@cydm/pie 1.0.23 → 1.0.24

package/dist/chunks/chunk-QMIIW75M.js

@@ -0,0 +1,95 @@
+import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
+
+// src/session-preview-worker-protocol.ts
+var SESSION_PREVIEW_WORKER_PROTOCOL_VERSION = 1;
+var SESSION_PREVIEW_WORKER_INPUT_BYTES = 32 * 1024;
+var SESSION_PREVIEW_WORKER_OUTPUT_BYTES = 4 * 1024;
+var SESSION_PREVIEW_WORKER_TIMEOUT_MS = 6e4;
+var DURABLE_ROLES = /* @__PURE__ */ new Set(["main", "backup", "previous"]);
+function isFiniteNumber(value) {
+  return typeof value === "number" && Number.isFinite(value);
+}
+function isSessionPreviewWorkerRequest(value) {
+  if (!value || typeof value !== "object") return false;
+  const request = value;
+  if (request.version !== SESSION_PREVIEW_WORKER_PROTOCOL_VERSION || !Array.isArray(request.files)) return false;
+  if (request.files.length < 1 || request.files.length > 3) return false;
+  const seenRoles = /* @__PURE__ */ new Set();
+  for (const candidate of request.files) {
+    if (!candidate || typeof candidate !== "object") return false;
+    const file = candidate;
+    if (!DURABLE_ROLES.has(file.role) || seenRoles.has(file.role)) return false;
+    seenRoles.add(file.role);
+    if (typeof file.path !== "string" || file.path.length === 0) return false;
+    if (!isFiniteNumber(file.size) || file.size < 0) return false;
+    for (const key of ["mtimeMs", "ctimeMs", "dev", "ino"]) {
+      if (!isFiniteNumber(file[key])) return false;
+    }
+  }
+  return true;
+}
+function isSessionPreviewWorkerResponse(value) {
+  if (!value || typeof value !== "object") return false;
+  const response = value;
+  return response.version === SESSION_PREVIEW_WORKER_PROTOCOL_VERSION && (response.preview === null || typeof response.preview === "string");
+}
+
+// src/session-preview-utils.ts
+var MAX_SESSION_PREVIEW_ENTRIES = 50;
+var MAX_SESSION_PREVIEW_LENGTH = 120;
+function extractTextFromSessionContent(content) {
+  if (typeof content === "string") return content;
+  if (Array.isArray(content)) {
+    const parts = [];
+    for (const block of content) {
+      if (block && typeof block === "object" && block.type === "text") {
+        parts.push(block.text || "");
+      }
+    }
+    return parts.join(" ");
+  }
+  return "";
+}
+function normalizeSessionPreview(text) {
+  let normalized = "";
+  let pendingSpace = false;
+  for (let index = 0; index < text.length; index += 1) {
+    const char = text[index];
+    if (/\s/.test(char)) {
+      if (normalized) pendingSpace = true;
+      continue;
+    }
+    if (pendingSpace) {
+      normalized += " ";
+      pendingSpace = false;
+      if (normalized.length > MAX_SESSION_PREVIEW_LENGTH) break;
+    }
+    normalized += char;
+    if (normalized.length > MAX_SESSION_PREVIEW_LENGTH) break;
+  }
+  if (!normalized) return null;
+  const preview = normalized.length > MAX_SESSION_PREVIEW_LENGTH ? `${normalized.slice(0, MAX_SESSION_PREVIEW_LENGTH)}...` : normalized;
+  return Buffer.from(preview, "utf-8").toString("utf-8");
+}
+function extractPreviewFromSessionData(data) {
+  if (!Array.isArray(data.entries)) return null;
+  for (const entry of data.entries.slice(0, MAX_SESSION_PREVIEW_ENTRIES)) {
+    if (entry?.type !== "message" || entry.message?.role !== "user") continue;
+    const preview = normalizeSessionPreview(extractTextFromSessionContent(entry.message.content));
+    if (preview) return preview;
+  }
+  return null;
+}
+
+export {
+  SESSION_PREVIEW_WORKER_PROTOCOL_VERSION,
+  SESSION_PREVIEW_WORKER_INPUT_BYTES,
+  SESSION_PREVIEW_WORKER_OUTPUT_BYTES,
+  SESSION_PREVIEW_WORKER_TIMEOUT_MS,
+  isSessionPreviewWorkerRequest,
+  isSessionPreviewWorkerResponse,
+  MAX_SESSION_PREVIEW_ENTRIES,
+  extractTextFromSessionContent,
+  normalizeSessionPreview,
+  extractPreviewFromSessionData
+};

package/dist/chunks/{chunk-4WU5VAX4.js → chunk-QYYRJ7JW.js}

@@ -6,12 +6,14 @@ import {
   createSharedWebFetchTool,
   createSharedWebResearchTool,
   createSharedWebSearchTool,
-  interpretShellExit,
+  interpretShellExit
+} from "./chunk-XWNIIJ3X.js";
+import {
   requestInteraction
-} from "./chunk-AFTBFF6J.js";
+} from "./chunk-J4P2LP7K.js";
 import {
   Type
-} from "./chunk-7ABSJC2D.js";
+} from "./chunk-HAAYC2N5.js";
 
