pluidr 0.6.0 → 0.6.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pluidr",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Opinionated Engineering Workflow for OpenCode — Explore, Plan, Build, Debug, and Security-Audit.",
   "keywords": [
     "opencode",

package/src/cli/commands/doctor.js

@@ -3,7 +3,7 @@ import { join, dirname } from "node:path"
 import { fileURLToPath } from "node:url"
 import { execFileSync } from "node:child_process"
 import { getConfigDir, getConfigPath, getPromptsDir } from "../../core/paths.js"
-import { findRtkPath } from "../../core/squeezeInstaller.js"
+import { findSqueezePath } from "../../core/squeezeInstaller.js"
 
 const __dirname = dirname(fileURLToPath(import.meta.url))
 const EXPECTED_PROMPT_COUNT = 18
@@ -54,16 +54,16 @@ export async function runDoctor() {
   }
   checks.push({ component: "package.json + plugin dep", pass: pkgValid })
 
-  // 5. RTK binary exists
-  let rtkFound = false
-  const rtkOnPath = findRtkPath()
-  if (rtkOnPath) {
-    rtkFound = true
+  // 5. Squeeze binary exists
+  let squeezeFound = false
+  const squeezeOnPath = findSqueezePath()
+  if (squeezeOnPath) {
+    squeezeFound = true
   } else {
-    const binName = process.platform === "win32" ? "rtk.exe" : "rtk"
-    rtkFound = existsSync(join(binDir, binName))
+    const binName = process.platform === "win32" ? "squeeze.exe" : "squeeze"
+    squeezeFound = existsSync(join(binDir, binName))
   }
-  checks.push({ component: "squeeze binary", pass: rtkFound })
+  checks.push({ component: "squeeze binary tested", pass: squeezeFound })
 
   // 6. Config is valid JSON/JSONC
   let configValid = false

package/src/core/squeezeInstaller.js

@@ -1,5 +1,5 @@
 import { execFileSync } from "node:child_process"
-import { chmodSync, mkdirSync, existsSync, writeFileSync, unlinkSync, readFileSync } from "node:fs"
+import { chmodSync, mkdirSync, existsSync, writeFileSync, unlinkSync, readFileSync, renameSync } from "node:fs"
 import { extname, join, resolve, dirname } from "node:path"
 import { fileURLToPath } from "node:url"
 import { createHash } from "node:crypto"
@@ -7,7 +7,10 @@ import { getConfigDir } from "./paths.js"
 
 const __dirname = dirname(fileURLToPath(import.meta.url))
 
-const BIN_NAME = process.platform === "win32" ? "rtk.exe" : "rtk"
+// Local binary name — friendlier than the upstream "rtk" name
+const BIN_NAME = process.platform === "win32" ? "squeeze.exe" : "squeeze"
+// Name of the binary inside the downloaded archive (upstream uses "rtk")
+const RTK_BIN_NAME = process.platform === "win32" ? "rtk.exe" : "rtk"
 export const ASSETS = {
   "darwin-arm64": "rtk-aarch64-apple-darwin.tar.gz",
   "darwin-x64": "rtk-x86_64-apple-darwin.tar.gz",
@@ -28,10 +31,10 @@ export function validatePath(path) {
   }
 }
 
-export function findRtkPath() {
+export function findSqueezePath() {
   try {
     const [cmd, ...args] =
-      process.platform === "win32" ? ["where", "rtk"] : ["which", "rtk"]
+      process.platform === "win32" ? ["where", "squeeze"] : ["which", "squeeze"]
     return execFileSync(cmd, args, { stdio: "pipe" })
       .toString()
       .trim()
@@ -85,13 +88,13 @@ function verifyChecksum(buffer, assetName) {
 }
 
 export async function installSqueeze() {
-  let rtkPath = findRtkPath()
+  let rtkPath = findSqueezePath()
 
   if (!rtkPath) {
     // Not on PATH — download it to the managed location
     const asset = platformAsset()
     if (!asset) {
-      console.warn("⚠ Squeeze: unsupported platform — install rtk manually")
+      console.warn("⚠ Squeeze: unsupported platform — squeeze binary unavailable")
       return
     }
 
