@cryer/star-cli 0.3.13 → 0.3.14

package/dist/{chunk-6PLZ3FLG.js → chunk-2ISBRSBA.js}

@@ -125,163 +125,6 @@ function formatAgentTaskUpdate(task) {
   return text;
 }
 
-// src/core/http-error.ts
-function responseBodyOf(error) {
-  const body = error.responseBody;
-  return typeof body === "string" && body.length > 0 ? body : void 0;
-}
-
-// src/core/image.ts
-var MAX_IMAGE_DIMENSION = 2e3;
-var OVERSIZED_IMAGE_FALLBACK_BYTES = 5 * 1024 * 1024;
-var IMAGE_REMOVED_PLACEHOLDER = "[image removed: too large for the model]";
-var IMAGE_UNSUPPORTED_PLACEHOLDER = "[image removed: the model cannot read images]";
-var PNG_SIGNATURE = [137, 80, 78, 71, 13, 10, 26, 10];
-function probePng(buf) {
-  if (buf.length < 24) return null;
-  for (let i = 0; i < PNG_SIGNATURE.length; i++) {
-    if (buf[i] !== PNG_SIGNATURE[i]) return null;
-  }
-  if (buf.toString("ascii", 12, 16) !== "IHDR") return null;
-  return { width: buf.readUInt32BE(16), height: buf.readUInt32BE(20) };
-}
-var JPEG_SOF_MARKERS = /* @__PURE__ */ new Set([
-  192,
-  193,
-  194,
-  195,
-  197,
-  198,
-  199,
-  201,
-  202,
-  203,
-  205,
-  206,
-  207
-]);
-function probeJpeg(buf) {
-  if (buf.length < 4 || buf[0] !== 255 || buf[1] !== 216) return null;
-  let offset = 2;
-  while (offset + 3 < buf.length) {
-    if (buf[offset] !== 255) return null;
-    const marker = buf[offset + 1];
-    if (marker === void 0) return null;
-    if (marker === 216 || marker === 1 || marker >= 208 && marker <= 215) {
-      offset += 2;
-      continue;
-    }
-    const length = buf.readUInt16BE(offset + 2);
-    if (length < 2) return null;
-    if (JPEG_SOF_MARKERS.has(marker)) {
-      if (offset + 9 > buf.length) return null;
-      return { height: buf.readUInt16BE(offset + 5), width: buf.readUInt16BE(offset + 7) };
-    }
-    offset += 2 + length;
-  }
-  return null;
-}
-function probeGif(buf) {
-  if (buf.length < 10) return null;
-  const signature = buf.toString("ascii", 0, 6);
-  if (signature !== "GIF87a" && signature !== "GIF89a") return null;
-  return { width: buf.readUInt16LE(6), height: buf.readUInt16LE(8) };
-}
-function probeWebp(buf) {
-  if (buf.length < 30) return null;
-  if (buf.toString("ascii", 0, 4) !== "RIFF" || buf.toString("ascii", 8, 12) !== "WEBP") {
-    return null;
-  }
-  const chunk = buf.toString("ascii", 12, 16);
-  if (chunk === "VP8X") {
-    return { width: 1 + buf.readUIntLE(24, 3), height: 1 + buf.readUIntLE(27, 3) };
-  }
-  if (chunk === "VP8 ") {
-    return {
-      width: buf.readUInt16LE(26) & 16383,
-      height: buf.readUInt16LE(28) & 16383
-    };
-  }
-  if (chunk === "VP8L") {
-    if (buf[20] !== 47) return null;
-    const b1 = buf[21];
-    const b2 = buf[22];
-    const b3 = buf[23];
-    const b4 = buf[24];
-    return {
-      width: 1 + ((b2 & 63) << 8 | b1),
-      height: 1 + ((b4 & 15) << 10 | b3 << 2 | (b2 & 192) >> 6)
-    };
-  }
-  return null;
-}
-function probeImageDimensions(buf) {
-  return probePng(buf) ?? probeJpeg(buf) ?? probeGif(buf) ?? probeWebp(buf);
-}
-var IMAGE_SIZE_KEYWORDS = /too[\s-]*(large|big)|exceeds?|dimensions?|resolution|size\s*limit|max(?:imum)?[\s-]*size/i;
-function isOversizedImageError(error) {
-  const status = error.statusCode;
-  if (status === void 0 || status < 400 || status >= 500) return false;
-  const text = [error.message, responseBodyOf(error)].filter((part) => typeof part === "string").join("\n");
-  return /image/i.test(text) && IMAGE_SIZE_KEYWORDS.test(text);
-}
-var VISION_UNSUPPORTED_KEYWORDS = /vision\s*encoder|can(?:not|'t) (?:read|process|handle|accept) images?|does(?:\s*not|n't) support (?:image|vision|multimodal)|images?(?:\s*input)? (?:are|is) not supported|not a vision|no vision (?:capability|support|encoder)|multimodal(?:\s*input)? (?:is )?not supported/i;