 // src/config.ts
 import { existsSync, mkdirSync, readFileSync, renameSync } from "fs";
@@ -75,6 +77,9 @@ function getCustomThemesDir() {
 function getSettingsPath() {
   return join(getConfigDir(), "settings.json");
 }
+function getProjectSettingsPath(cwd) {
+  return join(cwd, CONFIG_DIR_NAME, "settings.json");
+}
 function getSessionsDir() {
   return join(getConfigDir(), "sessions");
 }
@@ -126,8 +131,8 @@ function migrateConfigFromAgentDir() {
 // src/capabilities/bash/index.ts
 import { spawn } from "child_process";
 import { createWriteStream, existsSync as existsSync2, statSync, writeFileSync } from "fs";
-import { tmpdir } from "os";
-import { join as join2 } from "path";
+import { tmpdir, homedir as homedir2 } from "os";
+import { join as join2, resolve as resolve2 } from "path";
 import { randomBytes } from "crypto";
 
 // src/capabilities/bash/truncate.ts
@@ -263,7 +268,7 @@ function buildSpawnCommand(shell, command) {
   if (shell === "cmd") {
     return { file: "cmd.exe", args: ["/d", "/s", "/c", command], shell: false };
   }
-  return { file: command, args: [], shell: true };
+  return { file: process.platform === "win32" ? "bash.exe" : "bash", args: ["-c", command], shell: false };
 }
 async function requestHighRiskConfirmation(request) {
   const response = await requestInteraction({
@@ -296,7 +301,7 @@ function validateWorkingDirectory(cwd) {
 }
 function normalizeWorkingDirectory(cwd, defaultCwd) {
   const requestedCwd = typeof cwd === "string" && cwd.trim().length > 0 ? cwd.trim() : void 0;
-  return requestedCwd ?? defaultCwd ?? process.cwd();
+  return resolve2(requestedCwd ?? defaultCwd ?? process.cwd());
 }
 function getTempFilePath() {
   const id = randomBytes(8).toString("hex");
@@ -304,7 +309,7 @@ function getTempFilePath() {
 }
 function finishTempFileStream(stream) {
   if (!stream) return Promise.resolve();
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve4, reject) => {
     const onError = (error) => {
       stream.off("error", onError);
       reject(error);
@@ -312,7 +317,7 @@ function finishTempFileStream(stream) {
     stream.once("error", onError);
     stream.end(() => {
       stream.off("error", onError);
-      resolve3();
+      resolve4();
     });
   });
 }
@@ -357,7 +362,35 @@ function createBashTool(defaultCwd, options) {
       const effectiveCommand = buildEffectiveCommand(command, options);
       const workingDir = normalizeWorkingDirectory(cwd, defaultCwd);
       validateWorkingDirectory(workingDir);
-      const risk = classifyShellCommand(effectiveCommand, resolvedShell);
+      const risk = classifyShellCommand(effectiveCommand, resolvedShell, {
+        homeDir: homedir2(),
+        cwd: workingDir,
+        env: process.env,
+        pathStyle: process.platform === "win32" ? "windows" : "posix"
+      });
+      if (risk.destructive && risk.catastrophic) {
+        const targetExplanation = risk.catastrophicReason === "indeterminate_target" ? "The agent shell tool cannot statically prove every deletion target is scoped" : "The command targets a filesystem root, home directory, or system directory";
+        return {
+          content: [{
+            type: "text",
+            text: `Blocked catastrophic shell command (${risk.commandClass}): ${risk.riskWarnings.join("; ")}. ${targetExplanation} and is never executed, even in YOLO mode, by the agent shell tool. Narrow the target to a statically resolvable subdirectory and retry.`
+          }],
+          details: {
+            exitCode: null,
+            signal: null,
+            timedOut: false,
+            shell: resolvedShell,
+            commandClass: risk.commandClass,
+            riskWarnings: risk.riskWarnings,
+            permissionDecision: {
+              allowed: false,
+              reason: "catastrophic command blocked by shell policy",
+              requiresPermission: true
+            }
+          },
+          isError: true
+        };
+      }
       if (risk.destructive && !options?.isYoloMode?.()) {
         const approved = await (options?.confirm ?? requestHighRiskConfirmation)({
           command: effectiveCommand,
@@ -389,7 +422,7 @@ function createBashTool(defaultCwd, options) {
         }
       }
       const timeoutMs = (timeout ?? DEFAULT_TIMEOUT_SECONDS) * 1e3;
-      return new Promise((resolve3, reject) => {
+      return new Promise((resolve4, reject) => {
         if (signal?.aborted) {
           reject(new Error("Operation aborted"));
           return;
