@agentdocumentformat/cli 0.7.7 → 0.7.8

package/dist/chunks/chunk-Y2QA53AN.mjs

@@ -0,0 +1,259 @@
+import { createRequire as __adfCreateRequire } from 'node:module';
+import { fileURLToPath as __adfFileURLToPath } from 'node:url';
+import { dirname as __adfDirname } from 'node:path';
+const require = __adfCreateRequire(import.meta.url);
+const __filename = __adfFileURLToPath(import.meta.url);
+const __dirname = __adfDirname(__filename);
+import {
+  __export
+} from "./chunk-M2RX3S2T.mjs";
+
+// src/main/utils/ssrf-guard.ts
+import { lookup } from "node:dns/promises";
+import { isIP } from "node:net";
+var ALLOWED_FETCH_PROTOCOLS = /* @__PURE__ */ new Set(["http:", "https:"]), ALLOWED_CONNECT_PROTOCOLS = /* @__PURE__ */ new Set(["ws:", "wss:", "http:", "https:"]);
+function parseLooseIPv4(host) {
+  let parts = host.split(".");
+  if (parts.length < 1 || parts.length > 4) return null;
+  let nums = [];
+  for (let part of parts) {
+    if (part === "") return null;
+    let n;
+    if (/^0[xX][0-9a-fA-F]+$/.test(part)) n = parseInt(part.slice(2), 16);
+    else if (/^0[0-7]+$/.test(part)) n = parseInt(part.slice(1), 8);
+    else if (/^[0-9]+$/.test(part)) n = parseInt(part, 10);
+    else return null;
+    if (!Number.isFinite(n) || n < 0) return null;
+    nums.push(n);
+  }
+  for (let i = 0; i < nums.length - 1; i++) if (nums[i] > 255) return null;
+  let last = nums[nums.length - 1];
+  if (last >= Math.pow(256, 4 - nums.length + 1)) return null;
+  let value = last;
+  for (let i = 0; i < nums.length - 1; i++) value += nums[i] * Math.pow(256, 3 - i);
+  return [value >>> 24 & 255, value >>> 16 & 255, value >>> 8 & 255, value & 255].join(".");
+}
+function isBlockedIPv4(ip) {
+  let o = ip.split(".").map(Number);
+  if (o.length !== 4 || o.some((n) => !Number.isInteger(n) || n < 0 || n > 255)) return !1;
+  let [a, b, c] = o;
+  return a === 0 || a === 10 || a === 127 || a === 100 && b >= 64 && b <= 127 || a === 169 && b === 254 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 0 && c === 0 || a === 192 && b === 168 || a === 198 && (b === 18 || b === 19) || a >= 224;
+}
+function isBlockedIPv6(raw) {
+  let addr = raw.toLowerCase().replace(/^\[|\]$/g, "").split("%")[0];
+  if (addr === "::" || addr === "::1" || /^(0:){7}[01]$/.test(addr)) return !0;
+  let mapped = addr.match(/^::(?:ffff:(?:0{1,4}:)?)?((?:\d{1,3}\.){3}\d{1,3})$/);
+  if (mapped) return isBlockedIPv4(mapped[1]);
+  let head = addr.split(":")[0];
+  if (!head) return !1;
+  let h = parseInt(head, 16);
+  return Number.isNaN(h) ? !1 : (h & 65472) === 65152 || (h & 65024) === 64512 || (h & 65280) === 65280;
+}
+function isBlockedIpAddress(ip) {
+  let version = isIP(ip.replace(/^\[|\]$/g, ""));
+  return version === 4 ? isBlockedIPv4(ip) : version === 6 ? isBlockedIPv6(ip) : !1;
+}
+function isLinkLocalIp(ip) {
+  let bare = ip.replace(/^\[|\]$/g, "").split("%")[0], version = isIP(bare);
+  if (version === 4) {
+    let o = bare.split(".").map(Number);
+    return o[0] === 169 && o[1] === 254;
+  }
+  if (version === 6) {
+    let addr = bare.toLowerCase(), mapped = addr.match(/^::(?:ffff:(?:0{1,4}:)?)?((?:\d{1,3}\.){3}\d{1,3})$/);
+    if (mapped) {
+      let o = mapped[1].split(".").map(Number);
+      return o[0] === 169 && o[1] === 254;
+    }
+    let head = addr.split(":")[0], h = parseInt(head, 16);
+    return Number.isNaN(h) ? !1 : (h & 65472) === 65152;
+  }
+  return !1;
+}
+function isLoopbackIp(ip) {
+  let bare = ip.replace(/^\[|\]$/g, "").split("%")[0], version = isIP(bare);
+  if (version === 4) return bare.split(".").map(Number)[0] === 127;
+  if (version === 6) {
+    let addr = bare.toLowerCase();
+    if (addr === "::1" || /^(0:){7}1$/.test(addr)) return !0;
+    let mapped = addr.match(/^::(?:ffff:(?:0{1,4}:)?)?((?:\d{1,3}\.){3}\d{1,3})$/);
+    return mapped ? mapped[1].split(".").map(Number)[0] === 127 : !1;
+  }
+  return !1;
+}
+function isLoopbackHostname(host) {
+  let h = host.toLowerCase().replace(/\.$/, "");
+  return h === "localhost" || h === "localhost.localdomain" || h.endsWith(".localhost");
