hoomanjs 1.22.2 → 1.23.1

package/dist/core/prompts/agents/research.md

@@ -1,32 +1,33 @@
 ## Research Agent
 
-You are a specialized research sub-agent for {{ name }}.
+You are the specialized research sub-agent for {{ name }}. You are the **only** delegated read-only helper the parent agent uses to explore and investigate before it takes action.
 
-Your job is to investigate the task, gather high-signal evidence, and return findings that help the parent agent decide what to do next.
+Your job is to explore the relevant working directory and codebase, pull in external sources when useful, and return **high-signal findings** so the parent agent knows what exists, how things fit together, and what is still uncertain.
 
 This is a strict read-only role:
 
 - Do not create, edit, move, or delete files.
 - Do not run commands that change system state.
-- Do not propose speculative conclusions as facts.
+- Do not present guesses as facts; label inference clearly.
 
 How to work:
 
-1. Understand the exact question and identify what evidence is required.
-2. Explore efficiently: start broad, then narrow to the most relevant sources.
-3. Prefer concrete evidence over assumptions.
-4. Surface contradictions, unknowns, and risks early.
-5. Stop exploring once confidence is high enough to answer the question.
+1. Parse the parent’s question and decide what evidence is needed (files, layout, docs, APIs, prior patterns, web or fetched sources).
+2. Explore efficiently: orient with layout and search, then drill into the smallest set of paths that answer the question.
+3. Prefer concrete evidence (paths, symbols, snippets, URLs, quoted facts) over narrative.
+4. Surface contradictions, risks, edge cases, and dependencies when they matter for the parent’s next move.
+5. When helpful, note sensible alternatives or trade-offs **as analysis**, not as instructions—the parent decides what to execute.
+6. Stop once the parent can act or answer without redundant digging.
 
 Quality bar:
 
 - Be precise, not verbose.
-- Include source references, relevant identifiers, and behavior-level findings when applicable.
-- Differentiate between "confirmed", "likely", and "unknown".
-- If information is missing, state what additional check would resolve it.
+- Separate **confirmed**, **likely**, and **unknown**.
+- Say what additional check would resolve each unknown.
+- Suggest how the parent could **verify** conclusions (what to read, run, or compare)—without performing mutating steps yourself.
 
 Return format:
 
-1. **Findings** - short bullets with evidence.
-2. **Open Questions / Uncertainties** - only if relevant.
-3. **Recommended Next Step for Parent Agent** - one concise action.
+1. **Findings** — short bullets with evidence (paths, identifiers, sources).
+2. **Open Questions / Uncertainties** — only if relevant.
+3. **Recommended Next Step for Parent Agent** — one concise action grounded in your findings.

package/dist/core/prompts/modes/ask.md

@@ -0,0 +1,21 @@
+## Ask mode
+
+You are in **ask** mode: a narrowed tool surface for exploration, research, and answering questions.
+
+### Role
+
+- Explain architecture, behavior, APIs, and trade-offs from what you can inspect with available tools.
+- Help the user reason through options and risks in prose.
+- Stay aligned with **read-oriented** work: prefer inspection and analysis over changing their repo or runtime.
+
+### Discipline
+
+- Do **not** imply you can use tools that are not exposed in this phase.
+- If the user needs a **written plan on disk** and the staged planning workflow, they should switch to **plan** mode (or **default** when those tools are available).
+- If they want **full implementation** or unrestricted editing commands, they should switch to **default** mode (or approve work explicitly once they have switched).
+- When **`run_agents`** is available, use it only for **read-only** parallel exploration; you remain responsible for synthesizing answers.
+
+### Output
+
+- Be direct and structured; mention what you reviewed when it helps the user trust your conclusions.
+- If the task clearly requires implementation or destructive actions, say what is needed and which mode or approval path fits — do not substitute unrestricted execution.

package/dist/core/prompts/{agents → modes}/plan.md

@@ -1,13 +1,11 @@
-## Plan Agent
+## Planning mode
 
-You are a specialized planning sub-agent for {{ name }}.
+You are in planning mode, your job is to design a practical, low-risk plan. **Executing that plan requires an explicit go-ahead from the user** after they have reviewed it—not merely leaving plan mode.
 
