flavor-code 1.3.2 → 1.3.3

package/README.md

@@ -252,10 +252,10 @@ flavor mcp disable docs
 
 A Skill is a `SKILL.md` with YAML frontmatter, placed in `.flavor/skills/<name>/` or `~/.flavor-code/skills/<name>/`. Flavor loads skills progressively based on the task, and you can invoke one explicitly with `/<skill-name>`. Skill bodies support `$ARGUMENTS`, `$ARGUMENTS[N]`, and `$N` substitutions. A running composite Skill can load a dependency through the read-only `Skill` tool; plugin-qualified names such as `superharness:test-driven-development` resolve to discovered skills.
 
-Plugins live in `.flavor/plugins/` and can register commands, tools, hooks, Skill roots, and model adapters. `additionalContext` returned by `SessionStart` and `UserPromptSubmit` hooks is added to the current task context, enabling reliable project-level engineering policy injection. Production plugin activation is isolated in a Worker/vm realm by default and records a content fingerprint plus declared capabilities.
+Plugins live in `.flavor/plugins/` and can register commands, tools, hooks, Skill roots, and model adapters. `additionalContext` returned by `SessionStart` and `UserPromptSubmit` hooks is added to the current task context, enabling reliable project-level engineering policy injection. Plugin loads record a content fingerprint plus declared capabilities. Worker/vm isolation is available through the embedding API's `pluginSandbox: true` option; the compatibility default remains in-process because bundled and existing plugins use Node.js APIs that the isolated runtime does not yet mediate.
 
 > [!WARNING]
-> Sandboxing reduces ambient access but does not make untrusted instructions safe. Only install and enable plugins you trust; legacy `pluginSandbox: false` activation grants full in-process Node.js access.
+> The default in-process plugin runtime grants full Node.js access. Only install and enable plugins you trust. Sandboxing reduces ambient access but does not make untrusted instructions safe, and plugins that import Node.js built-ins will not load with `pluginSandbox: true` yet.
 
 ## Sessions, Memory & Execution Records
 

package/README.zh-CN.md

@@ -252,10 +252,10 @@ flavor mcp disable docs
 
 Skill 是带有 YAML 头信息的 `SKILL.md`，放在 `.flavor/skills/<name>/` 或 `~/.flavor-code/skills/<name>/`。Flavor 会按任务渐进加载，也支持通过 `/<skill-name>` 显式调用。Skill 正文支持 `$ARGUMENTS`、`$ARGUMENTS[N]` 和 `$N` 参数占位符；运行中的组合 Skill 可以使用只读 `Skill` 工具继续加载依赖 Skill，插件限定名称（如 `superharness:test-driven-development`）会安全解析到已发现的 Skill。
 
-插件放在 `.flavor/plugins/`，可以注册命令、工具、Hook、Skill 根目录和模型适配器。`SessionStart` 与 `UserPromptSubmit` Hook 返回的 `additionalContext` 会进入当前任务上下文，可用于注入项目级工程规则。产品运行时默认在 Worker/vm 隔离环境激活插件，并记录内容指纹与声明的能力。
+插件放在 `.flavor/plugins/`，可以注册命令、工具、Hook、Skill 根目录和模型适配器。`SessionStart` 与 `UserPromptSubmit` Hook 返回的 `additionalContext` 会进入当前任务上下文，可用于注入项目级工程规则。插件加载会记录内容指纹与声明的能力。可通过嵌入 API 的 `pluginSandbox: true` 启用 Worker/vm 隔离；由于内置插件和已有插件依赖沙箱尚未代理的 Node.js API，当前兼容默认值仍为进程内运行。
 
 > [!WARNING]
-> 沙箱会降低环境权限，但不能让不可信指令自动变安全。只安装和启用可信插件；旧版兼容选项 `pluginSandbox: false` 会授予完整的进程内 Node.js 权限。
+> 默认的进程内插件运行时拥有完整 Node.js 权限，只安装和启用你信任的插件。沙箱会降低环境权限，但不能让不可信指令自动变安全；目前导入 Node.js 内置模块的插件在 `pluginSandbox: true` 下仍无法加载。
 
 ## 会话、记忆与执行记录
 

package/dist/{app-F6FEEF46.js → app-NXOGWGSI.js}

@@ -16,7 +16,7 @@ import {
   redactErrorText,
   transcriptReducer,
   withTimeout
-} from "./chunk-Q5EQ4T3F.js";
+} from "./chunk-YY5H6GFN.js";
 import "./chunk-IG4Z23CL.js";
 import {
   Box_default,

package/dist/{chunk-DFSMJ5SX.js → chunk-JKJOQRAL.js}

@@ -4,7 +4,7 @@ import {
   message,
   redactErrorText,
   redactSecrets
-} from "./chunk-Q5EQ4T3F.js";
+} from "./chunk-YY5H6GFN.js";
 
