micro-models-agent 0.48.3 → 0.49.1

package/dist/main.js

@@ -19139,6 +19139,9 @@ class ExecutionModule {
   getTracker() {
     return this.tracker;
   }
+  getActivePlan() {
+    return this.tracker?.getPlan() ?? null;
+  }
   getStore() {
     return this.store;
   }
@@ -22202,6 +22205,31 @@ function buildSystemInfo(config, baseDir, profileCompressed) {
     lines.push(`Plan rule (MANDATORY): any task creating files, installing packages, or requiring multiple actions MUST create a plan with the "plan" tool BEFORE starting. Each step = a concrete deliverable.`);
   }
   lines.push(`Runtime verification: when a bug is described in terms of runtime behavior (what happens when the app runs), reproduce it — run the app / build / browser tool — and confirm the fix against actual runtime output before calling "plan update step=N status=done". Check existing servers first with process_list/process_log: a stale dev server started BEFORE your change still runs the old pipeline and keeps failing even after the files on disk are fixed. Restart or kill it (process_kill) and verify the exact endpoint/port the user reported — a fresh server on a new port does NOT prove the user's error is gone.`);
+  const sec = config.security;
+  if (sec?.enabled) {
+    const secLines = [`SECURITY RESTRICTIONS (enforced — blocked calls return "[SECURITY BLOCKED]", do not retry them):`];
+    if (sec.bash?.enabled && sec.bash.blacklist.length > 0) {
+      const cmds = sec.bash.blacklist.slice(0, 15).join(", ");
+      secLines.push(`Forbidden bash commands: ${cmds}${sec.bash.blacklist.length > 15 ? ", …" : ""}.`);
+      if (sec.bash.whitelist.length > 0) {
+        secLines.push(`Only whitelisted bash commands are allowed: ${sec.bash.whitelist.slice(0, 15).join(", ")}.`);
+      }
+      if (sec.bash.blockDangerousFlags) {
+        secLines.push(`Pipes/redirects/chaining (| > >> ; &&) in bash are blocked — one plain command per call.`);
+      }
+    }
+    if (sec.paths?.enabled && sec.paths.denied.length > 0) {
+      const paths = sec.paths.denied.slice(0, 10).join(", ");
+      secLines.push(`Denied paths (read/write): ${paths}${sec.paths.denied.length > 10 ? ", …" : ""}.`);
+    }
+    if (sec.network?.enabled && sec.network.deniedDomains.length > 0) {
+      const domains = sec.network.deniedDomains.slice(0, 10).join(", ");
+      secLines.push(`Denied network domains: ${domains}${sec.network.deniedDomains.length > 10 ? ", …" : ""}.`);
+    }
+    if (secLines.length > 1) {
+      lines.push(...secLines);
+    }
+  }
   const hasMCP = config.mcpServers && Object.values(config.mcpServers).some((s) => s.enabled !== false);
   if (hasMCP) {
     lines.push(`MCP servers are available — use the named MCP tools (prefixed mcp__) to query external services.`);
@@ -22533,6 +22561,7 @@ async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
     sessionManager,
     skillsModule,
     pluginManager,
+    execModule,
     toolCtx,
     configDir: dir,
     baseDir,
@@ -33368,8 +33397,8 @@ class LineEditor {
 }
 
 // src/cli/repl.ts
-import { existsSync as existsSync53, readFileSync as readFileSync35, writeFileSync as writeFileSync17 } from "fs";
-import { join as join49 } from "path";
+import { existsSync as existsSync52, readFileSync as readFileSync34, writeFileSync as writeFileSync17 } from "fs";
+import { join as join48 } from "path";
 import { homedir as homedir18 } from "os";
 
