@office-ai/aioncli-core 0.26.0 → 0.30.1

package/dist/src/utils/fetch.test.js

@@ -0,0 +1,206 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect, vi, beforeEach, afterAll } from 'vitest';
+import { isPrivateIp, isPrivateIpAsync, isAddressPrivate, safeLookup, safeFetch, fetchWithTimeout, PrivateIpError, } from './fetch.js';
+import * as dnsPromises from 'node:dns/promises';
+import * as dns from 'node:dns';
+vi.mock('node:dns/promises', () => ({
+    lookup: vi.fn(),
+}));
+// We need to mock node:dns for safeLookup since it uses the callback API
+vi.mock('node:dns', () => ({
+    lookup: vi.fn(),
+}));
+// Mock global fetch
+const originalFetch = global.fetch;
+global.fetch = vi.fn();
+describe('fetch utils', () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+    });
+    afterAll(() => {
+        global.fetch = originalFetch;
+    });
+    describe('isAddressPrivate', () => {
+        it('should identify private IPv4 addresses', () => {
+            expect(isAddressPrivate('10.0.0.1')).toBe(true);
+            expect(isAddressPrivate('127.0.0.1')).toBe(true);
+            expect(isAddressPrivate('172.16.0.1')).toBe(true);
+            expect(isAddressPrivate('192.168.1.1')).toBe(true);
+        });
+        it('should identify non-routable and reserved IPv4 addresses (RFC 6890)', () => {
+            expect(isAddressPrivate('0.0.0.0')).toBe(true);
+            expect(isAddressPrivate('100.64.0.1')).toBe(true);
+            expect(isAddressPrivate('192.0.0.1')).toBe(true);
+            expect(isAddressPrivate('192.0.2.1')).toBe(true);
+            expect(isAddressPrivate('192.88.99.1')).toBe(true);
+            // Benchmark range (198.18.0.0/15)
+            expect(isAddressPrivate('198.18.0.0')).toBe(true);
+            expect(isAddressPrivate('198.18.0.1')).toBe(true);
+            expect(isAddressPrivate('198.19.255.255')).toBe(true);
+            expect(isAddressPrivate('198.51.100.1')).toBe(true);
+            expect(isAddressPrivate('203.0.113.1')).toBe(true);
+            expect(isAddressPrivate('224.0.0.1')).toBe(true);
+            expect(isAddressPrivate('240.0.0.1')).toBe(true);
+        });
+        it('should identify private IPv6 addresses', () => {
+            expect(isAddressPrivate('::1')).toBe(true);
+            expect(isAddressPrivate('fc00::')).toBe(true);
+            expect(isAddressPrivate('fd00::')).toBe(true);
+            expect(isAddressPrivate('fe80::')).toBe(true);
+            expect(isAddressPrivate('febf::')).toBe(true);
+        });
+        it('should identify special local addresses', () => {
+            expect(isAddressPrivate('0.0.0.0')).toBe(true);
+            expect(isAddressPrivate('::')).toBe(true);
+            expect(isAddressPrivate('localhost')).toBe(true);
+        });
+        it('should identify link-local addresses', () => {
+            expect(isAddressPrivate('169.254.169.254')).toBe(true);
+        });
+        it('should identify IPv4-mapped IPv6 private addresses', () => {
+            expect(isAddressPrivate('::ffff:127.0.0.1')).toBe(true);
+            expect(isAddressPrivate('::ffff:10.0.0.1')).toBe(true);
+            expect(isAddressPrivate('::ffff:169.254.169.254')).toBe(true);
+            expect(isAddressPrivate('::ffff:192.168.1.1')).toBe(true);
+            expect(isAddressPrivate('::ffff:172.16.0.1')).toBe(true);
+            expect(isAddressPrivate('::ffff:0.0.0.0')).toBe(true);
+            expect(isAddressPrivate('::ffff:100.64.0.1')).toBe(true);
+            expect(isAddressPrivate('::ffff:a9fe:101')).toBe(true); // 169.254.1.1
+        });
+        it('should identify public addresses as non-private', () => {
+            expect(isAddressPrivate('8.8.8.8')).toBe(false);
+            expect(isAddressPrivate('93.184.216.34')).toBe(false);
+            expect(isAddressPrivate('2001:4860:4860::8888')).toBe(false);
+            expect(isAddressPrivate('::ffff:8.8.8.8')).toBe(false);
+        });
+    });
+    describe('isPrivateIp', () => {
+        it('should identify private IPs in URLs', () => {
+            expect(isPrivateIp('http://10.0.0.1/')).toBe(true);
+            expect(isPrivateIp('https://127.0.0.1:8080/')).toBe(true);
+            expect(isPrivateIp('http://localhost/')).toBe(true);
+            expect(isPrivateIp('http://[::1]/')).toBe(true);
+        });
+        it('should identify public IPs in URLs as non-private', () => {
+            expect(isPrivateIp('http://8.8.8.8/')).toBe(false);
+            expect(isPrivateIp('https://google.com/')).toBe(false);
+        });
+    });
