connectonion 0.6.3__tar.gz → 0.6.4__tar.gz

{connectonion-0.6.3 → connectonion-0.6.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: connectonion
-Version: 0.6.3
+Version: 0.6.4
 Summary: A simple Python framework for creating AI agents with behavior tracking
 Project-URL: Homepage, https://github.com/openonion/connectonion
 Project-URL: Documentation, https://docs.connectonion.com

{connectonion-0.6.3 → connectonion-0.6.4}/connectonion/__init__.py

@@ -10,7 +10,7 @@ LLM-Note:
 ConnectOnion - A simple agent framework with behavior tracking.
 """
 
-__version__ = "0.6.3"
+__version__ = "0.6.4"
 
 # Auto-load .env files for the entire framework
 from dotenv import load_dotenv

{connectonion-0.6.3 → connectonion-0.6.4}/connectonion/cli/co_ai/agent.py

@@ -12,9 +12,9 @@ from .tools import (
     load_guide,
 )
 from .skills import skill
-from .plugins import reminder_plugin
+from .plugins import system_reminder
 from connectonion import Agent, bash, after_user_input, FileWriter, MODE_AUTO, MODE_NORMAL, TodoList
-from connectonion.useful_plugins import re_act, eval
+from connectonion.useful_plugins import eval, tool_approval
 
 
 PROMPTS_DIR = Path(__file__).parent / "prompts"
@@ -71,7 +71,7 @@ def create_coding_agent(
     if project_context:
         system_prompt += f"\n\n---\n\n{project_context}"
 
-    plugins = [re_act, eval, reminder_plugin]
+    plugins = [eval, system_reminder, tool_approval]
 
     agent = Agent(
         name="oo",

connectonion-0.6.4/connectonion/cli/co_ai/plugins/__init__.py

@@ -0,0 +1,5 @@
+"""OO Agent plugins."""
+
+from .system_reminder import system_reminder
+
+__all__ = ['system_reminder']