-Your job is to design a practical, low-risk plan that the parent agent can execute.
+This is a strict read-only role **for your direct edits**:
 
-This is a strict read-only role:
-
-- Do not create, edit, move, or delete files.
-- Do not run commands that change system state.
+- Do not create, edit, move, or delete files **yourself** other than the plan file itself (delegated **`run_agents`** jobs should stay read-only exploration).
+- Do not run commands that change system state **directly** from tools that are not exposed here.
 - Do not produce the final deliverable; focus on strategy.
 
 Planning process:
@@ -32,4 +30,4 @@ Return format:
 2. **Execution Steps** - numbered sequence, each step actionable.
 3. **Critical Areas** - what matters and why.
 4. **Risks and Mitigations** - specific, not generic.
-5. **Validation Plan** - how the parent agent should confirm correctness.
+5. **Validation Plan** - how you should confirm correctness after implementation (once approved).

package/dist/core/prompts/session-mode-appendix.d.ts

@@ -0,0 +1,5 @@
+import type { LocalAgent } from "@strands-agents/sdk";
+import type { SessionMode } from "../state/session-mode.js";
+export declare function composeSystemPromptWithSessionMode(base: string, mode: SessionMode): string;
+/** Applies the session-mode appendix to `base` and updates `agent.systemPrompt` when it changes. */
+export declare function refreshAgentSystemPromptForSessionMode(agent: LocalAgent, base: string): void;

package/dist/core/prompts/session-mode-appendix.js

@@ -0,0 +1,53 @@
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { getModeState } from "../state/session-mode.js";
+const SECTION_BREAK = "\n\n---\n\n";
+let cachedPlanAppendix = null;
+let cachedAskAppendix = null;
+function readBundledModeFile(file) {
+    const dir = join(dirname(fileURLToPath(import.meta.url)), "modes");
+    const full = join(dir, file);
+    if (!existsSync(full)) {
+        return "";
+    }
+    return readFileSync(full, "utf8").trim();
+}
+function appendixForMode(mode) {
+    switch (mode) {
+        case "plan": {
+            if (cachedPlanAppendix === null) {
+                cachedPlanAppendix = readBundledModeFile("plan.md");
+            }
+            return cachedPlanAppendix;
+        }
+        case "ask": {
+            if (cachedAskAppendix === null) {
+                cachedAskAppendix = readBundledModeFile("ask.md");
+            }
+            return cachedAskAppendix;
+        }
+        default:
+            return "";
+    }
+}
+export function composeSystemPromptWithSessionMode(base, mode) {
+    const extra = appendixForMode(mode);
+    if (!extra) {
+        return base;
+    }
+    if (!base) {
+        return extra;
+    }
+    return `${base}${SECTION_BREAK}${extra}`;
+}
+/** Applies the session-mode appendix to `base` and updates `agent.systemPrompt` when it changes. */
+export function refreshAgentSystemPromptForSessionMode(agent, base) {
+    const mode = getModeState(agent).mode;
+    const next = composeSystemPromptWithSessionMode(base, mode);
+    const cur = typeof agent.systemPrompt === "string" ? agent.systemPrompt : "";
+    if (cur !== next && typeof agent.systemPrompt === "string") {
+        agent.systemPrompt = next;
+    }
+}
+//# sourceMappingURL=session-mode-appendix.js.map

package/dist/core/prompts/session-mode-appendix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-mode-appendix.js","sourceRoot":"","sources":["../../../src/core/prompts/session-mode-appendix.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAGxD,MAAM,aAAa,GAAG,aAAa,CAAC;AAEpC,IAAI,kBAAkB,GAAkB,IAAI,CAAC;AAC7C,IAAI,iBAAiB,GAAkB,IAAI,CAAC;AAE5C,SAAS,mBAAmB,CAAC,IAA0B;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,eAAe,CAAC,IAAiB;IACxC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,IAAI,kBAAkB,KAAK,IAAI,EAAE,CAAC;gBAChC,kBAAkB,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,kBAAkB,CAAC;QAC5B,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,iBAAiB,KAAK,IAAI,EAAE,CAAC;gBAC/B,iBAAiB,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YACpD,CAAC;YACD,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QACD;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,IAAY,EACZ,IAAiB;IAEjB,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,GAAG,IAAI,GAAG,aAAa,GAAG,KAAK,EAAE,CAAC;AAC3C,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,sCAAsC,CACpD,KAAiB,EACjB,IAAY;IAEZ,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;IACtC,MAAM,IAAI,GAAG,kCAAkC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QAC3D,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;IAC5B,CAAC;AACH,CAAC"}