-function isVisionUnsupportedError(error) {
-  const status = error.statusCode;
-  if (status === void 0 || status < 400 || status >= 500) return false;
-  const text = [error.message, responseBodyOf(error)].filter((part) => typeof part === "string").join("\n");
-  return /image|vision|multimodal/i.test(text) && VISION_UNSUPPORTED_KEYWORDS.test(text);
-}
-function imagePartBytes(image) {
-  if (typeof image === "string") {
-    const base64 = image.startsWith("data:") ? image.slice(image.indexOf(",") + 1) : image;
-    try {
-      return Buffer.from(base64, "base64");
-    } catch {
-      return null;
-    }
-  }
-  if (image instanceof Uint8Array) return Buffer.from(image);
-  return null;
-}
-function isOversizedImageData(buf) {
-  const dims = probeImageDimensions(buf);
-  if (dims) return Math.max(dims.width, dims.height) > MAX_IMAGE_DIMENSION;
-  return buf.length > OVERSIZED_IMAGE_FALLBACK_BYTES;
-}
-function stripOversizedImages(messages) {
-  let removed = 0;
-  const result = messages.map((message) => {
-    if (!Array.isArray(message.content)) return message;
-    let changed = false;
-    const content = message.content.map((part) => {
-      if (part.type !== "image") return part;
-      const bytes = imagePartBytes(part.image);
-      if (!bytes || !isOversizedImageData(bytes)) return part;
-      changed = true;
-      removed++;
-      return { type: "text", text: IMAGE_REMOVED_PLACEHOLDER };
-    });
-    return changed ? { ...message, content } : message;
-  });
-  return { messages: removed > 0 ? result : messages, removed };
-}
-function stripAllImages(messages) {
-  let removed = 0;
-  const result = messages.map((message) => {
-    if (!Array.isArray(message.content)) return message;
-    let changed = false;
-    const content = message.content.map((part) => {
-      if (part.type !== "image") return part;
-      changed = true;
-      removed++;
-      return { type: "text", text: IMAGE_UNSUPPORTED_PLACEHOLDER };
-    });
-    return changed ? { ...message, content } : message;
-  });
-  return { messages: removed > 0 ? result : messages, removed };
-}
-
 // src/config/paths.ts
 import os from "os";
 import path from "path";
@@ -390,6 +233,29 @@ function registerSensitivePatterns(patterns) {
   extraPatterns.length = 0;
   extraPatterns.push(...patterns.map((p) => p.trim()).filter((p) => p.length > 0));
 }
+function sensitiveExcludePatterns() {
+  return [
+    ".env",
+    ".env.*",
+    "!.env.example",
+    "!.env.sample",
+    "!.env.template",
+    "id_rsa",
+    "id_dsa",
+    "id_ecdsa",
+    "id_ed25519",
+    ".npmrc",
+    ".netrc",
+    ".pgpass",
+    "*.pem",
+    "*.key",
+    "*.p12",
+    "*.pfx",
+    "**/.aws/credentials",
+    "**/.kube/config",
+    ...extraPatterns
+  ];
+}
 function globToRegExp(pattern) {
   const escaped = pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*");
   return new RegExp(`^${escaped}$`, "i");
@@ -817,6 +683,163 @@ var TaskManager = class extends EventEmitter2 {
 };
 var defaultTaskManager = new TaskManager();
 
+// src/core/http-error.ts
+function responseBodyOf(error) {
+  const body = error.responseBody;
+  return typeof body === "string" && body.length > 0 ? body : void 0;
+}
+
+// src/core/image.ts
+var MAX_IMAGE_DIMENSION = 2e3;
+var OVERSIZED_IMAGE_FALLBACK_BYTES = 5 * 1024 * 1024;
+var IMAGE_REMOVED_PLACEHOLDER = "[image removed: too large for the model]";
+var IMAGE_UNSUPPORTED_PLACEHOLDER = "[image removed: the model cannot read images]";
+var PNG_SIGNATURE = [137, 80, 78, 71, 13, 10, 26, 10];
+function probePng(buf) {
+  if (buf.length < 24) return null;