connectonion-0.6.4/connectonion/cli/co_ai/plugins/system_reminder.py

@@ -0,0 +1,154 @@
+"""
+System Reminder Plugin - Injects contextual guidance based on intent and tool usage.
+
+Two triggers:
+1. after_user_input: Detect intent (coding, agent creation) and inject relevant reminder
+2. after_each_tool: Inject reminder based on tool usage
+
+Usage:
+    from connectonion.cli.co_ai.plugins.system_reminder import system_reminder
+
+    agent = Agent("coder", plugins=[system_reminder])
+"""
+
+from pathlib import Path
+import fnmatch
+from typing import TYPE_CHECKING
+
+from connectonion.core.events import after_each_tool, after_user_input
+from connectonion.llm_do import llm_do
+
+if TYPE_CHECKING:
+    from connectonion.core.agent import Agent
+
+# Default reminders directory
+REMINDERS_DIR = Path(__file__).parent.parent / "prompts" / "system-reminders"
+
+# Intent detection prompt
+INTENT_PROMPT = """Analyze the user's request.
+
+User request: {user_prompt}
+
+Is this about building software, creating agents, writing code, or automation?
+Respond with ONE word only: "build" or "other"
+
+One word only:"""
+
+
+def _parse_frontmatter(text):
+    """Parse YAML frontmatter from markdown."""
+    if not text.startswith('---'):
+        return {}, text
+    parts = text.split('---', 2)
+    if len(parts) < 3:
+        return {}, text
+    import yaml
+    return yaml.safe_load(parts[1]) or {}, parts[2].strip()
+
+
+def _load_reminders(reminders_dir):
+    """Load all .md reminder files from directory."""
+    reminders_dir = Path(reminders_dir)
+    if not reminders_dir.exists():
+        return {}
+    reminders = {}
+    for f in reminders_dir.glob("*.md"):
+        meta, body = _parse_frontmatter(f.read_text())
+        if meta.get('name'):
+            reminders[meta['name']] = {
+                'content': body,
+                'triggers': meta.get('triggers', []),
+                'intent': meta.get('intent'),  # New: intent-based trigger
+            }
+    return reminders
+
+
+def _matches_pattern(pattern, value):
+    """Check if value matches glob pattern(s)."""
+    if not pattern or not value:
+        return False
+    patterns = [pattern] if isinstance(pattern, str) else pattern
+    return any(fnmatch.fnmatch(value, p) for p in patterns)
+
+
+def _find_tool_reminder(reminders, tool_name, args):
+    """Find matching reminder for tool usage."""
+    for reminder in reminders.values():
+        for trigger in reminder['triggers']:
+            if trigger.get('tool') and trigger['tool'] != tool_name:
+                continue
+            if trigger.get('path_pattern'):
+                path = args.get('path') or args.get('file_path', '')
+                if not _matches_pattern(trigger['path_pattern'], path):
+                    continue
+            if trigger.get('command_pattern'):
+                cmd = args.get('command') or args.get('cmd', '')
+                if not _matches_pattern(trigger['command_pattern'], cmd):
+                    continue
+            # All conditions matched
+            content = reminder['content']
+            path = args.get('path') or args.get('file_path', '')
+            return content.replace('${file_path}', path).replace('${tool_name}', tool_name)
+    return None
+
+
+def _find_intent_reminder(reminders, intent):
+    """Find matching reminder for detected intent."""
+    for reminder in reminders.values():
+        if reminder.get('intent') == intent:
+            return reminder['content']
+    return None
+
+
+# Load reminders once at import
+_REMINDERS = _load_reminders(REMINDERS_DIR)
+
+
+@after_user_input
+def detect_intent(agent: 'Agent') -> None:
+    """Detect user intent and inject relevant system reminder."""
+    user_prompt = agent.current_session.get('user_prompt', '')
+    if not user_prompt:
+        return
+
+    # Use llm_do to detect intent
+    intent = llm_do(
+        INTENT_PROMPT.format(user_prompt=user_prompt),
+        model="co/gemini-2.5-flash",
+        temperature=0,
+    ).strip().lower()
+
+    # Store intent in session
+    agent.current_session['intent'] = intent
+
+    # Find and inject intent-based reminder
+    content = _find_intent_reminder(_REMINDERS, intent)
+    if content:
+        agent.current_session['messages'].append({
+            'role': 'user',
+            'content': f"\n\n{content}"
+        })
+
+
+@after_each_tool
+def inject_tool_reminder(agent: 'Agent') -> None:
+    """Inject matching system reminder into tool result."""
+    trace = agent.current_session.get('trace', [])
+    messages = agent.current_session.get('messages', [])
+    if not trace or not messages:
+        return
+
+    last = trace[-1]
+    if last.get('type') != 'tool_result':
+        return
+
+    content = _find_tool_reminder(_REMINDERS, last.get('name', ''), last.get('args', {}))
+    if content:
+        for msg in reversed(messages):
+            if msg.get('role') == 'tool':
+                msg['content'] = msg.get('content', '') + '\n\n' + content
+                break
+
+
+# Export plugin
+system_reminder = [detect_intent, inject_tool_reminder]

connectonion-0.6.4/connectonion/cli/co_ai/prompts/system-reminders/agent.md

@@ -0,0 +1,23 @@
+---
+name: build
+intent: build
+---
+
+<system-reminder>
+Agent creation detected. Use ConnectOnion framework:
+
+**ConnectOnion agents are Python files (.py), NOT markdown files.**
+
+```python
+from connectonion import Agent
+
+def list_files(dir: str) -> list[str]: ...
+def get_hash(path: str) -> str: ...
+def delete(path: str) -> str: ...
+
+agent = Agent("cleaner", tools=[list_files, get_hash, delete])
+agent.input("Remove duplicate files")
+```
+
+**Give tools, not logic. Let the agent decide strategy. NEVER create standalone scripts with hardcoded logic.**
+</system-reminder>

connectonion-0.6.4/connectonion/cli/co_ai/prompts/system-reminders/plan_mode.md

@@ -0,0 +1,13 @@
+---
+name: plan-mode
+triggers:
+  - tool: enter_plan_mode
+---
+
+<system-reminder>
+Plan mode is active. You MUST NOT make any edits or run non-readonly tools.
+
+Only allowed: glob, grep, read_file, write_plan, exit_plan_mode
+
+Write your plan to the plan file, then call exit_plan_mode when done.
+</system-reminder>