@@ -127,14 +130,31 @@ export async function installSqueeze() {
 
       try { unlinkSync(archivePath) } catch {}
 
+      // Archive contains "rtk"/"rtk.exe" — rename to local BIN_NAME ("squeeze")
+      const extracted = join(binDir, RTK_BIN_NAME)
       rtkPath = join(binDir, BIN_NAME)
+      if (existsSync(extracted) && extracted !== rtkPath) {
+        renameSync(extracted, rtkPath)
+      }
 
       if (process.platform !== "win32" && existsSync(rtkPath)) {
         chmodSync(rtkPath, 0o755)
       }
-    } catch {
+
+      // Verify that the downloaded binary is executable and runs on this platform
+      try {
+        execFileSync(rtkPath, ["--help"], { stdio: "ignore" })
+      } catch (err) {
+        // If it throws because of execution format or permissions (e.g. ENOEXEC, EACCES, ENOENT)
+        if (err.code === "ENOEXEC" || err.code === "EACCES" || err.code === "ENOENT") {
+          try { unlinkSync(rtkPath) } catch {}
+          throw new Error(`Downloaded binary is not executable on this platform: ${err.message}`)
+        }
+        // If it ran but exited with non-zero (like returning exit code 1 for --help), that's fine, it means it is executable!
+      }
+    } catch (err) {
       try { unlinkSync(archivePath) } catch {}
-      console.warn("⚠ Squeeze: download failed after 3 attempts — install rtk manually")
+      console.warn(`⚠ Squeeze: installation failed (${err.message}) — squeeze plugin disabled`)
       return
     }
   }

package/src/core/squeezeInstaller.test.js

@@ -1,6 +1,6 @@
 import { describe, it } from "node:test"
 import assert from "node:assert"
-import { platformAsset, validatePath, findRtkPath, ASSETS } from "./squeezeInstaller.js"
+import { platformAsset, validatePath, findSqueezePath, ASSETS } from "./squeezeInstaller.js"
 
 describe("platformAsset", () => {
   it("returns a string or null for current platform", () => {
@@ -66,11 +66,9 @@ describe("validatePath", () => {
   })
 })
 
-describe("findRtkPath", () => {
-  it("returns null when rtk is not available on PATH", () => {
-    // This test is safe because if rtk IS on PATH, we still get a
-    // string back — but the test doesn't crash either way.
-    const result = findRtkPath()
+describe("findSqueezePath", () => {
+  it("returns null when squeeze is not available on PATH", () => {
+    const result = findSqueezePath()
     // Either null (not on PATH) or a non-empty string (found)
     assert.ok(result === null || typeof result === "string")
   })

package/src/plugins/README.md

@@ -21,16 +21,16 @@ attribution, and one-line tool-invocation summaries, separated by
 ## `pluidr-squeeze.js` — command output filtering
 
 Implementation of the `PluidrSqueezePlugin`. Hooks into `tool.execute.before`
-to rewrite bash commands through the `rtk` binary. The binary filters,
-groups, truncates, and deduplicates command output — saving 60-90% of
-tokens across all agents.
+to rewrite bash commands through the local `squeeze` binary (built on the `rtk`
+engine). The binary filters, groups, truncates, and deduplicates command
+output — saving 60-90% of tokens across all agents.
 
-The plugin is a thin delegator: all rewrite logic lives in the `rtk` binary.
+The plugin is a thin delegator: all rewrite logic lives in the engine binary.
 It checks `PATH` first, then falls back to Pluidr's managed location at
-`~/.config/opencode/bin/rtk`. If the binary is not found, the plugin
+`~/.config/opencode/bin/squeeze`. If the binary is not found, the plugin
 gracefully disables itself with a warning.
 
