@molecule/api-ai-tools 1.17.11 → 1.17.12

package/README.md

@@ -3,7 +3,7 @@ AUTO-GENERATED — DO NOT EDIT THIS FILE.
 Generated by `mlcl sync-docs` from the package's src/index.ts JSDoc + mlcl/registry.json.
 Edits here are overwritten on the next commit (molecule's pre-commit hook regenerates).
 To change this document, edit the module-level JSDoc in src/index.ts.
-Generated: 2026-11-12T08:35:53.429Z
+Generated: 2026-11-12T09:30:47.522Z
 -->
 
 # @molecule/api-ai-tools
@@ -6020,7 +6020,8 @@ Peer dependencies:
 - `typescript`
 
 - `outputFilterAfterRunner` returns only removable output cuts. File redirects, in-place
-  edits and filter programs with write or execution effects retain their pipelines.
+  edits, command substitutions and filter programs with write or execution effects retain
+  their pipelines. Dynamic/external filter scripts and unrecognized awk options stay unchanged.
 - Playwright commands apply `excludedTestTitles` before launch. Existing
   literal filters remain in effect. Dynamic filters and opaque launchers stay unchanged.
 - **Trimmed test output keeps every failure named.** Shared log cuts prioritize capped

package/dist/index.d.ts

@@ -13,7 +13,8 @@
  *
  * @remarks
  * - `outputFilterAfterRunner` returns only removable output cuts. File redirects, in-place
- *   edits and filter programs with write or execution effects retain their pipelines.
+ *   edits, command substitutions and filter programs with write or execution effects retain
+ *   their pipelines. Dynamic/external filter scripts and unrecognized awk options stay unchanged.
  * - Playwright commands apply `excludedTestTitles` before launch. Existing
  *   literal filters remain in effect. Dynamic filters and opaque launchers stay unchanged.
  * - **Trimmed test output keeps every failure named.** Shared log cuts prioritize capped

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwLG;AAEH,cAAc,qBAAqB,CAAA;AACnC,cAAc,uBAAuB,CAAA;AACrC,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,mBAAmB,CAAA;AACjC,cAAc,uBAAuB,CAAA;AACrC,cAAc,cAAc,CAAA;AAC5B,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,uBAAuB,CAAA;AACrC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,yBAAyB,CAAA;AACvC,cAAc,0BAA0B,CAAA;AACxC,cAAc,oCAAoC,CAAA;AAClD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,wBAAwB,CAAA;AACtC,cAAc,cAAc,CAAA;AAC5B,cAAc,qBAAqB,CAAA;AACnC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,mBAAmB,CAAA;AACjC,cAAc,YAAY,CAAA;AAC1B,cAAc,sBAAsB,CAAA;AACpC,cAAc,YAAY,CAAA;AAC1B,cAAc,gBAAgB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyLG;AAEH,cAAc,qBAAqB,CAAA;AACnC,cAAc,uBAAuB,CAAA;AACrC,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,mBAAmB,CAAA;AACjC,cAAc,uBAAuB,CAAA;AACrC,cAAc,cAAc,CAAA;AAC5B,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,uBAAuB,CAAA;AACrC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,yBAAyB,CAAA;AACvC,cAAc,0BAA0B,CAAA;AACxC,cAAc,oCAAoC,CAAA;AAClD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,wBAAwB,CAAA;AACtC,cAAc,cAAc,CAAA;AAC5B,cAAc,qBAAqB,CAAA;AACnC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,mBAAmB,CAAA;AACjC,cAAc,YAAY,CAAA;AAC1B,cAAc,sBAAsB,CAAA;AACpC,cAAc,YAAY,CAAA;AAC1B,cAAc,gBAAgB,CAAA"}

package/dist/index.js

@@ -13,7 +13,8 @@
  *
  * @remarks
  * - `outputFilterAfterRunner` returns only removable output cuts. File redirects, in-place
- *   edits and filter programs with write or execution effects retain their pipelines.
+ *   edits, command substitutions and filter programs with write or execution effects retain
+ *   their pipelines. Dynamic/external filter scripts and unrecognized awk options stay unchanged.
  * - Playwright commands apply `excludedTestTitles` before launch. Existing
  *   literal filters remain in effect. Dynamic filters and opaque launchers stay unchanged.
  * - **Trimmed test output keeps every failure named.** Shared log cuts prioritize capped

package/dist/output-filter-safety.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"output-filter-safety.d.ts","sourceRoot":"","sources":["../src/output-filter-safety.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AA2B3D;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAanE"}
+{"version":3,"file":"output-filter-safety.d.ts","sourceRoot":"","sources":["../src/output-filter-safety.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AA2B3D;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAyCnE"}

package/dist/output-filter-safety.js

@@ -32,13 +32,38 @@ export function isOutputOnlyFilter(segment) {
         return false;
     if (segment.args.some((arg) => OUTPUT_REDIRECT.test(arg)))
         return false;
+    // Filter arguments can run commands before the filter starts. Keep opaque expansions
+    // rather than erase their effects; a quoted literal containing the same syntax may stay too.
+    if (segment.args.some((arg) => /\$\(|`|[<>]\(/.test(arg)))
+        return false;
+    if (segment.args.some((arg) => {
+        if (/^'[^']*'$/.test(arg))
+            return false;
+        const word = arg.endsWith('"') ? arg.slice(0, -1) : arg;
+        return /\$[A-Za-z0-9_('"{?$!#*@-]/.test(word) || word.includes('$[');
+    }))
+        return false;
     if (segment.program === 'sed' &&
         segment.args.some((arg) => /^(?:--in-place\b|-[A-Za-z]*i)/.test(arg)))
         return false;
     if (segment.program === 'awk' || segment.program === 'sed') {
+        // Implementation-specific awk options can load code or write auxiliary files. Only the
+        // ordinary field-separator/variable options are understood here; preserve all other flags.
+        if (segment.program === 'awk' &&
+            segment.args.some((arg) => arg.startsWith('-') && !/^(?:-[Fv]|--(?:field-separator|assign)(?:=|$)|--$)/.test(arg)))
+            return false;
+        // External programs cannot be proved output-only from this invocation's text.
+        if (segment.args.some((arg) => /^(?:-[fEiIl]|--(?:file|include|load))(?:=|$|[^-])/.test(arg)))
+            return false;
         const program = segment.args.map((arg) => arg.replace(/^['"]|['"]$/g, '')).join(' ');
         if (/\bsystem\s*\(|>|\bw\s+\S/.test(program))
             return false;
+        // awk can execute a pipe through getline without system(). sed can execute or write text.
+        // Keep ambiguous sed command letters rather than parse its language here.
+        if (segment.program === 'awk' && /\||@/.test(program))
+            return false;
+        if (segment.program === 'sed' && /[ewW]/.test(program))
+            return false;
     }
     return true;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@molecule/api-ai-tools",
-  "version": "1.17.11",
+  "version": "1.17.12",
   "description": "Shared AI agent tools with backend abstraction for sandbox and local execution",
   "type": "module",
   "main": "dist/index.js",