+  for (let i = 0; i < PNG_SIGNATURE.length; i++) {
+    if (buf[i] !== PNG_SIGNATURE[i]) return null;
+  }
+  if (buf.toString("ascii", 12, 16) !== "IHDR") return null;
+  return { width: buf.readUInt32BE(16), height: buf.readUInt32BE(20) };
+}
+var JPEG_SOF_MARKERS = /* @__PURE__ */ new Set([
+  192,
+  193,
+  194,
+  195,
+  197,
+  198,
+  199,
+  201,
+  202,
+  203,
+  205,
+  206,
+  207
+]);
+function probeJpeg(buf) {
+  if (buf.length < 4 || buf[0] !== 255 || buf[1] !== 216) return null;
+  let offset = 2;
+  while (offset + 3 < buf.length) {
+    if (buf[offset] !== 255) return null;
+    const marker = buf[offset + 1];
+    if (marker === void 0) return null;
+    if (marker === 216 || marker === 1 || marker >= 208 && marker <= 215) {
+      offset += 2;
+      continue;
+    }
+    const length = buf.readUInt16BE(offset + 2);
+    if (length < 2) return null;
+    if (JPEG_SOF_MARKERS.has(marker)) {
+      if (offset + 9 > buf.length) return null;
+      return { height: buf.readUInt16BE(offset + 5), width: buf.readUInt16BE(offset + 7) };
+    }
+    offset += 2 + length;
+  }
+  return null;
+}
+function probeGif(buf) {
+  if (buf.length < 10) return null;
+  const signature = buf.toString("ascii", 0, 6);
+  if (signature !== "GIF87a" && signature !== "GIF89a") return null;
+  return { width: buf.readUInt16LE(6), height: buf.readUInt16LE(8) };
+}
+function probeWebp(buf) {
+  if (buf.length < 30) return null;
+  if (buf.toString("ascii", 0, 4) !== "RIFF" || buf.toString("ascii", 8, 12) !== "WEBP") {
+    return null;
+  }
+  const chunk = buf.toString("ascii", 12, 16);
+  if (chunk === "VP8X") {
+    return { width: 1 + buf.readUIntLE(24, 3), height: 1 + buf.readUIntLE(27, 3) };
+  }
+  if (chunk === "VP8 ") {
+    return {
+      width: buf.readUInt16LE(26) & 16383,
+      height: buf.readUInt16LE(28) & 16383
+    };
+  }
+  if (chunk === "VP8L") {
+    if (buf[20] !== 47) return null;
+    const b1 = buf[21];
+    const b2 = buf[22];
+    const b3 = buf[23];
+    const b4 = buf[24];
+    return {
+      width: 1 + ((b2 & 63) << 8 | b1),
+      height: 1 + ((b4 & 15) << 10 | b3 << 2 | (b2 & 192) >> 6)
+    };
+  }
+  return null;
+}
+function probeImageDimensions(buf) {
+  return probePng(buf) ?? probeJpeg(buf) ?? probeGif(buf) ?? probeWebp(buf);
+}
+var IMAGE_SIZE_KEYWORDS = /too[\s-]*(large|big)|exceeds?|dimensions?|resolution|size\s*limit|max(?:imum)?[\s-]*size/i;
+function isOversizedImageError(error) {
+  const status = error.statusCode;
+  if (status === void 0 || status < 400 || status >= 500) return false;
+  const text = [error.message, responseBodyOf(error)].filter((part) => typeof part === "string").join("\n");
+  return /image/i.test(text) && IMAGE_SIZE_KEYWORDS.test(text);
+}
+var VISION_UNSUPPORTED_KEYWORDS = /vision\s*encoder|can(?:not|'t) (?:read|process|handle|accept) images?|does(?:\s*not|n't) support (?:image|vision|multimodal)|images?(?:\s*input)? (?:are|is) not supported|not a vision|no vision (?:capability|support|encoder)|multimodal(?:\s*input)? (?:is )?not supported/i;
+function isVisionUnsupportedError(error) {
+  const status = error.statusCode;
+  if (status === void 0 || status < 400 || status >= 500) return false;
+  const text = [error.message, responseBodyOf(error)].filter((part) => typeof part === "string").join("\n");
+  return /image|vision|multimodal/i.test(text) && VISION_UNSUPPORTED_KEYWORDS.test(text);
+}
+function imagePartBytes(image) {
+  if (typeof image === "string") {
+    const base64 = image.startsWith("data:") ? image.slice(image.indexOf(",") + 1) : image;
+    try {
+      return Buffer.from(base64, "base64");
+    } catch {
+      return null;
+    }
