@ashx-j/lunr 0.2.26 → 0.2.27

package/dist/node-runtime/{chunk-WIF24I7G.js → chunk-APVM5NEU.js}

@@ -1,17 +1,78 @@
 import { createRequire as __lunrRequire } from "node:module"; const require = __lunrRequire(import.meta.url);
 import {
-  isUserInstructionsPath
-} from "./chunk-M3LZLQW2.js";
+  protectedTargetWriteReason
+} from "./chunk-F2V2F4ZG.js";
 import {
   computerPolicy
 } from "./chunk-FY4A63RK.js";
-import {
-  CONFIG_DIR_NAME,
-  getAgentDir
-} from "./chunk-FQMM2EZ2.js";
+
+// packages/coding-agent/dist/builtin-extensions/pi-subagents/src/runs/foreground/request-params.js
+var LAUNCH_COMPATIBLE_ACTIONS = /* @__PURE__ */ new Set(["schedule", "append-step", "resume", "steer"]);
+function omitExecutionModeActionAlias(params) {
+  let action = params.action?.toLowerCase();
+  if (action === "single" && params.task !== void 0) {
+    let rest = { ...params };
+    return delete rest.action, rest;
+  }
+  if ((action === "parallel" || action === "tasks") && (params.tasks?.length ?? 0) > 0) {
+    let rest = { ...params };
+    return delete rest.action, rest;
+  }
+  return params;
+}
+function hasLaunchFields(params) {
+  return params.task !== void 0 || Array.isArray(params.tasks) && params.tasks.length > 0 || Array.isArray(params.chain) && params.chain.length > 0;
+}
+function omitConflictingControlAction(params) {
+  let action = params.action?.toLowerCase();
+  if (!action || LAUNCH_COMPATIBLE_ACTIONS.has(action) || !hasLaunchFields(params))
+    return params;
+  let rest = { ...params };
+  return delete rest.action, typeof rest.task == "string" && rest.task.length > 0 && (delete rest.tasks, delete rest.chain), rest;
+}
+function resolveSubagentRequestParams(params) {
+  return omitConflictingControlAction(omitExecutionModeActionAlias(params));
+}
+
+// packages/coding-agent/dist/core/large-subagent-launch.js
+var LARGE_SUBAGENT_LAUNCH_THRESHOLD = 2;
+function countEntry(item) {
+  let count = item && typeof item == "object" ? item.count : void 0;
+  return typeof count == "number" && Number.isInteger(count) && count >= 1 ? count : 1;
+}
+function isManagementCall(args) {
+  return typeof args.action == "string" && args.action.length > 0;
+}
+function effectiveLargeSubagentLaunchCount(input) {
+  let args = resolveSubagentRequestParams(input), total = 0;
+  if (Array.isArray(args.tasks))
+    for (let task of args.tasks)
+      total += countEntry(task);
+  if (Array.isArray(args.chain))
+    for (let step of args.chain) {
+      let parallel = step && typeof step == "object" ? step.parallel : void 0;
+      if (Array.isArray(parallel))
+        for (let child of parallel)
+          total += countEntry(child);
+    }
+  return total;
+}
+function siblingSingleCount(input) {
+  let args = resolveSubagentRequestParams(input);
+  return isManagementCall(args) || Array.isArray(args.tasks) && args.tasks.length > 0 || Array.isArray(args.chain) && args.chain.length > 0 ? 0 : typeof args.task == "string" && args.task.length > 0 && typeof args.description == "string" && args.description.length > 0 ? 1 : 0;
+}
+function effectiveLargeSubagentLaunchCountForTurn(args, assistantMessage) {
+  let own = effectiveLargeSubagentLaunchCount(args), siblingSingles = (assistantMessage?.content ?? []).reduce((total, block) => {
+    if (block.type !== "toolCall" || block.name !== "subagent")
+      return total;
+    let siblingArgs = block.arguments && typeof block.arguments == "object" && !Array.isArray(block.arguments) ? block.arguments : void 0;
+    return siblingArgs ? total + siblingSingleCount(siblingArgs) : total;
+  }, 0);
+  return Math.max(own, siblingSingles);
+}
 
 // packages/coding-agent/dist/core/plan-mode.js