package/dist/core/prompts/static/planning.md

@@ -0,0 +1,34 @@
+## Planning workflow
+
+Before large or risky changes, use **plan mode** so you explore options with a reduced tool surface and write the plan to disk. After you leave plan mode, full tools return—but you implement **only after the user explicitly approves** (see below).
+
+### When to enter plan mode
+
+Call **`enter_plan_mode`** when the task is multi-step, ambiguous, or could cause harm if executed hastily (wide refactors, migrations, security-sensitive edits, or unclear requirements).
+
+### While in plan mode
+
+- You receive a **`plan_file`** path under the app plans directory. Expand it with **`read_file`**, **`write_file`**, and **`edit_file`** as needed (paths must stay within allowed locations).
+- Prefer **`think`** or **`update_todos`** to organize reasoning; avoid shell and other tools not exposed in this phase.
+- **`run_agents`** is available: use it for **read-only** parallel exploration when splitting investigations helps (same discipline as subagents—narrow prompts, synthesize results yourself). Child agents are constrained like other tooling in this phase; you remain responsible for the plan document.
+
+### Leaving plan mode
+
+When the written plan is concrete enough to **review**, call **`exit_plan_mode`**. You will see a short preview of the plan file; afterward the full tool set is available again.
+
+Do **not** call **`exit_plan_mode`** until you have entered plan mode with **`enter_plan_mode`** and drafted content in the plan file.
+
+### After exiting plan mode (user approval gate)
+
+**Leaving plan mode is not permission to implement.** It only ends the restricted planning phase so you can discuss the plan with the user.
+
+Until the user **explicitly approves** execution—clear wording such as agreeing to the plan, asking you to proceed, implement it, apply it, or “execute”—you must **not** start substantive implementation work (code changes, destructive commands, migrations, broad edits, or following numbered execution steps from the plan).
+
+After **`exit_plan_mode`**, default behavior:
+
+1. Briefly summarize what you drafted and where the plan file lives (if helpful).
+2. Ask whether they want you to proceed as written, want revisions first, or want to cancel—unless they have already given explicit approval in the same turn.
+
+If they approve only part of the plan, restrict implementation to that scope. If they ask for changes, revise the plan or re-enter plan mode as appropriate **before** executing.
+
+Only after **explicit user approval** should you implement or execute the plan using your normal tools.

package/dist/core/prompts/static/subagents.md

@@ -6,7 +6,7 @@ Use this tool when delegation makes the response better:
 
 - The task has independent parts that can run in parallel.
 - You need deeper investigation before writing a final answer.
-- You want one agent focused on research and another on planning.
+- You want focused read-only exploration of the workspace, sources, and context.
 
 Use delegation thoughtfully:
 
@@ -23,6 +23,6 @@ Do not use `run_agents` when:
 
 Output expectations:
 
-- Child agents are read-only and return findings or plans.
+- Child agents are read-only and return findings for you to interpret.
 - You are responsible for synthesizing child outputs into one coherent response.
 - If child outputs conflict, resolve the conflict explicitly and explain why.

package/dist/core/prompts/system.js

@@ -21,6 +21,7 @@ const STATIC_PROMPT_FILES = [
     "wiki.md",
     "skills.md",
     "subagents.md",
+    "planning.md",
 ];
 const HARNESS_PROMPT_FILES = [
     { key: "behaviour", file: "behaviour.md" },
@@ -62,12 +63,12 @@ export class System {
                     return this.config.tools.shell.enabled;
                 case "sleep.md":
                     return this.config.tools.sleep.enabled;
-                case "daemon.md":
-                    return this.mode === "daemon";
                 case "wiki.md":
                     return this.config.tools.wiki.enabled;
                 case "subagents.md":
                     return this.config.tools.agents.enabled;
+                case "daemon.md":
+                    return this.mode === "daemon";
                 case "thinking.md":
                 default:
                     return true;

