@namzu/sdk 14.0.7 → 15.0.0

package/dist/tools/__tests__/file-tool-containment.test.js

@@ -1,134 +0,0 @@
-import { mkdirSync, mkdtempSync, readFileSync, symlinkSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import { describe, expect, it } from 'vitest';
-import { EditTool } from '../builtins/edit.js';
-import { ReadFileTool } from '../builtins/read-file.js';
-import { WriteFileTool } from '../builtins/write-file.js';
-/**
- * `read`, `write` and `edit` all called `resolve(workingDirectory, input.path)`
- * bare. The search tools — `glob`, `grep`, `ls` — were contained; the three
- * that actually read and mutate user files were not, so `path: "../../.."`
- * reached whatever sits above the working directory with no sandbox involved.
- * `resolveWithin` existed the whole time, and its own docstring says the
- * filesystem tools never reached it.
- *
- * The second half is subtler and is why a lexical check alone was not the
- * answer. `atomicWriteFile` resolves its destination and writes THROUGH a
- * symlink on purpose, so that editing a linked file updates the target rather
- * than replacing the link with a regular file. Paired with a lexical check
- * that is check-then-follow: `./escape -> /elsewhere` climbs nothing on paper
- * and the write lands outside anyway. CWE-59; the ordering fix is CWE-22's
- * stated mitigation — canonicalize, then validate the canonical form.
- *
- * The over-rejection cases matter as much as the escapes. A containment check
- * that refuses legitimate paths is not a safer version of one that works, and
- * the trap is real: `os.tmpdir()` is itself a symlink on macOS, so
- * canonicalizing the candidate while comparing against a raw root would refuse
- * every path in a temp directory — including every path in this file.
- */
-function workspace() {
-    const root = mkdtempSync(join(tmpdir(), 'namzu-contain-'));
-    const outside = mkdtempSync(join(tmpdir(), 'namzu-outside-'));
-    writeFileSync(join(outside, 'secret.txt'), 'SECRET');
-    writeFileSync(join(root, 'inside.txt'), 'inside content');
-    return { root, outside };
-}
-const ctx = (root) => ({
-    runId: 'run_test',
-    workingDirectory: root,
-    abortSignal: new AbortController().signal,
-    env: {},
-    log: () => { },
-});
-/**
- * Whether this host can create a symlink at all.
- *
- * Windows refuses without elevation or Developer Mode (`EPERM`), and the
- * first version of this file swallowed that per-test and returned early — so
- * three symlink tests reported PASSED on a machine where they had exercised
- * nothing. A test that cannot run must say so; a green tick for work that
- * did not happen is the failure this whole file exists to catch, one level
- * up. `skipIf` makes the reporter print it as skipped, and CI runs on Linux
- * where the probe succeeds and the cases actually execute.
- */
-const CAN_SYMLINK = (() => {
-    try {
-        const probeRoot = mkdtempSync(join(tmpdir(), 'namzu-symprobe-'));
-        symlinkSync(probeRoot, join(probeRoot, 'self'), 'dir');
-        return true;
-    }
-    catch {
-        return false;
-    }
-})();
-describe('the file tools stay inside the working directory', () => {
-    it('read refuses a traversal', async () => {
-        const { root, outside } = workspace();
-        const climb = join('..', join(outside).split(/[\\/]/).pop(), 'secret.txt');
-        const result = await ReadFileTool.execute({ path: climb }, ctx(root));
-        expect(result.success).toBe(false);
-        expect(result.error).toMatch(/escapes the working directory/);
-    });
-    it('write refuses a traversal', async () => {
-        const { root } = workspace();