-var READ_ONLY_MODE_ADDENDUM = "You are in read-only mode. Investigate and answer without making changes. If the user asks for a plan, you may call present_plan for approval. Do not implement until the user switches modes or approves that plan.", READ_ONLY_MODE_BLOCK_MESSAGE = "Read-only mode is active; no changes allowed.", BLOCKED_TOOLS = /* @__PURE__ */ new Set(["edit", "write", "memory_add", "memory_remove", "cron"]), ALLOWED_COMMANDS = /* @__PURE__ */ new Set([
+var READ_ONLY_MODE_ADDENDUM = "You are in read-only mode. Investigate and answer without making changes. If the user asks for a plan, you may call present_plan for approval. Do not implement until the user switches modes or approves that plan. Shell use is limited to known informational forms; project scripts, tests, package executors, and interpreter execution require a writable mode.", READ_ONLY_MODE_BLOCK_MESSAGE = "Read-only mode is active; no changes allowed.", BLOCKED_TOOLS = /* @__PURE__ */ new Set(["edit", "write", "memory_add", "memory_remove", "cron"]), ALLOWED_COMMANDS = /* @__PURE__ */ new Set([
   "ls",
   "ll",
   "cat",
@@ -59,52 +120,32 @@ var READ_ONLY_MODE_ADDENDUM = "You are in read-only mode. Investigate and answer
   "pnpm",
   "yarn",
   "bun"
-]), MUTATING_GIT_SUBCOMMANDS = /* @__PURE__ */ new Set([
-  "add",
-  "commit",
-  "push",
-  "pull",
-  "merge",
-  "rebase",
-  "reset",
-  "checkout",
-  "switch",
-  "restore",
-  "rm",
-  "mv",
-  "stash",
-  "cherry-pick",
-  "revert",
-  "clean",
-  "fetch",
-  "config",
-  "apply",
-  "am",
-  "init",
-  "clone",
-  "submodule",
-  "worktree",
-  "gc",
-  "prune",
-  "update-index"
-]), CONDITIONAL_GIT_SUBCOMMANDS = /* @__PURE__ */ new Set(["branch", "tag", "remote"]), CONDITIONAL_GIT_MUTATING_FLAGS = /* @__PURE__ */ new Set(["-d", "-D", "-m", "-M", "-c", "-C"]), PACKAGE_MANAGER_MUTATIONS = {
-  npm: /* @__PURE__ */ new Set([
-    "install",
-    "add",
-    "remove",
-    "uninstall",
-    "update",
-    "upgrade",
-    "publish",
-    "link",
-    "unlink",
-    "ci",
-    "init"
-  ]),
-  pnpm: /* @__PURE__ */ new Set(["install", "add", "remove", "uninstall", "update", "upgrade", "publish", "link", "unlink", "init"]),
-  yarn: /* @__PURE__ */ new Set(["install", "add", "remove", "uninstall", "upgrade", "publish", "link", "unlink", "init"]),
-  bun: /* @__PURE__ */ new Set(["install", "add", "remove", "uninstall", "update", "upgrade", "publish", "link", "unlink", "init"])
-}, ALWAYS_MUTATING_MANAGERS = /* @__PURE__ */ new Set([
+]), READ_ONLY_GIT_SUBCOMMANDS = /* @__PURE__ */ new Set([
+  "status",
+  "log",
+  "diff",
+  "show",
+  "ls-files",
+  "ls-tree",
+  "rev-parse",
+  "rev-list",
+  "show-ref",
+  "cat-file",
+  "describe",
+  "name-rev",
+  "shortlog",
+  "blame",
+  "grep"
+]), GIT_LIST_FLAGS = /* @__PURE__ */ new Map([
+  ["branch", /* @__PURE__ */ new Set(["-a", "--all", "-r", "--remotes", "-v", "-vv", "--verbose", "--list", "--show-current"])],
+  ["tag", /* @__PURE__ */ new Set(["-l", "--list", "-n"])],
+  ["remote", /* @__PURE__ */ new Set(["-v", "--verbose"])]
+]), PACKAGE_MANAGER_READS = /* @__PURE__ */ new Map([
+  ["npm", /* @__PURE__ */ new Set(["ls", "list", "view", "info", "explain", "outdated", "root", "prefix"])],
+  ["pnpm", /* @__PURE__ */ new Set(["ls", "list", "why", "outdated"])],
+  ["yarn", /* @__PURE__ */ new Set(["info", "why"])],
+  ["bun", /* @__PURE__ */ new Set()]
+]), ALWAYS_MUTATING_MANAGERS = /* @__PURE__ */ new Set([
   "apt",
   "apt-get",
   "brew",
@@ -114,17 +155,7 @@ var READ_ONLY_MODE_ADDENDUM = "You are in read-only mode. Investigate and answer
   "choco",
   "winget",
   "scoop"
-]), EXECUTING_NODE_FLAGS = /* @__PURE__ */ new Set([
-  "-e",
-  "--eval",
-  "-p",
-  "--print",
-  "-r",
-  "--require",
-  "--import",
-  "-i",
-  "--interactive"
-]), EXECUTING_PYTHON_FLAGS = /* @__PURE__ */ new Set(["-c", "-m", "-i", "--interactive"]);
