connectonion 0.6.3__py3-none-any.whl → 0.6.4__py3-none-any.whl

connectonion/__init__.py

@@ -10,7 +10,7 @@ LLM-Note:
 ConnectOnion - A simple agent framework with behavior tracking.
 """
 
-__version__ = "0.6.3"
+__version__ = "0.6.4"
 
 # Auto-load .env files for the entire framework
 from dotenv import load_dotenv

connectonion/cli/co_ai/agent.py

@@ -12,9 +12,9 @@ from .tools import (
     load_guide,
 )
 from .skills import skill
-from .plugins import reminder_plugin
+from .plugins import system_reminder
 from connectonion import Agent, bash, after_user_input, FileWriter, MODE_AUTO, MODE_NORMAL, TodoList
-from connectonion.useful_plugins import re_act, eval
+from connectonion.useful_plugins import eval, tool_approval
 
 
 PROMPTS_DIR = Path(__file__).parent / "prompts"
@@ -71,7 +71,7 @@ def create_coding_agent(
     if project_context:
         system_prompt += f"\n\n---\n\n{project_context}"
 
-    plugins = [re_act, eval, reminder_plugin]
+    plugins = [eval, system_reminder, tool_approval]
 
     agent = Agent(
         name="oo",

connectonion/cli/co_ai/plugins/__init__.py

@@ -1,6 +1,5 @@
 """OO Agent plugins."""
 
-from .shell_approval import shell_approval
-from .reminder import reminder_plugin
+from .system_reminder import system_reminder
 
-__all__ = ['shell_approval', 'reminder_plugin']
+__all__ = ['system_reminder']

connectonion/cli/co_ai/plugins/system_reminder.py

@@ -0,0 +1,154 @@
+"""
+System Reminder Plugin - Injects contextual guidance based on intent and tool usage.
+
+Two triggers:
+1. after_user_input: Detect intent (coding, agent creation) and inject relevant reminder
+2. after_each_tool: Inject reminder based on tool usage
+
+Usage:
+    from connectonion.cli.co_ai.plugins.system_reminder import system_reminder
+
+    agent = Agent("coder", plugins=[system_reminder])
+"""
+
+from pathlib import Path
+import fnmatch
+from typing import TYPE_CHECKING
+
+from connectonion.core.events import after_each_tool, after_user_input
+from connectonion.llm_do import llm_do
+
+if TYPE_CHECKING:
+    from connectonion.core.agent import Agent
+
+# Default reminders directory
+REMINDERS_DIR = Path(__file__).parent.parent / "prompts" / "system-reminders"
+
+# Intent detection prompt
+INTENT_PROMPT = """Analyze the user's request.
+
+User request: {user_prompt}
+
+Is this about building software, creating agents, writing code, or automation?
+Respond with ONE word only: "build" or "other"
+
+One word only:"""
+
+
+def _parse_frontmatter(text):
+    """Parse YAML frontmatter from markdown."""
+    if not text.startswith('---'):
+        return {}, text
+    parts = text.split('---', 2)
+    if len(parts) < 3:
+        return {}, text
+    import yaml
+    return yaml.safe_load(parts[1]) or {}, parts[2].strip()
+
+
+def _load_reminders(reminders_dir):
+    """Load all .md reminder files from directory."""
+    reminders_dir = Path(reminders_dir)
+    if not reminders_dir.exists():
+        return {}
+    reminders = {}
+    for f in reminders_dir.glob("*.md"):
+        meta, body = _parse_frontmatter(f.read_text())
+        if meta.get('name'):
+            reminders[meta['name']] = {
+                'content': body,
+                'triggers': meta.get('triggers', []),
+                'intent': meta.get('intent'),  # New: intent-based trigger
+            }
+    return reminders
+
+
+def _matches_pattern(pattern, value):
+    """Check if value matches glob pattern(s)."""
+    if not pattern or not value:
+        return False
+    patterns = [pattern] if isinstance(pattern, str) else pattern
+    return any(fnmatch.fnmatch(value, p) for p in patterns)
+
+
+def _find_tool_reminder(reminders, tool_name, args):
+    """Find matching reminder for tool usage."""
+    for reminder in reminders.values():
+        for trigger in reminder['triggers']:
+            if trigger.get('tool') and trigger['tool'] != tool_name:
+                continue
+            if trigger.get('path_pattern'):
+                path = args.get('path') or args.get('file_path', '')
+                if not _matches_pattern(trigger['path_pattern'], path):
+                    continue
+            if trigger.get('command_pattern'):
+                cmd = args.get('command') or args.get('cmd', '')
+                if not _matches_pattern(trigger['command_pattern'], cmd):
+                    continue
+            # All conditions matched
+            content = reminder['content']
+            path = args.get('path') or args.get('file_path', '')
+            return content.replace('${file_path}', path).replace('${tool_name}', tool_name)
+    return None
+
+
+def _find_intent_reminder(reminders, intent):
+    """Find matching reminder for detected intent."""
+    for reminder in reminders.values():
+        if reminder.get('intent') == intent:
+            return reminder['content']
+    return None
+
+
+# Load reminders once at import
+_REMINDERS = _load_reminders(REMINDERS_DIR)
+
+
+@after_user_input
+def detect_intent(agent: 'Agent') -> None:
+    """Detect user intent and inject relevant system reminder."""
+    user_prompt = agent.current_session.get('user_prompt', '')
+    if not user_prompt:
+        return
+
+    # Use llm_do to detect intent
+    intent = llm_do(
+        INTENT_PROMPT.format(user_prompt=user_prompt),
+        model="co/gemini-2.5-flash",
+        temperature=0,
+    ).strip().lower()
+
+    # Store intent in session
+    agent.current_session['intent'] = intent
+
+    # Find and inject intent-based reminder
+    content = _find_intent_reminder(_REMINDERS, intent)
+    if content:
+        agent.current_session['messages'].append({
+            'role': 'user',
+            'content': f"\n\n{content}"
+        })
+
+
+@after_each_tool
+def inject_tool_reminder(agent: 'Agent') -> None:
+    """Inject matching system reminder into tool result."""
+    trace = agent.current_session.get('trace', [])
+    messages = agent.current_session.get('messages', [])
+    if not trace or not messages:
+        return
+
+    last = trace[-1]
+    if last.get('type') != 'tool_result':
+        return
+
+    content = _find_tool_reminder(_REMINDERS, last.get('name', ''), last.get('args', {}))
+    if content:
+        for msg in reversed(messages):
+            if msg.get('role') == 'tool':
+                msg['content'] = msg.get('content', '') + '\n\n' + content
+                break
+
+
+# Export plugin
+system_reminder = [detect_intent, inject_tool_reminder]