-`pluidr init` downloads the `rtk` binary automatically during setup.
+`pluidr init` downloads the `squeeze` binary automatically during setup.
 
 ## Why `pluidr-flow` was extracted
 
@@ -61,8 +61,8 @@ agent in its pipeline, so the tool would have no caller — YAGNI.
 
 `pluidr init` copies both plugins into `~/.config/opencode/plugins/` and
 writes a `package.json` declaring `@opencode-ai/plugin: ^1.17.9` as a
-dependency. For `pluidr-squeeze`, it also downloads the `rtk` engine binary
-to `~/.config/opencode/bin/`. On OpenCode's first launch, the bundled Bun
-runtime detects the `package.json` and runs `bun install` automatically —
-no user action required. Once installed, both plugins are available to
-every agent that has the appropriate permissions.
+dependency. For `pluidr-squeeze`, it also downloads and extracts the `squeeze`
+engine binary to `~/.config/opencode/bin/`. On OpenCode's first launch, the
+bundled Bun runtime detects the `package.json` and runs `bun install`
+automatically — no user action required. Once installed, both plugins are
+available to every agent that has the appropriate permissions.

package/src/plugins/pluidr-squeeze.js

@@ -2,21 +2,42 @@ import { existsSync } from "node:fs"
 import { homedir } from "node:os"
 import { join } from "node:path"
 
-const BIN_NAME = process.platform === "win32" ? "rtk.exe" : "rtk"
+const BIN_NAME = process.platform === "win32" ? "squeeze.exe" : "squeeze"
 const SQUEEZE_BIN = join(homedir(), ".config", "opencode", "bin", BIN_NAME)
 
 function normalise(p) {
   return p.replace(/\\/g, "/")
 }
 
+// Quote a path if it contains spaces so the shell treats it as one token.
+export function shellQuote(p) {
+  return p.includes(" ") ? `"${p}"` : p
+}
+
+// Exported for testing. When binPath is the managed full path (not "squeeze"
+// on PATH), the binary may output "rtk <cmd>" or "squeeze <cmd>" depending on
+// how it resolves its own name. Replace the leading token with the actual
+// binPath (quoted if it contains spaces) so the shell can find it. When
+// squeeze is on PATH, normalise any "rtk" prefix to "squeeze".
+export function resolveRewritten(rewritten, binPath) {
+  const m = rewritten.match(/^(rtk|squeeze)(\s|$)/)
+  if (!m) return rewritten
+  if (binPath === "squeeze") {
+    // squeeze is on PATH — normalise any leading binary name to "squeeze"
+    return "squeeze" + rewritten.slice(m[1].length)
+  }
+  // managed path — replace leading binary name with (quoted) full path
+  return shellQuote(binPath) + rewritten.slice(m[1].length)
+}
+
 async function findBinary($) {
   try {
     if (process.platform === "win32") {
-      await $`where rtk`.quiet()
+      await $`where squeeze`.quiet()
     } else {
-      await $`which rtk`.quiet()
+      await $`which squeeze`.quiet()
     }
-    return "rtk"
+    return "squeeze"
   } catch {
     if (existsSync(SQUEEZE_BIN)) {
       return normalise(SQUEEZE_BIN)
@@ -28,7 +49,7 @@ async function findBinary($) {
 export const PluidrSqueezePlugin = async ({ $ }) => {
   const binPath = await findBinary($)
   if (!binPath) {
-    console.warn("[squeeze] rtk binary not found — plugin disabled")
+    console.warn("[squeeze] squeeze binary not found — plugin disabled")
     return {}
   }
 
@@ -46,7 +67,7 @@ export const PluidrSqueezePlugin = async ({ $ }) => {
         const result = await $`${binPath} rewrite ${command}`.quiet().nothrow()
         const rewritten = String(result.stdout).trim()
         if (rewritten && rewritten !== command) {
-          args.command = rewritten
+          args.command = resolveRewritten(rewritten, binPath)
         }
       } catch {
         // rewrite failed — pass through unchanged

package/src/templates/agent-prompts/composer.txt

@@ -142,17 +142,18 @@ only). That's it — you have no `read`, `glob`, `grep`, `webfetch`,
 **Guardrail Gate 1 — EXPLORE to PLAN or BUILD transition**:
 After you have gathered sufficient context and produced recommendations,
 you MUST internally assess whether the feature is simple enough to skip
-the PRD phase. This is YOUR judgment, not the user's.
+the PRD phase. 
 
