@algolia/wizard 0.41.0 → 0.42.0

package/dist/main.js

@@ -2683,17 +2683,38 @@ function storeApproval(root) {
     return "approve";
   };
 }
-var EXPLORATORY_COMMANDS = /* @__PURE__ */ new Set(["ls", "find", "tree", "dir"]);
+var FILE_IO_COMMANDS = /* @__PURE__ */ new Set([
+  "ls",
+  "find",
+  "fd",
+  "tree",
+  "dir",
+  "locate",
+  "cat",
+  "head",
+  "tail",
+  "less",
+  "more",
+  "tac",
+  "nl",
+  "grep",
+  "egrep",
+  "fgrep",
+  "rg",
+  "ack",
+  "ag",
+  "xxd",
+  "hexdump",
+  "od",
+  "strings"
+]);
 function commandSegments(command) {
   return command.split(/&&|;|\|/).map((segment) => segment.trim());
 }
-function isExploratoryCommand(command) {
-  return commandSegments(command).map((segment) => segment.split(/\s+/)[0]).some((word) => word !== void 0 && EXPLORATORY_COMMANDS.has(word));
+function isFileIOCommand(command) {
+  return commandSegments(command).map((segment) => segment.split(/\s+/)[0]).some((word) => word !== void 0 && FILE_IO_COMMANDS.has(word));
 }
 var READ_ONLY_BINARIES = /* @__PURE__ */ new Set([
-  "cat",
-  "head",
-  "tail",
   "wc",
   "pwd",
   "echo",
@@ -2704,10 +2725,6 @@ var READ_ONLY_BINARIES = /* @__PURE__ */ new Set([
   "which",
   "file",
   "stat",
-  "grep",
-  "egrep",
-  "fgrep",
-  "rg",
   "diff"
 ]);
 var READ_ONLY_NO_ARGS_BINARIES = /* @__PURE__ */ new Set(["env", "printenv"]);
@@ -2913,7 +2930,7 @@ async function approveAndRun(ctx, command, cwd, explanation) {
 }
 function runShellTool(ctx, createModel = defaultCreateModel) {
   return tool8({
-    description: "Run a shell command in the project. Use this for anything the project needs done in its own ecosystem: installing dependencies, running a script you wrote, running the project's lint/typecheck/test commands. Do not use this to find or read files \u2014 use listFiles, searchFiles, and readFile instead of ls/find/cat/head/tail/grep/rg. This tool refuses ls/find/tree/dir outright; a read command like cat is not refused (some read-only commands run without approval, see below), but it's still the wrong tool for reading a file \u2014 the dedicated tools exist for that and won't count against this tool's command budget. The user approves any command that could change the project before it runs, so write a clear `explanation`. A command judged read-only (inspection, or running tests/typecheck/lint without an autofix flag, in any language) runs immediately without approval. If the user rejects a command, do not retry it \u2014 propose a different approach.",
+    description: "Run a shell command in the project. Use this for anything the project needs done in its own ecosystem: installing dependencies, running a script you wrote, running the project's lint/typecheck/test commands. Do not use this to find or read files \u2014 use listFiles, searchFiles, and readFile instead of shell file-listing, reading, or search commands (ls/find/tree/cat/head/tail/grep/rg and similar). This tool refuses all of those outright: the dedicated tools enforce the project-root boundary and secret redaction that a raw shell read would bypass, and they won't count against this tool's command budget. The user approves any command that could change the project before it runs, so write a clear `explanation`. A command judged read-only (inspection, or running tests/typecheck/lint without an autofix flag, in any language) runs immediately without approval. If the user rejects a command, do not retry it \u2014 propose a different approach.",
     inputSchema: z15.object({
       command: z15.string().describe(
         "The command to run, exactly as it would be typed in a shell. Pipes, && and redirects are allowed."
@@ -2931,8 +2948,8 @@ function runShellTool(ctx, createModel = defaultCreateModel) {
       }
       const resolved2 = resolveInRoot(ctx, cwd ?? ".");
       if (!resolved2.ok) return resolved2.error;
-      if (isExploratoryCommand(command)) {
-        return "Refused: use listFiles or searchFiles to find files, and readFile to read one, instead of ls/find/tree/dir.";
+      if (isFileIOCommand(command)) {
+        return "Refused: use listFiles or searchFiles to find files, and readFile to read one, instead of a shell file-listing, reading, or search command (ls/find/fd/tree/dir/locate/cat/head/tail/less/more/tac/nl/grep/egrep/fgrep/rg/ack/ag/xxd/hexdump/od/strings).";
       }
       logger.info({ command, cwd: resolved2.target }, "called runShell tool");
       const fast = fastPathSafety(command);
@@ -3455,7 +3472,7 @@ async function runAnalysis(mode, extraInstructions = []) {
 // package.json
 var package_default = {
   name: "@algolia/wizard",
-  version: "0.41.0",
+  version: "0.42.0",
   description: "Magically implement Algolia functionality in your codebase",
   type: "module",
   engines: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@algolia/wizard",
-  "version": "0.41.0",
+  "version": "0.42.0",
   "description": "Magically implement Algolia functionality in your codebase",
   "type": "module",
   "engines": {