@librechat/agents 3.1.77-dev.1 → 3.1.78-dev.0

package/dist/cjs/tools/local/attachments.cjs

@@ -0,0 +1,183 @@
+'use strict';
+
+var promises = require('fs/promises');
+
+/**
+ * Detects whether a file on disk is an LLM-renderable attachment
+ * (image / PDF) and produces the LangChain `MessageContentComplex[]`
+ * payload a `ToolMessage` needs to actually surface those bytes to
+ * the vision-capable model.
+ *
+ * Same approach as LibreChat's `api/server/utils/files.js`: sniff the
+ * magic bytes (NOT the extension) so a mislabelled `.png` that's
+ * really a binary blob doesn't get embedded as an image. Inlined for
+ * the five formats we actually care about (PNG / JPEG / GIF / WebP /
+ * PDF) instead of pulling the ESM-only `file-type` package — keeps
+ * the test setup CJS-clean.
+ *
+ * Provider compatibility:
+ *   - Anthropic: tool_result content arrays accept `image` / `image_url`
+ *     blocks; LangChain's anthropic adapter at
+ *     `node_modules/@langchain/anthropic/dist/utils/message_inputs.js`
+ *     converts them to native `image` source blocks.
+ *   - OpenAI Chat Completions: image_url blocks in tool messages are
+ *     accepted on vision-capable models.
+ *   - OpenAI Responses API: tool messages are flattened to plain text;
+ *     image_url blocks degrade to a JSON description (still useful as
+ *     a textual hint to the model).
+ *   - Google: image blocks in tool responses are accepted on Gemini
+ *     vision models.
+ *
+ * Configuration:
+ *   - `local.attachReadAttachments` (default `'images-only'`) controls
+ *     which file kinds are returned as inline attachments. Other kinds
+ *     fall through to the existing binary-stub path.
+ *   - `local.maxAttachmentBytes` (default 5 MB) caps the pre-encoding
+ *     size; oversize attachments degrade to a stub describing the
+ *     refusal so the model isn't surprised.
+ */
+/**
+ * Magic-byte sniff for the small set of image/PDF formats we care
+ * about. We avoided pulling in `file-type` (ESM-only, awkward under
+ * ts-jest) since the universe of attachments we want to embed is
+ * tiny: PNG, JPEG, GIF, WebP, PDF. All have well-known signatures in
+ * the first 12 bytes.
+ *
+ * Returns `undefined` on no match — caller treats as text/unknown.
+ */
+function sniffMime(buffer) {
+    if (buffer.length < 4)
+        return undefined;
+    // PNG: 89 50 4E 47 0D 0A 1A 0A
+    if (buffer.length >= 8 &&
+        buffer[0] === 0x89 &&
+        buffer[1] === 0x50 &&
+        buffer[2] === 0x4e &&
+        buffer[3] === 0x47 &&
+        buffer[4] === 0x0d &&
+        buffer[5] === 0x0a &&
+        buffer[6] === 0x1a &&
+        buffer[7] === 0x0a) {
+        return 'image/png';
+    }
+    // JPEG: FF D8 FF
+    if (buffer[0] === 0xff && buffer[1] === 0xd8 && buffer[2] === 0xff) {
+        return 'image/jpeg';
+    }
+    // GIF: "GIF87a" or "GIF89a"
+    if (buffer.length >= 6 &&
+        buffer[0] === 0x47 &&
+        buffer[1] === 0x49 &&
+        buffer[2] === 0x46 &&
+        buffer[3] === 0x38 &&
+        (buffer[4] === 0x37 || buffer[4] === 0x39) &&
+        buffer[5] === 0x61) {
+        return 'image/gif';
+    }
+    // WebP: "RIFF" .... "WEBP"
+    if (buffer.length >= 12 &&
+        buffer[0] === 0x52 &&
+        buffer[1] === 0x49 &&
+        buffer[2] === 0x46 &&
+        buffer[3] === 0x46 &&
+        buffer[8] === 0x57 &&
+        buffer[9] === 0x45 &&
+        buffer[10] === 0x42 &&
+        buffer[11] === 0x50) {
+        return 'image/webp';
+    }
+    // PDF: "%PDF-"
+    if (buffer.length >= 5 &&
+        buffer[0] === 0x25 &&
+        buffer[1] === 0x50 &&
+        buffer[2] === 0x44 &&
+        buffer[3] === 0x46 &&
+        buffer[4] === 0x2d) {
+        return 'application/pdf';
+    }
+    return undefined;
+}
+const SUPPORTED_IMAGE_MIMES = new Set([
+    'image/png',
+    'image/jpeg',
+    'image/gif',
+    'image/webp',
+]);
+/** Mime types that get returned to the model as inline attachments. */
+new Set([
+    ...SUPPORTED_IMAGE_MIMES,
+    'application/pdf',
+]);
+async function classifyAttachment(args) {
+    if (args.bytes === 0) {
+        return { kind: 'text-or-unknown', bytes: 0 };
+    }
+    // MIME sniffing only needs the first 12 bytes — read just the
+    // header so a 9 MB PNG (under the 10 MB read cap, over the 5 MB
+    // attachment cap) doesn't pull the whole buffer into memory before
+    // we discover it's oversize. Full read happens only when we're
+    // about to base64-embed.
+    const open = args.fs?.open ?? promises.open;
+    const handle = await open(args.path, 'r');
+    const header = Buffer.alloc(12);
+    let mime;
+    try {
+        await handle.read(header, 0, 12, 0);
+        mime = sniffMime(header);
+    }
+    finally {
+        await handle.close();
+    }
+    if (mime == null) {
+        return { kind: 'text-or-unknown', bytes: args.bytes };
+    }
+    const wantsImage = args.mode === 'images-only' || args.mode === 'images-and-pdf';
+    const wantsPdf = args.mode === 'images-and-pdf';
+    const isImage = wantsImage && SUPPORTED_IMAGE_MIMES.has(mime);
+    const isPdf = wantsPdf && mime === 'application/pdf';
+    if (!isImage && !isPdf) {
+        // Both branches returned identical values pre-fix (audit-of-audit
+        // finding #3). The SUPPORTED_ATTACHMENT_MIMES check was dead code —
+        // collapsing to a single return.
