pi-code 1.0.44 → 1.0.46

package/extensions/git-checkpoint.ts

@@ -158,7 +158,10 @@ export default function gitCheckpointExtension(pi: ExtensionAPI) {
 
   function gitShadow(args: string[]): ReturnType<ExtensionAPI['exec']> {
     if (!shadowDir || !workTree) return Promise.resolve({ stdout: '', stderr: 'shadow repo not initialized', code: 1, killed: false })
-    return pi.exec('git', ['--git-dir', shadowDir, '--work-tree', workTree, ...args], { cwd: workTree })
+    // A snapshot layer must be byte-faithful: with the host's autocrlf (the
+    // Windows default) the shadow checkout would rewrite every restored file's
+    // line endings, so conversion is pinned off for every shadow operation.
+    return pi.exec('git', ['-c', 'core.autocrlf=false', '--git-dir', shadowDir, '--work-tree', workTree, ...args], { cwd: workTree })
   }
 
   async function ensureShadow(ctx: ExtensionContext): Promise<void> {

package/extensions/hooks/config.ts

@@ -218,6 +218,11 @@ function mergeHooksJson(config: HooksConfig, raw: string, source: string, source
 /** Each enabled plugin's hooks (hooks/hooks.json, or wherever the manifest points),
  * with ${CLAUDE_PLUGIN_ROOT}/${CLAUDE_PLUGIN_DATA} substituted before parsing so a
  * hook can name its bundled scripts by real path. */
+/** The substitution here lands inside raw JSON, so values must arrive escaped:
+ * an unescaped Windows root injected \U-style sequences, the parse threw, and
+ * every hook the plugin declared silently vanished. */
+const jsonEscape = (value: string): string => JSON.stringify(value).slice(1, -1)
+
 export function loadPluginHooks(config: HooksConfig, plugins: InstalledPlugin[], sources?: Map<HookMatcher, string>): void {
   for (const plugin of plugins) {
     const declared = plugin.manifest.hooks
@@ -225,12 +230,12 @@ export function loadPluginHooks(config: HooksConfig, plugins: InstalledPlugin[],
     // numeric event keys), so it falls through to the default path rather than
     // silently registering nothing.
     if (declared !== null && typeof declared === 'object' && !Array.isArray(declared)) {
-      mergeHooksJson(config, substitutePluginVars(JSON.stringify({ hooks: declared }), plugin), `${plugin.name} (plugin.json)`, sources, `plugin:${plugin.name}`)
+      mergeHooksJson(config, substitutePluginVars(JSON.stringify({ hooks: declared }), plugin, jsonEscape), `${plugin.name} (plugin.json)`, sources, `plugin:${plugin.name}`)
       continue
     }
     const file = path.resolve(plugin.root, typeof declared === 'string' ? declared : path.join('hooks', 'hooks.json'))
     try {
-      mergeHooksJson(config, substitutePluginVars(fs.readFileSync(file, 'utf-8'), plugin), file, sources, `plugin:${plugin.name}`)
+      mergeHooksJson(config, substitutePluginVars(fs.readFileSync(file, 'utf-8'), plugin, jsonEscape), file, sources, `plugin:${plugin.name}`)
     } catch {
       // a plugin without hooks contributes nothing
     }

package/extensions/internal/path-rules.ts

@@ -169,6 +169,11 @@ export function globToRegExpSource(pattern: string): string {
 
 /** A rule resolved to an absolute glob per its anchor form. */
 function resolveRule(rule: string, anchors: PathAnchors): string {
+  // A ${CLAUDE_*}-substituted rule arrives already absolute in the platform's
+  // own spelling; on Windows that starts with a drive letter (bare, or behind
+  // the / that substitutePathRule prefixes to mark absoluteness), which the
+  // POSIX anchor forms below would misread and bury under an anchor.
+  if (/^\/?[A-Za-z]:[\\/]/.test(rule)) return rule.replace(/^\//, '')
   if (rule.startsWith('//')) return rule.slice(1)
   if (rule.startsWith('~/')) return path.join(anchors.home, rule.slice(2))
   if (rule.startsWith('/')) return path.join(anchors.projectRoot, rule.slice(1))
@@ -230,14 +235,24 @@ export function matchesCompiledGlobs(relPath: string, globs: CompiledGlob[]): bo
 
 /** Whether the accessed file matches at least one rule. No rules means no match:
  * a granted-but-scoped tool with an empty scope set stays blocked, never open. */
+/** Both comparison sides in posix form. On Windows, resolve stamps the drive on
+ * the target while join-built rules stay drive-less, and backslash separators
+ * collide with glob syntax, so unnormalized rules could never match. */
+const toPosix = (target: string): string => {
+  const withSlashes = target.split(path.sep).join('/')
+  // The drive letter goes (case-insensitively) so rule and target agree even
+  // when only one side carries C:.
+  return withSlashes.replace(/^\/?[A-Za-z]:\//, '/')
+}
+
 export function matchesPathRules(filePath: string, rules: string[], anchors: PathAnchors): boolean {
-  const target = path.resolve(anchors.cwd, filePath)
+  const target = toPosix(path.resolve(anchors.cwd, filePath))
   return rules.some((rule) => {
     const trimmed = rule.trim()
     // An empty specifier (`Read()`) matches nothing, so the tool stays blocked
     // rather than falling open, mirroring `Bash()`.
     if (trimmed === '') return false
-    const resolved = resolveRule(trimmed, anchors)
+    const resolved = toPosix(resolveRule(trimmed, anchors))
     return new RegExp(`^${globToRegExpSource(resolved)}$`).test(target)
   })
 }

package/extensions/internal/plugins.ts

@@ -239,10 +239,13 @@ function resolvePlugin(home: string, cacheDir: string, marketplace: string, plug
 }
 
 /** The two plugin path variables, textually substituted into plugin-shipped
- * config (hook commands, MCP server definitions, command bodies). */
-export function substitutePluginVars(value: string, plugin: InstalledPlugin): string {
+ * config (hook commands, MCP server definitions, command bodies). A caller
+ * substituting into text that is still raw JSON must pass an escapeValue that
+ * JSON-escapes: a Windows root (C:\Users\...) inserted verbatim injects invalid
+ * escape sequences and the subsequent parse throws. */
+export function substitutePluginVars(value: string, plugin: InstalledPlugin, escapeValue: (substituted: string) => string = (substituted) => substituted): string {
   return value
-    .replaceAll('${CLAUDE_PLUGIN_ROOT}', plugin.root)
-    .replaceAll('${CLAUDE_PLUGIN_DATA}', plugin.dataDir)
-    .replace(/\$\{user_config\.(\w+)\}/g, (_, key: string) => plugin.userConfig?.[key] ?? '')
+    .replaceAll('${CLAUDE_PLUGIN_ROOT}', escapeValue(plugin.root))
+    .replaceAll('${CLAUDE_PLUGIN_DATA}', escapeValue(plugin.dataDir))
+    .replace(/\$\{user_config\.(\w+)\}/g, (_, key: string) => escapeValue(plugin.userConfig?.[key] ?? ''))
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-code",
-  "version": "1.0.44",
+  "version": "1.0.46",
   "description": "Claude Code experience for the pi coding agent: reads your .claude config (rules, commands, skills, hooks, output styles, MCP servers, agents) and adds todo, checkpoints, memory, web, and subagents",
   "keywords": [
     "pi",