+    describe('isPrivateIpAsync', () => {
+        it('should identify private IPs directly', async () => {
+            expect(await isPrivateIpAsync('http://10.0.0.1/')).toBe(true);
+        });
+        it('should identify domains resolving to private IPs', async () => {
+            vi.mocked(dnsPromises.lookup).mockImplementation(async () => 
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            [{ address: '10.0.0.1', family: 4 }]);
+            expect(await isPrivateIpAsync('http://malicious.com/')).toBe(true);
+        });
+        it('should identify domains resolving to public IPs as non-private', async () => {
+            vi.mocked(dnsPromises.lookup).mockImplementation(async () => 
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            [{ address: '8.8.8.8', family: 4 }]);
+            expect(await isPrivateIpAsync('http://google.com/')).toBe(false);
+        });
+        it('should throw error if DNS resolution fails (fail closed)', async () => {
+            vi.mocked(dnsPromises.lookup).mockRejectedValue(new Error('DNS Error'));
+            await expect(isPrivateIpAsync('http://unreachable.com/')).rejects.toThrow('Failed to verify if URL resolves to private IP');
+        });
+        it('should return false for invalid URLs instead of throwing verification error', async () => {
+            expect(await isPrivateIpAsync('not-a-url')).toBe(false);
+        });
+    });
+    describe('safeLookup', () => {
+        it('should filter out private IPs', async () => {
+            const addresses = [
+                { address: '8.8.8.8', family: 4 },
+                { address: '10.0.0.1', family: 4 },
+            ];
+            vi.mocked(dns.lookup).mockImplementation(((_h, _o, cb) => {
+                cb(null, addresses);
+                // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            }));
+            const result = await new Promise((resolve, reject) => {
+                safeLookup('example.com', { all: true }, (err, filtered) => {
+                    if (err)
+                        reject(err);
+                    else
+                        resolve(filtered);
+                });
+            });
+            expect(result).toHaveLength(1);
+            expect(result[0].address).toBe('8.8.8.8');
+        });
+        it('should allow explicit localhost', async () => {
+            const addresses = [{ address: '127.0.0.1', family: 4 }];
+            vi.mocked(dns.lookup).mockImplementation(((_h, _o, cb) => {
+                cb(null, addresses);
+                // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            }));
+            const result = await new Promise((resolve, reject) => {
+                safeLookup('localhost', { all: true }, (err, filtered) => {
+                    if (err)
+                        reject(err);
+                    else
+                        resolve(filtered);
+                });
+            });
+            expect(result).toHaveLength(1);
+            expect(result[0].address).toBe('127.0.0.1');
+        });
+        it('should error if all resolved IPs are private', async () => {
+            const addresses = [{ address: '10.0.0.1', family: 4 }];
+            vi.mocked(dns.lookup).mockImplementation(((_h, _o, cb) => {
+                cb(null, addresses);
+                // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            }));
+            await expect(new Promise((resolve, reject) => {
+                safeLookup('malicious.com', { all: true }, (err, filtered) => {
+                    if (err)
+                        reject(err);
+                    else
+                        resolve(filtered);
+                });
+            })).rejects.toThrow(PrivateIpError);
+        });
+    });
+    describe('safeFetch', () => {
+        it('should forward to fetch with dispatcher', async () => {
+            vi.mocked(global.fetch).mockResolvedValue(new Response('ok'));
+            const response = await safeFetch('https://example.com');
+            expect(response.status).toBe(200);
+            expect(global.fetch).toHaveBeenCalledWith('https://example.com', expect.objectContaining({
+                dispatcher: expect.any(Object),
+            }));
+        });
+        it('should handle Refusing to connect errors', async () => {
+            vi.mocked(global.fetch).mockRejectedValue(new PrivateIpError());
+            await expect(safeFetch('http://10.0.0.1')).rejects.toThrow('Access to private network is blocked');
+        });