+        return { kind: 'binary', mime, bytes: args.bytes };
+    }
+    if (args.bytes > args.maxBytes) {
+        return {
+            kind: 'oversize',
+            mime,
+            bytes: args.bytes,
+            maxBytes: args.maxBytes,
+        };
+    }
+    const readFile = args.fs?.readFile ?? promises.readFile;
+    const buffer = (await readFile(args.path));
+    const base64 = buffer.toString('base64');
+    const dataUrl = `data:${mime};base64,${base64}`;
+    if (isImage) {
+        return { kind: 'image', mime, bytes: args.bytes, dataUrl };
+    }
+    return {
+        kind: 'pdf',
+        mime: 'application/pdf',
+        bytes: args.bytes,
+        dataUrl,
+    };
+}
+/** Build the LangChain content array for an image attachment. */
+function imageAttachmentContent(path, attachment) {
+    return [
+        {
+            type: 'text',
+            text: `Read ${path} (${attachment.mime}, ${attachment.bytes} bytes). ` +
+                'The image is attached below for vision-capable models.',
+        },
+        {
+            type: 'image_url',
+            image_url: { url: attachment.dataUrl },
+        },
+    ];
+}
+
+exports.classifyAttachment = classifyAttachment;
+exports.imageAttachmentContent = imageAttachmentContent;
+//# sourceMappingURL=attachments.cjs.map

package/dist/cjs/tools/local/attachments.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.cjs","sources":["../../../../src/tools/local/attachments.ts"],"sourcesContent":["/**\n * Detects whether a file on disk is an LLM-renderable attachment\n * (image / PDF) and produces the LangChain `MessageContentComplex[]`\n * payload a `ToolMessage` needs to actually surface those bytes to\n * the vision-capable model.\n *\n * Same approach as LibreChat's `api/server/utils/files.js`: sniff the\n * magic bytes (NOT the extension) so a mislabelled `.png` that's\n * really a binary blob doesn't get embedded as an image. Inlined for\n * the five formats we actually care about (PNG / JPEG / GIF / WebP /\n * PDF) instead of pulling the ESM-only `file-type` package — keeps\n * the test setup CJS-clean.\n *\n * Provider compatibility:\n *   - Anthropic: tool_result content arrays accept `image` / `image_url`\n *     blocks; LangChain's anthropic adapter at\n *     `node_modules/@langchain/anthropic/dist/utils/message_inputs.js`\n *     converts them to native `image` source blocks.\n *   - OpenAI Chat Completions: image_url blocks in tool messages are\n *     accepted on vision-capable models.\n *   - OpenAI Responses API: tool messages are flattened to plain text;\n *     image_url blocks degrade to a JSON description (still useful as\n *     a textual hint to the model).\n *   - Google: image blocks in tool responses are accepted on Gemini\n *     vision models.\n *\n * Configuration:\n *   - `local.attachReadAttachments` (default `'images-only'`) controls\n *     which file kinds are returned as inline attachments. Other kinds\n *     fall through to the existing binary-stub path.\n *   - `local.maxAttachmentBytes` (default 5 MB) caps the pre-encoding\n *     size; oversize attachments degrade to a stub describing the\n *     refusal so the model isn't surprised.\n */\n\nimport { open as fsOpen, readFile as fsReadFile } from 'fs/promises';\nimport type { WorkspaceFS } from './workspaceFS';\n\n/**\n * Magic-byte sniff for the small set of image/PDF formats we care\n * about. We avoided pulling in `file-type` (ESM-only, awkward under\n * ts-jest) since the universe of attachments we want to embed is\n * tiny: PNG, JPEG, GIF, WebP, PDF. All have well-known signatures in\n * the first 12 bytes.\n *\n * Returns `undefined` on no match — caller treats as text/unknown.\n */\nfunction sniffMime(buffer: Buffer): string | undefined {\n  if (buffer.length < 4) return undefined;\n  // PNG: 89 50 4E 47 0D 0A 1A 0A\n  if (\n    buffer.length >= 8 &&\n    buffer[0] === 0x89 &&\n    buffer[1] === 0x50 &&\n    buffer[2] === 0x4e &&\n    buffer[3] === 0x47 &&\n    buffer[4] === 0x0d &&\n    buffer[5] === 0x0a &&\n    buffer[6] === 0x1a &&\n    buffer[7] === 0x0a\n  ) {\n    return 'image/png';\n  }\n  // JPEG: FF D8 FF\n  if (buffer[0] === 0xff && buffer[1] === 0xd8 && buffer[2] === 0xff) {\n    return 'image/jpeg';\n  }\n  // GIF: \"GIF87a\" or \"GIF89a\"\n  if (\n    buffer.length >= 6 &&\n    buffer[0] === 0x47 &&\n    buffer[1] === 0x49 &&\n    buffer[2] === 0x46 &&\n    buffer[3] === 0x38 &&\n    (buffer[4] === 0x37 || buffer[4] === 0x39) &&\n    buffer[5] === 0x61\n  ) {\n    return 'image/gif';\n  }\n  // WebP: \"RIFF\" .... \"WEBP\"\n  if (\n    buffer.length >= 12 &&\n    buffer[0] === 0x52 &&\n    buffer[1] === 0x49 &&\n    buffer[2] === 0x46 &&\n    buffer[3] === 0x46 &&\n    buffer[8] === 0x57 &&\n    buffer[9] === 0x45 &&\n    buffer[10] === 0x42 &&\n    buffer[11] === 0x50\n  ) {\n    return 'image/webp';\n  }\n  // PDF: \"%PDF-\"\n  if (\n    buffer.length >= 5 &&\n    buffer[0] === 0x25 &&\n    buffer[1] === 0x50 &&\n    buffer[2] === 0x44 &&\n    buffer[3] === 0x46 &&\n    buffer[4] === 0x2d\n  ) {\n    return 'application/pdf';\n  }\n  return undefined;\n}\n\nconst SUPPORTED_IMAGE_MIMES = new Set<string>([\n  'image/png',\n  'image/jpeg',\n  'image/gif',\n  'image/webp',\n]);\n\n/** Mime types that get returned to the model as inline attachments. */\nconst SUPPORTED_ATTACHMENT_MIMES = new Set<string>([\n  ...SUPPORTED_IMAGE_MIMES,\n  'application/pdf',\n]);\n\nexport type AttachmentMode = 'images-only' | 'images-and-pdf' | 'off';\n\nexport type Attachment =\n  | {\n      kind: 'image';\n      mime: string;\n      bytes: number;\n      dataUrl: string;\n    }\n  | {\n      kind: 'pdf';\n      mime: 'application/pdf';\n      bytes: number;\n      dataUrl: string;\n    }\n  | {\n      kind: 'binary';\n      mime: string;\n      bytes: number;\n    }\n  | {\n      kind: 'oversize';\n      mime: string;\n      bytes: number;\n      maxBytes: number;\n    }\n  | {\n      kind: 'text-or-unknown';\n      bytes: number;\n    };\n\nexport async function classifyAttachment(args: {\n  path: string;\n  bytes: number;\n  mode: AttachmentMode;\n  maxBytes: number;\n  /**\n   * WorkspaceFS to route I/O through — defaults to host fs/promises\n   * for backward compat. Manual review (finding F): without this\n   * routing, custom/remote FS implementations could either fail to\n   * embed valid attachments or accidentally read a host path with\n   * the same absolute name (since `read_file` itself does go through\n   * the configured WorkspaceFS).