@bacnh85/pi-plan
Plan mode with read-only gating and plan → implement → verify → review workflow for Pi.
Package details
Install @bacnh85/pi-plan from npm and Pi will load the resources declared by the package manifest.
$ pi install npm:@bacnh85/pi-plan- Package
@bacnh85/pi-plan- Version
0.8.9- Published
- Aug 1, 2026
- Downloads
- 5,065/mo · 1,671/wk
- Author
- bacnh85
- License
- MIT
- Types
- extension
- Size
- 144.5 KB
- Dependencies
- 0 dependencies · 4 peers
Pi manifest JSON
{
"extensions": [
"./extensions/index.ts"
]
}Security note
Pi packages can execute code and influence agent behavior. Review the source before installing third-party packages.
README
@bacnh85/pi-plan
Pi extension that adds a lightweight plan mode inspired by Codex and Claude Code:
- Toggle plan mode with
/planorCtrl+Alt+P. - Remembers separate thinking/reasoning levels for planning and normal execution across sessions.
- Keeps planning safe: known read/research tools and strict read-only shell commands auto-run, unknown executables and custom tools require confirmation, direct source mutators are blocked.
- Provides a
write_plantool so the agent writes reviewable Markdown plans into.agents/plans/. - Provides an
ask_plan_questiontool for selection-style clarifying questions during planning. - Prompts once after each plan is written so you can approve execution (current or fresh session) or keep planning.
Install
pi install npm:@bacnh85/pi-plan
Start directly in planning mode:
pi --plan
Commands and shortcuts
| Command / shortcut | Description |
|---|---|
/plan |
Toggle plan mode. |
| `/plan-approve [current | new |
/flow status |
Show the active workflow phase and review pass. |
/flow stop |
Abort review and stop the active workflow. |
/handoff <goal> |
Summarize the session into a reviewable prompt and start a focused new Pi session linked to the parent. |
/rewind |
Select a saved prompt checkpoint and restore its code, conversation, or both. |
/advisor [model hint|off] |
Configure a transcript-aware strategic advisor with /model-style search. |
/btw [query] |
Ask a context-aware side question; completed answers persist as transcript cards. Without a query, reopens the last answer. |
/specs <intent> |
Write a reviewable, spec-first EARS specification and hard-lock workspace writes. |
/specs-approve |
Release the gate and prefill the implementation instruction. |
/doctor |
Show compact workspace, Git, Node, model-auth, and tool health. |
/goal [objective|status|pause|resume|clear] |
Keep the agent working toward a verifiable condition across turns until a small-fast-model evaluator confirms it is met. |
/goal-model [model hint|off] |
Configure the /goal evaluator model with /model-style search. |
Esc Esc |
With an empty idle editor, prefill /rewind in the TUI. |
Ctrl+Alt+P |
Toggle plan mode. |
Workflow
- Enter plan mode with
/planor--plan. - Ask pi to research the task and propose an implementation.
- The model explores with read-only tools. Dedicated
ls/grep/findtools and strict single read-only shell commands run automatically; test/build/package scripts and other unknown executables prompt you. - If decisions are ambiguous, the model can call
ask_plan_questionso you can choose or type your own answer. - The model calls
write_plan— the plan is saved under.agents/plans/<timestamp>-<title>.md. - After the plan is written, Pi prefills
/plan-approvein the TUI. Press Enter, then choose:- Implement in current session — exits plan mode, restores tools, sends an execution prompt.
- Implement in new session — starts a fresh session with the plan as handoff.
- Implement, verify, and review — captures the Git baseline, implements in fresh context, invokes
pi-reviewthroughpi-subagent, feeds blocking findings back as actionable issues with expected behavior and acceptance criteria, and stops clean or after three review passes. - Stay in Plan mode — continue refining the plan.
Non-blocking review findings do not enter the fix loop, but remain available in the workflow result details instead of being reported as a clean review. Automated review uses a 3-minute activity-resettable inactivity window and a 20-minute hard cap; only real reviewer progress resets the window.
/handoff <goal> summarizes the current session (seeded with the active plan/workflow state) into a focused, self-contained prompt, lets you review and edit it, then starts a new Pi session linked to the parent so the next agent can continue without the old context window. It does not carry plan mode or flow state into the new session — use /plan-approve new|flow to continue the same plan execution. /rewind captures the current Git workspace before each normal user prompt and presents the latest 100 reachable checkpoints. Select a checkpoint to restore its conversation, code, or both; code restore stashes current staged, unstaged, and untracked work, then restores the checkpoint's tracked patch (stored externally — no size limit) and untracked-file snapshot (up to 1 MB). It requires Git with unchanged HEAD, refuses committed divergence, and can overwrite concurrent or external changes to files restored by Pi.
Fresh-session replacement is intentionally initiated by /plan-approve: extension-originated messages bypass Pi's slash-command router and cannot call command-only session APIs. The automated choice requires pi-review and pi-subagent. It never resets files or Git state; initial dirty paths are recorded for reviewer context. Untracked content snapshots are lossless up to 1 MB (separate from the tracked dirty patch, which has no size limit — payloads are stored in external files under ~/.pi/agent/pi-plan/checkpoints/) and fail closed above it. The implementer must report exact checks with [verification: pass] or [verification: fail].