connectonion-0.6.4/connectonion/cli/co_ai/prompts/system-reminders/security.md

@@ -0,0 +1,14 @@
+---
+name: security
+triggers:
+  - tool: read_file
+    path_pattern: ["*.env*", "*credentials*", "*secrets*", "*password*", "*token*", "*.pem", "*.key"]
+  - tool: read
+    path_pattern: ["*.env*", "*credentials*", "*secrets*", "*password*", "*token*", "*.pem", "*.key"]
+---
+
+<system-reminder>
+This file may contain sensitive information.
+- Never expose secrets in output
+- Never commit real credentials
+</system-reminder>

connectonion-0.6.4/connectonion/cli/co_ai/prompts/system-reminders/simplicity.md

@@ -0,0 +1,14 @@
+---
+name: simplicity
+triggers:
+  - tool: edit
+  - tool: multi_edit
+  - tool: write
+---
+
+<system-reminder>
+Keep it simple:
+- Only change what's directly needed
+- Don't add error handling for scenarios that can't happen
+- Three similar lines > premature abstraction
+</system-reminder>

{connectonion-0.6.3 → connectonion-0.6.4}/connectonion/cli/co_ai/tools/plan_mode.py

@@ -6,8 +6,6 @@ from rich.console import Console
 from rich.panel import Panel
 from rich.markdown import Markdown
 
-from connectonion.cli.co_ai.reminders import REMINDERS
-
 console = Console()
 
 # Plan mode state (module-level for simplicity)
@@ -101,8 +99,7 @@ def enter_plan_mode() -> str:
         border_style="green"
     ))
 
-    plan_mode_reminder = REMINDERS.get("plan_mode_active", "")
-    return f"Entered plan mode. Write your plan to {_plan_file_path}, then call exit_plan_mode() when ready for user approval.\n\n{plan_mode_reminder}"
+    return f"Entered plan mode. Write your plan to {_plan_file_path}, then call exit_plan_mode() when ready for user approval."
 
 
 def exit_plan_mode() -> str:

{connectonion-0.6.3 → connectonion-0.6.4}/connectonion/cli/co_ai/tools/read.py

@@ -3,8 +3,6 @@
 from pathlib import Path
 from typing import Optional
 
-from connectonion.cli.co_ai.reminders import inject_reminder, should_show_security_reminder
-
 
 def read_file(
     path: str,
@@ -60,8 +58,4 @@ def read_file(
     if end < total_lines:
         result += f"\n\n... ({total_lines - end} more lines)"
 
-    # Inject security reminder for sensitive files
-    if should_show_security_reminder(path):
-        result = inject_reminder(result, "security")
-
     return result