connectonion/cli/co_ai/prompts/system-reminders/agent.md

@@ -0,0 +1,23 @@
+---
+name: build
+intent: build
+---
+
+<system-reminder>
+Agent creation detected. Use ConnectOnion framework:
+
+**ConnectOnion agents are Python files (.py), NOT markdown files.**
+
+```python
+from connectonion import Agent
+
+def list_files(dir: str) -> list[str]: ...
+def get_hash(path: str) -> str: ...
+def delete(path: str) -> str: ...
+
+agent = Agent("cleaner", tools=[list_files, get_hash, delete])
+agent.input("Remove duplicate files")
+```
+
+**Give tools, not logic. Let the agent decide strategy. NEVER create standalone scripts with hardcoded logic.**
+</system-reminder>

connectonion/cli/co_ai/prompts/system-reminders/plan_mode.md

@@ -0,0 +1,13 @@
+---
+name: plan-mode
+triggers:
+  - tool: enter_plan_mode
+---
+
+<system-reminder>
+Plan mode is active. You MUST NOT make any edits or run non-readonly tools.
+
+Only allowed: glob, grep, read_file, write_plan, exit_plan_mode
+
+Write your plan to the plan file, then call exit_plan_mode when done.
+</system-reminder>

connectonion/cli/co_ai/prompts/system-reminders/security.md

@@ -0,0 +1,14 @@
+---
+name: security
+triggers:
+  - tool: read_file
+    path_pattern: ["*.env*", "*credentials*", "*secrets*", "*password*", "*token*", "*.pem", "*.key"]
+  - tool: read
+    path_pattern: ["*.env*", "*credentials*", "*secrets*", "*password*", "*token*", "*.pem", "*.key"]
+---
+
+<system-reminder>
+This file may contain sensitive information.
+- Never expose secrets in output
+- Never commit real credentials
+</system-reminder>

connectonion/cli/co_ai/prompts/system-reminders/simplicity.md

@@ -0,0 +1,14 @@
+---
+name: simplicity
+triggers:
+  - tool: edit
+  - tool: multi_edit
+  - tool: write
+---
+
+<system-reminder>
+Keep it simple:
+- Only change what's directly needed
+- Don't add error handling for scenarios that can't happen
+- Three similar lines > premature abstraction
+</system-reminder>

connectonion/cli/co_ai/tools/plan_mode.py

@@ -6,8 +6,6 @@ from rich.console import Console
 from rich.panel import Panel
 from rich.markdown import Markdown
 
-from connectonion.cli.co_ai.reminders import REMINDERS
-
 console = Console()
 
 # Plan mode state (module-level for simplicity)
@@ -101,8 +99,7 @@ def enter_plan_mode() -> str:
         border_style="green"
     ))
 
-    plan_mode_reminder = REMINDERS.get("plan_mode_active", "")
-    return f"Entered plan mode. Write your plan to {_plan_file_path}, then call exit_plan_mode() when ready for user approval.\n\n{plan_mode_reminder}"
+    return f"Entered plan mode. Write your plan to {_plan_file_path}, then call exit_plan_mode() when ready for user approval."
 
 
 def exit_plan_mode() -> str:

connectonion/cli/co_ai/tools/read.py

@@ -3,8 +3,6 @@
 from pathlib import Path
 from typing import Optional
 
-from connectonion.cli.co_ai.reminders import inject_reminder, should_show_security_reminder
-
 
 def read_file(
     path: str,
@@ -60,8 +58,4 @@ def read_file(
     if end < total_lines:
         result += f"\n\n... ({total_lines - end} more lines)"
 
-    # Inject security reminder for sensitive files
-    if should_show_security_reminder(path):
-        result = inject_reminder(result, "security")
-
     return result