Tool gating in plan mode
| Tool category | Behavior |
|---|---|
Known read/research tools (built-in read/ls/grep/find, Serena, FFF, web, Munin) |
Auto-allowed without prompt |
write_plan, ask_plan_question |
Always available |
bash (write commands: redirects, heredocs, sed -i, tee, cp/mv/rm, touch, mkdir) |
Hard-blocked — no filesystem mutations via bash in plan mode |
bash (strict single read commands: ls, grep, find, git status, cat) |
Auto-allowed without prompt |
bash (unknown executables, including test/build/package scripts) |
Requires confirm dialog warning about possible side effects; denied without UI |
| Baseline custom tools not on the known-read list | Requires confirm dialog |
| Unknown tools (not in original baseline) | Requires confirm dialog |
Direct source mutators (edit, write, Serena/Munin mutations) |
Hard-blocked with error message |
multi_tool_use.parallel |
Each nested call independently gated |
Advisor and utility command configuration
Run /advisor to open the same searchable picker as /model; type a provider/model hint to filter it. /advisor provider/model (or an unambiguous bare model ID) selects immediately, while an unmatched hint opens the picker prefiltered. Use /advisor off to disable it. The selected model persists globally in ~/.pi/agent/pi-plan/preferences.json and is disabled by default.
When configured, the primary agent receives an advisor tool and decides when to use it—typically before a consequential approach, after recurring failures, or before completing non-trivial work. The advisor sees Pi's effective session transcript (including compaction summaries and tool results), returns read-only guidance to the primary agent, and does not replace pi-review's Git-scoped review workflow.
Optional Pi settings (global ~/.pi/agent/settings.json or trusted project .pi/settings.json) select the /btw model:
{
"pi-plan": {
"btw": { "model": "provider/model" }
}
}
/btw injects a compact snapshot of the current session transcript as context, so it can answer questions about files read, decisions made, and things discussed earlier. It uses an isolated model call with no tool access. Completed answers render as durable transcript cards that remain visible after dismissal and are excluded from the primary agent's LLM context.
/btw without a query recalls the latest answer from the current session branch, including after reload or resume.
/specs <intent> uses an isolated model call to write one spec-first Markdown artifact under .agents/specs/. It includes scope, exclusions, workspace-grounded target files, EARS requirements, assumptions/open questions, and independently checkable acceptance criteria. It keeps the plan-mode write gate active until /specs-approve is explicitly run. Approval does not start an agent run: in the TUI it preloads an instruction to implement the approved spec and verify each criterion; non-TUI modes receive the same copyable instruction.
Goal loop
/goal <objective> sets a durable condition and the agent keeps working toward it across turns without you prompting each step — a pi-native analogue of Claude Code's /goal and Codex's /goal. After each turn settles (agent_settled), the condition plus a compact transcript window are sent to an isolated evaluator model (default: the active model; configure a cheaper one with /goal-model or pi-plan.goal.model). It returns a strict-JSON { met, reason } verdict:
met: true→ the goal clears and an achievement is recorded in the transcript.met: false→ the agent takes another turn, with the reason as guidance.
Write the objective as something the agent can prove in conversation ("npm test exits 0", "the queue is empty", "every call site compiles"). The evaluator judges only what the agent has surfaced — it runs no tools. One goal per session/branch; setting a new one replaces the active one. /goal with no argument shows status (condition, turns/cap, duration, last reason); /goal clear (aliases stop|off|reset|none|cancel) stops it; /goal pause and /goal resume let you interject a manual turn without losing the goal.
A goal is an execution-time feature, so it cannot be set while plan mode or an implement→verify→review workflow is active. A hard turn cap (pi-plan.goal.maxTurns, default 50) stops runaway loops; include an explicit bound in the condition too (e.g. or stop after 20 turns). An active goal is restored on resume with its turn count and timer reset, matching Claude Code's semantics — so maxTurns bounds a single run segment, not cumulative turns across resumes. Optional Pi settings select the evaluator model and cap:
{
"pi-plan": {
"goal": { "model": "provider/model", "maxTurns": 20 }
}
}
Reasoning levels and per-mode model
pi-plan remembers two configurations — one for plan mode and one for normal/execution — and restores the right one when you toggle modes or restart the session:
- Reasoning level. Change Pi's active reasoning level while plan mode is active to update the planning level; change it in normal mode to update the execution level.
- Model. Change Pi's active model with
/model(orCtrl+P) while plan mode is active to set the planning model; change it in normal mode to set the execution model.
Both are observed automatically and persisted per model ID across sessions under your user Pi
agent directory. This makes it natural to plan with a strong model and implement with a fast
one — e.g. plan with zai-coding-cn/glm-5.2, then implement with opencode-go/deepseek-v4-flash:
the model switches automatically when you enter/leave plan mode.
Notes:
- A per-mode model is only applied when you have set one for that mode. By default (nothing configured), Pi's current model is left untouched when toggling modes.
- Use
/model(orCtrl+P) while in each mode — pi-plan observes and records whichever model you pick as that mode's preference automatically. - Switching models persists the model as Pi's global default in
settings.jsonon each change (Pi's own/modeldoes the same). pi-plan always re-applies the correct per-mode model on the next mode toggle or session start. - To clear a per-mode model, switch to your desired default while in that mode, or edit the
planModel/normalModelfields out of~/.pi/agent/pi-plan/preferences.json. - If the configured model isn't loaded yet (e.g. a provider like 9router that registers models asynchronously), the switch is deferred and retried the moment the provider announces its models. If the model is genuinely unavailable (no API key or not found), the switch is skipped with a warning and the current model is kept.
Changelog
See CHANGELOG.md for release history.
Packaging
This is a Pi package. Runtime imports (@earendil-works/pi-coding-agent, typebox) are peer dependencies.