\n   */\n  fs?: WorkspaceFS;\n}): Promise<Attachment> {\n  if (args.bytes === 0) {\n    return { kind: 'text-or-unknown', bytes: 0 };\n  }\n\n  // MIME sniffing only needs the first 12 bytes — read just the\n  // header so a 9 MB PNG (under the 10 MB read cap, over the 5 MB\n  // attachment cap) doesn't pull the whole buffer into memory before\n  // we discover it's oversize. Full read happens only when we're\n  // about to base64-embed.\n  const open = args.fs?.open ?? fsOpen;\n  const handle = await open(args.path, 'r');\n  const header = Buffer.alloc(12);\n  let mime: string | undefined;\n  try {\n    await handle.read(header, 0, 12, 0);\n    mime = sniffMime(header);\n  } finally {\n    await handle.close();\n  }\n\n  if (mime == null) {\n    return { kind: 'text-or-unknown', bytes: args.bytes };\n  }\n\n  const wantsImage =\n    args.mode === 'images-only' || args.mode === 'images-and-pdf';\n  const wantsPdf = args.mode === 'images-and-pdf';\n\n  const isImage = wantsImage && SUPPORTED_IMAGE_MIMES.has(mime);\n  const isPdf = wantsPdf && mime === 'application/pdf';\n\n  if (!isImage && !isPdf) {\n    // Both branches returned identical values pre-fix (audit-of-audit\n    // finding #3). The SUPPORTED_ATTACHMENT_MIMES check was dead code —\n    // collapsing to a single return.\n    return { kind: 'binary', mime, bytes: args.bytes };\n  }\n\n  if (args.bytes > args.maxBytes) {\n    return {\n      kind: 'oversize',\n      mime,\n      bytes: args.bytes,\n      maxBytes: args.maxBytes,\n    };\n  }\n\n  const readFile = args.fs?.readFile ?? fsReadFile;\n  const buffer = (await readFile(args.path)) as Buffer;\n  const base64 = buffer.toString('base64');\n  const dataUrl = `data:${mime};base64,${base64}`;\n\n  if (isImage) {\n    return { kind: 'image', mime, bytes: args.bytes, dataUrl };\n  }\n  return {\n    kind: 'pdf',\n    mime: 'application/pdf' as const,\n    bytes: args.bytes,\n    dataUrl,\n  };\n}\n\n/** Build the LangChain content array for an image attachment. */\nexport function imageAttachmentContent(\n  path: string,\n  attachment: Extract<Attachment, { kind: 'image' }>\n): Array<{\n  type: 'text' | 'image_url';\n  text?: string;\n  image_url?: { url: string };\n}> {\n  return [\n    {\n      type: 'text',\n      text:\n        `Read ${path} (${attachment.mime}, ${attachment.bytes} bytes). ` +\n        'The image is attached below for vision-capable models.',\n    },\n    {\n      type: 'image_url',\n      image_url: { url: attachment.dataUrl },\n    },\n  ];\n}\n"],"names":["fsOpen","fsReadFile"],"mappings":";;;;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCG;AAKH;;;;;;;;AAQG;AACH,SAAS,SAAS,CAAC,MAAc,EAAA;AAC/B,IAAA,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;AAAE,QAAA,OAAO,SAAS;;AAEvC,IAAA,IACE,MAAM,CAAC,MAAM,IAAI,CAAC;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAClB;AACA,QAAA,OAAO,WAAW;IACpB;;IAEA,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE;AAClE,QAAA,OAAO,YAAY;IACrB;;AAEA,IAAA,IACE,MAAM,CAAC,MAAM,IAAI,CAAC;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,SAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;AAC1C,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAClB;AACA,QAAA,OAAO,WAAW;IACpB;;AAEA,IAAA,IACE,MAAM,CAAC,MAAM,IAAI,EAAE;AACnB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI;AACnB,QAAA,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,EACnB;AACA,QAAA,OAAO,YAAY;IACrB;;AAEA,IAAA,IACE,MAAM,CAAC,MAAM,IAAI,CAAC;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;AAClB,QAAA,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAClB;AACA,QAAA,OAAO,iBAAiB;IAC1B;AACA,IAAA,OAAO,SAAS;AAClB;AAEA,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAS;IAC5C,WAAW;IACX,YAAY;IACZ,WAAW;IACX,YAAY;AACb,CAAA,CAAC;AAEF;AACmC,IAAI,GAAG,CAAS;AACjD,IAAA,GAAG,qBAAqB;IACxB,iBAAiB;AAClB,CAAA;AAiCM,eAAe,kBAAkB,CAAC,IAcxC,EAAA;AACC,IAAA,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE;QACpB,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE;IAC9C;;;;;;IAOA,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,EAAE,IAAI,IAAIA,aAAM;IACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC/B,IAAA,IAAI,IAAwB;AAC5B,IAAA,IAAI;AACF,QAAA,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AACnC,QAAA,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC;IAC1B;YAAU;AACR,QAAA,MAAM,MAAM,CAAC,KAAK,EAAE;IACtB;AAEA,IAAA,IAAI,IAAI,IAAI,IAAI,EAAE;QAChB,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;IACvD;AAEA,IAAA,MAAM,UAAU,GACd,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB;AAC/D,IAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,KAAK,gBAAgB;IAE/C,MAAM,OAAO,GAAG,UAAU,IAAI,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC;AAC7D,IAAA,MAAM,KAAK,GAAG,QAAQ,IAAI,IAAI,KAAK,iBAAiB;AAEpD,IAAA,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE;;;;AAItB,QAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;IACpD;IAEA,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE;QAC9B,OAAO;AACL,YAAA,IAAI,EAAE,UAAU;YAChB,IAAI;YACJ,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB;IACH;IAEA,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,EAAE,QAAQ,IAAIC,iBAAU;IAChD,MAAM,MAAM,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAW;IACpD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;AACxC,IAAA,MAAM,OAAO,GAAG,CAAA,KAAA,EAAQ,IAAI,CAAA,QAAA,EAAW,MAAM,EAAE;IAE/C,IAAI,OAAO,EAAE;AACX,QAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE;IAC5D;IACA,OAAO;AACL,QAAA,IAAI,EAAE,KAAK;AACX,QAAA,IAAI,EAAE,iBAA0B;QAChC,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO;KACR;AACH;AAEA;AACM,SAAU,sBAAsB,CACpC,IAAY,EACZ,UAAkD,EAAA;IAMlD,OAAO;AACL,QAAA;AACE,YAAA,IAAI,EAAE,MAAM;YACZ,IAAI,EACF,CAAA,KAAA,EAAQ,IAAI,CAAA,EAAA,EAAK,UAAU,CAAC,IAAI,CAAA,EAAA,EAAK,UAAU,CAAC,KAAK,CAAA,SAAA,CAAW;gBAChE,wDAAwD;AAC3D,SAAA;AACD,QAAA;AACE,YAAA,IAAI,EAAE,WAAW;AACjB,YAAA,SAAS,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,OAAO,EAAE;AACvC,SAAA;KACF;AACH;;;;;"}

package/dist/cjs/tools/local/bashAst.cjs

@@ -0,0 +1,129 @@
+'use strict';
+
+/**
+ * Categorical-hazard checks layered on top of the existing dangerous-
+ * command regex set. These match command-shape signatures that
+ * claude-code's tree-sitter AST validator catches via categorical
+ * deny-lists (command substitution, zsh-only privileged commands,
+ * /proc/<pid>/environ access, IFS injection, etc.).