connectonion/docs/concepts/plugins.md

@@ -54,9 +54,10 @@ agent = Agent("a", plugins=[re_act, logger])
 | `eval` | Task evaluation for debugging | [eval.md](../useful_plugins/eval.md) |
 | `image_result_formatter` | Format images for vision models | [image_result_formatter.md](../useful_plugins/image_result_formatter.md) |
 | `shell_approval` | Approve shell commands before execution | [shell_approval.md](../useful_plugins/shell_approval.md) |
+| `tool_approval` | Web-based approval for dangerous tools | [tool_approval.md](../useful_plugins/tool_approval.md) |
 
 ```python
-from connectonion.useful_plugins import re_act, eval, image_result_formatter, shell_approval
+from connectonion.useful_plugins import re_act, eval, image_result_formatter, shell_approval, tool_approval
 
 # Combine plugins
 agent = Agent("assistant", plugins=[re_act, image_result_formatter])

connectonion/docs/useful_plugins/tool_approval.md

@@ -0,0 +1,139 @@
+# tool_approval
+
+Web-based approval for dangerous tools via WebSocket. Requires user confirmation before executing tools that can modify files or run commands.
+
+## Quick Start
+
+```python
+from connectonion import Agent, bash
+from connectonion.useful_plugins import tool_approval
+
+agent = Agent("assistant", tools=[bash], plugins=[tool_approval])
+agent.io = my_websocket_io  # Required for web mode
+
+agent.input("Install dependencies")
+# → Client receives: {"type": "approval_needed", "tool": "bash", "arguments": {"command": "npm install"}}
+# → Client responds: {"approved": true, "scope": "session"}
+# ✓ bash approved (session)
+```
+
+## How It Works
+
+1. Before each tool executes, check if it's dangerous
+2. If dangerous, send `approval_needed` event via WebSocket
+3. Wait for client response (blocks until received)
+4. If approved: execute tool, optionally remember for session
+5. If rejected: stop batch, return feedback to LLM
+
+## Tool Classification
+
+### Safe Tools (No Approval)
+
+Read-only operations that never modify state:
+
+```
+read, read_file, glob, grep, search
+list_files, get_file_info, task, load_guide
+enter_plan_mode, exit_plan_mode, write_plan
+task_output, ask_user
+```
+
+### Dangerous Tools (Require Approval)
+
+Operations that can modify files or have side effects:
+
+```
+bash, shell, run, run_in_dir
+write, edit, multi_edit
+run_background, kill_task
+send_email, post, delete, remove
+```
+
+## Client Protocol
+
+### Receive from server
+
+```json
+{
+  "type": "approval_needed",
+  "tool": "bash",
+  "arguments": {"command": "npm install"}
+}
+```
+
+### Send response
+
+```json
+// Approve for this session (no re-prompting)
+{"approved": true, "scope": "session"}
+
+// Approve once only
+{"approved": true, "scope": "once"}
+
+// Reject with feedback
+{"approved": false, "feedback": "Use yarn instead"}
+```
+
+## Approval Scopes
+
+| Scope | Behavior |
+|-------|----------|
+| `once` | Approve this call only |
+| `session` | Approve for rest of session (stored in memory) |
+
+## Rejection Behavior
+
+When user rejects a tool:
+
+1. Raises `ValueError` with feedback message
+2. Stops the entire tool batch (remaining tools skipped)
+3. LLM receives the error and can adjust approach
+
+```python
+# Example error message
+"User rejected tool 'bash'. Feedback: Use yarn instead"
+```
+
+## Terminal Logging
+
+The plugin logs all approval decisions:
+
+```
+✓ bash approved (session)    # Approved with session scope
+✓ edit approved (once)       # Approved for single use
+⏭ bash (session-approved)    # Skipped (already approved)
+✗ bash rejected: Use yarn    # Rejected with feedback
+✗ bash - connection closed   # WebSocket closed
+```
+
+## Events
+
+| Handler | Event | Purpose |
+|---------|-------|---------|
+| `check_approval` | `before_each_tool` | Check approval and prompt client |
+
+## Session Data
+
+```python
+# Approval state stored in session
+agent.current_session['approval'] = {
+    'approved_tools': {
+        'bash': 'session',   # Approved for session
+        'write': 'session'   # Approved for session
+    }
+}
+```
+
+## Non-Web Mode
+
+When `agent.io` is None (not web mode), all tools execute without approval. This is the default behavior for CLI usage.
+
+## Unknown Tools
+
+Tools not in SAFE_TOOLS or DANGEROUS_TOOLS are treated as safe and execute without approval.
+
+## See Also
+
+- [shell_approval](shell_approval.md) - Terminal-based approval for shell commands
+- [Events](../concepts/events.md) - Available event hooks
+- [Plugins](../concepts/plugins.md) - Plugin system overview

connectonion/useful_plugins/__init__.py

@@ -18,5 +18,6 @@ from .gmail_plugin import gmail_plugin
 from .calendar_plugin import calendar_plugin
 from .ui_stream import ui_stream
 from .system_reminder import system_reminder
+from .tool_approval import tool_approval
 
-__all__ = ['re_act', 'eval', 'image_result_formatter', 'shell_approval', 'gmail_plugin', 'calendar_plugin', 'ui_stream', 'system_reminder']
+__all__ = ['re_act', 'eval', 'image_result_formatter', 'shell_approval', 'gmail_plugin', 'calendar_plugin', 'ui_stream', 'system_reminder', 'tool_approval']

connectonion/useful_plugins/tool_approval.py

@@ -0,0 +1,233 @@
+"""
+Purpose: Web-based tool approval plugin - request user approval before dangerous tools
+LLM-Note:
+  Dependencies: imports from [core/events.py] | imported by [useful_plugins/__init__.py] | tested by [tests/unit/test_tool_approval.py]
+  Data flow: before_each_tool fires → check if dangerous tool → io.send(approval_needed) → io.receive() blocks → approved: continue, rejected: raise ValueError
+  State/Effects: stores approved_tools in session for "session" scope approvals | blocks on io.receive() until client responds | logs all approval decisions via agent.logger
+  Integration: exposes tool_approval plugin list | uses agent.io for WebSocket communication | requires client to handle "approval_needed" events
+  Errors: raises ValueError on rejection (stops batch, feedback sent to LLM)
+
+Tool Approval Plugin - Request client approval before executing dangerous tools.
+
+WebSocket-only. Uses io.send/receive pattern:
+1. Sends {type: "approval_needed", tool, arguments} to client
+2. Blocks until client responds with {approved: bool, scope?, feedback?}