-A feature is **simple** when ALL of these apply:
-- The approach is well-understood (no research unknowns)
-- Few files to change (1-3 files)
-- Low risk of regressions or side effects
-- Clear, unambiguous requirements
-- No complex dependencies or integration concerns
+**Bias heavily toward the PLAN phase.** Writing a PRD is the safest default. You must default to the PLAN (PRD) phase unless the feature is extremely simple.
 
-If ANY of these is uncertain or the feature touches multiple systems,
-it is **complex** — proceed to PLAN phase.
+A feature is **simple** ONLY when ALL of these apply:
+- It is an extremely trivial change (e.g., fixing a typo, updating a single configuration value, changing a single line of text).
+- It changes only 1 single file.
+- The approach is completely obvious and well-understood (no research unknowns).
+- Zero risk of regressions or side effects.
+- No new files or new tests are created.
+
+If the change involves writing new logic, adding new functions, creating a new file, or modifying multiple files, it is **complex** by definition — you MUST proceed to the PLAN phase. Do not offer a direct build shortcut.
 
 Based on your assessment:
 
@@ -395,6 +396,7 @@ elsewhere. Do not accept a report that is not in `docs/reports/`.
   already confirmed as PASS.
 - **Clarification** — If anything is ambiguous at any phase, ask the user
   using multiple-choice options (2-4 short choices per question).
+- **Front-End / UI Mockups** — If the user asks for a design, mockup, or anything related to the Front-End (FE), you must provide a detailed ASCII mockup of the UI structure in your output.
 
 ---
 

package/src/templates/agent-prompts/researcher.txt

@@ -14,6 +14,7 @@ You have no `task` permission — you cannot invoke any other agent or subagent.
 - **Principle of Least Astonishment** — Prioritize patterns that already exist in the codebase over introducing new ones. The most predictable solution is the one the codebase already uses.
 - **DRY** — Before researching a solution, check if a precedent already exists in the codebase. Do not research from scratch if prior art exists.
 - **Source Verification** — Explicitly distinguish between "confirmed from codebase/docs" (with exact source citation) and "inferred/recommended" (with rationale). Never blend the two.
+- **Front-End / UI Mockups** — If the research request or context involves UI components, mockups, or Front-End (FE) design elements, include a detailed ASCII mockup representing the visual layout in your output.
 
 ## Mandatory Output Schema
 

package/src/templates/opencode.config.json

@@ -6,6 +6,16 @@
       "*.env": "deny",
       "*.env.*": "deny",
       "secrets/**": "deny"
+    },
+    "edit": {
+      "*.env": "deny",
+      "*.env.*": "deny",
+      "secrets/**": "deny"
+    },
+    "write": {
+      "*.env": "deny",
+      "*.env.*": "deny",
+      "secrets/**": "deny"
     }
   },
   "agent": {
@@ -75,17 +85,8 @@
         "read": "allow",
         "glob": "allow",
         "grep": "allow",
-        "edit": {
-          "*": "deny",
-          "src/**": "allow",
-          "*.{json,md,txt}": "allow",
-          "package.json": "allow"
-        },
-        "write": {
-          "*": "deny",
-          "src/**": "allow",
-          "*.{json,md,txt}": "allow"
-        },
+        "edit": "allow",
+        "write": "allow",
         "todowrite": "allow",
         "bash": {
           "*": "deny",
@@ -99,17 +100,10 @@
           "mv *": "allow",
           "cat *": "allow",
           "ls *": "allow",
-          "pwd": "allow",
-          "echo *": "allow",
           "rg *": "allow",
           "grep *": "allow",
           "find *": "allow",
-          "which *": "allow",
-          "where *": "allow",
-          "dir *": "allow",
-          "type *": "allow",
-          "node --test": "allow",
-          "cd *": "allow"
+          "node --test": "allow"
         },
         "task": "deny"
       }
@@ -117,7 +111,7 @@
 