+ *
+ * This is *not* a real AST parser. It is a deliberately conservative
+ * heuristic pass intended for the local engine's `bashAst: 'auto' |
+ * 'strict'` modes; a future PR can swap in a true tree-sitter-bash
+ * pass behind the same config field without changing the public API.
+ *
+ * `runBashAstChecks` runs on the *quote-stripped* command (so quoted
+ * strings inside the script don't generate false positives) and
+ * returns one finding per matched category.
+ */
+const COMMAND_SUBSTITUTION_PATTERNS = [
+    { code: 'cmd-subst-dollar-paren', rx: /\$\(/ },
+    { code: 'cmd-subst-backtick', rx: /`[^`]*`/ },
+    { code: 'cmd-subst-process-sub', rx: /[<>]\(/ },
+    { code: 'cmd-subst-zsh-eq', rx: /(?:^|\s)=[A-Za-z_]/ },
+];
+const ZSH_DANGEROUS_BUILTINS = [
+    'zmodload',
+    'emulate',
+    'sysopen',
+    'sysread',
+    'syswrite',
+    'ztcp',
+    'zsocket',
+    'zf_rm',
+    'zselect',
+];
+const STRICT_DENIED_BUILTINS = [
+    'eval',
+    'exec',
+];
+function rxForBuiltin(name) {
+    return new RegExp(`\\b${name}\\b`);
+}
+const PROC_ENVIRON_RX = /\/proc\/(?:\d+|self|\$[A-Za-z_])\/environ\b/;
+const IFS_INJECTION_RX = /\bIFS\s*=/;
+const HEX_ESCAPE_OBFUSCATION_RX = /\\x[0-9a-fA-F]{2}/;
+const SOURCE_FROM_VAR_RX = /(?:^|\s)(?:source|\.)\s+["']?\$[A-Za-z_]/;
+function runBashAstChecks(command, mode = 'off') {
+    if (mode === 'off') {
+        return [];
+    }
+    const findings = [];
+    const strict = mode === 'strict';
+    for (const { code, rx } of COMMAND_SUBSTITUTION_PATTERNS) {
+        if (rx.test(command)) {
+            findings.push({
+                code,
+                message: 'Command substitution can mask intent and exfiltrate variables; not allowed under bashAst.',
+                severity: strict ? 'deny' : 'warn',
+            });
+        }
+    }
+    for (const builtin of ZSH_DANGEROUS_BUILTINS) {
+        if (rxForBuiltin(builtin).test(command)) {
+            findings.push({
+                code: `zsh-builtin-${builtin}`,
+                message: `Zsh privileged builtin "${builtin}" is denied.`,
+                severity: 'deny',
+            });
+        }
+    }
+    if (PROC_ENVIRON_RX.test(command)) {
+        findings.push({
+            code: 'proc-environ-read',
+            message: 'Reads from /proc/<pid>/environ are denied — leaks host secrets.',
+            severity: 'deny',
+        });
+    }
+    if (IFS_INJECTION_RX.test(command)) {
+        findings.push({
+            code: 'ifs-injection',
+            message: 'Inline IFS reassignment is suspicious; review the command.',
+            severity: strict ? 'deny' : 'warn',
+        });
+    }
+    if (HEX_ESCAPE_OBFUSCATION_RX.test(command)) {
+        findings.push({
+            code: 'hex-escape',
+            message: 'Hex-escaped bytes (\\xNN) often hide intent; review the command.',
+            severity: strict ? 'deny' : 'warn',
+        });
+    }
+    if (SOURCE_FROM_VAR_RX.test(command)) {
+        findings.push({
+            code: 'source-from-variable',
+            message: 'Sourcing a script from an unbound variable is denied.',
+            severity: 'deny',
+        });
+    }
+    if (strict) {
+        for (const builtin of STRICT_DENIED_BUILTINS) {
+            if (rxForBuiltin(builtin).test(command)) {
+                findings.push({
+                    code: `strict-${builtin}`,
+                    message: `In strict mode, "${builtin}" is denied.`,
+                    severity: 'deny',
+                });
+            }
+        }
+    }
+    return findings;
+}
+function bashAstFindingsToErrors(findings) {
+    const errors = [];
+    const warnings = [];
+    for (const f of findings) {
+        const formatted = `[bashAst:${f.code}] ${f.message}`;
+        if (f.severity === 'deny') {
+            errors.push(formatted);
+        }
+        else {
+            warnings.push(formatted);
+        }
+    }
+    return { errors, warnings };
+}
+
+exports.bashAstFindingsToErrors = bashAstFindingsToErrors;
+exports.runBashAstChecks = runBashAstChecks;
+//# sourceMappingURL=bashAst.cjs.map

package/dist/cjs/tools/local/bashAst.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"bashAst.cjs","sources":["../../../../src/tools/local/bashAst.ts"],"sourcesContent":["import type * as t from '@/types';\n\nexport type BashAstFinding = {\n  code: string;\n  message: string;\n  severity: 'warn' | 'deny';\n};\n\n/**\n * Categorical-hazard checks layered on top of the existing dangerous-\n * command regex set. These match command-shape signatures that\n * claude-code's tree-sitter AST validator catches via categorical\n * deny-lists (command substitution, zsh-only privileged commands,\n * /proc/<pid>/environ access, IFS injection, etc.).\n *\n * This is *not* a real AST parser. It is a deliberately conservative\n * heuristic pass intended for the local engine's `bashAst: 'auto' |\n * 'strict'` modes; a future PR can swap in a true tree-sitter-bash\n * pass behind the same config field without changing the public API.\n *\n * `runBashAstChecks` runs on the *quote-stripped* command (so quoted\n * strings inside the script don't generate false positives) and\n * returns one finding per matched category.\n */\n\nconst COMMAND_SUBSTITUTION_PATTERNS: { code: string; rx: RegExp }[] = [\n  { code: 'cmd-subst-dollar-paren', rx: /\\$\\(/ },\n  { code: 'cmd-subst-backtick', rx: /`[^`]*`/ },\n  { code: 'cmd-subst-process-sub', rx: /[<>]\\(/ },\n  { code: 'cmd-subst-zsh-eq', rx: /(?:^|\\s)=[A-Za-z_]/ },\n];\n\nconst ZSH_DANGEROUS_BUILTINS = [\n  'zmodload',\n  'emulate',\n  'sysopen',\n  'sysread',\n  'syswrite',\n  'ztcp',\n  'zsocket',\n  'zf_rm',\n  'zselect',\n];\n\nconst STRICT_DENIED_BUILTINS = [\n  'eval',\n  'exec',\n];\n\nfunction rxForBuiltin(name: string): RegExp {\n  return new RegExp(`\\\\b${name}\\\\b`);\n}\n\nconst PROC_ENVIRON_RX = /\\/proc\\/(?:\\d+|self|\\$[A-Za-z_])\\/environ\\b/;\nconst IFS_INJECTION_RX = /\\bIFS\\s*=/;\nconst HEX_ESCAPE_OBFUSCATION_RX = /\\\\x[0-9a-fA-F]{2}/;\nconst SOURCE_FROM_VAR_RX = /(?:^|\\s)(?:source|\\.)