+    });
+    describe('fetchWithTimeout', () => {
+        it('should handle timeouts', async () => {
+            vi.mocked(global.fetch).mockImplementation((_input, init) => new Promise((_resolve, reject) => {
+                if (init?.signal) {
+                    init.signal.addEventListener('abort', () => {
+                        const error = new Error('The operation was aborted');
+                        error.name = 'AbortError';
+                        // @ts-expect-error - for mocking purposes
+                        error.code = 'ABORT_ERR';
+                        reject(error);
+                    });
+                }
+            }));
+            await expect(fetchWithTimeout('http://example.com', 50)).rejects.toThrow('Request timed out after 50ms');
+        });
+        it('should handle private IP errors via handleFetchError', async () => {
+            vi.mocked(global.fetch).mockRejectedValue(new PrivateIpError());
+            await expect(fetchWithTimeout('http://10.0.0.1', 1000)).rejects.toThrow('Access to private network is blocked: http://10.0.0.1');
+        });
+    });
+});
+//# sourceMappingURL=fetch.test.js.map

package/dist/src/utils/fetch.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.test.js","sourceRoot":"","sources":["../../../src/utils/fetch.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACxE,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,WAAW,MAAM,mBAAmB,CAAC;AACjD,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAEhC,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC;IAClC,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;CAChB,CAAC,CAAC,CAAC;AAEJ,yEAAyE;AACzE,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IACzB,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;CAChB,CAAC,CAAC,CAAC;AAEJ,oBAAoB;AACpB,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;AACnC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAEvB,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,EAAE;QACZ,MAAM,CAAC,KAAK,GAAG,aAAa,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YAChD,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjD,MAAM,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;YAC7E,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjD,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjD,MAAM,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,kCAAkC;YAClC,MAAM,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtD,MAAM,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpD,MAAM,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjD,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YAChD,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1C,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC9C,MAAM,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;YAC5D,MAAM,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxD,MAAM,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvD,MAAM,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9D,MAAM,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1D,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,MAAM,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtD,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,MAAM,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc;QACxE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChD,MAAM,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtD,MAAM,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7D,MAAM,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1D,MAAM,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpD,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnD,MAAM,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACpD,MAAM,CAAC,MAAM,gBAAgB,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,kBAAkB,CAC9C,KAAK,IAAI,EAAE;YACT,8DAA8D;YAC9D,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,CAAQ,CAC9C,CAAC;YACF,MAAM,CAAC,MAAM,gBAAgB,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;YAC9E,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,kBAAkB,CAC9C,KAAK,IAAI,EAAE;YACT,8DAA8D;YAC9D,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,CAAQ,CAC7C,CAAC;YACF,MAAM,CAAC,MAAM,gBAAgB,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;YACxE,MAAM,MAAM,CAAC,gBAAgB,CAAC,yBAAyB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACvE,gDAAgD,CACjD,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;YAC3F,MAAM,CAAC,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;QAC1B,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,MAAM,SAAS,GAAG;gBAChB,