     "tester": {
       "mode": "subagent",
-      "description": "Runs tests on implemented code and reports results (PASS/FAIL/BLOCKED) with coverage gaps. Cannot fix code, redesign tests, or decide next steps.",
+      "description": "Runs tests on implemented code and reports results (PASS/FAIL/BLOCKED) with coverage gaps. Cannot fix code, install deps, or decide next steps.",
       "prompt": "{file:./prompts/tester.txt}",
       "permission": {
         "read": "allow",
@@ -126,7 +120,19 @@
         "edit": "deny",
         "write": "deny",
         "todowrite": "deny",
-        "bash": "allow",
+        "bash": {
+          "*": "deny",
+          "node --test": "allow",
+          "npm test": "allow",
+          "npx *": "allow",
+          "rg *": "allow",
+          "grep *": "allow",
+          "find *": "allow",
+          "cat *": "allow",
+          "ls *": "allow",
+          "git diff*": "allow",
+          "git log*": "allow"
+        },
         "task": "deny"
       }
     },
@@ -156,14 +162,23 @@
 
     "compose-reporter": {
       "mode": "subagent",
-      "description": "Text-file executor for Composer. Writes and edits .md/.txt files across the project — like coder but for documents only. No bash.",
+      "description": "Text-file executor for Composer. Writes and edits .md/.txt files under docs/ — stateless formatter for documents only. No bash.",
       "prompt": "{file:./prompts/compose-reporter.txt}",
       "permission": {
-        "read": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "edit": "allow",
-        "write": "allow",
+        "read": {
+          "*": "deny",
+          "docs/**": "allow"
+        },
+        "glob": "deny",
+        "grep": "deny",
+        "edit": {
+          "*": "deny",
+          "docs/**": "allow"
+        },
+        "write": {
+          "*": "deny",
+          "docs/**": "allow"
+        },
         "bash": "deny",
         "todowrite": "deny",
         "task": "deny"
@@ -181,7 +196,16 @@
         "grep": "allow",
         "edit": "deny",
         "write": "deny",
-        "bash": "deny",
+        "bash": {
+          "*": "deny",
+          "rg *": "allow",
+          "grep *": "allow",
+          "find *": "allow",
+          "cat *": "allow",
+          "ls *": "allow",
+          "node --version": "allow",
+          "npm --version": "allow"
+        },
         "webfetch": "allow",
         "websearch": "allow",
         "task": "deny"
@@ -193,9 +217,12 @@
       "description": "Stateless formatter for Composer. Produces PRD documents from structured input — no inference, no decisions. PRD mode only.",
       "prompt": "{file:./prompts/plan-writer.txt}",
       "permission": {
-        "read": "allow",
-        "glob": "allow",
-        "grep": "allow",
+        "read": {
+          "*": "deny",
+          "docs/plans/**": "allow"
+        },
+        "glob": "deny",
+        "grep": "deny",
         "edit": {
           "*": "deny",
           "docs/plans/**": "allow"
@@ -264,41 +291,28 @@
         "read": "allow",
         "glob": "allow",
         "grep": "allow",
-        "edit": {
-          "*": "deny",
-          "src/**": "allow",
-          "*.{json,md,txt}": "allow",
-          "package.json": "allow"
-        },
-        "write": {
-          "*": "deny",
-          "src/**": "allow",
-          "*.{json,md,txt}": "allow"
-        },
+        "edit": "allow",
+        "write": "allow",
         "todowrite": "allow",
         "bash": {
           "*": "deny",
+          "node --test": "allow",
+          "npm test": "allow",
           "npm *": "allow",
           "npx *": "allow",
           "node *": "allow",
-          "git *": "allow",
+          "git diff*": "allow",
+          "git log*": "allow",
+          "git show*": "allow",