+}
+function isUnspecifiedIp(ip) {
+  let bare = ip.replace(/^\[|\]$/g, "").split("%")[0].toLowerCase();
+  if (bare === "0.0.0.0" || bare === "::" || /^(0{1,4}:){7}0{1,4}$/.test(bare)) return !0;
+  let mapped = bare.match(/^::(?:ffff:(?:0{1,4}:)?)?((?:\d{1,3}\.){3}\d{1,3})$/);
+  return mapped ? mapped[1] === "0.0.0.0" : !1;
+}
+function blockedMessage(target) {
+  return `Blocked by the sys_fetch SSRF guard: "${target}" is a private-network address (loopback is allowed by default). Set security.allow_local_fetch: true in your config to permit private/LAN fetches \u2014 an agent-initiated write to that setting raises an owner approval request.`;
+}
+function connectBlockedMessage(target) {
+  return `Blocked by the ws_connect SSRF guard: "${target}" is a private-network address (loopback is allowed by default). Set security.allow_local_fetch: true in your config to permit private/LAN connections \u2014 an agent-initiated write to that setting raises an owner approval request.`;
+}
+async function classifyHost(host) {
+  let loopbackHost = !1, candidates = [];
+  if (isIP(host))
+    candidates = [host];
+  else if (isLoopbackHostname(host))
+    loopbackHost = !0;
+  else {
+    let loose = parseLooseIPv4(host);
+    if (loose)
+      candidates = [loose];
+    else
+      try {
+        candidates = (await lookup(host, { all: !0, verbatim: !0 })).map((a) => a.address);
+      } catch {
+        return null;
+      }
+  }
+  return {
+    anyLinkLocal: candidates.some(isLinkLocalIp),
+    anyLoopback: loopbackHost || candidates.some(isLoopbackIp),
+    anyUnspecified: candidates.some(isUnspecifiedIp),
+    // Blocked classes minus loopback (private, CGNAT, unspecified, multicast, …)
+    // — loopback itself is allowed by default and only tier-gated per-port.
+    anyNonLoopbackBlocked: candidates.some((ip) => isBlockedIpAddress(ip) && !isLoopbackIp(ip))
+  };
+}
+function applyPolicy(target, port, path, cls, opts, overridableMessage) {
+  return cls.anyLinkLocal ? `Blocked: "${target}" is a link-local / cloud-metadata address, which is never fetchable (even with allow_local_fetch).` : (cls.anyLoopback || cls.anyUnspecified) && opts.daemonPort && port === opts.daemonPort ? `Blocked: "${target}" (port ${port}) is the local ADF daemon control API, which is never fetchable, even with allow_local_fetch.` : opts.ownOrigin && cls.anyLoopback && port === opts.ownOrigin.port && path.startsWith(opts.ownOrigin.pathPrefix) || opts.allowLocal ? null : cls.anyNonLoopbackBlocked ? overridableMessage(target) : null;
+}
+async function checkFetchTarget(rawUrl, opts = { allowLocal: !1 }) {
+  let url;
+  try {
+    url = new URL(rawUrl);
+  } catch {
+    return `Invalid URL: ${rawUrl}`;
+  }
+  if (!ALLOWED_FETCH_PROTOCOLS.has(url.protocol))
+    return `Blocked by the sys_fetch guard: only http and https URLs may be fetched (got "${url.protocol}").`;
+  let host = url.hostname.replace(/^\[|\]$/g, "");
+  if (!host) return `Invalid URL: ${rawUrl}`;
+  let port = url.port ? Number(url.port) : url.protocol === "https:" ? 443 : 80, cls = await classifyHost(host);
+  return cls ? applyPolicy(url.hostname, port, url.pathname, cls, opts, blockedMessage) : null;
+}
+async function checkConnectTarget(rawUrl, opts = { allowLocal: !1 }) {
+  let url;
+  try {
+    url = new URL(rawUrl);
+  } catch {
+    return `Invalid URL: ${rawUrl}`;
+  }
+  if (!ALLOWED_CONNECT_PROTOCOLS.has(url.protocol))
+    return `Blocked by the ws_connect guard: only ws, wss, http and https URLs may be connected (got "${url.protocol}").`;
+  let host = url.hostname.replace(/^\[|\]$/g, "");
+  if (!host) return `Invalid URL: ${rawUrl}`;
+  let secure = url.protocol === "wss:" || url.protocol === "https:", port = url.port ? Number(url.port) : secure ? 443 : 80, cls = await classifyHost(host);
+  return cls ? applyPolicy(url.hostname, port, url.pathname, cls, opts, connectBlockedMessage) : null;
+}
+
+// src/shared/utils/context-breakdown.ts
+var context_breakdown_exports = {};