+3. If approved: execute tool (optionally save to session memory)
+4. If rejected: raise ValueError, stopping batch, LLM sees feedback
+
+Tool Classification:
+- SAFE_TOOLS: Read-only operations (read, glob, grep, etc.) - never need approval
+- DANGEROUS_TOOLS: Write/execute operations (bash, write, edit, etc.) - always need approval
+- Unknown tools: Treated as safe (no approval needed)
+
+Session Memory:
+- scope="once": Approve for this call only
+- scope="session": Approve for rest of session (no re-prompting)
+
+Rejection Behavior:
+- Raises ValueError with user feedback
+- Stops entire tool batch (remaining tools skipped)
+- LLM receives error message and can adjust approach
+
+Usage:
+    from connectonion import Agent
+    from connectonion.useful_plugins import tool_approval
+
+    agent = Agent("assistant", tools=[bash, write], plugins=[tool_approval])
+
+Client Protocol:
+    # Receive from server:
+    {"type": "approval_needed", "tool": "bash", "arguments": {"command": "npm install"}}
+
+    # Send response:
+    {"approved": true, "scope": "session"}  # Approve for session
+    {"approved": true, "scope": "once"}     # Approve once
+    {"approved": false, "feedback": "Use yarn instead"}  # Reject with feedback
+"""
+
+from typing import TYPE_CHECKING
+
+from ..core.events import before_each_tool
+
+if TYPE_CHECKING:
+    from ..core.agent import Agent
+
+
+# Tools that NEVER need approval (read-only, safe)
+# These tools cannot modify system state or have external side effects.
+# Add new read-only tools here to skip approval prompts.
+SAFE_TOOLS = {
+    # File reading - read contents without modification
+    'read', 'read_file',
+    # Search operations - find files/content without modification
+    'glob', 'grep', 'search',
+    # Info operations - query metadata only
+    'list_files', 'get_file_info',
+    # Agent operations - sub-agents handle their own approval
+    'task',
+    # Documentation - load reference materials
+    'load_guide',
+    # Planning - state management without side effects
+    'enter_plan_mode', 'exit_plan_mode', 'write_plan',
+    # Task management - read-only task status
+    'task_output',
+    # User interaction - prompts user, not system modification
+    'ask_user',
+}
+
+# Tools that ALWAYS need approval (destructive/side-effects)
+# These tools can modify files, execute code, or have external effects.
+# User approval required before execution in web mode.
+DANGEROUS_TOOLS = {
+    # Shell execution - arbitrary command execution
+    'bash', 'shell', 'run', 'run_in_dir',
+    # File modification - write/edit file contents
+    'write', 'edit', 'multi_edit',
+    # Background tasks - long-running command execution
+    'run_background',
+    # Task control - terminate running processes
+    'kill_task',
+    # External communication - send data outside system
+    'send_email', 'post',
+    # Deletion - remove files/resources
+    'delete', 'remove',
+}
+
+
+# Session state helpers for approval memory
+# These functions manage the session['approval'] dict which tracks
+# which tools have been approved for the current session.
+
+def _init_approval_state(session: dict) -> None:
+    """Initialize approval state in session if not present.
+
+    Creates session['approval']['approved_tools'] dict for storing
+    tool approvals with scope='session'.
+    """
+    if 'approval' not in session:
+        session['approval'] = {
+            'approved_tools': {},  # tool_name -> 'session'
+        }
+
+
+def _is_approved_for_session(session: dict, tool_name: str) -> bool:
+    """Check if tool was approved for this session.
+
+    Returns True if user previously approved this tool with scope='session'.
+    """
+    approval = session.get('approval', {})
+    return approval.get('approved_tools', {}).get(tool_name) == 'session'
+
+
+def _save_session_approval(session: dict, tool_name: str) -> None:
+    """Save tool as approved for this session.
+
+    Future calls to the same tool will skip approval prompts.
+    """
+    _init_approval_state(session)
+    session['approval']['approved_tools'][tool_name] = 'session'
+
+
+def _log(agent: 'Agent', message: str, style: str = None) -> None:
+    """Log message via agent's logger if available.
+
+    Args:
+        agent: Agent instance
+        message: Message to log
+        style: Rich style string (e.g., "[green]", "[red]")
+    """
+    if hasattr(agent, 'logger') and agent.logger:
+        agent.logger.print(message, style)
+
+
+@before_each_tool
+def check_approval(agent: 'Agent') -> None:
+    """Check if tool needs approval and request from client.
+
+    Flow:
+    1. Skip if no IO (not web mode)
+    2. Skip if safe tool
+    3. Skip if unknown tool (default: safe)
+    4. Skip if already approved for session
+    5. Send approval_needed, wait for response
+    6. If approved: optionally save to session, continue
+    7. If rejected: raise ValueError (stops batch)
+
+    Logging:
+    - Logs approval requests, approvals, and rejections
+    - Uses agent.logger.print() for terminal output
+
+    Raises:
+        ValueError: If user rejects the tool (includes feedback if provided)
+    """
+    # No IO = not web mode, skip
+    if not agent.io:
+        return
+
+    # Get pending tool info
+    pending = agent.current_session.get('pending_tool')
+    if not pending:
+        return
+
+    tool_name = pending['name']
+    tool_args = pending['arguments']
+
+    # Safe tools don't need approval
+    if tool_name in SAFE_TOOLS:
+        return
+
+    # Unknown tools (not in SAFE or DANGEROUS) are treated as safe
+    if tool_name not in DANGEROUS_TOOLS:
+        return
+
+    # Already approved for this session
+    if _is_approved_for_session(agent.current_session, tool_name):
+        _log(agent, f"[dim]⏭ {tool_name} (session-approved)[/dim]")
+        return
+
+    # Send approval request to client
+    agent.io.send({
+        'type': 'approval_needed',
+        'tool': tool_name,
+        'arguments': tool_args,
+    })
+
+    # Wait for client response (BLOCKS)
+    response = agent.io.receive()
+
+    # Handle connection closed
+    if response.get('type') == 'io_closed':
+        _log(agent, f"[red]✗ {tool_name} - connection closed[/red]")
+        raise ValueError(f"Connection closed while waiting for approval of '{tool_name}'")