-        const result = await WriteFileTool.execute({ path: '../escaped.txt', content: 'nope' }, ctx(root));
-        expect(result.success).toBe(false);
-        expect(result.error).toMatch(/escapes the working directory/);
-    });
-    it('edit refuses a traversal', async () => {
-        const { root } = workspace();
-        const result = await EditTool.execute({ path: '../escaped.txt', old_string: 'a', new_string: 'b' }, ctx(root));
-        expect(result.success).toBe(false);
-        expect(result.error).toMatch(/escapes the working directory/);
-    });
-    it.skipIf(!CAN_SYMLINK)('write refuses a path that climbs out THROUGH a symlink', async () => {
-        const { root, outside } = workspace();
-        symlinkSync(outside, join(root, 'escape'), 'dir');
-        const result = await WriteFileTool.execute({ path: 'escape/planted.txt', content: 'nope' }, ctx(root));
-        expect(result.success).toBe(false);
-        expect(result.error).toMatch(/escapes the working directory/);
-        // The whole point: nothing was written outside.
-        expect(() => readFileSync(join(outside, 'planted.txt'))).toThrow();
-    });
-    it.skipIf(!CAN_SYMLINK)('read refuses a file reached through a symlink out of the root', async () => {
-        const { root, outside } = workspace();
-        symlinkSync(outside, join(root, 'escape'), 'dir');
-        const result = await ReadFileTool.execute({ path: 'escape/secret.txt' }, ctx(root));
-        expect(result.success).toBe(false);
-        expect(result.error).toMatch(/escapes the working directory/);
-    });
-    it.skipIf(!CAN_SYMLINK)('edit refuses a file reached through a symlink out of the root', async () => {
-        const { root, outside } = workspace();
-        symlinkSync(join(outside, 'secret.txt'), join(root, 'linked.txt'), 'file');
-        const result = await EditTool.execute({ path: 'linked.txt', old_string: 'SECRET', new_string: 'REPLACED' }, ctx(root));
-        expect(result.success).toBe(false);
-        expect(readFileSync(join(outside, 'secret.txt'), 'utf-8')).toBe('SECRET');
-    });
-});
-describe('the containment check does not over-reject', () => {
-    it('reads a file inside the root, whose temp root is itself a symlink on some platforms', async () => {
-        const { root } = workspace();
-        const result = await ReadFileTool.execute({ path: 'inside.txt' }, ctx(root));
-        expect(result.success).toBe(true);
-        expect(result.output).toContain('inside content');
-    });
-    it('creates a file that does not exist yet, in a directory that does not either', async () => {
-        const { root } = workspace();
-        const result = await WriteFileTool.execute({ path: 'nested/deeper/fresh.txt', content: 'hello' }, ctx(root));
-        expect(result.success).toBe(true);
-        expect(readFileSync(join(root, 'nested', 'deeper', 'fresh.txt'), 'utf-8')).toBe('hello');
-    });
-    it.skipIf(!CAN_SYMLINK)('still follows a symlink that stays inside the root', async () => {
-        const { root } = workspace();
-        mkdirSync(join(root, 'real'));
-        writeFileSync(join(root, 'real', 'target.txt'), 'original');
-        symlinkSync(join(root, 'real', 'target.txt'), join(root, 'alias.txt'), 'file');
-        const result = await EditTool.execute({ path: 'alias.txt', old_string: 'original', new_string: 'updated' }, ctx(root));
-        expect(result.success).toBe(true);
-        // Written THROUGH the link, so the link survives and the target moved —
-        // the behaviour `atomicWriteFile` exists to preserve.
-        expect(readFileSync(join(root, 'real', 'target.txt'), 'utf-8')).toBe('updated');
-    });
-});
-//# sourceMappingURL=file-tool-containment.test.js.map