\\s+[\"']?\\$[A-Za-z_]/;\n\nexport function runBashAstChecks(\n  command: string,\n  mode: t.LocalBashAstMode = 'off'\n): BashAstFinding[] {\n  if (mode === 'off') {\n    return [];\n  }\n  const findings: BashAstFinding[] = [];\n  const strict = mode === 'strict';\n\n  for (const { code, rx } of COMMAND_SUBSTITUTION_PATTERNS) {\n    if (rx.test(command)) {\n      findings.push({\n        code,\n        message:\n          'Command substitution can mask intent and exfiltrate variables; not allowed under bashAst.',\n        severity: strict ? 'deny' : 'warn',\n      });\n    }\n  }\n\n  for (const builtin of ZSH_DANGEROUS_BUILTINS) {\n    if (rxForBuiltin(builtin).test(command)) {\n      findings.push({\n        code: `zsh-builtin-${builtin}`,\n        message: `Zsh privileged builtin \"${builtin}\" is denied.`,\n        severity: 'deny',\n      });\n    }\n  }\n\n  if (PROC_ENVIRON_RX.test(command)) {\n    findings.push({\n      code: 'proc-environ-read',\n      message: 'Reads from /proc/<pid>/environ are denied — leaks host secrets.',\n      severity: 'deny',\n    });\n  }\n\n  if (IFS_INJECTION_RX.test(command)) {\n    findings.push({\n      code: 'ifs-injection',\n      message: 'Inline IFS reassignment is suspicious; review the command.',\n      severity: strict ? 'deny' : 'warn',\n    });\n  }\n\n  if (HEX_ESCAPE_OBFUSCATION_RX.test(command)) {\n    findings.push({\n      code: 'hex-escape',\n      message: 'Hex-escaped bytes (\\\\xNN) often hide intent; review the command.',\n      severity: strict ? 'deny' : 'warn',\n    });\n  }\n\n  if (SOURCE_FROM_VAR_RX.test(command)) {\n    findings.push({\n      code: 'source-from-variable',\n      message: 'Sourcing a script from an unbound variable is denied.',\n      severity: 'deny',\n    });\n  }\n\n  if (strict) {\n    for (const builtin of STRICT_DENIED_BUILTINS) {\n      if (rxForBuiltin(builtin).test(command)) {\n        findings.push({\n          code: `strict-${builtin}`,\n          message: `In strict mode, \"${builtin}\" is denied.`,\n          severity: 'deny',\n        });\n      }\n    }\n  }\n\n  return findings;\n}\n\nexport function bashAstFindingsToErrors(\n  findings: BashAstFinding[]\n): { errors: string[]; warnings: string[] } {\n  const errors: string[] = [];\n  const warnings: string[] = [];\n  for (const f of findings) {\n    const formatted = `[bashAst:${f.code}] ${f.message}`;\n    if (f.severity === 'deny') {\n      errors.push(formatted);\n    } else {\n      warnings.push(formatted);\n    }\n  }\n  return { errors, warnings };\n}\n"],"names":[],"mappings":";;AAQA;;;;;;;;;;;;;;;AAeG;AAEH,MAAM,6BAA6B,GAAmC;AACpE,IAAA,EAAE,IAAI,EAAE,wBAAwB,EAAE,EAAE,EAAE,MAAM,EAAE;AAC9C,IAAA,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,EAAE,SAAS,EAAE;AAC7C,IAAA,EAAE,IAAI,EAAE,uBAAuB,EAAE,EAAE,EAAE,QAAQ,EAAE;AAC/C,IAAA,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,oBAAoB,EAAE;CACvD;AAED,MAAM,sBAAsB,GAAG;IAC7B,UAAU;IACV,SAAS;IACT,SAAS;IACT,SAAS;IACT,UAAU;IACV,MAAM;IACN,SAAS;IACT,OAAO;IACP,SAAS;CACV;AAED,MAAM,sBAAsB,GAAG;IAC7B,MAAM;IACN,MAAM;CACP;AAED,SAAS,YAAY,CAAC,IAAY,EAAA;AAChC,IAAA,OAAO,IAAI,MAAM,CAAC,MAAM,IAAI,CAAA,GAAA,CAAK,CAAC;AACpC;AAEA,MAAM,eAAe,GAAG,6CAA6C;AACrE,MAAM,gBAAgB,GAAG,WAAW;AACpC,MAAM,yBAAyB,GAAG,mBAAmB;AACrD,MAAM,kBAAkB,GAAG,0CAA0C;SAErD,gBAAgB,CAC9B,OAAe,EACf,OAA2B,KAAK,EAAA;AAEhC,IAAA,IAAI,IAAI,KAAK,KAAK,EAAE;AAClB,QAAA,OAAO,EAAE;IACX;IACA,MAAM,QAAQ,GAAqB,EAAE;AACrC,IAAA,MAAM,MAAM,GAAG,IAAI,KAAK,QAAQ;IAEhC,KAAK,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,6BAA6B,EAAE;AACxD,QAAA,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;YACpB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI;AACJ,gBAAA,OAAO,EACL,2FAA2F;gBAC7F,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM;AACnC,aAAA,CAAC;QACJ;IACF;AAEA,IAAA,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE;QAC5C,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;YACvC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,CAAA,YAAA,EAAe,OAAO,CAAA,CAAE;gBAC9B,OAAO,EAAE,CAAA,wBAAA,EAA2B,OAAO,CAAA,YAAA,CAAc;AACzD,gBAAA,QAAQ,EAAE,MAAM;AACjB,aAAA,CAAC;QACJ;IACF;AAEA,IAAA,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QACjC,QAAQ,CAAC,IAAI,CAAC;AACZ,YAAA,IAAI,EAAE,mBAAmB;AACzB,YAAA,OAAO,EAAE,iEAAiE;AAC1E,YAAA,QAAQ,EAAE,MAAM;AACjB,SAAA,CAAC;IACJ;AAEA,IAAA,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QAClC,QAAQ,CAAC,IAAI,CAAC;AACZ,YAAA,IAAI,EAAE,eAAe;AACrB,YAAA,OAAO,EAAE,4DAA4D;YACrE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM;AACnC,SAAA,CAAC;IACJ;AAEA,IAAA,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QAC3C,QAAQ,CAAC,IAAI,CAAC;AACZ,YAAA,IAAI,EAAE,YAAY;AAClB,YAAA,OAAO,EAAE,kEAAkE;YAC3E,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM;AACnC,SAAA,CAAC;IACJ;AAEA,IAAA,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QACpC,QAAQ,CAAC,IAAI,CAAC;AACZ,YAAA,IAAI,EAAE,sBAAsB;AAC5B,YAAA,OAAO,EAAE,uDAAuD;AAChE,YAAA,QAAQ,EAAE,MAAM;AACjB,SAAA,CAAC;IACJ;IAEA,IAAI,MAAM,EAAE;AACV,QAAA,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE;YAC5C,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;gBACvC,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,CAAA,OAAA,EAAU,OAAO,CAAA,CAAE;oBACzB,OAAO,EAAE,CAAA,iBAAA,EAAoB,OAAO,CAAA,YAAA,CAAc;AAClD,oBAAA,QAAQ,EAAE,MAAM;AACjB,iBAAA,CAAC;YACJ;QACF;IACF;AAEA,IAAA,OAAO,QAAQ;AACjB;AAEM,SAAU,uBAAuB,CACrC,QAA0B,EAAA;IAE1B,MAAM,MAAM,GAAa,EAAE;IAC3B,MAAM,QAAQ,GAAa,EAAE;AAC7B,IAAA,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE;QACxB,MAAM,SAAS,GAAG,CAAA,SAAA,EAAY,CAAC,CAAC,IAAI,CAAA,EAAA,EAAK,CAAC,CAAC,OAAO,CAAA,CAAE;AACpD,QAAA,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,EAAE;AACzB,YAAA,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QACxB;aAAO;AACL,YAAA,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;QAC1B;IACF;AACA,IAAA,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE;AAC7B;;;;;"}

package/dist/cjs/tools/local/editStrategies.cjs

@@ -0,0 +1,188 @@
+'use strict';
+
+/**
+ * Single-occurrence string-replacement strategies for `edit_file`.