@@ -402,7 +435,7 @@ function createBashTool(defaultCwd, options) {
         const maxChunksBytes = DEFAULT_MAX_BYTES * 2;
         let timedOut = false;
         const spawnCommand = buildSpawnCommand(resolvedShell, effectiveCommand);
-        const child = spawn(spawnCommand.file, spawnCommand.args, {
+        const child = (options?.spawnProcess ?? spawn)(spawnCommand.file, spawnCommand.args, {
           shell: spawnCommand.shell,
           cwd: workingDir,
           env: process.env,
@@ -556,7 +589,7 @@ function createBashTool(defaultCwd, options) {
 [Recovery hint: ${recoveryHint}]`;
             }
             const content = [{ type: "text", text: outputText }];
-            resolve3({ content, details, isError: timedOut || semantic.isError });
+            resolve4({ content, details, isError: timedOut || semantic.isError });
           } catch (error) {
             reject(error);
           }
@@ -774,7 +807,7 @@ function resolvePlaywrightCli() {
   return require2.resolve("@playwright/cli/playwright-cli.js");
 }
 function runPlaywright(args, timeoutMs = 6e4) {
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve4, reject) => {
     const child = spawn2(process.execPath, [resolvePlaywrightCli(), ...args], {
       stdio: ["ignore", "pipe", "pipe"],
       shell: false
@@ -799,7 +832,7 @@ function runPlaywright(args, timeoutMs = 6e4) {
     });
     child.on("close", (code) => {
       clearTimeout(timer);
-      if (code === 0) resolve3(stdout.trim());
+      if (code === 0) resolve4(stdout.trim());
       else reject(new Error((stderr || stdout || `Playwright CLI exited with ${code}`).trim()));
     });
   });
@@ -833,12 +866,12 @@ function createCliRenderedPageReader() {
     try {
       await runPlaywright([`-s=${session}`, "open", "about:blank"]);
       await runPlaywright([`-s=${session}`, "goto", url]);
-      const [snapshot, pageInfoRaw, screenshotOutput, consoleOutput, networkOutput] = await Promise.all([
+      const [snapshot, pageInfoRaw, screenshotOutput, consoleOutput, requestsOutput] = await Promise.all([
         runPlaywright([`-s=${session}`, "snapshot"]),
         runPlaywright([`-s=${session}`, "--raw", "eval", "() => JSON.stringify({ title: document.title, href: location.href, text: document.body ? document.body.innerText : '' })"]),
         runPlaywright([`-s=${session}`, "--raw", "screenshot"]).catch((error) => `screenshot_failed: ${error instanceof Error ? error.message : String(error)}`),
         runPlaywright([`-s=${session}`, "--raw", "console"]).catch((error) => `console_failed: ${error instanceof Error ? error.message : String(error)}`),
-        runPlaywright([`-s=${session}`, "--raw", "network"]).catch((error) => `network_failed: ${error instanceof Error ? error.message : String(error)}`)
+        runPlaywright([`-s=${session}`, "--raw", "requests"]).catch((error) => `requests_failed: ${error instanceof Error ? error.message : String(error)}`)
       ]);
       const pageInfo = parsePageInfo(pageInfoRaw);
       const text = pageInfo.text?.trim() || snapshot.trim();
@@ -853,7 +886,7 @@ function createCliRenderedPageReader() {
         citationAnchors: [{ url: pageInfo.finalUrl || url, title: pageInfo.title, startOffset: 0, endOffset: Math.min(120, text.length) }],
         screenshotPath: parseScreenshotPath(screenshotOutput),
         consoleMessages: linesOf(consoleOutput),
-        networkRequests: linesOf(networkOutput)
+        networkRequests: linesOf(requestsOutput)
       };
     } finally {
       runPlaywright([`-s=${session}`, "close"], 1e4).catch(() => void 0);
@@ -908,7 +941,7 @@ function createCliWebResearchHealthStore(configDir) {
 
 // src/capabilities/index.ts
 function createCliHostCapabilities(cwd, options = {}) {
-  const bashTool = createBashTool(cwd);
+  const bashTool = createBashTool(cwd, { isYoloMode: options.isYoloMode });
   const healthStore = createCliWebResearchHealthStore(options.configDir ?? getConfigDir());
   const webSearchTool = createSharedWebSearchTool({
     getModel: options.getModel ?? (() => void 0),
@@ -983,6 +1016,7 @@ export {
   getAgentDir,
   getCustomThemesDir,
   getSettingsPath,
+  getProjectSettingsPath,
   getSessionsDir,
   getLogsDir,
   getRuntimeLogPath,

package/dist/chunks/{chunk-PUZP2Q3F.js → chunk-X44YTB6R.js}

@@ -3,7 +3,7 @@ import {
   EventStream,
   streamSimple,
   validateToolArguments
-} from "./chunk-7ABSJC2D.js";
+} from "./chunk-HAAYC2N5.js";
 
 // ../../packages/agent-core/src/agent-loop.ts
 function createLoopErrorMessage(error, config, signal) {