package/dist/tools/__tests__/file-tool-containment.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"file-tool-containment.test.js","sourceRoot":"","sources":["../../../src/tools/__tests__/file-tool-containment.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC1F,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAG7C,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAEzD;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,SAAS,SAAS;IACjB,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAA;IAC1D,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAA;IAC7D,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,QAAQ,CAAC,CAAA;IACpD,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,gBAAgB,CAAC,CAAA;IACzD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;AACzB,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,IAAY,EAAe,EAAE,CACzC,CAAC;IACA,KAAK,EAAE,UAAkC;IACzC,gBAAgB,EAAE,IAAI;IACtB,WAAW,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM;IACzC,GAAG,EAAE,EAAE;IACP,GAAG,EAAE,GAAG,EAAE,GAAE,CAAC;CACb,CAA2B,CAAA;AAE7B;;;;;;;;;;GAUG;AACH,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE;IACzB,IAAI,CAAC;QACJ,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAA;QAChE,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;QACtD,OAAO,IAAI,CAAA;IACZ,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAA;IACb,CAAC;AACF,CAAC,CAAC,EAAE,CAAA;AAEJ,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IACjE,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,SAAS,EAAE,CAAA;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAY,EAAE,YAAY,CAAC,CAAA;QAEpF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAW,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;QAE9E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,CAAA;QAE5B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CACzC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAW,EACpD,GAAG,CAAC,IAAI,CAAC,CACT,CAAA;QAED,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,CAAA;QAE5B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CACpC,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAW,EACrE,GAAG,CAAC,IAAI,CAAC,CACT,CAAA;QAED,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,SAAS,EAAE,CAAA;QACrC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAA;QAEjD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CACzC,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,EAAW,EACxD,GAAG,CAAC,IAAI,CAAC,CACT,CAAA;QAED,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAA;QAC7D,gDAAgD;QAChD,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;IACnE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CACtB,+DAA+D,EAC/D,KAAK,IAAI,EAAE;QACV,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,SAAS,EAAE,CAAA;QACrC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAA;QAEjD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAW,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;QAE5F,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAA;IAC9D,CAAC,CACD,CAAA;IAED,EAAE,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CACtB,+DAA+D,EAC/D,KAAK,IAAI,EAAE;QACV,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,SAAS,EAAE,CAAA;QACrC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAA;QAE1E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CACpC,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAW,EAC7E,GAAG,CAAC,IAAI,CAAC,CACT,CAAA;QAED,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC1E,CAAC,CACD,CAAA;AACF,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC3D,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACpG,MAAM,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,CAAA;QAE5B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,YAAY,EAAW,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;QAErF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,CAAA;QAE5B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CACzC,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,OAAO,EAAW,EAC9D,GAAG,CAAC,IAAI,CAAC,CACT,CAAA;QAED,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACzF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,CAAA;QAC5B,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;QAC7B,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,UAAU,CAAC,CAAA;QAC3D,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAA;QAE9E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CACpC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAW,EAC7E,GAAG,CAAC,IAAI,CAAC,CACT,CAAA;QAED,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjC,wEAAwE;QACxE,sDAAsD;QACtD,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/tools/__tests__/path-containment.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=path-containment.test.d.ts.map