+__export(context_breakdown_exports, {
+  DEFAULT_COMPACT_THRESHOLD: () => DEFAULT_COMPACT_THRESHOLD,
+  contextCategories: () => contextCategories,
+  contextTotal: () => contextTotal,
+  resolveCompactThreshold: () => resolveCompactThreshold,
+  resolveHostThreshold: () => resolveHostThreshold,
+  resolveLoopThreshold: () => resolveLoopThreshold
+});
+var DEFAULT_COMPACT_THRESHOLD = 1e5;
+function hostThreshold(config, model) {
+  let context = config?.context?.compact_threshold;
+  if (context != null) return { value: context, source: "agent" };
+  let fromModel = model?.compact_threshold;
+  return fromModel != null ? { value: fromModel, source: "model" } : { value: 1e5, source: "default" };
+}
+function resolveCompactThreshold(config, loop) {
+  if (!loop || loop === "main") return hostThreshold(config, config?.model);
+  let declared = config?.loops?.find((l) => l.name === loop);
+  return declared ? declared.compact_threshold != null ? { value: declared.compact_threshold, source: "loop" } : hostThreshold(config, declared.model ?? config?.model) : hostThreshold(config, config?.model);
+}
+function resolveHostThreshold(config) {
+  return resolveCompactThreshold(config).value;
+}
+function resolveLoopThreshold(config, loop) {
+  return resolveCompactThreshold(config, loop).value;
+}
+function contextTotal(b) {
+  return b.system_prompt_tokens + b.tools_total_tokens + b.messages_tokens + b.dynamic_instructions_tokens;
+}
+var byTokens = (list) => [...list].sort((a, b) => b.tokens - a.tokens);
+function contextCategories(b, maxItems = 12) {
+  let fileTokens = b.injected_files.reduce((sum, f) => sum + f.tokens, 0), parts = b.system_prompt_parts, out = [
+    {
+      id: "system",
+      key: "system",
+      label: "System prompt",
+      tokens: Math.max(0, b.system_prompt_tokens - fileTokens),
+      items: parts ? byTokens([
+        { name: "Base prompt and capability sections", tokens: parts.base_and_sections },
+        { name: "Agent instructions", tokens: parts.instructions },
+        { name: "Identity, loop roster, runtime blocks", tokens: parts.runtime_blocks }
+      ]).filter((i) => i.tokens > 0) : [],
+      note: "Base prompt, instructions and runtime blocks: sent with every request."
+    }
+  ];
+  b.injected_files.length > 0 && out.push({
+    id: "files",
+    key: "files",
+    label: "Injected files",
+    tokens: fileTokens,
+    count: b.injected_files.length,
+    items: byTokens(b.injected_files.map((f) => ({ name: f.path, tokens: f.tokens }))).slice(0, maxItems),
+    note: "{{path}} files rendered into the system prompt."
+  });
+  let builtIn = b.tool_groups.filter((g) => g.source === "built-in"), builtInTools = builtIn.flatMap((g) => g.tools);
+  out.push({
+    id: "tools",
+    key: "tools",
+    label: "Tools",
+    tokens: builtIn.reduce((sum, g) => sum + g.tokens, 0),
+    count: builtInTools.length,
+    items: byTokens(builtInTools).slice(0, maxItems),
+    note: "Built-in tool schemas: sent with every request."
+  });
+  for (let group of b.tool_groups)
+    group.source !== "built-in" && out.push({
+      id: `mcp:${group.source}`,
+      key: "mcp",
+      label: `MCP ${group.source}`,
+      tokens: group.tokens,
+      count: group.tools.length,
+      items: byTokens(group.tools).slice(0, maxItems),
+      note: `Tool schemas from the ${group.source} MCP server.`
+    });
+  return out.push({
+    id: "dynamic",
+    key: "dynamic",
+    label: "Dynamic instructions",
+    tokens: b.dynamic_instructions_tokens,
+    items: [],
+    note: "Per-turn runtime notes (context pressure, reminders)."
+  }), out.push({
+    id: "messages",
+    key: "messages",
+    label: "Conversation",
+    tokens: b.messages_tokens,
+    items: [],
+    note: "This loop\u2019s history, compaction summary included (estimate)."
+  }), byTokens(out);
+}
+
+export {
+  checkFetchTarget,
+  checkConnectTarget,
+  resolveCompactThreshold,
+  resolveLoopThreshold,
+  contextTotal,
+  contextCategories,
+  context_breakdown_exports
+};