package/dist/core/prompts/system.js.map

@@ -1 +1 @@
-{"version":3,"file":"system.js","sourceRoot":"","sources":["../../../src/core/prompts/system.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,UAAU,MAAM,YAAY,CAAC;AAEpC,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAE/D,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC;AAE/B,gEAAgE;AAChE,MAAM,mBAAmB,GAAG;IAC1B,aAAa;IACb,gBAAgB;IAChB,QAAQ;IACR,SAAS;IACT,aAAa;IACb,eAAe;IACf,UAAU;IACV,eAAe;IACf,UAAU;IACV,UAAU;IACV,QAAQ;IACR,WAAW;IACX,SAAS;IACT,WAAW;IACX,cAAc;CACN,CAAC;AAEX,MAAM,oBAAoB,GAAG;IAC3B,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE;IAC1C,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,kBAAkB,EAAE;IAClD,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE;IAC1C,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,gBAAgB,EAAE;IAC9C,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE;CACpC,CAAC;AAIX,MAAM,aAAa,GAAG,aAAa,CAAC;AACpC,MAAM,sBAAsB,GAAG,WAAW,CAAC;AAE3C;;;GAGG;AACH,MAAM,OAAO,MAAM;IACA,IAAI,CAAS;IACb,MAAM,CAAS;IACf,IAAI,CAAa;IAC1B,IAAI,GAAG,EAAE,CAAC;IAElB,YACE,IAAY,EACZ,MAAc,EACd,OAAmB,SAAS;QAE5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAEO,iBAAiB;QACvB,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YACzC,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,QAAQ;oBACX,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;gBACvC,KAAK,UAAU;oBACb,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;gBACzC,KAAK,eAAe;oBAClB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;gBACpC,KAAK,SAAS;oBACZ,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;gBACxC,KAAK,eAAe;oBAClB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;gBAC9C,KAAK,UAAU;oBACb,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;gBACzC,KAAK,UAAU;oBACb,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;gBACzC,KAAK,WAAW;oBACd,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;gBAChC,KAAK,SAAS;oBACZ,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;gBACxC,KAAK,cAAc;oBACjB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC1C,KAAK,aAAa,CAAC;gBACnB;oBACE,OAAO,IAAI,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,wBAAwB;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACpE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAEO,yBAAyB;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACrE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,oBAAoB,EAAE,CAAC;YACjD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAEO,yBAAyB;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,sBAAsB,CAAC,CAAC;QACzD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IAEO,WAAW;QACjB,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YACxC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE;YACxC,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,OAAO,GAAG,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,yBAAyB,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAE/C,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,oEAAoE;IAC5D,OAAO;QACb,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG;YACpB,WAAW,EAAE,2BAA2B,EAAE;YAC1C,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG;YAC1B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI;YAC5B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YAClC,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,MAAM;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,CAAC;CACF"}
+{"version":3,"file":"system.js","sourceRoot":"","sources":["../../../src/core/prompts/system.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,UAAU,MAAM,YAAY,CAAC;AAEpC,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAE/D,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC;AAE/B,gEAAgE;AAChE,MAAM,mBAAmB,GAAG;IAC1B,aAAa;IACb,gBAAgB;IAChB,QAAQ;IACR,SAAS;IACT,aAAa;IACb,eAAe;IACf,UAAU;IACV,eAAe;IACf,UAAU;IACV,UAAU;IACV,QAAQ;IACR,WAAW;IACX,SAAS;IACT,WAAW;IACX,cAAc;IACd,aAAa;CACL,CAAC;AAEX,MAAM,oBAAoB,GAAG;IAC3B,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE;IAC1C,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,kBAAkB,EAAE;IAClD,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE;IAC1C,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,gBAAgB,EAAE;IAC9C,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE;CACpC,CAAC;AAIX,MAAM,aAAa,GAAG,aAAa,CAAC;AACpC,MAAM,sBAAsB,GAAG,WAAW,CAAC;AAE3C;;;GAGG;AACH,MAAM,OAAO,MAAM;IACA,IAAI,CAAS;IACb,MAAM,CAAS;IACf,IAAI,CAAa;IAC1B,IAAI,GAAG,EAAE,CAAC;IAElB,YACE,IAAY,EACZ,MAAc,EACd,OAAmB,SAAS;QAE5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAEO,iBAAiB;QACvB,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YACzC,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,QAAQ;oBACX,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;gBACvC,KAAK,UAAU;oBACb,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;gBACzC,KAAK,eAAe;oBAClB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;gBACpC,KAAK,SAAS;oBACZ,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;gBACxC,KAAK,eAAe;oBAClB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;gBAC9C,KAAK,UAAU;oBACb,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;gBACzC,KAAK,UAAU;oBACb,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;gBACzC,KAAK,SAAS;oBACZ,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;gBACxC,KAAK,cAAc;oBACjB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC1C,KAAK,WAAW;oBACd,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;gBAChC,KAAK,aAAa,CAAC;gBACnB;oBACE,OAAO,IAAI,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,wBAAwB;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACpE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAEO,yBAAyB;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACrE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,oBAAoB,EAAE,CAAC;YACjD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAEO,yBAAyB;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,sBAAsB,CAAC,CAAC;QACzD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IAEO,WAAW;QACjB,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YACxC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE;YACxC,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,OAAO,GAAG,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,yBAAyB,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAE/C,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,oEAAoE;IAC5D,OAAO;QACb,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG;YACpB,WAAW,EAAE,2BAA2B,EAAE;YAC1C,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG;YAC1B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI;YAC5B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YAClC,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,MAAM;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,CAAC;CACF"}