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE;gBACjC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE;aACnC,CAAC;YAEF,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,CACxC,EAAU,EACV,EAAqB,EACrB,EAGS,EACT,EAAE;gBACF,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBACpB,8DAA8D;YAChE,CAAC,CAAQ,CAAC,CAAC;YAEX,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAE9B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACpB,UAAU,CAAC,aAAa,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE;oBACzD,IAAI,GAAG;wBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;wBAChB,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACzB,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;YAC/C,MAAM,SAAS,GAAG,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;YAExD,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,CACxC,EAAU,EACV,EAAqB,EACrB,EAGS,EACT,EAAE;gBACF,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBACpB,8DAA8D;YAChE,CAAC,CAAQ,CAAC,CAAC;YAEX,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAE9B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACpB,UAAU,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE;oBACvD,IAAI,GAAG;wBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;wBAChB,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACzB,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,SAAS,GAAG,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;YAEvD,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,CACxC,EAAU,EACV,EAAqB,EACrB,EAGS,EACT,EAAE;gBACF,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBACpB,8DAA8D;YAChE,CAAC,CAAQ,CAAC,CAAC;YAEX,MAAM,MAAM,CACV,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC9B,UAAU,CAAC,eAAe,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE;oBAC3D,IAAI,GAAG;wBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;wBAChB,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACzB,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;QACzB,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACvD,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YAE9D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,qBAAqB,CAAC,CAAC;YACxD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CACvC,qBAAqB,EACrB,MAAM,CAAC,gBAAgB,CAAC;gBACtB,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;aAC/B,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,IAAI,cAAc,EAAE,CAAC,CAAC;YAEhE,MAAM,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACxD,sCAAsC,CACvC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,EAAE,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;YACtC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,kBAAkB,CACxC,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CACf,IAAI,OAAO,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;gBAC/B,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;oBACjB,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;wBACzC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;wBACrD,KAAK,CAAC,IAAI,GAAG,YAAY,CAAC;wBAC1B,0CAA0C;wBAC1C,KAAK,CAAC,IAAI,GAAG,WAAW,CAAC;wBACzB,MAAM,CAAC,KAAK,CAAC,CAAC;oBAChB,CAAC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CACL,CAAC;YAEF,MAAM,MAAM,CAAC,gBAAgB,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACtE,8BAA8B,CAC/B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,IAAI,cAAc,EAAE,CAAC,CAAC;YAEhE,MAAM,MAAM,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACrE,uDAAuD,CACxD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/utils/fileDiffUtils.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { FileDiff } from '../tools/tools.js';
+import type { ToolCallRecord } from '../services/chatRecordingService.js';
+/**
+ * Safely extracts the FileDiff object from a tool call's resultDisplay.
+ * This helper performs runtime checks to ensure the object conforms to the FileDiff structure.
+ * @param resultDisplay The resultDisplay property of a ToolCallRecord.
+ * @returns The FileDiff object if found and valid, otherwise undefined.
+ */
+export declare function getFileDiffFromResultDisplay(resultDisplay: ToolCallRecord['resultDisplay']): FileDiff | undefined;
+export declare function computeModelAddedAndRemovedLines(stats: FileDiff['diffStat'] | undefined): {
+    addedLines: number;
+    removedLines: number;
+};

package/dist/src/utils/fileDiffUtils.js

@@ -0,0 +1,37 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Safely extracts the FileDiff object from a tool call's resultDisplay.
+ * This helper performs runtime checks to ensure the object conforms to the FileDiff structure.