+
+    # Check approval
+    approved = response.get('approved', False)
+
+    if approved:
+        # Save to session if scope is "session"
+        scope = response.get('scope', 'once')
+        if scope == 'session':
+            _save_session_approval(agent.current_session, tool_name)
+            _log(agent, f"[green]✓ {tool_name} approved (session)[/green]")
+        else:
+            _log(agent, f"[green]✓ {tool_name} approved (once)[/green]")
+        # Continue to execute tool
+        return
+
+    # Rejected - raise ValueError to stop batch
+    feedback = response.get('feedback', '')
+    if feedback:
+        _log(agent, f"[red]✗ {tool_name} rejected: {feedback}[/red]")
+    else:
+        _log(agent, f"[red]✗ {tool_name} rejected[/red]")
+
+    error_msg = f"User rejected tool '{tool_name}'."
+    if feedback:
+        error_msg += f" Feedback: {feedback}"
+    raise ValueError(error_msg)
+
+
+# Export as plugin (list of event handlers)
+# Usage: Agent("name", plugins=[tool_approval])
+# The plugin registers check_approval as a before_each_tool handler
+tool_approval = [check_approval]

{connectonion-0.6.3.dist-info → connectonion-0.6.4.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: connectonion
-Version: 0.6.3
+Version: 0.6.4
 Summary: A simple Python framework for creating AI agents with behavior tracking
 Project-URL: Homepage, https://github.com/openonion/connectonion
 Project-URL: Documentation, https://docs.connectonion.com

{connectonion-0.6.3.dist-info → connectonion-0.6.4.dist-info}/RECORD

@@ -1,4 +1,4 @@
-connectonion/__init__.py,sha256=xlQNWUE80CDHRNIVvY3apw36sMkQoCwIyZ1ay4msG_8,3416
+connectonion/__init__.py,sha256=rlIzfNx6-3ijsVefkkZHtF_3oqRHmDekaEDoJXBkoLY,3416
 connectonion/address.py,sha256=YOzpMOej-HqJUE6o0i0fG8rB7HM-Iods36s9OD--5ig,10852
 connectonion/console.py,sha256=Gl0K0c3ZHlLkbGlBVx0Wgb5Fg8LNVci9WQhSDDdGmJg,21937
 connectonion/llm_do.py,sha256=rwgSsTreNGAq5xV3m9lbA7U5AE0XOZNdihJwW5FHz0k,12005
@@ -19,10 +19,9 @@ connectonion/cli/browser_agent/prompts/form_filler.md,sha256=r4Trnln51rjKTIYGJ9S
 connectonion/cli/browser_agent/prompts/scroll_strategy.md,sha256=fbvEtMM4J9yhGXNeDdKCf4D5ZB5fA-KQrLapmul0wVU,833
 connectonion/cli/browser_agent/scripts/extract_elements.js,sha256=0YMufRSeBf6PQLxbpgVmHvlnjPVNTYqmmsuWyOZBGNc,4651
 connectonion/cli/co_ai/__init__.py,sha256=rxHdQFxV3iH9y60VhuoKu_jly02JHbdQEHAkpMZPrIM,183
-connectonion/cli/co_ai/agent.py,sha256=Oc8DJ4iFO9zZlFxsRX3Sp_EEAwlmaihw1QUP5grQWO4,2160
+connectonion/cli/co_ai/agent.py,sha256=4xVunKfK9s61TOrn0nDpFn2_j627fRi9K_EJlLtx5Rg,2174
 connectonion/cli/co_ai/context.py,sha256=B07GMFUFqAP-_76PxJigHgj7AMkbMBX0kAObysCz5tM,3778
 connectonion/cli/co_ai/main.py,sha256=k9SvRrs2nFLBOWCrqjULfxWKwpcRxwiqvDkNxWEwvtA,1480
-connectonion/cli/co_ai/reminders.py,sha256=x5C14uFQWEP6L1T15-zzS5jVLCoIDfRJGsS2lc0Oo7Q,4898
 connectonion/cli/co_ai/sessions.py,sha256=YbkTowHw2BpSIh2sGg0avnJLuwObkKeFZ0UXGkXpLlg,3526
 connectonion/cli/co_ai/agents/__init__.py,sha256=k9KdUsmsG80Us4_SnJ4m9Ibx0KNVQ_ly0JlNFjcX1gc,142
 connectonion/cli/co_ai/agents/registry.py,sha256=-hhgh6S9iufwKoxT-kO3mhN-wLYSlB_YJVxoK3I4598,1740
@@ -35,9 +34,8 @@ connectonion/cli/co_ai/commands/init.py,sha256=w_SoRNU8CwULlIvWkRwxNcItb9XnSWKw0
 connectonion/cli/co_ai/commands/sessions.py,sha256=4F-s86wgd_xbSshz2G4O7Kfgzz61fwv3JLmYjuJbonE,1667
 connectonion/cli/co_ai/commands/tasks.py,sha256=BoxyrFSAb4uKAiZRAu1u3f0UjepCD-Es3jSDQlENFA4,1767
 connectonion/cli/co_ai/commands/undo.py,sha256=WE_TA4Td0uSBaHZcyW_kxYI59nmpFcrrSSDVCRq8BJg,2736
-connectonion/cli/co_ai/plugins/__init__.py,sha256=a46RJBGocjOfrpW5oUc3_kaornkQw7IVGFDIQ3cxefE,155
-connectonion/cli/co_ai/plugins/reminder.py,sha256=xZvZw8hEjlC5SLvgzx4ztmKGs9IFaXSN9ojsE1Xxia0,2611
-connectonion/cli/co_ai/plugins/shell_approval.py,sha256=uolVMC6JCJGTcyaDq8UvQ_m-OaCCYZlagU4cckAqkW0,4097
+connectonion/cli/co_ai/plugins/__init__.py,sha256=vC3R3b8JDJ9KICFlRsOPmE3XTpnvOmuz5t-XW8icMI8,101
+connectonion/cli/co_ai/plugins/system_reminder.py,sha256=XSVmljS4_cOKzayOrBcv9JtNx03I40u4ZD8mw9Zj1SM,4889
 connectonion/cli/co_ai/prompts/assembler.py,sha256=ubhS2cT68z0PqdXdjlzIRVodX3o7iTvg0XCu0vHUDxM,9742
 connectonion/cli/co_ai/prompts/main.md,sha256=Dq5F32HLpFwrM8jKB53hWX_Ztw4qggRxRtFausnsZE8,8591
 connectonion/cli/co_ai/prompts/summarization.md,sha256=Qu5T8qWU7ZtLUSgJb_Ga1_vYt7on9_dp1MnFMCyg41c,1979
@@ -153,7 +151,10 @@ connectonion/cli/co_ai/prompts/connectonion/useful_tools/slash_command.md,sha256
 connectonion/cli/co_ai/prompts/connectonion/useful_tools/terminal.md,sha256=BdPz0cnsD8JkMLs5zhSPlKQbhV0vIXWbDfrxnkT12IM,1751
 connectonion/cli/co_ai/prompts/connectonion/useful_tools/todo_list.md,sha256=8qQrdtlNnGip1oocDYEGMItomOffFKHZ6xGXYDgN6-Y,5266
 connectonion/cli/co_ai/prompts/connectonion/useful_tools/web_fetch.md,sha256=uMnlsMHbUfh2M1Vnaf8aaMnveMTuatnpd92r2sn-uIo,2241
-connectonion/cli/co_ai/prompts/reminders/plan_mode.md,sha256=sgepJBZ_4sKlN3JeOa8VlZatjDqSDv3lNaZcgEF5k5c,1685
+connectonion/cli/co_ai/prompts/system-reminders/agent.md,sha256=4Yifx5W1kuQVZ8qA3Kwpf-bwi_F-zCaf6jjMJoT1FwA,569
+connectonion/cli/co_ai/prompts/system-reminders/plan_mode.md,sha256=Qh5P7LapxAw9NBYjRWtgBNgJ2sTepSErL85ruCQXiIA,310
+connectonion/cli/co_ai/prompts/system-reminders/security.md,sha256=WlLWakeEUR_w9ZOVg8AiHuGX4QO-BaB45AJ06tgcPbc,420
+connectonion/cli/co_ai/prompts/system-reminders/simplicity.md,sha256=kKqz_Op9A6Dh35UHHxiUdEY2En63Z-R2tNrYwLi--KY,283
 connectonion/cli/co_ai/prompts/tools/ask_user.md,sha256=H3YwaxdXy9uxxPIcTlbOp9wjl-0ZXnIRuvrTOzIKpdM,1458
 connectonion/cli/co_ai/prompts/tools/background.md,sha256=ipJFKe9NM61EvL0QoNYpzAbmRwsSrV2Q_C2puj9ZKsE,1400
 connectonion/cli/co_ai/prompts/tools/edit.md,sha256=2cxl-IID6tItdeASQxgcKtoRLVvYWNLafhfGjIFW_Rc,2500
@@ -179,8 +180,8 @@ connectonion/cli/co_ai/tools/glob.py,sha256=GrX7ozs61mkf8uG4E5Pi3w8aPP8QYrLnC5Pj
 connectonion/cli/co_ai/tools/grep.py,sha256=5VXMbFE-uY_JVAXTOevpTTzeB8oXw7XsdawM5TLqN2s,5063
 connectonion/cli/co_ai/tools/load_guide.py,sha256=tAomLc21O_UJIieRdX4L1oUTOMcZBIO4XoDyhcMe1PA,617
 connectonion/cli/co_ai/tools/multi_edit.py,sha256=BNmkWJRhuM-W4WW-c8lVFo3zbIIvoadjfeunD_nO7xY,4423
-connectonion/cli/co_ai/tools/plan_mode.py,sha256=pPi4k0ZjetFBu4SRiJvP0HDKEkxSaRGLX0ZJFa6hZMg,5053