package/dist/core/session-config.d.ts

@@ -4,9 +4,6 @@ import { Config } from "./config.js";
  * rewriting the shared on-disk config file.
  */
 export declare class SessionConfig extends Config {
-    #private;
-    get yolo(): boolean;
-    setYolo(value: boolean): void;
     persist(): void;
 }
 export declare function createSessionConfig(): SessionConfig;

package/dist/core/session-config.js

@@ -5,13 +5,6 @@ import { configJsonPath } from "./utils/paths.js";
  * rewriting the shared on-disk config file.
  */
 export class SessionConfig extends Config {
-    #yolo = false;
-    get yolo() {
-        return this.#yolo;
-    }
-    setYolo(value) {
-        this.#yolo = value;
-    }
     persist() {
         // Session config overrides are intentionally ephemeral.
     }

package/dist/core/session-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-config.js","sourceRoot":"","sources":["../../src/core/session-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD;;;GAGG;AACH,MAAM,OAAO,aAAc,SAAQ,MAAM;IACvC,KAAK,GAAG,KAAK,CAAC;IAEd,IAAW,IAAI;QACb,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEM,OAAO,CAAC,KAAc;QAC3B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAEe,OAAO;QACrB,wDAAwD;IAC1D,CAAC;CACF;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,aAAa,CAAC,cAAc,EAAE,CAAC,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"session-config.js","sourceRoot":"","sources":["../../src/core/session-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD;;;GAGG;AACH,MAAM,OAAO,aAAc,SAAQ,MAAM;IACvB,OAAO;QACrB,wDAAwD;IAC1D,CAAC;CACF;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,aAAa,CAAC,cAAc,EAAE,CAAC,CAAC;AAC7C,CAAC"}

package/dist/core/state/agent-app-state.d.ts

@@ -0,0 +1,6 @@
+import type { Agent } from "@strands-agents/sdk";
+/**
+ * Copies every entry from `from.appState` onto `to.appState` (via Strands `getAll` / `set`).
+ * Use after recreating an agent so plan mode, yolo, session allowlists, todos, etc. survive.
+ */
+export declare function copyAgentAppState(from: Agent, to: Agent): void;

package/dist/core/state/agent-app-state.js

@@ -0,0 +1,11 @@
+/**
+ * Copies every entry from `from.appState` onto `to.appState` (via Strands `getAll` / `set`).
+ * Use after recreating an agent so plan mode, yolo, session allowlists, todos, etc. survive.
+ */
+export function copyAgentAppState(from, to) {
+    const data = from.appState.getAll();
+    for (const key of Object.keys(data)) {
+        to.appState.set(key, data[key]);
+    }
+}
+//# sourceMappingURL=agent-app-state.js.map

package/dist/core/state/agent-app-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-app-state.js","sourceRoot":"","sources":["../../../src/core/state/agent-app-state.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAW,EAAE,EAAS;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAE,CAAC,CAAC;IACnC,CAAC;AACH,CAAC"}

package/dist/core/state/plan.d.ts

@@ -0,0 +1,23 @@
+export declare const PLAN_FILE_STATE_KEY = "hooman.planFile";
+export declare const PLAN_ENTER_REASON_STATE_KEY = "hooman.enterReason";
+export declare const PLAN_ENTERED_AT_STATE_KEY = "hooman.enteredAt";
+type AppStateLike = {
+    get<T = unknown>(key: string): T;
+    set(key: string, value: unknown): void;
+};
+type AgentLike = {
+    appState: AppStateLike;
+};
+export type PlanState = {
+    planFile: string | null;
+    enterReason: string | null;
+    enteredAt: string | null;
+};
+export declare function getPlanState(agent: AgentLike): PlanState;
+export declare function setPlanState(agent: AgentLike, snapshot: {
+    planFile: string;
+    enterReason?: string | undefined;
+    enteredAt: string;
+}): void;
+export declare function clearPlanState(agent: AgentLike): void;
+export {};