package/dist/tools/__tests__/path-containment.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"path-containment.test.d.ts","sourceRoot":"","sources":["../../../src/tools/__tests__/path-containment.test.ts"],"names":[],"mappings":""}

package/dist/tools/__tests__/path-containment.test.js

@@ -1,133 +0,0 @@
-import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join, resolve } from 'node:path';
-import { afterEach, beforeEach, describe, expect, it } from 'vitest';
-import { GlobTool } from '../builtins/glob.js';
-import { GrepTool } from '../builtins/grep.js';
-import { LsTool } from '../builtins/ls.js';
-import { matchesGlob } from '../glob-match.js';
-import { resolveWithin } from '../paths.js';
-/**
- * The containment rule existed — in one private function inside the local
- * sandbox provider — and the filesystem tools never reached it. They
- * resolved a caller-supplied path against the working directory bare, so
- * `path: "../../.."` landed wherever that pointed and the tool read it
- * happily.
- *
- * That holds with no sandbox configured at all, which is the common case,
- * so the escape needed no misconfiguration to reach: a model that asks for
- * a parent directory gets one. And `grep` returns file CONTENT, so what
- * escaped was not a listing.
- */
-let root;
-let outside;
-beforeEach(() => {
-    const base = mkdtempSync(join(tmpdir(), 'namzu-containment-'));
-    root = join(base, 'workspace');
-    outside = join(base, 'secrets');
-    mkdirSync(root, { recursive: true });
-    mkdirSync(outside, { recursive: true });
-    writeFileSync(join(root, 'inside.ts'), 'const inside = true\n');
-    writeFileSync(join(outside, 'credentials.txt'), 'SECRET_TOKEN=hunter2\n');
-});
-afterEach(() => {
-    rmSync(resolve(root, '..'), { recursive: true, force: true });
-});
-const context = () => ({
-    workingDirectory: root,
-    env: {},
-    abortSignal: new AbortController().signal,
-});
-describe('resolveWithin', () => {
-    it('accepts a path inside the root', () => {
-        expect(resolveWithin('/work', 'src/a.ts')).toBe(resolve('/work/src/a.ts'));
-    });
-    it('treats an absent path as the root itself', () => {
-        expect(resolveWithin('/work', undefined)).toBe(resolve('/work'));
-    });
-    it('refuses a climb out', () => {
-        expect(() => resolveWithin('/work', '../../..')).toThrow(/escapes the working directory/);
-    });
-    it('refuses an absolute path elsewhere', () => {
-        expect(() => resolveWithin('/work', '/etc/passwd')).toThrow(/escapes the working directory/);
-    });
-    it('refuses a sibling that merely shares a prefix', () => {
-        // A `startsWith` test would call this inside, which is the whole
-        // reason the check uses `relative`.
-        expect(() => resolveWithin('/work', '../work-backup')).toThrow(/escapes/);
-    });
-    it('allows a climb that lands back inside', () => {
-        expect(resolveWithin('/work', 'src/../lib/a.ts')).toBe(resolve('/work/lib/a.ts'));
-    });
-});
-describe('glob', () => {
-    it('refuses a path that climbs out', async () => {
-        const result = await GlobTool.execute({ pattern: '*.txt', path: '../secrets' }, context());
-        // A refusal reaches the model as a failed tool result rather than a
-        // throw, so it can read WHY and correct itself.
-        expect(result.success).toBe(false);
-        expect(result.error).toMatch(/escapes the working directory/);
-    });
-    it('refuses an escape hidden in the pattern', async () => {
-        // The base directory lifted out of a pattern is caller-supplied too.
-        const result = await GlobTool.execute({ pattern: '../secrets/**/*.txt' }, context());
-        expect(result.success).toBe(false);
-        expect(result.error).toMatch(/escapes the working directory/);
-    });
-    it('still finds what is inside', async () => {
-        const result = await GlobTool.execute({ pattern: '**/*.ts' }, context());
-        expect(result.success).toBe(true);
-        expect(result.output).toContain('inside.ts');
-    });
-});
-describe('grep', () => {
-    it('refuses a path that climbs out', async () => {
-        const result = await GrepTool.execute({
-            pattern: 'SECRET',
-            path: '../secrets',
-            case_sensitive: true,
-            context_lines: 0,
-            max_results: 10,
-        }, context());
-        expect(result.success).toBe(false);
-        expect(result.error).toMatch(/escapes the working directory/);
-        expect(JSON.stringify(result)).not.toContain('hunter2');
-    });
-    it('never returns content from outside the working directory', async () => {
-        const result = await GrepTool.execute({ pattern: 'SECRET', case_sensitive: true, context_lines: 0, max_results: 50 }, context());
-        // grep returns file CONTENT, so an escape here reads rather than lists.
-        expect(result.output).not.toContain('hunter2');
-    });
-    it('still finds what is inside', async () => {
-        const result = await GrepTool.execute({ pattern: 'inside', case_sensitive: true, context_lines: 0, max_results: 50 }, context());
-        expect(result.output).toContain('inside.ts');
-    });
-});
-describe('ls', () => {
-    it('refuses a path that climbs out', async () => {
-        const result = await LsTool.execute({ path: '../secrets' }, context());
-        expect(result.success).toBe(false);
-        expect(result.error).toMatch(/escapes the working directory/);
-    });
-});
-describe('glob matching', () => {
-    it.each([
-        ['**/*.ts', 'src/a.ts', true],
-        ['**/*.ts', 'a.ts', true],
-        ['*.ts', 'a.ts', true],
-        ['*.ts', 'src/a.ts', false],
-        ['src/*.ts', 'src/a.ts', true],
-        ['src/*.ts', 'src/deep/a.ts', false],
-        ['**/*.ts', 'a.tsx', false],
-        ['a?.ts', 'ab.ts', true],
-        ['a?.ts', 'abc.ts', false],
-    ])('%s vs %s', (pattern, path, expected) => {
-        expect(matchesGlob(path, pattern)).toBe(expected);
-    });
-    it('treats regex punctuation in a pattern as literal', () => {
-        // A pattern is not a regex; `a.b` must not match `axb`.
-        expect(matchesGlob('a.b.ts', 'a.b.ts')).toBe(true);
-        expect(matchesGlob('axb.ts', 'a.b.ts')).toBe(false);
-    });
-});
-//# sourceMappingURL=path-containment.test.js.map