-connectonion/cli/co_ai/tools/read.py,sha256=_iHMJS9-kS8PAEGdlE1HhG-yFzPawVf20-BAKkFYTWg,1892
+connectonion/cli/co_ai/tools/plan_mode.py,sha256=enyynOtXb7hS4xZZaNuSJAMZ22oXCrH0sItFdyBp1v8,4910
+connectonion/cli/co_ai/tools/read.py,sha256=-I-5i01m7fgmQBXlfhGUyW61SLszaVJpNarGU9Z2qrw,1650
 connectonion/cli/co_ai/tools/task.py,sha256=-65KJl4tdo0l-aeRIL-AXHKCKMBG9x6z2gAau-AfUHE,1817
 connectonion/cli/co_ai/tools/todo_list.py,sha256=t2uQICQELM_dDCJcD2A0basxbMYV9bnX_nDbqQlKahk,4983
 connectonion/cli/co_ai/tools/write.py,sha256=nSO-ASVZXy4acj40QZ3afVYHSYaFaL-OcqPdYQaQlbw,3577
@@ -277,7 +278,7 @@ connectonion/tui/providers.py,sha256=7e3PXQv6xtasSSne6PEUAz8yEG430uN9FAafioALbEo
 connectonion/tui/status_bar.py,sha256=MUJICFKp4fm2Hres2mt5dbVsw1OwssbuI-KuzwY1fZA,5479
 connectonion/useful_events_handlers/__init__.py,sha256=V2iLrD_ryP6ubIKmN3HwsU-9OI-O1y76m747u92-RWc,826
 connectonion/useful_events_handlers/reflect.py,sha256=z6BGx7JuzhG0AXc0XtJn83YG3KVxecQAwMQcSyfbRbs,4653
-connectonion/useful_plugins/__init__.py,sha256=PqQQ5NTnKnEa_1G1kh6xn7oBrDKHQZ8vVhl9p4k0mQQ,1419
+connectonion/useful_plugins/__init__.py,sha256=8uiZ1jpNzoHjePaQQEKF4KJ1u8jLiHyN1Kik-_gyft0,1477
 connectonion/useful_plugins/calendar_plugin.py,sha256=PoQoOfLcprDDBRrt1Ykzlh2RDiOofIyL7tO-hERkYV8,6004
 connectonion/useful_plugins/eval.py,sha256=6uJn2mZZiJpMQ1e-6Nw042wdYSioFrRMHA-MZZeT388,4932
 connectonion/useful_plugins/gmail_plugin.py,sha256=94H31zWOjwAuiDMdgg5tnlu-1I9yxkM0ZU42w2YdJOI,5702
@@ -285,6 +286,7 @@ connectonion/useful_plugins/image_result_formatter.py,sha256=sYcyn3L3YvC24Mnu3Mk
 connectonion/useful_plugins/re_act.py,sha256=q1l99zGtKmK6SGxLFGeaCM3v274fXfWOHwHoXLgZKVY,5828
 connectonion/useful_plugins/shell_approval.py,sha256=ytmwXpgvjX0VLABsY7XyTpKiB_68uA2MUzS9vVwLJws,6361
 connectonion/useful_plugins/system_reminder.py,sha256=eLeOyGDyNH_TBlQblRg5CJ3XLhh0jaWrGPSD0hjZ1Ag,3338
+connectonion/useful_plugins/tool_approval.py,sha256=P403MLpQBdDO7Loz3wVlXtAhVGNaj7frMB5NKOdDuyc,8334
 connectonion/useful_plugins/ui_stream.py,sha256=Jsh5URgIGBLJAmLnRne7XikRoI0x2TePt0DrhU7yYWA,2152
 connectonion/useful_prompts/README.md,sha256=jMIjzxjyu5zc1Mk8KAUvZlN9iroiznckbOn9_sLjMBo,1636
 connectonion/useful_prompts/__init__.py,sha256=ps5sON_kafzx9nt8KqLQF0QDoFSOYAhrlxFshS5zXlI,1795
@@ -375,7 +377,7 @@ connectonion/docs/concepts/events.md,sha256=AwVddkW7ZqkFWr1ie8Z5GfSUE1xzyCF3j_Y6
 connectonion/docs/concepts/llm_do.md,sha256=1Ns_k77RAAGBRvz7Z9_5c4IsEgSUYx3_EthSewV9dvI,6759
 connectonion/docs/concepts/max_iterations.md,sha256=EUEMjQi2Lvv8Ab_maONIo3hM4_0SU1W7p22E87tN1uc,10782
 connectonion/docs/concepts/models.md,sha256=rohjOX_eT2cu1jsvQxIOpVDAvX6tinqHMCfgZCGt6zY,20113
-connectonion/docs/concepts/plugins.md,sha256=NHKHV6cKrujnTFv7V6Lx_5LZXiuUuoc-ncfGve73l6s,2651
+connectonion/docs/concepts/plugins.md,sha256=13MjQF3QObY0Avn4lQg6-2ZarzBE3MN-n9Z-61Ng-zY,2784
 connectonion/docs/concepts/prompts.md,sha256=LXiyNSniGrD0PZeEkadmzR9Fc7qVR8hj01KZCIklSyU,3191
 connectonion/docs/concepts/session.md,sha256=7wPqsvm3DDNuV2yBg1LqdHe83ZCL5qR2julWc8-jCxQ,10573
 connectonion/docs/concepts/tools.md,sha256=2y8Bi31UqQHmDFf8dbhm7vYweWcPCl4ebYkicGFKJuU,14518
@@ -446,6 +448,7 @@ connectonion/docs/useful_plugins/image_result_formatter.md,sha256=FucmJjccl9MuY5
 connectonion/docs/useful_plugins/re_act.md,sha256=QWC6kB6R2foOpLZuO0Hll4FhPDdxtM82kWYenRkuMj8,2345
 connectonion/docs/useful_plugins/shell_approval.md,sha256=OA4cZZRB8ueJQrjrLvk_4W2LBI1FP16tfJBI8DGqf8U,1776
 connectonion/docs/useful_plugins/system_reminder.md,sha256=Hm-vxTD5A2fgoodufSdmkVSDZecP-na5ylFBZAXRvCI,5509
+connectonion/docs/useful_plugins/tool_approval.md,sha256=fiZbrXTH1UOXH95Yfrjc1OWJ5HNbylOiLXP-sF_6amo,3482
 connectonion/docs/useful_prompts/README.md,sha256=Wln15T2FMLCMFqXAU7g4se2lQVSQcCAV2CLrK7sJDNM,3062
 connectonion/docs/useful_prompts/coding_agent.md,sha256=1MQLjKKzRANUWE5hc5csvOgHHwLzSY_bfQRlB-w6dEE,4571
 connectonion/docs/useful_tools/README.md,sha256=v1HZRzkeXCLmNwlDIGQK6dZEXJQ2WV11U9LoLMD_5Xg,2572
@@ -463,7 +466,7 @@ connectonion/docs/useful_tools/slash_command.md,sha256=B4jTn9Bck19rVdecZCUqMSUdc
 connectonion/docs/useful_tools/terminal.md,sha256=SeAt2BNN_91dVuxIHpFbT9V_i8XPTCR4-U2UX1_05RU,2041
 connectonion/docs/useful_tools/todo_list.md,sha256=4MGHUYYamYXV_NfYi179IvmKuAdxBW14nD1g4PrLjl4,5537
 connectonion/docs/useful_tools/web_fetch.md,sha256=uri7ZjhJ8rFgy3SNolzGMlXTHGEBCIUHWlwpXKWqEDw,2516
-connectonion-0.6.3.dist-info/METADATA,sha256=ItPOfKQtRjL4szH6yrJRVYIhB-HTMJrbvTrdG5EtoBY,22190
-connectonion-0.6.3.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
-connectonion-0.6.3.dist-info/entry_points.txt,sha256=XDB-kVN7Qgy4DmYTkjQB_O6hZeUND-SqmZbdoQPn6WA,90
-connectonion-0.6.3.dist-info/RECORD,,
+connectonion-0.6.4.dist-info/METADATA,sha256=x8-IEs4md_WjbpnMM1q6sGv4AnO_0H6vPARWuGjq_To,22190
+connectonion-0.6.4.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
+connectonion-0.6.4.dist-info/entry_points.txt,sha256=XDB-kVN7Qgy4DmYTkjQB_O6hZeUND-SqmZbdoQPn6WA,90
+connectonion-0.6.4.dist-info/RECORD,,

connectonion/cli/co_ai/plugins/reminder.py

@@ -1,76 +0,0 @@
-"""
-Reminder plugin - injects contextual reminders into tool results.
-
-Like Claude Code's system reminders, these are appended to tool results
-(not separate messages) to guide agent behavior without extra API calls.
-
-Usage:
-    from connectonion.cli.co_ai.plugins.reminder import reminder_plugin
-
-    agent = Agent("coder", plugins=[reminder_plugin])
-"""
-
-from connectonion.core.events import after_each_tool
-from ..reminders import REMINDERS, should_show_security_reminder
-
-
-def _get_reminder_for_tool(tool_name: str, args: dict, result: str) -> str | None:
-    """Determine which reminder to inject based on tool and context."""
-
-    # write_file with .py extension → remind about ConnectOnion pattern
-    if tool_name == "write_file":
-        path = args.get("path", "") or args.get("file_path", "")
-        if path.endswith(".py"):
-            return "connectonion_workflow"
-
-    # read_file with sensitive path → security reminder
-    if tool_name in ("read_file", "read"):
-        path = args.get("path", "") or args.get("file_path", "")
-        if should_show_security_reminder(path):
-            return "security"
-
-    # bash/shell commands that modify code
-    if tool_name in ("bash", "shell", "run_command"):
-        cmd = args.get("command", "") or args.get("cmd", "")