package/dist/core/state/plan.js

@@ -0,0 +1,34 @@
+export const PLAN_FILE_STATE_KEY = "hooman.planFile";
+export const PLAN_ENTER_REASON_STATE_KEY = "hooman.enterReason";
+export const PLAN_ENTERED_AT_STATE_KEY = "hooman.enteredAt";
+export function getPlanState(agent) {
+    const rawPlanFile = agent.appState.get(PLAN_FILE_STATE_KEY);
+    const planFile = typeof rawPlanFile === "string" && rawPlanFile.trim()
+        ? rawPlanFile.trim()
+        : null;
+    const rawEnterReason = agent.appState.get(PLAN_ENTER_REASON_STATE_KEY);
+    const enterReason = typeof rawEnterReason === "string" && rawEnterReason.trim()
+        ? rawEnterReason.trim()
+        : null;
+    const rawEnteredAt = agent.appState.get(PLAN_ENTERED_AT_STATE_KEY);
+    const enteredAt = typeof rawEnteredAt === "string" && rawEnteredAt.trim()
+        ? rawEnteredAt.trim()
+        : null;
+    return { planFile, enterReason, enteredAt };
+}
+export function setPlanState(agent, snapshot) {
+    agent.appState.set(PLAN_FILE_STATE_KEY, snapshot.planFile);
+    if (snapshot.enterReason?.trim()) {
+        agent.appState.set(PLAN_ENTER_REASON_STATE_KEY, snapshot.enterReason.trim());
+    }
+    else {
+        agent.appState.set(PLAN_ENTER_REASON_STATE_KEY, null);
+    }
+    agent.appState.set(PLAN_ENTERED_AT_STATE_KEY, snapshot.enteredAt);
+}
+export function clearPlanState(agent) {
+    agent.appState.set(PLAN_FILE_STATE_KEY, null);
+    agent.appState.set(PLAN_ENTER_REASON_STATE_KEY, null);
+    agent.appState.set(PLAN_ENTERED_AT_STATE_KEY, null);
+}
+//# sourceMappingURL=plan.js.map

package/dist/core/state/plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../../src/core/state/plan.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AACrD,MAAM,CAAC,MAAM,2BAA2B,GAAG,oBAAoB,CAAC;AAChE,MAAM,CAAC,MAAM,yBAAyB,GAAG,kBAAkB,CAAC;AAiB5D,MAAM,UAAU,YAAY,CAAC,KAAgB;IAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC5D,MAAM,QAAQ,GACZ,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,EAAE;QACnD,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE;QACpB,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACvE,MAAM,WAAW,GACf,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,EAAE;QACzD,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE;QACvB,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACnE,MAAM,SAAS,GACb,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,EAAE;QACrD,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE;QACrB,CAAC,CAAC,IAAI,CAAC;IACX,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,KAAgB,EAChB,QAIC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,mBAAmB,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3D,IAAI,QAAQ,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;QACjC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAChB,2BAA2B,EAC3B,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,CAC5B,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,yBAAyB,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAgB;IAC7C,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;IAC9C,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,CAAC,CAAC;IACtD,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC;AACtD,CAAC"}

package/dist/core/state/session-mode.d.ts

@@ -0,0 +1,23 @@
+import { z } from "zod";
+export declare const MODE_STATE_KEY = "mode";
+export declare const SessionModeSchema: z.ZodEnum<{
+    default: "default";
+    plan: "plan";
+    ask: "ask";
+}>;
+export type SessionMode = z.infer<typeof SessionModeSchema>;
+type AppStateLike = {
+    get<T = unknown>(key: string): T;
+    set(key: string, value: unknown): void;
+};
+type AgentLike = {
+    appState: AppStateLike;
+};
+export type ModeState = {
+    mode: SessionMode;
+};
+export declare function normalizeSessionMode(value: unknown): SessionMode;
+export declare function getModeState(agent: AgentLike): ModeState;
+export declare function setSessionMode(agent: AgentLike, mode: SessionMode): void;
+export declare function clearModeToDefault(agent: AgentLike): void;
+export {};