+  }
+  if (image instanceof Uint8Array) return Buffer.from(image);
+  return null;
+}
+function isOversizedImageData(buf) {
+  const dims = probeImageDimensions(buf);
+  if (dims) return Math.max(dims.width, dims.height) > MAX_IMAGE_DIMENSION;
+  return buf.length > OVERSIZED_IMAGE_FALLBACK_BYTES;
+}
+function stripOversizedImages(messages) {
+  let removed = 0;
+  const result = messages.map((message) => {
+    if (!Array.isArray(message.content)) return message;
+    let changed = false;
+    const content = message.content.map((part) => {
+      if (part.type !== "image") return part;
+      const bytes = imagePartBytes(part.image);
+      if (!bytes || !isOversizedImageData(bytes)) return part;
+      changed = true;
+      removed++;
+      return { type: "text", text: IMAGE_REMOVED_PLACEHOLDER };
+    });
+    return changed ? { ...message, content } : message;
+  });
+  return { messages: removed > 0 ? result : messages, removed };
+}
+function stripAllImages(messages) {
+  let removed = 0;
+  const result = messages.map((message) => {
+    if (!Array.isArray(message.content)) return message;
+    let changed = false;
+    const content = message.content.map((part) => {
+      if (part.type !== "image") return part;
+      changed = true;
+      removed++;
+      return { type: "text", text: IMAGE_UNSUPPORTED_PLACEHOLDER };
+    });
+    return changed ? { ...message, content } : message;
+  });
+  return { messages: removed > 0 ? result : messages, removed };
+}
+
 // src/tools/fs/snapshots.ts
 import { randomUUID } from "crypto";
 import { mkdir, readFile, rm, stat, writeFile } from "fs/promises";
@@ -876,6 +899,7 @@ async function captureSnapshot(filePath, toolName, snapshotContext) {
   let content = null;
   let existed = false;
   let contentTooLarge = false;
+  let captureFailed = false;
   const st = await stat(filePath).catch(() => null);
   if (st?.isFile()) {
     existed = true;
@@ -885,7 +909,7 @@ async function captureSnapshot(filePath, toolName, snapshotContext) {
       try {
         content = await readFile(filePath);
       } catch {
-        existed = false;
+        captureFailed = true;
       }
     }
   }
@@ -895,6 +919,7 @@ async function captureSnapshot(filePath, toolName, snapshotContext) {
     existed,
     content,
     contentTooLarge: contentTooLarge || void 0,
+    captureFailed: captureFailed || void 0,
     toolName,
     timestamp: Date.now(),
     turn: snapshotContext?.turn ?? activeTurn,
@@ -919,7 +944,14 @@ async function pushSnapshot(snapshot) {
   }
 }
 async function removeFromStore(ids) {
-  if (ids.length > 0) await hooks?.onRemove?.(ids);
+  if (ids.length === 0) return;
+  try {
+    await hooks?.onRemove?.(ids);
+  } catch (err) {
+    if (process.env.STAR_DEBUG) {
+      console.error("[star] failed to remove snapshot checkpoint:", err);
+    }
+  }
 }
 function listSnapshots() {
   return [...stack];
@@ -1045,6 +1077,7 @@ async function rewindToSnapshot(id, includeSubagent = false) {
 }
 
 // src/tools/todo.ts
+import { randomUUID as randomUUID2 } from "crypto";
 import { mkdir as mkdir2, readFile as readFile2, rename, rm as rm2, writeFile as writeFile2 } from "fs/promises";
 import path4 from "path";
 import { z as z2 } from "zod";
@@ -1074,10 +1107,16 @@ function setTodoSession(id) {
 }
 var TodoStore = class {
   items = /* @__PURE__ */ new Map();
+  persistence;
+  tmpSuffix = `${process.pid}-${randomUUID2()}`;
+  saveQueue = Promise.resolve();
   // Bumped on every replace() — the agent loop watches it to detect
   // todo_write landings, so a list left untouched for many steps (with open
   // items) can be flagged as stale and the model reminded to reconcile it.