 // src/cli/completer.ts
@@ -33981,31 +34010,6 @@ init_session_logger();
 init_colors();
 init_js_identifiers();
 init_i18n();
-import { existsSync as existsSync52, readFileSync as readFileSync34 } from "fs";
-import { join as join48 } from "path";
-function readActivePlan(baseDir) {
-  const p = join48(baseDir, ".mma", "plans", "active.json");
-  if (!existsSync52(p))
-    return null;
-  try {
-    const raw = readFileSync34(p, "utf-8");
-    if (!raw.trim())
-      return null;
-    const parsed = JSON.parse(raw);
-    if (!parsed || !Array.isArray(parsed.steps))
-      return null;
-    return {
-      id: parsed.id || "plan",
-      title: parsed.title || "Plan",
-      steps: parsed.steps,
-      createdAt: parsed.createdAt || new Date().toISOString(),
-      baseDir: parsed.baseDir || baseDir,
-      name: parsed.name
-    };
-  } catch {
-    return null;
-  }
-}
 function currentStepIndex(plan) {
   const idx = plan.steps.findIndex((s) => s.status !== "done" && s.status !== "skipped");
   return idx === -1 ? 0 : idx;
@@ -34114,8 +34118,7 @@ class Repl {
   noAgentsMd;
   pendingClipboardImage = null;
   exitOnClose = false;
-  activePlan = null;
-  lastPlanSig = null;
+  execModule;
   rl;
   agent;
   config;
@@ -34125,7 +34128,7 @@ class Repl {
   logger;
   slog;
   envReport;
-  constructor(agent, config, sessionManager, skillsModule, pluginManager, configDir, baseDir, noAgentsMd, logger, exitOnClose, envReport, historyPath) {
+  constructor(agent, config, sessionManager, skillsModule, pluginManager, configDir, baseDir, noAgentsMd, logger, exitOnClose, envReport, historyPath, execModule) {
     this.agent = agent;
     this.config = config;
     this.exitOnClose = exitOnClose === true;
@@ -34134,11 +34137,12 @@ class Repl {
     this.pluginManager = pluginManager;
     this.logger = logger;
     this.envReport = envReport;
+    this.execModule = execModule;
     this.slog = new SessionLogger(sessionManager, logger);
-    this.configDir = configDir || join49(homedir18(), ".mma");
+    this.configDir = configDir || join48(homedir18(), ".mma");
     this.baseDir = baseDir || process.cwd();
     this.noAgentsMd = noAgentsMd === true;
-    this.historyPath = historyPath ?? join49(homedir18(), ".mma", "repl-history");
+    this.historyPath = historyPath ?? join48(homedir18(), ".mma", "repl-history");
     this.loadHistory();
     this.rl = process.stdin.isTTY ? new LineEditor({
       input: process.stdin,
@@ -34171,9 +34175,9 @@ class Repl {
     this.setupListeners();
   }
   loadHistory() {
-    if (existsSync53(this.historyPath)) {
+    if (existsSync52(this.historyPath)) {
       try {
-        const raw = readFileSync35(this.historyPath, "utf-8");
+        const raw = readFileSync34(this.historyPath, "utf-8");
         this.history = raw.split(`
 `).filter(Boolean).slice(-this.maxHistory);
       } catch {
@@ -34375,14 +34379,13 @@ ${t("image.clipboard_empty")}`));
         spinner: this.config.ui?.spinner ?? true,
         toolStyle: this.config.ui?.toolStyle ?? "inline"
       });
-      this.refreshActivePlan(renderer);
       const result = await this.agent.run(input, (c) => renderer.text(c), (m) => renderer.meta(m), (ev) => {
         if (ev.type === "start") {
-          renderer.toolStart(ev.tool, ev.args, stepContextForTool(this.activePlan, ev.tool, ev.args), ev.icon);
+          renderer.toolStart(ev.tool, ev.args, stepContextForTool(this.execModule?.getActivePlan() ?? null, ev.tool, ev.args), ev.icon);
         } else {
           renderer.toolEnd(ev.tool, ev.duration ?? 0, ev.error, ev.ctxDelta, ev.costUsd);
           if (ev.tool === "plan" || ev.tool === "todo") {
-            this.refreshActivePlan(renderer);
+            this.renderPlan(renderer);
           }
         }
       }, (phase) => {
@@ -34407,23 +34410,11 @@ ${t("image.clipboard_empty")}`));
       this.agentRunning = false;
     }
   }
-  refreshActivePlan(renderer) {
-    const plan = readActivePlan(this.baseDir);
-    const sig = plan ? JSON.stringify(plan.steps.map((s) => `${s.id}:${s.status}`)) : "";
-    if (!plan) {
-      this.activePlan = null;
-      this.lastPlanSig = "";
-      return;
-    }
-    this.activePlan = plan;
-    if (this.lastPlanSig === null) {
-      this.lastPlanSig = sig;
+  renderPlan(renderer) {
+    const plan = this.execModule?.getActivePlan();
+    if (!plan)
       return;
-    }
-    if (sig !== this.lastPlanSig) {
-      this.lastPlanSig = sig;
-      renderer.planBlock(formatPlanChecklist(plan));
-    }
+    renderer.planBlock(formatPlanChecklist(plan));
   }
   commands = new Map;
   registerCommand(cmd) {
@@ -34556,11 +34547,11 @@ ${t("image.clipboard_empty")}`));
       row(t("repl.agents_label"), pc2.red(t("repl.disabled")));
     } else {
       const agentsMdCandidates = [
-        join49(this.baseDir, "AGENTS.md"),
-        join49(this.baseDir, ".mma", "AGENTS.md"),
-        join49(this.configDir, "AGENTS.md")
+        join48(this.baseDir, "AGENTS.md"),
+        join48(this.baseDir, ".mma", "AGENTS.md"),
+        join48(this.configDir, "AGENTS.md")
       ];
-      const foundAgents = agentsMdCandidates.filter((p) => existsSync53(p));
+      const foundAgents = agentsMdCandidates.filter((p) => existsSync52(p));
       if (foundAgents.length > 0) {
         for (const p of foundAgents) {
           row(t("repl.agents_label"), pc2.dim(p));
@@ -34571,7 +34562,7 @@ ${t("image.clipboard_empty")}`));
     }
     const meta = this.sessionManager?.getActiveMeta();
     if (meta) {
-      const sessionPath = join49(this.configDir, "sessions", meta.id);
+      const sessionPath = join48(this.configDir, "sessions", meta.id);
       row(t("repl.session_label"), `${pc2.cyan(meta.name)} ${pc2.dim(`(${meta.id.slice(0, 12)})`)}  —  ${meta.messageCount} msgs  ${pc2.dim(sessionPath)}`);
     }
     const headerWidth = Math.max(50, Math.min(96, process.stdout.columns || 96));
@@ -34670,8 +34661,8 @@ init_setup();
 init_config2();
 init_i18n();
 init_colors();
-import { existsSync as existsSync54 } from "fs";
-import { join as join51 } from "path";
+import { existsSync as existsSync53 } from "fs";
+import { join as join50 } from "path";
 import { homedir as homedir20 } from "os";
 