package/dist/core/state/session-mode.js

@@ -0,0 +1,21 @@
+import { z } from "zod";
+export const MODE_STATE_KEY = "mode";
+export const SessionModeSchema = z.enum(["default", "plan", "ask"]);
+export function normalizeSessionMode(value) {
+    const parsed = SessionModeSchema.safeParse(value);
+    return parsed.success ? parsed.data : "default";
+}
+function normalizeMode(value) {
+    return normalizeSessionMode(value);
+}
+export function getModeState(agent) {
+    const mode = normalizeMode(agent.appState.get(MODE_STATE_KEY));
+    return { mode };
+}
+export function setSessionMode(agent, mode) {
+    agent.appState.set(MODE_STATE_KEY, mode);
+}
+export function clearModeToDefault(agent) {
+    agent.appState.set(MODE_STATE_KEY, "default");
+}
+//# sourceMappingURL=session-mode.js.map

package/dist/core/state/session-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-mode.js","sourceRoot":"","sources":["../../../src/core/state/session-mode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AAErC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAgBpE,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAgB;IAC3C,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;IAC/D,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAgB,EAAE,IAAiB;IAChE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAgB;IACjD,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;AAChD,CAAC"}

package/dist/core/state/tool-approvals.d.ts

@@ -5,8 +5,20 @@ type AppStateLike = {
 type AgentLike = {
     appState: AppStateLike;
 };
+export declare const ENTER_PLAN_MODE_TOOL = "enter_plan_mode";
+export declare const EXIT_PLAN_MODE_TOOL = "exit_plan_mode";
 export declare const INTERNAL_ALWAYS_ALLOWED: Set<string>;
+export declare const PLAN_MODE_ALWAYS_ALLOWED: Set<string>;
+export declare const PLAN_MODE_VISIBLE: Set<string>;
+/** Same narrowed surface as plan mode but without plan lifecycle tools. */
+export declare const ASK_MODE_VISIBLE: Set<string>;
 export declare function getSessionAllowedTools(agent: AgentLike): string[];
-export declare function isToolSessionAllowed(agent: AgentLike, toolName: string): boolean;
+/**
+ * Session-wide tool allowlist ("always allow" in UI), plus implicit allow for
+ * read/write/edit when paths resolve under attachments, plans, or skills (reads)
+ * or plans only (writes/edits).
+ */
+export declare function isToolSessionAllowed(agent: AgentLike, toolName: string, toolInput?: unknown): boolean;
+export declare function isToolVisible(mode: string, toolName: string): boolean;
 export declare function allowToolForSession(agent: AgentLike, toolName: string): void;
 export {};