{connectonion-0.6.3 → connectonion-0.6.4}/connectonion/docs/concepts/plugins.md

@@ -54,9 +54,10 @@ agent = Agent("a", plugins=[re_act, logger])
 | `eval` | Task evaluation for debugging | [eval.md](../useful_plugins/eval.md) |
 | `image_result_formatter` | Format images for vision models | [image_result_formatter.md](../useful_plugins/image_result_formatter.md) |
 | `shell_approval` | Approve shell commands before execution | [shell_approval.md](../useful_plugins/shell_approval.md) |
+| `tool_approval` | Web-based approval for dangerous tools | [tool_approval.md](../useful_plugins/tool_approval.md) |
 
 ```python
-from connectonion.useful_plugins import re_act, eval, image_result_formatter, shell_approval
+from connectonion.useful_plugins import re_act, eval, image_result_formatter, shell_approval, tool_approval
 
 # Combine plugins
 agent = Agent("assistant", plugins=[re_act, image_result_formatter])

connectonion-0.6.4/connectonion/docs/useful_plugins/tool_approval.md

@@ -0,0 +1,139 @@
+# tool_approval
+
+Web-based approval for dangerous tools via WebSocket. Requires user confirmation before executing tools that can modify files or run commands.
+
+## Quick Start
+
+```python
+from connectonion import Agent, bash
+from connectonion.useful_plugins import tool_approval
+
+agent = Agent("assistant", tools=[bash], plugins=[tool_approval])
+agent.io = my_websocket_io  # Required for web mode
+
+agent.input("Install dependencies")
+# → Client receives: {"type": "approval_needed", "tool": "bash", "arguments": {"command": "npm install"}}
+# → Client responds: {"approved": true, "scope": "session"}
+# ✓ bash approved (session)
+```
+
+## How It Works
+
+1. Before each tool executes, check if it's dangerous
+2. If dangerous, send `approval_needed` event via WebSocket
+3. Wait for client response (blocks until received)
+4. If approved: execute tool, optionally remember for session
+5. If rejected: stop batch, return feedback to LLM
+
+## Tool Classification
+
+### Safe Tools (No Approval)
+
+Read-only operations that never modify state:
+
+```
+read, read_file, glob, grep, search
+list_files, get_file_info, task, load_guide
+enter_plan_mode, exit_plan_mode, write_plan
+task_output, ask_user
+```
+
+### Dangerous Tools (Require Approval)
+
+Operations that can modify files or have side effects:
+
+```
+bash, shell, run, run_in_dir
+write, edit, multi_edit
+run_background, kill_task
+send_email, post, delete, remove
+```
+
+## Client Protocol
+
+### Receive from server
+
+```json
+{
+  "type": "approval_needed",
+  "tool": "bash",
+  "arguments": {"command": "npm install"}
+}
+```
+
+### Send response
+
+```json
+// Approve for this session (no re-prompting)
+{"approved": true, "scope": "session"}
+
+// Approve once only
+{"approved": true, "scope": "once"}
+
+// Reject with feedback
+{"approved": false, "feedback": "Use yarn instead"}
+```
+
+## Approval Scopes
+
+| Scope | Behavior |
+|-------|----------|
+| `once` | Approve this call only |
+| `session` | Approve for rest of session (stored in memory) |
+
+## Rejection Behavior
+
+When user rejects a tool:
+
+1. Raises `ValueError` with feedback message
+2. Stops the entire tool batch (remaining tools skipped)
+3. LLM receives the error and can adjust approach
+
+```python
+# Example error message
+"User rejected tool 'bash'. Feedback: Use yarn instead"
+```
+
+## Terminal Logging
+
+The plugin logs all approval decisions:
+
+```
+✓ bash approved (session)    # Approved with session scope
+✓ edit approved (once)       # Approved for single use
+⏭ bash (session-approved)    # Skipped (already approved)
+✗ bash rejected: Use yarn    # Rejected with feedback
+✗ bash - connection closed   # WebSocket closed
+```
+
+## Events
+
+| Handler | Event | Purpose |
+|---------|-------|---------|
+| `check_approval` | `before_each_tool` | Check approval and prompt client |
+
+## Session Data
+
+```python
+# Approval state stored in session
+agent.current_session['approval'] = {
+    'approved_tools': {
+        'bash': 'session',   # Approved for session
+        'write': 'session'   # Approved for session
+    }
+}
+```
+
+## Non-Web Mode
+
+When `agent.io` is None (not web mode), all tools execute without approval. This is the default behavior for CLI usage.
+
+## Unknown Tools
+
+Tools not in SAFE_TOOLS or DANGEROUS_TOOLS are treated as safe and execute without approval.
+
+## See Also
+
+- [shell_approval](shell_approval.md) - Terminal-based approval for shell commands
+- [Events](../concepts/events.md) - Available event hooks
+- [Plugins](../concepts/plugins.md) - Plugin system overview

{connectonion-0.6.3 → connectonion-0.6.4}/connectonion/useful_plugins/__init__.py

@@ -18,5 +18,6 @@ from .gmail_plugin import gmail_plugin
 from .calendar_plugin import calendar_plugin
 from .ui_stream import ui_stream
 from .system_reminder import system_reminder
+from .tool_approval import tool_approval
 
-__all__ = ['re_act', 'eval', 'image_result_formatter', 'shell_approval', 'gmail_plugin', 'calendar_plugin', 'ui_stream', 'system_reminder']
+__all__ = ['re_act', 'eval', 'image_result_formatter', 'shell_approval', 'gmail_plugin', 'calendar_plugin', 'ui_stream', 'system_reminder', 'tool_approval']