+]), RUNNER_INFO_FLAGS = /* @__PURE__ */ new Set(["-v", "--version", "-h", "--help"]);
 function isCodeRewriteMutating(input) {
   return input?.dry_run === !1;
 }
@@ -225,7 +256,13 @@ function hasShellSubstitution(command) {
       escaped = !0;
       continue;
     }
-    if (quote) {
+    if (quote === "'") {
+      ch === quote && (quote = void 0);
+      continue;
+    }
+    if (ch === "`" || ch === "$" && command[i + 1] === "(")
+      return !0;
+    if (quote === '"') {
       ch === quote && (quote = void 0);
       continue;
     }
@@ -233,13 +270,33 @@ function hasShellSubstitution(command) {
       quote = ch;
       continue;
     }
-    if (ch === "`" || ch === "$" && command[i + 1] === "(" || ch === "<" && command[i + 1] === "(" || ch === ">" && command[i + 1] === "(" || ch === "&" && command[i + 1] === ">")
+    if ((ch === "<" || ch === ">") && command[i + 1] === "(" || ch === "&" && command[i + 1] === ">")
       return !0;
   }
   return !1;
 }
+function shellWords(segment) {
+  let words = [], word = "", inWord = !1, quote;
+  for (let i = 0; i < segment.length; i++) {
+    let ch = segment[i];
+    if (ch === "\\" && quote !== "'") {
+      let next = segment[++i];
+      if (next === void 0)
+        return;
+      if (next === `
+`)
+        continue;
+      quote === '"' && !["$", "`", '"', "\\", `
+`].includes(next) && (word += "\\"), word += next, inWord = !0;
+    } else quote ? ch === quote ? quote = void 0 : word += ch : ch === "'" || ch === '"' ? (quote = ch, inWord = !0) : /\s/.test(ch) ? (inWord && words.push(word), word = "", inWord = !1) : (word += ch, inWord = !0);
+  }
+  if (!quote)
+    return inWord && words.push(word), words;
+}
 function isMutatingSegment(segment) {
-  let tokens = segment.split(/\s+/).filter((t) => t.length > 0);
+  let tokens = shellWords(segment);
+  if (!tokens)
+    return !0;
   for (; tokens.length > 0 && /^[A-Za-z_][A-Za-z0-9_]*=/.test(tokens[0]); )
     tokens = tokens.slice(1);
   if (tokens.length === 0)
@@ -270,19 +327,20 @@ function isMutatingSegment(segment) {
       "status"
     ].includes(sub.trim());
   }
-  if (command === "sh" || command === "bash" || command === "zsh" || command === "dash")
-    return args.some((a) => a === "-c" || a === "-s") || args.some((a) => !a.startsWith("-"));
-  let pkgMutations = PACKAGE_MANAGER_MUTATIONS[command];
-  if (pkgMutations) {
-    let subcommand = args.find((a) => !a.startsWith("-"))?.toLowerCase();
-    return subcommand !== void 0 && pkgMutations.has(subcommand);
-  }
-  return command === "node" ? args.some((a) => !a.startsWith("-")) || args.some((a) => EXECUTING_NODE_FLAGS.has(a)) : command === "python" || command === "python3" ? args.some((a) => !a.startsWith("-")) || args.some((a) => EXECUTING_PYTHON_FLAGS.has(a)) : !ALLOWED_COMMANDS.has(command);
+  if (command === "node")
+    return args.length !== 1 || !RUNNER_INFO_FLAGS.has(args[0]);
+  if (command === "python" || command === "python3")
+    return args.length !== 1 || !["-V", "--version", "-h", "--help"].includes(args[0]);
+  if (["sh", "bash", "zsh", "dash"].includes(command))
+    return args.length !== 1 || !["--version", "--help"].includes(args[0]);
+  let packageReads = PACKAGE_MANAGER_READS.get(command);
+  return packageReads ? args.length === 1 && RUNNER_INFO_FLAGS.has(args[0]) ? !1 : !packageReads.has(args[0]?.toLowerCase()) : command === "env" ? args.length > 0 && !(args.length === 1 && ["--version", "--help", "-0", "--null"].includes(args[0])) : command === "sort" ? args.some((arg) => {
+    let option = arg.split("=")[0];
+    return option.startsWith("--") && option.length > 2 && "--output".startsWith(option) || /^-[^-]*o/.test(arg);
+  }) : !ALLOWED_COMMANDS.has(command);
 }
 var GIT_GLOBAL_FLAGS = /* @__PURE__ */ new Set([
   "--no-pager",