           "mkdir *": "allow",
           "cp *": "allow",
           "rm *": "allow",
           "mv *": "allow",
           "cat *": "allow",
           "ls *": "allow",
-          "pwd": "allow",
-          "echo *": "allow",
           "rg *": "allow",
           "grep *": "allow",
-          "find *": "allow",
-          "which *": "allow",
-          "where *": "allow",
-          "dir *": "allow",
-          "type *": "allow",
-          "node --test": "allow",
-          "cd *": "allow"
+          "find *": "allow"
         },
         "task": "deny"
       }
@@ -309,9 +323,12 @@
       "description": "Stateless formatter for Debugger. Produces diagnosis + remedy reports from structured input — no inference, no decisions. Summary mode only.",
       "prompt": "{file:./prompts/debug-reporter.txt}",
       "permission": {
-        "read": "allow",
-        "glob": "allow",
-        "grep": "allow",
+        "read": {
+          "*": "deny",
+          "docs/reports/**": "allow"
+        },
+        "glob": "deny",
+        "grep": "deny",
         "edit": {
           "*": "deny",
           "docs/reports/**": "allow"
@@ -361,7 +378,22 @@
         "grep": "allow",
         "edit": "deny",
         "write": "deny",
-        "bash": "allow",
+        "bash": {
+          "*": "deny",
+          "rg *": "allow",
+          "grep *": "allow",
+          "find *": "allow",
+          "cat *": "allow",
+          "ls *": "allow",
+          "git log*": "allow",
+          "git diff*": "allow",
+          "git show*": "allow",
+          "git blame*": "allow",
+          "node --version": "allow",
+          "npm --version": "allow",
+          "which *": "allow",
+          "where *": "allow"
+        },
         "task": "deny"
       }
     },
@@ -374,18 +406,8 @@
         "read": "allow",
         "glob": "allow",
         "grep": "allow",
-        "edit": {
-          "*": "deny",
-          "src/**": "allow",
-          "*.{json,md,txt}": "allow",
-          "package.json": "allow"
-        },
-        "write": {
-          "*": "deny",
-          "src/**": "allow",
-          "*.{json,md,txt}": "allow"
-        },
-        "todowrite": "allow",
+        "edit": "allow",
+        "write": "allow",
         "bash": {
           "*": "deny",
           "npm *": "allow",
@@ -398,17 +420,10 @@
           "mv *": "allow",
           "cat *": "allow",
           "ls *": "allow",
-          "pwd": "allow",
-          "echo *": "allow",
           "rg *": "allow",
           "grep *": "allow",
           "find *": "allow",
-          "which *": "allow",
-          "where *": "allow",
-          "dir *": "allow",
-          "type *": "allow",
-          "node --test": "allow",
-          "cd *": "allow"
+          "node --test": "allow"
         },
         "task": "deny"
       }
@@ -424,7 +439,17 @@
         "grep": "allow",
         "edit": "deny",
         "write": "deny",
-        "bash": "allow",
+        "bash": {
+          "*": "deny",
+          "rg *": "allow",
+          "grep *": "allow",
+          "find *": "allow",
+          "cat *": "allow",
+          "git diff*": "allow",
+          "git log*": "allow",
+          "node --test": "allow",
+          "npm test": "allow"
+        },
         "task": "deny"
       }
     },
@@ -434,9 +459,12 @@
       "description": "Stateless formatter for Prober. Produces security audit reports under docs/reports/.",
       "prompt": "{file:./prompts/probe-reporter.txt}",
       "permission": {
-        "read": "allow",
-        "glob": "allow",
-        "grep": "allow",
+        "read": {
+          "*": "deny",
+          "docs/reports/**": "allow"
+        },
+        "glob": "deny",
+        "grep": "deny",
         "edit": {
           "*": "deny",
           "docs/reports/**": "allow"