package/dist/tools/__tests__/path-containment.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"path-containment.test.js","sourceRoot":"","sources":["../../../src/tools/__tests__/path-containment.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAGpE,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE3C;;;;;;;;;;;GAWG;AAEH,IAAI,IAAY,CAAA;AAChB,IAAI,OAAe,CAAA;AAEnB,UAAU,CAAC,GAAG,EAAE;IACf,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAA;IAC9D,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;IAC9B,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IAC/B,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACpC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACvC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,uBAAuB,CAAC,CAAA;IAC/D,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,wBAAwB,CAAC,CAAA;AAC1E,CAAC,CAAC,CAAA;AAEF,SAAS,CAAC,GAAG,EAAE;IACd,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AAC9D,CAAC,CAAC,CAAA;AAEF,MAAM,OAAO,GAAG,GAAgB,EAAE,CACjC,CAAC;IACA,gBAAgB,EAAE,IAAI;IACtB,GAAG,EAAE,EAAE;IACP,WAAW,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM;CACzC,CAA2B,CAAA;AAE7B,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAA;IAC3E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;IACjE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAA;IAC1F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAA;IAC7F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACxD,iEAAiE;QACjE,oCAAoC;QACpC,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAA;IAClF,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;IACrB,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CACpC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAW,EACjD,OAAO,EAAE,CACT,CAAA;QACD,oEAAoE;QACpE,gDAAgD;QAChD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACxD,qEAAqE;QACrE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,qBAAqB,EAAW,EAAE,OAAO,EAAE,CAAC,CAAA;QAC7F,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,EAAW,EAAE,OAAO,EAAE,CAAC,CAAA;QACjF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;IACrB,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CACpC;YACC,OAAO,EAAE,QAAQ;YACjB,IAAI,EAAE,YAAY;YAClB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,CAAC;YAChB,WAAW,EAAE,EAAE;SACN,EACV,OAAO,EAAE,CACT,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAA;QAC7D,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CACpC,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAW,EACvF,OAAO,EAAE,CACT,CAAA;QACD,wEAAwE;QACxE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CACpC,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAW,EACvF,OAAO,EAAE,CACT,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE;IACnB,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,YAAY,EAAW,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,IAAI,CAAC;QACP,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC;QAC7B,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC;QACzB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC;QACtB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC;QAC3B,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC;QAC9B,CAAC,UAAU,EAAE,eAAe,EAAE,KAAK,CAAC;QACpC,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC;QAC3B,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;QACxB,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC;KAC1B,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QAC1C,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC3D,wDAAwD;QACxD,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClD,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/tools/__tests__/posix-path.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=posix-path.test.d.ts.map

package/dist/tools/__tests__/posix-path.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"posix-path.test.d.ts","sourceRoot":"","sources":["../../../src/tools/__tests__/posix-path.test.ts"],"names":[],"mappings":""}

package/dist/tools/__tests__/posix-path.test.js

@@ -1,67 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { joinPosix, relativePosix, resolveWithinPosix } from '../posix-path.js';
-/**
- * A sandbox is a POSIX filesystem whatever the host runs, so resolving its
- * paths with the host's path module rewrites them whenever the two
- * disagree — on a Windows host `resolve('/workspace')` becomes
- * `C:\workspace`, and a container path stops being a container path. The
- * tool then hands the model a string its own sandbox cannot open.
- *
- * Found while testing the sandboxed search: the fake sandbox returned
- * nothing at all, because the paths it was asked for had been rewritten
- * into host shape on the way through.
- */
-describe('joinPosix', () => {
-    it('joins and keeps the leading slash', () => {
-        expect(joinPosix('/work', 'src', 'a.ts')).toBe('/work/src/a.ts');
-    });
-    it('normalises . and ..', () => {
-        expect(joinPosix('/work', 'src/../lib/a.ts')).toBe('/work/lib/a.ts');
-    });
-    it('collapses repeated separators', () => {
-        expect(joinPosix('/work//', '/src//a.ts')).toBe('/work/src/a.ts');
-    });
-    it('leaves a relative base relative', () => {
-        expect(joinPosix('work', 'a.ts')).toBe('work/a.ts');
-    });
-    it('never produces a host-shaped path', () => {
-        // The whole point: this must not become `C:\work\a.ts` anywhere.
-        expect(joinPosix('/work', 'a.ts')).not.toContain('\\');
-    });
-});
-describe('relativePosix', () => {
-    it('strips a shared prefix', () => {
-        expect(relativePosix('/work', '/work/src/a.ts')).toBe('src/a.ts');
-    });
-    it('returns empty for the root itself', () => {
-        expect(relativePosix('/work', '/work')).toBe('');
-    });
-    it('climbs out when it has to', () => {
-        expect(relativePosix('/work/src', '/work/lib/a.ts')).toBe('../lib/a.ts');
-    });
-    it('does not treat a prefix-sharing sibling as inside', () => {
-        expect(relativePosix('/work', '/work-backup/a.ts').startsWith('..')).toBe(true);
-    });
-});
-describe('resolveWithinPosix', () => {
-    it('accepts a path inside the root', () => {
-        expect(resolveWithinPosix('/work', 'src/a.ts')).toBe('/work/src/a.ts');
-    });
-    it('treats an absent path as the root', () => {
-        expect(resolveWithinPosix('/work', undefined)).toBe('/work');
-    });
-    it('refuses a climb out', () => {
-        expect(() => resolveWithinPosix('/work', '../../etc')).toThrow(/escapes the working directory/);
-    });
-    it('refuses a prefix-sharing sibling', () => {
-        expect(() => resolveWithinPosix('/work', '../work-backup')).toThrow(/escapes/);
-    });
-    it('takes an absolute candidate as sandbox-absolute', () => {
-        expect(resolveWithinPosix('/work', '/work/src')).toBe('/work/src');
-        expect(() => resolveWithinPosix('/work', '/etc/passwd')).toThrow(/escapes/);
-    });
-    it('allows a climb that lands back inside', () => {
-        expect(resolveWithinPosix('/work', 'src/../lib')).toBe('/work/lib');
-    });
-});
-//# sourceMappingURL=posix-path.test.js.map

