-permission clarification:** "Read-only" means source/project code is read-only for diagnosis. It does **not** prohibit creating or updating the debug report. The agent should use available file-writing tools to write exactly the report under `.unipi/docs/debug/`. If writing that report fails, report the write failure explicitly.
+
 **This is diagnosis only — not fixing.**
 
 ## Command Format
@@ -21,7 +23,7 @@ Active investigation to reproduce, diagnose, and root-cause bugs. Produces a str
 ```
 
 - `string(greedy)` — bug description, error message, or reproduction steps
-- Read-only sandbox + write to `.unipi/docs/debug/`
+- Source/code read-only sandbox, with explicit permission to write the debug report to `.unipi/docs/debug/`
 - Spawns subagents if `@unipi/subagents` extension is installed
 
 ## Output Path
@@ -104,7 +106,7 @@ Deep dive into root cause:
 
 ### Phase 4: Document Findings
 
-Write debug report to `.unipi/docs/debug/YYYY-MM-DD-<topic>-debug.md`:
+Write debug report to `.unipi/docs/debug/YYYY-MM-DD-<topic>-debug.md` using the available file-writing tool. Do not skip this because the investigation is otherwise read-only:
 
 ```markdown
 ---

package/skills/plan/SKILL.md

@@ -179,22 +179,45 @@ Do NOT re-read or re-edit the spec checkboxes — Phase 4 already wrote them.
 
 ## Phase 6: Present & Handoff
 
-Present plan summary to user. Then ask:
-
-1. **Proceed to /unipi:work** — Start implementing in a worktree
-2. **Proceed to /unipi:auto** — Run full pipeline (work → review → merge)
-3. **Revise plan** — Adjust tasks or scope
-4. **Done for now** — Return later
+Present plan summary to user. Then ask what to do next. If `ask_user` is available, prefer structured handoff options using `action: "new_session"` so the selected workflow can be queued automatically:
+
+```ts
+ask_user({
+  question: "What would you like to do next?",
+  options: [
+    {
+      label: "Proceed to /unipi:work",
+      description: "Start implementing the plan",
+      value: "work",
+      action: "new_session",
+      prefill: "<work-command>",
+    },
+    {
+      label: "Proceed to /unipi:auto",
+      description: "Run full pipeline (work → review → merge)",
+      value: "auto",
+      action: "new_session",
+      prefill: "/unipi:auto plan:YYYY-MM-DD-<topic>-plan.md",
+    },
+    { label: "Revise plan", description: "Adjust tasks or scope", value: "revise" },
+    { label: "Done for now", description: "Return later", value: "done", action: "end_turn" },
+  ],
+  allowFreeform: false,
+})
+```
 
-If user selects "Proceed to /unipi:work":
-- **Worktree branch** → suggest: `/unipi:work worktree:<branch-name> specs:YYYY-MM-DD-<topic>-plan`
-- **Main branch** → suggest: `/unipi:work specs:YYYY-MM-DD-<topic>-plan` (no worktree arg)
+Use the correct `<work-command>`:
+- **Worktree branch** → `/unipi:work worktree:<branch-name> specs:YYYY-MM-DD-<topic>-plan`
+- **Main branch** → `/unipi:work specs:YYYY-MM-DD-<topic>-plan` (no worktree arg)
 
-If user selects "Proceed to /unipi:auto":
-- **Worktree branch** → suggest: `/unipi:auto plan:YYYY-MM-DD-<topic>-plan.md`
-- **Main branch** → suggest: `/unipi:auto plan:YYYY-MM-DD-<topic>-plan.md` (same — auto reads workbranch from plan)
+Copyable fallback commands when `ask_user` is unavailable:
+```
+/unipi:work worktree:<branch-name> specs:YYYY-MM-DD-<topic>-plan
+/unipi:work specs:YYYY-MM-DD-<topic>-plan
+/unipi:auto plan:YYYY-MM-DD-<topic>-plan.md
+```
 
-Recommend starting a **new session** for work if using a worktree.
+Recommend starting a **new session** for work if using a worktree; the ask_user launcher handles compact/direct queuing when available.
 
 ---
 

package/skills/review-work/SKILL.md

@@ -117,18 +117,34 @@ Followed by description explaining the status.
 
 ## Phase 5: Handoff
 
-Based on review results:
+Based on review results, use `ask_user` `new_session` options when available so the selected next workflow command can be queued automatically. If `ask_user` is unavailable, present the same choices conversationally and keep copyable commands visible.
 
 **If all tasks done and checks pass:**
 
 *If `workbranch` is set (worktree):*
 > "All tasks complete and verified. Ready to merge back to main."
+
+Offer:
+```ts
+ask_user({
+  question: "Merge this worktree now?",
+  options: [
+    { label: "Proceed to /unipi:worktree-merge", value: "merge", action: "new_session", prefill: "/unipi:worktree-merge" },
+    { label: "Consolidate learnings", value: "consolidate", action: "new_session", prefill: "/unipi:consolidate" },
+    { label: "Done for now", value: "done", action: "end_turn" },
+  ],
+  allowFreeform: false,
+})
+```
+Copyable fallback:
 ```
 /unipi:worktree-merge
 ```
 
 *If `workbranch` is empty (main branch):*
 > "All tasks complete and verified. Changes already on main — no merge needed."
+
+Offer `/unipi:consolidate` as a `new_session` handoff when available. Copyable fallback:
 ```
 /unipi:consolidate
 ```
@@ -141,6 +157,8 @@ Either way, user can consolidate learnings:
 **If tasks incomplete or checks fail:**
 > "Tasks remaining and/or checks failing. Continue work?"
 
+Offer the applicable `/unipi:work ...` command as a `new_session` handoff when available.
+
 *If `workbranch` is set:*
 ```
 /unipi:work worktree:<branch> specs:<plan-path>
@@ -153,6 +171,8 @@ Either way, user can consolidate learnings:
 
 **If scoped review complete:**
 > "Scoped review complete. Run full review or continue work?"
+
+Offer both commands as `new_session` options when available:
 ```
 /unipi:review-work plan:<plan-path>  (full review)
 /unipi:work specs:<plan-path>        (continue work)

package/skills/work/SKILL.md

@@ -163,13 +163,34 @@ When all tasks are `completed:`:
 
 **If working in worktree:**
 > "All tasks complete. Worktree: `{branch}`. Recommend reviewing before merge."
+
+If `ask_user` is available, offer an automatic handoff:
+```ts
+ask_user({
+  question: "Review this work now?",
+  options: [
+    {
+      label: "Proceed to /unipi:review-work",
+      description: "Review before merge",
+      value: "review",
+      action: "new_session",
+      prefill: "/unipi:review-work plan:<plan-path>",
+    },
+    { label: "Done for now", value: "done", action: "end_turn" },
+  ],
+  allowFreeform: false,
+})
+```
+Copyable fallback:
 ```
 /unipi:review-work plan:<plan-path>
 ```
-**Recommend starting a new session** for review.
+**Recommend starting a new session** for review; the ask_user launcher can compact/direct queue the command.
 
 **If working on main branch:**
 > "All tasks complete. All changes committed directly on main."
+
+If `ask_user` is available, offer the same review handoff with `prefill: "/unipi:review-work plan:<plan-path>"`. Copyable fallback:
 ```
 /unipi:review-work plan:<plan-path>
 ```