   revisionValue = 0;
+  constructor(options = {}) {
+    this.persistence = options.persistence ?? "file";
+  }
   get revision() {
     return this.revisionValue;
   }
@@ -1092,6 +1131,7 @@ var TodoStore = class {
     }
   }
   async load(cwd, sessionId) {
+    if (this.persistence === "memory") return;
     let raw;
     try {
       raw = await readFile2(fileFor(cwd), "utf8");
@@ -1116,23 +1156,27 @@ var TodoStore = class {
     } catch {
     }
   }
-  // Atomic write (tmp + rename): a crash or failed save can never leave a
-  // truncated todos.json behind. An empty or fully completed list has no
-  // resume value — rehydrating it would only restore finished work — so the
-  // file is deleted instead of persisted.
-  async save(cwd) {
-    if (!persistGuard()) {
-      return;
-    }
+  // Atomic write (unique tmp + rename) with per-store serialization: parallel
+  // saves cannot share a temp file or finish out of order. An empty or fully
+  // completed list has no resume value, so the file is deleted instead.
+  save(cwd) {
+    if (this.persistence === "memory" || !persistGuard()) return Promise.resolve();
     const items = this.list();
+    const sessionId = boundSessionId;
+    const saving = this.saveQueue.catch(() => {
+    }).then(() => this.saveNow(cwd, items, sessionId));
+    this.saveQueue = saving;
+    return saving;
+  }
+  async saveNow(cwd, items, sessionId) {
     const file = fileFor(cwd);
     if (items.length === 0 || items.every((it) => it.status === "done")) {
       await rm2(file, { force: true });
       return;
     }
     await mkdir2(path4.join(cwd, ".star"), { recursive: true });
-    const tmp = `${file}.tmp`;
-    await writeFile2(tmp, `${JSON.stringify({ sessionId: boundSessionId, items }, null, 2)}
+    const tmp = `${file}.${this.tmpSuffix}.tmp`;
+    await writeFile2(tmp, `${JSON.stringify({ sessionId, items }, null, 2)}
 `);
     await rename(tmp, file);
   }
@@ -1209,7 +1253,7 @@ function createTodoTools(store = defaultStore) {
 
 // src/core/image-resize.ts
 import { execFile } from "child_process";
-import { randomUUID as randomUUID2 } from "crypto";
+import { randomUUID as randomUUID3 } from "crypto";
 import { readFile as readFile3, unlink, writeFile as writeFile3 } from "fs/promises";
 import os3 from "os";
 import path5 from "path";
@@ -1298,8 +1342,8 @@ async function downsampleImageIfNeeded(image) {
   if (!dims || Math.max(dims.width, dims.height) <= MAX_IMAGE_DIMENSION) {
     return { image, oversized: false, resized: false };
   }
-  const inputFile = path5.join(os3.tmpdir(), `star-image-${randomUUID2()}.src`);
-  const outputFile = path5.join(os3.tmpdir(), `star-image-${randomUUID2()}.png`);
+  const inputFile = path5.join(os3.tmpdir(), `star-image-${randomUUID3()}.src`);
+  const outputFile = path5.join(os3.tmpdir(), `star-image-${randomUUID3()}.png`);
   try {
     const [hasConvert, hasFfmpeg] = process.platform === "linux" ? await Promise.all([commandExists("convert"), commandExists("ffmpeg")]) : [false, false];
     const plan = resizeImagePlan(process.platform, inputFile, outputFile, MAX_IMAGE_DIMENSION, {
@@ -1377,6 +1421,21 @@ async function walkFiles(root, skipDirs = SKIP_DIRS, options = {}) {
   const out = [];
   const limit = createLimiter(WALK_CONCURRENCY);
   const signal = options.signal;
+  let stopped = false;
+  let callbackChain = Promise.resolve();
+  const emitBatch = (files) => {
+    if (!options.onBatch || files.length === 0) return callbackChain;
+    files.sort((a, b) => a.rel < b.rel ? -1 : a.rel > b.rel ? 1 : 0);
+    callbackChain = callbackChain.then(async () => {
+      if (stopped) return;
+      if (await options.onBatch?.(files) === false) stopped = true;
+    });
+    return callbackChain;
+  };
+  const collect = (file, batch) => {
+    batch.push(file);