+ *
+ * The LLM frequently emits an `oldString` whose whitespace, indentation,
+ * or escape sequences are slightly off from the on-disk content. Rather
+ * than failing the call (which forces a re-read + retry round-trip),
+ * we walk a chain of progressively looser matchers, stopping at the
+ * first one that locates exactly one match. The matched on-disk slice
+ * is then literally replaced with `newString` — we never modify
+ * `newString`, only the search.
+ *
+ * Strategies are ordered from strict to lenient so we don't accidentally
+ * over-match a more specific pattern with a looser one. Inspired by
+ * opencode's nine-strategy chain (sst/opencode), trimmed to the four
+ * highest-yield strategies for a first cut. Add more (block-anchor +
+ * Levenshtein, escape-normalized, etc.) as needed.
+ */
+const exactStrategy = (source, oldString) => {
+    if (oldString === '')
+        return null;
+    const first = source.indexOf(oldString);
+    if (first === -1)
+        return null;
+    const second = source.indexOf(oldString, first + oldString.length);
+    if (second !== -1)
+        return null;
+    return { strategy: 'exact', start: first, end: first + oldString.length };
+};
+/**
+ * Match per-line, ignoring trailing whitespace differences. Useful for
+ * the very common case where the LLM stripped trailing spaces or added
+ * an extra blank.
+ */
+const lineTrimmedStrategy = (source, oldString) => {
+    if (oldString === '')
+        return null;
+    const sourceLines = source.split('\n');
+    const oldLines = oldString.split('\n');
+    if (oldLines.length === 0 || oldLines.length > sourceLines.length) {
+        return null;
+    }
+    let foundAt = -1;
+    for (let i = 0; i <= sourceLines.length - oldLines.length; i++) {
+        let ok = true;
+        for (let j = 0; j < oldLines.length; j++) {
+            if (sourceLines[i + j].trimEnd() !== oldLines[j].trimEnd()) {
+                ok = false;
+                break;
+            }
+        }
+        if (!ok)
+            continue;
+        if (foundAt !== -1)
+            return null; // multiple matches
+        foundAt = i;
+    }
+    if (foundAt === -1)
+        return null;
+    let start = 0;
+    for (let i = 0; i < foundAt; i++)
+        start += sourceLines[i].length + 1;
+    let end = start;
+    for (let i = 0; i < oldLines.length; i++) {
+        end += sourceLines[foundAt + i].length;
+        if (i < oldLines.length - 1)
+            end += 1;
+    }
+    return { strategy: 'line-trimmed', start, end };
+};
+/**
+ * Collapse all runs of whitespace to a single space and match. Catches
+ * cases where the LLM normalised tabs to spaces or vice-versa.
+ */
+const whitespaceNormalizedStrategy = (source, oldString) => {
+    if (oldString === '')
+        return null;
+    const norm = (s) => s.replace(/\s+/g, ' ').trim();
+    const normalizedNeedle = norm(oldString);
+    if (normalizedNeedle === '')
+        return null;
+    const sourceLines = source.split('\n');
+    const needleLines = oldString.split('\n');
+    if (needleLines.length > sourceLines.length)
+        return null;
+    let foundAt = -1;
+    for (let i = 0; i <= sourceLines.length - needleLines.length; i++) {
+        const candidate = sourceLines
+            .slice(i, i + needleLines.length)
+            .join('\n');
+        if (norm(candidate) !== normalizedNeedle)
+            continue;
+        if (foundAt !== -1)
+            return null;
+        foundAt = i;
+    }
+    if (foundAt === -1)
+        return null;
+    let start = 0;
+    for (let i = 0; i < foundAt; i++)
+        start += sourceLines[i].length + 1;
+    let end = start;
+    for (let i = 0; i < needleLines.length; i++) {
+        end += sourceLines[foundAt + i].length;
+        if (i < needleLines.length - 1)
+            end += 1;
+    }
+    return { strategy: 'whitespace-normalized', start, end };
+};
+/**
+ * Strip the common leading-indent from each line of the needle and
+ * each candidate window of the source. Catches the very common case
+ * where the LLM omitted the indentation it should have copied.