+ * @param resultDisplay The resultDisplay property of a ToolCallRecord.
+ * @returns The FileDiff object if found and valid, otherwise undefined.
+ */
+export function getFileDiffFromResultDisplay(resultDisplay) {
+    if (resultDisplay &&
+        typeof resultDisplay === 'object' &&
+        'diffStat' in resultDisplay &&
+        typeof resultDisplay.diffStat === 'object' &&
+        resultDisplay.diffStat !== null) {
+        const diffStat = resultDisplay.diffStat;
+        if (diffStat) {
+            return resultDisplay;
+        }
+    }
+    return undefined;
+}
+export function computeModelAddedAndRemovedLines(stats) {
+    if (!stats) {
+        return {
+            addedLines: 0,
+            removedLines: 0,
+        };
+    }
+    return {
+        addedLines: stats.model_added_lines,
+        removedLines: stats.model_removed_lines,
+    };
+}
+//# sourceMappingURL=fileDiffUtils.js.map

package/dist/src/utils/fileDiffUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileDiffUtils.js","sourceRoot":"","sources":["../../../src/utils/fileDiffUtils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,aAA8C;IAE9C,IACE,aAAa;QACb,OAAO,aAAa,KAAK,QAAQ;QACjC,UAAU,IAAI,aAAa;QAC3B,OAAO,aAAa,CAAC,QAAQ,KAAK,QAAQ;QAC1C,aAAa,CAAC,QAAQ,KAAK,IAAI,EAC/B,CAAC;QACD,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAgC,CAAC;QAChE,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,aAAa,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,KAAuC;IAKvC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,UAAU,EAAE,CAAC;YACb,YAAY,EAAE,CAAC;SAChB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,iBAAiB;QACnC,YAAY,EAAE,KAAK,CAAC,mBAAmB;KACxC,CAAC;AACJ,CAAC"}

package/dist/src/utils/fileDiffUtils.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};

package/dist/src/utils/fileDiffUtils.test.js

@@ -0,0 +1,84 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect } from 'vitest';
+import { getFileDiffFromResultDisplay, computeModelAddedAndRemovedLines, } from './fileDiffUtils.js';
+describe('fileDiffUtils', () => {
+    describe('getFileDiffFromResultDisplay', () => {
+        it('returns undefined if resultDisplay is undefined', () => {
+            expect(getFileDiffFromResultDisplay(undefined)).toBeUndefined();
+        });
+        it('returns undefined if resultDisplay is not an object', () => {
+            expect(getFileDiffFromResultDisplay('string')).toBeUndefined();
+        });
+        it('returns undefined if resultDisplay missing diffStat', () => {
+            const resultDisplay = {
+                fileName: 'file.txt',
+            };
+            expect(getFileDiffFromResultDisplay(resultDisplay)).toBeUndefined();
+        });
+        it('returns the FileDiff object if structure is valid', () => {
+            const validDiffStat = {
+                model_added_lines: 1,
+                model_removed_lines: 2,
+                user_added_lines: 3,
+                user_removed_lines: 4,
+                model_added_chars: 10,
+                model_removed_chars: 20,
+                user_added_chars: 30,
+                user_removed_chars: 40,
+            };
+            const resultDisplay = {
+                fileName: 'file.txt',
+                diffStat: validDiffStat,
+            };
+            const result = getFileDiffFromResultDisplay(resultDisplay);
+            expect(result).toBe(resultDisplay);
+        });
+    });
+    describe('computeAddedAndRemovedLines', () => {
+        it('returns 0 added and 0 removed if stats is undefined', () => {
+            expect(computeModelAddedAndRemovedLines(undefined)).toEqual({
+                addedLines: 0,
+                removedLines: 0,
+            });
+        });
+        it('correctly sums added and removed lines from stats', () => {
+            const stats = {
+                model_added_lines: 10,
+                model_removed_lines: 5,
+                user_added_lines: 2,
+                user_removed_lines: 1,
+                model_added_chars: 100,
+                model_removed_chars: 50,
+                user_added_chars: 20,
+                user_removed_chars: 10,
+            };
+            const result = computeModelAddedAndRemovedLines(stats);
+            expect(result).toEqual({
+                addedLines: 10,
+                removedLines: 5,
+            });
+        });
+        it('handles zero values correctly', () => {
+            const stats = {
+                model_added_lines: 0,
+                model_removed_lines: 0,
+                user_added_lines: 0,