-  "--paginate",
-  "-p",
   "--version",
   "--help",
   "-h",
@@ -306,13 +364,13 @@ function gitSubcommandIndex(args) {
       index++;
       continue;
     }
-    if (token === "-C" || token === "-c" || token === "--git-dir" || token === "--work-tree" || token === "--namespace") {
+    if (token === "-C" || token === "--git-dir" || token === "--work-tree" || token === "--namespace") {
       if (args[index + 1] === void 0)
         return -1;
       index += 2;
       continue;
     }
-    if (token.startsWith("--git-dir=") || token.startsWith("--work-tree=") || token.startsWith("--namespace=") || token.startsWith("--config-env=")) {
+    if (token.startsWith("--git-dir=") || token.startsWith("--work-tree=") || token.startsWith("--namespace=")) {
       index++;
       continue;
     }
@@ -325,54 +383,16 @@ function isMutatingGit(args) {
   if (index < 0)
     return !0;
   let subcommand = args[index]?.toLowerCase();
-  return subcommand ? MUTATING_GIT_SUBCOMMANDS.has(subcommand) ? !0 : CONDITIONAL_GIT_SUBCOMMANDS.has(subcommand) ? args.slice(index + 1).some((a) => !a.startsWith("-") || CONDITIONAL_GIT_MUTATING_FLAGS.has(a)) : !1 : !1;
+  if (!subcommand)
+    return !1;
+  let listFlags = GIT_LIST_FLAGS.get(subcommand);
+  return listFlags ? args.slice(index + 1).some((arg) => !listFlags.has(arg)) : READ_ONLY_GIT_SUBCOMMANDS.has(subcommand) ? args.slice(index + 1).some((arg) => arg === "--output" || arg.startsWith("--output=") || arg === "--ext-diff" || arg === "--textconv") : !0;
 }
 function basenameOf(token) {
   let parts = token.split(/[\\/]/);
   return parts[parts.length - 1] ?? token;
 }
 
-// packages/coding-agent/dist/core/permissions.js
-import { dirname, join, resolve } from "node:path";
-
-// packages/coding-agent/dist/core/large-subagent-launch.js
-function countEntry(item) {
-  let count = item && typeof item == "object" ? item.count : void 0;
-  return typeof count == "number" && Number.isInteger(count) && count >= 1 ? count : 1;
-}
-function isManagementCall(args) {
-  return typeof args.action == "string" && args.action.length > 0;
-}
-function isAsyncDetached(args) {
-  return args.async === !0 && args.clarify !== !0;
-}
-function effectiveLargeSubagentLaunchCount(args) {
-  let total = 0;
-  if (Array.isArray(args.tasks))
-    for (let task of args.tasks)
-      total += countEntry(task);
-  if (Array.isArray(args.chain))
-    for (let step of args.chain) {
-      let parallel = step && typeof step == "object" ? step.parallel : void 0;
-      if (Array.isArray(parallel))
-        for (let child of parallel)
-          total += countEntry(child);
-    }
-  return total;
-}
-function siblingSingleCount(args) {
-  return isManagementCall(args) || isAsyncDetached(args) || Array.isArray(args.tasks) || Array.isArray(args.chain) ? 0 : typeof args.task == "string" && args.task.length > 0 && typeof args.description == "string" && args.description.length > 0 ? 1 : 0;
-}
-function effectiveLargeSubagentLaunchCountForTurn(args, assistantMessage) {
-  let own = effectiveLargeSubagentLaunchCount(args), siblingSingles = (assistantMessage?.content ?? []).reduce((total, block) => {
-    if (block.type !== "toolCall" || block.name !== "subagent")
-      return total;
-    let siblingArgs = block.arguments && typeof block.arguments == "object" && !Array.isArray(block.arguments) ? block.arguments : void 0;
-    return siblingArgs ? total + siblingSingleCount(siblingArgs) : total;
-  }, 0);
-  return Math.max(own, siblingSingles);
-}
-
 // packages/coding-agent/dist/core/permissions.js
 var PERMISSION_MODES = ["yolo", "auto", "read-only"];
 function nextPermissionMode(current) {
@@ -422,6 +442,9 @@ function getContext(sessionId) {
 function createPermissionContext(sessionId, mode = defaultContext.mode, allowApprovals = !0) {