 // src/rpc/server.ts
 import { createInterface } from "readline";

package/dist/{chunk-Q5EQ4T3F.js → chunk-YY5H6GFN.js}

@@ -561,7 +561,7 @@ function redactSecrets(input, secrets) {
 
 // src/init/project.ts
 import { lstat, mkdir, readdir, readFile, realpath, writeFile } from "fs/promises";
-import { copyFileSync, mkdirSync, readdirSync, readFileSync } from "fs";
+import { copyFileSync, mkdirSync, readdirSync } from "fs";
 import { basename, dirname as dirname2, isAbsolute as isAbsolute2, join, relative as relative2, sep as sep2 } from "path";
 import { fileURLToPath } from "url";
 var GENERATED_START = "<!-- flavor-code:start -->";
@@ -1014,22 +1014,6 @@ async function createExampleFlavorConfig(cwd) {
   };
   await writeFile(configPath, JSON.stringify(example, null, 2) + "\n");
 }
-var CODEISLAND_SRC_DIR = join(dirname2(fileURLToPath(import.meta.url)), "codeisland");
-var CODEISLAND_FILES = ["flavor-plugin.json", "activate.mjs", "bridge.mjs"];
-async function copyCodeIslandPlugin(cwd) {
-  const pluginDir = join(cwd, ".flavor", "plugins", "codeisland");
-  try {
-    await lstat(pluginDir);
-    return;
-  } catch (error) {
-    if (!isMissingPathError(error)) throw error;
-  }
-  await mkdir(pluginDir, { recursive: true, mode: 448 });
-  for (const name of CODEISLAND_FILES) {
-    const content = readFileSync(join(CODEISLAND_SRC_DIR, name), "utf8");
-    await writeFile(join(pluginDir, name), content);
-  }
-}
 var ASTGRAPH_SRC_DIR = join(dirname2(fileURLToPath(import.meta.url)), "astgraph");
 async function copyAstgraphPlugin(cwd) {
   const pluginDir = join(cwd, ".flavor", "plugins", "astgraph");
@@ -1052,7 +1036,6 @@ function copyDirectory(from, to) {
 }
 async function initializeFlavor(cwd) {
   await ensureFlavorDirectories(cwd);
-  await copyCodeIslandPlugin(cwd);
   await copyAstgraphPlugin(cwd);
   await createExampleFlavorConfig(cwd);
   const facts = await inspectProject(cwd);
@@ -1074,7 +1057,7 @@ async function initializeFlavor(cwd) {
 }
 
 // src/utils/version.ts
-import { readFileSync as readFileSync2 } from "fs";
+import { readFileSync } from "fs";
 import { dirname as dirname3, join as join2 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 var cached;
@@ -1083,7 +1066,7 @@ function packageVersion() {
   let directory = dirname3(fileURLToPath2(import.meta.url));
   for (; ; ) {
     try {
-      const manifest = JSON.parse(readFileSync2(join2(directory, "package.json"), "utf8"));
+      const manifest = JSON.parse(readFileSync(join2(directory, "package.json"), "utf8"));
       if (typeof manifest.version === "string" && manifest.version.length > 0) {
         cached = manifest.version;
         return cached;
@@ -8002,7 +7985,7 @@ function toModelTool(tool) {
 
 // src/harness/journal.ts
 import { createHash as createHash6, randomUUID as randomUUID8 } from "crypto";
-import { closeSync, constants, existsSync as existsSync2, fsyncSync, mkdirSync as mkdirSync2, openSync, readFileSync as readFileSync3, realpathSync as realpathSync2, statSync, truncateSync, writeSync } from "fs";
+import { closeSync, constants, existsSync as existsSync2, fsyncSync, mkdirSync as mkdirSync2, openSync, readFileSync as readFileSync2, realpathSync as realpathSync2, statSync, truncateSync, writeSync } from "fs";
 import { join as join8, relative as relative7, resolve as resolve8, sep as sep7 } from "path";
 import { z as z10 } from "zod";
 
@@ -8220,7 +8203,7 @@ var HarnessJournal = class {
     const metadata = statSync(this.#path);
     if (!metadata.isFile()) throw new Error("Harness journal path is not a regular file");
     if (metadata.size > this.#maxBytes) throw new Error(`Harness journal exceeds ${this.#maxBytes} bytes`);
-    const raw = readFileSync3(this.#path, "utf8");
+    const raw = readFileSync2(this.#path, "utf8");
     const committed = raw.endsWith("\n") ? raw : raw.slice(0, Math.max(0, raw.lastIndexOf("\n") + 1));
     if (committed.length !== raw.length) truncateSync(this.#path, Buffer.byteLength(committed));
     const lines = committed.split("\n").filter(Boolean);
@@ -20524,7 +20507,10 @@ async function createProductionRuntime(options) {
     globalPluginDirs: [join24(home, ".flavor-code", "plugins")],
     projectPluginDirs: [join24(workspace, ".flavor", "plugins")],
     config,
-    sandbox: options.pluginSandbox ?? true,
+    // Existing project plugins (including astgraph and superharness) use Node.js
+    // built-ins. The Worker/vm sandbox deliberately blocks those imports, so it
+    // must stay opt-in until equivalent mediated capabilities are available.
+    sandbox: options.pluginSandbox ?? false,
     registrations: {
       command(name, handler, description) {
         if (typeof handler !== "function") throw new Error(`Plugin command "${name}" must be a function.`);