+                user_removed_lines: 0,
+                model_added_chars: 0,
+                model_removed_chars: 0,
+                user_added_chars: 0,
+                user_removed_chars: 0,
+            };
+            const result = computeModelAddedAndRemovedLines(stats);
+            expect(result).toEqual({
+                addedLines: 0,
+                removedLines: 0,
+            });
+        });
+    });
+});
+//# sourceMappingURL=fileDiffUtils.test.js.map

package/dist/src/utils/fileDiffUtils.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileDiffUtils.test.js","sourceRoot":"","sources":["../../../src/utils/fileDiffUtils.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,4BAA4B,EAC5B,gCAAgC,GACjC,MAAM,oBAAoB,CAAC;AAG5B,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;QAC5C,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,CAAC,4BAA4B,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC7D,MAAM,CACJ,4BAA4B,CAAC,QAA6B,CAAC,CAC5D,CAAC,aAAa,EAAE,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC7D,MAAM,aAAa,GAAG;gBACpB,QAAQ,EAAE,UAAU;aACrB,CAAC;YACF,MAAM,CACJ,4BAA4B,CAAC,aAAkC,CAAC,CACjE,CAAC,aAAa,EAAE,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,MAAM,aAAa,GAAG;gBACpB,iBAAiB,EAAE,CAAC;gBACpB,mBAAmB,EAAE,CAAC;gBACtB,gBAAgB,EAAE,CAAC;gBACnB,kBAAkB,EAAE,CAAC;gBACrB,iBAAiB,EAAE,EAAE;gBACrB,mBAAmB,EAAE,EAAE;gBACvB,gBAAgB,EAAE,EAAE;gBACpB,kBAAkB,EAAE,EAAE;aACvB,CAAC;YACF,MAAM,aAAa,GAAG;gBACpB,QAAQ,EAAE,UAAU;gBACpB,QAAQ,EAAE,aAAa;aACxB,CAAC;YAEF,MAAM,MAAM,GAAG,4BAA4B,CACzC,aAAkC,CACnC,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;QAC3C,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC7D,MAAM,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;gBAC1D,UAAU,EAAE,CAAC;gBACb,YAAY,EAAE,CAAC;aAChB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,MAAM,KAAK,GAAyB;gBAClC,iBAAiB,EAAE,EAAE;gBACrB,mBAAmB,EAAE,CAAC;gBACtB,gBAAgB,EAAE,CAAC;gBACnB,kBAAkB,EAAE,CAAC;gBACrB,iBAAiB,EAAE,GAAG;gBACtB,mBAAmB,EAAE,EAAE;gBACvB,gBAAgB,EAAE,EAAE;gBACpB,kBAAkB,EAAE,EAAE;aACvB,CAAC;YAEF,MAAM,MAAM,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;gBACrB,UAAU,EAAE,EAAE;gBACd,YAAY,EAAE,CAAC;aAChB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACvC,MAAM,KAAK,GAAyB;gBAClC,iBAAiB,EAAE,CAAC;gBACpB,mBAAmB,EAAE,CAAC;gBACtB,gBAAgB,EAAE,CAAC;gBACnB,kBAAkB,EAAE,CAAC;gBACrB,iBAAiB,EAAE,CAAC;gBACpB,mBAAmB,EAAE,CAAC;gBACtB,gBAAgB,EAAE,CAAC;gBACnB,kBAAkB,EAAE,CAAC;aACtB,CAAC;YAEF,MAAM,MAAM,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;gBACrB,UAAU,EAAE,CAAC;gBACb,YAAY,EAAE,CAAC;aAChB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/utils/fileUtils.d.ts

@@ -45,6 +45,16 @@ export declare function getSpecificMimeType(filePath: string): string | undefine
  * @returns True if the path is within the root directory, false otherwise.
  */
 export declare function isWithinRoot(pathToCheck: string, rootDirectory: string): boolean;
+/**
+ * Safely resolves a path to its real path if it exists, otherwise returns the absolute resolved path.
+ */
+export declare function getRealPath(filePath: string): string;
+/**
+ * Checks if a file's content is empty or contains only whitespace.
+ * Efficiently checks file size first, and only samples the beginning of the file.
+ * Honors Unicode BOM encodings.
+ */
+export declare function isEmpty(filePath: string): Promise<boolean>;
 /**
  * Heuristic: determine if a file is likely binary.
  * Now BOM-aware: if a Unicode BOM is detected, we treat it as text.
@@ -76,8 +86,22 @@ export interface ProcessedFileReadResult {
  */
 export declare function processSingleFileContent(filePath: string, rootDirectory: string, fileSystemService: FileSystemService, offset?: number, limit?: number): Promise<ProcessedFileReadResult>;
 export declare function fileExists(filePath: string): Promise<boolean>;
-export declare function saveTruncatedContent(content: string, callId: string, projectTempDir: string, threshold: number, truncateLines: number): Promise<{
-    content: string;
-    outputFile?: string;
+/**
+ * Sanitizes a string for use as a filename part by removing path traversal
+ * characters and other non-alphanumeric characters.
+ */
+export declare function sanitizeFilenamePart(part: string): string;
+/**
+ * Formats a truncated message for tool output.
+ * Shows the first 20% and last 80% of the allowed characters with a marker in between.
+ */
+export declare function formatTruncatedToolOutput(contentStr: string, outputFile: string, maxChars: number): string;
+/**
+ * Saves tool output to a temporary file for later retrieval.