-        # If creating/editing Python files
-        if any(x in cmd for x in [">.py", ">> .py", "cat >", "echo >", "sed -i"]):
-            return "connectonion_workflow"
-
-    return None
-
-
-def inject_reminder_handler(agent):
-    """Inject contextual reminders into tool results.
-
-    This handler runs after each tool execution and modifies the
-    tool result message to include relevant reminders.
-    """
-    trace = agent.current_session.get('trace', [])
-    messages = agent.current_session.get('messages', [])
-
-    if not trace or not messages:
-        return
-
-    # Get the most recent tool execution
-    last_trace = trace[-1]
-    if last_trace.get('type') != 'tool_result':
-        return
-
-    tool_name = last_trace.get('name', '')
-    tool_args = last_trace.get('args', {})
-    result = last_trace.get('result', '')
-
-    # Determine which reminder to inject
-    reminder_key = _get_reminder_for_tool(tool_name, tool_args, result)
-    if not reminder_key or reminder_key not in REMINDERS:
-        return
-
-    # Find and modify the last tool result message
-    for msg in reversed(messages):
-        if msg.get('role') == 'tool':
-            msg['content'] = msg.get('content', '') + '\n\n' + REMINDERS[reminder_key]
-            break
-
-
-# Export the plugin
-reminder_plugin = [after_each_tool(inject_reminder_handler)]

connectonion/cli/co_ai/plugins/shell_approval.py

@@ -1,105 +0,0 @@
-"""Shell Approval plugin - Asks user approval for shell commands."""
-
-import re
-from typing import TYPE_CHECKING
-from connectonion.core.events import before_each_tool
-
-if TYPE_CHECKING:
-    from connectonion.core.agent import Agent
-
-SAFE_PATTERNS = [
-    r'^ls\b', r'^ll\b', r'^cat\b', r'^head\b', r'^tail\b', r'^less\b', r'^more\b',
-    r'^grep\b', r'^rg\b', r'^find\b', r'^fd\b', r'^which\b', r'^whereis\b',
-    r'^type\b', r'^file\b', r'^stat\b', r'^wc\b', r'^pwd\b', r'^echo\b',
-    r'^printf\b', r'^date\b', r'^whoami\b', r'^id\b', r'^env\b', r'^printenv\b',
-    r'^uname\b', r'^hostname\b', r'^df\b', r'^du\b', r'^free\b', r'^ps\b',
-    r'^top\b', r'^htop\b', r'^tree\b',
-    r'^git\s+status\b', r'^git\s+log\b', r'^git\s+diff\b', r'^git\s+show\b',
-    r'^git\s+branch\b', r'^git\s+remote\b', r'^git\s+tag\b',
-    r'^npm\s+list\b', r'^npm\s+ls\b', r'^pip\s+list\b', r'^pip\s+show\b',
-    r'^python\s+--version\b', r'^node\s+--version\b', r'^cargo\s+--version\b',
-]
-
-
-def _is_safe(command: str) -> bool:
-    cmd = command.strip()
-    return any(re.search(pattern, cmd) for pattern in SAFE_PATTERNS)
-
-
-def _check_approval(agent: 'Agent') -> None:
-    pending = agent.current_session.get('pending_tool') if agent.current_session else None
-    if not pending:
-        return
-
-    tool_name = pending.get('name', '')
-    if tool_name not in ('bash', 'shell', 'run', 'run_in_dir'):
-        return
-
-    args = pending.get('arguments', {})
-    command = args.get('command', '')
-    base_cmd = command.strip().split()[0] if command.strip() else ''
-
-    approved_cmds = agent.current_session.get('shell_approved_cmds', set()) if agent.current_session else set()
-    if base_cmd in approved_cmds:
-        return
-
-    if _is_safe(command):
-        return
-
-    from connectonion.cli.co_ai.tui.context import is_tui_active, show_choice_selector_sync, show_modal_sync
-    
-    if is_tui_active():
-        from connectonion.cli.co_ai.tui.modals import TextInputModal
-        
-        truncated = command[:60] + "..." if len(command) > 60 else command
-        question = f"Execute: `{truncated}`"
-        options = [
-            "Yes, execute",
-            f"Auto approve '{base_cmd}' for this session",
-            "No, tell agent what I want",
-        ]
-        
-        choice = show_choice_selector_sync(question, options, allow_other=False)
-        
-        if choice == options[0]:
-            return
-        elif choice == options[1]:
-            if agent.current_session is not None:
-                if 'shell_approved_cmds' not in agent.current_session:
-                    agent.current_session['shell_approved_cmds'] = set()
-                agent.current_session['shell_approved_cmds'].add(base_cmd)
-            return
-        else:
-            feedback = show_modal_sync(TextInputModal("What do you want instead?"))
-            raise ValueError(f"User feedback: {feedback}")
-    else:
-        from rich.console import Console
-        from rich.panel import Panel
-        from rich.syntax import Syntax
-        from connectonion.tui import pick
-        
-        console = Console()
-        console.print()
-        syntax = Syntax(command, "bash", theme="monokai", word_wrap=True)
-        console.print(Panel(syntax, title="[yellow]Shell Command[/yellow]", border_style="yellow"))
-        
-        choice = pick("Execute this command?", [
-            "Yes, execute",
-            f"Auto approve '{base_cmd}' in this session",
-            "No, tell agent what I want"
-        ], console=console)
-        
-        if choice == "Yes, execute":
-            return
-        elif choice.startswith("Auto approve"):
-            if agent.current_session is not None:
-                if 'shell_approved_cmds' not in agent.current_session:
-                    agent.current_session['shell_approved_cmds'] = set()
-                agent.current_session['shell_approved_cmds'].add(base_cmd)
-            return
-        else:
-            feedback = input("What do you want the agent to do instead? ")
-            raise ValueError(f"User feedback: {feedback}")
-
-
-shell_approval = [before_each_tool(_check_approval)]

connectonion/cli/co_ai/prompts/reminders/plan_mode.md

@@ -1,34 +0,0 @@
-Plan mode is active. The user indicated that they do not want you to execute yet -- you MUST NOT make any edits, run any non-readonly tools, or otherwise make any changes to the system. This supersedes any other instructions you have received.
-
-## Plan File Info
-${PLAN_EXISTS ? "A plan file already exists at ${PLAN_FILE_PATH}. You can read it and make incremental edits." : "No plan file exists yet. You should create your plan at ${PLAN_FILE_PATH}."}
-
