@blockrun/runcode 2.5.4 → 2.5.6

package/dist/agent/optimize.js

@@ -9,10 +9,10 @@
  * 5. Pre-compact stripping — remove images/docs before summarization
  */
 // ─── Constants ─────────────────────────────────────────────────────────────
-/** Max chars per individual tool result before truncation */
-const MAX_TOOL_RESULT_CHARS = 50_000;
+/** Max chars per individual tool result before truncation (history-level safety net) */
+const MAX_TOOL_RESULT_CHARS = 32_000;
 /** Max aggregate tool result chars per user message */
-const MAX_TOOL_RESULTS_PER_MESSAGE_CHARS = 200_000;
+const MAX_TOOL_RESULTS_PER_MESSAGE_CHARS = 100_000;
 /** Preview size when truncating */
 const PREVIEW_CHARS = 2_000;
 /** Default max_tokens (low to save output slot reservation) */

package/dist/tools/bash.js

@@ -2,7 +2,8 @@
  * Bash capability — execute shell commands with timeout and output capture.
  */
 import { spawn } from 'node:child_process';
-const MAX_OUTPUT_BYTES = 512 * 1024; // 512KB output cap
+const MAX_OUTPUT_BYTES = 512 * 1024; // 512KB capture buffer (prevents OOM)
+const MAX_RETURN_CHARS = 32_000; // 32KB return cap (~8,000 tokens) — prevents context bloat
 const DEFAULT_TIMEOUT_MS = 120_000; // 2 minutes
 async function execute(input, ctx) {
     const { command, timeout } = input;
@@ -99,7 +100,21 @@ async function execute(input, ctx) {
                 result += stderr;
             }
             if (truncated) {
-                result += '\n\n... (output truncated at 512KB)';
+                result += '\n\n... (output truncated — command produced >512KB)';
+            }
+            // Cap returned output to prevent context bloat.
+            // Keep the LAST part (most relevant for errors/test failures/build output).
+            if (result.length > MAX_RETURN_CHARS) {
+                const lines = result.split('\n');
+                let trimmed = '';
+                for (let i = lines.length - 1; i >= 0; i--) {
+                    const candidate = lines[i] + '\n' + trimmed;
+                    if (candidate.length > MAX_RETURN_CHARS)
+                        break;
+                    trimmed = candidate;
+                }
+                const omitted = result.length - trimmed.length;
+                result = `... (${omitted.toLocaleString()} chars omitted from start)\n${trimmed}`;
             }
             if (killed) {
                 resolve({

package/dist/tools/glob.js

@@ -3,7 +3,8 @@
  */
 import fs from 'node:fs';
 import path from 'node:path';
-const MAX_RESULTS = 500;
+const MAX_RESULTS = 200;
+const MAX_OUTPUT_CHARS = 12_000; // ~3,000 tokens — prevents huge glob results from blowing up context
 /**
  * Simple glob matcher supporting *, **, and ? wildcards.
  * No external dependencies.
@@ -115,7 +116,23 @@ async function execute(input, ctx) {
     }
     let output = sorted.join('\n');
     if (sorted.length >= MAX_RESULTS) {
-        output += `\n\n... (limited to ${MAX_RESULTS} results)`;
+        output += `\n\n... (limited to ${MAX_RESULTS} results. Use a more specific pattern to narrow results.)`;
+    }
+    // Cap total output length to prevent context bloat
+    if (output.length > MAX_OUTPUT_CHARS) {
+        const lines = output.split('\n');
+        let trimmed = '';
+        let count = 0;
+        for (const line of lines) {
+            if ((trimmed + line).length > MAX_OUTPUT_CHARS)
+                break;
+            trimmed += (trimmed ? '\n' : '') + line;
+            count++;
+        }
+        const remaining = lines.length - count;
+        if (remaining > 0) {
+            output = `${trimmed}\n... (${remaining} more paths not shown — use a more specific pattern)`;
+        }
     }
     return { output };
 }

package/dist/tools/grep.js

@@ -4,6 +4,7 @@
 import { execSync, execFileSync } from 'node:child_process';
 import fs from 'node:fs';
 import path from 'node:path';
+const MAX_GREP_OUTPUT_CHARS = 16_000; // ~4,000 tokens — prevents huge grep results
 let _hasRipgrep = null;
 function hasRipgrep() {
     if (_hasRipgrep !== null)
@@ -63,8 +64,8 @@ function runRipgrep(opts, searchPath, mode, limit) {
         args.push('-U', '--multiline-dotall');
     if (opts.glob)
         args.push(`--glob=${opts.glob}`);
-    // Always exclude common noise
-    args.push('--glob=!node_modules', '--glob=!.git', '--glob=!dist');
+    // Always exclude common noise + lock files (huge, rarely useful)
+    args.push('--glob=!node_modules', '--glob=!.git', '--glob=!dist', '--glob=!*.lock', '--glob=!package-lock.json', '--glob=!pnpm-lock.yaml');
     args.push('--', opts.pattern);
     args.push(searchPath);
     try {
@@ -79,6 +80,10 @@ function runRipgrep(opts, searchPath, mode, limit) {
         if (lines.length > limited.length) {
             output += `\n\n... (${lines.length - limited.length} more results, use head_limit to see more)`;
         }
+        // Cap total output to prevent context bloat
+        if (output.length > MAX_GREP_OUTPUT_CHARS) {
+            output = output.slice(0, MAX_GREP_OUTPUT_CHARS) + `\n... (output capped at ${MAX_GREP_OUTPUT_CHARS / 1000}KB — use more specific pattern or head_limit)`;
+        }
         return { output: output || 'No matches found' };
     }
     catch (err) {
@@ -113,7 +118,7 @@ function runNativeGrep(opts, searchPath, mode, limit) {
             .replace(/\*\*/, '*'); // Convert ** to * for flat matching
         args.push(`--include=${nativeGlob}`);
     }
-    args.push('--exclude-dir=node_modules', '--exclude-dir=.git', '--exclude-dir=dist');
+    args.push('--exclude-dir=node_modules', '--exclude-dir=.git', '--exclude-dir=dist', '--exclude=*.lock', '--exclude=package-lock.json', '--exclude=pnpm-lock.yaml');
     args.push('-e', opts.pattern, searchPath);
     try {
         const result = execFileSync('grep', args, {
@@ -127,6 +132,9 @@ function runNativeGrep(opts, searchPath, mode, limit) {
         if (lines.length > limited.length) {
             output += `\n\n... (${lines.length - limited.length} more results)`;
         }
+        if (output.length > MAX_GREP_OUTPUT_CHARS) {
+            output = output.slice(0, MAX_GREP_OUTPUT_CHARS) + `\n... (output capped at ${MAX_GREP_OUTPUT_CHARS / 1000}KB)`;
+        }
         return { output: output || 'No matches found' };
     }
     catch (err) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blockrun/runcode",
-  "version": "2.5.4",
+  "version": "2.5.6",
   "description": "RunCode — AI coding agent powered by 41+ models. Pay per use with USDC.",
   "type": "module",
   "bin": {