+ */
+export declare const TOOL_OUTPUTS_DIR = "tool-outputs";
+export declare function saveTruncatedToolOutput(content: string, toolName: string, id: string | number, // Accept string (callId) or number (truncationId)
+projectTempDir: string, sessionId?: string): Promise<{
+    outputFile: string;
 }>;
 export {};

package/dist/src/utils/fileUtils.js

@@ -12,7 +12,6 @@ import { ToolErrorType } from '../tools/tool-error.js';
 import { BINARY_EXTENSIONS } from './ignorePatterns.js';
 import { createRequire as createModuleRequire } from 'node:module';
 import { debugLogger } from './debugLogger.js';
-import { READ_FILE_TOOL_NAME } from '../tools/tool-names.js';
 const requireModule = createModuleRequire(import.meta.url);
 /**
  * Try multiple strategies to find a WASM file:
@@ -29,7 +28,7 @@ export async function readWasmBinaryFromDisk(specifier) {
         return new Uint8Array(buffer);
     }
     catch (error) {
-        errors.push(error);
+        errors.push(error instanceof Error ? error : new Error(String(error)));
     }
     // Strategy 2: require.resolve from process.cwd() context (for Electron)
     try {
@@ -39,7 +38,7 @@ export async function readWasmBinaryFromDisk(specifier) {
         return new Uint8Array(buffer);
     }
     catch (error) {
-        errors.push(error);
+        errors.push(error instanceof Error ? error : new Error(String(error)));
     }
     // Strategy 3: Direct path lookup in node_modules
     try {
@@ -48,7 +47,7 @@ export async function readWasmBinaryFromDisk(specifier) {
         return new Uint8Array(buffer);
     }
     catch (error) {
-        errors.push(error);
+        errors.push(error instanceof Error ? error : new Error(String(error)));
     }
     // Strategy 4: Check if running in Electron and try app.getAppPath()
     try {
@@ -239,6 +238,54 @@ export function isWithinRoot(pathToCheck, rootDirectory) {
     return (normalizedPathToCheck === normalizedRootDirectory ||
         normalizedPathToCheck.startsWith(rootWithSeparator));
 }
+/**
+ * Safely resolves a path to its real path if it exists, otherwise returns the absolute resolved path.
+ */
+export function getRealPath(filePath) {
+    try {
+        return fs.realpathSync(filePath);
+    }
+    catch {
+        return path.resolve(filePath);
+    }
+}
+/**
+ * Checks if a file's content is empty or contains only whitespace.
+ * Efficiently checks file size first, and only samples the beginning of the file.
+ * Honors Unicode BOM encodings.
+ */
+export async function isEmpty(filePath) {
+    try {
+        const stats = await fsPromises.stat(filePath);
+        if (stats.size === 0)
+            return true;
+        // Sample up to 1KB to check for non-whitespace content.
+        // If a file is larger than 1KB and contains only whitespace,
+        // it's an extreme edge case we can afford to read slightly more of if needed,
+        // but for most valid plans/files, this is sufficient.
+        const fd = await fsPromises.open(filePath, 'r');
+        try {
+            const { buffer } = await fd.read({
+                buffer: Buffer.alloc(Math.min(1024, stats.size)),
+                offset: 0,
+                length: Math.min(1024, stats.size),
+                position: 0,
+            });
+            const bom = detectBOM(buffer);
+            const content = bom
+                ? buffer.subarray(bom.bomLength).toString('utf8')
+                : buffer.toString('utf8');
+            return content.trim().length === 0;
+        }
+        finally {
+            await fd.close();
+        }
+    }
+    catch {
+        // If file is unreadable, we treat it as empty/invalid for validation purposes
+        return true;
+    }
+}
 /**
  * Heuristic: determine if a file is likely binary.
  * Now BOM-aware: if a Unicode BOM is detected, we treat it as text.
@@ -309,11 +356,13 @@ export async function detectFileType(filePath) {
         if (lookedUpMimeType.startsWith('image/')) {
             return 'image';
         }
-        if (lookedUpMimeType.startsWith('audio/')) {
-            return 'audio';
-        }
-        if (lookedUpMimeType.startsWith('video/')) {
-            return 'video';
+        // Verify audio/video with content check to avoid MIME misidentification (#16888)
+        if (lookedUpMimeType.startsWith('audio/') ||
+            lookedUpMimeType.startsWith('video/')) {
+            if (!(await isBinaryFile(filePath))) {
+                return 'text';
+            }
+            return lookedUpMimeType.startsWith('audio/') ? 'audio' : 'video';
         }
         if (lookedUpMimeType === 'application/pdf') {
             return 'pdf';
@@ -484,56 +533,51 @@ export async function fileExists(filePath) {
         return false;
     }
 }
-export async function saveTruncatedContent(content, callId, projectTempDir, threshold, truncateLines) {
-    if (content.length <= threshold) {
-        return { content };
-    }
-    let lines = content.split('\n');
-    let fileContent = content;
-    // If the content is long but has few lines, wrap it to enable line-based truncation.