+    if (options.collect !== false) out.push(file);
+  };
   const caseKey = (p) => process.platform === "win32" ? p.toLowerCase() : p;
   const visited = /* @__PURE__ */ new Set();
   const rootReal = await realpath(root).catch(() => null);
@@ -1404,7 +1463,7 @@ async function walkFiles(root, skipDirs = SKIP_DIRS, options = {}) {
     return realKey === boundaryKey || realKey.startsWith(`${boundaryKey}${path6.sep}`) ? real : null;
   }
   async function walkDir(dir, relBase, parentLayers) {
-    if (signal?.aborted) {
+    if (signal?.aborted || stopped) {
       return;
     }
     const entries = await limit(() => readdir(dir, { withFileTypes: true })).catch(() => null);
@@ -1419,8 +1478,9 @@ async function walkFiles(root, skipDirs = SKIP_DIRS, options = {}) {
       }
     }
     const subs = [];
+    const batch = [];
     for (const entry of entries) {
-      if (signal?.aborted) {
+      if (signal?.aborted || stopped) {
         break;
       }
       const abs = path6.join(dir, entry.name);
@@ -1463,22 +1523,26 @@ async function walkFiles(root, skipDirs = SKIP_DIRS, options = {}) {
           continue;
         }
         if (options.withMtime === false) {
-          out.push(
-            resolved === void 0 ? { abs, rel, mtimeMs: 0 } : { abs, rel, mtimeMs: 0, resolved }
+          collect(
+            resolved === void 0 ? { abs, rel, mtimeMs: 0 } : { abs, rel, mtimeMs: 0, resolved },
+            batch
           );
           continue;
         }
         const st = targetStat ?? await limit(() => stat2(abs)).catch(() => null);
         if (st) {
-          out.push(
-            resolved === void 0 ? { abs, rel, mtimeMs: st.mtimeMs } : { abs, rel, mtimeMs: st.mtimeMs, resolved }
+          collect(
+            resolved === void 0 ? { abs, rel, mtimeMs: st.mtimeMs } : { abs, rel, mtimeMs: st.mtimeMs, resolved },
+            batch
           );
         }
       }
     }
+    await emitBatch(batch);
     await Promise.all(subs);
   }
   await walkDir(root, "", []);
+  await callbackChain;
   out.sort((a, b) => a.rel < b.rel ? -1 : a.rel > b.rel ? 1 : 0);
   return { files: out, aborted: signal?.aborted ?? false };
 }
@@ -1677,6 +1741,10 @@ function createIgnorePredicate(cwd) {
 
 // src/tools/web/fetch.ts
 import dns from "dns";
+import http from "http";
+import https from "https";
+import { BlockList, isIPv4, isIPv6 } from "net";
+import { Readable } from "stream";
 import { z as z3 } from "zod";
 var DEFAULT_MAX_CHARS = 2e4;
 var MAX_BYTES = 2 * 1024 * 1024;
@@ -1696,47 +1764,121 @@ var configuredAllowPrivateHosts = false;
 function setWebFetchAllowPrivateHosts(allow) {
   configuredAllowPrivateHosts = allow;
 }
-function isPrivateIpv4(ip) {
-  const parts = ip.split(".").map(Number);
-  if (parts.length !== 4 || parts.some((n) => !Number.isInteger(n) || n < 0 || n > 255)) {
-    return false;
-  }
-  const [a = 0, b = 0] = parts;
-  return a === 0 || a === 10 || a === 127 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168 || a === 169 && b === 254;
+var reservedIpv4 = new BlockList();
+for (const [address, prefix] of [
+  ["0.0.0.0", 8],
+  ["10.0.0.0", 8],
+  ["100.64.0.0", 10],
+  ["127.0.0.0", 8],
+  ["169.254.0.0", 16],
+  ["172.16.0.0", 12],
+  ["192.0.0.0", 24],
+  ["192.0.2.0", 24],
+  ["192.88.99.0", 24],
+  ["192.168.0.0", 16],
+  ["198.18.0.0", 15],
+  ["198.51.100.0", 24],
+  ["203.0.113.0", 24],
+  ["224.0.0.0", 4],
+  ["240.0.0.0", 4]
+]) {
+  reservedIpv4.addSubnet(address, prefix, "ipv4");
+}
+var reservedIpv6 = new BlockList();
+for (const [address, prefix] of [
+  ["::", 96],
+  ["100::", 64],
+  ["64:ff9b::", 96],
+  ["64:ff9b:1::", 48],
+  ["2001::", 23],
+  ["2001:db8::", 32],
+  ["2002::", 16],
+  ["fc00::", 7],
+  ["fe80::", 10],
+  ["fec0::", 10],
+  ["ff00::", 8]
+]) {
+  reservedIpv6.addSubnet(address, prefix, "ipv6");
+}
+function mappedIpv4(ip) {