package/dist/tools/__tests__/posix-path.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"posix-path.test.js","sourceRoot":"","sources":["../../../src/tools/__tests__/posix-path.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAE/E;;;;;;;;;;GAUG;AAEH,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;IACjE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;IAClE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC5C,iEAAiE;QACjE,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAClE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAA;IAChG,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAClE,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/tools/__tests__/sandboxed-search.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=sandboxed-search.test.d.ts.map

package/dist/tools/__tests__/sandboxed-search.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sandboxed-search.test.d.ts","sourceRoot":"","sources":["../../../src/tools/__tests__/sandboxed-search.test.ts"],"names":[],"mappings":""}

package/dist/tools/__tests__/sandboxed-search.test.js

@@ -1,165 +0,0 @@
-import { describe, expect, it, vi } from 'vitest';
-import { GlobTool } from '../builtins/glob.js';
-import { GrepTool } from '../builtins/grep.js';
-import { LsTool } from '../builtins/ls.js';
-/**
- * Both tools reached `node:fs` directly and referenced `context.sandbox`
- * nowhere, so with a container backend wired in the sandbox was not a read
- * boundary at all — every sibling builtin already remembered the branch.
- *
- * The paths they returned were host-relative too, while `read` resolves
- * what it is handed INSIDE the sandbox, so every search-to-read handoff
- * either failed or opened a different file. The two roots genuinely
- * diverge: the executor passes `workingDirectory` unchanged alongside the
- * sandbox and never re-points it at `sandbox.rootDir`.
- */
-const SANDBOX_ROOT = '/sandbox/workspace';
-const HOST_ROOT = '/host/elsewhere';
-function fakeSandbox(files) {
-    const reads = [];
-    return {
-        id: 'sbx_test',
-        rootDir: SANDBOX_ROOT,
-        reads,
-        exec: vi.fn(),
-        writeFile: vi.fn(),
-        readFile: vi.fn(async (path) => {
-            reads.push(path);
-            const key = path.startsWith(SANDBOX_ROOT) ? path.slice(SANDBOX_ROOT.length + 1) : path;
-            const content = files[key.split('\\').join('/')];
-            if (content === undefined)
-                throw new Error(`no such file: ${path}`);
-            return Buffer.from(content, 'utf-8');
-        }),
-        listFiles: vi.fn(async () => Object.keys(files).map((path) => ({ path, size: files[path]?.length ?? 0 }))),
-        destroy: vi.fn(),
-        status: vi.fn(),
-    };
-}
-const context = (sandbox) => ({
-    // Deliberately different from the sandbox root: the executor passes
-    // the host working directory through unchanged, so a tool that
-    // reads this one is reading the wrong filesystem.
-    workingDirectory: HOST_ROOT,
-    sandbox,
-    env: {},
-    abortSignal: new AbortController().signal,
-});
-describe('glob inside a sandbox', () => {
-    it('enumerates through the sandbox, not the host', async () => {
-        const sandbox = fakeSandbox({ 'src/a.ts': 'a', 'src/b.js': 'b' });
-        const result = await GlobTool.execute({ pattern: '**/*.ts' }, context(sandbox));
-        expect(sandbox.listFiles).toHaveBeenCalled();
-        expect(result.output).toContain('src/a.ts');
-        expect(result.output).not.toContain('b.js');
-    });
-    it('returns paths the sandbox-side reader can actually open', async () => {
-        const sandbox = fakeSandbox({ 'src/a.ts': 'a' });
-        const result = await GlobTool.execute({ pattern: '**/*.ts' }, context(sandbox));
-        // A host-relative path here is a string `read` resolves somewhere
-        // else, so the handoff between the two tools has to agree on a
-        // coordinate system.
-        expect(result.output).not.toContain(HOST_ROOT);
-        expect(result.output.trim()).toBe('./src/a.ts');
-    });
-    it('says it searched the sandbox', async () => {
-        const sandbox = fakeSandbox({ 'a.ts': 'a' });
-        const result = await GlobTool.execute({ pattern: '**/*.ts' }, context(sandbox));
-        expect(result.data.sandboxed).toBe(true);
-    });
-    it('refuses a path that climbs out of the sandbox root', async () => {
-        const sandbox = fakeSandbox({ 'a.ts': 'a' });
-        const result = await GlobTool.execute({ pattern: '*.ts', path: '../../etc' }, context(sandbox));
-        expect(result.success).toBe(false);
-        expect(result.error).toMatch(/escapes the working directory/);
-    });
-});
-describe('grep inside a sandbox', () => {
-    const args = (extra = {}) => ({
-        pattern: 'needle',
-        case_sensitive: true,