+ */
+const indentationFlexibleStrategy = (source, oldString) => {
+    if (oldString === '')
+        return null;
+    const stripCommonIndent = (block) => {
+        const lines = block.split('\n');
+        let common = Number.POSITIVE_INFINITY;
+        for (const line of lines) {
+            if (line.trim() === '')
+                continue;
+            const m = /^(\s*)/.exec(line);
+            const indent = m ? m[1].length : 0;
+            if (indent < common)
+                common = indent;
+            if (common === 0)
+                break;
+        }
+        if (!Number.isFinite(common) || common === 0)
+            return block;
+        return lines
+            .map((l) => (l.length >= common ? l.slice(common) : l))
+            .join('\n');
+    };
+    const normalizedNeedle = stripCommonIndent(oldString);
+    if (normalizedNeedle === '')
+        return null;
+    const sourceLines = source.split('\n');
+    const needleLines = oldString.split('\n');
+    if (needleLines.length > sourceLines.length)
+        return null;
+    let foundAt = -1;
+    for (let i = 0; i <= sourceLines.length - needleLines.length; i++) {
+        const window = sourceLines.slice(i, i + needleLines.length).join('\n');
+        if (stripCommonIndent(window) !== normalizedNeedle)
+            continue;
+        if (foundAt !== -1)
+            return null;
+        foundAt = i;
+    }
+    if (foundAt === -1)
+        return null;
+    let start = 0;
+    for (let i = 0; i < foundAt; i++)
+        start += sourceLines[i].length + 1;
+    let end = start;
+    for (let i = 0; i < needleLines.length; i++) {
+        end += sourceLines[foundAt + i].length;
+        if (i < needleLines.length - 1)
+            end += 1;
+    }
+    return { strategy: 'indentation-flexible', start, end };
+};
+const STRATEGY_CHAIN = [
+    exactStrategy,
+    lineTrimmedStrategy,
+    whitespaceNormalizedStrategy,
+    indentationFlexibleStrategy,
+];
+function locateEdit(source, oldString) {
+    for (const strategy of STRATEGY_CHAIN) {
+        const match = strategy(source, oldString);
+        if (match != null) {
+            return match;
+        }
+    }
+    return null;
+}
+function applyEdit(source, match, newString) {
+    return source.slice(0, match.start) + newString + source.slice(match.end);
+}
+
+exports.applyEdit = applyEdit;
+exports.locateEdit = locateEdit;
+//# sourceMappingURL=editStrategies.cjs.map

package/dist/cjs/tools/local/editStrategies.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"editStrategies.cjs","sources":["../../../../src/tools/local/editStrategies.ts"],"sourcesContent":["/**\n * Single-occurrence string-replacement strategies for `edit_file`.\n *\n * The LLM frequently emits an `oldString` whose whitespace, indentation,\n * or escape sequences are slightly off from the on-disk content. Rather\n * than failing the call (which forces a re-read + retry round-trip),\n * we walk a chain of progressively looser matchers, stopping at the\n * first one that locates exactly one match. The matched on-disk slice\n * is then literally replaced with `newString` — we never modify\n * `newString`, only the search.\n *\n * Strategies are ordered from strict to lenient so we don't accidentally\n * over-match a more specific pattern with a looser one. Inspired by\n * opencode's nine-strategy chain (sst/opencode), trimmed to the four\n * highest-yield strategies for a first cut. Add more (block-anchor +\n * Levenshtein, escape-normalized, etc.) as needed.\n */\n\nexport interface EditMatch {\n  /** Strategy name that produced the match, for telemetry/diagnostics. */\n  strategy: string;\n  /** Starting offset in the source. */\n  start: number;\n  /** Ending offset (exclusive). */\n  end: number;\n}\n\nexport type EditStrategy = (\n  source: string,\n  oldString: string\n) => EditMatch | null;\n\nconst exactStrategy: EditStrategy = (source, oldString) => {\n  if (oldString === '') return null;\n  const first = source.indexOf(oldString);\n  if (first === -1) return null;\n  const second = source.indexOf(oldString, first + oldString.length);\n  if (second !== -1) return null;\n  return { strategy: 'exact', start: first, end: first + oldString.length };\n};\n\n/**\n * Match per-line, ignoring trailing whitespace differences. Useful for\n * the very common case where the LLM stripped trailing spaces or added\n * an extra blank.\n */\nconst lineTrimmedStrategy: EditStrategy = (source, oldString) => {\n  if (oldString === '') return null;\n  const sourceLines = source.split('\\n');\n  const oldLines = oldString.split('\\n');\n  if (oldLines.length === 0 || oldLines.length > sourceLines.length) {\n    return null;\n  }\n\n  let foundAt = -1;\n  for (let i = 0; i <= sourceLines.length - oldLines.length; i++) {\n    let ok = true;\n    for (let j = 0; j < oldLines.length; j++) {\n      if (sourceLines[i + j].trimEnd() !== oldLines[j].trimEnd()) {\n        ok = false;\n        break;\n      }\n    }\n    if (!ok) continue;\n    if (foundAt !== -1) return null; // multiple matches\n    foundAt = i;\n  }\n  if (foundAt === -1) return null;\n\n  let start = 0;\n  for (let i = 0; i < foundAt; i++) start += sourceLines[i].length + 1;\n  let end = start;\n  for (let i = 0; i < oldLines.length; i++) {\n    end += sourceLines[foundAt + i].length;\n    if (i < oldLines.length - 1) end += 1;\n  }\n  return { strategy: 'line-trimmed', start, end };\n};\n\n/**\n * Collapse all runs of whitespace to a single space and match. Catches\n * cases where the LLM normalised tabs to spaces or vice-versa.\n */\nconst whitespaceNormalizedStrategy: EditStrategy = (source, oldString) => {\n  if (oldString === '') return null;\n  const norm = (s: string): string => s.replace(/\\s+/g, ' ').trim();\n  const normalizedNeedle = norm(oldString);\n  if (normalizedNeedle === '') return null;\n\n  const sourceLines = source.split('\\n');\n  const needleLines = oldString.split('\\n');\n  if (needleLines.length > sourceLines.length) return null;\n\n  let foundAt = -1;\n  for (let i = 0; i <= sourceLines.length - needleLines.length; i++) {\n    const candidate = sourceLines\n      .slice(i, i + needleLines.length)\n      .join('\\n');\n    if (norm(candidate) !== normalizedNeedle) continue;\n    if (foundAt !== -1) return null;\n    foundAt = i;\n  }\n  if (foundAt === -1) return null;\n\n  let start = 0;\n  for (let i = 0; i < foundAt; i++) start += sourceLines[i].length + 1;\n  let end = start;\n  for (let i = 0; i < needleLines.length; i++) {\n    end += sourceLines[foundAt + i].length;\n    if (i < needleLines.length - 1) end += 1;\n  }\n  return { strategy: 'whitespace-normalized', start, end };\n};\n\n/**\n * Strip the common leading-indent from each line of the needle and\n * each candidate window of the source. Catches the very common case\n * where the LLM omitted the indentation it should have copied.