+  const dotted = /^(?:::|(?:0:){5})ffff:(\d+\.\d+\.\d+\.\d+)$/i.exec(ip);
+  if (dotted?.[1]) return dotted[1];
+  const hexadecimal = /^(?:::|(?:0:){5})ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i.exec(ip);
+  if (!hexadecimal) return null;
+  const value = Number.parseInt(hexadecimal[1] ?? "0", 16) * 65536 + Number.parseInt(hexadecimal[2] ?? "0", 16);
+  return [value >>> 24 & 255, value >>> 16 & 255, value >>> 8 & 255, value & 255].join(".");
 }
 function isPrivateAddress(address) {
-  let ip = address.toLowerCase();
-  if (ip.startsWith("::ffff:")) ip = ip.slice("::ffff:".length);
-  if (ip.includes(".")) return isPrivateIpv4(ip);
-  if (ip === "::1" || ip === "::") return true;
-  if (ip.startsWith("fc") || ip.startsWith("fd")) return true;
-  if (/^fe[89ab]/.test(ip)) return true;
-  return false;
+  const ip = address.replace(/^\[|\]$/g, "").split("%")[0]?.toLowerCase() ?? "";
+  const mapped = mappedIpv4(ip);
+  if (mapped !== null) return !isIPv4(mapped) || reservedIpv4.check(mapped, "ipv4");
+  if (isIPv4(ip)) return reservedIpv4.check(ip, "ipv4");
+  if (isIPv6(ip)) return reservedIpv6.check(ip, "ipv6");
+  return true;
 }
 function isLocalHostname(hostname) {
   const h = hostname.toLowerCase().replace(/\.$/, "");
   return h === "localhost" || h.endsWith(".localhost") || h.endsWith(".local") || h.endsWith(".internal");
 }
-async function privateHostRefusal(url, resolve) {
+async function validateTarget(url, resolve) {
   const hostname = url.hostname.replace(/^\[|\]$/g, "");
   if (isLocalHostname(hostname)) {
-    return `"${hostname}" is a local/internal hostname`;
+    return { refusal: `"${hostname}" is a local/internal hostname` };
   }
   let addresses;
   try {
     addresses = await resolve(hostname);
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    return `could not resolve "${hostname}" (${message})`;
+    return { refusal: `could not resolve "${hostname}" (${message})` };
   }
   const blocked = addresses.find(isPrivateAddress);
   if (blocked !== void 0) {
-    return `"${hostname}" resolves to a private/reserved address (${blocked})`;
-  }
-  if (addresses.length === 0) {
-    return `could not resolve "${hostname}"`;
-  }
-  return null;
+    return { refusal: `"${hostname}" resolves to a private/reserved address (${blocked})` };
+  }
+  const address = addresses[0];
+  if (address === void 0) {
+    return { refusal: `could not resolve "${hostname}"` };
+  }
+  return { target: { address, family: isIPv4(address) ? 4 : 6 } };
+}
+function nativeFetch(url, signal, target) {
+  return new Promise((resolve, reject) => {
+    const transport = url.protocol === "https:" ? https : http;
+    const hostname = url.hostname.replace(/^\[|\]$/g, "");
+    const request = transport.request(url, {
+      method: "GET",
+      signal,
+      servername: isIPv6(hostname) || isIPv4(hostname) ? "" : hostname,
+      lookup: target ? (_hostname, options, callback) => {
+        if (options.all) {
+          callback(null, [{ address: target.address, family: target.family }]);
+        } else {
+          callback(null, target.address, target.family);
+        }
+      } : void 0,
+      headers: { "accept-encoding": "identity" }
+    });
+    request.once("error", reject);
+    request.once("response", (incoming) => {
+      const headers = new Headers();
+      for (const [name, value] of Object.entries(incoming.headers)) {
+        if (Array.isArray(value)) {
+          for (const item of value) headers.append(name, item);
+        } else if (value !== void 0) {
+          headers.set(name, value);
+        }
+      }
+      resolve(
+        new Response(Readable.toWeb(incoming), {
+          status: incoming.statusCode ?? 500,
+          statusText: incoming.statusMessage,
+          headers
+        })
+      );
+    });