-        context_lines: 0,
-        max_results: 50,
-        ...extra,
-    });
-    it('reads through the sandbox, not the host', async () => {
-        const sandbox = fakeSandbox({ 'src/a.ts': 'a needle here\n' });
-        const result = await GrepTool.execute(args(), context(sandbox));
-        expect(sandbox.readFile).toHaveBeenCalled();
-        // Asserted on the MATCH line, not on the word. The no-matches
-        // message quotes the pattern back, so checking for "needle" alone
-        // passed on a search that found nothing — which is exactly what this
-        // test existed to catch.
-        expect(result.output).toContain('a needle here');
-        expect(result.output).toContain('Found 1 match');
-    });
-    it('reports paths relative to the sandbox root', async () => {
-        const sandbox = fakeSandbox({ 'src/a.ts': 'a needle here\n' });
-        const result = await GrepTool.execute(args(), context(sandbox));
-        expect(result.output).toContain('./src/a.ts');
-        expect(result.output).not.toContain(HOST_ROOT);
-    });
-    it('honours the include filter through the sandbox listing', async () => {
-        const sandbox = fakeSandbox({ 'a.ts': 'needle\n', 'b.md': 'needle\n' });
-        const result = await GrepTool.execute(args({ include: '*.ts' }), context(sandbox));
-        expect(result.output).toContain('a.ts');
-        expect(result.output).not.toContain('b.md');
-    });
-    it('refuses a path that climbs out of the sandbox root', async () => {
-        const sandbox = fakeSandbox({ 'a.ts': 'needle\n' });
-        const result = await GrepTool.execute(args({ path: '../../etc' }), context(sandbox));
-        expect(result.success).toBe(false);
-        expect(result.error).toMatch(/escapes the working directory/);
-    });
-});
-/**
- * `ls` was the sibling `glob`'s fix claimed already remembered this branch.
- * It did not: it read the host through `node:fs` and named `context.sandbox`
- * nowhere — in the one builtin whose entire job is telling the model what
- * exists, so the model's picture of the filesystem was the host's.
- */
-describe('ls inside a sandbox', () => {
-    const lsArgs = (over = {}) => ({ path: '.', all: false, recursive: false, max_depth: 3, ...over });
-    it('enumerates through the sandbox, not the host', async () => {
-        const sandbox = fakeSandbox({ 'src/a.ts': 'a', 'README.md': 'r' });
-        const result = await LsTool.execute(lsArgs(), context(sandbox));
-        expect(sandbox.listFiles).toHaveBeenCalled();
-        expect(result.data).toMatchObject({ sandboxed: true });
-        expect(result.output).not.toContain(HOST_ROOT);
-    });
-    it('shows one level: a nested file appears as its directory', async () => {
-        const sandbox = fakeSandbox({ 'src/a.ts': 'a', 'README.md': 'r' });
-        const result = await LsTool.execute(lsArgs(), context(sandbox));
-        expect(result.output).toContain('src/');
-        expect(result.output).toContain('README.md');
-        // One level means one level — the nested file is not listed here.
-        expect(result.output).not.toContain('a.ts');
-    });
-    it('returns paths the sandbox-side reader can actually open', async () => {
-        const sandbox = fakeSandbox({ 'src/a.ts': 'a' });
-        const result = await LsTool.execute(lsArgs({ recursive: true }), context(sandbox));
-        expect(result.output).toContain('./src/a.ts');
-        expect(result.output).not.toContain(HOST_ROOT);
-    });
-    it('respects max_depth when recursing', async () => {
-        const sandbox = fakeSandbox({ 'a/b/c/deep.ts': 'd', 'a/shallow.ts': 's' });
-        const result = await LsTool.execute(lsArgs({ recursive: true, max_depth: 2 }), context(sandbox));
-        expect(result.output).toContain('./a/shallow.ts');
-        expect(result.output).not.toContain('deep.ts');
-    });
-    it('hides dotfiles unless asked, at any depth', async () => {
-        const sandbox = fakeSandbox({ '.env': 'SECRET=1', 'src/.hidden/x.ts': 'x', 'src/a.ts': 'a' });
-        const hidden = await LsTool.execute(lsArgs({ recursive: true }), context(sandbox));
-        expect(hidden.output).not.toContain('.env');
-        expect(hidden.output).not.toContain('.hidden');
-        const shown = await LsTool.execute(lsArgs({ recursive: true, all: true }), context(sandbox));
-        expect(shown.output).toContain('.env');
-    });
-    it('refuses a path that climbs out of the sandbox root', async () => {
-        const sandbox = fakeSandbox({ 'a.ts': 'a' });
-        const result = await LsTool.execute(lsArgs({ path: '../../etc' }), context(sandbox));
-        expect(result.success).toBe(false);
-        expect(result.error).toMatch(/escapes the working directory/);
-    });
-});
-//# sourceMappingURL=sandboxed-search.test.js.map