package/dist/chunks/{chunk-TPRZQ7Z4.mjs → chunk-ZESQMP66.mjs}

@@ -11,7 +11,7 @@ import {
 } from "./chunk-5W7KES6P.mjs";
 import {
   resolveWithDefault
-} from "./chunk-HPVFJYXR.mjs";
+} from "./chunk-ESP3VNMX.mjs";
 import {
   EXIT,
   enforceToolGate,
@@ -21,7 +21,7 @@ import {
   getCommand,
   notifyToolCallObservers,
   shellReadFile
-} from "./chunk-ZROSGV65.mjs";
+} from "./chunk-HSBV6YFU.mjs";
 
 // src/main/tools/shell/executor/pipeline-executor.ts
 function vfsPath(p) {

package/dist/chunks/{cli-AFHQ2XTN.mjs → cli-NMFIAR7Z.mjs}

@@ -44,7 +44,7 @@ function tuiInvocation(argv) {
   return argv.filter((a) => a !== "--json");
 }
 async function defaultLaunchTui(argv) {
-  let { runTui } = await import("./tui-4ZWZKD4C.mjs");
+  let { runTui } = await import("./tui-UQJLK7XI.mjs");
   return await runTui(argv);
 }
 function urlFromArgv(argv) {

package/dist/chunks/{commands-XNJMCD5L.mjs → commands-KPJWFRUE.mjs}

@@ -9,7 +9,9 @@ import {
   getCommand,
   hasCommand,
   registry
-} from "./chunk-ZROSGV65.mjs";
+} from "./chunk-HSBV6YFU.mjs";
+import "./chunk-G6PH7RPW.mjs";
+import "./chunk-3GNIDM53.mjs";
 import "./chunk-CD3ATSXE.mjs";
 import "./chunk-M2RX3S2T.mjs";
 export {