\n */\nconst indentationFlexibleStrategy: EditStrategy = (source, oldString) => {\n  if (oldString === '') return null;\n\n  const stripCommonIndent = (block: string): string => {\n    const lines = block.split('\\n');\n    let common = Number.POSITIVE_INFINITY;\n    for (const line of lines) {\n      if (line.trim() === '') continue;\n      const m = /^(\\s*)/.exec(line);\n      const indent = m ? m[1].length : 0;\n      if (indent < common) common = indent;\n      if (common === 0) break;\n    }\n    if (!Number.isFinite(common) || common === 0) return block;\n    return lines\n      .map((l) => (l.length >= common ? l.slice(common) : l))\n      .join('\\n');\n  };\n\n  const normalizedNeedle = stripCommonIndent(oldString);\n  if (normalizedNeedle === '') return null;\n\n  const sourceLines = source.split('\\n');\n  const needleLines = oldString.split('\\n');\n  if (needleLines.length > sourceLines.length) return null;\n\n  let foundAt = -1;\n  for (let i = 0; i <= sourceLines.length - needleLines.length; i++) {\n    const window = sourceLines.slice(i, i + needleLines.length).join('\\n');\n    if (stripCommonIndent(window) !== normalizedNeedle) continue;\n    if (foundAt !== -1) return null;\n    foundAt = i;\n  }\n  if (foundAt === -1) return null;\n\n  let start = 0;\n  for (let i = 0; i < foundAt; i++) start += sourceLines[i].length + 1;\n  let end = start;\n  for (let i = 0; i < needleLines.length; i++) {\n    end += sourceLines[foundAt + i].length;\n    if (i < needleLines.length - 1) end += 1;\n  }\n  return { strategy: 'indentation-flexible', start, end };\n};\n\nconst STRATEGY_CHAIN: EditStrategy[] = [\n  exactStrategy,\n  lineTrimmedStrategy,\n  whitespaceNormalizedStrategy,\n  indentationFlexibleStrategy,\n];\n\nexport function locateEdit(source: string, oldString: string): EditMatch | null {\n  for (const strategy of STRATEGY_CHAIN) {\n    const match = strategy(source, oldString);\n    if (match != null) {\n      return match;\n    }\n  }\n  return null;\n}\n\nexport function applyEdit(\n  source: string,\n  match: EditMatch,\n  newString: string\n): string {\n  return source.slice(0, match.start) + newString + source.slice(match.end);\n}\n"],"names":[],"mappings":";;AAAA;;;;;;;;;;;;;;;;AAgBG;AAgBH,MAAM,aAAa,GAAiB,CAAC,MAAM,EAAE,SAAS,KAAI;IACxD,IAAI,SAAS,KAAK,EAAE;AAAE,QAAA,OAAO,IAAI;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;IACvC,IAAI,KAAK,KAAK,EAAE;AAAE,QAAA,OAAO,IAAI;AAC7B,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC;IAClE,IAAI,MAAM,KAAK,EAAE;AAAE,QAAA,OAAO,IAAI;AAC9B,IAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE;AAC3E,CAAC;AAED;;;;AAIG;AACH,MAAM,mBAAmB,GAAiB,CAAC,MAAM,EAAE,SAAS,KAAI;IAC9D,IAAI,SAAS,KAAK,EAAE;AAAE,QAAA,OAAO,IAAI;IACjC,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IACtC,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;AACtC,IAAA,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE;AACjE,QAAA,OAAO,IAAI;IACb;AAEA,IAAA,IAAI,OAAO,GAAG,EAAE;AAChB,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QAC9D,IAAI,EAAE,GAAG,IAAI;AACb,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AACxC,YAAA,IAAI,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC1D,EAAE,GAAG,KAAK;gBACV;YACF;QACF;AACA,QAAA,IAAI,CAAC,EAAE;YAAE;QACT,IAAI,OAAO,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QAChC,OAAO,GAAG,CAAC;IACb;IACA,IAAI,OAAO,KAAK,EAAE;AAAE,QAAA,OAAO,IAAI;IAE/B,IAAI,KAAK,GAAG,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE;QAAE,KAAK,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;IACpE,IAAI,GAAG,GAAG,KAAK;AACf,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACxC,GAAG,IAAI,WAAW,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM;AACtC,QAAA,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,IAAI,CAAC;IACvC;IACA,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE;AACjD,CAAC;AAED;;;AAGG;AACH,MAAM,4BAA4B,GAAiB,CAAC,MAAM,EAAE,SAAS,KAAI;IACvE,IAAI,SAAS,KAAK,EAAE;AAAE,QAAA,OAAO,IAAI;AACjC,IAAA,MAAM,IAAI,GAAG,CAAC,CAAS,KAAa,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE;AACjE,IAAA,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC;IACxC,IAAI,gBAAgB,KAAK,EAAE;AAAE,QAAA,OAAO,IAAI;IAExC,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IACtC,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;AACzC,IAAA,IAAI,WAAW,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM;AAAE,QAAA,OAAO,IAAI;AAExD,IAAA,IAAI,OAAO,GAAG,EAAE;AAChB,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACjE,MAAM,SAAS,GAAG;aACf,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM;aAC/B,IAAI,CAAC,IAAI,CAAC;AACb,QAAA,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,gBAAgB;YAAE;QAC1C,IAAI,OAAO,KAAK,EAAE;AAAE,YAAA,OAAO,IAAI;QAC/B,OAAO,GAAG,CAAC;IACb;IACA,IAAI,OAAO,KAAK,EAAE;AAAE,QAAA,OAAO,IAAI;IAE/B,IAAI,KAAK,GAAG,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE;QAAE,KAAK,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;IACpE,IAAI,GAAG,GAAG,KAAK;AACf,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QAC3C,GAAG,IAAI,WAAW,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM;AACtC,QAAA,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,IAAI,CAAC;IAC1C;IACA,OAAO,EAAE,QAAQ,EAAE,uBAAuB,EAAE,KAAK,EAAE,GAAG,EAAE;AAC1D,CAAC;AAED;;;;AAIG;AACH,MAAM,2BAA2B,GAAiB,CAAC,MAAM,EAAE,SAAS,KAAI;IACtE,IAAI,SAAS,KAAK,EAAE;AAAE,QAAA,OAAO,IAAI;AAEjC,IAAA,MAAM,iBAAiB,GAAG,CAAC,KAAa,KAAY;QAClD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;AAC/B,QAAA,IAAI,MAAM,GAAG,MAAM,CAAC,iBAAiB;AACrC,QAAA,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;AACxB,YAAA,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE;YACxB,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;AAC7B,YAAA,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;YAClC,IAAI,MAAM,GAAG,MAAM;gBAAE,MAAM,GAAG,MAAM;YACpC,IAAI,MAAM,KAAK,CAAC;gBAAE;QACpB;QACA,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,CAAC;AAAE,YAAA,OAAO,KAAK;AAC1D,QAAA,OAAO;aACJ,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aACrD,IAAI,CAAC,IAAI,CAAC;AACf,IAAA,CAAC;AAED,IAAA,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,SAAS,CAAC;IACrD,IAAI,gBAAgB,KAAK,EAAE;AAAE,QAAA,OAAO,IAAI;IAExC,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IACtC,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;AACzC,IAAA,IAAI,WAAW,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM;AAAE,QAAA,OAAO,IAAI;AAExD,IAAA,IAAI,OAAO,GAAG,EAAE;AAChB,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AACjE,QAAA,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AACtE,QAAA,IAAI,iBAAiB,CAAC,MAAM,CAAC,KAAK,gBAAgB;YAAE;QACpD,IAAI,OAAO,KAAK,EAAE;AAAE,YAAA,OAAO,IAAI;QAC/B,OAAO,GAAG,CAAC;IACb;IACA,IAAI,OAAO,KAAK,EAAE;AAAE,QAAA,OAAO,IAAI;IAE/B,IAAI,KAAK,GAAG,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE;QAAE,KAAK,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;IACpE,IAAI,GAAG,GAAG,KAAK;AACf,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QAC3C,GAAG,IAAI,WAAW,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM;AACtC,QAAA,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,IAAI,CAAC;IAC1C;IACA,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,KAAK,EAAE,GAAG,EAAE;AACzD,CAAC;AAED,MAAM,cAAc,GAAmB;IACrC,aAAa;IACb,mBAAmB;IACnB,4BAA4B;IAC5B,2BAA2B;CAC5B;AAEK,SAAU,UAAU,CAAC,MAAc,EAAE,SAAiB,EAAA;AAC1D,IAAA,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE;QACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;AACzC,QAAA,IAAI,KAAK,IAAI,IAAI,EAAE;AACjB,YAAA,OAAO,KAAK;QACd;IACF;AACA,IAAA,OAAO,IAAI;AACb;SAEgB,SAAS,CACvB,MAAc,EACd,KAAgB,EAChB,SAAiB,EAAA;IAEjB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;AAC3E;;;;;"}