-You should build your plan incrementally by writing to or editing this file. This is the only file you are allowed to edit - other than this you are only allowed to take READ-ONLY actions.
-
-## Plan Workflow
-
-### Phase 1: Initial Understanding
-Goal: Understand the user's request by reading through code and asking questions.
-
-1. Focus on understanding the user's request and the code associated with it
-2. Use exploration tools to understand the codebase structure
-3. Ask clarifying questions to resolve ambiguities
-
-### Phase 2: Design
-Goal: Design an implementation approach based on your exploration.
-
-1. Consider different approaches and their trade-offs
-2. Identify the files that need to be modified
-3. Plan the order of changes
-
-### Phase 3: Final Plan
-Goal: Write your final plan to the plan file.
-
-- Include only your recommended approach, not all alternatives
-- Be concise enough to scan quickly, but detailed enough to execute
-- Include the paths of critical files to be modified
-
-### Phase 4: Exit Plan Mode
-Once you are happy with your final plan, call the exit_plan_mode tool to indicate you are done planning.
-
-NOTE: Feel free to ask the user questions at any point. Don't make large assumptions about user intent.

connectonion/cli/co_ai/reminders.py

@@ -1,159 +0,0 @@
-"""System reminders for contextual guidance.
-
-System reminders are automatically injected into tool results or conversation
-to provide contextual constraints and guidance. They override default behavior
-when applicable.
-
-Usage:
-    from connectonion.cli.co_ai.reminders import inject_reminder, REMINDERS
-
-    # Inject a specific reminder
-    result = inject_reminder(tool_result, "plan_mode_active")
-
-    # Check if reminder should be shown
-    if should_show_todo_reminder(agent):
-        result = inject_reminder(result, "todo_reminder")
-"""
-
-from typing import Optional, Dict, Any
-from functools import wraps
-
-
-# System reminder templates
-REMINDERS: Dict[str, str] = {
-    # Plan mode reminder - injected when plan mode is active
-    "plan_mode_active": """<system-reminder>
-Plan mode is active. You are in READ-ONLY exploration mode.
-- You can ONLY use: glob, grep, read_file to explore
-- You can ONLY write to the plan file (.co/PLAN.md)
-- Do NOT make any code changes until plan is approved
-- Use write_plan() to update your plan
-- Use exit_plan_mode() when plan is complete
-</system-reminder>""",
-
-    # Todo reminder - gentle nudge to use todo tracking
-    "todo_reminder": """<system-reminder>
-Consider using todo_list() to track progress for multi-step tasks.
-Mark tasks complete immediately when finished.
-</system-reminder>""",
-
-    # Read-only mode for explore agent
-    "read_only": """<system-reminder>
-This is READ-ONLY mode. You are PROHIBITED from modifying any files.
-Only use: glob, grep, read_file, and read-only bash commands.
-</system-reminder>""",
-
-    # Security reminder after reading sensitive files
-    "security": """<system-reminder>
-This file may contain sensitive information (credentials, keys, tokens).
-- Never expose secrets in output
-- Never commit this file if it contains real credentials
-- Consider using environment variables instead
-</system-reminder>""",
-
-    # Anti-over-engineering reminder
-    "simplicity": """<system-reminder>
-Keep it simple:
-- Only change what's directly needed
-- Don't add error handling for scenarios that can't happen
-- Three similar lines > premature abstraction
-- If unused, delete completely
-</system-reminder>""",
-
-    # Workflow reminder - injected when writing Python files
-    "connectonion_workflow": """<system-reminder>
-When creating agents, ALWAYS use ConnectOnion framework:
-- `from connectonion import Agent`
-- Atomic tool functions (one thing each)
-- `agent = Agent("name", tools=[...])` + `agent.input("task")`
-
-NEVER create standalone scripts with argparse. NEVER skip ask_user confirmation.
-</system-reminder>""",
-
-    # After code write reminder
-    "after_write_code": """<system-reminder>
-Code written. If this is an agent:
-- Verify it uses `from connectonion import Agent`
-- Verify tools are atomic functions
-- If it's a standalone script with argparse, REWRITE using ConnectOnion
-</system-reminder>""",
-}
-
-
-def inject_reminder(content: str, reminder_key: str) -> str:
-    """
-    Inject a system reminder into content.
-
-    Args:
-        content: The original content (tool result, message, etc.)
-        reminder_key: Key from REMINDERS dict
-
-    Returns:
-        Content with reminder injected at the end
-    """
-    if reminder_key not in REMINDERS:
-        return content
-
-    reminder = REMINDERS[reminder_key]
-    return f"{content}\n\n{reminder}"
-
-
-def with_reminder(reminder_key: str):
-    """
-    Decorator to inject a reminder into tool results.
-
-    Usage:
-        @with_reminder("plan_mode_active")
-        def some_tool(...):
-            return result
-    """
-    def decorator(func):
-        @wraps(func)
-        def wrapper(*args, **kwargs):
-            result = func(*args, **kwargs)
-            if isinstance(result, str):
-                return inject_reminder(result, reminder_key)
-            return result
-        return wrapper
-    return decorator
-
-
-def should_show_security_reminder(file_path: str) -> bool:
-    """Check if file path suggests sensitive content."""
-    sensitive_patterns = [
-        ".env",
-        "credentials",
-        "secrets",
-        "config/prod",
-        "keys",
-        "password",
-        "token",
-        ".pem",
-        ".key",
-    ]
-    path_lower = file_path.lower()
-    return any(pattern in path_lower for pattern in sensitive_patterns)
-
-
-def get_contextual_reminders(context: Dict[str, Any]) -> list:
-    """
-    Get list of reminders based on current context.
-
-    Args:
-        context: Dict with current state info:
-            - plan_mode: bool
-            - todo_count: int
-            - file_path: str (for security check)
-
-    Returns:
-        List of reminder keys that should be shown
-    """
-    reminders = []
-
-    if context.get("plan_mode"):
-        reminders.append("plan_mode_active")
-
-    if context.get("file_path") and should_show_security_reminder(context["file_path"]):
-        reminders.append("security")
-
-    return reminders