+    request.end();
+  });
 }
 function safeCodePoint(n, raw) {
   if (!Number.isInteger(n) || n < 0 || n > 1114111) {
@@ -1881,7 +2023,7 @@ function truncate(s, maxChars) {
 }
 function createWebFetchTool(options = {}) {
   const resolve = options.resolver ?? defaultResolver;
-  const fetchImpl = options.fetchImpl ?? ((...args) => fetch(...args));
+  const fetchImpl = options.fetchImpl;
   const allowPrivate = () => options.allowPrivateHosts ?? configuredAllowPrivateHosts;
   return {
     name: "web_fetch",
@@ -1901,20 +2043,26 @@ function createWebFetchTool(options = {}) {
           isError: true
         };
       }
-      if (!allowPrivate()) {
-        const refusal = await privateHostRefusal(url, resolve);
-        if (refusal !== null) {
-          return { content: `ERROR: refused to fetch ${args.url}: ${refusal}`, isError: true };
-        }
-      }
       const maxChars = args.maxChars ?? DEFAULT_MAX_CHARS;
       const timeoutSignal = AbortSignal.timeout(TIMEOUT_MS);
       const signal = ctx.abortSignal ? AbortSignal.any([timeoutSignal, ctx.abortSignal]) : timeoutSignal;
       let res;
       let current = url;
       for (let hops = 0; ; hops += 1) {
+        let target;
+        if (!allowPrivate()) {
+          const validated = await validateTarget(current, resolve);
+          if ("refusal" in validated) {
+            const prefix = hops === 0 ? "refused to fetch" : "refused redirect to";
+            return {
+              content: `ERROR: ${prefix} ${current.href}: ${validated.refusal}`,
+              isError: true
+            };
+          }
+          target = validated.target;
+        }
         try {
-          res = await fetchImpl(current, { signal, redirect: "manual" });
+          res = fetchImpl ? await fetchImpl(current, { signal, redirect: "manual" }) : await nativeFetch(current, signal, target);
         } catch (err) {
           if (ctx.abortSignal?.aborted) {
             return { content: "ERROR: request aborted", isError: true };
@@ -1944,15 +2092,6 @@ function createWebFetchTool(options = {}) {
               isError: true
             };
           }
-          if (!allowPrivate()) {
-            const refusal = await privateHostRefusal(next, resolve);
-            if (refusal !== null) {
-              return {
-                content: `ERROR: refused redirect to ${next.href}: ${refusal}`,
-                isError: true
-              };
-            }
-          }
           current = next;
           continue;
         }
@@ -2006,6 +2145,23 @@ var webFetchTool = createWebFetchTool();
 export {
   defaultAgentTasks,
   formatAgentTaskUpdate,
+  starHome,
+  globalConfigPath,
+  sessionsDir,
+  userMemoryPath,
+  gitTreesDir,
+  envFilePath,
+  projectConfigPath,
+  loadEnvFile,
+  upsertEnvContent,
+  registerSensitivePatterns,
+  sensitiveExcludePatterns,
+  isSensitivePath,
+  isSecretEnvName,
+  MAX_OUTPUT,
+  resolveShell,
+  bashTool,
+  defaultTaskManager,
   responseBodyOf,
   MAX_IMAGE_DIMENSION,
   probeImageDimensions,
@@ -2014,31 +2170,15 @@ export {
   stripOversizedImages,
   stripAllImages,
   downsampleImageIfNeeded,
-  registerSensitivePatterns,
-  isSensitivePath,
-  isSecretEnvName,
   SKIP_DIRS,
   WALK_CONCURRENCY,
   realpathForCheck,
   walkFiles,
   matchesGlob,
   createIgnorePredicate,
-  starHome,
-  globalConfigPath,
-  sessionsDir,
-  userMemoryPath,
-  gitTreesDir,
-  envFilePath,
-  projectConfigPath,
   setWebFetchAllowPrivateHosts,
   decodeEntities,
   webFetchTool,
-  loadEnvFile,
-  upsertEnvContent,
-  MAX_OUTPUT,
-  resolveShell,
-  bashTool,
-  defaultTaskManager,
   MAX_SNAPSHOT_CONTENT_BYTES,
   setSnapshotHooks,
   nextSnapshotId,
@@ -2066,4 +2206,4 @@ export {
   resetTodos,
   createTodoTools
 };
-//# sourceMappingURL=chunk-6PLZ3FLG.js.map
+//# sourceMappingURL=chunk-2ISBRSBA.js.map