 // src/modules/updater/index.ts
@@ -34776,9 +34767,9 @@ init_environment();
 init_data_sanitizer();
 init_i18n();
 import { appendFileSync as appendFileSync7, mkdirSync as mkdirSync20 } from "fs";
-import { join as join50 } from "path";
+import { join as join49 } from "path";
 import { homedir as homedir19 } from "os";
-var CRASH_LOG_DIR = join50(homedir19(), ".mma", "logs");
+var CRASH_LOG_DIR = join49(homedir19(), ".mma", "logs");
 var CRASH_LOG_FILE = "crash.jsonl";
 function formatCrashEntry(type2, err) {
   const message = err instanceof Error ? err.message : String(err);
@@ -34794,7 +34785,7 @@ function formatCrashEntry(type2, err) {
 function writeCrashEntry(dir, entry) {
   try {
     mkdirSync20(dir, { recursive: true });
-    appendFileSync7(join50(dir, CRASH_LOG_FILE), JSON.stringify(entry) + `
+    appendFileSync7(join49(dir, CRASH_LOG_FILE), JSON.stringify(entry) + `
 `, "utf-8");
   } catch {}
 }
@@ -34897,15 +34888,15 @@ async function main() {
     await updater?.waitForIdle();
     process.exit(exitCode);
   } else {
-    const configPath = join51(homedir20(), ".mma", "config.json");
-    if (!existsSync54(configPath)) {
+    const configPath = join50(homedir20(), ".mma", "config.json");
+    if (!existsSync53(configPath)) {
       console.log(pc2.yellow(`
   ` + t("cli.first_run") + `
 `));
       const answers = await runSetup();
       const config2 = loadConfig({
-        configDir: join51(homedir20(), ".mma"),
-        projectConfigPath: projectDir ? join51(projectDir, ".mmrc") : join51(process.cwd(), ".mmrc")
+        configDir: join50(homedir20(), ".mma"),
+        projectConfigPath: projectDir ? join50(projectDir, ".mmrc") : join50(process.cwd(), ".mmrc")
       });
       config2.provider.type = answers.provider;
       config2.provider.baseUrl = answers.apiBase;
@@ -34953,13 +34944,14 @@ async function main() {
       sessionManager,
       skillsModule,
       pluginManager,
+      execModule,
       configDir,
       baseDir,
       logger,
       envReport
     } = await bootstrap(undefined, projectDir, noAgentsMd, exitOnComplete);
     startAutoUpdate(config);
-    const repl = new Repl(agent, config, sessionManager, skillsModule, pluginManager, configDir, baseDir, noAgentsMd, logger, true, envReport);
+    const repl = new Repl(agent, config, sessionManager, skillsModule, pluginManager, configDir, baseDir, noAgentsMd, logger, true, envReport, undefined, execModule);
     await repl.start();
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "micro-models-agent",
-  "version": "0.48.3",
+  "version": "0.49.1",
   "description": "Micro Models Agent (MMA) — LLM agent harness for small models (Qwen3.5-9B, 32K-64K context)",
   "type": "module",
   "bin": {