-    if (lines.length <= truncateLines) {
-        const wrapWidth = 120; // A reasonable width for wrapping.
-        const wrappedLines = [];
-        for (const line of lines) {
-            if (line.length > wrapWidth) {
-                for (let i = 0; i < line.length; i += wrapWidth) {
-                    wrappedLines.push(line.substring(i, i + wrapWidth));
-                }
-            }
-            else {
-                wrappedLines.push(line);
-            }
-        }
-        lines = wrappedLines;
-        fileContent = lines.join('\n');
-    }
-    const head = Math.floor(truncateLines / 5);
-    const beginning = lines.slice(0, head);
-    const end = lines.slice(-(truncateLines - head));
-    const truncatedContent = beginning.join('\n') + '\n... [CONTENT TRUNCATED] ...\n' + end.join('\n');
-    // Sanitize callId to prevent path traversal.
-    const safeFileName = `${path.basename(callId)}.output`;
-    const outputFile = path.join(projectTempDir, safeFileName);
-    try {
-        await fsPromises.writeFile(outputFile, fileContent);
-        return {
-            content: `Tool output was too large and has been truncated.
-The full output has been saved to: ${outputFile}
-To read the complete output, use the ${READ_FILE_TOOL_NAME} tool with the absolute file path above. For large files, you can use the offset and limit parameters to read specific sections:
-- ${READ_FILE_TOOL_NAME} tool with offset=0, limit=100 to see the first 100 lines
-- ${READ_FILE_TOOL_NAME} tool with offset=N to skip N lines from the beginning
-- ${READ_FILE_TOOL_NAME} tool with limit=M to read only M lines at a time
-The truncated output below shows the beginning and end of the content. The marker '... [CONTENT TRUNCATED] ...' indicates where content was removed.
-This allows you to efficiently examine different parts of the output without loading the entire file.
-Truncated part of the output:
-${truncatedContent}`,
-            outputFile,
-        };
-    }
-    catch (_error) {
-        return {
-            content: truncatedContent + `\n[Note: Could not save full output to file]`,
-        };
-    }
+/**
+ * Sanitizes a string for use as a filename part by removing path traversal
+ * characters and other non-alphanumeric characters.
+ */
+export function sanitizeFilenamePart(part) {
+    return part.replace(/[^a-zA-Z0-9_-]/g, '_');
+}
+/**
+ * Formats a truncated message for tool output.
+ * Shows the first 20% and last 80% of the allowed characters with a marker in between.
+ */
+export function formatTruncatedToolOutput(contentStr, outputFile, maxChars) {
+    if (contentStr.length <= maxChars)
+        return contentStr;
+    const headChars = Math.floor(maxChars * 0.2);
+    const tailChars = maxChars - headChars;
+    const head = contentStr.slice(0, headChars);
+    const tail = contentStr.slice(-tailChars);
+    const omittedChars = contentStr.length - headChars - tailChars;
+    return `Output too large. Showing first ${headChars.toLocaleString()} and last ${tailChars.toLocaleString()} characters. For full output see: ${outputFile}
+${head}
+
+... [${omittedChars.toLocaleString()} characters omitted] ...
+
+${tail}`;
+}
+/**
+ * Saves tool output to a temporary file for later retrieval.
+ */
+export const TOOL_OUTPUTS_DIR = 'tool-outputs';
+export async function saveTruncatedToolOutput(content, toolName, id, // Accept string (callId) or number (truncationId)
+projectTempDir, sessionId) {
+    const safeToolName = sanitizeFilenamePart(toolName).toLowerCase();
+    const safeId = sanitizeFilenamePart(id.toString()).toLowerCase();
+    const fileName = safeId.startsWith(safeToolName)
+        ? `${safeId}.txt`
+        : `${safeToolName}_${safeId}.txt`;
+    let toolOutputDir = path.join(projectTempDir, TOOL_OUTPUTS_DIR);
+    if (sessionId) {
+        const safeSessionId = sanitizeFilenamePart(sessionId);
+        toolOutputDir = path.join(toolOutputDir, `session-${safeSessionId}`);
+    }
+    const outputFile = path.join(toolOutputDir, fileName);
+    await fsPromises.mkdir(toolOutputDir, { recursive: true });
+    await fsPromises.writeFile(outputFile, content);
+    return { outputFile };
 }
 //# sourceMappingURL=fileUtils.js.map