   contexts.set(sessionId, { mode, allowApprovals, approvals: /* @__PURE__ */ new Set() });
 }
+function initializePermissionContext(sessionId, mode = defaultContext.mode, overrideMode) {
+  contexts.has(sessionId) || createPermissionContext(sessionId, mode), overrideMode !== void 0 && setPermissionMode(overrideMode, sessionId);
+}
 function deletePermissionContext(sessionId) {
   contexts.delete(sessionId);
 }
@@ -455,29 +478,9 @@ async function requestPlanApproval(summary) {
   return planApprovalResultText(resp);
 }
 var AUTO_MODE_ADDENDUM = "You are running fully autonomously. Do not ask the user questions or wait for confirmation; make reasonable decisions and complete the task end-to-end.";
-function resolvePath(cwd, p) {
-  return typeof p != "string" || !p ? "" : resolve(cwd, p);
-}
-var GLOBAL_AGENTS_FILE_WRITE_BLOCK_REASON = "The agents instruction tree is user-managed. The agent cannot change ~/.lunr/agent/agents/.", MEMORY_FILE_DIRECT_WRITE_BLOCK_REASON = "Memory is model-managed through the memory tools. Do not directly change ~/.lunr/simple-memory/memory.md.", SETTINGS_FILE_DIRECT_WRITE_BLOCK_REASON = "lunR settings are user-managed through /settings. Do not directly change settings.json.";
 function protectedFileWriteReason(toolName, input, cwd) {
-  if (toolName !== "edit" && toolName !== "write" && toolName !== "code_rewrite")
-    return;
-  let target = resolvePath(cwd, input.path);
-  if (!target)
-    return;
-  let normalize = (path) => {
-    let normalized = resolve(path).replace(/\\/g, "/").replace(/\/$/, "");
-    return process.platform === "win32" ? normalized.toLowerCase() : normalized;
-  };
-  if (isUserInstructionsPath(target, getAgentDir()))
-    return GLOBAL_AGENTS_FILE_WRITE_BLOCK_REASON;
-  if (normalize(target) === normalize(join(dirname(getAgentDir()), "simple-memory", "memory.md")))
-    return MEMORY_FILE_DIRECT_WRITE_BLOCK_REASON;
-  let globalSettings = normalize(join(getAgentDir(), "settings.json")), projectSettings = normalize(join(cwd, CONFIG_DIR_NAME, "settings.json")), normalizedTarget = normalize(target);
-  if (normalizedTarget === normalize(join(getAgentDir(), "install-features.json")))
-    return "Optional features are user-managed through lunr features; Browser is managed in /settings. Do not change install-features.json directly.";
-  if (normalizedTarget === globalSettings || normalizedTarget === projectSettings)
-    return SETTINGS_FILE_DIRECT_WRITE_BLOCK_REASON;
+  if (!(toolName !== "edit" && toolName !== "write" && toolName !== "code_rewrite") && !(typeof input.path != "string" || !input.path))
+    return protectedTargetWriteReason(input.path, cwd);
 }
 function collectRequestedChildLaunches(value, launches) {
   if (!value || typeof value != "object" || Array.isArray(value))
@@ -528,7 +531,7 @@ async function gateLargeSubagentLaunch(input, ctx, options) {
   if (ctx.mode === "auto" || options?.confirmLargeSubagentLaunches === !1)
     return;
   let count = effectiveLargeSubagentLaunchCountForTurn(input, options?.assistantMessage);
-  if (count <= 2 || ctx.approvals.has(LARGE_SUBAGENT_LAUNCH_ACTION))
+  if (count <= LARGE_SUBAGENT_LAUNCH_THRESHOLD || ctx.approvals.has(LARGE_SUBAGENT_LAUNCH_ACTION))
     return;
   let turnKey = options?.assistantMessage, cached = turnKey ? turnLargeLaunchDecisions.get(turnKey) : void 0;
   if (cached)
@@ -608,6 +611,7 @@ async function gateToolCall(toolName, input, cwd, sessionId, options) {
 }
 
 export {
+  resolveSubagentRequestParams,
   READ_ONLY_MODE_ADDENDUM,
   PERMISSION_MODES,
   nextPermissionMode,
@@ -615,6 +619,7 @@ export {
   restorePermissionModeAfterPlan,
   NO_HANDLER_REASON,
   createPermissionContext,
+  initializePermissionContext,
   deletePermissionContext,
   getPermissionMode,
   setPermissionMode,