package/dist/core/state/tool-approvals.js

@@ -1,4 +1,14 @@
+import { RUN_AGENTS_TOOL_NAME } from "../agents/tools.js";
+import { getModeState } from "./session-mode.js";
+import { isResolvedPathInsideDir, normalizeUserPath, } from "../utils/normalize-user-path.js";
+import { attachmentsPath, plansPath, skillsPath } from "../utils/paths.js";
 const SESSION_ALLOWED_TOOLS_KEY = "allowedTools";
+const READ_FILE_TOOL = "read_file";
+const READ_MULTIPLE_FILES_TOOL = "read_multiple_files";
+const WRITE_FILE_TOOL = "write_file";
+const EDIT_FILE_TOOL = "edit_file";
+export const ENTER_PLAN_MODE_TOOL = "enter_plan_mode";
+export const EXIT_PLAN_MODE_TOOL = "exit_plan_mode";
 export const INTERNAL_ALWAYS_ALLOWED = new Set([
     // Strands / runtime
     "strands_structured_output",
@@ -7,7 +17,7 @@ export const INTERNAL_ALWAYS_ALLOWED = new Set([
     // Thinking
     "think",
     // Agent orchestration
-    "run_agents",
+    RUN_AGENTS_TOOL_NAME,
     // Sleep
     "sleep",
     // Process lifecycle
@@ -22,8 +32,6 @@ export const INTERNAL_ALWAYS_ALLOWED = new Set([
     "wiki_search",
     "wiki_stats",
     "wiki_write_file",
-    // Web search
-    "web_search",
     // Long-term memory
     "archive_memory",
     "search_memory",
@@ -34,7 +42,103 @@ export const INTERNAL_ALWAYS_ALLOWED = new Set([
     "get_file_info",
     "list_directory",
     "search_files",
+    // Planning session (mode / plan file)
+    ENTER_PLAN_MODE_TOOL,
+    EXIT_PLAN_MODE_TOOL,
+]);
+export const PLAN_MODE_ALWAYS_ALLOWED = new Set([
+    "read_file",
+    "read_multiple_files",
+    "fetch",
+    "web_search",
 ]);
+export const PLAN_MODE_VISIBLE = new Set([
+    // Internet
+    "fetch",
+    "web_search",
+    // Strands / runtime
+    "strands_structured_output",
+    // Todos
+    "update_todos",
+    // Thinking
+    "think",
+    // Agent orchestration
+    RUN_AGENTS_TOOL_NAME,
+    // Sleep
+    "sleep",
+    // Process lifecycle
+    "bye",
+    // Time
+    "convert_time",
+    "get_current_time",
+    // Wiki
+    "wiki_knowledge_graph",
+    "wiki_list_files",
+    "wiki_read_file",
+    "wiki_search",
+    "wiki_stats",
+    "wiki_write_file",
+    // Long-term memory
+    "search_memory",
+    // Filesystem (list / search / metadata)
+    "directory_tree",
+    "get_file_info",
+    "list_directory",
+    "search_files",
+    "read_file",
+    "read_multiple_files",
+    "write_file",
+    "edit_file",
+    // Planning session (mode / plan file)
+    ENTER_PLAN_MODE_TOOL,
+    EXIT_PLAN_MODE_TOOL,
+]);
+/** Same narrowed surface as plan mode but without plan lifecycle tools. */
+export const ASK_MODE_VISIBLE = new Set([...PLAN_MODE_VISIBLE].filter((name) => name !== ENTER_PLAN_MODE_TOOL && name !== EXIT_PLAN_MODE_TOOL));
+function isPlainObjectRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** Skip approval for filesystem tools when targets stay inside trusted app-home dirs. */
+function isImplicitPathAllowed(toolName, toolInput) {
+    const attachments = attachmentsPath();
+    const plans = plansPath();
+    const skills = skillsPath();
+    const readRoots = [attachments, plans, skills];
+    if (toolName === READ_FILE_TOOL) {
+        const raw = toolInput.path;
+        if (typeof raw !== "string" || !raw.trim()) {
+            return false;
+        }
+        const resolved = normalizeUserPath(raw);
+        return readRoots.some((root) => isResolvedPathInsideDir(resolved, root));
+    }
+    if (toolName === READ_MULTIPLE_FILES_TOOL) {
+        const paths = toolInput.paths;
+        if (!Array.isArray(paths) || paths.length === 0) {
+            return false;
+        }
+        for (const item of paths) {
+            if (typeof item !== "string" || !item.trim()) {
+                return false;
+            }
+            const resolved = normalizeUserPath(item);
+            const ok = readRoots.some((root) => isResolvedPathInsideDir(resolved, root));
+            if (!ok) {
+                return false;
+            }
+        }
+        return true;
+    }
+    if (toolName === WRITE_FILE_TOOL || toolName === EDIT_FILE_TOOL) {
+        const raw = toolInput.path;
+        if (typeof raw !== "string" || !raw.trim()) {
+            return false;
+        }
+        const resolved = normalizeUserPath(raw);
+        return isResolvedPathInsideDir(resolved, plans);
+    }
+    return false;
+}
 function normalizeAllowedTools(value) {
     if (!Array.isArray(value)) {
         return [];
@@ -60,8 +164,37 @@ export function getSessionAllowedTools(agent) {
     }
     return current;
 }
-export function isToolSessionAllowed(agent, toolName) {
-    return getSessionAllowedTools(agent).includes(toolName);
+/**
+ * Session-wide tool allowlist ("always allow" in UI), plus implicit allow for
+ * read/write/edit when paths resolve under attachments, plans, or skills (reads)
+ * or plans only (writes/edits).
+ */
+export function isToolSessionAllowed(agent, toolName, toolInput) {
+    const mode = getModeState(agent).mode;
+    if (getSessionAllowedTools(agent).includes(toolName)) {
+        return true;
+    }
+    if ((mode === "plan" || mode === "ask") &&
+        PLAN_MODE_ALWAYS_ALLOWED.has(toolName)) {
+        return true;
+    }
+    if (isPlainObjectRecord(toolInput) &&
+        isImplicitPathAllowed(toolName, toolInput)) {
+        return true;
+    }
+    return false;
+}
+export function isToolVisible(mode, toolName) {
+    if (mode === "default") {
+        return true;
+    }
+    if (mode === "plan") {
+        return PLAN_MODE_VISIBLE.has(toolName);
+    }
+    if (mode === "ask") {
+        return ASK_MODE_VISIBLE.has(toolName);
+    }
+    return false;
 }
 export function allowToolForSession(agent, toolName) {
     const normalized = toolName.trim();