package/dist/cli.js

@@ -3,7 +3,7 @@ import { createRequire } from "node:module"; const require = createRequire(impor
 import {
   FlavorRpcServer,
   TraceRecorder
-} from "./chunk-DFSMJ5SX.js";
+} from "./chunk-JKJOQRAL.js";
 import {
   staticTaskLines
 } from "./chunk-KKIBYDJI.js";
@@ -23,7 +23,7 @@ import {
   packageVersion,
   redactErrorText,
   runPalBroker
-} from "./chunk-Q5EQ4T3F.js";
+} from "./chunk-YY5H6GFN.js";
 import {
   McpServerConfigSchema,
   McpServerNameSchema,
@@ -877,7 +877,7 @@ async function runInteractiveCli(props) {
   const [{ render, AlternateScreen }, { createElement }, { App }] = await Promise.all([
     import("./claude-ink-ORUA7GWG.js"),
     import("react"),
-    import("./app-F6FEEF46.js")
+    import("./app-NXOGWGSI.js")
   ]);
   const instance = await render(createElement(
     AlternateScreen,

package/dist/desktop/main.js

@@ -10294,7 +10294,7 @@ ${result.stderr.slice(-4e3)}` : ""}`;
 
 // src/init/project.ts
 import { lstat as lstat4, mkdir as mkdir9, readdir as readdir4, readFile as readFile9, realpath as realpath7, writeFile as writeFile8 } from "fs/promises";
-import { copyFileSync, mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync2 } from "fs";
+import { copyFileSync, mkdirSync as mkdirSync2, readdirSync } from "fs";
 import { basename as basename4, dirname as dirname9, isAbsolute as isAbsolute7, join as join12, relative as relative8, sep as sep8 } from "path";
 import { fileURLToPath } from "url";
 var GENERATED_START = "<!-- flavor-code:start -->";
@@ -10747,22 +10747,6 @@ async function createExampleFlavorConfig(cwd) {
   };
   await writeFile8(configPath, JSON.stringify(example, null, 2) + "\n");
 }
-var CODEISLAND_SRC_DIR = join12(dirname9(fileURLToPath(import.meta.url)), "codeisland");
-var CODEISLAND_FILES = ["flavor-plugin.json", "activate.mjs", "bridge.mjs"];
-async function copyCodeIslandPlugin(cwd) {
-  const pluginDir = join12(cwd, ".flavor", "plugins", "codeisland");
-  try {
-    await lstat4(pluginDir);
-    return;
-  } catch (error) {
-    if (!isMissingPathError(error)) throw error;
-  }
-  await mkdir9(pluginDir, { recursive: true, mode: 448 });
-  for (const name of CODEISLAND_FILES) {
-    const content = readFileSync2(join12(CODEISLAND_SRC_DIR, name), "utf8");
-    await writeFile8(join12(pluginDir, name), content);
-  }
-}
 var ASTGRAPH_SRC_DIR = join12(dirname9(fileURLToPath(import.meta.url)), "astgraph");
 async function copyAstgraphPlugin(cwd) {
   const pluginDir = join12(cwd, ".flavor", "plugins", "astgraph");
@@ -10785,7 +10769,6 @@ function copyDirectory(from, to) {
 }
 async function initializeFlavor(cwd) {
   await ensureFlavorDirectories(cwd);
-  await copyCodeIslandPlugin(cwd);
   await copyAstgraphPlugin(cwd);
   await createExampleFlavorConfig(cwd);
   const facts = await inspectProject(cwd);
@@ -13686,7 +13669,7 @@ import {
 } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
 
 // src/utils/version.ts
-import { readFileSync as readFileSync3 } from "fs";
+import { readFileSync as readFileSync2 } from "fs";
 import { dirname as dirname13, join as join20 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 var cached;
@@ -13695,7 +13678,7 @@ function packageVersion() {
   let directory = dirname13(fileURLToPath2(import.meta.url));
   for (; ; ) {
     try {
-      const manifest = JSON.parse(readFileSync3(join20(directory, "package.json"), "utf8"));
+      const manifest = JSON.parse(readFileSync2(join20(directory, "package.json"), "utf8"));
       if (typeof manifest.version === "string" && manifest.version.length > 0) {
         cached = manifest.version;
         return cached;
@@ -24309,7 +24292,10 @@ async function createProductionRuntime(options) {
     globalPluginDirs: [join31(home, ".flavor-code", "plugins")],
     projectPluginDirs: [join31(workspace, ".flavor", "plugins")],
     config,
-    sandbox: options.pluginSandbox ?? true,
+    // Existing project plugins (including astgraph and superharness) use Node.js
+    // built-ins. The Worker/vm sandbox deliberately blocks those imports, so it
+    // must stay opt-in until equivalent mediated capabilities are available.
+    sandbox: options.pluginSandbox ?? false,
     registrations: {
       command(name, handler, description) {
         if (typeof handler !== "function") throw new Error(`Plugin command "${name}" must be a function.`);