package/dist/tools/__tests__/sandboxed-search.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sandboxed-search.test.js","sourceRoot":"","sources":["../../../src/tools/__tests__/sandboxed-search.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAIjD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAE1C;;;;;;;;;;GAUG;AAEH,MAAM,YAAY,GAAG,oBAAoB,CAAA;AACzC,MAAM,SAAS,GAAG,iBAAiB,CAAA;AAEnC,SAAS,WAAW,CAAC,KAA6B;IACjD,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,OAAO;QACN,EAAE,EAAE,UAAmB;QACvB,OAAO,EAAE,YAAY;QACrB,KAAK;QACL,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;QACb,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;QAClB,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;YACtC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAChB,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YACtF,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;YAChD,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAA;YACnE,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACrC,CAAC,CAAC;QACF,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAC3B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,CAC5E;QACD,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE;QAChB,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;KAC6B,CAAA;AAC9C,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,OAAgB,EAAe,EAAE,CACjD,CAAC;IACA,oEAAoE;IACpE,+DAA+D;IAC/D,kDAAkD;IAClD,gBAAgB,EAAE,SAAS;IAC3B,OAAO;IACP,GAAG,EAAE,EAAE;IACP,WAAW,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM;CACzC,CAA2B,CAAA;AAE7B,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAA;QACjE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,EAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;QAExF,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,gBAAgB,EAAE,CAAA;QAC5C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QAC3C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAA;QAChD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,EAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;QAExF,kEAAkE;QAClE,+DAA+D;QAC/D,qBAAqB;QACrB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;QAC9C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,EAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;QACxF,MAAM,CAAE,MAAM,CAAC,IAAgC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACtE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CACpC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAW,EAC/C,OAAO,CAAC,OAAO,CAAC,CAChB,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACtC,MAAM,IAAI,GAAG,CAAC,QAAgB,EAAE,EAAE,EAAE,CACnC,CAAC;QACA,OAAO,EAAE,QAAQ;QACjB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,EAAE;QACf,GAAG,KAAK;KACR,CAAU,CAAA;IAEZ,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC,CAAA;QAC9D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;QAE/D,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,gBAAgB,EAAE,CAAA;QAC3C,8DAA8D;QAC9D,kEAAkE;QAClE,qEAAqE;QACrE,yBAAyB;QACzB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;QAChD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC,CAAA;QAC9D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;QAE/D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;QAC7C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;QACvE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;QAElF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QACvC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;QACnD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;QACpF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF;;;;;GAKG;AACH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACpC,MAAM,MAAM,GAAG,CAAC,OAAgC,EAAE,EAAE,EAAE,CACrD,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,CAAU,CAAA;IAE9E,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAA;QAClE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;QAE/D,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,gBAAgB,EAAE,CAAA;QAC5C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAA;QAClE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;QAE/D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QACvC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;QAC5C,kEAAkE;QAClE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAA;QAChD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;QAElF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;QAC7C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;QAEhG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;QACjD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAA;QAE7F,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;QAClF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAC3C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;QAE9C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;QAC5F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAE5C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;QACpF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/tools/__tests__/untrusted-envelope.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=untrusted-envelope.test.d.ts.map

package/dist/tools/__tests__/untrusted-envelope.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"untrusted-envelope.test.d.ts","sourceRoot":"","sources":["../../../src/tools/__tests__/untrusted-envelope.test.ts"],"names":[],"mappings":""}